@opensip-cli/checks-typescript 0.1.0

package/dist/checks/quality/frontend/a11y-semantic-html.js

@@ -0,0 +1,88 @@
+/**
+ * @fileoverview A11y Semantic HTML Check
+ *
+ * Detects div-soup anti-patterns where View components have onPress handlers
+ * without proper accessibility role definitions.
+ */
+import { defineCheck } from '@opensip-cli/fitness';
+import { getSharedSourceFile } from '@opensip-cli/lang-typescript';
+import * as ts from 'typescript';
+/**
+ * Press handler props that indicate interactive behavior on View components.
+ */
+const PRESS_HANDLER_PROPS = new Set(['onPress', 'onPressIn', 'onPressOut', 'onLongPress']);
+/**
+ * Analyze a TSX file for View components with press handlers missing accessibilityRole
+ * @param {string} content - The content of the file to analyze
+ * @param {string} filePath - The absolute path of the TSX file
+ * @returns {CheckViolation[]} Array of semantic HTML violations found
+ */
+function analyzeFile(content, filePath) {
+    // Only check TSX files
+    if (!filePath.endsWith('.tsx')) {
+        return [];
+    }
+    const violations = [];
+    const sourceFile = getSharedSourceFile(filePath, content);
+    /* v8 ignore next -- defensive guard */
+    if (!sourceFile)
+        return violations;
+    const visit = (node) => {
+        if (ts.isJsxOpeningElement(node) || ts.isJsxSelfClosingElement(node)) {
+            const tagName = ts.isIdentifier(node.tagName) ? node.tagName.text : '';
+            if (tagName === 'View') {
+                const attributes = node.attributes.properties;
+                // Check if View has any press handler props
+                const hasPressHandler = attributes.some((attr) => ts.isJsxAttribute(attr) && PRESS_HANDLER_PROPS.has(attr.name.getText()));
+                if (hasPressHandler) {
+                    // Check if View has accessibilityRole
+                    const hasAccessibilityRole = attributes.some((attr) => ts.isJsxAttribute(attr) && attr.name.getText() === 'accessibilityRole');
+                    if (!hasAccessibilityRole) {
+                        const { line, character } = sourceFile.getLineAndCharacterOfPosition(node.getStart());
+                        const lineNum = line + 1;
+                        const matchText = node.getText(sourceFile).slice(0, 100);
+                        violations.push({
+                            filePath,
+                            line: lineNum,
+                            column: character + 1,
+                            message: `<View> with press handler missing accessibilityRole`,
+                            severity: 'warning',
+                            suggestion: `Use <Pressable> instead of <View onPress>, or add accessibilityRole="button" for screen reader support`,
+                            type: 'missing-accessibility-role',
+                            match: matchText,
+                        });
+                    }
+                }
+            }
+        }
+        ts.forEachChild(node, visit);
+    };
+    visit(sourceFile);
+    return violations;
+}
+/**
+ * Check: quality/a11y-semantic-html
+ *
+ * Detects View components with press handlers that lack accessibilityRole.
+ * This is a div-soup anti-pattern that hurts screen reader accessibility.
+ */
+export const a11ySemanticHtml = defineCheck({
+    id: 'edccd88f-214d-4720-8843-2a94c2d5b729',
+    slug: 'a11y-semantic-html',
+    scope: { languages: ['typescript', 'tsx'], concerns: ['frontend', 'ui'] },
+    confidence: 'high',
+    description: 'Detect View components with press handlers missing accessibilityRole',
+    longDescription: `**Purpose:** Detects the "div-soup" anti-pattern where \`<View>\` components act as interactive elements without declaring an accessibility role.
+
+**Detects:** Analyzes each file individually using TypeScript AST traversal of JSX elements.
+- \`<View>\` components that have any of \`onPress\`, \`onPressIn\`, \`onPressOut\`, \`onLongPress\` but lack an \`accessibilityRole\` prop
+- Only scans \`.tsx\` files; excludes test files
+
+**Why it matters:** Screen readers cannot announce interactive Views as buttons or links without an explicit \`accessibilityRole\`, making tap targets invisible to assistive technology.
+
+**Scope:** General best practice`,
+    tags: ['quality', 'accessibility', 'frontend', 'semantic'],
+    fileTypes: ['ts', 'tsx'],
+    analyze: analyzeFile,
+});
+//# sourceMappingURL=a11y-semantic-html.js.map

package/dist/checks/quality/frontend/a11y-semantic-html.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"a11y-semantic-html.js","sourceRoot":"","sources":["../../../../src/checks/quality/frontend/a11y-semantic-html.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,WAAW,EAAuB,MAAM,sBAAsB,CAAC;AACxE,OAAO,EAAE,mBAAmB,EAAE,MAAM,8BAA8B,CAAC;AACnE,OAAO,KAAK,EAAE,MAAM,YAAY,CAAC;AAEjC;;GAEG;AACH,MAAM,mBAAmB,GAAG,IAAI,GAAG,CAAC,CAAC,SAAS,EAAE,WAAW,EAAE,YAAY,EAAE,aAAa,CAAC,CAAC,CAAC;AAE3F;;;;;GAKG;AACH,SAAS,WAAW,CAAC,OAAe,EAAE,QAAgB;IACpD,uBAAuB;IACvB,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;QAC/B,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,MAAM,UAAU,GAAqB,EAAE,CAAC;IAExC,MAAM,UAAU,GAAG,mBAAmB,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;IAC1D,uCAAuC;IACvC,IAAI,CAAC,UAAU;QAAE,OAAO,UAAU,CAAC;IAEnC,MAAM,KAAK,GAAG,CAAC,IAAa,EAAQ,EAAE;QACpC,IAAI,EAAE,CAAC,mBAAmB,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,uBAAuB,CAAC,IAAI,CAAC,EAAE,CAAC;YACrE,MAAM,OAAO,GAAG,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;YAEvE,IAAI,OAAO,KAAK,MAAM,EAAE,CAAC;gBACvB,MAAM,UAAU,GAAG,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC;gBAE9C,4CAA4C;gBAC5C,MAAM,eAAe,GAAG,UAAU,CAAC,IAAI,CACrC,CAAC,IAAI,EAAE,EAAE,CAAC,EAAE,CAAC,cAAc,CAAC,IAAI,CAAC,IAAI,mBAAmB,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,CAClF,CAAC;gBAEF,IAAI,eAAe,EAAE,CAAC;oBACpB,sCAAsC;oBACtC,MAAM,oBAAoB,GAAG,UAAU,CAAC,IAAI,CAC1C,CAAC,IAAI,EAAE,EAAE,CAAC,EAAE,CAAC,cAAc,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,KAAK,mBAAmB,CACjF,CAAC;oBAEF,IAAI,CAAC,oBAAoB,EAAE,CAAC;wBAC1B,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,GAAG,UAAU,CAAC,6BAA6B,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC;wBACtF,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,CAAC;wBACzB,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;wBAEzD,UAAU,CAAC,IAAI,CAAC;4BACd,QAAQ;4BACR,IAAI,EAAE,OAAO;4BACb,MAAM,EAAE,SAAS,GAAG,CAAC;4BACrB,OAAO,EAAE,qDAAqD;4BAC9D,QAAQ,EAAE,SAAS;4BACnB,UAAU,EAAE,wGAAwG;4BACpH,IAAI,EAAE,4BAA4B;4BAClC,KAAK,EAAE,SAAS;yBACjB,CAAC,CAAC;oBACL,CAAC;gBACH,CAAC;YACH,CAAC;QACH,CAAC;QACD,EAAE,CAAC,YAAY,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IAC/B,CAAC,CAAC;IAEF,KAAK,CAAC,UAAU,CAAC,CAAC;IAClB,OAAO,UAAU,CAAC;AACpB,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAAG,WAAW,CAAC;IAC1C,EAAE,EAAE,sCAAsC;IAC1C,IAAI,EAAE,oBAAoB;IAC1B,KAAK,EAAE,EAAE,SAAS,EAAE,CAAC,YAAY,EAAE,KAAK,CAAC,EAAE,QAAQ,EAAE,CAAC,UAAU,EAAE,IAAI,CAAC,EAAE;IAEzE,UAAU,EAAE,MAAM;IAClB,WAAW,EAAE,sEAAsE;IACnF,eAAe,EAAE;;;;;;;;iCAQc;IAC/B,IAAI,EAAE,CAAC,SAAS,EAAE,eAAe,EAAE,UAAU,EAAE,UAAU,CAAC;IAC1D,SAAS,EAAE,CAAC,IAAI,EAAE,KAAK,CAAC;IAExB,OAAO,EAAE,WAAW;CACrB,CAAC,CAAC"}

package/dist/checks/quality/frontend/index.d.ts

@@ -0,0 +1,4 @@
+export * from './a11y-form-labels.js';
+export * from './a11y-semantic-html.js';
+export * from './test-only-frontend-modules.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/checks/quality/frontend/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/checks/quality/frontend/index.ts"],"names":[],"mappings":"AAAA,cAAc,uBAAuB,CAAC;AACtC,cAAc,yBAAyB,CAAC;AACxC,cAAc,iCAAiC,CAAC"}

package/dist/checks/quality/frontend/index.js

@@ -0,0 +1,4 @@
+export * from './a11y-form-labels.js';
+export * from './a11y-semantic-html.js';
+export * from './test-only-frontend-modules.js';
+//# sourceMappingURL=index.js.map

package/dist/checks/quality/frontend/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../src/checks/quality/frontend/index.ts"],"names":[],"mappings":"AAAA,cAAc,uBAAuB,CAAC;AACtC,cAAc,yBAAyB,CAAC;AACxC,cAAc,iCAAiC,CAAC"}

package/dist/checks/quality/frontend/test-only-frontend-modules.d.ts

@@ -0,0 +1,13 @@
+/**
+ * @fileoverview Test-Only Frontend Modules Check
+ *
+ * Detects frontend code (hooks, stores, services, utils) that is only
+ * imported by test files, indicating potentially dead code.
+ */
+/**
+ * Check: quality/test-only-frontend-modules
+ *
+ * Detects frontend code only imported by test files.
+ */
+export declare const testOnlyFrontendModules: import("@opensip-cli/fitness").Check;
+//# sourceMappingURL=test-only-frontend-modules.d.ts.map

package/dist/checks/quality/frontend/test-only-frontend-modules.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"test-only-frontend-modules.d.ts","sourceRoot":"","sources":["../../../../src/checks/quality/frontend/test-only-frontend-modules.ts"],"names":[],"mappings":"AAEA;;;;;GAKG;AAkIH;;;;GAIG;AACH,eAAO,MAAM,uBAAuB,sCAgDlC,CAAC"}

package/dist/checks/quality/frontend/test-only-frontend-modules.js

@@ -0,0 +1,159 @@
+// @fitness-ignore-file toctou-race-condition -- TOCTOU acceptable in this non-concurrent context
+// @fitness-ignore-file duplicate-implementation-detection -- intentionally co-located for check isolation
+/**
+ * @fileoverview Test-Only Frontend Modules Check
+ *
+ * Detects frontend code (hooks, stores, services, utils) that is only
+ * imported by test files, indicating potentially dead code.
+ */
+import * as path from 'node:path';
+import { defineCheck, isTestFile, } from '@opensip-cli/fitness';
+/**
+ * Type guard to validate a Map with array values.
+ * @param {unknown} value - Value to validate
+ * @returns {value is Map<string, string[]>} True if value is a valid Map with array values
+ */
+function validateImportMap(value) {
+    return value instanceof Map;
+}
+/**
+ * Safe regex pattern for extracting named imports (bounded to prevent ReDoS)
+ * Pattern is safe because:
+ * - Uses bounded negated character class [^'"]{1,500}
+ * - Has clear boundaries with quotes
+ */
+const NAMED_IMPORT_PATTERN = /from\s+['"]([^'"]{1,500})['"]/g;
+/**
+ * Safe regex pattern for extracting side-effect imports (`import './foo.js'`)
+ * Pattern is safe because:
+ * - Uses bounded negated character class [^'"]{1,500}
+ * - Has clear boundaries with quotes
+ */
+const SIDE_EFFECT_IMPORT_PATTERN = /^import\s+['"]([^'"]{1,500})['"]/gm;
+/**
+ * Extract import paths from file content
+ * @param content - File content
+ * @returns Array of import paths
+ */
+// @fitness-ignore-next-line duplicate-implementation-detection -- import extraction is intentionally co-located with each check for isolation; shared utility would couple unrelated checks
+function extractImportPaths(content) {
+    const paths = [];
+    // Match named imports: import { x } from './path'
+    const namedPattern = new RegExp(NAMED_IMPORT_PATTERN.source, 'g');
+    let match;
+    while ((match = namedPattern.exec(content)) !== null) {
+        const importPath = match[1];
+        if (importPath && (importPath.startsWith('.') || importPath.startsWith('@'))) {
+            paths.push(importPath);
+        }
+    }
+    // Match side-effect imports: import './path'
+    const sideEffectPattern = new RegExp(SIDE_EFFECT_IMPORT_PATTERN.source, 'gm');
+    while ((match = sideEffectPattern.exec(content)) !== null) {
+        const importPath = match[1];
+        if (importPath && (importPath.startsWith('.') || importPath.startsWith('@'))) {
+            paths.push(importPath);
+        }
+    }
+    return paths;
+}
+/**
+ * Build import map from files
+ * @param files - FileAccessor for lazy file loading
+ * @returns Map of import path to importer files
+ */
+async function buildImportMap(files) {
+    const importMap = new Map();
+    for (const fp of files.paths) {
+        try {
+            // @fitness-ignore-next-line performance-anti-patterns -- sequential file reading to control memory; FileAccessor is lazy
+            const content = await files.read(fp);
+            const importPaths = extractImportPaths(content);
+            for (const importPath of importPaths) {
+                /* v8 ignore next -- defensive nullish fallback */
+                const importers = importMap.get(importPath) ?? [];
+                importers.push(fp);
+                importMap.set(importPath, importers);
+            }
+            /* v8 ignore next 1 -- defensive catch: parse failures already handled */
+        }
+        catch {
+            // @swallow-ok Skip unreadable files
+        }
+    }
+    return importMap;
+}
+/**
+ * Find importers for a file
+ * @param filePath - File to find importers for
+ * @param importMap - Map of imports (Map iteration with .entries() provides safe access)
+ * @returns Array of importer file paths
+ */
+function findImporters(filePath, importMap) {
+    // Map parameter validation: iteration via .entries() handles undefined/null safely
+    if (!validateImportMap(importMap)) {
+        return [];
+    }
+    // Validate Map size before iteration
+    if (importMap.size === 0) {
+        return [];
+    }
+    const basename = path.basename(filePath, path.extname(filePath));
+    const dirname = path.dirname(filePath);
+    const parentDir = path.basename(dirname);
+    const importers = [];
+    for (const [importPath, importerFiles] of importMap.entries()) {
+        const matchesBasename = importPath.includes(basename) || importPath.includes(`${parentDir}/${basename}`);
+        const hasValidImporters = Array.isArray(importerFiles) && importerFiles.length > 0;
+        if (matchesBasename && hasValidImporters) {
+            importers.push(...importerFiles);
+        }
+    }
+    return importers;
+}
+/**
+ * Check: quality/test-only-frontend-modules
+ *
+ * Detects frontend code only imported by test files.
+ */
+export const testOnlyFrontendModules = defineCheck({
+    id: '78a085b3-55c4-42d3-a74c-8dfaad8123f1',
+    slug: 'test-only-frontend-modules',
+    scope: { languages: ['typescript', 'tsx'], concerns: ['frontend', 'ui'] },
+    contentFilter: 'strip-strings',
+    confidence: 'medium',
+    description: 'Detects frontend code only imported by test files',
+    tags: ['quality', 'code-quality', 'maintainability'],
+    fileTypes: ['ts', 'tsx'],
+    async analyzeAll(files) {
+        const violations = [];
+        // Build import map
+        const importMap = await buildImportMap(files);
+        // Check each file to see if it's only imported by tests
+        for (const filePath of files.paths) {
+            // Skip files in test directories — they are test utilities by design
+            if (isTestFile(filePath)) {
+                continue;
+            }
+            const importers = findImporters(filePath, importMap);
+            if (importers.length === 0) {
+                continue;
+            }
+            const productionImporters = importers.filter((f) => !isTestFile(f));
+            const testImporters = importers.filter((f) => isTestFile(f));
+            if (productionImporters.length === 0 && testImporters.length > 0) {
+                violations.push({
+                    filePath,
+                    line: 1,
+                    column: 0,
+                    message: `Only imported by test files (${testImporters.length} test imports, 0 production)`,
+                    severity: 'error',
+                    suggestion: 'This module is only used in tests. Either add production usage, move it to a test utilities folder, or delete it if no longer needed',
+                    match: path.basename(filePath),
+                });
+            }
+        }
+        return violations;
+    },
+});
+//# sourceMappingURL=test-only-frontend-modules.js.map

package/dist/checks/quality/frontend/test-only-frontend-modules.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"test-only-frontend-modules.js","sourceRoot":"","sources":["../../../../src/checks/quality/frontend/test-only-frontend-modules.ts"],"names":[],"mappings":"AAAA,iGAAiG;AACjG,0GAA0G;AAC1G;;;;;GAKG;AAEH,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAElC,OAAO,EACL,WAAW,EACX,UAAU,GAGX,MAAM,sBAAsB,CAAC;AAE9B;;;;GAIG;AACH,SAAS,iBAAiB,CAAC,KAAc;IACvC,OAAO,KAAK,YAAY,GAAG,CAAC;AAC9B,CAAC;AAED;;;;;GAKG;AACH,MAAM,oBAAoB,GAAG,gCAAgC,CAAC;AAE9D;;;;;GAKG;AACH,MAAM,0BAA0B,GAAG,oCAAoC,CAAC;AAExE;;;;GAIG;AACH,4LAA4L;AAC5L,SAAS,kBAAkB,CAAC,OAAe;IACzC,MAAM,KAAK,GAAa,EAAE,CAAC;IAE3B,kDAAkD;IAClD,MAAM,YAAY,GAAG,IAAI,MAAM,CAAC,oBAAoB,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IAClE,IAAI,KAAK,CAAC;IACV,OAAO,CAAC,KAAK,GAAG,YAAY,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;QACrD,MAAM,UAAU,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;QAC5B,IAAI,UAAU,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,UAAU,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC;YAC7E,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QACzB,CAAC;IACH,CAAC;IAED,6CAA6C;IAC7C,MAAM,iBAAiB,GAAG,IAAI,MAAM,CAAC,0BAA0B,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;IAC9E,OAAO,CAAC,KAAK,GAAG,iBAAiB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;QAC1D,MAAM,UAAU,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;QAC5B,IAAI,UAAU,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,UAAU,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC;YAC7E,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QACzB,CAAC;IACH,CAAC;IAED,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;GAIG;AACH,KAAK,UAAU,cAAc,CAAC,KAAmB;IAC/C,MAAM,SAAS,GAAG,IAAI,GAAG,EAAoB,CAAC;IAE9C,KAAK,MAAM,EAAE,IAAI,KAAK,CAAC,KAAK,EAAE,CAAC;QAC7B,IAAI,CAAC;YACH,yHAAyH;YACzH,MAAM,OAAO,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YACrC,MAAM,WAAW,GAAG,kBAAkB,CAAC,OAAO,CAAC,CAAC;YAEhD,KAAK,MAAM,UAAU,IAAI,WAAW,EAAE,CAAC;gBACrC,kDAAkD;gBAClD,MAAM,SAAS,GAAG,SAAS,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,EAAE,CAAC;gBAClD,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;gBACnB,SAAS,CAAC,GAAG,CAAC,UAAU,EAAE,SAAS,CAAC,CAAC;YACvC,CAAC;YACD,yEAAyE;QAC3E,CAAC;QAAC,MAAM,CAAC;YACP,oCAAoC;QACtC,CAAC;IACH,CAAC;IAED,OAAO,SAAS,CAAC;AACnB,CAAC;AAED;;;;;GAKG;AACH,SAAS,aAAa,CAAC,QAAgB,EAAE,SAAgC;IACvE,mFAAmF;IACnF,IAAI,CAAC,iBAAiB,CAAC,SAAS,CAAC,EAAE,CAAC;QAClC,OAAO,EAAE,CAAC;IACZ,CAAC;IACD,qCAAqC;IACrC,IAAI,SAAS,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,QAAQ,EAAE,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC;IACjE,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;IACvC,MAAM,SAAS,GAAG,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;IACzC,MAAM,SAAS,GAAa,EAAE,CAAC;IAE/B,KAAK,MAAM,CAAC,UAAU,EAAE,aAAa,CAAC,IAAI,SAAS,CAAC,OAAO,EAAE,EAAE,CAAC;QAC9D,MAAM,eAAe,GACnB,UAAU,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,UAAU,CAAC,QAAQ,CAAC,GAAG,SAAS,IAAI,QAAQ,EAAE,CAAC,CAAC;QACnF,MAAM,iBAAiB,GAAG,KAAK,CAAC,OAAO,CAAC,aAAa,CAAC,IAAI,aAAa,CAAC,MAAM,GAAG,CAAC,CAAC;QAEnF,IAAI,eAAe,IAAI,iBAAiB,EAAE,CAAC;YACzC,SAAS,CAAC,IAAI,CAAC,GAAG,aAAa,CAAC,CAAC;QACnC,CAAC;IACH,CAAC;IAED,OAAO,SAAS,CAAC;AACnB,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAAG,WAAW,CAAC;IACjD,EAAE,EAAE,sCAAsC;IAC1C,IAAI,EAAE,4BAA4B;IAClC,KAAK,EAAE,EAAE,SAAS,EAAE,CAAC,YAAY,EAAE,KAAK,CAAC,EAAE,QAAQ,EAAE,CAAC,UAAU,EAAE,IAAI,CAAC,EAAE;IACzE,aAAa,EAAE,eAAe;IAC9B,UAAU,EAAE,QAAQ;IACpB,WAAW,EAAE,mDAAmD;IAChE,IAAI,EAAE,CAAC,SAAS,EAAE,cAAc,EAAE,iBAAiB,CAAC;IACpD,SAAS,EAAE,CAAC,IAAI,EAAE,KAAK,CAAC;IAExB,KAAK,CAAC,UAAU,CAAC,KAAmB;QAClC,MAAM,UAAU,GAAqB,EAAE,CAAC;QAExC,mBAAmB;QACnB,MAAM,SAAS,GAAG,MAAM,cAAc,CAAC,KAAK,CAAC,CAAC;QAE9C,wDAAwD;QACxD,KAAK,MAAM,QAAQ,IAAI,KAAK,CAAC,KAAK,EAAE,CAAC;YACnC,qEAAqE;YACrE,IAAI,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;gBACzB,SAAS;YACX,CAAC;YAED,MAAM,SAAS,GAAG,aAAa,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC;YAErD,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBAC3B,SAAS;YACX,CAAC;YAED,MAAM,mBAAmB,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC;YACpE,MAAM,aAAa,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC;YAE7D,IAAI,mBAAmB,CAAC,MAAM,KAAK,CAAC,IAAI,aAAa,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACjE,UAAU,CAAC,IAAI,CAAC;oBACd,QAAQ;oBACR,IAAI,EAAE,CAAC;oBACP,MAAM,EAAE,CAAC;oBACT,OAAO,EAAE,gCAAgC,aAAa,CAAC,MAAM,8BAA8B;oBAC3F,QAAQ,EAAE,OAAO;oBACjB,UAAU,EACR,sIAAsI;oBACxI,KAAK,EAAE,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC;iBAC/B,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAED,OAAO,UAAU,CAAC;IACpB,CAAC;CACF,CAAC,CAAC"}

package/dist/checks/quality/incomplete-regex-escaping.d.ts

@@ -0,0 +1,13 @@
+/**
+ * @fileoverview Incomplete Regex Escaping Check
+ *
+ * Detects incomplete regex character escaping in .replace() calls.
+ * This is a security vulnerability that can lead to regex injection attacks.
+ */
+/**
+ * Check: quality/incomplete-regex-escaping
+ *
+ * Detects incomplete regex character escaping that can lead to security vulnerabilities.
+ */
+export declare const incompleteRegexEscaping: import("@opensip-cli/fitness").Check;
+//# sourceMappingURL=incomplete-regex-escaping.d.ts.map

package/dist/checks/quality/incomplete-regex-escaping.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"incomplete-regex-escaping.d.ts","sourceRoot":"","sources":["../../../src/checks/quality/incomplete-regex-escaping.ts"],"names":[],"mappings":"AACA;;;;;GAKG;AAmKH;;;;GAIG;AACH,eAAO,MAAM,uBAAuB,sCAmDlC,CAAC"}

package/dist/checks/quality/incomplete-regex-escaping.js

@@ -0,0 +1,207 @@
+// @fitness-ignore-file unused-config-options -- Config options reserved for future use or environment-specific
+/**
+ * @fileoverview Incomplete Regex Escaping Check
+ *
+ * Detects incomplete regex character escaping in .replace() calls.
+ * This is a security vulnerability that can lead to regex injection attacks.
+ */
+import { defineCheck } from '@opensip-cli/fitness';
+import { getSharedSourceFile } from '@opensip-cli/lang-typescript';
+import * as ts from 'typescript';
+/**
+ * All special regex characters that should be escaped
+ */
+const REQUIRED_SPECIAL_CHARS = new Set([
+    '\\',
+    '^',
+    '$',
+    '.',
+    '*',
+    '+',
+    '?',
+    '(',
+    ')',
+    '[',
+    ']',
+    '{',
+    '}',
+    '|',
+]);
+/**
+ * Strip regex delimiters from pattern text
+ */
+function stripRegexDelimiters(regexText) {
+    let pattern = regexText;
+    if (pattern.startsWith('/')) {
+        pattern = pattern.slice(1);
+    }
+    if (pattern.includes('/')) {
+        /* v8 ignore next -- defensive non-negative guard */
+        pattern = pattern.slice(0, Math.max(0, pattern.lastIndexOf('/')));
+    }
+    return pattern;
+}
+/**
+ * Extract character class content from a pattern starting with [
+ */
+function extractCharacterClass(pattern) {
+    let charClass = '';
+    let i = 1;
+    while (i < pattern.length) {
+        const currentChar = pattern[i];
+        if (!currentChar)
+            break;
+        if (currentChar === '\\' && i + 1 < pattern.length) {
+            const nextChar = pattern[i + 1];
+            if (nextChar)
+                charClass += currentChar + nextChar;
+            i += 2;
+        }
+        else if (currentChar === ']') {
+            return charClass;
+        }
+        else {
+            charClass += currentChar;
+            i++;
+        }
+    }
+    return null;
+}
+/**
+ * Check if a character is in the character class
+ */
+function isCharInClass(char, charClass) {
+    if (char === '\\')
+        return charClass.includes('\\\\');
+    if (char === ']')
+        return charClass.includes(String.raw `\]`);
+    if (char === '^') {
+        return (charClass.includes(String.raw `\^`) || (charClass.includes('^') && charClass.indexOf('^') > 0));
+    }
+    if (char === '-') {
+        return (charClass.includes(String.raw `\-`) || charClass.startsWith('-') || charClass.endsWith('-'));
+    }
+    return charClass.includes(char) || charClass.includes(`\\${char}`);
+}
+/**
+ * Find missing special characters in a regex pattern
+ */
+function findMissingChars(regexText) {
+    const pattern = stripRegexDelimiters(regexText);
+    if (!pattern.startsWith('[')) {
+        return [...REQUIRED_SPECIAL_CHARS];
+    }
+    const charClass = extractCharacterClass(pattern);
+    if (charClass === null) {
+        return [...REQUIRED_SPECIAL_CHARS];
+    }
+    const missingChars = [];
+    for (const char of REQUIRED_SPECIAL_CHARS) {
+        if (!isCharInClass(char, charClass)) {
+            missingChars.push(char);
+        }
+    }
+    return missingChars;
+}
+/**
+ * Check if a call expression is a .replace() with incomplete escaping
+ */
+function checkReplaceCall(node, sourceFile, _filePath) {
+    /* v8 ignore next -- defensive AST/type guard */
+    if (!ts.isPropertyAccessExpression(node.expression))
+        return null;
+    if (node.expression.name.text !== 'replace')
+        return null;
+    /* v8 ignore next -- defensive AST/type guard */
+    if (node.arguments.length < 2)
+        return null;
+    const firstArg = node.arguments[0];
+    if (!firstArg || !ts.isRegularExpressionLiteral(firstArg))
+        return null;
+    const secondArg = node.arguments[1];
+    /* v8 ignore next -- defensive AST/type guard */
+    if (!secondArg || !ts.isStringLiteral(secondArg))
+        return null;
+    if (secondArg.text !== String.raw `\$&`)
+        return null;
+    // Check context for intentional partial escaping
+    const fullText = sourceFile.getFullText();
+    const nodeStart = node.getFullStart();
+    const nodeEnd = node.getEnd();
+    /* v8 ignore next -- defensive non-negative guard */
+    const contextStart = Math.max(0, nodeStart - 500);
+    const contextText = fullText.slice(contextStart, nodeEnd);
+    if (/character class|lucene|search|opensearch|elasticsearch|query/i.test(contextText)) {
+        return null;
+    }
+    const regexText = firstArg.text;
+    /* v8 ignore next -- defensive AST/type guard */
+    if (!regexText)
+        return null;
+    const missingChars = findMissingChars(regexText);
+    if (missingChars.length === 0)
+        return null;
+    const { line, character } = sourceFile.getLineAndCharacterOfPosition(node.getStart());
+    return {
+        line: line + 1,
+        column: character + 1,
+        message: `Incomplete regex escaping: pattern '${regexText}' is missing special characters: ${missingChars.join(', ')}`,
+        severity: 'error',
+        type: 'incomplete-escaping',
+        suggestion: String.raw `Include all regex special characters in the escape pattern: \\ ^ $ . * + ? ( ) [ ] { } |. Use a library like escape-string-regexp for safety.`,
+        match: regexText,
+    };
+}
+/**
+ * Check: quality/incomplete-regex-escaping
+ *
+ * Detects incomplete regex character escaping that can lead to security vulnerabilities.
+ */
+export const incompleteRegexEscaping = defineCheck({
+    id: '62395bfb-8ece-4c82-a6e2-4150b827ac1f',
+    slug: 'incomplete-regex-escaping',
+    scope: { languages: ['typescript'], concerns: ['backend', 'frontend', 'cli'] },
+    contentFilter: 'raw',
+    confidence: 'high',
+    description: 'Detect incomplete regex character escaping that can lead to security vulnerabilities',
+    longDescription: `**Purpose:** Detects \`.replace()\` calls that use incomplete regex character class escaping, which can lead to regex injection vulnerabilities.
+
+**Detects:**
+- \`.replace(regex, '\\\\$&')\` calls where the regex pattern is missing special characters from the set: \`\\\\ ^ $ . * + ? ( ) [ ] { } |\`
+- Uses TypeScript AST to find \`CallExpression\` nodes with \`replace\` property access, a regex literal first argument, and \`'\\\\$&'\` as second argument
+- Skips patterns in Lucene/OpenSearch/Elasticsearch contexts (intentional partial escaping)
+
+**Why it matters:** Incomplete regex escaping allows specially crafted input to break out of the intended pattern, enabling regex injection attacks.
+
+**Scope:** General best practice. Analyzes each file individually (\`analyze\`). Targets production files.`,
+    tags: ['quality', 'security', 'best-practices'],
+    fileTypes: ['ts', 'tsx'],
+    analyze(content, filePath) {
+        // Quick filter: skip files without .replace() calls
+        if (!content.includes('.replace(')) {
+            return [];
+        }
+        const violations = [];
+        try {
+            const sourceFile = getSharedSourceFile(filePath, content);
+            /* v8 ignore next -- defensive guard */
+            if (!sourceFile)
+                return [];
+            const visit = (node) => {
+                if (ts.isCallExpression(node)) {
+                    const violation = checkReplaceCall(node, sourceFile, filePath);
+                    if (violation)
+                        violations.push(violation);
+                }
+                ts.forEachChild(node, visit);
+            };
+            visit(sourceFile);
+            /* v8 ignore next 1 -- defensive catch: parse failures already handled */
+        }
+        catch {
+            // @swallow-ok Skip files that fail to parse
+        }
+        return violations;
+    },
+});
+//# sourceMappingURL=incomplete-regex-escaping.js.map

package/dist/checks/quality/incomplete-regex-escaping.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"incomplete-regex-escaping.js","sourceRoot":"","sources":["../../../src/checks/quality/incomplete-regex-escaping.ts"],"names":[],"mappings":"AAAA,+GAA+G;AAC/G;;;;;GAKG;AAEH,OAAO,EAAE,WAAW,EAAuB,MAAM,sBAAsB,CAAC;AACxE,OAAO,EAAE,mBAAmB,EAAE,MAAM,8BAA8B,CAAC;AACnE,OAAO,KAAK,EAAE,MAAM,YAAY,CAAC;AAEjC;;GAEG;AACH,MAAM,sBAAsB,GAAG,IAAI,GAAG,CAAC;IACrC,IAAI;IACJ,GAAG;IACH,GAAG;IACH,GAAG;IACH,GAAG;IACH,GAAG;IACH,GAAG;IACH,GAAG;IACH,GAAG;IACH,GAAG;IACH,GAAG;IACH,GAAG;IACH,GAAG;IACH,GAAG;CACJ,CAAC,CAAC;AAEH;;GAEG;AACH,SAAS,oBAAoB,CAAC,SAAiB;IAC7C,IAAI,OAAO,GAAG,SAAS,CAAC;IACxB,IAAI,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QAC5B,OAAO,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IAC7B,CAAC;IACD,IAAI,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;QAC1B,oDAAoD;QACpD,OAAO,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,OAAO,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;IACpE,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;;GAEG;AACH,SAAS,qBAAqB,CAAC,OAAe;IAC5C,IAAI,SAAS,GAAG,EAAE,CAAC;IACnB,IAAI,CAAC,GAAG,CAAC,CAAC;IAEV,OAAO,CAAC,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC;QAC1B,MAAM,WAAW,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;QAC/B,IAAI,CAAC,WAAW;YAAE,MAAM;QACxB,IAAI,WAAW,KAAK,IAAI,IAAI,CAAC,GAAG,CAAC,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC;YACnD,MAAM,QAAQ,GAAG,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;YAChC,IAAI,QAAQ;gBAAE,SAAS,IAAI,WAAW,GAAG,QAAQ,CAAC;YAClD,CAAC,IAAI,CAAC,CAAC;QACT,CAAC;aAAM,IAAI,WAAW,KAAK,GAAG,EAAE,CAAC;YAC/B,OAAO,SAAS,CAAC;QACnB,CAAC;aAAM,CAAC;YACN,SAAS,IAAI,WAAW,CAAC;YACzB,CAAC,EAAE,CAAC;QACN,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;GAEG;AACH,SAAS,aAAa,CAAC,IAAY,EAAE,SAAiB;IACpD,IAAI,IAAI,KAAK,IAAI;QAAE,OAAO,SAAS,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IACrD,IAAI,IAAI,KAAK,GAAG;QAAE,OAAO,SAAS,CAAC,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAA,IAAI,CAAC,CAAC;IAC5D,IAAI,IAAI,KAAK,GAAG,EAAE,CAAC;QACjB,OAAO,CACL,SAAS,CAAC,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAA,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,SAAS,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAC9F,CAAC;IACJ,CAAC;IACD,IAAI,IAAI,KAAK,GAAG,EAAE,CAAC;QACjB,OAAO,CACL,SAAS,CAAC,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAA,IAAI,CAAC,IAAI,SAAS,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,SAAS,CAAC,QAAQ,CAAC,GAAG,CAAC,CAC3F,CAAC;IACJ,CAAC;IACD,OAAO,SAAS,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,SAAS,CAAC,QAAQ,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC;AACrE,CAAC;AAED;;GAEG;AACH,SAAS,gBAAgB,CAAC,SAAiB;IACzC,MAAM,OAAO,GAAG,oBAAoB,CAAC,SAAS,CAAC,CAAC;IAEhD,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QAC7B,OAAO,CAAC,GAAG,sBAAsB,CAAC,CAAC;IACrC,CAAC;IAED,MAAM,SAAS,GAAG,qBAAqB,CAAC,OAAO,CAAC,CAAC;IACjD,IAAI,SAAS,KAAK,IAAI,EAAE,CAAC;QACvB,OAAO,CAAC,GAAG,sBAAsB,CAAC,CAAC;IACrC,CAAC;IAED,MAAM,YAAY,GAAa,EAAE,CAAC;IAClC,KAAK,MAAM,IAAI,IAAI,sBAAsB,EAAE,CAAC;QAC1C,IAAI,CAAC,aAAa,CAAC,IAAI,EAAE,SAAS,CAAC,EAAE,CAAC;YACpC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC1B,CAAC;IACH,CAAC;IAED,OAAO,YAAY,CAAC;AACtB,CAAC;AAED;;GAEG;AACH,SAAS,gBAAgB,CACvB,IAAuB,EACvB,UAAyB,EACzB,SAAiB;IAEjB,gDAAgD;IAChD,IAAI,CAAC,EAAE,CAAC,0BAA0B,CAAC,IAAI,CAAC,UAAU,CAAC;QAAE,OAAO,IAAI,CAAC;IACjE,IAAI,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC;IACzD,gDAAgD;IAChD,IAAI,IAAI,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IAE3C,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;IACnC,IAAI,CAAC,QAAQ,IAAI,CAAC,EAAE,CAAC,0BAA0B,CAAC,QAAQ,CAAC;QAAE,OAAO,IAAI,CAAC;IAEvE,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;IACpC,gDAAgD;IAChD,IAAI,CAAC,SAAS,IAAI,CAAC,EAAE,CAAC,eAAe,CAAC,SAAS,CAAC;QAAE,OAAO,IAAI,CAAC;IAC9D,IAAI,SAAS,CAAC,IAAI,KAAK,MAAM,CAAC,GAAG,CAAA,KAAK;QAAE,OAAO,IAAI,CAAC;IAEpD,iDAAiD;IACjD,MAAM,QAAQ,GAAG,UAAU,CAAC,WAAW,EAAE,CAAC;IAC1C,MAAM,SAAS,GAAG,IAAI,CAAC,YAAY,EAAE,CAAC;IACtC,MAAM,OAAO,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC;IAC9B,oDAAoD;IACpD,MAAM,YAAY,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,SAAS,GAAG,GAAG,CAAC,CAAC;IAClD,MAAM,WAAW,GAAG,QAAQ,CAAC,KAAK,CAAC,YAAY,EAAE,OAAO,CAAC,CAAC;IAE1D,IAAI,+DAA+D,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC;QACtF,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,SAAS,GAAG,QAAQ,CAAC,IAAI,CAAC;IAChC,gDAAgD;IAChD,IAAI,CAAC,SAAS;QAAE,OAAO,IAAI,CAAC;IAE5B,MAAM,YAAY,GAAG,gBAAgB,CAAC,SAAS,CAAC,CAAC;IACjD,IAAI,YAAY,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IAE3C,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,GAAG,UAAU,CAAC,6BAA6B,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC;IAEtF,OAAO;QACL,IAAI,EAAE,IAAI,GAAG,CAAC;QACd,MAAM,EAAE,SAAS,GAAG,CAAC;QACrB,OAAO,EAAE,uCAAuC,SAAS,oCAAoC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;QACtH,QAAQ,EAAE,OAAO;QACjB,IAAI,EAAE,qBAAqB;QAC3B,UAAU,EAAE,MAAM,CAAC,GAAG,CAAA,+IAA+I;QACrK,KAAK,EAAE,SAAS;KACjB,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAAG,WAAW,CAAC;IACjD,EAAE,EAAE,sCAAsC;IAC1C,IAAI,EAAE,2BAA2B;IACjC,KAAK,EAAE,EAAE,SAAS,EAAE,CAAC,YAAY,CAAC,EAAE,QAAQ,EAAE,CAAC,SAAS,EAAE,UAAU,EAAE,KAAK,CAAC,EAAE;IAC9E,aAAa,EAAE,KAAK;IAEpB,UAAU,EAAE,MAAM;IAClB,WAAW,EACT,sFAAsF;IACxF,eAAe,EAAE;;;;;;;;;2GASwF;IACzG,IAAI,EAAE,CAAC,SAAS,EAAE,UAAU,EAAE,gBAAgB,CAAC;IAC/C,SAAS,EAAE,CAAC,IAAI,EAAE,KAAK,CAAC;IAExB,OAAO,CAAC,OAAO,EAAE,QAAQ;QACvB,oDAAoD;QACpD,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC;YACnC,OAAO,EAAE,CAAC;QACZ,CAAC;QAED,MAAM,UAAU,GAAqB,EAAE,CAAC;QAExC,IAAI,CAAC;YACH,MAAM,UAAU,GAAG,mBAAmB,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;YAC1D,uCAAuC;YACvC,IAAI,CAAC,UAAU;gBAAE,OAAO,EAAE,CAAC;YAE3B,MAAM,KAAK,GAAG,CAAC,IAAa,EAAE,EAAE;gBAC9B,IAAI,EAAE,CAAC,gBAAgB,CAAC,IAAI,CAAC,EAAE,CAAC;oBAC9B,MAAM,SAAS,GAAG,gBAAgB,CAAC,IAAI,EAAE,UAAU,EAAE,QAAQ,CAAC,CAAC;oBAC/D,IAAI,SAAS;wBAAE,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;gBAC5C,CAAC;gBACD,EAAE,CAAC,YAAY,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;YAC/B,CAAC,CAAC;YAEF,KAAK,CAAC,UAAU,CAAC,CAAC;YAClB,yEAAyE;QAC3E,CAAC;QAAC,MAAM,CAAC;YACP,4CAA4C;QAC9C,CAAC;QAED,OAAO,UAAU,CAAC;IACpB,CAAC;CACF,CAAC,CAAC"}

package/dist/checks/quality/index.d.ts

@@ -0,0 +1,11 @@
+export * from './api/index.js';
+export * from './code-structure/index.js';
+export * from './data-integrity/index.js';
+export * from './frontend/index.js';
+export * from './incomplete-regex-escaping.js';
+export * from './linting/index.js';
+export * from './observability/index.js';
+export * from './patterns/index.js';
+export * from './stubbed-implementation-detection.js';
+export * from './unused-config-options.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/checks/quality/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/checks/quality/index.ts"],"names":[],"mappings":"AAAA,cAAc,gBAAgB,CAAC;AAC/B,cAAc,2BAA2B,CAAC;AAC1C,cAAc,2BAA2B,CAAC;AAC1C,cAAc,qBAAqB,CAAC;AACpC,cAAc,gCAAgC,CAAC;AAC/C,cAAc,oBAAoB,CAAC;AACnC,cAAc,0BAA0B,CAAC;AACzC,cAAc,qBAAqB,CAAC;AACpC,cAAc,uCAAuC,CAAC;AACtD,cAAc,4BAA4B,CAAC"}

package/dist/checks/quality/index.js

@@ -0,0 +1,11 @@
+export * from './api/index.js';
+export * from './code-structure/index.js';
+export * from './data-integrity/index.js';
+export * from './frontend/index.js';
+export * from './incomplete-regex-escaping.js';
+export * from './linting/index.js';
+export * from './observability/index.js';
+export * from './patterns/index.js';
+export * from './stubbed-implementation-detection.js';
+export * from './unused-config-options.js';
+//# sourceMappingURL=index.js.map

package/dist/checks/quality/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/checks/quality/index.ts"],"names":[],"mappings":"AAAA,cAAc,gBAAgB,CAAC;AAC/B,cAAc,2BAA2B,CAAC;AAC1C,cAAc,2BAA2B,CAAC;AAC1C,cAAc,qBAAqB,CAAC;AACpC,cAAc,gCAAgC,CAAC;AAC/C,cAAc,oBAAoB,CAAC;AACnC,cAAc,0BAA0B,CAAC;AACzC,cAAc,qBAAqB,CAAC;AACpC,cAAc,uCAAuC,CAAC;AACtD,cAAc,4BAA4B,CAAC"}

package/dist/checks/quality/linting/index.d.ts

@@ -0,0 +1,2 @@
+export * from './typescript-frontend.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/checks/quality/linting/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/checks/quality/linting/index.ts"],"names":[],"mappings":"AAAA,cAAc,0BAA0B,CAAC"}

package/dist/checks/quality/linting/index.js

@@ -0,0 +1,2 @@
+export * from './typescript-frontend.js';
+//# sourceMappingURL=index.js.map

package/dist/checks/quality/linting/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../src/checks/quality/linting/index.ts"],"names":[],"mappings":"AAAA,cAAc,0BAA0B,CAAC"}

package/dist/checks/quality/linting/typescript-frontend.d.ts

@@ -0,0 +1,25 @@
+/**
+ * @fileoverview TypeScript Frontend Compiler Check
+ *
+ * Validates TypeScript compilation for frontend apps (apps/*). Runs
+ * `tsc --noEmit` in each discovered `apps/<name>/` that has a `tsconfig.json`,
+ * and reports the parsed compiler errors. Because it shells out to an external
+ * toolchain (one invocation per app, in that app's own directory so its
+ * `tsconfig.json` resolves correctly), it is modelled as `analysisMode:'command'`
+ * using the same `sh -c` orchestration idiom as `dependency-vulnerability-audit`.
+ */
+import { type CheckViolation } from '@opensip-cli/fitness';
+/**
+ * Parse the combined per-app tsc output into violations. Tracks the current app
+ * via `::app::` markers and finalizes it on the matching `::exit::` marker: a
+ * non-zero exit with parsed diagnostics yields those; a non-zero exit with no
+ * parseable diagnostics yields a single generic failure; a zero exit yields none.
+ */
+export declare function parseTscOutput(stdout: string, cwd: string): CheckViolation[];
+/**
+ * Check: quality/typescript-frontend
+ *
+ * Runs the TypeScript compiler for each frontend app under `apps/*`.
+ */
+export declare const typescriptFrontend: import("@opensip-cli/fitness").Check;
+//# sourceMappingURL=typescript-frontend.d.ts.map

package/dist/checks/quality/linting/typescript-frontend.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"typescript-frontend.d.ts","sourceRoot":"","sources":["../../../../src/checks/quality/linting/typescript-frontend.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAIH,OAAO,EAAe,KAAK,cAAc,EAAE,MAAM,sBAAsB,CAAC;AA6ExE;;;;;GAKG;AACH,wBAAgB,cAAc,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,cAAc,EAAE,CA8C5E;AAED;;;;GAIG;AACH,eAAO,MAAM,kBAAkB,sCA6B7B,CAAC"}