@duckmind/dm-linux-x64 0.63.9 → 0.64.6
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/dm +0 -0
- package/extensions/.dm-extensions.json +544 -8
- package/extensions/dm-lens/clients/actionable-warnings-logger.js +30 -0
- package/extensions/dm-lens/clients/actionable-warnings.js +1002 -0
- package/extensions/dm-lens/clients/advisory-provenance.js +297 -0
- package/extensions/dm-lens/clients/agent-behavior-client.js +93 -0
- package/extensions/dm-lens/clients/agent-nudge.js +151 -0
- package/extensions/dm-lens/clients/ast-grep-client.js +546 -0
- package/extensions/dm-lens/clients/ast-grep-rule-manager.js +82 -0
- package/extensions/dm-lens/clients/ast-grep-tool-logger.js +91 -0
- package/extensions/dm-lens/clients/ast-grep-types.js +0 -0
- package/extensions/dm-lens/clients/ast-grep-yaml-synth.js +109 -0
- package/extensions/dm-lens/clients/atomic-write-staging.js +66 -0
- package/extensions/dm-lens/clients/atomic-write.js +41 -0
- package/extensions/dm-lens/clients/availability-probe-flight.js +11 -0
- package/extensions/dm-lens/clients/bash-file-access.js +693 -0
- package/extensions/dm-lens/clients/biome-client.js +222 -0
- package/extensions/dm-lens/clients/blocker-freshness.js +238 -0
- package/extensions/dm-lens/clients/blocker-past-eof.js +52 -0
- package/extensions/dm-lens/clients/bootstrap.js +260 -0
- package/extensions/dm-lens/clients/bounded-cache.js +105 -0
- package/extensions/dm-lens/clients/bounded-pid-file-lock.js +173 -0
- package/extensions/dm-lens/clients/bounded-telemetry.js +107 -0
- package/extensions/dm-lens/clients/build-identity.js +45 -0
- package/extensions/dm-lens/clients/bus-events-logger.js +54 -0
- package/extensions/dm-lens/clients/bus-publish.js +121 -0
- package/extensions/dm-lens/clients/cache/rule-cache.js +98 -0
- package/extensions/dm-lens/clients/cache-manager.js +316 -0
- package/extensions/dm-lens/clients/cache-observability.js +747 -0
- package/extensions/dm-lens/clients/call-graph.js +628 -0
- package/extensions/dm-lens/clients/cargo-manifest.js +148 -0
- package/extensions/dm-lens/clients/cascade-budget.js +55 -0
- package/extensions/dm-lens/clients/cascade-format.js +82 -0
- package/extensions/dm-lens/clients/cascade-logger.js +28 -0
- package/extensions/dm-lens/clients/cascade-types.js +1 -0
- package/extensions/dm-lens/clients/child-unref.js +63 -0
- package/extensions/dm-lens/clients/code-quality-warnings.js +190 -0
- package/extensions/dm-lens/clients/codebase-model.js +110 -0
- package/extensions/dm-lens/clients/collateral-test-role.js +8 -0
- package/extensions/dm-lens/clients/complexity-client.js +401 -0
- package/extensions/dm-lens/clients/config-core/deny.js +120 -0
- package/extensions/dm-lens/clients/config-core/index.js +68 -0
- package/extensions/dm-lens/clients/config-core/merge.js +255 -0
- package/extensions/dm-lens/clients/config-core/normalize.js +235 -0
- package/extensions/dm-lens/clients/config-core/process-spec.js +153 -0
- package/extensions/dm-lens/clients/config-core/provenance.js +55 -0
- package/extensions/dm-lens/clients/config-core/records.js +79 -0
- package/extensions/dm-lens/clients/config-core/resolve.js +51 -0
- package/extensions/dm-lens/clients/config-core/safe-object.js +22 -0
- package/extensions/dm-lens/clients/config-core/schema.js +93 -0
- package/extensions/dm-lens/clients/config-diagnostic-codes.js +88 -0
- package/extensions/dm-lens/clients/config-locations.js +61 -0
- package/extensions/dm-lens/clients/config-resolve.js +372 -0
- package/extensions/dm-lens/clients/config-schema.js +87 -0
- package/extensions/dm-lens/clients/config-warn.js +148 -0
- package/extensions/dm-lens/clients/console-guard-install.js +7 -0
- package/extensions/dm-lens/clients/cooperative-budget.js +36 -0
- package/extensions/dm-lens/clients/dead-code-client.js +347 -0
- package/extensions/dm-lens/clients/dead-code-logger.js +21 -0
- package/extensions/dm-lens/clients/deadline-utils.js +117 -0
- package/extensions/dm-lens/clients/debug-handles.js +121 -0
- package/extensions/dm-lens/clients/debug-heap.js +80 -0
- package/extensions/dm-lens/clients/deferred-lsp-work.js +33 -0
- package/extensions/dm-lens/clients/degradation-ledger.js +260 -0
- package/extensions/dm-lens/clients/demoted-finding-render.js +61 -0
- package/extensions/dm-lens/clients/dependency-checker.js +553 -0
- package/extensions/dm-lens/clients/deps/ast-grep-napi.js +17 -0
- package/extensions/dm-lens/clients/deps/dm-host-deps.js +10 -0
- package/extensions/dm-lens/clients/deps/dm-tui-compat.js +58 -0
- package/extensions/dm-lens/clients/deps/js-yaml.js +7 -0
- package/extensions/dm-lens/clients/deps/minimatch.js +6 -0
- package/extensions/dm-lens/clients/deps/pidusage.js +5 -0
- package/extensions/dm-lens/clients/deps/typebox.js +5 -0
- package/extensions/dm-lens/clients/deps/vscode-jsonrpc.js +8 -0
- package/extensions/dm-lens/clients/deps/web-tree-sitter.js +11 -0
- package/extensions/dm-lens/clients/diagnostic-dispositions.js +303 -0
- package/extensions/dm-lens/clients/diagnostic-line-freshness.js +144 -0
- package/extensions/dm-lens/clients/diagnostic-logger.js +60 -0
- package/extensions/dm-lens/clients/diagnostic-tracker.js +89 -0
- package/extensions/dm-lens/clients/diagnostics-publish.js +138 -0
- package/extensions/dm-lens/clients/dispatch/auxiliary-lsp.js +152 -0
- package/extensions/dm-lens/clients/dispatch/collect-later-tier.js +28 -0
- package/extensions/dm-lens/clients/dispatch/diagnostic-taxonomy.js +58 -0
- package/extensions/dm-lens/clients/dispatch/dispatcher.js +976 -0
- package/extensions/dm-lens/clients/dispatch/fact-provider-types.js +0 -0
- package/extensions/dm-lens/clients/dispatch/fact-rule-runner.js +17 -0
- package/extensions/dm-lens/clients/dispatch/fact-runner.js +18 -0
- package/extensions/dm-lens/clients/dispatch/fact-scheduler.js +52 -0
- package/extensions/dm-lens/clients/dispatch/fact-store.js +199 -0
- package/extensions/dm-lens/clients/dispatch/facts/comment-facts.js +20 -0
- package/extensions/dm-lens/clients/dispatch/facts/file-content.js +18 -0
- package/extensions/dm-lens/clients/dispatch/facts/function-facts.js +285 -0
- package/extensions/dm-lens/clients/dispatch/facts/import-facts.js +171 -0
- package/extensions/dm-lens/clients/dispatch/facts/tree-sitter-facts.js +24 -0
- package/extensions/dm-lens/clients/dispatch/facts/try-catch-facts.js +99 -0
- package/extensions/dm-lens/clients/dispatch/indent-detect.js +27 -0
- package/extensions/dm-lens/clients/dispatch/inline-suppressions.js +33 -0
- package/extensions/dm-lens/clients/dispatch/integration.js +1464 -0
- package/extensions/dm-lens/clients/dispatch/lazy.js +11 -0
- package/extensions/dm-lens/clients/dispatch/pending-runner-findings.js +75 -0
- package/extensions/dm-lens/clients/dispatch/plan.js +281 -0
- package/extensions/dm-lens/clients/dispatch/priorities.js +14 -0
- package/extensions/dm-lens/clients/dispatch/rule-id-normalize.js +42 -0
- package/extensions/dm-lens/clients/dispatch/rule-policy.js +73 -0
- package/extensions/dm-lens/clients/dispatch/rules/async-noise.js +31 -0
- package/extensions/dm-lens/clients/dispatch/rules/async-unnecessary-wrapper.js +27 -0
- package/extensions/dm-lens/clients/dispatch/rules/cors-wildcard.js +35 -0
- package/extensions/dm-lens/clients/dispatch/rules/error-obscuring.js +29 -0
- package/extensions/dm-lens/clients/dispatch/rules/error-swallowing.js +29 -0
- package/extensions/dm-lens/clients/dispatch/rules/framework-call-noise.js +31 -0
- package/extensions/dm-lens/clients/dispatch/rules/high-complexity.js +56 -0
- package/extensions/dm-lens/clients/dispatch/rules/high-fan-out.js +48 -0
- package/extensions/dm-lens/clients/dispatch/rules/high-import-coupling.js +31 -0
- package/extensions/dm-lens/clients/dispatch/rules/missing-error-propagation.js +45 -0
- package/extensions/dm-lens/clients/dispatch/rules/no-commented-credentials.js +46 -0
- package/extensions/dm-lens/clients/dispatch/rules/pass-through-wrappers.js +38 -0
- package/extensions/dm-lens/clients/dispatch/rules/placeholder-comments.js +40 -0
- package/extensions/dm-lens/clients/dispatch/rules/unsafe-boundary.js +101 -0
- package/extensions/dm-lens/clients/dispatch/runner-context.js +46 -0
- package/extensions/dm-lens/clients/dispatch/runners/actionlint.js +105 -0
- package/extensions/dm-lens/clients/dispatch/runners/ast-grep-napi.js +728 -0
- package/extensions/dm-lens/clients/dispatch/runners/biome-check.js +193 -0
- package/extensions/dm-lens/clients/dispatch/runners/cpp-check.js +209 -0
- package/extensions/dm-lens/clients/dispatch/runners/credo.js +63 -0
- package/extensions/dm-lens/clients/dispatch/runners/cue-vet.js +168 -0
- package/extensions/dm-lens/clients/dispatch/runners/dart-analyze.js +173 -0
- package/extensions/dm-lens/clients/dispatch/runners/detekt.js +151 -0
- package/extensions/dm-lens/clients/dispatch/runners/dotnet-build.js +153 -0
- package/extensions/dm-lens/clients/dispatch/runners/elixir-check.js +168 -0
- package/extensions/dm-lens/clients/dispatch/runners/eslint.js +115 -0
- package/extensions/dm-lens/clients/dispatch/runners/fact-rules.js +20 -0
- package/extensions/dm-lens/clients/dispatch/runners/fish-indent.js +64 -0
- package/extensions/dm-lens/clients/dispatch/runners/gleam-check.js +84 -0
- package/extensions/dm-lens/clients/dispatch/runners/go-vet.js +49 -0
- package/extensions/dm-lens/clients/dispatch/runners/golangci-lint.js +93 -0
- package/extensions/dm-lens/clients/dispatch/runners/hadolint.js +76 -0
- package/extensions/dm-lens/clients/dispatch/runners/helm-lint.js +145 -0
- package/extensions/dm-lens/clients/dispatch/runners/helm-render.js +601 -0
- package/extensions/dm-lens/clients/dispatch/runners/htmlhint.js +97 -0
- package/extensions/dm-lens/clients/dispatch/runners/index.js +100 -0
- package/extensions/dm-lens/clients/dispatch/runners/javac.js +81 -0
- package/extensions/dm-lens/clients/dispatch/runners/ktlint.js +130 -0
- package/extensions/dm-lens/clients/dispatch/runners/lsp.js +202 -0
- package/extensions/dm-lens/clients/dispatch/runners/markdownlint.js +132 -0
- package/extensions/dm-lens/clients/dispatch/runners/mypy.js +72 -0
- package/extensions/dm-lens/clients/dispatch/runners/oxlint.js +294 -0
- package/extensions/dm-lens/clients/dispatch/runners/php-lint.js +61 -0
- package/extensions/dm-lens/clients/dispatch/runners/phpstan.js +92 -0
- package/extensions/dm-lens/clients/dispatch/runners/prisma-validate.js +55 -0
- package/extensions/dm-lens/clients/dispatch/runners/psscriptanalyzer.js +314 -0
- package/extensions/dm-lens/clients/dispatch/runners/pyright.js +123 -0
- package/extensions/dm-lens/clients/dispatch/runners/rubocop.js +79 -0
- package/extensions/dm-lens/clients/dispatch/runners/ruff.js +82 -0
- package/extensions/dm-lens/clients/dispatch/runners/rust-clippy.js +156 -0
- package/extensions/dm-lens/clients/dispatch/runners/shellcheck.js +110 -0
- package/extensions/dm-lens/clients/dispatch/runners/shfmt.js +93 -0
- package/extensions/dm-lens/clients/dispatch/runners/spellcheck.js +67 -0
- package/extensions/dm-lens/clients/dispatch/runners/spotbugs.js +210 -0
- package/extensions/dm-lens/clients/dispatch/runners/sqlfluff.js +133 -0
- package/extensions/dm-lens/clients/dispatch/runners/stylelint.js +119 -0
- package/extensions/dm-lens/clients/dispatch/runners/swiftlint.js +138 -0
- package/extensions/dm-lens/clients/dispatch/runners/taplo.js +95 -0
- package/extensions/dm-lens/clients/dispatch/runners/terragrunt.js +112 -0
- package/extensions/dm-lens/clients/dispatch/runners/tflint.js +97 -0
- package/extensions/dm-lens/clients/dispatch/runners/tree-sitter.js +532 -0
- package/extensions/dm-lens/clients/dispatch/runners/trivy-config.js +155 -0
- package/extensions/dm-lens/clients/dispatch/runners/utils/availability-policy.js +280 -0
- package/extensions/dm-lens/clients/dispatch/runners/utils/candidate-probe.js +64 -0
- package/extensions/dm-lens/clients/dispatch/runners/utils/diagnostic-parsers.js +105 -0
- package/extensions/dm-lens/clients/dispatch/runners/utils/lazy-installer.js +133 -0
- package/extensions/dm-lens/clients/dispatch/runners/utils/runner-helpers.js +1078 -0
- package/extensions/dm-lens/clients/dispatch/runners/utils/spawn-outcome.js +40 -0
- package/extensions/dm-lens/clients/dispatch/runners/utils/tool-failure.js +120 -0
- package/extensions/dm-lens/clients/dispatch/runners/utils/toolchain-availability.js +91 -0
- package/extensions/dm-lens/clients/dispatch/runners/utils.js +25 -0
- package/extensions/dm-lens/clients/dispatch/runners/vale.js +101 -0
- package/extensions/dm-lens/clients/dispatch/runners/yaml-rule-parser.js +181 -0
- package/extensions/dm-lens/clients/dispatch/runners/yamllint.js +75 -0
- package/extensions/dm-lens/clients/dispatch/runners/zig-check.js +84 -0
- package/extensions/dm-lens/clients/dispatch/suppress-writer.js +50 -0
- package/extensions/dm-lens/clients/dispatch/tool-profile.js +30 -0
- package/extensions/dm-lens/clients/dispatch/types.js +4 -0
- package/extensions/dm-lens/clients/dispatch/utils/format-utils.js +45 -0
- package/extensions/dm-lens/clients/dispatch/utils/lsp-diagnostics.js +31 -0
- package/extensions/dm-lens/clients/disposition-logger.js +25 -0
- package/extensions/dm-lens/clients/disposition-publish.js +91 -0
- package/extensions/dm-lens/clients/durable-store.js +80 -0
- package/extensions/dm-lens/clients/effective-config.js +162 -0
- package/extensions/dm-lens/clients/env-utils.js +26 -0
- package/extensions/dm-lens/clients/error-class.js +3 -0
- package/extensions/dm-lens/clients/eval-timestamp.js +2 -0
- package/extensions/dm-lens/clients/event-loop-monitor.js +89 -0
- package/extensions/dm-lens/clients/extension-log.js +225 -0
- package/extensions/dm-lens/clients/extension-mode.js +20 -0
- package/extensions/dm-lens/clients/feature-hints.js +87 -0
- package/extensions/dm-lens/clients/file-kinds.js +308 -0
- package/extensions/dm-lens/clients/file-role.js +41 -0
- package/extensions/dm-lens/clients/file-time.js +112 -0
- package/extensions/dm-lens/clients/file-utils.js +564 -0
- package/extensions/dm-lens/clients/finding-delivery-gate.js +133 -0
- package/extensions/dm-lens/clients/finding-identity.js +23 -0
- package/extensions/dm-lens/clients/fix-worklog.js +75 -0
- package/extensions/dm-lens/clients/format-events-publish.js +234 -0
- package/extensions/dm-lens/clients/format-service.js +137 -0
- package/extensions/dm-lens/clients/formatters-lazy.js +8 -0
- package/extensions/dm-lens/clients/formatters.js +1362 -0
- package/extensions/dm-lens/clients/freshness-cadence.js +1 -0
- package/extensions/dm-lens/clients/freshness.js +8 -0
- package/extensions/dm-lens/clients/generated-artifacts.js +209 -0
- package/extensions/dm-lens/clients/generation-guard.js +99 -0
- package/extensions/dm-lens/clients/git-guard.js +721 -0
- package/extensions/dm-lens/clients/git-tracked-ignore.js +120 -0
- package/extensions/dm-lens/clients/gitleaks-client.js +262 -0
- package/extensions/dm-lens/clients/go-client.js +49 -0
- package/extensions/dm-lens/clients/govulncheck-client.js +392 -0
- package/extensions/dm-lens/clients/gradle-ktfmt-style.js +97 -0
- package/extensions/dm-lens/clients/grammar-source.js +224 -0
- package/extensions/dm-lens/clients/gzip-stage-write.js +85 -0
- package/extensions/dm-lens/clients/hashline-anchor.js +222 -0
- package/extensions/dm-lens/clients/hook-budgets.js +16 -0
- package/extensions/dm-lens/clients/host-edit-normalize.js +87 -0
- package/extensions/dm-lens/clients/host-ports.js +35 -0
- package/extensions/dm-lens/clients/indent-retarget.js +75 -0
- package/extensions/dm-lens/clients/install-diagnostics.js +121 -0
- package/extensions/dm-lens/clients/installer/index.js +3275 -0
- package/extensions/dm-lens/clients/installer/managed-tool-refresh-session.js +17 -0
- package/extensions/dm-lens/clients/installer/managed-tool-refresh.js +479 -0
- package/extensions/dm-lens/clients/instance-reaper.js +581 -0
- package/extensions/dm-lens/clients/instance-registry-lock.js +131 -0
- package/extensions/dm-lens/clients/instance-registry.js +426 -0
- package/extensions/dm-lens/clients/jscpd-client.js +250 -0
- package/extensions/dm-lens/clients/json-cache-read.js +25 -0
- package/extensions/dm-lens/clients/knip-client.js +479 -0
- package/extensions/dm-lens/clients/language-policy.js +242 -0
- package/extensions/dm-lens/clients/language-profile.js +267 -0
- package/extensions/dm-lens/clients/language-registry.js +422 -0
- package/extensions/dm-lens/clients/latency-logger.js +182 -0
- package/extensions/dm-lens/clients/lazy-import.js +14 -0
- package/extensions/dm-lens/clients/ledger-bounds.js +9 -0
- package/extensions/dm-lens/clients/lens-config.js +202 -0
- package/extensions/dm-lens/clients/lens-engine.js +221 -0
- package/extensions/dm-lens/clients/lens-events.js +109 -0
- package/extensions/dm-lens/clients/lens-flag-registry.js +257 -0
- package/extensions/dm-lens/clients/lens-map.js +980 -0
- package/extensions/dm-lens/clients/live-bus-emitter.js +53 -0
- package/extensions/dm-lens/clients/log-cleanup.js +166 -0
- package/extensions/dm-lens/clients/lsp/aggregation.js +88 -0
- package/extensions/dm-lens/clients/lsp/cascade-tier.js +210 -0
- package/extensions/dm-lens/clients/lsp/client.js +2710 -0
- package/extensions/dm-lens/clients/lsp/config.js +247 -0
- package/extensions/dm-lens/clients/lsp/diagnostic-binding.js +76 -0
- package/extensions/dm-lens/clients/lsp/document-drift.js +241 -0
- package/extensions/dm-lens/clients/lsp/edits.js +944 -0
- package/extensions/dm-lens/clients/lsp/index.js +4138 -0
- package/extensions/dm-lens/clients/lsp/inferred-project.js +123 -0
- package/extensions/dm-lens/clients/lsp/jvm-runtime.js +199 -0
- package/extensions/dm-lens/clients/lsp/language.js +29 -0
- package/extensions/dm-lens/clients/lsp/launch.js +469 -0
- package/extensions/dm-lens/clients/lsp/lombok.js +146 -0
- package/extensions/dm-lens/clients/lsp/path-utils.js +10 -0
- package/extensions/dm-lens/clients/lsp/pending-aux-coverage.js +91 -0
- package/extensions/dm-lens/clients/lsp/position-encoding.js +28 -0
- package/extensions/dm-lens/clients/lsp/ruby-drive-dirs.js +42 -0
- package/extensions/dm-lens/clients/lsp/server.js +2407 -0
- package/extensions/dm-lens/clients/lsp/session-roots.js +31 -0
- package/extensions/dm-lens/clients/lsp/spawn-history.js +15 -0
- package/extensions/dm-lens/clients/lsp/sync-kind.js +17 -0
- package/extensions/dm-lens/clients/lsp/tsserver-sync.js +158 -0
- package/extensions/dm-lens/clients/lsp/wait-policy/capability-snapshot.js +0 -0
- package/extensions/dm-lens/clients/lsp/wait-policy/classification.js +33 -0
- package/extensions/dm-lens/clients/lsp/wait-policy/index.js +3 -0
- package/extensions/dm-lens/clients/lsp/wait-policy/strategies.js +146 -0
- package/extensions/dm-lens/clients/lsp/watch-queue.js +40 -0
- package/extensions/dm-lens/clients/lsp/workspace-diagnostics-cache.js +247 -0
- package/extensions/dm-lens/clients/lsp/workspace-diagnostics-session.js +7 -0
- package/extensions/dm-lens/clients/lsp/workspace-sweep-hold.js +93 -0
- package/extensions/dm-lens/clients/lsp-budget.js +86 -0
- package/extensions/dm-lens/clients/lsp-document-symbols.js +93 -0
- package/extensions/dm-lens/clients/lsp-lazy.js +8 -0
- package/extensions/dm-lens/clients/lsp-mutation.js +277 -0
- package/extensions/dm-lens/clients/lsp-status.js +37 -0
- package/extensions/dm-lens/clients/map-with-concurrency.js +16 -0
- package/extensions/dm-lens/clients/mcp/analyze.js +261 -0
- package/extensions/dm-lens/clients/mcp/host-shim.js +14 -0
- package/extensions/dm-lens/clients/mcp/ipc.js +238 -0
- package/extensions/dm-lens/clients/mcp/review.js +112 -0
- package/extensions/dm-lens/clients/mcp/session.js +285 -0
- package/extensions/dm-lens/clients/memory-sampler.js +110 -0
- package/extensions/dm-lens/clients/message-end-attribution.js +18 -0
- package/extensions/dm-lens/clients/metrics-client.js +80 -0
- package/extensions/dm-lens/clients/metrics-history.js +320 -0
- package/extensions/dm-lens/clients/middle-man-analysis.js +163 -0
- package/extensions/dm-lens/clients/model-provider.js +31 -0
- package/extensions/dm-lens/clients/module-report-lsp.js +140 -0
- package/extensions/dm-lens/clients/module-report.js +1675 -0
- package/extensions/dm-lens/clients/mutating-tool.js +383 -0
- package/extensions/dm-lens/clients/mutation-attribution.js +168 -0
- package/extensions/dm-lens/clients/mutation-bridge.js +104 -0
- package/extensions/dm-lens/clients/ndjson-logger.js +463 -0
- package/extensions/dm-lens/clients/observed-mutation-sources.js +43 -0
- package/extensions/dm-lens/clients/observed-mutation.js +686 -0
- package/extensions/dm-lens/clients/oldtext-autopatch.js +100 -0
- package/extensions/dm-lens/clients/opaque-mutation-scan.js +303 -0
- package/extensions/dm-lens/clients/opengrep-client.js +134 -0
- package/extensions/dm-lens/clients/opengrep-config.js +52 -0
- package/extensions/dm-lens/clients/package-manager.js +320 -0
- package/extensions/dm-lens/clients/package-root.js +25 -0
- package/extensions/dm-lens/clients/partial-edit-apply.js +353 -0
- package/extensions/dm-lens/clients/path-attribution-telemetry.js +31 -0
- package/extensions/dm-lens/clients/path-keyed-map.js +57 -0
- package/extensions/dm-lens/clients/path-utils.js +285 -0
- package/extensions/dm-lens/clients/performance-report.js +299 -0
- package/extensions/dm-lens/clients/persist-debounce.js +37 -0
- package/extensions/dm-lens/clients/php-cs-fixer-config.js +10 -0
- package/extensions/dm-lens/clients/pipeline.js +1081 -0
- package/extensions/dm-lens/clients/post-autofix-notice.js +19 -0
- package/extensions/dm-lens/clients/print-mode.js +3 -0
- package/extensions/dm-lens/clients/probe-home-state.js +62 -0
- package/extensions/dm-lens/clients/process-bridge.js +20 -0
- package/extensions/dm-lens/clients/process-singletons.js +69 -0
- package/extensions/dm-lens/clients/process-snapshot.js +27 -0
- package/extensions/dm-lens/clients/project-changes.js +112 -0
- package/extensions/dm-lens/clients/project-conventions.js +152 -0
- package/extensions/dm-lens/clients/project-diagnostics/cache.js +77 -0
- package/extensions/dm-lens/clients/project-diagnostics/extractors.js +53 -0
- package/extensions/dm-lens/clients/project-diagnostics/fresh-fetch.js +282 -0
- package/extensions/dm-lens/clients/project-diagnostics/runner-adapters/call-graph-impact.js +66 -0
- package/extensions/dm-lens/clients/project-diagnostics/runner-adapters/dead-code.js +35 -0
- package/extensions/dm-lens/clients/project-diagnostics/runner-adapters/gitleaks.js +21 -0
- package/extensions/dm-lens/clients/project-diagnostics/runner-adapters/govulncheck.js +23 -0
- package/extensions/dm-lens/clients/project-diagnostics/runner-adapters/jscpd.js +28 -0
- package/extensions/dm-lens/clients/project-diagnostics/runner-adapters/knip.js +45 -0
- package/extensions/dm-lens/clients/project-diagnostics/runner-adapters/madge.js +34 -0
- package/extensions/dm-lens/clients/project-diagnostics/runner-adapters/opengrep.js +32 -0
- package/extensions/dm-lens/clients/project-diagnostics/runner-adapters/runner-findings.js +67 -0
- package/extensions/dm-lens/clients/project-diagnostics/runner-adapters/trivy.js +41 -0
- package/extensions/dm-lens/clients/project-diagnostics/scanner.js +341 -0
- package/extensions/dm-lens/clients/project-diagnostics/types.js +0 -0
- package/extensions/dm-lens/clients/project-lens-config.js +421 -0
- package/extensions/dm-lens/clients/project-report.js +536 -0
- package/extensions/dm-lens/clients/project-scale.js +60 -0
- package/extensions/dm-lens/clients/project-scan-policy.js +52 -0
- package/extensions/dm-lens/clients/project-snapshot-fingerprint.js +39 -0
- package/extensions/dm-lens/clients/project-snapshot-persist-worker.js +16 -0
- package/extensions/dm-lens/clients/project-snapshot.js +1183 -0
- package/extensions/dm-lens/clients/project-trust.js +104 -0
- package/extensions/dm-lens/clients/python-environment.js +55 -0
- package/extensions/dm-lens/clients/quiet-window-config.js +16 -0
- package/extensions/dm-lens/clients/quiet-window.js +137 -0
- package/extensions/dm-lens/clients/read-bridge.js +48 -0
- package/extensions/dm-lens/clients/read-expansion.js +218 -0
- package/extensions/dm-lens/clients/read-guard-logger.js +176 -0
- package/extensions/dm-lens/clients/read-guard-tool-lines.js +1053 -0
- package/extensions/dm-lens/clients/read-guard.js +1077 -0
- package/extensions/dm-lens/clients/recent-touches.js +126 -0
- package/extensions/dm-lens/clients/redact/secrets.js +386 -0
- package/extensions/dm-lens/clients/resource-sampler.js +297 -0
- package/extensions/dm-lens/clients/reverse-deps.js +230 -0
- package/extensions/dm-lens/clients/review-graph/builder.js +3664 -0
- package/extensions/dm-lens/clients/review-graph/format.js +30 -0
- package/extensions/dm-lens/clients/review-graph/git-identity.js +111 -0
- package/extensions/dm-lens/clients/review-graph/import-resolvers.js +328 -0
- package/extensions/dm-lens/clients/review-graph/persist-worker.js +10 -0
- package/extensions/dm-lens/clients/review-graph/query.js +199 -0
- package/extensions/dm-lens/clients/review-graph/revision-drift.js +3 -0
- package/extensions/dm-lens/clients/review-graph/service.js +65 -0
- package/extensions/dm-lens/clients/review-graph/shared-extraction-ir.js +54 -0
- package/extensions/dm-lens/clients/review-graph/symbol-id.js +29 -0
- package/extensions/dm-lens/clients/review-graph/tsconfig-paths.js +257 -0
- package/extensions/dm-lens/clients/review-graph/types.js +0 -0
- package/extensions/dm-lens/clients/review-graph/workspace-modules.js +382 -0
- package/extensions/dm-lens/clients/review-graph-logger.js +49 -0
- package/extensions/dm-lens/clients/ruff-client.js +111 -0
- package/extensions/dm-lens/clients/rules-scanner.js +113 -0
- package/extensions/dm-lens/clients/run-duration.js +9 -0
- package/extensions/dm-lens/clients/runtime-agent-end.js +609 -0
- package/extensions/dm-lens/clients/runtime-config.js +39 -0
- package/extensions/dm-lens/clients/runtime-context.js +157 -0
- package/extensions/dm-lens/clients/runtime-coordinator.js +765 -0
- package/extensions/dm-lens/clients/runtime-session.js +1686 -0
- package/extensions/dm-lens/clients/runtime-tool-call.js +917 -0
- package/extensions/dm-lens/clients/runtime-tool-result.js +1178 -0
- package/extensions/dm-lens/clients/runtime-turn.js +2158 -0
- package/extensions/dm-lens/clients/rust-client.js +50 -0
- package/extensions/dm-lens/clients/safe-spawn.js +1088 -0
- package/extensions/dm-lens/clients/sanitize.js +178 -0
- package/extensions/dm-lens/clients/scan-utils.js +48 -0
- package/extensions/dm-lens/clients/scratch-tree-policy.js +58 -0
- package/extensions/dm-lens/clients/search-read-registration.js +59 -0
- package/extensions/dm-lens/clients/secret-findings.js +69 -0
- package/extensions/dm-lens/clients/security-scan-client.js +215 -0
- package/extensions/dm-lens/clients/session-event-guard.js +54 -0
- package/extensions/dm-lens/clients/session-lifecycle.js +173 -0
- package/extensions/dm-lens/clients/session-start-observability.js +47 -0
- package/extensions/dm-lens/clients/session-state-store.js +63 -0
- package/extensions/dm-lens/clients/session-summary.js +33 -0
- package/extensions/dm-lens/clients/sessionstart-logger.js +22 -0
- package/extensions/dm-lens/clients/sg-runner.js +624 -0
- package/extensions/dm-lens/clients/sgconfig.js +228 -0
- package/extensions/dm-lens/clients/shared-checkout-guard.js +186 -0
- package/extensions/dm-lens/clients/single-flight.js +52 -0
- package/extensions/dm-lens/clients/slow-fs.js +77 -0
- package/extensions/dm-lens/clients/smells-rollup.js +118 -0
- package/extensions/dm-lens/clients/source-filter.js +327 -0
- package/extensions/dm-lens/clients/source-walker.js +96 -0
- package/extensions/dm-lens/clients/spawn-output-cap.js +6 -0
- package/extensions/dm-lens/clients/spawn-timeout-cooldown.js +51 -0
- package/extensions/dm-lens/clients/stale-marker.js +1 -0
- package/extensions/dm-lens/clients/startup-scan.js +232 -0
- package/extensions/dm-lens/clients/startup-timing.js +70 -0
- package/extensions/dm-lens/clients/string-utils.js +3 -0
- package/extensions/dm-lens/clients/subagent-mode.js +40 -0
- package/extensions/dm-lens/clients/symbol-containment.js +16 -0
- package/extensions/dm-lens/clients/symbol-types.js +0 -0
- package/extensions/dm-lens/clients/test-runner-client.js +1451 -0
- package/extensions/dm-lens/clients/test-runner-delivery.js +208 -0
- package/extensions/dm-lens/clients/todo-scanner.js +164 -0
- package/extensions/dm-lens/clients/tool-definition.js +5 -0
- package/extensions/dm-lens/clients/tool-event.js +18 -0
- package/extensions/dm-lens/clients/tool-policy.js +2273 -0
- package/extensions/dm-lens/clients/tool-render.js +79 -0
- package/extensions/dm-lens/clients/tool-set-policy.js +35 -0
- package/extensions/dm-lens/clients/tree-sitter-cache.js +206 -0
- package/extensions/dm-lens/clients/tree-sitter-client.js +2702 -0
- package/extensions/dm-lens/clients/tree-sitter-logger.js +77 -0
- package/extensions/dm-lens/clients/tree-sitter-navigator.js +198 -0
- package/extensions/dm-lens/clients/tree-sitter-query-loader.js +376 -0
- package/extensions/dm-lens/clients/tree-sitter-shared.js +89 -0
- package/extensions/dm-lens/clients/tree-sitter-symbol-extractor.js +957 -0
- package/extensions/dm-lens/clients/trivy-client.js +298 -0
- package/extensions/dm-lens/clients/tui-fit.js +29 -0
- package/extensions/dm-lens/clients/turn-summary-render.js +58 -0
- package/extensions/dm-lens/clients/turn-summary.js +84 -0
- package/extensions/dm-lens/clients/typos-config.js +9 -0
- package/extensions/dm-lens/clients/user-notify.js +20 -0
- package/extensions/dm-lens/clients/vanished-instance-marker.js +18 -0
- package/extensions/dm-lens/clients/warm-attach.js +199 -0
- package/extensions/dm-lens/clients/widget-state.js +788 -0
- package/extensions/dm-lens/clients/word-index-logger.js +27 -0
- package/extensions/dm-lens/clients/word-index-store.js +228 -0
- package/extensions/dm-lens/clients/word-index.js +1451 -0
- package/extensions/dm-lens/clients/workspace-topology.js +251 -0
- package/extensions/dm-lens/clients/write-ordering-guard.js +18 -0
- package/extensions/dm-lens/clients/zizmor-config.js +161 -0
- package/extensions/dm-lens/config/biome/core.jsonc +92 -0
- package/extensions/dm-lens/config/dependency-cruiser-eager-allowlist.json +90 -0
- package/extensions/dm-lens/config/markdownlint/core.json +6 -0
- package/extensions/dm-lens/config/ruff/core.toml +67 -0
- package/extensions/dm-lens/i18n.js +67 -0
- package/extensions/dm-lens/index.js +1802 -0
- package/extensions/dm-lens/mcp/analyze-cli.js +181 -0
- package/extensions/dm-lens/mcp/build-staleness.js +55 -0
- package/extensions/dm-lens/mcp/cli.js +84 -0
- package/extensions/dm-lens/mcp/server.js +1205 -0
- package/extensions/dm-lens/mcp/worker.js +33 -0
- package/extensions/dm-lens/package.json +45 -0
- package/extensions/dm-lens/rules/.sgconfig.yml +4 -0
- package/extensions/dm-lens/rules/ast-grep-rules/.sgconfig.yml +13 -0
- package/extensions/dm-lens/rules/ast-grep-rules/coderabbit/rules/c/security/dont-call-system-c.yml +57 -0
- package/extensions/dm-lens/rules/ast-grep-rules/coderabbit/rules/c/security/file-access-before-action-c.yml +182 -0
- package/extensions/dm-lens/rules/ast-grep-rules/coderabbit/rules/c/security/file-stat-before-action-c.yml +331 -0
- package/extensions/dm-lens/rules/ast-grep-rules/coderabbit/rules/c/security/insecure-hash-c.yml +286 -0
- package/extensions/dm-lens/rules/ast-grep-rules/coderabbit/rules/c/security/libxml2-audit-parser-c.yml +258 -0
- package/extensions/dm-lens/rules/ast-grep-rules/coderabbit/rules/c/security/null-library-function-c.yml +254 -0
- package/extensions/dm-lens/rules/ast-grep-rules/coderabbit/rules/c/security/sizeof-this-c.yml +121 -0
- package/extensions/dm-lens/rules/ast-grep-rules/coderabbit/rules/c/security/small-key-size-c.yml +40 -0
- package/extensions/dm-lens/rules/ast-grep-rules/coderabbit/rules/c/security/world-writable-file-c.yml +317 -0
- package/extensions/dm-lens/rules/ast-grep-rules/coderabbit/rules/cpp/security/dont-call-system-cpp.yml +57 -0
- package/extensions/dm-lens/rules/ast-grep-rules/coderabbit/rules/cpp/security/file-access-before-action-cpp.yml +271 -0
- package/extensions/dm-lens/rules/ast-grep-rules/coderabbit/rules/cpp/security/file-stat-before-action-cpp.yml +494 -0
- package/extensions/dm-lens/rules/ast-grep-rules/coderabbit/rules/cpp/security/fix-format-security-error-cpp.yml +18 -0
- package/extensions/dm-lens/rules/ast-grep-rules/coderabbit/rules/cpp/security/insecure-hash-cpp.yml +122 -0
- package/extensions/dm-lens/rules/ast-grep-rules/coderabbit/rules/cpp/security/libxml2-audit-parser-cpp.yml +258 -0
- package/extensions/dm-lens/rules/ast-grep-rules/coderabbit/rules/cpp/security/missing-nul-cpp-string-memcpy-cpp.yml +393 -0
- package/extensions/dm-lens/rules/ast-grep-rules/coderabbit/rules/cpp/security/null-library-function-cpp.yml +254 -0
- package/extensions/dm-lens/rules/ast-grep-rules/coderabbit/rules/cpp/security/return-c-str-cpp.yml +124 -0
- package/extensions/dm-lens/rules/ast-grep-rules/coderabbit/rules/cpp/security/sizeof-this-cpp.yml +41 -0
- package/extensions/dm-lens/rules/ast-grep-rules/coderabbit/rules/cpp/security/small-key-size-cpp.yml +40 -0
- package/extensions/dm-lens/rules/ast-grep-rules/coderabbit/rules/cpp/security/std-return-data-cpp.yml +93 -0
- package/extensions/dm-lens/rules/ast-grep-rules/coderabbit/rules/cpp/security/std-vector-invalidation-cpp.yml +147 -0
- package/extensions/dm-lens/rules/ast-grep-rules/coderabbit/rules/cpp/security/string-view-temporary-string-cpp.yml +924 -0
- package/extensions/dm-lens/rules/ast-grep-rules/coderabbit/rules/cpp/security/world-writable-file-cpp.yml +317 -0
- package/extensions/dm-lens/rules/ast-grep-rules/coderabbit/rules/csharp/security/httponly-false-csharp.yml +42 -0
- package/extensions/dm-lens/rules/ast-grep-rules/coderabbit/rules/csharp/security/insecure-binaryformatter-deserialization-csharp.yml +38 -0
- package/extensions/dm-lens/rules/ast-grep-rules/coderabbit/rules/csharp/security/jwt-decode-without-verify-csharp.yml +700 -0
- package/extensions/dm-lens/rules/ast-grep-rules/coderabbit/rules/csharp/security/jwt-hardcoded-secret-csharp.yml +672 -0
- package/extensions/dm-lens/rules/ast-grep-rules/coderabbit/rules/csharp/security/jwt-tokenvalidationparameters-no-expiry-validation-csharp.yml +136 -0
- package/extensions/dm-lens/rules/ast-grep-rules/coderabbit/rules/csharp/security/networkcredential-hardcoded-secret-python.yml +394 -0
- package/extensions/dm-lens/rules/ast-grep-rules/coderabbit/rules/csharp/security/npgsqlconnectionstringbuilder-hardcoded-secret-csharp.yml +339 -0
- package/extensions/dm-lens/rules/ast-grep-rules/coderabbit/rules/csharp/security/oracleconnectionstringbuilder-hardcoded-secret-csharp.yml +339 -0
- package/extensions/dm-lens/rules/ast-grep-rules/coderabbit/rules/csharp/security/sqlconnectionstringbuilder-hardcoded-secret-csharp.yml +339 -0
- package/extensions/dm-lens/rules/ast-grep-rules/coderabbit/rules/csharp/security/stacktrace-disclosure-csharp.yml +48 -0
- package/extensions/dm-lens/rules/ast-grep-rules/coderabbit/rules/csharp/security/use-ecb-mode-csharp.yml +177 -0
- package/extensions/dm-lens/rules/ast-grep-rules/coderabbit/rules/go/security/avoid-bind-to-all-interfaces-go.yml +27 -0
- package/extensions/dm-lens/rules/ast-grep-rules/coderabbit/rules/go/security/gorilla-cookie-store-hardcoded-session-key-go.yml +90 -0
- package/extensions/dm-lens/rules/ast-grep-rules/coderabbit/rules/go/security/gorilla-csrf-hardcoded-auth-key-go.yml +79 -0
- package/extensions/dm-lens/rules/ast-grep-rules/coderabbit/rules/go/security/grpc-client-insecure-connection-go.yml +60 -0
- package/extensions/dm-lens/rules/ast-grep-rules/coderabbit/rules/go/security/jwt-go-none-algorithm-go.yml +35 -0
- package/extensions/dm-lens/rules/ast-grep-rules/coderabbit/rules/go/security/missing-ssl-minversion-go.yml +42 -0
- package/extensions/dm-lens/rules/ast-grep-rules/coderabbit/rules/go/security/openai-empty-secret-go.yml +199 -0
- package/extensions/dm-lens/rules/ast-grep-rules/coderabbit/rules/go/security/openai-hardcoded-secret-go.yml +208 -0
- package/extensions/dm-lens/rules/ast-grep-rules/coderabbit/rules/go/security/ssl-v3-is-insecure-go.yml +40 -0
- package/extensions/dm-lens/rules/ast-grep-rules/coderabbit/rules/go/security/tls-with-insecure-cipher-go.yml +65 -0
- package/extensions/dm-lens/rules/ast-grep-rules/coderabbit/rules/go/security/use-of-weak-rsa-key-go.yml +253 -0
- package/extensions/dm-lens/rules/ast-grep-rules/coderabbit/rules/html/security/plaintext-http-link-html.yml +76 -0
- package/extensions/dm-lens/rules/ast-grep-rules/coderabbit/rules/java/security/cbc-padding-oracle-java.yml +17 -0
- package/extensions/dm-lens/rules/ast-grep-rules/coderabbit/rules/java/security/cookie-httponly-false-java.yml +9 -0
- package/extensions/dm-lens/rules/ast-grep-rules/coderabbit/rules/java/security/cookie-missing-httponly-java.yml +21 -0
- package/extensions/dm-lens/rules/ast-grep-rules/coderabbit/rules/java/security/cookie-missing-samesite-java.yml +64 -0
- package/extensions/dm-lens/rules/ast-grep-rules/coderabbit/rules/java/security/cookie-missing-secure-flag-java.yml +51 -0
- package/extensions/dm-lens/rules/ast-grep-rules/coderabbit/rules/java/security/cookie-secure-flag-false-java.yml +13 -0
- package/extensions/dm-lens/rules/ast-grep-rules/coderabbit/rules/java/security/datanucleus-hardcoded-connection-password-java.yml +575 -0
- package/extensions/dm-lens/rules/ast-grep-rules/coderabbit/rules/java/security/des-is-deprecated-java.yml +15 -0
- package/extensions/dm-lens/rules/ast-grep-rules/coderabbit/rules/java/security/desede-is-deprecated-java.yml +92 -0
- package/extensions/dm-lens/rules/ast-grep-rules/coderabbit/rules/java/security/documentbuilderfactory-disallow-doctype-decl-false-java.yml +45 -0
- package/extensions/dm-lens/rules/ast-grep-rules/coderabbit/rules/java/security/documentbuilderfactory-external-general-entities-true-java.yml +279 -0
- package/extensions/dm-lens/rules/ast-grep-rules/coderabbit/rules/java/security/documentbuilderfactory-external-parameter-entities-true-java.yml +279 -0
- package/extensions/dm-lens/rules/ast-grep-rules/coderabbit/rules/java/security/drivermanager-hardcoded-secret-java.yml +142 -0
- package/extensions/dm-lens/rules/ast-grep-rules/coderabbit/rules/java/security/ecb-cipher-java.yml +47 -0
- package/extensions/dm-lens/rules/ast-grep-rules/coderabbit/rules/java/security/hardcoded-connection-password-java.yml +341 -0
- package/extensions/dm-lens/rules/ast-grep-rules/coderabbit/rules/java/security/hardcoded-secret-in-credentials-java.yml +281 -0
- package/extensions/dm-lens/rules/ast-grep-rules/coderabbit/rules/java/security/java-jwt-hardcoded-secret-java.yml +124 -0
- package/extensions/dm-lens/rules/ast-grep-rules/coderabbit/rules/java/security/jedis-jedisclientconfig-hardcoded-password-java.yml +804 -0
- package/extensions/dm-lens/rules/ast-grep-rules/coderabbit/rules/java/security/jedis-jedisfactory-hardcoded-password-java.yml +930 -0
- package/extensions/dm-lens/rules/ast-grep-rules/coderabbit/rules/java/security/missing-httponly-java.yml +583 -0
- package/extensions/dm-lens/rules/ast-grep-rules/coderabbit/rules/java/security/missing-secure-java.yml +584 -0
- package/extensions/dm-lens/rules/ast-grep-rules/coderabbit/rules/java/security/no-null-cipher-java.yml +38 -0
- package/extensions/dm-lens/rules/ast-grep-rules/coderabbit/rules/java/security/passwordauthentication-hardcoded-password-java.yml +651 -0
- package/extensions/dm-lens/rules/ast-grep-rules/coderabbit/rules/java/security/rsa-no-padding-java.yml +13 -0
- package/extensions/dm-lens/rules/ast-grep-rules/coderabbit/rules/java/security/simple-command-injection-direct-input-java.yml +55 -0
- package/extensions/dm-lens/rules/ast-grep-rules/coderabbit/rules/java/security/system-setproperty-hardcoded-secret-java.yml +312 -0
- package/extensions/dm-lens/rules/ast-grep-rules/coderabbit/rules/java/security/unencrypted-socket-java.yml +20 -0
- package/extensions/dm-lens/rules/ast-grep-rules/coderabbit/rules/java/security/use-of-aes-ecb-java.yml +68 -0
- package/extensions/dm-lens/rules/ast-grep-rules/coderabbit/rules/java/security/use-of-blowfish-java.yml +45 -0
- package/extensions/dm-lens/rules/ast-grep-rules/coderabbit/rules/java/security/use-of-default-aes-java.yml +318 -0
- package/extensions/dm-lens/rules/ast-grep-rules/coderabbit/rules/java/security/use-of-md5-digest-utils-java.yml +38 -0
- package/extensions/dm-lens/rules/ast-grep-rules/coderabbit/rules/java/security/use-of-md5-java.yml +104 -0
- package/extensions/dm-lens/rules/ast-grep-rules/coderabbit/rules/java/security/use-of-rc2-java.yml +84 -0
- package/extensions/dm-lens/rules/ast-grep-rules/coderabbit/rules/java/security/use-of-rc4-java.yml +38 -0
- package/extensions/dm-lens/rules/ast-grep-rules/coderabbit/rules/java/security/use-of-sha1-java.yml +165 -0
- package/extensions/dm-lens/rules/ast-grep-rules/coderabbit/rules/java/security/weak-ssl-context-java.yml +56 -0
- package/extensions/dm-lens/rules/ast-grep-rules/coderabbit/rules/javascript/security/detect-angular-sce-disabled-javascript.yml +14 -0
- package/extensions/dm-lens/rules/ast-grep-rules/coderabbit/rules/javascript/security/express-jwt-hardcoded-secret-javascript.yml +289 -0
- package/extensions/dm-lens/rules/ast-grep-rules/coderabbit/rules/javascript/security/express-session-hardcoded-secret-javascript.yml +101 -0
- package/extensions/dm-lens/rules/ast-grep-rules/coderabbit/rules/javascript/security/jwt-simple-noverify-javascript.yml +43 -0
- package/extensions/dm-lens/rules/ast-grep-rules/coderabbit/rules/javascript/security/node-rsa-weak-key-javascript.yml +577 -0
- package/extensions/dm-lens/rules/ast-grep-rules/coderabbit/rules/javascript/security/node-sequelize-empty-password-argument-javascript.yml +191 -0
- package/extensions/dm-lens/rules/ast-grep-rules/coderabbit/rules/javascript/security/node-sequelize-hardcoded-secret-argument-javascript.yml +94 -0
- package/extensions/dm-lens/rules/ast-grep-rules/coderabbit/rules/kotlin/security/des-is-deprecated-kotlin.yml +15 -0
- package/extensions/dm-lens/rules/ast-grep-rules/coderabbit/rules/kotlin/security/desede-is-deprecated-kotlin.yml +462 -0
- package/extensions/dm-lens/rules/ast-grep-rules/coderabbit/rules/kotlin/security/jwt-hardcode-kotlin.yml +567 -0
- package/extensions/dm-lens/rules/ast-grep-rules/coderabbit/rules/kotlin/security/rsa-no-padding-kotlin.yml +13 -0
- package/extensions/dm-lens/rules/ast-grep-rules/coderabbit/rules/kotlin/security/system-setproperty-hardcoded-secret-kotlin.yml +51 -0
- package/extensions/dm-lens/rules/ast-grep-rules/coderabbit/rules/php/security/openssl-cbc-static-iv-php.yml +641 -0
- package/extensions/dm-lens/rules/ast-grep-rules/coderabbit/rules/php/security/search-active-debug-php.yml +153 -0
- package/extensions/dm-lens/rules/ast-grep-rules/coderabbit/rules/python/security/avoid-mktemp-python.yml +71 -0
- package/extensions/dm-lens/rules/ast-grep-rules/coderabbit/rules/python/security/avoid_app_run_with_bad_host-python.yml +69 -0
- package/extensions/dm-lens/rules/ast-grep-rules/coderabbit/rules/python/security/debug-enabled-python.yml +91 -0
- package/extensions/dm-lens/rules/ast-grep-rules/coderabbit/rules/python/security/hashids-with-django-secret-python.yml +273 -0
- package/extensions/dm-lens/rules/ast-grep-rules/coderabbit/rules/python/security/hashids-with-flask-secret-python.yml +190 -0
- package/extensions/dm-lens/rules/ast-grep-rules/coderabbit/rules/python/security/insecure-cipher-algorithm-rc4-python.yml +75 -0
- package/extensions/dm-lens/rules/ast-grep-rules/coderabbit/rules/python/security/jwt-python-hardcoded-secret-python.yml +116 -0
- package/extensions/dm-lens/rules/ast-grep-rules/coderabbit/rules/python/security/openai-hardcoded-secret-python.yml +21 -0
- package/extensions/dm-lens/rules/ast-grep-rules/coderabbit/rules/python/security/python-cassandra-empty-password-python.yml +227 -0
- package/extensions/dm-lens/rules/ast-grep-rules/coderabbit/rules/python/security/python-cassandra-hardcoded-secret-python.yml +396 -0
- package/extensions/dm-lens/rules/ast-grep-rules/coderabbit/rules/python/security/python-couchbase-empty-password-python.yml +72 -0
- package/extensions/dm-lens/rules/ast-grep-rules/coderabbit/rules/python/security/python-couchbase-hardcoded-secret-python.yml +183 -0
- package/extensions/dm-lens/rules/ast-grep-rules/coderabbit/rules/python/security/python-elasticsearch-hardcoded-bearer-auth-python.yml +64 -0
- package/extensions/dm-lens/rules/ast-grep-rules/coderabbit/rules/python/security/python-ldap3-empty-password-python.yml +92 -0
- package/extensions/dm-lens/rules/ast-grep-rules/coderabbit/rules/python/security/python-ldap3-hardcoded-secret-python.yml +145 -0
- package/extensions/dm-lens/rules/ast-grep-rules/coderabbit/rules/python/security/python-mariadb-empty-password-python.yml +194 -0
- package/extensions/dm-lens/rules/ast-grep-rules/coderabbit/rules/python/security/python-mariadb-hardcoded-secret-python.yml +193 -0
- package/extensions/dm-lens/rules/ast-grep-rules/coderabbit/rules/python/security/python-mysql-empty-password-python.yml +192 -0
- package/extensions/dm-lens/rules/ast-grep-rules/coderabbit/rules/python/security/python-mysql-hardcoded-secret-python.yml +195 -0
- package/extensions/dm-lens/rules/ast-grep-rules/coderabbit/rules/python/security/python-mysqlclient-empty-password-python.yml +189 -0
- package/extensions/dm-lens/rules/ast-grep-rules/coderabbit/rules/python/security/python-mysqlclient-hardcoded-secret-python.yml +191 -0
- package/extensions/dm-lens/rules/ast-grep-rules/coderabbit/rules/python/security/python-neo4j-empty-password-python.yml +203 -0
- package/extensions/dm-lens/rules/ast-grep-rules/coderabbit/rules/python/security/python-neo4j-hardcoded-secret-python.yml +205 -0
- package/extensions/dm-lens/rules/ast-grep-rules/coderabbit/rules/python/security/python-peewee-mysql-empty-password-python.yml +50 -0
- package/extensions/dm-lens/rules/ast-grep-rules/coderabbit/rules/python/security/python-peewee-mysql-hardcoded-secret-python.yml +48 -0
- package/extensions/dm-lens/rules/ast-grep-rules/coderabbit/rules/python/security/python-peewee-pg-empty-password-python.yml +51 -0
- package/extensions/dm-lens/rules/ast-grep-rules/coderabbit/rules/python/security/python-peewee-pg-hardcoded-secret-python.yml +49 -0
- package/extensions/dm-lens/rules/ast-grep-rules/coderabbit/rules/python/security/python-pg8000-empty-password-python.yml +43 -0
- package/extensions/dm-lens/rules/ast-grep-rules/coderabbit/rules/python/security/python-pg8000-hardcoded-secret-python.yml +67 -0
- package/extensions/dm-lens/rules/ast-grep-rules/coderabbit/rules/python/security/python-psycopg2-empty-password-python.yml +65 -0
- package/extensions/dm-lens/rules/ast-grep-rules/coderabbit/rules/python/security/python-psycopg2-hardcoded-secret-python.yml +64 -0
- package/extensions/dm-lens/rules/ast-grep-rules/coderabbit/rules/python/security/python-pyjwt-hardcoded-secret-python.yml +38 -0
- package/extensions/dm-lens/rules/ast-grep-rules/coderabbit/rules/python/security/python-pymongo-empty-password-python.yml +50 -0
- package/extensions/dm-lens/rules/ast-grep-rules/coderabbit/rules/python/security/python-pymongo-hardcoded-secret-python.yml +48 -0
- package/extensions/dm-lens/rules/ast-grep-rules/coderabbit/rules/python/security/python-pymssql-empty-password-python.yml +50 -0
- package/extensions/dm-lens/rules/ast-grep-rules/coderabbit/rules/python/security/python-pymssql-hardcoded-secret-python.yml +48 -0
- package/extensions/dm-lens/rules/ast-grep-rules/coderabbit/rules/python/security/python-pymysql-empty-password-python.yml +49 -0
- package/extensions/dm-lens/rules/ast-grep-rules/coderabbit/rules/python/security/python-pymysql-hardcoded-secret-python.yml +47 -0
- package/extensions/dm-lens/rules/ast-grep-rules/coderabbit/rules/python/security/python-redis-empty-password-python.yml +66 -0
- package/extensions/dm-lens/rules/ast-grep-rules/coderabbit/rules/python/security/python-redis-hardcoded-secret-python.yml +65 -0
- package/extensions/dm-lens/rules/ast-grep-rules/coderabbit/rules/python/security/python-requests-empty-password-python.yml +42 -0
- package/extensions/dm-lens/rules/ast-grep-rules/coderabbit/rules/python/security/python-requests-hardcoded-secret-python.yml +146 -0
- package/extensions/dm-lens/rules/ast-grep-rules/coderabbit/rules/python/security/python-requests-oauth-hardcoded-secret-python.yml +278 -0
- package/extensions/dm-lens/rules/ast-grep-rules/coderabbit/rules/python/security/python-tormysql-empty-password-python.yml +301 -0
- package/extensions/dm-lens/rules/ast-grep-rules/coderabbit/rules/python/security/python-tormysql-hardcoded-secret-python.yml +292 -0
- package/extensions/dm-lens/rules/ast-grep-rules/coderabbit/rules/python/security/python-urllib3-hardcoded-secret-python.yml +52 -0
- package/extensions/dm-lens/rules/ast-grep-rules/coderabbit/rules/python/security/python-webrepl-empty-password-python.yml +49 -0
- package/extensions/dm-lens/rules/ast-grep-rules/coderabbit/rules/python/security/python-webrepl-hardcoded-secret-python.yml +47 -0
- package/extensions/dm-lens/rules/ast-grep-rules/coderabbit/rules/ruby/security/force-ssl-false-ruby.yml +23 -0
- package/extensions/dm-lens/rules/ast-grep-rules/coderabbit/rules/ruby/security/hardcoded-http-auth-in-controller-ruby.yml +55 -0
- package/extensions/dm-lens/rules/ast-grep-rules/coderabbit/rules/ruby/security/hardcoded-secret-rsa-passphrase-ruby.yml +218 -0
- package/extensions/dm-lens/rules/ast-grep-rules/coderabbit/rules/ruby/security/insufficient-rsa-key-size-ruby.yml +84 -0
- package/extensions/dm-lens/rules/ast-grep-rules/coderabbit/rules/ruby/security/ruby-aws-sdk-hardcoded-secret-ruby.yml +140 -0
- package/extensions/dm-lens/rules/ast-grep-rules/coderabbit/rules/ruby/security/ruby-cassandra-empty-password-ruby.yml +141 -0
- package/extensions/dm-lens/rules/ast-grep-rules/coderabbit/rules/ruby/security/ruby-cassandra-hardcoded-secret-ruby.yml +138 -0
- package/extensions/dm-lens/rules/ast-grep-rules/coderabbit/rules/ruby/security/ruby-excon-hardcoded-secret-ruby.yml +226 -0
- package/extensions/dm-lens/rules/ast-grep-rules/coderabbit/rules/ruby/security/ruby-faraday-hardcoded-secret-ruby.yml +490 -0
- package/extensions/dm-lens/rules/ast-grep-rules/coderabbit/rules/ruby/security/ruby-mongo-empty-password-ruby.yml +356 -0
- package/extensions/dm-lens/rules/ast-grep-rules/coderabbit/rules/ruby/security/ruby-mongo-hardcoded-secret-ruby.yml +400 -0
- package/extensions/dm-lens/rules/ast-grep-rules/coderabbit/rules/ruby/security/ruby-mysql2-empty-password-ruby.yml +227 -0
- package/extensions/dm-lens/rules/ast-grep-rules/coderabbit/rules/ruby/security/ruby-mysql2-hardcoded-secret-ruby.yml +248 -0
- package/extensions/dm-lens/rules/ast-grep-rules/coderabbit/rules/ruby/security/ruby-octokit-hardcoded-secret-ruby.yml +125 -0
- package/extensions/dm-lens/rules/ast-grep-rules/coderabbit/rules/ruby/security/ruby-pg-empty-password-ruby.yml +150 -0
- package/extensions/dm-lens/rules/ast-grep-rules/coderabbit/rules/ruby/security/ruby-pg-hardcoded-secret-ruby.yml +189 -0
- package/extensions/dm-lens/rules/ast-grep-rules/coderabbit/rules/ruby/security/ruby-redis-empty-password-ruby.yml +72 -0
- package/extensions/dm-lens/rules/ast-grep-rules/coderabbit/rules/ruby/security/ruby-redis-hardcoded-secret-ruby.yml +70 -0
- package/extensions/dm-lens/rules/ast-grep-rules/coderabbit/rules/rust/security/empty-password-rust.yml +1039 -0
- package/extensions/dm-lens/rules/ast-grep-rules/coderabbit/rules/rust/security/hardcoded-password-rust.yml +1016 -0
- package/extensions/dm-lens/rules/ast-grep-rules/coderabbit/rules/rust/security/postgres-empty-password-rust.yml +283 -0
- package/extensions/dm-lens/rules/ast-grep-rules/coderabbit/rules/rust/security/reqwest-accept-invalid-rust.yml +21 -0
- package/extensions/dm-lens/rules/ast-grep-rules/coderabbit/rules/rust/security/secrets-reqwest-hardcoded-auth-rust.yml +290 -0
- package/extensions/dm-lens/rules/ast-grep-rules/coderabbit/rules/rust/security/ssl-verify-none-rust.yml +100 -0
- package/extensions/dm-lens/rules/ast-grep-rules/coderabbit/rules/rust/security/tokio-postgres-empty-password-rust.yml +235 -0
- package/extensions/dm-lens/rules/ast-grep-rules/coderabbit/rules/rust/security/tokio-postgres-hardcoded-password-rust.yml +229 -0
- package/extensions/dm-lens/rules/ast-grep-rules/coderabbit/rules/scala/security/jwt-scala-hardcode-scala.yml +109 -0
- package/extensions/dm-lens/rules/ast-grep-rules/coderabbit/rules/scala/security/scala-jwt-hardcoded-secret-scala.yml +176 -0
- package/extensions/dm-lens/rules/ast-grep-rules/coderabbit/rules/swift/security/aes-hardcoded-secret-swift.yml +345 -0
- package/extensions/dm-lens/rules/ast-grep-rules/coderabbit/rules/swift/security/blowfish-hardcoded-secret-swift.yml +345 -0
- package/extensions/dm-lens/rules/ast-grep-rules/coderabbit/rules/swift/security/chacha20-hardcoded-secret-swift.yml +345 -0
- package/extensions/dm-lens/rules/ast-grep-rules/coderabbit/rules/swift/security/insecure-biometrics-swift.yml +43 -0
- package/extensions/dm-lens/rules/ast-grep-rules/coderabbit/rules/swift/security/rabbit-hardcoded-secret-swift.yml +345 -0
- package/extensions/dm-lens/rules/ast-grep-rules/coderabbit/rules/typescript/security/detect-angular-sce-disabled-typescript.yml +36 -0
- package/extensions/dm-lens/rules/ast-grep-rules/coderabbit/rules/typescript/security/express-session-hardcoded-secret-typescript.yml +203 -0
- package/extensions/dm-lens/rules/ast-grep-rules/coderabbit/rules/typescript/security/jwt-simple-noverify-typescript.yml +112 -0
- package/extensions/dm-lens/rules/ast-grep-rules/coderabbit/rules/typescript/security/node-rsa-weak-key-typescript.yml +1483 -0
- package/extensions/dm-lens/rules/ast-grep-rules/coderabbit/rules/typescript/security/node-sequelize-empty-password-argument-typescript.yml +169 -0
- package/extensions/dm-lens/rules/ast-grep-rules/coderabbit/rules/typescript/security/node-sequelize-hardcoded-secret-argument-typescript.yml +154 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rule-schema.json +130 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/__snapshots__/no-reflect-get-js-snapshot.yml +23 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/__snapshots__/no-reflect-get-snapshot.yml +23 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/__snapshots__/ts-void-zero-snapshot.yml +23 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/array-callback-return-js-test.yml +10 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/array-callback-return-test.yml +10 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/avoid-duplicate-export-test.yml +14 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/c-no-malloc-free-test.yml +20 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/consistent-existence-index-check-js-test.yml +10 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/consistent-existence-index-check-test.yml +10 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/cpp-no-malloc-free-test.yml +25 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/cpp-no-printf-test.yml +19 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/defer-in-loop-test.yml +20 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/enforce-node-protocol-js-test.yml +8 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/enforce-node-protocol-test.yml +8 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/find-import-file-without-extension-test.yml +12 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/go-defer-func-call-antipattern-test.yml +8 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/go-no-fmt-println-test.yml +19 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/go-no-panic-in-lib-test.yml +17 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/go-no-underscore-func-name-test.yml +18 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/go-prefer-errors-is-test.yml +15 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/go-prefer-string-builder-test.yml +21 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/go-test-functions-test.yml +9 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/gorm-find-without-where-test.yml +15 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/gorm-n-plus-one-test.yml +20 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/hardcoded-url-js-test.yml +9 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/hardcoded-url-test.yml +9 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/hyphenated-svg-attribute-test.yml +11 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/incomplete-string-escaping-js-test.yml +21 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/incomplete-string-escaping-test.yml +21 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/inline-styles-test.yml +8 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/jsx-boolean-short-circuit-test.yml +8 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/jwt-no-verify-js-test.yml +9 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/jwt-no-verify-test.yml +9 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/kotlin-no-lateinit-test.yml +17 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/kotlin-no-nullable-boolean-test.yml +15 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/kotlin-no-println-test.yml +19 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/kotlin-no-unnecessary-let-test.yml +7 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/kotlin-no-unsafe-cast-test.yml +7 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/kotlin-no-var-test.yml +7 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/kotlin-prefer-data-class-test.yml +25 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/kotlin-prefer-is-empty-test.yml +11 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/large-class-test.yml +15 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/long-parameter-list-test.yml +8 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/loop-var-capture-test.yml +25 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/missing-component-decorator-test.yml +7 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/mutex-unlock-mismatch-test.yml +29 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/nested-ternary-js-test.yml +8 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/nested-ternary-test.yml +8 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/nil-map-assignment-test.yml +50 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/no-absolute-path-import-js-test.yml +8 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/no-absolute-path-import-test.yml +8 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/no-accumulating-spread-js-test.yml +8 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/no-alert-js-test.yml +7 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/no-alert-test.yml +7 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/no-any-type-test.yml +9 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/no-array-constructor-js-test.yml +9 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/no-array-constructor-test.yml +9 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/no-array-reverse-mutation-js-test.yml +9 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/no-array-reverse-mutation-test.yml +9 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/no-as-any-test.yml +8 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/no-assert-tuple-test.yml +13 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/no-async-promise-executor-js-test.yml +8 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/no-async-promise-executor-test.yml +8 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/no-await-expression-member-js-test.yml +8 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/no-await-expression-member-test.yml +8 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/no-await-in-promise-all-js-test.yml +7 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/no-await-in-promise-all-test.yml +7 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/no-await-in-promise-methods-js-test.yml +10 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/no-await-in-promise-methods-test.yml +10 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/no-aws-access-key-literal-test.yml +8 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/no-aws-apigateway-no-auth-test.yml +12 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/no-aws-s3-public-access-test.yml +9 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/no-bare-except-test.yml +77 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/no-bare-host-path-in-win32-branch-test.yml +87 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/no-bare-object-param-test.yml +16 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/no-blank-target-js-test.yml +8 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/no-boolean-in-except-test.yml +28 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/no-case-declarations-js-test.yml +34 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/no-case-declarations-test.yml +34 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/no-chained-type-assertions-test.yml +22 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/no-compare-neg-zero-js-test.yml +9 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/no-compare-neg-zero-test.yml +9 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/no-comparison-to-none-test.yml +11 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/no-comparison-to-true-false-test.yml +13 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/no-compile-call-test.yml +38 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/no-cond-assign-js-test.yml +9 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/no-cond-assign-test.yml +9 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/no-conditional-empty-object-spread-js-test.yml +9 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/no-conditional-empty-object-spread-test.yml +9 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/no-console-except-error-js-test.yml +13 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/no-console-except-error-test.yml +13 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/no-constant-condition-js-test.yml +10 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/no-constant-condition-test.yml +10 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/no-db-string-literal-password-test.yml +8 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/no-demeter-message-chain-test.yml +16 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/no-discarded-error-js-test.yml +9 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/no-discarded-error-test.yml +9 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/no-dunder-exit-wrong-arity-test.yml +27 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/no-dupe-class-members-test.yml +44 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/no-dupe-keys-js-test.yml +9 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/no-dupe-keys-test.yml +9 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/no-duplicate-kwarg-test.yml +8 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/no-ellipsis-body-test.yml +20 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/no-except-non-exception-test.yml +23 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/no-extra-boolean-cast-js-test.yml +9 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/no-extra-boolean-cast-test.yml +9 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/no-fastapi-router-prefix-outside-init-test.yml +8 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/no-flag-argument-js-test.yml +37 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/no-flag-argument-test.yml +37 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/no-flask-preprocess-request-ignored-test.yml +16 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/no-flask-secret-key-literal-test.yml +11 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/no-flask-sendfile-without-mimetype-test.yml +8 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/no-global-eval-js-test.yml +17 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/no-hardcoded-password-test.yml +10 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/no-html-autoescape-off-test.yml +13 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/no-http-headers-bracket-access-test.yml +7 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/no-identity-operator-on-literals-test.yml +14 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/no-implied-eval-js-test.yml +12 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/no-implied-eval-test.yml +12 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/no-important-test.yml +21 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/no-init-return-test.yml +41 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/no-inner-html-js-test.yml +14 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/no-inner-html-test.yml +14 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/no-insecure-randomness-js-test.yml +13 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/no-insecure-randomness-test.yml +13 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/no-instanceof-array-js-test.yml +8 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/no-instanceof-array-test.yml +8 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/no-instanceof-builtins-js-test.yml +11 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/no-instanceof-builtins-test.yml +11 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/no-javascript-url-js-test.yml +24 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/no-javascript-url-test.yml +28 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/no-jinja2-autoescape-off-test.yml +13 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/no-known-value-widening-test.yml +9 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/no-marshal-load-test.yml +10 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/no-mutable-contextvar-default-test.yml +9 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/no-mutable-default-test.yml +12 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/no-mutable-export-test.yml +10 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/no-nan-comparison-js-test.yml +11 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/no-nan-comparison-test.yml +11 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/no-negation-in-equality-check-js-test.yml +10 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/no-negation-in-equality-check-test.yml +10 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/no-nested-links-test.yml +18 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/no-new-symbol-js-test.yml +8 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/no-new-symbol-test.yml +8 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/no-new-wrappers-js-test.yml +9 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/no-new-wrappers-test.yml +9 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/no-non-null-assertion-test.yml +226 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/no-notimplemented-in-bool-test.yml +20 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/no-numpy-nan-equality-test.yml +22 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/no-octal-literal-test.yml +8 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/no-only-defined-names-in-dunder-all-test.yml +17 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/no-open-redirect-js-test.yml +12 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/no-open-redirect-test.yml +12 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/no-prototype-builtins-js-test.yml +9 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/no-prototype-builtins-native-test.yml +9 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/no-prototype-builtins-test.yml +9 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/no-python-sql-string-concat-test.yml +10 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/no-raise-not-implemented-test.yml +21 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/no-raise-stopiteration-in-generator-test.yml +22 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/no-raw-json-store-write-test.yml +17 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/no-raw-types-test.yml +30 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/no-reflect-apply-js-test.yml +9 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/no-reflect-apply-test.yml +9 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/no-reflect-get-js-test.yml +9 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/no-reflect-get-test.yml +9 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/no-relative-cross-package-import-test.yml +9 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/no-requests-verify-false-test.yml +11 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/no-requests-without-timeout-test.yml +10 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/no-return-await-test.yml +12 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/no-return-value-in-generator-test.yml +34 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/no-runtime-typeof-test.yml +33 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/no-secret-in-env-var-name-test.yml +11 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/no-server-bind-wildcard-test.yml +19 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/no-shape-in-symbol-names-test.yml +13 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/no-single-promise-in-promise-methods-js-test.yml +10 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/no-single-promise-in-promise-methods-test.yml +10 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/no-singledispatch-on-method-test.yml +25 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/no-sort-without-comparator-test.yml +8 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/no-sql-in-code-js-test.yml +14 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/no-sql-in-code-test.yml +14 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/no-star-imports-test.yml +9 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/no-string-concat-in-loop-test.yml +100 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/no-string-ref-test.yml +8 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/no-system-out-println-test.yml +7 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/no-template-string-concat-test.yml +14 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/no-testclient-text-without-content-test.yml +10 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/no-throw-string-js-test.yml +10 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/no-throw-string-test.yml +10 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/no-typeof-undefined-js-test.yml +19 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/no-typeof-undefined-test.yml +19 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/no-unimplemented-stub-js-test.yml +10 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/no-unimplemented-stub-test.yml +10 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/no-unknown-laundering-test.yml +11 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/no-unknown-parameters-test.yml +12 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/no-unknown-returns-test.yml +16 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/no-unnecessary-array-flat-depth-js-test.yml +8 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/no-unnecessary-array-flat-depth-test.yml +8 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/no-unnecessary-state-initializer-test.yml +7 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/no-unsafe-dictionary-any-test.yml +10 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/no-unsafe-dictionary-unknown-test.yml +8 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/no-useless-length-check-js-test.yml +9 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/no-useless-length-check-test.yml +9 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/no-useless-promise-resolve-reject-js-test.yml +8 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/no-useless-promise-resolve-reject-test.yml +8 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/no-useless-rest-spread-js-test.yml +8 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/no-useless-rest-spread-test.yml +8 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/no-uvicorn-non-import-string-test.yml +10 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/no-win32-isabsolute-for-qualification-test.yml +16 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/no-xxe-vulnerable-xml-parser-test.yml +19 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/no-yield-from-non-iterable-test.yml +11 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/no-yield-return-outside-function-test.yml +19 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/only-strings-in-dunder-all-test.yml +18 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/prefer-array-find-js-test.yml +8 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/prefer-array-find-test.yml +8 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/prefer-array-flat-map-js-test.yml +8 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/prefer-array-flat-map-test.yml +8 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/prefer-array-some-js-test.yml +9 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/prefer-array-some-test.yml +9 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/prefer-at-js-test.yml +8 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/prefer-at-test.yml +8 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/prefer-date-now-js-test.yml +8 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/prefer-date-now-test.yml +8 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/prefer-dom-node-append-js-test.yml +8 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/prefer-dom-node-append-test.yml +8 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/prefer-dom-node-text-content-js-test.yml +9 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/prefer-dom-node-text-content-test.yml +9 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/prefer-keyboard-event-key-js-test.yml +11 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/prefer-keyboard-event-key-test.yml +11 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/prefer-math-min-max-js-test.yml +10 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/prefer-math-min-max-test.yml +10 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/prefer-number-properties-js-test.yml +9 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/prefer-number-properties-test.yml +9 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/prefer-optional-chain-test.yml +9 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/prefer-prototype-methods-js-test.yml +8 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/prefer-prototype-methods-test.yml +8 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/prefer-query-selector-js-test.yml +9 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/prefer-query-selector-test.yml +9 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/prefer-string-is-empty-test.yml +7 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/prefer-string-slice-js-test.yml +9 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/prefer-string-slice-test.yml +9 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/prefer-string-starts-ends-with-js-test.yml +9 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/prefer-string-starts-ends-with-test.yml +9 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/prefer-string-trim-start-end-js-test.yml +9 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/prefer-string-trim-start-end-test.yml +9 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/prefer-structured-clone-js-test.yml +8 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/prefer-structured-clone-test.yml +8 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/python-optional-type-test.yml +9 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/redos-nested-quantifier-test.yml +14 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/reducible-list-comprehension-test.yml +11 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/redundant-state-test.yml +8 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/redundant-unsafe-function-test.yml +60 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/redundant-usestate-type-test.yml +10 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/require-await-test.yml +9 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/require-safety-comment-for-as-unknown-as-test.yml +177 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/ruby-detect-path-traversal-test.yml +9 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/ruby-symbol-to-proc-candidate-test.yml +10 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/rust-2024-let-chain-candidate-test.yml +27 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/rust-no-chars-enumerate-test.yml +7 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/strict-equality-js-test.yml +12 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/strict-equality-test.yml +12 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/strict-inequality-js-test.yml +12 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/strict-inequality-test.yml +13 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/string-concat-in-loop-test.yml +20 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/switch-without-default-test.yml +16 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/throw-new-error-js-test.yml +10 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/throw-new-error-test.yml +10 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/ts-array-concat-spread-test.yml +9 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/ts-array-every-some-test.yml +8 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/ts-boolean-return-if-else-test.yml +13 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/ts-defensive-null-guard-test.yml +14 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/ts-delete-property-test.yml +8 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/ts-double-negation-test.yml +9 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/ts-function-constructor-test.yml +8 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/ts-in-operator-loop-test.yml +13 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/ts-isnan-check-test.yml +9 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/ts-json-stringify-parse-test.yml +8 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/ts-manual-array-contains-test.yml +13 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/ts-nullish-coalescing-opportunity-test.yml +8 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/ts-object-hasown-check-test.yml +8 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/ts-optional-chaining-default-test.yml +8 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/ts-parseint-no-radix-test.yml +9 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/ts-pointless-bool-cast-test.yml +13 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/ts-redundant-filter-map-test.yml +8 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/ts-slice-copy-test.yml +8 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/ts-string-split-index-test.yml +9 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/ts-unnecessary-array-concat-test.yml +8 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/ts-unnecessary-array-from-test.yml +8 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/ts-unnecessary-bind-test.yml +9 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/ts-unnecessary-else-return-test.yml +13 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/ts-void-zero-test.yml +10 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/ts-while-index-length-test.yml +8 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/unchecked-throwing-call-js-test.yml +13 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/unchecked-throwing-call-python-test.yml +23 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/unchecked-throwing-call-test.yml +13 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/unlock-in-loop-test.yml +19 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/unmarshal-tag-is-dash-test.yml +23 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/unnecessary-react-hook-test.yml +8 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/waitgroup-done-scope-test.yml +20 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/weak-rsa-key-js-test.yml +9 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rule-tests/weak-rsa-key-test.yml +9 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rule-tests-disabled/no-method-field-name-collision-test.yml +23 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rules/array-callback-return-js.yml +40 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rules/array-callback-return.yml +40 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rules/avoid-duplicate-export.yml +19 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rules/c-no-malloc-free.yml +39 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rules/consistent-existence-index-check-js.yml +15 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rules/consistent-existence-index-check.yml +15 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rules/cpp-no-malloc-free.yml +45 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rules/cpp-no-printf.yml +41 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rules/defer-in-loop.yml +10 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rules/enforce-node-protocol-js.yml +11 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rules/enforce-node-protocol.yml +11 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rules/find-import-file-without-extension.yml +24 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rules/go-defer-func-call-antipattern.yml +34 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rules/go-no-fmt-println.yml +43 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rules/go-no-panic-in-lib.yml +41 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rules/go-no-underscore-func-name.yml +35 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rules/go-prefer-errors-is.yml +40 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rules/go-prefer-string-builder.yml +43 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rules/go-test-functions.yml +32 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rules/gorm-find-without-where.yml +26 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rules/gorm-n-plus-one.yml +16 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rules/hardcoded-url-js.yml +35 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rules/hardcoded-url.yml +35 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rules/hyphenated-svg-attribute.yml +32 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rules/incomplete-string-escaping-js.yml +19 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rules/incomplete-string-escaping.yml +19 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rules/jsx-boolean-short-circuit.yml +40 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rules/jwt-no-verify-js.yml +27 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rules/jwt-no-verify.yml +27 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rules/kotlin-no-lateinit.yml +37 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rules/kotlin-no-nullable-boolean.yml +33 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rules/kotlin-no-println.yml +42 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rules/kotlin-no-unnecessary-let.yml +28 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rules/kotlin-no-unsafe-cast.yml +28 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rules/kotlin-no-var.yml +35 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rules/kotlin-prefer-data-class.yml +66 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rules/kotlin-prefer-is-empty.yml +35 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rules/large-class.yml +14 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rules/long-parameter-list.yml +17 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rules/loop-var-capture.yml +42 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rules/missing-component-decorator.yml +21 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rules/mutex-unlock-mismatch.yml +14 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rules/nested-ternary-js.yml +12 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rules/nested-ternary.yml +12 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rules/nil-map-assignment.yml +43 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rules/no-absolute-path-import-js.yml +11 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rules/no-absolute-path-import.yml +11 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rules/no-accumulating-spread-js.yml +11 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rules/no-alert-js.yml +6 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rules/no-alert.yml +6 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rules/no-any-type.yml +20 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rules/no-array-constructor-js.yml +10 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rules/no-array-constructor.yml +10 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rules/no-array-reverse-mutation-js.yml +8 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rules/no-array-reverse-mutation.yml +8 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rules/no-as-any.yml +8 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rules/no-assert-tuple.yml +24 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rules/no-async-promise-executor-js.yml +15 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rules/no-async-promise-executor.yml +15 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rules/no-await-expression-member-js.yml +22 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rules/no-await-expression-member.yml +22 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rules/no-await-in-promise-all-js.yml +20 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rules/no-await-in-promise-all.yml +20 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rules/no-await-in-promise-methods-js.yml +12 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rules/no-await-in-promise-methods.yml +12 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rules/no-aws-access-key-literal.yml +30 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rules/no-aws-apigateway-no-auth.yml +29 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rules/no-aws-s3-public-access.yml +28 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rules/no-bare-except.yml +19 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rules/no-bare-host-path-in-win32-branch.yml +27 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rules/no-bare-object-param.yml +60 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rules/no-blank-target-js.yml +25 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rules/no-boolean-in-except.yml +23 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rules/no-case-declarations-js.yml +22 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rules/no-case-declarations.yml +22 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rules/no-chained-type-assertions.yml +66 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rules/no-compare-neg-zero-js.yml +13 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rules/no-compare-neg-zero.yml +13 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rules/no-comparison-to-none.yml +17 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rules/no-comparison-to-true-false.yml +25 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rules/no-compile-call.yml +87 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rules/no-cond-assign-js.yml +36 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rules/no-cond-assign.yml +36 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rules/no-conditional-empty-object-spread-js.yml +21 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rules/no-conditional-empty-object-spread.yml +29 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rules/no-console-except-error-js.yml +30 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rules/no-console-except-error.yml +30 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rules/no-constant-condition-js.yml +18 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rules/no-constant-condition.yml +18 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rules/no-db-string-literal-password.yml +44 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rules/no-demeter-message-chain.yml +25 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rules/no-discarded-error-js.yml +23 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rules/no-discarded-error.yml +23 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rules/no-dunder-exit-wrong-arity.yml +25 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rules/no-dupe-class-members.yml +120 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rules/no-dupe-keys-js.yml +73 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rules/no-dupe-keys.yml +73 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rules/no-duplicate-kwarg.yml +26 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rules/no-ellipsis-body.yml +26 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rules/no-except-non-exception.yml +47 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rules/no-extra-boolean-cast-js.yml +30 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rules/no-extra-boolean-cast.yml +30 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rules/no-fastapi-router-prefix-outside-init.yml +29 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rules/no-flag-argument-js.yml +37 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rules/no-flag-argument.yml +36 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rules/no-flask-preprocess-request-ignored.yml +26 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rules/no-flask-secret-key-literal.yml +36 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rules/no-flask-sendfile-without-mimetype.yml +42 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rules/no-global-eval-js.yml +19 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rules/no-hardcoded-password.yml +42 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rules/no-html-autoescape-off.yml +25 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rules/no-http-headers-bracket-access.yml +22 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rules/no-identity-operator-on-literals.yml +69 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rules/no-implied-eval-js.yml +16 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rules/no-implied-eval.yml +16 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rules/no-important.yml +21 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rules/no-init-return.yml +33 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rules/no-inline-styles.yml +25 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rules/no-inner-html-js.yml +38 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rules/no-inner-html.yml +38 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rules/no-insecure-randomness-js.yml +20 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rules/no-insecure-randomness.yml +20 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rules/no-instanceof-array-js.yml +9 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rules/no-instanceof-array.yml +9 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rules/no-instanceof-builtins-js.yml +14 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rules/no-instanceof-builtins.yml +14 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rules/no-javascript-url-js.yml +63 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rules/no-javascript-url.yml +63 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rules/no-jinja2-autoescape-off.yml +24 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rules/no-known-value-widening.yml +71 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rules/no-marshal-load.yml +24 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rules/no-mutable-contextvar-default.yml +38 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rules/no-mutable-default.yml +17 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rules/no-mutable-export.yml +13 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rules/no-nan-comparison-js.yml +22 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rules/no-nan-comparison.yml +22 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rules/no-negation-in-equality-check-js.yml +12 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rules/no-negation-in-equality-check.yml +12 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rules/no-nested-links.yml +35 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rules/no-new-symbol-js.yml +8 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rules/no-new-symbol.yml +8 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rules/no-new-wrappers-js.yml +13 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rules/no-new-wrappers.yml +13 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rules/no-non-null-assertion.yml +330 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rules/no-notimplemented-in-bool.yml +21 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rules/no-numpy-nan-equality.yml +31 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rules/no-octal-literal.yml +14 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rules/no-only-defined-names-in-dunder-all.yml +36 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rules/no-open-redirect-js.yml +15 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rules/no-open-redirect.yml +15 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rules/no-prototype-builtins-js.yml +15 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rules/no-prototype-builtins-native.yml +17 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rules/no-prototype-builtins.yml +15 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rules/no-python-sql-string-concat.yml +37 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rules/no-raise-not-implemented.yml +16 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rules/no-raise-stopiteration-in-generator.yml +28 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rules/no-raw-json-store-write.yml +37 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rules/no-raw-types.yml +33 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rules/no-reflect-apply-js.yml +29 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rules/no-reflect-apply.yml +30 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rules/no-reflect-get-js.yml +41 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rules/no-reflect-get.yml +42 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rules/no-relative-imports.yml +20 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rules/no-requests-verify-false.yml +27 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rules/no-requests-without-timeout.yml +113 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rules/no-return-await.yml +15 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rules/no-return-value-in-generator.yml +48 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rules/no-runtime-typeof.yml +121 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rules/no-secret-in-env-var-name.yml +37 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rules/no-server-bind-wildcard.yml +44 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rules/no-shape-in-symbol-names.yml +68 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rules/no-single-promise-in-promise-methods-js.yml +12 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rules/no-single-promise-in-promise-methods.yml +12 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rules/no-singledispatch-on-method.yml +27 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rules/no-sort-without-comparator.yml +14 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rules/no-sql-in-code-js.yml +63 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rules/no-sql-in-code.yml +63 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rules/no-star-imports.yml +11 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rules/no-string-concat-in-loop.yml +90 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rules/no-string-ref.yml +22 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rules/no-system-out-println.yml +16 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rules/no-template-string-concat.yml +21 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rules/no-testclient-text-without-content.yml +39 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rules/no-throw-string-js.yml +12 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rules/no-throw-string.yml +12 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rules/no-typeof-undefined-js.yml +21 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rules/no-typeof-undefined.yml +21 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rules/no-unimplemented-stub-js.yml +11 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rules/no-unimplemented-stub.yml +11 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rules/no-unknown-laundering.yml +32 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rules/no-unknown-parameters.yml +67 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rules/no-unknown-returns.yml +106 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rules/no-unnecessary-array-flat-depth-js.yml +8 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rules/no-unnecessary-array-flat-depth.yml +8 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rules/no-unnecessary-state-initializer.yml +17 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rules/no-unsafe-dictionary-any.yml +50 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rules/no-unsafe-dictionary-unknown.yml +56 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rules/no-useless-length-check-js.yml +11 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rules/no-useless-length-check.yml +11 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rules/no-useless-promise-resolve-reject-js.yml +10 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rules/no-useless-promise-resolve-reject.yml +10 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rules/no-useless-rest-spread-js.yml +10 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rules/no-useless-rest-spread.yml +10 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rules/no-uvicorn-non-import-string.yml +46 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rules/no-win32-isabsolute-for-qualification.yml +25 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rules/no-xxe-vulnerable-xml-parser.yml +32 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rules/no-yield-from-non-iterable.yml +33 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rules/no-yield-return-outside-function.yml +31 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rules/only-strings-in-dunder-all.yml +32 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rules/prefer-array-find-js.yml +10 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rules/prefer-array-find.yml +10 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rules/prefer-array-flat-map-js.yml +8 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rules/prefer-array-flat-map.yml +8 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rules/prefer-array-some-js.yml +11 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rules/prefer-array-some.yml +11 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rules/prefer-at-js.yml +10 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rules/prefer-at.yml +10 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rules/prefer-date-now-js.yml +10 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rules/prefer-date-now.yml +10 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rules/prefer-dom-node-append-js.yml +8 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rules/prefer-dom-node-append.yml +8 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rules/prefer-dom-node-text-content-js.yml +8 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rules/prefer-dom-node-text-content.yml +8 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rules/prefer-keyboard-event-key-js.yml +10 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rules/prefer-keyboard-event-key.yml +10 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rules/prefer-math-min-max-js.yml +12 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rules/prefer-math-min-max.yml +12 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rules/prefer-number-properties-js.yml +10 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rules/prefer-number-properties.yml +10 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rules/prefer-optional-chain.yml +14 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rules/prefer-prototype-methods-js.yml +8 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rules/prefer-prototype-methods.yml +8 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rules/prefer-query-selector-js.yml +11 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rules/prefer-query-selector.yml +11 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rules/prefer-string-is-empty.yml +11 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rules/prefer-string-slice-js.yml +10 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rules/prefer-string-slice.yml +10 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rules/prefer-string-starts-ends-with-js.yml +10 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rules/prefer-string-starts-ends-with.yml +10 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rules/prefer-string-trim-start-end-js.yml +10 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rules/prefer-string-trim-start-end.yml +10 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rules/prefer-structured-clone-js.yml +9 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rules/prefer-structured-clone.yml +9 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rules/python-optional-type.yml +22 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rules/redos-nested-quantifier.yml +23 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rules/reducible-list-comprehension.yml +29 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rules/redundant-state.yml +16 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rules/redundant-unsafe-function.yml +53 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rules/redundant-usestate-type.yml +15 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rules/require-await.yml +14 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rules/require-safety-comment-for-as-unknown-as.yml +184 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rules/ruby-detect-path-traversal.yml +33 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rules/ruby-symbol-to-proc-candidate.yml +25 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rules/rust-2024-let-chain-candidate.yml +56 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rules/rust-no-chars-enumerate.yml +19 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rules/strict-equality-js.yml +23 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rules/strict-equality.yml +23 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rules/strict-inequality-js.yml +23 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rules/strict-inequality.yml +23 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rules/string-concat-in-loop.yml +31 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rules/switch-without-default.yml +19 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rules/throw-new-error-js.yml +14 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rules/throw-new-error.yml +14 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rules/ts-array-concat-spread.yml +10 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rules/ts-array-every-some.yml +22 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rules/ts-boolean-return-if-else.yml +12 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rules/ts-defensive-null-guard.yml +12 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rules/ts-delete-property.yml +10 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rules/ts-double-negation.yml +10 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rules/ts-function-constructor.yml +12 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rules/ts-in-operator-loop.yml +22 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rules/ts-isnan-check.yml +10 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rules/ts-json-stringify-parse.yml +17 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rules/ts-manual-array-contains.yml +25 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rules/ts-nullish-coalescing-opportunity.yml +20 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rules/ts-object-hasown-check.yml +9 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rules/ts-optional-chaining-default.yml +21 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rules/ts-parseint-no-radix.yml +18 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rules/ts-pointless-bool-cast.yml +10 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rules/ts-redundant-filter-map.yml +10 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rules/ts-slice-copy.yml +11 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rules/ts-string-split-index.yml +12 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rules/ts-unnecessary-array-concat.yml +9 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rules/ts-unnecessary-array-from.yml +9 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rules/ts-unnecessary-bind.yml +10 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rules/ts-unnecessary-else-return.yml +19 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rules/ts-void-zero.yml +15 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rules/ts-while-index-length.yml +10 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rules/unchecked-throwing-call-js.yml +29 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rules/unchecked-throwing-call-python.yml +48 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rules/unchecked-throwing-call.yml +29 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rules/unlock-in-loop.yml +22 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rules/unmarshal-tag-is-dash.yml +20 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rules/unnecessary-react-hook.yml +27 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rules/waitgroup-done-scope.yml +11 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rules/weak-rsa-key-js.yml +28 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rules/weak-rsa-key.yml +28 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rules-disabled/constructor-super-js.yml +24 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rules-disabled/constructor-super.yml +25 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rules-disabled/gorm-unbounded-preload.yml +41 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rules-disabled/no-architecture-violation.yml +21 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rules-disabled/no-hardcoded-secrets-js.yml +20 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rules-disabled/no-hardcoded-secrets.yml +21 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rules-disabled/no-method-field-name-collision.yml +42 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rules-disabled/no-param-reassign.yml +16 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rules-disabled/no-process-env.yml +21 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rules-disabled/no-shadow.yml +20 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rules-disabled/no-this-in-static-js.yml +14 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rules-disabled/no-this-in-static.yml +14 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rules-disabled/prefer-string-raw-js.yml +9 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rules-disabled/prefer-string-raw.yml +9 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rules-disabled/shadow-err-variable.yml +38 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rules-disabled/unchecked-sync-fs-js.yml +47 -0
- package/extensions/dm-lens/rules/ast-grep-rules/rules-disabled/unchecked-sync-fs.yml +52 -0
- package/extensions/dm-lens/rules/ast-grep-rules/self-scan-baseline.json +5 -0
- package/extensions/dm-lens/rules/rule-catalog.json +1725 -0
- package/extensions/dm-lens/rules/tree-sitter-queries/c/goto-into-block.yml +72 -0
- package/extensions/dm-lens/rules/tree-sitter-queries/c/goto-label-order.yml +65 -0
- package/extensions/dm-lens/rules/tree-sitter-queries/c/hardcoded-secrets.yml +55 -0
- package/extensions/dm-lens/rules/tree-sitter-queries/c/memset-sensitive-data.yml +50 -0
- package/extensions/dm-lens/rules/tree-sitter-queries/c/no-bit-fields.yml +48 -0
- package/extensions/dm-lens/rules/tree-sitter-queries/c/no-octal-literals.yml +46 -0
- package/extensions/dm-lens/rules/tree-sitter-queries/c/no-pointer-arithmetic-array-access.yml +50 -0
- package/extensions/dm-lens/rules/tree-sitter-queries/c/no-redundant-pointer-ops.yml +57 -0
- package/extensions/dm-lens/rules/tree-sitter-queries/c/no-reserved-identifiers.yml +49 -0
- package/extensions/dm-lens/rules/tree-sitter-queries/c/no-stdlib-name-as-id.yml +53 -0
- package/extensions/dm-lens/rules/tree-sitter-queries/c/non-case-label-in-switch.yml +56 -0
- package/extensions/dm-lens/rules/tree-sitter-queries/c/noreturn-returns.yml +60 -0
- package/extensions/dm-lens/rules/tree-sitter-queries/c-disabled/case-range-multiple-values.yml +65 -0
- package/extensions/dm-lens/rules/tree-sitter-queries/cobol-disabled/alter-statement.yml +39 -0
- package/extensions/dm-lens/rules/tree-sitter-queries/cobol-disabled/lock-table-cobol.yml +35 -0
- package/extensions/dm-lens/rules/tree-sitter-queries/cpp/no-auto-ptr.yml +49 -0
- package/extensions/dm-lens/rules/tree-sitter-queries/cpp/no-memset-sensitive-data.yml +63 -0
- package/extensions/dm-lens/rules/tree-sitter-queries/cpp/no-scoped-lock-without-args.yml +52 -0
- package/extensions/dm-lens/rules/tree-sitter-queries/cpp/unnecessary-bit-ops.yml +58 -0
- package/extensions/dm-lens/rules/tree-sitter-queries/csharp/async-await-identifiers.yml +50 -0
- package/extensions/dm-lens/rules/tree-sitter-queries/csharp/is-with-this.yml +52 -0
- package/extensions/dm-lens/rules/tree-sitter-queries/csharp/no-dangerous-get-handle.yml +59 -0
- package/extensions/dm-lens/rules/tree-sitter-queries/csharp/no-operator-eq-reference.yml +60 -0
- package/extensions/dm-lens/rules/tree-sitter-queries/csharp/no-thread-resume-suspend.yml +60 -0
- package/extensions/dm-lens/rules/tree-sitter-queries/css/calc-spacing.yml +52 -0
- package/extensions/dm-lens/rules/tree-sitter-queries/go/go-bare-error.yml +61 -0
- package/extensions/dm-lens/rules/tree-sitter-queries/go/go-command-injection.yml +55 -0
- package/extensions/dm-lens/rules/tree-sitter-queries/go/go-context-background-handler.yml +57 -0
- package/extensions/dm-lens/rules/tree-sitter-queries/go/go-defer-in-loop.yml +49 -0
- package/extensions/dm-lens/rules/tree-sitter-queries/go/go-direct-panic.yml +45 -0
- package/extensions/dm-lens/rules/tree-sitter-queries/go/go-empty-if-err.yml +47 -0
- package/extensions/dm-lens/rules/tree-sitter-queries/go/go-goroutine-loop-capture.yml +49 -0
- package/extensions/dm-lens/rules/tree-sitter-queries/go/go-hardcoded-secrets.yml +56 -0
- package/extensions/dm-lens/rules/tree-sitter-queries/go/go-ignored-call-result.yml +52 -0
- package/extensions/dm-lens/rules/tree-sitter-queries/go/go-insecure-random.yml +51 -0
- package/extensions/dm-lens/rules/tree-sitter-queries/go/go-log-fatal.yml +49 -0
- package/extensions/dm-lens/rules/tree-sitter-queries/go/go-mutex-copy.yml +60 -0
- package/extensions/dm-lens/rules/tree-sitter-queries/go/go-path-traversal.yml +51 -0
- package/extensions/dm-lens/rules/tree-sitter-queries/go/go-shared-map-write-goroutine.yml +54 -0
- package/extensions/dm-lens/rules/tree-sitter-queries/go/go-sql-injection.yml +55 -0
- package/extensions/dm-lens/rules/tree-sitter-queries/go/go-time-sleep-test.yml +50 -0
- package/extensions/dm-lens/rules/tree-sitter-queries/go/go-weak-hash.yml +51 -0
- package/extensions/dm-lens/rules/tree-sitter-queries/java/infinite-loop-java.yml +58 -0
- package/extensions/dm-lens/rules/tree-sitter-queries/java/infinite-recursion.yml +58 -0
- package/extensions/dm-lens/rules/tree-sitter-queries/java/junit-call-super.yml +65 -0
- package/extensions/dm-lens/rules/tree-sitter-queries/java/main-should-not-throw.yml +63 -0
- package/extensions/dm-lens/rules/tree-sitter-queries/java/name-capitalization-conflict.yml +54 -0
- package/extensions/dm-lens/rules/tree-sitter-queries/java/no-clone-override.yml +60 -0
- package/extensions/dm-lens/rules/tree-sitter-queries/java/no-double-checked-locking.yml +76 -0
- package/extensions/dm-lens/rules/tree-sitter-queries/java/no-exit-methods.yml +50 -0
- package/extensions/dm-lens/rules/tree-sitter-queries/java/no-field-shadowing.yml +66 -0
- package/extensions/dm-lens/rules/tree-sitter-queries/java/no-future-keywords.yml +49 -0
- package/extensions/dm-lens/rules/tree-sitter-queries/java/no-octal-values.yml +48 -0
- package/extensions/dm-lens/rules/tree-sitter-queries/java/no-threadgroup.yml +52 -0
- package/extensions/dm-lens/rules/tree-sitter-queries/java/no-threads-in-constructors.yml +73 -0
- package/extensions/dm-lens/rules/tree-sitter-queries/java/prepared-statement-valid-indices.yml +54 -0
- package/extensions/dm-lens/rules/tree-sitter-queries/java/resources-closed.yml +57 -0
- package/extensions/dm-lens/rules/tree-sitter-queries/java/springboot-default-package.yml +72 -0
- package/extensions/dm-lens/rules/tree-sitter-queries/java/switch-fall-through.yml +72 -0
- package/extensions/dm-lens/rules/tree-sitter-queries/java/switch-non-case-labels.yml +63 -0
- package/extensions/dm-lens/rules/tree-sitter-queries/java/tests-include-assertions.yml +61 -0
- package/extensions/dm-lens/rules/tree-sitter-queries/java/unnecessary-bit-ops-java.yml +57 -0
- package/extensions/dm-lens/rules/tree-sitter-queries/javascript/switch-case-termination-js.yml +61 -0
- package/extensions/dm-lens/rules/tree-sitter-queries/javascript/switch-non-case-labels.yml +53 -0
- package/extensions/dm-lens/rules/tree-sitter-queries/kotlin/prepared-statement-indices.yml +53 -0
- package/extensions/dm-lens/rules/tree-sitter-queries/php/no-exit-die.yml +52 -0
- package/extensions/dm-lens/rules/tree-sitter-queries/php/this-in-static-context.yml +75 -0
- package/extensions/dm-lens/rules/tree-sitter-queries/plsql-disabled/lock-table.yml +42 -0
- package/extensions/dm-lens/rules/tree-sitter-queries/plsql-disabled/no-synchronize.yml +47 -0
- package/extensions/dm-lens/rules/tree-sitter-queries/python/aws-public-access-policy.yml +68 -0
- package/extensions/dm-lens/rules/tree-sitter-queries/python/bare-except.yml +56 -0
- package/extensions/dm-lens/rules/tree-sitter-queries/python/endpoint-204-with-body.yml +62 -0
- package/extensions/dm-lens/rules/tree-sitter-queries/python/eval-exec.yml +52 -0
- package/extensions/dm-lens/rules/tree-sitter-queries/python/exit-signature-check.yml +59 -0
- package/extensions/dm-lens/rules/tree-sitter-queries/python/in-operator-unsupported.yml +56 -0
- package/extensions/dm-lens/rules/tree-sitter-queries/python/is-vs-equals.yml +62 -0
- package/extensions/dm-lens/rules/tree-sitter-queries/python/iter-return-iterator.yml +59 -0
- package/extensions/dm-lens/rules/tree-sitter-queries/python/mutable-default-arg.yml +59 -0
- package/extensions/dm-lens/rules/tree-sitter-queries/python/no-super-torchscript.yml +48 -0
- package/extensions/dm-lens/rules/tree-sitter-queries/python/notimplemented-boolean-context.yml +63 -0
- package/extensions/dm-lens/rules/tree-sitter-queries/python/open-invalid-mode.yml +58 -0
- package/extensions/dm-lens/rules/tree-sitter-queries/python/python-assert-production.yml +53 -0
- package/extensions/dm-lens/rules/tree-sitter-queries/python/python-command-injection.yml +63 -0
- package/extensions/dm-lens/rules/tree-sitter-queries/python/python-cross-language-method.yml +61 -0
- package/extensions/dm-lens/rules/tree-sitter-queries/python/python-debugger.yml +48 -0
- package/extensions/dm-lens/rules/tree-sitter-queries/python/python-empty-except.yml +50 -0
- package/extensions/dm-lens/rules/tree-sitter-queries/python/python-hallucinated-import.yml +58 -0
- package/extensions/dm-lens/rules/tree-sitter-queries/python/python-hardcoded-secrets.yml +46 -0
- package/extensions/dm-lens/rules/tree-sitter-queries/python/python-insecure-deserialization.yml +48 -0
- package/extensions/dm-lens/rules/tree-sitter-queries/python/python-insecure-random.yml +51 -0
- package/extensions/dm-lens/rules/tree-sitter-queries/python/python-mutable-class-attr.yml +59 -0
- package/extensions/dm-lens/rules/tree-sitter-queries/python/python-path-traversal.yml +55 -0
- package/extensions/dm-lens/rules/tree-sitter-queries/python/python-raise-string.yml +40 -0
- package/extensions/dm-lens/rules/tree-sitter-queries/python/python-sleep-in-test.yml +50 -0
- package/extensions/dm-lens/rules/tree-sitter-queries/python/python-special-method-arity.yml +67 -0
- package/extensions/dm-lens/rules/tree-sitter-queries/python/python-sql-injection.yml +57 -0
- package/extensions/dm-lens/rules/tree-sitter-queries/python/python-ssrf.yml +50 -0
- package/extensions/dm-lens/rules/tree-sitter-queries/python/python-subprocess-shell.yml +60 -0
- package/extensions/dm-lens/rules/tree-sitter-queries/python/python-thread-global-write.yml +64 -0
- package/extensions/dm-lens/rules/tree-sitter-queries/python/python-unsafe-regex.yml +61 -0
- package/extensions/dm-lens/rules/tree-sitter-queries/python/python-weak-hash.yml +51 -0
- package/extensions/dm-lens/rules/tree-sitter-queries/python/return-in-generator.yml +58 -0
- package/extensions/dm-lens/rules/tree-sitter-queries/python/return-in-init.yml +57 -0
- package/extensions/dm-lens/rules/tree-sitter-queries/python/send-file-mimetype.yml +53 -0
- package/extensions/dm-lens/rules/tree-sitter-queries/python/slots-assignment-mismatch.yml +73 -0
- package/extensions/dm-lens/rules/tree-sitter-queries/python/string-format-arity-mismatch.yml +52 -0
- package/extensions/dm-lens/rules/tree-sitter-queries/python/unreachable-except.yml +62 -0
- package/extensions/dm-lens/rules/tree-sitter-queries/python/wildcard-import.yml +48 -0
- package/extensions/dm-lens/rules/tree-sitter-queries/python/yield-return-outside-function.yml +54 -0
- package/extensions/dm-lens/rules/tree-sitter-queries/python-disabled/python-print-statement.yml +69 -0
- package/extensions/dm-lens/rules/tree-sitter-queries/ruby/ruby-command-injection.yml +45 -0
- package/extensions/dm-lens/rules/tree-sitter-queries/ruby/ruby-debugger.yml +46 -0
- package/extensions/dm-lens/rules/tree-sitter-queries/ruby/ruby-dynamic-send.yml +54 -0
- package/extensions/dm-lens/rules/tree-sitter-queries/ruby/ruby-empty-rescue.yml +49 -0
- package/extensions/dm-lens/rules/tree-sitter-queries/ruby/ruby-eval.yml +45 -0
- package/extensions/dm-lens/rules/tree-sitter-queries/ruby/ruby-hardcoded-secrets.yml +42 -0
- package/extensions/dm-lens/rules/tree-sitter-queries/ruby/ruby-insecure-deserialization.yml +47 -0
- package/extensions/dm-lens/rules/tree-sitter-queries/ruby/ruby-insecure-random.yml +47 -0
- package/extensions/dm-lens/rules/tree-sitter-queries/ruby/ruby-open-struct.yml +50 -0
- package/extensions/dm-lens/rules/tree-sitter-queries/ruby/ruby-puts-statement.yml +54 -0
- package/extensions/dm-lens/rules/tree-sitter-queries/ruby/ruby-rescue-exception.yml +53 -0
- package/extensions/dm-lens/rules/tree-sitter-queries/ruby/ruby-sleep-in-test.yml +48 -0
- package/extensions/dm-lens/rules/tree-sitter-queries/ruby/ruby-string-eval.yml +56 -0
- package/extensions/dm-lens/rules/tree-sitter-queries/ruby/ruby-unsafe-regex.yml +51 -0
- package/extensions/dm-lens/rules/tree-sitter-queries/ruby/ruby-weak-hash.yml +50 -0
- package/extensions/dm-lens/rules/tree-sitter-queries/rule-schema.json +136 -0
- package/extensions/dm-lens/rules/tree-sitter-queries/rust/rust-clone-in-loop.yml +51 -0
- package/extensions/dm-lens/rules/tree-sitter-queries/rust/rust-expect.yml +47 -0
- package/extensions/dm-lens/rules/tree-sitter-queries/rust/rust-lock-held-across-await.yml +60 -0
- package/extensions/dm-lens/rules/tree-sitter-queries/rust/rust-todo-unimplemented.yml +47 -0
- package/extensions/dm-lens/rules/tree-sitter-queries/rust/rust-unsafe-block.yml +41 -0
- package/extensions/dm-lens/rules/tree-sitter-queries/rust/rust-unwrap.yml +47 -0
- package/extensions/dm-lens/rules/tree-sitter-queries/tsx/dangerously-set-inner-html.yml +65 -0
- package/extensions/dm-lens/rules/tree-sitter-queries/tsx/no-nested-links.yml +45 -0
- package/extensions/dm-lens/rules/tree-sitter-queries/typescript/console-statement.yml +59 -0
- package/extensions/dm-lens/rules/tree-sitter-queries/typescript/debugger.yml +49 -0
- package/extensions/dm-lens/rules/tree-sitter-queries/typescript/deep-nesting.yml +119 -0
- package/extensions/dm-lens/rules/tree-sitter-queries/typescript/deep-promise-chain.yml +75 -0
- package/extensions/dm-lens/rules/tree-sitter-queries/typescript/default-not-last.yml +54 -0
- package/extensions/dm-lens/rules/tree-sitter-queries/typescript/duplicate-function-arg.yml +46 -0
- package/extensions/dm-lens/rules/tree-sitter-queries/typescript/empty-switch-case.yml +58 -0
- package/extensions/dm-lens/rules/tree-sitter-queries/typescript/eval.yml +50 -0
- package/extensions/dm-lens/rules/tree-sitter-queries/typescript/incomplete-assertion.yml +50 -0
- package/extensions/dm-lens/rules/tree-sitter-queries/typescript/infinite-loop.yml +55 -0
- package/extensions/dm-lens/rules/tree-sitter-queries/typescript/injections.scm +40 -0
- package/extensions/dm-lens/rules/tree-sitter-queries/typescript/mixed-async-styles.yml +60 -0
- package/extensions/dm-lens/rules/tree-sitter-queries/typescript/no-console-in-tests.yml +54 -0
- package/extensions/dm-lens/rules/tree-sitter-queries/typescript/no-equality-in-for-condition.yml +41 -0
- package/extensions/dm-lens/rules/tree-sitter-queries/typescript/no-jump-in-finally.yml +48 -0
- package/extensions/dm-lens/rules/tree-sitter-queries/typescript/self-assignment.yml +46 -0
- package/extensions/dm-lens/rules/tree-sitter-queries/typescript/sql-injection.yml +57 -0
- package/extensions/dm-lens/rules/tree-sitter-queries/typescript/switch-case-termination.yml +61 -0
- package/extensions/dm-lens/rules/tree-sitter-queries/typescript/switch-non-case-labels.yml +53 -0
- package/extensions/dm-lens/rules/tree-sitter-queries/typescript/ts-command-injection.yml +62 -0
- package/extensions/dm-lens/rules/tree-sitter-queries/typescript/ts-detached-async-call.yml +56 -0
- package/extensions/dm-lens/rules/tree-sitter-queries/typescript/ts-dynamic-require.yml +55 -0
- package/extensions/dm-lens/rules/tree-sitter-queries/typescript/ts-hallucinated-react-import.yml +61 -0
- package/extensions/dm-lens/rules/tree-sitter-queries/typescript/ts-insecure-random.yml +55 -0
- package/extensions/dm-lens/rules/tree-sitter-queries/typescript/ts-nosql-injection.yml +54 -0
- package/extensions/dm-lens/rules/tree-sitter-queries/typescript/ts-open-redirect.yml +111 -0
- package/extensions/dm-lens/rules/tree-sitter-queries/typescript/ts-react-antipatterns.yml +55 -0
- package/extensions/dm-lens/rules/tree-sitter-queries/typescript/ts-ssrf.yml +54 -0
- package/extensions/dm-lens/rules/tree-sitter-queries/typescript/ts-weak-hash.yml +54 -0
- package/extensions/dm-lens/rules/tree-sitter-queries/typescript/ts-xss-dom-sink.yml +100 -0
- package/extensions/dm-lens/rules/tree-sitter-queries/typescript/unsafe-regex.yml +76 -0
- package/extensions/dm-lens/rules/tree-sitter-queries/typescript/variable-shadowing.yml +53 -0
- package/extensions/dm-lens/rules/tree-sitter-queries/typescript-disabled/await-in-loop.yml +58 -0
- package/extensions/dm-lens/rules/tree-sitter-queries/typescript-disabled/constructor-super.yml +57 -0
- package/extensions/dm-lens/rules/tree-sitter-queries/typescript-disabled/empty-catch.yml +66 -0
- package/extensions/dm-lens/rules/tree-sitter-queries/typescript-disabled/hardcoded-secrets.yml +66 -0
- package/extensions/dm-lens/rules/tree-sitter-queries/typescript-disabled/long-parameter-list.yml +64 -0
- package/extensions/dm-lens/rules/tree-sitter-queries/typescript-disabled/nested-ternary.yml +47 -0
- package/extensions/dm-lens/rules/typos/_typos.toml +17 -0
- package/extensions/dm-lens/scripts/lib/process-scan.mjs +256 -0
- package/extensions/dm-lens/skills/pi-lens-ast-grep/SKILL.md +177 -0
- package/extensions/dm-lens/skills/pi-lens-lsp-navigation/SKILL.md +77 -0
- package/extensions/dm-lens/skills/pi-lens-write-ast-grep-rule/SKILL.md +209 -0
- package/extensions/dm-lens/skills/pi-lens-write-ast-grep-rule/reference.md +170 -0
- package/extensions/dm-lens/skills/pi-lens-write-tree-sitter-rule/SKILL.md +129 -0
- package/extensions/dm-lens/tools/activate-tools.js +58 -0
- package/extensions/dm-lens/tools/ast-dump.js +101 -0
- package/extensions/dm-lens/tools/ast-grep-outline.js +131 -0
- package/extensions/dm-lens/tools/ast-grep-replace.js +255 -0
- package/extensions/dm-lens/tools/ast-grep-search.js +666 -0
- package/extensions/dm-lens/tools/effective-config.js +61 -0
- package/extensions/dm-lens/tools/lens-diagnostic-mark.js +243 -0
- package/extensions/dm-lens/tools/lens-diagnostics.js +1177 -0
- package/extensions/dm-lens/tools/lsp-diagnostics.js +1026 -0
- package/extensions/dm-lens/tools/lsp-navigation.js +1251 -0
- package/extensions/dm-lens/tools/lsp-structured-output.js +277 -0
- package/extensions/dm-lens/tools/module-report.js +337 -0
- package/extensions/dm-lens/tools/project-report.js +84 -0
- package/extensions/dm-lens/tools/render-compact.js +53 -0
- package/extensions/dm-lens/tools/scan-progress.js +31 -0
- package/extensions/dm-lens/tools/shared.js +26 -0
- package/extensions/dm-lens/tools/symbol-search.js +137 -0
- package/extensions/dm-lens/vendor/grammars/tree-sitter-cue.wasm +0 -0
- package/extensions/dm-mcp-adapter/agent-dir.js +10 -10
- package/extensions/dm-mcp-adapter/cli.js +10 -9
- package/extensions/dm-mcp-adapter/config.js +1 -1
- package/extensions/dm-mcp-adapter/dist/agent-dir.js +10 -10
- package/extensions/dm-mcp-adapter/dist/config.js +1 -1
- package/extensions/dm-mcp-adapter/dist/package-mcp-loader.js +5 -3
- package/extensions/dm-mcp-adapter/index.js +1 -0
- package/extensions/dm-mcp-adapter/init.js +16 -4
- package/extensions/dm-mcp-adapter/mcp-oauth-provider.js +2 -2
- package/extensions/dm-mcp-adapter/package-mcp-loader.js +5 -3
- package/extensions/dm-mcp-adapter/proxy-modes.js +12 -3
- package/extensions/dm-skills-manager/extensions/extensions-manager.js +332 -0
- package/extensions/dm-skills-manager/extensions/skills-manager.js +6 -6
- package/extensions/dm-skills-manager/package.json +3 -2
- package/package.json +7 -1
|
@@ -0,0 +1,2702 @@
|
|
|
1
|
+
import { AsyncLocalStorage } from "node:async_hooks";
|
|
2
|
+
import * as crypto from "node:crypto";
|
|
3
|
+
import * as fs from "node:fs";
|
|
4
|
+
import { createRequire } from "node:module";
|
|
5
|
+
import * as path from "node:path";
|
|
6
|
+
import {
|
|
7
|
+
getDegradationLedgerGeneration,
|
|
8
|
+
incrementDegradationCount,
|
|
9
|
+
recordDegradation,
|
|
10
|
+
recordDegradationOnce
|
|
11
|
+
} from "./degradation-ledger.js";
|
|
12
|
+
import { BoundedFifoMap } from "./bounded-cache.js";
|
|
13
|
+
import { loadWebTreeSitter } from "./deps/web-tree-sitter.js";
|
|
14
|
+
import { transientRetryDelayMs } from "./dispatch/runners/utils/availability-policy.js";
|
|
15
|
+
import { getProjectIgnoreMatcher, isExcludedDirName } from "./file-utils.js";
|
|
16
|
+
import {
|
|
17
|
+
downloadGrammarDetailed,
|
|
18
|
+
fileHasWasmMagic,
|
|
19
|
+
grammarBlockReason,
|
|
20
|
+
grammarFileSha256,
|
|
21
|
+
isVendoredGrammar,
|
|
22
|
+
LANGUAGE_TO_GRAMMAR,
|
|
23
|
+
pinnedGrammarHash,
|
|
24
|
+
vendoredGrammarRefusal,
|
|
25
|
+
vendoredGrammarsDir
|
|
26
|
+
} from "./grammar-source.js";
|
|
27
|
+
import { resolvePackagePath } from "./package-root.js";
|
|
28
|
+
import {
|
|
29
|
+
assertInstallAllowed,
|
|
30
|
+
getProjectTrustGeneration
|
|
31
|
+
} from "./project-trust.js";
|
|
32
|
+
import { logTreeSitterDiagnostic } from "./tree-sitter-logger.js";
|
|
33
|
+
import { notifyUserDegradation } from "./user-notify.js";
|
|
34
|
+
const _require = createRequire(import.meta.url);
|
|
35
|
+
import {
|
|
36
|
+
createTreeCacheCounters,
|
|
37
|
+
deriveScanTreeCacheCapacity,
|
|
38
|
+
TreeCache
|
|
39
|
+
} from "./tree-sitter-cache.js";
|
|
40
|
+
import { TreeSitterNavigator } from "./tree-sitter-navigator.js";
|
|
41
|
+
import {
|
|
42
|
+
TreeSitterQueryLoader
|
|
43
|
+
} from "./tree-sitter-query-loader.js";
|
|
44
|
+
const TREE_SITTER_MAX_SCAN_FILES = 20000;
|
|
45
|
+
const QUERY_BATCH_MAX_LOAD_FAILURES = 3;
|
|
46
|
+
const NO_NESTED_ANCHOR_VISIT_CAP = 1e4;
|
|
47
|
+
const NOT_PARSED = { parsed: false };
|
|
48
|
+
function createParserCounters() {
|
|
49
|
+
return {
|
|
50
|
+
parserInvocations: 0,
|
|
51
|
+
parserDurationMs: 0,
|
|
52
|
+
parserFailures: 0
|
|
53
|
+
};
|
|
54
|
+
}
|
|
55
|
+
function grammarFileStamp(filePath) {
|
|
56
|
+
try {
|
|
57
|
+
const stat = fs.statSync(filePath);
|
|
58
|
+
return stat.isFile() ? `${stat.size}:${stat.mtimeMs}` : undefined;
|
|
59
|
+
} catch {
|
|
60
|
+
return;
|
|
61
|
+
}
|
|
62
|
+
}
|
|
63
|
+
export function isTreeSitterWasmAbortError(error) {
|
|
64
|
+
const message = error instanceof Error ? error.message : String(error);
|
|
65
|
+
return message.includes("Aborted") || message.includes("abort()");
|
|
66
|
+
}
|
|
67
|
+
const RESOLUTION_ERROR_CODES = new Set([
|
|
68
|
+
"ERR_MODULE_NOT_FOUND",
|
|
69
|
+
"MODULE_NOT_FOUND",
|
|
70
|
+
"ERR_INVALID_MODULE_SPECIFIER",
|
|
71
|
+
"ERR_UNSUPPORTED_DIR_IMPORT",
|
|
72
|
+
"ENOENT",
|
|
73
|
+
"EMFILE",
|
|
74
|
+
"EBUSY",
|
|
75
|
+
"EAGAIN",
|
|
76
|
+
"EPERM",
|
|
77
|
+
"ETXTBSY"
|
|
78
|
+
]);
|
|
79
|
+
function collectErrorCodes(err) {
|
|
80
|
+
const codes = [];
|
|
81
|
+
let current = err;
|
|
82
|
+
const seen = new Set;
|
|
83
|
+
while (current instanceof Error && !seen.has(current)) {
|
|
84
|
+
seen.add(current);
|
|
85
|
+
const code = current.code;
|
|
86
|
+
if (typeof code === "string")
|
|
87
|
+
codes.push(code);
|
|
88
|
+
current = current.cause;
|
|
89
|
+
}
|
|
90
|
+
return codes;
|
|
91
|
+
}
|
|
92
|
+
function classifyWebTreeSitterLoadFailure(err) {
|
|
93
|
+
const codes = collectErrorCodes(err);
|
|
94
|
+
return codes.some((code) => RESOLUTION_ERROR_CODES.has(code)) ? "resolution" : "evaluation";
|
|
95
|
+
}
|
|
96
|
+
|
|
97
|
+
export class TreeSitterClient {
|
|
98
|
+
initialized = false;
|
|
99
|
+
initPromise = null;
|
|
100
|
+
webTreeSitterLoadFailed = false;
|
|
101
|
+
languages = new Map;
|
|
102
|
+
parsers = new Map;
|
|
103
|
+
treeCache;
|
|
104
|
+
navigator = new TreeSitterNavigator;
|
|
105
|
+
grammarsDir;
|
|
106
|
+
grammarEnsurePromises = new Map;
|
|
107
|
+
grammarRetryAtMs = new Map;
|
|
108
|
+
verifiedGrammarPaths = new Map;
|
|
109
|
+
decodeFailedGrammarPaths = new Map;
|
|
110
|
+
verifiedGrammarVersionAt = new Map;
|
|
111
|
+
staleGrammarVersionAt = new Map;
|
|
112
|
+
staleReportedGrammarPaths = new Set;
|
|
113
|
+
poisonedGrammarPaths = new Set;
|
|
114
|
+
grammarFailureAttempts = new Map;
|
|
115
|
+
grammarLastNotifiedDelayMs = new Map;
|
|
116
|
+
grammarNotificationsLedgerGen = getDegradationLedgerGeneration();
|
|
117
|
+
trustBlockedGrammarNotifications = new Set;
|
|
118
|
+
trustNotificationsGeneration = getProjectTrustGeneration();
|
|
119
|
+
ParserClass = null;
|
|
120
|
+
LanguageLoader = null;
|
|
121
|
+
static QUERY_CACHE_MAX_ENTRIES = 256;
|
|
122
|
+
static QUERY_BATCH_CACHE_MAX_ENTRIES = 256;
|
|
123
|
+
queryCache = new BoundedFifoMap(TreeSitterClient.QUERY_CACHE_MAX_ENTRIES);
|
|
124
|
+
queryBatchCache = new BoundedFifoMap(TreeSitterClient.QUERY_BATCH_CACHE_MAX_ENTRIES);
|
|
125
|
+
queryCacheCap() {
|
|
126
|
+
const value = Number.parseInt(process.env.DM_LENS_TREE_SITTER_QUERY_CACHE_CAP ?? "", 10);
|
|
127
|
+
return Number.isSafeInteger(value) && value > 0 ? value : TreeSitterClient.QUERY_CACHE_MAX_ENTRIES;
|
|
128
|
+
}
|
|
129
|
+
queryBatchCacheCap() {
|
|
130
|
+
const value = Number.parseInt(process.env.DM_LENS_TREE_SITTER_QUERY_BATCH_CACHE_CAP ?? "", 10);
|
|
131
|
+
return Number.isSafeInteger(value) && value > 0 ? value : TreeSitterClient.QUERY_BATCH_CACHE_MAX_ENTRIES;
|
|
132
|
+
}
|
|
133
|
+
cacheQuery(key, value) {
|
|
134
|
+
this.queryCache.delete(key);
|
|
135
|
+
const evicted = this.queryCache.setMaxEntries(this.queryCacheCap());
|
|
136
|
+
evicted.push(...this.queryCache.set(key, value));
|
|
137
|
+
for (const [, dropped] of evicted)
|
|
138
|
+
dropped?.query?.delete?.();
|
|
139
|
+
}
|
|
140
|
+
cacheQueryBatch(key, value) {
|
|
141
|
+
this.queryBatchCache.delete(key);
|
|
142
|
+
const evicted = this.queryBatchCache.setMaxEntries(this.queryBatchCacheCap());
|
|
143
|
+
evicted.push(...this.queryBatchCache.set(key, value));
|
|
144
|
+
for (const [, dropped] of evicted)
|
|
145
|
+
dropped?.query?.delete?.();
|
|
146
|
+
}
|
|
147
|
+
queryBatchLoadFailures = new Map;
|
|
148
|
+
queryLoader = new TreeSitterQueryLoader;
|
|
149
|
+
verbose;
|
|
150
|
+
parserCounters = createParserCounters();
|
|
151
|
+
parseCacheMeasurement = new AsyncLocalStorage;
|
|
152
|
+
activeMeasurements = 0;
|
|
153
|
+
onWasmAbort;
|
|
154
|
+
wasmAborted = false;
|
|
155
|
+
grammarDirResolutionDeps;
|
|
156
|
+
constructor(verbose = false, onWasmAbort, grammarDirResolutionDeps) {
|
|
157
|
+
this.grammarDirResolutionDeps = grammarDirResolutionDeps ?? {
|
|
158
|
+
resolveAsset: (asset) => this.resolveWebTreeSitterAsset(asset),
|
|
159
|
+
resolvePackage: (specifier) => _require.resolve(specifier),
|
|
160
|
+
cwd: () => process.cwd()
|
|
161
|
+
};
|
|
162
|
+
this.grammarsDir = this.findGrammarsDir();
|
|
163
|
+
this.verbose = verbose;
|
|
164
|
+
this.onWasmAbort = onWasmAbort;
|
|
165
|
+
this.treeCache = new TreeCache(50, verbose, 4096, (key, amount) => {
|
|
166
|
+
const measurement = this.parseCacheMeasurement.getStore();
|
|
167
|
+
if (measurement)
|
|
168
|
+
measurement[key] += amount;
|
|
169
|
+
}, (error) => this.reportWasmAbort(error));
|
|
170
|
+
}
|
|
171
|
+
recordParserCounter(key, amount = 1) {
|
|
172
|
+
this.parserCounters[key] += amount;
|
|
173
|
+
const measurement = this.parseCacheMeasurement.getStore();
|
|
174
|
+
if (measurement)
|
|
175
|
+
measurement[key] += amount;
|
|
176
|
+
}
|
|
177
|
+
reportWasmAbort(error) {
|
|
178
|
+
if (!isTreeSitterWasmAbortError(error))
|
|
179
|
+
return false;
|
|
180
|
+
if (!this.wasmAborted) {
|
|
181
|
+
this.wasmAborted = true;
|
|
182
|
+
recordDegradation({
|
|
183
|
+
kind: "wasm-abort",
|
|
184
|
+
subject: "web-tree-sitter",
|
|
185
|
+
reason: error instanceof Error ? error.message : String(error)
|
|
186
|
+
});
|
|
187
|
+
this.onWasmAbort?.();
|
|
188
|
+
}
|
|
189
|
+
return true;
|
|
190
|
+
}
|
|
191
|
+
getRuntimeStats() {
|
|
192
|
+
return {
|
|
193
|
+
languagesLoaded: this.languages.size,
|
|
194
|
+
parsersLoaded: this.parsers.size,
|
|
195
|
+
queryCacheSize: this.queryCache.size,
|
|
196
|
+
queryBatchCacheSize: this.queryBatchCache.size
|
|
197
|
+
};
|
|
198
|
+
}
|
|
199
|
+
getParseCacheStats() {
|
|
200
|
+
return {
|
|
201
|
+
...this.treeCache.getStats(),
|
|
202
|
+
...this.parserCounters
|
|
203
|
+
};
|
|
204
|
+
}
|
|
205
|
+
ensureTreeCacheCapacity(fileCount) {
|
|
206
|
+
this.treeCache.setMaxSize(deriveScanTreeCacheCapacity(fileCount, this.treeCache.getMaxSize()));
|
|
207
|
+
}
|
|
208
|
+
async withParseCacheMeasurement(work, onComplete) {
|
|
209
|
+
const measurement = {
|
|
210
|
+
...createTreeCacheCounters(),
|
|
211
|
+
...createParserCounters()
|
|
212
|
+
};
|
|
213
|
+
this.activeMeasurements++;
|
|
214
|
+
try {
|
|
215
|
+
return await this.parseCacheMeasurement.run(measurement, async () => {
|
|
216
|
+
try {
|
|
217
|
+
return await work();
|
|
218
|
+
} finally {
|
|
219
|
+
const cacheStats = this.treeCache.getStats();
|
|
220
|
+
try {
|
|
221
|
+
onComplete({
|
|
222
|
+
...cacheStats,
|
|
223
|
+
...measurement,
|
|
224
|
+
misses: measurement.lookups - measurement.hits
|
|
225
|
+
});
|
|
226
|
+
} catch {}
|
|
227
|
+
}
|
|
228
|
+
});
|
|
229
|
+
} finally {
|
|
230
|
+
if (--this.activeMeasurements === 0)
|
|
231
|
+
this.parseCacheMeasurement.disable();
|
|
232
|
+
}
|
|
233
|
+
}
|
|
234
|
+
dbg(msg) {
|
|
235
|
+
if (this.verbose) {
|
|
236
|
+
logTreeSitterDiagnostic({
|
|
237
|
+
subsystem: "tree-sitter-client",
|
|
238
|
+
level: "debug",
|
|
239
|
+
message: msg
|
|
240
|
+
});
|
|
241
|
+
}
|
|
242
|
+
}
|
|
243
|
+
resolveWebTreeSitterAsset(asset) {
|
|
244
|
+
try {
|
|
245
|
+
const resolved = _require.resolve(`web-tree-sitter/${asset}`);
|
|
246
|
+
if (fs.existsSync(resolved))
|
|
247
|
+
return resolved;
|
|
248
|
+
} catch {}
|
|
249
|
+
try {
|
|
250
|
+
const candidate = resolvePackagePath(import.meta.url, "node_modules", "web-tree-sitter", asset);
|
|
251
|
+
if (fs.existsSync(candidate))
|
|
252
|
+
return candidate;
|
|
253
|
+
} catch {}
|
|
254
|
+
const cwdCandidate = path.join(process.cwd(), "node_modules", "web-tree-sitter", asset);
|
|
255
|
+
if (fs.existsSync(cwdCandidate))
|
|
256
|
+
return cwdCandidate;
|
|
257
|
+
return;
|
|
258
|
+
}
|
|
259
|
+
_bundledGrammarsDir;
|
|
260
|
+
bundledGrammarsDir() {
|
|
261
|
+
if (this._bundledGrammarsDir)
|
|
262
|
+
return this._bundledGrammarsDir;
|
|
263
|
+
try {
|
|
264
|
+
const dir = resolvePackagePath(import.meta.url, "grammars");
|
|
265
|
+
if (fs.existsSync(dir))
|
|
266
|
+
this._bundledGrammarsDir = dir;
|
|
267
|
+
return this._bundledGrammarsDir;
|
|
268
|
+
} catch {
|
|
269
|
+
return;
|
|
270
|
+
}
|
|
271
|
+
}
|
|
272
|
+
_vendoredGrammarsDir;
|
|
273
|
+
vendoredGrammarsDir() {
|
|
274
|
+
if (this._vendoredGrammarsDir)
|
|
275
|
+
return this._vendoredGrammarsDir;
|
|
276
|
+
try {
|
|
277
|
+
const dir = vendoredGrammarsDir();
|
|
278
|
+
if (fs.existsSync(dir))
|
|
279
|
+
this._vendoredGrammarsDir = dir;
|
|
280
|
+
return this._vendoredGrammarsDir;
|
|
281
|
+
} catch {
|
|
282
|
+
return;
|
|
283
|
+
}
|
|
284
|
+
}
|
|
285
|
+
grammarSourceDirs() {
|
|
286
|
+
const dirs = [];
|
|
287
|
+
const push = (d) => {
|
|
288
|
+
if (d && !dirs.includes(d))
|
|
289
|
+
dirs.push(d);
|
|
290
|
+
};
|
|
291
|
+
push(this.vendoredGrammarsDir());
|
|
292
|
+
push(this.bundledGrammarsDir());
|
|
293
|
+
push(this.grammarsDir || undefined);
|
|
294
|
+
push(this.resolveWebTreeSitterAsset("grammars"));
|
|
295
|
+
return dirs;
|
|
296
|
+
}
|
|
297
|
+
resolveGrammarFile(grammarFile) {
|
|
298
|
+
for (const dir of this.grammarSourceDirs()) {
|
|
299
|
+
const candidate = path.join(dir, grammarFile);
|
|
300
|
+
const stamp = grammarFileStamp(candidate);
|
|
301
|
+
if (!stamp)
|
|
302
|
+
continue;
|
|
303
|
+
if (this.decodeFailedGrammarPaths.get(candidate) === stamp)
|
|
304
|
+
continue;
|
|
305
|
+
if (this.verifiedGrammarPaths.get(candidate) === stamp) {
|
|
306
|
+
if (this.isGrammarVersionCurrent(candidate, grammarFile, stamp)) {
|
|
307
|
+
return candidate;
|
|
308
|
+
}
|
|
309
|
+
continue;
|
|
310
|
+
}
|
|
311
|
+
if (fileHasWasmMagic(candidate)) {
|
|
312
|
+
this.verifiedGrammarPaths.set(candidate, stamp);
|
|
313
|
+
if (this.isGrammarVersionCurrent(candidate, grammarFile, stamp)) {
|
|
314
|
+
return candidate;
|
|
315
|
+
}
|
|
316
|
+
continue;
|
|
317
|
+
}
|
|
318
|
+
this.verifiedGrammarPaths.delete(candidate);
|
|
319
|
+
this.reportPoisonedGrammarFile(candidate, grammarFile);
|
|
320
|
+
}
|
|
321
|
+
return;
|
|
322
|
+
}
|
|
323
|
+
refreshGrammarSessionLatches() {
|
|
324
|
+
const ledgerGen = getDegradationLedgerGeneration();
|
|
325
|
+
if (ledgerGen === this.grammarNotificationsLedgerGen)
|
|
326
|
+
return;
|
|
327
|
+
this.grammarNotificationsLedgerGen = ledgerGen;
|
|
328
|
+
this.grammarLastNotifiedDelayMs.clear();
|
|
329
|
+
this.poisonedGrammarPaths.clear();
|
|
330
|
+
this.staleReportedGrammarPaths.clear();
|
|
331
|
+
}
|
|
332
|
+
reportPoisonedGrammarFile(candidate, grammarFile) {
|
|
333
|
+
this.refreshGrammarSessionLatches();
|
|
334
|
+
if (this.poisonedGrammarPaths.has(candidate))
|
|
335
|
+
return;
|
|
336
|
+
this.poisonedGrammarPaths.add(candidate);
|
|
337
|
+
logTreeSitterDiagnostic({
|
|
338
|
+
subsystem: "tree-sitter-client",
|
|
339
|
+
level: "warn",
|
|
340
|
+
message: `ignoring ${candidate}: the file is not a wasm module (missing the \\0asm preamble) — ` + `most likely a captive-portal or proxy page written by an earlier download (#1548). ` + `dm-lens will treat the grammar as missing and try to fetch it again.`,
|
|
341
|
+
metadata: { grammarFile, path: candidate, outcome: "not-wasm" }
|
|
342
|
+
});
|
|
343
|
+
incrementDegradationCount({
|
|
344
|
+
kind: "grammar-blocked",
|
|
345
|
+
subject: grammarFile,
|
|
346
|
+
reason: "on-disk grammar file is not a wasm module — ignored, re-fetching"
|
|
347
|
+
});
|
|
348
|
+
}
|
|
349
|
+
isGrammarVersionCurrent(candidate, grammarFile, stamp) {
|
|
350
|
+
if (isVendoredGrammar(grammarFile))
|
|
351
|
+
return true;
|
|
352
|
+
if (this.staleGrammarVersionAt.get(candidate) === stamp) {
|
|
353
|
+
this.reportStaleGrammarVersion(candidate, grammarFile);
|
|
354
|
+
return false;
|
|
355
|
+
}
|
|
356
|
+
if (this.verifiedGrammarVersionAt.get(candidate) === stamp)
|
|
357
|
+
return true;
|
|
358
|
+
const pinnedHash = pinnedGrammarHash(grammarFile);
|
|
359
|
+
if (!pinnedHash) {
|
|
360
|
+
this.verifiedGrammarVersionAt.set(candidate, stamp);
|
|
361
|
+
return true;
|
|
362
|
+
}
|
|
363
|
+
const actualHash = grammarFileSha256(candidate);
|
|
364
|
+
if (actualHash === pinnedHash) {
|
|
365
|
+
this.verifiedGrammarVersionAt.set(candidate, stamp);
|
|
366
|
+
return true;
|
|
367
|
+
}
|
|
368
|
+
this.verifiedGrammarVersionAt.delete(candidate);
|
|
369
|
+
this.staleGrammarVersionAt.set(candidate, stamp);
|
|
370
|
+
this.reportStaleGrammarVersion(candidate, grammarFile);
|
|
371
|
+
return false;
|
|
372
|
+
}
|
|
373
|
+
reportStaleGrammarVersion(candidate, grammarFile) {
|
|
374
|
+
this.refreshGrammarSessionLatches();
|
|
375
|
+
if (this.staleReportedGrammarPaths.has(candidate))
|
|
376
|
+
return;
|
|
377
|
+
this.staleReportedGrammarPaths.add(candidate);
|
|
378
|
+
logTreeSitterDiagnostic({
|
|
379
|
+
subsystem: "tree-sitter-client",
|
|
380
|
+
level: "warn",
|
|
381
|
+
message: `ignoring ${candidate}: its sha256 no longer matches the pinned grammar ` + `manifest — the pinned tree-sitter-wasms version (or a SOURCE_OVERRIDES entry) ` + `moved since this file was downloaded. dm-lens will treat the grammar as ` + `missing and re-fetch the current build (#1760).`,
|
|
382
|
+
metadata: { grammarFile, path: candidate, outcome: "stale-version" }
|
|
383
|
+
});
|
|
384
|
+
incrementDegradationCount({
|
|
385
|
+
kind: "grammar-blocked",
|
|
386
|
+
subject: grammarFile,
|
|
387
|
+
reason: "cached grammar no longer matches the pinned manifest hash — ignored, re-fetching"
|
|
388
|
+
});
|
|
389
|
+
}
|
|
390
|
+
findGrammarsDir(deps = this.grammarDirResolutionDeps) {
|
|
391
|
+
const grammarsDir = deps.resolveAsset("grammars");
|
|
392
|
+
if (grammarsDir && fs.existsSync(path.join(grammarsDir, "tree-sitter-typescript.wasm"))) {
|
|
393
|
+
return grammarsDir;
|
|
394
|
+
}
|
|
395
|
+
try {
|
|
396
|
+
const wasmsOut = path.join(path.dirname(deps.resolvePackage("tree-sitter-wasms/package.json")), "out");
|
|
397
|
+
if (fs.existsSync(wasmsOut))
|
|
398
|
+
return wasmsOut;
|
|
399
|
+
} catch {}
|
|
400
|
+
const cwdWasms = path.join(deps.cwd(), "node_modules", "tree-sitter-wasms", "out");
|
|
401
|
+
if (fs.existsSync(cwdWasms))
|
|
402
|
+
return cwdWasms;
|
|
403
|
+
return "";
|
|
404
|
+
}
|
|
405
|
+
grammarsWriteDir() {
|
|
406
|
+
try {
|
|
407
|
+
let dir = path.dirname(_require.resolve("web-tree-sitter"));
|
|
408
|
+
while (path.basename(dir) !== "web-tree-sitter" && dir !== path.dirname(dir)) {
|
|
409
|
+
dir = path.dirname(dir);
|
|
410
|
+
}
|
|
411
|
+
if (path.basename(dir) === "web-tree-sitter") {
|
|
412
|
+
return path.join(dir, "grammars");
|
|
413
|
+
}
|
|
414
|
+
} catch {}
|
|
415
|
+
return;
|
|
416
|
+
}
|
|
417
|
+
async ensureGrammar(grammarFile) {
|
|
418
|
+
if (this.resolveGrammarFile(grammarFile)) {
|
|
419
|
+
return true;
|
|
420
|
+
}
|
|
421
|
+
if (!assertInstallAllowed(`tree-sitter grammar fetch: ${grammarFile}`)) {
|
|
422
|
+
const unavailable = `tree-sitter grammar '${grammarFile}' is unavailable because the project is not trusted; ` + `runtime grammar downloads are disabled until trust is granted.`;
|
|
423
|
+
logTreeSitterDiagnostic({
|
|
424
|
+
subsystem: "tree-sitter-client",
|
|
425
|
+
message: unavailable,
|
|
426
|
+
metadata: { grammarFile, outcome: "trust-gated" }
|
|
427
|
+
});
|
|
428
|
+
recordDegradation({
|
|
429
|
+
kind: "grammar-blocked",
|
|
430
|
+
subject: grammarFile,
|
|
431
|
+
reason: "runtime grammar download blocked because project is untrusted"
|
|
432
|
+
});
|
|
433
|
+
const generation = getProjectTrustGeneration();
|
|
434
|
+
if (generation !== this.trustNotificationsGeneration) {
|
|
435
|
+
this.trustNotificationsGeneration = generation;
|
|
436
|
+
this.trustBlockedGrammarNotifications.clear();
|
|
437
|
+
}
|
|
438
|
+
if (!this.trustBlockedGrammarNotifications.has(grammarFile)) {
|
|
439
|
+
this.trustBlockedGrammarNotifications.add(grammarFile);
|
|
440
|
+
notifyUserDegradation(`dm-lens: ${unavailable}`);
|
|
441
|
+
}
|
|
442
|
+
return false;
|
|
443
|
+
}
|
|
444
|
+
const inflight = this.grammarEnsurePromises.get(grammarFile);
|
|
445
|
+
if (inflight)
|
|
446
|
+
return inflight;
|
|
447
|
+
const retryAt = this.grammarRetryAtMs.get(grammarFile);
|
|
448
|
+
if (retryAt !== undefined && Date.now() < retryAt) {
|
|
449
|
+
return false;
|
|
450
|
+
}
|
|
451
|
+
const task = (async () => {
|
|
452
|
+
try {
|
|
453
|
+
return await this.fetchGrammar(grammarFile);
|
|
454
|
+
} catch (err) {
|
|
455
|
+
const message = err instanceof Error ? err.message : String(err);
|
|
456
|
+
this.recordGrammarFailure(grammarFile, `The runtime grammar fetch threw an unexpected error (${message}).`, true);
|
|
457
|
+
return false;
|
|
458
|
+
}
|
|
459
|
+
})();
|
|
460
|
+
this.grammarEnsurePromises.set(grammarFile, task);
|
|
461
|
+
task.finally(() => {
|
|
462
|
+
if (this.grammarEnsurePromises.get(grammarFile) === task) {
|
|
463
|
+
this.grammarEnsurePromises.delete(grammarFile);
|
|
464
|
+
}
|
|
465
|
+
}).catch(() => {});
|
|
466
|
+
return task;
|
|
467
|
+
}
|
|
468
|
+
async fetchGrammar(grammarFile) {
|
|
469
|
+
if (isVendoredGrammar(grammarFile)) {
|
|
470
|
+
const { reason } = vendoredGrammarRefusal(grammarFile);
|
|
471
|
+
this.recordGrammarFailure(grammarFile, reason ?? `${grammarFile} is missing from vendor/grammars/.`, false);
|
|
472
|
+
return false;
|
|
473
|
+
}
|
|
474
|
+
const dir = this.grammarsDir && fs.existsSync(this.grammarsDir) ? this.grammarsDir : this.grammarsWriteDir();
|
|
475
|
+
if (!dir) {
|
|
476
|
+
this.recordGrammarFailure(grammarFile, "No writable grammars directory could be located for the runtime fetch.", true);
|
|
477
|
+
return false;
|
|
478
|
+
}
|
|
479
|
+
const { ok, retryable, reason } = await downloadGrammarDetailed(dir, grammarFile);
|
|
480
|
+
if (ok) {
|
|
481
|
+
if (!this.grammarsDir)
|
|
482
|
+
this.grammarsDir = dir;
|
|
483
|
+
this.grammarRetryAtMs.delete(grammarFile);
|
|
484
|
+
this.grammarFailureAttempts.delete(grammarFile);
|
|
485
|
+
this.grammarLastNotifiedDelayMs.delete(grammarFile);
|
|
486
|
+
logTreeSitterDiagnostic({
|
|
487
|
+
subsystem: "tree-sitter-client",
|
|
488
|
+
level: "warn",
|
|
489
|
+
message: `fetched missing tree-sitter grammar ${grammarFile} at runtime (install scripts were skipped by the package manager)`,
|
|
490
|
+
metadata: { grammarFile, outcome: "fetched" }
|
|
491
|
+
});
|
|
492
|
+
} else {
|
|
493
|
+
this.recordGrammarFailure(grammarFile, reason ?? "The package manager skipped install scripts and the runtime download failed.", retryable);
|
|
494
|
+
}
|
|
495
|
+
return ok;
|
|
496
|
+
}
|
|
497
|
+
recordGrammarFailure(grammarFile, detail, retryable) {
|
|
498
|
+
const attempts = (this.grammarFailureAttempts.get(grammarFile) ?? 0) + 1;
|
|
499
|
+
this.grammarFailureAttempts.set(grammarFile, attempts);
|
|
500
|
+
const retryDelayMs = retryable ? transientRetryDelayMs(attempts, "probe-timeout") : undefined;
|
|
501
|
+
this.grammarRetryAtMs.set(grammarFile, retryDelayMs === undefined ? Number.POSITIVE_INFINITY : Date.now() + retryDelayMs);
|
|
502
|
+
const unavailable = retryable ? `tree-sitter grammar '${grammarFile}' is unavailable — symbol search, ` + `module reports and structural rules for this language will be degraded. ` + `${detail} dm-lens will retry automatically in ${Math.round(retryDelayMs / 1000)}s; ` + `if the problem persists, allow the package manager's build scripts ` + `(pnpm approve-builds / bun trustedDependencies) or restore network access.` : `tree-sitter grammar '${grammarFile}' is unavailable — symbol search, ` + `module reports and structural rules for this language will be degraded. ` + `${detail} The grammar source reports it does not exist (not a network problem), so this will not ` + `resolve on retry. Fix: reinstall with a manager that runs postinstall, allow its build scripts ` + `(pnpm approve-builds / bun trustedDependencies), or restore network access.`;
|
|
503
|
+
logTreeSitterDiagnostic({
|
|
504
|
+
subsystem: "tree-sitter-client",
|
|
505
|
+
message: unavailable,
|
|
506
|
+
metadata: {
|
|
507
|
+
grammarFile,
|
|
508
|
+
outcome: "unavailable",
|
|
509
|
+
retryable,
|
|
510
|
+
retryDelayMs,
|
|
511
|
+
attempts
|
|
512
|
+
}
|
|
513
|
+
});
|
|
514
|
+
incrementDegradationCount({
|
|
515
|
+
kind: "grammar-blocked",
|
|
516
|
+
subject: grammarFile,
|
|
517
|
+
reason: retryable ? `runtime grammar download failed — retryable (${detail.trim()})` : `runtime grammar download failed — durable (${detail.trim()})`
|
|
518
|
+
});
|
|
519
|
+
this.refreshGrammarSessionLatches();
|
|
520
|
+
const notifyKey = retryDelayMs ?? -1;
|
|
521
|
+
if (this.grammarLastNotifiedDelayMs.get(grammarFile) !== notifyKey) {
|
|
522
|
+
this.grammarLastNotifiedDelayMs.set(grammarFile, notifyKey);
|
|
523
|
+
notifyUserDegradation(`dm-lens: ${unavailable}`);
|
|
524
|
+
}
|
|
525
|
+
}
|
|
526
|
+
recordGrammarLoadFailure(grammarPath, grammarFile, err) {
|
|
527
|
+
const stamp = grammarFileStamp(grammarPath);
|
|
528
|
+
this.verifiedGrammarPaths.delete(grammarPath);
|
|
529
|
+
if (stamp)
|
|
530
|
+
this.decodeFailedGrammarPaths.set(grammarPath, stamp);
|
|
531
|
+
const message = err instanceof Error ? err.message : String(err);
|
|
532
|
+
logTreeSitterDiagnostic({
|
|
533
|
+
subsystem: "tree-sitter-client",
|
|
534
|
+
level: "warn",
|
|
535
|
+
message: `Language.load failed for ${grammarPath} even though the wasm preamble check ` + `passed (${message}) — most likely a truncated download (#1564). Treating the ` + `grammar as missing so the next demand re-fetches it.`,
|
|
536
|
+
metadata: { grammarFile, path: grammarPath, outcome: "load-failed" }
|
|
537
|
+
});
|
|
538
|
+
this.recordGrammarFailure(grammarFile, `Language.load failed on a resolved grammar file (${message}).`, true);
|
|
539
|
+
}
|
|
540
|
+
async init() {
|
|
541
|
+
if (this.wasmAborted)
|
|
542
|
+
return false;
|
|
543
|
+
if (this.initialized)
|
|
544
|
+
return true;
|
|
545
|
+
if (this.webTreeSitterLoadFailed)
|
|
546
|
+
return false;
|
|
547
|
+
if (this.initPromise)
|
|
548
|
+
return this.initPromise;
|
|
549
|
+
this.initPromise = (async () => {
|
|
550
|
+
try {
|
|
551
|
+
let mod;
|
|
552
|
+
try {
|
|
553
|
+
mod = await loadWebTreeSitter();
|
|
554
|
+
} catch (err) {
|
|
555
|
+
const classification = classifyWebTreeSitterLoadFailure(err);
|
|
556
|
+
if (classification === "evaluation") {
|
|
557
|
+
this.webTreeSitterLoadFailed = true;
|
|
558
|
+
}
|
|
559
|
+
recordDegradationOnce({
|
|
560
|
+
kind: "web-tree-sitter-load-failed",
|
|
561
|
+
subject: "web-tree-sitter",
|
|
562
|
+
reason: (err instanceof Error ? err.message : String(err)) + (classification === "resolution" ? " (resolution failure — retryable)" : " (evaluation failure — latched for the session)")
|
|
563
|
+
});
|
|
564
|
+
throw err;
|
|
565
|
+
}
|
|
566
|
+
const anyMod = mod;
|
|
567
|
+
const ParserClass = anyMod.Parser || anyMod.default || anyMod;
|
|
568
|
+
if (!ParserClass || typeof ParserClass.init !== "function") {
|
|
569
|
+
this.dbg("Parser class not found or missing init method");
|
|
570
|
+
return false;
|
|
571
|
+
}
|
|
572
|
+
this.ParserClass = ParserClass;
|
|
573
|
+
this.LanguageLoader = mod.Language;
|
|
574
|
+
const wasmPath = this.resolveWebTreeSitterAsset("tree-sitter.wasm");
|
|
575
|
+
if (!wasmPath) {
|
|
576
|
+
this.dbg("Could not resolve tree-sitter.wasm");
|
|
577
|
+
return false;
|
|
578
|
+
}
|
|
579
|
+
const wasmDir = path.dirname(wasmPath);
|
|
580
|
+
this.dbg(`Looking for WASM at: ${wasmPath}, exists: ${fs.existsSync(wasmPath)}`);
|
|
581
|
+
await ParserClass.init({
|
|
582
|
+
locateFile: (scriptName) => {
|
|
583
|
+
const fullPath = path.join(wasmDir, scriptName);
|
|
584
|
+
this.dbg(`locateFile: ${scriptName} -> ${fullPath}`);
|
|
585
|
+
return fullPath;
|
|
586
|
+
}
|
|
587
|
+
});
|
|
588
|
+
this.initialized = true;
|
|
589
|
+
return true;
|
|
590
|
+
} catch (err) {
|
|
591
|
+
this.reportWasmAbort(err);
|
|
592
|
+
this.dbg(`Init error: ${err}`);
|
|
593
|
+
return false;
|
|
594
|
+
} finally {
|
|
595
|
+
this.initPromise = null;
|
|
596
|
+
}
|
|
597
|
+
})();
|
|
598
|
+
return this.initPromise;
|
|
599
|
+
}
|
|
600
|
+
resetLoadStateForSession() {
|
|
601
|
+
this.webTreeSitterLoadFailed = false;
|
|
602
|
+
}
|
|
603
|
+
async loadLanguage(languageId) {
|
|
604
|
+
if (this.wasmAborted)
|
|
605
|
+
return null;
|
|
606
|
+
this.dbg(`Loading language: ${languageId}`);
|
|
607
|
+
if (this.languages.has(languageId)) {
|
|
608
|
+
this.dbg(`Language ${languageId} already loaded`);
|
|
609
|
+
return this.languages.get(languageId);
|
|
610
|
+
}
|
|
611
|
+
if (!this.ParserClass) {
|
|
612
|
+
this.dbg(`ParserClass not initialized`);
|
|
613
|
+
return null;
|
|
614
|
+
}
|
|
615
|
+
const grammarFile = LANGUAGE_TO_GRAMMAR[languageId];
|
|
616
|
+
if (!grammarFile) {
|
|
617
|
+
this.dbg(`No grammar file for ${languageId}`);
|
|
618
|
+
return null;
|
|
619
|
+
}
|
|
620
|
+
const blockReason = grammarBlockReason(grammarFile);
|
|
621
|
+
if (blockReason) {
|
|
622
|
+
this.dbg(`Grammar ${grammarFile} blocked on this runtime — ${blockReason}`);
|
|
623
|
+
recordDegradation({
|
|
624
|
+
kind: "grammar-blocked",
|
|
625
|
+
subject: grammarFile,
|
|
626
|
+
reason: blockReason
|
|
627
|
+
});
|
|
628
|
+
return null;
|
|
629
|
+
}
|
|
630
|
+
let grammarPath = this.resolveGrammarFile(grammarFile);
|
|
631
|
+
if (!grammarPath) {
|
|
632
|
+
if (await this.ensureGrammar(grammarFile)) {
|
|
633
|
+
grammarPath = this.resolveGrammarFile(grammarFile);
|
|
634
|
+
}
|
|
635
|
+
}
|
|
636
|
+
this.dbg(`Grammar path: ${grammarPath}, exists: ${grammarPath && fs.existsSync(grammarPath)}`);
|
|
637
|
+
if (!grammarPath || !fs.existsSync(grammarPath)) {
|
|
638
|
+
this.dbg(`Grammar file not found: ${grammarPath}`);
|
|
639
|
+
return null;
|
|
640
|
+
}
|
|
641
|
+
try {
|
|
642
|
+
if (!this.LanguageLoader?.load) {
|
|
643
|
+
this.dbg(`LanguageLoader.load not available`);
|
|
644
|
+
return null;
|
|
645
|
+
}
|
|
646
|
+
this.dbg(`Calling Language.load...`);
|
|
647
|
+
const language = await this.LanguageLoader.load(grammarPath);
|
|
648
|
+
this.dbg(`Language loaded: ${language?.name || "unknown"}`);
|
|
649
|
+
if (language) {
|
|
650
|
+
this.languages.set(languageId, language);
|
|
651
|
+
}
|
|
652
|
+
return language;
|
|
653
|
+
} catch (err) {
|
|
654
|
+
if (!this.reportWasmAbort(err)) {
|
|
655
|
+
this.recordGrammarLoadFailure(grammarPath, grammarFile, err);
|
|
656
|
+
}
|
|
657
|
+
this.dbg(`Language load error: ${err}`);
|
|
658
|
+
return null;
|
|
659
|
+
}
|
|
660
|
+
}
|
|
661
|
+
async getParser(languageId) {
|
|
662
|
+
if (this.wasmAborted)
|
|
663
|
+
return null;
|
|
664
|
+
if (this.parsers.has(languageId)) {
|
|
665
|
+
return this.parsers.get(languageId);
|
|
666
|
+
}
|
|
667
|
+
const language = await this.loadLanguage(languageId);
|
|
668
|
+
if (!language || !this.ParserClass)
|
|
669
|
+
return null;
|
|
670
|
+
const parser = new this.ParserClass;
|
|
671
|
+
parser.setLanguage(language);
|
|
672
|
+
this.parsers.set(languageId, parser);
|
|
673
|
+
return parser;
|
|
674
|
+
}
|
|
675
|
+
async parseFile(filePath, languageId, contentOverride) {
|
|
676
|
+
const outcome = await this.parseFileAndUse(filePath, languageId, contentOverride, (tree) => tree);
|
|
677
|
+
return outcome.parsed ? outcome.value : null;
|
|
678
|
+
}
|
|
679
|
+
async withParsedTree(filePath, languageId, contentOverride, consume) {
|
|
680
|
+
return this.parseFileAndUse(filePath, languageId, contentOverride, consume);
|
|
681
|
+
}
|
|
682
|
+
async parseFileAndUse(filePath, languageId, contentOverride, consume) {
|
|
683
|
+
this.dbg(`Parsing ${filePath} with language ${languageId}`);
|
|
684
|
+
const parser = await this.getParser(languageId);
|
|
685
|
+
if (!parser) {
|
|
686
|
+
this.dbg(`Failed to get parser for ${languageId}`);
|
|
687
|
+
return NOT_PARSED;
|
|
688
|
+
}
|
|
689
|
+
let tree;
|
|
690
|
+
try {
|
|
691
|
+
const content = contentOverride ?? fs.readFileSync(filePath, "utf-8");
|
|
692
|
+
this.dbg(`File content length: ${content.length}`);
|
|
693
|
+
const cachedTree = this.treeCache.get(filePath, content, languageId);
|
|
694
|
+
if (cachedTree) {
|
|
695
|
+
this.dbg(`Using cached tree for ${filePath}`);
|
|
696
|
+
tree = cachedTree;
|
|
697
|
+
} else {
|
|
698
|
+
const parseStartedAt = performance.now();
|
|
699
|
+
this.recordParserCounter("parserInvocations");
|
|
700
|
+
try {
|
|
701
|
+
tree = parser.parse(content);
|
|
702
|
+
} catch (err) {
|
|
703
|
+
this.recordParserCounter("parserFailures");
|
|
704
|
+
throw err;
|
|
705
|
+
} finally {
|
|
706
|
+
this.recordParserCounter("parserDurationMs", performance.now() - parseStartedAt);
|
|
707
|
+
}
|
|
708
|
+
this.dbg(`Parsed, root node type: ${tree.rootNode.type}`);
|
|
709
|
+
this.treeCache.set(filePath, content, languageId, tree);
|
|
710
|
+
}
|
|
711
|
+
} catch (err) {
|
|
712
|
+
this.reportWasmAbort(err);
|
|
713
|
+
this.dbg(`Parse error: ${err}`);
|
|
714
|
+
return NOT_PARSED;
|
|
715
|
+
}
|
|
716
|
+
try {
|
|
717
|
+
return { parsed: true, value: consume(tree) };
|
|
718
|
+
} catch (error) {
|
|
719
|
+
this.reportWasmAbort(error);
|
|
720
|
+
throw error;
|
|
721
|
+
}
|
|
722
|
+
}
|
|
723
|
+
extractInjections(filePath, content) {
|
|
724
|
+
const injections = [];
|
|
725
|
+
const sqlPattern = /\b(sql|query|execute)\s*`([^`]+)`/gi;
|
|
726
|
+
let match;
|
|
727
|
+
while ((match = sqlPattern.exec(content)) !== null) {
|
|
728
|
+
const lines = content.slice(0, match.index).split(`
|
|
729
|
+
`);
|
|
730
|
+
injections.push({
|
|
731
|
+
type: "sql",
|
|
732
|
+
content: match[2],
|
|
733
|
+
line: lines.length,
|
|
734
|
+
column: lines[lines.length - 1].length
|
|
735
|
+
});
|
|
736
|
+
}
|
|
737
|
+
const cssPattern = /\b(styled(?:\.\w+)?|css)\s*`([^`]+)`/gi;
|
|
738
|
+
while ((match = cssPattern.exec(content)) !== null) {
|
|
739
|
+
const lines = content.slice(0, match.index).split(`
|
|
740
|
+
`);
|
|
741
|
+
injections.push({
|
|
742
|
+
type: "css",
|
|
743
|
+
content: match[2],
|
|
744
|
+
line: lines.length,
|
|
745
|
+
column: lines[lines.length - 1].length
|
|
746
|
+
});
|
|
747
|
+
}
|
|
748
|
+
const regexPattern = /new\s+RegExp\s*\(\s*`([^`]+)`/gi;
|
|
749
|
+
while ((match = regexPattern.exec(content)) !== null) {
|
|
750
|
+
const lines = content.slice(0, match.index).split(`
|
|
751
|
+
`);
|
|
752
|
+
injections.push({
|
|
753
|
+
type: "regex",
|
|
754
|
+
content: match[1],
|
|
755
|
+
line: lines.length,
|
|
756
|
+
column: lines[lines.length - 1].length
|
|
757
|
+
});
|
|
758
|
+
}
|
|
759
|
+
this.dbg(`Found ${injections.length} injections in ${filePath}`);
|
|
760
|
+
return injections;
|
|
761
|
+
}
|
|
762
|
+
isAvailable() {
|
|
763
|
+
if (this.wasmAborted)
|
|
764
|
+
return false;
|
|
765
|
+
if (this.resolveGrammarFile("tree-sitter-typescript.wasm"))
|
|
766
|
+
return true;
|
|
767
|
+
const dir = this.findGrammarsDir();
|
|
768
|
+
this.grammarsDir = dir;
|
|
769
|
+
return !!dir && fs.existsSync(dir);
|
|
770
|
+
}
|
|
771
|
+
async isLanguageSupported(languageId) {
|
|
772
|
+
if (this.wasmAborted)
|
|
773
|
+
return false;
|
|
774
|
+
if (!this.initialized)
|
|
775
|
+
await this.init();
|
|
776
|
+
const language = await this.loadLanguage(languageId);
|
|
777
|
+
return language !== null;
|
|
778
|
+
}
|
|
779
|
+
getLanguage(languageId) {
|
|
780
|
+
if (this.wasmAborted)
|
|
781
|
+
return null;
|
|
782
|
+
return this.languages.get(languageId) || null;
|
|
783
|
+
}
|
|
784
|
+
async structuralSearch(pattern, languageId, rootDir, options = {}) {
|
|
785
|
+
if (!this.initialized) {
|
|
786
|
+
const ok = await this.init();
|
|
787
|
+
if (!ok)
|
|
788
|
+
return [];
|
|
789
|
+
}
|
|
790
|
+
try {
|
|
791
|
+
await this.queryLoader.loadQueries(rootDir);
|
|
792
|
+
} catch (err) {
|
|
793
|
+
this.dbg(`Failed to load queries for ${rootDir}: ${err}`);
|
|
794
|
+
}
|
|
795
|
+
this.dbg(`Compiling pattern: ${pattern.slice(0, 50)}...`);
|
|
796
|
+
const compiled = await this.compileQuery(pattern, languageId);
|
|
797
|
+
if (!compiled) {
|
|
798
|
+
this.dbg(`Pattern compilation failed`);
|
|
799
|
+
return [];
|
|
800
|
+
}
|
|
801
|
+
this.dbg(`Pattern compiled, metavars: ${compiled.metavars.join(", ")}`);
|
|
802
|
+
const files = this.collectFiles(rootDir, languageId, options.fileFilter);
|
|
803
|
+
this.dbg(`Scanning ${files.length} files...`);
|
|
804
|
+
const matches = [];
|
|
805
|
+
const maxResults = options.maxResults ?? 50;
|
|
806
|
+
for (const file of files) {
|
|
807
|
+
if (matches.length >= maxResults)
|
|
808
|
+
break;
|
|
809
|
+
const fileMatches = await this.searchFileWithQuery(file, compiled.query, compiled.metavars, languageId, pattern, compiled.postFilter, compiled.postFilterParams);
|
|
810
|
+
matches.push(...fileMatches);
|
|
811
|
+
}
|
|
812
|
+
return matches.slice(0, maxResults);
|
|
813
|
+
}
|
|
814
|
+
async runQueryOnFile(queryDef, filePath, languageId, options = {}, contentOverride) {
|
|
815
|
+
if (!this.initialized) {
|
|
816
|
+
const ok = await this.init();
|
|
817
|
+
if (!ok)
|
|
818
|
+
return [];
|
|
819
|
+
}
|
|
820
|
+
const compiled = await this.compileRawQuery(queryDef.id, queryDef.query, queryDef.metavars, languageId, queryDef.post_filter, queryDef.post_filter_params);
|
|
821
|
+
if (!compiled)
|
|
822
|
+
return [];
|
|
823
|
+
const matches = await this.searchFileWithQuery(filePath, compiled.query, compiled.metavars, languageId, queryDef.id, compiled.postFilter, compiled.postFilterParams, contentOverride);
|
|
824
|
+
const maxResults = options.maxResults ?? 50;
|
|
825
|
+
return matches.slice(0, maxResults);
|
|
826
|
+
}
|
|
827
|
+
async runQueriesOnFile(queryDefs, filePath, languageId, options = {}, contentOverride) {
|
|
828
|
+
if (queryDefs.length === 0)
|
|
829
|
+
return [];
|
|
830
|
+
if (!this.initialized) {
|
|
831
|
+
const ok = await this.init();
|
|
832
|
+
if (!ok)
|
|
833
|
+
return [];
|
|
834
|
+
}
|
|
835
|
+
const maxResults = options.maxResults ?? 50;
|
|
836
|
+
const batch = await this.compileQueryBatch(queryDefs, languageId);
|
|
837
|
+
if (!batch) {
|
|
838
|
+
const results = [];
|
|
839
|
+
for (const queryDef of queryDefs) {
|
|
840
|
+
const matches = await this.runQueryOnFile(queryDef, filePath, languageId, options, contentOverride);
|
|
841
|
+
for (const match of matches)
|
|
842
|
+
results.push({ queryDef, match });
|
|
843
|
+
}
|
|
844
|
+
return results;
|
|
845
|
+
}
|
|
846
|
+
const perQuery = new Map;
|
|
847
|
+
await this.parseFileAndUse(filePath, languageId, contentOverride, (tree) => {
|
|
848
|
+
try {
|
|
849
|
+
for (const match of batch.query.matches(tree.rootNode)) {
|
|
850
|
+
const owner = batch.ownerOfPattern[match.patternIndex];
|
|
851
|
+
if (owner === undefined)
|
|
852
|
+
continue;
|
|
853
|
+
const bucket = perQuery.get(owner) ?? [];
|
|
854
|
+
if (bucket.length >= maxResults)
|
|
855
|
+
continue;
|
|
856
|
+
const entry = batch.entries[owner];
|
|
857
|
+
const captures = {};
|
|
858
|
+
for (const capture of match.captures) {
|
|
859
|
+
if (entry.metavars.includes(capture.name)) {
|
|
860
|
+
captures[capture.name] = capture.node;
|
|
861
|
+
}
|
|
862
|
+
}
|
|
863
|
+
if (!this.evaluatePredicates(batch.query, match))
|
|
864
|
+
continue;
|
|
865
|
+
if (entry.postFilter && !this.applyPostFilter(entry.postFilter, entry.postFilterParams, captures, tree.rootNode)) {
|
|
866
|
+
continue;
|
|
867
|
+
}
|
|
868
|
+
if (match.captures.length === 0)
|
|
869
|
+
continue;
|
|
870
|
+
const firstNode = match.captures[0].node;
|
|
871
|
+
const textCaptures = {};
|
|
872
|
+
for (const [name, node] of Object.entries(captures)) {
|
|
873
|
+
textCaptures[name] = node.text;
|
|
874
|
+
}
|
|
875
|
+
bucket.push({
|
|
876
|
+
file: filePath,
|
|
877
|
+
line: firstNode.startPosition.row + 1,
|
|
878
|
+
column: firstNode.startPosition.column + 1,
|
|
879
|
+
matchedText: firstNode.text,
|
|
880
|
+
nodeType: firstNode.type,
|
|
881
|
+
captures: textCaptures
|
|
882
|
+
});
|
|
883
|
+
perQuery.set(owner, bucket);
|
|
884
|
+
}
|
|
885
|
+
} catch (err) {
|
|
886
|
+
this.reportWasmAbort(err);
|
|
887
|
+
this.dbg(`Batched query matching error: ${err}`);
|
|
888
|
+
}
|
|
889
|
+
});
|
|
890
|
+
const results = [];
|
|
891
|
+
for (let i = 0;i < batch.entries.length; i++) {
|
|
892
|
+
for (const match of perQuery.get(i) ?? []) {
|
|
893
|
+
results.push({ queryDef: batch.entries[i].queryDef, match });
|
|
894
|
+
}
|
|
895
|
+
}
|
|
896
|
+
return results;
|
|
897
|
+
}
|
|
898
|
+
async compileQueryBatch(queryDefs, languageId) {
|
|
899
|
+
const identity = crypto.createHash("sha256").update(JSON.stringify(queryDefs)).digest("hex");
|
|
900
|
+
const cacheKey = this.getQueryCacheKey(`batch:${identity}`, languageId);
|
|
901
|
+
const cached = this.queryBatchCache.get(cacheKey);
|
|
902
|
+
if (cached !== undefined) {
|
|
903
|
+
this.queryBatchCache.delete(cacheKey);
|
|
904
|
+
this.queryBatchCache.set(cacheKey, cached);
|
|
905
|
+
return cached;
|
|
906
|
+
}
|
|
907
|
+
const language = await this.loadLanguage(languageId);
|
|
908
|
+
if (!language) {
|
|
909
|
+
const failures = (this.queryBatchLoadFailures.get(cacheKey) ?? 0) + 1;
|
|
910
|
+
if (failures >= QUERY_BATCH_MAX_LOAD_FAILURES) {
|
|
911
|
+
this.dbg(`Batch: grammar for ${languageId} failed to load ${failures} times — caching miss`);
|
|
912
|
+
this.queryBatchLoadFailures.delete(cacheKey);
|
|
913
|
+
this.cacheQueryBatch(cacheKey, null);
|
|
914
|
+
} else {
|
|
915
|
+
this.queryBatchLoadFailures.set(cacheKey, failures);
|
|
916
|
+
}
|
|
917
|
+
return null;
|
|
918
|
+
}
|
|
919
|
+
this.queryBatchLoadFailures.delete(cacheKey);
|
|
920
|
+
const build = async () => {
|
|
921
|
+
const Query = (await loadWebTreeSitter()).Query;
|
|
922
|
+
const entries = [];
|
|
923
|
+
const sources = [];
|
|
924
|
+
const ownerOfPattern = [];
|
|
925
|
+
for (const queryDef of queryDefs) {
|
|
926
|
+
let patternCount;
|
|
927
|
+
try {
|
|
928
|
+
const probe = new Query(language, queryDef.query);
|
|
929
|
+
patternCount = probe.patternCount();
|
|
930
|
+
probe.delete?.();
|
|
931
|
+
} catch (err) {
|
|
932
|
+
if (this.reportWasmAbort(err))
|
|
933
|
+
return null;
|
|
934
|
+
this.dbg(`Batch: skipping ${queryDef.id} for ${languageId}: ${err}`);
|
|
935
|
+
this.reportQueryCompileFailure(queryDef.id, languageId, err);
|
|
936
|
+
continue;
|
|
937
|
+
}
|
|
938
|
+
const owner = entries.length;
|
|
939
|
+
entries.push({
|
|
940
|
+
queryDef,
|
|
941
|
+
metavars: queryDef.metavars ?? [],
|
|
942
|
+
postFilter: queryDef.post_filter,
|
|
943
|
+
postFilterParams: queryDef.post_filter_params
|
|
944
|
+
});
|
|
945
|
+
sources.push(queryDef.query);
|
|
946
|
+
for (let i = 0;i < patternCount; i++)
|
|
947
|
+
ownerOfPattern.push(owner);
|
|
948
|
+
}
|
|
949
|
+
if (entries.length === 0)
|
|
950
|
+
return null;
|
|
951
|
+
try {
|
|
952
|
+
const query = new Query(language, sources.join(`
|
|
953
|
+
`));
|
|
954
|
+
if (query.patternCount() !== ownerOfPattern.length) {
|
|
955
|
+
this.dbg(`Batch pattern count mismatch for ${languageId} (${query.patternCount()} vs ${ownerOfPattern.length}) — falling back`);
|
|
956
|
+
return null;
|
|
957
|
+
}
|
|
958
|
+
return { query, entries, ownerOfPattern };
|
|
959
|
+
} catch (err) {
|
|
960
|
+
if (this.reportWasmAbort(err))
|
|
961
|
+
return null;
|
|
962
|
+
this.dbg(`Batch compile failed for ${languageId}: ${err}`);
|
|
963
|
+
return null;
|
|
964
|
+
}
|
|
965
|
+
};
|
|
966
|
+
const batch = await build();
|
|
967
|
+
this.cacheQueryBatch(cacheKey, batch);
|
|
968
|
+
return batch;
|
|
969
|
+
}
|
|
970
|
+
patternToQuery(pattern, languageId) {
|
|
971
|
+
const loadedQuery = this.queryLoader.findMatchingQuery(pattern, languageId);
|
|
972
|
+
if (loadedQuery) {
|
|
973
|
+
this.dbg(`Using loaded query: ${loadedQuery.id}`);
|
|
974
|
+
return {
|
|
975
|
+
query: loadedQuery.query,
|
|
976
|
+
metavars: loadedQuery.metavars,
|
|
977
|
+
postFilter: loadedQuery.post_filter,
|
|
978
|
+
postFilterParams: loadedQuery.post_filter_params,
|
|
979
|
+
queryDef: loadedQuery
|
|
980
|
+
};
|
|
981
|
+
}
|
|
982
|
+
return this.getInlinePattern(pattern);
|
|
983
|
+
}
|
|
984
|
+
getInlinePattern(pattern) {
|
|
985
|
+
if (pattern.includes("async function") && pattern.includes("$NAME")) {
|
|
986
|
+
return {
|
|
987
|
+
query: `(function_declaration
|
|
988
|
+
"async"
|
|
989
|
+
name: (identifier) @NAME
|
|
990
|
+
parameters: (formal_parameters) @PARAMS
|
|
991
|
+
body: (statement_block) @BODY)`,
|
|
992
|
+
metavars: ["NAME", "PARAMS", "BODY"]
|
|
993
|
+
};
|
|
994
|
+
}
|
|
995
|
+
if (pattern.includes("console")) {
|
|
996
|
+
return {
|
|
997
|
+
query: `(call_expression
|
|
998
|
+
function: (member_expression
|
|
999
|
+
object: (identifier) @OBJ (#eq? @OBJ "console")
|
|
1000
|
+
property: (property_identifier) @METHOD)
|
|
1001
|
+
arguments: (arguments) @ARGS)`,
|
|
1002
|
+
metavars: ["OBJ", "METHOD", "ARGS"]
|
|
1003
|
+
};
|
|
1004
|
+
}
|
|
1005
|
+
if (pattern.includes("function $NAME") && pattern.includes("PARAMS")) {
|
|
1006
|
+
return {
|
|
1007
|
+
query: `(function_declaration
|
|
1008
|
+
name: (identifier) @NAME
|
|
1009
|
+
parameters: (formal_parameters) @PARAMS
|
|
1010
|
+
body: (statement_block) @BODY)`,
|
|
1011
|
+
metavars: ["NAME", "PARAMS", "BODY"],
|
|
1012
|
+
postFilter: "count_params",
|
|
1013
|
+
postFilterParams: { min_params: 6 }
|
|
1014
|
+
};
|
|
1015
|
+
}
|
|
1016
|
+
if (pattern.includes(".then") && pattern.includes(".catch")) {
|
|
1017
|
+
return {
|
|
1018
|
+
query: `(call_expression
|
|
1019
|
+
function: (member_expression
|
|
1020
|
+
object: (call_expression
|
|
1021
|
+
function: (member_expression
|
|
1022
|
+
object: (call_expression
|
|
1023
|
+
function: (member_expression
|
|
1024
|
+
property: (property_identifier) @M1)
|
|
1025
|
+
arguments: (arguments))
|
|
1026
|
+
property: (property_identifier) @M2)
|
|
1027
|
+
arguments: (arguments))
|
|
1028
|
+
property: (property_identifier) @M3)
|
|
1029
|
+
arguments: (arguments))
|
|
1030
|
+
(#match? @M1 "^(then|catch)$")
|
|
1031
|
+
(#match? @M2 "^(then|catch)$")
|
|
1032
|
+
(#match? @M3 "^(then|catch)$")`,
|
|
1033
|
+
metavars: ["M1", "M2", "M3"]
|
|
1034
|
+
};
|
|
1035
|
+
}
|
|
1036
|
+
const simpleMatch = pattern.match(/\$([A-Z_][A-Z0-9_]*)/);
|
|
1037
|
+
if (simpleMatch) {
|
|
1038
|
+
const name = simpleMatch[1];
|
|
1039
|
+
return {
|
|
1040
|
+
query: `(identifier) @${name}`,
|
|
1041
|
+
metavars: [name]
|
|
1042
|
+
};
|
|
1043
|
+
}
|
|
1044
|
+
return { query: "", metavars: [] };
|
|
1045
|
+
}
|
|
1046
|
+
getQueryCacheKey(pattern, languageId) {
|
|
1047
|
+
return `${languageId}:${pattern}`;
|
|
1048
|
+
}
|
|
1049
|
+
async compileQuery(pattern, languageId) {
|
|
1050
|
+
const cacheKey = this.getQueryCacheKey(pattern, languageId);
|
|
1051
|
+
if (this.queryCache.has(cacheKey)) {
|
|
1052
|
+
this.dbg(`Query cache hit: ${cacheKey}`);
|
|
1053
|
+
const cached = this.queryCache.get(cacheKey);
|
|
1054
|
+
this.queryCache.delete(cacheKey);
|
|
1055
|
+
this.queryCache.set(cacheKey, cached);
|
|
1056
|
+
return cached;
|
|
1057
|
+
}
|
|
1058
|
+
const language = await this.loadLanguage(languageId);
|
|
1059
|
+
if (!language) {
|
|
1060
|
+
this.dbg(`Could not load language ${languageId}`);
|
|
1061
|
+
return null;
|
|
1062
|
+
}
|
|
1063
|
+
const {
|
|
1064
|
+
query: queryStr,
|
|
1065
|
+
metavars,
|
|
1066
|
+
postFilter,
|
|
1067
|
+
postFilterParams
|
|
1068
|
+
} = this.patternToQuery(pattern, languageId);
|
|
1069
|
+
this.dbg(`Query string: ${queryStr.slice(0, 100)}...`);
|
|
1070
|
+
try {
|
|
1071
|
+
const Query = (await loadWebTreeSitter()).Query;
|
|
1072
|
+
const query = new Query(language, queryStr);
|
|
1073
|
+
this.dbg(`Query compiled with ${query.patternCount()} patterns`);
|
|
1074
|
+
const result = { query, metavars, postFilter, postFilterParams };
|
|
1075
|
+
this.cacheQuery(cacheKey, result);
|
|
1076
|
+
return result;
|
|
1077
|
+
} catch (err) {
|
|
1078
|
+
this.reportWasmAbort(err);
|
|
1079
|
+
this.dbg(`Query compilation failed: ${err}`);
|
|
1080
|
+
return null;
|
|
1081
|
+
}
|
|
1082
|
+
}
|
|
1083
|
+
async compileRawQuery(queryId, queryStr, metavars, languageId, postFilter, postFilterParams) {
|
|
1084
|
+
const cacheKey = this.getQueryCacheKey(`raw:${queryId}:${queryStr}`, languageId);
|
|
1085
|
+
if (this.queryCache.has(cacheKey)) {
|
|
1086
|
+
const cached = this.queryCache.get(cacheKey);
|
|
1087
|
+
this.queryCache.delete(cacheKey);
|
|
1088
|
+
this.queryCache.set(cacheKey, cached);
|
|
1089
|
+
return cached;
|
|
1090
|
+
}
|
|
1091
|
+
const language = await this.loadLanguage(languageId);
|
|
1092
|
+
if (!language)
|
|
1093
|
+
return null;
|
|
1094
|
+
try {
|
|
1095
|
+
const Query = (await loadWebTreeSitter()).Query;
|
|
1096
|
+
const query = new Query(language, queryStr);
|
|
1097
|
+
const result = { query, metavars, postFilter, postFilterParams };
|
|
1098
|
+
this.cacheQuery(cacheKey, result);
|
|
1099
|
+
return result;
|
|
1100
|
+
} catch (err) {
|
|
1101
|
+
this.reportWasmAbort(err);
|
|
1102
|
+
this.dbg(`Raw query compilation failed (${queryId}): ${err}`);
|
|
1103
|
+
this.reportQueryCompileFailure(queryId, languageId, err);
|
|
1104
|
+
return null;
|
|
1105
|
+
}
|
|
1106
|
+
}
|
|
1107
|
+
reportedCompileFailures = new Set;
|
|
1108
|
+
reportQueryCompileFailure(ruleId, languageId, err) {
|
|
1109
|
+
const key = `${ruleId}:${languageId}`;
|
|
1110
|
+
if (this.reportedCompileFailures.has(key))
|
|
1111
|
+
return;
|
|
1112
|
+
this.reportedCompileFailures.add(key);
|
|
1113
|
+
logTreeSitterDiagnostic({
|
|
1114
|
+
subsystem: "tree-sitter-client",
|
|
1115
|
+
languageId,
|
|
1116
|
+
message: `tree-sitter rule '${ruleId}' failed to compile against '${languageId}' — ` + `matches for this rule are silently dropped rather than reported. ` + `Fix the query in the rule definition to re-enable it. (${err})`,
|
|
1117
|
+
metadata: { ruleId }
|
|
1118
|
+
});
|
|
1119
|
+
}
|
|
1120
|
+
hasChildToken(node, token) {
|
|
1121
|
+
return node.children?.some((child) => child.type === token || child.text === token);
|
|
1122
|
+
}
|
|
1123
|
+
bindingNames(node) {
|
|
1124
|
+
const names = new Set;
|
|
1125
|
+
if (!node)
|
|
1126
|
+
return names;
|
|
1127
|
+
const stack = [node];
|
|
1128
|
+
while (stack.length > 0) {
|
|
1129
|
+
const current = stack.pop();
|
|
1130
|
+
if (current.type === "identifier")
|
|
1131
|
+
names.add(current.text);
|
|
1132
|
+
else if (current.type === "shorthand_property_identifier_pattern") {
|
|
1133
|
+
names.add(current.text);
|
|
1134
|
+
}
|
|
1135
|
+
if (current.type === "property_identifier" || current.type === "type_identifier" || current.type === "computed_property_name")
|
|
1136
|
+
continue;
|
|
1137
|
+
if (current.type === "assignment_pattern" || current.type === "object_assignment_pattern") {
|
|
1138
|
+
const left = current.childForFieldName?.("left");
|
|
1139
|
+
if (left)
|
|
1140
|
+
stack.push(left);
|
|
1141
|
+
continue;
|
|
1142
|
+
}
|
|
1143
|
+
stack.push(...current.children ?? []);
|
|
1144
|
+
}
|
|
1145
|
+
return names;
|
|
1146
|
+
}
|
|
1147
|
+
containsYieldInFunctionBody(node, root = node) {
|
|
1148
|
+
for (const child of node.children ?? []) {
|
|
1149
|
+
if (child.type === "yield")
|
|
1150
|
+
return true;
|
|
1151
|
+
if (child !== root && ["function_definition", "class_definition", "lambda"].includes(child.type)) {
|
|
1152
|
+
continue;
|
|
1153
|
+
}
|
|
1154
|
+
if (this.containsYieldInFunctionBody(child, root))
|
|
1155
|
+
return true;
|
|
1156
|
+
}
|
|
1157
|
+
return false;
|
|
1158
|
+
}
|
|
1159
|
+
isLikelySqlAlchemyReceiver(text) {
|
|
1160
|
+
const tail = text.split(".").pop() ?? text;
|
|
1161
|
+
return new Set([
|
|
1162
|
+
"session",
|
|
1163
|
+
"db_session",
|
|
1164
|
+
"async_session",
|
|
1165
|
+
"sync_session"
|
|
1166
|
+
]).has(tail.toLowerCase());
|
|
1167
|
+
}
|
|
1168
|
+
switchCaseBodyStatements(caseNode) {
|
|
1169
|
+
const named = (caseNode.children ?? []).filter((c) => c.isNamed && !c.type.includes("comment"));
|
|
1170
|
+
return named.slice(1);
|
|
1171
|
+
}
|
|
1172
|
+
hasFallthroughMarker(caseNode) {
|
|
1173
|
+
const comments = [];
|
|
1174
|
+
const body = this.switchCaseBodyStatements(caseNode);
|
|
1175
|
+
const last = body[body.length - 1];
|
|
1176
|
+
const lastEnd = last?.endIndex ?? caseNode.startIndex;
|
|
1177
|
+
for (const c of caseNode.children ?? []) {
|
|
1178
|
+
if (c.type.includes("comment") && c.startIndex >= lastEnd) {
|
|
1179
|
+
comments.push(c);
|
|
1180
|
+
}
|
|
1181
|
+
}
|
|
1182
|
+
const siblings = (caseNode.parent?.children ?? []).filter((c) => c.isNamed);
|
|
1183
|
+
const index = siblings.findIndex((c) => c.startIndex === caseNode.startIndex);
|
|
1184
|
+
const next = index >= 0 ? siblings[index + 1] : undefined;
|
|
1185
|
+
if (next?.type.includes("comment"))
|
|
1186
|
+
comments.push(next);
|
|
1187
|
+
if (last) {
|
|
1188
|
+
const NESTED_FN = new Set([
|
|
1189
|
+
"function_declaration",
|
|
1190
|
+
"function_expression",
|
|
1191
|
+
"arrow_function",
|
|
1192
|
+
"method_definition",
|
|
1193
|
+
"generator_function",
|
|
1194
|
+
"generator_function_declaration",
|
|
1195
|
+
"class_declaration"
|
|
1196
|
+
]);
|
|
1197
|
+
const stack = [last];
|
|
1198
|
+
for (let visited = 0;stack.length > 0 && visited < 500; visited++) {
|
|
1199
|
+
const node = stack.pop();
|
|
1200
|
+
if (!node)
|
|
1201
|
+
break;
|
|
1202
|
+
if (node.type.includes("comment"))
|
|
1203
|
+
comments.push(node);
|
|
1204
|
+
if (!NESTED_FN.has(node.type)) {
|
|
1205
|
+
stack.push(...node.children ?? []);
|
|
1206
|
+
}
|
|
1207
|
+
}
|
|
1208
|
+
}
|
|
1209
|
+
return comments.some((c) => /falls?\s?through/i.test(c.text));
|
|
1210
|
+
}
|
|
1211
|
+
statementTerminates(node, depth = 0) {
|
|
1212
|
+
if (depth > 20)
|
|
1213
|
+
return false;
|
|
1214
|
+
const t = node.type;
|
|
1215
|
+
const TERMINATORS = new Set([
|
|
1216
|
+
"break_statement",
|
|
1217
|
+
"return_statement",
|
|
1218
|
+
"throw_statement",
|
|
1219
|
+
"continue_statement"
|
|
1220
|
+
]);
|
|
1221
|
+
if (TERMINATORS.has(t))
|
|
1222
|
+
return true;
|
|
1223
|
+
if (t === "statement_block" || t === "else_clause" || t === "catch_clause" || t === "finally_clause") {
|
|
1224
|
+
const inner = (node.children ?? []).filter((c) => c.isNamed && !c.type.includes("comment"));
|
|
1225
|
+
const last = inner[inner.length - 1];
|
|
1226
|
+
if (!last)
|
|
1227
|
+
return false;
|
|
1228
|
+
return this.statementTerminates(last, depth + 1);
|
|
1229
|
+
}
|
|
1230
|
+
if (t === "try_statement") {
|
|
1231
|
+
const tryBody = (node.children ?? []).find((c) => c.type === "statement_block");
|
|
1232
|
+
const tryTerminates = tryBody ? this.statementTerminates(tryBody, depth + 1) : false;
|
|
1233
|
+
const catches = (node.children ?? []).filter((c) => c.type === "catch_clause");
|
|
1234
|
+
const fin = (node.children ?? []).find((c) => c.type === "finally_clause");
|
|
1235
|
+
if (tryTerminates) {
|
|
1236
|
+
return catches.every((c) => this.statementTerminates(c, depth + 1));
|
|
1237
|
+
}
|
|
1238
|
+
return !!fin && this.statementTerminates(fin, depth + 1);
|
|
1239
|
+
}
|
|
1240
|
+
if (t === "if_statement") {
|
|
1241
|
+
const named = (node.children ?? []).filter((c) => c.isNamed && !c.type.includes("comment"));
|
|
1242
|
+
const consequence = named[1];
|
|
1243
|
+
const alternative = named[2];
|
|
1244
|
+
if (!consequence || !alternative)
|
|
1245
|
+
return false;
|
|
1246
|
+
return this.statementTerminates(consequence, depth + 1) && this.statementTerminates(alternative, depth + 1);
|
|
1247
|
+
}
|
|
1248
|
+
return false;
|
|
1249
|
+
}
|
|
1250
|
+
nextSiblingIsSwitchLabel(caseNode) {
|
|
1251
|
+
const siblings = (caseNode.parent?.children ?? []).filter((c) => c.isNamed && !c.type.includes("comment"));
|
|
1252
|
+
const index = siblings.findIndex((c) => c.startIndex === caseNode.startIndex);
|
|
1253
|
+
const next = index >= 0 ? siblings[index + 1] : undefined;
|
|
1254
|
+
return next?.type === "switch_case" || next?.type === "switch_default";
|
|
1255
|
+
}
|
|
1256
|
+
bodyHasLoopExit(node, insideNestedLoop) {
|
|
1257
|
+
const NESTS_BREAK = new Set([
|
|
1258
|
+
"for_statement",
|
|
1259
|
+
"for_in_statement",
|
|
1260
|
+
"while_statement",
|
|
1261
|
+
"do_statement",
|
|
1262
|
+
"switch_statement"
|
|
1263
|
+
]);
|
|
1264
|
+
const NESTED_FN = new Set([
|
|
1265
|
+
"function_declaration",
|
|
1266
|
+
"function_expression",
|
|
1267
|
+
"arrow_function",
|
|
1268
|
+
"method_definition",
|
|
1269
|
+
"generator_function",
|
|
1270
|
+
"generator_function_declaration",
|
|
1271
|
+
"class_declaration"
|
|
1272
|
+
]);
|
|
1273
|
+
for (const child of node.children ?? []) {
|
|
1274
|
+
const t = child.type;
|
|
1275
|
+
if (NESTED_FN.has(t))
|
|
1276
|
+
continue;
|
|
1277
|
+
if (t === "return_statement" || t === "throw_statement")
|
|
1278
|
+
return true;
|
|
1279
|
+
if (t === "break_statement") {
|
|
1280
|
+
const labeled = (child.children ?? []).some((c) => c.isNamed);
|
|
1281
|
+
if (!insideNestedLoop || labeled)
|
|
1282
|
+
return true;
|
|
1283
|
+
}
|
|
1284
|
+
if (this.bodyHasLoopExit(child, insideNestedLoop || NESTS_BREAK.has(t))) {
|
|
1285
|
+
return true;
|
|
1286
|
+
}
|
|
1287
|
+
}
|
|
1288
|
+
return false;
|
|
1289
|
+
}
|
|
1290
|
+
enclosingBindingName(node) {
|
|
1291
|
+
let cur = node?.parent;
|
|
1292
|
+
for (let depth = 0;cur && depth < 12; depth++) {
|
|
1293
|
+
const t = cur.type;
|
|
1294
|
+
if (t === "variable_declarator") {
|
|
1295
|
+
const name = cur.children?.find((c) => c.isNamed);
|
|
1296
|
+
return name?.text ?? "";
|
|
1297
|
+
}
|
|
1298
|
+
if (t === "assignment_expression") {
|
|
1299
|
+
return cur.children?.[0]?.text ?? "";
|
|
1300
|
+
}
|
|
1301
|
+
if (t === "statement_block" || t === "program" || t === "function_declaration" || t === "function_expression" || t === "arrow_function" || t === "method_definition") {
|
|
1302
|
+
return "";
|
|
1303
|
+
}
|
|
1304
|
+
cur = cur.parent;
|
|
1305
|
+
}
|
|
1306
|
+
return "";
|
|
1307
|
+
}
|
|
1308
|
+
resolvesToFileLiteralConst(name, rootNode) {
|
|
1309
|
+
const valueNode = this.resolveFileConstValueNode(name, rootNode);
|
|
1310
|
+
if (!valueNode)
|
|
1311
|
+
return false;
|
|
1312
|
+
return this.isFixedUrlLiteralExpr(valueNode);
|
|
1313
|
+
}
|
|
1314
|
+
resolveFileConstValueNode(name, rootNode) {
|
|
1315
|
+
const constDeclarators = [];
|
|
1316
|
+
let hasNonConstBinding = false;
|
|
1317
|
+
let hasReassignment = false;
|
|
1318
|
+
const stack = [rootNode];
|
|
1319
|
+
while (stack.length > 0) {
|
|
1320
|
+
const node = stack.pop();
|
|
1321
|
+
if (!node)
|
|
1322
|
+
continue;
|
|
1323
|
+
if (node.type === "variable_declarator") {
|
|
1324
|
+
const nameNode = node.childForFieldName?.("name");
|
|
1325
|
+
if (nameNode?.type === "identifier" && nameNode.text === name) {
|
|
1326
|
+
const decl = node.parent;
|
|
1327
|
+
const isConst = decl?.type === "lexical_declaration" && (decl.children ?? []).some((c) => c.type === "const");
|
|
1328
|
+
if (isConst) {
|
|
1329
|
+
constDeclarators.push(node);
|
|
1330
|
+
} else {
|
|
1331
|
+
hasNonConstBinding = true;
|
|
1332
|
+
}
|
|
1333
|
+
}
|
|
1334
|
+
} else if (node.type === "assignment_expression" || node.type === "augmented_assignment_expression") {
|
|
1335
|
+
const left = node.childForFieldName?.("left");
|
|
1336
|
+
if (left?.type === "identifier" && left.text === name) {
|
|
1337
|
+
hasReassignment = true;
|
|
1338
|
+
} else if ((left?.type === "member_expression" || left?.type === "subscript_expression") && left.childForFieldName?.("object")?.type === "identifier" && left.childForFieldName?.("object")?.text === name) {
|
|
1339
|
+
const searchOnly = left.type === "member_expression" && left.childForFieldName?.("property")?.text === "search";
|
|
1340
|
+
if (!searchOnly) {
|
|
1341
|
+
hasReassignment = true;
|
|
1342
|
+
}
|
|
1343
|
+
}
|
|
1344
|
+
}
|
|
1345
|
+
for (const child of node.children ?? [])
|
|
1346
|
+
stack.push(child);
|
|
1347
|
+
}
|
|
1348
|
+
if (hasNonConstBinding || hasReassignment || constDeclarators.length !== 1) {
|
|
1349
|
+
return null;
|
|
1350
|
+
}
|
|
1351
|
+
return constDeclarators[0].childForFieldName?.("value") ?? null;
|
|
1352
|
+
}
|
|
1353
|
+
isFixedUrlLiteralExpr(node) {
|
|
1354
|
+
if (node.type === "string")
|
|
1355
|
+
return true;
|
|
1356
|
+
if (node.type === "template_string") {
|
|
1357
|
+
return !(node.children ?? []).some((c) => c.type === "template_substitution");
|
|
1358
|
+
}
|
|
1359
|
+
return false;
|
|
1360
|
+
}
|
|
1361
|
+
isImportedBinding(name, rootNode) {
|
|
1362
|
+
return this.importedAs(name, rootNode) !== null;
|
|
1363
|
+
}
|
|
1364
|
+
importedAs(name, rootNode) {
|
|
1365
|
+
const stack = [rootNode];
|
|
1366
|
+
while (stack.length > 0) {
|
|
1367
|
+
const node = stack.pop();
|
|
1368
|
+
if (!node)
|
|
1369
|
+
continue;
|
|
1370
|
+
if (node.type === "import_specifier") {
|
|
1371
|
+
const nameNode = node.childForFieldName?.("name");
|
|
1372
|
+
const aliasNode = node.childForFieldName?.("alias");
|
|
1373
|
+
const local = (aliasNode ?? nameNode)?.text;
|
|
1374
|
+
if (local === name)
|
|
1375
|
+
return nameNode?.text ?? null;
|
|
1376
|
+
} else if (node.type === "namespace_import" || node.type === "import_clause") {
|
|
1377
|
+
for (const c of node.children ?? []) {
|
|
1378
|
+
if (c.type === "identifier" && c.text === name)
|
|
1379
|
+
return name;
|
|
1380
|
+
}
|
|
1381
|
+
}
|
|
1382
|
+
for (const child of node.children ?? [])
|
|
1383
|
+
stack.push(child);
|
|
1384
|
+
}
|
|
1385
|
+
return null;
|
|
1386
|
+
}
|
|
1387
|
+
isFixedUrlBaseExpr(base, rootNode) {
|
|
1388
|
+
if (base.type === "string")
|
|
1389
|
+
return true;
|
|
1390
|
+
if (base.type === "identifier") {
|
|
1391
|
+
return this.isFixedBaseIdentifier(base, rootNode);
|
|
1392
|
+
}
|
|
1393
|
+
if (base.type === "template_string") {
|
|
1394
|
+
for (const child of base.children ?? []) {
|
|
1395
|
+
if (child.type !== "template_substitution")
|
|
1396
|
+
continue;
|
|
1397
|
+
const inner = (child.children ?? []).find((c) => c.isNamed);
|
|
1398
|
+
if (!inner || inner.type !== "identifier" || !this.isFixedBaseIdentifier(inner, rootNode)) {
|
|
1399
|
+
return false;
|
|
1400
|
+
}
|
|
1401
|
+
}
|
|
1402
|
+
return true;
|
|
1403
|
+
}
|
|
1404
|
+
return false;
|
|
1405
|
+
}
|
|
1406
|
+
isFixedBaseIdentifier(ident, rootNode) {
|
|
1407
|
+
const name = ident.text;
|
|
1408
|
+
if (!this.isShadowedByEnclosingParam(ident, name) && this.resolvesToFileLiteralConst(name, rootNode)) {
|
|
1409
|
+
return true;
|
|
1410
|
+
}
|
|
1411
|
+
return this.isImportedBinding(name, rootNode);
|
|
1412
|
+
}
|
|
1413
|
+
isShadowedByEnclosingParam(node, name) {
|
|
1414
|
+
const FUNCTION_TYPES = new Set([
|
|
1415
|
+
"function_declaration",
|
|
1416
|
+
"function_expression",
|
|
1417
|
+
"generator_function",
|
|
1418
|
+
"generator_function_declaration",
|
|
1419
|
+
"arrow_function",
|
|
1420
|
+
"method_definition"
|
|
1421
|
+
]);
|
|
1422
|
+
let current = node.parent;
|
|
1423
|
+
while (current) {
|
|
1424
|
+
if (FUNCTION_TYPES.has(current.type)) {
|
|
1425
|
+
const bare = current.childForFieldName?.("parameter");
|
|
1426
|
+
if (bare?.type === "identifier" && bare.text === name)
|
|
1427
|
+
return true;
|
|
1428
|
+
const params = current.childForFieldName?.("parameters");
|
|
1429
|
+
if (params && this.paramsBindName(params, name))
|
|
1430
|
+
return true;
|
|
1431
|
+
}
|
|
1432
|
+
current = current.parent;
|
|
1433
|
+
}
|
|
1434
|
+
return false;
|
|
1435
|
+
}
|
|
1436
|
+
paramsBindName(params, name) {
|
|
1437
|
+
for (const param of params.children ?? []) {
|
|
1438
|
+
if (!param.isNamed)
|
|
1439
|
+
continue;
|
|
1440
|
+
const pattern = param.type === "required_parameter" || param.type === "optional_parameter" ? param.childForFieldName?.("pattern") : param;
|
|
1441
|
+
if (pattern && this.patternBindsName(pattern, name))
|
|
1442
|
+
return true;
|
|
1443
|
+
}
|
|
1444
|
+
return false;
|
|
1445
|
+
}
|
|
1446
|
+
patternBindsName(pattern, name) {
|
|
1447
|
+
if (pattern.type === "identifier")
|
|
1448
|
+
return pattern.text === name;
|
|
1449
|
+
const stack = [pattern];
|
|
1450
|
+
while (stack.length > 0) {
|
|
1451
|
+
const n = stack.pop();
|
|
1452
|
+
if (!n)
|
|
1453
|
+
continue;
|
|
1454
|
+
if ((n.type === "identifier" || n.type === "shorthand_property_identifier_pattern") && n.text === name) {
|
|
1455
|
+
return true;
|
|
1456
|
+
}
|
|
1457
|
+
if (n.type === "assignment_pattern") {
|
|
1458
|
+
const left = n.childForFieldName?.("left") ?? n.children?.[0];
|
|
1459
|
+
if (left)
|
|
1460
|
+
stack.push(left);
|
|
1461
|
+
continue;
|
|
1462
|
+
}
|
|
1463
|
+
for (const c of n.children ?? [])
|
|
1464
|
+
stack.push(c);
|
|
1465
|
+
}
|
|
1466
|
+
return false;
|
|
1467
|
+
}
|
|
1468
|
+
resolvesToFixedNewUrlConst(name, rootNode) {
|
|
1469
|
+
const value = this.resolveFileConstValueNode(name, rootNode);
|
|
1470
|
+
if (!value || value.type !== "new_expression")
|
|
1471
|
+
return false;
|
|
1472
|
+
const ctor = value.childForFieldName?.("constructor");
|
|
1473
|
+
const ctorName = ctor?.text ?? "";
|
|
1474
|
+
const isUrlCtor = ctorName === "URL" || ctor?.type === "identifier" && this.importedAs(ctorName, rootNode) === "URL";
|
|
1475
|
+
if (!isUrlCtor)
|
|
1476
|
+
return false;
|
|
1477
|
+
const args = (value.childForFieldName?.("arguments")?.children ?? []).filter((c) => c.isNamed && c.type !== "comment");
|
|
1478
|
+
if (args.length === 0)
|
|
1479
|
+
return false;
|
|
1480
|
+
if (!this.isFixedUrlLiteralExpr(args[0]))
|
|
1481
|
+
return false;
|
|
1482
|
+
if (args.length === 1)
|
|
1483
|
+
return true;
|
|
1484
|
+
return this.isFixedUrlBaseExpr(args[1], rootNode);
|
|
1485
|
+
}
|
|
1486
|
+
newUrlBaseVarName(urlNode) {
|
|
1487
|
+
let member;
|
|
1488
|
+
if (urlNode.type === "call_expression") {
|
|
1489
|
+
member = urlNode.childForFieldName?.("function");
|
|
1490
|
+
} else if (urlNode.type === "member_expression") {
|
|
1491
|
+
member = urlNode;
|
|
1492
|
+
}
|
|
1493
|
+
if (!member || member.type !== "member_expression")
|
|
1494
|
+
return null;
|
|
1495
|
+
const prop = member.childForFieldName?.("property")?.text;
|
|
1496
|
+
if (prop !== "toString" && prop !== "href")
|
|
1497
|
+
return null;
|
|
1498
|
+
const object = member.childForFieldName?.("object");
|
|
1499
|
+
if (object?.type !== "identifier")
|
|
1500
|
+
return null;
|
|
1501
|
+
return object.text;
|
|
1502
|
+
}
|
|
1503
|
+
isSafeSqlAlchemyExpressionCall(node) {
|
|
1504
|
+
if (node.type !== "call")
|
|
1505
|
+
return false;
|
|
1506
|
+
const callee = node.children?.[0]?.text ?? "";
|
|
1507
|
+
const expression = node.text;
|
|
1508
|
+
return ["select", "insert", "update", "delete"].some((name) => callee === name || expression.startsWith(`${name}(`));
|
|
1509
|
+
}
|
|
1510
|
+
applyPostFilter(postFilter, postFilterParams, captures, rootNode) {
|
|
1511
|
+
function extractSlots(classNode) {
|
|
1512
|
+
const classText = classNode.text ?? "";
|
|
1513
|
+
if (!classText.includes("__slots__"))
|
|
1514
|
+
return null;
|
|
1515
|
+
const body = classNode.children?.find((c) => c.type === "block");
|
|
1516
|
+
if (!body)
|
|
1517
|
+
return null;
|
|
1518
|
+
const slots = [];
|
|
1519
|
+
for (const stmt of body.children ?? []) {
|
|
1520
|
+
if (stmt.type !== "expression_statement")
|
|
1521
|
+
continue;
|
|
1522
|
+
const assignment = stmt.children?.find((c) => c.type === "assignment");
|
|
1523
|
+
if (!assignment)
|
|
1524
|
+
continue;
|
|
1525
|
+
const lhsText = (assignment.children?.[0]?.text ?? "").trim();
|
|
1526
|
+
if (lhsText !== "__slots__")
|
|
1527
|
+
continue;
|
|
1528
|
+
const rhs = assignment.children?.[2];
|
|
1529
|
+
if (!rhs)
|
|
1530
|
+
continue;
|
|
1531
|
+
if (rhs.type === "string") {
|
|
1532
|
+
const s = (rhs.text ?? "").replace(/^["']|["']$/g, "");
|
|
1533
|
+
if (s)
|
|
1534
|
+
slots.push(s);
|
|
1535
|
+
} else if (rhs.type === "tuple" || rhs.type === "list") {
|
|
1536
|
+
for (const el of rhs.children ?? []) {
|
|
1537
|
+
if (!el.isNamed)
|
|
1538
|
+
continue;
|
|
1539
|
+
if (el.type === "string") {
|
|
1540
|
+
slots.push((el.text ?? "").replace(/^["']|["']$/g, ""));
|
|
1541
|
+
}
|
|
1542
|
+
}
|
|
1543
|
+
}
|
|
1544
|
+
break;
|
|
1545
|
+
}
|
|
1546
|
+
return slots;
|
|
1547
|
+
}
|
|
1548
|
+
function escapeRegExp(s) {
|
|
1549
|
+
return s.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
|
|
1550
|
+
}
|
|
1551
|
+
switch (postFilter) {
|
|
1552
|
+
case "no_nested_anchor_chain": {
|
|
1553
|
+
try {
|
|
1554
|
+
const outer = captures.OUTER_ELEMENT;
|
|
1555
|
+
if (!outer) {
|
|
1556
|
+
this.reportPostFilterFailure(postFilter, "missing OUTER_ELEMENT capture");
|
|
1557
|
+
return true;
|
|
1558
|
+
}
|
|
1559
|
+
const isAnchorElement = (node) => {
|
|
1560
|
+
if (node.type !== "jsx_element")
|
|
1561
|
+
return false;
|
|
1562
|
+
const opening = node.childForFieldName?.("open_tag") ?? node.children?.find((child) => child.type === "jsx_opening_element");
|
|
1563
|
+
const name = opening?.childForFieldName?.("name") ?? opening?.children?.find((child) => child.type === "identifier");
|
|
1564
|
+
return name?.text === "a";
|
|
1565
|
+
};
|
|
1566
|
+
let visited = 0;
|
|
1567
|
+
let ancestor = outer.parent;
|
|
1568
|
+
while (ancestor) {
|
|
1569
|
+
if (++visited > NO_NESTED_ANCHOR_VISIT_CAP) {
|
|
1570
|
+
this.reportPostFilterFailure(postFilter, `ancestor walk exceeded ${NO_NESTED_ANCHOR_VISIT_CAP} nodes`);
|
|
1571
|
+
return true;
|
|
1572
|
+
}
|
|
1573
|
+
if (isAnchorElement(ancestor))
|
|
1574
|
+
return false;
|
|
1575
|
+
ancestor = ancestor.parent;
|
|
1576
|
+
}
|
|
1577
|
+
const pending = [...outer.children ?? []];
|
|
1578
|
+
while (pending.length > 0) {
|
|
1579
|
+
const node = pending.pop();
|
|
1580
|
+
if (!node)
|
|
1581
|
+
continue;
|
|
1582
|
+
if (++visited > NO_NESTED_ANCHOR_VISIT_CAP) {
|
|
1583
|
+
this.reportPostFilterFailure(postFilter, `descendant walk exceeded ${NO_NESTED_ANCHOR_VISIT_CAP} nodes`);
|
|
1584
|
+
return true;
|
|
1585
|
+
}
|
|
1586
|
+
if (isAnchorElement(node))
|
|
1587
|
+
return true;
|
|
1588
|
+
pending.push(...node.children ?? []);
|
|
1589
|
+
}
|
|
1590
|
+
return false;
|
|
1591
|
+
} catch (error) {
|
|
1592
|
+
const reason = error instanceof Error ? error.message : String(error);
|
|
1593
|
+
this.reportPostFilterFailure(postFilter, `tree walk failed${reason ? `: ${reason}` : ""}`);
|
|
1594
|
+
return true;
|
|
1595
|
+
}
|
|
1596
|
+
}
|
|
1597
|
+
case "differs_only_by_case": {
|
|
1598
|
+
try {
|
|
1599
|
+
const field = captures.FIELD?.text ?? "";
|
|
1600
|
+
const method = captures.METHOD?.text ?? "";
|
|
1601
|
+
return field !== method && field.toLocaleLowerCase() === method.toLocaleLowerCase();
|
|
1602
|
+
} catch {
|
|
1603
|
+
return true;
|
|
1604
|
+
}
|
|
1605
|
+
}
|
|
1606
|
+
case "in_default_package": {
|
|
1607
|
+
try {
|
|
1608
|
+
if (!rootNode)
|
|
1609
|
+
return true;
|
|
1610
|
+
return !(rootNode.children ?? []).some((node) => node.type === "package_declaration");
|
|
1611
|
+
} catch {
|
|
1612
|
+
return true;
|
|
1613
|
+
}
|
|
1614
|
+
}
|
|
1615
|
+
case "missing_mimetype_and_download_name": {
|
|
1616
|
+
try {
|
|
1617
|
+
const firstArg = captures.FIRST_ARG;
|
|
1618
|
+
if (!firstArg)
|
|
1619
|
+
return true;
|
|
1620
|
+
if (firstArg.type === "string")
|
|
1621
|
+
return false;
|
|
1622
|
+
const args = firstArg.parent;
|
|
1623
|
+
if (!args)
|
|
1624
|
+
return true;
|
|
1625
|
+
return !(args.children ?? []).some((node) => {
|
|
1626
|
+
if (node.type !== "keyword_argument")
|
|
1627
|
+
return false;
|
|
1628
|
+
const name = node.childForFieldName?.("name")?.text;
|
|
1629
|
+
return name === "mimetype" || name === "download_name";
|
|
1630
|
+
});
|
|
1631
|
+
} catch {
|
|
1632
|
+
return true;
|
|
1633
|
+
}
|
|
1634
|
+
}
|
|
1635
|
+
case "missing_super_call": {
|
|
1636
|
+
try {
|
|
1637
|
+
const body = captures.BODY;
|
|
1638
|
+
const method = captures.METHOD?.text ?? "";
|
|
1639
|
+
if (!body || !method)
|
|
1640
|
+
return true;
|
|
1641
|
+
const stack = [body];
|
|
1642
|
+
for (let visited = 0;stack.length > 0 && visited < 1e4; visited++) {
|
|
1643
|
+
const node = stack.pop();
|
|
1644
|
+
if (!node)
|
|
1645
|
+
break;
|
|
1646
|
+
if (node.type === "method_invocation" && node.childForFieldName?.("object")?.text === "super" && node.childForFieldName?.("name")?.text === method) {
|
|
1647
|
+
return false;
|
|
1648
|
+
}
|
|
1649
|
+
stack.push(...node.children ?? []);
|
|
1650
|
+
}
|
|
1651
|
+
return true;
|
|
1652
|
+
} catch {
|
|
1653
|
+
return true;
|
|
1654
|
+
}
|
|
1655
|
+
}
|
|
1656
|
+
case "no_assertion_call": {
|
|
1657
|
+
try {
|
|
1658
|
+
const body = captures.BODY;
|
|
1659
|
+
if (!body)
|
|
1660
|
+
return true;
|
|
1661
|
+
const assertionNames = /^(?:assert\w*|fail|verify|expect|check|assume\w*)$/i;
|
|
1662
|
+
const stack = [body];
|
|
1663
|
+
for (let visited = 0;stack.length > 0 && visited < 1e4; visited++) {
|
|
1664
|
+
const node = stack.pop();
|
|
1665
|
+
if (!node)
|
|
1666
|
+
break;
|
|
1667
|
+
if (node.type === "method_invocation") {
|
|
1668
|
+
const name = node.childForFieldName?.("name")?.text ?? "";
|
|
1669
|
+
if (assertionNames.test(name))
|
|
1670
|
+
return false;
|
|
1671
|
+
}
|
|
1672
|
+
stack.push(...node.children ?? []);
|
|
1673
|
+
}
|
|
1674
|
+
return true;
|
|
1675
|
+
} catch {
|
|
1676
|
+
return true;
|
|
1677
|
+
}
|
|
1678
|
+
}
|
|
1679
|
+
case "not_closed_or_try_with_resources": {
|
|
1680
|
+
try {
|
|
1681
|
+
const declaration = captures.DECL;
|
|
1682
|
+
const resource = captures.RESOURCE?.text ?? "";
|
|
1683
|
+
if (!declaration || !resource)
|
|
1684
|
+
return true;
|
|
1685
|
+
const scope = this.navigator.findParent(declaration, [
|
|
1686
|
+
"method_declaration",
|
|
1687
|
+
"constructor_declaration",
|
|
1688
|
+
"block"
|
|
1689
|
+
]) ?? rootNode;
|
|
1690
|
+
if (!scope)
|
|
1691
|
+
return true;
|
|
1692
|
+
const resourceWord = new RegExp(`\\b${escapeRegExp(resource)}\\b`);
|
|
1693
|
+
const stack = [scope];
|
|
1694
|
+
for (let visited = 0;stack.length > 0 && visited < 1e4; visited++) {
|
|
1695
|
+
const node = stack.pop();
|
|
1696
|
+
if (!node)
|
|
1697
|
+
break;
|
|
1698
|
+
if (node.type === "method_invocation" && node.childForFieldName?.("object")?.text === resource && node.childForFieldName?.("name")?.text === "close") {
|
|
1699
|
+
return false;
|
|
1700
|
+
}
|
|
1701
|
+
if (node.type === "resource" && resourceWord.test(node.text ?? "")) {
|
|
1702
|
+
return false;
|
|
1703
|
+
}
|
|
1704
|
+
stack.push(...node.children ?? []);
|
|
1705
|
+
}
|
|
1706
|
+
return true;
|
|
1707
|
+
} catch {
|
|
1708
|
+
return true;
|
|
1709
|
+
}
|
|
1710
|
+
}
|
|
1711
|
+
case "same_method_no_base_case": {
|
|
1712
|
+
try {
|
|
1713
|
+
const method = captures.NAME?.text ?? "";
|
|
1714
|
+
if (!method || captures.RECURSE?.text !== method)
|
|
1715
|
+
return false;
|
|
1716
|
+
const call = captures.CALL;
|
|
1717
|
+
const declaration = call ? this.navigator.findParent(call, ["method_declaration"]) : undefined;
|
|
1718
|
+
if (!declaration)
|
|
1719
|
+
return true;
|
|
1720
|
+
const stack = [declaration];
|
|
1721
|
+
for (let visited = 0;stack.length > 0 && visited < 1e4; visited++) {
|
|
1722
|
+
const node = stack.pop();
|
|
1723
|
+
if (!node)
|
|
1724
|
+
break;
|
|
1725
|
+
if (node.type === "if_statement" || node.type === "switch_expression" || node.type === "switch_statement" || node.type === "while_statement" || node.type === "do_statement" || node.type === "for_statement" || node.type === "enhanced_for_statement" || node.type === "ternary_expression") {
|
|
1726
|
+
return false;
|
|
1727
|
+
}
|
|
1728
|
+
stack.push(...node.children ?? []);
|
|
1729
|
+
}
|
|
1730
|
+
return stack.length > 0 ? false : true;
|
|
1731
|
+
} catch {
|
|
1732
|
+
return true;
|
|
1733
|
+
}
|
|
1734
|
+
}
|
|
1735
|
+
case "memset_for_sensitive_data": {
|
|
1736
|
+
try {
|
|
1737
|
+
const destination = captures.DEST?.text ?? "";
|
|
1738
|
+
const value = captures.VALUE?.text?.trim() ?? "";
|
|
1739
|
+
if (!/^(?:0|0x0+|NULL|nullptr)$/.test(value))
|
|
1740
|
+
return false;
|
|
1741
|
+
return /(?:pass(?:word)?|passwd|secret|token|api_?key|private_?key|credential|auth|pin)/i.test(destination);
|
|
1742
|
+
} catch {
|
|
1743
|
+
return true;
|
|
1744
|
+
}
|
|
1745
|
+
}
|
|
1746
|
+
case "unsafe_regex_dynamic_identifier": {
|
|
1747
|
+
try {
|
|
1748
|
+
const interpolationNode = captures.INTERPOLATION;
|
|
1749
|
+
const interpolation = interpolationNode?.text ?? "";
|
|
1750
|
+
const identifier = interpolation.match(/^\$\{\s*([A-Za-z_$][\w$]*)\s*\}$/)?.[1];
|
|
1751
|
+
if (!identifier || !rootNode || !interpolationNode)
|
|
1752
|
+
return true;
|
|
1753
|
+
const useRow = interpolationNode.startPosition.row;
|
|
1754
|
+
const hasEscapeSignal = (text) => /\b(?:escape|Escape)\w*\s*\(/.test(text) || /\.\s*replace\s*\(\s*\//.test(text);
|
|
1755
|
+
let lastWriteRow = -1;
|
|
1756
|
+
let lastWriteSafe = false;
|
|
1757
|
+
const consider = (row, valueText) => {
|
|
1758
|
+
if (row >= useRow || row < lastWriteRow)
|
|
1759
|
+
return;
|
|
1760
|
+
lastWriteRow = row;
|
|
1761
|
+
lastWriteSafe = valueText !== undefined && hasEscapeSignal(valueText);
|
|
1762
|
+
};
|
|
1763
|
+
const stack = [rootNode];
|
|
1764
|
+
while (stack.length > 0) {
|
|
1765
|
+
const node = stack.pop();
|
|
1766
|
+
if (!node)
|
|
1767
|
+
continue;
|
|
1768
|
+
if (node.type === "variable_declarator") {
|
|
1769
|
+
const name = node.childForFieldName?.("name");
|
|
1770
|
+
if (name?.text === identifier) {
|
|
1771
|
+
const initializer = node.childForFieldName?.("value");
|
|
1772
|
+
consider(node.startPosition.row, initializer?.text);
|
|
1773
|
+
}
|
|
1774
|
+
} else if (node.type === "assignment_expression") {
|
|
1775
|
+
const left = node.childForFieldName?.("left");
|
|
1776
|
+
if (left?.type === "identifier" && left.text === identifier) {
|
|
1777
|
+
const right = node.childForFieldName?.("right");
|
|
1778
|
+
consider(node.startPosition.row, right?.text);
|
|
1779
|
+
}
|
|
1780
|
+
}
|
|
1781
|
+
stack.push(...node.children);
|
|
1782
|
+
}
|
|
1783
|
+
return lastWriteRow >= 0 && lastWriteSafe ? false : true;
|
|
1784
|
+
} catch {
|
|
1785
|
+
return true;
|
|
1786
|
+
}
|
|
1787
|
+
}
|
|
1788
|
+
case "is_generator_with_valued_return": {
|
|
1789
|
+
const returnNode = captures.RETURN;
|
|
1790
|
+
const functionNode = captures.FUNCTION ?? (returnNode ? this.navigator.findParent(returnNode, ["function_definition"]) : undefined);
|
|
1791
|
+
if (!functionNode)
|
|
1792
|
+
return false;
|
|
1793
|
+
if (this.hasChildToken(functionNode, "async"))
|
|
1794
|
+
return false;
|
|
1795
|
+
return this.containsYieldInFunctionBody(functionNode);
|
|
1796
|
+
}
|
|
1797
|
+
case "count_params": {
|
|
1798
|
+
const paramsNode = captures.PARAMS;
|
|
1799
|
+
if (!paramsNode)
|
|
1800
|
+
return true;
|
|
1801
|
+
const paramCount = paramsNode.children.filter((c) => {
|
|
1802
|
+
if (c.type !== "required_parameter")
|
|
1803
|
+
return false;
|
|
1804
|
+
if (c.text.includes("="))
|
|
1805
|
+
return false;
|
|
1806
|
+
if (c.children?.some((ch) => ch.text === "?"))
|
|
1807
|
+
return false;
|
|
1808
|
+
return true;
|
|
1809
|
+
}).length;
|
|
1810
|
+
return paramCount >= (postFilterParams?.min_params ?? 6);
|
|
1811
|
+
}
|
|
1812
|
+
case "empty_body": {
|
|
1813
|
+
const bodyNode = captures.BODY;
|
|
1814
|
+
if (!bodyNode)
|
|
1815
|
+
return true;
|
|
1816
|
+
const meaningful = bodyNode.children.filter((c) => c.isNamed && c.type !== "comment" && c.type !== "line_comment" && c.type !== "block_comment");
|
|
1817
|
+
return meaningful.length === 0;
|
|
1818
|
+
}
|
|
1819
|
+
case "is_empty_block": {
|
|
1820
|
+
const caseNode = captures.CASE;
|
|
1821
|
+
if (!caseNode)
|
|
1822
|
+
return false;
|
|
1823
|
+
if (this.switchCaseBodyStatements(caseNode).length > 0)
|
|
1824
|
+
return false;
|
|
1825
|
+
return !this.nextSiblingIsSwitchLabel(caseNode);
|
|
1826
|
+
}
|
|
1827
|
+
case "no_break_or_return_in_body": {
|
|
1828
|
+
const bodyNode = captures.BODY;
|
|
1829
|
+
if (!bodyNode)
|
|
1830
|
+
return false;
|
|
1831
|
+
return !this.bodyHasLoopExit(bodyNode, false);
|
|
1832
|
+
}
|
|
1833
|
+
case "same_param_name": {
|
|
1834
|
+
const first = this.bindingNames(captures.PARAM1);
|
|
1835
|
+
const second = this.bindingNames(captures.NAME);
|
|
1836
|
+
return [...first].some((name) => second.has(name));
|
|
1837
|
+
}
|
|
1838
|
+
case "no_terminating_statement": {
|
|
1839
|
+
const caseNode = captures.CASE;
|
|
1840
|
+
if (!caseNode)
|
|
1841
|
+
return false;
|
|
1842
|
+
if (this.hasFallthroughMarker(caseNode))
|
|
1843
|
+
return false;
|
|
1844
|
+
const body = this.switchCaseBodyStatements(caseNode);
|
|
1845
|
+
if (body.length === 0)
|
|
1846
|
+
return false;
|
|
1847
|
+
return !this.statementTerminates(body[body.length - 1]);
|
|
1848
|
+
}
|
|
1849
|
+
case "no_break_or_return": {
|
|
1850
|
+
const bodyNode = captures.BODY;
|
|
1851
|
+
if (!bodyNode)
|
|
1852
|
+
return false;
|
|
1853
|
+
return !this.bodyHasLoopExit(bodyNode, false);
|
|
1854
|
+
}
|
|
1855
|
+
case "is_double_checked_locking": {
|
|
1856
|
+
const outer = captures.FIELD?.text;
|
|
1857
|
+
const inner = captures.FIELD2?.text;
|
|
1858
|
+
return !!outer && outer === inner;
|
|
1859
|
+
}
|
|
1860
|
+
case "shadows_parent_field": {
|
|
1861
|
+
const parentName = captures.PARENT?.text;
|
|
1862
|
+
const fieldName = captures.NAME?.text;
|
|
1863
|
+
if (!parentName || !fieldName)
|
|
1864
|
+
return false;
|
|
1865
|
+
let root = captures.NAME;
|
|
1866
|
+
while (root.parent)
|
|
1867
|
+
root = root.parent;
|
|
1868
|
+
const stack = [root];
|
|
1869
|
+
while (stack.length) {
|
|
1870
|
+
const node = stack.pop();
|
|
1871
|
+
if (node.type === "class_declaration" && node.childForFieldName?.("name")?.text === parentName) {
|
|
1872
|
+
const body = node.childForFieldName?.("body");
|
|
1873
|
+
for (const member of body?.children ?? []) {
|
|
1874
|
+
if (member.type !== "field_declaration")
|
|
1875
|
+
continue;
|
|
1876
|
+
for (const declarator of member.children ?? []) {
|
|
1877
|
+
if (declarator.type === "variable_declarator" && declarator.childForFieldName?.("name")?.text === fieldName) {
|
|
1878
|
+
return true;
|
|
1879
|
+
}
|
|
1880
|
+
}
|
|
1881
|
+
}
|
|
1882
|
+
}
|
|
1883
|
+
for (const child of node.children ?? [])
|
|
1884
|
+
stack.push(child);
|
|
1885
|
+
}
|
|
1886
|
+
return false;
|
|
1887
|
+
}
|
|
1888
|
+
case "missing_break_between_cases": {
|
|
1889
|
+
const label = captures.LABEL;
|
|
1890
|
+
const group = label?.parent;
|
|
1891
|
+
if (!group)
|
|
1892
|
+
return false;
|
|
1893
|
+
const TERMINATORS = new Set([
|
|
1894
|
+
"break_statement",
|
|
1895
|
+
"return_statement",
|
|
1896
|
+
"throw_statement",
|
|
1897
|
+
"continue_statement",
|
|
1898
|
+
"yield_statement"
|
|
1899
|
+
]);
|
|
1900
|
+
for (const child of group.children ?? []) {
|
|
1901
|
+
if (TERMINATORS.has(child.type))
|
|
1902
|
+
return false;
|
|
1903
|
+
}
|
|
1904
|
+
return true;
|
|
1905
|
+
}
|
|
1906
|
+
case "scoped_lock_empty_args": {
|
|
1907
|
+
const decl = captures.DECL;
|
|
1908
|
+
if (!decl)
|
|
1909
|
+
return false;
|
|
1910
|
+
for (const sibling of decl.parent?.children ?? []) {
|
|
1911
|
+
if (sibling.type === "argument_list")
|
|
1912
|
+
return false;
|
|
1913
|
+
}
|
|
1914
|
+
return true;
|
|
1915
|
+
}
|
|
1916
|
+
case "calc_missing_spaces": {
|
|
1917
|
+
const text = captures.EXPR?.text ?? "";
|
|
1918
|
+
return /[\w%)][+-][\w.(]/.test(text);
|
|
1919
|
+
}
|
|
1920
|
+
case "bare_except_only": {
|
|
1921
|
+
const clauseNode = captures.CLAUSE;
|
|
1922
|
+
if (!clauseNode)
|
|
1923
|
+
return true;
|
|
1924
|
+
const hasExceptionSpec = clauseNode.children.some((c) => {
|
|
1925
|
+
if (!c.isNamed)
|
|
1926
|
+
return false;
|
|
1927
|
+
return c.type !== "block";
|
|
1928
|
+
});
|
|
1929
|
+
return !hasExceptionSpec;
|
|
1930
|
+
}
|
|
1931
|
+
case "eq_mod_fn": {
|
|
1932
|
+
const mod = captures.MOD?.text ?? "";
|
|
1933
|
+
const fn = captures.FN?.text ?? "";
|
|
1934
|
+
return mod === "threading" && fn === "Thread";
|
|
1935
|
+
}
|
|
1936
|
+
case "regex_first_arg_identifier": {
|
|
1937
|
+
const mod = captures.MOD?.text ?? "";
|
|
1938
|
+
if (mod !== "re")
|
|
1939
|
+
return false;
|
|
1940
|
+
const func = captures.FUNC?.text ?? "";
|
|
1941
|
+
if (!/^(compile|match|search|fullmatch|findall|finditer|sub|subn|split)$/.test(func)) {
|
|
1942
|
+
return false;
|
|
1943
|
+
}
|
|
1944
|
+
const argsNode = captures.ARGS;
|
|
1945
|
+
if (!argsNode)
|
|
1946
|
+
return false;
|
|
1947
|
+
const firstNamed = (argsNode.children ?? []).find((c) => c.isNamed);
|
|
1948
|
+
if (!firstNamed)
|
|
1949
|
+
return false;
|
|
1950
|
+
return firstNamed.type === "identifier";
|
|
1951
|
+
}
|
|
1952
|
+
case "open_mode_invalid": {
|
|
1953
|
+
const modeNode = captures.MODE;
|
|
1954
|
+
if (!modeNode)
|
|
1955
|
+
return false;
|
|
1956
|
+
const text = modeNode.text ?? "";
|
|
1957
|
+
const stripped = text.replace(/^["']|["']$/g, "");
|
|
1958
|
+
if (stripped.length === 0)
|
|
1959
|
+
return false;
|
|
1960
|
+
if (stripped.length === 1)
|
|
1961
|
+
return false;
|
|
1962
|
+
if (!/^[rwxabt+]+$/.test(stripped))
|
|
1963
|
+
return true;
|
|
1964
|
+
const validShape = /^[rwax][bt]?\+?$/;
|
|
1965
|
+
if (!validShape.test(stripped))
|
|
1966
|
+
return true;
|
|
1967
|
+
return false;
|
|
1968
|
+
}
|
|
1969
|
+
case "status_204_with_value_return": {
|
|
1970
|
+
const funcNode = captures.FUNC;
|
|
1971
|
+
const valNode = captures.VAL;
|
|
1972
|
+
if (!funcNode || !valNode)
|
|
1973
|
+
return false;
|
|
1974
|
+
if (Number(valNode.text ?? 0) !== 204)
|
|
1975
|
+
return false;
|
|
1976
|
+
const queue = [funcNode];
|
|
1977
|
+
while (queue.length > 0) {
|
|
1978
|
+
const node = queue.shift();
|
|
1979
|
+
if (node.type === "return_statement") {
|
|
1980
|
+
const hasValue = node.children.some((c) => c.isNamed && c.type !== "comment");
|
|
1981
|
+
if (hasValue)
|
|
1982
|
+
return true;
|
|
1983
|
+
}
|
|
1984
|
+
if (node.children)
|
|
1985
|
+
queue.push(...node.children);
|
|
1986
|
+
}
|
|
1987
|
+
return false;
|
|
1988
|
+
}
|
|
1989
|
+
case "has_mixed_async": {
|
|
1990
|
+
const bodyNode = captures.BODY;
|
|
1991
|
+
if (!bodyNode)
|
|
1992
|
+
return true;
|
|
1993
|
+
const bodyText = bodyNode.text;
|
|
1994
|
+
return bodyText.includes("await") && /\.\s*(then|catch)\s*\(/.test(bodyText);
|
|
1995
|
+
}
|
|
1996
|
+
case "format_arity_mismatch": {
|
|
1997
|
+
const formatNode = captures.FORMAT;
|
|
1998
|
+
const argsNode = captures.ARGS;
|
|
1999
|
+
if (!formatNode || !argsNode)
|
|
2000
|
+
return false;
|
|
2001
|
+
const fmtText = (formatNode.text ?? "").replace(/^["']|["']$/g, "");
|
|
2002
|
+
const fmt = fmtText;
|
|
2003
|
+
let placeholderCount = 0;
|
|
2004
|
+
const namedKeys = [];
|
|
2005
|
+
const positionalRegex = /%(?:\([^)]+\))?[#0\- +]*\d*(?:\.\d+)?[hlL]?[diouxXeEfFgGcrs%]/g;
|
|
2006
|
+
const positionalMatches = fmt.match(positionalRegex) ?? [];
|
|
2007
|
+
for (const m of positionalMatches) {
|
|
2008
|
+
if (m === "%%")
|
|
2009
|
+
continue;
|
|
2010
|
+
placeholderCount++;
|
|
2011
|
+
const namedMatch = m.match(/^%\(([^)]+)\)/);
|
|
2012
|
+
if (namedMatch)
|
|
2013
|
+
namedKeys.push(namedMatch[1]);
|
|
2014
|
+
}
|
|
2015
|
+
if (namedKeys.length > 0) {
|
|
2016
|
+
if (argsNode.type === "dictionary") {
|
|
2017
|
+
const dictKeys = [];
|
|
2018
|
+
for (const child of argsNode.children ?? []) {
|
|
2019
|
+
if (child.type === "pair" && child.children?.[0]) {
|
|
2020
|
+
dictKeys.push((child.children[0].text ?? "").replace(/^["']|["']$/g, ""));
|
|
2021
|
+
}
|
|
2022
|
+
}
|
|
2023
|
+
const missing = namedKeys.filter((k) => !dictKeys.includes(k));
|
|
2024
|
+
return missing.length > 0;
|
|
2025
|
+
}
|
|
2026
|
+
return true;
|
|
2027
|
+
}
|
|
2028
|
+
if (argsNode.type === "tuple") {
|
|
2029
|
+
const argCount = (argsNode.children ?? []).filter((c) => c.isNamed).length;
|
|
2030
|
+
if (argCount !== placeholderCount)
|
|
2031
|
+
return true;
|
|
2032
|
+
}
|
|
2033
|
+
return false;
|
|
2034
|
+
}
|
|
2035
|
+
case "aws_policy_public": {
|
|
2036
|
+
const policyNode = captures.POLICY;
|
|
2037
|
+
if (!policyNode)
|
|
2038
|
+
return false;
|
|
2039
|
+
const text = policyNode.text ?? "";
|
|
2040
|
+
const patterns = [
|
|
2041
|
+
/"Principal"\s*:\s*"\*"/,
|
|
2042
|
+
/"Principal"\s*:\s*\{\s*"AWS"\s*:\s*"\*"\s*\}/,
|
|
2043
|
+
/"Effect"\s*:\s*"Allow"[\s\S]*?"Action"\s*:\s*"\*"[\s\S]*?"Resource"\s*:\s*"\*"/,
|
|
2044
|
+
/"Principal"\s*:\s*"\*"/
|
|
2045
|
+
];
|
|
2046
|
+
return patterns.some((p) => p.test(text));
|
|
2047
|
+
}
|
|
2048
|
+
case "slots_attribute_mismatch": {
|
|
2049
|
+
const selfNode = captures.SELF;
|
|
2050
|
+
const attrNode = captures.ATTR;
|
|
2051
|
+
const methodNode = captures.METHOD;
|
|
2052
|
+
if (!selfNode || !attrNode || !methodNode)
|
|
2053
|
+
return false;
|
|
2054
|
+
if (selfNode.text !== "self")
|
|
2055
|
+
return false;
|
|
2056
|
+
const attrName = attrNode.text ?? "";
|
|
2057
|
+
let parent = methodNode.parent;
|
|
2058
|
+
while (parent && parent.type !== "class_definition") {
|
|
2059
|
+
parent = parent.parent;
|
|
2060
|
+
}
|
|
2061
|
+
if (!parent)
|
|
2062
|
+
return false;
|
|
2063
|
+
const slots = extractSlots(parent);
|
|
2064
|
+
if (slots === null || slots.length === 0)
|
|
2065
|
+
return false;
|
|
2066
|
+
return !slots.includes(attrName);
|
|
2067
|
+
}
|
|
2068
|
+
case "special_method_arity": {
|
|
2069
|
+
const nameNode = captures.NAME;
|
|
2070
|
+
const paramsNode = captures.PARAMS;
|
|
2071
|
+
if (!nameNode || !paramsNode)
|
|
2072
|
+
return false;
|
|
2073
|
+
const name = nameNode.text ?? "";
|
|
2074
|
+
const expected = {
|
|
2075
|
+
__del__: 0,
|
|
2076
|
+
__repr__: 0,
|
|
2077
|
+
__str__: 0,
|
|
2078
|
+
__hash__: 0,
|
|
2079
|
+
__bool__: 0,
|
|
2080
|
+
__len__: 0,
|
|
2081
|
+
__eq__: 1,
|
|
2082
|
+
__lt__: 1,
|
|
2083
|
+
__le__: 1,
|
|
2084
|
+
__gt__: 1,
|
|
2085
|
+
__ge__: 1,
|
|
2086
|
+
__ne__: 1
|
|
2087
|
+
};
|
|
2088
|
+
const expectedCount = expected[name];
|
|
2089
|
+
if (expectedCount === undefined)
|
|
2090
|
+
return false;
|
|
2091
|
+
const paramCount = (paramsNode.children ?? []).filter((c) => {
|
|
2092
|
+
if (c.type !== "identifier" && c.type !== "typed_parameter")
|
|
2093
|
+
return false;
|
|
2094
|
+
if (c.text.includes("="))
|
|
2095
|
+
return false;
|
|
2096
|
+
return true;
|
|
2097
|
+
}).length;
|
|
2098
|
+
return paramCount !== expectedCount + 1;
|
|
2099
|
+
}
|
|
2100
|
+
case "no_super_call": {
|
|
2101
|
+
const bodyNode = captures.BODY;
|
|
2102
|
+
if (!bodyNode)
|
|
2103
|
+
return true;
|
|
2104
|
+
return !/(?<!\/\/.*)super\s*\(/.test(bodyNode.text);
|
|
2105
|
+
}
|
|
2106
|
+
case "in_test_block": {
|
|
2107
|
+
const first = Object.values(captures)[0];
|
|
2108
|
+
return !!first && this.navigator.isInTestBlock(first);
|
|
2109
|
+
}
|
|
2110
|
+
case "not_in_test_block": {
|
|
2111
|
+
const first = Object.values(captures)[0];
|
|
2112
|
+
return !first || !this.navigator.isInTestBlock(first);
|
|
2113
|
+
}
|
|
2114
|
+
case "not_in_try_catch": {
|
|
2115
|
+
const first = Object.values(captures)[0];
|
|
2116
|
+
return !first || !this.navigator.isInTryCatch(first);
|
|
2117
|
+
}
|
|
2118
|
+
case "in_try_catch": {
|
|
2119
|
+
const first = Object.values(captures)[0];
|
|
2120
|
+
return !!first && this.navigator.isInTryCatch(first);
|
|
2121
|
+
}
|
|
2122
|
+
case "name_matches_param": {
|
|
2123
|
+
const nameNode = captures.NAME;
|
|
2124
|
+
const paramNode = captures.PARAM;
|
|
2125
|
+
return !!nameNode && !!paramNode && nameNode.text === paramNode.text;
|
|
2126
|
+
}
|
|
2127
|
+
case "not_in_function": {
|
|
2128
|
+
const first = Object.values(captures)[0];
|
|
2129
|
+
return !first || !this.navigator.isInside(first, [
|
|
2130
|
+
"function_definition",
|
|
2131
|
+
"function_declaration",
|
|
2132
|
+
"method_definition",
|
|
2133
|
+
"arrow_function"
|
|
2134
|
+
]);
|
|
2135
|
+
}
|
|
2136
|
+
case "check_secret_pattern": {
|
|
2137
|
+
const varName = captures.VARNAME?.text ?? "";
|
|
2138
|
+
const varNameLower = varName.toLowerCase();
|
|
2139
|
+
if (varName === varName.toUpperCase() && /[A-Z]/.test(varName)) {
|
|
2140
|
+
return false;
|
|
2141
|
+
}
|
|
2142
|
+
return [
|
|
2143
|
+
/api[_-]?key/,
|
|
2144
|
+
/api[_-]?secret/,
|
|
2145
|
+
/password/,
|
|
2146
|
+
/passwd/,
|
|
2147
|
+
/secret/,
|
|
2148
|
+
/token/,
|
|
2149
|
+
/auth/,
|
|
2150
|
+
/private[_-]?key/,
|
|
2151
|
+
/access[_-]?token/,
|
|
2152
|
+
/credentials/,
|
|
2153
|
+
/aws[_-]?secret/,
|
|
2154
|
+
/github[_-]?token/,
|
|
2155
|
+
/client[_-]?secret/
|
|
2156
|
+
].some((p) => p.test(varNameLower));
|
|
2157
|
+
}
|
|
2158
|
+
case "returns_error": {
|
|
2159
|
+
const first = Object.values(captures)[0];
|
|
2160
|
+
if (!first)
|
|
2161
|
+
return false;
|
|
2162
|
+
const funcNode = this.navigator.findParent(first, [
|
|
2163
|
+
"function_declaration",
|
|
2164
|
+
"method_declaration"
|
|
2165
|
+
]);
|
|
2166
|
+
if (!funcNode)
|
|
2167
|
+
return false;
|
|
2168
|
+
const signature = String(funcNode.text ?? "").split("{", 1)[0]?.trim() ?? "";
|
|
2169
|
+
const returnPart = signature.match(/func\s*(?:\([^)]*\)\s*)?[A-Za-z_]\w*\s*\([^)]*\)\s*(.*)$/s)?.[1]?.trim() ?? "";
|
|
2170
|
+
return returnPart.length > 0 && /\berror\b/.test(returnPart);
|
|
2171
|
+
}
|
|
2172
|
+
case "python_empty_except": {
|
|
2173
|
+
const bodyNode = captures.BODY;
|
|
2174
|
+
if (!bodyNode)
|
|
2175
|
+
return true;
|
|
2176
|
+
return !bodyNode.children.some((c) => c.isNamed && c.type !== "pass_statement" && c.type !== "comment");
|
|
2177
|
+
}
|
|
2178
|
+
case "check_in_operator_types": {
|
|
2179
|
+
const target = captures.TARGET;
|
|
2180
|
+
if (!target)
|
|
2181
|
+
return false;
|
|
2182
|
+
return ["none", "true", "false", "integer", "float"].includes(target.type);
|
|
2183
|
+
}
|
|
2184
|
+
case "torchscript_super_call": {
|
|
2185
|
+
const call = captures.CALL;
|
|
2186
|
+
if (!call)
|
|
2187
|
+
return false;
|
|
2188
|
+
const isTorchScriptDecorated = (node) => {
|
|
2189
|
+
const decorated = node?.parent;
|
|
2190
|
+
if (!decorated || decorated.type !== "decorated_definition")
|
|
2191
|
+
return false;
|
|
2192
|
+
return (decorated.children ?? []).some((c) => c.type === "decorator" && /^@(torch\.jit\.script|jit\.script)$/.test(c.text ?? ""));
|
|
2193
|
+
};
|
|
2194
|
+
const methodNode = this.navigator.findParent(call, [
|
|
2195
|
+
"function_definition"
|
|
2196
|
+
]);
|
|
2197
|
+
if (!methodNode)
|
|
2198
|
+
return false;
|
|
2199
|
+
const classNode = this.navigator.findParent(methodNode, [
|
|
2200
|
+
"class_definition"
|
|
2201
|
+
]);
|
|
2202
|
+
return isTorchScriptDecorated(methodNode) || isTorchScriptDecorated(classNode);
|
|
2203
|
+
}
|
|
2204
|
+
case "exit_params_insufficient": {
|
|
2205
|
+
const params = captures.PARAMS;
|
|
2206
|
+
if (!params)
|
|
2207
|
+
return true;
|
|
2208
|
+
const named = (params.children ?? []).filter((c) => c.isNamed);
|
|
2209
|
+
if (named.some((c) => c.type === "list_splat_pattern" || c.type === "dictionary_splat_pattern")) {
|
|
2210
|
+
return false;
|
|
2211
|
+
}
|
|
2212
|
+
return named.length < 4;
|
|
2213
|
+
}
|
|
2214
|
+
case "ruby_empty_rescue": {
|
|
2215
|
+
const bodyNode = captures.BODY;
|
|
2216
|
+
if (!bodyNode)
|
|
2217
|
+
return true;
|
|
2218
|
+
return !bodyNode.children.some((c) => c.isNamed && !["comment", "nil", "nil_literal"].includes(c.type));
|
|
2219
|
+
}
|
|
2220
|
+
case "ts_command_injection_sink":
|
|
2221
|
+
return captures.MOD?.text === "child_process" && /^(exec|execSync)$/.test(captures.FN?.text ?? "");
|
|
2222
|
+
case "ts_ssrf_sink": {
|
|
2223
|
+
const fn = captures.FN?.text ?? "";
|
|
2224
|
+
const obj = captures.OBJ?.text ?? "";
|
|
2225
|
+
const urlText = captures.URL?.text ?? "";
|
|
2226
|
+
const allowedFns = new Set([
|
|
2227
|
+
"fetch",
|
|
2228
|
+
"request",
|
|
2229
|
+
"get",
|
|
2230
|
+
"post",
|
|
2231
|
+
"put",
|
|
2232
|
+
"patch",
|
|
2233
|
+
"delete"
|
|
2234
|
+
]);
|
|
2235
|
+
if (!allowedFns.has(fn))
|
|
2236
|
+
return false;
|
|
2237
|
+
if (rootNode && captures.URL?.type === "identifier" && this.resolvesToFileLiteralConst(urlText, rootNode)) {
|
|
2238
|
+
return false;
|
|
2239
|
+
}
|
|
2240
|
+
if (rootNode && captures.URL) {
|
|
2241
|
+
const urlVar = this.newUrlBaseVarName(captures.URL);
|
|
2242
|
+
if (urlVar && this.resolvesToFixedNewUrlConst(urlVar, rootNode)) {
|
|
2243
|
+
return false;
|
|
2244
|
+
}
|
|
2245
|
+
}
|
|
2246
|
+
const looksLikeExternalInput = urlText.includes(".") || /user|external|remote|input|target|webhook|callback|redirect|untrusted|arbitrary/i.test(urlText);
|
|
2247
|
+
if (!looksLikeExternalInput)
|
|
2248
|
+
return false;
|
|
2249
|
+
if (!obj)
|
|
2250
|
+
return fn === "fetch";
|
|
2251
|
+
return new Set([
|
|
2252
|
+
"axios",
|
|
2253
|
+
"http",
|
|
2254
|
+
"https",
|
|
2255
|
+
"got",
|
|
2256
|
+
"request",
|
|
2257
|
+
"superagent",
|
|
2258
|
+
"undici"
|
|
2259
|
+
]).has(obj);
|
|
2260
|
+
}
|
|
2261
|
+
case "ts_weak_hash_algorithm":
|
|
2262
|
+
return captures.FN?.text === "createHash" && /^(md5|sha1)$/i.test(captures.ALG?.text ?? "");
|
|
2263
|
+
case "ts_insecure_random_source": {
|
|
2264
|
+
if (captures.OBJ?.text !== "Math" || captures.FN?.text !== "random")
|
|
2265
|
+
return false;
|
|
2266
|
+
const varName = this.enclosingBindingName(captures.CALL ?? captures.VAR);
|
|
2267
|
+
return /token|secret|password|key|nonce|salt|csrf|auth|session|credential|hash|otp|pin/i.test(varName);
|
|
2268
|
+
}
|
|
2269
|
+
case "ts_detached_async_call":
|
|
2270
|
+
return /(Async$|fetch$|request$)/.test(captures.FN?.text ?? "");
|
|
2271
|
+
case "incomplete_assertion": {
|
|
2272
|
+
const expectNode = captures.EXPECT;
|
|
2273
|
+
if (!expectNode)
|
|
2274
|
+
return false;
|
|
2275
|
+
const CHAI_PROPERTY_ASSERTIONS = new Set([
|
|
2276
|
+
"true",
|
|
2277
|
+
"false",
|
|
2278
|
+
"null",
|
|
2279
|
+
"undefined",
|
|
2280
|
+
"empty",
|
|
2281
|
+
"NaN",
|
|
2282
|
+
"finite",
|
|
2283
|
+
"exist",
|
|
2284
|
+
"arguments",
|
|
2285
|
+
"extensible",
|
|
2286
|
+
"sealed",
|
|
2287
|
+
"frozen",
|
|
2288
|
+
"locked"
|
|
2289
|
+
]);
|
|
2290
|
+
let current = expectNode.parent;
|
|
2291
|
+
if (!current)
|
|
2292
|
+
return false;
|
|
2293
|
+
current = current.parent;
|
|
2294
|
+
if (!current)
|
|
2295
|
+
return false;
|
|
2296
|
+
if (current.type === "expression_statement" || current.type === "return_statement")
|
|
2297
|
+
return true;
|
|
2298
|
+
let lastPropertyName = null;
|
|
2299
|
+
while (current && current.type === "member_expression") {
|
|
2300
|
+
const propNode = current.children?.find((c) => c.type === "property_identifier");
|
|
2301
|
+
if (propNode)
|
|
2302
|
+
lastPropertyName = propNode.text;
|
|
2303
|
+
const parent = current.parent;
|
|
2304
|
+
if (!parent)
|
|
2305
|
+
return false;
|
|
2306
|
+
if (parent.type === "expression_statement" || parent.type === "return_statement") {
|
|
2307
|
+
if (lastPropertyName && CHAI_PROPERTY_ASSERTIONS.has(lastPropertyName))
|
|
2308
|
+
return false;
|
|
2309
|
+
return true;
|
|
2310
|
+
}
|
|
2311
|
+
if (parent.type === "call_expression")
|
|
2312
|
+
return false;
|
|
2313
|
+
current = parent;
|
|
2314
|
+
}
|
|
2315
|
+
return false;
|
|
2316
|
+
}
|
|
2317
|
+
case "py_command_injection_sink": {
|
|
2318
|
+
const mod = captures.MOD?.text ?? "";
|
|
2319
|
+
const fn = captures.FN?.text ?? "";
|
|
2320
|
+
const kw = captures.KW?.text ?? "";
|
|
2321
|
+
return mod === "os" && /^(system|popen)$/.test(fn) || mod === "subprocess" && /^(run|Popen|call|check_output|check_call)$/.test(fn) && kw === "shell";
|
|
2322
|
+
}
|
|
2323
|
+
case "go_command_injection_sink":
|
|
2324
|
+
return captures.PKG?.text === "exec" && /^(Command|CommandContext)$/.test(captures.FN?.text ?? "") && /^"(sh|bash|zsh|cmd|powershell|pwsh)"$/.test(captures.SHELL?.text ?? "") && /^"(-c|\/c)"$/.test(captures.FLAG?.text ?? "");
|
|
2325
|
+
case "ruby_command_injection_sink":
|
|
2326
|
+
return /^(system|exec|spawn|popen|capture3|capture2|capture2e)$/.test(captures.FN?.text ?? "");
|
|
2327
|
+
case "py_ssrf_sink":
|
|
2328
|
+
return captures.MOD?.text === "requests" && /^(get|post|put|patch|delete|request|head|options)$/.test(captures.FN?.text ?? "");
|
|
2329
|
+
case "py_path_traversal_sink":
|
|
2330
|
+
return /^(open|read_text|read_bytes|write_text|write_bytes|remove|unlink|rmdir)$/.test(captures.FN?.text ?? "");
|
|
2331
|
+
case "go_path_traversal_sink":
|
|
2332
|
+
return /^(os|ioutil)$/.test(captures.PKG?.text ?? "") && /^(Open|OpenFile|ReadFile|WriteFile|Create|Remove|RemoveAll)$/.test(captures.FN?.text ?? "");
|
|
2333
|
+
case "py_sql_injection_sink": {
|
|
2334
|
+
const fn = captures.FN?.text ?? "";
|
|
2335
|
+
if (!new Set(["execute", "executemany", "query", "raw"]).has(fn)) {
|
|
2336
|
+
return false;
|
|
2337
|
+
}
|
|
2338
|
+
const sqlNode = captures.SQL;
|
|
2339
|
+
const receiver = captures.OBJ?.text ?? "";
|
|
2340
|
+
if (fn === "execute" && this.isLikelySqlAlchemyReceiver(receiver)) {
|
|
2341
|
+
return false;
|
|
2342
|
+
}
|
|
2343
|
+
if (sqlNode && this.isSafeSqlAlchemyExpressionCall(sqlNode)) {
|
|
2344
|
+
return false;
|
|
2345
|
+
}
|
|
2346
|
+
return true;
|
|
2347
|
+
}
|
|
2348
|
+
case "go_sql_injection_sink":
|
|
2349
|
+
return /^(Query|QueryContext|QueryRow|QueryRowContext|Exec|ExecContext)$/.test(captures.DBFN?.text ?? "") && captures.FMTPKG?.text === "fmt" && captures.FMTFN?.text === "Sprintf";
|
|
2350
|
+
case "py_insecure_deserialization_sink":
|
|
2351
|
+
return /^(pickle|yaml)$/.test(captures.MOD?.text ?? "") && /^(load|loads|unsafe_load)$/.test(captures.FN?.text ?? "");
|
|
2352
|
+
case "ruby_insecure_deserialization_sink":
|
|
2353
|
+
return /^(Marshal|YAML|Psych)$/.test(captures.MOD?.text ?? "") && /^(load|unsafe_load)$/.test(captures.FN?.text ?? "");
|
|
2354
|
+
case "match_captures": {
|
|
2355
|
+
for (const [captureName, pattern] of Object.entries(postFilterParams ?? {})) {
|
|
2356
|
+
const node = captures[captureName];
|
|
2357
|
+
if (!node)
|
|
2358
|
+
return false;
|
|
2359
|
+
if (!new RegExp(pattern).test(node.text))
|
|
2360
|
+
return false;
|
|
2361
|
+
}
|
|
2362
|
+
return true;
|
|
2363
|
+
}
|
|
2364
|
+
case "case_range_single_value": {
|
|
2365
|
+
const start = captures.START?.text ?? "";
|
|
2366
|
+
const end = captures.END?.text ?? "";
|
|
2367
|
+
return start === end;
|
|
2368
|
+
}
|
|
2369
|
+
case "goto_jumps_backward": {
|
|
2370
|
+
const label = captures.LABEL;
|
|
2371
|
+
const gotoNode = captures.GOTO;
|
|
2372
|
+
if (!label || !gotoNode)
|
|
2373
|
+
return false;
|
|
2374
|
+
return label.startIndex < gotoNode.startIndex;
|
|
2375
|
+
}
|
|
2376
|
+
case "goto_targets_inner_block": {
|
|
2377
|
+
const target = captures.TARGET;
|
|
2378
|
+
if (!target)
|
|
2379
|
+
return false;
|
|
2380
|
+
let depth = 0;
|
|
2381
|
+
let node = target.parent;
|
|
2382
|
+
while (node) {
|
|
2383
|
+
if (node.type === "compound_statement")
|
|
2384
|
+
depth++;
|
|
2385
|
+
node = node.parent;
|
|
2386
|
+
}
|
|
2387
|
+
return depth >= 2;
|
|
2388
|
+
}
|
|
2389
|
+
case "c_memset_sensitive_arg": {
|
|
2390
|
+
const callNode = captures.CALL;
|
|
2391
|
+
if (!callNode || callNode.type !== "call_expression")
|
|
2392
|
+
return false;
|
|
2393
|
+
const argList = callNode.children?.find((c) => c.type === "argument_list");
|
|
2394
|
+
if (!argList)
|
|
2395
|
+
return false;
|
|
2396
|
+
const firstArg = argList.children?.find((c) => c.isNamed);
|
|
2397
|
+
if (!firstArg)
|
|
2398
|
+
return false;
|
|
2399
|
+
const argName = firstArg.text ?? "";
|
|
2400
|
+
return /password|secret|key|token|credential|auth|private|passwd|pin|salt|nonce|iv|seed/i.test(argName);
|
|
2401
|
+
}
|
|
2402
|
+
case "c_stdlib_name": {
|
|
2403
|
+
const name = captures.NAME?.text ?? "";
|
|
2404
|
+
const STDLIB_NAMES = new Set([
|
|
2405
|
+
"malloc",
|
|
2406
|
+
"calloc",
|
|
2407
|
+
"realloc",
|
|
2408
|
+
"free",
|
|
2409
|
+
"alloca",
|
|
2410
|
+
"printf",
|
|
2411
|
+
"fprintf",
|
|
2412
|
+
"sprintf",
|
|
2413
|
+
"snprintf",
|
|
2414
|
+
"vprintf",
|
|
2415
|
+
"vfprintf",
|
|
2416
|
+
"vsprintf",
|
|
2417
|
+
"vsnprintf",
|
|
2418
|
+
"scanf",
|
|
2419
|
+
"fscanf",
|
|
2420
|
+
"sscanf",
|
|
2421
|
+
"vscanf",
|
|
2422
|
+
"vfscanf",
|
|
2423
|
+
"vsscanf",
|
|
2424
|
+
"strcpy",
|
|
2425
|
+
"strncpy",
|
|
2426
|
+
"strcat",
|
|
2427
|
+
"strncat",
|
|
2428
|
+
"strcmp",
|
|
2429
|
+
"strncmp",
|
|
2430
|
+
"strlen",
|
|
2431
|
+
"strchr",
|
|
2432
|
+
"strrchr",
|
|
2433
|
+
"strstr",
|
|
2434
|
+
"strerror",
|
|
2435
|
+
"memcpy",
|
|
2436
|
+
"memmove",
|
|
2437
|
+
"memset",
|
|
2438
|
+
"memcmp",
|
|
2439
|
+
"memchr",
|
|
2440
|
+
"fopen",
|
|
2441
|
+
"fclose",
|
|
2442
|
+
"fread",
|
|
2443
|
+
"fwrite",
|
|
2444
|
+
"fgets",
|
|
2445
|
+
"fputs",
|
|
2446
|
+
"getc",
|
|
2447
|
+
"putc",
|
|
2448
|
+
"getchar",
|
|
2449
|
+
"putchar",
|
|
2450
|
+
"exit",
|
|
2451
|
+
"abort",
|
|
2452
|
+
"assert",
|
|
2453
|
+
"errno",
|
|
2454
|
+
"abs",
|
|
2455
|
+
"labs",
|
|
2456
|
+
"llabs",
|
|
2457
|
+
"div",
|
|
2458
|
+
"ldiv",
|
|
2459
|
+
"lldiv",
|
|
2460
|
+
"atoi",
|
|
2461
|
+
"atol",
|
|
2462
|
+
"atoll",
|
|
2463
|
+
"strtol",
|
|
2464
|
+
"strtoll",
|
|
2465
|
+
"strtoul",
|
|
2466
|
+
"strtoull",
|
|
2467
|
+
"strtod",
|
|
2468
|
+
"strtof",
|
|
2469
|
+
"strtold",
|
|
2470
|
+
"qsort",
|
|
2471
|
+
"bsearch",
|
|
2472
|
+
"time",
|
|
2473
|
+
"clock",
|
|
2474
|
+
"difftime",
|
|
2475
|
+
"mktime",
|
|
2476
|
+
"strftime",
|
|
2477
|
+
"getenv",
|
|
2478
|
+
"setenv",
|
|
2479
|
+
"putenv",
|
|
2480
|
+
"system",
|
|
2481
|
+
"isalpha",
|
|
2482
|
+
"isdigit",
|
|
2483
|
+
"isalnum",
|
|
2484
|
+
"isspace",
|
|
2485
|
+
"isupper",
|
|
2486
|
+
"islower",
|
|
2487
|
+
"toupper",
|
|
2488
|
+
"tolower",
|
|
2489
|
+
"sizeof",
|
|
2490
|
+
"offsetof",
|
|
2491
|
+
"NULL",
|
|
2492
|
+
"EXIT_SUCCESS",
|
|
2493
|
+
"EXIT_FAILURE"
|
|
2494
|
+
]);
|
|
2495
|
+
return STDLIB_NAMES.has(name);
|
|
2496
|
+
}
|
|
2497
|
+
case "c_octal_literal": {
|
|
2498
|
+
const num = captures.NUM?.text ?? "";
|
|
2499
|
+
return /^0[0-7]+$/.test(num);
|
|
2500
|
+
}
|
|
2501
|
+
case "c_noreturn_attr": {
|
|
2502
|
+
const attr = captures.ATTR?.text ?? "";
|
|
2503
|
+
return attr === "noreturn";
|
|
2504
|
+
}
|
|
2505
|
+
case "c_label_in_switch": {
|
|
2506
|
+
const stmt = captures.STMT;
|
|
2507
|
+
if (!stmt)
|
|
2508
|
+
return false;
|
|
2509
|
+
let node = stmt.parent;
|
|
2510
|
+
while (node) {
|
|
2511
|
+
if (node.type === "switch_statement")
|
|
2512
|
+
return true;
|
|
2513
|
+
node = node.parent;
|
|
2514
|
+
}
|
|
2515
|
+
return false;
|
|
2516
|
+
}
|
|
2517
|
+
default:
|
|
2518
|
+
this.reportMissingPostFilter(postFilter);
|
|
2519
|
+
return false;
|
|
2520
|
+
}
|
|
2521
|
+
}
|
|
2522
|
+
reportedMissingPostFilters = new Set;
|
|
2523
|
+
reportedPostFilterFailures = new Set;
|
|
2524
|
+
reportPostFilterFailure(postFilter, reason) {
|
|
2525
|
+
if (this.reportedPostFilterFailures.has(postFilter))
|
|
2526
|
+
return;
|
|
2527
|
+
this.reportedPostFilterFailures.add(postFilter);
|
|
2528
|
+
logTreeSitterDiagnostic({
|
|
2529
|
+
subsystem: "tree-sitter-client",
|
|
2530
|
+
message: `tree-sitter rule post_filter '${postFilter}' failed — ` + `keeping the diagnostic (fail-open): ${reason}.`,
|
|
2531
|
+
metadata: { postFilter }
|
|
2532
|
+
});
|
|
2533
|
+
}
|
|
2534
|
+
reportMissingPostFilter(postFilter) {
|
|
2535
|
+
if (this.reportedMissingPostFilters.has(postFilter))
|
|
2536
|
+
return;
|
|
2537
|
+
this.reportedMissingPostFilters.add(postFilter);
|
|
2538
|
+
logTreeSitterDiagnostic({
|
|
2539
|
+
subsystem: "tree-sitter-client",
|
|
2540
|
+
message: `tree-sitter rule post_filter '${postFilter}' is not implemented — ` + `matches for the rules using it are suppressed rather than reported unfiltered. ` + `Implement it in applyPostFilter (clients/tree-sitter-client.ts) to re-enable them.`,
|
|
2541
|
+
metadata: { postFilter }
|
|
2542
|
+
});
|
|
2543
|
+
}
|
|
2544
|
+
textPredicatesInvalidLogged = false;
|
|
2545
|
+
hasValidTextPredicates(query) {
|
|
2546
|
+
const valid = Array.isArray(query?.textPredicates);
|
|
2547
|
+
if (!valid) {
|
|
2548
|
+
if (!this.textPredicatesInvalidLogged) {
|
|
2549
|
+
this.textPredicatesInvalidLogged = true;
|
|
2550
|
+
logTreeSitterDiagnostic({
|
|
2551
|
+
subsystem: "tree-sitter-client",
|
|
2552
|
+
message: "web-tree-sitter Query.textPredicates is missing or not an array — " + "#match?/#eq? predicates cannot be evaluated. Failing CLOSED: matches " + "for this query are dropped rather than reported unfiltered.",
|
|
2553
|
+
metadata: { textPredicatesType: typeof query?.textPredicates }
|
|
2554
|
+
});
|
|
2555
|
+
}
|
|
2556
|
+
recordDegradationOnce({
|
|
2557
|
+
kind: "query-predicates-invalid",
|
|
2558
|
+
subject: "web-tree-sitter",
|
|
2559
|
+
reason: "Query.textPredicates is missing or not an array — #match?/#eq? " + "predicates cannot be evaluated; structural matches relying on them " + "are dropped fail-closed"
|
|
2560
|
+
});
|
|
2561
|
+
}
|
|
2562
|
+
return valid;
|
|
2563
|
+
}
|
|
2564
|
+
evaluatePredicates(query, match) {
|
|
2565
|
+
if (!this.hasValidTextPredicates(query))
|
|
2566
|
+
return false;
|
|
2567
|
+
const predicates = query.textPredicates?.[match.patternIndex] ?? [];
|
|
2568
|
+
return predicates.every((fn) => fn(match.captures));
|
|
2569
|
+
}
|
|
2570
|
+
async searchFileWithQuery(filePath, query, metavars, languageId, _originalPattern, postFilter, postFilterParams, contentOverride) {
|
|
2571
|
+
const matches = [];
|
|
2572
|
+
await this.parseFileAndUse(filePath, languageId, contentOverride, (tree) => {
|
|
2573
|
+
try {
|
|
2574
|
+
const queryMatches = query.matches(tree.rootNode);
|
|
2575
|
+
for (const match of queryMatches) {
|
|
2576
|
+
const captures = {};
|
|
2577
|
+
for (const capture of match.captures) {
|
|
2578
|
+
if (metavars.includes(capture.name)) {
|
|
2579
|
+
captures[capture.name] = capture.node;
|
|
2580
|
+
}
|
|
2581
|
+
}
|
|
2582
|
+
if (!this.evaluatePredicates(query, match)) {
|
|
2583
|
+
continue;
|
|
2584
|
+
}
|
|
2585
|
+
if (postFilter && !this.applyPostFilter(postFilter, postFilterParams, captures, tree.rootNode)) {
|
|
2586
|
+
continue;
|
|
2587
|
+
}
|
|
2588
|
+
if (match.captures.length > 0) {
|
|
2589
|
+
const firstNode = match.captures[0].node;
|
|
2590
|
+
const textCaptures = {};
|
|
2591
|
+
for (const [name, node] of Object.entries(captures)) {
|
|
2592
|
+
textCaptures[name] = node.text;
|
|
2593
|
+
}
|
|
2594
|
+
matches.push({
|
|
2595
|
+
file: filePath,
|
|
2596
|
+
line: firstNode.startPosition.row + 1,
|
|
2597
|
+
column: firstNode.startPosition.column + 1,
|
|
2598
|
+
matchedText: firstNode.text,
|
|
2599
|
+
nodeType: firstNode.type,
|
|
2600
|
+
captures: textCaptures
|
|
2601
|
+
});
|
|
2602
|
+
}
|
|
2603
|
+
}
|
|
2604
|
+
if (matches.length > 0) {
|
|
2605
|
+
this.dbg(`Found ${matches.length} matches in ${path.basename(filePath)}`);
|
|
2606
|
+
}
|
|
2607
|
+
} catch (err) {
|
|
2608
|
+
this.reportWasmAbort(err);
|
|
2609
|
+
this.dbg(`Query matching error: ${err}`);
|
|
2610
|
+
}
|
|
2611
|
+
});
|
|
2612
|
+
return matches;
|
|
2613
|
+
}
|
|
2614
|
+
collectFiles(dir, languageId, fileFilter) {
|
|
2615
|
+
const files = [];
|
|
2616
|
+
const extensions = this.getExtensionsForLanguage(languageId);
|
|
2617
|
+
const rootDir = path.resolve(dir);
|
|
2618
|
+
const ignoreMatcher = getProjectIgnoreMatcher(rootDir);
|
|
2619
|
+
const scan = (d) => {
|
|
2620
|
+
if (files.length >= TREE_SITTER_MAX_SCAN_FILES)
|
|
2621
|
+
return;
|
|
2622
|
+
try {
|
|
2623
|
+
const entries = fs.readdirSync(d, { withFileTypes: true });
|
|
2624
|
+
for (const entry of entries) {
|
|
2625
|
+
if (files.length >= TREE_SITTER_MAX_SCAN_FILES)
|
|
2626
|
+
return;
|
|
2627
|
+
const full = path.join(d, entry.name);
|
|
2628
|
+
if (entry.isDirectory()) {
|
|
2629
|
+
if (isExcludedDirName(entry.name))
|
|
2630
|
+
continue;
|
|
2631
|
+
if (ignoreMatcher.isIgnored(full, true))
|
|
2632
|
+
continue;
|
|
2633
|
+
scan(full);
|
|
2634
|
+
} else if (extensions.some((ext) => entry.name.endsWith(ext))) {
|
|
2635
|
+
if (ignoreMatcher.isIgnored(full, false))
|
|
2636
|
+
continue;
|
|
2637
|
+
if (!fileFilter || fileFilter(full)) {
|
|
2638
|
+
files.push(full);
|
|
2639
|
+
}
|
|
2640
|
+
}
|
|
2641
|
+
}
|
|
2642
|
+
} catch {}
|
|
2643
|
+
};
|
|
2644
|
+
scan(rootDir);
|
|
2645
|
+
return files;
|
|
2646
|
+
}
|
|
2647
|
+
getExtensionsForLanguage(languageId) {
|
|
2648
|
+
const mapping = {
|
|
2649
|
+
typescript: [".ts", ".mts", ".cts"],
|
|
2650
|
+
tsx: [".tsx"],
|
|
2651
|
+
javascript: [".js", ".mjs", ".cjs"],
|
|
2652
|
+
python: [".py"],
|
|
2653
|
+
rust: [".rs"],
|
|
2654
|
+
go: [".go"],
|
|
2655
|
+
java: [".java"],
|
|
2656
|
+
kotlin: [".kt", ".kts"],
|
|
2657
|
+
dart: [".dart"],
|
|
2658
|
+
c: [".c", ".h"],
|
|
2659
|
+
cpp: [".cpp", ".hpp", ".cc", ".hh"],
|
|
2660
|
+
elixir: [".ex", ".exs"],
|
|
2661
|
+
ruby: [".rb"]
|
|
2662
|
+
};
|
|
2663
|
+
return mapping[languageId] || [];
|
|
2664
|
+
}
|
|
2665
|
+
}
|
|
2666
|
+
export function regexStructuralSearch(pattern, files, options = {}) {
|
|
2667
|
+
const matches = [];
|
|
2668
|
+
const maxResults = options.maxResults ?? 50;
|
|
2669
|
+
const regexPattern = pattern.replace(/\\/g, "\\\\").replace(/\./g, "\\.").replace(/\$\$\$[A-Z_][A-Z0-9_]*/g, "(.*?)").replace(/\$[A-Z_][A-Z0-9_]*/g, "([^,)]+)");
|
|
2670
|
+
try {
|
|
2671
|
+
const regex = new RegExp(regexPattern, "g");
|
|
2672
|
+
for (const file of files) {
|
|
2673
|
+
if (matches.length >= maxResults)
|
|
2674
|
+
break;
|
|
2675
|
+
try {
|
|
2676
|
+
const content = fs.readFileSync(file, "utf-8");
|
|
2677
|
+
const lines = content.split(`
|
|
2678
|
+
`);
|
|
2679
|
+
for (let i = 0;i < lines.length; i++) {
|
|
2680
|
+
regex.lastIndex = 0;
|
|
2681
|
+
const match = regex.exec(lines[i]);
|
|
2682
|
+
if (match) {
|
|
2683
|
+
const captures = {};
|
|
2684
|
+
for (let j = 1;j < match.length; j++) {
|
|
2685
|
+
captures[`$${j}`] = match[j];
|
|
2686
|
+
}
|
|
2687
|
+
matches.push({
|
|
2688
|
+
file,
|
|
2689
|
+
line: i + 1,
|
|
2690
|
+
column: match.index + 1,
|
|
2691
|
+
matchedText: match[0],
|
|
2692
|
+
captures
|
|
2693
|
+
});
|
|
2694
|
+
if (matches.length >= maxResults)
|
|
2695
|
+
break;
|
|
2696
|
+
}
|
|
2697
|
+
}
|
|
2698
|
+
} catch {}
|
|
2699
|
+
}
|
|
2700
|
+
} catch {}
|
|
2701
|
+
return matches;
|
|
2702
|
+
}
|