sourceverity 1.0.0

package/dist/rules/react/missingEffectCleanup.js

@@ -0,0 +1,86 @@
+import { getNodeSourceRange, resolveReactHook } from "../../engine/symbols.js";
+export const missingEffectCleanupRule = {
+    meta: {
+        id: "react/missing-effect-cleanup",
+        category: "react",
+        defaultSeverity: "warning",
+        defaultConfidence: "high",
+        description: "Detects external subscriptions created in useEffect without returned cleanup.",
+        requiresTypeInformation: false,
+    },
+    analyze(context) {
+        const { sourceFile, checker, ts } = context;
+        if (!ts)
+            return;
+        context.visitNodes((node) => {
+            if (!ts.isCallExpression(node))
+                return;
+            let isEffectHook = false;
+            if (checker && (resolveReactHook(node, checker, "useEffect") || resolveReactHook(node, checker, "useLayoutEffect"))) {
+                isEffectHook = true;
+            }
+            else if (ts.isIdentifier(node.expression) && (node.expression.text === "useEffect" || node.expression.text === "useLayoutEffect")) {
+                isEffectHook = true;
+            }
+            if (!isEffectHook)
+                return;
+            const args = node.arguments;
+            if (!args || args.length === 0)
+                return;
+            const callback = args[0];
+            if (!callback || (!ts.isArrowFunction(callback) && !ts.isFunctionExpression(callback))) {
+                return;
+            }
+            const subscriptions = [];
+            let hasCleanupReturn = false;
+            function inspectEffectBody(n) {
+                // Look for: new WebSocket(...), new EventSource(...), new BroadcastChannel(...)
+                if (ts && ts.isNewExpression(n) && ts.isIdentifier(n.expression)) {
+                    const className = n.expression.text;
+                    if (className === "WebSocket" || className === "EventSource" || className === "BroadcastChannel") {
+                        subscriptions.push({ node: n, name: className });
+                    }
+                }
+                // Look for: client.subscribe(...)
+                if (ts &&
+                    ts.isCallExpression(n) &&
+                    ts.isPropertyAccessExpression(n.expression) &&
+                    n.expression.name.text === "subscribe") {
+                    subscriptions.push({ node: n, name: ".subscribe()" });
+                }
+                // Check for return statement
+                if (ts && ts.isReturnStatement(n) && n.expression) {
+                    hasCleanupReturn = true;
+                }
+                if (ts && n !== callback && (ts.isFunctionDeclaration(n) || ts.isArrowFunction(n) || ts.isFunctionExpression(n))) {
+                    return;
+                }
+                n.forEachChild(inspectEffectBody);
+            }
+            inspectEffectBody(callback.body);
+            if (subscriptions.length > 0 && !hasCleanupReturn) {
+                for (const sub of subscriptions) {
+                    const range = getNodeSourceRange(sub.node, sourceFile);
+                    context.report({
+                        ruleId: "react/missing-effect-cleanup",
+                        category: "react",
+                        severity: "warning",
+                        confidence: "high",
+                        message: `Subscription resource '${sub.name}' created in useEffect without returning a cleanup function.`,
+                        file: sourceFile.fileName,
+                        range,
+                        evidence: [
+                            {
+                                message: "Unsubscribed listeners or open socket connections persist when the component unmounts.",
+                                range,
+                            },
+                        ],
+                        suggestedAction: "Return a cleanup function from useEffect that closes or unsubscribes the resource.",
+                        safeAutomaticFix: false,
+                    });
+                }
+            }
+        });
+    },
+};
+//# sourceMappingURL=missingEffectCleanup.js.map

package/dist/rules/react/missingEffectCleanup.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"missingEffectCleanup.js","sourceRoot":"","sources":["../../../src/rules/react/missingEffectCleanup.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,kBAAkB,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAC;AAG/E,MAAM,CAAC,MAAM,wBAAwB,GAAS;IAC5C,IAAI,EAAE;QACJ,EAAE,EAAE,8BAA8B;QAClC,QAAQ,EAAE,OAAO;QACjB,eAAe,EAAE,SAAS;QAC1B,iBAAiB,EAAE,MAAM;QACzB,WAAW,EAAE,+EAA+E;QAC5F,uBAAuB,EAAE,KAAK;KAC/B;IAED,OAAO,CAAC,OAAoB;QAC1B,MAAM,EAAE,UAAU,EAAE,OAAO,EAAE,EAAE,EAAE,GAAG,OAAO,CAAC;QAC5C,IAAI,CAAC,EAAE;YAAE,OAAO;QAEhB,OAAO,CAAC,UAAU,CAAC,CAAC,IAAiB,EAAE,EAAE;YACvC,IAAI,CAAC,EAAE,CAAC,gBAAgB,CAAC,IAAI,CAAC;gBAAE,OAAO;YAEvC,IAAI,YAAY,GAAG,KAAK,CAAC;YACzB,IAAI,OAAO,IAAI,CAAC,gBAAgB,CAAC,IAAI,EAAE,OAAO,EAAE,WAAW,CAAC,IAAI,gBAAgB,CAAC,IAAI,EAAE,OAAO,EAAE,iBAAiB,CAAC,CAAC,EAAE,CAAC;gBACpH,YAAY,GAAG,IAAI,CAAC;YACtB,CAAC;iBAAM,IAAI,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,KAAK,WAAW,IAAI,IAAI,CAAC,UAAU,CAAC,IAAI,KAAK,iBAAiB,CAAC,EAAE,CAAC;gBACpI,YAAY,GAAG,IAAI,CAAC;YACtB,CAAC;YAED,IAAI,CAAC,YAAY;gBAAE,OAAO;YAE1B,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC;YAC5B,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;gBAAE,OAAO;YAEvC,MAAM,QAAQ,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;YACzB,IAAI,CAAC,QAAQ,IAAI,CAAC,CAAC,EAAE,CAAC,eAAe,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC,oBAAoB,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC;gBACvF,OAAO;YACT,CAAC;YAED,MAAM,aAAa,GAA+C,EAAE,CAAC;YACrE,IAAI,gBAAgB,GAAG,KAAK,CAAC;YAE7B,SAAS,iBAAiB,CAAC,CAAc;gBACvC,gFAAgF;gBAChF,IAAI,EAAE,IAAI,EAAE,CAAC,eAAe,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,YAAY,CAAC,CAAC,CAAC,UAAU,CAAC,EAAE,CAAC;oBACjE,MAAM,SAAS,GAAG,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC;oBACpC,IAAI,SAAS,KAAK,WAAW,IAAI,SAAS,KAAK,aAAa,IAAI,SAAS,KAAK,kBAAkB,EAAE,CAAC;wBACjG,aAAa,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC;oBACnD,CAAC;gBACH,CAAC;gBAED,kCAAkC;gBAClC,IACE,EAAE;oBACF,EAAE,CAAC,gBAAgB,CAAC,CAAC,CAAC;oBACtB,EAAE,CAAC,0BAA0B,CAAC,CAAC,CAAC,UAAU,CAAC;oBAC3C,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,KAAK,WAAW,EACtC,CAAC;oBACD,aAAa,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,IAAI,EAAE,cAAc,EAAE,CAAC,CAAC;gBACxD,CAAC;gBAED,6BAA6B;gBAC7B,IAAI,EAAE,IAAI,EAAE,CAAC,iBAAiB,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE,CAAC;oBAClD,gBAAgB,GAAG,IAAI,CAAC;gBAC1B,CAAC;gBAED,IAAI,EAAE,IAAI,CAAC,KAAK,QAAQ,IAAI,CAAC,EAAE,CAAC,qBAAqB,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,eAAe,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,oBAAoB,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;oBACjH,OAAO;gBACT,CAAC;gBAED,CAAC,CAAC,YAAY,CAAC,iBAAiB,CAAC,CAAC;YACpC,CAAC;YAED,iBAAiB,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;YAEjC,IAAI,aAAa,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,gBAAgB,EAAE,CAAC;gBAClD,KAAK,MAAM,GAAG,IAAI,aAAa,EAAE,CAAC;oBAChC,MAAM,KAAK,GAAG,kBAAkB,CAAC,GAAG,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;oBACvD,OAAO,CAAC,MAAM,CAAC;wBACb,MAAM,EAAE,8BAA8B;wBACtC,QAAQ,EAAE,OAAO;wBACjB,QAAQ,EAAE,SAAS;wBACnB,UAAU,EAAE,MAAM;wBAClB,OAAO,EAAE,0BAA0B,GAAG,CAAC,IAAI,8DAA8D;wBACzG,IAAI,EAAE,UAAU,CAAC,QAAQ;wBACzB,KAAK;wBACL,QAAQ,EAAE;4BACR;gCACE,OAAO,EAAE,wFAAwF;gCACjG,KAAK;6BACN;yBACF;wBACD,eAAe,EAAE,oFAAoF;wBACrG,gBAAgB,EAAE,KAAK;qBACxB,CAAC,CAAC;gBACL,CAAC;YACH,CAAC;QACH,CAAC,CAAC,CAAC;IACL,CAAC;CACF,CAAC"}

package/dist/rules/typescript/nonNullAssertionRisk.d.ts

@@ -0,0 +1,3 @@
+import type { Rule } from "../../core/types.js";
+export declare const nonNullAssertionRiskRule: Rule;
+//# sourceMappingURL=nonNullAssertionRisk.d.ts.map

package/dist/rules/typescript/nonNullAssertionRisk.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"nonNullAssertionRisk.d.ts","sourceRoot":"","sources":["../../../src/rules/typescript/nonNullAssertionRisk.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,IAAI,EAAe,MAAM,qBAAqB,CAAC;AAe7D,eAAO,MAAM,wBAAwB,EAAE,IAkDtC,CAAC"}

package/dist/rules/typescript/nonNullAssertionRisk.js

@@ -0,0 +1,65 @@
+import { getNodeSourceRange } from "../../engine/symbols.js";
+import { isGuardedNonNullAssertion } from "../../analysis/controlFlow.js";
+/**
+ * Checks if a type contains null or undefined in its flags or union members.
+ */
+function isNullableType(type, ts) {
+    if (type.flags & (ts.TypeFlags.Null | ts.TypeFlags.Undefined | ts.TypeFlags.Void)) {
+        return true;
+    }
+    if (type.isUnion()) {
+        return type.types.some((t) => isNullableType(t, ts));
+    }
+    return false;
+}
+export const nonNullAssertionRiskRule = {
+    meta: {
+        id: "typescript/non-null-assertion-risk",
+        category: "typescript",
+        defaultSeverity: "warning",
+        defaultConfidence: "high",
+        description: "Detects non-null assertions on types that contain null or undefined.",
+        requiresTypeInformation: true,
+    },
+    analyze(context) {
+        const { sourceFile, checker, ts } = context;
+        if (!checker || !ts)
+            return;
+        context.visitNodes((node) => {
+            if (!ts.isNonNullExpression(node))
+                return;
+            // 1. Conservative control-flow & bounds check
+            const guardCheck = isGuardedNonNullAssertion(node, ts, checker);
+            if (guardCheck.isGuarded) {
+                return;
+            }
+            try {
+                const innerType = checker.getTypeAtLocation(node.expression);
+                if (isNullableType(innerType, ts)) {
+                    const range = getNodeSourceRange(node, sourceFile);
+                    context.report({
+                        ruleId: "typescript/non-null-assertion-risk",
+                        category: "typescript",
+                        severity: "warning",
+                        confidence: "high",
+                        message: "Non-null assertion on nullable type risks unhandled runtime TypeError.",
+                        file: sourceFile.fileName,
+                        range,
+                        evidence: [
+                            {
+                                message: "The operand type includes null or undefined at this location.",
+                                range,
+                            },
+                        ],
+                        suggestedAction: "Use optional chaining (?.), nullish coalescing (??), or an explicit presence guard.",
+                        safeAutomaticFix: false,
+                    });
+                }
+            }
+            catch {
+                // Ignore type resolution failures
+            }
+        });
+    },
+};
+//# sourceMappingURL=nonNullAssertionRisk.js.map

package/dist/rules/typescript/nonNullAssertionRisk.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"nonNullAssertionRisk.js","sourceRoot":"","sources":["../../../src/rules/typescript/nonNullAssertionRisk.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,kBAAkB,EAAE,MAAM,yBAAyB,CAAC;AAC7D,OAAO,EAAE,yBAAyB,EAAE,MAAM,+BAA+B,CAAC;AAG1E;;GAEG;AACH,SAAS,cAAc,CAAC,IAAiB,EAAE,EAAiB;IAC1D,IAAI,IAAI,CAAC,KAAK,GAAG,CAAC,EAAE,CAAC,SAAS,CAAC,IAAI,GAAG,EAAE,CAAC,SAAS,CAAC,SAAS,GAAG,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC;QAClF,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,IAAI,CAAC,OAAO,EAAE,EAAE,CAAC;QACnB,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,cAAc,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;IACvD,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,CAAC,MAAM,wBAAwB,GAAS;IAC5C,IAAI,EAAE;QACJ,EAAE,EAAE,oCAAoC;QACxC,QAAQ,EAAE,YAAY;QACtB,eAAe,EAAE,SAAS;QAC1B,iBAAiB,EAAE,MAAM;QACzB,WAAW,EAAE,sEAAsE;QACnF,uBAAuB,EAAE,IAAI;KAC9B;IAED,OAAO,CAAC,OAAoB;QAC1B,MAAM,EAAE,UAAU,EAAE,OAAO,EAAE,EAAE,EAAE,GAAG,OAAO,CAAC;QAC5C,IAAI,CAAC,OAAO,IAAI,CAAC,EAAE;YAAE,OAAO;QAE5B,OAAO,CAAC,UAAU,CAAC,CAAC,IAAiB,EAAE,EAAE;YACvC,IAAI,CAAC,EAAE,CAAC,mBAAmB,CAAC,IAAI,CAAC;gBAAE,OAAO;YAE1C,8CAA8C;YAC9C,MAAM,UAAU,GAAG,yBAAyB,CAAC,IAAI,EAAE,EAAE,EAAE,OAAO,CAAC,CAAC;YAChE,IAAI,UAAU,CAAC,SAAS,EAAE,CAAC;gBACzB,OAAO;YACT,CAAC;YAED,IAAI,CAAC;gBACH,MAAM,SAAS,GAAG,OAAO,CAAC,iBAAiB,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;gBAC7D,IAAI,cAAc,CAAC,SAAS,EAAE,EAAE,CAAC,EAAE,CAAC;oBAClC,MAAM,KAAK,GAAG,kBAAkB,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;oBACnD,OAAO,CAAC,MAAM,CAAC;wBACb,MAAM,EAAE,oCAAoC;wBAC5C,QAAQ,EAAE,YAAY;wBACtB,QAAQ,EAAE,SAAS;wBACnB,UAAU,EAAE,MAAM;wBAClB,OAAO,EAAE,wEAAwE;wBACjF,IAAI,EAAE,UAAU,CAAC,QAAQ;wBACzB,KAAK;wBACL,QAAQ,EAAE;4BACR;gCACE,OAAO,EAAE,+DAA+D;gCACxE,KAAK;6BACN;yBACF;wBACD,eAAe,EAAE,qFAAqF;wBACtG,gBAAgB,EAAE,KAAK;qBACxB,CAAC,CAAC;gBACL,CAAC;YACH,CAAC;YAAC,MAAM,CAAC;gBACP,kCAAkC;YACpC,CAAC;QACH,CAAC,CAAC,CAAC;IACL,CAAC;CACF,CAAC"}

package/dist/rules/typescript/uncheckedIndexAccess.d.ts

@@ -0,0 +1,3 @@
+import type { Rule } from "../../core/types.js";
+export declare const uncheckedIndexAccessRule: Rule;
+//# sourceMappingURL=uncheckedIndexAccess.d.ts.map

package/dist/rules/typescript/uncheckedIndexAccess.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"uncheckedIndexAccess.d.ts","sourceRoot":"","sources":["../../../src/rules/typescript/uncheckedIndexAccess.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,IAAI,EAAe,MAAM,qBAAqB,CAAC;AAE7D,eAAO,MAAM,wBAAwB,EAAE,IAkFtC,CAAC"}

package/dist/rules/typescript/uncheckedIndexAccess.js

@@ -0,0 +1,79 @@
+import { getNodeSourceRange } from "../../engine/symbols.js";
+export const uncheckedIndexAccessRule = {
+    meta: {
+        id: "typescript/unchecked-index-access",
+        category: "typescript",
+        defaultSeverity: "warning",
+        defaultConfidence: "medium",
+        description: "Detects dynamic index accesses dereferenced without presence checks in loose compiler configurations.",
+        requiresTypeInformation: true,
+    },
+    analyze(context) {
+        const { sourceFile, checker, program, ts } = context;
+        if (!checker || !program || !ts)
+            return;
+        const compilerOpts = program.getCompilerOptions();
+        // Only active when noUncheckedIndexedAccess is false or omitted
+        if (compilerOpts.noUncheckedIndexedAccess) {
+            return;
+        }
+        context.visitNodes((node) => {
+            // ElementAccessExpression: obj[key]
+            if (!ts.isElementAccessExpression(node))
+                return;
+            const parent = node.parent;
+            if (!parent)
+                return;
+            // Check if element access is immediately dereferenced
+            let isDereferenced = false;
+            // Case 1: items[i].prop (PropertyAccessExpression where expression is node)
+            if (ts.isPropertyAccessExpression(parent) && parent.expression === node) {
+                // Exclude optional chaining: items[i]?.prop
+                if (!parent.questionDotToken) {
+                    isDereferenced = true;
+                }
+            }
+            // Case 2: items[i]() (CallExpression where expression is node)
+            if (ts.isCallExpression(parent) && parent.expression === node) {
+                if (!parent.questionDotToken) {
+                    isDereferenced = true;
+                }
+            }
+            if (isDereferenced) {
+                try {
+                    const containerType = checker.getTypeAtLocation(node.expression);
+                    // Check if container type is an Array, Tuple, or Record
+                    const isArrayOrRecord = checker.isArrayType(containerType) ||
+                        checker.isTupleType(containerType) ||
+                        containerType.getStringIndexType() !== undefined ||
+                        containerType.getNumberIndexType() !== undefined;
+                    if (isArrayOrRecord) {
+                        const range = getNodeSourceRange(node, sourceFile);
+                        context.report({
+                            ruleId: "typescript/unchecked-index-access",
+                            category: "typescript",
+                            severity: "warning",
+                            confidence: "medium",
+                            message: "Index access is dereferenced directly without verifying presence.",
+                            file: sourceFile.fileName,
+                            range,
+                            evidence: [
+                                {
+                                    message: "The repository configuration does not enable noUncheckedIndexedAccess, so out-of-bounds indexing returns undefined at runtime.",
+                                    range,
+                                },
+                            ],
+                            suggestedAction: "Use optional chaining (items[i]?.property) or guard with a presence check.",
+                            safeAutomaticFix: false,
+                            repositoryAccepted: true,
+                        });
+                    }
+                }
+                catch {
+                    // Ignore resolution failure
+                }
+            }
+        });
+    },
+};
+//# sourceMappingURL=uncheckedIndexAccess.js.map

package/dist/rules/typescript/uncheckedIndexAccess.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"uncheckedIndexAccess.js","sourceRoot":"","sources":["../../../src/rules/typescript/uncheckedIndexAccess.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,kBAAkB,EAAE,MAAM,yBAAyB,CAAC;AAG7D,MAAM,CAAC,MAAM,wBAAwB,GAAS;IAC5C,IAAI,EAAE;QACJ,EAAE,EAAE,mCAAmC;QACvC,QAAQ,EAAE,YAAY;QACtB,eAAe,EAAE,SAAS;QAC1B,iBAAiB,EAAE,QAAQ;QAC3B,WAAW,EAAE,uGAAuG;QACpH,uBAAuB,EAAE,IAAI;KAC9B;IAED,OAAO,CAAC,OAAoB;QAC1B,MAAM,EAAE,UAAU,EAAE,OAAO,EAAE,OAAO,EAAE,EAAE,EAAE,GAAG,OAAO,CAAC;QACrD,IAAI,CAAC,OAAO,IAAI,CAAC,OAAO,IAAI,CAAC,EAAE;YAAE,OAAO;QAExC,MAAM,YAAY,GAAG,OAAO,CAAC,kBAAkB,EAAE,CAAC;QAClD,gEAAgE;QAChE,IAAI,YAAY,CAAC,wBAAwB,EAAE,CAAC;YAC1C,OAAO;QACT,CAAC;QAED,OAAO,CAAC,UAAU,CAAC,CAAC,IAAiB,EAAE,EAAE;YACvC,oCAAoC;YACpC,IAAI,CAAC,EAAE,CAAC,yBAAyB,CAAC,IAAI,CAAC;gBAAE,OAAO;YAEhD,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC;YAC3B,IAAI,CAAC,MAAM;gBAAE,OAAO;YAEpB,sDAAsD;YACtD,IAAI,cAAc,GAAG,KAAK,CAAC;YAE3B,4EAA4E;YAC5E,IAAI,EAAE,CAAC,0BAA0B,CAAC,MAAM,CAAC,IAAI,MAAM,CAAC,UAAU,KAAK,IAAI,EAAE,CAAC;gBACxE,4CAA4C;gBAC5C,IAAI,CAAC,MAAM,CAAC,gBAAgB,EAAE,CAAC;oBAC7B,cAAc,GAAG,IAAI,CAAC;gBACxB,CAAC;YACH,CAAC;YAED,+DAA+D;YAC/D,IAAI,EAAE,CAAC,gBAAgB,CAAC,MAAM,CAAC,IAAI,MAAM,CAAC,UAAU,KAAK,IAAI,EAAE,CAAC;gBAC9D,IAAI,CAAC,MAAM,CAAC,gBAAgB,EAAE,CAAC;oBAC7B,cAAc,GAAG,IAAI,CAAC;gBACxB,CAAC;YACH,CAAC;YAED,IAAI,cAAc,EAAE,CAAC;gBACnB,IAAI,CAAC;oBACH,MAAM,aAAa,GAAG,OAAO,CAAC,iBAAiB,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;oBACjE,wDAAwD;oBACxD,MAAM,eAAe,GACnB,OAAO,CAAC,WAAW,CAAC,aAAa,CAAC;wBAClC,OAAO,CAAC,WAAW,CAAC,aAAa,CAAC;wBAClC,aAAa,CAAC,kBAAkB,EAAE,KAAK,SAAS;wBAChD,aAAa,CAAC,kBAAkB,EAAE,KAAK,SAAS,CAAC;oBAEnD,IAAI,eAAe,EAAE,CAAC;wBACpB,MAAM,KAAK,GAAG,kBAAkB,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;wBACnD,OAAO,CAAC,MAAM,CAAC;4BACb,MAAM,EAAE,mCAAmC;4BAC3C,QAAQ,EAAE,YAAY;4BACtB,QAAQ,EAAE,SAAS;4BACnB,UAAU,EAAE,QAAQ;4BACpB,OAAO,EAAE,mEAAmE;4BAC5E,IAAI,EAAE,UAAU,CAAC,QAAQ;4BACzB,KAAK;4BACL,QAAQ,EAAE;gCACR;oCACE,OAAO,EAAE,gIAAgI;oCACzI,KAAK;iCACN;6BACF;4BACD,eAAe,EAAE,4EAA4E;4BAC7F,gBAAgB,EAAE,KAAK;4BACvB,kBAAkB,EAAE,IAAI;yBACzB,CAAC,CAAC;oBACL,CAAC;gBACH,CAAC;gBAAC,MAAM,CAAC;oBACP,4BAA4B;gBAC9B,CAAC;YACH,CAAC;QACH,CAAC,CAAC,CAAC;IACL,CAAC;CACF,CAAC"}

package/dist/rules/typescript/unsafeUnvalidatedAssertion.d.ts

@@ -0,0 +1,3 @@
+import type { Rule } from "../../core/types.js";
+export declare const unsafeUnvalidatedAssertionRule: Rule;
+//# sourceMappingURL=unsafeUnvalidatedAssertion.d.ts.map

package/dist/rules/typescript/unsafeUnvalidatedAssertion.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"unsafeUnvalidatedAssertion.d.ts","sourceRoot":"","sources":["../../../src/rules/typescript/unsafeUnvalidatedAssertion.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,IAAI,EAAe,MAAM,qBAAqB,CAAC;AAU7D,eAAO,MAAM,8BAA8B,EAAE,IA+F5C,CAAC"}

package/dist/rules/typescript/unsafeUnvalidatedAssertion.js

@@ -0,0 +1,94 @@
+import { getNodeSourceRange } from "../../engine/symbols.js";
+function unwrapExpression(expr, ts) {
+    let current = expr;
+    while (ts.isParenthesizedExpression(current) || ts.isAwaitExpression(current)) {
+        current = current.expression;
+    }
+    return current;
+}
+export const unsafeUnvalidatedAssertionRule = {
+    meta: {
+        id: "typescript/unsafe-unvalidated-assertion",
+        category: "typescript",
+        defaultSeverity: "error",
+        defaultConfidence: "high",
+        description: "Detects runtime boundary data asserted directly to domain types without validation.",
+        requiresTypeInformation: false,
+    },
+    analyze(context) {
+        const { sourceFile, ts } = context;
+        if (!ts)
+            return;
+        context.visitNodes((node) => {
+            let expr;
+            let typeNode;
+            if (ts.isAsExpression(node)) {
+                expr = node.expression;
+                typeNode = node.type;
+            }
+            else if (ts.isTypeAssertionExpression(node)) {
+                expr = node.expression;
+                typeNode = node.type;
+            }
+            if (!expr || !typeNode)
+                return;
+            // Check if target type is any, unknown, or primitive (safe boundary / widening)
+            if (typeNode.kind === ts.SyntaxKind.AnyKeyword ||
+                typeNode.kind === ts.SyntaxKind.UnknownKeyword ||
+                typeNode.kind === ts.SyntaxKind.StringKeyword ||
+                typeNode.kind === ts.SyntaxKind.NumberKeyword ||
+                typeNode.kind === ts.SyntaxKind.BooleanKeyword) {
+                return;
+            }
+            // Check if the inner expression is a runtime boundary call
+            let isRuntimeBoundary = false;
+            let boundaryName = "";
+            const targetExpr = unwrapExpression(expr, ts);
+            if (ts.isCallExpression(targetExpr)) {
+                const callTarget = targetExpr.expression;
+                // 1. JSON.parse(...)
+                if (ts.isPropertyAccessExpression(callTarget)) {
+                    if (ts.isIdentifier(callTarget.expression) &&
+                        callTarget.expression.text === "JSON" &&
+                        callTarget.name.text === "parse") {
+                        isRuntimeBoundary = true;
+                        boundaryName = "JSON.parse()";
+                    }
+                    else if (callTarget.name.text === "json") {
+                        // 2. response.json()
+                        isRuntimeBoundary = true;
+                        boundaryName = "response.json()";
+                    }
+                    else if (callTarget.name.text === "getItem" &&
+                        ts.isIdentifier(callTarget.expression) &&
+                        (callTarget.expression.text === "localStorage" || callTarget.expression.text === "sessionStorage")) {
+                        // 3. localStorage.getItem(...)
+                        isRuntimeBoundary = true;
+                        boundaryName = `${callTarget.expression.text}.getItem()`;
+                    }
+                }
+            }
+            if (isRuntimeBoundary) {
+                const range = getNodeSourceRange(node, sourceFile);
+                context.report({
+                    ruleId: "typescript/unsafe-unvalidated-assertion",
+                    category: "typescript",
+                    severity: "error",
+                    confidence: "high",
+                    message: `Runtime boundary data from ${boundaryName} is asserted to type without runtime validation.`,
+                    file: sourceFile.fileName,
+                    range,
+                    evidence: [
+                        {
+                            message: "Type assertions bypass compiler checking without verifying that runtime structure satisfies the target type.",
+                            range,
+                        },
+                    ],
+                    suggestedAction: "Validate payload with a runtime schema validator before asserting or casting.",
+                    safeAutomaticFix: false,
+                });
+            }
+        });
+    },
+};
+//# sourceMappingURL=unsafeUnvalidatedAssertion.js.map

package/dist/rules/typescript/unsafeUnvalidatedAssertion.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"unsafeUnvalidatedAssertion.js","sourceRoot":"","sources":["../../../src/rules/typescript/unsafeUnvalidatedAssertion.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,kBAAkB,EAAE,MAAM,yBAAyB,CAAC;AAG7D,SAAS,gBAAgB,CAAC,IAAuB,EAAE,EAAiB;IAClE,IAAI,OAAO,GAAG,IAAI,CAAC;IACnB,OAAO,EAAE,CAAC,yBAAyB,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,iBAAiB,CAAC,OAAO,CAAC,EAAE,CAAC;QAC9E,OAAO,GAAG,OAAO,CAAC,UAAU,CAAC;IAC/B,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,MAAM,CAAC,MAAM,8BAA8B,GAAS;IAClD,IAAI,EAAE;QACJ,EAAE,EAAE,yCAAyC;QAC7C,QAAQ,EAAE,YAAY;QACtB,eAAe,EAAE,OAAO;QACxB,iBAAiB,EAAE,MAAM;QACzB,WAAW,EAAE,qFAAqF;QAClG,uBAAuB,EAAE,KAAK;KAC/B;IAED,OAAO,CAAC,OAAoB;QAC1B,MAAM,EAAE,UAAU,EAAE,EAAE,EAAE,GAAG,OAAO,CAAC;QACnC,IAAI,CAAC,EAAE;YAAE,OAAO;QAEhB,OAAO,CAAC,UAAU,CAAC,CAAC,IAAiB,EAAE,EAAE;YACvC,IAAI,IAAmC,CAAC;YACxC,IAAI,QAAqC,CAAC;YAE1C,IAAI,EAAE,CAAC,cAAc,CAAC,IAAI,CAAC,EAAE,CAAC;gBAC5B,IAAI,GAAG,IAAI,CAAC,UAAU,CAAC;gBACvB,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC;YACvB,CAAC;iBAAM,IAAI,EAAE,CAAC,yBAAyB,CAAC,IAAI,CAAC,EAAE,CAAC;gBAC9C,IAAI,GAAG,IAAI,CAAC,UAAU,CAAC;gBACvB,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC;YACvB,CAAC;YAED,IAAI,CAAC,IAAI,IAAI,CAAC,QAAQ;gBAAE,OAAO;YAE/B,gFAAgF;YAChF,IACE,QAAQ,CAAC,IAAI,KAAK,EAAE,CAAC,UAAU,CAAC,UAAU;gBAC1C,QAAQ,CAAC,IAAI,KAAK,EAAE,CAAC,UAAU,CAAC,cAAc;gBAC9C,QAAQ,CAAC,IAAI,KAAK,EAAE,CAAC,UAAU,CAAC,aAAa;gBAC7C,QAAQ,CAAC,IAAI,KAAK,EAAE,CAAC,UAAU,CAAC,aAAa;gBAC7C,QAAQ,CAAC,IAAI,KAAK,EAAE,CAAC,UAAU,CAAC,cAAc,EAC9C,CAAC;gBACD,OAAO;YACT,CAAC;YAED,2DAA2D;YAC3D,IAAI,iBAAiB,GAAG,KAAK,CAAC;YAC9B,IAAI,YAAY,GAAG,EAAE,CAAC;YAEtB,MAAM,UAAU,GAAG,gBAAgB,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;YAE9C,IAAI,EAAE,CAAC,gBAAgB,CAAC,UAAU,CAAC,EAAE,CAAC;gBACpC,MAAM,UAAU,GAAG,UAAU,CAAC,UAAU,CAAC;gBAEzC,qBAAqB;gBACrB,IAAI,EAAE,CAAC,0BAA0B,CAAC,UAAU,CAAC,EAAE,CAAC;oBAC9C,IACE,EAAE,CAAC,YAAY,CAAC,UAAU,CAAC,UAAU,CAAC;wBACtC,UAAU,CAAC,UAAU,CAAC,IAAI,KAAK,MAAM;wBACrC,UAAU,CAAC,IAAI,CAAC,IAAI,KAAK,OAAO,EAChC,CAAC;wBACD,iBAAiB,GAAG,IAAI,CAAC;wBACzB,YAAY,GAAG,cAAc,CAAC;oBAChC,CAAC;yBAAM,IAAI,UAAU,CAAC,IAAI,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;wBAC3C,qBAAqB;wBACrB,iBAAiB,GAAG,IAAI,CAAC;wBACzB,YAAY,GAAG,iBAAiB,CAAC;oBACnC,CAAC;yBAAM,IACL,UAAU,CAAC,IAAI,CAAC,IAAI,KAAK,SAAS;wBAClC,EAAE,CAAC,YAAY,CAAC,UAAU,CAAC,UAAU,CAAC;wBACtC,CAAC,UAAU,CAAC,UAAU,CAAC,IAAI,KAAK,cAAc,IAAI,UAAU,CAAC,UAAU,CAAC,IAAI,KAAK,gBAAgB,CAAC,EAClG,CAAC;wBACD,+BAA+B;wBAC/B,iBAAiB,GAAG,IAAI,CAAC;wBACzB,YAAY,GAAG,GAAG,UAAU,CAAC,UAAU,CAAC,IAAI,YAAY,CAAC;oBAC3D,CAAC;gBACH,CAAC;YACH,CAAC;YAED,IAAI,iBAAiB,EAAE,CAAC;gBACtB,MAAM,KAAK,GAAG,kBAAkB,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;gBACnD,OAAO,CAAC,MAAM,CAAC;oBACb,MAAM,EAAE,yCAAyC;oBACjD,QAAQ,EAAE,YAAY;oBACtB,QAAQ,EAAE,OAAO;oBACjB,UAAU,EAAE,MAAM;oBAClB,OAAO,EAAE,8BAA8B,YAAY,kDAAkD;oBACrG,IAAI,EAAE,UAAU,CAAC,QAAQ;oBACzB,KAAK;oBACL,QAAQ,EAAE;wBACR;4BACE,OAAO,EAAE,8GAA8G;4BACvH,KAAK;yBACN;qBACF;oBACD,eAAe,EAAE,+EAA+E;oBAChG,gBAAgB,EAAE,KAAK;iBACxB,CAAC,CAAC;YACL,CAAC;QACH,CAAC,CAAC,CAAC;IACL,CAAC;CACF,CAAC"}

package/dist/strictness/evaluator.d.ts

@@ -0,0 +1,28 @@
+import type { RepositoryContext } from "../repository/types.js";
+import type { TypeScriptInstance } from "../repository/tsLoader.js";
+export interface StrictnessFlagStatus {
+    readonly name: string;
+    readonly enabled: boolean;
+    readonly potentialDiagnosticCount: number;
+}
+export interface StrictnessReport {
+    readonly currentFlags: readonly StrictnessFlagStatus[];
+    readonly topAffectedFiles: ReadonlyArray<{
+        readonly file: string;
+        readonly diagnostics: number;
+    }>;
+    readonly totalMigrationImpact: number;
+}
+/**
+ * Runs strictness gap analysis using the repository's TypeScript compiler.
+ * Compares derived compiler diagnostics against current baseline diagnostics
+ * to count only newly introduced migration issues.
+ */
+export declare function evaluateStrictnessGap(repo: RepositoryContext, tsInst: TypeScriptInstance): StrictnessReport;
+/**
+ * Formats a StrictnessReport for terminal output.
+ */
+export declare function renderStrictnessReport(report: StrictnessReport, options?: {
+    readonly color?: boolean | undefined;
+} | undefined): string;
+//# sourceMappingURL=evaluator.d.ts.map

package/dist/strictness/evaluator.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"evaluator.d.ts","sourceRoot":"","sources":["../../src/strictness/evaluator.ts"],"names":[],"mappings":"AAMA,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,wBAAwB,CAAC;AAChE,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,2BAA2B,CAAC;AAEpE,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;IAC1B,QAAQ,CAAC,wBAAwB,EAAE,MAAM,CAAC;CAC3C;AAED,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,YAAY,EAAE,SAAS,oBAAoB,EAAE,CAAC;IACvD,QAAQ,CAAC,gBAAgB,EAAE,aAAa,CAAC;QAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAClG,QAAQ,CAAC,oBAAoB,EAAE,MAAM,CAAC;CACvC;AAiBD;;;;GAIG;AACH,wBAAgB,qBAAqB,CACnC,IAAI,EAAE,iBAAiB,EACvB,MAAM,EAAE,kBAAkB,GACzB,gBAAgB,CA+FlB;AAED;;GAEG;AACH,wBAAgB,sBAAsB,CACpC,MAAM,EAAE,gBAAgB,EACxB,OAAO,CAAC,EAAE;IAAE,QAAQ,CAAC,KAAK,CAAC,EAAE,OAAO,GAAG,SAAS,CAAA;CAAE,GAAG,SAAS,GAC7D,MAAM,CA0CR"}

package/dist/strictness/evaluator.js

@@ -0,0 +1,141 @@
+import { normalizePath } from "../core/paths.js";
+import { createStyler } from "../core/terminal.js";
+import { resolveTsProjects } from "../typescript/projectResolver.js";
+import { STRICTNESS_FLAGS } from "./matrix.js";
+/**
+ * Generates a stable semantic identity key for a compiler diagnostic.
+ */
+function getDiagnosticSemanticKey(diag, repoRoot) {
+    const fileKey = diag.file ? normalizePath(diag.file.fileName, repoRoot) : "<global>";
+    const start = diag.start ?? -1;
+    const length = diag.length ?? -1;
+    const code = diag.code;
+    const message = typeof diag.messageText === "string"
+        ? diag.messageText
+        : diag.messageText?.messageText ?? "";
+    return `${fileKey}::${code}::${start}::${length}::${message}`;
+}
+/**
+ * Runs strictness gap analysis using the repository's TypeScript compiler.
+ * Compares derived compiler diagnostics against current baseline diagnostics
+ * to count only newly introduced migration issues.
+ */
+export function evaluateStrictnessGap(repo, tsInst) {
+    const ts = tsInst.ts;
+    const projects = resolveTsProjects(repo, tsInst);
+    const flagResults = [];
+    const fileDiagnosticCounts = new Map();
+    // 1. Gather baseline diagnostics per project under current repository settings
+    const projectBaselineKeys = new Map();
+    for (const proj of projects) {
+        if (proj.fileNames.length === 0)
+            continue;
+        const baseHost = ts.createCompilerHost(proj.rawCompilerOptions, true);
+        const baseProgram = ts.createProgram({
+            rootNames: proj.fileNames,
+            options: proj.rawCompilerOptions,
+            host: baseHost,
+        });
+        const baseDiagnostics = baseProgram.getSemanticDiagnostics();
+        const baseKeys = new Set();
+        for (const diag of baseDiagnostics) {
+            baseKeys.add(getDiagnosticSemanticKey(diag, repo.rootDir));
+        }
+        projectBaselineKeys.set(proj.configPath, baseKeys);
+    }
+    let totalImpact = 0;
+    // 2. Evaluate migration impact for each strictness flag individually
+    for (const flagDef of STRICTNESS_FLAGS) {
+        const key = flagDef.compilerKey;
+        let isGloballyEnabled = true;
+        let flagDeltaCount = 0;
+        for (const proj of projects) {
+            if (proj.fileNames.length === 0)
+                continue;
+            const opts = proj.rawCompilerOptions;
+            // In TypeScript, strict: true enables several sub-flags if not explicitly false
+            const currentVal = Boolean(opts[key]);
+            if (!currentVal) {
+                isGloballyEnabled = false;
+                // Create derived in-memory compiler options
+                const derivedOptions = {
+                    ...opts,
+                    [key]: true,
+                };
+                const host = ts.createCompilerHost(derivedOptions, true);
+                const derivedProgram = ts.createProgram({
+                    rootNames: proj.fileNames,
+                    options: derivedOptions,
+                    host,
+                });
+                const allDiagnostics = derivedProgram.getSemanticDiagnostics();
+                const baseKeys = projectBaselineKeys.get(proj.configPath) ?? new Set();
+                // Only count diagnostics that are NEWLY introduced by enabling this flag
+                const newDiagnostics = allDiagnostics.filter((diag) => !baseKeys.has(getDiagnosticSemanticKey(diag, repo.rootDir)));
+                flagDeltaCount += newDiagnostics.length;
+                for (const diag of newDiagnostics) {
+                    if (diag.file) {
+                        const relFile = normalizePath(diag.file.fileName, repo.rootDir);
+                        fileDiagnosticCounts.set(relFile, (fileDiagnosticCounts.get(relFile) ?? 0) + 1);
+                    }
+                }
+            }
+        }
+        totalImpact += flagDeltaCount;
+        flagResults.push({
+            name: flagDef.name,
+            enabled: isGloballyEnabled,
+            potentialDiagnosticCount: flagDeltaCount,
+        });
+    }
+    // Sort top affected files descending
+    const topAffectedFiles = Array.from(fileDiagnosticCounts.entries())
+        .map(([file, diagnostics]) => ({ file, diagnostics }))
+        .sort((a, b) => b.diagnostics - a.diagnostics)
+        .slice(0, 10);
+    return {
+        currentFlags: flagResults,
+        topAffectedFiles,
+        totalMigrationImpact: totalImpact,
+    };
+}
+/**
+ * Formats a StrictnessReport for terminal output.
+ */
+export function renderStrictnessReport(report, options) {
+    const styler = createStyler(options?.color !== undefined ? { color: options.color } : undefined);
+    const lines = [];
+    lines.push(styler.bold("TypeScript strictness gap"));
+    lines.push("");
+    lines.push("Current configuration:");
+    lines.push("");
+    for (const flag of report.currentFlags) {
+        const paddedName = flag.name.padEnd(30, " ");
+        const status = flag.enabled ? styler.green("true") : styler.dim("false");
+        lines.push(`  ${paddedName} ${status}`);
+    }
+    lines.push("");
+    lines.push("Potential migration impact:");
+    lines.push("");
+    for (const flag of report.currentFlags) {
+        if (!flag.enabled) {
+            const paddedName = flag.name.padEnd(30, " ");
+            const countStr = flag.potentialDiagnosticCount > 0
+                ? styler.yellow(`${flag.potentialDiagnosticCount} findings`)
+                : "0 findings";
+            lines.push(`  ${paddedName}  ${countStr}`);
+        }
+    }
+    if (report.topAffectedFiles.length > 0) {
+        lines.push("");
+        lines.push("Most affected files:");
+        lines.push("");
+        for (const f of report.topAffectedFiles) {
+            const paddedFile = f.file.padEnd(32, " ");
+            lines.push(`  ${paddedFile}  ${f.diagnostics}`);
+        }
+    }
+    lines.push("");
+    return lines.join("\n");
+}
+//# sourceMappingURL=evaluator.js.map

package/dist/strictness/evaluator.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"evaluator.js","sourceRoot":"","sources":["../../src/strictness/evaluator.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AACjD,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACnD,OAAO,EAAE,iBAAiB,EAAE,MAAM,kCAAkC,CAAC;AACrE,OAAO,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAgB/C;;GAEG;AACH,SAAS,wBAAwB,CAAC,IAAuB,EAAE,QAAgB;IACzE,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC;IACrF,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,IAAI,CAAC,CAAC,CAAC;IAC/B,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,IAAI,CAAC,CAAC,CAAC;IACjC,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC;IACvB,MAAM,OAAO,GACX,OAAO,IAAI,CAAC,WAAW,KAAK,QAAQ;QAClC,CAAC,CAAC,IAAI,CAAC,WAAW;QAClB,CAAC,CAAC,IAAI,CAAC,WAAW,EAAE,WAAW,IAAI,EAAE,CAAC;IAC1C,OAAO,GAAG,OAAO,KAAK,IAAI,KAAK,KAAK,KAAK,MAAM,KAAK,OAAO,EAAE,CAAC;AAChE,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,qBAAqB,CACnC,IAAuB,EACvB,MAA0B;IAE1B,MAAM,EAAE,GAAG,MAAM,CAAC,EAAE,CAAC;IACrB,MAAM,QAAQ,GAAG,iBAAiB,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IACjD,MAAM,WAAW,GAA2B,EAAE,CAAC;IAC/C,MAAM,oBAAoB,GAAG,IAAI,GAAG,EAAkB,CAAC;IAEvD,+EAA+E;IAC/E,MAAM,mBAAmB,GAAG,IAAI,GAAG,EAAuB,CAAC;IAC3D,KAAK,MAAM,IAAI,IAAI,QAAQ,EAAE,CAAC;QAC5B,IAAI,IAAI,CAAC,SAAS,CAAC,MAAM,KAAK,CAAC;YAAE,SAAS;QAE1C,MAAM,QAAQ,GAAG,EAAE,CAAC,kBAAkB,CAAC,IAAI,CAAC,kBAAkB,EAAE,IAAI,CAAC,CAAC;QACtE,MAAM,WAAW,GAAG,EAAE,CAAC,aAAa,CAAC;YACnC,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,OAAO,EAAE,IAAI,CAAC,kBAAkB;YAChC,IAAI,EAAE,QAAQ;SACf,CAAC,CAAC;QAEH,MAAM,eAAe,GAAG,WAAW,CAAC,sBAAsB,EAAE,CAAC;QAC7D,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAU,CAAC;QACnC,KAAK,MAAM,IAAI,IAAI,eAAe,EAAE,CAAC;YACnC,QAAQ,CAAC,GAAG,CAAC,wBAAwB,CAAC,IAAI,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC;QAC7D,CAAC;QACD,mBAAmB,CAAC,GAAG,CAAC,IAAI,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC;IACrD,CAAC;IAED,IAAI,WAAW,GAAG,CAAC,CAAC;IAEpB,qEAAqE;IACrE,KAAK,MAAM,OAAO,IAAI,gBAAgB,EAAE,CAAC;QACvC,MAAM,GAAG,GAAG,OAAO,CAAC,WAAW,CAAC;QAChC,IAAI,iBAAiB,GAAG,IAAI,CAAC;QAC7B,IAAI,cAAc,GAAG,CAAC,CAAC;QAEvB,KAAK,MAAM,IAAI,IAAI,QAAQ,EAAE,CAAC;YAC5B,IAAI,IAAI,CAAC,SAAS,CAAC,MAAM,KAAK,CAAC;gBAAE,SAAS;YAE1C,MAAM,IAAI,GAAG,IAAI,CAAC,kBAAkB,CAAC;YACrC,gFAAgF;YAChF,MAAM,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC,GAAmC,CAAC,CAAC,CAAC;YAEtE,IAAI,CAAC,UAAU,EAAE,CAAC;gBAChB,iBAAiB,GAAG,KAAK,CAAC;gBAE1B,4CAA4C;gBAC5C,MAAM,cAAc,GAA2B;oBAC7C,GAAG,IAAI;oBACP,CAAC,GAAG,CAAC,EAAE,IAAI;iBACZ,CAAC;gBAEF,MAAM,IAAI,GAAG,EAAE,CAAC,kBAAkB,CAAC,cAAc,EAAE,IAAI,CAAC,CAAC;gBACzD,MAAM,cAAc,GAAG,EAAE,CAAC,aAAa,CAAC;oBACtC,SAAS,EAAE,IAAI,CAAC,SAAS;oBACzB,OAAO,EAAE,cAAc;oBACvB,IAAI;iBACL,CAAC,CAAC;gBAEH,MAAM,cAAc,GAAG,cAAc,CAAC,sBAAsB,EAAE,CAAC;gBAC/D,MAAM,QAAQ,GAAG,mBAAmB,CAAC,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,IAAI,GAAG,EAAU,CAAC;gBAE/E,yEAAyE;gBACzE,MAAM,cAAc,GAAG,cAAc,CAAC,MAAM,CAC1C,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,wBAAwB,CAAC,IAAI,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC,CACtE,CAAC;gBAEF,cAAc,IAAI,cAAc,CAAC,MAAM,CAAC;gBAExC,KAAK,MAAM,IAAI,IAAI,cAAc,EAAE,CAAC;oBAClC,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;wBACd,MAAM,OAAO,GAAG,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;wBAChE,oBAAoB,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC,oBAAoB,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;oBAClF,CAAC;gBACH,CAAC;YACH,CAAC;QACH,CAAC;QAED,WAAW,IAAI,cAAc,CAAC;QAC9B,WAAW,CAAC,IAAI,CAAC;YACf,IAAI,EAAE,OAAO,CAAC,IAAI;YAClB,OAAO,EAAE,iBAAiB;YAC1B,wBAAwB,EAAE,cAAc;SACzC,CAAC,CAAC;IACL,CAAC;IAED,qCAAqC;IACrC,MAAM,gBAAgB,GAAG,KAAK,CAAC,IAAI,CAAC,oBAAoB,CAAC,OAAO,EAAE,CAAC;SAChE,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,WAAW,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC,CAAC;SACrD,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,GAAG,CAAC,CAAC,WAAW,CAAC;SAC7C,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IAEhB,OAAO;QACL,YAAY,EAAE,WAAW;QACzB,gBAAgB;QAChB,oBAAoB,EAAE,WAAW;KAClC,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,sBAAsB,CACpC,MAAwB,EACxB,OAA8D;IAE9D,MAAM,MAAM,GAAG,YAAY,CAAC,OAAO,EAAE,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;IACjG,MAAM,KAAK,GAAa,EAAE,CAAC;IAE3B,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,2BAA2B,CAAC,CAAC,CAAC;IACrD,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACf,KAAK,CAAC,IAAI,CAAC,wBAAwB,CAAC,CAAC;IACrC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAEf,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,YAAY,EAAE,CAAC;QACvC,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC;QAC7C,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QACzE,KAAK,CAAC,IAAI,CAAC,KAAK,UAAU,IAAI,MAAM,EAAE,CAAC,CAAC;IAC1C,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACf,KAAK,CAAC,IAAI,CAAC,6BAA6B,CAAC,CAAC;IAC1C,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAEf,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,YAAY,EAAE,CAAC;QACvC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;YAClB,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC;YAC7C,MAAM,QAAQ,GACZ,IAAI,CAAC,wBAAwB,GAAG,CAAC;gBAC/B,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC,wBAAwB,WAAW,CAAC;gBAC5D,CAAC,CAAC,YAAY,CAAC;YACnB,KAAK,CAAC,IAAI,CAAC,KAAK,UAAU,KAAK,QAAQ,EAAE,CAAC,CAAC;QAC7C,CAAC;IACH,CAAC;IAED,IAAI,MAAM,CAAC,gBAAgB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACvC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACf,KAAK,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAC;QACnC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACf,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,gBAAgB,EAAE,CAAC;YACxC,MAAM,UAAU,GAAG,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC;YAC1C,KAAK,CAAC,IAAI,CAAC,KAAK,UAAU,KAAK,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC;QAClD,CAAC;IACH,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACf,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC"}

package/dist/strictness/matrix.d.ts

@@ -0,0 +1,8 @@
+export interface StrictnessFlagDefinition {
+    readonly name: string;
+    readonly compilerKey: string;
+    readonly description: string;
+    readonly category: "strict-family" | "null-safety" | "index-safety" | "typing-rigor";
+}
+export declare const STRICTNESS_FLAGS: readonly StrictnessFlagDefinition[];
+//# sourceMappingURL=matrix.d.ts.map

package/dist/strictness/matrix.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"matrix.d.ts","sourceRoot":"","sources":["../../src/strictness/matrix.ts"],"names":[],"mappings":"AAAA,MAAM,WAAW,wBAAwB;IACvC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,QAAQ,EAAE,eAAe,GAAG,aAAa,GAAG,cAAc,GAAG,cAAc,CAAC;CACtF;AAED,eAAO,MAAM,gBAAgB,EAAE,SAAS,wBAAwB,EA6DtD,CAAC"}

package/dist/strictness/matrix.js

@@ -0,0 +1,63 @@
+export const STRICTNESS_FLAGS = [
+    {
+        name: "strict",
+        compilerKey: "strict",
+        description: "Enables all strict type-checking options family.",
+        category: "strict-family",
+    },
+    {
+        name: "strictNullChecks",
+        compilerKey: "strictNullChecks",
+        description: "Considers null and undefined in type checks.",
+        category: "null-safety",
+    },
+    {
+        name: "noImplicitAny",
+        compilerKey: "noImplicitAny",
+        description: "Raises error on expressions and declarations with an implied any type.",
+        category: "typing-rigor",
+    },
+    {
+        name: "strictFunctionTypes",
+        compilerKey: "strictFunctionTypes",
+        description: "Enforces contravariant parameter checking on function types.",
+        category: "typing-rigor",
+    },
+    {
+        name: "strictBindCallApply",
+        compilerKey: "strictBindCallApply",
+        description: "Enforces strict type checks on bind, call, and apply methods.",
+        category: "typing-rigor",
+    },
+    {
+        name: "strictPropertyInitialization",
+        compilerKey: "strictPropertyInitialization",
+        description: "Ensures non-undefined class properties are initialized in the constructor.",
+        category: "null-safety",
+    },
+    {
+        name: "useUnknownInCatchVariables",
+        compilerKey: "useUnknownInCatchVariables",
+        description: "Types catch clause variables as unknown rather than any.",
+        category: "typing-rigor",
+    },
+    {
+        name: "noUncheckedIndexedAccess",
+        compilerKey: "noUncheckedIndexedAccess",
+        description: "Adds undefined to index signatures and array lookups.",
+        category: "index-safety",
+    },
+    {
+        name: "exactOptionalPropertyTypes",
+        compilerKey: "exactOptionalPropertyTypes",
+        description: "Differentiates optional properties from properties set to undefined.",
+        category: "typing-rigor",
+    },
+    {
+        name: "noImplicitOverride",
+        compilerKey: "noImplicitOverride",
+        description: "Requires override keyword on subclass overridden methods.",
+        category: "typing-rigor",
+    },
+];
+//# sourceMappingURL=matrix.js.map