@sunshaobei/dsh-workflow 0.0.0-stage → 2.1.0

package/vendor/dynamic-workflow/analysis/state.js

@@ -0,0 +1,569 @@
+import ts from "typescript";
+import { addOcc, addPlaceholder, collapse, emptyValue, isActorSite, isFunctionLike, mergeInto, phKey, provisionalFanoutId, } from "./domain.js";
+import { findWorkflowBody } from "./domain.js";
+export class TaintState {
+    table;
+    checker;
+    program;
+    scriptFile;
+    body;
+    // Site lookups keyed by their raw AST nodes (the table resolved them via the checker).
+    askByCall = new Map();
+    askSites = new Map();
+    worldByCall = new Map();
+    joinByCall = new Map();
+    actorByCall = new Map();
+    /** 留白调用 → 站点（开放与已补全都在；transfer 规则按有无 body 分派）。 */
+    holeByCall = new Map();
+    /** Per-element callback calls (`xs.map(fn)`, `Array.from(xs, fn)`, …), keyed by the CALL. */
+    candByCall = new Map();
+    candByForOf = new Map();
+    /**
+     * THE CALL ORACLE: for every call / `new` /
+     * tagged-template node, the script-local functions this pass applied there and HOW —
+     * `callee` (the node's callee value held the function: direct call, through a parameter,
+     * a field, a class member) or `argument` (the node handed the function to a library callee
+     * that may invoke it: a registry entry or the keystone rule). Monotone like every other
+     * accumulator; read after convergence by the ordering walk, which inlines exactly these
+     * bodies at exactly these sites instead of guessing from syntax.
+     */
+    applications = new Map();
+    /**
+     * The live abstract result of each `Promise.all` join call, keyed by the join CALL NODE
+     * and PERSISTENT across fixpoint passes (see {@link joinResultOf}). A join result IS a
+     * place whose element fields carry may-alias back-references to the (place) inputs, so
+     * resolvePlace returns it — letting `const [a, b] = await Promise.all([…])`
+     * destructure-alias the elements and a write through `res[k]` reach the original input.
+     */
+    joinResults = new Map();
+    /**
+     * The live abstract place of each conditional expression used as a place
+     * (`flag ? box1 : box2`), keyed by the ConditionalExpression NODE and persistent across
+     * passes (see {@link condPlaceOf}). Same canonical-heap requirement as {@link joinResults}.
+     */
+    condPlaces = new Map();
+    /** Allocation-site places of container literals; see {@link literalPlaceOf}. */
+    literalPlaces = new Map();
+    // Script-local functions (excluding iteration callbacks, handled inline).
+    fnId = new Map();
+    fnParamSymbols = new Map();
+    functions = [];
+    callbackNodes = new Set();
+    /**
+     * Object-literal set accessors, keyed by property name -> setter fn ids. Crude but
+     * sound: an assignment to ANY property of that name (on any object) records the
+     * assigned value as the setter's param-0 actual, so the setter body's flow is seen.
+     */
+    settersByProp = new Map();
+    /**
+     * One shared abstract instance per class declaration/expression, keyed by the class
+     * node. Static AND instance members conflate into this ONE value (a deliberate sound
+     * over-approximation: per-instance and static/instance precision are out of scope, so
+     * a write through any instance, through `this`, or through the class name is visible
+     * through every other). Persistent across fixpoint passes — growth is signalled like
+     * any env slot.
+     */
+    classInstances = new Map();
+    /** Class declarations/expressions in the workflow body, in discovery order. */
+    classes = [];
+    // Persistent fixpoint state.
+    env = new Map();
+    summaries = new Map();
+    paramActuals = new Map();
+    /**
+     * Per-placeholder-parameter set of values that MAY be passed to an INVOCATION of that
+     * parameter (keyed by `${fnId}:${param}`). Two capture sites (calls.ts handleUnknownCall):
+     * a direct call of a placeholder callee (`resolve(draft)` — resolve is param 0), and a
+     * placeholder-valued argument to an unknown call (`draft.then(onOk)` — the unknown `.then`
+     * may invoke onOk with the receiver pot). Consumed by the promise machinery: `new
+     * Unknown(fn)` and `await thenable` resolve to whatever fn's / then's callback params
+     * receive (the resolve/reject/continuation pattern). Distinct from {@link paramActuals},
+     * which records what a function receives when IT is called.
+     */
+    phCallActuals = new Map();
+    reachSet = new Set();
+    calledFns = new Map();
+    promotedOrders = new Set();
+    /**
+     * Per-`reduce`-candidate accumulator taint (keyed by candidate `order`), carried
+     * ACROSS fixpoint passes. The callback-return value that reduce threads into the
+     * accumulator param is a fresh local each pass, so binding the param from it
+     * directly never observed the return taint; this persistent slot fixes that.
+     */
+    reduceAcc = new Map();
+    // Sink accumulators (may contain placeholders; resolved at emission).
+    askInstr = new Map();
+    askRecv = new Map();
+    worldRead = new Map();
+    /** 开放留白的提示 sink（docs/analysis.md「Sites」：提示流入留白，如 ask 的 instructions）。 */
+    holePrompt = new Map();
+    joinInByPort = new Map();
+    fanoutInVal = new Map();
+    /**
+     * The ORACLE accumulators, keyed by source START OFFSET rather than by site id: the
+     * value each `await` operand carries, and the value each guard expression reads. They
+     * feed {@link emitOracle}, which only the temporal walk (causality-order.ts) consumes —
+     * nothing here changes a transfer rule, and a position keys nothing in the site
+     * vocabulary, which is what keeps the site-id stability rule untouched: no `order`
+     * counter and no per-kind counter is consulted.
+     */
+    awaitVal = new Map();
+    guardVal = new Map();
+    returnVal = emptyValue();
+    /**
+     * One script-global thrown-value set: every `throw` joins its operand into it and
+     * every `catch` binding reads all of it. A flow-insensitive over-approximation of
+     * exception routing — sound under gen-only, deliberately imprecise across disjoint
+     * `try` blocks. Persistent across passes so throws in one iteration reach catches
+     * in the next (fixpoint-safe).
+     */
+    thrownVal = emptyValue();
+    changed = false;
+    constructor(workflow, table) {
+        this.table = table;
+        this.checker = workflow.program.getTypeChecker();
+        this.program = workflow.program;
+        this.scriptFile = workflow.scriptFile;
+        this.body = findWorkflowBody(workflow.scriptFile);
+        this.buildLookups();
+        this.collectFunctions();
+    }
+    buildLookups() {
+        for (const site of this.table.asks) {
+            this.askByCall.set(site.call, site.id);
+            this.askSites.set(site.id, { instructions: site.instructions, receiver: site.receiver });
+        }
+        for (const site of this.table.worldReads)
+            this.worldByCall.set(site.call, { args: site.args, id: site.id });
+        for (const site of this.table.joins)
+            this.joinByCall.set(site.call, { arg: site.arg, id: site.id });
+        for (const site of this.table.actors)
+            this.actorByCall.set(site.call, site.id);
+        for (const site of this.table.holes)
+            this.holeByCall.set(site.call, site);
+        for (const cand of this.table.iterations) {
+            if (cand.form === "array-method" && cand.call !== undefined) {
+                this.candByCall.set(cand.call, cand);
+                // An inline callback literal is evaluated in place (array-methods.ts), never as a
+                // tracked function; a non-literal callback's functions are tracked and applied.
+                if (cand.callback !== undefined)
+                    this.callbackNodes.add(cand.callback);
+            }
+            else if (cand.form === "for-of") {
+                // candidate.body === ForOfStatement.statement, so body.parent is the for-of.
+                this.candByForOf.set(cand.body.parent, cand);
+            }
+        }
+    }
+    collectFunctions() {
+        const visit = (node) => {
+            // One shared abstract instance per class (declaration or expression); constructors,
+            // methods and accessors are collected as tracked functions below (isFunctionLike
+            // covers them), so their bodies get summaries like any other function.
+            if (ts.isClassDeclaration(node) || ts.isClassExpression(node)) {
+                this.classInstances.set(node, emptyValue());
+                this.classes.push(node);
+            }
+            if (isFunctionLike(node) && !this.callbackNodes.has(node)) {
+                const id = this.functions.length;
+                this.fnId.set(node, id);
+                this.functions.push(node);
+                const decl = node;
+                this.fnParamSymbols.set(id, decl.parameters.map((p) => ts.isIdentifier(p.name) ? this.checker.getSymbolAtLocation(p.name) : undefined));
+                // Object-literal set accessor: index it by property name so property writes
+                // can feed the setter's param (see settersByProp).
+                if (ts.isSetAccessorDeclaration(node) && !ts.isComputedPropertyName(node.name)) {
+                    const name = node.name.getText(this.scriptFile);
+                    const list = this.settersByProp.get(name);
+                    if (list === undefined)
+                        this.settersByProp.set(name, [id]);
+                    else
+                        list.push(id);
+                }
+            }
+            ts.forEachChild(node, visit);
+        };
+        for (const stmt of this.body.statements)
+            visit(stmt);
+    }
+    // -- monotone update primitives ------------------------------------------
+    /**
+     * Bind a symbol to an abstract value. A FRESH symbol ADOPTS the value object by
+     * reference (`env[sym] === value`); an already-bound slot weak-merges (sound smear).
+     * Adoption is what makes bindings alias rather than snapshot: passing a live place (env slot / live field) shares it, so a later
+     * write through any alias is visible through every other. Callers that must NOT
+     * alias pass a fresh clone/collapse (reads already return snapshots).
+     */
+    bindSymbol(sym, value) {
+        const existing = this.env.get(sym);
+        if (existing === undefined) {
+            this.env.set(sym, value);
+            this.changed = true;
+            return;
+        }
+        if (existing !== value && mergeInto(existing, value))
+            this.changed = true;
+    }
+    envSlot(sym) {
+        let slot = this.env.get(sym);
+        if (slot === undefined) {
+            slot = emptyValue();
+            this.env.set(sym, slot);
+        }
+        return slot;
+    }
+    summaryOf(id) {
+        let slot = this.summaries.get(id);
+        if (slot === undefined) {
+            slot = emptyValue();
+            this.summaries.set(id, slot);
+        }
+        return slot;
+    }
+    /** The shared abstract instance of a class node, created empty on demand (persistent). */
+    instanceOf(cls) {
+        let inst = this.classInstances.get(cls);
+        if (inst === undefined) {
+            inst = emptyValue();
+            this.classInstances.set(cls, inst);
+        }
+        return inst;
+    }
+    /**
+     * The shared abstract result of a join call, created empty on demand (persistent).
+     *
+     * THE CANONICAL-HEAP INVARIANT: every value that models runtime storage — anything that
+     * can be aliased, written through, or referenced from a `mayAlias` set — is keyed by a
+     * static program point and lives across fixpoint passes; per-pass temporaries are
+     * snapshots only. handleJoin used to mint a FRESH result value each pass, so
+     * `Promise.all([Promise.all([…])])` added a never-before-seen object to the outer
+     * element's `mayAlias` set every pass. That set dedups by IDENTITY (domain.ts), so
+     * `changed` stayed true forever and the fixpoint hit ITERATION_CAP. Keying the result by
+     * the call node makes the identity stable, so the union saturates.
+     */
+    joinResultOf(call) {
+        let result = this.joinResults.get(call);
+        if (result === undefined) {
+            result = emptyValue();
+            this.joinResults.set(call, result);
+        }
+        return result;
+    }
+    /**
+     * The shared abstract place of a conditional expression, created empty on demand
+     * (persistent). Same canonical-heap invariant as {@link joinResultOf}: a per-pass
+     * wrapper for `flag ? box1 : box2` diverged the fixpoint as soon as it became a
+     * `mayAlias` target — which a SYNTACTICALLY NESTED ternary place
+     * (`f2 ? (f ? box1 : box2) : box3`) does on every pass.
+     */
+    condPlaceOf(node) {
+        let place = this.condPlaces.get(node);
+        if (place === undefined) {
+            place = emptyValue();
+            this.condPlaces.set(node, place);
+        }
+        return place;
+    }
+    /**
+     * The allocation-site place of a container literal (`{…}` / `[…]`): the value its first
+     * evaluation produced, kept across passes and weak-merged with every re-evaluation
+     * (persistent). Same canonical-heap invariant as {@link joinResultOf}: a literal IS runtime
+     * storage — a callee writes through it (`fill([], v)`, `tag({ name }, t)` with
+     * `box.note = t`), a binding adopts it, a spread shares its fields — so a value recreated
+     * every pass can never settle once something persistent merges INTO it. The
+     * parameter write-back targeted the per-pass fresh literal, reported a change on every pass
+     * (the note it had just added was gone again), and the fixpoint hit ITERATION_CAP with no
+     * state growing at all. Any `f({ … })` whose callee mutates its parameter was affected.
+     *
+     * Adopting the first evaluation (rather than minting an empty slot) keeps the literal's
+     * aliasing: a field that stores a live place (`{ box }`, `[obj]`) keeps pointing at that
+     * slot, and later passes merge the same slot into itself — an identity no-op. Snapshot
+     * fields accumulate monotonically, exactly as an env slot bound to the literal always did.
+     */
+    literalPlaceOf(node, fresh) {
+        const place = this.literalPlaces.get(node);
+        if (place === undefined) {
+            this.literalPlaces.set(node, fresh);
+            return fresh;
+        }
+        if (mergeInto(place, fresh))
+            this.changed = true;
+        return place;
+    }
+    mergeReturn(value) {
+        if (mergeInto(this.returnVal, value))
+            this.changed = true;
+    }
+    /** Join a thrown operand into the script-global thrown-value set. */
+    mergeThrown(value) {
+        if (mergeInto(this.thrownVal, value))
+            this.changed = true;
+    }
+    /**
+     * Weak-merge into a keyed sink accumulator. Generic in the key so the oracle
+     * accumulators ({@link awaitVal} / {@link guardVal}), which are keyed by source offset
+     * rather than site id, share the one monotone update path every other sink uses.
+     */
+    mergeSink(map, id, value) {
+        let slot = map.get(id);
+        if (slot === undefined) {
+            slot = emptyValue();
+            map.set(id, slot);
+        }
+        if (mergeInto(slot, value))
+            this.changed = true;
+    }
+    mergeJoinIn(id, port, value) {
+        let ports = this.joinInByPort.get(id);
+        if (ports === undefined) {
+            ports = new Map();
+            this.joinInByPort.set(id, ports);
+        }
+        let slot = ports.get(port);
+        if (slot === undefined) {
+            slot = emptyValue();
+            ports.set(port, slot);
+        }
+        if (mergeInto(slot, value))
+            this.changed = true;
+    }
+    addParamActual(id, param, value) {
+        const key = `${id}:${param}`;
+        let slot = this.paramActuals.get(key);
+        if (slot === undefined) {
+            slot = emptyValue();
+            this.paramActuals.set(key, slot);
+        }
+        if (mergeInto(slot, value))
+            this.changed = true;
+    }
+    /** Record a value that may reach an invocation of the placeholder-parameter `key`. */
+    recordPhCall(key, value) {
+        let slot = this.phCallActuals.get(key);
+        if (slot === undefined) {
+            slot = emptyValue();
+            this.phCallActuals.set(key, slot);
+        }
+        if (mergeInto(slot, value))
+            this.changed = true;
+    }
+    /** The taint fed to invocations of a function's parameter `param`, if any. */
+    phCallActualsOf(id, param) {
+        return this.phCallActuals.get(`${id}:${param}`);
+    }
+    /** The persistent accumulator taint for a `reduce` candidate (empty until seeded). */
+    reduceAccOf(order) {
+        let slot = this.reduceAcc.get(order);
+        if (slot === undefined) {
+            slot = emptyValue();
+            this.reduceAcc.set(order, slot);
+        }
+        return slot;
+    }
+    /** Merge a pass's callback-return taint into a `reduce` candidate's accumulator. */
+    mergeReduceAcc(order, value) {
+        if (mergeInto(this.reduceAccOf(order), value))
+            this.changed = true;
+    }
+    /**
+     * Record a call against EVERY enclosing region, mirroring {@link markFacade}.
+     * Recording only the innermost region left a caller function `fn@f`
+     * unmarked when its call to `g` happened inside an iteration candidate's callback
+     * (region `cand@N`). Reachability then never propagated `fn@f`, so a sibling
+     * candidate whose callback calls `f` failed to promote to a fan-out — an
+     * under-approximation (a dropped may-flow), which this analysis must never do.
+     */
+    markCalled(regionStack, id) {
+        for (const region of regionStack) {
+            let called = this.calledFns.get(region);
+            if (called === undefined) {
+                called = new Set();
+                this.calledFns.set(region, called);
+            }
+            if (!called.has(id)) {
+                called.add(id);
+                this.changed = true;
+            }
+        }
+    }
+    /** Record that `fn` was applied at `site` (see {@link applications}). Not a fixpoint
+     * signal: applications feed no transfer rule, and the final pass re-records them all. */
+    recordApplication(site, fn, via) {
+        let applied = this.applications.get(site);
+        if (applied === undefined) {
+            applied = new Map();
+            this.applications.set(site, applied);
+        }
+        // `callee` wins over `argument` for one function at one site (both can happen for a
+        // function passed to itself; the callee reading is the one that surely runs).
+        if (applied.get(fn) !== "callee")
+            applied.set(fn, via);
+    }
+    /** Mark every enclosing region as reaching a facade site. */
+    markFacade(regionStack) {
+        for (const region of regionStack) {
+            if (!this.reachSet.has(region)) {
+                this.reachSet.add(region);
+                this.changed = true;
+            }
+        }
+    }
+    /** Propagate reachability across the call graph until it stops growing. */
+    propagateReachability() {
+        let grew = true;
+        while (grew) {
+            grew = false;
+            for (const [region, fns] of this.calledFns) {
+                if (this.reachSet.has(region))
+                    continue;
+                for (const id of fns) {
+                    if (this.reachSet.has(`fn@${id}`)) {
+                        this.reachSet.add(region);
+                        this.changed = true;
+                        grew = true;
+                        break;
+                    }
+                }
+            }
+        }
+    }
+    /** Promote iteration candidates whose body region reaches a facade site. */
+    recomputePromotion() {
+        for (const cand of this.table.iterations) {
+            if (this.promotedOrders.has(cand.order))
+                continue;
+            if (this.reachSet.has(`cand@${cand.order}`)) {
+                this.promotedOrders.add(cand.order);
+                this.changed = true;
+            }
+        }
+    }
+    // -- emission ------------------------------------------------------------
+    emitFacts() {
+        const askData = new Map();
+        const askActor = new Map();
+        const worldReadData = new Map();
+        const joinIn = new Map();
+        const fanoutIn = new Map();
+        for (const [id, value] of this.askInstr)
+            askData.set(id, this.resolveArtifact(value));
+        for (const [id, value] of this.askRecv)
+            askActor.set(id, this.resolveActor(value));
+        for (const [id, value] of this.worldRead)
+            worldReadData.set(id, this.resolveArtifact(value));
+        const holeData = new Map();
+        for (const [id, value] of this.holePrompt)
+            holeData.set(id, this.resolveArtifact(value));
+        for (const [id, ports] of this.joinInByPort) {
+            const occs = [];
+            for (const [port, value] of ports) {
+                for (const occ of this.resolveArtifact(value)) {
+                    occs.push({ exact: occ.exact, site: occ.site, ...(port >= 0 ? { port } : {}) });
+                }
+            }
+            joinIn.set(id, occs);
+        }
+        for (const [id, value] of this.fanoutInVal)
+            fanoutIn.set(id, this.resolveArtifact(value));
+        const promoted = this.table.iterations
+            .filter((cand) => this.promotedOrders.has(cand.order))
+            .sort((a, b) => a.order - b.order)
+            .map((cand) => ({ id: provisionalFanoutId(cand.order), label: "fan-out", loc: cand.loc, order: cand.order }));
+        return {
+            askActor,
+            askData,
+            fanoutIn,
+            holeData,
+            joinIn,
+            promoted,
+            returnData: this.resolveArtifact(this.returnVal),
+            worldReadData,
+        };
+    }
+    /**
+     * The ordering walk's oracle view, resolved directly off the CONVERGED interpreter
+     * state — the fused pass's replacement for the `awaitSettles`/`guardReads` members
+     * TaintFacts used to carry.
+     * Same keying (`node.getStart(scriptFile)` of the awaited/guard expression) and the
+     * SAME resolution pipeline as every artifact sink (placeholders expanded, collapsed,
+     * actor labels filtered) — so an awaited parameter still resolves to the union of the
+     * promises its callers passed in, across all call sites. That union is normative: the
+     * temporal walk must see today's context-INsensitive values bit-for-bit; caller-context
+     * precision is explicitly out of scope.
+     *
+     * Only meaningful after the fixpoint has converged; interpret.ts is the one caller.
+     */
+    emitOracle() {
+        const awaitSettles = new Map();
+        for (const [pos, value] of this.awaitVal)
+            awaitSettles.set(pos, this.resolveArtifact(value));
+        const guardReads = new Map();
+        for (const [pos, value] of this.guardVal)
+            guardReads.set(pos, this.resolveArtifact(value));
+        return { applications: this.applications, awaitSettles, guardReads };
+    }
+    resolveArtifact(value) {
+        return this.resolveOccs(value).filter((occ) => !isActorSite(occ.site));
+    }
+    resolveActor(value) {
+        return this.resolveOccs(value).filter((occ) => isActorSite(occ.site));
+    }
+    resolveOccs(value) {
+        return [...collapse(this.resolvePlaceholders(value, new Set())).occs.values()];
+    }
+    /** Expand parameter placeholders to the union of actual arguments across all calls. */
+    resolvePlaceholders(value, visiting, seen = new Set()) {
+        if (seen.has(value))
+            return emptyValue(); // cycle-safe: a shared field contributes once
+        seen.add(value);
+        const out = emptyValue();
+        for (const occ of value.occs.values())
+            addOcc(out, occ);
+        for (const ph of value.phs.values())
+            this.resolvePlaceholder(out, ph, visiting);
+        for (const [key, field] of value.fields)
+            out.fields.set(key, this.resolvePlaceholders(field, visiting, seen));
+        // A bound function reaching an emission point (e.g. a returned bound function) must not
+        // drop its prefix's taint; fold each resolved prefix arg in (collapsed at emission).
+        for (const el of value.bound ?? [])
+            mergeInto(out, this.resolvePlaceholders(el, visiting, seen));
+        return out;
+    }
+    resolvePlaceholder(out, ph, visiting) {
+        if (ph.rest === true) {
+            // A rest formal gathers every actual recorded at index >= ph.param (calls
+            // record actuals positionally, so a rest param has many keyed slots).
+            for (const [key, actual] of this.paramActuals) {
+                const sep = key.indexOf(":");
+                if (Number(key.slice(0, sep)) !== ph.fnId || Number(key.slice(sep + 1)) < ph.param)
+                    continue;
+                if (visiting.has(key))
+                    continue;
+                visiting.add(key);
+                mergeInto(out, this.resolvePlaceholders(actual, visiting));
+                visiting.delete(key);
+            }
+            return;
+        }
+        const key = phKey(ph);
+        if (visiting.has(key))
+            return; // recursion → bottom
+        const actual = this.paramActuals.get(key);
+        if (actual === undefined)
+            return;
+        visiting.add(key);
+        mergeInto(out, this.resolvePlaceholders(actual, visiting));
+        visiting.delete(key);
+    }
+    bindPlaceholderParams(fn, id) {
+        const params = fn.parameters;
+        (this.fnParamSymbols.get(id) ?? []).forEach((sym, param) => {
+            if (sym === undefined)
+                return;
+            const val = emptyValue();
+            const rest = params[param]?.dotDotDotToken !== undefined;
+            addPlaceholder(val, { fnId: id, param, ...(rest ? { rest: true } : {}) });
+            this.bindSymbol(sym, val);
+        });
+    }
+}

package/vendor/dynamic-workflow/analysis/taint.d.ts

@@ -0,0 +1,97 @@
+import ts from "typescript";
+import type { WorkflowProgram } from "../compiler/compile.js";
+import type { SiteTable } from "./sites.js";
+import { type AbstractValue } from "./domain.js";
+import { TaintState } from "./state.js";
+export interface EvalContext {
+    /** Enclosing dataflow regions, innermost last: "top", `fn@<id>`, `cand@<order>`. */
+    regionStack: string[];
+    /** Sink for `return` statements in this region. */
+    onReturn: (value: AbstractValue) => void;
+}
+/**
+ * The taint half of the fused interpreter:
+ * drive the whole-script transfer to a fixpoint. Emission is the caller's business —
+ * interpret.ts reads the converged state through `emitFacts` / `emitOracle` and runs
+ * the temporal walk over the same state.
+ */
+export declare class Evaluator {
+    readonly s: TaintState;
+    readonly checker: ts.TypeChecker;
+    constructor(workflow: WorkflowProgram, table: SiteTable);
+    converge(): void;
+    private iterate;
+    private evalFunction;
+    /**
+     * Record a guard expression's value as the control-dependence oracle, keyed by the
+     * guard node's START OFFSET — the same node `traceOrder` hands to `controllersOf`, so a
+     * parenthesized guard is keyed by its ParenthesizedExpression. This is a SINK, not a
+     * flow: the value is recorded and not joined into anything, because a condition does not
+     * join the data contract (see the ConditionalExpression case in evalExpr). Consumed only
+     * by the causality graph.
+     */
+    recordGuard(node: ts.Expression, value: AbstractValue): void;
+    visit(node: ts.Node, ctx: EvalContext): void;
+    handleDeclaration(decl: ts.VariableDeclaration, ctx: EvalContext): void;
+    /**
+     * The LIVE (shared, unclonable) abstract value a *place expression* denotes, or
+     * undefined for non-places (calls, literals, computed access, operators). A place is
+     * an identifier (its env slot) or a chain of static property / literal-index element
+     * accesses rooted at a place. Value-preserving wrappers (parens / `as` / `satisfies` /
+     * non-null / type assertion) are peeled at every level. This is the single primitive
+     * behind aliasing: bindings, container-literal fields, write receivers and param
+     * write-back all resolve places through it. Reads must NOT call this (they clone).
+     *
+     * `create` governs missing field slots. WRITE receivers create empty fields on demand
+     * (`arr[0].f = t` materializes `arr[0]`). Read-side callers (aliasing binds,
+     * container-literal embedding, write-back actuals) pass `create=false`: an absent field
+     * returns undefined so the caller falls back to value semantics (readField's collapse),
+     * which correctly surfaces the container's own occurrences. Fabricating an empty field
+     * there would alias to a phantom and DROP the opaque container's taint (e.g. reading
+     * `review.feedback` off an opaque ask result must yield collapse(review), not ∅).
+     */
+    resolvePlace(expr: ts.Expression, create?: boolean): AbstractValue | undefined;
+    private placeField;
+    /**
+     * The parameter write-back target for an actual argument `arg` whose evaluated value is
+     * `value`. A place actual resolves to its live slot (write-back aliases through it, as
+     * before). An object/array LITERAL's evaluated value IS its allocation-site place
+     * (state.literalPlaceOf), and its FIELDS hold live places (`poke({ box })` — the literal's
+     * `box` field IS the box slot), so that value is the write-back target: `mergeHeapEffects`
+     * descends into it and a field the callee wrote through `p.box` lands on the shared `box`
+     * slot, while a field written on the literal itself (`tag({ name }, t)` → `box.note = t`)
+     * persists on the place and reaches whoever the callee hands the object to.
+     * A literal argument once skipped write-back entirely, so mutations through its live
+     * sub-objects were invisible to the caller; and when the literal was a per-pass fresh
+     * value, that write-back re-reported a change on every pass and the fixpoint never
+     * settled.
+     */
+    argWriteBackPlace(arg: ts.Expression, value: AbstractValue): AbstractValue | undefined;
+    /**
+     * Bind a destructuring pattern (or a single name). See {@link bindPattern} in patterns.ts;
+     * exposed as a thin method because the aliasing-bind machinery is used across modules.
+     */
+    bindPattern(name: ts.BindingName, value: AbstractValue, ctx: EvalContext, sourcePlace?: AbstractValue): void;
+    /** The live field at `key` of a place, for destructuring aliasing (see patterns.ts). */
+    extractField(container: AbstractValue, key: string): AbstractValue;
+    /** Read a statically-known field with smear-on-read, else collapse (see patterns.ts). */
+    selectField(value: AbstractValue, key: string): AbstractValue;
+    evalExpr(node: ts.Expression, ctx: EvalContext): AbstractValue;
+    private evalIdentifier;
+    /**
+     * The implicit `arguments` object as a rest-like placeholder gathering every actual of
+     * the nearest enclosing NON-arrow function (param index 0, rest). `arguments[i]` then
+     * reads a field of it → collapse keeps the placeholder → emission expands it to all
+     * recorded actuals (a sound over-approximation: `arguments[0]` yields the whole list).
+     * Arrow functions have no own `arguments`, so the ancestor walk skips them and binds the
+     * enclosing function's — matching JS's lexical `arguments`. Previously `arguments`
+     * resolved to the lib symbol with no env slot, so `arguments[0]` dropped every
+     * actual's taint.
+     */
+    private argumentsValue;
+    private evalBinary;
+    private evalPropertyAccess;
+    private evalElementAccess;
+    receiverSymbol(expr: ts.Expression): ts.Symbol | undefined;
+}
+//# sourceMappingURL=taint.d.ts.map

package/vendor/dynamic-workflow/analysis/taint.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"taint.d.ts","sourceRoot":"","sources":["../../src/analysis/taint.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,YAAY,CAAC;AAC5B,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AAC9D,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,YAAY,CAAC;AAC5C,OAAO,EAeL,KAAK,aAAa,EACnB,MAAM,aAAa,CAAC;AAgBrB,OAAO,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AA2BxC,MAAM,WAAW,WAAW;IAC1B,oFAAoF;IACpF,WAAW,EAAE,MAAM,EAAE,CAAC;IACtB,mDAAmD;IACnD,QAAQ,EAAE,CAAC,KAAK,EAAE,aAAa,KAAK,IAAI,CAAC;CAC1C;AAED;;;;;GAKG;AACH,qBAAa,SAAS;IACpB,QAAQ,CAAC,CAAC,EAAE,UAAU,CAAC;IACvB,QAAQ,CAAC,OAAO,EAAE,EAAE,CAAC,WAAW,CAAC;gBAErB,QAAQ,EAAE,eAAe,EAAE,KAAK,EAAE,SAAS;IAKvD,QAAQ,IAAI,IAAI;IAchB,OAAO,CAAC,OAAO;IA4Bf,OAAO,CAAC,YAAY;IAyCpB;;;;;;;OAOG;IACH,WAAW,CAAC,IAAI,EAAE,EAAE,CAAC,UAAU,EAAE,KAAK,EAAE,aAAa,GAAG,IAAI;IAM5D,KAAK,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,EAAE,GAAG,EAAE,WAAW,GAAG,IAAI;IA4D5C,iBAAiB,CAAC,IAAI,EAAE,EAAE,CAAC,mBAAmB,EAAE,GAAG,EAAE,WAAW,GAAG,IAAI;IAqCvE;;;;;;;;;;;;;;;;OAgBG;IACH,YAAY,CAAC,IAAI,EAAE,EAAE,CAAC,UAAU,EAAE,MAAM,UAAQ,GAAG,aAAa,GAAG,SAAS;IAgG5E,OAAO,CAAC,UAAU;IAMlB;;;;;;;;;;;;;OAaG;IACH,iBAAiB,CAAC,GAAG,EAAE,EAAE,CAAC,UAAU,EAAE,KAAK,EAAE,aAAa,GAAG,aAAa,GAAG,SAAS;IAOtF;;;OAGG;IACH,WAAW,CAAC,IAAI,EAAE,EAAE,CAAC,WAAW,EAAE,KAAK,EAAE,aAAa,EAAE,GAAG,EAAE,WAAW,EAAE,WAAW,CAAC,EAAE,aAAa,GAAG,IAAI;IAI5G,wFAAwF;IACxF,YAAY,CAAC,SAAS,EAAE,aAAa,EAAE,GAAG,EAAE,MAAM,GAAG,aAAa;IAIlE,yFAAyF;IACzF,WAAW,CAAC,KAAK,EAAE,aAAa,EAAE,GAAG,EAAE,MAAM,GAAG,aAAa;IAM7D,QAAQ,CAAC,IAAI,EAAE,EAAE,CAAC,UAAU,EAAE,GAAG,EAAE,WAAW,GAAG,aAAa;IAgI9D,OAAO,CAAC,cAAc;IAetB;;;;;;;;;OASG;IACH,OAAO,CAAC,cAAc;IAUtB,OAAO,CAAC,UAAU;IA+BlB,OAAO,CAAC,kBAAkB;IAO1B,OAAO,CAAC,iBAAiB;IAYzB,cAAc,CAAC,IAAI,EAAE,EAAE,CAAC,UAAU,GAAG,EAAE,CAAC,MAAM,GAAG,SAAS;CAG3D"}