@duckmind/dm-linux-x64 0.63.9 → 0.64.6

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (1472) hide show
  1. package/dm +0 -0
  2. package/extensions/.dm-extensions.json +544 -8
  3. package/extensions/dm-lens/clients/actionable-warnings-logger.js +30 -0
  4. package/extensions/dm-lens/clients/actionable-warnings.js +1002 -0
  5. package/extensions/dm-lens/clients/advisory-provenance.js +297 -0
  6. package/extensions/dm-lens/clients/agent-behavior-client.js +93 -0
  7. package/extensions/dm-lens/clients/agent-nudge.js +151 -0
  8. package/extensions/dm-lens/clients/ast-grep-client.js +546 -0
  9. package/extensions/dm-lens/clients/ast-grep-rule-manager.js +82 -0
  10. package/extensions/dm-lens/clients/ast-grep-tool-logger.js +91 -0
  11. package/extensions/dm-lens/clients/ast-grep-types.js +0 -0
  12. package/extensions/dm-lens/clients/ast-grep-yaml-synth.js +109 -0
  13. package/extensions/dm-lens/clients/atomic-write-staging.js +66 -0
  14. package/extensions/dm-lens/clients/atomic-write.js +41 -0
  15. package/extensions/dm-lens/clients/availability-probe-flight.js +11 -0
  16. package/extensions/dm-lens/clients/bash-file-access.js +693 -0
  17. package/extensions/dm-lens/clients/biome-client.js +222 -0
  18. package/extensions/dm-lens/clients/blocker-freshness.js +238 -0
  19. package/extensions/dm-lens/clients/blocker-past-eof.js +52 -0
  20. package/extensions/dm-lens/clients/bootstrap.js +260 -0
  21. package/extensions/dm-lens/clients/bounded-cache.js +105 -0
  22. package/extensions/dm-lens/clients/bounded-pid-file-lock.js +173 -0
  23. package/extensions/dm-lens/clients/bounded-telemetry.js +107 -0
  24. package/extensions/dm-lens/clients/build-identity.js +45 -0
  25. package/extensions/dm-lens/clients/bus-events-logger.js +54 -0
  26. package/extensions/dm-lens/clients/bus-publish.js +121 -0
  27. package/extensions/dm-lens/clients/cache/rule-cache.js +98 -0
  28. package/extensions/dm-lens/clients/cache-manager.js +316 -0
  29. package/extensions/dm-lens/clients/cache-observability.js +747 -0
  30. package/extensions/dm-lens/clients/call-graph.js +628 -0
  31. package/extensions/dm-lens/clients/cargo-manifest.js +148 -0
  32. package/extensions/dm-lens/clients/cascade-budget.js +55 -0
  33. package/extensions/dm-lens/clients/cascade-format.js +82 -0
  34. package/extensions/dm-lens/clients/cascade-logger.js +28 -0
  35. package/extensions/dm-lens/clients/cascade-types.js +1 -0
  36. package/extensions/dm-lens/clients/child-unref.js +63 -0
  37. package/extensions/dm-lens/clients/code-quality-warnings.js +190 -0
  38. package/extensions/dm-lens/clients/codebase-model.js +110 -0
  39. package/extensions/dm-lens/clients/collateral-test-role.js +8 -0
  40. package/extensions/dm-lens/clients/complexity-client.js +401 -0
  41. package/extensions/dm-lens/clients/config-core/deny.js +120 -0
  42. package/extensions/dm-lens/clients/config-core/index.js +68 -0
  43. package/extensions/dm-lens/clients/config-core/merge.js +255 -0
  44. package/extensions/dm-lens/clients/config-core/normalize.js +235 -0
  45. package/extensions/dm-lens/clients/config-core/process-spec.js +153 -0
  46. package/extensions/dm-lens/clients/config-core/provenance.js +55 -0
  47. package/extensions/dm-lens/clients/config-core/records.js +79 -0
  48. package/extensions/dm-lens/clients/config-core/resolve.js +51 -0
  49. package/extensions/dm-lens/clients/config-core/safe-object.js +22 -0
  50. package/extensions/dm-lens/clients/config-core/schema.js +93 -0
  51. package/extensions/dm-lens/clients/config-diagnostic-codes.js +88 -0
  52. package/extensions/dm-lens/clients/config-locations.js +61 -0
  53. package/extensions/dm-lens/clients/config-resolve.js +372 -0
  54. package/extensions/dm-lens/clients/config-schema.js +87 -0
  55. package/extensions/dm-lens/clients/config-warn.js +148 -0
  56. package/extensions/dm-lens/clients/console-guard-install.js +7 -0
  57. package/extensions/dm-lens/clients/cooperative-budget.js +36 -0
  58. package/extensions/dm-lens/clients/dead-code-client.js +347 -0
  59. package/extensions/dm-lens/clients/dead-code-logger.js +21 -0
  60. package/extensions/dm-lens/clients/deadline-utils.js +117 -0
  61. package/extensions/dm-lens/clients/debug-handles.js +121 -0
  62. package/extensions/dm-lens/clients/debug-heap.js +80 -0
  63. package/extensions/dm-lens/clients/deferred-lsp-work.js +33 -0
  64. package/extensions/dm-lens/clients/degradation-ledger.js +260 -0
  65. package/extensions/dm-lens/clients/demoted-finding-render.js +61 -0
  66. package/extensions/dm-lens/clients/dependency-checker.js +553 -0
  67. package/extensions/dm-lens/clients/deps/ast-grep-napi.js +17 -0
  68. package/extensions/dm-lens/clients/deps/dm-host-deps.js +10 -0
  69. package/extensions/dm-lens/clients/deps/dm-tui-compat.js +58 -0
  70. package/extensions/dm-lens/clients/deps/js-yaml.js +7 -0
  71. package/extensions/dm-lens/clients/deps/minimatch.js +6 -0
  72. package/extensions/dm-lens/clients/deps/pidusage.js +5 -0
  73. package/extensions/dm-lens/clients/deps/typebox.js +5 -0
  74. package/extensions/dm-lens/clients/deps/vscode-jsonrpc.js +8 -0
  75. package/extensions/dm-lens/clients/deps/web-tree-sitter.js +11 -0
  76. package/extensions/dm-lens/clients/diagnostic-dispositions.js +303 -0
  77. package/extensions/dm-lens/clients/diagnostic-line-freshness.js +144 -0
  78. package/extensions/dm-lens/clients/diagnostic-logger.js +60 -0
  79. package/extensions/dm-lens/clients/diagnostic-tracker.js +89 -0
  80. package/extensions/dm-lens/clients/diagnostics-publish.js +138 -0
  81. package/extensions/dm-lens/clients/dispatch/auxiliary-lsp.js +152 -0
  82. package/extensions/dm-lens/clients/dispatch/collect-later-tier.js +28 -0
  83. package/extensions/dm-lens/clients/dispatch/diagnostic-taxonomy.js +58 -0
  84. package/extensions/dm-lens/clients/dispatch/dispatcher.js +976 -0
  85. package/extensions/dm-lens/clients/dispatch/fact-provider-types.js +0 -0
  86. package/extensions/dm-lens/clients/dispatch/fact-rule-runner.js +17 -0
  87. package/extensions/dm-lens/clients/dispatch/fact-runner.js +18 -0
  88. package/extensions/dm-lens/clients/dispatch/fact-scheduler.js +52 -0
  89. package/extensions/dm-lens/clients/dispatch/fact-store.js +199 -0
  90. package/extensions/dm-lens/clients/dispatch/facts/comment-facts.js +20 -0
  91. package/extensions/dm-lens/clients/dispatch/facts/file-content.js +18 -0
  92. package/extensions/dm-lens/clients/dispatch/facts/function-facts.js +285 -0
  93. package/extensions/dm-lens/clients/dispatch/facts/import-facts.js +171 -0
  94. package/extensions/dm-lens/clients/dispatch/facts/tree-sitter-facts.js +24 -0
  95. package/extensions/dm-lens/clients/dispatch/facts/try-catch-facts.js +99 -0
  96. package/extensions/dm-lens/clients/dispatch/indent-detect.js +27 -0
  97. package/extensions/dm-lens/clients/dispatch/inline-suppressions.js +33 -0
  98. package/extensions/dm-lens/clients/dispatch/integration.js +1464 -0
  99. package/extensions/dm-lens/clients/dispatch/lazy.js +11 -0
  100. package/extensions/dm-lens/clients/dispatch/pending-runner-findings.js +75 -0
  101. package/extensions/dm-lens/clients/dispatch/plan.js +281 -0
  102. package/extensions/dm-lens/clients/dispatch/priorities.js +14 -0
  103. package/extensions/dm-lens/clients/dispatch/rule-id-normalize.js +42 -0
  104. package/extensions/dm-lens/clients/dispatch/rule-policy.js +73 -0
  105. package/extensions/dm-lens/clients/dispatch/rules/async-noise.js +31 -0
  106. package/extensions/dm-lens/clients/dispatch/rules/async-unnecessary-wrapper.js +27 -0
  107. package/extensions/dm-lens/clients/dispatch/rules/cors-wildcard.js +35 -0
  108. package/extensions/dm-lens/clients/dispatch/rules/error-obscuring.js +29 -0
  109. package/extensions/dm-lens/clients/dispatch/rules/error-swallowing.js +29 -0
  110. package/extensions/dm-lens/clients/dispatch/rules/framework-call-noise.js +31 -0
  111. package/extensions/dm-lens/clients/dispatch/rules/high-complexity.js +56 -0
  112. package/extensions/dm-lens/clients/dispatch/rules/high-fan-out.js +48 -0
  113. package/extensions/dm-lens/clients/dispatch/rules/high-import-coupling.js +31 -0
  114. package/extensions/dm-lens/clients/dispatch/rules/missing-error-propagation.js +45 -0
  115. package/extensions/dm-lens/clients/dispatch/rules/no-commented-credentials.js +46 -0
  116. package/extensions/dm-lens/clients/dispatch/rules/pass-through-wrappers.js +38 -0
  117. package/extensions/dm-lens/clients/dispatch/rules/placeholder-comments.js +40 -0
  118. package/extensions/dm-lens/clients/dispatch/rules/unsafe-boundary.js +101 -0
  119. package/extensions/dm-lens/clients/dispatch/runner-context.js +46 -0
  120. package/extensions/dm-lens/clients/dispatch/runners/actionlint.js +105 -0
  121. package/extensions/dm-lens/clients/dispatch/runners/ast-grep-napi.js +728 -0
  122. package/extensions/dm-lens/clients/dispatch/runners/biome-check.js +193 -0
  123. package/extensions/dm-lens/clients/dispatch/runners/cpp-check.js +209 -0
  124. package/extensions/dm-lens/clients/dispatch/runners/credo.js +63 -0
  125. package/extensions/dm-lens/clients/dispatch/runners/cue-vet.js +168 -0
  126. package/extensions/dm-lens/clients/dispatch/runners/dart-analyze.js +173 -0
  127. package/extensions/dm-lens/clients/dispatch/runners/detekt.js +151 -0
  128. package/extensions/dm-lens/clients/dispatch/runners/dotnet-build.js +153 -0
  129. package/extensions/dm-lens/clients/dispatch/runners/elixir-check.js +168 -0
  130. package/extensions/dm-lens/clients/dispatch/runners/eslint.js +115 -0
  131. package/extensions/dm-lens/clients/dispatch/runners/fact-rules.js +20 -0
  132. package/extensions/dm-lens/clients/dispatch/runners/fish-indent.js +64 -0
  133. package/extensions/dm-lens/clients/dispatch/runners/gleam-check.js +84 -0
  134. package/extensions/dm-lens/clients/dispatch/runners/go-vet.js +49 -0
  135. package/extensions/dm-lens/clients/dispatch/runners/golangci-lint.js +93 -0
  136. package/extensions/dm-lens/clients/dispatch/runners/hadolint.js +76 -0
  137. package/extensions/dm-lens/clients/dispatch/runners/helm-lint.js +145 -0
  138. package/extensions/dm-lens/clients/dispatch/runners/helm-render.js +601 -0
  139. package/extensions/dm-lens/clients/dispatch/runners/htmlhint.js +97 -0
  140. package/extensions/dm-lens/clients/dispatch/runners/index.js +100 -0
  141. package/extensions/dm-lens/clients/dispatch/runners/javac.js +81 -0
  142. package/extensions/dm-lens/clients/dispatch/runners/ktlint.js +130 -0
  143. package/extensions/dm-lens/clients/dispatch/runners/lsp.js +202 -0
  144. package/extensions/dm-lens/clients/dispatch/runners/markdownlint.js +132 -0
  145. package/extensions/dm-lens/clients/dispatch/runners/mypy.js +72 -0
  146. package/extensions/dm-lens/clients/dispatch/runners/oxlint.js +294 -0
  147. package/extensions/dm-lens/clients/dispatch/runners/php-lint.js +61 -0
  148. package/extensions/dm-lens/clients/dispatch/runners/phpstan.js +92 -0
  149. package/extensions/dm-lens/clients/dispatch/runners/prisma-validate.js +55 -0
  150. package/extensions/dm-lens/clients/dispatch/runners/psscriptanalyzer.js +314 -0
  151. package/extensions/dm-lens/clients/dispatch/runners/pyright.js +123 -0
  152. package/extensions/dm-lens/clients/dispatch/runners/rubocop.js +79 -0
  153. package/extensions/dm-lens/clients/dispatch/runners/ruff.js +82 -0
  154. package/extensions/dm-lens/clients/dispatch/runners/rust-clippy.js +156 -0
  155. package/extensions/dm-lens/clients/dispatch/runners/shellcheck.js +110 -0
  156. package/extensions/dm-lens/clients/dispatch/runners/shfmt.js +93 -0
  157. package/extensions/dm-lens/clients/dispatch/runners/spellcheck.js +67 -0
  158. package/extensions/dm-lens/clients/dispatch/runners/spotbugs.js +210 -0
  159. package/extensions/dm-lens/clients/dispatch/runners/sqlfluff.js +133 -0
  160. package/extensions/dm-lens/clients/dispatch/runners/stylelint.js +119 -0
  161. package/extensions/dm-lens/clients/dispatch/runners/swiftlint.js +138 -0
  162. package/extensions/dm-lens/clients/dispatch/runners/taplo.js +95 -0
  163. package/extensions/dm-lens/clients/dispatch/runners/terragrunt.js +112 -0
  164. package/extensions/dm-lens/clients/dispatch/runners/tflint.js +97 -0
  165. package/extensions/dm-lens/clients/dispatch/runners/tree-sitter.js +532 -0
  166. package/extensions/dm-lens/clients/dispatch/runners/trivy-config.js +155 -0
  167. package/extensions/dm-lens/clients/dispatch/runners/utils/availability-policy.js +280 -0
  168. package/extensions/dm-lens/clients/dispatch/runners/utils/candidate-probe.js +64 -0
  169. package/extensions/dm-lens/clients/dispatch/runners/utils/diagnostic-parsers.js +105 -0
  170. package/extensions/dm-lens/clients/dispatch/runners/utils/lazy-installer.js +133 -0
  171. package/extensions/dm-lens/clients/dispatch/runners/utils/runner-helpers.js +1078 -0
  172. package/extensions/dm-lens/clients/dispatch/runners/utils/spawn-outcome.js +40 -0
  173. package/extensions/dm-lens/clients/dispatch/runners/utils/tool-failure.js +120 -0
  174. package/extensions/dm-lens/clients/dispatch/runners/utils/toolchain-availability.js +91 -0
  175. package/extensions/dm-lens/clients/dispatch/runners/utils.js +25 -0
  176. package/extensions/dm-lens/clients/dispatch/runners/vale.js +101 -0
  177. package/extensions/dm-lens/clients/dispatch/runners/yaml-rule-parser.js +181 -0
  178. package/extensions/dm-lens/clients/dispatch/runners/yamllint.js +75 -0
  179. package/extensions/dm-lens/clients/dispatch/runners/zig-check.js +84 -0
  180. package/extensions/dm-lens/clients/dispatch/suppress-writer.js +50 -0
  181. package/extensions/dm-lens/clients/dispatch/tool-profile.js +30 -0
  182. package/extensions/dm-lens/clients/dispatch/types.js +4 -0
  183. package/extensions/dm-lens/clients/dispatch/utils/format-utils.js +45 -0
  184. package/extensions/dm-lens/clients/dispatch/utils/lsp-diagnostics.js +31 -0
  185. package/extensions/dm-lens/clients/disposition-logger.js +25 -0
  186. package/extensions/dm-lens/clients/disposition-publish.js +91 -0
  187. package/extensions/dm-lens/clients/durable-store.js +80 -0
  188. package/extensions/dm-lens/clients/effective-config.js +162 -0
  189. package/extensions/dm-lens/clients/env-utils.js +26 -0
  190. package/extensions/dm-lens/clients/error-class.js +3 -0
  191. package/extensions/dm-lens/clients/eval-timestamp.js +2 -0
  192. package/extensions/dm-lens/clients/event-loop-monitor.js +89 -0
  193. package/extensions/dm-lens/clients/extension-log.js +225 -0
  194. package/extensions/dm-lens/clients/extension-mode.js +20 -0
  195. package/extensions/dm-lens/clients/feature-hints.js +87 -0
  196. package/extensions/dm-lens/clients/file-kinds.js +308 -0
  197. package/extensions/dm-lens/clients/file-role.js +41 -0
  198. package/extensions/dm-lens/clients/file-time.js +112 -0
  199. package/extensions/dm-lens/clients/file-utils.js +564 -0
  200. package/extensions/dm-lens/clients/finding-delivery-gate.js +133 -0
  201. package/extensions/dm-lens/clients/finding-identity.js +23 -0
  202. package/extensions/dm-lens/clients/fix-worklog.js +75 -0
  203. package/extensions/dm-lens/clients/format-events-publish.js +234 -0
  204. package/extensions/dm-lens/clients/format-service.js +137 -0
  205. package/extensions/dm-lens/clients/formatters-lazy.js +8 -0
  206. package/extensions/dm-lens/clients/formatters.js +1362 -0
  207. package/extensions/dm-lens/clients/freshness-cadence.js +1 -0
  208. package/extensions/dm-lens/clients/freshness.js +8 -0
  209. package/extensions/dm-lens/clients/generated-artifacts.js +209 -0
  210. package/extensions/dm-lens/clients/generation-guard.js +99 -0
  211. package/extensions/dm-lens/clients/git-guard.js +721 -0
  212. package/extensions/dm-lens/clients/git-tracked-ignore.js +120 -0
  213. package/extensions/dm-lens/clients/gitleaks-client.js +262 -0
  214. package/extensions/dm-lens/clients/go-client.js +49 -0
  215. package/extensions/dm-lens/clients/govulncheck-client.js +392 -0
  216. package/extensions/dm-lens/clients/gradle-ktfmt-style.js +97 -0
  217. package/extensions/dm-lens/clients/grammar-source.js +224 -0
  218. package/extensions/dm-lens/clients/gzip-stage-write.js +85 -0
  219. package/extensions/dm-lens/clients/hashline-anchor.js +222 -0
  220. package/extensions/dm-lens/clients/hook-budgets.js +16 -0
  221. package/extensions/dm-lens/clients/host-edit-normalize.js +87 -0
  222. package/extensions/dm-lens/clients/host-ports.js +35 -0
  223. package/extensions/dm-lens/clients/indent-retarget.js +75 -0
  224. package/extensions/dm-lens/clients/install-diagnostics.js +121 -0
  225. package/extensions/dm-lens/clients/installer/index.js +3275 -0
  226. package/extensions/dm-lens/clients/installer/managed-tool-refresh-session.js +17 -0
  227. package/extensions/dm-lens/clients/installer/managed-tool-refresh.js +479 -0
  228. package/extensions/dm-lens/clients/instance-reaper.js +581 -0
  229. package/extensions/dm-lens/clients/instance-registry-lock.js +131 -0
  230. package/extensions/dm-lens/clients/instance-registry.js +426 -0
  231. package/extensions/dm-lens/clients/jscpd-client.js +250 -0
  232. package/extensions/dm-lens/clients/json-cache-read.js +25 -0
  233. package/extensions/dm-lens/clients/knip-client.js +479 -0
  234. package/extensions/dm-lens/clients/language-policy.js +242 -0
  235. package/extensions/dm-lens/clients/language-profile.js +267 -0
  236. package/extensions/dm-lens/clients/language-registry.js +422 -0
  237. package/extensions/dm-lens/clients/latency-logger.js +182 -0
  238. package/extensions/dm-lens/clients/lazy-import.js +14 -0
  239. package/extensions/dm-lens/clients/ledger-bounds.js +9 -0
  240. package/extensions/dm-lens/clients/lens-config.js +202 -0
  241. package/extensions/dm-lens/clients/lens-engine.js +221 -0
  242. package/extensions/dm-lens/clients/lens-events.js +109 -0
  243. package/extensions/dm-lens/clients/lens-flag-registry.js +257 -0
  244. package/extensions/dm-lens/clients/lens-map.js +980 -0
  245. package/extensions/dm-lens/clients/live-bus-emitter.js +53 -0
  246. package/extensions/dm-lens/clients/log-cleanup.js +166 -0
  247. package/extensions/dm-lens/clients/lsp/aggregation.js +88 -0
  248. package/extensions/dm-lens/clients/lsp/cascade-tier.js +210 -0
  249. package/extensions/dm-lens/clients/lsp/client.js +2710 -0
  250. package/extensions/dm-lens/clients/lsp/config.js +247 -0
  251. package/extensions/dm-lens/clients/lsp/diagnostic-binding.js +76 -0
  252. package/extensions/dm-lens/clients/lsp/document-drift.js +241 -0
  253. package/extensions/dm-lens/clients/lsp/edits.js +944 -0
  254. package/extensions/dm-lens/clients/lsp/index.js +4138 -0
  255. package/extensions/dm-lens/clients/lsp/inferred-project.js +123 -0
  256. package/extensions/dm-lens/clients/lsp/jvm-runtime.js +199 -0
  257. package/extensions/dm-lens/clients/lsp/language.js +29 -0
  258. package/extensions/dm-lens/clients/lsp/launch.js +469 -0
  259. package/extensions/dm-lens/clients/lsp/lombok.js +146 -0
  260. package/extensions/dm-lens/clients/lsp/path-utils.js +10 -0
  261. package/extensions/dm-lens/clients/lsp/pending-aux-coverage.js +91 -0
  262. package/extensions/dm-lens/clients/lsp/position-encoding.js +28 -0
  263. package/extensions/dm-lens/clients/lsp/ruby-drive-dirs.js +42 -0
  264. package/extensions/dm-lens/clients/lsp/server.js +2407 -0
  265. package/extensions/dm-lens/clients/lsp/session-roots.js +31 -0
  266. package/extensions/dm-lens/clients/lsp/spawn-history.js +15 -0
  267. package/extensions/dm-lens/clients/lsp/sync-kind.js +17 -0
  268. package/extensions/dm-lens/clients/lsp/tsserver-sync.js +158 -0
  269. package/extensions/dm-lens/clients/lsp/wait-policy/capability-snapshot.js +0 -0
  270. package/extensions/dm-lens/clients/lsp/wait-policy/classification.js +33 -0
  271. package/extensions/dm-lens/clients/lsp/wait-policy/index.js +3 -0
  272. package/extensions/dm-lens/clients/lsp/wait-policy/strategies.js +146 -0
  273. package/extensions/dm-lens/clients/lsp/watch-queue.js +40 -0
  274. package/extensions/dm-lens/clients/lsp/workspace-diagnostics-cache.js +247 -0
  275. package/extensions/dm-lens/clients/lsp/workspace-diagnostics-session.js +7 -0
  276. package/extensions/dm-lens/clients/lsp/workspace-sweep-hold.js +93 -0
  277. package/extensions/dm-lens/clients/lsp-budget.js +86 -0
  278. package/extensions/dm-lens/clients/lsp-document-symbols.js +93 -0
  279. package/extensions/dm-lens/clients/lsp-lazy.js +8 -0
  280. package/extensions/dm-lens/clients/lsp-mutation.js +277 -0
  281. package/extensions/dm-lens/clients/lsp-status.js +37 -0
  282. package/extensions/dm-lens/clients/map-with-concurrency.js +16 -0
  283. package/extensions/dm-lens/clients/mcp/analyze.js +261 -0
  284. package/extensions/dm-lens/clients/mcp/host-shim.js +14 -0
  285. package/extensions/dm-lens/clients/mcp/ipc.js +238 -0
  286. package/extensions/dm-lens/clients/mcp/review.js +112 -0
  287. package/extensions/dm-lens/clients/mcp/session.js +285 -0
  288. package/extensions/dm-lens/clients/memory-sampler.js +110 -0
  289. package/extensions/dm-lens/clients/message-end-attribution.js +18 -0
  290. package/extensions/dm-lens/clients/metrics-client.js +80 -0
  291. package/extensions/dm-lens/clients/metrics-history.js +320 -0
  292. package/extensions/dm-lens/clients/middle-man-analysis.js +163 -0
  293. package/extensions/dm-lens/clients/model-provider.js +31 -0
  294. package/extensions/dm-lens/clients/module-report-lsp.js +140 -0
  295. package/extensions/dm-lens/clients/module-report.js +1675 -0
  296. package/extensions/dm-lens/clients/mutating-tool.js +383 -0
  297. package/extensions/dm-lens/clients/mutation-attribution.js +168 -0
  298. package/extensions/dm-lens/clients/mutation-bridge.js +104 -0
  299. package/extensions/dm-lens/clients/ndjson-logger.js +463 -0
  300. package/extensions/dm-lens/clients/observed-mutation-sources.js +43 -0
  301. package/extensions/dm-lens/clients/observed-mutation.js +686 -0
  302. package/extensions/dm-lens/clients/oldtext-autopatch.js +100 -0
  303. package/extensions/dm-lens/clients/opaque-mutation-scan.js +303 -0
  304. package/extensions/dm-lens/clients/opengrep-client.js +134 -0
  305. package/extensions/dm-lens/clients/opengrep-config.js +52 -0
  306. package/extensions/dm-lens/clients/package-manager.js +320 -0
  307. package/extensions/dm-lens/clients/package-root.js +25 -0
  308. package/extensions/dm-lens/clients/partial-edit-apply.js +353 -0
  309. package/extensions/dm-lens/clients/path-attribution-telemetry.js +31 -0
  310. package/extensions/dm-lens/clients/path-keyed-map.js +57 -0
  311. package/extensions/dm-lens/clients/path-utils.js +285 -0
  312. package/extensions/dm-lens/clients/performance-report.js +299 -0
  313. package/extensions/dm-lens/clients/persist-debounce.js +37 -0
  314. package/extensions/dm-lens/clients/php-cs-fixer-config.js +10 -0
  315. package/extensions/dm-lens/clients/pipeline.js +1081 -0
  316. package/extensions/dm-lens/clients/post-autofix-notice.js +19 -0
  317. package/extensions/dm-lens/clients/print-mode.js +3 -0
  318. package/extensions/dm-lens/clients/probe-home-state.js +62 -0
  319. package/extensions/dm-lens/clients/process-bridge.js +20 -0
  320. package/extensions/dm-lens/clients/process-singletons.js +69 -0
  321. package/extensions/dm-lens/clients/process-snapshot.js +27 -0
  322. package/extensions/dm-lens/clients/project-changes.js +112 -0
  323. package/extensions/dm-lens/clients/project-conventions.js +152 -0
  324. package/extensions/dm-lens/clients/project-diagnostics/cache.js +77 -0
  325. package/extensions/dm-lens/clients/project-diagnostics/extractors.js +53 -0
  326. package/extensions/dm-lens/clients/project-diagnostics/fresh-fetch.js +282 -0
  327. package/extensions/dm-lens/clients/project-diagnostics/runner-adapters/call-graph-impact.js +66 -0
  328. package/extensions/dm-lens/clients/project-diagnostics/runner-adapters/dead-code.js +35 -0
  329. package/extensions/dm-lens/clients/project-diagnostics/runner-adapters/gitleaks.js +21 -0
  330. package/extensions/dm-lens/clients/project-diagnostics/runner-adapters/govulncheck.js +23 -0
  331. package/extensions/dm-lens/clients/project-diagnostics/runner-adapters/jscpd.js +28 -0
  332. package/extensions/dm-lens/clients/project-diagnostics/runner-adapters/knip.js +45 -0
  333. package/extensions/dm-lens/clients/project-diagnostics/runner-adapters/madge.js +34 -0
  334. package/extensions/dm-lens/clients/project-diagnostics/runner-adapters/opengrep.js +32 -0
  335. package/extensions/dm-lens/clients/project-diagnostics/runner-adapters/runner-findings.js +67 -0
  336. package/extensions/dm-lens/clients/project-diagnostics/runner-adapters/trivy.js +41 -0
  337. package/extensions/dm-lens/clients/project-diagnostics/scanner.js +341 -0
  338. package/extensions/dm-lens/clients/project-diagnostics/types.js +0 -0
  339. package/extensions/dm-lens/clients/project-lens-config.js +421 -0
  340. package/extensions/dm-lens/clients/project-report.js +536 -0
  341. package/extensions/dm-lens/clients/project-scale.js +60 -0
  342. package/extensions/dm-lens/clients/project-scan-policy.js +52 -0
  343. package/extensions/dm-lens/clients/project-snapshot-fingerprint.js +39 -0
  344. package/extensions/dm-lens/clients/project-snapshot-persist-worker.js +16 -0
  345. package/extensions/dm-lens/clients/project-snapshot.js +1183 -0
  346. package/extensions/dm-lens/clients/project-trust.js +104 -0
  347. package/extensions/dm-lens/clients/python-environment.js +55 -0
  348. package/extensions/dm-lens/clients/quiet-window-config.js +16 -0
  349. package/extensions/dm-lens/clients/quiet-window.js +137 -0
  350. package/extensions/dm-lens/clients/read-bridge.js +48 -0
  351. package/extensions/dm-lens/clients/read-expansion.js +218 -0
  352. package/extensions/dm-lens/clients/read-guard-logger.js +176 -0
  353. package/extensions/dm-lens/clients/read-guard-tool-lines.js +1053 -0
  354. package/extensions/dm-lens/clients/read-guard.js +1077 -0
  355. package/extensions/dm-lens/clients/recent-touches.js +126 -0
  356. package/extensions/dm-lens/clients/redact/secrets.js +386 -0
  357. package/extensions/dm-lens/clients/resource-sampler.js +297 -0
  358. package/extensions/dm-lens/clients/reverse-deps.js +230 -0
  359. package/extensions/dm-lens/clients/review-graph/builder.js +3664 -0
  360. package/extensions/dm-lens/clients/review-graph/format.js +30 -0
  361. package/extensions/dm-lens/clients/review-graph/git-identity.js +111 -0
  362. package/extensions/dm-lens/clients/review-graph/import-resolvers.js +328 -0
  363. package/extensions/dm-lens/clients/review-graph/persist-worker.js +10 -0
  364. package/extensions/dm-lens/clients/review-graph/query.js +199 -0
  365. package/extensions/dm-lens/clients/review-graph/revision-drift.js +3 -0
  366. package/extensions/dm-lens/clients/review-graph/service.js +65 -0
  367. package/extensions/dm-lens/clients/review-graph/shared-extraction-ir.js +54 -0
  368. package/extensions/dm-lens/clients/review-graph/symbol-id.js +29 -0
  369. package/extensions/dm-lens/clients/review-graph/tsconfig-paths.js +257 -0
  370. package/extensions/dm-lens/clients/review-graph/types.js +0 -0
  371. package/extensions/dm-lens/clients/review-graph/workspace-modules.js +382 -0
  372. package/extensions/dm-lens/clients/review-graph-logger.js +49 -0
  373. package/extensions/dm-lens/clients/ruff-client.js +111 -0
  374. package/extensions/dm-lens/clients/rules-scanner.js +113 -0
  375. package/extensions/dm-lens/clients/run-duration.js +9 -0
  376. package/extensions/dm-lens/clients/runtime-agent-end.js +609 -0
  377. package/extensions/dm-lens/clients/runtime-config.js +39 -0
  378. package/extensions/dm-lens/clients/runtime-context.js +157 -0
  379. package/extensions/dm-lens/clients/runtime-coordinator.js +765 -0
  380. package/extensions/dm-lens/clients/runtime-session.js +1686 -0
  381. package/extensions/dm-lens/clients/runtime-tool-call.js +917 -0
  382. package/extensions/dm-lens/clients/runtime-tool-result.js +1178 -0
  383. package/extensions/dm-lens/clients/runtime-turn.js +2158 -0
  384. package/extensions/dm-lens/clients/rust-client.js +50 -0
  385. package/extensions/dm-lens/clients/safe-spawn.js +1088 -0
  386. package/extensions/dm-lens/clients/sanitize.js +178 -0
  387. package/extensions/dm-lens/clients/scan-utils.js +48 -0
  388. package/extensions/dm-lens/clients/scratch-tree-policy.js +58 -0
  389. package/extensions/dm-lens/clients/search-read-registration.js +59 -0
  390. package/extensions/dm-lens/clients/secret-findings.js +69 -0
  391. package/extensions/dm-lens/clients/security-scan-client.js +215 -0
  392. package/extensions/dm-lens/clients/session-event-guard.js +54 -0
  393. package/extensions/dm-lens/clients/session-lifecycle.js +173 -0
  394. package/extensions/dm-lens/clients/session-start-observability.js +47 -0
  395. package/extensions/dm-lens/clients/session-state-store.js +63 -0
  396. package/extensions/dm-lens/clients/session-summary.js +33 -0
  397. package/extensions/dm-lens/clients/sessionstart-logger.js +22 -0
  398. package/extensions/dm-lens/clients/sg-runner.js +624 -0
  399. package/extensions/dm-lens/clients/sgconfig.js +228 -0
  400. package/extensions/dm-lens/clients/shared-checkout-guard.js +186 -0
  401. package/extensions/dm-lens/clients/single-flight.js +52 -0
  402. package/extensions/dm-lens/clients/slow-fs.js +77 -0
  403. package/extensions/dm-lens/clients/smells-rollup.js +118 -0
  404. package/extensions/dm-lens/clients/source-filter.js +327 -0
  405. package/extensions/dm-lens/clients/source-walker.js +96 -0
  406. package/extensions/dm-lens/clients/spawn-output-cap.js +6 -0
  407. package/extensions/dm-lens/clients/spawn-timeout-cooldown.js +51 -0
  408. package/extensions/dm-lens/clients/stale-marker.js +1 -0
  409. package/extensions/dm-lens/clients/startup-scan.js +232 -0
  410. package/extensions/dm-lens/clients/startup-timing.js +70 -0
  411. package/extensions/dm-lens/clients/string-utils.js +3 -0
  412. package/extensions/dm-lens/clients/subagent-mode.js +40 -0
  413. package/extensions/dm-lens/clients/symbol-containment.js +16 -0
  414. package/extensions/dm-lens/clients/symbol-types.js +0 -0
  415. package/extensions/dm-lens/clients/test-runner-client.js +1451 -0
  416. package/extensions/dm-lens/clients/test-runner-delivery.js +208 -0
  417. package/extensions/dm-lens/clients/todo-scanner.js +164 -0
  418. package/extensions/dm-lens/clients/tool-definition.js +5 -0
  419. package/extensions/dm-lens/clients/tool-event.js +18 -0
  420. package/extensions/dm-lens/clients/tool-policy.js +2273 -0
  421. package/extensions/dm-lens/clients/tool-render.js +79 -0
  422. package/extensions/dm-lens/clients/tool-set-policy.js +35 -0
  423. package/extensions/dm-lens/clients/tree-sitter-cache.js +206 -0
  424. package/extensions/dm-lens/clients/tree-sitter-client.js +2702 -0
  425. package/extensions/dm-lens/clients/tree-sitter-logger.js +77 -0
  426. package/extensions/dm-lens/clients/tree-sitter-navigator.js +198 -0
  427. package/extensions/dm-lens/clients/tree-sitter-query-loader.js +376 -0
  428. package/extensions/dm-lens/clients/tree-sitter-shared.js +89 -0
  429. package/extensions/dm-lens/clients/tree-sitter-symbol-extractor.js +957 -0
  430. package/extensions/dm-lens/clients/trivy-client.js +298 -0
  431. package/extensions/dm-lens/clients/tui-fit.js +29 -0
  432. package/extensions/dm-lens/clients/turn-summary-render.js +58 -0
  433. package/extensions/dm-lens/clients/turn-summary.js +84 -0
  434. package/extensions/dm-lens/clients/typos-config.js +9 -0
  435. package/extensions/dm-lens/clients/user-notify.js +20 -0
  436. package/extensions/dm-lens/clients/vanished-instance-marker.js +18 -0
  437. package/extensions/dm-lens/clients/warm-attach.js +199 -0
  438. package/extensions/dm-lens/clients/widget-state.js +788 -0
  439. package/extensions/dm-lens/clients/word-index-logger.js +27 -0
  440. package/extensions/dm-lens/clients/word-index-store.js +228 -0
  441. package/extensions/dm-lens/clients/word-index.js +1451 -0
  442. package/extensions/dm-lens/clients/workspace-topology.js +251 -0
  443. package/extensions/dm-lens/clients/write-ordering-guard.js +18 -0
  444. package/extensions/dm-lens/clients/zizmor-config.js +161 -0
  445. package/extensions/dm-lens/config/biome/core.jsonc +92 -0
  446. package/extensions/dm-lens/config/dependency-cruiser-eager-allowlist.json +90 -0
  447. package/extensions/dm-lens/config/markdownlint/core.json +6 -0
  448. package/extensions/dm-lens/config/ruff/core.toml +67 -0
  449. package/extensions/dm-lens/i18n.js +67 -0
  450. package/extensions/dm-lens/index.js +1802 -0
  451. package/extensions/dm-lens/mcp/analyze-cli.js +181 -0
  452. package/extensions/dm-lens/mcp/build-staleness.js +55 -0
  453. package/extensions/dm-lens/mcp/cli.js +84 -0
  454. package/extensions/dm-lens/mcp/server.js +1205 -0
  455. package/extensions/dm-lens/mcp/worker.js +33 -0
  456. package/extensions/dm-lens/package.json +45 -0
  457. package/extensions/dm-lens/rules/.sgconfig.yml +4 -0
  458. package/extensions/dm-lens/rules/ast-grep-rules/.sgconfig.yml +13 -0
  459. package/extensions/dm-lens/rules/ast-grep-rules/coderabbit/rules/c/security/dont-call-system-c.yml +57 -0
  460. package/extensions/dm-lens/rules/ast-grep-rules/coderabbit/rules/c/security/file-access-before-action-c.yml +182 -0
  461. package/extensions/dm-lens/rules/ast-grep-rules/coderabbit/rules/c/security/file-stat-before-action-c.yml +331 -0
  462. package/extensions/dm-lens/rules/ast-grep-rules/coderabbit/rules/c/security/insecure-hash-c.yml +286 -0
  463. package/extensions/dm-lens/rules/ast-grep-rules/coderabbit/rules/c/security/libxml2-audit-parser-c.yml +258 -0
  464. package/extensions/dm-lens/rules/ast-grep-rules/coderabbit/rules/c/security/null-library-function-c.yml +254 -0
  465. package/extensions/dm-lens/rules/ast-grep-rules/coderabbit/rules/c/security/sizeof-this-c.yml +121 -0
  466. package/extensions/dm-lens/rules/ast-grep-rules/coderabbit/rules/c/security/small-key-size-c.yml +40 -0
  467. package/extensions/dm-lens/rules/ast-grep-rules/coderabbit/rules/c/security/world-writable-file-c.yml +317 -0
  468. package/extensions/dm-lens/rules/ast-grep-rules/coderabbit/rules/cpp/security/dont-call-system-cpp.yml +57 -0
  469. package/extensions/dm-lens/rules/ast-grep-rules/coderabbit/rules/cpp/security/file-access-before-action-cpp.yml +271 -0
  470. package/extensions/dm-lens/rules/ast-grep-rules/coderabbit/rules/cpp/security/file-stat-before-action-cpp.yml +494 -0
  471. package/extensions/dm-lens/rules/ast-grep-rules/coderabbit/rules/cpp/security/fix-format-security-error-cpp.yml +18 -0
  472. package/extensions/dm-lens/rules/ast-grep-rules/coderabbit/rules/cpp/security/insecure-hash-cpp.yml +122 -0
  473. package/extensions/dm-lens/rules/ast-grep-rules/coderabbit/rules/cpp/security/libxml2-audit-parser-cpp.yml +258 -0
  474. package/extensions/dm-lens/rules/ast-grep-rules/coderabbit/rules/cpp/security/missing-nul-cpp-string-memcpy-cpp.yml +393 -0
  475. package/extensions/dm-lens/rules/ast-grep-rules/coderabbit/rules/cpp/security/null-library-function-cpp.yml +254 -0
  476. package/extensions/dm-lens/rules/ast-grep-rules/coderabbit/rules/cpp/security/return-c-str-cpp.yml +124 -0
  477. package/extensions/dm-lens/rules/ast-grep-rules/coderabbit/rules/cpp/security/sizeof-this-cpp.yml +41 -0
  478. package/extensions/dm-lens/rules/ast-grep-rules/coderabbit/rules/cpp/security/small-key-size-cpp.yml +40 -0
  479. package/extensions/dm-lens/rules/ast-grep-rules/coderabbit/rules/cpp/security/std-return-data-cpp.yml +93 -0
  480. package/extensions/dm-lens/rules/ast-grep-rules/coderabbit/rules/cpp/security/std-vector-invalidation-cpp.yml +147 -0
  481. package/extensions/dm-lens/rules/ast-grep-rules/coderabbit/rules/cpp/security/string-view-temporary-string-cpp.yml +924 -0
  482. package/extensions/dm-lens/rules/ast-grep-rules/coderabbit/rules/cpp/security/world-writable-file-cpp.yml +317 -0
  483. package/extensions/dm-lens/rules/ast-grep-rules/coderabbit/rules/csharp/security/httponly-false-csharp.yml +42 -0
  484. package/extensions/dm-lens/rules/ast-grep-rules/coderabbit/rules/csharp/security/insecure-binaryformatter-deserialization-csharp.yml +38 -0
  485. package/extensions/dm-lens/rules/ast-grep-rules/coderabbit/rules/csharp/security/jwt-decode-without-verify-csharp.yml +700 -0
  486. package/extensions/dm-lens/rules/ast-grep-rules/coderabbit/rules/csharp/security/jwt-hardcoded-secret-csharp.yml +672 -0
  487. package/extensions/dm-lens/rules/ast-grep-rules/coderabbit/rules/csharp/security/jwt-tokenvalidationparameters-no-expiry-validation-csharp.yml +136 -0
  488. package/extensions/dm-lens/rules/ast-grep-rules/coderabbit/rules/csharp/security/networkcredential-hardcoded-secret-python.yml +394 -0
  489. package/extensions/dm-lens/rules/ast-grep-rules/coderabbit/rules/csharp/security/npgsqlconnectionstringbuilder-hardcoded-secret-csharp.yml +339 -0
  490. package/extensions/dm-lens/rules/ast-grep-rules/coderabbit/rules/csharp/security/oracleconnectionstringbuilder-hardcoded-secret-csharp.yml +339 -0
  491. package/extensions/dm-lens/rules/ast-grep-rules/coderabbit/rules/csharp/security/sqlconnectionstringbuilder-hardcoded-secret-csharp.yml +339 -0
  492. package/extensions/dm-lens/rules/ast-grep-rules/coderabbit/rules/csharp/security/stacktrace-disclosure-csharp.yml +48 -0
  493. package/extensions/dm-lens/rules/ast-grep-rules/coderabbit/rules/csharp/security/use-ecb-mode-csharp.yml +177 -0
  494. package/extensions/dm-lens/rules/ast-grep-rules/coderabbit/rules/go/security/avoid-bind-to-all-interfaces-go.yml +27 -0
  495. package/extensions/dm-lens/rules/ast-grep-rules/coderabbit/rules/go/security/gorilla-cookie-store-hardcoded-session-key-go.yml +90 -0
  496. package/extensions/dm-lens/rules/ast-grep-rules/coderabbit/rules/go/security/gorilla-csrf-hardcoded-auth-key-go.yml +79 -0
  497. package/extensions/dm-lens/rules/ast-grep-rules/coderabbit/rules/go/security/grpc-client-insecure-connection-go.yml +60 -0
  498. package/extensions/dm-lens/rules/ast-grep-rules/coderabbit/rules/go/security/jwt-go-none-algorithm-go.yml +35 -0
  499. package/extensions/dm-lens/rules/ast-grep-rules/coderabbit/rules/go/security/missing-ssl-minversion-go.yml +42 -0
  500. package/extensions/dm-lens/rules/ast-grep-rules/coderabbit/rules/go/security/openai-empty-secret-go.yml +199 -0
  501. package/extensions/dm-lens/rules/ast-grep-rules/coderabbit/rules/go/security/openai-hardcoded-secret-go.yml +208 -0
  502. package/extensions/dm-lens/rules/ast-grep-rules/coderabbit/rules/go/security/ssl-v3-is-insecure-go.yml +40 -0
  503. package/extensions/dm-lens/rules/ast-grep-rules/coderabbit/rules/go/security/tls-with-insecure-cipher-go.yml +65 -0
  504. package/extensions/dm-lens/rules/ast-grep-rules/coderabbit/rules/go/security/use-of-weak-rsa-key-go.yml +253 -0
  505. package/extensions/dm-lens/rules/ast-grep-rules/coderabbit/rules/html/security/plaintext-http-link-html.yml +76 -0
  506. package/extensions/dm-lens/rules/ast-grep-rules/coderabbit/rules/java/security/cbc-padding-oracle-java.yml +17 -0
  507. package/extensions/dm-lens/rules/ast-grep-rules/coderabbit/rules/java/security/cookie-httponly-false-java.yml +9 -0
  508. package/extensions/dm-lens/rules/ast-grep-rules/coderabbit/rules/java/security/cookie-missing-httponly-java.yml +21 -0
  509. package/extensions/dm-lens/rules/ast-grep-rules/coderabbit/rules/java/security/cookie-missing-samesite-java.yml +64 -0
  510. package/extensions/dm-lens/rules/ast-grep-rules/coderabbit/rules/java/security/cookie-missing-secure-flag-java.yml +51 -0
  511. package/extensions/dm-lens/rules/ast-grep-rules/coderabbit/rules/java/security/cookie-secure-flag-false-java.yml +13 -0
  512. package/extensions/dm-lens/rules/ast-grep-rules/coderabbit/rules/java/security/datanucleus-hardcoded-connection-password-java.yml +575 -0
  513. package/extensions/dm-lens/rules/ast-grep-rules/coderabbit/rules/java/security/des-is-deprecated-java.yml +15 -0
  514. package/extensions/dm-lens/rules/ast-grep-rules/coderabbit/rules/java/security/desede-is-deprecated-java.yml +92 -0
  515. package/extensions/dm-lens/rules/ast-grep-rules/coderabbit/rules/java/security/documentbuilderfactory-disallow-doctype-decl-false-java.yml +45 -0
  516. package/extensions/dm-lens/rules/ast-grep-rules/coderabbit/rules/java/security/documentbuilderfactory-external-general-entities-true-java.yml +279 -0
  517. package/extensions/dm-lens/rules/ast-grep-rules/coderabbit/rules/java/security/documentbuilderfactory-external-parameter-entities-true-java.yml +279 -0
  518. package/extensions/dm-lens/rules/ast-grep-rules/coderabbit/rules/java/security/drivermanager-hardcoded-secret-java.yml +142 -0
  519. package/extensions/dm-lens/rules/ast-grep-rules/coderabbit/rules/java/security/ecb-cipher-java.yml +47 -0
  520. package/extensions/dm-lens/rules/ast-grep-rules/coderabbit/rules/java/security/hardcoded-connection-password-java.yml +341 -0
  521. package/extensions/dm-lens/rules/ast-grep-rules/coderabbit/rules/java/security/hardcoded-secret-in-credentials-java.yml +281 -0
  522. package/extensions/dm-lens/rules/ast-grep-rules/coderabbit/rules/java/security/java-jwt-hardcoded-secret-java.yml +124 -0
  523. package/extensions/dm-lens/rules/ast-grep-rules/coderabbit/rules/java/security/jedis-jedisclientconfig-hardcoded-password-java.yml +804 -0
  524. package/extensions/dm-lens/rules/ast-grep-rules/coderabbit/rules/java/security/jedis-jedisfactory-hardcoded-password-java.yml +930 -0
  525. package/extensions/dm-lens/rules/ast-grep-rules/coderabbit/rules/java/security/missing-httponly-java.yml +583 -0
  526. package/extensions/dm-lens/rules/ast-grep-rules/coderabbit/rules/java/security/missing-secure-java.yml +584 -0
  527. package/extensions/dm-lens/rules/ast-grep-rules/coderabbit/rules/java/security/no-null-cipher-java.yml +38 -0
  528. package/extensions/dm-lens/rules/ast-grep-rules/coderabbit/rules/java/security/passwordauthentication-hardcoded-password-java.yml +651 -0
  529. package/extensions/dm-lens/rules/ast-grep-rules/coderabbit/rules/java/security/rsa-no-padding-java.yml +13 -0
  530. package/extensions/dm-lens/rules/ast-grep-rules/coderabbit/rules/java/security/simple-command-injection-direct-input-java.yml +55 -0
  531. package/extensions/dm-lens/rules/ast-grep-rules/coderabbit/rules/java/security/system-setproperty-hardcoded-secret-java.yml +312 -0
  532. package/extensions/dm-lens/rules/ast-grep-rules/coderabbit/rules/java/security/unencrypted-socket-java.yml +20 -0
  533. package/extensions/dm-lens/rules/ast-grep-rules/coderabbit/rules/java/security/use-of-aes-ecb-java.yml +68 -0
  534. package/extensions/dm-lens/rules/ast-grep-rules/coderabbit/rules/java/security/use-of-blowfish-java.yml +45 -0
  535. package/extensions/dm-lens/rules/ast-grep-rules/coderabbit/rules/java/security/use-of-default-aes-java.yml +318 -0
  536. package/extensions/dm-lens/rules/ast-grep-rules/coderabbit/rules/java/security/use-of-md5-digest-utils-java.yml +38 -0
  537. package/extensions/dm-lens/rules/ast-grep-rules/coderabbit/rules/java/security/use-of-md5-java.yml +104 -0
  538. package/extensions/dm-lens/rules/ast-grep-rules/coderabbit/rules/java/security/use-of-rc2-java.yml +84 -0
  539. package/extensions/dm-lens/rules/ast-grep-rules/coderabbit/rules/java/security/use-of-rc4-java.yml +38 -0
  540. package/extensions/dm-lens/rules/ast-grep-rules/coderabbit/rules/java/security/use-of-sha1-java.yml +165 -0
  541. package/extensions/dm-lens/rules/ast-grep-rules/coderabbit/rules/java/security/weak-ssl-context-java.yml +56 -0
  542. package/extensions/dm-lens/rules/ast-grep-rules/coderabbit/rules/javascript/security/detect-angular-sce-disabled-javascript.yml +14 -0
  543. package/extensions/dm-lens/rules/ast-grep-rules/coderabbit/rules/javascript/security/express-jwt-hardcoded-secret-javascript.yml +289 -0
  544. package/extensions/dm-lens/rules/ast-grep-rules/coderabbit/rules/javascript/security/express-session-hardcoded-secret-javascript.yml +101 -0
  545. package/extensions/dm-lens/rules/ast-grep-rules/coderabbit/rules/javascript/security/jwt-simple-noverify-javascript.yml +43 -0
  546. package/extensions/dm-lens/rules/ast-grep-rules/coderabbit/rules/javascript/security/node-rsa-weak-key-javascript.yml +577 -0
  547. package/extensions/dm-lens/rules/ast-grep-rules/coderabbit/rules/javascript/security/node-sequelize-empty-password-argument-javascript.yml +191 -0
  548. package/extensions/dm-lens/rules/ast-grep-rules/coderabbit/rules/javascript/security/node-sequelize-hardcoded-secret-argument-javascript.yml +94 -0
  549. package/extensions/dm-lens/rules/ast-grep-rules/coderabbit/rules/kotlin/security/des-is-deprecated-kotlin.yml +15 -0
  550. package/extensions/dm-lens/rules/ast-grep-rules/coderabbit/rules/kotlin/security/desede-is-deprecated-kotlin.yml +462 -0
  551. package/extensions/dm-lens/rules/ast-grep-rules/coderabbit/rules/kotlin/security/jwt-hardcode-kotlin.yml +567 -0
  552. package/extensions/dm-lens/rules/ast-grep-rules/coderabbit/rules/kotlin/security/rsa-no-padding-kotlin.yml +13 -0
  553. package/extensions/dm-lens/rules/ast-grep-rules/coderabbit/rules/kotlin/security/system-setproperty-hardcoded-secret-kotlin.yml +51 -0
  554. package/extensions/dm-lens/rules/ast-grep-rules/coderabbit/rules/php/security/openssl-cbc-static-iv-php.yml +641 -0
  555. package/extensions/dm-lens/rules/ast-grep-rules/coderabbit/rules/php/security/search-active-debug-php.yml +153 -0
  556. package/extensions/dm-lens/rules/ast-grep-rules/coderabbit/rules/python/security/avoid-mktemp-python.yml +71 -0
  557. package/extensions/dm-lens/rules/ast-grep-rules/coderabbit/rules/python/security/avoid_app_run_with_bad_host-python.yml +69 -0
  558. package/extensions/dm-lens/rules/ast-grep-rules/coderabbit/rules/python/security/debug-enabled-python.yml +91 -0
  559. package/extensions/dm-lens/rules/ast-grep-rules/coderabbit/rules/python/security/hashids-with-django-secret-python.yml +273 -0
  560. package/extensions/dm-lens/rules/ast-grep-rules/coderabbit/rules/python/security/hashids-with-flask-secret-python.yml +190 -0
  561. package/extensions/dm-lens/rules/ast-grep-rules/coderabbit/rules/python/security/insecure-cipher-algorithm-rc4-python.yml +75 -0
  562. package/extensions/dm-lens/rules/ast-grep-rules/coderabbit/rules/python/security/jwt-python-hardcoded-secret-python.yml +116 -0
  563. package/extensions/dm-lens/rules/ast-grep-rules/coderabbit/rules/python/security/openai-hardcoded-secret-python.yml +21 -0
  564. package/extensions/dm-lens/rules/ast-grep-rules/coderabbit/rules/python/security/python-cassandra-empty-password-python.yml +227 -0
  565. package/extensions/dm-lens/rules/ast-grep-rules/coderabbit/rules/python/security/python-cassandra-hardcoded-secret-python.yml +396 -0
  566. package/extensions/dm-lens/rules/ast-grep-rules/coderabbit/rules/python/security/python-couchbase-empty-password-python.yml +72 -0
  567. package/extensions/dm-lens/rules/ast-grep-rules/coderabbit/rules/python/security/python-couchbase-hardcoded-secret-python.yml +183 -0
  568. package/extensions/dm-lens/rules/ast-grep-rules/coderabbit/rules/python/security/python-elasticsearch-hardcoded-bearer-auth-python.yml +64 -0
  569. package/extensions/dm-lens/rules/ast-grep-rules/coderabbit/rules/python/security/python-ldap3-empty-password-python.yml +92 -0
  570. package/extensions/dm-lens/rules/ast-grep-rules/coderabbit/rules/python/security/python-ldap3-hardcoded-secret-python.yml +145 -0
  571. package/extensions/dm-lens/rules/ast-grep-rules/coderabbit/rules/python/security/python-mariadb-empty-password-python.yml +194 -0
  572. package/extensions/dm-lens/rules/ast-grep-rules/coderabbit/rules/python/security/python-mariadb-hardcoded-secret-python.yml +193 -0
  573. package/extensions/dm-lens/rules/ast-grep-rules/coderabbit/rules/python/security/python-mysql-empty-password-python.yml +192 -0
  574. package/extensions/dm-lens/rules/ast-grep-rules/coderabbit/rules/python/security/python-mysql-hardcoded-secret-python.yml +195 -0
  575. package/extensions/dm-lens/rules/ast-grep-rules/coderabbit/rules/python/security/python-mysqlclient-empty-password-python.yml +189 -0
  576. package/extensions/dm-lens/rules/ast-grep-rules/coderabbit/rules/python/security/python-mysqlclient-hardcoded-secret-python.yml +191 -0
  577. package/extensions/dm-lens/rules/ast-grep-rules/coderabbit/rules/python/security/python-neo4j-empty-password-python.yml +203 -0
  578. package/extensions/dm-lens/rules/ast-grep-rules/coderabbit/rules/python/security/python-neo4j-hardcoded-secret-python.yml +205 -0
  579. package/extensions/dm-lens/rules/ast-grep-rules/coderabbit/rules/python/security/python-peewee-mysql-empty-password-python.yml +50 -0
  580. package/extensions/dm-lens/rules/ast-grep-rules/coderabbit/rules/python/security/python-peewee-mysql-hardcoded-secret-python.yml +48 -0
  581. package/extensions/dm-lens/rules/ast-grep-rules/coderabbit/rules/python/security/python-peewee-pg-empty-password-python.yml +51 -0
  582. package/extensions/dm-lens/rules/ast-grep-rules/coderabbit/rules/python/security/python-peewee-pg-hardcoded-secret-python.yml +49 -0
  583. package/extensions/dm-lens/rules/ast-grep-rules/coderabbit/rules/python/security/python-pg8000-empty-password-python.yml +43 -0
  584. package/extensions/dm-lens/rules/ast-grep-rules/coderabbit/rules/python/security/python-pg8000-hardcoded-secret-python.yml +67 -0
  585. package/extensions/dm-lens/rules/ast-grep-rules/coderabbit/rules/python/security/python-psycopg2-empty-password-python.yml +65 -0
  586. package/extensions/dm-lens/rules/ast-grep-rules/coderabbit/rules/python/security/python-psycopg2-hardcoded-secret-python.yml +64 -0
  587. package/extensions/dm-lens/rules/ast-grep-rules/coderabbit/rules/python/security/python-pyjwt-hardcoded-secret-python.yml +38 -0
  588. package/extensions/dm-lens/rules/ast-grep-rules/coderabbit/rules/python/security/python-pymongo-empty-password-python.yml +50 -0
  589. package/extensions/dm-lens/rules/ast-grep-rules/coderabbit/rules/python/security/python-pymongo-hardcoded-secret-python.yml +48 -0
  590. package/extensions/dm-lens/rules/ast-grep-rules/coderabbit/rules/python/security/python-pymssql-empty-password-python.yml +50 -0
  591. package/extensions/dm-lens/rules/ast-grep-rules/coderabbit/rules/python/security/python-pymssql-hardcoded-secret-python.yml +48 -0
  592. package/extensions/dm-lens/rules/ast-grep-rules/coderabbit/rules/python/security/python-pymysql-empty-password-python.yml +49 -0
  593. package/extensions/dm-lens/rules/ast-grep-rules/coderabbit/rules/python/security/python-pymysql-hardcoded-secret-python.yml +47 -0
  594. package/extensions/dm-lens/rules/ast-grep-rules/coderabbit/rules/python/security/python-redis-empty-password-python.yml +66 -0
  595. package/extensions/dm-lens/rules/ast-grep-rules/coderabbit/rules/python/security/python-redis-hardcoded-secret-python.yml +65 -0
  596. package/extensions/dm-lens/rules/ast-grep-rules/coderabbit/rules/python/security/python-requests-empty-password-python.yml +42 -0
  597. package/extensions/dm-lens/rules/ast-grep-rules/coderabbit/rules/python/security/python-requests-hardcoded-secret-python.yml +146 -0
  598. package/extensions/dm-lens/rules/ast-grep-rules/coderabbit/rules/python/security/python-requests-oauth-hardcoded-secret-python.yml +278 -0
  599. package/extensions/dm-lens/rules/ast-grep-rules/coderabbit/rules/python/security/python-tormysql-empty-password-python.yml +301 -0
  600. package/extensions/dm-lens/rules/ast-grep-rules/coderabbit/rules/python/security/python-tormysql-hardcoded-secret-python.yml +292 -0
  601. package/extensions/dm-lens/rules/ast-grep-rules/coderabbit/rules/python/security/python-urllib3-hardcoded-secret-python.yml +52 -0
  602. package/extensions/dm-lens/rules/ast-grep-rules/coderabbit/rules/python/security/python-webrepl-empty-password-python.yml +49 -0
  603. package/extensions/dm-lens/rules/ast-grep-rules/coderabbit/rules/python/security/python-webrepl-hardcoded-secret-python.yml +47 -0
  604. package/extensions/dm-lens/rules/ast-grep-rules/coderabbit/rules/ruby/security/force-ssl-false-ruby.yml +23 -0
  605. package/extensions/dm-lens/rules/ast-grep-rules/coderabbit/rules/ruby/security/hardcoded-http-auth-in-controller-ruby.yml +55 -0
  606. package/extensions/dm-lens/rules/ast-grep-rules/coderabbit/rules/ruby/security/hardcoded-secret-rsa-passphrase-ruby.yml +218 -0
  607. package/extensions/dm-lens/rules/ast-grep-rules/coderabbit/rules/ruby/security/insufficient-rsa-key-size-ruby.yml +84 -0
  608. package/extensions/dm-lens/rules/ast-grep-rules/coderabbit/rules/ruby/security/ruby-aws-sdk-hardcoded-secret-ruby.yml +140 -0
  609. package/extensions/dm-lens/rules/ast-grep-rules/coderabbit/rules/ruby/security/ruby-cassandra-empty-password-ruby.yml +141 -0
  610. package/extensions/dm-lens/rules/ast-grep-rules/coderabbit/rules/ruby/security/ruby-cassandra-hardcoded-secret-ruby.yml +138 -0
  611. package/extensions/dm-lens/rules/ast-grep-rules/coderabbit/rules/ruby/security/ruby-excon-hardcoded-secret-ruby.yml +226 -0
  612. package/extensions/dm-lens/rules/ast-grep-rules/coderabbit/rules/ruby/security/ruby-faraday-hardcoded-secret-ruby.yml +490 -0
  613. package/extensions/dm-lens/rules/ast-grep-rules/coderabbit/rules/ruby/security/ruby-mongo-empty-password-ruby.yml +356 -0
  614. package/extensions/dm-lens/rules/ast-grep-rules/coderabbit/rules/ruby/security/ruby-mongo-hardcoded-secret-ruby.yml +400 -0
  615. package/extensions/dm-lens/rules/ast-grep-rules/coderabbit/rules/ruby/security/ruby-mysql2-empty-password-ruby.yml +227 -0
  616. package/extensions/dm-lens/rules/ast-grep-rules/coderabbit/rules/ruby/security/ruby-mysql2-hardcoded-secret-ruby.yml +248 -0
  617. package/extensions/dm-lens/rules/ast-grep-rules/coderabbit/rules/ruby/security/ruby-octokit-hardcoded-secret-ruby.yml +125 -0
  618. package/extensions/dm-lens/rules/ast-grep-rules/coderabbit/rules/ruby/security/ruby-pg-empty-password-ruby.yml +150 -0
  619. package/extensions/dm-lens/rules/ast-grep-rules/coderabbit/rules/ruby/security/ruby-pg-hardcoded-secret-ruby.yml +189 -0
  620. package/extensions/dm-lens/rules/ast-grep-rules/coderabbit/rules/ruby/security/ruby-redis-empty-password-ruby.yml +72 -0
  621. package/extensions/dm-lens/rules/ast-grep-rules/coderabbit/rules/ruby/security/ruby-redis-hardcoded-secret-ruby.yml +70 -0
  622. package/extensions/dm-lens/rules/ast-grep-rules/coderabbit/rules/rust/security/empty-password-rust.yml +1039 -0
  623. package/extensions/dm-lens/rules/ast-grep-rules/coderabbit/rules/rust/security/hardcoded-password-rust.yml +1016 -0
  624. package/extensions/dm-lens/rules/ast-grep-rules/coderabbit/rules/rust/security/postgres-empty-password-rust.yml +283 -0
  625. package/extensions/dm-lens/rules/ast-grep-rules/coderabbit/rules/rust/security/reqwest-accept-invalid-rust.yml +21 -0
  626. package/extensions/dm-lens/rules/ast-grep-rules/coderabbit/rules/rust/security/secrets-reqwest-hardcoded-auth-rust.yml +290 -0
  627. package/extensions/dm-lens/rules/ast-grep-rules/coderabbit/rules/rust/security/ssl-verify-none-rust.yml +100 -0
  628. package/extensions/dm-lens/rules/ast-grep-rules/coderabbit/rules/rust/security/tokio-postgres-empty-password-rust.yml +235 -0
  629. package/extensions/dm-lens/rules/ast-grep-rules/coderabbit/rules/rust/security/tokio-postgres-hardcoded-password-rust.yml +229 -0
  630. package/extensions/dm-lens/rules/ast-grep-rules/coderabbit/rules/scala/security/jwt-scala-hardcode-scala.yml +109 -0
  631. package/extensions/dm-lens/rules/ast-grep-rules/coderabbit/rules/scala/security/scala-jwt-hardcoded-secret-scala.yml +176 -0
  632. package/extensions/dm-lens/rules/ast-grep-rules/coderabbit/rules/swift/security/aes-hardcoded-secret-swift.yml +345 -0
  633. package/extensions/dm-lens/rules/ast-grep-rules/coderabbit/rules/swift/security/blowfish-hardcoded-secret-swift.yml +345 -0
  634. package/extensions/dm-lens/rules/ast-grep-rules/coderabbit/rules/swift/security/chacha20-hardcoded-secret-swift.yml +345 -0
  635. package/extensions/dm-lens/rules/ast-grep-rules/coderabbit/rules/swift/security/insecure-biometrics-swift.yml +43 -0
  636. package/extensions/dm-lens/rules/ast-grep-rules/coderabbit/rules/swift/security/rabbit-hardcoded-secret-swift.yml +345 -0
  637. package/extensions/dm-lens/rules/ast-grep-rules/coderabbit/rules/typescript/security/detect-angular-sce-disabled-typescript.yml +36 -0
  638. package/extensions/dm-lens/rules/ast-grep-rules/coderabbit/rules/typescript/security/express-session-hardcoded-secret-typescript.yml +203 -0
  639. package/extensions/dm-lens/rules/ast-grep-rules/coderabbit/rules/typescript/security/jwt-simple-noverify-typescript.yml +112 -0
  640. package/extensions/dm-lens/rules/ast-grep-rules/coderabbit/rules/typescript/security/node-rsa-weak-key-typescript.yml +1483 -0
  641. package/extensions/dm-lens/rules/ast-grep-rules/coderabbit/rules/typescript/security/node-sequelize-empty-password-argument-typescript.yml +169 -0
  642. package/extensions/dm-lens/rules/ast-grep-rules/coderabbit/rules/typescript/security/node-sequelize-hardcoded-secret-argument-typescript.yml +154 -0
  643. package/extensions/dm-lens/rules/ast-grep-rules/rule-schema.json +130 -0
  644. package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/__snapshots__/no-reflect-get-js-snapshot.yml +23 -0
  645. package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/__snapshots__/no-reflect-get-snapshot.yml +23 -0
  646. package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/__snapshots__/ts-void-zero-snapshot.yml +23 -0
  647. package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/array-callback-return-js-test.yml +10 -0
  648. package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/array-callback-return-test.yml +10 -0
  649. package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/avoid-duplicate-export-test.yml +14 -0
  650. package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/c-no-malloc-free-test.yml +20 -0
  651. package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/consistent-existence-index-check-js-test.yml +10 -0
  652. package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/consistent-existence-index-check-test.yml +10 -0
  653. package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/cpp-no-malloc-free-test.yml +25 -0
  654. package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/cpp-no-printf-test.yml +19 -0
  655. package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/defer-in-loop-test.yml +20 -0
  656. package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/enforce-node-protocol-js-test.yml +8 -0
  657. package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/enforce-node-protocol-test.yml +8 -0
  658. package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/find-import-file-without-extension-test.yml +12 -0
  659. package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/go-defer-func-call-antipattern-test.yml +8 -0
  660. package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/go-no-fmt-println-test.yml +19 -0
  661. package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/go-no-panic-in-lib-test.yml +17 -0
  662. package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/go-no-underscore-func-name-test.yml +18 -0
  663. package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/go-prefer-errors-is-test.yml +15 -0
  664. package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/go-prefer-string-builder-test.yml +21 -0
  665. package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/go-test-functions-test.yml +9 -0
  666. package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/gorm-find-without-where-test.yml +15 -0
  667. package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/gorm-n-plus-one-test.yml +20 -0
  668. package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/hardcoded-url-js-test.yml +9 -0
  669. package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/hardcoded-url-test.yml +9 -0
  670. package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/hyphenated-svg-attribute-test.yml +11 -0
  671. package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/incomplete-string-escaping-js-test.yml +21 -0
  672. package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/incomplete-string-escaping-test.yml +21 -0
  673. package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/inline-styles-test.yml +8 -0
  674. package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/jsx-boolean-short-circuit-test.yml +8 -0
  675. package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/jwt-no-verify-js-test.yml +9 -0
  676. package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/jwt-no-verify-test.yml +9 -0
  677. package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/kotlin-no-lateinit-test.yml +17 -0
  678. package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/kotlin-no-nullable-boolean-test.yml +15 -0
  679. package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/kotlin-no-println-test.yml +19 -0
  680. package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/kotlin-no-unnecessary-let-test.yml +7 -0
  681. package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/kotlin-no-unsafe-cast-test.yml +7 -0
  682. package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/kotlin-no-var-test.yml +7 -0
  683. package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/kotlin-prefer-data-class-test.yml +25 -0
  684. package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/kotlin-prefer-is-empty-test.yml +11 -0
  685. package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/large-class-test.yml +15 -0
  686. package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/long-parameter-list-test.yml +8 -0
  687. package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/loop-var-capture-test.yml +25 -0
  688. package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/missing-component-decorator-test.yml +7 -0
  689. package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/mutex-unlock-mismatch-test.yml +29 -0
  690. package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/nested-ternary-js-test.yml +8 -0
  691. package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/nested-ternary-test.yml +8 -0
  692. package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/nil-map-assignment-test.yml +50 -0
  693. package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/no-absolute-path-import-js-test.yml +8 -0
  694. package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/no-absolute-path-import-test.yml +8 -0
  695. package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/no-accumulating-spread-js-test.yml +8 -0
  696. package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/no-alert-js-test.yml +7 -0
  697. package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/no-alert-test.yml +7 -0
  698. package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/no-any-type-test.yml +9 -0
  699. package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/no-array-constructor-js-test.yml +9 -0
  700. package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/no-array-constructor-test.yml +9 -0
  701. package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/no-array-reverse-mutation-js-test.yml +9 -0
  702. package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/no-array-reverse-mutation-test.yml +9 -0
  703. package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/no-as-any-test.yml +8 -0
  704. package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/no-assert-tuple-test.yml +13 -0
  705. package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/no-async-promise-executor-js-test.yml +8 -0
  706. package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/no-async-promise-executor-test.yml +8 -0
  707. package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/no-await-expression-member-js-test.yml +8 -0
  708. package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/no-await-expression-member-test.yml +8 -0
  709. package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/no-await-in-promise-all-js-test.yml +7 -0
  710. package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/no-await-in-promise-all-test.yml +7 -0
  711. package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/no-await-in-promise-methods-js-test.yml +10 -0
  712. package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/no-await-in-promise-methods-test.yml +10 -0
  713. package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/no-aws-access-key-literal-test.yml +8 -0
  714. package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/no-aws-apigateway-no-auth-test.yml +12 -0
  715. package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/no-aws-s3-public-access-test.yml +9 -0
  716. package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/no-bare-except-test.yml +77 -0
  717. package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/no-bare-host-path-in-win32-branch-test.yml +87 -0
  718. package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/no-bare-object-param-test.yml +16 -0
  719. package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/no-blank-target-js-test.yml +8 -0
  720. package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/no-boolean-in-except-test.yml +28 -0
  721. package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/no-case-declarations-js-test.yml +34 -0
  722. package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/no-case-declarations-test.yml +34 -0
  723. package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/no-chained-type-assertions-test.yml +22 -0
  724. package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/no-compare-neg-zero-js-test.yml +9 -0
  725. package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/no-compare-neg-zero-test.yml +9 -0
  726. package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/no-comparison-to-none-test.yml +11 -0
  727. package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/no-comparison-to-true-false-test.yml +13 -0
  728. package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/no-compile-call-test.yml +38 -0
  729. package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/no-cond-assign-js-test.yml +9 -0
  730. package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/no-cond-assign-test.yml +9 -0
  731. package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/no-conditional-empty-object-spread-js-test.yml +9 -0
  732. package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/no-conditional-empty-object-spread-test.yml +9 -0
  733. package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/no-console-except-error-js-test.yml +13 -0
  734. package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/no-console-except-error-test.yml +13 -0
  735. package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/no-constant-condition-js-test.yml +10 -0
  736. package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/no-constant-condition-test.yml +10 -0
  737. package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/no-db-string-literal-password-test.yml +8 -0
  738. package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/no-demeter-message-chain-test.yml +16 -0
  739. package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/no-discarded-error-js-test.yml +9 -0
  740. package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/no-discarded-error-test.yml +9 -0
  741. package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/no-dunder-exit-wrong-arity-test.yml +27 -0
  742. package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/no-dupe-class-members-test.yml +44 -0
  743. package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/no-dupe-keys-js-test.yml +9 -0
  744. package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/no-dupe-keys-test.yml +9 -0
  745. package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/no-duplicate-kwarg-test.yml +8 -0
  746. package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/no-ellipsis-body-test.yml +20 -0
  747. package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/no-except-non-exception-test.yml +23 -0
  748. package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/no-extra-boolean-cast-js-test.yml +9 -0
  749. package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/no-extra-boolean-cast-test.yml +9 -0
  750. package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/no-fastapi-router-prefix-outside-init-test.yml +8 -0
  751. package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/no-flag-argument-js-test.yml +37 -0
  752. package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/no-flag-argument-test.yml +37 -0
  753. package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/no-flask-preprocess-request-ignored-test.yml +16 -0
  754. package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/no-flask-secret-key-literal-test.yml +11 -0
  755. package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/no-flask-sendfile-without-mimetype-test.yml +8 -0
  756. package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/no-global-eval-js-test.yml +17 -0
  757. package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/no-hardcoded-password-test.yml +10 -0
  758. package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/no-html-autoescape-off-test.yml +13 -0
  759. package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/no-http-headers-bracket-access-test.yml +7 -0
  760. package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/no-identity-operator-on-literals-test.yml +14 -0
  761. package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/no-implied-eval-js-test.yml +12 -0
  762. package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/no-implied-eval-test.yml +12 -0
  763. package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/no-important-test.yml +21 -0
  764. package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/no-init-return-test.yml +41 -0
  765. package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/no-inner-html-js-test.yml +14 -0
  766. package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/no-inner-html-test.yml +14 -0
  767. package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/no-insecure-randomness-js-test.yml +13 -0
  768. package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/no-insecure-randomness-test.yml +13 -0
  769. package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/no-instanceof-array-js-test.yml +8 -0
  770. package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/no-instanceof-array-test.yml +8 -0
  771. package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/no-instanceof-builtins-js-test.yml +11 -0
  772. package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/no-instanceof-builtins-test.yml +11 -0
  773. package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/no-javascript-url-js-test.yml +24 -0
  774. package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/no-javascript-url-test.yml +28 -0
  775. package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/no-jinja2-autoescape-off-test.yml +13 -0
  776. package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/no-known-value-widening-test.yml +9 -0
  777. package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/no-marshal-load-test.yml +10 -0
  778. package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/no-mutable-contextvar-default-test.yml +9 -0
  779. package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/no-mutable-default-test.yml +12 -0
  780. package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/no-mutable-export-test.yml +10 -0
  781. package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/no-nan-comparison-js-test.yml +11 -0
  782. package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/no-nan-comparison-test.yml +11 -0
  783. package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/no-negation-in-equality-check-js-test.yml +10 -0
  784. package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/no-negation-in-equality-check-test.yml +10 -0
  785. package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/no-nested-links-test.yml +18 -0
  786. package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/no-new-symbol-js-test.yml +8 -0
  787. package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/no-new-symbol-test.yml +8 -0
  788. package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/no-new-wrappers-js-test.yml +9 -0
  789. package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/no-new-wrappers-test.yml +9 -0
  790. package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/no-non-null-assertion-test.yml +226 -0
  791. package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/no-notimplemented-in-bool-test.yml +20 -0
  792. package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/no-numpy-nan-equality-test.yml +22 -0
  793. package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/no-octal-literal-test.yml +8 -0
  794. package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/no-only-defined-names-in-dunder-all-test.yml +17 -0
  795. package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/no-open-redirect-js-test.yml +12 -0
  796. package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/no-open-redirect-test.yml +12 -0
  797. package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/no-prototype-builtins-js-test.yml +9 -0
  798. package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/no-prototype-builtins-native-test.yml +9 -0
  799. package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/no-prototype-builtins-test.yml +9 -0
  800. package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/no-python-sql-string-concat-test.yml +10 -0
  801. package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/no-raise-not-implemented-test.yml +21 -0
  802. package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/no-raise-stopiteration-in-generator-test.yml +22 -0
  803. package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/no-raw-json-store-write-test.yml +17 -0
  804. package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/no-raw-types-test.yml +30 -0
  805. package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/no-reflect-apply-js-test.yml +9 -0
  806. package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/no-reflect-apply-test.yml +9 -0
  807. package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/no-reflect-get-js-test.yml +9 -0
  808. package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/no-reflect-get-test.yml +9 -0
  809. package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/no-relative-cross-package-import-test.yml +9 -0
  810. package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/no-requests-verify-false-test.yml +11 -0
  811. package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/no-requests-without-timeout-test.yml +10 -0
  812. package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/no-return-await-test.yml +12 -0
  813. package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/no-return-value-in-generator-test.yml +34 -0
  814. package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/no-runtime-typeof-test.yml +33 -0
  815. package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/no-secret-in-env-var-name-test.yml +11 -0
  816. package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/no-server-bind-wildcard-test.yml +19 -0
  817. package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/no-shape-in-symbol-names-test.yml +13 -0
  818. package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/no-single-promise-in-promise-methods-js-test.yml +10 -0
  819. package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/no-single-promise-in-promise-methods-test.yml +10 -0
  820. package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/no-singledispatch-on-method-test.yml +25 -0
  821. package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/no-sort-without-comparator-test.yml +8 -0
  822. package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/no-sql-in-code-js-test.yml +14 -0
  823. package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/no-sql-in-code-test.yml +14 -0
  824. package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/no-star-imports-test.yml +9 -0
  825. package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/no-string-concat-in-loop-test.yml +100 -0
  826. package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/no-string-ref-test.yml +8 -0
  827. package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/no-system-out-println-test.yml +7 -0
  828. package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/no-template-string-concat-test.yml +14 -0
  829. package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/no-testclient-text-without-content-test.yml +10 -0
  830. package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/no-throw-string-js-test.yml +10 -0
  831. package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/no-throw-string-test.yml +10 -0
  832. package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/no-typeof-undefined-js-test.yml +19 -0
  833. package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/no-typeof-undefined-test.yml +19 -0
  834. package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/no-unimplemented-stub-js-test.yml +10 -0
  835. package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/no-unimplemented-stub-test.yml +10 -0
  836. package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/no-unknown-laundering-test.yml +11 -0
  837. package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/no-unknown-parameters-test.yml +12 -0
  838. package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/no-unknown-returns-test.yml +16 -0
  839. package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/no-unnecessary-array-flat-depth-js-test.yml +8 -0
  840. package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/no-unnecessary-array-flat-depth-test.yml +8 -0
  841. package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/no-unnecessary-state-initializer-test.yml +7 -0
  842. package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/no-unsafe-dictionary-any-test.yml +10 -0
  843. package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/no-unsafe-dictionary-unknown-test.yml +8 -0
  844. package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/no-useless-length-check-js-test.yml +9 -0
  845. package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/no-useless-length-check-test.yml +9 -0
  846. package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/no-useless-promise-resolve-reject-js-test.yml +8 -0
  847. package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/no-useless-promise-resolve-reject-test.yml +8 -0
  848. package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/no-useless-rest-spread-js-test.yml +8 -0
  849. package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/no-useless-rest-spread-test.yml +8 -0
  850. package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/no-uvicorn-non-import-string-test.yml +10 -0
  851. package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/no-win32-isabsolute-for-qualification-test.yml +16 -0
  852. package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/no-xxe-vulnerable-xml-parser-test.yml +19 -0
  853. package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/no-yield-from-non-iterable-test.yml +11 -0
  854. package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/no-yield-return-outside-function-test.yml +19 -0
  855. package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/only-strings-in-dunder-all-test.yml +18 -0
  856. package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/prefer-array-find-js-test.yml +8 -0
  857. package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/prefer-array-find-test.yml +8 -0
  858. package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/prefer-array-flat-map-js-test.yml +8 -0
  859. package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/prefer-array-flat-map-test.yml +8 -0
  860. package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/prefer-array-some-js-test.yml +9 -0
  861. package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/prefer-array-some-test.yml +9 -0
  862. package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/prefer-at-js-test.yml +8 -0
  863. package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/prefer-at-test.yml +8 -0
  864. package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/prefer-date-now-js-test.yml +8 -0
  865. package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/prefer-date-now-test.yml +8 -0
  866. package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/prefer-dom-node-append-js-test.yml +8 -0
  867. package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/prefer-dom-node-append-test.yml +8 -0
  868. package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/prefer-dom-node-text-content-js-test.yml +9 -0
  869. package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/prefer-dom-node-text-content-test.yml +9 -0
  870. package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/prefer-keyboard-event-key-js-test.yml +11 -0
  871. package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/prefer-keyboard-event-key-test.yml +11 -0
  872. package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/prefer-math-min-max-js-test.yml +10 -0
  873. package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/prefer-math-min-max-test.yml +10 -0
  874. package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/prefer-number-properties-js-test.yml +9 -0
  875. package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/prefer-number-properties-test.yml +9 -0
  876. package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/prefer-optional-chain-test.yml +9 -0
  877. package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/prefer-prototype-methods-js-test.yml +8 -0
  878. package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/prefer-prototype-methods-test.yml +8 -0
  879. package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/prefer-query-selector-js-test.yml +9 -0
  880. package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/prefer-query-selector-test.yml +9 -0
  881. package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/prefer-string-is-empty-test.yml +7 -0
  882. package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/prefer-string-slice-js-test.yml +9 -0
  883. package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/prefer-string-slice-test.yml +9 -0
  884. package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/prefer-string-starts-ends-with-js-test.yml +9 -0
  885. package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/prefer-string-starts-ends-with-test.yml +9 -0
  886. package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/prefer-string-trim-start-end-js-test.yml +9 -0
  887. package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/prefer-string-trim-start-end-test.yml +9 -0
  888. package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/prefer-structured-clone-js-test.yml +8 -0
  889. package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/prefer-structured-clone-test.yml +8 -0
  890. package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/python-optional-type-test.yml +9 -0
  891. package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/redos-nested-quantifier-test.yml +14 -0
  892. package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/reducible-list-comprehension-test.yml +11 -0
  893. package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/redundant-state-test.yml +8 -0
  894. package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/redundant-unsafe-function-test.yml +60 -0
  895. package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/redundant-usestate-type-test.yml +10 -0
  896. package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/require-await-test.yml +9 -0
  897. package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/require-safety-comment-for-as-unknown-as-test.yml +177 -0
  898. package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/ruby-detect-path-traversal-test.yml +9 -0
  899. package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/ruby-symbol-to-proc-candidate-test.yml +10 -0
  900. package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/rust-2024-let-chain-candidate-test.yml +27 -0
  901. package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/rust-no-chars-enumerate-test.yml +7 -0
  902. package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/strict-equality-js-test.yml +12 -0
  903. package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/strict-equality-test.yml +12 -0
  904. package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/strict-inequality-js-test.yml +12 -0
  905. package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/strict-inequality-test.yml +13 -0
  906. package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/string-concat-in-loop-test.yml +20 -0
  907. package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/switch-without-default-test.yml +16 -0
  908. package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/throw-new-error-js-test.yml +10 -0
  909. package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/throw-new-error-test.yml +10 -0
  910. package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/ts-array-concat-spread-test.yml +9 -0
  911. package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/ts-array-every-some-test.yml +8 -0
  912. package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/ts-boolean-return-if-else-test.yml +13 -0
  913. package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/ts-defensive-null-guard-test.yml +14 -0
  914. package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/ts-delete-property-test.yml +8 -0
  915. package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/ts-double-negation-test.yml +9 -0
  916. package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/ts-function-constructor-test.yml +8 -0
  917. package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/ts-in-operator-loop-test.yml +13 -0
  918. package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/ts-isnan-check-test.yml +9 -0
  919. package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/ts-json-stringify-parse-test.yml +8 -0
  920. package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/ts-manual-array-contains-test.yml +13 -0
  921. package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/ts-nullish-coalescing-opportunity-test.yml +8 -0
  922. package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/ts-object-hasown-check-test.yml +8 -0
  923. package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/ts-optional-chaining-default-test.yml +8 -0
  924. package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/ts-parseint-no-radix-test.yml +9 -0
  925. package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/ts-pointless-bool-cast-test.yml +13 -0
  926. package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/ts-redundant-filter-map-test.yml +8 -0
  927. package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/ts-slice-copy-test.yml +8 -0
  928. package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/ts-string-split-index-test.yml +9 -0
  929. package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/ts-unnecessary-array-concat-test.yml +8 -0
  930. package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/ts-unnecessary-array-from-test.yml +8 -0
  931. package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/ts-unnecessary-bind-test.yml +9 -0
  932. package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/ts-unnecessary-else-return-test.yml +13 -0
  933. package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/ts-void-zero-test.yml +10 -0
  934. package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/ts-while-index-length-test.yml +8 -0
  935. package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/unchecked-throwing-call-js-test.yml +13 -0
  936. package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/unchecked-throwing-call-python-test.yml +23 -0
  937. package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/unchecked-throwing-call-test.yml +13 -0
  938. package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/unlock-in-loop-test.yml +19 -0
  939. package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/unmarshal-tag-is-dash-test.yml +23 -0
  940. package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/unnecessary-react-hook-test.yml +8 -0
  941. package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/waitgroup-done-scope-test.yml +20 -0
  942. package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/weak-rsa-key-js-test.yml +9 -0
  943. package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/weak-rsa-key-test.yml +9 -0
  944. package/extensions/dm-lens/rules/ast-grep-rules/rule-tests-disabled/no-method-field-name-collision-test.yml +23 -0
  945. package/extensions/dm-lens/rules/ast-grep-rules/rules/array-callback-return-js.yml +40 -0
  946. package/extensions/dm-lens/rules/ast-grep-rules/rules/array-callback-return.yml +40 -0
  947. package/extensions/dm-lens/rules/ast-grep-rules/rules/avoid-duplicate-export.yml +19 -0
  948. package/extensions/dm-lens/rules/ast-grep-rules/rules/c-no-malloc-free.yml +39 -0
  949. package/extensions/dm-lens/rules/ast-grep-rules/rules/consistent-existence-index-check-js.yml +15 -0
  950. package/extensions/dm-lens/rules/ast-grep-rules/rules/consistent-existence-index-check.yml +15 -0
  951. package/extensions/dm-lens/rules/ast-grep-rules/rules/cpp-no-malloc-free.yml +45 -0
  952. package/extensions/dm-lens/rules/ast-grep-rules/rules/cpp-no-printf.yml +41 -0
  953. package/extensions/dm-lens/rules/ast-grep-rules/rules/defer-in-loop.yml +10 -0
  954. package/extensions/dm-lens/rules/ast-grep-rules/rules/enforce-node-protocol-js.yml +11 -0
  955. package/extensions/dm-lens/rules/ast-grep-rules/rules/enforce-node-protocol.yml +11 -0
  956. package/extensions/dm-lens/rules/ast-grep-rules/rules/find-import-file-without-extension.yml +24 -0
  957. package/extensions/dm-lens/rules/ast-grep-rules/rules/go-defer-func-call-antipattern.yml +34 -0
  958. package/extensions/dm-lens/rules/ast-grep-rules/rules/go-no-fmt-println.yml +43 -0
  959. package/extensions/dm-lens/rules/ast-grep-rules/rules/go-no-panic-in-lib.yml +41 -0
  960. package/extensions/dm-lens/rules/ast-grep-rules/rules/go-no-underscore-func-name.yml +35 -0
  961. package/extensions/dm-lens/rules/ast-grep-rules/rules/go-prefer-errors-is.yml +40 -0
  962. package/extensions/dm-lens/rules/ast-grep-rules/rules/go-prefer-string-builder.yml +43 -0
  963. package/extensions/dm-lens/rules/ast-grep-rules/rules/go-test-functions.yml +32 -0
  964. package/extensions/dm-lens/rules/ast-grep-rules/rules/gorm-find-without-where.yml +26 -0
  965. package/extensions/dm-lens/rules/ast-grep-rules/rules/gorm-n-plus-one.yml +16 -0
  966. package/extensions/dm-lens/rules/ast-grep-rules/rules/hardcoded-url-js.yml +35 -0
  967. package/extensions/dm-lens/rules/ast-grep-rules/rules/hardcoded-url.yml +35 -0
  968. package/extensions/dm-lens/rules/ast-grep-rules/rules/hyphenated-svg-attribute.yml +32 -0
  969. package/extensions/dm-lens/rules/ast-grep-rules/rules/incomplete-string-escaping-js.yml +19 -0
  970. package/extensions/dm-lens/rules/ast-grep-rules/rules/incomplete-string-escaping.yml +19 -0
  971. package/extensions/dm-lens/rules/ast-grep-rules/rules/jsx-boolean-short-circuit.yml +40 -0
  972. package/extensions/dm-lens/rules/ast-grep-rules/rules/jwt-no-verify-js.yml +27 -0
  973. package/extensions/dm-lens/rules/ast-grep-rules/rules/jwt-no-verify.yml +27 -0
  974. package/extensions/dm-lens/rules/ast-grep-rules/rules/kotlin-no-lateinit.yml +37 -0
  975. package/extensions/dm-lens/rules/ast-grep-rules/rules/kotlin-no-nullable-boolean.yml +33 -0
  976. package/extensions/dm-lens/rules/ast-grep-rules/rules/kotlin-no-println.yml +42 -0
  977. package/extensions/dm-lens/rules/ast-grep-rules/rules/kotlin-no-unnecessary-let.yml +28 -0
  978. package/extensions/dm-lens/rules/ast-grep-rules/rules/kotlin-no-unsafe-cast.yml +28 -0
  979. package/extensions/dm-lens/rules/ast-grep-rules/rules/kotlin-no-var.yml +35 -0
  980. package/extensions/dm-lens/rules/ast-grep-rules/rules/kotlin-prefer-data-class.yml +66 -0
  981. package/extensions/dm-lens/rules/ast-grep-rules/rules/kotlin-prefer-is-empty.yml +35 -0
  982. package/extensions/dm-lens/rules/ast-grep-rules/rules/large-class.yml +14 -0
  983. package/extensions/dm-lens/rules/ast-grep-rules/rules/long-parameter-list.yml +17 -0
  984. package/extensions/dm-lens/rules/ast-grep-rules/rules/loop-var-capture.yml +42 -0
  985. package/extensions/dm-lens/rules/ast-grep-rules/rules/missing-component-decorator.yml +21 -0
  986. package/extensions/dm-lens/rules/ast-grep-rules/rules/mutex-unlock-mismatch.yml +14 -0
  987. package/extensions/dm-lens/rules/ast-grep-rules/rules/nested-ternary-js.yml +12 -0
  988. package/extensions/dm-lens/rules/ast-grep-rules/rules/nested-ternary.yml +12 -0
  989. package/extensions/dm-lens/rules/ast-grep-rules/rules/nil-map-assignment.yml +43 -0
  990. package/extensions/dm-lens/rules/ast-grep-rules/rules/no-absolute-path-import-js.yml +11 -0
  991. package/extensions/dm-lens/rules/ast-grep-rules/rules/no-absolute-path-import.yml +11 -0
  992. package/extensions/dm-lens/rules/ast-grep-rules/rules/no-accumulating-spread-js.yml +11 -0
  993. package/extensions/dm-lens/rules/ast-grep-rules/rules/no-alert-js.yml +6 -0
  994. package/extensions/dm-lens/rules/ast-grep-rules/rules/no-alert.yml +6 -0
  995. package/extensions/dm-lens/rules/ast-grep-rules/rules/no-any-type.yml +20 -0
  996. package/extensions/dm-lens/rules/ast-grep-rules/rules/no-array-constructor-js.yml +10 -0
  997. package/extensions/dm-lens/rules/ast-grep-rules/rules/no-array-constructor.yml +10 -0
  998. package/extensions/dm-lens/rules/ast-grep-rules/rules/no-array-reverse-mutation-js.yml +8 -0
  999. package/extensions/dm-lens/rules/ast-grep-rules/rules/no-array-reverse-mutation.yml +8 -0
  1000. package/extensions/dm-lens/rules/ast-grep-rules/rules/no-as-any.yml +8 -0
  1001. package/extensions/dm-lens/rules/ast-grep-rules/rules/no-assert-tuple.yml +24 -0
  1002. package/extensions/dm-lens/rules/ast-grep-rules/rules/no-async-promise-executor-js.yml +15 -0
  1003. package/extensions/dm-lens/rules/ast-grep-rules/rules/no-async-promise-executor.yml +15 -0
  1004. package/extensions/dm-lens/rules/ast-grep-rules/rules/no-await-expression-member-js.yml +22 -0
  1005. package/extensions/dm-lens/rules/ast-grep-rules/rules/no-await-expression-member.yml +22 -0
  1006. package/extensions/dm-lens/rules/ast-grep-rules/rules/no-await-in-promise-all-js.yml +20 -0
  1007. package/extensions/dm-lens/rules/ast-grep-rules/rules/no-await-in-promise-all.yml +20 -0
  1008. package/extensions/dm-lens/rules/ast-grep-rules/rules/no-await-in-promise-methods-js.yml +12 -0
  1009. package/extensions/dm-lens/rules/ast-grep-rules/rules/no-await-in-promise-methods.yml +12 -0
  1010. package/extensions/dm-lens/rules/ast-grep-rules/rules/no-aws-access-key-literal.yml +30 -0
  1011. package/extensions/dm-lens/rules/ast-grep-rules/rules/no-aws-apigateway-no-auth.yml +29 -0
  1012. package/extensions/dm-lens/rules/ast-grep-rules/rules/no-aws-s3-public-access.yml +28 -0
  1013. package/extensions/dm-lens/rules/ast-grep-rules/rules/no-bare-except.yml +19 -0
  1014. package/extensions/dm-lens/rules/ast-grep-rules/rules/no-bare-host-path-in-win32-branch.yml +27 -0
  1015. package/extensions/dm-lens/rules/ast-grep-rules/rules/no-bare-object-param.yml +60 -0
  1016. package/extensions/dm-lens/rules/ast-grep-rules/rules/no-blank-target-js.yml +25 -0
  1017. package/extensions/dm-lens/rules/ast-grep-rules/rules/no-boolean-in-except.yml +23 -0
  1018. package/extensions/dm-lens/rules/ast-grep-rules/rules/no-case-declarations-js.yml +22 -0
  1019. package/extensions/dm-lens/rules/ast-grep-rules/rules/no-case-declarations.yml +22 -0
  1020. package/extensions/dm-lens/rules/ast-grep-rules/rules/no-chained-type-assertions.yml +66 -0
  1021. package/extensions/dm-lens/rules/ast-grep-rules/rules/no-compare-neg-zero-js.yml +13 -0
  1022. package/extensions/dm-lens/rules/ast-grep-rules/rules/no-compare-neg-zero.yml +13 -0
  1023. package/extensions/dm-lens/rules/ast-grep-rules/rules/no-comparison-to-none.yml +17 -0
  1024. package/extensions/dm-lens/rules/ast-grep-rules/rules/no-comparison-to-true-false.yml +25 -0
  1025. package/extensions/dm-lens/rules/ast-grep-rules/rules/no-compile-call.yml +87 -0
  1026. package/extensions/dm-lens/rules/ast-grep-rules/rules/no-cond-assign-js.yml +36 -0
  1027. package/extensions/dm-lens/rules/ast-grep-rules/rules/no-cond-assign.yml +36 -0
  1028. package/extensions/dm-lens/rules/ast-grep-rules/rules/no-conditional-empty-object-spread-js.yml +21 -0
  1029. package/extensions/dm-lens/rules/ast-grep-rules/rules/no-conditional-empty-object-spread.yml +29 -0
  1030. package/extensions/dm-lens/rules/ast-grep-rules/rules/no-console-except-error-js.yml +30 -0
  1031. package/extensions/dm-lens/rules/ast-grep-rules/rules/no-console-except-error.yml +30 -0
  1032. package/extensions/dm-lens/rules/ast-grep-rules/rules/no-constant-condition-js.yml +18 -0
  1033. package/extensions/dm-lens/rules/ast-grep-rules/rules/no-constant-condition.yml +18 -0
  1034. package/extensions/dm-lens/rules/ast-grep-rules/rules/no-db-string-literal-password.yml +44 -0
  1035. package/extensions/dm-lens/rules/ast-grep-rules/rules/no-demeter-message-chain.yml +25 -0
  1036. package/extensions/dm-lens/rules/ast-grep-rules/rules/no-discarded-error-js.yml +23 -0
  1037. package/extensions/dm-lens/rules/ast-grep-rules/rules/no-discarded-error.yml +23 -0
  1038. package/extensions/dm-lens/rules/ast-grep-rules/rules/no-dunder-exit-wrong-arity.yml +25 -0
  1039. package/extensions/dm-lens/rules/ast-grep-rules/rules/no-dupe-class-members.yml +120 -0
  1040. package/extensions/dm-lens/rules/ast-grep-rules/rules/no-dupe-keys-js.yml +73 -0
  1041. package/extensions/dm-lens/rules/ast-grep-rules/rules/no-dupe-keys.yml +73 -0
  1042. package/extensions/dm-lens/rules/ast-grep-rules/rules/no-duplicate-kwarg.yml +26 -0
  1043. package/extensions/dm-lens/rules/ast-grep-rules/rules/no-ellipsis-body.yml +26 -0
  1044. package/extensions/dm-lens/rules/ast-grep-rules/rules/no-except-non-exception.yml +47 -0
  1045. package/extensions/dm-lens/rules/ast-grep-rules/rules/no-extra-boolean-cast-js.yml +30 -0
  1046. package/extensions/dm-lens/rules/ast-grep-rules/rules/no-extra-boolean-cast.yml +30 -0
  1047. package/extensions/dm-lens/rules/ast-grep-rules/rules/no-fastapi-router-prefix-outside-init.yml +29 -0
  1048. package/extensions/dm-lens/rules/ast-grep-rules/rules/no-flag-argument-js.yml +37 -0
  1049. package/extensions/dm-lens/rules/ast-grep-rules/rules/no-flag-argument.yml +36 -0
  1050. package/extensions/dm-lens/rules/ast-grep-rules/rules/no-flask-preprocess-request-ignored.yml +26 -0
  1051. package/extensions/dm-lens/rules/ast-grep-rules/rules/no-flask-secret-key-literal.yml +36 -0
  1052. package/extensions/dm-lens/rules/ast-grep-rules/rules/no-flask-sendfile-without-mimetype.yml +42 -0
  1053. package/extensions/dm-lens/rules/ast-grep-rules/rules/no-global-eval-js.yml +19 -0
  1054. package/extensions/dm-lens/rules/ast-grep-rules/rules/no-hardcoded-password.yml +42 -0
  1055. package/extensions/dm-lens/rules/ast-grep-rules/rules/no-html-autoescape-off.yml +25 -0
  1056. package/extensions/dm-lens/rules/ast-grep-rules/rules/no-http-headers-bracket-access.yml +22 -0
  1057. package/extensions/dm-lens/rules/ast-grep-rules/rules/no-identity-operator-on-literals.yml +69 -0
  1058. package/extensions/dm-lens/rules/ast-grep-rules/rules/no-implied-eval-js.yml +16 -0
  1059. package/extensions/dm-lens/rules/ast-grep-rules/rules/no-implied-eval.yml +16 -0
  1060. package/extensions/dm-lens/rules/ast-grep-rules/rules/no-important.yml +21 -0
  1061. package/extensions/dm-lens/rules/ast-grep-rules/rules/no-init-return.yml +33 -0
  1062. package/extensions/dm-lens/rules/ast-grep-rules/rules/no-inline-styles.yml +25 -0
  1063. package/extensions/dm-lens/rules/ast-grep-rules/rules/no-inner-html-js.yml +38 -0
  1064. package/extensions/dm-lens/rules/ast-grep-rules/rules/no-inner-html.yml +38 -0
  1065. package/extensions/dm-lens/rules/ast-grep-rules/rules/no-insecure-randomness-js.yml +20 -0
  1066. package/extensions/dm-lens/rules/ast-grep-rules/rules/no-insecure-randomness.yml +20 -0
  1067. package/extensions/dm-lens/rules/ast-grep-rules/rules/no-instanceof-array-js.yml +9 -0
  1068. package/extensions/dm-lens/rules/ast-grep-rules/rules/no-instanceof-array.yml +9 -0
  1069. package/extensions/dm-lens/rules/ast-grep-rules/rules/no-instanceof-builtins-js.yml +14 -0
  1070. package/extensions/dm-lens/rules/ast-grep-rules/rules/no-instanceof-builtins.yml +14 -0
  1071. package/extensions/dm-lens/rules/ast-grep-rules/rules/no-javascript-url-js.yml +63 -0
  1072. package/extensions/dm-lens/rules/ast-grep-rules/rules/no-javascript-url.yml +63 -0
  1073. package/extensions/dm-lens/rules/ast-grep-rules/rules/no-jinja2-autoescape-off.yml +24 -0
  1074. package/extensions/dm-lens/rules/ast-grep-rules/rules/no-known-value-widening.yml +71 -0
  1075. package/extensions/dm-lens/rules/ast-grep-rules/rules/no-marshal-load.yml +24 -0
  1076. package/extensions/dm-lens/rules/ast-grep-rules/rules/no-mutable-contextvar-default.yml +38 -0
  1077. package/extensions/dm-lens/rules/ast-grep-rules/rules/no-mutable-default.yml +17 -0
  1078. package/extensions/dm-lens/rules/ast-grep-rules/rules/no-mutable-export.yml +13 -0
  1079. package/extensions/dm-lens/rules/ast-grep-rules/rules/no-nan-comparison-js.yml +22 -0
  1080. package/extensions/dm-lens/rules/ast-grep-rules/rules/no-nan-comparison.yml +22 -0
  1081. package/extensions/dm-lens/rules/ast-grep-rules/rules/no-negation-in-equality-check-js.yml +12 -0
  1082. package/extensions/dm-lens/rules/ast-grep-rules/rules/no-negation-in-equality-check.yml +12 -0
  1083. package/extensions/dm-lens/rules/ast-grep-rules/rules/no-nested-links.yml +35 -0
  1084. package/extensions/dm-lens/rules/ast-grep-rules/rules/no-new-symbol-js.yml +8 -0
  1085. package/extensions/dm-lens/rules/ast-grep-rules/rules/no-new-symbol.yml +8 -0
  1086. package/extensions/dm-lens/rules/ast-grep-rules/rules/no-new-wrappers-js.yml +13 -0
  1087. package/extensions/dm-lens/rules/ast-grep-rules/rules/no-new-wrappers.yml +13 -0
  1088. package/extensions/dm-lens/rules/ast-grep-rules/rules/no-non-null-assertion.yml +330 -0
  1089. package/extensions/dm-lens/rules/ast-grep-rules/rules/no-notimplemented-in-bool.yml +21 -0
  1090. package/extensions/dm-lens/rules/ast-grep-rules/rules/no-numpy-nan-equality.yml +31 -0
  1091. package/extensions/dm-lens/rules/ast-grep-rules/rules/no-octal-literal.yml +14 -0
  1092. package/extensions/dm-lens/rules/ast-grep-rules/rules/no-only-defined-names-in-dunder-all.yml +36 -0
  1093. package/extensions/dm-lens/rules/ast-grep-rules/rules/no-open-redirect-js.yml +15 -0
  1094. package/extensions/dm-lens/rules/ast-grep-rules/rules/no-open-redirect.yml +15 -0
  1095. package/extensions/dm-lens/rules/ast-grep-rules/rules/no-prototype-builtins-js.yml +15 -0
  1096. package/extensions/dm-lens/rules/ast-grep-rules/rules/no-prototype-builtins-native.yml +17 -0
  1097. package/extensions/dm-lens/rules/ast-grep-rules/rules/no-prototype-builtins.yml +15 -0
  1098. package/extensions/dm-lens/rules/ast-grep-rules/rules/no-python-sql-string-concat.yml +37 -0
  1099. package/extensions/dm-lens/rules/ast-grep-rules/rules/no-raise-not-implemented.yml +16 -0
  1100. package/extensions/dm-lens/rules/ast-grep-rules/rules/no-raise-stopiteration-in-generator.yml +28 -0
  1101. package/extensions/dm-lens/rules/ast-grep-rules/rules/no-raw-json-store-write.yml +37 -0
  1102. package/extensions/dm-lens/rules/ast-grep-rules/rules/no-raw-types.yml +33 -0
  1103. package/extensions/dm-lens/rules/ast-grep-rules/rules/no-reflect-apply-js.yml +29 -0
  1104. package/extensions/dm-lens/rules/ast-grep-rules/rules/no-reflect-apply.yml +30 -0
  1105. package/extensions/dm-lens/rules/ast-grep-rules/rules/no-reflect-get-js.yml +41 -0
  1106. package/extensions/dm-lens/rules/ast-grep-rules/rules/no-reflect-get.yml +42 -0
  1107. package/extensions/dm-lens/rules/ast-grep-rules/rules/no-relative-imports.yml +20 -0
  1108. package/extensions/dm-lens/rules/ast-grep-rules/rules/no-requests-verify-false.yml +27 -0
  1109. package/extensions/dm-lens/rules/ast-grep-rules/rules/no-requests-without-timeout.yml +113 -0
  1110. package/extensions/dm-lens/rules/ast-grep-rules/rules/no-return-await.yml +15 -0
  1111. package/extensions/dm-lens/rules/ast-grep-rules/rules/no-return-value-in-generator.yml +48 -0
  1112. package/extensions/dm-lens/rules/ast-grep-rules/rules/no-runtime-typeof.yml +121 -0
  1113. package/extensions/dm-lens/rules/ast-grep-rules/rules/no-secret-in-env-var-name.yml +37 -0
  1114. package/extensions/dm-lens/rules/ast-grep-rules/rules/no-server-bind-wildcard.yml +44 -0
  1115. package/extensions/dm-lens/rules/ast-grep-rules/rules/no-shape-in-symbol-names.yml +68 -0
  1116. package/extensions/dm-lens/rules/ast-grep-rules/rules/no-single-promise-in-promise-methods-js.yml +12 -0
  1117. package/extensions/dm-lens/rules/ast-grep-rules/rules/no-single-promise-in-promise-methods.yml +12 -0
  1118. package/extensions/dm-lens/rules/ast-grep-rules/rules/no-singledispatch-on-method.yml +27 -0
  1119. package/extensions/dm-lens/rules/ast-grep-rules/rules/no-sort-without-comparator.yml +14 -0
  1120. package/extensions/dm-lens/rules/ast-grep-rules/rules/no-sql-in-code-js.yml +63 -0
  1121. package/extensions/dm-lens/rules/ast-grep-rules/rules/no-sql-in-code.yml +63 -0
  1122. package/extensions/dm-lens/rules/ast-grep-rules/rules/no-star-imports.yml +11 -0
  1123. package/extensions/dm-lens/rules/ast-grep-rules/rules/no-string-concat-in-loop.yml +90 -0
  1124. package/extensions/dm-lens/rules/ast-grep-rules/rules/no-string-ref.yml +22 -0
  1125. package/extensions/dm-lens/rules/ast-grep-rules/rules/no-system-out-println.yml +16 -0
  1126. package/extensions/dm-lens/rules/ast-grep-rules/rules/no-template-string-concat.yml +21 -0
  1127. package/extensions/dm-lens/rules/ast-grep-rules/rules/no-testclient-text-without-content.yml +39 -0
  1128. package/extensions/dm-lens/rules/ast-grep-rules/rules/no-throw-string-js.yml +12 -0
  1129. package/extensions/dm-lens/rules/ast-grep-rules/rules/no-throw-string.yml +12 -0
  1130. package/extensions/dm-lens/rules/ast-grep-rules/rules/no-typeof-undefined-js.yml +21 -0
  1131. package/extensions/dm-lens/rules/ast-grep-rules/rules/no-typeof-undefined.yml +21 -0
  1132. package/extensions/dm-lens/rules/ast-grep-rules/rules/no-unimplemented-stub-js.yml +11 -0
  1133. package/extensions/dm-lens/rules/ast-grep-rules/rules/no-unimplemented-stub.yml +11 -0
  1134. package/extensions/dm-lens/rules/ast-grep-rules/rules/no-unknown-laundering.yml +32 -0
  1135. package/extensions/dm-lens/rules/ast-grep-rules/rules/no-unknown-parameters.yml +67 -0
  1136. package/extensions/dm-lens/rules/ast-grep-rules/rules/no-unknown-returns.yml +106 -0
  1137. package/extensions/dm-lens/rules/ast-grep-rules/rules/no-unnecessary-array-flat-depth-js.yml +8 -0
  1138. package/extensions/dm-lens/rules/ast-grep-rules/rules/no-unnecessary-array-flat-depth.yml +8 -0
  1139. package/extensions/dm-lens/rules/ast-grep-rules/rules/no-unnecessary-state-initializer.yml +17 -0
  1140. package/extensions/dm-lens/rules/ast-grep-rules/rules/no-unsafe-dictionary-any.yml +50 -0
  1141. package/extensions/dm-lens/rules/ast-grep-rules/rules/no-unsafe-dictionary-unknown.yml +56 -0
  1142. package/extensions/dm-lens/rules/ast-grep-rules/rules/no-useless-length-check-js.yml +11 -0
  1143. package/extensions/dm-lens/rules/ast-grep-rules/rules/no-useless-length-check.yml +11 -0
  1144. package/extensions/dm-lens/rules/ast-grep-rules/rules/no-useless-promise-resolve-reject-js.yml +10 -0
  1145. package/extensions/dm-lens/rules/ast-grep-rules/rules/no-useless-promise-resolve-reject.yml +10 -0
  1146. package/extensions/dm-lens/rules/ast-grep-rules/rules/no-useless-rest-spread-js.yml +10 -0
  1147. package/extensions/dm-lens/rules/ast-grep-rules/rules/no-useless-rest-spread.yml +10 -0
  1148. package/extensions/dm-lens/rules/ast-grep-rules/rules/no-uvicorn-non-import-string.yml +46 -0
  1149. package/extensions/dm-lens/rules/ast-grep-rules/rules/no-win32-isabsolute-for-qualification.yml +25 -0
  1150. package/extensions/dm-lens/rules/ast-grep-rules/rules/no-xxe-vulnerable-xml-parser.yml +32 -0
  1151. package/extensions/dm-lens/rules/ast-grep-rules/rules/no-yield-from-non-iterable.yml +33 -0
  1152. package/extensions/dm-lens/rules/ast-grep-rules/rules/no-yield-return-outside-function.yml +31 -0
  1153. package/extensions/dm-lens/rules/ast-grep-rules/rules/only-strings-in-dunder-all.yml +32 -0
  1154. package/extensions/dm-lens/rules/ast-grep-rules/rules/prefer-array-find-js.yml +10 -0
  1155. package/extensions/dm-lens/rules/ast-grep-rules/rules/prefer-array-find.yml +10 -0
  1156. package/extensions/dm-lens/rules/ast-grep-rules/rules/prefer-array-flat-map-js.yml +8 -0
  1157. package/extensions/dm-lens/rules/ast-grep-rules/rules/prefer-array-flat-map.yml +8 -0
  1158. package/extensions/dm-lens/rules/ast-grep-rules/rules/prefer-array-some-js.yml +11 -0
  1159. package/extensions/dm-lens/rules/ast-grep-rules/rules/prefer-array-some.yml +11 -0
  1160. package/extensions/dm-lens/rules/ast-grep-rules/rules/prefer-at-js.yml +10 -0
  1161. package/extensions/dm-lens/rules/ast-grep-rules/rules/prefer-at.yml +10 -0
  1162. package/extensions/dm-lens/rules/ast-grep-rules/rules/prefer-date-now-js.yml +10 -0
  1163. package/extensions/dm-lens/rules/ast-grep-rules/rules/prefer-date-now.yml +10 -0
  1164. package/extensions/dm-lens/rules/ast-grep-rules/rules/prefer-dom-node-append-js.yml +8 -0
  1165. package/extensions/dm-lens/rules/ast-grep-rules/rules/prefer-dom-node-append.yml +8 -0
  1166. package/extensions/dm-lens/rules/ast-grep-rules/rules/prefer-dom-node-text-content-js.yml +8 -0
  1167. package/extensions/dm-lens/rules/ast-grep-rules/rules/prefer-dom-node-text-content.yml +8 -0
  1168. package/extensions/dm-lens/rules/ast-grep-rules/rules/prefer-keyboard-event-key-js.yml +10 -0
  1169. package/extensions/dm-lens/rules/ast-grep-rules/rules/prefer-keyboard-event-key.yml +10 -0
  1170. package/extensions/dm-lens/rules/ast-grep-rules/rules/prefer-math-min-max-js.yml +12 -0
  1171. package/extensions/dm-lens/rules/ast-grep-rules/rules/prefer-math-min-max.yml +12 -0
  1172. package/extensions/dm-lens/rules/ast-grep-rules/rules/prefer-number-properties-js.yml +10 -0
  1173. package/extensions/dm-lens/rules/ast-grep-rules/rules/prefer-number-properties.yml +10 -0
  1174. package/extensions/dm-lens/rules/ast-grep-rules/rules/prefer-optional-chain.yml +14 -0
  1175. package/extensions/dm-lens/rules/ast-grep-rules/rules/prefer-prototype-methods-js.yml +8 -0
  1176. package/extensions/dm-lens/rules/ast-grep-rules/rules/prefer-prototype-methods.yml +8 -0
  1177. package/extensions/dm-lens/rules/ast-grep-rules/rules/prefer-query-selector-js.yml +11 -0
  1178. package/extensions/dm-lens/rules/ast-grep-rules/rules/prefer-query-selector.yml +11 -0
  1179. package/extensions/dm-lens/rules/ast-grep-rules/rules/prefer-string-is-empty.yml +11 -0
  1180. package/extensions/dm-lens/rules/ast-grep-rules/rules/prefer-string-slice-js.yml +10 -0
  1181. package/extensions/dm-lens/rules/ast-grep-rules/rules/prefer-string-slice.yml +10 -0
  1182. package/extensions/dm-lens/rules/ast-grep-rules/rules/prefer-string-starts-ends-with-js.yml +10 -0
  1183. package/extensions/dm-lens/rules/ast-grep-rules/rules/prefer-string-starts-ends-with.yml +10 -0
  1184. package/extensions/dm-lens/rules/ast-grep-rules/rules/prefer-string-trim-start-end-js.yml +10 -0
  1185. package/extensions/dm-lens/rules/ast-grep-rules/rules/prefer-string-trim-start-end.yml +10 -0
  1186. package/extensions/dm-lens/rules/ast-grep-rules/rules/prefer-structured-clone-js.yml +9 -0
  1187. package/extensions/dm-lens/rules/ast-grep-rules/rules/prefer-structured-clone.yml +9 -0
  1188. package/extensions/dm-lens/rules/ast-grep-rules/rules/python-optional-type.yml +22 -0
  1189. package/extensions/dm-lens/rules/ast-grep-rules/rules/redos-nested-quantifier.yml +23 -0
  1190. package/extensions/dm-lens/rules/ast-grep-rules/rules/reducible-list-comprehension.yml +29 -0
  1191. package/extensions/dm-lens/rules/ast-grep-rules/rules/redundant-state.yml +16 -0
  1192. package/extensions/dm-lens/rules/ast-grep-rules/rules/redundant-unsafe-function.yml +53 -0
  1193. package/extensions/dm-lens/rules/ast-grep-rules/rules/redundant-usestate-type.yml +15 -0
  1194. package/extensions/dm-lens/rules/ast-grep-rules/rules/require-await.yml +14 -0
  1195. package/extensions/dm-lens/rules/ast-grep-rules/rules/require-safety-comment-for-as-unknown-as.yml +184 -0
  1196. package/extensions/dm-lens/rules/ast-grep-rules/rules/ruby-detect-path-traversal.yml +33 -0
  1197. package/extensions/dm-lens/rules/ast-grep-rules/rules/ruby-symbol-to-proc-candidate.yml +25 -0
  1198. package/extensions/dm-lens/rules/ast-grep-rules/rules/rust-2024-let-chain-candidate.yml +56 -0
  1199. package/extensions/dm-lens/rules/ast-grep-rules/rules/rust-no-chars-enumerate.yml +19 -0
  1200. package/extensions/dm-lens/rules/ast-grep-rules/rules/strict-equality-js.yml +23 -0
  1201. package/extensions/dm-lens/rules/ast-grep-rules/rules/strict-equality.yml +23 -0
  1202. package/extensions/dm-lens/rules/ast-grep-rules/rules/strict-inequality-js.yml +23 -0
  1203. package/extensions/dm-lens/rules/ast-grep-rules/rules/strict-inequality.yml +23 -0
  1204. package/extensions/dm-lens/rules/ast-grep-rules/rules/string-concat-in-loop.yml +31 -0
  1205. package/extensions/dm-lens/rules/ast-grep-rules/rules/switch-without-default.yml +19 -0
  1206. package/extensions/dm-lens/rules/ast-grep-rules/rules/throw-new-error-js.yml +14 -0
  1207. package/extensions/dm-lens/rules/ast-grep-rules/rules/throw-new-error.yml +14 -0
  1208. package/extensions/dm-lens/rules/ast-grep-rules/rules/ts-array-concat-spread.yml +10 -0
  1209. package/extensions/dm-lens/rules/ast-grep-rules/rules/ts-array-every-some.yml +22 -0
  1210. package/extensions/dm-lens/rules/ast-grep-rules/rules/ts-boolean-return-if-else.yml +12 -0
  1211. package/extensions/dm-lens/rules/ast-grep-rules/rules/ts-defensive-null-guard.yml +12 -0
  1212. package/extensions/dm-lens/rules/ast-grep-rules/rules/ts-delete-property.yml +10 -0
  1213. package/extensions/dm-lens/rules/ast-grep-rules/rules/ts-double-negation.yml +10 -0
  1214. package/extensions/dm-lens/rules/ast-grep-rules/rules/ts-function-constructor.yml +12 -0
  1215. package/extensions/dm-lens/rules/ast-grep-rules/rules/ts-in-operator-loop.yml +22 -0
  1216. package/extensions/dm-lens/rules/ast-grep-rules/rules/ts-isnan-check.yml +10 -0
  1217. package/extensions/dm-lens/rules/ast-grep-rules/rules/ts-json-stringify-parse.yml +17 -0
  1218. package/extensions/dm-lens/rules/ast-grep-rules/rules/ts-manual-array-contains.yml +25 -0
  1219. package/extensions/dm-lens/rules/ast-grep-rules/rules/ts-nullish-coalescing-opportunity.yml +20 -0
  1220. package/extensions/dm-lens/rules/ast-grep-rules/rules/ts-object-hasown-check.yml +9 -0
  1221. package/extensions/dm-lens/rules/ast-grep-rules/rules/ts-optional-chaining-default.yml +21 -0
  1222. package/extensions/dm-lens/rules/ast-grep-rules/rules/ts-parseint-no-radix.yml +18 -0
  1223. package/extensions/dm-lens/rules/ast-grep-rules/rules/ts-pointless-bool-cast.yml +10 -0
  1224. package/extensions/dm-lens/rules/ast-grep-rules/rules/ts-redundant-filter-map.yml +10 -0
  1225. package/extensions/dm-lens/rules/ast-grep-rules/rules/ts-slice-copy.yml +11 -0
  1226. package/extensions/dm-lens/rules/ast-grep-rules/rules/ts-string-split-index.yml +12 -0
  1227. package/extensions/dm-lens/rules/ast-grep-rules/rules/ts-unnecessary-array-concat.yml +9 -0
  1228. package/extensions/dm-lens/rules/ast-grep-rules/rules/ts-unnecessary-array-from.yml +9 -0
  1229. package/extensions/dm-lens/rules/ast-grep-rules/rules/ts-unnecessary-bind.yml +10 -0
  1230. package/extensions/dm-lens/rules/ast-grep-rules/rules/ts-unnecessary-else-return.yml +19 -0
  1231. package/extensions/dm-lens/rules/ast-grep-rules/rules/ts-void-zero.yml +15 -0
  1232. package/extensions/dm-lens/rules/ast-grep-rules/rules/ts-while-index-length.yml +10 -0
  1233. package/extensions/dm-lens/rules/ast-grep-rules/rules/unchecked-throwing-call-js.yml +29 -0
  1234. package/extensions/dm-lens/rules/ast-grep-rules/rules/unchecked-throwing-call-python.yml +48 -0
  1235. package/extensions/dm-lens/rules/ast-grep-rules/rules/unchecked-throwing-call.yml +29 -0
  1236. package/extensions/dm-lens/rules/ast-grep-rules/rules/unlock-in-loop.yml +22 -0
  1237. package/extensions/dm-lens/rules/ast-grep-rules/rules/unmarshal-tag-is-dash.yml +20 -0
  1238. package/extensions/dm-lens/rules/ast-grep-rules/rules/unnecessary-react-hook.yml +27 -0
  1239. package/extensions/dm-lens/rules/ast-grep-rules/rules/waitgroup-done-scope.yml +11 -0
  1240. package/extensions/dm-lens/rules/ast-grep-rules/rules/weak-rsa-key-js.yml +28 -0
  1241. package/extensions/dm-lens/rules/ast-grep-rules/rules/weak-rsa-key.yml +28 -0
  1242. package/extensions/dm-lens/rules/ast-grep-rules/rules-disabled/constructor-super-js.yml +24 -0
  1243. package/extensions/dm-lens/rules/ast-grep-rules/rules-disabled/constructor-super.yml +25 -0
  1244. package/extensions/dm-lens/rules/ast-grep-rules/rules-disabled/gorm-unbounded-preload.yml +41 -0
  1245. package/extensions/dm-lens/rules/ast-grep-rules/rules-disabled/no-architecture-violation.yml +21 -0
  1246. package/extensions/dm-lens/rules/ast-grep-rules/rules-disabled/no-hardcoded-secrets-js.yml +20 -0
  1247. package/extensions/dm-lens/rules/ast-grep-rules/rules-disabled/no-hardcoded-secrets.yml +21 -0
  1248. package/extensions/dm-lens/rules/ast-grep-rules/rules-disabled/no-method-field-name-collision.yml +42 -0
  1249. package/extensions/dm-lens/rules/ast-grep-rules/rules-disabled/no-param-reassign.yml +16 -0
  1250. package/extensions/dm-lens/rules/ast-grep-rules/rules-disabled/no-process-env.yml +21 -0
  1251. package/extensions/dm-lens/rules/ast-grep-rules/rules-disabled/no-shadow.yml +20 -0
  1252. package/extensions/dm-lens/rules/ast-grep-rules/rules-disabled/no-this-in-static-js.yml +14 -0
  1253. package/extensions/dm-lens/rules/ast-grep-rules/rules-disabled/no-this-in-static.yml +14 -0
  1254. package/extensions/dm-lens/rules/ast-grep-rules/rules-disabled/prefer-string-raw-js.yml +9 -0
  1255. package/extensions/dm-lens/rules/ast-grep-rules/rules-disabled/prefer-string-raw.yml +9 -0
  1256. package/extensions/dm-lens/rules/ast-grep-rules/rules-disabled/shadow-err-variable.yml +38 -0
  1257. package/extensions/dm-lens/rules/ast-grep-rules/rules-disabled/unchecked-sync-fs-js.yml +47 -0
  1258. package/extensions/dm-lens/rules/ast-grep-rules/rules-disabled/unchecked-sync-fs.yml +52 -0
  1259. package/extensions/dm-lens/rules/ast-grep-rules/self-scan-baseline.json +5 -0
  1260. package/extensions/dm-lens/rules/rule-catalog.json +1725 -0
  1261. package/extensions/dm-lens/rules/tree-sitter-queries/c/goto-into-block.yml +72 -0
  1262. package/extensions/dm-lens/rules/tree-sitter-queries/c/goto-label-order.yml +65 -0
  1263. package/extensions/dm-lens/rules/tree-sitter-queries/c/hardcoded-secrets.yml +55 -0
  1264. package/extensions/dm-lens/rules/tree-sitter-queries/c/memset-sensitive-data.yml +50 -0
  1265. package/extensions/dm-lens/rules/tree-sitter-queries/c/no-bit-fields.yml +48 -0
  1266. package/extensions/dm-lens/rules/tree-sitter-queries/c/no-octal-literals.yml +46 -0
  1267. package/extensions/dm-lens/rules/tree-sitter-queries/c/no-pointer-arithmetic-array-access.yml +50 -0
  1268. package/extensions/dm-lens/rules/tree-sitter-queries/c/no-redundant-pointer-ops.yml +57 -0
  1269. package/extensions/dm-lens/rules/tree-sitter-queries/c/no-reserved-identifiers.yml +49 -0
  1270. package/extensions/dm-lens/rules/tree-sitter-queries/c/no-stdlib-name-as-id.yml +53 -0
  1271. package/extensions/dm-lens/rules/tree-sitter-queries/c/non-case-label-in-switch.yml +56 -0
  1272. package/extensions/dm-lens/rules/tree-sitter-queries/c/noreturn-returns.yml +60 -0
  1273. package/extensions/dm-lens/rules/tree-sitter-queries/c-disabled/case-range-multiple-values.yml +65 -0
  1274. package/extensions/dm-lens/rules/tree-sitter-queries/cobol-disabled/alter-statement.yml +39 -0
  1275. package/extensions/dm-lens/rules/tree-sitter-queries/cobol-disabled/lock-table-cobol.yml +35 -0
  1276. package/extensions/dm-lens/rules/tree-sitter-queries/cpp/no-auto-ptr.yml +49 -0
  1277. package/extensions/dm-lens/rules/tree-sitter-queries/cpp/no-memset-sensitive-data.yml +63 -0
  1278. package/extensions/dm-lens/rules/tree-sitter-queries/cpp/no-scoped-lock-without-args.yml +52 -0
  1279. package/extensions/dm-lens/rules/tree-sitter-queries/cpp/unnecessary-bit-ops.yml +58 -0
  1280. package/extensions/dm-lens/rules/tree-sitter-queries/csharp/async-await-identifiers.yml +50 -0
  1281. package/extensions/dm-lens/rules/tree-sitter-queries/csharp/is-with-this.yml +52 -0
  1282. package/extensions/dm-lens/rules/tree-sitter-queries/csharp/no-dangerous-get-handle.yml +59 -0
  1283. package/extensions/dm-lens/rules/tree-sitter-queries/csharp/no-operator-eq-reference.yml +60 -0
  1284. package/extensions/dm-lens/rules/tree-sitter-queries/csharp/no-thread-resume-suspend.yml +60 -0
  1285. package/extensions/dm-lens/rules/tree-sitter-queries/css/calc-spacing.yml +52 -0
  1286. package/extensions/dm-lens/rules/tree-sitter-queries/go/go-bare-error.yml +61 -0
  1287. package/extensions/dm-lens/rules/tree-sitter-queries/go/go-command-injection.yml +55 -0
  1288. package/extensions/dm-lens/rules/tree-sitter-queries/go/go-context-background-handler.yml +57 -0
  1289. package/extensions/dm-lens/rules/tree-sitter-queries/go/go-defer-in-loop.yml +49 -0
  1290. package/extensions/dm-lens/rules/tree-sitter-queries/go/go-direct-panic.yml +45 -0
  1291. package/extensions/dm-lens/rules/tree-sitter-queries/go/go-empty-if-err.yml +47 -0
  1292. package/extensions/dm-lens/rules/tree-sitter-queries/go/go-goroutine-loop-capture.yml +49 -0
  1293. package/extensions/dm-lens/rules/tree-sitter-queries/go/go-hardcoded-secrets.yml +56 -0
  1294. package/extensions/dm-lens/rules/tree-sitter-queries/go/go-ignored-call-result.yml +52 -0
  1295. package/extensions/dm-lens/rules/tree-sitter-queries/go/go-insecure-random.yml +51 -0
  1296. package/extensions/dm-lens/rules/tree-sitter-queries/go/go-log-fatal.yml +49 -0
  1297. package/extensions/dm-lens/rules/tree-sitter-queries/go/go-mutex-copy.yml +60 -0
  1298. package/extensions/dm-lens/rules/tree-sitter-queries/go/go-path-traversal.yml +51 -0
  1299. package/extensions/dm-lens/rules/tree-sitter-queries/go/go-shared-map-write-goroutine.yml +54 -0
  1300. package/extensions/dm-lens/rules/tree-sitter-queries/go/go-sql-injection.yml +55 -0
  1301. package/extensions/dm-lens/rules/tree-sitter-queries/go/go-time-sleep-test.yml +50 -0
  1302. package/extensions/dm-lens/rules/tree-sitter-queries/go/go-weak-hash.yml +51 -0
  1303. package/extensions/dm-lens/rules/tree-sitter-queries/java/infinite-loop-java.yml +58 -0
  1304. package/extensions/dm-lens/rules/tree-sitter-queries/java/infinite-recursion.yml +58 -0
  1305. package/extensions/dm-lens/rules/tree-sitter-queries/java/junit-call-super.yml +65 -0
  1306. package/extensions/dm-lens/rules/tree-sitter-queries/java/main-should-not-throw.yml +63 -0
  1307. package/extensions/dm-lens/rules/tree-sitter-queries/java/name-capitalization-conflict.yml +54 -0
  1308. package/extensions/dm-lens/rules/tree-sitter-queries/java/no-clone-override.yml +60 -0
  1309. package/extensions/dm-lens/rules/tree-sitter-queries/java/no-double-checked-locking.yml +76 -0
  1310. package/extensions/dm-lens/rules/tree-sitter-queries/java/no-exit-methods.yml +50 -0
  1311. package/extensions/dm-lens/rules/tree-sitter-queries/java/no-field-shadowing.yml +66 -0
  1312. package/extensions/dm-lens/rules/tree-sitter-queries/java/no-future-keywords.yml +49 -0
  1313. package/extensions/dm-lens/rules/tree-sitter-queries/java/no-octal-values.yml +48 -0
  1314. package/extensions/dm-lens/rules/tree-sitter-queries/java/no-threadgroup.yml +52 -0
  1315. package/extensions/dm-lens/rules/tree-sitter-queries/java/no-threads-in-constructors.yml +73 -0
  1316. package/extensions/dm-lens/rules/tree-sitter-queries/java/prepared-statement-valid-indices.yml +54 -0
  1317. package/extensions/dm-lens/rules/tree-sitter-queries/java/resources-closed.yml +57 -0
  1318. package/extensions/dm-lens/rules/tree-sitter-queries/java/springboot-default-package.yml +72 -0
  1319. package/extensions/dm-lens/rules/tree-sitter-queries/java/switch-fall-through.yml +72 -0
  1320. package/extensions/dm-lens/rules/tree-sitter-queries/java/switch-non-case-labels.yml +63 -0
  1321. package/extensions/dm-lens/rules/tree-sitter-queries/java/tests-include-assertions.yml +61 -0
  1322. package/extensions/dm-lens/rules/tree-sitter-queries/java/unnecessary-bit-ops-java.yml +57 -0
  1323. package/extensions/dm-lens/rules/tree-sitter-queries/javascript/switch-case-termination-js.yml +61 -0
  1324. package/extensions/dm-lens/rules/tree-sitter-queries/javascript/switch-non-case-labels.yml +53 -0
  1325. package/extensions/dm-lens/rules/tree-sitter-queries/kotlin/prepared-statement-indices.yml +53 -0
  1326. package/extensions/dm-lens/rules/tree-sitter-queries/php/no-exit-die.yml +52 -0
  1327. package/extensions/dm-lens/rules/tree-sitter-queries/php/this-in-static-context.yml +75 -0
  1328. package/extensions/dm-lens/rules/tree-sitter-queries/plsql-disabled/lock-table.yml +42 -0
  1329. package/extensions/dm-lens/rules/tree-sitter-queries/plsql-disabled/no-synchronize.yml +47 -0
  1330. package/extensions/dm-lens/rules/tree-sitter-queries/python/aws-public-access-policy.yml +68 -0
  1331. package/extensions/dm-lens/rules/tree-sitter-queries/python/bare-except.yml +56 -0
  1332. package/extensions/dm-lens/rules/tree-sitter-queries/python/endpoint-204-with-body.yml +62 -0
  1333. package/extensions/dm-lens/rules/tree-sitter-queries/python/eval-exec.yml +52 -0
  1334. package/extensions/dm-lens/rules/tree-sitter-queries/python/exit-signature-check.yml +59 -0
  1335. package/extensions/dm-lens/rules/tree-sitter-queries/python/in-operator-unsupported.yml +56 -0
  1336. package/extensions/dm-lens/rules/tree-sitter-queries/python/is-vs-equals.yml +62 -0
  1337. package/extensions/dm-lens/rules/tree-sitter-queries/python/iter-return-iterator.yml +59 -0
  1338. package/extensions/dm-lens/rules/tree-sitter-queries/python/mutable-default-arg.yml +59 -0
  1339. package/extensions/dm-lens/rules/tree-sitter-queries/python/no-super-torchscript.yml +48 -0
  1340. package/extensions/dm-lens/rules/tree-sitter-queries/python/notimplemented-boolean-context.yml +63 -0
  1341. package/extensions/dm-lens/rules/tree-sitter-queries/python/open-invalid-mode.yml +58 -0
  1342. package/extensions/dm-lens/rules/tree-sitter-queries/python/python-assert-production.yml +53 -0
  1343. package/extensions/dm-lens/rules/tree-sitter-queries/python/python-command-injection.yml +63 -0
  1344. package/extensions/dm-lens/rules/tree-sitter-queries/python/python-cross-language-method.yml +61 -0
  1345. package/extensions/dm-lens/rules/tree-sitter-queries/python/python-debugger.yml +48 -0
  1346. package/extensions/dm-lens/rules/tree-sitter-queries/python/python-empty-except.yml +50 -0
  1347. package/extensions/dm-lens/rules/tree-sitter-queries/python/python-hallucinated-import.yml +58 -0
  1348. package/extensions/dm-lens/rules/tree-sitter-queries/python/python-hardcoded-secrets.yml +46 -0
  1349. package/extensions/dm-lens/rules/tree-sitter-queries/python/python-insecure-deserialization.yml +48 -0
  1350. package/extensions/dm-lens/rules/tree-sitter-queries/python/python-insecure-random.yml +51 -0
  1351. package/extensions/dm-lens/rules/tree-sitter-queries/python/python-mutable-class-attr.yml +59 -0
  1352. package/extensions/dm-lens/rules/tree-sitter-queries/python/python-path-traversal.yml +55 -0
  1353. package/extensions/dm-lens/rules/tree-sitter-queries/python/python-raise-string.yml +40 -0
  1354. package/extensions/dm-lens/rules/tree-sitter-queries/python/python-sleep-in-test.yml +50 -0
  1355. package/extensions/dm-lens/rules/tree-sitter-queries/python/python-special-method-arity.yml +67 -0
  1356. package/extensions/dm-lens/rules/tree-sitter-queries/python/python-sql-injection.yml +57 -0
  1357. package/extensions/dm-lens/rules/tree-sitter-queries/python/python-ssrf.yml +50 -0
  1358. package/extensions/dm-lens/rules/tree-sitter-queries/python/python-subprocess-shell.yml +60 -0
  1359. package/extensions/dm-lens/rules/tree-sitter-queries/python/python-thread-global-write.yml +64 -0
  1360. package/extensions/dm-lens/rules/tree-sitter-queries/python/python-unsafe-regex.yml +61 -0
  1361. package/extensions/dm-lens/rules/tree-sitter-queries/python/python-weak-hash.yml +51 -0
  1362. package/extensions/dm-lens/rules/tree-sitter-queries/python/return-in-generator.yml +58 -0
  1363. package/extensions/dm-lens/rules/tree-sitter-queries/python/return-in-init.yml +57 -0
  1364. package/extensions/dm-lens/rules/tree-sitter-queries/python/send-file-mimetype.yml +53 -0
  1365. package/extensions/dm-lens/rules/tree-sitter-queries/python/slots-assignment-mismatch.yml +73 -0
  1366. package/extensions/dm-lens/rules/tree-sitter-queries/python/string-format-arity-mismatch.yml +52 -0
  1367. package/extensions/dm-lens/rules/tree-sitter-queries/python/unreachable-except.yml +62 -0
  1368. package/extensions/dm-lens/rules/tree-sitter-queries/python/wildcard-import.yml +48 -0
  1369. package/extensions/dm-lens/rules/tree-sitter-queries/python/yield-return-outside-function.yml +54 -0
  1370. package/extensions/dm-lens/rules/tree-sitter-queries/python-disabled/python-print-statement.yml +69 -0
  1371. package/extensions/dm-lens/rules/tree-sitter-queries/ruby/ruby-command-injection.yml +45 -0
  1372. package/extensions/dm-lens/rules/tree-sitter-queries/ruby/ruby-debugger.yml +46 -0
  1373. package/extensions/dm-lens/rules/tree-sitter-queries/ruby/ruby-dynamic-send.yml +54 -0
  1374. package/extensions/dm-lens/rules/tree-sitter-queries/ruby/ruby-empty-rescue.yml +49 -0
  1375. package/extensions/dm-lens/rules/tree-sitter-queries/ruby/ruby-eval.yml +45 -0
  1376. package/extensions/dm-lens/rules/tree-sitter-queries/ruby/ruby-hardcoded-secrets.yml +42 -0
  1377. package/extensions/dm-lens/rules/tree-sitter-queries/ruby/ruby-insecure-deserialization.yml +47 -0
  1378. package/extensions/dm-lens/rules/tree-sitter-queries/ruby/ruby-insecure-random.yml +47 -0
  1379. package/extensions/dm-lens/rules/tree-sitter-queries/ruby/ruby-open-struct.yml +50 -0
  1380. package/extensions/dm-lens/rules/tree-sitter-queries/ruby/ruby-puts-statement.yml +54 -0
  1381. package/extensions/dm-lens/rules/tree-sitter-queries/ruby/ruby-rescue-exception.yml +53 -0
  1382. package/extensions/dm-lens/rules/tree-sitter-queries/ruby/ruby-sleep-in-test.yml +48 -0
  1383. package/extensions/dm-lens/rules/tree-sitter-queries/ruby/ruby-string-eval.yml +56 -0
  1384. package/extensions/dm-lens/rules/tree-sitter-queries/ruby/ruby-unsafe-regex.yml +51 -0
  1385. package/extensions/dm-lens/rules/tree-sitter-queries/ruby/ruby-weak-hash.yml +50 -0
  1386. package/extensions/dm-lens/rules/tree-sitter-queries/rule-schema.json +136 -0
  1387. package/extensions/dm-lens/rules/tree-sitter-queries/rust/rust-clone-in-loop.yml +51 -0
  1388. package/extensions/dm-lens/rules/tree-sitter-queries/rust/rust-expect.yml +47 -0
  1389. package/extensions/dm-lens/rules/tree-sitter-queries/rust/rust-lock-held-across-await.yml +60 -0
  1390. package/extensions/dm-lens/rules/tree-sitter-queries/rust/rust-todo-unimplemented.yml +47 -0
  1391. package/extensions/dm-lens/rules/tree-sitter-queries/rust/rust-unsafe-block.yml +41 -0
  1392. package/extensions/dm-lens/rules/tree-sitter-queries/rust/rust-unwrap.yml +47 -0
  1393. package/extensions/dm-lens/rules/tree-sitter-queries/tsx/dangerously-set-inner-html.yml +65 -0
  1394. package/extensions/dm-lens/rules/tree-sitter-queries/tsx/no-nested-links.yml +45 -0
  1395. package/extensions/dm-lens/rules/tree-sitter-queries/typescript/console-statement.yml +59 -0
  1396. package/extensions/dm-lens/rules/tree-sitter-queries/typescript/debugger.yml +49 -0
  1397. package/extensions/dm-lens/rules/tree-sitter-queries/typescript/deep-nesting.yml +119 -0
  1398. package/extensions/dm-lens/rules/tree-sitter-queries/typescript/deep-promise-chain.yml +75 -0
  1399. package/extensions/dm-lens/rules/tree-sitter-queries/typescript/default-not-last.yml +54 -0
  1400. package/extensions/dm-lens/rules/tree-sitter-queries/typescript/duplicate-function-arg.yml +46 -0
  1401. package/extensions/dm-lens/rules/tree-sitter-queries/typescript/empty-switch-case.yml +58 -0
  1402. package/extensions/dm-lens/rules/tree-sitter-queries/typescript/eval.yml +50 -0
  1403. package/extensions/dm-lens/rules/tree-sitter-queries/typescript/incomplete-assertion.yml +50 -0
  1404. package/extensions/dm-lens/rules/tree-sitter-queries/typescript/infinite-loop.yml +55 -0
  1405. package/extensions/dm-lens/rules/tree-sitter-queries/typescript/injections.scm +40 -0
  1406. package/extensions/dm-lens/rules/tree-sitter-queries/typescript/mixed-async-styles.yml +60 -0
  1407. package/extensions/dm-lens/rules/tree-sitter-queries/typescript/no-console-in-tests.yml +54 -0
  1408. package/extensions/dm-lens/rules/tree-sitter-queries/typescript/no-equality-in-for-condition.yml +41 -0
  1409. package/extensions/dm-lens/rules/tree-sitter-queries/typescript/no-jump-in-finally.yml +48 -0
  1410. package/extensions/dm-lens/rules/tree-sitter-queries/typescript/self-assignment.yml +46 -0
  1411. package/extensions/dm-lens/rules/tree-sitter-queries/typescript/sql-injection.yml +57 -0
  1412. package/extensions/dm-lens/rules/tree-sitter-queries/typescript/switch-case-termination.yml +61 -0
  1413. package/extensions/dm-lens/rules/tree-sitter-queries/typescript/switch-non-case-labels.yml +53 -0
  1414. package/extensions/dm-lens/rules/tree-sitter-queries/typescript/ts-command-injection.yml +62 -0
  1415. package/extensions/dm-lens/rules/tree-sitter-queries/typescript/ts-detached-async-call.yml +56 -0
  1416. package/extensions/dm-lens/rules/tree-sitter-queries/typescript/ts-dynamic-require.yml +55 -0
  1417. package/extensions/dm-lens/rules/tree-sitter-queries/typescript/ts-hallucinated-react-import.yml +61 -0
  1418. package/extensions/dm-lens/rules/tree-sitter-queries/typescript/ts-insecure-random.yml +55 -0
  1419. package/extensions/dm-lens/rules/tree-sitter-queries/typescript/ts-nosql-injection.yml +54 -0
  1420. package/extensions/dm-lens/rules/tree-sitter-queries/typescript/ts-open-redirect.yml +111 -0
  1421. package/extensions/dm-lens/rules/tree-sitter-queries/typescript/ts-react-antipatterns.yml +55 -0
  1422. package/extensions/dm-lens/rules/tree-sitter-queries/typescript/ts-ssrf.yml +54 -0
  1423. package/extensions/dm-lens/rules/tree-sitter-queries/typescript/ts-weak-hash.yml +54 -0
  1424. package/extensions/dm-lens/rules/tree-sitter-queries/typescript/ts-xss-dom-sink.yml +100 -0
  1425. package/extensions/dm-lens/rules/tree-sitter-queries/typescript/unsafe-regex.yml +76 -0
  1426. package/extensions/dm-lens/rules/tree-sitter-queries/typescript/variable-shadowing.yml +53 -0
  1427. package/extensions/dm-lens/rules/tree-sitter-queries/typescript-disabled/await-in-loop.yml +58 -0
  1428. package/extensions/dm-lens/rules/tree-sitter-queries/typescript-disabled/constructor-super.yml +57 -0
  1429. package/extensions/dm-lens/rules/tree-sitter-queries/typescript-disabled/empty-catch.yml +66 -0
  1430. package/extensions/dm-lens/rules/tree-sitter-queries/typescript-disabled/hardcoded-secrets.yml +66 -0
  1431. package/extensions/dm-lens/rules/tree-sitter-queries/typescript-disabled/long-parameter-list.yml +64 -0
  1432. package/extensions/dm-lens/rules/tree-sitter-queries/typescript-disabled/nested-ternary.yml +47 -0
  1433. package/extensions/dm-lens/rules/typos/_typos.toml +17 -0
  1434. package/extensions/dm-lens/scripts/lib/process-scan.mjs +256 -0
  1435. package/extensions/dm-lens/skills/pi-lens-ast-grep/SKILL.md +177 -0
  1436. package/extensions/dm-lens/skills/pi-lens-lsp-navigation/SKILL.md +77 -0
  1437. package/extensions/dm-lens/skills/pi-lens-write-ast-grep-rule/SKILL.md +209 -0
  1438. package/extensions/dm-lens/skills/pi-lens-write-ast-grep-rule/reference.md +170 -0
  1439. package/extensions/dm-lens/skills/pi-lens-write-tree-sitter-rule/SKILL.md +129 -0
  1440. package/extensions/dm-lens/tools/activate-tools.js +58 -0
  1441. package/extensions/dm-lens/tools/ast-dump.js +101 -0
  1442. package/extensions/dm-lens/tools/ast-grep-outline.js +131 -0
  1443. package/extensions/dm-lens/tools/ast-grep-replace.js +255 -0
  1444. package/extensions/dm-lens/tools/ast-grep-search.js +666 -0
  1445. package/extensions/dm-lens/tools/effective-config.js +61 -0
  1446. package/extensions/dm-lens/tools/lens-diagnostic-mark.js +243 -0
  1447. package/extensions/dm-lens/tools/lens-diagnostics.js +1177 -0
  1448. package/extensions/dm-lens/tools/lsp-diagnostics.js +1026 -0
  1449. package/extensions/dm-lens/tools/lsp-navigation.js +1251 -0
  1450. package/extensions/dm-lens/tools/lsp-structured-output.js +277 -0
  1451. package/extensions/dm-lens/tools/module-report.js +337 -0
  1452. package/extensions/dm-lens/tools/project-report.js +84 -0
  1453. package/extensions/dm-lens/tools/render-compact.js +53 -0
  1454. package/extensions/dm-lens/tools/scan-progress.js +31 -0
  1455. package/extensions/dm-lens/tools/shared.js +26 -0
  1456. package/extensions/dm-lens/tools/symbol-search.js +137 -0
  1457. package/extensions/dm-lens/vendor/grammars/tree-sitter-cue.wasm +0 -0
  1458. package/extensions/dm-mcp-adapter/agent-dir.js +10 -10
  1459. package/extensions/dm-mcp-adapter/cli.js +10 -9
  1460. package/extensions/dm-mcp-adapter/config.js +1 -1
  1461. package/extensions/dm-mcp-adapter/dist/agent-dir.js +10 -10
  1462. package/extensions/dm-mcp-adapter/dist/config.js +1 -1
  1463. package/extensions/dm-mcp-adapter/dist/package-mcp-loader.js +5 -3
  1464. package/extensions/dm-mcp-adapter/index.js +1 -0
  1465. package/extensions/dm-mcp-adapter/init.js +16 -4
  1466. package/extensions/dm-mcp-adapter/mcp-oauth-provider.js +2 -2
  1467. package/extensions/dm-mcp-adapter/package-mcp-loader.js +5 -3
  1468. package/extensions/dm-mcp-adapter/proxy-modes.js +12 -3
  1469. package/extensions/dm-skills-manager/extensions/extensions-manager.js +332 -0
  1470. package/extensions/dm-skills-manager/extensions/skills-manager.js +6 -6
  1471. package/extensions/dm-skills-manager/package.json +3 -2
  1472. package/package.json +7 -1
@@ -0,0 +1,2702 @@
1
+ import { AsyncLocalStorage } from "node:async_hooks";
2
+ import * as crypto from "node:crypto";
3
+ import * as fs from "node:fs";
4
+ import { createRequire } from "node:module";
5
+ import * as path from "node:path";
6
+ import {
7
+ getDegradationLedgerGeneration,
8
+ incrementDegradationCount,
9
+ recordDegradation,
10
+ recordDegradationOnce
11
+ } from "./degradation-ledger.js";
12
+ import { BoundedFifoMap } from "./bounded-cache.js";
13
+ import { loadWebTreeSitter } from "./deps/web-tree-sitter.js";
14
+ import { transientRetryDelayMs } from "./dispatch/runners/utils/availability-policy.js";
15
+ import { getProjectIgnoreMatcher, isExcludedDirName } from "./file-utils.js";
16
+ import {
17
+ downloadGrammarDetailed,
18
+ fileHasWasmMagic,
19
+ grammarBlockReason,
20
+ grammarFileSha256,
21
+ isVendoredGrammar,
22
+ LANGUAGE_TO_GRAMMAR,
23
+ pinnedGrammarHash,
24
+ vendoredGrammarRefusal,
25
+ vendoredGrammarsDir
26
+ } from "./grammar-source.js";
27
+ import { resolvePackagePath } from "./package-root.js";
28
+ import {
29
+ assertInstallAllowed,
30
+ getProjectTrustGeneration
31
+ } from "./project-trust.js";
32
+ import { logTreeSitterDiagnostic } from "./tree-sitter-logger.js";
33
+ import { notifyUserDegradation } from "./user-notify.js";
34
+ const _require = createRequire(import.meta.url);
35
+ import {
36
+ createTreeCacheCounters,
37
+ deriveScanTreeCacheCapacity,
38
+ TreeCache
39
+ } from "./tree-sitter-cache.js";
40
+ import { TreeSitterNavigator } from "./tree-sitter-navigator.js";
41
+ import {
42
+ TreeSitterQueryLoader
43
+ } from "./tree-sitter-query-loader.js";
44
+ const TREE_SITTER_MAX_SCAN_FILES = 20000;
45
+ const QUERY_BATCH_MAX_LOAD_FAILURES = 3;
46
+ const NO_NESTED_ANCHOR_VISIT_CAP = 1e4;
47
+ const NOT_PARSED = { parsed: false };
48
+ function createParserCounters() {
49
+ return {
50
+ parserInvocations: 0,
51
+ parserDurationMs: 0,
52
+ parserFailures: 0
53
+ };
54
+ }
55
+ function grammarFileStamp(filePath) {
56
+ try {
57
+ const stat = fs.statSync(filePath);
58
+ return stat.isFile() ? `${stat.size}:${stat.mtimeMs}` : undefined;
59
+ } catch {
60
+ return;
61
+ }
62
+ }
63
+ export function isTreeSitterWasmAbortError(error) {
64
+ const message = error instanceof Error ? error.message : String(error);
65
+ return message.includes("Aborted") || message.includes("abort()");
66
+ }
67
+ const RESOLUTION_ERROR_CODES = new Set([
68
+ "ERR_MODULE_NOT_FOUND",
69
+ "MODULE_NOT_FOUND",
70
+ "ERR_INVALID_MODULE_SPECIFIER",
71
+ "ERR_UNSUPPORTED_DIR_IMPORT",
72
+ "ENOENT",
73
+ "EMFILE",
74
+ "EBUSY",
75
+ "EAGAIN",
76
+ "EPERM",
77
+ "ETXTBSY"
78
+ ]);
79
+ function collectErrorCodes(err) {
80
+ const codes = [];
81
+ let current = err;
82
+ const seen = new Set;
83
+ while (current instanceof Error && !seen.has(current)) {
84
+ seen.add(current);
85
+ const code = current.code;
86
+ if (typeof code === "string")
87
+ codes.push(code);
88
+ current = current.cause;
89
+ }
90
+ return codes;
91
+ }
92
+ function classifyWebTreeSitterLoadFailure(err) {
93
+ const codes = collectErrorCodes(err);
94
+ return codes.some((code) => RESOLUTION_ERROR_CODES.has(code)) ? "resolution" : "evaluation";
95
+ }
96
+
97
+ export class TreeSitterClient {
98
+ initialized = false;
99
+ initPromise = null;
100
+ webTreeSitterLoadFailed = false;
101
+ languages = new Map;
102
+ parsers = new Map;
103
+ treeCache;
104
+ navigator = new TreeSitterNavigator;
105
+ grammarsDir;
106
+ grammarEnsurePromises = new Map;
107
+ grammarRetryAtMs = new Map;
108
+ verifiedGrammarPaths = new Map;
109
+ decodeFailedGrammarPaths = new Map;
110
+ verifiedGrammarVersionAt = new Map;
111
+ staleGrammarVersionAt = new Map;
112
+ staleReportedGrammarPaths = new Set;
113
+ poisonedGrammarPaths = new Set;
114
+ grammarFailureAttempts = new Map;
115
+ grammarLastNotifiedDelayMs = new Map;
116
+ grammarNotificationsLedgerGen = getDegradationLedgerGeneration();
117
+ trustBlockedGrammarNotifications = new Set;
118
+ trustNotificationsGeneration = getProjectTrustGeneration();
119
+ ParserClass = null;
120
+ LanguageLoader = null;
121
+ static QUERY_CACHE_MAX_ENTRIES = 256;
122
+ static QUERY_BATCH_CACHE_MAX_ENTRIES = 256;
123
+ queryCache = new BoundedFifoMap(TreeSitterClient.QUERY_CACHE_MAX_ENTRIES);
124
+ queryBatchCache = new BoundedFifoMap(TreeSitterClient.QUERY_BATCH_CACHE_MAX_ENTRIES);
125
+ queryCacheCap() {
126
+ const value = Number.parseInt(process.env.DM_LENS_TREE_SITTER_QUERY_CACHE_CAP ?? "", 10);
127
+ return Number.isSafeInteger(value) && value > 0 ? value : TreeSitterClient.QUERY_CACHE_MAX_ENTRIES;
128
+ }
129
+ queryBatchCacheCap() {
130
+ const value = Number.parseInt(process.env.DM_LENS_TREE_SITTER_QUERY_BATCH_CACHE_CAP ?? "", 10);
131
+ return Number.isSafeInteger(value) && value > 0 ? value : TreeSitterClient.QUERY_BATCH_CACHE_MAX_ENTRIES;
132
+ }
133
+ cacheQuery(key, value) {
134
+ this.queryCache.delete(key);
135
+ const evicted = this.queryCache.setMaxEntries(this.queryCacheCap());
136
+ evicted.push(...this.queryCache.set(key, value));
137
+ for (const [, dropped] of evicted)
138
+ dropped?.query?.delete?.();
139
+ }
140
+ cacheQueryBatch(key, value) {
141
+ this.queryBatchCache.delete(key);
142
+ const evicted = this.queryBatchCache.setMaxEntries(this.queryBatchCacheCap());
143
+ evicted.push(...this.queryBatchCache.set(key, value));
144
+ for (const [, dropped] of evicted)
145
+ dropped?.query?.delete?.();
146
+ }
147
+ queryBatchLoadFailures = new Map;
148
+ queryLoader = new TreeSitterQueryLoader;
149
+ verbose;
150
+ parserCounters = createParserCounters();
151
+ parseCacheMeasurement = new AsyncLocalStorage;
152
+ activeMeasurements = 0;
153
+ onWasmAbort;
154
+ wasmAborted = false;
155
+ grammarDirResolutionDeps;
156
+ constructor(verbose = false, onWasmAbort, grammarDirResolutionDeps) {
157
+ this.grammarDirResolutionDeps = grammarDirResolutionDeps ?? {
158
+ resolveAsset: (asset) => this.resolveWebTreeSitterAsset(asset),
159
+ resolvePackage: (specifier) => _require.resolve(specifier),
160
+ cwd: () => process.cwd()
161
+ };
162
+ this.grammarsDir = this.findGrammarsDir();
163
+ this.verbose = verbose;
164
+ this.onWasmAbort = onWasmAbort;
165
+ this.treeCache = new TreeCache(50, verbose, 4096, (key, amount) => {
166
+ const measurement = this.parseCacheMeasurement.getStore();
167
+ if (measurement)
168
+ measurement[key] += amount;
169
+ }, (error) => this.reportWasmAbort(error));
170
+ }
171
+ recordParserCounter(key, amount = 1) {
172
+ this.parserCounters[key] += amount;
173
+ const measurement = this.parseCacheMeasurement.getStore();
174
+ if (measurement)
175
+ measurement[key] += amount;
176
+ }
177
+ reportWasmAbort(error) {
178
+ if (!isTreeSitterWasmAbortError(error))
179
+ return false;
180
+ if (!this.wasmAborted) {
181
+ this.wasmAborted = true;
182
+ recordDegradation({
183
+ kind: "wasm-abort",
184
+ subject: "web-tree-sitter",
185
+ reason: error instanceof Error ? error.message : String(error)
186
+ });
187
+ this.onWasmAbort?.();
188
+ }
189
+ return true;
190
+ }
191
+ getRuntimeStats() {
192
+ return {
193
+ languagesLoaded: this.languages.size,
194
+ parsersLoaded: this.parsers.size,
195
+ queryCacheSize: this.queryCache.size,
196
+ queryBatchCacheSize: this.queryBatchCache.size
197
+ };
198
+ }
199
+ getParseCacheStats() {
200
+ return {
201
+ ...this.treeCache.getStats(),
202
+ ...this.parserCounters
203
+ };
204
+ }
205
+ ensureTreeCacheCapacity(fileCount) {
206
+ this.treeCache.setMaxSize(deriveScanTreeCacheCapacity(fileCount, this.treeCache.getMaxSize()));
207
+ }
208
+ async withParseCacheMeasurement(work, onComplete) {
209
+ const measurement = {
210
+ ...createTreeCacheCounters(),
211
+ ...createParserCounters()
212
+ };
213
+ this.activeMeasurements++;
214
+ try {
215
+ return await this.parseCacheMeasurement.run(measurement, async () => {
216
+ try {
217
+ return await work();
218
+ } finally {
219
+ const cacheStats = this.treeCache.getStats();
220
+ try {
221
+ onComplete({
222
+ ...cacheStats,
223
+ ...measurement,
224
+ misses: measurement.lookups - measurement.hits
225
+ });
226
+ } catch {}
227
+ }
228
+ });
229
+ } finally {
230
+ if (--this.activeMeasurements === 0)
231
+ this.parseCacheMeasurement.disable();
232
+ }
233
+ }
234
+ dbg(msg) {
235
+ if (this.verbose) {
236
+ logTreeSitterDiagnostic({
237
+ subsystem: "tree-sitter-client",
238
+ level: "debug",
239
+ message: msg
240
+ });
241
+ }
242
+ }
243
+ resolveWebTreeSitterAsset(asset) {
244
+ try {
245
+ const resolved = _require.resolve(`web-tree-sitter/${asset}`);
246
+ if (fs.existsSync(resolved))
247
+ return resolved;
248
+ } catch {}
249
+ try {
250
+ const candidate = resolvePackagePath(import.meta.url, "node_modules", "web-tree-sitter", asset);
251
+ if (fs.existsSync(candidate))
252
+ return candidate;
253
+ } catch {}
254
+ const cwdCandidate = path.join(process.cwd(), "node_modules", "web-tree-sitter", asset);
255
+ if (fs.existsSync(cwdCandidate))
256
+ return cwdCandidate;
257
+ return;
258
+ }
259
+ _bundledGrammarsDir;
260
+ bundledGrammarsDir() {
261
+ if (this._bundledGrammarsDir)
262
+ return this._bundledGrammarsDir;
263
+ try {
264
+ const dir = resolvePackagePath(import.meta.url, "grammars");
265
+ if (fs.existsSync(dir))
266
+ this._bundledGrammarsDir = dir;
267
+ return this._bundledGrammarsDir;
268
+ } catch {
269
+ return;
270
+ }
271
+ }
272
+ _vendoredGrammarsDir;
273
+ vendoredGrammarsDir() {
274
+ if (this._vendoredGrammarsDir)
275
+ return this._vendoredGrammarsDir;
276
+ try {
277
+ const dir = vendoredGrammarsDir();
278
+ if (fs.existsSync(dir))
279
+ this._vendoredGrammarsDir = dir;
280
+ return this._vendoredGrammarsDir;
281
+ } catch {
282
+ return;
283
+ }
284
+ }
285
+ grammarSourceDirs() {
286
+ const dirs = [];
287
+ const push = (d) => {
288
+ if (d && !dirs.includes(d))
289
+ dirs.push(d);
290
+ };
291
+ push(this.vendoredGrammarsDir());
292
+ push(this.bundledGrammarsDir());
293
+ push(this.grammarsDir || undefined);
294
+ push(this.resolveWebTreeSitterAsset("grammars"));
295
+ return dirs;
296
+ }
297
+ resolveGrammarFile(grammarFile) {
298
+ for (const dir of this.grammarSourceDirs()) {
299
+ const candidate = path.join(dir, grammarFile);
300
+ const stamp = grammarFileStamp(candidate);
301
+ if (!stamp)
302
+ continue;
303
+ if (this.decodeFailedGrammarPaths.get(candidate) === stamp)
304
+ continue;
305
+ if (this.verifiedGrammarPaths.get(candidate) === stamp) {
306
+ if (this.isGrammarVersionCurrent(candidate, grammarFile, stamp)) {
307
+ return candidate;
308
+ }
309
+ continue;
310
+ }
311
+ if (fileHasWasmMagic(candidate)) {
312
+ this.verifiedGrammarPaths.set(candidate, stamp);
313
+ if (this.isGrammarVersionCurrent(candidate, grammarFile, stamp)) {
314
+ return candidate;
315
+ }
316
+ continue;
317
+ }
318
+ this.verifiedGrammarPaths.delete(candidate);
319
+ this.reportPoisonedGrammarFile(candidate, grammarFile);
320
+ }
321
+ return;
322
+ }
323
+ refreshGrammarSessionLatches() {
324
+ const ledgerGen = getDegradationLedgerGeneration();
325
+ if (ledgerGen === this.grammarNotificationsLedgerGen)
326
+ return;
327
+ this.grammarNotificationsLedgerGen = ledgerGen;
328
+ this.grammarLastNotifiedDelayMs.clear();
329
+ this.poisonedGrammarPaths.clear();
330
+ this.staleReportedGrammarPaths.clear();
331
+ }
332
+ reportPoisonedGrammarFile(candidate, grammarFile) {
333
+ this.refreshGrammarSessionLatches();
334
+ if (this.poisonedGrammarPaths.has(candidate))
335
+ return;
336
+ this.poisonedGrammarPaths.add(candidate);
337
+ logTreeSitterDiagnostic({
338
+ subsystem: "tree-sitter-client",
339
+ level: "warn",
340
+ message: `ignoring ${candidate}: the file is not a wasm module (missing the \\0asm preamble) — ` + `most likely a captive-portal or proxy page written by an earlier download (#1548). ` + `dm-lens will treat the grammar as missing and try to fetch it again.`,
341
+ metadata: { grammarFile, path: candidate, outcome: "not-wasm" }
342
+ });
343
+ incrementDegradationCount({
344
+ kind: "grammar-blocked",
345
+ subject: grammarFile,
346
+ reason: "on-disk grammar file is not a wasm module — ignored, re-fetching"
347
+ });
348
+ }
349
+ isGrammarVersionCurrent(candidate, grammarFile, stamp) {
350
+ if (isVendoredGrammar(grammarFile))
351
+ return true;
352
+ if (this.staleGrammarVersionAt.get(candidate) === stamp) {
353
+ this.reportStaleGrammarVersion(candidate, grammarFile);
354
+ return false;
355
+ }
356
+ if (this.verifiedGrammarVersionAt.get(candidate) === stamp)
357
+ return true;
358
+ const pinnedHash = pinnedGrammarHash(grammarFile);
359
+ if (!pinnedHash) {
360
+ this.verifiedGrammarVersionAt.set(candidate, stamp);
361
+ return true;
362
+ }
363
+ const actualHash = grammarFileSha256(candidate);
364
+ if (actualHash === pinnedHash) {
365
+ this.verifiedGrammarVersionAt.set(candidate, stamp);
366
+ return true;
367
+ }
368
+ this.verifiedGrammarVersionAt.delete(candidate);
369
+ this.staleGrammarVersionAt.set(candidate, stamp);
370
+ this.reportStaleGrammarVersion(candidate, grammarFile);
371
+ return false;
372
+ }
373
+ reportStaleGrammarVersion(candidate, grammarFile) {
374
+ this.refreshGrammarSessionLatches();
375
+ if (this.staleReportedGrammarPaths.has(candidate))
376
+ return;
377
+ this.staleReportedGrammarPaths.add(candidate);
378
+ logTreeSitterDiagnostic({
379
+ subsystem: "tree-sitter-client",
380
+ level: "warn",
381
+ message: `ignoring ${candidate}: its sha256 no longer matches the pinned grammar ` + `manifest — the pinned tree-sitter-wasms version (or a SOURCE_OVERRIDES entry) ` + `moved since this file was downloaded. dm-lens will treat the grammar as ` + `missing and re-fetch the current build (#1760).`,
382
+ metadata: { grammarFile, path: candidate, outcome: "stale-version" }
383
+ });
384
+ incrementDegradationCount({
385
+ kind: "grammar-blocked",
386
+ subject: grammarFile,
387
+ reason: "cached grammar no longer matches the pinned manifest hash — ignored, re-fetching"
388
+ });
389
+ }
390
+ findGrammarsDir(deps = this.grammarDirResolutionDeps) {
391
+ const grammarsDir = deps.resolveAsset("grammars");
392
+ if (grammarsDir && fs.existsSync(path.join(grammarsDir, "tree-sitter-typescript.wasm"))) {
393
+ return grammarsDir;
394
+ }
395
+ try {
396
+ const wasmsOut = path.join(path.dirname(deps.resolvePackage("tree-sitter-wasms/package.json")), "out");
397
+ if (fs.existsSync(wasmsOut))
398
+ return wasmsOut;
399
+ } catch {}
400
+ const cwdWasms = path.join(deps.cwd(), "node_modules", "tree-sitter-wasms", "out");
401
+ if (fs.existsSync(cwdWasms))
402
+ return cwdWasms;
403
+ return "";
404
+ }
405
+ grammarsWriteDir() {
406
+ try {
407
+ let dir = path.dirname(_require.resolve("web-tree-sitter"));
408
+ while (path.basename(dir) !== "web-tree-sitter" && dir !== path.dirname(dir)) {
409
+ dir = path.dirname(dir);
410
+ }
411
+ if (path.basename(dir) === "web-tree-sitter") {
412
+ return path.join(dir, "grammars");
413
+ }
414
+ } catch {}
415
+ return;
416
+ }
417
+ async ensureGrammar(grammarFile) {
418
+ if (this.resolveGrammarFile(grammarFile)) {
419
+ return true;
420
+ }
421
+ if (!assertInstallAllowed(`tree-sitter grammar fetch: ${grammarFile}`)) {
422
+ const unavailable = `tree-sitter grammar '${grammarFile}' is unavailable because the project is not trusted; ` + `runtime grammar downloads are disabled until trust is granted.`;
423
+ logTreeSitterDiagnostic({
424
+ subsystem: "tree-sitter-client",
425
+ message: unavailable,
426
+ metadata: { grammarFile, outcome: "trust-gated" }
427
+ });
428
+ recordDegradation({
429
+ kind: "grammar-blocked",
430
+ subject: grammarFile,
431
+ reason: "runtime grammar download blocked because project is untrusted"
432
+ });
433
+ const generation = getProjectTrustGeneration();
434
+ if (generation !== this.trustNotificationsGeneration) {
435
+ this.trustNotificationsGeneration = generation;
436
+ this.trustBlockedGrammarNotifications.clear();
437
+ }
438
+ if (!this.trustBlockedGrammarNotifications.has(grammarFile)) {
439
+ this.trustBlockedGrammarNotifications.add(grammarFile);
440
+ notifyUserDegradation(`dm-lens: ${unavailable}`);
441
+ }
442
+ return false;
443
+ }
444
+ const inflight = this.grammarEnsurePromises.get(grammarFile);
445
+ if (inflight)
446
+ return inflight;
447
+ const retryAt = this.grammarRetryAtMs.get(grammarFile);
448
+ if (retryAt !== undefined && Date.now() < retryAt) {
449
+ return false;
450
+ }
451
+ const task = (async () => {
452
+ try {
453
+ return await this.fetchGrammar(grammarFile);
454
+ } catch (err) {
455
+ const message = err instanceof Error ? err.message : String(err);
456
+ this.recordGrammarFailure(grammarFile, `The runtime grammar fetch threw an unexpected error (${message}).`, true);
457
+ return false;
458
+ }
459
+ })();
460
+ this.grammarEnsurePromises.set(grammarFile, task);
461
+ task.finally(() => {
462
+ if (this.grammarEnsurePromises.get(grammarFile) === task) {
463
+ this.grammarEnsurePromises.delete(grammarFile);
464
+ }
465
+ }).catch(() => {});
466
+ return task;
467
+ }
468
+ async fetchGrammar(grammarFile) {
469
+ if (isVendoredGrammar(grammarFile)) {
470
+ const { reason } = vendoredGrammarRefusal(grammarFile);
471
+ this.recordGrammarFailure(grammarFile, reason ?? `${grammarFile} is missing from vendor/grammars/.`, false);
472
+ return false;
473
+ }
474
+ const dir = this.grammarsDir && fs.existsSync(this.grammarsDir) ? this.grammarsDir : this.grammarsWriteDir();
475
+ if (!dir) {
476
+ this.recordGrammarFailure(grammarFile, "No writable grammars directory could be located for the runtime fetch.", true);
477
+ return false;
478
+ }
479
+ const { ok, retryable, reason } = await downloadGrammarDetailed(dir, grammarFile);
480
+ if (ok) {
481
+ if (!this.grammarsDir)
482
+ this.grammarsDir = dir;
483
+ this.grammarRetryAtMs.delete(grammarFile);
484
+ this.grammarFailureAttempts.delete(grammarFile);
485
+ this.grammarLastNotifiedDelayMs.delete(grammarFile);
486
+ logTreeSitterDiagnostic({
487
+ subsystem: "tree-sitter-client",
488
+ level: "warn",
489
+ message: `fetched missing tree-sitter grammar ${grammarFile} at runtime (install scripts were skipped by the package manager)`,
490
+ metadata: { grammarFile, outcome: "fetched" }
491
+ });
492
+ } else {
493
+ this.recordGrammarFailure(grammarFile, reason ?? "The package manager skipped install scripts and the runtime download failed.", retryable);
494
+ }
495
+ return ok;
496
+ }
497
+ recordGrammarFailure(grammarFile, detail, retryable) {
498
+ const attempts = (this.grammarFailureAttempts.get(grammarFile) ?? 0) + 1;
499
+ this.grammarFailureAttempts.set(grammarFile, attempts);
500
+ const retryDelayMs = retryable ? transientRetryDelayMs(attempts, "probe-timeout") : undefined;
501
+ this.grammarRetryAtMs.set(grammarFile, retryDelayMs === undefined ? Number.POSITIVE_INFINITY : Date.now() + retryDelayMs);
502
+ const unavailable = retryable ? `tree-sitter grammar '${grammarFile}' is unavailable — symbol search, ` + `module reports and structural rules for this language will be degraded. ` + `${detail} dm-lens will retry automatically in ${Math.round(retryDelayMs / 1000)}s; ` + `if the problem persists, allow the package manager's build scripts ` + `(pnpm approve-builds / bun trustedDependencies) or restore network access.` : `tree-sitter grammar '${grammarFile}' is unavailable — symbol search, ` + `module reports and structural rules for this language will be degraded. ` + `${detail} The grammar source reports it does not exist (not a network problem), so this will not ` + `resolve on retry. Fix: reinstall with a manager that runs postinstall, allow its build scripts ` + `(pnpm approve-builds / bun trustedDependencies), or restore network access.`;
503
+ logTreeSitterDiagnostic({
504
+ subsystem: "tree-sitter-client",
505
+ message: unavailable,
506
+ metadata: {
507
+ grammarFile,
508
+ outcome: "unavailable",
509
+ retryable,
510
+ retryDelayMs,
511
+ attempts
512
+ }
513
+ });
514
+ incrementDegradationCount({
515
+ kind: "grammar-blocked",
516
+ subject: grammarFile,
517
+ reason: retryable ? `runtime grammar download failed — retryable (${detail.trim()})` : `runtime grammar download failed — durable (${detail.trim()})`
518
+ });
519
+ this.refreshGrammarSessionLatches();
520
+ const notifyKey = retryDelayMs ?? -1;
521
+ if (this.grammarLastNotifiedDelayMs.get(grammarFile) !== notifyKey) {
522
+ this.grammarLastNotifiedDelayMs.set(grammarFile, notifyKey);
523
+ notifyUserDegradation(`dm-lens: ${unavailable}`);
524
+ }
525
+ }
526
+ recordGrammarLoadFailure(grammarPath, grammarFile, err) {
527
+ const stamp = grammarFileStamp(grammarPath);
528
+ this.verifiedGrammarPaths.delete(grammarPath);
529
+ if (stamp)
530
+ this.decodeFailedGrammarPaths.set(grammarPath, stamp);
531
+ const message = err instanceof Error ? err.message : String(err);
532
+ logTreeSitterDiagnostic({
533
+ subsystem: "tree-sitter-client",
534
+ level: "warn",
535
+ message: `Language.load failed for ${grammarPath} even though the wasm preamble check ` + `passed (${message}) — most likely a truncated download (#1564). Treating the ` + `grammar as missing so the next demand re-fetches it.`,
536
+ metadata: { grammarFile, path: grammarPath, outcome: "load-failed" }
537
+ });
538
+ this.recordGrammarFailure(grammarFile, `Language.load failed on a resolved grammar file (${message}).`, true);
539
+ }
540
+ async init() {
541
+ if (this.wasmAborted)
542
+ return false;
543
+ if (this.initialized)
544
+ return true;
545
+ if (this.webTreeSitterLoadFailed)
546
+ return false;
547
+ if (this.initPromise)
548
+ return this.initPromise;
549
+ this.initPromise = (async () => {
550
+ try {
551
+ let mod;
552
+ try {
553
+ mod = await loadWebTreeSitter();
554
+ } catch (err) {
555
+ const classification = classifyWebTreeSitterLoadFailure(err);
556
+ if (classification === "evaluation") {
557
+ this.webTreeSitterLoadFailed = true;
558
+ }
559
+ recordDegradationOnce({
560
+ kind: "web-tree-sitter-load-failed",
561
+ subject: "web-tree-sitter",
562
+ reason: (err instanceof Error ? err.message : String(err)) + (classification === "resolution" ? " (resolution failure — retryable)" : " (evaluation failure — latched for the session)")
563
+ });
564
+ throw err;
565
+ }
566
+ const anyMod = mod;
567
+ const ParserClass = anyMod.Parser || anyMod.default || anyMod;
568
+ if (!ParserClass || typeof ParserClass.init !== "function") {
569
+ this.dbg("Parser class not found or missing init method");
570
+ return false;
571
+ }
572
+ this.ParserClass = ParserClass;
573
+ this.LanguageLoader = mod.Language;
574
+ const wasmPath = this.resolveWebTreeSitterAsset("tree-sitter.wasm");
575
+ if (!wasmPath) {
576
+ this.dbg("Could not resolve tree-sitter.wasm");
577
+ return false;
578
+ }
579
+ const wasmDir = path.dirname(wasmPath);
580
+ this.dbg(`Looking for WASM at: ${wasmPath}, exists: ${fs.existsSync(wasmPath)}`);
581
+ await ParserClass.init({
582
+ locateFile: (scriptName) => {
583
+ const fullPath = path.join(wasmDir, scriptName);
584
+ this.dbg(`locateFile: ${scriptName} -> ${fullPath}`);
585
+ return fullPath;
586
+ }
587
+ });
588
+ this.initialized = true;
589
+ return true;
590
+ } catch (err) {
591
+ this.reportWasmAbort(err);
592
+ this.dbg(`Init error: ${err}`);
593
+ return false;
594
+ } finally {
595
+ this.initPromise = null;
596
+ }
597
+ })();
598
+ return this.initPromise;
599
+ }
600
+ resetLoadStateForSession() {
601
+ this.webTreeSitterLoadFailed = false;
602
+ }
603
+ async loadLanguage(languageId) {
604
+ if (this.wasmAborted)
605
+ return null;
606
+ this.dbg(`Loading language: ${languageId}`);
607
+ if (this.languages.has(languageId)) {
608
+ this.dbg(`Language ${languageId} already loaded`);
609
+ return this.languages.get(languageId);
610
+ }
611
+ if (!this.ParserClass) {
612
+ this.dbg(`ParserClass not initialized`);
613
+ return null;
614
+ }
615
+ const grammarFile = LANGUAGE_TO_GRAMMAR[languageId];
616
+ if (!grammarFile) {
617
+ this.dbg(`No grammar file for ${languageId}`);
618
+ return null;
619
+ }
620
+ const blockReason = grammarBlockReason(grammarFile);
621
+ if (blockReason) {
622
+ this.dbg(`Grammar ${grammarFile} blocked on this runtime — ${blockReason}`);
623
+ recordDegradation({
624
+ kind: "grammar-blocked",
625
+ subject: grammarFile,
626
+ reason: blockReason
627
+ });
628
+ return null;
629
+ }
630
+ let grammarPath = this.resolveGrammarFile(grammarFile);
631
+ if (!grammarPath) {
632
+ if (await this.ensureGrammar(grammarFile)) {
633
+ grammarPath = this.resolveGrammarFile(grammarFile);
634
+ }
635
+ }
636
+ this.dbg(`Grammar path: ${grammarPath}, exists: ${grammarPath && fs.existsSync(grammarPath)}`);
637
+ if (!grammarPath || !fs.existsSync(grammarPath)) {
638
+ this.dbg(`Grammar file not found: ${grammarPath}`);
639
+ return null;
640
+ }
641
+ try {
642
+ if (!this.LanguageLoader?.load) {
643
+ this.dbg(`LanguageLoader.load not available`);
644
+ return null;
645
+ }
646
+ this.dbg(`Calling Language.load...`);
647
+ const language = await this.LanguageLoader.load(grammarPath);
648
+ this.dbg(`Language loaded: ${language?.name || "unknown"}`);
649
+ if (language) {
650
+ this.languages.set(languageId, language);
651
+ }
652
+ return language;
653
+ } catch (err) {
654
+ if (!this.reportWasmAbort(err)) {
655
+ this.recordGrammarLoadFailure(grammarPath, grammarFile, err);
656
+ }
657
+ this.dbg(`Language load error: ${err}`);
658
+ return null;
659
+ }
660
+ }
661
+ async getParser(languageId) {
662
+ if (this.wasmAborted)
663
+ return null;
664
+ if (this.parsers.has(languageId)) {
665
+ return this.parsers.get(languageId);
666
+ }
667
+ const language = await this.loadLanguage(languageId);
668
+ if (!language || !this.ParserClass)
669
+ return null;
670
+ const parser = new this.ParserClass;
671
+ parser.setLanguage(language);
672
+ this.parsers.set(languageId, parser);
673
+ return parser;
674
+ }
675
+ async parseFile(filePath, languageId, contentOverride) {
676
+ const outcome = await this.parseFileAndUse(filePath, languageId, contentOverride, (tree) => tree);
677
+ return outcome.parsed ? outcome.value : null;
678
+ }
679
+ async withParsedTree(filePath, languageId, contentOverride, consume) {
680
+ return this.parseFileAndUse(filePath, languageId, contentOverride, consume);
681
+ }
682
+ async parseFileAndUse(filePath, languageId, contentOverride, consume) {
683
+ this.dbg(`Parsing ${filePath} with language ${languageId}`);
684
+ const parser = await this.getParser(languageId);
685
+ if (!parser) {
686
+ this.dbg(`Failed to get parser for ${languageId}`);
687
+ return NOT_PARSED;
688
+ }
689
+ let tree;
690
+ try {
691
+ const content = contentOverride ?? fs.readFileSync(filePath, "utf-8");
692
+ this.dbg(`File content length: ${content.length}`);
693
+ const cachedTree = this.treeCache.get(filePath, content, languageId);
694
+ if (cachedTree) {
695
+ this.dbg(`Using cached tree for ${filePath}`);
696
+ tree = cachedTree;
697
+ } else {
698
+ const parseStartedAt = performance.now();
699
+ this.recordParserCounter("parserInvocations");
700
+ try {
701
+ tree = parser.parse(content);
702
+ } catch (err) {
703
+ this.recordParserCounter("parserFailures");
704
+ throw err;
705
+ } finally {
706
+ this.recordParserCounter("parserDurationMs", performance.now() - parseStartedAt);
707
+ }
708
+ this.dbg(`Parsed, root node type: ${tree.rootNode.type}`);
709
+ this.treeCache.set(filePath, content, languageId, tree);
710
+ }
711
+ } catch (err) {
712
+ this.reportWasmAbort(err);
713
+ this.dbg(`Parse error: ${err}`);
714
+ return NOT_PARSED;
715
+ }
716
+ try {
717
+ return { parsed: true, value: consume(tree) };
718
+ } catch (error) {
719
+ this.reportWasmAbort(error);
720
+ throw error;
721
+ }
722
+ }
723
+ extractInjections(filePath, content) {
724
+ const injections = [];
725
+ const sqlPattern = /\b(sql|query|execute)\s*`([^`]+)`/gi;
726
+ let match;
727
+ while ((match = sqlPattern.exec(content)) !== null) {
728
+ const lines = content.slice(0, match.index).split(`
729
+ `);
730
+ injections.push({
731
+ type: "sql",
732
+ content: match[2],
733
+ line: lines.length,
734
+ column: lines[lines.length - 1].length
735
+ });
736
+ }
737
+ const cssPattern = /\b(styled(?:\.\w+)?|css)\s*`([^`]+)`/gi;
738
+ while ((match = cssPattern.exec(content)) !== null) {
739
+ const lines = content.slice(0, match.index).split(`
740
+ `);
741
+ injections.push({
742
+ type: "css",
743
+ content: match[2],
744
+ line: lines.length,
745
+ column: lines[lines.length - 1].length
746
+ });
747
+ }
748
+ const regexPattern = /new\s+RegExp\s*\(\s*`([^`]+)`/gi;
749
+ while ((match = regexPattern.exec(content)) !== null) {
750
+ const lines = content.slice(0, match.index).split(`
751
+ `);
752
+ injections.push({
753
+ type: "regex",
754
+ content: match[1],
755
+ line: lines.length,
756
+ column: lines[lines.length - 1].length
757
+ });
758
+ }
759
+ this.dbg(`Found ${injections.length} injections in ${filePath}`);
760
+ return injections;
761
+ }
762
+ isAvailable() {
763
+ if (this.wasmAborted)
764
+ return false;
765
+ if (this.resolveGrammarFile("tree-sitter-typescript.wasm"))
766
+ return true;
767
+ const dir = this.findGrammarsDir();
768
+ this.grammarsDir = dir;
769
+ return !!dir && fs.existsSync(dir);
770
+ }
771
+ async isLanguageSupported(languageId) {
772
+ if (this.wasmAborted)
773
+ return false;
774
+ if (!this.initialized)
775
+ await this.init();
776
+ const language = await this.loadLanguage(languageId);
777
+ return language !== null;
778
+ }
779
+ getLanguage(languageId) {
780
+ if (this.wasmAborted)
781
+ return null;
782
+ return this.languages.get(languageId) || null;
783
+ }
784
+ async structuralSearch(pattern, languageId, rootDir, options = {}) {
785
+ if (!this.initialized) {
786
+ const ok = await this.init();
787
+ if (!ok)
788
+ return [];
789
+ }
790
+ try {
791
+ await this.queryLoader.loadQueries(rootDir);
792
+ } catch (err) {
793
+ this.dbg(`Failed to load queries for ${rootDir}: ${err}`);
794
+ }
795
+ this.dbg(`Compiling pattern: ${pattern.slice(0, 50)}...`);
796
+ const compiled = await this.compileQuery(pattern, languageId);
797
+ if (!compiled) {
798
+ this.dbg(`Pattern compilation failed`);
799
+ return [];
800
+ }
801
+ this.dbg(`Pattern compiled, metavars: ${compiled.metavars.join(", ")}`);
802
+ const files = this.collectFiles(rootDir, languageId, options.fileFilter);
803
+ this.dbg(`Scanning ${files.length} files...`);
804
+ const matches = [];
805
+ const maxResults = options.maxResults ?? 50;
806
+ for (const file of files) {
807
+ if (matches.length >= maxResults)
808
+ break;
809
+ const fileMatches = await this.searchFileWithQuery(file, compiled.query, compiled.metavars, languageId, pattern, compiled.postFilter, compiled.postFilterParams);
810
+ matches.push(...fileMatches);
811
+ }
812
+ return matches.slice(0, maxResults);
813
+ }
814
+ async runQueryOnFile(queryDef, filePath, languageId, options = {}, contentOverride) {
815
+ if (!this.initialized) {
816
+ const ok = await this.init();
817
+ if (!ok)
818
+ return [];
819
+ }
820
+ const compiled = await this.compileRawQuery(queryDef.id, queryDef.query, queryDef.metavars, languageId, queryDef.post_filter, queryDef.post_filter_params);
821
+ if (!compiled)
822
+ return [];
823
+ const matches = await this.searchFileWithQuery(filePath, compiled.query, compiled.metavars, languageId, queryDef.id, compiled.postFilter, compiled.postFilterParams, contentOverride);
824
+ const maxResults = options.maxResults ?? 50;
825
+ return matches.slice(0, maxResults);
826
+ }
827
+ async runQueriesOnFile(queryDefs, filePath, languageId, options = {}, contentOverride) {
828
+ if (queryDefs.length === 0)
829
+ return [];
830
+ if (!this.initialized) {
831
+ const ok = await this.init();
832
+ if (!ok)
833
+ return [];
834
+ }
835
+ const maxResults = options.maxResults ?? 50;
836
+ const batch = await this.compileQueryBatch(queryDefs, languageId);
837
+ if (!batch) {
838
+ const results = [];
839
+ for (const queryDef of queryDefs) {
840
+ const matches = await this.runQueryOnFile(queryDef, filePath, languageId, options, contentOverride);
841
+ for (const match of matches)
842
+ results.push({ queryDef, match });
843
+ }
844
+ return results;
845
+ }
846
+ const perQuery = new Map;
847
+ await this.parseFileAndUse(filePath, languageId, contentOverride, (tree) => {
848
+ try {
849
+ for (const match of batch.query.matches(tree.rootNode)) {
850
+ const owner = batch.ownerOfPattern[match.patternIndex];
851
+ if (owner === undefined)
852
+ continue;
853
+ const bucket = perQuery.get(owner) ?? [];
854
+ if (bucket.length >= maxResults)
855
+ continue;
856
+ const entry = batch.entries[owner];
857
+ const captures = {};
858
+ for (const capture of match.captures) {
859
+ if (entry.metavars.includes(capture.name)) {
860
+ captures[capture.name] = capture.node;
861
+ }
862
+ }
863
+ if (!this.evaluatePredicates(batch.query, match))
864
+ continue;
865
+ if (entry.postFilter && !this.applyPostFilter(entry.postFilter, entry.postFilterParams, captures, tree.rootNode)) {
866
+ continue;
867
+ }
868
+ if (match.captures.length === 0)
869
+ continue;
870
+ const firstNode = match.captures[0].node;
871
+ const textCaptures = {};
872
+ for (const [name, node] of Object.entries(captures)) {
873
+ textCaptures[name] = node.text;
874
+ }
875
+ bucket.push({
876
+ file: filePath,
877
+ line: firstNode.startPosition.row + 1,
878
+ column: firstNode.startPosition.column + 1,
879
+ matchedText: firstNode.text,
880
+ nodeType: firstNode.type,
881
+ captures: textCaptures
882
+ });
883
+ perQuery.set(owner, bucket);
884
+ }
885
+ } catch (err) {
886
+ this.reportWasmAbort(err);
887
+ this.dbg(`Batched query matching error: ${err}`);
888
+ }
889
+ });
890
+ const results = [];
891
+ for (let i = 0;i < batch.entries.length; i++) {
892
+ for (const match of perQuery.get(i) ?? []) {
893
+ results.push({ queryDef: batch.entries[i].queryDef, match });
894
+ }
895
+ }
896
+ return results;
897
+ }
898
+ async compileQueryBatch(queryDefs, languageId) {
899
+ const identity = crypto.createHash("sha256").update(JSON.stringify(queryDefs)).digest("hex");
900
+ const cacheKey = this.getQueryCacheKey(`batch:${identity}`, languageId);
901
+ const cached = this.queryBatchCache.get(cacheKey);
902
+ if (cached !== undefined) {
903
+ this.queryBatchCache.delete(cacheKey);
904
+ this.queryBatchCache.set(cacheKey, cached);
905
+ return cached;
906
+ }
907
+ const language = await this.loadLanguage(languageId);
908
+ if (!language) {
909
+ const failures = (this.queryBatchLoadFailures.get(cacheKey) ?? 0) + 1;
910
+ if (failures >= QUERY_BATCH_MAX_LOAD_FAILURES) {
911
+ this.dbg(`Batch: grammar for ${languageId} failed to load ${failures} times — caching miss`);
912
+ this.queryBatchLoadFailures.delete(cacheKey);
913
+ this.cacheQueryBatch(cacheKey, null);
914
+ } else {
915
+ this.queryBatchLoadFailures.set(cacheKey, failures);
916
+ }
917
+ return null;
918
+ }
919
+ this.queryBatchLoadFailures.delete(cacheKey);
920
+ const build = async () => {
921
+ const Query = (await loadWebTreeSitter()).Query;
922
+ const entries = [];
923
+ const sources = [];
924
+ const ownerOfPattern = [];
925
+ for (const queryDef of queryDefs) {
926
+ let patternCount;
927
+ try {
928
+ const probe = new Query(language, queryDef.query);
929
+ patternCount = probe.patternCount();
930
+ probe.delete?.();
931
+ } catch (err) {
932
+ if (this.reportWasmAbort(err))
933
+ return null;
934
+ this.dbg(`Batch: skipping ${queryDef.id} for ${languageId}: ${err}`);
935
+ this.reportQueryCompileFailure(queryDef.id, languageId, err);
936
+ continue;
937
+ }
938
+ const owner = entries.length;
939
+ entries.push({
940
+ queryDef,
941
+ metavars: queryDef.metavars ?? [],
942
+ postFilter: queryDef.post_filter,
943
+ postFilterParams: queryDef.post_filter_params
944
+ });
945
+ sources.push(queryDef.query);
946
+ for (let i = 0;i < patternCount; i++)
947
+ ownerOfPattern.push(owner);
948
+ }
949
+ if (entries.length === 0)
950
+ return null;
951
+ try {
952
+ const query = new Query(language, sources.join(`
953
+ `));
954
+ if (query.patternCount() !== ownerOfPattern.length) {
955
+ this.dbg(`Batch pattern count mismatch for ${languageId} (${query.patternCount()} vs ${ownerOfPattern.length}) — falling back`);
956
+ return null;
957
+ }
958
+ return { query, entries, ownerOfPattern };
959
+ } catch (err) {
960
+ if (this.reportWasmAbort(err))
961
+ return null;
962
+ this.dbg(`Batch compile failed for ${languageId}: ${err}`);
963
+ return null;
964
+ }
965
+ };
966
+ const batch = await build();
967
+ this.cacheQueryBatch(cacheKey, batch);
968
+ return batch;
969
+ }
970
+ patternToQuery(pattern, languageId) {
971
+ const loadedQuery = this.queryLoader.findMatchingQuery(pattern, languageId);
972
+ if (loadedQuery) {
973
+ this.dbg(`Using loaded query: ${loadedQuery.id}`);
974
+ return {
975
+ query: loadedQuery.query,
976
+ metavars: loadedQuery.metavars,
977
+ postFilter: loadedQuery.post_filter,
978
+ postFilterParams: loadedQuery.post_filter_params,
979
+ queryDef: loadedQuery
980
+ };
981
+ }
982
+ return this.getInlinePattern(pattern);
983
+ }
984
+ getInlinePattern(pattern) {
985
+ if (pattern.includes("async function") && pattern.includes("$NAME")) {
986
+ return {
987
+ query: `(function_declaration
988
+ "async"
989
+ name: (identifier) @NAME
990
+ parameters: (formal_parameters) @PARAMS
991
+ body: (statement_block) @BODY)`,
992
+ metavars: ["NAME", "PARAMS", "BODY"]
993
+ };
994
+ }
995
+ if (pattern.includes("console")) {
996
+ return {
997
+ query: `(call_expression
998
+ function: (member_expression
999
+ object: (identifier) @OBJ (#eq? @OBJ "console")
1000
+ property: (property_identifier) @METHOD)
1001
+ arguments: (arguments) @ARGS)`,
1002
+ metavars: ["OBJ", "METHOD", "ARGS"]
1003
+ };
1004
+ }
1005
+ if (pattern.includes("function $NAME") && pattern.includes("PARAMS")) {
1006
+ return {
1007
+ query: `(function_declaration
1008
+ name: (identifier) @NAME
1009
+ parameters: (formal_parameters) @PARAMS
1010
+ body: (statement_block) @BODY)`,
1011
+ metavars: ["NAME", "PARAMS", "BODY"],
1012
+ postFilter: "count_params",
1013
+ postFilterParams: { min_params: 6 }
1014
+ };
1015
+ }
1016
+ if (pattern.includes(".then") && pattern.includes(".catch")) {
1017
+ return {
1018
+ query: `(call_expression
1019
+ function: (member_expression
1020
+ object: (call_expression
1021
+ function: (member_expression
1022
+ object: (call_expression
1023
+ function: (member_expression
1024
+ property: (property_identifier) @M1)
1025
+ arguments: (arguments))
1026
+ property: (property_identifier) @M2)
1027
+ arguments: (arguments))
1028
+ property: (property_identifier) @M3)
1029
+ arguments: (arguments))
1030
+ (#match? @M1 "^(then|catch)$")
1031
+ (#match? @M2 "^(then|catch)$")
1032
+ (#match? @M3 "^(then|catch)$")`,
1033
+ metavars: ["M1", "M2", "M3"]
1034
+ };
1035
+ }
1036
+ const simpleMatch = pattern.match(/\$([A-Z_][A-Z0-9_]*)/);
1037
+ if (simpleMatch) {
1038
+ const name = simpleMatch[1];
1039
+ return {
1040
+ query: `(identifier) @${name}`,
1041
+ metavars: [name]
1042
+ };
1043
+ }
1044
+ return { query: "", metavars: [] };
1045
+ }
1046
+ getQueryCacheKey(pattern, languageId) {
1047
+ return `${languageId}:${pattern}`;
1048
+ }
1049
+ async compileQuery(pattern, languageId) {
1050
+ const cacheKey = this.getQueryCacheKey(pattern, languageId);
1051
+ if (this.queryCache.has(cacheKey)) {
1052
+ this.dbg(`Query cache hit: ${cacheKey}`);
1053
+ const cached = this.queryCache.get(cacheKey);
1054
+ this.queryCache.delete(cacheKey);
1055
+ this.queryCache.set(cacheKey, cached);
1056
+ return cached;
1057
+ }
1058
+ const language = await this.loadLanguage(languageId);
1059
+ if (!language) {
1060
+ this.dbg(`Could not load language ${languageId}`);
1061
+ return null;
1062
+ }
1063
+ const {
1064
+ query: queryStr,
1065
+ metavars,
1066
+ postFilter,
1067
+ postFilterParams
1068
+ } = this.patternToQuery(pattern, languageId);
1069
+ this.dbg(`Query string: ${queryStr.slice(0, 100)}...`);
1070
+ try {
1071
+ const Query = (await loadWebTreeSitter()).Query;
1072
+ const query = new Query(language, queryStr);
1073
+ this.dbg(`Query compiled with ${query.patternCount()} patterns`);
1074
+ const result = { query, metavars, postFilter, postFilterParams };
1075
+ this.cacheQuery(cacheKey, result);
1076
+ return result;
1077
+ } catch (err) {
1078
+ this.reportWasmAbort(err);
1079
+ this.dbg(`Query compilation failed: ${err}`);
1080
+ return null;
1081
+ }
1082
+ }
1083
+ async compileRawQuery(queryId, queryStr, metavars, languageId, postFilter, postFilterParams) {
1084
+ const cacheKey = this.getQueryCacheKey(`raw:${queryId}:${queryStr}`, languageId);
1085
+ if (this.queryCache.has(cacheKey)) {
1086
+ const cached = this.queryCache.get(cacheKey);
1087
+ this.queryCache.delete(cacheKey);
1088
+ this.queryCache.set(cacheKey, cached);
1089
+ return cached;
1090
+ }
1091
+ const language = await this.loadLanguage(languageId);
1092
+ if (!language)
1093
+ return null;
1094
+ try {
1095
+ const Query = (await loadWebTreeSitter()).Query;
1096
+ const query = new Query(language, queryStr);
1097
+ const result = { query, metavars, postFilter, postFilterParams };
1098
+ this.cacheQuery(cacheKey, result);
1099
+ return result;
1100
+ } catch (err) {
1101
+ this.reportWasmAbort(err);
1102
+ this.dbg(`Raw query compilation failed (${queryId}): ${err}`);
1103
+ this.reportQueryCompileFailure(queryId, languageId, err);
1104
+ return null;
1105
+ }
1106
+ }
1107
+ reportedCompileFailures = new Set;
1108
+ reportQueryCompileFailure(ruleId, languageId, err) {
1109
+ const key = `${ruleId}:${languageId}`;
1110
+ if (this.reportedCompileFailures.has(key))
1111
+ return;
1112
+ this.reportedCompileFailures.add(key);
1113
+ logTreeSitterDiagnostic({
1114
+ subsystem: "tree-sitter-client",
1115
+ languageId,
1116
+ message: `tree-sitter rule '${ruleId}' failed to compile against '${languageId}' — ` + `matches for this rule are silently dropped rather than reported. ` + `Fix the query in the rule definition to re-enable it. (${err})`,
1117
+ metadata: { ruleId }
1118
+ });
1119
+ }
1120
+ hasChildToken(node, token) {
1121
+ return node.children?.some((child) => child.type === token || child.text === token);
1122
+ }
1123
+ bindingNames(node) {
1124
+ const names = new Set;
1125
+ if (!node)
1126
+ return names;
1127
+ const stack = [node];
1128
+ while (stack.length > 0) {
1129
+ const current = stack.pop();
1130
+ if (current.type === "identifier")
1131
+ names.add(current.text);
1132
+ else if (current.type === "shorthand_property_identifier_pattern") {
1133
+ names.add(current.text);
1134
+ }
1135
+ if (current.type === "property_identifier" || current.type === "type_identifier" || current.type === "computed_property_name")
1136
+ continue;
1137
+ if (current.type === "assignment_pattern" || current.type === "object_assignment_pattern") {
1138
+ const left = current.childForFieldName?.("left");
1139
+ if (left)
1140
+ stack.push(left);
1141
+ continue;
1142
+ }
1143
+ stack.push(...current.children ?? []);
1144
+ }
1145
+ return names;
1146
+ }
1147
+ containsYieldInFunctionBody(node, root = node) {
1148
+ for (const child of node.children ?? []) {
1149
+ if (child.type === "yield")
1150
+ return true;
1151
+ if (child !== root && ["function_definition", "class_definition", "lambda"].includes(child.type)) {
1152
+ continue;
1153
+ }
1154
+ if (this.containsYieldInFunctionBody(child, root))
1155
+ return true;
1156
+ }
1157
+ return false;
1158
+ }
1159
+ isLikelySqlAlchemyReceiver(text) {
1160
+ const tail = text.split(".").pop() ?? text;
1161
+ return new Set([
1162
+ "session",
1163
+ "db_session",
1164
+ "async_session",
1165
+ "sync_session"
1166
+ ]).has(tail.toLowerCase());
1167
+ }
1168
+ switchCaseBodyStatements(caseNode) {
1169
+ const named = (caseNode.children ?? []).filter((c) => c.isNamed && !c.type.includes("comment"));
1170
+ return named.slice(1);
1171
+ }
1172
+ hasFallthroughMarker(caseNode) {
1173
+ const comments = [];
1174
+ const body = this.switchCaseBodyStatements(caseNode);
1175
+ const last = body[body.length - 1];
1176
+ const lastEnd = last?.endIndex ?? caseNode.startIndex;
1177
+ for (const c of caseNode.children ?? []) {
1178
+ if (c.type.includes("comment") && c.startIndex >= lastEnd) {
1179
+ comments.push(c);
1180
+ }
1181
+ }
1182
+ const siblings = (caseNode.parent?.children ?? []).filter((c) => c.isNamed);
1183
+ const index = siblings.findIndex((c) => c.startIndex === caseNode.startIndex);
1184
+ const next = index >= 0 ? siblings[index + 1] : undefined;
1185
+ if (next?.type.includes("comment"))
1186
+ comments.push(next);
1187
+ if (last) {
1188
+ const NESTED_FN = new Set([
1189
+ "function_declaration",
1190
+ "function_expression",
1191
+ "arrow_function",
1192
+ "method_definition",
1193
+ "generator_function",
1194
+ "generator_function_declaration",
1195
+ "class_declaration"
1196
+ ]);
1197
+ const stack = [last];
1198
+ for (let visited = 0;stack.length > 0 && visited < 500; visited++) {
1199
+ const node = stack.pop();
1200
+ if (!node)
1201
+ break;
1202
+ if (node.type.includes("comment"))
1203
+ comments.push(node);
1204
+ if (!NESTED_FN.has(node.type)) {
1205
+ stack.push(...node.children ?? []);
1206
+ }
1207
+ }
1208
+ }
1209
+ return comments.some((c) => /falls?\s?through/i.test(c.text));
1210
+ }
1211
+ statementTerminates(node, depth = 0) {
1212
+ if (depth > 20)
1213
+ return false;
1214
+ const t = node.type;
1215
+ const TERMINATORS = new Set([
1216
+ "break_statement",
1217
+ "return_statement",
1218
+ "throw_statement",
1219
+ "continue_statement"
1220
+ ]);
1221
+ if (TERMINATORS.has(t))
1222
+ return true;
1223
+ if (t === "statement_block" || t === "else_clause" || t === "catch_clause" || t === "finally_clause") {
1224
+ const inner = (node.children ?? []).filter((c) => c.isNamed && !c.type.includes("comment"));
1225
+ const last = inner[inner.length - 1];
1226
+ if (!last)
1227
+ return false;
1228
+ return this.statementTerminates(last, depth + 1);
1229
+ }
1230
+ if (t === "try_statement") {
1231
+ const tryBody = (node.children ?? []).find((c) => c.type === "statement_block");
1232
+ const tryTerminates = tryBody ? this.statementTerminates(tryBody, depth + 1) : false;
1233
+ const catches = (node.children ?? []).filter((c) => c.type === "catch_clause");
1234
+ const fin = (node.children ?? []).find((c) => c.type === "finally_clause");
1235
+ if (tryTerminates) {
1236
+ return catches.every((c) => this.statementTerminates(c, depth + 1));
1237
+ }
1238
+ return !!fin && this.statementTerminates(fin, depth + 1);
1239
+ }
1240
+ if (t === "if_statement") {
1241
+ const named = (node.children ?? []).filter((c) => c.isNamed && !c.type.includes("comment"));
1242
+ const consequence = named[1];
1243
+ const alternative = named[2];
1244
+ if (!consequence || !alternative)
1245
+ return false;
1246
+ return this.statementTerminates(consequence, depth + 1) && this.statementTerminates(alternative, depth + 1);
1247
+ }
1248
+ return false;
1249
+ }
1250
+ nextSiblingIsSwitchLabel(caseNode) {
1251
+ const siblings = (caseNode.parent?.children ?? []).filter((c) => c.isNamed && !c.type.includes("comment"));
1252
+ const index = siblings.findIndex((c) => c.startIndex === caseNode.startIndex);
1253
+ const next = index >= 0 ? siblings[index + 1] : undefined;
1254
+ return next?.type === "switch_case" || next?.type === "switch_default";
1255
+ }
1256
+ bodyHasLoopExit(node, insideNestedLoop) {
1257
+ const NESTS_BREAK = new Set([
1258
+ "for_statement",
1259
+ "for_in_statement",
1260
+ "while_statement",
1261
+ "do_statement",
1262
+ "switch_statement"
1263
+ ]);
1264
+ const NESTED_FN = new Set([
1265
+ "function_declaration",
1266
+ "function_expression",
1267
+ "arrow_function",
1268
+ "method_definition",
1269
+ "generator_function",
1270
+ "generator_function_declaration",
1271
+ "class_declaration"
1272
+ ]);
1273
+ for (const child of node.children ?? []) {
1274
+ const t = child.type;
1275
+ if (NESTED_FN.has(t))
1276
+ continue;
1277
+ if (t === "return_statement" || t === "throw_statement")
1278
+ return true;
1279
+ if (t === "break_statement") {
1280
+ const labeled = (child.children ?? []).some((c) => c.isNamed);
1281
+ if (!insideNestedLoop || labeled)
1282
+ return true;
1283
+ }
1284
+ if (this.bodyHasLoopExit(child, insideNestedLoop || NESTS_BREAK.has(t))) {
1285
+ return true;
1286
+ }
1287
+ }
1288
+ return false;
1289
+ }
1290
+ enclosingBindingName(node) {
1291
+ let cur = node?.parent;
1292
+ for (let depth = 0;cur && depth < 12; depth++) {
1293
+ const t = cur.type;
1294
+ if (t === "variable_declarator") {
1295
+ const name = cur.children?.find((c) => c.isNamed);
1296
+ return name?.text ?? "";
1297
+ }
1298
+ if (t === "assignment_expression") {
1299
+ return cur.children?.[0]?.text ?? "";
1300
+ }
1301
+ if (t === "statement_block" || t === "program" || t === "function_declaration" || t === "function_expression" || t === "arrow_function" || t === "method_definition") {
1302
+ return "";
1303
+ }
1304
+ cur = cur.parent;
1305
+ }
1306
+ return "";
1307
+ }
1308
+ resolvesToFileLiteralConst(name, rootNode) {
1309
+ const valueNode = this.resolveFileConstValueNode(name, rootNode);
1310
+ if (!valueNode)
1311
+ return false;
1312
+ return this.isFixedUrlLiteralExpr(valueNode);
1313
+ }
1314
+ resolveFileConstValueNode(name, rootNode) {
1315
+ const constDeclarators = [];
1316
+ let hasNonConstBinding = false;
1317
+ let hasReassignment = false;
1318
+ const stack = [rootNode];
1319
+ while (stack.length > 0) {
1320
+ const node = stack.pop();
1321
+ if (!node)
1322
+ continue;
1323
+ if (node.type === "variable_declarator") {
1324
+ const nameNode = node.childForFieldName?.("name");
1325
+ if (nameNode?.type === "identifier" && nameNode.text === name) {
1326
+ const decl = node.parent;
1327
+ const isConst = decl?.type === "lexical_declaration" && (decl.children ?? []).some((c) => c.type === "const");
1328
+ if (isConst) {
1329
+ constDeclarators.push(node);
1330
+ } else {
1331
+ hasNonConstBinding = true;
1332
+ }
1333
+ }
1334
+ } else if (node.type === "assignment_expression" || node.type === "augmented_assignment_expression") {
1335
+ const left = node.childForFieldName?.("left");
1336
+ if (left?.type === "identifier" && left.text === name) {
1337
+ hasReassignment = true;
1338
+ } else if ((left?.type === "member_expression" || left?.type === "subscript_expression") && left.childForFieldName?.("object")?.type === "identifier" && left.childForFieldName?.("object")?.text === name) {
1339
+ const searchOnly = left.type === "member_expression" && left.childForFieldName?.("property")?.text === "search";
1340
+ if (!searchOnly) {
1341
+ hasReassignment = true;
1342
+ }
1343
+ }
1344
+ }
1345
+ for (const child of node.children ?? [])
1346
+ stack.push(child);
1347
+ }
1348
+ if (hasNonConstBinding || hasReassignment || constDeclarators.length !== 1) {
1349
+ return null;
1350
+ }
1351
+ return constDeclarators[0].childForFieldName?.("value") ?? null;
1352
+ }
1353
+ isFixedUrlLiteralExpr(node) {
1354
+ if (node.type === "string")
1355
+ return true;
1356
+ if (node.type === "template_string") {
1357
+ return !(node.children ?? []).some((c) => c.type === "template_substitution");
1358
+ }
1359
+ return false;
1360
+ }
1361
+ isImportedBinding(name, rootNode) {
1362
+ return this.importedAs(name, rootNode) !== null;
1363
+ }
1364
+ importedAs(name, rootNode) {
1365
+ const stack = [rootNode];
1366
+ while (stack.length > 0) {
1367
+ const node = stack.pop();
1368
+ if (!node)
1369
+ continue;
1370
+ if (node.type === "import_specifier") {
1371
+ const nameNode = node.childForFieldName?.("name");
1372
+ const aliasNode = node.childForFieldName?.("alias");
1373
+ const local = (aliasNode ?? nameNode)?.text;
1374
+ if (local === name)
1375
+ return nameNode?.text ?? null;
1376
+ } else if (node.type === "namespace_import" || node.type === "import_clause") {
1377
+ for (const c of node.children ?? []) {
1378
+ if (c.type === "identifier" && c.text === name)
1379
+ return name;
1380
+ }
1381
+ }
1382
+ for (const child of node.children ?? [])
1383
+ stack.push(child);
1384
+ }
1385
+ return null;
1386
+ }
1387
+ isFixedUrlBaseExpr(base, rootNode) {
1388
+ if (base.type === "string")
1389
+ return true;
1390
+ if (base.type === "identifier") {
1391
+ return this.isFixedBaseIdentifier(base, rootNode);
1392
+ }
1393
+ if (base.type === "template_string") {
1394
+ for (const child of base.children ?? []) {
1395
+ if (child.type !== "template_substitution")
1396
+ continue;
1397
+ const inner = (child.children ?? []).find((c) => c.isNamed);
1398
+ if (!inner || inner.type !== "identifier" || !this.isFixedBaseIdentifier(inner, rootNode)) {
1399
+ return false;
1400
+ }
1401
+ }
1402
+ return true;
1403
+ }
1404
+ return false;
1405
+ }
1406
+ isFixedBaseIdentifier(ident, rootNode) {
1407
+ const name = ident.text;
1408
+ if (!this.isShadowedByEnclosingParam(ident, name) && this.resolvesToFileLiteralConst(name, rootNode)) {
1409
+ return true;
1410
+ }
1411
+ return this.isImportedBinding(name, rootNode);
1412
+ }
1413
+ isShadowedByEnclosingParam(node, name) {
1414
+ const FUNCTION_TYPES = new Set([
1415
+ "function_declaration",
1416
+ "function_expression",
1417
+ "generator_function",
1418
+ "generator_function_declaration",
1419
+ "arrow_function",
1420
+ "method_definition"
1421
+ ]);
1422
+ let current = node.parent;
1423
+ while (current) {
1424
+ if (FUNCTION_TYPES.has(current.type)) {
1425
+ const bare = current.childForFieldName?.("parameter");
1426
+ if (bare?.type === "identifier" && bare.text === name)
1427
+ return true;
1428
+ const params = current.childForFieldName?.("parameters");
1429
+ if (params && this.paramsBindName(params, name))
1430
+ return true;
1431
+ }
1432
+ current = current.parent;
1433
+ }
1434
+ return false;
1435
+ }
1436
+ paramsBindName(params, name) {
1437
+ for (const param of params.children ?? []) {
1438
+ if (!param.isNamed)
1439
+ continue;
1440
+ const pattern = param.type === "required_parameter" || param.type === "optional_parameter" ? param.childForFieldName?.("pattern") : param;
1441
+ if (pattern && this.patternBindsName(pattern, name))
1442
+ return true;
1443
+ }
1444
+ return false;
1445
+ }
1446
+ patternBindsName(pattern, name) {
1447
+ if (pattern.type === "identifier")
1448
+ return pattern.text === name;
1449
+ const stack = [pattern];
1450
+ while (stack.length > 0) {
1451
+ const n = stack.pop();
1452
+ if (!n)
1453
+ continue;
1454
+ if ((n.type === "identifier" || n.type === "shorthand_property_identifier_pattern") && n.text === name) {
1455
+ return true;
1456
+ }
1457
+ if (n.type === "assignment_pattern") {
1458
+ const left = n.childForFieldName?.("left") ?? n.children?.[0];
1459
+ if (left)
1460
+ stack.push(left);
1461
+ continue;
1462
+ }
1463
+ for (const c of n.children ?? [])
1464
+ stack.push(c);
1465
+ }
1466
+ return false;
1467
+ }
1468
+ resolvesToFixedNewUrlConst(name, rootNode) {
1469
+ const value = this.resolveFileConstValueNode(name, rootNode);
1470
+ if (!value || value.type !== "new_expression")
1471
+ return false;
1472
+ const ctor = value.childForFieldName?.("constructor");
1473
+ const ctorName = ctor?.text ?? "";
1474
+ const isUrlCtor = ctorName === "URL" || ctor?.type === "identifier" && this.importedAs(ctorName, rootNode) === "URL";
1475
+ if (!isUrlCtor)
1476
+ return false;
1477
+ const args = (value.childForFieldName?.("arguments")?.children ?? []).filter((c) => c.isNamed && c.type !== "comment");
1478
+ if (args.length === 0)
1479
+ return false;
1480
+ if (!this.isFixedUrlLiteralExpr(args[0]))
1481
+ return false;
1482
+ if (args.length === 1)
1483
+ return true;
1484
+ return this.isFixedUrlBaseExpr(args[1], rootNode);
1485
+ }
1486
+ newUrlBaseVarName(urlNode) {
1487
+ let member;
1488
+ if (urlNode.type === "call_expression") {
1489
+ member = urlNode.childForFieldName?.("function");
1490
+ } else if (urlNode.type === "member_expression") {
1491
+ member = urlNode;
1492
+ }
1493
+ if (!member || member.type !== "member_expression")
1494
+ return null;
1495
+ const prop = member.childForFieldName?.("property")?.text;
1496
+ if (prop !== "toString" && prop !== "href")
1497
+ return null;
1498
+ const object = member.childForFieldName?.("object");
1499
+ if (object?.type !== "identifier")
1500
+ return null;
1501
+ return object.text;
1502
+ }
1503
+ isSafeSqlAlchemyExpressionCall(node) {
1504
+ if (node.type !== "call")
1505
+ return false;
1506
+ const callee = node.children?.[0]?.text ?? "";
1507
+ const expression = node.text;
1508
+ return ["select", "insert", "update", "delete"].some((name) => callee === name || expression.startsWith(`${name}(`));
1509
+ }
1510
+ applyPostFilter(postFilter, postFilterParams, captures, rootNode) {
1511
+ function extractSlots(classNode) {
1512
+ const classText = classNode.text ?? "";
1513
+ if (!classText.includes("__slots__"))
1514
+ return null;
1515
+ const body = classNode.children?.find((c) => c.type === "block");
1516
+ if (!body)
1517
+ return null;
1518
+ const slots = [];
1519
+ for (const stmt of body.children ?? []) {
1520
+ if (stmt.type !== "expression_statement")
1521
+ continue;
1522
+ const assignment = stmt.children?.find((c) => c.type === "assignment");
1523
+ if (!assignment)
1524
+ continue;
1525
+ const lhsText = (assignment.children?.[0]?.text ?? "").trim();
1526
+ if (lhsText !== "__slots__")
1527
+ continue;
1528
+ const rhs = assignment.children?.[2];
1529
+ if (!rhs)
1530
+ continue;
1531
+ if (rhs.type === "string") {
1532
+ const s = (rhs.text ?? "").replace(/^["']|["']$/g, "");
1533
+ if (s)
1534
+ slots.push(s);
1535
+ } else if (rhs.type === "tuple" || rhs.type === "list") {
1536
+ for (const el of rhs.children ?? []) {
1537
+ if (!el.isNamed)
1538
+ continue;
1539
+ if (el.type === "string") {
1540
+ slots.push((el.text ?? "").replace(/^["']|["']$/g, ""));
1541
+ }
1542
+ }
1543
+ }
1544
+ break;
1545
+ }
1546
+ return slots;
1547
+ }
1548
+ function escapeRegExp(s) {
1549
+ return s.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
1550
+ }
1551
+ switch (postFilter) {
1552
+ case "no_nested_anchor_chain": {
1553
+ try {
1554
+ const outer = captures.OUTER_ELEMENT;
1555
+ if (!outer) {
1556
+ this.reportPostFilterFailure(postFilter, "missing OUTER_ELEMENT capture");
1557
+ return true;
1558
+ }
1559
+ const isAnchorElement = (node) => {
1560
+ if (node.type !== "jsx_element")
1561
+ return false;
1562
+ const opening = node.childForFieldName?.("open_tag") ?? node.children?.find((child) => child.type === "jsx_opening_element");
1563
+ const name = opening?.childForFieldName?.("name") ?? opening?.children?.find((child) => child.type === "identifier");
1564
+ return name?.text === "a";
1565
+ };
1566
+ let visited = 0;
1567
+ let ancestor = outer.parent;
1568
+ while (ancestor) {
1569
+ if (++visited > NO_NESTED_ANCHOR_VISIT_CAP) {
1570
+ this.reportPostFilterFailure(postFilter, `ancestor walk exceeded ${NO_NESTED_ANCHOR_VISIT_CAP} nodes`);
1571
+ return true;
1572
+ }
1573
+ if (isAnchorElement(ancestor))
1574
+ return false;
1575
+ ancestor = ancestor.parent;
1576
+ }
1577
+ const pending = [...outer.children ?? []];
1578
+ while (pending.length > 0) {
1579
+ const node = pending.pop();
1580
+ if (!node)
1581
+ continue;
1582
+ if (++visited > NO_NESTED_ANCHOR_VISIT_CAP) {
1583
+ this.reportPostFilterFailure(postFilter, `descendant walk exceeded ${NO_NESTED_ANCHOR_VISIT_CAP} nodes`);
1584
+ return true;
1585
+ }
1586
+ if (isAnchorElement(node))
1587
+ return true;
1588
+ pending.push(...node.children ?? []);
1589
+ }
1590
+ return false;
1591
+ } catch (error) {
1592
+ const reason = error instanceof Error ? error.message : String(error);
1593
+ this.reportPostFilterFailure(postFilter, `tree walk failed${reason ? `: ${reason}` : ""}`);
1594
+ return true;
1595
+ }
1596
+ }
1597
+ case "differs_only_by_case": {
1598
+ try {
1599
+ const field = captures.FIELD?.text ?? "";
1600
+ const method = captures.METHOD?.text ?? "";
1601
+ return field !== method && field.toLocaleLowerCase() === method.toLocaleLowerCase();
1602
+ } catch {
1603
+ return true;
1604
+ }
1605
+ }
1606
+ case "in_default_package": {
1607
+ try {
1608
+ if (!rootNode)
1609
+ return true;
1610
+ return !(rootNode.children ?? []).some((node) => node.type === "package_declaration");
1611
+ } catch {
1612
+ return true;
1613
+ }
1614
+ }
1615
+ case "missing_mimetype_and_download_name": {
1616
+ try {
1617
+ const firstArg = captures.FIRST_ARG;
1618
+ if (!firstArg)
1619
+ return true;
1620
+ if (firstArg.type === "string")
1621
+ return false;
1622
+ const args = firstArg.parent;
1623
+ if (!args)
1624
+ return true;
1625
+ return !(args.children ?? []).some((node) => {
1626
+ if (node.type !== "keyword_argument")
1627
+ return false;
1628
+ const name = node.childForFieldName?.("name")?.text;
1629
+ return name === "mimetype" || name === "download_name";
1630
+ });
1631
+ } catch {
1632
+ return true;
1633
+ }
1634
+ }
1635
+ case "missing_super_call": {
1636
+ try {
1637
+ const body = captures.BODY;
1638
+ const method = captures.METHOD?.text ?? "";
1639
+ if (!body || !method)
1640
+ return true;
1641
+ const stack = [body];
1642
+ for (let visited = 0;stack.length > 0 && visited < 1e4; visited++) {
1643
+ const node = stack.pop();
1644
+ if (!node)
1645
+ break;
1646
+ if (node.type === "method_invocation" && node.childForFieldName?.("object")?.text === "super" && node.childForFieldName?.("name")?.text === method) {
1647
+ return false;
1648
+ }
1649
+ stack.push(...node.children ?? []);
1650
+ }
1651
+ return true;
1652
+ } catch {
1653
+ return true;
1654
+ }
1655
+ }
1656
+ case "no_assertion_call": {
1657
+ try {
1658
+ const body = captures.BODY;
1659
+ if (!body)
1660
+ return true;
1661
+ const assertionNames = /^(?:assert\w*|fail|verify|expect|check|assume\w*)$/i;
1662
+ const stack = [body];
1663
+ for (let visited = 0;stack.length > 0 && visited < 1e4; visited++) {
1664
+ const node = stack.pop();
1665
+ if (!node)
1666
+ break;
1667
+ if (node.type === "method_invocation") {
1668
+ const name = node.childForFieldName?.("name")?.text ?? "";
1669
+ if (assertionNames.test(name))
1670
+ return false;
1671
+ }
1672
+ stack.push(...node.children ?? []);
1673
+ }
1674
+ return true;
1675
+ } catch {
1676
+ return true;
1677
+ }
1678
+ }
1679
+ case "not_closed_or_try_with_resources": {
1680
+ try {
1681
+ const declaration = captures.DECL;
1682
+ const resource = captures.RESOURCE?.text ?? "";
1683
+ if (!declaration || !resource)
1684
+ return true;
1685
+ const scope = this.navigator.findParent(declaration, [
1686
+ "method_declaration",
1687
+ "constructor_declaration",
1688
+ "block"
1689
+ ]) ?? rootNode;
1690
+ if (!scope)
1691
+ return true;
1692
+ const resourceWord = new RegExp(`\\b${escapeRegExp(resource)}\\b`);
1693
+ const stack = [scope];
1694
+ for (let visited = 0;stack.length > 0 && visited < 1e4; visited++) {
1695
+ const node = stack.pop();
1696
+ if (!node)
1697
+ break;
1698
+ if (node.type === "method_invocation" && node.childForFieldName?.("object")?.text === resource && node.childForFieldName?.("name")?.text === "close") {
1699
+ return false;
1700
+ }
1701
+ if (node.type === "resource" && resourceWord.test(node.text ?? "")) {
1702
+ return false;
1703
+ }
1704
+ stack.push(...node.children ?? []);
1705
+ }
1706
+ return true;
1707
+ } catch {
1708
+ return true;
1709
+ }
1710
+ }
1711
+ case "same_method_no_base_case": {
1712
+ try {
1713
+ const method = captures.NAME?.text ?? "";
1714
+ if (!method || captures.RECURSE?.text !== method)
1715
+ return false;
1716
+ const call = captures.CALL;
1717
+ const declaration = call ? this.navigator.findParent(call, ["method_declaration"]) : undefined;
1718
+ if (!declaration)
1719
+ return true;
1720
+ const stack = [declaration];
1721
+ for (let visited = 0;stack.length > 0 && visited < 1e4; visited++) {
1722
+ const node = stack.pop();
1723
+ if (!node)
1724
+ break;
1725
+ if (node.type === "if_statement" || node.type === "switch_expression" || node.type === "switch_statement" || node.type === "while_statement" || node.type === "do_statement" || node.type === "for_statement" || node.type === "enhanced_for_statement" || node.type === "ternary_expression") {
1726
+ return false;
1727
+ }
1728
+ stack.push(...node.children ?? []);
1729
+ }
1730
+ return stack.length > 0 ? false : true;
1731
+ } catch {
1732
+ return true;
1733
+ }
1734
+ }
1735
+ case "memset_for_sensitive_data": {
1736
+ try {
1737
+ const destination = captures.DEST?.text ?? "";
1738
+ const value = captures.VALUE?.text?.trim() ?? "";
1739
+ if (!/^(?:0|0x0+|NULL|nullptr)$/.test(value))
1740
+ return false;
1741
+ return /(?:pass(?:word)?|passwd|secret|token|api_?key|private_?key|credential|auth|pin)/i.test(destination);
1742
+ } catch {
1743
+ return true;
1744
+ }
1745
+ }
1746
+ case "unsafe_regex_dynamic_identifier": {
1747
+ try {
1748
+ const interpolationNode = captures.INTERPOLATION;
1749
+ const interpolation = interpolationNode?.text ?? "";
1750
+ const identifier = interpolation.match(/^\$\{\s*([A-Za-z_$][\w$]*)\s*\}$/)?.[1];
1751
+ if (!identifier || !rootNode || !interpolationNode)
1752
+ return true;
1753
+ const useRow = interpolationNode.startPosition.row;
1754
+ const hasEscapeSignal = (text) => /\b(?:escape|Escape)\w*\s*\(/.test(text) || /\.\s*replace\s*\(\s*\//.test(text);
1755
+ let lastWriteRow = -1;
1756
+ let lastWriteSafe = false;
1757
+ const consider = (row, valueText) => {
1758
+ if (row >= useRow || row < lastWriteRow)
1759
+ return;
1760
+ lastWriteRow = row;
1761
+ lastWriteSafe = valueText !== undefined && hasEscapeSignal(valueText);
1762
+ };
1763
+ const stack = [rootNode];
1764
+ while (stack.length > 0) {
1765
+ const node = stack.pop();
1766
+ if (!node)
1767
+ continue;
1768
+ if (node.type === "variable_declarator") {
1769
+ const name = node.childForFieldName?.("name");
1770
+ if (name?.text === identifier) {
1771
+ const initializer = node.childForFieldName?.("value");
1772
+ consider(node.startPosition.row, initializer?.text);
1773
+ }
1774
+ } else if (node.type === "assignment_expression") {
1775
+ const left = node.childForFieldName?.("left");
1776
+ if (left?.type === "identifier" && left.text === identifier) {
1777
+ const right = node.childForFieldName?.("right");
1778
+ consider(node.startPosition.row, right?.text);
1779
+ }
1780
+ }
1781
+ stack.push(...node.children);
1782
+ }
1783
+ return lastWriteRow >= 0 && lastWriteSafe ? false : true;
1784
+ } catch {
1785
+ return true;
1786
+ }
1787
+ }
1788
+ case "is_generator_with_valued_return": {
1789
+ const returnNode = captures.RETURN;
1790
+ const functionNode = captures.FUNCTION ?? (returnNode ? this.navigator.findParent(returnNode, ["function_definition"]) : undefined);
1791
+ if (!functionNode)
1792
+ return false;
1793
+ if (this.hasChildToken(functionNode, "async"))
1794
+ return false;
1795
+ return this.containsYieldInFunctionBody(functionNode);
1796
+ }
1797
+ case "count_params": {
1798
+ const paramsNode = captures.PARAMS;
1799
+ if (!paramsNode)
1800
+ return true;
1801
+ const paramCount = paramsNode.children.filter((c) => {
1802
+ if (c.type !== "required_parameter")
1803
+ return false;
1804
+ if (c.text.includes("="))
1805
+ return false;
1806
+ if (c.children?.some((ch) => ch.text === "?"))
1807
+ return false;
1808
+ return true;
1809
+ }).length;
1810
+ return paramCount >= (postFilterParams?.min_params ?? 6);
1811
+ }
1812
+ case "empty_body": {
1813
+ const bodyNode = captures.BODY;
1814
+ if (!bodyNode)
1815
+ return true;
1816
+ const meaningful = bodyNode.children.filter((c) => c.isNamed && c.type !== "comment" && c.type !== "line_comment" && c.type !== "block_comment");
1817
+ return meaningful.length === 0;
1818
+ }
1819
+ case "is_empty_block": {
1820
+ const caseNode = captures.CASE;
1821
+ if (!caseNode)
1822
+ return false;
1823
+ if (this.switchCaseBodyStatements(caseNode).length > 0)
1824
+ return false;
1825
+ return !this.nextSiblingIsSwitchLabel(caseNode);
1826
+ }
1827
+ case "no_break_or_return_in_body": {
1828
+ const bodyNode = captures.BODY;
1829
+ if (!bodyNode)
1830
+ return false;
1831
+ return !this.bodyHasLoopExit(bodyNode, false);
1832
+ }
1833
+ case "same_param_name": {
1834
+ const first = this.bindingNames(captures.PARAM1);
1835
+ const second = this.bindingNames(captures.NAME);
1836
+ return [...first].some((name) => second.has(name));
1837
+ }
1838
+ case "no_terminating_statement": {
1839
+ const caseNode = captures.CASE;
1840
+ if (!caseNode)
1841
+ return false;
1842
+ if (this.hasFallthroughMarker(caseNode))
1843
+ return false;
1844
+ const body = this.switchCaseBodyStatements(caseNode);
1845
+ if (body.length === 0)
1846
+ return false;
1847
+ return !this.statementTerminates(body[body.length - 1]);
1848
+ }
1849
+ case "no_break_or_return": {
1850
+ const bodyNode = captures.BODY;
1851
+ if (!bodyNode)
1852
+ return false;
1853
+ return !this.bodyHasLoopExit(bodyNode, false);
1854
+ }
1855
+ case "is_double_checked_locking": {
1856
+ const outer = captures.FIELD?.text;
1857
+ const inner = captures.FIELD2?.text;
1858
+ return !!outer && outer === inner;
1859
+ }
1860
+ case "shadows_parent_field": {
1861
+ const parentName = captures.PARENT?.text;
1862
+ const fieldName = captures.NAME?.text;
1863
+ if (!parentName || !fieldName)
1864
+ return false;
1865
+ let root = captures.NAME;
1866
+ while (root.parent)
1867
+ root = root.parent;
1868
+ const stack = [root];
1869
+ while (stack.length) {
1870
+ const node = stack.pop();
1871
+ if (node.type === "class_declaration" && node.childForFieldName?.("name")?.text === parentName) {
1872
+ const body = node.childForFieldName?.("body");
1873
+ for (const member of body?.children ?? []) {
1874
+ if (member.type !== "field_declaration")
1875
+ continue;
1876
+ for (const declarator of member.children ?? []) {
1877
+ if (declarator.type === "variable_declarator" && declarator.childForFieldName?.("name")?.text === fieldName) {
1878
+ return true;
1879
+ }
1880
+ }
1881
+ }
1882
+ }
1883
+ for (const child of node.children ?? [])
1884
+ stack.push(child);
1885
+ }
1886
+ return false;
1887
+ }
1888
+ case "missing_break_between_cases": {
1889
+ const label = captures.LABEL;
1890
+ const group = label?.parent;
1891
+ if (!group)
1892
+ return false;
1893
+ const TERMINATORS = new Set([
1894
+ "break_statement",
1895
+ "return_statement",
1896
+ "throw_statement",
1897
+ "continue_statement",
1898
+ "yield_statement"
1899
+ ]);
1900
+ for (const child of group.children ?? []) {
1901
+ if (TERMINATORS.has(child.type))
1902
+ return false;
1903
+ }
1904
+ return true;
1905
+ }
1906
+ case "scoped_lock_empty_args": {
1907
+ const decl = captures.DECL;
1908
+ if (!decl)
1909
+ return false;
1910
+ for (const sibling of decl.parent?.children ?? []) {
1911
+ if (sibling.type === "argument_list")
1912
+ return false;
1913
+ }
1914
+ return true;
1915
+ }
1916
+ case "calc_missing_spaces": {
1917
+ const text = captures.EXPR?.text ?? "";
1918
+ return /[\w%)][+-][\w.(]/.test(text);
1919
+ }
1920
+ case "bare_except_only": {
1921
+ const clauseNode = captures.CLAUSE;
1922
+ if (!clauseNode)
1923
+ return true;
1924
+ const hasExceptionSpec = clauseNode.children.some((c) => {
1925
+ if (!c.isNamed)
1926
+ return false;
1927
+ return c.type !== "block";
1928
+ });
1929
+ return !hasExceptionSpec;
1930
+ }
1931
+ case "eq_mod_fn": {
1932
+ const mod = captures.MOD?.text ?? "";
1933
+ const fn = captures.FN?.text ?? "";
1934
+ return mod === "threading" && fn === "Thread";
1935
+ }
1936
+ case "regex_first_arg_identifier": {
1937
+ const mod = captures.MOD?.text ?? "";
1938
+ if (mod !== "re")
1939
+ return false;
1940
+ const func = captures.FUNC?.text ?? "";
1941
+ if (!/^(compile|match|search|fullmatch|findall|finditer|sub|subn|split)$/.test(func)) {
1942
+ return false;
1943
+ }
1944
+ const argsNode = captures.ARGS;
1945
+ if (!argsNode)
1946
+ return false;
1947
+ const firstNamed = (argsNode.children ?? []).find((c) => c.isNamed);
1948
+ if (!firstNamed)
1949
+ return false;
1950
+ return firstNamed.type === "identifier";
1951
+ }
1952
+ case "open_mode_invalid": {
1953
+ const modeNode = captures.MODE;
1954
+ if (!modeNode)
1955
+ return false;
1956
+ const text = modeNode.text ?? "";
1957
+ const stripped = text.replace(/^["']|["']$/g, "");
1958
+ if (stripped.length === 0)
1959
+ return false;
1960
+ if (stripped.length === 1)
1961
+ return false;
1962
+ if (!/^[rwxabt+]+$/.test(stripped))
1963
+ return true;
1964
+ const validShape = /^[rwax][bt]?\+?$/;
1965
+ if (!validShape.test(stripped))
1966
+ return true;
1967
+ return false;
1968
+ }
1969
+ case "status_204_with_value_return": {
1970
+ const funcNode = captures.FUNC;
1971
+ const valNode = captures.VAL;
1972
+ if (!funcNode || !valNode)
1973
+ return false;
1974
+ if (Number(valNode.text ?? 0) !== 204)
1975
+ return false;
1976
+ const queue = [funcNode];
1977
+ while (queue.length > 0) {
1978
+ const node = queue.shift();
1979
+ if (node.type === "return_statement") {
1980
+ const hasValue = node.children.some((c) => c.isNamed && c.type !== "comment");
1981
+ if (hasValue)
1982
+ return true;
1983
+ }
1984
+ if (node.children)
1985
+ queue.push(...node.children);
1986
+ }
1987
+ return false;
1988
+ }
1989
+ case "has_mixed_async": {
1990
+ const bodyNode = captures.BODY;
1991
+ if (!bodyNode)
1992
+ return true;
1993
+ const bodyText = bodyNode.text;
1994
+ return bodyText.includes("await") && /\.\s*(then|catch)\s*\(/.test(bodyText);
1995
+ }
1996
+ case "format_arity_mismatch": {
1997
+ const formatNode = captures.FORMAT;
1998
+ const argsNode = captures.ARGS;
1999
+ if (!formatNode || !argsNode)
2000
+ return false;
2001
+ const fmtText = (formatNode.text ?? "").replace(/^["']|["']$/g, "");
2002
+ const fmt = fmtText;
2003
+ let placeholderCount = 0;
2004
+ const namedKeys = [];
2005
+ const positionalRegex = /%(?:\([^)]+\))?[#0\- +]*\d*(?:\.\d+)?[hlL]?[diouxXeEfFgGcrs%]/g;
2006
+ const positionalMatches = fmt.match(positionalRegex) ?? [];
2007
+ for (const m of positionalMatches) {
2008
+ if (m === "%%")
2009
+ continue;
2010
+ placeholderCount++;
2011
+ const namedMatch = m.match(/^%\(([^)]+)\)/);
2012
+ if (namedMatch)
2013
+ namedKeys.push(namedMatch[1]);
2014
+ }
2015
+ if (namedKeys.length > 0) {
2016
+ if (argsNode.type === "dictionary") {
2017
+ const dictKeys = [];
2018
+ for (const child of argsNode.children ?? []) {
2019
+ if (child.type === "pair" && child.children?.[0]) {
2020
+ dictKeys.push((child.children[0].text ?? "").replace(/^["']|["']$/g, ""));
2021
+ }
2022
+ }
2023
+ const missing = namedKeys.filter((k) => !dictKeys.includes(k));
2024
+ return missing.length > 0;
2025
+ }
2026
+ return true;
2027
+ }
2028
+ if (argsNode.type === "tuple") {
2029
+ const argCount = (argsNode.children ?? []).filter((c) => c.isNamed).length;
2030
+ if (argCount !== placeholderCount)
2031
+ return true;
2032
+ }
2033
+ return false;
2034
+ }
2035
+ case "aws_policy_public": {
2036
+ const policyNode = captures.POLICY;
2037
+ if (!policyNode)
2038
+ return false;
2039
+ const text = policyNode.text ?? "";
2040
+ const patterns = [
2041
+ /"Principal"\s*:\s*"\*"/,
2042
+ /"Principal"\s*:\s*\{\s*"AWS"\s*:\s*"\*"\s*\}/,
2043
+ /"Effect"\s*:\s*"Allow"[\s\S]*?"Action"\s*:\s*"\*"[\s\S]*?"Resource"\s*:\s*"\*"/,
2044
+ /"Principal"\s*:\s*"\*"/
2045
+ ];
2046
+ return patterns.some((p) => p.test(text));
2047
+ }
2048
+ case "slots_attribute_mismatch": {
2049
+ const selfNode = captures.SELF;
2050
+ const attrNode = captures.ATTR;
2051
+ const methodNode = captures.METHOD;
2052
+ if (!selfNode || !attrNode || !methodNode)
2053
+ return false;
2054
+ if (selfNode.text !== "self")
2055
+ return false;
2056
+ const attrName = attrNode.text ?? "";
2057
+ let parent = methodNode.parent;
2058
+ while (parent && parent.type !== "class_definition") {
2059
+ parent = parent.parent;
2060
+ }
2061
+ if (!parent)
2062
+ return false;
2063
+ const slots = extractSlots(parent);
2064
+ if (slots === null || slots.length === 0)
2065
+ return false;
2066
+ return !slots.includes(attrName);
2067
+ }
2068
+ case "special_method_arity": {
2069
+ const nameNode = captures.NAME;
2070
+ const paramsNode = captures.PARAMS;
2071
+ if (!nameNode || !paramsNode)
2072
+ return false;
2073
+ const name = nameNode.text ?? "";
2074
+ const expected = {
2075
+ __del__: 0,
2076
+ __repr__: 0,
2077
+ __str__: 0,
2078
+ __hash__: 0,
2079
+ __bool__: 0,
2080
+ __len__: 0,
2081
+ __eq__: 1,
2082
+ __lt__: 1,
2083
+ __le__: 1,
2084
+ __gt__: 1,
2085
+ __ge__: 1,
2086
+ __ne__: 1
2087
+ };
2088
+ const expectedCount = expected[name];
2089
+ if (expectedCount === undefined)
2090
+ return false;
2091
+ const paramCount = (paramsNode.children ?? []).filter((c) => {
2092
+ if (c.type !== "identifier" && c.type !== "typed_parameter")
2093
+ return false;
2094
+ if (c.text.includes("="))
2095
+ return false;
2096
+ return true;
2097
+ }).length;
2098
+ return paramCount !== expectedCount + 1;
2099
+ }
2100
+ case "no_super_call": {
2101
+ const bodyNode = captures.BODY;
2102
+ if (!bodyNode)
2103
+ return true;
2104
+ return !/(?<!\/\/.*)super\s*\(/.test(bodyNode.text);
2105
+ }
2106
+ case "in_test_block": {
2107
+ const first = Object.values(captures)[0];
2108
+ return !!first && this.navigator.isInTestBlock(first);
2109
+ }
2110
+ case "not_in_test_block": {
2111
+ const first = Object.values(captures)[0];
2112
+ return !first || !this.navigator.isInTestBlock(first);
2113
+ }
2114
+ case "not_in_try_catch": {
2115
+ const first = Object.values(captures)[0];
2116
+ return !first || !this.navigator.isInTryCatch(first);
2117
+ }
2118
+ case "in_try_catch": {
2119
+ const first = Object.values(captures)[0];
2120
+ return !!first && this.navigator.isInTryCatch(first);
2121
+ }
2122
+ case "name_matches_param": {
2123
+ const nameNode = captures.NAME;
2124
+ const paramNode = captures.PARAM;
2125
+ return !!nameNode && !!paramNode && nameNode.text === paramNode.text;
2126
+ }
2127
+ case "not_in_function": {
2128
+ const first = Object.values(captures)[0];
2129
+ return !first || !this.navigator.isInside(first, [
2130
+ "function_definition",
2131
+ "function_declaration",
2132
+ "method_definition",
2133
+ "arrow_function"
2134
+ ]);
2135
+ }
2136
+ case "check_secret_pattern": {
2137
+ const varName = captures.VARNAME?.text ?? "";
2138
+ const varNameLower = varName.toLowerCase();
2139
+ if (varName === varName.toUpperCase() && /[A-Z]/.test(varName)) {
2140
+ return false;
2141
+ }
2142
+ return [
2143
+ /api[_-]?key/,
2144
+ /api[_-]?secret/,
2145
+ /password/,
2146
+ /passwd/,
2147
+ /secret/,
2148
+ /token/,
2149
+ /auth/,
2150
+ /private[_-]?key/,
2151
+ /access[_-]?token/,
2152
+ /credentials/,
2153
+ /aws[_-]?secret/,
2154
+ /github[_-]?token/,
2155
+ /client[_-]?secret/
2156
+ ].some((p) => p.test(varNameLower));
2157
+ }
2158
+ case "returns_error": {
2159
+ const first = Object.values(captures)[0];
2160
+ if (!first)
2161
+ return false;
2162
+ const funcNode = this.navigator.findParent(first, [
2163
+ "function_declaration",
2164
+ "method_declaration"
2165
+ ]);
2166
+ if (!funcNode)
2167
+ return false;
2168
+ const signature = String(funcNode.text ?? "").split("{", 1)[0]?.trim() ?? "";
2169
+ const returnPart = signature.match(/func\s*(?:\([^)]*\)\s*)?[A-Za-z_]\w*\s*\([^)]*\)\s*(.*)$/s)?.[1]?.trim() ?? "";
2170
+ return returnPart.length > 0 && /\berror\b/.test(returnPart);
2171
+ }
2172
+ case "python_empty_except": {
2173
+ const bodyNode = captures.BODY;
2174
+ if (!bodyNode)
2175
+ return true;
2176
+ return !bodyNode.children.some((c) => c.isNamed && c.type !== "pass_statement" && c.type !== "comment");
2177
+ }
2178
+ case "check_in_operator_types": {
2179
+ const target = captures.TARGET;
2180
+ if (!target)
2181
+ return false;
2182
+ return ["none", "true", "false", "integer", "float"].includes(target.type);
2183
+ }
2184
+ case "torchscript_super_call": {
2185
+ const call = captures.CALL;
2186
+ if (!call)
2187
+ return false;
2188
+ const isTorchScriptDecorated = (node) => {
2189
+ const decorated = node?.parent;
2190
+ if (!decorated || decorated.type !== "decorated_definition")
2191
+ return false;
2192
+ return (decorated.children ?? []).some((c) => c.type === "decorator" && /^@(torch\.jit\.script|jit\.script)$/.test(c.text ?? ""));
2193
+ };
2194
+ const methodNode = this.navigator.findParent(call, [
2195
+ "function_definition"
2196
+ ]);
2197
+ if (!methodNode)
2198
+ return false;
2199
+ const classNode = this.navigator.findParent(methodNode, [
2200
+ "class_definition"
2201
+ ]);
2202
+ return isTorchScriptDecorated(methodNode) || isTorchScriptDecorated(classNode);
2203
+ }
2204
+ case "exit_params_insufficient": {
2205
+ const params = captures.PARAMS;
2206
+ if (!params)
2207
+ return true;
2208
+ const named = (params.children ?? []).filter((c) => c.isNamed);
2209
+ if (named.some((c) => c.type === "list_splat_pattern" || c.type === "dictionary_splat_pattern")) {
2210
+ return false;
2211
+ }
2212
+ return named.length < 4;
2213
+ }
2214
+ case "ruby_empty_rescue": {
2215
+ const bodyNode = captures.BODY;
2216
+ if (!bodyNode)
2217
+ return true;
2218
+ return !bodyNode.children.some((c) => c.isNamed && !["comment", "nil", "nil_literal"].includes(c.type));
2219
+ }
2220
+ case "ts_command_injection_sink":
2221
+ return captures.MOD?.text === "child_process" && /^(exec|execSync)$/.test(captures.FN?.text ?? "");
2222
+ case "ts_ssrf_sink": {
2223
+ const fn = captures.FN?.text ?? "";
2224
+ const obj = captures.OBJ?.text ?? "";
2225
+ const urlText = captures.URL?.text ?? "";
2226
+ const allowedFns = new Set([
2227
+ "fetch",
2228
+ "request",
2229
+ "get",
2230
+ "post",
2231
+ "put",
2232
+ "patch",
2233
+ "delete"
2234
+ ]);
2235
+ if (!allowedFns.has(fn))
2236
+ return false;
2237
+ if (rootNode && captures.URL?.type === "identifier" && this.resolvesToFileLiteralConst(urlText, rootNode)) {
2238
+ return false;
2239
+ }
2240
+ if (rootNode && captures.URL) {
2241
+ const urlVar = this.newUrlBaseVarName(captures.URL);
2242
+ if (urlVar && this.resolvesToFixedNewUrlConst(urlVar, rootNode)) {
2243
+ return false;
2244
+ }
2245
+ }
2246
+ const looksLikeExternalInput = urlText.includes(".") || /user|external|remote|input|target|webhook|callback|redirect|untrusted|arbitrary/i.test(urlText);
2247
+ if (!looksLikeExternalInput)
2248
+ return false;
2249
+ if (!obj)
2250
+ return fn === "fetch";
2251
+ return new Set([
2252
+ "axios",
2253
+ "http",
2254
+ "https",
2255
+ "got",
2256
+ "request",
2257
+ "superagent",
2258
+ "undici"
2259
+ ]).has(obj);
2260
+ }
2261
+ case "ts_weak_hash_algorithm":
2262
+ return captures.FN?.text === "createHash" && /^(md5|sha1)$/i.test(captures.ALG?.text ?? "");
2263
+ case "ts_insecure_random_source": {
2264
+ if (captures.OBJ?.text !== "Math" || captures.FN?.text !== "random")
2265
+ return false;
2266
+ const varName = this.enclosingBindingName(captures.CALL ?? captures.VAR);
2267
+ return /token|secret|password|key|nonce|salt|csrf|auth|session|credential|hash|otp|pin/i.test(varName);
2268
+ }
2269
+ case "ts_detached_async_call":
2270
+ return /(Async$|fetch$|request$)/.test(captures.FN?.text ?? "");
2271
+ case "incomplete_assertion": {
2272
+ const expectNode = captures.EXPECT;
2273
+ if (!expectNode)
2274
+ return false;
2275
+ const CHAI_PROPERTY_ASSERTIONS = new Set([
2276
+ "true",
2277
+ "false",
2278
+ "null",
2279
+ "undefined",
2280
+ "empty",
2281
+ "NaN",
2282
+ "finite",
2283
+ "exist",
2284
+ "arguments",
2285
+ "extensible",
2286
+ "sealed",
2287
+ "frozen",
2288
+ "locked"
2289
+ ]);
2290
+ let current = expectNode.parent;
2291
+ if (!current)
2292
+ return false;
2293
+ current = current.parent;
2294
+ if (!current)
2295
+ return false;
2296
+ if (current.type === "expression_statement" || current.type === "return_statement")
2297
+ return true;
2298
+ let lastPropertyName = null;
2299
+ while (current && current.type === "member_expression") {
2300
+ const propNode = current.children?.find((c) => c.type === "property_identifier");
2301
+ if (propNode)
2302
+ lastPropertyName = propNode.text;
2303
+ const parent = current.parent;
2304
+ if (!parent)
2305
+ return false;
2306
+ if (parent.type === "expression_statement" || parent.type === "return_statement") {
2307
+ if (lastPropertyName && CHAI_PROPERTY_ASSERTIONS.has(lastPropertyName))
2308
+ return false;
2309
+ return true;
2310
+ }
2311
+ if (parent.type === "call_expression")
2312
+ return false;
2313
+ current = parent;
2314
+ }
2315
+ return false;
2316
+ }
2317
+ case "py_command_injection_sink": {
2318
+ const mod = captures.MOD?.text ?? "";
2319
+ const fn = captures.FN?.text ?? "";
2320
+ const kw = captures.KW?.text ?? "";
2321
+ return mod === "os" && /^(system|popen)$/.test(fn) || mod === "subprocess" && /^(run|Popen|call|check_output|check_call)$/.test(fn) && kw === "shell";
2322
+ }
2323
+ case "go_command_injection_sink":
2324
+ return captures.PKG?.text === "exec" && /^(Command|CommandContext)$/.test(captures.FN?.text ?? "") && /^"(sh|bash|zsh|cmd|powershell|pwsh)"$/.test(captures.SHELL?.text ?? "") && /^"(-c|\/c)"$/.test(captures.FLAG?.text ?? "");
2325
+ case "ruby_command_injection_sink":
2326
+ return /^(system|exec|spawn|popen|capture3|capture2|capture2e)$/.test(captures.FN?.text ?? "");
2327
+ case "py_ssrf_sink":
2328
+ return captures.MOD?.text === "requests" && /^(get|post|put|patch|delete|request|head|options)$/.test(captures.FN?.text ?? "");
2329
+ case "py_path_traversal_sink":
2330
+ return /^(open|read_text|read_bytes|write_text|write_bytes|remove|unlink|rmdir)$/.test(captures.FN?.text ?? "");
2331
+ case "go_path_traversal_sink":
2332
+ return /^(os|ioutil)$/.test(captures.PKG?.text ?? "") && /^(Open|OpenFile|ReadFile|WriteFile|Create|Remove|RemoveAll)$/.test(captures.FN?.text ?? "");
2333
+ case "py_sql_injection_sink": {
2334
+ const fn = captures.FN?.text ?? "";
2335
+ if (!new Set(["execute", "executemany", "query", "raw"]).has(fn)) {
2336
+ return false;
2337
+ }
2338
+ const sqlNode = captures.SQL;
2339
+ const receiver = captures.OBJ?.text ?? "";
2340
+ if (fn === "execute" && this.isLikelySqlAlchemyReceiver(receiver)) {
2341
+ return false;
2342
+ }
2343
+ if (sqlNode && this.isSafeSqlAlchemyExpressionCall(sqlNode)) {
2344
+ return false;
2345
+ }
2346
+ return true;
2347
+ }
2348
+ case "go_sql_injection_sink":
2349
+ return /^(Query|QueryContext|QueryRow|QueryRowContext|Exec|ExecContext)$/.test(captures.DBFN?.text ?? "") && captures.FMTPKG?.text === "fmt" && captures.FMTFN?.text === "Sprintf";
2350
+ case "py_insecure_deserialization_sink":
2351
+ return /^(pickle|yaml)$/.test(captures.MOD?.text ?? "") && /^(load|loads|unsafe_load)$/.test(captures.FN?.text ?? "");
2352
+ case "ruby_insecure_deserialization_sink":
2353
+ return /^(Marshal|YAML|Psych)$/.test(captures.MOD?.text ?? "") && /^(load|unsafe_load)$/.test(captures.FN?.text ?? "");
2354
+ case "match_captures": {
2355
+ for (const [captureName, pattern] of Object.entries(postFilterParams ?? {})) {
2356
+ const node = captures[captureName];
2357
+ if (!node)
2358
+ return false;
2359
+ if (!new RegExp(pattern).test(node.text))
2360
+ return false;
2361
+ }
2362
+ return true;
2363
+ }
2364
+ case "case_range_single_value": {
2365
+ const start = captures.START?.text ?? "";
2366
+ const end = captures.END?.text ?? "";
2367
+ return start === end;
2368
+ }
2369
+ case "goto_jumps_backward": {
2370
+ const label = captures.LABEL;
2371
+ const gotoNode = captures.GOTO;
2372
+ if (!label || !gotoNode)
2373
+ return false;
2374
+ return label.startIndex < gotoNode.startIndex;
2375
+ }
2376
+ case "goto_targets_inner_block": {
2377
+ const target = captures.TARGET;
2378
+ if (!target)
2379
+ return false;
2380
+ let depth = 0;
2381
+ let node = target.parent;
2382
+ while (node) {
2383
+ if (node.type === "compound_statement")
2384
+ depth++;
2385
+ node = node.parent;
2386
+ }
2387
+ return depth >= 2;
2388
+ }
2389
+ case "c_memset_sensitive_arg": {
2390
+ const callNode = captures.CALL;
2391
+ if (!callNode || callNode.type !== "call_expression")
2392
+ return false;
2393
+ const argList = callNode.children?.find((c) => c.type === "argument_list");
2394
+ if (!argList)
2395
+ return false;
2396
+ const firstArg = argList.children?.find((c) => c.isNamed);
2397
+ if (!firstArg)
2398
+ return false;
2399
+ const argName = firstArg.text ?? "";
2400
+ return /password|secret|key|token|credential|auth|private|passwd|pin|salt|nonce|iv|seed/i.test(argName);
2401
+ }
2402
+ case "c_stdlib_name": {
2403
+ const name = captures.NAME?.text ?? "";
2404
+ const STDLIB_NAMES = new Set([
2405
+ "malloc",
2406
+ "calloc",
2407
+ "realloc",
2408
+ "free",
2409
+ "alloca",
2410
+ "printf",
2411
+ "fprintf",
2412
+ "sprintf",
2413
+ "snprintf",
2414
+ "vprintf",
2415
+ "vfprintf",
2416
+ "vsprintf",
2417
+ "vsnprintf",
2418
+ "scanf",
2419
+ "fscanf",
2420
+ "sscanf",
2421
+ "vscanf",
2422
+ "vfscanf",
2423
+ "vsscanf",
2424
+ "strcpy",
2425
+ "strncpy",
2426
+ "strcat",
2427
+ "strncat",
2428
+ "strcmp",
2429
+ "strncmp",
2430
+ "strlen",
2431
+ "strchr",
2432
+ "strrchr",
2433
+ "strstr",
2434
+ "strerror",
2435
+ "memcpy",
2436
+ "memmove",
2437
+ "memset",
2438
+ "memcmp",
2439
+ "memchr",
2440
+ "fopen",
2441
+ "fclose",
2442
+ "fread",
2443
+ "fwrite",
2444
+ "fgets",
2445
+ "fputs",
2446
+ "getc",
2447
+ "putc",
2448
+ "getchar",
2449
+ "putchar",
2450
+ "exit",
2451
+ "abort",
2452
+ "assert",
2453
+ "errno",
2454
+ "abs",
2455
+ "labs",
2456
+ "llabs",
2457
+ "div",
2458
+ "ldiv",
2459
+ "lldiv",
2460
+ "atoi",
2461
+ "atol",
2462
+ "atoll",
2463
+ "strtol",
2464
+ "strtoll",
2465
+ "strtoul",
2466
+ "strtoull",
2467
+ "strtod",
2468
+ "strtof",
2469
+ "strtold",
2470
+ "qsort",
2471
+ "bsearch",
2472
+ "time",
2473
+ "clock",
2474
+ "difftime",
2475
+ "mktime",
2476
+ "strftime",
2477
+ "getenv",
2478
+ "setenv",
2479
+ "putenv",
2480
+ "system",
2481
+ "isalpha",
2482
+ "isdigit",
2483
+ "isalnum",
2484
+ "isspace",
2485
+ "isupper",
2486
+ "islower",
2487
+ "toupper",
2488
+ "tolower",
2489
+ "sizeof",
2490
+ "offsetof",
2491
+ "NULL",
2492
+ "EXIT_SUCCESS",
2493
+ "EXIT_FAILURE"
2494
+ ]);
2495
+ return STDLIB_NAMES.has(name);
2496
+ }
2497
+ case "c_octal_literal": {
2498
+ const num = captures.NUM?.text ?? "";
2499
+ return /^0[0-7]+$/.test(num);
2500
+ }
2501
+ case "c_noreturn_attr": {
2502
+ const attr = captures.ATTR?.text ?? "";
2503
+ return attr === "noreturn";
2504
+ }
2505
+ case "c_label_in_switch": {
2506
+ const stmt = captures.STMT;
2507
+ if (!stmt)
2508
+ return false;
2509
+ let node = stmt.parent;
2510
+ while (node) {
2511
+ if (node.type === "switch_statement")
2512
+ return true;
2513
+ node = node.parent;
2514
+ }
2515
+ return false;
2516
+ }
2517
+ default:
2518
+ this.reportMissingPostFilter(postFilter);
2519
+ return false;
2520
+ }
2521
+ }
2522
+ reportedMissingPostFilters = new Set;
2523
+ reportedPostFilterFailures = new Set;
2524
+ reportPostFilterFailure(postFilter, reason) {
2525
+ if (this.reportedPostFilterFailures.has(postFilter))
2526
+ return;
2527
+ this.reportedPostFilterFailures.add(postFilter);
2528
+ logTreeSitterDiagnostic({
2529
+ subsystem: "tree-sitter-client",
2530
+ message: `tree-sitter rule post_filter '${postFilter}' failed — ` + `keeping the diagnostic (fail-open): ${reason}.`,
2531
+ metadata: { postFilter }
2532
+ });
2533
+ }
2534
+ reportMissingPostFilter(postFilter) {
2535
+ if (this.reportedMissingPostFilters.has(postFilter))
2536
+ return;
2537
+ this.reportedMissingPostFilters.add(postFilter);
2538
+ logTreeSitterDiagnostic({
2539
+ subsystem: "tree-sitter-client",
2540
+ message: `tree-sitter rule post_filter '${postFilter}' is not implemented — ` + `matches for the rules using it are suppressed rather than reported unfiltered. ` + `Implement it in applyPostFilter (clients/tree-sitter-client.ts) to re-enable them.`,
2541
+ metadata: { postFilter }
2542
+ });
2543
+ }
2544
+ textPredicatesInvalidLogged = false;
2545
+ hasValidTextPredicates(query) {
2546
+ const valid = Array.isArray(query?.textPredicates);
2547
+ if (!valid) {
2548
+ if (!this.textPredicatesInvalidLogged) {
2549
+ this.textPredicatesInvalidLogged = true;
2550
+ logTreeSitterDiagnostic({
2551
+ subsystem: "tree-sitter-client",
2552
+ message: "web-tree-sitter Query.textPredicates is missing or not an array — " + "#match?/#eq? predicates cannot be evaluated. Failing CLOSED: matches " + "for this query are dropped rather than reported unfiltered.",
2553
+ metadata: { textPredicatesType: typeof query?.textPredicates }
2554
+ });
2555
+ }
2556
+ recordDegradationOnce({
2557
+ kind: "query-predicates-invalid",
2558
+ subject: "web-tree-sitter",
2559
+ reason: "Query.textPredicates is missing or not an array — #match?/#eq? " + "predicates cannot be evaluated; structural matches relying on them " + "are dropped fail-closed"
2560
+ });
2561
+ }
2562
+ return valid;
2563
+ }
2564
+ evaluatePredicates(query, match) {
2565
+ if (!this.hasValidTextPredicates(query))
2566
+ return false;
2567
+ const predicates = query.textPredicates?.[match.patternIndex] ?? [];
2568
+ return predicates.every((fn) => fn(match.captures));
2569
+ }
2570
+ async searchFileWithQuery(filePath, query, metavars, languageId, _originalPattern, postFilter, postFilterParams, contentOverride) {
2571
+ const matches = [];
2572
+ await this.parseFileAndUse(filePath, languageId, contentOverride, (tree) => {
2573
+ try {
2574
+ const queryMatches = query.matches(tree.rootNode);
2575
+ for (const match of queryMatches) {
2576
+ const captures = {};
2577
+ for (const capture of match.captures) {
2578
+ if (metavars.includes(capture.name)) {
2579
+ captures[capture.name] = capture.node;
2580
+ }
2581
+ }
2582
+ if (!this.evaluatePredicates(query, match)) {
2583
+ continue;
2584
+ }
2585
+ if (postFilter && !this.applyPostFilter(postFilter, postFilterParams, captures, tree.rootNode)) {
2586
+ continue;
2587
+ }
2588
+ if (match.captures.length > 0) {
2589
+ const firstNode = match.captures[0].node;
2590
+ const textCaptures = {};
2591
+ for (const [name, node] of Object.entries(captures)) {
2592
+ textCaptures[name] = node.text;
2593
+ }
2594
+ matches.push({
2595
+ file: filePath,
2596
+ line: firstNode.startPosition.row + 1,
2597
+ column: firstNode.startPosition.column + 1,
2598
+ matchedText: firstNode.text,
2599
+ nodeType: firstNode.type,
2600
+ captures: textCaptures
2601
+ });
2602
+ }
2603
+ }
2604
+ if (matches.length > 0) {
2605
+ this.dbg(`Found ${matches.length} matches in ${path.basename(filePath)}`);
2606
+ }
2607
+ } catch (err) {
2608
+ this.reportWasmAbort(err);
2609
+ this.dbg(`Query matching error: ${err}`);
2610
+ }
2611
+ });
2612
+ return matches;
2613
+ }
2614
+ collectFiles(dir, languageId, fileFilter) {
2615
+ const files = [];
2616
+ const extensions = this.getExtensionsForLanguage(languageId);
2617
+ const rootDir = path.resolve(dir);
2618
+ const ignoreMatcher = getProjectIgnoreMatcher(rootDir);
2619
+ const scan = (d) => {
2620
+ if (files.length >= TREE_SITTER_MAX_SCAN_FILES)
2621
+ return;
2622
+ try {
2623
+ const entries = fs.readdirSync(d, { withFileTypes: true });
2624
+ for (const entry of entries) {
2625
+ if (files.length >= TREE_SITTER_MAX_SCAN_FILES)
2626
+ return;
2627
+ const full = path.join(d, entry.name);
2628
+ if (entry.isDirectory()) {
2629
+ if (isExcludedDirName(entry.name))
2630
+ continue;
2631
+ if (ignoreMatcher.isIgnored(full, true))
2632
+ continue;
2633
+ scan(full);
2634
+ } else if (extensions.some((ext) => entry.name.endsWith(ext))) {
2635
+ if (ignoreMatcher.isIgnored(full, false))
2636
+ continue;
2637
+ if (!fileFilter || fileFilter(full)) {
2638
+ files.push(full);
2639
+ }
2640
+ }
2641
+ }
2642
+ } catch {}
2643
+ };
2644
+ scan(rootDir);
2645
+ return files;
2646
+ }
2647
+ getExtensionsForLanguage(languageId) {
2648
+ const mapping = {
2649
+ typescript: [".ts", ".mts", ".cts"],
2650
+ tsx: [".tsx"],
2651
+ javascript: [".js", ".mjs", ".cjs"],
2652
+ python: [".py"],
2653
+ rust: [".rs"],
2654
+ go: [".go"],
2655
+ java: [".java"],
2656
+ kotlin: [".kt", ".kts"],
2657
+ dart: [".dart"],
2658
+ c: [".c", ".h"],
2659
+ cpp: [".cpp", ".hpp", ".cc", ".hh"],
2660
+ elixir: [".ex", ".exs"],
2661
+ ruby: [".rb"]
2662
+ };
2663
+ return mapping[languageId] || [];
2664
+ }
2665
+ }
2666
+ export function regexStructuralSearch(pattern, files, options = {}) {
2667
+ const matches = [];
2668
+ const maxResults = options.maxResults ?? 50;
2669
+ const regexPattern = pattern.replace(/\\/g, "\\\\").replace(/\./g, "\\.").replace(/\$\$\$[A-Z_][A-Z0-9_]*/g, "(.*?)").replace(/\$[A-Z_][A-Z0-9_]*/g, "([^,)]+)");
2670
+ try {
2671
+ const regex = new RegExp(regexPattern, "g");
2672
+ for (const file of files) {
2673
+ if (matches.length >= maxResults)
2674
+ break;
2675
+ try {
2676
+ const content = fs.readFileSync(file, "utf-8");
2677
+ const lines = content.split(`
2678
+ `);
2679
+ for (let i = 0;i < lines.length; i++) {
2680
+ regex.lastIndex = 0;
2681
+ const match = regex.exec(lines[i]);
2682
+ if (match) {
2683
+ const captures = {};
2684
+ for (let j = 1;j < match.length; j++) {
2685
+ captures[`$${j}`] = match[j];
2686
+ }
2687
+ matches.push({
2688
+ file,
2689
+ line: i + 1,
2690
+ column: match.index + 1,
2691
+ matchedText: match[0],
2692
+ captures
2693
+ });
2694
+ if (matches.length >= maxResults)
2695
+ break;
2696
+ }
2697
+ }
2698
+ } catch {}
2699
+ }
2700
+ } catch {}
2701
+ return matches;
2702
+ }