compiler

var (
	// PropsRegex matches GoSPA $props() declarations.
	PropsRegex = regexp.MustCompile(`(?m)var\s+\{\s*(.*?)\s*\}\s*=\s*\$props\(\)`)
	// StateRegex matches GoSPA $state() declarations.
	StateRegex = regexp.MustCompile(`(?m)(?:var|const)\s+([a-zA-Z0-9_]+)\s*=\s*\$state\((.*?)\)`)
	// DerivedRegex matches GoSPA $derived() declarations.
	DerivedRegex = regexp.MustCompile(`\$derived\((.*?)\)`)
	// EffectRegex matches GoSPA $effect() declarations.
	EffectRegex = regexp.MustCompile(`(?s)\$effect\(func\(\)\s*\{(.*?)\}\)`)
	// CSSDotRegex matches CSS class selectors.
	CSSDotRegex = regexp.MustCompile(`\.([a-zA-Z][a-zA-Z0-9-_]*)`)
	// ReactiveLabelRegex matches GoSPA $: reactive labels.
	ReactiveLabelRegex = regexp.MustCompile(`\$:\s*([a-zA-Z0-9_]+)\s*=\s*([^;\n]+)`)
	// CSSElementRegex matches CSS element selectors.
	CSSElementRegex = regexp.MustCompile(`(?m)^([a-z0-9]+)\s*\{`)
)

var DangerousCallPatterns = []*regexp.Regexp{
	regexp.MustCompile(`exec\.Command`),
	regexp.MustCompile(`os\.OpenFile`),
	regexp.MustCompile(`os\.Create`),
	regexp.MustCompile(`os\.Remove`),
	regexp.MustCompile(`os\.Rename`),
	regexp.MustCompile(`os\.Mkdir`),
	regexp.MustCompile(`os\.MkdirAll`),
	regexp.MustCompile(`os\.WriteFile`),
	regexp.MustCompile(`os\.RemoveAll`),
	regexp.MustCompile(`os\.Symlink`),
	regexp.MustCompile(`os\.Setenv`),
	regexp.MustCompile(`os\.Getenv`),
	regexp.MustCompile(`system\s*\(`),
	regexp.MustCompile(`syscall\.Exec`),
	regexp.MustCompile(`syscall\.ForkExec`),
	regexp.MustCompile(`unix\.Exec`),
	regexp.MustCompile(`unix\.ForkExec`),
}

var DangerousImportNames = []string{
	"os/exec", "exec",
	"os",
	"unsafe",
	"syscall",
	"plugin",
	"runtime/debug",
	"runtime/pprof",
	"reflect",
	"C",
}

var DangerousTSPatterns = []*regexp.Regexp{
	regexp.MustCompile(`(?m)\bimport\s+[^\n]*\bfrom\s*['\"](?:child_process|fs|fs/promises|os|net|tls|dgram|worker_threads|vm)['\"]`),
	regexp.MustCompile(`(?m)\brequire\s*\(\s*['\"](?:child_process|fs|fs/promises|os|net|tls|dgram|worker_threads|vm)['\"]\s*\)`),
	regexp.MustCompile(`(?m)\b(?:child_process\.)?(?:exec|execSync|spawn|spawnSync|fork)\s*\(`),
	regexp.MustCompile(`(?m)\b(?:fs|fs/promises)\s*\.\s*(?:writeFile|writeFileSync|rm|rmSync|unlink|unlinkSync|rename|renameSync|mkdir|mkdirSync)\s*\(`),
	regexp.MustCompile(`(?m)\b(?:process\.)?env\s*\[`),
	regexp.MustCompile(`(?m)\b(?:process\.)?env\s*\.`),
}