@oculum/scanner 1.0.14 → 1.0.15

package/dist/detect/ast-rules/framework-checks-ast.js

@@ -0,0 +1,185 @@
+"use strict";
+/**
+ * AST-Based Framework Security Checks
+ *
+ * Migrates structural/framework-checks.ts from regex to AST.
+ * Detects Next.js, Express, and React-specific security issues.
+ *
+ * AST advantages:
+ * - Detects revalidatePath/redirect with user input from argument nodes
+ * - Understands 'use server' directive at AST level
+ * - Can check if server actions have auth before export
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+const index_1 = require("./index");
+const call_analysis_1 = require("./helpers/call-analysis");
+const user_input_1 = require("./helpers/user-input");
+const context_detection_1 = require("./helpers/context-detection");
+const import_analysis_1 = require("./helpers/import-analysis");
+const file_classifier_1 = require("../../parse/file-classifier");
+// ============================================================================
+// AST Rule: Next.js revalidatePath/redirect with user input
+// ============================================================================
+(0, index_1.registerASTRule)({
+    id: 'ast-framework-unsafe-redirect',
+    title: 'Redirect or revalidation with user input',
+    description: 'redirect() or revalidatePath() called with user-controlled input, risking open redirect or cache poisoning',
+    severity: 'high',
+    category: 'dangerous_function',
+    suggestedFix: 'Validate redirect URLs against an allowlist. Sanitize paths before revalidation.',
+    languages: ['javascript', 'typescript', 'tsx'],
+    confidence: 'high',
+    baseConfidence: 0.20,
+    layer: 2,
+    source: 'structural',
+    detect(ast, content, nodeIndex) {
+        if ((0, file_classifier_1.isScannerOrFixtureFile)(ast.filePath))
+            return [];
+        if ((0, file_classifier_1.isTestOrMockFile)(ast.filePath))
+            return [];
+        // Content pre-check: skip files without next/ imports
+        if (!/next\/navigation|next\/cache/i.test(content))
+            return [];
+        const matches = [];
+        const root = ast.tree.rootNode;
+        // Only check Next.js files
+        if (!(0, import_analysis_1.hasImport)(root, 'next/navigation') && !(0, import_analysis_1.hasImport)(root, 'next/cache'))
+            return [];
+        for (const node of (0, index_1.getNodes)(nodeIndex, 'call_expression')) {
+            const target = (0, call_analysis_1.resolveCallTarget)(node);
+            if (!target)
+                continue;
+            if (target.name !== 'redirect' && target.name !== 'revalidatePath')
+                continue;
+            const args = (0, call_analysis_1.getCallArguments)(node);
+            if (args.length === 0)
+                continue;
+            // Check if argument contains user input
+            if (args.some(a => (0, user_input_1.isUserInputExpression)(a))) {
+                matches.push({
+                    node,
+                    severity: 'high',
+                    note: target.name === 'redirect'
+                        ? 'redirect() with user input can lead to open redirect'
+                        : 'revalidatePath() with user input could allow cache poisoning',
+                });
+            }
+        }
+        return matches;
+    },
+});
+// ============================================================================
+// AST Rule: Next.js Server Action without Auth
+// ============================================================================
+(0, index_1.registerASTRule)({
+    id: 'ast-framework-server-action-no-auth',
+    title: 'Server action without authentication',
+    description: 'Exported server action ("use server") may lack authentication checks',
+    severity: 'medium',
+    category: 'missing_auth',
+    suggestedFix: 'Add authentication and input validation to server actions.',
+    languages: ['javascript', 'typescript', 'tsx'],
+    confidence: 'medium',
+    baseConfidence: 0.20,
+    layer: 2,
+    source: 'structural',
+    requiresAIValidation: true,
+    detect(ast, _content, nodeIndex) {
+        if ((0, file_classifier_1.isScannerOrFixtureFile)(ast.filePath))
+            return [];
+        if ((0, file_classifier_1.isTestOrMockFile)(ast.filePath))
+            return [];
+        const root = ast.tree.rootNode;
+        // Must have 'use server' directive
+        if ((0, context_detection_1.getFileDirective)(root) !== 'use server')
+            return [];
+        const matches = [];
+        // Check exported functions for auth
+        for (const node of (0, index_1.getNodes)(nodeIndex, 'export_statement')) {
+            const declaration = node.namedChildren.find(c => c.type === 'function_declaration' || c.type === 'lexical_declaration');
+            if (!declaration)
+                continue;
+            // Get function body
+            let fnNode = null;
+            if (declaration.type === 'function_declaration') {
+                fnNode = declaration;
+            }
+            else {
+                // const myAction = async () => { ... }
+                const declarator = declaration.descendantsOfType('variable_declarator')[0];
+                const value = declarator?.childForFieldName('value');
+                if (value?.type === 'arrow_function' || value?.type === 'function_expression') {
+                    fnNode = value;
+                }
+            }
+            if (!fnNode)
+                continue;
+            const body = fnNode.childForFieldName('body');
+            if (!body)
+                continue;
+            // Check for auth calls
+            const authCalls = (0, context_detection_1.findAuthChecks)(body);
+            if (authCalls.length > 0)
+                continue;
+            // Check for auth-related text
+            if (/auth|session|userId|user_id|currentUser/i.test(body.text))
+                continue;
+            matches.push({ node });
+        }
+        return matches;
+    },
+});
+// ============================================================================
+// AST Rule: CORS Wildcard
+// ============================================================================
+(0, index_1.registerASTRule)({
+    id: 'ast-framework-cors-wildcard',
+    title: 'CORS wildcard origin',
+    description: 'CORS configured with wildcard origin (*), allowing any website to make requests',
+    severity: 'medium',
+    category: 'cors_misconfiguration',
+    suggestedFix: 'Restrict CORS to specific trusted origins instead of using wildcard.',
+    languages: ['javascript', 'typescript', 'tsx'],
+    confidence: 'high',
+    baseConfidence: 0.20,
+    layer: 2,
+    source: 'structural',
+    detect(ast, _content, nodeIndex) {
+        if ((0, file_classifier_1.isScannerOrFixtureFile)(ast.filePath))
+            return [];
+        if ((0, file_classifier_1.isTestOrMockFile)(ast.filePath))
+            return [];
+        const matches = [];
+        const root = ast.tree.rootNode;
+        for (const node of (0, index_1.getNodes)(nodeIndex, 'pair', 'call_expression')) {
+            // cors({ origin: '*' }) or { 'Access-Control-Allow-Origin': '*' }
+            if (node.type === 'pair') {
+                const key = node.childForFieldName('key');
+                const value = node.childForFieldName('value');
+                if (!key || !value)
+                    continue;
+                const keyText = key.text.replace(/['"]/g, '').toLowerCase();
+                if ((keyText === 'origin' || keyText === 'access-control-allow-origin') &&
+                    value.text.replace(/['"]/g, '') === '*') {
+                    matches.push({ node });
+                }
+            }
+            // res.setHeader('Access-Control-Allow-Origin', '*')
+            if (node.type === 'call_expression') {
+                const target = (0, call_analysis_1.resolveCallTarget)(node);
+                if (target?.name === 'setHeader' || target?.name === 'set') {
+                    const args = (0, call_analysis_1.getCallArguments)(node);
+                    if (args.length >= 2) {
+                        const headerName = args[0].text.replace(/['"]/g, '').toLowerCase();
+                        const headerValue = args[1].text.replace(/['"]/g, '');
+                        if (headerName === 'access-control-allow-origin' && headerValue === '*') {
+                            matches.push({ node });
+                        }
+                    }
+                }
+            }
+        }
+        return matches;
+    },
+});
+//# sourceMappingURL=framework-checks-ast.js.map

package/dist/detect/ast-rules/framework-checks-ast.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"framework-checks-ast.js","sourceRoot":"","sources":["../../../src/detect/ast-rules/framework-checks-ast.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;GAUG;;AAGH,mCAAsF;AAEtF,2DAA6E;AAC7E,qDAA4D;AAC5D,mEAA8E;AAC9E,+DAAqD;AACrD,iEAAsF;AAEtF,+EAA+E;AAC/E,4DAA4D;AAC5D,+EAA+E;AAE/E,IAAA,uBAAe,EAAC;IACd,EAAE,EAAE,+BAA+B;IACnC,KAAK,EAAE,0CAA0C;IACjD,WAAW,EAAE,4GAA4G;IACzH,QAAQ,EAAE,MAAM;IAChB,QAAQ,EAAE,oBAAoB;IAC9B,YAAY,EAAE,kFAAkF;IAChG,SAAS,EAAE,CAAC,YAAY,EAAE,YAAY,EAAE,KAAK,CAAC;IAC9C,UAAU,EAAE,MAAM;IAClB,cAAc,EAAE,IAAI;IACpB,KAAK,EAAE,CAAC;IACR,MAAM,EAAE,YAAY;IACpB,MAAM,CAAC,GAAc,EAAE,OAAe,EAAE,SAAqB;QAC3D,IAAI,IAAA,wCAAsB,EAAC,GAAG,CAAC,QAAQ,CAAC;YAAE,OAAO,EAAE,CAAA;QACnD,IAAI,IAAA,kCAAgB,EAAC,GAAG,CAAC,QAAQ,CAAC;YAAE,OAAO,EAAE,CAAA;QAE7C,sDAAsD;QACtD,IAAI,CAAC,+BAA+B,CAAC,IAAI,CAAC,OAAO,CAAC;YAAE,OAAO,EAAE,CAAA;QAE7D,MAAM,OAAO,GAAmB,EAAE,CAAA;QAClC,MAAM,IAAI,GAAG,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAA;QAE9B,2BAA2B;QAC3B,IAAI,CAAC,IAAA,2BAAS,EAAC,IAAI,EAAE,iBAAiB,CAAC,IAAI,CAAC,IAAA,2BAAS,EAAC,IAAI,EAAE,YAAY,CAAC;YAAE,OAAO,EAAE,CAAA;QAEpF,KAAK,MAAM,IAAI,IAAI,IAAA,gBAAQ,EAAC,SAAU,EAAE,iBAAiB,CAAC,EAAE,CAAC;YAC3D,MAAM,MAAM,GAAG,IAAA,iCAAiB,EAAC,IAAI,CAAC,CAAA;YACtC,IAAI,CAAC,MAAM;gBAAE,SAAQ;YAErB,IAAI,MAAM,CAAC,IAAI,KAAK,UAAU,IAAI,MAAM,CAAC,IAAI,KAAK,gBAAgB;gBAAE,SAAQ;YAE5E,MAAM,IAAI,GAAG,IAAA,gCAAgB,EAAC,IAAI,CAAC,CAAA;YACnC,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;gBAAE,SAAQ;YAE/B,wCAAwC;YACxC,IAAI,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,IAAA,kCAAqB,EAAC,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC7C,OAAO,CAAC,IAAI,CAAC;oBACX,IAAI;oBACJ,QAAQ,EAAE,MAAM;oBAChB,IAAI,EAAE,MAAM,CAAC,IAAI,KAAK,UAAU;wBAC9B,CAAC,CAAC,sDAAsD;wBACxD,CAAC,CAAC,8DAA8D;iBACnE,CAAC,CAAA;YACJ,CAAC;QACH,CAAC;QAED,OAAO,OAAO,CAAA;IAChB,CAAC;CACF,CAAC,CAAA;AAEF,+EAA+E;AAC/E,+CAA+C;AAC/C,+EAA+E;AAE/E,IAAA,uBAAe,EAAC;IACd,EAAE,EAAE,qCAAqC;IACzC,KAAK,EAAE,sCAAsC;IAC7C,WAAW,EAAE,sEAAsE;IACnF,QAAQ,EAAE,QAAQ;IAClB,QAAQ,EAAE,cAAc;IACxB,YAAY,EAAE,4DAA4D;IAC1E,SAAS,EAAE,CAAC,YAAY,EAAE,YAAY,EAAE,KAAK,CAAC;IAC9C,UAAU,EAAE,QAAQ;IACpB,cAAc,EAAE,IAAI;IACpB,KAAK,EAAE,CAAC;IACR,MAAM,EAAE,YAAY;IACpB,oBAAoB,EAAE,IAAI;IAC1B,MAAM,CAAC,GAAc,EAAE,QAAgB,EAAE,SAAqB;QAC5D,IAAI,IAAA,wCAAsB,EAAC,GAAG,CAAC,QAAQ,CAAC;YAAE,OAAO,EAAE,CAAA;QACnD,IAAI,IAAA,kCAAgB,EAAC,GAAG,CAAC,QAAQ,CAAC;YAAE,OAAO,EAAE,CAAA;QAE7C,MAAM,IAAI,GAAG,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAA;QAE9B,mCAAmC;QACnC,IAAI,IAAA,oCAAgB,EAAC,IAAI,CAAC,KAAK,YAAY;YAAE,OAAO,EAAE,CAAA;QAEtD,MAAM,OAAO,GAAmB,EAAE,CAAA;QAElC,oCAAoC;QACpC,KAAK,MAAM,IAAI,IAAI,IAAA,gBAAQ,EAAC,SAAU,EAAE,kBAAkB,CAAC,EAAE,CAAC;YAC5D,MAAM,WAAW,GAAG,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAC9C,CAAC,CAAC,IAAI,KAAK,sBAAsB,IAAI,CAAC,CAAC,IAAI,KAAK,qBAAqB,CACtE,CAAA;YACD,IAAI,CAAC,WAAW;gBAAE,SAAQ;YAE1B,oBAAoB;YACpB,IAAI,MAAM,GAA6B,IAAI,CAAA;YAC3C,IAAI,WAAW,CAAC,IAAI,KAAK,sBAAsB,EAAE,CAAC;gBAChD,MAAM,GAAG,WAAW,CAAA;YACtB,CAAC;iBAAM,CAAC;gBACN,uCAAuC;gBACvC,MAAM,UAAU,GAAG,WAAW,CAAC,iBAAiB,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC,CAAA;gBAC1E,MAAM,KAAK,GAAG,UAAU,EAAE,iBAAiB,CAAC,OAAO,CAAC,CAAA;gBACpD,IAAI,KAAK,EAAE,IAAI,KAAK,gBAAgB,IAAI,KAAK,EAAE,IAAI,KAAK,qBAAqB,EAAE,CAAC;oBAC9E,MAAM,GAAG,KAAK,CAAA;gBAChB,CAAC;YACH,CAAC;YAED,IAAI,CAAC,MAAM;gBAAE,SAAQ;YAErB,MAAM,IAAI,GAAG,MAAM,CAAC,iBAAiB,CAAC,MAAM,CAAC,CAAA;YAC7C,IAAI,CAAC,IAAI;gBAAE,SAAQ;YAEnB,uBAAuB;YACvB,MAAM,SAAS,GAAG,IAAA,kCAAc,EAAC,IAAI,CAAC,CAAA;YACtC,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC;gBAAE,SAAQ;YAElC,8BAA8B;YAC9B,IAAI,0CAA0C,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC;gBAAE,SAAQ;YAExE,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,CAAC,CAAA;QACxB,CAAC;QAED,OAAO,OAAO,CAAA;IAChB,CAAC;CACF,CAAC,CAAA;AAEF,+EAA+E;AAC/E,0BAA0B;AAC1B,+EAA+E;AAE/E,IAAA,uBAAe,EAAC;IACd,EAAE,EAAE,6BAA6B;IACjC,KAAK,EAAE,sBAAsB;IAC7B,WAAW,EAAE,iFAAiF;IAC9F,QAAQ,EAAE,QAAQ;IAClB,QAAQ,EAAE,uBAAuB;IACjC,YAAY,EAAE,sEAAsE;IACpF,SAAS,EAAE,CAAC,YAAY,EAAE,YAAY,EAAE,KAAK,CAAC;IAC9C,UAAU,EAAE,MAAM;IAClB,cAAc,EAAE,IAAI;IACpB,KAAK,EAAE,CAAC;IACR,MAAM,EAAE,YAAY;IACpB,MAAM,CAAC,GAAc,EAAE,QAAgB,EAAE,SAAqB;QAC5D,IAAI,IAAA,wCAAsB,EAAC,GAAG,CAAC,QAAQ,CAAC;YAAE,OAAO,EAAE,CAAA;QACnD,IAAI,IAAA,kCAAgB,EAAC,GAAG,CAAC,QAAQ,CAAC;YAAE,OAAO,EAAE,CAAA;QAE7C,MAAM,OAAO,GAAmB,EAAE,CAAA;QAClC,MAAM,IAAI,GAAG,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAA;QAE9B,KAAK,MAAM,IAAI,IAAI,IAAA,gBAAQ,EAAC,SAAU,EAAE,MAAM,EAAE,iBAAiB,CAAC,EAAE,CAAC;YACnE,kEAAkE;YAClE,IAAI,IAAI,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;gBACzB,MAAM,GAAG,GAAG,IAAI,CAAC,iBAAiB,CAAC,KAAK,CAAC,CAAA;gBACzC,MAAM,KAAK,GAAG,IAAI,CAAC,iBAAiB,CAAC,OAAO,CAAC,CAAA;gBAC7C,IAAI,CAAC,GAAG,IAAI,CAAC,KAAK;oBAAE,SAAQ;gBAE5B,MAAM,OAAO,GAAG,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,WAAW,EAAE,CAAA;gBAC3D,IACE,CAAC,OAAO,KAAK,QAAQ,IAAI,OAAO,KAAK,6BAA6B,CAAC;oBACnE,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,KAAK,GAAG,EACvC,CAAC;oBACD,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,CAAC,CAAA;gBACxB,CAAC;YACH,CAAC;YAED,oDAAoD;YACpD,IAAI,IAAI,CAAC,IAAI,KAAK,iBAAiB,EAAE,CAAC;gBACpC,MAAM,MAAM,GAAG,IAAA,iCAAiB,EAAC,IAAI,CAAC,CAAA;gBACtC,IAAI,MAAM,EAAE,IAAI,KAAK,WAAW,IAAI,MAAM,EAAE,IAAI,KAAK,KAAK,EAAE,CAAC;oBAC3D,MAAM,IAAI,GAAG,IAAA,gCAAgB,EAAC,IAAI,CAAC,CAAA;oBACnC,IAAI,IAAI,CAAC,MAAM,IAAI,CAAC,EAAE,CAAC;wBACrB,MAAM,UAAU,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,WAAW,EAAE,CAAA;wBAClE,MAAM,WAAW,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CAAA;wBACrD,IAAI,UAAU,KAAK,6BAA6B,IAAI,WAAW,KAAK,GAAG,EAAE,CAAC;4BACxE,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,CAAC,CAAA;wBACxB,CAAC;oBACH,CAAC;gBACH,CAAC;YACH,CAAC;QACH,CAAC;QAED,OAAO,OAAO,CAAA;IAChB,CAAC;CACF,CAAC,CAAA"}

package/dist/detect/ast-rules/helpers/call-analysis.d.ts

@@ -0,0 +1,62 @@
+/**
+ * AST Call Expression Analysis Helpers
+ *
+ * Resolves call targets, extracts arguments, detects method calls,
+ * and analyzes object literals for security-relevant patterns.
+ */
+import type Parser from 'tree-sitter';
+export interface ResolvedCallTarget {
+    /** 'direct' = fn(), 'member' = obj.fn(), 'computed' = obj[fn]() */
+    type: 'direct' | 'member' | 'computed' | 'new';
+    /** The function/method name being called */
+    name: string;
+    /** For member calls, the object expression text */
+    object?: string;
+    /** Full chain: 'a.b.c' */
+    fullChain: string;
+    /** Whether this was resolved via an alias */
+    aliased: boolean;
+}
+/**
+ * For a call_expression node, resolve what function is being called.
+ * Handles direct calls, member expressions, aliases, and imports.
+ */
+export declare function resolveCallTarget(node: Parser.SyntaxNode, aliases?: Map<string, string>): ResolvedCallTarget | null;
+/**
+ * Get the argument list from a call expression.
+ * Returns array of argument nodes.
+ */
+export declare function getCallArguments(node: Parser.SyntaxNode): Parser.SyntaxNode[];
+/**
+ * Get the Nth argument from a call expression (0-indexed).
+ */
+export declare function getCallArgument(node: Parser.SyntaxNode, index: number): Parser.SyntaxNode | null;
+/**
+ * Check if a call_expression matches `obj.method(...)` pattern.
+ * objectPattern can be a string or regex to match the object.
+ */
+export declare function isMethodCallOn(node: Parser.SyntaxNode, objectPattern: string | RegExp, methodName: string | string[]): boolean;
+/**
+ * Extract the full receiver chain from nested member expressions.
+ * e.g., `a.b.c.d()` -> ['a', 'b', 'c', 'd']
+ */
+export declare function getReceiverChain(node: Parser.SyntaxNode): string[];
+/**
+ * Check if a node is a `new ClassName(...)` call.
+ */
+export declare function isConstructorCall(node: Parser.SyntaxNode, className: string | string[]): boolean;
+/**
+ * Extract a property value from an object literal node.
+ * Handles shorthand, regular, and computed properties.
+ */
+export declare function getObjectLiteralProperty(node: Parser.SyntaxNode, key: string): Parser.SyntaxNode | null;
+/**
+ * Extract all key-value pairs from an object literal.
+ * Returns a map of key name -> value node.
+ */
+export declare function getObjectLiteralProperties(node: Parser.SyntaxNode): Map<string, Parser.SyntaxNode>;
+/**
+ * Find all call expressions in a subtree that match a given target.
+ */
+export declare function findCallsTo(root: Parser.SyntaxNode, targetName: string | string[], aliases?: Map<string, string>): Parser.SyntaxNode[];
+//# sourceMappingURL=call-analysis.d.ts.map

package/dist/detect/ast-rules/helpers/call-analysis.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"call-analysis.d.ts","sourceRoot":"","sources":["../../../../src/detect/ast-rules/helpers/call-analysis.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,KAAK,MAAM,MAAM,aAAa,CAAA;AAQrC,MAAM,WAAW,kBAAkB;IACjC,mEAAmE;IACnE,IAAI,EAAE,QAAQ,GAAG,QAAQ,GAAG,UAAU,GAAG,KAAK,CAAA;IAC9C,4CAA4C;IAC5C,IAAI,EAAE,MAAM,CAAA;IACZ,mDAAmD;IACnD,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,0BAA0B;IAC1B,SAAS,EAAE,MAAM,CAAA;IACjB,6CAA6C;IAC7C,OAAO,EAAE,OAAO,CAAA;CACjB;AAED;;;GAGG;AACH,wBAAgB,iBAAiB,CAC/B,IAAI,EAAE,MAAM,CAAC,UAAU,EACvB,OAAO,CAAC,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,GAC5B,kBAAkB,GAAG,IAAI,CA+C3B;AAMD;;;GAGG;AACH,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,MAAM,CAAC,UAAU,GAAG,MAAM,CAAC,UAAU,EAAE,CAK7E;AAED;;GAEG;AACH,wBAAgB,eAAe,CAAC,IAAI,EAAE,MAAM,CAAC,UAAU,EAAE,KAAK,EAAE,MAAM,GAAG,MAAM,CAAC,UAAU,GAAG,IAAI,CAGhG;AAMD;;;GAGG;AACH,wBAAgB,cAAc,CAC5B,IAAI,EAAE,MAAM,CAAC,UAAU,EACvB,aAAa,EAAE,MAAM,GAAG,MAAM,EAC9B,UAAU,EAAE,MAAM,GAAG,MAAM,EAAE,GAC5B,OAAO,CAkBT;AAED;;;GAGG;AACH,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,MAAM,CAAC,UAAU,GAAG,MAAM,EAAE,CAkBlE;AAED;;GAEG;AACH,wBAAgB,iBAAiB,CAC/B,IAAI,EAAE,MAAM,CAAC,UAAU,EACvB,SAAS,EAAE,MAAM,GAAG,MAAM,EAAE,GAC3B,OAAO,CAOT;AAMD;;;GAGG;AACH,wBAAgB,wBAAwB,CACtC,IAAI,EAAE,MAAM,CAAC,UAAU,EACvB,GAAG,EAAE,MAAM,GACV,MAAM,CAAC,UAAU,GAAG,IAAI,CAgB1B;AAED;;;GAGG;AACH,wBAAgB,0BAA0B,CACxC,IAAI,EAAE,MAAM,CAAC,UAAU,GACtB,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,UAAU,CAAC,CAkBhC;AAED;;GAEG;AACH,wBAAgB,WAAW,CACzB,IAAI,EAAE,MAAM,CAAC,UAAU,EACvB,UAAU,EAAE,MAAM,GAAG,MAAM,EAAE,EAC7B,OAAO,CAAC,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,GAC5B,MAAM,CAAC,UAAU,EAAE,CAerB"}

package/dist/detect/ast-rules/helpers/call-analysis.js

@@ -0,0 +1,217 @@
+"use strict";
+/**
+ * AST Call Expression Analysis Helpers
+ *
+ * Resolves call targets, extracts arguments, detects method calls,
+ * and analyzes object literals for security-relevant patterns.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.resolveCallTarget = resolveCallTarget;
+exports.getCallArguments = getCallArguments;
+exports.getCallArgument = getCallArgument;
+exports.isMethodCallOn = isMethodCallOn;
+exports.getReceiverChain = getReceiverChain;
+exports.isConstructorCall = isConstructorCall;
+exports.getObjectLiteralProperty = getObjectLiteralProperty;
+exports.getObjectLiteralProperties = getObjectLiteralProperties;
+exports.findCallsTo = findCallsTo;
+const ast_1 = require("../../../parse/ast");
+/**
+ * For a call_expression node, resolve what function is being called.
+ * Handles direct calls, member expressions, aliases, and imports.
+ */
+function resolveCallTarget(node, aliases) {
+    if (node.type !== 'call_expression' && node.type !== 'new_expression')
+        return null;
+    const fn = node.childForFieldName('function')
+        ?? node.childForFieldName('constructor');
+    if (!fn)
+        return null;
+    const isNew = node.type === 'new_expression';
+    // Direct call: functionName(...)
+    if (fn.type === 'identifier') {
+        const aliasTarget = aliases?.get(fn.text);
+        if (aliasTarget) {
+            // Aliased: const e = eval; e() -> resolves to eval
+            const parts = aliasTarget.split('.');
+            return {
+                type: isNew ? 'new' : (parts.length > 1 ? 'member' : 'direct'),
+                name: parts[parts.length - 1],
+                object: parts.length > 1 ? parts.slice(0, -1).join('.') : undefined,
+                fullChain: aliasTarget,
+                aliased: true,
+            };
+        }
+        return {
+            type: isNew ? 'new' : 'direct',
+            name: fn.text,
+            fullChain: fn.text,
+            aliased: false,
+        };
+    }
+    // Member call: obj.method(...)
+    if (fn.type === 'member_expression') {
+        const prop = fn.childForFieldName('property');
+        const obj = fn.childForFieldName('object');
+        if (!prop)
+            return null;
+        return {
+            type: isNew ? 'new' : 'member',
+            name: prop.text,
+            object: obj?.text,
+            fullChain: fn.text,
+            aliased: false,
+        };
+    }
+    return null;
+}
+// ============================================================================
+// Argument Extraction
+// ============================================================================
+/**
+ * Get the argument list from a call expression.
+ * Returns array of argument nodes.
+ */
+function getCallArguments(node) {
+    if (node.type !== 'call_expression' && node.type !== 'new_expression')
+        return [];
+    const args = node.childForFieldName('arguments');
+    if (!args)
+        return [];
+    return args.namedChildren;
+}
+/**
+ * Get the Nth argument from a call expression (0-indexed).
+ */
+function getCallArgument(node, index) {
+    const args = getCallArguments(node);
+    return args[index] ?? null;
+}
+// ============================================================================
+// Method Call Matching
+// ============================================================================
+/**
+ * Check if a call_expression matches `obj.method(...)` pattern.
+ * objectPattern can be a string or regex to match the object.
+ */
+function isMethodCallOn(node, objectPattern, methodName) {
+    if (node.type !== 'call_expression')
+        return false;
+    const fn = node.childForFieldName('function');
+    if (!fn || fn.type !== 'member_expression')
+        return false;
+    const prop = fn.childForFieldName('property');
+    const obj = fn.childForFieldName('object');
+    if (!prop || !obj)
+        return false;
+    // Check method name
+    const methods = Array.isArray(methodName) ? methodName : [methodName];
+    if (!methods.includes(prop.text))
+        return false;
+    // Check object
+    if (typeof objectPattern === 'string') {
+        return obj.text === objectPattern;
+    }
+    return objectPattern.test(obj.text);
+}
+/**
+ * Extract the full receiver chain from nested member expressions.
+ * e.g., `a.b.c.d()` -> ['a', 'b', 'c', 'd']
+ */
+function getReceiverChain(node) {
+    const chain = [];
+    function walk(n) {
+        if (n.type === 'member_expression') {
+            const obj = n.childForFieldName('object');
+            const prop = n.childForFieldName('property');
+            if (obj)
+                walk(obj);
+            if (prop)
+                chain.push(prop.text);
+        }
+        else if (n.type === 'identifier') {
+            chain.push(n.text);
+        }
+        else if (n.type === 'this') {
+            chain.push('this');
+        }
+    }
+    walk(node);
+    return chain;
+}
+/**
+ * Check if a node is a `new ClassName(...)` call.
+ */
+function isConstructorCall(node, className) {
+    if (node.type !== 'new_expression')
+        return false;
+    const ctor = node.childForFieldName('constructor');
+    if (!ctor)
+        return false;
+    const names = Array.isArray(className) ? className : [className];
+    return names.includes(ctor.text);
+}
+// ============================================================================
+// Object Literal Analysis
+// ============================================================================
+/**
+ * Extract a property value from an object literal node.
+ * Handles shorthand, regular, and computed properties.
+ */
+function getObjectLiteralProperty(node, key) {
+    if (node.type !== 'object')
+        return null;
+    for (const child of node.namedChildren) {
+        if (child.type === 'pair') {
+            const keyNode = child.childForFieldName('key');
+            if (keyNode?.text === key) {
+                return child.childForFieldName('value');
+            }
+        }
+        if (child.type === 'shorthand_property_identifier') {
+            if (child.text === key)
+                return child;
+        }
+    }
+    return null;
+}
+/**
+ * Extract all key-value pairs from an object literal.
+ * Returns a map of key name -> value node.
+ */
+function getObjectLiteralProperties(node) {
+    const props = new Map();
+    if (node.type !== 'object')
+        return props;
+    for (const child of node.namedChildren) {
+        if (child.type === 'pair') {
+            const keyNode = child.childForFieldName('key');
+            const valNode = child.childForFieldName('value');
+            if (keyNode && valNode) {
+                props.set(keyNode.text, valNode);
+            }
+        }
+        if (child.type === 'shorthand_property_identifier') {
+            props.set(child.text, child);
+        }
+    }
+    return props;
+}
+/**
+ * Find all call expressions in a subtree that match a given target.
+ */
+function findCallsTo(root, targetName, aliases) {
+    const targets = Array.isArray(targetName) ? targetName : [targetName];
+    const results = [];
+    (0, ast_1.walkAST)(root, (node) => {
+        if (node.type === 'call_expression') {
+            const resolved = resolveCallTarget(node, aliases);
+            if (resolved && targets.includes(resolved.name)) {
+                results.push(node);
+            }
+        }
+        return false;
+    });
+    return results;
+}
+//# sourceMappingURL=call-analysis.js.map

package/dist/detect/ast-rules/helpers/call-analysis.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"call-analysis.js","sourceRoot":"","sources":["../../../../src/detect/ast-rules/helpers/call-analysis.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;AA2BH,8CAkDC;AAUD,4CAKC;AAKD,0CAGC;AAUD,wCAsBC;AAMD,4CAkBC;AAKD,8CAUC;AAUD,4DAmBC;AAMD,gEAoBC;AAKD,kCAmBC;AAvPD,4CAA4C;AAoB5C;;;GAGG;AACH,SAAgB,iBAAiB,CAC/B,IAAuB,EACvB,OAA6B;IAE7B,IAAI,IAAI,CAAC,IAAI,KAAK,iBAAiB,IAAI,IAAI,CAAC,IAAI,KAAK,gBAAgB;QAAE,OAAO,IAAI,CAAA;IAElF,MAAM,EAAE,GAAG,IAAI,CAAC,iBAAiB,CAAC,UAAU,CAAC;WACxC,IAAI,CAAC,iBAAiB,CAAC,aAAa,CAAC,CAAA;IAC1C,IAAI,CAAC,EAAE;QAAE,OAAO,IAAI,CAAA;IAEpB,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,KAAK,gBAAgB,CAAA;IAE5C,iCAAiC;IACjC,IAAI,EAAE,CAAC,IAAI,KAAK,YAAY,EAAE,CAAC;QAC7B,MAAM,WAAW,GAAG,OAAO,EAAE,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,CAAA;QACzC,IAAI,WAAW,EAAE,CAAC;YAChB,mDAAmD;YACnD,MAAM,KAAK,GAAG,WAAW,CAAC,KAAK,CAAC,GAAG,CAAC,CAAA;YACpC,OAAO;gBACL,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC;gBAC9D,IAAI,EAAE,KAAK,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC;gBAC7B,MAAM,EAAE,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS;gBACnE,SAAS,EAAE,WAAW;gBACtB,OAAO,EAAE,IAAI;aACd,CAAA;QACH,CAAC;QACD,OAAO;YACL,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,QAAQ;YAC9B,IAAI,EAAE,EAAE,CAAC,IAAI;YACb,SAAS,EAAE,EAAE,CAAC,IAAI;YAClB,OAAO,EAAE,KAAK;SACf,CAAA;IACH,CAAC;IAED,+BAA+B;IAC/B,IAAI,EAAE,CAAC,IAAI,KAAK,mBAAmB,EAAE,CAAC;QACpC,MAAM,IAAI,GAAG,EAAE,CAAC,iBAAiB,CAAC,UAAU,CAAC,CAAA;QAC7C,MAAM,GAAG,GAAG,EAAE,CAAC,iBAAiB,CAAC,QAAQ,CAAC,CAAA;QAC1C,IAAI,CAAC,IAAI;YAAE,OAAO,IAAI,CAAA;QAEtB,OAAO;YACL,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,QAAQ;YAC9B,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,MAAM,EAAE,GAAG,EAAE,IAAI;YACjB,SAAS,EAAE,EAAE,CAAC,IAAI;YAClB,OAAO,EAAE,KAAK;SACf,CAAA;IACH,CAAC;IAED,OAAO,IAAI,CAAA;AACb,CAAC;AAED,+EAA+E;AAC/E,sBAAsB;AACtB,+EAA+E;AAE/E;;;GAGG;AACH,SAAgB,gBAAgB,CAAC,IAAuB;IACtD,IAAI,IAAI,CAAC,IAAI,KAAK,iBAAiB,IAAI,IAAI,CAAC,IAAI,KAAK,gBAAgB;QAAE,OAAO,EAAE,CAAA;IAChF,MAAM,IAAI,GAAG,IAAI,CAAC,iBAAiB,CAAC,WAAW,CAAC,CAAA;IAChD,IAAI,CAAC,IAAI;QAAE,OAAO,EAAE,CAAA;IACpB,OAAO,IAAI,CAAC,aAAa,CAAA;AAC3B,CAAC;AAED;;GAEG;AACH,SAAgB,eAAe,CAAC,IAAuB,EAAE,KAAa;IACpE,MAAM,IAAI,GAAG,gBAAgB,CAAC,IAAI,CAAC,CAAA;IACnC,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,IAAI,CAAA;AAC5B,CAAC;AAED,+EAA+E;AAC/E,uBAAuB;AACvB,+EAA+E;AAE/E;;;GAGG;AACH,SAAgB,cAAc,CAC5B,IAAuB,EACvB,aAA8B,EAC9B,UAA6B;IAE7B,IAAI,IAAI,CAAC,IAAI,KAAK,iBAAiB;QAAE,OAAO,KAAK,CAAA;IACjD,MAAM,EAAE,GAAG,IAAI,CAAC,iBAAiB,CAAC,UAAU,CAAC,CAAA;IAC7C,IAAI,CAAC,EAAE,IAAI,EAAE,CAAC,IAAI,KAAK,mBAAmB;QAAE,OAAO,KAAK,CAAA;IAExD,MAAM,IAAI,GAAG,EAAE,CAAC,iBAAiB,CAAC,UAAU,CAAC,CAAA;IAC7C,MAAM,GAAG,GAAG,EAAE,CAAC,iBAAiB,CAAC,QAAQ,CAAC,CAAA;IAC1C,IAAI,CAAC,IAAI,IAAI,CAAC,GAAG;QAAE,OAAO,KAAK,CAAA;IAE/B,oBAAoB;IACpB,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAA;IACrE,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,KAAK,CAAA;IAE9C,eAAe;IACf,IAAI,OAAO,aAAa,KAAK,QAAQ,EAAE,CAAC;QACtC,OAAO,GAAG,CAAC,IAAI,KAAK,aAAa,CAAA;IACnC,CAAC;IACD,OAAO,aAAa,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAA;AACrC,CAAC;AAED;;;GAGG;AACH,SAAgB,gBAAgB,CAAC,IAAuB;IACtD,MAAM,KAAK,GAAa,EAAE,CAAA;IAE1B,SAAS,IAAI,CAAC,CAAoB;QAChC,IAAI,CAAC,CAAC,IAAI,KAAK,mBAAmB,EAAE,CAAC;YACnC,MAAM,GAAG,GAAG,CAAC,CAAC,iBAAiB,CAAC,QAAQ,CAAC,CAAA;YACzC,MAAM,IAAI,GAAG,CAAC,CAAC,iBAAiB,CAAC,UAAU,CAAC,CAAA;YAC5C,IAAI,GAAG;gBAAE,IAAI,CAAC,GAAG,CAAC,CAAA;YAClB,IAAI,IAAI;gBAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QACjC,CAAC;aAAM,IAAI,CAAC,CAAC,IAAI,KAAK,YAAY,EAAE,CAAC;YACnC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAA;QACpB,CAAC;aAAM,IAAI,CAAC,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;YAC7B,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;QACpB,CAAC;IACH,CAAC;IAED,IAAI,CAAC,IAAI,CAAC,CAAA;IACV,OAAO,KAAK,CAAA;AACd,CAAC;AAED;;GAEG;AACH,SAAgB,iBAAiB,CAC/B,IAAuB,EACvB,SAA4B;IAE5B,IAAI,IAAI,CAAC,IAAI,KAAK,gBAAgB;QAAE,OAAO,KAAK,CAAA;IAChD,MAAM,IAAI,GAAG,IAAI,CAAC,iBAAiB,CAAC,aAAa,CAAC,CAAA;IAClD,IAAI,CAAC,IAAI;QAAE,OAAO,KAAK,CAAA;IAEvB,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAA;IAChE,OAAO,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;AAClC,CAAC;AAED,+EAA+E;AAC/E,0BAA0B;AAC1B,+EAA+E;AAE/E;;;GAGG;AACH,SAAgB,wBAAwB,CACtC,IAAuB,EACvB,GAAW;IAEX,IAAI,IAAI,CAAC,IAAI,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAA;IAEvC,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,aAAa,EAAE,CAAC;QACvC,IAAI,KAAK,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;YAC1B,MAAM,OAAO,GAAG,KAAK,CAAC,iBAAiB,CAAC,KAAK,CAAC,CAAA;YAC9C,IAAI,OAAO,EAAE,IAAI,KAAK,GAAG,EAAE,CAAC;gBAC1B,OAAO,KAAK,CAAC,iBAAiB,CAAC,OAAO,CAAC,CAAA;YACzC,CAAC;QACH,CAAC;QACD,IAAI,KAAK,CAAC,IAAI,KAAK,+BAA+B,EAAE,CAAC;YACnD,IAAI,KAAK,CAAC,IAAI,KAAK,GAAG;gBAAE,OAAO,KAAK,CAAA;QACtC,CAAC;IACH,CAAC;IAED,OAAO,IAAI,CAAA;AACb,CAAC;AAED;;;GAGG;AACH,SAAgB,0BAA0B,CACxC,IAAuB;IAEvB,MAAM,KAAK,GAAG,IAAI,GAAG,EAA6B,CAAA;IAClD,IAAI,IAAI,CAAC,IAAI,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAA;IAExC,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,aAAa,EAAE,CAAC;QACvC,IAAI,KAAK,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;YAC1B,MAAM,OAAO,GAAG,KAAK,CAAC,iBAAiB,CAAC,KAAK,CAAC,CAAA;YAC9C,MAAM,OAAO,GAAG,KAAK,CAAC,iBAAiB,CAAC,OAAO,CAAC,CAAA;YAChD,IAAI,OAAO,IAAI,OAAO,EAAE,CAAC;gBACvB,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,CAAA;YAClC,CAAC;QACH,CAAC;QACD,IAAI,KAAK,CAAC,IAAI,KAAK,+BAA+B,EAAE,CAAC;YACnD,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,CAAA;QAC9B,CAAC;IACH,CAAC;IAED,OAAO,KAAK,CAAA;AACd,CAAC;AAED;;GAEG;AACH,SAAgB,WAAW,CACzB,IAAuB,EACvB,UAA6B,EAC7B,OAA6B;IAE7B,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAA;IACrE,MAAM,OAAO,GAAwB,EAAE,CAAA;IAEvC,IAAA,aAAO,EAAC,IAAI,EAAE,CAAC,IAAI,EAAE,EAAE;QACrB,IAAI,IAAI,CAAC,IAAI,KAAK,iBAAiB,EAAE,CAAC;YACpC,MAAM,QAAQ,GAAG,iBAAiB,CAAC,IAAI,EAAE,OAAO,CAAC,CAAA;YACjD,IAAI,QAAQ,IAAI,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;gBAChD,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;YACpB,CAAC;QACH,CAAC;QACD,OAAO,KAAK,CAAA;IACd,CAAC,CAAC,CAAA;IAEF,OAAO,OAAO,CAAA;AAChB,CAAC"}

package/dist/detect/ast-rules/helpers/context-detection.d.ts

@@ -0,0 +1,33 @@
+/**
+ * AST Context Detection Helpers
+ *
+ * Detects file-level and function-level context: LLM code,
+ * route handlers, middleware, server/client directives, auth checks.
+ */
+import type Parser from 'tree-sitter';
+export declare function isLLMContextFile(root: Parser.SyntaxNode, content?: string): boolean;
+/**
+ * Detect if a function node is an Express/Next.js/Fastify route handler.
+ * Checks: parameter patterns, export names, decorator patterns.
+ */
+export declare function isRouteHandler(fnNode: Parser.SyntaxNode): boolean;
+/**
+ * Detect app.use() middleware setup patterns in the root.
+ */
+export declare function hasMiddlewarePattern(root: Parser.SyntaxNode): boolean;
+/**
+ * Detect 'use client' or 'use server' directives at the top of the file.
+ */
+export declare function getFileDirective(root: Parser.SyntaxNode): 'use client' | 'use server' | null;
+/**
+ * Detect if a file is server-side from AST.
+ * Checks: 'use server' directive, server-only imports, Node.js APIs.
+ */
+export declare function isServerFile(root: Parser.SyntaxNode): boolean;
+/**
+ * Find auth check calls within a function body.
+ * Returns the call nodes that appear to be auth checks.
+ */
+export declare function findAuthChecks(fnBody: Parser.SyntaxNode): Parser.SyntaxNode[];
+export declare function hasAuthImports(root: Parser.SyntaxNode, content?: string): boolean;
+//# sourceMappingURL=context-detection.d.ts.map

package/dist/detect/ast-rules/helpers/context-detection.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"context-detection.d.ts","sourceRoot":"","sources":["../../../../src/detect/ast-rules/helpers/context-detection.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,KAAK,MAAM,MAAM,aAAa,CAAA;AA+BrC,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,MAAM,CAAC,UAAU,EAAE,OAAO,CAAC,EAAE,MAAM,GAAG,OAAO,CAiDnF;AAMD;;;GAGG;AACH,wBAAgB,cAAc,CAAC,MAAM,EAAE,MAAM,CAAC,UAAU,GAAG,OAAO,CAwCjE;AAMD;;GAEG;AACH,wBAAgB,oBAAoB,CAAC,IAAI,EAAE,MAAM,CAAC,UAAU,GAAG,OAAO,CAarE;AAMD;;GAEG;AACH,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,MAAM,CAAC,UAAU,GAAG,YAAY,GAAG,YAAY,GAAG,IAAI,CAe5F;AAED;;;GAGG;AACH,wBAAgB,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,UAAU,GAAG,OAAO,CAc7D;AAeD;;;GAGG;AACH,wBAAgB,cAAc,CAAC,MAAM,EAAE,MAAM,CAAC,UAAU,GAAG,MAAM,CAAC,UAAU,EAAE,CAkC7E;AAOD,wBAAgB,cAAc,CAAC,IAAI,EAAE,MAAM,CAAC,UAAU,EAAE,OAAO,CAAC,EAAE,MAAM,GAAG,OAAO,CAajF"}