circle-ir 4.14.2 → 4.16.0

package/dist/analysis/java-crlf-strip.js

@@ -0,0 +1,195 @@
+/**
+ * Which of CR / LF a Java `String.replace` / `replaceAll` call strips as a
+ * match of its own (cognium-dev#562 / #605).
+ *
+ * Shared by the inline-chain credit (`taint-matcher.ts`) and the helper-body
+ * credit (`language-sources-pass.ts`), so a pattern is judged the same way
+ * wherever it appears.
+ *
+ * The literal is first decoded from Java source (`"\\r"` and `"\r"` both
+ * become a CR atom for the regex engine, `"\\\\r"` becomes a literal
+ * backslash followed by `r`), then the regex is read one atom at a time.
+ */
+/** Decode the escape sequences of the body of a Java string / char literal. */
+export function decodeJavaLiteral(raw) {
+    return raw.replace(/\\(?:u+([0-9a-fA-F]{4})|([0-3][0-7]{0,2}|[4-7][0-7]?)|([btnfrs"'\\]))/g, (_m, hex, oct, simple) => {
+        if (hex !== undefined)
+            return String.fromCharCode(parseInt(hex, 16));
+        if (oct !== undefined)
+            return String.fromCharCode(parseInt(oct, 8));
+        switch (simple) {
+            case 'b': return '\b';
+            case 't': return '\t';
+            case 'n': return '\n';
+            case 'f': return '\f';
+            case 'r': return '\r';
+            case 's': return ' ';
+            default: return simple;
+        }
+    });
+}
+/** One regex atom at `i`: an escape (`\r`, `\n`, `\\`, `\t`…) or a single character. */
+function readAtom(s, i) {
+    const c = s[i];
+    if (c === '\\' && i + 1 < s.length) {
+        const n = s[i + 1];
+        return { atom: n === 'r' ? 'cr' : n === 'n' ? 'lf' : 'other', end: i + 2 };
+    }
+    return { atom: c === '\r' ? 'cr' : c === '\n' ? 'lf' : 'other', end: i + 1 };
+}
+/** True when the quantifier text lets a single repetition match (min <= 1 <= max). */
+function quantifierAllowsOne(q) {
+    if (q === '')
+        return true;
+    const m = /^(?:(\*)|(\+)|(\?)|\{(\d+)(?:(,)(\d*))?\})[+?]?$/.exec(q);
+    if (!m)
+        return false;
+    if (m[1] || m[2] || m[3])
+        return true;
+    const min = Number(m[4]);
+    const max = m[5] ? (m[6] === '' ? Infinity : Number(m[6])) : min;
+    return min <= 1 && max >= 1;
+}
+const NONE = { cr: false, lf: false };
+/** Coverage of one alternative: a lone CR/LF atom or a non-negated class holding one, with a quantifier. */
+function alternativeCoverage(alt) {
+    if (alt === '')
+        return NONE;
+    let cr = false;
+    let lf = false;
+    let i;
+    if (alt[0] === '[') {
+        if (alt[1] === '^')
+            return NONE;
+        i = 1;
+        let closed = false;
+        while (i < alt.length) {
+            if (alt[i] === ']' && i > 1) {
+                closed = true;
+                i++;
+                break;
+            }
+            if (alt[i] === '[' || (alt[i] === '&' && alt[i + 1] === '&'))
+                return NONE;
+            const { atom, end } = readAtom(alt, i);
+            if (atom === 'cr')
+                cr = true;
+            else if (atom === 'lf')
+                lf = true;
+            i = end;
+        }
+        if (!closed)
+            return NONE;
+    }
+    else {
+        const { atom, end } = readAtom(alt, 0);
+        if (atom === 'other')
+            return NONE;
+        cr = atom === 'cr';
+        lf = atom === 'lf';
+        i = end;
+    }
+    return quantifierAllowsOne(alt.slice(i)) ? { cr, lf } : NONE;
+}
+/** Split `s` at top-level `|` (outside classes, groups and escapes). */
+function splitAlternatives(s) {
+    const alts = [];
+    let depth = 0;
+    let inClass = false;
+    let cur = '';
+    for (let i = 0; i < s.length; i++) {
+        const c = s[i];
+        if (c === '\\') {
+            cur += c + (s[i + 1] ?? '');
+            i++;
+            continue;
+        }
+        if (inClass) {
+            if (c === ']')
+                inClass = false;
+            cur += c;
+            continue;
+        }
+        if (c === '[') {
+            inClass = true;
+            cur += c;
+            continue;
+        }
+        if (c === '(')
+            depth++;
+        else if (c === ')')
+            depth--;
+        if (c === '|' && depth === 0) {
+            alts.push(cur);
+            cur = '';
+            continue;
+        }
+        cur += c;
+    }
+    alts.push(cur);
+    return alts;
+}
+/** If `s` is one `(?:…)` / `(…)` group, optionally quantified, its body and quantifier. */
+function unwrapGroup(s) {
+    const open = /^\((?:\?:)?/.exec(s);
+    if (!open)
+        return null;
+    let depth = 0;
+    let inClass = false;
+    for (let i = 0; i < s.length; i++) {
+        const c = s[i];
+        if (c === '\\') {
+            i++;
+            continue;
+        }
+        if (inClass) {
+            if (c === ']')
+                inClass = false;
+            continue;
+        }
+        if (c === '[') {
+            inClass = true;
+            continue;
+        }
+        if (c === '(')
+            depth++;
+        else if (c === ')' && --depth === 0) {
+            return { body: s.slice(open[0].length, i), quantifier: s.slice(i + 1) };
+        }
+    }
+    return null;
+}
+/**
+ * CR / LF coverage of a `replace` / `replaceAll` call from the raw source text
+ * of its first literal argument (the text between the quotes).
+ *
+ * `replace` is a plain-text match: only a lone CR or LF removes one. `replaceAll`
+ * is a regex: only a top-level alternation (optionally inside one `(?:…)` /
+ * `(…)` group, which may carry a quantifier) whose alternatives are a lone
+ * `\r` / `\n` atom or a non-negated class holding one, each quantified so that
+ * a single repetition matches, removes a lone CR or LF. A longer sequence
+ * (`\r\n`, `x\r\ny`) or a negated class does not.
+ */
+export function javaReplaceCrLfCoverage(method, rawFrom) {
+    const value = decodeJavaLiteral(rawFrom);
+    if (method === 'replace')
+        return { cr: value === '\r', lf: value === '\n' };
+    let body = value;
+    const group = unwrapGroup(value);
+    if (group) {
+        if (!quantifierAllowsOne(group.quantifier))
+            return NONE;
+        body = group.body;
+    }
+    let cr = false;
+    let lf = false;
+    for (const alt of splitAlternatives(body)) {
+        const c = alternativeCoverage(alt);
+        if (c.cr)
+            cr = true;
+        if (c.lf)
+            lf = true;
+    }
+    return { cr, lf };
+}
+//# sourceMappingURL=java-crlf-strip.js.map

package/dist/analysis/java-crlf-strip.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"java-crlf-strip.js","sourceRoot":"","sources":["../../src/analysis/java-crlf-strip.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,+EAA+E;AAC/E,MAAM,UAAU,iBAAiB,CAAC,GAAW;IAC3C,OAAO,GAAG,CAAC,OAAO,CAAC,wEAAwE,EAAE,CAAC,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,MAAM,EAAE,EAAE;QACpH,IAAI,GAAG,KAAK,SAAS;YAAE,OAAO,MAAM,CAAC,YAAY,CAAC,QAAQ,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,CAAC;QACrE,IAAI,GAAG,KAAK,SAAS;YAAE,OAAO,MAAM,CAAC,YAAY,CAAC,QAAQ,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC;QACpE,QAAQ,MAAM,EAAE,CAAC;YACf,KAAK,GAAG,EAAE,OAAO,IAAI,CAAC;YACtB,KAAK,GAAG,EAAE,OAAO,IAAI,CAAC;YACtB,KAAK,GAAG,EAAE,OAAO,IAAI,CAAC;YACtB,KAAK,GAAG,EAAE,OAAO,IAAI,CAAC;YACtB,KAAK,GAAG,EAAE,OAAO,IAAI,CAAC;YACtB,KAAK,GAAG,EAAE,OAAO,GAAG,CAAC;YACrB,SAAS,OAAO,MAAgB,CAAC;QACnC,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC;AAID,wFAAwF;AACxF,SAAS,QAAQ,CAAC,CAAS,EAAE,CAAS;IACpC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAE,CAAC;IAChB,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC;QACnC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAE,CAAC;QACpB,OAAO,EAAE,IAAI,EAAE,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC;IAC7E,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,CAAC,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC;AAC/E,CAAC;AAED,sFAAsF;AACtF,SAAS,mBAAmB,CAAC,CAAS;IACpC,IAAI,CAAC,KAAK,EAAE;QAAE,OAAO,IAAI,CAAC;IAC1B,MAAM,CAAC,GAAG,kDAAkD,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACrE,IAAI,CAAC,CAAC;QAAE,OAAO,KAAK,CAAC;IACrB,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IACtC,MAAM,GAAG,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACzB,MAAM,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC;IACjE,OAAO,GAAG,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,CAAC;AAC9B,CAAC;AAED,MAAM,IAAI,GAAG,EAAE,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC;AAEtC,4GAA4G;AAC5G,SAAS,mBAAmB,CAAC,GAAW;IACtC,IAAI,GAAG,KAAK,EAAE;QAAE,OAAO,IAAI,CAAC;IAC5B,IAAI,EAAE,GAAG,KAAK,CAAC;IACf,IAAI,EAAE,GAAG,KAAK,CAAC;IACf,IAAI,CAAS,CAAC;IACd,IAAI,GAAG,CAAC,CAAC,CAAC,KAAK,GAAG,EAAE,CAAC;QACnB,IAAI,GAAG,CAAC,CAAC,CAAC,KAAK,GAAG;YAAE,OAAO,IAAI,CAAC;QAChC,CAAC,GAAG,CAAC,CAAC;QACN,IAAI,MAAM,GAAG,KAAK,CAAC;QACnB,OAAO,CAAC,GAAG,GAAG,CAAC,MAAM,EAAE,CAAC;YACtB,IAAI,GAAG,CAAC,CAAC,CAAC,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;gBAAC,MAAM,GAAG,IAAI,CAAC;gBAAC,CAAC,EAAE,CAAC;gBAAC,MAAM;YAAC,CAAC;YAC3D,IAAI,GAAG,CAAC,CAAC,CAAC,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,GAAG,CAAC;gBAAE,OAAO,IAAI,CAAC;YAC1E,MAAM,EAAE,IAAI,EAAE,GAAG,EAAE,GAAG,QAAQ,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;YACvC,IAAI,IAAI,KAAK,IAAI;gBAAE,EAAE,GAAG,IAAI,CAAC;iBACxB,IAAI,IAAI,KAAK,IAAI;gBAAE,EAAE,GAAG,IAAI,CAAC;YAClC,CAAC,GAAG,GAAG,CAAC;QACV,CAAC;QACD,IAAI,CAAC,MAAM;YAAE,OAAO,IAAI,CAAC;IAC3B,CAAC;SAAM,CAAC;QACN,MAAM,EAAE,IAAI,EAAE,GAAG,EAAE,GAAG,QAAQ,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;QACvC,IAAI,IAAI,KAAK,OAAO;YAAE,OAAO,IAAI,CAAC;QAClC,EAAE,GAAG,IAAI,KAAK,IAAI,CAAC;QACnB,EAAE,GAAG,IAAI,KAAK,IAAI,CAAC;QACnB,CAAC,GAAG,GAAG,CAAC;IACV,CAAC;IACD,OAAO,mBAAmB,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;AAC/D,CAAC;AAED,wEAAwE;AACxE,SAAS,iBAAiB,CAAC,CAAS;IAClC,MAAM,IAAI,GAAa,EAAE,CAAC;IAC1B,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,IAAI,OAAO,GAAG,KAAK,CAAC;IACpB,IAAI,GAAG,GAAG,EAAE,CAAC;IACb,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QAClC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAE,CAAC;QAChB,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC;YAAC,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;YAAC,CAAC,EAAE,CAAC;YAAC,SAAS;QAAC,CAAC;QAC/D,IAAI,OAAO,EAAE,CAAC;YAAC,IAAI,CAAC,KAAK,GAAG;gBAAE,OAAO,GAAG,KAAK,CAAC;YAAC,GAAG,IAAI,CAAC,CAAC;YAAC,SAAS;QAAC,CAAC;QACpE,IAAI,CAAC,KAAK,GAAG,EAAE,CAAC;YAAC,OAAO,GAAG,IAAI,CAAC;YAAC,GAAG,IAAI,CAAC,CAAC;YAAC,SAAS;QAAC,CAAC;QACtD,IAAI,CAAC,KAAK,GAAG;YAAE,KAAK,EAAE,CAAC;aAClB,IAAI,CAAC,KAAK,GAAG;YAAE,KAAK,EAAE,CAAC;QAC5B,IAAI,CAAC,KAAK,GAAG,IAAI,KAAK,KAAK,CAAC,EAAE,CAAC;YAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAAC,GAAG,GAAG,EAAE,CAAC;YAAC,SAAS;QAAC,CAAC;QACrE,GAAG,IAAI,CAAC,CAAC;IACX,CAAC;IACD,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACf,OAAO,IAAI,CAAC;AACd,CAAC;AAED,2FAA2F;AAC3F,SAAS,WAAW,CAAC,CAAS;IAC5B,MAAM,IAAI,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACnC,IAAI,CAAC,IAAI;QAAE,OAAO,IAAI,CAAC;IACvB,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,IAAI,OAAO,GAAG,KAAK,CAAC;IACpB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QAClC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAE,CAAC;QAChB,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC;YAAC,CAAC,EAAE,CAAC;YAAC,SAAS;QAAC,CAAC;QAClC,IAAI,OAAO,EAAE,CAAC;YAAC,IAAI,CAAC,KAAK,GAAG;gBAAE,OAAO,GAAG,KAAK,CAAC;YAAC,SAAS;QAAC,CAAC;QAC1D,IAAI,CAAC,KAAK,GAAG,EAAE,CAAC;YAAC,OAAO,GAAG,IAAI,CAAC;YAAC,SAAS;QAAC,CAAC;QAC5C,IAAI,CAAC,KAAK,GAAG;YAAE,KAAK,EAAE,CAAC;aAClB,IAAI,CAAC,KAAK,GAAG,IAAI,EAAE,KAAK,KAAK,CAAC,EAAE,CAAC;YACpC,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC;QAC1E,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,UAAU,uBAAuB,CACrC,MAAgC,EAChC,OAAe;IAEf,MAAM,KAAK,GAAG,iBAAiB,CAAC,OAAO,CAAC,CAAC;IACzC,IAAI,MAAM,KAAK,SAAS;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,KAAK,IAAI,EAAE,EAAE,EAAE,KAAK,KAAK,IAAI,EAAE,CAAC;IAC5E,IAAI,IAAI,GAAG,KAAK,CAAC;IACjB,MAAM,KAAK,GAAG,WAAW,CAAC,KAAK,CAAC,CAAC;IACjC,IAAI,KAAK,EAAE,CAAC;QACV,IAAI,CAAC,mBAAmB,CAAC,KAAK,CAAC,UAAU,CAAC;YAAE,OAAO,IAAI,CAAC;QACxD,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC;IACpB,CAAC;IACD,IAAI,EAAE,GAAG,KAAK,CAAC;IACf,IAAI,EAAE,GAAG,KAAK,CAAC;IACf,KAAK,MAAM,GAAG,IAAI,iBAAiB,CAAC,IAAI,CAAC,EAAE,CAAC;QAC1C,MAAM,CAAC,GAAG,mBAAmB,CAAC,GAAG,CAAC,CAAC;QACnC,IAAI,CAAC,CAAC,EAAE;YAAE,EAAE,GAAG,IAAI,CAAC;QACpB,IAAI,CAAC,CAAC,EAAE;YAAE,EAAE,GAAG,IAAI,CAAC;IACtB,CAAC;IACD,OAAO,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC;AACpB,CAAC"}

package/dist/analysis/js-crlf-strip.d.ts

@@ -0,0 +1,26 @@
+/**
+ * Whether a JavaScript / TypeScript `String.replace` chain strips CR and LF
+ * (cognium-dev#562, the JS half of the Java rule in `java-crlf-strip.ts`).
+ *
+ * The decision is made by running the chain's own literal patterns against a
+ * short probe string, so a regex is judged by what it matches rather than by how
+ * it is spelled (`/[\r\n]/g`, `/\r|\n/g`, `/\s+/g` and `/[\x00-\x1f]/g` all
+ * strip both). Only literal arguments are understood: a pattern held in a
+ * variable, a `new RegExp(...)`, or a replacement that is a function or a
+ * non-literal makes the whole chain `undecided`, and the caller keeps the credit
+ * the class-less `replace` row gave before.
+ */
+export type JsReplaceVerdict = 'strips-crlf' | 'leaves-crlf' | 'undecided';
+/**
+ * Verdict for the replace chain whose text is `chainText` (the receiver plus the
+ * `.method(...)` segments after it).
+ */
+export declare function jsReplaceChainVerdict(chainText: string): JsReplaceVerdict;
+/**
+ * The text of the call chain that starts at (line, column): the receiver
+ * expression plus the `.method(...)` segments after it, up to the first
+ * character that cannot continue the chain at nesting depth 0. String and regex
+ * literals are skipped as units. The chain may continue over following lines.
+ */
+export declare function jsChainTextAt(sourceLines: string[], line: number, column: number): string;
+//# sourceMappingURL=js-crlf-strip.d.ts.map

package/dist/analysis/js-crlf-strip.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"js-crlf-strip.d.ts","sourceRoot":"","sources":["../../src/analysis/js-crlf-strip.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,MAAM,MAAM,gBAAgB,GAAG,aAAa,GAAG,aAAa,GAAG,WAAW,CAAC;AAiI3E;;;GAGG;AACH,wBAAgB,qBAAqB,CAAC,SAAS,EAAE,MAAM,GAAG,gBAAgB,CAazE;AAED;;;;;GAKG;AACH,wBAAgB,aAAa,CAAC,WAAW,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,MAAM,CA2BzF"}

package/dist/analysis/js-crlf-strip.js

@@ -0,0 +1,244 @@
+/**
+ * Whether a JavaScript / TypeScript `String.replace` chain strips CR and LF
+ * (cognium-dev#562, the JS half of the Java rule in `java-crlf-strip.ts`).
+ *
+ * The decision is made by running the chain's own literal patterns against a
+ * short probe string, so a regex is judged by what it matches rather than by how
+ * it is spelled (`/[\r\n]/g`, `/\r|\n/g`, `/\s+/g` and `/[\x00-\x1f]/g` all
+ * strip both). Only literal arguments are understood: a pattern held in a
+ * variable, a `new RegExp(...)`, or a replacement that is a function or a
+ * non-literal makes the whole chain `undecided`, and the caller keeps the credit
+ * the class-less `replace` row gave before.
+ */
+const MAX_PATTERN_LENGTH = 200;
+/** String methods that may follow a replace in a judged chain without changing its CR / LF coverage. */
+const NEUTRAL_AFTER_REPLACE = new Set([
+    'replace', 'replaceAll', 'trim', 'trimStart', 'trimEnd', 'toString',
+    'toLowerCase', 'toUpperCase', 'slice', 'substring',
+]);
+/** Probe text: lone and doubled CR / LF, a CRLF pair and neutral characters. */
+const PROBE = 'a\r\rb\n\nc\r\nd\n\re x\t';
+function readQuoted(s, i) {
+    const q = s[i];
+    if (q !== '"' && q !== "'" && q !== '`')
+        return null;
+    let out = '';
+    for (let j = i + 1; j < s.length; j++) {
+        const c = s[j];
+        if (c === q)
+            return { value: out, end: j + 1 };
+        if (q === '`' && c === '$' && s[j + 1] === '{')
+            return null;
+        if (c === '\\') {
+            const n = s[j + 1];
+            if (n === undefined)
+                return null;
+            switch (n) {
+                case 'n':
+                    out += '\n';
+                    j++;
+                    continue;
+                case 'r':
+                    out += '\r';
+                    j++;
+                    continue;
+                case 't':
+                    out += '\t';
+                    j++;
+                    continue;
+                case '0':
+                    out += '\0';
+                    j++;
+                    continue;
+                case 'x': {
+                    const h = /^[0-9a-fA-F]{2}/.exec(s.slice(j + 2, j + 4));
+                    if (!h)
+                        return null;
+                    out += String.fromCharCode(parseInt(h[0], 16));
+                    j += 3;
+                    continue;
+                }
+                case 'u': {
+                    const h = /^[0-9a-fA-F]{4}/.exec(s.slice(j + 2, j + 6));
+                    if (!h)
+                        return null;
+                    out += String.fromCharCode(parseInt(h[0], 16));
+                    j += 5;
+                    continue;
+                }
+                default:
+                    out += n;
+                    j++;
+                    continue;
+            }
+        }
+        if (c === '\n' && q !== '`')
+            return null;
+        out += c;
+    }
+    return null;
+}
+function readRegexLiteral(s, i) {
+    if (s[i] !== '/')
+        return null;
+    let inClass = false;
+    for (let j = i + 1; j < s.length; j++) {
+        const c = s[j];
+        if (c === '\n')
+            return null;
+        if (c === '\\') {
+            j++;
+            continue;
+        }
+        if (inClass) {
+            if (c === ']')
+                inClass = false;
+            continue;
+        }
+        if (c === '[') {
+            inClass = true;
+            continue;
+        }
+        if (c === '/') {
+            const flags = /^[dgimsuvy]*/.exec(s.slice(j + 1))[0];
+            return { source: s.slice(i + 1, j), flags, end: j + 1 + flags.length };
+        }
+    }
+    return null;
+}
+const skipWs = (s, i) => {
+    while (i < s.length && /\s/.test(s[i]))
+        i++;
+    return i;
+};
+/**
+ * Parse every `.replace(<literal>, <string literal>)` / `.replaceAll(...)` step
+ * of a chain, in source order. Returns null when any step is not literal.
+ */
+function parseSteps(chainText) {
+    const steps = [];
+    const callRe = /\.\s*(replaceAll|replace)\s*\(/g;
+    let m;
+    while ((m = callRe.exec(chainText)) !== null) {
+        const kind = m[1];
+        let i = skipWs(chainText, m.index + m[0].length);
+        let pattern;
+        const rx = readRegexLiteral(chainText, i);
+        if (rx) {
+            if (rx.source.length > MAX_PATTERN_LENGTH)
+                return null;
+            try {
+                pattern = new RegExp(rx.source, rx.flags);
+            }
+            catch {
+                return null;
+            }
+            i = rx.end;
+        }
+        else {
+            const str = readQuoted(chainText, i);
+            if (!str)
+                return null;
+            pattern = str.value;
+            i = str.end;
+        }
+        i = skipWs(chainText, i);
+        if (chainText[i] !== ',')
+            return null;
+        i = skipWs(chainText, i + 1);
+        const rep = readQuoted(chainText, i);
+        if (!rep)
+            return null;
+        i = skipWs(chainText, rep.end);
+        if (chainText[i] !== ')')
+            return null;
+        steps.push({ kind, pattern, replacement: rep.value });
+        callRe.lastIndex = i + 1;
+    }
+    return steps;
+}
+function run(steps, input) {
+    let s = input;
+    try {
+        for (const st of steps) {
+            if (st.kind === 'replaceAll' && st.pattern instanceof RegExp && !st.pattern.global)
+                return null;
+            s = st.kind === 'replaceAll'
+                ? s.replaceAll(st.pattern, st.replacement)
+                : s.replace(st.pattern, st.replacement);
+        }
+    }
+    catch {
+        return null;
+    }
+    return s;
+}
+/**
+ * Verdict for the replace chain whose text is `chainText` (the receiver plus the
+ * `.method(...)` segments after it).
+ */
+export function jsReplaceChainVerdict(chainText) {
+    const steps = parseSteps(chainText);
+    if (!steps || steps.length === 0)
+        return 'undecided';
+    // Another transform after the first replace may strip CR / LF on its own
+    // (`.split("\r").join("")`): the chain is only judged when every later
+    // segment is a replace or a harmless string method.
+    const first = chainText.search(/\.\s*(?:replaceAll|replace)\s*\(/);
+    for (const seg of chainText.slice(first + 1).matchAll(/\.\s*([A-Za-z_$][\w$]*)\s*\(/g)) {
+        if (!NEUTRAL_AFTER_REPLACE.has(seg[1]))
+            return 'undecided';
+    }
+    const out = run(steps, PROBE);
+    if (out === null)
+        return 'undecided';
+    return out.includes('\r') || out.includes('\n') ? 'leaves-crlf' : 'strips-crlf';
+}
+/**
+ * The text of the call chain that starts at (line, column): the receiver
+ * expression plus the `.method(...)` segments after it, up to the first
+ * character that cannot continue the chain at nesting depth 0. String and regex
+ * literals are skipped as units. The chain may continue over following lines.
+ */
+export function jsChainTextAt(sourceLines, line, column) {
+    const text = [(sourceLines[line - 1] ?? '').slice(column), ...sourceLines.slice(line, line + 7)].join('\n');
+    let depth = 0;
+    let prevSig = '';
+    let i = 0;
+    for (; i < text.length; i++) {
+        const c = text[i];
+        if (c === '"' || c === "'" || c === '`') {
+            for (i++; i < text.length && text[i] !== c; i++)
+                if (text[i] === '\\')
+                    i++;
+            prevSig = c;
+            continue;
+        }
+        if (c === '/' && depth > 0 && (prevSig === '(' || prevSig === ',')) {
+            const rx = readRegexLiteral(text, i);
+            if (rx) {
+                i = rx.end - 1;
+                prevSig = '/';
+                continue;
+            }
+        }
+        if (c === '(' || c === '[' || c === '{') {
+            depth++;
+            prevSig = c;
+            continue;
+        }
+        if (c === ')' || c === ']' || c === '}') {
+            if (depth === 0)
+                break;
+            depth--;
+            prevSig = c;
+            continue;
+        }
+        if (depth === 0 && !/[\w$.\s]/.test(c))
+            break;
+        if (!/\s/.test(c))
+            prevSig = c;
+    }
+    return text.slice(0, i);
+}
+//# sourceMappingURL=js-crlf-strip.js.map

package/dist/analysis/js-crlf-strip.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"js-crlf-strip.js","sourceRoot":"","sources":["../../src/analysis/js-crlf-strip.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAWH,MAAM,kBAAkB,GAAG,GAAG,CAAC;AAE/B,wGAAwG;AACxG,MAAM,qBAAqB,GAAG,IAAI,GAAG,CAAC;IACpC,SAAS,EAAE,YAAY,EAAE,MAAM,EAAE,WAAW,EAAE,SAAS,EAAE,UAAU;IACnE,aAAa,EAAE,aAAa,EAAE,OAAO,EAAE,WAAW;CACnD,CAAC,CAAC;AAEH,gFAAgF;AAChF,MAAM,KAAK,GAAG,2BAA2B,CAAC;AAE1C,SAAS,UAAU,CAAC,CAAS,EAAE,CAAS;IACtC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAE,CAAC;IAChB,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,GAAG;QAAE,OAAO,IAAI,CAAC;IACrD,IAAI,GAAG,GAAG,EAAE,CAAC;IACb,KAAK,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACtC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAE,CAAC;QAChB,IAAI,CAAC,KAAK,CAAC;YAAE,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC;QAC/C,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,GAAG;YAAE,OAAO,IAAI,CAAC;QAC5D,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC;YACf,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;YACnB,IAAI,CAAC,KAAK,SAAS;gBAAE,OAAO,IAAI,CAAC;YACjC,QAAQ,CAAC,EAAE,CAAC;gBACV,KAAK,GAAG;oBAAE,GAAG,IAAI,IAAI,CAAC;oBAAC,CAAC,EAAE,CAAC;oBAAC,SAAS;gBACrC,KAAK,GAAG;oBAAE,GAAG,IAAI,IAAI,CAAC;oBAAC,CAAC,EAAE,CAAC;oBAAC,SAAS;gBACrC,KAAK,GAAG;oBAAE,GAAG,IAAI,IAAI,CAAC;oBAAC,CAAC,EAAE,CAAC;oBAAC,SAAS;gBACrC,KAAK,GAAG;oBAAE,GAAG,IAAI,IAAI,CAAC;oBAAC,CAAC,EAAE,CAAC;oBAAC,SAAS;gBACrC,KAAK,GAAG,EAAE,CAAC;oBACT,MAAM,CAAC,GAAG,iBAAiB,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;oBACxD,IAAI,CAAC,CAAC;wBAAE,OAAO,IAAI,CAAC;oBACpB,GAAG,IAAI,MAAM,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;oBAAC,CAAC,IAAI,CAAC,CAAC;oBAAC,SAAS;gBACnE,CAAC;gBACD,KAAK,GAAG,EAAE,CAAC;oBACT,MAAM,CAAC,GAAG,iBAAiB,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;oBACxD,IAAI,CAAC,CAAC;wBAAE,OAAO,IAAI,CAAC;oBACpB,GAAG,IAAI,MAAM,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;oBAAC,CAAC,IAAI,CAAC,CAAC;oBAAC,SAAS;gBACnE,CAAC;gBACD;oBACE,GAAG,IAAI,CAAC,CAAC;oBAAC,CAAC,EAAE,CAAC;oBAAC,SAAS;YAC5B,CAAC;QACH,CAAC;QACD,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,GAAG;YAAE,OAAO,IAAI,CAAC;QACzC,GAAG,IAAI,CAAC,CAAC;IACX,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,gBAAgB,CAAC,CAAS,EAAE,CAAS;IAC5C,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,GAAG;QAAE,OAAO,IAAI,CAAC;IAC9B,IAAI,OAAO,GAAG,KAAK,CAAC;IACpB,KAAK,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACtC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAE,CAAC;QAChB,IAAI,CAAC,KAAK,IAAI;YAAE,OAAO,IAAI,CAAC;QAC5B,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC;YAAC,CAAC,EAAE,CAAC;YAAC,SAAS;QAAC,CAAC;QAClC,IAAI,OAAO,EAAE,CAAC;YAAC,IAAI,CAAC,KAAK,GAAG;gBAAE,OAAO,GAAG,KAAK,CAAC;YAAC,SAAS;QAAC,CAAC;QAC1D,IAAI,CAAC,KAAK,GAAG,EAAE,CAAC;YAAC,OAAO,GAAG,IAAI,CAAC;YAAC,SAAS;QAAC,CAAC;QAC5C,IAAI,CAAC,KAAK,GAAG,EAAE,CAAC;YACd,MAAM,KAAK,GAAG,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,CAAE,CAAC,CAAC,CAAC,CAAC;YACtD,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC;QACzE,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,MAAM,GAAG,CAAC,CAAS,EAAE,CAAS,EAAU,EAAE;IAC9C,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,IAAI,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAE,CAAC;QAAE,CAAC,EAAE,CAAC;IAC7C,OAAO,CAAC,CAAC;AACX,CAAC,CAAC;AAEF;;;GAGG;AACH,SAAS,UAAU,CAAC,SAAiB;IACnC,MAAM,KAAK,GAAkB,EAAE,CAAC;IAChC,MAAM,MAAM,GAAG,iCAAiC,CAAC;IACjD,IAAI,CAAyB,CAAC;IAC9B,OAAO,CAAC,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;QAC7C,MAAM,IAAI,GAAG,CAAC,CAAC,CAAC,CAA6B,CAAC;QAC9C,IAAI,CAAC,GAAG,MAAM,CAAC,SAAS,EAAE,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;QACjD,IAAI,OAAwB,CAAC;QAC7B,MAAM,EAAE,GAAG,gBAAgB,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC;QAC1C,IAAI,EAAE,EAAE,CAAC;YACP,IAAI,EAAE,CAAC,MAAM,CAAC,MAAM,GAAG,kBAAkB;gBAAE,OAAO,IAAI,CAAC;YACvD,IAAI,CAAC;gBAAC,OAAO,GAAG,IAAI,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC;YAAC,CAAC;YAAC,MAAM,CAAC;gBAAC,OAAO,IAAI,CAAC;YAAC,CAAC;YACzE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC;QACb,CAAC;aAAM,CAAC;YACN,MAAM,GAAG,GAAG,UAAU,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC;YACrC,IAAI,CAAC,GAAG;gBAAE,OAAO,IAAI,CAAC;YACtB,OAAO,GAAG,GAAG,CAAC,KAAK,CAAC;YACpB,CAAC,GAAG,GAAG,CAAC,GAAG,CAAC;QACd,CAAC;QACD,CAAC,GAAG,MAAM,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC;QACzB,IAAI,SAAS,CAAC,CAAC,CAAC,KAAK,GAAG;YAAE,OAAO,IAAI,CAAC;QACtC,CAAC,GAAG,MAAM,CAAC,SAAS,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;QAC7B,MAAM,GAAG,GAAG,UAAU,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC;QACrC,IAAI,CAAC,GAAG;YAAE,OAAO,IAAI,CAAC;QACtB,CAAC,GAAG,MAAM,CAAC,SAAS,EAAE,GAAG,CAAC,GAAG,CAAC,CAAC;QAC/B,IAAI,SAAS,CAAC,CAAC,CAAC,KAAK,GAAG;YAAE,OAAO,IAAI,CAAC;QACtC,KAAK,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,WAAW,EAAE,GAAG,CAAC,KAAK,EAAE,CAAC,CAAC;QACtD,MAAM,CAAC,SAAS,GAAG,CAAC,GAAG,CAAC,CAAC;IAC3B,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,GAAG,CAAC,KAAoB,EAAE,KAAa;IAC9C,IAAI,CAAC,GAAG,KAAK,CAAC;IACd,IAAI,CAAC;QACH,KAAK,MAAM,EAAE,IAAI,KAAK,EAAE,CAAC;YACvB,IAAI,EAAE,CAAC,IAAI,KAAK,YAAY,IAAI,EAAE,CAAC,OAAO,YAAY,MAAM,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,MAAM;gBAAE,OAAO,IAAI,CAAC;YAChG,CAAC,GAAG,EAAE,CAAC,IAAI,KAAK,YAAY;gBAC1B,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,WAAW,CAAC;gBAC1C,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,WAAW,CAAC,CAAC;QAC5C,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;IACD,OAAO,CAAC,CAAC;AACX,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,qBAAqB,CAAC,SAAiB;IACrD,MAAM,KAAK,GAAG,UAAU,CAAC,SAAS,CAAC,CAAC;IACpC,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,WAAW,CAAC;IACrD,yEAAyE;IACzE,uEAAuE;IACvE,oDAAoD;IACpD,MAAM,KAAK,GAAG,SAAS,CAAC,MAAM,CAAC,kCAAkC,CAAC,CAAC;IACnE,KAAK,MAAM,GAAG,IAAI,SAAS,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,+BAA+B,CAAC,EAAE,CAAC;QACvF,IAAI,CAAC,qBAAqB,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAE,CAAC;YAAE,OAAO,WAAW,CAAC;IAC9D,CAAC;IACD,MAAM,GAAG,GAAG,GAAG,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;IAC9B,IAAI,GAAG,KAAK,IAAI;QAAE,OAAO,WAAW,CAAC;IACrC,OAAO,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,aAAa,CAAC;AAClF,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,aAAa,CAAC,WAAqB,EAAE,IAAY,EAAE,MAAc;IAC/E,MAAM,IAAI,GAAG,CAAC,CAAC,WAAW,CAAC,IAAI,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,GAAG,WAAW,CAAC,KAAK,CAAC,IAAI,EAAE,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC5G,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,IAAI,OAAO,GAAG,EAAE,CAAC;IACjB,IAAI,CAAC,GAAG,CAAC,CAAC;IACV,OAAO,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QAC5B,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC,CAAE,CAAC;QACnB,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,GAAG,EAAE,CAAC;YACxC,KAAK,CAAC,EAAE,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,EAAE;gBAAE,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,IAAI;oBAAE,CAAC,EAAE,CAAC;YAC3E,OAAO,GAAG,CAAC,CAAC;YACZ,SAAS;QACX,CAAC;QACD,IAAI,CAAC,KAAK,GAAG,IAAI,KAAK,GAAG,CAAC,IAAI,CAAC,OAAO,KAAK,GAAG,IAAI,OAAO,KAAK,GAAG,CAAC,EAAE,CAAC;YACnE,MAAM,EAAE,GAAG,gBAAgB,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;YACrC,IAAI,EAAE,EAAE,CAAC;gBAAC,CAAC,GAAG,EAAE,CAAC,GAAG,GAAG,CAAC,CAAC;gBAAC,OAAO,GAAG,GAAG,CAAC;gBAAC,SAAS;YAAC,CAAC;QACtD,CAAC;QACD,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,GAAG,EAAE,CAAC;YAAC,KAAK,EAAE,CAAC;YAAC,OAAO,GAAG,CAAC,CAAC;YAAC,SAAS;QAAC,CAAC;QAC5E,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,GAAG,EAAE,CAAC;YACxC,IAAI,KAAK,KAAK,CAAC;gBAAE,MAAM;YACvB,KAAK,EAAE,CAAC;YACR,OAAO,GAAG,CAAC,CAAC;YACZ,SAAS;QACX,CAAC;QACD,IAAI,KAAK,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC;YAAE,MAAM;QAC9C,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;YAAE,OAAO,GAAG,CAAC,CAAC;IACjC,CAAC;IACD,OAAO,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;AAC1B,CAAC"}

package/dist/analysis/passes/cleartext-credential-transport-pass.d.ts

@@ -37,6 +37,8 @@ export declare class CleartextCredentialTransportPass implements AnalysisPass<Cl
     readonly name = "cleartext-credential-transport";
     readonly category: 'security';
     run(ctx: PassContext): CleartextCredentialTransportResult;
+    /** `http.request('http://…')` whose credential body is written afterwards (#670). */
+    private detectNodeRequestBody;
     private detect;
 }
 //# sourceMappingURL=cleartext-credential-transport-pass.d.ts.map

package/dist/analysis/passes/cleartext-credential-transport-pass.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"cleartext-credential-transport-pass.d.ts","sourceRoot":"","sources":["../../../src/analysis/passes/cleartext-credential-transport-pass.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AAEH,OAAO,KAAK,EAAE,YAAY,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAU9E,MAAM,WAAW,kCAAkC;IACjD,QAAQ,EAAE,KAAK,CAAC;QACd,IAAI,EAAE,MAAM,CAAC;QACb,QAAQ,EAAE,MAAM,CAAC;QACjB,GAAG,EAAE,MAAM,CAAC;QACZ,GAAG,EAAE,MAAM,CAAC;KACb,CAAC,CAAC;CACJ;AA0CD,qBAAa,gCACX,YAAW,YAAY,CAAC,kCAAkC,CAAC;IAE3D,QAAQ,CAAC,IAAI,oCAAoC;IACjD,QAAQ,CAAC,QAAQ,EAAG,UAAU,CAAU;IAExC,GAAG,CAAC,GAAG,EAAE,WAAW,GAAG,kCAAkC,CAkCxD;IAED,OAAO,CAAC,MAAM;CA8Ff"}
+{"version":3,"file":"cleartext-credential-transport-pass.d.ts","sourceRoot":"","sources":["../../../src/analysis/passes/cleartext-credential-transport-pass.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AAEH,OAAO,KAAK,EAAE,YAAY,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAU9E,MAAM,WAAW,kCAAkC;IACjD,QAAQ,EAAE,KAAK,CAAC;QACd,IAAI,EAAE,MAAM,CAAC;QACb,QAAQ,EAAE,MAAM,CAAC;QACjB,GAAG,EAAE,MAAM,CAAC;QACZ,GAAG,EAAE,MAAM,CAAC;KACb,CAAC,CAAC;CACJ;AAyED,qBAAa,gCACX,YAAW,YAAY,CAAC,kCAAkC,CAAC;IAE3D,QAAQ,CAAC,IAAI,oCAAoC;IACjD,QAAQ,CAAC,QAAQ,EAAG,UAAU,CAAU;IAExC,GAAG,CAAC,GAAG,EAAE,WAAW,GAAG,kCAAkC,CAmCxD;IAED,qFAAqF;IACrF,OAAO,CAAC,qBAAqB;IAe7B,OAAO,CAAC,MAAM;CA8Ff"}

package/dist/analysis/passes/cleartext-credential-transport-pass.js

@@ -51,19 +51,56 @@ function anyArgCarriesCredential(call, startPos) {
         // Direct identifier (`requests.post(url, password)` shape).
         if (argLooksLikeCredential(a))
             return true;
-        // Inline object literal: `{ password: pw, ... }`.
-        const expr = (a.expression ?? '').trim();
-        if (!expr)
-            continue;
-        // Look for credential-keyword as a key OR value identifier.
-        if (/(?:["'`]?(?:password|passwd|pwd|secret|api[_-]?key|auth[_-]?token|credential)["'`]?\s*[:=])/i
-            .test(expr)) {
+        if (textCarriesCredential(a.expression ?? ''))
             return true;
-        }
-        // Look for credential identifier appearing as a word.
-        if (/\b(?:password|passwd|pwd|secret|api_key|api-key|apiKey|auth_token|authToken|credential)\w*\b/i
-            .test(expr)) {
+    }
+    return false;
+}
+/** True if an expression mentions a credential keyword as a key or a word. */
+function textCarriesCredential(text) {
+    const expr = text.trim();
+    if (!expr)
+        return false;
+    // Inline object literal: `{ password: pw, ... }` — keyword as a key.
+    if (/(?:["'`]?(?:password|passwd|pwd|secret|api[_-]?key|auth[_-]?token|credential)["'`]?\s*[:=])/i
+        .test(expr)) {
+        return true;
+    }
+    // Credential identifier appearing as a word.
+    return /\b(?:password|passwd|pwd|secret|api_key|api-key|apiKey|auth_token|authToken|credential)\w*\b/i
+        .test(expr);
+}
+/**
+ * #670 — node `const r = http.request('http://…', opts)` whose body is sent
+ * later with `r.write(x)` / `r.end(x)` on that same binding. Credits `x` when
+ * its own text, or the text of the definition of `x` that reaches the write,
+ * carries a credential keyword.
+ */
+function nodeRequestWritesCredential(call, graph, lines) {
+    const text = lines[call.location.line - 1] ?? '';
+    const bound = /(?:const|let|var)\s+([A-Za-z_$][\w$]*)\s*=\s*https?\s*\.\s*request\s*\(/.exec(text);
+    if (!bound)
+        return false;
+    const reqVar = bound[1];
+    const reqDef = graph.defsAtLine(call.location.line).find((d) => d.variable === reqVar);
+    if (!reqDef)
+        return false;
+    for (const w of graph.ir.calls) {
+        if (w.receiver !== reqVar || (w.method_name !== 'write' && w.method_name !== 'end'))
+            continue;
+        // The write must use this request object: its reaching def is the binding.
+        const use = graph.usesAtLine(w.location.line).find((u) => u.variable === reqVar);
+        if (!use || use.def_id !== reqDef.id)
+            continue;
+        if (anyArgCarriesCredential(w, 0))
             return true;
+        for (const a of w.arguments) {
+            if (!a.variable)
+                continue;
+            const argUse = graph.usesAtLine(w.location.line).find((u) => u.variable === a.variable);
+            const def = argUse?.def_id != null ? graph.defById.get(argUse.def_id) : undefined;
+            if (def && textCarriesCredential(lines[def.line - 1] ?? ''))
+                return true;
         }
     }
     return false;
@@ -75,8 +112,9 @@ export class CleartextCredentialTransportPass {
         const { graph, language } = ctx;
         const file = graph.ir.meta.file;
         const findings = [];
+        const lines = ctx.code.split('\n');
         for (const call of graph.ir.calls) {
-            const detection = this.detect(call, language);
+            const detection = this.detect(call, language) ?? this.detectNodeRequestBody(call, language, graph, lines);
             if (!detection)
                 continue;
             const { api, url } = detection;
@@ -101,6 +139,20 @@ export class CleartextCredentialTransportPass {
         }
         return { findings };
     }
+    /** `http.request('http://…')` whose credential body is written afterwards (#670). */
+    detectNodeRequestBody(call, language, graph, lines) {
+        if (language !== 'javascript' && language !== 'typescript')
+            return null;
+        if (call.method_name !== 'request')
+            return null;
+        const recvLower = (call.receiver ?? '').toLowerCase();
+        if (recvLower !== 'http' && !recvLower.endsWith('.http'))
+            return null;
+        const url = literalAt(call, 0);
+        if (!isInsecureHttpUrl(url))
+            return null;
+        return nodeRequestWritesCredential(call, graph, lines) ? { api: 'http.request', url: url } : null;
+    }
     detect(call, language) {
         const method = call.method_name ?? '';
         const receiver = call.receiver ?? '';

package/dist/analysis/passes/cleartext-credential-transport-pass.js.map

@@ -1 +1 @@
-{"version":3,"file":"cleartext-credential-transport-pass.js","sourceRoot":"","sources":["../../../src/analysis/passes/cleartext-credential-transport-pass.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AAIH,OAAO,EACL,sBAAsB,EACtB,SAAS,EACT,sBAAsB,GACvB,MAAM,0BAA0B,CAAC;AAElC,MAAM,YAAY,GAAG,mDAAmD,CAAC;AAWzE,iFAAiF;AACjF,SAAS,iBAAiB,CAAC,UAAyB;IAClD,IAAI,CAAC,UAAU;QAAE,OAAO,KAAK,CAAC;IAC9B,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,UAAU,CAAC;QAAE,OAAO,KAAK,CAAC;IAClD,wBAAwB;IACxB,MAAM,IAAI,GAAG,UAAU,CAAC,KAAK,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;IAChD,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IACzC,IAAI,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,KAAK,CAAC;IAC1C,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;GAIG;AACH,SAAS,uBAAuB,CAAC,IAAc,EAAE,QAAgB;IAC/D,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;QAC/B,IAAI,CAAC,CAAC,QAAQ,GAAG,QAAQ;YAAE,SAAS;QACpC,4DAA4D;QAC5D,IAAI,sBAAsB,CAAC,CAAC,CAAC;YAAE,OAAO,IAAI,CAAC;QAC3C,kDAAkD;QAClD,MAAM,IAAI,GAAG,CAAC,CAAC,CAAC,UAAU,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;QACzC,IAAI,CAAC,IAAI;YAAE,SAAS;QACpB,4DAA4D;QAC5D,IACE,8FAA8F;aAC3F,IAAI,CAAC,IAAI,CAAC,EACb,CAAC;YACD,OAAO,IAAI,CAAC;QACd,CAAC;QACD,sDAAsD;QACtD,IAAI,+FAA+F;aAC9F,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YAChB,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,OAAO,gCAAgC;IAGlC,IAAI,GAAG,gCAAgC,CAAC;IACxC,QAAQ,GAAG,UAAmB,CAAC;IAExC,GAAG,CAAC,GAAgB;QAClB,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,GAAG,GAAG,CAAC;QAChC,MAAM,IAAI,GAAG,KAAK,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC;QAChC,MAAM,QAAQ,GAAmD,EAAE,CAAC;QAEpE,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,EAAE,CAAC,KAAK,EAAE,CAAC;YAClC,MAAM,SAAS,GAAG,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;YAC9C,IAAI,CAAC,SAAS;gBAAE,SAAS;YAEzB,MAAM,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,SAAS,CAAC;YAC/B,MAAM,IAAI,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC;YAChC,QAAQ,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,CAAC;YAE5C,GAAG,CAAC,UAAU,CAAC;gBACb,EAAE,EAAE,GAAG,IAAI,CAAC,IAAI,IAAI,IAAI,IAAI,IAAI,EAAE;gBAClC,IAAI,EAAE,IAAI,CAAC,IAAI;gBACf,QAAQ,EAAE,IAAI,CAAC,QAAQ;gBACvB,OAAO,EAAE,IAAI,CAAC,IAAI;gBAClB,GAAG,EAAE,SAAS;gBACd,QAAQ,EAAE,MAAM;gBAChB,KAAK,EAAE,OAAO;gBACd,OAAO,EACL,gCAAgC,GAAG,sBAAsB,GAAG,MAAM;oBAClE,+DAA+D;gBACjE,IAAI;gBACJ,IAAI;gBACJ,GAAG,EACD,mEAAmE;oBACnE,8DAA8D;gBAChE,QAAQ,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,QAAQ,EAAE;aACjC,CAAC,CAAC;QACL,CAAC;QAED,OAAO,EAAE,QAAQ,EAAE,CAAC;IACtB,CAAC;IAEO,MAAM,CACZ,IAAc,EACd,QAAgB;QAEhB,MAAM,MAAM,GAAG,IAAI,CAAC,WAAW,IAAI,EAAE,CAAC;QACtC,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,IAAI,EAAE,CAAC;QACrC,MAAM,SAAS,GAAG,QAAQ,CAAC,WAAW,EAAE,CAAC;QAEzC,mDAAmD;QACnD,IAAI,QAAQ,KAAK,QAAQ,EAAE,CAAC;YAC1B,IAAI,CAAC,SAAS,KAAK,UAAU,IAAI,SAAS,KAAK,OAAO;gBACjD,SAAS,CAAC,QAAQ,CAAC,WAAW,CAAC,IAAI,SAAS,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;gBACjE,CAAC,MAAM,KAAK,MAAM,IAAI,MAAM,KAAK,KAAK,IAAI,MAAM,KAAK,OAAO;oBAC3D,MAAM,KAAK,SAAS,CAAC,EAAE,CAAC;gBAC3B,MAAM,GAAG,GAAG,SAAS,CAAC,IAAI,EAAE,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;gBAC1D,IAAI,iBAAiB,CAAC,GAAG,CAAC,IAAI,uBAAuB,CAAC,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC;oBAC/D,OAAO,EAAE,GAAG,EAAE,GAAG,QAAQ,IAAI,MAAM,EAAE,EAAE,GAAG,EAAE,GAAI,EAAE,CAAC;gBACrD,CAAC;YACH,CAAC;YACD,sDAAsD;YACtD,IAAI,MAAM,KAAK,SAAS,IAAI,SAAS,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;gBACzD,MAAM,GAAG,GAAG,SAAS,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;gBAC/B,IAAI,iBAAiB,CAAC,GAAG,CAAC,IAAI,uBAAuB,CAAC,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC;oBAC/D,OAAO,EAAE,GAAG,EAAE,wBAAwB,EAAE,GAAG,EAAE,GAAI,EAAE,CAAC;gBACtD,CAAC;YACH,CAAC;QACH,CAAC;QAED,2CAA2C;QAC3C,IAAI,QAAQ,KAAK,YAAY,IAAI,QAAQ,KAAK,YAAY,EAAE,CAAC;YAC3D,IAAI,CAAC,SAAS,KAAK,OAAO,IAAI,SAAS,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;gBACvD,CAAC,MAAM,KAAK,MAAM,IAAI,MAAM,KAAK,KAAK,IAAI,MAAM,KAAK,OAAO;oBAC3D,MAAM,KAAK,SAAS,CAAC,EAAE,CAAC;gBAC3B,MAAM,GAAG,GAAG,SAAS,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;gBAC/B,IAAI,iBAAiB,CAAC,GAAG,CAAC,IAAI,uBAAuB,CAAC,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC;oBAC/D,OAAO,EAAE,GAAG,EAAE,SAAS,MAAM,EAAE,EAAE,GAAG,EAAE,GAAI,EAAE,CAAC;gBAC/C,CAAC;YACH,CAAC;YACD,IAAI,MAAM,KAAK,OAAO,IAAI,QAAQ,KAAK,EAAE,EAAE,CAAC;gBAC1C,MAAM,GAAG,GAAG,SAAS,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;gBAC/B,IAAI,iBAAiB,CAAC,GAAG,CAAC,IAAI,uBAAuB,CAAC,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC;oBAC/D,OAAO,EAAE,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,GAAI,EAAE,CAAC;gBACrC,CAAC;YACH,CAAC;YACD,gEAAgE;YAChE,IAAI,MAAM,KAAK,SAAS;gBACpB,CAAC,SAAS,KAAK,MAAM,IAAI,SAAS,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC;gBAC1D,MAAM,GAAG,GAAG,SAAS,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;gBAC/B,IAAI,iBAAiB,CAAC,GAAG,CAAC,IAAI,uBAAuB,CAAC,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC;oBAC/D,OAAO,EAAE,GAAG,EAAE,cAAc,EAAE,GAAG,EAAE,GAAI,EAAE,CAAC;gBAC5C,CAAC;YACH,CAAC;QACH,CAAC;QAED,uEAAuE;QACvE,oEAAoE;QACpE,uEAAuE;QACvE,wCAAwC;QACxC,IAAI,QAAQ,KAAK,MAAM,IAAI,MAAM,KAAK,KAAK,IAAI,QAAQ,KAAK,EAAE,EAAE,CAAC;YAC/D,MAAM,GAAG,GAAG,SAAS,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;YAC/B,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC;gBAAE,OAAO,IAAI,CAAC;YACzC,+DAA+D;YAC/D,yBAAyB;YACzB,MAAM,KAAK,GAAG,IAAI,CAAC,SAAS,IAAI,IAAI,CAAC;YACrC,IAAI,CAAC,KAAK;gBAAE,OAAO,IAAI,CAAC;YACxB,oEAAoE;YACpE,oEAAoE;YACpE,uEAAuE;YACvE,qDAAqD;YACrD,oEAAoE;YACpE,uDAAuD;YACvD,OAAO,IAAI,CAAC;QACd,CAAC;QAED,+BAA+B;QAC/B,IAAI,QAAQ,KAAK,IAAI,EAAE,CAAC;YACtB,IAAI,MAAM,KAAK,MAAM,IAAI,CAAC,QAAQ,KAAK,MAAM,IAAI,QAAQ,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC;gBAC7E,MAAM,GAAG,GAAG,SAAS,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;gBAC/B,IAAI,iBAAiB,CAAC,GAAG,CAAC,IAAI,uBAAuB,CAAC,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC;oBAC/D,OAAO,EAAE,GAAG,EAAE,WAAW,EAAE,GAAG,EAAE,GAAI,EAAE,CAAC;gBACzC,CAAC;YACH,CAAC;YACD,IAAI,MAAM,KAAK,YAAY;gBACvB,CAAC,QAAQ,KAAK,MAAM,IAAI,QAAQ,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC;gBACxD,sBAAsB;gBACtB,MAAM,GAAG,GAAG,SAAS,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;gBAC/B,IAAI,iBAAiB,CAAC,GAAG,CAAC,IAAI,uBAAuB,CAAC,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC;oBAC/D,OAAO,EAAE,GAAG,EAAE,iBAAiB,EAAE,GAAG,EAAE,GAAI,EAAE,CAAC;gBAC/C,CAAC;YACH,CAAC;QACH,CAAC;QAED,OAAO,IAAI,CAAC;IACd,CAAC;CACF;AAED,yEAAyE;AACzE,qCAAqC;AACrC,KAAK,sBAAsB,CAAC"}
+{"version":3,"file":"cleartext-credential-transport-pass.js","sourceRoot":"","sources":["../../../src/analysis/passes/cleartext-credential-transport-pass.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AAIH,OAAO,EACL,sBAAsB,EACtB,SAAS,EACT,sBAAsB,GACvB,MAAM,0BAA0B,CAAC;AAElC,MAAM,YAAY,GAAG,mDAAmD,CAAC;AAWzE,iFAAiF;AACjF,SAAS,iBAAiB,CAAC,UAAyB;IAClD,IAAI,CAAC,UAAU;QAAE,OAAO,KAAK,CAAC;IAC9B,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,UAAU,CAAC;QAAE,OAAO,KAAK,CAAC;IAClD,wBAAwB;IACxB,MAAM,IAAI,GAAG,UAAU,CAAC,KAAK,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;IAChD,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IACzC,IAAI,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,KAAK,CAAC;IAC1C,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;GAIG;AACH,SAAS,uBAAuB,CAAC,IAAc,EAAE,QAAgB;IAC/D,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;QAC/B,IAAI,CAAC,CAAC,QAAQ,GAAG,QAAQ;YAAE,SAAS;QACpC,4DAA4D;QAC5D,IAAI,sBAAsB,CAAC,CAAC,CAAC;YAAE,OAAO,IAAI,CAAC;QAC3C,IAAI,qBAAqB,CAAC,CAAC,CAAC,UAAU,IAAI,EAAE,CAAC;YAAE,OAAO,IAAI,CAAC;IAC7D,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,8EAA8E;AAC9E,SAAS,qBAAqB,CAAC,IAAY;IACzC,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;IACzB,IAAI,CAAC,IAAI;QAAE,OAAO,KAAK,CAAC;IACxB,qEAAqE;IACrE,IACE,8FAA8F;SAC3F,IAAI,CAAC,IAAI,CAAC,EACb,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IACD,6CAA6C;IAC7C,OAAO,+FAA+F;SACnG,IAAI,CAAC,IAAI,CAAC,CAAC;AAChB,CAAC;AAED;;;;;GAKG;AACH,SAAS,2BAA2B,CAAC,IAAc,EAAE,KAA2B,EAAE,KAAe;IAC/F,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;IACjD,MAAM,KAAK,GAAG,yEAAyE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACnG,IAAI,CAAC,KAAK;QAAE,OAAO,KAAK,CAAC;IACzB,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,CAAE,CAAC;IACzB,MAAM,MAAM,GAAG,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,MAAM,CAAC,CAAC;IACvF,IAAI,CAAC,MAAM;QAAE,OAAO,KAAK,CAAC;IAC1B,KAAK,MAAM,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC,KAAK,EAAE,CAAC;QAC/B,IAAI,CAAC,CAAC,QAAQ,KAAK,MAAM,IAAI,CAAC,CAAC,CAAC,WAAW,KAAK,OAAO,IAAI,CAAC,CAAC,WAAW,KAAK,KAAK,CAAC;YAAE,SAAS;QAC9F,2EAA2E;QAC3E,MAAM,GAAG,GAAG,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,MAAM,CAAC,CAAC;QACjF,IAAI,CAAC,GAAG,IAAI,GAAG,CAAC,MAAM,KAAK,MAAM,CAAC,EAAE;YAAE,SAAS;QAC/C,IAAI,uBAAuB,CAAC,CAAC,EAAE,CAAC,CAAC;YAAE,OAAO,IAAI,CAAC;QAC/C,KAAK,MAAM,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,CAAC;YAC5B,IAAI,CAAC,CAAC,CAAC,QAAQ;gBAAE,SAAS;YAC1B,MAAM,MAAM,GAAG,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,CAAC,CAAC,QAAQ,CAAC,CAAC;YACxF,MAAM,GAAG,GAAG,MAAM,EAAE,MAAM,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;YAClF,IAAI,GAAG,IAAI,qBAAqB,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;gBAAE,OAAO,IAAI,CAAC;QAC3E,CAAC;IACH,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,OAAO,gCAAgC;IAGlC,IAAI,GAAG,gCAAgC,CAAC;IACxC,QAAQ,GAAG,UAAmB,CAAC;IAExC,GAAG,CAAC,GAAgB;QAClB,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,GAAG,GAAG,CAAC;QAChC,MAAM,IAAI,GAAG,KAAK,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC;QAChC,MAAM,QAAQ,GAAmD,EAAE,CAAC;QAEpE,MAAM,KAAK,GAAG,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QACnC,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,EAAE,CAAC,KAAK,EAAE,CAAC;YAClC,MAAM,SAAS,GAAG,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,QAAQ,CAAC,IAAI,IAAI,CAAC,qBAAqB,CAAC,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC;YAC1G,IAAI,CAAC,SAAS;gBAAE,SAAS;YAEzB,MAAM,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,SAAS,CAAC;YAC/B,MAAM,IAAI,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC;YAChC,QAAQ,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,CAAC;YAE5C,GAAG,CAAC,UAAU,CAAC;gBACb,EAAE,EAAE,GAAG,IAAI,CAAC,IAAI,IAAI,IAAI,IAAI,IAAI,EAAE;gBAClC,IAAI,EAAE,IAAI,CAAC,IAAI;gBACf,QAAQ,EAAE,IAAI,CAAC,QAAQ;gBACvB,OAAO,EAAE,IAAI,CAAC,IAAI;gBAClB,GAAG,EAAE,SAAS;gBACd,QAAQ,EAAE,MAAM;gBAChB,KAAK,EAAE,OAAO;gBACd,OAAO,EACL,gCAAgC,GAAG,sBAAsB,GAAG,MAAM;oBAClE,+DAA+D;gBACjE,IAAI;gBACJ,IAAI;gBACJ,GAAG,EACD,mEAAmE;oBACnE,8DAA8D;gBAChE,QAAQ,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,QAAQ,EAAE;aACjC,CAAC,CAAC;QACL,CAAC;QAED,OAAO,EAAE,QAAQ,EAAE,CAAC;IACtB,CAAC;IAED,qFAAqF;IAC7E,qBAAqB,CAC3B,IAAc,EACd,QAAgB,EAChB,KAA2B,EAC3B,KAAe;QAEf,IAAI,QAAQ,KAAK,YAAY,IAAI,QAAQ,KAAK,YAAY;YAAE,OAAO,IAAI,CAAC;QACxE,IAAI,IAAI,CAAC,WAAW,KAAK,SAAS;YAAE,OAAO,IAAI,CAAC;QAChD,MAAM,SAAS,GAAG,CAAC,IAAI,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;QACtD,IAAI,SAAS,KAAK,MAAM,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,OAAO,CAAC;YAAE,OAAO,IAAI,CAAC;QACtE,MAAM,GAAG,GAAG,SAAS,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;QAC/B,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC;YAAE,OAAO,IAAI,CAAC;QACzC,OAAO,2BAA2B,CAAC,IAAI,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,cAAc,EAAE,GAAG,EAAE,GAAI,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;IACrG,CAAC;IAEO,MAAM,CACZ,IAAc,EACd,QAAgB;QAEhB,MAAM,MAAM,GAAG,IAAI,CAAC,WAAW,IAAI,EAAE,CAAC;QACtC,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,IAAI,EAAE,CAAC;QACrC,MAAM,SAAS,GAAG,QAAQ,CAAC,WAAW,EAAE,CAAC;QAEzC,mDAAmD;QACnD,IAAI,QAAQ,KAAK,QAAQ,EAAE,CAAC;YAC1B,IAAI,CAAC,SAAS,KAAK,UAAU,IAAI,SAAS,KAAK,OAAO;gBACjD,SAAS,CAAC,QAAQ,CAAC,WAAW,CAAC,IAAI,SAAS,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;gBACjE,CAAC,MAAM,KAAK,MAAM,IAAI,MAAM,KAAK,KAAK,IAAI,MAAM,KAAK,OAAO;oBAC3D,MAAM,KAAK,SAAS,CAAC,EAAE,CAAC;gBAC3B,MAAM,GAAG,GAAG,SAAS,CAAC,IAAI,EAAE,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;gBAC1D,IAAI,iBAAiB,CAAC,GAAG,CAAC,IAAI,uBAAuB,CAAC,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC;oBAC/D,OAAO,EAAE,GAAG,EAAE,GAAG,QAAQ,IAAI,MAAM,EAAE,EAAE,GAAG,EAAE,GAAI,EAAE,CAAC;gBACrD,CAAC;YACH,CAAC;YACD,sDAAsD;YACtD,IAAI,MAAM,KAAK,SAAS,IAAI,SAAS,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;gBACzD,MAAM,GAAG,GAAG,SAAS,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;gBAC/B,IAAI,iBAAiB,CAAC,GAAG,CAAC,IAAI,uBAAuB,CAAC,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC;oBAC/D,OAAO,EAAE,GAAG,EAAE,wBAAwB,EAAE,GAAG,EAAE,GAAI,EAAE,CAAC;gBACtD,CAAC;YACH,CAAC;QACH,CAAC;QAED,2CAA2C;QAC3C,IAAI,QAAQ,KAAK,YAAY,IAAI,QAAQ,KAAK,YAAY,EAAE,CAAC;YAC3D,IAAI,CAAC,SAAS,KAAK,OAAO,IAAI,SAAS,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;gBACvD,CAAC,MAAM,KAAK,MAAM,IAAI,MAAM,KAAK,KAAK,IAAI,MAAM,KAAK,OAAO;oBAC3D,MAAM,KAAK,SAAS,CAAC,EAAE,CAAC;gBAC3B,MAAM,GAAG,GAAG,SAAS,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;gBAC/B,IAAI,iBAAiB,CAAC,GAAG,CAAC,IAAI,uBAAuB,CAAC,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC;oBAC/D,OAAO,EAAE,GAAG,EAAE,SAAS,MAAM,EAAE,EAAE,GAAG,EAAE,GAAI,EAAE,CAAC;gBAC/C,CAAC;YACH,CAAC;YACD,IAAI,MAAM,KAAK,OAAO,IAAI,QAAQ,KAAK,EAAE,EAAE,CAAC;gBAC1C,MAAM,GAAG,GAAG,SAAS,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;gBAC/B,IAAI,iBAAiB,CAAC,GAAG,CAAC,IAAI,uBAAuB,CAAC,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC;oBAC/D,OAAO,EAAE,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,GAAI,EAAE,CAAC;gBACrC,CAAC;YACH,CAAC;YACD,gEAAgE;YAChE,IAAI,MAAM,KAAK,SAAS;gBACpB,CAAC,SAAS,KAAK,MAAM,IAAI,SAAS,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC;gBAC1D,MAAM,GAAG,GAAG,SAAS,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;gBAC/B,IAAI,iBAAiB,CAAC,GAAG,CAAC,IAAI,uBAAuB,CAAC,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC;oBAC/D,OAAO,EAAE,GAAG,EAAE,cAAc,EAAE,GAAG,EAAE,GAAI,EAAE,CAAC;gBAC5C,CAAC;YACH,CAAC;QACH,CAAC;QAED,uEAAuE;QACvE,oEAAoE;QACpE,uEAAuE;QACvE,wCAAwC;QACxC,IAAI,QAAQ,KAAK,MAAM,IAAI,MAAM,KAAK,KAAK,IAAI,QAAQ,KAAK,EAAE,EAAE,CAAC;YAC/D,MAAM,GAAG,GAAG,SAAS,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;YAC/B,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC;gBAAE,OAAO,IAAI,CAAC;YACzC,+DAA+D;YAC/D,yBAAyB;YACzB,MAAM,KAAK,GAAG,IAAI,CAAC,SAAS,IAAI,IAAI,CAAC;YACrC,IAAI,CAAC,KAAK;gBAAE,OAAO,IAAI,CAAC;YACxB,oEAAoE;YACpE,oEAAoE;YACpE,uEAAuE;YACvE,qDAAqD;YACrD,oEAAoE;YACpE,uDAAuD;YACvD,OAAO,IAAI,CAAC;QACd,CAAC;QAED,+BAA+B;QAC/B,IAAI,QAAQ,KAAK,IAAI,EAAE,CAAC;YACtB,IAAI,MAAM,KAAK,MAAM,IAAI,CAAC,QAAQ,KAAK,MAAM,IAAI,QAAQ,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC;gBAC7E,MAAM,GAAG,GAAG,SAAS,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;gBAC/B,IAAI,iBAAiB,CAAC,GAAG,CAAC,IAAI,uBAAuB,CAAC,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC;oBAC/D,OAAO,EAAE,GAAG,EAAE,WAAW,EAAE,GAAG,EAAE,GAAI,EAAE,CAAC;gBACzC,CAAC;YACH,CAAC;YACD,IAAI,MAAM,KAAK,YAAY;gBACvB,CAAC,QAAQ,KAAK,MAAM,IAAI,QAAQ,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC;gBACxD,sBAAsB;gBACtB,MAAM,GAAG,GAAG,SAAS,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;gBAC/B,IAAI,iBAAiB,CAAC,GAAG,CAAC,IAAI,uBAAuB,CAAC,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC;oBAC/D,OAAO,EAAE,GAAG,EAAE,iBAAiB,EAAE,GAAG,EAAE,GAAI,EAAE,CAAC;gBAC/C,CAAC;YACH,CAAC;QACH,CAAC;QAED,OAAO,IAAI,CAAC;IACd,CAAC;CACF;AAED,yEAAyE;AACzE,qCAAqC;AACrC,KAAK,sBAAsB,CAAC"}

package/dist/analysis/passes/cross-file-pass.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"cross-file-pass.d.ts","sourceRoot":"","sources":["../../../src/analysis/passes/cross-file-pass.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,KAAK,EACV,aAAa,EACb,SAAS,EACT,aAAa,EAKd,MAAM,sBAAsB,CAAC;AAC9B,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,8BAA8B,CAAC;AAKjE,MAAM,WAAW,mBAAmB;IAClC,2DAA2D;IAC3D,cAAc,EAAE,aAAa,EAAE,CAAC;IAChC,8CAA8C;IAC9C,UAAU,EAAE,SAAS,EAAE,CAAC;IACxB,uCAAuC;IACvC,aAAa,EAAE,aAAa,CAAC;IAC7B;;;;OAIG;IACH,cAAc,CAAC,EAAE,OAAO,CAAC;CAC1B;AAED,MAAM,WAAW,oBAAoB;IACnC;;;;;;;OAOG;IACH,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED,qBAAa,aAAa;IACxB,GAAG,CACD,YAAY,EAAE,YAAY;IAC1B,2EAA2E;IAC3E,WAAW,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,EAClC,OAAO,GAAE,oBAAyB,GACjC,mBAAmB,CAiRrB;CACF"}
+{"version":3,"file":"cross-file-pass.d.ts","sourceRoot":"","sources":["../../../src/analysis/passes/cross-file-pass.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,KAAK,EACV,aAAa,EACb,SAAS,EACT,aAAa,EAKd,MAAM,sBAAsB,CAAC;AAC9B,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,8BAA8B,CAAC;AAOjE,MAAM,WAAW,mBAAmB;IAClC,2DAA2D;IAC3D,cAAc,EAAE,aAAa,EAAE,CAAC;IAChC,8CAA8C;IAC9C,UAAU,EAAE,SAAS,EAAE,CAAC;IACxB,uCAAuC;IACvC,aAAa,EAAE,aAAa,CAAC;IAC7B;;;;OAIG;IACH,cAAc,CAAC,EAAE,OAAO,CAAC;CAC1B;AAED,MAAM,WAAW,oBAAoB;IACnC;;;;;;;OAOG;IACH,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED,qBAAa,aAAa;IACxB,GAAG,CACD,YAAY,EAAE,YAAY;IAC1B,2EAA2E;IAC3E,WAAW,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,EAClC,OAAO,GAAE,oBAAyB,GACjC,mBAAmB,CA6RrB;CACF"}