@utilix-tech/sdk 0.18.0 → 0.19.0

package/CHANGELOG.md

@@ -2,6 +2,9 @@
 
 Full release notes for all Utilix surfaces (browser tools, REST API, SDKs, MCP server) live at [utilix.tech/changelog](https://utilix.tech/changelog). This file tracks just this package.
 
+## 0.19.0
+- Add `detectRedos` (regex-redos-detector): statically flag catastrophic-backtracking risk (nested quantifiers, overlapping alternation, adjacent overlapping quantifiers).
+
 ## 0.18.0
 - Added Present Value / Future Value Calculator (`calculateTimeValue`) and Vector Similarity Calculator (`vectorSimilarity`).
 

package/README.md

@@ -389,7 +389,8 @@ generateCspHeader({ "default-src": ["'self'"], "script-src": ["'self'", "cdn.exa
 
 ```ts
 import { formatSql, minifySql, testRegex, formatHtml, formatGql,
-         detectDialect, splitStatements, lookupMime, parseGithubUrl } from "@utilix-tech/sdk/code";
+         detectDialect, splitStatements, lookupMime, parseGithubUrl,
+         detectRedos } from "@utilix-tech/sdk/code";
 
 // SQL
 formatSql("SELECT id,name FROM users WHERE active=1 ORDER BY name");
@@ -421,6 +422,10 @@ lookupMime("image/jpeg");  // { kind: "mime", matches: [{ extension: "jpg", ...
 // GitHub URL parsing
 parseGithubUrl("https://github.com/facebook/react/pull/1234");
 // { owner: "facebook", repo: "react", type: "pull", number: 1234 }
+
+// Regex ReDoS (catastrophic-backtracking) detection
+detectRedos("(a+)+");
+// { risk: "high", safe: false, findings: [{ type: "nested-quantifier", ... }] }
 ```
 
 ---

package/dist/{chunk-L53LAVAD.js → chunk-LXKIPPDG.js}

@@ -18,6 +18,7 @@ __export(code_exports, {
   countRules: () => countRules,
   detectDialect: () => detectDialect,
   detectOperationType: () => detectOperationType,
+  detectRedos: () => detectRedos,
   envToExport: () => envToExport,
   envToJson: () => envToJson,
   formatCss: () => formatCss,
@@ -2475,5 +2476,269 @@ function parseGithubUrl(input) {
   }
   return { error: `Unsupported GitHub URL path: /${rest.join("/")}` };
 }
+var _REDOS_UNBOUNDED = /* @__PURE__ */ new Set(["*", "+"]);
+function _redosParseQuant(src, i) {
+  const ch = src[i];
+  if (ch === "*" || ch === "+" || ch === "?") {
+    let end = i + 1;
+    if (src[end] === "?" || src[end] === "+") end++;
+    return { unbounded: _REDOS_UNBOUNDED.has(ch), raw: src.slice(i, end), end };
+  }
+  if (ch === "{") {
+    const close = src.indexOf("}", i);
+    if (close === -1) return null;
+    const inner = src.slice(i + 1, close);
+    if (!/^\d+(,\d*)?$/.test(inner)) return null;
+    let end = close + 1;
+    if (src[end] === "?" || src[end] === "+") end++;
+    const unbounded = /^\d+,$/.test(inner);
+    return { unbounded, raw: src.slice(i, end), end };
+  }
+  return null;
+}
+function _redosParseAlternation(src, start, endExclusive) {
+  const alternatives = [];
+  let current = [];
+  let i = start;
+  while (i < endExclusive) {
+    const ch = src[i];
+    if (ch === "|") {
+      alternatives.push(current);
+      current = [];
+      i++;
+      continue;
+    }
+    let node;
+    if (ch === "\\") {
+      const atomEnd = i + 2 <= endExclusive ? i + 2 : i + 1;
+      node = { kind: "char", start: i, end: atomEnd, quant: null, quantEnd: atomEnd, raw: src.slice(i, atomEnd) };
+      i = atomEnd;
+    } else if (ch === "[") {
+      let j = i + 1;
+      if (src[j] === "^") j++;
+      if (src[j] === "]") j++;
+      while (j < endExclusive && src[j] !== "]") {
+        j += src[j] === "\\" ? 2 : 1;
+      }
+      const classEnd = j < endExclusive ? j + 1 : endExclusive;
+      node = { kind: "class", start: i, end: classEnd, quant: null, quantEnd: classEnd, raw: src.slice(i, classEnd) };
+      i = classEnd;
+    } else if (ch === "(") {
+      let depth = 1;
+      let j = i + 1;
+      while (j < endExclusive && depth > 0) {
+        const cj = src[j];
+        if (cj === "\\") {
+          j += 2;
+          continue;
+        }
+        if (cj === "[") {
+          j++;
+          if (src[j] === "^") j++;
+          if (src[j] === "]") j++;
+          while (j < endExclusive && src[j] !== "]") {
+            j += src[j] === "\\" ? 2 : 1;
+          }
+          j++;
+          continue;
+        }
+        if (cj === "(") depth++;
+        else if (cj === ")") depth--;
+        j++;
+      }
+      const closeIdx = depth === 0 ? j - 1 : endExclusive;
+      let contentStart = i + 1;
+      let lookaround = false;
+      if (src[i + 1] === "?") {
+        const after = src[i + 2];
+        if (after === ":") contentStart = i + 3;
+        else if (after === "=" || after === "!") {
+          contentStart = i + 3;
+          lookaround = true;
+        } else if (after === "<") {
+          const a3 = src[i + 3];
+          if (a3 === "=" || a3 === "!") {
+            contentStart = i + 4;
+            lookaround = true;
+          } else {
+            const gt = src.indexOf(">", i + 2);
+            contentStart = gt !== -1 && gt < closeIdx ? gt + 1 : i + 3;
+          }
+        }
+      }
+      node = {
+        kind: "group",
+        start: i,
+        end: closeIdx + 1,
+        quant: null,
+        quantEnd: closeIdx + 1,
+        raw: src.slice(i, closeIdx + 1),
+        alternatives: _redosParseAlternation(src, contentStart, closeIdx),
+        lookaround
+      };
+      i = closeIdx + 1;
+    } else if (ch === ".") {
+      node = { kind: "dot", start: i, end: i + 1, quant: null, quantEnd: i + 1, raw: "." };
+      i++;
+    } else if (ch === "^" || ch === "$") {
+      node = { kind: "anchor", start: i, end: i + 1, quant: null, quantEnd: i + 1, raw: ch };
+      i++;
+    } else {
+      node = { kind: "char", start: i, end: i + 1, quant: null, quantEnd: i + 1, raw: ch };
+      i++;
+    }
+    if (node.kind !== "anchor") {
+      const q = _redosParseQuant(src, i);
+      if (q) {
+        node.quant = q;
+        node.quantEnd = q.end;
+        i = q.end;
+      }
+    }
+    current.push(node);
+  }
+  alternatives.push(current);
+  return alternatives;
+}
+var _REDOS_ALPHABET = "abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789_ 	.,-@/:;#%&=";
+function _redosFirstMatcher(node) {
+  if (node.kind === "dot") return (c) => c !== "\n";
+  if (node.kind === "char") {
+    if (node.raw.startsWith("\\")) {
+      const body = node.raw.slice(1);
+      if (/^[dDwWsS]$/.test(body)) {
+        try {
+          const re = new RegExp("\\" + body);
+          return (c) => re.test(c);
+        } catch {
+          return null;
+        }
+      }
+      const literal = { n: "\n", t: "	", r: "\r", f: "\f", v: "\v" }[body] ?? body;
+      return (c) => c === literal;
+    }
+    const lit = node.raw;
+    return (c) => c === lit;
+  }
+  if (node.kind === "class") {
+    try {
+      const re = new RegExp(node.raw);
+      return (c) => re.test(c);
+    } catch {
+      return null;
+    }
+  }
+  if (node.kind === "group") {
+    const first = node.alternatives?.[0]?.[0];
+    return first ? _redosFirstMatcher(first) : null;
+  }
+  return null;
+}
+function _redosOverlaps(a, b) {
+  const fa = _redosFirstMatcher(a);
+  const fb = _redosFirstMatcher(b);
+  if (!fa || !fb) return false;
+  for (const c of _REDOS_ALPHABET) {
+    if (fa(c) && fb(c)) return true;
+  }
+  return false;
+}
+function _redosAnalyzeGroup(node, findings) {
+  const alts = node.alternatives ?? [];
+  const outerUnbounded = node.quant?.unbounded === true && !node.lookaround;
+  if (outerUnbounded) {
+    for (const alt of alts) {
+      const meaningful = alt.filter((n) => n.kind !== "anchor");
+      if (meaningful.length === 1 && meaningful[0].quant?.unbounded) {
+        findings.push({
+          type: "nested-quantifier",
+          severity: "high",
+          message: "Nested unbounded quantifiers: a repeated group whose body is itself unbounded-repeated can match the same input in exponentially many ways, causing catastrophic backtracking.",
+          snippet: node.raw + (node.quant?.raw ?? ""),
+          index: node.start
+        });
+        break;
+      }
+    }
+    if (alts.length > 1) {
+      const firsts = alts.map((alt) => alt.find((n) => n.kind !== "anchor")).filter((n) => !!n);
+      let flagged = false;
+      for (let x = 0; x < firsts.length && !flagged; x++) {
+        for (let y = x + 1; y < firsts.length; y++) {
+          if (_redosOverlaps(firsts[x], firsts[y])) {
+            findings.push({
+              type: "overlapping-alternation",
+              severity: "medium",
+              message: "Overlapping alternation under a repetition: two branches can match the same starting input, so the engine has multiple ways to split each repeat and may backtrack heavily.",
+              snippet: node.raw + (node.quant?.raw ?? ""),
+              index: node.start
+            });
+            flagged = true;
+            break;
+          }
+        }
+      }
+    }
+  }
+  for (const alt of alts) {
+    _redosAnalyzeSequence(alt, findings);
+  }
+}
+function _redosAnalyzeSequence(seq, findings) {
+  for (let k = 0; k + 1 < seq.length; k++) {
+    const a = seq[k];
+    const b = seq[k + 1];
+    if (a.quant?.unbounded && b.quant?.unbounded && _redosOverlaps(a, b)) {
+      findings.push({
+        type: "adjacent-quantifier",
+        severity: "medium",
+        message: "Adjacent unbounded quantifiers over overlapping characters: the engine can distribute the same input between them in many ways, causing quadratic backtracking.",
+        snippet: seq[k].raw + (a.quant?.raw ?? "") + seq[k + 1].raw + (b.quant?.raw ?? ""),
+        index: a.start
+      });
+    }
+  }
+  for (const node of seq) {
+    if (node.kind === "group") _redosAnalyzeGroup(node, findings);
+  }
+}
+function detectRedos(pattern) {
+  if (typeof pattern !== "string" || pattern === "") {
+    return { error: "Empty pattern" };
+  }
+  if (pattern.length > 5e3) {
+    return { error: "Pattern too long (max 5,000 chars)" };
+  }
+  let valid = true;
+  let compileError;
+  try {
+    new RegExp(pattern);
+  } catch (e) {
+    valid = false;
+    compileError = e instanceof Error ? e.message : String(e);
+  }
+  const findings = [];
+  const alternatives = _redosParseAlternation(pattern, 0, pattern.length);
+  for (const alt of alternatives) {
+    _redosAnalyzeSequence(alt, findings);
+  }
+  const seen = /* @__PURE__ */ new Set();
+  const unique = findings.filter((f) => {
+    const key = `${f.type}:${f.index}`;
+    if (seen.has(key)) return false;
+    seen.add(key);
+    return true;
+  });
+  unique.sort((a, b) => a.index - b.index);
+  const risk = unique.some((f) => f.severity === "high") ? "high" : unique.length > 0 ? "medium" : "none";
+  return {
+    pattern,
+    valid,
+    ...compileError ? { compileError } : {},
+    risk,
+    safe: unique.length === 0,
+    findings: unique
+  };
+}
 
-export { ALL_FLAGS, CHEATSHEET, MIME_TABLE, OPERATIONS, SQL_DEFAULT_OPTIONS, buildDockerPull, buildDockerRun, buildGitCommand, code_exports, collapseHtmlWhitespace, collapseJsWhitespace, countProperties, countRules, detectDialect, detectOperationType, envToExport, envToJson, formatCss, formatGql, formatHtml, formatSql, getEndpointsByTag, getHtmlStats, getJsStats, getMethodColor, isValidTag, lookupMime, minifyCss, minifyGql, minifyHtml, minifyJs, minifySql, normalizeRef, parseDockerImage, parseEnv, parseGitCommand, parseGithubUrl, parseSpec, removeConsoleCalls, removeEmptyAttributes, removeHtmlComments, removeJsComments, removeRedundantAttributes, searchCheatsheet, searchEndpoints, splitStatements, testPattern, testRegex, validateEnvKey };
+export { ALL_FLAGS, CHEATSHEET, MIME_TABLE, OPERATIONS, SQL_DEFAULT_OPTIONS, buildDockerPull, buildDockerRun, buildGitCommand, code_exports, collapseHtmlWhitespace, collapseJsWhitespace, countProperties, countRules, detectDialect, detectOperationType, detectRedos, envToExport, envToJson, formatCss, formatGql, formatHtml, formatSql, getEndpointsByTag, getHtmlStats, getJsStats, getMethodColor, isValidTag, lookupMime, minifyCss, minifyGql, minifyHtml, minifyJs, minifySql, normalizeRef, parseDockerImage, parseEnv, parseGitCommand, parseGithubUrl, parseSpec, removeConsoleCalls, removeEmptyAttributes, removeHtmlComments, removeJsComments, removeRedundantAttributes, searchCheatsheet, searchEndpoints, splitStatements, testPattern, testRegex, validateEnvKey };

package/dist/{code-Cn9uOIAh.d.cts → code-DaRvff2v.d.cts}

@@ -19,6 +19,7 @@
  *   - css-minifier     (minifyCss, formatCss, countRules, countProperties)
  *   - mime-lookup      (lookupMime, MIME_TABLE)
  *   - github-url-parser (parseGithubUrl)
+ *   - redos-detector   (detectRedos)
  */
 type RegexFlag = 'g' | 'i' | 'm' | 's' | 'u';
 declare const ALL_FLAGS: RegexFlag[];
@@ -307,6 +308,32 @@ interface GithubUrlInfo {
 declare function parseGithubUrl(input: string): GithubUrlInfo | {
     error: string;
 };
+type RedosSeverity = 'high' | 'medium';
+interface RedosFinding {
+    type: 'nested-quantifier' | 'overlapping-alternation' | 'adjacent-quantifier';
+    severity: RedosSeverity;
+    message: string;
+    snippet: string;
+    index: number;
+}
+interface RedosResult {
+    pattern: string;
+    valid: boolean;
+    compileError?: string;
+    risk: 'none' | 'medium' | 'high';
+    safe: boolean;
+    findings: RedosFinding[];
+}
+/**
+ * Statically analyze a regex pattern for catastrophic-backtracking (ReDoS)
+ * risk. Pass the pattern body only (no delimiters or flags). This is a
+ * heuristic linter focused on the classic exponential/quadratic constructs
+ * (nested quantifiers, overlapping alternation under a repeat, adjacent
+ * overlapping quantifiers), not a formal guarantee.
+ */
+declare function detectRedos(pattern: string): RedosResult | {
+    error: string;
+};
 
 declare const code_ALL_FLAGS: typeof ALL_FLAGS;
 type code_ApiEndpoint = ApiEndpoint;
@@ -334,6 +361,9 @@ type code_MimeEntry = MimeEntry;
 type code_MimeLookupResult = MimeLookupResult;
 declare const code_OPERATIONS: typeof OPERATIONS;
 type code_ParsedSpec = ParsedSpec;
+type code_RedosFinding = RedosFinding;
+type code_RedosResult = RedosResult;
+type code_RedosSeverity = RedosSeverity;
 type code_RegexError = RegexError;
 type code_RegexFlag = RegexFlag;
 type code_RegexMatch = RegexMatch;
@@ -354,6 +384,7 @@ declare const code_countProperties: typeof countProperties;
 declare const code_countRules: typeof countRules;
 declare const code_detectDialect: typeof detectDialect;
 declare const code_detectOperationType: typeof detectOperationType;
+declare const code_detectRedos: typeof detectRedos;
 declare const code_envToExport: typeof envToExport;
 declare const code_envToJson: typeof envToJson;
 declare const code_formatCss: typeof formatCss;
@@ -389,7 +420,7 @@ declare const code_testPattern: typeof testPattern;
 declare const code_testRegex: typeof testRegex;
 declare const code_validateEnvKey: typeof validateEnvKey;
 declare namespace code {
-  export { code_ALL_FLAGS as ALL_FLAGS, type code_ApiEndpoint as ApiEndpoint, type code_ApiInfo as ApiInfo, code_CHEATSHEET as CHEATSHEET, type code_CheatsheetEntry as CheatsheetEntry, type code_CssResult as CssResult, type code_DockerImageRef as DockerImageRef, type code_EnvEntry as EnvEntry, type code_EnvParseResult as EnvParseResult, type code_GitCommandConfig as GitCommandConfig, type code_GitCommandResult as GitCommandResult, type code_GitOperation as GitOperation, type code_GithubUrlInfo as GithubUrlInfo, type code_GithubUrlType as GithubUrlType, type code_GqlFormatResult as GqlFormatResult, type code_HtmlFormatResult as HtmlFormatResult, type code_HtmlMinifyOptions as HtmlMinifyOptions, type code_HtmlMinifyResult as HtmlMinifyResult, type code_JsMinifyOptions as JsMinifyOptions, type code_JsMinifyResult as JsMinifyResult, code_MIME_TABLE as MIME_TABLE, type code_MatchResult as MatchResult, type code_MimeEntry as MimeEntry, type code_MimeLookupResult as MimeLookupResult, code_OPERATIONS as OPERATIONS, type code_ParsedSpec as ParsedSpec, type code_RegexError as RegexError, type code_RegexFlag as RegexFlag, type code_RegexMatch as RegexMatch, type code_RegexResult as RegexResult, type code_RegexSuccess as RegexSuccess, code_SQL_DEFAULT_OPTIONS as SQL_DEFAULT_OPTIONS, type code_Segment as Segment, type code_SpecVersion as SpecVersion, type code_SqlDialect as SqlDialect, type code_SqlFormatOptions as SqlFormatOptions, type code_TestPatternResult as TestPatternResult, code_buildDockerPull as buildDockerPull, code_buildDockerRun as buildDockerRun, code_buildGitCommand as buildGitCommand, code_collapseHtmlWhitespace as collapseHtmlWhitespace, code_collapseJsWhitespace as collapseJsWhitespace, code_countProperties as countProperties, code_countRules as countRules, code_detectDialect as detectDialect, code_detectOperationType as detectOperationType, code_envToExport as envToExport, code_envToJson as envToJson, code_formatCss as formatCss, code_formatGql as formatGql, code_formatHtml as formatHtml, code_formatSql as formatSql, code_getEndpointsByTag as getEndpointsByTag, code_getHtmlStats as getHtmlStats, code_getJsStats as getJsStats, code_getMethodColor as getMethodColor, code_isValidTag as isValidTag, code_lookupMime as lookupMime, code_minifyCss as minifyCss, code_minifyGql as minifyGql, code_minifyHtml as minifyHtml, code_minifyJs as minifyJs, code_minifySql as minifySql, code_normalizeRef as normalizeRef, code_parseDockerImage as parseDockerImage, code_parseEnv as parseEnv, code_parseGitCommand as parseGitCommand, code_parseGithubUrl as parseGithubUrl, code_parseSpec as parseSpec, code_removeConsoleCalls as removeConsoleCalls, code_removeEmptyAttributes as removeEmptyAttributes, code_removeHtmlComments as removeHtmlComments, code_removeJsComments as removeJsComments, code_removeRedundantAttributes as removeRedundantAttributes, code_searchCheatsheet as searchCheatsheet, code_searchEndpoints as searchEndpoints, code_splitStatements as splitStatements, code_testPattern as testPattern, code_testRegex as testRegex, code_validateEnvKey as validateEnvKey };
+  export { code_ALL_FLAGS as ALL_FLAGS, type code_ApiEndpoint as ApiEndpoint, type code_ApiInfo as ApiInfo, code_CHEATSHEET as CHEATSHEET, type code_CheatsheetEntry as CheatsheetEntry, type code_CssResult as CssResult, type code_DockerImageRef as DockerImageRef, type code_EnvEntry as EnvEntry, type code_EnvParseResult as EnvParseResult, type code_GitCommandConfig as GitCommandConfig, type code_GitCommandResult as GitCommandResult, type code_GitOperation as GitOperation, type code_GithubUrlInfo as GithubUrlInfo, type code_GithubUrlType as GithubUrlType, type code_GqlFormatResult as GqlFormatResult, type code_HtmlFormatResult as HtmlFormatResult, type code_HtmlMinifyOptions as HtmlMinifyOptions, type code_HtmlMinifyResult as HtmlMinifyResult, type code_JsMinifyOptions as JsMinifyOptions, type code_JsMinifyResult as JsMinifyResult, code_MIME_TABLE as MIME_TABLE, type code_MatchResult as MatchResult, type code_MimeEntry as MimeEntry, type code_MimeLookupResult as MimeLookupResult, code_OPERATIONS as OPERATIONS, type code_ParsedSpec as ParsedSpec, type code_RedosFinding as RedosFinding, type code_RedosResult as RedosResult, type code_RedosSeverity as RedosSeverity, type code_RegexError as RegexError, type code_RegexFlag as RegexFlag, type code_RegexMatch as RegexMatch, type code_RegexResult as RegexResult, type code_RegexSuccess as RegexSuccess, code_SQL_DEFAULT_OPTIONS as SQL_DEFAULT_OPTIONS, type code_Segment as Segment, type code_SpecVersion as SpecVersion, type code_SqlDialect as SqlDialect, type code_SqlFormatOptions as SqlFormatOptions, type code_TestPatternResult as TestPatternResult, code_buildDockerPull as buildDockerPull, code_buildDockerRun as buildDockerRun, code_buildGitCommand as buildGitCommand, code_collapseHtmlWhitespace as collapseHtmlWhitespace, code_collapseJsWhitespace as collapseJsWhitespace, code_countProperties as countProperties, code_countRules as countRules, code_detectDialect as detectDialect, code_detectOperationType as detectOperationType, code_detectRedos as detectRedos, code_envToExport as envToExport, code_envToJson as envToJson, code_formatCss as formatCss, code_formatGql as formatGql, code_formatHtml as formatHtml, code_formatSql as formatSql, code_getEndpointsByTag as getEndpointsByTag, code_getHtmlStats as getHtmlStats, code_getJsStats as getJsStats, code_getMethodColor as getMethodColor, code_isValidTag as isValidTag, code_lookupMime as lookupMime, code_minifyCss as minifyCss, code_minifyGql as minifyGql, code_minifyHtml as minifyHtml, code_minifyJs as minifyJs, code_minifySql as minifySql, code_normalizeRef as normalizeRef, code_parseDockerImage as parseDockerImage, code_parseEnv as parseEnv, code_parseGitCommand as parseGitCommand, code_parseGithubUrl as parseGithubUrl, code_parseSpec as parseSpec, code_removeConsoleCalls as removeConsoleCalls, code_removeEmptyAttributes as removeEmptyAttributes, code_removeHtmlComments as removeHtmlComments, code_removeJsComments as removeJsComments, code_removeRedundantAttributes as removeRedundantAttributes, code_searchCheatsheet as searchCheatsheet, code_searchEndpoints as searchEndpoints, code_splitStatements as splitStatements, code_testPattern as testPattern, code_testRegex as testRegex, code_validateEnvKey as validateEnvKey };
 }
 
-export { getEndpointsByTag as $, ALL_FLAGS as A, buildDockerRun as B, CHEATSHEET as C, type DockerImageRef as D, type EnvEntry as E, buildGitCommand as F, type GitCommandConfig as G, type HtmlFormatResult as H, collapseHtmlWhitespace as I, type JsMinifyOptions as J, collapseJsWhitespace as K, countProperties as L, MIME_TABLE as M, countRules as N, OPERATIONS as O, type ParsedSpec as P, detectDialect as Q, type RegexError as R, SQL_DEFAULT_OPTIONS as S, type TestPatternResult as T, detectOperationType as U, envToExport as V, envToJson as W, formatCss as X, formatGql as Y, formatHtml as Z, formatSql as _, type ApiEndpoint as a, getHtmlStats as a0, getJsStats as a1, getMethodColor as a2, isValidTag as a3, lookupMime as a4, minifyCss as a5, minifyGql as a6, minifyHtml as a7, minifyJs as a8, minifySql as a9, normalizeRef as aa, parseDockerImage as ab, parseEnv as ac, parseGitCommand as ad, parseGithubUrl as ae, parseSpec as af, removeConsoleCalls as ag, removeEmptyAttributes as ah, removeHtmlComments as ai, removeJsComments as aj, removeRedundantAttributes as ak, searchCheatsheet as al, searchEndpoints as am, splitStatements as an, testPattern as ao, testRegex as ap, validateEnvKey as aq, type ApiInfo as b, code as c, type CheatsheetEntry as d, type CssResult as e, type EnvParseResult as f, type GitCommandResult as g, type GitOperation as h, type GithubUrlInfo as i, type GithubUrlType as j, type GqlFormatResult as k, type HtmlMinifyOptions as l, type HtmlMinifyResult as m, type JsMinifyResult as n, type MatchResult as o, type MimeEntry as p, type MimeLookupResult as q, type RegexFlag as r, type RegexMatch as s, type RegexResult as t, type RegexSuccess as u, type Segment as v, type SpecVersion as w, type SqlDialect as x, type SqlFormatOptions as y, buildDockerPull as z };
+export { formatCss as $, ALL_FLAGS as A, type SqlDialect as B, CHEATSHEET as C, type DockerImageRef as D, type EnvEntry as E, type SqlFormatOptions as F, type GitCommandConfig as G, type HtmlFormatResult as H, buildDockerPull as I, type JsMinifyOptions as J, buildDockerRun as K, buildGitCommand as L, MIME_TABLE as M, collapseHtmlWhitespace as N, OPERATIONS as O, type ParsedSpec as P, collapseJsWhitespace as Q, type RedosFinding as R, SQL_DEFAULT_OPTIONS as S, type TestPatternResult as T, countProperties as U, countRules as V, detectDialect as W, detectOperationType as X, detectRedos as Y, envToExport as Z, envToJson as _, type ApiEndpoint as a, formatGql as a0, formatHtml as a1, formatSql as a2, getEndpointsByTag as a3, getHtmlStats as a4, getJsStats as a5, getMethodColor as a6, isValidTag as a7, lookupMime as a8, minifyCss as a9, minifyGql as aa, minifyHtml as ab, minifyJs as ac, minifySql as ad, normalizeRef as ae, parseDockerImage as af, parseEnv as ag, parseGitCommand as ah, parseGithubUrl as ai, parseSpec as aj, removeConsoleCalls as ak, removeEmptyAttributes as al, removeHtmlComments as am, removeJsComments as an, removeRedundantAttributes as ao, searchCheatsheet as ap, searchEndpoints as aq, splitStatements as ar, testPattern as as, testRegex as at, validateEnvKey as au, type ApiInfo as b, code as c, type CheatsheetEntry as d, type CssResult as e, type EnvParseResult as f, type GitCommandResult as g, type GitOperation as h, type GithubUrlInfo as i, type GithubUrlType as j, type GqlFormatResult as k, type HtmlMinifyOptions as l, type HtmlMinifyResult as m, type JsMinifyResult as n, type MatchResult as o, type MimeEntry as p, type MimeLookupResult as q, type RedosResult as r, type RedosSeverity as s, type RegexError as t, type RegexFlag as u, type RegexMatch as v, type RegexResult as w, type RegexSuccess as x, type Segment as y, type SpecVersion as z };

package/dist/{code-Cn9uOIAh.d.ts → code-DaRvff2v.d.ts}

@@ -19,6 +19,7 @@
  *   - css-minifier     (minifyCss, formatCss, countRules, countProperties)
  *   - mime-lookup      (lookupMime, MIME_TABLE)
  *   - github-url-parser (parseGithubUrl)
+ *   - redos-detector   (detectRedos)
  */
 type RegexFlag = 'g' | 'i' | 'm' | 's' | 'u';
 declare const ALL_FLAGS: RegexFlag[];
@@ -307,6 +308,32 @@ interface GithubUrlInfo {
 declare function parseGithubUrl(input: string): GithubUrlInfo | {
     error: string;
 };
+type RedosSeverity = 'high' | 'medium';
+interface RedosFinding {
+    type: 'nested-quantifier' | 'overlapping-alternation' | 'adjacent-quantifier';
+    severity: RedosSeverity;
+    message: string;
+    snippet: string;
+    index: number;
+}
+interface RedosResult {
+    pattern: string;
+    valid: boolean;
+    compileError?: string;
+    risk: 'none' | 'medium' | 'high';
+    safe: boolean;
+    findings: RedosFinding[];
+}
+/**
+ * Statically analyze a regex pattern for catastrophic-backtracking (ReDoS)
+ * risk. Pass the pattern body only (no delimiters or flags). This is a
+ * heuristic linter focused on the classic exponential/quadratic constructs
+ * (nested quantifiers, overlapping alternation under a repeat, adjacent
+ * overlapping quantifiers), not a formal guarantee.
+ */
+declare function detectRedos(pattern: string): RedosResult | {
+    error: string;
+};
 
 declare const code_ALL_FLAGS: typeof ALL_FLAGS;
 type code_ApiEndpoint = ApiEndpoint;
@@ -334,6 +361,9 @@ type code_MimeEntry = MimeEntry;
 type code_MimeLookupResult = MimeLookupResult;
 declare const code_OPERATIONS: typeof OPERATIONS;
 type code_ParsedSpec = ParsedSpec;
+type code_RedosFinding = RedosFinding;
+type code_RedosResult = RedosResult;
+type code_RedosSeverity = RedosSeverity;
 type code_RegexError = RegexError;
 type code_RegexFlag = RegexFlag;
 type code_RegexMatch = RegexMatch;
@@ -354,6 +384,7 @@ declare const code_countProperties: typeof countProperties;
 declare const code_countRules: typeof countRules;
 declare const code_detectDialect: typeof detectDialect;
 declare const code_detectOperationType: typeof detectOperationType;
+declare const code_detectRedos: typeof detectRedos;
 declare const code_envToExport: typeof envToExport;
 declare const code_envToJson: typeof envToJson;
 declare const code_formatCss: typeof formatCss;
@@ -389,7 +420,7 @@ declare const code_testPattern: typeof testPattern;
 declare const code_testRegex: typeof testRegex;
 declare const code_validateEnvKey: typeof validateEnvKey;
 declare namespace code {
-  export { code_ALL_FLAGS as ALL_FLAGS, type code_ApiEndpoint as ApiEndpoint, type code_ApiInfo as ApiInfo, code_CHEATSHEET as CHEATSHEET, type code_CheatsheetEntry as CheatsheetEntry, type code_CssResult as CssResult, type code_DockerImageRef as DockerImageRef, type code_EnvEntry as EnvEntry, type code_EnvParseResult as EnvParseResult, type code_GitCommandConfig as GitCommandConfig, type code_GitCommandResult as GitCommandResult, type code_GitOperation as GitOperation, type code_GithubUrlInfo as GithubUrlInfo, type code_GithubUrlType as GithubUrlType, type code_GqlFormatResult as GqlFormatResult, type code_HtmlFormatResult as HtmlFormatResult, type code_HtmlMinifyOptions as HtmlMinifyOptions, type code_HtmlMinifyResult as HtmlMinifyResult, type code_JsMinifyOptions as JsMinifyOptions, type code_JsMinifyResult as JsMinifyResult, code_MIME_TABLE as MIME_TABLE, type code_MatchResult as MatchResult, type code_MimeEntry as MimeEntry, type code_MimeLookupResult as MimeLookupResult, code_OPERATIONS as OPERATIONS, type code_ParsedSpec as ParsedSpec, type code_RegexError as RegexError, type code_RegexFlag as RegexFlag, type code_RegexMatch as RegexMatch, type code_RegexResult as RegexResult, type code_RegexSuccess as RegexSuccess, code_SQL_DEFAULT_OPTIONS as SQL_DEFAULT_OPTIONS, type code_Segment as Segment, type code_SpecVersion as SpecVersion, type code_SqlDialect as SqlDialect, type code_SqlFormatOptions as SqlFormatOptions, type code_TestPatternResult as TestPatternResult, code_buildDockerPull as buildDockerPull, code_buildDockerRun as buildDockerRun, code_buildGitCommand as buildGitCommand, code_collapseHtmlWhitespace as collapseHtmlWhitespace, code_collapseJsWhitespace as collapseJsWhitespace, code_countProperties as countProperties, code_countRules as countRules, code_detectDialect as detectDialect, code_detectOperationType as detectOperationType, code_envToExport as envToExport, code_envToJson as envToJson, code_formatCss as formatCss, code_formatGql as formatGql, code_formatHtml as formatHtml, code_formatSql as formatSql, code_getEndpointsByTag as getEndpointsByTag, code_getHtmlStats as getHtmlStats, code_getJsStats as getJsStats, code_getMethodColor as getMethodColor, code_isValidTag as isValidTag, code_lookupMime as lookupMime, code_minifyCss as minifyCss, code_minifyGql as minifyGql, code_minifyHtml as minifyHtml, code_minifyJs as minifyJs, code_minifySql as minifySql, code_normalizeRef as normalizeRef, code_parseDockerImage as parseDockerImage, code_parseEnv as parseEnv, code_parseGitCommand as parseGitCommand, code_parseGithubUrl as parseGithubUrl, code_parseSpec as parseSpec, code_removeConsoleCalls as removeConsoleCalls, code_removeEmptyAttributes as removeEmptyAttributes, code_removeHtmlComments as removeHtmlComments, code_removeJsComments as removeJsComments, code_removeRedundantAttributes as removeRedundantAttributes, code_searchCheatsheet as searchCheatsheet, code_searchEndpoints as searchEndpoints, code_splitStatements as splitStatements, code_testPattern as testPattern, code_testRegex as testRegex, code_validateEnvKey as validateEnvKey };
+  export { code_ALL_FLAGS as ALL_FLAGS, type code_ApiEndpoint as ApiEndpoint, type code_ApiInfo as ApiInfo, code_CHEATSHEET as CHEATSHEET, type code_CheatsheetEntry as CheatsheetEntry, type code_CssResult as CssResult, type code_DockerImageRef as DockerImageRef, type code_EnvEntry as EnvEntry, type code_EnvParseResult as EnvParseResult, type code_GitCommandConfig as GitCommandConfig, type code_GitCommandResult as GitCommandResult, type code_GitOperation as GitOperation, type code_GithubUrlInfo as GithubUrlInfo, type code_GithubUrlType as GithubUrlType, type code_GqlFormatResult as GqlFormatResult, type code_HtmlFormatResult as HtmlFormatResult, type code_HtmlMinifyOptions as HtmlMinifyOptions, type code_HtmlMinifyResult as HtmlMinifyResult, type code_JsMinifyOptions as JsMinifyOptions, type code_JsMinifyResult as JsMinifyResult, code_MIME_TABLE as MIME_TABLE, type code_MatchResult as MatchResult, type code_MimeEntry as MimeEntry, type code_MimeLookupResult as MimeLookupResult, code_OPERATIONS as OPERATIONS, type code_ParsedSpec as ParsedSpec, type code_RedosFinding as RedosFinding, type code_RedosResult as RedosResult, type code_RedosSeverity as RedosSeverity, type code_RegexError as RegexError, type code_RegexFlag as RegexFlag, type code_RegexMatch as RegexMatch, type code_RegexResult as RegexResult, type code_RegexSuccess as RegexSuccess, code_SQL_DEFAULT_OPTIONS as SQL_DEFAULT_OPTIONS, type code_Segment as Segment, type code_SpecVersion as SpecVersion, type code_SqlDialect as SqlDialect, type code_SqlFormatOptions as SqlFormatOptions, type code_TestPatternResult as TestPatternResult, code_buildDockerPull as buildDockerPull, code_buildDockerRun as buildDockerRun, code_buildGitCommand as buildGitCommand, code_collapseHtmlWhitespace as collapseHtmlWhitespace, code_collapseJsWhitespace as collapseJsWhitespace, code_countProperties as countProperties, code_countRules as countRules, code_detectDialect as detectDialect, code_detectOperationType as detectOperationType, code_detectRedos as detectRedos, code_envToExport as envToExport, code_envToJson as envToJson, code_formatCss as formatCss, code_formatGql as formatGql, code_formatHtml as formatHtml, code_formatSql as formatSql, code_getEndpointsByTag as getEndpointsByTag, code_getHtmlStats as getHtmlStats, code_getJsStats as getJsStats, code_getMethodColor as getMethodColor, code_isValidTag as isValidTag, code_lookupMime as lookupMime, code_minifyCss as minifyCss, code_minifyGql as minifyGql, code_minifyHtml as minifyHtml, code_minifyJs as minifyJs, code_minifySql as minifySql, code_normalizeRef as normalizeRef, code_parseDockerImage as parseDockerImage, code_parseEnv as parseEnv, code_parseGitCommand as parseGitCommand, code_parseGithubUrl as parseGithubUrl, code_parseSpec as parseSpec, code_removeConsoleCalls as removeConsoleCalls, code_removeEmptyAttributes as removeEmptyAttributes, code_removeHtmlComments as removeHtmlComments, code_removeJsComments as removeJsComments, code_removeRedundantAttributes as removeRedundantAttributes, code_searchCheatsheet as searchCheatsheet, code_searchEndpoints as searchEndpoints, code_splitStatements as splitStatements, code_testPattern as testPattern, code_testRegex as testRegex, code_validateEnvKey as validateEnvKey };
 }
 
-export { getEndpointsByTag as $, ALL_FLAGS as A, buildDockerRun as B, CHEATSHEET as C, type DockerImageRef as D, type EnvEntry as E, buildGitCommand as F, type GitCommandConfig as G, type HtmlFormatResult as H, collapseHtmlWhitespace as I, type JsMinifyOptions as J, collapseJsWhitespace as K, countProperties as L, MIME_TABLE as M, countRules as N, OPERATIONS as O, type ParsedSpec as P, detectDialect as Q, type RegexError as R, SQL_DEFAULT_OPTIONS as S, type TestPatternResult as T, detectOperationType as U, envToExport as V, envToJson as W, formatCss as X, formatGql as Y, formatHtml as Z, formatSql as _, type ApiEndpoint as a, getHtmlStats as a0, getJsStats as a1, getMethodColor as a2, isValidTag as a3, lookupMime as a4, minifyCss as a5, minifyGql as a6, minifyHtml as a7, minifyJs as a8, minifySql as a9, normalizeRef as aa, parseDockerImage as ab, parseEnv as ac, parseGitCommand as ad, parseGithubUrl as ae, parseSpec as af, removeConsoleCalls as ag, removeEmptyAttributes as ah, removeHtmlComments as ai, removeJsComments as aj, removeRedundantAttributes as ak, searchCheatsheet as al, searchEndpoints as am, splitStatements as an, testPattern as ao, testRegex as ap, validateEnvKey as aq, type ApiInfo as b, code as c, type CheatsheetEntry as d, type CssResult as e, type EnvParseResult as f, type GitCommandResult as g, type GitOperation as h, type GithubUrlInfo as i, type GithubUrlType as j, type GqlFormatResult as k, type HtmlMinifyOptions as l, type HtmlMinifyResult as m, type JsMinifyResult as n, type MatchResult as o, type MimeEntry as p, type MimeLookupResult as q, type RegexFlag as r, type RegexMatch as s, type RegexResult as t, type RegexSuccess as u, type Segment as v, type SpecVersion as w, type SqlDialect as x, type SqlFormatOptions as y, buildDockerPull as z };
+export { formatCss as $, ALL_FLAGS as A, type SqlDialect as B, CHEATSHEET as C, type DockerImageRef as D, type EnvEntry as E, type SqlFormatOptions as F, type GitCommandConfig as G, type HtmlFormatResult as H, buildDockerPull as I, type JsMinifyOptions as J, buildDockerRun as K, buildGitCommand as L, MIME_TABLE as M, collapseHtmlWhitespace as N, OPERATIONS as O, type ParsedSpec as P, collapseJsWhitespace as Q, type RedosFinding as R, SQL_DEFAULT_OPTIONS as S, type TestPatternResult as T, countProperties as U, countRules as V, detectDialect as W, detectOperationType as X, detectRedos as Y, envToExport as Z, envToJson as _, type ApiEndpoint as a, formatGql as a0, formatHtml as a1, formatSql as a2, getEndpointsByTag as a3, getHtmlStats as a4, getJsStats as a5, getMethodColor as a6, isValidTag as a7, lookupMime as a8, minifyCss as a9, minifyGql as aa, minifyHtml as ab, minifyJs as ac, minifySql as ad, normalizeRef as ae, parseDockerImage as af, parseEnv as ag, parseGitCommand as ah, parseGithubUrl as ai, parseSpec as aj, removeConsoleCalls as ak, removeEmptyAttributes as al, removeHtmlComments as am, removeJsComments as an, removeRedundantAttributes as ao, searchCheatsheet as ap, searchEndpoints as aq, splitStatements as ar, testPattern as as, testRegex as at, validateEnvKey as au, type ApiInfo as b, code as c, type CheatsheetEntry as d, type CssResult as e, type EnvParseResult as f, type GitCommandResult as g, type GitOperation as h, type GithubUrlInfo as i, type GithubUrlType as j, type GqlFormatResult as k, type HtmlMinifyOptions as l, type HtmlMinifyResult as m, type JsMinifyResult as n, type MatchResult as o, type MimeEntry as p, type MimeLookupResult as q, type RedosResult as r, type RedosSeverity as s, type RegexError as t, type RegexFlag as u, type RegexMatch as v, type RegexResult as w, type RegexSuccess as x, type Segment as y, type SpecVersion as z };

package/dist/index.cjs

@@ -11007,6 +11007,7 @@ __export(code_exports, {
   countRules: () => countRules,
   detectDialect: () => detectDialect,
   detectOperationType: () => detectOperationType,
+  detectRedos: () => detectRedos,
   envToExport: () => envToExport2,
   envToJson: () => envToJson2,
   formatCss: () => formatCss,
@@ -13464,6 +13465,270 @@ function parseGithubUrl(input) {
   }
   return { error: `Unsupported GitHub URL path: /${rest.join("/")}` };
 }
+var _REDOS_UNBOUNDED = /* @__PURE__ */ new Set(["*", "+"]);
+function _redosParseQuant(src, i) {
+  const ch = src[i];
+  if (ch === "*" || ch === "+" || ch === "?") {
+    let end = i + 1;
+    if (src[end] === "?" || src[end] === "+") end++;
+    return { unbounded: _REDOS_UNBOUNDED.has(ch), raw: src.slice(i, end), end };
+  }
+  if (ch === "{") {
+    const close = src.indexOf("}", i);
+    if (close === -1) return null;
+    const inner = src.slice(i + 1, close);
+    if (!/^\d+(,\d*)?$/.test(inner)) return null;
+    let end = close + 1;
+    if (src[end] === "?" || src[end] === "+") end++;
+    const unbounded = /^\d+,$/.test(inner);
+    return { unbounded, raw: src.slice(i, end), end };
+  }
+  return null;
+}
+function _redosParseAlternation(src, start, endExclusive) {
+  const alternatives = [];
+  let current = [];
+  let i = start;
+  while (i < endExclusive) {
+    const ch = src[i];
+    if (ch === "|") {
+      alternatives.push(current);
+      current = [];
+      i++;
+      continue;
+    }
+    let node;
+    if (ch === "\\") {
+      const atomEnd = i + 2 <= endExclusive ? i + 2 : i + 1;
+      node = { kind: "char", start: i, end: atomEnd, quant: null, quantEnd: atomEnd, raw: src.slice(i, atomEnd) };
+      i = atomEnd;
+    } else if (ch === "[") {
+      let j = i + 1;
+      if (src[j] === "^") j++;
+      if (src[j] === "]") j++;
+      while (j < endExclusive && src[j] !== "]") {
+        j += src[j] === "\\" ? 2 : 1;
+      }
+      const classEnd = j < endExclusive ? j + 1 : endExclusive;
+      node = { kind: "class", start: i, end: classEnd, quant: null, quantEnd: classEnd, raw: src.slice(i, classEnd) };
+      i = classEnd;
+    } else if (ch === "(") {
+      let depth = 1;
+      let j = i + 1;
+      while (j < endExclusive && depth > 0) {
+        const cj = src[j];
+        if (cj === "\\") {
+          j += 2;
+          continue;
+        }
+        if (cj === "[") {
+          j++;
+          if (src[j] === "^") j++;
+          if (src[j] === "]") j++;
+          while (j < endExclusive && src[j] !== "]") {
+            j += src[j] === "\\" ? 2 : 1;
+          }
+          j++;
+          continue;
+        }
+        if (cj === "(") depth++;
+        else if (cj === ")") depth--;
+        j++;
+      }
+      const closeIdx = depth === 0 ? j - 1 : endExclusive;
+      let contentStart = i + 1;
+      let lookaround = false;
+      if (src[i + 1] === "?") {
+        const after = src[i + 2];
+        if (after === ":") contentStart = i + 3;
+        else if (after === "=" || after === "!") {
+          contentStart = i + 3;
+          lookaround = true;
+        } else if (after === "<") {
+          const a3 = src[i + 3];
+          if (a3 === "=" || a3 === "!") {
+            contentStart = i + 4;
+            lookaround = true;
+          } else {
+            const gt = src.indexOf(">", i + 2);
+            contentStart = gt !== -1 && gt < closeIdx ? gt + 1 : i + 3;
+          }
+        }
+      }
+      node = {
+        kind: "group",
+        start: i,
+        end: closeIdx + 1,
+        quant: null,
+        quantEnd: closeIdx + 1,
+        raw: src.slice(i, closeIdx + 1),
+        alternatives: _redosParseAlternation(src, contentStart, closeIdx),
+        lookaround
+      };
+      i = closeIdx + 1;
+    } else if (ch === ".") {
+      node = { kind: "dot", start: i, end: i + 1, quant: null, quantEnd: i + 1, raw: "." };
+      i++;
+    } else if (ch === "^" || ch === "$") {
+      node = { kind: "anchor", start: i, end: i + 1, quant: null, quantEnd: i + 1, raw: ch };
+      i++;
+    } else {
+      node = { kind: "char", start: i, end: i + 1, quant: null, quantEnd: i + 1, raw: ch };
+      i++;
+    }
+    if (node.kind !== "anchor") {
+      const q = _redosParseQuant(src, i);
+      if (q) {
+        node.quant = q;
+        node.quantEnd = q.end;
+        i = q.end;
+      }
+    }
+    current.push(node);
+  }
+  alternatives.push(current);
+  return alternatives;
+}
+var _REDOS_ALPHABET = "abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789_ 	.,-@/:;#%&=";
+function _redosFirstMatcher(node) {
+  if (node.kind === "dot") return (c) => c !== "\n";
+  if (node.kind === "char") {
+    if (node.raw.startsWith("\\")) {
+      const body = node.raw.slice(1);
+      if (/^[dDwWsS]$/.test(body)) {
+        try {
+          const re = new RegExp("\\" + body);
+          return (c) => re.test(c);
+        } catch {
+          return null;
+        }
+      }
+      const literal = { n: "\n", t: "	", r: "\r", f: "\f", v: "\v" }[body] ?? body;
+      return (c) => c === literal;
+    }
+    const lit = node.raw;
+    return (c) => c === lit;
+  }
+  if (node.kind === "class") {
+    try {
+      const re = new RegExp(node.raw);
+      return (c) => re.test(c);
+    } catch {
+      return null;
+    }
+  }
+  if (node.kind === "group") {
+    const first = node.alternatives?.[0]?.[0];
+    return first ? _redosFirstMatcher(first) : null;
+  }
+  return null;
+}
+function _redosOverlaps(a, b) {
+  const fa = _redosFirstMatcher(a);
+  const fb = _redosFirstMatcher(b);
+  if (!fa || !fb) return false;
+  for (const c of _REDOS_ALPHABET) {
+    if (fa(c) && fb(c)) return true;
+  }
+  return false;
+}
+function _redosAnalyzeGroup(node, findings) {
+  const alts = node.alternatives ?? [];
+  const outerUnbounded = node.quant?.unbounded === true && !node.lookaround;
+  if (outerUnbounded) {
+    for (const alt of alts) {
+      const meaningful = alt.filter((n) => n.kind !== "anchor");
+      if (meaningful.length === 1 && meaningful[0].quant?.unbounded) {
+        findings.push({
+          type: "nested-quantifier",
+          severity: "high",
+          message: "Nested unbounded quantifiers: a repeated group whose body is itself unbounded-repeated can match the same input in exponentially many ways, causing catastrophic backtracking.",
+          snippet: node.raw + (node.quant?.raw ?? ""),
+          index: node.start
+        });
+        break;
+      }
+    }
+    if (alts.length > 1) {
+      const firsts = alts.map((alt) => alt.find((n) => n.kind !== "anchor")).filter((n) => !!n);
+      let flagged = false;
+      for (let x = 0; x < firsts.length && !flagged; x++) {
+        for (let y = x + 1; y < firsts.length; y++) {
+          if (_redosOverlaps(firsts[x], firsts[y])) {
+            findings.push({
+              type: "overlapping-alternation",
+              severity: "medium",
+              message: "Overlapping alternation under a repetition: two branches can match the same starting input, so the engine has multiple ways to split each repeat and may backtrack heavily.",
+              snippet: node.raw + (node.quant?.raw ?? ""),
+              index: node.start
+            });
+            flagged = true;
+            break;
+          }
+        }
+      }
+    }
+  }
+  for (const alt of alts) {
+    _redosAnalyzeSequence(alt, findings);
+  }
+}
+function _redosAnalyzeSequence(seq, findings) {
+  for (let k = 0; k + 1 < seq.length; k++) {
+    const a = seq[k];
+    const b = seq[k + 1];
+    if (a.quant?.unbounded && b.quant?.unbounded && _redosOverlaps(a, b)) {
+      findings.push({
+        type: "adjacent-quantifier",
+        severity: "medium",
+        message: "Adjacent unbounded quantifiers over overlapping characters: the engine can distribute the same input between them in many ways, causing quadratic backtracking.",
+        snippet: seq[k].raw + (a.quant?.raw ?? "") + seq[k + 1].raw + (b.quant?.raw ?? ""),
+        index: a.start
+      });
+    }
+  }
+  for (const node of seq) {
+    if (node.kind === "group") _redosAnalyzeGroup(node, findings);
+  }
+}
+function detectRedos(pattern) {
+  if (typeof pattern !== "string" || pattern === "") {
+    return { error: "Empty pattern" };
+  }
+  if (pattern.length > 5e3) {
+    return { error: "Pattern too long (max 5,000 chars)" };
+  }
+  let valid = true;
+  let compileError;
+  try {
+    new RegExp(pattern);
+  } catch (e) {
+    valid = false;
+    compileError = e instanceof Error ? e.message : String(e);
+  }
+  const findings = [];
+  const alternatives = _redosParseAlternation(pattern, 0, pattern.length);
+  for (const alt of alternatives) {
+    _redosAnalyzeSequence(alt, findings);
+  }
+  const seen = /* @__PURE__ */ new Set();
+  const unique = findings.filter((f) => {
+    const key = `${f.type}:${f.index}`;
+    if (seen.has(key)) return false;
+    seen.add(key);
+    return true;
+  });
+  unique.sort((a, b) => a.index - b.index);
+  const risk = unique.some((f) => f.severity === "high") ? "high" : unique.length > 0 ? "medium" : "none";
+  return {
+    pattern,
+    valid,
+    ...compileError ? { compileError } : {},
+    risk,
+    safe: unique.length === 0,
+    findings: unique
+  };
+}
 
 // src/tools/color.ts
 var color_exports = {};

package/dist/index.d.cts

@@ -8,7 +8,7 @@ export { t as time } from './time-DbT8fjaF.cjs';
 export { u as units } from './units-BFTQwpBu.cjs';
 export { n as network } from './network-DZugNyAQ.cjs';
 export { a as api } from './api-Xl7OzIgq.cjs';
-export { c as code } from './code-Cn9uOIAh.cjs';
+export { c as code } from './code-DaRvff2v.cjs';
 export { c as color } from './color-tPwZCr9H.cjs';
 export { c as css } from './css-Cf7AMGM-.cjs';
 export { m as misc } from './misc-CA3N198T.cjs';

package/dist/index.d.ts

@@ -8,7 +8,7 @@ export { t as time } from './time-DbT8fjaF.js';
 export { u as units } from './units-BFTQwpBu.js';
 export { n as network } from './network-DZugNyAQ.js';
 export { a as api } from './api-Xl7OzIgq.js';
-export { c as code } from './code-Cn9uOIAh.js';
+export { c as code } from './code-DaRvff2v.js';
 export { c as color } from './color-tPwZCr9H.js';
 export { c as css } from './css-Cf7AMGM-.js';
 export { m as misc } from './misc-CA3N198T.js';

package/dist/index.js

@@ -2,7 +2,7 @@ export { media_exports as media } from './chunk-XMKJYVKB.js';
 export { units_exports as units } from './chunk-U34B5XPK.js';
 export { network_exports as network } from './chunk-3QMUUTBH.js';
 export { api_exports as api } from './chunk-Q3B3YWOA.js';
-export { code_exports as code } from './chunk-L53LAVAD.js';
+export { code_exports as code } from './chunk-LXKIPPDG.js';
 export { color_exports as color } from './chunk-BPVAB4P2.js';
 export { css_exports as css } from './chunk-6YPV2AB5.js';
 export { misc_exports as misc } from './chunk-GX7H6TAX.js';

package/dist/tools/code.cjs

@@ -2425,6 +2425,270 @@ function parseGithubUrl(input) {
   }
   return { error: `Unsupported GitHub URL path: /${rest.join("/")}` };
 }
+var _REDOS_UNBOUNDED = /* @__PURE__ */ new Set(["*", "+"]);
+function _redosParseQuant(src, i) {
+  const ch = src[i];
+  if (ch === "*" || ch === "+" || ch === "?") {
+    let end = i + 1;
+    if (src[end] === "?" || src[end] === "+") end++;
+    return { unbounded: _REDOS_UNBOUNDED.has(ch), raw: src.slice(i, end), end };
+  }
+  if (ch === "{") {
+    const close = src.indexOf("}", i);
+    if (close === -1) return null;
+    const inner = src.slice(i + 1, close);
+    if (!/^\d+(,\d*)?$/.test(inner)) return null;
+    let end = close + 1;
+    if (src[end] === "?" || src[end] === "+") end++;
+    const unbounded = /^\d+,$/.test(inner);
+    return { unbounded, raw: src.slice(i, end), end };
+  }
+  return null;
+}
+function _redosParseAlternation(src, start, endExclusive) {
+  const alternatives = [];
+  let current = [];
+  let i = start;
+  while (i < endExclusive) {
+    const ch = src[i];
+    if (ch === "|") {
+      alternatives.push(current);
+      current = [];
+      i++;
+      continue;
+    }
+    let node;
+    if (ch === "\\") {
+      const atomEnd = i + 2 <= endExclusive ? i + 2 : i + 1;
+      node = { kind: "char", start: i, end: atomEnd, quant: null, quantEnd: atomEnd, raw: src.slice(i, atomEnd) };
+      i = atomEnd;
+    } else if (ch === "[") {
+      let j = i + 1;
+      if (src[j] === "^") j++;
+      if (src[j] === "]") j++;
+      while (j < endExclusive && src[j] !== "]") {
+        j += src[j] === "\\" ? 2 : 1;
+      }
+      const classEnd = j < endExclusive ? j + 1 : endExclusive;
+      node = { kind: "class", start: i, end: classEnd, quant: null, quantEnd: classEnd, raw: src.slice(i, classEnd) };
+      i = classEnd;
+    } else if (ch === "(") {
+      let depth = 1;
+      let j = i + 1;
+      while (j < endExclusive && depth > 0) {
+        const cj = src[j];
+        if (cj === "\\") {
+          j += 2;
+          continue;
+        }
+        if (cj === "[") {
+          j++;
+          if (src[j] === "^") j++;
+          if (src[j] === "]") j++;
+          while (j < endExclusive && src[j] !== "]") {
+            j += src[j] === "\\" ? 2 : 1;
+          }
+          j++;
+          continue;
+        }
+        if (cj === "(") depth++;
+        else if (cj === ")") depth--;
+        j++;
+      }
+      const closeIdx = depth === 0 ? j - 1 : endExclusive;
+      let contentStart = i + 1;
+      let lookaround = false;
+      if (src[i + 1] === "?") {
+        const after = src[i + 2];
+        if (after === ":") contentStart = i + 3;
+        else if (after === "=" || after === "!") {
+          contentStart = i + 3;
+          lookaround = true;
+        } else if (after === "<") {
+          const a3 = src[i + 3];
+          if (a3 === "=" || a3 === "!") {
+            contentStart = i + 4;
+            lookaround = true;
+          } else {
+            const gt = src.indexOf(">", i + 2);
+            contentStart = gt !== -1 && gt < closeIdx ? gt + 1 : i + 3;
+          }
+        }
+      }
+      node = {
+        kind: "group",
+        start: i,
+        end: closeIdx + 1,
+        quant: null,
+        quantEnd: closeIdx + 1,
+        raw: src.slice(i, closeIdx + 1),
+        alternatives: _redosParseAlternation(src, contentStart, closeIdx),
+        lookaround
+      };
+      i = closeIdx + 1;
+    } else if (ch === ".") {
+      node = { kind: "dot", start: i, end: i + 1, quant: null, quantEnd: i + 1, raw: "." };
+      i++;
+    } else if (ch === "^" || ch === "$") {
+      node = { kind: "anchor", start: i, end: i + 1, quant: null, quantEnd: i + 1, raw: ch };
+      i++;
+    } else {
+      node = { kind: "char", start: i, end: i + 1, quant: null, quantEnd: i + 1, raw: ch };
+      i++;
+    }
+    if (node.kind !== "anchor") {
+      const q = _redosParseQuant(src, i);
+      if (q) {
+        node.quant = q;
+        node.quantEnd = q.end;
+        i = q.end;
+      }
+    }
+    current.push(node);
+  }
+  alternatives.push(current);
+  return alternatives;
+}
+var _REDOS_ALPHABET = "abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789_ 	.,-@/:;#%&=";
+function _redosFirstMatcher(node) {
+  if (node.kind === "dot") return (c) => c !== "\n";
+  if (node.kind === "char") {
+    if (node.raw.startsWith("\\")) {
+      const body = node.raw.slice(1);
+      if (/^[dDwWsS]$/.test(body)) {
+        try {
+          const re = new RegExp("\\" + body);
+          return (c) => re.test(c);
+        } catch {
+          return null;
+        }
+      }
+      const literal = { n: "\n", t: "	", r: "\r", f: "\f", v: "\v" }[body] ?? body;
+      return (c) => c === literal;
+    }
+    const lit = node.raw;
+    return (c) => c === lit;
+  }
+  if (node.kind === "class") {
+    try {
+      const re = new RegExp(node.raw);
+      return (c) => re.test(c);
+    } catch {
+      return null;
+    }
+  }
+  if (node.kind === "group") {
+    const first = node.alternatives?.[0]?.[0];
+    return first ? _redosFirstMatcher(first) : null;
+  }
+  return null;
+}
+function _redosOverlaps(a, b) {
+  const fa = _redosFirstMatcher(a);
+  const fb = _redosFirstMatcher(b);
+  if (!fa || !fb) return false;
+  for (const c of _REDOS_ALPHABET) {
+    if (fa(c) && fb(c)) return true;
+  }
+  return false;
+}
+function _redosAnalyzeGroup(node, findings) {
+  const alts = node.alternatives ?? [];
+  const outerUnbounded = node.quant?.unbounded === true && !node.lookaround;
+  if (outerUnbounded) {
+    for (const alt of alts) {
+      const meaningful = alt.filter((n) => n.kind !== "anchor");
+      if (meaningful.length === 1 && meaningful[0].quant?.unbounded) {
+        findings.push({
+          type: "nested-quantifier",
+          severity: "high",
+          message: "Nested unbounded quantifiers: a repeated group whose body is itself unbounded-repeated can match the same input in exponentially many ways, causing catastrophic backtracking.",
+          snippet: node.raw + (node.quant?.raw ?? ""),
+          index: node.start
+        });
+        break;
+      }
+    }
+    if (alts.length > 1) {
+      const firsts = alts.map((alt) => alt.find((n) => n.kind !== "anchor")).filter((n) => !!n);
+      let flagged = false;
+      for (let x = 0; x < firsts.length && !flagged; x++) {
+        for (let y = x + 1; y < firsts.length; y++) {
+          if (_redosOverlaps(firsts[x], firsts[y])) {
+            findings.push({
+              type: "overlapping-alternation",
+              severity: "medium",
+              message: "Overlapping alternation under a repetition: two branches can match the same starting input, so the engine has multiple ways to split each repeat and may backtrack heavily.",
+              snippet: node.raw + (node.quant?.raw ?? ""),
+              index: node.start
+            });
+            flagged = true;
+            break;
+          }
+        }
+      }
+    }
+  }
+  for (const alt of alts) {
+    _redosAnalyzeSequence(alt, findings);
+  }
+}
+function _redosAnalyzeSequence(seq, findings) {
+  for (let k = 0; k + 1 < seq.length; k++) {
+    const a = seq[k];
+    const b = seq[k + 1];
+    if (a.quant?.unbounded && b.quant?.unbounded && _redosOverlaps(a, b)) {
+      findings.push({
+        type: "adjacent-quantifier",
+        severity: "medium",
+        message: "Adjacent unbounded quantifiers over overlapping characters: the engine can distribute the same input between them in many ways, causing quadratic backtracking.",
+        snippet: seq[k].raw + (a.quant?.raw ?? "") + seq[k + 1].raw + (b.quant?.raw ?? ""),
+        index: a.start
+      });
+    }
+  }
+  for (const node of seq) {
+    if (node.kind === "group") _redosAnalyzeGroup(node, findings);
+  }
+}
+function detectRedos(pattern) {
+  if (typeof pattern !== "string" || pattern === "") {
+    return { error: "Empty pattern" };
+  }
+  if (pattern.length > 5e3) {
+    return { error: "Pattern too long (max 5,000 chars)" };
+  }
+  let valid = true;
+  let compileError;
+  try {
+    new RegExp(pattern);
+  } catch (e) {
+    valid = false;
+    compileError = e instanceof Error ? e.message : String(e);
+  }
+  const findings = [];
+  const alternatives = _redosParseAlternation(pattern, 0, pattern.length);
+  for (const alt of alternatives) {
+    _redosAnalyzeSequence(alt, findings);
+  }
+  const seen = /* @__PURE__ */ new Set();
+  const unique = findings.filter((f) => {
+    const key = `${f.type}:${f.index}`;
+    if (seen.has(key)) return false;
+    seen.add(key);
+    return true;
+  });
+  unique.sort((a, b) => a.index - b.index);
+  const risk = unique.some((f) => f.severity === "high") ? "high" : unique.length > 0 ? "medium" : "none";
+  return {
+    pattern,
+    valid,
+    ...compileError ? { compileError } : {},
+    risk,
+    safe: unique.length === 0,
+    findings: unique
+  };
+}
 
 exports.ALL_FLAGS = ALL_FLAGS;
 exports.CHEATSHEET = CHEATSHEET;
@@ -2440,6 +2704,7 @@ exports.countProperties = countProperties;
 exports.countRules = countRules;
 exports.detectDialect = detectDialect;
 exports.detectOperationType = detectOperationType;
+exports.detectRedos = detectRedos;
 exports.envToExport = envToExport;
 exports.envToJson = envToJson;
 exports.formatCss = formatCss;

package/dist/tools/code.d.cts

@@ -1 +1 @@
-export { A as ALL_FLAGS, a as ApiEndpoint, b as ApiInfo, C as CHEATSHEET, d as CheatsheetEntry, e as CssResult, D as DockerImageRef, E as EnvEntry, f as EnvParseResult, G as GitCommandConfig, g as GitCommandResult, h as GitOperation, i as GithubUrlInfo, j as GithubUrlType, k as GqlFormatResult, H as HtmlFormatResult, l as HtmlMinifyOptions, m as HtmlMinifyResult, J as JsMinifyOptions, n as JsMinifyResult, M as MIME_TABLE, o as MatchResult, p as MimeEntry, q as MimeLookupResult, O as OPERATIONS, P as ParsedSpec, R as RegexError, r as RegexFlag, s as RegexMatch, t as RegexResult, u as RegexSuccess, S as SQL_DEFAULT_OPTIONS, v as Segment, w as SpecVersion, x as SqlDialect, y as SqlFormatOptions, T as TestPatternResult, z as buildDockerPull, B as buildDockerRun, F as buildGitCommand, I as collapseHtmlWhitespace, K as collapseJsWhitespace, L as countProperties, N as countRules, Q as detectDialect, U as detectOperationType, V as envToExport, W as envToJson, X as formatCss, Y as formatGql, Z as formatHtml, _ as formatSql, $ as getEndpointsByTag, a0 as getHtmlStats, a1 as getJsStats, a2 as getMethodColor, a3 as isValidTag, a4 as lookupMime, a5 as minifyCss, a6 as minifyGql, a7 as minifyHtml, a8 as minifyJs, a9 as minifySql, aa as normalizeRef, ab as parseDockerImage, ac as parseEnv, ad as parseGitCommand, ae as parseGithubUrl, af as parseSpec, ag as removeConsoleCalls, ah as removeEmptyAttributes, ai as removeHtmlComments, aj as removeJsComments, ak as removeRedundantAttributes, al as searchCheatsheet, am as searchEndpoints, an as splitStatements, ao as testPattern, ap as testRegex, aq as validateEnvKey } from '../code-Cn9uOIAh.cjs';
+export { A as ALL_FLAGS, a as ApiEndpoint, b as ApiInfo, C as CHEATSHEET, d as CheatsheetEntry, e as CssResult, D as DockerImageRef, E as EnvEntry, f as EnvParseResult, G as GitCommandConfig, g as GitCommandResult, h as GitOperation, i as GithubUrlInfo, j as GithubUrlType, k as GqlFormatResult, H as HtmlFormatResult, l as HtmlMinifyOptions, m as HtmlMinifyResult, J as JsMinifyOptions, n as JsMinifyResult, M as MIME_TABLE, o as MatchResult, p as MimeEntry, q as MimeLookupResult, O as OPERATIONS, P as ParsedSpec, R as RedosFinding, r as RedosResult, s as RedosSeverity, t as RegexError, u as RegexFlag, v as RegexMatch, w as RegexResult, x as RegexSuccess, S as SQL_DEFAULT_OPTIONS, y as Segment, z as SpecVersion, B as SqlDialect, F as SqlFormatOptions, T as TestPatternResult, I as buildDockerPull, K as buildDockerRun, L as buildGitCommand, N as collapseHtmlWhitespace, Q as collapseJsWhitespace, U as countProperties, V as countRules, W as detectDialect, X as detectOperationType, Y as detectRedos, Z as envToExport, _ as envToJson, $ as formatCss, a0 as formatGql, a1 as formatHtml, a2 as formatSql, a3 as getEndpointsByTag, a4 as getHtmlStats, a5 as getJsStats, a6 as getMethodColor, a7 as isValidTag, a8 as lookupMime, a9 as minifyCss, aa as minifyGql, ab as minifyHtml, ac as minifyJs, ad as minifySql, ae as normalizeRef, af as parseDockerImage, ag as parseEnv, ah as parseGitCommand, ai as parseGithubUrl, aj as parseSpec, ak as removeConsoleCalls, al as removeEmptyAttributes, am as removeHtmlComments, an as removeJsComments, ao as removeRedundantAttributes, ap as searchCheatsheet, aq as searchEndpoints, ar as splitStatements, as as testPattern, at as testRegex, au as validateEnvKey } from '../code-DaRvff2v.cjs';

package/dist/tools/code.d.ts

@@ -1 +1 @@
-export { A as ALL_FLAGS, a as ApiEndpoint, b as ApiInfo, C as CHEATSHEET, d as CheatsheetEntry, e as CssResult, D as DockerImageRef, E as EnvEntry, f as EnvParseResult, G as GitCommandConfig, g as GitCommandResult, h as GitOperation, i as GithubUrlInfo, j as GithubUrlType, k as GqlFormatResult, H as HtmlFormatResult, l as HtmlMinifyOptions, m as HtmlMinifyResult, J as JsMinifyOptions, n as JsMinifyResult, M as MIME_TABLE, o as MatchResult, p as MimeEntry, q as MimeLookupResult, O as OPERATIONS, P as ParsedSpec, R as RegexError, r as RegexFlag, s as RegexMatch, t as RegexResult, u as RegexSuccess, S as SQL_DEFAULT_OPTIONS, v as Segment, w as SpecVersion, x as SqlDialect, y as SqlFormatOptions, T as TestPatternResult, z as buildDockerPull, B as buildDockerRun, F as buildGitCommand, I as collapseHtmlWhitespace, K as collapseJsWhitespace, L as countProperties, N as countRules, Q as detectDialect, U as detectOperationType, V as envToExport, W as envToJson, X as formatCss, Y as formatGql, Z as formatHtml, _ as formatSql, $ as getEndpointsByTag, a0 as getHtmlStats, a1 as getJsStats, a2 as getMethodColor, a3 as isValidTag, a4 as lookupMime, a5 as minifyCss, a6 as minifyGql, a7 as minifyHtml, a8 as minifyJs, a9 as minifySql, aa as normalizeRef, ab as parseDockerImage, ac as parseEnv, ad as parseGitCommand, ae as parseGithubUrl, af as parseSpec, ag as removeConsoleCalls, ah as removeEmptyAttributes, ai as removeHtmlComments, aj as removeJsComments, ak as removeRedundantAttributes, al as searchCheatsheet, am as searchEndpoints, an as splitStatements, ao as testPattern, ap as testRegex, aq as validateEnvKey } from '../code-Cn9uOIAh.js';
+export { A as ALL_FLAGS, a as ApiEndpoint, b as ApiInfo, C as CHEATSHEET, d as CheatsheetEntry, e as CssResult, D as DockerImageRef, E as EnvEntry, f as EnvParseResult, G as GitCommandConfig, g as GitCommandResult, h as GitOperation, i as GithubUrlInfo, j as GithubUrlType, k as GqlFormatResult, H as HtmlFormatResult, l as HtmlMinifyOptions, m as HtmlMinifyResult, J as JsMinifyOptions, n as JsMinifyResult, M as MIME_TABLE, o as MatchResult, p as MimeEntry, q as MimeLookupResult, O as OPERATIONS, P as ParsedSpec, R as RedosFinding, r as RedosResult, s as RedosSeverity, t as RegexError, u as RegexFlag, v as RegexMatch, w as RegexResult, x as RegexSuccess, S as SQL_DEFAULT_OPTIONS, y as Segment, z as SpecVersion, B as SqlDialect, F as SqlFormatOptions, T as TestPatternResult, I as buildDockerPull, K as buildDockerRun, L as buildGitCommand, N as collapseHtmlWhitespace, Q as collapseJsWhitespace, U as countProperties, V as countRules, W as detectDialect, X as detectOperationType, Y as detectRedos, Z as envToExport, _ as envToJson, $ as formatCss, a0 as formatGql, a1 as formatHtml, a2 as formatSql, a3 as getEndpointsByTag, a4 as getHtmlStats, a5 as getJsStats, a6 as getMethodColor, a7 as isValidTag, a8 as lookupMime, a9 as minifyCss, aa as minifyGql, ab as minifyHtml, ac as minifyJs, ad as minifySql, ae as normalizeRef, af as parseDockerImage, ag as parseEnv, ah as parseGitCommand, ai as parseGithubUrl, aj as parseSpec, ak as removeConsoleCalls, al as removeEmptyAttributes, am as removeHtmlComments, an as removeJsComments, ao as removeRedundantAttributes, ap as searchCheatsheet, aq as searchEndpoints, ar as splitStatements, as as testPattern, at as testRegex, au as validateEnvKey } from '../code-DaRvff2v.js';

package/dist/tools/code.js

@@ -1,2 +1,2 @@
-export { ALL_FLAGS, CHEATSHEET, MIME_TABLE, OPERATIONS, SQL_DEFAULT_OPTIONS, buildDockerPull, buildDockerRun, buildGitCommand, collapseHtmlWhitespace, collapseJsWhitespace, countProperties, countRules, detectDialect, detectOperationType, envToExport, envToJson, formatCss, formatGql, formatHtml, formatSql, getEndpointsByTag, getHtmlStats, getJsStats, getMethodColor, isValidTag, lookupMime, minifyCss, minifyGql, minifyHtml, minifyJs, minifySql, normalizeRef, parseDockerImage, parseEnv, parseGitCommand, parseGithubUrl, parseSpec, removeConsoleCalls, removeEmptyAttributes, removeHtmlComments, removeJsComments, removeRedundantAttributes, searchCheatsheet, searchEndpoints, splitStatements, testPattern, testRegex, validateEnvKey } from '../chunk-L53LAVAD.js';
+export { ALL_FLAGS, CHEATSHEET, MIME_TABLE, OPERATIONS, SQL_DEFAULT_OPTIONS, buildDockerPull, buildDockerRun, buildGitCommand, collapseHtmlWhitespace, collapseJsWhitespace, countProperties, countRules, detectDialect, detectOperationType, detectRedos, envToExport, envToJson, formatCss, formatGql, formatHtml, formatSql, getEndpointsByTag, getHtmlStats, getJsStats, getMethodColor, isValidTag, lookupMime, minifyCss, minifyGql, minifyHtml, minifyJs, minifySql, normalizeRef, parseDockerImage, parseEnv, parseGitCommand, parseGithubUrl, parseSpec, removeConsoleCalls, removeEmptyAttributes, removeHtmlComments, removeJsComments, removeRedundantAttributes, searchCheatsheet, searchEndpoints, splitStatements, testPattern, testRegex, validateEnvKey } from '../chunk-LXKIPPDG.js';
 import '../chunk-MLKGABMK.js';

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@utilix-tech/sdk",
-  "version": "0.18.0",
+  "version": "0.19.0",
   "description": "154+ developer utility tools for Node.js: JSON, encoding, hashing, color, CSS, network and more. Runs locally, no API key required.",
   "author": "Utilix <hello@utilix.tech>",
   "license": "MIT",