@t4h.framework/core 0.19.0 → 0.20.0

package/dist/eslint/index.js

@@ -0,0 +1,69 @@
+import { envFromEnvDesign } from './rules/env-from-env-design.js';
+import { noBinaryStreamOutsideActivity } from './rules/no-binary-stream-outside-activity.js';
+import { noBinarySubclass } from './rules/no-binary-subclass.js';
+import { noFrameworkActivityInApp } from './rules/no-framework-activity-in-app.js';
+import { noIoInWorkflow } from './rules/no-io-in-workflow.js';
+import { noLiteralSecretInAuthorization } from './rules/no-literal-secret-in-authorization.js';
+import { noNondeterministicInWorkflow } from './rules/no-nondeterministic-in-workflow.js';
+import { noSecretToString } from './rules/no-secret-to-string.js';
+import { noTestingImportInSource } from './rules/no-testing-import-in-source.js';
+import { requireWorkflowId } from './rules/require-workflow-id.js';
+const NAME = '@t4h.framework/core';
+const ALL_FILES = ['**/*.{js,mjs,cjs,jsx,ts,tsx,mts,cts}'];
+const TYPED_FILES = ['**/*.{ts,tsx,mts,cts}'];
+const SOURCE_FILES = ['src/**/*.{js,mjs,cjs,jsx,ts,tsx,mts,cts}'];
+const TEST_FILES = [
+    '**/__tests__/**',
+    '**/*.{spec,test}.{js,mjs,cjs,jsx,ts,tsx,mts,cts}',
+];
+const rules = {
+    'env-from-env-design': envFromEnvDesign,
+    'no-binary-stream-outside-activity': noBinaryStreamOutsideActivity,
+    'no-binary-subclass': noBinarySubclass,
+    'no-framework-activity-in-app': noFrameworkActivityInApp,
+    'no-io-in-workflow': noIoInWorkflow,
+    'no-literal-secret-in-authorization': noLiteralSecretInAuthorization,
+    'no-nondeterministic-in-workflow': noNondeterministicInWorkflow,
+    'no-secret-to-string': noSecretToString,
+    'no-testing-import-in-source': noTestingImportInSource,
+    'require-workflow-id': requireWorkflowId,
+};
+const plugin = { meta: { name: NAME }, rules };
+const recommended = [
+    { plugins: { [NAME]: plugin } },
+    {
+        files: TYPED_FILES,
+        rules: {
+            [`${NAME}/no-binary-stream-outside-activity`]: 'error',
+            [`${NAME}/no-io-in-workflow`]: 'error',
+            [`${NAME}/no-nondeterministic-in-workflow`]: 'error',
+            [`${NAME}/no-secret-to-string`]: 'error',
+            [`${NAME}/require-workflow-id`]: 'error',
+        },
+    },
+    {
+        files: TYPED_FILES,
+        ignores: TEST_FILES,
+        rules: {
+            [`${NAME}/no-binary-subclass`]: 'error',
+            [`${NAME}/no-framework-activity-in-app`]: 'error',
+            [`${NAME}/no-literal-secret-in-authorization`]: 'error',
+        },
+    },
+    {
+        files: ALL_FILES,
+        ignores: TEST_FILES,
+        rules: { [`${NAME}/no-testing-import-in-source`]: 'error' },
+    },
+    {
+        files: SOURCE_FILES,
+        rules: { [`${NAME}/env-from-env-design`]: 'error' },
+    },
+];
+const core = { ...plugin, configs: { recommended } };
+/**
+ * The ESLint plugin of `@t4h.framework/core`, with the rules for code that
+ * uses the core.
+ */
+export default core;
+//# sourceMappingURL=index.js.map

package/dist/eslint/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/eslint/index.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,gBAAgB,EAAE,MAAM,gCAAgC,CAAA;AACjE,OAAO,EAAE,6BAA6B,EAAE,MAAM,8CAA8C,CAAA;AAC5F,OAAO,EAAE,gBAAgB,EAAE,MAAM,+BAA+B,CAAA;AAChE,OAAO,EAAE,wBAAwB,EAAE,MAAM,yCAAyC,CAAA;AAClF,OAAO,EAAE,cAAc,EAAE,MAAM,8BAA8B,CAAA;AAC7D,OAAO,EAAE,8BAA8B,EAAE,MAAM,+CAA+C,CAAA;AAC9F,OAAO,EAAE,4BAA4B,EAAE,MAAM,4CAA4C,CAAA;AACzF,OAAO,EAAE,gBAAgB,EAAE,MAAM,gCAAgC,CAAA;AACjE,OAAO,EAAE,uBAAuB,EAAE,MAAM,wCAAwC,CAAA;AAChF,OAAO,EAAE,iBAAiB,EAAE,MAAM,gCAAgC,CAAA;AAElE,MAAM,IAAI,GAAG,qBAAqB,CAAA;AAElC,MAAM,SAAS,GAAG,CAAC,sCAAsC,CAAC,CAAA;AAE1D,MAAM,WAAW,GAAG,CAAC,uBAAuB,CAAC,CAAA;AAE7C,MAAM,YAAY,GAAG,CAAC,0CAA0C,CAAC,CAAA;AAEjE,MAAM,UAAU,GAAG;IACjB,iBAAiB;IACjB,kDAAkD;CACnD,CAAA;AAED,MAAM,KAAK,GAAG;IACZ,qBAAqB,EAAE,gBAAgB;IACvC,mCAAmC,EAAE,6BAA6B;IAClE,oBAAoB,EAAE,gBAAgB;IACtC,8BAA8B,EAAE,wBAAwB;IACxD,mBAAmB,EAAE,cAAc;IACnC,oCAAoC,EAAE,8BAA8B;IACpE,iCAAiC,EAAE,4BAA4B;IAC/D,qBAAqB,EAAE,gBAAgB;IACvC,6BAA6B,EAAE,uBAAuB;IACtD,qBAAqB,EAAE,iBAAiB;CACzC,CAAA;AAED,MAAM,MAAM,GAAkB,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,CAAA;AAE7D,MAAM,WAAW,GAAoB;IACnC,EAAE,OAAO,EAAE,EAAE,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,EAAE;IAC/B;QACE,KAAK,EAAE,WAAW;QAClB,KAAK,EAAE;YACL,CAAC,GAAG,IAAI,oCAAoC,CAAC,EAAE,OAAO;YACtD,CAAC,GAAG,IAAI,oBAAoB,CAAC,EAAE,OAAO;YACtC,CAAC,GAAG,IAAI,kCAAkC,CAAC,EAAE,OAAO;YACpD,CAAC,GAAG,IAAI,sBAAsB,CAAC,EAAE,OAAO;YACxC,CAAC,GAAG,IAAI,sBAAsB,CAAC,EAAE,OAAO;SACzC;KACF;IACD;QACE,KAAK,EAAE,WAAW;QAClB,OAAO,EAAE,UAAU;QACnB,KAAK,EAAE;YACL,CAAC,GAAG,IAAI,qBAAqB,CAAC,EAAE,OAAO;YACvC,CAAC,GAAG,IAAI,+BAA+B,CAAC,EAAE,OAAO;YACjD,CAAC,GAAG,IAAI,qCAAqC,CAAC,EAAE,OAAO;SACxD;KACF;IACD;QACE,KAAK,EAAE,SAAS;QAChB,OAAO,EAAE,UAAU;QACnB,KAAK,EAAE,EAAE,CAAC,GAAG,IAAI,8BAA8B,CAAC,EAAE,OAAO,EAAE;KAC5D;IACD;QACE,KAAK,EAAE,YAAY;QACnB,KAAK,EAAE,EAAE,CAAC,GAAG,IAAI,sBAAsB,CAAC,EAAE,OAAO,EAAE;KACpD;CACF,CAAA;AASD,MAAM,IAAI,GAA0B,EAAE,GAAG,MAAM,EAAE,OAAO,EAAE,EAAE,WAAW,EAAE,EAAE,CAAA;AAE3E;;;GAGG;AACH,eAAe,IAAI,CAAA"}

package/dist/eslint/rules/env-from-env-design.d.ts

@@ -0,0 +1,3 @@
+import type { Rule } from 'eslint';
+export declare const envFromEnvDesign: Rule.RuleModule;
+//# sourceMappingURL=env-from-env-design.d.ts.map

package/dist/eslint/rules/env-from-env-design.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"env-from-env-design.d.ts","sourceRoot":"","sources":["../../../src/eslint/rules/env-from-env-design.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,QAAQ,CAAA;AAyClC,eAAO,MAAM,gBAAgB,EAAE,IAAI,CAAC,UA+DnC,CAAA"}

package/dist/eslint/rules/env-from-env-design.js

@@ -0,0 +1,85 @@
+const CORE = '@t4h.framework/core';
+const PROCESS_MODULES = new Set(['process', 'node:process']);
+function messageIdOf(source) {
+    if (source === CORE)
+        return 'coreEnv';
+    if (PROCESS_MODULES.has(String(source)))
+        return 'processEnv';
+    return undefined;
+}
+function isEnvKey(node, computed) {
+    if (!computed)
+        return node.type === 'Identifier' && node.name === 'env';
+    return node.type === 'Literal' && node.value === 'env';
+}
+function identifierName(node) {
+    return node.type === 'Identifier' ? node.name : undefined;
+}
+function specifierName(specifier) {
+    if (specifier.type === 'ExportSpecifier')
+        return identifierName(specifier.local);
+    if (specifier.type === 'ImportSpecifier')
+        return identifierName(specifier.imported);
+    return undefined;
+}
+function isWholeModule(specifier) {
+    return (specifier.type === 'ImportNamespaceSpecifier' ||
+        specifier.type === 'ImportDefaultSpecifier');
+}
+export const envFromEnvDesign = {
+    meta: {
+        type: 'problem',
+        docs: {
+            description: 'Requires env to come from EnvDesign, not from @t4h.framework/core or process.env',
+        },
+        messages: {
+            coreEnv: 'Do not import env from @t4h.framework/core. Create env with EnvDesign and import it from that module.',
+            processEnv: 'Do not read process.env. Declare the variable with EnvDesign and read it from the env that EnvDesign creates.',
+        },
+        schema: [],
+    },
+    create(context) {
+        const modules = new Map([['process', 'processEnv']]);
+        function checkSpecifiers(specifiers, messageId) {
+            for (const specifier of specifiers) {
+                if (isWholeModule(specifier))
+                    modules.set(specifier.local.name, messageId);
+                if (specifierName(specifier) === 'env')
+                    context.report({ node: specifier, messageId });
+            }
+        }
+        return {
+            ImportDeclaration(node) {
+                const messageId = messageIdOf(node.source.value);
+                if (messageId)
+                    checkSpecifiers(node.specifiers, messageId);
+            },
+            ExportNamedDeclaration(node) {
+                const messageId = messageIdOf(node.source?.value);
+                if (messageId)
+                    checkSpecifiers(node.specifiers, messageId);
+            },
+            MemberExpression(node) {
+                if (node.object.type !== 'Identifier')
+                    return;
+                if (!isEnvKey(node.property, node.computed))
+                    return;
+                const messageId = modules.get(node.object.name);
+                if (messageId)
+                    context.report({ node, messageId });
+            },
+            VariableDeclarator(node) {
+                if (node.init?.type !== 'Identifier' ||
+                    node.id.type !== 'ObjectPattern')
+                    return;
+                if (modules.get(node.init.name) !== 'processEnv')
+                    return;
+                const readsEnv = node.id.properties.some(property => property.type === 'Property' &&
+                    isEnvKey(property.key, property.computed));
+                if (readsEnv)
+                    context.report({ node, messageId: 'processEnv' });
+            },
+        };
+    },
+};
+//# sourceMappingURL=env-from-env-design.js.map

package/dist/eslint/rules/env-from-env-design.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"env-from-env-design.js","sourceRoot":"","sources":["../../../src/eslint/rules/env-from-env-design.ts"],"names":[],"mappings":"AAIA,MAAM,IAAI,GAAG,qBAAqB,CAAA;AAElC,MAAM,eAAe,GAAG,IAAI,GAAG,CAAC,CAAC,SAAS,EAAE,cAAc,CAAC,CAAC,CAAA;AAE5D,SAAS,WAAW,CAAC,MAAe;IAClC,IAAI,MAAM,KAAK,IAAI;QAAE,OAAO,SAAS,CAAA;IACrC,IAAI,eAAe,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QAAE,OAAO,YAAY,CAAA;IAE5D,OAAO,SAAS,CAAA;AAClB,CAAC;AAED,SAAS,QAAQ,CAAC,IAAe,EAAE,QAAiB;IAClD,IAAI,CAAC,QAAQ;QAAE,OAAO,IAAI,CAAC,IAAI,KAAK,YAAY,IAAI,IAAI,CAAC,IAAI,KAAK,KAAK,CAAA;IAEvE,OAAO,IAAI,CAAC,IAAI,KAAK,SAAS,IAAI,IAAI,CAAC,KAAK,KAAK,KAAK,CAAA;AACxD,CAAC;AAED,SAAS,cAAc,CAAC,IAAe;IACrC,OAAO,IAAI,CAAC,IAAI,KAAK,YAAY,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAA;AAC3D,CAAC;AAED,SAAS,aAAa,CAAC,SAAoB;IACzC,IAAI,SAAS,CAAC,IAAI,KAAK,iBAAiB;QACtC,OAAO,cAAc,CAAC,SAAS,CAAC,KAAkB,CAAC,CAAA;IACrD,IAAI,SAAS,CAAC,IAAI,KAAK,iBAAiB;QACtC,OAAO,cAAc,CAAC,SAAS,CAAC,QAAqB,CAAC,CAAA;IAExD,OAAO,SAAS,CAAA;AAClB,CAAC;AAED,SAAS,aAAa,CAAC,SAAoB;IACzC,OAAO,CACL,SAAS,CAAC,IAAI,KAAK,0BAA0B;QAC7C,SAAS,CAAC,IAAI,KAAK,wBAAwB,CAC5C,CAAA;AACH,CAAC;AAED,MAAM,CAAC,MAAM,gBAAgB,GAAoB;IAC/C,IAAI,EAAE;QACJ,IAAI,EAAE,SAAS;QACf,IAAI,EAAE;YACJ,WAAW,EACT,kFAAkF;SACrF;QACD,QAAQ,EAAE;YACR,OAAO,EACL,uGAAuG;YACzG,UAAU,EACR,+GAA+G;SAClH;QACD,MAAM,EAAE,EAAE;KACX;IACD,MAAM,CAAC,OAAO;QACZ,MAAM,OAAO,GAAG,IAAI,GAAG,CAAoB,CAAC,CAAC,SAAS,EAAE,YAAY,CAAC,CAAC,CAAC,CAAA;QAEvE,SAAS,eAAe,CACtB,UAA8B,EAC9B,SAAoB;YAEpB,KAAK,MAAM,SAAS,IAAI,UAAyB,EAAE,CAAC;gBAClD,IAAI,aAAa,CAAC,SAAS,CAAC;oBAC1B,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,EAAE,SAAS,CAAC,CAAA;gBAC9C,IAAI,aAAa,CAAC,SAAS,CAAC,KAAK,KAAK;oBACpC,OAAO,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,SAAS,EAAE,CAAC,CAAA;YAClD,CAAC;QACH,CAAC;QAED,OAAO;YACL,iBAAiB,CAAC,IAAI;gBACpB,MAAM,SAAS,GAAG,WAAW,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;gBAChD,IAAI,SAAS;oBAAE,eAAe,CAAC,IAAI,CAAC,UAAU,EAAE,SAAS,CAAC,CAAA;YAC5D,CAAC;YACD,sBAAsB,CAAC,IAAI;gBACzB,MAAM,SAAS,GAAG,WAAW,CAAC,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC,CAAA;gBACjD,IAAI,SAAS;oBAAE,eAAe,CAAC,IAAI,CAAC,UAAU,EAAE,SAAS,CAAC,CAAA;YAC5D,CAAC;YACD,gBAAgB,CAAC,IAAI;gBACnB,IAAI,IAAI,CAAC,MAAM,CAAC,IAAI,KAAK,YAAY;oBAAE,OAAM;gBAC7C,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,QAAqB,EAAE,IAAI,CAAC,QAAQ,CAAC;oBAAE,OAAM;gBAEhE,MAAM,SAAS,GAAG,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAA;gBAC/C,IAAI,SAAS;oBAAE,OAAO,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CAAA;YACpD,CAAC;YACD,kBAAkB,CAAC,IAAI;gBACrB,IACE,IAAI,CAAC,IAAI,EAAE,IAAI,KAAK,YAAY;oBAChC,IAAI,CAAC,EAAE,CAAC,IAAI,KAAK,eAAe;oBAEhC,OAAM;gBACR,IAAI,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,YAAY;oBAAE,OAAM;gBAExD,MAAM,QAAQ,GAAG,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,IAAI,CACtC,QAAQ,CAAC,EAAE,CACT,QAAQ,CAAC,IAAI,KAAK,UAAU;oBAC5B,QAAQ,CAAC,QAAQ,CAAC,GAAgB,EAAE,QAAQ,CAAC,QAAQ,CAAC,CACzD,CAAA;gBACD,IAAI,QAAQ;oBAAE,OAAO,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,YAAY,EAAE,CAAC,CAAA;YACjE,CAAC;SACF,CAAA;IACH,CAAC;CACF,CAAA"}

package/dist/eslint/rules/no-binary-stream-outside-activity.d.ts

@@ -0,0 +1,3 @@
+import type { Rule } from 'eslint';
+export declare const noBinaryStreamOutsideActivity: Rule.RuleModule;
+//# sourceMappingURL=no-binary-stream-outside-activity.d.ts.map

package/dist/eslint/rules/no-binary-stream-outside-activity.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"no-binary-stream-outside-activity.d.ts","sourceRoot":"","sources":["../../../src/eslint/rules/no-binary-stream-outside-activity.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,QAAQ,CAAA;AA+BlC,eAAO,MAAM,6BAA6B,EAAE,IAAI,CAAC,UA8BhD,CAAA"}

package/dist/eslint/rules/no-binary-stream-outside-activity.js

@@ -0,0 +1,51 @@
+import { createCoreTypes } from '../tools/coreTypes.js';
+import { findClassMember, isActivityClass, isFrontMethodName, } from '../tools/workflowSides.js';
+const BINARY_CLASSES = new Set(['Binary']);
+function isBackMethod(types, member) {
+    if (isFrontMethodName(member.name))
+        return false;
+    return isActivityClass(types, member.classNode);
+}
+function isBinaryStreamMethod(types, member) {
+    if (member.name !== 'stream')
+        return false;
+    return types.extendsCoreClass(member.classNode, BINARY_CLASSES);
+}
+function isAllowedPlace(types, node) {
+    const member = findClassMember(node);
+    if (!member)
+        return false;
+    return isBackMethod(types, member) || isBinaryStreamMethod(types, member);
+}
+export const noBinaryStreamOutsideActivity = {
+    meta: {
+        type: 'problem',
+        docs: {
+            description: 'Allows Binary.stream() only in the methods of an activity, other than toInput and toOutput',
+        },
+        messages: {
+            stream: 'Call stream() of a Binary only in a method of an activity, such as run, bootstrap or advance. The workflow, toInput and toOutput run again on each replay, so they must not read the content of a Binary. A function out of the activity class must not read it either. Give the Binary to an activity.',
+        },
+        schema: [],
+    },
+    create(context) {
+        const types = createCoreTypes(context);
+        return {
+            CallExpression(node) {
+                const { callee } = node;
+                if (callee.type !== 'MemberExpression' || callee.computed)
+                    return;
+                if (callee.property.type !== 'Identifier')
+                    return;
+                if (callee.property.name !== 'stream')
+                    return;
+                if (!types.extendsCoreClass(callee.object, BINARY_CLASSES))
+                    return;
+                if (isAllowedPlace(types, node))
+                    return;
+                context.report({ node, messageId: 'stream' });
+            },
+        };
+    },
+};
+//# sourceMappingURL=no-binary-stream-outside-activity.js.map

package/dist/eslint/rules/no-binary-stream-outside-activity.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"no-binary-stream-outside-activity.js","sourceRoot":"","sources":["../../../src/eslint/rules/no-binary-stream-outside-activity.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,eAAe,EAAkB,MAAM,uBAAuB,CAAA;AACvE,OAAO,EACL,eAAe,EACf,eAAe,EACf,iBAAiB,GAElB,MAAM,2BAA2B,CAAA;AAElC,MAAM,cAAc,GAAG,IAAI,GAAG,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAA;AAE1C,SAAS,YAAY,CAAC,KAAgB,EAAE,MAAmB;IACzD,IAAI,iBAAiB,CAAC,MAAM,CAAC,IAAI,CAAC;QAAE,OAAO,KAAK,CAAA;IAEhD,OAAO,eAAe,CAAC,KAAK,EAAE,MAAM,CAAC,SAAS,CAAC,CAAA;AACjD,CAAC;AAED,SAAS,oBAAoB,CAAC,KAAgB,EAAE,MAAmB;IACjE,IAAI,MAAM,CAAC,IAAI,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAA;IAE1C,OAAO,KAAK,CAAC,gBAAgB,CAAC,MAAM,CAAC,SAAS,EAAE,cAAc,CAAC,CAAA;AACjE,CAAC;AAED,SAAS,cAAc,CAAC,KAAgB,EAAE,IAAe;IACvD,MAAM,MAAM,GAAG,eAAe,CAAC,IAAI,CAAC,CAAA;IACpC,IAAI,CAAC,MAAM;QAAE,OAAO,KAAK,CAAA;IAEzB,OAAO,YAAY,CAAC,KAAK,EAAE,MAAM,CAAC,IAAI,oBAAoB,CAAC,KAAK,EAAE,MAAM,CAAC,CAAA;AAC3E,CAAC;AAED,MAAM,CAAC,MAAM,6BAA6B,GAAoB;IAC5D,IAAI,EAAE;QACJ,IAAI,EAAE,SAAS;QACf,IAAI,EAAE;YACJ,WAAW,EACT,4FAA4F;SAC/F;QACD,QAAQ,EAAE;YACR,MAAM,EACJ,ySAAyS;SAC5S;QACD,MAAM,EAAE,EAAE;KACX;IACD,MAAM,CAAC,OAAO;QACZ,MAAM,KAAK,GAAG,eAAe,CAAC,OAAO,CAAC,CAAA;QAEtC,OAAO;YACL,cAAc,CAAC,IAAI;gBACjB,MAAM,EAAE,MAAM,EAAE,GAAG,IAAI,CAAA;gBACvB,IAAI,MAAM,CAAC,IAAI,KAAK,kBAAkB,IAAI,MAAM,CAAC,QAAQ;oBAAE,OAAM;gBACjE,IAAI,MAAM,CAAC,QAAQ,CAAC,IAAI,KAAK,YAAY;oBAAE,OAAM;gBACjD,IAAI,MAAM,CAAC,QAAQ,CAAC,IAAI,KAAK,QAAQ;oBAAE,OAAM;gBAC7C,IAAI,CAAC,KAAK,CAAC,gBAAgB,CAAC,MAAM,CAAC,MAAmB,EAAE,cAAc,CAAC;oBACrE,OAAM;gBACR,IAAI,cAAc,CAAC,KAAK,EAAE,IAAI,CAAC;oBAAE,OAAM;gBAEvC,OAAO,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,QAAQ,EAAE,CAAC,CAAA;YAC/C,CAAC;SACF,CAAA;IACH,CAAC;CACF,CAAA"}

package/dist/eslint/rules/no-binary-subclass.d.ts

@@ -0,0 +1,3 @@
+import type { Rule } from 'eslint';
+export declare const noBinarySubclass: Rule.RuleModule;
+//# sourceMappingURL=no-binary-subclass.d.ts.map

package/dist/eslint/rules/no-binary-subclass.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"no-binary-subclass.d.ts","sourceRoot":"","sources":["../../../src/eslint/rules/no-binary-subclass.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,QAAQ,CAAA;AAUlC,eAAO,MAAM,gBAAgB,EAAE,IAAI,CAAC,UA0BnC,CAAA"}

package/dist/eslint/rules/no-binary-subclass.js

@@ -0,0 +1,31 @@
+import { createCoreTypes } from '../tools/coreTypes.js';
+const BINARY_CLASSES = new Set(['Binary']);
+function isAmbient(node) {
+    return node.declare === true;
+}
+export const noBinarySubclass = {
+    meta: {
+        type: 'problem',
+        docs: {
+            description: 'Disallows a class that extends Binary in app code',
+        },
+        messages: {
+            subclass: 'Do not extend Binary. A Binary that app code makes fails in dev and in the runtime, because only the framework can read and store its content. Use write from @t4h.framework/fs to turn a string or a Buffer into a Binary.',
+        },
+        schema: [],
+    },
+    create(context) {
+        const types = createCoreTypes(context);
+        function check(node) {
+            if (node.type !== 'ClassDeclaration' && node.type !== 'ClassExpression')
+                return;
+            if (!node.superClass || isAmbient(node))
+                return;
+            if (!types.extendsCoreClass(node, BINARY_CLASSES))
+                return;
+            context.report({ node, messageId: 'subclass' });
+        }
+        return { ClassDeclaration: check, ClassExpression: check };
+    },
+};
+//# sourceMappingURL=no-binary-subclass.js.map

package/dist/eslint/rules/no-binary-subclass.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"no-binary-subclass.js","sourceRoot":"","sources":["../../../src/eslint/rules/no-binary-subclass.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAA;AAEvD,MAAM,cAAc,GAAG,IAAI,GAAG,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAA;AAE1C,SAAS,SAAS,CAAC,IAAe;IAChC,OAAQ,IAA8B,CAAC,OAAO,KAAK,IAAI,CAAA;AACzD,CAAC;AAED,MAAM,CAAC,MAAM,gBAAgB,GAAoB;IAC/C,IAAI,EAAE;QACJ,IAAI,EAAE,SAAS;QACf,IAAI,EAAE;YACJ,WAAW,EAAE,mDAAmD;SACjE;QACD,QAAQ,EAAE;YACR,QAAQ,EACN,6NAA6N;SAChO;QACD,MAAM,EAAE,EAAE;KACX;IACD,MAAM,CAAC,OAAO;QACZ,MAAM,KAAK,GAAG,eAAe,CAAC,OAAO,CAAC,CAAA;QAEtC,SAAS,KAAK,CAAC,IAAe;YAC5B,IAAI,IAAI,CAAC,IAAI,KAAK,kBAAkB,IAAI,IAAI,CAAC,IAAI,KAAK,iBAAiB;gBACrE,OAAM;YACR,IAAI,CAAC,IAAI,CAAC,UAAU,IAAI,SAAS,CAAC,IAAI,CAAC;gBAAE,OAAM;YAC/C,IAAI,CAAC,KAAK,CAAC,gBAAgB,CAAC,IAAI,EAAE,cAAc,CAAC;gBAAE,OAAM;YAEzD,OAAO,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,UAAU,EAAE,CAAC,CAAA;QACjD,CAAC;QAED,OAAO,EAAE,gBAAgB,EAAE,KAAK,EAAE,eAAe,EAAE,KAAK,EAAE,CAAA;IAC5D,CAAC;CACF,CAAA"}

package/dist/eslint/rules/no-framework-activity-in-app.d.ts

@@ -0,0 +1,3 @@
+import type { Rule } from 'eslint';
+export declare const noFrameworkActivityInApp: Rule.RuleModule;
+//# sourceMappingURL=no-framework-activity-in-app.d.ts.map

package/dist/eslint/rules/no-framework-activity-in-app.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"no-framework-activity-in-app.d.ts","sourceRoot":"","sources":["../../../src/eslint/rules/no-framework-activity-in-app.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,QAAQ,CAAA;AAelC,eAAO,MAAM,wBAAwB,EAAE,IAAI,CAAC,UAsC3C,CAAA"}

package/dist/eslint/rules/no-framework-activity-in-app.js

@@ -0,0 +1,41 @@
+import { createCoreTypes } from '../tools/coreTypes.js';
+import { isActivityClass } from '../tools/workflowSides.js';
+function isFrameworkActivity(types, node, declaration) {
+    if (!types.isDeclaredInOtherFrameworkPackage(declaration))
+        return false;
+    return isActivityClass(types, node);
+}
+export const noFrameworkActivityInApp = {
+    meta: {
+        type: 'problem',
+        docs: {
+            description: 'Disallows constructing or extending an activity of a framework package other than the core',
+        },
+        messages: {
+            construct: 'Do not construct the activity of a framework package. Call the function of the package in the workflow, for example http.get, render, unzip or write.',
+            extend: 'Do not extend the activity of a framework package. Call the function of the package in the workflow, for example http.get, render, unzip or write.',
+        },
+        schema: [],
+    },
+    create(context) {
+        const types = createCoreTypes(context);
+        function checkClass(node) {
+            if (node.type !== 'ClassDeclaration' && node.type !== 'ClassExpression')
+                return;
+            const superClass = node.superClass;
+            if (!superClass || !isFrameworkActivity(types, node, superClass))
+                return;
+            context.report({ node: superClass, messageId: 'extend' });
+        }
+        return {
+            NewExpression(node) {
+                if (!isFrameworkActivity(types, node, node))
+                    return;
+                context.report({ node, messageId: 'construct' });
+            },
+            ClassDeclaration: checkClass,
+            ClassExpression: checkClass,
+        };
+    },
+};
+//# sourceMappingURL=no-framework-activity-in-app.js.map

package/dist/eslint/rules/no-framework-activity-in-app.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"no-framework-activity-in-app.js","sourceRoot":"","sources":["../../../src/eslint/rules/no-framework-activity-in-app.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,eAAe,EAAkB,MAAM,uBAAuB,CAAA;AACvE,OAAO,EAAE,eAAe,EAAE,MAAM,2BAA2B,CAAA;AAE3D,SAAS,mBAAmB,CAC1B,KAAgB,EAChB,IAAe,EACf,WAAsB;IAEtB,IAAI,CAAC,KAAK,CAAC,iCAAiC,CAAC,WAAW,CAAC;QAAE,OAAO,KAAK,CAAA;IAEvE,OAAO,eAAe,CAAC,KAAK,EAAE,IAAI,CAAC,CAAA;AACrC,CAAC;AAED,MAAM,CAAC,MAAM,wBAAwB,GAAoB;IACvD,IAAI,EAAE;QACJ,IAAI,EAAE,SAAS;QACf,IAAI,EAAE;YACJ,WAAW,EACT,4FAA4F;SAC/F;QACD,QAAQ,EAAE;YACR,SAAS,EACP,uJAAuJ;YACzJ,MAAM,EACJ,oJAAoJ;SACvJ;QACD,MAAM,EAAE,EAAE;KACX;IACD,MAAM,CAAC,OAAO;QACZ,MAAM,KAAK,GAAG,eAAe,CAAC,OAAO,CAAC,CAAA;QAEtC,SAAS,UAAU,CAAC,IAAe;YACjC,IAAI,IAAI,CAAC,IAAI,KAAK,kBAAkB,IAAI,IAAI,CAAC,IAAI,KAAK,iBAAiB;gBACrE,OAAM;YAER,MAAM,UAAU,GAAG,IAAI,CAAC,UAA0C,CAAA;YAClE,IAAI,CAAC,UAAU,IAAI,CAAC,mBAAmB,CAAC,KAAK,EAAE,IAAI,EAAE,UAAU,CAAC;gBAAE,OAAM;YAExE,OAAO,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,SAAS,EAAE,QAAQ,EAAE,CAAC,CAAA;QAC3D,CAAC;QAED,OAAO;YACL,aAAa,CAAC,IAAI;gBAChB,IAAI,CAAC,mBAAmB,CAAC,KAAK,EAAE,IAAI,EAAE,IAAI,CAAC;oBAAE,OAAM;gBAEnD,OAAO,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,WAAW,EAAE,CAAC,CAAA;YAClD,CAAC;YACD,gBAAgB,EAAE,UAAU;YAC5B,eAAe,EAAE,UAAU;SAC5B,CAAA;IACH,CAAC;CACF,CAAA"}

package/dist/eslint/rules/no-io-in-workflow.d.ts

@@ -0,0 +1,3 @@
+import type { Rule } from 'eslint';
+export declare const noIoInWorkflow: Rule.RuleModule;
+//# sourceMappingURL=no-io-in-workflow.d.ts.map

package/dist/eslint/rules/no-io-in-workflow.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"no-io-in-workflow.d.ts","sourceRoot":"","sources":["../../../src/eslint/rules/no-io-in-workflow.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,IAAI,EAAS,MAAM,QAAQ,CAAA;AA+EzC,eAAO,MAAM,cAAc,EAAE,IAAI,CAAC,UAiCjC,CAAA"}

package/dist/eslint/rules/no-io-in-workflow.js

@@ -0,0 +1,92 @@
+import { resolveBinding } from '../tools/bindings.js';
+import { createCoreTypes } from '../tools/coreTypes.js';
+import { isInWorkflowFront } from '../tools/workflowSides.js';
+const NODE_IO_MODULES = [
+    'http',
+    'https',
+    'http2',
+    'net',
+    'tls',
+    'dgram',
+    'dns',
+    'fs',
+    'fs/promises',
+    'child_process',
+    'worker_threads',
+];
+const NODE_MEMORY_MODULES = ['zlib', 'stream', 'stream/promises'];
+const PACKAGE_IO_MODULES = [
+    'axios',
+    'undici',
+    'got',
+    'node-fetch',
+    'ky',
+    'pg',
+    'mysql',
+    'mysql2',
+    'knex',
+    'typeorm',
+    'sequelize',
+    'mongodb',
+    'mongoose',
+    'ioredis',
+    'redis',
+    'ssh2',
+    'ssh2-sftp-client',
+    'basic-ftp',
+    'nodemailer',
+];
+function withNodePrefix(names) {
+    return [...names, ...names.map(name => `node:${name}`)];
+}
+const MODULE_MESSAGES = new Map([
+    ...withNodePrefix(NODE_IO_MODULES).map(name => [name, 'io']),
+    ...PACKAGE_IO_MODULES.map(name => [name, 'io']),
+    ...withNodePrefix(NODE_MEMORY_MODULES).map(name => [name, 'memory']),
+]);
+function baseIdentifier(node) {
+    let current = node;
+    while (current.type === 'MemberExpression')
+        current = current.object;
+    return current.type === 'Identifier' ? current : undefined;
+}
+function messageIdOf(scope, callee) {
+    const base = baseIdentifier(callee);
+    if (!base)
+        return undefined;
+    const binding = resolveBinding(scope, base.name);
+    if (binding.kind === 'import')
+        return MODULE_MESSAGES.get(binding.source);
+    const isFetch = callee === base && base.name === 'fetch';
+    return binding.kind === 'global' && isFetch ? 'io' : undefined;
+}
+export const noIoInWorkflow = {
+    meta: {
+        type: 'problem',
+        docs: {
+            description: 'Disallows I/O and in-memory compression or streams in a workflow and in the constructor, toInput and toOutput of an activity',
+        },
+        messages: {
+            io: '{{label}} does I/O. The workflow and the constructor, toInput and toOutput of an activity run again on each replay. So the I/O runs again, and its result can change. Call a function of a framework package, such as @t4h.framework/http, orm, sftp, smtp, fs or zip. Or do the I/O in the run method of an activity.',
+            memory: '{{label}} works on the content in memory. The workflow and the constructor, toInput and toOutput of an activity run again on each replay. So a large buffer costs memory and time again on each replay. Do this work in an activity, or use @t4h.framework/zip or @t4h.framework/fs.',
+        },
+        schema: [],
+    },
+    create(context) {
+        const types = createCoreTypes(context);
+        function check(node) {
+            if (node.type !== 'CallExpression' && node.type !== 'NewExpression')
+                return;
+            const callee = node.callee;
+            const scope = context.sourceCode.getScope(node);
+            const messageId = messageIdOf(scope, callee);
+            if (!messageId || !isInWorkflowFront(types, node))
+                return;
+            const prefix = node.type === 'NewExpression' ? 'new ' : '';
+            const label = `${prefix}${context.sourceCode.getText(callee)}()`;
+            context.report({ node, messageId, data: { label } });
+        }
+        return { CallExpression: check, NewExpression: check };
+    },
+};
+//# sourceMappingURL=no-io-in-workflow.js.map

package/dist/eslint/rules/no-io-in-workflow.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"no-io-in-workflow.js","sourceRoot":"","sources":["../../../src/eslint/rules/no-io-in-workflow.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAA;AACrD,OAAO,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAA;AACvD,OAAO,EAAE,iBAAiB,EAAE,MAAM,2BAA2B,CAAA;AAE7D,MAAM,eAAe,GAAG;IACtB,MAAM;IACN,OAAO;IACP,OAAO;IACP,KAAK;IACL,KAAK;IACL,OAAO;IACP,KAAK;IACL,IAAI;IACJ,aAAa;IACb,eAAe;IACf,gBAAgB;CACjB,CAAA;AAED,MAAM,mBAAmB,GAAG,CAAC,MAAM,EAAE,QAAQ,EAAE,iBAAiB,CAAC,CAAA;AAIjE,MAAM,kBAAkB,GAAG;IACzB,OAAO;IACP,QAAQ;IACR,KAAK;IACL,YAAY;IACZ,IAAI;IACJ,IAAI;IACJ,OAAO;IACP,QAAQ;IACR,MAAM;IACN,SAAS;IACT,WAAW;IACX,SAAS;IACT,UAAU;IACV,SAAS;IACT,OAAO;IACP,MAAM;IACN,kBAAkB;IAClB,WAAW;IACX,YAAY;CACb,CAAA;AAED,SAAS,cAAc,CAAC,KAAwB;IAC9C,OAAO,CAAC,GAAG,KAAK,EAAE,GAAG,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC,CAAA;AACzD,CAAC;AAED,MAAM,eAAe,GAAG,IAAI,GAAG,CAAoB;IACjD,GAAG,cAAc,CAAC,eAAe,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,IAAI,EAAE,IAAI,CAAU,CAAC;IACrE,GAAG,kBAAkB,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,IAAI,EAAE,IAAI,CAAU,CAAC;IACxD,GAAG,cAAc,CAAC,mBAAmB,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,IAAI,EAAE,QAAQ,CAAU,CAAC;CAC9E,CAAC,CAAA;AAEF,SAAS,cAAc,CAAC,IAAe;IACrC,IAAI,OAAO,GAAG,IAAI,CAAA;IAClB,OAAO,OAAO,CAAC,IAAI,KAAK,kBAAkB;QACxC,OAAO,GAAG,OAAO,CAAC,MAAmB,CAAA;IAEvC,OAAO,OAAO,CAAC,IAAI,KAAK,YAAY,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAA;AAC5D,CAAC;AAED,SAAS,WAAW,CAClB,KAAkB,EAClB,MAAiB;IAEjB,MAAM,IAAI,GAAG,cAAc,CAAC,MAAM,CAAC,CAAA;IACnC,IAAI,CAAC,IAAI;QAAE,OAAO,SAAS,CAAA;IAE3B,MAAM,OAAO,GAAG,cAAc,CAAC,KAAK,EAAE,IAAI,CAAC,IAAI,CAAC,CAAA;IAChD,IAAI,OAAO,CAAC,IAAI,KAAK,QAAQ;QAAE,OAAO,eAAe,CAAC,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,CAAA;IAEzE,MAAM,OAAO,GAAG,MAAM,KAAK,IAAI,IAAI,IAAI,CAAC,IAAI,KAAK,OAAO,CAAA;IAExD,OAAO,OAAO,CAAC,IAAI,KAAK,QAAQ,IAAI,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAA;AAChE,CAAC;AAED,MAAM,CAAC,MAAM,cAAc,GAAoB;IAC7C,IAAI,EAAE;QACJ,IAAI,EAAE,SAAS;QACf,IAAI,EAAE;YACJ,WAAW,EACT,8HAA8H;SACjI;QACD,QAAQ,EAAE;YACR,EAAE,EAAE,wTAAwT;YAC5T,MAAM,EACJ,sRAAsR;SACzR;QACD,MAAM,EAAE,EAAE;KACX;IACD,MAAM,CAAC,OAAO;QACZ,MAAM,KAAK,GAAG,eAAe,CAAC,OAAO,CAAC,CAAA;QAEtC,SAAS,KAAK,CAAC,IAAe;YAC5B,IAAI,IAAI,CAAC,IAAI,KAAK,gBAAgB,IAAI,IAAI,CAAC,IAAI,KAAK,eAAe;gBACjE,OAAM;YAER,MAAM,MAAM,GAAG,IAAI,CAAC,MAAmB,CAAA;YACvC,MAAM,KAAK,GAAG,OAAO,CAAC,UAAU,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAA;YAC/C,MAAM,SAAS,GAAG,WAAW,CAAC,KAAK,EAAE,MAAM,CAAC,CAAA;YAC5C,IAAI,CAAC,SAAS,IAAI,CAAC,iBAAiB,CAAC,KAAK,EAAE,IAAI,CAAC;gBAAE,OAAM;YAEzD,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,KAAK,eAAe,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAA;YAC1D,MAAM,KAAK,GAAG,GAAG,MAAM,GAAG,OAAO,CAAC,UAAU,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAA;YAChE,OAAO,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,EAAE,CAAC,CAAA;QACtD,CAAC;QAED,OAAO,EAAE,cAAc,EAAE,KAAK,EAAE,aAAa,EAAE,KAAK,EAAE,CAAA;IACxD,CAAC;CACF,CAAA"}

package/dist/eslint/rules/no-literal-secret-in-authorization.d.ts

@@ -0,0 +1,3 @@
+import type { Rule } from 'eslint';
+export declare const noLiteralSecretInAuthorization: Rule.RuleModule;
+//# sourceMappingURL=no-literal-secret-in-authorization.d.ts.map

package/dist/eslint/rules/no-literal-secret-in-authorization.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"no-literal-secret-in-authorization.d.ts","sourceRoot":"","sources":["../../../src/eslint/rules/no-literal-secret-in-authorization.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,QAAQ,CAAA;AA6ClC,eAAO,MAAM,8BAA8B,EAAE,IAAI,CAAC,UA6BjD,CAAA"}

package/dist/eslint/rules/no-literal-secret-in-authorization.js

@@ -0,0 +1,56 @@
+import { createCoreTypes } from '../tools/coreTypes.js';
+const AUTHORIZATION_CLASSES = new Set(['Authorization']);
+const SECRET_KEYS = new Set(['secret', 'clientSecret']);
+function keyName(node) {
+    if (node.type === 'Identifier')
+        return node.name;
+    if (node.type === 'Literal' && typeof node.value === 'string')
+        return node.value;
+    return undefined;
+}
+function isLiteralString(node) {
+    if (node.type === 'Literal')
+        return typeof node.value === 'string';
+    return node.type === 'TemplateLiteral' && node.expressions.length === 0;
+}
+function toLiteralSecret(property) {
+    if (property.type !== 'Property' || property.computed)
+        return [];
+    const key = keyName(property.key);
+    const value = property.value;
+    if (!key || !SECRET_KEYS.has(key) || !isLiteralString(value))
+        return [];
+    return [{ key, value }];
+}
+function literalSecrets(argument) {
+    if (argument.type !== 'ObjectExpression')
+        return [];
+    return argument.properties.flatMap(property => toLiteralSecret(property));
+}
+export const noLiteralSecretInAuthorization = {
+    meta: {
+        type: 'problem',
+        docs: {
+            description: 'Disallows a literal secret in the options of an Authorization',
+        },
+        messages: {
+            literal: 'Do not write the value of {{key}} in code. A secret in code goes into the repository and into the manifest. Read the value from the env that EnvDesign creates in src/constants/environments.ts.',
+        },
+        schema: [],
+    },
+    create(context) {
+        const types = createCoreTypes(context);
+        return {
+            NewExpression(node) {
+                const secrets = node.arguments.flatMap(argument => literalSecrets(argument));
+                if (secrets.length === 0)
+                    return;
+                if (!types.extendsCoreClass(node, AUTHORIZATION_CLASSES))
+                    return;
+                for (const { key, value } of secrets)
+                    context.report({ node: value, messageId: 'literal', data: { key } });
+            },
+        };
+    },
+};
+//# sourceMappingURL=no-literal-secret-in-authorization.js.map

package/dist/eslint/rules/no-literal-secret-in-authorization.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"no-literal-secret-in-authorization.js","sourceRoot":"","sources":["../../../src/eslint/rules/no-literal-secret-in-authorization.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAA;AAEvD,MAAM,qBAAqB,GAAG,IAAI,GAAG,CAAC,CAAC,eAAe,CAAC,CAAC,CAAA;AAExD,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,CAAC,QAAQ,EAAE,cAAc,CAAC,CAAC,CAAA;AAEvD,SAAS,OAAO,CAAC,IAAe;IAC9B,IAAI,IAAI,CAAC,IAAI,KAAK,YAAY;QAAE,OAAO,IAAI,CAAC,IAAI,CAAA;IAChD,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS,IAAI,OAAO,IAAI,CAAC,KAAK,KAAK,QAAQ;QAC3D,OAAO,IAAI,CAAC,KAAK,CAAA;IAEnB,OAAO,SAAS,CAAA;AAClB,CAAC;AAED,SAAS,eAAe,CAAC,IAAe;IACtC,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS;QAAE,OAAO,OAAO,IAAI,CAAC,KAAK,KAAK,QAAQ,CAAA;IAElE,OAAO,IAAI,CAAC,IAAI,KAAK,iBAAiB,IAAI,IAAI,CAAC,WAAW,CAAC,MAAM,KAAK,CAAC,CAAA;AACzE,CAAC;AAOD,SAAS,eAAe,CAAC,QAAmB;IAC1C,IAAI,QAAQ,CAAC,IAAI,KAAK,UAAU,IAAI,QAAQ,CAAC,QAAQ;QAAE,OAAO,EAAE,CAAA;IAEhE,MAAM,GAAG,GAAG,OAAO,CAAC,QAAQ,CAAC,GAAgB,CAAC,CAAA;IAC9C,MAAM,KAAK,GAAG,QAAQ,CAAC,KAAkB,CAAA;IACzC,IAAI,CAAC,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,eAAe,CAAC,KAAK,CAAC;QAAE,OAAO,EAAE,CAAA;IAEvE,OAAO,CAAC,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC,CAAA;AACzB,CAAC;AAED,SAAS,cAAc,CAAC,QAAmB;IACzC,IAAI,QAAQ,CAAC,IAAI,KAAK,kBAAkB;QAAE,OAAO,EAAE,CAAA;IAEnD,OAAO,QAAQ,CAAC,UAAU,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAC5C,eAAe,CAAC,QAAqB,CAAC,CACvC,CAAA;AACH,CAAC;AAED,MAAM,CAAC,MAAM,8BAA8B,GAAoB;IAC7D,IAAI,EAAE;QACJ,IAAI,EAAE,SAAS;QACf,IAAI,EAAE;YACJ,WAAW,EACT,+DAA+D;SAClE;QACD,QAAQ,EAAE;YACR,OAAO,EACL,kMAAkM;SACrM;QACD,MAAM,EAAE,EAAE;KACX;IACD,MAAM,CAAC,OAAO;QACZ,MAAM,KAAK,GAAG,eAAe,CAAC,OAAO,CAAC,CAAA;QAEtC,OAAO;YACL,aAAa,CAAC,IAAI;gBAChB,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAChD,cAAc,CAAC,QAAqB,CAAC,CACtC,CAAA;gBACD,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;oBAAE,OAAM;gBAChC,IAAI,CAAC,KAAK,CAAC,gBAAgB,CAAC,IAAI,EAAE,qBAAqB,CAAC;oBAAE,OAAM;gBAEhE,KAAK,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,IAAI,OAAO;oBAClC,OAAO,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,SAAS,EAAE,SAAS,EAAE,IAAI,EAAE,EAAE,GAAG,EAAE,EAAE,CAAC,CAAA;YACxE,CAAC;SACF,CAAA;IACH,CAAC;CACF,CAAA"}

package/dist/eslint/rules/no-nondeterministic-in-workflow.d.ts

@@ -0,0 +1,3 @@
+import type { Rule } from 'eslint';
+export declare const noNondeterministicInWorkflow: Rule.RuleModule;
+//# sourceMappingURL=no-nondeterministic-in-workflow.d.ts.map

package/dist/eslint/rules/no-nondeterministic-in-workflow.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"no-nondeterministic-in-workflow.d.ts","sourceRoot":"","sources":["../../../src/eslint/rules/no-nondeterministic-in-workflow.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,IAAI,EAAS,MAAM,QAAQ,CAAA;AAwGzC,eAAO,MAAM,4BAA4B,EAAE,IAAI,CAAC,UA6B/C,CAAA"}

package/dist/eslint/rules/no-nondeterministic-in-workflow.js

@@ -0,0 +1,102 @@
+import { resolveBinding } from '../tools/bindings.js';
+import { createCoreTypes } from '../tools/coreTypes.js';
+import { isInWorkflowFront } from '../tools/workflowSides.js';
+const CRYPTO_METHODS = new Set([
+    'randomUUID',
+    'getRandomValues',
+    'randomBytes',
+    'randomInt',
+]);
+const NONDETERMINISTIC_CALLS = {
+    Date: new Set(['now']),
+    Math: new Set(['random']),
+    crypto: CRYPTO_METHODS,
+    performance: new Set(['now']),
+};
+const CRYPTO_MODULES = new Set(['crypto', 'node:crypto']);
+const PERF_HOOKS_MODULES = new Set(['perf_hooks', 'node:perf_hooks']);
+function importOwner(source, imported) {
+    if (CRYPTO_MODULES.has(source) &&
+        (imported === 'default' || imported === '*'))
+        return 'crypto';
+    if (PERF_HOOKS_MODULES.has(source) && imported === 'performance')
+        return 'performance';
+    return undefined;
+}
+function ownerOf(binding, name) {
+    if (binding.kind === 'global')
+        return name;
+    if (binding.kind === 'import')
+        return importOwner(binding.source, binding.imported);
+    return undefined;
+}
+function describeMemberCall(scope, node) {
+    if (node.type !== 'CallExpression')
+        return undefined;
+    const { callee } = node;
+    if (callee.type !== 'MemberExpression' || callee.computed)
+        return undefined;
+    if (callee.object.type !== 'Identifier')
+        return undefined;
+    if (callee.property.type !== 'Identifier')
+        return undefined;
+    const { name } = callee.object;
+    const method = callee.property.name;
+    const owner = ownerOf(resolveBinding(scope, name), name);
+    if (!owner || !NONDETERMINISTIC_CALLS[owner]?.has(method))
+        return undefined;
+    return { label: `${owner}.${method}()` };
+}
+function describeImportedCall(scope, node) {
+    if (node.type !== 'CallExpression' || node.callee.type !== 'Identifier')
+        return undefined;
+    const binding = resolveBinding(scope, node.callee.name);
+    if (binding.kind !== 'import' || !CRYPTO_MODULES.has(binding.source))
+        return undefined;
+    if (!CRYPTO_METHODS.has(binding.imported))
+        return undefined;
+    return { label: `${binding.imported}()` };
+}
+function describeCurrentDate(scope, node) {
+    if (node.type !== 'CallExpression' && node.type !== 'NewExpression')
+        return undefined;
+    if (node.callee.type !== 'Identifier' || node.callee.name !== 'Date')
+        return undefined;
+    if (node.arguments.length > 0)
+        return undefined;
+    if (resolveBinding(scope, 'Date').kind !== 'global')
+        return undefined;
+    return { label: node.type === 'NewExpression' ? 'new Date()' : 'Date()' };
+}
+function describeCall(scope, node) {
+    return (describeMemberCall(scope, node) ??
+        describeImportedCall(scope, node) ??
+        describeCurrentDate(scope, node));
+}
+export const noNondeterministicInWorkflow = {
+    meta: {
+        type: 'problem',
+        docs: {
+            description: 'Disallows the clock and random values in a workflow and in the constructor, toInput and toOutput of an activity',
+        },
+        messages: {
+            nondeterministic: '{{label}} gives a different value on each run. The workflow and the constructor, toInput and toOutput of an activity run again on each replay, so the result changes. Get the value in the run, bootstrap or advance method of an activity.',
+        },
+        schema: [],
+    },
+    create(context) {
+        const types = createCoreTypes(context);
+        function check(node) {
+            const call = describeCall(context.sourceCode.getScope(node), node);
+            if (!call || !isInWorkflowFront(types, node))
+                return;
+            context.report({
+                node,
+                messageId: 'nondeterministic',
+                data: { label: call.label },
+            });
+        }
+        return { CallExpression: check, NewExpression: check };
+    },
+};
+//# sourceMappingURL=no-nondeterministic-in-workflow.js.map