mcp-code-context 3.9.2 → 7.0.1

package/dist/src/operations/taintAnalysis.js

@@ -0,0 +1,220 @@
+/**
+ * Source-to-Sink Static AST Taint Analyzer
+ *
+ * Traces data flow from untrusted user sources (req.query, req.body, $_GET, etc.)
+ * through variable assignments and string interpolations to dangerous execution sinks
+ * (db.query, child_process.exec, eval, fs.readFile, innerHTML) without sanitizers.
+ */
+import * as fs from "node:fs/promises";
+import * as path from "node:path";
+import { existsSync } from "node:fs";
+// 1. Untrusted Sources (User Input Entry Points)
+const TAINT_SOURCES = [
+    { regex: /(?:req|request|ctx\.request)\.(?:query|body|params|headers|cookies)(?:\.([a-zA-Z0-9_$]+)|\[['"]([^'"]+)['"]\])?/, name: "HTTP Request Input" },
+    { regex: /\$_(?:GET|POST|REQUEST|COOKIE)\[['"]?([a-zA-Z0-9_$]+)['"]?\]/, name: "PHP Global Input" },
+    { regex: /request\.(?:args|form|values|json|headers)\[['"]([a-zA-Z0-9_$]+)['"]\]/, name: "Python Flask/Django Input" },
+    { regex: /process\.argv(?:\[\d+\])?/, name: "CLI Argument" },
+];
+// 2. Dangerous Sinks (Destructive / Execution Endpoints)
+const DANGEROUS_SINKS = [
+    {
+        regex: /(?:db|pool|client|connection|knex|sequelize|prisma)\.(?:query|raw|\$queryRawUnsafe|execute)\s*\(([^)]+)\)/,
+        category: "SQL_INJECTION",
+        severity: "CRITICAL",
+        name: "db.query / raw SQL execution",
+        recommendation: "Use parameterized queries ($1, ?), prepared statements, or ORM type-safe query builders.",
+    },
+    {
+        regex: /(?:exec|execSync|spawn|popen|os\.system|subprocess\.(?:call|run|Popen)|shell_exec|system|passthru)\s*\(([^)]+)\)/,
+        category: "COMMAND_INJECTION",
+        severity: "CRITICAL",
+        name: "System Shell / Process Execution",
+        recommendation: "Use execFile with argument arrays without subshell, or strictly whitelist allowed inputs.",
+    },
+    {
+        regex: /(?:eval|Function|vm\.runInThisContext|vm\.runInContext)\s*\(([^)]+)\)/,
+        category: "CODE_INJECTION",
+        severity: "CRITICAL",
+        name: "Dynamic Code Evaluation",
+        recommendation: "Eliminate eval()/Function() calls; parse structured data using JSON.parse() instead.",
+    },
+    {
+        regex: /(?:fs\.(?:readFile|readFileSync|writeFile|writeFileSync|unlink|unlinkSync)|open|file_get_contents)\s*\(([^,)]+)/,
+        category: "PATH_TRAVERSAL",
+        severity: "HIGH",
+        name: "Filesystem Access (Path Traversal)",
+        recommendation: "Normalize paths using path.resolve(), verify against project boundary, or reject path separators ('..', '/').",
+    },
+    {
+        regex: /(?:fetch|axios\.(?:get|post|put|delete)|http\.get|https\.get|requests\.(?:get|post)|curl_exec)\s*\(([^,)]+)/,
+        category: "SSRF",
+        severity: "HIGH",
+        name: "External HTTP Request (SSRF)",
+        recommendation: "Validate URLs against a strict whitelist of domains and reject private IP ranges (127.0.0.1, 169.254.x).",
+    },
+    {
+        regex: /(?:res\.(?:send|write)|innerHTML|document\.write|echo)\s*(?:\(([^)]+)\)|=([^;]+))/,
+        category: "CROSS_SITE_SCRIPTING",
+        severity: "MEDIUM",
+        name: "Unescaped DOM / HTML Output",
+        recommendation: "Sanitize output using DOMPurify, textContent, or HTML entity escaping.",
+    },
+];
+// 3. Known Sanitizers (Neutralize Taint)
+const SANITIZERS = [
+    /\bparseInt\s*\(/,
+    /\bparseFloat\s*\(/,
+    /\bNumber\s*\(/,
+    /\bint\s*\(/,
+    /\bfloat\s*\(/,
+    /\b\(int\)/,
+    /\bencodeURIComponent\s*\(/,
+    /\bDOMPurify\.sanitize\s*\(/,
+    /\bescapeHtml\s*\(/,
+    /\bhtmlspecialchars\s*\(/,
+    /\bshlex\.quote\s*\(/,
+    /\bvalidator\.is[A-Za-z0-9_]+\s*\(/,
+];
+function escapeRegex(str) {
+    return str.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
+}
+export async function traceTaintFlow(params) {
+    try {
+        let content = params.content;
+        if (!content) {
+            if (!existsSync(params.filePath)) {
+                return {
+                    success: false,
+                    error: `File does not exist: ${params.filePath}`,
+                };
+            }
+            content = await fs.readFile(params.filePath, "utf-8");
+        }
+        const lines = content.split("\n");
+        const taintedVars = new Map();
+        const findings = [];
+        // Optional: If user specified a specific sourceParam, track it as initially tainted
+        if (params.sourceParam) {
+            taintedVars.set(params.sourceParam, {
+                name: params.sourceParam,
+                sourceExpression: `Parameter: ${params.sourceParam}`,
+                sourceLine: 1,
+                currentExpression: params.sourceParam,
+                history: [{ variable: params.sourceParam, line: 1, expression: params.sourceParam }],
+                isSanitized: false,
+            });
+        }
+        // Step 1: Scan lines for source introductions, variable propagations, and sinks
+        for (let lineIdx = 0; lineIdx < lines.length; lineIdx++) {
+            const lineNum = lineIdx + 1;
+            const rawLine = lines[lineIdx];
+            const trimmed = rawLine.trim();
+            if (!trimmed || trimmed.startsWith("//") || trimmed.startsWith("/*") || trimmed.startsWith("#")) {
+                continue;
+            }
+            // Check if sanitizer is applied on this line
+            const lineHasSanitizer = SANITIZERS.some(s => s.test(trimmed));
+            // ── A. Taint Source Detection ──────────────────────────────────────────
+            for (const src of TAINT_SOURCES) {
+                const srcMatch = trimmed.match(src.regex);
+                if (srcMatch) {
+                    // Check if this source assignment assigns to a variable: const/let/var x = ... or $x = ...
+                    const assignMatch = trimmed.match(/(?:const|let|var)\s+([a-zA-Z0-9_$]+)\s*=\s*(.+)/) ||
+                        trimmed.match(/\$([a-zA-Z0-9_]+)\s*=\s*(.+)/);
+                    if (assignMatch) {
+                        const varName = assignMatch[1];
+                        const expr = assignMatch[2];
+                        taintedVars.set(varName, {
+                            name: varName,
+                            sourceExpression: srcMatch[0],
+                            sourceLine: lineNum,
+                            currentExpression: expr,
+                            history: [{ variable: varName, line: lineNum, expression: expr }],
+                            isSanitized: lineHasSanitizer,
+                        });
+                    }
+                }
+            }
+            // ── B. Taint Propagation across Assignments ────────────────────────────
+            // If variable Y is assigned an expression containing tainted variable X
+            const assignmentMatch = trimmed.match(/(?:const|let|var)\s+([a-zA-Z0-9_$]+)\s*=\s*(.+)/) ||
+                trimmed.match(/\$([a-zA-Z0-9_]+)\s*=\s*(.+)/);
+            if (assignmentMatch) {
+                const targetVar = assignmentMatch[1];
+                const assignedExpr = assignmentMatch[2];
+                // Check if any currently tainted variable appears in assignedExpr
+                for (const [taintedName, taintInfo] of taintedVars.entries()) {
+                    const varRegex = new RegExp(`\\b${escapeRegex(taintedName)}\\b`);
+                    if (varRegex.test(assignedExpr) && targetVar !== taintedName) {
+                        const isSanitizedNow = taintInfo.isSanitized || lineHasSanitizer;
+                        taintedVars.set(targetVar, {
+                            name: targetVar,
+                            sourceExpression: taintInfo.sourceExpression,
+                            sourceLine: taintInfo.sourceLine,
+                            currentExpression: assignedExpr,
+                            history: [
+                                ...taintInfo.history,
+                                { variable: targetVar, line: lineNum, expression: assignedExpr },
+                            ],
+                            isSanitized: isSanitizedNow,
+                        });
+                    }
+                }
+            }
+            // ── C. Dangerous Sink Detection ─────────────────────────────────────────
+            for (const sink of DANGEROUS_SINKS) {
+                if (params.dangerousSink && !sink.regex.test(params.dangerousSink) && !sink.category.toLowerCase().includes(params.dangerousSink.toLowerCase())) {
+                    continue;
+                }
+                const sinkMatch = trimmed.match(sink.regex);
+                if (sinkMatch) {
+                    const sinkArgs = sinkMatch[1] || sinkMatch[2] || "";
+                    // Check if any tainted variable is passed to the sink arguments
+                    for (const [taintedName, taintInfo] of taintedVars.entries()) {
+                        const varRegex = new RegExp(`\\b${escapeRegex(taintedName)}\\b`);
+                        if (varRegex.test(sinkArgs) && !taintInfo.isSanitized && !lineHasSanitizer) {
+                            findings.push({
+                                vulnerabilityType: sink.category,
+                                severity: sink.severity,
+                                source: {
+                                    expression: taintInfo.sourceExpression,
+                                    variable: taintInfo.history[0]?.variable || taintedName,
+                                    line: taintInfo.sourceLine,
+                                },
+                                propagationPath: taintInfo.history,
+                                sink: {
+                                    name: sink.name,
+                                    line: lineNum,
+                                    expression: trimmed,
+                                },
+                                isSanitized: false,
+                                recommendation: sink.recommendation,
+                            });
+                        }
+                    }
+                }
+            }
+        }
+        const report = {
+            filePath: path.relative(params.projectRoot, params.filePath).replace(/\\/g, "/"),
+            vulnerable: findings.length > 0,
+            findingsCount: findings.length,
+            findings,
+            analyzedLines: lines.length,
+        };
+        const footer = findings.length === 0
+            ? `\n\n✅ Taint Flow Audit Clean: Zero un-sanitized source-to-sink vulnerability paths detected across ${lines.length} lines.`
+            : `\n\n🚨 VULNERABILITY DETECTED: Found ${findings.length} un-sanitized taint paths reaching dangerous sinks.`;
+        return {
+            success: true,
+            content: JSON.stringify(report, null, 2) + footer,
+        };
+    }
+    catch (error) {
+        return {
+            success: false,
+            error: `trace_taint_flow failed: ${error.message || String(error)}`,
+        };
+    }
+}
+//# sourceMappingURL=taintAnalysis.js.map

package/dist/src/operations/taintAnalysis.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"taintAnalysis.js","sourceRoot":"","sources":["../../../src/operations/taintAnalysis.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,KAAK,EAAE,MAAM,kBAAkB,CAAC;AACvC,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAClC,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AA2CrC,iDAAiD;AACjD,MAAM,aAAa,GAA2C;IAC5D,EAAE,KAAK,EAAE,iHAAiH,EAAE,IAAI,EAAE,oBAAoB,EAAE;IACxJ,EAAE,KAAK,EAAE,8DAA8D,EAAE,IAAI,EAAE,kBAAkB,EAAE;IACnG,EAAE,KAAK,EAAE,wEAAwE,EAAE,IAAI,EAAE,2BAA2B,EAAE;IACtH,EAAE,KAAK,EAAE,2BAA2B,EAAE,IAAI,EAAE,cAAc,EAAE;CAC7D,CAAC;AAEF,yDAAyD;AACzD,MAAM,eAAe,GAMhB;IACH;QACE,KAAK,EAAE,2GAA2G;QAClH,QAAQ,EAAE,eAAe;QACzB,QAAQ,EAAE,UAAU;QACpB,IAAI,EAAE,8BAA8B;QACpC,cAAc,EAAE,0FAA0F;KAC3G;IACD;QACE,KAAK,EAAE,kHAAkH;QACzH,QAAQ,EAAE,mBAAmB;QAC7B,QAAQ,EAAE,UAAU;QACpB,IAAI,EAAE,kCAAkC;QACxC,cAAc,EAAE,2FAA2F;KAC5G;IACD;QACE,KAAK,EAAE,uEAAuE;QAC9E,QAAQ,EAAE,gBAAgB;QAC1B,QAAQ,EAAE,UAAU;QACpB,IAAI,EAAE,yBAAyB;QAC/B,cAAc,EAAE,sFAAsF;KACvG;IACD;QACE,KAAK,EAAE,iHAAiH;QACxH,QAAQ,EAAE,gBAAgB;QAC1B,QAAQ,EAAE,MAAM;QAChB,IAAI,EAAE,oCAAoC;QAC1C,cAAc,EAAE,+GAA+G;KAChI;IACD;QACE,KAAK,EAAE,6GAA6G;QACpH,QAAQ,EAAE,MAAM;QAChB,QAAQ,EAAE,MAAM;QAChB,IAAI,EAAE,8BAA8B;QACpC,cAAc,EAAE,0GAA0G;KAC3H;IACD;QACE,KAAK,EAAE,mFAAmF;QAC1F,QAAQ,EAAE,sBAAsB;QAChC,QAAQ,EAAE,QAAQ;QAClB,IAAI,EAAE,6BAA6B;QACnC,cAAc,EAAE,wEAAwE;KACzF;CACF,CAAC;AAEF,yCAAyC;AACzC,MAAM,UAAU,GAAG;IACjB,iBAAiB;IACjB,mBAAmB;IACnB,eAAe;IACf,YAAY;IACZ,cAAc;IACd,WAAW;IACX,2BAA2B;IAC3B,4BAA4B;IAC5B,mBAAmB;IACnB,yBAAyB;IACzB,qBAAqB;IACrB,mCAAmC;CACpC,CAAC;AAWF,SAAS,WAAW,CAAC,GAAW;IAC9B,OAAO,GAAG,CAAC,OAAO,CAAC,qBAAqB,EAAE,MAAM,CAAC,CAAC;AACpD,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,MAOpC;IACC,IAAI,CAAC;QACH,IAAI,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC;QAE7B,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC;gBACjC,OAAO;oBACL,OAAO,EAAE,KAAK;oBACd,KAAK,EAAE,wBAAwB,MAAM,CAAC,QAAQ,EAAE;iBACjD,CAAC;YACJ,CAAC;YACD,OAAO,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,MAAM,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;QACxD,CAAC;QAED,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAClC,MAAM,WAAW,GAAG,IAAI,GAAG,EAAyB,CAAC;QACrD,MAAM,QAAQ,GAAmB,EAAE,CAAC;QAEpC,oFAAoF;QACpF,IAAI,MAAM,CAAC,WAAW,EAAE,CAAC;YACvB,WAAW,CAAC,GAAG,CAAC,MAAM,CAAC,WAAW,EAAE;gBAClC,IAAI,EAAE,MAAM,CAAC,WAAW;gBACxB,gBAAgB,EAAE,cAAc,MAAM,CAAC,WAAW,EAAE;gBACpD,UAAU,EAAE,CAAC;gBACb,iBAAiB,EAAE,MAAM,CAAC,WAAW;gBACrC,OAAO,EAAE,CAAC,EAAE,QAAQ,EAAE,MAAM,CAAC,WAAW,EAAE,IAAI,EAAE,CAAC,EAAE,UAAU,EAAE,MAAM,CAAC,WAAW,EAAE,CAAC;gBACpF,WAAW,EAAE,KAAK;aACnB,CAAC,CAAC;QACL,CAAC;QAED,gFAAgF;QAChF,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,GAAG,KAAK,CAAC,MAAM,EAAE,OAAO,EAAE,EAAE,CAAC;YACxD,MAAM,OAAO,GAAG,OAAO,GAAG,CAAC,CAAC;YAC5B,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,CAAC;YAC/B,MAAM,OAAO,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC;YAE/B,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;gBAChG,SAAS;YACX,CAAC;YAED,6CAA6C;YAC7C,MAAM,gBAAgB,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC;YAE/D,0EAA0E;YAC1E,KAAK,MAAM,GAAG,IAAI,aAAa,EAAE,CAAC;gBAChC,MAAM,QAAQ,GAAG,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;gBAC1C,IAAI,QAAQ,EAAE,CAAC;oBACb,2FAA2F;oBAC3F,MAAM,WAAW,GAAG,OAAO,CAAC,KAAK,CAAC,iDAAiD,CAAC;wBAChE,OAAO,CAAC,KAAK,CAAC,8BAA8B,CAAC,CAAC;oBAClE,IAAI,WAAW,EAAE,CAAC;wBAChB,MAAM,OAAO,GAAG,WAAW,CAAC,CAAC,CAAC,CAAC;wBAC/B,MAAM,IAAI,GAAG,WAAW,CAAC,CAAC,CAAC,CAAC;wBAC5B,WAAW,CAAC,GAAG,CAAC,OAAO,EAAE;4BACvB,IAAI,EAAE,OAAO;4BACb,gBAAgB,EAAE,QAAQ,CAAC,CAAC,CAAC;4BAC7B,UAAU,EAAE,OAAO;4BACnB,iBAAiB,EAAE,IAAI;4BACvB,OAAO,EAAE,CAAC,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC;4BACjE,WAAW,EAAE,gBAAgB;yBAC9B,CAAC,CAAC;oBACL,CAAC;gBACH,CAAC;YACH,CAAC;YAED,0EAA0E;YAC1E,wEAAwE;YACxE,MAAM,eAAe,GAAG,OAAO,CAAC,KAAK,CAAC,iDAAiD,CAAC;gBAChE,OAAO,CAAC,KAAK,CAAC,8BAA8B,CAAC,CAAC;YACtE,IAAI,eAAe,EAAE,CAAC;gBACpB,MAAM,SAAS,GAAG,eAAe,CAAC,CAAC,CAAC,CAAC;gBACrC,MAAM,YAAY,GAAG,eAAe,CAAC,CAAC,CAAC,CAAC;gBAExC,kEAAkE;gBAClE,KAAK,MAAM,CAAC,WAAW,EAAE,SAAS,CAAC,IAAI,WAAW,CAAC,OAAO,EAAE,EAAE,CAAC;oBAC7D,MAAM,QAAQ,GAAG,IAAI,MAAM,CAAC,MAAM,WAAW,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC;oBACjE,IAAI,QAAQ,CAAC,IAAI,CAAC,YAAY,CAAC,IAAI,SAAS,KAAK,WAAW,EAAE,CAAC;wBAC7D,MAAM,cAAc,GAAG,SAAS,CAAC,WAAW,IAAI,gBAAgB,CAAC;wBACjE,WAAW,CAAC,GAAG,CAAC,SAAS,EAAE;4BACzB,IAAI,EAAE,SAAS;4BACf,gBAAgB,EAAE,SAAS,CAAC,gBAAgB;4BAC5C,UAAU,EAAE,SAAS,CAAC,UAAU;4BAChC,iBAAiB,EAAE,YAAY;4BAC/B,OAAO,EAAE;gCACP,GAAG,SAAS,CAAC,OAAO;gCACpB,EAAE,QAAQ,EAAE,SAAS,EAAE,IAAI,EAAE,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE;6BACjE;4BACD,WAAW,EAAE,cAAc;yBAC5B,CAAC,CAAC;oBACL,CAAC;gBACH,CAAC;YACH,CAAC;YAED,2EAA2E;YAC3E,KAAK,MAAM,IAAI,IAAI,eAAe,EAAE,CAAC;gBACnC,IAAI,MAAM,CAAC,aAAa,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,MAAM,CAAC,aAAa,CAAC,WAAW,EAAE,CAAC,EAAE,CAAC;oBAChJ,SAAS;gBACX,CAAC;gBAED,MAAM,SAAS,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;gBAC5C,IAAI,SAAS,EAAE,CAAC;oBACd,MAAM,QAAQ,GAAG,SAAS,CAAC,CAAC,CAAC,IAAI,SAAS,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;oBAEpD,gEAAgE;oBAChE,KAAK,MAAM,CAAC,WAAW,EAAE,SAAS,CAAC,IAAI,WAAW,CAAC,OAAO,EAAE,EAAE,CAAC;wBAC7D,MAAM,QAAQ,GAAG,IAAI,MAAM,CAAC,MAAM,WAAW,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC;wBACjE,IAAI,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,WAAW,IAAI,CAAC,gBAAgB,EAAE,CAAC;4BAC3E,QAAQ,CAAC,IAAI,CAAC;gCACZ,iBAAiB,EAAE,IAAI,CAAC,QAAQ;gCAChC,QAAQ,EAAE,IAAI,CAAC,QAAQ;gCACvB,MAAM,EAAE;oCACN,UAAU,EAAE,SAAS,CAAC,gBAAgB;oCACtC,QAAQ,EAAE,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,QAAQ,IAAI,WAAW;oCACvD,IAAI,EAAE,SAAS,CAAC,UAAU;iCAC3B;gCACD,eAAe,EAAE,SAAS,CAAC,OAAO;gCAClC,IAAI,EAAE;oCACJ,IAAI,EAAE,IAAI,CAAC,IAAI;oCACf,IAAI,EAAE,OAAO;oCACb,UAAU,EAAE,OAAO;iCACpB;gCACD,WAAW,EAAE,KAAK;gCAClB,cAAc,EAAE,IAAI,CAAC,cAAc;6BACpC,CAAC,CAAC;wBACL,CAAC;oBACH,CAAC;gBACH,CAAC;YACH,CAAC;QACH,CAAC;QAED,MAAM,MAAM,GAAwB;YAClC,QAAQ,EAAE,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,WAAW,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC;YAChF,UAAU,EAAE,QAAQ,CAAC,MAAM,GAAG,CAAC;YAC/B,aAAa,EAAE,QAAQ,CAAC,MAAM;YAC9B,QAAQ;YACR,aAAa,EAAE,KAAK,CAAC,MAAM;SAC5B,CAAC;QAEF,MAAM,MAAM,GAAG,QAAQ,CAAC,MAAM,KAAK,CAAC;YAClC,CAAC,CAAC,sGAAsG,KAAK,CAAC,MAAM,SAAS;YAC7H,CAAC,CAAC,wCAAwC,QAAQ,CAAC,MAAM,qDAAqD,CAAC;QAEjH,OAAO;YACL,OAAO,EAAE,IAAI;YACb,OAAO,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,MAAM;SAClD,CAAC;IACJ,CAAC;IAAC,OAAO,KAAU,EAAE,CAAC;QACpB,OAAO;YACL,OAAO,EAAE,KAAK;YACd,KAAK,EAAE,4BAA4B,KAAK,CAAC,OAAO,IAAI,MAAM,CAAC,KAAK,CAAC,EAAE;SACpE,CAAC;IACJ,CAAC;AACH,CAAC"}

package/dist/src/operations/testImpact.d.ts

@@ -0,0 +1,31 @@
+export interface ImpactedTest {
+    testFile: string;
+    reason: string;
+    matchedCases?: string[];
+}
+export interface TestRunnerInfo {
+    framework: string;
+    command: string;
+}
+export interface TestImpactResult {
+    target: {
+        filePath: string;
+        symbolName?: string;
+    };
+    testRunner: TestRunnerInfo;
+    impactedTests: ImpactedTest[];
+    totalImpactedTests: number;
+    tokenSavingsEstimate: string;
+}
+/**
+ * Detect project's primary test runner and base command
+ */
+export declare function detectTestRunner(projectRoot: string): Promise<TestRunnerInfo>;
+/**
+ * Perform Test Impact Analysis for a source file and optional symbol
+ */
+export declare function getImpactedTests(params: {
+    filePath: string;
+    symbolName?: string;
+    projectRoot: string;
+}): Promise<TestImpactResult>;

package/dist/src/operations/testImpact.js

@@ -0,0 +1,179 @@
+import * as fs from "node:fs/promises";
+import * as path from "node:path";
+import { walkDir } from "../utils/fileWalker.js";
+const TEST_EXTENSIONS = [
+    ".spec.ts", ".test.ts", ".spec.tsx", ".test.tsx",
+    ".spec.js", ".test.js", ".spec.jsx", ".test.jsx",
+    "_spec.rb", "_test.py", "_spec.py",
+    "_test.go", "Test.java", "Test.php",
+];
+/**
+ * Detect project's primary test runner and base command
+ */
+export async function detectTestRunner(projectRoot) {
+    // 1. Vitest
+    const hasVitestConfig = await fileExists(path.join(projectRoot, "vitest.config.ts")) ||
+        await fileExists(path.join(projectRoot, "vitest.config.js")) ||
+        await fileExists(path.join(projectRoot, "vitest.config.mts"));
+    if (hasVitestConfig) {
+        return { framework: "Vitest", command: "npx vitest run" };
+    }
+    // 2. Package.json check for Vitest / Jest
+    try {
+        const pkgContent = await fs.readFile(path.join(projectRoot, "package.json"), "utf-8");
+        const pkg = JSON.parse(pkgContent);
+        const deps = { ...pkg.dependencies, ...pkg.devDependencies };
+        if (deps["vitest"]) {
+            return { framework: "Vitest", command: "npx vitest run" };
+        }
+        if (deps["jest"] || await fileExists(path.join(projectRoot, "jest.config.js")) || await fileExists(path.join(projectRoot, "jest.config.ts"))) {
+            return { framework: "Jest", command: "npx jest" };
+        }
+    }
+    catch {
+        // ignore
+    }
+    // 3. Pytest
+    if (await fileExists(path.join(projectRoot, "pytest.ini")) ||
+        await fileExists(path.join(projectRoot, "pyproject.toml")) ||
+        await fileExists(path.join(projectRoot, "setup.cfg"))) {
+        return { framework: "Pytest", command: "pytest" };
+    }
+    // 4. PHPUnit
+    if (await fileExists(path.join(projectRoot, "phpunit.xml")) ||
+        await fileExists(path.join(projectRoot, "phpunit.xml.dist"))) {
+        return { framework: "PHPUnit", command: "./vendor/bin/phpunit" };
+    }
+    // 5. RSpec
+    if (await fileExists(path.join(projectRoot, ".rspec"))) {
+        return { framework: "RSpec", command: "bundle exec rspec" };
+    }
+    // 6. Go test
+    if (await fileExists(path.join(projectRoot, "go.mod"))) {
+        return { framework: "Go", command: "go test" };
+    }
+    // 7. Cargo
+    if (await fileExists(path.join(projectRoot, "Cargo.toml"))) {
+        return { framework: "Cargo", command: "cargo test" };
+    }
+    return { framework: "Generic / npm", command: "npm test --" };
+}
+async function fileExists(p) {
+    try {
+        await fs.access(p);
+        return true;
+    }
+    catch {
+        return false;
+    }
+}
+/**
+ * Perform Test Impact Analysis for a source file and optional symbol
+ */
+export async function getImpactedTests(params) {
+    const runner = await detectTestRunner(params.projectRoot);
+    const impactedTests = [];
+    const sourceFileName = path.basename(params.filePath);
+    const sourceNameWithoutExt = sourceFileName.replace(/\.[^.]+$/, "");
+    // Collect test files
+    const candidateTestFiles = [];
+    await walkDir(params.projectRoot, {
+        extensions: [".ts", ".tsx", ".js", ".jsx", ".rb", ".py", ".go", ".php", ".java"],
+        excludeDirs: ["node_modules", ".git", "dist", "build", "vendor", ".venv", "coverage"],
+        onFile: async (fullPath) => {
+            const lower = fullPath.toLowerCase();
+            const isTestDir = lower.includes("/tests/") || lower.includes("\\tests\\") ||
+                lower.includes("/test/") || lower.includes("\\test\\") ||
+                lower.includes("/spec/") || lower.includes("\\spec\\") ||
+                lower.includes("/__tests__/") || lower.includes("\\__tests__\\");
+            const hasTestExt = TEST_EXTENSIONS.some(ext => fullPath.endsWith(ext)) ||
+                path.basename(fullPath).startsWith("test_");
+            if (isTestDir || hasTestExt) {
+                if (fullPath !== params.filePath) {
+                    candidateTestFiles.push(fullPath);
+                }
+            }
+        },
+    });
+    // Evaluate each candidate test file
+    for (const testFilePath of candidateTestFiles) {
+        try {
+            const content = await fs.readFile(testFilePath, "utf-8");
+            const relativeTestPath = path.relative(params.projectRoot, testFilePath).replace(/\\/g, "/");
+            let isMatch = false;
+            const reasons = [];
+            const matchedCases = [];
+            // 1. Filename correlation (e.g. userService.ts -> userService.spec.ts)
+            const testBaseName = path.basename(testFilePath);
+            if (testBaseName.includes(sourceNameWithoutExt)) {
+                isMatch = true;
+                reasons.push(`Direct naming match with source file (${sourceNameWithoutExt})`);
+            }
+            // 2. Direct import check
+            if (content.includes(sourceFileName) ||
+                content.includes(`/${sourceNameWithoutExt}`) ||
+                content.includes(`'../${sourceNameWithoutExt}`) ||
+                content.includes(`"./${sourceNameWithoutExt}`) ||
+                content.includes(`'${sourceNameWithoutExt}'`) ||
+                content.includes(`"${sourceNameWithoutExt}"`)) {
+                isMatch = true;
+                reasons.push(`Imports source file '${sourceFileName}'`);
+            }
+            // 3. Symbol mention check
+            if (params.symbolName && content.includes(params.symbolName)) {
+                isMatch = true;
+                reasons.push(`References target symbol '${params.symbolName}'`);
+                // Extract specific test cases mentioning the symbol
+                const testCaseRe = /(?:it|test|specify)\s*\(\s*["']([^"']+)["']/g;
+                let tMatch;
+                while ((tMatch = testCaseRe.exec(content)) !== null) {
+                    const title = tMatch[1];
+                    // Check if test block or title mentions symbol
+                    if (title.toLowerCase().includes(params.symbolName.toLowerCase())) {
+                        matchedCases.push(title);
+                    }
+                }
+                // Also check Python def test_*()
+                const pyTestRe = /def\s+(test_\w+)\s*\(/g;
+                let pyMatch;
+                while ((pyMatch = pyTestRe.exec(content)) !== null) {
+                    if (pyMatch[1].toLowerCase().includes(params.symbolName.toLowerCase())) {
+                        matchedCases.push(pyMatch[1]);
+                    }
+                }
+            }
+            if (isMatch) {
+                impactedTests.push({
+                    testFile: relativeTestPath,
+                    reason: reasons.join("; "),
+                    matchedCases: matchedCases.length > 0 ? matchedCases.slice(0, 10) : undefined,
+                });
+            }
+        }
+        catch {
+            // skip unreadable
+        }
+    }
+    // Construct minimal test runner command
+    const testFileList = impactedTests.map(t => t.testFile).join(" ");
+    const runnerCommand = testFileList.length > 0
+        ? `${runner.command} ${testFileList}`
+        : `${runner.command}`;
+    const savingsPct = impactedTests.length > 0 && candidateTestFiles.length > impactedTests.length
+        ? Math.round(((candidateTestFiles.length - impactedTests.length) / candidateTestFiles.length) * 100)
+        : 80;
+    return {
+        target: {
+            filePath: path.relative(params.projectRoot, params.filePath).replace(/\\/g, "/"),
+            symbolName: params.symbolName,
+        },
+        testRunner: {
+            framework: runner.framework,
+            command: runnerCommand,
+        },
+        impactedTests,
+        totalImpactedTests: impactedTests.length,
+        tokenSavingsEstimate: `${savingsPct}% test execution & LLM diagnostic time saved (${impactedTests.length} impacted vs ${candidateTestFiles.length} total test files)`,
+    };
+}
+//# sourceMappingURL=testImpact.js.map

package/dist/src/operations/testImpact.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"testImpact.js","sourceRoot":"","sources":["../../../src/operations/testImpact.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,kBAAkB,CAAC;AACvC,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAClC,OAAO,EAAE,OAAO,EAAE,MAAM,wBAAwB,CAAC;AAwBjD,MAAM,eAAe,GAAG;IACtB,UAAU,EAAE,UAAU,EAAE,WAAW,EAAE,WAAW;IAChD,UAAU,EAAE,UAAU,EAAE,WAAW,EAAE,WAAW;IAChD,UAAU,EAAE,UAAU,EAAE,UAAU;IAClC,UAAU,EAAE,WAAW,EAAE,UAAU;CACpC,CAAC;AAEF;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,WAAmB;IACxD,YAAY;IACZ,MAAM,eAAe,GAAG,MAAM,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,kBAAkB,CAAC,CAAC;QAC5D,MAAM,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,kBAAkB,CAAC,CAAC;QAC5D,MAAM,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,mBAAmB,CAAC,CAAC,CAAC;IACtF,IAAI,eAAe,EAAE,CAAC;QACpB,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,OAAO,EAAE,gBAAgB,EAAE,CAAC;IAC5D,CAAC;IAED,0CAA0C;IAC1C,IAAI,CAAC;QACH,MAAM,UAAU,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,cAAc,CAAC,EAAE,OAAO,CAAC,CAAC;QACtF,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;QACnC,MAAM,IAAI,GAAG,EAAE,GAAG,GAAG,CAAC,YAAY,EAAE,GAAG,GAAG,CAAC,eAAe,EAAE,CAAC;QAC7D,IAAI,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;YACnB,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,OAAO,EAAE,gBAAgB,EAAE,CAAC;QAC5D,CAAC;QACD,IAAI,IAAI,CAAC,MAAM,CAAC,IAAI,MAAM,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,gBAAgB,CAAC,CAAC,IAAI,MAAM,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,gBAAgB,CAAC,CAAC,EAAE,CAAC;YAC7I,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,UAAU,EAAE,CAAC;QACpD,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,SAAS;IACX,CAAC;IAED,YAAY;IACZ,IACE,MAAM,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,YAAY,CAAC,CAAC;QACtD,MAAM,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,gBAAgB,CAAC,CAAC;QAC1D,MAAM,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,WAAW,CAAC,CAAC,EACrD,CAAC;QACD,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC;IACpD,CAAC;IAED,aAAa;IACb,IACE,MAAM,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,aAAa,CAAC,CAAC;QACvD,MAAM,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,kBAAkB,CAAC,CAAC,EAC5D,CAAC;QACD,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,OAAO,EAAE,sBAAsB,EAAE,CAAC;IACnE,CAAC;IAED,WAAW;IACX,IAAI,MAAM,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC,EAAE,CAAC;QACvD,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,OAAO,EAAE,mBAAmB,EAAE,CAAC;IAC9D,CAAC;IAED,aAAa;IACb,IAAI,MAAM,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC,EAAE,CAAC;QACvD,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC;IACjD,CAAC;IAED,WAAW;IACX,IAAI,MAAM,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,YAAY,CAAC,CAAC,EAAE,CAAC;QAC3D,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,OAAO,EAAE,YAAY,EAAE,CAAC;IACvD,CAAC;IAED,OAAO,EAAE,SAAS,EAAE,eAAe,EAAE,OAAO,EAAE,aAAa,EAAE,CAAC;AAChE,CAAC;AAED,KAAK,UAAU,UAAU,CAAC,CAAS;IACjC,IAAI,CAAC;QACH,MAAM,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;QACnB,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,MAItC;IACC,MAAM,MAAM,GAAG,MAAM,gBAAgB,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;IAC1D,MAAM,aAAa,GAAmB,EAAE,CAAC;IAEzC,MAAM,cAAc,GAAG,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IACtD,MAAM,oBAAoB,GAAG,cAAc,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;IAEpE,qBAAqB;IACrB,MAAM,kBAAkB,GAAa,EAAE,CAAC;IAExC,MAAM,OAAO,CAAC,MAAM,CAAC,WAAW,EAAE;QAChC,UAAU,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,CAAC;QAChF,WAAW,EAAE,CAAC,cAAc,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,UAAU,CAAC;QACrF,MAAM,EAAE,KAAK,EAAE,QAAgB,EAAE,EAAE;YACjC,MAAM,KAAK,GAAG,QAAQ,CAAC,WAAW,EAAE,CAAC;YACrC,MAAM,SAAS,GAAG,KAAK,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,WAAW,CAAC;gBACxD,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,UAAU,CAAC;gBACtD,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,UAAU,CAAC;gBACtD,KAAK,CAAC,QAAQ,CAAC,aAAa,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,eAAe,CAAC,CAAC;YAEnF,MAAM,UAAU,GAAG,eAAe,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;gBACnD,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;YAE/D,IAAI,SAAS,IAAI,UAAU,EAAE,CAAC;gBAC5B,IAAI,QAAQ,KAAK,MAAM,CAAC,QAAQ,EAAE,CAAC;oBACjC,kBAAkB,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;gBACpC,CAAC;YACH,CAAC;QACH,CAAC;KACF,CAAC,CAAC;IAEH,oCAAoC;IACpC,KAAK,MAAM,YAAY,IAAI,kBAAkB,EAAE,CAAC;QAC9C,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,YAAY,EAAE,OAAO,CAAC,CAAC;YACzD,MAAM,gBAAgB,GAAG,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,WAAW,EAAE,YAAY,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;YAE7F,IAAI,OAAO,GAAG,KAAK,CAAC;YACpB,MAAM,OAAO,GAAa,EAAE,CAAC;YAC7B,MAAM,YAAY,GAAa,EAAE,CAAC;YAElC,uEAAuE;YACvE,MAAM,YAAY,GAAG,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC;YACjD,IAAI,YAAY,CAAC,QAAQ,CAAC,oBAAoB,CAAC,EAAE,CAAC;gBAChD,OAAO,GAAG,IAAI,CAAC;gBACf,OAAO,CAAC,IAAI,CAAC,yCAAyC,oBAAoB,GAAG,CAAC,CAAC;YACjF,CAAC;YAED,yBAAyB;YACzB,IACE,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAC;gBAChC,OAAO,CAAC,QAAQ,CAAC,IAAI,oBAAoB,EAAE,CAAC;gBAC5C,OAAO,CAAC,QAAQ,CAAC,OAAO,oBAAoB,EAAE,CAAC;gBAC/C,OAAO,CAAC,QAAQ,CAAC,MAAM,oBAAoB,EAAE,CAAC;gBAC9C,OAAO,CAAC,QAAQ,CAAC,IAAI,oBAAoB,GAAG,CAAC;gBAC7C,OAAO,CAAC,QAAQ,CAAC,IAAI,oBAAoB,GAAG,CAAC,EAC7C,CAAC;gBACD,OAAO,GAAG,IAAI,CAAC;gBACf,OAAO,CAAC,IAAI,CAAC,wBAAwB,cAAc,GAAG,CAAC,CAAC;YAC1D,CAAC;YAED,0BAA0B;YAC1B,IAAI,MAAM,CAAC,UAAU,IAAI,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,UAAU,CAAC,EAAE,CAAC;gBAC7D,OAAO,GAAG,IAAI,CAAC;gBACf,OAAO,CAAC,IAAI,CAAC,6BAA6B,MAAM,CAAC,UAAU,GAAG,CAAC,CAAC;gBAEhE,oDAAoD;gBACpD,MAAM,UAAU,GAAG,8CAA8C,CAAC;gBAClE,IAAI,MAA8B,CAAC;gBACnC,OAAO,CAAC,MAAM,GAAG,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;oBACpD,MAAM,KAAK,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC;oBACxB,+CAA+C;oBAC/C,IAAI,KAAK,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,MAAM,CAAC,UAAU,CAAC,WAAW,EAAE,CAAC,EAAE,CAAC;wBAClE,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;oBAC3B,CAAC;gBACH,CAAC;gBAED,iCAAiC;gBACjC,MAAM,QAAQ,GAAG,wBAAwB,CAAC;gBAC1C,IAAI,OAA+B,CAAC;gBACpC,OAAO,CAAC,OAAO,GAAG,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;oBACnD,IAAI,OAAO,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,MAAM,CAAC,UAAU,CAAC,WAAW,EAAE,CAAC,EAAE,CAAC;wBACvE,YAAY,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC;oBAChC,CAAC;gBACH,CAAC;YACH,CAAC;YAED,IAAI,OAAO,EAAE,CAAC;gBACZ,aAAa,CAAC,IAAI,CAAC;oBACjB,QAAQ,EAAE,gBAAgB;oBAC1B,MAAM,EAAE,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC;oBAC1B,YAAY,EAAE,YAAY,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS;iBAC9E,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,kBAAkB;QACpB,CAAC;IACH,CAAC;IAED,wCAAwC;IACxC,MAAM,YAAY,GAAG,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAClE,MAAM,aAAa,GAAG,YAAY,CAAC,MAAM,GAAG,CAAC;QAC3C,CAAC,CAAC,GAAG,MAAM,CAAC,OAAO,IAAI,YAAY,EAAE;QACrC,CAAC,CAAC,GAAG,MAAM,CAAC,OAAO,EAAE,CAAC;IAExB,MAAM,UAAU,GAAG,aAAa,CAAC,MAAM,GAAG,CAAC,IAAI,kBAAkB,CAAC,MAAM,GAAG,aAAa,CAAC,MAAM;QAC7F,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,kBAAkB,CAAC,MAAM,GAAG,aAAa,CAAC,MAAM,CAAC,GAAG,kBAAkB,CAAC,MAAM,CAAC,GAAG,GAAG,CAAC;QACpG,CAAC,CAAC,EAAE,CAAC;IAEP,OAAO;QACL,MAAM,EAAE;YACN,QAAQ,EAAE,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,WAAW,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC;YAChF,UAAU,EAAE,MAAM,CAAC,UAAU;SAC9B;QACD,UAAU,EAAE;YACV,SAAS,EAAE,MAAM,CAAC,SAAS;YAC3B,OAAO,EAAE,aAAa;SACvB;QACD,aAAa;QACb,kBAAkB,EAAE,aAAa,CAAC,MAAM;QACxC,oBAAoB,EAAE,GAAG,UAAU,iDAAiD,aAAa,CAAC,MAAM,gBAAgB,kBAAkB,CAAC,MAAM,oBAAoB;KACtK,CAAC;AACJ,CAAC"}

package/dist/src/operations/typeInference.d.ts

@@ -0,0 +1,54 @@
+/**
+ * AST Duck-Type Backfiller & Type Inference Engine (v4.5.0)
+ *
+ * Inspects AST property accesses (param.id, param.name.trim(), param.age > 18, param.save()),
+ * method invocations, binary operations, subscript lookups, and return statements in
+ * untyped JavaScript, TypeScript, or Python codebases.
+ * Automatically backfills strict TypeScript interfaces or Python TypedDict / BaseModel definitions.
+ */
+import { ParserRegistry } from "../parsers/registry.js";
+import type { ReadResult } from "./readCore.js";
+export interface InferredProperty {
+    name: string;
+    type: string;
+    optional: boolean;
+    contextSnippet: string;
+    confidence: "HIGH" | "MEDIUM" | "HEURISTIC";
+}
+export interface InferredParameterType {
+    parameterName: string;
+    targetTypeName: string;
+    properties: InferredProperty[];
+    methods: Array<{
+        name: string;
+        params: string[];
+        returnType: string;
+    }>;
+    generatedInterface: string;
+}
+export interface FunctionTypeInference {
+    functionName: string;
+    startLine: number;
+    endLine: number;
+    parameters: InferredParameterType[];
+    inferredReturnType: string;
+    annotatedSignature: string;
+}
+export interface TypeInferenceReport {
+    filePath: string;
+    targetLanguage: "typescript" | "python";
+    functionsCount: number;
+    inferences: FunctionTypeInference[];
+    combinedTypeDefinitions: string;
+}
+/**
+ * Main backfillTypes operation
+ */
+export declare function backfillTypes(params: {
+    filePath: string;
+    projectRoot?: string;
+    symbolName?: string;
+    targetLanguage?: "typescript" | "python";
+    content?: string;
+    registry?: ParserRegistry;
+}): Promise<ReadResult>;