@fourteensystems/shipguard 0.1.0

package/dist/next/deps.js

@@ -0,0 +1,102 @@
+import path from "node:path";
+import { readFileSync } from "node:fs";
+export function readDeps(rootDir) {
+    const pkgPath = path.join(rootDir, "package.json");
+    let pkg;
+    try {
+        pkg = JSON.parse(readFileSync(pkgPath, "utf8"));
+    }
+    catch (err) {
+        throw new Error(`Failed to parse ${pkgPath}: ${err instanceof Error ? err.message : String(err)}`);
+    }
+    const deps = { ...(pkg.dependencies ?? {}), ...(pkg.devDependencies ?? {}) };
+    return {
+        hasNextAuth: Boolean(deps["next-auth"] || deps["@auth/core"] || deps["@auth/nextjs"]),
+        hasClerk: Boolean(deps["@clerk/nextjs"]),
+        hasSupabase: Boolean(deps["@supabase/ssr"] || deps["@supabase/auth-helpers-nextjs"]),
+        hasKinde: Boolean(deps["@kinde-oss/kinde-auth-nextjs"]),
+        hasWorkOS: Boolean(deps["@workos-inc/authkit-nextjs"]),
+        hasBetterAuth: Boolean(deps["better-auth"]),
+        hasLucia: Boolean(deps["lucia"]),
+        hasAuth0: Boolean(deps["@auth0/nextjs-auth0"]),
+        hasIronSession: Boolean(deps["iron-session"]),
+        hasFirebaseAuth: Boolean(deps["firebase-admin"] || deps["next-firebase-auth-edge"]),
+        hasUpstashRatelimit: Boolean(deps["@upstash/ratelimit"]),
+        hasArcjet: Boolean(deps["@arcjet/next"]),
+        hasUnkey: Boolean(deps["@unkey/ratelimit"] || deps["@unkey/nextjs"]),
+        hasPrisma: Boolean(deps["prisma"] || deps["@prisma/client"]),
+        hasDrizzle: Boolean(deps["drizzle-orm"]),
+        hasTrpc: Boolean(deps["@trpc/server"]),
+    };
+}
+export function defaultHintsFromDeps(deps, hasMiddlewareTs) {
+    const authFns = new Set(["requireUser", "requireAuth", "auth", "getServerSession", "getSession"]);
+    if (deps.hasNextAuth) {
+        authFns.add("auth");
+        authFns.add("getServerSession");
+        authFns.add("withAuth");
+    }
+    if (deps.hasClerk) {
+        authFns.add("currentUser");
+        authFns.add("auth");
+        authFns.add("clerkClient");
+    }
+    if (deps.hasKinde) {
+        authFns.add("getKindeServerSession");
+    }
+    if (deps.hasWorkOS) {
+        authFns.add("withAuth");
+        authFns.add("getUser");
+        authFns.add("authkitMiddleware");
+    }
+    if (deps.hasBetterAuth) {
+        authFns.add("auth");
+    }
+    if (deps.hasLucia) {
+        authFns.add("validateRequest");
+        authFns.add("validateSession");
+    }
+    if (deps.hasAuth0) {
+        authFns.add("getSession");
+        authFns.add("withApiAuthRequired");
+        authFns.add("withPageAuthRequired");
+    }
+    if (deps.hasIronSession) {
+        authFns.add("getIronSession");
+    }
+    if (deps.hasFirebaseAuth) {
+        authFns.add("verifyIdToken");
+        authFns.add("getTokens");
+        authFns.add("verifySessionCookie");
+    }
+    const rl = new Set([
+        "rateLimit", "withRateLimit", "limit",
+        "checkRateLimitAndThrowError", // cal.com pattern
+        "ratelimitOrThrow", // dub pattern
+        "rateLimitOrThrow", // common variant
+    ]);
+    if (deps.hasUpstashRatelimit) {
+        rl.add("Ratelimit");
+        rl.add("ratelimit");
+    }
+    if (deps.hasArcjet) {
+        rl.add("aj.protect");
+        rl.add("fixedWindow");
+        rl.add("slidingWindow");
+        rl.add("tokenBucket");
+    }
+    if (deps.hasUnkey) {
+        rl.add("withUnkey");
+        rl.add("verifyKey");
+    }
+    return {
+        auth: {
+            functions: [...authFns],
+            middlewareFiles: hasMiddlewareTs ? ["middleware.ts"] : [],
+            allowlistPaths: [],
+        },
+        rateLimit: { wrappers: [...rl], allowlistPaths: [] },
+        tenancy: { orgFieldNames: ["orgId", "tenantId", "workspaceId", "organizationId", "teamId", "accountId"] },
+    };
+}
+//# sourceMappingURL=deps.js.map

package/dist/next/deps.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"deps.js","sourceRoot":"","sources":["../../src/next/deps.ts"],"names":[],"mappings":"AAAA,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAGvC,MAAM,UAAU,QAAQ,CAAC,OAAe;IACtC,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,cAAc,CAAC,CAAC;IACnD,IAAI,GAA4B,CAAC;IACjC,IAAI,CAAC;QACH,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC;IAClD,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,IAAI,KAAK,CAAC,mBAAmB,OAAO,KAAK,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IACrG,CAAC;IACD,MAAM,IAAI,GAAG,EAAE,GAAG,CAAE,GAAG,CAAC,YAAuC,IAAI,EAAE,CAAC,EAAE,GAAG,CAAE,GAAG,CAAC,eAA0C,IAAI,EAAE,CAAC,EAAE,CAAC;IAErI,OAAO;QACL,WAAW,EAAE,OAAO,CAAC,IAAI,CAAC,WAAW,CAAC,IAAI,IAAI,CAAC,YAAY,CAAC,IAAI,IAAI,CAAC,cAAc,CAAC,CAAC;QACrF,QAAQ,EAAE,OAAO,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;QACxC,WAAW,EAAE,OAAO,CAAC,IAAI,CAAC,eAAe,CAAC,IAAI,IAAI,CAAC,+BAA+B,CAAC,CAAC;QACpF,QAAQ,EAAE,OAAO,CAAC,IAAI,CAAC,8BAA8B,CAAC,CAAC;QACvD,SAAS,EAAE,OAAO,CAAC,IAAI,CAAC,4BAA4B,CAAC,CAAC;QACtD,aAAa,EAAE,OAAO,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;QAC3C,QAAQ,EAAE,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAChC,QAAQ,EAAE,OAAO,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAC;QAC9C,cAAc,EAAE,OAAO,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;QAC7C,eAAe,EAAE,OAAO,CAAC,IAAI,CAAC,gBAAgB,CAAC,IAAI,IAAI,CAAC,yBAAyB,CAAC,CAAC;QACnF,mBAAmB,EAAE,OAAO,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC;QACxD,SAAS,EAAE,OAAO,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;QACxC,QAAQ,EAAE,OAAO,CAAC,IAAI,CAAC,kBAAkB,CAAC,IAAI,IAAI,CAAC,eAAe,CAAC,CAAC;QACpE,SAAS,EAAE,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,IAAI,CAAC,gBAAgB,CAAC,CAAC;QAC5D,UAAU,EAAE,OAAO,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;QACxC,OAAO,EAAE,OAAO,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;KACvC,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,IAAmB,EAAE,eAAwB;IAChF,MAAM,OAAO,GAAG,IAAI,GAAG,CAAS,CAAC,aAAa,EAAE,aAAa,EAAE,MAAM,EAAE,kBAAkB,EAAE,YAAY,CAAC,CAAC,CAAC;IAE1G,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;QACrB,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QACpB,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAC;QAChC,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;IAC1B,CAAC;IACD,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;QAClB,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;QAC3B,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QACpB,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;IAC7B,CAAC;IACD,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;QAClB,OAAO,CAAC,GAAG,CAAC,uBAAuB,CAAC,CAAC;IACvC,CAAC;IACD,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;QACnB,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QACxB,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QACvB,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC,CAAC;IACnC,CAAC;IACD,IAAI,IAAI,CAAC,aAAa,EAAE,CAAC;QACvB,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IACtB,CAAC;IACD,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;QAClB,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAC;QAC/B,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAC;IACjC,CAAC;IACD,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;QAClB,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;QAC1B,OAAO,CAAC,GAAG,CAAC,qBAAqB,CAAC,CAAC;QACnC,OAAO,CAAC,GAAG,CAAC,sBAAsB,CAAC,CAAC;IACtC,CAAC;IACD,IAAI,IAAI,CAAC,cAAc,EAAE,CAAC;QACxB,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC;IAChC,CAAC;IACD,IAAI,IAAI,CAAC,eAAe,EAAE,CAAC;QACzB,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC;QAC7B,OAAO,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;QACzB,OAAO,CAAC,GAAG,CAAC,qBAAqB,CAAC,CAAC;IACrC,CAAC;IAED,MAAM,EAAE,GAAG,IAAI,GAAG,CAAS;QACzB,WAAW,EAAE,eAAe,EAAE,OAAO;QACrC,6BAA6B,EAAG,kBAAkB;QAClD,kBAAkB,EAAc,cAAc;QAC9C,kBAAkB,EAAc,iBAAiB;KAClD,CAAC,CAAC;IACH,IAAI,IAAI,CAAC,mBAAmB,EAAE,CAAC;QAC7B,EAAE,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;QACpB,EAAE,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;IACtB,CAAC;IACD,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;QACnB,EAAE,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;QACrB,EAAE,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;QACtB,EAAE,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC;QACxB,EAAE,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;IACxB,CAAC;IACD,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;QAClB,EAAE,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;QACpB,EAAE,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;IACtB,CAAC;IAED,OAAO;QACL,IAAI,EAAE;YACJ,SAAS,EAAE,CAAC,GAAG,OAAO,CAAC;YACvB,eAAe,EAAE,eAAe,CAAC,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,EAAE;YACzD,cAAc,EAAE,EAAE;SACnB;QACD,SAAS,EAAE,EAAE,QAAQ,EAAE,CAAC,GAAG,EAAE,CAAC,EAAE,cAAc,EAAE,EAAE,EAAE;QACpD,OAAO,EAAE,EAAE,aAAa,EAAE,CAAC,OAAO,EAAE,UAAU,EAAE,aAAa,EAAE,gBAAgB,EAAE,QAAQ,EAAE,WAAW,CAAC,EAAE;KAC1G,CAAC;AACJ,CAAC"}

package/dist/next/detect.d.ts

@@ -0,0 +1,10 @@
+export interface DetectResult {
+    ok: boolean;
+    reason?: string;
+    hasRouteHandlers: boolean;
+    hasServerActions: boolean;
+    /** Resolved app directory relative to rootDir ("app" or "src/app") */
+    appDir: string;
+}
+export declare function detectNextAppRouter(rootDir: string): DetectResult;
+//# sourceMappingURL=detect.d.ts.map

package/dist/next/detect.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"detect.d.ts","sourceRoot":"","sources":["../../src/next/detect.ts"],"names":[],"mappings":"AAIA,MAAM,WAAW,YAAY;IAC3B,EAAE,EAAE,OAAO,CAAC;IACZ,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,gBAAgB,EAAE,OAAO,CAAC;IAC1B,gBAAgB,EAAE,OAAO,CAAC;IAC1B,sEAAsE;IACtE,MAAM,EAAE,MAAM,CAAC;CAChB;AAQD,wBAAgB,mBAAmB,CAAC,OAAO,EAAE,MAAM,GAAG,YAAY,CAiDjE"}

package/dist/next/detect.js

@@ -0,0 +1,57 @@
+import path from "node:path";
+import { existsSync, readFileSync } from "node:fs";
+import fg from "fast-glob";
+const NO_DETECT = {
+    hasRouteHandlers: false,
+    hasServerActions: false,
+    appDir: "app",
+};
+export function detectNextAppRouter(rootDir) {
+    const pkgPath = path.join(rootDir, "package.json");
+    if (!existsSync(pkgPath)) {
+        return { ok: false, reason: "package.json not found", ...NO_DETECT };
+    }
+    let pkg;
+    try {
+        pkg = JSON.parse(readFileSync(pkgPath, "utf8"));
+    }
+    catch (err) {
+        return { ok: false, reason: `Failed to parse package.json: ${err instanceof Error ? err.message : String(err)}`, ...NO_DETECT };
+    }
+    const deps = { ...(pkg.dependencies ?? {}), ...(pkg.devDependencies ?? {}) };
+    if (!deps["next"]) {
+        return { ok: false, reason: "next dependency not found", ...NO_DETECT };
+    }
+    // Support both app/ and src/app/ (both are standard Next.js conventions)
+    let appDir = "app";
+    if (!existsSync(path.join(rootDir, "app"))) {
+        if (existsSync(path.join(rootDir, "src/app"))) {
+            appDir = "src/app";
+        }
+        else {
+            return { ok: false, reason: "app/ directory not found (checked app/ and src/app/)", ...NO_DETECT };
+        }
+    }
+    // Check for route handlers
+    const routeFiles = fg.globSync(`${appDir}/**/route.{ts,js,tsx,jsx}`, { cwd: rootDir });
+    const hasRouteHandlers = routeFiles.length > 0;
+    // Check for server actions ("use server" directive)
+    let hasServerActions = false;
+    const tsFiles = fg.globSync(`${appDir}/**/*.{ts,tsx,js,jsx}`, { cwd: rootDir, ignore: ["**/node_modules/**"] });
+    for (const f of tsFiles.slice(0, 100)) {
+        try {
+            const content = readFileSync(path.join(rootDir, f), "utf8");
+            if (/["']use server["']/m.test(content)) {
+                hasServerActions = true;
+                break;
+            }
+        }
+        catch {
+            // Skip unreadable files (broken symlinks, permissions, etc.)
+        }
+    }
+    // Valid Next.js App Router project even if no route handlers or server actions
+    // (e.g., a pure pages app, or a blog with no API surface — produces 0 findings)
+    return { ok: true, hasRouteHandlers, hasServerActions, appDir };
+}
+//# sourceMappingURL=detect.js.map

package/dist/next/detect.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"detect.js","sourceRoot":"","sources":["../../src/next/detect.ts"],"names":[],"mappings":"AAAA,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACnD,OAAO,EAAE,MAAM,WAAW,CAAC;AAW3B,MAAM,SAAS,GAAwC;IACrD,gBAAgB,EAAE,KAAK;IACvB,gBAAgB,EAAE,KAAK;IACvB,MAAM,EAAE,KAAK;CACd,CAAC;AAEF,MAAM,UAAU,mBAAmB,CAAC,OAAe;IACjD,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,cAAc,CAAC,CAAC;IACnD,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;QACzB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,wBAAwB,EAAE,GAAG,SAAS,EAAE,CAAC;IACvE,CAAC;IAED,IAAI,GAA4B,CAAC;IACjC,IAAI,CAAC;QACH,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC;IAClD,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,iCAAiC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,EAAE,GAAG,SAAS,EAAE,CAAC;IAClI,CAAC;IACD,MAAM,IAAI,GAAG,EAAE,GAAG,CAAE,GAAG,CAAC,YAAuC,IAAI,EAAE,CAAC,EAAE,GAAG,CAAE,GAAG,CAAC,eAA0C,IAAI,EAAE,CAAC,EAAE,CAAC;IACrI,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;QAClB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,2BAA2B,EAAE,GAAG,SAAS,EAAE,CAAC;IAC1E,CAAC;IAED,yEAAyE;IACzE,IAAI,MAAM,GAAG,KAAK,CAAC;IACnB,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC,EAAE,CAAC;QAC3C,IAAI,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC,EAAE,CAAC;YAC9C,MAAM,GAAG,SAAS,CAAC;QACrB,CAAC;aAAM,CAAC;YACN,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,sDAAsD,EAAE,GAAG,SAAS,EAAE,CAAC;QACrG,CAAC;IACH,CAAC;IAED,2BAA2B;IAC3B,MAAM,UAAU,GAAG,EAAE,CAAC,QAAQ,CAAC,GAAG,MAAM,2BAA2B,EAAE,EAAE,GAAG,EAAE,OAAO,EAAE,CAAC,CAAC;IACvF,MAAM,gBAAgB,GAAG,UAAU,CAAC,MAAM,GAAG,CAAC,CAAC;IAE/C,oDAAoD;IACpD,IAAI,gBAAgB,GAAG,KAAK,CAAC;IAC7B,MAAM,OAAO,GAAG,EAAE,CAAC,QAAQ,CAAC,GAAG,MAAM,uBAAuB,EAAE,EAAE,GAAG,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC,oBAAoB,CAAC,EAAE,CAAC,CAAC;IAChH,KAAK,MAAM,CAAC,IAAI,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC;QACtC,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;YAC5D,IAAI,qBAAqB,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;gBACxC,gBAAgB,GAAG,IAAI,CAAC;gBACxB,MAAM;YACR,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,6DAA6D;QAC/D,CAAC;IACH,CAAC;IAED,+EAA+E;IAC/E,gFAAgF;IAChF,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,MAAM,EAAE,CAAC;AAClE,CAAC"}

package/dist/next/index.d.ts

@@ -0,0 +1,5 @@
+import type { NextIndex } from "./types.js";
+export type { NextIndex } from "./types.js";
+export { detectNextAppRouter } from "./detect.js";
+export declare function buildNextIndex(rootDir: string, exclude: string[]): Promise<NextIndex>;
+//# sourceMappingURL=index.d.ts.map

package/dist/next/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/next/index.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,YAAY,CAAC;AAQ5C,YAAY,EAAE,SAAS,EAAE,MAAM,YAAY,CAAC;AAC5C,OAAO,EAAE,mBAAmB,EAAE,MAAM,aAAa,CAAC;AAElD,wBAAsB,cAAc,CAClC,OAAO,EAAE,MAAM,EACf,OAAO,EAAE,MAAM,EAAE,GAChB,OAAO,CAAC,SAAS,CAAC,CAqCpB"}

package/dist/next/index.js

@@ -0,0 +1,41 @@
+import path from "node:path";
+import { existsSync } from "node:fs";
+import { detectNextAppRouter } from "./detect.js";
+import { readDeps, defaultHintsFromDeps } from "./deps.js";
+import { analyzeMiddleware } from "./middleware.js";
+import { findRouteHandlers, classifyMutationRoutes } from "./routes.js";
+import { findServerActions, classifyMutationActions } from "./server-actions.js";
+import { buildTrpcIndex } from "./trpc.js";
+export { detectNextAppRouter } from "./detect.js";
+export async function buildNextIndex(rootDir, exclude) {
+    const det = detectNextAppRouter(rootDir);
+    if (!det.ok) {
+        throw new Error(`Shipguard v1 supports Next.js App Router only: ${det.reason ?? "unknown reason"}`);
+    }
+    const { appDir } = det;
+    const deps = readDeps(rootDir);
+    // Check for middleware in standard locations
+    const hasMiddlewareTs = existsSync(path.join(rootDir, "middleware.ts"))
+        || existsSync(path.join(rootDir, "middleware.js"))
+        || existsSync(path.join(rootDir, "src/middleware.ts"))
+        || existsSync(path.join(rootDir, "src/middleware.js"));
+    const hints = defaultHintsFromDeps(deps, hasMiddlewareTs);
+    const middleware = analyzeMiddleware(rootDir);
+    const allRoutes = await findRouteHandlers(rootDir, exclude, appDir);
+    const mutationRoutes = classifyMutationRoutes(allRoutes);
+    const allActions = await findServerActions(rootDir, exclude, appDir);
+    const mutationActions = classifyMutationActions(allActions);
+    const trpc = await buildTrpcIndex(rootDir, appDir, exclude);
+    return {
+        version: 1,
+        framework: "next-app-router",
+        rootDir,
+        deps,
+        hints,
+        middleware,
+        routes: { all: allRoutes, mutationRoutes },
+        serverActions: { all: allActions, mutationActions: mutationActions },
+        trpc,
+    };
+}
+//# sourceMappingURL=index.js.map

package/dist/next/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/next/index.ts"],"names":[],"mappings":"AAAA,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AAErC,OAAO,EAAE,mBAAmB,EAAE,MAAM,aAAa,CAAC;AAClD,OAAO,EAAE,QAAQ,EAAE,oBAAoB,EAAE,MAAM,WAAW,CAAC;AAC3D,OAAO,EAAE,iBAAiB,EAAE,MAAM,iBAAiB,CAAC;AACpD,OAAO,EAAE,iBAAiB,EAAE,sBAAsB,EAAE,MAAM,aAAa,CAAC;AACxE,OAAO,EAAE,iBAAiB,EAAE,uBAAuB,EAAE,MAAM,qBAAqB,CAAC;AACjF,OAAO,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC;AAG3C,OAAO,EAAE,mBAAmB,EAAE,MAAM,aAAa,CAAC;AAElD,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,OAAe,EACf,OAAiB;IAEjB,MAAM,GAAG,GAAG,mBAAmB,CAAC,OAAO,CAAC,CAAC;IACzC,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;QACZ,MAAM,IAAI,KAAK,CAAC,kDAAkD,GAAG,CAAC,MAAM,IAAI,gBAAgB,EAAE,CAAC,CAAC;IACtG,CAAC;IAED,MAAM,EAAE,MAAM,EAAE,GAAG,GAAG,CAAC;IACvB,MAAM,IAAI,GAAG,QAAQ,CAAC,OAAO,CAAC,CAAC;IAE/B,6CAA6C;IAC7C,MAAM,eAAe,GAAG,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,eAAe,CAAC,CAAC;WAClE,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,eAAe,CAAC,CAAC;WAC/C,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,mBAAmB,CAAC,CAAC;WACnD,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,mBAAmB,CAAC,CAAC,CAAC;IAEzD,MAAM,KAAK,GAAG,oBAAoB,CAAC,IAAI,EAAE,eAAe,CAAC,CAAC;IAC1D,MAAM,UAAU,GAAG,iBAAiB,CAAC,OAAO,CAAC,CAAC;IAE9C,MAAM,SAAS,GAAG,MAAM,iBAAiB,CAAC,OAAO,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;IACpE,MAAM,cAAc,GAAG,sBAAsB,CAAC,SAAS,CAAC,CAAC;IAEzD,MAAM,UAAU,GAAG,MAAM,iBAAiB,CAAC,OAAO,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;IACrE,MAAM,eAAe,GAAG,uBAAuB,CAAC,UAAU,CAAC,CAAC;IAE5D,MAAM,IAAI,GAAG,MAAM,cAAc,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC;IAE5D,OAAO;QACL,OAAO,EAAE,CAAC;QACV,SAAS,EAAE,iBAAiB;QAC5B,OAAO;QACP,IAAI;QACJ,KAAK;QACL,UAAU;QACV,MAAM,EAAE,EAAE,GAAG,EAAE,SAAS,EAAE,cAAc,EAAE;QAC1C,aAAa,EAAE,EAAE,GAAG,EAAE,UAAU,EAAE,eAAe,EAAE,eAAe,EAAE;QACpE,IAAI;KACL,CAAC;AACJ,CAAC"}

package/dist/next/middleware.d.ts

@@ -0,0 +1,3 @@
+import type { NextMiddlewareIndex } from "./types.js";
+export declare function analyzeMiddleware(rootDir: string): NextMiddlewareIndex;
+//# sourceMappingURL=middleware.d.ts.map

package/dist/next/middleware.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"middleware.d.ts","sourceRoot":"","sources":["../../src/next/middleware.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,YAAY,CAAC;AAEtD,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,MAAM,GAAG,mBAAmB,CAkCtE"}

package/dist/next/middleware.js

@@ -0,0 +1,33 @@
+import path from "node:path";
+import { existsSync, readFileSync } from "node:fs";
+export function analyzeMiddleware(rootDir) {
+    // Next.js middleware can be at root or src/
+    const candidates = ["middleware.ts", "middleware.js", "src/middleware.ts", "src/middleware.js"];
+    let file;
+    let src = "";
+    for (const candidate of candidates) {
+        const abs = path.join(rootDir, candidate);
+        if (existsSync(abs)) {
+            file = candidate;
+            src = readFileSync(abs, "utf8");
+            break;
+        }
+    }
+    if (!file) {
+        return { authLikely: false, rateLimitLikely: false, matcherPatterns: [] };
+    }
+    // Best-effort heuristics (keep conservative)
+    const authLikely = /getToken\s*\(|auth\s*\(|clerkMiddleware\s*\(|authMiddleware\s*\(|withAuth\s*\(|getServerSession\s*\(|\.auth\.getUser\s*\(|createMiddlewareClient\s*\(|authkitMiddleware\s*\(|kindeMiddleware\s*\(|withMiddlewareAuthRequired\s*\(|validateRequest\s*\(|getIronSession\s*\(/.test(src);
+    const rateLimitLikely = /ratelimit|rateLimit|upstash/i.test(src);
+    // Extract matcher config if present
+    const matcherPatterns = [];
+    const matcherMatch = src.match(/matcher\s*:\s*(\[[\s\S]*?\])/);
+    if (matcherMatch) {
+        const literals = matcherMatch[1].matchAll(/"([^"]+)"|'([^']+)'/g);
+        for (const m of literals) {
+            matcherPatterns.push(m[1] ?? m[2]);
+        }
+    }
+    return { file, authLikely, rateLimitLikely, matcherPatterns };
+}
+//# sourceMappingURL=middleware.js.map

package/dist/next/middleware.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"middleware.js","sourceRoot":"","sources":["../../src/next/middleware.ts"],"names":[],"mappings":"AAAA,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAGnD,MAAM,UAAU,iBAAiB,CAAC,OAAe;IAC/C,4CAA4C;IAC5C,MAAM,UAAU,GAAG,CAAC,eAAe,EAAE,eAAe,EAAE,mBAAmB,EAAE,mBAAmB,CAAC,CAAC;IAChG,IAAI,IAAwB,CAAC;IAC7B,IAAI,GAAG,GAAG,EAAE,CAAC;IAEb,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;QACnC,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;QAC1C,IAAI,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;YACpB,IAAI,GAAG,SAAS,CAAC;YACjB,GAAG,GAAG,YAAY,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;YAChC,MAAM;QACR,CAAC;IACH,CAAC;IAED,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,OAAO,EAAE,UAAU,EAAE,KAAK,EAAE,eAAe,EAAE,KAAK,EAAE,eAAe,EAAE,EAAE,EAAE,CAAC;IAC5E,CAAC;IAED,6CAA6C;IAC7C,MAAM,UAAU,GAAG,4QAA4Q,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC1S,MAAM,eAAe,GAAG,8BAA8B,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAEjE,oCAAoC;IACpC,MAAM,eAAe,GAAa,EAAE,CAAC;IACrC,MAAM,YAAY,GAAG,GAAG,CAAC,KAAK,CAAC,8BAA8B,CAAC,CAAC;IAC/D,IAAI,YAAY,EAAE,CAAC;QACjB,MAAM,QAAQ,GAAG,YAAY,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,sBAAsB,CAAC,CAAC;QAClE,KAAK,MAAM,CAAC,IAAI,QAAQ,EAAE,CAAC;YACzB,eAAe,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACrC,CAAC;IACH,CAAC;IAED,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,eAAe,EAAE,eAAe,EAAE,CAAC;AAChE,CAAC"}

package/dist/next/routes.d.ts

@@ -0,0 +1,5 @@
+import type { NextRoute, MutationSignals } from "./types.js";
+export declare function findRouteHandlers(rootDir: string, excludeGlobs: string[], appDir?: string): Promise<NextRoute[]>;
+export declare function classifyMutationRoutes(all: NextRoute[]): NextRoute[];
+export declare function detectMutationSignals(src: string): MutationSignals;
+//# sourceMappingURL=routes.d.ts.map

package/dist/next/routes.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"routes.d.ts","sourceRoot":"","sources":["../../src/next/routes.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,SAAS,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC;AA4B7D,wBAAsB,iBAAiB,CACrC,OAAO,EAAE,MAAM,EACf,YAAY,EAAE,MAAM,EAAE,EACtB,MAAM,GAAE,MAAc,GACrB,OAAO,CAAC,SAAS,EAAE,CAAC,CAkCtB;AAED,wBAAgB,sBAAsB,CAAC,GAAG,EAAE,SAAS,EAAE,GAAG,SAAS,EAAE,CAOpE;AAED,wBAAgB,qBAAqB,CAAC,GAAG,EAAE,MAAM,GAAG,eAAe,CA4ClE"}

package/dist/next/routes.js

@@ -0,0 +1,125 @@
+import path from "node:path";
+import { readFileSync } from "node:fs";
+import fg from "fast-glob";
+/**
+ * Prisma write methods that indicate mutation.
+ */
+const PRISMA_WRITE_METHODS = [
+    "create", "createMany", "createManyAndReturn",
+    "update", "updateMany",
+    "upsert",
+    "delete", "deleteMany",
+];
+/**
+ * Stripe write patterns (method chains that indicate mutation).
+ */
+const STRIPE_WRITE_PATTERNS = [
+    /stripe\.\w+\.create\s*\(/,
+    /stripe\.\w+\.update\s*\(/,
+    /stripe\.\w+\.del\s*\(/,
+    /stripe\.checkout\.sessions\.create\s*\(/,
+    /stripe\.subscriptions\./,
+];
+/**
+ * Admin-like path segments that suggest privileged operations.
+ */
+const ADMIN_PATH_SEGMENTS = /\/(admin|billing|invite|role|plan|sync|reindex|delete|remove)\//i;
+export async function findRouteHandlers(rootDir, excludeGlobs, appDir = "app") {
+    const files = fg.globSync(`${appDir}/**/route.{ts,js,tsx,jsx}`, {
+        cwd: rootDir,
+        ignore: ["**/node_modules/**", ...excludeGlobs],
+    });
+    const routes = [];
+    for (const file of files) {
+        const abs = path.join(rootDir, file);
+        let src;
+        try {
+            src = readFileSync(abs, "utf8");
+        }
+        catch {
+            continue; // Skip unreadable files
+        }
+        const signals = detectMutationSignals(src);
+        const method = detectExportedMethods(src);
+        const pathname = fileToPathname(file, appDir);
+        const isApi = pathname.startsWith("/api/") || pathname === "/api";
+        routes.push({
+            kind: "route-handler",
+            file,
+            method,
+            pathname,
+            isApi,
+            isPublic: true, // conservative default; can be overridden by config
+            signals,
+        });
+    }
+    return routes;
+}
+export function classifyMutationRoutes(all) {
+    return all.filter((r) => r.signals.hasMutationEvidence ||
+        r.signals.hasDbWriteEvidence ||
+        r.signals.hasStripeWriteEvidence);
+}
+export function detectMutationSignals(src) {
+    const details = [];
+    // Prisma writes
+    let hasDbWrite = false;
+    for (const method of PRISMA_WRITE_METHODS) {
+        const pattern = new RegExp(`\\.${method}\\s*\\(`, "g");
+        if (pattern.test(src)) {
+            hasDbWrite = true;
+            details.push(`prisma.${method}`);
+        }
+    }
+    // Stripe writes
+    let hasStripeWrite = false;
+    for (const pattern of STRIPE_WRITE_PATTERNS) {
+        if (pattern.test(src)) {
+            hasStripeWrite = true;
+            details.push("stripe write operation");
+            break;
+        }
+    }
+    // Raw SQL writes
+    const rawSqlWrite = /\$executeRaw|query\s*\(\s*["'`](?:INSERT|UPDATE|DELETE)/i.test(src);
+    if (rawSqlWrite) {
+        hasDbWrite = true;
+        details.push("raw SQL write");
+    }
+    // General mutation signals: request body reading, admin path patterns
+    const readBody = /request\.json\s*\(|request\.formData\s*\(|req\.body/.test(src);
+    if (readBody) {
+        details.push("reads request body");
+    }
+    const hasMutation = hasDbWrite || hasStripeWrite || readBody;
+    return {
+        hasMutationEvidence: hasMutation,
+        hasDbWriteEvidence: hasDbWrite,
+        hasStripeWriteEvidence: hasStripeWrite,
+        mutationDetails: details,
+    };
+}
+function detectExportedMethods(src) {
+    const methods = [];
+    if (/export\s+(?:async\s+)?function\s+GET/m.test(src))
+        methods.push("GET");
+    if (/export\s+(?:async\s+)?function\s+POST/m.test(src))
+        methods.push("POST");
+    if (/export\s+(?:async\s+)?function\s+PUT/m.test(src))
+        methods.push("PUT");
+    if (/export\s+(?:async\s+)?function\s+PATCH/m.test(src))
+        methods.push("PATCH");
+    if (/export\s+(?:async\s+)?function\s+DELETE/m.test(src))
+        methods.push("DELETE");
+    return methods.length > 0 ? methods.join(",") : undefined;
+}
+function fileToPathname(file, appDir = "app") {
+    // app/api/users/[id]/route.ts → /api/users/[id]
+    // src/app/api/users/[id]/route.ts → /api/users/[id]
+    const prefix = appDir.endsWith("/") ? appDir : appDir + "/";
+    return "/" + file
+        .replace(new RegExp(`^${prefix.replace(/[/]/g, "\\/")}`), "")
+        .replace(/\/route\.\w+$/, "")
+        .replace(/\\/g, "/");
+}
+//# sourceMappingURL=routes.js.map

package/dist/next/routes.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"routes.js","sourceRoot":"","sources":["../../src/next/routes.ts"],"names":[],"mappings":"AAAA,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,EAAE,MAAM,WAAW,CAAC;AAG3B;;GAEG;AACH,MAAM,oBAAoB,GAAG;IAC3B,QAAQ,EAAE,YAAY,EAAE,qBAAqB;IAC7C,QAAQ,EAAE,YAAY;IACtB,QAAQ;IACR,QAAQ,EAAE,YAAY;CACvB,CAAC;AAEF;;GAEG;AACH,MAAM,qBAAqB,GAAG;IAC5B,0BAA0B;IAC1B,0BAA0B;IAC1B,uBAAuB;IACvB,yCAAyC;IACzC,yBAAyB;CAC1B,CAAC;AAEF;;GAEG;AACH,MAAM,mBAAmB,GAAG,kEAAkE,CAAC;AAE/F,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,OAAe,EACf,YAAsB,EACtB,SAAiB,KAAK;IAEtB,MAAM,KAAK,GAAG,EAAE,CAAC,QAAQ,CAAC,GAAG,MAAM,2BAA2B,EAAE;QAC9D,GAAG,EAAE,OAAO;QACZ,MAAM,EAAE,CAAC,oBAAoB,EAAE,GAAG,YAAY,CAAC;KAChD,CAAC,CAAC;IAEH,MAAM,MAAM,GAAgB,EAAE,CAAC;IAE/B,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;QACrC,IAAI,GAAW,CAAC;QAChB,IAAI,CAAC;YACH,GAAG,GAAG,YAAY,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;QAClC,CAAC;QAAC,MAAM,CAAC;YACP,SAAS,CAAC,wBAAwB;QACpC,CAAC;QAED,MAAM,OAAO,GAAG,qBAAqB,CAAC,GAAG,CAAC,CAAC;QAC3C,MAAM,MAAM,GAAG,qBAAqB,CAAC,GAAG,CAAC,CAAC;QAC1C,MAAM,QAAQ,GAAG,cAAc,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QAC9C,MAAM,KAAK,GAAG,QAAQ,CAAC,UAAU,CAAC,OAAO,CAAC,IAAI,QAAQ,KAAK,MAAM,CAAC;QAElE,MAAM,CAAC,IAAI,CAAC;YACV,IAAI,EAAE,eAAe;YACrB,IAAI;YACJ,MAAM;YACN,QAAQ;YACR,KAAK;YACL,QAAQ,EAAE,IAAI,EAAE,oDAAoD;YACpE,OAAO;SACR,CAAC,CAAC;IACL,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,MAAM,UAAU,sBAAsB,CAAC,GAAgB;IACrD,OAAO,GAAG,CAAC,MAAM,CACf,CAAC,CAAC,EAAE,EAAE,CACJ,CAAC,CAAC,OAAO,CAAC,mBAAmB;QAC7B,CAAC,CAAC,OAAO,CAAC,kBAAkB;QAC5B,CAAC,CAAC,OAAO,CAAC,sBAAsB,CACnC,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,GAAW;IAC/C,MAAM,OAAO,GAAa,EAAE,CAAC;IAE7B,gBAAgB;IAChB,IAAI,UAAU,GAAG,KAAK,CAAC;IACvB,KAAK,MAAM,MAAM,IAAI,oBAAoB,EAAE,CAAC;QAC1C,MAAM,OAAO,GAAG,IAAI,MAAM,CAAC,MAAM,MAAM,SAAS,EAAE,GAAG,CAAC,CAAC;QACvD,IAAI,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;YACtB,UAAU,GAAG,IAAI,CAAC;YAClB,OAAO,CAAC,IAAI,CAAC,UAAU,MAAM,EAAE,CAAC,CAAC;QACnC,CAAC;IACH,CAAC;IAED,gBAAgB;IAChB,IAAI,cAAc,GAAG,KAAK,CAAC;IAC3B,KAAK,MAAM,OAAO,IAAI,qBAAqB,EAAE,CAAC;QAC5C,IAAI,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;YACtB,cAAc,GAAG,IAAI,CAAC;YACtB,OAAO,CAAC,IAAI,CAAC,wBAAwB,CAAC,CAAC;YACvC,MAAM;QACR,CAAC;IACH,CAAC;IAED,iBAAiB;IACjB,MAAM,WAAW,GAAG,0DAA0D,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACzF,IAAI,WAAW,EAAE,CAAC;QAChB,UAAU,GAAG,IAAI,CAAC;QAClB,OAAO,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;IAChC,CAAC;IAED,sEAAsE;IACtE,MAAM,QAAQ,GAAG,qDAAqD,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACjF,IAAI,QAAQ,EAAE,CAAC;QACb,OAAO,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC;IACrC,CAAC;IAED,MAAM,WAAW,GAAG,UAAU,IAAI,cAAc,IAAI,QAAQ,CAAC;IAE7D,OAAO;QACL,mBAAmB,EAAE,WAAW;QAChC,kBAAkB,EAAE,UAAU;QAC9B,sBAAsB,EAAE,cAAc;QACtC,eAAe,EAAE,OAAO;KACzB,CAAC;AACJ,CAAC;AAED,SAAS,qBAAqB,CAAC,GAAW;IACxC,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,IAAI,uCAAuC,CAAC,IAAI,CAAC,GAAG,CAAC;QAAE,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC3E,IAAI,wCAAwC,CAAC,IAAI,CAAC,GAAG,CAAC;QAAE,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAC7E,IAAI,uCAAuC,CAAC,IAAI,CAAC,GAAG,CAAC;QAAE,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC3E,IAAI,yCAAyC,CAAC,IAAI,CAAC,GAAG,CAAC;QAAE,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAC/E,IAAI,0CAA0C,CAAC,IAAI,CAAC,GAAG,CAAC;QAAE,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IACjF,OAAO,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;AAC5D,CAAC;AAED,SAAS,cAAc,CAAC,IAAY,EAAE,SAAiB,KAAK;IAC1D,gDAAgD;IAChD,oDAAoD;IACpD,MAAM,MAAM,GAAG,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,GAAG,GAAG,CAAC;IAC5D,OAAO,GAAG,GAAG,IAAI;SACd,OAAO,CAAC,IAAI,MAAM,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,KAAK,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;SAC5D,OAAO,CAAC,eAAe,EAAE,EAAE,CAAC;SAC5B,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;AACzB,CAAC"}

package/dist/next/server-actions.d.ts

@@ -0,0 +1,4 @@
+import type { NextServerAction } from "./types.js";
+export declare function findServerActions(rootDir: string, excludeGlobs: string[], appDir?: string): Promise<NextServerAction[]>;
+export declare function classifyMutationActions(all: NextServerAction[]): NextServerAction[];
+//# sourceMappingURL=server-actions.d.ts.map

package/dist/next/server-actions.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"server-actions.d.ts","sourceRoot":"","sources":["../../src/next/server-actions.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,gBAAgB,EAAmB,MAAM,YAAY,CAAC;AAOpE,wBAAsB,iBAAiB,CACrC,OAAO,EAAE,MAAM,EACf,YAAY,EAAE,MAAM,EAAE,EACtB,MAAM,GAAE,MAAc,GACrB,OAAO,CAAC,gBAAgB,EAAE,CAAC,CA4C7B;AAED,wBAAgB,uBAAuB,CAAC,GAAG,EAAE,gBAAgB,EAAE,GAAG,gBAAgB,EAAE,CAOnF"}

package/dist/next/server-actions.js

@@ -0,0 +1,107 @@
+import path from "node:path";
+import { readFileSync } from "node:fs";
+import fg from "fast-glob";
+const PRISMA_WRITE_METHODS = [
+    "create", "createMany", "update", "updateMany",
+    "upsert", "delete", "deleteMany",
+];
+export async function findServerActions(rootDir, excludeGlobs, appDir = "app") {
+    const files = fg.globSync(`${appDir}/**/*.{ts,tsx,js,jsx}`, {
+        cwd: rootDir,
+        ignore: ["**/node_modules/**", "**/route.{ts,js,tsx,jsx}", ...excludeGlobs],
+    });
+    // Also check src/ for server actions (if appDir isn't already src/app)
+    const srcFiles = appDir.startsWith("src/")
+        ? []
+        : fg.globSync("src/**/*.{ts,tsx,js,jsx}", {
+            cwd: rootDir,
+            ignore: ["**/node_modules/**", ...excludeGlobs],
+        });
+    const allFiles = [...files, ...srcFiles];
+    const actions = [];
+    for (const file of allFiles) {
+        const abs = path.join(rootDir, file);
+        let src;
+        try {
+            src = readFileSync(abs, "utf8");
+        }
+        catch {
+            continue; // Skip unreadable files
+        }
+        // Check for "use server" directive (file-level or inline)
+        if (!/["']use server["']/m.test(src))
+            continue;
+        const isFileLevel = /^["']use server["']/m.test(src);
+        const exportNames = extractExportedFunctions(src, isFileLevel);
+        for (const exportName of exportNames) {
+            const signals = detectActionMutationSignals(src);
+            actions.push({
+                kind: "server-action",
+                file,
+                exportName,
+                signals,
+            });
+        }
+    }
+    return actions;
+}
+export function classifyMutationActions(all) {
+    return all.filter((a) => a.signals.hasMutationEvidence ||
+        a.signals.hasDbWriteEvidence ||
+        a.signals.hasStripeWriteEvidence);
+}
+function extractExportedFunctions(src, isFileLevel) {
+    const names = [];
+    if (isFileLevel) {
+        // All exported functions are server actions
+        const exportMatches = src.matchAll(/export\s+(?:async\s+)?function\s+(\w+)/g);
+        for (const m of exportMatches) {
+            names.push(m[1]);
+        }
+        // Also named exports: export const foo = async () => ...
+        const constMatches = src.matchAll(/export\s+const\s+(\w+)\s*=/g);
+        for (const m of constMatches) {
+            names.push(m[1]);
+        }
+    }
+    else {
+        // Only functions after inline "use server" are actions
+        // Match function declarations with "use server" inside the body
+        const inlineMatches = src.matchAll(/(?:export\s+)?(?:async\s+)?function\s+(\w+)\s*\([^)]*\)\s*\{[^}]*?["']use server["']/g);
+        for (const m of inlineMatches) {
+            names.push(m[1]);
+        }
+        // Match arrow functions with "use server" inside the body
+        // e.g.: export const foo = async () => { "use server"; ... }
+        //       const bar = async (data: FormData) => { "use server"; ... }
+        const arrowMatches = src.matchAll(/(?:export\s+)?const\s+(\w+)\s*=\s*(?:async\s+)?(?:\([^)]*\)|[a-zA-Z_]\w*)\s*=>\s*\{[^}]*?["']use server["']/g);
+        for (const m of arrowMatches) {
+            names.push(m[1]);
+        }
+    }
+    return names.length > 0 ? names : ["<anonymous>"];
+}
+function detectActionMutationSignals(src) {
+    const details = [];
+    let hasDbWrite = false;
+    for (const method of PRISMA_WRITE_METHODS) {
+        const pattern = new RegExp(`\\.${method}\\s*\\(`, "g");
+        if (pattern.test(src)) {
+            hasDbWrite = true;
+            details.push(`prisma.${method}`);
+        }
+    }
+    let hasStripeWrite = false;
+    if (/stripe\.\w+\.(create|update|del)\s*\(/.test(src)) {
+        hasStripeWrite = true;
+        details.push("stripe write operation");
+    }
+    const hasMutation = hasDbWrite || hasStripeWrite;
+    return {
+        hasMutationEvidence: hasMutation,
+        hasDbWriteEvidence: hasDbWrite,
+        hasStripeWriteEvidence: hasStripeWrite,
+        mutationDetails: details,
+    };
+}
+//# sourceMappingURL=server-actions.js.map

package/dist/next/server-actions.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"server-actions.js","sourceRoot":"","sources":["../../src/next/server-actions.ts"],"names":[],"mappings":"AAAA,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,EAAE,MAAM,WAAW,CAAC;AAG3B,MAAM,oBAAoB,GAAG;IAC3B,QAAQ,EAAE,YAAY,EAAE,QAAQ,EAAE,YAAY;IAC9C,QAAQ,EAAE,QAAQ,EAAE,YAAY;CACjC,CAAC;AAEF,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,OAAe,EACf,YAAsB,EACtB,SAAiB,KAAK;IAEtB,MAAM,KAAK,GAAG,EAAE,CAAC,QAAQ,CAAC,GAAG,MAAM,uBAAuB,EAAE;QAC1D,GAAG,EAAE,OAAO;QACZ,MAAM,EAAE,CAAC,oBAAoB,EAAE,0BAA0B,EAAE,GAAG,YAAY,CAAC;KAC5E,CAAC,CAAC;IAEH,uEAAuE;IACvE,MAAM,QAAQ,GAAG,MAAM,CAAC,UAAU,CAAC,MAAM,CAAC;QACxC,CAAC,CAAC,EAAE;QACJ,CAAC,CAAC,EAAE,CAAC,QAAQ,CAAC,0BAA0B,EAAE;YACtC,GAAG,EAAE,OAAO;YACZ,MAAM,EAAE,CAAC,oBAAoB,EAAE,GAAG,YAAY,CAAC;SAChD,CAAC,CAAC;IAEP,MAAM,QAAQ,GAAG,CAAC,GAAG,KAAK,EAAE,GAAG,QAAQ,CAAC,CAAC;IACzC,MAAM,OAAO,GAAuB,EAAE,CAAC;IAEvC,KAAK,MAAM,IAAI,IAAI,QAAQ,EAAE,CAAC;QAC5B,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;QACrC,IAAI,GAAW,CAAC;QAChB,IAAI,CAAC;YACH,GAAG,GAAG,YAAY,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;QAClC,CAAC;QAAC,MAAM,CAAC;YACP,SAAS,CAAC,wBAAwB;QACpC,CAAC;QAED,0DAA0D;QAC1D,IAAI,CAAC,qBAAqB,CAAC,IAAI,CAAC,GAAG,CAAC;YAAE,SAAS;QAE/C,MAAM,WAAW,GAAG,sBAAsB,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACrD,MAAM,WAAW,GAAG,wBAAwB,CAAC,GAAG,EAAE,WAAW,CAAC,CAAC;QAE/D,KAAK,MAAM,UAAU,IAAI,WAAW,EAAE,CAAC;YACrC,MAAM,OAAO,GAAG,2BAA2B,CAAC,GAAG,CAAC,CAAC;YACjD,OAAO,CAAC,IAAI,CAAC;gBACX,IAAI,EAAE,eAAe;gBACrB,IAAI;gBACJ,UAAU;gBACV,OAAO;aACR,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,MAAM,UAAU,uBAAuB,CAAC,GAAuB;IAC7D,OAAO,GAAG,CAAC,MAAM,CACf,CAAC,CAAC,EAAE,EAAE,CACJ,CAAC,CAAC,OAAO,CAAC,mBAAmB;QAC7B,CAAC,CAAC,OAAO,CAAC,kBAAkB;QAC5B,CAAC,CAAC,OAAO,CAAC,sBAAsB,CACnC,CAAC;AACJ,CAAC;AAED,SAAS,wBAAwB,CAAC,GAAW,EAAE,WAAoB;IACjE,MAAM,KAAK,GAAa,EAAE,CAAC;IAE3B,IAAI,WAAW,EAAE,CAAC;QAChB,4CAA4C;QAC5C,MAAM,aAAa,GAAG,GAAG,CAAC,QAAQ,CAAC,yCAAyC,CAAC,CAAC;QAC9E,KAAK,MAAM,CAAC,IAAI,aAAa,EAAE,CAAC;YAC9B,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACnB,CAAC;QACD,yDAAyD;QACzD,MAAM,YAAY,GAAG,GAAG,CAAC,QAAQ,CAAC,6BAA6B,CAAC,CAAC;QACjE,KAAK,MAAM,CAAC,IAAI,YAAY,EAAE,CAAC;YAC7B,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACnB,CAAC;IACH,CAAC;SAAM,CAAC;QACN,uDAAuD;QACvD,gEAAgE;QAChE,MAAM,aAAa,GAAG,GAAG,CAAC,QAAQ,CAChC,uFAAuF,CACxF,CAAC;QACF,KAAK,MAAM,CAAC,IAAI,aAAa,EAAE,CAAC;YAC9B,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACnB,CAAC;QACD,0DAA0D;QAC1D,6DAA6D;QAC7D,oEAAoE;QACpE,MAAM,YAAY,GAAG,GAAG,CAAC,QAAQ,CAC/B,8GAA8G,CAC/G,CAAC;QACF,KAAK,MAAM,CAAC,IAAI,YAAY,EAAE,CAAC;YAC7B,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACnB,CAAC;IACH,CAAC;IAED,OAAO,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC;AACpD,CAAC;AAED,SAAS,2BAA2B,CAAC,GAAW;IAC9C,MAAM,OAAO,GAAa,EAAE,CAAC;IAE7B,IAAI,UAAU,GAAG,KAAK,CAAC;IACvB,KAAK,MAAM,MAAM,IAAI,oBAAoB,EAAE,CAAC;QAC1C,MAAM,OAAO,GAAG,IAAI,MAAM,CAAC,MAAM,MAAM,SAAS,EAAE,GAAG,CAAC,CAAC;QACvD,IAAI,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;YACtB,UAAU,GAAG,IAAI,CAAC;YAClB,OAAO,CAAC,IAAI,CAAC,UAAU,MAAM,EAAE,CAAC,CAAC;QACnC,CAAC;IACH,CAAC;IAED,IAAI,cAAc,GAAG,KAAK,CAAC;IAC3B,IAAI,uCAAuC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;QACtD,cAAc,GAAG,IAAI,CAAC;QACtB,OAAO,CAAC,IAAI,CAAC,wBAAwB,CAAC,CAAC;IACzC,CAAC;IAED,MAAM,WAAW,GAAG,UAAU,IAAI,cAAc,CAAC;IAEjD,OAAO;QACL,mBAAmB,EAAE,WAAW;QAChC,kBAAkB,EAAE,UAAU;QAC9B,sBAAsB,EAAE,cAAc;QACtC,eAAe,EAAE,OAAO;KACzB,CAAC;AACJ,CAAC"}

package/dist/next/trpc.d.ts

@@ -0,0 +1,3 @@
+import type { TrpcIndex } from "./types.js";
+export declare function buildTrpcIndex(rootDir: string, appDir: string, _excludeGlobs: string[]): Promise<TrpcIndex>;
+//# sourceMappingURL=trpc.d.ts.map

package/dist/next/trpc.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"trpc.d.ts","sourceRoot":"","sources":["../../src/next/trpc.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,SAAS,EAAkC,MAAM,YAAY,CAAC;AA0B5E,wBAAsB,cAAc,CAClC,OAAO,EAAE,MAAM,EACf,MAAM,EAAE,MAAM,EACd,aAAa,EAAE,MAAM,EAAE,GACtB,OAAO,CAAC,SAAS,CAAC,CA2BpB"}