@cosmicdrift/kumiko-guards 0.286.0 → 0.287.0

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@cosmicdrift/kumiko-guards",
-  "version": "0.286.0",
+  "version": "0.287.0",
   "description": "AST-based security guards for Kumiko repos: direct-fs/fetch, tenant escalation, admin-API, escape hatches and related checks, run over a shared ts-morph project.",
   "license": "BUSL-1.1",
   "author": "Marc Frost <marc@cosmicdriftgamestudio.com>",
@@ -27,7 +27,7 @@
     "kumiko-guards": "./src/cli.ts"
   },
   "dependencies": {
-    "@cosmicdrift/kumiko-repo-manifest": "0.286.0",
+    "@cosmicdrift/kumiko-repo-manifest": "0.287.0",
     "ts-morph": "^28.0.0"
   },
   "publishConfig": {

package/src/guard-broker-subscribe.ts

@@ -64,7 +64,7 @@ export function collectBrokerSubscribeViolations(
   for (const call of sf.getDescendantsOfKind(SyntaxKind.CallExpression)) {
     const callee = call.getExpression();
     const pae = callee.asKind(SyntaxKind.PropertyAccessExpression);
-    if (!pae || pae.getName() !== "subscribe") continue;
+    if (pae?.getName() !== "subscribe") continue;
     const recv = receiverName(pae.getExpression());
     if (!recv || !BROKER_RECEIVER.test(recv)) continue;
     hits.push({

package/src/guard-direct-fetch.ts

@@ -92,7 +92,7 @@ function isSameOriginLiteralArg(expr: CallExpression): boolean {
 
 function isGlobalFetchAccess(callee: Node): boolean {
   const pae = callee.asKind(SyntaxKind.PropertyAccessExpression);
-  if (!pae || pae.getName() !== "fetch") return false;
+  if (pae?.getName() !== "fetch") return false;
   const receiver = pae.getExpression();
   return (
     receiver.getKind() === SyntaxKind.Identifier && GLOBAL_FETCH_RECEIVERS.has(receiver.getText())

package/src/guard-text-field-stance.ts

@@ -82,7 +82,7 @@ function hasSpreadProperty(obj: ObjectLiteralExpression): boolean {
 // for it) — except `undefined`/`null`, which never answered the question.
 function hasPersonalStance(obj: ObjectLiteralExpression): boolean {
   const prop = obj.getProperty("personal");
-  if (!prop || !prop.isKind(SyntaxKind.PropertyAssignment)) return false;
+  if (!prop?.isKind(SyntaxKind.PropertyAssignment)) return false;
   const init: Node | undefined = prop.getInitializer();
   return (
     init !== undefined &&

package/src/guard-thin-wrappers.ts

@@ -235,9 +235,9 @@ function getSingleDirectCallee(node: FnNode): string | null {
       : node.getBody();
 
   // Concise arrow: `x => someCall(x)` — body IS the expression
-  if (!rawBody || !rawBody.isKind(SyntaxKind.Block)) {
+  if (!rawBody?.isKind(SyntaxKind.Block)) {
     const body = node.getBody();
-    if (!body || !body.isKind(SyntaxKind.CallExpression)) return null;
+    if (!body?.isKind(SyntaxKind.CallExpression)) return null;
     // Method chains (A.from(x).toMethod(y)) have 2 call expressions — not a thin wrapper
     const conciseCallees = new Set<string>();
     node.forEachDescendant((n) => {