@memberjunction/react-linter 0.0.1 → 5.38.0

package/dist/runtime-rules/unsafe-array-operations.js

@@ -0,0 +1,347 @@
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+import { traverse } from '../lint-utils.js';
+import { RegisterClass } from '@memberjunction/global';
+import * as t from '@babel/types';
+import { BaseLintRule } from '../lint-rule.js';
+import { ControlFlowAnalyzer } from '../control-flow-analyzer.js';
+/**
+ * Rule: unsafe-array-operations
+ *
+ * Detects potentially unsafe array operations including:
+ * - Direct array index access without bounds checking (arr[0])
+ * - Array methods called on potentially undefined props
+ * - reduce() without initial value
+ *
+ * Uses ControlFlowAnalyzer for guard detection.
+ *
+ * Severity: low
+ * Applies to: all components
+ *
+ * Closure dependencies: ControlFlowAnalyzer (instantiated locally, no closure)
+ */
+let UnsafeArrayOperationsRule = class UnsafeArrayOperationsRule extends BaseLintRule {
+    get Name() { return 'unsafe-array-operations'; }
+    get AppliesTo() { return 'all'; }
+    Test(ast, componentName, componentSpec) {
+        const violations = [];
+        // Create control flow analyzer for guard detection
+        const cfa = new ControlFlowAnalyzer(ast, componentSpec);
+        // Track which parameters are from props (likely from queries/RunView)
+        const propsParams = new Set();
+        traverse(ast, {
+            // Find the main component function to identify props
+            FunctionDeclaration(path) {
+                if (path.node.id?.name === componentName) {
+                    const params = path.node.params[0];
+                    if (t.isObjectPattern(params)) {
+                        params.properties.forEach((prop) => {
+                            if (t.isObjectProperty(prop) && t.isIdentifier(prop.key)) {
+                                propsParams.add(prop.key.name);
+                            }
+                        });
+                    }
+                }
+            },
+            FunctionExpression(path) {
+                const parent = path.parent;
+                if (t.isVariableDeclarator(parent) && t.isIdentifier(parent.id)) {
+                    if (parent.id.name === componentName) {
+                        const params = path.node.params[0];
+                        if (t.isObjectPattern(params)) {
+                            params.properties.forEach((prop) => {
+                                if (t.isObjectProperty(prop) && t.isIdentifier(prop.key)) {
+                                    propsParams.add(prop.key.name);
+                                }
+                            });
+                        }
+                    }
+                }
+            },
+            // Check for direct array access patterns like arr[0]
+            MemberExpression(path) {
+                const { object, property, computed } = path.node;
+                // Check for array[index] patterns
+                if (computed && (t.isNumericLiteral(property) || (t.isIdentifier(property) && /^\d+$/.test(property.name)))) {
+                    const code = path.toString();
+                    // Check if there's optional chaining
+                    if (!path.node.optional) {
+                        let isSafe = false;
+                        const accessIndex = t.isNumericLiteral(property) ? property.value : parseInt(property.name, 10);
+                        // Use CFA to check if array access is safe due to bounds checking
+                        if (!isNaN(accessIndex) && cfa.isArrayAccessSafe(object, accessIndex, path)) {
+                            isSafe = true;
+                        }
+                        // Pattern 1: Result of split() always has at least one element
+                        if (!isSafe &&
+                            t.isCallExpression(object) &&
+                            t.isMemberExpression(object.callee) &&
+                            t.isIdentifier(object.callee.property) &&
+                            object.callee.property.name === 'split') {
+                            isSafe = true;
+                        }
+                        // Pattern 1b: Object.entries() callback parameters always have [0] and [1]
+                        if (t.isIdentifier(object) && t.isNumericLiteral(property) && property.value <= 1) {
+                            const funcParent = path.getFunctionParent();
+                            if (funcParent) {
+                                const params = funcParent.node.params;
+                                for (const param of params) {
+                                    if (t.isIdentifier(param) && param.name === object.name) {
+                                        const callParent = funcParent.parentPath;
+                                        if (callParent && t.isCallExpression(callParent.node)) {
+                                            const calleeNode = callParent.node.callee;
+                                            if (t.isMemberExpression(calleeNode) && t.isIdentifier(calleeNode.property)) {
+                                                const methodName = calleeNode.property.name;
+                                                if (['sort', 'filter', 'map', 'forEach', 'find', 'some', 'every', 'reduce', 'findIndex'].includes(methodName)) {
+                                                    const checkForObjectEntries = (node) => {
+                                                        if (t.isCallExpression(node) &&
+                                                            t.isMemberExpression(node.callee) &&
+                                                            t.isIdentifier(node.callee.object) &&
+                                                            node.callee.object.name === 'Object' &&
+                                                            t.isIdentifier(node.callee.property) &&
+                                                            node.callee.property.name === 'entries') {
+                                                            return true;
+                                                        }
+                                                        if (t.isCallExpression(node) && t.isMemberExpression(node.callee) && t.isIdentifier(node.callee.property)) {
+                                                            const chainMethod = node.callee.property.name;
+                                                            if (['filter', 'map', 'slice', 'concat', 'flat', 'flatMap', 'reverse', 'toSorted', 'toReversed'].includes(chainMethod)) {
+                                                                return checkForObjectEntries(node.callee.object);
+                                                            }
+                                                        }
+                                                        return false;
+                                                    };
+                                                    if (checkForObjectEntries(calleeNode.object)) {
+                                                        isSafe = true;
+                                                    }
+                                                }
+                                            }
+                                        }
+                                    }
+                                }
+                            }
+                        }
+                        // Pattern 1c: Fallback pattern with array access (|| operator)
+                        if (!isSafe && t.isLogicalExpression(object) && object.operator === '||') {
+                            isSafe = true;
+                        }
+                        // Pattern 2: Object.keys/values/entries always returns an array
+                        if (t.isCallExpression(object) &&
+                            t.isMemberExpression(object.callee) &&
+                            t.isIdentifier(object.callee.object) &&
+                            object.callee.object.name === 'Object' &&
+                            t.isIdentifier(object.callee.property) &&
+                            ['keys', 'values', 'entries'].includes(object.callee.property.name)) {
+                            isSafe = true;
+                        }
+                        // Pattern 4: Chained array methods that preserve or filter arrays
+                        if (!isSafe && t.isCallExpression(object)) {
+                            const arrayReturningMethods = [
+                                'sort', 'reverse', 'fill', 'copyWithin',
+                                'filter', 'map', 'slice', 'concat', 'flat', 'flatMap',
+                                'splice',
+                            ];
+                            if (t.isMemberExpression(object.callee) && t.isIdentifier(object.callee.property)) {
+                                const methodName = object.callee.property.name;
+                                if (arrayReturningMethods.includes(methodName)) {
+                                    isSafe = true;
+                                }
+                            }
+                        }
+                        if (!isSafe) {
+                            violations.push({
+                                rule: 'unsafe-array-operations',
+                                severity: 'low',
+                                line: path.node.loc?.start.line || 0,
+                                column: path.node.loc?.start.column || 0,
+                                message: `Direct array access "${code}" may be undefined. Consider using optional chaining: ${code.replace('[', '?.[')} or check array bounds first.`,
+                                code: code.substring(0, 50),
+                            });
+                        }
+                    }
+                }
+                // Check for array methods that could fail on undefined
+                const unsafeArrayMethods = ['map', 'filter', 'forEach', 'reduce', 'find', 'some', 'every', 'length'];
+                if (t.isIdentifier(property) && unsafeArrayMethods.includes(property.name)) {
+                    if (t.isIdentifier(object) && propsParams.has(object.name)) {
+                        const isDataProp = object.name.toLowerCase().includes('data') ||
+                            object.name.toLowerCase().includes('items') ||
+                            object.name.toLowerCase().includes('results') ||
+                            object.name.toLowerCase().includes('records') ||
+                            object.name.toLowerCase().includes('list') ||
+                            object.name.toLowerCase().includes('types') ||
+                            object.name.toLowerCase().includes('options');
+                        if (isDataProp || property.name === 'length') {
+                            let hasGuard = false;
+                            // Check for optional chaining
+                            if (path.node.optional) {
+                                hasGuard = true;
+                            }
+                            // Check for (data || []).map pattern
+                            const parent = path.parent;
+                            if (t.isMemberExpression(parent) && t.isLogicalExpression(parent.object)) {
+                                if (parent.object.operator === '||' && t.isIdentifier(parent.object.left)) {
+                                    if (parent.object.left.name === object.name) {
+                                        hasGuard = true;
+                                    }
+                                }
+                            }
+                            // Check for inline guards like: data && data.map(...)
+                            const grandParent = path.parentPath?.parent;
+                            if (t.isLogicalExpression(grandParent) && grandParent.operator === '&&') {
+                                if (t.isIdentifier(grandParent.left) && grandParent.left.name === object.name) {
+                                    hasGuard = true;
+                                }
+                            }
+                            // Check for short-circuit OR guard
+                            if (!hasGuard && t.isLogicalExpression(grandParent) && grandParent.operator === '||') {
+                                if (t.isUnaryExpression(grandParent.left) &&
+                                    grandParent.left.operator === '!' &&
+                                    t.isIdentifier(grandParent.left.argument) &&
+                                    grandParent.left.argument.name === object.name) {
+                                    hasGuard = true;
+                                }
+                            }
+                            // Check with CFA for guards in conditional branches
+                            if (!hasGuard && cfa.isDefinitelyNonNull(object, path)) {
+                                hasGuard = true;
+                            }
+                            // Walk up the && chain to find guards in chained expressions
+                            if (!hasGuard) {
+                                let currentPath = path.parentPath;
+                                while (currentPath) {
+                                    if (t.isIfStatement(currentPath.node)) {
+                                        const test = currentPath.node.test;
+                                        if (t.isLogicalExpression(test) && test.operator === '&&') {
+                                            const collectAndOperands = (node) => {
+                                                if (t.isLogicalExpression(node) && node.operator === '&&') {
+                                                    return [...collectAndOperands(node.left), ...collectAndOperands(node.right)];
+                                                }
+                                                return [node];
+                                            };
+                                            const operands = collectAndOperands(test);
+                                            let foundGuard = false;
+                                            for (let i = 0; i < operands.length; i++) {
+                                                const op = operands[i];
+                                                if (t.isIdentifier(op) && op.name === object.name) {
+                                                    foundGuard = true;
+                                                }
+                                                let containsLengthAccess = false;
+                                                if (t.isBinaryExpression(op)) {
+                                                    if (t.isMemberExpression(op.left) &&
+                                                        t.isIdentifier(op.left.object) &&
+                                                        op.left.object.name === object.name &&
+                                                        t.isIdentifier(op.left.property) &&
+                                                        op.left.property.name === 'length') {
+                                                        containsLengthAccess = true;
+                                                    }
+                                                }
+                                                else if (t.isMemberExpression(op) &&
+                                                    t.isIdentifier(op.object) &&
+                                                    op.object.name === object.name) {
+                                                    containsLengthAccess = true;
+                                                }
+                                                if (containsLengthAccess) {
+                                                    if (foundGuard) {
+                                                        hasGuard = true;
+                                                        break;
+                                                    }
+                                                }
+                                            }
+                                        }
+                                        break;
+                                    }
+                                    currentPath = currentPath.parentPath;
+                                }
+                            }
+                            // Check for early return guards in the function
+                            const functionParent = path.getFunctionParent();
+                            if (functionParent && !hasGuard) {
+                                let hasEarlyReturn = false;
+                                functionParent.traverse({
+                                    IfStatement(ifPath) {
+                                        if (ifPath.node.loc && path.node.loc) {
+                                            if (ifPath.node.loc.start.line > path.node.loc.start.line) {
+                                                return;
+                                            }
+                                        }
+                                        const test = ifPath.node.test;
+                                        let checksOurVariable = false;
+                                        if (t.isUnaryExpression(test) && test.operator === '!') {
+                                            if (t.isIdentifier(test.argument) && test.argument.name === object.name) {
+                                                checksOurVariable = true;
+                                            }
+                                        }
+                                        if (t.isLogicalExpression(test)) {
+                                            ifPath.traverse({
+                                                Identifier(idPath) {
+                                                    if (idPath.node.name === object.name) {
+                                                        checksOurVariable = true;
+                                                    }
+                                                },
+                                            });
+                                        }
+                                        if (checksOurVariable) {
+                                            const consequent = ifPath.node.consequent;
+                                            if (t.isBlockStatement(consequent)) {
+                                                for (const stmt of consequent.body) {
+                                                    if (t.isReturnStatement(stmt)) {
+                                                        hasEarlyReturn = true;
+                                                        break;
+                                                    }
+                                                }
+                                            }
+                                            else if (t.isReturnStatement(consequent)) {
+                                                hasEarlyReturn = true;
+                                            }
+                                        }
+                                    },
+                                });
+                                if (hasEarlyReturn) {
+                                    hasGuard = true;
+                                }
+                            }
+                            if (!hasGuard) {
+                                const methodName = property.name;
+                                violations.push({
+                                    rule: 'unsafe-array-operations',
+                                    severity: 'low',
+                                    line: path.node.loc?.start.line || 0,
+                                    column: path.node.loc?.start.column || 0,
+                                    message: `Potentially unsafe operation "${object.name}.${methodName}" on prop that may be undefined. Consider using optional chaining: ${object.name}?.${methodName} or provide a default: (${object.name} || []).${methodName}`,
+                                    code: `${object.name}.${methodName}`,
+                                });
+                            }
+                        }
+                    }
+                }
+            },
+            // Check for reduce without initial value
+            CallExpression(path) {
+                if (t.isMemberExpression(path.node.callee) && t.isIdentifier(path.node.callee.property) && path.node.callee.property.name === 'reduce') {
+                    const hasInitialValue = path.node.arguments.length > 1;
+                    if (!hasInitialValue) {
+                        const code = path.toString();
+                        violations.push({
+                            rule: 'unsafe-array-operations',
+                            severity: 'low',
+                            line: path.node.loc?.start.line || 0,
+                            column: path.node.loc?.start.column || 0,
+                            message: `reduce() without initial value may fail on empty arrays. Consider providing an initial value as the second argument.`,
+                            code: code.substring(0, 100),
+                        });
+                    }
+                }
+            },
+        });
+        return violations;
+    }
+};
+UnsafeArrayOperationsRule = __decorate([
+    RegisterClass(BaseLintRule, 'unsafe-array-operations')
+], UnsafeArrayOperationsRule);
+export { UnsafeArrayOperationsRule };
+//# sourceMappingURL=unsafe-array-operations.js.map

package/dist/runtime-rules/unsafe-array-operations.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"unsafe-array-operations.js","sourceRoot":"","sources":["../../src/runtime-rules/unsafe-array-operations.ts"],"names":[],"mappings":";;;;;;AAAA,OAAO,EAAE,QAAQ,EAAY,MAAM,eAAe,CAAC;AACnD,OAAO,EAAE,aAAa,EAAE,MAAM,wBAAwB,CAAC;AACvD,OAAO,KAAK,CAAC,MAAM,cAAc,CAAC;AAClC,OAAO,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAE5C,OAAO,EAAE,mBAAmB,EAAE,MAAM,0BAA0B,CAAC;AAG/D;;;;;;;;;;;;;;GAcG;AAEI,IAAM,yBAAyB,GAA/B,MAAM,yBAA0B,SAAQ,YAAY;IACzD,IAAI,IAAI,KAAK,OAAO,yBAAyB,CAAC,CAAC,CAAC;IAChD,IAAI,SAAS,KAA+B,OAAO,KAAK,CAAC,CAAC,CAAC;IAE3D,IAAI,CAAC,GAAW,EAAE,aAAqB,EAAE,aAA6B;QACpE,MAAM,UAAU,GAAgB,EAAE,CAAC;QAEnC,mDAAmD;QACnD,MAAM,GAAG,GAAG,IAAI,mBAAmB,CAAC,GAAG,EAAE,aAAa,CAAC,CAAC;QAExD,sEAAsE;QACtE,MAAM,WAAW,GAAG,IAAI,GAAG,EAAU,CAAC;QAEtC,QAAQ,CAAC,GAAG,EAAE;YACZ,qDAAqD;YACrD,mBAAmB,CAAC,IAAqC;gBACvD,IAAI,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,IAAI,KAAK,aAAa,EAAE,CAAC;oBACzC,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;oBACnC,IAAI,CAAC,CAAC,eAAe,CAAC,MAAM,CAAC,EAAE,CAAC;wBAC9B,MAAM,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,EAAE;4BACjC,IAAI,CAAC,CAAC,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,YAAY,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;gCACzD,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;4BACjC,CAAC;wBACH,CAAC,CAAC,CAAC;oBACL,CAAC;gBACH,CAAC;YACH,CAAC;YAED,kBAAkB,CAAC,IAAoC;gBACrD,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC;gBAC3B,IAAI,CAAC,CAAC,oBAAoB,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,YAAY,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,CAAC;oBAChE,IAAI,MAAM,CAAC,EAAE,CAAC,IAAI,KAAK,aAAa,EAAE,CAAC;wBACrC,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;wBACnC,IAAI,CAAC,CAAC,eAAe,CAAC,MAAM,CAAC,EAAE,CAAC;4BAC9B,MAAM,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,EAAE;gCACjC,IAAI,CAAC,CAAC,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,YAAY,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;oCACzD,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;gCACjC,CAAC;4BACH,CAAC,CAAC,CAAC;wBACL,CAAC;oBACH,CAAC;gBACH,CAAC;YACH,CAAC;YAED,qDAAqD;YACrD,gBAAgB,CAAC,IAAkC;gBACjD,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,GAAG,IAAI,CAAC,IAAI,CAAC;gBAEjD,kCAAkC;gBAClC,IAAI,QAAQ,IAAI,CAAC,CAAC,CAAC,gBAAgB,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,YAAY,CAAC,QAAQ,CAAC,IAAI,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;oBAC5G,MAAM,IAAI,GAAG,IAAI,CAAC,QAAQ,EAAE,CAAC;oBAE7B,qCAAqC;oBACrC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC;wBACxB,IAAI,MAAM,GAAG,KAAK,CAAC;wBAEnB,MAAM,WAAW,GAAG,CAAC,CAAC,gBAAgB,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;wBAEhG,kEAAkE;wBAClE,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,IAAI,GAAG,CAAC,iBAAiB,CAAC,MAAM,EAAE,WAAW,EAAE,IAAI,CAAC,EAAE,CAAC;4BAC5E,MAAM,GAAG,IAAI,CAAC;wBAChB,CAAC;wBAED,+DAA+D;wBAC/D,IAAI,CAAC,MAAM;4BACP,CAAC,CAAC,gBAAgB,CAAC,MAAM,CAAC;4BAC1B,CAAC,CAAC,kBAAkB,CAAC,MAAM,CAAC,MAAM,CAAC;4BACnC,CAAC,CAAC,YAAY,CAAC,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC;4BACtC,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,KAAK,OAAO,EACzC,CAAC;4BACD,MAAM,GAAG,IAAI,CAAC;wBAChB,CAAC;wBAED,2EAA2E;wBAC3E,IAAI,CAAC,CAAC,YAAY,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,gBAAgB,CAAC,QAAQ,CAAC,IAAI,QAAQ,CAAC,KAAK,IAAI,CAAC,EAAE,CAAC;4BAClF,MAAM,UAAU,GAAG,IAAI,CAAC,iBAAiB,EAAE,CAAC;4BAC5C,IAAI,UAAU,EAAE,CAAC;gCACf,MAAM,MAAM,GAAG,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC;gCACtC,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;oCAC3B,IAAI,CAAC,CAAC,YAAY,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,IAAI,KAAK,MAAM,CAAC,IAAI,EAAE,CAAC;wCACxD,MAAM,UAAU,GAAG,UAAU,CAAC,UAAU,CAAC;wCACzC,IAAI,UAAU,IAAI,CAAC,CAAC,gBAAgB,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;4CACtD,MAAM,UAAU,GAAG,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC;4CAC1C,IAAI,CAAC,CAAC,kBAAkB,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,YAAY,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;gDAC5E,MAAM,UAAU,GAAG,UAAU,CAAC,QAAQ,CAAC,IAAI,CAAC;gDAC5C,IAAI,CAAC,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,WAAW,CAAC,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC;oDAC9G,MAAM,qBAAqB,GAAG,CAAC,IAAY,EAAW,EAAE;wDACtD,IACE,CAAC,CAAC,gBAAgB,CAAC,IAAI,CAAC;4DACxB,CAAC,CAAC,kBAAkB,CAAC,IAAI,CAAC,MAAM,CAAC;4DACjC,CAAC,CAAC,YAAY,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC;4DAClC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,KAAK,QAAQ;4DACpC,CAAC,CAAC,YAAY,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC;4DACpC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,KAAK,SAAS,EACvC,CAAC;4DACD,OAAO,IAAI,CAAC;wDACd,CAAC;wDACD,IAAI,CAAC,CAAC,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,kBAAkB,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,YAAY,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC;4DAC1G,MAAM,WAAW,GAAG,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC;4DAC9C,IAAI,CAAC,QAAQ,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,SAAS,EAAE,SAAS,EAAE,UAAU,EAAE,YAAY,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC;gEACvH,OAAO,qBAAqB,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;4DACnD,CAAC;wDACH,CAAC;wDACD,OAAO,KAAK,CAAC;oDACf,CAAC,CAAC;oDAEF,IAAI,qBAAqB,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;wDAC7C,MAAM,GAAG,IAAI,CAAC;oDAChB,CAAC;gDACH,CAAC;4CACH,CAAC;wCACH,CAAC;oCACH,CAAC;gCACH,CAAC;4BACH,CAAC;wBACH,CAAC;wBAED,+DAA+D;wBAC/D,IAAI,CAAC,MAAM,IAAI,CAAC,CAAC,mBAAmB,CAAC,MAAM,CAAC,IAAI,MAAM,CAAC,QAAQ,KAAK,IAAI,EAAE,CAAC;4BACzE,MAAM,GAAG,IAAI,CAAC;wBAChB,CAAC;wBAED,gEAAgE;wBAChE,IACE,CAAC,CAAC,gBAAgB,CAAC,MAAM,CAAC;4BAC1B,CAAC,CAAC,kBAAkB,CAAC,MAAM,CAAC,MAAM,CAAC;4BACnC,CAAC,CAAC,YAAY,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC;4BACpC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,KAAK,QAAQ;4BACtC,CAAC,CAAC,YAAY,CAAC,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC;4BACtC,CAAC,MAAM,EAAE,QAAQ,EAAE,SAAS,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,EACnE,CAAC;4BACD,MAAM,GAAG,IAAI,CAAC;wBAChB,CAAC;wBAED,kEAAkE;wBAClE,IAAI,CAAC,MAAM,IAAI,CAAC,CAAC,gBAAgB,CAAC,MAAM,CAAC,EAAE,CAAC;4BAC1C,MAAM,qBAAqB,GAAG;gCAC5B,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,YAAY;gCACvC,QAAQ,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,SAAS;gCACrD,QAAQ;6BACT,CAAC;4BAEF,IAAI,CAAC,CAAC,kBAAkB,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,YAAY,CAAC,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC;gCAClF,MAAM,UAAU,GAAG,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC;gCAC/C,IAAI,qBAAqB,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC;oCAC/C,MAAM,GAAG,IAAI,CAAC;gCAChB,CAAC;4BACH,CAAC;wBACH,CAAC;wBAED,IAAI,CAAC,MAAM,EAAE,CAAC;4BACZ,UAAU,CAAC,IAAI,CAAC;gCACd,IAAI,EAAE,yBAAyB;gCAC/B,QAAQ,EAAE,KAAK;gCACf,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,IAAI,CAAC;gCACpC,MAAM,EAAE,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,MAAM,IAAI,CAAC;gCACxC,OAAO,EAAE,wBAAwB,IAAI,yDAAyD,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,KAAK,CAAC,+BAA+B;gCACrJ,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC,EAAE,EAAE,CAAC;6BAC5B,CAAC,CAAC;wBACL,CAAC;oBACH,CAAC;gBACH,CAAC;gBAED,uDAAuD;gBACvD,MAAM,kBAAkB,GAAG,CAAC,KAAK,EAAE,QAAQ,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC;gBAErG,IAAI,CAAC,CAAC,YAAY,CAAC,QAAQ,CAAC,IAAI,kBAAkB,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;oBAC3E,IAAI,CAAC,CAAC,YAAY,CAAC,MAAM,CAAC,IAAI,WAAW,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC;wBAC3D,MAAM,UAAU,GACd,MAAM,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,MAAM,CAAC;4BAC1C,MAAM,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,OAAO,CAAC;4BAC3C,MAAM,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,SAAS,CAAC;4BAC7C,MAAM,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,SAAS,CAAC;4BAC7C,MAAM,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,MAAM,CAAC;4BAC1C,MAAM,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,OAAO,CAAC;4BAC3C,MAAM,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;wBAEhD,IAAI,UAAU,IAAI,QAAQ,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;4BAC7C,IAAI,QAAQ,GAAG,KAAK,CAAC;4BAErB,8BAA8B;4BAC9B,IAAI,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC;gCACvB,QAAQ,GAAG,IAAI,CAAC;4BAClB,CAAC;4BAED,qCAAqC;4BACrC,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC;4BAC3B,IAAI,CAAC,CAAC,kBAAkB,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,mBAAmB,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC;gCACzE,IAAI,MAAM,CAAC,MAAM,CAAC,QAAQ,KAAK,IAAI,IAAI,CAAC,CAAC,YAAY,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC;oCAC1E,IAAI,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,KAAK,MAAM,CAAC,IAAI,EAAE,CAAC;wCAC5C,QAAQ,GAAG,IAAI,CAAC;oCAClB,CAAC;gCACH,CAAC;4BACH,CAAC;4BAED,sDAAsD;4BACtD,MAAM,WAAW,GAAG,IAAI,CAAC,UAAU,EAAE,MAAM,CAAC;4BAC5C,IAAI,CAAC,CAAC,mBAAmB,CAAC,WAAW,CAAC,IAAI,WAAW,CAAC,QAAQ,KAAK,IAAI,EAAE,CAAC;gCACxE,IAAI,CAAC,CAAC,YAAY,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,WAAW,CAAC,IAAI,CAAC,IAAI,KAAK,MAAM,CAAC,IAAI,EAAE,CAAC;oCAC9E,QAAQ,GAAG,IAAI,CAAC;gCAClB,CAAC;4BACH,CAAC;4BAED,mCAAmC;4BACnC,IAAI,CAAC,QAAQ,IAAI,CAAC,CAAC,mBAAmB,CAAC,WAAW,CAAC,IAAI,WAAW,CAAC,QAAQ,KAAK,IAAI,EAAE,CAAC;gCACrF,IAAI,CAAC,CAAC,iBAAiB,CAAC,WAAW,CAAC,IAAI,CAAC;oCACrC,WAAW,CAAC,IAAI,CAAC,QAAQ,KAAK,GAAG;oCACjC,CAAC,CAAC,YAAY,CAAC,WAAW,CAAC,IAAI,CAAC,QAAQ,CAAC;oCACzC,WAAW,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,KAAK,MAAM,CAAC,IAAI,EAAE,CAAC;oCACnD,QAAQ,GAAG,IAAI,CAAC;gCAClB,CAAC;4BACH,CAAC;4BAED,oDAAoD;4BACpD,IAAI,CAAC,QAAQ,IAAI,GAAG,CAAC,mBAAmB,CAAC,MAAM,EAAE,IAAI,CAAC,EAAE,CAAC;gCACvD,QAAQ,GAAG,IAAI,CAAC;4BAClB,CAAC;4BAED,6DAA6D;4BAC7D,IAAI,CAAC,QAAQ,EAAE,CAAC;gCACd,IAAI,WAAW,GAAoB,IAAI,CAAC,UAAU,CAAC;gCACnD,OAAO,WAAW,EAAE,CAAC;oCACnB,IAAI,CAAC,CAAC,aAAa,CAAC,WAAW,CAAC,IAAI,CAAC,EAAE,CAAC;wCACtC,MAAM,IAAI,GAAG,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC;wCACnC,IAAI,CAAC,CAAC,mBAAmB,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,QAAQ,KAAK,IAAI,EAAE,CAAC;4CAC1D,MAAM,kBAAkB,GAAG,CAAC,IAAY,EAAY,EAAE;gDACpD,IAAI,CAAC,CAAC,mBAAmB,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,QAAQ,KAAK,IAAI,EAAE,CAAC;oDAC1D,OAAO,CAAC,GAAG,kBAAkB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,GAAG,kBAAkB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;gDAC/E,CAAC;gDACD,OAAO,CAAC,IAAI,CAAC,CAAC;4CAChB,CAAC,CAAC;4CAEF,MAAM,QAAQ,GAAG,kBAAkB,CAAC,IAAI,CAAC,CAAC;4CAC1C,IAAI,UAAU,GAAG,KAAK,CAAC;4CAEvB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,QAAQ,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;gDACzC,MAAM,EAAE,GAAG,QAAQ,CAAC,CAAC,CAAC,CAAC;gDAEvB,IAAI,CAAC,CAAC,YAAY,CAAC,EAAE,CAAC,IAAI,EAAE,CAAC,IAAI,KAAK,MAAM,CAAC,IAAI,EAAE,CAAC;oDAClD,UAAU,GAAG,IAAI,CAAC;gDACpB,CAAC;gDAED,IAAI,oBAAoB,GAAG,KAAK,CAAC;gDACjC,IAAI,CAAC,CAAC,kBAAkB,CAAC,EAAE,CAAC,EAAE,CAAC;oDAC7B,IAAI,CAAC,CAAC,kBAAkB,CAAC,EAAE,CAAC,IAAI,CAAC;wDAC7B,CAAC,CAAC,YAAY,CAAC,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC;wDAC9B,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,KAAK,MAAM,CAAC,IAAI;wDACnC,CAAC,CAAC,YAAY,CAAC,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC;wDAChC,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;wDACvC,oBAAoB,GAAG,IAAI,CAAC;oDAC9B,CAAC;gDACH,CAAC;qDAAM,IAAI,CAAC,CAAC,kBAAkB,CAAC,EAAE,CAAC;oDACxB,CAAC,CAAC,YAAY,CAAC,EAAE,CAAC,MAAM,CAAC;oDACzB,EAAE,CAAC,MAAM,CAAC,IAAI,KAAK,MAAM,CAAC,IAAI,EAAE,CAAC;oDAC1C,oBAAoB,GAAG,IAAI,CAAC;gDAC9B,CAAC;gDAED,IAAI,oBAAoB,EAAE,CAAC;oDACzB,IAAI,UAAU,EAAE,CAAC;wDACf,QAAQ,GAAG,IAAI,CAAC;wDAChB,MAAM;oDACR,CAAC;gDACH,CAAC;4CACH,CAAC;wCACH,CAAC;wCACD,MAAM;oCACR,CAAC;oCACD,WAAW,GAAG,WAAW,CAAC,UAAU,CAAC;gCACvC,CAAC;4BACH,CAAC;4BAED,gDAAgD;4BAChD,MAAM,cAAc,GAAG,IAAI,CAAC,iBAAiB,EAAE,CAAC;4BAChD,IAAI,cAAc,IAAI,CAAC,QAAQ,EAAE,CAAC;gCAChC,IAAI,cAAc,GAAG,KAAK,CAAC;gCAE3B,cAAc,CAAC,QAAQ,CAAC;oCACtB,WAAW,CAAC,MAA+B;wCACzC,IAAI,MAAM,CAAC,IAAI,CAAC,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC;4CACrC,IAAI,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;gDAC1D,OAAO;4CACT,CAAC;wCACH,CAAC;wCAED,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC;wCAC9B,IAAI,iBAAiB,GAAG,KAAK,CAAC;wCAE9B,IAAI,CAAC,CAAC,iBAAiB,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,QAAQ,KAAK,GAAG,EAAE,CAAC;4CACvD,IAAI,CAAC,CAAC,YAAY,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,KAAK,MAAM,CAAC,IAAI,EAAE,CAAC;gDACxE,iBAAiB,GAAG,IAAI,CAAC;4CAC3B,CAAC;wCACH,CAAC;wCAED,IAAI,CAAC,CAAC,mBAAmB,CAAC,IAAI,CAAC,EAAE,CAAC;4CAChC,MAAM,CAAC,QAAQ,CAAC;gDACd,UAAU,CAAC,MAA8B;oDACvC,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI,KAAK,MAAM,CAAC,IAAI,EAAE,CAAC;wDACrC,iBAAiB,GAAG,IAAI,CAAC;oDAC3B,CAAC;gDACH,CAAC;6CACF,CAAC,CAAC;wCACL,CAAC;wCAED,IAAI,iBAAiB,EAAE,CAAC;4CACtB,MAAM,UAAU,GAAG,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC;4CAC1C,IAAI,CAAC,CAAC,gBAAgB,CAAC,UAAU,CAAC,EAAE,CAAC;gDACnC,KAAK,MAAM,IAAI,IAAI,UAAU,CAAC,IAAI,EAAE,CAAC;oDACnC,IAAI,CAAC,CAAC,iBAAiB,CAAC,IAAI,CAAC,EAAE,CAAC;wDAC9B,cAAc,GAAG,IAAI,CAAC;wDACtB,MAAM;oDACR,CAAC;gDACH,CAAC;4CACH,CAAC;iDAAM,IAAI,CAAC,CAAC,iBAAiB,CAAC,UAAU,CAAC,EAAE,CAAC;gDAC3C,cAAc,GAAG,IAAI,CAAC;4CACxB,CAAC;wCACH,CAAC;oCACH,CAAC;iCACF,CAAC,CAAC;gCAEH,IAAI,cAAc,EAAE,CAAC;oCACnB,QAAQ,GAAG,IAAI,CAAC;gCAClB,CAAC;4BACH,CAAC;4BAED,IAAI,CAAC,QAAQ,EAAE,CAAC;gCACd,MAAM,UAAU,GAAG,QAAQ,CAAC,IAAI,CAAC;gCAEjC,UAAU,CAAC,IAAI,CAAC;oCACd,IAAI,EAAE,yBAAyB;oCAC/B,QAAQ,EAAE,KAAK;oCACf,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,IAAI,CAAC;oCACpC,MAAM,EAAE,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,MAAM,IAAI,CAAC;oCACxC,OAAO,EAAE,iCAAiC,MAAM,CAAC,IAAI,IAAI,UAAU,sEAAsE,MAAM,CAAC,IAAI,KAAK,UAAU,2BAA2B,MAAM,CAAC,IAAI,WAAW,UAAU,EAAE;oCAChO,IAAI,EAAE,GAAG,MAAM,CAAC,IAAI,IAAI,UAAU,EAAE;iCACrC,CAAC,CAAC;4BACL,CAAC;wBACH,CAAC;oBACH,CAAC;gBACH,CAAC;YACH,CAAC;YAED,yCAAyC;YACzC,cAAc,CAAC,IAAgC;gBAC7C,IAAI,CAAC,CAAC,kBAAkB,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;oBACvI,MAAM,eAAe,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC,CAAC;oBAEvD,IAAI,CAAC,eAAe,EAAE,CAAC;wBACrB,MAAM,IAAI,GAAG,IAAI,CAAC,QAAQ,EAAE,CAAC;wBAC7B,UAAU,CAAC,IAAI,CAAC;4BACd,IAAI,EAAE,yBAAyB;4BAC/B,QAAQ,EAAE,KAAK;4BACf,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,IAAI,CAAC;4BACpC,MAAM,EAAE,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,MAAM,IAAI,CAAC;4BACxC,OAAO,EAAE,sHAAsH;4BAC/H,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC,EAAE,GAAG,CAAC;yBAC7B,CAAC,CAAC;oBACL,CAAC;gBACH,CAAC;YACH,CAAC;SACF,CAAC,CAAC;QAEH,OAAO,UAAU,CAAC;IAClB,CAAC;CACJ,CAAA;AA3WY,yBAAyB;IADrC,aAAa,CAAC,YAAY,EAAE,yBAAyB,CAAC;GAC1C,yBAAyB,CA2WrC"}

package/dist/runtime-rules/unsafe-formatting-methods.d.ts

@@ -0,0 +1,24 @@
+import * as t from '@babel/types';
+import { BaseLintRule } from '../lint-rule.js';
+import { Violation } from '../component-linter.js';
+import { ComponentSpec } from '@memberjunction/interactive-component-types';
+import type { LinterOptions } from '../linter-options.js';
+/**
+ * Rule: unsafe-formatting-methods
+ *
+ * Detects formatting methods (toFixed, toLowerCase, etc.) called on potentially null/undefined
+ * values without optional chaining or null checks. Uses control flow analysis and type inference
+ * to reduce false positives.
+ *
+ * Closure dependencies: ControlFlowAnalyzer, TypeInferenceEngine, LinterOptions,
+ * EntityInfo, EntityFieldInfo (all instantiated locally within the rule)
+ *
+ * Severity: medium-high (depends on entity metadata nullability)
+ * Applies to: all components
+ */
+export declare class UnsafeFormattingMethodsRule extends BaseLintRule {
+    get Name(): string;
+    get AppliesTo(): 'all' | 'child' | 'root';
+    Test(ast: t.File, componentName: string, componentSpec?: ComponentSpec, options?: LinterOptions): Violation[];
+}
+//# sourceMappingURL=unsafe-formatting-methods.d.ts.map

package/dist/runtime-rules/unsafe-formatting-methods.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"unsafe-formatting-methods.d.ts","sourceRoot":"","sources":["../../src/runtime-rules/unsafe-formatting-methods.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,CAAC,MAAM,cAAc,CAAC;AAClC,OAAO,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAC5C,OAAO,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAC;AAChD,OAAO,EAAE,aAAa,EAAE,MAAM,6CAA6C,CAAC;AAC5E,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAC;AAKvD;;;;;;;;;;;;GAYG;AACH,qBACa,2BAA4B,SAAQ,YAAY;IAC3D,IAAI,IAAI,WAA0C;IAClD,IAAI,SAAS,IAAI,KAAK,GAAG,OAAO,GAAG,MAAM,CAAkB;IAE3D,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,IAAI,EAAE,aAAa,EAAE,MAAM,EAAE,aAAa,CAAC,EAAE,aAAa,EAAE,OAAO,CAAC,EAAE,aAAa,GAAG,SAAS,EAAE;CAkS9G"}