@lbroth/rothunter 1.0.0-rc.1

package/dist/detectors/mutation.js

@@ -0,0 +1,397 @@
+import * as path from 'node:path';
+import { stableHash } from '../utils/hash.js';
+import { trimSnippet, trimEnclosingSource } from '../utils/snippet.js';
+import { Project, SyntaxKind, } from 'ts-morph';
+const MUTATING_ARRAY_METHODS = new Set([
+    'push',
+    'pop',
+    'shift',
+    'unshift',
+    'splice',
+    'sort',
+    'reverse',
+    'fill',
+    'copyWithin',
+]);
+const ASSIGNMENT_OPERATORS = new Set([
+    '=',
+    '+=',
+    '-=',
+    '*=',
+    '/=',
+    '%=',
+    '**=',
+    '<<=',
+    '>>=',
+    '>>>=',
+    '&=',
+    '|=',
+    '^=',
+    '&&=',
+    '||=',
+    '??=',
+]);
+const IGNORE_ANNOTATION = 'rothunter:ignore-mutation';
+// Parameter-mutation detector. Flags array-mutators, Object.assign target,
+// delete, property assignment on params NOT typed Readonly/ReadonlyArray.
+// `this.x = y` + constructor self-init skipped. `// rothunter:ignore-mutation`
+// suppresses.
+export function detectMutations(input) {
+    let project;
+    if (input.project) {
+        project = input.project;
+    }
+    else {
+        project = new Project({
+            skipAddingFilesFromTsConfig: true,
+            skipFileDependencyResolution: true,
+        });
+        for (const rel of input.files) {
+            project.addSourceFileAtPathIfExists(path.join(input.workspaceRoot, rel));
+        }
+    }
+    const candidates = [];
+    for (const sf of project.getSourceFiles()) {
+        const filePath = sf.getFilePath();
+        const relativeFile = path.relative(input.workspaceRoot, filePath);
+        // Tier 2 — module-scope mutable identifiers (`let`/`var` at top level).
+        // Their mutations from any function body are treated as shared-state writes.
+        const moduleMutables = collectModuleMutables(sf);
+        for (const fn of sf.getFunctions()) {
+            candidates.push(...analyzeCallable(fn, relativeFile, moduleMutables));
+        }
+        for (const cls of sf.getClasses()) {
+            for (const m of cls.getMethods())
+                candidates.push(...analyzeCallable(m, relativeFile, moduleMutables));
+        }
+        for (const arrow of sf.getDescendantsOfKind(SyntaxKind.ArrowFunction)) {
+            candidates.push(...analyzeCallable(arrow, relativeFile, moduleMutables));
+        }
+        for (const expr of sf.getDescendantsOfKind(SyntaxKind.FunctionExpression)) {
+            candidates.push(...analyzeCallable(expr, relativeFile, moduleMutables));
+        }
+    }
+    return candidates.map(toFinding);
+}
+/**
+ * Top-level `let` / `var` declarations are the canonical "shared mutable
+ * state" pattern. We deliberately exclude `const` because re-binding is
+ * blocked there — `const arr = []; arr.push()` still mutates contents, but
+ * the user has at least flagged the binding as fixed. For Tier 2 MVP we
+ * focus on `let`/`var`, which signal "intentionally mutable" most loudly.
+ */
+function collectModuleMutables(sf) {
+    const out = new Set();
+    const statements = sf.getVariableStatements();
+    for (const stmt of statements) {
+        const kind = stmt.getDeclarationKind();
+        if (kind !== 'let' && kind !== 'var')
+            continue;
+        for (const decl of stmt.getDeclarations()) {
+            if (decl.getNameNode().getKind() !== SyntaxKind.Identifier)
+                continue;
+            out.add(decl.getName());
+        }
+    }
+    return out;
+}
+function analyzeCallable(fn, file, moduleMutables) {
+    const params = new Map();
+    for (const p of fn.getParameters()) {
+        // Destructured params (`{a, b}: User`) — skip; mutation of `a`/`b` is
+        // mutation of locals, not the original argument.
+        if (p.getNameNode().getKind() !== SyntaxKind.Identifier)
+            continue;
+        const name = p.getName();
+        const typeNode = p.getTypeNode();
+        const typeText = typeNode ? typeNode.getText() : p.getType().getText();
+        params.set(name, { typeText });
+    }
+    const body = fn.getBody?.();
+    if (!body)
+        return [];
+    const enclosingSource = trimEnclosingSource(fn.getText());
+    const enclosingName = fn.getName?.();
+    // Pre-compute escape signals once per function: what identifiers leave the
+    // function via return / this.x assignment / call argument? Used to bump
+    // severity of param mutations that touch escaping bindings.
+    const escapingIdentifiers = collectEscapingIdentifiers(body);
+    const found = [];
+    const resolveScope = (name) => {
+        const param = params.get(name);
+        if (param)
+            return { scope: 'parameter', readonly: isReadonlyType(param.typeText) };
+        if (moduleMutables.has(name))
+            return { scope: 'module-state', readonly: false };
+        return null;
+    };
+    // --- Array mutator and Object.assign call expressions -----------------------
+    for (const call of body.getDescendantsOfKind(SyntaxKind.CallExpression)) {
+        if (hasIgnoreAnnotation(call))
+            continue;
+        const callee = call.getExpression();
+        if (callee.getKind() !== SyntaxKind.PropertyAccessExpression)
+            continue;
+        const pa = callee.asKindOrThrow(SyntaxKind.PropertyAccessExpression);
+        const head = pa.getExpression().getText();
+        const member = pa.getName();
+        // Object.assign(target, ...) — flag when target is a parameter or module mutable.
+        if (head === 'Object' && member === 'assign') {
+            const [first] = call.getArguments();
+            if (!first || first.getKind() !== SyntaxKind.Identifier)
+                continue;
+            const targetName = first.getText();
+            const scope = resolveScope(targetName);
+            if (!scope || scope.readonly)
+                continue;
+            found.push({
+                file,
+                line: call.getStartLineNumber(),
+                endLine: call.getEndLineNumber(),
+                pattern: scope.scope === 'module-state' ? 'shared-state-write' : 'object-assign',
+                scope: scope.scope,
+                escapes: scope.scope === 'parameter' && escapingIdentifiers.has(targetName),
+                target: targetName,
+                snippet: trimSnippet(call.getText()),
+                source: call.getText(),
+                enclosingSource,
+                enclosingName,
+            });
+            continue;
+        }
+        // Array mutator: identifier.push/...
+        if (MUTATING_ARRAY_METHODS.has(member)) {
+            const scope = resolveScope(head);
+            if (!scope || scope.readonly)
+                continue;
+            found.push({
+                file,
+                line: call.getStartLineNumber(),
+                endLine: call.getEndLineNumber(),
+                pattern: scope.scope === 'module-state' ? 'shared-state-write' : 'array-mutator',
+                scope: scope.scope,
+                escapes: scope.scope === 'parameter' && escapingIdentifiers.has(head),
+                target: head,
+                method: member,
+                snippet: trimSnippet(call.getText()),
+                source: call.getText(),
+                enclosingSource,
+                enclosingName,
+            });
+        }
+    }
+    // --- delete <expr> ----------------------------------------------------------
+    for (const del of body.getDescendantsOfKind(SyntaxKind.DeleteExpression)) {
+        if (hasIgnoreAnnotation(del))
+            continue;
+        const operand = del.getExpression();
+        const root = identifierRoot(operand);
+        if (!root)
+            continue;
+        const scope = resolveScope(root);
+        if (!scope || scope.readonly)
+            continue;
+        found.push({
+            file,
+            line: del.getStartLineNumber(),
+            endLine: del.getEndLineNumber(),
+            pattern: scope.scope === 'module-state' ? 'shared-state-write' : 'delete-property',
+            scope: scope.scope,
+            escapes: scope.scope === 'parameter' && escapingIdentifiers.has(root),
+            target: root,
+            snippet: trimSnippet(del.getText()),
+            source: del.getText(),
+            enclosingSource,
+            enclosingName,
+        });
+    }
+    // --- <param>.x = y / += y / ... ---------------------------------------------
+    for (const bin of body.getDescendantsOfKind(SyntaxKind.BinaryExpression)) {
+        const opText = bin.getOperatorToken().getText();
+        if (!ASSIGNMENT_OPERATORS.has(opText))
+            continue;
+        if (hasIgnoreAnnotation(bin))
+            continue;
+        const lhs = bin.getLeft();
+        if (lhs.getKind() !== SyntaxKind.PropertyAccessExpression && lhs.getKind() !== SyntaxKind.ElementAccessExpression) {
+            continue;
+        }
+        const root = identifierRoot(lhs);
+        if (!root)
+            continue;
+        if (root === 'this')
+            continue; // class method self-init — almost always intentional
+        const scope = resolveScope(root);
+        if (!scope || scope.readonly)
+            continue;
+        found.push({
+            file,
+            line: bin.getStartLineNumber(),
+            endLine: bin.getEndLineNumber(),
+            pattern: scope.scope === 'module-state' ? 'shared-state-write' : 'property-assignment',
+            scope: scope.scope,
+            escapes: scope.scope === 'parameter' && escapingIdentifiers.has(root),
+            target: root,
+            snippet: trimSnippet(bin.getText()),
+            source: bin.getText(),
+            enclosingSource,
+            enclosingName,
+        });
+    }
+    return found;
+}
+/**
+ * Collect identifier names that LEAVE the function via a return value,
+ * via `this.x = ident`, or by being passed as an argument to another call.
+ *
+ * Used to bump severity of param mutations: if a mutated param also escapes,
+ * the mutation is more dangerous (the caller's state is now corrupted).
+ *
+ * Heuristic — we don't follow `const copy = arg; return copy;` (that needs
+ * data-flow analysis). Direct uses only.
+ */
+function collectEscapingIdentifiers(body) {
+    const out = new Set();
+    for (const ret of body.getDescendantsOfKind(SyntaxKind.ReturnStatement)) {
+        const expr = ret.getExpression();
+        if (!expr)
+            continue;
+        collectIdentifiers(expr, out);
+    }
+    for (const bin of body.getDescendantsOfKind(SyntaxKind.BinaryExpression)) {
+        if (bin.getOperatorToken().getText() !== '=')
+            continue;
+        const lhs = bin.getLeft().asKind(SyntaxKind.PropertyAccessExpression);
+        if (!lhs)
+            continue;
+        if (lhs.getExpression().getKind() !== SyntaxKind.ThisKeyword)
+            continue;
+        collectIdentifiers(bin.getRight(), out);
+    }
+    for (const call of body.getDescendantsOfKind(SyntaxKind.CallExpression)) {
+        // Skip the calls we already flag ourselves (Object.assign / array mutators)
+        // to avoid counting the mutator's first argument as "escaping".
+        for (const arg of call.getArguments()) {
+            collectIdentifiers(arg, out);
+        }
+    }
+    return out;
+}
+function collectIdentifiers(node, into) {
+    if (node.getKind() === SyntaxKind.Identifier) {
+        into.add(node.getText());
+        return;
+    }
+    for (const child of node.getDescendantsOfKind(SyntaxKind.Identifier)) {
+        into.add(child.getText());
+    }
+}
+/** Walk a PropertyAccess / ElementAccess chain to the leftmost identifier. */
+function identifierRoot(node) {
+    let cur = node;
+    while (true) {
+        const prop = cur.asKind(SyntaxKind.PropertyAccessExpression);
+        const elem = cur.asKind(SyntaxKind.ElementAccessExpression);
+        if (!prop && !elem)
+            break;
+        cur = (prop ?? elem).getExpression();
+    }
+    if (cur.getKind() === SyntaxKind.Identifier)
+        return cur.getText();
+    if (cur.getKind() === SyntaxKind.ThisKeyword)
+        return 'this';
+    return null;
+}
+function isReadonlyType(text) {
+    const compact = text.replace(/\s+/g, ' ').trim();
+    if (/^Readonly<.*>$/.test(compact))
+        return true;
+    if (/^ReadonlyArray<.*>$/.test(compact))
+        return true;
+    if (/^readonly\s/.test(compact))
+        return true;
+    if (/^readonly\s+[A-Za-z_$][\w$]*\[\]$/.test(compact))
+        return true;
+    if (/^\(\s*readonly\s/.test(compact))
+        return true;
+    return false;
+}
+function hasIgnoreAnnotation(node) {
+    const trivia = node.getLeadingCommentRanges();
+    for (const range of trivia) {
+        if (range.getText().includes(IGNORE_ANNOTATION))
+            return true;
+    }
+    // Check trailing or preceding statement-level comment.
+    const fullStart = node.getFullStart();
+    const sf = node.getSourceFile();
+    const text = sf.getFullText().slice(Math.max(0, fullStart - 200), fullStart);
+    return text.includes(IGNORE_ANNOTATION);
+}
+function toFinding(c) {
+    // Severity matrix (per ROADMAP):
+    //   mutate-and-escape > mutate-shared-module > mutate-local
+    const severity = c.escapes
+        ? 'high'
+        : c.scope === 'module-state'
+            ? 'high'
+            : c.pattern === 'delete-property'
+                ? 'high'
+                : 'medium';
+    const subject = c.scope === 'module-state' ? 'Shared module state' : 'Parameter';
+    const action = c.pattern === 'array-mutator'
+        ? `array mutation: ${c.target}.${c.method ?? '?'}()`
+        : c.pattern === 'object-assign'
+            ? `mutation via Object.assign: ${c.target}`
+            : c.pattern === 'delete-property'
+                ? `property deletion: delete ${c.target}.…`
+                : c.pattern === 'property-assignment'
+                    ? `property assignment: ${c.target}.…`
+                    : `write: ${c.target}`;
+    const escapeTag = c.escapes ? ' [ESCAPES]' : '';
+    const title = `${subject} ${action}${escapeTag}`;
+    const description = [
+        `${title} (pattern \`${c.pattern}\`, scope \`${c.scope}\`${c.escapes ? ', escapes' : ''}).`,
+        `Locations:`,
+        `- ${c.file}:${c.line} \`${c.snippet}\``,
+        '',
+        c.escapes
+            ? 'The mutated value also escapes this function (returned, assigned to `this.x`, or passed onward). Callers will observe the mutation, which is the most damaging shape of this pattern.'
+            : c.scope === 'module-state'
+                ? 'This writes to a module-scope `let`/`var` binding. Any other function that imports or closes over the binding sees the change — surface-area for accidental shared state.'
+                : "If the mutation is part of this function's contract (builder pattern, in-place transform), add a `// rothunter:ignore-mutation` comment above the call OR tighten the parameter type to `Readonly<...>` to document intent.",
+    ].join('\n');
+    return {
+        detectorId: 'mutation',
+        severity,
+        confidence: c.escapes ? 0.82 : c.scope === 'module-state' ? 0.78 : 0.7,
+        layer: 1,
+        title,
+        description,
+        evidence: [
+            {
+                file: c.file,
+                range: { startLine: c.line, endLine: c.endLine },
+                snippet: c.source,
+                // `note` carries the enclosing-function source for the LLM
+                // confirmer. The markdown reporter intentionally does not render it.
+                note: JSON.stringify({
+                    enclosingSource: c.enclosingSource,
+                    enclosingName: c.enclosingName ?? '',
+                    pattern: c.pattern,
+                    escapes: c.escapes,
+                }),
+            },
+        ],
+        suggestion: c.scope === 'module-state'
+            ? 'Move the state into a module-scope `const` (with internal mutation hidden behind a small API) or into a class so the surface area is explicit.'
+            : 'Return a new value instead of mutating the parameter, or type the parameter as Readonly<...>.',
+        fingerprint: `mutation:${c.pattern}:${stableHash(`${c.file}::${c.line}::${c.target}`)}`,
+    };
+}
+/**
+ * Compress the enclosing function source so the LLM prompt stays in budget.
+ * We keep the full signature line plus up to ~40 lines of body — enough to
+ * judge intent without paying for the model to read a 200-line method.
+ */
+//# sourceMappingURL=mutation.js.map

package/dist/detectors/mutation.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mutation.js","sourceRoot":"","sources":["../../src/detectors/mutation.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAClC,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAC9C,OAAO,EAAE,WAAW,EAAE,mBAAmB,EAAE,MAAM,qBAAqB,CAAC;AACvE,OAAO,EACL,OAAO,EACP,UAAU,GAMX,MAAM,UAAU,CAAC;AAgClB,MAAM,sBAAsB,GAAG,IAAI,GAAG,CAAC;IACrC,MAAM;IACN,KAAK;IACL,OAAO;IACP,SAAS;IACT,QAAQ;IACR,MAAM;IACN,SAAS;IACT,MAAM;IACN,YAAY;CACb,CAAC,CAAC;AAEH,MAAM,oBAAoB,GAAG,IAAI,GAAG,CAAC;IACnC,GAAG;IACH,IAAI;IACJ,IAAI;IACJ,IAAI;IACJ,IAAI;IACJ,IAAI;IACJ,KAAK;IACL,KAAK;IACL,KAAK;IACL,MAAM;IACN,IAAI;IACJ,IAAI;IACJ,IAAI;IACJ,KAAK;IACL,KAAK;IACL,KAAK;CACN,CAAC,CAAC;AAEH,MAAM,iBAAiB,GAAG,2BAA2B,CAAC;AAEtD,2EAA2E;AAC3E,0EAA0E;AAC1E,+EAA+E;AAC/E,cAAc;AACd,MAAM,UAAU,eAAe,CAAC,KAA4B;IAC1D,IAAI,OAAgB,CAAC;IACrB,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC;QAClB,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC;IAC1B,CAAC;SAAM,CAAC;QACN,OAAO,GAAG,IAAI,OAAO,CAAC;YACpB,2BAA2B,EAAE,IAAI;YACjC,4BAA4B,EAAE,IAAI;SACnC,CAAC,CAAC;QACH,KAAK,MAAM,GAAG,IAAI,KAAK,CAAC,KAAK,EAAE,CAAC;YAC9B,OAAO,CAAC,2BAA2B,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,aAAa,EAAE,GAAG,CAAC,CAAC,CAAC;QAC3E,CAAC;IACH,CAAC;IAED,MAAM,UAAU,GAAmB,EAAE,CAAC;IACtC,KAAK,MAAM,EAAE,IAAI,OAAO,CAAC,cAAc,EAAE,EAAE,CAAC;QAC1C,MAAM,QAAQ,GAAG,EAAE,CAAC,WAAW,EAAE,CAAC;QAClC,MAAM,YAAY,GAAG,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,aAAa,EAAE,QAAQ,CAAC,CAAC;QAElE,wEAAwE;QACxE,6EAA6E;QAC7E,MAAM,cAAc,GAAG,qBAAqB,CAAC,EAAE,CAAC,CAAC;QAEjD,KAAK,MAAM,EAAE,IAAI,EAAE,CAAC,YAAY,EAAE,EAAE,CAAC;YACnC,UAAU,CAAC,IAAI,CAAC,GAAG,eAAe,CAAC,EAAE,EAAE,YAAY,EAAE,cAAc,CAAC,CAAC,CAAC;QACxE,CAAC;QACD,KAAK,MAAM,GAAG,IAAI,EAAE,CAAC,UAAU,EAAE,EAAE,CAAC;YAClC,KAAK,MAAM,CAAC,IAAI,GAAG,CAAC,UAAU,EAAE;gBAAE,UAAU,CAAC,IAAI,CAAC,GAAG,eAAe,CAAC,CAAC,EAAE,YAAY,EAAE,cAAc,CAAC,CAAC,CAAC;QACzG,CAAC;QACD,KAAK,MAAM,KAAK,IAAI,EAAE,CAAC,oBAAoB,CAAC,UAAU,CAAC,aAAa,CAAC,EAAE,CAAC;YACtE,UAAU,CAAC,IAAI,CAAC,GAAG,eAAe,CAAC,KAAK,EAAE,YAAY,EAAE,cAAc,CAAC,CAAC,CAAC;QAC3E,CAAC;QACD,KAAK,MAAM,IAAI,IAAI,EAAE,CAAC,oBAAoB,CAAC,UAAU,CAAC,kBAAkB,CAAC,EAAE,CAAC;YAC1E,UAAU,CAAC,IAAI,CAAC,GAAG,eAAe,CAAC,IAAI,EAAE,YAAY,EAAE,cAAc,CAAC,CAAC,CAAC;QAC1E,CAAC;IACH,CAAC;IAED,OAAO,UAAU,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;AACnC,CAAC;AAED;;;;;;GAMG;AACH,SAAS,qBAAqB,CAAC,EAA0C;IACvE,MAAM,GAAG,GAAG,IAAI,GAAG,EAAU,CAAC;IAC9B,MAAM,UAAU,GAAI,EAKlB,CAAC,qBAAqB,EAAE,CAAC;IAC3B,KAAK,MAAM,IAAI,IAAI,UAAU,EAAE,CAAC;QAC9B,MAAM,IAAI,GAAG,IAAI,CAAC,kBAAkB,EAAE,CAAC;QACvC,IAAI,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK;YAAE,SAAS;QAC/C,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,eAAe,EAAE,EAAE,CAAC;YAC1C,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC,OAAO,EAAE,KAAK,UAAU,CAAC,UAAU;gBAAE,SAAS;YACrE,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC;QAC1B,CAAC;IACH,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAID,SAAS,eAAe,CAAC,EAAY,EAAE,IAAY,EAAE,cAA2B;IAC9E,MAAM,MAAM,GAAG,IAAI,GAAG,EAAgC,CAAC;IACvD,KAAK,MAAM,CAAC,IAAI,EAAE,CAAC,aAAa,EAAE,EAAE,CAAC;QACnC,sEAAsE;QACtE,iDAAiD;QACjD,IAAI,CAAC,CAAC,WAAW,EAAE,CAAC,OAAO,EAAE,KAAK,UAAU,CAAC,UAAU;YAAE,SAAS;QAClE,MAAM,IAAI,GAAG,CAAC,CAAC,OAAO,EAAE,CAAC;QACzB,MAAM,QAAQ,GAAG,CAAC,CAAC,WAAW,EAAE,CAAC;QACjC,MAAM,QAAQ,GAAG,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,EAAE,CAAC;QACvE,MAAM,CAAC,GAAG,CAAC,IAAI,EAAE,EAAE,QAAQ,EAAE,CAAC,CAAC;IACjC,CAAC;IAED,MAAM,IAAI,GAAI,EAA2C,CAAC,OAAO,EAAE,EAAE,CAAC;IACtE,IAAI,CAAC,IAAI;QAAE,OAAO,EAAE,CAAC;IAErB,MAAM,eAAe,GAAG,mBAAmB,CAAE,EAA4B,CAAC,OAAO,EAAE,CAAC,CAAC;IACrF,MAAM,aAAa,GAAI,EAA6C,CAAC,OAAO,EAAE,EAAE,CAAC;IAEjF,2EAA2E;IAC3E,wEAAwE;IACxE,4DAA4D;IAC5D,MAAM,mBAAmB,GAAG,0BAA0B,CAAC,IAAI,CAAC,CAAC;IAE7D,MAAM,KAAK,GAAmB,EAAE,CAAC;IAEjC,MAAM,YAAY,GAAG,CACnB,IAAY,EACuD,EAAE;QACrE,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAC/B,IAAI,KAAK;YAAE,OAAO,EAAE,KAAK,EAAE,WAAW,EAAE,QAAQ,EAAE,cAAc,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAC;QACnF,IAAI,cAAc,CAAC,GAAG,CAAC,IAAI,CAAC;YAAE,OAAO,EAAE,KAAK,EAAE,cAAc,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;QAChF,OAAO,IAAI,CAAC;IACd,CAAC,CAAC;IAEF,+EAA+E;IAC/E,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,oBAAoB,CAAC,UAAU,CAAC,cAAc,CAAC,EAAE,CAAC;QACxE,IAAI,mBAAmB,CAAC,IAAI,CAAC;YAAE,SAAS;QACxC,MAAM,MAAM,GAAG,IAAI,CAAC,aAAa,EAAE,CAAC;QAEpC,IAAI,MAAM,CAAC,OAAO,EAAE,KAAK,UAAU,CAAC,wBAAwB;YAAE,SAAS;QACvE,MAAM,EAAE,GAAG,MAAM,CAAC,aAAa,CAAC,UAAU,CAAC,wBAAwB,CAAC,CAAC;QACrE,MAAM,IAAI,GAAG,EAAE,CAAC,aAAa,EAAE,CAAC,OAAO,EAAE,CAAC;QAC1C,MAAM,MAAM,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC;QAE5B,kFAAkF;QAClF,IAAI,IAAI,KAAK,QAAQ,IAAI,MAAM,KAAK,QAAQ,EAAE,CAAC;YAC7C,MAAM,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC,YAAY,EAAE,CAAC;YACpC,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,OAAO,EAAE,KAAK,UAAU,CAAC,UAAU;gBAAE,SAAS;YAClE,MAAM,UAAU,GAAG,KAAK,CAAC,OAAO,EAAE,CAAC;YACnC,MAAM,KAAK,GAAG,YAAY,CAAC,UAAU,CAAC,CAAC;YACvC,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,QAAQ;gBAAE,SAAS;YACvC,KAAK,CAAC,IAAI,CAAC;gBACT,IAAI;gBACJ,IAAI,EAAE,IAAI,CAAC,kBAAkB,EAAE;gBAC/B,OAAO,EAAE,IAAI,CAAC,gBAAgB,EAAE;gBAChC,OAAO,EAAE,KAAK,CAAC,KAAK,KAAK,cAAc,CAAC,CAAC,CAAC,oBAAoB,CAAC,CAAC,CAAC,eAAe;gBAChF,KAAK,EAAE,KAAK,CAAC,KAAK;gBAClB,OAAO,EAAE,KAAK,CAAC,KAAK,KAAK,WAAW,IAAI,mBAAmB,CAAC,GAAG,CAAC,UAAU,CAAC;gBAC3E,MAAM,EAAE,UAAU;gBAClB,OAAO,EAAE,WAAW,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;gBACpC,MAAM,EAAE,IAAI,CAAC,OAAO,EAAE;gBACtB,eAAe;gBACf,aAAa;aACd,CAAC,CAAC;YACH,SAAS;QACX,CAAC;QAED,qCAAqC;QACrC,IAAI,sBAAsB,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;YACvC,MAAM,KAAK,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC;YACjC,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,QAAQ;gBAAE,SAAS;YACvC,KAAK,CAAC,IAAI,CAAC;gBACT,IAAI;gBACJ,IAAI,EAAE,IAAI,CAAC,kBAAkB,EAAE;gBAC/B,OAAO,EAAE,IAAI,CAAC,gBAAgB,EAAE;gBAChC,OAAO,EAAE,KAAK,CAAC,KAAK,KAAK,cAAc,CAAC,CAAC,CAAC,oBAAoB,CAAC,CAAC,CAAC,eAAe;gBAChF,KAAK,EAAE,KAAK,CAAC,KAAK;gBAClB,OAAO,EAAE,KAAK,CAAC,KAAK,KAAK,WAAW,IAAI,mBAAmB,CAAC,GAAG,CAAC,IAAI,CAAC;gBACrE,MAAM,EAAE,IAAI;gBACZ,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE,WAAW,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;gBACpC,MAAM,EAAE,IAAI,CAAC,OAAO,EAAE;gBACtB,eAAe;gBACf,aAAa;aACd,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,+EAA+E;IAC/E,KAAK,MAAM,GAAG,IAAI,IAAI,CAAC,oBAAoB,CAAC,UAAU,CAAC,gBAAgB,CAAC,EAAE,CAAC;QACzE,IAAI,mBAAmB,CAAC,GAAG,CAAC;YAAE,SAAS;QACvC,MAAM,OAAO,GAAG,GAAG,CAAC,aAAa,EAAE,CAAC;QACpC,MAAM,IAAI,GAAG,cAAc,CAAC,OAAO,CAAC,CAAC;QACrC,IAAI,CAAC,IAAI;YAAE,SAAS;QACpB,MAAM,KAAK,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC;QACjC,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,QAAQ;YAAE,SAAS;QACvC,KAAK,CAAC,IAAI,CAAC;YACT,IAAI;YACJ,IAAI,EAAE,GAAG,CAAC,kBAAkB,EAAE;YAC9B,OAAO,EAAE,GAAG,CAAC,gBAAgB,EAAE;YAC/B,OAAO,EAAE,KAAK,CAAC,KAAK,KAAK,cAAc,CAAC,CAAC,CAAC,oBAAoB,CAAC,CAAC,CAAC,iBAAiB;YAClF,KAAK,EAAE,KAAK,CAAC,KAAK;YAClB,OAAO,EAAE,KAAK,CAAC,KAAK,KAAK,WAAW,IAAI,mBAAmB,CAAC,GAAG,CAAC,IAAI,CAAC;YACrE,MAAM,EAAE,IAAI;YACZ,OAAO,EAAE,WAAW,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC;YACnC,MAAM,EAAE,GAAG,CAAC,OAAO,EAAE;YACrB,eAAe;YACf,aAAa;SACd,CAAC,CAAC;IACL,CAAC;IAED,+EAA+E;IAC/E,KAAK,MAAM,GAAG,IAAI,IAAI,CAAC,oBAAoB,CAAC,UAAU,CAAC,gBAAgB,CAAC,EAAE,CAAC;QACzE,MAAM,MAAM,GAAG,GAAG,CAAC,gBAAgB,EAAE,CAAC,OAAO,EAAE,CAAC;QAChD,IAAI,CAAC,oBAAoB,CAAC,GAAG,CAAC,MAAM,CAAC;YAAE,SAAS;QAChD,IAAI,mBAAmB,CAAC,GAAG,CAAC;YAAE,SAAS;QACvC,MAAM,GAAG,GAAG,GAAG,CAAC,OAAO,EAAE,CAAC;QAC1B,IAAI,GAAG,CAAC,OAAO,EAAE,KAAK,UAAU,CAAC,wBAAwB,IAAI,GAAG,CAAC,OAAO,EAAE,KAAK,UAAU,CAAC,uBAAuB,EAAE,CAAC;YAClH,SAAS;QACX,CAAC;QACD,MAAM,IAAI,GAAG,cAAc,CAAC,GAAG,CAAC,CAAC;QACjC,IAAI,CAAC,IAAI;YAAE,SAAS;QACpB,IAAI,IAAI,KAAK,MAAM;YAAE,SAAS,CAAC,qDAAqD;QACpF,MAAM,KAAK,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC;QACjC,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,QAAQ;YAAE,SAAS;QACvC,KAAK,CAAC,IAAI,CAAC;YACT,IAAI;YACJ,IAAI,EAAE,GAAG,CAAC,kBAAkB,EAAE;YAC9B,OAAO,EAAE,GAAG,CAAC,gBAAgB,EAAE;YAC/B,OAAO,EAAE,KAAK,CAAC,KAAK,KAAK,cAAc,CAAC,CAAC,CAAC,oBAAoB,CAAC,CAAC,CAAC,qBAAqB;YACtF,KAAK,EAAE,KAAK,CAAC,KAAK;YAClB,OAAO,EAAE,KAAK,CAAC,KAAK,KAAK,WAAW,IAAI,mBAAmB,CAAC,GAAG,CAAC,IAAI,CAAC;YACrE,MAAM,EAAE,IAAI;YACZ,OAAO,EAAE,WAAW,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC;YACnC,MAAM,EAAE,GAAG,CAAC,OAAO,EAAE;YACrB,eAAe;YACf,aAAa;SACd,CAAC,CAAC;IACL,CAAC;IAED,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;;;;;;GASG;AACH,SAAS,0BAA0B,CAAC,IAAU;IAC5C,MAAM,GAAG,GAAG,IAAI,GAAG,EAAU,CAAC;IAC9B,KAAK,MAAM,GAAG,IAAI,IAAI,CAAC,oBAAoB,CAAC,UAAU,CAAC,eAAe,CAAC,EAAE,CAAC;QACxE,MAAM,IAAI,GAAG,GAAG,CAAC,aAAa,EAAE,CAAC;QACjC,IAAI,CAAC,IAAI;YAAE,SAAS;QACpB,kBAAkB,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IAChC,CAAC;IACD,KAAK,MAAM,GAAG,IAAI,IAAI,CAAC,oBAAoB,CAAC,UAAU,CAAC,gBAAgB,CAAC,EAAE,CAAC;QACzE,IAAI,GAAG,CAAC,gBAAgB,EAAE,CAAC,OAAO,EAAE,KAAK,GAAG;YAAE,SAAS;QACvD,MAAM,GAAG,GAAG,GAAG,CAAC,OAAO,EAAE,CAAC,MAAM,CAAC,UAAU,CAAC,wBAAwB,CAAC,CAAC;QACtE,IAAI,CAAC,GAAG;YAAE,SAAS;QACnB,IAAI,GAAG,CAAC,aAAa,EAAE,CAAC,OAAO,EAAE,KAAK,UAAU,CAAC,WAAW;YAAE,SAAS;QACvE,kBAAkB,CAAC,GAAG,CAAC,QAAQ,EAAE,EAAE,GAAG,CAAC,CAAC;IAC1C,CAAC;IACD,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,oBAAoB,CAAC,UAAU,CAAC,cAAc,CAAC,EAAE,CAAC;QACxE,4EAA4E;QAC5E,gEAAgE;QAChE,KAAK,MAAM,GAAG,IAAI,IAAI,CAAC,YAAY,EAAE,EAAE,CAAC;YACtC,kBAAkB,CAAC,GAAW,EAAE,GAAG,CAAC,CAAC;QACvC,CAAC;IACH,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,kBAAkB,CAAC,IAAU,EAAE,IAAiB;IACvD,IAAI,IAAI,CAAC,OAAO,EAAE,KAAK,UAAU,CAAC,UAAU,EAAE,CAAC;QAC7C,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC;QACzB,OAAO;IACT,CAAC;IACD,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,oBAAoB,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;QACrE,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;IAC5B,CAAC;AACH,CAAC;AAED,8EAA8E;AAC9E,SAAS,cAAc,CAAC,IAAU;IAChC,IAAI,GAAG,GAAS,IAAI,CAAC;IACrB,OAAO,IAAI,EAAE,CAAC;QACZ,MAAM,IAAI,GAAG,GAAG,CAAC,MAAM,CAAC,UAAU,CAAC,wBAAwB,CAAC,CAAC;QAC7D,MAAM,IAAI,GAAG,GAAG,CAAC,MAAM,CAAC,UAAU,CAAC,uBAAuB,CAAC,CAAC;QAC5D,IAAI,CAAC,IAAI,IAAI,CAAC,IAAI;YAAE,MAAM;QAC1B,GAAG,GAAG,CAAC,IAAI,IAAI,IAAK,CAAC,CAAC,aAAa,EAAE,CAAC;IACxC,CAAC;IACD,IAAI,GAAG,CAAC,OAAO,EAAE,KAAK,UAAU,CAAC,UAAU;QAAE,OAAO,GAAG,CAAC,OAAO,EAAE,CAAC;IAClE,IAAI,GAAG,CAAC,OAAO,EAAE,KAAK,UAAU,CAAC,WAAW;QAAE,OAAO,MAAM,CAAC;IAC5D,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,cAAc,CAAC,IAAY;IAClC,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;IACjD,IAAI,gBAAgB,CAAC,IAAI,CAAC,OAAO,CAAC;QAAE,OAAO,IAAI,CAAC;IAChD,IAAI,qBAAqB,CAAC,IAAI,CAAC,OAAO,CAAC;QAAE,OAAO,IAAI,CAAC;IACrD,IAAI,aAAa,CAAC,IAAI,CAAC,OAAO,CAAC;QAAE,OAAO,IAAI,CAAC;IAC7C,IAAI,mCAAmC,CAAC,IAAI,CAAC,OAAO,CAAC;QAAE,OAAO,IAAI,CAAC;IACnE,IAAI,kBAAkB,CAAC,IAAI,CAAC,OAAO,CAAC;QAAE,OAAO,IAAI,CAAC;IAClD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,mBAAmB,CAAC,IAAU;IACrC,MAAM,MAAM,GAAG,IAAI,CAAC,uBAAuB,EAAE,CAAC;IAC9C,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC,QAAQ,CAAC,iBAAiB,CAAC;YAAE,OAAO,IAAI,CAAC;IAC/D,CAAC;IACD,uDAAuD;IACvD,MAAM,SAAS,GAAG,IAAI,CAAC,YAAY,EAAE,CAAC;IACtC,MAAM,EAAE,GAAG,IAAI,CAAC,aAAa,EAAE,CAAC;IAChC,MAAM,IAAI,GAAG,EAAE,CAAC,WAAW,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,SAAS,GAAG,GAAG,CAAC,EAAE,SAAS,CAAC,CAAC;IAC7E,OAAO,IAAI,CAAC,QAAQ,CAAC,iBAAiB,CAAC,CAAC;AAC1C,CAAC;AAGD,SAAS,SAAS,CAAC,CAAe;IAChC,iCAAiC;IACjC,4DAA4D;IAC5D,MAAM,QAAQ,GAAa,CAAC,CAAC,OAAO;QAClC,CAAC,CAAC,MAAM;QACR,CAAC,CAAC,CAAC,CAAC,KAAK,KAAK,cAAc;YAC1B,CAAC,CAAC,MAAM;YACR,CAAC,CAAC,CAAC,CAAC,OAAO,KAAK,iBAAiB;gBAC/B,CAAC,CAAC,MAAM;gBACR,CAAC,CAAC,QAAQ,CAAC;IAEjB,MAAM,OAAO,GAAG,CAAC,CAAC,KAAK,KAAK,cAAc,CAAC,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,WAAW,CAAC;IACjF,MAAM,MAAM,GACV,CAAC,CAAC,OAAO,KAAK,eAAe;QAC3B,CAAC,CAAC,mBAAmB,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,MAAM,IAAI,GAAG,IAAI;QACpD,CAAC,CAAC,CAAC,CAAC,OAAO,KAAK,eAAe;YAC7B,CAAC,CAAC,+BAA+B,CAAC,CAAC,MAAM,EAAE;YAC3C,CAAC,CAAC,CAAC,CAAC,OAAO,KAAK,iBAAiB;gBAC/B,CAAC,CAAC,6BAA6B,CAAC,CAAC,MAAM,IAAI;gBAC3C,CAAC,CAAC,CAAC,CAAC,OAAO,KAAK,qBAAqB;oBACnC,CAAC,CAAC,wBAAwB,CAAC,CAAC,MAAM,IAAI;oBACtC,CAAC,CAAC,UAAU,CAAC,CAAC,MAAM,EAAE,CAAC;IACjC,MAAM,SAAS,GAAG,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,CAAC;IAChD,MAAM,KAAK,GAAG,GAAG,OAAO,IAAI,MAAM,GAAG,SAAS,EAAE,CAAC;IAEjD,MAAM,WAAW,GAAG;QAClB,GAAG,KAAK,eAAe,CAAC,CAAC,OAAO,eAAe,CAAC,CAAC,KAAK,KAAK,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,IAAI;QAC3F,YAAY;QACZ,KAAK,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,IAAI,MAAM,CAAC,CAAC,OAAO,IAAI;QACxC,EAAE;QACF,CAAC,CAAC,OAAO;YACP,CAAC,CAAC,uLAAuL;YACzL,CAAC,CAAC,CAAC,CAAC,KAAK,KAAK,cAAc;gBAC1B,CAAC,CAAC,2KAA2K;gBAC7K,CAAC,CAAC,6NAA6N;KACpO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAEb,OAAO;QACL,UAAU,EAAE,UAAU;QACtB,QAAQ;QACR,UAAU,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,KAAK,cAAc,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG;QACtE,KAAK,EAAE,CAAC;QACR,KAAK;QACL,WAAW;QACX,QAAQ,EAAE;YACR;gBACE,IAAI,EAAE,CAAC,CAAC,IAAI;gBACZ,KAAK,EAAE,EAAE,SAAS,EAAE,CAAC,CAAC,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE;gBAChD,OAAO,EAAE,CAAC,CAAC,MAAM;gBACjB,2DAA2D;gBAC3D,qEAAqE;gBACrE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;oBACnB,eAAe,EAAE,CAAC,CAAC,eAAe;oBAClC,aAAa,EAAE,CAAC,CAAC,aAAa,IAAI,EAAE;oBACpC,OAAO,EAAE,CAAC,CAAC,OAAO;oBAClB,OAAO,EAAE,CAAC,CAAC,OAAO;iBACnB,CAAC;aACH;SACF;QACD,UAAU,EACR,CAAC,CAAC,KAAK,KAAK,cAAc;YACxB,CAAC,CAAC,gJAAgJ;YAClJ,CAAC,CAAC,+FAA+F;QACrG,WAAW,EAAE,YAAY,CAAC,CAAC,OAAO,IAAI,UAAU,CAAC,GAAG,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,MAAM,EAAE,CAAC,EAAE;KACxF,CAAC;AACJ,CAAC;AAGD;;;;GAIG"}

package/dist/detectors/public-any.d.ts

@@ -0,0 +1,6 @@
+import type { Finding, SymbolRecord } from '../types.js';
+export interface PublicAnyDetectorInput {
+    symbols: ReadonlyArray<SymbolRecord>;
+}
+export declare function detectPublicAny(input: PublicAnyDetectorInput): Finding[];
+//# sourceMappingURL=public-any.d.ts.map

package/dist/detectors/public-any.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"public-any.d.ts","sourceRoot":"","sources":["../../src/detectors/public-any.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,YAAY,EAAqB,MAAM,aAAa,CAAC;AAG5E,MAAM,WAAW,sBAAsB;IACrC,OAAO,EAAE,aAAa,CAAC,YAAY,CAAC,CAAC;CACtC;AAID,wBAAgB,eAAe,CAAC,KAAK,EAAE,sBAAsB,GAAG,OAAO,EAAE,CAmCxE"}

package/dist/detectors/public-any.js

@@ -0,0 +1,52 @@
+import { stableHash } from '../utils/hash.js';
+// Exported function with `any` in params or return. HIGH — caller-visible
+// type hole. `any[]`, `Record<string, any>`, `any | T` count. `unknown` doesn't.
+export function detectPublicAny(input) {
+    const findings = [];
+    for (const sym of input.symbols) {
+        if (sym.kind !== 'function')
+            continue;
+        if (!sym.exported)
+            continue;
+        const fn = sym.structure;
+        if (!fn || fn.kind !== 'function')
+            continue;
+        const offendingParams = fn.params.filter((p) => containsAny(p.type)).map((p) => p.name);
+        const returnAny = containsAny(fn.returnType);
+        if (offendingParams.length === 0 && !returnAny)
+            continue;
+        const where = [
+            ...offendingParams.map((n) => `param \`${n}: any\``),
+            ...(returnAny ? [`return \`${fn.returnType}\``] : []),
+        ];
+        findings.push({
+            detectorId: 'public-any',
+            severity: 'high',
+            confidence: 0.97,
+            layer: 1,
+            title: `Public \`any\` in \`${sym.name}\` (${sym.file})`,
+            description: `Exported function \`${sym.name}\` exposes \`any\` in its signature (${where.join(', ')}). Every caller silently loses type-safety on this boundary.`,
+            evidence: [
+                {
+                    file: sym.file,
+                    range: { startLine: sym.range.startLine, endLine: sym.range.endLine },
+                    snippet: sym.source.split('\n').slice(0, 4).join('\n'),
+                },
+            ],
+            suggestion: 'Replace `any` with the narrowest type that actually works (`unknown` + a type guard, a discriminated union, or a real interface). Prefer `unknown` over `any` when you only need "I do not know the shape yet".',
+            fingerprint: `public-any:${stableHash(`${sym.file}:${sym.name}`)}`,
+        });
+    }
+    return findings;
+}
+/**
+ * True iff the rendered type includes a standalone `any` (not part of a
+ * larger identifier like `Many`). Looks at top-level + nested generics.
+ */
+function containsAny(type) {
+    if (!type)
+        return false;
+    // Word-boundary match; excludes `Many`, `anyway`, `JsonAny` etc.
+    return /\bany\b/.test(type);
+}
+//# sourceMappingURL=public-any.js.map

package/dist/detectors/public-any.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"public-any.js","sourceRoot":"","sources":["../../src/detectors/public-any.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAM9C,0EAA0E;AAC1E,iFAAiF;AACjF,MAAM,UAAU,eAAe,CAAC,KAA6B;IAC3D,MAAM,QAAQ,GAAc,EAAE,CAAC;IAC/B,KAAK,MAAM,GAAG,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC;QAChC,IAAI,GAAG,CAAC,IAAI,KAAK,UAAU;YAAE,SAAS;QACtC,IAAI,CAAC,GAAG,CAAC,QAAQ;YAAE,SAAS;QAC5B,MAAM,EAAE,GAAG,GAAG,CAAC,SAA0C,CAAC;QAC1D,IAAI,CAAC,EAAE,IAAI,EAAE,CAAC,IAAI,KAAK,UAAU;YAAE,SAAS;QAC5C,MAAM,eAAe,GAAG,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QACxF,MAAM,SAAS,GAAG,WAAW,CAAC,EAAE,CAAC,UAAU,CAAC,CAAC;QAC7C,IAAI,eAAe,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,SAAS;YAAE,SAAS;QACzD,MAAM,KAAK,GAAG;YACZ,GAAG,eAAe,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,WAAW,CAAC,SAAS,CAAC;YACpD,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,YAAY,EAAE,CAAC,UAAU,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;SACtD,CAAC;QACF,QAAQ,CAAC,IAAI,CAAC;YACZ,UAAU,EAAE,YAAY;YACxB,QAAQ,EAAE,MAAM;YAChB,UAAU,EAAE,IAAI;YAChB,KAAK,EAAE,CAAC;YACR,KAAK,EAAE,uBAAuB,GAAG,CAAC,IAAI,OAAO,GAAG,CAAC,IAAI,GAAG;YACxD,WAAW,EACT,uBAAuB,GAAG,CAAC,IAAI,wCAAwC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,8DAA8D;YACvJ,QAAQ,EAAE;gBACR;oBACE,IAAI,EAAE,GAAG,CAAC,IAAI;oBACd,KAAK,EAAE,EAAE,SAAS,EAAE,GAAG,CAAC,KAAK,CAAC,SAAS,EAAE,OAAO,EAAE,GAAG,CAAC,KAAK,CAAC,OAAO,EAAE;oBACrE,OAAO,EAAE,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;iBACvD;aACF;YACD,UAAU,EACR,iNAAiN;YACnN,WAAW,EAAE,cAAc,UAAU,CAAC,GAAG,GAAG,CAAC,IAAI,IAAI,GAAG,CAAC,IAAI,EAAE,CAAC,EAAE;SACnE,CAAC,CAAC;IACL,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED;;;GAGG;AACH,SAAS,WAAW,CAAC,IAAY;IAC/B,IAAI,CAAC,IAAI;QAAE,OAAO,KAAK,CAAC;IACxB,iEAAiE;IACjE,OAAO,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC9B,CAAC"}

package/dist/detectors/race-condition.d.ts

@@ -0,0 +1,6 @@
+import type { Finding } from '../types.js';
+import type { FileWalkingDetectorInput } from '../types/detector-input.js';
+export interface RaceConditionDetectorInput extends FileWalkingDetectorInput {
+}
+export declare function detectRaceConditions(input: RaceConditionDetectorInput): Finding[];
+//# sourceMappingURL=race-condition.d.ts.map

package/dist/detectors/race-condition.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"race-condition.d.ts","sourceRoot":"","sources":["../../src/detectors/race-condition.ts"],"names":[],"mappings":"AAYA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,aAAa,CAAC;AAE3C,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,4BAA4B,CAAC;AAE3E,MAAM,WAAW,0BAA2B,SAAQ,wBAAwB;CAAG;AAsD/E,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,0BAA0B,GAAG,OAAO,EAAE,CAuEjF"}