driftdetect-detectors 0.1.0

package/dist/data-access/connection-pooling.js

@@ -0,0 +1,297 @@
+/**
+ * Connection Pooling Detector - Database connection pool pattern detection
+ *
+ * Detects connection pooling patterns including:
+ * - Pool configuration
+ * - Connection management
+ * - Pool size settings
+ * - Connection lifecycle
+ *
+ * @requirements 13.7 - Connection pooling detection
+ */
+import { RegexDetector } from '../base/regex-detector.js';
+// ============================================================================
+// Patterns
+// ============================================================================
+export const POOL_CONFIG_PATTERNS = [
+    // JavaScript/TypeScript
+    /pool\s*:\s*\{/gi,
+    /connectionPool\s*:\s*\{/gi,
+    /poolConfig\s*:\s*\{/gi,
+    /createPool\s*\(/gi,
+    /Pool\s*\(/gi,
+    // Python
+    /pool_size\s*=/gi,
+    /max_overflow\s*=/gi,
+    /pool_pre_ping\s*=/gi,
+    /create_engine\s*\([^)]*pool/gi,
+    /QueuePool/gi,
+    /NullPool/gi,
+    /StaticPool/gi,
+    /AsyncAdaptedQueuePool/gi,
+];
+export const POOL_SIZE_PATTERNS = [
+    // JavaScript/TypeScript
+    /(?:max|min|poolSize|connectionLimit)\s*:\s*(\d+)/gi,
+    /max_connections\s*[=:]\s*(\d+)/gi,
+    /pool_size\s*[=:]\s*(\d+)/gi,
+    /CONNECTION_POOL_SIZE\s*[=:]\s*(\d+)/gi,
+    // Python
+    /pool_size\s*=\s*(\d+)/gi,
+    /max_overflow\s*=\s*(\d+)/gi,
+    /POOL_SIZE\s*=\s*(\d+)/gi,
+];
+export const CONNECTION_TIMEOUT_PATTERNS = [
+    /(?:connectionTimeout|connectTimeout|acquireTimeout)\s*:\s*(\d+)/gi,
+    /connection_timeout\s*[=:]\s*(\d+)/gi,
+    /timeout\s*:\s*(\d+)/gi,
+];
+export const IDLE_TIMEOUT_PATTERNS = [
+    /(?:idleTimeout|idleTimeoutMillis|idle_timeout)\s*:\s*(\d+)/gi,
+    /evictionRunIntervalMillis\s*:\s*(\d+)/gi,
+    /softIdleTimeoutMillis\s*:\s*(\d+)/gi,
+];
+export const CONNECTION_ACQUIRE_PATTERNS = [
+    // JavaScript/TypeScript
+    /\.getConnection\s*\(/gi,
+    /\.acquire\s*\(/gi,
+    /\.connect\s*\(/gi,
+    /pool\.query\s*\(/gi,
+    // Python
+    /engine\.connect\s*\(/gi,
+    /\.get_connection\s*\(/gi,
+    /connection_pool\.getconn\s*\(/gi,
+    /pool\.connection\s*\(/gi,
+];
+export const CONNECTION_RELEASE_PATTERNS = [
+    // JavaScript/TypeScript
+    /\.release\s*\(/gi,
+    /\.end\s*\(/gi,
+    /\.destroy\s*\(/gi,
+    /connection\.close\s*\(/gi,
+    // Python
+    /connection\.close\s*\(/gi,
+    /\.putconn\s*\(/gi,
+    /\.dispose\s*\(/gi,
+    /session\.close\s*\(/gi,
+];
+export const CONNECTION_LEAK_PATTERNS = [
+    /getConnection\s*\([^)]*\)[^]*?(?!\.release|\.end|finally)/gis,
+];
+// ============================================================================
+// Analysis Functions
+// ============================================================================
+export function shouldExcludeFile(filePath) {
+    const excludePatterns = [
+        /\.test\.[jt]sx?$/,
+        /\.spec\.[jt]sx?$/,
+        /__tests__\//,
+        /\.d\.ts$/,
+        /node_modules\//,
+    ];
+    return excludePatterns.some((p) => p.test(filePath));
+}
+export function detectPoolConfig(content) {
+    const results = [];
+    const lines = content.split('\n');
+    for (let i = 0; i < lines.length; i++) {
+        const line = lines[i];
+        for (const pattern of POOL_CONFIG_PATTERNS) {
+            const regex = new RegExp(pattern.source, pattern.flags);
+            let match;
+            while ((match = regex.exec(line)) !== null) {
+                results.push({
+                    type: 'pool-config',
+                    line: i + 1,
+                    column: match.index + 1,
+                    match: match[0],
+                });
+            }
+        }
+    }
+    return results;
+}
+export function detectPoolSize(content) {
+    const results = [];
+    const lines = content.split('\n');
+    for (let i = 0; i < lines.length; i++) {
+        const line = lines[i];
+        for (const pattern of POOL_SIZE_PATTERNS) {
+            const regex = new RegExp(pattern.source, pattern.flags);
+            let match;
+            while ((match = regex.exec(line)) !== null) {
+                results.push({
+                    type: 'pool-size',
+                    line: i + 1,
+                    column: match.index + 1,
+                    match: match[0],
+                    value: match[1],
+                });
+            }
+        }
+    }
+    return results;
+}
+export function detectConnectionTimeout(content) {
+    const results = [];
+    const lines = content.split('\n');
+    for (let i = 0; i < lines.length; i++) {
+        const line = lines[i];
+        for (const pattern of CONNECTION_TIMEOUT_PATTERNS) {
+            const regex = new RegExp(pattern.source, pattern.flags);
+            let match;
+            while ((match = regex.exec(line)) !== null) {
+                results.push({
+                    type: 'connection-timeout',
+                    line: i + 1,
+                    column: match.index + 1,
+                    match: match[0],
+                    value: match[1],
+                });
+            }
+        }
+    }
+    return results;
+}
+export function detectIdleTimeout(content) {
+    const results = [];
+    const lines = content.split('\n');
+    for (let i = 0; i < lines.length; i++) {
+        const line = lines[i];
+        for (const pattern of IDLE_TIMEOUT_PATTERNS) {
+            const regex = new RegExp(pattern.source, pattern.flags);
+            let match;
+            while ((match = regex.exec(line)) !== null) {
+                results.push({
+                    type: 'idle-timeout',
+                    line: i + 1,
+                    column: match.index + 1,
+                    match: match[0],
+                    value: match[1],
+                });
+            }
+        }
+    }
+    return results;
+}
+export function detectConnectionAcquire(content) {
+    const results = [];
+    const lines = content.split('\n');
+    for (let i = 0; i < lines.length; i++) {
+        const line = lines[i];
+        for (const pattern of CONNECTION_ACQUIRE_PATTERNS) {
+            const regex = new RegExp(pattern.source, pattern.flags);
+            let match;
+            while ((match = regex.exec(line)) !== null) {
+                results.push({
+                    type: 'connection-acquire',
+                    line: i + 1,
+                    column: match.index + 1,
+                    match: match[0],
+                });
+            }
+        }
+    }
+    return results;
+}
+export function detectConnectionRelease(content) {
+    const results = [];
+    const lines = content.split('\n');
+    for (let i = 0; i < lines.length; i++) {
+        const line = lines[i];
+        for (const pattern of CONNECTION_RELEASE_PATTERNS) {
+            const regex = new RegExp(pattern.source, pattern.flags);
+            let match;
+            while ((match = regex.exec(line)) !== null) {
+                results.push({
+                    type: 'connection-release',
+                    line: i + 1,
+                    column: match.index + 1,
+                    match: match[0],
+                });
+            }
+        }
+    }
+    return results;
+}
+export function analyzeConnectionPooling(content, filePath) {
+    if (shouldExcludeFile(filePath)) {
+        return {
+            patterns: [],
+            violations: [],
+            hasPoolConfig: false,
+            poolSettings: {},
+        };
+    }
+    const patterns = [
+        ...detectPoolConfig(content),
+        ...detectPoolSize(content),
+        ...detectConnectionTimeout(content),
+        ...detectIdleTimeout(content),
+        ...detectConnectionAcquire(content),
+        ...detectConnectionRelease(content),
+    ];
+    const violations = [];
+    // Check for connection acquire without release
+    const acquires = patterns.filter((p) => p.type === 'connection-acquire');
+    const releases = patterns.filter((p) => p.type === 'connection-release');
+    if (acquires.length > 0 && releases.length === 0) {
+        violations.push({
+            type: 'connection-leak',
+            line: acquires[0].line,
+            column: acquires[0].column,
+            match: acquires[0].match,
+            message: 'Connection acquired but no release detected - potential connection leak',
+        });
+    }
+    // Extract pool settings
+    const poolSettings = {};
+    for (const pattern of patterns) {
+        if (pattern.value) {
+            poolSettings[pattern.type] = pattern.value;
+        }
+    }
+    const hasPoolConfig = patterns.some((p) => p.type === 'pool-config' || p.type === 'pool-size');
+    return {
+        patterns,
+        violations,
+        hasPoolConfig,
+        poolSettings,
+    };
+}
+// ============================================================================
+// Detector Class
+// ============================================================================
+export class ConnectionPoolingDetector extends RegexDetector {
+    id = 'data-access/connection-pooling';
+    name = 'Connection Pooling Detector';
+    description = 'Detects database connection pooling patterns and potential leaks';
+    category = 'data-access';
+    subcategory = 'connection-pooling';
+    supportedLanguages = ['typescript', 'javascript', 'python'];
+    async detect(context) {
+        if (!this.supportsLanguage(context.language)) {
+            return this.createEmptyResult();
+        }
+        const analysis = analyzeConnectionPooling(context.content, context.file);
+        if (analysis.patterns.length === 0 && analysis.violations.length === 0) {
+            return this.createEmptyResult();
+        }
+        const confidence = analysis.hasPoolConfig ? 0.9 : 0.7;
+        return this.createResult([], [], confidence, {
+            custom: {
+                patterns: analysis.patterns,
+                violations: analysis.violations,
+                hasPoolConfig: analysis.hasPoolConfig,
+                poolSettings: analysis.poolSettings,
+            },
+        });
+    }
+    generateQuickFix(_violation) {
+        return null;
+    }
+}
+export function createConnectionPoolingDetector() {
+    return new ConnectionPoolingDetector();
+}
+//# sourceMappingURL=connection-pooling.js.map

package/dist/data-access/connection-pooling.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"connection-pooling.js","sourceRoot":"","sources":["../../src/data-access/connection-pooling.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAGH,OAAO,EAAE,aAAa,EAAE,MAAM,2BAA2B,CAAC;AA2C1D,+EAA+E;AAC/E,WAAW;AACX,+EAA+E;AAE/E,MAAM,CAAC,MAAM,oBAAoB,GAAG;IAClC,wBAAwB;IACxB,iBAAiB;IACjB,2BAA2B;IAC3B,uBAAuB;IACvB,mBAAmB;IACnB,aAAa;IACb,SAAS;IACT,iBAAiB;IACjB,oBAAoB;IACpB,qBAAqB;IACrB,+BAA+B;IAC/B,aAAa;IACb,YAAY;IACZ,cAAc;IACd,yBAAyB;CAC1B,CAAC;AAEF,MAAM,CAAC,MAAM,kBAAkB,GAAG;IAChC,wBAAwB;IACxB,oDAAoD;IACpD,kCAAkC;IAClC,4BAA4B;IAC5B,uCAAuC;IACvC,SAAS;IACT,yBAAyB;IACzB,4BAA4B;IAC5B,yBAAyB;CAC1B,CAAC;AAEF,MAAM,CAAC,MAAM,2BAA2B,GAAG;IACzC,mEAAmE;IACnE,qCAAqC;IACrC,uBAAuB;CACxB,CAAC;AAEF,MAAM,CAAC,MAAM,qBAAqB,GAAG;IACnC,8DAA8D;IAC9D,yCAAyC;IACzC,qCAAqC;CACtC,CAAC;AAEF,MAAM,CAAC,MAAM,2BAA2B,GAAG;IACzC,wBAAwB;IACxB,wBAAwB;IACxB,kBAAkB;IAClB,kBAAkB;IAClB,oBAAoB;IACpB,SAAS;IACT,wBAAwB;IACxB,yBAAyB;IACzB,iCAAiC;IACjC,yBAAyB;CAC1B,CAAC;AAEF,MAAM,CAAC,MAAM,2BAA2B,GAAG;IACzC,wBAAwB;IACxB,kBAAkB;IAClB,cAAc;IACd,kBAAkB;IAClB,0BAA0B;IAC1B,SAAS;IACT,0BAA0B;IAC1B,kBAAkB;IAClB,kBAAkB;IAClB,uBAAuB;CACxB,CAAC;AAEF,MAAM,CAAC,MAAM,wBAAwB,GAAG;IACtC,8DAA8D;CAC/D,CAAC;AAEF,+EAA+E;AAC/E,qBAAqB;AACrB,+EAA+E;AAE/E,MAAM,UAAU,iBAAiB,CAAC,QAAgB;IAChD,MAAM,eAAe,GAAG;QACtB,kBAAkB;QAClB,kBAAkB;QAClB,aAAa;QACb,UAAU;QACV,gBAAgB;KACjB,CAAC;IACF,OAAO,eAAe,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC;AACvD,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,OAAe;IAC9C,MAAM,OAAO,GAAgC,EAAE,CAAC;IAChD,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAElC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACtC,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAE,CAAC;QACvB,KAAK,MAAM,OAAO,IAAI,oBAAoB,EAAE,CAAC;YAC3C,MAAM,KAAK,GAAG,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC;YACxD,IAAI,KAAK,CAAC;YACV,OAAO,CAAC,KAAK,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;gBAC3C,OAAO,CAAC,IAAI,CAAC;oBACX,IAAI,EAAE,aAAa;oBACnB,IAAI,EAAE,CAAC,GAAG,CAAC;oBACX,MAAM,EAAE,KAAK,CAAC,KAAK,GAAG,CAAC;oBACvB,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC;iBAChB,CAAC,CAAC;YACL,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,OAAe;IAC5C,MAAM,OAAO,GAAgC,EAAE,CAAC;IAChD,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAElC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACtC,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAE,CAAC;QACvB,KAAK,MAAM,OAAO,IAAI,kBAAkB,EAAE,CAAC;YACzC,MAAM,KAAK,GAAG,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC;YACxD,IAAI,KAAK,CAAC;YACV,OAAO,CAAC,KAAK,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;gBAC3C,OAAO,CAAC,IAAI,CAAC;oBACX,IAAI,EAAE,WAAW;oBACjB,IAAI,EAAE,CAAC,GAAG,CAAC;oBACX,MAAM,EAAE,KAAK,CAAC,KAAK,GAAG,CAAC;oBACvB,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC;oBACf,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC;iBAChB,CAAC,CAAC;YACL,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,MAAM,UAAU,uBAAuB,CAAC,OAAe;IACrD,MAAM,OAAO,GAAgC,EAAE,CAAC;IAChD,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAElC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACtC,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAE,CAAC;QACvB,KAAK,MAAM,OAAO,IAAI,2BAA2B,EAAE,CAAC;YAClD,MAAM,KAAK,GAAG,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC;YACxD,IAAI,KAAK,CAAC;YACV,OAAO,CAAC,KAAK,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;gBAC3C,OAAO,CAAC,IAAI,CAAC;oBACX,IAAI,EAAE,oBAAoB;oBAC1B,IAAI,EAAE,CAAC,GAAG,CAAC;oBACX,MAAM,EAAE,KAAK,CAAC,KAAK,GAAG,CAAC;oBACvB,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC;oBACf,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC;iBAChB,CAAC,CAAC;YACL,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,OAAe;IAC/C,MAAM,OAAO,GAAgC,EAAE,CAAC;IAChD,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAElC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACtC,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAE,CAAC;QACvB,KAAK,MAAM,OAAO,IAAI,qBAAqB,EAAE,CAAC;YAC5C,MAAM,KAAK,GAAG,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC;YACxD,IAAI,KAAK,CAAC;YACV,OAAO,CAAC,KAAK,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;gBAC3C,OAAO,CAAC,IAAI,CAAC;oBACX,IAAI,EAAE,cAAc;oBACpB,IAAI,EAAE,CAAC,GAAG,CAAC;oBACX,MAAM,EAAE,KAAK,CAAC,KAAK,GAAG,CAAC;oBACvB,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC;oBACf,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC;iBAChB,CAAC,CAAC;YACL,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,MAAM,UAAU,uBAAuB,CAAC,OAAe;IACrD,MAAM,OAAO,GAAgC,EAAE,CAAC;IAChD,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAElC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACtC,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAE,CAAC;QACvB,KAAK,MAAM,OAAO,IAAI,2BAA2B,EAAE,CAAC;YAClD,MAAM,KAAK,GAAG,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC;YACxD,IAAI,KAAK,CAAC;YACV,OAAO,CAAC,KAAK,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;gBAC3C,OAAO,CAAC,IAAI,CAAC;oBACX,IAAI,EAAE,oBAAoB;oBAC1B,IAAI,EAAE,CAAC,GAAG,CAAC;oBACX,MAAM,EAAE,KAAK,CAAC,KAAK,GAAG,CAAC;oBACvB,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC;iBAChB,CAAC,CAAC;YACL,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,MAAM,UAAU,uBAAuB,CAAC,OAAe;IACrD,MAAM,OAAO,GAAgC,EAAE,CAAC;IAChD,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAElC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACtC,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAE,CAAC;QACvB,KAAK,MAAM,OAAO,IAAI,2BAA2B,EAAE,CAAC;YAClD,MAAM,KAAK,GAAG,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC;YACxD,IAAI,KAAK,CAAC;YACV,OAAO,CAAC,KAAK,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;gBAC3C,OAAO,CAAC,IAAI,CAAC;oBACX,IAAI,EAAE,oBAAoB;oBAC1B,IAAI,EAAE,CAAC,GAAG,CAAC;oBACX,MAAM,EAAE,KAAK,CAAC,KAAK,GAAG,CAAC;oBACvB,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC;iBAChB,CAAC,CAAC;YACL,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,MAAM,UAAU,wBAAwB,CAAC,OAAe,EAAE,QAAgB;IACxE,IAAI,iBAAiB,CAAC,QAAQ,CAAC,EAAE,CAAC;QAChC,OAAO;YACL,QAAQ,EAAE,EAAE;YACZ,UAAU,EAAE,EAAE;YACd,aAAa,EAAE,KAAK;YACpB,YAAY,EAAE,EAAE;SACjB,CAAC;IACJ,CAAC;IAED,MAAM,QAAQ,GAAgC;QAC5C,GAAG,gBAAgB,CAAC,OAAO,CAAC;QAC5B,GAAG,cAAc,CAAC,OAAO,CAAC;QAC1B,GAAG,uBAAuB,CAAC,OAAO,CAAC;QACnC,GAAG,iBAAiB,CAAC,OAAO,CAAC;QAC7B,GAAG,uBAAuB,CAAC,OAAO,CAAC;QACnC,GAAG,uBAAuB,CAAC,OAAO,CAAC;KACpC,CAAC;IAEF,MAAM,UAAU,GAAkC,EAAE,CAAC;IAErD,+CAA+C;IAC/C,MAAM,QAAQ,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,oBAAoB,CAAC,CAAC;IACzE,MAAM,QAAQ,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,oBAAoB,CAAC,CAAC;IAEzE,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACjD,UAAU,CAAC,IAAI,CAAC;YACd,IAAI,EAAE,iBAAiB;YACvB,IAAI,EAAE,QAAQ,CAAC,CAAC,CAAE,CAAC,IAAI;YACvB,MAAM,EAAE,QAAQ,CAAC,CAAC,CAAE,CAAC,MAAM;YAC3B,KAAK,EAAE,QAAQ,CAAC,CAAC,CAAE,CAAC,KAAK;YACzB,OAAO,EAAE,yEAAyE;SACnF,CAAC,CAAC;IACL,CAAC;IAED,wBAAwB;IACxB,MAAM,YAAY,GAA2B,EAAE,CAAC;IAChD,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;QAC/B,IAAI,OAAO,CAAC,KAAK,EAAE,CAAC;YAClB,YAAY,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,OAAO,CAAC,KAAK,CAAC;QAC7C,CAAC;IACH,CAAC;IAED,MAAM,aAAa,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,aAAa,IAAI,CAAC,CAAC,IAAI,KAAK,WAAW,CAAC,CAAC;IAE/F,OAAO;QACL,QAAQ;QACR,UAAU;QACV,aAAa;QACb,YAAY;KACb,CAAC;AACJ,CAAC;AAED,+EAA+E;AAC/E,iBAAiB;AACjB,+EAA+E;AAE/E,MAAM,OAAO,yBAA0B,SAAQ,aAAa;IACjD,EAAE,GAAG,gCAAgC,CAAC;IACtC,IAAI,GAAG,6BAA6B,CAAC;IACrC,WAAW,GAAG,kEAAkE,CAAC;IACjF,QAAQ,GAAoB,aAAa,CAAC;IAC1C,WAAW,GAAG,oBAAoB,CAAC;IACnC,kBAAkB,GAAe,CAAC,YAAY,EAAE,YAAY,EAAE,QAAQ,CAAC,CAAC;IAEjF,KAAK,CAAC,MAAM,CAAC,OAAyB;QACpC,IAAI,CAAC,IAAI,CAAC,gBAAgB,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC7C,OAAO,IAAI,CAAC,iBAAiB,EAAE,CAAC;QAClC,CAAC;QAED,MAAM,QAAQ,GAAG,wBAAwB,CAAC,OAAO,CAAC,OAAO,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC;QAEzE,IAAI,QAAQ,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC,IAAI,QAAQ,CAAC,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACvE,OAAO,IAAI,CAAC,iBAAiB,EAAE,CAAC;QAClC,CAAC;QAED,MAAM,UAAU,GAAG,QAAQ,CAAC,aAAa,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC;QACtD,OAAO,IAAI,CAAC,YAAY,CAAC,EAAE,EAAE,EAAE,EAAE,UAAU,EAAE;YAC3C,MAAM,EAAE;gBACN,QAAQ,EAAE,QAAQ,CAAC,QAAQ;gBAC3B,UAAU,EAAE,QAAQ,CAAC,UAAU;gBAC/B,aAAa,EAAE,QAAQ,CAAC,aAAa;gBACrC,YAAY,EAAE,QAAQ,CAAC,YAAY;aACpC;SACF,CAAC,CAAC;IACL,CAAC;IAED,gBAAgB,CAAC,UAAqB;QACpC,OAAO,IAAI,CAAC;IACd,CAAC;CACF;AAED,MAAM,UAAU,+BAA+B;IAC7C,OAAO,IAAI,yBAAyB,EAAE,CAAC;AACzC,CAAC"}

package/dist/data-access/dto-patterns.d.ts

@@ -0,0 +1,64 @@
+/**
+ * DTO Patterns Detector - Data Transfer Object pattern detection
+ *
+ * Detects DTO patterns including:
+ * - DTO class definitions
+ * - DTO interfaces
+ * - Mapper functions
+ * - Transformation patterns
+ *
+ * @requirements 13.5 - DTO pattern detection
+ */
+import type { Violation, QuickFix, PatternCategory, Language } from 'driftdetect-core';
+import { RegexDetector } from '../base/regex-detector.js';
+import type { DetectionContext, DetectionResult } from '../base/base-detector.js';
+export type DTOPatternType = 'dto-class' | 'dto-interface' | 'dto-type' | 'mapper-function' | 'transformer-class' | 'serializer';
+export type DTOViolationType = 'missing-dto' | 'entity-exposure' | 'inconsistent-naming';
+export interface DTOPatternInfo {
+    type: DTOPatternType;
+    line: number;
+    column: number;
+    match: string;
+    name?: string | undefined;
+}
+export interface DTOViolationInfo {
+    type: DTOViolationType;
+    line: number;
+    column: number;
+    match: string;
+    message: string;
+}
+export interface DTOAnalysis {
+    patterns: DTOPatternInfo[];
+    violations: DTOViolationInfo[];
+    hasDTOs: boolean;
+    dtoCount: number;
+}
+export declare const DTO_CLASS_PATTERNS: RegExp[];
+export declare const DTO_INTERFACE_PATTERNS: RegExp[];
+export declare const DTO_TYPE_PATTERNS: RegExp[];
+export declare const MAPPER_FUNCTION_PATTERNS: RegExp[];
+export declare const TRANSFORMER_CLASS_PATTERNS: RegExp[];
+export declare const SERIALIZER_PATTERNS: RegExp[];
+export declare const ENTITY_EXPOSURE_PATTERNS: RegExp[];
+export declare function shouldExcludeFile(filePath: string): boolean;
+export declare function detectDTOClasses(content: string): DTOPatternInfo[];
+export declare function detectDTOInterfaces(content: string): DTOPatternInfo[];
+export declare function detectDTOTypes(content: string): DTOPatternInfo[];
+export declare function detectMapperFunctions(content: string): DTOPatternInfo[];
+export declare function detectTransformerClasses(content: string): DTOPatternInfo[];
+export declare function detectSerializers(content: string): DTOPatternInfo[];
+export declare function detectEntityExposureViolations(content: string): DTOViolationInfo[];
+export declare function analyzeDTOPatterns(content: string, filePath: string): DTOAnalysis;
+export declare class DTOPatternsDetector extends RegexDetector {
+    readonly id = "data-access/dto-patterns";
+    readonly name = "DTO Patterns Detector";
+    readonly description = "Detects Data Transfer Object patterns and identifies entity exposure";
+    readonly category: PatternCategory;
+    readonly subcategory = "dto-patterns";
+    readonly supportedLanguages: Language[];
+    detect(context: DetectionContext): Promise<DetectionResult>;
+    generateQuickFix(_violation: Violation): QuickFix | null;
+}
+export declare function createDTOPatternsDetector(): DTOPatternsDetector;
+//# sourceMappingURL=dto-patterns.d.ts.map

package/dist/data-access/dto-patterns.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"dto-patterns.d.ts","sourceRoot":"","sources":["../../src/data-access/dto-patterns.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,KAAK,EAAE,SAAS,EAAE,QAAQ,EAAE,eAAe,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AACvF,OAAO,EAAE,aAAa,EAAE,MAAM,2BAA2B,CAAC;AAC1D,OAAO,KAAK,EAAE,gBAAgB,EAAE,eAAe,EAAE,MAAM,0BAA0B,CAAC;AAMlF,MAAM,MAAM,cAAc,GACtB,WAAW,GACX,eAAe,GACf,UAAU,GACV,iBAAiB,GACjB,mBAAmB,GACnB,YAAY,CAAC;AAEjB,MAAM,MAAM,gBAAgB,GACxB,aAAa,GACb,iBAAiB,GACjB,qBAAqB,CAAC;AAE1B,MAAM,WAAW,cAAc;IAC7B,IAAI,EAAE,cAAc,CAAC;IACrB,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CAC3B;AAED,MAAM,WAAW,gBAAgB;IAC/B,IAAI,EAAE,gBAAgB,CAAC;IACvB,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,WAAW;IAC1B,QAAQ,EAAE,cAAc,EAAE,CAAC;IAC3B,UAAU,EAAE,gBAAgB,EAAE,CAAC;IAC/B,OAAO,EAAE,OAAO,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;CAClB;AAMD,eAAO,MAAM,kBAAkB,UAQ9B,CAAC;AAEF,eAAO,MAAM,sBAAsB,UAGlC,CAAC;AAEF,eAAO,MAAM,iBAAiB,UAG7B,CAAC;AAEF,eAAO,MAAM,wBAAwB,UAapC,CAAC;AAEF,eAAO,MAAM,0BAA0B,UAItC,CAAC;AAEF,eAAO,MAAM,mBAAmB,UAa/B,CAAC;AAEF,eAAO,MAAM,wBAAwB,UAGpC,CAAC;AAMF,wBAAgB,iBAAiB,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAS3D;AAED,wBAAgB,gBAAgB,CAAC,OAAO,EAAE,MAAM,GAAG,cAAc,EAAE,CAsBlE;AAED,wBAAgB,mBAAmB,CAAC,OAAO,EAAE,MAAM,GAAG,cAAc,EAAE,CAsBrE;AAED,wBAAgB,cAAc,CAAC,OAAO,EAAE,MAAM,GAAG,cAAc,EAAE,CAsBhE;AAED,wBAAgB,qBAAqB,CAAC,OAAO,EAAE,MAAM,GAAG,cAAc,EAAE,CAsBvE;AAED,wBAAgB,wBAAwB,CAAC,OAAO,EAAE,MAAM,GAAG,cAAc,EAAE,CAsB1E;AAED,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,MAAM,GAAG,cAAc,EAAE,CAsBnE;AAED,wBAAgB,8BAA8B,CAAC,OAAO,EAAE,MAAM,GAAG,gBAAgB,EAAE,CAsBlF;AAED,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,WAAW,CA+BjF;AAMD,qBAAa,mBAAoB,SAAQ,aAAa;IACpD,QAAQ,CAAC,EAAE,8BAA8B;IACzC,QAAQ,CAAC,IAAI,2BAA2B;IACxC,QAAQ,CAAC,WAAW,0EAA0E;IAC9F,QAAQ,CAAC,QAAQ,EAAE,eAAe,CAAiB;IACnD,QAAQ,CAAC,WAAW,kBAAkB;IACtC,QAAQ,CAAC,kBAAkB,EAAE,QAAQ,EAAE,CAA0C;IAE3E,MAAM,CAAC,OAAO,EAAE,gBAAgB,GAAG,OAAO,CAAC,eAAe,CAAC;IAsBjE,gBAAgB,CAAC,UAAU,EAAE,SAAS,GAAG,QAAQ,GAAG,IAAI;CAGzD;AAED,wBAAgB,yBAAyB,IAAI,mBAAmB,CAE/D"}

package/dist/data-access/dto-patterns.js

@@ -0,0 +1,291 @@
+/**
+ * DTO Patterns Detector - Data Transfer Object pattern detection
+ *
+ * Detects DTO patterns including:
+ * - DTO class definitions
+ * - DTO interfaces
+ * - Mapper functions
+ * - Transformation patterns
+ *
+ * @requirements 13.5 - DTO pattern detection
+ */
+import { RegexDetector } from '../base/regex-detector.js';
+// ============================================================================
+// Patterns
+// ============================================================================
+export const DTO_CLASS_PATTERNS = [
+    // JavaScript/TypeScript
+    /class\s+(\w+(?:DTO|Dto|Request|Response|Input|Output))\s*(?:extends|implements|\{)/gi,
+    /export\s+class\s+(\w+(?:DTO|Dto))/gi,
+    // Python
+    /class\s+(\w+(?:DTO|Dto|Request|Response|Input|Output))\s*\(/gi,
+    /class\s+(\w+(?:Schema|Model))\s*\(\s*(?:BaseModel|Schema)\s*\)/gi, // Pydantic
+    /@dataclass/gi,
+];
+export const DTO_INTERFACE_PATTERNS = [
+    /interface\s+(\w+(?:DTO|Dto|Request|Response|Input|Output))/gi,
+    /export\s+interface\s+(\w+(?:DTO|Dto))/gi,
+];
+export const DTO_TYPE_PATTERNS = [
+    /type\s+(\w+(?:DTO|Dto|Request|Response|Input|Output))\s*=/gi,
+    /export\s+type\s+(\w+(?:DTO|Dto))\s*=/gi,
+];
+export const MAPPER_FUNCTION_PATTERNS = [
+    // JavaScript/TypeScript
+    /function\s+(to\w+|from\w+|map\w+|transform\w+)\s*\(/gi,
+    /const\s+(to\w+|from\w+|map\w+|transform\w+)\s*=\s*(?:\([^)]*\)|[^=])\s*=>/gi,
+    /(\w+)\.toDTO\s*\(/gi,
+    /(\w+)\.fromDTO\s*\(/gi,
+    // Python
+    /def\s+(to_\w+|from_\w+|map_\w+|transform_\w+)\s*\(/gi,
+    /def\s+(to_dict|from_dict|to_model|from_model)\s*\(/gi,
+    /\.model_dump\s*\(/gi, // Pydantic v2
+    /\.dict\s*\(/gi, // Pydantic v1
+    /\.model_validate\s*\(/gi, // Pydantic v2
+    /\.parse_obj\s*\(/gi, // Pydantic v1
+];
+export const TRANSFORMER_CLASS_PATTERNS = [
+    /class\s+(\w+(?:Transformer|Mapper|Converter))/gi,
+    /@Transform\s*\(/gi,
+    /class-transformer/gi,
+];
+export const SERIALIZER_PATTERNS = [
+    // JavaScript/TypeScript
+    /class\s+(\w+Serializer)/gi,
+    /\.serialize\s*\(/gi,
+    /\.deserialize\s*\(/gi,
+    /JSON\.stringify\s*\(/gi,
+    /JSON\.parse\s*\(/gi,
+    // Python
+    /class\s+(\w+Serializer)\s*\(/gi,
+    /json\.dumps\s*\(/gi,
+    /json\.loads\s*\(/gi,
+    /\.json\s*\(\s*\)/gi, // Pydantic .json()
+    /jsonable_encoder\s*\(/gi, // FastAPI
+];
+export const ENTITY_EXPOSURE_PATTERNS = [
+    /return\s+(?:await\s+)?(?:this\.)?(?:prisma|db)\.\w+\.(find|create|update)/gi,
+    /res\.(?:json|send)\s*\(\s*(?:await\s+)?(?:this\.)?(?:prisma|db)\./gi,
+];
+// ============================================================================
+// Analysis Functions
+// ============================================================================
+export function shouldExcludeFile(filePath) {
+    const excludePatterns = [
+        /\.test\.[jt]sx?$/,
+        /\.spec\.[jt]sx?$/,
+        /__tests__\//,
+        /\.d\.ts$/,
+        /node_modules\//,
+    ];
+    return excludePatterns.some((p) => p.test(filePath));
+}
+export function detectDTOClasses(content) {
+    const results = [];
+    const lines = content.split('\n');
+    for (let i = 0; i < lines.length; i++) {
+        const line = lines[i];
+        for (const pattern of DTO_CLASS_PATTERNS) {
+            const regex = new RegExp(pattern.source, pattern.flags);
+            let match;
+            while ((match = regex.exec(line)) !== null) {
+                results.push({
+                    type: 'dto-class',
+                    line: i + 1,
+                    column: match.index + 1,
+                    match: match[0],
+                    name: match[1],
+                });
+            }
+        }
+    }
+    return results;
+}
+export function detectDTOInterfaces(content) {
+    const results = [];
+    const lines = content.split('\n');
+    for (let i = 0; i < lines.length; i++) {
+        const line = lines[i];
+        for (const pattern of DTO_INTERFACE_PATTERNS) {
+            const regex = new RegExp(pattern.source, pattern.flags);
+            let match;
+            while ((match = regex.exec(line)) !== null) {
+                results.push({
+                    type: 'dto-interface',
+                    line: i + 1,
+                    column: match.index + 1,
+                    match: match[0],
+                    name: match[1],
+                });
+            }
+        }
+    }
+    return results;
+}
+export function detectDTOTypes(content) {
+    const results = [];
+    const lines = content.split('\n');
+    for (let i = 0; i < lines.length; i++) {
+        const line = lines[i];
+        for (const pattern of DTO_TYPE_PATTERNS) {
+            const regex = new RegExp(pattern.source, pattern.flags);
+            let match;
+            while ((match = regex.exec(line)) !== null) {
+                results.push({
+                    type: 'dto-type',
+                    line: i + 1,
+                    column: match.index + 1,
+                    match: match[0],
+                    name: match[1],
+                });
+            }
+        }
+    }
+    return results;
+}
+export function detectMapperFunctions(content) {
+    const results = [];
+    const lines = content.split('\n');
+    for (let i = 0; i < lines.length; i++) {
+        const line = lines[i];
+        for (const pattern of MAPPER_FUNCTION_PATTERNS) {
+            const regex = new RegExp(pattern.source, pattern.flags);
+            let match;
+            while ((match = regex.exec(line)) !== null) {
+                results.push({
+                    type: 'mapper-function',
+                    line: i + 1,
+                    column: match.index + 1,
+                    match: match[0],
+                    name: match[1],
+                });
+            }
+        }
+    }
+    return results;
+}
+export function detectTransformerClasses(content) {
+    const results = [];
+    const lines = content.split('\n');
+    for (let i = 0; i < lines.length; i++) {
+        const line = lines[i];
+        for (const pattern of TRANSFORMER_CLASS_PATTERNS) {
+            const regex = new RegExp(pattern.source, pattern.flags);
+            let match;
+            while ((match = regex.exec(line)) !== null) {
+                results.push({
+                    type: 'transformer-class',
+                    line: i + 1,
+                    column: match.index + 1,
+                    match: match[0],
+                    name: match[1],
+                });
+            }
+        }
+    }
+    return results;
+}
+export function detectSerializers(content) {
+    const results = [];
+    const lines = content.split('\n');
+    for (let i = 0; i < lines.length; i++) {
+        const line = lines[i];
+        for (const pattern of SERIALIZER_PATTERNS) {
+            const regex = new RegExp(pattern.source, pattern.flags);
+            let match;
+            while ((match = regex.exec(line)) !== null) {
+                results.push({
+                    type: 'serializer',
+                    line: i + 1,
+                    column: match.index + 1,
+                    match: match[0],
+                    name: match[1],
+                });
+            }
+        }
+    }
+    return results;
+}
+export function detectEntityExposureViolations(content) {
+    const results = [];
+    const lines = content.split('\n');
+    for (let i = 0; i < lines.length; i++) {
+        const line = lines[i];
+        for (const pattern of ENTITY_EXPOSURE_PATTERNS) {
+            const regex = new RegExp(pattern.source, pattern.flags);
+            let match;
+            while ((match = regex.exec(line)) !== null) {
+                results.push({
+                    type: 'entity-exposure',
+                    line: i + 1,
+                    column: match.index + 1,
+                    match: match[0],
+                    message: 'Direct entity exposure detected - consider using DTOs',
+                });
+            }
+        }
+    }
+    return results;
+}
+export function analyzeDTOPatterns(content, filePath) {
+    if (shouldExcludeFile(filePath)) {
+        return {
+            patterns: [],
+            violations: [],
+            hasDTOs: false,
+            dtoCount: 0,
+        };
+    }
+    const patterns = [
+        ...detectDTOClasses(content),
+        ...detectDTOInterfaces(content),
+        ...detectDTOTypes(content),
+        ...detectMapperFunctions(content),
+        ...detectTransformerClasses(content),
+        ...detectSerializers(content),
+    ];
+    const violations = detectEntityExposureViolations(content);
+    const dtoDefinitions = patterns.filter((p) => p.type === 'dto-class' || p.type === 'dto-interface' || p.type === 'dto-type');
+    return {
+        patterns,
+        violations,
+        hasDTOs: dtoDefinitions.length > 0,
+        dtoCount: dtoDefinitions.length,
+    };
+}
+// ============================================================================
+// Detector Class
+// ============================================================================
+export class DTOPatternsDetector extends RegexDetector {
+    id = 'data-access/dto-patterns';
+    name = 'DTO Patterns Detector';
+    description = 'Detects Data Transfer Object patterns and identifies entity exposure';
+    category = 'data-access';
+    subcategory = 'dto-patterns';
+    supportedLanguages = ['typescript', 'javascript', 'python'];
+    async detect(context) {
+        if (!this.supportsLanguage(context.language)) {
+            return this.createEmptyResult();
+        }
+        const analysis = analyzeDTOPatterns(context.content, context.file);
+        if (analysis.patterns.length === 0 && analysis.violations.length === 0) {
+            return this.createEmptyResult();
+        }
+        const confidence = analysis.hasDTOs ? 0.9 : 0.7;
+        return this.createResult([], [], confidence, {
+            custom: {
+                patterns: analysis.patterns,
+                violations: analysis.violations,
+                hasDTOs: analysis.hasDTOs,
+                dtoCount: analysis.dtoCount,
+            },
+        });
+    }
+    generateQuickFix(_violation) {
+        return null;
+    }
+}
+export function createDTOPatternsDetector() {
+    return new DTOPatternsDetector();
+}
+//# sourceMappingURL=dto-patterns.js.map