@vltpkg/query 0.0.0-2 → 0.0.0-20

package/dist/esm/pseudo/severity.js

@@ -0,0 +1,160 @@
+import { error } from '@vltpkg/error-cause';
+import { asPostcssNodeWithChildren, asStringNode, asTagNode, isStringNode, isTagNode, } from '@vltpkg/dss-parser';
+import { assertSecurityArchive, removeDanglingEdges, removeNode, removeQuotes, } from "./helpers.js";
+const kindsMap = new Map([
+    ['critical', 'criticalCVE'],
+    ['high', 'cve'],
+    ['medium', 'potentialVulnerability'],
+    ['low', 'mildCVE'],
+    ['0', 'criticalCVE'],
+    ['1', 'cve'],
+    ['2', 'potentialVulnerability'],
+    ['3', 'mildCVE'],
+]);
+// Map numerical values to their respective kinds for comparison operations
+const kindLevelMap = new Map([
+    ['critical', 0],
+    ['high', 1],
+    ['medium', 2],
+    ['low', 3],
+    ['0', 0],
+    ['1', 1],
+    ['2', 2],
+    ['3', 3],
+]);
+const kinds = new Set(kindsMap.keys());
+export const isSeverityKind = (value) => kinds.has(value);
+export const asSeverityKind = (value) => {
+    if (!isSeverityKind(value)) {
+        throw error('Expected a valid severity kind', {
+            found: value,
+            validOptions: Array.from(kinds),
+        });
+    }
+    return value;
+};
+export const parseInternals = (nodes) => {
+    let kind;
+    let comparator;
+    if (nodes.length === 0) {
+        throw error('Missing severity kind parameter');
+    }
+    let kindValue = '';
+    if (isStringNode(asPostcssNodeWithChildren(nodes[0]).nodes[0])) {
+        kindValue = removeQuotes(asStringNode(asPostcssNodeWithChildren(nodes[0]).nodes[0])
+            .value);
+    }
+    else if (isTagNode(asPostcssNodeWithChildren(nodes[0]).nodes[0])) {
+        kindValue = asTagNode(asPostcssNodeWithChildren(nodes[0]).nodes[0]).value;
+    }
+    // Extract comparator if present
+    if (kindValue.startsWith('>=')) {
+        comparator = '>=';
+        kindValue = kindValue.substring(2);
+    }
+    else if (kindValue.startsWith('<=')) {
+        comparator = '<=';
+        kindValue = kindValue.substring(2);
+    }
+    else if (kindValue.startsWith('>')) {
+        comparator = '>';
+        kindValue = kindValue.substring(1);
+    }
+    else if (kindValue.startsWith('<')) {
+        comparator = '<';
+        kindValue = kindValue.substring(1);
+    }
+    // Parse kind value
+    if (kindValue) {
+        if (isSeverityKind(kindValue)) {
+            kind = kindValue;
+        }
+        else {
+            throw error('Expected a valid severity kind or number between 0-3', {
+                found: kindValue,
+            });
+        }
+    }
+    return { kind, comparator };
+};
+export const severity = async (state) => {
+    assertSecurityArchive(state, 'severity');
+    let internals;
+    try {
+        internals = parseInternals(asPostcssNodeWithChildren(state.current).nodes);
+    }
+    catch (err) {
+        throw error('Failed to parse :severity selector', { cause: err });
+    }
+    const { kind, comparator } = internals;
+    for (const node of state.partial.nodes) {
+        const report = state.securityArchive.get(node.id);
+        // Always exclude nodes that don't have security data or alerts
+        if (!report?.alerts || report.alerts.length === 0) {
+            removeNode(state, node);
+        }
+    }
+    for (const node of state.partial.nodes) {
+        const report = state.securityArchive.get(node.id);
+        let exclude = true;
+        if (report) {
+            if (comparator) {
+                // retrieve the value to compare against
+                const kindLevel = kindLevelMap.get(kind);
+                // the kindLevel value has already been validated at this point
+                // and thus can never return an undefined/falsy value but ts doesn't
+                // know about that, so we have the extra check here
+                /* c8 ignore next - impossible */
+                if (!kindLevel)
+                    break;
+                // Check each alert to find any that match our comparison criteria
+                for (const alert of report.alerts) {
+                    // Get the numerical value of the alert type
+                    const alertType = alert.type;
+                    // retrieve a key to the current alert level to be compared against
+                    const currentAlertLevelKey = [...kindsMap.entries()].find(([_, alertValue]) => alertValue === alertType)?.[0];
+                    // perform the comparison based on the user-provided kindLevel
+                    if (currentAlertLevelKey) {
+                        const currentAlertLevel = kindLevelMap.get(currentAlertLevelKey);
+                        /* c8 ignore next - impossible but ts doesn't know */
+                        if (currentAlertLevel == null)
+                            continue;
+                        switch (comparator) {
+                            case '>':
+                                if (currentAlertLevel > kindLevel) {
+                                    exclude = false;
+                                }
+                                break;
+                            case '<':
+                                if (currentAlertLevel < kindLevel) {
+                                    exclude = false;
+                                }
+                                break;
+                            case '>=':
+                                if (currentAlertLevel >= kindLevel) {
+                                    exclude = false;
+                                }
+                                break;
+                            case '<=':
+                                if (currentAlertLevel <= kindLevel) {
+                                    exclude = false;
+                                }
+                                break;
+                        }
+                    }
+                }
+            }
+            else {
+                // Original exact match behavior
+                const alertName = kindsMap.get(kind);
+                exclude = !report.alerts.some(alert => alert.type === alertName);
+            }
+        }
+        if (exclude) {
+            removeNode(state, node);
+        }
+    }
+    removeDanglingEdges(state);
+    return state;
+};
+//# sourceMappingURL=severity.js.map

package/dist/esm/pseudo/severity.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"severity.js","sourceRoot":"","sources":["../../../src/pseudo/severity.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,qBAAqB,CAAA;AAC3C,OAAO,EACL,yBAAyB,EACzB,YAAY,EACZ,SAAS,EACT,YAAY,EACZ,SAAS,GACV,MAAM,oBAAoB,CAAA;AAC3B,OAAO,EACL,qBAAqB,EACrB,mBAAmB,EACnB,UAAU,EACV,YAAY,GACb,MAAM,cAAc,CAAA;AAwBrB,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAoC;IAC1D,CAAC,UAAU,EAAE,aAAa,CAAC;IAC3B,CAAC,MAAM,EAAE,KAAK,CAAC;IACf,CAAC,QAAQ,EAAE,wBAAwB,CAAC;IACpC,CAAC,KAAK,EAAE,SAAS,CAAC;IAClB,CAAC,GAAG,EAAE,aAAa,CAAC;IACpB,CAAC,GAAG,EAAE,KAAK,CAAC;IACZ,CAAC,GAAG,EAAE,wBAAwB,CAAC;IAC/B,CAAC,GAAG,EAAE,SAAS,CAAC;CACjB,CAAC,CAAA;AAEF,2EAA2E;AAC3E,MAAM,YAAY,GAAG,IAAI,GAAG,CAAwB;IAClD,CAAC,UAAU,EAAE,CAAC,CAAC;IACf,CAAC,MAAM,EAAE,CAAC,CAAC;IACX,CAAC,QAAQ,EAAE,CAAC,CAAC;IACb,CAAC,KAAK,EAAE,CAAC,CAAC;IACV,CAAC,GAAG,EAAE,CAAC,CAAC;IACR,CAAC,GAAG,EAAE,CAAC,CAAC;IACR,CAAC,GAAG,EAAE,CAAC,CAAC;IACR,CAAC,GAAG,EAAE,CAAC,CAAC;CACT,CAAC,CAAA;AAEF,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAA;AAEtC,MAAM,CAAC,MAAM,cAAc,GAAG,CAC5B,KAAc,EACU,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,KAAsB,CAAC,CAAA;AAE9D,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,KAAc,EAAiB,EAAE;IAC9D,IAAI,CAAC,cAAc,CAAC,KAAK,CAAC,EAAE,CAAC;QAC3B,MAAM,KAAK,CAAC,gCAAgC,EAAE;YAC5C,KAAK,EAAE,KAAK;YACZ,YAAY,EAAE,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC;SAChC,CAAC,CAAA;IACJ,CAAC;IACD,OAAO,KAAK,CAAA;AACd,CAAC,CAAA;AAED,MAAM,CAAC,MAAM,cAAc,GAAG,CAC5B,KAAoB,EAIpB,EAAE;IACF,IAAI,IAAmB,CAAA;IACvB,IAAI,UAA8B,CAAA;IAElC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACvB,MAAM,KAAK,CAAC,iCAAiC,CAAC,CAAA;IAChD,CAAC;IAED,IAAI,SAAS,GAAG,EAAE,CAAA;IAClB,IAAI,YAAY,CAAC,yBAAyB,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAC/D,SAAS,GAAG,YAAY,CACtB,YAAY,CAAC,yBAAyB,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;aACvD,KAAK,CACT,CAAA;IACH,CAAC;SAAM,IACL,SAAS,CAAC,yBAAyB,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EACvD,CAAC;QACD,SAAS,GAAG,SAAS,CACnB,yBAAyB,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAC7C,CAAC,KAAK,CAAA;IACT,CAAC;IAED,gCAAgC;IAChC,IAAI,SAAS,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;QAC/B,UAAU,GAAG,IAAI,CAAA;QACjB,SAAS,GAAG,SAAS,CAAC,SAAS,CAAC,CAAC,CAAC,CAAA;IACpC,CAAC;SAAM,IAAI,SAAS,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;QACtC,UAAU,GAAG,IAAI,CAAA;QACjB,SAAS,GAAG,SAAS,CAAC,SAAS,CAAC,CAAC,CAAC,CAAA;IACpC,CAAC;SAAM,IAAI,SAAS,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QACrC,UAAU,GAAG,GAAG,CAAA;QAChB,SAAS,GAAG,SAAS,CAAC,SAAS,CAAC,CAAC,CAAC,CAAA;IACpC,CAAC;SAAM,IAAI,SAAS,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QACrC,UAAU,GAAG,GAAG,CAAA;QAChB,SAAS,GAAG,SAAS,CAAC,SAAS,CAAC,CAAC,CAAC,CAAA;IACpC,CAAC;IAED,mBAAmB;IACnB,IAAI,SAAS,EAAE,CAAC;QACd,IAAI,cAAc,CAAC,SAAS,CAAC,EAAE,CAAC;YAC9B,IAAI,GAAG,SAAS,CAAA;QAClB,CAAC;aAAM,CAAC;YACN,MAAM,KAAK,CACT,sDAAsD,EACtD;gBACE,KAAK,EAAE,SAAS;aACjB,CACF,CAAA;QACH,CAAC;IACH,CAAC;IAED,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,CAAA;AAC7B,CAAC,CAAA;AAED,MAAM,CAAC,MAAM,QAAQ,GAAG,KAAK,EAAE,KAAkB,EAAE,EAAE;IACnD,qBAAqB,CAAC,KAAK,EAAE,UAAU,CAAC,CAAA;IAExC,IAAI,SAAS,CAAA;IACb,IAAI,CAAC;QACH,SAAS,GAAG,cAAc,CACxB,yBAAyB,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,KAAK,CAC/C,CAAA;IACH,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,KAAK,CAAC,oCAAoC,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,CAAA;IACnE,CAAC;IAED,MAAM,EAAE,IAAI,EAAE,UAAU,EAAE,GAAG,SAAS,CAAA;IAEtC,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;QACvC,MAAM,MAAM,GAAG,KAAK,CAAC,eAAe,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;QACjD,+DAA+D;QAC/D,IAAI,CAAC,MAAM,EAAE,MAAM,IAAI,MAAM,CAAC,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAClD,UAAU,CAAC,KAAK,EAAE,IAAI,CAAC,CAAA;QACzB,CAAC;IACH,CAAC;IAED,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;QACvC,MAAM,MAAM,GAAG,KAAK,CAAC,eAAe,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;QACjD,IAAI,OAAO,GAAG,IAAI,CAAA;QAElB,IAAI,MAAM,EAAE,CAAC;YACX,IAAI,UAAU,EAAE,CAAC;gBACf,wCAAwC;gBACxC,MAAM,SAAS,GAAG,YAAY,CAAC,GAAG,CAAC,IAAI,CAAC,CAAA;gBACxC,+DAA+D;gBAC/D,oEAAoE;gBACpE,mDAAmD;gBACnD,iCAAiC;gBACjC,IAAI,CAAC,SAAS;oBAAE,MAAK;gBAErB,kEAAkE;gBAClE,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC;oBAClC,4CAA4C;oBAC5C,MAAM,SAAS,GAAG,KAAK,CAAC,IAAI,CAAA;oBAE5B,mEAAmE;oBACnE,MAAM,oBAAoB,GAAG,CAAC,GAAG,QAAQ,CAAC,OAAO,EAAE,CAAC,CAAC,IAAI,CACvD,CAAC,CAAC,CAAC,EAAE,UAAU,CAAC,EAAE,EAAE,CAAC,UAAU,KAAK,SAAS,CAC9C,EAAE,CAAC,CAAC,CAAC,CAAA;oBAEN,8DAA8D;oBAC9D,IAAI,oBAAoB,EAAE,CAAC;wBACzB,MAAM,iBAAiB,GAAG,YAAY,CAAC,GAAG,CACxC,oBAAoB,CACrB,CAAA;wBACD,qDAAqD;wBACrD,IAAI,iBAAiB,IAAI,IAAI;4BAAE,SAAQ;wBAEvC,QAAQ,UAAU,EAAE,CAAC;4BACnB,KAAK,GAAG;gCACN,IAAI,iBAAiB,GAAG,SAAS,EAAE,CAAC;oCAClC,OAAO,GAAG,KAAK,CAAA;gCACjB,CAAC;gCACD,MAAK;4BACP,KAAK,GAAG;gCACN,IAAI,iBAAiB,GAAG,SAAS,EAAE,CAAC;oCAClC,OAAO,GAAG,KAAK,CAAA;gCACjB,CAAC;gCACD,MAAK;4BACP,KAAK,IAAI;gCACP,IAAI,iBAAiB,IAAI,SAAS,EAAE,CAAC;oCACnC,OAAO,GAAG,KAAK,CAAA;gCACjB,CAAC;gCACD,MAAK;4BACP,KAAK,IAAI;gCACP,IAAI,iBAAiB,IAAI,SAAS,EAAE,CAAC;oCACnC,OAAO,GAAG,KAAK,CAAA;gCACjB,CAAC;gCACD,MAAK;wBACT,CAAC;oBACH,CAAC;gBACH,CAAC;YACH,CAAC;iBAAM,CAAC;gBACN,gCAAgC;gBAChC,MAAM,SAAS,GAAG,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,CAAA;gBACpC,OAAO,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAC3B,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,IAAI,KAAK,SAAS,CAClC,CAAA;YACH,CAAC;QACH,CAAC;QAED,IAAI,OAAO,EAAE,CAAC;YACZ,UAAU,CAAC,KAAK,EAAE,IAAI,CAAC,CAAA;QACzB,CAAC;IACH,CAAC;IAED,mBAAmB,CAAC,KAAK,CAAC,CAAA;IAE1B,OAAO,KAAK,CAAA;AACd,CAAC,CAAA","sourcesContent":["import { error } from '@vltpkg/error-cause'\nimport {\n  asPostcssNodeWithChildren,\n  asStringNode,\n  asTagNode,\n  isStringNode,\n  isTagNode,\n} from '@vltpkg/dss-parser'\nimport {\n  assertSecurityArchive,\n  removeDanglingEdges,\n  removeNode,\n  removeQuotes,\n} from './helpers.ts'\nimport type { ParserState } from '../types.ts'\nimport type { PostcssNode } from '@vltpkg/dss-parser'\n\nexport type SeverityKinds =\n  | '0'\n  | '1'\n  | '2'\n  | '3'\n  | 'critical'\n  | 'high'\n  | 'medium'\n  | 'low'\n  | undefined\n\nexport type SeverityAlertTypes =\n  | 'criticalCVE'\n  | 'cve'\n  | 'potentialVulnerability'\n  | 'mildCVE'\n  | undefined\n\nexport type SeverityComparator = '>' | '<' | '>=' | '<=' | undefined\n\nconst kindsMap = new Map<SeverityKinds, SeverityAlertTypes>([\n  ['critical', 'criticalCVE'],\n  ['high', 'cve'],\n  ['medium', 'potentialVulnerability'],\n  ['low', 'mildCVE'],\n  ['0', 'criticalCVE'],\n  ['1', 'cve'],\n  ['2', 'potentialVulnerability'],\n  ['3', 'mildCVE'],\n])\n\n// Map numerical values to their respective kinds for comparison operations\nconst kindLevelMap = new Map<SeverityKinds, number>([\n  ['critical', 0],\n  ['high', 1],\n  ['medium', 2],\n  ['low', 3],\n  ['0', 0],\n  ['1', 1],\n  ['2', 2],\n  ['3', 3],\n])\n\nconst kinds = new Set(kindsMap.keys())\n\nexport const isSeverityKind = (\n  value?: string,\n): value is SeverityKinds => kinds.has(value as SeverityKinds)\n\nexport const asSeverityKind = (value?: string): SeverityKinds => {\n  if (!isSeverityKind(value)) {\n    throw error('Expected a valid severity kind', {\n      found: value,\n      validOptions: Array.from(kinds),\n    })\n  }\n  return value\n}\n\nexport const parseInternals = (\n  nodes: PostcssNode[],\n): {\n  kind: SeverityKinds\n  comparator: SeverityComparator\n} => {\n  let kind: SeverityKinds\n  let comparator: SeverityComparator\n\n  if (nodes.length === 0) {\n    throw error('Missing severity kind parameter')\n  }\n\n  let kindValue = ''\n  if (isStringNode(asPostcssNodeWithChildren(nodes[0]).nodes[0])) {\n    kindValue = removeQuotes(\n      asStringNode(asPostcssNodeWithChildren(nodes[0]).nodes[0])\n        .value,\n    )\n  } else if (\n    isTagNode(asPostcssNodeWithChildren(nodes[0]).nodes[0])\n  ) {\n    kindValue = asTagNode(\n      asPostcssNodeWithChildren(nodes[0]).nodes[0],\n    ).value\n  }\n\n  // Extract comparator if present\n  if (kindValue.startsWith('>=')) {\n    comparator = '>='\n    kindValue = kindValue.substring(2)\n  } else if (kindValue.startsWith('<=')) {\n    comparator = '<='\n    kindValue = kindValue.substring(2)\n  } else if (kindValue.startsWith('>')) {\n    comparator = '>'\n    kindValue = kindValue.substring(1)\n  } else if (kindValue.startsWith('<')) {\n    comparator = '<'\n    kindValue = kindValue.substring(1)\n  }\n\n  // Parse kind value\n  if (kindValue) {\n    if (isSeverityKind(kindValue)) {\n      kind = kindValue\n    } else {\n      throw error(\n        'Expected a valid severity kind or number between 0-3',\n        {\n          found: kindValue,\n        },\n      )\n    }\n  }\n\n  return { kind, comparator }\n}\n\nexport const severity = async (state: ParserState) => {\n  assertSecurityArchive(state, 'severity')\n\n  let internals\n  try {\n    internals = parseInternals(\n      asPostcssNodeWithChildren(state.current).nodes,\n    )\n  } catch (err) {\n    throw error('Failed to parse :severity selector', { cause: err })\n  }\n\n  const { kind, comparator } = internals\n\n  for (const node of state.partial.nodes) {\n    const report = state.securityArchive.get(node.id)\n    // Always exclude nodes that don't have security data or alerts\n    if (!report?.alerts || report.alerts.length === 0) {\n      removeNode(state, node)\n    }\n  }\n\n  for (const node of state.partial.nodes) {\n    const report = state.securityArchive.get(node.id)\n    let exclude = true\n\n    if (report) {\n      if (comparator) {\n        // retrieve the value to compare against\n        const kindLevel = kindLevelMap.get(kind)\n        // the kindLevel value has already been validated at this point\n        // and thus can never return an undefined/falsy value but ts doesn't\n        // know about that, so we have the extra check here\n        /* c8 ignore next - impossible */\n        if (!kindLevel) break\n\n        // Check each alert to find any that match our comparison criteria\n        for (const alert of report.alerts) {\n          // Get the numerical value of the alert type\n          const alertType = alert.type\n\n          // retrieve a key to the current alert level to be compared against\n          const currentAlertLevelKey = [...kindsMap.entries()].find(\n            ([_, alertValue]) => alertValue === alertType,\n          )?.[0]\n\n          // perform the comparison based on the user-provided kindLevel\n          if (currentAlertLevelKey) {\n            const currentAlertLevel = kindLevelMap.get(\n              currentAlertLevelKey,\n            )\n            /* c8 ignore next - impossible but ts doesn't know */\n            if (currentAlertLevel == null) continue\n\n            switch (comparator) {\n              case '>':\n                if (currentAlertLevel > kindLevel) {\n                  exclude = false\n                }\n                break\n              case '<':\n                if (currentAlertLevel < kindLevel) {\n                  exclude = false\n                }\n                break\n              case '>=':\n                if (currentAlertLevel >= kindLevel) {\n                  exclude = false\n                }\n                break\n              case '<=':\n                if (currentAlertLevel <= kindLevel) {\n                  exclude = false\n                }\n                break\n            }\n          }\n        }\n      } else {\n        // Original exact match behavior\n        const alertName = kindsMap.get(kind)\n        exclude = !report.alerts.some(\n          alert => alert.type === alertName,\n        )\n      }\n    }\n\n    if (exclude) {\n      removeNode(state, node)\n    }\n  }\n\n  removeDanglingEdges(state)\n\n  return state\n}\n"]}

package/dist/esm/pseudo/shell.d.ts

@@ -0,0 +1,7 @@
+/**
+ * Filters out any node that does not have a **shellAccess** report alert.
+ */
+export declare const shell: (state: import("../types.ts").ParserState) => Promise<import("../types.ts").ParserState & {
+    securityArchive: NonNullable<import("../types.ts").ParserState["securityArchive"]>;
+}>;
+//# sourceMappingURL=shell.d.ts.map

package/dist/esm/pseudo/shell.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"shell.d.ts","sourceRoot":"","sources":["../../../src/pseudo/shell.ts"],"names":[],"mappings":"AAEA;;GAEG;AACH,eAAO,MAAM,KAAK;;EAGjB,CAAA"}

package/dist/esm/pseudo/shell.js

@@ -0,0 +1,6 @@
+import { createSecuritySelectorFilter } from "./helpers.js";
+/**
+ * Filters out any node that does not have a **shellAccess** report alert.
+ */
+export const shell = createSecuritySelectorFilter('shell', 'shellAccess');
+//# sourceMappingURL=shell.js.map

package/dist/esm/pseudo/shell.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"shell.js","sourceRoot":"","sources":["../../../src/pseudo/shell.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,4BAA4B,EAAE,MAAM,cAAc,CAAA;AAE3D;;GAEG;AACH,MAAM,CAAC,MAAM,KAAK,GAAG,4BAA4B,CAC/C,OAAO,EACP,aAAa,CACd,CAAA","sourcesContent":["import { createSecuritySelectorFilter } from './helpers.ts'\n\n/**\n * Filters out any node that does not have a **shellAccess** report alert.\n */\nexport const shell = createSecuritySelectorFilter(\n  'shell',\n  'shellAccess',\n)\n"]}

package/dist/esm/pseudo/shrinkwrap.d.ts

@@ -0,0 +1,7 @@
+/**
+ * Filters out any node that does not have a **shrinkwrap** report alert.
+ */
+export declare const shrinkwrap: (state: import("../types.ts").ParserState) => Promise<import("../types.ts").ParserState & {
+    securityArchive: NonNullable<import("../types.ts").ParserState["securityArchive"]>;
+}>;
+//# sourceMappingURL=shrinkwrap.d.ts.map

package/dist/esm/pseudo/shrinkwrap.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"shrinkwrap.d.ts","sourceRoot":"","sources":["../../../src/pseudo/shrinkwrap.ts"],"names":[],"mappings":"AAEA;;GAEG;AACH,eAAO,MAAM,UAAU;;EAGtB,CAAA"}

package/dist/esm/pseudo/shrinkwrap.js

@@ -0,0 +1,6 @@
+import { createSecuritySelectorFilter } from "./helpers.js";
+/**
+ * Filters out any node that does not have a **shrinkwrap** report alert.
+ */
+export const shrinkwrap = createSecuritySelectorFilter('shrinkwrap', 'shrinkwrap');
+//# sourceMappingURL=shrinkwrap.js.map

package/dist/esm/pseudo/shrinkwrap.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"shrinkwrap.js","sourceRoot":"","sources":["../../../src/pseudo/shrinkwrap.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,4BAA4B,EAAE,MAAM,cAAc,CAAA;AAE3D;;GAEG;AACH,MAAM,CAAC,MAAM,UAAU,GAAG,4BAA4B,CACpD,YAAY,EACZ,YAAY,CACb,CAAA","sourcesContent":["import { createSecuritySelectorFilter } from './helpers.ts'\n\n/**\n * Filters out any node that does not have a **shrinkwrap** report alert.\n */\nexport const shrinkwrap = createSecuritySelectorFilter(\n  'shrinkwrap',\n  'shrinkwrap',\n)\n"]}

package/dist/esm/pseudo/squat.d.ts

@@ -0,0 +1,15 @@
+import type { ParserState } from '../types.ts';
+import type { PostcssNode } from '@vltpkg/dss-parser';
+export type SquatKinds = '0' | '2' | 'critical' | 'medium' | undefined;
+export type SquatAlertTypes = 'didYouMean' | 'gptDidYouMean' | undefined;
+export type SquatComparator = '>' | '<' | '>=' | '<=' | undefined;
+export declare const isSquatKind: (value?: string) => value is SquatKinds;
+export declare const asSquatKind: (value?: string) => SquatKinds;
+export declare const parseInternals: (nodes: PostcssNode[]) => {
+    kind: SquatKinds;
+    comparator: SquatComparator;
+};
+export declare const squat: (state: ParserState) => Promise<ParserState & {
+    securityArchive: NonNullable<ParserState["securityArchive"]>;
+}>;
+//# sourceMappingURL=squat.d.ts.map

package/dist/esm/pseudo/squat.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"squat.d.ts","sourceRoot":"","sources":["../../../src/pseudo/squat.ts"],"names":[],"mappings":"AAcA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,aAAa,CAAA;AAC9C,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAA;AAErD,MAAM,MAAM,UAAU,GAAG,GAAG,GAAG,GAAG,GAAG,UAAU,GAAG,QAAQ,GAAG,SAAS,CAAA;AAEtE,MAAM,MAAM,eAAe,GACvB,YAAY,GACZ,eAAe,GACf,SAAS,CAAA;AAEb,MAAM,MAAM,eAAe,GAAG,GAAG,GAAG,GAAG,GAAG,IAAI,GAAG,IAAI,GAAG,SAAS,CAAA;AAoBjE,eAAO,MAAM,WAAW,WAAY,MAAM,KAAG,KAAK,IAAI,UACtB,CAAA;AAEhC,eAAO,MAAM,WAAW,WAAY,MAAM,KAAG,UAQ5C,CAAA;AAED,eAAO,MAAM,cAAc,UAClB,WAAW,EAAE,KACnB;IACD,IAAI,EAAE,UAAU,CAAA;IAChB,UAAU,EAAE,eAAe,CAAA;CA+C5B,CAAA;AAED,eAAO,MAAM,KAAK,UAAiB,WAAW;;EAuG7C,CAAA"}

package/dist/esm/pseudo/squat.js

@@ -0,0 +1,161 @@
+import { error } from '@vltpkg/error-cause';
+import { asPostcssNodeWithChildren, asStringNode, asTagNode, isStringNode, isTagNode, } from '@vltpkg/dss-parser';
+import { assertSecurityArchive, removeDanglingEdges, removeNode, removeQuotes, } from "./helpers.js";
+const kindsMap = new Map([
+    ['critical', 'didYouMean'],
+    ['medium', 'gptDidYouMean'],
+    ['0', 'didYouMean'],
+    ['2', 'gptDidYouMean'],
+    [undefined, undefined],
+]);
+// Map numerical values to their respective kinds for comparison operations
+const kindLevelMap = new Map([
+    ['critical', 0],
+    ['medium', 2],
+    ['0', 0],
+    ['2', 2],
+]);
+const kinds = new Set(kindsMap.keys());
+export const isSquatKind = (value) => kinds.has(value);
+export const asSquatKind = (value) => {
+    if (!isSquatKind(value)) {
+        throw error('Expected a valid squat kind', {
+            found: value,
+            validOptions: Array.from(kinds),
+        });
+    }
+    return value;
+};
+export const parseInternals = (nodes) => {
+    let kind;
+    let comparator;
+    let kindValue = '';
+    if (isStringNode(asPostcssNodeWithChildren(nodes[0]).nodes[0])) {
+        kindValue = removeQuotes(asStringNode(asPostcssNodeWithChildren(nodes[0]).nodes[0])
+            .value);
+    }
+    else if (isTagNode(asPostcssNodeWithChildren(nodes[0]).nodes[0])) {
+        kindValue = asTagNode(asPostcssNodeWithChildren(nodes[0]).nodes[0]).value;
+    }
+    // Extract comparator if present
+    if (kindValue.startsWith('>=')) {
+        comparator = '>=';
+        kindValue = kindValue.substring(2);
+    }
+    else if (kindValue.startsWith('<=')) {
+        comparator = '<=';
+        kindValue = kindValue.substring(2);
+    }
+    else if (kindValue.startsWith('>')) {
+        comparator = '>';
+        kindValue = kindValue.substring(1);
+    }
+    else if (kindValue.startsWith('<')) {
+        comparator = '<';
+        kindValue = kindValue.substring(1);
+    }
+    // Parse kind value
+    if (kindValue) {
+        if (isSquatKind(kindValue)) {
+            kind = kindValue;
+        }
+        else {
+            throw error('Expected a valid squat kind for comparison', {
+                found: kindValue,
+                validOptions: Array.from(kinds),
+            });
+        }
+    }
+    return { kind, comparator };
+};
+export const squat = async (state) => {
+    assertSecurityArchive(state, 'squat');
+    let internals;
+    try {
+        internals = parseInternals(asPostcssNodeWithChildren(state.current).nodes);
+    }
+    catch (err) {
+        throw error('Failed to parse :squat selector', { cause: err });
+    }
+    const { kind, comparator } = internals;
+    // First pass: Remove nodes without security data
+    for (const node of state.partial.nodes) {
+        const report = state.securityArchive.get(node.id);
+        // Always exclude nodes that don't have security data or alerts
+        if (!report?.alerts || report.alerts.length === 0) {
+            removeNode(state, node);
+        }
+    }
+    // Second pass: Apply comparison filtering
+    for (const node of state.partial.nodes) {
+        const report = state.securityArchive.get(node.id);
+        // Skip if report is undefined
+        // (should never happen since we filtered above)
+        /* c8 ignore next - impossible */
+        if (!report)
+            continue;
+        // At this point we know report exists and has alerts
+        let exclude = true;
+        if (comparator) {
+            // Get the value to compare against
+            const kindLevel = kindLevelMap.get(kind);
+            /* c8 ignore next - impossible */
+            if (kindLevel === undefined)
+                break;
+            // For each alert, check if it matches the comparison criteria
+            let matchesComparison = false;
+            for (const alert of report.alerts) {
+                // Get the alert type
+                const alertType = alert.type;
+                // Find the corresponding kind for this alert type
+                const alertLevelKey = [...kindsMap.entries()].find(([_, value]) => value === alertType)?.[0];
+                if (alertLevelKey) {
+                    // Get the numeric level for this alert
+                    const alertLevel = kindLevelMap.get(alertLevelKey);
+                    /* c8 ignore next - impossible */
+                    if (alertLevel === undefined)
+                        continue;
+                    // Apply the comparison based on the comparator
+                    switch (comparator) {
+                        case '>':
+                            if (alertLevel > kindLevel) {
+                                matchesComparison = true;
+                            }
+                            break;
+                        case '<':
+                            if (alertLevel < kindLevel) {
+                                matchesComparison = true;
+                            }
+                            break;
+                        case '>=':
+                            if (alertLevel >= kindLevel) {
+                                matchesComparison = true;
+                            }
+                            break;
+                        case '<=':
+                            if (alertLevel <= kindLevel) {
+                                matchesComparison = true;
+                            }
+                            break;
+                    }
+                    // If we found a match, we can stop checking other alerts
+                    if (matchesComparison)
+                        break;
+                }
+            }
+            // Exclude the node if it doesn't match the comparison
+            exclude = !matchesComparison;
+        }
+        else {
+            // Original exact match behavior
+            const alertName = kindsMap.get(kind);
+            exclude = !report.alerts.some(alert => alert.type === alertName);
+        }
+        if (exclude) {
+            removeNode(state, node);
+        }
+    }
+    removeDanglingEdges(state);
+    return state;
+};
+//# sourceMappingURL=squat.js.map

package/dist/esm/pseudo/squat.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"squat.js","sourceRoot":"","sources":["../../../src/pseudo/squat.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,qBAAqB,CAAA;AAC3C,OAAO,EACL,yBAAyB,EACzB,YAAY,EACZ,SAAS,EACT,YAAY,EACZ,SAAS,GACV,MAAM,oBAAoB,CAAA;AAC3B,OAAO,EACL,qBAAqB,EACrB,mBAAmB,EACnB,UAAU,EACV,YAAY,GACb,MAAM,cAAc,CAAA;AAarB,MAAM,QAAQ,GAAG,IAAI,GAAG,CAA8B;IACpD,CAAC,UAAU,EAAE,YAAY,CAAC;IAC1B,CAAC,QAAQ,EAAE,eAAe,CAAC;IAC3B,CAAC,GAAG,EAAE,YAAY,CAAC;IACnB,CAAC,GAAG,EAAE,eAAe,CAAC;IACtB,CAAC,SAAS,EAAE,SAAS,CAAC;CACvB,CAAC,CAAA;AAEF,2EAA2E;AAC3E,MAAM,YAAY,GAAG,IAAI,GAAG,CAAqB;IAC/C,CAAC,UAAU,EAAE,CAAC,CAAC;IACf,CAAC,QAAQ,EAAE,CAAC,CAAC;IACb,CAAC,GAAG,EAAE,CAAC,CAAC;IACR,CAAC,GAAG,EAAE,CAAC,CAAC;CACT,CAAC,CAAA;AAEF,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAA;AAEtC,MAAM,CAAC,MAAM,WAAW,GAAG,CAAC,KAAc,EAAuB,EAAE,CACjE,KAAK,CAAC,GAAG,CAAC,KAAmB,CAAC,CAAA;AAEhC,MAAM,CAAC,MAAM,WAAW,GAAG,CAAC,KAAc,EAAc,EAAE;IACxD,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,EAAE,CAAC;QACxB,MAAM,KAAK,CAAC,6BAA6B,EAAE;YACzC,KAAK,EAAE,KAAK;YACZ,YAAY,EAAE,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC;SAChC,CAAC,CAAA;IACJ,CAAC;IACD,OAAO,KAAK,CAAA;AACd,CAAC,CAAA;AAED,MAAM,CAAC,MAAM,cAAc,GAAG,CAC5B,KAAoB,EAIpB,EAAE;IACF,IAAI,IAAgB,CAAA;IACpB,IAAI,UAA2B,CAAA;IAE/B,IAAI,SAAS,GAAG,EAAE,CAAA;IAClB,IAAI,YAAY,CAAC,yBAAyB,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAC/D,SAAS,GAAG,YAAY,CACtB,YAAY,CAAC,yBAAyB,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;aACvD,KAAK,CACT,CAAA;IACH,CAAC;SAAM,IACL,SAAS,CAAC,yBAAyB,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EACvD,CAAC;QACD,SAAS,GAAG,SAAS,CACnB,yBAAyB,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAC7C,CAAC,KAAK,CAAA;IACT,CAAC;IAED,gCAAgC;IAChC,IAAI,SAAS,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;QAC/B,UAAU,GAAG,IAAI,CAAA;QACjB,SAAS,GAAG,SAAS,CAAC,SAAS,CAAC,CAAC,CAAC,CAAA;IACpC,CAAC;SAAM,IAAI,SAAS,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;QACtC,UAAU,GAAG,IAAI,CAAA;QACjB,SAAS,GAAG,SAAS,CAAC,SAAS,CAAC,CAAC,CAAC,CAAA;IACpC,CAAC;SAAM,IAAI,SAAS,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QACrC,UAAU,GAAG,GAAG,CAAA;QAChB,SAAS,GAAG,SAAS,CAAC,SAAS,CAAC,CAAC,CAAC,CAAA;IACpC,CAAC;SAAM,IAAI,SAAS,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QACrC,UAAU,GAAG,GAAG,CAAA;QAChB,SAAS,GAAG,SAAS,CAAC,SAAS,CAAC,CAAC,CAAC,CAAA;IACpC,CAAC;IAED,mBAAmB;IACnB,IAAI,SAAS,EAAE,CAAC;QACd,IAAI,WAAW,CAAC,SAAS,CAAC,EAAE,CAAC;YAC3B,IAAI,GAAG,SAAS,CAAA;QAClB,CAAC;aAAM,CAAC;YACN,MAAM,KAAK,CAAC,4CAA4C,EAAE;gBACxD,KAAK,EAAE,SAAS;gBAChB,YAAY,EAAE,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC;aAChC,CAAC,CAAA;QACJ,CAAC;IACH,CAAC;IAED,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,CAAA;AAC7B,CAAC,CAAA;AAED,MAAM,CAAC,MAAM,KAAK,GAAG,KAAK,EAAE,KAAkB,EAAE,EAAE;IAChD,qBAAqB,CAAC,KAAK,EAAE,OAAO,CAAC,CAAA;IAErC,IAAI,SAAS,CAAA;IACb,IAAI,CAAC;QACH,SAAS,GAAG,cAAc,CACxB,yBAAyB,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,KAAK,CAC/C,CAAA;IACH,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,KAAK,CAAC,iCAAiC,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,CAAA;IAChE,CAAC;IAED,MAAM,EAAE,IAAI,EAAE,UAAU,EAAE,GAAG,SAAS,CAAA;IAEtC,iDAAiD;IACjD,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;QACvC,MAAM,MAAM,GAAG,KAAK,CAAC,eAAe,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;QACjD,+DAA+D;QAC/D,IAAI,CAAC,MAAM,EAAE,MAAM,IAAI,MAAM,CAAC,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAClD,UAAU,CAAC,KAAK,EAAE,IAAI,CAAC,CAAA;QACzB,CAAC;IACH,CAAC;IAED,0CAA0C;IAC1C,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;QACvC,MAAM,MAAM,GAAG,KAAK,CAAC,eAAe,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;QAEjD,8BAA8B;QAC9B,gDAAgD;QAChD,iCAAiC;QACjC,IAAI,CAAC,MAAM;YAAE,SAAQ;QAErB,qDAAqD;QACrD,IAAI,OAAO,GAAG,IAAI,CAAA;QAElB,IAAI,UAAU,EAAE,CAAC;YACf,mCAAmC;YACnC,MAAM,SAAS,GAAG,YAAY,CAAC,GAAG,CAAC,IAAI,CAAC,CAAA;YACxC,iCAAiC;YACjC,IAAI,SAAS,KAAK,SAAS;gBAAE,MAAK;YAElC,8DAA8D;YAC9D,IAAI,iBAAiB,GAAG,KAAK,CAAA;YAC7B,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC;gBAClC,qBAAqB;gBACrB,MAAM,SAAS,GAAG,KAAK,CAAC,IAAI,CAAA;gBAE5B,kDAAkD;gBAClD,MAAM,aAAa,GAAG,CAAC,GAAG,QAAQ,CAAC,OAAO,EAAE,CAAC,CAAC,IAAI,CAChD,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,KAAK,KAAK,SAAS,CACpC,EAAE,CAAC,CAAC,CAAC,CAAA;gBAEN,IAAI,aAAa,EAAE,CAAC;oBAClB,uCAAuC;oBACvC,MAAM,UAAU,GAAG,YAAY,CAAC,GAAG,CAAC,aAAa,CAAC,CAAA;oBAClD,iCAAiC;oBACjC,IAAI,UAAU,KAAK,SAAS;wBAAE,SAAQ;oBAEtC,+CAA+C;oBAC/C,QAAQ,UAAU,EAAE,CAAC;wBACnB,KAAK,GAAG;4BACN,IAAI,UAAU,GAAG,SAAS,EAAE,CAAC;gCAC3B,iBAAiB,GAAG,IAAI,CAAA;4BAC1B,CAAC;4BACD,MAAK;wBACP,KAAK,GAAG;4BACN,IAAI,UAAU,GAAG,SAAS,EAAE,CAAC;gCAC3B,iBAAiB,GAAG,IAAI,CAAA;4BAC1B,CAAC;4BACD,MAAK;wBACP,KAAK,IAAI;4BACP,IAAI,UAAU,IAAI,SAAS,EAAE,CAAC;gCAC5B,iBAAiB,GAAG,IAAI,CAAA;4BAC1B,CAAC;4BACD,MAAK;wBACP,KAAK,IAAI;4BACP,IAAI,UAAU,IAAI,SAAS,EAAE,CAAC;gCAC5B,iBAAiB,GAAG,IAAI,CAAA;4BAC1B,CAAC;4BACD,MAAK;oBACT,CAAC;oBAED,yDAAyD;oBACzD,IAAI,iBAAiB;wBAAE,MAAK;gBAC9B,CAAC;YACH,CAAC;YAED,sDAAsD;YACtD,OAAO,GAAG,CAAC,iBAAiB,CAAA;QAC9B,CAAC;aAAM,CAAC;YACN,gCAAgC;YAChC,MAAM,SAAS,GAAG,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,CAAA;YACpC,OAAO,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,IAAI,KAAK,SAAS,CAAC,CAAA;QAClE,CAAC;QAED,IAAI,OAAO,EAAE,CAAC;YACZ,UAAU,CAAC,KAAK,EAAE,IAAI,CAAC,CAAA;QACzB,CAAC;IACH,CAAC;IAED,mBAAmB,CAAC,KAAK,CAAC,CAAA;IAE1B,OAAO,KAAK,CAAA;AACd,CAAC,CAAA","sourcesContent":["import { error } from '@vltpkg/error-cause'\nimport {\n  asPostcssNodeWithChildren,\n  asStringNode,\n  asTagNode,\n  isStringNode,\n  isTagNode,\n} from '@vltpkg/dss-parser'\nimport {\n  assertSecurityArchive,\n  removeDanglingEdges,\n  removeNode,\n  removeQuotes,\n} from './helpers.ts'\nimport type { ParserState } from '../types.ts'\nimport type { PostcssNode } from '@vltpkg/dss-parser'\n\nexport type SquatKinds = '0' | '2' | 'critical' | 'medium' | undefined\n\nexport type SquatAlertTypes =\n  | 'didYouMean'\n  | 'gptDidYouMean'\n  | undefined\n\nexport type SquatComparator = '>' | '<' | '>=' | '<=' | undefined\n\nconst kindsMap = new Map<SquatKinds, SquatAlertTypes>([\n  ['critical', 'didYouMean'],\n  ['medium', 'gptDidYouMean'],\n  ['0', 'didYouMean'],\n  ['2', 'gptDidYouMean'],\n  [undefined, undefined],\n])\n\n// Map numerical values to their respective kinds for comparison operations\nconst kindLevelMap = new Map<SquatKinds, number>([\n  ['critical', 0],\n  ['medium', 2],\n  ['0', 0],\n  ['2', 2],\n])\n\nconst kinds = new Set(kindsMap.keys())\n\nexport const isSquatKind = (value?: string): value is SquatKinds =>\n  kinds.has(value as SquatKinds)\n\nexport const asSquatKind = (value?: string): SquatKinds => {\n  if (!isSquatKind(value)) {\n    throw error('Expected a valid squat kind', {\n      found: value,\n      validOptions: Array.from(kinds),\n    })\n  }\n  return value\n}\n\nexport const parseInternals = (\n  nodes: PostcssNode[],\n): {\n  kind: SquatKinds\n  comparator: SquatComparator\n} => {\n  let kind: SquatKinds\n  let comparator: SquatComparator\n\n  let kindValue = ''\n  if (isStringNode(asPostcssNodeWithChildren(nodes[0]).nodes[0])) {\n    kindValue = removeQuotes(\n      asStringNode(asPostcssNodeWithChildren(nodes[0]).nodes[0])\n        .value,\n    )\n  } else if (\n    isTagNode(asPostcssNodeWithChildren(nodes[0]).nodes[0])\n  ) {\n    kindValue = asTagNode(\n      asPostcssNodeWithChildren(nodes[0]).nodes[0],\n    ).value\n  }\n\n  // Extract comparator if present\n  if (kindValue.startsWith('>=')) {\n    comparator = '>='\n    kindValue = kindValue.substring(2)\n  } else if (kindValue.startsWith('<=')) {\n    comparator = '<='\n    kindValue = kindValue.substring(2)\n  } else if (kindValue.startsWith('>')) {\n    comparator = '>'\n    kindValue = kindValue.substring(1)\n  } else if (kindValue.startsWith('<')) {\n    comparator = '<'\n    kindValue = kindValue.substring(1)\n  }\n\n  // Parse kind value\n  if (kindValue) {\n    if (isSquatKind(kindValue)) {\n      kind = kindValue\n    } else {\n      throw error('Expected a valid squat kind for comparison', {\n        found: kindValue,\n        validOptions: Array.from(kinds),\n      })\n    }\n  }\n\n  return { kind, comparator }\n}\n\nexport const squat = async (state: ParserState) => {\n  assertSecurityArchive(state, 'squat')\n\n  let internals\n  try {\n    internals = parseInternals(\n      asPostcssNodeWithChildren(state.current).nodes,\n    )\n  } catch (err) {\n    throw error('Failed to parse :squat selector', { cause: err })\n  }\n\n  const { kind, comparator } = internals\n\n  // First pass: Remove nodes without security data\n  for (const node of state.partial.nodes) {\n    const report = state.securityArchive.get(node.id)\n    // Always exclude nodes that don't have security data or alerts\n    if (!report?.alerts || report.alerts.length === 0) {\n      removeNode(state, node)\n    }\n  }\n\n  // Second pass: Apply comparison filtering\n  for (const node of state.partial.nodes) {\n    const report = state.securityArchive.get(node.id)\n\n    // Skip if report is undefined\n    // (should never happen since we filtered above)\n    /* c8 ignore next - impossible */\n    if (!report) continue\n\n    // At this point we know report exists and has alerts\n    let exclude = true\n\n    if (comparator) {\n      // Get the value to compare against\n      const kindLevel = kindLevelMap.get(kind)\n      /* c8 ignore next - impossible */\n      if (kindLevel === undefined) break\n\n      // For each alert, check if it matches the comparison criteria\n      let matchesComparison = false\n      for (const alert of report.alerts) {\n        // Get the alert type\n        const alertType = alert.type\n\n        // Find the corresponding kind for this alert type\n        const alertLevelKey = [...kindsMap.entries()].find(\n          ([_, value]) => value === alertType,\n        )?.[0]\n\n        if (alertLevelKey) {\n          // Get the numeric level for this alert\n          const alertLevel = kindLevelMap.get(alertLevelKey)\n          /* c8 ignore next - impossible */\n          if (alertLevel === undefined) continue\n\n          // Apply the comparison based on the comparator\n          switch (comparator) {\n            case '>':\n              if (alertLevel > kindLevel) {\n                matchesComparison = true\n              }\n              break\n            case '<':\n              if (alertLevel < kindLevel) {\n                matchesComparison = true\n              }\n              break\n            case '>=':\n              if (alertLevel >= kindLevel) {\n                matchesComparison = true\n              }\n              break\n            case '<=':\n              if (alertLevel <= kindLevel) {\n                matchesComparison = true\n              }\n              break\n          }\n\n          // If we found a match, we can stop checking other alerts\n          if (matchesComparison) break\n        }\n      }\n\n      // Exclude the node if it doesn't match the comparison\n      exclude = !matchesComparison\n    } else {\n      // Original exact match behavior\n      const alertName = kindsMap.get(kind)\n      exclude = !report.alerts.some(alert => alert.type === alertName)\n    }\n\n    if (exclude) {\n      removeNode(state, node)\n    }\n  }\n\n  removeDanglingEdges(state)\n\n  return state\n}\n"]}

package/dist/esm/pseudo/suspicious.d.ts

@@ -0,0 +1,7 @@
+/**
+ * Filters out any node that does not have a **suspiciousStarActivity** report alert.
+ */
+export declare const suspicious: (state: import("../types.ts").ParserState) => Promise<import("../types.ts").ParserState & {
+    securityArchive: NonNullable<import("../types.ts").ParserState["securityArchive"]>;
+}>;
+//# sourceMappingURL=suspicious.d.ts.map

package/dist/esm/pseudo/suspicious.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"suspicious.d.ts","sourceRoot":"","sources":["../../../src/pseudo/suspicious.ts"],"names":[],"mappings":"AAEA;;GAEG;AACH,eAAO,MAAM,UAAU;;EAGtB,CAAA"}

package/dist/esm/pseudo/suspicious.js

@@ -0,0 +1,6 @@
+import { createSecuritySelectorFilter } from "./helpers.js";
+/**
+ * Filters out any node that does not have a **suspiciousStarActivity** report alert.
+ */
+export const suspicious = createSecuritySelectorFilter('suspicious', 'suspiciousStarActivity');
+//# sourceMappingURL=suspicious.js.map

package/dist/esm/pseudo/suspicious.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"suspicious.js","sourceRoot":"","sources":["../../../src/pseudo/suspicious.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,4BAA4B,EAAE,MAAM,cAAc,CAAA;AAE3D;;GAEG;AACH,MAAM,CAAC,MAAM,UAAU,GAAG,4BAA4B,CACpD,YAAY,EACZ,wBAAwB,CACzB,CAAA","sourcesContent":["import { createSecuritySelectorFilter } from './helpers.ts'\n\n/**\n * Filters out any node that does not have a **suspiciousStarActivity** report alert.\n */\nexport const suspicious = createSecuritySelectorFilter(\n  'suspicious',\n  'suspiciousStarActivity',\n)\n"]}

package/dist/esm/pseudo/tracker.d.ts

@@ -0,0 +1,7 @@
+/**
+ * Filters out any node that does not have a **telemetry** report alert.
+ */
+export declare const tracker: (state: import("../types.ts").ParserState) => Promise<import("../types.ts").ParserState & {
+    securityArchive: NonNullable<import("../types.ts").ParserState["securityArchive"]>;
+}>;
+//# sourceMappingURL=tracker.d.ts.map

package/dist/esm/pseudo/tracker.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tracker.d.ts","sourceRoot":"","sources":["../../../src/pseudo/tracker.ts"],"names":[],"mappings":"AAEA;;GAEG;AACH,eAAO,MAAM,OAAO;;EAGnB,CAAA"}

package/dist/esm/pseudo/tracker.js

@@ -0,0 +1,6 @@
+import { createSecuritySelectorFilter } from "./helpers.js";
+/**
+ * Filters out any node that does not have a **telemetry** report alert.
+ */
+export const tracker = createSecuritySelectorFilter('tracker', 'telemetry');
+//# sourceMappingURL=tracker.js.map

package/dist/esm/pseudo/tracker.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tracker.js","sourceRoot":"","sources":["../../../src/pseudo/tracker.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,4BAA4B,EAAE,MAAM,cAAc,CAAA;AAE3D;;GAEG;AACH,MAAM,CAAC,MAAM,OAAO,GAAG,4BAA4B,CACjD,SAAS,EACT,WAAW,CACZ,CAAA","sourcesContent":["import { createSecuritySelectorFilter } from './helpers.ts'\n\n/**\n * Filters out any node that does not have a **telemetry** report alert.\n */\nexport const tracker = createSecuritySelectorFilter(\n  'tracker',\n  'telemetry',\n)\n"]}

package/dist/esm/pseudo/trivial.d.ts

@@ -0,0 +1,7 @@
+/**
+ * Filters out any node that does not have a **trivialPackage** report alert.
+ */
+export declare const trivial: (state: import("../types.ts").ParserState) => Promise<import("../types.ts").ParserState & {
+    securityArchive: NonNullable<import("../types.ts").ParserState["securityArchive"]>;
+}>;
+//# sourceMappingURL=trivial.d.ts.map

package/dist/esm/pseudo/trivial.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"trivial.d.ts","sourceRoot":"","sources":["../../../src/pseudo/trivial.ts"],"names":[],"mappings":"AAEA;;GAEG;AACH,eAAO,MAAM,OAAO;;EAGnB,CAAA"}

package/dist/esm/pseudo/trivial.js

@@ -0,0 +1,6 @@
+import { createSecuritySelectorFilter } from "./helpers.js";
+/**
+ * Filters out any node that does not have a **trivialPackage** report alert.
+ */
+export const trivial = createSecuritySelectorFilter('trivial', 'trivialPackage');
+//# sourceMappingURL=trivial.js.map

package/dist/esm/pseudo/trivial.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"trivial.js","sourceRoot":"","sources":["../../../src/pseudo/trivial.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,4BAA4B,EAAE,MAAM,cAAc,CAAA;AAE3D;;GAEG;AACH,MAAM,CAAC,MAAM,OAAO,GAAG,4BAA4B,CACjD,SAAS,EACT,gBAAgB,CACjB,CAAA","sourcesContent":["import { createSecuritySelectorFilter } from './helpers.ts'\n\n/**\n * Filters out any node that does not have a **trivialPackage** report alert.\n */\nexport const trivial = createSecuritySelectorFilter(\n  'trivial',\n  'trivialPackage',\n)\n"]}

package/dist/esm/pseudo/type.d.ts

@@ -0,0 +1,8 @@
+import type { ParserState } from '../types.ts';
+/**
+ * :type(str) Pseudo-Element will match only nodes that are of
+ * the same type as the value used. The type is determined by the
+ * first part of the dependency ID.
+ */
+export declare const type: (state: ParserState) => Promise<ParserState>;
+//# sourceMappingURL=type.d.ts.map

package/dist/esm/pseudo/type.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"type.d.ts","sourceRoot":"","sources":["../../../src/pseudo/type.ts"],"names":[],"mappings":"AAMA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,aAAa,CAAA;AAE9C;;;;GAIG;AACH,eAAO,MAAM,IAAI,UAAiB,WAAW,yBAY5C,CAAA"}

package/dist/esm/pseudo/type.js

@@ -0,0 +1,22 @@
+import { splitDepID } from '@vltpkg/dep-id/browser';
+import { asPostcssNodeWithChildren, asTagNode, } from '@vltpkg/dss-parser';
+import { removeDanglingEdges, removeNode } from "./helpers.js";
+/**
+ * :type(str) Pseudo-Element will match only nodes that are of
+ * the same type as the value used. The type is determined by the
+ * first part of the dependency ID.
+ */
+export const type = async (state) => {
+    const type = asPostcssNodeWithChildren(state.current);
+    const selector = asPostcssNodeWithChildren(type.nodes[0]);
+    const name = asTagNode(selector.nodes[0]).value;
+    for (const node of state.partial.nodes) {
+        const nodeType = splitDepID(node.id)[0];
+        if (nodeType !== name) {
+            removeNode(state, node);
+        }
+    }
+    removeDanglingEdges(state);
+    return state;
+};
+//# sourceMappingURL=type.js.map

package/dist/esm/pseudo/type.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"type.js","sourceRoot":"","sources":["../../../src/pseudo/type.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,wBAAwB,CAAA;AACnD,OAAO,EACL,yBAAyB,EACzB,SAAS,GACV,MAAM,oBAAoB,CAAA;AAC3B,OAAO,EAAE,mBAAmB,EAAE,UAAU,EAAE,MAAM,cAAc,CAAA;AAG9D;;;;GAIG;AACH,MAAM,CAAC,MAAM,IAAI,GAAG,KAAK,EAAE,KAAkB,EAAE,EAAE;IAC/C,MAAM,IAAI,GAAG,yBAAyB,CAAC,KAAK,CAAC,OAAO,CAAC,CAAA;IACrD,MAAM,QAAQ,GAAG,yBAAyB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAA;IACzD,MAAM,IAAI,GAAG,SAAS,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAA;IAC/C,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;QACvC,MAAM,QAAQ,GAAG,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAA;QACvC,IAAI,QAAQ,KAAK,IAAI,EAAE,CAAC;YACtB,UAAU,CAAC,KAAK,EAAE,IAAI,CAAC,CAAA;QACzB,CAAC;IACH,CAAC;IACD,mBAAmB,CAAC,KAAK,CAAC,CAAA;IAC1B,OAAO,KAAK,CAAA;AACd,CAAC,CAAA","sourcesContent":["import { splitDepID } from '@vltpkg/dep-id/browser'\nimport {\n  asPostcssNodeWithChildren,\n  asTagNode,\n} from '@vltpkg/dss-parser'\nimport { removeDanglingEdges, removeNode } from './helpers.ts'\nimport type { ParserState } from '../types.ts'\n\n/**\n * :type(str) Pseudo-Element will match only nodes that are of\n * the same type as the value used. The type is determined by the\n * first part of the dependency ID.\n */\nexport const type = async (state: ParserState) => {\n  const type = asPostcssNodeWithChildren(state.current)\n  const selector = asPostcssNodeWithChildren(type.nodes[0])\n  const name = asTagNode(selector.nodes[0]).value\n  for (const node of state.partial.nodes) {\n    const nodeType = splitDepID(node.id)[0]\n    if (nodeType !== name) {\n      removeNode(state, node)\n    }\n  }\n  removeDanglingEdges(state)\n  return state\n}\n"]}

package/dist/esm/pseudo/undesirable.d.ts

@@ -0,0 +1,7 @@
+/**
+ * Filters out any node that does not have a **troll** report alert.
+ */
+export declare const undesirable: (state: import("../types.ts").ParserState) => Promise<import("../types.ts").ParserState & {
+    securityArchive: NonNullable<import("../types.ts").ParserState["securityArchive"]>;
+}>;
+//# sourceMappingURL=undesirable.d.ts.map

package/dist/esm/pseudo/undesirable.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"undesirable.d.ts","sourceRoot":"","sources":["../../../src/pseudo/undesirable.ts"],"names":[],"mappings":"AAEA;;GAEG;AACH,eAAO,MAAM,WAAW;;EAGvB,CAAA"}

package/dist/esm/pseudo/undesirable.js

@@ -0,0 +1,6 @@
+import { createSecuritySelectorFilter } from "./helpers.js";
+/**
+ * Filters out any node that does not have a **troll** report alert.
+ */
+export const undesirable = createSecuritySelectorFilter('undesirable', 'troll');
+//# sourceMappingURL=undesirable.js.map

package/dist/esm/pseudo/undesirable.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"undesirable.js","sourceRoot":"","sources":["../../../src/pseudo/undesirable.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,4BAA4B,EAAE,MAAM,cAAc,CAAA;AAE3D;;GAEG;AACH,MAAM,CAAC,MAAM,WAAW,GAAG,4BAA4B,CACrD,aAAa,EACb,OAAO,CACR,CAAA","sourcesContent":["import { createSecuritySelectorFilter } from './helpers.ts'\n\n/**\n * Filters out any node that does not have a **troll** report alert.\n */\nexport const undesirable = createSecuritySelectorFilter(\n  'undesirable',\n  'troll',\n)\n"]}

package/dist/esm/pseudo/unknown.d.ts

@@ -0,0 +1,7 @@
+/**
+ * Filters out any node that does not have a **newAuthor** report alert.
+ */
+export declare const unknown: (state: import("../types.ts").ParserState) => Promise<import("../types.ts").ParserState & {
+    securityArchive: NonNullable<import("../types.ts").ParserState["securityArchive"]>;
+}>;
+//# sourceMappingURL=unknown.d.ts.map

package/dist/esm/pseudo/unknown.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"unknown.d.ts","sourceRoot":"","sources":["../../../src/pseudo/unknown.ts"],"names":[],"mappings":"AAEA;;GAEG;AACH,eAAO,MAAM,OAAO;;EAGnB,CAAA"}

package/dist/esm/pseudo/unknown.js

@@ -0,0 +1,6 @@
+import { createSecuritySelectorFilter } from "./helpers.js";
+/**
+ * Filters out any node that does not have a **newAuthor** report alert.
+ */
+export const unknown = createSecuritySelectorFilter('unknown', 'newAuthor');
+//# sourceMappingURL=unknown.js.map

package/dist/esm/pseudo/unknown.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"unknown.js","sourceRoot":"","sources":["../../../src/pseudo/unknown.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,4BAA4B,EAAE,MAAM,cAAc,CAAA;AAE3D;;GAEG;AACH,MAAM,CAAC,MAAM,OAAO,GAAG,4BAA4B,CACjD,SAAS,EACT,WAAW,CACZ,CAAA","sourcesContent":["import { createSecuritySelectorFilter } from './helpers.ts'\n\n/**\n * Filters out any node that does not have a **newAuthor** report alert.\n */\nexport const unknown = createSecuritySelectorFilter(\n  'unknown',\n  'newAuthor',\n)\n"]}

package/dist/esm/pseudo/unmaintained.d.ts

@@ -0,0 +1,7 @@
+/**
+ * Filters out any node that does not have a **unmaintained** report alert.
+ */
+export declare const unmaintained: (state: import("../types.ts").ParserState) => Promise<import("../types.ts").ParserState & {
+    securityArchive: NonNullable<import("../types.ts").ParserState["securityArchive"]>;
+}>;
+//# sourceMappingURL=unmaintained.d.ts.map

package/dist/esm/pseudo/unmaintained.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"unmaintained.d.ts","sourceRoot":"","sources":["../../../src/pseudo/unmaintained.ts"],"names":[],"mappings":"AAEA;;GAEG;AACH,eAAO,MAAM,YAAY;;EAGxB,CAAA"}