@mr.dj2u/doctor 0.1.6 → 0.1.8

package/dist/checks/animation-performance.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"animation-performance.d.ts","sourceRoot":"","sources":["../../src/checks/animation-performance.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AASrD,wBAAsB,yBAAyB,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,iBAAiB,CAAC,CA2C/F;AAED,wBAAsB,4BAA4B,CAChD,WAAW,EAAE,MAAM,EACnB,QAAQ,EAAE,MAAM,GACf,OAAO,CAAC,iBAAiB,CAAC,CAuB5B"}
+{"version":3,"file":"animation-performance.d.ts","sourceRoot":"","sources":["../../src/checks/animation-performance.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AASrD,wBAAsB,yBAAyB,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,iBAAiB,CAAC,CA8C/F;AAED,wBAAsB,4BAA4B,CAChD,WAAW,EAAE,MAAM,EACnB,QAAQ,EAAE,MAAM,GACf,OAAO,CAAC,iBAAiB,CAAC,CAuB5B"}

package/dist/checks/animation-performance.js

@@ -14,6 +14,9 @@ export async function checkAnimationPerformance(projectPath) {
     const findings = [];
     let scannedAnimatedFiles = 0;
     for (const filePath of sourceFiles) {
+        if (findings.length >= 50) {
+            break;
+        }
         const contents = await readOptionalText(filePath);
         if (!contents || !ANIMATION_SIGNAL_RE.test(contents)) {
             continue;

package/dist/checks/animation-performance.js.map

@@ -1 +1 @@
-{"version":3,"file":"animation-performance.js","sourceRoot":"","sources":["../../src/checks/animation-performance.ts"],"names":[],"mappings":"AAAA,OAAO,IAAI,MAAM,WAAW,CAAC;AAG7B,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,gBAAgB,EAAE,QAAQ,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AAEnG,MAAM,mBAAmB,GACvB,4MAA4M,CAAC;AAE/M,MAAM,mBAAmB,GACvB,qHAAqH,CAAC;AAExH,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAAC,WAAmB;IACjE,IAAI,CAAC,CAAC,MAAM,UAAU,CAAC,WAAW,CAAC,CAAC,EAAE,CAAC;QACrC,OAAO;YACL,IAAI,EAAE,uBAAuB;YAC7B,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,gEAAgE;SAC1E,CAAC;IACJ,CAAC;IAED,MAAM,WAAW,GAAG,MAAM,SAAS,CAAC,WAAW,EAAE,CAAC,QAAQ,EAAE,EAAE,CAAC,iBAAiB,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;IAC9G,MAAM,QAAQ,GAAa,EAAE,CAAC;IAC9B,IAAI,oBAAoB,GAAG,CAAC,CAAC;IAE7B,KAAK,MAAM,QAAQ,IAAI,WAAW,EAAE,CAAC;QACnC,MAAM,QAAQ,GAAG,MAAM,gBAAgB,CAAC,QAAQ,CAAC,CAAC;QAClD,IAAI,CAAC,QAAQ,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;YACrD,SAAS;QACX,CAAC;QACD,oBAAoB,IAAI,CAAC,CAAC;QAC1B,QAAQ,CAAC,IAAI,CAAC,GAAG,iBAAiB,CAAC,WAAW,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAAC,CAAC;IACvE,CAAC;IAED,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACxB,OAAO;YACL,IAAI,EAAE,uBAAuB;YAC7B,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,oDAAoD;YAC7D,OAAO,EAAE;gBACP,QAAQ,EAAE,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC;gBAC/B,SAAS,EAAE,QAAQ,CAAC,MAAM,GAAG,EAAE;gBAC/B,oBAAoB;aACrB;SACF,CAAC;IACJ,CAAC;IAED,OAAO;QACL,IAAI,EAAE,uBAAuB;QAC7B,MAAM,EAAE,oBAAoB,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM;QAClD,OAAO,EACL,oBAAoB,GAAG,CAAC;YACtB,CAAC,CAAC,2DAA2D;YAC7D,CAAC,CAAC,oCAAoC;KAC3C,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,4BAA4B,CAChD,WAAmB,EACnB,QAAgB;IAEhB,MAAM,QAAQ,GAAG,CAAC,MAAM,gBAAgB,CAAC,QAAQ,CAAC,CAAC,IAAI,EAAE,CAAC;IAC1D,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;QACxC,OAAO;YACL,IAAI,EAAE,uBAAuB;YAC7B,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,gDAAgD;SAC1D,CAAC;IACJ,CAAC;IAED,MAAM,QAAQ,GAAG,iBAAiB,CAAC,WAAW,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAAC;IACpE,OAAO,QAAQ,CAAC,MAAM,GAAG,CAAC;QACxB,CAAC,CAAC;YACE,IAAI,EAAE,uBAAuB;YAC7B,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,0CAA0C;YACnD,OAAO,EAAE,EAAE,QAAQ,EAAE;SACtB;QACH,CAAC,CAAC;YACE,IAAI,EAAE,uBAAuB;YAC7B,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,0CAA0C;SACpD,CAAC;AACR,CAAC;AAED,SAAS,iBAAiB,CAAC,WAAmB,EAAE,QAAgB,EAAE,QAAgB;IAChF,MAAM,QAAQ,GAAa,EAAE,CAAC;IAC9B,MAAM,OAAO,GAAG,cAAc,CAAC,QAAQ,CAAC,CAAC;IACzC,MAAM,SAAS,GAAG,QAAQ,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC;IAClD,MAAM,WAAW,GAAG,sBAAsB,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IAC3D,MAAM,kBAAkB,GAAG,mBAAmB,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IAC9D,MAAM,iBAAiB,GACrB,OAAO,CAAC,gBAAgB,GAAG,OAAO,CAAC,kBAAkB,GAAG,OAAO,CAAC,kBAAkB,GAAG,OAAO,CAAC,iBAAiB,CAAC;IAEjH,IACE,OAAO,CAAC,mBAAmB,IAAI,CAAC;QAChC,CAAC,OAAO,CAAC,aAAa,GAAG,CAAC,IAAI,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;QACnD,CAAC,kBAAkB,EACnB,CAAC;QACD,QAAQ,CAAC,IAAI,CACX,GAAG,SAAS,qGAAqG,CAClH,CAAC;IACJ,CAAC;IAED,IACE,OAAO,CAAC,iBAAiB,GAAG,CAAC;QAC7B,CAAC,iBAAiB,IAAI,EAAE,IAAI,OAAO,CAAC,gBAAgB,IAAI,CAAC,IAAI,OAAO,CAAC,kBAAkB,IAAI,CAAC,CAAC;QAC7F,CAAC,kBAAkB,EACnB,CAAC;QACD,QAAQ,CAAC,IAAI,CACX,GAAG,SAAS,6FAA6F,CAC1G,CAAC;IACJ,CAAC;IAED,IACE,WAAW;QACX,OAAO,CAAC,SAAS,IAAI,GAAG;QACxB,CAAC,OAAO,CAAC,gBAAgB,GAAG,OAAO,CAAC,kBAAkB,GAAG,OAAO,CAAC,gBAAgB,IAAI,CAAC;YACpF,OAAO,CAAC,mBAAmB,IAAI,CAAC,CAAC,EACnC,CAAC;QACD,QAAQ,CAAC,IAAI,CACX,GAAG,SAAS,qIAAqI,CAClJ,CAAC;IACJ,CAAC;IAED,IACE,OAAO,CAAC,WAAW,GAAG,CAAC;QACvB,OAAO,CAAC,SAAS,IAAI,GAAG;QACxB,OAAO,CAAC,mBAAmB,IAAI,CAAC;QAChC,CAAC,kBAAkB,EACnB,CAAC;QACD,QAAQ,CAAC,IAAI,CACX,GAAG,SAAS,0HAA0H,CACvI,CAAC;IACJ,CAAC;IAED,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,SAAS,cAAc,CAAC,QAAgB;IAYtC,OAAO;QACL,SAAS,EAAE,QAAQ,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,MAAM;QAC1C,gBAAgB,EAAE,YAAY,CAAC,QAAQ,EAAE,sBAAsB,CAAC;QAChE,kBAAkB,EAAE,YAAY,CAAC,QAAQ,EAAE,2BAA2B,CAAC;QACvE,gBAAgB,EAAE,YAAY,CAAC,QAAQ,EAAE,yBAAyB,CAAC;QACnE,kBAAkB,EAAE,YAAY,CAAC,QAAQ,EAAE,+DAA+D,CAAC;QAC3G,iBAAiB,EAAE,YAAY,CAAC,QAAQ,EAAE,yEAAyE,CAAC;QACpH,mBAAmB,EAAE,YAAY,CAAC,QAAQ,EAAE,uFAAuF,CAAC;QACpI,aAAa,EAAE,YAAY,CAAC,QAAQ,EAAE,wCAAwC,CAAC;QAC/E,QAAQ,EAAE,YAAY,CAAC,QAAQ,EAAE,cAAc,CAAC;QAChD,WAAW,EAAE,YAAY,CAAC,QAAQ,EAAE,wCAAwC,CAAC;KAC9E,CAAC;AACJ,CAAC;AAED,SAAS,YAAY,CAAC,QAAgB,EAAE,OAAe;IACrD,OAAO,CAAC,GAAG,QAAQ,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC;AAChD,CAAC"}
+{"version":3,"file":"animation-performance.js","sourceRoot":"","sources":["../../src/checks/animation-performance.ts"],"names":[],"mappings":"AAAA,OAAO,IAAI,MAAM,WAAW,CAAC;AAG7B,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,gBAAgB,EAAE,QAAQ,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AAEnG,MAAM,mBAAmB,GACvB,4MAA4M,CAAC;AAE/M,MAAM,mBAAmB,GACvB,qHAAqH,CAAC;AAExH,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAAC,WAAmB;IACjE,IAAI,CAAC,CAAC,MAAM,UAAU,CAAC,WAAW,CAAC,CAAC,EAAE,CAAC;QACrC,OAAO;YACL,IAAI,EAAE,uBAAuB;YAC7B,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,gEAAgE;SAC1E,CAAC;IACJ,CAAC;IAED,MAAM,WAAW,GAAG,MAAM,SAAS,CAAC,WAAW,EAAE,CAAC,QAAQ,EAAE,EAAE,CAAC,iBAAiB,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;IAC9G,MAAM,QAAQ,GAAa,EAAE,CAAC;IAC9B,IAAI,oBAAoB,GAAG,CAAC,CAAC;IAE7B,KAAK,MAAM,QAAQ,IAAI,WAAW,EAAE,CAAC;QACnC,IAAI,QAAQ,CAAC,MAAM,IAAI,EAAE,EAAE,CAAC;YAC1B,MAAM;QACR,CAAC;QACD,MAAM,QAAQ,GAAG,MAAM,gBAAgB,CAAC,QAAQ,CAAC,CAAC;QAClD,IAAI,CAAC,QAAQ,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;YACrD,SAAS;QACX,CAAC;QACD,oBAAoB,IAAI,CAAC,CAAC;QAC1B,QAAQ,CAAC,IAAI,CAAC,GAAG,iBAAiB,CAAC,WAAW,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAAC,CAAC;IACvE,CAAC;IAED,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACxB,OAAO;YACL,IAAI,EAAE,uBAAuB;YAC7B,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,oDAAoD;YAC7D,OAAO,EAAE;gBACP,QAAQ,EAAE,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC;gBAC/B,SAAS,EAAE,QAAQ,CAAC,MAAM,GAAG,EAAE;gBAC/B,oBAAoB;aACrB;SACF,CAAC;IACJ,CAAC;IAED,OAAO;QACL,IAAI,EAAE,uBAAuB;QAC7B,MAAM,EAAE,oBAAoB,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM;QAClD,OAAO,EACL,oBAAoB,GAAG,CAAC;YACtB,CAAC,CAAC,2DAA2D;YAC7D,CAAC,CAAC,oCAAoC;KAC3C,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,4BAA4B,CAChD,WAAmB,EACnB,QAAgB;IAEhB,MAAM,QAAQ,GAAG,CAAC,MAAM,gBAAgB,CAAC,QAAQ,CAAC,CAAC,IAAI,EAAE,CAAC;IAC1D,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;QACxC,OAAO;YACL,IAAI,EAAE,uBAAuB;YAC7B,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,gDAAgD;SAC1D,CAAC;IACJ,CAAC;IAED,MAAM,QAAQ,GAAG,iBAAiB,CAAC,WAAW,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAAC;IACpE,OAAO,QAAQ,CAAC,MAAM,GAAG,CAAC;QACxB,CAAC,CAAC;YACE,IAAI,EAAE,uBAAuB;YAC7B,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,0CAA0C;YACnD,OAAO,EAAE,EAAE,QAAQ,EAAE;SACtB;QACH,CAAC,CAAC;YACE,IAAI,EAAE,uBAAuB;YAC7B,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,0CAA0C;SACpD,CAAC;AACR,CAAC;AAED,SAAS,iBAAiB,CAAC,WAAmB,EAAE,QAAgB,EAAE,QAAgB;IAChF,MAAM,QAAQ,GAAa,EAAE,CAAC;IAC9B,MAAM,OAAO,GAAG,cAAc,CAAC,QAAQ,CAAC,CAAC;IACzC,MAAM,SAAS,GAAG,QAAQ,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC;IAClD,MAAM,WAAW,GAAG,sBAAsB,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IAC3D,MAAM,kBAAkB,GAAG,mBAAmB,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IAC9D,MAAM,iBAAiB,GACrB,OAAO,CAAC,gBAAgB,GAAG,OAAO,CAAC,kBAAkB,GAAG,OAAO,CAAC,kBAAkB,GAAG,OAAO,CAAC,iBAAiB,CAAC;IAEjH,IACE,OAAO,CAAC,mBAAmB,IAAI,CAAC;QAChC,CAAC,OAAO,CAAC,aAAa,GAAG,CAAC,IAAI,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;QACnD,CAAC,kBAAkB,EACnB,CAAC;QACD,QAAQ,CAAC,IAAI,CACX,GAAG,SAAS,qGAAqG,CAClH,CAAC;IACJ,CAAC;IAED,IACE,OAAO,CAAC,iBAAiB,GAAG,CAAC;QAC7B,CAAC,iBAAiB,IAAI,EAAE,IAAI,OAAO,CAAC,gBAAgB,IAAI,CAAC,IAAI,OAAO,CAAC,kBAAkB,IAAI,CAAC,CAAC;QAC7F,CAAC,kBAAkB,EACnB,CAAC;QACD,QAAQ,CAAC,IAAI,CACX,GAAG,SAAS,6FAA6F,CAC1G,CAAC;IACJ,CAAC;IAED,IACE,WAAW;QACX,OAAO,CAAC,SAAS,IAAI,GAAG;QACxB,CAAC,OAAO,CAAC,gBAAgB,GAAG,OAAO,CAAC,kBAAkB,GAAG,OAAO,CAAC,gBAAgB,IAAI,CAAC;YACpF,OAAO,CAAC,mBAAmB,IAAI,CAAC,CAAC,EACnC,CAAC;QACD,QAAQ,CAAC,IAAI,CACX,GAAG,SAAS,qIAAqI,CAClJ,CAAC;IACJ,CAAC;IAED,IACE,OAAO,CAAC,WAAW,GAAG,CAAC;QACvB,OAAO,CAAC,SAAS,IAAI,GAAG;QACxB,OAAO,CAAC,mBAAmB,IAAI,CAAC;QAChC,CAAC,kBAAkB,EACnB,CAAC;QACD,QAAQ,CAAC,IAAI,CACX,GAAG,SAAS,0HAA0H,CACvI,CAAC;IACJ,CAAC;IAED,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,SAAS,cAAc,CAAC,QAAgB;IAYtC,OAAO;QACL,SAAS,EAAE,QAAQ,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,MAAM;QAC1C,gBAAgB,EAAE,YAAY,CAAC,QAAQ,EAAE,sBAAsB,CAAC;QAChE,kBAAkB,EAAE,YAAY,CAAC,QAAQ,EAAE,2BAA2B,CAAC;QACvE,gBAAgB,EAAE,YAAY,CAAC,QAAQ,EAAE,yBAAyB,CAAC;QACnE,kBAAkB,EAAE,YAAY,CAAC,QAAQ,EAAE,+DAA+D,CAAC;QAC3G,iBAAiB,EAAE,YAAY,CAAC,QAAQ,EAAE,yEAAyE,CAAC;QACpH,mBAAmB,EAAE,YAAY,CAAC,QAAQ,EAAE,uFAAuF,CAAC;QACpI,aAAa,EAAE,YAAY,CAAC,QAAQ,EAAE,wCAAwC,CAAC;QAC/E,QAAQ,EAAE,YAAY,CAAC,QAAQ,EAAE,cAAc,CAAC;QAChD,WAAW,EAAE,YAAY,CAAC,QAAQ,EAAE,wCAAwC,CAAC;KAC9E,CAAC;AACJ,CAAC;AAED,SAAS,YAAY,CAAC,QAAgB,EAAE,OAAe;IACrD,OAAO,CAAC,GAAG,QAAQ,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC;AAChD,CAAC"}

package/dist/checks/api-safety.d.ts

@@ -0,0 +1,17 @@
+import type { DoctorCheckResult, PackageJson } from '../types.js';
+export interface ApiSafetyFinding {
+    file: string;
+    kind: string;
+    message: string;
+    severity: 'warn' | 'error';
+}
+export declare function checkApiSafety(packageJson: PackageJson, projectPath: string): Promise<DoctorCheckResult>;
+export declare function scanFileApiSafety(projectPath: string, filePath: string, packageJson?: PackageJson): Promise<DoctorCheckResult>;
+export declare function checkAuthChecks(projectPath: string, filePath: string, contents: string): ApiSafetyFinding[];
+export declare function checkMethodValidation(projectPath: string, filePath: string, contents: string): ApiSafetyFinding[];
+export declare function checkInputValidation(projectPath: string, filePath: string, contents: string): ApiSafetyFinding[];
+export declare function checkServiceRole(projectPath: string, filePath: string, contents: string): ApiSafetyFinding[];
+export declare function checkRateLimiting(projectPath: string, filePath: string, contents: string): ApiSafetyFinding[];
+export declare function checkErrorExposure(projectPath: string, filePath: string, contents: string): ApiSafetyFinding[];
+export declare function checkCors(projectPath: string, filePath: string, contents: string): ApiSafetyFinding[];
+//# sourceMappingURL=api-safety.d.ts.map

package/dist/checks/api-safety.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"api-safety.d.ts","sourceRoot":"","sources":["../../src/checks/api-safety.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,iBAAiB,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AA4ClE,MAAM,WAAW,gBAAgB;IAC/B,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC;CAC5B;AAED,wBAAsB,cAAc,CAClC,WAAW,EAAE,WAAW,EACxB,WAAW,EAAE,MAAM,GAClB,OAAO,CAAC,iBAAiB,CAAC,CA4B5B;AAED,wBAAsB,iBAAiB,CACrC,WAAW,EAAE,MAAM,EACnB,QAAQ,EAAE,MAAM,EAChB,WAAW,CAAC,EAAE,WAAW,GACxB,OAAO,CAAC,iBAAiB,CAAC,CAmB5B;AAED,wBAAgB,eAAe,CAC7B,WAAW,EAAE,MAAM,EACnB,QAAQ,EAAE,MAAM,EAChB,QAAQ,EAAE,MAAM,GACf,gBAAgB,EAAE,CAkBpB;AAED,wBAAgB,qBAAqB,CACnC,WAAW,EAAE,MAAM,EACnB,QAAQ,EAAE,MAAM,EAChB,QAAQ,EAAE,MAAM,GACf,gBAAgB,EAAE,CA6BpB;AAED,wBAAgB,oBAAoB,CAClC,WAAW,EAAE,MAAM,EACnB,QAAQ,EAAE,MAAM,EAChB,QAAQ,EAAE,MAAM,GACf,gBAAgB,EAAE,CAsBpB;AAED,wBAAgB,gBAAgB,CAC9B,WAAW,EAAE,MAAM,EACnB,QAAQ,EAAE,MAAM,EAChB,QAAQ,EAAE,MAAM,GACf,gBAAgB,EAAE,CAkBpB;AAED,wBAAgB,iBAAiB,CAC/B,WAAW,EAAE,MAAM,EACnB,QAAQ,EAAE,MAAM,EAChB,QAAQ,EAAE,MAAM,GACf,gBAAgB,EAAE,CAmBpB;AAED,wBAAgB,kBAAkB,CAChC,WAAW,EAAE,MAAM,EACnB,QAAQ,EAAE,MAAM,EAChB,QAAQ,EAAE,MAAM,GACf,gBAAgB,EAAE,CAkCpB;AAED,wBAAgB,SAAS,CACvB,WAAW,EAAE,MAAM,EACnB,QAAQ,EAAE,MAAM,EAChB,QAAQ,EAAE,MAAM,GACf,gBAAgB,EAAE,CA6BpB"}

package/dist/checks/api-safety.js

@@ -0,0 +1,282 @@
+import path from 'node:path';
+import { findExpoRouterApiRouteFiles, hasExpoRouterSignal, isExpoRouterApiRouteFile, isTestLikeFile, } from '../expo-router.js';
+import { readOptionalText, relative, stripJsComments } from '../utils.js';
+const MAX_FINDINGS = 50;
+const NAMED_METHOD_RE = /\bexport\s+(async\s+)?function\s+(GET|POST|PUT|PATCH|DELETE|OPTIONS)\b|\bexport\s+const\s+(GET|POST|PUT|PATCH|DELETE|OPTIONS)\s*=/;
+const DEFAULT_EXPORT_RE = /\bexport\s+default\b/;
+const REQUEST_METHOD_RE = /\brequest\.method\b/;
+const BODY_READ_RE = /\brequest\.(json|formData)\s*\(/;
+const GET_EXPORT_RE = /\bexport\s+(async\s+)?function\s+GET\b|\bexport\s+const\s+GET\s*=/;
+const WRITE_METHOD_EXPORT_RE = /\bexport\s+(async\s+)?function\s+(POST|PUT|PATCH|DELETE)\b|\bexport\s+const\s+(POST|PUT|PATCH|DELETE)\s*=/;
+const VALIDATION_RE = /\b(z\.object|z\.string|z\.enum|\.safeParse\s*\(|\.parse\s*\(|parseBillingJson|handleDbWrite\s*\(|zod)\b/;
+const AUTH_SIGNAL_RE = /\b(requireAuth|requireAuthUserId|requireBillingAuth|requireBillingAuthUserId|handleDbWrite|getSession|getUser|getClaims|request\.auth|createServerClient|Authorization|Bearer|requireHostedAccess)\b/;
+const WEBHOOK_SIGNATURE_RE = /\b(stripe-signature|svix-signature|webhook-signature|x-hub-signature|x-signature)\b/i;
+const SERVICE_ROLE_USE_RE = /\bprocess\.env\.[A-Z0-9_]*SERVICE_ROLE[A-Z0-9_]*\b|\bcreate(?:Client|SupabaseClient)\s*\([\s\S]{0,300}\b(SERVICE_ROLE|serviceRole|service_role)\b/;
+const RATE_LIMIT_RE = /\b(rateLimit|rate-limit|ratelimit|quota|upstash)\b|\bstatus:\s*429\b/;
+const STACK_JSON_RE = /\bstack\s*:\s*(error|err|e)\.stack\b/;
+const STACK_VALUE_RE = /\b(error|err|e)\.stack\b/;
+const STRINGIFY_ERROR_RE = /\bJSON\.stringify\s*\(\s*(error|err|e)\s*\)/;
+const CORS_STAR_RE = /Access-Control-Allow-Origin['"`]\s*,\s*['"`]\s*\*/i;
+const CORS_HEADER_RE = /Access-Control-Allow-Origin/i;
+const ORIGIN_REFLECT_RE = /\b(origin|requestOrigin|allowedOrigin)\b/;
+const CORS_ALLOWLIST_RE = /\b(ALLOWED_ORIGINS|allowedOrigins|allowedOrigin|normalizeOrigin)\b/;
+const ARRAY_BUFFER_RE = /\brequest\.arrayBuffer\s*\(/;
+const CATCH_ALL_RE = /\[\.\.\./;
+const SENSITIVE_PATH_RE = /(auth|sign-in|sign-up|login|billing|payment|checkout|subscription|webhook|admin|account|credential|mercury-credentials|\/db\/)/i;
+const RATE_LIMIT_PATH_RE = /(auth|sign-in|sign-up|login|billing|payment|checkout|subscription|webhook|credential|mercury-credentials)/i;
+const PUBLIC_PATH_RE = /(public|health|content)/i;
+export async function checkApiSafety(packageJson, projectPath) {
+    if (!hasExpoRouterSignal(packageJson)) {
+        return {
+            name: 'api safety',
+            status: 'skip',
+            message: 'No Expo Router API route files found.',
+        };
+    }
+    const apiFiles = await findExpoRouterApiRouteFiles(projectPath, packageJson);
+    if (apiFiles.length === 0) {
+        return {
+            name: 'api safety',
+            status: 'skip',
+            message: 'No Expo Router API route files found.',
+        };
+    }
+    const findings = [];
+    for (const filePath of apiFiles) {
+        if (isTestLikeFile(filePath)) {
+            continue;
+        }
+        const contents = (await readOptionalText(filePath)) ?? '';
+        findings.push(...scanApiFile(projectPath, filePath, contents));
+    }
+    return toApiResult(findings);
+}
+export async function scanFileApiSafety(projectPath, filePath, packageJson) {
+    if (!packageJson || !isExpoRouterApiRouteFile(projectPath, filePath, packageJson)) {
+        return {
+            name: 'api safety',
+            status: 'skip',
+            message: 'File is not an Expo Router API route.',
+        };
+    }
+    if (isTestLikeFile(filePath)) {
+        return {
+            name: 'api safety',
+            status: 'skip',
+            message: 'Test files are excluded from API safety checks.',
+        };
+    }
+    const contents = (await readOptionalText(filePath)) ?? '';
+    return toApiResult(scanApiFile(projectPath, filePath, contents), true);
+}
+export function checkAuthChecks(projectPath, filePath, contents) {
+    const classification = classifyApiFile(projectPath, filePath, contents);
+    if (!classification.sensitive || classification.webhook || classification.publicOrProxy) {
+        return [];
+    }
+    if (hasAuthSignal(contents)) {
+        return [];
+    }
+    const shortPath = relative(projectPath, filePath);
+    return [
+        {
+            file: shortPath,
+            kind: 'missing-auth',
+            severity: 'warn',
+            message: `${shortPath}: sensitive API route does not verify auth (request.auth, session helper, or handleDbWrite).`,
+        },
+    ];
+}
+export function checkMethodValidation(projectPath, filePath, contents) {
+    const scanned = stripJsComments(contents);
+    const shortPath = relative(projectPath, filePath);
+    const findings = [];
+    const hasNamedMethod = NAMED_METHOD_RE.test(scanned);
+    if (!hasNamedMethod && DEFAULT_EXPORT_RE.test(scanned) && !REQUEST_METHOD_RE.test(scanned)) {
+        findings.push({
+            file: shortPath,
+            kind: 'missing-method-guard',
+            severity: 'warn',
+            message: `${shortPath}: default API handler does not inspect request.method or export named HTTP methods.`,
+        });
+    }
+    if (GET_EXPORT_RE.test(scanned) &&
+        !WRITE_METHOD_EXPORT_RE.test(scanned) &&
+        BODY_READ_RE.test(scanned)) {
+        findings.push({
+            file: shortPath,
+            kind: 'get-reads-body',
+            severity: 'warn',
+            message: `${shortPath}: GET handler reads a request body; add a named POST/PUT/PATCH export or stop parsing JSON on GET.`,
+        });
+    }
+    return findings;
+}
+export function checkInputValidation(projectPath, filePath, contents) {
+    const classification = classifyApiFile(projectPath, filePath, contents);
+    const scanned = stripJsComments(contents);
+    if (!BODY_READ_RE.test(scanned)) {
+        return [];
+    }
+    if (classification.webhook || ARRAY_BUFFER_RE.test(scanned)) {
+        return [];
+    }
+    if (VALIDATION_RE.test(scanned)) {
+        return [];
+    }
+    const shortPath = relative(projectPath, filePath);
+    return [
+        {
+            file: shortPath,
+            kind: 'missing-validation',
+            severity: 'warn',
+            message: `${shortPath}: request body is read without a Zod/schema parse; validate input before business logic.`,
+        },
+    ];
+}
+export function checkServiceRole(projectPath, filePath, contents) {
+    const scanned = stripJsComments(contents);
+    if (!SERVICE_ROLE_USE_RE.test(scanned)) {
+        return [];
+    }
+    if (hasAuthSignal(contents)) {
+        return [];
+    }
+    const shortPath = relative(projectPath, filePath);
+    return [
+        {
+            file: shortPath,
+            kind: 'service-role-without-auth',
+            severity: 'warn',
+            message: `${shortPath}: uses a service-role token without an auth check; prefer the user/anon client or gate the privileged client.`,
+        },
+    ];
+}
+export function checkRateLimiting(projectPath, filePath, contents) {
+    const classification = classifyApiFile(projectPath, filePath, contents);
+    if (!classification.rateLimitSensitive) {
+        return [];
+    }
+    const scanned = stripJsComments(contents);
+    if (RATE_LIMIT_RE.test(scanned)) {
+        return [];
+    }
+    const shortPath = relative(projectPath, filePath);
+    return [
+        {
+            file: shortPath,
+            kind: 'missing-rate-limit',
+            severity: 'warn',
+            message: `${shortPath}: sensitive endpoint has no rate-limit or quota signal (rateLimit, 429, quota).`,
+        },
+    ];
+}
+export function checkErrorExposure(projectPath, filePath, contents) {
+    const scanned = stripJsComments(contents);
+    const shortPath = relative(projectPath, filePath);
+    const findings = [];
+    if (STACK_JSON_RE.test(scanned)) {
+        findings.push({
+            file: shortPath,
+            kind: 'stack-in-json',
+            severity: 'error',
+            message: `${shortPath}: returns error.stack in a JSON body; clients must not receive stack traces.`,
+        });
+        return findings;
+    }
+    if (STACK_VALUE_RE.test(scanned)) {
+        findings.push({
+            file: shortPath,
+            kind: 'stack-exposure',
+            severity: 'warn',
+            message: `${shortPath}: interpolates error.stack into a response path; return a generic error instead.`,
+        });
+    }
+    if (STRINGIFY_ERROR_RE.test(scanned)) {
+        findings.push({
+            file: shortPath,
+            kind: 'stringify-error',
+            severity: 'warn',
+            message: `${shortPath}: JSON.stringify(error) may leak internals; return a safe error envelope.`,
+        });
+    }
+    return findings;
+}
+export function checkCors(projectPath, filePath, contents) {
+    const scanned = stripJsComments(contents);
+    const shortPath = relative(projectPath, filePath);
+    const findings = [];
+    if (CORS_STAR_RE.test(scanned) || /Access-Control-Allow-Origin['":\s]*\*/.test(scanned)) {
+        findings.push({
+            file: shortPath,
+            kind: 'cors-wildcard',
+            severity: 'warn',
+            message: `${shortPath}: Access-Control-Allow-Origin is '*'; restrict CORS to an explicit origin allowlist.`,
+        });
+        return findings;
+    }
+    if (CORS_HEADER_RE.test(scanned) &&
+        ORIGIN_REFLECT_RE.test(scanned) &&
+        !CORS_ALLOWLIST_RE.test(scanned)) {
+        findings.push({
+            file: shortPath,
+            kind: 'cors-reflect',
+            severity: 'warn',
+            message: `${shortPath}: reflects request Origin without an allowlist; validate origin before echoing it.`,
+        });
+    }
+    return findings;
+}
+function scanApiFile(projectPath, filePath, contents) {
+    return [
+        ...checkAuthChecks(projectPath, filePath, contents),
+        ...checkMethodValidation(projectPath, filePath, contents),
+        ...checkInputValidation(projectPath, filePath, contents),
+        ...checkServiceRole(projectPath, filePath, contents),
+        ...checkRateLimiting(projectPath, filePath, contents),
+        ...checkErrorExposure(projectPath, filePath, contents),
+        ...checkCors(projectPath, filePath, contents),
+    ];
+}
+function classifyApiFile(projectPath, filePath, contents) {
+    const shortPath = relative(projectPath, filePath);
+    const scanned = stripJsComments(contents);
+    const webhook = /webhook/i.test(shortPath) || WEBHOOK_SIGNATURE_RE.test(scanned);
+    const publicOrProxy = PUBLIC_PATH_RE.test(shortPath) ||
+        (CATCH_ALL_RE.test(path.basename(filePath)) && CORS_ALLOWLIST_RE.test(scanned));
+    const sensitive = SENSITIVE_PATH_RE.test(shortPath);
+    const rateLimitSensitive = RATE_LIMIT_PATH_RE.test(shortPath);
+    return { sensitive, rateLimitSensitive, webhook, publicOrProxy };
+}
+function hasAuthSignal(contents) {
+    const scanned = stripJsComments(contents);
+    return AUTH_SIGNAL_RE.test(scanned) || WEBHOOK_SIGNATURE_RE.test(scanned);
+}
+function toApiResult(findings, fileScan = false) {
+    if (findings.length === 0) {
+        return {
+            name: 'api safety',
+            status: 'pass',
+            message: fileScan
+                ? 'File passed the API safety scan.'
+                : 'API routes passed auth, validation, method, and exposure checks.',
+        };
+    }
+    const hasError = findings.some((finding) => finding.severity === 'error');
+    return {
+        name: 'api safety',
+        status: hasError ? 'error' : 'warn',
+        message: hasError
+            ? fileScan
+                ? 'File leaks internals in an API error response.'
+                : 'API routes leak internals in error responses.'
+            : fileScan
+                ? 'File has API safety warnings.'
+                : 'API routes have auth, validation, method, or exposure warnings.',
+        details: {
+            findings: findings.slice(0, MAX_FINDINGS),
+            truncated: findings.length > MAX_FINDINGS,
+        },
+    };
+}
+//# sourceMappingURL=api-safety.js.map

package/dist/checks/api-safety.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"api-safety.js","sourceRoot":"","sources":["../../src/checks/api-safety.ts"],"names":[],"mappings":"AAAA,OAAO,IAAI,MAAM,WAAW,CAAC;AAG7B,OAAO,EACL,2BAA2B,EAC3B,mBAAmB,EACnB,wBAAwB,EACxB,cAAc,GACf,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAAE,gBAAgB,EAAE,QAAQ,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAE1E,MAAM,YAAY,GAAG,EAAE,CAAC;AAExB,MAAM,eAAe,GACnB,mIAAmI,CAAC;AACtI,MAAM,iBAAiB,GAAG,sBAAsB,CAAC;AACjD,MAAM,iBAAiB,GAAG,qBAAqB,CAAC;AAChD,MAAM,YAAY,GAAG,iCAAiC,CAAC;AACvD,MAAM,aAAa,GAAG,mEAAmE,CAAC;AAC1F,MAAM,sBAAsB,GAC1B,2GAA2G,CAAC;AAC9G,MAAM,aAAa,GACjB,yGAAyG,CAAC;AAC5G,MAAM,cAAc,GAClB,sMAAsM,CAAC;AACzM,MAAM,oBAAoB,GACxB,sFAAsF,CAAC;AACzF,MAAM,mBAAmB,GACvB,mJAAmJ,CAAC;AACtJ,MAAM,aAAa,GAAG,sEAAsE,CAAC;AAC7F,MAAM,aAAa,GAAG,sCAAsC,CAAC;AAC7D,MAAM,cAAc,GAAG,0BAA0B,CAAC;AAClD,MAAM,kBAAkB,GAAG,6CAA6C,CAAC;AACzE,MAAM,YAAY,GAAG,oDAAoD,CAAC;AAC1E,MAAM,cAAc,GAAG,8BAA8B,CAAC;AACtD,MAAM,iBAAiB,GAAG,0CAA0C,CAAC;AACrE,MAAM,iBAAiB,GAAG,oEAAoE,CAAC;AAC/F,MAAM,eAAe,GAAG,6BAA6B,CAAC;AACtD,MAAM,YAAY,GAAG,UAAU,CAAC;AAEhC,MAAM,iBAAiB,GACrB,iIAAiI,CAAC;AACpI,MAAM,kBAAkB,GACtB,4GAA4G,CAAC;AAC/G,MAAM,cAAc,GAAG,0BAA0B,CAAC;AASlD,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,WAAwB,EACxB,WAAmB;IAEnB,IAAI,CAAC,mBAAmB,CAAC,WAAW,CAAC,EAAE,CAAC;QACtC,OAAO;YACL,IAAI,EAAE,YAAY;YAClB,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,uCAAuC;SACjD,CAAC;IACJ,CAAC;IAED,MAAM,QAAQ,GAAG,MAAM,2BAA2B,CAAC,WAAW,EAAE,WAAW,CAAC,CAAC;IAC7E,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC1B,OAAO;YACL,IAAI,EAAE,YAAY;YAClB,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,uCAAuC;SACjD,CAAC;IACJ,CAAC;IAED,MAAM,QAAQ,GAAuB,EAAE,CAAC;IACxC,KAAK,MAAM,QAAQ,IAAI,QAAQ,EAAE,CAAC;QAChC,IAAI,cAAc,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC7B,SAAS;QACX,CAAC;QACD,MAAM,QAAQ,GAAG,CAAC,MAAM,gBAAgB,CAAC,QAAQ,CAAC,CAAC,IAAI,EAAE,CAAC;QAC1D,QAAQ,CAAC,IAAI,CAAC,GAAG,WAAW,CAAC,WAAW,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAAC,CAAC;IACjE,CAAC;IAED,OAAO,WAAW,CAAC,QAAQ,CAAC,CAAC;AAC/B,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,WAAmB,EACnB,QAAgB,EAChB,WAAyB;IAEzB,IAAI,CAAC,WAAW,IAAI,CAAC,wBAAwB,CAAC,WAAW,EAAE,QAAQ,EAAE,WAAW,CAAC,EAAE,CAAC;QAClF,OAAO;YACL,IAAI,EAAE,YAAY;YAClB,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,uCAAuC;SACjD,CAAC;IACJ,CAAC;IAED,IAAI,cAAc,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC7B,OAAO;YACL,IAAI,EAAE,YAAY;YAClB,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,iDAAiD;SAC3D,CAAC;IACJ,CAAC;IAED,MAAM,QAAQ,GAAG,CAAC,MAAM,gBAAgB,CAAC,QAAQ,CAAC,CAAC,IAAI,EAAE,CAAC;IAC1D,OAAO,WAAW,CAAC,WAAW,CAAC,WAAW,EAAE,QAAQ,EAAE,QAAQ,CAAC,EAAE,IAAI,CAAC,CAAC;AACzE,CAAC;AAED,MAAM,UAAU,eAAe,CAC7B,WAAmB,EACnB,QAAgB,EAChB,QAAgB;IAEhB,MAAM,cAAc,GAAG,eAAe,CAAC,WAAW,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAAC;IACxE,IAAI,CAAC,cAAc,CAAC,SAAS,IAAI,cAAc,CAAC,OAAO,IAAI,cAAc,CAAC,aAAa,EAAE,CAAC;QACxF,OAAO,EAAE,CAAC;IACZ,CAAC;IACD,IAAI,aAAa,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC5B,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,MAAM,SAAS,GAAG,QAAQ,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC;IAClD,OAAO;QACL;YACE,IAAI,EAAE,SAAS;YACf,IAAI,EAAE,cAAc;YACpB,QAAQ,EAAE,MAAM;YAChB,OAAO,EAAE,GAAG,SAAS,8FAA8F;SACpH;KACF,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,qBAAqB,CACnC,WAAmB,EACnB,QAAgB,EAChB,QAAgB;IAEhB,MAAM,OAAO,GAAG,eAAe,CAAC,QAAQ,CAAC,CAAC;IAC1C,MAAM,SAAS,GAAG,QAAQ,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC;IAClD,MAAM,QAAQ,GAAuB,EAAE,CAAC;IAExC,MAAM,cAAc,GAAG,eAAe,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACrD,IAAI,CAAC,cAAc,IAAI,iBAAiB,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;QAC3F,QAAQ,CAAC,IAAI,CAAC;YACZ,IAAI,EAAE,SAAS;YACf,IAAI,EAAE,sBAAsB;YAC5B,QAAQ,EAAE,MAAM;YAChB,OAAO,EAAE,GAAG,SAAS,qFAAqF;SAC3G,CAAC,CAAC;IACL,CAAC;IAED,IACE,aAAa,CAAC,IAAI,CAAC,OAAO,CAAC;QAC3B,CAAC,sBAAsB,CAAC,IAAI,CAAC,OAAO,CAAC;QACrC,YAAY,CAAC,IAAI,CAAC,OAAO,CAAC,EAC1B,CAAC;QACD,QAAQ,CAAC,IAAI,CAAC;YACZ,IAAI,EAAE,SAAS;YACf,IAAI,EAAE,gBAAgB;YACtB,QAAQ,EAAE,MAAM;YAChB,OAAO,EAAE,GAAG,SAAS,oGAAoG;SAC1H,CAAC,CAAC;IACL,CAAC;IAED,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,MAAM,UAAU,oBAAoB,CAClC,WAAmB,EACnB,QAAgB,EAChB,QAAgB;IAEhB,MAAM,cAAc,GAAG,eAAe,CAAC,WAAW,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAAC;IACxE,MAAM,OAAO,GAAG,eAAe,CAAC,QAAQ,CAAC,CAAC;IAC1C,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;QAChC,OAAO,EAAE,CAAC;IACZ,CAAC;IACD,IAAI,cAAc,CAAC,OAAO,IAAI,eAAe,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;QAC5D,OAAO,EAAE,CAAC;IACZ,CAAC;IACD,IAAI,aAAa,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;QAChC,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,MAAM,SAAS,GAAG,QAAQ,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC;IAClD,OAAO;QACL;YACE,IAAI,EAAE,SAAS;YACf,IAAI,EAAE,oBAAoB;YAC1B,QAAQ,EAAE,MAAM;YAChB,OAAO,EAAE,GAAG,SAAS,0FAA0F;SAChH;KACF,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,gBAAgB,CAC9B,WAAmB,EACnB,QAAgB,EAChB,QAAgB;IAEhB,MAAM,OAAO,GAAG,eAAe,CAAC,QAAQ,CAAC,CAAC;IAC1C,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;QACvC,OAAO,EAAE,CAAC;IACZ,CAAC;IACD,IAAI,aAAa,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC5B,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,MAAM,SAAS,GAAG,QAAQ,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC;IAClD,OAAO;QACL;YACE,IAAI,EAAE,SAAS;YACf,IAAI,EAAE,2BAA2B;YACjC,QAAQ,EAAE,MAAM;YAChB,OAAO,EAAE,GAAG,SAAS,+GAA+G;SACrI;KACF,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,iBAAiB,CAC/B,WAAmB,EACnB,QAAgB,EAChB,QAAgB;IAEhB,MAAM,cAAc,GAAG,eAAe,CAAC,WAAW,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAAC;IACxE,IAAI,CAAC,cAAc,CAAC,kBAAkB,EAAE,CAAC;QACvC,OAAO,EAAE,CAAC;IACZ,CAAC;IACD,MAAM,OAAO,GAAG,eAAe,CAAC,QAAQ,CAAC,CAAC;IAC1C,IAAI,aAAa,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;QAChC,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,MAAM,SAAS,GAAG,QAAQ,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC;IAClD,OAAO;QACL;YACE,IAAI,EAAE,SAAS;YACf,IAAI,EAAE,oBAAoB;YAC1B,QAAQ,EAAE,MAAM;YAChB,OAAO,EAAE,GAAG,SAAS,iFAAiF;SACvG;KACF,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,kBAAkB,CAChC,WAAmB,EACnB,QAAgB,EAChB,QAAgB;IAEhB,MAAM,OAAO,GAAG,eAAe,CAAC,QAAQ,CAAC,CAAC;IAC1C,MAAM,SAAS,GAAG,QAAQ,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC;IAClD,MAAM,QAAQ,GAAuB,EAAE,CAAC;IAExC,IAAI,aAAa,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;QAChC,QAAQ,CAAC,IAAI,CAAC;YACZ,IAAI,EAAE,SAAS;YACf,IAAI,EAAE,eAAe;YACrB,QAAQ,EAAE,OAAO;YACjB,OAAO,EAAE,GAAG,SAAS,8EAA8E;SACpG,CAAC,CAAC;QACH,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED,IAAI,cAAc,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;QACjC,QAAQ,CAAC,IAAI,CAAC;YACZ,IAAI,EAAE,SAAS;YACf,IAAI,EAAE,gBAAgB;YACtB,QAAQ,EAAE,MAAM;YAChB,OAAO,EAAE,GAAG,SAAS,kFAAkF;SACxG,CAAC,CAAC;IACL,CAAC;IAED,IAAI,kBAAkB,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;QACrC,QAAQ,CAAC,IAAI,CAAC;YACZ,IAAI,EAAE,SAAS;YACf,IAAI,EAAE,iBAAiB;YACvB,QAAQ,EAAE,MAAM;YAChB,OAAO,EAAE,GAAG,SAAS,2EAA2E;SACjG,CAAC,CAAC;IACL,CAAC;IAED,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,MAAM,UAAU,SAAS,CACvB,WAAmB,EACnB,QAAgB,EAChB,QAAgB;IAEhB,MAAM,OAAO,GAAG,eAAe,CAAC,QAAQ,CAAC,CAAC;IAC1C,MAAM,SAAS,GAAG,QAAQ,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC;IAClD,MAAM,QAAQ,GAAuB,EAAE,CAAC;IAExC,IAAI,YAAY,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,uCAAuC,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;QACxF,QAAQ,CAAC,IAAI,CAAC;YACZ,IAAI,EAAE,SAAS;YACf,IAAI,EAAE,eAAe;YACrB,QAAQ,EAAE,MAAM;YAChB,OAAO,EAAE,GAAG,SAAS,sFAAsF;SAC5G,CAAC,CAAC;QACH,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED,IACE,cAAc,CAAC,IAAI,CAAC,OAAO,CAAC;QAC5B,iBAAiB,CAAC,IAAI,CAAC,OAAO,CAAC;QAC/B,CAAC,iBAAiB,CAAC,IAAI,CAAC,OAAO,CAAC,EAChC,CAAC;QACD,QAAQ,CAAC,IAAI,CAAC;YACZ,IAAI,EAAE,SAAS;YACf,IAAI,EAAE,cAAc;YACpB,QAAQ,EAAE,MAAM;YAChB,OAAO,EAAE,GAAG,SAAS,oFAAoF;SAC1G,CAAC,CAAC;IACL,CAAC;IAED,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,SAAS,WAAW,CAAC,WAAmB,EAAE,QAAgB,EAAE,QAAgB;IAC1E,OAAO;QACL,GAAG,eAAe,CAAC,WAAW,EAAE,QAAQ,EAAE,QAAQ,CAAC;QACnD,GAAG,qBAAqB,CAAC,WAAW,EAAE,QAAQ,EAAE,QAAQ,CAAC;QACzD,GAAG,oBAAoB,CAAC,WAAW,EAAE,QAAQ,EAAE,QAAQ,CAAC;QACxD,GAAG,gBAAgB,CAAC,WAAW,EAAE,QAAQ,EAAE,QAAQ,CAAC;QACpD,GAAG,iBAAiB,CAAC,WAAW,EAAE,QAAQ,EAAE,QAAQ,CAAC;QACrD,GAAG,kBAAkB,CAAC,WAAW,EAAE,QAAQ,EAAE,QAAQ,CAAC;QACtD,GAAG,SAAS,CAAC,WAAW,EAAE,QAAQ,EAAE,QAAQ,CAAC;KAC9C,CAAC;AACJ,CAAC;AAED,SAAS,eAAe,CACtB,WAAmB,EACnB,QAAgB,EAChB,QAAgB;IAEhB,MAAM,SAAS,GAAG,QAAQ,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC;IAClD,MAAM,OAAO,GAAG,eAAe,CAAC,QAAQ,CAAC,CAAC;IAC1C,MAAM,OAAO,GAAG,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,oBAAoB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACjF,MAAM,aAAa,GACjB,cAAc,CAAC,IAAI,CAAC,SAAS,CAAC;QAC9B,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,IAAI,iBAAiB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC;IAClF,MAAM,SAAS,GAAG,iBAAiB,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IACpD,MAAM,kBAAkB,GAAG,kBAAkB,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IAC9D,OAAO,EAAE,SAAS,EAAE,kBAAkB,EAAE,OAAO,EAAE,aAAa,EAAE,CAAC;AACnE,CAAC;AAED,SAAS,aAAa,CAAC,QAAgB;IACrC,MAAM,OAAO,GAAG,eAAe,CAAC,QAAQ,CAAC,CAAC;IAC1C,OAAO,cAAc,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,oBAAoB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;AAC5E,CAAC;AAED,SAAS,WAAW,CAAC,QAA4B,EAAE,QAAQ,GAAG,KAAK;IACjE,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC1B,OAAO;YACL,IAAI,EAAE,YAAY;YAClB,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,QAAQ;gBACf,CAAC,CAAC,kCAAkC;gBACpC,CAAC,CAAC,kEAAkE;SACvE,CAAC;IACJ,CAAC;IAED,MAAM,QAAQ,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC;IAC1E,OAAO;QACL,IAAI,EAAE,YAAY;QAClB,MAAM,EAAE,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM;QACnC,OAAO,EAAE,QAAQ;YACf,CAAC,CAAC,QAAQ;gBACR,CAAC,CAAC,gDAAgD;gBAClD,CAAC,CAAC,+CAA+C;YACnD,CAAC,CAAC,QAAQ;gBACR,CAAC,CAAC,+BAA+B;gBACjC,CAAC,CAAC,iEAAiE;QACvE,OAAO,EAAE;YACP,QAAQ,EAAE,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,YAAY,CAAC;YACzC,SAAS,EAAE,QAAQ,CAAC,MAAM,GAAG,YAAY;SAC1C;KACF,CAAC;AACJ,CAAC"}

package/dist/checks/app-architecture.d.ts

@@ -1,4 +1,4 @@
-import type { DoctorCheckResult } from '../types.js';
-export declare function checkAppArchitecture(projectPath: string): Promise<DoctorCheckResult>;
-export declare function scanFileAppArchitecture(projectPath: string, filePath: string): Promise<DoctorCheckResult>;
+import type { DoctorCheckResult, PackageJson } from '../types.js';
+export declare function checkAppArchitecture(packageJson: PackageJson, projectPath: string): Promise<DoctorCheckResult>;
+export declare function scanFileAppArchitecture(projectPath: string, filePath: string, packageJson?: PackageJson): Promise<DoctorCheckResult>;
 //# sourceMappingURL=app-architecture.d.ts.map

package/dist/checks/app-architecture.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"app-architecture.d.ts","sourceRoot":"","sources":["../../src/checks/app-architecture.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AAIrD,wBAAsB,oBAAoB,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,iBAAiB,CAAC,CA4C1F;AAED,wBAAsB,uBAAuB,CAC3C,WAAW,EAAE,MAAM,EACnB,QAAQ,EAAE,MAAM,GACf,OAAO,CAAC,iBAAiB,CAAC,CAc5B"}
+{"version":3,"file":"app-architecture.d.ts","sourceRoot":"","sources":["../../src/checks/app-architecture.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,iBAAiB,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAQlE,wBAAsB,oBAAoB,CACxC,WAAW,EAAE,WAAW,EACxB,WAAW,EAAE,MAAM,GAClB,OAAO,CAAC,iBAAiB,CAAC,CAwC5B;AAED,wBAAsB,uBAAuB,CAC3C,WAAW,EAAE,MAAM,EACnB,QAAQ,EAAE,MAAM,EAChB,WAAW,CAAC,EAAE,WAAW,GACxB,OAAO,CAAC,iBAAiB,CAAC,CAsB5B"}

package/dist/checks/app-architecture.js

@@ -1,14 +1,9 @@
 import path from 'node:path';
+import { findExpoRouterAppDirs, isExpoRouterApiRouteFile, } from '../expo-router.js';
 import { findSsrFindings } from './ssr-safety.js';
-import { findFiles, pathExists, readOptionalText, relative, SOURCE_EXTENSIONS } from '../utils.js';
-export async function checkAppArchitecture(projectPath) {
-    const appDirs = [path.join(projectPath, 'app'), path.join(projectPath, 'src', 'app')];
-    const existingAppDirs = [];
-    for (const appDir of appDirs) {
-        if (await pathExists(appDir)) {
-            existingAppDirs.push(appDir);
-        }
-    }
+import { findFiles, readOptionalText, relative, SOURCE_EXTENSIONS } from '../utils.js';
+export async function checkAppArchitecture(packageJson, projectPath) {
+    const existingAppDirs = await findExpoRouterAppDirs(projectPath);
     if (existingAppDirs.length === 0) {
         return {
             name: 'app architecture',
@@ -20,7 +15,8 @@ export async function checkAppArchitecture(projectPath) {
     for (const appDir of existingAppDirs) {
         const routeFiles = await findFiles(appDir, (filePath) => {
             const extension = path.extname(filePath);
-            return SOURCE_EXTENSIONS.has(extension) && !filePath.endsWith('+api.ts');
+            return (SOURCE_EXTENSIONS.has(extension) &&
+                !isExpoRouterApiRouteFile(projectPath, filePath, packageJson));
         });
         for (const filePath of routeFiles) {
             findings.push(...(await scanRouteFileArchitecture(projectPath, filePath)));
@@ -40,7 +36,14 @@ export async function checkAppArchitecture(projectPath) {
         message: 'Route files passed the first-pass architecture scan.',
     };
 }
-export async function scanFileAppArchitecture(projectPath, filePath) {
+export async function scanFileAppArchitecture(projectPath, filePath, packageJson) {
+    if (packageJson && isExpoRouterApiRouteFile(projectPath, filePath, packageJson)) {
+        return {
+            name: 'app architecture',
+            status: 'skip',
+            message: 'Expo Router API route files are excluded from route-component architecture checks.',
+        };
+    }
     const findings = await scanRouteFileArchitecture(projectPath, filePath);
     return findings.length > 0
         ? {

package/dist/checks/app-architecture.js.map

@@ -1 +1 @@
-{"version":3,"file":"app-architecture.js","sourceRoot":"","sources":["../../src/checks/app-architecture.ts"],"names":[],"mappings":"AAAA,OAAO,IAAI,MAAM,WAAW,CAAC;AAG7B,OAAO,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAC;AAClD,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,gBAAgB,EAAE,QAAQ,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AAEnG,MAAM,CAAC,KAAK,UAAU,oBAAoB,CAAC,WAAmB;IAC5D,MAAM,OAAO,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,KAAK,CAAC,EAAE,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC;IACtF,MAAM,eAAe,GAAa,EAAE,CAAC;IAErC,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;QAC7B,IAAI,MAAM,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;YAC7B,eAAe,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAC/B,CAAC;IACH,CAAC;IAED,IAAI,eAAe,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACjC,OAAO;YACL,IAAI,EAAE,kBAAkB;YACxB,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,qCAAqC;SAC/C,CAAC;IACJ,CAAC;IAED,MAAM,QAAQ,GAAa,EAAE,CAAC;IAC9B,KAAK,MAAM,MAAM,IAAI,eAAe,EAAE,CAAC;QACrC,MAAM,UAAU,GAAG,MAAM,SAAS,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,EAAE;YACtD,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;YACzC,OAAO,iBAAiB,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;QAC3E,CAAC,CAAC,CAAC;QAEH,KAAK,MAAM,QAAQ,IAAI,UAAU,EAAE,CAAC;YAClC,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,yBAAyB,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC;QAC7E,CAAC;IACH,CAAC;IAED,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACxB,OAAO;YACL,IAAI,EAAE,kBAAkB;YACxB,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,qDAAqD;YAC9D,OAAO,EAAE,EAAE,QAAQ,EAAE,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,SAAS,EAAE,QAAQ,CAAC,MAAM,GAAG,EAAE,EAAE;SAC9E,CAAC;IACJ,CAAC;IAED,OAAO;QACL,IAAI,EAAE,kBAAkB;QACxB,MAAM,EAAE,MAAM;QACd,OAAO,EAAE,sDAAsD;KAChE,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAC3C,WAAmB,EACnB,QAAgB;IAEhB,MAAM,QAAQ,GAAG,MAAM,yBAAyB,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC;IACxE,OAAO,QAAQ,CAAC,MAAM,GAAG,CAAC;QACxB,CAAC,CAAC;YACE,IAAI,EAAE,kBAAkB;YACxB,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,iCAAiC;YAC1C,OAAO,EAAE,EAAE,QAAQ,EAAE;SACtB;QACH,CAAC,CAAC;YACE,IAAI,EAAE,kBAAkB;YACxB,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,oCAAoC;SAC9C,CAAC;AACR,CAAC;AAED,KAAK,UAAU,yBAAyB,CAAC,WAAmB,EAAE,QAAgB;IAC5E,MAAM,QAAQ,GAAG,CAAC,MAAM,gBAAgB,CAAC,QAAQ,CAAC,CAAC,IAAI,EAAE,CAAC;IAC1D,MAAM,QAAQ,GAAa,EAAE,CAAC;IAC9B,MAAM,SAAS,GAAG,QAAQ,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC;IACjD,MAAM,SAAS,GAAG,QAAQ,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC;IAElD,IAAI,SAAS,GAAG,GAAG,EAAE,CAAC;QACpB,QAAQ,CAAC,IAAI,CAAC,GAAG,SAAS,KAAK,SAAS,uDAAuD,CAAC,CAAC;IACnG,CAAC;IAED,IAAI,4DAA4D,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;QAChF,QAAQ,CAAC,IAAI,CAAC,GAAG,SAAS,4DAA4D,CAAC,CAAC;IAC1F,CAAC;IAED,QAAQ,CAAC,IAAI,CAAC,GAAG,eAAe,CAAC,WAAW,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAAC,CAAC;IAEnE,IAAI,oDAAoD,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,SAAS,GAAG,GAAG,EAAE,CAAC;QAC3F,QAAQ,CAAC,IAAI,CAAC,GAAG,SAAS,wDAAwD,CAAC,CAAC;IACtF,CAAC;IAED,OAAO,QAAQ,CAAC;AAClB,CAAC"}
+{"version":3,"file":"app-architecture.js","sourceRoot":"","sources":["../../src/checks/app-architecture.ts"],"names":[],"mappings":"AAAA,OAAO,IAAI,MAAM,WAAW,CAAC;AAG7B,OAAO,EACL,qBAAqB,EACrB,wBAAwB,GACzB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAC;AAClD,OAAO,EAAE,SAAS,EAAE,gBAAgB,EAAE,QAAQ,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AAEvF,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,WAAwB,EACxB,WAAmB;IAEnB,MAAM,eAAe,GAAG,MAAM,qBAAqB,CAAC,WAAW,CAAC,CAAC;IAEjE,IAAI,eAAe,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACjC,OAAO;YACL,IAAI,EAAE,kBAAkB;YACxB,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,qCAAqC;SAC/C,CAAC;IACJ,CAAC;IAED,MAAM,QAAQ,GAAa,EAAE,CAAC;IAC9B,KAAK,MAAM,MAAM,IAAI,eAAe,EAAE,CAAC;QACrC,MAAM,UAAU,GAAG,MAAM,SAAS,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,EAAE;YACtD,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;YACzC,OAAO,CACL,iBAAiB,CAAC,GAAG,CAAC,SAAS,CAAC;gBAChC,CAAC,wBAAwB,CAAC,WAAW,EAAE,QAAQ,EAAE,WAAW,CAAC,CAC9D,CAAC;QACJ,CAAC,CAAC,CAAC;QAEH,KAAK,MAAM,QAAQ,IAAI,UAAU,EAAE,CAAC;YAClC,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,yBAAyB,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC;QAC7E,CAAC;IACH,CAAC;IAED,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACxB,OAAO;YACL,IAAI,EAAE,kBAAkB;YACxB,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,qDAAqD;YAC9D,OAAO,EAAE,EAAE,QAAQ,EAAE,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,SAAS,EAAE,QAAQ,CAAC,MAAM,GAAG,EAAE,EAAE;SAC9E,CAAC;IACJ,CAAC;IAED,OAAO;QACL,IAAI,EAAE,kBAAkB;QACxB,MAAM,EAAE,MAAM;QACd,OAAO,EAAE,sDAAsD;KAChE,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAC3C,WAAmB,EACnB,QAAgB,EAChB,WAAyB;IAEzB,IAAI,WAAW,IAAI,wBAAwB,CAAC,WAAW,EAAE,QAAQ,EAAE,WAAW,CAAC,EAAE,CAAC;QAChF,OAAO;YACL,IAAI,EAAE,kBAAkB;YACxB,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,oFAAoF;SAC9F,CAAC;IACJ,CAAC;IAED,MAAM,QAAQ,GAAG,MAAM,yBAAyB,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC;IACxE,OAAO,QAAQ,CAAC,MAAM,GAAG,CAAC;QACxB,CAAC,CAAC;YACE,IAAI,EAAE,kBAAkB;YACxB,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,iCAAiC;YAC1C,OAAO,EAAE,EAAE,QAAQ,EAAE;SACtB;QACH,CAAC,CAAC;YACE,IAAI,EAAE,kBAAkB;YACxB,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,oCAAoC;SAC9C,CAAC;AACR,CAAC;AAED,KAAK,UAAU,yBAAyB,CAAC,WAAmB,EAAE,QAAgB;IAC5E,MAAM,QAAQ,GAAG,CAAC,MAAM,gBAAgB,CAAC,QAAQ,CAAC,CAAC,IAAI,EAAE,CAAC;IAC1D,MAAM,QAAQ,GAAa,EAAE,CAAC;IAC9B,MAAM,SAAS,GAAG,QAAQ,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC;IACjD,MAAM,SAAS,GAAG,QAAQ,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC;IAElD,IAAI,SAAS,GAAG,GAAG,EAAE,CAAC;QACpB,QAAQ,CAAC,IAAI,CAAC,GAAG,SAAS,KAAK,SAAS,uDAAuD,CAAC,CAAC;IACnG,CAAC;IAED,IAAI,4DAA4D,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;QAChF,QAAQ,CAAC,IAAI,CAAC,GAAG,SAAS,4DAA4D,CAAC,CAAC;IAC1F,CAAC;IAED,QAAQ,CAAC,IAAI,CAAC,GAAG,eAAe,CAAC,WAAW,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAAC,CAAC;IAEnE,IAAI,oDAAoD,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,SAAS,GAAG,GAAG,EAAE,CAAC;QAC3F,QAAQ,CAAC,IAAI,CAAC,GAAG,SAAS,wDAAwD,CAAC,CAAC;IACtF,CAAC;IAED,OAAO,QAAQ,CAAC;AAClB,CAAC"}

package/dist/checks/env-hygiene.d.ts

@@ -1,4 +1,21 @@
 import type { DoctorCheckResult } from '../types.js';
+export type EnvHygieneFindingKind = 'public-secret-name' | 'hardcoded-credential-value' | 'undocumented-public-env';
+export interface EnvHygieneFinding {
+    file: string;
+    line: number;
+    kind: EnvHygieneFindingKind;
+    severity: 'error' | 'warn';
+    identifier?: string;
+    detector: string;
+    remediation: string;
+}
 export declare function checkEnvHygiene(projectPath: string): Promise<DoctorCheckResult>;
 export declare function scanFileEnvHygiene(projectPath: string, filePath: string): Promise<DoctorCheckResult>;
+export declare function detectKnownCredentialShape(value: string): string | null;
+export declare function credentialSeverityForDetector(detector: string): 'error' | 'warn';
+export declare function looksLikeCredentialValue(value: string): boolean;
+export declare function isDynamicOrInterpolatedValue(value: string): boolean;
+export declare function isPlaceholderValue(value: string): boolean;
+export declare function isCommentOnlyLine(line: string): boolean;
+export declare function stripBearerPrefix(value: string): string;
 //# sourceMappingURL=env-hygiene.d.ts.map

package/dist/checks/env-hygiene.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"env-hygiene.d.ts","sourceRoot":"","sources":["../../src/checks/env-hygiene.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AAMrD,wBAAsB,eAAe,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,iBAAiB,CAAC,CAwBrF;AAED,wBAAsB,kBAAkB,CACtC,WAAW,EAAE,MAAM,EACnB,QAAQ,EAAE,MAAM,GACf,OAAO,CAAC,iBAAiB,CAAC,CAc5B"}
+{"version":3,"file":"env-hygiene.d.ts","sourceRoot":"","sources":["../../src/checks/env-hygiene.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AAerD,MAAM,MAAM,qBAAqB,GAC7B,oBAAoB,GACpB,4BAA4B,GAC5B,yBAAyB,CAAC;AAE9B,MAAM,WAAW,iBAAiB;IAChC,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,qBAAqB,CAAC;IAC5B,QAAQ,EAAE,OAAO,GAAG,MAAM,CAAC;IAC3B,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,EAAE,MAAM,CAAC;CACrB;AAED,wBAAsB,eAAe,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,iBAAiB,CAAC,CASrF;AAED,wBAAsB,kBAAkB,CACtC,WAAW,EAAE,MAAM,EACnB,QAAQ,EAAE,MAAM,GACf,OAAO,CAAC,iBAAiB,CAAC,CAM5B;AAgRD,wBAAgB,0BAA0B,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAkBvE;AAED,wBAAgB,6BAA6B,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,GAAG,MAAM,CAEhF;AAED,wBAAgB,wBAAwB,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAmB/D;AAED,wBAAgB,4BAA4B,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAEnE;AAED,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAoBzD;AAED,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAEvD;AAED,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAEvD"}