@next-secure-check/rules 0.3.0 → 0.5.0

package/LICENSE

@@ -1,21 +1,22 @@
-MIT License
-
-Copyright (c) 2026 SetraTheXX
-
-Permission is hereby granted, free of charge, to any person obtaining a copy
-of this software and associated documentation files (the "Software"), to deal
-in the Software without restriction, including without limitation the rights
-to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
-copies of the Software, and to permit persons to whom the Software is
-furnished to do so, subject to the following conditions:
-
-The above copyright notice and this permission notice shall be included in all
-copies or substantial portions of the Software.
-
-THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
-IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
-FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
-AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
-LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
-OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
-SOFTWARE.
+MIT License
+
+Copyright (c) 2026 SetraTheXX
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.
+

package/README.md

@@ -5,7 +5,7 @@ Built-in deterministic security rules for `next-secure-check`.
 This is an internal workspace package published for the `next-secure-check` CLI. Rules cover common Next.js security checks across secrets, injection, XSS, auth, config, headers, upload, and validation categories. Most users should install the CLI package instead:
 
 ```bash
-npx next-secure-check scan .
+npx --yes next-secure-check@latest scan .
 ```
 
 See the main repository for rule documentation:

package/dist/analysis-cache.d.ts

@@ -0,0 +1,14 @@
+import type { SourceFile } from "@next-secure-check/core";
+export type AnalysisCacheStats = {
+    cacheHits: number;
+    cacheMisses: number;
+};
+export declare class SourceAnalysisCache<TValue> {
+    private cache;
+    private cacheHits;
+    private cacheMisses;
+    get(sourceFile: SourceFile, create: () => TValue): TValue;
+    stats(): AnalysisCacheStats;
+    clear(): void;
+}
+//# sourceMappingURL=analysis-cache.d.ts.map

package/dist/analysis-cache.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"analysis-cache.d.ts","sourceRoot":"","sources":["../src/analysis-cache.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,yBAAyB,CAAC;AAE1D,MAAM,MAAM,kBAAkB,GAAG;IAC/B,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,MAAM,CAAC;CACrB,CAAC;AAEF,qBAAa,mBAAmB,CAAC,MAAM;IACrC,OAAO,CAAC,KAAK,CAAqC;IAClD,OAAO,CAAC,SAAS,CAAK;IACtB,OAAO,CAAC,WAAW,CAAK;IAExB,GAAG,CAAC,UAAU,EAAE,UAAU,EAAE,MAAM,EAAE,MAAM,MAAM,GAAG,MAAM;IAazD,KAAK,IAAI,kBAAkB;IAO3B,KAAK,IAAI,IAAI;CAKd"}

package/dist/analysis-cache.js

@@ -0,0 +1,28 @@
+export class SourceAnalysisCache {
+    cache = new WeakMap();
+    cacheHits = 0;
+    cacheMisses = 0;
+    get(sourceFile, create) {
+        const cached = this.cache.get(sourceFile);
+        if (cached) {
+            this.cacheHits += 1;
+            return cached;
+        }
+        const value = create();
+        this.cache.set(sourceFile, value);
+        this.cacheMisses += 1;
+        return value;
+    }
+    stats() {
+        return {
+            cacheHits: this.cacheHits,
+            cacheMisses: this.cacheMisses
+        };
+    }
+    clear() {
+        this.cache = new WeakMap();
+        this.cacheHits = 0;
+        this.cacheMisses = 0;
+    }
+}
+//# sourceMappingURL=analysis-cache.js.map

package/dist/analysis-cache.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"analysis-cache.js","sourceRoot":"","sources":["../src/analysis-cache.ts"],"names":[],"mappings":"AAOA,MAAM,OAAO,mBAAmB;IACtB,KAAK,GAAG,IAAI,OAAO,EAAsB,CAAC;IAC1C,SAAS,GAAG,CAAC,CAAC;IACd,WAAW,GAAG,CAAC,CAAC;IAExB,GAAG,CAAC,UAAsB,EAAE,MAAoB;QAC9C,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QAC1C,IAAI,MAAM,EAAE,CAAC;YACX,IAAI,CAAC,SAAS,IAAI,CAAC,CAAC;YACpB,OAAO,MAAM,CAAC;QAChB,CAAC;QAED,MAAM,KAAK,GAAG,MAAM,EAAE,CAAC;QACvB,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC;QAClC,IAAI,CAAC,WAAW,IAAI,CAAC,CAAC;QACtB,OAAO,KAAK,CAAC;IACf,CAAC;IAED,KAAK;QACH,OAAO;YACL,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,WAAW,EAAE,IAAI,CAAC,WAAW;SAC9B,CAAC;IACJ,CAAC;IAED,KAAK;QACH,IAAI,CAAC,KAAK,GAAG,IAAI,OAAO,EAAsB,CAAC;QAC/C,IAAI,CAAC,SAAS,GAAG,CAAC,CAAC;QACnB,IAAI,CAAC,WAAW,GAAG,CAAC,CAAC;IACvB,CAAC;CACF"}

package/dist/analysis-facts.d.ts

@@ -0,0 +1,62 @@
+import ts from "typescript";
+export type BoundedFlowSourceFact = {
+    readonly node: ts.Node;
+    readonly path: string;
+    readonly scope: ts.Node;
+};
+export type BoundedFlowSinkFact = {
+    readonly node: ts.CallExpression;
+    readonly scope: ts.Node;
+    readonly kind?: string;
+};
+export type BoundedFlowGuardFact = {
+    readonly node: ts.CallExpression;
+    readonly scope: ts.Node;
+    readonly kind: string;
+    readonly identifier?: string;
+};
+export type BoundedFlowAliasFact = {
+    readonly node: ts.VariableDeclaration | ts.BinaryExpression;
+    readonly scope: ts.Node;
+    readonly from: string;
+    readonly to: string;
+    readonly depth: number;
+    readonly path?: string;
+};
+export type BoundedFlowInvalidationReason = "reassignment" | "mutation" | "call-escape";
+export type BoundedFlowInvalidationFact = {
+    readonly node: ts.Node;
+    readonly scope: ts.Node;
+    readonly identifier: string;
+    readonly reason: BoundedFlowInvalidationReason;
+};
+export type BoundedFlowFunctionBoundaryFact = {
+    readonly node: ts.Node;
+};
+export type BoundedFlowEvidencePathFact = {
+    readonly sink: ts.Node;
+    readonly path: string;
+};
+export type BoundedFlowFacts = {
+    readonly sources: readonly BoundedFlowSourceFact[];
+    readonly sinks: readonly BoundedFlowSinkFact[];
+    readonly guards: readonly BoundedFlowGuardFact[];
+    readonly aliases: readonly BoundedFlowAliasFact[];
+    readonly invalidations: readonly BoundedFlowInvalidationFact[];
+    readonly functionBoundaries: readonly BoundedFlowFunctionBoundaryFact[];
+    readonly evidencePaths: ReadonlyMap<ts.Node, string>;
+    readonly guardedSinks: ReadonlySet<ts.CallExpression>;
+};
+export type BoundedFlowFactsBuilder = {
+    readonly sourceFacts: Map<ts.Node, BoundedFlowSourceFact>;
+    readonly sinkFacts: Map<ts.CallExpression, BoundedFlowSinkFact>;
+    readonly guardFacts: Map<ts.CallExpression, BoundedFlowGuardFact>;
+    readonly aliasFacts: BoundedFlowAliasFact[];
+    readonly invalidationFacts: BoundedFlowInvalidationFact[];
+    readonly functionBoundaryFacts: BoundedFlowFunctionBoundaryFact[];
+    readonly evidencePaths: Map<ts.Node, string>;
+    readonly guardedSinks: Set<ts.CallExpression>;
+};
+export declare function createBoundedFlowFactsBuilder(): BoundedFlowFactsBuilder;
+export declare function finalizeBoundedFlowFacts(builder: BoundedFlowFactsBuilder): BoundedFlowFacts;
+//# sourceMappingURL=analysis-facts.d.ts.map

package/dist/analysis-facts.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"analysis-facts.d.ts","sourceRoot":"","sources":["../src/analysis-facts.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,YAAY,CAAC;AAE5B,MAAM,MAAM,qBAAqB,GAAG;IAClC,QAAQ,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC;IACvB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC;CACzB,CAAC;AAEF,MAAM,MAAM,mBAAmB,GAAG;IAChC,QAAQ,CAAC,IAAI,EAAE,EAAE,CAAC,cAAc,CAAC;IACjC,QAAQ,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC;IACxB,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;CACxB,CAAC;AAEF,MAAM,MAAM,oBAAoB,GAAG;IACjC,QAAQ,CAAC,IAAI,EAAE,EAAE,CAAC,cAAc,CAAC;IACjC,QAAQ,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC;IACxB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;CAC9B,CAAC;AAEF,MAAM,MAAM,oBAAoB,GAAG;IACjC,QAAQ,CAAC,IAAI,EAAE,EAAE,CAAC,mBAAmB,GAAG,EAAE,CAAC,gBAAgB,CAAC;IAC5D,QAAQ,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC;IACxB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;CACxB,CAAC;AAEF,MAAM,MAAM,6BAA6B,GAAG,cAAc,GAAG,UAAU,GAAG,aAAa,CAAC;AAExF,MAAM,MAAM,2BAA2B,GAAG;IACxC,QAAQ,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC;IACvB,QAAQ,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC;IACxB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,MAAM,EAAE,6BAA6B,CAAC;CAChD,CAAC;AAEF,MAAM,MAAM,+BAA+B,GAAG;IAC5C,QAAQ,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC;CACxB,CAAC;AAEF,MAAM,MAAM,2BAA2B,GAAG;IACxC,QAAQ,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC;IACvB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;CACvB,CAAC;AAEF,MAAM,MAAM,gBAAgB,GAAG;IAC7B,QAAQ,CAAC,OAAO,EAAE,SAAS,qBAAqB,EAAE,CAAC;IACnD,QAAQ,CAAC,KAAK,EAAE,SAAS,mBAAmB,EAAE,CAAC;IAC/C,QAAQ,CAAC,MAAM,EAAE,SAAS,oBAAoB,EAAE,CAAC;IACjD,QAAQ,CAAC,OAAO,EAAE,SAAS,oBAAoB,EAAE,CAAC;IAClD,QAAQ,CAAC,aAAa,EAAE,SAAS,2BAA2B,EAAE,CAAC;IAC/D,QAAQ,CAAC,kBAAkB,EAAE,SAAS,+BAA+B,EAAE,CAAC;IACxE,QAAQ,CAAC,aAAa,EAAE,WAAW,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IACrD,QAAQ,CAAC,YAAY,EAAE,WAAW,CAAC,EAAE,CAAC,cAAc,CAAC,CAAC;CACvD,CAAC;AAEF,MAAM,MAAM,uBAAuB,GAAG;IACpC,QAAQ,CAAC,WAAW,EAAE,GAAG,CAAC,EAAE,CAAC,IAAI,EAAE,qBAAqB,CAAC,CAAC;IAC1D,QAAQ,CAAC,SAAS,EAAE,GAAG,CAAC,EAAE,CAAC,cAAc,EAAE,mBAAmB,CAAC,CAAC;IAChE,QAAQ,CAAC,UAAU,EAAE,GAAG,CAAC,EAAE,CAAC,cAAc,EAAE,oBAAoB,CAAC,CAAC;IAClE,QAAQ,CAAC,UAAU,EAAE,oBAAoB,EAAE,CAAC;IAC5C,QAAQ,CAAC,iBAAiB,EAAE,2BAA2B,EAAE,CAAC;IAC1D,QAAQ,CAAC,qBAAqB,EAAE,+BAA+B,EAAE,CAAC;IAClE,QAAQ,CAAC,aAAa,EAAE,GAAG,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IAC7C,QAAQ,CAAC,YAAY,EAAE,GAAG,CAAC,EAAE,CAAC,cAAc,CAAC,CAAC;CAC/C,CAAC;AAEF,wBAAgB,6BAA6B,IAAI,uBAAuB,CAWvE;AAED,wBAAgB,wBAAwB,CAAC,OAAO,EAAE,uBAAuB,GAAG,gBAAgB,CAmB3F"}

package/dist/analysis-facts.js

@@ -0,0 +1,29 @@
+export function createBoundedFlowFactsBuilder() {
+    return {
+        sourceFacts: new Map(),
+        sinkFacts: new Map(),
+        guardFacts: new Map(),
+        aliasFacts: [],
+        invalidationFacts: [],
+        functionBoundaryFacts: [],
+        evidencePaths: new Map(),
+        guardedSinks: new Set()
+    };
+}
+export function finalizeBoundedFlowFacts(builder) {
+    const invalidations = new Map();
+    for (const invalidation of builder.invalidationFacts) {
+        invalidations.set(`${invalidation.node.pos}:${invalidation.node.end}:${invalidation.identifier}:${invalidation.reason}`, invalidation);
+    }
+    return {
+        sources: Object.freeze([...builder.sourceFacts.values()]),
+        sinks: Object.freeze([...builder.sinkFacts.values()]),
+        guards: Object.freeze([...builder.guardFacts.values()]),
+        aliases: Object.freeze([...builder.aliasFacts]),
+        invalidations: Object.freeze([...invalidations.values()]),
+        functionBoundaries: Object.freeze([...builder.functionBoundaryFacts]),
+        evidencePaths: new Map(builder.evidencePaths),
+        guardedSinks: new Set(builder.guardedSinks)
+    };
+}
+//# sourceMappingURL=analysis-facts.js.map

package/dist/analysis-facts.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"analysis-facts.js","sourceRoot":"","sources":["../src/analysis-facts.ts"],"names":[],"mappings":"AAsEA,MAAM,UAAU,6BAA6B;IAC3C,OAAO;QACL,WAAW,EAAE,IAAI,GAAG,EAAE;QACtB,SAAS,EAAE,IAAI,GAAG,EAAE;QACpB,UAAU,EAAE,IAAI,GAAG,EAAE;QACrB,UAAU,EAAE,EAAE;QACd,iBAAiB,EAAE,EAAE;QACrB,qBAAqB,EAAE,EAAE;QACzB,aAAa,EAAE,IAAI,GAAG,EAAE;QACxB,YAAY,EAAE,IAAI,GAAG,EAAE;KACxB,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,wBAAwB,CAAC,OAAgC;IACvE,MAAM,aAAa,GAAG,IAAI,GAAG,EAAuC,CAAC;IACrE,KAAK,MAAM,YAAY,IAAI,OAAO,CAAC,iBAAiB,EAAE,CAAC;QACrD,aAAa,CAAC,GAAG,CACf,GAAG,YAAY,CAAC,IAAI,CAAC,GAAG,IAAI,YAAY,CAAC,IAAI,CAAC,GAAG,IAAI,YAAY,CAAC,UAAU,IAAI,YAAY,CAAC,MAAM,EAAE,EACrG,YAAY,CACb,CAAC;IACJ,CAAC;IAED,OAAO;QACL,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,OAAO,CAAC,WAAW,CAAC,MAAM,EAAE,CAAC,CAAC;QACzD,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,OAAO,CAAC,SAAS,CAAC,MAAM,EAAE,CAAC,CAAC;QACrD,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,OAAO,CAAC,UAAU,CAAC,MAAM,EAAE,CAAC,CAAC;QACvD,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC;QAC/C,aAAa,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,aAAa,CAAC,MAAM,EAAE,CAAC,CAAC;QACzD,kBAAkB,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,OAAO,CAAC,qBAAqB,CAAC,CAAC;QACrE,aAAa,EAAE,IAAI,GAAG,CAAC,OAAO,CAAC,aAAa,CAAC;QAC7C,YAAY,EAAE,IAAI,GAAG,CAAC,OAAO,CAAC,YAAY,CAAC;KAC5C,CAAC;AACJ,CAAC"}

package/dist/ast-utils.d.ts

@@ -1,17 +1,46 @@
 import type { Severity, SourceFile } from "@next-secure-check/core";
+import ts from "typescript";
+import { type AnalysisCacheStats } from "./analysis-cache.js";
+import type { BoundedFlowFacts } from "./analysis-facts.js";
 export type AstMatch = {
     line: number;
     column: number;
     evidence: string;
     sourceLine: string;
+    evidencePath?: string;
 };
 export type DangerouslySetInnerHtmlMatch = AstMatch & {
     severity: Extract<Severity, "LOW" | "MEDIUM">;
 };
+export type AnalysisFacts = {
+    sourceFile: ts.SourceFile;
+    boundedFlow: BoundedFlowFacts;
+    commandIdentifiers: ReadonlySet<string>;
+    childProcessNamespaces: ReadonlySet<string>;
+    commandDeclarationNodes: readonly ts.Node[];
+    commandSourcePaths: ReadonlyMap<ts.CallExpression, string>;
+    safeCommandCalls: ReadonlySet<ts.CallExpression>;
+    routeHandlerNodes: readonly ts.Node[];
+    sanitizerIdentifiers: ReadonlySet<string>;
+    untrustedSanitizerIdentifiers: ReadonlySet<string>;
+    safeHtmlIdentifiers: ReadonlySet<string>;
+    hasPasswordHashing: boolean;
+    hasAuthIntent: boolean;
+    hasRateLimitIntent: boolean;
+    hasValidationIntent: boolean;
+    hasUploadHandling: boolean;
+};
+export type AnalysisFactsCacheStats = AnalysisCacheStats;
+export declare function getAnalysisFacts(file: SourceFile): AnalysisFacts;
+export declare function getAnalysisFactsCacheStats(): AnalysisFactsCacheStats;
+export declare function resetAnalysisFactsCacheForTests(): void;
 export declare function findCommandExecutionMatches(file: SourceFile): AstMatch[];
 export declare function findRawSqlConcatMatches(file: SourceFile): AstMatch[];
 export declare function findDangerouslySetInnerHtmlMatches(file: SourceFile): DangerouslySetInnerHtmlMatch[];
 export declare function findPasswordHandlingMatches(file: SourceFile): AstMatch[];
 export declare function findRouteHandlerExports(file: SourceFile): AstMatch[];
+export declare function hasAuthIntentSignal(file: SourceFile): boolean;
+export declare function hasRateLimitIntentSignal(file: SourceFile): boolean;
+export declare function hasValidationIntentSignal(file: SourceFile): boolean;
 export declare function findUploadRouteHandlerMatches(file: SourceFile): AstMatch[];
 //# sourceMappingURL=ast-utils.d.ts.map

package/dist/ast-utils.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"ast-utils.d.ts","sourceRoot":"","sources":["../src/ast-utils.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,QAAQ,EAAE,UAAU,EAAE,MAAM,yBAAyB,CAAC;AAGpE,MAAM,MAAM,QAAQ,GAAG;IACrB,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,MAAM,CAAC;CACpB,CAAC;AAEF,MAAM,MAAM,4BAA4B,GAAG,QAAQ,GAAG;IACpD,QAAQ,EAAE,OAAO,CAAC,QAAQ,EAAE,KAAK,GAAG,QAAQ,CAAC,CAAC;CAC/C,CAAC;AASF,wBAAgB,2BAA2B,CAAC,IAAI,EAAE,UAAU,GAAG,QAAQ,EAAE,CAsBxE;AAED,wBAAgB,uBAAuB,CAAC,IAAI,EAAE,UAAU,GAAG,QAAQ,EAAE,CAmBpE;AAED,wBAAgB,kCAAkC,CAAC,IAAI,EAAE,UAAU,GAAG,4BAA4B,EAAE,CAuBnG;AAED,wBAAgB,2BAA2B,CAAC,IAAI,EAAE,UAAU,GAAG,QAAQ,EAAE,CAexE;AAED,wBAAgB,uBAAuB,CAAC,IAAI,EAAE,UAAU,GAAG,QAAQ,EAAE,CAYpE;AAED,wBAAgB,6BAA6B,CAAC,IAAI,EAAE,UAAU,GAAG,QAAQ,EAAE,CAqB1E"}
+{"version":3,"file":"ast-utils.d.ts","sourceRoot":"","sources":["../src/ast-utils.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,QAAQ,EAAE,UAAU,EAAE,MAAM,yBAAyB,CAAC;AACpE,OAAO,EAAE,MAAM,YAAY,CAAC;AAC5B,OAAO,EAAuB,KAAK,kBAAkB,EAAE,MAAM,qBAAqB,CAAC;AACnF,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;AAgB5D,MAAM,MAAM,QAAQ,GAAG;IACrB,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,MAAM,CAAC;IACnB,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB,CAAC;AAEF,MAAM,MAAM,4BAA4B,GAAG,QAAQ,GAAG;IACpD,QAAQ,EAAE,OAAO,CAAC,QAAQ,EAAE,KAAK,GAAG,QAAQ,CAAC,CAAC;CAC/C,CAAC;AAEF,MAAM,MAAM,aAAa,GAAG;IAC1B,UAAU,EAAE,EAAE,CAAC,UAAU,CAAC;IAC1B,WAAW,EAAE,gBAAgB,CAAC;IAC9B,kBAAkB,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC;IACxC,sBAAsB,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC;IAC5C,uBAAuB,EAAE,SAAS,EAAE,CAAC,IAAI,EAAE,CAAC;IAC5C,kBAAkB,EAAE,WAAW,CAAC,EAAE,CAAC,cAAc,EAAE,MAAM,CAAC,CAAC;IAC3D,gBAAgB,EAAE,WAAW,CAAC,EAAE,CAAC,cAAc,CAAC,CAAC;IACjD,iBAAiB,EAAE,SAAS,EAAE,CAAC,IAAI,EAAE,CAAC;IACtC,oBAAoB,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC;IAC1C,6BAA6B,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC;IACnD,mBAAmB,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC;IACzC,kBAAkB,EAAE,OAAO,CAAC;IAC5B,aAAa,EAAE,OAAO,CAAC;IACvB,kBAAkB,EAAE,OAAO,CAAC;IAC5B,mBAAmB,EAAE,OAAO,CAAC;IAC7B,iBAAiB,EAAE,OAAO,CAAC;CAC5B,CAAC;AAEF,MAAM,MAAM,uBAAuB,GAAG,kBAAkB,CAAC;AAIzD,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,UAAU,GAAG,aAAa,CAWhE;AAED,wBAAgB,0BAA0B,IAAI,uBAAuB,CAEpE;AAED,wBAAgB,+BAA+B,IAAI,IAAI,CAEtD;AAED,wBAAgB,2BAA2B,CAAC,IAAI,EAAE,UAAU,GAAG,QAAQ,EAAE,CAmBxE;AAED,wBAAgB,uBAAuB,CAAC,IAAI,EAAE,UAAU,GAAG,QAAQ,EAAE,CAepE;AAED,wBAAgB,kCAAkC,CAAC,IAAI,EAAE,UAAU,GAAG,4BAA4B,EAAE,CAenG;AAED,wBAAgB,2BAA2B,CAAC,IAAI,EAAE,UAAU,GAAG,QAAQ,EAAE,CAOxE;AAED,wBAAgB,uBAAuB,CAAC,IAAI,EAAE,UAAU,GAAG,QAAQ,EAAE,CAGpE;AAED,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,UAAU,GAAG,OAAO,CAE7D;AAED,wBAAgB,wBAAwB,CAAC,IAAI,EAAE,UAAU,GAAG,OAAO,CAElE;AAED,wBAAgB,yBAAyB,CAAC,IAAI,EAAE,UAAU,GAAG,OAAO,CAEnE;AAED,wBAAgB,6BAA6B,CAAC,IAAI,EAAE,UAAU,GAAG,QAAQ,EAAE,CAc1E"}