@t4h.framework/core 0.18.0 → 0.20.0

package/dist/eslint/index.d.ts

@@ -0,0 +1,16 @@
+import type { ESLint, Linter } from 'eslint';
+/**
+ * An ESLint plugin with a `recommended` config that turns on its rules.
+ */
+export interface FrameworkEslintPlugin extends ESLint.Plugin {
+    configs: {
+        recommended: Linter.Config[];
+    };
+}
+declare const core: FrameworkEslintPlugin;
+/**
+ * The ESLint plugin of `@t4h.framework/core`, with the rules for code that
+ * uses the core.
+ */
+export default core;
+//# sourceMappingURL=index.d.ts.map

package/dist/eslint/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/eslint/index.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAA;AAyE5C;;GAEG;AACH,MAAM,WAAW,qBAAsB,SAAQ,MAAM,CAAC,MAAM;IAC1D,OAAO,EAAE;QAAE,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,CAAA;KAAE,CAAA;CAC1C;AAED,QAAA,MAAM,IAAI,EAAE,qBAA+D,CAAA;AAE3E;;;GAGG;AACH,eAAe,IAAI,CAAA"}

package/dist/eslint/index.js

@@ -0,0 +1,69 @@
+import { envFromEnvDesign } from './rules/env-from-env-design.js';
+import { noBinaryStreamOutsideActivity } from './rules/no-binary-stream-outside-activity.js';
+import { noBinarySubclass } from './rules/no-binary-subclass.js';
+import { noFrameworkActivityInApp } from './rules/no-framework-activity-in-app.js';
+import { noIoInWorkflow } from './rules/no-io-in-workflow.js';
+import { noLiteralSecretInAuthorization } from './rules/no-literal-secret-in-authorization.js';
+import { noNondeterministicInWorkflow } from './rules/no-nondeterministic-in-workflow.js';
+import { noSecretToString } from './rules/no-secret-to-string.js';
+import { noTestingImportInSource } from './rules/no-testing-import-in-source.js';
+import { requireWorkflowId } from './rules/require-workflow-id.js';
+const NAME = '@t4h.framework/core';
+const ALL_FILES = ['**/*.{js,mjs,cjs,jsx,ts,tsx,mts,cts}'];
+const TYPED_FILES = ['**/*.{ts,tsx,mts,cts}'];
+const SOURCE_FILES = ['src/**/*.{js,mjs,cjs,jsx,ts,tsx,mts,cts}'];
+const TEST_FILES = [
+    '**/__tests__/**',
+    '**/*.{spec,test}.{js,mjs,cjs,jsx,ts,tsx,mts,cts}',
+];
+const rules = {
+    'env-from-env-design': envFromEnvDesign,
+    'no-binary-stream-outside-activity': noBinaryStreamOutsideActivity,
+    'no-binary-subclass': noBinarySubclass,
+    'no-framework-activity-in-app': noFrameworkActivityInApp,
+    'no-io-in-workflow': noIoInWorkflow,
+    'no-literal-secret-in-authorization': noLiteralSecretInAuthorization,
+    'no-nondeterministic-in-workflow': noNondeterministicInWorkflow,
+    'no-secret-to-string': noSecretToString,
+    'no-testing-import-in-source': noTestingImportInSource,
+    'require-workflow-id': requireWorkflowId,
+};
+const plugin = { meta: { name: NAME }, rules };
+const recommended = [
+    { plugins: { [NAME]: plugin } },
+    {
+        files: TYPED_FILES,
+        rules: {
+            [`${NAME}/no-binary-stream-outside-activity`]: 'error',
+            [`${NAME}/no-io-in-workflow`]: 'error',
+            [`${NAME}/no-nondeterministic-in-workflow`]: 'error',
+            [`${NAME}/no-secret-to-string`]: 'error',
+            [`${NAME}/require-workflow-id`]: 'error',
+        },
+    },
+    {
+        files: TYPED_FILES,
+        ignores: TEST_FILES,
+        rules: {
+            [`${NAME}/no-binary-subclass`]: 'error',
+            [`${NAME}/no-framework-activity-in-app`]: 'error',
+            [`${NAME}/no-literal-secret-in-authorization`]: 'error',
+        },
+    },
+    {
+        files: ALL_FILES,
+        ignores: TEST_FILES,
+        rules: { [`${NAME}/no-testing-import-in-source`]: 'error' },
+    },
+    {
+        files: SOURCE_FILES,
+        rules: { [`${NAME}/env-from-env-design`]: 'error' },
+    },
+];
+const core = { ...plugin, configs: { recommended } };
+/**
+ * The ESLint plugin of `@t4h.framework/core`, with the rules for code that
+ * uses the core.
+ */
+export default core;
+//# sourceMappingURL=index.js.map

package/dist/eslint/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/eslint/index.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,gBAAgB,EAAE,MAAM,gCAAgC,CAAA;AACjE,OAAO,EAAE,6BAA6B,EAAE,MAAM,8CAA8C,CAAA;AAC5F,OAAO,EAAE,gBAAgB,EAAE,MAAM,+BAA+B,CAAA;AAChE,OAAO,EAAE,wBAAwB,EAAE,MAAM,yCAAyC,CAAA;AAClF,OAAO,EAAE,cAAc,EAAE,MAAM,8BAA8B,CAAA;AAC7D,OAAO,EAAE,8BAA8B,EAAE,MAAM,+CAA+C,CAAA;AAC9F,OAAO,EAAE,4BAA4B,EAAE,MAAM,4CAA4C,CAAA;AACzF,OAAO,EAAE,gBAAgB,EAAE,MAAM,gCAAgC,CAAA;AACjE,OAAO,EAAE,uBAAuB,EAAE,MAAM,wCAAwC,CAAA;AAChF,OAAO,EAAE,iBAAiB,EAAE,MAAM,gCAAgC,CAAA;AAElE,MAAM,IAAI,GAAG,qBAAqB,CAAA;AAElC,MAAM,SAAS,GAAG,CAAC,sCAAsC,CAAC,CAAA;AAE1D,MAAM,WAAW,GAAG,CAAC,uBAAuB,CAAC,CAAA;AAE7C,MAAM,YAAY,GAAG,CAAC,0CAA0C,CAAC,CAAA;AAEjE,MAAM,UAAU,GAAG;IACjB,iBAAiB;IACjB,kDAAkD;CACnD,CAAA;AAED,MAAM,KAAK,GAAG;IACZ,qBAAqB,EAAE,gBAAgB;IACvC,mCAAmC,EAAE,6BAA6B;IAClE,oBAAoB,EAAE,gBAAgB;IACtC,8BAA8B,EAAE,wBAAwB;IACxD,mBAAmB,EAAE,cAAc;IACnC,oCAAoC,EAAE,8BAA8B;IACpE,iCAAiC,EAAE,4BAA4B;IAC/D,qBAAqB,EAAE,gBAAgB;IACvC,6BAA6B,EAAE,uBAAuB;IACtD,qBAAqB,EAAE,iBAAiB;CACzC,CAAA;AAED,MAAM,MAAM,GAAkB,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,CAAA;AAE7D,MAAM,WAAW,GAAoB;IACnC,EAAE,OAAO,EAAE,EAAE,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,EAAE;IAC/B;QACE,KAAK,EAAE,WAAW;QAClB,KAAK,EAAE;YACL,CAAC,GAAG,IAAI,oCAAoC,CAAC,EAAE,OAAO;YACtD,CAAC,GAAG,IAAI,oBAAoB,CAAC,EAAE,OAAO;YACtC,CAAC,GAAG,IAAI,kCAAkC,CAAC,EAAE,OAAO;YACpD,CAAC,GAAG,IAAI,sBAAsB,CAAC,EAAE,OAAO;YACxC,CAAC,GAAG,IAAI,sBAAsB,CAAC,EAAE,OAAO;SACzC;KACF;IACD;QACE,KAAK,EAAE,WAAW;QAClB,OAAO,EAAE,UAAU;QACnB,KAAK,EAAE;YACL,CAAC,GAAG,IAAI,qBAAqB,CAAC,EAAE,OAAO;YACvC,CAAC,GAAG,IAAI,+BAA+B,CAAC,EAAE,OAAO;YACjD,CAAC,GAAG,IAAI,qCAAqC,CAAC,EAAE,OAAO;SACxD;KACF;IACD;QACE,KAAK,EAAE,SAAS;QAChB,OAAO,EAAE,UAAU;QACnB,KAAK,EAAE,EAAE,CAAC,GAAG,IAAI,8BAA8B,CAAC,EAAE,OAAO,EAAE;KAC5D;IACD;QACE,KAAK,EAAE,YAAY;QACnB,KAAK,EAAE,EAAE,CAAC,GAAG,IAAI,sBAAsB,CAAC,EAAE,OAAO,EAAE;KACpD;CACF,CAAA;AASD,MAAM,IAAI,GAA0B,EAAE,GAAG,MAAM,EAAE,OAAO,EAAE,EAAE,WAAW,EAAE,EAAE,CAAA;AAE3E;;;GAGG;AACH,eAAe,IAAI,CAAA"}

package/dist/eslint/rules/env-from-env-design.d.ts

@@ -0,0 +1,3 @@
+import type { Rule } from 'eslint';
+export declare const envFromEnvDesign: Rule.RuleModule;
+//# sourceMappingURL=env-from-env-design.d.ts.map

package/dist/eslint/rules/env-from-env-design.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"env-from-env-design.d.ts","sourceRoot":"","sources":["../../../src/eslint/rules/env-from-env-design.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,QAAQ,CAAA;AAyClC,eAAO,MAAM,gBAAgB,EAAE,IAAI,CAAC,UA+DnC,CAAA"}

package/dist/eslint/rules/env-from-env-design.js

@@ -0,0 +1,85 @@
+const CORE = '@t4h.framework/core';
+const PROCESS_MODULES = new Set(['process', 'node:process']);
+function messageIdOf(source) {
+    if (source === CORE)
+        return 'coreEnv';
+    if (PROCESS_MODULES.has(String(source)))
+        return 'processEnv';
+    return undefined;
+}
+function isEnvKey(node, computed) {
+    if (!computed)
+        return node.type === 'Identifier' && node.name === 'env';
+    return node.type === 'Literal' && node.value === 'env';
+}
+function identifierName(node) {
+    return node.type === 'Identifier' ? node.name : undefined;
+}
+function specifierName(specifier) {
+    if (specifier.type === 'ExportSpecifier')
+        return identifierName(specifier.local);
+    if (specifier.type === 'ImportSpecifier')
+        return identifierName(specifier.imported);
+    return undefined;
+}
+function isWholeModule(specifier) {
+    return (specifier.type === 'ImportNamespaceSpecifier' ||
+        specifier.type === 'ImportDefaultSpecifier');
+}
+export const envFromEnvDesign = {
+    meta: {
+        type: 'problem',
+        docs: {
+            description: 'Requires env to come from EnvDesign, not from @t4h.framework/core or process.env',
+        },
+        messages: {
+            coreEnv: 'Do not import env from @t4h.framework/core. Create env with EnvDesign and import it from that module.',
+            processEnv: 'Do not read process.env. Declare the variable with EnvDesign and read it from the env that EnvDesign creates.',
+        },
+        schema: [],
+    },
+    create(context) {
+        const modules = new Map([['process', 'processEnv']]);
+        function checkSpecifiers(specifiers, messageId) {
+            for (const specifier of specifiers) {
+                if (isWholeModule(specifier))
+                    modules.set(specifier.local.name, messageId);
+                if (specifierName(specifier) === 'env')
+                    context.report({ node: specifier, messageId });
+            }
+        }
+        return {
+            ImportDeclaration(node) {
+                const messageId = messageIdOf(node.source.value);
+                if (messageId)
+                    checkSpecifiers(node.specifiers, messageId);
+            },
+            ExportNamedDeclaration(node) {
+                const messageId = messageIdOf(node.source?.value);
+                if (messageId)
+                    checkSpecifiers(node.specifiers, messageId);
+            },
+            MemberExpression(node) {
+                if (node.object.type !== 'Identifier')
+                    return;
+                if (!isEnvKey(node.property, node.computed))
+                    return;
+                const messageId = modules.get(node.object.name);
+                if (messageId)
+                    context.report({ node, messageId });
+            },
+            VariableDeclarator(node) {
+                if (node.init?.type !== 'Identifier' ||
+                    node.id.type !== 'ObjectPattern')
+                    return;
+                if (modules.get(node.init.name) !== 'processEnv')
+                    return;
+                const readsEnv = node.id.properties.some(property => property.type === 'Property' &&
+                    isEnvKey(property.key, property.computed));
+                if (readsEnv)
+                    context.report({ node, messageId: 'processEnv' });
+            },
+        };
+    },
+};
+//# sourceMappingURL=env-from-env-design.js.map

package/dist/eslint/rules/env-from-env-design.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"env-from-env-design.js","sourceRoot":"","sources":["../../../src/eslint/rules/env-from-env-design.ts"],"names":[],"mappings":"AAIA,MAAM,IAAI,GAAG,qBAAqB,CAAA;AAElC,MAAM,eAAe,GAAG,IAAI,GAAG,CAAC,CAAC,SAAS,EAAE,cAAc,CAAC,CAAC,CAAA;AAE5D,SAAS,WAAW,CAAC,MAAe;IAClC,IAAI,MAAM,KAAK,IAAI;QAAE,OAAO,SAAS,CAAA;IACrC,IAAI,eAAe,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QAAE,OAAO,YAAY,CAAA;IAE5D,OAAO,SAAS,CAAA;AAClB,CAAC;AAED,SAAS,QAAQ,CAAC,IAAe,EAAE,QAAiB;IAClD,IAAI,CAAC,QAAQ;QAAE,OAAO,IAAI,CAAC,IAAI,KAAK,YAAY,IAAI,IAAI,CAAC,IAAI,KAAK,KAAK,CAAA;IAEvE,OAAO,IAAI,CAAC,IAAI,KAAK,SAAS,IAAI,IAAI,CAAC,KAAK,KAAK,KAAK,CAAA;AACxD,CAAC;AAED,SAAS,cAAc,CAAC,IAAe;IACrC,OAAO,IAAI,CAAC,IAAI,KAAK,YAAY,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAA;AAC3D,CAAC;AAED,SAAS,aAAa,CAAC,SAAoB;IACzC,IAAI,SAAS,CAAC,IAAI,KAAK,iBAAiB;QACtC,OAAO,cAAc,CAAC,SAAS,CAAC,KAAkB,CAAC,CAAA;IACrD,IAAI,SAAS,CAAC,IAAI,KAAK,iBAAiB;QACtC,OAAO,cAAc,CAAC,SAAS,CAAC,QAAqB,CAAC,CAAA;IAExD,OAAO,SAAS,CAAA;AAClB,CAAC;AAED,SAAS,aAAa,CAAC,SAAoB;IACzC,OAAO,CACL,SAAS,CAAC,IAAI,KAAK,0BAA0B;QAC7C,SAAS,CAAC,IAAI,KAAK,wBAAwB,CAC5C,CAAA;AACH,CAAC;AAED,MAAM,CAAC,MAAM,gBAAgB,GAAoB;IAC/C,IAAI,EAAE;QACJ,IAAI,EAAE,SAAS;QACf,IAAI,EAAE;YACJ,WAAW,EACT,kFAAkF;SACrF;QACD,QAAQ,EAAE;YACR,OAAO,EACL,uGAAuG;YACzG,UAAU,EACR,+GAA+G;SAClH;QACD,MAAM,EAAE,EAAE;KACX;IACD,MAAM,CAAC,OAAO;QACZ,MAAM,OAAO,GAAG,IAAI,GAAG,CAAoB,CAAC,CAAC,SAAS,EAAE,YAAY,CAAC,CAAC,CAAC,CAAA;QAEvE,SAAS,eAAe,CACtB,UAA8B,EAC9B,SAAoB;YAEpB,KAAK,MAAM,SAAS,IAAI,UAAyB,EAAE,CAAC;gBAClD,IAAI,aAAa,CAAC,SAAS,CAAC;oBAC1B,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,EAAE,SAAS,CAAC,CAAA;gBAC9C,IAAI,aAAa,CAAC,SAAS,CAAC,KAAK,KAAK;oBACpC,OAAO,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,SAAS,EAAE,CAAC,CAAA;YAClD,CAAC;QACH,CAAC;QAED,OAAO;YACL,iBAAiB,CAAC,IAAI;gBACpB,MAAM,SAAS,GAAG,WAAW,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;gBAChD,IAAI,SAAS;oBAAE,eAAe,CAAC,IAAI,CAAC,UAAU,EAAE,SAAS,CAAC,CAAA;YAC5D,CAAC;YACD,sBAAsB,CAAC,IAAI;gBACzB,MAAM,SAAS,GAAG,WAAW,CAAC,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC,CAAA;gBACjD,IAAI,SAAS;oBAAE,eAAe,CAAC,IAAI,CAAC,UAAU,EAAE,SAAS,CAAC,CAAA;YAC5D,CAAC;YACD,gBAAgB,CAAC,IAAI;gBACnB,IAAI,IAAI,CAAC,MAAM,CAAC,IAAI,KAAK,YAAY;oBAAE,OAAM;gBAC7C,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,QAAqB,EAAE,IAAI,CAAC,QAAQ,CAAC;oBAAE,OAAM;gBAEhE,MAAM,SAAS,GAAG,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAA;gBAC/C,IAAI,SAAS;oBAAE,OAAO,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CAAA;YACpD,CAAC;YACD,kBAAkB,CAAC,IAAI;gBACrB,IACE,IAAI,CAAC,IAAI,EAAE,IAAI,KAAK,YAAY;oBAChC,IAAI,CAAC,EAAE,CAAC,IAAI,KAAK,eAAe;oBAEhC,OAAM;gBACR,IAAI,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,YAAY;oBAAE,OAAM;gBAExD,MAAM,QAAQ,GAAG,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,IAAI,CACtC,QAAQ,CAAC,EAAE,CACT,QAAQ,CAAC,IAAI,KAAK,UAAU;oBAC5B,QAAQ,CAAC,QAAQ,CAAC,GAAgB,EAAE,QAAQ,CAAC,QAAQ,CAAC,CACzD,CAAA;gBACD,IAAI,QAAQ;oBAAE,OAAO,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,YAAY,EAAE,CAAC,CAAA;YACjE,CAAC;SACF,CAAA;IACH,CAAC;CACF,CAAA"}

package/dist/eslint/rules/no-binary-stream-outside-activity.d.ts

@@ -0,0 +1,3 @@
+import type { Rule } from 'eslint';
+export declare const noBinaryStreamOutsideActivity: Rule.RuleModule;
+//# sourceMappingURL=no-binary-stream-outside-activity.d.ts.map

package/dist/eslint/rules/no-binary-stream-outside-activity.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"no-binary-stream-outside-activity.d.ts","sourceRoot":"","sources":["../../../src/eslint/rules/no-binary-stream-outside-activity.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,QAAQ,CAAA;AA+BlC,eAAO,MAAM,6BAA6B,EAAE,IAAI,CAAC,UA8BhD,CAAA"}

package/dist/eslint/rules/no-binary-stream-outside-activity.js

@@ -0,0 +1,51 @@
+import { createCoreTypes } from '../tools/coreTypes.js';
+import { findClassMember, isActivityClass, isFrontMethodName, } from '../tools/workflowSides.js';
+const BINARY_CLASSES = new Set(['Binary']);
+function isBackMethod(types, member) {
+    if (isFrontMethodName(member.name))
+        return false;
+    return isActivityClass(types, member.classNode);
+}
+function isBinaryStreamMethod(types, member) {
+    if (member.name !== 'stream')
+        return false;
+    return types.extendsCoreClass(member.classNode, BINARY_CLASSES);
+}
+function isAllowedPlace(types, node) {
+    const member = findClassMember(node);
+    if (!member)
+        return false;
+    return isBackMethod(types, member) || isBinaryStreamMethod(types, member);
+}
+export const noBinaryStreamOutsideActivity = {
+    meta: {
+        type: 'problem',
+        docs: {
+            description: 'Allows Binary.stream() only in the methods of an activity, other than toInput and toOutput',
+        },
+        messages: {
+            stream: 'Call stream() of a Binary only in a method of an activity, such as run, bootstrap or advance. The workflow, toInput and toOutput run again on each replay, so they must not read the content of a Binary. A function out of the activity class must not read it either. Give the Binary to an activity.',
+        },
+        schema: [],
+    },
+    create(context) {
+        const types = createCoreTypes(context);
+        return {
+            CallExpression(node) {
+                const { callee } = node;
+                if (callee.type !== 'MemberExpression' || callee.computed)
+                    return;
+                if (callee.property.type !== 'Identifier')
+                    return;
+                if (callee.property.name !== 'stream')
+                    return;
+                if (!types.extendsCoreClass(callee.object, BINARY_CLASSES))
+                    return;
+                if (isAllowedPlace(types, node))
+                    return;
+                context.report({ node, messageId: 'stream' });
+            },
+        };
+    },
+};
+//# sourceMappingURL=no-binary-stream-outside-activity.js.map

package/dist/eslint/rules/no-binary-stream-outside-activity.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"no-binary-stream-outside-activity.js","sourceRoot":"","sources":["../../../src/eslint/rules/no-binary-stream-outside-activity.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,eAAe,EAAkB,MAAM,uBAAuB,CAAA;AACvE,OAAO,EACL,eAAe,EACf,eAAe,EACf,iBAAiB,GAElB,MAAM,2BAA2B,CAAA;AAElC,MAAM,cAAc,GAAG,IAAI,GAAG,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAA;AAE1C,SAAS,YAAY,CAAC,KAAgB,EAAE,MAAmB;IACzD,IAAI,iBAAiB,CAAC,MAAM,CAAC,IAAI,CAAC;QAAE,OAAO,KAAK,CAAA;IAEhD,OAAO,eAAe,CAAC,KAAK,EAAE,MAAM,CAAC,SAAS,CAAC,CAAA;AACjD,CAAC;AAED,SAAS,oBAAoB,CAAC,KAAgB,EAAE,MAAmB;IACjE,IAAI,MAAM,CAAC,IAAI,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAA;IAE1C,OAAO,KAAK,CAAC,gBAAgB,CAAC,MAAM,CAAC,SAAS,EAAE,cAAc,CAAC,CAAA;AACjE,CAAC;AAED,SAAS,cAAc,CAAC,KAAgB,EAAE,IAAe;IACvD,MAAM,MAAM,GAAG,eAAe,CAAC,IAAI,CAAC,CAAA;IACpC,IAAI,CAAC,MAAM;QAAE,OAAO,KAAK,CAAA;IAEzB,OAAO,YAAY,CAAC,KAAK,EAAE,MAAM,CAAC,IAAI,oBAAoB,CAAC,KAAK,EAAE,MAAM,CAAC,CAAA;AAC3E,CAAC;AAED,MAAM,CAAC,MAAM,6BAA6B,GAAoB;IAC5D,IAAI,EAAE;QACJ,IAAI,EAAE,SAAS;QACf,IAAI,EAAE;YACJ,WAAW,EACT,4FAA4F;SAC/F;QACD,QAAQ,EAAE;YACR,MAAM,EACJ,ySAAyS;SAC5S;QACD,MAAM,EAAE,EAAE;KACX;IACD,MAAM,CAAC,OAAO;QACZ,MAAM,KAAK,GAAG,eAAe,CAAC,OAAO,CAAC,CAAA;QAEtC,OAAO;YACL,cAAc,CAAC,IAAI;gBACjB,MAAM,EAAE,MAAM,EAAE,GAAG,IAAI,CAAA;gBACvB,IAAI,MAAM,CAAC,IAAI,KAAK,kBAAkB,IAAI,MAAM,CAAC,QAAQ;oBAAE,OAAM;gBACjE,IAAI,MAAM,CAAC,QAAQ,CAAC,IAAI,KAAK,YAAY;oBAAE,OAAM;gBACjD,IAAI,MAAM,CAAC,QAAQ,CAAC,IAAI,KAAK,QAAQ;oBAAE,OAAM;gBAC7C,IAAI,CAAC,KAAK,CAAC,gBAAgB,CAAC,MAAM,CAAC,MAAmB,EAAE,cAAc,CAAC;oBACrE,OAAM;gBACR,IAAI,cAAc,CAAC,KAAK,EAAE,IAAI,CAAC;oBAAE,OAAM;gBAEvC,OAAO,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,QAAQ,EAAE,CAAC,CAAA;YAC/C,CAAC;SACF,CAAA;IACH,CAAC;CACF,CAAA"}

package/dist/eslint/rules/no-binary-subclass.d.ts

@@ -0,0 +1,3 @@
+import type { Rule } from 'eslint';
+export declare const noBinarySubclass: Rule.RuleModule;
+//# sourceMappingURL=no-binary-subclass.d.ts.map

package/dist/eslint/rules/no-binary-subclass.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"no-binary-subclass.d.ts","sourceRoot":"","sources":["../../../src/eslint/rules/no-binary-subclass.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,QAAQ,CAAA;AAUlC,eAAO,MAAM,gBAAgB,EAAE,IAAI,CAAC,UA0BnC,CAAA"}

package/dist/eslint/rules/no-binary-subclass.js

@@ -0,0 +1,31 @@
+import { createCoreTypes } from '../tools/coreTypes.js';
+const BINARY_CLASSES = new Set(['Binary']);
+function isAmbient(node) {
+    return node.declare === true;
+}
+export const noBinarySubclass = {
+    meta: {
+        type: 'problem',
+        docs: {
+            description: 'Disallows a class that extends Binary in app code',
+        },
+        messages: {
+            subclass: 'Do not extend Binary. A Binary that app code makes fails in dev and in the runtime, because only the framework can read and store its content. Use write from @t4h.framework/fs to turn a string or a Buffer into a Binary.',
+        },
+        schema: [],
+    },
+    create(context) {
+        const types = createCoreTypes(context);
+        function check(node) {
+            if (node.type !== 'ClassDeclaration' && node.type !== 'ClassExpression')
+                return;
+            if (!node.superClass || isAmbient(node))
+                return;
+            if (!types.extendsCoreClass(node, BINARY_CLASSES))
+                return;
+            context.report({ node, messageId: 'subclass' });
+        }
+        return { ClassDeclaration: check, ClassExpression: check };
+    },
+};
+//# sourceMappingURL=no-binary-subclass.js.map

package/dist/eslint/rules/no-binary-subclass.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"no-binary-subclass.js","sourceRoot":"","sources":["../../../src/eslint/rules/no-binary-subclass.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAA;AAEvD,MAAM,cAAc,GAAG,IAAI,GAAG,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAA;AAE1C,SAAS,SAAS,CAAC,IAAe;IAChC,OAAQ,IAA8B,CAAC,OAAO,KAAK,IAAI,CAAA;AACzD,CAAC;AAED,MAAM,CAAC,MAAM,gBAAgB,GAAoB;IAC/C,IAAI,EAAE;QACJ,IAAI,EAAE,SAAS;QACf,IAAI,EAAE;YACJ,WAAW,EAAE,mDAAmD;SACjE;QACD,QAAQ,EAAE;YACR,QAAQ,EACN,6NAA6N;SAChO;QACD,MAAM,EAAE,EAAE;KACX;IACD,MAAM,CAAC,OAAO;QACZ,MAAM,KAAK,GAAG,eAAe,CAAC,OAAO,CAAC,CAAA;QAEtC,SAAS,KAAK,CAAC,IAAe;YAC5B,IAAI,IAAI,CAAC,IAAI,KAAK,kBAAkB,IAAI,IAAI,CAAC,IAAI,KAAK,iBAAiB;gBACrE,OAAM;YACR,IAAI,CAAC,IAAI,CAAC,UAAU,IAAI,SAAS,CAAC,IAAI,CAAC;gBAAE,OAAM;YAC/C,IAAI,CAAC,KAAK,CAAC,gBAAgB,CAAC,IAAI,EAAE,cAAc,CAAC;gBAAE,OAAM;YAEzD,OAAO,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,UAAU,EAAE,CAAC,CAAA;QACjD,CAAC;QAED,OAAO,EAAE,gBAAgB,EAAE,KAAK,EAAE,eAAe,EAAE,KAAK,EAAE,CAAA;IAC5D,CAAC;CACF,CAAA"}

package/dist/eslint/rules/no-framework-activity-in-app.d.ts

@@ -0,0 +1,3 @@
+import type { Rule } from 'eslint';
+export declare const noFrameworkActivityInApp: Rule.RuleModule;
+//# sourceMappingURL=no-framework-activity-in-app.d.ts.map

package/dist/eslint/rules/no-framework-activity-in-app.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"no-framework-activity-in-app.d.ts","sourceRoot":"","sources":["../../../src/eslint/rules/no-framework-activity-in-app.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,QAAQ,CAAA;AAelC,eAAO,MAAM,wBAAwB,EAAE,IAAI,CAAC,UAsC3C,CAAA"}

package/dist/eslint/rules/no-framework-activity-in-app.js

@@ -0,0 +1,41 @@
+import { createCoreTypes } from '../tools/coreTypes.js';
+import { isActivityClass } from '../tools/workflowSides.js';
+function isFrameworkActivity(types, node, declaration) {
+    if (!types.isDeclaredInOtherFrameworkPackage(declaration))
+        return false;
+    return isActivityClass(types, node);
+}
+export const noFrameworkActivityInApp = {
+    meta: {
+        type: 'problem',
+        docs: {
+            description: 'Disallows constructing or extending an activity of a framework package other than the core',
+        },
+        messages: {
+            construct: 'Do not construct the activity of a framework package. Call the function of the package in the workflow, for example http.get, render, unzip or write.',
+            extend: 'Do not extend the activity of a framework package. Call the function of the package in the workflow, for example http.get, render, unzip or write.',
+        },
+        schema: [],
+    },
+    create(context) {
+        const types = createCoreTypes(context);
+        function checkClass(node) {
+            if (node.type !== 'ClassDeclaration' && node.type !== 'ClassExpression')
+                return;
+            const superClass = node.superClass;
+            if (!superClass || !isFrameworkActivity(types, node, superClass))
+                return;
+            context.report({ node: superClass, messageId: 'extend' });
+        }
+        return {
+            NewExpression(node) {
+                if (!isFrameworkActivity(types, node, node))
+                    return;
+                context.report({ node, messageId: 'construct' });
+            },
+            ClassDeclaration: checkClass,
+            ClassExpression: checkClass,
+        };
+    },
+};
+//# sourceMappingURL=no-framework-activity-in-app.js.map

package/dist/eslint/rules/no-framework-activity-in-app.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"no-framework-activity-in-app.js","sourceRoot":"","sources":["../../../src/eslint/rules/no-framework-activity-in-app.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,eAAe,EAAkB,MAAM,uBAAuB,CAAA;AACvE,OAAO,EAAE,eAAe,EAAE,MAAM,2BAA2B,CAAA;AAE3D,SAAS,mBAAmB,CAC1B,KAAgB,EAChB,IAAe,EACf,WAAsB;IAEtB,IAAI,CAAC,KAAK,CAAC,iCAAiC,CAAC,WAAW,CAAC;QAAE,OAAO,KAAK,CAAA;IAEvE,OAAO,eAAe,CAAC,KAAK,EAAE,IAAI,CAAC,CAAA;AACrC,CAAC;AAED,MAAM,CAAC,MAAM,wBAAwB,GAAoB;IACvD,IAAI,EAAE;QACJ,IAAI,EAAE,SAAS;QACf,IAAI,EAAE;YACJ,WAAW,EACT,4FAA4F;SAC/F;QACD,QAAQ,EAAE;YACR,SAAS,EACP,uJAAuJ;YACzJ,MAAM,EACJ,oJAAoJ;SACvJ;QACD,MAAM,EAAE,EAAE;KACX;IACD,MAAM,CAAC,OAAO;QACZ,MAAM,KAAK,GAAG,eAAe,CAAC,OAAO,CAAC,CAAA;QAEtC,SAAS,UAAU,CAAC,IAAe;YACjC,IAAI,IAAI,CAAC,IAAI,KAAK,kBAAkB,IAAI,IAAI,CAAC,IAAI,KAAK,iBAAiB;gBACrE,OAAM;YAER,MAAM,UAAU,GAAG,IAAI,CAAC,UAA0C,CAAA;YAClE,IAAI,CAAC,UAAU,IAAI,CAAC,mBAAmB,CAAC,KAAK,EAAE,IAAI,EAAE,UAAU,CAAC;gBAAE,OAAM;YAExE,OAAO,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,SAAS,EAAE,QAAQ,EAAE,CAAC,CAAA;QAC3D,CAAC;QAED,OAAO;YACL,aAAa,CAAC,IAAI;gBAChB,IAAI,CAAC,mBAAmB,CAAC,KAAK,EAAE,IAAI,EAAE,IAAI,CAAC;oBAAE,OAAM;gBAEnD,OAAO,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,WAAW,EAAE,CAAC,CAAA;YAClD,CAAC;YACD,gBAAgB,EAAE,UAAU;YAC5B,eAAe,EAAE,UAAU;SAC5B,CAAA;IACH,CAAC;CACF,CAAA"}

package/dist/eslint/rules/no-io-in-workflow.d.ts

@@ -0,0 +1,3 @@
+import type { Rule } from 'eslint';
+export declare const noIoInWorkflow: Rule.RuleModule;
+//# sourceMappingURL=no-io-in-workflow.d.ts.map

package/dist/eslint/rules/no-io-in-workflow.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"no-io-in-workflow.d.ts","sourceRoot":"","sources":["../../../src/eslint/rules/no-io-in-workflow.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,IAAI,EAAS,MAAM,QAAQ,CAAA;AA+EzC,eAAO,MAAM,cAAc,EAAE,IAAI,CAAC,UAiCjC,CAAA"}

package/dist/eslint/rules/no-io-in-workflow.js

@@ -0,0 +1,92 @@
+import { resolveBinding } from '../tools/bindings.js';
+import { createCoreTypes } from '../tools/coreTypes.js';
+import { isInWorkflowFront } from '../tools/workflowSides.js';
+const NODE_IO_MODULES = [
+    'http',
+    'https',
+    'http2',
+    'net',
+    'tls',
+    'dgram',
+    'dns',
+    'fs',
+    'fs/promises',
+    'child_process',
+    'worker_threads',
+];
+const NODE_MEMORY_MODULES = ['zlib', 'stream', 'stream/promises'];
+const PACKAGE_IO_MODULES = [
+    'axios',
+    'undici',
+    'got',
+    'node-fetch',
+    'ky',
+    'pg',
+    'mysql',
+    'mysql2',
+    'knex',
+    'typeorm',
+    'sequelize',
+    'mongodb',
+    'mongoose',
+    'ioredis',
+    'redis',
+    'ssh2',
+    'ssh2-sftp-client',
+    'basic-ftp',
+    'nodemailer',
+];
+function withNodePrefix(names) {
+    return [...names, ...names.map(name => `node:${name}`)];
+}
+const MODULE_MESSAGES = new Map([
+    ...withNodePrefix(NODE_IO_MODULES).map(name => [name, 'io']),
+    ...PACKAGE_IO_MODULES.map(name => [name, 'io']),
+    ...withNodePrefix(NODE_MEMORY_MODULES).map(name => [name, 'memory']),
+]);
+function baseIdentifier(node) {
+    let current = node;
+    while (current.type === 'MemberExpression')
+        current = current.object;
+    return current.type === 'Identifier' ? current : undefined;
+}
+function messageIdOf(scope, callee) {
+    const base = baseIdentifier(callee);
+    if (!base)
+        return undefined;
+    const binding = resolveBinding(scope, base.name);
+    if (binding.kind === 'import')
+        return MODULE_MESSAGES.get(binding.source);
+    const isFetch = callee === base && base.name === 'fetch';
+    return binding.kind === 'global' && isFetch ? 'io' : undefined;
+}
+export const noIoInWorkflow = {
+    meta: {
+        type: 'problem',
+        docs: {
+            description: 'Disallows I/O and in-memory compression or streams in a workflow and in the constructor, toInput and toOutput of an activity',
+        },
+        messages: {
+            io: '{{label}} does I/O. The workflow and the constructor, toInput and toOutput of an activity run again on each replay. So the I/O runs again, and its result can change. Call a function of a framework package, such as @t4h.framework/http, orm, sftp, smtp, fs or zip. Or do the I/O in the run method of an activity.',
+            memory: '{{label}} works on the content in memory. The workflow and the constructor, toInput and toOutput of an activity run again on each replay. So a large buffer costs memory and time again on each replay. Do this work in an activity, or use @t4h.framework/zip or @t4h.framework/fs.',
+        },
+        schema: [],
+    },
+    create(context) {
+        const types = createCoreTypes(context);
+        function check(node) {
+            if (node.type !== 'CallExpression' && node.type !== 'NewExpression')
+                return;
+            const callee = node.callee;
+            const scope = context.sourceCode.getScope(node);
+            const messageId = messageIdOf(scope, callee);
+            if (!messageId || !isInWorkflowFront(types, node))
+                return;
+            const prefix = node.type === 'NewExpression' ? 'new ' : '';
+            const label = `${prefix}${context.sourceCode.getText(callee)}()`;
+            context.report({ node, messageId, data: { label } });
+        }
+        return { CallExpression: check, NewExpression: check };
+    },
+};
+//# sourceMappingURL=no-io-in-workflow.js.map

package/dist/eslint/rules/no-io-in-workflow.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"no-io-in-workflow.js","sourceRoot":"","sources":["../../../src/eslint/rules/no-io-in-workflow.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAA;AACrD,OAAO,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAA;AACvD,OAAO,EAAE,iBAAiB,EAAE,MAAM,2BAA2B,CAAA;AAE7D,MAAM,eAAe,GAAG;IACtB,MAAM;IACN,OAAO;IACP,OAAO;IACP,KAAK;IACL,KAAK;IACL,OAAO;IACP,KAAK;IACL,IAAI;IACJ,aAAa;IACb,eAAe;IACf,gBAAgB;CACjB,CAAA;AAED,MAAM,mBAAmB,GAAG,CAAC,MAAM,EAAE,QAAQ,EAAE,iBAAiB,CAAC,CAAA;AAIjE,MAAM,kBAAkB,GAAG;IACzB,OAAO;IACP,QAAQ;IACR,KAAK;IACL,YAAY;IACZ,IAAI;IACJ,IAAI;IACJ,OAAO;IACP,QAAQ;IACR,MAAM;IACN,SAAS;IACT,WAAW;IACX,SAAS;IACT,UAAU;IACV,SAAS;IACT,OAAO;IACP,MAAM;IACN,kBAAkB;IAClB,WAAW;IACX,YAAY;CACb,CAAA;AAED,SAAS,cAAc,CAAC,KAAwB;IAC9C,OAAO,CAAC,GAAG,KAAK,EAAE,GAAG,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC,CAAA;AACzD,CAAC;AAED,MAAM,eAAe,GAAG,IAAI,GAAG,CAAoB;IACjD,GAAG,cAAc,CAAC,eAAe,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,IAAI,EAAE,IAAI,CAAU,CAAC;IACrE,GAAG,kBAAkB,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,IAAI,EAAE,IAAI,CAAU,CAAC;IACxD,GAAG,cAAc,CAAC,mBAAmB,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,IAAI,EAAE,QAAQ,CAAU,CAAC;CAC9E,CAAC,CAAA;AAEF,SAAS,cAAc,CAAC,IAAe;IACrC,IAAI,OAAO,GAAG,IAAI,CAAA;IAClB,OAAO,OAAO,CAAC,IAAI,KAAK,kBAAkB;QACxC,OAAO,GAAG,OAAO,CAAC,MAAmB,CAAA;IAEvC,OAAO,OAAO,CAAC,IAAI,KAAK,YAAY,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAA;AAC5D,CAAC;AAED,SAAS,WAAW,CAClB,KAAkB,EAClB,MAAiB;IAEjB,MAAM,IAAI,GAAG,cAAc,CAAC,MAAM,CAAC,CAAA;IACnC,IAAI,CAAC,IAAI;QAAE,OAAO,SAAS,CAAA;IAE3B,MAAM,OAAO,GAAG,cAAc,CAAC,KAAK,EAAE,IAAI,CAAC,IAAI,CAAC,CAAA;IAChD,IAAI,OAAO,CAAC,IAAI,KAAK,QAAQ;QAAE,OAAO,eAAe,CAAC,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,CAAA;IAEzE,MAAM,OAAO,GAAG,MAAM,KAAK,IAAI,IAAI,IAAI,CAAC,IAAI,KAAK,OAAO,CAAA;IAExD,OAAO,OAAO,CAAC,IAAI,KAAK,QAAQ,IAAI,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAA;AAChE,CAAC;AAED,MAAM,CAAC,MAAM,cAAc,GAAoB;IAC7C,IAAI,EAAE;QACJ,IAAI,EAAE,SAAS;QACf,IAAI,EAAE;YACJ,WAAW,EACT,8HAA8H;SACjI;QACD,QAAQ,EAAE;YACR,EAAE,EAAE,wTAAwT;YAC5T,MAAM,EACJ,sRAAsR;SACzR;QACD,MAAM,EAAE,EAAE;KACX;IACD,MAAM,CAAC,OAAO;QACZ,MAAM,KAAK,GAAG,eAAe,CAAC,OAAO,CAAC,CAAA;QAEtC,SAAS,KAAK,CAAC,IAAe;YAC5B,IAAI,IAAI,CAAC,IAAI,KAAK,gBAAgB,IAAI,IAAI,CAAC,IAAI,KAAK,eAAe;gBACjE,OAAM;YAER,MAAM,MAAM,GAAG,IAAI,CAAC,MAAmB,CAAA;YACvC,MAAM,KAAK,GAAG,OAAO,CAAC,UAAU,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAA;YAC/C,MAAM,SAAS,GAAG,WAAW,CAAC,KAAK,EAAE,MAAM,CAAC,CAAA;YAC5C,IAAI,CAAC,SAAS,IAAI,CAAC,iBAAiB,CAAC,KAAK,EAAE,IAAI,CAAC;gBAAE,OAAM;YAEzD,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,KAAK,eAAe,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAA;YAC1D,MAAM,KAAK,GAAG,GAAG,MAAM,GAAG,OAAO,CAAC,UAAU,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAA;YAChE,OAAO,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,EAAE,CAAC,CAAA;QACtD,CAAC;QAED,OAAO,EAAE,cAAc,EAAE,KAAK,EAAE,aAAa,EAAE,KAAK,EAAE,CAAA;IACxD,CAAC;CACF,CAAA"}

package/dist/eslint/rules/no-literal-secret-in-authorization.d.ts

@@ -0,0 +1,3 @@
+import type { Rule } from 'eslint';
+export declare const noLiteralSecretInAuthorization: Rule.RuleModule;
+//# sourceMappingURL=no-literal-secret-in-authorization.d.ts.map

package/dist/eslint/rules/no-literal-secret-in-authorization.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"no-literal-secret-in-authorization.d.ts","sourceRoot":"","sources":["../../../src/eslint/rules/no-literal-secret-in-authorization.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,QAAQ,CAAA;AA6ClC,eAAO,MAAM,8BAA8B,EAAE,IAAI,CAAC,UA6BjD,CAAA"}

package/dist/eslint/rules/no-literal-secret-in-authorization.js

@@ -0,0 +1,56 @@
+import { createCoreTypes } from '../tools/coreTypes.js';
+const AUTHORIZATION_CLASSES = new Set(['Authorization']);
+const SECRET_KEYS = new Set(['secret', 'clientSecret']);
+function keyName(node) {
+    if (node.type === 'Identifier')
+        return node.name;
+    if (node.type === 'Literal' && typeof node.value === 'string')
+        return node.value;
+    return undefined;
+}
+function isLiteralString(node) {
+    if (node.type === 'Literal')
+        return typeof node.value === 'string';
+    return node.type === 'TemplateLiteral' && node.expressions.length === 0;
+}
+function toLiteralSecret(property) {
+    if (property.type !== 'Property' || property.computed)
+        return [];
+    const key = keyName(property.key);
+    const value = property.value;
+    if (!key || !SECRET_KEYS.has(key) || !isLiteralString(value))
+        return [];
+    return [{ key, value }];
+}
+function literalSecrets(argument) {
+    if (argument.type !== 'ObjectExpression')
+        return [];
+    return argument.properties.flatMap(property => toLiteralSecret(property));
+}
+export const noLiteralSecretInAuthorization = {
+    meta: {
+        type: 'problem',
+        docs: {
+            description: 'Disallows a literal secret in the options of an Authorization',
+        },
+        messages: {
+            literal: 'Do not write the value of {{key}} in code. A secret in code goes into the repository and into the manifest. Read the value from the env that EnvDesign creates in src/constants/environments.ts.',
+        },
+        schema: [],
+    },
+    create(context) {
+        const types = createCoreTypes(context);
+        return {
+            NewExpression(node) {
+                const secrets = node.arguments.flatMap(argument => literalSecrets(argument));
+                if (secrets.length === 0)
+                    return;
+                if (!types.extendsCoreClass(node, AUTHORIZATION_CLASSES))
+                    return;
+                for (const { key, value } of secrets)
+                    context.report({ node: value, messageId: 'literal', data: { key } });
+            },
+        };
+    },
+};
+//# sourceMappingURL=no-literal-secret-in-authorization.js.map

package/dist/eslint/rules/no-literal-secret-in-authorization.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"no-literal-secret-in-authorization.js","sourceRoot":"","sources":["../../../src/eslint/rules/no-literal-secret-in-authorization.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAA;AAEvD,MAAM,qBAAqB,GAAG,IAAI,GAAG,CAAC,CAAC,eAAe,CAAC,CAAC,CAAA;AAExD,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,CAAC,QAAQ,EAAE,cAAc,CAAC,CAAC,CAAA;AAEvD,SAAS,OAAO,CAAC,IAAe;IAC9B,IAAI,IAAI,CAAC,IAAI,KAAK,YAAY;QAAE,OAAO,IAAI,CAAC,IAAI,CAAA;IAChD,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS,IAAI,OAAO,IAAI,CAAC,KAAK,KAAK,QAAQ;QAC3D,OAAO,IAAI,CAAC,KAAK,CAAA;IAEnB,OAAO,SAAS,CAAA;AAClB,CAAC;AAED,SAAS,eAAe,CAAC,IAAe;IACtC,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS;QAAE,OAAO,OAAO,IAAI,CAAC,KAAK,KAAK,QAAQ,CAAA;IAElE,OAAO,IAAI,CAAC,IAAI,KAAK,iBAAiB,IAAI,IAAI,CAAC,WAAW,CAAC,MAAM,KAAK,CAAC,CAAA;AACzE,CAAC;AAOD,SAAS,eAAe,CAAC,QAAmB;IAC1C,IAAI,QAAQ,CAAC,IAAI,KAAK,UAAU,IAAI,QAAQ,CAAC,QAAQ;QAAE,OAAO,EAAE,CAAA;IAEhE,MAAM,GAAG,GAAG,OAAO,CAAC,QAAQ,CAAC,GAAgB,CAAC,CAAA;IAC9C,MAAM,KAAK,GAAG,QAAQ,CAAC,KAAkB,CAAA;IACzC,IAAI,CAAC,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,eAAe,CAAC,KAAK,CAAC;QAAE,OAAO,EAAE,CAAA;IAEvE,OAAO,CAAC,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC,CAAA;AACzB,CAAC;AAED,SAAS,cAAc,CAAC,QAAmB;IACzC,IAAI,QAAQ,CAAC,IAAI,KAAK,kBAAkB;QAAE,OAAO,EAAE,CAAA;IAEnD,OAAO,QAAQ,CAAC,UAAU,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAC5C,eAAe,CAAC,QAAqB,CAAC,CACvC,CAAA;AACH,CAAC;AAED,MAAM,CAAC,MAAM,8BAA8B,GAAoB;IAC7D,IAAI,EAAE;QACJ,IAAI,EAAE,SAAS;QACf,IAAI,EAAE;YACJ,WAAW,EACT,+DAA+D;SAClE;QACD,QAAQ,EAAE;YACR,OAAO,EACL,kMAAkM;SACrM;QACD,MAAM,EAAE,EAAE;KACX;IACD,MAAM,CAAC,OAAO;QACZ,MAAM,KAAK,GAAG,eAAe,CAAC,OAAO,CAAC,CAAA;QAEtC,OAAO;YACL,aAAa,CAAC,IAAI;gBAChB,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAChD,cAAc,CAAC,QAAqB,CAAC,CACtC,CAAA;gBACD,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;oBAAE,OAAM;gBAChC,IAAI,CAAC,KAAK,CAAC,gBAAgB,CAAC,IAAI,EAAE,qBAAqB,CAAC;oBAAE,OAAM;gBAEhE,KAAK,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,IAAI,OAAO;oBAClC,OAAO,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,SAAS,EAAE,SAAS,EAAE,IAAI,EAAE,EAAE,GAAG,EAAE,EAAE,CAAC,CAAA;YACxE,CAAC;SACF,CAAA;IACH,CAAC;CACF,CAAA"}

package/dist/eslint/rules/no-nondeterministic-in-workflow.d.ts

@@ -0,0 +1,3 @@
+import type { Rule } from 'eslint';
+export declare const noNondeterministicInWorkflow: Rule.RuleModule;
+//# sourceMappingURL=no-nondeterministic-in-workflow.d.ts.map

package/dist/eslint/rules/no-nondeterministic-in-workflow.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"no-nondeterministic-in-workflow.d.ts","sourceRoot":"","sources":["../../../src/eslint/rules/no-nondeterministic-in-workflow.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,IAAI,EAAS,MAAM,QAAQ,CAAA;AAwGzC,eAAO,MAAM,4BAA4B,EAAE,IAAI,CAAC,UA6B/C,CAAA"}