@sun-asterisk/sunlint 1.3.33 → 1.3.34
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/config/released-rules.json +62 -0
- package/config/rules/enhanced-rules-registry.json +2315 -1354
- package/core/adapters/dart-analyzer.js +658 -0
- package/core/adapters/index.js +102 -0
- package/core/adapters/sunlint-rule-adapter.js +0 -2
- package/core/adapters/typescript-analyzer.js +277 -0
- package/core/analysis-orchestrator.js +168 -40
- package/core/cli-action-handler.js +6 -19
- package/core/config-merger.js +24 -14
- package/core/constants/defaults.js +1 -2
- package/core/github-annotate-service.js +141 -89
- package/core/github-step-summary-generator.js +8 -8
- package/core/interfaces/language-analyzer.interface.js +393 -0
- package/core/output-service.js +15 -14
- package/core/rule-selection-service.js +77 -27
- package/core/semantic-engine-manager.js +375 -0
- package/core/semantic-engine.js +4 -57
- package/core/unified-rule-registry.js +52 -11
- package/docs/DART_RULE_EXECUTION_FLOW.md +745 -0
- package/docs/DART_SUPPORT_IMPLEMENTATION.md +245 -0
- package/docs/SUNLINT_ARCHITECTURE.md +692 -0
- package/docs/skills/CREATE_DART_RULE.md +909 -0
- package/engines/eslint-engine.js +2 -8
- package/engines/heuristic-engine.js +234 -38
- package/package.json +1 -1
- package/rules/common/C002_no_duplicate_code/config.json +12 -20
- package/rules/common/C002_no_duplicate_code/dart/analyzer.js +53 -0
- package/rules/common/C002_no_duplicate_code/index.js +93 -0
- package/rules/common/C003_no_vague_abbreviations/config.json +1 -1
- package/rules/common/C003_no_vague_abbreviations/dart/analyzer.js +54 -0
- package/rules/common/C003_no_vague_abbreviations/index.js +93 -0
- package/rules/common/C006_function_naming/dart/analyzer.js +40 -0
- package/rules/common/C006_function_naming/index.js +86 -0
- package/rules/common/C008_variable_declaration_locality/dart/analyzer.js +32 -0
- package/rules/common/C008_variable_declaration_locality/index.js +86 -0
- package/rules/common/C010_limit_block_nesting/dart/analyzer.js +32 -0
- package/rules/common/C010_limit_block_nesting/index.js +86 -0
- package/rules/common/C012_command_query_separation/config.json +61 -0
- package/rules/common/C012_command_query_separation/dart/analyzer.js +32 -0
- package/rules/common/C012_command_query_separation/index.js +86 -0
- package/rules/common/C013_no_dead_code/dart/analyzer.js +32 -0
- package/rules/common/C013_no_dead_code/index.js +86 -0
- package/rules/common/C014_dependency_injection/dart/analyzer.js +32 -0
- package/rules/common/C014_dependency_injection/index.js +86 -0
- package/rules/common/C017_constructor_logic/dart/analyzer.js +32 -0
- package/rules/common/C017_constructor_logic/index.js +86 -0
- package/rules/common/C018_no_throw_generic_error/dart/analyzer.js +32 -0
- package/rules/common/C018_no_throw_generic_error/index.js +86 -0
- package/rules/common/C019_log_level_usage/dart/analyzer.js +32 -0
- package/rules/common/C019_log_level_usage/index.js +86 -0
- package/rules/common/C019_log_level_usage/{ts-morph-analyzer.js → typescript/ts-morph-analyzer.js} +0 -1
- package/rules/common/C020_unused_imports/dart/analyzer.js +32 -0
- package/rules/common/C020_unused_imports/index.js +86 -0
- package/rules/common/C020_unused_imports/{ts-morph-analyzer.js → typescript/ts-morph-analyzer.js} +0 -1
- package/rules/common/C021_import_organization/config.json +29 -9
- package/rules/common/C021_import_organization/dart/analyzer.js +40 -0
- package/rules/common/C021_import_organization/index.js +83 -0
- package/rules/common/C021_import_organization/{ts-morph-analyzer.js → typescript/ts-morph-analyzer.js} +0 -1
- package/rules/common/C023_no_duplicate_variable/config.json +7 -2
- package/rules/common/C023_no_duplicate_variable/dart/analyzer.js +40 -0
- package/rules/common/C023_no_duplicate_variable/index.js +83 -0
- package/rules/common/C024_no_scatter_hardcoded_constants/config.json +7 -2
- package/rules/common/C024_no_scatter_hardcoded_constants/dart/analyzer.js +40 -0
- package/rules/common/C024_no_scatter_hardcoded_constants/index.js +83 -0
- package/rules/common/C024_no_scatter_hardcoded_constants/{symbol-based-analyzer.js → typescript/symbol-based-analyzer.js} +0 -1
- package/rules/common/C029_catch_block_logging/config.json +15 -5
- package/rules/common/C029_catch_block_logging/dart/analyzer.js +40 -0
- package/rules/common/C029_catch_block_logging/index.js +83 -0
- package/rules/common/C030_use_custom_error_classes/config.json +28 -0
- package/rules/common/C030_use_custom_error_classes/dart/analyzer.js +40 -0
- package/rules/common/C030_use_custom_error_classes/index.js +83 -0
- package/rules/common/C031_validation_separation/config.json +28 -0
- package/rules/common/C031_validation_separation/dart/analyzer.js +40 -0
- package/rules/common/C031_validation_separation/index.js +83 -0
- package/rules/common/C033_separate_service_repository/config.json +8 -3
- package/rules/common/C033_separate_service_repository/dart/analyzer.js +40 -0
- package/rules/common/C033_separate_service_repository/index.js +83 -0
- package/rules/common/C035_error_logging_context/config.json +34 -12
- package/rules/common/C035_error_logging_context/dart/analyzer.js +40 -0
- package/rules/common/C035_error_logging_context/index.js +83 -0
- package/rules/common/C040_centralized_validation/config.json +37 -8
- package/rules/common/C040_centralized_validation/dart/analyzer.js +40 -0
- package/rules/common/C040_centralized_validation/index.js +83 -0
- package/rules/common/C041_no_sensitive_hardcode/config.json +7 -2
- package/rules/common/C041_no_sensitive_hardcode/dart/analyzer.js +40 -0
- package/rules/common/C041_no_sensitive_hardcode/index.js +83 -0
- package/rules/common/C042_boolean_name_prefix/config.json +28 -0
- package/rules/common/C042_boolean_name_prefix/dart/analyzer.js +40 -0
- package/rules/common/C042_boolean_name_prefix/index.js +83 -0
- package/rules/common/C043_no_console_or_print/config.json +28 -0
- package/rules/common/C043_no_console_or_print/dart/analyzer.js +40 -0
- package/rules/common/C043_no_console_or_print/index.js +83 -0
- package/rules/common/C047_no_duplicate_retry_logic/config.json +28 -0
- package/rules/common/C047_no_duplicate_retry_logic/dart/analyzer.js +40 -0
- package/rules/common/C047_no_duplicate_retry_logic/index.js +83 -0
- package/rules/common/C048_no_bypass_architectural_layers/config.json +7 -2
- package/rules/common/C048_no_bypass_architectural_layers/dart/analyzer.js +40 -0
- package/rules/common/C048_no_bypass_architectural_layers/index.js +83 -0
- package/rules/common/C052_parsing_or_data_transformation/config.json +7 -2
- package/rules/common/C052_parsing_or_data_transformation/dart/analyzer.js +40 -0
- package/rules/common/C052_parsing_or_data_transformation/index.js +83 -0
- package/rules/common/C060_no_override_superclass/config.json +7 -2
- package/rules/common/C060_no_override_superclass/dart/analyzer.js +40 -0
- package/rules/common/C060_no_override_superclass/index.js +83 -0
- package/rules/common/C065_one_behavior_per_test/config.json +187 -28
- package/rules/common/C065_one_behavior_per_test/dart/analyzer.js +40 -0
- package/rules/common/C065_one_behavior_per_test/index.js +83 -0
- package/rules/common/C067_no_hardcoded_config/config.json +18 -4
- package/rules/common/C067_no_hardcoded_config/dart/analyzer.js +40 -0
- package/rules/common/C067_no_hardcoded_config/index.js +83 -0
- package/rules/common/C070_no_real_time_tests/config.json +41 -12
- package/rules/common/C070_no_real_time_tests/dart/analyzer.js +40 -0
- package/rules/common/C070_no_real_time_tests/index.js +83 -0
- package/rules/common/C072_single_test_behavior/config.json +28 -0
- package/rules/common/C072_single_test_behavior/dart/analyzer.js +40 -0
- package/rules/common/C072_single_test_behavior/index.js +83 -0
- package/rules/common/C073_validate_required_config_on_startup/config.json +93 -18
- package/rules/common/C073_validate_required_config_on_startup/dart/analyzer.js +40 -0
- package/rules/common/C073_validate_required_config_on_startup/index.js +83 -0
- package/rules/common/C073_validate_required_config_on_startup/{analyzer.js → typescript/analyzer.js} +0 -1
- package/rules/common/C075_explicit_return_types/config.json +28 -0
- package/rules/common/C075_explicit_return_types/dart/analyzer.js +40 -0
- package/rules/common/C075_explicit_return_types/index.js +83 -0
- package/rules/common/C076_explicit_function_types/config.json +18 -4
- package/rules/common/C076_explicit_function_types/dart/analyzer.js +40 -0
- package/rules/common/C076_explicit_function_types/index.js +83 -0
- package/rules/index.js +26 -6
- package/rules/security/S003_open_redirect_protection/config.json +11 -53
- package/rules/security/S003_open_redirect_protection/dart/analyzer.js +43 -0
- package/rules/security/S003_open_redirect_protection/index.js +94 -0
- package/rules/security/S003_open_redirect_protection/typescript/analyzer.js +105 -0
- package/rules/security/S003_open_redirect_protection/{symbol-based-analyzer.js → typescript/semantic-analyzer.js} +1 -1
- package/rules/security/S004_sensitive_data_logging/config.json +1 -1
- package/rules/security/S004_sensitive_data_logging/dart/analyzer.js +58 -0
- package/rules/security/S004_sensitive_data_logging/index.js +93 -0
- package/rules/security/S005_no_origin_auth/dart/analyzer.js +30 -0
- package/rules/security/S005_no_origin_auth/index.js +83 -0
- package/rules/security/S005_no_origin_auth/{analyzer.js → typescript/analyzer.js} +1 -0
- package/rules/security/S006_no_plaintext_recovery_codes/dart/analyzer.js +30 -0
- package/rules/security/S006_no_plaintext_recovery_codes/index.js +83 -0
- package/rules/security/S007_no_plaintext_otp/dart/analyzer.js +30 -0
- package/rules/security/S007_no_plaintext_otp/index.js +83 -0
- package/rules/security/S009_no_insecure_encryption/dart/analyzer.js +30 -0
- package/rules/security/S009_no_insecure_encryption/index.js +83 -0
- package/rules/security/S010_no_insecure_encryption/dart/analyzer.js +30 -0
- package/rules/security/S010_no_insecure_encryption/index.js +83 -0
- package/rules/security/S011_secure_guid_generation/dart/analyzer.js +30 -0
- package/rules/security/S011_secure_guid_generation/index.js +83 -0
- package/rules/security/S012_hardcoded_secrets/dart/analyzer.js +30 -0
- package/rules/security/S012_hardcoded_secrets/index.js +83 -0
- package/rules/security/S012_hardcoded_secrets/typescript/config.json +75 -0
- package/rules/security/S013_tls_enforcement/dart/analyzer.js +30 -0
- package/rules/security/S013_tls_enforcement/index.js +83 -0
- package/rules/security/S014_tls_version_enforcement/dart/analyzer.js +30 -0
- package/rules/security/S014_tls_version_enforcement/index.js +83 -0
- package/rules/security/S015_insecure_tls_certificate/config.json +41 -0
- package/rules/security/S015_insecure_tls_certificate/dart/analyzer.js +19 -0
- package/rules/security/S015_insecure_tls_certificate/index.js +83 -0
- package/rules/security/S016_no_sensitive_querystring/dart/analyzer.js +30 -0
- package/rules/security/S016_no_sensitive_querystring/index.js +83 -0
- package/rules/security/S017_use_parameterized_queries/dart/analyzer.js +30 -0
- package/rules/security/S017_use_parameterized_queries/index.js +83 -0
- package/rules/security/S019_smtp_injection_protection/dart/analyzer.js +30 -0
- package/rules/security/S019_smtp_injection_protection/index.js +83 -0
- package/rules/security/S020_no_eval_dynamic_code/dart/analyzer.js +30 -0
- package/rules/security/S020_no_eval_dynamic_code/index.js +83 -0
- package/rules/security/S022_escape_output_context/dart/analyzer.js +30 -0
- package/rules/security/S022_escape_output_context/index.js +83 -0
- package/rules/security/S023_no_json_injection/dart/analyzer.js +30 -0
- package/rules/security/S023_no_json_injection/index.js +83 -0
- package/rules/security/S024_xpath_xxe_protection/dart/analyzer.js +30 -0
- package/rules/security/S024_xpath_xxe_protection/index.js +83 -0
- package/rules/security/S025_server_side_validation/dart/analyzer.js +30 -0
- package/rules/security/S025_server_side_validation/index.js +83 -0
- package/rules/security/S026_json_schema_validation/dart/analyzer.js +30 -0
- package/rules/security/S026_json_schema_validation/index.js +83 -0
- package/rules/security/S027_no_hardcoded_secrets/dart/analyzer.js +30 -0
- package/rules/security/S027_no_hardcoded_secrets/index.js +83 -0
- package/rules/security/S028_file_upload_size_limits/dart/analyzer.js +30 -0
- package/rules/security/S028_file_upload_size_limits/index.js +83 -0
- package/rules/security/S029_csrf_protection/dart/analyzer.js +30 -0
- package/rules/security/S029_csrf_protection/index.js +83 -0
- package/rules/security/S030_directory_browsing_protection/dart/analyzer.js +30 -0
- package/rules/security/S030_directory_browsing_protection/index.js +83 -0
- package/rules/security/S031_secure_session_cookies/dart/analyzer.js +30 -0
- package/rules/security/S031_secure_session_cookies/index.js +83 -0
- package/rules/security/S032_httponly_session_cookies/dart/analyzer.js +30 -0
- package/rules/security/S032_httponly_session_cookies/index.js +83 -0
- package/rules/security/S033_samesite_session_cookies/dart/analyzer.js +30 -0
- package/rules/security/S033_samesite_session_cookies/index.js +83 -0
- package/rules/security/S034_host_prefix_session_cookies/dart/analyzer.js +30 -0
- package/rules/security/S034_host_prefix_session_cookies/index.js +83 -0
- package/rules/security/S035_path_session_cookies/dart/analyzer.js +30 -0
- package/rules/security/S035_path_session_cookies/index.js +83 -0
- package/rules/security/S036_lfi_rfi_protection/dart/analyzer.js +30 -0
- package/rules/security/S036_lfi_rfi_protection/index.js +83 -0
- package/rules/security/S037_cache_headers/dart/analyzer.js +30 -0
- package/rules/security/S037_cache_headers/index.js +83 -0
- package/rules/security/S038_no_version_headers/dart/analyzer.js +30 -0
- package/rules/security/S038_no_version_headers/index.js +83 -0
- package/rules/security/S039_no_session_tokens_in_url/dart/analyzer.js +30 -0
- package/rules/security/S039_no_session_tokens_in_url/index.js +83 -0
- package/rules/security/S040_session_fixation_protection/dart/analyzer.js +30 -0
- package/rules/security/S040_session_fixation_protection/index.js +83 -0
- package/rules/security/S041_session_token_invalidation/dart/analyzer.js +30 -0
- package/rules/security/S041_session_token_invalidation/index.js +83 -0
- package/rules/security/S042_require_re_authentication_for_long_lived/dart/analyzer.js +30 -0
- package/rules/security/S042_require_re_authentication_for_long_lived/index.js +83 -0
- package/rules/security/S043_password_changes_invalidate_all_sessions/dart/analyzer.js +30 -0
- package/rules/security/S043_password_changes_invalidate_all_sessions/index.js +83 -0
- package/rules/security/S044_re_authentication_required/dart/analyzer.js +30 -0
- package/rules/security/S044_re_authentication_required/index.js +83 -0
- package/rules/security/S045_brute_force_protection/dart/analyzer.js +30 -0
- package/rules/security/S045_brute_force_protection/index.js +83 -0
- package/rules/security/S048_no_current_password_in_reset/dart/analyzer.js +30 -0
- package/rules/security/S048_no_current_password_in_reset/index.js +83 -0
- package/rules/security/S049_short_validity_tokens/dart/analyzer.js +30 -0
- package/rules/security/S049_short_validity_tokens/index.js +83 -0
- package/rules/security/S049_short_validity_tokens/typescript/config.json +124 -0
- package/rules/security/S051_password_length_policy/dart/analyzer.js +30 -0
- package/rules/security/S051_password_length_policy/index.js +83 -0
- package/rules/security/S051_password_length_policy/typescript/config.json +83 -0
- package/rules/security/S052_weak_otp_entropy/dart/analyzer.js +30 -0
- package/rules/security/S052_weak_otp_entropy/index.js +83 -0
- package/rules/security/S052_weak_otp_entropy/typescript/config.json +57 -0
- package/rules/security/S054_no_default_accounts/dart/analyzer.js +30 -0
- package/rules/security/S054_no_default_accounts/index.js +83 -0
- package/rules/security/S054_no_default_accounts/typescript/config.json +101 -0
- package/rules/security/S055_content_type_validation/dart/analyzer.js +30 -0
- package/rules/security/S055_content_type_validation/index.js +83 -0
- package/rules/security/S056_log_injection_protection/dart/analyzer.js +30 -0
- package/rules/security/S056_log_injection_protection/index.js +83 -0
- package/rules/security/S057_utc_logging/dart/analyzer.js +30 -0
- package/rules/security/S057_utc_logging/index.js +83 -0
- package/rules/security/S057_utc_logging/typescript/config.json +105 -0
- package/rules/security/S058_no_ssrf/dart/analyzer.js +30 -0
- package/rules/security/S058_no_ssrf/index.js +83 -0
- package/rules/security/S058_no_ssrf/{analyzer.js → typescript/analyzer.js} +0 -1
- package/rules/security/S058_no_ssrf/typescript/config.json +125 -0
- package/scripts/build-release.sh +12 -0
- package/rules/common/C002_no_duplicate_code/test-cases/api-handlers.ts +0 -64
- package/rules/common/C002_no_duplicate_code/test-cases/data-processor.ts +0 -46
- package/rules/common/C002_no_duplicate_code/test-cases/good-example.tsx +0 -40
- package/rules/common/C002_no_duplicate_code/test-cases/product-service.ts +0 -57
- package/rules/common/C002_no_duplicate_code/test-cases/user-service.ts +0 -49
- package/rules/common/C067_no_hardcoded_config/symbol-based-analyzer.js.backup +0 -3853
- package/rules/security/S003_open_redirect_protection/analyzer.js +0 -135
- /package/rules/common/C002_no_duplicate_code/{analyzer.js → typescript/analyzer.js} +0 -0
- /package/rules/common/C003_no_vague_abbreviations/{analyzer.js → typescript/analyzer.js} +0 -0
- /package/rules/common/C006_function_naming/{analyzer.js → typescript/analyzer.js} +0 -0
- /package/rules/common/{C008 → C008_variable_declaration_locality}/config.json +0 -0
- /package/rules/common/{C008 → C008_variable_declaration_locality/typescript}/analyzer.js +0 -0
- /package/rules/common/{C008 → C008_variable_declaration_locality/typescript}/ts-morph-analyzer.js +0 -0
- /package/rules/common/C010_limit_block_nesting/{analyzer.js → typescript/analyzer.js} +0 -0
- /package/rules/common/C010_limit_block_nesting/{regex-based-analyzer.js → typescript/regex-based-analyzer.js} +0 -0
- /package/rules/common/C010_limit_block_nesting/{symbol-based-analyzer.js → typescript/symbol-based-analyzer.js} +0 -0
- /package/rules/common/C012_command_query_separation/{analyzer.js → typescript/analyzer.js} +0 -0
- /package/rules/common/C012_command_query_separation/{ast-analyzer.js → typescript/ast-analyzer.js} +0 -0
- /package/rules/common/C013_no_dead_code/{analyzer.js → typescript/analyzer.js} +0 -0
- /package/rules/common/C013_no_dead_code/{regex-based-analyzer.js → typescript/regex-based-analyzer.js} +0 -0
- /package/rules/common/C013_no_dead_code/{symbol-based-analyzer.js → typescript/symbol-based-analyzer.js} +0 -0
- /package/rules/common/C014_dependency_injection/{analyzer.js → typescript/analyzer.js} +0 -0
- /package/rules/common/C014_dependency_injection/{symbol-based-analyzer.js → typescript/symbol-based-analyzer.js} +0 -0
- /package/rules/common/C017_constructor_logic/{analyzer.js → typescript/analyzer.js} +0 -0
- /package/rules/common/C017_constructor_logic/{symbol-based-analyzer.js → typescript/symbol-based-analyzer.js} +0 -0
- /package/rules/common/C018_no_throw_generic_error/{analyzer.js → typescript/analyzer.js} +0 -0
- /package/rules/common/C018_no_throw_generic_error/{regex-based-analyzer.js → typescript/regex-based-analyzer.js} +0 -0
- /package/rules/common/C018_no_throw_generic_error/{symbol-based-analyzer.js → typescript/symbol-based-analyzer.js} +0 -0
- /package/rules/common/C019_log_level_usage/{analyzer.js → typescript/analyzer.js} +0 -0
- /package/rules/common/C019_log_level_usage/{pattern-analyzer.js → typescript/pattern-analyzer.js} +0 -0
- /package/rules/common/C019_log_level_usage/{system-log-analyzer.js → typescript/system-log-analyzer.js} +0 -0
- /package/rules/common/C020_unused_imports/{analyzer.js → typescript/analyzer.js} +0 -0
- /package/rules/common/C021_import_organization/{analyzer.js → typescript/analyzer.js} +0 -0
- /package/rules/common/C023_no_duplicate_variable/{analyzer.js → typescript/analyzer.js} +0 -0
- /package/rules/common/C023_no_duplicate_variable/{symbol-based-analyzer.js → typescript/symbol-based-analyzer.js} +0 -0
- /package/rules/common/C024_no_scatter_hardcoded_constants/{analyzer.js → typescript/analyzer.js} +0 -0
- /package/rules/common/C029_catch_block_logging/{analyzer.js → typescript/analyzer.js} +0 -0
- /package/rules/common/C030_use_custom_error_classes/{analyzer.js → typescript/analyzer.js} +0 -0
- /package/rules/common/C031_validation_separation/{analyzer.js → typescript/analyzer.js} +0 -0
- /package/rules/common/C033_separate_service_repository/{README.md → typescript/README.md} +0 -0
- /package/rules/common/C033_separate_service_repository/{analyzer.js → typescript/analyzer.js} +0 -0
- /package/rules/common/C033_separate_service_repository/{regex-based-analyzer.js → typescript/regex-based-analyzer.js} +0 -0
- /package/rules/common/C033_separate_service_repository/{symbol-based-analyzer.js → typescript/symbol-based-analyzer.js} +0 -0
- /package/rules/common/C035_error_logging_context/{STRATEGY.md → typescript/STRATEGY.md} +0 -0
- /package/rules/common/C035_error_logging_context/{analyzer.js → typescript/analyzer.js} +0 -0
- /package/rules/common/C035_error_logging_context/{regex-based-analyzer.js → typescript/regex-based-analyzer.js} +0 -0
- /package/rules/common/C035_error_logging_context/{symbol-based-analyzer.js → typescript/symbol-based-analyzer.js} +0 -0
- /package/rules/common/C040_centralized_validation/{analyzer.js → typescript/analyzer.js} +0 -0
- /package/rules/common/C040_centralized_validation/{regex-based-analyzer.js → typescript/regex-based-analyzer.js} +0 -0
- /package/rules/common/C040_centralized_validation/{symbol-based-analyzer.js → typescript/symbol-based-analyzer.js} +0 -0
- /package/rules/common/C041_no_sensitive_hardcode/{analyzer.js → typescript/analyzer.js} +0 -0
- /package/rules/common/C041_no_sensitive_hardcode/{symbol-based-analyzer.js → typescript/symbol-based-analyzer.js} +0 -0
- /package/rules/common/C042_boolean_name_prefix/{analyzer.js → typescript/analyzer.js} +0 -0
- /package/rules/common/C043_no_console_or_print/{analyzer.js → typescript/analyzer.js} +0 -0
- /package/rules/common/C047_no_duplicate_retry_logic/{analyzer.js → typescript/analyzer.js} +0 -0
- /package/rules/common/C047_no_duplicate_retry_logic/{c047-semantic-rule.js → typescript/c047-semantic-rule.js} +0 -0
- /package/rules/common/C047_no_duplicate_retry_logic/{symbol-analyzer-enhanced.js → typescript/symbol-analyzer-enhanced.js} +0 -0
- /package/rules/common/C047_no_duplicate_retry_logic/{symbol-config.json → typescript/symbol-config.json} +0 -0
- /package/rules/common/C048_no_bypass_architectural_layers/{analyzer.js → typescript/analyzer.js} +0 -0
- /package/rules/common/C048_no_bypass_architectural_layers/{symbol-based-analyzer.js → typescript/symbol-based-analyzer.js} +0 -0
- /package/rules/common/C052_parsing_or_data_transformation/{analyzer.js → typescript/analyzer.js} +0 -0
- /package/rules/common/C052_parsing_or_data_transformation/{symbol-based-analyzer.js → typescript/symbol-based-analyzer.js} +0 -0
- /package/rules/common/C060_no_override_superclass/{analyzer.js → typescript/analyzer.js} +0 -0
- /package/rules/common/C060_no_override_superclass/{symbol-based-analyzer.js → typescript/symbol-based-analyzer.js} +0 -0
- /package/rules/common/C065_one_behavior_per_test/{analyzer.js → typescript/analyzer.js} +0 -0
- /package/rules/common/C067_no_hardcoded_config/{analyzer.js → typescript/analyzer.js} +0 -0
- /package/rules/common/C067_no_hardcoded_config/{symbol-based-analyzer.js → typescript/symbol-based-analyzer.js} +0 -0
- /package/rules/common/C070_no_real_time_tests/{analyzer.js → typescript/analyzer.js} +0 -0
- /package/rules/common/C070_no_real_time_tests/{regex-analyzer.js → typescript/regex-analyzer.js} +0 -0
- /package/rules/common/C072_single_test_behavior/{analyzer.js → typescript/analyzer.js} +0 -0
- /package/rules/common/C073_validate_required_config_on_startup/{README.md → typescript/README.md} +0 -0
- /package/rules/common/C073_validate_required_config_on_startup/{symbol-based-analyzer.js → typescript/symbol-based-analyzer.js} +0 -0
- /package/rules/common/C075_explicit_return_types/{analyzer.js → typescript/analyzer.js} +0 -0
- /package/rules/common/C076_explicit_function_types/{README.md → typescript/README.md} +0 -0
- /package/rules/common/C076_explicit_function_types/{analyzer.js → typescript/analyzer.js} +0 -0
- /package/rules/common/C076_explicit_function_types/{semantic-analyzer.js → typescript/semantic-analyzer.js} +0 -0
- /package/rules/security/S003_open_redirect_protection/{README.md → typescript/README.md} +0 -0
- /package/rules/security/S004_sensitive_data_logging/{analyzer.js → typescript/analyzer.js} +0 -0
- /package/rules/security/S004_sensitive_data_logging/{symbol-based-analyzer.js → typescript/symbol-based-analyzer.js} +0 -0
- /package/rules/security/S005_no_origin_auth/{README.md → typescript/README.md} +0 -0
- /package/rules/security/S005_no_origin_auth/{ast-analyzer.js → typescript/ast-analyzer.js} +0 -0
- /package/rules/security/S005_no_origin_auth/{symbol-based-analyzer.js → typescript/symbol-based-analyzer.js} +0 -0
- /package/rules/security/S006_no_plaintext_recovery_codes/{README.md → typescript/README.md} +0 -0
- /package/rules/security/S006_no_plaintext_recovery_codes/{analyzer.js → typescript/analyzer.js} +0 -0
- /package/rules/security/S006_no_plaintext_recovery_codes/{symbol-based-analyzer.js → typescript/symbol-based-analyzer.js} +0 -0
- /package/rules/security/S007_no_plaintext_otp/{README.md → typescript/README.md} +0 -0
- /package/rules/security/S007_no_plaintext_otp/{analyzer.js → typescript/analyzer.js} +0 -0
- /package/rules/security/S007_no_plaintext_otp/{semantic-analyzer.js → typescript/semantic-analyzer.js} +0 -0
- /package/rules/security/S007_no_plaintext_otp/{semantic-config.json → typescript/semantic-config.json} +0 -0
- /package/rules/security/S007_no_plaintext_otp/{semantic-wrapper.js → typescript/semantic-wrapper.js} +0 -0
- /package/rules/security/S009_no_insecure_encryption/{README.md → typescript/README.md} +0 -0
- /package/rules/security/S009_no_insecure_encryption/{analyzer.js → typescript/analyzer.js} +0 -0
- /package/rules/security/S010_no_insecure_encryption/{README.md → typescript/README.md} +0 -0
- /package/rules/security/S010_no_insecure_encryption/{analyzer.js → typescript/analyzer.js} +0 -0
- /package/rules/security/S011_secure_guid_generation/{README.md → typescript/README.md} +0 -0
- /package/rules/security/S011_secure_guid_generation/{analyzer.js → typescript/analyzer.js} +0 -0
- /package/rules/security/S011_secure_guid_generation/{symbol-based-analyzer.js → typescript/symbol-based-analyzer.js} +0 -0
- /package/rules/security/S012_hardcoded_secrets/{analyzer.js → typescript/analyzer.js} +0 -0
- /package/rules/security/S012_hardcoded_secrets/{symbol-based-analyzer.js → typescript/symbol-based-analyzer.js} +0 -0
- /package/rules/security/S013_tls_enforcement/{README.md → typescript/README.md} +0 -0
- /package/rules/security/S013_tls_enforcement/{analyzer.js → typescript/analyzer.js} +0 -0
- /package/rules/security/S013_tls_enforcement/{symbol-based-analyzer.js → typescript/symbol-based-analyzer.js} +0 -0
- /package/rules/security/S014_tls_version_enforcement/{README.md → typescript/README.md} +0 -0
- /package/rules/security/S014_tls_version_enforcement/{analyzer.js → typescript/analyzer.js} +0 -0
- /package/rules/security/S014_tls_version_enforcement/{symbol-based-analyzer.js → typescript/symbol-based-analyzer.js} +0 -0
- /package/rules/security/S015_insecure_tls_certificate/{analyzer.js → typescript/analyzer.js} +0 -0
- /package/rules/security/S015_insecure_tls_certificate/{ast-analyzer.js → typescript/ast-analyzer.js} +0 -0
- /package/rules/security/S016_no_sensitive_querystring/{analyzer.js → typescript/analyzer.js} +0 -0
- /package/rules/security/S016_no_sensitive_querystring/{regex-based-analyzer.js → typescript/regex-based-analyzer.js} +0 -0
- /package/rules/security/S016_no_sensitive_querystring/{symbol-based-analyzer.js → typescript/symbol-based-analyzer.js} +0 -0
- /package/rules/security/S017_use_parameterized_queries/{README.md → typescript/README.md} +0 -0
- /package/rules/security/S017_use_parameterized_queries/{analyzer.js → typescript/analyzer.js} +0 -0
- /package/rules/security/S017_use_parameterized_queries/{symbol-based-analyzer.js → typescript/symbol-based-analyzer.js} +0 -0
- /package/rules/security/S019_smtp_injection_protection/{analyzer.js → typescript/analyzer.js} +0 -0
- /package/rules/security/S019_smtp_injection_protection/{symbol-based-analyzer.js → typescript/symbol-based-analyzer.js} +0 -0
- /package/rules/security/S020_no_eval_dynamic_code/{README.md → typescript/README.md} +0 -0
- /package/rules/security/S020_no_eval_dynamic_code/{analyzer.js → typescript/analyzer.js} +0 -0
- /package/rules/security/S020_no_eval_dynamic_code/{symbol-based-analyzer.js → typescript/symbol-based-analyzer.js} +0 -0
- /package/rules/security/S022_escape_output_context/{README.md → typescript/README.md} +0 -0
- /package/rules/security/S022_escape_output_context/{analyzer.js → typescript/analyzer.js} +0 -0
- /package/rules/security/S023_no_json_injection/{analyzer.js → typescript/analyzer.js} +0 -0
- /package/rules/security/S023_no_json_injection/{ast-analyzer.js → typescript/ast-analyzer.js} +0 -0
- /package/rules/security/S024_xpath_xxe_protection/{analyzer.js → typescript/analyzer.js} +0 -0
- /package/rules/security/S024_xpath_xxe_protection/{regex-based-analyzer.js → typescript/regex-based-analyzer.js} +0 -0
- /package/rules/security/S024_xpath_xxe_protection/{symbol-based-analyzer.js → typescript/symbol-based-analyzer.js} +0 -0
- /package/rules/security/S025_server_side_validation/{README.md → typescript/README.md} +0 -0
- /package/rules/security/S025_server_side_validation/{analyzer.js → typescript/analyzer.js} +0 -0
- /package/rules/security/S025_server_side_validation/{regex-based-analyzer.js → typescript/regex-based-analyzer.js} +0 -0
- /package/rules/security/S025_server_side_validation/{symbol-based-analyzer.js → typescript/symbol-based-analyzer.js} +0 -0
- /package/rules/security/S026_json_schema_validation/{analyzer.js → typescript/analyzer.js} +0 -0
- /package/rules/security/S027_no_hardcoded_secrets/{analyzer.js → typescript/analyzer.js} +0 -0
- /package/rules/security/S027_no_hardcoded_secrets/{categories.json → typescript/categories.json} +0 -0
- /package/rules/security/S027_no_hardcoded_secrets/{categorized-analyzer.js → typescript/categorized-analyzer.js} +0 -0
- /package/rules/security/S028_file_upload_size_limits/{README.md → typescript/README.md} +0 -0
- /package/rules/security/S028_file_upload_size_limits/{analyzer.js → typescript/analyzer.js} +0 -0
- /package/rules/security/S028_file_upload_size_limits/{symbol-based-analyzer.js → typescript/symbol-based-analyzer.js} +0 -0
- /package/rules/security/S029_csrf_protection/{analyzer.js → typescript/analyzer.js} +0 -0
- /package/rules/security/S030_directory_browsing_protection/{README.md → typescript/README.md} +0 -0
- /package/rules/security/S030_directory_browsing_protection/{analyzer.js → typescript/analyzer.js} +0 -0
- /package/rules/security/S030_directory_browsing_protection/{regex-based-analyzer.js → typescript/regex-based-analyzer.js} +0 -0
- /package/rules/security/S030_directory_browsing_protection/{symbol-based-analyzer.js → typescript/symbol-based-analyzer.js} +0 -0
- /package/rules/security/S031_secure_session_cookies/{README.md → typescript/README.md} +0 -0
- /package/rules/security/S031_secure_session_cookies/{analyzer.js → typescript/analyzer.js} +0 -0
- /package/rules/security/S031_secure_session_cookies/{symbol-based-analyzer.js → typescript/symbol-based-analyzer.js} +0 -0
- /package/rules/security/S032_httponly_session_cookies/{FRAMEWORK_SUPPORT.md → typescript/FRAMEWORK_SUPPORT.md} +0 -0
- /package/rules/security/S032_httponly_session_cookies/{README.md → typescript/README.md} +0 -0
- /package/rules/security/S032_httponly_session_cookies/{analyzer.js → typescript/analyzer.js} +0 -0
- /package/rules/security/S032_httponly_session_cookies/{regex-based-analyzer.js → typescript/regex-based-analyzer.js} +0 -0
- /package/rules/security/S032_httponly_session_cookies/{symbol-based-analyzer.js → typescript/symbol-based-analyzer.js} +0 -0
- /package/rules/security/S033_samesite_session_cookies/{README.md → typescript/README.md} +0 -0
- /package/rules/security/S033_samesite_session_cookies/{analyzer.js → typescript/analyzer.js} +0 -0
- /package/rules/security/S033_samesite_session_cookies/{regex-based-analyzer.js → typescript/regex-based-analyzer.js} +0 -0
- /package/rules/security/S033_samesite_session_cookies/{symbol-based-analyzer.js → typescript/symbol-based-analyzer.js} +0 -0
- /package/rules/security/S034_host_prefix_session_cookies/{README.md → typescript/README.md} +0 -0
- /package/rules/security/S034_host_prefix_session_cookies/{analyzer.js → typescript/analyzer.js} +0 -0
- /package/rules/security/S034_host_prefix_session_cookies/{regex-based-analyzer.js → typescript/regex-based-analyzer.js} +0 -0
- /package/rules/security/S034_host_prefix_session_cookies/{symbol-based-analyzer.js → typescript/symbol-based-analyzer.js} +0 -0
- /package/rules/security/S035_path_session_cookies/{README.md → typescript/README.md} +0 -0
- /package/rules/security/S035_path_session_cookies/{analyzer.js → typescript/analyzer.js} +0 -0
- /package/rules/security/S035_path_session_cookies/{regex-based-analyzer.js → typescript/regex-based-analyzer.js} +0 -0
- /package/rules/security/S035_path_session_cookies/{symbol-based-analyzer.js → typescript/symbol-based-analyzer.js} +0 -0
- /package/rules/security/S036_lfi_rfi_protection/{analyzer.js → typescript/analyzer.js} +0 -0
- /package/rules/security/S037_cache_headers/{README.md → typescript/README.md} +0 -0
- /package/rules/security/S037_cache_headers/{analyzer.js → typescript/analyzer.js} +0 -0
- /package/rules/security/S037_cache_headers/{regex-based-analyzer.js → typescript/regex-based-analyzer.js} +0 -0
- /package/rules/security/S037_cache_headers/{symbol-based-analyzer.js → typescript/symbol-based-analyzer.js} +0 -0
- /package/rules/security/S038_no_version_headers/{README.md → typescript/README.md} +0 -0
- /package/rules/security/S038_no_version_headers/{analyzer.js → typescript/analyzer.js} +0 -0
- /package/rules/security/S038_no_version_headers/{regex-based-analyzer.js → typescript/regex-based-analyzer.js} +0 -0
- /package/rules/security/S038_no_version_headers/{symbol-based-analyzer.js → typescript/symbol-based-analyzer.js} +0 -0
- /package/rules/security/S039_no_session_tokens_in_url/{README.md → typescript/README.md} +0 -0
- /package/rules/security/S039_no_session_tokens_in_url/{analyzer.js → typescript/analyzer.js} +0 -0
- /package/rules/security/S039_no_session_tokens_in_url/{regex-based-analyzer.js → typescript/regex-based-analyzer.js} +0 -0
- /package/rules/security/S039_no_session_tokens_in_url/{symbol-based-analyzer.js → typescript/symbol-based-analyzer.js} +0 -0
- /package/rules/security/S040_session_fixation_protection/{analyzer.js → typescript/analyzer.js} +0 -0
- /package/rules/security/S041_session_token_invalidation/{README.md → typescript/README.md} +0 -0
- /package/rules/security/S041_session_token_invalidation/{analyzer.js → typescript/analyzer.js} +0 -0
- /package/rules/security/S041_session_token_invalidation/{regex-based-analyzer.js → typescript/regex-based-analyzer.js} +0 -0
- /package/rules/security/S041_session_token_invalidation/{symbol-based-analyzer.js → typescript/symbol-based-analyzer.js} +0 -0
- /package/rules/security/S042_require_re_authentication_for_long_lived/{README.md → typescript/README.md} +0 -0
- /package/rules/security/S042_require_re_authentication_for_long_lived/{analyzer.js → typescript/analyzer.js} +0 -0
- /package/rules/security/S042_require_re_authentication_for_long_lived/{symbol-based-analyzer.js → typescript/symbol-based-analyzer.js} +0 -0
- /package/rules/security/S043_password_changes_invalidate_all_sessions/{README.md → typescript/README.md} +0 -0
- /package/rules/security/S043_password_changes_invalidate_all_sessions/{analyzer.js → typescript/analyzer.js} +0 -0
- /package/rules/security/S043_password_changes_invalidate_all_sessions/{symbol-based-analyzer.js → typescript/symbol-based-analyzer.js} +0 -0
- /package/rules/security/S044_re_authentication_required/{README.md → typescript/README.md} +0 -0
- /package/rules/security/S044_re_authentication_required/{analyzer.js → typescript/analyzer.js} +0 -0
- /package/rules/security/S044_re_authentication_required/{regex-based-analyzer.js → typescript/regex-based-analyzer.js} +0 -0
- /package/rules/security/S044_re_authentication_required/{symbol-based-analyzer.js → typescript/symbol-based-analyzer.js} +0 -0
- /package/rules/security/S045_brute_force_protection/{README.md → typescript/README.md} +0 -0
- /package/rules/security/S045_brute_force_protection/{analyzer.js → typescript/analyzer.js} +0 -0
- /package/rules/security/S045_brute_force_protection/{symbol-based-analyzer.js → typescript/symbol-based-analyzer.js} +0 -0
- /package/rules/security/S048_no_current_password_in_reset/{README.md → typescript/README.md} +0 -0
- /package/rules/security/S048_no_current_password_in_reset/{analyzer.js → typescript/analyzer.js} +0 -0
- /package/rules/security/S049_short_validity_tokens/{analyzer.js → typescript/analyzer.js} +0 -0
- /package/rules/security/S049_short_validity_tokens/{regex-based-analyzer.js → typescript/regex-based-analyzer.js} +0 -0
- /package/rules/security/S049_short_validity_tokens/{symbol-based-analyzer.js → typescript/symbol-based-analyzer.js} +0 -0
- /package/rules/security/S051_password_length_policy/{analyzer.js → typescript/analyzer.js} +0 -0
- /package/rules/security/S052_weak_otp_entropy/{analyzer.js → typescript/analyzer.js} +0 -0
- /package/rules/security/S054_no_default_accounts/{README.md → typescript/README.md} +0 -0
- /package/rules/security/S054_no_default_accounts/{analyzer.js → typescript/analyzer.js} +0 -0
- /package/rules/security/S055_content_type_validation/{README.md → typescript/README.md} +0 -0
- /package/rules/security/S055_content_type_validation/{analyzer.js → typescript/analyzer.js} +0 -0
- /package/rules/security/S055_content_type_validation/{symbol-based-analyzer.js → typescript/symbol-based-analyzer.js} +0 -0
- /package/rules/security/S056_log_injection_protection/{analyzer.js → typescript/analyzer.js} +0 -0
- /package/rules/security/S056_log_injection_protection/{regex-based-analyzer.js → typescript/regex-based-analyzer.js} +0 -0
- /package/rules/security/S056_log_injection_protection/{symbol-based-analyzer.js → typescript/symbol-based-analyzer.js} +0 -0
- /package/rules/security/S057_utc_logging/{README.md → typescript/README.md} +0 -0
- /package/rules/security/S057_utc_logging/{analyzer.js → typescript/analyzer.js} +0 -0
- /package/rules/security/S058_no_ssrf/{README.md → typescript/README.md} +0 -0
|
@@ -0,0 +1,393 @@
|
|
|
1
|
+
/**
|
|
2
|
+
* Language Analyzer Interface
|
|
3
|
+
* Defines the contract for all language-specific analyzers in SunLint
|
|
4
|
+
* Following Rule C014: Dependency injection - Plugin interface
|
|
5
|
+
* Following Rule C015: Use domain language - clear interface naming
|
|
6
|
+
*
|
|
7
|
+
* This interface enables multi-language support by allowing different
|
|
8
|
+
* analyzers (TypeScript, Dart, etc.) to be registered and used interchangeably.
|
|
9
|
+
*/
|
|
10
|
+
|
|
11
|
+
/**
|
|
12
|
+
* @typedef {Object} AnalyzerConfig
|
|
13
|
+
* @property {string} projectPath - Root path of the project
|
|
14
|
+
* @property {string[]} [targetFiles] - Specific files to analyze
|
|
15
|
+
* @property {number} [maxFiles] - Maximum files to load for analysis
|
|
16
|
+
* @property {boolean} [verbose] - Enable verbose logging
|
|
17
|
+
* @property {Object} [compilerOptions] - Language-specific compiler options
|
|
18
|
+
*/
|
|
19
|
+
|
|
20
|
+
/**
|
|
21
|
+
* @typedef {Object} Violation
|
|
22
|
+
* @property {string} ruleId - The rule ID that was violated
|
|
23
|
+
* @property {string} filePath - Absolute path to the file
|
|
24
|
+
* @property {number} line - Line number (1-based)
|
|
25
|
+
* @property {number} column - Column number (1-based)
|
|
26
|
+
* @property {string} message - Human-readable violation message
|
|
27
|
+
* @property {string} [severity] - 'error' | 'warning' | 'info'
|
|
28
|
+
* @property {string} [analysisMethod] - 'ast' | 'regex' | 'semantic'
|
|
29
|
+
* @property {number} [confidence] - Confidence score (0-100)
|
|
30
|
+
*/
|
|
31
|
+
|
|
32
|
+
/**
|
|
33
|
+
* @typedef {Object} SymbolTable
|
|
34
|
+
* @property {string} filePath - Absolute path to the file
|
|
35
|
+
* @property {string} fileName - Base name of the file
|
|
36
|
+
* @property {Array} imports - Import declarations
|
|
37
|
+
* @property {Array} exports - Export declarations
|
|
38
|
+
* @property {Array} functions - Function declarations
|
|
39
|
+
* @property {Array} classes - Class declarations
|
|
40
|
+
* @property {Array} interfaces - Interface declarations
|
|
41
|
+
* @property {Array} variables - Variable declarations
|
|
42
|
+
* @property {Array} constants - Constant declarations
|
|
43
|
+
* @property {Array} functionCalls - Function call expressions
|
|
44
|
+
* @property {Array} methodCalls - Method call expressions
|
|
45
|
+
* @property {number} lastModified - Timestamp
|
|
46
|
+
* @property {number} analysisTime - Analysis duration in ms
|
|
47
|
+
*/
|
|
48
|
+
|
|
49
|
+
/**
|
|
50
|
+
* ILanguageAnalyzer Interface
|
|
51
|
+
* All language analyzers must implement this interface
|
|
52
|
+
*/
|
|
53
|
+
class ILanguageAnalyzer {
|
|
54
|
+
/**
|
|
55
|
+
* Constructor for Language Analyzer
|
|
56
|
+
* @param {string} name - Analyzer name (e.g., 'typescript', 'dart')
|
|
57
|
+
* @param {string[]} extensions - Supported file extensions (e.g., ['.ts', '.tsx'])
|
|
58
|
+
*/
|
|
59
|
+
constructor(name, extensions = []) {
|
|
60
|
+
if (this.constructor === ILanguageAnalyzer) {
|
|
61
|
+
throw new Error('ILanguageAnalyzer is abstract and cannot be instantiated directly');
|
|
62
|
+
}
|
|
63
|
+
|
|
64
|
+
this.name = name;
|
|
65
|
+
this.extensions = extensions;
|
|
66
|
+
this.initialized = false;
|
|
67
|
+
this.stats = {
|
|
68
|
+
filesAnalyzed: 0,
|
|
69
|
+
cacheHits: 0,
|
|
70
|
+
cacheMisses: 0,
|
|
71
|
+
totalAnalysisTime: 0
|
|
72
|
+
};
|
|
73
|
+
}
|
|
74
|
+
|
|
75
|
+
/**
|
|
76
|
+
* Initialize the language analyzer
|
|
77
|
+
* @param {AnalyzerConfig} config - Analyzer configuration
|
|
78
|
+
* @returns {Promise<boolean>} - True if initialization succeeded
|
|
79
|
+
*/
|
|
80
|
+
async initialize(config) {
|
|
81
|
+
throw new Error(`Method initialize() must be implemented by ${this.constructor.name}`);
|
|
82
|
+
}
|
|
83
|
+
|
|
84
|
+
/**
|
|
85
|
+
* Analyze a single file and return violations
|
|
86
|
+
* @param {string} filePath - Absolute path to the file
|
|
87
|
+
* @param {Object[]} rules - Array of rule objects to apply
|
|
88
|
+
* @param {Object} [options] - Analysis options
|
|
89
|
+
* @returns {Promise<Violation[]>} - Array of violations found
|
|
90
|
+
*/
|
|
91
|
+
async analyzeFile(filePath, rules, options = {}) {
|
|
92
|
+
throw new Error(`Method analyzeFile() must be implemented by ${this.constructor.name}`);
|
|
93
|
+
}
|
|
94
|
+
|
|
95
|
+
/**
|
|
96
|
+
* Analyze multiple files
|
|
97
|
+
* @param {string[]} files - Array of file paths
|
|
98
|
+
* @param {Object[]} rules - Array of rule objects to apply
|
|
99
|
+
* @param {Object} [options] - Analysis options
|
|
100
|
+
* @returns {Promise<Violation[]>} - Array of violations found
|
|
101
|
+
*/
|
|
102
|
+
async analyzeFiles(files, rules, options = {}) {
|
|
103
|
+
const violations = [];
|
|
104
|
+
|
|
105
|
+
for (const file of files) {
|
|
106
|
+
if (this.supportsFile(file)) {
|
|
107
|
+
const fileViolations = await this.analyzeFile(file, rules, options);
|
|
108
|
+
violations.push(...fileViolations);
|
|
109
|
+
}
|
|
110
|
+
}
|
|
111
|
+
|
|
112
|
+
return violations;
|
|
113
|
+
}
|
|
114
|
+
|
|
115
|
+
/**
|
|
116
|
+
* Get the Symbol Table for a file
|
|
117
|
+
* Used by semantic rules for cross-file analysis
|
|
118
|
+
* @param {string} filePath - Absolute path to the file
|
|
119
|
+
* @returns {Promise<SymbolTable|null>} - Symbol table or null if not available
|
|
120
|
+
*/
|
|
121
|
+
async getSymbolTable(filePath) {
|
|
122
|
+
throw new Error(`Method getSymbolTable() must be implemented by ${this.constructor.name}`);
|
|
123
|
+
}
|
|
124
|
+
|
|
125
|
+
/**
|
|
126
|
+
* Check if analyzer is ready for analysis
|
|
127
|
+
* @returns {boolean} - True if initialized and ready
|
|
128
|
+
*/
|
|
129
|
+
isReady() {
|
|
130
|
+
return this.initialized;
|
|
131
|
+
}
|
|
132
|
+
|
|
133
|
+
/**
|
|
134
|
+
* Check if this analyzer supports a specific file
|
|
135
|
+
* @param {string} filePath - Path to the file
|
|
136
|
+
* @returns {boolean} - True if file is supported
|
|
137
|
+
*/
|
|
138
|
+
supportsFile(filePath) {
|
|
139
|
+
const ext = require('path').extname(filePath).toLowerCase();
|
|
140
|
+
return this.extensions.includes(ext);
|
|
141
|
+
}
|
|
142
|
+
|
|
143
|
+
/**
|
|
144
|
+
* Check if this analyzer supports a specific file extension
|
|
145
|
+
* @param {string} extension - File extension (e.g., '.ts')
|
|
146
|
+
* @returns {boolean} - True if extension is supported
|
|
147
|
+
*/
|
|
148
|
+
supportsExtension(extension) {
|
|
149
|
+
return this.extensions.includes(extension.toLowerCase());
|
|
150
|
+
}
|
|
151
|
+
|
|
152
|
+
/**
|
|
153
|
+
* Get analyzer metadata
|
|
154
|
+
* @returns {Object} - Analyzer metadata
|
|
155
|
+
*/
|
|
156
|
+
getInfo() {
|
|
157
|
+
return {
|
|
158
|
+
name: this.name,
|
|
159
|
+
extensions: this.extensions,
|
|
160
|
+
initialized: this.initialized,
|
|
161
|
+
stats: { ...this.stats }
|
|
162
|
+
};
|
|
163
|
+
}
|
|
164
|
+
|
|
165
|
+
/**
|
|
166
|
+
* Get analysis statistics
|
|
167
|
+
* @returns {Object} - Statistics object
|
|
168
|
+
*/
|
|
169
|
+
getStats() {
|
|
170
|
+
return { ...this.stats };
|
|
171
|
+
}
|
|
172
|
+
|
|
173
|
+
/**
|
|
174
|
+
* Reset statistics
|
|
175
|
+
*/
|
|
176
|
+
resetStats() {
|
|
177
|
+
this.stats = {
|
|
178
|
+
filesAnalyzed: 0,
|
|
179
|
+
cacheHits: 0,
|
|
180
|
+
cacheMisses: 0,
|
|
181
|
+
totalAnalysisTime: 0
|
|
182
|
+
};
|
|
183
|
+
}
|
|
184
|
+
|
|
185
|
+
/**
|
|
186
|
+
* Cleanup resources
|
|
187
|
+
* Called when the analyzer is no longer needed
|
|
188
|
+
* @returns {Promise<void>}
|
|
189
|
+
*/
|
|
190
|
+
async dispose() {
|
|
191
|
+
this.initialized = false;
|
|
192
|
+
}
|
|
193
|
+
}
|
|
194
|
+
|
|
195
|
+
/**
|
|
196
|
+
* Language Analyzer Registry
|
|
197
|
+
* Manages registration and lookup of language analyzers
|
|
198
|
+
*/
|
|
199
|
+
class LanguageAnalyzerRegistry {
|
|
200
|
+
constructor() {
|
|
201
|
+
this.analyzers = new Map();
|
|
202
|
+
this.extensionMap = new Map(); // extension -> analyzer name
|
|
203
|
+
}
|
|
204
|
+
|
|
205
|
+
/**
|
|
206
|
+
* Register a language analyzer
|
|
207
|
+
* @param {ILanguageAnalyzer} analyzer - Analyzer instance
|
|
208
|
+
*/
|
|
209
|
+
register(analyzer) {
|
|
210
|
+
if (!(analyzer instanceof ILanguageAnalyzer)) {
|
|
211
|
+
throw new Error('Analyzer must extend ILanguageAnalyzer');
|
|
212
|
+
}
|
|
213
|
+
|
|
214
|
+
this.analyzers.set(analyzer.name, analyzer);
|
|
215
|
+
|
|
216
|
+
// Map extensions to analyzer
|
|
217
|
+
for (const ext of analyzer.extensions) {
|
|
218
|
+
this.extensionMap.set(ext.toLowerCase(), analyzer.name);
|
|
219
|
+
}
|
|
220
|
+
|
|
221
|
+
// Silent registration - only log in verbose mode
|
|
222
|
+
}
|
|
223
|
+
|
|
224
|
+
/**
|
|
225
|
+
* Unregister a language analyzer
|
|
226
|
+
* @param {string} name - Analyzer name
|
|
227
|
+
*/
|
|
228
|
+
unregister(name) {
|
|
229
|
+
const analyzer = this.analyzers.get(name);
|
|
230
|
+
if (analyzer) {
|
|
231
|
+
// Remove extension mappings
|
|
232
|
+
for (const ext of analyzer.extensions) {
|
|
233
|
+
if (this.extensionMap.get(ext) === name) {
|
|
234
|
+
this.extensionMap.delete(ext);
|
|
235
|
+
}
|
|
236
|
+
}
|
|
237
|
+
this.analyzers.delete(name);
|
|
238
|
+
}
|
|
239
|
+
}
|
|
240
|
+
|
|
241
|
+
/**
|
|
242
|
+
* Get analyzer by name
|
|
243
|
+
* @param {string} name - Analyzer name
|
|
244
|
+
* @returns {ILanguageAnalyzer|null} - Analyzer instance or null
|
|
245
|
+
*/
|
|
246
|
+
get(name) {
|
|
247
|
+
return this.analyzers.get(name) || null;
|
|
248
|
+
}
|
|
249
|
+
|
|
250
|
+
/**
|
|
251
|
+
* Get analyzer for a file
|
|
252
|
+
* @param {string} filePath - Path to the file
|
|
253
|
+
* @returns {ILanguageAnalyzer|null} - Analyzer instance or null
|
|
254
|
+
*/
|
|
255
|
+
getForFile(filePath) {
|
|
256
|
+
const ext = require('path').extname(filePath).toLowerCase();
|
|
257
|
+
const analyzerName = this.extensionMap.get(ext);
|
|
258
|
+
return analyzerName ? this.analyzers.get(analyzerName) : null;
|
|
259
|
+
}
|
|
260
|
+
|
|
261
|
+
/**
|
|
262
|
+
* Get analyzer for an extension
|
|
263
|
+
* @param {string} extension - File extension
|
|
264
|
+
* @returns {ILanguageAnalyzer|null} - Analyzer instance or null
|
|
265
|
+
*/
|
|
266
|
+
getForExtension(extension) {
|
|
267
|
+
const analyzerName = this.extensionMap.get(extension.toLowerCase());
|
|
268
|
+
return analyzerName ? this.analyzers.get(analyzerName) : null;
|
|
269
|
+
}
|
|
270
|
+
|
|
271
|
+
/**
|
|
272
|
+
* Get all registered analyzers
|
|
273
|
+
* @returns {ILanguageAnalyzer[]} - Array of analyzer instances
|
|
274
|
+
*/
|
|
275
|
+
getAll() {
|
|
276
|
+
return Array.from(this.analyzers.values());
|
|
277
|
+
}
|
|
278
|
+
|
|
279
|
+
/**
|
|
280
|
+
* Get all registered analyzer names
|
|
281
|
+
* @returns {string[]} - Array of analyzer names
|
|
282
|
+
*/
|
|
283
|
+
getNames() {
|
|
284
|
+
return Array.from(this.analyzers.keys());
|
|
285
|
+
}
|
|
286
|
+
|
|
287
|
+
/**
|
|
288
|
+
* Check if an analyzer is registered
|
|
289
|
+
* @param {string} name - Analyzer name
|
|
290
|
+
* @returns {boolean} - True if registered
|
|
291
|
+
*/
|
|
292
|
+
has(name) {
|
|
293
|
+
return this.analyzers.has(name);
|
|
294
|
+
}
|
|
295
|
+
|
|
296
|
+
/**
|
|
297
|
+
* Check if a file is supported by any analyzer
|
|
298
|
+
* @param {string} filePath - Path to the file
|
|
299
|
+
* @returns {boolean} - True if supported
|
|
300
|
+
*/
|
|
301
|
+
supportsFile(filePath) {
|
|
302
|
+
const ext = require('path').extname(filePath).toLowerCase();
|
|
303
|
+
return this.extensionMap.has(ext);
|
|
304
|
+
}
|
|
305
|
+
|
|
306
|
+
/**
|
|
307
|
+
* Get all supported extensions
|
|
308
|
+
* @returns {string[]} - Array of supported extensions
|
|
309
|
+
*/
|
|
310
|
+
getSupportedExtensions() {
|
|
311
|
+
return Array.from(this.extensionMap.keys());
|
|
312
|
+
}
|
|
313
|
+
|
|
314
|
+
/**
|
|
315
|
+
* Initialize all registered analyzers
|
|
316
|
+
* @param {AnalyzerConfig} config - Configuration for all analyzers
|
|
317
|
+
* @returns {Promise<Map<string, boolean>>} - Map of analyzer name -> initialization success
|
|
318
|
+
*/
|
|
319
|
+
async initializeAll(config) {
|
|
320
|
+
const results = new Map();
|
|
321
|
+
|
|
322
|
+
for (const [name, analyzer] of this.analyzers) {
|
|
323
|
+
try {
|
|
324
|
+
const success = await analyzer.initialize(config);
|
|
325
|
+
results.set(name, success);
|
|
326
|
+
} catch (error) {
|
|
327
|
+
console.error(`Failed to initialize ${name} analyzer:`, error.message);
|
|
328
|
+
results.set(name, false);
|
|
329
|
+
}
|
|
330
|
+
}
|
|
331
|
+
|
|
332
|
+
return results;
|
|
333
|
+
}
|
|
334
|
+
|
|
335
|
+
/**
|
|
336
|
+
* Dispose all registered analyzers
|
|
337
|
+
* @returns {Promise<void>}
|
|
338
|
+
*/
|
|
339
|
+
async disposeAll() {
|
|
340
|
+
for (const analyzer of this.analyzers.values()) {
|
|
341
|
+
try {
|
|
342
|
+
await analyzer.dispose();
|
|
343
|
+
} catch (error) {
|
|
344
|
+
console.error(`Error disposing ${analyzer.name} analyzer:`, error.message);
|
|
345
|
+
}
|
|
346
|
+
}
|
|
347
|
+
}
|
|
348
|
+
|
|
349
|
+
/**
|
|
350
|
+
* Get combined statistics from all analyzers
|
|
351
|
+
* @returns {Object} - Combined statistics
|
|
352
|
+
*/
|
|
353
|
+
getCombinedStats() {
|
|
354
|
+
const combined = {
|
|
355
|
+
totalFilesAnalyzed: 0,
|
|
356
|
+
totalCacheHits: 0,
|
|
357
|
+
totalCacheMisses: 0,
|
|
358
|
+
totalAnalysisTime: 0,
|
|
359
|
+
byAnalyzer: {}
|
|
360
|
+
};
|
|
361
|
+
|
|
362
|
+
for (const [name, analyzer] of this.analyzers) {
|
|
363
|
+
const stats = analyzer.getStats();
|
|
364
|
+
combined.totalFilesAnalyzed += stats.filesAnalyzed;
|
|
365
|
+
combined.totalCacheHits += stats.cacheHits;
|
|
366
|
+
combined.totalCacheMisses += stats.cacheMisses;
|
|
367
|
+
combined.totalAnalysisTime += stats.totalAnalysisTime;
|
|
368
|
+
combined.byAnalyzer[name] = stats;
|
|
369
|
+
}
|
|
370
|
+
|
|
371
|
+
return combined;
|
|
372
|
+
}
|
|
373
|
+
}
|
|
374
|
+
|
|
375
|
+
// Singleton instance of the registry
|
|
376
|
+
let registryInstance = null;
|
|
377
|
+
|
|
378
|
+
/**
|
|
379
|
+
* Get the singleton registry instance
|
|
380
|
+
* @returns {LanguageAnalyzerRegistry}
|
|
381
|
+
*/
|
|
382
|
+
function getRegistry() {
|
|
383
|
+
if (!registryInstance) {
|
|
384
|
+
registryInstance = new LanguageAnalyzerRegistry();
|
|
385
|
+
}
|
|
386
|
+
return registryInstance;
|
|
387
|
+
}
|
|
388
|
+
|
|
389
|
+
module.exports = {
|
|
390
|
+
ILanguageAnalyzer,
|
|
391
|
+
LanguageAnalyzerRegistry,
|
|
392
|
+
getRegistry
|
|
393
|
+
};
|
package/core/output-service.js
CHANGED
|
@@ -333,7 +333,7 @@ class OutputService {
|
|
|
333
333
|
|
|
334
334
|
formatViolations(violations) {
|
|
335
335
|
if (violations.length === 0) {
|
|
336
|
-
return
|
|
336
|
+
return ''; // Summary already shown by orchestrator
|
|
337
337
|
}
|
|
338
338
|
|
|
339
339
|
let output = '';
|
|
@@ -398,22 +398,23 @@ class OutputService {
|
|
|
398
398
|
}
|
|
399
399
|
|
|
400
400
|
generateSummary(violations, filesAnalyzed, metadata) {
|
|
401
|
-
|
|
401
|
+
// Summary is now minimal - main info shown by orchestrator
|
|
402
|
+
if (violations.length === 0) {
|
|
403
|
+
return ''; // Clean output when no issues
|
|
404
|
+
}
|
|
405
|
+
|
|
402
406
|
const errorCount = violations.filter(v => v.severity === 'error').length;
|
|
403
407
|
const warningCount = violations.filter(v => v.severity === 'warning').length;
|
|
404
408
|
|
|
405
|
-
let summary =
|
|
406
|
-
|
|
407
|
-
|
|
408
|
-
|
|
409
|
-
|
|
410
|
-
|
|
411
|
-
|
|
412
|
-
|
|
413
|
-
|
|
414
|
-
}
|
|
415
|
-
if (violations.length === 0) {
|
|
416
|
-
summary += chalk.green('All checks passed! ✅');
|
|
409
|
+
let summary = '\n';
|
|
410
|
+
if (errorCount > 0 || warningCount > 0) {
|
|
411
|
+
summary += chalk.gray(' ') + chalk.dim(`${filesAnalyzed} files · `);
|
|
412
|
+
if (errorCount > 0) {
|
|
413
|
+
summary += chalk.red(`${errorCount} errors `);
|
|
414
|
+
}
|
|
415
|
+
if (warningCount > 0) {
|
|
416
|
+
summary += chalk.yellow(`${warningCount} warnings`);
|
|
417
|
+
}
|
|
417
418
|
}
|
|
418
419
|
|
|
419
420
|
return summary;
|
|
@@ -2,6 +2,7 @@
|
|
|
2
2
|
* Rule Selection Service
|
|
3
3
|
* Following Rule C005: Single responsibility - only handle rule selection
|
|
4
4
|
* REFACTORED: Now uses SunlintRuleAdapter instead of direct registry access
|
|
5
|
+
* UPDATED: Load rules from released-rules.json for consistency
|
|
5
6
|
*/
|
|
6
7
|
|
|
7
8
|
const chalk = require('chalk');
|
|
@@ -15,6 +16,8 @@ class RuleSelectionService {
|
|
|
15
16
|
this.ruleAdapter = SunlintRuleAdapter.getInstance();
|
|
16
17
|
this.ruleMappingService = new RuleMappingService();
|
|
17
18
|
this.initialized = false;
|
|
19
|
+
// Path works both in dev (from pages/) and npm package (from config/)
|
|
20
|
+
this.releasedRulesPath = path.join(__dirname, '../config/released-rules.json');
|
|
18
21
|
}
|
|
19
22
|
|
|
20
23
|
async initialize() {
|
|
@@ -24,55 +27,102 @@ class RuleSelectionService {
|
|
|
24
27
|
}
|
|
25
28
|
}
|
|
26
29
|
|
|
30
|
+
/**
|
|
31
|
+
* Load released rules from released-rules.json
|
|
32
|
+
* @param {string} [version] - Version to load (default: latest)
|
|
33
|
+
* @returns {Object} Object with Common, Security arrays
|
|
34
|
+
*/
|
|
35
|
+
loadReleasedRules(version = null) {
|
|
36
|
+
try {
|
|
37
|
+
if (!fs.existsSync(this.releasedRulesPath)) {
|
|
38
|
+
return null;
|
|
39
|
+
}
|
|
40
|
+
|
|
41
|
+
const data = JSON.parse(fs.readFileSync(this.releasedRulesPath, 'utf8'));
|
|
42
|
+
const versions = data.versions || [];
|
|
43
|
+
|
|
44
|
+
if (versions.length === 0) {
|
|
45
|
+
return null;
|
|
46
|
+
}
|
|
47
|
+
|
|
48
|
+
// Get specified version or latest
|
|
49
|
+
const targetVersion = version
|
|
50
|
+
? versions.find(v => v.version === version)
|
|
51
|
+
: versions[versions.length - 1]; // Latest version
|
|
52
|
+
|
|
53
|
+
if (!targetVersion) {
|
|
54
|
+
return null;
|
|
55
|
+
}
|
|
56
|
+
|
|
57
|
+
return targetVersion.rulesByCategory;
|
|
58
|
+
} catch (error) {
|
|
59
|
+
return null;
|
|
60
|
+
}
|
|
61
|
+
}
|
|
62
|
+
|
|
27
63
|
async selectRules(config, options) {
|
|
28
64
|
// Ensure adapter is initialized
|
|
29
65
|
await this.initialize();
|
|
30
|
-
|
|
66
|
+
|
|
31
67
|
const allRules = config.rules || {};
|
|
32
68
|
let selectedRules = [];
|
|
33
69
|
|
|
70
|
+
// Try to load from released-rules.json first
|
|
71
|
+
const releasedRules = this.loadReleasedRules();
|
|
72
|
+
|
|
34
73
|
// Determine rule selection strategy
|
|
35
74
|
if (options.rule) {
|
|
36
75
|
selectedRules = [options.rule];
|
|
37
76
|
} else if (options.rules) {
|
|
38
77
|
selectedRules = options.rules.split(',').map(r => r.trim());
|
|
39
78
|
} else if (options.all) {
|
|
40
|
-
//
|
|
41
|
-
|
|
42
|
-
|
|
43
|
-
|
|
44
|
-
|
|
79
|
+
// Load all rules from released-rules.json
|
|
80
|
+
if (releasedRules) {
|
|
81
|
+
selectedRules = [
|
|
82
|
+
...(releasedRules.Common || []),
|
|
83
|
+
...(releasedRules.Security || []),
|
|
84
|
+
...(releasedRules.Frontend || []),
|
|
85
|
+
...(releasedRules.Backend || []),
|
|
86
|
+
...(releasedRules.Mobile || [])
|
|
87
|
+
];
|
|
88
|
+
} else {
|
|
89
|
+
// Fallback to preset file
|
|
90
|
+
selectedRules = this.loadPresetRules('all');
|
|
45
91
|
}
|
|
46
92
|
} else if (options.quality) {
|
|
47
|
-
//
|
|
48
|
-
|
|
49
|
-
|
|
50
|
-
|
|
51
|
-
|
|
93
|
+
// Load Common rules from released-rules.json
|
|
94
|
+
if (releasedRules && releasedRules.Common) {
|
|
95
|
+
selectedRules = releasedRules.Common;
|
|
96
|
+
} else {
|
|
97
|
+
selectedRules = this.loadPresetRules('quality');
|
|
52
98
|
}
|
|
53
99
|
} else if (options.security) {
|
|
54
|
-
//
|
|
55
|
-
|
|
56
|
-
|
|
57
|
-
|
|
58
|
-
|
|
100
|
+
// Load Security rules from released-rules.json
|
|
101
|
+
if (releasedRules && releasedRules.Security) {
|
|
102
|
+
selectedRules = releasedRules.Security;
|
|
103
|
+
} else {
|
|
104
|
+
selectedRules = this.loadPresetRules('security');
|
|
59
105
|
}
|
|
60
106
|
} else if (options.category) {
|
|
61
107
|
// Handle --category shortcut (standardized approach)
|
|
62
108
|
const categoryRules = this.ruleAdapter.getStandardCategoryRules(options.category);
|
|
63
109
|
selectedRules = categoryRules.map(rule => rule.id);
|
|
64
|
-
|
|
65
|
-
if (options.verbose) {
|
|
66
|
-
console.log(chalk.blue(`📋 Selected ${selectedRules.length} ${options.category} rules from core files`));
|
|
67
|
-
}
|
|
68
110
|
} else {
|
|
69
|
-
// Default:
|
|
70
|
-
|
|
71
|
-
|
|
72
|
-
|
|
73
|
-
|
|
74
|
-
|
|
75
|
-
|
|
111
|
+
// Default: load all from released-rules.json
|
|
112
|
+
if (releasedRules) {
|
|
113
|
+
selectedRules = [
|
|
114
|
+
...(releasedRules.Common || []),
|
|
115
|
+
...(releasedRules.Security || [])
|
|
116
|
+
];
|
|
117
|
+
} else {
|
|
118
|
+
// Fallback to config rules or minimal set
|
|
119
|
+
selectedRules = Object.keys(allRules).filter(ruleId =>
|
|
120
|
+
allRules[ruleId] !== 'off' && allRules[ruleId] !== false
|
|
121
|
+
);
|
|
122
|
+
|
|
123
|
+
if (selectedRules.length === 0) {
|
|
124
|
+
selectedRules = ['C006', 'C019']; // Default minimal set
|
|
125
|
+
}
|
|
76
126
|
}
|
|
77
127
|
}
|
|
78
128
|
|