@vltpkg/query 0.0.0-0.1730724342581 → 0.0.0-10

package/dist/esm/index.js

@@ -1,16 +1,19 @@
 import { error } from '@vltpkg/error-cause';
-import postcssSelectorParser from 'postcss-selector-parser';
-import { attribute } from './attribute.js';
-import { classFn } from './class.js';
-import { combinator } from './combinator.js';
-import { id } from './id.js';
-import { pseudo } from './pseudo.js';
-import { isPostcssNodeWithChildren, asPostcssNodeWithChildren, isSelectorNode, } from './types.js';
-export * from './types.js';
+import { parse } from "./parser.js";
+import { attribute } from "./attribute.js";
+import { combinator } from "./combinator.js";
+import { id } from "./id.js";
+import { pseudo } from "./pseudo.js";
+import { isPostcssNodeWithChildren, asPostcssNodeWithChildren, isSelectorNode, isPseudoNode, isIdentifierNode, isAttributeNode, } from "./types.js";
+export * from "./types.js";
 const noopFn = async (state) => state;
 const selectors = {
     attribute,
-    class: classFn,
+    /* c8 ignore start */
+    class: async (state) => {
+        throw error('Unsupported selector', { found: state.current });
+    },
+    /* c8 ignore end */
     combinator,
     comment: noopFn,
     id,
@@ -35,12 +38,15 @@ const selectors = {
 };
 const selectorsMap = new Map(Object.entries(selectors));
 export const walk = async (state) => {
+    await state.cancellable();
     const parserFn = selectorsMap.get(state.current.type);
     if (!parserFn) {
         if (state.loose) {
             return state;
         }
-        throw new Error(`Missing parser for query node: ${state.current.type}`);
+        throw error(`Missing parser for query node: ${state.current.type}`, {
+            found: state.current,
+        });
     }
     state = await parserFn(state);
     // pseudo selectors handle their own sub selectors
@@ -73,17 +79,164 @@ export const walk = async (state) => {
     }
     return state;
 };
+// A list of known security selectors that rely on
+// data from the security-archive in order to work
+const securitySelectors = new Set([
+    ':abandoned',
+    ':confused',
+    ':cve',
+    ':cwe',
+    ':debug',
+    ':deprecated',
+    ':dynamic',
+    ':entropic',
+    ':env',
+    ':eval',
+    ':fs',
+    ':license',
+    ':malware',
+    ':minified',
+    ':native',
+    ':network',
+    ':obfuscated',
+    ':scanned',
+    ':score',
+    ':scripts',
+    ':sev',
+    ':severity',
+    ':shell',
+    ':shrinkwrap',
+    ':squat',
+    ':suspicious',
+    ':tracker',
+    ':trivial',
+    ':undesirable',
+    ':unknown',
+    ':unmaintained',
+    ':unpopular',
+    ':unstable',
+]);
+const setMethodToJSON = (node) => {
+    const { toJSON } = node;
+    const insights = node.insights;
+    node.toJSON = () => ({
+        ...toJSON.call(node),
+        insights,
+    });
+};
 export class Query {
     #cache;
     #graph;
-    constructor({ graph }) {
+    #retries;
+    #specOptions;
+    #securityArchive;
+    /**
+     * Helper method to determine if a given query string is using any of
+     * the known security selectors. This is useful so that operations can
+     * skip hydrating the security archive if it's not needed.
+     */
+    static hasSecuritySelectors(query) {
+        for (const selector of securitySelectors) {
+            if (query.includes(selector)) {
+                return true;
+            }
+        }
+        return false;
+    }
+    constructor({ graph, retries, specOptions, securityArchive, }) {
         this.#cache = new Map();
         this.#graph = graph;
+        this.#retries = retries ?? 3;
+        this.#specOptions = specOptions;
+        this.#securityArchive = securityArchive;
+    }
+    #getQueryResponseEdges(_edges) {
+        return Array.from(_edges);
     }
-    async search(query) {
-        if (typeof query !== 'string') {
-            throw new TypeError('Query search argument needs to be a string');
+    #getQueryResponseNodes(_nodes) {
+        const nodes = Array.from(_nodes);
+        for (const node of nodes) {
+            const securityArchiveEntry = this.#securityArchive?.get(node.id);
+            // if a security archive entry is not found then the insights object
+            // should just be empty with scanned=false
+            if (!securityArchiveEntry) {
+                node.insights = {
+                    scanned: false,
+                };
+                setMethodToJSON(node);
+                continue;
+            }
+            // if a security archive entry is found then we can populate the insights
+            node.insights = {
+                scanned: true,
+                score: securityArchiveEntry.score,
+                abandoned: securityArchiveEntry.alerts.some(i => i.type === 'missingAuthor'),
+                confused: securityArchiveEntry.alerts.some(i => i.type === 'manifestConfusion'),
+                cve: securityArchiveEntry.alerts
+                    .filter(i => i.props?.cveId)
+                    // can not be undefined because of the filter above but TS doesn't know that
+                    // eslint-disable-next-line @typescript-eslint/no-non-null-assertion, @typescript-eslint/no-non-null-asserted-optional-chain
+                    .map(i => i.props?.cveId),
+                cwe: Array.from(new Set(securityArchiveEntry.alerts
+                    .filter(i => i.props?.cveId)
+                    .flatMap(i => i.props?.cwes?.map(j => j.id)))),
+                debug: securityArchiveEntry.alerts.some(i => i.type === 'debugAccess'),
+                deprecated: securityArchiveEntry.alerts.some(i => i.type === 'deprecated'),
+                dynamic: securityArchiveEntry.alerts.some(i => i.type === 'dynamicRequire'),
+                entropic: securityArchiveEntry.alerts.some(i => i.type === 'highEntropyStrings'),
+                env: securityArchiveEntry.alerts.some(i => i.type === 'envVars'),
+                eval: securityArchiveEntry.alerts.some(i => i.type === 'usesEval'),
+                fs: securityArchiveEntry.alerts.some(i => i.type === 'filesystemAccess'),
+                license: {
+                    unlicensed: securityArchiveEntry.alerts.some(i => i.type === 'explicitlyUnlicensedItem'),
+                    misc: securityArchiveEntry.alerts.some(i => i.type === 'miscLicenseIssues'),
+                    restricted: securityArchiveEntry.alerts.some(i => i.type === 'nonpermissiveLicense'),
+                    ambiguous: securityArchiveEntry.alerts.some(i => i.type === 'ambiguousClassifier'),
+                    copyleft: securityArchiveEntry.alerts.some(i => i.type === 'copyleftLicense'),
+                    unknown: securityArchiveEntry.alerts.some(i => i.type === 'unidentifiedLicense'),
+                    none: securityArchiveEntry.alerts.some(i => i.type === 'noLicenseFound'),
+                    exception: securityArchiveEntry.alerts.some(i => i.type === 'licenseException'),
+                },
+                malware: {
+                    low: securityArchiveEntry.alerts.some(i => i.type === 'gptAnomaly'),
+                    medium: securityArchiveEntry.alerts.some(i => i.type === 'gptSecurity'),
+                    high: securityArchiveEntry.alerts.some(i => i.type === 'gptMalware'),
+                    critical: securityArchiveEntry.alerts.some(i => i.type === 'malware'),
+                },
+                minified: securityArchiveEntry.alerts.some(i => i.type === 'minifiedFile'),
+                native: securityArchiveEntry.alerts.some(i => i.type === 'hasNativeCode'),
+                network: securityArchiveEntry.alerts.some(i => i.type === 'networkAccess'),
+                obfuscated: securityArchiveEntry.alerts.some(i => i.type === 'obfuscatedFile'),
+                scripts: securityArchiveEntry.alerts.some(i => i.type === 'installScripts'),
+                severity: {
+                    low: securityArchiveEntry.alerts.some(i => i.type === 'mildCVE'),
+                    medium: securityArchiveEntry.alerts.some(i => i.type === 'potentialVulnerability'),
+                    high: securityArchiveEntry.alerts.some(i => i.type === 'cve'),
+                    critical: securityArchiveEntry.alerts.some(i => i.type === 'criticalCVE'),
+                },
+                shell: securityArchiveEntry.alerts.some(i => i.type === 'shellAccess'),
+                shrinkwrap: securityArchiveEntry.alerts.some(i => i.type === 'shrinkwrap'),
+                squat: {
+                    medium: securityArchiveEntry.alerts.some(i => i.type === 'gptDidYouMean'),
+                    critical: securityArchiveEntry.alerts.some(i => i.type === 'didYouMean'),
+                },
+                suspicious: securityArchiveEntry.alerts.some(i => i.type === 'suspiciousStarActivity'),
+                tracker: securityArchiveEntry.alerts.some(i => i.type === 'telemetry'),
+                trivial: securityArchiveEntry.alerts.some(i => i.type === 'trivialPackage'),
+                undesirable: securityArchiveEntry.alerts.some(i => i.type === 'troll'),
+                unknown: securityArchiveEntry.alerts.some(i => i.type === 'newAuthor'),
+                unmaintained: securityArchiveEntry.alerts.some(i => i.type === 'unmaintained'),
+                unpopular: securityArchiveEntry.alerts.some(i => i.type === 'unpopularPackage'),
+                unstable: securityArchiveEntry.alerts.some(i => i.type === 'unstableOwnership'),
+            };
+            setMethodToJSON(node);
         }
+        return nodes;
+    }
+    /**
+     * Search the graph for nodes and edges that match the given query.
+     */
+    async search(query, signal) {
         if (!query)
             return { edges: [], nodes: [] };
         const cachedResult = this.#cache.get(query);
@@ -92,10 +245,24 @@ export class Query {
         }
         const nodes = new Set(Array.from(this.#graph.nodes.values()));
         const edges = new Set(Array.from(this.#graph.edges));
+        // parse the query string into AST
+        const current = parse(query);
+        // set loose mode for the entire parse in case there are multiple selectors
+        // so that using invalid pseudo selectors or other query language parser
+        // errors won't throw an error,
+        // e.g: `:root > *, #a, :foo` still returns results for `:root > ` and `#a`
+        // while :foo is ignored
+        const loose = asPostcssNodeWithChildren(current).nodes.length > 1;
         // builds initial state and walks over it,
         // retrieving the collected result
         const { collect } = await walk({
-            current: postcssSelectorParser().astSync(query),
+            cancellable: async () => {
+                await new Promise(resolve => {
+                    setTimeout(resolve, 0);
+                });
+                signal?.throwIfAborted();
+            },
+            current,
             initial: {
                 nodes: new Set(nodes),
                 edges: new Set(edges),
@@ -104,15 +271,81 @@ export class Query {
                 nodes: new Set(),
                 edges: new Set(),
             },
+            loose,
             partial: { nodes, edges },
+            retries: this.#retries,
+            signal,
+            securityArchive: this.#securityArchive,
+            specOptions: this.#specOptions,
             walk,
         });
         const res = {
-            edges: Array.from(collect.edges),
-            nodes: Array.from(collect.nodes),
+            edges: this.#getQueryResponseEdges(collect.edges),
+            nodes: this.#getQueryResponseNodes(collect.nodes),
         };
         this.#cache.set(query, res);
         return res;
     }
+    /**
+     * Parses a query string in order to retrieve an array of tokens.
+     */
+    static getQueryTokens(query) {
+        if (!query)
+            return [];
+        const tokens = [];
+        const ast = (q) => {
+            try {
+                return parse(q);
+            }
+            catch (_e) {
+                return ast(q.slice(0, -1));
+            }
+        };
+        const processNode = (node) => {
+            for (const key of selectorsMap.keys()) {
+                if (node.type === key && node.type !== 'root') {
+                    let token = `${node.spaces.before}${node.value}${node.spaces.after}`;
+                    if (isIdentifierNode(node)) {
+                        token = `${node.spaces.before}#${node.value}${node.spaces.after}`;
+                    }
+                    else if (isSelectorNode(node)) {
+                        token = `${node.spaces.before},${node.spaces.after}`;
+                    }
+                    else if (isAttributeNode(node)) {
+                        token = String(node.source?.start?.column &&
+                            node.source.end?.column &&
+                            `${node.spaces.before}${query.slice(node.source.start.column - 1, node.source.end.column)}${node.spaces.after}`);
+                    }
+                    if (isPostcssNodeWithChildren(node) &&
+                        isPseudoNode(node) &&
+                        node.nodes.length) {
+                        token = String(token.split('(')[0]);
+                        token += '(';
+                    }
+                    if (!isSelectorNode(node) ||
+                        node.parent?.nodes.indexOf(node) !== 0) {
+                        tokens.push({
+                            ...node,
+                            token,
+                        });
+                    }
+                }
+            }
+            if (isPostcssNodeWithChildren(node)) {
+                for (const child of node.nodes) {
+                    processNode(child);
+                }
+                if (isPseudoNode(node) && node.nodes.length) {
+                    tokens.push({
+                        ...node,
+                        token: ')' + node.spaces.after,
+                        type: 'pseudo',
+                    });
+                }
+            }
+        };
+        processNode(ast(query));
+        return tokens;
+    }
 }
 //# sourceMappingURL=index.js.map

package/dist/esm/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,qBAAqB,CAAA;AAM3C,OAAO,qBAAqB,MAAM,yBAAyB,CAAA;AAC3D,OAAO,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAA;AAC1C,OAAO,EAAE,OAAO,EAAE,MAAM,YAAY,CAAA;AACpC,OAAO,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAA;AAC5C,OAAO,EAAE,EAAE,EAAE,MAAM,SAAS,CAAA;AAC5B,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAA;AACpC,OAAO,EAIL,yBAAyB,EACzB,yBAAyB,EACzB,cAAc,GAEf,MAAM,YAAY,CAAA;AAEnB,cAAc,YAAY,CAAA;AAE1B,MAAM,MAAM,GAAG,KAAK,EAAE,KAAkB,EAAE,EAAE,CAAC,KAAK,CAAA;AAElD,MAAM,SAAS,GAAG;IAChB,SAAS;IACT,KAAK,EAAE,OAAO;IACd,UAAU;IACV,OAAO,EAAE,MAAM;IACf,EAAE;IACF,OAAO,EAAE,MAAM;IACf,MAAM;IACN,IAAI,EAAE,MAAM;IACZ,QAAQ,EAAE,KAAK,EAAE,KAAkB,EAAE,EAAE;QACrC,KAAK,CAAC,OAAO,CAAC,KAAK,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAA;QAClD,KAAK,CAAC,OAAO,CAAC,KAAK,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAA;QAClD,OAAO,KAAK,CAAA;IACd,CAAC;IACD,MAAM,EAAE,KAAK,EAAE,KAAkB,EAAE,EAAE;QACnC,MAAM,KAAK,CAAC,sBAAsB,EAAE,EAAE,KAAK,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC,CAAA;IAC/D,CAAC;IACD,GAAG,EAAE,KAAK,EAAE,KAAkB,EAAE,EAAE;QAChC,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,KAAK,GAAG,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,KAAK,GAAG,EAAE,CAAC;YAC/D,MAAM,KAAK,CAAC,sBAAsB,EAAE,EAAE,KAAK,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC,CAAA;QAC/D,CAAC;QACD,OAAO,KAAK,CAAA;IACd,CAAC;IACD,SAAS,EAAE,MAAM;CAClB,CAAA;AACD,MAAM,YAAY,GAAG,IAAI,GAAG,CAC1B,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAC1B,CAAA;AAED,MAAM,CAAC,MAAM,IAAI,GAAG,KAAK,EACvB,KAAkB,EACI,EAAE;IACxB,MAAM,QAAQ,GAAG,YAAY,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAA;IAErD,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,IAAI,KAAK,CAAC,KAAK,EAAE,CAAC;YAChB,OAAO,KAAK,CAAA;QACd,CAAC;QAED,MAAM,IAAI,KAAK,CACb,kCAAkC,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,CACvD,CAAA;IACH,CAAC;IACD,KAAK,GAAG,MAAM,QAAQ,CAAC,KAAK,CAAC,CAAA;IAE7B,kDAAkD;IAClD,IACE,yBAAyB,CAAC,KAAK,CAAC,OAAO,CAAC;QACxC,KAAK,CAAC,OAAO,CAAC,IAAI,KAAK,QAAQ,EAC/B,CAAC;QACD,MAAM,IAAI,GAA4B,yBAAyB,CAC7D,KAAK,CAAC,OAAO,CACd,CAAA;QAED,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC;YACtB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;gBAC3C,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAA;gBAC7B,2DAA2D;gBAC3D,IAAI,CAAC,OAAO;oBAAE,SAAQ;gBAEtB,MAAM,UAAU,GAAgB;oBAC9B,GAAG,KAAK;oBACR,OAAO;oBACP,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC;oBACvB,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC;iBACxB,CAAA;gBACD,KAAK,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,CAAA;YAChC,CAAC;QACH,CAAC;QAED,IAAI,cAAc,CAAC,IAAI,CAAC,EAAE,CAAC;YACzB,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;gBACvC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAA;YAC/B,CAAC;YACD,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;gBACvC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAA;YAC/B,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO,KAAK,CAAA;AACd,CAAC,CAAA;AAMD,MAAM,OAAO,KAAK;IAChB,MAAM,CAA4B;IAClC,MAAM,CAAW;IAEjB,YAAY,EAAE,KAAK,EAAgB;QACjC,IAAI,CAAC,MAAM,GAAG,IAAI,GAAG,EAAE,CAAA;QACvB,IAAI,CAAC,MAAM,GAAG,KAAK,CAAA;IACrB,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,KAAa;QACxB,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;YAC9B,MAAM,IAAI,SAAS,CACjB,4CAA4C,CAC7C,CAAA;QACH,CAAC;QAED,IAAI,CAAC,KAAK;YAAE,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,CAAA;QAE3C,MAAM,YAAY,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,CAAA;QAC3C,IAAI,YAAY,EAAE,CAAC;YACjB,OAAO,YAAY,CAAA;QACrB,CAAC;QAED,MAAM,KAAK,GAAG,IAAI,GAAG,CACnB,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,CACvC,CAAA;QACD,MAAM,KAAK,GAAG,IAAI,GAAG,CAAW,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAA;QAE9D,0CAA0C;QAC1C,kCAAkC;QAClC,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,IAAI,CAAC;YAC7B,OAAO,EAAE,qBAAqB,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;YAC/C,OAAO,EAAE;gBACP,KAAK,EAAE,IAAI,GAAG,CAAC,KAAK,CAAC;gBACrB,KAAK,EAAE,IAAI,GAAG,CAAC,KAAK,CAAC;aACtB;YACD,OAAO,EAAE;gBACP,KAAK,EAAE,IAAI,GAAG,EAAY;gBAC1B,KAAK,EAAE,IAAI,GAAG,EAAY;aAC3B;YACD,OAAO,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE;YACzB,IAAI;SACL,CAAC,CAAA;QAEF,MAAM,GAAG,GAAkB;YACzB,KAAK,EAAE,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC;YAChC,KAAK,EAAE,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC;SACjC,CAAA;QACD,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,EAAE,GAAG,CAAC,CAAA;QAC3B,OAAO,GAAG,CAAA;IACZ,CAAC;CACF","sourcesContent":["import { error } from '@vltpkg/error-cause'\nimport {\n  type EdgeLike,\n  type GraphLike,\n  type NodeLike,\n} from '@vltpkg/graph'\nimport postcssSelectorParser from 'postcss-selector-parser'\nimport { attribute } from './attribute.js'\nimport { classFn } from './class.js'\nimport { combinator } from './combinator.js'\nimport { id } from './id.js'\nimport { pseudo } from './pseudo.js'\nimport {\n  type PostcssNodeWithChildren,\n  type ParserState,\n  type ParserFn,\n  isPostcssNodeWithChildren,\n  asPostcssNodeWithChildren,\n  isSelectorNode,\n  type QueryResponse,\n} from './types.js'\n\nexport * from './types.js'\n\nconst noopFn = async (state: ParserState) => state\n\nconst selectors = {\n  attribute,\n  class: classFn,\n  combinator,\n  comment: noopFn,\n  id,\n  nesting: noopFn,\n  pseudo,\n  root: noopFn,\n  selector: async (state: ParserState) => {\n    state.partial.nodes = new Set(state.initial.nodes)\n    state.partial.edges = new Set(state.initial.edges)\n    return state\n  },\n  string: async (state: ParserState) => {\n    throw error('Unsupported selector', { found: state.current })\n  },\n  tag: async (state: ParserState) => {\n    if (state.current.value !== '{' && state.current.value !== '}') {\n      throw error('Unsupported selector', { found: state.current })\n    }\n    return state\n  },\n  universal: noopFn,\n}\nconst selectorsMap = new Map<string, ParserFn>(\n  Object.entries(selectors),\n)\n\nexport const walk = async (\n  state: ParserState,\n): Promise<ParserState> => {\n  const parserFn = selectorsMap.get(state.current.type)\n\n  if (!parserFn) {\n    if (state.loose) {\n      return state\n    }\n\n    throw new Error(\n      `Missing parser for query node: ${state.current.type}`,\n    )\n  }\n  state = await parserFn(state)\n\n  // pseudo selectors handle their own sub selectors\n  if (\n    isPostcssNodeWithChildren(state.current) &&\n    state.current.type !== 'pseudo'\n  ) {\n    const node: PostcssNodeWithChildren = asPostcssNodeWithChildren(\n      state.current,\n    )\n\n    if (node.nodes.length) {\n      for (let i = 0; i < node.nodes.length; i++) {\n        const current = node.nodes[i]\n        /* c8 ignore next -- impossible but TS doesn't know that */\n        if (!current) continue\n\n        const childState: ParserState = {\n          ...state,\n          current,\n          next: node.nodes[i + 1],\n          prev: node.nodes[i - 1],\n        }\n        state = await walk(childState)\n      }\n    }\n\n    if (isSelectorNode(node)) {\n      for (const edge of state.partial.edges) {\n        state.collect.edges.add(edge)\n      }\n      for (const node of state.partial.nodes) {\n        state.collect.nodes.add(node)\n      }\n    }\n  }\n  return state\n}\n\nexport type QueryOptions = {\n  graph: GraphLike\n}\n\nexport class Query {\n  #cache: Map<string, QueryResponse>\n  #graph: GraphLike\n\n  constructor({ graph }: QueryOptions) {\n    this.#cache = new Map()\n    this.#graph = graph\n  }\n\n  async search(query: string): Promise<QueryResponse> {\n    if (typeof query !== 'string') {\n      throw new TypeError(\n        'Query search argument needs to be a string',\n      )\n    }\n\n    if (!query) return { edges: [], nodes: [] }\n\n    const cachedResult = this.#cache.get(query)\n    if (cachedResult) {\n      return cachedResult\n    }\n\n    const nodes = new Set<NodeLike>(\n      Array.from(this.#graph.nodes.values()),\n    )\n    const edges = new Set<EdgeLike>(Array.from(this.#graph.edges))\n\n    // builds initial state and walks over it,\n    // retrieving the collected result\n    const { collect } = await walk({\n      current: postcssSelectorParser().astSync(query),\n      initial: {\n        nodes: new Set(nodes),\n        edges: new Set(edges),\n      },\n      collect: {\n        nodes: new Set<NodeLike>(),\n        edges: new Set<EdgeLike>(),\n      },\n      partial: { nodes, edges },\n      walk,\n    })\n\n    const res: QueryResponse = {\n      edges: Array.from(collect.edges),\n      nodes: Array.from(collect.nodes),\n    }\n    this.#cache.set(query, res)\n    return res\n  }\n}\n"]}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,qBAAqB,CAAA;AAI3C,OAAO,EAAE,KAAK,EAAE,MAAM,aAAa,CAAA;AACnC,OAAO,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAA;AAC1C,OAAO,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAA;AAC5C,OAAO,EAAE,EAAE,EAAE,MAAM,SAAS,CAAA;AAC5B,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAA;AACpC,OAAO,EACL,yBAAyB,EACzB,yBAAyB,EACzB,cAAc,EACd,YAAY,EACZ,gBAAgB,EAChB,eAAe,GAChB,MAAM,YAAY,CAAA;AAYnB,cAAc,YAAY,CAAA;AAE1B,MAAM,MAAM,GAAG,KAAK,EAAE,KAAkB,EAAE,EAAE,CAAC,KAAK,CAAA;AAElD,MAAM,SAAS,GAAG;IAChB,SAAS;IACT,qBAAqB;IACrB,KAAK,EAAE,KAAK,EAAE,KAAkB,EAAE,EAAE;QAClC,MAAM,KAAK,CAAC,sBAAsB,EAAE,EAAE,KAAK,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC,CAAA;IAC/D,CAAC;IACD,mBAAmB;IACnB,UAAU;IACV,OAAO,EAAE,MAAM;IACf,EAAE;IACF,OAAO,EAAE,MAAM;IACf,MAAM;IACN,IAAI,EAAE,MAAM;IACZ,QAAQ,EAAE,KAAK,EAAE,KAAkB,EAAE,EAAE;QACrC,KAAK,CAAC,OAAO,CAAC,KAAK,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAA;QAClD,KAAK,CAAC,OAAO,CAAC,KAAK,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAA;QAClD,OAAO,KAAK,CAAA;IACd,CAAC;IACD,MAAM,EAAE,KAAK,EAAE,KAAkB,EAAE,EAAE;QACnC,MAAM,KAAK,CAAC,sBAAsB,EAAE,EAAE,KAAK,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC,CAAA;IAC/D,CAAC;IACD,GAAG,EAAE,KAAK,EAAE,KAAkB,EAAE,EAAE;QAChC,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,KAAK,GAAG,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,KAAK,GAAG,EAAE,CAAC;YAC/D,MAAM,KAAK,CAAC,sBAAsB,EAAE,EAAE,KAAK,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC,CAAA;QAC/D,CAAC;QACD,OAAO,KAAK,CAAA;IACd,CAAC;IACD,SAAS,EAAE,MAAM;CAClB,CAAA;AACD,MAAM,YAAY,GAAG,IAAI,GAAG,CAC1B,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAC1B,CAAA;AAED,MAAM,CAAC,MAAM,IAAI,GAAG,KAAK,EACvB,KAAkB,EACI,EAAE;IACxB,MAAM,KAAK,CAAC,WAAW,EAAE,CAAA;IAEzB,MAAM,QAAQ,GAAG,YAAY,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAA;IAErD,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,IAAI,KAAK,CAAC,KAAK,EAAE,CAAC;YAChB,OAAO,KAAK,CAAA;QACd,CAAC;QAED,MAAM,KAAK,CACT,kCAAkC,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,EACtD;YACE,KAAK,EAAE,KAAK,CAAC,OAAO;SACrB,CACF,CAAA;IACH,CAAC;IACD,KAAK,GAAG,MAAM,QAAQ,CAAC,KAAK,CAAC,CAAA;IAE7B,kDAAkD;IAClD,IACE,yBAAyB,CAAC,KAAK,CAAC,OAAO,CAAC;QACxC,KAAK,CAAC,OAAO,CAAC,IAAI,KAAK,QAAQ,EAC/B,CAAC;QACD,MAAM,IAAI,GAA4B,yBAAyB,CAC7D,KAAK,CAAC,OAAO,CACd,CAAA;QAED,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC;YACtB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;gBAC3C,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAA;gBAC7B,2DAA2D;gBAC3D,IAAI,CAAC,OAAO;oBAAE,SAAQ;gBAEtB,MAAM,UAAU,GAAgB;oBAC9B,GAAG,KAAK;oBACR,OAAO;oBACP,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC;oBACvB,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC;iBACxB,CAAA;gBACD,KAAK,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,CAAA;YAChC,CAAC;QACH,CAAC;QAED,IAAI,cAAc,CAAC,IAAI,CAAC,EAAE,CAAC;YACzB,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;gBACvC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAA;YAC/B,CAAC;YACD,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;gBACvC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAA;YAC/B,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO,KAAK,CAAA;AACd,CAAC,CAAA;AASD,kDAAkD;AAClD,kDAAkD;AAClD,MAAM,iBAAiB,GAAG,IAAI,GAAG,CAAC;IAChC,YAAY;IACZ,WAAW;IACX,MAAM;IACN,MAAM;IACN,QAAQ;IACR,aAAa;IACb,UAAU;IACV,WAAW;IACX,MAAM;IACN,OAAO;IACP,KAAK;IACL,UAAU;IACV,UAAU;IACV,WAAW;IACX,SAAS;IACT,UAAU;IACV,aAAa;IACb,UAAU;IACV,QAAQ;IACR,UAAU;IACV,MAAM;IACN,WAAW;IACX,QAAQ;IACR,aAAa;IACb,QAAQ;IACR,aAAa;IACb,UAAU;IACV,UAAU;IACV,cAAc;IACd,UAAU;IACV,eAAe;IACf,YAAY;IACZ,WAAW;CACZ,CAAC,CAAA;AAEF,MAAM,eAAe,GAAG,CAAC,IAAuB,EAAE,EAAE;IAClD,MAAM,EAAE,MAAM,EAAE,GAAG,IAAI,CAAA;IACvB,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAA;IAC9B,IAAI,CAAC,MAAM,GAAG,GAAG,EAAE,CAAC,CAAC;QACnB,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC;QACpB,QAAQ;KACT,CAAC,CAAA;AACJ,CAAC,CAAA;AAED,MAAM,OAAO,KAAK;IAChB,MAAM,CAA4B;IAClC,MAAM,CAAW;IACjB,QAAQ,CAAQ;IAChB,YAAY,CAAa;IACzB,gBAAgB,CAAiC;IAEjD;;;;OAIG;IACH,MAAM,CAAC,oBAAoB,CAAC,KAAa;QACvC,KAAK,MAAM,QAAQ,IAAI,iBAAiB,EAAE,CAAC;YACzC,IAAI,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;gBAC7B,OAAO,IAAI,CAAA;YACb,CAAC;QACH,CAAC;QACD,OAAO,KAAK,CAAA;IACd,CAAC;IAED,YAAY,EACV,KAAK,EACL,OAAO,EACP,WAAW,EACX,eAAe,GACF;QACb,IAAI,CAAC,MAAM,GAAG,IAAI,GAAG,EAAE,CAAA;QACvB,IAAI,CAAC,MAAM,GAAG,KAAK,CAAA;QACnB,IAAI,CAAC,QAAQ,GAAG,OAAO,IAAI,CAAC,CAAA;QAC5B,IAAI,CAAC,YAAY,GAAG,WAAW,CAAA;QAC/B,IAAI,CAAC,gBAAgB,GAAG,eAAe,CAAA;IACzC,CAAC;IAED,sBAAsB,CAAC,MAAqB;QAC1C,OAAO,KAAK,CAAC,IAAI,CAAC,MAAM,CAAwB,CAAA;IAClD,CAAC;IAED,sBAAsB,CAAC,MAAqB;QAC1C,MAAM,KAAK,GAAG,KAAK,CAAC,IAAI,CAAC,MAAM,CAAwB,CAAA;QACvD,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,MAAM,oBAAoB,GAAG,IAAI,CAAC,gBAAgB,EAAE,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;YAEhE,oEAAoE;YACpE,0CAA0C;YAC1C,IAAI,CAAC,oBAAoB,EAAE,CAAC;gBAC1B,IAAI,CAAC,QAAQ,GAAG;oBACd,OAAO,EAAE,KAAK;iBACf,CAAA;gBAED,eAAe,CAAC,IAAI,CAAC,CAAA;gBACrB,SAAQ;YACV,CAAC;YAED,yEAAyE;YACzE,IAAI,CAAC,QAAQ,GAAG;gBACd,OAAO,EAAE,IAAI;gBACb,KAAK,EAAE,oBAAoB,CAAC,KAAK;gBACjC,SAAS,EAAE,oBAAoB,CAAC,MAAM,CAAC,IAAI,CACzC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,eAAe,CAChC;gBACD,QAAQ,EAAE,oBAAoB,CAAC,MAAM,CAAC,IAAI,CACxC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,mBAAmB,CACpC;gBACD,GAAG,EAAE,oBAAoB,CAAC,MAAM;qBAC7B,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,EAAE,KAAK,CAAC;oBAC5B,4EAA4E;oBAC5E,4HAA4H;qBAC3H,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,EAAE,KAAM,CAAC;gBAC5B,GAAG,EAAE,KAAK,CAAC,IAAI,CACb,IAAI,GAAG,CACL,oBAAoB,CAAC,MAAM;qBACxB,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,EAAE,KAAK,CAAC;qBAC3B,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAC/C,CACmB;gBACtB,KAAK,EAAE,oBAAoB,CAAC,MAAM,CAAC,IAAI,CACrC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,aAAa,CAC9B;gBACD,UAAU,EAAE,oBAAoB,CAAC,MAAM,CAAC,IAAI,CAC1C,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,YAAY,CAC7B;gBACD,OAAO,EAAE,oBAAoB,CAAC,MAAM,CAAC,IAAI,CACvC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,gBAAgB,CACjC;gBACD,QAAQ,EAAE,oBAAoB,CAAC,MAAM,CAAC,IAAI,CACxC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,oBAAoB,CACrC;gBACD,GAAG,EAAE,oBAAoB,CAAC,MAAM,CAAC,IAAI,CACnC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,SAAS,CAC1B;gBACD,IAAI,EAAE,oBAAoB,CAAC,MAAM,CAAC,IAAI,CACpC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,UAAU,CAC3B;gBACD,EAAE,EAAE,oBAAoB,CAAC,MAAM,CAAC,IAAI,CAClC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,kBAAkB,CACnC;gBACD,OAAO,EAAE;oBACP,UAAU,EAAE,oBAAoB,CAAC,MAAM,CAAC,IAAI,CAC1C,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,0BAA0B,CAC3C;oBACD,IAAI,EAAE,oBAAoB,CAAC,MAAM,CAAC,IAAI,CACpC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,mBAAmB,CACpC;oBACD,UAAU,EAAE,oBAAoB,CAAC,MAAM,CAAC,IAAI,CAC1C,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,sBAAsB,CACvC;oBACD,SAAS,EAAE,oBAAoB,CAAC,MAAM,CAAC,IAAI,CACzC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,qBAAqB,CACtC;oBACD,QAAQ,EAAE,oBAAoB,CAAC,MAAM,CAAC,IAAI,CACxC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,iBAAiB,CAClC;oBACD,OAAO,EAAE,oBAAoB,CAAC,MAAM,CAAC,IAAI,CACvC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,qBAAqB,CACtC;oBACD,IAAI,EAAE,oBAAoB,CAAC,MAAM,CAAC,IAAI,CACpC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,gBAAgB,CACjC;oBACD,SAAS,EAAE,oBAAoB,CAAC,MAAM,CAAC,IAAI,CACzC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,kBAAkB,CACnC;iBACF;gBACD,OAAO,EAAE;oBACP,GAAG,EAAE,oBAAoB,CAAC,MAAM,CAAC,IAAI,CACnC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,YAAY,CAC7B;oBACD,MAAM,EAAE,oBAAoB,CAAC,MAAM,CAAC,IAAI,CACtC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,aAAa,CAC9B;oBACD,IAAI,EAAE,oBAAoB,CAAC,MAAM,CAAC,IAAI,CACpC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,YAAY,CAC7B;oBACD,QAAQ,EAAE,oBAAoB,CAAC,MAAM,CAAC,IAAI,CACxC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,SAAS,CAC1B;iBACF;gBACD,QAAQ,EAAE,oBAAoB,CAAC,MAAM,CAAC,IAAI,CACxC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,cAAc,CAC/B;gBACD,MAAM,EAAE,oBAAoB,CAAC,MAAM,CAAC,IAAI,CACtC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,eAAe,CAChC;gBACD,OAAO,EAAE,oBAAoB,CAAC,MAAM,CAAC,IAAI,CACvC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,eAAe,CAChC;gBACD,UAAU,EAAE,oBAAoB,CAAC,MAAM,CAAC,IAAI,CAC1C,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,gBAAgB,CACjC;gBACD,OAAO,EAAE,oBAAoB,CAAC,MAAM,CAAC,IAAI,CACvC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,gBAAgB,CACjC;gBACD,QAAQ,EAAE;oBACR,GAAG,EAAE,oBAAoB,CAAC,MAAM,CAAC,IAAI,CACnC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,SAAS,CAC1B;oBACD,MAAM,EAAE,oBAAoB,CAAC,MAAM,CAAC,IAAI,CACtC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,wBAAwB,CACzC;oBACD,IAAI,EAAE,oBAAoB,CAAC,MAAM,CAAC,IAAI,CACpC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,KAAK,CACtB;oBACD,QAAQ,EAAE,oBAAoB,CAAC,MAAM,CAAC,IAAI,CACxC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,aAAa,CAC9B;iBACF;gBACD,KAAK,EAAE,oBAAoB,CAAC,MAAM,CAAC,IAAI,CACrC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,aAAa,CAC9B;gBACD,UAAU,EAAE,oBAAoB,CAAC,MAAM,CAAC,IAAI,CAC1C,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,YAAY,CAC7B;gBACD,KAAK,EAAE;oBACL,MAAM,EAAE,oBAAoB,CAAC,MAAM,CAAC,IAAI,CACtC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,eAAe,CAChC;oBACD,QAAQ,EAAE,oBAAoB,CAAC,MAAM,CAAC,IAAI,CACxC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,YAAY,CAC7B;iBACF;gBACD,UAAU,EAAE,oBAAoB,CAAC,MAAM,CAAC,IAAI,CAC1C,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,wBAAwB,CACzC;gBACD,OAAO,EAAE,oBAAoB,CAAC,MAAM,CAAC,IAAI,CACvC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,WAAW,CAC5B;gBACD,OAAO,EAAE,oBAAoB,CAAC,MAAM,CAAC,IAAI,CACvC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,gBAAgB,CACjC;gBACD,WAAW,EAAE,oBAAoB,CAAC,MAAM,CAAC,IAAI,CAC3C,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,OAAO,CACxB;gBACD,OAAO,EAAE,oBAAoB,CAAC,MAAM,CAAC,IAAI,CACvC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,WAAW,CAC5B;gBACD,YAAY,EAAE,oBAAoB,CAAC,MAAM,CAAC,IAAI,CAC5C,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,cAAc,CAC/B;gBACD,SAAS,EAAE,oBAAoB,CAAC,MAAM,CAAC,IAAI,CACzC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,kBAAkB,CACnC;gBACD,QAAQ,EAAE,oBAAoB,CAAC,MAAM,CAAC,IAAI,CACxC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,mBAAmB,CACpC;aACF,CAAA;YAED,eAAe,CAAC,IAAI,CAAC,CAAA;QACvB,CAAC;QACD,OAAO,KAAK,CAAA;IACd,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,MAAM,CACV,KAAa,EACb,MAAoB;QAEpB,IAAI,CAAC,KAAK;YAAE,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,CAAA;QAE3C,MAAM,YAAY,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,CAAA;QAC3C,IAAI,YAAY,EAAE,CAAC;YACjB,OAAO,YAAY,CAAA;QACrB,CAAC;QAED,MAAM,KAAK,GAAG,IAAI,GAAG,CACnB,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,CACvC,CAAA;QACD,MAAM,KAAK,GAAG,IAAI,GAAG,CAAW,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAA;QAE9D,kCAAkC;QAClC,MAAM,OAAO,GAAG,KAAK,CAAC,KAAK,CAAC,CAAA;QAC5B,2EAA2E;QAC3E,wEAAwE;QACxE,+BAA+B;QAC/B,2EAA2E;QAC3E,wBAAwB;QACxB,MAAM,KAAK,GAAG,yBAAyB,CAAC,OAAO,CAAC,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAA;QACjE,0CAA0C;QAC1C,kCAAkC;QAClC,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,IAAI,CAAC;YAC7B,WAAW,EAAE,KAAK,IAAI,EAAE;gBACtB,MAAM,IAAI,OAAO,CAAC,OAAO,CAAC,EAAE;oBAC1B,UAAU,CAAC,OAAO,EAAE,CAAC,CAAC,CAAA;gBACxB,CAAC,CAAC,CAAA;gBACF,MAAM,EAAE,cAAc,EAAE,CAAA;YAC1B,CAAC;YACD,OAAO;YACP,OAAO,EAAE;gBACP,KAAK,EAAE,IAAI,GAAG,CAAC,KAAK,CAAC;gBACrB,KAAK,EAAE,IAAI,GAAG,CAAC,KAAK,CAAC;aACtB;YACD,OAAO,EAAE;gBACP,KAAK,EAAE,IAAI,GAAG,EAAY;gBAC1B,KAAK,EAAE,IAAI,GAAG,EAAY;aAC3B;YACD,KAAK;YACL,OAAO,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE;YACzB,OAAO,EAAE,IAAI,CAAC,QAAQ;YACtB,MAAM;YACN,eAAe,EAAE,IAAI,CAAC,gBAAgB;YACtC,WAAW,EAAE,IAAI,CAAC,YAAY;YAC9B,IAAI;SACL,CAAC,CAAA;QAEF,MAAM,GAAG,GAAkB;YACzB,KAAK,EAAE,IAAI,CAAC,sBAAsB,CAAC,OAAO,CAAC,KAAK,CAAC;YACjD,KAAK,EAAE,IAAI,CAAC,sBAAsB,CAAC,OAAO,CAAC,KAAK,CAAC;SAClD,CAAA;QACD,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,EAAE,GAAG,CAAC,CAAA;QAC3B,OAAO,GAAG,CAAA;IACZ,CAAC;IAED;;OAEG;IACH,MAAM,CAAC,cAAc,CAAC,KAAa;QACjC,IAAI,CAAC,KAAK;YAAE,OAAO,EAAE,CAAA;QAErB,MAAM,MAAM,GAA0B,EAAE,CAAA;QAExC,MAAM,GAAG,GAAG,CAAC,CAAS,EAAE,EAAE;YACxB,IAAI,CAAC;gBACH,OAAO,KAAK,CAAC,CAAC,CAAC,CAAA;YACjB,CAAC;YAAC,OAAO,EAAE,EAAE,CAAC;gBACZ,OAAO,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAA;YAC5B,CAAC;QACH,CAAC,CAAA;QAED,MAAM,WAAW,GAAG,CAAC,IAAiB,EAAE,EAAE;YACxC,KAAK,MAAM,GAAG,IAAI,YAAY,CAAC,IAAI,EAAE,EAAE,CAAC;gBACtC,IAAI,IAAI,CAAC,IAAI,KAAK,GAAG,IAAI,IAAI,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;oBAC9C,IAAI,KAAK,GAAG,GAAG,IAAI,CAAC,MAAM,CAAC,MAAM,GAAG,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,CAAA;oBAEpE,IAAI,gBAAgB,CAAC,IAAI,CAAC,EAAE,CAAC;wBAC3B,KAAK,GAAG,GAAG,IAAI,CAAC,MAAM,CAAC,MAAM,IAAI,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,CAAA;oBACnE,CAAC;yBAAM,IAAI,cAAc,CAAC,IAAI,CAAC,EAAE,CAAC;wBAChC,KAAK,GAAG,GAAG,IAAI,CAAC,MAAM,CAAC,MAAM,IAAI,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,CAAA;oBACtD,CAAC;yBAAM,IAAI,eAAe,CAAC,IAAI,CAAC,EAAE,CAAC;wBACjC,KAAK,GAAG,MAAM,CACZ,IAAI,CAAC,MAAM,EAAE,KAAK,EAAE,MAAM;4BACxB,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE,MAAM;4BACvB,GAAG,IAAI,CAAC,MAAM,CAAC,MAAM,GAAG,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,CAClH,CAAA;oBACH,CAAC;oBAED,IACE,yBAAyB,CAAC,IAAI,CAAC;wBAC/B,YAAY,CAAC,IAAI,CAAC;wBAClB,IAAI,CAAC,KAAK,CAAC,MAAM,EACjB,CAAC;wBACD,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;wBACnC,KAAK,IAAI,GAAG,CAAA;oBACd,CAAC;oBAED,IACE,CAAC,cAAc,CAAC,IAAI,CAAC;wBACrB,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,EACtC,CAAC;wBACD,MAAM,CAAC,IAAI,CAAC;4BACV,GAAG,IAAI;4BACP,KAAK;yBACiB,CAAC,CAAA;oBAC3B,CAAC;gBACH,CAAC;YACH,CAAC;YACD,IAAI,yBAAyB,CAAC,IAAI,CAAC,EAAE,CAAC;gBACpC,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;oBAC/B,WAAW,CAAC,KAAK,CAAC,CAAA;gBACpB,CAAC;gBACD,IAAI,YAAY,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC;oBAC5C,MAAM,CAAC,IAAI,CAAC;wBACV,GAAG,IAAI;wBACP,KAAK,EAAE,GAAG,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK;wBAC9B,IAAI,EAAE,QAAQ;qBACQ,CAAC,CAAA;gBAC3B,CAAC;YACH,CAAC;QACH,CAAC,CAAA;QAED,WAAW,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAA;QACvB,OAAO,MAAM,CAAA;IACf,CAAC;CACF","sourcesContent":["import { error } from '@vltpkg/error-cause'\nimport type { EdgeLike, GraphLike, NodeLike } from '@vltpkg/graph'\nimport type { SpecOptions } from '@vltpkg/spec/browser'\nimport type { SecurityArchiveLike } from '@vltpkg/security-archive'\nimport { parse } from './parser.ts'\nimport { attribute } from './attribute.ts'\nimport { combinator } from './combinator.ts'\nimport { id } from './id.ts'\nimport { pseudo } from './pseudo.ts'\nimport {\n  isPostcssNodeWithChildren,\n  asPostcssNodeWithChildren,\n  isSelectorNode,\n  isPseudoNode,\n  isIdentifierNode,\n  isAttributeNode,\n} from './types.ts'\nimport type {\n  PostcssNode,\n  ParsedSelectorToken,\n  PostcssNodeWithChildren,\n  ParserState,\n  ParserFn,\n  QueryResponse,\n  QueryResponseNode,\n  QueryResponseEdge,\n} from './types.ts'\n\nexport * from './types.ts'\n\nconst noopFn = async (state: ParserState) => state\n\nconst selectors = {\n  attribute,\n  /* c8 ignore start */\n  class: async (state: ParserState) => {\n    throw error('Unsupported selector', { found: state.current })\n  },\n  /* c8 ignore end */\n  combinator,\n  comment: noopFn,\n  id,\n  nesting: noopFn,\n  pseudo,\n  root: noopFn,\n  selector: async (state: ParserState) => {\n    state.partial.nodes = new Set(state.initial.nodes)\n    state.partial.edges = new Set(state.initial.edges)\n    return state\n  },\n  string: async (state: ParserState) => {\n    throw error('Unsupported selector', { found: state.current })\n  },\n  tag: async (state: ParserState) => {\n    if (state.current.value !== '{' && state.current.value !== '}') {\n      throw error('Unsupported selector', { found: state.current })\n    }\n    return state\n  },\n  universal: noopFn,\n}\nconst selectorsMap = new Map<string, ParserFn>(\n  Object.entries(selectors),\n)\n\nexport const walk = async (\n  state: ParserState,\n): Promise<ParserState> => {\n  await state.cancellable()\n\n  const parserFn = selectorsMap.get(state.current.type)\n\n  if (!parserFn) {\n    if (state.loose) {\n      return state\n    }\n\n    throw error(\n      `Missing parser for query node: ${state.current.type}`,\n      {\n        found: state.current,\n      },\n    )\n  }\n  state = await parserFn(state)\n\n  // pseudo selectors handle their own sub selectors\n  if (\n    isPostcssNodeWithChildren(state.current) &&\n    state.current.type !== 'pseudo'\n  ) {\n    const node: PostcssNodeWithChildren = asPostcssNodeWithChildren(\n      state.current,\n    )\n\n    if (node.nodes.length) {\n      for (let i = 0; i < node.nodes.length; i++) {\n        const current = node.nodes[i]\n        /* c8 ignore next -- impossible but TS doesn't know that */\n        if (!current) continue\n\n        const childState: ParserState = {\n          ...state,\n          current,\n          next: node.nodes[i + 1],\n          prev: node.nodes[i - 1],\n        }\n        state = await walk(childState)\n      }\n    }\n\n    if (isSelectorNode(node)) {\n      for (const edge of state.partial.edges) {\n        state.collect.edges.add(edge)\n      }\n      for (const node of state.partial.nodes) {\n        state.collect.nodes.add(node)\n      }\n    }\n  }\n  return state\n}\n\nexport type QueryOptions = {\n  graph: GraphLike\n  retries?: number\n  specOptions: SpecOptions\n  securityArchive: SecurityArchiveLike | undefined\n}\n\n// A list of known security selectors that rely on\n// data from the security-archive in order to work\nconst securitySelectors = new Set([\n  ':abandoned',\n  ':confused',\n  ':cve',\n  ':cwe',\n  ':debug',\n  ':deprecated',\n  ':dynamic',\n  ':entropic',\n  ':env',\n  ':eval',\n  ':fs',\n  ':license',\n  ':malware',\n  ':minified',\n  ':native',\n  ':network',\n  ':obfuscated',\n  ':scanned',\n  ':score',\n  ':scripts',\n  ':sev',\n  ':severity',\n  ':shell',\n  ':shrinkwrap',\n  ':squat',\n  ':suspicious',\n  ':tracker',\n  ':trivial',\n  ':undesirable',\n  ':unknown',\n  ':unmaintained',\n  ':unpopular',\n  ':unstable',\n])\n\nconst setMethodToJSON = (node: QueryResponseNode) => {\n  const { toJSON } = node\n  const insights = node.insights\n  node.toJSON = () => ({\n    ...toJSON.call(node),\n    insights,\n  })\n}\n\nexport class Query {\n  #cache: Map<string, QueryResponse>\n  #graph: GraphLike\n  #retries: number\n  #specOptions: SpecOptions\n  #securityArchive: SecurityArchiveLike | undefined\n\n  /**\n   * Helper method to determine if a given query string is using any of\n   * the known security selectors. This is useful so that operations can\n   * skip hydrating the security archive if it's not needed.\n   */\n  static hasSecuritySelectors(query: string): boolean {\n    for (const selector of securitySelectors) {\n      if (query.includes(selector)) {\n        return true\n      }\n    }\n    return false\n  }\n\n  constructor({\n    graph,\n    retries,\n    specOptions,\n    securityArchive,\n  }: QueryOptions) {\n    this.#cache = new Map()\n    this.#graph = graph\n    this.#retries = retries ?? 3\n    this.#specOptions = specOptions\n    this.#securityArchive = securityArchive\n  }\n\n  #getQueryResponseEdges(_edges: Set<EdgeLike>): QueryResponseEdge[] {\n    return Array.from(_edges) as QueryResponseEdge[]\n  }\n\n  #getQueryResponseNodes(_nodes: Set<NodeLike>): QueryResponseNode[] {\n    const nodes = Array.from(_nodes) as QueryResponseNode[]\n    for (const node of nodes) {\n      const securityArchiveEntry = this.#securityArchive?.get(node.id)\n\n      // if a security archive entry is not found then the insights object\n      // should just be empty with scanned=false\n      if (!securityArchiveEntry) {\n        node.insights = {\n          scanned: false,\n        }\n\n        setMethodToJSON(node)\n        continue\n      }\n\n      // if a security archive entry is found then we can populate the insights\n      node.insights = {\n        scanned: true,\n        score: securityArchiveEntry.score,\n        abandoned: securityArchiveEntry.alerts.some(\n          i => i.type === 'missingAuthor',\n        ),\n        confused: securityArchiveEntry.alerts.some(\n          i => i.type === 'manifestConfusion',\n        ),\n        cve: securityArchiveEntry.alerts\n          .filter(i => i.props?.cveId)\n          // can not be undefined because of the filter above but TS doesn't know that\n          // eslint-disable-next-line @typescript-eslint/no-non-null-assertion, @typescript-eslint/no-non-null-asserted-optional-chain\n          .map(i => i.props?.cveId!),\n        cwe: Array.from(\n          new Set(\n            securityArchiveEntry.alerts\n              .filter(i => i.props?.cveId)\n              .flatMap(i => i.props?.cwes?.map(j => j.id)),\n          ),\n        ) as `CWE-${string}`[],\n        debug: securityArchiveEntry.alerts.some(\n          i => i.type === 'debugAccess',\n        ),\n        deprecated: securityArchiveEntry.alerts.some(\n          i => i.type === 'deprecated',\n        ),\n        dynamic: securityArchiveEntry.alerts.some(\n          i => i.type === 'dynamicRequire',\n        ),\n        entropic: securityArchiveEntry.alerts.some(\n          i => i.type === 'highEntropyStrings',\n        ),\n        env: securityArchiveEntry.alerts.some(\n          i => i.type === 'envVars',\n        ),\n        eval: securityArchiveEntry.alerts.some(\n          i => i.type === 'usesEval',\n        ),\n        fs: securityArchiveEntry.alerts.some(\n          i => i.type === 'filesystemAccess',\n        ),\n        license: {\n          unlicensed: securityArchiveEntry.alerts.some(\n            i => i.type === 'explicitlyUnlicensedItem',\n          ),\n          misc: securityArchiveEntry.alerts.some(\n            i => i.type === 'miscLicenseIssues',\n          ),\n          restricted: securityArchiveEntry.alerts.some(\n            i => i.type === 'nonpermissiveLicense',\n          ),\n          ambiguous: securityArchiveEntry.alerts.some(\n            i => i.type === 'ambiguousClassifier',\n          ),\n          copyleft: securityArchiveEntry.alerts.some(\n            i => i.type === 'copyleftLicense',\n          ),\n          unknown: securityArchiveEntry.alerts.some(\n            i => i.type === 'unidentifiedLicense',\n          ),\n          none: securityArchiveEntry.alerts.some(\n            i => i.type === 'noLicenseFound',\n          ),\n          exception: securityArchiveEntry.alerts.some(\n            i => i.type === 'licenseException',\n          ),\n        },\n        malware: {\n          low: securityArchiveEntry.alerts.some(\n            i => i.type === 'gptAnomaly',\n          ),\n          medium: securityArchiveEntry.alerts.some(\n            i => i.type === 'gptSecurity',\n          ),\n          high: securityArchiveEntry.alerts.some(\n            i => i.type === 'gptMalware',\n          ),\n          critical: securityArchiveEntry.alerts.some(\n            i => i.type === 'malware',\n          ),\n        },\n        minified: securityArchiveEntry.alerts.some(\n          i => i.type === 'minifiedFile',\n        ),\n        native: securityArchiveEntry.alerts.some(\n          i => i.type === 'hasNativeCode',\n        ),\n        network: securityArchiveEntry.alerts.some(\n          i => i.type === 'networkAccess',\n        ),\n        obfuscated: securityArchiveEntry.alerts.some(\n          i => i.type === 'obfuscatedFile',\n        ),\n        scripts: securityArchiveEntry.alerts.some(\n          i => i.type === 'installScripts',\n        ),\n        severity: {\n          low: securityArchiveEntry.alerts.some(\n            i => i.type === 'mildCVE',\n          ),\n          medium: securityArchiveEntry.alerts.some(\n            i => i.type === 'potentialVulnerability',\n          ),\n          high: securityArchiveEntry.alerts.some(\n            i => i.type === 'cve',\n          ),\n          critical: securityArchiveEntry.alerts.some(\n            i => i.type === 'criticalCVE',\n          ),\n        },\n        shell: securityArchiveEntry.alerts.some(\n          i => i.type === 'shellAccess',\n        ),\n        shrinkwrap: securityArchiveEntry.alerts.some(\n          i => i.type === 'shrinkwrap',\n        ),\n        squat: {\n          medium: securityArchiveEntry.alerts.some(\n            i => i.type === 'gptDidYouMean',\n          ),\n          critical: securityArchiveEntry.alerts.some(\n            i => i.type === 'didYouMean',\n          ),\n        },\n        suspicious: securityArchiveEntry.alerts.some(\n          i => i.type === 'suspiciousStarActivity',\n        ),\n        tracker: securityArchiveEntry.alerts.some(\n          i => i.type === 'telemetry',\n        ),\n        trivial: securityArchiveEntry.alerts.some(\n          i => i.type === 'trivialPackage',\n        ),\n        undesirable: securityArchiveEntry.alerts.some(\n          i => i.type === 'troll',\n        ),\n        unknown: securityArchiveEntry.alerts.some(\n          i => i.type === 'newAuthor',\n        ),\n        unmaintained: securityArchiveEntry.alerts.some(\n          i => i.type === 'unmaintained',\n        ),\n        unpopular: securityArchiveEntry.alerts.some(\n          i => i.type === 'unpopularPackage',\n        ),\n        unstable: securityArchiveEntry.alerts.some(\n          i => i.type === 'unstableOwnership',\n        ),\n      }\n\n      setMethodToJSON(node)\n    }\n    return nodes\n  }\n\n  /**\n   * Search the graph for nodes and edges that match the given query.\n   */\n  async search(\n    query: string,\n    signal?: AbortSignal,\n  ): Promise<QueryResponse> {\n    if (!query) return { edges: [], nodes: [] }\n\n    const cachedResult = this.#cache.get(query)\n    if (cachedResult) {\n      return cachedResult\n    }\n\n    const nodes = new Set<NodeLike>(\n      Array.from(this.#graph.nodes.values()),\n    )\n    const edges = new Set<EdgeLike>(Array.from(this.#graph.edges))\n\n    // parse the query string into AST\n    const current = parse(query)\n    // set loose mode for the entire parse in case there are multiple selectors\n    // so that using invalid pseudo selectors or other query language parser\n    // errors won't throw an error,\n    // e.g: `:root > *, #a, :foo` still returns results for `:root > ` and `#a`\n    // while :foo is ignored\n    const loose = asPostcssNodeWithChildren(current).nodes.length > 1\n    // builds initial state and walks over it,\n    // retrieving the collected result\n    const { collect } = await walk({\n      cancellable: async () => {\n        await new Promise(resolve => {\n          setTimeout(resolve, 0)\n        })\n        signal?.throwIfAborted()\n      },\n      current,\n      initial: {\n        nodes: new Set(nodes),\n        edges: new Set(edges),\n      },\n      collect: {\n        nodes: new Set<NodeLike>(),\n        edges: new Set<EdgeLike>(),\n      },\n      loose,\n      partial: { nodes, edges },\n      retries: this.#retries,\n      signal,\n      securityArchive: this.#securityArchive,\n      specOptions: this.#specOptions,\n      walk,\n    })\n\n    const res: QueryResponse = {\n      edges: this.#getQueryResponseEdges(collect.edges),\n      nodes: this.#getQueryResponseNodes(collect.nodes),\n    }\n    this.#cache.set(query, res)\n    return res\n  }\n\n  /**\n   * Parses a query string in order to retrieve an array of tokens.\n   */\n  static getQueryTokens(query: string): ParsedSelectorToken[] {\n    if (!query) return []\n\n    const tokens: ParsedSelectorToken[] = []\n\n    const ast = (q: string) => {\n      try {\n        return parse(q)\n      } catch (_e) {\n        return ast(q.slice(0, -1))\n      }\n    }\n\n    const processNode = (node: PostcssNode) => {\n      for (const key of selectorsMap.keys()) {\n        if (node.type === key && node.type !== 'root') {\n          let token = `${node.spaces.before}${node.value}${node.spaces.after}`\n\n          if (isIdentifierNode(node)) {\n            token = `${node.spaces.before}#${node.value}${node.spaces.after}`\n          } else if (isSelectorNode(node)) {\n            token = `${node.spaces.before},${node.spaces.after}`\n          } else if (isAttributeNode(node)) {\n            token = String(\n              node.source?.start?.column &&\n                node.source.end?.column &&\n                `${node.spaces.before}${query.slice(node.source.start.column - 1, node.source.end.column)}${node.spaces.after}`,\n            )\n          }\n\n          if (\n            isPostcssNodeWithChildren(node) &&\n            isPseudoNode(node) &&\n            node.nodes.length\n          ) {\n            token = String(token.split('(')[0])\n            token += '('\n          }\n\n          if (\n            !isSelectorNode(node) ||\n            node.parent?.nodes.indexOf(node) !== 0\n          ) {\n            tokens.push({\n              ...node,\n              token,\n            } as ParsedSelectorToken)\n          }\n        }\n      }\n      if (isPostcssNodeWithChildren(node)) {\n        for (const child of node.nodes) {\n          processNode(child)\n        }\n        if (isPseudoNode(node) && node.nodes.length) {\n          tokens.push({\n            ...node,\n            token: ')' + node.spaces.after,\n            type: 'pseudo',\n          } as ParsedSelectorToken)\n        }\n      }\n    }\n\n    processNode(ast(query))\n    return tokens\n  }\n}\n"]}

package/dist/esm/parser.d.ts

@@ -0,0 +1,15 @@
+import type { Root } from 'postcss-selector-parser';
+/**
+ * Escapes forward slashes in specific patterns matching @scoped/name paths
+ * This will allow usage of unescaped forward slashes necessary for scoped
+ * package names in the id selector.
+ */
+export declare const escapeScopedNamesSlashes: (query: string) => string;
+export declare const escapeDots: (query: string) => string;
+export declare const unescapeDots: (query: string) => string;
+/**
+ * Parses a CSS selector string into an AST
+ * Handles escaping of forward slashes in specific patterns
+ */
+export declare const parse: (query: string) => Root;
+//# sourceMappingURL=parser.d.ts.map

package/dist/esm/parser.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"parser.d.ts","sourceRoot":"","sources":["../../src/parser.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAU,IAAI,EAAE,MAAM,yBAAyB,CAAA;AAS3D;;;;GAIG;AACH,eAAO,MAAM,wBAAwB,UAAW,MAAM,KAAG,MAItD,CAAA;AAEH,eAAO,MAAM,UAAU,UAAW,MAAM,KAAG,MACb,CAAA;AAE9B,eAAO,MAAM,YAAY,UAAW,MAAM,KAAG,MACf,CAAA;AAgB9B;;;GAGG;AACH,eAAO,MAAM,KAAK,UAAW,MAAM,KAAG,IA0ErC,CAAA"}

package/dist/esm/parser.js

@@ -0,0 +1,92 @@
+import postcssSelectorParser from 'postcss-selector-parser';
+import { asSelectorNode, isCombinatorNode, isPseudoNode, isTagNode, } from "./types.js";
+/**
+ * Escapes forward slashes in specific patterns matching @scoped/name paths
+ * This will allow usage of unescaped forward slashes necessary for scoped
+ * package names in the id selector.
+ */
+export const escapeScopedNamesSlashes = (query) => query.replace(/(#@(\w|-|\.)+)\//gm, (_, scope) => `${scope}\\/`);
+export const escapeDots = (query) => query.replaceAll('.', '\\.');
+export const unescapeDots = (query) => query.replaceAll('\\.', '.');
+const pseudoCleanUpNeeded = new Set([
+    ':published',
+    ':score',
+    ':malware',
+    ':severity',
+    ':sev',
+    ':squat',
+    ':semver',
+    ':v',
+]);
+const hasParamsToEscape = (node) => pseudoCleanUpNeeded.has(node.value);
+/**
+ * Parses a CSS selector string into an AST
+ * Handles escaping of forward slashes in specific patterns
+ */
+export const parse = (query) => {
+    const escapedQuery = escapeDots(escapeScopedNamesSlashes(query));
+    const transformAst = (root) => {
+        root.walk((node) => {
+            // clean up the escaped dots
+            if (node.value && typeof node.value === 'string') {
+                node.value = unescapeDots(node.value);
+            }
+            if (isPseudoNode(node) && hasParamsToEscape(node)) {
+                // these are pseudo nodes that should only take strings as
+                // parameters, so in this preparse step we clean up anything
+                // that was recognized as a postcss node and transform that
+                // into something that can be most likely parsed as a string
+                for (const n of node.nodes) {
+                    // the parameters have a selector node that wraps them up
+                    const selector = asSelectorNode(n);
+                    selector.nodes.forEach((currentNode, index, arr) => {
+                        // get the next node, we'll update it later
+                        const nextNode = arr[index + 1];
+                        // if the current node is a combinator node, we'll need to
+                        // escape it, we do so by removing the node entirely and
+                        // updating the contents of the next node with its value
+                        if (isCombinatorNode(currentNode) &&
+                            isTagNode(nextNode)) {
+                            nextNode.value = `${currentNode.spaces.before}${currentNode.value}${currentNode.spaces.after}${nextNode.value}`;
+                            // make sure to also update the source position
+                            // references, those are used by the syntax highlighter
+                            if (nextNode.source?.start?.line &&
+                                currentNode.source?.start?.line) {
+                                nextNode.source.start.line =
+                                    currentNode.source.start.line;
+                            }
+                            if (nextNode.source?.start?.column &&
+                                currentNode.source?.start?.column) {
+                                nextNode.source.start.column =
+                                    currentNode.source.start.column;
+                            }
+                            // removes the current node from the selector node
+                            arr.splice(index, 1);
+                        }
+                    });
+                    // after removing combinator nodes, if we end up with multiple
+                    // tags in the selector node, we need to smush them together
+                    selector.nodes.reduce((acc, currentNode) => {
+                        if (currentNode === acc)
+                            return acc;
+                        acc.value = `${acc.value}${currentNode.spaces.before}${currentNode.value}${currentNode.spaces.after}`;
+                        // make sure to also update the source position refs
+                        if (currentNode.source?.end?.line &&
+                            acc.source?.end?.line) {
+                            acc.source.end.line = currentNode.source.end.line;
+                        }
+                        if (currentNode.source?.end?.column &&
+                            acc.source?.end?.column) {
+                            acc.source.end.column = currentNode.source.end.column;
+                        }
+                        return acc;
+                    }, selector.first);
+                    // the selector wrapper node should have a single node
+                    selector.nodes.length = 1;
+                }
+            }
+        });
+    };
+    return postcssSelectorParser(transformAst).astSync(escapedQuery);
+};
+//# sourceMappingURL=parser.js.map

package/dist/esm/parser.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"parser.js","sourceRoot":"","sources":["../../src/parser.ts"],"names":[],"mappings":"AAAA,OAAO,qBAAqB,MAAM,yBAAyB,CAAA;AAE3D,OAAO,EACL,cAAc,EACd,gBAAgB,EAChB,YAAY,EACZ,SAAS,GACV,MAAM,YAAY,CAAA;AAGnB;;;;GAIG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAAG,CAAC,KAAa,EAAU,EAAE,CAChE,KAAK,CAAC,OAAO,CACX,oBAAoB,EACpB,CAAC,CAAC,EAAE,KAAa,EAAE,EAAE,CAAC,GAAG,KAAK,KAAK,CACpC,CAAA;AAEH,MAAM,CAAC,MAAM,UAAU,GAAG,CAAC,KAAa,EAAU,EAAE,CAClD,KAAK,CAAC,UAAU,CAAC,GAAG,EAAE,KAAK,CAAC,CAAA;AAE9B,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC,KAAa,EAAU,EAAE,CACpD,KAAK,CAAC,UAAU,CAAC,KAAK,EAAE,GAAG,CAAC,CAAA;AAE9B,MAAM,mBAAmB,GAAG,IAAI,GAAG,CAAC;IAClC,YAAY;IACZ,QAAQ;IACR,UAAU;IACV,WAAW;IACX,MAAM;IACN,QAAQ;IACR,SAAS;IACT,IAAI;CACL,CAAC,CAAA;AAEF,MAAM,iBAAiB,GAAG,CAAC,IAAY,EAAE,EAAE,CACzC,mBAAmB,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;AAErC;;;GAGG;AACH,MAAM,CAAC,MAAM,KAAK,GAAG,CAAC,KAAa,EAAQ,EAAE;IAC3C,MAAM,YAAY,GAAG,UAAU,CAAC,wBAAwB,CAAC,KAAK,CAAC,CAAC,CAAA;IAChE,MAAM,YAAY,GAAG,CAAC,IAAU,EAAE,EAAE;QAClC,IAAI,CAAC,IAAI,CAAC,CAAC,IAAiB,EAAE,EAAE;YAC9B,4BAA4B;YAC5B,IAAI,IAAI,CAAC,KAAK,IAAI,OAAO,IAAI,CAAC,KAAK,KAAK,QAAQ,EAAE,CAAC;gBACjD,IAAI,CAAC,KAAK,GAAG,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;YACvC,CAAC;YACD,IAAI,YAAY,CAAC,IAAI,CAAC,IAAI,iBAAiB,CAAC,IAAI,CAAC,EAAE,CAAC;gBAClD,0DAA0D;gBAC1D,4DAA4D;gBAC5D,2DAA2D;gBAC3D,4DAA4D;gBAC5D,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;oBAC3B,yDAAyD;oBACzD,MAAM,QAAQ,GAAG,cAAc,CAAC,CAAC,CAAC,CAAA;oBAClC,QAAQ,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,WAAW,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE;wBACjD,2CAA2C;wBAC3C,MAAM,QAAQ,GAAG,GAAG,CAAC,KAAK,GAAG,CAAC,CAAC,CAAA;wBAC/B,0DAA0D;wBAC1D,wDAAwD;wBACxD,wDAAwD;wBACxD,IACE,gBAAgB,CAAC,WAAW,CAAC;4BAC7B,SAAS,CAAC,QAAQ,CAAC,EACnB,CAAC;4BACD,QAAQ,CAAC,KAAK,GAAG,GAAG,WAAW,CAAC,MAAM,CAAC,MAAM,GAAG,WAAW,CAAC,KAAK,GAAG,WAAW,CAAC,MAAM,CAAC,KAAK,GAAG,QAAQ,CAAC,KAAK,EAAE,CAAA;4BAC/G,+CAA+C;4BAC/C,uDAAuD;4BACvD,IACE,QAAQ,CAAC,MAAM,EAAE,KAAK,EAAE,IAAI;gCAC5B,WAAW,CAAC,MAAM,EAAE,KAAK,EAAE,IAAI,EAC/B,CAAC;gCACD,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI;oCACxB,WAAW,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAA;4BACjC,CAAC;4BACD,IACE,QAAQ,CAAC,MAAM,EAAE,KAAK,EAAE,MAAM;gCAC9B,WAAW,CAAC,MAAM,EAAE,KAAK,EAAE,MAAM,EACjC,CAAC;gCACD,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM;oCAC1B,WAAW,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAA;4BACnC,CAAC;4BACD,kDAAkD;4BAClD,GAAG,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAA;wBACtB,CAAC;oBACH,CAAC,CAAC,CAAA;oBACF,8DAA8D;oBAC9D,4DAA4D;oBAC5D,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,WAAW,EAAE,EAAE;wBACzC,IAAI,WAAW,KAAK,GAAG;4BAAE,OAAO,GAAG,CAAA;wBACnC,GAAG,CAAC,KAAK,GAAG,GAAG,GAAG,CAAC,KAAK,GAAG,WAAW,CAAC,MAAM,CAAC,MAAM,GAAG,WAAW,CAAC,KAAK,GAAG,WAAW,CAAC,MAAM,CAAC,KAAK,EAAE,CAAA;wBACrG,oDAAoD;wBACpD,IACE,WAAW,CAAC,MAAM,EAAE,GAAG,EAAE,IAAI;4BAC7B,GAAG,CAAC,MAAM,EAAE,GAAG,EAAE,IAAI,EACrB,CAAC;4BACD,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,GAAG,WAAW,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAA;wBACnD,CAAC;wBACD,IACE,WAAW,CAAC,MAAM,EAAE,GAAG,EAAE,MAAM;4BAC/B,GAAG,CAAC,MAAM,EAAE,GAAG,EAAE,MAAM,EACvB,CAAC;4BACD,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,MAAM,GAAG,WAAW,CAAC,MAAM,CAAC,GAAG,CAAC,MAAM,CAAA;wBACvD,CAAC;wBACD,OAAO,GAAG,CAAA;oBACZ,CAAC,EAAE,QAAQ,CAAC,KAAK,CAAC,CAAA;oBAClB,sDAAsD;oBACtD,QAAQ,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAA;gBAC3B,CAAC;YACH,CAAC;QACH,CAAC,CAAC,CAAA;IACJ,CAAC,CAAA;IACD,OAAO,qBAAqB,CAAC,YAAY,CAAC,CAAC,OAAO,CAAC,YAAY,CAAC,CAAA;AAClE,CAAC,CAAA","sourcesContent":["import postcssSelectorParser from 'postcss-selector-parser'\nimport type { Pseudo, Root } from 'postcss-selector-parser'\nimport {\n  asSelectorNode,\n  isCombinatorNode,\n  isPseudoNode,\n  isTagNode,\n} from './types.ts'\nimport type { PostcssNode } from './types.ts'\n\n/**\n * Escapes forward slashes in specific patterns matching @scoped/name paths\n * This will allow usage of unescaped forward slashes necessary for scoped\n * package names in the id selector.\n */\nexport const escapeScopedNamesSlashes = (query: string): string =>\n  query.replace(\n    /(#@(\\w|-|\\.)+)\\//gm,\n    (_, scope: string) => `${scope}\\\\/`,\n  )\n\nexport const escapeDots = (query: string): string =>\n  query.replaceAll('.', '\\\\.')\n\nexport const unescapeDots = (query: string): string =>\n  query.replaceAll('\\\\.', '.')\n\nconst pseudoCleanUpNeeded = new Set([\n  ':published',\n  ':score',\n  ':malware',\n  ':severity',\n  ':sev',\n  ':squat',\n  ':semver',\n  ':v',\n])\n\nconst hasParamsToEscape = (node: Pseudo) =>\n  pseudoCleanUpNeeded.has(node.value)\n\n/**\n * Parses a CSS selector string into an AST\n * Handles escaping of forward slashes in specific patterns\n */\nexport const parse = (query: string): Root => {\n  const escapedQuery = escapeDots(escapeScopedNamesSlashes(query))\n  const transformAst = (root: Root) => {\n    root.walk((node: PostcssNode) => {\n      // clean up the escaped dots\n      if (node.value && typeof node.value === 'string') {\n        node.value = unescapeDots(node.value)\n      }\n      if (isPseudoNode(node) && hasParamsToEscape(node)) {\n        // these are pseudo nodes that should only take strings as\n        // parameters, so in this preparse step we clean up anything\n        // that was recognized as a postcss node and transform that\n        // into something that can be most likely parsed as a string\n        for (const n of node.nodes) {\n          // the parameters have a selector node that wraps them up\n          const selector = asSelectorNode(n)\n          selector.nodes.forEach((currentNode, index, arr) => {\n            // get the next node, we'll update it later\n            const nextNode = arr[index + 1]\n            // if the current node is a combinator node, we'll need to\n            // escape it, we do so by removing the node entirely and\n            // updating the contents of the next node with its value\n            if (\n              isCombinatorNode(currentNode) &&\n              isTagNode(nextNode)\n            ) {\n              nextNode.value = `${currentNode.spaces.before}${currentNode.value}${currentNode.spaces.after}${nextNode.value}`\n              // make sure to also update the source position\n              // references, those are used by the syntax highlighter\n              if (\n                nextNode.source?.start?.line &&\n                currentNode.source?.start?.line\n              ) {\n                nextNode.source.start.line =\n                  currentNode.source.start.line\n              }\n              if (\n                nextNode.source?.start?.column &&\n                currentNode.source?.start?.column\n              ) {\n                nextNode.source.start.column =\n                  currentNode.source.start.column\n              }\n              // removes the current node from the selector node\n              arr.splice(index, 1)\n            }\n          })\n          // after removing combinator nodes, if we end up with multiple\n          // tags in the selector node, we need to smush them together\n          selector.nodes.reduce((acc, currentNode) => {\n            if (currentNode === acc) return acc\n            acc.value = `${acc.value}${currentNode.spaces.before}${currentNode.value}${currentNode.spaces.after}`\n            // make sure to also update the source position refs\n            if (\n              currentNode.source?.end?.line &&\n              acc.source?.end?.line\n            ) {\n              acc.source.end.line = currentNode.source.end.line\n            }\n            if (\n              currentNode.source?.end?.column &&\n              acc.source?.end?.column\n            ) {\n              acc.source.end.column = currentNode.source.end.column\n            }\n            return acc\n          }, selector.first)\n          // the selector wrapper node should have a single node\n          selector.nodes.length = 1\n        }\n      }\n    })\n  }\n  return postcssSelectorParser(transformAst).astSync(escapedQuery)\n}\n"]}

package/dist/esm/pseudo/abandoned.d.ts

@@ -0,0 +1,7 @@
+/**
+ * Filters out any node that does not have a **missingAuthor** report alert.
+ */
+export declare const abandoned: (state: import("../types.ts").ParserState) => Promise<import("../types.ts").ParserState & {
+    securityArchive: NonNullable<import("../types.ts").ParserState["securityArchive"]>;
+}>;
+//# sourceMappingURL=abandoned.d.ts.map

package/dist/esm/pseudo/abandoned.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"abandoned.d.ts","sourceRoot":"","sources":["../../../src/pseudo/abandoned.ts"],"names":[],"mappings":"AAEA;;GAEG;AACH,eAAO,MAAM,SAAS;;EAGrB,CAAA"}

package/dist/esm/pseudo/abandoned.js

@@ -0,0 +1,6 @@
+import { createSecuritySelectorFilter } from "./helpers.js";
+/**
+ * Filters out any node that does not have a **missingAuthor** report alert.
+ */
+export const abandoned = createSecuritySelectorFilter('abandoned', 'missingAuthor');
+//# sourceMappingURL=abandoned.js.map

package/dist/esm/pseudo/abandoned.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"abandoned.js","sourceRoot":"","sources":["../../../src/pseudo/abandoned.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,4BAA4B,EAAE,MAAM,cAAc,CAAA;AAE3D;;GAEG;AACH,MAAM,CAAC,MAAM,SAAS,GAAG,4BAA4B,CACnD,WAAW,EACX,eAAe,CAChB,CAAA","sourcesContent":["import { createSecuritySelectorFilter } from './helpers.ts'\n\n/**\n * Filters out any node that does not have a **missingAuthor** report alert.\n */\nexport const abandoned = createSecuritySelectorFilter(\n  'abandoned',\n  'missingAuthor',\n)\n"]}

package/dist/esm/pseudo/attr.d.ts

@@ -0,0 +1,18 @@
+import type { ParserState, PostcssNode } from '../types.ts';
+export type AttrInternals = {
+    attribute: string;
+    insensitive: boolean;
+    operator?: string;
+    value?: string;
+    properties: string[];
+};
+/**
+ * Parses the internal / nested selectors of a `:attr` selector.
+ */
+export declare const parseInternals: (nodes: PostcssNode[]) => AttrInternals;
+/**
+ * :attr Pseudo-Selector, allows for retrieving nodes based on nested
+ * properties of the `package.json` metadata.
+ */
+export declare const attr: (state: ParserState) => Promise<ParserState>;
+//# sourceMappingURL=attr.d.ts.map

package/dist/esm/pseudo/attr.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"attr.d.ts","sourceRoot":"","sources":["../../../src/pseudo/attr.ts"],"names":[],"mappings":"AAQA,OAAO,KAAK,EAAE,WAAW,EAAE,WAAW,EAAE,MAAM,aAAa,CAAA;AAO3D,MAAM,MAAM,aAAa,GAAG;IAC1B,SAAS,EAAE,MAAM,CAAA;IACjB,WAAW,EAAE,OAAO,CAAA;IACpB,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,UAAU,EAAE,MAAM,EAAE,CAAA;CACrB,CAAA;AAED;;GAEG;AACH,eAAO,MAAM,cAAc,UAClB,WAAW,EAAE,KACnB,aA0BF,CAAA;AAED;;;GAGG;AACH,eAAO,MAAM,IAAI,UAAiB,WAAW,yBA8B5C,CAAA"}