@opensip-cli/checks-typescript 0.1.10 → 0.1.12

package/dist/checks/quality/patterns/throws-documentation.js

@@ -1,478 +1,14 @@
 // @fitness-ignore-file no-generic-error -- Generic errors appropriate in this context
-// @fitness-ignore-file file-length-limit -- JSDoc documentation required for public API
 // @fitness-ignore-file no-hardcoded-timeouts -- framework default for fitness check execution timeout
 /**
  * @fileoverview Missing @throws JSDoc Detection Check
  *
  * Detects functions that contain throw statements but lack @throws JSDoc documentation.
- *
  */
-import { defineCheck, getCheckConfig, isTestFile } from '@opensip-cli/fitness';
+import { defineCheck, isTestFile } from '@opensip-cli/fitness';
 import { getSharedSourceFile } from '@opensip-cli/lang-typescript';
-import * as ts from 'typescript';
-// =============================================================================
-// HELPER FUNCTIONS
-// =============================================================================
-/**
- * Check if node is a function-like node (function, method, or arrow function)
- * @param n - The TypeScript AST node to check
- * @returns True if the node is a function declaration, function expression, arrow function, or method declaration
- */
-function isFunctionLikeNode(n) {
-    return (ts.isFunctionDeclaration(n) ||
-        ts.isFunctionExpression(n) ||
-        ts.isArrowFunction(n) ||
-        ts.isMethodDeclaration(n));
-}
-/**
- * Find throw statements in a node (not descending into nested functions)
- * @param node - The AST node to search for throw statements
- * @returns Array of throw statements found in the node (excluding nested functions)
- */
-function findThrowStatements(node) {
-    const throws = [];
-    const visit = (n) => {
-        // Don't descend into nested functions
-        if (isFunctionLikeNode(n) && n !== node) {
-            return;
-        }
-        if (ts.isThrowStatement(n)) {
-            throws.push(n);
-        }
-        ts.forEachChild(n, visit);
-    };
-    visit(node);
-    return throws;
-}
-/**
- * Check if a node has @throws JSDoc
- * @param node - The AST node to check for @throws documentation
- * @param sourceFile - The source file containing the node
- * @returns True if the node has a @throws JSDoc comment
- */
-function hasThrowsJSDoc(node, sourceFile) {
-    const fullText = sourceFile.getFullText();
-    const nodeStart = node.getFullStart();
-    const comments = ts.getLeadingCommentRanges(fullText, nodeStart);
-    if (!comments)
-        return false;
-    for (const comment of comments) {
-        const commentText = fullText.slice(comment.pos, comment.end);
-        if (commentText.includes('@throws')) {
-            return true;
-        }
-    }
-    return false;
-}
-const ANONYMOUS_FUNCTION_NAME = '<anonymous>';
-/**
- * Get function name from a function declaration node
- * @param node - The function declaration node
- * @returns The function name, or "<anonymous>" if unnamed
- */
-function getNameFromFunctionDeclaration(node) {
-    return node.name?.text ?? ANONYMOUS_FUNCTION_NAME;
-}
-/**
- * Get function name from a method declaration node
- * @param node - The method declaration node
- * @returns The method name, or "<anonymous>" if the name is not an identifier
- */
-function getNameFromMethodDeclaration(node) {
-    return ts.isIdentifier(node.name) ? node.name.text : ANONYMOUS_FUNCTION_NAME;
-}
-/**
- * Get function name from an arrow function node
- * @param node - The arrow function node
- * @returns The variable name if assigned to a variable, or "<anonymous>" otherwise
- */
-function getNameFromArrowFunction(node) {
-    const parent = node.parent;
-    if (ts.isVariableDeclaration(parent) && ts.isIdentifier(parent.name)) {
-        return parent.name.text;
-    }
-    return ANONYMOUS_FUNCTION_NAME;
-}
-/**
- * Get the name of a function-like node
- * @param node - The function-like node (function declaration, method, or arrow function)
- * @returns The function name, or "<anonymous>" if unnamed
- */
-// @fitness-ignore-next-line duplicate-utility-functions -- Check-specific helper for FunctionLikeNode; each fitness check defines its own variant for its node type
-function getFunctionName(node) {
-    if (ts.isFunctionDeclaration(node)) {
-        return getNameFromFunctionDeclaration(node);
-    }
-    if (ts.isMethodDeclaration(node)) {
-        return getNameFromMethodDeclaration(node);
-    }
-    return getNameFromArrowFunction(node);
-}
-/**
- * Check if an arrow function is an anonymous callback that should be skipped
- * @param node - The arrow function node to check
- * @returns True if the arrow function is used as a callback in a call expression
- */
-function isAnonymousCallback(node) {
-    const parent = node.parent;
-    return ts.isCallExpression(parent) || ts.isCallExpression(parent.parent);
-}
-/**
- * Typed error classes (e.g., from a project error module).
- * These are self-documenting and don't require @throws JSDoc.
- */
-const SELF_DOCUMENTING_ERRORS = new Set([
-    // Domain errors
-    'ValidationError',
-    'AuthorizationError',
-    'NotFoundError',
-    'ConflictError',
-    'DomainError',
-    // System errors
-    'SystemError',
-    'ConfigurationError',
-    'InfrastructureError',
-    'ExternalServiceError',
-    'DatabaseError',
-    'CacheError',
-    'NetworkError',
-    // Application errors
-    'ApplicationError',
-    'OperationError',
-    'StateError',
-    'IntegrationError',
-    // HTTP errors
-    'BadRequestError',
-    'UnauthorizedError',
-    'ForbiddenError',
-    'MethodNotAllowedError',
-    'NotAcceptableError',
-    'RequestTimeoutError',
-    'GoneError',
-    'PayloadTooLargeError',
-    'UnsupportedMediaTypeError',
-    'UnprocessableEntityError',
-    'TooManyRequestsError',
-    'InternalServerError',
-    'NotImplementedError',
-    'BadGatewayError',
-    'ServiceUnavailableError',
-    'GatewayTimeoutError',
-    // Common error aliases
-    'InputValidationError',
-    'BusinessRuleError',
-    'AuthenticationError',
-    'PermissionError',
-    'ResourceNotFoundError',
-    'DuplicateResourceError',
-    'DataIntegrityError',
-]);
-/**
- * Suffixes that indicate a self-documenting error type.
- * These typed error classes are descriptive enough that @throws JSDoc adds little value.
- *
- * The list is intentionally broad: any class name ending in a recognizable error
- * suffix counts as self-documenting because it carries its semantic meaning in the
- * type name itself (callers can read and handle the typed error directly without
- * needing prose).
- */
-const SELF_DOCUMENTING_SUFFIXES = [
-    'ValidationError',
-    'NotFoundError',
-    'AuthorizationError',
-    'SystemError',
-    'DomainError',
-    'ConfigurationError',
-    'SecurityError',
-    'TimeoutError',
-    'LockError',
-    'LimitError',
-    'InfrastructureError',
-    'ApplicationError',
-    'OperationError',
-    'ErrorBuilder', // Builder pattern for typed errors
-    // Generic-sounding suffixes any project may use:
-    'NetworkError',
-    'ExecutionError',
-    'LoadError',
-    'VerifyError',
-    'ApiError',
-    'ParseError',
-    'EncodingError',
-    'DecodingError',
-    'StateError',
-    'SyncError',
-    'CaptureError',
-    'IntegrationError',
-    'PermissionError',
-    'AccessError',
-    'AuthenticationError',
-    'ResourceNotFoundError',
-    'DuplicateResourceError',
-    'DataIntegrityError',
-    'BusinessRuleError',
-    'InputValidationError',
-    // NOTE: opensip-specific suffixes — `CompositionError`, `CompositeError`,
-    // `CanonicalizationError`, `TransformError`, `VersioningError`,
-    // `TransitionError` — are NOT defaults. They live in opensip's recipe
-    // under `checks.config['throws-documentation'].additionalSelfDocumentingSuffixes`.
-];
-/**
- * Build the effective self-documenting suffix list by merging built-in
- * defaults with the recipe config slice. Called per-file from the analyze entry.
- */
-function buildEffectiveSuffixes() {
-    const cfg = getCheckConfig('throws-documentation');
-    return [...SELF_DOCUMENTING_SUFFIXES, ...(cfg.additionalSelfDocumentingSuffixes ?? [])];
-}
-function isSelfDocumentingError(errorType, suffixes) {
-    // Check exact match
-    if (SELF_DOCUMENTING_ERRORS.has(errorType)) {
-        return true;
-    }
-    // Check if it ends with known self-documenting patterns
-    return suffixes.some((suffix) => errorType.endsWith(suffix));
-}
-/**
- * Extract thrown error type from a throw statement
- * @param throwStmt - The throw statement to analyze
- * @param sourceFile - The source file containing the throw statement
- * @returns The error class name (e.g., "TypeError"), or "Error" if not determinable
- */
-function extractThrownType(throwStmt, sourceFile) {
-    const text = throwStmt.expression.getText(sourceFile);
-    // @fitness-ignore-next-line sonarjs-backend -- Safe regex with fixed tokens for extracting error class name
-    const typeMatch = /new\s+(\w+)/.exec(text);
-    return typeMatch?.[1] ?? 'Error';
-}
-/**
- * Get unique thrown error types from throw statements
- * @param throwStatements - Array of throw statements to analyze
- * @param sourceFile - The source file containing the throw statements
- * @returns Array of unique error type names found in the throw statements
- */
-function getUniqueThrowTypes(throwStatements, sourceFile) {
-    if (!Array.isArray(throwStatements)) {
-        return [];
-    }
-    const thrownTypes = throwStatements.map((t) => extractThrownType(t, sourceFile));
-    return [...new Set(thrownTypes)];
-}
-/**
- * Create a violation for a function missing @throws documentation
- * @param node - The function-like node that is missing @throws documentation
- * @param funcName - The name of the function
- * @param throwStatements - The throw statements found in the function
- * @param ctx - The file analysis context
- * @returns A violation object describing the missing @throws documentation
- * @throws {Error} If throwStatements is not an array
- */
-function createMissingThrowsViolation(node, funcName, throwStatements, ctx) {
-    if (!Array.isArray(throwStatements)) {
-        throw new TypeError('throwStatements must be an array');
-    }
-    const { line, character } = ctx.sourceFile.getLineAndCharacterOfPosition(node.getStart());
-    const lineNum = line + 1;
-    const uniqueTypes = getUniqueThrowTypes(throwStatements, ctx.sourceFile);
-    return {
-        line: lineNum,
-        column: character + 1,
-        message: `Function '${funcName}' throws but lacks @throws JSDoc`,
-        severity: 'warning',
-        suggestion: `Add @throws JSDoc above the function: /** @throws {${uniqueTypes.join(' | ')}} Description of when this error is thrown */`,
-        match: funcName,
-    };
-}
-/**
- * Check if a function-like node should be analyzed
- * @param node - The function-like node to check
- * @param funcName - The name of the function
- * @returns True if the function should be analyzed for @throws documentation
- */
-function shouldAnalyzeFunction(node, funcName) {
-    // Skip anonymous arrow function callbacks
-    if (funcName === '<anonymous>' && ts.isArrowFunction(node)) {
-        return !isAnonymousCallback(node);
-    }
-    return true;
-}
-/**
- * Check if all throw statements in a function use self-documenting errors
- * @param throwStatements - Array of throw statements to check
- * @param sourceFile - The source file containing the throw statements
- * @returns True if all thrown errors are self-documenting
- */
-function allThrowsSelfDocumenting(throwStatements, sourceFile, suffixes) {
-    if (!Array.isArray(throwStatements) || throwStatements.length === 0) {
-        return false;
-    }
-    return throwStatements.every((stmt) => {
-        const errorType = extractThrownType(stmt, sourceFile);
-        return isSelfDocumentingError(errorType, suffixes);
-    });
-}
-/**
- * Common error-field name patterns on `this` that indicate a stored-error rethrow.
- * Used to recognise patterns like `throw this.error` (Result-pattern Failure rethrow).
- */
-const ERROR_FIELD_NAME_PATTERN = /^(error|err|cause|innerError|originalError)$/i;
-/**
- * Generic error-variable name patterns (caught-error identifiers).
- * Used as a fallback when we cannot statically determine the enclosing catch clause
- * (e.g. when isRethrow is called without a function context).
- */
-const ERROR_VAR_NAME_PATTERN = /^(error|err|e|ex|exception)$/i;
-/**
- * Collect identifier names introduced by `catch (X)` clauses anywhere inside the
- * given function-like node (excluding nested function bodies). These names are the
- * caught-error variables that a subsequent `throw <name>` or `throw <name>.<...>`
- * is treated as a re-throw of.
- *
- * @param fnNode - The enclosing function-like node
- * @returns Set of caught-error variable names
- */
-function collectCaughtErrorNames(fnNode) {
-    const names = new Set();
-    const visit = (n) => {
-        // Don't descend into nested function bodies — their catch variables are
-        // out of scope at the throw site we care about.
-        if (isFunctionLikeNode(n) && n !== fnNode) {
-            return;
-        }
-        if (ts.isCatchClause(n) && n.variableDeclaration) {
-            const decl = n.variableDeclaration;
-            if (ts.isIdentifier(decl.name)) {
-                names.add(decl.name.text);
-            }
-        }
-        ts.forEachChild(n, visit);
-    };
-    visit(fnNode);
-    return names;
-}
-/**
- * Check if a throw statement is a re-throw of a caught error.
- *
- * Recognised re-throw shapes:
- *  - `throw err`                     — bare caught-error identifier
- *  - `throw err.unwrapErr()`         — typed Result rethrow
- *  - `throw this.error`              — Result-pattern Failure stored-error rethrow
- *  - `throw sanitizedError(err)`     — single-arg helper wrapping a caught error
- *
- * @param throwStmt - The throw statement to check
- * @param sourceFile - The source file containing the throw statement
- * @param caughtNames - Names of caught-error variables in the enclosing function
- * @returns True if this throw statement re-throws (rather than freshly creates) an error
- */
-// eslint-disable-next-line sonarjs/cognitive-complexity -- rethrow heuristic: enumerates the AST shapes that count as rethrowing (caught var, wrapping cause, scoped helpers); flatter shape would obscure the matching logic
-function isRethrow(throwStmt, sourceFile, caughtNames) {
-    const expr = throwStmt.expression;
-    const text = expr.getText(sourceFile).trim();
-    // `new X(...)` is never a re-throw.
-    if (ts.isNewExpression(expr))
-        return false;
-    // `throw err` — bare identifier
-    if (ts.isIdentifier(expr)) {
-        if (caughtNames?.has(expr.text))
-            return true;
-        // Fallback: name matches a generic caught-error pattern (used when no context).
-        return ERROR_VAR_NAME_PATTERN.test(expr.text);
-    }
-    // `throw this.error` / `throw this.cause` — stored-error field rethrow
-    if (ts.isPropertyAccessExpression(expr) &&
-        expr.expression.kind === ts.SyntaxKind.ThisKeyword &&
-        ts.isIdentifier(expr.name) &&
-        ERROR_FIELD_NAME_PATTERN.test(expr.name.text)) {
-        return true;
-    }
-    // Result-pattern rethrows: `throw X.unwrapErr()` / `throw X.unwrap()` —
-    // the throw extracts an already-typed error from a Result and propagates it.
-    // We treat this as a rethrow regardless of whether X is in scope as a caught
-    // variable, because the wrapped error is itself a typed error from elsewhere.
-    if (ts.isCallExpression(expr) && ts.isPropertyAccessExpression(expr.expression)) {
-        const methodName = ts.isIdentifier(expr.expression.name) ? expr.expression.name.text : '';
-        if (methodName === 'unwrapErr' || methodName === 'unwrap') {
-            return true;
-        }
-        // Method invocation on a caught-error variable — also a rethrow.
-        const root = expr.expression.expression;
-        if (ts.isIdentifier(root) && caughtNames?.has(root.text)) {
-            return true;
-        }
-    }
-    // `throw sanitizedError(err)` — single-arg call wrapping a caught-error variable.
-    // Heuristic: the call has exactly one argument and that argument is an identifier
-    // matching a caught-error name (preferred) or the generic err/error pattern.
-    if (ts.isCallExpression(expr) && expr.arguments.length === 1) {
-        const arg = expr.arguments[0];
-        if (arg && ts.isIdentifier(arg)) {
-            if (caughtNames?.has(arg.text))
-                return true;
-            if (!caughtNames && ERROR_VAR_NAME_PATTERN.test(arg.text))
-                return true;
-        }
-    }
-    // Legacy fallback: bare-identifier-shaped text without 'new'. Kept for backward
-    // compatibility with call sites that don't pass the AST node.
-    return !text.includes('new ') && ERROR_VAR_NAME_PATTERN.test(text);
-}
-/**
- * Analyze a function-like node for missing @throws documentation
- * @param node - The function-like node to analyze
- * @param ctx - The file analysis context
- * @returns A violation if the function is missing @throws documentation, or null if compliant
- */
-function analyzeFunctionNode(node, ctx) {
-    const funcName = getFunctionName(node);
-    if (!shouldAnalyzeFunction(node, funcName)) {
-        return null;
-    }
-    const throwStatements = findThrowStatements(node);
-    if (throwStatements.length === 0) {
-        return null;
-    }
-    // Skip if already has @throws documentation
-    if (hasThrowsJSDoc(node, ctx.sourceFile)) {
-        return null;
-    }
-    // Skip if all throws are self-documenting typed errors
-    if (allThrowsSelfDocumenting(throwStatements, ctx.sourceFile, ctx.selfDocumentingSuffixes)) {
-        return null;
-    }
-    // Skip if all throws are re-throws (error propagation). We pass the set of
-    // caught-error variable names declared in any `catch (X)` clause inside the
-    // function so that `throw err`, `throw err.unwrapErr()`, and
-    // `throw sanitizedError(err)` are recognised as rethrows.
-    const caughtNames = collectCaughtErrorNames(node);
-    if (throwStatements.every((stmt) => isRethrow(stmt, ctx.sourceFile, caughtNames))) {
-        return null;
-    }
-    return createMissingThrowsViolation(node, funcName, throwStatements, ctx);
-}
-/**
- * Analyze a file for missing @throws documentation
- * @param ctx - The file analysis context containing source file and metadata
- * @returns Array of violations for functions missing @throws documentation
- */
-function analyzeFile(ctx) {
-    const violations = [];
-    const visit = (node) => {
-        if (ts.isFunctionDeclaration(node) ||
-            ts.isMethodDeclaration(node) ||
-            ts.isArrowFunction(node)) {
-            const violation = analyzeFunctionNode(node, ctx);
-            if (violation) {
-                violations.push(violation);
-            }
-        }
-        ts.forEachChild(node, visit);
-    };
-    visit(ctx.sourceFile);
-    return violations;
-}
-// =============================================================================
-// CHECK DEFINITION
-// =============================================================================
+import { analyzeFile } from './throws-documentation-analyze.js';
+import { buildEffectiveSuffixes } from './throws-documentation-constants.js';
 /**
  * Check: quality/throws-documentation
  *
@@ -494,14 +30,10 @@ export const throwsDocumentation = defineCheck({
 **Scope:** Codebase-specific convention enforcing error handling standards`,
     tags: ['quality', 'documentation', 'best-practices'],
     fileTypes: ['ts'],
-    timeout: 180_000, // 3 minutes - parses TypeScript AST for all backend files
+    timeout: 180_000,
     analyze(content, filePath) {
-        // Skip test files — assertion failures, anonymous test callbacks, and
-        // fixture helpers are not public-API surface. Matches the convention in
-        // `null-safety`. Public-API throws are documented in non-test code.
         if (isTestFile(filePath))
             return [];
-        // Quick filter
         if (!content.includes('throw ')) {
             return [];
         }

package/dist/checks/quality/patterns/throws-documentation.js.map

@@ -1 +1 @@
-{"version":3,"file":"throws-documentation.js","sourceRoot":"","sources":["../../../../src/checks/quality/patterns/throws-documentation.ts"],"names":[],"mappings":"AAAA,sFAAsF;AACtF,wFAAwF;AACxF,sGAAsG;AACtG;;;;;GAKG;AAEH,OAAO,EAAE,WAAW,EAAE,cAAc,EAAE,UAAU,EAAuB,MAAM,sBAAsB,CAAC;AACpG,OAAO,EAAE,mBAAmB,EAAE,MAAM,8BAA8B,CAAC;AACnE,OAAO,KAAK,EAAE,MAAM,YAAY,CAAC;AA6BjC,gFAAgF;AAChF,mBAAmB;AACnB,gFAAgF;AAEhF;;;;GAIG;AACH,SAAS,kBAAkB,CAAC,CAAU;IACpC,OAAO,CACL,EAAE,CAAC,qBAAqB,CAAC,CAAC,CAAC;QAC3B,EAAE,CAAC,oBAAoB,CAAC,CAAC,CAAC;QAC1B,EAAE,CAAC,eAAe,CAAC,CAAC,CAAC;QACrB,EAAE,CAAC,mBAAmB,CAAC,CAAC,CAAC,CAC1B,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,SAAS,mBAAmB,CAAC,IAAa;IACxC,MAAM,MAAM,GAAwB,EAAE,CAAC;IAEvC,MAAM,KAAK,GAAG,CAAC,CAAU,EAAQ,EAAE;QACjC,sCAAsC;QACtC,IAAI,kBAAkB,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC;YACxC,OAAO;QACT,CAAC;QACD,IAAI,EAAE,CAAC,gBAAgB,CAAC,CAAC,CAAC,EAAE,CAAC;YAC3B,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACjB,CAAC;QACD,EAAE,CAAC,YAAY,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;IAC5B,CAAC,CAAC;IAEF,KAAK,CAAC,IAAI,CAAC,CAAC;IACZ,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;;;;GAKG;AACH,SAAS,cAAc,CAAC,IAAa,EAAE,UAAyB;IAC9D,MAAM,QAAQ,GAAG,UAAU,CAAC,WAAW,EAAE,CAAC;IAC1C,MAAM,SAAS,GAAG,IAAI,CAAC,YAAY,EAAE,CAAC;IACtC,MAAM,QAAQ,GAAG,EAAE,CAAC,uBAAuB,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC;IAEjE,IAAI,CAAC,QAAQ;QAAE,OAAO,KAAK,CAAC;IAE5B,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;QAC/B,MAAM,WAAW,GAAG,QAAQ,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC;QAC7D,IAAI,WAAW,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC;YACpC,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,uBAAuB,GAAG,aAAa,CAAC;AAE9C;;;;GAIG;AACH,SAAS,8BAA8B,CAAC,IAA4B;IAClE,OAAO,IAAI,CAAC,IAAI,EAAE,IAAI,IAAI,uBAAuB,CAAC;AACpD,CAAC;AAED;;;;GAIG;AACH,SAAS,4BAA4B,CAAC,IAA0B;IAC9D,OAAO,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,uBAAuB,CAAC;AAC/E,CAAC;AAED;;;;GAIG;AACH,SAAS,wBAAwB,CAAC,IAAsB;IACtD,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC;IAC3B,IAAI,EAAE,CAAC,qBAAqB,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,YAAY,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC;QACrE,OAAO,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC;IAC1B,CAAC;IACD,OAAO,uBAAuB,CAAC;AACjC,CAAC;AAED;;;;GAIG;AACH,oKAAoK;AACpK,SAAS,eAAe,CAAC,IAAsB;IAC7C,IAAI,EAAE,CAAC,qBAAqB,CAAC,IAAI,CAAC,EAAE,CAAC;QACnC,OAAO,8BAA8B,CAAC,IAAI,CAAC,CAAC;IAC9C,CAAC;IACD,IAAI,EAAE,CAAC,mBAAmB,CAAC,IAAI,CAAC,EAAE,CAAC;QACjC,OAAO,4BAA4B,CAAC,IAAI,CAAC,CAAC;IAC5C,CAAC;IACD,OAAO,wBAAwB,CAAC,IAAI,CAAC,CAAC;AACxC,CAAC;AAED;;;;GAIG;AACH,SAAS,mBAAmB,CAAC,IAAsB;IACjD,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC;IAC3B,OAAO,EAAE,CAAC,gBAAgB,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,gBAAgB,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;AAC3E,CAAC;AAED;;;GAGG;AACH,MAAM,uBAAuB,GAAG,IAAI,GAAG,CAAC;IACtC,gBAAgB;IAChB,iBAAiB;IACjB,oBAAoB;IACpB,eAAe;IACf,eAAe;IACf,aAAa;IACb,gBAAgB;IAChB,aAAa;IACb,oBAAoB;IACpB,qBAAqB;IACrB,sBAAsB;IACtB,eAAe;IACf,YAAY;IACZ,cAAc;IACd,qBAAqB;IACrB,kBAAkB;IAClB,gBAAgB;IAChB,YAAY;IACZ,kBAAkB;IAClB,cAAc;IACd,iBAAiB;IACjB,mBAAmB;IACnB,gBAAgB;IAChB,uBAAuB;IACvB,oBAAoB;IACpB,qBAAqB;IACrB,WAAW;IACX,sBAAsB;IACtB,2BAA2B;IAC3B,0BAA0B;IAC1B,sBAAsB;IACtB,qBAAqB;IACrB,qBAAqB;IACrB,iBAAiB;IACjB,yBAAyB;IACzB,qBAAqB;IACrB,uBAAuB;IACvB,sBAAsB;IACtB,mBAAmB;IACnB,qBAAqB;IACrB,iBAAiB;IACjB,uBAAuB;IACvB,wBAAwB;IACxB,oBAAoB;CACrB,CAAC,CAAC;AAEH;;;;;;;;GAQG;AACH,MAAM,yBAAyB,GAAG;IAChC,iBAAiB;IACjB,eAAe;IACf,oBAAoB;IACpB,aAAa;IACb,aAAa;IACb,oBAAoB;IACpB,eAAe;IACf,cAAc;IACd,WAAW;IACX,YAAY;IACZ,qBAAqB;IACrB,kBAAkB;IAClB,gBAAgB;IAChB,cAAc,EAAE,mCAAmC;IACnD,iDAAiD;IACjD,cAAc;IACd,gBAAgB;IAChB,WAAW;IACX,aAAa;IACb,UAAU;IACV,YAAY;IACZ,eAAe;IACf,eAAe;IACf,YAAY;IACZ,WAAW;IACX,cAAc;IACd,kBAAkB;IAClB,iBAAiB;IACjB,aAAa;IACb,qBAAqB;IACrB,uBAAuB;IACvB,wBAAwB;IACxB,oBAAoB;IACpB,mBAAmB;IACnB,sBAAsB;IACtB,0EAA0E;IAC1E,gEAAgE;IAChE,sEAAsE;IACtE,mFAAmF;CACpF,CAAC;AAEF;;;GAGG;AACH,SAAS,sBAAsB;IAC7B,MAAM,GAAG,GAAG,cAAc,CAAkB,sBAAsB,CAAC,CAAC;IACpE,OAAO,CAAC,GAAG,yBAAyB,EAAE,GAAG,CAAC,GAAG,CAAC,iCAAiC,IAAI,EAAE,CAAC,CAAC,CAAC;AAC1F,CAAC;AAED,SAAS,sBAAsB,CAAC,SAAiB,EAAE,QAA2B;IAC5E,oBAAoB;IACpB,IAAI,uBAAuB,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC;QAC3C,OAAO,IAAI,CAAC;IACd,CAAC;IACD,wDAAwD;IACxD,OAAO,QAAQ,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,SAAS,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;AAC/D,CAAC;AAED;;;;;GAKG;AACH,SAAS,iBAAiB,CAAC,SAA4B,EAAE,UAAyB;IAChF,MAAM,IAAI,GAAG,SAAS,CAAC,UAAU,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;IACtD,4GAA4G;IAC5G,MAAM,SAAS,GAAG,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC3C,OAAO,SAAS,EAAE,CAAC,CAAC,CAAC,IAAI,OAAO,CAAC;AACnC,CAAC;AAED;;;;;GAKG;AACH,SAAS,mBAAmB,CAC1B,eAAoC,EACpC,UAAyB;IAEzB,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,eAAe,CAAC,EAAE,CAAC;QACpC,OAAO,EAAE,CAAC;IACZ,CAAC;IACD,MAAM,WAAW,GAAG,eAAe,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,CAAC,EAAE,UAAU,CAAC,CAAC,CAAC;IACjF,OAAO,CAAC,GAAG,IAAI,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC;AACnC,CAAC;AAED;;;;;;;;GAQG;AACH,SAAS,4BAA4B,CACnC,IAAsB,EACtB,QAAgB,EAChB,eAAoC,EACpC,GAAwB;IAExB,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,eAAe,CAAC,EAAE,CAAC;QACpC,MAAM,IAAI,SAAS,CAAC,kCAAkC,CAAC,CAAC;IAC1D,CAAC;IACD,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,GAAG,GAAG,CAAC,UAAU,CAAC,6BAA6B,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC;IAC1F,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,CAAC;IACzB,MAAM,WAAW,GAAG,mBAAmB,CAAC,eAAe,EAAE,GAAG,CAAC,UAAU,CAAC,CAAC;IAEzE,OAAO;QACL,IAAI,EAAE,OAAO;QACb,MAAM,EAAE,SAAS,GAAG,CAAC;QACrB,OAAO,EAAE,aAAa,QAAQ,kCAAkC;QAChE,QAAQ,EAAE,SAAS;QACnB,UAAU,EAAE,sDAAsD,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,+CAA+C;QACxI,KAAK,EAAE,QAAQ;KAChB,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,SAAS,qBAAqB,CAAC,IAAsB,EAAE,QAAgB;IACrE,0CAA0C;IAC1C,IAAI,QAAQ,KAAK,aAAa,IAAI,EAAE,CAAC,eAAe,CAAC,IAAI,CAAC,EAAE,CAAC;QAC3D,OAAO,CAAC,mBAAmB,CAAC,IAAI,CAAC,CAAC;IACpC,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;GAKG;AACH,SAAS,wBAAwB,CAC/B,eAAoC,EACpC,UAAyB,EACzB,QAA2B;IAE3B,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,eAAe,CAAC,IAAI,eAAe,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACpE,OAAO,KAAK,CAAC;IACf,CAAC;IACD,OAAO,eAAe,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,EAAE;QACpC,MAAM,SAAS,GAAG,iBAAiB,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;QACtD,OAAO,sBAAsB,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;IACrD,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;;GAGG;AACH,MAAM,wBAAwB,GAAG,+CAA+C,CAAC;AAEjF;;;;GAIG;AACH,MAAM,sBAAsB,GAAG,+BAA+B,CAAC;AAE/D;;;;;;;;GAQG;AACH,SAAS,uBAAuB,CAAC,MAAe;IAC9C,MAAM,KAAK,GAAG,IAAI,GAAG,EAAU,CAAC;IAChC,MAAM,KAAK,GAAG,CAAC,CAAU,EAAQ,EAAE;QACjC,wEAAwE;QACxE,gDAAgD;QAChD,IAAI,kBAAkB,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,MAAM,EAAE,CAAC;YAC1C,OAAO;QACT,CAAC;QACD,IAAI,EAAE,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,mBAAmB,EAAE,CAAC;YACjD,MAAM,IAAI,GAAG,CAAC,CAAC,mBAAmB,CAAC;YACnC,IAAI,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;gBAC/B,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAC5B,CAAC;QACH,CAAC;QACD,EAAE,CAAC,YAAY,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;IAC5B,CAAC,CAAC;IACF,KAAK,CAAC,MAAM,CAAC,CAAC;IACd,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,8NAA8N;AAC9N,SAAS,SAAS,CAChB,SAA4B,EAC5B,UAAyB,EACzB,WAAyB;IAEzB,MAAM,IAAI,GAAG,SAAS,CAAC,UAAU,CAAC;IAClC,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,IAAI,EAAE,CAAC;IAE7C,oCAAoC;IACpC,IAAI,EAAE,CAAC,eAAe,CAAC,IAAI,CAAC;QAAE,OAAO,KAAK,CAAC;IAE3C,gCAAgC;IAChC,IAAI,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,EAAE,CAAC;QAC1B,IAAI,WAAW,EAAE,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC;YAAE,OAAO,IAAI,CAAC;QAC7C,gFAAgF;QAChF,OAAO,sBAAsB,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAChD,CAAC;IAED,uEAAuE;IACvE,IACE,EAAE,CAAC,0BAA0B,CAAC,IAAI,CAAC;QACnC,IAAI,CAAC,UAAU,CAAC,IAAI,KAAK,EAAE,CAAC,UAAU,CAAC,WAAW;QAClD,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC;QAC1B,wBAAwB,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,EAC7C,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAED,wEAAwE;IACxE,6EAA6E;IAC7E,6EAA6E;IAC7E,8EAA8E;IAC9E,IAAI,EAAE,CAAC,gBAAgB,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,0BAA0B,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC;QAChF,MAAM,UAAU,GAAG,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;QAC1F,IAAI,UAAU,KAAK,WAAW,IAAI,UAAU,KAAK,QAAQ,EAAE,CAAC;YAC1D,OAAO,IAAI,CAAC;QACd,CAAC;QACD,iEAAiE;QACjE,MAAM,IAAI,GAAG,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC;QACxC,IAAI,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,WAAW,EAAE,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YACzD,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IAED,kFAAkF;IAClF,kFAAkF;IAClF,6EAA6E;IAC7E,IAAI,EAAE,CAAC,gBAAgB,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,SAAS,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC7D,MAAM,GAAG,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;QAC9B,IAAI,GAAG,IAAI,EAAE,CAAC,YAAY,CAAC,GAAG,CAAC,EAAE,CAAC;YAChC,IAAI,WAAW,EAAE,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC;gBAAE,OAAO,IAAI,CAAC;YAC5C,IAAI,CAAC,WAAW,IAAI,sBAAsB,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC;gBAAE,OAAO,IAAI,CAAC;QACzE,CAAC;IACH,CAAC;IAED,gFAAgF;IAChF,8DAA8D;IAC9D,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,sBAAsB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACrE,CAAC;AAED;;;;;GAKG;AACH,SAAS,mBAAmB,CAC1B,IAAsB,EACtB,GAAwB;IAExB,MAAM,QAAQ,GAAG,eAAe,CAAC,IAAI,CAAC,CAAC;IAEvC,IAAI,CAAC,qBAAqB,CAAC,IAAI,EAAE,QAAQ,CAAC,EAAE,CAAC;QAC3C,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,eAAe,GAAG,mBAAmB,CAAC,IAAI,CAAC,CAAC;IAElD,IAAI,eAAe,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACjC,OAAO,IAAI,CAAC;IACd,CAAC;IAED,4CAA4C;IAC5C,IAAI,cAAc,CAAC,IAAI,EAAE,GAAG,CAAC,UAAU,CAAC,EAAE,CAAC;QACzC,OAAO,IAAI,CAAC;IACd,CAAC;IAED,uDAAuD;IACvD,IAAI,wBAAwB,CAAC,eAAe,EAAE,GAAG,CAAC,UAAU,EAAE,GAAG,CAAC,uBAAuB,CAAC,EAAE,CAAC;QAC3F,OAAO,IAAI,CAAC;IACd,CAAC;IAED,2EAA2E;IAC3E,4EAA4E;IAC5E,6DAA6D;IAC7D,0DAA0D;IAC1D,MAAM,WAAW,GAAG,uBAAuB,CAAC,IAAI,CAAC,CAAC;IAClD,IAAI,eAAe,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,SAAS,CAAC,IAAI,EAAE,GAAG,CAAC,UAAU,EAAE,WAAW,CAAC,CAAC,EAAE,CAAC;QAClF,OAAO,IAAI,CAAC;IACd,CAAC;IAED,OAAO,4BAA4B,CAAC,IAAI,EAAE,QAAQ,EAAE,eAAe,EAAE,GAAG,CAAC,CAAC;AAC5E,CAAC;AAED;;;;GAIG;AACH,SAAS,WAAW,CAAC,GAAwB;IAC3C,MAAM,UAAU,GAAqB,EAAE,CAAC;IAExC,MAAM,KAAK,GAAG,CAAC,IAAa,EAAQ,EAAE;QACpC,IACE,EAAE,CAAC,qBAAqB,CAAC,IAAI,CAAC;YAC9B,EAAE,CAAC,mBAAmB,CAAC,IAAI,CAAC;YAC5B,EAAE,CAAC,eAAe,CAAC,IAAI,CAAC,EACxB,CAAC;YACD,MAAM,SAAS,GAAG,mBAAmB,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;YACjD,IAAI,SAAS,EAAE,CAAC;gBACd,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YAC7B,CAAC;QACH,CAAC;QACD,EAAE,CAAC,YAAY,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IAC/B,CAAC,CAAC;IAEF,KAAK,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;IACtB,OAAO,UAAU,CAAC;AACpB,CAAC;AAED,gFAAgF;AAChF,mBAAmB;AACnB,gFAAgF;AAEhF;;;;GAIG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAAG,WAAW,CAAC;IAC7C,EAAE,EAAE,sCAAsC;IAC1C,IAAI,EAAE,sBAAsB;IAC5B,KAAK,EAAE,EAAE,SAAS,EAAE,CAAC,YAAY,CAAC,EAAE,QAAQ,EAAE,CAAC,SAAS,EAAE,UAAU,EAAE,KAAK,CAAC,EAAE;IAC9E,aAAa,EAAE,eAAe;IAE9B,UAAU,EAAE,MAAM;IAClB,WAAW,EAAE,8DAA8D;IAC3E,eAAe,EAAE;;;;;;2EAMwD;IACzE,IAAI,EAAE,CAAC,SAAS,EAAE,eAAe,EAAE,gBAAgB,CAAC;IACpD,SAAS,EAAE,CAAC,IAAI,CAAC;IACjB,OAAO,EAAE,OAAO,EAAE,0DAA0D;IAE5E,OAAO,CAAC,OAAO,EAAE,QAAQ;QACvB,sEAAsE;QACtE,wEAAwE;QACxE,oEAAoE;QACpE,IAAI,UAAU,CAAC,QAAQ,CAAC;YAAE,OAAO,EAAE,CAAC;QAEpC,eAAe;QACf,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;YAChC,OAAO,EAAE,CAAC;QACZ,CAAC;QAED,MAAM,UAAU,GAAG,mBAAmB,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;QAC1D,IAAI,CAAC,UAAU;YAAE,OAAO,EAAE,CAAC;QAE3B,OAAO,WAAW,CAAC;YACjB,UAAU;YACV,OAAO;YACP,QAAQ;YACR,uBAAuB,EAAE,sBAAsB,EAAE;SAClD,CAAC,CAAC;IACL,CAAC;CACF,CAAC,CAAC"}
+{"version":3,"file":"throws-documentation.js","sourceRoot":"","sources":["../../../../src/checks/quality/patterns/throws-documentation.ts"],"names":[],"mappings":"AAAA,sFAAsF;AACtF,sGAAsG;AACtG;;;;GAIG;AAEH,OAAO,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,sBAAsB,CAAC;AAC/D,OAAO,EAAE,mBAAmB,EAAE,MAAM,8BAA8B,CAAC;AAEnE,OAAO,EAAE,WAAW,EAAE,MAAM,mCAAmC,CAAC;AAChE,OAAO,EAAE,sBAAsB,EAAE,MAAM,qCAAqC,CAAC;AAE7E;;;;GAIG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAAG,WAAW,CAAC;IAC7C,EAAE,EAAE,sCAAsC;IAC1C,IAAI,EAAE,sBAAsB;IAC5B,KAAK,EAAE,EAAE,SAAS,EAAE,CAAC,YAAY,CAAC,EAAE,QAAQ,EAAE,CAAC,SAAS,EAAE,UAAU,EAAE,KAAK,CAAC,EAAE;IAC9E,aAAa,EAAE,eAAe;IAE9B,UAAU,EAAE,MAAM;IAClB,WAAW,EAAE,8DAA8D;IAC3E,eAAe,EAAE;;;;;;2EAMwD;IACzE,IAAI,EAAE,CAAC,SAAS,EAAE,eAAe,EAAE,gBAAgB,CAAC;IACpD,SAAS,EAAE,CAAC,IAAI,CAAC;IACjB,OAAO,EAAE,OAAO;IAEhB,OAAO,CAAC,OAAO,EAAE,QAAQ;QACvB,IAAI,UAAU,CAAC,QAAQ,CAAC;YAAE,OAAO,EAAE,CAAC;QAEpC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;YAChC,OAAO,EAAE,CAAC;QACZ,CAAC;QAED,MAAM,UAAU,GAAG,mBAAmB,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;QAC1D,IAAI,CAAC,UAAU;YAAE,OAAO,EAAE,CAAC;QAE3B,OAAO,WAAW,CAAC;YACjB,UAAU;YACV,OAAO;YACP,QAAQ;YACR,uBAAuB,EAAE,sBAAsB,EAAE;SAClD,CAAC,CAAC;IACL,CAAC;CACF,CAAC,CAAC"}

package/dist/checks/quality/patterns/toctou-race-condition-classify.d.ts

@@ -0,0 +1,23 @@
+/**
+ * Call-site classification for the TOCTOU race-condition check.
+ */
+import { type FunctionLikeNode } from './toctou-race-condition-collection.js';
+import { KIND_READ_LOCAL, KIND_READ_SHARED, KIND_UPDATE_LOCAL, KIND_UPDATE_SHARED } from './toctou-race-condition-constants.js';
+/** Classification of a `<receiver>.<method>(...)` call site. */
+export type CallKind = {
+    kind: typeof KIND_READ_SHARED;
+} | {
+    kind: typeof KIND_UPDATE_SHARED;
+} | {
+    kind: typeof KIND_READ_LOCAL;
+} | {
+    kind: typeof KIND_UPDATE_LOCAL;
+} | {
+    kind: 'atomic-sql-write';
+} | {
+    kind: 'unrelated';
+};
+export declare function classifyFunctionCalls(node: FunctionLikeNode, localCollections: Set<string>, classCacheFields: Set<string>, localObjectCollectionKeys: Set<string>): {
+    hasSharedReadAndUpdateOnSameReceiver: boolean;
+};
+//# sourceMappingURL=toctou-race-condition-classify.d.ts.map

package/dist/checks/quality/patterns/toctou-race-condition-classify.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"toctou-race-condition-classify.d.ts","sourceRoot":"","sources":["../../../../src/checks/quality/patterns/toctou-race-condition-classify.ts"],"names":[],"mappings":"AAAA;;GAEG;AAIH,OAAO,EAIL,KAAK,gBAAgB,EACtB,MAAM,uCAAuC,CAAC;AAC/C,OAAO,EAIL,eAAe,EACf,gBAAgB,EAChB,iBAAiB,EACjB,kBAAkB,EACnB,MAAM,sCAAsC,CAAC;AAE9C,gEAAgE;AAChE,MAAM,MAAM,QAAQ,GAChB;IAAE,IAAI,EAAE,OAAO,gBAAgB,CAAA;CAAE,GACjC;IAAE,IAAI,EAAE,OAAO,kBAAkB,CAAA;CAAE,GACnC;IAAE,IAAI,EAAE,OAAO,eAAe,CAAA;CAAE,GAChC;IAAE,IAAI,EAAE,OAAO,iBAAiB,CAAA;CAAE,GAClC;IAAE,IAAI,EAAE,kBAAkB,CAAA;CAAE,GAC5B;IAAE,IAAI,EAAE,WAAW,CAAA;CAAE,CAAC;AAqF1B,wBAAgB,qBAAqB,CACnC,IAAI,EAAE,gBAAgB,EACtB,gBAAgB,EAAE,GAAG,CAAC,MAAM,CAAC,EAC7B,gBAAgB,EAAE,GAAG,CAAC,MAAM,CAAC,EAC7B,yBAAyB,EAAE,GAAG,CAAC,MAAM,CAAC,GACrC;IAAE,oCAAoC,EAAE,OAAO,CAAA;CAAE,CAwCnD"}

package/dist/checks/quality/patterns/toctou-race-condition-classify.js

@@ -0,0 +1,125 @@
+/**
+ * Call-site classification for the TOCTOU race-condition check.
+ */
+import * as ts from 'typescript';
+import { getReceiverChainText, isFunctionLikeNode, isInMemoryCacheReceiverText, } from './toctou-race-condition-collection.js';
+import { isDrizzleAtomicWriteMethod, isReadMethod, isUpdateMethod, KIND_READ_LOCAL, KIND_READ_SHARED, KIND_UPDATE_LOCAL, KIND_UPDATE_SHARED, } from './toctou-race-condition-constants.js';
+function isAtomicSqlExecute(call) {
+    if (!ts.isPropertyAccessExpression(call.expression))
+        return false;
+    if (call.expression.name.text !== 'execute')
+        return false;
+    const arg = call.arguments[0];
+    if (!arg)
+        return false;
+    if (ts.isTaggedTemplateExpression(arg) && ts.isIdentifier(arg.tag) && arg.tag.text === 'sql')
+        return true;
+    return false;
+}
+function isDrizzleAtomicWrite(call) {
+    if (!ts.isPropertyAccessExpression(call.expression))
+        return false;
+    const methodName = call.expression.name.text;
+    if (!isDrizzleAtomicWriteMethod(methodName))
+        return false;
+    const receiver = call.expression.expression;
+    if (ts.isIdentifier(receiver)) {
+        const r = receiver.text;
+        if (r === 'db' || r === 'tx' || /Db$|Tx$/.test(r))
+            return true;
+    }
+    return false;
+}
+function getReceiverName(call) {
+    if (!ts.isPropertyAccessExpression(call.expression))
+        return null;
+    const receiver = call.expression.expression;
+    if (receiver.kind === ts.SyntaxKind.ThisKeyword) {
+        return { name: call.expression.name.text, isThisField: true };
+    }
+    const chain = getReceiverChainText(receiver);
+    if (!chain)
+        return null;
+    if (chain.startsWith('this.')) {
+        return { name: chain.slice('this.'.length), isThisField: true };
+    }
+    return { name: chain, isThisField: false };
+}
+function isLocalReceiver(receiver, ctx) {
+    if (receiver.isThisField) {
+        return ctx.classCacheFields.has(receiver.name) || isInMemoryCacheReceiverText(receiver.name);
+    }
+    return (ctx.localCollections.has(receiver.name) ||
+        ctx.localObjectCollectionKeys.has(receiver.name) ||
+        isInMemoryCacheReceiverText(receiver.name));
+}
+function classifyCall(call, ctx) {
+    if (isAtomicSqlExecute(call))
+        return { kind: 'atomic-sql-write' };
+    if (isDrizzleAtomicWrite(call))
+        return { kind: 'atomic-sql-write' };
+    if (!ts.isPropertyAccessExpression(call.expression))
+        return { kind: 'unrelated' };
+    const methodName = call.expression.name.text;
+    const isRead = isReadMethod(methodName);
+    const isUpdate = isUpdateMethod(methodName);
+    if (!isRead && !isUpdate)
+        return { kind: 'unrelated' };
+    const receiver = getReceiverName(call);
+    if (!receiver) {
+        return { kind: isRead ? KIND_READ_SHARED : KIND_UPDATE_SHARED };
+    }
+    if (isLocalReceiver(receiver, ctx)) {
+        return { kind: isRead ? KIND_READ_LOCAL : KIND_UPDATE_LOCAL };
+    }
+    return { kind: isRead ? KIND_READ_SHARED : KIND_UPDATE_SHARED };
+}
+/* eslint-disable sonarjs/cognitive-complexity -- TOCTOU classifier AST visitor */
+export function classifyFunctionCalls(node, localCollections, classCacheFields, localObjectCollectionKeys) {
+    const ctx = { localCollections, classCacheFields, localObjectCollectionKeys };
+    const perReceiver = new Map();
+    let hasReadOnUnknownReceiver = false;
+    let hasUpdateOnUnknownReceiver = false;
+    const visit = (n) => {
+        if (n !== node && isFunctionLikeNode(n))
+            return;
+        if (ts.isCallExpression(n)) {
+            const cls = classifyCall(n, ctx);
+            if (cls.kind === 'read-shared' || cls.kind === 'update-shared') {
+                const recv = getReceiverName(n);
+                if (recv) {
+                    const key = recv.isThisField ? `this.${recv.name}` : recv.name;
+                    let entry = perReceiver.get(key);
+                    if (!entry) {
+                        entry = { read: false, update: false };
+                        perReceiver.set(key, entry);
+                    }
+                    if (cls.kind === 'read-shared')
+                        entry.read = true;
+                    else
+                        entry.update = true;
+                }
+                else {
+                    if (cls.kind === 'read-shared')
+                        hasReadOnUnknownReceiver = true;
+                    else
+                        hasUpdateOnUnknownReceiver = true;
+                }
+            }
+        }
+        ts.forEachChild(n, visit);
+    };
+    if (node.body)
+        visit(node.body);
+    for (const entry of perReceiver.values()) {
+        if (entry.read && entry.update) {
+            return { hasSharedReadAndUpdateOnSameReceiver: true };
+        }
+    }
+    if (hasReadOnUnknownReceiver && hasUpdateOnUnknownReceiver) {
+        return { hasSharedReadAndUpdateOnSameReceiver: true };
+    }
+    return { hasSharedReadAndUpdateOnSameReceiver: false };
+}
+/* eslint-enable sonarjs/cognitive-complexity */
+//# sourceMappingURL=toctou-race-condition-classify.js.map