@fourteensystems/prodcheck 0.3.0

package/dist/cli/commands/scan.d.ts

@@ -0,0 +1,10 @@
+interface ScanOptions {
+    format: string;
+    output?: string;
+    only?: string;
+    exclude?: string;
+    minConfidence?: string;
+}
+export declare function cmdScan(opts: ScanOptions): Promise<void>;
+export {};
+//# sourceMappingURL=scan.d.ts.map

package/dist/cli/commands/scan.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"scan.d.ts","sourceRoot":"","sources":["../../../src/cli/commands/scan.ts"],"names":[],"mappings":"AASA,UAAU,WAAW;IACnB,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AAED,wBAAsB,OAAO,CAAC,IAAI,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC,CAiE9D"}

package/dist/cli/commands/scan.js

@@ -0,0 +1,65 @@
+import { writeFileSync } from "node:fs";
+import pc from "picocolors";
+import { runScan } from "../../engine/run.js";
+import { formatPretty, formatJson } from "../../engine/report.js";
+import { formatSarif } from "../../engine/sarif.js";
+import { computeScore, summarizeFindings, confidenceLevel, parseConfidence } from "../../engine/score.js";
+export async function cmdScan(opts) {
+    try {
+        const rootDir = process.cwd();
+        // Build config overrides from CLI flags
+        const configOverrides = {};
+        if (opts.only) {
+            const onlyRules = opts.only.split(",").map((r) => r.trim().toUpperCase());
+            const rules = {};
+            for (const ruleId of onlyRules) {
+                rules[ruleId] = { severity: "critical" };
+            }
+            configOverrides.rules = rules;
+        }
+        const additionalExclude = opts.exclude
+            ? opts.exclude.split(",").map((g) => g.trim())
+            : undefined;
+        // Progress indicator for interactive terminals
+        const isTTY = process.stderr.isTTY;
+        const onProgress = isTTY
+            ? (step) => {
+                process.stderr.write(`\r  ${pc.dim("⏳")} ${pc.dim(step)}${"".padEnd(20)}\r`);
+            }
+            : undefined;
+        const result = await runScan({ rootDir, configOverrides, additionalExclude, onProgress });
+        // Clear progress line
+        if (isTTY)
+            process.stderr.write("\r".padEnd(60) + "\r");
+        // Filter by confidence if specified, recalculate score and summary
+        if (opts.minConfidence) {
+            const minConf = parseConfidence(opts.minConfidence);
+            result.findings = result.findings.filter((f) => confidenceLevel(f.confidence) >= confidenceLevel(minConf));
+            result.score = computeScore(result.findings);
+            const counts = summarizeFindings(result.findings);
+            result.summary = { total: result.findings.length, ...counts, waived: result.summary.waived };
+        }
+        let output;
+        switch (opts.format) {
+            case "json":
+                output = formatJson(result);
+                break;
+            case "sarif":
+                output = formatSarif(result);
+                break;
+            default:
+                output = formatPretty(result);
+        }
+        if (opts.output) {
+            writeFileSync(opts.output, output);
+        }
+        else {
+            console.log(output);
+        }
+    }
+    catch (err) {
+        console.error(pc.red(`  Error: ${err instanceof Error ? err.message : String(err)}`));
+        process.exit(1);
+    }
+}
+//# sourceMappingURL=scan.js.map

package/dist/cli/commands/scan.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"scan.js","sourceRoot":"","sources":["../../../src/cli/commands/scan.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AACxC,OAAO,EAAE,MAAM,YAAY,CAAC;AAC5B,OAAO,EAAE,OAAO,EAAE,MAAM,qBAAqB,CAAC;AAC9C,OAAO,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,wBAAwB,CAAC;AAClE,OAAO,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAC;AACpD,OAAO,EAAE,YAAY,EAAE,iBAAiB,EAAE,eAAe,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AAY1G,MAAM,CAAC,KAAK,UAAU,OAAO,CAAC,IAAiB;IAC7C,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC;QAE9B,wCAAwC;QACxC,MAAM,eAAe,GAA6B,EAAE,CAAC;QAErD,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;YACd,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC;YAC1E,MAAM,KAAK,GAA2C,EAAE,CAAC;YACzD,KAAK,MAAM,MAAM,IAAI,SAAS,EAAE,CAAC;gBAC/B,KAAK,CAAC,MAAM,CAAC,GAAG,EAAE,QAAQ,EAAE,UAAU,EAAE,CAAC;YAC3C,CAAC;YACD,eAAe,CAAC,KAAK,GAAG,KAAK,CAAC;QAChC,CAAC;QAED,MAAM,iBAAiB,GAAG,IAAI,CAAC,OAAO;YACpC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;YAC9C,CAAC,CAAC,SAAS,CAAC;QAEd,+CAA+C;QAC/C,MAAM,KAAK,GAAG,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC;QACnC,MAAM,UAAU,GAAG,KAAK;YACtB,CAAC,CAAC,CAAC,IAAY,EAAE,EAAE;gBACf,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC;YAC/E,CAAC;YACH,CAAC,CAAC,SAAS,CAAC;QAEd,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,EAAE,OAAO,EAAE,eAAe,EAAE,iBAAiB,EAAE,UAAU,EAAE,CAAC,CAAC;QAE1F,sBAAsB;QACtB,IAAI,KAAK;YAAE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,CAAC;QAExD,mEAAmE;QACnE,IAAI,IAAI,CAAC,aAAa,EAAE,CAAC;YACvB,MAAM,OAAO,GAAG,eAAe,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;YACpD,MAAM,CAAC,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC,MAAM,CACtC,CAAC,CAAC,EAAE,EAAE,CAAC,eAAe,CAAC,CAAC,CAAC,UAAU,CAAC,IAAI,eAAe,CAAC,OAAO,CAAC,CACjE,CAAC;YACF,MAAM,CAAC,KAAK,GAAG,YAAY,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;YAC7C,MAAM,MAAM,GAAG,iBAAiB,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;YAClD,MAAM,CAAC,OAAO,GAAG,EAAE,KAAK,EAAE,MAAM,CAAC,QAAQ,CAAC,MAAM,EAAE,GAAG,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC;QAC/F,CAAC;QAED,IAAI,MAAc,CAAC;QACnB,QAAQ,IAAI,CAAC,MAAM,EAAE,CAAC;YACpB,KAAK,MAAM;gBACT,MAAM,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC;gBAC5B,MAAM;YACR,KAAK,OAAO;gBACV,MAAM,GAAG,WAAW,CAAC,MAAM,CAAC,CAAC;gBAC7B,MAAM;YACR;gBACE,MAAM,GAAG,YAAY,CAAC,MAAM,CAAC,CAAC;QAClC,CAAC;QAED,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;YAChB,aAAa,CAAC,IAAI,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QACrC,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QACtB,CAAC;IACH,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,GAAG,CAAC,YAAY,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC;QACtF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;AACH,CAAC"}

package/dist/cli/commands/waive.d.ts

@@ -0,0 +1,8 @@
+interface WaiveOptions {
+    file: string;
+    reason: string;
+    expiry?: string;
+}
+export declare function cmdWaive(ruleId: string, opts: WaiveOptions): Promise<void>;
+export {};
+//# sourceMappingURL=waive.d.ts.map

package/dist/cli/commands/waive.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"waive.d.ts","sourceRoot":"","sources":["../../../src/cli/commands/waive.ts"],"names":[],"mappings":"AAIA,UAAU,YAAY;IACpB,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,wBAAsB,QAAQ,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,YAAY,GAAG,OAAO,CAAC,IAAI,CAAC,CA+BhF"}

package/dist/cli/commands/waive.js

@@ -0,0 +1,34 @@
+import pc from "picocolors";
+import { addWaiver } from "../../engine/waivers.js";
+import { loadConfigIfExists, DEFAULT_CONFIG } from "../../engine/config.js";
+export async function cmdWaive(ruleId, opts) {
+    try {
+        // Validate expiry date if provided
+        if (opts.expiry) {
+            const d = new Date(opts.expiry);
+            if (isNaN(d.getTime())) {
+                console.error(pc.red(`  Invalid expiry date: "${opts.expiry}". Use ISO format (e.g., 2025-12-31)`));
+                process.exit(1);
+            }
+        }
+        const rootDir = process.cwd();
+        const config = loadConfigIfExists(rootDir) ?? DEFAULT_CONFIG;
+        const waiver = addWaiver(rootDir, config.waiversFile, {
+            ruleId,
+            file: opts.file,
+            reason: opts.reason,
+            expiry: opts.expiry,
+        });
+        console.log(pc.green(`  Waiver added for ${ruleId}`));
+        console.log(pc.dim(`  File: ${waiver.file}`));
+        console.log(pc.dim(`  Reason: ${waiver.reason}`));
+        if (waiver.expiry) {
+            console.log(pc.dim(`  Expires: ${waiver.expiry}`));
+        }
+    }
+    catch (err) {
+        console.error(pc.red(`  Error: ${err instanceof Error ? err.message : String(err)}`));
+        process.exit(1);
+    }
+}
+//# sourceMappingURL=waive.js.map

package/dist/cli/commands/waive.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"waive.js","sourceRoot":"","sources":["../../../src/cli/commands/waive.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,YAAY,CAAC;AAC5B,OAAO,EAAE,SAAS,EAAE,MAAM,yBAAyB,CAAC;AACpD,OAAO,EAAE,kBAAkB,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAC;AAQ5E,MAAM,CAAC,KAAK,UAAU,QAAQ,CAAC,MAAc,EAAE,IAAkB;IAC/D,IAAI,CAAC;QACH,mCAAmC;QACnC,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;YAChB,MAAM,CAAC,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YAChC,IAAI,KAAK,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,EAAE,CAAC;gBACvB,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,GAAG,CAAC,2BAA2B,IAAI,CAAC,MAAM,sCAAsC,CAAC,CAAC,CAAC;gBACpG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAClB,CAAC;QACH,CAAC;QAED,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC;QAC9B,MAAM,MAAM,GAAG,kBAAkB,CAAC,OAAO,CAAC,IAAI,cAAc,CAAC;QAE7D,MAAM,MAAM,GAAG,SAAS,CAAC,OAAO,EAAE,MAAM,CAAC,WAAW,EAAE;YACpD,MAAM;YACN,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,MAAM,EAAE,IAAI,CAAC,MAAM;SACpB,CAAC,CAAC;QAEH,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,KAAK,CAAC,sBAAsB,MAAM,EAAE,CAAC,CAAC,CAAC;QACtD,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,WAAW,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;QAC9C,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,aAAa,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;QAClD,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC;YAClB,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,cAAc,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;QACrD,CAAC;IACH,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,GAAG,CAAC,YAAY,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC;QACtF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;AACH,CAAC"}

package/dist/cli/index.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=index.d.ts.map

package/dist/cli/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/cli/index.ts"],"names":[],"mappings":""}

package/dist/cli/index.js

@@ -0,0 +1,64 @@
+import { Command } from "commander";
+import { cmdScan } from "./commands/scan.js";
+import { cmdCi } from "./commands/ci.js";
+import { cmdInit } from "./commands/init.js";
+import { cmdBaseline } from "./commands/baseline.js";
+import { cmdWaive } from "./commands/waive.js";
+import { cmdRules } from "./commands/rules.js";
+import { cmdExplain } from "./commands/explain.js";
+const program = new Command();
+program
+    .name("prodcheck")
+    .description("Code-level operational maturity analysis for Next.js projects")
+    .version("0.1.0");
+program
+    .command("init")
+    .description("Detect framework, generate config, and run first scan")
+    .option("--force", "Overwrite existing config")
+    .option("--dry-run", "Print what would happen without writing files")
+    .action(cmdInit);
+program
+    .command("scan", { isDefault: true })
+    .description("Scan the project and print readiness report")
+    .option("--format <format>", "Output format: pretty, json, sarif", "pretty")
+    .option("--output <path>", "Write report to file")
+    .option("--only <rules>", "Run only specified rules (comma-separated)")
+    .option("--exclude <globs>", "Additional exclude patterns (comma-separated)")
+    .option("--min-confidence <level>", "Minimum confidence to report: low, med, high")
+    .action(cmdScan);
+program
+    .command("ci")
+    .description("CI mode: enforce thresholds and fail on regressions")
+    .option("--preview", "Free preview mode: run scan without enforcement (no Pro key required)")
+    .option("--fail-on <severity>", "Minimum severity to fail: low, med, high, critical", "critical")
+    .option("--min-confidence <level>", "Minimum confidence to fail: low, med, high", "high")
+    .option("--min-score <score>", "Minimum passing score", "70")
+    .option("--baseline <path>", "Baseline file for regression detection")
+    .option("--max-new-critical <n>", "Max new critical findings allowed", "0")
+    .option("--max-new-high <n>", "Max new high findings allowed")
+    .option("--format <format>", "Output format: pretty, json, sarif", "pretty")
+    .option("--output <path>", "Write report to file")
+    .action(cmdCi);
+program
+    .command("baseline")
+    .description("Write or update baseline snapshot")
+    .option("--write", "Write baseline file")
+    .option("--output <path>", "Baseline output path")
+    .action(cmdBaseline);
+program
+    .command("waive <rule>")
+    .description("Add a waiver for a specific finding")
+    .requiredOption("--file <path>", "File to waive")
+    .requiredOption("--reason <reason>", "Reason for waiver")
+    .option("--expiry <date>", "Waiver expiry date (ISO format)")
+    .action(cmdWaive);
+program
+    .command("rules")
+    .description("List all available rules")
+    .action(cmdRules);
+program
+    .command("explain <rule>")
+    .description("Show detailed explanation for a rule")
+    .action(cmdExplain);
+program.parse();
+//# sourceMappingURL=index.js.map

package/dist/cli/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/cli/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,OAAO,EAAE,MAAM,oBAAoB,CAAC;AAC7C,OAAO,EAAE,KAAK,EAAE,MAAM,kBAAkB,CAAC;AACzC,OAAO,EAAE,OAAO,EAAE,MAAM,oBAAoB,CAAC;AAC7C,OAAO,EAAE,WAAW,EAAE,MAAM,wBAAwB,CAAC;AACrD,OAAO,EAAE,QAAQ,EAAE,MAAM,qBAAqB,CAAC;AAC/C,OAAO,EAAE,QAAQ,EAAE,MAAM,qBAAqB,CAAC;AAC/C,OAAO,EAAE,UAAU,EAAE,MAAM,uBAAuB,CAAC;AAEnD,MAAM,OAAO,GAAG,IAAI,OAAO,EAAE,CAAC;AAE9B,OAAO;KACJ,IAAI,CAAC,WAAW,CAAC;KACjB,WAAW,CAAC,+DAA+D,CAAC;KAC5E,OAAO,CAAC,OAAO,CAAC,CAAC;AAEpB,OAAO;KACJ,OAAO,CAAC,MAAM,CAAC;KACf,WAAW,CAAC,uDAAuD,CAAC;KACpE,MAAM,CAAC,SAAS,EAAE,2BAA2B,CAAC;KAC9C,MAAM,CAAC,WAAW,EAAE,+CAA+C,CAAC;KACpE,MAAM,CAAC,OAAO,CAAC,CAAC;AAEnB,OAAO;KACJ,OAAO,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;KACpC,WAAW,CAAC,6CAA6C,CAAC;KAC1D,MAAM,CAAC,mBAAmB,EAAE,oCAAoC,EAAE,QAAQ,CAAC;KAC3E,MAAM,CAAC,iBAAiB,EAAE,sBAAsB,CAAC;KACjD,MAAM,CAAC,gBAAgB,EAAE,4CAA4C,CAAC;KACtE,MAAM,CAAC,mBAAmB,EAAE,+CAA+C,CAAC;KAC5E,MAAM,CAAC,0BAA0B,EAAE,8CAA8C,CAAC;KAClF,MAAM,CAAC,OAAO,CAAC,CAAC;AAEnB,OAAO;KACJ,OAAO,CAAC,IAAI,CAAC;KACb,WAAW,CAAC,qDAAqD,CAAC;KAClE,MAAM,CAAC,WAAW,EAAE,uEAAuE,CAAC;KAC5F,MAAM,CAAC,sBAAsB,EAAE,oDAAoD,EAAE,UAAU,CAAC;KAChG,MAAM,CAAC,0BAA0B,EAAE,4CAA4C,EAAE,MAAM,CAAC;KACxF,MAAM,CAAC,qBAAqB,EAAE,uBAAuB,EAAE,IAAI,CAAC;KAC5D,MAAM,CAAC,mBAAmB,EAAE,wCAAwC,CAAC;KACrE,MAAM,CAAC,wBAAwB,EAAE,mCAAmC,EAAE,GAAG,CAAC;KAC1E,MAAM,CAAC,oBAAoB,EAAE,+BAA+B,CAAC;KAC7D,MAAM,CAAC,mBAAmB,EAAE,oCAAoC,EAAE,QAAQ,CAAC;KAC3E,MAAM,CAAC,iBAAiB,EAAE,sBAAsB,CAAC;KACjD,MAAM,CAAC,KAAK,CAAC,CAAC;AAEjB,OAAO;KACJ,OAAO,CAAC,UAAU,CAAC;KACnB,WAAW,CAAC,mCAAmC,CAAC;KAChD,MAAM,CAAC,SAAS,EAAE,qBAAqB,CAAC;KACxC,MAAM,CAAC,iBAAiB,EAAE,sBAAsB,CAAC;KACjD,MAAM,CAAC,WAAW,CAAC,CAAC;AAEvB,OAAO;KACJ,OAAO,CAAC,cAAc,CAAC;KACvB,WAAW,CAAC,qCAAqC,CAAC;KAClD,cAAc,CAAC,eAAe,EAAE,eAAe,CAAC;KAChD,cAAc,CAAC,mBAAmB,EAAE,mBAAmB,CAAC;KACxD,MAAM,CAAC,iBAAiB,EAAE,iCAAiC,CAAC;KAC5D,MAAM,CAAC,QAAQ,CAAC,CAAC;AAEpB,OAAO;KACJ,OAAO,CAAC,OAAO,CAAC;KAChB,WAAW,CAAC,0BAA0B,CAAC;KACvC,MAAM,CAAC,QAAQ,CAAC,CAAC;AAEpB,OAAO;KACJ,OAAO,CAAC,gBAAgB,CAAC;KACzB,WAAW,CAAC,sCAAsC,CAAC;KACnD,MAAM,CAAC,UAAU,CAAC,CAAC;AAEtB,OAAO,CAAC,KAAK,EAAE,CAAC"}

package/dist/engine/baseline.d.ts

@@ -0,0 +1,11 @@
+import type { Baseline, Finding, ScanResult } from "./types.js";
+export declare function findingKey(f: Finding): string;
+export declare function writeBaseline(rootDir: string, result: ScanResult, filePath?: string): string;
+export declare function loadBaseline(filePath: string): Baseline | undefined;
+export interface BaselineDiff {
+    newFindings: Finding[];
+    resolvedKeys: string[];
+    scoreDelta: number;
+}
+export declare function diffBaseline(baseline: Baseline, current: ScanResult): BaselineDiff;
+//# sourceMappingURL=baseline.d.ts.map

package/dist/engine/baseline.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"baseline.d.ts","sourceRoot":"","sources":["../../src/engine/baseline.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,QAAQ,EAAE,OAAO,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AAGhE,wBAAgB,UAAU,CAAC,CAAC,EAAE,OAAO,GAAG,MAAM,CAE7C;AAED,wBAAgB,aAAa,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,QAAQ,CAAC,EAAE,MAAM,GAAG,MAAM,CAa5F;AAED,wBAAgB,YAAY,CAAC,QAAQ,EAAE,MAAM,GAAG,QAAQ,GAAG,SAAS,CAOnE;AAED,MAAM,WAAW,YAAY;IAC3B,WAAW,EAAE,OAAO,EAAE,CAAC;IACvB,YAAY,EAAE,MAAM,EAAE,CAAC;IACvB,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,wBAAgB,YAAY,CAC1B,QAAQ,EAAE,QAAQ,EAClB,OAAO,EAAE,UAAU,GAClB,YAAY,CASd"}

package/dist/engine/baseline.js

@@ -0,0 +1,39 @@
+import path from "node:path";
+import { existsSync, readFileSync, writeFileSync } from "node:fs";
+import { PRODCHECK_VERSION, INDEX_VERSION } from "./version.js";
+export function findingKey(f) {
+    return `${f.ruleId}::${f.file}::${f.line ?? 0}`;
+}
+export function writeBaseline(rootDir, result, filePath) {
+    const dest = filePath ?? path.join(rootDir, "prodcheck.baseline.json");
+    const baseline = {
+        version: 1,
+        prodcheckVersion: PRODCHECK_VERSION,
+        configHash: result.configHash,
+        indexVersion: INDEX_VERSION,
+        createdAt: new Date().toISOString(),
+        score: result.score,
+        findingKeys: result.findings.map(findingKey),
+    };
+    writeFileSync(dest, JSON.stringify(baseline, null, 2) + "\n");
+    return dest;
+}
+export function loadBaseline(filePath) {
+    if (!existsSync(filePath))
+        return undefined;
+    try {
+        return JSON.parse(readFileSync(filePath, "utf8"));
+    }
+    catch (err) {
+        throw new Error(`Failed to parse baseline ${filePath}: ${err instanceof Error ? err.message : String(err)}`);
+    }
+}
+export function diffBaseline(baseline, current) {
+    const currentKeys = new Set(current.findings.map(findingKey));
+    const baselineKeys = new Set(baseline.findingKeys);
+    const newFindings = current.findings.filter((f) => !baselineKeys.has(findingKey(f)));
+    const resolvedKeys = baseline.findingKeys.filter((k) => !currentKeys.has(k));
+    const scoreDelta = current.score - baseline.score;
+    return { newFindings, resolvedKeys, scoreDelta };
+}
+//# sourceMappingURL=baseline.js.map

package/dist/engine/baseline.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"baseline.js","sourceRoot":"","sources":["../../src/engine/baseline.ts"],"names":[],"mappings":"AAAA,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AAElE,OAAO,EAAE,iBAAiB,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAEhE,MAAM,UAAU,UAAU,CAAC,CAAU;IACnC,OAAO,GAAG,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,IAAI,IAAI,CAAC,EAAE,CAAC;AAClD,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,OAAe,EAAE,MAAkB,EAAE,QAAiB;IAClF,MAAM,IAAI,GAAG,QAAQ,IAAI,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,yBAAyB,CAAC,CAAC;IACvE,MAAM,QAAQ,GAAa;QACzB,OAAO,EAAE,CAAC;QACV,gBAAgB,EAAE,iBAAiB;QACnC,UAAU,EAAE,MAAM,CAAC,UAAU;QAC7B,YAAY,EAAE,aAAa;QAC3B,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QACnC,KAAK,EAAE,MAAM,CAAC,KAAK;QACnB,WAAW,EAAE,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,UAAU,CAAC;KAC7C,CAAC;IACF,aAAa,CAAC,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;IAC9D,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,QAAgB;IAC3C,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC;QAAE,OAAO,SAAS,CAAC;IAC5C,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAa,CAAC;IAChE,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,IAAI,KAAK,CAAC,4BAA4B,QAAQ,KAAK,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAC/G,CAAC;AACH,CAAC;AAQD,MAAM,UAAU,YAAY,CAC1B,QAAkB,EAClB,OAAmB;IAEnB,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC;IAC9D,MAAM,YAAY,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;IAEnD,MAAM,WAAW,GAAG,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,YAAY,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACrF,MAAM,YAAY,GAAG,QAAQ,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;IAC7E,MAAM,UAAU,GAAG,OAAO,CAAC,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAC;IAElD,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,UAAU,EAAE,CAAC;AACnD,CAAC"}

package/dist/engine/baseline.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=baseline.test.d.ts.map

package/dist/engine/baseline.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"baseline.test.d.ts","sourceRoot":"","sources":["../../src/engine/baseline.test.ts"],"names":[],"mappings":""}

package/dist/engine/baseline.test.js

@@ -0,0 +1,135 @@
+import { describe, it, expect, beforeEach, afterEach } from "vitest";
+import { mkdtempSync, rmSync } from "node:fs";
+import path from "node:path";
+import os from "node:os";
+import { findingKey, writeBaseline, loadBaseline, diffBaseline } from "./baseline.js";
+function makeFinding(overrides = {}) {
+    return {
+        ruleId: "TEST-RULE",
+        severity: "high",
+        confidence: "high",
+        message: "test",
+        file: "test.ts",
+        evidence: [],
+        confidenceRationale: "",
+        remediation: [],
+        tags: [],
+        ...overrides,
+    };
+}
+function makeScanResult(findings, score = 100) {
+    return {
+        version: 1,
+        prodcheckVersion: "0.1.0",
+        configHash: "abc",
+        indexVersion: 1,
+        timestamp: new Date().toISOString(),
+        framework: "next-app-router",
+        detected: {
+            deps: {},
+            trpc: false,
+            middleware: false,
+        },
+        score,
+        findings,
+        waivedFindings: [],
+        summary: { total: findings.length, critical: 0, high: 0, med: 0, low: 0, waived: 0 },
+    };
+}
+describe("findingKey", () => {
+    it("generates key from ruleId, file, and line", () => {
+        const f = makeFinding({ ruleId: "AUTH-BOUNDARY-MISSING", file: "app/api/route.ts", line: 13 });
+        expect(findingKey(f)).toBe("AUTH-BOUNDARY-MISSING::app/api/route.ts::13");
+    });
+    it("uses 0 when line is undefined", () => {
+        const f = makeFinding({ ruleId: "RATE-LIMIT-MISSING", file: "app/api/route.ts" });
+        expect(findingKey(f)).toBe("RATE-LIMIT-MISSING::app/api/route.ts::0");
+    });
+});
+describe("writeBaseline / loadBaseline", () => {
+    let tmpDir;
+    beforeEach(() => {
+        tmpDir = mkdtempSync(path.join(os.tmpdir(), "prodcheck-test-"));
+    });
+    afterEach(() => {
+        rmSync(tmpDir, { recursive: true, force: true });
+    });
+    it("writes and loads baseline roundtrip", () => {
+        const findings = [makeFinding({ ruleId: "R1", file: "a.ts", line: 1 })];
+        const result = makeScanResult(findings, 90);
+        const dest = writeBaseline(tmpDir, result);
+        const loaded = loadBaseline(dest);
+        expect(loaded).toBeDefined();
+        expect(loaded.score).toBe(90);
+        expect(loaded.findingKeys).toEqual(["R1::a.ts::1"]);
+        expect(loaded.version).toBe(1);
+    });
+    it("writes to custom path", () => {
+        const customPath = path.join(tmpDir, "custom-baseline.json");
+        const result = makeScanResult([]);
+        writeBaseline(tmpDir, result, customPath);
+        expect(loadBaseline(customPath)).toBeDefined();
+    });
+    it("returns undefined for missing file", () => {
+        expect(loadBaseline("/nonexistent/path.json")).toBeUndefined();
+    });
+    it("throws on malformed JSON", () => {
+        const badFile = path.join(tmpDir, "bad.json");
+        require("node:fs").writeFileSync(badFile, "not json");
+        expect(() => loadBaseline(badFile)).toThrow("Failed to parse baseline");
+    });
+});
+describe("diffBaseline", () => {
+    it("identifies new findings", () => {
+        const baseline = {
+            version: 1,
+            prodcheckVersion: "0.1.0",
+            configHash: "abc",
+            indexVersion: 1,
+            createdAt: new Date().toISOString(),
+            score: 90,
+            findingKeys: ["R1::a.ts::1"],
+        };
+        const newFinding = makeFinding({ ruleId: "R2", file: "b.ts", line: 5 });
+        const existing = makeFinding({ ruleId: "R1", file: "a.ts", line: 1 });
+        const current = makeScanResult([existing, newFinding], 80);
+        const diff = diffBaseline(baseline, current);
+        expect(diff.newFindings).toHaveLength(1);
+        expect(diff.newFindings[0].ruleId).toBe("R2");
+        expect(diff.resolvedKeys).toHaveLength(0);
+        expect(diff.scoreDelta).toBe(-10);
+    });
+    it("identifies resolved findings", () => {
+        const baseline = {
+            version: 1,
+            prodcheckVersion: "0.1.0",
+            configHash: "abc",
+            indexVersion: 1,
+            createdAt: new Date().toISOString(),
+            score: 80,
+            findingKeys: ["R1::a.ts::1", "R2::b.ts::5"],
+        };
+        const current = makeScanResult([makeFinding({ ruleId: "R1", file: "a.ts", line: 1 })], 90);
+        const diff = diffBaseline(baseline, current);
+        expect(diff.newFindings).toHaveLength(0);
+        expect(diff.resolvedKeys).toEqual(["R2::b.ts::5"]);
+        expect(diff.scoreDelta).toBe(10);
+    });
+    it("handles empty baseline and empty current", () => {
+        const baseline = {
+            version: 1,
+            prodcheckVersion: "0.1.0",
+            configHash: "abc",
+            indexVersion: 1,
+            createdAt: new Date().toISOString(),
+            score: 100,
+            findingKeys: [],
+        };
+        const current = makeScanResult([], 100);
+        const diff = diffBaseline(baseline, current);
+        expect(diff.newFindings).toHaveLength(0);
+        expect(diff.resolvedKeys).toHaveLength(0);
+        expect(diff.scoreDelta).toBe(0);
+    });
+});
+//# sourceMappingURL=baseline.test.js.map

package/dist/engine/baseline.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"baseline.test.js","sourceRoot":"","sources":["../../src/engine/baseline.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,QAAQ,CAAC;AACrE,OAAO,EAAE,WAAW,EAAE,MAAM,EAAgB,MAAM,SAAS,CAAC;AAC5D,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,EAAE,UAAU,EAAE,aAAa,EAAE,YAAY,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAGtF,SAAS,WAAW,CAAC,YAA8B,EAAE;IACnD,OAAO;QACL,MAAM,EAAE,WAAW;QACnB,QAAQ,EAAE,MAAM;QAChB,UAAU,EAAE,MAAM;QAClB,OAAO,EAAE,MAAM;QACf,IAAI,EAAE,SAAS;QACf,QAAQ,EAAE,EAAE;QACZ,mBAAmB,EAAE,EAAE;QACvB,WAAW,EAAE,EAAE;QACf,IAAI,EAAE,EAAE;QACR,GAAG,SAAS;KACb,CAAC;AACJ,CAAC;AAED,SAAS,cAAc,CAAC,QAAmB,EAAE,KAAK,GAAG,GAAG;IACtD,OAAO;QACL,OAAO,EAAE,CAAC;QACV,gBAAgB,EAAE,OAAO;QACzB,UAAU,EAAE,KAAK;QACjB,YAAY,EAAE,CAAC;QACf,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QACnC,SAAS,EAAE,iBAAiB;QAC5B,QAAQ,EAAE;YACR,IAAI,EAAE,EAAS;YACf,IAAI,EAAE,KAAK;YACX,UAAU,EAAE,KAAK;SAClB;QACD,KAAK;QACL,QAAQ;QACR,cAAc,EAAE,EAAE;QAClB,OAAO,EAAE,EAAE,KAAK,EAAE,QAAQ,CAAC,MAAM,EAAE,QAAQ,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,GAAG,EAAE,CAAC,EAAE,GAAG,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE;KACrF,CAAC;AACJ,CAAC;AAED,QAAQ,CAAC,YAAY,EAAE,GAAG,EAAE;IAC1B,EAAE,CAAC,2CAA2C,EAAE,GAAG,EAAE;QACnD,MAAM,CAAC,GAAG,WAAW,CAAC,EAAE,MAAM,EAAE,uBAAuB,EAAE,IAAI,EAAE,kBAAkB,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC;QAC/F,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,6CAA6C,CAAC,CAAC;IAC5E,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,+BAA+B,EAAE,GAAG,EAAE;QACvC,MAAM,CAAC,GAAG,WAAW,CAAC,EAAE,MAAM,EAAE,oBAAoB,EAAE,IAAI,EAAE,kBAAkB,EAAE,CAAC,CAAC;QAClF,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,yCAAyC,CAAC,CAAC;IACxE,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,8BAA8B,EAAE,GAAG,EAAE;IAC5C,IAAI,MAAc,CAAC;IAEnB,UAAU,CAAC,GAAG,EAAE;QACd,MAAM,GAAG,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,iBAAiB,CAAC,CAAC,CAAC;IAClE,CAAC,CAAC,CAAC;IAEH,SAAS,CAAC,GAAG,EAAE;QACb,MAAM,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IACnD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,qCAAqC,EAAE,GAAG,EAAE;QAC7C,MAAM,QAAQ,GAAG,CAAC,WAAW,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;QACxE,MAAM,MAAM,GAAG,cAAc,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;QAC5C,MAAM,IAAI,GAAG,aAAa,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QAE3C,MAAM,MAAM,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC;QAClC,MAAM,CAAC,MAAM,CAAC,CAAC,WAAW,EAAE,CAAC;QAC7B,MAAM,CAAC,MAAO,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAC/B,MAAM,CAAC,MAAO,CAAC,WAAW,CAAC,CAAC,OAAO,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC;QACrD,MAAM,CAAC,MAAO,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,uBAAuB,EAAE,GAAG,EAAE;QAC/B,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,sBAAsB,CAAC,CAAC;QAC7D,MAAM,MAAM,GAAG,cAAc,CAAC,EAAE,CAAC,CAAC;QAClC,aAAa,CAAC,MAAM,EAAE,MAAM,EAAE,UAAU,CAAC,CAAC;QAE1C,MAAM,CAAC,YAAY,CAAC,UAAU,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC;IACjD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,oCAAoC,EAAE,GAAG,EAAE;QAC5C,MAAM,CAAC,YAAY,CAAC,wBAAwB,CAAC,CAAC,CAAC,aAAa,EAAE,CAAC;IACjE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,0BAA0B,EAAE,GAAG,EAAE;QAClC,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;QAC9C,OAAO,CAAC,SAAS,CAAC,CAAC,aAAa,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC;QACtD,MAAM,CAAC,GAAG,EAAE,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,0BAA0B,CAAC,CAAC;IAC1E,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,cAAc,EAAE,GAAG,EAAE;IAC5B,EAAE,CAAC,yBAAyB,EAAE,GAAG,EAAE;QACjC,MAAM,QAAQ,GAAa;YACzB,OAAO,EAAE,CAAC;YACV,gBAAgB,EAAE,OAAO;YACzB,UAAU,EAAE,KAAK;YACjB,YAAY,EAAE,CAAC;YACf,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YACnC,KAAK,EAAE,EAAE;YACT,WAAW,EAAE,CAAC,aAAa,CAAC;SAC7B,CAAC;QAEF,MAAM,UAAU,GAAG,WAAW,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC,CAAC;QACxE,MAAM,QAAQ,GAAG,WAAW,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC,CAAC;QACtE,MAAM,OAAO,GAAG,cAAc,CAAC,CAAC,QAAQ,EAAE,UAAU,CAAC,EAAE,EAAE,CAAC,CAAC;QAE3D,MAAM,IAAI,GAAG,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;QAC7C,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;QACzC,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC9C,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;QAC1C,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC,CAAC;IACpC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,8BAA8B,EAAE,GAAG,EAAE;QACtC,MAAM,QAAQ,GAAa;YACzB,OAAO,EAAE,CAAC;YACV,gBAAgB,EAAE,OAAO;YACzB,UAAU,EAAE,KAAK;YACjB,YAAY,EAAE,CAAC;YACf,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YACnC,KAAK,EAAE,EAAE;YACT,WAAW,EAAE,CAAC,aAAa,EAAE,aAAa,CAAC;SAC5C,CAAC;QAEF,MAAM,OAAO,GAAG,cAAc,CAAC,CAAC,WAAW,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QAE3F,MAAM,IAAI,GAAG,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;QAC7C,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;QACzC,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,OAAO,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC;QACnD,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACnC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,0CAA0C,EAAE,GAAG,EAAE;QAClD,MAAM,QAAQ,GAAa;YACzB,OAAO,EAAE,CAAC;YACV,gBAAgB,EAAE,OAAO;YACzB,UAAU,EAAE,KAAK;YACjB,YAAY,EAAE,CAAC;YACf,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YACnC,KAAK,EAAE,GAAG;YACV,WAAW,EAAE,EAAE;SAChB,CAAC;QAEF,MAAM,OAAO,GAAG,cAAc,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC;QACxC,MAAM,IAAI,GAAG,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;QAC7C,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;QACzC,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;QAC1C,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClC,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/engine/config.d.ts

@@ -0,0 +1,8 @@
+import type { ProdcheckConfig } from "./types.js";
+export declare function findConfigFile(rootDir: string): string | undefined;
+export declare function loadConfigIfExists(rootDir: string): ProdcheckConfig | undefined;
+export declare const DEFAULT_CONFIG: ProdcheckConfig;
+export declare function writeDefaultConfig(rootDir: string, opts: {
+    force?: boolean;
+}): void;
+//# sourceMappingURL=config.d.ts.map

package/dist/engine/config.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../../src/engine/config.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC;AAQlD,wBAAgB,cAAc,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAMlE;AAED,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,MAAM,GAAG,eAAe,GAAG,SAAS,CAc/E;AAED,eAAO,MAAM,cAAc,EAAE,eAiD5B,CAAC;AAEF,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE;IAAE,KAAK,CAAC,EAAE,OAAO,CAAA;CAAE,GAAG,IAAI,CAsDnF"}

package/dist/engine/config.js

@@ -0,0 +1,134 @@
+import path from "node:path";
+import { existsSync, readFileSync, writeFileSync } from "node:fs";
+const CONFIG_FILES = [
+    "prodcheck.config.ts",
+    "prodcheck.config.js",
+    "prodcheck.config.json",
+];
+export function findConfigFile(rootDir) {
+    for (const name of CONFIG_FILES) {
+        const abs = path.join(rootDir, name);
+        if (existsSync(abs))
+            return abs;
+    }
+    return undefined;
+}
+export function loadConfigIfExists(rootDir) {
+    const file = findConfigFile(rootDir);
+    if (!file)
+        return undefined;
+    if (file.endsWith(".json")) {
+        try {
+            return JSON.parse(readFileSync(file, "utf8"));
+        }
+        catch (err) {
+            throw new Error(`Failed to parse ${file}: ${err instanceof Error ? err.message : String(err)}`);
+        }
+    }
+    // TS/JS config requires a loader (tsx, jiti) — not yet supported.
+    return undefined;
+}
+export const DEFAULT_CONFIG = {
+    framework: "next-app-router",
+    include: ["app/**", "src/**"],
+    exclude: ["**/*.test.*", "**/*.spec.*", "**/node_modules/**"],
+    ci: {
+        failOn: "critical",
+        minConfidence: "high",
+        minScore: 70,
+        maxNewCritical: 0,
+    },
+    scoring: {
+        start: 100,
+        penalties: { critical: 15, high: 6, med: 3, low: 1 },
+    },
+    hints: {
+        auth: {
+            functions: [
+                "auth", "getServerSession", "getSession", "currentUser",
+                "requireUser", "requireAuth",
+                "withAuth", // NextAuth v4 / WorkOS
+                "getKindeServerSession", // Kinde
+                "validateRequest", // Lucia
+                "getIronSession", // iron-session
+                "withApiAuthRequired", // Auth0
+                "verifyIdToken", // Firebase Admin
+                "getTokens", // next-firebase-auth-edge
+            ],
+            middlewareFiles: ["middleware.ts"],
+            allowlistPaths: [],
+        },
+        rateLimit: {
+            wrappers: [
+                "rateLimit", "withRateLimit", "ratelimit", "limit",
+                "checkRateLimitAndThrowError", "ratelimitOrThrow", "rateLimitOrThrow",
+            ],
+            allowlistPaths: [],
+        },
+        tenancy: {
+            orgFieldNames: ["orgId", "tenantId", "workspaceId", "organizationId", "teamId", "accountId"],
+        },
+    },
+    rules: {
+        "AUTH-BOUNDARY-MISSING": { severity: "critical" },
+        "RATE-LIMIT-MISSING": { severity: "critical" },
+        "TENANCY-SCOPE-MISSING": { severity: "critical" },
+        "INPUT-VALIDATION-MISSING": { severity: "high" },
+        "WRAPPER-UNRECOGNIZED": { severity: "high" },
+    },
+    waiversFile: "prodcheck.waivers.json",
+};
+export function writeDefaultConfig(rootDir, opts) {
+    const dest = path.join(rootDir, "prodcheck.config.json");
+    if (existsSync(dest) && !opts.force) {
+        return;
+    }
+    const config = {
+        $schema: "https://prodcheck.dev/schema.json",
+        framework: "next-app-router",
+        include: ["app/**", "src/**"],
+        exclude: ["**/*.test.*", "**/*.spec.*"],
+        ci: {
+            failOn: "critical",
+            minConfidence: "high",
+            minScore: 70,
+            maxNewCritical: 0,
+        },
+        hints: {
+            auth: {
+                functions: [
+                    "auth", "getServerSession", "getSession", "currentUser",
+                    "requireUser", "requireAuth",
+                    "withAuth", "getKindeServerSession", "validateRequest",
+                    "getIronSession", "withApiAuthRequired", "verifyIdToken", "getTokens"
+                ],
+                middlewareFiles: ["middleware.ts"],
+                allowlistPaths: []
+            },
+            rateLimit: {
+                wrappers: [
+                    "rateLimit", "withRateLimit", "limit",
+                    "checkRateLimitAndThrowError", "ratelimitOrThrow", "rateLimitOrThrow"
+                ],
+                allowlistPaths: []
+            },
+            tenancy: {
+                orgFieldNames: ["orgId", "tenantId", "workspaceId", "organizationId", "teamId", "accountId"]
+            },
+        },
+        rules: {
+            "AUTH-BOUNDARY-MISSING": { severity: "critical" },
+            "RATE-LIMIT-MISSING": { severity: "critical" },
+            "TENANCY-SCOPE-MISSING": { severity: "critical" },
+            "INPUT-VALIDATION-MISSING": { severity: "high" },
+            "WRAPPER-UNRECOGNIZED": { severity: "high" },
+        },
+        scoring: {
+            start: 100,
+            penalties: { critical: 15, high: 6, med: 3, low: 1 },
+        },
+        waiversFile: "prodcheck.waivers.json",
+    };
+    writeFileSync(dest, JSON.stringify(config, null, 2) + "\n");
+}
+//# sourceMappingURL=config.js.map

package/dist/engine/config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.js","sourceRoot":"","sources":["../../src/engine/config.ts"],"names":[],"mappings":"AAAA,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AAGlE,MAAM,YAAY,GAAG;IACnB,qBAAqB;IACrB,qBAAqB;IACrB,uBAAuB;CACxB,CAAC;AAEF,MAAM,UAAU,cAAc,CAAC,OAAe;IAC5C,KAAK,MAAM,IAAI,IAAI,YAAY,EAAE,CAAC;QAChC,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;QACrC,IAAI,UAAU,CAAC,GAAG,CAAC;YAAE,OAAO,GAAG,CAAC;IAClC,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,OAAe;IAChD,MAAM,IAAI,GAAG,cAAc,CAAC,OAAO,CAAC,CAAC;IACrC,IAAI,CAAC,IAAI;QAAE,OAAO,SAAS,CAAC;IAE5B,IAAI,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;QAC3B,IAAI,CAAC;YACH,OAAO,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAoB,CAAC;QACnE,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,IAAI,KAAK,CAAC,mBAAmB,IAAI,KAAK,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAClG,CAAC;IACH,CAAC;IAED,kEAAkE;IAClE,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,MAAM,CAAC,MAAM,cAAc,GAAoB;IAC7C,SAAS,EAAE,iBAAiB;IAC5B,OAAO,EAAE,CAAC,QAAQ,EAAE,QAAQ,CAAC;IAC7B,OAAO,EAAE,CAAC,aAAa,EAAE,aAAa,EAAE,oBAAoB,CAAC;IAC7D,EAAE,EAAE;QACF,MAAM,EAAE,UAAU;QAClB,aAAa,EAAE,MAAM;QACrB,QAAQ,EAAE,EAAE;QACZ,cAAc,EAAE,CAAC;KAClB;IACD,OAAO,EAAE;QACP,KAAK,EAAE,GAAG;QACV,SAAS,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,EAAE,GAAG,EAAE,CAAC,EAAE,GAAG,EAAE,CAAC,EAAE;KACrD;IACD,KAAK,EAAE;QACL,IAAI,EAAE;YACJ,SAAS,EAAE;gBACT,MAAM,EAAE,kBAAkB,EAAE,YAAY,EAAE,aAAa;gBACvD,aAAa,EAAE,aAAa;gBAC5B,UAAU,EAAkB,uBAAuB;gBACnD,uBAAuB,EAAK,QAAQ;gBACpC,iBAAiB,EAAW,QAAQ;gBACpC,gBAAgB,EAAY,eAAe;gBAC3C,qBAAqB,EAAO,QAAQ;gBACpC,eAAe,EAAa,iBAAiB;gBAC7C,WAAW,EAAgB,0BAA0B;aACtD;YACD,eAAe,EAAE,CAAC,eAAe,CAAC;YAClC,cAAc,EAAE,EAAE;SACnB;QACD,SAAS,EAAE;YACT,QAAQ,EAAE;gBACR,WAAW,EAAE,eAAe,EAAE,WAAW,EAAE,OAAO;gBAClD,6BAA6B,EAAE,kBAAkB,EAAE,kBAAkB;aACtE;YACD,cAAc,EAAE,EAAE;SACnB;QACD,OAAO,EAAE;YACP,aAAa,EAAE,CAAC,OAAO,EAAE,UAAU,EAAE,aAAa,EAAE,gBAAgB,EAAE,QAAQ,EAAE,WAAW,CAAC;SAC7F;KACF;IACD,KAAK,EAAE;QACL,uBAAuB,EAAE,EAAE,QAAQ,EAAE,UAAU,EAAE;QACjD,oBAAoB,EAAE,EAAE,QAAQ,EAAE,UAAU,EAAE;QAC9C,uBAAuB,EAAE,EAAE,QAAQ,EAAE,UAAU,EAAE;QACjD,0BAA0B,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE;QAChD,sBAAsB,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE;KAC7C;IACD,WAAW,EAAE,wBAAwB;CACtC,CAAC;AAEF,MAAM,UAAU,kBAAkB,CAAC,OAAe,EAAE,IAAyB;IAC3E,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,uBAAuB,CAAC,CAAC;IACzD,IAAI,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC;QACpC,OAAO;IACT,CAAC;IAED,MAAM,MAAM,GAAG;QACb,OAAO,EAAE,mCAAmC;QAC5C,SAAS,EAAE,iBAAiB;QAC5B,OAAO,EAAE,CAAC,QAAQ,EAAE,QAAQ,CAAC;QAC7B,OAAO,EAAE,CAAC,aAAa,EAAE,aAAa,CAAC;QACvC,EAAE,EAAE;YACF,MAAM,EAAE,UAAU;YAClB,aAAa,EAAE,MAAM;YACrB,QAAQ,EAAE,EAAE;YACZ,cAAc,EAAE,CAAC;SAClB;QACD,KAAK,EAAE;YACL,IAAI,EAAE;gBACJ,SAAS,EAAE;oBACT,MAAM,EAAE,kBAAkB,EAAE,YAAY,EAAE,aAAa;oBACvD,aAAa,EAAE,aAAa;oBAC5B,UAAU,EAAE,uBAAuB,EAAE,iBAAiB;oBACtD,gBAAgB,EAAE,qBAAqB,EAAE,eAAe,EAAE,WAAW;iBACtE;gBACD,eAAe,EAAE,CAAC,eAAe,CAAC;gBAClC,cAAc,EAAE,EAAE;aACnB;YACD,SAAS,EAAE;gBACT,QAAQ,EAAE;oBACR,WAAW,EAAE,eAAe,EAAE,OAAO;oBACrC,6BAA6B,EAAE,kBAAkB,EAAE,kBAAkB;iBACtE;gBACD,cAAc,EAAE,EAAE;aACnB;YACD,OAAO,EAAE;gBACP,aAAa,EAAE,CAAC,OAAO,EAAE,UAAU,EAAE,aAAa,EAAE,gBAAgB,EAAE,QAAQ,EAAE,WAAW,CAAC;aAC7F;SACF;QACD,KAAK,EAAE;YACL,uBAAuB,EAAE,EAAE,QAAQ,EAAE,UAAU,EAAE;YACjD,oBAAoB,EAAE,EAAE,QAAQ,EAAE,UAAU,EAAE;YAC9C,uBAAuB,EAAE,EAAE,QAAQ,EAAE,UAAU,EAAE;YACjD,0BAA0B,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE;YAChD,sBAAsB,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE;SAC7C;QACD,OAAO,EAAE;YACP,KAAK,EAAE,GAAG;YACV,SAAS,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,EAAE,GAAG,EAAE,CAAC,EAAE,GAAG,EAAE,CAAC,EAAE;SACrD;QACD,WAAW,EAAE,wBAAwB;KACtC,CAAC;IAEF,aAAa,CAAC,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;AAC9D,CAAC"}

package/dist/engine/config.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=config.test.d.ts.map

package/dist/engine/config.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.test.d.ts","sourceRoot":"","sources":["../../src/engine/config.test.ts"],"names":[],"mappings":""}