circle-ir 4.14.2 → 4.16.0

package/dist/analysis/project-callee-escape-gate.js

@@ -0,0 +1,243 @@
+/**
+ * Project-callee escape gate (cognium-dev#637, C#).
+ *
+ * A file analysed on its own cannot see a method defined in another file, so
+ * a tainted argument passed to it is reported as an `external_taint_escape`
+ * (data handed to an unknown method). Inside `analyzeProject` the callee is
+ * known: the call is project code, not data leaving the program, and whether
+ * the value reaches a sink is decided by the cross-file phase and its callee
+ * reach check. With both classes in one file the same call reports nothing,
+ * so this step makes the project result agree with it.
+ *
+ * Runs after the per-file analyses and before the cross-file phase, so no
+ * cross-file path is built from the dropped sink. A sink is dropped only when
+ * every call at its line to that method name resolves exactly to a method
+ * declared in a different project file AND that method contains a registered
+ * sink and does not forward any of its parameters (directly, through an
+ * identity local alias, a field/property store, a return of a non-void method,
+ * or an interpolated-string hole): the cross-file phase and its callee-reach
+ * check then decide what is reported. A callee with no registered sink is a
+ * shape the registry does not know (for example a header or cookie write), and
+ * one that forwards the parameter elsewhere leaks it there; in both the escape
+ * is the only signal. An unresolved, inferred or polymorphic call also keeps
+ * it. When the call's receiver is a type-like name it must match the resolved
+ * class, so a second same-line call such as `Unknown.Run(data)` cannot inherit
+ * another call's cached resolution.
+ *
+ * The decision is transitive for a pure forwarder: a callee with no sink of its
+ * own whose only use of the parameter is to pass it to calls that each resolve
+ * exactly to a method in another project file is decided by those methods, to a
+ * depth of four hops with a visited set (so a loop stops). Any hop that does not
+ * resolve, ends without a sink, forwards elsewhere as well, stores or returns the
+ * value, or lies beyond the depth keeps the escape.
+ */
+const ESCAPE = 'external_taint_escape';
+/**
+ * Blank string literals but keep the contents of `{...}` holes in interpolated
+ * strings (`$"…"`, `$@"…"`), so `Sender.Post($"hello {data}")` still sees `data`.
+ */
+function textOf(expr) {
+    return expr.replace(/\$@?"(?:[^"\\]|\\.|\{[^}]*\})*"|\$?"(?:[^"\\]|\\.|\{[^}]*\})*"|@?"(?:[^"\\]|\\.)*"/g, (lit) => {
+        if (lit.startsWith('$')) {
+            const holes = [...lit.matchAll(/\{([^}]*)\}/g)].map(m => m[1]).join(' ');
+            return ` ${holes} `;
+        }
+        return ' ';
+    });
+}
+function mentionsName(expr, name) {
+    return new RegExp(`(?<![\\w.])${name}(?!\\w)`).test(textOf(expr));
+}
+/**
+ * Identity aliases of parameters (`string x = data`), not transforms
+ * (`data.Split(...)`). A local chained from a known name counts only when its
+ * def line has a use of that name and no call with that name as receiver.
+ */
+function identityAliases(ir, methodStart, methodEnd, params) {
+    const names = new Set(params);
+    const defs = ir.dfg?.defs ?? [];
+    const uses = ir.dfg?.uses ?? [];
+    const chains = ir.dfg?.chains ?? [];
+    const inMethod = (d) => d.line >= methodStart && d.line <= methodEnd;
+    let grew = true;
+    while (grew) {
+        grew = false;
+        const nameDefIds = new Set(defs.filter(d => inMethod(d) && names.has(d.variable)).map(d => d.id));
+        for (const ch of chains) {
+            if (!nameDefIds.has(ch.from_def))
+                continue;
+            const from = defs.find(d => d.id === ch.from_def);
+            const to = defs.find(d => d.id === ch.to_def);
+            if (!from || !to || !inMethod(to) || to.kind !== 'local')
+                continue;
+            if (names.has(to.variable))
+                continue;
+            if (!uses.some(u => u.line === to.line && u.variable === from.variable))
+                continue;
+            const transform = ir.calls.some(c => c.location.line === to.line && c.receiver === from.variable);
+            if (transform)
+                continue;
+            names.add(to.variable);
+            grew = true;
+        }
+    }
+    return names;
+}
+function fieldNamesOf(ir) {
+    return new Set(ir.types.flatMap(t => (t.fields ?? []).map(f => f.name)));
+}
+function isVoidReturn(m) {
+    const t = (m.return_type ?? 'void').trim().toLowerCase();
+    return t === '' || t === 'void';
+}
+/**
+ * True when every method named like `targetFqn` in `ir` contains a registered
+ * sink and does not forward a parameter elsewhere. A parameter bound with
+ * `x.Parameters.Add*(...)` is a binding, and a call on a registered sink line
+ * is covered by the reach check. Forwarding includes: a call argument that
+ * mentions the parameter or an identity local alias of it (including `{data}`
+ * holes in interpolated strings), a store into a field/property, and a return
+ * of the parameter from a non-void method. Null-checks and transforms like
+ * `data.Split(...)` are not forwarding.
+ */
+const MAX_FORWARD_DEPTH = 4;
+function calleeDecidedBySinks(projectGraph, file, targetFqn, depth = 0, visited = new Set()) {
+    const ir = projectGraph.getIR(file);
+    if (!ir)
+        return false;
+    const visitKey = `${file}#${targetFqn}`;
+    if (visited.has(visitKey))
+        return false;
+    visited.add(visitKey);
+    const name = targetFqn.split('.').pop();
+    const methods = ir.types.flatMap(t => t.methods).filter(m => m.name === name);
+    if (methods.length === 0)
+        return false;
+    const sinks = ir.taint?.sinks ?? [];
+    const sinkLines = new Set(sinks.filter(k => k.type !== ESCAPE).map(k => k.line));
+    const fields = fieldNamesOf(ir);
+    const defs = ir.dfg?.defs ?? [];
+    const uses = ir.dfg?.uses ?? [];
+    return methods.every(m => {
+        const hasSink = sinks.some(k => k.type !== ESCAPE && k.line >= m.start_line && k.line <= m.end_line);
+        const params = m.parameters.map(p => p.name).filter(Boolean);
+        if (params.length === 0)
+            return hasSink;
+        const aliases = identityAliases(ir, m.start_line, m.end_line, params);
+        // Call-argument forwarding (direct, identity alias, or interpolated hole).
+        const forwards = ir.calls.filter(c => c.location.line >= m.start_line && c.location.line <= m.end_line
+            && !sinkLines.has(c.location.line)
+            && !/(?:^|\.)Parameters$/.test(c.receiver ?? '')
+            && c.arguments.some(a => [...aliases].some(p => mentionsName(a.expression ?? '', p))));
+        if (forwards.length > 0) {
+            // A callee with its own sink that forwards elsewhere leaks there. One without
+            // a sink is decided by the methods it forwards to, when every forward resolves
+            // exactly to a method in another project file and that method is decided.
+            if (hasSink || depth >= MAX_FORWARD_DEPTH)
+                return false;
+            // Only a bare parameter handed on as an argument counts: a transform, alias or
+            // interpolation of it is not followed (the cross-file phase does not either).
+            const bare = forwards.every(c => c.arguments.every(a => {
+                const e = (a.expression ?? '').trim();
+                return params.includes(e) || ![...aliases].some(p => mentionsName(e, p));
+            }));
+            if (!bare)
+                return false;
+            const resolver = projectGraph.resolver;
+            const chained = forwards.every(call => {
+                const r = resolver.resolveCall(call, file);
+                return !!r && r.resolution === 'exact' && r.targetFile !== file
+                    && receiverMatchesTarget(call, r.targetClass)
+                    && calleeDecidedBySinks(projectGraph, r.targetFile, r.targetMethod, depth + 1, new Set(visited));
+            });
+            if (!chained)
+                return false;
+        }
+        else if (!hasSink) {
+            return false;
+        }
+        // Field/property store: `saved = data` / `this.saved = data` / `Prop = data`.
+        for (const u of uses) {
+            if (u.line < m.start_line || u.line > m.end_line)
+                continue;
+            if (!aliases.has(u.variable))
+                continue;
+            if (sinkLines.has(u.line))
+                continue;
+            const lineDefs = defs.filter(d => d.line === u.line);
+            if (lineDefs.some(d => d.kind === 'field' || fields.has(d.variable)))
+                return false;
+            if (uses.some(o => o.line === u.line && o.variable !== u.variable && fields.has(o.variable)))
+                return false;
+        }
+        // Return of a parameter/alias from a non-void method: use on a line with
+        // no calls and no new local def (null-checks in void methods stay silent).
+        if (!isVoidReturn(m)) {
+            for (const u of uses) {
+                if (u.line < m.start_line || u.line > m.end_line)
+                    continue;
+                if (!aliases.has(u.variable))
+                    continue;
+                if (sinkLines.has(u.line))
+                    continue;
+                if (ir.calls.some(c => c.location.line === u.line))
+                    continue;
+                if (defs.some(d => d.line === u.line && d.kind === 'local'))
+                    continue;
+                return false;
+            }
+        }
+        return true;
+    });
+}
+/** Receiver looks like a type name and must match the resolved target class. */
+function receiverMatchesTarget(call, targetClass) {
+    const recv = call.receiver;
+    if (!recv || !/^[A-Z]/.test(recv))
+        return true;
+    if (recv.includes('.'))
+        return true; // namespace-qualified / member chain: leave to resolver
+    const simple = targetClass.split('.').pop() ?? targetClass;
+    return recv === simple || recv === targetClass;
+}
+export function dropEscapesToProjectCallees(fileAnalyses, projectGraph) {
+    const resolver = projectGraph.resolver;
+    for (const fa of fileAnalyses) {
+        const ir = fa.analysis;
+        if (ir.meta.language !== 'csharp')
+            continue;
+        const sinks = ir.taint?.sinks ?? [];
+        if (!sinks.some(s => s.type === ESCAPE))
+            continue;
+        const dropped = new Set();
+        for (const sink of sinks) {
+            if (sink.type !== ESCAPE || !sink.method)
+                continue;
+            const calls = ir.calls.filter(c => c.location.line === sink.line && c.method_name === sink.method);
+            if (calls.length === 0)
+                continue;
+            const projectCall = calls.every(call => {
+                const r = resolver.resolveCall(call, fa.file);
+                return !!r && r.resolution === 'exact' && r.targetFile !== fa.file
+                    && receiverMatchesTarget(call, r.targetClass)
+                    && calleeDecidedBySinks(projectGraph, r.targetFile, r.targetMethod);
+            });
+            if (projectCall)
+                dropped.add(sink.line);
+        }
+        if (dropped.size === 0)
+            continue;
+        const isDropped = (type, line) => type === ESCAPE && dropped.has(line);
+        // In place: the project graph holds the same arrays.
+        for (let i = sinks.length - 1; i >= 0; i--) {
+            if (isDropped(sinks[i].type, sinks[i].line))
+                sinks.splice(i, 1);
+        }
+        const flows = ir.taint.flows ?? [];
+        for (let i = flows.length - 1; i >= 0; i--) {
+            if (isDropped(flows[i].sink_type, flows[i].sink_line))
+                flows.splice(i, 1);
+        }
+    }
+}
+//# sourceMappingURL=project-callee-escape-gate.js.map

package/dist/analysis/project-callee-escape-gate.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"project-callee-escape-gate.js","sourceRoot":"","sources":["../../src/analysis/project-callee-escape-gate.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgCG;AAKH,MAAM,MAAM,GAAG,uBAAuB,CAAC;AAEvC;;;GAGG;AACH,SAAS,MAAM,CAAC,IAAY;IAC1B,OAAO,IAAI,CAAC,OAAO,CACjB,qFAAqF,EACrF,CAAC,GAAG,EAAE,EAAE;QACN,IAAI,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;YACxB,MAAM,KAAK,GAAG,CAAC,GAAG,GAAG,CAAC,QAAQ,CAAC,cAAc,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YACzE,OAAO,IAAI,KAAK,GAAG,CAAC;QACtB,CAAC;QACD,OAAO,GAAG,CAAC;IACb,CAAC,CACF,CAAC;AACJ,CAAC;AAED,SAAS,YAAY,CAAC,IAAY,EAAE,IAAY;IAC9C,OAAO,IAAI,MAAM,CAAC,cAAc,IAAI,SAAS,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;AACpE,CAAC;AAED;;;;GAIG;AACH,SAAS,eAAe,CAAC,EAAY,EAAE,WAAmB,EAAE,SAAiB,EAAE,MAAgB;IAC7F,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC;IAC9B,MAAM,IAAI,GAAG,EAAE,CAAC,GAAG,EAAE,IAAI,IAAI,EAAE,CAAC;IAChC,MAAM,IAAI,GAAG,EAAE,CAAC,GAAG,EAAE,IAAI,IAAI,EAAE,CAAC;IAChC,MAAM,MAAM,GAAG,EAAE,CAAC,GAAG,EAAE,MAAM,IAAI,EAAE,CAAC;IACpC,MAAM,QAAQ,GAAG,CAAC,CAAS,EAAW,EAAE,CAAC,CAAC,CAAC,IAAI,IAAI,WAAW,IAAI,CAAC,CAAC,IAAI,IAAI,SAAS,CAAC;IAEtF,IAAI,IAAI,GAAG,IAAI,CAAC;IAChB,OAAO,IAAI,EAAE,CAAC;QACZ,IAAI,GAAG,KAAK,CAAC;QACb,MAAM,UAAU,GAAG,IAAI,GAAG,CACxB,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CACtE,CAAC;QACF,KAAK,MAAM,EAAE,IAAI,MAAM,EAAE,CAAC;YACxB,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC,QAAQ,CAAC;gBAAE,SAAS;YAC3C,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,QAAQ,CAAC,CAAC;YAClD,MAAM,EAAE,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,MAAM,CAAC,CAAC;YAC9C,IAAI,CAAC,IAAI,IAAI,CAAC,EAAE,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,IAAI,EAAE,CAAC,IAAI,KAAK,OAAO;gBAAE,SAAS;YACnE,IAAI,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,QAAQ,CAAC;gBAAE,SAAS;YACrC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,EAAE,CAAC,IAAI,IAAI,CAAC,CAAC,QAAQ,KAAK,IAAI,CAAC,QAAQ,CAAC;gBAAE,SAAS;YAClF,MAAM,SAAS,GAAG,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAClC,CAAC,CAAC,QAAQ,CAAC,IAAI,KAAK,EAAE,CAAC,IAAI,IAAI,CAAC,CAAC,QAAQ,KAAK,IAAI,CAAC,QAAQ,CAAC,CAAC;YAC/D,IAAI,SAAS;gBAAE,SAAS;YACxB,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,QAAQ,CAAC,CAAC;YACvB,IAAI,GAAG,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,YAAY,CAAC,EAAY;IAChC,OAAO,IAAI,GAAG,CAAC,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAC3E,CAAC;AAED,SAAS,YAAY,CAAC,CAAa;IACjC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,WAAW,IAAI,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IACzD,OAAO,CAAC,KAAK,EAAE,IAAI,CAAC,KAAK,MAAM,CAAC;AAClC,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,iBAAiB,GAAG,CAAC,CAAC;AAE5B,SAAS,oBAAoB,CAC3B,YAA0B,EAC1B,IAAY,EACZ,SAAiB,EACjB,KAAK,GAAG,CAAC,EACT,OAAO,GAAgB,IAAI,GAAG,EAAE;IAEhC,MAAM,EAAE,GAAG,YAAY,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACpC,IAAI,CAAC,EAAE;QAAE,OAAO,KAAK,CAAC;IACtB,MAAM,QAAQ,GAAG,GAAG,IAAI,IAAI,SAAS,EAAE,CAAC;IACxC,IAAI,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC;QAAE,OAAO,KAAK,CAAC;IACxC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IACtB,MAAM,IAAI,GAAG,SAAS,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,CAAC;IACxC,MAAM,OAAO,GAAG,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC;IAC9E,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IACvC,MAAM,KAAK,GAAG,EAAE,CAAC,KAAK,EAAE,KAAK,IAAI,EAAE,CAAC;IACpC,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;IACjF,MAAM,MAAM,GAAG,YAAY,CAAC,EAAE,CAAC,CAAC;IAChC,MAAM,IAAI,GAAG,EAAE,CAAC,GAAG,EAAE,IAAI,IAAI,EAAE,CAAC;IAChC,MAAM,IAAI,GAAG,EAAE,CAAC,GAAG,EAAE,IAAI,IAAI,EAAE,CAAC;IAEhC,OAAO,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE;QACvB,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,MAAM,IAAI,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,UAAU,IAAI,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,QAAQ,CAAC,CAAC;QACrG,MAAM,MAAM,GAAG,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QAC7D,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,OAAO,CAAC;QACxC,MAAM,OAAO,GAAG,eAAe,CAAC,EAAE,EAAE,CAAC,CAAC,UAAU,EAAE,CAAC,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;QAEtE,2EAA2E;QAC3E,MAAM,QAAQ,GAAG,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CACnC,CAAC,CAAC,QAAQ,CAAC,IAAI,IAAI,CAAC,CAAC,UAAU,IAAI,CAAC,CAAC,QAAQ,CAAC,IAAI,IAAI,CAAC,CAAC,QAAQ;eAC7D,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC;eAC/B,CAAC,qBAAqB,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,IAAI,EAAE,CAAC;eAC7C,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,YAAY,CAAC,CAAC,CAAC,UAAU,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACzF,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACxB,8EAA8E;YAC9E,+EAA+E;YAC/E,0EAA0E;YAC1E,IAAI,OAAO,IAAI,KAAK,IAAI,iBAAiB;gBAAE,OAAO,KAAK,CAAC;YACxD,+EAA+E;YAC/E,8EAA8E;YAC9E,MAAM,IAAI,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE;gBACrD,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,UAAU,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;gBACtC,OAAO,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,YAAY,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;YAC3E,CAAC,CAAC,CAAC,CAAC;YACJ,IAAI,CAAC,IAAI;gBAAE,OAAO,KAAK,CAAC;YACxB,MAAM,QAAQ,GAAG,YAAY,CAAC,QAAQ,CAAC;YACvC,MAAM,OAAO,GAAG,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE;gBACpC,MAAM,CAAC,GAAG,QAAQ,CAAC,WAAW,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;gBAC3C,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,UAAU,KAAK,OAAO,IAAI,CAAC,CAAC,UAAU,KAAK,IAAI;uBAC1D,qBAAqB,CAAC,IAAI,EAAE,CAAC,CAAC,WAAW,CAAC;uBAC1C,oBAAoB,CAAC,YAAY,EAAE,CAAC,CAAC,UAAU,EAAE,CAAC,CAAC,YAAY,EAAE,KAAK,GAAG,CAAC,EAAE,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC;YACrG,CAAC,CAAC,CAAC;YACH,IAAI,CAAC,OAAO;gBAAE,OAAO,KAAK,CAAC;QAC7B,CAAC;aAAM,IAAI,CAAC,OAAO,EAAE,CAAC;YACpB,OAAO,KAAK,CAAC;QACf,CAAC;QAED,8EAA8E;QAC9E,KAAK,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC;YACrB,IAAI,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,UAAU,IAAI,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,QAAQ;gBAAE,SAAS;YAC3D,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC;gBAAE,SAAS;YACvC,IAAI,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC;gBAAE,SAAS;YACpC,MAAM,QAAQ,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC;YACrD,IAAI,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,OAAO,IAAI,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC;gBAAE,OAAO,KAAK,CAAC;YACnF,IAAI,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,QAAQ,KAAK,CAAC,CAAC,QAAQ,IAAI,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC;gBAAE,OAAO,KAAK,CAAC;QAC7G,CAAC;QAED,yEAAyE;QACzE,2EAA2E;QAC3E,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,CAAC;YACrB,KAAK,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC;gBACrB,IAAI,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,UAAU,IAAI,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,QAAQ;oBAAE,SAAS;gBAC3D,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC;oBAAE,SAAS;gBACvC,IAAI,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC;oBAAE,SAAS;gBACpC,IAAI,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,KAAK,CAAC,CAAC,IAAI,CAAC;oBAAE,SAAS;gBAC7D,IAAI,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,IAAI,KAAK,OAAO,CAAC;oBAAE,SAAS;gBACtE,OAAO,KAAK,CAAC;YACf,CAAC;QACH,CAAC;QAED,OAAO,IAAI,CAAC;IACd,CAAC,CAAC,CAAC;AACL,CAAC;AAED,gFAAgF;AAChF,SAAS,qBAAqB,CAAC,IAAc,EAAE,WAAmB;IAChE,MAAM,IAAI,GAAG,IAAI,CAAC,QAAQ,CAAC;IAC3B,IAAI,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IAC/C,IAAI,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC,CAAC,wDAAwD;IAC7F,MAAM,MAAM,GAAG,WAAW,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,IAAI,WAAW,CAAC;IAC3D,OAAO,IAAI,KAAK,MAAM,IAAI,IAAI,KAAK,WAAW,CAAC;AACjD,CAAC;AAED,MAAM,UAAU,2BAA2B,CACzC,YAAiE,EACjE,YAA0B;IAE1B,MAAM,QAAQ,GAAG,YAAY,CAAC,QAAQ,CAAC;IACvC,KAAK,MAAM,EAAE,IAAI,YAAY,EAAE,CAAC;QAC9B,MAAM,EAAE,GAAG,EAAE,CAAC,QAAQ,CAAC;QACvB,IAAI,EAAE,CAAC,IAAI,CAAC,QAAQ,KAAK,QAAQ;YAAE,SAAS;QAC5C,MAAM,KAAK,GAAG,EAAE,CAAC,KAAK,EAAE,KAAK,IAAI,EAAE,CAAC;QACpC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,MAAM,CAAC;YAAE,SAAS;QAElD,MAAM,OAAO,GAAG,IAAI,GAAG,EAAU,CAAC;QAClC,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,IAAI,IAAI,CAAC,IAAI,KAAK,MAAM,IAAI,CAAC,IAAI,CAAC,MAAM;gBAAE,SAAS;YACnD,MAAM,KAAK,GAAG,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,KAAK,IAAI,CAAC,IAAI,IAAI,CAAC,CAAC,WAAW,KAAK,IAAI,CAAC,MAAM,CAAC,CAAC;YACnG,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;gBAAE,SAAS;YACjC,MAAM,WAAW,GAAG,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE;gBACrC,MAAM,CAAC,GAAG,QAAQ,CAAC,WAAW,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC;gBAC9C,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,UAAU,KAAK,OAAO,IAAI,CAAC,CAAC,UAAU,KAAK,EAAE,CAAC,IAAI;uBAC7D,qBAAqB,CAAC,IAAI,EAAE,CAAC,CAAC,WAAW,CAAC;uBAC1C,oBAAoB,CAAC,YAAY,EAAE,CAAC,CAAC,UAAU,EAAE,CAAC,CAAC,YAAY,CAAC,CAAC;YACxE,CAAC,CAAC,CAAC;YACH,IAAI,WAAW;gBAAE,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC1C,CAAC;QACD,IAAI,OAAO,CAAC,IAAI,KAAK,CAAC;YAAE,SAAS;QAEjC,MAAM,SAAS,GAAG,CAAC,IAAY,EAAE,IAAY,EAAW,EAAE,CAAC,IAAI,KAAK,MAAM,IAAI,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAChG,qDAAqD;QACrD,KAAK,IAAI,CAAC,GAAG,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;YAC3C,IAAI,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;gBAAE,KAAK,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QAClE,CAAC;QACD,MAAM,KAAK,GAAG,EAAE,CAAC,KAAK,CAAC,KAAK,IAAI,EAAE,CAAC;QACnC,KAAK,IAAI,CAAC,GAAG,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;YAC3C,IAAI,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;gBAAE,KAAK,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QAC5E,CAAC;IACH,CAAC;AACH,CAAC"}

package/dist/analysis/rust-literal-guard-rebind.d.ts

@@ -0,0 +1,34 @@
+/**
+ * Where a Rust literal-equality guard credit ends (cognium-dev#293): the first
+ * rebind or possible mutation of the guarded name after the guard.
+ *
+ * Works on masked text (comments and string bodies blanked) over the whole
+ * credit region, not line by line, so a rustfmt-wrapped pattern or parameter
+ * list is seen in one piece. When in doubt it reports a rebind: ending the
+ * credit early only keeps a finding, never hides one.
+ *
+ * Ends the credit:
+ *   - the left side of any `=` / `op=` that names it (`x = ..`, `let (x, _) = ..`,
+ *     `if let W { f: x } = ..`, `(x, n) = ..`, `W { x, .. } = ..`, `*x = ..`),
+ *     a bare `let x;`,
+ *   - a `for … in` head or a match-arm head (`… =>`) that names it,
+ *   - a nested `fn` or closure whose parameter list names it (any pattern),
+ *   - `&mut x`, `write!(x, ..)`, `mem::swap/replace/take(.. x ..)`,
+ *   - a method call `x.m(..)`: when the binding is `mut` (or `&mut`) any method
+ *     outside a short read-only list; otherwise a known `&mut self` method.
+ *
+ * Known limits (not guard bugs; the engine does not carry these flows even
+ * without a guard): a derived value mutated later
+ * (`let mut c = String::from(x); c.push_str(other)`) and a struct field of
+ * another value reassigned.
+ */
+export interface RebindOptions {
+    /** The guarded binding is `mut x` or `x: &mut T`, so any non-read-only method may mutate it. */
+    mutBinding: boolean;
+}
+/**
+ * Absolute index (first non-space char of the statement or head) of the
+ * earliest rebind or possible mutation of `name` in `m[from, to)`, or -1.
+ */
+export declare function firstRebind(m: string, from: number, to: number, name: string, opts: RebindOptions): number;
+//# sourceMappingURL=rust-literal-guard-rebind.d.ts.map

package/dist/analysis/rust-literal-guard-rebind.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"rust-literal-guard-rebind.d.ts","sourceRoot":"","sources":["../../src/analysis/rust-literal-guard-rebind.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AAiFH,MAAM,WAAW,aAAa;IAC5B,gGAAgG;IAChG,UAAU,EAAE,OAAO,CAAC;CACrB;AAED;;;GAGG;AACH,wBAAgB,WAAW,CAAC,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,aAAa,GAAG,MAAM,CA4D1G"}

package/dist/analysis/rust-literal-guard-rebind.js

@@ -0,0 +1,197 @@
+/**
+ * Where a Rust literal-equality guard credit ends (cognium-dev#293): the first
+ * rebind or possible mutation of the guarded name after the guard.
+ *
+ * Works on masked text (comments and string bodies blanked) over the whole
+ * credit region, not line by line, so a rustfmt-wrapped pattern or parameter
+ * list is seen in one piece. When in doubt it reports a rebind: ending the
+ * credit early only keeps a finding, never hides one.
+ *
+ * Ends the credit:
+ *   - the left side of any `=` / `op=` that names it (`x = ..`, `let (x, _) = ..`,
+ *     `if let W { f: x } = ..`, `(x, n) = ..`, `W { x, .. } = ..`, `*x = ..`),
+ *     a bare `let x;`,
+ *   - a `for … in` head or a match-arm head (`… =>`) that names it,
+ *   - a nested `fn` or closure whose parameter list names it (any pattern),
+ *   - `&mut x`, `write!(x, ..)`, `mem::swap/replace/take(.. x ..)`,
+ *   - a method call `x.m(..)`: when the binding is `mut` (or `&mut`) any method
+ *     outside a short read-only list; otherwise a known `&mut self` method.
+ *
+ * Known limits (not guard bugs; the engine does not carry these flows even
+ * without a guard): a derived value mutated later
+ * (`let mut c = String::from(x); c.push_str(other)`) and a struct field of
+ * another value reassigned.
+ */
+/** `name` used as a bare identifier: not a field (`.x`), not a path segment (`a::x`, `x::b`). */
+function bareRe(name) {
+    return new RegExp(String.raw `(?<![\w.]|::)${name}\b(?!\s*::)`);
+}
+/** Index of the `{` matching the `}` at `close` (walking back), or -1. */
+function openOf(m, close, floor) {
+    let d = 0;
+    for (let i = close; i >= floor; i--) {
+        if (m[i] === '}')
+            d++;
+        else if (m[i] === '{' && --d === 0)
+            return i;
+    }
+    return -1;
+}
+/**
+ * Start of the pattern / assignee that ends just before `idx` (an `=` or `=>`):
+ * walks back to the previous `;`, `,`, `=>` or unmatched opener at depth 0.
+ * A `{ … }` preceded by a type name (`W { .. }`) is a struct pattern and is
+ * stepped over; any other `}` is the end of the previous statement or arm.
+ */
+function headStart(m, idx, floor) {
+    let depth = 0;
+    for (let i = idx - 1; i >= floor; i--) {
+        const ch = m[i];
+        if (ch === ')' || ch === ']')
+            depth++;
+        else if (ch === '(' || ch === '[' || ch === '{') {
+            if (depth === 0)
+                return i + 1;
+            depth--;
+        }
+        else if (ch === '}') {
+            if (depth > 0) {
+                depth++;
+                continue;
+            }
+            const open = openOf(m, i, floor);
+            if (open > floor && /(?:[A-Z]\w*|::)\s*$/.test(m.slice(Math.max(floor, open - 80), open))) {
+                i = open;
+                continue;
+            }
+            return i + 1;
+        }
+        else if (depth === 0 && (ch === ';' || ch === ','))
+            return i + 1;
+        else if (depth === 0 && ch === '>' && m[i - 1] === '=')
+            return i + 1;
+    }
+    return floor;
+}
+/** Index just past the `)`/`|` that closes the list opened at `open`, or -1. */
+function closeParen(m, open, to) {
+    let d = 0;
+    for (let i = open; i < to; i++) {
+        if (m[i] === '(' || m[i] === '[' || m[i] === '{')
+            d++;
+        else if ((m[i] === ')' || m[i] === ']' || m[i] === '}') && --d === 0)
+            return i + 1;
+    }
+    return -1;
+}
+/** True when the `=` at `i` is an assignment (`=`, `+=`, `<<=`, …), not `==`, `!=`, `<=`, `>=`, `=>`, `..=`. */
+function isAssign(m, i) {
+    const next = m[i + 1];
+    const prev = m[i - 1];
+    if (next === '=' || next === '>')
+        return false;
+    if (prev === '=' || prev === '!' || prev === '.')
+        return false;
+    if (prev === '<' || prev === '>')
+        return m[i - 2] === prev; // `<<=` / `>>=`
+    return true;
+}
+/** `&self` methods on str / String / &str that never change the value. */
+const READ_ONLY = new Set([
+    'as_str', 'as_bytes', 'as_ref', 'as_os_str', 'as_path', 'as_deref', 'borrow', 'deref', 'len', 'is_empty',
+    'to_string', 'to_owned', 'clone', 'into', 'chars', 'char_indices', 'bytes', 'lines', 'trim', 'trim_start',
+    'trim_end', 'trim_matches', 'trim_start_matches', 'trim_end_matches', 'starts_with', 'ends_with', 'contains',
+    'find', 'rfind', 'split', 'splitn', 'rsplit', 'rsplitn', 'split_whitespace', 'split_once', 'rsplit_once',
+    'strip_prefix', 'strip_suffix', 'eq', 'ne', 'cmp', 'partial_cmp', 'eq_ignore_ascii_case', 'to_lowercase',
+    'to_uppercase', 'to_ascii_lowercase', 'to_ascii_uppercase', 'replace', 'replacen', 'repeat', 'parse',
+    'capacity', 'get', 'iter', 'is_char_boundary', 'matches', 'to_str', 'to_string_lossy', 'is_ascii',
+]);
+/** `&mut self` methods, used when the binding is not known to be `mut`. */
+const MUTATORS = new Set([
+    'push', 'push_str', 'clear', 'insert_str', 'insert', 'extend', 'extend_from_slice', 'truncate', 'remove',
+    'retain', 'drain', 'replace_range', 'make_ascii_lowercase', 'make_ascii_uppercase', 'clone_from',
+    'write_fmt', 'write_str', 'write_char', 'add_assign', 'pop', 'split_off', 'as_mut_str', 'as_mut_vec',
+    'as_mut', 'get_mut', 'iter_mut', 'append', 'resize', 'reserve',
+]);
+/**
+ * Absolute index (first non-space char of the statement or head) of the
+ * earliest rebind or possible mutation of `name` in `m[from, to)`, or -1.
+ */
+export function firstRebind(m, from, to, name, opts) {
+    const region = m.slice(from, to);
+    const bare = bareRe(name);
+    let best = -1;
+    const hit = (abs) => {
+        while (abs < to && /\s/.test(m[abs]))
+            abs++;
+        if (best < 0 || abs < best)
+            best = abs;
+    };
+    const scan = (re, f) => {
+        for (const mm of region.matchAll(re))
+            f(mm);
+    };
+    // Left side of an assignment, a `let` pattern, a destructuring assignment.
+    for (let i = from; i < to; i++) {
+        if (m[i] !== '=' || !isAssign(m, i))
+            continue;
+        const hs = headStart(m, i, from);
+        if (bare.test(m.slice(hs, i)))
+            hit(hs);
+    }
+    scan(new RegExp(String.raw `\blet\s+(?:mut\s+)?${name}\s*(?::[^;=]*)?;`, 'g'), (mm) => hit(from + mm.index));
+    // Match-arm heads.
+    scan(/=>/g, (mm) => {
+        const at = from + mm.index;
+        const hs = headStart(m, at, from);
+        if (bare.test(m.slice(hs, at)))
+            hit(hs);
+    });
+    // `for PATTERN in`.
+    scan(/\bfor\b(?!\s*<)([\s\S]*?)\bin\b/g, (mm) => { if (bare.test(mm[1]))
+        hit(from + mm.index); });
+    // Nested fn parameter lists (any pattern, any number of lines).
+    scan(/\bfn\s+\w+\s*/g, (mm) => {
+        let i = from + mm.index + mm[0].length;
+        if (m[i] === '<') {
+            let d = 0;
+            for (; i < to; i++) {
+                if (m[i] === '<')
+                    d++;
+                else if (m[i] === '>' && m[i - 1] !== '-' && --d === 0) {
+                    i++;
+                    break;
+                }
+            }
+            while (i < to && /\s/.test(m[i]))
+                i++;
+        }
+        if (m[i] !== '(')
+            return;
+        const end = closeParen(m, i, to);
+        if (bare.test(m.slice(i, end < 0 ? to : end)))
+            hit(from + mm.index);
+    });
+    // Closure parameter lists `|…|` (opening bar in expression position).
+    scan(/(?:^|[(,=>{;]|\bmove)\s*\|/gm, (mm) => {
+        const open = from + mm.index + mm[0].length - 1;
+        const close = m.indexOf('|', open + 1);
+        if (close < 0 || close >= to)
+            return;
+        const params = m.slice(open + 1, close);
+        if (!params.includes(';') && bare.test(params))
+            hit(open);
+    });
+    // `&mut x`, `write!(x, ..)`, `mem::swap/replace/take(.. x ..)`.
+    scan(new RegExp(String.raw `&\s*mut\s+${name}\b`, 'g'), (mm) => hit(from + mm.index));
+    scan(new RegExp(String.raw `\b(?:write|writeln)\s*!\s*\(\s*${name}\b`, 'g'), (mm) => hit(from + mm.index));
+    scan(new RegExp(String.raw `\bmem\s*::\s*(?:swap|replace|take)\s*\([^;]*?\b${name}\b`, 'g'), (mm) => hit(from + mm.index));
+    // Method calls on the name, including a call on the next line (`x\n.write_str(..)`).
+    scan(new RegExp(String.raw `(?<![\w.]|::)${name}\s*\.\s*(\w+)\s*(?:::\s*<[^>]*>\s*)?\(`, 'g'), (mm) => {
+        const method = mm[1];
+        if (opts.mutBinding ? !READ_ONLY.has(method) : MUTATORS.has(method))
+            hit(from + mm.index);
+    });
+    return best;
+}
+//# sourceMappingURL=rust-literal-guard-rebind.js.map

package/dist/analysis/rust-literal-guard-rebind.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"rust-literal-guard-rebind.js","sourceRoot":"","sources":["../../src/analysis/rust-literal-guard-rebind.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AAEH,iGAAiG;AACjG,SAAS,MAAM,CAAC,IAAY;IAC1B,OAAO,IAAI,MAAM,CAAC,MAAM,CAAC,GAAG,CAAA,gBAAgB,IAAI,aAAa,CAAC,CAAC;AACjE,CAAC;AAED,0EAA0E;AAC1E,SAAS,MAAM,CAAC,CAAS,EAAE,KAAa,EAAE,KAAa;IACrD,IAAI,CAAC,GAAG,CAAC,CAAC;IACV,KAAK,IAAI,CAAC,GAAG,KAAK,EAAE,CAAC,IAAI,KAAK,EAAE,CAAC,EAAE,EAAE,CAAC;QACpC,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,GAAG;YAAE,CAAC,EAAE,CAAC;aACjB,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,GAAG,IAAI,EAAE,CAAC,KAAK,CAAC;YAAE,OAAO,CAAC,CAAC;IAC/C,CAAC;IACD,OAAO,CAAC,CAAC,CAAC;AACZ,CAAC;AAED;;;;;GAKG;AACH,SAAS,SAAS,CAAC,CAAS,EAAE,GAAW,EAAE,KAAa;IACtD,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,KAAK,IAAI,CAAC,GAAG,GAAG,GAAG,CAAC,EAAE,CAAC,IAAI,KAAK,EAAE,CAAC,EAAE,EAAE,CAAC;QACtC,MAAM,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;QAChB,IAAI,EAAE,KAAK,GAAG,IAAI,EAAE,KAAK,GAAG;YAAE,KAAK,EAAE,CAAC;aACjC,IAAI,EAAE,KAAK,GAAG,IAAI,EAAE,KAAK,GAAG,IAAI,EAAE,KAAK,GAAG,EAAE,CAAC;YAChD,IAAI,KAAK,KAAK,CAAC;gBAAE,OAAO,CAAC,GAAG,CAAC,CAAC;YAC9B,KAAK,EAAE,CAAC;QACV,CAAC;aAAM,IAAI,EAAE,KAAK,GAAG,EAAE,CAAC;YACtB,IAAI,KAAK,GAAG,CAAC,EAAE,CAAC;gBAAC,KAAK,EAAE,CAAC;gBAAC,SAAS;YAAC,CAAC;YACrC,MAAM,IAAI,GAAG,MAAM,CAAC,CAAC,EAAE,CAAC,EAAE,KAAK,CAAC,CAAC;YACjC,IAAI,IAAI,GAAG,KAAK,IAAI,qBAAqB,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,IAAI,GAAG,EAAE,CAAC,EAAE,IAAI,CAAC,CAAC,EAAE,CAAC;gBAAC,CAAC,GAAG,IAAI,CAAC;gBAAC,SAAS;YAAC,CAAC;YAClH,OAAO,CAAC,GAAG,CAAC,CAAC;QACf,CAAC;aAAM,IAAI,KAAK,KAAK,CAAC,IAAI,CAAC,EAAE,KAAK,GAAG,IAAI,EAAE,KAAK,GAAG,CAAC;YAAE,OAAO,CAAC,GAAG,CAAC,CAAC;aAC9D,IAAI,KAAK,KAAK,CAAC,IAAI,EAAE,KAAK,GAAG,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,GAAG;YAAE,OAAO,CAAC,GAAG,CAAC,CAAC;IACvE,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,gFAAgF;AAChF,SAAS,UAAU,CAAC,CAAS,EAAE,IAAY,EAAE,EAAU;IACrD,IAAI,CAAC,GAAG,CAAC,CAAC;IACV,KAAK,IAAI,CAAC,GAAG,IAAI,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC;QAC/B,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,GAAG;YAAE,CAAC,EAAE,CAAC;aACjD,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC;YAAE,OAAO,CAAC,GAAG,CAAC,CAAC;IACrF,CAAC;IACD,OAAO,CAAC,CAAC,CAAC;AACZ,CAAC;AAED,gHAAgH;AAChH,SAAS,QAAQ,CAAC,CAAS,EAAE,CAAS;IACpC,MAAM,IAAI,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;IACtB,MAAM,IAAI,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;IACtB,IAAI,IAAI,KAAK,GAAG,IAAI,IAAI,KAAK,GAAG;QAAE,OAAO,KAAK,CAAC;IAC/C,IAAI,IAAI,KAAK,GAAG,IAAI,IAAI,KAAK,GAAG,IAAI,IAAI,KAAK,GAAG;QAAE,OAAO,KAAK,CAAC;IAC/D,IAAI,IAAI,KAAK,GAAG,IAAI,IAAI,KAAK,GAAG;QAAE,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,gBAAgB;IAC5E,OAAO,IAAI,CAAC;AACd,CAAC;AAED,0EAA0E;AAC1E,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC;IACxB,QAAQ,EAAE,UAAU,EAAE,QAAQ,EAAE,WAAW,EAAE,SAAS,EAAE,UAAU,EAAE,QAAQ,EAAE,OAAO,EAAE,KAAK,EAAE,UAAU;IACxG,WAAW,EAAE,UAAU,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,cAAc,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,YAAY;IACzG,UAAU,EAAE,cAAc,EAAE,oBAAoB,EAAE,kBAAkB,EAAE,aAAa,EAAE,WAAW,EAAE,UAAU;IAC5G,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,SAAS,EAAE,kBAAkB,EAAE,YAAY,EAAE,aAAa;IACxG,cAAc,EAAE,cAAc,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,aAAa,EAAE,sBAAsB,EAAE,cAAc;IACxG,cAAc,EAAE,oBAAoB,EAAE,oBAAoB,EAAE,SAAS,EAAE,UAAU,EAAE,QAAQ,EAAE,OAAO;IACpG,UAAU,EAAE,KAAK,EAAE,MAAM,EAAE,kBAAkB,EAAE,SAAS,EAAE,QAAQ,EAAE,iBAAiB,EAAE,UAAU;CAClG,CAAC,CAAC;AAEH,2EAA2E;AAC3E,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC;IACvB,MAAM,EAAE,UAAU,EAAE,OAAO,EAAE,YAAY,EAAE,QAAQ,EAAE,QAAQ,EAAE,mBAAmB,EAAE,UAAU,EAAE,QAAQ;IACxG,QAAQ,EAAE,OAAO,EAAE,eAAe,EAAE,sBAAsB,EAAE,sBAAsB,EAAE,YAAY;IAChG,WAAW,EAAE,WAAW,EAAE,YAAY,EAAE,YAAY,EAAE,KAAK,EAAE,WAAW,EAAE,YAAY,EAAE,YAAY;IACpG,QAAQ,EAAE,SAAS,EAAE,UAAU,EAAE,QAAQ,EAAE,QAAQ,EAAE,SAAS;CAC/D,CAAC,CAAC;AAOH;;;GAGG;AACH,MAAM,UAAU,WAAW,CAAC,CAAS,EAAE,IAAY,EAAE,EAAU,EAAE,IAAY,EAAE,IAAmB;IAChG,MAAM,MAAM,GAAG,CAAC,CAAC,KAAK,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;IACjC,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC;IAC1B,IAAI,IAAI,GAAG,CAAC,CAAC,CAAC;IACd,MAAM,GAAG,GAAG,CAAC,GAAW,EAAE,EAAE;QAC1B,OAAO,GAAG,GAAG,EAAE,IAAI,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;YAAE,GAAG,EAAE,CAAC;QAC5C,IAAI,IAAI,GAAG,CAAC,IAAI,GAAG,GAAG,IAAI;YAAE,IAAI,GAAG,GAAG,CAAC;IACzC,CAAC,CAAC;IACF,MAAM,IAAI,GAAG,CAAC,EAAU,EAAE,CAAgC,EAAE,EAAE;QAC5D,KAAK,MAAM,EAAE,IAAI,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC;YAAE,CAAC,CAAC,EAAqB,CAAC,CAAC;IACjE,CAAC,CAAC;IAEF,2EAA2E;IAC3E,KAAK,IAAI,CAAC,GAAG,IAAI,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC;QAC/B,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,GAAG,IAAI,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC,CAAC;YAAE,SAAS;QAC9C,MAAM,EAAE,GAAG,SAAS,CAAC,CAAC,EAAE,CAAC,EAAE,IAAI,CAAC,CAAC;QACjC,IAAI,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;YAAE,GAAG,CAAC,EAAE,CAAC,CAAC;IACzC,CAAC;IACD,IAAI,CAAC,IAAI,MAAM,CAAC,MAAM,CAAC,GAAG,CAAA,sBAAsB,IAAI,kBAAkB,EAAE,GAAG,CAAC,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,GAAG,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC;IAC5G,mBAAmB;IACnB,IAAI,CAAC,KAAK,EAAE,CAAC,EAAE,EAAE,EAAE;QACjB,MAAM,EAAE,GAAG,IAAI,GAAG,EAAE,CAAC,KAAK,CAAC;QAC3B,MAAM,EAAE,GAAG,SAAS,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,CAAC,CAAC;QAClC,IAAI,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;YAAE,GAAG,CAAC,EAAE,CAAC,CAAC;IAC1C,CAAC,CAAC,CAAC;IACH,oBAAoB;IACpB,IAAI,CAAC,kCAAkC,EAAE,CAAC,EAAE,EAAE,EAAE,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;QAAE,GAAG,CAAC,IAAI,GAAG,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAClG,gEAAgE;IAChE,IAAI,CAAC,gBAAgB,EAAE,CAAC,EAAE,EAAE,EAAE;QAC5B,IAAI,CAAC,GAAG,IAAI,GAAG,EAAE,CAAC,KAAK,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;QACvC,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,GAAG,EAAE,CAAC;YACjB,IAAI,CAAC,GAAG,CAAC,CAAC;YACV,OAAO,CAAC,GAAG,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC;gBACnB,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,GAAG;oBAAE,CAAC,EAAE,CAAC;qBACjB,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,GAAG,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,GAAG,IAAI,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC;oBAAC,CAAC,EAAE,CAAC;oBAAC,MAAM;gBAAC,CAAC;YACzE,CAAC;YACD,OAAO,CAAC,GAAG,EAAE,IAAI,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;gBAAE,CAAC,EAAE,CAAC;QACxC,CAAC;QACD,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,GAAG;YAAE,OAAO;QACzB,MAAM,GAAG,GAAG,UAAU,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC;QACjC,IAAI,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;YAAE,GAAG,CAAC,IAAI,GAAG,EAAE,CAAC,KAAK,CAAC,CAAC;IACtE,CAAC,CAAC,CAAC;IACH,sEAAsE;IACtE,IAAI,CAAC,8BAA8B,EAAE,CAAC,EAAE,EAAE,EAAE;QAC1C,MAAM,IAAI,GAAG,IAAI,GAAG,EAAE,CAAC,KAAK,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC;QAChD,MAAM,KAAK,GAAG,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE,IAAI,GAAG,CAAC,CAAC,CAAC;QACvC,IAAI,KAAK,GAAG,CAAC,IAAI,KAAK,IAAI,EAAE;YAAE,OAAO;QACrC,MAAM,MAAM,GAAG,CAAC,CAAC,KAAK,CAAC,IAAI,GAAG,CAAC,EAAE,KAAK,CAAC,CAAC;QACxC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC;YAAE,GAAG,CAAC,IAAI,CAAC,CAAC;IAC5D,CAAC,CAAC,CAAC;IACH,gEAAgE;IAChE,IAAI,CAAC,IAAI,MAAM,CAAC,MAAM,CAAC,GAAG,CAAA,aAAa,IAAI,IAAI,EAAE,GAAG,CAAC,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,GAAG,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC;IACrF,IAAI,CAAC,IAAI,MAAM,CAAC,MAAM,CAAC,GAAG,CAAA,kCAAkC,IAAI,IAAI,EAAE,GAAG,CAAC,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,GAAG,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC;IAC1G,IAAI,CAAC,IAAI,MAAM,CAAC,MAAM,CAAC,GAAG,CAAA,kDAAkD,IAAI,IAAI,EAAE,GAAG,CAAC,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,GAAG,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC;IAC1H,qFAAqF;IACrF,IAAI,CAAC,IAAI,MAAM,CAAC,MAAM,CAAC,GAAG,CAAA,gBAAgB,IAAI,wCAAwC,EAAE,GAAG,CAAC,EAAE,CAAC,EAAE,EAAE,EAAE;QACnG,MAAM,MAAM,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC;QACrB,IAAI,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC;YAAE,GAAG,CAAC,IAAI,GAAG,EAAE,CAAC,KAAK,CAAC,CAAC;IAC5F,CAAC,CAAC,CAAC;IACH,OAAO,IAAI,CAAC;AACd,CAAC"}

package/dist/analysis/rust-literal-guard.d.ts

@@ -0,0 +1,33 @@
+/**
+ * Rust literal-equality reject guard credit (cognium-dev#293, Rust cell).
+ *
+ *     if tool != "uptime" && tool != "whoami" { return Err("not allowed".into()); }
+ *     Command::new(tool).output()          // `tool` is one of the two literals
+ *
+ * A guard whose block always rejects, written over string literals only,
+ * proves the guarded variable is one of those literals for the rest of the
+ * enclosing block. Recognised conditions (all compared values must be string
+ * literals, the guarded value one plain local or parameter):
+ *
+ *   - `x != "a" && x != "b" …`          (also `"a" != x`)
+ *   - `!(x == "a" || x == "b" …)`
+ *   - `!matches!(x, "a" | "b" …)`
+ *   - `!["a", "b"].contains(&x)`
+ *
+ * Not credited: an `||` of `!=` (or an `&&` of `==`), a comparison to a
+ * non-literal, a guard on another variable, a guard that falls through or
+ * rejects only inside an inner branch, a guard with an `else`, and any
+ * `matches!` arm that is not a plain string literal.
+ *
+ * The credit is line-keyed. It starts after the guard block, ends with the
+ * enclosing block (so never reaches another function), stops at the line of
+ * the first rebind or possible mutation of the variable (or at the start of a
+ * loop that contains it; see `rust-literal-guard-rebind.ts`, which scans the
+ * whole region so wrapped patterns and parameter lists count), and skips a
+ * mention whose statement or line also reads another value
+ * (`Command::new(x).arg(other)`, an operand on a later line of the same
+ * statement, or a second statement on the same line).
+ */
+import type { TaintSanitizer } from '../types/index.js';
+export declare function findRustLiteralEqualityGuardSanitizers(code: string): TaintSanitizer[];
+//# sourceMappingURL=rust-literal-guard.d.ts.map

package/dist/analysis/rust-literal-guard.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"rust-literal-guard.d.ts","sourceRoot":"","sources":["../../src/analysis/rust-literal-guard.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AACH,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AA6JxD,wBAAgB,sCAAsC,CAAC,IAAI,EAAE,MAAM,GAAG,cAAc,EAAE,CA2HrF"}