@vltpkg/query 0.0.0-0.1730239248325 → 0.0.0-10

package/dist/esm/pseudo/attr.js

@@ -0,0 +1,58 @@
+import { error } from '@vltpkg/error-cause';
+import { asAttributeNode, asPostcssNodeWithChildren, asStringNode, asTagNode, isStringNode, } from "../types.js";
+import { attributeSelectorsMap, filterAttributes, } from "../attribute.js";
+import { removeQuotes } from "./helpers.js";
+/**
+ * Parses the internal / nested selectors of a `:attr` selector.
+ */
+export const parseInternals = (nodes) => {
+    // the last part is the attribute selector
+    const attributeSelector = asAttributeNode(asPostcssNodeWithChildren(nodes.pop()).nodes[0]);
+    // all preppending selectors are naming nested properties
+    const properties = [];
+    for (const selector of nodes) {
+        const selectorNode = asPostcssNodeWithChildren(selector).nodes[0];
+        // Handle both quoted string and tag nodes
+        if (isStringNode(selectorNode)) {
+            properties.push(removeQuotes(asStringNode(selectorNode).value));
+        }
+        else {
+            properties.push(asTagNode(selectorNode).value);
+        }
+    }
+    // include the attribute selector as the last part of the property lookup
+    properties.push(attributeSelector.attribute);
+    return {
+        attribute: attributeSelector.attribute,
+        insensitive: attributeSelector.insensitive || false,
+        operator: attributeSelector.operator,
+        value: attributeSelector.value,
+        properties,
+    };
+};
+/**
+ * :attr Pseudo-Selector, allows for retrieving nodes based on nested
+ * properties of the `package.json` metadata.
+ */
+export const attr = async (state) => {
+    // Parses and retrieves the values for the nested selectors
+    let internals;
+    try {
+        internals = parseInternals(asPostcssNodeWithChildren(state.current).nodes);
+    }
+    catch (err) {
+        throw error('Failed to parse :attr selector', {
+            cause: err,
+        });
+    }
+    // reuses the attribute selector logic to filter the nodes
+    const comparator = internals.operator ?
+        attributeSelectorsMap.get(internals.operator)
+        : undefined;
+    const value = internals.value || '';
+    const propertyName = internals.attribute;
+    const insensitive = internals.insensitive;
+    const prefixProperties = internals.properties;
+    return filterAttributes(state, comparator, value, propertyName, insensitive, prefixProperties);
+};
+//# sourceMappingURL=attr.js.map

package/dist/esm/pseudo/attr.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"attr.js","sourceRoot":"","sources":["../../../src/pseudo/attr.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,qBAAqB,CAAA;AAC3C,OAAO,EACL,eAAe,EACf,yBAAyB,EACzB,YAAY,EACZ,SAAS,EACT,YAAY,GACb,MAAM,aAAa,CAAA;AAEpB,OAAO,EACL,qBAAqB,EACrB,gBAAgB,GACjB,MAAM,iBAAiB,CAAA;AACxB,OAAO,EAAE,YAAY,EAAE,MAAM,cAAc,CAAA;AAU3C;;GAEG;AACH,MAAM,CAAC,MAAM,cAAc,GAAG,CAC5B,KAAoB,EACL,EAAE;IACjB,0CAA0C;IAC1C,MAAM,iBAAiB,GAAG,eAAe,CACvC,yBAAyB,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAChD,CAAA;IACD,yDAAyD;IACzD,MAAM,UAAU,GAAa,EAAE,CAAA;IAC/B,KAAK,MAAM,QAAQ,IAAI,KAAK,EAAE,CAAC;QAC7B,MAAM,YAAY,GAAG,yBAAyB,CAAC,QAAQ,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAA;QACjE,0CAA0C;QAC1C,IAAI,YAAY,CAAC,YAAY,CAAC,EAAE,CAAC;YAC/B,UAAU,CAAC,IAAI,CAAC,YAAY,CAAC,YAAY,CAAC,YAAY,CAAC,CAAC,KAAK,CAAC,CAAC,CAAA;QACjE,CAAC;aAAM,CAAC;YACN,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,YAAY,CAAC,CAAC,KAAK,CAAC,CAAA;QAChD,CAAC;IACH,CAAC;IACD,yEAAyE;IACzE,UAAU,CAAC,IAAI,CAAC,iBAAiB,CAAC,SAAS,CAAC,CAAA;IAE5C,OAAO;QACL,SAAS,EAAE,iBAAiB,CAAC,SAAS;QACtC,WAAW,EAAE,iBAAiB,CAAC,WAAW,IAAI,KAAK;QACnD,QAAQ,EAAE,iBAAiB,CAAC,QAAQ;QACpC,KAAK,EAAE,iBAAiB,CAAC,KAAK;QAC9B,UAAU;KACX,CAAA;AACH,CAAC,CAAA;AAED;;;GAGG;AACH,MAAM,CAAC,MAAM,IAAI,GAAG,KAAK,EAAE,KAAkB,EAAE,EAAE;IAC/C,2DAA2D;IAC3D,IAAI,SAAS,CAAA;IACb,IAAI,CAAC;QACH,SAAS,GAAG,cAAc,CACxB,yBAAyB,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,KAAK,CAC/C,CAAA;IACH,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,KAAK,CAAC,gCAAgC,EAAE;YAC5C,KAAK,EAAE,GAAG;SACX,CAAC,CAAA;IACJ,CAAC;IAED,0DAA0D;IAC1D,MAAM,UAAU,GACd,SAAS,CAAC,QAAQ,CAAC,CAAC;QAClB,qBAAqB,CAAC,GAAG,CAAC,SAAS,CAAC,QAAQ,CAAC;QAC/C,CAAC,CAAC,SAAS,CAAA;IACb,MAAM,KAAK,GAAG,SAAS,CAAC,KAAK,IAAI,EAAE,CAAA;IACnC,MAAM,YAAY,GAAG,SAAS,CAAC,SAAS,CAAA;IACxC,MAAM,WAAW,GAAG,SAAS,CAAC,WAAW,CAAA;IACzC,MAAM,gBAAgB,GAAG,SAAS,CAAC,UAAU,CAAA;IAC7C,OAAO,gBAAgB,CACrB,KAAK,EACL,UAAU,EACV,KAAK,EACL,YAAY,EACZ,WAAW,EACX,gBAAgB,CACjB,CAAA;AACH,CAAC,CAAA","sourcesContent":["import { error } from '@vltpkg/error-cause'\nimport {\n  asAttributeNode,\n  asPostcssNodeWithChildren,\n  asStringNode,\n  asTagNode,\n  isStringNode,\n} from '../types.ts'\nimport type { ParserState, PostcssNode } from '../types.ts'\nimport {\n  attributeSelectorsMap,\n  filterAttributes,\n} from '../attribute.ts'\nimport { removeQuotes } from './helpers.ts'\n\nexport type AttrInternals = {\n  attribute: string\n  insensitive: boolean\n  operator?: string\n  value?: string\n  properties: string[]\n}\n\n/**\n * Parses the internal / nested selectors of a `:attr` selector.\n */\nexport const parseInternals = (\n  nodes: PostcssNode[],\n): AttrInternals => {\n  // the last part is the attribute selector\n  const attributeSelector = asAttributeNode(\n    asPostcssNodeWithChildren(nodes.pop()).nodes[0],\n  )\n  // all preppending selectors are naming nested properties\n  const properties: string[] = []\n  for (const selector of nodes) {\n    const selectorNode = asPostcssNodeWithChildren(selector).nodes[0]\n    // Handle both quoted string and tag nodes\n    if (isStringNode(selectorNode)) {\n      properties.push(removeQuotes(asStringNode(selectorNode).value))\n    } else {\n      properties.push(asTagNode(selectorNode).value)\n    }\n  }\n  // include the attribute selector as the last part of the property lookup\n  properties.push(attributeSelector.attribute)\n\n  return {\n    attribute: attributeSelector.attribute,\n    insensitive: attributeSelector.insensitive || false,\n    operator: attributeSelector.operator,\n    value: attributeSelector.value,\n    properties,\n  }\n}\n\n/**\n * :attr Pseudo-Selector, allows for retrieving nodes based on nested\n * properties of the `package.json` metadata.\n */\nexport const attr = async (state: ParserState) => {\n  // Parses and retrieves the values for the nested selectors\n  let internals\n  try {\n    internals = parseInternals(\n      asPostcssNodeWithChildren(state.current).nodes,\n    )\n  } catch (err) {\n    throw error('Failed to parse :attr selector', {\n      cause: err,\n    })\n  }\n\n  // reuses the attribute selector logic to filter the nodes\n  const comparator =\n    internals.operator ?\n      attributeSelectorsMap.get(internals.operator)\n    : undefined\n  const value = internals.value || ''\n  const propertyName = internals.attribute\n  const insensitive = internals.insensitive\n  const prefixProperties = internals.properties\n  return filterAttributes(\n    state,\n    comparator,\n    value,\n    propertyName,\n    insensitive,\n    prefixProperties,\n  )\n}\n"]}

package/dist/esm/pseudo/confused.d.ts

@@ -0,0 +1,7 @@
+/**
+ * Filters out any node that does not have a **manifestConfusion** report alert.
+ */
+export declare const confused: (state: import("../types.ts").ParserState) => Promise<import("../types.ts").ParserState & {
+    securityArchive: NonNullable<import("../types.ts").ParserState["securityArchive"]>;
+}>;
+//# sourceMappingURL=confused.d.ts.map

package/dist/esm/pseudo/confused.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"confused.d.ts","sourceRoot":"","sources":["../../../src/pseudo/confused.ts"],"names":[],"mappings":"AAEA;;GAEG;AACH,eAAO,MAAM,QAAQ;;EAGpB,CAAA"}

package/dist/esm/pseudo/confused.js

@@ -0,0 +1,6 @@
+import { createSecuritySelectorFilter } from "./helpers.js";
+/**
+ * Filters out any node that does not have a **manifestConfusion** report alert.
+ */
+export const confused = createSecuritySelectorFilter('confused', 'manifestConfusion');
+//# sourceMappingURL=confused.js.map

package/dist/esm/pseudo/confused.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"confused.js","sourceRoot":"","sources":["../../../src/pseudo/confused.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,4BAA4B,EAAE,MAAM,cAAc,CAAA;AAE3D;;GAEG;AACH,MAAM,CAAC,MAAM,QAAQ,GAAG,4BAA4B,CAClD,UAAU,EACV,mBAAmB,CACpB,CAAA","sourcesContent":["import { createSecuritySelectorFilter } from './helpers.ts'\n\n/**\n * Filters out any node that does not have a **manifestConfusion** report alert.\n */\nexport const confused = createSecuritySelectorFilter(\n  'confused',\n  'manifestConfusion',\n)\n"]}

package/dist/esm/pseudo/cve.d.ts

@@ -0,0 +1,12 @@
+import type { ParserState, PostcssNode } from '../types.ts';
+export type CveInternals = {
+    cveId: string;
+};
+export declare const parseInternals: (nodes: PostcssNode[]) => CveInternals;
+/**
+ * Filters out any node that does not have a CVE alert with the specified CVE ID.
+ */
+export declare const cve: (state: ParserState) => Promise<ParserState & {
+    securityArchive: NonNullable<ParserState["securityArchive"]>;
+}>;
+//# sourceMappingURL=cve.d.ts.map

package/dist/esm/pseudo/cve.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cve.d.ts","sourceRoot":"","sources":["../../../src/pseudo/cve.ts"],"names":[],"mappings":"AAQA,OAAO,KAAK,EAAE,WAAW,EAAE,WAAW,EAAE,MAAM,aAAa,CAAA;AAQ3D,MAAM,MAAM,YAAY,GAAG;IACzB,KAAK,EAAE,MAAM,CAAA;CACd,CAAA;AAED,eAAO,MAAM,cAAc,UAClB,WAAW,EAAE,KACnB,YAuBF,CAAA;AAED;;GAEG;AACH,eAAO,MAAM,GAAG,UAAiB,WAAW;;EA4B3C,CAAA"}

package/dist/esm/pseudo/cve.js

@@ -0,0 +1,44 @@
+import { error } from '@vltpkg/error-cause';
+import { asPostcssNodeWithChildren, asStringNode, asTagNode, isStringNode, isTagNode, } from "../types.js";
+import { assertSecurityArchive, removeDanglingEdges, removeNode, removeQuotes, } from "./helpers.js";
+export const parseInternals = (nodes) => {
+    let cveId = '';
+    if (isStringNode(asPostcssNodeWithChildren(nodes[0]).nodes[0])) {
+        cveId = removeQuotes(asStringNode(asPostcssNodeWithChildren(nodes[0]).nodes[0])
+            .value);
+    }
+    else if (isTagNode(asPostcssNodeWithChildren(nodes[0]).nodes[0])) {
+        cveId = asTagNode(asPostcssNodeWithChildren(nodes[0]).nodes[0]).value;
+    }
+    if (!cveId) {
+        throw error('Expected a CVE ID', {
+            found: asPostcssNodeWithChildren(nodes[0]).nodes[0],
+        });
+    }
+    return { cveId };
+};
+/**
+ * Filters out any node that does not have a CVE alert with the specified CVE ID.
+ */
+export const cve = async (state) => {
+    assertSecurityArchive(state, 'cve');
+    let internals;
+    try {
+        internals = parseInternals(asPostcssNodeWithChildren(state.current).nodes);
+    }
+    catch (err) {
+        throw error('Failed to parse :cve selector', { cause: err });
+    }
+    const { cveId } = internals;
+    for (const node of state.partial.nodes) {
+        const report = state.securityArchive.get(node.id);
+        const exclude = !report?.alerts.some(alert => alert.props?.cveId?.trim().toLowerCase() ===
+            cveId.trim().toLowerCase());
+        if (exclude) {
+            removeNode(state, node);
+        }
+    }
+    removeDanglingEdges(state);
+    return state;
+};
+//# sourceMappingURL=cve.js.map

package/dist/esm/pseudo/cve.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cve.js","sourceRoot":"","sources":["../../../src/pseudo/cve.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,qBAAqB,CAAA;AAC3C,OAAO,EACL,yBAAyB,EACzB,YAAY,EACZ,SAAS,EACT,YAAY,EACZ,SAAS,GACV,MAAM,aAAa,CAAA;AAEpB,OAAO,EACL,qBAAqB,EACrB,mBAAmB,EACnB,UAAU,EACV,YAAY,GACb,MAAM,cAAc,CAAA;AAMrB,MAAM,CAAC,MAAM,cAAc,GAAG,CAC5B,KAAoB,EACN,EAAE;IAChB,IAAI,KAAK,GAAG,EAAE,CAAA;IAEd,IAAI,YAAY,CAAC,yBAAyB,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAC/D,KAAK,GAAG,YAAY,CAClB,YAAY,CAAC,yBAAyB,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;aACvD,KAAK,CACT,CAAA;IACH,CAAC;SAAM,IACL,SAAS,CAAC,yBAAyB,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EACvD,CAAC;QACD,KAAK,GAAG,SAAS,CACf,yBAAyB,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAC7C,CAAC,KAAK,CAAA;IACT,CAAC;IAED,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,MAAM,KAAK,CAAC,mBAAmB,EAAE;YAC/B,KAAK,EAAE,yBAAyB,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC;SACpD,CAAC,CAAA;IACJ,CAAC;IAED,OAAO,EAAE,KAAK,EAAE,CAAA;AAClB,CAAC,CAAA;AAED;;GAEG;AACH,MAAM,CAAC,MAAM,GAAG,GAAG,KAAK,EAAE,KAAkB,EAAE,EAAE;IAC9C,qBAAqB,CAAC,KAAK,EAAE,KAAK,CAAC,CAAA;IAEnC,IAAI,SAAS,CAAA;IACb,IAAI,CAAC;QACH,SAAS,GAAG,cAAc,CACxB,yBAAyB,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,KAAK,CAC/C,CAAA;IACH,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,KAAK,CAAC,+BAA+B,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,CAAA;IAC9D,CAAC;IAED,MAAM,EAAE,KAAK,EAAE,GAAG,SAAS,CAAA;IAC3B,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;QACvC,MAAM,MAAM,GAAG,KAAK,CAAC,eAAe,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;QACjD,MAAM,OAAO,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,IAAI,CAClC,KAAK,CAAC,EAAE,CACN,KAAK,CAAC,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,WAAW,EAAE;YACxC,KAAK,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAC7B,CAAA;QACD,IAAI,OAAO,EAAE,CAAC;YACZ,UAAU,CAAC,KAAK,EAAE,IAAI,CAAC,CAAA;QACzB,CAAC;IACH,CAAC;IAED,mBAAmB,CAAC,KAAK,CAAC,CAAA;IAE1B,OAAO,KAAK,CAAA;AACd,CAAC,CAAA","sourcesContent":["import { error } from '@vltpkg/error-cause'\nimport {\n  asPostcssNodeWithChildren,\n  asStringNode,\n  asTagNode,\n  isStringNode,\n  isTagNode,\n} from '../types.ts'\nimport type { ParserState, PostcssNode } from '../types.ts'\nimport {\n  assertSecurityArchive,\n  removeDanglingEdges,\n  removeNode,\n  removeQuotes,\n} from './helpers.ts'\n\nexport type CveInternals = {\n  cveId: string\n}\n\nexport const parseInternals = (\n  nodes: PostcssNode[],\n): CveInternals => {\n  let cveId = ''\n\n  if (isStringNode(asPostcssNodeWithChildren(nodes[0]).nodes[0])) {\n    cveId = removeQuotes(\n      asStringNode(asPostcssNodeWithChildren(nodes[0]).nodes[0])\n        .value,\n    )\n  } else if (\n    isTagNode(asPostcssNodeWithChildren(nodes[0]).nodes[0])\n  ) {\n    cveId = asTagNode(\n      asPostcssNodeWithChildren(nodes[0]).nodes[0],\n    ).value\n  }\n\n  if (!cveId) {\n    throw error('Expected a CVE ID', {\n      found: asPostcssNodeWithChildren(nodes[0]).nodes[0],\n    })\n  }\n\n  return { cveId }\n}\n\n/**\n * Filters out any node that does not have a CVE alert with the specified CVE ID.\n */\nexport const cve = async (state: ParserState) => {\n  assertSecurityArchive(state, 'cve')\n\n  let internals\n  try {\n    internals = parseInternals(\n      asPostcssNodeWithChildren(state.current).nodes,\n    )\n  } catch (err) {\n    throw error('Failed to parse :cve selector', { cause: err })\n  }\n\n  const { cveId } = internals\n  for (const node of state.partial.nodes) {\n    const report = state.securityArchive.get(node.id)\n    const exclude = !report?.alerts.some(\n      alert =>\n        alert.props?.cveId?.trim().toLowerCase() ===\n        cveId.trim().toLowerCase(),\n    )\n    if (exclude) {\n      removeNode(state, node)\n    }\n  }\n\n  removeDanglingEdges(state)\n\n  return state\n}\n"]}

package/dist/esm/pseudo/cwe.d.ts

@@ -0,0 +1,12 @@
+import type { ParserState, PostcssNode } from '../types.ts';
+export type CweInternals = {
+    cweId: string;
+};
+export declare const parseInternals: (nodes: PostcssNode[]) => CweInternals;
+/**
+ * Filters out any node that does not have a CWE alert with the specified CWE ID.
+ */
+export declare const cwe: (state: ParserState) => Promise<ParserState & {
+    securityArchive: NonNullable<ParserState["securityArchive"]>;
+}>;
+//# sourceMappingURL=cwe.d.ts.map

package/dist/esm/pseudo/cwe.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cwe.d.ts","sourceRoot":"","sources":["../../../src/pseudo/cwe.ts"],"names":[],"mappings":"AAQA,OAAO,KAAK,EAAE,WAAW,EAAE,WAAW,EAAE,MAAM,aAAa,CAAA;AAQ3D,MAAM,MAAM,YAAY,GAAG;IACzB,KAAK,EAAE,MAAM,CAAA;CACd,CAAA;AAED,eAAO,MAAM,cAAc,UAClB,WAAW,EAAE,KACnB,YAuBF,CAAA;AAED;;GAEG;AACH,eAAO,MAAM,GAAG,UAAiB,WAAW;;EA6B3C,CAAA"}

package/dist/esm/pseudo/cwe.js

@@ -0,0 +1,43 @@
+import { error } from '@vltpkg/error-cause';
+import { asPostcssNodeWithChildren, asStringNode, asTagNode, isStringNode, isTagNode, } from "../types.js";
+import { assertSecurityArchive, removeDanglingEdges, removeNode, removeQuotes, } from "./helpers.js";
+export const parseInternals = (nodes) => {
+    let cweId = '';
+    if (isStringNode(asPostcssNodeWithChildren(nodes[0]).nodes[0])) {
+        cweId = removeQuotes(asStringNode(asPostcssNodeWithChildren(nodes[0]).nodes[0])
+            .value);
+    }
+    else if (isTagNode(asPostcssNodeWithChildren(nodes[0]).nodes[0])) {
+        cweId = asTagNode(asPostcssNodeWithChildren(nodes[0]).nodes[0]).value;
+    }
+    if (!cweId) {
+        throw error('Expected a CWE ID', {
+            found: asPostcssNodeWithChildren(nodes[0]).nodes[0],
+        });
+    }
+    return { cweId };
+};
+/**
+ * Filters out any node that does not have a CWE alert with the specified CWE ID.
+ */
+export const cwe = async (state) => {
+    assertSecurityArchive(state, 'cwe');
+    let internals;
+    try {
+        internals = parseInternals(asPostcssNodeWithChildren(state.current).nodes);
+    }
+    catch (err) {
+        throw error('Failed to parse :cwe selector', { cause: err });
+    }
+    const { cweId } = internals;
+    for (const node of state.partial.nodes) {
+        const report = state.securityArchive.get(node.id);
+        const exclude = !report?.alerts.some(alert => alert.props?.cwes?.some(cwe => cwe.id.trim().toLowerCase() === cweId.trim().toLowerCase()));
+        if (exclude) {
+            removeNode(state, node);
+        }
+    }
+    removeDanglingEdges(state);
+    return state;
+};
+//# sourceMappingURL=cwe.js.map

package/dist/esm/pseudo/cwe.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cwe.js","sourceRoot":"","sources":["../../../src/pseudo/cwe.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,qBAAqB,CAAA;AAC3C,OAAO,EACL,yBAAyB,EACzB,YAAY,EACZ,SAAS,EACT,YAAY,EACZ,SAAS,GACV,MAAM,aAAa,CAAA;AAEpB,OAAO,EACL,qBAAqB,EACrB,mBAAmB,EACnB,UAAU,EACV,YAAY,GACb,MAAM,cAAc,CAAA;AAMrB,MAAM,CAAC,MAAM,cAAc,GAAG,CAC5B,KAAoB,EACN,EAAE;IAChB,IAAI,KAAK,GAAG,EAAE,CAAA;IAEd,IAAI,YAAY,CAAC,yBAAyB,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAC/D,KAAK,GAAG,YAAY,CAClB,YAAY,CAAC,yBAAyB,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;aACvD,KAAK,CACT,CAAA;IACH,CAAC;SAAM,IACL,SAAS,CAAC,yBAAyB,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EACvD,CAAC;QACD,KAAK,GAAG,SAAS,CACf,yBAAyB,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAC7C,CAAC,KAAK,CAAA;IACT,CAAC;IAED,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,MAAM,KAAK,CAAC,mBAAmB,EAAE;YAC/B,KAAK,EAAE,yBAAyB,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC;SACpD,CAAC,CAAA;IACJ,CAAC;IAED,OAAO,EAAE,KAAK,EAAE,CAAA;AAClB,CAAC,CAAA;AAED;;GAEG;AACH,MAAM,CAAC,MAAM,GAAG,GAAG,KAAK,EAAE,KAAkB,EAAE,EAAE;IAC9C,qBAAqB,CAAC,KAAK,EAAE,KAAK,CAAC,CAAA;IAEnC,IAAI,SAAS,CAAA;IACb,IAAI,CAAC;QACH,SAAS,GAAG,cAAc,CACxB,yBAAyB,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,KAAK,CAC/C,CAAA;IACH,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,KAAK,CAAC,+BAA+B,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,CAAA;IAC9D,CAAC;IAED,MAAM,EAAE,KAAK,EAAE,GAAG,SAAS,CAAA;IAC3B,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;QACvC,MAAM,MAAM,GAAG,KAAK,CAAC,eAAe,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;QACjD,MAAM,OAAO,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAC3C,KAAK,CAAC,KAAK,EAAE,IAAI,EAAE,IAAI,CACrB,GAAG,CAAC,EAAE,CACJ,GAAG,CAAC,EAAE,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,KAAK,KAAK,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAC7D,CACF,CAAA;QACD,IAAI,OAAO,EAAE,CAAC;YACZ,UAAU,CAAC,KAAK,EAAE,IAAI,CAAC,CAAA;QACzB,CAAC;IACH,CAAC;IAED,mBAAmB,CAAC,KAAK,CAAC,CAAA;IAE1B,OAAO,KAAK,CAAA;AACd,CAAC,CAAA","sourcesContent":["import { error } from '@vltpkg/error-cause'\nimport {\n  asPostcssNodeWithChildren,\n  asStringNode,\n  asTagNode,\n  isStringNode,\n  isTagNode,\n} from '../types.ts'\nimport type { ParserState, PostcssNode } from '../types.ts'\nimport {\n  assertSecurityArchive,\n  removeDanglingEdges,\n  removeNode,\n  removeQuotes,\n} from './helpers.ts'\n\nexport type CweInternals = {\n  cweId: string\n}\n\nexport const parseInternals = (\n  nodes: PostcssNode[],\n): CweInternals => {\n  let cweId = ''\n\n  if (isStringNode(asPostcssNodeWithChildren(nodes[0]).nodes[0])) {\n    cweId = removeQuotes(\n      asStringNode(asPostcssNodeWithChildren(nodes[0]).nodes[0])\n        .value,\n    )\n  } else if (\n    isTagNode(asPostcssNodeWithChildren(nodes[0]).nodes[0])\n  ) {\n    cweId = asTagNode(\n      asPostcssNodeWithChildren(nodes[0]).nodes[0],\n    ).value\n  }\n\n  if (!cweId) {\n    throw error('Expected a CWE ID', {\n      found: asPostcssNodeWithChildren(nodes[0]).nodes[0],\n    })\n  }\n\n  return { cweId }\n}\n\n/**\n * Filters out any node that does not have a CWE alert with the specified CWE ID.\n */\nexport const cwe = async (state: ParserState) => {\n  assertSecurityArchive(state, 'cwe')\n\n  let internals\n  try {\n    internals = parseInternals(\n      asPostcssNodeWithChildren(state.current).nodes,\n    )\n  } catch (err) {\n    throw error('Failed to parse :cwe selector', { cause: err })\n  }\n\n  const { cweId } = internals\n  for (const node of state.partial.nodes) {\n    const report = state.securityArchive.get(node.id)\n    const exclude = !report?.alerts.some(alert =>\n      alert.props?.cwes?.some(\n        cwe =>\n          cwe.id.trim().toLowerCase() === cweId.trim().toLowerCase(),\n      ),\n    )\n    if (exclude) {\n      removeNode(state, node)\n    }\n  }\n\n  removeDanglingEdges(state)\n\n  return state\n}\n"]}

package/dist/esm/pseudo/debug.d.ts

@@ -0,0 +1,7 @@
+/**
+ * Filters out any node that does not have a **debugAccess** report alert.
+ */
+export declare const debug: (state: import("../types.ts").ParserState) => Promise<import("../types.ts").ParserState & {
+    securityArchive: NonNullable<import("../types.ts").ParserState["securityArchive"]>;
+}>;
+//# sourceMappingURL=debug.d.ts.map

package/dist/esm/pseudo/debug.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"debug.d.ts","sourceRoot":"","sources":["../../../src/pseudo/debug.ts"],"names":[],"mappings":"AAEA;;GAEG;AACH,eAAO,MAAM,KAAK;;EAGjB,CAAA"}

package/dist/esm/pseudo/debug.js

@@ -0,0 +1,6 @@
+import { createSecuritySelectorFilter } from "./helpers.js";
+/**
+ * Filters out any node that does not have a **debugAccess** report alert.
+ */
+export const debug = createSecuritySelectorFilter('debug', 'debugAccess');
+//# sourceMappingURL=debug.js.map

package/dist/esm/pseudo/debug.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"debug.js","sourceRoot":"","sources":["../../../src/pseudo/debug.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,4BAA4B,EAAE,MAAM,cAAc,CAAA;AAE3D;;GAEG;AACH,MAAM,CAAC,MAAM,KAAK,GAAG,4BAA4B,CAC/C,OAAO,EACP,aAAa,CACd,CAAA","sourcesContent":["import { createSecuritySelectorFilter } from './helpers.ts'\n\n/**\n * Filters out any node that does not have a **debugAccess** report alert.\n */\nexport const debug = createSecuritySelectorFilter(\n  'debug',\n  'debugAccess',\n)\n"]}

package/dist/esm/pseudo/deprecated.d.ts

@@ -0,0 +1,7 @@
+/**
+ * Filters out any node that does not have a **deprecated** report alert.
+ */
+export declare const deprecated: (state: import("../types.ts").ParserState) => Promise<import("../types.ts").ParserState & {
+    securityArchive: NonNullable<import("../types.ts").ParserState["securityArchive"]>;
+}>;
+//# sourceMappingURL=deprecated.d.ts.map

package/dist/esm/pseudo/deprecated.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"deprecated.d.ts","sourceRoot":"","sources":["../../../src/pseudo/deprecated.ts"],"names":[],"mappings":"AAEA;;GAEG;AACH,eAAO,MAAM,UAAU;;EAGtB,CAAA"}

package/dist/esm/pseudo/deprecated.js

@@ -0,0 +1,6 @@
+import { createSecuritySelectorFilter } from "./helpers.js";
+/**
+ * Filters out any node that does not have a **deprecated** report alert.
+ */
+export const deprecated = createSecuritySelectorFilter('deprecated', 'deprecated');
+//# sourceMappingURL=deprecated.js.map

package/dist/esm/pseudo/deprecated.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"deprecated.js","sourceRoot":"","sources":["../../../src/pseudo/deprecated.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,4BAA4B,EAAE,MAAM,cAAc,CAAA;AAE3D;;GAEG;AACH,MAAM,CAAC,MAAM,UAAU,GAAG,4BAA4B,CACpD,YAAY,EACZ,YAAY,CACb,CAAA","sourcesContent":["import { createSecuritySelectorFilter } from './helpers.ts'\n\n/**\n * Filters out any node that does not have a **deprecated** report alert.\n */\nexport const deprecated = createSecuritySelectorFilter(\n  'deprecated',\n  'deprecated',\n)\n"]}

package/dist/esm/pseudo/dev.d.ts

@@ -0,0 +1,6 @@
+import type { ParserState } from '../types.ts';
+/**
+ * :dev Pseudo-Selector will only match devDependencies.
+ */
+export declare const dev: (state: ParserState) => Promise<ParserState>;
+//# sourceMappingURL=dev.d.ts.map

package/dist/esm/pseudo/dev.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"dev.d.ts","sourceRoot":"","sources":["../../../src/pseudo/dev.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,aAAa,CAAA;AAG9C;;GAEG;AACH,eAAO,MAAM,GAAG,UAAiB,WAAW,yBAW3C,CAAA"}

package/dist/esm/pseudo/dev.js

@@ -0,0 +1,15 @@
+import { removeEdge, removeUnlinkedNodes } from "./helpers.js";
+/**
+ * :dev Pseudo-Selector will only match devDependencies.
+ */
+export const dev = async (state) => {
+    // filter edges that don't have type 'dev'
+    for (const edge of state.partial.edges) {
+        if (edge.type !== 'dev') {
+            removeEdge(state, edge);
+        }
+    }
+    removeUnlinkedNodes(state);
+    return state;
+};
+//# sourceMappingURL=dev.js.map

package/dist/esm/pseudo/dev.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"dev.js","sourceRoot":"","sources":["../../../src/pseudo/dev.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,UAAU,EAAE,mBAAmB,EAAE,MAAM,cAAc,CAAA;AAE9D;;GAEG;AACH,MAAM,CAAC,MAAM,GAAG,GAAG,KAAK,EAAE,KAAkB,EAAE,EAAE;IAC9C,0CAA0C;IAC1C,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;QACvC,IAAI,IAAI,CAAC,IAAI,KAAK,KAAK,EAAE,CAAC;YACxB,UAAU,CAAC,KAAK,EAAE,IAAI,CAAC,CAAA;QACzB,CAAC;IACH,CAAC;IAED,mBAAmB,CAAC,KAAK,CAAC,CAAA;IAE1B,OAAO,KAAK,CAAA;AACd,CAAC,CAAA","sourcesContent":["import type { ParserState } from '../types.ts'\nimport { removeEdge, removeUnlinkedNodes } from './helpers.ts'\n\n/**\n * :dev Pseudo-Selector will only match devDependencies.\n */\nexport const dev = async (state: ParserState) => {\n  // filter edges that don't have type 'dev'\n  for (const edge of state.partial.edges) {\n    if (edge.type !== 'dev') {\n      removeEdge(state, edge)\n    }\n  }\n\n  removeUnlinkedNodes(state)\n\n  return state\n}\n"]}

package/dist/esm/pseudo/dynamic.d.ts

@@ -0,0 +1,7 @@
+/**
+ * Filters out any node that does not have a **dynamicRequire** report alert.
+ */
+export declare const dynamic: (state: import("../types.ts").ParserState) => Promise<import("../types.ts").ParserState & {
+    securityArchive: NonNullable<import("../types.ts").ParserState["securityArchive"]>;
+}>;
+//# sourceMappingURL=dynamic.d.ts.map

package/dist/esm/pseudo/dynamic.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"dynamic.d.ts","sourceRoot":"","sources":["../../../src/pseudo/dynamic.ts"],"names":[],"mappings":"AAEA;;GAEG;AACH,eAAO,MAAM,OAAO;;EAGnB,CAAA"}

package/dist/esm/pseudo/dynamic.js

@@ -0,0 +1,6 @@
+import { createSecuritySelectorFilter } from "./helpers.js";
+/**
+ * Filters out any node that does not have a **dynamicRequire** report alert.
+ */
+export const dynamic = createSecuritySelectorFilter('dynamic', 'dynamicRequire');
+//# sourceMappingURL=dynamic.js.map

package/dist/esm/pseudo/dynamic.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"dynamic.js","sourceRoot":"","sources":["../../../src/pseudo/dynamic.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,4BAA4B,EAAE,MAAM,cAAc,CAAA;AAE3D;;GAEG;AACH,MAAM,CAAC,MAAM,OAAO,GAAG,4BAA4B,CACjD,SAAS,EACT,gBAAgB,CACjB,CAAA","sourcesContent":["import { createSecuritySelectorFilter } from './helpers.ts'\n\n/**\n * Filters out any node that does not have a **dynamicRequire** report alert.\n */\nexport const dynamic = createSecuritySelectorFilter(\n  'dynamic',\n  'dynamicRequire',\n)\n"]}

package/dist/esm/pseudo/empty.d.ts

@@ -0,0 +1,7 @@
+import type { ParserState } from '../types.ts';
+/**
+ * :empty Pseudo-Selector, matches only nodes that have no children.
+ * It filters out any node that has edges out, i.e., has dependencies.
+ */
+export declare const empty: (state: ParserState) => Promise<ParserState>;
+//# sourceMappingURL=empty.d.ts.map

package/dist/esm/pseudo/empty.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"empty.d.ts","sourceRoot":"","sources":["../../../src/pseudo/empty.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,aAAa,CAAA;AAG9C;;;GAGG;AACH,eAAO,MAAM,KAAK,UAAiB,WAAW,yBAO7C,CAAA"}

package/dist/esm/pseudo/empty.js

@@ -0,0 +1,14 @@
+import { removeNode } from "./helpers.js";
+/**
+ * :empty Pseudo-Selector, matches only nodes that have no children.
+ * It filters out any node that has edges out, i.e., has dependencies.
+ */
+export const empty = async (state) => {
+    for (const node of state.partial.nodes) {
+        if (node.edgesOut.size > 0) {
+            removeNode(state, node);
+        }
+    }
+    return state;
+};
+//# sourceMappingURL=empty.js.map

package/dist/esm/pseudo/empty.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"empty.js","sourceRoot":"","sources":["../../../src/pseudo/empty.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,UAAU,EAAE,MAAM,cAAc,CAAA;AAEzC;;;GAGG;AACH,MAAM,CAAC,MAAM,KAAK,GAAG,KAAK,EAAE,KAAkB,EAAE,EAAE;IAChD,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;QACvC,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,GAAG,CAAC,EAAE,CAAC;YAC3B,UAAU,CAAC,KAAK,EAAE,IAAI,CAAC,CAAA;QACzB,CAAC;IACH,CAAC;IACD,OAAO,KAAK,CAAA;AACd,CAAC,CAAA","sourcesContent":["import type { ParserState } from '../types.ts'\nimport { removeNode } from './helpers.ts'\n\n/**\n * :empty Pseudo-Selector, matches only nodes that have no children.\n * It filters out any node that has edges out, i.e., has dependencies.\n */\nexport const empty = async (state: ParserState) => {\n  for (const node of state.partial.nodes) {\n    if (node.edgesOut.size > 0) {\n      removeNode(state, node)\n    }\n  }\n  return state\n}\n"]}

package/dist/esm/pseudo/entropic.d.ts

@@ -0,0 +1,7 @@
+/**
+ * Filters out any node that does not have a **highEntropyStrings** report alert.
+ */
+export declare const entropic: (state: import("../types.ts").ParserState) => Promise<import("../types.ts").ParserState & {
+    securityArchive: NonNullable<import("../types.ts").ParserState["securityArchive"]>;
+}>;
+//# sourceMappingURL=entropic.d.ts.map

package/dist/esm/pseudo/entropic.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"entropic.d.ts","sourceRoot":"","sources":["../../../src/pseudo/entropic.ts"],"names":[],"mappings":"AAEA;;GAEG;AACH,eAAO,MAAM,QAAQ;;EAGpB,CAAA"}

package/dist/esm/pseudo/entropic.js

@@ -0,0 +1,6 @@
+import { createSecuritySelectorFilter } from "./helpers.js";
+/**
+ * Filters out any node that does not have a **highEntropyStrings** report alert.
+ */
+export const entropic = createSecuritySelectorFilter('entropic', 'highEntropyStrings');
+//# sourceMappingURL=entropic.js.map

package/dist/esm/pseudo/entropic.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"entropic.js","sourceRoot":"","sources":["../../../src/pseudo/entropic.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,4BAA4B,EAAE,MAAM,cAAc,CAAA;AAE3D;;GAEG;AACH,MAAM,CAAC,MAAM,QAAQ,GAAG,4BAA4B,CAClD,UAAU,EACV,oBAAoB,CACrB,CAAA","sourcesContent":["import { createSecuritySelectorFilter } from './helpers.ts'\n\n/**\n * Filters out any node that does not have a **highEntropyStrings** report alert.\n */\nexport const entropic = createSecuritySelectorFilter(\n  'entropic',\n  'highEntropyStrings',\n)\n"]}

package/dist/esm/pseudo/env.d.ts

@@ -0,0 +1,7 @@
+/**
+ * Filters out any node that does not have a **envVars** report alert.
+ */
+export declare const env: (state: import("../types.ts").ParserState) => Promise<import("../types.ts").ParserState & {
+    securityArchive: NonNullable<import("../types.ts").ParserState["securityArchive"]>;
+}>;
+//# sourceMappingURL=env.d.ts.map

package/dist/esm/pseudo/env.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"env.d.ts","sourceRoot":"","sources":["../../../src/pseudo/env.ts"],"names":[],"mappings":"AAEA;;GAEG;AACH,eAAO,MAAM,GAAG;;EAAiD,CAAA"}

package/dist/esm/pseudo/env.js

@@ -0,0 +1,6 @@
+import { createSecuritySelectorFilter } from "./helpers.js";
+/**
+ * Filters out any node that does not have a **envVars** report alert.
+ */
+export const env = createSecuritySelectorFilter('env', 'envVars');
+//# sourceMappingURL=env.js.map

package/dist/esm/pseudo/env.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"env.js","sourceRoot":"","sources":["../../../src/pseudo/env.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,4BAA4B,EAAE,MAAM,cAAc,CAAA;AAE3D;;GAEG;AACH,MAAM,CAAC,MAAM,GAAG,GAAG,4BAA4B,CAAC,KAAK,EAAE,SAAS,CAAC,CAAA","sourcesContent":["import { createSecuritySelectorFilter } from './helpers.ts'\n\n/**\n * Filters out any node that does not have a **envVars** report alert.\n */\nexport const env = createSecuritySelectorFilter('env', 'envVars')\n"]}

package/dist/esm/pseudo/eval.d.ts

@@ -0,0 +1,7 @@
+/**
+ * Filters out any node that does not have a **usesEval** report alert.
+ */
+export declare const evalParser: (state: import("../types.ts").ParserState) => Promise<import("../types.ts").ParserState & {
+    securityArchive: NonNullable<import("../types.ts").ParserState["securityArchive"]>;
+}>;
+//# sourceMappingURL=eval.d.ts.map

package/dist/esm/pseudo/eval.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"eval.d.ts","sourceRoot":"","sources":["../../../src/pseudo/eval.ts"],"names":[],"mappings":"AAEA;;GAEG;AACH,eAAO,MAAM,UAAU;;EAGtB,CAAA"}

package/dist/esm/pseudo/eval.js

@@ -0,0 +1,6 @@
+import { createSecuritySelectorFilter } from "./helpers.js";
+/**
+ * Filters out any node that does not have a **usesEval** report alert.
+ */
+export const evalParser = createSecuritySelectorFilter('eval', 'usesEval');
+//# sourceMappingURL=eval.js.map

package/dist/esm/pseudo/eval.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"eval.js","sourceRoot":"","sources":["../../../src/pseudo/eval.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,4BAA4B,EAAE,MAAM,cAAc,CAAA;AAE3D;;GAEG;AACH,MAAM,CAAC,MAAM,UAAU,GAAG,4BAA4B,CACpD,MAAM,EACN,UAAU,CACX,CAAA","sourcesContent":["import { createSecuritySelectorFilter } from './helpers.ts'\n\n/**\n * Filters out any node that does not have a **usesEval** report alert.\n */\nexport const evalParser = createSecuritySelectorFilter(\n  'eval',\n  'usesEval',\n)\n"]}

package/dist/esm/pseudo/fs.d.ts

@@ -0,0 +1,7 @@
+/**
+ * Filters out any node that does not have a **filesystemAccess** report alert.
+ */
+export declare const fs: (state: import("../types.ts").ParserState) => Promise<import("../types.ts").ParserState & {
+    securityArchive: NonNullable<import("../types.ts").ParserState["securityArchive"]>;
+}>;
+//# sourceMappingURL=fs.d.ts.map

package/dist/esm/pseudo/fs.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"fs.d.ts","sourceRoot":"","sources":["../../../src/pseudo/fs.ts"],"names":[],"mappings":"AAEA;;GAEG;AACH,eAAO,MAAM,EAAE;;EAGd,CAAA"}

package/dist/esm/pseudo/fs.js

@@ -0,0 +1,6 @@
+import { createSecuritySelectorFilter } from "./helpers.js";
+/**
+ * Filters out any node that does not have a **filesystemAccess** report alert.
+ */
+export const fs = createSecuritySelectorFilter('fs', 'filesystemAccess');
+//# sourceMappingURL=fs.js.map

package/dist/esm/pseudo/fs.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"fs.js","sourceRoot":"","sources":["../../../src/pseudo/fs.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,4BAA4B,EAAE,MAAM,cAAc,CAAA;AAE3D;;GAEG;AACH,MAAM,CAAC,MAAM,EAAE,GAAG,4BAA4B,CAC5C,IAAI,EACJ,kBAAkB,CACnB,CAAA","sourcesContent":["import { createSecuritySelectorFilter } from './helpers.ts'\n\n/**\n * Filters out any node that does not have a **filesystemAccess** report alert.\n */\nexport const fs = createSecuritySelectorFilter(\n  'fs',\n  'filesystemAccess',\n)\n"]}

package/dist/esm/pseudo/helpers.d.ts

@@ -0,0 +1,35 @@
+import type { EdgeLike, NodeLike } from '@vltpkg/graph';
+import type { ParserState } from '../types.js';
+/**
+ * Removes a node and its incoming edges from the results.
+ */
+export declare const removeNode: (state: ParserState, node: NodeLike) => void;
+/**
+ * Removes an edge and its outgoing node from the results.
+ */
+export declare const removeEdge: (state: ParserState, edge: EdgeLike) => void;
+/**
+ * Removes any edges that have no destination node from the results.
+ */
+export declare const removeDanglingEdges: (state: ParserState) => void;
+/**
+ * Removes any nodes that have no incoming edges from the results.
+ */
+export declare const removeUnlinkedNodes: (state: ParserState) => void;
+/**
+ * Removes quotes from a string value.
+ */
+export declare const removeQuotes: (value: string) => string;
+/**
+ * Asserts that the security archive is present.
+ */
+export declare const assertSecurityArchive: (state: ParserState, name: string) => asserts state is ParserState & {
+    securityArchive: NonNullable<ParserState['securityArchive']>;
+};
+/**
+ * Reusable security selector alert filter.
+ */
+export declare const createSecuritySelectorFilter: (name: string, type: string) => (state: ParserState) => Promise<ParserState & {
+    securityArchive: NonNullable<ParserState["securityArchive"]>;
+}>;
+//# sourceMappingURL=helpers.d.ts.map

package/dist/esm/pseudo/helpers.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"helpers.d.ts","sourceRoot":"","sources":["../../../src/pseudo/helpers.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAA;AACvD,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,aAAa,CAAA;AAG9C;;GAEG;AACH,eAAO,MAAM,UAAU,UAAW,WAAW,QAAQ,QAAQ,SAK5D,CAAA;AAED;;GAEG;AACH,eAAO,MAAM,UAAU,UAAW,WAAW,QAAQ,QAAQ,SAK5D,CAAA;AAED;;GAEG;AACH,eAAO,MAAM,mBAAmB,UAAW,WAAW,SAMrD,CAAA;AAED;;GAEG;AACH,eAAO,MAAM,mBAAmB,UAAW,WAAW,SAMrD,CAAA;AAED;;GAEG;AACH,eAAO,MAAM,YAAY,UAAW,MAAM,WACR,CAAA;AAElC;;GAEG;AACH,eAAO,MAAM,qBAAqB,EAAE,CAClC,KAAK,EAAE,WAAW,EAClB,IAAI,EAAE,MAAM,KACT,OAAO,CAAC,KAAK,IAAI,WAAW,GAAG;IAClC,eAAe,EAAE,WAAW,CAAC,WAAW,CAAC,iBAAiB,CAAC,CAAC,CAAA;CAQ7D,CAAA;AAED;;GAEG;AACH,eAAO,MAAM,4BAA4B,SACjC,MAAM,QACN,MAAM,aAES,WAAW;qBAjBf,WAAW,CAAC,WAAW,CAAC,iBAAiB,CAAC,CAAC;EAkC7D,CAAA"}

package/dist/esm/pseudo/helpers.js

@@ -0,0 +1,69 @@
+import { error } from '@vltpkg/error-cause';
+/**
+ * Removes a node and its incoming edges from the results.
+ */
+export const removeNode = (state, node) => {
+    for (const edge of node.edgesIn) {
+        state.partial.edges.delete(edge);
+    }
+    state.partial.nodes.delete(node);
+};
+/**
+ * Removes an edge and its outgoing node from the results.
+ */
+export const removeEdge = (state, edge) => {
+    state.partial.edges.delete(edge);
+    if (edge.to) {
+        state.partial.nodes.delete(edge.to);
+    }
+};
+/**
+ * Removes any edges that have no destination node from the results.
+ */
+export const removeDanglingEdges = (state) => {
+    for (const edge of state.partial.edges) {
+        if (!edge.to) {
+            state.partial.edges.delete(edge);
+        }
+    }
+};
+/**
+ * Removes any nodes that have no incoming edges from the results.
+ */
+export const removeUnlinkedNodes = (state) => {
+    for (const node of state.partial.nodes) {
+        if (node.edgesIn.size === 0) {
+            state.partial.nodes.delete(node);
+        }
+    }
+};
+/**
+ * Removes quotes from a string value.
+ */
+export const removeQuotes = (value) => value.replace(/^"(.*?)"$/, '$1');
+/**
+ * Asserts that the security archive is present.
+ */
+export const assertSecurityArchive = (state, name) => {
+    if (!state.securityArchive) {
+        throw error(`Missing security archive while trying to parse the :${name} selector`, { found: state });
+    }
+};
+/**
+ * Reusable security selector alert filter.
+ */
+export const createSecuritySelectorFilter = (name, type) => {
+    return async (state) => {
+        assertSecurityArchive(state, name);
+        for (const node of state.partial.nodes) {
+            const report = state.securityArchive.get(node.id);
+            const exclude = !report?.alerts.some(alert => alert.type === type);
+            if (exclude) {
+                removeNode(state, node);
+            }
+        }
+        removeDanglingEdges(state);
+        return state;
+    };
+};
+//# sourceMappingURL=helpers.js.map

package/dist/esm/pseudo/helpers.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"helpers.js","sourceRoot":"","sources":["../../../src/pseudo/helpers.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,KAAK,EAAE,MAAM,qBAAqB,CAAA;AAE3C;;GAEG;AACH,MAAM,CAAC,MAAM,UAAU,GAAG,CAAC,KAAkB,EAAE,IAAc,EAAE,EAAE;IAC/D,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;QAChC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,CAAA;IAClC,CAAC;IACD,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,CAAA;AAClC,CAAC,CAAA;AAED;;GAEG;AACH,MAAM,CAAC,MAAM,UAAU,GAAG,CAAC,KAAkB,EAAE,IAAc,EAAE,EAAE;IAC/D,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,CAAA;IAChC,IAAI,IAAI,CAAC,EAAE,EAAE,CAAC;QACZ,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;IACrC,CAAC;AACH,CAAC,CAAA;AAED;;GAEG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,KAAkB,EAAE,EAAE;IACxD,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;QACvC,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC;YACb,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,CAAA;QAClC,CAAC;IACH,CAAC;AACH,CAAC,CAAA;AAED;;GAEG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,KAAkB,EAAE,EAAE;IACxD,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;QACvC,IAAI,IAAI,CAAC,OAAO,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC;YAC5B,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,CAAA;QAClC,CAAC;IACH,CAAC;AACH,CAAC,CAAA;AAED;;GAEG;AACH,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC,KAAa,EAAE,EAAE,CAC5C,KAAK,CAAC,OAAO,CAAC,WAAW,EAAE,IAAI,CAAC,CAAA;AAElC;;GAEG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAK9B,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE;IAClB,IAAI,CAAC,KAAK,CAAC,eAAe,EAAE,CAAC;QAC3B,MAAM,KAAK,CACT,uDAAuD,IAAI,WAAW,EACtE,EAAE,KAAK,EAAE,KAAK,EAAE,CACjB,CAAA;IACH,CAAC;AACH,CAAC,CAAA;AAED;;GAEG;AACH,MAAM,CAAC,MAAM,4BAA4B,GAAG,CAC1C,IAAY,EACZ,IAAY,EACZ,EAAE;IACF,OAAO,KAAK,EAAE,KAAkB,EAAE,EAAE;QAClC,qBAAqB,CAAC,KAAK,EAAE,IAAI,CAAC,CAAA;QAElC,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;YACvC,MAAM,MAAM,GAAG,KAAK,CAAC,eAAe,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;YACjD,MAAM,OAAO,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,IAAI,CAClC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,IAAI,KAAK,IAAI,CAC7B,CAAA;YACD,IAAI,OAAO,EAAE,CAAC;gBACZ,UAAU,CAAC,KAAK,EAAE,IAAI,CAAC,CAAA;YACzB,CAAC;QACH,CAAC;QAED,mBAAmB,CAAC,KAAK,CAAC,CAAA;QAE1B,OAAO,KAAK,CAAA;IACd,CAAC,CAAA;AACH,CAAC,CAAA","sourcesContent":["import type { EdgeLike, NodeLike } from '@vltpkg/graph'\nimport type { ParserState } from '../types.js'\nimport { error } from '@vltpkg/error-cause'\n\n/**\n * Removes a node and its incoming edges from the results.\n */\nexport const removeNode = (state: ParserState, node: NodeLike) => {\n  for (const edge of node.edgesIn) {\n    state.partial.edges.delete(edge)\n  }\n  state.partial.nodes.delete(node)\n}\n\n/**\n * Removes an edge and its outgoing node from the results.\n */\nexport const removeEdge = (state: ParserState, edge: EdgeLike) => {\n  state.partial.edges.delete(edge)\n  if (edge.to) {\n    state.partial.nodes.delete(edge.to)\n  }\n}\n\n/**\n * Removes any edges that have no destination node from the results.\n */\nexport const removeDanglingEdges = (state: ParserState) => {\n  for (const edge of state.partial.edges) {\n    if (!edge.to) {\n      state.partial.edges.delete(edge)\n    }\n  }\n}\n\n/**\n * Removes any nodes that have no incoming edges from the results.\n */\nexport const removeUnlinkedNodes = (state: ParserState) => {\n  for (const node of state.partial.nodes) {\n    if (node.edgesIn.size === 0) {\n      state.partial.nodes.delete(node)\n    }\n  }\n}\n\n/**\n * Removes quotes from a string value.\n */\nexport const removeQuotes = (value: string) =>\n  value.replace(/^\"(.*?)\"$/, '$1')\n\n/**\n * Asserts that the security archive is present.\n */\nexport const assertSecurityArchive: (\n  state: ParserState,\n  name: string,\n) => asserts state is ParserState & {\n  securityArchive: NonNullable<ParserState['securityArchive']>\n} = (state, name) => {\n  if (!state.securityArchive) {\n    throw error(\n      `Missing security archive while trying to parse the :${name} selector`,\n      { found: state },\n    )\n  }\n}\n\n/**\n * Reusable security selector alert filter.\n */\nexport const createSecuritySelectorFilter = (\n  name: string,\n  type: string,\n) => {\n  return async (state: ParserState) => {\n    assertSecurityArchive(state, name)\n\n    for (const node of state.partial.nodes) {\n      const report = state.securityArchive.get(node.id)\n      const exclude = !report?.alerts.some(\n        alert => alert.type === type,\n      )\n      if (exclude) {\n        removeNode(state, node)\n      }\n    }\n\n    removeDanglingEdges(state)\n\n    return state\n  }\n}\n"]}