supplychain_security_sdk 1.0.0

package/README.MD

@@ -0,0 +1,20 @@
+# 前端供应链安全SDK
+## 构建
+```shell
+npm i
+npm run build
+```
+bundle/index.js 即为SDK产物, 是webpack插件, 可在webpack.config.js中引入
+## 引入
+```js
+const SecSDK = require("../sdk/index").default;
+new SecSDK({
+    // 配置webpack运行时隔离防护, 禁止三方代码访问一方代码
+    isolation: {
+        // 一方代码路径
+        firstPartyPaths: ["./src"],
+        // 三方代码路径
+        thirdPartyPaths: ["./node_modules", "./malware_attack_npm"]
+    }
+}),
+```

package/dist/build.js

@@ -0,0 +1,428 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.harden = exports.makeCompartment = void 0;
+exports.protectModuleRef = protectModuleRef;
+const t = __importStar(require("@babel/types"));
+const traverse_1 = __importDefault(require("@babel/traverse"));
+const parser_1 = require("@babel/parser");
+const generator_1 = require("@babel/generator");
+const util_1 = require("./util/util");
+const makeCompartment = (__rules, __moduleID = 0, __dev = false) => {
+    const ECMAGlobals = new Set([
+        "AggregateError",
+        "Array",
+        "ArrayBuffer",
+        "Atomics",
+        "BigInt",
+        "BigInt64Array",
+        "BigUint64Array",
+        "Boolean",
+        "DataView",
+        "Date",
+        "Error",
+        "EvalError",
+        "FinalizationRegistry",
+        "Float16Array",
+        "Float32Array",
+        "Float64Array",
+        "Function",
+        "Infinity",
+        "Int16Array",
+        "Int32Array",
+        "Int8Array",
+        "Intl",
+        "Iterator",
+        "JSON",
+        "Map",
+        "Math",
+        "NaN",
+        "Number",
+        "Object",
+        "Promise",
+        "Proxy",
+        "RangeError",
+        "ReferenceError",
+        "Reflect",
+        "RegExp",
+        "Set",
+        "SharedArrayBuffer",
+        "String",
+        "Symbol",
+        "SyntaxError",
+        "TypeError",
+        "Uint16Array",
+        "Uint32Array",
+        "Uint8Array",
+        "Uint8ClampedArray",
+        "URIError",
+        "WeakMap",
+        "WeakRef",
+        "WeakSet",
+        "decodeURI",
+        "decodeURIComponent",
+        "encodeURI",
+        "encodeURIComponent",
+        "escape",
+        // "eval",
+        "globalThis",
+        "isFinite",
+        "isNaN",
+        "parseFloat",
+        "parseInt",
+        "undefined",
+        "unescape",
+    ]);
+    const proxyObj = new WeakMap();
+    const devProp = "__ru1nSecSDK";
+    const devResult = { allow: {}, disallow: {} };
+    if (__dev) {
+        //@ts-expect-error
+        if (globalThis[devProp] == null) {
+            //@ts-expect-error
+            globalThis[devProp] = {};
+        }
+        //@ts-expect-error
+        if (globalThis[devProp][__moduleID] == null) {
+            //@ts-expect-error
+            globalThis[devProp][__moduleID] = devResult;
+        }
+    }
+    __rules = structuredClone(__rules);
+    Object.freeze(__rules);
+    const proxyGlobalThis = new Proxy(globalThis, {
+        get(target, prop, receiver) {
+            if (typeof prop === "symbol") {
+                return Reflect.get(target, prop, target);
+            }
+            if (["globalThis", "window", "self"].includes(prop)) {
+                return proxyGlobalThis;
+            }
+            let can = false;
+            let add_rule = false;
+            if (__rules.has(prop) || ECMAGlobals.has(prop)) {
+                can = true;
+            }
+            else if (__dev) {
+                can = true;
+                add_rule = true;
+            }
+            if (add_rule) {
+                if (!__rules.has(prop)) {
+                    if (!(prop in devResult.allow)) {
+                        //@ts-expect-error
+                        devResult.allow[prop] = "r";
+                    }
+                }
+            }
+            if (can) {
+                let tv = Reflect.get(target, prop, target);
+                if (typeof tv === "function") {
+                    if (proxyObj.has(tv)) {
+                        tv = proxyObj.get(tv);
+                    }
+                    else {
+                        const ptv = new Proxy(tv, {
+                            apply(target, thisArg, argArray) {
+                                if (thisArg === proxyGlobalThis) {
+                                    thisArg = globalThis;
+                                }
+                                return Reflect.apply(target, thisArg, argArray);
+                            },
+                        });
+                        proxyObj.set(tv, ptv);
+                        tv = ptv;
+                    }
+                }
+                return tv;
+            }
+            console.warn(`trying to access prop ${prop} from ${__moduleID}`);
+        },
+        set(target, p, newValue, receiver) {
+            if (typeof p === "symbol") {
+                return Reflect.set(target, p, newValue, target);
+            }
+            if (__dev || (__rules.has(p) && __rules.get(p) === "rw")) {
+                if (!(__rules.has(p) && __rules.get(p) === "rw")) {
+                    //@ts-expect-error
+                    devResult.allow[p] = "rw";
+                }
+                return Reflect.set(target, p, newValue, target);
+            }
+            console.warn(`trying to set prop ${p} from ${__moduleID}`);
+            return false;
+        },
+    });
+    return proxyGlobalThis;
+};
+exports.makeCompartment = makeCompartment;
+const harden = () => {
+    // 冻结内置对象
+    const objs = [
+        "Array",
+        "Map",
+        "Set",
+        "WeakMap",
+        "WeakSet",
+        "Function",
+        "Promise",
+        "String",
+    ];
+    const skipProps = new Set(["size", "length"]);
+    for (const obj of objs) {
+        //@ts-expect-error
+        const o = globalThis[obj];
+        if (o && typeof o === "function" && typeof o.prototype === "object") {
+            // 首先处理原型链
+            Object.getOwnPropertyNames(o.prototype).forEach((prop) => {
+                if (skipProps.has(prop)) {
+                    return;
+                }
+                const value = o.prototype[prop];
+                Object.defineProperty(o.prototype, prop, {
+                    get() {
+                        return value;
+                    },
+                    set(v) {
+                        if (this !== o.prototype) {
+                            Object.defineProperty(this, prop, {
+                                value: v,
+                            });
+                        }
+                    },
+                });
+            });
+            // 然后冻结对象本身
+            Object.freeze(o);
+        }
+    }
+    // 冻结Object
+    Object.freeze(Object);
+};
+exports.harden = harden;
+const analyzeRule = (map) => {
+    //@ts-expect-error
+    const rule = globalThis.__ru1nSecSDK;
+    if (rule == null) {
+        return;
+    }
+    const result = {};
+    for (const [k, v] of Object.entries(rule)) {
+        const file = map[k];
+        if (file == null) {
+            continue;
+        }
+        //@ts-expect-error
+        if (Object.entries(v.allow).length > 0) {
+            //@ts-expect-error
+            result[file] = {
+                global: {
+                    //@ts-expect-error
+                    allow: v.allow,
+                    disallow: [],
+                },
+            };
+        }
+    }
+    console.log(JSON.stringify(result, null, 4));
+    return result;
+};
+const makeCompartmentFn = (0, parser_1.parseExpression)(exports.makeCompartment.toString());
+const hardenFn = (0, parser_1.parseExpression)(exports.harden.toString());
+function protectModuleRef(assetCode, moduleMap, policy, rootModuleIDs, dev, moduleDependencies, enableProto = true) {
+    const ast = (0, parser_1.parse)(assetCode, {
+        sourceType: "unambiguous",
+    });
+    // 不是webpack标准形式, 直接退出
+    if (!t.isExpressionStatement(ast.program.body[0]) ||
+        !t.isCallExpression(ast.program.body[0].expression) ||
+        !t.isArrowFunctionExpression(ast.program.body[0].expression.callee)) {
+        return;
+    }
+    (0, traverse_1.default)(ast, {
+        ArrowFunctionExpression: (pathFn) => {
+            const makeFnId = t.identifier(pathFn.scope.generateUid("makeFn"));
+            pathFn.traverse({
+                Function(path) {
+                    path.skip();
+                },
+                ObjectExpression: (path) => {
+                    path.skip();
+                    if (path.node.properties.every((e) => t.isObjectProperty(e) && t.isFunction(e.value))) {
+                        if (path.node.properties.every((e) => t.isObjectProperty(e) &&
+                            t.isStringLiteral(e.key)) ||
+                            path.node.properties.every((e) => t.isObjectProperty(e) &&
+                                t.isNumericLiteral(e.key))) {
+                            path.traverse({
+                                ObjectProperty(propPath) {
+                                    propPath.skip();
+                                    let mid = propPath.node.key.value;
+                                    // 不对root module添加限制
+                                    if (rootModuleIDs.has(mid)) {
+                                        return;
+                                    }
+                                    const file = moduleMap.getByKey(mid);
+                                    if (file == null) {
+                                        console.log(`unknown module id ${mid}`);
+                                        return;
+                                    }
+                                    const config = policy.getItem(file);
+                                    if (config == null) {
+                                        console.log(`no config item for ${mid}`);
+                                        return;
+                                    }
+                                    // 构建依赖的模块
+                                    const dependency = moduleDependencies.get(mid);
+                                    if (dependency == null) {
+                                        throw new Error(`no dependency for ${mid}`);
+                                    }
+                                    const dependencyMid = new Set();
+                                    for (const dep of dependency) {
+                                        const depFile = moduleMap.getByKey(dep);
+                                        if (depFile == null) {
+                                            console.log(`[*] unknown dependency module id ${dep}`);
+                                            dependencyMid.add(dep);
+                                            continue;
+                                        }
+                                        if (config.dependency.includes(depFile)) {
+                                            dependencyMid.add(dep);
+                                        }
+                                        else {
+                                            console.log(`[*] skip dependency module id ${dep}`);
+                                        }
+                                    }
+                                    const rule = util_1.Util.toJSON(config.global);
+                                    const fn = propPath.node.value;
+                                    if (!t.isBlockStatement(fn.body)) {
+                                        fn.body = t.blockStatement([
+                                            t.returnStatement(fn.body),
+                                        ]);
+                                    }
+                                    const newFnBody = t.blockStatement([]);
+                                    if (!fn.params.every((p) => t.isIdentifier(p))) {
+                                        throw new Error(`Only identifier parameters are supported`);
+                                    }
+                                    // 如果参数个数小于3, 则补齐, 便于处理
+                                    if (fn.params.length < 3) {
+                                        const params = [
+                                            "module",
+                                            "__webpack_exports__",
+                                            "__webpack_require__",
+                                        ];
+                                        for (let i = fn.params.length; i < 3; i++) {
+                                            fn.params.push(t.identifier(params[i]));
+                                        }
+                                    }
+                                    newFnBody.body.push(t.withStatement(t.assignmentExpression("=", (0, parser_1.parseExpression)(`__webpack_require__.g`), t.identifier("globalThis")), t.expressionStatement(t.callExpression(t.memberExpression(fn, t.identifier("call")), [
+                                        t.thisExpression(),
+                                        ...fn.params,
+                                    ]))));
+                                    const wrapFnBody = t.withStatement(t.newExpression(t.identifier("Proxy"), [
+                                        t.objectExpression([
+                                            ...fn.params
+                                                .slice(0, 2)
+                                                .map((p) => t.objectProperty(p, p, false, true)),
+                                            t.objectProperty(fn.params[2], t.newExpression(t.identifier("Proxy"), [
+                                                fn.params[2],
+                                                t.objectExpression([
+                                                    t.objectProperty(t.identifier("apply"), (0, parser_1.parseExpression)(`(f, t, a) => {
+                                                                            if (${JSON.stringify(Array.from(dependencyMid))}.includes(a[0])) {
+                                                                                return f.apply(t, a);
+                                                                            } else {
+                                                                                console.warn('trying to require module ' + a[0] + ' from ' + ${JSON.stringify(file)});
+                                                                            }
+                                                                        }`)),
+                                                ]),
+                                            ])),
+                                            ...fn.params
+                                                .slice(3)
+                                                .map((p) => t.objectProperty(p, p, false, true)),
+                                            t.objectProperty(t.identifier("globalThis"), t.callExpression(makeFnId, [
+                                                (0, parser_1.parseExpression)(`new Map(Object.entries(${rule.toString()}))`),
+                                                typeof mid === "number"
+                                                    ? t.numericLiteral(mid)
+                                                    : t.stringLiteral(mid),
+                                                t.booleanLiteral(dev),
+                                            ])),
+                                        ]),
+                                        t.objectExpression([
+                                            t.objectMethod("method", t.identifier("has"), [], t.blockStatement([
+                                                t.returnStatement(t.booleanLiteral(true)),
+                                            ])),
+                                        ]),
+                                    ]), newFnBody);
+                                    const newFn = t.arrowFunctionExpression(fn.params, t.blockStatement([wrapFnBody]));
+                                    propPath.get("value").replaceWith(newFn);
+                                },
+                            });
+                            path.stop();
+                            pathFn.stop();
+                        }
+                    }
+                },
+            });
+            if (!t.isBlockStatement(pathFn.node.body)) {
+                pathFn.node.body = t.blockStatement([
+                    t.returnStatement(pathFn.node.body),
+                ]);
+            }
+            // 添加makeFn函数
+            pathFn.node.body.body.unshift(t.variableDeclaration("const", [
+                t.variableDeclarator(makeFnId, makeCompartmentFn),
+            ]));
+            // 添加原型链保护
+            if (enableProto) {
+                pathFn.node.body.body.unshift(t.expressionStatement(t.callExpression(hardenFn, [])));
+            }
+            if (dev) {
+                const moduleID2File = Object.fromEntries(moduleMap.entries());
+                pathFn.node.body.body.unshift(t.expressionStatement(t.callExpression(t.arrowFunctionExpression([], t.blockStatement([
+                    t.expressionStatement(t.assignmentExpression("=", (0, parser_1.parseExpression)(`globalThis.__ru1nDebug`), t.callExpression(t.memberExpression((0, parser_1.parseExpression)(analyzeRule.toString()), t.identifier("bind"), false), [
+                        t.nullLiteral(),
+                        (0, parser_1.parseExpression)(JSON.stringify(moduleID2File)),
+                    ]))),
+                ])), [])));
+            }
+        },
+    });
+    const generator = new generator_1.CodeGenerator(ast, {
+        sourceMaps: true,
+    });
+    return generator.generate();
+}
+//# sourceMappingURL=data:application/json;base64,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

package/dist/index.js

@@ -0,0 +1,165 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+const util_1 = require("./util/util");
+const config_1 = require("./util/config");
+const analyze_1 = require("./util/analyze");
+const fs = __importStar(require("node:fs"));
+const path = __importStar(require("node:path"));
+const bimap_1 = require("./util/bimap");
+const build_1 = require("./build");
+const webpack_sources_1 = require("webpack-sources");
+const PluginName = "RU1NSecuritySDKPlugin";
+class RU1NSecuritySDKPlugin {
+    constructor(option) {
+        // 当前构建项目的根目录
+        this.rootDir = "";
+        this.policyOver = {};
+        this.policy = new config_1.Config();
+        this.rootModules = new Set();
+        // moduleID -> module相对路径
+        this.moduleId2File = new bimap_1.BiMap();
+        this.moduleDependencies = new Map();
+        if (option.root == null) {
+            option.root = "./src";
+        }
+        if (option.generatePolicy == null) {
+            option.generatePolicy = true;
+        }
+        if (option.dev == null) {
+            option.dev = false;
+        }
+        if (option.disableProtoAssets == null) {
+            option.disableProtoAssets = [];
+        }
+        this.option = option;
+    }
+    apply(compiler) {
+        // 起始路径
+        this.rootDir = compiler.context;
+        const policyOverFile = path.join(this.rootDir, "SecSDK", "policy-over.json");
+        if (fs.existsSync(policyOverFile)) {
+            // @ts-expect-error
+            this.policyOver = JSON.parse(fs.readFileSync(policyOverFile));
+        }
+        compiler.hooks.compilation.tap(PluginName, (compilation) => {
+            compilation.hooks.afterOptimizeModuleIds.tap(PluginName, (modules) => {
+                for (const module of modules) {
+                    if (module.id == null) {
+                        continue;
+                    }
+                    if (module.constructor.name === "NormalModule") {
+                        const normal = module;
+                        const file = util_1.Util.relative(this.rootDir, normal.resource);
+                        this.moduleId2File.set(normal.id, file);
+                        if (!/\.(mjs|cjs|js|jsx|ts|tsx)$/i.test(normal.resource)) {
+                            continue;
+                        }
+                        // 如果属于root, 不做任何限制
+                        const rela = util_1.Util.relative(this.option.root, file);
+                        const isRoot = !rela.startsWith("../");
+                        if (isRoot) {
+                            console.log("[+] skip", rela);
+                            this.rootModules.add(normal.id);
+                            continue;
+                        }
+                        const config = {
+                            dependency: [],
+                            global: new Map(),
+                        };
+                        if (this.option.generatePolicy) {
+                            const source = normal.originalSource();
+                            if (source != null) {
+                                config.global = (0, analyze_1.analyzeGlobals)(source.source().toString());
+                            }
+                        }
+                        else {
+                            throw new Error(`unsupported`);
+                        }
+                        const dependency = new Set();
+                        for (const conn of compilation.moduleGraph.getOutgoingConnections(module)) {
+                            if (conn.module == null ||
+                                conn.module.id == null) {
+                                continue;
+                            }
+                            dependency.add(conn.module.id);
+                            if (conn.module.constructor.name !==
+                                "NormalModule") {
+                                continue;
+                            }
+                            const dep = conn.module;
+                            const moduleFile = util_1.Util.relative(this.rootDir, dep.resource);
+                            // 避免重复添加
+                            if (!config.dependency.includes(moduleFile)) {
+                                config.dependency.push(moduleFile);
+                            }
+                        }
+                        this.moduleDependencies.set(normal.id, dependency);
+                        this.policy.addItem(file, config);
+                        if (file in this.policyOver) {
+                            this.policy.applyOverride(file, this.policyOver[file]);
+                        }
+                    }
+                }
+                fs.writeFileSync(path.join(this.rootDir, "SecSDK", "policy.json"), this.policy.toJSON());
+            });
+            compilation.hooks.processAssets.tap({
+                name: PluginName,
+                stage: compiler.webpack.Compilation
+                    .PROCESS_ASSETS_STAGE_OPTIMIZE,
+            }, (assets) => {
+                Object.entries(assets).forEach(([file, source]) => {
+                    if (!file.endsWith(".js")) {
+                        return;
+                    }
+                    console.log("[*] process", file);
+                    const r = (0, build_1.protectModuleRef)(source.source().toString(), this.moduleId2File, this.policy, this.rootModules, this.option.dev, this.moduleDependencies, !this.option.disableProtoAssets.includes(path.basename(file)));
+                    if (r == null) {
+                        return;
+                    }
+                    const hasSourceMap = source.map() != null;
+                    if (hasSourceMap) {
+                        compilation.updateAsset(file, new webpack_sources_1.SourceMapSource(r.code, file, r.map, source.source(), source.map()));
+                    }
+                    else {
+                        compilation.updateAsset(file, new webpack_sources_1.RawSource(r.code));
+                    }
+                });
+            });
+        });
+    }
+}
+exports.default = RU1NSecuritySDKPlugin;
+//# sourceMappingURL=data:application/json;base64,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

package/dist/util/analyze.js

@@ -0,0 +1,247 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ECMAGlobals = void 0;
+exports.analyzeGlobals = analyzeGlobals;
+const t = __importStar(require("@babel/types"));
+const parser_1 = require("@babel/parser");
+const traverse_1 = __importDefault(require("@babel/traverse"));
+exports.ECMAGlobals = [
+    "AggregateError",
+    "Array",
+    "ArrayBuffer",
+    "Atomics",
+    "BigInt",
+    "BigInt64Array",
+    "BigUint64Array",
+    "Boolean",
+    "DataView",
+    "Date",
+    "Error",
+    "EvalError",
+    "FinalizationRegistry",
+    "Float16Array",
+    "Float32Array",
+    "Float64Array",
+    "Function",
+    "Infinity",
+    "Int16Array",
+    "Int32Array",
+    "Int8Array",
+    "Intl",
+    "Iterator",
+    "JSON",
+    "Map",
+    "Math",
+    "NaN",
+    "Number",
+    "Object",
+    "Promise",
+    "Proxy",
+    "RangeError",
+    "ReferenceError",
+    "Reflect",
+    "RegExp",
+    "Set",
+    "SharedArrayBuffer",
+    "String",
+    "Symbol",
+    "SyntaxError",
+    "TypeError",
+    "Uint16Array",
+    "Uint32Array",
+    "Uint8Array",
+    "Uint8ClampedArray",
+    "URIError",
+    "WeakMap",
+    "WeakRef",
+    "WeakSet",
+    "decodeURI",
+    "decodeURIComponent",
+    "encodeURI",
+    "encodeURIComponent",
+    "escape",
+    // "eval",
+    "globalThis",
+    "isFinite",
+    "isNaN",
+    "parseFloat",
+    "parseInt",
+    "undefined",
+    "unescape",
+];
+class GVPool {
+    constructor() {
+        this.globals = new Map();
+    }
+    add(name, perm) {
+        // 不管控除eval以外的ECMA全局变量的读权限
+        if (exports.ECMAGlobals.includes(name) && perm === "r") {
+            return;
+        }
+        if (this.globals.has(name)) {
+            if (perm === "rw") {
+                this.globals.set(name, "rw");
+            }
+        }
+        else {
+            this.globals.set(name, perm);
+        }
+    }
+}
+function analyzeGlobals(code) {
+    const pool = new GVPool();
+    const ast = (0, parser_1.parse)(code, {
+        sourceType: "unambiguous",
+    });
+    (0, traverse_1.default)(ast, {
+        MemberExpression(path) {
+            let expr = [];
+            let node = path.node;
+            let flag = true;
+            while (t.isMemberExpression(node)) {
+                if (t.isIdentifier(node.property) && !node.computed) {
+                    expr.unshift(node.property.name);
+                }
+                else if (t.isStringLiteral(node.property)) {
+                    expr.unshift(node.property.value);
+                }
+                else {
+                    flag = false;
+                    break;
+                }
+                if (t.isIdentifier(node.object)) {
+                    expr.unshift(node.object.name);
+                    break;
+                }
+                else if (t.isMemberExpression(node.object)) {
+                    node = node.object;
+                }
+                else {
+                    flag = false;
+                    break;
+                }
+            }
+            if (!flag) {
+                return;
+            }
+            // 处理 __webpack_require__.g.xxx 的情况, __webpack_require__.g 就是 globalThis
+            if (expr.length >= 2 &&
+                expr[0] === "__webpack_require__" &&
+                expr[1] === "g") {
+                expr = expr.slice(2);
+            }
+            const globalAlias = ["globalThis", "self", "window"];
+            let mustBeGlobal = false;
+            while (expr.length > 0 &&
+                globalAlias.includes(expr[0]) &&
+                !path.scope.hasBinding(expr[0], { noGlobals: true })) {
+                expr = expr.slice(1);
+                // 如果是globalThis/self/window开头的, 则一定是全局变量
+                mustBeGlobal = true;
+            }
+            if (expr.length > 0 &&
+                (mustBeGlobal ||
+                    !path.scope.hasBinding(expr[0], { noGlobals: true })) && expr[0] !== "arguments") {
+                pool.add(expr[0], t.isAssignmentExpression(path.parent) &&
+                    path.parent.left === path.node
+                    ? "rw"
+                    : "r");
+            }
+            path.skip();
+        },
+        Identifier(path) {
+            if (!path.scope.hasBinding(path.node.name, { noGlobals: true })) {
+                // 排除一些不算真正变量读取的场景
+                if ((t.isMemberExpression(path.parent) ||
+                    t.isOptionalMemberExpression(path.parent)) &&
+                    path.parent.property === path.node) {
+                    return;
+                }
+                else if (t.isObjectProperty(path.parent) &&
+                    path.parent.key === path.node) {
+                    return;
+                }
+                else if ((t.isLabeledStatement(path.parent) ||
+                    t.isBreakStatement(path.parent) ||
+                    t.isContinueStatement(path.parent)) &&
+                    path.parent.label === path.node) {
+                    return;
+                }
+                else if ((t.isFunctionDeclaration(path.parent) ||
+                    t.isFunctionExpression(path.parent)) &&
+                    path.parent.id === path.node) {
+                    return;
+                }
+                else if (t.isCatchClause(path.parent) &&
+                    path.parent.param === path.node) {
+                    return;
+                }
+                else if (t.isFunction(path.parent) &&
+                    (path.parent.params.includes(path.node) ||
+                        path.parent.id === path.node ||
+                        path.parent.kind === path.node.name ||
+                        path.parent.key === path.node)) {
+                    return;
+                }
+                else if (t.isMetaProperty(path.parent)) {
+                    return;
+                }
+                else if (t.isClassProperty(path.parent) &&
+                    path.parent.key === path.node) {
+                    return;
+                    // globalAlias默认可访问
+                }
+                else if (path.node.name === "globalThis" ||
+                    path.node.name === "window" ||
+                    path.node.name === "self") {
+                    return;
+                }
+                else if (path.node.name === "arguments") {
+                    return;
+                }
+                pool.add(path.node.name, t.isAssignmentExpression(path.parent) &&
+                    path.parent.left === path.node
+                    ? "rw"
+                    : "r");
+            }
+        },
+    });
+    return pool.globals;
+}
+//# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoiYW5hbHl6ZS5qcyIsInNvdXJjZVJvb3QiOiIiLCJzb3VyY2VzIjpbIi4uLy4uL3NyYy91dGlsL2FuYWx5emUudHMiXSwibmFtZXMiOltdLCJtYXBwaW5ncyI6Ijs7Ozs7Ozs7Ozs7Ozs7Ozs7Ozs7Ozs7Ozs7Ozs7Ozs7Ozs7Ozs7O0FBd0ZBLHdDQWtKQztBQTFPRCxnREFBa0M7QUFDbEMsMENBQXNDO0FBQ3RDLCtEQUF1QztBQUUxQixRQUFBLFdBQVcsR0FBRztJQUN2QixnQkFBZ0I7SUFDaEIsT0FBTztJQUNQLGFBQWE7SUFDYixTQUFTO0lBQ1QsUUFBUTtJQUNSLGVBQWU7SUFDZixnQkFBZ0I7SUFDaEIsU0FBUztJQUNULFVBQVU7SUFDVixNQUFNO0lBQ04sT0FBTztJQUNQLFdBQVc7SUFDWCxzQkFBc0I7SUFDdEIsY0FBYztJQUNkLGNBQWM7SUFDZCxjQUFjO0lBQ2QsVUFBVTtJQUNWLFVBQVU7SUFDVixZQUFZO0lBQ1osWUFBWTtJQUNaLFdBQVc7SUFDWCxNQUFNO0lBQ04sVUFBVTtJQUNWLE1BQU07SUFDTixLQUFLO0lBQ0wsTUFBTTtJQUNOLEtBQUs7SUFDTCxRQUFRO0lBQ1IsUUFBUTtJQUNSLFNBQVM7SUFDVCxPQUFPO0lBQ1AsWUFBWTtJQUNaLGdCQUFnQjtJQUNoQixTQUFTO0lBQ1QsUUFBUTtJQUNSLEtBQUs7SUFDTCxtQkFBbUI7SUFDbkIsUUFBUTtJQUNSLFFBQVE7SUFDUixhQUFhO0lBQ2IsV0FBVztJQUNYLGFBQWE7SUFDYixhQUFhO0lBQ2IsWUFBWTtJQUNaLG1CQUFtQjtJQUNuQixVQUFVO0lBQ1YsU0FBUztJQUNULFNBQVM7SUFDVCxTQUFTO0lBQ1QsV0FBVztJQUNYLG9CQUFvQjtJQUNwQixXQUFXO0lBQ1gsb0JBQW9CO0lBQ3BCLFFBQVE7SUFDUixVQUFVO0lBQ1YsWUFBWTtJQUNaLFVBQVU7SUFDVixPQUFPO0lBQ1AsWUFBWTtJQUNaLFVBQVU7SUFDVixXQUFXO0lBQ1gsVUFBVTtDQUNiLENBQUM7QUFFRixNQUFNLE1BQU07SUFBWjtRQUNXLFlBQU8sR0FBNEIsSUFBSSxHQUFHLEVBQUUsQ0FBQztJQWdCeEQsQ0FBQztJQWRHLEdBQUcsQ0FBQyxJQUFZLEVBQUUsSUFBZ0I7UUFDOUIsMEJBQTBCO1FBQzFCLElBQUksbUJBQVcsQ0FBQyxRQUFRLENBQUMsSUFBSSxDQUFDLElBQUksSUFBSSxLQUFLLEdBQUcsRUFBRSxDQUFDO1lBQzdDLE9BQU87UUFDWCxDQUFDO1FBRUQsSUFBSSxJQUFJLENBQUMsT0FBTyxDQUFDLEdBQUcsQ0FBQyxJQUFJLENBQUMsRUFBRSxDQUFDO1lBQ3pCLElBQUksSUFBSSxLQUFLLElBQUksRUFBRSxDQUFDO2dCQUNoQixJQUFJLENBQUMsT0FBTyxDQUFDLEdBQUcsQ0FBQyxJQUFJLEVBQUUsSUFBSSxDQUFDLENBQUM7WUFDakMsQ0FBQztRQUNMLENBQUM7YUFBTSxDQUFDO1lBQ0osSUFBSSxDQUFDLE9BQU8sQ0FBQyxHQUFHLENBQUMsSUFBSSxFQUFFLElBQUksQ0FBQyxDQUFDO1FBQ2pDLENBQUM7SUFDTCxDQUFDO0NBQ0o7QUFFRCxTQUFnQixjQUFjLENBQUMsSUFBWTtJQUN2QyxNQUFNLElBQUksR0FBRyxJQUFJLE1BQU0sRUFBRSxDQUFDO0lBRTFCLE1BQU0sR0FBRyxHQUFHLElBQUEsY0FBSyxFQUFDLElBQUksRUFBRTtRQUNwQixVQUFVLEVBQUUsYUFBYTtLQUM1QixDQUFDLENBQUM7SUFFSCxJQUFBLGtCQUFRLEVBQUMsR0FBRyxFQUFFO1FBQ1YsZ0JBQWdCLENBQUMsSUFBSTtZQUNqQixJQUFJLElBQUksR0FBYSxFQUFFLENBQUM7WUFDeEIsSUFBSSxJQUFJLEdBQXVCLElBQUksQ0FBQyxJQUFJLENBQUM7WUFDekMsSUFBSSxJQUFJLEdBQUcsSUFBSSxDQUFDO1lBQ2hCLE9BQU8sQ0FBQyxDQUFDLGtCQUFrQixDQUFDLElBQUksQ0FBQyxFQUFFLENBQUM7Z0JBQ2hDLElBQUksQ0FBQyxDQUFDLFlBQVksQ0FBQyxJQUFJLENBQUMsUUFBUSxDQUFDLElBQUksQ0FBQyxJQUFJLENBQUMsUUFBUSxFQUFFLENBQUM7b0JBQ2xELElBQUksQ0FBQyxPQUFPLENBQUMsSUFBSSxDQUFDLFFBQVEsQ0FBQyxJQUFJLENBQUMsQ0FBQztnQkFDckMsQ0FBQztxQkFBTSxJQUFJLENBQUMsQ0FBQyxlQUFlLENBQUMsSUFBSSxDQUFDLFFBQVEsQ0FBQyxFQUFFLENBQUM7b0JBQzFDLElBQUksQ0FBQyxPQUFPLENBQUMsSUFBSSxDQUFDLFFBQVEsQ0FBQyxLQUFLLENBQUMsQ0FBQztnQkFDdEMsQ0FBQztxQkFBTSxDQUFDO29CQUNKLElBQUksR0FBRyxLQUFLLENBQUM7b0JBQ2IsTUFBTTtnQkFDVixDQUFDO2dCQUVELElBQUksQ0FBQyxDQUFDLFlBQVksQ0FBQyxJQUFJLENBQUMsTUFBTSxDQUFDLEVBQUUsQ0FBQztvQkFDOUIsSUFBSSxDQUFDLE9BQU8sQ0FBQyxJQUFJLENBQUMsTUFBTSxDQUFDLElBQUksQ0FBQyxDQUFDO29CQUMvQixNQUFNO2dCQUNWLENBQUM7cUJBQU0sSUFBSSxDQUFDLENBQUMsa0JBQWtCLENBQUMsSUFBSSxDQUFDLE1BQU0sQ0FBQyxFQUFFLENBQUM7b0JBQzNDLElBQUksR0FBRyxJQUFJLENBQUMsTUFBTSxDQUFDO2dCQUN2QixDQUFDO3FCQUFNLENBQUM7b0JBQ0osSUFBSSxHQUFHLEtBQUssQ0FBQztvQkFDYixNQUFNO2dCQUNWLENBQUM7WUFDTCxDQUFDO1lBRUQsSUFBSSxDQUFDLElBQUksRUFBRSxDQUFDO2dCQUNSLE9BQU87WUFDWCxDQUFDO1lBRUQsd0VBQXdFO1lBQ3hFLElBQ0ksSUFBSSxDQUFDLE1BQU0sSUFBSSxDQUFDO2dCQUNoQixJQUFJLENBQUMsQ0FBQyxDQUFDLEtBQUsscUJBQXFCO2dCQUNqQyxJQUFJLENBQUMsQ0FBQyxDQUFDLEtBQUssR0FBRyxFQUNqQixDQUFDO2dCQUNDLElBQUksR0FBRyxJQUFJLENBQUMsS0FBSyxDQUFDLENBQUMsQ0FBQyxDQUFDO1lBQ3pCLENBQUM7WUFFRCxNQUFNLFdBQVcsR0FBRyxDQUFDLFlBQVksRUFBRSxNQUFNLEVBQUUsUUFBUSxDQUFDLENBQUM7WUFDckQsSUFBSSxZQUFZLEdBQUcsS0FBSyxDQUFDO1lBQ3pCLE9BQ0ksSUFBSSxDQUFDLE1BQU0sR0FBRyxDQUFDO2dCQUNmLFdBQVcsQ0FBQyxRQUFRLENBQUMsSUFBSSxDQUFDLENBQUMsQ0FBRSxDQUFDO2dCQUM5QixDQUFDLElBQUksQ0FBQyxLQUFLLENBQUMsVUFBVSxDQUFDLElBQUksQ0FBQyxDQUFDLENBQUUsRUFBRSxFQUFFLFNBQVMsRUFBRSxJQUFJLEVBQUUsQ0FBQyxFQUN2RCxDQUFDO2dCQUNDLElBQUksR0FBRyxJQUFJLENBQUMsS0FBSyxDQUFDLENBQUMsQ0FBQyxDQUFDO2dCQUNyQix5Q0FBeUM7Z0JBQ3pDLFlBQVksR0FBRyxJQUFJLENBQUM7WUFDeEIsQ0FBQztZQUVELElBQ0ksSUFBSSxDQUFDLE1BQU0sR0FBRyxDQUFDO2dCQUNmLENBQUMsWUFBWTtvQkFDVCxDQUFDLElBQUksQ0FBQyxLQUFLLENBQUMsVUFBVSxDQUFDLElBQUksQ0FBQyxDQUFDLENBQUUsRUFBRSxFQUFFLFNBQVMsRUFBRSxJQUFJLEVBQUUsQ0FBQyxDQUFDLElBQUksSUFBSSxDQUFDLENBQUMsQ0FBQyxLQUFLLFdBQVcsRUFDdkYsQ0FBQztnQkFDQyxJQUFJLENBQUMsR0FBRyxDQUNKLElBQUksQ0FBQyxDQUFDLENBQUMsRUFFUCxDQUFDLENBQUMsc0JBQXNCLENBQUMsSUFBSSxDQUFDLE1BQU0sQ0FBQztvQkFDakMsSUFBSSxDQUFDLE1BQU0sQ0FBQyxJQUFJLEtBQUssSUFBSSxDQUFDLElBQUk7b0JBQzlCLENBQUMsQ0FBQyxJQUFJO29CQUNOLENBQUMsQ0FBQyxHQUFHLENBQ1osQ0FBQztZQUNOLENBQUM7WUFFRCxJQUFJLENBQUMsSUFBSSxFQUFFLENBQUM7UUFDaEIsQ0FBQztRQUNELFVBQVUsQ0FBQyxJQUFJO1lBQ1gsSUFBSSxDQUFDLElBQUksQ0FBQyxLQUFLLENBQUMsVUFBVSxDQUFDLElBQUksQ0FBQyxJQUFJLENBQUMsSUFBSSxFQUFFLEVBQUUsU0FBUyxFQUFFLElBQUksRUFBRSxDQUFDLEVBQUUsQ0FBQztnQkFDOUQsa0JBQWtCO2dCQUNsQixJQUNJLENBQUMsQ0FBQyxDQUFDLGtCQUFrQixDQUFDLElBQUksQ0FBQyxNQUFNLENBQUM7b0JBQzlCLENBQUMsQ0FBQywwQkFBMEIsQ0FBQyxJQUFJLENBQUMsTUFBTSxDQUFDLENBQUM7b0JBQzlDLElBQUksQ0FBQyxNQUFNLENBQUMsUUFBUSxLQUFLLElBQUksQ0FBQyxJQUFJLEVBQ3BDLENBQUM7b0JBQ0MsT0FBTztnQkFDWCxDQUFDO3FCQUFNLElBQ0gsQ0FBQyxDQUFDLGdCQUFnQixDQUFDLElBQUksQ0FBQyxNQUFNLENBQUM7b0JBQy9CLElBQUksQ0FBQyxNQUFNLENBQUMsR0FBRyxLQUFLLElBQUksQ0FBQyxJQUFJLEVBQy9CLENBQUM7b0JBQ0MsT0FBTztnQkFDWCxDQUFDO3FCQUFNLElBQ0gsQ0FBQyxDQUFDLENBQUMsa0JBQWtCLENBQUMsSUFBSSxDQUFDLE1BQU0sQ0FBQztvQkFDOUIsQ0FBQyxDQUFDLGdCQUFnQixDQUFDLElBQUksQ0FBQyxNQUFNLENBQUM7b0JBQy9CLENBQUMsQ0FBQyxtQkFBbUIsQ0FBQyxJQUFJLENBQUMsTUFBTSxDQUFDLENBQUM7b0JBQ3ZDLElBQUksQ0FBQyxNQUFNLENBQUMsS0FBSyxLQUFLLElBQUksQ0FBQyxJQUFJLEVBQ2pDLENBQUM7b0JBQ0MsT0FBTztnQkFDWCxDQUFDO3FCQUFNLElBQ0gsQ0FBQyxDQUFDLENBQUMscUJBQXFCLENBQUMsSUFBSSxDQUFDLE1BQU0sQ0FBQztvQkFDakMsQ0FBQyxDQUFDLG9CQUFvQixDQUFDLElBQUksQ0FBQyxNQUFNLENBQUMsQ0FBQztvQkFDeEMsSUFBSSxDQUFDLE1BQU0sQ0FBQyxFQUFFLEtBQUssSUFBSSxDQUFDLElBQUksRUFDOUIsQ0FBQztvQkFDQyxPQUFPO2dCQUNYLENBQUM7cUJBQU0sSUFDSCxDQUFDLENBQUMsYUFBYSxDQUFDLElBQUksQ0FBQyxNQUFNLENBQUM7b0JBQzVCLElBQUksQ0FBQyxNQUFNLENBQUMsS0FBSyxLQUFLLElBQUksQ0FBQyxJQUFJLEVBQ2pDLENBQUM7b0JBQ0MsT0FBTztnQkFDWCxDQUFDO3FCQUFNLElBQ0gsQ0FBQyxDQUFDLFVBQVUsQ0FBQyxJQUFJLENBQUMsTUFBTSxDQUFDO29CQUN6QixDQUFDLElBQUksQ0FBQyxNQUFNLENBQUMsTUFBTSxDQUFDLFFBQVEsQ0FBQyxJQUFJLENBQUMsSUFBSSxDQUFDO3dCQUNsQyxJQUFJLENBQUMsTUFBYyxDQUFDLEVBQUUsS0FBSyxJQUFJLENBQUMsSUFBSTt3QkFDcEMsSUFBSSxDQUFDLE1BQWMsQ0FBQyxJQUFJLEtBQUssSUFBSSxDQUFDLElBQUksQ0FBQyxJQUFJO3dCQUMzQyxJQUFJLENBQUMsTUFBYyxDQUFDLEdBQUcsS0FBSyxJQUFJLENBQUMsSUFBSSxDQUFDLEVBQzdDLENBQUM7b0JBQ0MsT0FBTztnQkFDWCxDQUFDO3FCQUFNLElBQUksQ0FBQyxDQUFDLGNBQWMsQ0FBQyxJQUFJLENBQUMsTUFBTSxDQUFDLEVBQUUsQ0FBQztvQkFDdkMsT0FBTztnQkFDWCxDQUFDO3FCQUFNLElBQ0gsQ0FBQyxDQUFDLGVBQWUsQ0FBQyxJQUFJLENBQUMsTUFBTSxDQUFDO29CQUM5QixJQUFJLENBQUMsTUFBTSxDQUFDLEdBQUcsS0FBSyxJQUFJLENBQUMsSUFBSSxFQUMvQixDQUFDO29CQUNDLE9BQU87b0JBQ1AsbUJBQW1CO2dCQUN2QixDQUFDO3FCQUFNLElBQ0gsSUFBSSxDQUFDLElBQUksQ0FBQyxJQUFJLEtBQUssWUFBWTtvQkFDL0IsSUFBSSxDQUFDLElBQUksQ0FBQyxJQUFJLEtBQUssUUFBUTtvQkFDM0IsSUFBSSxDQUFDLElBQUksQ0FBQyxJQUFJLEtBQUssTUFBTSxFQUMzQixDQUFDO29CQUNDLE9BQU87Z0JBQ1gsQ0FBQztxQkFBTSxJQUFJLElBQUksQ0FBQyxJQUFJLENBQUMsSUFBSSxLQUFLLFdBQVcsRUFBRSxDQUFDO29CQUN4QyxPQUFPO2dCQUNYLENBQUM7Z0JBRUQsSUFBSSxDQUFDLEdBQUcsQ0FDSixJQUFJLENBQUMsSUFBSSxDQUFDLElBQUksRUFFZCxDQUFDLENBQUMsc0JBQXNCLENBQUMsSUFBSSxDQUFDLE1BQU0sQ0FBQztvQkFDakMsSUFBSSxDQUFDLE1BQU0sQ0FBQyxJQUFJLEtBQUssSUFBSSxDQUFDLElBQUk7b0JBQzlCLENBQUMsQ0FBQyxJQUFJO29CQUNOLENBQUMsQ0FBQyxHQUFHLENBQ1osQ0FBQztZQUNOLENBQUM7UUFDTCxDQUFDO0tBQ0osQ0FBQyxDQUFDO0lBRUgsT0FBTyxJQUFJLENBQUMsT0FBTyxDQUFDO0FBQ3hCLENBQUMifQ==

package/dist/util/bimap.js

@@ -0,0 +1,94 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.BiMap = void 0;
+class BiMap {
+    constructor(entries) {
+        this.keyToValue = new Map();
+        this.valueToKey = new Map();
+        if (entries) {
+            for (const [key, value] of entries) {
+                this.set(key, value);
+            }
+        }
+    }
+    // 设置键值对
+    set(key, value) {
+        // 检查键或值是否已存在
+        if (this.keyToValue.has(key)) {
+            const existingValue = this.keyToValue.get(key);
+            this.valueToKey.delete(existingValue);
+        }
+        if (this.valueToKey.has(value)) {
+            const existingKey = this.valueToKey.get(value);
+            this.keyToValue.delete(existingKey);
+        }
+        this.keyToValue.set(key, value);
+        this.valueToKey.set(value, key);
+        return this;
+    }
+    // 通过键获取值
+    getByKey(key) {
+        return this.keyToValue.get(key);
+    }
+    // 通过值获取键
+    getByValue(value) {
+        return this.valueToKey.get(value);
+    }
+    // 删除指定键的映射
+    deleteByKey(key) {
+        if (!this.keyToValue.has(key)) {
+            return false;
+        }
+        const value = this.keyToValue.get(key);
+        this.keyToValue.delete(key);
+        this.valueToKey.delete(value);
+        return true;
+    }
+    // 删除指定值的映射
+    deleteByValue(value) {
+        if (!this.valueToKey.has(value)) {
+            return false;
+        }
+        const key = this.valueToKey.get(value);
+        this.valueToKey.delete(value);
+        this.keyToValue.delete(key);
+        return true;
+    }
+    // 检查是否包含键
+    hasKey(key) {
+        return this.keyToValue.has(key);
+    }
+    // 检查是否包含值
+    hasValue(value) {
+        return this.valueToKey.has(value);
+    }
+    // 清空所有映射
+    clear() {
+        this.keyToValue.clear();
+        this.valueToKey.clear();
+    }
+    // 获取所有键
+    get keys() {
+        return this.keyToValue.keys();
+    }
+    // 获取所有值
+    get values() {
+        return this.valueToKey.keys();
+    }
+    // 获取大小
+    get size() {
+        return this.keyToValue.size;
+    }
+    // 获取所有键值对
+    entries() {
+        return this.keyToValue.entries();
+    }
+    // 遍历所有键值对
+    forEach(callback, thisArg) {
+        this.keyToValue.forEach((value, key) => {
+            callback.call(thisArg, value, key, this);
+        });
+    }
+}
+exports.BiMap = BiMap;
+//# sourceMappingURL=data:application/json;base64,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

package/dist/util/config.js

@@ -0,0 +1,58 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.Config = void 0;
+class Config {
+    constructor() {
+        this.config = new Map();
+    }
+    static applyOverride(item1, item2) {
+        const item = structuredClone(item1);
+        if (item2.dependency != null) {
+            if (item2.dependency.disallow != null) {
+                item.dependency = item1.dependency.filter((e) => item2.dependency.disallow.indexOf(e) === -1);
+            }
+            if (item2.dependency.allow != null) {
+                item2.dependency.allow.forEach((e) => {
+                    if (item.dependency.indexOf(e) === -1) {
+                        item.dependency.push(e);
+                    }
+                });
+            }
+        }
+        if (item2.global != null) {
+            if (item2.global.disallow != null) {
+                item.global = new Map(Array.from(item1.global.entries()).filter((e) => item2.global.disallow.indexOf(e[0]) === -1));
+            }
+            if (item2.global.allow != null) {
+                for (const [k, v] of Object.entries(item2.global.allow)) {
+                    item.global.set(k, v);
+                }
+            }
+        }
+        return item;
+    }
+    addItem(module, item) {
+        this.config.set(module, item);
+    }
+    getItem(module) {
+        return this.config.get(module);
+    }
+    applyOverride(module, item) {
+        if (this.config.has(module)) {
+            this.config.set(module, Config.applyOverride(this.config.get(module), item));
+        }
+        else {
+            throw new Error(`apply override error`);
+        }
+    }
+    toJSON() {
+        return JSON.stringify(this.config, (_key, value) => {
+            if (value instanceof Map) {
+                return Object.fromEntries(value.entries());
+            }
+            return value;
+        }, 4);
+    }
+}
+exports.Config = Config;
+//# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoiY29uZmlnLmpzIiwic291cmNlUm9vdCI6IiIsInNvdXJjZXMiOlsiLi4vLi4vc3JjL3V0aWwvY29uZmlnLnRzIl0sIm5hbWVzIjpbXSwibWFwcGluZ3MiOiI7OztBQWdCQSxNQUFhLE1BQU07SUFHZjtRQUZBLFdBQU0sR0FBNEIsSUFBSSxHQUFHLEVBQUUsQ0FBQztJQUU3QixDQUFDO0lBRVIsTUFBTSxDQUFDLGFBQWEsQ0FDeEIsS0FBaUIsRUFDakIsS0FBeUI7UUFFekIsTUFBTSxJQUFJLEdBQUcsZUFBZSxDQUFDLEtBQUssQ0FBQyxDQUFDO1FBRXBDLElBQUksS0FBSyxDQUFDLFVBQVUsSUFBSSxJQUFJLEVBQUUsQ0FBQztZQUMzQixJQUFJLEtBQUssQ0FBQyxVQUFVLENBQUMsUUFBUSxJQUFJLElBQUksRUFBRSxDQUFDO2dCQUNwQyxJQUFJLENBQUMsVUFBVSxHQUFHLEtBQUssQ0FBQyxVQUFVLENBQUMsTUFBTSxDQUNyQyxDQUFDLENBQUMsRUFBRSxFQUFFLENBQUMsS0FBSyxDQUFDLFVBQVcsQ0FBQyxRQUFTLENBQUMsT0FBTyxDQUFDLENBQUMsQ0FBQyxLQUFLLENBQUMsQ0FBQyxDQUN2RCxDQUFDO1lBQ04sQ0FBQztZQUVELElBQUksS0FBSyxDQUFDLFVBQVUsQ0FBQyxLQUFLLElBQUksSUFBSSxFQUFFLENBQUM7Z0JBQ2pDLEtBQUssQ0FBQyxVQUFVLENBQUMsS0FBSyxDQUFDLE9BQU8sQ0FBQyxDQUFDLENBQUMsRUFBRSxFQUFFO29CQUNqQyxJQUFJLElBQUksQ0FBQyxVQUFVLENBQUMsT0FBTyxDQUFDLENBQUMsQ0FBQyxLQUFLLENBQUMsQ0FBQyxFQUFFLENBQUM7d0JBQ3BDLElBQUksQ0FBQyxVQUFVLENBQUMsSUFBSSxDQUFDLENBQUMsQ0FBQyxDQUFDO29CQUM1QixDQUFDO2dCQUNMLENBQUMsQ0FBQyxDQUFDO1lBQ1AsQ0FBQztRQUNMLENBQUM7UUFFRCxJQUFJLEtBQUssQ0FBQyxNQUFNLElBQUksSUFBSSxFQUFFLENBQUM7WUFDdkIsSUFBSSxLQUFLLENBQUMsTUFBTSxDQUFDLFFBQVEsSUFBSSxJQUFJLEVBQUUsQ0FBQztnQkFDaEMsSUFBSSxDQUFDLE1BQU0sR0FBRyxJQUFJLEdBQUcsQ0FDakIsS0FBSyxDQUFDLElBQUksQ0FBQyxLQUFLLENBQUMsTUFBTSxDQUFDLE9BQU8sRUFBRSxDQUFDLENBQUMsTUFBTSxDQUNyQyxDQUFDLENBQUMsRUFBRSxFQUFFLENBQUMsS0FBSyxDQUFDLE1BQU8sQ0FBQyxRQUFTLENBQUMsT0FBTyxDQUFDLENBQUMsQ0FBQyxDQUFDLENBQUMsQ0FBQyxLQUFLLENBQUMsQ0FBQyxDQUN0RCxDQUNKLENBQUM7WUFDTixDQUFDO1lBRUQsSUFBSSxLQUFLLENBQUMsTUFBTSxDQUFDLEtBQUssSUFBSSxJQUFJLEVBQUUsQ0FBQztnQkFDN0IsS0FBSyxNQUFNLENBQUMsQ0FBQyxFQUFFLENBQUMsQ0FBQyxJQUFJLE1BQU0sQ0FBQyxPQUFPLENBQUMsS0FBSyxDQUFDLE1BQU0sQ0FBQyxLQUFLLENBQUMsRUFBRSxDQUFDO29CQUN0RCxJQUFJLENBQUMsTUFBTSxDQUFDLEdBQUcsQ0FBQyxDQUFDLEVBQUUsQ0FBQyxDQUFDLENBQUM7Z0JBQzFCLENBQUM7WUFDTCxDQUFDO1FBQ0wsQ0FBQztRQUVELE9BQU8sSUFBSSxDQUFDO0lBQ2hCLENBQUM7SUFFRCxPQUFPLENBQUMsTUFBYyxFQUFFLElBQWdCO1FBQ3BDLElBQUksQ0FBQyxNQUFNLENBQUMsR0FBRyxDQUFDLE1BQU0sRUFBRSxJQUFJLENBQUMsQ0FBQztJQUNsQyxDQUFDO0lBRUQsT0FBTyxDQUFDLE1BQWM7UUFDbEIsT0FBTyxJQUFJLENBQUMsTUFBTSxDQUFDLEdBQUcsQ0FBQyxNQUFNLENBQUMsQ0FBQztJQUNuQyxDQUFDO0lBRUQsYUFBYSxDQUFDLE1BQWMsRUFBRSxJQUF3QjtRQUNsRCxJQUFJLElBQUksQ0FBQyxNQUFNLENBQUMsR0FBRyxDQUFDLE1BQU0sQ0FBQyxFQUFFLENBQUM7WUFDMUIsSUFBSSxDQUFDLE1BQU0sQ0FBQyxHQUFHLENBQ1gsTUFBTSxFQUNOLE1BQU0sQ0FBQyxhQUFhLENBQUMsSUFBSSxDQUFDLE1BQU0sQ0FBQyxHQUFHLENBQUMsTUFBTSxDQUFFLEVBQUUsSUFBSSxDQUFDLENBQ3ZELENBQUM7UUFDTixDQUFDO2FBQU0sQ0FBQztZQUNKLE1BQU0sSUFBSSxLQUFLLENBQUMsc0JBQXNCLENBQUMsQ0FBQztRQUM1QyxDQUFDO0lBQ0wsQ0FBQztJQUVELE1BQU07UUFDRixPQUFPLElBQUksQ0FBQyxTQUFTLENBQ2pCLElBQUksQ0FBQyxNQUFNLEVBQ1gsQ0FBQyxJQUFJLEVBQUUsS0FBSyxFQUFFLEVBQUU7WUFDWixJQUFJLEtBQUssWUFBWSxHQUFHLEVBQUUsQ0FBQztnQkFDdkIsT0FBTyxNQUFNLENBQUMsV0FBVyxDQUFDLEtBQUssQ0FBQyxPQUFPLEVBQUUsQ0FBQyxDQUFDO1lBQy9DLENBQUM7WUFDRCxPQUFPLEtBQUssQ0FBQztRQUNqQixDQUFDLEVBQ0QsQ0FBQyxDQUNKLENBQUM7SUFDTixDQUFDO0NBQ0o7QUE3RUQsd0JBNkVDIn0=

package/dist/util/lockdown.js

@@ -0,0 +1,10 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.lockdownSrc = void 0;
+const node_fs_1 = require("node:fs");
+const node_path_1 = __importDefault(require("node:path"));
+exports.lockdownSrc = (0, node_fs_1.readFileSync)(node_path_1.default.join(__dirname, "../../static/lockdown.js"), "utf-8");
+//# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoibG9ja2Rvd24uanMiLCJzb3VyY2VSb290IjoiIiwic291cmNlcyI6WyIuLi8uLi9zcmMvdXRpbC9sb2NrZG93bi50cyJdLCJuYW1lcyI6W10sIm1hcHBpbmdzIjoiOzs7Ozs7QUFBQSxxQ0FBdUM7QUFDdkMsMERBQTZCO0FBRWhCLFFBQUEsV0FBVyxHQUFHLElBQUEsc0JBQVksRUFDbkMsbUJBQUksQ0FBQyxJQUFJLENBQUMsU0FBUyxFQUFFLDBCQUEwQixDQUFDLEVBQ2hELE9BQU8sQ0FDVixDQUFDIn0=

package/dist/util/util.js

@@ -0,0 +1,60 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.Util = void 0;
+const path = __importStar(require("path"));
+var Util;
+(function (Util) {
+    /**
+     * 标准relative, 在win下也使用 / 作为路径分隔符
+     * @param from
+     * @param to
+     * @returns
+     */
+    function relative(from, to) {
+        return path.relative(from, to).split(path.sep).join('/');
+    }
+    Util.relative = relative;
+    function toJSON(o) {
+        return JSON.stringify(o, (_key, value) => {
+            if (value instanceof Map) {
+                return Object.fromEntries(value.entries());
+            }
+            return value;
+        });
+    }
+    Util.toJSON = toJSON;
+})(Util || (exports.Util = Util = {}));
+//# sourceMappingURL=data:application/json;base64,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

package/package.json

@@ -0,0 +1,32 @@
+{
+  "name": "supplychain_security_sdk",
+  "version": "1.0.0",
+  "main": "dist/index.js",
+  "scripts": {
+    "test": "echo \"Error: no test specified\" && exit 1",
+    "build": "tsc --build && ncc build dist/index.js -o bundle -m"
+  },
+  "files": [
+    "dist/**/*"
+  ],
+  "keywords": [],
+  "author": "",
+  "license": "ISC",
+  "description": "",
+  "devDependencies": {
+    "@types/babel__generator": "^7.27.0",
+    "@types/babel__traverse": "^7.28.0",
+    "@types/node": "^24.2.0",
+    "@types/webpack": "^5.28.5",
+    "@vercel/ncc": "^0.38.3",
+    "webpack": "^5.101.3",
+    "webpack-cli": "^6.0.1"
+  },
+  "dependencies": {
+    "@babel/generator": "^7.28.0",
+    "@babel/parser": "^7.28.0",
+    "@babel/traverse": "^7.28.0",
+    "@babel/types": "^7.28.2",
+    "webpack-sources": "^3.3.3"
+  }
+}