insa-check-core 0.1.0

package/dist/code/php/index.js

@@ -0,0 +1,316 @@
+import * as phpParserNs from "php-parser";
+const ns = phpParserNs;
+const EngineCtor = (ns.Engine ?? ns.default?.Engine ?? ns.default);
+/** Parses one file. Syntax errors are returned, not thrown, so one bad file never stops a scan. */
+export function parsePhp(source, filePath) {
+    try {
+        const engine = new EngineCtor({ parser: { extractDoc: false, suppressErrors: true }, ast: { withPositions: true } });
+        return { ast: engine.parseCode(source, filePath) };
+    }
+    catch (err) {
+        return { error: err.message ?? "parse error" };
+    }
+}
+export function isPhpNode(x) {
+    return typeof x === "object" && x !== null && typeof x.kind === "string";
+}
+export function* walkPhp(root, skip) {
+    const stack = [root];
+    while (stack.length) {
+        const node = stack.pop();
+        yield node;
+        const kids = [];
+        for (const [k, v] of Object.entries(node)) {
+            if (k === "loc" || k === "leadingComments" || k === "trailingComments")
+                continue;
+            if (isPhpNode(v))
+                kids.push(v);
+            else if (Array.isArray(v))
+                for (const x of v)
+                    if (isPhpNode(x))
+                        kids.push(x);
+        }
+        for (let i = kids.length - 1; i >= 0; i--)
+            if (!skip?.(kids[i]))
+                stack.push(kids[i]);
+    }
+}
+const FUNCTION_KINDS = new Set(["function", "method", "closure", "arrowfunc"]);
+export const isPhpFunction = (n) => FUNCTION_KINDS.has(n.kind);
+const nameOf = (x) => typeof x === "string" ? x : isPhpNode(x) && typeof x["name"] === "string" ? x["name"] : undefined;
+/**
+ * Dotted form of an expression: "$var", "$obj->prop", "Class::member", "$_GET[id]", "func()".
+ * Namespaces lose their leading backslash.
+ */
+export function phpDotted(node) {
+    if (!isPhpNode(node))
+        return undefined;
+    switch (node.kind) {
+        case "variable":
+            return typeof node["name"] === "string" ? `$${node["name"]}` : undefined;
+        case "name":
+        case "identifier":
+            return node["name"].replace(/^\\/, "");
+        case "selfreference":
+            return "self";
+        case "staticreference":
+            return "static";
+        case "parentreference":
+            return "parent";
+        case "propertylookup":
+        case "nullsafepropertylookup": {
+            const base = phpDotted(node["what"]);
+            const prop = nameOf(node["offset"]);
+            return base && prop ? `${base}->${prop}` : undefined;
+        }
+        case "staticlookup": {
+            const base = phpDotted(node["what"]);
+            const member = nameOf(node["offset"]);
+            return base && member ? `${base}::${member}` : undefined;
+        }
+        case "offsetlookup": {
+            const base = phpDotted(node["what"]);
+            if (!base)
+                return undefined;
+            const key = phpString(node["offset"]);
+            return key !== undefined ? `${base}[${key}]` : `${base}[]`;
+        }
+        case "call": {
+            const base = phpDotted(node["what"]);
+            return base ? `${base}()` : undefined;
+        }
+        default:
+            return undefined;
+    }
+}
+/** Value of a plain string literal (no interpolation). */
+export function phpString(node) {
+    if (!isPhpNode(node))
+        return undefined;
+    if (node.kind === "string")
+        return node["value"];
+    if (node.kind === "encapsed") {
+        const parts = node["value"] ?? [];
+        if (parts.every((p) => p["expression"]?.kind === "string"))
+            return parts.map((p) => p["expression"]["value"]).join("");
+    }
+    return undefined;
+}
+export function isPhpLiteral(node) {
+    return isPhpNode(node) && (phpString(node) !== undefined || ["number", "boolean", "nullkeyword"].includes(node.kind));
+}
+/** Interpolated string ("... $x ...") or "." concatenation involving a string. */
+export function isPhpDynamicString(node) {
+    if (!isPhpNode(node))
+        return false;
+    if (node.kind === "encapsed")
+        return phpString(node) === undefined;
+    if (node.kind === "bin" && node["type"] === ".") {
+        const stringy = (x) => phpString(x) !== undefined || isPhpDynamicString(x);
+        const l = node["left"];
+        const r = node["right"];
+        return (stringy(l) || stringy(r)) && !(phpString(l) !== undefined && phpString(r) !== undefined);
+    }
+    return false;
+}
+export function phpArgs(call) {
+    return (call["arguments"] ?? []).filter(isPhpNode);
+}
+/** Variable, property and array-key names used in an expression (without "$"). */
+export function phpIdentifiers(node) {
+    const out = [];
+    for (const n of walkPhp(node)) {
+        if (n.kind === "variable" && typeof n["name"] === "string")
+            out.push(n["name"]);
+        else if (n.kind === "propertylookup") {
+            const p = nameOf(n["offset"]);
+            if (p)
+                out.push(p);
+        }
+        else if (n.kind === "offsetlookup") {
+            const k = phpString(n["offset"]);
+            if (k)
+                out.push(k);
+        }
+    }
+    return out;
+}
+const SUPERGLOBAL = /^_(GET|POST|REQUEST|COOKIE|FILES)$/;
+/** Laravel request accessors on a variable named $request / request(). */
+const REQUEST_OBJECT = /^(?:\$request|request\(\))->/;
+/** Request members that are not client data. */
+const NOT_DATA = /->(user|session|route|validate|validated|isMethod|method|wantsJson|expectsJson|ajax|bearerToken|ip|fullUrl|url)(\(\))?$/;
+const COMPARISON = new Set(["==", "===", "!=", "!==", "<", "<=", ">", ">=", "<>", "<=>", "instanceof"]);
+/** Nodes whose value can flow into the result (comparisons and ternary tests only select, they carry no data). */
+function* valueNodes(root) {
+    const stack = [root];
+    while (stack.length) {
+        const n = stack.pop();
+        if (n.kind === "bin" && COMPARISON.has(n["type"]))
+            continue;
+        if (n.kind === "unary" && n["type"] === "!")
+            continue;
+        if (["isset", "empty"].includes(n.kind))
+            continue;
+        yield n;
+        for (const [k, v] of Object.entries(n)) {
+            if (k === "loc" || (n.kind === "retif" && k === "test"))
+                continue;
+            if (isPhpNode(v))
+                stack.push(v);
+            else if (Array.isArray(v))
+                for (const x of v)
+                    if (isPhpNode(x))
+                        stack.push(x);
+        }
+    }
+}
+export class PhpModule {
+    path;
+    tree;
+    lines;
+    /** Alias -> fully qualified class name, from `use` statements. */
+    uses = new Map();
+    scopes = new WeakMap();
+    constructor(path, tree, source) {
+        this.path = path;
+        this.tree = tree;
+        this.lines = source.split(/\r?\n/);
+        for (const n of walkPhp(tree)) {
+            if (n.kind !== "useitem")
+                continue;
+            const name = n["name"].replace(/^\\/, "");
+            const alias = nameOf(n["alias"]) ?? name.split("\\").pop();
+            this.uses.set(alias, name);
+        }
+    }
+    /** Resolves the class part of "Class::member" / "Class" through `use` statements. */
+    qualify(name) {
+        if (!name || name.startsWith("$"))
+            return name;
+        const m = /^([A-Za-z_][\w\\]*)(.*)$/.exec(name);
+        if (!m)
+            return name;
+        const resolved = this.uses.get(m[1]);
+        return resolved ? `${resolved}${m[2]}` : name;
+    }
+    line(n) {
+        return n ? (this.lines[n - 1] ?? "") : "";
+    }
+    lineOf(node) {
+        return node.loc?.start.line ?? 1;
+    }
+    text(node) {
+        const loc = node.loc;
+        if (!loc)
+            return "";
+        return this.lines.join("\n").slice(loc.start.offset, loc.end.offset);
+    }
+    /** True when the expression contains client-controlled data, given the scope's tainted names. */
+    isRequestDerived(node, scope) {
+        if (!isPhpNode(node))
+            return false;
+        for (const n of valueNodes(node)) {
+            if (n.kind === "variable" && typeof n["name"] === "string") {
+                if (SUPERGLOBAL.test(n["name"]) || scope?.tainted.has(n["name"]))
+                    return true;
+            }
+            else if (n.kind === "propertylookup" || n.kind === "call") {
+                const d = phpDotted(n) ?? "";
+                if (REQUEST_OBJECT.test(d) && !NOT_DATA.test(d))
+                    return true;
+                if (/^(Input|Request)::(get|input|all|query|post)\(\)$/.test(d))
+                    return true;
+            }
+        }
+        return false;
+    }
+    /** Lightweight intra-procedural taint: request data, controller route parameters, and names assigned from them. */
+    scope(fnOrTop, inController = false) {
+        // Plain PHP scripts run at the top level, so the file itself is a scope too.
+        const fn = fnOrTop ?? this.tree;
+        let scope = this.scopes.get(fn);
+        if (scope)
+            return scope;
+        scope = { tainted: new Set(), dynamicStrings: new Set(), calls: new Set() };
+        this.scopes.set(fn, scope);
+        if (inController) {
+            // Untyped or scalar-typed parameters of controller actions come from the route.
+            for (const p of fn["arguments"] ?? []) {
+                const type = phpDotted(p["type"]);
+                const name = nameOf(p["name"]);
+                if (name && name !== "request" && (!type || /^(string|int|mixed|float)$/i.test(type)))
+                    scope.tainted.add(name);
+            }
+        }
+        const body = fn === this.tree ? fn : fn["body"];
+        const nodes = isPhpNode(body) ? [...walkPhp(body, (x) => isPhpFunction(x) || x.kind === "class")] : [];
+        for (let pass = 0; pass < 2; pass++) {
+            for (const n of nodes) {
+                if (n.kind !== "assign")
+                    continue;
+                const left = n["left"];
+                const name = left.kind === "variable" && typeof left["name"] === "string" ? left["name"] : undefined;
+                if (!name)
+                    continue;
+                if (this.isRequestDerived(n["right"], scope))
+                    scope.tainted.add(name);
+                if (isPhpDynamicString(n["right"]))
+                    scope.dynamicStrings.add(name);
+            }
+        }
+        for (const n of nodes)
+            if (n.kind === "call")
+                scope.calls.add(this.qualify(phpDotted(n["what"])) ?? "");
+        return scope;
+    }
+}
+export class PhpIndex {
+    modules;
+    parseErrors;
+    callSites;
+    constructor(modules, parseErrors) {
+        this.modules = modules;
+        this.parseErrors = parseErrors;
+    }
+    /** Every call and `new` expression with its resolved name and enclosing function. Computed once. */
+    calls() {
+        if (this.callSites)
+            return this.callSites;
+        const sites = [];
+        for (const module of this.modules) {
+            const stack = [[module.tree, undefined, false]];
+            while (stack.length) {
+                const [n, fn, controller] = stack.pop();
+                if (n.kind === "call" || n.kind === "new") {
+                    const name = module.qualify(phpDotted(n["what"]));
+                    const method = name?.split(/->|::|\\/).pop();
+                    // Make sure the scope knows whether it is a controller action before any rule asks for it.
+                    if (fn)
+                        module.scope(fn, controller);
+                    sites.push({ module, node: n, name, method, fn, isNew: n.kind === "new" });
+                }
+                const inController = n.kind === "class" ? /Controller$/.test(nameOf(n["name"]) ?? "") : controller;
+                const inner = isPhpFunction(n) ? n : fn;
+                for (const [k, v] of Object.entries(n)) {
+                    if (k === "loc")
+                        continue;
+                    if (isPhpNode(v))
+                        stack.push([v, inner, inController]);
+                    else if (Array.isArray(v))
+                        for (const x of v)
+                            if (isPhpNode(x))
+                                stack.push([x, inner, inController]);
+                }
+            }
+        }
+        sites.sort((a, b) => a.module.path.localeCompare(b.module.path) || a.module.lineOf(a.node) - b.module.lineOf(b.node));
+        this.callSites = sites;
+        return sites;
+    }
+    /** Whether any file contains the given text (for coarse "is this used at all" questions). */
+    mentions(pattern) {
+        return this.modules.some((m) => m.lines.some((l) => pattern.test(l)));
+    }
+}
+//# sourceMappingURL=index.js.map

package/dist/code/php/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/code/php/index.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,WAAW,MAAM,YAAY,CAAC;AAgB1C,MAAM,EAAE,GAAG,WAAuF,CAAC;AACnG,MAAM,UAAU,GAAG,CAAC,EAAE,CAAC,MAAM,IAAK,EAAE,CAAC,OAAgC,EAAE,MAAM,IAAI,EAAE,CAAC,OAAO,CAAkC,CAAC;AAO9H,mGAAmG;AACnG,MAAM,UAAU,QAAQ,CAAC,MAAc,EAAE,QAAgB;IACvD,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,UAAU,CAAC,EAAE,MAAM,EAAE,EAAE,UAAU,EAAE,KAAK,EAAE,cAAc,EAAE,IAAI,EAAE,EAAE,GAAG,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC;QACrH,OAAO,EAAE,GAAG,EAAE,MAAM,CAAC,SAAS,CAAC,MAAM,EAAE,QAAQ,CAAC,EAAE,CAAC;IACrD,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,EAAE,KAAK,EAAG,GAAa,CAAC,OAAO,IAAI,aAAa,EAAE,CAAC;IAC5D,CAAC;AACH,CAAC;AAED,MAAM,UAAU,SAAS,CAAC,CAAU;IAClC,OAAO,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,IAAI,IAAI,OAAQ,CAAa,CAAC,IAAI,KAAK,QAAQ,CAAC;AACxF,CAAC;AAED,MAAM,SAAS,CAAC,CAAC,OAAO,CAAC,IAAa,EAAE,IAA8B;IACpE,MAAM,KAAK,GAAG,CAAC,IAAI,CAAC,CAAC;IACrB,OAAO,KAAK,CAAC,MAAM,EAAE,CAAC;QACpB,MAAM,IAAI,GAAG,KAAK,CAAC,GAAG,EAAG,CAAC;QAC1B,MAAM,IAAI,CAAC;QACX,MAAM,IAAI,GAAc,EAAE,CAAC;QAC3B,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;YAC1C,IAAI,CAAC,KAAK,KAAK,IAAI,CAAC,KAAK,iBAAiB,IAAI,CAAC,KAAK,kBAAkB;gBAAE,SAAS;YACjF,IAAI,SAAS,CAAC,CAAC,CAAC;gBAAE,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;iBAC1B,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;gBAAE,KAAK,MAAM,CAAC,IAAI,CAAC;oBAAE,IAAI,SAAS,CAAC,CAAC,CAAC;wBAAE,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAC/E,CAAC;QACD,KAAK,IAAI,CAAC,GAAG,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE;YAAE,IAAI,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,CAAC,CAAE,CAAC;gBAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAE,CAAC,CAAC;IACzF,CAAC;AACH,CAAC;AAED,MAAM,cAAc,GAAG,IAAI,GAAG,CAAC,CAAC,UAAU,EAAE,QAAQ,EAAE,SAAS,EAAE,WAAW,CAAC,CAAC,CAAC;AAC/E,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC,CAAU,EAAE,EAAE,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;AAExE,MAAM,MAAM,GAAG,CAAC,CAAU,EAAsB,EAAE,CAChD,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,OAAO,CAAC,CAAC,MAAM,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAE,CAAC,CAAC,MAAM,CAAY,CAAC,CAAC,CAAC,SAAS,CAAC;AAEhH;;;GAGG;AACH,MAAM,UAAU,SAAS,CAAC,IAAa;IACrC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;QAAE,OAAO,SAAS,CAAC;IACvC,QAAQ,IAAI,CAAC,IAAI,EAAE,CAAC;QAClB,KAAK,UAAU;YACb,OAAO,OAAO,IAAI,CAAC,MAAM,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;QAC3E,KAAK,MAAM,CAAC;QACZ,KAAK,YAAY;YACf,OAAQ,IAAI,CAAC,MAAM,CAAY,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;QACrD,KAAK,eAAe;YAClB,OAAO,MAAM,CAAC;QAChB,KAAK,iBAAiB;YACpB,OAAO,QAAQ,CAAC;QAClB,KAAK,iBAAiB;YACpB,OAAO,QAAQ,CAAC;QAClB,KAAK,gBAAgB,CAAC;QACtB,KAAK,wBAAwB,EAAE,CAAC;YAC9B,MAAM,IAAI,GAAG,SAAS,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC;YACrC,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC;YACpC,OAAO,IAAI,IAAI,IAAI,CAAC,CAAC,CAAC,GAAG,IAAI,KAAK,IAAI,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;QACvD,CAAC;QACD,KAAK,cAAc,EAAE,CAAC;YACpB,MAAM,IAAI,GAAG,SAAS,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC;YACrC,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC;YACtC,OAAO,IAAI,IAAI,MAAM,CAAC,CAAC,CAAC,GAAG,IAAI,KAAK,MAAM,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;QAC3D,CAAC;QACD,KAAK,cAAc,EAAE,CAAC;YACpB,MAAM,IAAI,GAAG,SAAS,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC;YACrC,IAAI,CAAC,IAAI;gBAAE,OAAO,SAAS,CAAC;YAC5B,MAAM,GAAG,GAAG,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC;YACtC,OAAO,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,GAAG,IAAI,IAAI,GAAG,GAAG,CAAC,CAAC,CAAC,GAAG,IAAI,IAAI,CAAC;QAC7D,CAAC;QACD,KAAK,MAAM,EAAE,CAAC;YACZ,MAAM,IAAI,GAAG,SAAS,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC;YACrC,OAAO,IAAI,CAAC,CAAC,CAAC,GAAG,IAAI,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;QACxC,CAAC;QACD;YACE,OAAO,SAAS,CAAC;IACrB,CAAC;AACH,CAAC;AAED,0DAA0D;AAC1D,MAAM,UAAU,SAAS,CAAC,IAAa;IACrC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;QAAE,OAAO,SAAS,CAAC;IACvC,IAAI,IAAI,CAAC,IAAI,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC,OAAO,CAAW,CAAC;IAC3D,IAAI,IAAI,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;QAC7B,MAAM,KAAK,GAAI,IAAI,CAAC,OAAO,CAAe,IAAI,EAAE,CAAC;QACjD,IAAI,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAE,CAAC,CAAC,YAAY,CAAa,EAAE,IAAI,KAAK,QAAQ,CAAC;YAAE,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAE,CAAC,CAAC,YAAY,CAAa,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACnJ,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,IAAa;IACxC,OAAO,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,SAAS,IAAI,CAAC,QAAQ,EAAE,SAAS,EAAE,aAAa,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;AACxH,CAAC;AAED,kFAAkF;AAClF,MAAM,UAAU,kBAAkB,CAAC,IAAa;IAC9C,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;QAAE,OAAO,KAAK,CAAC;IACnC,IAAI,IAAI,CAAC,IAAI,KAAK,UAAU;QAAE,OAAO,SAAS,CAAC,IAAI,CAAC,KAAK,SAAS,CAAC;IACnE,IAAI,IAAI,CAAC,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,MAAM,CAAC,KAAK,GAAG,EAAE,CAAC;QAChD,MAAM,OAAO,GAAG,CAAC,CAAU,EAAE,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,SAAS,IAAI,kBAAkB,CAAC,CAAC,CAAC,CAAC;QACpF,MAAM,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC;QACvB,MAAM,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,CAAC;QACxB,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,SAAS,IAAI,SAAS,CAAC,CAAC,CAAC,KAAK,SAAS,CAAC,CAAC;IACnG,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,UAAU,OAAO,CAAC,IAAa;IACnC,OAAO,CAAE,IAAI,CAAC,WAAW,CAAe,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;AACpE,CAAC;AAED,kFAAkF;AAClF,MAAM,UAAU,cAAc,CAAC,IAAa;IAC1C,MAAM,GAAG,GAAa,EAAE,CAAC;IACzB,KAAK,MAAM,CAAC,IAAI,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;QAC9B,IAAI,CAAC,CAAC,IAAI,KAAK,UAAU,IAAI,OAAO,CAAC,CAAC,MAAM,CAAC,KAAK,QAAQ;YAAE,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC;aAC3E,IAAI,CAAC,CAAC,IAAI,KAAK,gBAAgB,EAAE,CAAC;YACrC,MAAM,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC;YAC9B,IAAI,CAAC;gBAAE,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACrB,CAAC;aAAM,IAAI,CAAC,CAAC,IAAI,KAAK,cAAc,EAAE,CAAC;YACrC,MAAM,CAAC,GAAG,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC;YACjC,IAAI,CAAC;gBAAE,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACrB,CAAC;IACH,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,MAAM,WAAW,GAAG,oCAAoC,CAAC;AACzD,0EAA0E;AAC1E,MAAM,cAAc,GAAG,8BAA8B,CAAC;AACtD,gDAAgD;AAChD,MAAM,QAAQ,GAAG,yHAAyH,CAAC;AAE3I,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,YAAY,CAAC,CAAC,CAAC;AAExG,kHAAkH;AAClH,QAAQ,CAAC,CAAC,UAAU,CAAC,IAAa;IAChC,MAAM,KAAK,GAAG,CAAC,IAAI,CAAC,CAAC;IACrB,OAAO,KAAK,CAAC,MAAM,EAAE,CAAC;QACpB,MAAM,CAAC,GAAG,KAAK,CAAC,GAAG,EAAG,CAAC;QACvB,IAAI,CAAC,CAAC,IAAI,KAAK,KAAK,IAAI,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAW,CAAC;YAAE,SAAS;QACtE,IAAI,CAAC,CAAC,IAAI,KAAK,OAAO,IAAI,CAAC,CAAC,MAAM,CAAC,KAAK,GAAG;YAAE,SAAS;QACtD,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC;YAAE,SAAS;QAClD,MAAM,CAAC,CAAC;QACR,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;YACvC,IAAI,CAAC,KAAK,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,KAAK,OAAO,IAAI,CAAC,KAAK,MAAM,CAAC;gBAAE,SAAS;YAClE,IAAI,SAAS,CAAC,CAAC,CAAC;gBAAE,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;iBAC3B,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;gBAAE,KAAK,MAAM,CAAC,IAAI,CAAC;oBAAE,IAAI,SAAS,CAAC,CAAC,CAAC;wBAAE,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAChF,CAAC;IACH,CAAC;AACH,CAAC;AAmBD,MAAM,OAAO,SAAS;IAOT,IAAI;IACJ,IAAI;IAPN,KAAK,CAAW;IACzB,kEAAkE;IACzD,IAAI,GAAG,IAAI,GAAG,EAAkB,CAAC;IACzB,MAAM,GAAG,IAAI,OAAO,EAAqB,CAAC;IAE3D,YACW,IAAY,EACZ,IAAa,EACtB,MAAc;oBAFL,IAAI;oBACJ,IAAI;QAGb,IAAI,CAAC,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QACnC,KAAK,MAAM,CAAC,IAAI,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;YAC9B,IAAI,CAAC,CAAC,IAAI,KAAK,SAAS;gBAAE,SAAS;YACnC,MAAM,IAAI,GAAI,CAAC,CAAC,MAAM,CAAY,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;YACtD,MAAM,KAAK,GAAG,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,GAAG,EAAG,CAAC;YAC5D,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;QAC7B,CAAC;IACH,CAAC;IAED,qFAAqF;IACrF,OAAO,CAAC,IAAwB;QAC9B,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;YAAE,OAAO,IAAI,CAAC;QAC/C,MAAM,CAAC,GAAG,0BAA0B,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAChD,IAAI,CAAC,CAAC;YAAE,OAAO,IAAI,CAAC;QACpB,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAE,CAAC,CAAC;QACtC,OAAO,QAAQ,CAAC,CAAC,CAAC,GAAG,QAAQ,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;IAChD,CAAC;IAED,IAAI,CAAC,CAAqB;QACxB,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IAC5C,CAAC;IAED,MAAM,CAAC,IAAa;QAClB,OAAO,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,IAAI,CAAC,CAAC;IACnC,CAAC;IAED,IAAI,CAAC,IAAa;QAChB,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC;QACrB,IAAI,CAAC,GAAG;YAAE,OAAO,EAAE,CAAC;QACpB,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,EAAE,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IACvE,CAAC;IAED,iGAAiG;IACjG,gBAAgB,CAAC,IAAa,EAAE,KAAgB;QAC9C,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;YAAE,OAAO,KAAK,CAAC;QACnC,KAAK,MAAM,CAAC,IAAI,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;YACjC,IAAI,CAAC,CAAC,IAAI,KAAK,UAAU,IAAI,OAAO,CAAC,CAAC,MAAM,CAAC,KAAK,QAAQ,EAAE,CAAC;gBAC3D,IAAI,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,KAAK,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;oBAAE,OAAO,IAAI,CAAC;YAChF,CAAC;iBAAM,IAAI,CAAC,CAAC,IAAI,KAAK,gBAAgB,IAAI,CAAC,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;gBAC5D,MAAM,CAAC,GAAG,SAAS,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;gBAC7B,IAAI,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC;oBAAE,OAAO,IAAI,CAAC;gBAC7D,IAAI,mDAAmD,CAAC,IAAI,CAAC,CAAC,CAAC;oBAAE,OAAO,IAAI,CAAC;YAC/E,CAAC;QACH,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IAED,mHAAmH;IACnH,KAAK,CAAC,OAA4B,EAAE,YAAY,GAAG,KAAK;QACtD,6EAA6E;QAC7E,MAAM,EAAE,GAAG,OAAO,IAAI,IAAI,CAAC,IAAI,CAAC;QAChC,IAAI,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAChC,IAAI,KAAK;YAAE,OAAO,KAAK,CAAC;QACxB,KAAK,GAAG,EAAE,OAAO,EAAE,IAAI,GAAG,EAAE,EAAE,cAAc,EAAE,IAAI,GAAG,EAAE,EAAE,KAAK,EAAE,IAAI,GAAG,EAAE,EAAE,CAAC;QAC5E,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC;QAE3B,IAAI,YAAY,EAAE,CAAC;YACjB,gFAAgF;YAChF,KAAK,MAAM,CAAC,IAAK,EAAE,CAAC,WAAW,CAAe,IAAI,EAAE,EAAE,CAAC;gBACrD,MAAM,IAAI,GAAG,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC;gBAClC,MAAM,IAAI,GAAG,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC;gBAC/B,IAAI,IAAI,IAAI,IAAI,KAAK,SAAS,IAAI,CAAC,CAAC,IAAI,IAAI,6BAA6B,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;oBAAE,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YACjH,CAAC;QACH,CAAC;QACD,MAAM,IAAI,GAAG,EAAE,KAAK,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,MAAM,CAAC,CAAC;QAChD,MAAM,KAAK,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,KAAK,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QACvG,KAAK,IAAI,IAAI,GAAG,CAAC,EAAE,IAAI,GAAG,CAAC,EAAE,IAAI,EAAE,EAAE,CAAC;YACpC,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;gBACtB,IAAI,CAAC,CAAC,IAAI,KAAK,QAAQ;oBAAE,SAAS;gBAClC,MAAM,IAAI,GAAG,CAAC,CAAC,MAAM,CAAY,CAAC;gBAClC,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,KAAK,UAAU,IAAI,OAAO,IAAI,CAAC,MAAM,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;gBACrG,IAAI,CAAC,IAAI;oBAAE,SAAS;gBACpB,IAAI,IAAI,CAAC,gBAAgB,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,KAAK,CAAC;oBAAE,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;gBACtE,IAAI,kBAAkB,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;oBAAE,KAAK,CAAC,cAAc,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YACrE,CAAC;QACH,CAAC;QACD,KAAK,MAAM,CAAC,IAAI,KAAK;YAAE,IAAI,CAAC,CAAC,IAAI,KAAK,MAAM;gBAAE,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;QACxG,OAAO,KAAK,CAAC;IACf,CAAC;CACF;AAED,MAAM,OAAO,QAAQ;IAIR,OAAO;IACP,WAAW;IAJd,SAAS,CAAiB;IAElC,YACW,OAAoB,EACpB,WAA8C;uBAD9C,OAAO;2BACP,WAAW;IACnB,CAAC;IAEJ,oGAAoG;IACpG,KAAK;QACH,IAAI,IAAI,CAAC,SAAS;YAAE,OAAO,IAAI,CAAC,SAAS,CAAC;QAC1C,MAAM,KAAK,GAAkB,EAAE,CAAC;QAChC,KAAK,MAAM,MAAM,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YAClC,MAAM,KAAK,GAA8C,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE,SAAS,EAAE,KAAK,CAAC,CAAC,CAAC;YAC3F,OAAO,KAAK,CAAC,MAAM,EAAE,CAAC;gBACpB,MAAM,CAAC,CAAC,EAAE,EAAE,EAAE,UAAU,CAAC,GAAG,KAAK,CAAC,GAAG,EAAG,CAAC;gBACzC,IAAI,CAAC,CAAC,IAAI,KAAK,MAAM,IAAI,CAAC,CAAC,IAAI,KAAK,KAAK,EAAE,CAAC;oBAC1C,MAAM,IAAI,GAAG,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;oBAClD,MAAM,MAAM,GAAG,IAAI,EAAE,KAAK,CAAC,UAAU,CAAC,CAAC,GAAG,EAAE,CAAC;oBAC7C,2FAA2F;oBAC3F,IAAI,EAAE;wBAAE,MAAM,CAAC,KAAK,CAAC,EAAE,EAAE,UAAU,CAAC,CAAC;oBACrC,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC,IAAI,KAAK,KAAK,EAAE,CAAC,CAAC;gBAC7E,CAAC;gBACD,MAAM,YAAY,GAAG,CAAC,CAAC,IAAI,KAAK,OAAO,CAAC,CAAC,CAAC,aAAa,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC;gBACnG,MAAM,KAAK,GAAG,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;gBACxC,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;oBACvC,IAAI,CAAC,KAAK,KAAK;wBAAE,SAAS;oBAC1B,IAAI,SAAS,CAAC,CAAC,CAAC;wBAAE,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,YAAY,CAAC,CAAC,CAAC;yBAClD,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;wBAAE,KAAK,MAAM,CAAC,IAAI,CAAC;4BAAE,IAAI,SAAS,CAAC,CAAC,CAAC;gCAAE,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,YAAY,CAAC,CAAC,CAAC;gBACvG,CAAC;YACH,CAAC;QACH,CAAC;QACD,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;QACtH,IAAI,CAAC,SAAS,GAAG,KAAK,CAAC;QACvB,OAAO,KAAK,CAAC;IACf,CAAC;IAED,6FAA6F;IAC7F,QAAQ,CAAC,OAAe;QACtB,OAAO,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACxE,CAAC;CACF"}

package/dist/code/project.d.ts

@@ -0,0 +1,13 @@
+import type { SourceFile } from "./types.js";
+export interface DiscoverOptions {
+    maxFiles: number;
+    maxFileBytes: number;
+}
+export interface Discovery {
+    files: SourceFile[];
+    skipped: number;
+    truncated: boolean;
+}
+/** Walks the project without following symlinks. */
+export declare function discoverFiles(root: string, opts: DiscoverOptions): Promise<Discovery>;
+//# sourceMappingURL=project.d.ts.map

package/dist/code/project.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"project.d.ts","sourceRoot":"","sources":["../../src/code/project.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AA2B7C,MAAM,WAAW,eAAe;IAC9B,QAAQ,EAAE,MAAM,CAAC;IACjB,YAAY,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,WAAW,SAAS;IACxB,KAAK,EAAE,UAAU,EAAE,CAAC;IACpB,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,OAAO,CAAC;CACpB;AAED,oDAAoD;AACpD,wBAAsB,aAAa,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,eAAe,GAAG,OAAO,CAAC,SAAS,CAAC,CAyC3F"}

package/dist/code/project.js

@@ -0,0 +1,69 @@
+import { lstat, readdir } from "node:fs/promises";
+import path from "node:path";
+/** Never descended into: dependencies, VCS, caches, build output, generated code. */
+const SKIP_DIRS = new Set([
+    ".git", ".hg", ".svn", "node_modules", "bower_components", "vendor",
+    "venv", ".venv", "env", ".env", "virtualenv", "site-packages", "__pycache__",
+    ".tox", ".nox", ".mypy_cache", ".pytest_cache", ".ruff_cache", ".idea", ".vscode",
+    "dist", "build", "staticfiles", "htmlcov", "migrations",
+    ".next", ".nuxt", ".turbo", ".cache", "coverage", "out",
+]);
+/** Test code is excluded: findings there are not deployed and would be noise. */
+const TEST_FILE = new RegExp([
+    String.raw `(^|/)(tests?|testing|__tests__|__mocks__|e2e|cypress|spec)/`,
+    String.raw `(^|/)src/test/`,
+    String.raw `(^|/)(test_[^/]*|[^/]*_tests?|tests|conftest)\.py$`,
+    String.raw `\.(test|spec)\.[cm]?[jt]sx?$`,
+    String.raw `Test\.php$`,
+    String.raw `Tests?\.(java|cs)$`,
+    String.raw `_(test|spec)\.(rb|go)$`,
+].join("|"));
+const INTERESTING = /\.(py|html|htm|txt|jinja2?|j2|toml|cfg|ini|json|php|js|mjs|cjs|jsx|ts|mts|cts|tsx|ejs|hbs|pug|java|cs|rb|go|erb|cshtml|csproj|gradle|kts)$|(^|\/)(Pipfile|manage\.py|artisan|pom\.xml|Gemfile|go\.mod)$/;
+/** Walks the project without following symlinks. */
+export async function discoverFiles(root, opts) {
+    const files = [];
+    let skipped = 0;
+    let truncated = false;
+    const queue = [""];
+    while (queue.length > 0) {
+        const rel = queue.shift();
+        let entries;
+        try {
+            entries = await readdir(path.join(root, rel), { withFileTypes: true });
+        }
+        catch {
+            continue;
+        }
+        entries.sort((a, b) => a.name.localeCompare(b.name));
+        for (const entry of entries) {
+            const childRel = rel ? `${rel}/${entry.name}` : entry.name;
+            if (entry.isSymbolicLink())
+                continue;
+            if (entry.isDirectory()) {
+                if (SKIP_DIRS.has(entry.name) || entry.name.endsWith(".egg-info"))
+                    continue;
+                queue.push(childRel);
+                continue;
+            }
+            if (!entry.isFile() || !INTERESTING.test(childRel))
+                continue;
+            if (TEST_FILE.test(childRel)) {
+                skipped++;
+                continue;
+            }
+            const { size } = await lstat(path.join(root, childRel));
+            if (size > opts.maxFileBytes) {
+                skipped++;
+                continue;
+            }
+            if (files.length >= opts.maxFiles) {
+                truncated = true;
+                skipped++;
+                continue;
+            }
+            files.push({ path: childRel, size });
+        }
+    }
+    return { files, skipped, truncated };
+}
+//# sourceMappingURL=project.js.map

package/dist/code/project.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"project.js","sourceRoot":"","sources":["../../src/code/project.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,kBAAkB,CAAC;AAClD,OAAO,IAAI,MAAM,WAAW,CAAC;AAG7B,qFAAqF;AACrF,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC;IACxB,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,cAAc,EAAE,kBAAkB,EAAE,QAAQ;IACnE,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,YAAY,EAAE,eAAe,EAAE,aAAa;IAC5E,MAAM,EAAE,MAAM,EAAE,aAAa,EAAE,eAAe,EAAE,aAAa,EAAE,OAAO,EAAE,SAAS;IACjF,MAAM,EAAE,OAAO,EAAE,aAAa,EAAE,SAAS,EAAE,YAAY;IACvD,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,UAAU,EAAE,KAAK;CACxD,CAAC,CAAC;AAEH,iFAAiF;AACjF,MAAM,SAAS,GAAG,IAAI,MAAM,CAC1B;IACE,MAAM,CAAC,GAAG,CAAA,6DAA6D;IACvE,MAAM,CAAC,GAAG,CAAA,gBAAgB;IAC1B,MAAM,CAAC,GAAG,CAAA,oDAAoD;IAC9D,MAAM,CAAC,GAAG,CAAA,8BAA8B;IACxC,MAAM,CAAC,GAAG,CAAA,YAAY;IACtB,MAAM,CAAC,GAAG,CAAA,oBAAoB;IAC9B,MAAM,CAAC,GAAG,CAAA,wBAAwB;CACnC,CAAC,IAAI,CAAC,GAAG,CAAC,CACZ,CAAC;AAEF,MAAM,WAAW,GACf,yMAAyM,CAAC;AAa5M,oDAAoD;AACpD,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,IAAY,EAAE,IAAqB;IACrE,MAAM,KAAK,GAAiB,EAAE,CAAC;IAC/B,IAAI,OAAO,GAAG,CAAC,CAAC;IAChB,IAAI,SAAS,GAAG,KAAK,CAAC;IACtB,MAAM,KAAK,GAAG,CAAC,EAAE,CAAC,CAAC;IACnB,OAAO,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACxB,MAAM,GAAG,GAAG,KAAK,CAAC,KAAK,EAAG,CAAC;QAC3B,IAAI,OAAO,CAAC;QACZ,IAAI,CAAC;YACH,OAAO,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,CAAC,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;QACzE,CAAC;QAAC,MAAM,CAAC;YACP,SAAS;QACX,CAAC;QACD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;QACrD,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;YAC5B,MAAM,QAAQ,GAAG,GAAG,CAAC,CAAC,CAAC,GAAG,GAAG,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC;YAC3D,IAAI,KAAK,CAAC,cAAc,EAAE;gBAAE,SAAS;YACrC,IAAI,KAAK,CAAC,WAAW,EAAE,EAAE,CAAC;gBACxB,IAAI,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC;oBAAE,SAAS;gBAC5E,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;gBACrB,SAAS;YACX,CAAC;YACD,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,QAAQ,CAAC;gBAAE,SAAS;YAC7D,IAAI,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;gBAC7B,OAAO,EAAE,CAAC;gBACV,SAAS;YACX,CAAC;YACD,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC,CAAC;YACxD,IAAI,IAAI,GAAG,IAAI,CAAC,YAAY,EAAE,CAAC;gBAC7B,OAAO,EAAE,CAAC;gBACV,SAAS;YACX,CAAC;YACD,IAAI,KAAK,CAAC,MAAM,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;gBAClC,SAAS,GAAG,IAAI,CAAC;gBACjB,OAAO,EAAE,CAAC;gBACV,SAAS;YACX,CAAC;YACD,KAAK,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;QACvC,CAAC;IACH,CAAC;IACD,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC;AACvC,CAAC"}

package/dist/code/python/ast.d.ts

@@ -0,0 +1,47 @@
+/**
+ * Python syntax trees come from CPython's own `ast` module (run as a subprocess),
+ * so parsing is exact for every Python version the interpreter supports.
+ * Rules are written in TypeScript against the JSON form of that tree.
+ */
+/** JSON form of an ast.AST node: `_t` = class name, `_l/_c/_el/_ec` = position (1-based lines, byte columns). */
+export interface PyNode {
+    _t: string;
+    _l?: number;
+    _c?: number;
+    _el?: number;
+    _ec?: number;
+    [field: string]: unknown;
+}
+export declare class PythonUnavailableError extends Error {
+    readonly code = "ENOPYTHON";
+    constructor(detail: string);
+}
+export declare function pythonExecutable(): string;
+export interface ParseResult {
+    modules: Map<string, PyNode>;
+    errors: {
+        file: string;
+        error: string;
+    }[];
+}
+/** Parses project files (relative paths) with the local Python interpreter. */
+export declare function parsePythonFiles(root: string, files: string[], timeoutMs?: number): Promise<ParseResult>;
+export declare function isNode(x: unknown): x is PyNode;
+export declare function childNodes(node: PyNode): PyNode[];
+/** Depth-first, source order. `skip` prunes a subtree (e.g. nested functions). */
+export declare function walk(root: PyNode, skip?: (n: PyNode) => boolean): Generator<PyNode>;
+export declare const isFunction: (n: PyNode) => boolean;
+/** "a.b.c" for Name/Attribute chains; calls and subscripts in the chain become "()" and "[]". */
+export declare function dotted(node: unknown): string | undefined;
+export declare function strConst(node: unknown): string | undefined;
+export declare function isConstant(node: unknown): boolean;
+export declare function callArgs(call: PyNode): PyNode[];
+export declare function kwarg(call: PyNode, name: string): PyNode | undefined;
+/** `**something` arguments of a call. */
+export declare function starKwargs(call: PyNode): PyNode[];
+export declare function isTrue(node: unknown): boolean;
+/** f-string with placeholders, "%" formatting, "+" concatenation with a string, or "...".format(...). */
+export declare function isDynamicString(node: unknown): boolean;
+/** Identifiers used in an expression (Name ids, attribute names, constant subscript keys). */
+export declare function identifiers(node: PyNode): string[];
+//# sourceMappingURL=ast.d.ts.map

package/dist/code/python/ast.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ast.d.ts","sourceRoot":"","sources":["../../../src/code/python/ast.ts"],"names":[],"mappings":"AAGA;;;;GAIG;AAEH,iHAAiH;AACjH,MAAM,WAAW,MAAM;IACrB,EAAE,EAAE,MAAM,CAAC;IACX,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC;CAC1B;AAmCD,qBAAa,sBAAuB,SAAQ,KAAK;IAC/C,QAAQ,CAAC,IAAI,eAAe;IAC5B,YAAY,MAAM,EAAE,MAAM,EAEzB;CACF;AAED,wBAAgB,gBAAgB,IAAI,MAAM,CAEzC;AAED,MAAM,WAAW,WAAW;IAC1B,OAAO,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC7B,MAAM,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,EAAE,CAAC;CAC3C;AAED,+EAA+E;AAC/E,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,SAAS,SAAU,GAAG,OAAO,CAAC,WAAW,CAAC,CAwBzG;AAID,wBAAgB,MAAM,CAAC,CAAC,EAAE,OAAO,GAAG,CAAC,IAAI,MAAM,CAE9C;AAED,wBAAgB,UAAU,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,EAAE,CAQjD;AAED,kFAAkF;AAClF,wBAAiB,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC,EAAE,MAAM,KAAK,OAAO,GAAG,SAAS,CAAC,MAAM,CAAC,CAQpF;AAGD,eAAO,MAAM,UAAU,MAAO,MAAM,YAA6B,CAAC;AAElE,iGAAiG;AACjG,wBAAgB,MAAM,CAAC,IAAI,EAAE,OAAO,GAAG,MAAM,GAAG,SAAS,CAoBxD;AAED,wBAAgB,QAAQ,CAAC,IAAI,EAAE,OAAO,GAAG,MAAM,GAAG,SAAS,CAI1D;AAED,wBAAgB,UAAU,CAAC,IAAI,EAAE,OAAO,GAAG,OAAO,CAEjD;AAED,wBAAgB,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,EAAE,CAE/C;AAED,wBAAgB,KAAK,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAGpE;AAED,yCAAyC;AACzC,wBAAgB,UAAU,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,EAAE,CAEjD;AAED,wBAAgB,MAAM,CAAC,IAAI,EAAE,OAAO,GAAG,OAAO,CAE7C;AAED,yGAAyG;AACzG,wBAAgB,eAAe,CAAC,IAAI,EAAE,OAAO,GAAG,OAAO,CAmBtD;AAED,8FAA8F;AAC9F,wBAAgB,WAAW,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,EAAE,CAWlD"}