@hatem427/code-guard-ci 3.0.0 → 3.1.0

package/dist/config/node.config.js

@@ -0,0 +1,363 @@
+"use strict";
+/**
+ * ============================================================================
+ * node.config.ts — Express / Node.js-specific coding rules
+ * ============================================================================
+ *
+ * Registers rules that apply to Express and generic Node.js backend projects:
+ *   - Route handler / service separation
+ *   - Async error propagation
+ *   - Input validation enforcement
+ *   - Security: helmet, CORS, parameterized queries
+ *   - Environment configuration patterns
+ *   - Graceful shutdown
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.nodeRules = void 0;
+const guidelines_config_1 = require("./guidelines.config");
+const nodeRules = [
+    // ── Architecture ──────────────────────────────────────────────────────────
+    // ─────────────────────────────────────────
+    // RULE: node-thin-route-handler
+    // ROLE: Enforce separation of HTTP concerns from business logic
+    // PURPOSE: Route handlers that contain business logic cannot be unit-tested
+    //          without spinning up an Express server. Logic should live in
+    //          service functions that are independently testable.
+    // EXAMPLE:
+    //   WRONG:
+    //     router.post('/users', async (req, res) => {
+    //       const salt = await bcrypt.genSalt();
+    //       const hash = await bcrypt.hash(req.body.password, salt);
+    //       const user = await db.users.create({ ...req.body, password: hash });
+    //       res.status(201).json(user);
+    //     });
+    //   RIGHT:
+    //     router.post('/users', async (req, res, next) => {
+    //       try {
+    //         const user = await userService.createUser(req.body);
+    //         res.status(201).json(user);
+    //       } catch (err) { next(err); }
+    //     });
+    // ─────────────────────────────────────────
+    {
+        id: 'node-thin-route-handler',
+        label: 'Keep route handlers thin — delegate to services',
+        description: 'Route handlers should only parse the request, call a service, and send the response. Business logic belongs in service modules.',
+        severity: 'warning',
+        fileExtensions: ['ts', 'js'],
+        pattern: null,
+        customCheck: (file) => {
+            const violations = [];
+            if (!file.relativePath.includes('/routes/') &&
+                !file.relativePath.endsWith('.router.ts') &&
+                !file.relativePath.endsWith('.routes.ts')) {
+                return [];
+            }
+            const businessPatterns = [
+                { regex: /bcrypt\.(hash|compare|genSalt)/g, label: 'bcrypt hashing' },
+                { regex: /\.save\s*\(|\.create\s*\(/g, label: 'direct ORM calls' },
+                { regex: /jwt\.sign|jwt\.verify/g, label: 'JWT operations' },
+            ];
+            for (let i = 0; i < file.lines.length; i++) {
+                for (const { regex, label } of businessPatterns) {
+                    regex.lastIndex = 0;
+                    if (regex.test(file.lines[i])) {
+                        violations.push({
+                            line: i + 1,
+                            message: `Business logic (${label}) found in route handler. Move to a service module.`,
+                        });
+                    }
+                }
+            }
+            return violations;
+        },
+        applicableTo: ['node'],
+        category: 'Architecture',
+    },
+    // ── Async & Error Handling ─────────────────────────────────────────────────
+    // ─────────────────────────────────────────
+    // RULE: node-async-next-error
+    // ROLE: Enforce error propagation in async route handlers
+    // PURPOSE: Without next(err), an error thrown in an async handler
+    //          produces an unhandled promise rejection, not a proper HTTP 500.
+    //          Wrapping with try/catch + next(err) — or using express-async-errors
+    //          — ensures errors reach the global error-handling middleware.
+    // EXAMPLE:
+    //   WRONG:
+    //     router.get('/users', async (req, res) => {
+    //       const users = await userService.findAll(); // throws → unhandled rejection
+    //       res.json(users);
+    //     });
+    //   RIGHT:
+    //     router.get('/users', async (req, res, next) => {
+    //       try {
+    //         const users = await userService.findAll();
+    //         res.json(users);
+    //       } catch (err) { next(err); }
+    //     });
+    // ─────────────────────────────────────────
+    {
+        id: 'node-async-next-error',
+        label: 'Async route handlers must forward errors to next()',
+        description: 'Async Express route handlers must use try/catch and call next(err) on failure, or use express-async-errors. Unhandled rejections bypass error-handling middleware.',
+        severity: 'error',
+        fileExtensions: ['ts', 'js'],
+        pattern: null,
+        customCheck: (file) => {
+            const violations = [];
+            if (!file.relativePath.includes('/routes/') &&
+                !file.relativePath.endsWith('.router.ts') &&
+                !file.relativePath.endsWith('.routes.ts') &&
+                !file.relativePath.endsWith('.router.js')) {
+                return [];
+            }
+            // Detect async route handlers without try/catch or next(err)
+            const asyncHandlerRegex = /router\.\w+\(['"`][^'"]+['"`]\s*,\s*async\s*\(req/g;
+            let match;
+            while ((match = asyncHandlerRegex.exec(file.content)) !== null) {
+                const afterMatch = file.content.slice(match.index, match.index + 500);
+                if (!afterMatch.includes('try {') && !afterMatch.includes('next(err')) {
+                    // Approximate line number
+                    const lineNum = file.content.slice(0, match.index).split('\n').length;
+                    violations.push({
+                        line: lineNum,
+                        message: 'Async route handler without error handling. Wrap with try/catch and call next(err), or install express-async-errors.',
+                    });
+                }
+            }
+            return violations;
+        },
+        applicableTo: ['node'],
+        category: 'Error Handling',
+    },
+    // ─────────────────────────────────────────
+    // RULE: node-error-middleware-signature
+    // ROLE: Enforce 4-argument error middleware signature
+    // PURPOSE: Express only treats a middleware as an error handler when it
+    //          has exactly 4 parameters (err, req, res, next). A 3-param
+    //          function that happens to receive an error object will not work.
+    // EXAMPLE:
+    //   WRONG:
+    //     app.use((err, res) => { res.status(500).json({ error: err.message }); });
+    //   RIGHT:
+    //     app.use((err: Error, req: Request, res: Response, next: NextFunction) => {
+    //       res.status(err.statusCode ?? 500).json({ message: err.message });
+    //     });
+    // ─────────────────────────────────────────
+    {
+        id: 'node-error-middleware-signature',
+        label: 'Global error handler must have 4 parameters (err, req, res, next)',
+        description: 'Express error-handling middleware must declare exactly 4 parameters: (err, req, res, next). With fewer params, Express will not recognise it as an error handler.',
+        severity: 'error',
+        fileExtensions: ['ts', 'js'],
+        pattern: null,
+        customCheck: (file) => {
+            if (!file.relativePath.includes('error') &&
+                !file.relativePath.includes('middleware') &&
+                !file.relativePath.endsWith('app.ts') &&
+                !file.relativePath.endsWith('server.ts')) {
+                return [];
+            }
+            const violations = [];
+            for (let i = 0; i < file.lines.length; i++) {
+                const line = file.lines[i];
+                // Detect app.use with callback that looks like error handler but has <4 params
+                if (/app\.use\s*\(\s*(?:['"`][^']+['"`]\s*,\s*)?\s*(?:async\s*)?\([^)]*\)\s*=>/.test(line)) {
+                    const params = (line.match(/\(([^)]*)\)/) || [])[1] || '';
+                    const count = params.split(',').filter((p) => p.trim()).length;
+                    if (count === 3 && /err|error/i.test(params)) {
+                        violations.push({
+                            line: i + 1,
+                            message: 'Error-handling middleware must declare 4 parameters: (err, req, res, next). Express uses arity to detect error handlers.',
+                        });
+                    }
+                }
+            }
+            return violations;
+        },
+        applicableTo: ['node'],
+        category: 'Error Handling',
+    },
+    // ── Input Validation ──────────────────────────────────────────────────────
+    // ─────────────────────────────────────────
+    // RULE: node-validate-request-body
+    // ROLE: Enforce input sanitisation before use
+    // PURPOSE: Using req.body without validation exposes the service to
+    //          malformed data, SQL injection, and XSS. Every route that reads
+    //          req.body must apply a schema validation middleware first.
+    // EXAMPLE:
+    //   WRONG:
+    //     router.post('/users', async (req, res) => {
+    //       const { email, name } = req.body; // unvalidated
+    //     });
+    //   RIGHT:
+    //     import { createUserSchema } from '../schemas/user.schema';
+    //     router.post('/users', validate(createUserSchema), async (req, res) => { ... });
+    // ─────────────────────────────────────────
+    {
+        id: 'node-validate-request-body',
+        label: 'Validate req.body before use',
+        description: 'Always define and apply a validation schema (Zod, Joi, express-validator) for routes that read req.body. Unvalidated input is the root cause of most injection vulnerabilities.',
+        severity: 'warning',
+        fileExtensions: ['ts', 'js'],
+        pattern: null,
+        customCheck: (file) => {
+            const violations = [];
+            if (!file.relativePath.includes('/routes/') &&
+                !file.relativePath.endsWith('.router.ts') &&
+                !file.relativePath.endsWith('.routes.ts')) {
+                return [];
+            }
+            const hasValidation = /validate\s*\(|zValidator|z\.object|Joi\.object|checkSchema|body\s*\(/.test(file.content);
+            if (!hasValidation && /req\.body/.test(file.content)) {
+                violations.push({
+                    line: null,
+                    message: 'req.body is used without any visible validation middleware (Zod, Joi, express-validator). Add a schema validation step before the route handler.',
+                });
+            }
+            return violations;
+        },
+        applicableTo: ['node'],
+        category: 'Security',
+    },
+    // ── Security ──────────────────────────────────────────────────────────────
+    // ─────────────────────────────────────────
+    // RULE: node-use-helmet
+    // ROLE: Enforce security headers
+    // PURPOSE: Without Helmet, Express servers are vulnerable to well-known
+    //          HTTP header-based attacks (clickjacking, MIME-sniffing, XSS via
+    //          missing CSP). Helmet sets a secure baseline in one call.
+    // EXAMPLE:
+    //   WRONG:
+    //     const app = express();
+    //     app.use(cors());
+    //   RIGHT:
+    //     const app = express();
+    //     app.use(helmet());
+    //     app.use(cors({ origin: allowedOrigins }));
+    // ─────────────────────────────────────────
+    {
+        id: 'node-use-helmet',
+        label: 'Use helmet() for security headers',
+        description: 'Apply helmet() middleware in the Express app setup to set secure HTTP headers (Content-Security-Policy, X-Frame-Options, HSTS, etc.).',
+        severity: 'error',
+        fileExtensions: ['ts', 'js'],
+        pattern: null,
+        customCheck: (file) => {
+            if (!file.relativePath.endsWith('app.ts') &&
+                !file.relativePath.endsWith('server.ts') &&
+                !file.relativePath.endsWith('app.js') &&
+                !file.relativePath.endsWith('server.js')) {
+                return [];
+            }
+            const hasExpress = /express\s*\(\s*\)/.test(file.content);
+            const hasHelmet = /helmet\s*\(\s*\)/.test(file.content);
+            if (hasExpress && !hasHelmet) {
+                return [
+                    {
+                        line: null,
+                        message: 'Express app is missing helmet(). Install helmet and add app.use(helmet()) before other middleware.',
+                    },
+                ];
+            }
+            return [];
+        },
+        applicableTo: ['node'],
+        category: 'Security',
+    },
+    // ─────────────────────────────────────────
+    // RULE: node-no-process-env-scatter
+    // ROLE: Centralise configuration access
+    // PURPOSE: Using process.env in route handlers and services scatters
+    //          configuration reads, prevents startup validation, and makes
+    //          tests hard to write (no clean injection point).
+    //          Validate env vars once at startup in a config module.
+    // EXAMPLE:
+    //   WRONG:
+    //     const secret = process.env['JWT_SECRET'];
+    //   RIGHT:
+    //     import { config } from '../config'; // validated at startup
+    //     const secret = config.jwtSecret;
+    // ─────────────────────────────────────────
+    {
+        id: 'node-no-process-env-scatter',
+        label: 'Centralise process.env access in a config module',
+        description: 'Do not read process.env in route handlers, services, or models. Validate env vars at startup in a dedicated config module and import from there.',
+        severity: 'warning',
+        fileExtensions: ['ts', 'js'],
+        pattern: null,
+        customCheck: (file) => {
+            const violations = [];
+            // Skip config/env files
+            if (file.relativePath.includes('/config/') ||
+                file.relativePath.includes('.config.') ||
+                file.relativePath.endsWith('env.ts') ||
+                file.relativePath.endsWith('env.js') ||
+                file.relativePath.endsWith('main.ts') ||
+                file.relativePath.endsWith('server.ts')) {
+                return [];
+            }
+            for (let i = 0; i < file.lines.length; i++) {
+                if (/process\.env\b/.test(file.lines[i])) {
+                    violations.push({
+                        line: i + 1,
+                        message: 'process.env read inside business code. Move to a config module (validated at startup) and import from there.',
+                    });
+                }
+            }
+            return violations;
+        },
+        applicableTo: ['node'],
+        category: 'Security',
+    },
+    // ── Graceful Shutdown ─────────────────────────────────────────────────────
+    // ─────────────────────────────────────────
+    // RULE: node-graceful-shutdown
+    // ROLE: Enforce graceful process shutdown
+    // PURPOSE: Without SIGTERM handling, a Node.js server terminates
+    //          immediately when the container or OS signals shutdown.
+    //          In-flight requests are cut short, and DB connections leak.
+    //          Graceful shutdown waits for open connections to close first.
+    // EXAMPLE:
+    //   WRONG:
+    //     server.listen(port);
+    //   RIGHT:
+    //     server.listen(port);
+    //     process.on('SIGTERM', () => {
+    //       server.close(() => { db.end(); process.exit(0); });
+    //     });
+    // ─────────────────────────────────────────
+    {
+        id: 'node-graceful-shutdown',
+        label: 'Handle SIGTERM for graceful shutdown',
+        description: 'Listen for SIGTERM and SIGINT signals to close the HTTP server and DB connections gracefully before exiting. Required in containerised environments.',
+        severity: 'warning',
+        fileExtensions: ['ts', 'js'],
+        pattern: null,
+        customCheck: (file) => {
+            if (!file.relativePath.endsWith('main.ts') &&
+                !file.relativePath.endsWith('server.ts') &&
+                !file.relativePath.endsWith('index.ts') &&
+                !file.relativePath.endsWith('server.js')) {
+                return [];
+            }
+            const hasSigterm = /SIGTERM|SIGINT/.test(file.content);
+            const hasServerListen = /\.listen\s*\(/.test(file.content);
+            if (hasServerListen && !hasSigterm) {
+                return [
+                    {
+                        line: null,
+                        message: 'Server starts but no SIGTERM/SIGINT handler found. Add graceful shutdown: process.on("SIGTERM", () => server.close(() => process.exit(0)))',
+                    },
+                ];
+            }
+            return [];
+        },
+        applicableTo: ['node'],
+        category: 'Reliability',
+    },
+];
+exports.nodeRules = nodeRules;
+// Register all Node.js (Express) specific rules
+(0, guidelines_config_1.registerRules)('node', nodeRules);
+//# sourceMappingURL=node.config.js.map

package/dist/config/node.config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"node.config.js","sourceRoot":"","sources":["../../config/node.config.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;GAYG;;;AAEH,2DAA0D;AAE1D,MAAM,SAAS,GAAW;IAExB,6EAA6E;IAE7E,4CAA4C;IAC5C,gCAAgC;IAChC,gEAAgE;IAChE,4EAA4E;IAC5E,uEAAuE;IACvE,8DAA8D;IAC9D,WAAW;IACX,WAAW;IACX,kDAAkD;IAClD,6CAA6C;IAC7C,iEAAiE;IACjE,6EAA6E;IAC7E,oCAAoC;IACpC,UAAU;IACV,WAAW;IACX,wDAAwD;IACxD,cAAc;IACd,+DAA+D;IAC/D,sCAAsC;IACtC,qCAAqC;IACrC,UAAU;IACV,4CAA4C;IAC5C;QACE,EAAE,EAAE,yBAAyB;QAC7B,KAAK,EAAE,iDAAiD;QACxD,WAAW,EACT,iIAAiI;QACnI,QAAQ,EAAE,SAAS;QACnB,cAAc,EAAE,CAAC,IAAI,EAAE,IAAI,CAAC;QAC5B,OAAO,EAAE,IAAI;QACb,WAAW,EAAE,CAAC,IAAI,EAAE,EAAE;YACpB,MAAM,UAAU,GAAoD,EAAE,CAAC;YAEvE,IACE,CAAC,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,UAAU,CAAC;gBACvC,CAAC,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,YAAY,CAAC;gBACzC,CAAC,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,YAAY,CAAC,EACzC,CAAC;gBACD,OAAO,EAAE,CAAC;YACZ,CAAC;YAED,MAAM,gBAAgB,GAAG;gBACvB,EAAE,KAAK,EAAE,iCAAiC,EAAE,KAAK,EAAE,gBAAgB,EAAE;gBACrE,EAAE,KAAK,EAAE,4BAA4B,EAAE,KAAK,EAAE,kBAAkB,EAAE;gBAClE,EAAE,KAAK,EAAE,wBAAwB,EAAE,KAAK,EAAE,gBAAgB,EAAE;aAC7D,CAAC;YAEF,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;gBAC3C,KAAK,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,gBAAgB,EAAE,CAAC;oBAChD,KAAK,CAAC,SAAS,GAAG,CAAC,CAAC;oBACpB,IAAI,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;wBAC9B,UAAU,CAAC,IAAI,CAAC;4BACd,IAAI,EAAE,CAAC,GAAG,CAAC;4BACX,OAAO,EAAE,mBAAmB,KAAK,qDAAqD;yBACvF,CAAC,CAAC;oBACL,CAAC;gBACH,CAAC;YACH,CAAC;YAED,OAAO,UAAU,CAAC;QACpB,CAAC;QACD,YAAY,EAAE,CAAC,MAAM,CAAC;QACtB,QAAQ,EAAE,cAAc;KACzB;IAED,8EAA8E;IAE9E,4CAA4C;IAC5C,8BAA8B;IAC9B,0DAA0D;IAC1D,kEAAkE;IAClE,2EAA2E;IAC3E,+EAA+E;IAC/E,wEAAwE;IACxE,WAAW;IACX,WAAW;IACX,iDAAiD;IACjD,mFAAmF;IACnF,yBAAyB;IACzB,UAAU;IACV,WAAW;IACX,uDAAuD;IACvD,cAAc;IACd,qDAAqD;IACrD,2BAA2B;IAC3B,qCAAqC;IACrC,UAAU;IACV,4CAA4C;IAC5C;QACE,EAAE,EAAE,uBAAuB;QAC3B,KAAK,EAAE,oDAAoD;QAC3D,WAAW,EACT,oKAAoK;QACtK,QAAQ,EAAE,OAAO;QACjB,cAAc,EAAE,CAAC,IAAI,EAAE,IAAI,CAAC;QAC5B,OAAO,EAAE,IAAI;QACb,WAAW,EAAE,CAAC,IAAI,EAAE,EAAE;YACpB,MAAM,UAAU,GAAoD,EAAE,CAAC;YAEvE,IACE,CAAC,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,UAAU,CAAC;gBACvC,CAAC,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,YAAY,CAAC;gBACzC,CAAC,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,YAAY,CAAC;gBACzC,CAAC,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,YAAY,CAAC,EACzC,CAAC;gBACD,OAAO,EAAE,CAAC;YACZ,CAAC;YAED,6DAA6D;YAC7D,MAAM,iBAAiB,GAAG,oDAAoD,CAAC;YAC/E,IAAI,KAAK,CAAC;YACV,OAAO,CAAC,KAAK,GAAG,iBAAiB,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;gBAC/D,MAAM,UAAU,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,EAAE,KAAK,CAAC,KAAK,GAAG,GAAG,CAAC,CAAC;gBACtE,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC;oBACtE,0BAA0B;oBAC1B,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC;oBACtE,UAAU,CAAC,IAAI,CAAC;wBACd,IAAI,EAAE,OAAO;wBACb,OAAO,EACL,sHAAsH;qBACzH,CAAC,CAAC;gBACL,CAAC;YACH,CAAC;YAED,OAAO,UAAU,CAAC;QACpB,CAAC;QACD,YAAY,EAAE,CAAC,MAAM,CAAC;QACtB,QAAQ,EAAE,gBAAgB;KAC3B;IAED,4CAA4C;IAC5C,wCAAwC;IACxC,sDAAsD;IACtD,wEAAwE;IACxE,qEAAqE;IACrE,2EAA2E;IAC3E,WAAW;IACX,WAAW;IACX,gFAAgF;IAChF,WAAW;IACX,iFAAiF;IACjF,0EAA0E;IAC1E,UAAU;IACV,4CAA4C;IAC5C;QACE,EAAE,EAAE,iCAAiC;QACrC,KAAK,EAAE,mEAAmE;QAC1E,WAAW,EACT,mKAAmK;QACrK,QAAQ,EAAE,OAAO;QACjB,cAAc,EAAE,CAAC,IAAI,EAAE,IAAI,CAAC;QAC5B,OAAO,EAAE,IAAI;QACb,WAAW,EAAE,CAAC,IAAI,EAAE,EAAE;YACpB,IACE,CAAC,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,OAAO,CAAC;gBACpC,CAAC,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,YAAY,CAAC;gBACzC,CAAC,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,QAAQ,CAAC;gBACrC,CAAC,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,WAAW,CAAC,EACxC,CAAC;gBACD,OAAO,EAAE,CAAC;YACZ,CAAC;YAED,MAAM,UAAU,GAAoD,EAAE,CAAC;YAEvE,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;gBAC3C,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;gBAC3B,+EAA+E;gBAC/E,IAAI,2EAA2E,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;oBAC3F,MAAM,MAAM,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;oBAC1D,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAS,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC;oBACvE,IAAI,KAAK,KAAK,CAAC,IAAI,YAAY,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;wBAC7C,UAAU,CAAC,IAAI,CAAC;4BACd,IAAI,EAAE,CAAC,GAAG,CAAC;4BACX,OAAO,EACL,0HAA0H;yBAC7H,CAAC,CAAC;oBACL,CAAC;gBACH,CAAC;YACH,CAAC;YAED,OAAO,UAAU,CAAC;QACpB,CAAC;QACD,YAAY,EAAE,CAAC,MAAM,CAAC;QACtB,QAAQ,EAAE,gBAAgB;KAC3B;IAED,6EAA6E;IAE7E,4CAA4C;IAC5C,mCAAmC;IACnC,8CAA8C;IAC9C,oEAAoE;IACpE,0EAA0E;IAC1E,qEAAqE;IACrE,WAAW;IACX,WAAW;IACX,kDAAkD;IAClD,yDAAyD;IACzD,UAAU;IACV,WAAW;IACX,iEAAiE;IACjE,sFAAsF;IACtF,4CAA4C;IAC5C;QACE,EAAE,EAAE,4BAA4B;QAChC,KAAK,EAAE,8BAA8B;QACrC,WAAW,EACT,iLAAiL;QACnL,QAAQ,EAAE,SAAS;QACnB,cAAc,EAAE,CAAC,IAAI,EAAE,IAAI,CAAC;QAC5B,OAAO,EAAE,IAAI;QACb,WAAW,EAAE,CAAC,IAAI,EAAE,EAAE;YACpB,MAAM,UAAU,GAAoD,EAAE,CAAC;YAEvE,IACE,CAAC,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,UAAU,CAAC;gBACvC,CAAC,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,YAAY,CAAC;gBACzC,CAAC,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,YAAY,CAAC,EACzC,CAAC;gBACD,OAAO,EAAE,CAAC;YACZ,CAAC;YAED,MAAM,aAAa,GAAG,sEAAsE,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YAEhH,IAAI,CAAC,aAAa,IAAI,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;gBACrD,UAAU,CAAC,IAAI,CAAC;oBACd,IAAI,EAAE,IAAI;oBACV,OAAO,EACL,kJAAkJ;iBACrJ,CAAC,CAAC;YACL,CAAC;YAED,OAAO,UAAU,CAAC;QACpB,CAAC;QACD,YAAY,EAAE,CAAC,MAAM,CAAC;QACtB,QAAQ,EAAE,UAAU;KACrB;IAED,6EAA6E;IAE7E,4CAA4C;IAC5C,wBAAwB;IACxB,iCAAiC;IACjC,wEAAwE;IACxE,2EAA2E;IAC3E,oEAAoE;IACpE,WAAW;IACX,WAAW;IACX,6BAA6B;IAC7B,uBAAuB;IACvB,WAAW;IACX,6BAA6B;IAC7B,yBAAyB;IACzB,iDAAiD;IACjD,4CAA4C;IAC5C;QACE,EAAE,EAAE,iBAAiB;QACrB,KAAK,EAAE,mCAAmC;QAC1C,WAAW,EACT,uIAAuI;QACzI,QAAQ,EAAE,OAAO;QACjB,cAAc,EAAE,CAAC,IAAI,EAAE,IAAI,CAAC;QAC5B,OAAO,EAAE,IAAI;QACb,WAAW,EAAE,CAAC,IAAI,EAAE,EAAE;YACpB,IACE,CAAC,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,QAAQ,CAAC;gBACrC,CAAC,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,WAAW,CAAC;gBACxC,CAAC,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,QAAQ,CAAC;gBACrC,CAAC,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,WAAW,CAAC,EACxC,CAAC;gBACD,OAAO,EAAE,CAAC;YACZ,CAAC;YAED,MAAM,UAAU,GAAG,mBAAmB,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YAC1D,MAAM,SAAS,GAAG,kBAAkB,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YAExD,IAAI,UAAU,IAAI,CAAC,SAAS,EAAE,CAAC;gBAC7B,OAAO;oBACL;wBACE,IAAI,EAAE,IAAI;wBACV,OAAO,EACL,oGAAoG;qBACvG;iBACF,CAAC;YACJ,CAAC;YAED,OAAO,EAAE,CAAC;QACZ,CAAC;QACD,YAAY,EAAE,CAAC,MAAM,CAAC;QACtB,QAAQ,EAAE,UAAU;KACrB;IAED,4CAA4C;IAC5C,oCAAoC;IACpC,wCAAwC;IACxC,qEAAqE;IACrE,uEAAuE;IACvE,2DAA2D;IAC3D,iEAAiE;IACjE,WAAW;IACX,WAAW;IACX,gDAAgD;IAChD,WAAW;IACX,kEAAkE;IAClE,uCAAuC;IACvC,4CAA4C;IAC5C;QACE,EAAE,EAAE,6BAA6B;QACjC,KAAK,EAAE,kDAAkD;QACzD,WAAW,EACT,kJAAkJ;QACpJ,QAAQ,EAAE,SAAS;QACnB,cAAc,EAAE,CAAC,IAAI,EAAE,IAAI,CAAC;QAC5B,OAAO,EAAE,IAAI;QACb,WAAW,EAAE,CAAC,IAAI,EAAE,EAAE;YACpB,MAAM,UAAU,GAAoD,EAAE,CAAC;YAEvE,wBAAwB;YACxB,IACE,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,UAAU,CAAC;gBACtC,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,UAAU,CAAC;gBACtC,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,QAAQ,CAAC;gBACpC,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,QAAQ,CAAC;gBACpC,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,SAAS,CAAC;gBACrC,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,WAAW,CAAC,EACvC,CAAC;gBACD,OAAO,EAAE,CAAC;YACZ,CAAC;YAED,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;gBAC3C,IAAI,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;oBACzC,UAAU,CAAC,IAAI,CAAC;wBACd,IAAI,EAAE,CAAC,GAAG,CAAC;wBACX,OAAO,EACL,8GAA8G;qBACjH,CAAC,CAAC;gBACL,CAAC;YACH,CAAC;YAED,OAAO,UAAU,CAAC;QACpB,CAAC;QACD,YAAY,EAAE,CAAC,MAAM,CAAC;QACtB,QAAQ,EAAE,UAAU;KACrB;IAED,6EAA6E;IAE7E,4CAA4C;IAC5C,+BAA+B;IAC/B,0CAA0C;IAC1C,iEAAiE;IACjE,kEAAkE;IAClE,sEAAsE;IACtE,wEAAwE;IACxE,WAAW;IACX,WAAW;IACX,2BAA2B;IAC3B,WAAW;IACX,2BAA2B;IAC3B,oCAAoC;IACpC,4DAA4D;IAC5D,UAAU;IACV,4CAA4C;IAC5C;QACE,EAAE,EAAE,wBAAwB;QAC5B,KAAK,EAAE,sCAAsC;QAC7C,WAAW,EACT,sJAAsJ;QACxJ,QAAQ,EAAE,SAAS;QACnB,cAAc,EAAE,CAAC,IAAI,EAAE,IAAI,CAAC;QAC5B,OAAO,EAAE,IAAI;QACb,WAAW,EAAE,CAAC,IAAI,EAAE,EAAE;YACpB,IACE,CAAC,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,SAAS,CAAC;gBACtC,CAAC,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,WAAW,CAAC;gBACxC,CAAC,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,UAAU,CAAC;gBACvC,CAAC,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,WAAW,CAAC,EACxC,CAAC;gBACD,OAAO,EAAE,CAAC;YACZ,CAAC;YAED,MAAM,UAAU,GAAG,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YACvD,MAAM,eAAe,GAAG,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YAE3D,IAAI,eAAe,IAAI,CAAC,UAAU,EAAE,CAAC;gBACnC,OAAO;oBACL;wBACE,IAAI,EAAE,IAAI;wBACV,OAAO,EACL,4IAA4I;qBAC/I;iBACF,CAAC;YACJ,CAAC;YAED,OAAO,EAAE,CAAC;QACZ,CAAC;QACD,YAAY,EAAE,CAAC,MAAM,CAAC;QACtB,QAAQ,EAAE,aAAa;KACxB;CACF,CAAC;AAKO,8BAAS;AAHlB,gDAAgD;AAChD,IAAA,iCAAa,EAAC,MAAM,EAAE,SAAS,CAAC,CAAC"}

package/dist/config/python.config.d.ts

@@ -0,0 +1,15 @@
+/**
+ * ============================================================================
+ * python.config.ts — Python-specific coding rules
+ * ============================================================================
+ *
+ * Registers rules that apply to Python projects (Django, FastAPI, Flask,
+ * and generic Python). Rules are applied based on the `applicableTo` field:
+ *   - ['python']              → all Python projects
+ *   - ['django']              → Django only
+ *   - ['fastapi']             → FastAPI only
+ *   - ['flask']               → Flask only
+ *   - ['django', 'fastapi']   → multi-framework
+ */
+export {};
+//# sourceMappingURL=python.config.d.ts.map

package/dist/config/python.config.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"python.config.d.ts","sourceRoot":"","sources":["../../config/python.config.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG"}