@empline/preflight 1.1.11 → 1.1.13

package/dist/checks/core/security.js

@@ -0,0 +1,275 @@
+#!/usr/bin/env tsx
+"use strict";
+/**
+ * Security Preflight Checks
+ * Comprehensive security validation for SuperCatch platform
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+const child_process_1 = require("child_process");
+const console_chars_1 = require("../../utils/console-chars");
+const file_scanner_1 = require("../../utils/file-scanner");
+const preflight_runner_1 = require("../../utils/preflight-runner");
+const validation_helpers_1 = require("../../utils/validation-helpers");
+async function runSecurityPreflights() {
+    const runner = new preflight_runner_1.PreflightRunner(true);
+    const scanner = new file_scanner_1.FileScanner();
+    // Secrets Detection
+    runner.addCheck((0, preflight_runner_1.createCheck)("Hardcoded Secrets Detection", "Scan for hardcoded API keys, tokens, and secrets", async () => {
+        return await (0, validation_helpers_1.validateSecrets)();
+    }, true));
+    // Prevent committing local auth session state (can include real session tokens)
+    runner.addCheck((0, preflight_runner_1.createCheck)("Playwright Storage State Not Committed", "Ensure .playwright-storage.json is not tracked in git", async () => {
+        const errors = [];
+        const warnings = [];
+        try {
+            const tracked = (0, child_process_1.execSync)("git ls-files -- .playwright-storage.json", {
+                encoding: "utf8",
+                stdio: ["ignore", "pipe", "ignore"],
+            }).trim();
+            if (tracked.length > 0) {
+                errors.push(".playwright-storage.json is tracked by git. Remove it from the index and keep it local-only (it is already in .gitignore).");
+            }
+        }
+        catch {
+            // If git isn't available (rare in CI/dev), do not block.
+            warnings.push("Could not verify git tracking status for .playwright-storage.json");
+        }
+        return { passed: errors.length === 0, errors, warnings };
+    }, true));
+    // Environment Variables Security
+    runner.addCheck((0, preflight_runner_1.createCheck)("Environment Variables Security", "Validate secure handling of environment variables", async () => {
+        const errors = [];
+        const warnings = [];
+        // Check for production secrets in development
+        if (process.env.NODE_ENV !== "production") {
+            const prodSecrets = ["STRIPE_SECRET_KEY", "OPENAI_API_KEY"];
+            for (const secret of prodSecrets) {
+                if (process.env[secret] && !process.env[secret].includes("test")) {
+                    warnings.push(`Production secret ${secret} detected in non-production environment`);
+                }
+            }
+        }
+        // Check for missing NEXTAUTH_SECRET in production
+        if (process.env.NODE_ENV === "production" && !process.env.NEXTAUTH_SECRET) {
+            errors.push("NEXTAUTH_SECRET is required in production");
+        }
+        return { passed: errors.length === 0, errors, warnings };
+    }));
+    // API Authentication
+    runner.addCheck((0, preflight_runner_1.createCheck)("API Authentication", "Verify API routes have proper authentication", async () => {
+        const errors = [];
+        const warnings = [];
+        const info = [];
+        const apiFiles = await scanner.findFiles(/app\/api\/.*\/route\.(ts|js)$/);
+        for (const file of apiFiles) {
+            const content = await scanner.readFileContent(file.path);
+            if (!content)
+                continue;
+            // Skip public endpoints
+            const publicEndpoints = ["/api/auth/", "/api/health", "/api/status"];
+            if (publicEndpoints.some((endpoint) => file.relativePath.includes(endpoint))) {
+                continue;
+            }
+            // Check for authentication patterns
+            const hasAuth = content.includes("getServerSession") ||
+                content.includes("auth()") ||
+                content.includes("verifyToken") ||
+                content.includes("Authorization");
+            if (!hasAuth) {
+                warnings.push(`API route ${file.relativePath} may lack authentication`);
+            }
+            else {
+                info.push(`${console_chars_1.chars.check} ${file.relativePath} has authentication`);
+            }
+        }
+        return { passed: errors.length === 0, errors, warnings, info };
+    }));
+    // Session Security
+    runner.addCheck((0, preflight_runner_1.createCheck)("Session Security", "Validate NextAuth.js session configuration", async () => {
+        const errors = [];
+        const warnings = [];
+        const info = [];
+        // Check for auth configuration
+        const authFiles = await scanner.findFiles(/lib\/auth\.(ts|js)$/);
+        if (authFiles.length === 0) {
+            errors.push("No auth configuration file found");
+            return { passed: false, errors, warnings };
+        }
+        for (const file of authFiles) {
+            const content = await scanner.readFileContent(file.path);
+            if (!content)
+                continue;
+            // Check for secure session configuration
+            if (content.includes("session: {")) {
+                info.push("${chars.check} Session configuration found");
+                if (content.includes('strategy: "jwt"')) {
+                    info.push("✓ JWT session strategy configured");
+                }
+                if (content.includes("maxAge:")) {
+                    info.push("✓ Session maxAge configured");
+                }
+                else {
+                    warnings.push("Consider setting session maxAge for security");
+                }
+            }
+            // Check for CSRF protection
+            if (content.includes("csrf: true") || content.includes("useSecureCookies")) {
+                info.push("✓ CSRF protection enabled");
+            }
+            else {
+                warnings.push("Consider enabling CSRF protection");
+            }
+        }
+        return { passed: errors.length === 0, errors, warnings, info };
+    }));
+    // Input Validation
+    runner.addCheck((0, preflight_runner_1.createCheck)("Input Validation", "Check for proper input validation in API routes", async () => {
+        const errors = [];
+        const warnings = [];
+        const info = [];
+        const apiFiles = await scanner.findFiles(/app\/api\/.*\/route\.(ts|js)$/);
+        for (const file of apiFiles) {
+            const content = await scanner.readFileContent(file.path);
+            if (!content)
+                continue;
+            // Check for validation libraries
+            const hasValidation = content.includes("zod") ||
+                content.includes("joi") ||
+                content.includes("yup") ||
+                content.includes("validate") ||
+                content.includes("schema");
+            if (hasValidation) {
+                info.push(`${console_chars_1.chars.check} ${file.relativePath} has input validation`);
+            }
+            else {
+                warnings.push(`${file.relativePath} may lack input validation`);
+            }
+        }
+        return { passed: errors.length === 0, errors, warnings, info };
+    }));
+    // CORS Configuration
+    runner.addCheck((0, preflight_runner_1.createCheck)("CORS Configuration", "Validate Cross-Origin Resource Sharing settings", async () => {
+        const errors = [];
+        const warnings = [];
+        const info = [];
+        // Check Next.js config for CORS headers
+        const configFiles = await scanner.findFiles(/next\.config\.(js|mjs|ts)$/);
+        for (const file of configFiles) {
+            const content = await scanner.readFileContent(file.path);
+            if (!content)
+                continue;
+            if (content.includes("headers()") || content.includes("Access-Control-Allow-Origin")) {
+                info.push("${chars.check} CORS headers configured in Next.js config");
+            }
+        }
+        // Check for middleware CORS handling
+        const middlewareFiles = await scanner.findFiles(/middleware\.(ts|js)$/);
+        for (const file of middlewareFiles) {
+            const content = await scanner.readFileContent(file.path);
+            if (!content)
+                continue;
+            if (content.includes("cors") || content.includes("Access-Control")) {
+                info.push("✓ CORS handling in middleware");
+            }
+        }
+        if (info.length === 0) {
+            warnings.push("No explicit CORS configuration found - using Next.js defaults");
+        }
+        return { passed: errors.length === 0, errors, warnings, info };
+    }));
+    // Security Headers
+    runner.addCheck((0, preflight_runner_1.createCheck)("Security Headers", "Validate security headers configuration", async () => {
+        const errors = [];
+        const warnings = [];
+        const info = [];
+        const configFiles = await scanner.findFiles(/next\.config\.(js|mjs|ts)$/);
+        for (const file of configFiles) {
+            const content = await scanner.readFileContent(file.path);
+            if (!content)
+                continue;
+            const securityHeaders = [
+                "X-Frame-Options",
+                "X-Content-Type-Options",
+                "Referrer-Policy",
+                "Permissions-Policy",
+            ];
+            for (const header of securityHeaders) {
+                if (content.includes(header)) {
+                    info.push(`✓ ${header} configured`);
+                }
+                else {
+                    warnings.push(`Consider adding ${header} security header`);
+                }
+            }
+        }
+        return { passed: errors.length === 0, errors, warnings, info };
+    }));
+    // No Contact Info Validation (new)
+    runner.addCheck((0, preflight_runner_1.createCheck)("No Hardcoded Contact Info", "Detect hardcoded email addresses and _phone numbers", async () => {
+        const errors = [];
+        const warnings = [];
+        const info = [];
+        const codeFiles = await scanner.findCodeFiles();
+        const contactInfoFound = [];
+        // Patterns for detecting contact information
+        const emailPattern = /[a-zA-Z0-9._%+-]+@[a-zA-Z0-9.-]+\.[a-zA-Z]{2}/g;
+        const phonePattern = /(\+?1[-.\s]?)?\(?[0-9]{3}\)?[-.\s]?[0-9]{3}[-.\s]?[0-9]{4}/g;
+        for (const file of codeFiles) {
+            // Skip test files and configuration files
+            if (file.relativePath.includes(".test.") ||
+                file.relativePath.includes(".spec.") ||
+                file.relativePath.includes("package.json") ||
+                file.relativePath.includes(".env")) {
+                continue;
+            }
+            const content = await scanner.readFileContent(file.path);
+            if (!content)
+                continue;
+            // Check for email addresses
+            const emailMatches = content.match(emailPattern);
+            if (emailMatches) {
+                for (const email of emailMatches) {
+                    // Skip common non-contact emails
+                    if (!email.includes("example.com") &&
+                        !email.includes("test.com") &&
+                        !email.includes("localhost") &&
+                        !email.includes("placeholder")) {
+                        contactInfoFound.push(`${file.relativePath}: Email ${email}`);
+                    }
+                }
+            }
+            // Check for phone numbers
+            const phoneMatches = content.match(phonePattern);
+            if (phoneMatches) {
+                for (const phone of phoneMatches) {
+                    // Skip obvious test numbers
+                    if (!phone.includes("555-0") && !phone.includes("123-456")) {
+                        contactInfoFound.push(`${file.relativePath}: Phone ${phone}`);
+                    }
+                }
+            }
+        }
+        if (contactInfoFound.length > 0) {
+            warnings.push("Hardcoded contact information detected:");
+            contactInfoFound.forEach((contact) => warnings.push(`  ${contact}`));
+            warnings.push("Consider using environment variables or configuration files");
+        }
+        else {
+            info.push("${chars.check} No hardcoded contact information detected");
+        }
+        return { passed: errors.length === 0, errors, warnings, info };
+    }));
+    const result = await runner.runAll();
+    if (!result.passed) {
+        console.log(`\n${console_chars_1.emoji.bell} Security preflight checks failed!`);
+        process.exit(1);
+    }
+    console.log(`\n${console_chars_1.emoji.lock} All security preflight checks passed!`);
+    return result;
+}
+// Run if called directly
+if (require.main === module) {
+    runSecurityPreflights().catch(console.error);
+}
+exports.default = runSecurityPreflights;
+//# sourceMappingURL=security.js.map

package/dist/checks/core/security.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"security.js","sourceRoot":"","sources":["../../../src/checks/core/security.ts"],"names":[],"mappings":";;AACA;;;GAGG;;AAEH,iDAAyC;AACzC,6DAAyD;AACzD,2DAAuD;AACvD,mEAA4E;AAC5E,uEAAiE;AAEjE,KAAK,UAAU,qBAAqB;IAClC,MAAM,MAAM,GAAG,IAAI,kCAAe,CAAC,IAAI,CAAC,CAAC;IACzC,MAAM,OAAO,GAAG,IAAI,0BAAW,EAAE,CAAC;IAElC,oBAAoB;IACpB,MAAM,CAAC,QAAQ,CACb,IAAA,8BAAW,EACT,6BAA6B,EAC7B,kDAAkD,EAClD,KAAK,IAAI,EAAE;QACT,OAAO,MAAM,IAAA,oCAAe,GAAE,CAAC;IACjC,CAAC,EACD,IAAI,CACL,CACF,CAAC;IAEF,gFAAgF;IAChF,MAAM,CAAC,QAAQ,CACb,IAAA,8BAAW,EACT,wCAAwC,EACxC,uDAAuD,EACvD,KAAK,IAAI,EAAE;QACT,MAAM,MAAM,GAAa,EAAE,CAAC;QAC5B,MAAM,QAAQ,GAAa,EAAE,CAAC;QAE9B,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,IAAA,wBAAQ,EAAC,0CAA0C,EAAE;gBACnE,QAAQ,EAAE,MAAM;gBAChB,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,CAAC;aACpC,CAAC,CAAC,IAAI,EAAE,CAAC;YAEV,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACvB,MAAM,CAAC,IAAI,CACT,4HAA4H,CAC7H,CAAC;YACJ,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,yDAAyD;YACzD,QAAQ,CAAC,IAAI,CAAC,mEAAmE,CAAC,CAAC;QACrF,CAAC;QAED,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC;IAC3D,CAAC,EACD,IAAI,CACL,CACF,CAAC;IAEF,iCAAiC;IACjC,MAAM,CAAC,QAAQ,CACb,IAAA,8BAAW,EACT,gCAAgC,EAChC,mDAAmD,EACnD,KAAK,IAAI,EAAE;QACT,MAAM,MAAM,GAAa,EAAE,CAAC;QAC5B,MAAM,QAAQ,GAAa,EAAE,CAAC;QAE9B,8CAA8C;QAC9C,IAAI,OAAO,CAAC,GAAG,CAAC,QAAQ,KAAK,YAAY,EAAE,CAAC;YAC1C,MAAM,WAAW,GAAG,CAAC,mBAAmB,EAAE,gBAAgB,CAAC,CAAC;YAC5D,KAAK,MAAM,MAAM,IAAI,WAAW,EAAE,CAAC;gBACjC,IAAI,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;oBACjE,QAAQ,CAAC,IAAI,CAAC,qBAAqB,MAAM,yCAAyC,CAAC,CAAC;gBACtF,CAAC;YACH,CAAC;QACH,CAAC;QAED,kDAAkD;QAClD,IAAI,OAAO,CAAC,GAAG,CAAC,QAAQ,KAAK,YAAY,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,eAAe,EAAE,CAAC;YAC1E,MAAM,CAAC,IAAI,CAAC,2CAA2C,CAAC,CAAC;QAC3D,CAAC;QAED,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC;IAC3D,CAAC,CACF,CACF,CAAC;IAEF,qBAAqB;IACrB,MAAM,CAAC,QAAQ,CACb,IAAA,8BAAW,EAAC,oBAAoB,EAAE,8CAA8C,EAAE,KAAK,IAAI,EAAE;QAC3F,MAAM,MAAM,GAAa,EAAE,CAAC;QAC5B,MAAM,QAAQ,GAAa,EAAE,CAAC;QAC9B,MAAM,IAAI,GAAa,EAAE,CAAC;QAE1B,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,SAAS,CAAC,+BAA+B,CAAC,CAAC;QAE1E,KAAK,MAAM,IAAI,IAAI,QAAQ,EAAE,CAAC;YAC5B,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACzD,IAAI,CAAC,OAAO;gBAAE,SAAS;YAEvB,wBAAwB;YACxB,MAAM,eAAe,GAAG,CAAC,YAAY,EAAE,aAAa,EAAE,aAAa,CAAC,CAAC;YACrE,IAAI,eAAe,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC;gBAC7E,SAAS;YACX,CAAC;YAED,oCAAoC;YACpC,MAAM,OAAO,GACX,OAAO,CAAC,QAAQ,CAAC,kBAAkB,CAAC;gBACpC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC;gBAC1B,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAC;gBAC/B,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAC,CAAC;YAEpC,IAAI,CAAC,OAAO,EAAE,CAAC;gBACb,QAAQ,CAAC,IAAI,CAAC,aAAa,IAAI,CAAC,YAAY,0BAA0B,CAAC,CAAC;YAC1E,CAAC;iBAAM,CAAC;gBACN,IAAI,CAAC,IAAI,CAAC,GAAG,qBAAK,CAAC,KAAK,IAAI,IAAI,CAAC,YAAY,qBAAqB,CAAC,CAAC;YACtE,CAAC;QACH,CAAC;QAED,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;IACjE,CAAC,CAAC,CACH,CAAC;IAEF,mBAAmB;IACnB,MAAM,CAAC,QAAQ,CACb,IAAA,8BAAW,EAAC,kBAAkB,EAAE,4CAA4C,EAAE,KAAK,IAAI,EAAE;QACvF,MAAM,MAAM,GAAa,EAAE,CAAC;QAC5B,MAAM,QAAQ,GAAa,EAAE,CAAC;QAC9B,MAAM,IAAI,GAAa,EAAE,CAAC;QAE1B,+BAA+B;QAC/B,MAAM,SAAS,GAAG,MAAM,OAAO,CAAC,SAAS,CAAC,qBAAqB,CAAC,CAAC;QAEjE,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC3B,MAAM,CAAC,IAAI,CAAC,kCAAkC,CAAC,CAAC;YAChD,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC;QAC7C,CAAC;QAED,KAAK,MAAM,IAAI,IAAI,SAAS,EAAE,CAAC;YAC7B,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACzD,IAAI,CAAC,OAAO;gBAAE,SAAS;YAEvB,yCAAyC;YACzC,IAAI,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAC,EAAE,CAAC;gBACnC,IAAI,CAAC,IAAI,CAAC,4CAA4C,CAAC,CAAC;gBAExD,IAAI,OAAO,CAAC,QAAQ,CAAC,iBAAiB,CAAC,EAAE,CAAC;oBACxC,IAAI,CAAC,IAAI,CAAC,mCAAmC,CAAC,CAAC;gBACjD,CAAC;gBAED,IAAI,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC;oBAChC,IAAI,CAAC,IAAI,CAAC,6BAA6B,CAAC,CAAC;gBAC3C,CAAC;qBAAM,CAAC;oBACN,QAAQ,CAAC,IAAI,CAAC,8CAA8C,CAAC,CAAC;gBAChE,CAAC;YACH,CAAC;YAED,4BAA4B;YAC5B,IAAI,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAC,IAAI,OAAO,CAAC,QAAQ,CAAC,kBAAkB,CAAC,EAAE,CAAC;gBAC3E,IAAI,CAAC,IAAI,CAAC,2BAA2B,CAAC,CAAC;YACzC,CAAC;iBAAM,CAAC;gBACN,QAAQ,CAAC,IAAI,CAAC,mCAAmC,CAAC,CAAC;YACrD,CAAC;QACH,CAAC;QAED,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;IACjE,CAAC,CAAC,CACH,CAAC;IAEF,mBAAmB;IACnB,MAAM,CAAC,QAAQ,CACb,IAAA,8BAAW,EAAC,kBAAkB,EAAE,iDAAiD,EAAE,KAAK,IAAI,EAAE;QAC5F,MAAM,MAAM,GAAa,EAAE,CAAC;QAC5B,MAAM,QAAQ,GAAa,EAAE,CAAC;QAC9B,MAAM,IAAI,GAAa,EAAE,CAAC;QAE1B,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,SAAS,CAAC,+BAA+B,CAAC,CAAC;QAE1E,KAAK,MAAM,IAAI,IAAI,QAAQ,EAAE,CAAC;YAC5B,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACzD,IAAI,CAAC,OAAO;gBAAE,SAAS;YAEvB,iCAAiC;YACjC,MAAM,aAAa,GACjB,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC;gBACvB,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC;gBACvB,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC;gBACvB,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAC;gBAC5B,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;YAE7B,IAAI,aAAa,EAAE,CAAC;gBAClB,IAAI,CAAC,IAAI,CAAC,GAAG,qBAAK,CAAC,KAAK,IAAI,IAAI,CAAC,YAAY,uBAAuB,CAAC,CAAC;YACxE,CAAC;iBAAM,CAAC;gBACN,QAAQ,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,YAAY,4BAA4B,CAAC,CAAC;YAClE,CAAC;QACH,CAAC;QAED,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;IACjE,CAAC,CAAC,CACH,CAAC;IAEF,qBAAqB;IACrB,MAAM,CAAC,QAAQ,CACb,IAAA,8BAAW,EACT,oBAAoB,EACpB,iDAAiD,EACjD,KAAK,IAAI,EAAE;QACT,MAAM,MAAM,GAAa,EAAE,CAAC;QAC5B,MAAM,QAAQ,GAAa,EAAE,CAAC;QAC9B,MAAM,IAAI,GAAa,EAAE,CAAC;QAE1B,wCAAwC;QACxC,MAAM,WAAW,GAAG,MAAM,OAAO,CAAC,SAAS,CAAC,4BAA4B,CAAC,CAAC;QAE1E,KAAK,MAAM,IAAI,IAAI,WAAW,EAAE,CAAC;YAC/B,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACzD,IAAI,CAAC,OAAO;gBAAE,SAAS;YAEvB,IAAI,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAC,IAAI,OAAO,CAAC,QAAQ,CAAC,6BAA6B,CAAC,EAAE,CAAC;gBACrF,IAAI,CAAC,IAAI,CAAC,0DAA0D,CAAC,CAAC;YACxE,CAAC;QACH,CAAC;QAED,qCAAqC;QACrC,MAAM,eAAe,GAAG,MAAM,OAAO,CAAC,SAAS,CAAC,sBAAsB,CAAC,CAAC;QAExE,KAAK,MAAM,IAAI,IAAI,eAAe,EAAE,CAAC;YACnC,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACzD,IAAI,CAAC,OAAO;gBAAE,SAAS;YAEvB,IAAI,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAC,EAAE,CAAC;gBACnE,IAAI,CAAC,IAAI,CAAC,+BAA+B,CAAC,CAAC;YAC7C,CAAC;QACH,CAAC;QAED,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACtB,QAAQ,CAAC,IAAI,CAAC,+DAA+D,CAAC,CAAC;QACjF,CAAC;QAED,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;IACjE,CAAC,CACF,CACF,CAAC;IAEF,mBAAmB;IACnB,MAAM,CAAC,QAAQ,CACb,IAAA,8BAAW,EAAC,kBAAkB,EAAE,yCAAyC,EAAE,KAAK,IAAI,EAAE;QACpF,MAAM,MAAM,GAAa,EAAE,CAAC;QAC5B,MAAM,QAAQ,GAAa,EAAE,CAAC;QAC9B,MAAM,IAAI,GAAa,EAAE,CAAC;QAE1B,MAAM,WAAW,GAAG,MAAM,OAAO,CAAC,SAAS,CAAC,4BAA4B,CAAC,CAAC;QAE1E,KAAK,MAAM,IAAI,IAAI,WAAW,EAAE,CAAC;YAC/B,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACzD,IAAI,CAAC,OAAO;gBAAE,SAAS;YAEvB,MAAM,eAAe,GAAG;gBACtB,iBAAiB;gBACjB,wBAAwB;gBACxB,iBAAiB;gBACjB,oBAAoB;aACrB,CAAC;YAEF,KAAK,MAAM,MAAM,IAAI,eAAe,EAAE,CAAC;gBACrC,IAAI,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;oBAC7B,IAAI,CAAC,IAAI,CAAC,KAAK,MAAM,aAAa,CAAC,CAAC;gBACtC,CAAC;qBAAM,CAAC;oBACN,QAAQ,CAAC,IAAI,CAAC,mBAAmB,MAAM,kBAAkB,CAAC,CAAC;gBAC7D,CAAC;YACH,CAAC;QACH,CAAC;QAED,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;IACjE,CAAC,CAAC,CACH,CAAC;IAEF,mCAAmC;IACnC,MAAM,CAAC,QAAQ,CACb,IAAA,8BAAW,EACT,2BAA2B,EAC3B,qDAAqD,EACrD,KAAK,IAAI,EAAE;QACT,MAAM,MAAM,GAAa,EAAE,CAAC;QAC5B,MAAM,QAAQ,GAAa,EAAE,CAAC;QAC9B,MAAM,IAAI,GAAa,EAAE,CAAC;QAE1B,MAAM,SAAS,GAAG,MAAM,OAAO,CAAC,aAAa,EAAE,CAAC;QAChD,MAAM,gBAAgB,GAAa,EAAE,CAAC;QAEtC,6CAA6C;QAC7C,MAAM,YAAY,GAAG,gDAAgD,CAAC;QACtE,MAAM,YAAY,GAAG,6DAA6D,CAAC;QAEnF,KAAK,MAAM,IAAI,IAAI,SAAS,EAAE,CAAC;YAC7B,0CAA0C;YAC1C,IACE,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,QAAQ,CAAC;gBACpC,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,QAAQ,CAAC;gBACpC,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,cAAc,CAAC;gBAC1C,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,MAAM,CAAC,EAClC,CAAC;gBACD,SAAS;YACX,CAAC;YAED,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACzD,IAAI,CAAC,OAAO;gBAAE,SAAS;YAEvB,4BAA4B;YAC5B,MAAM,YAAY,GAAG,OAAO,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;YACjD,IAAI,YAAY,EAAE,CAAC;gBACjB,KAAK,MAAM,KAAK,IAAI,YAAY,EAAE,CAAC;oBACjC,iCAAiC;oBACjC,IACE,CAAC,KAAK,CAAC,QAAQ,CAAC,aAAa,CAAC;wBAC9B,CAAC,KAAK,CAAC,QAAQ,CAAC,UAAU,CAAC;wBAC3B,CAAC,KAAK,CAAC,QAAQ,CAAC,WAAW,CAAC;wBAC5B,CAAC,KAAK,CAAC,QAAQ,CAAC,aAAa,CAAC,EAC9B,CAAC;wBACD,gBAAgB,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,YAAY,WAAW,KAAK,EAAE,CAAC,CAAC;oBAChE,CAAC;gBACH,CAAC;YACH,CAAC;YAED,0BAA0B;YAC1B,MAAM,YAAY,GAAG,OAAO,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;YACjD,IAAI,YAAY,EAAE,CAAC;gBACjB,KAAK,MAAM,KAAK,IAAI,YAAY,EAAE,CAAC;oBACjC,4BAA4B;oBAC5B,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC;wBAC3D,gBAAgB,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,YAAY,WAAW,KAAK,EAAE,CAAC,CAAC;oBAChE,CAAC;gBACH,CAAC;YACH,CAAC;QACH,CAAC;QAED,IAAI,gBAAgB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAChC,QAAQ,CAAC,IAAI,CAAC,yCAAyC,CAAC,CAAC;YACzD,gBAAgB,CAAC,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,OAAO,EAAE,CAAC,CAAC,CAAC;YACrE,QAAQ,CAAC,IAAI,CAAC,6DAA6D,CAAC,CAAC;QAC/E,CAAC;aAAM,CAAC;YACN,IAAI,CAAC,IAAI,CAAC,0DAA0D,CAAC,CAAC;QACxE,CAAC;QAED,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;IACjE,CAAC,CACF,CACF,CAAC;IAEF,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,MAAM,EAAE,CAAC;IAErC,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC;QACnB,OAAO,CAAC,GAAG,CAAC,KAAK,qBAAK,CAAC,IAAI,oCAAoC,CAAC,CAAC;QACjE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,OAAO,CAAC,GAAG,CAAC,KAAK,qBAAK,CAAC,IAAI,wCAAwC,CAAC,CAAC;IACrE,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,yBAAyB;AACzB,IAAI,OAAO,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;IAC5B,qBAAqB,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAC/C,CAAC;AAED,kBAAe,qBAAqB,CAAC"}

package/dist/checks/core/standardized-error-handling.d.ts

@@ -0,0 +1,43 @@
+#!/usr/bin/env tsx
+/**
+ * Standardized Error Handling Preflight
+ *
+ * Ensures API routes and client code follow the standardized error handling pattern:
+ *
+ * API Routes should:
+ * 1. Use apiError() or ApiErrors.* from @/lib/api-error
+ * 2. NOT use generic NextResponse.json({ error: "message" }) without a code
+ * 3. Include meaningful error messages (not just "Failed")
+ *
+ * Client code should:
+ * 1. Use parseApiError() from @/lib/client-api-error for error responses
+ * 2. NOT throw generic errors that lose server response context
+ * 3. Handle specific status codes (401, 404, etc.) appropriately
+ *
+ * Why this matters:
+ * - Generic errors like "Failed to fetch" make debugging impossible
+ * - Without error codes, client can't handle specific scenarios
+ * - Lost server context means hours of debugging for simple issues
+ *
+ * Usage:
+ *   pnpm preflight:standardized-error-handling
+ *   pnpm preflight:standardized-error-handling --verbose
+ */
+export declare const id = "core/standardized-error-handling";
+export declare const name = "Standardized Error Handling";
+export declare const category = "core";
+export declare const blocking = true;
+export declare const description = "Ensures API routes and client code follow standardized error handling patterns";
+export declare const tags: string[];
+interface ValidationResult {
+    passed: boolean;
+    errors: string[];
+    warnings: string[];
+    info: string[];
+}
+declare function checkApiRoutes(verbose: boolean): ValidationResult;
+declare function checkClientCode(verbose: boolean): ValidationResult;
+declare function checkUtilitiesExist(): ValidationResult;
+export declare function run(): Promise<void>;
+export { checkApiRoutes, checkClientCode, checkUtilitiesExist };
+//# sourceMappingURL=standardized-error-handling.d.ts.map

package/dist/checks/core/standardized-error-handling.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"standardized-error-handling.d.ts","sourceRoot":"","sources":["../../../src/checks/core/standardized-error-handling.ts"],"names":[],"mappings":";AACA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AASH,eAAO,MAAM,EAAE,qCAAqC,CAAC;AACrD,eAAO,MAAM,IAAI,gCAAgC,CAAC;AAClD,eAAO,MAAM,QAAQ,SAAS,CAAC;AAC/B,eAAO,MAAM,QAAQ,OAAO,CAAC;AAC7B,eAAO,MAAM,WAAW,mFAAmF,CAAC;AAC5G,eAAO,MAAM,IAAI,UAAyC,CAAC;AAE3D,UAAU,gBAAgB;IACxB,MAAM,EAAE,OAAO,CAAC;IAChB,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,IAAI,EAAE,MAAM,EAAE,CAAC;CAChB;AAsFD,iBAAS,cAAc,CAAC,OAAO,EAAE,OAAO,GAAG,gBAAgB,CAmF1D;AAED,iBAAS,eAAe,CAAC,OAAO,EAAE,OAAO,GAAG,gBAAgB,CAgF3D;AAED,iBAAS,mBAAmB,IAAI,gBAAgB,CAqC/C;AAED,wBAAsB,GAAG,IAAI,OAAO,CAAC,IAAI,CAAC,CAqEzC;AAUD,OAAO,EAAE,cAAc,EAAE,eAAe,EAAE,mBAAmB,EAAE,CAAC"}