@opensip-cli/checks-typescript 0.1.0

package/dist/checks/architecture/circular-import-detection.js

@@ -0,0 +1,55 @@
+/**
+ * @fileoverview Circular-import detection check.
+ *
+ * Detects file-level circular dependencies using Tarjan's SCC algorithm
+ * over the project's intra-project import graph. Each strongly-connected
+ * component of size > 1 represents a real cycle (a chain of files where
+ * `a → b → ... → a`).
+ *
+ * Complements the existing module/package-level coupling checks; this one
+ * operates at the file level, where cycles most often originate during
+ * iterative agent-driven development.
+ */
+import { defineCheck, buildImportGraph, findStronglyConnectedComponents, } from '@opensip-cli/fitness';
+export const circularImportDetection = defineCheck({
+    id: 'fc8b5ec9-d020-4e76-b16f-f5f73ce9d21e',
+    slug: 'circular-import-detection',
+    description: 'Detects file-level circular import dependencies',
+    longDescription: "Builds the project import graph and runs Tarjan's SCC algorithm to find " +
+        'cycles. Each cycle (chain of files where a → b → … → a) is reported as a ' +
+        'separate violation against the first file in the cycle (the anchor).',
+    scope: {
+        languages: ['typescript', 'tsx', 'javascript', 'jsx'],
+        concerns: ['backend', 'frontend', 'cli', 'shared'],
+    },
+    confidence: 'high',
+    tags: ['architecture', 'modularity'],
+    fileTypes: ['ts', 'tsx', 'js', 'jsx'],
+    async analyzeAll(files) {
+        const fileMap = await files.readAll();
+        const graph = buildImportGraph(fileMap);
+        const sccs = findStronglyConnectedComponents(graph);
+        const violations = [];
+        for (const scc of sccs) {
+            // Skip SCCs of size 1 (no cycle, or self-loop which is rare and not
+            // structurally interesting at the file level).
+            if (scc.length < 2)
+                continue;
+            // The anchor file gets the violation. Sort the cycle for deterministic
+            // output regardless of graph iteration order.
+            const cycle = [...scc].sort();
+            const anchor = cycle[0];
+            const chain = cycle.join(' → ') + ' → ' + anchor;
+            violations.push({
+                severity: 'error',
+                message: `Circular import (${cycle.length} files): ${chain}`,
+                filePath: anchor,
+                // Graph-level violation — no specific statement; line 1 is the conventional
+                // anchor for file-scoped findings.
+                line: 1,
+            });
+        }
+        return violations;
+    },
+});
+//# sourceMappingURL=circular-import-detection.js.map

package/dist/checks/architecture/circular-import-detection.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"circular-import-detection.js","sourceRoot":"","sources":["../../../src/checks/architecture/circular-import-detection.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,EACL,WAAW,EAGX,gBAAgB,EAChB,+BAA+B,GAChC,MAAM,sBAAsB,CAAC;AAE9B,MAAM,CAAC,MAAM,uBAAuB,GAAG,WAAW,CAAC;IACjD,EAAE,EAAE,sCAAsC;IAC1C,IAAI,EAAE,2BAA2B;IACjC,WAAW,EAAE,iDAAiD;IAC9D,eAAe,EACb,0EAA0E;QAC1E,2EAA2E;QAC3E,sEAAsE;IACxE,KAAK,EAAE;QACL,SAAS,EAAE,CAAC,YAAY,EAAE,KAAK,EAAE,YAAY,EAAE,KAAK,CAAC;QACrD,QAAQ,EAAE,CAAC,SAAS,EAAE,UAAU,EAAE,KAAK,EAAE,QAAQ,CAAC;KACnD;IACD,UAAU,EAAE,MAAM;IAClB,IAAI,EAAE,CAAC,cAAc,EAAE,YAAY,CAAC;IACpC,SAAS,EAAE,CAAC,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,CAAC;IAErC,KAAK,CAAC,UAAU,CAAC,KAAmB;QAClC,MAAM,OAAO,GAAG,MAAM,KAAK,CAAC,OAAO,EAAE,CAAC;QACtC,MAAM,KAAK,GAAG,gBAAgB,CAAC,OAAO,CAAC,CAAC;QACxC,MAAM,IAAI,GAAG,+BAA+B,CAAC,KAAK,CAAC,CAAC;QAEpD,MAAM,UAAU,GAAqB,EAAE,CAAC;QACxC,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;YACvB,oEAAoE;YACpE,+CAA+C;YAC/C,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC;gBAAE,SAAS;YAE7B,uEAAuE;YACvE,8CAA8C;YAC9C,MAAM,KAAK,GAAG,CAAC,GAAG,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;YAC9B,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;YACxB,MAAM,KAAK,GAAG,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,KAAK,GAAG,MAAM,CAAC;YAEjD,UAAU,CAAC,IAAI,CAAC;gBACd,QAAQ,EAAE,OAAO;gBACjB,OAAO,EAAE,oBAAoB,KAAK,CAAC,MAAM,YAAY,KAAK,EAAE;gBAC5D,QAAQ,EAAE,MAAM;gBAChB,4EAA4E;gBAC5E,mCAAmC;gBACnC,IAAI,EAAE,CAAC;aACR,CAAC,CAAC;QACL,CAAC;QACD,OAAO,UAAU,CAAC;IACpB,CAAC;CACF,CAAC,CAAC"}

package/dist/checks/architecture/contracts-schema-consistency.d.ts

@@ -0,0 +1,11 @@
+/**
+ * @fileoverview Contracts schema consistency check
+ */
+/**
+ * Check: architecture/contracts-schema-consistency
+ *
+ * Validates that contracts use Zod schemas consistently:
+ * - Types derived from schemas via z.infer
+ */
+export declare const contractsSchemaConsistency: import("@opensip-cli/fitness").Check;
+//# sourceMappingURL=contracts-schema-consistency.d.ts.map

package/dist/checks/architecture/contracts-schema-consistency.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"contracts-schema-consistency.d.ts","sourceRoot":"","sources":["../../../src/checks/architecture/contracts-schema-consistency.ts"],"names":[],"mappings":"AAAA;;GAEG;AAIH;;;;;GAKG;AACH,eAAO,MAAM,0BAA0B,sCAuErC,CAAC"}

package/dist/checks/architecture/contracts-schema-consistency.js

@@ -0,0 +1,75 @@
+/**
+ * @fileoverview Contracts schema consistency check
+ */
+import { defineCheck } from '@opensip-cli/fitness';
+/**
+ * Check: architecture/contracts-schema-consistency
+ *
+ * Validates that contracts use Zod schemas consistently:
+ * - Types derived from schemas via z.infer
+ */
+export const contractsSchemaConsistency = defineCheck({
+    id: '3f2fb75f-27f5-4572-aa18-1947f98ac82f',
+    slug: 'contracts-schema-consistency',
+    scope: { languages: ['typescript'], concerns: ['backend', 'frontend', 'cli'] },
+    contentFilter: 'strip-strings',
+    confidence: 'medium',
+    description: 'Validates that contracts use Zod schemas consistently: types derived from schemas via z.infer',
+    longDescription: `**Purpose:** Ensures contracts package maintains consistency between Zod schemas and TypeScript types.
+
+**Detects:**
+- Types defined alongside Zod schemas that are NOT derived via \`z.infer<typeof Schema>\`
+
+**Why it matters:** Manual type definitions alongside schemas can drift, causing runtime/compile-time mismatches.
+
+**Scope:** Contracts package only. Analyzes all matched files together (\`analyzeAll\`).`,
+    tags: ['architecture', 'contracts', 'zod', 'consistency'],
+    fileTypes: ['ts'],
+    // eslint-disable-next-line sonarjs/cognitive-complexity -- Schema validation requires nested checks for type derivation patterns across multiple Zod constructs
+    async analyzeAll(files) {
+        const violations = [];
+        // @fitness-ignore-next-line batch-operation-limits -- files.paths is bounded by contracts package scope (typically <100 files)
+        for (const filePath of files.paths) {
+            // @fitness-ignore-next-line performance-anti-patterns -- sequential file reading to control memory; FileAccessor is lazy
+            const content = await files.read(filePath);
+            /* v8 ignore next -- defensive guard */
+            if (!content)
+                continue;
+            const lines = content.split('\n');
+            // --- Check 1: Types alongside schemas should use z.infer ---
+            const schemaNames = new Set();
+            // @fitness-ignore-next-line batch-operation-limits -- iterating over lines of a single file, bounded by file-length-limits check
+            for (const line of lines) {
+                const schemaMatch = /export\s+const\s+(\w+Schema)\s*=\s*z\./.exec(line);
+                if (schemaMatch?.[1]) {
+                    schemaNames.add(schemaMatch[1]);
+                }
+            }
+            for (const [i, line_] of lines.entries()) {
+                /* v8 ignore next -- defensive nullish fallback */
+                const line = line_ ?? '';
+                // Check for manually defined types that have a corresponding schema
+                const typeMatch = /export\s+type\s+(\w+)\s*=\s*(?!z\.infer)/.exec(line);
+                if (typeMatch?.[1]) {
+                    const typeName = typeMatch[1];
+                    const expectedSchema = `${typeName}Schema`;
+                    if (schemaNames.has(expectedSchema) && !line.includes('z.infer')) {
+                        violations.push({
+                            filePath,
+                            line: i + 1,
+                            message: `Type '${typeName}' has a corresponding Zod schema '${expectedSchema}' but is not derived from it`,
+                            severity: 'error',
+                            suggestion: `Change to: export type ${typeName} = z.infer<typeof ${expectedSchema}>`,
+                            type: 'type-schema-mismatch',
+                        });
+                    }
+                }
+                // Check 2 (.passthrough()/.strict() on object schemas) is intentionally
+                // disabled — opensip does not use .passthrough() as a convention and the
+                // sub-check produced false positives across the codebase.
+            }
+        }
+        return violations;
+    },
+});
+//# sourceMappingURL=contracts-schema-consistency.js.map

package/dist/checks/architecture/contracts-schema-consistency.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"contracts-schema-consistency.js","sourceRoot":"","sources":["../../../src/checks/architecture/contracts-schema-consistency.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EAAE,WAAW,EAA0C,MAAM,sBAAsB,CAAC;AAE3F;;;;;GAKG;AACH,MAAM,CAAC,MAAM,0BAA0B,GAAG,WAAW,CAAC;IACpD,EAAE,EAAE,sCAAsC;IAC1C,IAAI,EAAE,8BAA8B;IACpC,KAAK,EAAE,EAAE,SAAS,EAAE,CAAC,YAAY,CAAC,EAAE,QAAQ,EAAE,CAAC,SAAS,EAAE,UAAU,EAAE,KAAK,CAAC,EAAE;IAC9E,aAAa,EAAE,eAAe;IAE9B,UAAU,EAAE,QAAQ;IACpB,WAAW,EACT,+FAA+F;IACjG,eAAe,EAAE;;;;;;;yFAOsE;IACvF,IAAI,EAAE,CAAC,cAAc,EAAE,WAAW,EAAE,KAAK,EAAE,aAAa,CAAC;IACzD,SAAS,EAAE,CAAC,IAAI,CAAC;IAEjB,gKAAgK;IAChK,KAAK,CAAC,UAAU,CAAC,KAAmB;QAClC,MAAM,UAAU,GAAqB,EAAE,CAAC;QAExC,+HAA+H;QAC/H,KAAK,MAAM,QAAQ,IAAI,KAAK,CAAC,KAAK,EAAE,CAAC;YACnC,yHAAyH;YACzH,MAAM,OAAO,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;YAC3C,uCAAuC;YACvC,IAAI,CAAC,OAAO;gBAAE,SAAS;YACvB,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YAElC,8DAA8D;YAC9D,MAAM,WAAW,GAAG,IAAI,GAAG,EAAU,CAAC;YACtC,iIAAiI;YACjI,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;gBACzB,MAAM,WAAW,GAAG,wCAAwC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBACxE,IAAI,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;oBACrB,WAAW,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC;gBAClC,CAAC;YACH,CAAC;YAED,KAAK,MAAM,CAAC,CAAC,EAAE,KAAK,CAAC,IAAI,KAAK,CAAC,OAAO,EAAE,EAAE,CAAC;gBACzC,kDAAkD;gBAClD,MAAM,IAAI,GAAG,KAAK,IAAI,EAAE,CAAC;gBAEzB,oEAAoE;gBACpE,MAAM,SAAS,GAAG,0CAA0C,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBACxE,IAAI,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;oBACnB,MAAM,QAAQ,GAAG,SAAS,CAAC,CAAC,CAAC,CAAC;oBAC9B,MAAM,cAAc,GAAG,GAAG,QAAQ,QAAQ,CAAC;oBAC3C,IAAI,WAAW,CAAC,GAAG,CAAC,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC;wBACjE,UAAU,CAAC,IAAI,CAAC;4BACd,QAAQ;4BACR,IAAI,EAAE,CAAC,GAAG,CAAC;4BACX,OAAO,EAAE,SAAS,QAAQ,qCAAqC,cAAc,8BAA8B;4BAC3G,QAAQ,EAAE,OAAO;4BACjB,UAAU,EAAE,0BAA0B,QAAQ,qBAAqB,cAAc,GAAG;4BACpF,IAAI,EAAE,sBAAsB;yBAC7B,CAAC,CAAC;oBACL,CAAC;gBACH,CAAC;gBAED,wEAAwE;gBACxE,yEAAyE;gBACzE,0DAA0D;YAC5D,CAAC;QACH,CAAC;QAED,OAAO,UAAU,CAAC;IACpB,CAAC;CACF,CAAC,CAAC"}

package/dist/checks/architecture/drizzle-orm-migration-guardrails.d.ts

@@ -0,0 +1,12 @@
+/**
+ * @fileoverview Drizzle ORM migration guardrails
+ * @module checks-builtin/checks/architecture/drizzle-orm-migration-guardrails
+ *
+ * Detects dangerous patterns in Drizzle ORM migrations and queries:
+ * - Raw SQL template literals that bypass the query builder
+ * - Missing transaction wrappers on multi-statement migrations
+ * - DROP TABLE/COLUMN without explicit confirmation comment
+ * - ALTER TABLE with data loss risk (column type changes)
+ */
+export declare const drizzleOrmMigrationGuardrails: import("@opensip-cli/fitness").Check;
+//# sourceMappingURL=drizzle-orm-migration-guardrails.d.ts.map

package/dist/checks/architecture/drizzle-orm-migration-guardrails.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"drizzle-orm-migration-guardrails.d.ts","sourceRoot":"","sources":["../../../src/checks/architecture/drizzle-orm-migration-guardrails.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAkDH,eAAO,MAAM,6BAA6B,sCAiDxC,CAAC"}

package/dist/checks/architecture/drizzle-orm-migration-guardrails.js

@@ -0,0 +1,92 @@
+/**
+ * @fileoverview Drizzle ORM migration guardrails
+ * @module checks-builtin/checks/architecture/drizzle-orm-migration-guardrails
+ *
+ * Detects dangerous patterns in Drizzle ORM migrations and queries:
+ * - Raw SQL template literals that bypass the query builder
+ * - Missing transaction wrappers on multi-statement migrations
+ * - DROP TABLE/COLUMN without explicit confirmation comment
+ * - ALTER TABLE with data loss risk (column type changes)
+ */
+import { defineCheck, isTestFile } from '@opensip-cli/fitness';
+const DANGEROUS_PATTERNS = [
+    {
+        pattern: /sql\.unsafe\s*\(/,
+        message: 'sql.unsafe() bypasses parameterized queries — SQL injection risk',
+        suggestion: 'Use parameterized queries via the Drizzle query builder or sql`` template literals with interpolation.',
+        severity: 'error',
+    },
+    {
+        pattern: /DROP\s+TABLE/i,
+        message: 'DROP TABLE detected — data loss risk. Ensure this is intentional.',
+        suggestion: 'Add a comment above confirming this is intentional: // DATA-LOSS: intentional table drop for migration X',
+        severity: 'warning',
+    },
+    {
+        pattern: /DROP\s+COLUMN/i,
+        message: 'DROP COLUMN detected — data loss risk. Ensure this is intentional.',
+        suggestion: 'Add a comment above confirming this is intentional: // DATA-LOSS: intentional column drop',
+        severity: 'warning',
+    },
+    {
+        pattern: /ALTER\s+(?:TABLE|COLUMN).*TYPE/i,
+        message: 'Column type change detected — potential data loss or truncation',
+        suggestion: 'Verify the type change is safe. Add a comment explaining the migration strategy.',
+        severity: 'warning',
+    },
+    {
+        pattern: /TRUNCATE\s+/i,
+        message: 'TRUNCATE detected — deletes all rows without logging',
+        suggestion: 'Use DELETE with a WHERE clause if you need audit logging, or confirm TRUNCATE is intentional.',
+        severity: 'error',
+    },
+];
+const DATA_LOSS_CONFIRMATION = /DATA-LOSS.*intentional/i;
+export const drizzleOrmMigrationGuardrails = defineCheck({
+    id: 'b67ccead-3731-40c5-9a90-6fc4b88c2bc5',
+    slug: 'drizzle-orm-migration-guardrails',
+    scope: { languages: ['typescript'], concerns: ['backend'] },
+    confidence: 'high',
+    description: 'Detects dangerous patterns in Drizzle ORM migrations (raw SQL, DROP, TRUNCATE, type changes)',
+    tags: ['architecture', 'database', 'safety', 'drizzle'],
+    fileTypes: ['ts'],
+    // eslint-disable-next-line sonarjs/cognitive-complexity -- multi-pattern guardrail: each branch detects a distinct dangerous Drizzle migration pattern
+    analyze(content, filePath) {
+        // Only check migration files and schema files
+        if (!filePath.includes('/migrations/') && !filePath.includes('/schema'))
+            return [];
+        if (isTestFile(filePath))
+            return [];
+        const violations = [];
+        const lines = content.split('\n');
+        for (let i = 0; i < lines.length; i++) {
+            const line = lines[i];
+            /* v8 ignore next -- defensive guard */
+            if (!line)
+                continue;
+            const trimmed = line.trim();
+            if (trimmed.startsWith('//') || trimmed.startsWith('*'))
+                continue;
+            for (const dp of DANGEROUS_PATTERNS) {
+                if (dp.pattern.test(line)) {
+                    // Check if previous lines have a DATA-LOSS confirmation comment
+                    /* v8 ignore next -- defensive non-negative guard */
+                    const prevLines = lines.slice(Math.max(0, i - 3), i).join('\n');
+                    if (DATA_LOSS_CONFIRMATION.test(prevLines))
+                        continue;
+                    violations.push({
+                        line: i + 1,
+                        message: dp.message,
+                        severity: dp.severity,
+                        suggestion: dp.suggestion,
+                        type: 'MIGRATION_GUARDRAIL',
+                        match: trimmed.slice(0, 100),
+                        filePath,
+                    });
+                }
+            }
+        }
+        return violations;
+    },
+});
+//# sourceMappingURL=drizzle-orm-migration-guardrails.js.map

package/dist/checks/architecture/drizzle-orm-migration-guardrails.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"drizzle-orm-migration-guardrails.js","sourceRoot":"","sources":["../../../src/checks/architecture/drizzle-orm-migration-guardrails.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,EAAE,WAAW,EAAE,UAAU,EAAuB,MAAM,sBAAsB,CAAC;AASpF,MAAM,kBAAkB,GAAuB;IAC7C;QACE,OAAO,EAAE,kBAAkB;QAC3B,OAAO,EAAE,kEAAkE;QAC3E,UAAU,EACR,wGAAwG;QAC1G,QAAQ,EAAE,OAAO;KAClB;IACD;QACE,OAAO,EAAE,eAAe;QACxB,OAAO,EAAE,mEAAmE;QAC5E,UAAU,EACR,0GAA0G;QAC5G,QAAQ,EAAE,SAAS;KACpB;IACD;QACE,OAAO,EAAE,gBAAgB;QACzB,OAAO,EAAE,oEAAoE;QAC7E,UAAU,EACR,2FAA2F;QAC7F,QAAQ,EAAE,SAAS;KACpB;IACD;QACE,OAAO,EAAE,iCAAiC;QAC1C,OAAO,EAAE,iEAAiE;QAC1E,UAAU,EAAE,kFAAkF;QAC9F,QAAQ,EAAE,SAAS;KACpB;IACD;QACE,OAAO,EAAE,cAAc;QACvB,OAAO,EAAE,sDAAsD;QAC/D,UAAU,EACR,+FAA+F;QACjG,QAAQ,EAAE,OAAO;KAClB;CACF,CAAC;AAEF,MAAM,sBAAsB,GAAG,yBAAyB,CAAC;AAEzD,MAAM,CAAC,MAAM,6BAA6B,GAAG,WAAW,CAAC;IACvD,EAAE,EAAE,sCAAsC;IAC1C,IAAI,EAAE,kCAAkC;IACxC,KAAK,EAAE,EAAE,SAAS,EAAE,CAAC,YAAY,CAAC,EAAE,QAAQ,EAAE,CAAC,SAAS,CAAC,EAAE;IAC3D,UAAU,EAAE,MAAM;IAClB,WAAW,EACT,8FAA8F;IAChG,IAAI,EAAE,CAAC,cAAc,EAAE,UAAU,EAAE,QAAQ,EAAE,SAAS,CAAC;IACvD,SAAS,EAAE,CAAC,IAAI,CAAC;IAEjB,uJAAuJ;IACvJ,OAAO,CAAC,OAAe,EAAE,QAAgB;QACvC,8CAA8C;QAC9C,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,cAAc,CAAC,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,SAAS,CAAC;YAAE,OAAO,EAAE,CAAC;QACnF,IAAI,UAAU,CAAC,QAAQ,CAAC;YAAE,OAAO,EAAE,CAAC;QAEpC,MAAM,UAAU,GAAqB,EAAE,CAAC;QACxC,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAElC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YACtC,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;YACtB,uCAAuC;YACvC,IAAI,CAAC,IAAI;gBAAE,SAAS;YAEpB,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;YAC5B,IAAI,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC;gBAAE,SAAS;YAElE,KAAK,MAAM,EAAE,IAAI,kBAAkB,EAAE,CAAC;gBACpC,IAAI,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;oBAC1B,gEAAgE;oBAChE,oDAAoD;oBACpD,MAAM,SAAS,GAAG,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;oBAChE,IAAI,sBAAsB,CAAC,IAAI,CAAC,SAAS,CAAC;wBAAE,SAAS;oBAErD,UAAU,CAAC,IAAI,CAAC;wBACd,IAAI,EAAE,CAAC,GAAG,CAAC;wBACX,OAAO,EAAE,EAAE,CAAC,OAAO;wBACnB,QAAQ,EAAE,EAAE,CAAC,QAAQ;wBACrB,UAAU,EAAE,EAAE,CAAC,UAAU;wBACzB,IAAI,EAAE,qBAAqB;wBAC3B,KAAK,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC;wBAC5B,QAAQ;qBACT,CAAC,CAAC;gBACL,CAAC;YACH,CAAC;QACH,CAAC;QAED,OAAO,UAAU,CAAC;IACpB,CAAC;CACF,CAAC,CAAC"}

package/dist/checks/architecture/index.d.ts

@@ -0,0 +1,10 @@
+export * from './circular-import-detection.js';
+export * from './contracts-schema-consistency.js';
+export * from './drizzle-orm-migration-guardrails.js';
+export * from './missing-type-exports.js';
+export * from './module-coupling-fan-out.js';
+export * from './no-bootstrap-tool-import.js';
+export * from './package-json-exports-field.js';
+export * from './phantom-dependency-detection.js';
+export * from './tsconfig-extends-validation.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/checks/architecture/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/checks/architecture/index.ts"],"names":[],"mappings":"AAAA,cAAc,gCAAgC,CAAC;AAC/C,cAAc,mCAAmC,CAAC;AAClD,cAAc,uCAAuC,CAAC;AACtD,cAAc,2BAA2B,CAAC;AAC1C,cAAc,8BAA8B,CAAC;AAC7C,cAAc,+BAA+B,CAAC;AAC9C,cAAc,iCAAiC,CAAC;AAChD,cAAc,mCAAmC,CAAC;AAClD,cAAc,kCAAkC,CAAC"}

package/dist/checks/architecture/index.js

@@ -0,0 +1,10 @@
+export * from './circular-import-detection.js';
+export * from './contracts-schema-consistency.js';
+export * from './drizzle-orm-migration-guardrails.js';
+export * from './missing-type-exports.js';
+export * from './module-coupling-fan-out.js';
+export * from './no-bootstrap-tool-import.js';
+export * from './package-json-exports-field.js';
+export * from './phantom-dependency-detection.js';
+export * from './tsconfig-extends-validation.js';
+//# sourceMappingURL=index.js.map

package/dist/checks/architecture/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/checks/architecture/index.ts"],"names":[],"mappings":"AAAA,cAAc,gCAAgC,CAAC;AAC/C,cAAc,mCAAmC,CAAC;AAClD,cAAc,uCAAuC,CAAC;AACtD,cAAc,2BAA2B,CAAC;AAC1C,cAAc,8BAA8B,CAAC;AAC7C,cAAc,+BAA+B,CAAC;AAC9C,cAAc,iCAAiC,CAAC;AAChD,cAAc,mCAAmC,CAAC;AAClD,cAAc,kCAAkC,CAAC"}

package/dist/checks/architecture/missing-type-exports.d.ts

@@ -0,0 +1,13 @@
+/**
+ * @fileoverview Missing type exports detection
+ * @module checks-builtin/checks/architecture/missing-type-exports
+ *
+ * Detects imports via deep internal paths that are not publicly exposed
+ * through the importee's package.json "exports" map or its barrel file.
+ *
+ * Public entries declared in "exports" (e.g. `@opensip/core/logger` with
+ * `"./logger"` in the exports map) are NOT flagged — those are legitimate
+ * subpath entry points, not deep internal imports.
+ */
+export declare const missingTypeExports: import("@opensip-cli/fitness").Check;
+//# sourceMappingURL=missing-type-exports.d.ts.map

package/dist/checks/architecture/missing-type-exports.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"missing-type-exports.d.ts","sourceRoot":"","sources":["../../../src/checks/architecture/missing-type-exports.ts"],"names":[],"mappings":"AAEA;;;;;;;;;;GAUG;AAuIH,eAAO,MAAM,kBAAkB,sCAwH7B,CAAC"}

package/dist/checks/architecture/missing-type-exports.js

@@ -0,0 +1,245 @@
+// @fitness-ignore-file fitness-check-standards -- Uses fs for workspace-wide package.json exports map resolution
+// @fitness-ignore-file performance-anti-patterns -- sequential file reads keep memory bounded across workspace package scan
+/**
+ * @fileoverview Missing type exports detection
+ * @module checks-builtin/checks/architecture/missing-type-exports
+ *
+ * Detects imports via deep internal paths that are not publicly exposed
+ * through the importee's package.json "exports" map or its barrel file.
+ *
+ * Public entries declared in "exports" (e.g. `@opensip/core/logger` with
+ * `"./logger"` in the exports map) are NOT flagged — those are legitimate
+ * subpath entry points, not deep internal imports.
+ */
+import * as fs from 'node:fs';
+import * as path from 'node:path';
+import { defineCheck, isTestFile, } from '@opensip-cli/fitness';
+const IMPORT_PATTERN = /import\s+(?:type\s+)?\{([^}]+)\}\s+from\s+['"]([^'"]+)['"]/g;
+const NAMED_EXPORT_BLOCK = /export\s+(?:type\s+)?\{([^}]+)\}/g;
+const NAMED_EXPORT_DECL = /export\s+(?:type\s+)?(?:interface|type|class|enum|function|const)\s+(\w+)/g;
+const TRAVERSAL_SKIP_DIRS = new Set([
+    'node_modules',
+    'dist',
+    '.turbo',
+    '.git',
+    'coverage',
+    'build',
+    '.worktrees',
+]);
+function extractNames(block) {
+    return block
+        .split(',')
+        .map((n) => {
+        const trimmed = n.trim();
+        const asMatch = /^(\w+)\s+as\s+/.exec(trimmed);
+        return asMatch ? asMatch[1] : trimmed;
+    })
+        .filter((n) => n.length > 0 && /^\w+$/.test(n));
+}
+function findPackageJsonFiles(root, depth = 0) {
+    if (depth > 5)
+        return [];
+    const results = [];
+    try {
+        for (const entry of fs.readdirSync(root, { withFileTypes: true })) {
+            if (TRAVERSAL_SKIP_DIRS.has(entry.name))
+                continue;
+            const full = path.join(root, entry.name);
+            if (entry.isDirectory()) {
+                results.push(...findPackageJsonFiles(full, depth + 1));
+            }
+            else if (entry.name === 'package.json') {
+                results.push(full);
+            }
+        }
+        /* v8 ignore next 1 -- defensive catch: parse failures already handled */
+    }
+    catch {
+        // @swallow-ok directory may be unreadable; skip silently
+    }
+    return results;
+}
+/**
+ * Walk the `exports` field of a package.json and collect every declared
+ * subpath (including wildcards). Handles both string and object forms,
+ * including conditional exports like `{ "import": "...", "default": "..." }`.
+ */
+function collectExportSubpaths(exportsField) {
+    const subpaths = new Set();
+    const wildcardPrefixes = [];
+    /* v8 ignore next -- defensive guard */
+    if (exportsField == null) {
+        return { subpaths, wildcardPrefixes };
+    }
+    // Shorthand: `"exports": "./dist/index.js"` — only root "." is public
+    /* v8 ignore next -- defensive guard */
+    if (typeof exportsField === 'string') {
+        subpaths.add('.');
+        return { subpaths, wildcardPrefixes };
+    }
+    /* v8 ignore next -- defensive guard */
+    if (typeof exportsField !== 'object') {
+        return { subpaths, wildcardPrefixes };
+    }
+    const record = exportsField;
+    const keys = Object.keys(record);
+    // Conditional-only shorthand (no subpath keys, just conditions) — root is public
+    const looksLikeConditionalOnly = keys.length > 0 && keys.every((k) => !k.startsWith('.'));
+    if (looksLikeConditionalOnly) {
+        subpaths.add('.');
+        return { subpaths, wildcardPrefixes };
+    }
+    for (const key of keys) {
+        if (!key.startsWith('.'))
+            continue;
+        if (key.includes('*')) {
+            const starIdx = key.indexOf('*');
+            wildcardPrefixes.push(key.slice(0, starIdx));
+        }
+        else {
+            subpaths.add(key);
+        }
+    }
+    return { subpaths, wildcardPrefixes };
+}
+/** Match an import subpath (e.g. "./errors") against a package's exports map. */
+function isDeclaredExport(subpath, info) {
+    if (info.subpaths.has(subpath))
+        return true;
+    for (const prefix of info.wildcardPrefixes) {
+        if (subpath.startsWith(prefix))
+            return true;
+    }
+    return false;
+}
+/** Split "@scope/pkg/some/subpath" into { pkg: "@scope/pkg", subpath: "./some/subpath" }. */
+function splitImportPath(importPath) {
+    if (!importPath.startsWith('@'))
+        return null;
+    const segments = importPath.split('/');
+    /* v8 ignore next -- defensive AST/type guard */
+    if (segments.length < 2)
+        return null;
+    const pkg = `${segments[0]}/${segments[1]}`;
+    if (segments.length === 2)
+        return { pkg, subpath: '.' };
+    const rest = segments.slice(2).join('/');
+    return { pkg, subpath: `./${rest}` };
+}
+export const missingTypeExports = defineCheck({
+    id: '8d36209b-5aeb-4ab0-8255-3134a20fdfd5',
+    slug: 'missing-type-exports',
+    scope: { languages: ['typescript'], concerns: ['backend', 'frontend'] },
+    confidence: 'medium',
+    description: 'Detects types imported via deep internal paths not declared in the package exports map or barrel',
+    tags: ['architecture', 'api-surface', 'monorepo'],
+    // eslint-disable-next-line sonarjs/cognitive-complexity -- cross-file analyzer: discovers packages, parses imports, and cross-references declared exports against deep-path usage
+    async analyzeAll(files) {
+        const violations = [];
+        // ---------------------------------------------------------------------
+        // Step 1: Discover workspace packages and their declared exports maps.
+        // This is a workspace-wide concern — the target's glob can't express
+        // it — so we reach outside the FileAccessor using node:fs.
+        // ---------------------------------------------------------------------
+        const projectRoot = process.cwd();
+        const exportsByPackage = new Map();
+        for (const pkgJsonPath of findPackageJsonFiles(projectRoot)) {
+            let parsed;
+            try {
+                const stats = fs.statSync(pkgJsonPath);
+                /* v8 ignore next -- defensive guard */
+                if (stats.size > 1_000_000)
+                    continue;
+                parsed = JSON.parse(fs.readFileSync(pkgJsonPath, 'utf8'));
+                /* v8 ignore next 1 -- defensive catch: parse failures already handled */
+            }
+            catch {
+                continue;
+            }
+            const name = parsed.name;
+            if (!name?.startsWith('@'))
+                continue;
+            if (parsed.exports !== undefined) {
+                exportsByPackage.set(name, collectExportSubpaths(parsed.exports));
+            }
+        }
+        // ---------------------------------------------------------------------
+        // Step 2: Build set of exported names from all package barrels.
+        // Fallback precision signal for packages without an exports map:
+        // if the imported name appears in SOME barrel, treat as public.
+        // ---------------------------------------------------------------------
+        const barrelFiles = files.paths.filter((p) => (/^packages\/[^/]+\/src\/index\.ts$/.test(p) ||
+            /^services\/[^/]+\/src\/index\.ts$/.test(p)) &&
+            !p.includes('node_modules'));
+        const allExportedNames = new Set();
+        for (const barrelPath of barrelFiles) {
+            const content = await files.read(barrelPath);
+            /* v8 ignore next -- defensive guard */
+            if (!content)
+                continue;
+            for (const match of content.matchAll(NAMED_EXPORT_BLOCK)) {
+                for (const name of extractNames(match[1]))
+                    allExportedNames.add(name);
+            }
+            for (const match of content.matchAll(NAMED_EXPORT_DECL)) {
+                if (match[1])
+                    allExportedNames.add(match[1]);
+            }
+        }
+        // ---------------------------------------------------------------------
+        // Step 3: Scan source files for deep imports that are NOT declared in
+        // the target package's exports map (and not surfaced via any barrel).
+        // ---------------------------------------------------------------------
+        for (const filePath of files.paths) {
+            if (!filePath.endsWith('.ts') && !filePath.endsWith('.tsx'))
+                continue;
+            if (filePath.includes('node_modules') || filePath.includes('/dist/'))
+                continue;
+            if (isTestFile(filePath))
+                continue;
+            const content = await files.read(filePath);
+            /* v8 ignore next -- defensive guard */
+            if (!content)
+                continue;
+            for (const importMatch of content.matchAll(IMPORT_PATTERN)) {
+                const importPath = importMatch[2];
+                const parts = splitImportPath(importPath);
+                if (!parts)
+                    continue;
+                // Root imports (`@scope/pkg`) are never deep — skip.
+                if (parts.subpath === '.')
+                    continue;
+                // If this package declares an exports map and the subpath is
+                // explicitly listed (or matches a wildcard), the import is a
+                // legitimate public entry point. Skip without examining names.
+                const exportsInfo = exportsByPackage.get(parts.pkg);
+                if (exportsInfo && isDeclaredExport(parts.subpath, exportsInfo))
+                    continue;
+                // If the package has an exports map but this subpath is NOT
+                // declared, it's a genuine violation (Node would refuse to
+                // resolve it at runtime). If the package has no exports map,
+                // fall back to the barrel name check for precision.
+                const packageHasExportsMap = exportsInfo !== undefined;
+                const names = extractNames(importMatch[1]);
+                /* v8 ignore next -- defensive nullish fallback */
+                const matchIndex = importMatch.index ?? 0;
+                for (const name of names) {
+                    if (!packageHasExportsMap && allExportedNames.has(name))
+                        continue;
+                    const lineNum = content.slice(0, matchIndex).split('\n').length;
+                    violations.push({
+                        filePath,
+                        line: lineNum,
+                        message: `'${name}' imported from deep path '${importPath}' which is not declared in '${parts.pkg}' package.json "exports" map.`,
+                        severity: 'warning',
+                        suggestion: `Either add "${parts.subpath}" to '${parts.pkg}' package.json "exports", or re-export '${name}' from the barrel and import from '${parts.pkg}'.`,
+                        type: 'MISSING_TYPE_EXPORT',
+                        match: name,
+                    });
+                }
+            }
+        }
+        return violations;
+    },
+});
+//# sourceMappingURL=missing-type-exports.js.map

package/dist/checks/architecture/missing-type-exports.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"missing-type-exports.js","sourceRoot":"","sources":["../../../src/checks/architecture/missing-type-exports.ts"],"names":[],"mappings":"AAAA,iHAAiH;AACjH,4HAA4H;AAC5H;;;;;;;;;;GAUG;AAEH,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAElC,OAAO,EACL,WAAW,EACX,UAAU,GAGX,MAAM,sBAAsB,CAAC;AAE9B,MAAM,cAAc,GAAG,6DAA6D,CAAC;AACrF,MAAM,kBAAkB,GAAG,mCAAmC,CAAC;AAC/D,MAAM,iBAAiB,GACrB,4EAA4E,CAAC;AAE/E,MAAM,mBAAmB,GAAG,IAAI,GAAG,CAAC;IAClC,cAAc;IACd,MAAM;IACN,QAAQ;IACR,MAAM;IACN,UAAU;IACV,OAAO;IACP,YAAY;CACb,CAAC,CAAC;AASH,SAAS,YAAY,CAAC,KAAa;IACjC,OAAO,KAAK;SACT,KAAK,CAAC,GAAG,CAAC;SACV,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;QACT,MAAM,OAAO,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;QACzB,MAAM,OAAO,GAAG,gBAAgB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAC/C,OAAO,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC;IACxC,CAAC,CAAC;SACD,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;AACpD,CAAC;AAED,SAAS,oBAAoB,CAAC,IAAY,EAAE,KAAK,GAAG,CAAC;IACnD,IAAI,KAAK,GAAG,CAAC;QAAE,OAAO,EAAE,CAAC;IACzB,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,IAAI,CAAC;QACH,KAAK,MAAM,KAAK,IAAI,EAAE,CAAC,WAAW,CAAC,IAAI,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;YAClE,IAAI,mBAAmB,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC;gBAAE,SAAS;YAClD,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;YACzC,IAAI,KAAK,CAAC,WAAW,EAAE,EAAE,CAAC;gBACxB,OAAO,CAAC,IAAI,CAAC,GAAG,oBAAoB,CAAC,IAAI,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC;YACzD,CAAC;iBAAM,IAAI,KAAK,CAAC,IAAI,KAAK,cAAc,EAAE,CAAC;gBACzC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACrB,CAAC;QACH,CAAC;QACD,yEAAyE;IAC3E,CAAC;IAAC,MAAM,CAAC;QACP,yDAAyD;IAC3D,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;;;;GAIG;AACH,SAAS,qBAAqB,CAAC,YAAqB;IAClD,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAU,CAAC;IACnC,MAAM,gBAAgB,GAAa,EAAE,CAAC;IAEtC,uCAAuC;IACvC,IAAI,YAAY,IAAI,IAAI,EAAE,CAAC;QACzB,OAAO,EAAE,QAAQ,EAAE,gBAAgB,EAAE,CAAC;IACxC,CAAC;IAED,sEAAsE;IACtE,uCAAuC;IACvC,IAAI,OAAO,YAAY,KAAK,QAAQ,EAAE,CAAC;QACrC,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAClB,OAAO,EAAE,QAAQ,EAAE,gBAAgB,EAAE,CAAC;IACxC,CAAC;IAED,uCAAuC;IACvC,IAAI,OAAO,YAAY,KAAK,QAAQ,EAAE,CAAC;QACrC,OAAO,EAAE,QAAQ,EAAE,gBAAgB,EAAE,CAAC;IACxC,CAAC;IAED,MAAM,MAAM,GAAG,YAAuC,CAAC;IACvD,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAEjC,iFAAiF;IACjF,MAAM,wBAAwB,GAAG,IAAI,CAAC,MAAM,GAAG,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC;IAC1F,IAAI,wBAAwB,EAAE,CAAC;QAC7B,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAClB,OAAO,EAAE,QAAQ,EAAE,gBAAgB,EAAE,CAAC;IACxC,CAAC;IAED,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC;YAAE,SAAS;QACnC,IAAI,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;YACtB,MAAM,OAAO,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;YACjC,gBAAgB,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC,CAAC;QAC/C,CAAC;aAAM,CAAC;YACN,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACpB,CAAC;IACH,CAAC;IAED,OAAO,EAAE,QAAQ,EAAE,gBAAgB,EAAE,CAAC;AACxC,CAAC;AAED,iFAAiF;AACjF,SAAS,gBAAgB,CAAC,OAAe,EAAE,IAAwB;IACjE,IAAI,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC;QAAE,OAAO,IAAI,CAAC;IAC5C,KAAK,MAAM,MAAM,IAAI,IAAI,CAAC,gBAAgB,EAAE,CAAC;QAC3C,IAAI,OAAO,CAAC,UAAU,CAAC,MAAM,CAAC;YAAE,OAAO,IAAI,CAAC;IAC9C,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,6FAA6F;AAC7F,SAAS,eAAe,CAAC,UAAkB;IACzC,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IAC7C,MAAM,QAAQ,GAAG,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACvC,gDAAgD;IAChD,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IACrC,MAAM,GAAG,GAAG,GAAG,QAAQ,CAAC,CAAC,CAAC,IAAI,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC;IAC5C,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC;IACxD,MAAM,IAAI,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACzC,OAAO,EAAE,GAAG,EAAE,OAAO,EAAE,KAAK,IAAI,EAAE,EAAE,CAAC;AACvC,CAAC;AAED,MAAM,CAAC,MAAM,kBAAkB,GAAG,WAAW,CAAC;IAC5C,EAAE,EAAE,sCAAsC;IAC1C,IAAI,EAAE,sBAAsB;IAC5B,KAAK,EAAE,EAAE,SAAS,EAAE,CAAC,YAAY,CAAC,EAAE,QAAQ,EAAE,CAAC,SAAS,EAAE,UAAU,CAAC,EAAE;IACvE,UAAU,EAAE,QAAQ;IACpB,WAAW,EACT,kGAAkG;IACpG,IAAI,EAAE,CAAC,cAAc,EAAE,aAAa,EAAE,UAAU,CAAC;IAEjD,kLAAkL;IAClL,KAAK,CAAC,UAAU,CAAC,KAAmB;QAClC,MAAM,UAAU,GAAqB,EAAE,CAAC;QAExC,wEAAwE;QACxE,uEAAuE;QACvE,qEAAqE;QACrE,2DAA2D;QAC3D,wEAAwE;QACxE,MAAM,WAAW,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC;QAClC,MAAM,gBAAgB,GAAG,IAAI,GAAG,EAA8B,CAAC;QAE/D,KAAK,MAAM,WAAW,IAAI,oBAAoB,CAAC,WAAW,CAAC,EAAE,CAAC;YAC5D,IAAI,MAA4C,CAAC;YACjD,IAAI,CAAC;gBACH,MAAM,KAAK,GAAG,EAAE,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;gBACvC,uCAAuC;gBACvC,IAAI,KAAK,CAAC,IAAI,GAAG,SAAS;oBAAE,SAAS;gBACrC,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,WAAW,EAAE,MAAM,CAAC,CAGvD,CAAC;gBACF,yEAAyE;YAC3E,CAAC;YAAC,MAAM,CAAC;gBACP,SAAS;YACX,CAAC;YACD,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC;YACzB,IAAI,CAAC,IAAI,EAAE,UAAU,CAAC,GAAG,CAAC;gBAAE,SAAS;YACrC,IAAI,MAAM,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;gBACjC,gBAAgB,CAAC,GAAG,CAAC,IAAI,EAAE,qBAAqB,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC;YACpE,CAAC;QACH,CAAC;QAED,wEAAwE;QACxE,gEAAgE;QAChE,iEAAiE;QACjE,gEAAgE;QAChE,wEAAwE;QACxE,MAAM,WAAW,GAAG,KAAK,CAAC,KAAK,CAAC,MAAM,CACpC,CAAC,CAAC,EAAE,EAAE,CACJ,CAAC,mCAAmC,CAAC,IAAI,CAAC,CAAC,CAAC;YAC1C,mCAAmC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAC9C,CAAC,CAAC,CAAC,QAAQ,CAAC,cAAc,CAAC,CAC9B,CAAC;QAEF,MAAM,gBAAgB,GAAG,IAAI,GAAG,EAAU,CAAC;QAC3C,KAAK,MAAM,UAAU,IAAI,WAAW,EAAE,CAAC;YACrC,MAAM,OAAO,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;YAC7C,uCAAuC;YACvC,IAAI,CAAC,OAAO;gBAAE,SAAS;YAEvB,KAAK,MAAM,KAAK,IAAI,OAAO,CAAC,QAAQ,CAAC,kBAAkB,CAAC,EAAE,CAAC;gBACzD,KAAK,MAAM,IAAI,IAAI,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;oBAAE,gBAAgB,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YACxE,CAAC;YACD,KAAK,MAAM,KAAK,IAAI,OAAO,CAAC,QAAQ,CAAC,iBAAiB,CAAC,EAAE,CAAC;gBACxD,IAAI,KAAK,CAAC,CAAC,CAAC;oBAAE,gBAAgB,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;YAC/C,CAAC;QACH,CAAC;QAED,wEAAwE;QACxE,sEAAsE;QACtE,sEAAsE;QACtE,wEAAwE;QACxE,KAAK,MAAM,QAAQ,IAAI,KAAK,CAAC,KAAK,EAAE,CAAC;YACnC,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC;gBAAE,SAAS;YACtE,IAAI,QAAQ,CAAC,QAAQ,CAAC,cAAc,CAAC,IAAI,QAAQ,CAAC,QAAQ,CAAC,QAAQ,CAAC;gBAAE,SAAS;YAC/E,IAAI,UAAU,CAAC,QAAQ,CAAC;gBAAE,SAAS;YAEnC,MAAM,OAAO,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;YAC3C,uCAAuC;YACvC,IAAI,CAAC,OAAO;gBAAE,SAAS;YAEvB,KAAK,MAAM,WAAW,IAAI,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAC,EAAE,CAAC;gBAC3D,MAAM,UAAU,GAAG,WAAW,CAAC,CAAC,CAAC,CAAC;gBAClC,MAAM,KAAK,GAAG,eAAe,CAAC,UAAU,CAAC,CAAC;gBAC1C,IAAI,CAAC,KAAK;oBAAE,SAAS;gBACrB,qDAAqD;gBACrD,IAAI,KAAK,CAAC,OAAO,KAAK,GAAG;oBAAE,SAAS;gBAEpC,6DAA6D;gBAC7D,6DAA6D;gBAC7D,+DAA+D;gBAC/D,MAAM,WAAW,GAAG,gBAAgB,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;gBACpD,IAAI,WAAW,IAAI,gBAAgB,CAAC,KAAK,CAAC,OAAO,EAAE,WAAW,CAAC;oBAAE,SAAS;gBAE1E,4DAA4D;gBAC5D,2DAA2D;gBAC3D,6DAA6D;gBAC7D,oDAAoD;gBACpD,MAAM,oBAAoB,GAAG,WAAW,KAAK,SAAS,CAAC;gBACvD,MAAM,KAAK,GAAG,YAAY,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC;gBAC3C,kDAAkD;gBAClD,MAAM,UAAU,GAAG,WAAW,CAAC,KAAK,IAAI,CAAC,CAAC;gBAC1C,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;oBACzB,IAAI,CAAC,oBAAoB,IAAI,gBAAgB,CAAC,GAAG,CAAC,IAAI,CAAC;wBAAE,SAAS;oBAClE,MAAM,OAAO,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,UAAU,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC;oBAChE,UAAU,CAAC,IAAI,CAAC;wBACd,QAAQ;wBACR,IAAI,EAAE,OAAO;wBACb,OAAO,EAAE,IAAI,IAAI,8BAA8B,UAAU,+BAA+B,KAAK,CAAC,GAAG,+BAA+B;wBAChI,QAAQ,EAAE,SAAS;wBACnB,UAAU,EAAE,eAAe,KAAK,CAAC,OAAO,SAAS,KAAK,CAAC,GAAG,2CAA2C,IAAI,sCAAsC,KAAK,CAAC,GAAG,IAAI;wBAC5J,IAAI,EAAE,qBAAqB;wBAC3B,KAAK,EAAE,IAAI;qBACZ,CAAC,CAAC;gBACL,CAAC;YACH,CAAC;QACH,CAAC;QAED,OAAO,UAAU,CAAC;IACpB,CAAC;CACF,CAAC,CAAC"}

package/dist/checks/architecture/module-coupling-fan-out.d.ts

@@ -0,0 +1,20 @@
+/**
+ * @fileoverview File-level fan-out (outbound coupling) check.
+ *
+ * Flags files that import many other intra-project files. High fan-out
+ * indicates a "god-file" — a module that knows too much, hard to refactor
+ * without ripple effects, hard for an AI agent to reason about because
+ * search returns too many adjacent matches.
+ *
+ * Composition-root files (DI containers, plugin registries) legitimately
+ * have high fan-out and can be exempted with
+ * `// @fitness-ignore-file module-coupling-fan-out` at the top of the file.
+ *
+ * Pure barrel files (whose only top-level content is `export ... from`
+ * re-exports) are auto-exempt. Re-exporting many modules is a barrel's
+ * function — the "god-file" pathology applies to logic-bearing files,
+ * not to public-API surfaces. If a barrel grows enormous, that's a
+ * separate concern (warrants a "barrel-bloat" check, not this one).
+ */
+export declare const moduleCouplingFanOut: import("@opensip-cli/fitness").Check;
+//# sourceMappingURL=module-coupling-fan-out.d.ts.map

package/dist/checks/architecture/module-coupling-fan-out.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"module-coupling-fan-out.d.ts","sourceRoot":"","sources":["../../../src/checks/architecture/module-coupling-fan-out.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAwDH,eAAO,MAAM,oBAAoB,sCA0D/B,CAAC"}