javascript

type AnalyzerContext struct {
	// Maps function identifiers to their computed summaries.
	Summaries map[RefID]*FunctionSummary
	// contains filtered or unexported fields
}

type Fingerprinter struct {
	// contains filtered or unexported fields
}

type FunctionSummary struct {
	// RefID is the unique identifier for the function declaration.
	RefID RefID

	// TaintsReturn indicates if the function returns tainted data derived from a global source.
	TaintsReturn bool

	// TaintedParams maps the index of a parameter to whether it flows to a sink within the function.
	TaintedParams map[int]bool

	// ParamToReturn maps the index of a parameter to whether it flows to the return value.
	ParamToReturn map[int]bool
}

type LocationInfo struct {
	File    string
	Line    int
	Column  int
	Snippet string
}

type ObjectTaint struct {
	// Maps property names (strings) to their taint state.
	Properties map[string]TaintState
	// If true, indicates that we lost precision (e.g., computed property assignment),
	// so the entire object should be considered tainted.
	StructureTainted bool
}

type RefID string

type SimpleTaint struct {
	// Sources is a set of origins for the taint.
	Sources map[core.TaintSource]bool
	// Line tracking represents the location of the earliest introduced source.
	Line int
}

type SourceLocation struct {
	File   string `json:"file"`
	Line   int    `json:"line"`
	Column int    `json:"column"`
}

type StaticFinding struct {
	Source     core.TaintSource
	Sink       core.TaintSink // The specific sink name identified statically
	SinkType   core.SinkType  // The impact category
	Location   LocationInfo
	Confidence string // High, Medium, Low

	// CanonicalType is crucial for correlation with dynamic findings (Step 5).
	CanonicalType schemas.TaintSink
}

type StaticSinkDefinition struct {
	Name          core.TaintSink
	Type          core.SinkType
	CanonicalType schemas.TaintSink
	TaintedArgs   []int
}

type TaintState interface {
	IsTainted() bool
	// GetSource returns a representative origin of the taint (for reporting).
	GetSource() core.TaintSource
	// GetSources returns the set of all taint origins.
	GetSources() map[core.TaintSource]bool
	// Merge combines this state with another TaintState (the lattice join operation).
	Merge(other TaintState) TaintState
}

type WalkerMode int