@mondaydotcomorg/atp-compiler 0.22.2 → 0.23.0

package/dist/index.cjs

@@ -570,7 +570,7 @@ var require_estraverse = __commonJS({
         return false;
       }
       __name(candidateExistsInLeaveList, "candidateExistsInLeaveList");
-      Controller.prototype.traverse = /* @__PURE__ */ __name(function traverse7(root, visitor) {
+      Controller.prototype.traverse = /* @__PURE__ */ __name(function traverse8(root, visitor) {
         var worklist, leavelist, element, node, nodeType, ret, key, current2, current22, candidates, candidate, sentinel;
         this.__initialize(root, visitor);
         sentinel = {};
@@ -760,11 +760,11 @@ var require_estraverse = __commonJS({
         }
         return outer.root;
       }, "replace");
-      function traverse6(root, visitor) {
+      function traverse7(root, visitor) {
         var controller = new Controller();
         return controller.traverse(root, visitor);
       }
-      __name(traverse6, "traverse");
+      __name(traverse7, "traverse");
       function replace(root, visitor) {
         var controller = new Controller();
         return controller.replace(root, visitor);
@@ -812,7 +812,7 @@ var require_estraverse = __commonJS({
           comments.push(extendCommentRange(deepCopy(providedComments[i]), tokens));
         }
         cursor = 0;
-        traverse6(tree, {
+        traverse7(tree, {
           enter: /* @__PURE__ */ __name(function(node) {
             var comment2;
             while (cursor < comments.length) {
@@ -839,7 +839,7 @@ var require_estraverse = __commonJS({
           }, "enter")
         });
         cursor = 0;
-        traverse6(tree, {
+        traverse7(tree, {
           leave: /* @__PURE__ */ __name(function(node) {
             var comment2;
             while (cursor < comments.length) {
@@ -869,7 +869,7 @@ var require_estraverse = __commonJS({
       }
       __name(attachComments, "attachComments");
       exports1.Syntax = Syntax;
-      exports1.traverse = traverse6;
+      exports1.traverse = traverse7;
       exports1.replace = replace;
       exports1.attachComments = attachComments;
       exports1.VisitorKeys = VisitorKeys;
@@ -3075,7 +3075,7 @@ var require_package = __commonJS({
 var require_escodegen = __commonJS({
   "../../node_modules/escodegen/escodegen.js"(exports$1) {
     (function() {
-      var Syntax, Precedence, BinaryPrecedence, SourceNode, estraverse, esutils, base2, indent, json, renumber, hexadecimal, quotes, escapeless, newline, space, parentheses, semicolons, safeConcatenation, directive, extra, parse7, sourceMap, sourceCode, preserveBlankLines, FORMAT_MINIFY, FORMAT_DEFAULTS;
+      var Syntax, Precedence, BinaryPrecedence, SourceNode, estraverse, esutils, base2, indent, json, renumber, hexadecimal, quotes, escapeless, newline, space, parentheses, semicolons, safeConcatenation, directive, extra, parse8, sourceMap, sourceCode, preserveBlankLines, FORMAT_MINIFY, FORMAT_DEFAULTS;
       estraverse = require_estraverse();
       esutils = require_utils();
       Syntax = estraverse.Syntax;
@@ -5071,9 +5071,9 @@ var require_escodegen = __commonJS({
         }, "ExportSpecifier"),
         Literal: /* @__PURE__ */ __name(function(expr, precedence, flags) {
           var raw;
-          if (expr.hasOwnProperty("raw") && parse7 && extra.raw) {
+          if (expr.hasOwnProperty("raw") && parse8 && extra.raw) {
             try {
-              raw = parse7(expr.raw).body[0].expression;
+              raw = parse8(expr.raw).body[0].expression;
               if (raw.type === Syntax.Literal) {
                 if (raw.value === expr.value) {
                   return expr.raw;
@@ -5285,7 +5285,7 @@ var require_escodegen = __commonJS({
         semicolons = options.format.semicolons;
         safeConcatenation = options.format.safeConcatenation;
         directive = options.directive;
-        parse7 = json ? null : options.parse;
+        parse8 = json ? null : options.parse;
         sourceMap = options.sourceMap;
         sourceCode = options.sourceCode;
         preserveBlankLines = options.format.preserveBlankLines && sourceCode !== null;
@@ -9441,8 +9441,8 @@ var ZodParsedType = util.arrayToEnum([
   "set"
 ]);
 var getParsedType = /* @__PURE__ */ __name((data2) => {
-  const t18 = typeof data2;
-  switch (t18) {
+  const t19 = typeof data2;
+  switch (t19) {
     case "undefined":
       return ZodParsedType.undefined;
     case "string":
@@ -20282,6 +20282,137 @@ async function getCheckpointDataForError() {
   };
 }
 __name(getCheckpointDataForError, "getCheckpointDataForError");
+var traverse6 = _traverse__default.default.default ?? _traverse__default.default;
+function analyzeApiCalls(code) {
+  const calls = [];
+  const seen = /* @__PURE__ */ new Set();
+  let dynamicCallsDetected = false;
+  let ast;
+  try {
+    ast = parser.parse(code, {
+      sourceType: "module",
+      allowReturnOutsideFunction: true,
+      plugins: [
+        "typescript"
+      ]
+    });
+  } catch {
+    return {
+      apiCalls: [],
+      dynamicCallsDetected: true
+    };
+  }
+  const tryRecordCall = /* @__PURE__ */ __name((calleeNode) => {
+    let callee = calleeNode;
+    if ((t13__namespace.isMemberExpression(callee) || t13__namespace.isOptionalMemberExpression(callee)) && !callee.computed && t13__namespace.isIdentifier(callee.property) && (callee.property.name === "call" || callee.property.name === "apply" || callee.property.name === "bind")) {
+      callee = callee.object;
+    }
+    if (!t13__namespace.isMemberExpression(callee) && !t13__namespace.isOptionalMemberExpression(callee)) return;
+    const groupExpr = callee.object;
+    if (!t13__namespace.isMemberExpression(groupExpr) && !t13__namespace.isOptionalMemberExpression(groupExpr)) return;
+    if (!t13__namespace.isIdentifier(groupExpr.object, {
+      name: "api"
+    })) return;
+    if (groupExpr.computed || callee.computed) {
+      dynamicCallsDetected = true;
+      return;
+    }
+    const groupNode = groupExpr.property;
+    const opNode = callee.property;
+    if (!t13__namespace.isIdentifier(groupNode) || !t13__namespace.isIdentifier(opNode)) {
+      dynamicCallsDetected = true;
+      return;
+    }
+    const key = `${groupNode.name}.${opNode.name}`;
+    if (!seen.has(key)) {
+      seen.add(key);
+      calls.push({
+        apiGroup: groupNode.name,
+        operationId: opNode.name
+      });
+    }
+  }, "tryRecordCall");
+  try {
+    traverse6(ast, {
+      // Assignments / destructures that alias `api` or `api.<group>` — any of
+      // these lets the code reach an api group via an opaque identifier later.
+      VariableDeclarator(path) {
+        const init = path.node.init;
+        if (!init) return;
+        if (t13__namespace.isObjectPattern(path.node.id) && t13__namespace.isIdentifier(init, {
+          name: "api"
+        })) {
+          dynamicCallsDetected = true;
+          return;
+        }
+        if (t13__namespace.isIdentifier(path.node.id) && t13__namespace.isIdentifier(init, {
+          name: "api"
+        })) {
+          dynamicCallsDetected = true;
+          return;
+        }
+        if (t13__namespace.isIdentifier(path.node.id) && t13__namespace.isMemberExpression(init) && t13__namespace.isIdentifier(init.object, {
+          name: "api"
+        })) {
+          dynamicCallsDetected = true;
+        }
+      },
+      // Any other mention of `api` that hands it off to an opaque consumer:
+      //   fn(api)                      — alias escape via function argument
+      //   Object.values(api) / keys(…) — enumeration
+      //   { ...api } / [ ...api ]      — spread
+      //   return api                   — caller gets the alias
+      //   api = x (reassignment)       — later reads hit a different object
+      //
+      // The api.<group>.<op>(...) pattern is recognised by the CallExpression
+      // visitor below; skip it here via parent-shape whitelisting.
+      Identifier(path) {
+        if (path.node.name !== "api") return;
+        if ((t13__namespace.isMemberExpression(path.parent) || t13__namespace.isOptionalMemberExpression(path.parent)) && path.parent.property === path.node && !path.parent.computed) {
+          return;
+        }
+        if ((t13__namespace.isMemberExpression(path.parent) || t13__namespace.isOptionalMemberExpression(path.parent)) && path.parent.object === path.node && !path.parent.computed) {
+          return;
+        }
+        if (t13__namespace.isVariableDeclarator(path.parent) && path.parent.init === path.node) {
+          return;
+        }
+        if ((t13__namespace.isObjectProperty(path.parent) || t13__namespace.isObjectMethod(path.parent)) && path.parent.key === path.node && !path.parent.computed) {
+          return;
+        }
+        if (t13__namespace.isClassMethod(path.parent) && path.parent.key === path.node && !path.parent.computed) {
+          return;
+        }
+        if ((t13__namespace.isFunctionDeclaration(path.parent) || t13__namespace.isFunctionExpression(path.parent) || t13__namespace.isClassDeclaration(path.parent) || t13__namespace.isClassExpression(path.parent)) && path.parent.id === path.node) {
+          return;
+        }
+        if (path.parentPath?.isFunction() && path.listKey === "params") {
+          return;
+        }
+        if (t13__namespace.isImportSpecifier(path.parent) || t13__namespace.isImportDefaultSpecifier(path.parent) || t13__namespace.isImportNamespaceSpecifier(path.parent)) {
+          return;
+        }
+        dynamicCallsDetected = true;
+      },
+      CallExpression(path) {
+        tryRecordCall(path.node.callee);
+      },
+      OptionalCallExpression(path) {
+        tryRecordCall(path.node.callee);
+      }
+    });
+  } catch {
+    return {
+      apiCalls: [],
+      dynamicCallsDetected: true
+    };
+  }
+  return {
+    apiCalls: calls,
+    dynamicCallsDetected
+  };
+}
+__name(analyzeApiCalls, "analyzeApiCalls");
 
 exports.ATPCompiler = ATPCompiler;
 exports.ArrayTransformer = ArrayTransformer;
@@ -20317,6 +20448,7 @@ exports.RuntimeFunction = RuntimeFunction;
 exports.SecurityValidationError = SecurityValidationError;
 exports.SecurityValidatorPlugin = SecurityValidatorPlugin;
 exports.TransformationError = TransformationError;
+exports.analyzeApiCalls = analyzeApiCalls;
 exports.batchParallel = batchParallel;
 exports.cleanupCheckpointRuntime = cleanupCheckpointRuntime;
 exports.cleanupRuntime = cleanupRuntime;