@nebutra/next-unicorn-skill 1.0.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/CHANGELOG.md +57 -0
- package/LICENSE +21 -0
- package/README.md +316 -0
- package/SKILL.md +318 -0
- package/dist/analyzer/pattern-catalog.d.ts +35 -0
- package/dist/analyzer/pattern-catalog.d.ts.map +1 -0
- package/dist/analyzer/pattern-catalog.js +342 -0
- package/dist/analyzer/pattern-catalog.js.map +1 -0
- package/dist/analyzer/scanner.d.ts +33 -0
- package/dist/analyzer/scanner.d.ts.map +1 -0
- package/dist/analyzer/scanner.js +302 -0
- package/dist/analyzer/scanner.js.map +1 -0
- package/dist/auditor/ux-auditor.d.ts +26 -0
- package/dist/auditor/ux-auditor.d.ts.map +1 -0
- package/dist/auditor/ux-auditor.js +272 -0
- package/dist/auditor/ux-auditor.js.map +1 -0
- package/dist/checker/peer-dependency-checker.d.ts +62 -0
- package/dist/checker/peer-dependency-checker.d.ts.map +1 -0
- package/dist/checker/peer-dependency-checker.js +94 -0
- package/dist/checker/peer-dependency-checker.js.map +1 -0
- package/dist/index.d.ts +78 -0
- package/dist/index.d.ts.map +1 -0
- package/dist/index.js +325 -0
- package/dist/index.js.map +1 -0
- package/dist/planner/migration-planner.d.ts +47 -0
- package/dist/planner/migration-planner.d.ts.map +1 -0
- package/dist/planner/migration-planner.js +144 -0
- package/dist/planner/migration-planner.js.map +1 -0
- package/dist/pr-creator/git-operations.d.ts +29 -0
- package/dist/pr-creator/git-operations.d.ts.map +1 -0
- package/dist/pr-creator/git-operations.js +10 -0
- package/dist/pr-creator/git-operations.js.map +1 -0
- package/dist/pr-creator/platform-client.d.ts +47 -0
- package/dist/pr-creator/platform-client.d.ts.map +1 -0
- package/dist/pr-creator/platform-client.js +9 -0
- package/dist/pr-creator/platform-client.js.map +1 -0
- package/dist/pr-creator/pr-description-builder.d.ts +23 -0
- package/dist/pr-creator/pr-description-builder.d.ts.map +1 -0
- package/dist/pr-creator/pr-description-builder.js +187 -0
- package/dist/pr-creator/pr-description-builder.js.map +1 -0
- package/dist/pr-creator/pr-executor.d.ts +30 -0
- package/dist/pr-creator/pr-executor.d.ts.map +1 -0
- package/dist/pr-creator/pr-executor.js +109 -0
- package/dist/pr-creator/pr-executor.js.map +1 -0
- package/dist/pr-creator/pr-strategy.d.ts +56 -0
- package/dist/pr-creator/pr-strategy.d.ts.map +1 -0
- package/dist/pr-creator/pr-strategy.js +125 -0
- package/dist/pr-creator/pr-strategy.js.map +1 -0
- package/dist/schemas/input.schema.d.ts +231 -0
- package/dist/schemas/input.schema.d.ts.map +1 -0
- package/dist/schemas/input.schema.js +159 -0
- package/dist/schemas/input.schema.js.map +1 -0
- package/dist/schemas/output.schema.d.ts +2543 -0
- package/dist/schemas/output.schema.d.ts.map +1 -0
- package/dist/schemas/output.schema.js +199 -0
- package/dist/schemas/output.schema.js.map +1 -0
- package/dist/scorer/impact-scorer.d.ts +45 -0
- package/dist/scorer/impact-scorer.d.ts.map +1 -0
- package/dist/scorer/impact-scorer.js +243 -0
- package/dist/scorer/impact-scorer.js.map +1 -0
- package/dist/security/osv-client.d.ts +72 -0
- package/dist/security/osv-client.d.ts.map +1 -0
- package/dist/security/osv-client.js +36 -0
- package/dist/security/osv-client.js.map +1 -0
- package/dist/security/vuln-report-builder.d.ts +18 -0
- package/dist/security/vuln-report-builder.d.ts.map +1 -0
- package/dist/security/vuln-report-builder.js +141 -0
- package/dist/security/vuln-report-builder.js.map +1 -0
- package/dist/security/vulnerability-scanner.d.ts +65 -0
- package/dist/security/vulnerability-scanner.d.ts.map +1 -0
- package/dist/security/vulnerability-scanner.js +140 -0
- package/dist/security/vulnerability-scanner.js.map +1 -0
- package/dist/updater/changelog-verifier.d.ts +29 -0
- package/dist/updater/changelog-verifier.d.ts.map +1 -0
- package/dist/updater/changelog-verifier.js +80 -0
- package/dist/updater/changelog-verifier.js.map +1 -0
- package/dist/updater/registry-client.d.ts +49 -0
- package/dist/updater/registry-client.d.ts.map +1 -0
- package/dist/updater/registry-client.js +10 -0
- package/dist/updater/registry-client.js.map +1 -0
- package/dist/updater/update-plan-builder.d.ts +23 -0
- package/dist/updater/update-plan-builder.d.ts.map +1 -0
- package/dist/updater/update-plan-builder.js +93 -0
- package/dist/updater/update-plan-builder.js.map +1 -0
- package/dist/updater/update-policy.d.ts +50 -0
- package/dist/updater/update-policy.d.ts.map +1 -0
- package/dist/updater/update-policy.js +118 -0
- package/dist/updater/update-policy.js.map +1 -0
- package/dist/updater/update-scorer.d.ts +51 -0
- package/dist/updater/update-scorer.d.ts.map +1 -0
- package/dist/updater/update-scorer.js +166 -0
- package/dist/updater/update-scorer.js.map +1 -0
- package/dist/utils/constraint-filter.d.ts +44 -0
- package/dist/utils/constraint-filter.d.ts.map +1 -0
- package/dist/utils/constraint-filter.js +69 -0
- package/dist/utils/constraint-filter.js.map +1 -0
- package/dist/utils/serializer.d.ts +17 -0
- package/dist/utils/serializer.d.ts.map +1 -0
- package/dist/utils/serializer.js +24 -0
- package/dist/utils/serializer.js.map +1 -0
- package/dist/utils/skill-parser.d.ts +29 -0
- package/dist/utils/skill-parser.d.ts.map +1 -0
- package/dist/utils/skill-parser.js +175 -0
- package/dist/utils/skill-parser.js.map +1 -0
- package/dist/verifier/context7.d.ts +48 -0
- package/dist/verifier/context7.d.ts.map +1 -0
- package/dist/verifier/context7.js +97 -0
- package/dist/verifier/context7.js.map +1 -0
- package/examples/backend-node/input.json +28 -0
- package/examples/backend-node/output.json +343 -0
- package/examples/frontend-nextjs/input.json +37 -0
- package/examples/frontend-nextjs/output.json +302 -0
- package/package.json +79 -0
- package/templates/deletion-checklist.md +42 -0
- package/templates/migration-plan.md +61 -0
- package/templates/prd-template.md +123 -0
- package/templates/summary-table.md +28 -0
- package/templates/update-plan.md +61 -0
- package/templates/vuln-report.md +50 -0
|
@@ -0,0 +1,342 @@
|
|
|
1
|
+
/**
|
|
2
|
+
* Returns the full pattern catalog covering all Vibe Coding domains.
|
|
3
|
+
* Each domain has at least 1–2 patterns.
|
|
4
|
+
*/
|
|
5
|
+
export function getPatternCatalog() {
|
|
6
|
+
return [
|
|
7
|
+
// -----------------------------------------------------------------------
|
|
8
|
+
// i18n — Internationalization / L10n / RTL
|
|
9
|
+
// -----------------------------------------------------------------------
|
|
10
|
+
{
|
|
11
|
+
id: 'i18n-manual-pluralization',
|
|
12
|
+
domain: 'i18n',
|
|
13
|
+
description: 'Hand-rolled pluralization logic (if/else or ternary on count)',
|
|
14
|
+
filePatterns: ['**/*.ts', '**/*.tsx', '**/*.js', '**/*.jsx'],
|
|
15
|
+
codePatterns: [
|
|
16
|
+
/count\s*[=!]==?\s*1\s*\?\s*['"`].*['"`]\s*:\s*['"`].*['"`]/,
|
|
17
|
+
/\.length\s*[=!]==?\s*1\s*\?\s*['"`].*['"`]\s*:\s*['"`].*['"`]/,
|
|
18
|
+
],
|
|
19
|
+
suggestedLibrary: 'i18next',
|
|
20
|
+
suggestedVersion: '^23.0.0',
|
|
21
|
+
license: 'MIT',
|
|
22
|
+
confidenceBase: 0.7,
|
|
23
|
+
},
|
|
24
|
+
{
|
|
25
|
+
id: 'i18n-manual-locale-detection',
|
|
26
|
+
domain: 'i18n',
|
|
27
|
+
description: 'Manual navigator.language or Accept-Language header parsing',
|
|
28
|
+
filePatterns: ['**/*.ts', '**/*.tsx', '**/*.js', '**/*.jsx'],
|
|
29
|
+
codePatterns: [
|
|
30
|
+
/navigator\s*\.\s*language/,
|
|
31
|
+
/accept-language/i,
|
|
32
|
+
/toLocaleDateString\s*\(/,
|
|
33
|
+
],
|
|
34
|
+
suggestedLibrary: 'react-i18next',
|
|
35
|
+
suggestedVersion: '^14.0.0',
|
|
36
|
+
license: 'MIT',
|
|
37
|
+
confidenceBase: 0.65,
|
|
38
|
+
},
|
|
39
|
+
// -----------------------------------------------------------------------
|
|
40
|
+
// SEO — Search Engine Optimization / GEO
|
|
41
|
+
// -----------------------------------------------------------------------
|
|
42
|
+
{
|
|
43
|
+
id: 'seo-manual-meta-tags',
|
|
44
|
+
domain: 'seo',
|
|
45
|
+
description: 'Hand-rolled <meta> tag injection via DOM manipulation',
|
|
46
|
+
filePatterns: ['**/*.ts', '**/*.tsx', '**/*.js', '**/*.jsx'],
|
|
47
|
+
codePatterns: [
|
|
48
|
+
/document\s*\.\s*createElement\s*\(\s*['"`]meta['"`]\s*\)/,
|
|
49
|
+
/document\s*\.\s*head\s*\.\s*appendChild/,
|
|
50
|
+
/document\s*\.\s*querySelector\s*\(\s*['"`]meta\[/,
|
|
51
|
+
],
|
|
52
|
+
suggestedLibrary: 'next-seo',
|
|
53
|
+
suggestedVersion: '^6.0.0',
|
|
54
|
+
license: 'MIT',
|
|
55
|
+
confidenceBase: 0.75,
|
|
56
|
+
},
|
|
57
|
+
{
|
|
58
|
+
id: 'seo-manual-sitemap',
|
|
59
|
+
domain: 'seo',
|
|
60
|
+
description: 'Hand-rolled XML sitemap generation',
|
|
61
|
+
filePatterns: ['**/*.ts', '**/*.js', '**/*.xml'],
|
|
62
|
+
codePatterns: [
|
|
63
|
+
/<\?xml\s+version/,
|
|
64
|
+
/<urlset\s+xmlns/,
|
|
65
|
+
/writeFileSync\s*\(.*sitemap/i,
|
|
66
|
+
],
|
|
67
|
+
suggestedLibrary: 'next-sitemap',
|
|
68
|
+
suggestedVersion: '^4.0.0',
|
|
69
|
+
license: 'MIT',
|
|
70
|
+
confidenceBase: 0.8,
|
|
71
|
+
},
|
|
72
|
+
// -----------------------------------------------------------------------
|
|
73
|
+
// growth-hacking — A/B Testing, Analytics, Feature Flags, Funnel Tracking
|
|
74
|
+
// -----------------------------------------------------------------------
|
|
75
|
+
{
|
|
76
|
+
id: 'growth-manual-ab-test',
|
|
77
|
+
domain: 'growth-hacking',
|
|
78
|
+
description: 'Hand-rolled A/B testing with Math.random() or cookie-based splits',
|
|
79
|
+
filePatterns: ['**/*.ts', '**/*.tsx', '**/*.js', '**/*.jsx'],
|
|
80
|
+
codePatterns: [
|
|
81
|
+
/Math\s*\.\s*random\s*\(\s*\)\s*[<>]=?\s*0?\.\s*5/,
|
|
82
|
+
/variant\s*=\s*['"`][AB]['"`]/i,
|
|
83
|
+
/experiment\s*[=:]\s*.*random/i,
|
|
84
|
+
],
|
|
85
|
+
suggestedLibrary: 'posthog-js',
|
|
86
|
+
suggestedVersion: '^1.100.0',
|
|
87
|
+
license: 'MIT',
|
|
88
|
+
confidenceBase: 0.7,
|
|
89
|
+
},
|
|
90
|
+
{
|
|
91
|
+
id: 'growth-manual-feature-flags',
|
|
92
|
+
domain: 'growth-hacking',
|
|
93
|
+
description: 'Hand-rolled feature flag checks via environment variables or config objects',
|
|
94
|
+
filePatterns: ['**/*.ts', '**/*.tsx', '**/*.js', '**/*.jsx'],
|
|
95
|
+
codePatterns: [
|
|
96
|
+
/process\s*\.\s*env\s*\.\s*FEATURE_/,
|
|
97
|
+
/featureFlags?\s*\[/,
|
|
98
|
+
/isFeatureEnabled\s*\(/,
|
|
99
|
+
],
|
|
100
|
+
suggestedLibrary: 'unleash-client',
|
|
101
|
+
suggestedVersion: '^5.0.0',
|
|
102
|
+
license: 'Apache-2.0',
|
|
103
|
+
confidenceBase: 0.6,
|
|
104
|
+
},
|
|
105
|
+
// -----------------------------------------------------------------------
|
|
106
|
+
// ai-model-serving — Inference, Model Registry, Prompt Management
|
|
107
|
+
// -----------------------------------------------------------------------
|
|
108
|
+
{
|
|
109
|
+
id: 'ai-manual-prompt-template',
|
|
110
|
+
domain: 'ai-model-serving',
|
|
111
|
+
description: 'Hand-rolled prompt template string interpolation',
|
|
112
|
+
filePatterns: ['**/*.ts', '**/*.tsx', '**/*.js', '**/*.jsx', '**/*.py'],
|
|
113
|
+
codePatterns: [
|
|
114
|
+
/`[^`]*\$\{.*\}[^`]*`\s*.*(?:prompt|system|user|assistant)/i,
|
|
115
|
+
/f['"].*\{.*\}.*['"].*(?:prompt|model|completion)/i,
|
|
116
|
+
/\.replace\s*\(\s*['"`]\{.*\}['"`]/,
|
|
117
|
+
],
|
|
118
|
+
suggestedLibrary: 'langchain',
|
|
119
|
+
suggestedVersion: '^0.2.0',
|
|
120
|
+
license: 'MIT',
|
|
121
|
+
confidenceBase: 0.65,
|
|
122
|
+
},
|
|
123
|
+
{
|
|
124
|
+
id: 'ai-manual-inference-http',
|
|
125
|
+
domain: 'ai-model-serving',
|
|
126
|
+
description: 'Hand-rolled HTTP calls to model inference endpoints',
|
|
127
|
+
filePatterns: ['**/*.ts', '**/*.js', '**/*.py'],
|
|
128
|
+
codePatterns: [
|
|
129
|
+
/fetch\s*\(\s*['"`].*(?:openai|anthropic|huggingface|inference)/i,
|
|
130
|
+
/axios\s*\.\s*post\s*\(\s*['"`].*(?:completions|chat|generate)/i,
|
|
131
|
+
/requests\s*\.\s*post\s*\(\s*['"`].*(?:v1\/|api\/)/i,
|
|
132
|
+
],
|
|
133
|
+
suggestedLibrary: 'ai',
|
|
134
|
+
suggestedVersion: '^3.0.0',
|
|
135
|
+
license: 'Apache-2.0',
|
|
136
|
+
confidenceBase: 0.7,
|
|
137
|
+
},
|
|
138
|
+
// -----------------------------------------------------------------------
|
|
139
|
+
// agent-architecture — MCP Integration, Tool Orchestration, Context, Memory
|
|
140
|
+
// -----------------------------------------------------------------------
|
|
141
|
+
{
|
|
142
|
+
id: 'agent-manual-tool-dispatch',
|
|
143
|
+
domain: 'agent-architecture',
|
|
144
|
+
description: 'Hand-rolled tool dispatch with switch/case or if/else chains',
|
|
145
|
+
filePatterns: ['**/*.ts', '**/*.js', '**/*.py'],
|
|
146
|
+
codePatterns: [
|
|
147
|
+
/switch\s*\(\s*tool(?:Name|_name|Id)\s*\)/i,
|
|
148
|
+
/if\s*\(\s*tool(?:Name|_name)\s*===?\s*['"`]/i,
|
|
149
|
+
/tool_map\s*\[/i,
|
|
150
|
+
],
|
|
151
|
+
suggestedLibrary: '@modelcontextprotocol/sdk',
|
|
152
|
+
suggestedVersion: '^1.0.0',
|
|
153
|
+
license: 'MIT',
|
|
154
|
+
confidenceBase: 0.7,
|
|
155
|
+
},
|
|
156
|
+
{
|
|
157
|
+
id: 'agent-manual-context-window',
|
|
158
|
+
domain: 'agent-architecture',
|
|
159
|
+
description: 'Hand-rolled context window management (token counting, truncation)',
|
|
160
|
+
filePatterns: ['**/*.ts', '**/*.js', '**/*.py'],
|
|
161
|
+
codePatterns: [
|
|
162
|
+
/token[_s]?\s*(?:count|length|limit)/i,
|
|
163
|
+
/truncat(?:e|ion)\s*.*(?:context|message|prompt)/i,
|
|
164
|
+
/maxTokens?\s*[=:]/i,
|
|
165
|
+
],
|
|
166
|
+
suggestedLibrary: 'tiktoken',
|
|
167
|
+
suggestedVersion: '^1.0.0',
|
|
168
|
+
license: 'MIT',
|
|
169
|
+
confidenceBase: 0.6,
|
|
170
|
+
},
|
|
171
|
+
// -----------------------------------------------------------------------
|
|
172
|
+
// content-marketing — CMS, MDX Pipelines
|
|
173
|
+
// -----------------------------------------------------------------------
|
|
174
|
+
{
|
|
175
|
+
id: 'content-manual-markdown-parsing',
|
|
176
|
+
domain: 'content-marketing',
|
|
177
|
+
description: 'Hand-rolled markdown parsing with regex or string manipulation',
|
|
178
|
+
filePatterns: ['**/*.ts', '**/*.js', '**/*.tsx', '**/*.jsx'],
|
|
179
|
+
codePatterns: [
|
|
180
|
+
/\.replace\s*\(\s*\/\s*#/,
|
|
181
|
+
/\.replace\s*\(\s*\/\s*\\\*\\\*/,
|
|
182
|
+
/\.split\s*\(\s*['"`]\\n['"`]\s*\)\s*\.\s*map/,
|
|
183
|
+
],
|
|
184
|
+
suggestedLibrary: 'contentlayer',
|
|
185
|
+
suggestedVersion: '^0.3.0',
|
|
186
|
+
license: 'MIT',
|
|
187
|
+
confidenceBase: 0.65,
|
|
188
|
+
},
|
|
189
|
+
{
|
|
190
|
+
id: 'content-manual-mdx-processing',
|
|
191
|
+
domain: 'content-marketing',
|
|
192
|
+
description: 'Hand-rolled MDX/markdown file processing pipeline',
|
|
193
|
+
filePatterns: ['**/*.ts', '**/*.js'],
|
|
194
|
+
codePatterns: [
|
|
195
|
+
/readFileSync\s*\(.*\.mdx?\b/i,
|
|
196
|
+
/glob\s*\(.*\.mdx?\b/i,
|
|
197
|
+
/frontmatter|gray-matter/i,
|
|
198
|
+
],
|
|
199
|
+
suggestedLibrary: 'next-mdx-remote',
|
|
200
|
+
suggestedVersion: '^4.0.0',
|
|
201
|
+
license: 'MIT',
|
|
202
|
+
confidenceBase: 0.6,
|
|
203
|
+
},
|
|
204
|
+
// -----------------------------------------------------------------------
|
|
205
|
+
// cross-border-ecommerce — Payments, Shipping, Tax, Catalogs
|
|
206
|
+
// -----------------------------------------------------------------------
|
|
207
|
+
{
|
|
208
|
+
id: 'ecommerce-manual-payment-integration',
|
|
209
|
+
domain: 'cross-border-ecommerce',
|
|
210
|
+
description: 'Hand-rolled payment gateway HTTP integration',
|
|
211
|
+
filePatterns: ['**/*.ts', '**/*.js', '**/*.py'],
|
|
212
|
+
codePatterns: [
|
|
213
|
+
/fetch\s*\(\s*['"`].*(?:stripe|paypal|checkout).*['"`]/i,
|
|
214
|
+
/payment[_-]?intent/i,
|
|
215
|
+
/charge\s*\.\s*create/i,
|
|
216
|
+
],
|
|
217
|
+
suggestedLibrary: 'stripe',
|
|
218
|
+
suggestedVersion: '^14.0.0',
|
|
219
|
+
license: 'MIT',
|
|
220
|
+
confidenceBase: 0.75,
|
|
221
|
+
},
|
|
222
|
+
{
|
|
223
|
+
id: 'ecommerce-manual-tax-calculation',
|
|
224
|
+
domain: 'cross-border-ecommerce',
|
|
225
|
+
description: 'Hand-rolled tax/VAT calculation logic',
|
|
226
|
+
filePatterns: ['**/*.ts', '**/*.js', '**/*.py'],
|
|
227
|
+
codePatterns: [
|
|
228
|
+
/tax[_-]?rate\s*[=:]\s*0?\.\d+/i,
|
|
229
|
+
/vat\s*[=:*]/i,
|
|
230
|
+
/calculateTax\s*\(/i,
|
|
231
|
+
],
|
|
232
|
+
suggestedLibrary: 'taxjar',
|
|
233
|
+
suggestedVersion: '^5.0.0',
|
|
234
|
+
license: 'MIT',
|
|
235
|
+
confidenceBase: 0.65,
|
|
236
|
+
},
|
|
237
|
+
// -----------------------------------------------------------------------
|
|
238
|
+
// observability — Logging, Tracing, Metrics, Error Tracking, CI/CD
|
|
239
|
+
// -----------------------------------------------------------------------
|
|
240
|
+
{
|
|
241
|
+
id: 'observability-manual-logging',
|
|
242
|
+
domain: 'observability',
|
|
243
|
+
description: 'Hand-rolled logging with console.log/console.error in production code',
|
|
244
|
+
filePatterns: ['**/*.ts', '**/*.js', '**/*.tsx', '**/*.jsx'],
|
|
245
|
+
codePatterns: [
|
|
246
|
+
/console\s*\.\s*(?:log|error|warn|info)\s*\(/,
|
|
247
|
+
],
|
|
248
|
+
suggestedLibrary: 'pino',
|
|
249
|
+
suggestedVersion: '^9.0.0',
|
|
250
|
+
license: 'MIT',
|
|
251
|
+
confidenceBase: 0.55,
|
|
252
|
+
},
|
|
253
|
+
{
|
|
254
|
+
id: 'observability-manual-error-tracking',
|
|
255
|
+
domain: 'observability',
|
|
256
|
+
description: 'Hand-rolled error tracking with try/catch and HTTP reporting',
|
|
257
|
+
filePatterns: ['**/*.ts', '**/*.js', '**/*.tsx', '**/*.jsx'],
|
|
258
|
+
codePatterns: [
|
|
259
|
+
/catch\s*\(\s*\w+\s*\)\s*\{[^}]*fetch\s*\(/,
|
|
260
|
+
/window\s*\.\s*onerror/,
|
|
261
|
+
/process\s*\.\s*on\s*\(\s*['"`]uncaughtException['"`]/,
|
|
262
|
+
],
|
|
263
|
+
suggestedLibrary: 'sentry',
|
|
264
|
+
suggestedVersion: '^8.0.0',
|
|
265
|
+
license: 'MIT',
|
|
266
|
+
confidenceBase: 0.7,
|
|
267
|
+
},
|
|
268
|
+
// -----------------------------------------------------------------------
|
|
269
|
+
// auth-security — Authentication, Authorization/RBAC, Secrets, Rate Limiting
|
|
270
|
+
// -----------------------------------------------------------------------
|
|
271
|
+
{
|
|
272
|
+
id: 'auth-manual-jwt-handling',
|
|
273
|
+
domain: 'auth-security',
|
|
274
|
+
description: 'Hand-rolled JWT token creation/verification',
|
|
275
|
+
filePatterns: ['**/*.ts', '**/*.js', '**/*.py'],
|
|
276
|
+
codePatterns: [
|
|
277
|
+
/atob\s*\(\s*.*split\s*\(\s*['"`]\.['"`]\s*\)/,
|
|
278
|
+
/Buffer\s*\.\s*from\s*\(.*['"`]base64['"`]\s*\)/,
|
|
279
|
+
/jwt\s*\.\s*sign\s*\(/i,
|
|
280
|
+
/createHmac\s*\(/,
|
|
281
|
+
],
|
|
282
|
+
suggestedLibrary: 'jose',
|
|
283
|
+
suggestedVersion: '^5.0.0',
|
|
284
|
+
license: 'MIT',
|
|
285
|
+
confidenceBase: 0.75,
|
|
286
|
+
},
|
|
287
|
+
{
|
|
288
|
+
id: 'auth-manual-rate-limiting',
|
|
289
|
+
domain: 'auth-security',
|
|
290
|
+
description: 'Hand-rolled rate limiting with in-memory counters or timestamps',
|
|
291
|
+
filePatterns: ['**/*.ts', '**/*.js'],
|
|
292
|
+
codePatterns: [
|
|
293
|
+
/requestCount\s*[+]=\s*1/i,
|
|
294
|
+
/rateLimi(?:t|ter)/i,
|
|
295
|
+
/new\s+Map\s*\(\s*\).*(?:timestamp|count|window)/i,
|
|
296
|
+
],
|
|
297
|
+
suggestedLibrary: 'rate-limiter-flexible',
|
|
298
|
+
suggestedVersion: '^5.0.0',
|
|
299
|
+
license: 'ISC',
|
|
300
|
+
confidenceBase: 0.65,
|
|
301
|
+
},
|
|
302
|
+
// -----------------------------------------------------------------------
|
|
303
|
+
// ux-completeness — Accessibility, Error/Empty/Loading States, etc.
|
|
304
|
+
// -----------------------------------------------------------------------
|
|
305
|
+
{
|
|
306
|
+
id: 'ux-manual-form-validation',
|
|
307
|
+
domain: 'ux-completeness',
|
|
308
|
+
description: 'Hand-rolled form validation with manual state tracking',
|
|
309
|
+
filePatterns: ['**/*.tsx', '**/*.jsx', '**/*.ts', '**/*.js'],
|
|
310
|
+
codePatterns: [
|
|
311
|
+
/setError\s*\(\s*['"`]/,
|
|
312
|
+
/errors\s*\[\s*['"`]\w+['"`]\s*\]/,
|
|
313
|
+
/validate\w*\s*=\s*\(\s*\)\s*=>/,
|
|
314
|
+
],
|
|
315
|
+
suggestedLibrary: 'react-hook-form',
|
|
316
|
+
suggestedVersion: '^7.50.0',
|
|
317
|
+
license: 'MIT',
|
|
318
|
+
confidenceBase: 0.7,
|
|
319
|
+
},
|
|
320
|
+
{
|
|
321
|
+
id: 'ux-manual-loading-states',
|
|
322
|
+
domain: 'ux-completeness',
|
|
323
|
+
description: 'Hand-rolled loading state management without skeleton/spinner library',
|
|
324
|
+
filePatterns: ['**/*.tsx', '**/*.jsx'],
|
|
325
|
+
codePatterns: [
|
|
326
|
+
/isLoading\s*\?\s*.*(?:Loading|Spinner|\.\.\.)/i,
|
|
327
|
+
/useState\s*<\s*boolean\s*>\s*\(\s*(?:true|false)\s*\).*loading/i,
|
|
328
|
+
],
|
|
329
|
+
suggestedLibrary: 'react-loading-skeleton',
|
|
330
|
+
suggestedVersion: '^3.4.0',
|
|
331
|
+
license: 'MIT',
|
|
332
|
+
confidenceBase: 0.55,
|
|
333
|
+
},
|
|
334
|
+
];
|
|
335
|
+
}
|
|
336
|
+
/**
|
|
337
|
+
* Returns patterns filtered to a specific Vibe Coding domain.
|
|
338
|
+
*/
|
|
339
|
+
export function getPatternsForDomain(domain) {
|
|
340
|
+
return getPatternCatalog().filter((p) => p.domain === domain);
|
|
341
|
+
}
|
|
342
|
+
//# sourceMappingURL=pattern-catalog.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"pattern-catalog.js","sourceRoot":"","sources":["../../src/analyzer/pattern-catalog.ts"],"names":[],"mappings":"AA2BA;;;GAGG;AACH,MAAM,UAAU,iBAAiB;IAC/B,OAAO;QACL,0EAA0E;QAC1E,2CAA2C;QAC3C,0EAA0E;QAC1E;YACE,EAAE,EAAE,2BAA2B;YAC/B,MAAM,EAAE,MAAM;YACd,WAAW,EAAE,+DAA+D;YAC5E,YAAY,EAAE,CAAC,SAAS,EAAE,UAAU,EAAE,SAAS,EAAE,UAAU,CAAC;YAC5D,YAAY,EAAE;gBACZ,4DAA4D;gBAC5D,+DAA+D;aAChE;YACD,gBAAgB,EAAE,SAAS;YAC3B,gBAAgB,EAAE,SAAS;YAC3B,OAAO,EAAE,KAAK;YACd,cAAc,EAAE,GAAG;SACpB;QACD;YACE,EAAE,EAAE,8BAA8B;YAClC,MAAM,EAAE,MAAM;YACd,WAAW,EAAE,6DAA6D;YAC1E,YAAY,EAAE,CAAC,SAAS,EAAE,UAAU,EAAE,SAAS,EAAE,UAAU,CAAC;YAC5D,YAAY,EAAE;gBACZ,2BAA2B;gBAC3B,kBAAkB;gBAClB,yBAAyB;aAC1B;YACD,gBAAgB,EAAE,eAAe;YACjC,gBAAgB,EAAE,SAAS;YAC3B,OAAO,EAAE,KAAK;YACd,cAAc,EAAE,IAAI;SACrB;QAED,0EAA0E;QAC1E,yCAAyC;QACzC,0EAA0E;QAC1E;YACE,EAAE,EAAE,sBAAsB;YAC1B,MAAM,EAAE,KAAK;YACb,WAAW,EAAE,uDAAuD;YACpE,YAAY,EAAE,CAAC,SAAS,EAAE,UAAU,EAAE,SAAS,EAAE,UAAU,CAAC;YAC5D,YAAY,EAAE;gBACZ,0DAA0D;gBAC1D,yCAAyC;gBACzC,kDAAkD;aACnD;YACD,gBAAgB,EAAE,UAAU;YAC5B,gBAAgB,EAAE,QAAQ;YAC1B,OAAO,EAAE,KAAK;YACd,cAAc,EAAE,IAAI;SACrB;QACD;YACE,EAAE,EAAE,oBAAoB;YACxB,MAAM,EAAE,KAAK;YACb,WAAW,EAAE,oCAAoC;YACjD,YAAY,EAAE,CAAC,SAAS,EAAE,SAAS,EAAE,UAAU,CAAC;YAChD,YAAY,EAAE;gBACZ,kBAAkB;gBAClB,iBAAiB;gBACjB,8BAA8B;aAC/B;YACD,gBAAgB,EAAE,cAAc;YAChC,gBAAgB,EAAE,QAAQ;YAC1B,OAAO,EAAE,KAAK;YACd,cAAc,EAAE,GAAG;SACpB;QAED,0EAA0E;QAC1E,0EAA0E;QAC1E,0EAA0E;QAC1E;YACE,EAAE,EAAE,uBAAuB;YAC3B,MAAM,EAAE,gBAAgB;YACxB,WAAW,EAAE,mEAAmE;YAChF,YAAY,EAAE,CAAC,SAAS,EAAE,UAAU,EAAE,SAAS,EAAE,UAAU,CAAC;YAC5D,YAAY,EAAE;gBACZ,kDAAkD;gBAClD,+BAA+B;gBAC/B,+BAA+B;aAChC;YACD,gBAAgB,EAAE,YAAY;YAC9B,gBAAgB,EAAE,UAAU;YAC5B,OAAO,EAAE,KAAK;YACd,cAAc,EAAE,GAAG;SACpB;QACD;YACE,EAAE,EAAE,6BAA6B;YACjC,MAAM,EAAE,gBAAgB;YACxB,WAAW,EAAE,6EAA6E;YAC1F,YAAY,EAAE,CAAC,SAAS,EAAE,UAAU,EAAE,SAAS,EAAE,UAAU,CAAC;YAC5D,YAAY,EAAE;gBACZ,oCAAoC;gBACpC,oBAAoB;gBACpB,uBAAuB;aACxB;YACD,gBAAgB,EAAE,gBAAgB;YAClC,gBAAgB,EAAE,QAAQ;YAC1B,OAAO,EAAE,YAAY;YACrB,cAAc,EAAE,GAAG;SACpB;QAED,0EAA0E;QAC1E,kEAAkE;QAClE,0EAA0E;QAC1E;YACE,EAAE,EAAE,2BAA2B;YAC/B,MAAM,EAAE,kBAAkB;YAC1B,WAAW,EAAE,kDAAkD;YAC/D,YAAY,EAAE,CAAC,SAAS,EAAE,UAAU,EAAE,SAAS,EAAE,UAAU,EAAE,SAAS,CAAC;YACvE,YAAY,EAAE;gBACZ,4DAA4D;gBAC5D,mDAAmD;gBACnD,mCAAmC;aACpC;YACD,gBAAgB,EAAE,WAAW;YAC7B,gBAAgB,EAAE,QAAQ;YAC1B,OAAO,EAAE,KAAK;YACd,cAAc,EAAE,IAAI;SACrB;QACD;YACE,EAAE,EAAE,0BAA0B;YAC9B,MAAM,EAAE,kBAAkB;YAC1B,WAAW,EAAE,qDAAqD;YAClE,YAAY,EAAE,CAAC,SAAS,EAAE,SAAS,EAAE,SAAS,CAAC;YAC/C,YAAY,EAAE;gBACZ,iEAAiE;gBACjE,gEAAgE;gBAChE,oDAAoD;aACrD;YACD,gBAAgB,EAAE,IAAI;YACtB,gBAAgB,EAAE,QAAQ;YAC1B,OAAO,EAAE,YAAY;YACrB,cAAc,EAAE,GAAG;SACpB;QAED,0EAA0E;QAC1E,4EAA4E;QAC5E,0EAA0E;QAC1E;YACE,EAAE,EAAE,4BAA4B;YAChC,MAAM,EAAE,oBAAoB;YAC5B,WAAW,EAAE,8DAA8D;YAC3E,YAAY,EAAE,CAAC,SAAS,EAAE,SAAS,EAAE,SAAS,CAAC;YAC/C,YAAY,EAAE;gBACZ,2CAA2C;gBAC3C,8CAA8C;gBAC9C,gBAAgB;aACjB;YACD,gBAAgB,EAAE,2BAA2B;YAC7C,gBAAgB,EAAE,QAAQ;YAC1B,OAAO,EAAE,KAAK;YACd,cAAc,EAAE,GAAG;SACpB;QACD;YACE,EAAE,EAAE,6BAA6B;YACjC,MAAM,EAAE,oBAAoB;YAC5B,WAAW,EAAE,oEAAoE;YACjF,YAAY,EAAE,CAAC,SAAS,EAAE,SAAS,EAAE,SAAS,CAAC;YAC/C,YAAY,EAAE;gBACZ,sCAAsC;gBACtC,kDAAkD;gBAClD,oBAAoB;aACrB;YACD,gBAAgB,EAAE,UAAU;YAC5B,gBAAgB,EAAE,QAAQ;YAC1B,OAAO,EAAE,KAAK;YACd,cAAc,EAAE,GAAG;SACpB;QAED,0EAA0E;QAC1E,yCAAyC;QACzC,0EAA0E;QAC1E;YACE,EAAE,EAAE,iCAAiC;YACrC,MAAM,EAAE,mBAAmB;YAC3B,WAAW,EAAE,gEAAgE;YAC7E,YAAY,EAAE,CAAC,SAAS,EAAE,SAAS,EAAE,UAAU,EAAE,UAAU,CAAC;YAC5D,YAAY,EAAE;gBACZ,yBAAyB;gBACzB,gCAAgC;gBAChC,8CAA8C;aAC/C;YACD,gBAAgB,EAAE,cAAc;YAChC,gBAAgB,EAAE,QAAQ;YAC1B,OAAO,EAAE,KAAK;YACd,cAAc,EAAE,IAAI;SACrB;QACD;YACE,EAAE,EAAE,+BAA+B;YACnC,MAAM,EAAE,mBAAmB;YAC3B,WAAW,EAAE,mDAAmD;YAChE,YAAY,EAAE,CAAC,SAAS,EAAE,SAAS,CAAC;YACpC,YAAY,EAAE;gBACZ,8BAA8B;gBAC9B,sBAAsB;gBACtB,0BAA0B;aAC3B;YACD,gBAAgB,EAAE,iBAAiB;YACnC,gBAAgB,EAAE,QAAQ;YAC1B,OAAO,EAAE,KAAK;YACd,cAAc,EAAE,GAAG;SACpB;QAED,0EAA0E;QAC1E,6DAA6D;QAC7D,0EAA0E;QAC1E;YACE,EAAE,EAAE,sCAAsC;YAC1C,MAAM,EAAE,wBAAwB;YAChC,WAAW,EAAE,8CAA8C;YAC3D,YAAY,EAAE,CAAC,SAAS,EAAE,SAAS,EAAE,SAAS,CAAC;YAC/C,YAAY,EAAE;gBACZ,wDAAwD;gBACxD,qBAAqB;gBACrB,uBAAuB;aACxB;YACD,gBAAgB,EAAE,QAAQ;YAC1B,gBAAgB,EAAE,SAAS;YAC3B,OAAO,EAAE,KAAK;YACd,cAAc,EAAE,IAAI;SACrB;QACD;YACE,EAAE,EAAE,kCAAkC;YACtC,MAAM,EAAE,wBAAwB;YAChC,WAAW,EAAE,uCAAuC;YACpD,YAAY,EAAE,CAAC,SAAS,EAAE,SAAS,EAAE,SAAS,CAAC;YAC/C,YAAY,EAAE;gBACZ,gCAAgC;gBAChC,cAAc;gBACd,oBAAoB;aACrB;YACD,gBAAgB,EAAE,QAAQ;YAC1B,gBAAgB,EAAE,QAAQ;YAC1B,OAAO,EAAE,KAAK;YACd,cAAc,EAAE,IAAI;SACrB;QAED,0EAA0E;QAC1E,mEAAmE;QACnE,0EAA0E;QAC1E;YACE,EAAE,EAAE,8BAA8B;YAClC,MAAM,EAAE,eAAe;YACvB,WAAW,EAAE,uEAAuE;YACpF,YAAY,EAAE,CAAC,SAAS,EAAE,SAAS,EAAE,UAAU,EAAE,UAAU,CAAC;YAC5D,YAAY,EAAE;gBACZ,6CAA6C;aAC9C;YACD,gBAAgB,EAAE,MAAM;YACxB,gBAAgB,EAAE,QAAQ;YAC1B,OAAO,EAAE,KAAK;YACd,cAAc,EAAE,IAAI;SACrB;QACD;YACE,EAAE,EAAE,qCAAqC;YACzC,MAAM,EAAE,eAAe;YACvB,WAAW,EAAE,8DAA8D;YAC3E,YAAY,EAAE,CAAC,SAAS,EAAE,SAAS,EAAE,UAAU,EAAE,UAAU,CAAC;YAC5D,YAAY,EAAE;gBACZ,2CAA2C;gBAC3C,uBAAuB;gBACvB,sDAAsD;aACvD;YACD,gBAAgB,EAAE,QAAQ;YAC1B,gBAAgB,EAAE,QAAQ;YAC1B,OAAO,EAAE,KAAK;YACd,cAAc,EAAE,GAAG;SACpB;QAED,0EAA0E;QAC1E,6EAA6E;QAC7E,0EAA0E;QAC1E;YACE,EAAE,EAAE,0BAA0B;YAC9B,MAAM,EAAE,eAAe;YACvB,WAAW,EAAE,6CAA6C;YAC1D,YAAY,EAAE,CAAC,SAAS,EAAE,SAAS,EAAE,SAAS,CAAC;YAC/C,YAAY,EAAE;gBACZ,8CAA8C;gBAC9C,gDAAgD;gBAChD,uBAAuB;gBACvB,iBAAiB;aAClB;YACD,gBAAgB,EAAE,MAAM;YACxB,gBAAgB,EAAE,QAAQ;YAC1B,OAAO,EAAE,KAAK;YACd,cAAc,EAAE,IAAI;SACrB;QACD;YACE,EAAE,EAAE,2BAA2B;YAC/B,MAAM,EAAE,eAAe;YACvB,WAAW,EAAE,iEAAiE;YAC9E,YAAY,EAAE,CAAC,SAAS,EAAE,SAAS,CAAC;YACpC,YAAY,EAAE;gBACZ,0BAA0B;gBAC1B,oBAAoB;gBACpB,kDAAkD;aACnD;YACD,gBAAgB,EAAE,uBAAuB;YACzC,gBAAgB,EAAE,QAAQ;YAC1B,OAAO,EAAE,KAAK;YACd,cAAc,EAAE,IAAI;SACrB;QAED,0EAA0E;QAC1E,oEAAoE;QACpE,0EAA0E;QAC1E;YACE,EAAE,EAAE,2BAA2B;YAC/B,MAAM,EAAE,iBAAiB;YACzB,WAAW,EAAE,wDAAwD;YACrE,YAAY,EAAE,CAAC,UAAU,EAAE,UAAU,EAAE,SAAS,EAAE,SAAS,CAAC;YAC5D,YAAY,EAAE;gBACZ,uBAAuB;gBACvB,kCAAkC;gBAClC,gCAAgC;aACjC;YACD,gBAAgB,EAAE,iBAAiB;YACnC,gBAAgB,EAAE,SAAS;YAC3B,OAAO,EAAE,KAAK;YACd,cAAc,EAAE,GAAG;SACpB;QACD;YACE,EAAE,EAAE,0BAA0B;YAC9B,MAAM,EAAE,iBAAiB;YACzB,WAAW,EAAE,uEAAuE;YACpF,YAAY,EAAE,CAAC,UAAU,EAAE,UAAU,CAAC;YACtC,YAAY,EAAE;gBACZ,gDAAgD;gBAChD,iEAAiE;aAClE;YACD,gBAAgB,EAAE,wBAAwB;YAC1C,gBAAgB,EAAE,QAAQ;YAC1B,OAAO,EAAE,KAAK;YACd,cAAc,EAAE,IAAI;SACrB;KACF,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,oBAAoB,CAAC,MAAc;IACjD,OAAO,iBAAiB,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC;AAChE,CAAC"}
|
|
@@ -0,0 +1,33 @@
|
|
|
1
|
+
import type { InputSchema } from '../schemas/input.schema.js';
|
|
2
|
+
export interface Detection {
|
|
3
|
+
filePath: string;
|
|
4
|
+
lineRange: {
|
|
5
|
+
start: number;
|
|
6
|
+
end: number;
|
|
7
|
+
};
|
|
8
|
+
patternCategory: string;
|
|
9
|
+
confidenceScore: number;
|
|
10
|
+
suggestedLibrary: string;
|
|
11
|
+
domain: string;
|
|
12
|
+
}
|
|
13
|
+
export interface WorkspaceScan {
|
|
14
|
+
root: string;
|
|
15
|
+
packageManager: string;
|
|
16
|
+
language: string;
|
|
17
|
+
dependencies: Record<string, string>;
|
|
18
|
+
}
|
|
19
|
+
export interface ScanResult {
|
|
20
|
+
detections: Detection[];
|
|
21
|
+
workspaces: WorkspaceScan[];
|
|
22
|
+
}
|
|
23
|
+
/**
|
|
24
|
+
* Scan a codebase for hand-rolled implementations that could be replaced
|
|
25
|
+
* by third-party libraries.
|
|
26
|
+
*
|
|
27
|
+
* - Walks the file tree under `input.projectMetadata.repoPath`
|
|
28
|
+
* - Detects workspace roots for monorepos (package.json, pyproject.toml, etc.)
|
|
29
|
+
* - Matches source files against the pattern catalog
|
|
30
|
+
* - Returns structured `ScanResult` with detections and workspace info
|
|
31
|
+
*/
|
|
32
|
+
export declare function scanCodebase(input: InputSchema): Promise<ScanResult>;
|
|
33
|
+
//# sourceMappingURL=scanner.d.ts.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"scanner.d.ts","sourceRoot":"","sources":["../../src/analyzer/scanner.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,4BAA4B,CAAC;AAO9D,MAAM,WAAW,SAAS;IACxB,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,GAAG,EAAE,MAAM,CAAA;KAAE,CAAC;IAC1C,eAAe,EAAE,MAAM,CAAC;IACxB,eAAe,EAAE,MAAM,CAAC;IACxB,gBAAgB,EAAE,MAAM,CAAC;IACzB,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,MAAM,CAAC;IACb,cAAc,EAAE,MAAM,CAAC;IACvB,QAAQ,EAAE,MAAM,CAAC;IACjB,YAAY,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CACtC;AAED,MAAM,WAAW,UAAU;IACzB,UAAU,EAAE,SAAS,EAAE,CAAC;IACxB,UAAU,EAAE,aAAa,EAAE,CAAC;CAC7B;AAmTD;;;;;;;;GAQG;AACH,wBAAsB,YAAY,CAAC,KAAK,EAAE,WAAW,GAAG,OAAO,CAAC,UAAU,CAAC,CAuB1E"}
|