@oni.bot/core 0.8.0 → 1.0.0

package/dist/sentinel/triage/analyzers/pattern-analyzer.js

@@ -0,0 +1,180 @@
+const PATTERN_RULES = [
+    {
+        regex: /:\s*any\b/g,
+        message: "Explicit `any` type annotation weakens type safety",
+        suggestion: "Replace with a more specific type or `unknown` if the type is truly unknown",
+        severity: "warning",
+    },
+    {
+        regex: /\bas\s+any\b/g,
+        message: "`as any` cast disables type checking for this expression",
+        suggestion: "Use a proper type assertion or refactor to avoid the cast",
+        severity: "warning",
+    },
+    {
+        regex: /@ts-ignore\b/g,
+        message: "`@ts-ignore` suppresses TypeScript errors without fixing them",
+        suggestion: "Fix the underlying type error instead of suppressing it",
+        severity: "warning",
+    },
+    {
+        regex: /@ts-nocheck\b/g,
+        message: "`@ts-nocheck` disables type checking for the entire file",
+        suggestion: "Remove @ts-nocheck and fix the type errors in this file",
+        severity: "error",
+    },
+    {
+        regex: /catch\s*\([^)]*\)\s*\{\s*\}/g,
+        message: "Empty catch block silently swallows errors",
+        suggestion: "Log the error or rethrow it; never silently ignore exceptions",
+        severity: "warning",
+    },
+    {
+        regex: /\bconsole\.log\s*\(/g,
+        message: "console.log() left in non-test source code",
+        suggestion: "Remove debug logs or replace with a proper logging utility",
+        severity: "info",
+        skipTestFiles: true,
+    },
+];
+function isTestFile(file) {
+    return /\.(test|spec)\.[tj]sx?$/.test(file) || /__tests__/.test(file);
+}
+function isLoopLine(line) {
+    return /\bfor\s*\(/.test(line);
+}
+const MAGIC_NUMBER_SAFE = new Set(["0", "1", "-1", "2", "0.0", "1.0", "100"]);
+const POOR_NAMES = new Set(["data", "temp", "tmp", "val", "obj", "thing", "stuff", "foo", "bar", "baz"]);
+const MAGIC_NUMBER_REGEX = /(?<![.\w])(-?\d+\.?\d*)(?![.\w])/g;
+export class PatternAnalyzer {
+    name = "pattern";
+    weight = 0.10;
+    async analyze(file, content, _rootDir) {
+        const lines = content.split("\n");
+        const findings = [];
+        const testFile = isTestFile(file);
+        for (const rule of PATTERN_RULES) {
+            if (rule.skipTestFiles && testFile)
+                continue;
+            for (let i = 0; i < lines.length; i++) {
+                const line = lines[i];
+                rule.regex.lastIndex = 0;
+                if (rule.regex.test(line)) {
+                    findings.push({
+                        id: `pattern-${rule.message.slice(0, 20).replace(/\s+/g, "-")}-${file}-${i + 1}`,
+                        file,
+                        line: i + 1,
+                        severity: rule.severity,
+                        category: "style",
+                        message: rule.message,
+                        suggestion: rule.suggestion,
+                        confidence: 0.8,
+                        agent: "pattern",
+                    });
+                }
+            }
+        }
+        // --- Magic number detection ---
+        for (let i = 0; i < lines.length; i++) {
+            const line = lines[i];
+            // Skip comment lines
+            const trimmed = line.trim();
+            if (trimmed.startsWith("//") || trimmed.startsWith("/*") || trimmed.startsWith("*"))
+                continue;
+            // Skip import lines
+            if (/^\s*import\b/.test(line))
+                continue;
+            // Skip const/let/var declarations (named constants are fine)
+            if (/^\s*(const|let|var)\s/.test(line))
+                continue;
+            MAGIC_NUMBER_REGEX.lastIndex = 0;
+            let match;
+            let flagged = false;
+            while ((match = MAGIC_NUMBER_REGEX.exec(line)) !== null && !flagged) {
+                const num = match[1];
+                if (!MAGIC_NUMBER_SAFE.has(num)) {
+                    flagged = true;
+                    findings.push({
+                        id: `pattern-magic-number-${file}-${i + 1}`,
+                        file,
+                        line: i + 1,
+                        severity: "info",
+                        category: "style",
+                        message: `Magic number ${num} — consider extracting to a named constant`,
+                        suggestion: "Extract the literal into a named constant to document its intent",
+                        confidence: 0.65,
+                        agent: "pattern",
+                    });
+                }
+            }
+        }
+        // --- Poor naming detection ---
+        for (let i = 0; i < lines.length; i++) {
+            const line = lines[i];
+            // Only check inside const/let/var declarations
+            const declMatch = /^\s*(const|let|var)\s+([a-zA-Z_$][a-zA-Z0-9_$]*)/.exec(line);
+            if (!declMatch)
+                continue;
+            const varName = declMatch[2];
+            // Generic name check
+            if (POOR_NAMES.has(varName)) {
+                findings.push({
+                    id: `pattern-poor-naming-${file}-${i + 1}`,
+                    file,
+                    line: i + 1,
+                    severity: "info",
+                    category: "style",
+                    message: `Poor variable naming: "${varName}" is too generic`,
+                    suggestion: "Use a descriptive name that conveys the variable's purpose",
+                    confidence: 0.7,
+                    agent: "pattern",
+                });
+                continue;
+            }
+            // Single-letter variable check (skip loop iterators)
+            if (/^[a-z]$/.test(varName) && !isLoopLine(line)) {
+                findings.push({
+                    id: `pattern-single-letter-${file}-${i + 1}`,
+                    file,
+                    line: i + 1,
+                    severity: "info",
+                    category: "style",
+                    message: `Single-letter variable name "${varName}" is not descriptive`,
+                    suggestion: "Use a descriptive name that conveys the variable's purpose",
+                    confidence: 0.6,
+                    agent: "pattern",
+                });
+            }
+        }
+        // --- Comment density check ---
+        if (!testFile && lines.length > 100) {
+            const commentLines = lines.filter(l => {
+                const t = l.trim();
+                return t.startsWith("//") || t.startsWith("/*") || t.startsWith("*");
+            }).length;
+            const density = commentLines / lines.length;
+            if (density < 0.02) {
+                findings.push({
+                    id: `pattern-low-comment-density-${file}`,
+                    file,
+                    line: 1,
+                    severity: "info",
+                    category: "style",
+                    message: `Low comment density (${(density * 100).toFixed(1)}%) — large files benefit from explanatory comments`,
+                    suggestion: "Add comments explaining the purpose of non-obvious logic and complex sections",
+                    confidence: 0.6,
+                    agent: "pattern",
+                });
+            }
+        }
+        const score = Math.min(100, findings.length * 10);
+        return {
+            analyzer: this.name,
+            file,
+            score,
+            findings,
+            metadata: { matchCount: findings.length },
+        };
+    }
+}
+//# sourceMappingURL=pattern-analyzer.js.map

package/dist/sentinel/triage/analyzers/pattern-analyzer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pattern-analyzer.js","sourceRoot":"","sources":["../../../../src/sentinel/triage/analyzers/pattern-analyzer.ts"],"names":[],"mappings":"AAUA,MAAM,aAAa,GAAkB;IACnC;QACE,KAAK,EAAE,YAAY;QACnB,OAAO,EAAE,oDAAoD;QAC7D,UAAU,EAAE,6EAA6E;QACzF,QAAQ,EAAE,SAAS;KACpB;IACD;QACE,KAAK,EAAE,eAAe;QACtB,OAAO,EAAE,0DAA0D;QACnE,UAAU,EAAE,2DAA2D;QACvE,QAAQ,EAAE,SAAS;KACpB;IACD;QACE,KAAK,EAAE,eAAe;QACtB,OAAO,EAAE,+DAA+D;QACxE,UAAU,EAAE,yDAAyD;QACrE,QAAQ,EAAE,SAAS;KACpB;IACD;QACE,KAAK,EAAE,gBAAgB;QACvB,OAAO,EAAE,0DAA0D;QACnE,UAAU,EAAE,yDAAyD;QACrE,QAAQ,EAAE,OAAO;KAClB;IACD;QACE,KAAK,EAAE,8BAA8B;QACrC,OAAO,EAAE,4CAA4C;QACrD,UAAU,EAAE,+DAA+D;QAC3E,QAAQ,EAAE,SAAS;KACpB;IACD;QACE,KAAK,EAAE,sBAAsB;QAC7B,OAAO,EAAE,4CAA4C;QACrD,UAAU,EAAE,4DAA4D;QACxE,QAAQ,EAAE,MAAM;QAChB,aAAa,EAAE,IAAI;KACpB;CACF,CAAC;AAEF,SAAS,UAAU,CAAC,IAAY;IAC9B,OAAO,yBAAyB,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACxE,CAAC;AAED,SAAS,UAAU,CAAC,IAAY;IAC9B,OAAO,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACjC,CAAC;AAED,MAAM,iBAAiB,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC;AAC9E,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC;AACzG,MAAM,kBAAkB,GAAG,mCAAmC,CAAC;AAE/D,MAAM,OAAO,eAAe;IAC1B,IAAI,GAAG,SAAS,CAAC;IACjB,MAAM,GAAG,IAAI,CAAC;IAEd,KAAK,CAAC,OAAO,CAAC,IAAY,EAAE,OAAe,EAAE,QAAgB;QAC3D,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAClC,MAAM,QAAQ,GAAc,EAAE,CAAC;QAC/B,MAAM,QAAQ,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC;QAElC,KAAK,MAAM,IAAI,IAAI,aAAa,EAAE,CAAC;YACjC,IAAI,IAAI,CAAC,aAAa,IAAI,QAAQ;gBAAE,SAAS;YAE7C,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;gBACtC,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;gBACtB,IAAI,CAAC,KAAK,CAAC,SAAS,GAAG,CAAC,CAAC;gBACzB,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;oBAC1B,QAAQ,CAAC,IAAI,CAAC;wBACZ,EAAE,EAAE,WAAW,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,IAAI,IAAI,IAAI,CAAC,GAAG,CAAC,EAAE;wBAChF,IAAI;wBACJ,IAAI,EAAE,CAAC,GAAG,CAAC;wBACX,QAAQ,EAAE,IAAI,CAAC,QAAQ;wBACvB,QAAQ,EAAE,OAAO;wBACjB,OAAO,EAAE,IAAI,CAAC,OAAO;wBACrB,UAAU,EAAE,IAAI,CAAC,UAAU;wBAC3B,UAAU,EAAE,GAAG;wBACf,KAAK,EAAE,SAAS;qBACjB,CAAC,CAAC;gBACL,CAAC;YACH,CAAC;QACH,CAAC;QAED,iCAAiC;QACjC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YACtC,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;YACtB,qBAAqB;YACrB,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;YAC5B,IAAI,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC;gBAAE,SAAS;YAC9F,oBAAoB;YACpB,IAAI,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC;gBAAE,SAAS;YACxC,6DAA6D;YAC7D,IAAI,uBAAuB,CAAC,IAAI,CAAC,IAAI,CAAC;gBAAE,SAAS;YAEjD,kBAAkB,CAAC,SAAS,GAAG,CAAC,CAAC;YACjC,IAAI,KAA6B,CAAC;YAClC,IAAI,OAAO,GAAG,KAAK,CAAC;YACpB,OAAO,CAAC,KAAK,GAAG,kBAAkB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,KAAK,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;gBACpE,MAAM,GAAG,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;gBACrB,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;oBAChC,OAAO,GAAG,IAAI,CAAC;oBACf,QAAQ,CAAC,IAAI,CAAC;wBACZ,EAAE,EAAE,wBAAwB,IAAI,IAAI,CAAC,GAAG,CAAC,EAAE;wBAC3C,IAAI;wBACJ,IAAI,EAAE,CAAC,GAAG,CAAC;wBACX,QAAQ,EAAE,MAAM;wBAChB,QAAQ,EAAE,OAAO;wBACjB,OAAO,EAAE,gBAAgB,GAAG,4CAA4C;wBACxE,UAAU,EAAE,kEAAkE;wBAC9E,UAAU,EAAE,IAAI;wBAChB,KAAK,EAAE,SAAS;qBACjB,CAAC,CAAC;gBACL,CAAC;YACH,CAAC;QACH,CAAC;QAED,gCAAgC;QAChC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YACtC,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;YACtB,+CAA+C;YAC/C,MAAM,SAAS,GAAG,kDAAkD,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAChF,IAAI,CAAC,SAAS;gBAAE,SAAS;YACzB,MAAM,OAAO,GAAG,SAAS,CAAC,CAAC,CAAC,CAAC;YAE7B,qBAAqB;YACrB,IAAI,UAAU,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;gBAC5B,QAAQ,CAAC,IAAI,CAAC;oBACZ,EAAE,EAAE,uBAAuB,IAAI,IAAI,CAAC,GAAG,CAAC,EAAE;oBAC1C,IAAI;oBACJ,IAAI,EAAE,CAAC,GAAG,CAAC;oBACX,QAAQ,EAAE,MAAM;oBAChB,QAAQ,EAAE,OAAO;oBACjB,OAAO,EAAE,0BAA0B,OAAO,kBAAkB;oBAC5D,UAAU,EAAE,4DAA4D;oBACxE,UAAU,EAAE,GAAG;oBACf,KAAK,EAAE,SAAS;iBACjB,CAAC,CAAC;gBACH,SAAS;YACX,CAAC;YAED,qDAAqD;YACrD,IAAI,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;gBACjD,QAAQ,CAAC,IAAI,CAAC;oBACZ,EAAE,EAAE,yBAAyB,IAAI,IAAI,CAAC,GAAG,CAAC,EAAE;oBAC5C,IAAI;oBACJ,IAAI,EAAE,CAAC,GAAG,CAAC;oBACX,QAAQ,EAAE,MAAM;oBAChB,QAAQ,EAAE,OAAO;oBACjB,OAAO,EAAE,gCAAgC,OAAO,sBAAsB;oBACtE,UAAU,EAAE,4DAA4D;oBACxE,UAAU,EAAE,GAAG;oBACf,KAAK,EAAE,SAAS;iBACjB,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAED,gCAAgC;QAChC,IAAI,CAAC,QAAQ,IAAI,KAAK,CAAC,MAAM,GAAG,GAAG,EAAE,CAAC;YACpC,MAAM,YAAY,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE;gBACpC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;gBACnB,OAAO,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;YACvE,CAAC,CAAC,CAAC,MAAM,CAAC;YACV,MAAM,OAAO,GAAG,YAAY,GAAG,KAAK,CAAC,MAAM,CAAC;YAC5C,IAAI,OAAO,GAAG,IAAI,EAAE,CAAC;gBACnB,QAAQ,CAAC,IAAI,CAAC;oBACZ,EAAE,EAAE,+BAA+B,IAAI,EAAE;oBACzC,IAAI;oBACJ,IAAI,EAAE,CAAC;oBACP,QAAQ,EAAE,MAAM;oBAChB,QAAQ,EAAE,OAAO;oBACjB,OAAO,EAAE,wBAAwB,CAAC,OAAO,GAAG,GAAG,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,oDAAoD;oBAC/G,UAAU,EAAE,+EAA+E;oBAC3F,UAAU,EAAE,GAAG;oBACf,KAAK,EAAE,SAAS;iBACjB,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAED,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,QAAQ,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC;QAElD,OAAO;YACL,QAAQ,EAAE,IAAI,CAAC,IAAI;YACnB,IAAI;YACJ,KAAK;YACL,QAAQ;YACR,QAAQ,EAAE,EAAE,UAAU,EAAE,QAAQ,CAAC,MAAM,EAAE;SAC1C,CAAC;IACJ,CAAC;CACF"}

package/dist/sentinel/triage/analyzers/security-analyzer.d.ts

@@ -0,0 +1,7 @@
+import type { Analyzer, AnalyzerResult } from "../../types.js";
+export declare class SecurityAnalyzer implements Analyzer {
+    name: string;
+    weight: number;
+    analyze(file: string, content: string, _rootDir: string): Promise<AnalyzerResult>;
+}
+//# sourceMappingURL=security-analyzer.d.ts.map

package/dist/sentinel/triage/analyzers/security-analyzer.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"security-analyzer.d.ts","sourceRoot":"","sources":["../../../../src/sentinel/triage/analyzers/security-analyzer.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,QAAQ,EAAE,cAAc,EAAW,MAAM,gBAAgB,CAAC;AAmDxE,qBAAa,gBAAiB,YAAW,QAAQ;IAC/C,IAAI,SAAc;IAClB,MAAM,SAAQ;IAER,OAAO,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,cAAc,CAAC;CAuDxF"}

package/dist/sentinel/triage/analyzers/security-analyzer.js

@@ -0,0 +1,96 @@
+const SECURITY_PATTERNS = [
+    {
+        regex: /\beval\s*\(/g,
+        message: "Use of eval() is a security risk — allows arbitrary code execution",
+        suggestion: "Replace eval() with safer alternatives like JSON.parse() or Function constructors with input validation",
+        severity: "error",
+    },
+    {
+        regex: /\bnew\s+Function\s*\(/g,
+        message: "Use of new Function() allows dynamic code execution",
+        suggestion: "Avoid constructing functions from strings; use predefined functions instead",
+        severity: "error",
+    },
+    {
+        regex: /\.innerHTML\s*=/g,
+        message: "Direct innerHTML assignment can lead to XSS vulnerabilities",
+        suggestion: "Use textContent or sanitize HTML with a trusted library before assignment",
+        severity: "error",
+    },
+    {
+        regex: /\bdocument\.write\s*\(/g,
+        message: "document.write() can be exploited for XSS",
+        suggestion: "Use DOM manipulation methods (createElement, appendChild) instead",
+        severity: "error",
+    },
+    {
+        regex: /\bchild_process\b/g,
+        message: "Use of child_process module — ensure inputs are sanitized to prevent command injection",
+        suggestion: "Validate and escape all user-controlled inputs before passing to child_process",
+        severity: "warning",
+    },
+    {
+        regex: /(?:query|sql)\s*[+=]\s*["'`][^"'`]*\$\{/gi,
+        message: "Potential SQL injection via string concatenation/interpolation",
+        suggestion: "Use parameterized queries or a prepared statement API",
+        severity: "error",
+    },
+];
+// Hardcoded secret: string literal >20 chars near key/secret/token/password keywords
+const SECRET_REGEX = /(?:key|secret|token|password|api_key|apikey|passwd|credential)\s*[=:]\s*["'`]([^"'`]{20,})["'`]/gi;
+export class SecurityAnalyzer {
+    name = "security";
+    weight = 0.25;
+    async analyze(file, content, _rootDir) {
+        const lines = content.split("\n");
+        const findings = [];
+        for (const pattern of SECURITY_PATTERNS) {
+            // Reset lastIndex for global regexes
+            pattern.regex.lastIndex = 0;
+            for (let i = 0; i < lines.length; i++) {
+                const line = lines[i];
+                pattern.regex.lastIndex = 0;
+                if (pattern.regex.test(line)) {
+                    findings.push({
+                        id: `security-${pattern.message.slice(0, 20).replace(/\s+/g, "-")}-${file}-${i + 1}`,
+                        file,
+                        line: i + 1,
+                        severity: pattern.severity,
+                        category: "security",
+                        message: pattern.message,
+                        suggestion: pattern.suggestion,
+                        confidence: 0.9,
+                        agent: "security",
+                    });
+                }
+            }
+        }
+        // Check for hardcoded secrets
+        SECRET_REGEX.lastIndex = 0;
+        for (let i = 0; i < lines.length; i++) {
+            SECRET_REGEX.lastIndex = 0;
+            if (SECRET_REGEX.test(lines[i])) {
+                findings.push({
+                    id: `security-hardcoded-secret-${file}-${i + 1}`,
+                    file,
+                    line: i + 1,
+                    severity: "error",
+                    category: "security",
+                    message: "Hardcoded secret or credential detected in source code",
+                    suggestion: "Move secrets to environment variables or a secrets manager",
+                    confidence: 0.85,
+                    agent: "security",
+                });
+            }
+        }
+        const score = Math.min(100, findings.length * 20);
+        return {
+            analyzer: this.name,
+            file,
+            score,
+            findings,
+            metadata: { matchCount: findings.length },
+        };
+    }
+}
+//# sourceMappingURL=security-analyzer.js.map

package/dist/sentinel/triage/analyzers/security-analyzer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"security-analyzer.js","sourceRoot":"","sources":["../../../../src/sentinel/triage/analyzers/security-analyzer.ts"],"names":[],"mappings":"AASA,MAAM,iBAAiB,GAAsB;IAC3C;QACE,KAAK,EAAE,cAAc;QACrB,OAAO,EAAE,oEAAoE;QAC7E,UAAU,EAAE,yGAAyG;QACrH,QAAQ,EAAE,OAAO;KAClB;IACD;QACE,KAAK,EAAE,wBAAwB;QAC/B,OAAO,EAAE,qDAAqD;QAC9D,UAAU,EAAE,6EAA6E;QACzF,QAAQ,EAAE,OAAO;KAClB;IACD;QACE,KAAK,EAAE,kBAAkB;QACzB,OAAO,EAAE,6DAA6D;QACtE,UAAU,EAAE,2EAA2E;QACvF,QAAQ,EAAE,OAAO;KAClB;IACD;QACE,KAAK,EAAE,yBAAyB;QAChC,OAAO,EAAE,2CAA2C;QACpD,UAAU,EAAE,mEAAmE;QAC/E,QAAQ,EAAE,OAAO;KAClB;IACD;QACE,KAAK,EAAE,oBAAoB;QAC3B,OAAO,EAAE,wFAAwF;QACjG,UAAU,EAAE,gFAAgF;QAC5F,QAAQ,EAAE,SAAS;KACpB;IACD;QACE,KAAK,EAAE,2CAA2C;QAClD,OAAO,EAAE,gEAAgE;QACzE,UAAU,EAAE,uDAAuD;QACnE,QAAQ,EAAE,OAAO;KAClB;CACF,CAAC;AAEF,qFAAqF;AACrF,MAAM,YAAY,GAAG,mGAAmG,CAAC;AAEzH,MAAM,OAAO,gBAAgB;IAC3B,IAAI,GAAG,UAAU,CAAC;IAClB,MAAM,GAAG,IAAI,CAAC;IAEd,KAAK,CAAC,OAAO,CAAC,IAAY,EAAE,OAAe,EAAE,QAAgB;QAC3D,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAClC,MAAM,QAAQ,GAAc,EAAE,CAAC;QAE/B,KAAK,MAAM,OAAO,IAAI,iBAAiB,EAAE,CAAC;YACxC,qCAAqC;YACrC,OAAO,CAAC,KAAK,CAAC,SAAS,GAAG,CAAC,CAAC;YAC5B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;gBACtC,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;gBACtB,OAAO,CAAC,KAAK,CAAC,SAAS,GAAG,CAAC,CAAC;gBAC5B,IAAI,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;oBAC7B,QAAQ,CAAC,IAAI,CAAC;wBACZ,EAAE,EAAE,YAAY,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,IAAI,IAAI,IAAI,CAAC,GAAG,CAAC,EAAE;wBACpF,IAAI;wBACJ,IAAI,EAAE,CAAC,GAAG,CAAC;wBACX,QAAQ,EAAE,OAAO,CAAC,QAAQ;wBAC1B,QAAQ,EAAE,UAAU;wBACpB,OAAO,EAAE,OAAO,CAAC,OAAO;wBACxB,UAAU,EAAE,OAAO,CAAC,UAAU;wBAC9B,UAAU,EAAE,GAAG;wBACf,KAAK,EAAE,UAAU;qBAClB,CAAC,CAAC;gBACL,CAAC;YACH,CAAC;QACH,CAAC;QAED,8BAA8B;QAC9B,YAAY,CAAC,SAAS,GAAG,CAAC,CAAC;QAC3B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YACtC,YAAY,CAAC,SAAS,GAAG,CAAC,CAAC;YAC3B,IAAI,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;gBAChC,QAAQ,CAAC,IAAI,CAAC;oBACZ,EAAE,EAAE,6BAA6B,IAAI,IAAI,CAAC,GAAG,CAAC,EAAE;oBAChD,IAAI;oBACJ,IAAI,EAAE,CAAC,GAAG,CAAC;oBACX,QAAQ,EAAE,OAAO;oBACjB,QAAQ,EAAE,UAAU;oBACpB,OAAO,EAAE,wDAAwD;oBACjE,UAAU,EAAE,4DAA4D;oBACxE,UAAU,EAAE,IAAI;oBAChB,KAAK,EAAE,UAAU;iBAClB,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAED,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,QAAQ,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC;QAElD,OAAO;YACL,QAAQ,EAAE,IAAI,CAAC,IAAI;YACnB,IAAI;YACJ,KAAK;YACL,QAAQ;YACR,QAAQ,EAAE,EAAE,UAAU,EAAE,QAAQ,CAAC,MAAM,EAAE;SAC1C,CAAC;IACJ,CAAC;CACF"}

package/dist/sentinel/triage/analyzers/ts-parser.d.ts

@@ -0,0 +1,71 @@
+/**
+ * Shared TypeScript source parsing utilities.
+ *
+ * Pure functions — no model calls, no I/O, no side effects.
+ * Used by the dependency analyzer (Task 2) and complexity analyzer (Task 4).
+ *
+ * Approach: regex-based parsing (consistent with other analyzers in this directory).
+ * Multi-line imports are pre-joined before matching so a single regex handles both
+ * single-line and multi-line forms.
+ */
+export interface ImportInfo {
+    /** The module specifier string (e.g. "./utils.js", "react") */
+    source: string;
+    /** Imported names. For namespace: "* as ns". For default: the identifier. */
+    specifiers: string[];
+    /** 1-based line number of the import statement */
+    line: number;
+    /** True for `import type` statements */
+    isTypeOnly: boolean;
+}
+export interface FunctionInfo {
+    /** Function or method name */
+    name: string;
+    /** 1-based line where the signature starts */
+    line: number;
+    /** 1-based line where the closing brace was found (or same as line if not found) */
+    endLine: number;
+    /** endLine - line + 1 */
+    lineCount: number;
+    /** Number of top-level parameters (commas + 1, or 0 for empty parens) */
+    paramCount: number;
+    /** True if the declaration has an `export` keyword */
+    exported: boolean;
+}
+export interface ExportInfo {
+    /** Exported symbol name (uses alias when `as` is present; "default" for default exports) */
+    name: string;
+    /** 1-based line number */
+    line: number;
+}
+/**
+ * Extract all import statements from TypeScript/JavaScript source.
+ *
+ * Handles:
+ *   - ES module named, default, and namespace imports
+ *   - `import type` declarations
+ *   - Combined default + named: `import Foo, { bar } from "x"`
+ *   - Multi-line imports (pre-joined before matching)
+ *   - `require()` calls
+ *   - Dynamic `import()` calls
+ */
+export declare function extractImports(content: string, _filePath: string): ImportInfo[];
+/**
+ * Extract function/method definitions from TypeScript/JavaScript source.
+ *
+ * Handles:
+ *   - `function name(...)` declarations (with/without export, async)
+ *   - `const/let/var name = (...) =>` arrow functions (with/without export)
+ *   - Class methods: `name(...) {`  (skips control-flow keywords)
+ */
+export declare function extractFunctions(content: string, _filePath: string): FunctionInfo[];
+/**
+ * Extract exported symbol names from TypeScript/JavaScript source.
+ *
+ * Handles:
+ *   - `export function/const/let/var/class/type/interface/enum name`
+ *   - `export { name1, name2 }` with optional `as alias`
+ *   - `export default`
+ */
+export declare function extractExports(content: string, _filePath: string): ExportInfo[];
+//# sourceMappingURL=ts-parser.d.ts.map

package/dist/sentinel/triage/analyzers/ts-parser.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ts-parser.d.ts","sourceRoot":"","sources":["../../../../src/sentinel/triage/analyzers/ts-parser.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAMH,MAAM,WAAW,UAAU;IACzB,+DAA+D;IAC/D,MAAM,EAAE,MAAM,CAAC;IACf,6EAA6E;IAC7E,UAAU,EAAE,MAAM,EAAE,CAAC;IACrB,kDAAkD;IAClD,IAAI,EAAE,MAAM,CAAC;IACb,wCAAwC;IACxC,UAAU,EAAE,OAAO,CAAC;CACrB;AAED,MAAM,WAAW,YAAY;IAC3B,8BAA8B;IAC9B,IAAI,EAAE,MAAM,CAAC;IACb,8CAA8C;IAC9C,IAAI,EAAE,MAAM,CAAC;IACb,oFAAoF;IACpF,OAAO,EAAE,MAAM,CAAC;IAChB,yBAAyB;IACzB,SAAS,EAAE,MAAM,CAAC;IAClB,yEAAyE;IACzE,UAAU,EAAE,MAAM,CAAC;IACnB,sDAAsD;IACtD,QAAQ,EAAE,OAAO,CAAC;CACnB;AAED,MAAM,WAAW,UAAU;IACzB,4FAA4F;IAC5F,IAAI,EAAE,MAAM,CAAC;IACb,0BAA0B;IAC1B,IAAI,EAAE,MAAM,CAAC;CACd;AAwGD;;;;;;;;;;GAUG;AACH,wBAAgB,cAAc,CAAC,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,UAAU,EAAE,CA8E/E;AAWD;;;;;;;GAOG;AACH,wBAAgB,gBAAgB,CAAC,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,YAAY,EAAE,CA8EnF;AAMD;;;;;;;GAOG;AACH,wBAAgB,cAAc,CAAC,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,UAAU,EAAE,CA6C/E"}