@docker-doctor/cli 0.2.0 → 0.2.1

package/dist/{src-Bt3AB-Xl.mjs.map → src-DvNFg6Nz.mjs.map}

@@ -1 +1 @@
-{"version":3,"file":"src-Bt3AB-Xl.mjs","names":["createDiagnostic","createDiagnostic","createDiagnostic","createDiagnostic"],"sources":["../package.json","../../core/src/project-info/discover.ts","../../core/src/parsers/dockerfile-parser.ts","../../core/src/errors/config-error.ts","../../core/src/errors/file-not-found-error.ts","../../core/src/errors/parse-error.ts","../../core/src/parsers/compose-parser.ts","../../core/src/rules/best-practices.ts","../../core/src/rules/compose.ts","../../core/src/rules/image-size.ts","../../core/src/rules/performance.ts","../../core/src/rules/security.ts","../../core/src/rules/index.ts","../../core/src/runners/dockerfile-runner.ts","../../core/src/runners/compose-runner.ts","../../core/src/schemas/config.ts","../../core/src/config/loader.ts","../../core/src/scoring.ts","../../core/src/report.ts"],"sourcesContent":["","import fs from \"node:fs/promises\";\nimport path from \"node:path\";\n\nimport type { ProjectInfo } from \"../types/index\";\n\nconst walk = async (\n  dir: string,\n  fileList: string[] = []\n): Promise<string[]> => {\n  const files = await fs.readdir(dir, { withFileTypes: true });\n  await Promise.all(\n    files.map(async (file) => {\n      const filePath = path.join(dir, file.name);\n      if (file.isDirectory()) {\n        if (\n          file.name === \"node_modules\" ||\n          file.name === \".git\" ||\n          file.name === \".next\" ||\n          file.name === \"dist\" ||\n          file.name === \".turbo\"\n        ) {\n          return;\n        }\n        await walk(filePath, fileList);\n      } else {\n        fileList.push(filePath);\n      }\n    })\n  );\n  return fileList;\n};\n\nexport const discoverProject = async (\n  rootDir: string\n): Promise<ProjectInfo> => {\n  const allFiles = await walk(rootDir);\n  const dockerfiles: string[] = [];\n  const composeFiles: string[] = [];\n  const dockerignores: string[] = [];\n\n  for (const file of allFiles) {\n    const base = path.basename(file).toLowerCase();\n\n    if (base === \".dockerignore\") {\n      dockerignores.push(path.relative(rootDir, file));\n    }\n\n    // Match Dockerfile, Dockerfile.*, *.dockerfile\n    if (\n      base === \"dockerfile\" ||\n      base.startsWith(\"dockerfile.\") ||\n      base.endsWith(\".dockerfile\")\n    ) {\n      dockerfiles.push(path.relative(rootDir, file));\n    }\n\n    // Match docker-compose.yml, docker-compose.*.yml, compose.yml, compose.*.yml, and yaml extensions\n    if (\n      base === \"docker-compose.yml\" ||\n      base === \"docker-compose.yaml\" ||\n      base === \"compose.yml\" ||\n      base === \"compose.yaml\" ||\n      ((base.startsWith(\"docker-compose.\") || base.startsWith(\"compose.\")) &&\n        (base.endsWith(\".yml\") || base.endsWith(\".yaml\")))\n    ) {\n      composeFiles.push(path.relative(rootDir, file));\n    }\n  }\n\n  return {\n    composeFiles,\n    dockerfiles,\n    dockerignores,\n  };\n};\n","import type { DockerfileInstruction } from \"../types/index\";\n\nexport const parseDockerfile = (content: string): DockerfileInstruction[] => {\n  const instructions: DockerfileInstruction[] = [];\n  const lines = content.split(/\\r?\\n/u);\n\n  let currentInstruction = \"\";\n  let currentArgs = \"\";\n  let startLine = 0;\n  let rawAccumulator: string[] = [];\n\n  for (const [i, rawLine] of lines.entries()) {\n    const trimmed = rawLine.trim();\n    const lineNum = i + 1;\n\n    // Skip empty lines or comment lines if not in multi-line block\n    if (!currentInstruction && (trimmed === \"\" || trimmed.startsWith(\"#\"))) {\n      continue;\n    }\n\n    rawAccumulator.push(rawLine);\n\n    let lineContent = trimmed;\n\n    // Inside a multi-line run, comment lines are ignored by docker parser\n    if (lineContent.startsWith(\"#\")) {\n      continue;\n    }\n\n    const hasContinuation = lineContent.endsWith(\"\\\\\");\n    if (hasContinuation) {\n      lineContent = lineContent.slice(0, -1).trim();\n    }\n\n    if (currentInstruction) {\n      currentArgs += (currentArgs ? \" \" : \"\") + lineContent;\n    } else {\n      startLine = lineNum;\n      // Match the first instruction word (e.g. FROM, RUN, COPY)\n      const match = lineContent.match(/^(?<inst>[A-Z]+)\\s+(?<args>.*)$/iu);\n      if (match?.groups) {\n        currentInstruction = match.groups.inst.toUpperCase();\n        currentArgs = match.groups.args;\n      } else {\n        const word = lineContent.trim().toUpperCase();\n        if (\n          [\"RUN\", \"CMD\", \"ENTRYPOINT\", \"EXPOSE\", \"USER\", \"WORKDIR\"].includes(\n            word\n          )\n        ) {\n          currentInstruction = word;\n          currentArgs = \"\";\n        }\n      }\n    }\n\n    if (!hasContinuation) {\n      if (currentInstruction) {\n        instructions.push({\n          args: currentArgs,\n          instruction: currentInstruction,\n          line: startLine,\n          raw: rawAccumulator.join(\"\\n\"),\n        });\n      }\n      currentInstruction = \"\";\n      currentArgs = \"\";\n      rawAccumulator = [];\n    }\n  }\n\n  if (currentInstruction) {\n    instructions.push({\n      args: currentArgs,\n      instruction: currentInstruction,\n      line: startLine,\n      raw: rawAccumulator.join(\"\\n\"),\n    });\n  }\n\n  return instructions;\n};\n","import * as Data from \"effect/Data\";\n\nexport class ConfigError extends Data.TaggedError(\"ConfigError\")<{\n  readonly message: string;\n}> {}\n","import * as Data from \"effect/Data\";\n\nexport class FileNotFoundError extends Data.TaggedError(\"FileNotFoundError\")<{\n  readonly path: string;\n}> {}\n","import * as Data from \"effect/Data\";\n\nexport class ParseError extends Data.TaggedError(\"ParseError\")<{\n  readonly file: string;\n  readonly message: string;\n}> {}\n","import { parse } from \"yaml\";\n\nimport { ParseError } from \"../errors\";\n\nexport const parseCompose = (content: string, filepath: string): unknown => {\n  try {\n    return parse(content);\n  } catch (error: unknown) {\n    throw new ParseError({\n      file: filepath,\n      message: error instanceof Error ? error.message : String(error),\n    });\n  }\n};\n","import type { Diagnostic, DockerfileRule } from \"../types/index\";\n\nconst createDiagnostic = (\n  file: string,\n  ruleKey: string,\n  severity: \"error\" | \"warning\" | \"info\",\n  message: string,\n  help: string,\n  line?: number\n): Diagnostic => ({ file, help, line, message, rule: ruleKey, severity });\n\nexport const requireHealthcheck: DockerfileRule = {\n  category: \"Best Practices\",\n  check(instructions, file) {\n    const hasHealthcheck = instructions.some(\n      (inst) => inst.instruction === \"HEALTHCHECK\"\n    );\n\n    // Only suggest healthcheck if it has exposed ports or command lines indicating it runs an app\n    const hasExposedPortsOrEntry = instructions.some(\n      (inst) =>\n        inst.instruction === \"EXPOSE\" ||\n        inst.instruction === \"CMD\" ||\n        inst.instruction === \"ENTRYPOINT\"\n    );\n\n    if (!hasHealthcheck && hasExposedPortsOrEntry) {\n      return [\n        createDiagnostic(\n          file,\n          this.key,\n          this.defaultSeverity as \"error\" | \"warning\" | \"info\",\n          \"No HEALTHCHECK instruction found. Containers running services should expose healthchecks to enable auto-healing.\",\n          this.help,\n          1\n        ),\n      ];\n    }\n    return [];\n  },\n  defaultSeverity: \"info\",\n  help: \"Use HEALTHCHECK (e.g., 'HEALTHCHECK --interval=30s --timeout=3s CMD curl -f http://localhost/ || exit 1') so Docker can monitor the container's live status.\",\n  key: \"docker-doctor/require-healthcheck\",\n  message: \"Add a HEALTHCHECK instruction\",\n};\n\nexport const preferCopyOverAdd: DockerfileRule = {\n  category: \"Best Practices\",\n  check(instructions, file) {\n    const diagnostics: Diagnostic[] = [];\n\n    for (const inst of instructions) {\n      if (inst.instruction === \"ADD\") {\n        const parts = inst.args.split(/\\s+/u);\n        const [src] = parts;\n\n        // If it's not a remote url (handled by security/no-add-remote) and not a compressed file\n        const isRemote =\n          src.startsWith(\"http://\") || src.startsWith(\"https://\");\n        const isArchive =\n          src.endsWith(\".tar\") ||\n          src.endsWith(\".tar.gz\") ||\n          src.endsWith(\".tgz\") ||\n          src.endsWith(\".zip\");\n\n        if (!isRemote && !isArchive) {\n          diagnostics.push(\n            createDiagnostic(\n              file,\n              this.key,\n              this.defaultSeverity as \"error\" | \"warning\" | \"info\",\n              `ADD instruction used for regular files: '${inst.args}'. COPY is simpler and less prone to magic side effects.`,\n              this.help,\n              inst.line\n            )\n          );\n        }\n      }\n    }\n\n    return diagnostics;\n  },\n  defaultSeverity: \"warning\",\n  help: \"Use COPY instead of ADD unless you explicitly need auto-extraction of local compressed archives (tar, zip, etc.).\",\n  key: \"docker-doctor/prefer-copy-over-add\",\n  message: \"Prefer COPY over ADD\",\n};\n\nexport const useExecForm: DockerfileRule = {\n  category: \"Best Practices\",\n  check(instructions, file) {\n    const diagnostics: Diagnostic[] = [];\n\n    for (const inst of instructions) {\n      if (inst.instruction === \"CMD\" || inst.instruction === \"ENTRYPOINT\") {\n        const args = inst.args.trim();\n        // If it does not start with [ and end with ]\n        if (!args.startsWith(\"[\") || !args.endsWith(\"]\")) {\n          diagnostics.push(\n            createDiagnostic(\n              file,\n              this.key,\n              this.defaultSeverity as \"error\" | \"warning\" | \"info\",\n              `${inst.instruction} instruction uses shell form instead of exec form. In shell form, the command runs under '/bin/sh -c', which does not pass signals to child processes.`,\n              this.help,\n              inst.line\n            )\n          );\n        }\n      }\n    }\n\n    return diagnostics;\n  },\n  defaultSeverity: \"warning\",\n  help: 'Write CMD/ENTRYPOINT instructions as JSON arrays (e.g. ENTRYPOINT [\"node\", \"index.js\"]) so OS signals (like SIGTERM) are forwarded correctly.',\n  key: \"docker-doctor/use-exec-form\",\n  message: \"Use exec form for CMD and ENTRYPOINT\",\n};\n\nexport const requireLabels: DockerfileRule = {\n  category: \"Best Practices\",\n  check(instructions, file) {\n    const hasLabel = instructions.some((inst) => inst.instruction === \"LABEL\");\n    if (!hasLabel) {\n      return [\n        createDiagnostic(\n          file,\n          this.key,\n          this.defaultSeverity as \"error\" | \"warning\" | \"info\",\n          \"No LABEL metadata was found in this Dockerfile. Adding labels helps identify build information, maintainers, and descriptions.\",\n          this.help,\n          1\n        ),\n      ];\n    }\n    return [];\n  },\n  defaultSeverity: \"info\",\n  help: 'Use LABEL instructions (e.g. LABEL org.opencontainers.image.authors=\"...\") to document ownership, license, version, and build info.',\n  key: \"docker-doctor/require-labels\",\n  message: \"Add LABEL metadata to images\",\n};\n\nexport const combineAptUpdateInstall: DockerfileRule = {\n  category: \"Best Practices\",\n  check(instructions, file) {\n    const diagnostics: Diagnostic[] = [];\n    for (const inst of instructions) {\n      if (inst.instruction === \"RUN\") {\n        const hasUpdate = inst.args.includes(\"apt-get update\");\n        const hasInstall = inst.args.includes(\"apt-get install\");\n\n        if (hasUpdate && !hasInstall) {\n          diagnostics.push(\n            createDiagnostic(\n              file,\n              this.key,\n              this.defaultSeverity as \"error\" | \"warning\" | \"info\",\n              \"RUN apt-get update used without apt-get install in the same instruction. This can cause caching issues and build failures.\",\n              this.help,\n              inst.line\n            )\n          );\n        } else if (hasInstall && !hasUpdate) {\n          diagnostics.push(\n            createDiagnostic(\n              file,\n              this.key,\n              this.defaultSeverity as \"error\" | \"warning\" | \"info\",\n              \"RUN apt-get install used without apt-get update in the same instruction. Always combine them to ensure up-to-date package installation.\",\n              this.help,\n              inst.line\n            )\n          );\n        }\n      }\n    }\n    return diagnostics;\n  },\n  defaultSeverity: \"warning\",\n  help: \"Combine 'apt-get update' and 'apt-get install' in the same RUN instruction (e.g. 'RUN apt-get update && apt-get install -y --no-install-recommends <package> && rm -rf /var/lib/apt/lists/*').\",\n  key: \"docker-doctor/combine-apt-update-install\",\n  message: \"Combine apt-get update and apt-get install\",\n};\n\nexport const usePipefail: DockerfileRule = {\n  category: \"Best Practices\",\n  check(instructions, file) {\n    const diagnostics: Diagnostic[] = [];\n    for (const inst of instructions) {\n      if (inst.instruction === \"RUN\") {\n        const { raw } = inst;\n        const hasPipe = /(?<!\\|)\\|(?!\\|)/u.test(raw);\n        if (hasPipe && !raw.includes(\"pipefail\")) {\n          diagnostics.push(\n            createDiagnostic(\n              file,\n              this.key,\n              this.defaultSeverity as \"error\" | \"warning\" | \"info\",\n              \"RUN instruction uses a pipe (|) but does not configure 'pipefail'. If a command in the pipe fails, the step may still succeed silently.\",\n              this.help,\n              inst.line\n            )\n          );\n        }\n      }\n    }\n    return diagnostics;\n  },\n  defaultSeverity: \"warning\",\n  help: \"Prepend 'set -o pipefail &&' to pipe commands, or use exec form with a shell that supports it (e.g., RUN ['/bin/bash', '-c', 'set -o pipefail && ...']).\",\n  key: \"docker-doctor/use-pipefail\",\n  message: \"Use pipefail to catch pipeline command failures\",\n};\n\nexport const absoluteWorkdir: DockerfileRule = {\n  category: \"Best Practices\",\n  check(instructions, file) {\n    const diagnostics: Diagnostic[] = [];\n    for (const inst of instructions) {\n      if (inst.instruction === \"WORKDIR\") {\n        const path = inst.args.trim();\n        const isAbsolute = /^(?:\\/|\\\\|\\$|[a-zA-Z]:)/u.test(path);\n\n        if (!isAbsolute) {\n          diagnostics.push(\n            createDiagnostic(\n              file,\n              this.key,\n              this.defaultSeverity as \"error\" | \"warning\" | \"info\",\n              `WORKDIR specifies a relative path '${path}'. For clarity and reliability, always use absolute paths.`,\n              this.help,\n              inst.line\n            )\n          );\n        }\n      }\n    }\n    return diagnostics;\n  },\n  defaultSeverity: \"warning\",\n  help: \"Always specify absolute paths for WORKDIR instructions (e.g. WORKDIR /app).\",\n  key: \"docker-doctor/absolute-workdir\",\n  message: \"Use absolute paths for WORKDIR\",\n};\n\nexport const avoidRunCd: DockerfileRule = {\n  category: \"Best Practices\",\n  check(instructions, file) {\n    const diagnostics: Diagnostic[] = [];\n    for (const inst of instructions) {\n      if (inst.instruction === \"RUN\" && /\\bcd\\b/u.test(inst.args)) {\n        diagnostics.push(\n          createDiagnostic(\n            file,\n            this.key,\n            this.defaultSeverity as \"error\" | \"warning\" | \"info\",\n            \"Avoid using 'cd' in RUN instructions. Use WORKDIR instead to change the working directory stably across layers.\",\n            this.help,\n            inst.line\n          )\n        );\n      }\n    }\n    return diagnostics;\n  },\n  defaultSeverity: \"info\",\n  help: \"Use the WORKDIR instruction instead of 'cd' inside RUN to establish directory context.\",\n  key: \"docker-doctor/avoid-run-cd\",\n  message: \"Avoid changing directories with cd in RUN\",\n};\n\nexport const sortMultilineArgs: DockerfileRule = {\n  category: \"Best Practices\",\n  check(instructions, file) {\n    const diagnostics: Diagnostic[] = [];\n    for (const inst of instructions) {\n      if (inst.instruction === \"RUN\") {\n        const { raw } = inst;\n        const isPackageInstall =\n          raw.includes(\"apt-get install\") ||\n          raw.includes(\"apk add\") ||\n          raw.includes(\"yum install\") ||\n          raw.includes(\"dnf install\");\n\n        const hasContinuation = raw.includes(\"\\\\\\n\") || raw.includes(\"\\\\\\r\\n\");\n\n        if (isPackageInstall && hasContinuation) {\n          const lines = raw.split(/\\r?\\n/u);\n          const packages = lines\n            .slice(1)\n            .map((line) => line.trim())\n            .filter(\n              (line) =>\n                line !== \"\" &&\n                !line.startsWith(\"&&\") &&\n                !line.startsWith(\"-\") &&\n                !line.includes(\"rm -rf\")\n            )\n            .map((line) =>\n              line.endsWith(\"\\\\\") ? line.slice(0, -1).trim() : line\n            )\n            .filter(Boolean);\n\n          if (packages.length > 1) {\n            const sorted = packages.toSorted((a, b) => a.localeCompare(b));\n            const isSorted = packages.every((val, idx) => val === sorted[idx]);\n            if (!isSorted) {\n              diagnostics.push(\n                createDiagnostic(\n                  file,\n                  this.key,\n                  this.defaultSeverity as \"error\" | \"warning\" | \"info\",\n                  \"Multi-line package arguments are not sorted alphanumerically. Keeping them sorted makes maintenance easier and prevents duplicates.\",\n                  this.help,\n                  inst.line\n                )\n              );\n            }\n          }\n        }\n      }\n    }\n    return diagnostics;\n  },\n  defaultSeverity: \"info\",\n  help: \"Sort multi-line package installation lists (e.g. apk/apt package lists) alphabetically.\",\n  key: \"docker-doctor/sort-multiline-args\",\n  message: \"Sort multi-line arguments alphanumerically\",\n};\n\nexport const useraddNoLogInit: DockerfileRule = {\n  category: \"Best Practices\",\n  check(instructions, file) {\n    const diagnostics: Diagnostic[] = [];\n    for (const inst of instructions) {\n      if (\n        inst.instruction === \"RUN\" &&\n        /\\buseradd\\b/u.test(inst.args) &&\n        !inst.args.includes(\"--no-log-init\")\n      ) {\n        diagnostics.push(\n          createDiagnostic(\n            file,\n            this.key,\n            this.defaultSeverity as \"error\" | \"warning\" | \"info\",\n            \"RUN instruction runs 'useradd' without '--no-log-init'. This can cause excessive disk space usage / exhaustion under Go's sparse tar archive bug when large UIDs are used.\",\n            this.help,\n            inst.line\n          )\n        );\n      }\n    }\n    return diagnostics;\n  },\n  defaultSeverity: \"warning\",\n  help: \"Pass '--no-log-init' flag to useradd (e.g., 'RUN useradd --no-log-init -r -g mygroup myuser').\",\n  key: \"docker-doctor/useradd-no-log-init\",\n  message: \"Use --no-log-init with useradd\",\n};\n\nexport const bestPracticesRules = [\n  requireHealthcheck,\n  preferCopyOverAdd,\n  useExecForm,\n  requireLabels,\n  combineAptUpdateInstall,\n  usePipefail,\n  absoluteWorkdir,\n  avoidRunCd,\n  sortMultilineArgs,\n  useraddNoLogInit,\n];\n","import type { Diagnostic, ComposeRule } from \"../types/index\";\n\nconst createDiagnostic = (\n  file: string,\n  ruleKey: string,\n  severity: \"error\" | \"warning\" | \"info\",\n  message: string,\n  help: string\n): Diagnostic => ({ file, help, message, rule: ruleKey, severity });\n\nexport const noVersionKey: ComposeRule = {\n  category: \"Compose\",\n  check(composeContent, file) {\n    if (\n      composeContent &&\n      typeof composeContent === \"object\" &&\n      \"version\" in composeContent\n    ) {\n      return [\n        createDiagnostic(\n          file,\n          this.key,\n          this.defaultSeverity as \"error\" | \"warning\" | \"info\",\n          \"The 'version' property is deprecated. Remove it to use standard Compose spec behavior.\",\n          this.help\n        ),\n      ];\n    }\n    return [];\n  },\n  defaultSeverity: \"warning\",\n  help: \"The 'version' key is deprecated by the Compose specification. Omitting it defaults to the latest specification.\",\n  key: \"docker-doctor/no-version-key\",\n  message: \"Remove the 'version' key from Compose file\",\n};\n\nexport const requireResourceLimits: ComposeRule = {\n  category: \"Compose\",\n  check(composeContent, file) {\n    const diagnostics: Diagnostic[] = [];\n\n    if (\n      composeContent &&\n      typeof composeContent === \"object\" &&\n      \"services\" in composeContent\n    ) {\n      const { services } = composeContent;\n      if (services && typeof services === \"object\") {\n        for (const [name, config] of Object.entries(services)) {\n          if (config && typeof config === \"object\") {\n            const deploy = (config as Record<string, unknown>).deploy as\n              | Record<string, unknown>\n              | undefined;\n            const resources = deploy?.resources as\n              | Record<string, unknown>\n              | undefined;\n            const limits = resources?.limits as\n              | Record<string, unknown>\n              | undefined;\n\n            if (!limits || (!limits.cpus && !limits.memory)) {\n              diagnostics.push(\n                createDiagnostic(\n                  file,\n                  this.key,\n                  this.defaultSeverity as \"error\" | \"warning\" | \"info\",\n                  `Service '${name}' does not have CPU or memory limits defined. A resource leak in this service could crash the host.`,\n                  this.help\n                )\n              );\n            }\n          }\n        }\n      }\n    }\n\n    return diagnostics;\n  },\n  defaultSeverity: \"warning\",\n  help: \"Add resource limits (e.g. deploy.resources.limits) to prevent a single service from starving host resources in production.\",\n  key: \"docker-doctor/require-resource-limits\",\n  message: \"Define resource limits for services\",\n};\n\nexport const requireRestartPolicy: ComposeRule = {\n  category: \"Compose\",\n  check(composeContent, file) {\n    const diagnostics: Diagnostic[] = [];\n\n    if (\n      composeContent &&\n      typeof composeContent === \"object\" &&\n      \"services\" in composeContent\n    ) {\n      const { services } = composeContent;\n      if (services && typeof services === \"object\") {\n        for (const [name, config] of Object.entries(services)) {\n          if (config && typeof config === \"object\") {\n            const hasRestart = \"restart\" in config;\n            const deploy = (config as Record<string, unknown>).deploy as\n              | Record<string, unknown>\n              | undefined;\n            const hasDeployRestart = deploy?.restart_policy !== undefined;\n\n            if (!hasRestart && !hasDeployRestart) {\n              diagnostics.push(\n                createDiagnostic(\n                  file,\n                  this.key,\n                  this.defaultSeverity as \"error\" | \"warning\" | \"info\",\n                  `Service '${name}' has no restart policy configured. It will not restart if it crashes or if the host reboots.`,\n                  this.help\n                )\n              );\n            }\n          }\n        }\n      }\n    }\n\n    return diagnostics;\n  },\n  defaultSeverity: \"warning\",\n  help: \"Define 'restart: always' or 'restart: unless-stopped' (or deploy.restart_policy) so services restart on crashes or host reboot.\",\n  key: \"docker-doctor/require-restart-policy\",\n  message: \"Set restart policy for services\",\n};\n\nexport const useDependsOnCondition: ComposeRule = {\n  category: \"Compose\",\n  check(composeContent, file) {\n    const diagnostics: Diagnostic[] = [];\n\n    if (\n      composeContent &&\n      typeof composeContent === \"object\" &&\n      \"services\" in composeContent\n    ) {\n      const { services } = composeContent;\n      if (services && typeof services === \"object\") {\n        for (const [name, config] of Object.entries(services)) {\n          if (config && typeof config === \"object\") {\n            const dependsOn = (config as Record<string, unknown>).depends_on;\n            if (dependsOn && Array.isArray(dependsOn)) {\n              diagnostics.push(\n                createDiagnostic(\n                  file,\n                  this.key,\n                  this.defaultSeverity as \"error\" | \"warning\" | \"info\",\n                  `Service '${name}' uses shorthand depends_on list. This only checks if containers are started, not if they are ready/healthy.`,\n                  this.help\n                )\n              );\n            }\n          }\n        }\n      }\n    }\n\n    return diagnostics;\n  },\n  defaultSeverity: \"info\",\n  help: \"Instead of a simple service list, use 'depends_on: { dependency: { condition: service_healthy } }' to ensure dependencies are fully ready before starting.\",\n  key: \"docker-doctor/use-depends-on-condition\",\n  message: \"Use long-form depends_on with healthcheck conditions\",\n};\n\nexport const composeRules = [\n  noVersionKey,\n  requireResourceLimits,\n  requireRestartPolicy,\n  useDependsOnCondition,\n];\n","import type { Diagnostic, DockerfileRule } from \"../types/index\";\n\nconst createDiagnostic = (\n  file: string,\n  ruleKey: string,\n  severity: \"error\" | \"warning\" | \"info\",\n  message: string,\n  help: string,\n  line?: number\n): Diagnostic => ({ file, help, line, message, rule: ruleKey, severity });\n\nexport const preferSlimBase: DockerfileRule = {\n  category: \"Image Size\",\n  check(instructions, file) {\n    const diagnostics: Diagnostic[] = [];\n\n    for (const inst of instructions) {\n      if (inst.instruction === \"FROM\") {\n        const parts = inst.args.split(/\\s+/u);\n        const imagePart = parts.find((p) => !p.startsWith(\"--\"));\n        if (!imagePart || imagePart === \"scratch\") {\n          continue;\n        }\n\n        const colonIndex = imagePart.indexOf(\":\");\n        if (colonIndex !== -1) {\n          const tag = imagePart.slice(colonIndex + 1).toLowerCase();\n\n          // If the tag doesn't contain alpine, slim, distroless, or sha256\n          const isSlim =\n            tag.includes(\"alpine\") ||\n            tag.includes(\"slim\") ||\n            tag.includes(\"distroless\");\n          const isSha = tag.startsWith(\"sha256:\");\n\n          // Skip if it's a multi-stage builder step reference (e.g. FROM build AS publish)\n          const isStageReference = instructions.some(\n            (other) =>\n              other.line < inst.line &&\n              other.instruction === \"FROM\" &&\n              other.args\n                .toLowerCase()\n                .includes(` as ${imagePart.toLowerCase()}`)\n          );\n\n          if (!isSlim && !isSha && !isStageReference) {\n            diagnostics.push(\n              createDiagnostic(\n                file,\n                this.key,\n                this.defaultSeverity as \"error\" | \"warning\" | \"info\",\n                `Base image '${imagePart}' may be a full-OS distribution. Consider using a slim or alpine alternative.`,\n                this.help,\n                inst.line\n              )\n            );\n          }\n        }\n      }\n    }\n\n    return diagnostics;\n  },\n  defaultSeverity: \"info\",\n  help: \"Prefer tags with '-slim', '-alpine', or use distroless base images to minimize the default operating system footprint.\",\n  key: \"docker-doctor/prefer-slim-base\",\n  message: \"Use slim, alpine, or distroless base images\",\n};\n\nexport const cleanPackageCache: DockerfileRule = {\n  category: \"Image Size\",\n  check(instructions, file) {\n    const diagnostics: Diagnostic[] = [];\n\n    for (const inst of instructions) {\n      if (inst.instruction === \"RUN\") {\n        const { args } = inst;\n\n        // check apt-get install without cleanup\n        if (\n          args.includes(\"apt-get install\") &&\n          !args.includes(\"rm -rf /var/lib/apt/lists\")\n        ) {\n          diagnostics.push(\n            createDiagnostic(\n              file,\n              this.key,\n              this.defaultSeverity as \"error\" | \"warning\" | \"info\",\n              `Running 'apt-get install' without removing package lists afterwards. This keeps metadata caches inside the image layer.`,\n              this.help,\n              inst.line\n            )\n          );\n        }\n\n        // check apk add without --no-cache\n        if (\n          args.includes(\"apk add\") &&\n          !args.includes(\"--no-cache\") &&\n          !args.includes(\"rm -rf /var/cache/apk\")\n        ) {\n          diagnostics.push(\n            createDiagnostic(\n              file,\n              this.key,\n              this.defaultSeverity as \"error\" | \"warning\" | \"info\",\n              `Running 'apk add' without '--no-cache' or cleaning the apk cache. This increases layer size.`,\n              this.help,\n              inst.line\n            )\n          );\n        }\n      }\n    }\n\n    return diagnostics;\n  },\n  defaultSeverity: \"warning\",\n  help: \"For apt-get, append '&& rm -rf /var/lib/apt/lists/*'. For apk, use 'apk add --no-cache'. For dnf/yum, run 'yum clean all'.\",\n  key: \"docker-doctor/clean-package-cache\",\n  message: \"Clean up package manager cache in the same RUN layer\",\n};\n\nexport const avoidDevDependencies: DockerfileRule = {\n  category: \"Image Size\",\n  check(instructions, file) {\n    const diagnostics: Diagnostic[] = [];\n    let isLastStage = false;\n    let fromCount = 0;\n\n    for (const inst of instructions) {\n      if (inst.instruction === \"FROM\") {\n        fromCount += 1;\n      }\n    }\n\n    let currentStage = 0;\n    for (const inst of instructions) {\n      if (inst.instruction === \"FROM\") {\n        currentStage += 1;\n        isLastStage = currentStage === fromCount;\n      }\n\n      if (isLastStage && inst.instruction === \"RUN\") {\n        const { args } = inst;\n        if (\n          (args.includes(\"npm install\") ||\n            args.includes(\"npm ci\") ||\n            args.includes(\"yarn install\")) &&\n          !args.includes(\"--production\") &&\n          !args.includes(\"--omit=dev\") &&\n          !args.includes(\"prune\")\n        ) {\n          diagnostics.push(\n            createDiagnostic(\n              file,\n              this.key,\n              this.defaultSeverity as \"error\" | \"warning\" | \"info\",\n              `Running package install '${inst.args}' in the final stage without omitting devDependencies.`,\n              this.help,\n              inst.line\n            )\n          );\n        }\n      }\n    }\n\n    return diagnostics;\n  },\n  defaultSeverity: \"warning\",\n  help: \"For Node.js, run 'npm prune --production' or install only production dependencies ('npm ci --omit=dev') in the runtime stage.\",\n  key: \"docker-doctor/avoid-dev-dependencies\",\n  message:\n    \"Avoid installing development dependencies in final production stage\",\n};\n\nexport const imageSizeRules = [\n  preferSlimBase,\n  cleanPackageCache,\n  avoidDevDependencies,\n];\n","import type { Diagnostic, DockerfileRule } from \"../types/index\";\n\nconst createDiagnostic = (\n  file: string,\n  ruleKey: string,\n  severity: \"error\" | \"warning\" | \"info\",\n  message: string,\n  help: string,\n  line?: number\n): Diagnostic => ({ file, help, line, message, rule: ruleKey, severity });\n\nexport const useMultiStage: DockerfileRule = {\n  category: \"Performance\",\n  check(instructions, file) {\n    const fromCount = instructions.filter(\n      (inst) => inst.instruction === \"FROM\"\n    ).length;\n    if (fromCount === 1) {\n      // Check if it's not a trivial/short Dockerfile (e.g., has some build steps)\n      const hasBuildSteps = instructions.some(\n        (inst) =>\n          inst.instruction === \"RUN\" &&\n          (inst.args.includes(\"npm run build\") ||\n            inst.args.includes(\"yarn build\") ||\n            inst.args.includes(\"bun run build\") ||\n            inst.args.includes(\"cargo build\") ||\n            inst.args.includes(\"make\"))\n      );\n\n      if (hasBuildSteps) {\n        return [\n          createDiagnostic(\n            file,\n            this.key,\n            this.defaultSeverity as \"error\" | \"warning\" | \"info\",\n            \"Only one build stage (FROM) was detected, but build instructions were found. Multi-stage builds can significantly reduce final image size.\",\n            this.help,\n            instructions.find((inst) => inst.instruction === \"FROM\")?.line || 1\n          ),\n        ];\n      }\n    }\n    return [];\n  },\n  defaultSeverity: \"info\",\n  help: \"Use multi-stage builds (multiple FROM statements) to separate build dependencies from the runtime image and reduce size.\",\n  key: \"docker-doctor/use-multi-stage\",\n  message: \"Consider using multi-stage builds\",\n};\n\nexport const orderLayers: DockerfileRule = {\n  category: \"Performance\",\n  check(instructions, file) {\n    const diagnostics: Diagnostic[] = [];\n    let copyAllLine = -1;\n\n    for (const inst of instructions) {\n      if (inst.instruction === \"COPY\" || inst.instruction === \"ADD\") {\n        const parts = inst.args.split(/\\s+/u);\n        const src = parts.find((p) => !p.startsWith(\"--\"));\n\n        if (!src) {\n          continue;\n        }\n\n        if (\n          (src === \".\" || src === \"./\" || src === \"*\" || src.includes(\"src\")) &&\n          copyAllLine === -1\n        ) {\n          copyAllLine = inst.line;\n        }\n      }\n\n      if (inst.instruction === \"RUN\" && copyAllLine !== -1) {\n        const args = inst.args.toLowerCase();\n        if (\n          args.includes(\"npm install\") ||\n          args.includes(\"npm ci\") ||\n          args.includes(\"yarn install\") ||\n          args.includes(\"bun install\") ||\n          args.includes(\"pip install\") ||\n          args.includes(\"cargo fetch\")\n        ) {\n          diagnostics.push(\n            createDiagnostic(\n              file,\n              this.key,\n              this.defaultSeverity as \"error\" | \"warning\" | \"info\",\n              `Running package installation command '${inst.args}' after copying application files (at line ${copyAllLine}). This invalidates the cache on any code changes.`,\n              this.help,\n              inst.line\n            )\n          );\n        }\n      }\n    }\n\n    return diagnostics;\n  },\n  defaultSeverity: \"warning\",\n  help: \"Copy dependency definition files (like package.json, lockfiles) and run install commands BEFORE copying the rest of the application source code.\",\n  key: \"docker-doctor/order-layers\",\n  message: \"Order layers to maximize build cache utility\",\n};\n\nexport const minimizeLayers: DockerfileRule = {\n  category: \"Performance\",\n  check(instructions, file) {\n    const diagnostics: Diagnostic[] = [];\n    let consecutiveRunCount = 0;\n    let firstRunLine = -1;\n\n    for (const inst of instructions) {\n      if (inst.instruction === \"RUN\") {\n        if (consecutiveRunCount === 0) {\n          firstRunLine = inst.line;\n        }\n        consecutiveRunCount += 1;\n      } else {\n        if (consecutiveRunCount > 2) {\n          diagnostics.push(\n            createDiagnostic(\n              file,\n              this.key,\n              this.defaultSeverity as \"error\" | \"warning\" | \"info\",\n              `Found ${consecutiveRunCount} consecutive RUN instructions starting at line ${firstRunLine}. Consider combining them into a single RUN layer.`,\n              this.help,\n              firstRunLine\n            )\n          );\n        }\n        consecutiveRunCount = 0;\n      }\n    }\n\n    if (consecutiveRunCount > 2) {\n      diagnostics.push(\n        createDiagnostic(\n          file,\n          this.key,\n          this.defaultSeverity as \"error\" | \"warning\" | \"info\",\n          `Found ${consecutiveRunCount} consecutive RUN instructions starting at line ${firstRunLine}. Consider combining them into a single RUN layer.`,\n          this.help,\n          firstRunLine\n        )\n      );\n    }\n\n    return diagnostics;\n  },\n  defaultSeverity: \"info\",\n  help: \"Combine consecutive RUN instructions using '&&' and '\\\\' to reduce the total layer count and image size.\",\n  key: \"docker-doctor/minimize-layers\",\n  message: \"Minimize the number of image layers\",\n};\n\nexport const useDockerignore: DockerfileRule = {\n  category: \"Performance\",\n  check(instructions, file, context) {\n    // If copying everything, we definitely need .dockerignore\n    const hasCopyAll = instructions.some((inst) => {\n      if (inst.instruction === \"COPY\" || inst.instruction === \"ADD\") {\n        const parts = inst.args.split(/\\s+/u);\n        const [src] = parts;\n        return src === \".\" || src === \"./\" || src === \"*\";\n      }\n      return false;\n    });\n\n    if (hasCopyAll && context?.projectFiles) {\n      const hasDockerignore = context.projectFiles.some((f) =>\n        f.endsWith(\".dockerignore\")\n      );\n      if (!hasDockerignore) {\n        return [\n          createDiagnostic(\n            file,\n            this.key,\n            this.defaultSeverity as \"error\" | \"warning\" | \"info\",\n            \"Using COPY/ADD with wildcard/directory, but no .dockerignore file was found in the workspace. This can copy local build folders and secrets.\",\n            this.help,\n            1\n          ),\n        ];\n      }\n    }\n    return [];\n  },\n  defaultSeverity: \"warning\",\n  help: \"Create a .dockerignore file in the same directory as the Dockerfile to prevent copying unnecessary files (like node_modules, logs, build artifacts).\",\n  key: \"docker-doctor/use-dockerignore\",\n  message: \"Ensure .dockerignore is used\",\n};\n\nexport const performanceRules = [\n  useMultiStage,\n  orderLayers,\n  minimizeLayers,\n  useDockerignore,\n];\n","import type { Diagnostic, DockerfileRule } from \"../types/index\";\n\nconst createDiagnostic = (\n  file: string,\n  ruleKey: string,\n  severity: \"error\" | \"warning\" | \"info\",\n  message: string,\n  help: string,\n  line?: number\n): Diagnostic => ({ file, help, line, message, rule: ruleKey, severity });\n\nexport const noRootUser: DockerfileRule = {\n  category: \"Security\",\n  check(instructions, file) {\n    let lastUser = \"root\";\n    let lastUserLine = 1;\n\n    for (const inst of instructions) {\n      if (inst.instruction === \"USER\") {\n        lastUser = inst.args.trim().toLowerCase();\n        lastUserLine = inst.line;\n      }\n    }\n\n    if (lastUser === \"root\" || lastUser === \"0\" || lastUser === \"0:0\") {\n      return [\n        createDiagnostic(\n          file,\n          this.key,\n          this.defaultSeverity as \"error\" | \"warning\" | \"info\",\n          \"The container runs as root. Running as root allows potential container breakout vulnerabilities.\",\n          this.help,\n          lastUserLine\n        ),\n      ];\n    }\n\n    return [];\n  },\n  defaultSeverity: \"warning\",\n  help: \"Add a non-root user (e.g., 'USER node' or 'USER 1000') to improve security.\",\n  key: \"docker-doctor/no-root-user\",\n  message: \"Container should not run as root user\",\n};\n\nexport const noSecretsInEnv: DockerfileRule = {\n  category: \"Security\",\n  check(instructions, file) {\n    const diagnostics: Diagnostic[] = [];\n    const secretKeywords = [\n      /password/iu,\n      /secret/iu,\n      /token/iu,\n      /api_key/iu,\n      /private_key/iu,\n      /auth/iu,\n    ];\n\n    for (const inst of instructions) {\n      if (inst.instruction === \"ENV\" || inst.instruction === \"ARG\") {\n        const args = inst.args.trim();\n        if (inst.instruction === \"ENV\" && !args.includes(\"=\")) {\n          // KEY VALUE format\n          const match = args.match(/^(?<key>[^\\s]+)\\s+(?<value>.*)$/u);\n          if (match?.groups) {\n            const { key, value } = match.groups;\n            const isSecretKey = secretKeywords.some((regex) => regex.test(key));\n            if (\n              isSecretKey &&\n              value &&\n              !value.startsWith(\"$\") &&\n              !value.startsWith(\"{\")\n            ) {\n              diagnostics.push(\n                createDiagnostic(\n                  file,\n                  this.key,\n                  this.defaultSeverity as \"error\" | \"warning\" | \"info\",\n                  `Potential secret found in ${inst.instruction}: '${key}'. Secrets baked into images can be extracted easily by anyone with image access.`,\n                  this.help,\n                  inst.line\n                )\n              );\n            }\n          }\n        } else {\n          // Existing KEY=VALUE logic\n          const parts = args.split(/\\s+/u);\n          for (const part of parts) {\n            const eqIndex = part.indexOf(\"=\");\n            let key = \"\";\n            let value = \"\";\n\n            if (eqIndex > 0) {\n              key = part.slice(0, eqIndex);\n              value = part.slice(eqIndex + 1);\n            } else {\n              key = part;\n            }\n\n            const isSecretKey = secretKeywords.some((regex) => regex.test(key));\n            if (\n              isSecretKey &&\n              value &&\n              !value.startsWith(\"$\") &&\n              !value.startsWith(\"{\")\n            ) {\n              diagnostics.push(\n                createDiagnostic(\n                  file,\n                  this.key,\n                  this.defaultSeverity as \"error\" | \"warning\" | \"info\",\n                  `Potential secret found in ${inst.instruction}: '${key}'. Secrets baked into images can be extracted easily by anyone with image access.`,\n                  this.help,\n                  inst.line\n                )\n              );\n            }\n          }\n        }\n      }\n    }\n\n    return diagnostics;\n  },\n  defaultSeverity: \"error\",\n  help: \"Use Docker Secrets, build arguments passed at runtime, or environment variables at runtime instead of baking them into the image.\",\n  key: \"docker-doctor/no-secrets-in-env\",\n  message: \"Do not store secrets in ENV or ARG instructions\",\n};\n\nexport const pinImageVersion: DockerfileRule = {\n  category: \"Security\",\n  check(instructions, file) {\n    const diagnostics: Diagnostic[] = [];\n\n    for (const inst of instructions) {\n      if (inst.instruction === \"FROM\") {\n        // FROM image or FROM image:tag or FROM image@sha256:hash\n        // Also respect multi-stage builds (AS stageName)\n        const parts = inst.args.split(/\\s+/u);\n        const imagePart = parts.find((p) => !p.startsWith(\"--\"));\n\n        if (!imagePart || imagePart === \"scratch\") {\n          continue;\n        }\n\n        const colonIndex = imagePart.indexOf(\":\");\n        const atIndex = imagePart.indexOf(\"@\");\n\n        if (colonIndex === -1 && atIndex === -1) {\n          diagnostics.push(\n            createDiagnostic(\n              file,\n              this.key,\n              this.defaultSeverity as \"error\" | \"warning\" | \"info\",\n              `Base image '${imagePart}' does not specify a tag. This makes builds non-deterministic.`,\n              this.help,\n              inst.line\n            )\n          );\n        } else if (colonIndex !== -1) {\n          const tag = imagePart.slice(colonIndex + 1);\n          if (tag === \"latest\") {\n            diagnostics.push(\n              createDiagnostic(\n                file,\n                this.key,\n                this.defaultSeverity as \"error\" | \"warning\" | \"info\",\n                `Base image '${imagePart}' uses the mutable 'latest' tag. This makes builds non-deterministic.`,\n                this.help,\n                inst.line\n              )\n            );\n          }\n        }\n      }\n    }\n\n    return diagnostics;\n  },\n  defaultSeverity: \"warning\",\n  help: \"Specify a concrete tag instead of 'latest' or no tag (e.g., 'node:22.2.0-alpine' instead of 'node').\",\n  key: \"docker-doctor/pin-image-version\",\n  message: \"Always pin base image versions to specific tags\",\n};\n\nexport const noAddRemote: DockerfileRule = {\n  category: \"Security\",\n  check(instructions, file) {\n    const diagnostics: Diagnostic[] = [];\n\n    for (const inst of instructions) {\n      if (inst.instruction === \"ADD\") {\n        const parts = inst.args.split(/\\s+/u);\n        const [src] = parts;\n\n        if (src.startsWith(\"http://\") || src.startsWith(\"https://\")) {\n          diagnostics.push(\n            createDiagnostic(\n              file,\n              this.key,\n              this.defaultSeverity as \"error\" | \"warning\" | \"info\",\n              `ADD instruction uses a remote URL '${src}'. Remote files added via ADD cannot be cleaned up in later layers, increasing image size.`,\n              this.help,\n              inst.line\n            )\n          );\n        }\n      }\n    }\n\n    return diagnostics;\n  },\n  defaultSeverity: \"warning\",\n  help: \"Use 'RUN curl' or 'RUN wget' instead of ADD for remote URLs, and delete the downloaded archive in the same layer to minimize size.\",\n  key: \"docker-doctor/no-add-remote\",\n  message: \"Avoid using ADD with remote URLs\",\n};\n\nexport const securityRules = [\n  noRootUser,\n  noSecretsInEnv,\n  pinImageVersion,\n  noAddRemote,\n];\n","import type {\n  DockerfileRule,\n  ComposeRule,\n  RuleDefinition,\n} from \"../types/index\";\nimport { bestPracticesRules } from \"./best-practices\";\nimport { composeRules } from \"./compose\";\nimport { imageSizeRules } from \"./image-size\";\nimport { performanceRules } from \"./performance\";\nimport { securityRules } from \"./security\";\n\nexport const allDockerfileRules: DockerfileRule[] = [\n  ...securityRules,\n  ...performanceRules,\n  ...bestPracticesRules,\n  ...imageSizeRules,\n];\n\nexport const allComposeRules: ComposeRule[] = [...composeRules];\n\nexport const allRules: RuleDefinition[] = [\n  ...allDockerfileRules,\n  ...allComposeRules,\n];\n\nexport const findRule = (key: string): RuleDefinition | undefined =>\n  allRules.find((rule) => rule.key === key);\n","import { allDockerfileRules } from \"../rules/index\";\nimport type {\n  DockerfileInstruction,\n  Diagnostic,\n  RuleSeverity,\n} from \"../types/index\";\n\nexport const runDockerfileRules = (\n  instructions: DockerfileInstruction[],\n  file: string,\n  projectFiles: string[],\n  rulesConfig?: Record<string, RuleSeverity>\n): Diagnostic[] => {\n  const diagnostics: Diagnostic[] = [];\n\n  for (const rule of allDockerfileRules) {\n    const configSeverity = rulesConfig?.[rule.key];\n    if (configSeverity === \"off\") {\n      continue;\n    }\n\n    const ruleDiagnostics = rule.check(instructions, file, { projectFiles });\n\n    // Override severity if config specifies it\n    if (configSeverity) {\n      for (const diag of ruleDiagnostics) {\n        diag.severity = configSeverity as \"error\" | \"warning\" | \"info\";\n      }\n    }\n\n    diagnostics.push(...ruleDiagnostics);\n  }\n\n  return diagnostics;\n};\n","import { allComposeRules } from \"../rules/index\";\nimport type { Diagnostic, RuleSeverity } from \"../types/index\";\n\nexport const runComposeRules = (\n  composeContent: unknown,\n  file: string,\n  rulesConfig?: Record<string, RuleSeverity>\n): Diagnostic[] => {\n  const diagnostics: Diagnostic[] = [];\n\n  for (const rule of allComposeRules) {\n    const configSeverity = rulesConfig?.[rule.key];\n    if (configSeverity === \"off\") {\n      continue;\n    }\n\n    const ruleDiagnostics = rule.check(composeContent, file);\n\n    // Override severity if config specifies it\n    if (configSeverity) {\n      for (const diag of ruleDiagnostics) {\n        diag.severity = configSeverity as \"error\" | \"warning\" | \"info\";\n      }\n    }\n\n    diagnostics.push(...ruleDiagnostics);\n  }\n\n  return diagnostics;\n};\n","import * as Schema from \"effect/Schema\";\n\nexport const RuleSeveritySchema = Schema.Union([\n  Schema.Literal(\"error\"),\n  Schema.Literal(\"warning\"),\n  Schema.Literal(\"info\"),\n  Schema.Literal(\"off\"),\n]);\n\nexport const DockerDoctorConfigSchema = Schema.Struct({\n  categories: Schema.optional(\n    Schema.Struct({\n      \"Best Practices\": Schema.optional(RuleSeveritySchema),\n      Compose: Schema.optional(RuleSeveritySchema),\n      \"Image Size\": Schema.optional(RuleSeveritySchema),\n      Performance: Schema.optional(RuleSeveritySchema),\n      Security: Schema.optional(RuleSeveritySchema),\n    })\n  ),\n  ignore: Schema.optional(\n    Schema.Struct({\n      files: Schema.optional(Schema.Array(Schema.String)),\n    })\n  ),\n  rules: Schema.optional(Schema.Record(Schema.String, RuleSeveritySchema)),\n});\n\nexport type DockerDoctorConfig = Schema.Schema.Type<\n  typeof DockerDoctorConfigSchema\n>;\n","import fs from \"node:fs/promises\";\nimport path from \"node:path\";\n\nimport * as Schema from \"effect/Schema\";\n\nimport { ConfigError } from \"../errors\";\nimport type { DockerDoctorConfig } from \"../schemas/config\";\nimport { DockerDoctorConfigSchema } from \"../schemas/config\";\n\nconst fileExists = async (filePath: string): Promise<boolean> => {\n  try {\n    await fs.access(filePath);\n    return true;\n  } catch {\n    return false;\n  }\n};\n\nconst importConfig = async (filePath: string): Promise<unknown> => {\n  if (filePath.endsWith(\".json\")) {\n    try {\n      const content = await fs.readFile(filePath, \"utf-8\");\n      return JSON.parse(content);\n    } catch (error: unknown) {\n      const msg = error instanceof Error ? error.message : String(error);\n      throw new ConfigError({\n        message: `Failed to parse config JSON: ${msg}`,\n      });\n    }\n  }\n\n  try {\n    const configModule = await import(filePath);\n    return configModule.default || configModule;\n  } catch (error: unknown) {\n    const msg = error instanceof Error ? error.message : String(error);\n    throw new ConfigError({\n      message: `Failed to load config file ${filePath}: ${msg}`,\n    });\n  }\n};\n\nexport const loadConfig = async (\n  rootDir: string,\n  customPath?: string\n): Promise<DockerDoctorConfig> => {\n  let configObject: unknown = null;\n\n  if (customPath) {\n    const fullPath = path.resolve(rootDir, customPath);\n    if (!(await fileExists(fullPath))) {\n      throw new ConfigError({\n        message: `Specified config file not found at ${fullPath}`,\n      });\n    }\n    configObject = await importConfig(fullPath);\n  } else {\n    const candidates = [\n      \"docker-doctor.config.ts\",\n      \"docker-doctor.config.js\",\n      \"docker-doctor.config.mjs\",\n      \"docker-doctor.config.cjs\",\n      \"docker-doctor.config.json\",\n    ];\n\n    /* eslint-disable no-await-in-loop */\n    for (const cand of candidates) {\n      const fullPath = path.join(rootDir, cand);\n      if (await fileExists(fullPath)) {\n        configObject = await importConfig(fullPath);\n        break;\n      }\n    }\n    /* eslint-enable no-await-in-loop */\n\n    if (!configObject) {\n      const pkgPath = path.join(rootDir, \"package.json\");\n      if (await fileExists(pkgPath)) {\n        try {\n          const pkgContent = await fs.readFile(pkgPath, \"utf-8\");\n          const pkgJson = JSON.parse(pkgContent);\n          if (pkgJson.dockerDoctor) {\n            configObject = pkgJson.dockerDoctor;\n          }\n        } catch {\n          // ignore package.json read/parse failures\n        }\n      }\n    }\n  }\n\n  if (!configObject) {\n    return {};\n  }\n\n  try {\n    /* eslint-disable-next-line @typescript-eslint/no-explicit-any */\n    const decoded = Schema.decodeSync(DockerDoctorConfigSchema as any)(\n      configObject\n    );\n    return decoded as DockerDoctorConfig;\n  } catch (error: unknown) {\n    const msg = error instanceof Error ? error.message : String(error);\n    throw new ConfigError({\n      message: `Invalid configuration format: ${msg}`,\n    });\n  }\n};\n","import type { Diagnostic } from \"./types/index\";\n\nexport const calculateScore = (\n  diagnostics: Diagnostic[]\n): {\n  score: number;\n  label: string;\n} => {\n  let penalty = 0;\n\n  for (const diag of diagnostics) {\n    if (diag.severity === \"error\") {\n      penalty += 10;\n    } else if (diag.severity === \"warning\") {\n      penalty += 4;\n    } else if (diag.severity === \"info\") {\n      penalty += 1;\n    }\n  }\n\n  const score = Math.max(0, 100 - penalty);\n\n  let label = \"Critical 🚨\";\n  if (score >= 90) {\n    label = \"Excellent 🏆\";\n  } else if (score >= 75) {\n    label = \"Good ✅\";\n  } else if (score >= 50) {\n    label = \"Needs Work ⚠️\";\n  }\n\n  return { label, score };\n};\n","import type { Diagnostic, ProjectInfo } from \"./types/index\";\n\nexport interface JsonReport {\n  diagnostics: {\n    column?: number;\n    file: string;\n    help: string;\n    line?: number;\n    message: string;\n    rule: string;\n    severity: \"error\" | \"warning\" | \"info\";\n  }[];\n  label: string;\n  project: ProjectInfo;\n  score: number;\n  timestamp: string;\n}\n\nexport const toJsonReport = (\n  diagnostics: Diagnostic[],\n  score: number,\n  label: string,\n  project: ProjectInfo\n): JsonReport => ({\n  diagnostics: diagnostics.map((d) => ({\n    column: d.column,\n    file: d.file,\n    help: d.help,\n    line: d.line,\n    message: d.message,\n    rule: d.rule,\n    severity: d.severity,\n  })),\n  label,\n  project,\n  score,\n  timestamp: new Date().toISOString(),\n});\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;ACKA,MAAM,OAAO,OACX,KACA,WAAqB,CAAC,MACA;CACtB,MAAM,QAAQ,MAAM,GAAG,QAAQ,KAAK,EAAE,eAAe,KAAK,CAAC;CAC3D,MAAM,QAAQ,IACZ,MAAM,IAAI,OAAO,SAAS;EACxB,MAAM,WAAW,KAAK,KAAK,KAAK,KAAK,IAAI;EACzC,IAAI,KAAK,YAAY,GAAG;GACtB,IACE,KAAK,SAAS,kBACd,KAAK,SAAS,UACd,KAAK,SAAS,WACd,KAAK,SAAS,UACd,KAAK,SAAS,UAEd;GAEF,MAAM,KAAK,UAAU,QAAQ;EAC/B,OACE,SAAS,KAAK,QAAQ;CAE1B,CAAC,CACH;CACA,OAAO;AACT;AAEA,MAAa,kBAAkB,OAC7B,YACyB;CACzB,MAAM,WAAW,MAAM,KAAK,OAAO;CACnC,MAAM,cAAwB,CAAC;CAC/B,MAAM,eAAyB,CAAC;CAChC,MAAM,gBAA0B,CAAC;CAEjC,KAAK,MAAM,QAAQ,UAAU;EAC3B,MAAM,OAAO,KAAK,SAAS,IAAI,CAAC,CAAC,YAAY;EAE7C,IAAI,SAAS,iBACX,cAAc,KAAK,KAAK,SAAS,SAAS,IAAI,CAAC;EAIjD,IACE,SAAS,gBACT,KAAK,WAAW,aAAa,KAC7B,KAAK,SAAS,aAAa,GAE3B,YAAY,KAAK,KAAK,SAAS,SAAS,IAAI,CAAC;EAI/C,IACE,SAAS,wBACT,SAAS,yBACT,SAAS,iBACT,SAAS,mBACP,KAAK,WAAW,iBAAiB,KAAK,KAAK,WAAW,UAAU,OAC/D,KAAK,SAAS,MAAM,KAAK,KAAK,SAAS,OAAO,IAEjD,aAAa,KAAK,KAAK,SAAS,SAAS,IAAI,CAAC;CAElD;CAEA,OAAO;EACL;EACA;EACA;CACF;AACF;;;;ACxEA,MAAa,mBAAmB,YAA6C;CAC3E,MAAM,eAAwC,CAAC;CAC/C,MAAM,QAAQ,QAAQ,MAAM,QAAQ;CAEpC,IAAI,qBAAqB;CACzB,IAAI,cAAc;CAClB,IAAI,YAAY;CAChB,IAAI,iBAA2B,CAAC;CAEhC,KAAK,MAAM,CAAC,GAAG,YAAY,MAAM,QAAQ,GAAG;EAC1C,MAAM,UAAU,QAAQ,KAAK;EAC7B,MAAM,UAAU,IAAI;EAGpB,IAAI,CAAC,uBAAuB,YAAY,MAAM,QAAQ,WAAW,GAAG,IAClE;EAGF,eAAe,KAAK,OAAO;EAE3B,IAAI,cAAc;EAGlB,IAAI,YAAY,WAAW,GAAG,GAC5B;EAGF,MAAM,kBAAkB,YAAY,SAAS,IAAI;EACjD,IAAI,iBACF,cAAc,YAAY,MAAM,GAAG,EAAE,CAAC,CAAC,KAAK;EAG9C,IAAI,oBACF,gBAAgB,cAAc,MAAM,MAAM;OACrC;GACL,YAAY;GAEZ,MAAM,QAAQ,YAAY,MAAM,mCAAmC;GACnE,IAAI,OAAO,QAAQ;IACjB,qBAAqB,MAAM,OAAO,KAAK,YAAY;IACnD,cAAc,MAAM,OAAO;GAC7B,OAAO;IACL,MAAM,OAAO,YAAY,KAAK,CAAC,CAAC,YAAY;IAC5C,IACE;KAAC;KAAO;KAAO;KAAc;KAAU;KAAQ;IAAS,CAAC,CAAC,SACxD,IACF,GACA;KACA,qBAAqB;KACrB,cAAc;IAChB;GACF;EACF;EAEA,IAAI,CAAC,iBAAiB;GACpB,IAAI,oBACF,aAAa,KAAK;IAChB,MAAM;IACN,aAAa;IACb,MAAM;IACN,KAAK,eAAe,KAAK,IAAI;GAC/B,CAAC;GAEH,qBAAqB;GACrB,cAAc;GACd,iBAAiB,CAAC;EACpB;CACF;CAEA,IAAI,oBACF,aAAa,KAAK;EAChB,MAAM;EACN,aAAa;EACb,MAAM;EACN,KAAK,eAAe,KAAK,IAAI;CAC/B,CAAC;CAGH,OAAO;AACT;;;;AC/EA,IAAa,cAAb,cAAiC,KAAK,YAAY,aAAa,CAAC,CAE7D,CAAC;;;;ACFJ,IAAa,oBAAb,cAAuC,KAAK,YAAY,mBAAmB,CAAC,CAEzE,CAAC;;;;ACFJ,IAAa,aAAb,cAAgC,KAAK,YAAY,YAAY,CAAC,CAG3D,CAAC;;;;ACDJ,MAAa,gBAAgB,SAAiB,aAA8B;CAC1E,IAAI;EACF,OAAO,MAAM,OAAO;CACtB,SAAS,OAAgB;EACvB,MAAM,IAAI,WAAW;GACnB,MAAM;GACN,SAAS,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK;EAChE,CAAC;CACH;AACF;;;;ACXA,MAAMA,sBACJ,MACA,SACA,UACA,SACA,MACA,UACgB;CAAE;CAAM;CAAM;CAAM;CAAS,MAAM;CAAS;AAAS;AAEvE,MAAa,qBAAqC;CAChD,UAAU;CACV,MAAM,cAAc,MAAM;EACxB,MAAM,iBAAiB,aAAa,MACjC,SAAS,KAAK,gBAAgB,aACjC;EAGA,MAAM,yBAAyB,aAAa,MACzC,SACC,KAAK,gBAAgB,YACrB,KAAK,gBAAgB,SACrB,KAAK,gBAAgB,YACzB;EAEA,IAAI,CAAC,kBAAkB,wBACrB,OAAO,CACLA,mBACE,MACA,KAAK,KACL,KAAK,iBACL,oHACA,KAAK,MACL,CACF,CACF;EAEF,OAAO,CAAC;CACV;CACA,iBAAiB;CACjB,MAAM;CACN,KAAK;CACL,SAAS;AACX;AAEA,MAAa,oBAAoC;CAC/C,UAAU;CACV,MAAM,cAAc,MAAM;EACxB,MAAM,cAA4B,CAAC;EAEnC,KAAK,MAAM,QAAQ,cACjB,IAAI,KAAK,gBAAgB,OAAO;GAE9B,MAAM,CAAC,OADO,KAAK,KAAK,MAAM,MACZ;GAGlB,MAAM,WACJ,IAAI,WAAW,SAAS,KAAK,IAAI,WAAW,UAAU;GACxD,MAAM,YACJ,IAAI,SAAS,MAAM,KACnB,IAAI,SAAS,SAAS,KACtB,IAAI,SAAS,MAAM,KACnB,IAAI,SAAS,MAAM;GAErB,IAAI,CAAC,YAAY,CAAC,WAChB,YAAY,KACVA,mBACE,MACA,KAAK,KACL,KAAK,iBACL,4CAA4C,KAAK,KAAK,2DACtD,KAAK,MACL,KAAK,IACP,CACF;EAEJ;EAGF,OAAO;CACT;CACA,iBAAiB;CACjB,MAAM;CACN,KAAK;CACL,SAAS;AACX;AAEA,MAAa,cAA8B;CACzC,UAAU;CACV,MAAM,cAAc,MAAM;EACxB,MAAM,cAA4B,CAAC;EAEnC,KAAK,MAAM,QAAQ,cACjB,IAAI,KAAK,gBAAgB,SAAS,KAAK,gBAAgB,cAAc;GACnE,MAAM,OAAO,KAAK,KAAK,KAAK;GAE5B,IAAI,CAAC,KAAK,WAAW,GAAG,KAAK,CAAC,KAAK,SAAS,GAAG,GAC7C,YAAY,KACVA,mBACE,MACA,KAAK,KACL,KAAK,iBACL,GAAG,KAAK,YAAY,yJACpB,KAAK,MACL,KAAK,IACP,CACF;EAEJ;EAGF,OAAO;CACT;CACA,iBAAiB;CACjB,MAAM;CACN,KAAK;CACL,SAAS;AACX;AAEA,MAAa,gBAAgC;CAC3C,UAAU;CACV,MAAM,cAAc,MAAM;EAExB,IAAI,CADa,aAAa,MAAM,SAAS,KAAK,gBAAgB,OACtD,GACV,OAAO,CACLA,mBACE,MACA,KAAK,KACL,KAAK,iBACL,kIACA,KAAK,MACL,CACF,CACF;EAEF,OAAO,CAAC;CACV;CACA,iBAAiB;CACjB,MAAM;CACN,KAAK;CACL,SAAS;AACX;AAEA,MAAa,0BAA0C;CACrD,UAAU;CACV,MAAM,cAAc,MAAM;EACxB,MAAM,cAA4B,CAAC;EACnC,KAAK,MAAM,QAAQ,cACjB,IAAI,KAAK,gBAAgB,OAAO;GAC9B,MAAM,YAAY,KAAK,KAAK,SAAS,gBAAgB;GACrD,MAAM,aAAa,KAAK,KAAK,SAAS,iBAAiB;GAEvD,IAAI,aAAa,CAAC,YAChB,YAAY,KACVA,mBACE,MACA,KAAK,KACL,KAAK,iBACL,8HACA,KAAK,MACL,KAAK,IACP,CACF;QACK,IAAI,cAAc,CAAC,WACxB,YAAY,KACVA,mBACE,MACA,KAAK,KACL,KAAK,iBACL,2IACA,KAAK,MACL,KAAK,IACP,CACF;EAEJ;EAEF,OAAO;CACT;CACA,iBAAiB;CACjB,MAAM;CACN,KAAK;CACL,SAAS;AACX;AAEA,MAAa,cAA8B;CACzC,UAAU;CACV,MAAM,cAAc,MAAM;EACxB,MAAM,cAA4B,CAAC;EACnC,KAAK,MAAM,QAAQ,cACjB,IAAI,KAAK,gBAAgB,OAAO;GAC9B,MAAM,EAAE,QAAQ;GAEhB,IADgB,mBAAmB,KAAK,GAC9B,KAAK,CAAC,IAAI,SAAS,UAAU,GACrC,YAAY,KACVA,mBACE,MACA,KAAK,KACL,KAAK,iBACL,2IACA,KAAK,MACL,KAAK,IACP,CACF;EAEJ;EAEF,OAAO;CACT;CACA,iBAAiB;CACjB,MAAM;CACN,KAAK;CACL,SAAS;AACX;AAEA,MAAa,kBAAkC;CAC7C,UAAU;CACV,MAAM,cAAc,MAAM;EACxB,MAAM,cAA4B,CAAC;EACnC,KAAK,MAAM,QAAQ,cACjB,IAAI,KAAK,gBAAgB,WAAW;GAClC,MAAM,OAAO,KAAK,KAAK,KAAK;GAG5B,IAAI,CAFe,2BAA2B,KAAK,IAErC,GACZ,YAAY,KACVA,mBACE,MACA,KAAK,KACL,KAAK,iBACL,sCAAsC,KAAK,6DAC3C,KAAK,MACL,KAAK,IACP,CACF;EAEJ;EAEF,OAAO;CACT;CACA,iBAAiB;CACjB,MAAM;CACN,KAAK;CACL,SAAS;AACX;AAEA,MAAa,aAA6B;CACxC,UAAU;CACV,MAAM,cAAc,MAAM;EACxB,MAAM,cAA4B,CAAC;EACnC,KAAK,MAAM,QAAQ,cACjB,IAAI,KAAK,gBAAgB,SAAS,UAAU,KAAK,KAAK,IAAI,GACxD,YAAY,KACVA,mBACE,MACA,KAAK,KACL,KAAK,iBACL,mHACA,KAAK,MACL,KAAK,IACP,CACF;EAGJ,OAAO;CACT;CACA,iBAAiB;CACjB,MAAM;CACN,KAAK;CACL,SAAS;AACX;AAEA,MAAa,oBAAoC;CAC/C,UAAU;CACV,MAAM,cAAc,MAAM;EACxB,MAAM,cAA4B,CAAC;EACnC,KAAK,MAAM,QAAQ,cACjB,IAAI,KAAK,gBAAgB,OAAO;GAC9B,MAAM,EAAE,QAAQ;GAChB,MAAM,mBACJ,IAAI,SAAS,iBAAiB,KAC9B,IAAI,SAAS,SAAS,KACtB,IAAI,SAAS,aAAa,KAC1B,IAAI,SAAS,aAAa;GAE5B,MAAM,kBAAkB,IAAI,SAAS,MAAM,KAAK,IAAI,SAAS,QAAQ;GAErE,IAAI,oBAAoB,iBAAiB;IAEvC,MAAM,WADQ,IAAI,MAAM,QACH,CAAC,CACnB,MAAM,CAAC,CAAC,CACR,KAAK,SAAS,KAAK,KAAK,CAAC,CAAC,CAC1B,QACE,SACC,SAAS,MACT,CAAC,KAAK,WAAW,IAAI,KACrB,CAAC,KAAK,WAAW,GAAG,KACpB,CAAC,KAAK,SAAS,QAAQ,CAC3B,CAAC,CACA,KAAK,SACJ,KAAK,SAAS,IAAI,IAAI,KAAK,MAAM,GAAG,EAAE,CAAC,CAAC,KAAK,IAAI,IACnD,CAAC,CACA,OAAO,OAAO;IAEjB,IAAI,SAAS,SAAS,GAAG;KACvB,MAAM,SAAS,SAAS,UAAU,GAAG,MAAM,EAAE,cAAc,CAAC,CAAC;KAE7D,IAAI,CADa,SAAS,OAAO,KAAK,QAAQ,QAAQ,OAAO,IACjD,GACV,YAAY,KACVA,mBACE,MACA,KAAK,KACL,KAAK,iBACL,uIACA,KAAK,MACL,KAAK,IACP,CACF;IAEJ;GACF;EACF;EAEF,OAAO;CACT;CACA,iBAAiB;CACjB,MAAM;CACN,KAAK;CACL,SAAS;AACX;AAEA,MAAa,mBAAmC;CAC9C,UAAU;CACV,MAAM,cAAc,MAAM;EACxB,MAAM,cAA4B,CAAC;EACnC,KAAK,MAAM,QAAQ,cACjB,IACE,KAAK,gBAAgB,SACrB,eAAe,KAAK,KAAK,IAAI,KAC7B,CAAC,KAAK,KAAK,SAAS,eAAe,GAEnC,YAAY,KACVA,mBACE,MACA,KAAK,KACL,KAAK,iBACL,8KACA,KAAK,MACL,KAAK,IACP,CACF;EAGJ,OAAO;CACT;CACA,iBAAiB;CACjB,MAAM;CACN,KAAK;CACL,SAAS;AACX;AAEA,MAAa,qBAAqB;CAChC;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;AACF;;;;ACnXA,MAAMC,sBACJ,MACA,SACA,UACA,SACA,UACgB;CAAE;CAAM;CAAM;CAAS,MAAM;CAAS;AAAS;AAEjE,MAAa,eAA4B;CACvC,UAAU;CACV,MAAM,gBAAgB,MAAM;EAC1B,IACE,kBACA,OAAO,mBAAmB,YAC1B,aAAa,gBAEb,OAAO,CACLA,mBACE,MACA,KAAK,KACL,KAAK,iBACL,0FACA,KAAK,IACP,CACF;EAEF,OAAO,CAAC;CACV;CACA,iBAAiB;CACjB,MAAM;CACN,KAAK;CACL,SAAS;AACX;AAEA,MAAa,wBAAqC;CAChD,UAAU;CACV,MAAM,gBAAgB,MAAM;EAC1B,MAAM,cAA4B,CAAC;EAEnC,IACE,kBACA,OAAO,mBAAmB,YAC1B,cAAc,gBACd;GACA,MAAM,EAAE,aAAa;GACrB,IAAI,YAAY,OAAO,aAAa,UAClC;SAAK,MAAM,CAAC,MAAM,WAAW,OAAO,QAAQ,QAAQ,GAClD,IAAI,UAAU,OAAO,WAAW,UAAU;KAOxC,MAAM,UANU,OAAmC,QAGzB,UAGF,EAAE;KAI1B,IAAI,CAAC,UAAW,CAAC,OAAO,QAAQ,CAAC,OAAO,QACtC,YAAY,KACVA,mBACE,MACA,KAAK,KACL,KAAK,iBACL,YAAY,KAAK,sGACjB,KAAK,IACP,CACF;IAEJ;GACF;EAEJ;EAEA,OAAO;CACT;CACA,iBAAiB;CACjB,MAAM;CACN,KAAK;CACL,SAAS;AACX;AAEA,MAAa,uBAAoC;CAC/C,UAAU;CACV,MAAM,gBAAgB,MAAM;EAC1B,MAAM,cAA4B,CAAC;EAEnC,IACE,kBACA,OAAO,mBAAmB,YAC1B,cAAc,gBACd;GACA,MAAM,EAAE,aAAa;GACrB,IAAI,YAAY,OAAO,aAAa,UAClC;SAAK,MAAM,CAAC,MAAM,WAAW,OAAO,QAAQ,QAAQ,GAClD,IAAI,UAAU,OAAO,WAAW,UAAU;KACxC,MAAM,aAAa,aAAa;KAIhC,MAAM,mBAHU,OAAmC,QAGlB,mBAAmB;KAEpD,IAAI,CAAC,cAAc,CAAC,kBAClB,YAAY,KACVA,mBACE,MACA,KAAK,KACL,KAAK,iBACL,YAAY,KAAK,gGACjB,KAAK,IACP,CACF;IAEJ;GACF;EAEJ;EAEA,OAAO;CACT;CACA,iBAAiB;CACjB,MAAM;CACN,KAAK;CACL,SAAS;AACX;AAEA,MAAa,wBAAqC;CAChD,UAAU;CACV,MAAM,gBAAgB,MAAM;EAC1B,MAAM,cAA4B,CAAC;EAEnC,IACE,kBACA,OAAO,mBAAmB,YAC1B,cAAc,gBACd;GACA,MAAM,EAAE,aAAa;GACrB,IAAI,YAAY,OAAO,aAAa,UAClC;SAAK,MAAM,CAAC,MAAM,WAAW,OAAO,QAAQ,QAAQ,GAClD,IAAI,UAAU,OAAO,WAAW,UAAU;KACxC,MAAM,YAAa,OAAmC;KACtD,IAAI,aAAa,MAAM,QAAQ,SAAS,GACtC,YAAY,KACVA,mBACE,MACA,KAAK,KACL,KAAK,iBACL,YAAY,KAAK,+GACjB,KAAK,IACP,CACF;IAEJ;GACF;EAEJ;EAEA,OAAO;CACT;CACA,iBAAiB;CACjB,MAAM;CACN,KAAK;CACL,SAAS;AACX;AAEA,MAAa,eAAe;CAC1B;CACA;CACA;CACA;AACF;;;;AC1KA,MAAMC,sBACJ,MACA,SACA,UACA,SACA,MACA,UACgB;CAAE;CAAM;CAAM;CAAM;CAAS,MAAM;CAAS;AAAS;AAEvE,MAAa,iBAAiC;CAC5C,UAAU;CACV,MAAM,cAAc,MAAM;EACxB,MAAM,cAA4B,CAAC;EAEnC,KAAK,MAAM,QAAQ,cACjB,IAAI,KAAK,gBAAgB,QAAQ;GAE/B,MAAM,YADQ,KAAK,KAAK,MAAM,MACR,CAAC,CAAC,MAAM,MAAM,CAAC,EAAE,WAAW,IAAI,CAAC;GACvD,IAAI,CAAC,aAAa,cAAc,WAC9B;GAGF,MAAM,aAAa,UAAU,QAAQ,GAAG;GACxC,IAAI,eAAe,IAAI;IACrB,MAAM,MAAM,UAAU,MAAM,aAAa,CAAC,CAAC,CAAC,YAAY;IAGxD,MAAM,SACJ,IAAI,SAAS,QAAQ,KACrB,IAAI,SAAS,MAAM,KACnB,IAAI,SAAS,YAAY;IAC3B,MAAM,QAAQ,IAAI,WAAW,SAAS;IAGtC,MAAM,mBAAmB,aAAa,MACnC,UACC,MAAM,OAAO,KAAK,QAClB,MAAM,gBAAgB,UACtB,MAAM,KACH,YAAY,CAAC,CACb,SAAS,OAAO,UAAU,YAAY,GAAG,CAChD;IAEA,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,kBACxB,YAAY,KACVA,mBACE,MACA,KAAK,KACL,KAAK,iBACL,eAAe,UAAU,gFACzB,KAAK,MACL,KAAK,IACP,CACF;GAEJ;EACF;EAGF,OAAO;CACT;CACA,iBAAiB;CACjB,MAAM;CACN,KAAK;CACL,SAAS;AACX;AAEA,MAAa,oBAAoC;CAC/C,UAAU;CACV,MAAM,cAAc,MAAM;EACxB,MAAM,cAA4B,CAAC;EAEnC,KAAK,MAAM,QAAQ,cACjB,IAAI,KAAK,gBAAgB,OAAO;GAC9B,MAAM,EAAE,SAAS;GAGjB,IACE,KAAK,SAAS,iBAAiB,KAC/B,CAAC,KAAK,SAAS,2BAA2B,GAE1C,YAAY,KACVA,mBACE,MACA,KAAK,KACL,KAAK,iBACL,2HACA,KAAK,MACL,KAAK,IACP,CACF;GAIF,IACE,KAAK,SAAS,SAAS,KACvB,CAAC,KAAK,SAAS,YAAY,KAC3B,CAAC,KAAK,SAAS,uBAAuB,GAEtC,YAAY,KACVA,mBACE,MACA,KAAK,KACL,KAAK,iBACL,gGACA,KAAK,MACL,KAAK,IACP,CACF;EAEJ;EAGF,OAAO;CACT;CACA,iBAAiB;CACjB,MAAM;CACN,KAAK;CACL,SAAS;AACX;AAEA,MAAa,uBAAuC;CAClD,UAAU;CACV,MAAM,cAAc,MAAM;EACxB,MAAM,cAA4B,CAAC;EACnC,IAAI,cAAc;EAClB,IAAI,YAAY;EAEhB,KAAK,MAAM,QAAQ,cACjB,IAAI,KAAK,gBAAgB,QACvB,aAAa;EAIjB,IAAI,eAAe;EACnB,KAAK,MAAM,QAAQ,cAAc;GAC/B,IAAI,KAAK,gBAAgB,QAAQ;IAC/B,gBAAgB;IAChB,cAAc,iBAAiB;GACjC;GAEA,IAAI,eAAe,KAAK,gBAAgB,OAAO;IAC7C,MAAM,EAAE,SAAS;IACjB,KACG,KAAK,SAAS,aAAa,KAC1B,KAAK,SAAS,QAAQ,KACtB,KAAK,SAAS,cAAc,MAC9B,CAAC,KAAK,SAAS,cAAc,KAC7B,CAAC,KAAK,SAAS,YAAY,KAC3B,CAAC,KAAK,SAAS,OAAO,GAEtB,YAAY,KACVA,mBACE,MACA,KAAK,KACL,KAAK,iBACL,4BAA4B,KAAK,KAAK,yDACtC,KAAK,MACL,KAAK,IACP,CACF;GAEJ;EACF;EAEA,OAAO;CACT;CACA,iBAAiB;CACjB,MAAM;CACN,KAAK;CACL,SACE;AACJ;AAEA,MAAa,iBAAiB;CAC5B;CACA;CACA;AACF;;;;AClLA,MAAMC,sBACJ,MACA,SACA,UACA,SACA,MACA,UACgB;CAAE;CAAM;CAAM;CAAM;CAAS,MAAM;CAAS;AAAS;AAEvE,MAAa,gBAAgC;CAC3C,UAAU;CACV,MAAM,cAAc,MAAM;EAIxB,IAHkB,aAAa,QAC5B,SAAS,KAAK,gBAAgB,MACjC,CAAC,CAAC,WACgB,GAYhB;OAVsB,aAAa,MAChC,SACC,KAAK,gBAAgB,UACpB,KAAK,KAAK,SAAS,eAAe,KACjC,KAAK,KAAK,SAAS,YAAY,KAC/B,KAAK,KAAK,SAAS,eAAe,KAClC,KAAK,KAAK,SAAS,aAAa,KAChC,KAAK,KAAK,SAAS,MAAM,EAGf,GACd,OAAO,CACLA,mBACE,MACA,KAAK,KACL,KAAK,iBACL,8IACA,KAAK,MACL,aAAa,MAAM,SAAS,KAAK,gBAAgB,MAAM,CAAC,EAAE,QAAQ,CACpE,CACF;EACF;EAEF,OAAO,CAAC;CACV;CACA,iBAAiB;CACjB,MAAM;CACN,KAAK;CACL,SAAS;AACX;AAEA,MAAa,cAA8B;CACzC,UAAU;CACV,MAAM,cAAc,MAAM;EACxB,MAAM,cAA4B,CAAC;EACnC,IAAI,cAAc;EAElB,KAAK,MAAM,QAAQ,cAAc;GAC/B,IAAI,KAAK,gBAAgB,UAAU,KAAK,gBAAgB,OAAO;IAE7D,MAAM,MADQ,KAAK,KAAK,MAAM,MACd,CAAC,CAAC,MAAM,MAAM,CAAC,EAAE,WAAW,IAAI,CAAC;IAEjD,IAAI,CAAC,KACH;IAGF,KACG,QAAQ,OAAO,QAAQ,QAAQ,QAAQ,OAAO,IAAI,SAAS,KAAK,MACjE,gBAAgB,IAEhB,cAAc,KAAK;GAEvB;GAEA,IAAI,KAAK,gBAAgB,SAAS,gBAAgB,IAAI;IACpD,MAAM,OAAO,KAAK,KAAK,YAAY;IACnC,IACE,KAAK,SAAS,aAAa,KAC3B,KAAK,SAAS,QAAQ,KACtB,KAAK,SAAS,cAAc,KAC5B,KAAK,SAAS,aAAa,KAC3B,KAAK,SAAS,aAAa,KAC3B,KAAK,SAAS,aAAa,GAE3B,YAAY,KACVA,mBACE,MACA,KAAK,KACL,KAAK,iBACL,yCAAyC,KAAK,KAAK,6CAA6C,YAAY,qDAC5G,KAAK,MACL,KAAK,IACP,CACF;GAEJ;EACF;EAEA,OAAO;CACT;CACA,iBAAiB;CACjB,MAAM;CACN,KAAK;CACL,SAAS;AACX;AAEA,MAAa,iBAAiC;CAC5C,UAAU;CACV,MAAM,cAAc,MAAM;EACxB,MAAM,cAA4B,CAAC;EACnC,IAAI,sBAAsB;EAC1B,IAAI,eAAe;EAEnB,KAAK,MAAM,QAAQ,cACjB,IAAI,KAAK,gBAAgB,OAAO;GAC9B,IAAI,wBAAwB,GAC1B,eAAe,KAAK;GAEtB,uBAAuB;EACzB,OAAO;GACL,IAAI,sBAAsB,GACxB,YAAY,KACVA,mBACE,MACA,KAAK,KACL,KAAK,iBACL,SAAS,oBAAoB,iDAAiD,aAAa,qDAC3F,KAAK,MACL,YACF,CACF;GAEF,sBAAsB;EACxB;EAGF,IAAI,sBAAsB,GACxB,YAAY,KACVA,mBACE,MACA,KAAK,KACL,KAAK,iBACL,SAAS,oBAAoB,iDAAiD,aAAa,qDAC3F,KAAK,MACL,YACF,CACF;EAGF,OAAO;CACT;CACA,iBAAiB;CACjB,MAAM;CACN,KAAK;CACL,SAAS;AACX;AAEA,MAAa,kBAAkC;CAC7C,UAAU;CACV,MAAM,cAAc,MAAM,SAAS;EAWjC,IATmB,aAAa,MAAM,SAAS;GAC7C,IAAI,KAAK,gBAAgB,UAAU,KAAK,gBAAgB,OAAO;IAE7D,MAAM,CAAC,OADO,KAAK,KAAK,MAAM,MACZ;IAClB,OAAO,QAAQ,OAAO,QAAQ,QAAQ,QAAQ;GAChD;GACA,OAAO;EACT,CAEa,KAAK,SAAS,cAIzB;OAAI,CAHoB,QAAQ,aAAa,MAAM,MACjD,EAAE,SAAS,eAAe,CAET,GACjB,OAAO,CACLA,mBACE,MACA,KAAK,KACL,KAAK,iBACL,gJACA,KAAK,MACL,CACF,CACF;EACF;EAEF,OAAO,CAAC;CACV;CACA,iBAAiB;CACjB,MAAM;CACN,KAAK;CACL,SAAS;AACX;AAEA,MAAa,mBAAmB;CAC9B;CACA;CACA;CACA;AACF;;;;ACrMA,MAAM,oBACJ,MACA,SACA,UACA,SACA,MACA,UACgB;CAAE;CAAM;CAAM;CAAM;CAAS,MAAM;CAAS;AAAS;AAEvE,MAAa,aAA6B;CACxC,UAAU;CACV,MAAM,cAAc,MAAM;EACxB,IAAI,WAAW;EACf,IAAI,eAAe;EAEnB,KAAK,MAAM,QAAQ,cACjB,IAAI,KAAK,gBAAgB,QAAQ;GAC/B,WAAW,KAAK,KAAK,KAAK,CAAC,CAAC,YAAY;GACxC,eAAe,KAAK;EACtB;EAGF,IAAI,aAAa,UAAU,aAAa,OAAO,aAAa,OAC1D,OAAO,CACL,iBACE,MACA,KAAK,KACL,KAAK,iBACL,oGACA,KAAK,MACL,YACF,CACF;EAGF,OAAO,CAAC;CACV;CACA,iBAAiB;CACjB,MAAM;CACN,KAAK;CACL,SAAS;AACX;AAEA,MAAa,iBAAiC;CAC5C,UAAU;CACV,MAAM,cAAc,MAAM;EACxB,MAAM,cAA4B,CAAC;EACnC,MAAM,iBAAiB;GACrB;GACA;GACA;GACA;GACA;GACA;EACF;EAEA,KAAK,MAAM,QAAQ,cACjB,IAAI,KAAK,gBAAgB,SAAS,KAAK,gBAAgB,OAAO;GAC5D,MAAM,OAAO,KAAK,KAAK,KAAK;GAC5B,IAAI,KAAK,gBAAgB,SAAS,CAAC,KAAK,SAAS,GAAG,GAAG;IAErD,MAAM,QAAQ,KAAK,MAAM,kCAAkC;IAC3D,IAAI,OAAO,QAAQ;KACjB,MAAM,EAAE,KAAK,UAAU,MAAM;KAE7B,IADoB,eAAe,MAAM,UAAU,MAAM,KAAK,GAAG,CAErD,KACV,SACA,CAAC,MAAM,WAAW,GAAG,KACrB,CAAC,MAAM,WAAW,GAAG,GAErB,YAAY,KACV,iBACE,MACA,KAAK,KACL,KAAK,iBACL,6BAA6B,KAAK,YAAY,KAAK,IAAI,oFACvD,KAAK,MACL,KAAK,IACP,CACF;IAEJ;GACF,OAAO;IAEL,MAAM,QAAQ,KAAK,MAAM,MAAM;IAC/B,KAAK,MAAM,QAAQ,OAAO;KACxB,MAAM,UAAU,KAAK,QAAQ,GAAG;KAChC,IAAI,MAAM;KACV,IAAI,QAAQ;KAEZ,IAAI,UAAU,GAAG;MACf,MAAM,KAAK,MAAM,GAAG,OAAO;MAC3B,QAAQ,KAAK,MAAM,UAAU,CAAC;KAChC,OACE,MAAM;KAIR,IADoB,eAAe,MAAM,UAAU,MAAM,KAAK,GAAG,CAErD,KACV,SACA,CAAC,MAAM,WAAW,GAAG,KACrB,CAAC,MAAM,WAAW,GAAG,GAErB,YAAY,KACV,iBACE,MACA,KAAK,KACL,KAAK,iBACL,6BAA6B,KAAK,YAAY,KAAK,IAAI,oFACvD,KAAK,MACL,KAAK,IACP,CACF;IAEJ;GACF;EACF;EAGF,OAAO;CACT;CACA,iBAAiB;CACjB,MAAM;CACN,KAAK;CACL,SAAS;AACX;AAEA,MAAa,kBAAkC;CAC7C,UAAU;CACV,MAAM,cAAc,MAAM;EACxB,MAAM,cAA4B,CAAC;EAEnC,KAAK,MAAM,QAAQ,cACjB,IAAI,KAAK,gBAAgB,QAAQ;GAI/B,MAAM,YADQ,KAAK,KAAK,MAAM,MACR,CAAC,CAAC,MAAM,MAAM,CAAC,EAAE,WAAW,IAAI,CAAC;GAEvD,IAAI,CAAC,aAAa,cAAc,WAC9B;GAGF,MAAM,aAAa,UAAU,QAAQ,GAAG;GACxC,MAAM,UAAU,UAAU,QAAQ,GAAG;GAErC,IAAI,eAAe,MAAM,YAAY,IACnC,YAAY,KACV,iBACE,MACA,KAAK,KACL,KAAK,iBACL,eAAe,UAAU,iEACzB,KAAK,MACL,KAAK,IACP,CACF;QACK,IAAI,eAAe,IAExB;QADY,UAAU,MAAM,aAAa,CACnC,MAAM,UACV,YAAY,KACV,iBACE,MACA,KAAK,KACL,KAAK,iBACL,eAAe,UAAU,wEACzB,KAAK,MACL,KAAK,IACP,CACF;GACF;EAEJ;EAGF,OAAO;CACT;CACA,iBAAiB;CACjB,MAAM;CACN,KAAK;CACL,SAAS;AACX;AAEA,MAAa,cAA8B;CACzC,UAAU;CACV,MAAM,cAAc,MAAM;EACxB,MAAM,cAA4B,CAAC;EAEnC,KAAK,MAAM,QAAQ,cACjB,IAAI,KAAK,gBAAgB,OAAO;GAE9B,MAAM,CAAC,OADO,KAAK,KAAK,MAAM,MACZ;GAElB,IAAI,IAAI,WAAW,SAAS,KAAK,IAAI,WAAW,UAAU,GACxD,YAAY,KACV,iBACE,MACA,KAAK,KACL,KAAK,iBACL,sCAAsC,IAAI,6FAC1C,KAAK,MACL,KAAK,IACP,CACF;EAEJ;EAGF,OAAO;CACT;CACA,iBAAiB;CACjB,MAAM;CACN,KAAK;CACL,SAAS;AACX;AAEA,MAAa,gBAAgB;CAC3B;CACA;CACA;CACA;AACF;;;;ACtNA,MAAa,qBAAuC;CAClD,GAAG;CACH,GAAG;CACH,GAAG;CACH,GAAG;AACL;AAEA,MAAa,kBAAiC,CAAC,GAAG,YAAY;AAE9D,MAAa,WAA6B,CACxC,GAAG,oBACH,GAAG,eACL;AAEA,MAAa,YAAY,QACvB,SAAS,MAAM,SAAS,KAAK,QAAQ,GAAG;;;;ACnB1C,MAAa,sBACX,cACA,MACA,cACA,gBACiB;CACjB,MAAM,cAA4B,CAAC;CAEnC,KAAK,MAAM,QAAQ,oBAAoB;EACrC,MAAM,iBAAiB,cAAc,KAAK;EAC1C,IAAI,mBAAmB,OACrB;EAGF,MAAM,kBAAkB,KAAK,MAAM,cAAc,MAAM,EAAE,aAAa,CAAC;EAGvE,IAAI,gBACF,KAAK,MAAM,QAAQ,iBACjB,KAAK,WAAW;EAIpB,YAAY,KAAK,GAAG,eAAe;CACrC;CAEA,OAAO;AACT;;;;AC/BA,MAAa,mBACX,gBACA,MACA,gBACiB;CACjB,MAAM,cAA4B,CAAC;CAEnC,KAAK,MAAM,QAAQ,iBAAiB;EAClC,MAAM,iBAAiB,cAAc,KAAK;EAC1C,IAAI,mBAAmB,OACrB;EAGF,MAAM,kBAAkB,KAAK,MAAM,gBAAgB,IAAI;EAGvD,IAAI,gBACF,KAAK,MAAM,QAAQ,iBACjB,KAAK,WAAW;EAIpB,YAAY,KAAK,GAAG,eAAe;CACrC;CAEA,OAAO;AACT;;;;AC3BA,MAAa,qBAAqB,OAAO,MAAM;CAC7C,OAAO,QAAQ,OAAO;CACtB,OAAO,QAAQ,SAAS;CACxB,OAAO,QAAQ,MAAM;CACrB,OAAO,QAAQ,KAAK;AACtB,CAAC;AAED,MAAa,2BAA2B,OAAO,OAAO;CACpD,YAAY,OAAO,SACjB,OAAO,OAAO;EACZ,kBAAkB,OAAO,SAAS,kBAAkB;EACpD,SAAS,OAAO,SAAS,kBAAkB;EAC3C,cAAc,OAAO,SAAS,kBAAkB;EAChD,aAAa,OAAO,SAAS,kBAAkB;EAC/C,UAAU,OAAO,SAAS,kBAAkB;CAC9C,CAAC,CACH;CACA,QAAQ,OAAO,SACb,OAAO,OAAO,EACZ,OAAO,OAAO,SAAS,OAAO,MAAM,OAAO,MAAM,CAAC,EACpD,CAAC,CACH;CACA,OAAO,OAAO,SAAS,OAAO,OAAO,OAAO,QAAQ,kBAAkB,CAAC;AACzE,CAAC;;;;AChBD,MAAM,aAAa,OAAO,aAAuC;CAC/D,IAAI;EACF,MAAM,GAAG,OAAO,QAAQ;EACxB,OAAO;CACT,QAAQ;EACN,OAAO;CACT;AACF;AAEA,MAAM,eAAe,OAAO,aAAuC;CACjE,IAAI,SAAS,SAAS,OAAO,GAC3B,IAAI;EACF,MAAM,UAAU,MAAM,GAAG,SAAS,UAAU,OAAO;EACnD,OAAO,KAAK,MAAM,OAAO;CAC3B,SAAS,OAAgB;EAEvB,MAAM,IAAI,YAAY,EACpB,SAAS,gCAFC,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,IAGjE,CAAC;CACH;CAGF,IAAI;EACF,MAAM,eAAe,MAAM,OAAO;EAClC,OAAO,aAAa,WAAW;CACjC,SAAS,OAAgB;EAEvB,MAAM,IAAI,YAAY,EACpB,SAAS,8BAA8B,SAAS,IAFtC,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,IAGjE,CAAC;CACH;AACF;AAEA,MAAa,aAAa,OACxB,SACA,eACgC;CAChC,IAAI,eAAwB;CAE5B,IAAI,YAAY;EACd,MAAM,WAAW,KAAK,QAAQ,SAAS,UAAU;EACjD,IAAI,CAAE,MAAM,WAAW,QAAQ,GAC7B,MAAM,IAAI,YAAY,EACpB,SAAS,sCAAsC,WACjD,CAAC;EAEH,eAAe,MAAM,aAAa,QAAQ;CAC5C,OAAO;EAUL,KAAK,MAAM,QAAQ;GARjB;GACA;GACA;GACA;GACA;EAI0B,GAAG;GAC7B,MAAM,WAAW,KAAK,KAAK,SAAS,IAAI;GACxC,IAAI,MAAM,WAAW,QAAQ,GAAG;IAC9B,eAAe,MAAM,aAAa,QAAQ;IAC1C;GACF;EACF;EAGA,IAAI,CAAC,cAAc;GACjB,MAAM,UAAU,KAAK,KAAK,SAAS,cAAc;GACjD,IAAI,MAAM,WAAW,OAAO,GAC1B,IAAI;IACF,MAAM,aAAa,MAAM,GAAG,SAAS,SAAS,OAAO;IACrD,MAAM,UAAU,KAAK,MAAM,UAAU;IACrC,IAAI,QAAQ,cACV,eAAe,QAAQ;GAE3B,QAAQ,CAER;EAEJ;CACF;CAEA,IAAI,CAAC,cACH,OAAO,CAAC;CAGV,IAAI;EAKF,OAHgB,OAAO,WAAW,wBAA+B,CAAC,CAChE,YAEW;CACf,SAAS,OAAgB;EAEvB,MAAM,IAAI,YAAY,EACpB,SAAS,iCAFC,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,IAGjE,CAAC;CACH;AACF;;;;ACzGA,MAAa,kBACX,gBAIG;CACH,IAAI,UAAU;CAEd,KAAK,MAAM,QAAQ,aACjB,IAAI,KAAK,aAAa,SACpB,WAAW;MACN,IAAI,KAAK,aAAa,WAC3B,WAAW;MACN,IAAI,KAAK,aAAa,QAC3B,WAAW;CAIf,MAAM,QAAQ,KAAK,IAAI,GAAG,MAAM,OAAO;CAEvC,IAAI,QAAQ;CACZ,IAAI,SAAS,IACX,QAAQ;MACH,IAAI,SAAS,IAClB,QAAQ;MACH,IAAI,SAAS,IAClB,QAAQ;CAGV,OAAO;EAAE;EAAO;CAAM;AACxB;;;;ACdA,MAAa,gBACX,aACA,OACA,OACA,aACgB;CAChB,aAAa,YAAY,KAAK,OAAO;EACnC,QAAQ,EAAE;EACV,MAAM,EAAE;EACR,MAAM,EAAE;EACR,MAAM,EAAE;EACR,SAAS,EAAE;EACX,MAAM,EAAE;EACR,UAAU,EAAE;CACd,EAAE;CACF;CACA;CACA;CACA,4BAAW,IAAI,KAAK,EAAC,CAAC,YAAY;AACpC"}
+{"version":3,"file":"src-DvNFg6Nz.mjs","names":["createDiagnostic","createDiagnostic","createDiagnostic","createDiagnostic"],"sources":["../package.json","../../core/src/project-info/discover.ts","../../core/src/parsers/dockerfile-parser.ts","../../core/src/errors/config-error.ts","../../core/src/errors/file-not-found-error.ts","../../core/src/errors/parse-error.ts","../../core/src/parsers/compose-parser.ts","../../core/src/rules/best-practices.ts","../../core/src/rules/compose.ts","../../core/src/rules/image-size.ts","../../core/src/rules/performance.ts","../../core/src/rules/security.ts","../../core/src/rules/index.ts","../../core/src/runners/dockerfile-runner.ts","../../core/src/runners/compose-runner.ts","../../core/src/schemas/config.ts","../../core/src/config/loader.ts","../../core/src/scoring.ts","../../core/src/report.ts"],"sourcesContent":["","import fs from \"node:fs/promises\";\nimport path from \"node:path\";\n\nimport type { ProjectInfo } from \"../types/index\";\n\nconst walk = async (\n  dir: string,\n  fileList: string[] = []\n): Promise<string[]> => {\n  const files = await fs.readdir(dir, { withFileTypes: true });\n  await Promise.all(\n    files.map(async (file) => {\n      const filePath = path.join(dir, file.name);\n      if (file.isDirectory()) {\n        if (\n          file.name === \"node_modules\" ||\n          file.name === \".git\" ||\n          file.name === \".next\" ||\n          file.name === \"dist\" ||\n          file.name === \".turbo\"\n        ) {\n          return;\n        }\n        await walk(filePath, fileList);\n      } else {\n        fileList.push(filePath);\n      }\n    })\n  );\n  return fileList;\n};\n\nexport const discoverProject = async (\n  rootDir: string\n): Promise<ProjectInfo> => {\n  const allFiles = await walk(rootDir);\n  const dockerfiles: string[] = [];\n  const composeFiles: string[] = [];\n  const dockerignores: string[] = [];\n\n  for (const file of allFiles) {\n    const base = path.basename(file).toLowerCase();\n\n    if (base === \".dockerignore\") {\n      dockerignores.push(path.relative(rootDir, file));\n    }\n\n    // Match Dockerfile, Dockerfile.*, *.dockerfile\n    if (\n      base === \"dockerfile\" ||\n      base.startsWith(\"dockerfile.\") ||\n      base.endsWith(\".dockerfile\")\n    ) {\n      dockerfiles.push(path.relative(rootDir, file));\n    }\n\n    // Match docker-compose.yml, docker-compose.*.yml, compose.yml, compose.*.yml, and yaml extensions\n    if (\n      base === \"docker-compose.yml\" ||\n      base === \"docker-compose.yaml\" ||\n      base === \"compose.yml\" ||\n      base === \"compose.yaml\" ||\n      ((base.startsWith(\"docker-compose.\") || base.startsWith(\"compose.\")) &&\n        (base.endsWith(\".yml\") || base.endsWith(\".yaml\")))\n    ) {\n      composeFiles.push(path.relative(rootDir, file));\n    }\n  }\n\n  return {\n    composeFiles,\n    dockerfiles,\n    dockerignores,\n  };\n};\n","import type { DockerfileInstruction } from \"../types/index\";\n\nexport const parseDockerfile = (content: string): DockerfileInstruction[] => {\n  const instructions: DockerfileInstruction[] = [];\n  const lines = content.split(/\\r?\\n/u);\n\n  let currentInstruction = \"\";\n  let currentArgs = \"\";\n  let startLine = 0;\n  let rawAccumulator: string[] = [];\n\n  for (const [i, rawLine] of lines.entries()) {\n    const trimmed = rawLine.trim();\n    const lineNum = i + 1;\n\n    // Skip empty lines or comment lines if not in multi-line block\n    if (!currentInstruction && (trimmed === \"\" || trimmed.startsWith(\"#\"))) {\n      continue;\n    }\n\n    rawAccumulator.push(rawLine);\n\n    let lineContent = trimmed;\n\n    // Inside a multi-line run, comment lines are ignored by docker parser\n    if (lineContent.startsWith(\"#\")) {\n      continue;\n    }\n\n    const hasContinuation = lineContent.endsWith(\"\\\\\");\n    if (hasContinuation) {\n      lineContent = lineContent.slice(0, -1).trim();\n    }\n\n    if (currentInstruction) {\n      currentArgs += (currentArgs ? \" \" : \"\") + lineContent;\n    } else {\n      startLine = lineNum;\n      // Match the first instruction word (e.g. FROM, RUN, COPY)\n      const match = lineContent.match(/^(?<inst>[A-Z]+)\\s+(?<args>.*)$/iu);\n      if (match?.groups) {\n        currentInstruction = match.groups.inst.toUpperCase();\n        currentArgs = match.groups.args;\n      } else {\n        const word = lineContent.trim().toUpperCase();\n        if (\n          [\"RUN\", \"CMD\", \"ENTRYPOINT\", \"EXPOSE\", \"USER\", \"WORKDIR\"].includes(\n            word\n          )\n        ) {\n          currentInstruction = word;\n          currentArgs = \"\";\n        }\n      }\n    }\n\n    if (!hasContinuation) {\n      if (currentInstruction) {\n        instructions.push({\n          args: currentArgs,\n          instruction: currentInstruction,\n          line: startLine,\n          raw: rawAccumulator.join(\"\\n\"),\n        });\n      }\n      currentInstruction = \"\";\n      currentArgs = \"\";\n      rawAccumulator = [];\n    }\n  }\n\n  if (currentInstruction) {\n    instructions.push({\n      args: currentArgs,\n      instruction: currentInstruction,\n      line: startLine,\n      raw: rawAccumulator.join(\"\\n\"),\n    });\n  }\n\n  return instructions;\n};\n","import * as Data from \"effect/Data\";\n\nexport class ConfigError extends Data.TaggedError(\"ConfigError\")<{\n  readonly message: string;\n}> {}\n","import * as Data from \"effect/Data\";\n\nexport class FileNotFoundError extends Data.TaggedError(\"FileNotFoundError\")<{\n  readonly path: string;\n}> {}\n","import * as Data from \"effect/Data\";\n\nexport class ParseError extends Data.TaggedError(\"ParseError\")<{\n  readonly file: string;\n  readonly message: string;\n}> {}\n","import { parse } from \"yaml\";\n\nimport { ParseError } from \"../errors\";\n\nexport const parseCompose = (content: string, filepath: string): unknown => {\n  try {\n    return parse(content);\n  } catch (error: unknown) {\n    throw new ParseError({\n      file: filepath,\n      message: error instanceof Error ? error.message : String(error),\n    });\n  }\n};\n","import type { Diagnostic, DockerfileRule } from \"../types/index\";\n\nconst createDiagnostic = (\n  file: string,\n  ruleKey: string,\n  severity: \"error\" | \"warning\" | \"info\",\n  message: string,\n  help: string,\n  line?: number\n): Diagnostic => ({ file, help, line, message, rule: ruleKey, severity });\n\nexport const requireHealthcheck: DockerfileRule = {\n  category: \"Best Practices\",\n  check(instructions, file) {\n    const hasHealthcheck = instructions.some(\n      (inst) => inst.instruction === \"HEALTHCHECK\"\n    );\n\n    // Only suggest healthcheck if it has exposed ports or command lines indicating it runs an app\n    const hasExposedPortsOrEntry = instructions.some(\n      (inst) =>\n        inst.instruction === \"EXPOSE\" ||\n        inst.instruction === \"CMD\" ||\n        inst.instruction === \"ENTRYPOINT\"\n    );\n\n    if (!hasHealthcheck && hasExposedPortsOrEntry) {\n      return [\n        createDiagnostic(\n          file,\n          this.key,\n          this.defaultSeverity as \"error\" | \"warning\" | \"info\",\n          \"No HEALTHCHECK instruction found. Containers running services should expose healthchecks to enable auto-healing.\",\n          this.help,\n          1\n        ),\n      ];\n    }\n    return [];\n  },\n  defaultSeverity: \"info\",\n  help: \"Use HEALTHCHECK (e.g., 'HEALTHCHECK --interval=30s --timeout=3s CMD curl -f http://localhost/ || exit 1') so Docker can monitor the container's live status.\",\n  key: \"docker-doctor/require-healthcheck\",\n  message: \"Add a HEALTHCHECK instruction\",\n};\n\nexport const preferCopyOverAdd: DockerfileRule = {\n  category: \"Best Practices\",\n  check(instructions, file) {\n    const diagnostics: Diagnostic[] = [];\n\n    for (const inst of instructions) {\n      if (inst.instruction === \"ADD\") {\n        const parts = inst.args.split(/\\s+/u);\n        const [src] = parts;\n\n        // If it's not a remote url (handled by security/no-add-remote) and not a compressed file\n        const isRemote =\n          src.startsWith(\"http://\") || src.startsWith(\"https://\");\n        const isArchive =\n          src.endsWith(\".tar\") ||\n          src.endsWith(\".tar.gz\") ||\n          src.endsWith(\".tgz\") ||\n          src.endsWith(\".zip\");\n\n        if (!isRemote && !isArchive) {\n          diagnostics.push(\n            createDiagnostic(\n              file,\n              this.key,\n              this.defaultSeverity as \"error\" | \"warning\" | \"info\",\n              `ADD instruction used for regular files: '${inst.args}'. COPY is simpler and less prone to magic side effects.`,\n              this.help,\n              inst.line\n            )\n          );\n        }\n      }\n    }\n\n    return diagnostics;\n  },\n  defaultSeverity: \"warning\",\n  help: \"Use COPY instead of ADD unless you explicitly need auto-extraction of local compressed archives (tar, zip, etc.).\",\n  key: \"docker-doctor/prefer-copy-over-add\",\n  message: \"Prefer COPY over ADD\",\n};\n\nexport const useExecForm: DockerfileRule = {\n  category: \"Best Practices\",\n  check(instructions, file) {\n    const diagnostics: Diagnostic[] = [];\n\n    for (const inst of instructions) {\n      if (inst.instruction === \"CMD\" || inst.instruction === \"ENTRYPOINT\") {\n        const args = inst.args.trim();\n        // If it does not start with [ and end with ]\n        if (!args.startsWith(\"[\") || !args.endsWith(\"]\")) {\n          diagnostics.push(\n            createDiagnostic(\n              file,\n              this.key,\n              this.defaultSeverity as \"error\" | \"warning\" | \"info\",\n              `${inst.instruction} instruction uses shell form instead of exec form. In shell form, the command runs under '/bin/sh -c', which does not pass signals to child processes.`,\n              this.help,\n              inst.line\n            )\n          );\n        }\n      }\n    }\n\n    return diagnostics;\n  },\n  defaultSeverity: \"warning\",\n  help: 'Write CMD/ENTRYPOINT instructions as JSON arrays (e.g. ENTRYPOINT [\"node\", \"index.js\"]) so OS signals (like SIGTERM) are forwarded correctly.',\n  key: \"docker-doctor/use-exec-form\",\n  message: \"Use exec form for CMD and ENTRYPOINT\",\n};\n\nexport const requireLabels: DockerfileRule = {\n  category: \"Best Practices\",\n  check(instructions, file) {\n    const hasLabel = instructions.some((inst) => inst.instruction === \"LABEL\");\n    if (!hasLabel) {\n      return [\n        createDiagnostic(\n          file,\n          this.key,\n          this.defaultSeverity as \"error\" | \"warning\" | \"info\",\n          \"No LABEL metadata was found in this Dockerfile. Adding labels helps identify build information, maintainers, and descriptions.\",\n          this.help,\n          1\n        ),\n      ];\n    }\n    return [];\n  },\n  defaultSeverity: \"info\",\n  help: 'Use LABEL instructions (e.g. LABEL org.opencontainers.image.authors=\"...\") to document ownership, license, version, and build info.',\n  key: \"docker-doctor/require-labels\",\n  message: \"Add LABEL metadata to images\",\n};\n\nexport const combineAptUpdateInstall: DockerfileRule = {\n  category: \"Best Practices\",\n  check(instructions, file) {\n    const diagnostics: Diagnostic[] = [];\n    for (const inst of instructions) {\n      if (inst.instruction === \"RUN\") {\n        const hasUpdate = inst.args.includes(\"apt-get update\");\n        const hasInstall = inst.args.includes(\"apt-get install\");\n\n        if (hasUpdate && !hasInstall) {\n          diagnostics.push(\n            createDiagnostic(\n              file,\n              this.key,\n              this.defaultSeverity as \"error\" | \"warning\" | \"info\",\n              \"RUN apt-get update used without apt-get install in the same instruction. This can cause caching issues and build failures.\",\n              this.help,\n              inst.line\n            )\n          );\n        } else if (hasInstall && !hasUpdate) {\n          diagnostics.push(\n            createDiagnostic(\n              file,\n              this.key,\n              this.defaultSeverity as \"error\" | \"warning\" | \"info\",\n              \"RUN apt-get install used without apt-get update in the same instruction. Always combine them to ensure up-to-date package installation.\",\n              this.help,\n              inst.line\n            )\n          );\n        }\n      }\n    }\n    return diagnostics;\n  },\n  defaultSeverity: \"warning\",\n  help: \"Combine 'apt-get update' and 'apt-get install' in the same RUN instruction (e.g. 'RUN apt-get update && apt-get install -y --no-install-recommends <package> && rm -rf /var/lib/apt/lists/*').\",\n  key: \"docker-doctor/combine-apt-update-install\",\n  message: \"Combine apt-get update and apt-get install\",\n};\n\nexport const usePipefail: DockerfileRule = {\n  category: \"Best Practices\",\n  check(instructions, file) {\n    const diagnostics: Diagnostic[] = [];\n    for (const inst of instructions) {\n      if (inst.instruction === \"RUN\") {\n        const { raw } = inst;\n        const hasPipe = /(?<!\\|)\\|(?!\\|)/u.test(raw);\n        if (hasPipe && !raw.includes(\"pipefail\")) {\n          diagnostics.push(\n            createDiagnostic(\n              file,\n              this.key,\n              this.defaultSeverity as \"error\" | \"warning\" | \"info\",\n              \"RUN instruction uses a pipe (|) but does not configure 'pipefail'. If a command in the pipe fails, the step may still succeed silently.\",\n              this.help,\n              inst.line\n            )\n          );\n        }\n      }\n    }\n    return diagnostics;\n  },\n  defaultSeverity: \"warning\",\n  help: \"Prepend 'set -o pipefail &&' to pipe commands, or use exec form with a shell that supports it (e.g., RUN ['/bin/bash', '-c', 'set -o pipefail && ...']).\",\n  key: \"docker-doctor/use-pipefail\",\n  message: \"Use pipefail to catch pipeline command failures\",\n};\n\nexport const absoluteWorkdir: DockerfileRule = {\n  category: \"Best Practices\",\n  check(instructions, file) {\n    const diagnostics: Diagnostic[] = [];\n    for (const inst of instructions) {\n      if (inst.instruction === \"WORKDIR\") {\n        const path = inst.args.trim();\n        const isAbsolute = /^(?:\\/|\\\\|\\$|[a-zA-Z]:)/u.test(path);\n\n        if (!isAbsolute) {\n          diagnostics.push(\n            createDiagnostic(\n              file,\n              this.key,\n              this.defaultSeverity as \"error\" | \"warning\" | \"info\",\n              `WORKDIR specifies a relative path '${path}'. For clarity and reliability, always use absolute paths.`,\n              this.help,\n              inst.line\n            )\n          );\n        }\n      }\n    }\n    return diagnostics;\n  },\n  defaultSeverity: \"warning\",\n  help: \"Always specify absolute paths for WORKDIR instructions (e.g. WORKDIR /app).\",\n  key: \"docker-doctor/absolute-workdir\",\n  message: \"Use absolute paths for WORKDIR\",\n};\n\nexport const avoidRunCd: DockerfileRule = {\n  category: \"Best Practices\",\n  check(instructions, file) {\n    const diagnostics: Diagnostic[] = [];\n    for (const inst of instructions) {\n      if (inst.instruction === \"RUN\" && /\\bcd\\b/u.test(inst.args)) {\n        diagnostics.push(\n          createDiagnostic(\n            file,\n            this.key,\n            this.defaultSeverity as \"error\" | \"warning\" | \"info\",\n            \"Avoid using 'cd' in RUN instructions. Use WORKDIR instead to change the working directory stably across layers.\",\n            this.help,\n            inst.line\n          )\n        );\n      }\n    }\n    return diagnostics;\n  },\n  defaultSeverity: \"info\",\n  help: \"Use the WORKDIR instruction instead of 'cd' inside RUN to establish directory context.\",\n  key: \"docker-doctor/avoid-run-cd\",\n  message: \"Avoid changing directories with cd in RUN\",\n};\n\nexport const sortMultilineArgs: DockerfileRule = {\n  category: \"Best Practices\",\n  check(instructions, file) {\n    const diagnostics: Diagnostic[] = [];\n    for (const inst of instructions) {\n      if (inst.instruction === \"RUN\") {\n        const { raw } = inst;\n        const isPackageInstall =\n          raw.includes(\"apt-get install\") ||\n          raw.includes(\"apk add\") ||\n          raw.includes(\"yum install\") ||\n          raw.includes(\"dnf install\");\n\n        const hasContinuation = raw.includes(\"\\\\\\n\") || raw.includes(\"\\\\\\r\\n\");\n\n        if (isPackageInstall && hasContinuation) {\n          const lines = raw.split(/\\r?\\n/u);\n          const packages = lines\n            .slice(1)\n            .map((line) => line.trim())\n            .filter(\n              (line) =>\n                line !== \"\" &&\n                !line.startsWith(\"&&\") &&\n                !line.startsWith(\"-\") &&\n                !line.includes(\"rm -rf\")\n            )\n            .map((line) =>\n              line.endsWith(\"\\\\\") ? line.slice(0, -1).trim() : line\n            )\n            .filter(Boolean);\n\n          if (packages.length > 1) {\n            const sorted = packages.toSorted((a, b) => a.localeCompare(b));\n            const isSorted = packages.every((val, idx) => val === sorted[idx]);\n            if (!isSorted) {\n              diagnostics.push(\n                createDiagnostic(\n                  file,\n                  this.key,\n                  this.defaultSeverity as \"error\" | \"warning\" | \"info\",\n                  \"Multi-line package arguments are not sorted alphanumerically. Keeping them sorted makes maintenance easier and prevents duplicates.\",\n                  this.help,\n                  inst.line\n                )\n              );\n            }\n          }\n        }\n      }\n    }\n    return diagnostics;\n  },\n  defaultSeverity: \"info\",\n  help: \"Sort multi-line package installation lists (e.g. apk/apt package lists) alphabetically.\",\n  key: \"docker-doctor/sort-multiline-args\",\n  message: \"Sort multi-line arguments alphanumerically\",\n};\n\nexport const useraddNoLogInit: DockerfileRule = {\n  category: \"Best Practices\",\n  check(instructions, file) {\n    const diagnostics: Diagnostic[] = [];\n    for (const inst of instructions) {\n      if (\n        inst.instruction === \"RUN\" &&\n        /\\buseradd\\b/u.test(inst.args) &&\n        !inst.args.includes(\"--no-log-init\")\n      ) {\n        diagnostics.push(\n          createDiagnostic(\n            file,\n            this.key,\n            this.defaultSeverity as \"error\" | \"warning\" | \"info\",\n            \"RUN instruction runs 'useradd' without '--no-log-init'. This can cause excessive disk space usage / exhaustion under Go's sparse tar archive bug when large UIDs are used.\",\n            this.help,\n            inst.line\n          )\n        );\n      }\n    }\n    return diagnostics;\n  },\n  defaultSeverity: \"warning\",\n  help: \"Pass '--no-log-init' flag to useradd (e.g., 'RUN useradd --no-log-init -r -g mygroup myuser').\",\n  key: \"docker-doctor/useradd-no-log-init\",\n  message: \"Use --no-log-init with useradd\",\n};\n\nexport const bestPracticesRules = [\n  requireHealthcheck,\n  preferCopyOverAdd,\n  useExecForm,\n  requireLabels,\n  combineAptUpdateInstall,\n  usePipefail,\n  absoluteWorkdir,\n  avoidRunCd,\n  sortMultilineArgs,\n  useraddNoLogInit,\n];\n","import type { Diagnostic, ComposeRule } from \"../types/index\";\n\nconst createDiagnostic = (\n  file: string,\n  ruleKey: string,\n  severity: \"error\" | \"warning\" | \"info\",\n  message: string,\n  help: string\n): Diagnostic => ({ file, help, message, rule: ruleKey, severity });\n\nexport const noVersionKey: ComposeRule = {\n  category: \"Compose\",\n  check(composeContent, file) {\n    if (\n      composeContent &&\n      typeof composeContent === \"object\" &&\n      \"version\" in composeContent\n    ) {\n      return [\n        createDiagnostic(\n          file,\n          this.key,\n          this.defaultSeverity as \"error\" | \"warning\" | \"info\",\n          \"The 'version' property is deprecated. Remove it to use standard Compose spec behavior.\",\n          this.help\n        ),\n      ];\n    }\n    return [];\n  },\n  defaultSeverity: \"warning\",\n  help: \"The 'version' key is deprecated by the Compose specification. Omitting it defaults to the latest specification.\",\n  key: \"docker-doctor/no-version-key\",\n  message: \"Remove the 'version' key from Compose file\",\n};\n\nexport const requireResourceLimits: ComposeRule = {\n  category: \"Compose\",\n  check(composeContent, file) {\n    const diagnostics: Diagnostic[] = [];\n\n    if (\n      composeContent &&\n      typeof composeContent === \"object\" &&\n      \"services\" in composeContent\n    ) {\n      const { services } = composeContent;\n      if (services && typeof services === \"object\") {\n        for (const [name, config] of Object.entries(services)) {\n          if (config && typeof config === \"object\") {\n            const deploy = (config as Record<string, unknown>).deploy as\n              | Record<string, unknown>\n              | undefined;\n            const resources = deploy?.resources as\n              | Record<string, unknown>\n              | undefined;\n            const limits = resources?.limits as\n              | Record<string, unknown>\n              | undefined;\n\n            if (!limits || (!limits.cpus && !limits.memory)) {\n              diagnostics.push(\n                createDiagnostic(\n                  file,\n                  this.key,\n                  this.defaultSeverity as \"error\" | \"warning\" | \"info\",\n                  `Service '${name}' does not have CPU or memory limits defined. A resource leak in this service could crash the host.`,\n                  this.help\n                )\n              );\n            }\n          }\n        }\n      }\n    }\n\n    return diagnostics;\n  },\n  defaultSeverity: \"warning\",\n  help: \"Add resource limits (e.g. deploy.resources.limits) to prevent a single service from starving host resources in production.\",\n  key: \"docker-doctor/require-resource-limits\",\n  message: \"Define resource limits for services\",\n};\n\nexport const requireRestartPolicy: ComposeRule = {\n  category: \"Compose\",\n  check(composeContent, file) {\n    const diagnostics: Diagnostic[] = [];\n\n    if (\n      composeContent &&\n      typeof composeContent === \"object\" &&\n      \"services\" in composeContent\n    ) {\n      const { services } = composeContent;\n      if (services && typeof services === \"object\") {\n        for (const [name, config] of Object.entries(services)) {\n          if (config && typeof config === \"object\") {\n            const hasRestart = \"restart\" in config;\n            const deploy = (config as Record<string, unknown>).deploy as\n              | Record<string, unknown>\n              | undefined;\n            const hasDeployRestart = deploy?.restart_policy !== undefined;\n\n            if (!hasRestart && !hasDeployRestart) {\n              diagnostics.push(\n                createDiagnostic(\n                  file,\n                  this.key,\n                  this.defaultSeverity as \"error\" | \"warning\" | \"info\",\n                  `Service '${name}' has no restart policy configured. It will not restart if it crashes or if the host reboots.`,\n                  this.help\n                )\n              );\n            }\n          }\n        }\n      }\n    }\n\n    return diagnostics;\n  },\n  defaultSeverity: \"warning\",\n  help: \"Define 'restart: always' or 'restart: unless-stopped' (or deploy.restart_policy) so services restart on crashes or host reboot.\",\n  key: \"docker-doctor/require-restart-policy\",\n  message: \"Set restart policy for services\",\n};\n\nexport const useDependsOnCondition: ComposeRule = {\n  category: \"Compose\",\n  check(composeContent, file) {\n    const diagnostics: Diagnostic[] = [];\n\n    if (\n      composeContent &&\n      typeof composeContent === \"object\" &&\n      \"services\" in composeContent\n    ) {\n      const { services } = composeContent;\n      if (services && typeof services === \"object\") {\n        for (const [name, config] of Object.entries(services)) {\n          if (config && typeof config === \"object\") {\n            const dependsOn = (config as Record<string, unknown>).depends_on;\n            if (dependsOn && Array.isArray(dependsOn)) {\n              diagnostics.push(\n                createDiagnostic(\n                  file,\n                  this.key,\n                  this.defaultSeverity as \"error\" | \"warning\" | \"info\",\n                  `Service '${name}' uses shorthand depends_on list. This only checks if containers are started, not if they are ready/healthy.`,\n                  this.help\n                )\n              );\n            }\n          }\n        }\n      }\n    }\n\n    return diagnostics;\n  },\n  defaultSeverity: \"info\",\n  help: \"Instead of a simple service list, use 'depends_on: { dependency: { condition: service_healthy } }' to ensure dependencies are fully ready before starting.\",\n  key: \"docker-doctor/use-depends-on-condition\",\n  message: \"Use long-form depends_on with healthcheck conditions\",\n};\n\nexport const composeRules = [\n  noVersionKey,\n  requireResourceLimits,\n  requireRestartPolicy,\n  useDependsOnCondition,\n];\n","import type { Diagnostic, DockerfileRule } from \"../types/index\";\n\nconst createDiagnostic = (\n  file: string,\n  ruleKey: string,\n  severity: \"error\" | \"warning\" | \"info\",\n  message: string,\n  help: string,\n  line?: number\n): Diagnostic => ({ file, help, line, message, rule: ruleKey, severity });\n\nexport const preferSlimBase: DockerfileRule = {\n  category: \"Image Size\",\n  check(instructions, file) {\n    const diagnostics: Diagnostic[] = [];\n\n    for (const inst of instructions) {\n      if (inst.instruction === \"FROM\") {\n        const parts = inst.args.split(/\\s+/u);\n        const imagePart = parts.find((p) => !p.startsWith(\"--\"));\n        if (!imagePart || imagePart === \"scratch\") {\n          continue;\n        }\n\n        const colonIndex = imagePart.indexOf(\":\");\n        if (colonIndex !== -1) {\n          const tag = imagePart.slice(colonIndex + 1).toLowerCase();\n\n          // If the tag doesn't contain alpine, slim, distroless, or sha256\n          const isSlim =\n            tag.includes(\"alpine\") ||\n            tag.includes(\"slim\") ||\n            tag.includes(\"distroless\");\n          const isSha = tag.startsWith(\"sha256:\");\n\n          // Skip if it's a multi-stage builder step reference (e.g. FROM build AS publish)\n          const isStageReference = instructions.some(\n            (other) =>\n              other.line < inst.line &&\n              other.instruction === \"FROM\" &&\n              other.args\n                .toLowerCase()\n                .includes(` as ${imagePart.toLowerCase()}`)\n          );\n\n          if (!isSlim && !isSha && !isStageReference) {\n            diagnostics.push(\n              createDiagnostic(\n                file,\n                this.key,\n                this.defaultSeverity as \"error\" | \"warning\" | \"info\",\n                `Base image '${imagePart}' may be a full-OS distribution. Consider using a slim or alpine alternative.`,\n                this.help,\n                inst.line\n              )\n            );\n          }\n        }\n      }\n    }\n\n    return diagnostics;\n  },\n  defaultSeverity: \"info\",\n  help: \"Prefer tags with '-slim', '-alpine', or use distroless base images to minimize the default operating system footprint.\",\n  key: \"docker-doctor/prefer-slim-base\",\n  message: \"Use slim, alpine, or distroless base images\",\n};\n\nexport const cleanPackageCache: DockerfileRule = {\n  category: \"Image Size\",\n  check(instructions, file) {\n    const diagnostics: Diagnostic[] = [];\n\n    for (const inst of instructions) {\n      if (inst.instruction === \"RUN\") {\n        const { args } = inst;\n\n        // check apt-get install without cleanup\n        if (\n          args.includes(\"apt-get install\") &&\n          !args.includes(\"rm -rf /var/lib/apt/lists\")\n        ) {\n          diagnostics.push(\n            createDiagnostic(\n              file,\n              this.key,\n              this.defaultSeverity as \"error\" | \"warning\" | \"info\",\n              `Running 'apt-get install' without removing package lists afterwards. This keeps metadata caches inside the image layer.`,\n              this.help,\n              inst.line\n            )\n          );\n        }\n\n        // check apk add without --no-cache\n        if (\n          args.includes(\"apk add\") &&\n          !args.includes(\"--no-cache\") &&\n          !args.includes(\"rm -rf /var/cache/apk\")\n        ) {\n          diagnostics.push(\n            createDiagnostic(\n              file,\n              this.key,\n              this.defaultSeverity as \"error\" | \"warning\" | \"info\",\n              `Running 'apk add' without '--no-cache' or cleaning the apk cache. This increases layer size.`,\n              this.help,\n              inst.line\n            )\n          );\n        }\n      }\n    }\n\n    return diagnostics;\n  },\n  defaultSeverity: \"warning\",\n  help: \"For apt-get, append '&& rm -rf /var/lib/apt/lists/*'. For apk, use 'apk add --no-cache'. For dnf/yum, run 'yum clean all'.\",\n  key: \"docker-doctor/clean-package-cache\",\n  message: \"Clean up package manager cache in the same RUN layer\",\n};\n\nexport const avoidDevDependencies: DockerfileRule = {\n  category: \"Image Size\",\n  check(instructions, file) {\n    const diagnostics: Diagnostic[] = [];\n    let isLastStage = false;\n    let fromCount = 0;\n\n    for (const inst of instructions) {\n      if (inst.instruction === \"FROM\") {\n        fromCount += 1;\n      }\n    }\n\n    let currentStage = 0;\n    for (const inst of instructions) {\n      if (inst.instruction === \"FROM\") {\n        currentStage += 1;\n        isLastStage = currentStage === fromCount;\n      }\n\n      if (isLastStage && inst.instruction === \"RUN\") {\n        const { args } = inst;\n        if (\n          (args.includes(\"npm install\") ||\n            args.includes(\"npm ci\") ||\n            args.includes(\"yarn install\")) &&\n          !args.includes(\"--production\") &&\n          !args.includes(\"--omit=dev\") &&\n          !args.includes(\"prune\")\n        ) {\n          diagnostics.push(\n            createDiagnostic(\n              file,\n              this.key,\n              this.defaultSeverity as \"error\" | \"warning\" | \"info\",\n              `Running package install '${inst.args}' in the final stage without omitting devDependencies.`,\n              this.help,\n              inst.line\n            )\n          );\n        }\n      }\n    }\n\n    return diagnostics;\n  },\n  defaultSeverity: \"warning\",\n  help: \"For Node.js, run 'npm prune --production' or install only production dependencies ('npm ci --omit=dev') in the runtime stage.\",\n  key: \"docker-doctor/avoid-dev-dependencies\",\n  message:\n    \"Avoid installing development dependencies in final production stage\",\n};\n\nexport const imageSizeRules = [\n  preferSlimBase,\n  cleanPackageCache,\n  avoidDevDependencies,\n];\n","import type { Diagnostic, DockerfileRule } from \"../types/index\";\n\nconst createDiagnostic = (\n  file: string,\n  ruleKey: string,\n  severity: \"error\" | \"warning\" | \"info\",\n  message: string,\n  help: string,\n  line?: number\n): Diagnostic => ({ file, help, line, message, rule: ruleKey, severity });\n\nexport const useMultiStage: DockerfileRule = {\n  category: \"Performance\",\n  check(instructions, file) {\n    const fromCount = instructions.filter(\n      (inst) => inst.instruction === \"FROM\"\n    ).length;\n    if (fromCount === 1) {\n      // Check if it's not a trivial/short Dockerfile (e.g., has some build steps)\n      const hasBuildSteps = instructions.some(\n        (inst) =>\n          inst.instruction === \"RUN\" &&\n          (inst.args.includes(\"npm run build\") ||\n            inst.args.includes(\"yarn build\") ||\n            inst.args.includes(\"bun run build\") ||\n            inst.args.includes(\"cargo build\") ||\n            inst.args.includes(\"make\"))\n      );\n\n      if (hasBuildSteps) {\n        return [\n          createDiagnostic(\n            file,\n            this.key,\n            this.defaultSeverity as \"error\" | \"warning\" | \"info\",\n            \"Only one build stage (FROM) was detected, but build instructions were found. Multi-stage builds can significantly reduce final image size.\",\n            this.help,\n            instructions.find((inst) => inst.instruction === \"FROM\")?.line || 1\n          ),\n        ];\n      }\n    }\n    return [];\n  },\n  defaultSeverity: \"info\",\n  help: \"Use multi-stage builds (multiple FROM statements) to separate build dependencies from the runtime image and reduce size.\",\n  key: \"docker-doctor/use-multi-stage\",\n  message: \"Consider using multi-stage builds\",\n};\n\nexport const orderLayers: DockerfileRule = {\n  category: \"Performance\",\n  check(instructions, file) {\n    const diagnostics: Diagnostic[] = [];\n    let copyAllLine = -1;\n\n    for (const inst of instructions) {\n      if (inst.instruction === \"COPY\" || inst.instruction === \"ADD\") {\n        const parts = inst.args.split(/\\s+/u);\n        const src = parts.find((p) => !p.startsWith(\"--\"));\n\n        if (!src) {\n          continue;\n        }\n\n        if (\n          (src === \".\" || src === \"./\" || src === \"*\" || src.includes(\"src\")) &&\n          copyAllLine === -1\n        ) {\n          copyAllLine = inst.line;\n        }\n      }\n\n      if (inst.instruction === \"RUN\" && copyAllLine !== -1) {\n        const args = inst.args.toLowerCase();\n        if (\n          args.includes(\"npm install\") ||\n          args.includes(\"npm ci\") ||\n          args.includes(\"yarn install\") ||\n          args.includes(\"bun install\") ||\n          args.includes(\"pip install\") ||\n          args.includes(\"cargo fetch\")\n        ) {\n          diagnostics.push(\n            createDiagnostic(\n              file,\n              this.key,\n              this.defaultSeverity as \"error\" | \"warning\" | \"info\",\n              `Running package installation command '${inst.args}' after copying application files (at line ${copyAllLine}). This invalidates the cache on any code changes.`,\n              this.help,\n              inst.line\n            )\n          );\n        }\n      }\n    }\n\n    return diagnostics;\n  },\n  defaultSeverity: \"warning\",\n  help: \"Copy dependency definition files (like package.json, lockfiles) and run install commands BEFORE copying the rest of the application source code.\",\n  key: \"docker-doctor/order-layers\",\n  message: \"Order layers to maximize build cache utility\",\n};\n\nexport const minimizeLayers: DockerfileRule = {\n  category: \"Performance\",\n  check(instructions, file) {\n    const diagnostics: Diagnostic[] = [];\n    let consecutiveRunCount = 0;\n    let firstRunLine = -1;\n\n    for (const inst of instructions) {\n      if (inst.instruction === \"RUN\") {\n        if (consecutiveRunCount === 0) {\n          firstRunLine = inst.line;\n        }\n        consecutiveRunCount += 1;\n      } else {\n        if (consecutiveRunCount > 2) {\n          diagnostics.push(\n            createDiagnostic(\n              file,\n              this.key,\n              this.defaultSeverity as \"error\" | \"warning\" | \"info\",\n              `Found ${consecutiveRunCount} consecutive RUN instructions starting at line ${firstRunLine}. Consider combining them into a single RUN layer.`,\n              this.help,\n              firstRunLine\n            )\n          );\n        }\n        consecutiveRunCount = 0;\n      }\n    }\n\n    if (consecutiveRunCount > 2) {\n      diagnostics.push(\n        createDiagnostic(\n          file,\n          this.key,\n          this.defaultSeverity as \"error\" | \"warning\" | \"info\",\n          `Found ${consecutiveRunCount} consecutive RUN instructions starting at line ${firstRunLine}. Consider combining them into a single RUN layer.`,\n          this.help,\n          firstRunLine\n        )\n      );\n    }\n\n    return diagnostics;\n  },\n  defaultSeverity: \"info\",\n  help: \"Combine consecutive RUN instructions using '&&' and '\\\\' to reduce the total layer count and image size.\",\n  key: \"docker-doctor/minimize-layers\",\n  message: \"Minimize the number of image layers\",\n};\n\nexport const useDockerignore: DockerfileRule = {\n  category: \"Performance\",\n  check(instructions, file, context) {\n    // If copying everything, we definitely need .dockerignore\n    const hasCopyAll = instructions.some((inst) => {\n      if (inst.instruction === \"COPY\" || inst.instruction === \"ADD\") {\n        const parts = inst.args.split(/\\s+/u);\n        const [src] = parts;\n        return src === \".\" || src === \"./\" || src === \"*\";\n      }\n      return false;\n    });\n\n    if (hasCopyAll && context?.projectFiles) {\n      const hasDockerignore = context.projectFiles.some((f) =>\n        f.endsWith(\".dockerignore\")\n      );\n      if (!hasDockerignore) {\n        return [\n          createDiagnostic(\n            file,\n            this.key,\n            this.defaultSeverity as \"error\" | \"warning\" | \"info\",\n            \"Using COPY/ADD with wildcard/directory, but no .dockerignore file was found in the workspace. This can copy local build folders and secrets.\",\n            this.help,\n            1\n          ),\n        ];\n      }\n    }\n    return [];\n  },\n  defaultSeverity: \"warning\",\n  help: \"Create a .dockerignore file in the same directory as the Dockerfile to prevent copying unnecessary files (like node_modules, logs, build artifacts).\",\n  key: \"docker-doctor/use-dockerignore\",\n  message: \"Ensure .dockerignore is used\",\n};\n\nexport const performanceRules = [\n  useMultiStage,\n  orderLayers,\n  minimizeLayers,\n  useDockerignore,\n];\n","import type { Diagnostic, DockerfileRule } from \"../types/index\";\n\nconst createDiagnostic = (\n  file: string,\n  ruleKey: string,\n  severity: \"error\" | \"warning\" | \"info\",\n  message: string,\n  help: string,\n  line?: number\n): Diagnostic => ({ file, help, line, message, rule: ruleKey, severity });\n\nexport const noRootUser: DockerfileRule = {\n  category: \"Security\",\n  check(instructions, file) {\n    let lastUser = \"root\";\n    let lastUserLine = 1;\n\n    for (const inst of instructions) {\n      if (inst.instruction === \"USER\") {\n        lastUser = inst.args.trim().toLowerCase();\n        lastUserLine = inst.line;\n      }\n    }\n\n    if (lastUser === \"root\" || lastUser === \"0\" || lastUser === \"0:0\") {\n      return [\n        createDiagnostic(\n          file,\n          this.key,\n          this.defaultSeverity as \"error\" | \"warning\" | \"info\",\n          \"The container runs as root. Running as root allows potential container breakout vulnerabilities.\",\n          this.help,\n          lastUserLine\n        ),\n      ];\n    }\n\n    return [];\n  },\n  defaultSeverity: \"warning\",\n  help: \"Add a non-root user (e.g., 'USER node' or 'USER 1000') to improve security.\",\n  key: \"docker-doctor/no-root-user\",\n  message: \"Container should not run as root user\",\n};\n\nexport const noSecretsInEnv: DockerfileRule = {\n  category: \"Security\",\n  check(instructions, file) {\n    const diagnostics: Diagnostic[] = [];\n    const secretKeywords = [\n      /password/iu,\n      /secret/iu,\n      /token/iu,\n      /api_key/iu,\n      /private_key/iu,\n      /auth/iu,\n    ];\n\n    for (const inst of instructions) {\n      if (inst.instruction === \"ENV\" || inst.instruction === \"ARG\") {\n        const args = inst.args.trim();\n        if (inst.instruction === \"ENV\" && !args.includes(\"=\")) {\n          // KEY VALUE format\n          const match = args.match(/^(?<key>[^\\s]+)\\s+(?<value>.*)$/u);\n          if (match?.groups) {\n            const { key, value } = match.groups;\n            const isSecretKey = secretKeywords.some((regex) => regex.test(key));\n            if (\n              isSecretKey &&\n              value &&\n              !value.startsWith(\"$\") &&\n              !value.startsWith(\"{\")\n            ) {\n              diagnostics.push(\n                createDiagnostic(\n                  file,\n                  this.key,\n                  this.defaultSeverity as \"error\" | \"warning\" | \"info\",\n                  `Potential secret found in ${inst.instruction}: '${key}'. Secrets baked into images can be extracted easily by anyone with image access.`,\n                  this.help,\n                  inst.line\n                )\n              );\n            }\n          }\n        } else {\n          // Existing KEY=VALUE logic\n          const parts = args.split(/\\s+/u);\n          for (const part of parts) {\n            const eqIndex = part.indexOf(\"=\");\n            let key = \"\";\n            let value = \"\";\n\n            if (eqIndex > 0) {\n              key = part.slice(0, eqIndex);\n              value = part.slice(eqIndex + 1);\n            } else {\n              key = part;\n            }\n\n            const isSecretKey = secretKeywords.some((regex) => regex.test(key));\n            if (\n              isSecretKey &&\n              value &&\n              !value.startsWith(\"$\") &&\n              !value.startsWith(\"{\")\n            ) {\n              diagnostics.push(\n                createDiagnostic(\n                  file,\n                  this.key,\n                  this.defaultSeverity as \"error\" | \"warning\" | \"info\",\n                  `Potential secret found in ${inst.instruction}: '${key}'. Secrets baked into images can be extracted easily by anyone with image access.`,\n                  this.help,\n                  inst.line\n                )\n              );\n            }\n          }\n        }\n      }\n    }\n\n    return diagnostics;\n  },\n  defaultSeverity: \"error\",\n  help: \"Use Docker Secrets, build arguments passed at runtime, or environment variables at runtime instead of baking them into the image.\",\n  key: \"docker-doctor/no-secrets-in-env\",\n  message: \"Do not store secrets in ENV or ARG instructions\",\n};\n\nexport const pinImageVersion: DockerfileRule = {\n  category: \"Security\",\n  check(instructions, file) {\n    const diagnostics: Diagnostic[] = [];\n\n    for (const inst of instructions) {\n      if (inst.instruction === \"FROM\") {\n        // FROM image or FROM image:tag or FROM image@sha256:hash\n        // Also respect multi-stage builds (AS stageName)\n        const parts = inst.args.split(/\\s+/u);\n        const imagePart = parts.find((p) => !p.startsWith(\"--\"));\n\n        if (!imagePart || imagePart === \"scratch\") {\n          continue;\n        }\n\n        const colonIndex = imagePart.indexOf(\":\");\n        const atIndex = imagePart.indexOf(\"@\");\n\n        if (colonIndex === -1 && atIndex === -1) {\n          diagnostics.push(\n            createDiagnostic(\n              file,\n              this.key,\n              this.defaultSeverity as \"error\" | \"warning\" | \"info\",\n              `Base image '${imagePart}' does not specify a tag. This makes builds non-deterministic.`,\n              this.help,\n              inst.line\n            )\n          );\n        } else if (colonIndex !== -1) {\n          const tag = imagePart.slice(colonIndex + 1);\n          if (tag === \"latest\") {\n            diagnostics.push(\n              createDiagnostic(\n                file,\n                this.key,\n                this.defaultSeverity as \"error\" | \"warning\" | \"info\",\n                `Base image '${imagePart}' uses the mutable 'latest' tag. This makes builds non-deterministic.`,\n                this.help,\n                inst.line\n              )\n            );\n          }\n        }\n      }\n    }\n\n    return diagnostics;\n  },\n  defaultSeverity: \"warning\",\n  help: \"Specify a concrete tag instead of 'latest' or no tag (e.g., 'node:22.2.0-alpine' instead of 'node').\",\n  key: \"docker-doctor/pin-image-version\",\n  message: \"Always pin base image versions to specific tags\",\n};\n\nexport const noAddRemote: DockerfileRule = {\n  category: \"Security\",\n  check(instructions, file) {\n    const diagnostics: Diagnostic[] = [];\n\n    for (const inst of instructions) {\n      if (inst.instruction === \"ADD\") {\n        const parts = inst.args.split(/\\s+/u);\n        const [src] = parts;\n\n        if (src.startsWith(\"http://\") || src.startsWith(\"https://\")) {\n          diagnostics.push(\n            createDiagnostic(\n              file,\n              this.key,\n              this.defaultSeverity as \"error\" | \"warning\" | \"info\",\n              `ADD instruction uses a remote URL '${src}'. Remote files added via ADD cannot be cleaned up in later layers, increasing image size.`,\n              this.help,\n              inst.line\n            )\n          );\n        }\n      }\n    }\n\n    return diagnostics;\n  },\n  defaultSeverity: \"warning\",\n  help: \"Use 'RUN curl' or 'RUN wget' instead of ADD for remote URLs, and delete the downloaded archive in the same layer to minimize size.\",\n  key: \"docker-doctor/no-add-remote\",\n  message: \"Avoid using ADD with remote URLs\",\n};\n\nexport const securityRules = [\n  noRootUser,\n  noSecretsInEnv,\n  pinImageVersion,\n  noAddRemote,\n];\n","import type {\n  DockerfileRule,\n  ComposeRule,\n  RuleDefinition,\n} from \"../types/index\";\nimport { bestPracticesRules } from \"./best-practices\";\nimport { composeRules } from \"./compose\";\nimport { imageSizeRules } from \"./image-size\";\nimport { performanceRules } from \"./performance\";\nimport { securityRules } from \"./security\";\n\nexport const allDockerfileRules: DockerfileRule[] = [\n  ...securityRules,\n  ...performanceRules,\n  ...bestPracticesRules,\n  ...imageSizeRules,\n];\n\nexport const allComposeRules: ComposeRule[] = [...composeRules];\n\nexport const allRules: RuleDefinition[] = [\n  ...allDockerfileRules,\n  ...allComposeRules,\n];\n\nexport const findRule = (key: string): RuleDefinition | undefined =>\n  allRules.find((rule) => rule.key === key);\n","import { allDockerfileRules } from \"../rules/index\";\nimport type {\n  DockerfileInstruction,\n  Diagnostic,\n  RuleSeverity,\n} from \"../types/index\";\n\nexport const runDockerfileRules = (\n  instructions: DockerfileInstruction[],\n  file: string,\n  projectFiles: string[],\n  rulesConfig?: Record<string, RuleSeverity>\n): Diagnostic[] => {\n  const diagnostics: Diagnostic[] = [];\n\n  for (const rule of allDockerfileRules) {\n    const configSeverity = rulesConfig?.[rule.key];\n    if (configSeverity === \"off\") {\n      continue;\n    }\n\n    const ruleDiagnostics = rule.check(instructions, file, { projectFiles });\n\n    // Override severity if config specifies it\n    if (configSeverity) {\n      for (const diag of ruleDiagnostics) {\n        diag.severity = configSeverity as \"error\" | \"warning\" | \"info\";\n      }\n    }\n\n    diagnostics.push(...ruleDiagnostics);\n  }\n\n  return diagnostics;\n};\n","import { allComposeRules } from \"../rules/index\";\nimport type { Diagnostic, RuleSeverity } from \"../types/index\";\n\nexport const runComposeRules = (\n  composeContent: unknown,\n  file: string,\n  rulesConfig?: Record<string, RuleSeverity>\n): Diagnostic[] => {\n  const diagnostics: Diagnostic[] = [];\n\n  for (const rule of allComposeRules) {\n    const configSeverity = rulesConfig?.[rule.key];\n    if (configSeverity === \"off\") {\n      continue;\n    }\n\n    const ruleDiagnostics = rule.check(composeContent, file);\n\n    // Override severity if config specifies it\n    if (configSeverity) {\n      for (const diag of ruleDiagnostics) {\n        diag.severity = configSeverity as \"error\" | \"warning\" | \"info\";\n      }\n    }\n\n    diagnostics.push(...ruleDiagnostics);\n  }\n\n  return diagnostics;\n};\n","import * as Schema from \"effect/Schema\";\n\nexport const RuleSeveritySchema = Schema.Union([\n  Schema.Literal(\"error\"),\n  Schema.Literal(\"warning\"),\n  Schema.Literal(\"info\"),\n  Schema.Literal(\"off\"),\n]);\n\nexport const DockerDoctorConfigSchema = Schema.Struct({\n  categories: Schema.optional(\n    Schema.Struct({\n      \"Best Practices\": Schema.optional(RuleSeveritySchema),\n      Compose: Schema.optional(RuleSeveritySchema),\n      \"Image Size\": Schema.optional(RuleSeveritySchema),\n      Performance: Schema.optional(RuleSeveritySchema),\n      Security: Schema.optional(RuleSeveritySchema),\n    })\n  ),\n  ignore: Schema.optional(\n    Schema.Struct({\n      files: Schema.optional(Schema.Array(Schema.String)),\n    })\n  ),\n  rules: Schema.optional(Schema.Record(Schema.String, RuleSeveritySchema)),\n});\n\nexport type DockerDoctorConfig = Schema.Schema.Type<\n  typeof DockerDoctorConfigSchema\n>;\n","import fs from \"node:fs/promises\";\nimport path from \"node:path\";\n\nimport * as Schema from \"effect/Schema\";\n\nimport { ConfigError } from \"../errors\";\nimport type { DockerDoctorConfig } from \"../schemas/config\";\nimport { DockerDoctorConfigSchema } from \"../schemas/config\";\n\nconst fileExists = async (filePath: string): Promise<boolean> => {\n  try {\n    await fs.access(filePath);\n    return true;\n  } catch {\n    return false;\n  }\n};\n\nconst importConfig = async (filePath: string): Promise<unknown> => {\n  if (filePath.endsWith(\".json\")) {\n    try {\n      const content = await fs.readFile(filePath, \"utf-8\");\n      return JSON.parse(content);\n    } catch (error: unknown) {\n      const msg = error instanceof Error ? error.message : String(error);\n      throw new ConfigError({\n        message: `Failed to parse config JSON: ${msg}`,\n      });\n    }\n  }\n\n  try {\n    const configModule = await import(filePath);\n    return configModule.default || configModule;\n  } catch (error: unknown) {\n    const msg = error instanceof Error ? error.message : String(error);\n    throw new ConfigError({\n      message: `Failed to load config file ${filePath}: ${msg}`,\n    });\n  }\n};\n\nexport const loadConfig = async (\n  rootDir: string,\n  customPath?: string\n): Promise<DockerDoctorConfig> => {\n  let configObject: unknown = null;\n\n  if (customPath) {\n    const fullPath = path.resolve(rootDir, customPath);\n    if (!(await fileExists(fullPath))) {\n      throw new ConfigError({\n        message: `Specified config file not found at ${fullPath}`,\n      });\n    }\n    configObject = await importConfig(fullPath);\n  } else {\n    const candidates = [\n      \"docker-doctor.config.ts\",\n      \"docker-doctor.config.js\",\n      \"docker-doctor.config.mjs\",\n      \"docker-doctor.config.cjs\",\n      \"docker-doctor.config.json\",\n    ];\n\n    /* eslint-disable no-await-in-loop */\n    for (const cand of candidates) {\n      const fullPath = path.join(rootDir, cand);\n      if (await fileExists(fullPath)) {\n        configObject = await importConfig(fullPath);\n        break;\n      }\n    }\n    /* eslint-enable no-await-in-loop */\n\n    if (!configObject) {\n      const pkgPath = path.join(rootDir, \"package.json\");\n      if (await fileExists(pkgPath)) {\n        try {\n          const pkgContent = await fs.readFile(pkgPath, \"utf-8\");\n          const pkgJson = JSON.parse(pkgContent);\n          if (pkgJson.dockerDoctor) {\n            configObject = pkgJson.dockerDoctor;\n          }\n        } catch {\n          // ignore package.json read/parse failures\n        }\n      }\n    }\n  }\n\n  if (!configObject) {\n    return {};\n  }\n\n  try {\n    /* eslint-disable-next-line @typescript-eslint/no-explicit-any */\n    const decoded = Schema.decodeSync(DockerDoctorConfigSchema as any)(\n      configObject\n    );\n    return decoded as DockerDoctorConfig;\n  } catch (error: unknown) {\n    const msg = error instanceof Error ? error.message : String(error);\n    throw new ConfigError({\n      message: `Invalid configuration format: ${msg}`,\n    });\n  }\n};\n","import type { Diagnostic } from \"./types/index\";\n\nexport const calculateScore = (\n  diagnostics: Diagnostic[]\n): {\n  score: number;\n  label: string;\n} => {\n  let penalty = 0;\n\n  for (const diag of diagnostics) {\n    if (diag.severity === \"error\") {\n      penalty += 10;\n    } else if (diag.severity === \"warning\") {\n      penalty += 4;\n    } else if (diag.severity === \"info\") {\n      penalty += 1;\n    }\n  }\n\n  const score = Math.max(0, 100 - penalty);\n\n  let label = \"Critical 🚨\";\n  if (score >= 90) {\n    label = \"Excellent 🏆\";\n  } else if (score >= 75) {\n    label = \"Good ✅\";\n  } else if (score >= 50) {\n    label = \"Needs Work ⚠️\";\n  }\n\n  return { label, score };\n};\n","import type { Diagnostic, ProjectInfo } from \"./types/index\";\n\nexport interface JsonReport {\n  diagnostics: {\n    column?: number;\n    file: string;\n    help: string;\n    line?: number;\n    message: string;\n    rule: string;\n    severity: \"error\" | \"warning\" | \"info\";\n  }[];\n  label: string;\n  project: ProjectInfo;\n  score: number;\n  timestamp: string;\n}\n\nexport const toJsonReport = (\n  diagnostics: Diagnostic[],\n  score: number,\n  label: string,\n  project: ProjectInfo\n): JsonReport => ({\n  diagnostics: diagnostics.map((d) => ({\n    column: d.column,\n    file: d.file,\n    help: d.help,\n    line: d.line,\n    message: d.message,\n    rule: d.rule,\n    severity: d.severity,\n  })),\n  label,\n  project,\n  score,\n  timestamp: new Date().toISOString(),\n});\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;ACKA,MAAM,OAAO,OACX,KACA,WAAqB,CAAC,MACA;CACtB,MAAM,QAAQ,MAAM,GAAG,QAAQ,KAAK,EAAE,eAAe,KAAK,CAAC;CAC3D,MAAM,QAAQ,IACZ,MAAM,IAAI,OAAO,SAAS;EACxB,MAAM,WAAW,KAAK,KAAK,KAAK,KAAK,IAAI;EACzC,IAAI,KAAK,YAAY,GAAG;GACtB,IACE,KAAK,SAAS,kBACd,KAAK,SAAS,UACd,KAAK,SAAS,WACd,KAAK,SAAS,UACd,KAAK,SAAS,UAEd;GAEF,MAAM,KAAK,UAAU,QAAQ;EAC/B,OACE,SAAS,KAAK,QAAQ;CAE1B,CAAC,CACH;CACA,OAAO;AACT;AAEA,MAAa,kBAAkB,OAC7B,YACyB;CACzB,MAAM,WAAW,MAAM,KAAK,OAAO;CACnC,MAAM,cAAwB,CAAC;CAC/B,MAAM,eAAyB,CAAC;CAChC,MAAM,gBAA0B,CAAC;CAEjC,KAAK,MAAM,QAAQ,UAAU;EAC3B,MAAM,OAAO,KAAK,SAAS,IAAI,CAAC,CAAC,YAAY;EAE7C,IAAI,SAAS,iBACX,cAAc,KAAK,KAAK,SAAS,SAAS,IAAI,CAAC;EAIjD,IACE,SAAS,gBACT,KAAK,WAAW,aAAa,KAC7B,KAAK,SAAS,aAAa,GAE3B,YAAY,KAAK,KAAK,SAAS,SAAS,IAAI,CAAC;EAI/C,IACE,SAAS,wBACT,SAAS,yBACT,SAAS,iBACT,SAAS,mBACP,KAAK,WAAW,iBAAiB,KAAK,KAAK,WAAW,UAAU,OAC/D,KAAK,SAAS,MAAM,KAAK,KAAK,SAAS,OAAO,IAEjD,aAAa,KAAK,KAAK,SAAS,SAAS,IAAI,CAAC;CAElD;CAEA,OAAO;EACL;EACA;EACA;CACF;AACF;;;;ACxEA,MAAa,mBAAmB,YAA6C;CAC3E,MAAM,eAAwC,CAAC;CAC/C,MAAM,QAAQ,QAAQ,MAAM,QAAQ;CAEpC,IAAI,qBAAqB;CACzB,IAAI,cAAc;CAClB,IAAI,YAAY;CAChB,IAAI,iBAA2B,CAAC;CAEhC,KAAK,MAAM,CAAC,GAAG,YAAY,MAAM,QAAQ,GAAG;EAC1C,MAAM,UAAU,QAAQ,KAAK;EAC7B,MAAM,UAAU,IAAI;EAGpB,IAAI,CAAC,uBAAuB,YAAY,MAAM,QAAQ,WAAW,GAAG,IAClE;EAGF,eAAe,KAAK,OAAO;EAE3B,IAAI,cAAc;EAGlB,IAAI,YAAY,WAAW,GAAG,GAC5B;EAGF,MAAM,kBAAkB,YAAY,SAAS,IAAI;EACjD,IAAI,iBACF,cAAc,YAAY,MAAM,GAAG,EAAE,CAAC,CAAC,KAAK;EAG9C,IAAI,oBACF,gBAAgB,cAAc,MAAM,MAAM;OACrC;GACL,YAAY;GAEZ,MAAM,QAAQ,YAAY,MAAM,mCAAmC;GACnE,IAAI,OAAO,QAAQ;IACjB,qBAAqB,MAAM,OAAO,KAAK,YAAY;IACnD,cAAc,MAAM,OAAO;GAC7B,OAAO;IACL,MAAM,OAAO,YAAY,KAAK,CAAC,CAAC,YAAY;IAC5C,IACE;KAAC;KAAO;KAAO;KAAc;KAAU;KAAQ;IAAS,CAAC,CAAC,SACxD,IACF,GACA;KACA,qBAAqB;KACrB,cAAc;IAChB;GACF;EACF;EAEA,IAAI,CAAC,iBAAiB;GACpB,IAAI,oBACF,aAAa,KAAK;IAChB,MAAM;IACN,aAAa;IACb,MAAM;IACN,KAAK,eAAe,KAAK,IAAI;GAC/B,CAAC;GAEH,qBAAqB;GACrB,cAAc;GACd,iBAAiB,CAAC;EACpB;CACF;CAEA,IAAI,oBACF,aAAa,KAAK;EAChB,MAAM;EACN,aAAa;EACb,MAAM;EACN,KAAK,eAAe,KAAK,IAAI;CAC/B,CAAC;CAGH,OAAO;AACT;;;;AC/EA,IAAa,cAAb,cAAiC,KAAK,YAAY,aAAa,CAAC,CAE7D,CAAC;;;;ACFJ,IAAa,oBAAb,cAAuC,KAAK,YAAY,mBAAmB,CAAC,CAEzE,CAAC;;;;ACFJ,IAAa,aAAb,cAAgC,KAAK,YAAY,YAAY,CAAC,CAG3D,CAAC;;;;ACDJ,MAAa,gBAAgB,SAAiB,aAA8B;CAC1E,IAAI;EACF,OAAO,MAAM,OAAO;CACtB,SAAS,OAAgB;EACvB,MAAM,IAAI,WAAW;GACnB,MAAM;GACN,SAAS,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK;EAChE,CAAC;CACH;AACF;;;;ACXA,MAAMA,sBACJ,MACA,SACA,UACA,SACA,MACA,UACgB;CAAE;CAAM;CAAM;CAAM;CAAS,MAAM;CAAS;AAAS;AAEvE,MAAa,qBAAqC;CAChD,UAAU;CACV,MAAM,cAAc,MAAM;EACxB,MAAM,iBAAiB,aAAa,MACjC,SAAS,KAAK,gBAAgB,aACjC;EAGA,MAAM,yBAAyB,aAAa,MACzC,SACC,KAAK,gBAAgB,YACrB,KAAK,gBAAgB,SACrB,KAAK,gBAAgB,YACzB;EAEA,IAAI,CAAC,kBAAkB,wBACrB,OAAO,CACLA,mBACE,MACA,KAAK,KACL,KAAK,iBACL,oHACA,KAAK,MACL,CACF,CACF;EAEF,OAAO,CAAC;CACV;CACA,iBAAiB;CACjB,MAAM;CACN,KAAK;CACL,SAAS;AACX;AAEA,MAAa,oBAAoC;CAC/C,UAAU;CACV,MAAM,cAAc,MAAM;EACxB,MAAM,cAA4B,CAAC;EAEnC,KAAK,MAAM,QAAQ,cACjB,IAAI,KAAK,gBAAgB,OAAO;GAE9B,MAAM,CAAC,OADO,KAAK,KAAK,MAAM,MACZ;GAGlB,MAAM,WACJ,IAAI,WAAW,SAAS,KAAK,IAAI,WAAW,UAAU;GACxD,MAAM,YACJ,IAAI,SAAS,MAAM,KACnB,IAAI,SAAS,SAAS,KACtB,IAAI,SAAS,MAAM,KACnB,IAAI,SAAS,MAAM;GAErB,IAAI,CAAC,YAAY,CAAC,WAChB,YAAY,KACVA,mBACE,MACA,KAAK,KACL,KAAK,iBACL,4CAA4C,KAAK,KAAK,2DACtD,KAAK,MACL,KAAK,IACP,CACF;EAEJ;EAGF,OAAO;CACT;CACA,iBAAiB;CACjB,MAAM;CACN,KAAK;CACL,SAAS;AACX;AAEA,MAAa,cAA8B;CACzC,UAAU;CACV,MAAM,cAAc,MAAM;EACxB,MAAM,cAA4B,CAAC;EAEnC,KAAK,MAAM,QAAQ,cACjB,IAAI,KAAK,gBAAgB,SAAS,KAAK,gBAAgB,cAAc;GACnE,MAAM,OAAO,KAAK,KAAK,KAAK;GAE5B,IAAI,CAAC,KAAK,WAAW,GAAG,KAAK,CAAC,KAAK,SAAS,GAAG,GAC7C,YAAY,KACVA,mBACE,MACA,KAAK,KACL,KAAK,iBACL,GAAG,KAAK,YAAY,yJACpB,KAAK,MACL,KAAK,IACP,CACF;EAEJ;EAGF,OAAO;CACT;CACA,iBAAiB;CACjB,MAAM;CACN,KAAK;CACL,SAAS;AACX;AAEA,MAAa,gBAAgC;CAC3C,UAAU;CACV,MAAM,cAAc,MAAM;EAExB,IAAI,CADa,aAAa,MAAM,SAAS,KAAK,gBAAgB,OACtD,GACV,OAAO,CACLA,mBACE,MACA,KAAK,KACL,KAAK,iBACL,kIACA,KAAK,MACL,CACF,CACF;EAEF,OAAO,CAAC;CACV;CACA,iBAAiB;CACjB,MAAM;CACN,KAAK;CACL,SAAS;AACX;AAEA,MAAa,0BAA0C;CACrD,UAAU;CACV,MAAM,cAAc,MAAM;EACxB,MAAM,cAA4B,CAAC;EACnC,KAAK,MAAM,QAAQ,cACjB,IAAI,KAAK,gBAAgB,OAAO;GAC9B,MAAM,YAAY,KAAK,KAAK,SAAS,gBAAgB;GACrD,MAAM,aAAa,KAAK,KAAK,SAAS,iBAAiB;GAEvD,IAAI,aAAa,CAAC,YAChB,YAAY,KACVA,mBACE,MACA,KAAK,KACL,KAAK,iBACL,8HACA,KAAK,MACL,KAAK,IACP,CACF;QACK,IAAI,cAAc,CAAC,WACxB,YAAY,KACVA,mBACE,MACA,KAAK,KACL,KAAK,iBACL,2IACA,KAAK,MACL,KAAK,IACP,CACF;EAEJ;EAEF,OAAO;CACT;CACA,iBAAiB;CACjB,MAAM;CACN,KAAK;CACL,SAAS;AACX;AAEA,MAAa,cAA8B;CACzC,UAAU;CACV,MAAM,cAAc,MAAM;EACxB,MAAM,cAA4B,CAAC;EACnC,KAAK,MAAM,QAAQ,cACjB,IAAI,KAAK,gBAAgB,OAAO;GAC9B,MAAM,EAAE,QAAQ;GAEhB,IADgB,mBAAmB,KAAK,GAC9B,KAAK,CAAC,IAAI,SAAS,UAAU,GACrC,YAAY,KACVA,mBACE,MACA,KAAK,KACL,KAAK,iBACL,2IACA,KAAK,MACL,KAAK,IACP,CACF;EAEJ;EAEF,OAAO;CACT;CACA,iBAAiB;CACjB,MAAM;CACN,KAAK;CACL,SAAS;AACX;AAEA,MAAa,kBAAkC;CAC7C,UAAU;CACV,MAAM,cAAc,MAAM;EACxB,MAAM,cAA4B,CAAC;EACnC,KAAK,MAAM,QAAQ,cACjB,IAAI,KAAK,gBAAgB,WAAW;GAClC,MAAM,OAAO,KAAK,KAAK,KAAK;GAG5B,IAAI,CAFe,2BAA2B,KAAK,IAErC,GACZ,YAAY,KACVA,mBACE,MACA,KAAK,KACL,KAAK,iBACL,sCAAsC,KAAK,6DAC3C,KAAK,MACL,KAAK,IACP,CACF;EAEJ;EAEF,OAAO;CACT;CACA,iBAAiB;CACjB,MAAM;CACN,KAAK;CACL,SAAS;AACX;AAEA,MAAa,aAA6B;CACxC,UAAU;CACV,MAAM,cAAc,MAAM;EACxB,MAAM,cAA4B,CAAC;EACnC,KAAK,MAAM,QAAQ,cACjB,IAAI,KAAK,gBAAgB,SAAS,UAAU,KAAK,KAAK,IAAI,GACxD,YAAY,KACVA,mBACE,MACA,KAAK,KACL,KAAK,iBACL,mHACA,KAAK,MACL,KAAK,IACP,CACF;EAGJ,OAAO;CACT;CACA,iBAAiB;CACjB,MAAM;CACN,KAAK;CACL,SAAS;AACX;AAEA,MAAa,oBAAoC;CAC/C,UAAU;CACV,MAAM,cAAc,MAAM;EACxB,MAAM,cAA4B,CAAC;EACnC,KAAK,MAAM,QAAQ,cACjB,IAAI,KAAK,gBAAgB,OAAO;GAC9B,MAAM,EAAE,QAAQ;GAChB,MAAM,mBACJ,IAAI,SAAS,iBAAiB,KAC9B,IAAI,SAAS,SAAS,KACtB,IAAI,SAAS,aAAa,KAC1B,IAAI,SAAS,aAAa;GAE5B,MAAM,kBAAkB,IAAI,SAAS,MAAM,KAAK,IAAI,SAAS,QAAQ;GAErE,IAAI,oBAAoB,iBAAiB;IAEvC,MAAM,WADQ,IAAI,MAAM,QACH,CAAC,CACnB,MAAM,CAAC,CAAC,CACR,KAAK,SAAS,KAAK,KAAK,CAAC,CAAC,CAC1B,QACE,SACC,SAAS,MACT,CAAC,KAAK,WAAW,IAAI,KACrB,CAAC,KAAK,WAAW,GAAG,KACpB,CAAC,KAAK,SAAS,QAAQ,CAC3B,CAAC,CACA,KAAK,SACJ,KAAK,SAAS,IAAI,IAAI,KAAK,MAAM,GAAG,EAAE,CAAC,CAAC,KAAK,IAAI,IACnD,CAAC,CACA,OAAO,OAAO;IAEjB,IAAI,SAAS,SAAS,GAAG;KACvB,MAAM,SAAS,SAAS,UAAU,GAAG,MAAM,EAAE,cAAc,CAAC,CAAC;KAE7D,IAAI,CADa,SAAS,OAAO,KAAK,QAAQ,QAAQ,OAAO,IACjD,GACV,YAAY,KACVA,mBACE,MACA,KAAK,KACL,KAAK,iBACL,uIACA,KAAK,MACL,KAAK,IACP,CACF;IAEJ;GACF;EACF;EAEF,OAAO;CACT;CACA,iBAAiB;CACjB,MAAM;CACN,KAAK;CACL,SAAS;AACX;AAEA,MAAa,mBAAmC;CAC9C,UAAU;CACV,MAAM,cAAc,MAAM;EACxB,MAAM,cAA4B,CAAC;EACnC,KAAK,MAAM,QAAQ,cACjB,IACE,KAAK,gBAAgB,SACrB,eAAe,KAAK,KAAK,IAAI,KAC7B,CAAC,KAAK,KAAK,SAAS,eAAe,GAEnC,YAAY,KACVA,mBACE,MACA,KAAK,KACL,KAAK,iBACL,8KACA,KAAK,MACL,KAAK,IACP,CACF;EAGJ,OAAO;CACT;CACA,iBAAiB;CACjB,MAAM;CACN,KAAK;CACL,SAAS;AACX;AAEA,MAAa,qBAAqB;CAChC;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;AACF;;;;ACnXA,MAAMC,sBACJ,MACA,SACA,UACA,SACA,UACgB;CAAE;CAAM;CAAM;CAAS,MAAM;CAAS;AAAS;AAEjE,MAAa,eAA4B;CACvC,UAAU;CACV,MAAM,gBAAgB,MAAM;EAC1B,IACE,kBACA,OAAO,mBAAmB,YAC1B,aAAa,gBAEb,OAAO,CACLA,mBACE,MACA,KAAK,KACL,KAAK,iBACL,0FACA,KAAK,IACP,CACF;EAEF,OAAO,CAAC;CACV;CACA,iBAAiB;CACjB,MAAM;CACN,KAAK;CACL,SAAS;AACX;AAEA,MAAa,wBAAqC;CAChD,UAAU;CACV,MAAM,gBAAgB,MAAM;EAC1B,MAAM,cAA4B,CAAC;EAEnC,IACE,kBACA,OAAO,mBAAmB,YAC1B,cAAc,gBACd;GACA,MAAM,EAAE,aAAa;GACrB,IAAI,YAAY,OAAO,aAAa,UAClC;SAAK,MAAM,CAAC,MAAM,WAAW,OAAO,QAAQ,QAAQ,GAClD,IAAI,UAAU,OAAO,WAAW,UAAU;KAOxC,MAAM,UANU,OAAmC,QAGzB,UAGF,EAAE;KAI1B,IAAI,CAAC,UAAW,CAAC,OAAO,QAAQ,CAAC,OAAO,QACtC,YAAY,KACVA,mBACE,MACA,KAAK,KACL,KAAK,iBACL,YAAY,KAAK,sGACjB,KAAK,IACP,CACF;IAEJ;GACF;EAEJ;EAEA,OAAO;CACT;CACA,iBAAiB;CACjB,MAAM;CACN,KAAK;CACL,SAAS;AACX;AAEA,MAAa,uBAAoC;CAC/C,UAAU;CACV,MAAM,gBAAgB,MAAM;EAC1B,MAAM,cAA4B,CAAC;EAEnC,IACE,kBACA,OAAO,mBAAmB,YAC1B,cAAc,gBACd;GACA,MAAM,EAAE,aAAa;GACrB,IAAI,YAAY,OAAO,aAAa,UAClC;SAAK,MAAM,CAAC,MAAM,WAAW,OAAO,QAAQ,QAAQ,GAClD,IAAI,UAAU,OAAO,WAAW,UAAU;KACxC,MAAM,aAAa,aAAa;KAIhC,MAAM,mBAHU,OAAmC,QAGlB,mBAAmB;KAEpD,IAAI,CAAC,cAAc,CAAC,kBAClB,YAAY,KACVA,mBACE,MACA,KAAK,KACL,KAAK,iBACL,YAAY,KAAK,gGACjB,KAAK,IACP,CACF;IAEJ;GACF;EAEJ;EAEA,OAAO;CACT;CACA,iBAAiB;CACjB,MAAM;CACN,KAAK;CACL,SAAS;AACX;AAEA,MAAa,wBAAqC;CAChD,UAAU;CACV,MAAM,gBAAgB,MAAM;EAC1B,MAAM,cAA4B,CAAC;EAEnC,IACE,kBACA,OAAO,mBAAmB,YAC1B,cAAc,gBACd;GACA,MAAM,EAAE,aAAa;GACrB,IAAI,YAAY,OAAO,aAAa,UAClC;SAAK,MAAM,CAAC,MAAM,WAAW,OAAO,QAAQ,QAAQ,GAClD,IAAI,UAAU,OAAO,WAAW,UAAU;KACxC,MAAM,YAAa,OAAmC;KACtD,IAAI,aAAa,MAAM,QAAQ,SAAS,GACtC,YAAY,KACVA,mBACE,MACA,KAAK,KACL,KAAK,iBACL,YAAY,KAAK,+GACjB,KAAK,IACP,CACF;IAEJ;GACF;EAEJ;EAEA,OAAO;CACT;CACA,iBAAiB;CACjB,MAAM;CACN,KAAK;CACL,SAAS;AACX;AAEA,MAAa,eAAe;CAC1B;CACA;CACA;CACA;AACF;;;;AC1KA,MAAMC,sBACJ,MACA,SACA,UACA,SACA,MACA,UACgB;CAAE;CAAM;CAAM;CAAM;CAAS,MAAM;CAAS;AAAS;AAEvE,MAAa,iBAAiC;CAC5C,UAAU;CACV,MAAM,cAAc,MAAM;EACxB,MAAM,cAA4B,CAAC;EAEnC,KAAK,MAAM,QAAQ,cACjB,IAAI,KAAK,gBAAgB,QAAQ;GAE/B,MAAM,YADQ,KAAK,KAAK,MAAM,MACR,CAAC,CAAC,MAAM,MAAM,CAAC,EAAE,WAAW,IAAI,CAAC;GACvD,IAAI,CAAC,aAAa,cAAc,WAC9B;GAGF,MAAM,aAAa,UAAU,QAAQ,GAAG;GACxC,IAAI,eAAe,IAAI;IACrB,MAAM,MAAM,UAAU,MAAM,aAAa,CAAC,CAAC,CAAC,YAAY;IAGxD,MAAM,SACJ,IAAI,SAAS,QAAQ,KACrB,IAAI,SAAS,MAAM,KACnB,IAAI,SAAS,YAAY;IAC3B,MAAM,QAAQ,IAAI,WAAW,SAAS;IAGtC,MAAM,mBAAmB,aAAa,MACnC,UACC,MAAM,OAAO,KAAK,QAClB,MAAM,gBAAgB,UACtB,MAAM,KACH,YAAY,CAAC,CACb,SAAS,OAAO,UAAU,YAAY,GAAG,CAChD;IAEA,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,kBACxB,YAAY,KACVA,mBACE,MACA,KAAK,KACL,KAAK,iBACL,eAAe,UAAU,gFACzB,KAAK,MACL,KAAK,IACP,CACF;GAEJ;EACF;EAGF,OAAO;CACT;CACA,iBAAiB;CACjB,MAAM;CACN,KAAK;CACL,SAAS;AACX;AAEA,MAAa,oBAAoC;CAC/C,UAAU;CACV,MAAM,cAAc,MAAM;EACxB,MAAM,cAA4B,CAAC;EAEnC,KAAK,MAAM,QAAQ,cACjB,IAAI,KAAK,gBAAgB,OAAO;GAC9B,MAAM,EAAE,SAAS;GAGjB,IACE,KAAK,SAAS,iBAAiB,KAC/B,CAAC,KAAK,SAAS,2BAA2B,GAE1C,YAAY,KACVA,mBACE,MACA,KAAK,KACL,KAAK,iBACL,2HACA,KAAK,MACL,KAAK,IACP,CACF;GAIF,IACE,KAAK,SAAS,SAAS,KACvB,CAAC,KAAK,SAAS,YAAY,KAC3B,CAAC,KAAK,SAAS,uBAAuB,GAEtC,YAAY,KACVA,mBACE,MACA,KAAK,KACL,KAAK,iBACL,gGACA,KAAK,MACL,KAAK,IACP,CACF;EAEJ;EAGF,OAAO;CACT;CACA,iBAAiB;CACjB,MAAM;CACN,KAAK;CACL,SAAS;AACX;AAEA,MAAa,uBAAuC;CAClD,UAAU;CACV,MAAM,cAAc,MAAM;EACxB,MAAM,cAA4B,CAAC;EACnC,IAAI,cAAc;EAClB,IAAI,YAAY;EAEhB,KAAK,MAAM,QAAQ,cACjB,IAAI,KAAK,gBAAgB,QACvB,aAAa;EAIjB,IAAI,eAAe;EACnB,KAAK,MAAM,QAAQ,cAAc;GAC/B,IAAI,KAAK,gBAAgB,QAAQ;IAC/B,gBAAgB;IAChB,cAAc,iBAAiB;GACjC;GAEA,IAAI,eAAe,KAAK,gBAAgB,OAAO;IAC7C,MAAM,EAAE,SAAS;IACjB,KACG,KAAK,SAAS,aAAa,KAC1B,KAAK,SAAS,QAAQ,KACtB,KAAK,SAAS,cAAc,MAC9B,CAAC,KAAK,SAAS,cAAc,KAC7B,CAAC,KAAK,SAAS,YAAY,KAC3B,CAAC,KAAK,SAAS,OAAO,GAEtB,YAAY,KACVA,mBACE,MACA,KAAK,KACL,KAAK,iBACL,4BAA4B,KAAK,KAAK,yDACtC,KAAK,MACL,KAAK,IACP,CACF;GAEJ;EACF;EAEA,OAAO;CACT;CACA,iBAAiB;CACjB,MAAM;CACN,KAAK;CACL,SACE;AACJ;AAEA,MAAa,iBAAiB;CAC5B;CACA;CACA;AACF;;;;AClLA,MAAMC,sBACJ,MACA,SACA,UACA,SACA,MACA,UACgB;CAAE;CAAM;CAAM;CAAM;CAAS,MAAM;CAAS;AAAS;AAEvE,MAAa,gBAAgC;CAC3C,UAAU;CACV,MAAM,cAAc,MAAM;EAIxB,IAHkB,aAAa,QAC5B,SAAS,KAAK,gBAAgB,MACjC,CAAC,CAAC,WACgB,GAYhB;OAVsB,aAAa,MAChC,SACC,KAAK,gBAAgB,UACpB,KAAK,KAAK,SAAS,eAAe,KACjC,KAAK,KAAK,SAAS,YAAY,KAC/B,KAAK,KAAK,SAAS,eAAe,KAClC,KAAK,KAAK,SAAS,aAAa,KAChC,KAAK,KAAK,SAAS,MAAM,EAGf,GACd,OAAO,CACLA,mBACE,MACA,KAAK,KACL,KAAK,iBACL,8IACA,KAAK,MACL,aAAa,MAAM,SAAS,KAAK,gBAAgB,MAAM,CAAC,EAAE,QAAQ,CACpE,CACF;EACF;EAEF,OAAO,CAAC;CACV;CACA,iBAAiB;CACjB,MAAM;CACN,KAAK;CACL,SAAS;AACX;AAEA,MAAa,cAA8B;CACzC,UAAU;CACV,MAAM,cAAc,MAAM;EACxB,MAAM,cAA4B,CAAC;EACnC,IAAI,cAAc;EAElB,KAAK,MAAM,QAAQ,cAAc;GAC/B,IAAI,KAAK,gBAAgB,UAAU,KAAK,gBAAgB,OAAO;IAE7D,MAAM,MADQ,KAAK,KAAK,MAAM,MACd,CAAC,CAAC,MAAM,MAAM,CAAC,EAAE,WAAW,IAAI,CAAC;IAEjD,IAAI,CAAC,KACH;IAGF,KACG,QAAQ,OAAO,QAAQ,QAAQ,QAAQ,OAAO,IAAI,SAAS,KAAK,MACjE,gBAAgB,IAEhB,cAAc,KAAK;GAEvB;GAEA,IAAI,KAAK,gBAAgB,SAAS,gBAAgB,IAAI;IACpD,MAAM,OAAO,KAAK,KAAK,YAAY;IACnC,IACE,KAAK,SAAS,aAAa,KAC3B,KAAK,SAAS,QAAQ,KACtB,KAAK,SAAS,cAAc,KAC5B,KAAK,SAAS,aAAa,KAC3B,KAAK,SAAS,aAAa,KAC3B,KAAK,SAAS,aAAa,GAE3B,YAAY,KACVA,mBACE,MACA,KAAK,KACL,KAAK,iBACL,yCAAyC,KAAK,KAAK,6CAA6C,YAAY,qDAC5G,KAAK,MACL,KAAK,IACP,CACF;GAEJ;EACF;EAEA,OAAO;CACT;CACA,iBAAiB;CACjB,MAAM;CACN,KAAK;CACL,SAAS;AACX;AAEA,MAAa,iBAAiC;CAC5C,UAAU;CACV,MAAM,cAAc,MAAM;EACxB,MAAM,cAA4B,CAAC;EACnC,IAAI,sBAAsB;EAC1B,IAAI,eAAe;EAEnB,KAAK,MAAM,QAAQ,cACjB,IAAI,KAAK,gBAAgB,OAAO;GAC9B,IAAI,wBAAwB,GAC1B,eAAe,KAAK;GAEtB,uBAAuB;EACzB,OAAO;GACL,IAAI,sBAAsB,GACxB,YAAY,KACVA,mBACE,MACA,KAAK,KACL,KAAK,iBACL,SAAS,oBAAoB,iDAAiD,aAAa,qDAC3F,KAAK,MACL,YACF,CACF;GAEF,sBAAsB;EACxB;EAGF,IAAI,sBAAsB,GACxB,YAAY,KACVA,mBACE,MACA,KAAK,KACL,KAAK,iBACL,SAAS,oBAAoB,iDAAiD,aAAa,qDAC3F,KAAK,MACL,YACF,CACF;EAGF,OAAO;CACT;CACA,iBAAiB;CACjB,MAAM;CACN,KAAK;CACL,SAAS;AACX;AAEA,MAAa,kBAAkC;CAC7C,UAAU;CACV,MAAM,cAAc,MAAM,SAAS;EAWjC,IATmB,aAAa,MAAM,SAAS;GAC7C,IAAI,KAAK,gBAAgB,UAAU,KAAK,gBAAgB,OAAO;IAE7D,MAAM,CAAC,OADO,KAAK,KAAK,MAAM,MACZ;IAClB,OAAO,QAAQ,OAAO,QAAQ,QAAQ,QAAQ;GAChD;GACA,OAAO;EACT,CAEa,KAAK,SAAS,cAIzB;OAAI,CAHoB,QAAQ,aAAa,MAAM,MACjD,EAAE,SAAS,eAAe,CAET,GACjB,OAAO,CACLA,mBACE,MACA,KAAK,KACL,KAAK,iBACL,gJACA,KAAK,MACL,CACF,CACF;EACF;EAEF,OAAO,CAAC;CACV;CACA,iBAAiB;CACjB,MAAM;CACN,KAAK;CACL,SAAS;AACX;AAEA,MAAa,mBAAmB;CAC9B;CACA;CACA;CACA;AACF;;;;ACrMA,MAAM,oBACJ,MACA,SACA,UACA,SACA,MACA,UACgB;CAAE;CAAM;CAAM;CAAM;CAAS,MAAM;CAAS;AAAS;AAEvE,MAAa,aAA6B;CACxC,UAAU;CACV,MAAM,cAAc,MAAM;EACxB,IAAI,WAAW;EACf,IAAI,eAAe;EAEnB,KAAK,MAAM,QAAQ,cACjB,IAAI,KAAK,gBAAgB,QAAQ;GAC/B,WAAW,KAAK,KAAK,KAAK,CAAC,CAAC,YAAY;GACxC,eAAe,KAAK;EACtB;EAGF,IAAI,aAAa,UAAU,aAAa,OAAO,aAAa,OAC1D,OAAO,CACL,iBACE,MACA,KAAK,KACL,KAAK,iBACL,oGACA,KAAK,MACL,YACF,CACF;EAGF,OAAO,CAAC;CACV;CACA,iBAAiB;CACjB,MAAM;CACN,KAAK;CACL,SAAS;AACX;AAEA,MAAa,iBAAiC;CAC5C,UAAU;CACV,MAAM,cAAc,MAAM;EACxB,MAAM,cAA4B,CAAC;EACnC,MAAM,iBAAiB;GACrB;GACA;GACA;GACA;GACA;GACA;EACF;EAEA,KAAK,MAAM,QAAQ,cACjB,IAAI,KAAK,gBAAgB,SAAS,KAAK,gBAAgB,OAAO;GAC5D,MAAM,OAAO,KAAK,KAAK,KAAK;GAC5B,IAAI,KAAK,gBAAgB,SAAS,CAAC,KAAK,SAAS,GAAG,GAAG;IAErD,MAAM,QAAQ,KAAK,MAAM,kCAAkC;IAC3D,IAAI,OAAO,QAAQ;KACjB,MAAM,EAAE,KAAK,UAAU,MAAM;KAE7B,IADoB,eAAe,MAAM,UAAU,MAAM,KAAK,GAAG,CAErD,KACV,SACA,CAAC,MAAM,WAAW,GAAG,KACrB,CAAC,MAAM,WAAW,GAAG,GAErB,YAAY,KACV,iBACE,MACA,KAAK,KACL,KAAK,iBACL,6BAA6B,KAAK,YAAY,KAAK,IAAI,oFACvD,KAAK,MACL,KAAK,IACP,CACF;IAEJ;GACF,OAAO;IAEL,MAAM,QAAQ,KAAK,MAAM,MAAM;IAC/B,KAAK,MAAM,QAAQ,OAAO;KACxB,MAAM,UAAU,KAAK,QAAQ,GAAG;KAChC,IAAI,MAAM;KACV,IAAI,QAAQ;KAEZ,IAAI,UAAU,GAAG;MACf,MAAM,KAAK,MAAM,GAAG,OAAO;MAC3B,QAAQ,KAAK,MAAM,UAAU,CAAC;KAChC,OACE,MAAM;KAIR,IADoB,eAAe,MAAM,UAAU,MAAM,KAAK,GAAG,CAErD,KACV,SACA,CAAC,MAAM,WAAW,GAAG,KACrB,CAAC,MAAM,WAAW,GAAG,GAErB,YAAY,KACV,iBACE,MACA,KAAK,KACL,KAAK,iBACL,6BAA6B,KAAK,YAAY,KAAK,IAAI,oFACvD,KAAK,MACL,KAAK,IACP,CACF;IAEJ;GACF;EACF;EAGF,OAAO;CACT;CACA,iBAAiB;CACjB,MAAM;CACN,KAAK;CACL,SAAS;AACX;AAEA,MAAa,kBAAkC;CAC7C,UAAU;CACV,MAAM,cAAc,MAAM;EACxB,MAAM,cAA4B,CAAC;EAEnC,KAAK,MAAM,QAAQ,cACjB,IAAI,KAAK,gBAAgB,QAAQ;GAI/B,MAAM,YADQ,KAAK,KAAK,MAAM,MACR,CAAC,CAAC,MAAM,MAAM,CAAC,EAAE,WAAW,IAAI,CAAC;GAEvD,IAAI,CAAC,aAAa,cAAc,WAC9B;GAGF,MAAM,aAAa,UAAU,QAAQ,GAAG;GACxC,MAAM,UAAU,UAAU,QAAQ,GAAG;GAErC,IAAI,eAAe,MAAM,YAAY,IACnC,YAAY,KACV,iBACE,MACA,KAAK,KACL,KAAK,iBACL,eAAe,UAAU,iEACzB,KAAK,MACL,KAAK,IACP,CACF;QACK,IAAI,eAAe,IAExB;QADY,UAAU,MAAM,aAAa,CACnC,MAAM,UACV,YAAY,KACV,iBACE,MACA,KAAK,KACL,KAAK,iBACL,eAAe,UAAU,wEACzB,KAAK,MACL,KAAK,IACP,CACF;GACF;EAEJ;EAGF,OAAO;CACT;CACA,iBAAiB;CACjB,MAAM;CACN,KAAK;CACL,SAAS;AACX;AAEA,MAAa,cAA8B;CACzC,UAAU;CACV,MAAM,cAAc,MAAM;EACxB,MAAM,cAA4B,CAAC;EAEnC,KAAK,MAAM,QAAQ,cACjB,IAAI,KAAK,gBAAgB,OAAO;GAE9B,MAAM,CAAC,OADO,KAAK,KAAK,MAAM,MACZ;GAElB,IAAI,IAAI,WAAW,SAAS,KAAK,IAAI,WAAW,UAAU,GACxD,YAAY,KACV,iBACE,MACA,KAAK,KACL,KAAK,iBACL,sCAAsC,IAAI,6FAC1C,KAAK,MACL,KAAK,IACP,CACF;EAEJ;EAGF,OAAO;CACT;CACA,iBAAiB;CACjB,MAAM;CACN,KAAK;CACL,SAAS;AACX;AAEA,MAAa,gBAAgB;CAC3B;CACA;CACA;CACA;AACF;;;;ACtNA,MAAa,qBAAuC;CAClD,GAAG;CACH,GAAG;CACH,GAAG;CACH,GAAG;AACL;AAEA,MAAa,kBAAiC,CAAC,GAAG,YAAY;AAE9D,MAAa,WAA6B,CACxC,GAAG,oBACH,GAAG,eACL;AAEA,MAAa,YAAY,QACvB,SAAS,MAAM,SAAS,KAAK,QAAQ,GAAG;;;;ACnB1C,MAAa,sBACX,cACA,MACA,cACA,gBACiB;CACjB,MAAM,cAA4B,CAAC;CAEnC,KAAK,MAAM,QAAQ,oBAAoB;EACrC,MAAM,iBAAiB,cAAc,KAAK;EAC1C,IAAI,mBAAmB,OACrB;EAGF,MAAM,kBAAkB,KAAK,MAAM,cAAc,MAAM,EAAE,aAAa,CAAC;EAGvE,IAAI,gBACF,KAAK,MAAM,QAAQ,iBACjB,KAAK,WAAW;EAIpB,YAAY,KAAK,GAAG,eAAe;CACrC;CAEA,OAAO;AACT;;;;AC/BA,MAAa,mBACX,gBACA,MACA,gBACiB;CACjB,MAAM,cAA4B,CAAC;CAEnC,KAAK,MAAM,QAAQ,iBAAiB;EAClC,MAAM,iBAAiB,cAAc,KAAK;EAC1C,IAAI,mBAAmB,OACrB;EAGF,MAAM,kBAAkB,KAAK,MAAM,gBAAgB,IAAI;EAGvD,IAAI,gBACF,KAAK,MAAM,QAAQ,iBACjB,KAAK,WAAW;EAIpB,YAAY,KAAK,GAAG,eAAe;CACrC;CAEA,OAAO;AACT;;;;AC3BA,MAAa,qBAAqB,OAAO,MAAM;CAC7C,OAAO,QAAQ,OAAO;CACtB,OAAO,QAAQ,SAAS;CACxB,OAAO,QAAQ,MAAM;CACrB,OAAO,QAAQ,KAAK;AACtB,CAAC;AAED,MAAa,2BAA2B,OAAO,OAAO;CACpD,YAAY,OAAO,SACjB,OAAO,OAAO;EACZ,kBAAkB,OAAO,SAAS,kBAAkB;EACpD,SAAS,OAAO,SAAS,kBAAkB;EAC3C,cAAc,OAAO,SAAS,kBAAkB;EAChD,aAAa,OAAO,SAAS,kBAAkB;EAC/C,UAAU,OAAO,SAAS,kBAAkB;CAC9C,CAAC,CACH;CACA,QAAQ,OAAO,SACb,OAAO,OAAO,EACZ,OAAO,OAAO,SAAS,OAAO,MAAM,OAAO,MAAM,CAAC,EACpD,CAAC,CACH;CACA,OAAO,OAAO,SAAS,OAAO,OAAO,OAAO,QAAQ,kBAAkB,CAAC;AACzE,CAAC;;;;AChBD,MAAM,aAAa,OAAO,aAAuC;CAC/D,IAAI;EACF,MAAM,GAAG,OAAO,QAAQ;EACxB,OAAO;CACT,QAAQ;EACN,OAAO;CACT;AACF;AAEA,MAAM,eAAe,OAAO,aAAuC;CACjE,IAAI,SAAS,SAAS,OAAO,GAC3B,IAAI;EACF,MAAM,UAAU,MAAM,GAAG,SAAS,UAAU,OAAO;EACnD,OAAO,KAAK,MAAM,OAAO;CAC3B,SAAS,OAAgB;EAEvB,MAAM,IAAI,YAAY,EACpB,SAAS,gCAFC,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,IAGjE,CAAC;CACH;CAGF,IAAI;EACF,MAAM,eAAe,MAAM,OAAO;EAClC,OAAO,aAAa,WAAW;CACjC,SAAS,OAAgB;EAEvB,MAAM,IAAI,YAAY,EACpB,SAAS,8BAA8B,SAAS,IAFtC,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,IAGjE,CAAC;CACH;AACF;AAEA,MAAa,aAAa,OACxB,SACA,eACgC;CAChC,IAAI,eAAwB;CAE5B,IAAI,YAAY;EACd,MAAM,WAAW,KAAK,QAAQ,SAAS,UAAU;EACjD,IAAI,CAAE,MAAM,WAAW,QAAQ,GAC7B,MAAM,IAAI,YAAY,EACpB,SAAS,sCAAsC,WACjD,CAAC;EAEH,eAAe,MAAM,aAAa,QAAQ;CAC5C,OAAO;EAUL,KAAK,MAAM,QAAQ;GARjB;GACA;GACA;GACA;GACA;EAI0B,GAAG;GAC7B,MAAM,WAAW,KAAK,KAAK,SAAS,IAAI;GACxC,IAAI,MAAM,WAAW,QAAQ,GAAG;IAC9B,eAAe,MAAM,aAAa,QAAQ;IAC1C;GACF;EACF;EAGA,IAAI,CAAC,cAAc;GACjB,MAAM,UAAU,KAAK,KAAK,SAAS,cAAc;GACjD,IAAI,MAAM,WAAW,OAAO,GAC1B,IAAI;IACF,MAAM,aAAa,MAAM,GAAG,SAAS,SAAS,OAAO;IACrD,MAAM,UAAU,KAAK,MAAM,UAAU;IACrC,IAAI,QAAQ,cACV,eAAe,QAAQ;GAE3B,QAAQ,CAER;EAEJ;CACF;CAEA,IAAI,CAAC,cACH,OAAO,CAAC;CAGV,IAAI;EAKF,OAHgB,OAAO,WAAW,wBAA+B,CAAC,CAChE,YAEW;CACf,SAAS,OAAgB;EAEvB,MAAM,IAAI,YAAY,EACpB,SAAS,iCAFC,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,IAGjE,CAAC;CACH;AACF;;;;ACzGA,MAAa,kBACX,gBAIG;CACH,IAAI,UAAU;CAEd,KAAK,MAAM,QAAQ,aACjB,IAAI,KAAK,aAAa,SACpB,WAAW;MACN,IAAI,KAAK,aAAa,WAC3B,WAAW;MACN,IAAI,KAAK,aAAa,QAC3B,WAAW;CAIf,MAAM,QAAQ,KAAK,IAAI,GAAG,MAAM,OAAO;CAEvC,IAAI,QAAQ;CACZ,IAAI,SAAS,IACX,QAAQ;MACH,IAAI,SAAS,IAClB,QAAQ;MACH,IAAI,SAAS,IAClB,QAAQ;CAGV,OAAO;EAAE;EAAO;CAAM;AACxB;;;;ACdA,MAAa,gBACX,aACA,OACA,OACA,aACgB;CAChB,aAAa,YAAY,KAAK,OAAO;EACnC,QAAQ,EAAE;EACV,MAAM,EAAE;EACR,MAAM,EAAE;EACR,MAAM,EAAE;EACR,SAAS,EAAE;EACX,MAAM,EAAE;EACR,UAAU,EAAE;CACd,EAAE;CACF;CACA;CACA;CACA,4BAAW,IAAI,KAAK,EAAC,CAAC,YAAY;AACpC"}

package/dist/{src-BUYNqQd8.cjs → src-O8FXMq8O.cjs}

@@ -39,7 +39,7 @@ effect_Schema = __toESM(effect_Schema, 1);
 //#region package.json
 var package_default = {
 	name: "@docker-doctor/cli",
-	version: "0.2.0",
+	version: "0.2.1",
 	description: "Static analysis for Dockerfile and Docker Compose files",
 	keywords: [
 		"best-practices",
@@ -993,4 +993,4 @@ Object.defineProperty(exports, 'toJsonReport', {
     return toJsonReport;
   }
 });
-//# sourceMappingURL=src-BUYNqQd8.cjs.map
+//# sourceMappingURL=src-O8FXMq8O.cjs.map