@sfdxy/mule-lint 1.4.0

package/dist/src/rules/naming/VariableNamingRule.js

@@ -0,0 +1,39 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.VariableNamingRule = void 0;
+const BaseRule_1 = require("../base/BaseRule");
+/**
+ * MULE-102: Variable Naming Convention
+ *
+ * Variables should follow camelCase naming.
+ */
+class VariableNamingRule extends BaseRule_1.BaseRule {
+    id = 'MULE-102';
+    name = 'Variable Naming Convention';
+    description = 'Variables should follow camelCase naming';
+    severity = 'warning';
+    category = 'naming';
+    CAMEL_CASE_PATTERN = /^[a-z][a-zA-Z0-9]*$/;
+    validate(doc, _context) {
+        const issues = [];
+        const setVariables = this.select('//mule:set-variable', doc);
+        for (const setVar of setVariables) {
+            const varName = this.getAttribute(setVar, 'variableName');
+            if (!varName)
+                continue;
+            if (!this.CAMEL_CASE_PATTERN.test(varName)) {
+                issues.push(this.createIssue(setVar, `Variable "${varName}" should be camelCase`, {
+                    suggestion: `Rename to "${this.toCamelCase(varName)}"`
+                }));
+            }
+        }
+        return issues;
+    }
+    toCamelCase(name) {
+        return name
+            .replace(/[-_\s]+(.)?/g, (_, c) => c ? c.toUpperCase() : '')
+            .replace(/^[A-Z]/, c => c.toLowerCase());
+    }
+}
+exports.VariableNamingRule = VariableNamingRule;
+//# sourceMappingURL=VariableNamingRule.js.map

package/dist/src/rules/naming/VariableNamingRule.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"VariableNamingRule.js","sourceRoot":"","sources":["../../../../src/rules/naming/VariableNamingRule.ts"],"names":[],"mappings":";;;AACA,+CAA4C;AAE5C;;;;GAIG;AACH,MAAa,kBAAmB,SAAQ,mBAAQ;IAC5C,EAAE,GAAG,UAAU,CAAC;IAChB,IAAI,GAAG,4BAA4B,CAAC;IACpC,WAAW,GAAG,0CAA0C,CAAC;IACzD,QAAQ,GAAG,SAAkB,CAAC;IAC9B,QAAQ,GAAG,QAAiB,CAAC;IAEZ,kBAAkB,GAAG,qBAAqB,CAAC;IAE5D,QAAQ,CAAC,GAAa,EAAE,QAA2B;QAC/C,MAAM,MAAM,GAAY,EAAE,CAAC;QAE3B,MAAM,YAAY,GAAG,IAAI,CAAC,MAAM,CAAC,qBAAqB,EAAE,GAAG,CAAC,CAAC;QAE7D,KAAK,MAAM,MAAM,IAAI,YAAY,EAAE,CAAC;YAChC,MAAM,OAAO,GAAG,IAAI,CAAC,YAAY,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC;YAC1D,IAAI,CAAC,OAAO;gBAAE,SAAS;YAEvB,IAAI,CAAC,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;gBACzC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,CACxB,MAAM,EACN,aAAa,OAAO,uBAAuB,EAC3C;oBACI,UAAU,EAAE,cAAc,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,GAAG;iBACzD,CACJ,CAAC,CAAC;YACP,CAAC;QACL,CAAC;QAED,OAAO,MAAM,CAAC;IAClB,CAAC;IAEO,WAAW,CAAC,IAAY;QAC5B,OAAO,IAAI;aACN,OAAO,CAAC,cAAc,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aAC3D,OAAO,CAAC,QAAQ,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC;IACjD,CAAC;CACJ;AArCD,gDAqCC"}

package/dist/src/rules/performance/AsyncErrorHandlerRule.d.ts

@@ -0,0 +1,16 @@
+import { ValidationContext, Issue } from '../../types';
+import { BaseRule } from '../base/BaseRule';
+/**
+ * MULE-502: Async Without Error Handler
+ *
+ * Async scopes should have their own error handling.
+ */
+export declare class AsyncErrorHandlerRule extends BaseRule {
+    id: string;
+    name: string;
+    description: string;
+    severity: "warning";
+    category: "performance";
+    validate(doc: Document, _context: ValidationContext): Issue[];
+}
+//# sourceMappingURL=AsyncErrorHandlerRule.d.ts.map

package/dist/src/rules/performance/AsyncErrorHandlerRule.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"AsyncErrorHandlerRule.d.ts","sourceRoot":"","sources":["../../../../src/rules/performance/AsyncErrorHandlerRule.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAE,KAAK,EAAE,MAAM,aAAa,CAAC;AACvD,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAE5C;;;;GAIG;AACH,qBAAa,qBAAsB,SAAQ,QAAQ;IAC/C,EAAE,SAAc;IAChB,IAAI,SAAiC;IACrC,WAAW,SAAuD;IAClE,QAAQ,EAAG,SAAS,CAAU;IAC9B,QAAQ,EAAG,aAAa,CAAU;IAElC,QAAQ,CAAC,GAAG,EAAE,QAAQ,EAAE,QAAQ,EAAE,iBAAiB,GAAG,KAAK,EAAE;CAwBhE"}

package/dist/src/rules/performance/AsyncErrorHandlerRule.js

@@ -0,0 +1,34 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.AsyncErrorHandlerRule = void 0;
+const BaseRule_1 = require("../base/BaseRule");
+/**
+ * MULE-502: Async Without Error Handler
+ *
+ * Async scopes should have their own error handling.
+ */
+class AsyncErrorHandlerRule extends BaseRule_1.BaseRule {
+    id = 'MULE-502';
+    name = 'Async Without Error Handler';
+    description = 'Async scopes should have their own error handling';
+    severity = 'warning';
+    category = 'performance';
+    validate(doc, _context) {
+        const issues = [];
+        const asyncScopes = this.select('//mule:async', doc);
+        for (const async of asyncScopes) {
+            // Check if async has error-handler or try scope
+            const hasErrorHandling = this.exists('./mule:error-handler', async) ||
+                this.exists('./mule:try', async);
+            if (!hasErrorHandling) {
+                const docName = this.getDocName(async) ?? 'Async scope';
+                issues.push(this.createIssue(async, `${docName} has no error handling - errors won't propagate to parent`, {
+                    suggestion: 'Add error-handler or wrap content in try scope'
+                }));
+            }
+        }
+        return issues;
+    }
+}
+exports.AsyncErrorHandlerRule = AsyncErrorHandlerRule;
+//# sourceMappingURL=AsyncErrorHandlerRule.js.map

package/dist/src/rules/performance/AsyncErrorHandlerRule.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"AsyncErrorHandlerRule.js","sourceRoot":"","sources":["../../../../src/rules/performance/AsyncErrorHandlerRule.ts"],"names":[],"mappings":";;;AACA,+CAA4C;AAE5C;;;;GAIG;AACH,MAAa,qBAAsB,SAAQ,mBAAQ;IAC/C,EAAE,GAAG,UAAU,CAAC;IAChB,IAAI,GAAG,6BAA6B,CAAC;IACrC,WAAW,GAAG,mDAAmD,CAAC;IAClE,QAAQ,GAAG,SAAkB,CAAC;IAC9B,QAAQ,GAAG,aAAsB,CAAC;IAElC,QAAQ,CAAC,GAAa,EAAE,QAA2B;QAC/C,MAAM,MAAM,GAAY,EAAE,CAAC;QAE3B,MAAM,WAAW,GAAG,IAAI,CAAC,MAAM,CAAC,cAAc,EAAE,GAAG,CAAC,CAAC;QAErD,KAAK,MAAM,KAAK,IAAI,WAAW,EAAE,CAAC;YAC9B,gDAAgD;YAChD,MAAM,gBAAgB,GAAG,IAAI,CAAC,MAAM,CAAC,sBAAsB,EAAE,KAAiB,CAAC;gBAC3E,IAAI,CAAC,MAAM,CAAC,YAAY,EAAE,KAAiB,CAAC,CAAC;YAEjD,IAAI,CAAC,gBAAgB,EAAE,CAAC;gBACpB,MAAM,OAAO,GAAG,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,IAAI,aAAa,CAAC;gBACxD,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,CACxB,KAAK,EACL,GAAG,OAAO,2DAA2D,EACrE;oBACI,UAAU,EAAE,gDAAgD;iBAC/D,CACJ,CAAC,CAAC;YACP,CAAC;QACL,CAAC;QAED,OAAO,MAAM,CAAC;IAClB,CAAC;CACJ;AA/BD,sDA+BC"}

package/dist/src/rules/performance/LargeChoiceBlockRule.d.ts

@@ -0,0 +1,16 @@
+import { ValidationContext, Issue } from '../../types';
+import { BaseRule } from '../base/BaseRule';
+/**
+ * MULE-503: Large Choice Blocks
+ *
+ * Choice blocks with many when clauses should be refactored.
+ */
+export declare class LargeChoiceBlockRule extends BaseRule {
+    id: string;
+    name: string;
+    description: string;
+    severity: "warning";
+    category: "performance";
+    validate(doc: Document, context: ValidationContext): Issue[];
+}
+//# sourceMappingURL=LargeChoiceBlockRule.d.ts.map

package/dist/src/rules/performance/LargeChoiceBlockRule.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"LargeChoiceBlockRule.d.ts","sourceRoot":"","sources":["../../../../src/rules/performance/LargeChoiceBlockRule.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAE,KAAK,EAAE,MAAM,aAAa,CAAC;AACvD,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAE5C;;;;GAIG;AACH,qBAAa,oBAAqB,SAAQ,QAAQ;IAC9C,EAAE,SAAc;IAChB,IAAI,SAAyB;IAC7B,WAAW,SAA+D;IAC1E,QAAQ,EAAG,SAAS,CAAU;IAC9B,QAAQ,EAAG,aAAa,CAAU;IAElC,QAAQ,CAAC,GAAG,EAAE,QAAQ,EAAE,OAAO,EAAE,iBAAiB,GAAG,KAAK,EAAE;CAsB/D"}

package/dist/src/rules/performance/LargeChoiceBlockRule.js

@@ -0,0 +1,32 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.LargeChoiceBlockRule = void 0;
+const BaseRule_1 = require("../base/BaseRule");
+/**
+ * MULE-503: Large Choice Blocks
+ *
+ * Choice blocks with many when clauses should be refactored.
+ */
+class LargeChoiceBlockRule extends BaseRule_1.BaseRule {
+    id = 'MULE-503';
+    name = 'Large Choice Blocks';
+    description = 'Choice blocks with many when clauses should be refactored';
+    severity = 'warning';
+    category = 'performance';
+    validate(doc, context) {
+        const issues = [];
+        const maxWhenClauses = this.getOption(context, 'maxWhenClauses', 7);
+        const choices = this.select('//mule:choice', doc);
+        for (const choice of choices) {
+            const whenClauses = this.select('./mule:when', choice);
+            if (whenClauses.length > maxWhenClauses) {
+                issues.push(this.createIssue(choice, `Choice has ${whenClauses.length} when clauses (max recommended: ${maxWhenClauses})`, {
+                    suggestion: 'Consider using DataWeave lookup table or flow-ref with dynamic routing'
+                }));
+            }
+        }
+        return issues;
+    }
+}
+exports.LargeChoiceBlockRule = LargeChoiceBlockRule;
+//# sourceMappingURL=LargeChoiceBlockRule.js.map

package/dist/src/rules/performance/LargeChoiceBlockRule.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"LargeChoiceBlockRule.js","sourceRoot":"","sources":["../../../../src/rules/performance/LargeChoiceBlockRule.ts"],"names":[],"mappings":";;;AACA,+CAA4C;AAE5C;;;;GAIG;AACH,MAAa,oBAAqB,SAAQ,mBAAQ;IAC9C,EAAE,GAAG,UAAU,CAAC;IAChB,IAAI,GAAG,qBAAqB,CAAC;IAC7B,WAAW,GAAG,2DAA2D,CAAC;IAC1E,QAAQ,GAAG,SAAkB,CAAC;IAC9B,QAAQ,GAAG,aAAsB,CAAC;IAElC,QAAQ,CAAC,GAAa,EAAE,OAA0B;QAC9C,MAAM,MAAM,GAAY,EAAE,CAAC;QAC3B,MAAM,cAAc,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,gBAAgB,EAAE,CAAC,CAAC,CAAC;QAEpE,MAAM,OAAO,GAAG,IAAI,CAAC,MAAM,CAAC,eAAe,EAAE,GAAG,CAAC,CAAC;QAElD,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;YAC3B,MAAM,WAAW,GAAG,IAAI,CAAC,MAAM,CAAC,aAAa,EAAE,MAAkB,CAAC,CAAC;YAEnE,IAAI,WAAW,CAAC,MAAM,GAAG,cAAc,EAAE,CAAC;gBACtC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,CACxB,MAAM,EACN,cAAc,WAAW,CAAC,MAAM,mCAAmC,cAAc,GAAG,EACpF;oBACI,UAAU,EAAE,wEAAwE;iBACvF,CACJ,CAAC,CAAC;YACP,CAAC;QACL,CAAC;QAED,OAAO,MAAM,CAAC;IAClB,CAAC;CACJ;AA7BD,oDA6BC"}

package/dist/src/rules/performance/ScatterGatherRoutesRule.d.ts

@@ -0,0 +1,16 @@
+import { ValidationContext, Issue } from '../../types';
+import { BaseRule } from '../base/BaseRule';
+/**
+ * MULE-501: Scatter-Gather Route Count
+ *
+ * Scatter-gather with many routes may cause memory issues.
+ */
+export declare class ScatterGatherRoutesRule extends BaseRule {
+    id: string;
+    name: string;
+    description: string;
+    severity: "info";
+    category: "performance";
+    validate(doc: Document, context: ValidationContext): Issue[];
+}
+//# sourceMappingURL=ScatterGatherRoutesRule.d.ts.map

package/dist/src/rules/performance/ScatterGatherRoutesRule.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ScatterGatherRoutesRule.d.ts","sourceRoot":"","sources":["../../../../src/rules/performance/ScatterGatherRoutesRule.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAE,KAAK,EAAE,MAAM,aAAa,CAAC;AACvD,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAE5C;;;;GAIG;AACH,qBAAa,uBAAwB,SAAQ,QAAQ;IACjD,EAAE,SAAc;IAChB,IAAI,SAAgC;IACpC,WAAW,SAA6D;IACxE,QAAQ,EAAG,MAAM,CAAU;IAC3B,QAAQ,EAAG,aAAa,CAAU;IAElC,QAAQ,CAAC,GAAG,EAAE,QAAQ,EAAE,OAAO,EAAE,iBAAiB,GAAG,KAAK,EAAE;CAsB/D"}

package/dist/src/rules/performance/ScatterGatherRoutesRule.js

@@ -0,0 +1,32 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ScatterGatherRoutesRule = void 0;
+const BaseRule_1 = require("../base/BaseRule");
+/**
+ * MULE-501: Scatter-Gather Route Count
+ *
+ * Scatter-gather with many routes may cause memory issues.
+ */
+class ScatterGatherRoutesRule extends BaseRule_1.BaseRule {
+    id = 'MULE-501';
+    name = 'Scatter-Gather Route Count';
+    description = 'Scatter-gather with many routes may cause memory issues';
+    severity = 'info';
+    category = 'performance';
+    validate(doc, context) {
+        const issues = [];
+        const maxRoutes = this.getOption(context, 'maxRoutes', 5);
+        const scatterGathers = this.select('//mule:scatter-gather', doc);
+        for (const sg of scatterGathers) {
+            const routes = this.select('./mule:route', sg);
+            if (routes.length > maxRoutes) {
+                issues.push(this.createIssue(sg, `Scatter-gather has ${routes.length} routes (max recommended: ${maxRoutes})`, {
+                    suggestion: 'Consider using batch processing for large parallel operations'
+                }));
+            }
+        }
+        return issues;
+    }
+}
+exports.ScatterGatherRoutesRule = ScatterGatherRoutesRule;
+//# sourceMappingURL=ScatterGatherRoutesRule.js.map

package/dist/src/rules/performance/ScatterGatherRoutesRule.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ScatterGatherRoutesRule.js","sourceRoot":"","sources":["../../../../src/rules/performance/ScatterGatherRoutesRule.ts"],"names":[],"mappings":";;;AACA,+CAA4C;AAE5C;;;;GAIG;AACH,MAAa,uBAAwB,SAAQ,mBAAQ;IACjD,EAAE,GAAG,UAAU,CAAC;IAChB,IAAI,GAAG,4BAA4B,CAAC;IACpC,WAAW,GAAG,yDAAyD,CAAC;IACxE,QAAQ,GAAG,MAAe,CAAC;IAC3B,QAAQ,GAAG,aAAsB,CAAC;IAElC,QAAQ,CAAC,GAAa,EAAE,OAA0B;QAC9C,MAAM,MAAM,GAAY,EAAE,CAAC;QAC3B,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC;QAE1D,MAAM,cAAc,GAAG,IAAI,CAAC,MAAM,CAAC,uBAAuB,EAAE,GAAG,CAAC,CAAC;QAEjE,KAAK,MAAM,EAAE,IAAI,cAAc,EAAE,CAAC;YAC9B,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,cAAc,EAAE,EAAc,CAAC,CAAC;YAE3D,IAAI,MAAM,CAAC,MAAM,GAAG,SAAS,EAAE,CAAC;gBAC5B,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,CACxB,EAAE,EACF,sBAAsB,MAAM,CAAC,MAAM,6BAA6B,SAAS,GAAG,EAC5E;oBACI,UAAU,EAAE,+DAA+D;iBAC9E,CACJ,CAAC,CAAC;YACP,CAAC;QACL,CAAC;QAED,OAAO,MAAM,CAAC;IAClB,CAAC;CACJ;AA7BD,0DA6BC"}

package/dist/src/rules/security/HardcodedCredentialsRule.d.ts

@@ -0,0 +1,19 @@
+import { ValidationContext, Issue } from '../../types';
+import { BaseRule } from '../base/BaseRule';
+/**
+ * MULE-201: Hardcoded Credentials
+ *
+ * Passwords and secrets should use secure property placeholders.
+ */
+export declare class HardcodedCredentialsRule extends BaseRule {
+    id: string;
+    name: string;
+    description: string;
+    severity: "error";
+    category: "security";
+    private readonly SENSITIVE_ATTRS;
+    validate(doc: Document, _context: ValidationContext): Issue[];
+    private isSensitiveAttribute;
+    private isHardcoded;
+}
+//# sourceMappingURL=HardcodedCredentialsRule.d.ts.map

package/dist/src/rules/security/HardcodedCredentialsRule.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"HardcodedCredentialsRule.d.ts","sourceRoot":"","sources":["../../../../src/rules/security/HardcodedCredentialsRule.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAE,KAAK,EAAE,MAAM,aAAa,CAAC;AACvD,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAE5C;;;;GAIG;AACH,qBAAa,wBAAyB,SAAQ,QAAQ;IAClD,EAAE,SAAc;IAChB,IAAI,SAA2B;IAC/B,WAAW,SAA+E;IAC1F,QAAQ,EAAG,OAAO,CAAU;IAC5B,QAAQ,EAAG,UAAU,CAAU;IAE/B,OAAO,CAAC,QAAQ,CAAC,eAAe,CAU9B;IAEF,QAAQ,CAAC,GAAG,EAAE,QAAQ,EAAE,QAAQ,EAAE,iBAAiB,GAAG,KAAK,EAAE;IA6B7D,OAAO,CAAC,oBAAoB;IAM5B,OAAO,CAAC,WAAW;CActB"}

package/dist/src/rules/security/HardcodedCredentialsRule.js

@@ -0,0 +1,66 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.HardcodedCredentialsRule = void 0;
+const BaseRule_1 = require("../base/BaseRule");
+/**
+ * MULE-201: Hardcoded Credentials
+ *
+ * Passwords and secrets should use secure property placeholders.
+ */
+class HardcodedCredentialsRule extends BaseRule_1.BaseRule {
+    id = 'MULE-201';
+    name = 'Hardcoded Credentials';
+    description = 'Passwords and secrets should use secure property placeholders ${secure::}';
+    severity = 'error';
+    category = 'security';
+    SENSITIVE_ATTRS = [
+        'password',
+        'secret',
+        'clientSecret',
+        'client-secret',
+        'apiKey',
+        'api-key',
+        'token',
+        'accessToken',
+        'privateKey',
+    ];
+    validate(doc, _context) {
+        const issues = [];
+        const allElements = doc.getElementsByTagName('*');
+        for (let i = 0; i < allElements.length; i++) {
+            const element = allElements[i];
+            const attrs = element.attributes;
+            for (let j = 0; j < attrs.length; j++) {
+                const attr = attrs[j];
+                const attrName = attr.name.toLowerCase();
+                const value = attr.value;
+                // Check if this is a sensitive attribute
+                if (this.isSensitiveAttribute(attrName) && this.isHardcoded(value)) {
+                    issues.push(this.createIssue(element, `Hardcoded ${attr.name} found - use secure property placeholder`, {
+                        suggestion: `Use \${secure::${attr.name}} instead of hardcoded value`
+                    }));
+                }
+            }
+        }
+        return issues;
+    }
+    isSensitiveAttribute(attrName) {
+        return this.SENSITIVE_ATTRS.some(sensitive => attrName.includes(sensitive.toLowerCase()));
+    }
+    isHardcoded(value) {
+        // Empty values are not hardcoded
+        if (!value || value.trim() === '')
+            return false;
+        // Ignore boolean/numeric flags (e.g. useToken="true", timeout="1000")
+        if (value === 'true' || value === 'false' || !isNaN(Number(value)))
+            return false;
+        // Check for secure property placeholder
+        // Must start with ${secure:: and end with }
+        if (value.startsWith('${secure::') && value.endsWith('}'))
+            return false;
+        // Any other value is considered "hardcoded" or "insecure" in this context
+        return true;
+    }
+}
+exports.HardcodedCredentialsRule = HardcodedCredentialsRule;
+//# sourceMappingURL=HardcodedCredentialsRule.js.map

package/dist/src/rules/security/HardcodedCredentialsRule.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"HardcodedCredentialsRule.js","sourceRoot":"","sources":["../../../../src/rules/security/HardcodedCredentialsRule.ts"],"names":[],"mappings":";;;AACA,+CAA4C;AAE5C;;;;GAIG;AACH,MAAa,wBAAyB,SAAQ,mBAAQ;IAClD,EAAE,GAAG,UAAU,CAAC;IAChB,IAAI,GAAG,uBAAuB,CAAC;IAC/B,WAAW,GAAG,2EAA2E,CAAC;IAC1F,QAAQ,GAAG,OAAgB,CAAC;IAC5B,QAAQ,GAAG,UAAmB,CAAC;IAEd,eAAe,GAAG;QAC/B,UAAU;QACV,QAAQ;QACR,cAAc;QACd,eAAe;QACf,QAAQ;QACR,SAAS;QACT,OAAO;QACP,aAAa;QACb,YAAY;KACf,CAAC;IAEF,QAAQ,CAAC,GAAa,EAAE,QAA2B;QAC/C,MAAM,MAAM,GAAY,EAAE,CAAC;QAC3B,MAAM,WAAW,GAAG,GAAG,CAAC,oBAAoB,CAAC,GAAG,CAAC,CAAC;QAElD,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,WAAW,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YAC1C,MAAM,OAAO,GAAG,WAAW,CAAC,CAAC,CAAY,CAAC;YAC1C,MAAM,KAAK,GAAG,OAAO,CAAC,UAAU,CAAC;YAEjC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;gBACpC,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;gBACtB,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC;gBACzC,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC;gBAEzB,yCAAyC;gBACzC,IAAI,IAAI,CAAC,oBAAoB,CAAC,QAAQ,CAAC,IAAI,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,EAAE,CAAC;oBACjE,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,CACxB,OAAO,EACP,aAAa,IAAI,CAAC,IAAI,0CAA0C,EAChE;wBACI,UAAU,EAAE,kBAAkB,IAAI,CAAC,IAAI,8BAA8B;qBACxE,CACJ,CAAC,CAAC;gBACP,CAAC;YACL,CAAC;QACL,CAAC;QAED,OAAO,MAAM,CAAC;IAClB,CAAC;IAEO,oBAAoB,CAAC,QAAgB;QACzC,OAAO,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CACzC,QAAQ,CAAC,QAAQ,CAAC,SAAS,CAAC,WAAW,EAAE,CAAC,CAC7C,CAAC;IACN,CAAC;IAEO,WAAW,CAAC,KAAa;QAC7B,iCAAiC;QACjC,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE;YAAE,OAAO,KAAK,CAAC;QAEhD,sEAAsE;QACtE,IAAI,KAAK,KAAK,MAAM,IAAI,KAAK,KAAK,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YAAE,OAAO,KAAK,CAAC;QAEjF,wCAAwC;QACxC,4CAA4C;QAC5C,IAAI,KAAK,CAAC,UAAU,CAAC,YAAY,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC;YAAE,OAAO,KAAK,CAAC;QAExE,0EAA0E;QAC1E,OAAO,IAAI,CAAC;IAChB,CAAC;CACJ;AApED,4DAoEC"}

package/dist/src/rules/security/HardcodedHttpRule.d.ts

@@ -0,0 +1,33 @@
+import { ValidationContext, Issue } from '../../types';
+import { BaseRule } from '../base/BaseRule';
+/**
+ * MULE-004: Hardcoded HTTP URLs
+ *
+ * HTTP/HTTPS URLs should use property placeholders, not hardcoded values.
+ * Hardcoded URLs make environment promotion difficult and can lead to errors.
+ */
+export declare class HardcodedHttpRule extends BaseRule {
+    id: string;
+    name: string;
+    description: string;
+    severity: "error";
+    category: "security";
+    private readonly URL_PATTERN;
+    private readonly ALLOWED_PATTERNS;
+    private readonly IGNORED_ATTRIBUTES;
+    private readonly URL_ATTRIBUTES;
+    validate(doc: Document, _context: ValidationContext): Issue[];
+    /**
+     * Check if a value is a hardcoded URL
+     */
+    private isHardcodedUrl;
+    /**
+     * Check if an attribute should be ignored
+     */
+    private isIgnoredAttribute;
+    /**
+     * Truncate long URLs for display
+     */
+    private truncate;
+}
+//# sourceMappingURL=HardcodedHttpRule.d.ts.map

package/dist/src/rules/security/HardcodedHttpRule.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"HardcodedHttpRule.d.ts","sourceRoot":"","sources":["../../../../src/rules/security/HardcodedHttpRule.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAE,KAAK,EAAE,MAAM,aAAa,CAAC;AACvD,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAE5C;;;;;GAKG;AACH,qBAAa,iBAAkB,SAAQ,QAAQ;IAC3C,EAAE,SAAc;IAChB,IAAI,SAAyB;IAC7B,WAAW,SAAkF;IAC7F,QAAQ,EAAG,OAAO,CAAU;IAC5B,QAAQ,EAAG,UAAU,CAAU;IAG/B,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAmB;IAG/C,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAI/B;IAGF,OAAO,CAAC,QAAQ,CAAC,kBAAkB,CAIjC;IAGF,OAAO,CAAC,QAAQ,CAAC,cAAc,CAQ7B;IAEF,QAAQ,CAAC,GAAG,EAAE,QAAQ,EAAE,QAAQ,EAAE,iBAAiB,GAAG,KAAK,EAAE;IAoC7D;;OAEG;IACH,OAAO,CAAC,cAAc;IAiBtB;;OAEG;IACH,OAAO,CAAC,kBAAkB;IAY1B;;OAEG;IACH,OAAO,CAAC,QAAQ;CAMnB"}

package/dist/src/rules/security/HardcodedHttpRule.js

@@ -0,0 +1,108 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.HardcodedHttpRule = void 0;
+const BaseRule_1 = require("../base/BaseRule");
+/**
+ * MULE-004: Hardcoded HTTP URLs
+ *
+ * HTTP/HTTPS URLs should use property placeholders, not hardcoded values.
+ * Hardcoded URLs make environment promotion difficult and can lead to errors.
+ */
+class HardcodedHttpRule extends BaseRule_1.BaseRule {
+    id = 'MULE-004';
+    name = 'Hardcoded HTTP URLs';
+    description = 'HTTP/HTTPS URLs should use property placeholders instead of hardcoded values';
+    severity = 'error';
+    category = 'security';
+    // URL patterns to detect
+    URL_PATTERN = /^https?:\/\//i;
+    // Patterns that indicate the value is dynamic (allowed)
+    ALLOWED_PATTERNS = [
+        /\$\{[^}]+\}/, // Property placeholders ${...}
+        /#\[[^\]]+\]/, // DataWeave expressions #[...]
+        /p\(['"]/, // Property function p('...')
+    ];
+    // Attributes that should be ignored (not user-configurable URLs)
+    IGNORED_ATTRIBUTES = [
+        'xmlns',
+        'xsi:schemaLocation',
+        'schemaLocation',
+    ];
+    // Attributes to check for URLs
+    URL_ATTRIBUTES = [
+        'url',
+        'host',
+        'path',
+        'value',
+        'uri',
+        'address',
+        'endpoint',
+    ];
+    validate(doc, _context) {
+        const issues = [];
+        // Get all elements and check their attributes
+        const allElements = doc.getElementsByTagName('*');
+        for (let i = 0; i < allElements.length; i++) {
+            const element = allElements[i];
+            const attrs = element.attributes;
+            for (let j = 0; j < attrs.length; j++) {
+                const attr = attrs[j];
+                const attrName = attr.name;
+                const value = attr.value;
+                // Skip namespace declarations and schema locations
+                if (this.isIgnoredAttribute(attrName)) {
+                    continue;
+                }
+                // Check if this looks like a hardcoded URL
+                if (this.isHardcodedUrl(value)) {
+                    issues.push(this.createIssue(element, `Hardcoded URL "${this.truncate(value)}" found in attribute "${attrName}"`, {
+                        suggestion: 'Use property placeholder: ${http.baseUrl} or ${env.api.host}'
+                    }));
+                }
+            }
+        }
+        return issues;
+    }
+    /**
+     * Check if a value is a hardcoded URL
+     */
+    isHardcodedUrl(value) {
+        // Must match URL pattern
+        if (!this.URL_PATTERN.test(value)) {
+            return false;
+        }
+        // Check if it contains any allowed dynamic pattern
+        for (const pattern of this.ALLOWED_PATTERNS) {
+            if (pattern.test(value)) {
+                return false;
+            }
+        }
+        // It's a hardcoded URL
+        return true;
+    }
+    /**
+     * Check if an attribute should be ignored
+     */
+    isIgnoredAttribute(attrName) {
+        // Check exact match
+        if (this.IGNORED_ATTRIBUTES.includes(attrName)) {
+            return true;
+        }
+        // Check for xmlns: prefixed attributes
+        if (attrName.startsWith('xmlns:')) {
+            return true;
+        }
+        return false;
+    }
+    /**
+     * Truncate long URLs for display
+     */
+    truncate(value, maxLen = 50) {
+        if (value.length <= maxLen) {
+            return value;
+        }
+        return value.substring(0, maxLen) + '...';
+    }
+}
+exports.HardcodedHttpRule = HardcodedHttpRule;
+//# sourceMappingURL=HardcodedHttpRule.js.map

package/dist/src/rules/security/HardcodedHttpRule.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"HardcodedHttpRule.js","sourceRoot":"","sources":["../../../../src/rules/security/HardcodedHttpRule.ts"],"names":[],"mappings":";;;AACA,+CAA4C;AAE5C;;;;;GAKG;AACH,MAAa,iBAAkB,SAAQ,mBAAQ;IAC3C,EAAE,GAAG,UAAU,CAAC;IAChB,IAAI,GAAG,qBAAqB,CAAC;IAC7B,WAAW,GAAG,8EAA8E,CAAC;IAC7F,QAAQ,GAAG,OAAgB,CAAC;IAC5B,QAAQ,GAAG,UAAmB,CAAC;IAE/B,yBAAyB;IACR,WAAW,GAAG,eAAe,CAAC;IAE/C,wDAAwD;IACvC,gBAAgB,GAAG;QAChC,aAAa,EAAO,+BAA+B;QACnD,aAAa,EAAO,+BAA+B;QACnD,SAAS,EAAW,6BAA6B;KACpD,CAAC;IAEF,iEAAiE;IAChD,kBAAkB,GAAG;QAClC,OAAO;QACP,oBAAoB;QACpB,gBAAgB;KACnB,CAAC;IAEF,+BAA+B;IACd,cAAc,GAAG;QAC9B,KAAK;QACL,MAAM;QACN,MAAM;QACN,OAAO;QACP,KAAK;QACL,SAAS;QACT,UAAU;KACb,CAAC;IAEF,QAAQ,CAAC,GAAa,EAAE,QAA2B;QAC/C,MAAM,MAAM,GAAY,EAAE,CAAC;QAE3B,8CAA8C;QAC9C,MAAM,WAAW,GAAG,GAAG,CAAC,oBAAoB,CAAC,GAAG,CAAC,CAAC;QAElD,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,WAAW,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YAC1C,MAAM,OAAO,GAAG,WAAW,CAAC,CAAC,CAAC,CAAC;YAC/B,MAAM,KAAK,GAAG,OAAO,CAAC,UAAU,CAAC;YAEjC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;gBACpC,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;gBACtB,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC;gBAC3B,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC;gBAEzB,mDAAmD;gBACnD,IAAI,IAAI,CAAC,kBAAkB,CAAC,QAAQ,CAAC,EAAE,CAAC;oBACpC,SAAS;gBACb,CAAC;gBAED,2CAA2C;gBAC3C,IAAI,IAAI,CAAC,cAAc,CAAC,KAAK,CAAC,EAAE,CAAC;oBAC7B,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,CACxB,OAAO,EACP,kBAAkB,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,yBAAyB,QAAQ,GAAG,EAC1E;wBACI,UAAU,EAAE,8DAA8D;qBAC7E,CACJ,CAAC,CAAC;gBACP,CAAC;YACL,CAAC;QACL,CAAC;QAED,OAAO,MAAM,CAAC;IAClB,CAAC;IAED;;OAEG;IACK,cAAc,CAAC,KAAa;QAChC,yBAAyB;QACzB,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;YAChC,OAAO,KAAK,CAAC;QACjB,CAAC;QAED,mDAAmD;QACnD,KAAK,MAAM,OAAO,IAAI,IAAI,CAAC,gBAAgB,EAAE,CAAC;YAC1C,IAAI,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;gBACtB,OAAO,KAAK,CAAC;YACjB,CAAC;QACL,CAAC;QAED,uBAAuB;QACvB,OAAO,IAAI,CAAC;IAChB,CAAC;IAED;;OAEG;IACK,kBAAkB,CAAC,QAAgB;QACvC,oBAAoB;QACpB,IAAI,IAAI,CAAC,kBAAkB,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC7C,OAAO,IAAI,CAAC;QAChB,CAAC;QACD,uCAAuC;QACvC,IAAI,QAAQ,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;YAChC,OAAO,IAAI,CAAC;QAChB,CAAC;QACD,OAAO,KAAK,CAAC;IACjB,CAAC;IAED;;OAEG;IACK,QAAQ,CAAC,KAAa,EAAE,MAAM,GAAG,EAAE;QACvC,IAAI,KAAK,CAAC,MAAM,IAAI,MAAM,EAAE,CAAC;YACzB,OAAO,KAAK,CAAC;QACjB,CAAC;QACD,OAAO,KAAK,CAAC,SAAS,CAAC,CAAC,EAAE,MAAM,CAAC,GAAG,KAAK,CAAC;IAC9C,CAAC;CACJ;AAnHD,8CAmHC"}

package/dist/src/rules/security/InsecureTlsRule.d.ts

@@ -0,0 +1,16 @@
+import { ValidationContext, Issue } from '../../types';
+import { BaseRule } from '../base/BaseRule';
+/**
+ * MULE-202: Insecure TLS Configuration
+ *
+ * TLS configurations should not disable certificate verification.
+ */
+export declare class InsecureTlsRule extends BaseRule {
+    id: string;
+    name: string;
+    description: string;
+    severity: "error";
+    category: "security";
+    validate(doc: Document, _context: ValidationContext): Issue[];
+}
+//# sourceMappingURL=InsecureTlsRule.d.ts.map

package/dist/src/rules/security/InsecureTlsRule.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"InsecureTlsRule.d.ts","sourceRoot":"","sources":["../../../../src/rules/security/InsecureTlsRule.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAE,KAAK,EAAE,MAAM,aAAa,CAAC;AACvD,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAE5C;;;;GAIG;AACH,qBAAa,eAAgB,SAAQ,QAAQ;IACzC,EAAE,SAAc;IAChB,IAAI,SAAgC;IACpC,WAAW,SAAoE;IAC/E,QAAQ,EAAG,OAAO,CAAU;IAC5B,QAAQ,EAAG,UAAU,CAAU;IAE/B,QAAQ,CAAC,GAAG,EAAE,QAAQ,EAAE,QAAQ,EAAE,iBAAiB,GAAG,KAAK,EAAE;CAqChE"}

package/dist/src/rules/security/InsecureTlsRule.js

@@ -0,0 +1,36 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.InsecureTlsRule = void 0;
+const BaseRule_1 = require("../base/BaseRule");
+/**
+ * MULE-202: Insecure TLS Configuration
+ *
+ * TLS configurations should not disable certificate verification.
+ */
+class InsecureTlsRule extends BaseRule_1.BaseRule {
+    id = 'MULE-202';
+    name = 'Insecure TLS Configuration';
+    description = 'TLS configurations should not disable certificate verification';
+    severity = 'error';
+    category = 'security';
+    validate(doc, _context) {
+        const issues = [];
+        // Find insecure trust-store configurations
+        const insecureTrustStores = this.select('//*[local-name()="trust-store"][@insecure="true"]', doc);
+        for (const trustStore of insecureTrustStores) {
+            issues.push(this.createIssue(trustStore, 'TLS trust-store has insecure="true" - certificates not verified', {
+                suggestion: 'Remove insecure="true" and configure proper certificate validation'
+            }));
+        }
+        // Find insecure key-store configurations
+        const insecureKeyStores = this.select('//*[local-name()="key-store"][@insecure="true"]', doc);
+        for (const keyStore of insecureKeyStores) {
+            issues.push(this.createIssue(keyStore, 'TLS key-store has insecure="true"', {
+                suggestion: 'Remove insecure="true" and use proper key management'
+            }));
+        }
+        return issues;
+    }
+}
+exports.InsecureTlsRule = InsecureTlsRule;
+//# sourceMappingURL=InsecureTlsRule.js.map

package/dist/src/rules/security/InsecureTlsRule.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"InsecureTlsRule.js","sourceRoot":"","sources":["../../../../src/rules/security/InsecureTlsRule.ts"],"names":[],"mappings":";;;AACA,+CAA4C;AAE5C;;;;GAIG;AACH,MAAa,eAAgB,SAAQ,mBAAQ;IACzC,EAAE,GAAG,UAAU,CAAC;IAChB,IAAI,GAAG,4BAA4B,CAAC;IACpC,WAAW,GAAG,gEAAgE,CAAC;IAC/E,QAAQ,GAAG,OAAgB,CAAC;IAC5B,QAAQ,GAAG,UAAmB,CAAC;IAE/B,QAAQ,CAAC,GAAa,EAAE,QAA2B;QAC/C,MAAM,MAAM,GAAY,EAAE,CAAC;QAE3B,2CAA2C;QAC3C,MAAM,mBAAmB,GAAG,IAAI,CAAC,MAAM,CACnC,mDAAmD,EACnD,GAAG,CACN,CAAC;QAEF,KAAK,MAAM,UAAU,IAAI,mBAAmB,EAAE,CAAC;YAC3C,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,CACxB,UAAU,EACV,iEAAiE,EACjE;gBACI,UAAU,EAAE,oEAAoE;aACnF,CACJ,CAAC,CAAC;QACP,CAAC;QAED,yCAAyC;QACzC,MAAM,iBAAiB,GAAG,IAAI,CAAC,MAAM,CACjC,iDAAiD,EACjD,GAAG,CACN,CAAC;QAEF,KAAK,MAAM,QAAQ,IAAI,iBAAiB,EAAE,CAAC;YACvC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,CACxB,QAAQ,EACR,mCAAmC,EACnC;gBACI,UAAU,EAAE,sDAAsD;aACrE,CACJ,CAAC,CAAC;QACP,CAAC;QAED,OAAO,MAAM,CAAC;IAClB,CAAC;CACJ;AA5CD,0CA4CC"}

package/dist/src/rules/standards/ChoiceAntiPatternRule.d.ts

@@ -0,0 +1,17 @@
+import { ValidationContext, Issue } from '../../types';
+import { BaseRule } from '../base/BaseRule';
+/**
+ * MULE-008: Choice Anti-Pattern
+ *
+ * Avoid using raise-error directly inside choice/otherwise blocks.
+ * This is an anti-pattern - use a more descriptive error type instead.
+ */
+export declare class ChoiceAntiPatternRule extends BaseRule {
+    id: string;
+    name: string;
+    description: string;
+    severity: "warning";
+    category: "standards";
+    validate(doc: Document, _context: ValidationContext): Issue[];
+}
+//# sourceMappingURL=ChoiceAntiPatternRule.d.ts.map

package/dist/src/rules/standards/ChoiceAntiPatternRule.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ChoiceAntiPatternRule.d.ts","sourceRoot":"","sources":["../../../../src/rules/standards/ChoiceAntiPatternRule.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAE,KAAK,EAAE,MAAM,aAAa,CAAC;AACvD,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAE5C;;;;;GAKG;AACH,qBAAa,qBAAsB,SAAQ,QAAQ;IAC/C,EAAE,SAAc;IAChB,IAAI,SAAyB;IAC7B,WAAW,SAAkF;IAC7F,QAAQ,EAAG,SAAS,CAAU;IAC9B,QAAQ,EAAG,WAAW,CAAU;IAEhC,QAAQ,CAAC,GAAG,EAAE,QAAQ,EAAE,QAAQ,EAAE,iBAAiB,GAAG,KAAK,EAAE;CA6ChE"}

package/dist/src/rules/standards/ChoiceAntiPatternRule.js

@@ -0,0 +1,43 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ChoiceAntiPatternRule = void 0;
+const BaseRule_1 = require("../base/BaseRule");
+/**
+ * MULE-008: Choice Anti-Pattern
+ *
+ * Avoid using raise-error directly inside choice/otherwise blocks.
+ * This is an anti-pattern - use a more descriptive error type instead.
+ */
+class ChoiceAntiPatternRule extends BaseRule_1.BaseRule {
+    id = 'MULE-008';
+    name = 'Choice Anti-Pattern';
+    description = 'Avoid raise-error directly in choice/otherwise - use descriptive error types';
+    severity = 'warning';
+    category = 'standards';
+    validate(doc, _context) {
+        const issues = [];
+        // Find raise-error directly in otherwise blocks
+        const raiseErrorsInOtherwise = this.select('//mule:choice/mule:otherwise/mule:raise-error', doc);
+        for (const raiseError of raiseErrorsInOtherwise) {
+            const errorType = this.getAttribute(raiseError, 'type') ?? 'unknown';
+            issues.push(this.createIssue(raiseError, `raise-error with type="${errorType}" directly in otherwise block is an anti-pattern`, {
+                suggestion: 'Consider using a custom error type (e.g., APP:INVALID_REQUEST) with descriptive message, or refactor the choice logic'
+            }));
+        }
+        // Also check for raise-error in when blocks (less common but still an anti-pattern)
+        const raiseErrorsInWhen = this.select('//mule:choice/mule:when/mule:raise-error', doc);
+        for (const raiseError of raiseErrorsInWhen) {
+            const errorType = this.getAttribute(raiseError, 'type') ?? 'unknown';
+            // Check if using generic ANY type
+            if (errorType === 'ANY' || errorType === 'MULE:ANY') {
+                issues.push(this.createIssue(raiseError, `raise-error with generic type="${errorType}" in choice/when block`, {
+                    suggestion: 'Use a specific error type (e.g., APP:VALIDATION_ERROR) instead of ANY',
+                    severity: 'info'
+                }));
+            }
+        }
+        return issues;
+    }
+}
+exports.ChoiceAntiPatternRule = ChoiceAntiPatternRule;
+//# sourceMappingURL=ChoiceAntiPatternRule.js.map

package/dist/src/rules/standards/ChoiceAntiPatternRule.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ChoiceAntiPatternRule.js","sourceRoot":"","sources":["../../../../src/rules/standards/ChoiceAntiPatternRule.ts"],"names":[],"mappings":";;;AACA,+CAA4C;AAE5C;;;;;GAKG;AACH,MAAa,qBAAsB,SAAQ,mBAAQ;IAC/C,EAAE,GAAG,UAAU,CAAC;IAChB,IAAI,GAAG,qBAAqB,CAAC;IAC7B,WAAW,GAAG,8EAA8E,CAAC;IAC7F,QAAQ,GAAG,SAAkB,CAAC;IAC9B,QAAQ,GAAG,WAAoB,CAAC;IAEhC,QAAQ,CAAC,GAAa,EAAE,QAA2B;QAC/C,MAAM,MAAM,GAAY,EAAE,CAAC;QAE3B,gDAAgD;QAChD,MAAM,sBAAsB,GAAG,IAAI,CAAC,MAAM,CACtC,+CAA+C,EAC/C,GAAG,CACN,CAAC;QAEF,KAAK,MAAM,UAAU,IAAI,sBAAsB,EAAE,CAAC;YAC9C,MAAM,SAAS,GAAG,IAAI,CAAC,YAAY,CAAC,UAAU,EAAE,MAAM,CAAC,IAAI,SAAS,CAAC;YAErE,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,CACxB,UAAU,EACV,0BAA0B,SAAS,kDAAkD,EACrF;gBACI,UAAU,EAAE,uHAAuH;aACtI,CACJ,CAAC,CAAC;QACP,CAAC;QAED,oFAAoF;QACpF,MAAM,iBAAiB,GAAG,IAAI,CAAC,MAAM,CACjC,0CAA0C,EAC1C,GAAG,CACN,CAAC;QAEF,KAAK,MAAM,UAAU,IAAI,iBAAiB,EAAE,CAAC;YACzC,MAAM,SAAS,GAAG,IAAI,CAAC,YAAY,CAAC,UAAU,EAAE,MAAM,CAAC,IAAI,SAAS,CAAC;YAErE,kCAAkC;YAClC,IAAI,SAAS,KAAK,KAAK,IAAI,SAAS,KAAK,UAAU,EAAE,CAAC;gBAClD,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,CACxB,UAAU,EACV,kCAAkC,SAAS,wBAAwB,EACnE;oBACI,UAAU,EAAE,uEAAuE;oBACnF,QAAQ,EAAE,MAAM;iBACnB,CACJ,CAAC,CAAC;YACP,CAAC;QACL,CAAC;QAED,OAAO,MAAM,CAAC;IAClB,CAAC;CACJ;AApDD,sDAoDC"}

package/dist/src/rules/standards/DeprecatedComponentRule.d.ts

@@ -0,0 +1,17 @@
+import { ValidationContext, Issue } from '../../types';
+import { BaseRule } from '../base/BaseRule';
+/**
+ * MULE-701: Deprecated Component Usage
+ *
+ * Detect usage of deprecated Mule components.
+ */
+export declare class DeprecatedComponentRule extends BaseRule {
+    id: string;
+    name: string;
+    description: string;
+    severity: "warning";
+    category: "standards";
+    private readonly DEPRECATED_ELEMENTS;
+    validate(doc: Document, _context: ValidationContext): Issue[];
+}
+//# sourceMappingURL=DeprecatedComponentRule.d.ts.map

package/dist/src/rules/standards/DeprecatedComponentRule.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"DeprecatedComponentRule.d.ts","sourceRoot":"","sources":["../../../../src/rules/standards/DeprecatedComponentRule.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAE,KAAK,EAAE,MAAM,aAAa,CAAC;AACvD,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAE5C;;;;GAIG;AACH,qBAAa,uBAAwB,SAAQ,QAAQ;IACjD,EAAE,SAAc;IAChB,IAAI,SAAgC;IACpC,WAAW,SAAgD;IAC3D,QAAQ,EAAG,SAAS,CAAU;IAC9B,QAAQ,EAAG,WAAW,CAAU;IAEhC,OAAO,CAAC,QAAQ,CAAC,mBAAmB,CAMlC;IAEF,QAAQ,CAAC,GAAG,EAAE,QAAQ,EAAE,QAAQ,EAAE,iBAAiB,GAAG,KAAK,EAAE;CAmBhE"}