jsxpression 0.1.0 → 0.1.2

package/lib/analyze/security/call-expressions.d.ts

@@ -0,0 +1,6 @@
+import type { Program } from "acorn.js";
+import type { Schema } from "../../schema.js";
+import { ValidationContext } from "../validation-context.js";
+import { AnalysisReport } from "../analysis-report.js";
+export declare function analyzeCallExpressions(ast: Program, _schema: Schema, validationContext: ValidationContext): AnalysisReport;
+//# sourceMappingURL=call-expressions.d.ts.map

package/lib/analyze/security/call-expressions.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"call-expressions.d.ts","sourceRoot":"","sources":["../../../src/analyze/security/call-expressions.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,OAAO,CAAC;AAErC,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,cAAc,CAAC;AAC3C,OAAO,EAAE,iBAAiB,EAAE,MAAM,uBAAuB,CAAC;AAC1D,OAAO,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AAGpD,wBAAgB,sBAAsB,CACpC,GAAG,EAAE,OAAO,EACZ,OAAO,EAAE,MAAM,EACf,iBAAiB,EAAE,iBAAiB,GACnC,cAAc,CA6BhB"}
+{"version":3,"file":"call-expressions.d.ts","sourceRoot":"","sources":["../../../src/analyze/security/call-expressions.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,UAAU,CAAC;AAExC,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,iBAAiB,CAAC;AAC9C,OAAO,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAC;AAC7D,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AAGvD,wBAAgB,sBAAsB,CACpC,GAAG,EAAE,OAAO,EACZ,OAAO,EAAE,MAAM,EACf,iBAAiB,EAAE,iBAAiB,GACnC,cAAc,CA6BhB"}

package/lib/analyze/security/call-expressions.js

@@ -0,0 +1,23 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.analyzeCallExpressions = analyzeCallExpressions;
+const traverse_js_1 = require("../../traverse.js");
+const analysis_report_js_1 = require("../analysis-report.js");
+const utils_js_1 = require("../utils.js");
+function analyzeCallExpressions(ast, _schema, validationContext) {
+    const analysisReport = new analysis_report_js_1.AnalysisReport();
+    (0, traverse_js_1.traverse)(ast, {
+        CallExpression(node) {
+            const { callee } = node;
+            if (callee.type !== "MemberExpression") {
+                analysisReport.addIssue("DIRECT_CALL_NOT_ALLOWED", "only member calls allowed", (0, utils_js_1.getNodeRange)(node), validationContext.getSnapshot());
+                return;
+            }
+            if (callee.property.type !== "Identifier" || callee.computed) {
+                analysisReport.addIssue("DYNAMIC_METHOD_NOT_ALLOWED", "only explicitly allowed methods are permitted", (0, utils_js_1.getNodeRange)(callee), validationContext.getSnapshot());
+            }
+        },
+    });
+    return analysisReport;
+}
+//# sourceMappingURL=call-expressions.js.map

package/lib/analyze/security/call-expressions.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"call-expressions.js","sourceRoot":"","sources":["../../../src/analyze/security/call-expressions.ts"],"names":[],"mappings":";;AAOA,wDAiCC;AAvCD,mDAA6C;AAG7C,8DAAuD;AACvD,0CAA2C;AAE3C,SAAgB,sBAAsB,CACpC,GAAY,EACZ,OAAe,EACf,iBAAoC;IAEpC,MAAM,cAAc,GAAG,IAAI,mCAAc,EAAE,CAAC;IAE5C,IAAA,sBAAQ,EAAC,GAAG,EAAE;QACZ,cAAc,CAAC,IAAI;YACjB,MAAM,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC;YAExB,IAAI,MAAM,CAAC,IAAI,KAAK,kBAAkB,EAAE,CAAC;gBACvC,cAAc,CAAC,QAAQ,CACrB,yBAAyB,EACzB,2BAA2B,EAC3B,IAAA,uBAAY,EAAC,IAAI,CAAC,EAClB,iBAAiB,CAAC,WAAW,EAAE,CAChC,CAAC;gBACF,OAAO;YACT,CAAC;YAED,IAAI,MAAM,CAAC,QAAQ,CAAC,IAAI,KAAK,YAAY,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;gBAC7D,cAAc,CAAC,QAAQ,CACrB,4BAA4B,EAC5B,+CAA+C,EAC/C,IAAA,uBAAY,EAAC,MAAM,CAAC,EACpB,iBAAiB,CAAC,WAAW,EAAE,CAChC,CAAC;YACJ,CAAC;QACH,CAAC;KACF,CAAC,CAAC;IAEH,OAAO,cAAc,CAAC;AACxB,CAAC"}

package/lib/analyze/security/declarations.d.ts

@@ -0,0 +1,6 @@
+import type { Program } from "acorn.js";
+import type { Schema } from "../../schema.js";
+import { ValidationContext } from "../validation-context.js";
+import { AnalysisReport } from "../analysis-report.js";
+export declare function analyzeDeclarations(ast: Program, _schema: Schema, validationContext: ValidationContext): AnalysisReport;
+//# sourceMappingURL=declarations.d.ts.map

package/lib/analyze/security/declarations.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"declarations.d.ts","sourceRoot":"","sources":["../../../src/analyze/security/declarations.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,OAAO,CAAC;AAErC,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,cAAc,CAAC;AAC3C,OAAO,EAAE,iBAAiB,EAAE,MAAM,uBAAuB,CAAC;AAC1D,OAAO,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AAGpD,wBAAgB,mBAAmB,CACjC,GAAG,EAAE,OAAO,EACZ,OAAO,EAAE,MAAM,EACf,iBAAiB,EAAE,iBAAiB,GACnC,cAAc,CAuDhB"}
+{"version":3,"file":"declarations.d.ts","sourceRoot":"","sources":["../../../src/analyze/security/declarations.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,UAAU,CAAC;AAExC,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,iBAAiB,CAAC;AAC9C,OAAO,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAC;AAC7D,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AAGvD,wBAAgB,mBAAmB,CACjC,GAAG,EAAE,OAAO,EACZ,OAAO,EAAE,MAAM,EACf,iBAAiB,EAAE,iBAAiB,GACnC,cAAc,CAuDhB"}

package/lib/analyze/security/declarations.js

@@ -0,0 +1,31 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.analyzeDeclarations = analyzeDeclarations;
+const traverse_js_1 = require("../../traverse.js");
+const analysis_report_js_1 = require("../analysis-report.js");
+const utils_js_1 = require("../utils.js");
+function analyzeDeclarations(ast, _schema, validationContext) {
+    const analysisReport = new analysis_report_js_1.AnalysisReport();
+    (0, traverse_js_1.traverse)(ast, {
+        ImportDeclaration(node) {
+            analysisReport.addIssue("IMPORT_NOT_ALLOWED", "import not allowed", (0, utils_js_1.getNodeRange)(node), validationContext.getSnapshot());
+        },
+        ExportNamedDeclaration(node) {
+            analysisReport.addIssue("EXPORT_NOT_ALLOWED", "export not allowed", (0, utils_js_1.getNodeRange)(node), validationContext.getSnapshot());
+        },
+        ExportDefaultDeclaration(node) {
+            analysisReport.addIssue("EXPORT_NOT_ALLOWED", "export not allowed", (0, utils_js_1.getNodeRange)(node), validationContext.getSnapshot());
+        },
+        FunctionDeclaration(node) {
+            analysisReport.addIssue("FUNCTION_NOT_ALLOWED", "function declarations not allowed", (0, utils_js_1.getNodeRange)(node), validationContext.getSnapshot());
+        },
+        ClassDeclaration(node) {
+            analysisReport.addIssue("CLASS_NOT_ALLOWED", "classes not allowed", (0, utils_js_1.getNodeRange)(node), validationContext.getSnapshot());
+        },
+        VariableDeclaration(node) {
+            analysisReport.addIssue("VARIABLE_NOT_ALLOWED", "variables not allowed", (0, utils_js_1.getNodeRange)(node), validationContext.getSnapshot());
+        },
+    });
+    return analysisReport;
+}
+//# sourceMappingURL=declarations.js.map

package/lib/analyze/security/declarations.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"declarations.js","sourceRoot":"","sources":["../../../src/analyze/security/declarations.ts"],"names":[],"mappings":";;AAOA,kDA2DC;AAjED,mDAA6C;AAG7C,8DAAuD;AACvD,0CAA2C;AAE3C,SAAgB,mBAAmB,CACjC,GAAY,EACZ,OAAe,EACf,iBAAoC;IAEpC,MAAM,cAAc,GAAG,IAAI,mCAAc,EAAE,CAAC;IAE5C,IAAA,sBAAQ,EAAC,GAAG,EAAE;QACZ,iBAAiB,CAAC,IAAI;YACpB,cAAc,CAAC,QAAQ,CACrB,oBAAoB,EACpB,oBAAoB,EACpB,IAAA,uBAAY,EAAC,IAAI,CAAC,EAClB,iBAAiB,CAAC,WAAW,EAAE,CAChC,CAAC;QACJ,CAAC;QACD,sBAAsB,CAAC,IAAI;YACzB,cAAc,CAAC,QAAQ,CACrB,oBAAoB,EACpB,oBAAoB,EACpB,IAAA,uBAAY,EAAC,IAAI,CAAC,EAClB,iBAAiB,CAAC,WAAW,EAAE,CAChC,CAAC;QACJ,CAAC;QACD,wBAAwB,CAAC,IAAI;YAC3B,cAAc,CAAC,QAAQ,CACrB,oBAAoB,EACpB,oBAAoB,EACpB,IAAA,uBAAY,EAAC,IAAI,CAAC,EAClB,iBAAiB,CAAC,WAAW,EAAE,CAChC,CAAC;QACJ,CAAC;QACD,mBAAmB,CAAC,IAAI;YACtB,cAAc,CAAC,QAAQ,CACrB,sBAAsB,EACtB,mCAAmC,EACnC,IAAA,uBAAY,EAAC,IAAI,CAAC,EAClB,iBAAiB,CAAC,WAAW,EAAE,CAChC,CAAC;QACJ,CAAC;QACD,gBAAgB,CAAC,IAAI;YACnB,cAAc,CAAC,QAAQ,CACrB,mBAAmB,EACnB,qBAAqB,EACrB,IAAA,uBAAY,EAAC,IAAI,CAAC,EAClB,iBAAiB,CAAC,WAAW,EAAE,CAChC,CAAC;QACJ,CAAC;QACD,mBAAmB,CAAC,IAAI;YACtB,cAAc,CAAC,QAAQ,CACrB,sBAAsB,EACtB,uBAAuB,EACvB,IAAA,uBAAY,EAAC,IAAI,CAAC,EAClB,iBAAiB,CAAC,WAAW,EAAE,CAChC,CAAC;QACJ,CAAC;KACF,CAAC,CAAC;IAEH,OAAO,cAAc,CAAC;AACxB,CAAC"}

package/lib/analyze/security/expressions.d.ts

@@ -0,0 +1,6 @@
+import type { Program } from "acorn.js";
+import type { Schema } from "../../schema.js";
+import { ValidationContext } from "../validation-context.js";
+import { AnalysisReport } from "../analysis-report.js";
+export declare function analyzeExpressions(ast: Program, _schema: Schema, validationContext: ValidationContext): AnalysisReport;
+//# sourceMappingURL=expressions.d.ts.map

package/lib/analyze/security/expressions.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"expressions.d.ts","sourceRoot":"","sources":["../../../src/analyze/security/expressions.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,OAAO,CAAC;AAErC,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,cAAc,CAAC;AAC3C,OAAO,EAAE,iBAAiB,EAAE,MAAM,uBAAuB,CAAC;AAC1D,OAAO,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AAGpD,wBAAgB,kBAAkB,CAChC,GAAG,EAAE,OAAO,EACZ,OAAO,EAAE,MAAM,EACf,iBAAiB,EAAE,iBAAiB,GACnC,cAAc,CAwFhB"}
+{"version":3,"file":"expressions.d.ts","sourceRoot":"","sources":["../../../src/analyze/security/expressions.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,UAAU,CAAC;AAExC,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,iBAAiB,CAAC;AAC9C,OAAO,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAC;AAC7D,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AAGvD,wBAAgB,kBAAkB,CAChC,GAAG,EAAE,OAAO,EACZ,OAAO,EAAE,MAAM,EACf,iBAAiB,EAAE,iBAAiB,GACnC,cAAc,CAwFhB"}

package/lib/analyze/security/expressions.js

@@ -0,0 +1,52 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.analyzeExpressions = analyzeExpressions;
+const traverse_js_1 = require("../../traverse.js");
+const analysis_report_js_1 = require("../analysis-report.js");
+const utils_js_1 = require("../utils.js");
+function analyzeExpressions(ast, _schema, validationContext) {
+    const analysisReport = new analysis_report_js_1.AnalysisReport();
+    (0, traverse_js_1.traverse)(ast, {
+        NewExpression(node) {
+            analysisReport.addIssue("NEW_NOT_ALLOWED", "new not allowed", (0, utils_js_1.getNodeRange)(node), validationContext.getSnapshot());
+        },
+        ThisExpression(node) {
+            analysisReport.addIssue("THIS_NOT_ALLOWED", "this not allowed", (0, utils_js_1.getNodeRange)(node), validationContext.getSnapshot());
+        },
+        WithStatement(node) {
+            analysisReport.addIssue("WITH_NOT_ALLOWED", "with not allowed", (0, utils_js_1.getNodeRange)(node), validationContext.getSnapshot());
+        },
+        AwaitExpression(node) {
+            analysisReport.addIssue("AWAIT_NOT_ALLOWED", "await not allowed", (0, utils_js_1.getNodeRange)(node), validationContext.getSnapshot());
+        },
+        YieldExpression(node) {
+            analysisReport.addIssue("YIELD_NOT_ALLOWED", "yield not allowed", (0, utils_js_1.getNodeRange)(node), validationContext.getSnapshot());
+        },
+        ArrowFunctionExpression(node) {
+            if (node.body.type === "BlockStatement") {
+                analysisReport.addIssue("ARROW_FUNCTION_BLOCK_BODY_NOT_ALLOWED", "arrow functions with block body not allowed", (0, utils_js_1.getNodeRange)(node), validationContext.getSnapshot());
+            }
+        },
+        ObjectExpression(node) {
+            for (const property of node.properties) {
+                if (property.type === "Property" && property.computed) {
+                    analysisReport.addIssue("COMPUTED_PROPERTY_NOT_ALLOWED", "computed object properties not allowed", (0, utils_js_1.getNodeRange)(property), validationContext.getSnapshot());
+                }
+            }
+        },
+        MemberExpression(node) {
+            if (node.computed) {
+                // We allow numeric literals for array access (data.items[0])
+                if (node.property.type === "Literal" && typeof node.property.value === "number") {
+                    return; // Allow numeric array indices
+                }
+                analysisReport.addIssue("COMPUTED_ACCESS_NOT_ALLOWED", "computed member access not allowed", (0, utils_js_1.getNodeRange)(node), validationContext.getSnapshot(), [
+                    "Use dot notation: obj.prop instead of obj[prop]",
+                    "For arrays, use numeric indices: array[0] instead of array[variable]",
+                ]);
+            }
+        },
+    });
+    return analysisReport;
+}
+//# sourceMappingURL=expressions.js.map

package/lib/analyze/security/expressions.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"expressions.js","sourceRoot":"","sources":["../../../src/analyze/security/expressions.ts"],"names":[],"mappings":";;AAOA,gDA4FC;AAlGD,mDAA6C;AAG7C,8DAAuD;AACvD,0CAA2C;AAE3C,SAAgB,kBAAkB,CAChC,GAAY,EACZ,OAAe,EACf,iBAAoC;IAEpC,MAAM,cAAc,GAAG,IAAI,mCAAc,EAAE,CAAC;IAE5C,IAAA,sBAAQ,EAAC,GAAG,EAAE;QACZ,aAAa,CAAC,IAAI;YAChB,cAAc,CAAC,QAAQ,CACrB,iBAAiB,EACjB,iBAAiB,EACjB,IAAA,uBAAY,EAAC,IAAI,CAAC,EAClB,iBAAiB,CAAC,WAAW,EAAE,CAChC,CAAC;QACJ,CAAC;QACD,cAAc,CAAC,IAAI;YACjB,cAAc,CAAC,QAAQ,CACrB,kBAAkB,EAClB,kBAAkB,EAClB,IAAA,uBAAY,EAAC,IAAI,CAAC,EAClB,iBAAiB,CAAC,WAAW,EAAE,CAChC,CAAC;QACJ,CAAC;QACD,aAAa,CAAC,IAAI;YAChB,cAAc,CAAC,QAAQ,CACrB,kBAAkB,EAClB,kBAAkB,EAClB,IAAA,uBAAY,EAAC,IAAI,CAAC,EAClB,iBAAiB,CAAC,WAAW,EAAE,CAChC,CAAC;QACJ,CAAC;QACD,eAAe,CAAC,IAAI;YAClB,cAAc,CAAC,QAAQ,CACrB,mBAAmB,EACnB,mBAAmB,EACnB,IAAA,uBAAY,EAAC,IAAI,CAAC,EAClB,iBAAiB,CAAC,WAAW,EAAE,CAChC,CAAC;QACJ,CAAC;QACD,eAAe,CAAC,IAAI;YAClB,cAAc,CAAC,QAAQ,CACrB,mBAAmB,EACnB,mBAAmB,EACnB,IAAA,uBAAY,EAAC,IAAI,CAAC,EAClB,iBAAiB,CAAC,WAAW,EAAE,CAChC,CAAC;QACJ,CAAC;QACD,uBAAuB,CAAC,IAAI;YAC1B,IAAI,IAAI,CAAC,IAAI,CAAC,IAAI,KAAK,gBAAgB,EAAE,CAAC;gBACxC,cAAc,CAAC,QAAQ,CACrB,uCAAuC,EACvC,6CAA6C,EAC7C,IAAA,uBAAY,EAAC,IAAI,CAAC,EAClB,iBAAiB,CAAC,WAAW,EAAE,CAChC,CAAC;YACJ,CAAC;QACH,CAAC;QACD,gBAAgB,CAAC,IAAI;YACnB,KAAK,MAAM,QAAQ,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;gBACvC,IAAI,QAAQ,CAAC,IAAI,KAAK,UAAU,IAAI,QAAQ,CAAC,QAAQ,EAAE,CAAC;oBACtD,cAAc,CAAC,QAAQ,CACrB,+BAA+B,EAC/B,wCAAwC,EACxC,IAAA,uBAAY,EAAC,QAAQ,CAAC,EACtB,iBAAiB,CAAC,WAAW,EAAE,CAChC,CAAC;gBACJ,CAAC;YACH,CAAC;QACH,CAAC;QACD,gBAAgB,CAAC,IAAI;YACnB,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;gBAClB,6DAA6D;gBAC7D,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,KAAK,SAAS,IAAI,OAAO,IAAI,CAAC,QAAQ,CAAC,KAAK,KAAK,QAAQ,EAAE,CAAC;oBAChF,OAAO,CAAC,8BAA8B;gBACxC,CAAC;gBAED,cAAc,CAAC,QAAQ,CACrB,6BAA6B,EAC7B,oCAAoC,EACpC,IAAA,uBAAY,EAAC,IAAI,CAAC,EAClB,iBAAiB,CAAC,WAAW,EAAE,EAC/B;oBACE,iDAAiD;oBACjD,sEAAsE;iBACvE,CACF,CAAC;YACJ,CAAC;QACH,CAAC;KACF,CAAC,CAAC;IAEH,OAAO,cAAc,CAAC;AACxB,CAAC"}

package/lib/analyze/security/identifiers.d.ts

@@ -0,0 +1,6 @@
+import type { Program } from "acorn.js";
+import type { Schema } from "../../schema.js";
+import { ValidationContext } from "../validation-context.js";
+import { AnalysisReport } from "../analysis-report.js";
+export declare function analyzeIdentifiers(ast: Program, _schema: Schema, validationContext: ValidationContext): AnalysisReport;
+//# sourceMappingURL=identifiers.d.ts.map

package/lib/analyze/security/identifiers.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"identifiers.d.ts","sourceRoot":"","sources":["../../../src/analyze/security/identifiers.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAgD,OAAO,EAAE,MAAM,OAAO,CAAC;AAEnF,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,cAAc,CAAC;AAE3C,OAAO,EAAE,iBAAiB,EAAE,MAAM,uBAAuB,CAAC;AAC1D,OAAO,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AAGpD,wBAAgB,kBAAkB,CAChC,GAAG,EAAE,OAAO,EACZ,OAAO,EAAE,MAAM,EACf,iBAAiB,EAAE,iBAAiB,GACnC,cAAc,CAkChB"}
+{"version":3,"file":"identifiers.d.ts","sourceRoot":"","sources":["../../../src/analyze/security/identifiers.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAgD,OAAO,EAAE,MAAM,UAAU,CAAC;AAEtF,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,iBAAiB,CAAC;AAE9C,OAAO,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAC;AAC7D,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AAGvD,wBAAgB,kBAAkB,CAChC,GAAG,EAAE,OAAO,EACZ,OAAO,EAAE,MAAM,EACf,iBAAiB,EAAE,iBAAiB,GACnC,cAAc,CAkChB"}

package/lib/analyze/security/identifiers.js

@@ -0,0 +1,87 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.analyzeIdentifiers = analyzeIdentifiers;
+const traverse_js_1 = require("../../traverse.js");
+const builtins_js_1 = require("../../builtins.js");
+const analysis_report_js_1 = require("../analysis-report.js");
+const utils_js_1 = require("../utils.js");
+function analyzeIdentifiers(ast, _schema, validationContext) {
+    const analysisReport = new analysis_report_js_1.AnalysisReport();
+    const arrowParamScopes = getArrowParamScopes(ast);
+    (0, traverse_js_1.traverse)(ast, {
+        Identifier(node) {
+            const { name } = node;
+            const allowedRoots = ["props", "data", ...(0, builtins_js_1.getBuiltinGlobals)()];
+            if (allowedRoots.includes(name)) {
+                return;
+            }
+            const arrowParent = findArrowParent(node, ast);
+            if (arrowParent) {
+                const params = arrowParamScopes.get(arrowParent);
+                if (params?.has(name)) {
+                    return;
+                }
+            }
+            analysisReport.addIssue("IDENTIFIER_NOT_ALLOWED", `Identifier "${name}" not allowed`, (0, utils_js_1.getNodeRange)(node), validationContext.getSnapshot(), allowedRoots);
+        },
+    });
+    return analysisReport;
+}
+// Build a map of arrow functions to their parameter names so we can check if an
+// identifier is a legit arrow function param or something shady. We do this in
+// a separate traversal because it's cleaner than trying to track scope during the
+// main validation pass.
+function getArrowParamScopes(ast) {
+    const arrowParamScopes = new Map();
+    (0, traverse_js_1.traverse)(ast, {
+        ArrowFunctionExpression(node) {
+            const { params } = node;
+            if (Array.isArray(params)) {
+                const paramNames = new Set();
+                params.forEach((p) => {
+                    if (p.type === "Identifier") {
+                        paramNames.add(p.name);
+                    }
+                });
+                arrowParamScopes.set(node, paramNames);
+            }
+        },
+    });
+    return arrowParamScopes;
+}
+// Walk up the AST tree to find the nearest ArrowFunctionExpression parent.
+// This lets us check if an identifier is in scope as an arrow function parameter.
+function findArrowParent(targetNode, rootNode) {
+    let found = null;
+    function walk(node) {
+        if (node === targetNode) {
+            return true;
+        }
+        const isArrow = node.type === "ArrowFunctionExpression";
+        if (isArrow) {
+            found = node;
+        }
+        for (const key of Object.keys(node)) {
+            const value = node[key];
+            if (value && typeof value === "object") {
+                if (Array.isArray(value)) {
+                    for (const item of value) {
+                        if (item && typeof item === "object" && walk(item)) {
+                            return true;
+                        }
+                    }
+                }
+                else if (walk(value)) {
+                    return true;
+                }
+            }
+        }
+        if (isArrow) {
+            found = null;
+        }
+        return false;
+    }
+    walk(rootNode);
+    return found;
+}
+//# sourceMappingURL=identifiers.js.map

package/lib/analyze/security/identifiers.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"identifiers.js","sourceRoot":"","sources":["../../../src/analyze/security/identifiers.ts"],"names":[],"mappings":";;AAQA,gDAsCC;AA7CD,mDAA6C;AAE7C,mDAAsD;AAEtD,8DAAuD;AACvD,0CAA2C;AAE3C,SAAgB,kBAAkB,CAChC,GAAY,EACZ,OAAe,EACf,iBAAoC;IAEpC,MAAM,cAAc,GAAG,IAAI,mCAAc,EAAE,CAAC;IAC5C,MAAM,gBAAgB,GAAG,mBAAmB,CAAC,GAAG,CAAC,CAAC;IAElD,IAAA,sBAAQ,EAAC,GAAG,EAAE;QACZ,UAAU,CAAC,IAAgB;YACzB,MAAM,EAAE,IAAI,EAAE,GAAG,IAAI,CAAC;YAEtB,MAAM,YAAY,GAAG,CAAC,OAAO,EAAE,MAAM,EAAE,GAAG,IAAA,+BAAiB,GAAE,CAAC,CAAC;YAE/D,IAAI,YAAY,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;gBAChC,OAAO;YACT,CAAC;YAED,MAAM,WAAW,GAAG,eAAe,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;YAE/C,IAAI,WAAW,EAAE,CAAC;gBAChB,MAAM,MAAM,GAAG,gBAAgB,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;gBACjD,IAAI,MAAM,EAAE,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;oBACtB,OAAO;gBACT,CAAC;YACH,CAAC;YAED,cAAc,CAAC,QAAQ,CACrB,wBAAwB,EACxB,eAAe,IAAI,eAAe,EAClC,IAAA,uBAAY,EAAC,IAAI,CAAC,EAClB,iBAAiB,CAAC,WAAW,EAAE,EAC/B,YAAY,CACb,CAAC;QACJ,CAAC;KACF,CAAC,CAAC;IAEH,OAAO,cAAc,CAAC;AACxB,CAAC;AAED,gFAAgF;AAChF,+EAA+E;AAC/E,kFAAkF;AAClF,wBAAwB;AACxB,SAAS,mBAAmB,CAAC,GAAY;IACvC,MAAM,gBAAgB,GAAG,IAAI,GAAG,EAAwC,CAAC;IACzE,IAAA,sBAAQ,EAAC,GAAG,EAAE;QACZ,uBAAuB,CAAC,IAAI;YAC1B,MAAM,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC;YACxB,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;gBAC1B,MAAM,UAAU,GAAG,IAAI,GAAG,EAAU,CAAC;gBACrC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE;oBACnB,IAAI,CAAC,CAAC,IAAI,KAAK,YAAY,EAAE,CAAC;wBAC5B,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;oBACzB,CAAC;gBACH,CAAC,CAAC,CAAC;gBACH,gBAAgB,CAAC,GAAG,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;YACzC,CAAC;QACH,CAAC;KACF,CAAC,CAAC;IACH,OAAO,gBAAgB,CAAC;AAC1B,CAAC;AAED,2EAA2E;AAC3E,kFAAkF;AAClF,SAAS,eAAe,CAAC,UAAmB,EAAE,QAAiB;IAC7D,IAAI,KAAK,GAAmC,IAAI,CAAC;IAEjD,SAAS,IAAI,CAAC,IAAa;QACzB,IAAI,IAAI,KAAK,UAAU,EAAE,CAAC;YACxB,OAAO,IAAI,CAAC;QACd,CAAC;QAED,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,KAAK,yBAAyB,CAAC;QAExD,IAAI,OAAO,EAAE,CAAC;YACZ,KAAK,GAAG,IAA+B,CAAC;QAC1C,CAAC;QAED,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YACpC,MAAM,KAAK,GAAI,IAAY,CAAC,GAAG,CAAC,CAAC;YAEjC,IAAI,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;gBACvC,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;oBACzB,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;wBACzB,IAAI,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;4BACnD,OAAO,IAAI,CAAC;wBACd,CAAC;oBACH,CAAC;gBACH,CAAC;qBAAM,IAAI,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;oBACvB,OAAO,IAAI,CAAC;gBACd,CAAC;YACH,CAAC;QACH,CAAC;QAED,IAAI,OAAO,EAAE,CAAC;YACZ,KAAK,GAAG,IAAI,CAAC;QACf,CAAC;QAED,OAAO,KAAK,CAAC;IACf,CAAC;IAED,IAAI,CAAC,QAAQ,CAAC,CAAC;IACf,OAAO,KAAK,CAAC;AACf,CAAC"}

package/lib/analyze/security/index.d.ts

@@ -0,0 +1,2 @@
+export { analyzeSecurity } from "./analyze/index.js";
+//# sourceMappingURL=index.d.ts.map

package/lib/analyze/security/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/analyze/security/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,MAAM,WAAW,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/analyze/security/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC"}

package/lib/analyze/security/index.js

@@ -0,0 +1,6 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.analyzeSecurity = void 0;
+var index_js_1 = require("./analyze/index.js");
+Object.defineProperty(exports, "analyzeSecurity", { enumerable: true, get: function () { return index_js_1.analyzeSecurity; } });
+//# sourceMappingURL=index.js.map

package/lib/analyze/security/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/analyze/security/index.ts"],"names":[],"mappings":";;;AAAA,+CAAqD;AAA5C,2GAAA,eAAe,OAAA"}

package/lib/analyze/security/member-access.d.ts

@@ -0,0 +1,6 @@
+import type { Program } from "acorn.js";
+import type { Schema } from "../../schema.js";
+import { ValidationContext } from "../validation-context.js";
+import { AnalysisReport } from "../analysis-report.js";
+export declare function analyzeMemberAccess(ast: Program, _schema: Schema, validationContext: ValidationContext): AnalysisReport;
+//# sourceMappingURL=member-access.d.ts.map

package/lib/analyze/security/member-access.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"member-access.d.ts","sourceRoot":"","sources":["../../../src/analyze/security/member-access.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAqB,MAAM,OAAO,CAAC;AAExD,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,cAAc,CAAC;AAC3C,OAAO,EAAE,iBAAiB,EAAE,MAAM,uBAAuB,CAAC;AAC1D,OAAO,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AAGpD,wBAAgB,mBAAmB,CACjC,GAAG,EAAE,OAAO,EACZ,OAAO,EAAE,MAAM,EACf,iBAAiB,EAAE,iBAAiB,GACnC,cAAc,CAuBhB"}
+{"version":3,"file":"member-access.d.ts","sourceRoot":"","sources":["../../../src/analyze/security/member-access.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAqB,MAAM,UAAU,CAAC;AAE3D,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,iBAAiB,CAAC;AAC9C,OAAO,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAC;AAC7D,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AAGvD,wBAAgB,mBAAmB,CACjC,GAAG,EAAE,OAAO,EACZ,OAAO,EAAE,MAAM,EACf,iBAAiB,EAAE,iBAAiB,GACnC,cAAc,CAuBhB"}

package/lib/analyze/security/member-access.js

@@ -0,0 +1,24 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.analyzeMemberAccess = analyzeMemberAccess;
+const traverse_js_1 = require("../../traverse.js");
+const analysis_report_js_1 = require("../analysis-report.js");
+const utils_js_1 = require("../utils.js");
+function analyzeMemberAccess(ast, _schema, validationContext) {
+    const analysisReport = new analysis_report_js_1.AnalysisReport();
+    (0, traverse_js_1.traverse)(ast, {
+        MemberExpression(node) {
+            let depth = 0;
+            let currentNode = node;
+            while (currentNode.type === "MemberExpression") {
+                depth += 1;
+                currentNode = currentNode.object;
+            }
+            if (depth > 5) {
+                analysisReport.addIssue("MEMBER_CHAIN_TOO_DEEP", "member chain too deep", (0, utils_js_1.getNodeRange)(node), validationContext.getSnapshot());
+            }
+        },
+    });
+    return analysisReport;
+}
+//# sourceMappingURL=member-access.js.map

package/lib/analyze/security/member-access.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"member-access.js","sourceRoot":"","sources":["../../../src/analyze/security/member-access.ts"],"names":[],"mappings":";;AAOA,kDA2BC;AAjCD,mDAA6C;AAG7C,8DAAuD;AACvD,0CAA2C;AAE3C,SAAgB,mBAAmB,CACjC,GAAY,EACZ,OAAe,EACf,iBAAoC;IAEpC,MAAM,cAAc,GAAG,IAAI,mCAAc,EAAE,CAAC;IAE5C,IAAA,sBAAQ,EAAC,GAAG,EAAE;QACZ,gBAAgB,CAAC,IAAI;YACnB,IAAI,KAAK,GAAG,CAAC,CAAC;YACd,IAAI,WAAW,GAAuB,IAAI,CAAC;YAC3C,OAAO,WAAW,CAAC,IAAI,KAAK,kBAAkB,EAAE,CAAC;gBAC/C,KAAK,IAAI,CAAC,CAAC;gBACX,WAAW,GAAG,WAAW,CAAC,MAAM,CAAC;YACnC,CAAC;YACD,IAAI,KAAK,GAAG,CAAC,EAAE,CAAC;gBACd,cAAc,CAAC,QAAQ,CACrB,uBAAuB,EACvB,uBAAuB,EACvB,IAAA,uBAAY,EAAC,IAAI,CAAC,EAClB,iBAAiB,CAAC,WAAW,EAAE,CAChC,CAAC;YACJ,CAAC;QACH,CAAC;KACF,CAAC,CAAC;IAEH,OAAO,cAAc,CAAC;AACxB,CAAC"}

package/lib/analyze/utils.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"utils.d.ts","sourceRoot":"","sources":["../../src/analyze/utils.ts"],"names":[],"mappings":"AAAA,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,KAAK;IACpB,KAAK,EAAE,aAAa,CAAC;IACrB,GAAG,EAAE,aAAa,CAAC;CACpB;AAED,wBAAgB,YAAY,CAAC,IAAI,EAAE,GAAG,GAAG,KAAK,CAwB7C;AAED,wBAAgB,4BAA4B,CAAC,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,GAAG,iBAAiB,EAAE,CAEtG;AAED,wBAAgB,8BAA8B,CAAC,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,GAAG,iBAAiB,EAAE,CAExG;AAED,wBAAgB,kCAAkC,CAAC,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,GAAG,MAAM,GAAG,IAAI,CActG;AAED,KAAK,qBAAqB,GAAG,SAAS,GAAG,WAAW,GAAG,UAAU,GAAG,QAAQ,CAAC;AAE7E,UAAU,iBAAiB;IACzB,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;IACnB,IAAI,EAAE,qBAAqB,CAAC;CAC7B"}

package/lib/analyze/utils.js

@@ -0,0 +1,92 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.getNodeRange = getNodeRange;
+exports.getElementSimilarityMatchers = getElementSimilarityMatchers;
+exports.getAttributeSimilarityMatchers = getAttributeSimilarityMatchers;
+exports.getBestSimilarityMatcherSuggestion = getBestSimilarityMatcherSuggestion;
+function getNodeRange(node) {
+    if (node.loc) {
+        return {
+            start: {
+                line: node.loc.start.line - 1,
+                column: node.loc.start.column,
+            },
+            end: {
+                line: node.loc.end.line - 1,
+                column: node.loc.end.column,
+            },
+        };
+    }
+    return {
+        start: {
+            line: 0,
+            column: 0,
+        },
+        end: {
+            line: 0,
+            column: 0,
+        },
+    };
+}
+function getElementSimilarityMatchers(invalid, available) {
+    return getSimilarityMatchers(invalid, available, "element");
+}
+function getAttributeSimilarityMatchers(invalid, available) {
+    return getSimilarityMatchers(invalid, available, "attribute");
+}
+function getBestSimilarityMatcherSuggestion(invalid, available) {
+    const similarityMatchers = getElementSimilarityMatchers(invalid, available);
+    if (similarityMatchers.length === 0) {
+        return null;
+    }
+    const best = similarityMatchers[0];
+    if (best.confidence > 0.6) {
+        return best.suggestion;
+    }
+    return null;
+}
+function getSimilarityMatchers(invalid, available, type) {
+    if (available.length === 0) {
+        return [];
+    }
+    return available
+        .map((suggestion) => ({
+        suggestion,
+        distance: levenshteinDistance(invalid.toLowerCase(), suggestion.toLowerCase()),
+        type,
+    }))
+        .filter((similarityMatcher) => similarityMatcher.distance <= Math.max(2, Math.floor(invalid.length * 0.4)))
+        .sort((a, b) => a.distance - b.distance)
+        .slice(0, 3)
+        .map((similarityMatcher) => ({
+        ...similarityMatcher,
+        confidence: 1 - similarityMatcher.distance / Math.max(invalid.length, similarityMatcher.suggestion.length),
+    }));
+}
+function levenshteinDistance(x, y) {
+    if (x.length === 0) {
+        return y.length;
+    }
+    if (y.length === 0) {
+        return x.length;
+    }
+    const matrix = [];
+    for (let i = 0; i <= y.length; i++) {
+        matrix[i] = [i];
+    }
+    for (let j = 0; j <= x.length; j++) {
+        matrix[0][j] = j;
+    }
+    for (let i = 1; i <= y.length; i++) {
+        for (let j = 1; j <= x.length; j++) {
+            if (y.charAt(i - 1) === x.charAt(j - 1)) {
+                matrix[i][j] = matrix[i - 1][j - 1];
+            }
+            else {
+                matrix[i][j] = Math.min(matrix[i - 1][j - 1] + 1, matrix[i][j - 1] + 1, matrix[i - 1][j] + 1);
+            }
+        }
+    }
+    return matrix[y.length][x.length];
+}
+//# sourceMappingURL=utils.js.map

package/lib/analyze/utils.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"utils.js","sourceRoot":"","sources":["../../src/analyze/utils.ts"],"names":[],"mappings":";;AAUA,oCAwBC;AAED,oEAEC;AAED,wEAEC;AAED,gFAcC;AAhDD,SAAgB,YAAY,CAAC,IAAS;IACpC,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC;QACb,OAAO;YACL,KAAK,EAAE;gBACL,IAAI,EAAE,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,GAAG,CAAC;gBAC7B,MAAM,EAAE,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM;aAC9B;YACD,GAAG,EAAE;gBACH,IAAI,EAAE,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC;gBAC3B,MAAM,EAAE,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM;aAC5B;SACF,CAAC;IACJ,CAAC;IAED,OAAO;QACL,KAAK,EAAE;YACL,IAAI,EAAE,CAAC;YACP,MAAM,EAAE,CAAC;SACV;QACD,GAAG,EAAE;YACH,IAAI,EAAE,CAAC;YACP,MAAM,EAAE,CAAC;SACV;KACF,CAAC;AACJ,CAAC;AAED,SAAgB,4BAA4B,CAAC,OAAe,EAAE,SAAmB;IAC/E,OAAO,qBAAqB,CAAC,OAAO,EAAE,SAAS,EAAE,SAAS,CAAC,CAAC;AAC9D,CAAC;AAED,SAAgB,8BAA8B,CAAC,OAAe,EAAE,SAAmB;IACjF,OAAO,qBAAqB,CAAC,OAAO,EAAE,SAAS,EAAE,WAAW,CAAC,CAAC;AAChE,CAAC;AAED,SAAgB,kCAAkC,CAAC,OAAe,EAAE,SAAmB;IACrF,MAAM,kBAAkB,GAAG,4BAA4B,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;IAE5E,IAAI,kBAAkB,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACpC,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,IAAI,GAAG,kBAAkB,CAAC,CAAC,CAAC,CAAC;IAEnC,IAAI,IAAI,CAAC,UAAU,GAAG,GAAG,EAAE,CAAC;QAC1B,OAAO,IAAI,CAAC,UAAU,CAAC;IACzB,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC;AAUD,SAAS,qBAAqB,CAAC,OAAe,EAAE,SAAmB,EAAE,IAA2B;IAC9F,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC3B,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,OAAO,SAAS;SACb,GAAG,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;QACpB,UAAU;QACV,QAAQ,EAAE,mBAAmB,CAAC,OAAO,CAAC,WAAW,EAAE,EAAE,UAAU,CAAC,WAAW,EAAE,CAAC;QAC9E,IAAI;KACL,CAAC,CAAC;SACF,MAAM,CAAC,CAAC,iBAAiB,EAAE,EAAE,CAAC,iBAAiB,CAAC,QAAQ,IAAI,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,GAAG,GAAG,CAAC,CAAC,CAAC;SAC1G,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,GAAG,CAAC,CAAC,QAAQ,CAAC;SACvC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC;SACX,GAAG,CAAC,CAAC,iBAAiB,EAAE,EAAE,CAAC,CAAC;QAC3B,GAAG,iBAAiB;QACpB,UAAU,EAAE,CAAC,GAAG,iBAAiB,CAAC,QAAQ,GAAG,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,MAAM,EAAE,iBAAiB,CAAC,UAAU,CAAC,MAAM,CAAC;KAC3G,CAAC,CAAC,CAAC;AACR,CAAC;AAED,SAAS,mBAAmB,CAAC,CAAS,EAAE,CAAS;IAC/C,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACnB,OAAO,CAAC,CAAC,MAAM,CAAC;IAClB,CAAC;IACD,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACnB,OAAO,CAAC,CAAC,MAAM,CAAC;IAClB,CAAC;IAED,MAAM,MAAM,GAAe,EAAE,CAAC;IAE9B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACnC,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACnC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;IACnB,CAAC;IAED,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACnC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YACnC,IAAI,CAAC,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC;gBACxC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;YACtC,CAAC;iBAAM,CAAC;gBACN,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;YAChG,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;AACpC,CAAC"}

package/lib/analyze/validation-context.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"validation-context.d.ts","sourceRoot":"","sources":["../../src/analyze/validation-context.ts"],"names":[],"mappings":"AAAA,MAAM,WAAW,yBAAyB;IACxC,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,cAAc,EAAE,MAAM,EAAE,CAAC;CAC1B;AAED,qBAAa,iBAAiB;;IAG5B,IAAI,WAAW,IAAI,MAAM,CAKxB;IAED,YAAY,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI;IAInC,WAAW,IAAI,IAAI;IAInB,WAAW,IAAI,yBAAyB;CAOzC"}

package/lib/analyze/validation-context.js

@@ -0,0 +1,27 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ValidationContext = void 0;
+class ValidationContext {
+    #elements = [];
+    get currentPath() {
+        if (this.#elements.length > 0) {
+            return this.#elements.join(" > ");
+        }
+        return "";
+    }
+    enterElement(element) {
+        this.#elements.push(element);
+    }
+    exitElement() {
+        this.#elements.pop();
+    }
+    getSnapshot() {
+        return {
+            elements: this.#elements.slice(),
+            currentElement: this.#elements[this.#elements.length - 1],
+            parentElements: this.#elements.slice(0, -1),
+        };
+    }
+}
+exports.ValidationContext = ValidationContext;
+//# sourceMappingURL=validation-context.js.map

package/lib/analyze/validation-context.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"validation-context.js","sourceRoot":"","sources":["../../src/analyze/validation-context.ts"],"names":[],"mappings":";;;AAMA,MAAa,iBAAiB;IAC5B,SAAS,GAAa,EAAE,CAAC;IAEzB,IAAI,WAAW;QACb,IAAI,IAAI,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC9B,OAAO,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACpC,CAAC;QACD,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,YAAY,CAAC,OAAe;QAC1B,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAC/B,CAAC;IAED,WAAW;QACT,IAAI,CAAC,SAAS,CAAC,GAAG,EAAE,CAAC;IACvB,CAAC;IAED,WAAW;QACT,OAAO;YACL,QAAQ,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE;YAChC,cAAc,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC,CAAC;YACzD,cAAc,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;SAC5C,CAAC;IACJ,CAAC;CACF;AAzBD,8CAyBC"}