@sun-asterisk/sunlint 1.0.6 → 1.1.3

package/config/eslint-rule-mapping.json

@@ -0,0 +1,126 @@
+{
+  "comment": "SunLint to ESLint Rule Mapping - Full Implementation Status",
+  "version": "1.0.0",
+  "stats": {
+    "commonRulesTotal": 76,
+    "commonRulesImplemented": 19,
+    "commonRulesMissing": 57,
+    "securityRulesTotal": 59, 
+    "securityRulesImplemented": 43,
+    "securityRulesMissing": 16,
+    "reactRulesImplemented": 9,
+    "typescriptRulesImplemented": 8
+  },
+  "missingCommonRules": [
+    "C001", "C004", "C005", "C007", "C008", "C009", "C011", "C012", "C015", "C016", 
+    "C019", "C020", "C021", "C022", "C024", "C025", "C026", "C027", "C028", "C031",
+    "C032", "C033", "C034", "C036", "C037", "C038", "C039", "C040", "C044", "C045",
+    "C046", "C048", "C049", "C050", "C051", "C052", "C053", "C054", "C055", "C056",
+    "C057", "C058", "C059", "C060", "C061", "C062", "C063", "C064", "C065", "C066",
+    "C067", "C068", "C069", "C070", "C071", "C073", "C074"
+  ],
+  "missingSecurityRules": [
+    "S004", "S021", "S024", "S028", "S031", "S032", "S040", "S049", "S051", "S053", 
+    "S056", "S059", "S060", "S061", "S062", "S063"
+  ],
+  "mappings": {
+    "C002": ["custom/no-duplicate-code"],
+    "C003": ["custom/no-vague-abbreviations"],
+    "C006": ["custom/function-name-verb-noun"],
+    "C010": ["custom/limit-block-nesting"],
+    "C013": ["custom/no-dead-code"],
+    "C014": ["custom/abstract-dependency-preferred"],
+    "C017": ["custom/limit-constructor-logic"],
+    "C018": ["custom/no-generic-throw"],
+    "C023": ["custom/no-duplicate-variable-name-in-scope"],
+    "C029": ["custom/catch-block-logging"],
+    "C030": ["custom/use-custom-error-classes"],
+    "C035": ["custom/no-empty-catch"],
+    "C041": ["custom/no-config-inline"],
+    "C042": ["custom/boolean-name-prefix"],
+    "C043": ["custom/no-console-or-print"],
+    "C047": ["custom/no-duplicate-retry-logic"],
+    "C072": ["custom/one-assert-per-test"],
+    "C075": ["custom/explicit-function-return-types"],
+    "C076": ["custom/single-behavior-per-test"],
+    
+    "T002": ["custom/interface-prefix-i"],
+    "T003": ["custom/ts-ignore-reason"],
+    "T004": ["custom/no-empty-type"],
+    "T007": ["custom/no-fn-in-constructor"],
+    "T010": ["custom/no-nested-union-tuple"],
+    "T019": ["custom/no-this-assign"],
+    "T020": ["custom/no-default-multi-export"],
+    "T021": ["custom/limit-nested-generics"],
+    
+    "S001": ["custom/s001-fail-securely"],
+    "S002": ["custom/s002-idor-check"],
+    "S003": ["custom/s003-no-unvalidated-redirect"],
+    "S005": ["custom/s005-no-origin-auth"],
+    "S006": ["custom/s006-activation-recovery-secret-not-plaintext"],
+    "S007": ["custom/s007-no-plaintext-otp"],
+    "S008": ["custom/s008-crypto-agility"],
+    "S009": ["custom/s009-no-insecure-crypto"],
+    "S010": ["custom/s010-no-insecure-random-in-sensitive-context"],
+    "S011": ["custom/s011-no-insecure-uuid"],
+    "S012": ["custom/s012-hardcode-secret"],
+    "S013": ["custom/s013-verify-tls-connection"],
+    "S014": ["custom/s014-insecure-tls-version"],
+    "S015": ["custom/s015-insecure-tls-certificate"],
+    "S016": ["custom/s016-sensitive-query-parameter"],
+    "S017": ["custom/s017-no-sql-injection"],
+    "S018": ["custom/s018-positive-input-validation"],
+    "S019": ["custom/s019-no-raw-user-input-in-email"],
+    "S020": ["custom/s020-no-eval-dynamic-execution"],
+    "S022": ["custom/s022-output-encoding"],
+    "S023": ["custom/s023-no-json-injection"],
+    "S025": ["custom/s025-server-side-input-validation"],
+    "S026": ["custom/s026-json-schema-validation"],
+    "S027": ["custom/s027-no-hardcoded-secrets"],
+    "S029": ["custom/s029-require-csrf-protection"],
+    "S030": ["custom/s030-no-directory-browsing"],
+    "S033": ["custom/s033-require-samesite-cookie"],
+    "S034": ["custom/s034-require-host-cookie-prefix"],
+    "S035": ["custom/s035-cookie-specific-path"],
+    "S036": ["custom/s036-no-unsafe-file-include"],
+    "S037": ["custom/s037-require-anti-cache-headers"],
+    "S038": ["custom/s038-no-version-disclosure"],
+    "S039": ["custom/s039-no-session-token-in-url"],
+    "S041": ["custom/s041-require-session-invalidate-on-logout"],
+    "S042": ["custom/s042-require-periodic-reauthentication"],
+    "S043": ["custom/s043-terminate-sessions-on-password-change"],
+    "S044": ["custom/s044-require-full-session-for-sensitive-operations"],
+    "S045": ["custom/s045-anti-automation-controls"],
+    "S046": ["custom/s046-secure-notification-on-auth-change"],
+    "S047": ["custom/s047-secure-random-passwords"],
+    "S048": ["custom/s048-password-credential-recovery"],
+    "S050": ["custom/s050-session-token-weak-hash"],
+    "S052": ["custom/s052-secure-random-authentication-code"],
+    "S054": ["custom/s054-verification-default-account"],
+    "S055": ["custom/s055-verification-rest-check-the-incoming-content-type"],
+    "S057": ["custom/s057-utc-logging"],
+    "S058": ["custom/s058-no-ssrf"],
+    
+    "R001": ["react/no-this-in-sfc", "no-param-reassign", "react/function-component-definition", "react/forbid-component-props"],
+    "R002": ["react-hooks/rules-of-hooks", "react-hooks/exhaustive-deps", "react/no-did-mount-set-state", "react/no-did-update-set-state"],
+    "R003": ["react/no-direct-mutation-state", "react/jsx-no-constructed-context-values", "react/forbid-dom-props"],
+    "R004": ["@typescript-eslint/prefer-readonly", "react/forbid-foreign-prop-types"],
+    "R005": ["react/jsx-no-bind"],
+    "R006": ["react/jsx-pascal-case", "react/jsx-uses-react", "react/jsx-uses-vars"],
+    "R007": ["react-hooks/rules-of-hooks"],
+    "R008": ["react-hooks/rules-of-hooks"],
+    "R009": ["react-hooks/rules-of-hooks"]
+  },
+  
+  "implementationTodo": {
+    "commonRules": {
+      "priority1": ["C001", "C004", "C005", "C007", "C008", "C009", "C011", "C012"],
+      "priority2": ["C015", "C016", "C019", "C020", "C021", "C022", "C024", "C025"],  
+      "priority3": ["C026", "C027", "C028", "C031", "C032", "C033", "C034", "C036"]
+    },
+    "securityRules": {
+      "needImplementation": ["S004", "S021", "S024", "S028", "S031", "S032", "S040"],
+      "needMapping": ["All implemented S001-S058 except missing ones above"]
+    }
+  }
+}

package/config/{typescript/eslint.config.js → integrations/eslint/typescript.config.js}

@@ -62,14 +62,18 @@ module.exports = [
       'custom/t026': 'warn',
       
       // Enable all security rules as warnings by default
+      'custom/typescript_s001': 'warn',
+      'custom/typescript_s002': 'warn',
       'custom/typescript_s003': 'warn',
       'custom/typescript_s005': 'warn',
       'custom/typescript_s006': 'warn',
+      'custom/typescript_s007': 'warn',
       'custom/typescript_s008': 'warn',
       'custom/typescript_s009': 'warn',
       'custom/typescript_s010': 'warn',
       'custom/typescript_s011': 'warn',
       'custom/typescript_s012': 'warn',
+      'custom/typescript_s013': 'warn',
       'custom/typescript_s014': 'warn',
       'custom/typescript_s015': 'warn',
       'custom/typescript_s016': 'warn',

package/config/presets/beginner.json

@@ -14,7 +14,7 @@
     "validation": "warning"
   },
   "languages": ["typescript"],
-  "ignorePatterns": [
+  "exclude": [
     "**/node_modules/**",
     "**/build/**",
     "**/dist/**",

package/config/presets/ci.json

@@ -13,8 +13,9 @@
     "naming": "off",
     "validation": "error"
   },
-  "languages": ["typescript", "dart", "javascript"],
-  "ignorePatterns": [
+  },
+  "languages": ["typescript", "dart"],
+  "exclude": [
     "**/node_modules/**",
     "**/build/**",
     "**/dist/**",

package/config/presets/recommended.json

@@ -14,7 +14,7 @@
     "validation": "error"
   },
   "languages": ["typescript", "dart"],
-  "ignorePatterns": [
+  "exclude": [
     "**/node_modules/**",
     "**/build/**",
     "**/dist/**",

package/config/presets/strict.json

@@ -13,8 +13,8 @@
     "naming": "warning",
     "validation": "error"
   },
-  "languages": ["typescript", "dart", "javascript"],
-  "ignorePatterns": [
+  "languages": ["typescript", "dart", "kotlin"],
+  "exclude": [
     "**/node_modules/**",
     "**/build/**",
     "**/dist/**",

package/config/rule-analysis-strategies.js

@@ -0,0 +1,74 @@
+/**
+ * Rule Analysis Strategy Configuration
+ * Defines optimal analysis methods for each rule type
+ */
+
+module.exports = {
+  // Rules that benefit significantly from AST analysis
+  astPreferred: {
+    'C010': {
+      reason: 'Block nesting requires precise scope tracking',
+      methods: ['ast', 'regex'],
+      accuracy: { ast: 95, regex: 75 }
+    },
+    'C012': {
+      reason: 'Cyclomatic complexity needs control flow analysis',
+      methods: ['ast', 'regex'],
+      accuracy: { ast: 90, regex: 60 }
+    },
+    'C015': {
+      reason: 'Function parameter counting benefits from AST',
+      methods: ['ast', 'regex'],
+      accuracy: { ast: 95, regex: 85 }
+    },
+    'C017': {
+      reason: 'Constructor logic analysis needs AST context',
+      methods: ['ast', 'regex'],
+      accuracy: { ast: 90, regex: 70 }
+    }
+  },
+
+  // Rules where regex is sufficient and efficient
+  regexOptimal: {
+    'C001': {
+      reason: 'Naming patterns are string-based',
+      methods: ['regex'],
+      accuracy: { regex: 95 }
+    },
+    'C043': {
+      reason: 'Console/print detection via simple patterns',
+      methods: ['regex'],
+      accuracy: { regex: 90 }
+    },
+    'S001': {
+      reason: 'Security patterns are often string-based',
+      methods: ['regex', 'ast'],
+      accuracy: { regex: 85, ast: 90 }
+    }
+  },
+
+  // Rules that require hybrid approach
+  hybridOptimal: {
+    'C029': {
+      reason: 'Catch block analysis needs context + patterns',
+      methods: ['ast', 'regex', 'semantic'],
+      strategy: 'ast-primary-regex-fallback',
+      accuracy: { ast: 90, regex: 75, combined: 95 }
+    },
+    'C047': {
+      reason: 'Retry logic detection needs pattern + structure',
+      methods: ['regex', 'ast'],
+      strategy: 'regex-primary-ast-enhancement',
+      accuracy: { regex: 80, ast: 85, combined: 92 }
+    }
+  },
+
+  // Rules that may need future enhancement
+  experimental: {
+    'C072': {
+      reason: 'Test assertion counting - exploring AI enhancement',
+      methods: ['regex', 'ast', 'ai'],
+      strategy: 'progressive-enhancement'
+    }
+  }
+};

package/config/{rules-registry.json → rules/rules-registry.json}

@@ -24,6 +24,17 @@
       "status": "activated",
       "tags": ["naming", "convention", "readability"]
     },
+    "C010": {
+      "name": "Limit Block Nesting",
+      "description": "Limit nested blocks (if/for/while/switch) to maximum 3 levels for readability",
+      "category": "complexity",
+      "severity": "warning",
+      "languages": ["typescript", "javascript", "dart", "kotlin"],
+      "analyzer": "./rules/common/C010_limit_block_nesting/analyzer.js",
+      "version": "1.0.0",
+      "status": "stable",
+      "tags": ["complexity", "readability", "nesting", "maintainability"]
+    },
     "C029": {
       "name": "Catch Block Error Logging",
       "description": "Mọi catch block phải log nguyên nhân lỗi đầy đủ",
@@ -48,6 +59,53 @@
       "status": "experimental",
       "tags": ["validation", "separation", "architecture"]
     },
+    "C043": {
+      "name": "No Console Or Print",
+      "description": "Do not use console.log or print in production code",
+      "category": "logging",
+      "severity": "warning", 
+      "languages": ["typescript", "javascript", "dart"],
+      "analyzer": "./rules/common/C043_no_console_or_print/analyzer.js",
+      "version": "1.0.0",
+      "status": "stable",
+      "tags": ["logging", "production", "debugging", "console"]
+    },
+    "C076": {
+      "name": "One Assert Per Test",
+      "description": "Each test should assert only one behavior (Single Assert Rule)",
+      "category": "testing",
+      "severity": "warning",
+      "languages": ["typescript", "javascript"],
+      "analyzer": "eslint",
+      "eslintRule": "custom/c076",
+      "version": "1.0.0",
+      "status": "stable",
+      "tags": ["testing", "unit-test", "assertion"]
+    },
+    "S001": {
+      "name": "Fail Securely",
+      "description": "Verify that if there is an error in access control, the system fails securely",
+      "category": "security",
+      "severity": "error",
+      "languages": ["typescript", "javascript"],
+      "analyzer": "eslint",
+      "eslintRule": "custom/typescript_s001",
+      "version": "1.0.0",
+      "status": "stable",
+      "tags": ["security", "access-control", "fail-safe"]
+    },
+    "S002": {
+      "name": "IDOR Check",
+      "description": "Insecure Direct Object Reference prevention",
+      "category": "security",
+      "severity": "error",
+      "languages": ["typescript", "javascript"],
+      "analyzer": "eslint",
+      "eslintRule": "custom/typescript_s002",
+      "version": "1.0.0",
+      "status": "stable",
+      "tags": ["security", "idor", "access-control"]
+    },
     "S003": {
       "name": "No Unvalidated Redirect",
       "description": "Prevent unvalidated redirects and forwards",
@@ -84,6 +142,18 @@
       "status": "stable",
       "tags": ["security", "secrets", "encryption"]
     },
+    "S007": {
+      "name": "No Plaintext OTP",
+      "description": "One-Time Passwords must not be stored in plaintext",
+      "category": "security",
+      "severity": "error",
+      "languages": ["typescript", "javascript"],
+      "analyzer": "eslint",
+      "eslintRule": "custom/typescript_s007",
+      "version": "1.0.0",
+      "status": "stable",
+      "tags": ["security", "otp", "encryption"]
+    },
     "S008": {
       "name": "Crypto Agility",
       "description": "Ensure cryptographic agility and algorithm flexibility",
@@ -144,6 +214,18 @@
       "status": "stable",
       "tags": ["security", "secrets", "hardcoded"]
     },
+    "S013": {
+      "name": "Verify TLS Connection",
+      "description": "Verify that TLS connections are properly established and validated",
+      "category": "security",
+      "severity": "error",
+      "languages": ["typescript", "javascript"],
+      "analyzer": "eslint",
+      "eslintRule": "custom/typescript_s013",
+      "version": "1.0.0",
+      "status": "stable",
+      "tags": ["security", "tls", "connection"]
+    },
     "S014": {
       "name": "Insecure TLS Version",
       "description": "Prevent usage of insecure TLS versions",