@empline/preflight 1.0.20

package/dist/checks/react/useeffect-loop-detector.js

@@ -0,0 +1,216 @@
+#!/usr/bin/env tsx
+"use strict";
+/**
+ * useEffect Infinite Loop Detector
+ *
+ * Detects common patterns that cause infinite re-render loops:
+ * 1. useEffect that calls a callback prop WITH that callback in dependencies
+ * 2. Embedded mode syncing local state to parent without value comparison
+ * 3. State setters called unconditionally in effects with state in deps
+ *
+ * BLOCKING: Yes - infinite loops crash applications
+ *
+ * Safe patterns (not flagged):
+ * - Callback in effect but NOT in dependency array (intentional design)
+ * - Callback with explicit value comparison guard
+ * - State changes inside conditionals
+ */
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.tags = exports.blocking = exports.category = exports.description = exports.name = exports.id = void 0;
+exports.run = run;
+const fs = __importStar(require("node:fs"));
+const glob_1 = require("glob");
+const console_chars_1 = require("../../utils/console-chars");
+// =============================================================================
+// METADATA
+// =============================================================================
+exports.id = "react/useeffect-loop-detector";
+exports.name = "useEffect Infinite Loop Detector";
+exports.description = "Detects common patterns that cause infinite re-render loops in useEffect hooks";
+exports.category = "react";
+exports.blocking = true;
+exports.tags = ["react", "hooks", "useEffect", "performance", "infinite-loop"];
+// =============================================================================
+// DETECTION PATTERNS
+// =============================================================================
+// High-risk: callback in deps AND called directly without guard
+const HIGH_RISK_PATTERNS = [
+    {
+        // useEffect with callback in body AND in dependency array
+        regex: /useEffect\s*\(\s*\(\)\s*=>\s*\{\s*\n?\s*(on[A-Z]\w+)\s*\([^)]*\)\s*;?\s*\n?\s*\}\s*,\s*\[([^\]]*)\]\s*\)/g,
+        name: "callback-in-deps",
+        message: "useEffect calls callback that's also in dependency array - HIGH RISK of infinite loop",
+        severity: "error",
+        validate: (match) => {
+            const callbackName = match[1];
+            const deps = match[2];
+            return deps.includes(callbackName);
+        },
+    },
+];
+// =============================================================================
+// ANALYSIS FUNCTIONS
+// =============================================================================
+function analyzeFile(filePath, issues) {
+    const content = fs.readFileSync(filePath, "utf-8");
+    // Skip if no useEffect
+    if (!content.includes("useEffect")) {
+        return;
+    }
+    // Check high-risk patterns
+    for (const pattern of HIGH_RISK_PATTERNS) {
+        const matches = content.matchAll(new RegExp(pattern.regex.source, "g"));
+        for (const match of matches) {
+            const lineNumber = content.substring(0, match.index).split("\n").length;
+            // Run custom validation if provided
+            if (pattern.validate && !pattern.validate(match)) {
+                continue;
+            }
+            // Check if there's a conditional guard nearby
+            const contextStart = Math.max(0, match.index - 100);
+            const contextEnd = Math.min(content.length, match.index + match[0].length + 200);
+            const context = content.substring(contextStart, contextEnd);
+            // Skip if there's an obvious guard or intentional comment
+            if (context.includes("hasChanged") ||
+                context.includes("!==") ||
+                context.includes("!= ") ||
+                context.includes("JSON.stringify") ||
+                context.includes("prevent infinite") ||
+                (context.includes("removed") && context.includes("from deps"))) {
+                continue;
+            }
+            issues.push({
+                file: filePath,
+                line: lineNumber,
+                pattern: pattern.name,
+                message: pattern.message,
+                severity: pattern.severity,
+                context: match[0].substring(0, 100),
+            });
+        }
+    }
+    // Check for embedded mode syncing pattern
+    const embeddedPattern = /useEffect\s*\(\s*\(\)\s*=>\s*\{[^}]*if\s*\(\s*embedded\s*\)\s*\{?\s*\n?\s*(on\w+Change)\s*\([^)]+\)[^}]*\}\s*,\s*\[([^\]]+)\]/g;
+    const embeddedMatches = content.matchAll(embeddedPattern);
+    for (const match of embeddedMatches) {
+        const callbackName = match[1];
+        const deps = match[2];
+        if (!deps.includes(callbackName)) {
+            continue;
+        }
+        const lineNumber = content.substring(0, match.index).split("\n").length;
+        const contextEnd = Math.min(content.length, match.index + match[0].length + 300);
+        const context = content.substring(match.index, contextEnd);
+        if (!context.includes("hasChanged") && !context.includes("!==") && !context.includes("!= ")) {
+            issues.push({
+                file: filePath,
+                line: lineNumber,
+                pattern: "embedded-sync-no-guard",
+                message: "Embedded mode sync calls callback in deps without value comparison - infinite loop risk",
+                severity: "error",
+            });
+        }
+    }
+}
+// =============================================================================
+// MAIN RUN FUNCTION
+// =============================================================================
+async function run() {
+    const startTime = Date.now();
+    const issues = [];
+    const files = await (0, glob_1.glob)("**/*.{tsx,ts}", {
+        ignore: [
+            "node_modules/**",
+            ".next/**",
+            "dist/**",
+            "build/**",
+            "coverage/**",
+            "**/*.test.{ts,tsx}",
+            "**/*.spec.{ts,tsx}",
+        ],
+    });
+    for (const file of files) {
+        analyzeFile(file, issues);
+    }
+    const findings = issues.map((issue) => ({
+        level: issue.severity === "error" ? "error" : "warning",
+        message: `[${issue.pattern}] ${issue.message}`,
+        file: issue.file,
+        startLine: issue.line,
+    }));
+    const errors = issues.filter((i) => i.severity === "error");
+    const passed = errors.length === 0;
+    return {
+        passed,
+        findings,
+        duration: Date.now() - startTime,
+    };
+}
+// =============================================================================
+// CLI ENTRY POINT
+// =============================================================================
+async function main() {
+    console.log(`${console_chars_1.emoji.search} Scanning for useEffect infinite loop patterns...\n`);
+    const result = await run();
+    if (result.passed) {
+        console.log(`${console_chars_1.emoji.success} No risky useEffect patterns detected\n`);
+        const warnings = result.findings?.filter((f) => f.level === "warning") || [];
+        if (warnings.length > 0) {
+            console.log(`${console_chars_1.emoji.warning} ${warnings.length} warning(s) found:\n`);
+            for (const warning of warnings) {
+                console.log(`  ${console_chars_1.chars.warning} ${warning.file}:${warning.startLine}`);
+                console.log(`    ${warning.message}\n`);
+            }
+        }
+        process.exit(0);
+    }
+    const errors = result.findings?.filter((f) => f.level === "error") || [];
+    console.log(`${console_chars_1.emoji.error} ${errors.length} HIGH RISK pattern(s) found:\n`);
+    for (const error of errors) {
+        console.log(`  ${console_chars_1.chars.cross} ${error.file}:${error.startLine}`);
+        console.log(`    ${error.message}\n`);
+    }
+    console.log(`\n${console_chars_1.emoji.memo} To fix infinite loop patterns:`);
+    console.log(`  1. Remove callback from dependency array if not needed`);
+    console.log(`  2. Add value comparison guard (if/!== check) before calling callback`);
+    console.log(`  3. Use useCallback to stabilize callback reference`);
+    process.exit(1);
+}
+// Only run main() if executed directly
+if (require.main === module) {
+    main();
+}
+//# sourceMappingURL=useeffect-loop-detector.js.map

package/dist/checks/react/useeffect-loop-detector.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"useeffect-loop-detector.js","sourceRoot":"","sources":["../../../src/checks/react/useeffect-loop-detector.ts"],"names":[],"mappings":";;AACA;;;;;;;;;;;;;;GAcG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAuIH,kBAmCC;AAxKD,4CAA8B;AAE9B,+BAA4B;AAE5B,6DAAyD;AAEzD,gFAAgF;AAChF,WAAW;AACX,gFAAgF;AAEnE,QAAA,EAAE,GAAG,+BAA+B,CAAC;AACrC,QAAA,IAAI,GAAG,kCAAkC,CAAC;AAC1C,QAAA,WAAW,GAAG,gFAAgF,CAAC;AAC/F,QAAA,QAAQ,GAAG,OAAO,CAAC;AACnB,QAAA,QAAQ,GAAG,IAAI,CAAC;AAChB,QAAA,IAAI,GAAG,CAAC,OAAO,EAAE,OAAO,EAAE,WAAW,EAAE,aAAa,EAAE,eAAe,CAAC,CAAC;AAepF,gFAAgF;AAChF,qBAAqB;AACrB,gFAAgF;AAEhF,gEAAgE;AAChE,MAAM,kBAAkB,GAAG;IACzB;QACE,0DAA0D;QAC1D,KAAK,EAAE,2GAA2G;QAClH,IAAI,EAAE,kBAAkB;QACxB,OAAO,EAAE,uFAAuF;QAChG,QAAQ,EAAE,OAAgB;QAC1B,QAAQ,EAAE,CAAC,KAAuB,EAAE,EAAE;YACpC,MAAM,YAAY,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;YAC9B,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;YACtB,OAAO,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC;QACrC,CAAC;KACF;CACF,CAAC;AAEF,gFAAgF;AAChF,qBAAqB;AACrB,gFAAgF;AAEhF,SAAS,WAAW,CAAC,QAAgB,EAAE,MAAe;IACpD,MAAM,OAAO,GAAG,EAAE,CAAC,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;IAEnD,uBAAuB;IACvB,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC;QACnC,OAAO;IACT,CAAC;IAED,2BAA2B;IAC3B,KAAK,MAAM,OAAO,IAAI,kBAAkB,EAAE,CAAC;QACzC,MAAM,OAAO,GAAG,OAAO,CAAC,QAAQ,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,CAAC;QACxE,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;YAC5B,MAAM,UAAU,GAAG,OAAO,CAAC,SAAS,CAAC,CAAC,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC;YAExE,oCAAoC;YACpC,IAAI,OAAO,CAAC,QAAQ,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;gBACjD,SAAS;YACX,CAAC;YAED,8CAA8C;YAC9C,MAAM,YAAY,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,KAAK,CAAC,KAAM,GAAG,GAAG,CAAC,CAAC;YACrD,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,MAAM,EAAE,KAAK,CAAC,KAAM,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,GAAG,GAAG,CAAC,CAAC;YAClF,MAAM,OAAO,GAAG,OAAO,CAAC,SAAS,CAAC,YAAY,EAAE,UAAU,CAAC,CAAC;YAE5D,0DAA0D;YAC1D,IACE,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAC;gBAC9B,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC;gBACvB,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC;gBACvB,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAC;gBAClC,OAAO,CAAC,QAAQ,CAAC,kBAAkB,CAAC;gBACpC,CAAC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC,EAC9D,CAAC;gBACD,SAAS;YACX,CAAC;YAED,MAAM,CAAC,IAAI,CAAC;gBACV,IAAI,EAAE,QAAQ;gBACd,IAAI,EAAE,UAAU;gBAChB,OAAO,EAAE,OAAO,CAAC,IAAI;gBACrB,OAAO,EAAE,OAAO,CAAC,OAAO;gBACxB,QAAQ,EAAE,OAAO,CAAC,QAAQ;gBAC1B,OAAO,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,EAAE,GAAG,CAAC;aACpC,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,0CAA0C;IAC1C,MAAM,eAAe,GAAG,gIAAgI,CAAC;IACzJ,MAAM,eAAe,GAAG,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAC,CAAC;IAE1D,KAAK,MAAM,KAAK,IAAI,eAAe,EAAE,CAAC;QACpC,MAAM,YAAY,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;QAC9B,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;QAEtB,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAC,EAAE,CAAC;YACjC,SAAS;QACX,CAAC;QAED,MAAM,UAAU,GAAG,OAAO,CAAC,SAAS,CAAC,CAAC,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC;QACxE,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,MAAM,EAAE,KAAK,CAAC,KAAM,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,GAAG,GAAG,CAAC,CAAC;QAClF,MAAM,OAAO,GAAG,OAAO,CAAC,SAAS,CAAC,KAAK,CAAC,KAAM,EAAE,UAAU,CAAC,CAAC;QAE5D,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;YAC5F,MAAM,CAAC,IAAI,CAAC;gBACV,IAAI,EAAE,QAAQ;gBACd,IAAI,EAAE,UAAU;gBAChB,OAAO,EAAE,wBAAwB;gBACjC,OAAO,EAAE,yFAAyF;gBAClG,QAAQ,EAAE,OAAO;aAClB,CAAC,CAAC;QACL,CAAC;IACH,CAAC;AACH,CAAC;AAED,gFAAgF;AAChF,oBAAoB;AACpB,gFAAgF;AAEzE,KAAK,UAAU,GAAG;IACvB,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAC7B,MAAM,MAAM,GAAY,EAAE,CAAC;IAE3B,MAAM,KAAK,GAAG,MAAM,IAAA,WAAI,EAAC,eAAe,EAAE;QACxC,MAAM,EAAE;YACN,iBAAiB;YACjB,UAAU;YACV,SAAS;YACT,UAAU;YACV,aAAa;YACb,oBAAoB;YACpB,oBAAoB;SACrB;KACF,CAAC,CAAC;IAEH,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,WAAW,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IAC5B,CAAC;IAED,MAAM,QAAQ,GAAuB,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;QAC1D,KAAK,EAAE,KAAK,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS;QACvD,OAAO,EAAE,IAAI,KAAK,CAAC,OAAO,KAAK,KAAK,CAAC,OAAO,EAAE;QAC9C,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,SAAS,EAAE,KAAK,CAAC,IAAI;KACtB,CAAC,CAAC,CAAC;IAEJ,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC;IAC5D,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,KAAK,CAAC,CAAC;IAEnC,OAAO;QACL,MAAM;QACN,QAAQ;QACR,QAAQ,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS;KACjC,CAAC;AACJ,CAAC;AAED,gFAAgF;AAChF,kBAAkB;AAClB,gFAAgF;AAEhF,KAAK,UAAU,IAAI;IACjB,OAAO,CAAC,GAAG,CAAC,GAAG,qBAAK,CAAC,MAAM,qDAAqD,CAAC,CAAC;IAElF,MAAM,MAAM,GAAG,MAAM,GAAG,EAAE,CAAC;IAE3B,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC;QAClB,OAAO,CAAC,GAAG,CAAC,GAAG,qBAAK,CAAC,OAAO,yCAAyC,CAAC,CAAC;QAEvE,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,KAAK,SAAS,CAAC,IAAI,EAAE,CAAC;QAC7E,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACxB,OAAO,CAAC,GAAG,CAAC,GAAG,qBAAK,CAAC,OAAO,IAAI,QAAQ,CAAC,MAAM,sBAAsB,CAAC,CAAC;YACvE,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;gBAC/B,OAAO,CAAC,GAAG,CAAC,KAAK,qBAAK,CAAC,OAAO,IAAI,OAAO,CAAC,IAAI,IAAI,OAAO,CAAC,SAAS,EAAE,CAAC,CAAC;gBACvE,OAAO,CAAC,GAAG,CAAC,OAAO,OAAO,CAAC,OAAO,IAAI,CAAC,CAAC;YAC1C,CAAC;QACH,CAAC;QACD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,MAAM,MAAM,GAAG,MAAM,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,KAAK,OAAO,CAAC,IAAI,EAAE,CAAC;IACzE,OAAO,CAAC,GAAG,CAAC,GAAG,qBAAK,CAAC,KAAK,IAAI,MAAM,CAAC,MAAM,gCAAgC,CAAC,CAAC;IAE7E,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,OAAO,CAAC,GAAG,CAAC,KAAK,qBAAK,CAAC,KAAK,IAAI,KAAK,CAAC,IAAI,IAAI,KAAK,CAAC,SAAS,EAAE,CAAC,CAAC;QACjE,OAAO,CAAC,GAAG,CAAC,OAAO,KAAK,CAAC,OAAO,IAAI,CAAC,CAAC;IACxC,CAAC;IAED,OAAO,CAAC,GAAG,CAAC,KAAK,qBAAK,CAAC,IAAI,iCAAiC,CAAC,CAAC;IAC9D,OAAO,CAAC,GAAG,CAAC,0DAA0D,CAAC,CAAC;IACxE,OAAO,CAAC,GAAG,CAAC,wEAAwE,CAAC,CAAC;IACtF,OAAO,CAAC,GAAG,CAAC,sDAAsD,CAAC,CAAC;IAEpE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC;AAED,uCAAuC;AACvC,IAAI,OAAO,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;IAC5B,IAAI,EAAE,CAAC;AACT,CAAC"}

package/dist/checks/runtime/client-process-env-usage.d.ts

@@ -0,0 +1,28 @@
+#!/usr/bin/env tsx
+/**
+ * Preflight: Disallow process.env usage in client code
+ *
+ * Next.js 16+ (Turbopack) client bundles may not provide a runtime `process` shim.
+ * Direct `process.env.*` usage in client components/hooks can crash the browser.
+ *
+ * Rule:
+ * - For any file that is a client component (has "use client" in the first ~10 lines),
+ *   disallow any `process.env` usage.
+ * - For any file under hooks/, disallow any `process.env` usage (hooks run client-side).
+ *
+ * Use `publicEnv` from `lib/public-env.ts` instead.
+ *
+ * Opt-out per file (rare): add `preflight:allow-process-env` anywhere in the file.
+ */
+export declare const id = "runtime/client-process-env-usage";
+export declare const name = "Client Process Env Usage";
+export declare const category = "runtime";
+export declare const blocking = false;
+export declare const description = "Preflight: Disallow process.env usage in client code";
+export declare const tags: string[];
+declare function run(): {
+    errors: number;
+    warnings: number;
+};
+export { run };
+//# sourceMappingURL=client-process-env-usage.d.ts.map

package/dist/checks/runtime/client-process-env-usage.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"client-process-env-usage.d.ts","sourceRoot":"","sources":["../../../src/checks/runtime/client-process-env-usage.ts"],"names":[],"mappings":";AACA;;;;;;;;;;;;;;GAcG;AAUH,eAAO,MAAM,EAAE,qCAAqC,CAAC;AACrD,eAAO,MAAM,IAAI,6BAA6B,CAAC;AAC/C,eAAO,MAAM,QAAQ,YAAY,CAAC;AAClC,eAAO,MAAM,QAAQ,QAAQ,CAAC;AAC9B,eAAO,MAAM,WAAW,yDAAyD,CAAC;AAClF,eAAO,MAAM,IAAI,UAAc,CAAC;AAsHhC,iBAAS,GAAG,IAAI;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAA;CAAE,CAqCnD;AAOD,OAAO,EAAE,GAAG,EAAE,CAAC"}

package/dist/checks/runtime/client-process-env-usage.js

@@ -0,0 +1,190 @@
+#!/usr/bin/env tsx
+"use strict";
+/**
+ * Preflight: Disallow process.env usage in client code
+ *
+ * Next.js 16+ (Turbopack) client bundles may not provide a runtime `process` shim.
+ * Direct `process.env.*` usage in client components/hooks can crash the browser.
+ *
+ * Rule:
+ * - For any file that is a client component (has "use client" in the first ~10 lines),
+ *   disallow any `process.env` usage.
+ * - For any file under hooks/, disallow any `process.env` usage (hooks run client-side).
+ *
+ * Use `publicEnv` from `lib/public-env.ts` instead.
+ *
+ * Opt-out per file (rare): add `preflight:allow-process-env` anywhere in the file.
+ */
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.tags = exports.description = exports.blocking = exports.category = exports.name = exports.id = void 0;
+exports.run = run;
+const fs = __importStar(require("fs"));
+const path = __importStar(require("path"));
+const console_chars_1 = require("../../utils/console-chars");
+const findings_writer_1 = require("../../utils/findings-writer");
+// Check metadata
+exports.id = "runtime/client-process-env-usage";
+exports.name = "Client Process Env Usage";
+exports.category = "runtime";
+exports.blocking = false;
+exports.description = "Preflight: Disallow process.env usage in client code";
+exports.tags = ["runtime"];
+const WORKSPACE_ROOT = process.cwd();
+const ROOTS = ["app", "components", "contexts", "hooks"];
+const ALLOWED_EXTS = new Set([".ts", ".tsx", ".js", ".jsx"]);
+const ALLOW_COMMENT = "preflight:allow-process-env";
+function shouldSkipDirName(dirName) {
+    return (dirName === "node_modules" ||
+        dirName === ".next" ||
+        dirName === ".git" ||
+        dirName === "dist" ||
+        dirName === "build" ||
+        dirName === "coverage" ||
+        dirName === "test-results" ||
+        dirName === "reports" ||
+        dirName === "backups" ||
+        dirName === "scripts" ||
+        dirName === "prisma" ||
+        dirName === "__mocks__");
+}
+function collectFiles(dir, out) {
+    const entries = fs.readdirSync(dir, { withFileTypes: true });
+    for (const entry of entries) {
+        const fullPath = path.join(dir, entry.name);
+        if (entry.isDirectory()) {
+            if (shouldSkipDirName(entry.name))
+                continue;
+            // app/api is server routes; allow process.env there.
+            if (fullPath.includes(`${path.sep}app${path.sep}api${path.sep}`))
+                continue;
+            collectFiles(fullPath, out);
+            continue;
+        }
+        const ext = path.extname(entry.name);
+        if (!ALLOWED_EXTS.has(ext))
+            continue;
+        out.push(fullPath);
+    }
+}
+function hasUseClientDirective(fileContent) {
+    const lines = fileContent.split(/\r?\n/);
+    const firstLines = lines
+        .slice(0, 10)
+        .map((l) => l.trim())
+        .filter(Boolean);
+    return firstLines.some((l) => l === '"use client";' ||
+        l === "'use client';" ||
+        l === '"use client"' ||
+        l === "'use client'");
+}
+function findProcessEnv(filePath) {
+    const content = fs.readFileSync(filePath, "utf8");
+    if (content.includes(ALLOW_COMMENT))
+        return [];
+    const rel = path.relative(WORKSPACE_ROOT, filePath);
+    const isHooksFile = rel.startsWith(`hooks${path.sep}`);
+    const isClientFile = hasUseClientDirective(content);
+    if (!isHooksFile && !isClientFile)
+        return [];
+    const findings = [];
+    const lines = content.split(/\r?\n/);
+    // Simple comment-aware scan.
+    let inBlockComment = false;
+    for (let i = 0; i < lines.length; i++) {
+        const line = lines[i] ?? "";
+        const trimmed = line.trim();
+        if (!inBlockComment && trimmed.startsWith("/*")) {
+            inBlockComment = true;
+        }
+        if (inBlockComment) {
+            if (trimmed.includes("*/"))
+                inBlockComment = false;
+            continue;
+        }
+        if (trimmed.startsWith("//"))
+            continue;
+        const re = /\bprocess\.env\b/g;
+        let m;
+        // eslint-disable-next-line no-cond-assign
+        while ((m = re.exec(line))) {
+            const startIdx = typeof m.index === "number" ? m.index : -1;
+            const column = startIdx >= 0 ? startIdx + 1 : undefined;
+            const endColumn = typeof column === "number" ? column + String(m[0] ?? "").length : undefined;
+            findings.push({
+                file: rel.replaceAll(path.sep, "/"),
+                line: i + 1,
+                column,
+                endColumn,
+                text: trimmed,
+            });
+        }
+    }
+    return findings;
+}
+function run() {
+    const files = [];
+    for (const root of ROOTS) {
+        const abs = path.join(WORKSPACE_ROOT, root);
+        if (fs.existsSync(abs))
+            collectFiles(abs, files);
+    }
+    const findings = files.flatMap(findProcessEnv);
+    (0, findings_writer_1.writeFindings)(findings.map((f) => ({
+        severity: "error",
+        message: "process.env usage in client/hook code",
+        file: f.file,
+        range: { startLine: f.line, startColumn: f.column, endLine: f.line, endColumn: f.endColumn },
+    })));
+    if (findings.length === 0) {
+        console.log(`${console_chars_1.emoji.success} Preflight: No process.env usage in client code`);
+        return { errors: 0, warnings: 0 };
+    }
+    console.log(`${console_chars_1.emoji.error} Preflight: Found ${findings.length} process.env usage(s) in client code`);
+    console.log("   Next.js client bundles may not define `process` at runtime.");
+    console.log('   Fix: import { publicEnv } from "@/lib/public-env" and use publicEnv.* instead.');
+    console.log(`   To explicitly allow (rare): add '${ALLOW_COMMENT}' to the file.`);
+    console.log("");
+    for (const f of findings) {
+        console.log(`- ${f.file}:${f.line}`);
+        console.log(`  ${f.text}`);
+    }
+    return { errors: findings.length, warnings: 0 };
+}
+if (require.main === module) {
+    const result = run();
+    process.exit(result.errors > 0 ? 1 : 0);
+}
+//# sourceMappingURL=client-process-env-usage.js.map

package/dist/checks/runtime/client-process-env-usage.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"client-process-env-usage.js","sourceRoot":"","sources":["../../../src/checks/runtime/client-process-env-usage.ts"],"names":[],"mappings":";;AACA;;;;;;;;;;;;;;GAcG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAiLM,kBAAG;AA/KZ,uCAAyB;AACzB,2CAA6B;AAE7B,6DAAkD;AAClD,iEAA4D;AAG5D,iBAAiB;AACJ,QAAA,EAAE,GAAG,kCAAkC,CAAC;AACxC,QAAA,IAAI,GAAG,0BAA0B,CAAC;AAClC,QAAA,QAAQ,GAAG,SAAS,CAAC;AACrB,QAAA,QAAQ,GAAG,KAAK,CAAC;AACjB,QAAA,WAAW,GAAG,sDAAsD,CAAC;AACrE,QAAA,IAAI,GAAG,CAAC,SAAS,CAAC,CAAC;AAUhC,MAAM,cAAc,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC;AAErC,MAAM,KAAK,GAAG,CAAC,KAAK,EAAE,YAAY,EAAE,UAAU,EAAE,OAAO,CAAC,CAAC;AACzD,MAAM,YAAY,GAAG,IAAI,GAAG,CAAC,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC;AAE7D,MAAM,aAAa,GAAG,6BAA6B,CAAC;AAEpD,SAAS,iBAAiB,CAAC,OAAe;IACxC,OAAO,CACL,OAAO,KAAK,cAAc;QAC1B,OAAO,KAAK,OAAO;QACnB,OAAO,KAAK,MAAM;QAClB,OAAO,KAAK,MAAM;QAClB,OAAO,KAAK,OAAO;QACnB,OAAO,KAAK,UAAU;QACtB,OAAO,KAAK,cAAc;QAC1B,OAAO,KAAK,SAAS;QACrB,OAAO,KAAK,SAAS;QACrB,OAAO,KAAK,SAAS;QACrB,OAAO,KAAK,QAAQ;QACpB,OAAO,KAAK,WAAW,CACxB,CAAC;AACJ,CAAC;AAED,SAAS,YAAY,CAAC,GAAW,EAAE,GAAa;IAC9C,MAAM,OAAO,GAAG,EAAE,CAAC,WAAW,CAAC,GAAG,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;IAC7D,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAC5B,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;QAE5C,IAAI,KAAK,CAAC,WAAW,EAAE,EAAE,CAAC;YACxB,IAAI,iBAAiB,CAAC,KAAK,CAAC,IAAI,CAAC;gBAAE,SAAS;YAE5C,qDAAqD;YACrD,IAAI,QAAQ,CAAC,QAAQ,CAAC,GAAG,IAAI,CAAC,GAAG,MAAM,IAAI,CAAC,GAAG,MAAM,IAAI,CAAC,GAAG,EAAE,CAAC;gBAAE,SAAS;YAE3E,YAAY,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;YAC5B,SAAS;QACX,CAAC;QAED,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QACrC,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,GAAG,CAAC;YAAE,SAAS;QACrC,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IACrB,CAAC;AACH,CAAC;AAED,SAAS,qBAAqB,CAAC,WAAmB;IAChD,MAAM,KAAK,GAAG,WAAW,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IACzC,MAAM,UAAU,GAAG,KAAK;SACrB,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC;SACZ,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;SACpB,MAAM,CAAC,OAAO,CAAC,CAAC;IACnB,OAAO,UAAU,CAAC,IAAI,CACpB,CAAC,CAAC,EAAE,EAAE,CACJ,CAAC,KAAK,eAAe;QACrB,CAAC,KAAK,eAAe;QACrB,CAAC,KAAK,cAAc;QACpB,CAAC,KAAK,cAAc,CACvB,CAAC;AACJ,CAAC;AAED,SAAS,cAAc,CAAC,QAAgB;IACtC,MAAM,OAAO,GAAG,EAAE,CAAC,YAAY,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IAClD,IAAI,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAC;QAAE,OAAO,EAAE,CAAC;IAE/C,MAAM,GAAG,GAAG,IAAI,CAAC,QAAQ,CAAC,cAAc,EAAE,QAAQ,CAAC,CAAC;IACpD,MAAM,WAAW,GAAG,GAAG,CAAC,UAAU,CAAC,QAAQ,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;IACvD,MAAM,YAAY,GAAG,qBAAqB,CAAC,OAAO,CAAC,CAAC;IAEpD,IAAI,CAAC,WAAW,IAAI,CAAC,YAAY;QAAE,OAAO,EAAE,CAAC;IAE7C,MAAM,QAAQ,GAAc,EAAE,CAAC;IAC/B,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IAErC,6BAA6B;IAC7B,IAAI,cAAc,GAAG,KAAK,CAAC;IAC3B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACtC,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QAC5B,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;QAE5B,IAAI,CAAC,cAAc,IAAI,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;YAChD,cAAc,GAAG,IAAI,CAAC;QACxB,CAAC;QACD,IAAI,cAAc,EAAE,CAAC;YACnB,IAAI,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC;gBAAE,cAAc,GAAG,KAAK,CAAC;YACnD,SAAS;QACX,CAAC;QACD,IAAI,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC;YAAE,SAAS;QAEvC,MAAM,EAAE,GAAG,mBAAmB,CAAC;QAC/B,IAAI,CAAyB,CAAC;QAC9B,0CAA0C;QAC1C,OAAO,CAAC,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC;YAC3B,MAAM,QAAQ,GAAG,OAAO,CAAC,CAAC,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YAC5D,MAAM,MAAM,GAAG,QAAQ,IAAI,CAAC,CAAC,CAAC,CAAC,QAAQ,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;YACxD,MAAM,SAAS,GAAG,OAAO,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9F,QAAQ,CAAC,IAAI,CAAC;gBACZ,IAAI,EAAE,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC;gBACnC,IAAI,EAAE,CAAC,GAAG,CAAC;gBACX,MAAM;gBACN,SAAS;gBACT,IAAI,EAAE,OAAO;aACd,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,SAAS,GAAG;IACV,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,IAAI,CAAC,CAAC;QAC5C,IAAI,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC;YAAE,YAAY,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;IACnD,CAAC;IAED,MAAM,QAAQ,GAAG,KAAK,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC;IAE/C,IAAA,+BAAa,EACX,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QACnB,QAAQ,EAAE,OAAO;QACjB,OAAO,EAAE,uCAAuC;QAChD,IAAI,EAAE,CAAC,CAAC,IAAI;QACZ,KAAK,EAAE,EAAE,SAAS,EAAE,CAAC,CAAC,IAAI,EAAE,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC,SAAS,EAAE;KAC7F,CAAC,CAAC,CACJ,CAAC;IAEF,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC1B,OAAO,CAAC,GAAG,CAAC,GAAG,qBAAK,CAAC,OAAO,iDAAiD,CAAC,CAAC;QAC/E,OAAO,EAAE,MAAM,EAAE,CAAC,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC;IACpC,CAAC;IAED,OAAO,CAAC,GAAG,CACT,GAAG,qBAAK,CAAC,KAAK,qBAAqB,QAAQ,CAAC,MAAM,sCAAsC,CACzF,CAAC;IACF,OAAO,CAAC,GAAG,CAAC,gEAAgE,CAAC,CAAC;IAC9E,OAAO,CAAC,GAAG,CAAC,mFAAmF,CAAC,CAAC;IACjG,OAAO,CAAC,GAAG,CAAC,uCAAuC,aAAa,gBAAgB,CAAC,CAAC;IAClF,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAEhB,KAAK,MAAM,CAAC,IAAI,QAAQ,EAAE,CAAC;QACzB,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;QACrC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;IAC7B,CAAC;IAED,OAAO,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC;AAClD,CAAC;AAED,IAAI,OAAO,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;IAC5B,MAAM,MAAM,GAAG,GAAG,EAAE,CAAC;IACrB,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AAC1C,CAAC"}

package/dist/checks/runtime/client-runtime-errors.d.ts

@@ -0,0 +1,34 @@
+#!/usr/bin/env tsx
+/**
+ * Client Runtime Error Monitoring Preflight
+ *
+ * Detects patterns that cause unhandled runtime errors in client code:
+ * - Unhandled Promise rejections
+ * - Missing error handling in async operations
+ * - Unsafe property access that could throw
+ * - Event handlers without error boundaries
+ *
+ * BLOCKING: Prevents runtime crashes that aren't caught by error boundaries
+ */
+export declare const id = "runtime/client-runtime-errors";
+export declare const name = "Client Runtime Errors";
+export declare const category = "runtime";
+export declare const blocking = false;
+export declare const description = "Client Runtime Error Monitoring Preflight";
+export declare const tags: string[];
+declare class ClientRuntimeErrorChecker {
+    private issues;
+    private checkedFiles;
+    private readonly ERROR_PATTERNS;
+    run(): Promise<void>;
+    private findClientFiles;
+    private checkFile;
+    private isWellProtectedFile;
+    private checkLineForErrors;
+    private matchesPattern;
+    private shouldReportIssue;
+    private printResults;
+    private exitWithStatus;
+}
+export { ClientRuntimeErrorChecker };
+//# sourceMappingURL=client-runtime-errors.d.ts.map

package/dist/checks/runtime/client-runtime-errors.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"client-runtime-errors.d.ts","sourceRoot":"","sources":["../../../src/checks/runtime/client-runtime-errors.ts"],"names":[],"mappings":";AACA;;;;;;;;;;GAUG;AASH,eAAO,MAAM,EAAE,kCAAkC,CAAC;AAClD,eAAO,MAAM,IAAI,0BAA0B,CAAC;AAC5C,eAAO,MAAM,QAAQ,YAAY,CAAC;AAClC,eAAO,MAAM,QAAQ,QAAQ,CAAC;AAC9B,eAAO,MAAM,WAAW,8CAA8C,CAAC;AACvE,eAAO,MAAM,IAAI,UAAc,CAAC;AAYhC,cAAM,yBAAyB;IAC7B,OAAO,CAAC,MAAM,CAA2B;IACzC,OAAO,CAAC,YAAY,CAAK;IAGzB,OAAO,CAAC,QAAQ,CAAC,cAAc,CAyC7B;IAEI,GAAG,IAAI,OAAO,CAAC,IAAI,CAAC;YAmBZ,eAAe;YA4Bf,SAAS;IAoBvB,OAAO,CAAC,mBAAmB;IAkB3B,OAAO,CAAC,kBAAkB;IA2B1B,OAAO,CAAC,cAAc;IAItB,OAAO,CAAC,iBAAiB;IAoDzB,OAAO,CAAC,YAAY;IAgDpB,OAAO,CAAC,cAAc;CAwBvB;AAWD,OAAO,EAAE,yBAAyB,EAAE,CAAC"}