@neurcode-ai/cli 0.9.63 → 0.9.65
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/LICENSE +201 -0
- package/dist/commands/brain.d.ts.map +1 -1
- package/dist/commands/brain.js +273 -0
- package/dist/commands/brain.js.map +1 -1
- package/dist/commands/control-plane.js +7 -7
- package/dist/commands/control-plane.js.map +1 -1
- package/dist/commands/fix.d.ts.map +1 -1
- package/dist/commands/fix.js +108 -1
- package/dist/commands/fix.js.map +1 -1
- package/dist/commands/patch-apply.d.ts +2 -0
- package/dist/commands/patch-apply.d.ts.map +1 -1
- package/dist/commands/patch-apply.js +331 -19
- package/dist/commands/patch-apply.js.map +1 -1
- package/dist/commands/pilot-report.d.ts +9 -0
- package/dist/commands/pilot-report.d.ts.map +1 -0
- package/dist/commands/pilot-report.js +176 -0
- package/dist/commands/pilot-report.js.map +1 -0
- package/dist/commands/remediate-governance.d.ts +54 -0
- package/dist/commands/remediate-governance.d.ts.map +1 -0
- package/dist/commands/remediate-governance.js +375 -0
- package/dist/commands/remediate-governance.js.map +1 -0
- package/dist/commands/remediate.d.ts.map +1 -1
- package/dist/commands/remediate.js.map +1 -1
- package/dist/commands/replay.d.ts.map +1 -1
- package/dist/commands/replay.js +35 -5
- package/dist/commands/replay.js.map +1 -1
- package/dist/commands/verify.d.ts.map +1 -1
- package/dist/commands/verify.js +336 -25
- package/dist/commands/verify.js.map +1 -1
- package/dist/commands/workspace.js +7 -7
- package/dist/commands/workspace.js.map +1 -1
- package/dist/daemon/server.d.ts +2 -2
- package/dist/daemon/server.d.ts.map +1 -1
- package/dist/daemon/server.js +2113 -32
- package/dist/daemon/server.js.map +1 -1
- package/dist/explainability/DeterminismClassifier.d.ts +34 -0
- package/dist/explainability/DeterminismClassifier.d.ts.map +1 -0
- package/dist/explainability/DeterminismClassifier.js +104 -0
- package/dist/explainability/DeterminismClassifier.js.map +1 -0
- package/dist/explainability/ViolationFormatter.d.ts +32 -0
- package/dist/explainability/ViolationFormatter.d.ts.map +1 -0
- package/dist/explainability/ViolationFormatter.js +252 -0
- package/dist/explainability/ViolationFormatter.js.map +1 -0
- package/dist/explainability/index.d.ts +15 -0
- package/dist/explainability/index.d.ts.map +1 -0
- package/dist/explainability/index.js +94 -0
- package/dist/explainability/index.js.map +1 -0
- package/dist/explainability/types.d.ts +37 -0
- package/dist/explainability/types.d.ts.map +1 -0
- package/dist/explainability/types.js +3 -0
- package/dist/explainability/types.js.map +1 -0
- package/dist/governance/canonical-pipeline.d.ts +38 -0
- package/dist/governance/canonical-pipeline.d.ts.map +1 -0
- package/dist/governance/canonical-pipeline.js +448 -0
- package/dist/governance/canonical-pipeline.js.map +1 -0
- package/dist/governance/structural-on-diff.d.ts +13 -0
- package/dist/governance/structural-on-diff.d.ts.map +1 -0
- package/dist/governance/structural-on-diff.js +35 -0
- package/dist/governance/structural-on-diff.js.map +1 -0
- package/dist/governance/structural-policy-merge.d.ts +14 -0
- package/dist/governance/structural-policy-merge.d.ts.map +1 -0
- package/dist/governance/structural-policy-merge.js +25 -0
- package/dist/governance/structural-policy-merge.js.map +1 -0
- package/dist/index.js +86 -4
- package/dist/index.js.map +1 -1
- package/dist/integrations/review-compression/index.d.ts +50 -0
- package/dist/integrations/review-compression/index.d.ts.map +1 -0
- package/dist/integrations/review-compression/index.js +158 -0
- package/dist/integrations/review-compression/index.js.map +1 -0
- package/dist/intent-engine/domain-taxonomy.d.ts +42 -0
- package/dist/intent-engine/domain-taxonomy.d.ts.map +1 -0
- package/dist/intent-engine/domain-taxonomy.js +534 -0
- package/dist/intent-engine/domain-taxonomy.js.map +1 -0
- package/dist/intent-engine/index.d.ts +1 -0
- package/dist/intent-engine/index.d.ts.map +1 -1
- package/dist/intent-engine/index.js +6 -1
- package/dist/intent-engine/index.js.map +1 -1
- package/dist/intent-engine/matcher.d.ts.map +1 -1
- package/dist/intent-engine/matcher.js +2 -0
- package/dist/intent-engine/matcher.js.map +1 -1
- package/dist/intent-engine/parser.d.ts.map +1 -1
- package/dist/intent-engine/parser.js +47 -0
- package/dist/intent-engine/parser.js.map +1 -1
- package/dist/intent-engine/semantic-expander.d.ts +104 -0
- package/dist/intent-engine/semantic-expander.d.ts.map +1 -0
- package/dist/intent-engine/semantic-expander.js +480 -0
- package/dist/intent-engine/semantic-expander.js.map +1 -0
- package/dist/patch-engine/diff.d.ts +1 -1
- package/dist/patch-engine/diff.js +1 -1
- package/dist/patch-engine/generator.d.ts +9 -0
- package/dist/patch-engine/generator.d.ts.map +1 -1
- package/dist/patch-engine/generator.js +375 -17
- package/dist/patch-engine/generator.js.map +1 -1
- package/dist/patch-engine/index.d.ts +25 -25
- package/dist/patch-engine/index.d.ts.map +1 -1
- package/dist/patch-engine/index.js +134 -87
- package/dist/patch-engine/index.js.map +1 -1
- package/dist/patch-engine/patterns.d.ts +1 -1
- package/dist/patch-engine/patterns.d.ts.map +1 -1
- package/dist/patch-engine/patterns.js +282 -41
- package/dist/patch-engine/patterns.js.map +1 -1
- package/dist/patch-engine/rollback.d.ts +31 -0
- package/dist/patch-engine/rollback.d.ts.map +1 -0
- package/dist/patch-engine/rollback.js +275 -0
- package/dist/patch-engine/rollback.js.map +1 -0
- package/dist/patch-engine/safety.d.ts +28 -0
- package/dist/patch-engine/safety.d.ts.map +1 -0
- package/dist/patch-engine/safety.js +122 -0
- package/dist/patch-engine/safety.js.map +1 -0
- package/dist/patch-engine/transaction.d.ts +52 -0
- package/dist/patch-engine/transaction.d.ts.map +1 -0
- package/dist/patch-engine/transaction.js +93 -0
- package/dist/patch-engine/transaction.js.map +1 -0
- package/dist/semantic/index.d.ts +14 -0
- package/dist/semantic/index.d.ts.map +1 -0
- package/dist/semantic/index.js +30 -0
- package/dist/semantic/index.js.map +1 -0
- package/dist/semantic/tfidf-engine.d.ts +81 -0
- package/dist/semantic/tfidf-engine.d.ts.map +1 -0
- package/dist/semantic/tfidf-engine.js +278 -0
- package/dist/semantic/tfidf-engine.js.map +1 -0
- package/dist/semantic/vector-store.d.ts +108 -0
- package/dist/semantic/vector-store.d.ts.map +1 -0
- package/dist/semantic/vector-store.js +321 -0
- package/dist/semantic/vector-store.js.map +1 -0
- package/dist/structural-rules/context-severity.d.ts +46 -0
- package/dist/structural-rules/context-severity.d.ts.map +1 -0
- package/dist/structural-rules/context-severity.js +115 -0
- package/dist/structural-rules/context-severity.js.map +1 -0
- package/dist/structural-rules/distributed/DS001-saga-rollback-absence.d.ts +11 -0
- package/dist/structural-rules/distributed/DS001-saga-rollback-absence.d.ts.map +1 -0
- package/dist/structural-rules/distributed/DS001-saga-rollback-absence.js +212 -0
- package/dist/structural-rules/distributed/DS001-saga-rollback-absence.js.map +1 -0
- package/dist/structural-rules/distributed/DS002-missing-correlation-id.d.ts +11 -0
- package/dist/structural-rules/distributed/DS002-missing-correlation-id.d.ts.map +1 -0
- package/dist/structural-rules/distributed/DS002-missing-correlation-id.js +213 -0
- package/dist/structural-rules/distributed/DS002-missing-correlation-id.js.map +1 -0
- package/dist/structural-rules/distributed/index.d.ts +3 -0
- package/dist/structural-rules/distributed/index.d.ts.map +1 -0
- package/dist/structural-rules/distributed/index.js +8 -0
- package/dist/structural-rules/distributed/index.js.map +1 -0
- package/dist/structural-rules/engine.d.ts +25 -0
- package/dist/structural-rules/engine.d.ts.map +1 -0
- package/dist/structural-rules/engine.js +90 -0
- package/dist/structural-rules/engine.js.map +1 -0
- package/dist/structural-rules/index.d.ts +41 -0
- package/dist/structural-rules/index.d.ts.map +1 -0
- package/dist/structural-rules/index.js +141 -0
- package/dist/structural-rules/index.js.map +1 -0
- package/dist/structural-rules/python/PY001-asyncio-task-without-cancel.d.ts +11 -0
- package/dist/structural-rules/python/PY001-asyncio-task-without-cancel.d.ts.map +1 -0
- package/dist/structural-rules/python/PY001-asyncio-task-without-cancel.js +66 -0
- package/dist/structural-rules/python/PY001-asyncio-task-without-cancel.js.map +1 -0
- package/dist/structural-rules/python/PY002-unbounded-dict-singleton.d.ts +11 -0
- package/dist/structural-rules/python/PY002-unbounded-dict-singleton.d.ts.map +1 -0
- package/dist/structural-rules/python/PY002-unbounded-dict-singleton.js +135 -0
- package/dist/structural-rules/python/PY002-unbounded-dict-singleton.js.map +1 -0
- package/dist/structural-rules/python/PY003-broad-except-clause.d.ts +11 -0
- package/dist/structural-rules/python/PY003-broad-except-clause.d.ts.map +1 -0
- package/dist/structural-rules/python/PY003-broad-except-clause.js +86 -0
- package/dist/structural-rules/python/PY003-broad-except-clause.js.map +1 -0
- package/dist/structural-rules/python/PY004-swallowed-async-exception.d.ts +11 -0
- package/dist/structural-rules/python/PY004-swallowed-async-exception.d.ts.map +1 -0
- package/dist/structural-rules/python/PY004-swallowed-async-exception.js +167 -0
- package/dist/structural-rules/python/PY004-swallowed-async-exception.js.map +1 -0
- package/dist/structural-rules/python/PY005-fastapi-without-pydantic.d.ts +11 -0
- package/dist/structural-rules/python/PY005-fastapi-without-pydantic.d.ts.map +1 -0
- package/dist/structural-rules/python/PY005-fastapi-without-pydantic.js +154 -0
- package/dist/structural-rules/python/PY005-fastapi-without-pydantic.js.map +1 -0
- package/dist/structural-rules/python/PY006-blocking-io-in-async.d.ts +11 -0
- package/dist/structural-rules/python/PY006-blocking-io-in-async.d.ts.map +1 -0
- package/dist/structural-rules/python/PY006-blocking-io-in-async.js +130 -0
- package/dist/structural-rules/python/PY006-blocking-io-in-async.js.map +1 -0
- package/dist/structural-rules/python/PY007-sqlalchemy-session-leak.d.ts +11 -0
- package/dist/structural-rules/python/PY007-sqlalchemy-session-leak.d.ts.map +1 -0
- package/dist/structural-rules/python/PY007-sqlalchemy-session-leak.js +93 -0
- package/dist/structural-rules/python/PY007-sqlalchemy-session-leak.js.map +1 -0
- package/dist/structural-rules/python/PY008-celery-task-without-retry.d.ts +11 -0
- package/dist/structural-rules/python/PY008-celery-task-without-retry.d.ts.map +1 -0
- package/dist/structural-rules/python/PY008-celery-task-without-retry.js +154 -0
- package/dist/structural-rules/python/PY008-celery-task-without-retry.js.map +1 -0
- package/dist/structural-rules/python/PY009-unsafe-pickle-deserialization.d.ts +11 -0
- package/dist/structural-rules/python/PY009-unsafe-pickle-deserialization.d.ts.map +1 -0
- package/dist/structural-rules/python/PY009-unsafe-pickle-deserialization.js +133 -0
- package/dist/structural-rules/python/PY009-unsafe-pickle-deserialization.js.map +1 -0
- package/dist/structural-rules/python/PY010-leaked-aiohttp-session.d.ts +11 -0
- package/dist/structural-rules/python/PY010-leaked-aiohttp-session.d.ts.map +1 -0
- package/dist/structural-rules/python/PY010-leaked-aiohttp-session.js +80 -0
- package/dist/structural-rules/python/PY010-leaked-aiohttp-session.js.map +1 -0
- package/dist/structural-rules/rules/SR001-swallowed-async-rejection.d.ts +11 -0
- package/dist/structural-rules/rules/SR001-swallowed-async-rejection.d.ts.map +1 -0
- package/dist/structural-rules/rules/SR001-swallowed-async-rejection.js +145 -0
- package/dist/structural-rules/rules/SR001-swallowed-async-rejection.js.map +1 -0
- package/dist/structural-rules/rules/SR002-unbounded-collection.d.ts +11 -0
- package/dist/structural-rules/rules/SR002-unbounded-collection.d.ts.map +1 -0
- package/dist/structural-rules/rules/SR002-unbounded-collection.js +196 -0
- package/dist/structural-rules/rules/SR002-unbounded-collection.js.map +1 -0
- package/dist/structural-rules/rules/SR003-timer-without-cleanup.d.ts +11 -0
- package/dist/structural-rules/rules/SR003-timer-without-cleanup.d.ts.map +1 -0
- package/dist/structural-rules/rules/SR003-timer-without-cleanup.js +148 -0
- package/dist/structural-rules/rules/SR003-timer-without-cleanup.js.map +1 -0
- package/dist/structural-rules/rules/SR004-request-boundary-no-validation.d.ts +11 -0
- package/dist/structural-rules/rules/SR004-request-boundary-no-validation.d.ts.map +1 -0
- package/dist/structural-rules/rules/SR004-request-boundary-no-validation.js +162 -0
- package/dist/structural-rules/rules/SR004-request-boundary-no-validation.js.map +1 -0
- package/dist/structural-rules/rules/SR005-halfopen-probe-gate.d.ts +11 -0
- package/dist/structural-rules/rules/SR005-halfopen-probe-gate.d.ts.map +1 -0
- package/dist/structural-rules/rules/SR005-halfopen-probe-gate.js +150 -0
- package/dist/structural-rules/rules/SR005-halfopen-probe-gate.js.map +1 -0
- package/dist/structural-rules/rules/SR006-fanout-error-sanitization.d.ts +11 -0
- package/dist/structural-rules/rules/SR006-fanout-error-sanitization.d.ts.map +1 -0
- package/dist/structural-rules/rules/SR006-fanout-error-sanitization.js +161 -0
- package/dist/structural-rules/rules/SR006-fanout-error-sanitization.js.map +1 -0
- package/dist/structural-rules/rules/SR007-cross-request-error.d.ts +11 -0
- package/dist/structural-rules/rules/SR007-cross-request-error.d.ts.map +1 -0
- package/dist/structural-rules/rules/SR007-cross-request-error.js +175 -0
- package/dist/structural-rules/rules/SR007-cross-request-error.js.map +1 -0
- package/dist/structural-rules/rules/SR008-background-task-orphan.d.ts +11 -0
- package/dist/structural-rules/rules/SR008-background-task-orphan.d.ts.map +1 -0
- package/dist/structural-rules/rules/SR008-background-task-orphan.js +176 -0
- package/dist/structural-rules/rules/SR008-background-task-orphan.js.map +1 -0
- package/dist/structural-rules/rules/SR009-missing-retry-backoff.d.ts +11 -0
- package/dist/structural-rules/rules/SR009-missing-retry-backoff.d.ts.map +1 -0
- package/dist/structural-rules/rules/SR009-missing-retry-backoff.js +168 -0
- package/dist/structural-rules/rules/SR009-missing-retry-backoff.js.map +1 -0
- package/dist/structural-rules/rules/SR010-retry-storm.d.ts +11 -0
- package/dist/structural-rules/rules/SR010-retry-storm.d.ts.map +1 -0
- package/dist/structural-rules/rules/SR010-retry-storm.js +181 -0
- package/dist/structural-rules/rules/SR010-retry-storm.js.map +1 -0
- package/dist/structural-rules/rules/SR011-event-listener-leak.d.ts +11 -0
- package/dist/structural-rules/rules/SR011-event-listener-leak.d.ts.map +1 -0
- package/dist/structural-rules/rules/SR011-event-listener-leak.js +208 -0
- package/dist/structural-rules/rules/SR011-event-listener-leak.js.map +1 -0
- package/dist/structural-rules/rules/SR012-promise-race-leak.d.ts +11 -0
- package/dist/structural-rules/rules/SR012-promise-race-leak.d.ts.map +1 -0
- package/dist/structural-rules/rules/SR012-promise-race-leak.js +191 -0
- package/dist/structural-rules/rules/SR012-promise-race-leak.js.map +1 -0
- package/dist/structural-rules/rules/SR013-missing-idempotency-key.d.ts +11 -0
- package/dist/structural-rules/rules/SR013-missing-idempotency-key.d.ts.map +1 -0
- package/dist/structural-rules/rules/SR013-missing-idempotency-key.js +219 -0
- package/dist/structural-rules/rules/SR013-missing-idempotency-key.js.map +1 -0
- package/dist/structural-rules/rules/SR014-mutable-closure-async.d.ts +11 -0
- package/dist/structural-rules/rules/SR014-mutable-closure-async.d.ts.map +1 -0
- package/dist/structural-rules/rules/SR014-mutable-closure-async.js +208 -0
- package/dist/structural-rules/rules/SR014-mutable-closure-async.js.map +1 -0
- package/dist/structural-rules/rules/SR015-dangling-abort-controller.d.ts +11 -0
- package/dist/structural-rules/rules/SR015-dangling-abort-controller.d.ts.map +1 -0
- package/dist/structural-rules/rules/SR015-dangling-abort-controller.js +190 -0
- package/dist/structural-rules/rules/SR015-dangling-abort-controller.js.map +1 -0
- package/dist/structural-rules/rules/SR016-unsafe-json-parse.d.ts +11 -0
- package/dist/structural-rules/rules/SR016-unsafe-json-parse.d.ts.map +1 -0
- package/dist/structural-rules/rules/SR016-unsafe-json-parse.js +187 -0
- package/dist/structural-rules/rules/SR016-unsafe-json-parse.js.map +1 -0
- package/dist/structural-rules/suppressions.d.ts +43 -0
- package/dist/structural-rules/suppressions.d.ts.map +1 -0
- package/dist/structural-rules/suppressions.js +115 -0
- package/dist/structural-rules/suppressions.js.map +1 -0
- package/dist/structural-rules/types.d.ts +43 -0
- package/dist/structural-rules/types.d.ts.map +1 -0
- package/dist/structural-rules/types.js +3 -0
- package/dist/structural-rules/types.js.map +1 -0
- package/dist/utils/advisory-signals.d.ts +5 -0
- package/dist/utils/advisory-signals.d.ts.map +1 -1
- package/dist/utils/advisory-signals.js +50 -12
- package/dist/utils/advisory-signals.js.map +1 -1
- package/dist/utils/ai-debt-budget.d.ts.map +1 -1
- package/dist/utils/ai-debt-budget.js +5 -2
- package/dist/utils/ai-debt-budget.js.map +1 -1
- package/dist/utils/brain-cache.d.ts +100 -0
- package/dist/utils/brain-cache.d.ts.map +1 -0
- package/dist/utils/brain-cache.js +346 -0
- package/dist/utils/brain-cache.js.map +1 -0
- package/dist/utils/cli-json.d.ts.map +1 -1
- package/dist/utils/cli-json.js +80 -12
- package/dist/utils/cli-json.js.map +1 -1
- package/dist/utils/execution-bus.d.ts +10 -0
- package/dist/utils/execution-bus.d.ts.map +1 -1
- package/dist/utils/execution-bus.js +16 -0
- package/dist/utils/execution-bus.js.map +1 -1
- package/dist/utils/governance-provenance.d.ts +95 -0
- package/dist/utils/governance-provenance.d.ts.map +1 -0
- package/dist/utils/governance-provenance.js +187 -0
- package/dist/utils/governance-provenance.js.map +1 -0
- package/dist/utils/pilot-metrics.d.ts +46 -0
- package/dist/utils/pilot-metrics.d.ts.map +1 -0
- package/dist/utils/pilot-metrics.js +240 -0
- package/dist/utils/pilot-metrics.js.map +1 -0
- package/dist/utils/policy-compiler.d.ts +6 -0
- package/dist/utils/policy-compiler.d.ts.map +1 -1
- package/dist/utils/policy-compiler.js +20 -0
- package/dist/utils/policy-compiler.js.map +1 -1
- package/dist/utils/replay-runtime.d.ts +34 -0
- package/dist/utils/replay-runtime.d.ts.map +1 -1
- package/dist/utils/replay-runtime.js +207 -0
- package/dist/utils/replay-runtime.js.map +1 -1
- package/dist/workspace/cross-repo-graph.d.ts +111 -0
- package/dist/workspace/cross-repo-graph.d.ts.map +1 -0
- package/dist/workspace/cross-repo-graph.js +450 -0
- package/dist/workspace/cross-repo-graph.js.map +1 -0
- package/dist/workspace/federated-context.d.ts +144 -0
- package/dist/workspace/federated-context.d.ts.map +1 -0
- package/dist/workspace/federated-context.js +347 -0
- package/dist/workspace/federated-context.js.map +1 -0
- package/dist/workspace/index.d.ts +38 -0
- package/dist/workspace/index.d.ts.map +1 -0
- package/dist/workspace/index.js +48 -0
- package/dist/workspace/index.js.map +1 -0
- package/package.json +10 -10
|
@@ -0,0 +1,176 @@
|
|
|
1
|
+
"use strict";
|
|
2
|
+
var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
|
|
3
|
+
if (k2 === undefined) k2 = k;
|
|
4
|
+
var desc = Object.getOwnPropertyDescriptor(m, k);
|
|
5
|
+
if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
|
|
6
|
+
desc = { enumerable: true, get: function() { return m[k]; } };
|
|
7
|
+
}
|
|
8
|
+
Object.defineProperty(o, k2, desc);
|
|
9
|
+
}) : (function(o, m, k, k2) {
|
|
10
|
+
if (k2 === undefined) k2 = k;
|
|
11
|
+
o[k2] = m[k];
|
|
12
|
+
}));
|
|
13
|
+
var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
|
|
14
|
+
Object.defineProperty(o, "default", { enumerable: true, value: v });
|
|
15
|
+
}) : function(o, v) {
|
|
16
|
+
o["default"] = v;
|
|
17
|
+
});
|
|
18
|
+
var __importStar = (this && this.__importStar) || (function () {
|
|
19
|
+
var ownKeys = function(o) {
|
|
20
|
+
ownKeys = Object.getOwnPropertyNames || function (o) {
|
|
21
|
+
var ar = [];
|
|
22
|
+
for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
|
|
23
|
+
return ar;
|
|
24
|
+
};
|
|
25
|
+
return ownKeys(o);
|
|
26
|
+
};
|
|
27
|
+
return function (mod) {
|
|
28
|
+
if (mod && mod.__esModule) return mod;
|
|
29
|
+
var result = {};
|
|
30
|
+
if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
|
|
31
|
+
__setModuleDefault(result, mod);
|
|
32
|
+
return result;
|
|
33
|
+
};
|
|
34
|
+
})();
|
|
35
|
+
Object.defineProperty(exports, "__esModule", { value: true });
|
|
36
|
+
exports.SR008BackgroundTaskOrphan = void 0;
|
|
37
|
+
const ts = __importStar(require("typescript"));
|
|
38
|
+
function getLineAndCol(sf, pos) {
|
|
39
|
+
const lc = sf.getLineAndCharacterOfPosition(pos);
|
|
40
|
+
return { line: lc.line + 1, column: lc.character + 1 };
|
|
41
|
+
}
|
|
42
|
+
function getEvidenceLines(sourceText, line) {
|
|
43
|
+
const lines = sourceText.split('\n');
|
|
44
|
+
return (lines[line - 1] || '').slice(0, 120);
|
|
45
|
+
}
|
|
46
|
+
const ASYNC_PREFIXES = [
|
|
47
|
+
'fetch',
|
|
48
|
+
'send',
|
|
49
|
+
'process',
|
|
50
|
+
'handle',
|
|
51
|
+
'dispatch',
|
|
52
|
+
'emit',
|
|
53
|
+
'publish',
|
|
54
|
+
'save',
|
|
55
|
+
'write',
|
|
56
|
+
'update',
|
|
57
|
+
'delete',
|
|
58
|
+
'remove',
|
|
59
|
+
'create',
|
|
60
|
+
'insert',
|
|
61
|
+
'upload',
|
|
62
|
+
'download',
|
|
63
|
+
'notify',
|
|
64
|
+
'broadcast',
|
|
65
|
+
'flush',
|
|
66
|
+
'sync',
|
|
67
|
+
];
|
|
68
|
+
function looksAsync(callExpr) {
|
|
69
|
+
const expr = callExpr.expression;
|
|
70
|
+
let calleeName = '';
|
|
71
|
+
if (ts.isIdentifier(expr)) {
|
|
72
|
+
calleeName = expr.text;
|
|
73
|
+
}
|
|
74
|
+
else if (ts.isPropertyAccessExpression(expr)) {
|
|
75
|
+
calleeName = expr.name.text;
|
|
76
|
+
}
|
|
77
|
+
if (!calleeName)
|
|
78
|
+
return false;
|
|
79
|
+
const lower = calleeName.toLowerCase();
|
|
80
|
+
return ASYNC_PREFIXES.some(prefix => lower.startsWith(prefix));
|
|
81
|
+
}
|
|
82
|
+
/** Check if a call expression has a .catch() chained on it (as parent call chain) */
|
|
83
|
+
function hasCatchChained(node) {
|
|
84
|
+
let current = node;
|
|
85
|
+
// Walk up the parent chain to see if this call is followed by .catch(
|
|
86
|
+
while (current.parent) {
|
|
87
|
+
const p = current.parent;
|
|
88
|
+
// If parent is a property access for .catch
|
|
89
|
+
if (ts.isPropertyAccessExpression(p) &&
|
|
90
|
+
p.name.text === 'catch' &&
|
|
91
|
+
p.expression === current) {
|
|
92
|
+
return true;
|
|
93
|
+
}
|
|
94
|
+
// If parent is a property access for something else, keep walking
|
|
95
|
+
if (ts.isPropertyAccessExpression(p) && p.expression === current) {
|
|
96
|
+
current = p;
|
|
97
|
+
continue;
|
|
98
|
+
}
|
|
99
|
+
break;
|
|
100
|
+
}
|
|
101
|
+
return false;
|
|
102
|
+
}
|
|
103
|
+
/** Check if the call is wrapped in `void ` */
|
|
104
|
+
function isVoidWrapped(node) {
|
|
105
|
+
const parent = node.parent;
|
|
106
|
+
return (ts.isVoidExpression(parent) ||
|
|
107
|
+
// Also check: void somePromise
|
|
108
|
+
(ts.isExpressionStatement(parent) &&
|
|
109
|
+
ts.isVoidExpression(parent.expression)));
|
|
110
|
+
}
|
|
111
|
+
class SR008BackgroundTaskOrphan {
|
|
112
|
+
id = 'SR008';
|
|
113
|
+
name = 'Background task orphan (unhandled floating promise)';
|
|
114
|
+
policyRef = 'P012';
|
|
115
|
+
severity = 'ADVISORY';
|
|
116
|
+
languages = ['typescript', 'javascript'];
|
|
117
|
+
description = 'Async function calls whose result is not awaited, stored, or catch-handled create unhandled promise rejections.';
|
|
118
|
+
check(filePath, sourceText) {
|
|
119
|
+
try {
|
|
120
|
+
const violations = [];
|
|
121
|
+
const ext = filePath.endsWith('.tsx')
|
|
122
|
+
? ts.ScriptKind.TSX
|
|
123
|
+
: filePath.endsWith('.jsx')
|
|
124
|
+
? ts.ScriptKind.JSX
|
|
125
|
+
: filePath.endsWith('.js')
|
|
126
|
+
? ts.ScriptKind.JS
|
|
127
|
+
: ts.ScriptKind.TS;
|
|
128
|
+
const sf = ts.createSourceFile(filePath, sourceText, ts.ScriptTarget.Latest, true, ext);
|
|
129
|
+
const visit = (node) => {
|
|
130
|
+
// Must be an ExpressionStatement (bare call, result unused)
|
|
131
|
+
if (ts.isExpressionStatement(node)) {
|
|
132
|
+
const expr = node.expression;
|
|
133
|
+
// Skip: void someCall()
|
|
134
|
+
if (ts.isVoidExpression(expr)) {
|
|
135
|
+
ts.forEachChild(node, visit);
|
|
136
|
+
return;
|
|
137
|
+
}
|
|
138
|
+
// Direct call: someAsync()
|
|
139
|
+
if (ts.isCallExpression(expr)) {
|
|
140
|
+
if (looksAsync(expr) && !hasCatchChained(expr)) {
|
|
141
|
+
const { line, column } = getLineAndCol(sf, expr.getStart(sf));
|
|
142
|
+
const evidence = getEvidenceLines(sourceText, line);
|
|
143
|
+
violations.push({
|
|
144
|
+
ruleId: this.id,
|
|
145
|
+
ruleName: this.name,
|
|
146
|
+
policyRef: this.policyRef,
|
|
147
|
+
severity: this.severity,
|
|
148
|
+
filePath,
|
|
149
|
+
line,
|
|
150
|
+
column,
|
|
151
|
+
evidence,
|
|
152
|
+
operationalRisk: 'Unhandled promise rejection crashes the Node.js process in Node 15+ ' +
|
|
153
|
+
'or causes silent failure in older versions. Background task errors go unmonitored.',
|
|
154
|
+
remediation: 'Either await the call (inside an async function), attach `.catch(err => logger.error(err))`, ' +
|
|
155
|
+
'or use `void someAsync()` if the orphan is intentional and errors are handled inside the function.',
|
|
156
|
+
determinism: 'heuristic-advisory',
|
|
157
|
+
confidence: 0.65,
|
|
158
|
+
language: filePath.match(/\.(js|jsx)$/) ? 'javascript' : 'typescript',
|
|
159
|
+
});
|
|
160
|
+
}
|
|
161
|
+
}
|
|
162
|
+
// Method call chain ending in no .catch: obj.someAsync()
|
|
163
|
+
// (already handled by looksAsync checking the method name)
|
|
164
|
+
}
|
|
165
|
+
ts.forEachChild(node, visit);
|
|
166
|
+
};
|
|
167
|
+
ts.forEachChild(sf, visit);
|
|
168
|
+
return violations;
|
|
169
|
+
}
|
|
170
|
+
catch {
|
|
171
|
+
return [];
|
|
172
|
+
}
|
|
173
|
+
}
|
|
174
|
+
}
|
|
175
|
+
exports.SR008BackgroundTaskOrphan = SR008BackgroundTaskOrphan;
|
|
176
|
+
//# sourceMappingURL=SR008-background-task-orphan.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"SR008-background-task-orphan.js","sourceRoot":"","sources":["../../../src/structural-rules/rules/SR008-background-task-orphan.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,+CAAiC;AAGjC,SAAS,aAAa,CAAC,EAAiB,EAAE,GAAW;IACnD,MAAM,EAAE,GAAG,EAAE,CAAC,6BAA6B,CAAC,GAAG,CAAC,CAAC;IACjD,OAAO,EAAE,IAAI,EAAE,EAAE,CAAC,IAAI,GAAG,CAAC,EAAE,MAAM,EAAE,EAAE,CAAC,SAAS,GAAG,CAAC,EAAE,CAAC;AACzD,CAAC;AAED,SAAS,gBAAgB,CAAC,UAAkB,EAAE,IAAY;IACxD,MAAM,KAAK,GAAG,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACrC,OAAO,CAAC,KAAK,CAAC,IAAI,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;AAC/C,CAAC;AAED,MAAM,cAAc,GAAG;IACrB,OAAO;IACP,MAAM;IACN,SAAS;IACT,QAAQ;IACR,UAAU;IACV,MAAM;IACN,SAAS;IACT,MAAM;IACN,OAAO;IACP,QAAQ;IACR,QAAQ;IACR,QAAQ;IACR,QAAQ;IACR,QAAQ;IACR,QAAQ;IACR,UAAU;IACV,QAAQ;IACR,WAAW;IACX,OAAO;IACP,MAAM;CACP,CAAC;AAEF,SAAS,UAAU,CAAC,QAA2B;IAC7C,MAAM,IAAI,GAAG,QAAQ,CAAC,UAAU,CAAC;IACjC,IAAI,UAAU,GAAG,EAAE,CAAC;IAEpB,IAAI,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,EAAE,CAAC;QAC1B,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC;IACzB,CAAC;SAAM,IAAI,EAAE,CAAC,0BAA0B,CAAC,IAAI,CAAC,EAAE,CAAC;QAC/C,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC;IAC9B,CAAC;IAED,IAAI,CAAC,UAAU;QAAE,OAAO,KAAK,CAAC;IAE9B,MAAM,KAAK,GAAG,UAAU,CAAC,WAAW,EAAE,CAAC;IACvC,OAAO,cAAc,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,KAAK,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC;AACjE,CAAC;AAED,qFAAqF;AACrF,SAAS,eAAe,CAAC,IAAuB;IAC9C,IAAI,OAAO,GAAY,IAAI,CAAC;IAC5B,sEAAsE;IACtE,OAAO,OAAO,CAAC,MAAM,EAAE,CAAC;QACtB,MAAM,CAAC,GAAG,OAAO,CAAC,MAAM,CAAC;QACzB,4CAA4C;QAC5C,IACE,EAAE,CAAC,0BAA0B,CAAC,CAAC,CAAC;YAChC,CAAC,CAAC,IAAI,CAAC,IAAI,KAAK,OAAO;YACvB,CAAC,CAAC,UAAU,KAAK,OAAO,EACxB,CAAC;YACD,OAAO,IAAI,CAAC;QACd,CAAC;QACD,kEAAkE;QAClE,IAAI,EAAE,CAAC,0BAA0B,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,UAAU,KAAK,OAAO,EAAE,CAAC;YACjE,OAAO,GAAG,CAAC,CAAC;YACZ,SAAS;QACX,CAAC;QACD,MAAM;IACR,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,8CAA8C;AAC9C,SAAS,aAAa,CAAC,IAAuB;IAC5C,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC;IAC3B,OAAO,CACL,EAAE,CAAC,gBAAgB,CAAC,MAAM,CAAC;QAC3B,+BAA+B;QAC/B,CAAC,EAAE,CAAC,qBAAqB,CAAC,MAAM,CAAC;YAC/B,EAAE,CAAC,gBAAgB,CAAE,MAAiC,CAAC,UAAU,CAAC,CAAC,CACtE,CAAC;AACJ,CAAC;AAED,MAAa,yBAAyB;IACpC,EAAE,GAAG,OAAO,CAAC;IACb,IAAI,GAAG,qDAAqD,CAAC;IAC7D,SAAS,GAAG,MAAM,CAAC;IACnB,QAAQ,GAAG,UAAmB,CAAC;IAC/B,SAAS,GAAmB,CAAC,YAAY,EAAE,YAAY,CAAC,CAAC;IACzD,WAAW,GACT,iHAAiH,CAAC;IAEpH,KAAK,CAAC,QAAgB,EAAE,UAAkB;QACxC,IAAI,CAAC;YACH,MAAM,UAAU,GAA0B,EAAE,CAAC;YAC7C,MAAM,GAAG,GAAG,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC;gBACnC,CAAC,CAAC,EAAE,CAAC,UAAU,CAAC,GAAG;gBACnB,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC;oBAC3B,CAAC,CAAC,EAAE,CAAC,UAAU,CAAC,GAAG;oBACnB,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,KAAK,CAAC;wBAC1B,CAAC,CAAC,EAAE,CAAC,UAAU,CAAC,EAAE;wBAClB,CAAC,CAAC,EAAE,CAAC,UAAU,CAAC,EAAE,CAAC;YAErB,MAAM,EAAE,GAAG,EAAE,CAAC,gBAAgB,CAAC,QAAQ,EAAE,UAAU,EAAE,EAAE,CAAC,YAAY,CAAC,MAAM,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC;YAExF,MAAM,KAAK,GAAG,CAAC,IAAa,EAAQ,EAAE;gBACpC,4DAA4D;gBAC5D,IAAI,EAAE,CAAC,qBAAqB,CAAC,IAAI,CAAC,EAAE,CAAC;oBACnC,MAAM,IAAI,GAAG,IAAI,CAAC,UAAU,CAAC;oBAE7B,wBAAwB;oBACxB,IAAI,EAAE,CAAC,gBAAgB,CAAC,IAAI,CAAC,EAAE,CAAC;wBAC9B,EAAE,CAAC,YAAY,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;wBAC7B,OAAO;oBACT,CAAC;oBAED,2BAA2B;oBAC3B,IAAI,EAAE,CAAC,gBAAgB,CAAC,IAAI,CAAC,EAAE,CAAC;wBAC9B,IAAI,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,EAAE,CAAC;4BAC/C,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,aAAa,CAAC,EAAE,EAAE,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC;4BAC9D,MAAM,QAAQ,GAAG,gBAAgB,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC;4BACpD,UAAU,CAAC,IAAI,CAAC;gCACd,MAAM,EAAE,IAAI,CAAC,EAAE;gCACf,QAAQ,EAAE,IAAI,CAAC,IAAI;gCACnB,SAAS,EAAE,IAAI,CAAC,SAAS;gCACzB,QAAQ,EAAE,IAAI,CAAC,QAAQ;gCACvB,QAAQ;gCACR,IAAI;gCACJ,MAAM;gCACN,QAAQ;gCACR,eAAe,EACb,sEAAsE;oCACtE,oFAAoF;gCACtF,WAAW,EACT,+FAA+F;oCAC/F,oGAAoG;gCACtG,WAAW,EAAE,oBAAoB;gCACjC,UAAU,EAAE,IAAI;gCAChB,QAAQ,EAAE,QAAQ,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,YAAY;6BACtE,CAAC,CAAC;wBACL,CAAC;oBACH,CAAC;oBAED,yDAAyD;oBACzD,2DAA2D;gBAC7D,CAAC;gBAED,EAAE,CAAC,YAAY,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;YAC/B,CAAC,CAAC;YAEF,EAAE,CAAC,YAAY,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC;YAC3B,OAAO,UAAU,CAAC;QACpB,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,EAAE,CAAC;QACZ,CAAC;IACH,CAAC;CACF;AAzED,8DAyEC"}
|
|
@@ -0,0 +1,11 @@
|
|
|
1
|
+
import { StructuralRule, StructuralViolation, RuleLanguage } from '../types';
|
|
2
|
+
export declare class SR009MissingRetryBackoff implements StructuralRule {
|
|
3
|
+
id: string;
|
|
4
|
+
name: string;
|
|
5
|
+
policyRef: string;
|
|
6
|
+
severity: "ADVISORY";
|
|
7
|
+
languages: RuleLanguage[];
|
|
8
|
+
description: string;
|
|
9
|
+
check(filePath: string, sourceText: string): StructuralViolation[];
|
|
10
|
+
}
|
|
11
|
+
//# sourceMappingURL=SR009-missing-retry-backoff.d.ts.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"SR009-missing-retry-backoff.d.ts","sourceRoot":"","sources":["../../../src/structural-rules/rules/SR009-missing-retry-backoff.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,cAAc,EAAE,mBAAmB,EAAE,YAAY,EAAE,MAAM,UAAU,CAAC;AAyD7E,qBAAa,wBAAyB,YAAW,cAAc;IAC7D,EAAE,SAAW;IACb,IAAI,SAA4C;IAChD,SAAS,SAAU;IACnB,QAAQ,EAAG,UAAU,CAAU;IAC/B,SAAS,EAAE,YAAY,EAAE,CAAgC;IACzD,WAAW,SACiG;IAE5G,KAAK,CAAC,QAAQ,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,mBAAmB,EAAE;CAsFnE"}
|
|
@@ -0,0 +1,168 @@
|
|
|
1
|
+
"use strict";
|
|
2
|
+
var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
|
|
3
|
+
if (k2 === undefined) k2 = k;
|
|
4
|
+
var desc = Object.getOwnPropertyDescriptor(m, k);
|
|
5
|
+
if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
|
|
6
|
+
desc = { enumerable: true, get: function() { return m[k]; } };
|
|
7
|
+
}
|
|
8
|
+
Object.defineProperty(o, k2, desc);
|
|
9
|
+
}) : (function(o, m, k, k2) {
|
|
10
|
+
if (k2 === undefined) k2 = k;
|
|
11
|
+
o[k2] = m[k];
|
|
12
|
+
}));
|
|
13
|
+
var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
|
|
14
|
+
Object.defineProperty(o, "default", { enumerable: true, value: v });
|
|
15
|
+
}) : function(o, v) {
|
|
16
|
+
o["default"] = v;
|
|
17
|
+
});
|
|
18
|
+
var __importStar = (this && this.__importStar) || (function () {
|
|
19
|
+
var ownKeys = function(o) {
|
|
20
|
+
ownKeys = Object.getOwnPropertyNames || function (o) {
|
|
21
|
+
var ar = [];
|
|
22
|
+
for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
|
|
23
|
+
return ar;
|
|
24
|
+
};
|
|
25
|
+
return ownKeys(o);
|
|
26
|
+
};
|
|
27
|
+
return function (mod) {
|
|
28
|
+
if (mod && mod.__esModule) return mod;
|
|
29
|
+
var result = {};
|
|
30
|
+
if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
|
|
31
|
+
__setModuleDefault(result, mod);
|
|
32
|
+
return result;
|
|
33
|
+
};
|
|
34
|
+
})();
|
|
35
|
+
Object.defineProperty(exports, "__esModule", { value: true });
|
|
36
|
+
exports.SR009MissingRetryBackoff = void 0;
|
|
37
|
+
const ts = __importStar(require("typescript"));
|
|
38
|
+
function getLineAndCol(sf, pos) {
|
|
39
|
+
const lc = sf.getLineAndCharacterOfPosition(pos);
|
|
40
|
+
return { line: lc.line + 1, column: lc.character + 1 };
|
|
41
|
+
}
|
|
42
|
+
function getEvidenceLines(sourceText, line) {
|
|
43
|
+
const lines = sourceText.split('\n');
|
|
44
|
+
return (lines[line - 1] || '').slice(0, 120);
|
|
45
|
+
}
|
|
46
|
+
function bodyTextOf(node, sf) {
|
|
47
|
+
return node.getText(sf);
|
|
48
|
+
}
|
|
49
|
+
function hasBackoffIndicator(text) {
|
|
50
|
+
return (/Math\s*\.\s*pow\s*\(/.test(text) ||
|
|
51
|
+
/Math\s*\.\s*min\s*\(/.test(text) ||
|
|
52
|
+
/\bbackoff\b/i.test(text) ||
|
|
53
|
+
/\bdelay\b/i.test(text) ||
|
|
54
|
+
/\bsleep\b/i.test(text) ||
|
|
55
|
+
/\bjitter\b/i.test(text) ||
|
|
56
|
+
/exponential/i.test(text) ||
|
|
57
|
+
/2\s*\*\*\s*\w+/.test(text) // 2 ** retries pattern
|
|
58
|
+
);
|
|
59
|
+
}
|
|
60
|
+
function hasAwaitInBody(node) {
|
|
61
|
+
let found = false;
|
|
62
|
+
const visit = (n) => {
|
|
63
|
+
if (found)
|
|
64
|
+
return;
|
|
65
|
+
if (ts.isAwaitExpression(n)) {
|
|
66
|
+
found = true;
|
|
67
|
+
return;
|
|
68
|
+
}
|
|
69
|
+
ts.forEachChild(n, visit);
|
|
70
|
+
};
|
|
71
|
+
ts.forEachChild(node, visit);
|
|
72
|
+
return found;
|
|
73
|
+
}
|
|
74
|
+
function hasRetryIndicator(text) {
|
|
75
|
+
return (/\bretry\b/i.test(text) ||
|
|
76
|
+
/\battempt\b/i.test(text) ||
|
|
77
|
+
/\bretries\b/i.test(text) ||
|
|
78
|
+
/\bmaxRetry/i.test(text) ||
|
|
79
|
+
/\bMAX_RETRY/i.test(text) ||
|
|
80
|
+
/i\s*<\s*\w*[Rr]etry/.test(text) ||
|
|
81
|
+
/i\s*<\s*\w*[Aa]ttempt/.test(text));
|
|
82
|
+
}
|
|
83
|
+
function hasRethrowOrContinue(node, sf) {
|
|
84
|
+
const text = bodyTextOf(node, sf);
|
|
85
|
+
return /\bthrow\b/.test(text) || /\bcontinue\b/.test(text) || /i\+\+/.test(text) || /i\s*-=\s*1/.test(text);
|
|
86
|
+
}
|
|
87
|
+
class SR009MissingRetryBackoff {
|
|
88
|
+
id = 'SR009';
|
|
89
|
+
name = 'Retry loop without exponential backoff';
|
|
90
|
+
policyRef = 'P013';
|
|
91
|
+
severity = 'ADVISORY';
|
|
92
|
+
languages = ['typescript', 'javascript'];
|
|
93
|
+
description = 'Retry loops with await but no backoff calculation hammer downstream services with linear or zero delay.';
|
|
94
|
+
check(filePath, sourceText) {
|
|
95
|
+
try {
|
|
96
|
+
const violations = [];
|
|
97
|
+
const ext = filePath.endsWith('.tsx')
|
|
98
|
+
? ts.ScriptKind.TSX
|
|
99
|
+
: filePath.endsWith('.jsx')
|
|
100
|
+
? ts.ScriptKind.JSX
|
|
101
|
+
: filePath.endsWith('.js')
|
|
102
|
+
? ts.ScriptKind.JS
|
|
103
|
+
: ts.ScriptKind.TS;
|
|
104
|
+
const sf = ts.createSourceFile(filePath, sourceText, ts.ScriptTarget.Latest, true, ext);
|
|
105
|
+
const visit = (node) => {
|
|
106
|
+
const isWhileOrFor = ts.isWhileStatement(node) ||
|
|
107
|
+
ts.isForStatement(node) ||
|
|
108
|
+
ts.isDoStatement(node);
|
|
109
|
+
if (isWhileOrFor) {
|
|
110
|
+
const body = ts.isWhileStatement(node)
|
|
111
|
+
? node.statement
|
|
112
|
+
: ts.isDoStatement(node)
|
|
113
|
+
? node.statement
|
|
114
|
+
: node.statement;
|
|
115
|
+
const bodyText = bodyTextOf(body, sf);
|
|
116
|
+
// Must have an await in the loop body
|
|
117
|
+
if (!hasAwaitInBody(body)) {
|
|
118
|
+
ts.forEachChild(node, visit);
|
|
119
|
+
return;
|
|
120
|
+
}
|
|
121
|
+
// Must look like a retry loop
|
|
122
|
+
if (!hasRetryIndicator(bodyText) && !hasRetryIndicator(node.getText(sf))) {
|
|
123
|
+
ts.forEachChild(node, visit);
|
|
124
|
+
return;
|
|
125
|
+
}
|
|
126
|
+
// If there's backoff, no violation
|
|
127
|
+
if (hasBackoffIndicator(bodyText)) {
|
|
128
|
+
ts.forEachChild(node, visit);
|
|
129
|
+
return;
|
|
130
|
+
}
|
|
131
|
+
// Must have a re-throw or loop continuation to confirm it's truly a retry
|
|
132
|
+
if (!hasRethrowOrContinue(body, sf)) {
|
|
133
|
+
ts.forEachChild(node, visit);
|
|
134
|
+
return;
|
|
135
|
+
}
|
|
136
|
+
const { line, column } = getLineAndCol(sf, node.getStart(sf));
|
|
137
|
+
const evidence = getEvidenceLines(sourceText, line);
|
|
138
|
+
violations.push({
|
|
139
|
+
ruleId: this.id,
|
|
140
|
+
ruleName: this.name,
|
|
141
|
+
policyRef: this.policyRef,
|
|
142
|
+
severity: this.severity,
|
|
143
|
+
filePath,
|
|
144
|
+
line,
|
|
145
|
+
column,
|
|
146
|
+
evidence,
|
|
147
|
+
operationalRisk: 'Linear retry without backoff causes a thundering herd: all retry loops fire simultaneously ' +
|
|
148
|
+
'after a failure, amplifying load on an already-struggling downstream service ' +
|
|
149
|
+
'and preventing recovery.',
|
|
150
|
+
remediation: 'Add exponential backoff: `await sleep(Math.min(baseDelay * 2 ** attempt, maxDelay))` ' +
|
|
151
|
+
'with optional jitter: `+ Math.random() * jitter`. Consider using a library like `p-retry`.',
|
|
152
|
+
determinism: 'heuristic-advisory',
|
|
153
|
+
confidence: 0.70,
|
|
154
|
+
language: filePath.match(/\.(js|jsx)$/) ? 'javascript' : 'typescript',
|
|
155
|
+
});
|
|
156
|
+
}
|
|
157
|
+
ts.forEachChild(node, visit);
|
|
158
|
+
};
|
|
159
|
+
ts.forEachChild(sf, visit);
|
|
160
|
+
return violations;
|
|
161
|
+
}
|
|
162
|
+
catch {
|
|
163
|
+
return [];
|
|
164
|
+
}
|
|
165
|
+
}
|
|
166
|
+
}
|
|
167
|
+
exports.SR009MissingRetryBackoff = SR009MissingRetryBackoff;
|
|
168
|
+
//# sourceMappingURL=SR009-missing-retry-backoff.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"SR009-missing-retry-backoff.js","sourceRoot":"","sources":["../../../src/structural-rules/rules/SR009-missing-retry-backoff.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,+CAAiC;AAGjC,SAAS,aAAa,CAAC,EAAiB,EAAE,GAAW;IACnD,MAAM,EAAE,GAAG,EAAE,CAAC,6BAA6B,CAAC,GAAG,CAAC,CAAC;IACjD,OAAO,EAAE,IAAI,EAAE,EAAE,CAAC,IAAI,GAAG,CAAC,EAAE,MAAM,EAAE,EAAE,CAAC,SAAS,GAAG,CAAC,EAAE,CAAC;AACzD,CAAC;AAED,SAAS,gBAAgB,CAAC,UAAkB,EAAE,IAAY;IACxD,MAAM,KAAK,GAAG,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACrC,OAAO,CAAC,KAAK,CAAC,IAAI,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;AAC/C,CAAC;AAED,SAAS,UAAU,CAAC,IAAa,EAAE,EAAiB;IAClD,OAAO,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;AAC1B,CAAC;AAED,SAAS,mBAAmB,CAAC,IAAY;IACvC,OAAO,CACL,sBAAsB,CAAC,IAAI,CAAC,IAAI,CAAC;QACjC,sBAAsB,CAAC,IAAI,CAAC,IAAI,CAAC;QACjC,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC;QACzB,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC;QACvB,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC;QACvB,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC;QACxB,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC;QACzB,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAE,uBAAuB;KACrD,CAAC;AACJ,CAAC;AAED,SAAS,cAAc,CAAC,IAAa;IACnC,IAAI,KAAK,GAAG,KAAK,CAAC;IAClB,MAAM,KAAK,GAAG,CAAC,CAAU,EAAQ,EAAE;QACjC,IAAI,KAAK;YAAE,OAAO;QAClB,IAAI,EAAE,CAAC,iBAAiB,CAAC,CAAC,CAAC,EAAE,CAAC;YAAC,KAAK,GAAG,IAAI,CAAC;YAAC,OAAO;QAAC,CAAC;QACtD,EAAE,CAAC,YAAY,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;IAC5B,CAAC,CAAC;IACF,EAAE,CAAC,YAAY,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IAC7B,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,iBAAiB,CAAC,IAAY;IACrC,OAAO,CACL,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC;QACvB,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC;QACzB,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC;QACzB,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC;QACxB,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC;QACzB,qBAAqB,CAAC,IAAI,CAAC,IAAI,CAAC;QAChC,uBAAuB,CAAC,IAAI,CAAC,IAAI,CAAC,CACnC,CAAC;AACJ,CAAC;AAED,SAAS,oBAAoB,CAAC,IAAa,EAAE,EAAiB;IAC5D,MAAM,IAAI,GAAG,UAAU,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;IAClC,OAAO,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC9G,CAAC;AAED,MAAa,wBAAwB;IACnC,EAAE,GAAG,OAAO,CAAC;IACb,IAAI,GAAG,wCAAwC,CAAC;IAChD,SAAS,GAAG,MAAM,CAAC;IACnB,QAAQ,GAAG,UAAmB,CAAC;IAC/B,SAAS,GAAmB,CAAC,YAAY,EAAE,YAAY,CAAC,CAAC;IACzD,WAAW,GACT,yGAAyG,CAAC;IAE5G,KAAK,CAAC,QAAgB,EAAE,UAAkB;QACxC,IAAI,CAAC;YACH,MAAM,UAAU,GAA0B,EAAE,CAAC;YAC7C,MAAM,GAAG,GAAG,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC;gBACnC,CAAC,CAAC,EAAE,CAAC,UAAU,CAAC,GAAG;gBACnB,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC;oBAC3B,CAAC,CAAC,EAAE,CAAC,UAAU,CAAC,GAAG;oBACnB,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,KAAK,CAAC;wBAC1B,CAAC,CAAC,EAAE,CAAC,UAAU,CAAC,EAAE;wBAClB,CAAC,CAAC,EAAE,CAAC,UAAU,CAAC,EAAE,CAAC;YAErB,MAAM,EAAE,GAAG,EAAE,CAAC,gBAAgB,CAAC,QAAQ,EAAE,UAAU,EAAE,EAAE,CAAC,YAAY,CAAC,MAAM,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC;YAExF,MAAM,KAAK,GAAG,CAAC,IAAa,EAAQ,EAAE;gBACpC,MAAM,YAAY,GAChB,EAAE,CAAC,gBAAgB,CAAC,IAAI,CAAC;oBACzB,EAAE,CAAC,cAAc,CAAC,IAAI,CAAC;oBACvB,EAAE,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC;gBAEzB,IAAI,YAAY,EAAE,CAAC;oBACjB,MAAM,IAAI,GAAG,EAAE,CAAC,gBAAgB,CAAC,IAAI,CAAC;wBACpC,CAAC,CAAC,IAAI,CAAC,SAAS;wBAChB,CAAC,CAAC,EAAE,CAAC,aAAa,CAAC,IAAI,CAAC;4BACxB,CAAC,CAAC,IAAI,CAAC,SAAS;4BAChB,CAAC,CAAE,IAAwB,CAAC,SAAS,CAAC;oBAExC,MAAM,QAAQ,GAAG,UAAU,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;oBAEtC,sCAAsC;oBACtC,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,EAAE,CAAC;wBAC1B,EAAE,CAAC,YAAY,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;wBAC7B,OAAO;oBACT,CAAC;oBAED,8BAA8B;oBAC9B,IAAI,CAAC,iBAAiB,CAAC,QAAQ,CAAC,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC;wBACzE,EAAE,CAAC,YAAY,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;wBAC7B,OAAO;oBACT,CAAC;oBAED,mCAAmC;oBACnC,IAAI,mBAAmB,CAAC,QAAQ,CAAC,EAAE,CAAC;wBAClC,EAAE,CAAC,YAAY,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;wBAC7B,OAAO;oBACT,CAAC;oBAED,0EAA0E;oBAC1E,IAAI,CAAC,oBAAoB,CAAC,IAAI,EAAE,EAAE,CAAC,EAAE,CAAC;wBACpC,EAAE,CAAC,YAAY,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;wBAC7B,OAAO;oBACT,CAAC;oBAED,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,aAAa,CAAC,EAAE,EAAE,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC;oBAC9D,MAAM,QAAQ,GAAG,gBAAgB,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC;oBAEpD,UAAU,CAAC,IAAI,CAAC;wBACd,MAAM,EAAE,IAAI,CAAC,EAAE;wBACf,QAAQ,EAAE,IAAI,CAAC,IAAI;wBACnB,SAAS,EAAE,IAAI,CAAC,SAAS;wBACzB,QAAQ,EAAE,IAAI,CAAC,QAAQ;wBACvB,QAAQ;wBACR,IAAI;wBACJ,MAAM;wBACN,QAAQ;wBACR,eAAe,EACb,6FAA6F;4BAC7F,+EAA+E;4BAC/E,0BAA0B;wBAC5B,WAAW,EACT,uFAAuF;4BACvF,4FAA4F;wBAC9F,WAAW,EAAE,oBAAoB;wBACjC,UAAU,EAAE,IAAI;wBAChB,QAAQ,EAAE,QAAQ,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,YAAY;qBACtE,CAAC,CAAC;gBACL,CAAC;gBAED,EAAE,CAAC,YAAY,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;YAC/B,CAAC,CAAC;YAEF,EAAE,CAAC,YAAY,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC;YAC3B,OAAO,UAAU,CAAC;QACpB,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,EAAE,CAAC;QACZ,CAAC;IACH,CAAC;CACF;AA/FD,4DA+FC"}
|
|
@@ -0,0 +1,11 @@
|
|
|
1
|
+
import { StructuralRule, StructuralViolation, RuleLanguage } from '../types';
|
|
2
|
+
export declare class SR010RetryStorm implements StructuralRule {
|
|
3
|
+
id: string;
|
|
4
|
+
name: string;
|
|
5
|
+
policyRef: string;
|
|
6
|
+
severity: "ADVISORY";
|
|
7
|
+
languages: RuleLanguage[];
|
|
8
|
+
description: string;
|
|
9
|
+
check(filePath: string, sourceText: string): StructuralViolation[];
|
|
10
|
+
}
|
|
11
|
+
//# sourceMappingURL=SR010-retry-storm.d.ts.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"SR010-retry-storm.d.ts","sourceRoot":"","sources":["../../../src/structural-rules/rules/SR010-retry-storm.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,cAAc,EAAE,mBAAmB,EAAE,YAAY,EAAE,MAAM,UAAU,CAAC;AAiC7E,qBAAa,eAAgB,YAAW,cAAc;IACpD,EAAE,SAAW;IACb,IAAI,SAAyD;IAC7D,SAAS,SAAU;IACnB,QAAQ,EAAG,UAAU,CAAU;IAC/B,SAAS,EAAE,YAAY,EAAE,CAAgC;IACzD,WAAW,SAC+G;IAE1H,KAAK,CAAC,QAAQ,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,mBAAmB,EAAE;CAyInE"}
|
|
@@ -0,0 +1,181 @@
|
|
|
1
|
+
"use strict";
|
|
2
|
+
var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
|
|
3
|
+
if (k2 === undefined) k2 = k;
|
|
4
|
+
var desc = Object.getOwnPropertyDescriptor(m, k);
|
|
5
|
+
if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
|
|
6
|
+
desc = { enumerable: true, get: function() { return m[k]; } };
|
|
7
|
+
}
|
|
8
|
+
Object.defineProperty(o, k2, desc);
|
|
9
|
+
}) : (function(o, m, k, k2) {
|
|
10
|
+
if (k2 === undefined) k2 = k;
|
|
11
|
+
o[k2] = m[k];
|
|
12
|
+
}));
|
|
13
|
+
var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
|
|
14
|
+
Object.defineProperty(o, "default", { enumerable: true, value: v });
|
|
15
|
+
}) : function(o, v) {
|
|
16
|
+
o["default"] = v;
|
|
17
|
+
});
|
|
18
|
+
var __importStar = (this && this.__importStar) || (function () {
|
|
19
|
+
var ownKeys = function(o) {
|
|
20
|
+
ownKeys = Object.getOwnPropertyNames || function (o) {
|
|
21
|
+
var ar = [];
|
|
22
|
+
for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
|
|
23
|
+
return ar;
|
|
24
|
+
};
|
|
25
|
+
return ownKeys(o);
|
|
26
|
+
};
|
|
27
|
+
return function (mod) {
|
|
28
|
+
if (mod && mod.__esModule) return mod;
|
|
29
|
+
var result = {};
|
|
30
|
+
if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
|
|
31
|
+
__setModuleDefault(result, mod);
|
|
32
|
+
return result;
|
|
33
|
+
};
|
|
34
|
+
})();
|
|
35
|
+
Object.defineProperty(exports, "__esModule", { value: true });
|
|
36
|
+
exports.SR010RetryStorm = void 0;
|
|
37
|
+
const ts = __importStar(require("typescript"));
|
|
38
|
+
function getLineAndCol(sf, pos) {
|
|
39
|
+
const lc = sf.getLineAndCharacterOfPosition(pos);
|
|
40
|
+
return { line: lc.line + 1, column: lc.character + 1 };
|
|
41
|
+
}
|
|
42
|
+
function getEvidenceLines(sourceText, line) {
|
|
43
|
+
const lines = sourceText.split('\n');
|
|
44
|
+
return (lines[line - 1] || '').slice(0, 120);
|
|
45
|
+
}
|
|
46
|
+
function hasRateLimitOrCircuitBreaker(sourceText) {
|
|
47
|
+
return (/\bcircuitBreaker\b/i.test(sourceText) ||
|
|
48
|
+
/\brateLimit\b/i.test(sourceText) ||
|
|
49
|
+
/\brate_limit\b/i.test(sourceText) ||
|
|
50
|
+
/\bthrottle\b/i.test(sourceText) ||
|
|
51
|
+
/\bTokenBucket\b/.test(sourceText) ||
|
|
52
|
+
/\bLeakyBucket\b/.test(sourceText) ||
|
|
53
|
+
/\bBulkhead\b/.test(sourceText) ||
|
|
54
|
+
/\bp-limit\b/.test(sourceText) ||
|
|
55
|
+
/pLimit/.test(sourceText));
|
|
56
|
+
}
|
|
57
|
+
class SR010RetryStorm {
|
|
58
|
+
id = 'SR010';
|
|
59
|
+
name = 'Multiple independent retriers without rate limiting';
|
|
60
|
+
policyRef = 'P014';
|
|
61
|
+
severity = 'ADVISORY';
|
|
62
|
+
languages = ['typescript', 'javascript'];
|
|
63
|
+
description = 'Three or more independent retry patterns in one file without shared rate limiting create multiplicative retry storms.';
|
|
64
|
+
check(filePath, sourceText) {
|
|
65
|
+
try {
|
|
66
|
+
const violations = [];
|
|
67
|
+
const ext = filePath.endsWith('.tsx')
|
|
68
|
+
? ts.ScriptKind.TSX
|
|
69
|
+
: filePath.endsWith('.jsx')
|
|
70
|
+
? ts.ScriptKind.JSX
|
|
71
|
+
: filePath.endsWith('.js')
|
|
72
|
+
? ts.ScriptKind.JS
|
|
73
|
+
: ts.ScriptKind.TS;
|
|
74
|
+
const sf = ts.createSourceFile(filePath, sourceText, ts.ScriptTarget.Latest, true, ext);
|
|
75
|
+
// If there's already a shared rate limiter or circuit breaker, don't flag
|
|
76
|
+
if (hasRateLimitOrCircuitBreaker(sourceText))
|
|
77
|
+
return [];
|
|
78
|
+
const retryPatterns = [];
|
|
79
|
+
const visit = (node) => {
|
|
80
|
+
// Pattern 1: while/for loop with retry variable and await
|
|
81
|
+
const isLoop = ts.isWhileStatement(node) ||
|
|
82
|
+
ts.isForStatement(node) ||
|
|
83
|
+
ts.isDoStatement(node);
|
|
84
|
+
if (isLoop) {
|
|
85
|
+
const nodeText = node.getText(sf);
|
|
86
|
+
if (/\b(retry|retries|attempt|maxRetry|MAX_RETRY)\b/i.test(nodeText) &&
|
|
87
|
+
/\bawait\b/.test(nodeText)) {
|
|
88
|
+
const { line, column } = getLineAndCol(sf, node.getStart(sf));
|
|
89
|
+
retryPatterns.push({
|
|
90
|
+
line,
|
|
91
|
+
column,
|
|
92
|
+
evidence: getEvidenceLines(sourceText, line),
|
|
93
|
+
kind: 'retry loop',
|
|
94
|
+
});
|
|
95
|
+
}
|
|
96
|
+
}
|
|
97
|
+
// Pattern 2: function named with 'retry' or 'withRetry' or 'retryable'
|
|
98
|
+
if (ts.isFunctionDeclaration(node) ||
|
|
99
|
+
ts.isFunctionExpression(node) ||
|
|
100
|
+
ts.isMethodDeclaration(node) ||
|
|
101
|
+
ts.isArrowFunction(node)) {
|
|
102
|
+
let funcName = '';
|
|
103
|
+
if ((ts.isFunctionDeclaration(node) || ts.isMethodDeclaration(node)) &&
|
|
104
|
+
node.name &&
|
|
105
|
+
ts.isIdentifier(node.name)) {
|
|
106
|
+
funcName = node.name.text;
|
|
107
|
+
}
|
|
108
|
+
if (/retry|withRetry|retryable|retriable/i.test(funcName)) {
|
|
109
|
+
const { line, column } = getLineAndCol(sf, node.getStart(sf));
|
|
110
|
+
retryPatterns.push({
|
|
111
|
+
line,
|
|
112
|
+
column,
|
|
113
|
+
evidence: getEvidenceLines(sourceText, line),
|
|
114
|
+
kind: 'retry function',
|
|
115
|
+
});
|
|
116
|
+
}
|
|
117
|
+
}
|
|
118
|
+
// Pattern 3: catch-and-retry: recursive call inside catch
|
|
119
|
+
if (ts.isCallExpression(node) &&
|
|
120
|
+
ts.isPropertyAccessExpression(node.expression) &&
|
|
121
|
+
node.expression.name.text === 'catch') {
|
|
122
|
+
const bodyText = node.getText(sf);
|
|
123
|
+
// catch body calls the parent function recursively (retry pattern)
|
|
124
|
+
if (/\bretry\b/i.test(bodyText) || /\battempt\b/i.test(bodyText)) {
|
|
125
|
+
const { line, column } = getLineAndCol(sf, node.getStart(sf));
|
|
126
|
+
retryPatterns.push({
|
|
127
|
+
line,
|
|
128
|
+
column,
|
|
129
|
+
evidence: getEvidenceLines(sourceText, line),
|
|
130
|
+
kind: 'catch-and-retry',
|
|
131
|
+
});
|
|
132
|
+
}
|
|
133
|
+
}
|
|
134
|
+
ts.forEachChild(node, visit);
|
|
135
|
+
};
|
|
136
|
+
ts.forEachChild(sf, visit);
|
|
137
|
+
// Only flag when 3+ retry patterns found
|
|
138
|
+
if (retryPatterns.length < 3)
|
|
139
|
+
return [];
|
|
140
|
+
// Deduplicate by line
|
|
141
|
+
const seen = new Set();
|
|
142
|
+
const unique = retryPatterns.filter(p => {
|
|
143
|
+
if (seen.has(p.line))
|
|
144
|
+
return false;
|
|
145
|
+
seen.add(p.line);
|
|
146
|
+
return true;
|
|
147
|
+
});
|
|
148
|
+
if (unique.length < 3)
|
|
149
|
+
return [];
|
|
150
|
+
// Report on the first pattern, with evidence listing all found locations
|
|
151
|
+
const allLocations = unique
|
|
152
|
+
.map(p => ` line ${p.line}: ${p.evidence.trim()} [${p.kind}]`)
|
|
153
|
+
.join('\n');
|
|
154
|
+
violations.push({
|
|
155
|
+
ruleId: this.id,
|
|
156
|
+
ruleName: this.name,
|
|
157
|
+
policyRef: this.policyRef,
|
|
158
|
+
severity: this.severity,
|
|
159
|
+
filePath,
|
|
160
|
+
line: unique[0].line,
|
|
161
|
+
column: unique[0].column,
|
|
162
|
+
evidence: `${unique.length} retry patterns found:\n${allLocations}`.slice(0, 600),
|
|
163
|
+
operationalRisk: `${unique.length} independent retry patterns exist in this file without shared rate limiting. ` +
|
|
164
|
+
'Under a single downstream failure, each retrier fires independently, creating up to ' +
|
|
165
|
+
`${unique.length}x the expected load on the failing service, delaying its recovery.`,
|
|
166
|
+
remediation: 'Introduce a shared circuit breaker or rate limiter (e.g. `p-limit`, `opossum`) that all ' +
|
|
167
|
+
'retry patterns respect. Alternatively, consolidate retries into a single shared utility ' +
|
|
168
|
+
'function with a centrally-configured retry policy.',
|
|
169
|
+
determinism: 'heuristic-advisory',
|
|
170
|
+
confidence: 0.60,
|
|
171
|
+
language: filePath.match(/\.(js|jsx)$/) ? 'javascript' : 'typescript',
|
|
172
|
+
});
|
|
173
|
+
return violations;
|
|
174
|
+
}
|
|
175
|
+
catch {
|
|
176
|
+
return [];
|
|
177
|
+
}
|
|
178
|
+
}
|
|
179
|
+
}
|
|
180
|
+
exports.SR010RetryStorm = SR010RetryStorm;
|
|
181
|
+
//# sourceMappingURL=SR010-retry-storm.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"SR010-retry-storm.js","sourceRoot":"","sources":["../../../src/structural-rules/rules/SR010-retry-storm.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,+CAAiC;AAGjC,SAAS,aAAa,CAAC,EAAiB,EAAE,GAAW;IACnD,MAAM,EAAE,GAAG,EAAE,CAAC,6BAA6B,CAAC,GAAG,CAAC,CAAC;IACjD,OAAO,EAAE,IAAI,EAAE,EAAE,CAAC,IAAI,GAAG,CAAC,EAAE,MAAM,EAAE,EAAE,CAAC,SAAS,GAAG,CAAC,EAAE,CAAC;AACzD,CAAC;AAED,SAAS,gBAAgB,CAAC,UAAkB,EAAE,IAAY;IACxD,MAAM,KAAK,GAAG,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACrC,OAAO,CAAC,KAAK,CAAC,IAAI,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;AAC/C,CAAC;AASD,SAAS,4BAA4B,CAAC,UAAkB;IACtD,OAAO,CACL,qBAAqB,CAAC,IAAI,CAAC,UAAU,CAAC;QACtC,gBAAgB,CAAC,IAAI,CAAC,UAAU,CAAC;QACjC,iBAAiB,CAAC,IAAI,CAAC,UAAU,CAAC;QAClC,eAAe,CAAC,IAAI,CAAC,UAAU,CAAC;QAChC,iBAAiB,CAAC,IAAI,CAAC,UAAU,CAAC;QAClC,iBAAiB,CAAC,IAAI,CAAC,UAAU,CAAC;QAClC,cAAc,CAAC,IAAI,CAAC,UAAU,CAAC;QAC/B,aAAa,CAAC,IAAI,CAAC,UAAU,CAAC;QAC9B,QAAQ,CAAC,IAAI,CAAC,UAAU,CAAC,CAC1B,CAAC;AACJ,CAAC;AAED,MAAa,eAAe;IAC1B,EAAE,GAAG,OAAO,CAAC;IACb,IAAI,GAAG,qDAAqD,CAAC;IAC7D,SAAS,GAAG,MAAM,CAAC;IACnB,QAAQ,GAAG,UAAmB,CAAC;IAC/B,SAAS,GAAmB,CAAC,YAAY,EAAE,YAAY,CAAC,CAAC;IACzD,WAAW,GACT,uHAAuH,CAAC;IAE1H,KAAK,CAAC,QAAgB,EAAE,UAAkB;QACxC,IAAI,CAAC;YACH,MAAM,UAAU,GAA0B,EAAE,CAAC;YAC7C,MAAM,GAAG,GAAG,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC;gBACnC,CAAC,CAAC,EAAE,CAAC,UAAU,CAAC,GAAG;gBACnB,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC;oBAC3B,CAAC,CAAC,EAAE,CAAC,UAAU,CAAC,GAAG;oBACnB,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,KAAK,CAAC;wBAC1B,CAAC,CAAC,EAAE,CAAC,UAAU,CAAC,EAAE;wBAClB,CAAC,CAAC,EAAE,CAAC,UAAU,CAAC,EAAE,CAAC;YAErB,MAAM,EAAE,GAAG,EAAE,CAAC,gBAAgB,CAAC,QAAQ,EAAE,UAAU,EAAE,EAAE,CAAC,YAAY,CAAC,MAAM,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC;YAExF,0EAA0E;YAC1E,IAAI,4BAA4B,CAAC,UAAU,CAAC;gBAAE,OAAO,EAAE,CAAC;YAExD,MAAM,aAAa,GAAmB,EAAE,CAAC;YAEzC,MAAM,KAAK,GAAG,CAAC,IAAa,EAAQ,EAAE;gBACpC,0DAA0D;gBAC1D,MAAM,MAAM,GACV,EAAE,CAAC,gBAAgB,CAAC,IAAI,CAAC;oBACzB,EAAE,CAAC,cAAc,CAAC,IAAI,CAAC;oBACvB,EAAE,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC;gBAEzB,IAAI,MAAM,EAAE,CAAC;oBACX,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;oBAClC,IACE,iDAAiD,CAAC,IAAI,CAAC,QAAQ,CAAC;wBAChE,WAAW,CAAC,IAAI,CAAC,QAAQ,CAAC,EAC1B,CAAC;wBACD,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,aAAa,CAAC,EAAE,EAAE,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC;wBAC9D,aAAa,CAAC,IAAI,CAAC;4BACjB,IAAI;4BACJ,MAAM;4BACN,QAAQ,EAAE,gBAAgB,CAAC,UAAU,EAAE,IAAI,CAAC;4BAC5C,IAAI,EAAE,YAAY;yBACnB,CAAC,CAAC;oBACL,CAAC;gBACH,CAAC;gBAED,uEAAuE;gBACvE,IACE,EAAE,CAAC,qBAAqB,CAAC,IAAI,CAAC;oBAC9B,EAAE,CAAC,oBAAoB,CAAC,IAAI,CAAC;oBAC7B,EAAE,CAAC,mBAAmB,CAAC,IAAI,CAAC;oBAC5B,EAAE,CAAC,eAAe,CAAC,IAAI,CAAC,EACxB,CAAC;oBACD,IAAI,QAAQ,GAAG,EAAE,CAAC;oBAClB,IACE,CAAC,EAAE,CAAC,qBAAqB,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,mBAAmB,CAAC,IAAI,CAAC,CAAC;wBAChE,IAAI,CAAC,IAAI;wBACT,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,EAC1B,CAAC;wBACD,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC;oBAC5B,CAAC;oBAED,IAAI,sCAAsC,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;wBAC1D,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,aAAa,CAAC,EAAE,EAAE,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC;wBAC9D,aAAa,CAAC,IAAI,CAAC;4BACjB,IAAI;4BACJ,MAAM;4BACN,QAAQ,EAAE,gBAAgB,CAAC,UAAU,EAAE,IAAI,CAAC;4BAC5C,IAAI,EAAE,gBAAgB;yBACvB,CAAC,CAAC;oBACL,CAAC;gBACH,CAAC;gBAED,0DAA0D;gBAC1D,IACE,EAAE,CAAC,gBAAgB,CAAC,IAAI,CAAC;oBACzB,EAAE,CAAC,0BAA0B,CAAC,IAAI,CAAC,UAAU,CAAC;oBAC9C,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,KAAK,OAAO,EACrC,CAAC;oBACD,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;oBAClC,mEAAmE;oBACnE,IAAI,YAAY,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,cAAc,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;wBACjE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,aAAa,CAAC,EAAE,EAAE,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC;wBAC9D,aAAa,CAAC,IAAI,CAAC;4BACjB,IAAI;4BACJ,MAAM;4BACN,QAAQ,EAAE,gBAAgB,CAAC,UAAU,EAAE,IAAI,CAAC;4BAC5C,IAAI,EAAE,iBAAiB;yBACxB,CAAC,CAAC;oBACL,CAAC;gBACH,CAAC;gBAED,EAAE,CAAC,YAAY,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;YAC/B,CAAC,CAAC;YAEF,EAAE,CAAC,YAAY,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC;YAE3B,yCAAyC;YACzC,IAAI,aAAa,CAAC,MAAM,GAAG,CAAC;gBAAE,OAAO,EAAE,CAAC;YAExC,sBAAsB;YACtB,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;YAC/B,MAAM,MAAM,GAAG,aAAa,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE;gBACtC,IAAI,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC;oBAAE,OAAO,KAAK,CAAC;gBACnC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;gBACjB,OAAO,IAAI,CAAC;YACd,CAAC,CAAC,CAAC;YAEH,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC;gBAAE,OAAO,EAAE,CAAC;YAEjC,yEAAyE;YACzE,MAAM,YAAY,GAAG,MAAM;iBACxB,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,UAAU,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,QAAQ,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC,IAAI,GAAG,CAAC;iBAC9D,IAAI,CAAC,IAAI,CAAC,CAAC;YAEd,UAAU,CAAC,IAAI,CAAC;gBACd,MAAM,EAAE,IAAI,CAAC,EAAE;gBACf,QAAQ,EAAE,IAAI,CAAC,IAAI;gBACnB,SAAS,EAAE,IAAI,CAAC,SAAS;gBACzB,QAAQ,EAAE,IAAI,CAAC,QAAQ;gBACvB,QAAQ;gBACR,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI;gBACpB,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM;gBACxB,QAAQ,EAAE,GAAG,MAAM,CAAC,MAAM,2BAA2B,YAAY,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC;gBACjF,eAAe,EACb,GAAG,MAAM,CAAC,MAAM,+EAA+E;oBAC/F,sFAAsF;oBACtF,GAAG,MAAM,CAAC,MAAM,oEAAoE;gBACtF,WAAW,EACT,0FAA0F;oBAC1F,0FAA0F;oBAC1F,oDAAoD;gBACtD,WAAW,EAAE,oBAAoB;gBACjC,UAAU,EAAE,IAAI;gBAChB,QAAQ,EAAE,QAAQ,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,YAAY;aACtE,CAAC,CAAC;YAEH,OAAO,UAAU,CAAC;QACpB,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,EAAE,CAAC;QACZ,CAAC;IACH,CAAC;CACF;AAlJD,0CAkJC"}
|
|
@@ -0,0 +1,11 @@
|
|
|
1
|
+
import { StructuralRule, StructuralViolation, RuleLanguage } from '../types';
|
|
2
|
+
export declare class SR011EventListenerLeak implements StructuralRule {
|
|
3
|
+
id: string;
|
|
4
|
+
name: string;
|
|
5
|
+
policyRef: string;
|
|
6
|
+
severity: "BLOCKING";
|
|
7
|
+
languages: RuleLanguage[];
|
|
8
|
+
description: string;
|
|
9
|
+
check(filePath: string, sourceText: string): StructuralViolation[];
|
|
10
|
+
}
|
|
11
|
+
//# sourceMappingURL=SR011-event-listener-leak.d.ts.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"SR011-event-listener-leak.d.ts","sourceRoot":"","sources":["../../../src/structural-rules/rules/SR011-event-listener-leak.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,cAAc,EAAE,mBAAmB,EAAE,YAAY,EAAE,MAAM,UAAU,CAAC;AA2G7E,qBAAa,sBAAuB,YAAW,cAAc;IAC3D,EAAE,SAAW;IACb,IAAI,SAA2C;IAC/C,SAAS,SAAW;IACpB,QAAQ,EAAG,UAAU,CAAU;IAC/B,SAAS,EAAE,YAAY,EAAE,CAAgC;IACzD,WAAW,SAEkF;IAE7F,KAAK,CAAC,QAAQ,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,mBAAmB,EAAE;CA8EnE"}
|