@decantr/verifier 2.3.1 → 2.3.2

package/README.md

@@ -23,6 +23,7 @@ npm install @decantr/verifier
 - interaction findings now include scanned file counts, file line ranges, and expected signal evidence where available, so CLI health/check output can point agents at source-grounded remediation
 - contract-only Brownfield critique avoids requiring Decantr treatments/decorators when the project keeps its own styling authority
 - project audits check that `pack-manifest.json` references real pack markdown/JSON files on disk
+- project source audits ignore test, spec, story, fixture, and mock files for production drift warnings such as localhost endpoints and unsafe rendering patterns
 - published verifier report schemas are exercised by AJV-backed round-trip tests against real audit, critique, and shortlist-report outputs
 - project audits include runtime evidence when a built `dist/` output is present:
   - root document

package/dist/index.js

@@ -1185,6 +1185,12 @@ function isAuditableSourceFile(filePath) {
   if (/\.d\.ts$/i.test(filePath)) return false;
   return /\.(?:[cm]?[jt]sx?)$/i.test(filePath);
 }
+function isNonProductionSourceAuditFile(filePath) {
+  const normalized = normalizeSourceAuditPath(filePath);
+  return /(?:^|\/)(?:__tests__|__mocks__|tests?|specs?|fixtures?|mocks?|stories?)(?:\/|$)/i.test(
+    normalized
+  ) || /\.(?:test|spec|stories|story|fixture|mock)\.[cm]?[jt]sx?$/i.test(normalized);
+}
 function collectProjectSourceFiles(projectRoot) {
   const candidates = [
     "src",
@@ -1412,10 +1418,10 @@ function auditProjectSourceTree(projectRoot) {
     absolutePath: sourceFile,
     relativePath: relative(projectRoot, sourceFile) || sourceFile,
     code: readFileSync2(sourceFile, "utf-8")
-  }));
+  })).filter((entry) => !isNonProductionSourceAuditFile(entry.relativePath));
   const clientReachableFiles = collectClientReachableSourceFiles(projectRoot, sourceEntries);
   const summary = {
-    filesChecked: sourceFiles.length,
+    filesChecked: sourceEntries.length,
     inlineStyles: createSourceAuditBucket(),
     componentStyleTags: createSourceAuditBucket(),
     localCssRuntimeSignals: createSourceAuditBucket(),