@next-secure-check/rules 0.3.0 → 0.4.0

package/dist/command-discovery.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"command-discovery.d.ts","sourceRoot":"","sources":["../src/command-discovery.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,YAAY,CAAC;AAQ5B,MAAM,MAAM,qBAAqB,GAAG;IAClC,kBAAkB,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;IAChC,sBAAsB,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;IACpC,uBAAuB,EAAE,EAAE,CAAC,IAAI,EAAE,CAAC;CACpC,CAAC;AAEF,wBAAgB,uBAAuB,CAAC,UAAU,EAAE,EAAE,CAAC,UAAU,GAAG,qBAAqB,CAexF"}

package/dist/command-discovery.js

@@ -0,0 +1,92 @@
+import ts from "typescript";
+import { COMMAND_EXECUTION_NAMES, bindingElementLocalName, bindingElementName, isChildProcessSpecifier } from "./command-ast.js";
+export function collectCommandDiscovery(sourceFile) {
+    const commandIdentifiers = new Set();
+    const childProcessNamespaces = new Set();
+    const commandDeclarationNodes = [];
+    visitCommandDiscoveryNodes(sourceFile, (node) => {
+        collectChildProcessImports(node, commandIdentifiers, childProcessNamespaces, commandDeclarationNodes);
+        collectChildProcessRequires(node, commandIdentifiers, childProcessNamespaces, commandDeclarationNodes);
+    });
+    return {
+        commandIdentifiers,
+        childProcessNamespaces,
+        commandDeclarationNodes
+    };
+}
+function collectChildProcessImports(node, commandIdentifiers, childProcessNamespaces, declarationNodes) {
+    if (!ts.isImportDeclaration(node) || !isChildProcessSpecifier(node.moduleSpecifier)) {
+        return;
+    }
+    const importClause = node.importClause;
+    if (!importClause) {
+        return;
+    }
+    if (importClause.name) {
+        childProcessNamespaces.add(importClause.name.text);
+    }
+    const namedBindings = importClause.namedBindings;
+    if (namedBindings && ts.isNamespaceImport(namedBindings)) {
+        childProcessNamespaces.add(namedBindings.name.text);
+        return;
+    }
+    if (!namedBindings || !ts.isNamedImports(namedBindings)) {
+        return;
+    }
+    for (const importSpecifier of namedBindings.elements) {
+        const importedName = importSpecifier.propertyName?.text ?? importSpecifier.name.text;
+        if (!COMMAND_EXECUTION_NAMES.has(importedName)) {
+            continue;
+        }
+        commandIdentifiers.add(importSpecifier.name.text);
+        if (importedName === "exec" || importedName === "execSync") {
+            declarationNodes.push(importSpecifier);
+        }
+    }
+}
+function collectChildProcessRequires(node, commandIdentifiers, childProcessNamespaces, declarationNodes) {
+    if (!ts.isVariableDeclaration(node) || !node.initializer) {
+        return;
+    }
+    if (isRequireChildProcessCall(node.initializer)) {
+        if (ts.isIdentifier(node.name)) {
+            childProcessNamespaces.add(node.name.text);
+            return;
+        }
+        if (ts.isObjectBindingPattern(node.name)) {
+            for (const element of node.name.elements) {
+                const importedName = bindingElementName(element);
+                const localName = bindingElementLocalName(element);
+                if (!importedName || !localName || !COMMAND_EXECUTION_NAMES.has(importedName)) {
+                    continue;
+                }
+                commandIdentifiers.add(localName);
+                if (importedName === "exec" || importedName === "execSync") {
+                    declarationNodes.push(element);
+                }
+            }
+        }
+        return;
+    }
+    if (ts.isPropertyAccessExpression(node.initializer) && isRequireChildProcessCall(node.initializer.expression)) {
+        const importedName = node.initializer.name.text;
+        if (ts.isIdentifier(node.name) && COMMAND_EXECUTION_NAMES.has(importedName)) {
+            commandIdentifiers.add(node.name.text);
+            if (importedName === "exec" || importedName === "execSync") {
+                declarationNodes.push(node);
+            }
+        }
+    }
+}
+function isRequireChildProcessCall(node) {
+    if (!ts.isCallExpression(node) || !ts.isIdentifier(node.expression) || node.expression.text !== "require") {
+        return false;
+    }
+    const [specifier] = node.arguments;
+    return isChildProcessSpecifier(specifier);
+}
+function visitCommandDiscoveryNodes(node, callback) {
+    callback(node);
+    ts.forEachChild(node, (child) => visitCommandDiscoveryNodes(child, callback));
+}
+//# sourceMappingURL=command-discovery.js.map

package/dist/command-discovery.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"command-discovery.js","sourceRoot":"","sources":["../src/command-discovery.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,YAAY,CAAC;AAC5B,OAAO,EACL,uBAAuB,EACvB,uBAAuB,EACvB,kBAAkB,EAClB,uBAAuB,EACxB,MAAM,kBAAkB,CAAC;AAQ1B,MAAM,UAAU,uBAAuB,CAAC,UAAyB;IAC/D,MAAM,kBAAkB,GAAG,IAAI,GAAG,EAAU,CAAC;IAC7C,MAAM,sBAAsB,GAAG,IAAI,GAAG,EAAU,CAAC;IACjD,MAAM,uBAAuB,GAAc,EAAE,CAAC;IAE9C,0BAA0B,CAAC,UAAU,EAAE,CAAC,IAAI,EAAE,EAAE;QAC9C,0BAA0B,CAAC,IAAI,EAAE,kBAAkB,EAAE,sBAAsB,EAAE,uBAAuB,CAAC,CAAC;QACtG,2BAA2B,CAAC,IAAI,EAAE,kBAAkB,EAAE,sBAAsB,EAAE,uBAAuB,CAAC,CAAC;IACzG,CAAC,CAAC,CAAC;IAEH,OAAO;QACL,kBAAkB;QAClB,sBAAsB;QACtB,uBAAuB;KACxB,CAAC;AACJ,CAAC;AAED,SAAS,0BAA0B,CACjC,IAAa,EACb,kBAA+B,EAC/B,sBAAmC,EACnC,gBAA2B;IAE3B,IAAI,CAAC,EAAE,CAAC,mBAAmB,CAAC,IAAI,CAAC,IAAI,CAAC,uBAAuB,CAAC,IAAI,CAAC,eAAe,CAAC,EAAE,CAAC;QACpF,OAAO;IACT,CAAC;IAED,MAAM,YAAY,GAAG,IAAI,CAAC,YAAY,CAAC;IACvC,IAAI,CAAC,YAAY,EAAE,CAAC;QAClB,OAAO;IACT,CAAC;IAED,IAAI,YAAY,CAAC,IAAI,EAAE,CAAC;QACtB,sBAAsB,CAAC,GAAG,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACrD,CAAC;IAED,MAAM,aAAa,GAAG,YAAY,CAAC,aAAa,CAAC;IACjD,IAAI,aAAa,IAAI,EAAE,CAAC,iBAAiB,CAAC,aAAa,CAAC,EAAE,CAAC;QACzD,sBAAsB,CAAC,GAAG,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACpD,OAAO;IACT,CAAC;IAED,IAAI,CAAC,aAAa,IAAI,CAAC,EAAE,CAAC,cAAc,CAAC,aAAa,CAAC,EAAE,CAAC;QACxD,OAAO;IACT,CAAC;IAED,KAAK,MAAM,eAAe,IAAI,aAAa,CAAC,QAAQ,EAAE,CAAC;QACrD,MAAM,YAAY,GAAG,eAAe,CAAC,YAAY,EAAE,IAAI,IAAI,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC;QACrF,IAAI,CAAC,uBAAuB,CAAC,GAAG,CAAC,YAAY,CAAC,EAAE,CAAC;YAC/C,SAAS;QACX,CAAC;QAED,kBAAkB,CAAC,GAAG,CAAC,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAClD,IAAI,YAAY,KAAK,MAAM,IAAI,YAAY,KAAK,UAAU,EAAE,CAAC;YAC3D,gBAAgB,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;QACzC,CAAC;IACH,CAAC;AACH,CAAC;AAED,SAAS,2BAA2B,CAClC,IAAa,EACb,kBAA+B,EAC/B,sBAAmC,EACnC,gBAA2B;IAE3B,IAAI,CAAC,EAAE,CAAC,qBAAqB,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC;QACzD,OAAO;IACT,CAAC;IAED,IAAI,yBAAyB,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC;QAChD,IAAI,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YAC/B,sBAAsB,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAC3C,OAAO;QACT,CAAC;QAED,IAAI,EAAE,CAAC,sBAAsB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YACzC,KAAK,MAAM,OAAO,IAAI,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACzC,MAAM,YAAY,GAAG,kBAAkB,CAAC,OAAO,CAAC,CAAC;gBACjD,MAAM,SAAS,GAAG,uBAAuB,CAAC,OAAO,CAAC,CAAC;gBACnD,IAAI,CAAC,YAAY,IAAI,CAAC,SAAS,IAAI,CAAC,uBAAuB,CAAC,GAAG,CAAC,YAAY,CAAC,EAAE,CAAC;oBAC9E,SAAS;gBACX,CAAC;gBAED,kBAAkB,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;gBAClC,IAAI,YAAY,KAAK,MAAM,IAAI,YAAY,KAAK,UAAU,EAAE,CAAC;oBAC3D,gBAAgB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;gBACjC,CAAC;YACH,CAAC;QACH,CAAC;QAED,OAAO;IACT,CAAC;IAED,IAAI,EAAE,CAAC,0BAA0B,CAAC,IAAI,CAAC,WAAW,CAAC,IAAI,yBAAyB,CAAC,IAAI,CAAC,WAAW,CAAC,UAAU,CAAC,EAAE,CAAC;QAC9G,MAAM,YAAY,GAAG,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC;QAChD,IAAI,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,uBAAuB,CAAC,GAAG,CAAC,YAAY,CAAC,EAAE,CAAC;YAC5E,kBAAkB,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACvC,IAAI,YAAY,KAAK,MAAM,IAAI,YAAY,KAAK,UAAU,EAAE,CAAC;gBAC3D,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAC9B,CAAC;QACH,CAAC;IACH,CAAC;AACH,CAAC;AAED,SAAS,yBAAyB,CAAC,IAAa;IAC9C,IAAI,CAAC,EAAE,CAAC,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;QAC1G,OAAO,KAAK,CAAC;IACf,CAAC;IAED,MAAM,CAAC,SAAS,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC;IACnC,OAAO,uBAAuB,CAAC,SAAS,CAAC,CAAC;AAC5C,CAAC;AAED,SAAS,0BAA0B,CAAC,IAAa,EAAE,QAAiC;IAClF,QAAQ,CAAC,IAAI,CAAC,CAAC;IACf,EAAE,CAAC,YAAY,CAAC,IAAI,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,0BAA0B,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC,CAAC;AAChF,CAAC"}

package/dist/command-flow.d.ts

@@ -0,0 +1,9 @@
+import ts from "typescript";
+export type CommandFlowFacts = {
+    sourcePaths: ReadonlyMap<ts.CallExpression, string>;
+    safeCommandCalls: ReadonlySet<ts.CallExpression>;
+};
+export declare function isAnalyzableCommandExecutionCall(node: ts.CallExpression, commandIdentifiers: ReadonlySet<string>, childProcessNamespaces: ReadonlySet<string>): boolean;
+export declare function collectCommandSourcePaths(sourceFile: ts.SourceFile, commandIdentifiers: ReadonlySet<string>, childProcessNamespaces: ReadonlySet<string>): ReadonlyMap<ts.CallExpression, string>;
+export declare function collectCommandFlowFacts(sourceFile: ts.SourceFile, commandIdentifiers: ReadonlySet<string>, childProcessNamespaces: ReadonlySet<string>): CommandFlowFacts;
+//# sourceMappingURL=command-flow.d.ts.map

package/dist/command-flow.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"command-flow.d.ts","sourceRoot":"","sources":["../src/command-flow.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,YAAY,CAAC;AAgB5B,MAAM,MAAM,gBAAgB,GAAG;IAC7B,WAAW,EAAE,WAAW,CAAC,EAAE,CAAC,cAAc,EAAE,MAAM,CAAC,CAAC;IACpD,gBAAgB,EAAE,WAAW,CAAC,EAAE,CAAC,cAAc,CAAC,CAAC;CAClD,CAAC;AAEF,wBAAgB,gCAAgC,CAC9C,IAAI,EAAE,EAAE,CAAC,cAAc,EACvB,kBAAkB,EAAE,WAAW,CAAC,MAAM,CAAC,EACvC,sBAAsB,EAAE,WAAW,CAAC,MAAM,CAAC,GAC1C,OAAO,CAET;AAED,wBAAgB,yBAAyB,CACvC,UAAU,EAAE,EAAE,CAAC,UAAU,EACzB,kBAAkB,EAAE,WAAW,CAAC,MAAM,CAAC,EACvC,sBAAsB,EAAE,WAAW,CAAC,MAAM,CAAC,GAC1C,WAAW,CAAC,EAAE,CAAC,cAAc,EAAE,MAAM,CAAC,CAExC;AAED,wBAAgB,uBAAuB,CACrC,UAAU,EAAE,EAAE,CAAC,UAAU,EACzB,kBAAkB,EAAE,WAAW,CAAC,MAAM,CAAC,EACvC,sBAAsB,EAAE,WAAW,CAAC,MAAM,CAAC,GAC1C,gBAAgB,CAiBlB"}

package/dist/command-flow.js

@@ -0,0 +1,377 @@
+import ts from "typescript";
+import { COMMAND_ALIAS_LIMIT, REQUEST_SOURCE_NAMES, ROUTE_PARAMS_NAMES, SEARCH_PARAMS_NAME, bindingElementLocalName, bindingElementName, commandExecutionName, isCommandAssignmentOperator, isCommandExecutionCall, isCommandMutationOperator } from "./command-ast.js";
+import { hasCommandAllowlistGuard, isCommandAllowlistMembershipCall } from "./command-guards.js";
+export function isAnalyzableCommandExecutionCall(node, commandIdentifiers, childProcessNamespaces) {
+    return isCommandExecutionCall(node.expression, commandIdentifiers, childProcessNamespaces) && !isSafeStaticSpawnCall(node);
+}
+export function collectCommandSourcePaths(sourceFile, commandIdentifiers, childProcessNamespaces) {
+    return collectCommandFlowFacts(sourceFile, commandIdentifiers, childProcessNamespaces).sourcePaths;
+}
+export function collectCommandFlowFacts(sourceFile, commandIdentifiers, childProcessNamespaces) {
+    const sourcePaths = new Map();
+    const safeCommandCalls = new Set();
+    analyzeCommandScope(sourceFile, sourceFile, commandIdentifiers, childProcessNamespaces, sourcePaths, safeCommandCalls);
+    visitCommandNodes(sourceFile, (node) => {
+        if (!isCommandFunctionLike(node)) {
+            return;
+        }
+        const body = commandFunctionBody(node);
+        if (body) {
+            analyzeCommandScope(body, body, commandIdentifiers, childProcessNamespaces, sourcePaths, safeCommandCalls);
+        }
+    });
+    return { sourcePaths, safeCommandCalls };
+}
+function isSafeStaticSpawnCall(node) {
+    const methodName = commandExecutionName(node.expression);
+    if (methodName !== "spawn" && methodName !== "spawnSync") {
+        return false;
+    }
+    const command = node.arguments[0] ? unwrapCommandExpression(node.arguments[0]) : undefined;
+    const argumentsArray = node.arguments[1] ? unwrapCommandExpression(node.arguments[1]) : undefined;
+    if (!command || literalText(command) === undefined || !argumentsArray || !ts.isArrayLiteralExpression(argumentsArray)) {
+        return false;
+    }
+    if (!argumentsArray.elements.every((element) => !ts.isSpreadElement(element) && literalText(element) !== undefined)) {
+        return false;
+    }
+    const options = node.arguments[2] ? unwrapCommandExpression(node.arguments[2]) : undefined;
+    if (!options) {
+        return true;
+    }
+    if (!ts.isObjectLiteralExpression(options)) {
+        return false;
+    }
+    return options.properties.every((property) => {
+        if (ts.isSpreadAssignment(property)) {
+            return false;
+        }
+        if (!ts.isPropertyAssignment(property)) {
+            return true;
+        }
+        const propertyName = ts.isIdentifier(property.name) || ts.isStringLiteral(property.name) ? property.name.text : undefined;
+        if (!propertyName) {
+            return false;
+        }
+        if (propertyName !== "shell") {
+            return true;
+        }
+        return property.initializer.kind === ts.SyntaxKind.FalseKeyword;
+    });
+}
+function analyzeCommandScope(scopeRoot, node, commandIdentifiers, childProcessNamespaces, sourcePaths, safeCommandCalls, state = createCommandFlowState()) {
+    if (node !== scopeRoot && isCommandFunctionLike(node)) {
+        return;
+    }
+    if (ts.isVariableDeclaration(node)) {
+        recordCommandDeclaration(node, state);
+    }
+    if (ts.isBinaryExpression(node) && isCommandAssignmentOperator(node.operatorToken.kind)) {
+        recordCommandAssignment(node, state);
+    }
+    if (ts.isPrefixUnaryExpression(node) && isCommandMutationOperator(node.operator)) {
+        invalidateCommandTarget(node.operand, state);
+    }
+    if (ts.isPostfixUnaryExpression(node) && isCommandMutationOperator(node.operator)) {
+        invalidateCommandTarget(node.operand, state);
+    }
+    if (ts.isCallExpression(node)) {
+        if (isAnalyzableCommandExecutionCall(node, commandIdentifiers, childProcessNamespaces)) {
+            const sourcePath = findCommandSourcePathInArguments(node, state);
+            if (sourcePath) {
+                if (isGuardedCommandSink(node, state)) {
+                    safeCommandCalls.add(node);
+                }
+                else {
+                    sourcePaths.set(node, sourcePath);
+                }
+            }
+            else {
+                invalidateTaintedReferences(node, state);
+            }
+        }
+        else if (!isCommandAllowlistMembershipCall(node) && !sourcePathForExpression(node, state)) {
+            invalidateTaintedReferences(node, state);
+        }
+    }
+    ts.forEachChild(node, (child) => analyzeCommandScope(scopeRoot, child, commandIdentifiers, childProcessNamespaces, sourcePaths, safeCommandCalls, state));
+}
+function isGuardedCommandSink(node, state) {
+    const [commandArgument] = node.arguments;
+    if (!commandArgument) {
+        return false;
+    }
+    const normalized = unwrapCommandExpression(commandArgument);
+    if (!ts.isIdentifier(normalized) || !sourcePathForExpression(normalized, state)) {
+        return false;
+    }
+    return hasCommandAllowlistGuard(node, normalized.text) && !hasUntrustedSpawnArguments(node, state);
+}
+function hasUntrustedSpawnArguments(node, state) {
+    const methodName = commandExecutionName(node.expression);
+    if (methodName !== "spawn" && methodName !== "spawnSync") {
+        return false;
+    }
+    return node.arguments.slice(1).some((argument) => Boolean(findCommandSourcePathInExpression(argument, state)));
+}
+function createCommandFlowState() {
+    return {
+        declared: new Set(),
+        initialized: new Set(),
+        invalidated: new Set(),
+        tracked: new Map()
+    };
+}
+function recordCommandDeclaration(node, state) {
+    if (ts.isIdentifier(node.name)) {
+        state.declared.add(node.name.text);
+        if (!node.initializer) {
+            return;
+        }
+        state.initialized.add(node.name.text);
+        trackCommandValue(node.name.text, sourcePathForAssignment(node.initializer, state, node.name.text), state);
+        return;
+    }
+    if (!ts.isObjectBindingPattern(node.name) || !node.initializer) {
+        return;
+    }
+    const base = sourcePathForReference(node.initializer, state);
+    for (const element of node.name.elements) {
+        const localName = bindingElementLocalName(element);
+        const propertyName = bindingElementName(element);
+        if (!localName) {
+            continue;
+        }
+        state.declared.add(localName);
+        state.initialized.add(localName);
+        trackCommandValue(localName, base && propertyName ? commandProperty(base, propertyName) : undefined, state);
+    }
+}
+function recordCommandAssignment(node, state) {
+    const target = commandTargetIdentifier(node.left);
+    if (!target) {
+        invalidateTaintedReferences(node.left, state);
+        return;
+    }
+    if (node.operatorToken.kind !== ts.SyntaxKind.EqualsToken) {
+        invalidateCommandTarget(node.left, state);
+        return;
+    }
+    if (state.invalidated.has(target) || state.initialized.has(target)) {
+        invalidateCommandTarget(node.left, state);
+        return;
+    }
+    state.declared.add(target);
+    state.initialized.add(target);
+    trackCommandValue(target, sourcePathForAssignment(node.right, state, target), state);
+}
+function trackCommandValue(name, value, state) {
+    if (!value || value.aliasDepth > COMMAND_ALIAS_LIMIT || state.invalidated.has(name)) {
+        state.tracked.delete(name);
+        return;
+    }
+    state.tracked.set(name, value);
+}
+function findCommandSourcePathInArguments(node, state) {
+    for (const argument of node.arguments) {
+        const sourcePath = findCommandSourcePathInExpression(argument, state);
+        if (sourcePath) {
+            return sourcePath;
+        }
+    }
+    return undefined;
+}
+function findCommandSourcePathInExpression(node, state) {
+    const directSource = sourcePathForExpression(node, state);
+    if (directSource) {
+        return directSource.path;
+    }
+    let sourcePath;
+    ts.forEachChild(node, (child) => {
+        if (sourcePath || isCommandFunctionLike(child)) {
+            return;
+        }
+        sourcePath = findCommandSourcePathInExpression(child, state);
+    });
+    return sourcePath;
+}
+function sourcePathForExpression(expression, state) {
+    const normalized = unwrapCommandExpression(expression);
+    if (ts.isBinaryExpression(normalized)) {
+        return sourcePathForExpression(normalized.left, state) ?? sourcePathForExpression(normalized.right, state);
+    }
+    if (ts.isConditionalExpression(normalized)) {
+        return sourcePathForExpression(normalized.whenTrue, state) ?? sourcePathForExpression(normalized.whenFalse, state);
+    }
+    if (ts.isIdentifier(normalized)) {
+        const tracked = state.tracked.get(normalized.text);
+        if (tracked && !state.invalidated.has(normalized.text)) {
+            return tracked;
+        }
+        if (ROUTE_PARAMS_NAMES.test(normalized.text)) {
+            return { path: normalized.text, aliasDepth: 0 };
+        }
+        return undefined;
+    }
+    return sourcePathForReference(normalized, state);
+}
+function sourcePathForAssignment(expression, state, targetName) {
+    const normalized = unwrapCommandExpression(expression);
+    if (ts.isIdentifier(normalized)) {
+        const tracked = state.tracked.get(normalized.text);
+        if (tracked && !state.invalidated.has(normalized.text)) {
+            return commandAlias(tracked, targetName ?? normalized.text);
+        }
+    }
+    return sourcePathForExpression(normalized, state);
+}
+function sourcePathForReference(expression, state) {
+    const normalized = unwrapCommandExpression(expression);
+    if (ts.isIdentifier(normalized)) {
+        if (state.invalidated.has(normalized.text)) {
+            return undefined;
+        }
+        return state.tracked.get(normalized.text) ?? (ROUTE_PARAMS_NAMES.test(normalized.text) ? { path: normalized.text, aliasDepth: 0 } : undefined);
+    }
+    if (ts.isPropertyAccessExpression(normalized)) {
+        const directSource = directCommandPropertySource(normalized);
+        if (directSource) {
+            return directSource;
+        }
+        const base = sourcePathForReference(normalized.expression, state);
+        return base ? commandProperty(base, normalized.name.text) : undefined;
+    }
+    if (ts.isElementAccessExpression(normalized)) {
+        const propertyName = normalized.argumentExpression && literalText(normalized.argumentExpression);
+        if (!propertyName) {
+            return undefined;
+        }
+        const directSource = directCommandElementSource(normalized, propertyName);
+        if (directSource) {
+            return directSource;
+        }
+        const base = sourcePathForReference(normalized.expression, state);
+        return base ? commandProperty(base, propertyName) : undefined;
+    }
+    if (ts.isCallExpression(normalized) && ts.isPropertyAccessExpression(normalized.expression)) {
+        const methodName = normalized.expression.name.text;
+        const receiver = normalized.expression.expression;
+        if ((methodName === "json" || methodName === "formData") && isRequestSourceReceiver(receiver)) {
+            return { path: `${commandExpressionLabel(receiver)}.${methodName}()`, aliasDepth: 0 };
+        }
+        if (methodName === "get") {
+            if (isSearchParamsReceiver(receiver)) {
+                return { path: `${commandExpressionLabel(receiver)}.get()`, aliasDepth: 0 };
+            }
+            const base = sourcePathForReference(receiver, state);
+            return base ? commandProperty(base, "get()") : undefined;
+        }
+    }
+    return undefined;
+}
+function directCommandPropertySource(node) {
+    if (!isRequestSourceReceiver(node.expression) || (node.name.text !== "body" && node.name.text !== "query")) {
+        return undefined;
+    }
+    return { path: `${commandExpressionLabel(node.expression)}.${node.name.text}`, aliasDepth: 0 };
+}
+function directCommandElementSource(node, propertyName) {
+    if (!isRequestSourceReceiver(node.expression) || (propertyName !== "body" && propertyName !== "query")) {
+        return undefined;
+    }
+    return { path: `${commandExpressionLabel(node.expression)}.${propertyName}`, aliasDepth: 0 };
+}
+function commandProperty(value, propertyName) {
+    return {
+        path: `${value.path} -> ${propertyName}`,
+        aliasDepth: value.aliasDepth
+    };
+}
+function commandAlias(value, aliasName) {
+    return {
+        path: `${value.path} -> ${aliasName}`,
+        aliasDepth: value.aliasDepth + 1
+    };
+}
+function invalidateCommandTarget(node, state) {
+    const target = commandTargetIdentifier(node);
+    if (target) {
+        state.tracked.delete(target);
+        state.invalidated.add(target);
+    }
+    invalidateTaintedReferences(node, state);
+}
+function invalidateTaintedReferences(node, state) {
+    const identifiers = new Set();
+    visitCommandNodes(node, (child) => {
+        if (!ts.isIdentifier(child) || !state.tracked.has(child.text)) {
+            return;
+        }
+        if (ts.isPropertyAccessExpression(child.parent) && child.parent.name === child) {
+            return;
+        }
+        identifiers.add(child.text);
+    });
+    for (const identifier of identifiers) {
+        state.tracked.delete(identifier);
+        state.invalidated.add(identifier);
+    }
+}
+function commandTargetIdentifier(node) {
+    if (ts.isIdentifier(node)) {
+        return node.text;
+    }
+    if (ts.isPropertyAccessExpression(node) || ts.isElementAccessExpression(node)) {
+        return commandTargetIdentifier(node.expression);
+    }
+    return undefined;
+}
+function unwrapCommandExpression(expression) {
+    let current = expression;
+    while (ts.isParenthesizedExpression(current) ||
+        ts.isAwaitExpression(current) ||
+        ts.isNonNullExpression(current) ||
+        ts.isAsExpression(current) ||
+        ts.isTypeAssertionExpression(current)) {
+        current = current.expression;
+    }
+    return current;
+}
+function isRequestSourceReceiver(expression) {
+    return ts.isIdentifier(expression) && REQUEST_SOURCE_NAMES.test(expression.text);
+}
+function isSearchParamsReceiver(expression) {
+    if (ts.isIdentifier(expression)) {
+        return SEARCH_PARAMS_NAME.test(expression.text);
+    }
+    return ts.isPropertyAccessExpression(expression) && SEARCH_PARAMS_NAME.test(expression.name.text);
+}
+function commandExpressionLabel(expression) {
+    if (ts.isIdentifier(expression)) {
+        return expression.text;
+    }
+    if (ts.isPropertyAccessExpression(expression)) {
+        return `${commandExpressionLabel(expression.expression)}.${expression.name.text}`;
+    }
+    return "source";
+}
+function literalText(node) {
+    return ts.isStringLiteralLike(node) || ts.isNumericLiteral(node) ? node.text : undefined;
+}
+function isCommandFunctionLike(node) {
+    return (ts.isArrowFunction(node) ||
+        ts.isConstructorDeclaration(node) ||
+        ts.isFunctionDeclaration(node) ||
+        ts.isFunctionExpression(node) ||
+        ts.isGetAccessorDeclaration(node) ||
+        ts.isMethodDeclaration(node) ||
+        ts.isSetAccessorDeclaration(node));
+}
+function commandFunctionBody(node) {
+    return node.body;
+}
+function visitCommandNodes(node, callback) {
+    callback(node);
+    ts.forEachChild(node, (child) => visitCommandNodes(child, callback));
+}
+//# sourceMappingURL=command-flow.js.map

package/dist/command-flow.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"command-flow.js","sourceRoot":"","sources":["../src/command-flow.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,YAAY,CAAC;AAC5B,OAAO,EACL,mBAAmB,EAEnB,oBAAoB,EACpB,kBAAkB,EAClB,kBAAkB,EAClB,uBAAuB,EACvB,kBAAkB,EAClB,oBAAoB,EACpB,2BAA2B,EAC3B,sBAAsB,EACtB,yBAAyB,EAC1B,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAAE,wBAAwB,EAAE,gCAAgC,EAAE,MAAM,qBAAqB,CAAC;AAOjG,MAAM,UAAU,gCAAgC,CAC9C,IAAuB,EACvB,kBAAuC,EACvC,sBAA2C;IAE3C,OAAO,sBAAsB,CAAC,IAAI,CAAC,UAAU,EAAE,kBAAkB,EAAE,sBAAsB,CAAC,IAAI,CAAC,qBAAqB,CAAC,IAAI,CAAC,CAAC;AAC7H,CAAC;AAED,MAAM,UAAU,yBAAyB,CACvC,UAAyB,EACzB,kBAAuC,EACvC,sBAA2C;IAE3C,OAAO,uBAAuB,CAAC,UAAU,EAAE,kBAAkB,EAAE,sBAAsB,CAAC,CAAC,WAAW,CAAC;AACrG,CAAC;AAED,MAAM,UAAU,uBAAuB,CACrC,UAAyB,EACzB,kBAAuC,EACvC,sBAA2C;IAE3C,MAAM,WAAW,GAAG,IAAI,GAAG,EAA6B,CAAC;IACzD,MAAM,gBAAgB,GAAG,IAAI,GAAG,EAAqB,CAAC;IACtD,mBAAmB,CAAC,UAAU,EAAE,UAAU,EAAE,kBAAkB,EAAE,sBAAsB,EAAE,WAAW,EAAE,gBAAgB,CAAC,CAAC;IAEvH,iBAAiB,CAAC,UAAU,EAAE,CAAC,IAAI,EAAE,EAAE;QACrC,IAAI,CAAC,qBAAqB,CAAC,IAAI,CAAC,EAAE,CAAC;YACjC,OAAO;QACT,CAAC;QAED,MAAM,IAAI,GAAG,mBAAmB,CAAC,IAAI,CAAC,CAAC;QACvC,IAAI,IAAI,EAAE,CAAC;YACT,mBAAmB,CAAC,IAAI,EAAE,IAAI,EAAE,kBAAkB,EAAE,sBAAsB,EAAE,WAAW,EAAE,gBAAgB,CAAC,CAAC;QAC7G,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,OAAO,EAAE,WAAW,EAAE,gBAAgB,EAAE,CAAC;AAC3C,CAAC;AAED,SAAS,qBAAqB,CAAC,IAAuB;IACpD,MAAM,UAAU,GAAG,oBAAoB,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IACzD,IAAI,UAAU,KAAK,OAAO,IAAI,UAAU,KAAK,WAAW,EAAE,CAAC;QACzD,OAAO,KAAK,CAAC;IACf,CAAC;IAED,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,uBAAuB,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAC3F,MAAM,cAAc,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,uBAAuB,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAClG,IAAI,CAAC,OAAO,IAAI,WAAW,CAAC,OAAO,CAAC,KAAK,SAAS,IAAI,CAAC,cAAc,IAAI,CAAC,EAAE,CAAC,wBAAwB,CAAC,cAAc,CAAC,EAAE,CAAC;QACtH,OAAO,KAAK,CAAC;IACf,CAAC;IAED,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,EAAE,CAAC,eAAe,CAAC,OAAO,CAAC,IAAI,WAAW,CAAC,OAAO,CAAC,KAAK,SAAS,CAAC,EAAE,CAAC;QACpH,OAAO,KAAK,CAAC;IACf,CAAC;IAED,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,uBAAuB,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAC3F,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,OAAO,IAAI,CAAC;IACd,CAAC;IAED,IAAI,CAAC,EAAE,CAAC,yBAAyB,CAAC,OAAO,CAAC,EAAE,CAAC;QAC3C,OAAO,KAAK,CAAC;IACf,CAAC;IAED,OAAO,OAAO,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,QAAQ,EAAE,EAAE;QAC3C,IAAI,EAAE,CAAC,kBAAkB,CAAC,QAAQ,CAAC,EAAE,CAAC;YACpC,OAAO,KAAK,CAAC;QACf,CAAC;QAED,IAAI,CAAC,EAAE,CAAC,oBAAoB,CAAC,QAAQ,CAAC,EAAE,CAAC;YACvC,OAAO,IAAI,CAAC;QACd,CAAC;QAED,MAAM,YAAY,GAAG,EAAE,CAAC,YAAY,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,eAAe,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;QAC1H,IAAI,CAAC,YAAY,EAAE,CAAC;YAClB,OAAO,KAAK,CAAC;QACf,CAAC;QAED,IAAI,YAAY,KAAK,OAAO,EAAE,CAAC;YAC7B,OAAO,IAAI,CAAC;QACd,CAAC;QAED,OAAO,QAAQ,CAAC,WAAW,CAAC,IAAI,KAAK,EAAE,CAAC,UAAU,CAAC,YAAY,CAAC;IAClE,CAAC,CAAC,CAAC;AACL,CAAC;AAuBD,SAAS,mBAAmB,CAC1B,SAAkB,EAClB,IAAa,EACb,kBAAuC,EACvC,sBAA2C,EAC3C,WAA2C,EAC3C,gBAAwC,EACxC,QAA0B,sBAAsB,EAAE;IAElD,IAAI,IAAI,KAAK,SAAS,IAAI,qBAAqB,CAAC,IAAI,CAAC,EAAE,CAAC;QACtD,OAAO;IACT,CAAC;IAED,IAAI,EAAE,CAAC,qBAAqB,CAAC,IAAI,CAAC,EAAE,CAAC;QACnC,wBAAwB,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IACxC,CAAC;IAED,IAAI,EAAE,CAAC,kBAAkB,CAAC,IAAI,CAAC,IAAI,2BAA2B,CAAC,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,EAAE,CAAC;QACxF,uBAAuB,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IACvC,CAAC;IAED,IAAI,EAAE,CAAC,uBAAuB,CAAC,IAAI,CAAC,IAAI,yBAAyB,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;QACjF,uBAAuB,CAAC,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;IAC/C,CAAC;IAED,IAAI,EAAE,CAAC,wBAAwB,CAAC,IAAI,CAAC,IAAI,yBAAyB,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;QAClF,uBAAuB,CAAC,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;IAC/C,CAAC;IAED,IAAI,EAAE,CAAC,gBAAgB,CAAC,IAAI,CAAC,EAAE,CAAC;QAC9B,IAAI,gCAAgC,CAAC,IAAI,EAAE,kBAAkB,EAAE,sBAAsB,CAAC,EAAE,CAAC;YACvF,MAAM,UAAU,GAAG,gCAAgC,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;YACjE,IAAI,UAAU,EAAE,CAAC;gBACf,IAAI,oBAAoB,CAAC,IAAI,EAAE,KAAK,CAAC,EAAE,CAAC;oBACtC,gBAAgB,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;gBAC7B,CAAC;qBAAM,CAAC;oBACN,WAAW,CAAC,GAAG,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;gBACpC,CAAC;YACH,CAAC;iBAAM,CAAC;gBACN,2BAA2B,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;YAC3C,CAAC;QACH,CAAC;aAAM,IAAI,CAAC,gCAAgC,CAAC,IAAI,CAAC,IAAI,CAAC,uBAAuB,CAAC,IAAI,EAAE,KAAK,CAAC,EAAE,CAAC;YAC5F,2BAA2B,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;QAC3C,CAAC;IACH,CAAC;IAED,EAAE,CAAC,YAAY,CAAC,IAAI,EAAE,CAAC,KAAK,EAAE,EAAE,CAC9B,mBAAmB,CAAC,SAAS,EAAE,KAAK,EAAE,kBAAkB,EAAE,sBAAsB,EAAE,WAAW,EAAE,gBAAgB,EAAE,KAAK,CAAC,CACxH,CAAC;AACJ,CAAC;AAED,SAAS,oBAAoB,CAAC,IAAuB,EAAE,KAAuB;IAC5E,MAAM,CAAC,eAAe,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC;IACzC,IAAI,CAAC,eAAe,EAAE,CAAC;QACrB,OAAO,KAAK,CAAC;IACf,CAAC;IAED,MAAM,UAAU,GAAG,uBAAuB,CAAC,eAAe,CAAC,CAAC;IAC5D,IAAI,CAAC,EAAE,CAAC,YAAY,CAAC,UAAU,CAAC,IAAI,CAAC,uBAAuB,CAAC,UAAU,EAAE,KAAK,CAAC,EAAE,CAAC;QAChF,OAAO,KAAK,CAAC;IACf,CAAC;IAED,OAAO,wBAAwB,CAAC,IAAI,EAAE,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,0BAA0B,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;AACrG,CAAC;AAED,SAAS,0BAA0B,CAAC,IAAuB,EAAE,KAAuB;IAClF,MAAM,UAAU,GAAG,oBAAoB,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IACzD,IAAI,UAAU,KAAK,OAAO,IAAI,UAAU,KAAK,WAAW,EAAE,CAAC;QACzD,OAAO,KAAK,CAAC;IACf,CAAC;IAED,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,OAAO,CAAC,iCAAiC,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC;AACjH,CAAC;AAED,SAAS,sBAAsB;IAC7B,OAAO;QACL,QAAQ,EAAE,IAAI,GAAG,EAAU;QAC3B,WAAW,EAAE,IAAI,GAAG,EAAU;QAC9B,WAAW,EAAE,IAAI,GAAG,EAAU;QAC9B,OAAO,EAAE,IAAI,GAAG,EAA4B;KAC7C,CAAC;AACJ,CAAC;AAED,SAAS,wBAAwB,CAAC,IAA4B,EAAE,KAAuB;IACrF,IAAI,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QAC/B,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACnC,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC;YACtB,OAAO;QACT,CAAC;QAED,KAAK,CAAC,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACtC,iBAAiB,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,uBAAuB,CAAC,IAAI,CAAC,WAAW,EAAE,KAAK,EAAE,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,KAAK,CAAC,CAAC;QAC3G,OAAO;IACT,CAAC;IAED,IAAI,CAAC,EAAE,CAAC,sBAAsB,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC;QAC/D,OAAO;IACT,CAAC;IAED,MAAM,IAAI,GAAG,sBAAsB,CAAC,IAAI,CAAC,WAAW,EAAE,KAAK,CAAC,CAAC;IAC7D,KAAK,MAAM,OAAO,IAAI,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC;QACzC,MAAM,SAAS,GAAG,uBAAuB,CAAC,OAAO,CAAC,CAAC;QACnD,MAAM,YAAY,GAAG,kBAAkB,CAAC,OAAO,CAAC,CAAC;QACjD,IAAI,CAAC,SAAS,EAAE,CAAC;YACf,SAAS;QACX,CAAC;QAED,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QAC9B,KAAK,CAAC,WAAW,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QACjC,iBAAiB,CACf,SAAS,EACT,IAAI,IAAI,YAAY,CAAC,CAAC,CAAC,eAAe,CAAC,IAAI,EAAE,YAAY,CAAC,CAAC,CAAC,CAAC,SAAS,EACtE,KAAK,CACN,CAAC;IACJ,CAAC;AACH,CAAC;AAED,SAAS,uBAAuB,CAAC,IAAyB,EAAE,KAAuB;IACjF,MAAM,MAAM,GAAG,uBAAuB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAClD,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,2BAA2B,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;QAC9C,OAAO;IACT,CAAC;IAED,IAAI,IAAI,CAAC,aAAa,CAAC,IAAI,KAAK,EAAE,CAAC,UAAU,CAAC,WAAW,EAAE,CAAC;QAC1D,uBAAuB,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;QAC1C,OAAO;IACT,CAAC;IAED,IAAI,KAAK,CAAC,WAAW,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,WAAW,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;QACnE,uBAAuB,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;QAC1C,OAAO;IACT,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IAC3B,KAAK,CAAC,WAAW,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IAC9B,iBAAiB,CAAC,MAAM,EAAE,uBAAuB,CAAC,IAAI,CAAC,KAAK,EAAE,KAAK,EAAE,MAAM,CAAC,EAAE,KAAK,CAAC,CAAC;AACvF,CAAC;AAED,SAAS,iBAAiB,CAAC,IAAY,EAAE,KAAmC,EAAE,KAAuB;IACnG,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,UAAU,GAAG,mBAAmB,IAAI,KAAK,CAAC,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;QACpF,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QAC3B,OAAO;IACT,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;AACjC,CAAC;AAED,SAAS,gCAAgC,CAAC,IAAuB,EAAE,KAAuB;IACxF,KAAK,MAAM,QAAQ,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;QACtC,MAAM,UAAU,GAAG,iCAAiC,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;QACtE,IAAI,UAAU,EAAE,CAAC;YACf,OAAO,UAAU,CAAC;QACpB,CAAC;IACH,CAAC;IAED,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAS,iCAAiC,CAAC,IAAa,EAAE,KAAuB;IAC/E,MAAM,YAAY,GAAG,uBAAuB,CAAC,IAAqB,EAAE,KAAK,CAAC,CAAC;IAC3E,IAAI,YAAY,EAAE,CAAC;QACjB,OAAO,YAAY,CAAC,IAAI,CAAC;IAC3B,CAAC;IAED,IAAI,UAA8B,CAAC;IACnC,EAAE,CAAC,YAAY,CAAC,IAAI,EAAE,CAAC,KAAK,EAAE,EAAE;QAC9B,IAAI,UAAU,IAAI,qBAAqB,CAAC,KAAK,CAAC,EAAE,CAAC;YAC/C,OAAO;QACT,CAAC;QAED,UAAU,GAAG,iCAAiC,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;IAC/D,CAAC,CAAC,CAAC;IAEH,OAAO,UAAU,CAAC;AACpB,CAAC;AAED,SAAS,uBAAuB,CAAC,UAAyB,EAAE,KAAuB;IACjF,MAAM,UAAU,GAAG,uBAAuB,CAAC,UAAU,CAAC,CAAC;IAEvD,IAAI,EAAE,CAAC,kBAAkB,CAAC,UAAU,CAAC,EAAE,CAAC;QACtC,OAAO,uBAAuB,CAAC,UAAU,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,uBAAuB,CAAC,UAAU,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;IAC7G,CAAC;IAED,IAAI,EAAE,CAAC,uBAAuB,CAAC,UAAU,CAAC,EAAE,CAAC;QAC3C,OAAO,uBAAuB,CAAC,UAAU,CAAC,QAAQ,EAAE,KAAK,CAAC,IAAI,uBAAuB,CAAC,UAAU,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;IACrH,CAAC;IAED,IAAI,EAAE,CAAC,YAAY,CAAC,UAAU,CAAC,EAAE,CAAC;QAChC,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;QACnD,IAAI,OAAO,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;YACvD,OAAO,OAAO,CAAC;QACjB,CAAC;QAED,IAAI,kBAAkB,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;YAC7C,OAAO,EAAE,IAAI,EAAE,UAAU,CAAC,IAAI,EAAE,UAAU,EAAE,CAAC,EAAE,CAAC;QAClD,CAAC;QAED,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,OAAO,sBAAsB,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC;AACnD,CAAC;AAED,SAAS,uBAAuB,CAC9B,UAAyB,EACzB,KAAuB,EACvB,UAAmB;IAEnB,MAAM,UAAU,GAAG,uBAAuB,CAAC,UAAU,CAAC,CAAC;IACvD,IAAI,EAAE,CAAC,YAAY,CAAC,UAAU,CAAC,EAAE,CAAC;QAChC,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;QACnD,IAAI,OAAO,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;YACvD,OAAO,YAAY,CAAC,OAAO,EAAE,UAAU,IAAI,UAAU,CAAC,IAAI,CAAC,CAAC;QAC9D,CAAC;IACH,CAAC;IAED,OAAO,uBAAuB,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC;AACpD,CAAC;AAED,SAAS,sBAAsB,CAAC,UAAyB,EAAE,KAAuB;IAChF,MAAM,UAAU,GAAG,uBAAuB,CAAC,UAAU,CAAC,CAAC;IAEvD,IAAI,EAAE,CAAC,YAAY,CAAC,UAAU,CAAC,EAAE,CAAC;QAChC,IAAI,KAAK,CAAC,WAAW,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;YAC3C,OAAO,SAAS,CAAC;QACnB,CAAC;QAED,OAAO,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,UAAU,CAAC,IAAI,EAAE,UAAU,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;IACjJ,CAAC;IAED,IAAI,EAAE,CAAC,0BAA0B,CAAC,UAAU,CAAC,EAAE,CAAC;QAC9C,MAAM,YAAY,GAAG,2BAA2B,CAAC,UAAU,CAAC,CAAC;QAC7D,IAAI,YAAY,EAAE,CAAC;YACjB,OAAO,YAAY,CAAC;QACtB,CAAC;QAED,MAAM,IAAI,GAAG,sBAAsB,CAAC,UAAU,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC;QAClE,OAAO,IAAI,CAAC,CAAC,CAAC,eAAe,CAAC,IAAI,EAAE,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IACxE,CAAC;IAED,IAAI,EAAE,CAAC,yBAAyB,CAAC,UAAU,CAAC,EAAE,CAAC;QAC7C,MAAM,YAAY,GAAG,UAAU,CAAC,kBAAkB,IAAI,WAAW,CAAC,UAAU,CAAC,kBAAkB,CAAC,CAAC;QACjG,IAAI,CAAC,YAAY,EAAE,CAAC;YAClB,OAAO,SAAS,CAAC;QACnB,CAAC;QAED,MAAM,YAAY,GAAG,0BAA0B,CAAC,UAAU,EAAE,YAAY,CAAC,CAAC;QAC1E,IAAI,YAAY,EAAE,CAAC;YACjB,OAAO,YAAY,CAAC;QACtB,CAAC;QAED,MAAM,IAAI,GAAG,sBAAsB,CAAC,UAAU,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC;QAClE,OAAO,IAAI,CAAC,CAAC,CAAC,eAAe,CAAC,IAAI,EAAE,YAAY,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAChE,CAAC;IAED,IAAI,EAAE,CAAC,gBAAgB,CAAC,UAAU,CAAC,IAAI,EAAE,CAAC,0BAA0B,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;QAC5F,MAAM,UAAU,GAAG,UAAU,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC;QACnD,MAAM,QAAQ,GAAG,UAAU,CAAC,UAAU,CAAC,UAAU,CAAC;QAClD,IAAI,CAAC,UAAU,KAAK,MAAM,IAAI,UAAU,KAAK,UAAU,CAAC,IAAI,uBAAuB,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC9F,OAAO,EAAE,IAAI,EAAE,GAAG,sBAAsB,CAAC,QAAQ,CAAC,IAAI,UAAU,IAAI,EAAE,UAAU,EAAE,CAAC,EAAE,CAAC;QACxF,CAAC;QAED,IAAI,UAAU,KAAK,KAAK,EAAE,CAAC;YACzB,IAAI,sBAAsB,CAAC,QAAQ,CAAC,EAAE,CAAC;gBACrC,OAAO,EAAE,IAAI,EAAE,GAAG,sBAAsB,CAAC,QAAQ,CAAC,QAAQ,EAAE,UAAU,EAAE,CAAC,EAAE,CAAC;YAC9E,CAAC;YAED,MAAM,IAAI,GAAG,sBAAsB,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;YACrD,OAAO,IAAI,CAAC,CAAC,CAAC,eAAe,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QAC3D,CAAC;IACH,CAAC;IAED,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAS,2BAA2B,CAAC,IAAiC;IACpE,IAAI,CAAC,uBAAuB,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,KAAK,MAAM,IAAI,IAAI,CAAC,IAAI,CAAC,IAAI,KAAK,OAAO,CAAC,EAAE,CAAC;QAC3G,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,OAAO,EAAE,IAAI,EAAE,GAAG,sBAAsB,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,UAAU,EAAE,CAAC,EAAE,CAAC;AACjG,CAAC;AAED,SAAS,0BAA0B,CAAC,IAAgC,EAAE,YAAoB;IACxF,IAAI,CAAC,uBAAuB,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,YAAY,KAAK,MAAM,IAAI,YAAY,KAAK,OAAO,CAAC,EAAE,CAAC;QACvG,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,OAAO,EAAE,IAAI,EAAE,GAAG,sBAAsB,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,YAAY,EAAE,EAAE,UAAU,EAAE,CAAC,EAAE,CAAC;AAC/F,CAAC;AAED,SAAS,eAAe,CAAC,KAAuB,EAAE,YAAoB;IACpE,OAAO;QACL,IAAI,EAAE,GAAG,KAAK,CAAC,IAAI,OAAO,YAAY,EAAE;QACxC,UAAU,EAAE,KAAK,CAAC,UAAU;KAC7B,CAAC;AACJ,CAAC;AAED,SAAS,YAAY,CAAC,KAAuB,EAAE,SAAiB;IAC9D,OAAO;QACL,IAAI,EAAE,GAAG,KAAK,CAAC,IAAI,OAAO,SAAS,EAAE;QACrC,UAAU,EAAE,KAAK,CAAC,UAAU,GAAG,CAAC;KACjC,CAAC;AACJ,CAAC;AAED,SAAS,uBAAuB,CAAC,IAAa,EAAE,KAAuB;IACrE,MAAM,MAAM,GAAG,uBAAuB,CAAC,IAAI,CAAC,CAAC;IAC7C,IAAI,MAAM,EAAE,CAAC;QACX,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QAC7B,KAAK,CAAC,WAAW,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IAChC,CAAC;IAED,2BAA2B,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;AAC3C,CAAC;AAED,SAAS,2BAA2B,CAAC,IAAa,EAAE,KAAuB;IACzE,MAAM,WAAW,GAAG,IAAI,GAAG,EAAU,CAAC;IACtC,iBAAiB,CAAC,IAAI,EAAE,CAAC,KAAK,EAAE,EAAE;QAChC,IAAI,CAAC,EAAE,CAAC,YAAY,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;YAC9D,OAAO;QACT,CAAC;QAED,IAAI,EAAE,CAAC,0BAA0B,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,IAAI,KAAK,KAAK,EAAE,CAAC;YAC/E,OAAO;QACT,CAAC;QAED,WAAW,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC9B,CAAC,CAAC,CAAC;IAEH,KAAK,MAAM,UAAU,IAAI,WAAW,EAAE,CAAC;QACrC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;QACjC,KAAK,CAAC,WAAW,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;IACpC,CAAC;AACH,CAAC;AAED,SAAS,uBAAuB,CAAC,IAAa;IAC5C,IAAI,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,EAAE,CAAC;QAC1B,OAAO,IAAI,CAAC,IAAI,CAAC;IACnB,CAAC;IAED,IAAI,EAAE,CAAC,0BAA0B,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,yBAAyB,CAAC,IAAI,CAAC,EAAE,CAAC;QAC9E,OAAO,uBAAuB,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IAClD,CAAC;IAED,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAS,uBAAuB,CAAC,UAAyB;IACxD,IAAI,OAAO,GAAG,UAAU,CAAC;IACzB,OACE,EAAE,CAAC,yBAAyB,CAAC,OAAO,CAAC;QACrC,EAAE,CAAC,iBAAiB,CAAC,OAAO,CAAC;QAC7B,EAAE,CAAC,mBAAmB,CAAC,OAAO,CAAC;QAC/B,EAAE,CAAC,cAAc,CAAC,OAAO,CAAC;QAC1B,EAAE,CAAC,yBAAyB,CAAC,OAAO,CAAC,EACrC,CAAC;QACD,OAAO,GAAG,OAAO,CAAC,UAAU,CAAC;IAC/B,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,SAAS,uBAAuB,CAAC,UAAyB;IACxD,OAAO,EAAE,CAAC,YAAY,CAAC,UAAU,CAAC,IAAI,oBAAoB,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;AACnF,CAAC;AAED,SAAS,sBAAsB,CAAC,UAAyB;IACvD,IAAI,EAAE,CAAC,YAAY,CAAC,UAAU,CAAC,EAAE,CAAC;QAChC,OAAO,kBAAkB,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;IAClD,CAAC;IAED,OAAO,EAAE,CAAC,0BAA0B,CAAC,UAAU,CAAC,IAAI,kBAAkB,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACpG,CAAC;AAED,SAAS,sBAAsB,CAAC,UAAyB;IACvD,IAAI,EAAE,CAAC,YAAY,CAAC,UAAU,CAAC,EAAE,CAAC;QAChC,OAAO,UAAU,CAAC,IAAI,CAAC;IACzB,CAAC;IAED,IAAI,EAAE,CAAC,0BAA0B,CAAC,UAAU,CAAC,EAAE,CAAC;QAC9C,OAAO,GAAG,sBAAsB,CAAC,UAAU,CAAC,UAAU,CAAC,IAAI,UAAU,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;IACpF,CAAC;IAED,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,SAAS,WAAW,CAAC,IAAmB;IACtC,OAAO,EAAE,CAAC,mBAAmB,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;AAC3F,CAAC;AAED,SAAS,qBAAqB,CAAC,IAAa;IAC1C,OAAO,CACL,EAAE,CAAC,eAAe,CAAC,IAAI,CAAC;QACxB,EAAE,CAAC,wBAAwB,CAAC,IAAI,CAAC;QACjC,EAAE,CAAC,qBAAqB,CAAC,IAAI,CAAC;QAC9B,EAAE,CAAC,oBAAoB,CAAC,IAAI,CAAC;QAC7B,EAAE,CAAC,wBAAwB,CAAC,IAAI,CAAC;QACjC,EAAE,CAAC,mBAAmB,CAAC,IAAI,CAAC;QAC5B,EAAE,CAAC,wBAAwB,CAAC,IAAI,CAAC,CAClC,CAAC;AACJ,CAAC;AAED,SAAS,mBAAmB,CAAC,IAAyB;IACpD,OAAO,IAAI,CAAC,IAAI,CAAC;AACnB,CAAC;AAED,SAAS,iBAAiB,CAAC,IAAa,EAAE,QAAiC;IACzE,QAAQ,CAAC,IAAI,CAAC,CAAC;IACf,EAAE,CAAC,YAAY,CAAC,IAAI,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,iBAAiB,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC,CAAC;AACvE,CAAC"}

package/dist/command-guards.d.ts

@@ -0,0 +1,4 @@
+import ts from "typescript";
+export declare function isCommandAllowlistMembershipCall(node: ts.CallExpression): boolean;
+export declare function hasCommandAllowlistGuard(node: ts.CallExpression, commandName: string): boolean;
+//# sourceMappingURL=command-guards.d.ts.map

package/dist/command-guards.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"command-guards.d.ts","sourceRoot":"","sources":["../src/command-guards.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,YAAY,CAAC;AAI5B,wBAAgB,gCAAgC,CAAC,IAAI,EAAE,EAAE,CAAC,cAAc,GAAG,OAAO,CAMjF;AAED,wBAAgB,wBAAwB,CAAC,IAAI,EAAE,EAAE,CAAC,cAAc,EAAE,WAAW,EAAE,MAAM,GAAG,OAAO,CAE9F"}

package/dist/command-guards.js

@@ -0,0 +1,92 @@
+import ts from "typescript";
+const ALLOWLIST_METHODS = new Set(["includes", "has"]);
+export function isCommandAllowlistMembershipCall(node) {
+    if (!ts.isPropertyAccessExpression(node.expression) || !ALLOWLIST_METHODS.has(node.expression.name.text)) {
+        return false;
+    }
+    return node.arguments.length === 1 && ts.isIdentifier(node.arguments[0]);
+}
+export function hasCommandAllowlistGuard(node, commandName) {
+    return hasSiblingEarlyExitGuard(node, commandName) || hasPositiveAllowlistBranch(node, commandName);
+}
+function hasSiblingEarlyExitGuard(node, commandName) {
+    const statement = containingStatement(node);
+    if (!statement || !ts.isBlock(statement.parent)) {
+        return false;
+    }
+    const statementIndex = statement.parent.statements.indexOf(statement);
+    if (statementIndex <= 0) {
+        return false;
+    }
+    const previousStatement = statement.parent.statements[statementIndex - 1];
+    return isRejectingAllowlistGuard(previousStatement, commandName);
+}
+function isRejectingAllowlistGuard(node, commandName) {
+    if (!ts.isIfStatement(node) || node.elseStatement || !isNegatedAllowlistCheck(node.expression, commandName)) {
+        return false;
+    }
+    return isExitStatement(node.thenStatement);
+}
+function hasPositiveAllowlistBranch(node, commandName) {
+    let current = node;
+    while (current.parent) {
+        const parent = current.parent;
+        if (ts.isIfStatement(parent) && parent.thenStatement === current && isAllowlistCheck(parent.expression, commandName)) {
+            return true;
+        }
+        if (isFunctionBoundary(parent)) {
+            return false;
+        }
+        current = parent;
+    }
+    return false;
+}
+function isNegatedAllowlistCheck(expression, commandName) {
+    const normalized = unwrapParenthesized(expression);
+    return ts.isPrefixUnaryExpression(normalized) && normalized.operator === ts.SyntaxKind.ExclamationToken && isAllowlistCheck(normalized.operand, commandName);
+}
+function isAllowlistCheck(expression, commandName) {
+    const normalized = unwrapParenthesized(expression);
+    if (!ts.isCallExpression(normalized) || !isCommandAllowlistMembershipCall(normalized)) {
+        return false;
+    }
+    const [argument] = normalized.arguments;
+    return ts.isIdentifier(argument) && argument.text === commandName;
+}
+function isExitStatement(node) {
+    if (ts.isReturnStatement(node) || ts.isThrowStatement(node)) {
+        return true;
+    }
+    if (!ts.isBlock(node) || node.statements.length === 0) {
+        return false;
+    }
+    const lastStatement = node.statements[node.statements.length - 1];
+    return ts.isReturnStatement(lastStatement) || ts.isThrowStatement(lastStatement);
+}
+function containingStatement(node) {
+    let current = node;
+    while (current) {
+        if (ts.isStatement(current)) {
+            return current;
+        }
+        current = current.parent;
+    }
+    return undefined;
+}
+function unwrapParenthesized(expression) {
+    let current = expression;
+    while (ts.isParenthesizedExpression(current)) {
+        current = current.expression;
+    }
+    return current;
+}
+function isFunctionBoundary(node) {
+    return (ts.isArrowFunction(node) ||
+        ts.isConstructorDeclaration(node) ||
+        ts.isFunctionDeclaration(node) ||
+        ts.isFunctionExpression(node) ||
+        ts.isGetAccessorDeclaration(node) ||
+        ts.isMethodDeclaration(node) ||
+        ts.isSetAccessorDeclaration(node));
+}
+//# sourceMappingURL=command-guards.js.map

package/dist/command-guards.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"command-guards.js","sourceRoot":"","sources":["../src/command-guards.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,YAAY,CAAC;AAE5B,MAAM,iBAAiB,GAAG,IAAI,GAAG,CAAC,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC,CAAC;AAEvD,MAAM,UAAU,gCAAgC,CAAC,IAAuB;IACtE,IAAI,CAAC,EAAE,CAAC,0BAA0B,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QACzG,OAAO,KAAK,CAAC;IACf,CAAC;IAED,OAAO,IAAI,CAAC,SAAS,CAAC,MAAM,KAAK,CAAC,IAAI,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC;AAC3E,CAAC;AAED,MAAM,UAAU,wBAAwB,CAAC,IAAuB,EAAE,WAAmB;IACnF,OAAO,wBAAwB,CAAC,IAAI,EAAE,WAAW,CAAC,IAAI,0BAA0B,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC;AACtG,CAAC;AAED,SAAS,wBAAwB,CAAC,IAAuB,EAAE,WAAmB;IAC5E,MAAM,SAAS,GAAG,mBAAmB,CAAC,IAAI,CAAC,CAAC;IAC5C,IAAI,CAAC,SAAS,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,CAAC;QAChD,OAAO,KAAK,CAAC;IACf,CAAC;IAED,MAAM,cAAc,GAAG,SAAS,CAAC,MAAM,CAAC,UAAU,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IACtE,IAAI,cAAc,IAAI,CAAC,EAAE,CAAC;QACxB,OAAO,KAAK,CAAC;IACf,CAAC;IAED,MAAM,iBAAiB,GAAG,SAAS,CAAC,MAAM,CAAC,UAAU,CAAC,cAAc,GAAG,CAAC,CAAC,CAAC;IAC1E,OAAO,yBAAyB,CAAC,iBAAiB,EAAE,WAAW,CAAC,CAAC;AACnE,CAAC;AAED,SAAS,yBAAyB,CAAC,IAAkB,EAAE,WAAmB;IACxE,IAAI,CAAC,EAAE,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,aAAa,IAAI,CAAC,uBAAuB,CAAC,IAAI,CAAC,UAAU,EAAE,WAAW,CAAC,EAAE,CAAC;QAC5G,OAAO,KAAK,CAAC;IACf,CAAC;IAED,OAAO,eAAe,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;AAC7C,CAAC;AAED,SAAS,0BAA0B,CAAC,IAAuB,EAAE,WAAmB;IAC9E,IAAI,OAAO,GAAY,IAAI,CAAC;IAE5B,OAAO,OAAO,CAAC,MAAM,EAAE,CAAC;QACtB,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;QAC9B,IAAI,EAAE,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,MAAM,CAAC,aAAa,KAAK,OAAO,IAAI,gBAAgB,CAAC,MAAM,CAAC,UAAU,EAAE,WAAW,CAAC,EAAE,CAAC;YACrH,OAAO,IAAI,CAAC;QACd,CAAC;QAED,IAAI,kBAAkB,CAAC,MAAM,CAAC,EAAE,CAAC;YAC/B,OAAO,KAAK,CAAC;QACf,CAAC;QAED,OAAO,GAAG,MAAM,CAAC;IACnB,CAAC;IAED,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,uBAAuB,CAAC,UAAyB,EAAE,WAAmB;IAC7E,MAAM,UAAU,GAAG,mBAAmB,CAAC,UAAU,CAAC,CAAC;IACnD,OAAO,EAAE,CAAC,uBAAuB,CAAC,UAAU,CAAC,IAAI,UAAU,CAAC,QAAQ,KAAK,EAAE,CAAC,UAAU,CAAC,gBAAgB,IAAI,gBAAgB,CAAC,UAAU,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;AAC/J,CAAC;AAED,SAAS,gBAAgB,CAAC,UAAyB,EAAE,WAAmB;IACtE,MAAM,UAAU,GAAG,mBAAmB,CAAC,UAAU,CAAC,CAAC;IACnD,IAAI,CAAC,EAAE,CAAC,gBAAgB,CAAC,UAAU,CAAC,IAAI,CAAC,gCAAgC,CAAC,UAAU,CAAC,EAAE,CAAC;QACtF,OAAO,KAAK,CAAC;IACf,CAAC;IAED,MAAM,CAAC,QAAQ,CAAC,GAAG,UAAU,CAAC,SAAS,CAAC;IACxC,OAAO,EAAE,CAAC,YAAY,CAAC,QAAQ,CAAC,IAAI,QAAQ,CAAC,IAAI,KAAK,WAAW,CAAC;AACpE,CAAC;AAED,SAAS,eAAe,CAAC,IAAkB;IACzC,IAAI,EAAE,CAAC,iBAAiB,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,gBAAgB,CAAC,IAAI,CAAC,EAAE,CAAC;QAC5D,OAAO,IAAI,CAAC;IACd,CAAC;IAED,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACtD,OAAO,KAAK,CAAC;IACf,CAAC;IAED,MAAM,aAAa,GAAG,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IAClE,OAAO,EAAE,CAAC,iBAAiB,CAAC,aAAa,CAAC,IAAI,EAAE,CAAC,gBAAgB,CAAC,aAAa,CAAC,CAAC;AACnF,CAAC;AAED,SAAS,mBAAmB,CAAC,IAAa;IACxC,IAAI,OAAO,GAAwB,IAAI,CAAC;IACxC,OAAO,OAAO,EAAE,CAAC;QACf,IAAI,EAAE,CAAC,WAAW,CAAC,OAAO,CAAC,EAAE,CAAC;YAC5B,OAAO,OAAO,CAAC;QACjB,CAAC;QAED,OAAO,GAAG,OAAO,CAAC,MAAM,CAAC;IAC3B,CAAC;IAED,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAS,mBAAmB,CAAC,UAAyB;IACpD,IAAI,OAAO,GAAG,UAAU,CAAC;IACzB,OAAO,EAAE,CAAC,yBAAyB,CAAC,OAAO,CAAC,EAAE,CAAC;QAC7C,OAAO,GAAG,OAAO,CAAC,UAAU,CAAC;IAC/B,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,SAAS,kBAAkB,CAAC,IAAa;IACvC,OAAO,CACL,EAAE,CAAC,eAAe,CAAC,IAAI,CAAC;QACxB,EAAE,CAAC,wBAAwB,CAAC,IAAI,CAAC;QACjC,EAAE,CAAC,qBAAqB,CAAC,IAAI,CAAC;QAC9B,EAAE,CAAC,oBAAoB,CAAC,IAAI,CAAC;QAC7B,EAAE,CAAC,wBAAwB,CAAC,IAAI,CAAC;QACjC,EAAE,CAAC,mBAAmB,CAAC,IAAI,CAAC;QAC5B,EAAE,CAAC,wBAAwB,CAAC,IAAI,CAAC,CAClC,CAAC;AACJ,CAAC"}

package/dist/password-ast.d.ts

@@ -0,0 +1,4 @@
+import ts from "typescript";
+export declare function hasPasswordHashingCall(sourceFile: ts.SourceFile): boolean;
+export declare function findPasswordHandlingNodes(sourceFile: ts.SourceFile): ts.Node[];
+//# sourceMappingURL=password-ast.d.ts.map

package/dist/password-ast.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"password-ast.d.ts","sourceRoot":"","sources":["../src/password-ast.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,YAAY,CAAC;AAG5B,wBAAgB,sBAAsB,CAAC,UAAU,EAAE,EAAE,CAAC,UAAU,GAAG,OAAO,CAYzE;AAED,wBAAgB,yBAAyB,CAAC,UAAU,EAAE,EAAE,CAAC,UAAU,GAAG,EAAE,CAAC,IAAI,EAAE,CAU9E"}