@opensip-cli/checks-universal 0.1.0

package/dist/__tests__/behavior-fixtures-10.test.js

@@ -0,0 +1,200 @@
+// @fitness-ignore-file file-length-limit -- behavior fixture suite; related scenarios stay together while checks are split into focused tests.
+/**
+ * @fileoverview Branch-behavior tests for medium-coverage checks (round 10).
+ *
+ * Targets the test-file-naming directory walker, the eslint-justifications
+ * inline-suppression validator, and the sentry PII-scrubbing detector.
+ */
+import { mkdirSync, mkdtempSync, rmSync, writeFileSync } from 'node:fs';
+import { tmpdir } from 'node:os';
+import { dirname, join } from 'node:path';
+import { fileCache } from '@opensip-cli/fitness';
+import { afterAll, afterEach, beforeAll, describe, expect, it } from 'vitest';
+import { checks } from '../index.js';
+function findCheck(slug) {
+    const check = checks.find((c) => c.config.slug === slug);
+    if (!check)
+        throw new Error(`check not found: ${slug}`);
+    return check;
+}
+function makeFixtureDir(prefix) {
+    return mkdtempSync(join(tmpdir(), `cu-cov10-${prefix}-`));
+}
+function writeFixture(cwd, rel, content) {
+    const abs = join(cwd, rel);
+    mkdirSync(dirname(abs), { recursive: true });
+    writeFileSync(abs, content);
+    return abs;
+}
+afterEach(() => fileCache.clear());
+// =============================================================================
+// test-file-naming: extension variants, nested dirs, and skipped dirs
+// =============================================================================
+describe('test-file-naming directory walk', () => {
+    let cwd;
+    beforeAll(() => {
+        cwd = makeFixtureDir('tfn');
+        writeFixture(cwd, 'package.json', JSON.stringify({ name: 'root' }, null, 2));
+        // .tsx misnamed file -> exercises isTypeScriptFile tsx branch + violation.
+        writeFixture(cwd, 'packages/a/__tests__/widget-checks.tsx', ['export const Widget = () => null'].join('\n'));
+        // A .d.ts file inside __tests__ -> isDeclarationFile branch -> not a test file.
+        writeFixture(cwd, 'packages/a/__tests__/types.d.ts', 'export type T = number');
+        // Nested subdirectory under __tests__ with a valid test -> recursion branch.
+        writeFixture(cwd, 'packages/a/__tests__/unit/thing.test.ts', ['import { it } from "vitest"; it("x", () => undefined)'].join('\n'));
+        // An allowlist data module under __tests__ -> IGNORED_PATTERNS branch
+        // (test config/data imported by a real *.test.ts; not a test case itself).
+        writeFixture(cwd, 'packages/a/__tests__/foo.allowlist.ts', ['export const ALLOWLIST = []'].join('\n'));
+        // A build-artifact dir under __tests__ -> SKIP_DIRECTORIES branch.
+        writeFixture(cwd, 'packages/a/__tests__/dist/bundle.js', 'module.exports = {}');
+        // A hidden directory at scan level -> startsWith('.') skip branch.
+        writeFixture(cwd, 'packages/a/.cache/junk.ts', 'export const j = 1');
+    });
+    afterAll(() => rmSync(cwd, { recursive: true, force: true }));
+    it('flags a misnamed .tsx test and recurses into nested dirs without throwing', async () => {
+        const result = await findCheck('test-file-naming').run(cwd, {
+            targetFiles: [
+                join(cwd, 'packages/a/__tests__/widget-checks.tsx'),
+                join(cwd, 'packages/a/__tests__/types.d.ts'),
+                join(cwd, 'packages/a/__tests__/unit/thing.test.ts'),
+                join(cwd, 'packages/a/__tests__/foo.allowlist.ts'),
+            ],
+        });
+        const matches = result.signals.map((s) => s.metadata.match);
+        // The misnamed .tsx file is flagged; the valid nested test, the
+        // .d.ts declaration file, and the .allowlist.ts data module are not.
+        expect(matches).toContain('widget-checks.tsx');
+        expect(matches).not.toContain('thing.test.ts');
+        expect(matches).not.toContain('types.d.ts');
+        expect(matches).not.toContain('foo.allowlist.ts');
+    });
+});
+// =============================================================================
+// eslint-justifications: missing, too-long, malformed, unclosed-block
+// =============================================================================
+describe('eslint-justifications inline variants', () => {
+    let cwd;
+    beforeAll(() => {
+        cwd = makeFixtureDir('eslint-just');
+        // Inline disable-next-line with NO justification -> missing-justification.
+        writeFixture(cwd, 'src/missing.ts', ['// eslint-disable-next-line no-console', 'console.log(1)'].join('\n'));
+        // Free-text after the directive with no `--` separator and embedded
+        // spaces -> JUSTIFICATION_PATTERN fails -> malformed.
+        writeFixture(cwd, 'src/malformed.ts', ['// eslint-disable-next-line because reasons go here', 'console.log(1)'].join('\n'));
+        // A well-formed justification -> no issue.
+        writeFixture(cwd, 'src/ok.ts', [
+            '// eslint-disable-next-line no-console -- diagnostic output gated behind a debug flag',
+            'console.log(1)',
+        ].join('\n'));
+        // An unclosed multi-line eslint-disable block with rules on the start
+        // line and no closing `*/` or eslint-enable -> unclosed-block violation.
+        writeFixture(cwd, 'src/unclosed.ts', ['/* eslint-disable no-console', 'doThing()', 'moreCode()'].join('\n'));
+    });
+    afterAll(() => rmSync(cwd, { recursive: true, force: true }));
+    it('flags an inline suppression with no justification', async () => {
+        const result = await findCheck('eslint-justifications').run(cwd, {
+            targetFiles: [join(cwd, 'src/missing.ts')],
+        });
+        expect(result.signals.length).toBeGreaterThan(0);
+    });
+    it('flags a malformed suppression comment', async () => {
+        const result = await findCheck('eslint-justifications').run(cwd, {
+            targetFiles: [join(cwd, 'src/malformed.ts')],
+        });
+        expect(result.signals.length).toBeGreaterThan(0);
+    });
+    it('does not flag a well-formed justification', async () => {
+        const result = await findCheck('eslint-justifications').run(cwd, {
+            targetFiles: [join(cwd, 'src/ok.ts')],
+        });
+        expect(result.signals.length).toBe(0);
+    });
+    it('flags an unclosed multi-line eslint-disable block', async () => {
+        const result = await findCheck('eslint-justifications').run(cwd, {
+            targetFiles: [join(cwd, 'src/unclosed.ts')],
+        });
+        expect(result.signals.length).toBeGreaterThan(0);
+    });
+});
+// =============================================================================
+// sentry-pii-scrubbing: init-without-filter, context PII keys, no-match lines
+// =============================================================================
+describe('sentry-pii-scrubbing detectors', () => {
+    let cwd;
+    beforeAll(() => {
+        cwd = makeFixtureDir('sentry-pii');
+        // Sentry.init without beforeSend/beforeBreadcrumb -> tier-1 violation.
+        writeFixture(cwd, 'src/init-no-filter.ts', [
+            'import * as Sentry from sentry',
+            'Sentry.init({',
+            '  dsn: dsn,',
+            '  tracesSampleRate: 1,',
+            '})',
+        ].join('\n'));
+        // setUser with a PII field key (email) -> tier-2 violation.
+        writeFixture(cwd, 'src/context-pii.ts', [
+            'import * as Sentry from sentry',
+            'export function tag(email) {',
+            '  Sentry.setUser({ email: email })',
+            '}',
+        ].join('\n'));
+        // setExtra with shorthand PII key followed by } -> exercises the '}' branch.
+        writeFixture(cwd, 'src/context-shorthand.ts', [
+            'import * as Sentry from sentry',
+            'export function tag(token) {',
+            '  Sentry.setExtra({ token })',
+            '}',
+        ].join('\n'));
+        // setUser with a non-PII field only -> field-not-found path, no violation.
+        writeFixture(cwd, 'src/context-clean.ts', [
+            'import * as Sentry from sentry',
+            'export function tag(role) {',
+            '  Sentry.setUser({ role: role })',
+            '}',
+        ].join('\n'));
+        // Sentry.init WITH beforeSend -> no tier-1 violation.
+        writeFixture(cwd, 'src/init-filtered.ts', [
+            'import * as Sentry from sentry',
+            'Sentry.init({',
+            '  dsn: dsn,',
+            '  beforeSend(event) { return event },',
+            '})',
+        ].join('\n'));
+    });
+    afterAll(() => rmSync(cwd, { recursive: true, force: true }));
+    it('flags Sentry.init without a PII filter callback', async () => {
+        const result = await findCheck('sentry-pii-scrubbing').run(cwd, {
+            targetFiles: [join(cwd, 'src/init-no-filter.ts')],
+        });
+        const types = result.signals.map((s) => s.metadata.type);
+        expect(types).toContain('sentry-no-pii-filter');
+    });
+    it('flags a PII field key passed to a Sentry context call', async () => {
+        const result = await findCheck('sentry-pii-scrubbing').run(cwd, {
+            targetFiles: [join(cwd, 'src/context-pii.ts')],
+        });
+        const types = result.signals.map((s) => s.metadata.type);
+        expect(types).toContain('sentry-pii-in-context');
+    });
+    it('flags a shorthand PII key followed by a closing brace', async () => {
+        const result = await findCheck('sentry-pii-scrubbing').run(cwd, {
+            targetFiles: [join(cwd, 'src/context-shorthand.ts')],
+        });
+        const types = result.signals.map((s) => s.metadata.type);
+        expect(types).toContain('sentry-pii-in-context');
+    });
+    it('does not flag a context call with no PII fields', async () => {
+        const result = await findCheck('sentry-pii-scrubbing').run(cwd, {
+            targetFiles: [join(cwd, 'src/context-clean.ts')],
+        });
+        const types = result.signals.map((s) => s.metadata.type);
+        expect(types).not.toContain('sentry-pii-in-context');
+    });
+    it('does not flag a Sentry.init that declares beforeSend', async () => {
+        const result = await findCheck('sentry-pii-scrubbing').run(cwd, {
+            targetFiles: [join(cwd, 'src/init-filtered.ts')],
+        });
+        const types = result.signals.map((s) => s.metadata.type);
+        expect(types).not.toContain('sentry-no-pii-filter');
+    });
+});
+//# sourceMappingURL=behavior-fixtures-10.test.js.map

package/dist/__tests__/behavior-fixtures-10.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"behavior-fixtures-10.test.js","sourceRoot":"","sources":["../../src/__tests__/behavior-fixtures-10.test.ts"],"names":[],"mappings":"AAAA,+IAA+I;AAC/I;;;;;GAKG;AAEH,OAAO,EAAE,SAAS,EAAE,WAAW,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AACxE,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACjC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAE1C,OAAO,EAAE,SAAS,EAAE,MAAM,sBAAsB,CAAC;AACjD,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAE9E,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AAErC,SAAS,SAAS,CAAC,IAAY;IAC7B,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC;IACzD,IAAI,CAAC,KAAK;QAAE,MAAM,IAAI,KAAK,CAAC,oBAAoB,IAAI,EAAE,CAAC,CAAC;IACxD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,cAAc,CAAC,MAAc;IACpC,OAAO,WAAW,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,YAAY,MAAM,GAAG,CAAC,CAAC,CAAC;AAC5D,CAAC;AAED,SAAS,YAAY,CAAC,GAAW,EAAE,GAAW,EAAE,OAAe;IAC7D,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;IAC3B,SAAS,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC7C,aAAa,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;IAC5B,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,KAAK,EAAE,CAAC,CAAC;AAEnC,gFAAgF;AAChF,sEAAsE;AACtE,gFAAgF;AAEhF,QAAQ,CAAC,iCAAiC,EAAE,GAAG,EAAE;IAC/C,IAAI,GAAW,CAAC;IAEhB,SAAS,CAAC,GAAG,EAAE;QACb,GAAG,GAAG,cAAc,CAAC,KAAK,CAAC,CAAC;QAC5B,YAAY,CAAC,GAAG,EAAE,cAAc,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;QAC7E,2EAA2E;QAC3E,YAAY,CACV,GAAG,EACH,wCAAwC,EACxC,CAAC,kCAAkC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAChD,CAAC;QACF,gFAAgF;QAChF,YAAY,CAAC,GAAG,EAAE,iCAAiC,EAAE,wBAAwB,CAAC,CAAC;QAC/E,6EAA6E;QAC7E,YAAY,CACV,GAAG,EACH,yCAAyC,EACzC,CAAC,uDAAuD,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CACrE,CAAC;QACF,sEAAsE;QACtE,2EAA2E;QAC3E,YAAY,CACV,GAAG,EACH,uCAAuC,EACvC,CAAC,6BAA6B,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAC3C,CAAC;QACF,mEAAmE;QACnE,YAAY,CAAC,GAAG,EAAE,qCAAqC,EAAE,qBAAqB,CAAC,CAAC;QAChF,mEAAmE;QACnE,YAAY,CAAC,GAAG,EAAE,2BAA2B,EAAE,oBAAoB,CAAC,CAAC;IACvE,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;IAE9D,EAAE,CAAC,2EAA2E,EAAE,KAAK,IAAI,EAAE;QACzF,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,kBAAkB,CAAC,CAAC,GAAG,CAAC,GAAG,EAAE;YAC1D,WAAW,EAAE;gBACX,IAAI,CAAC,GAAG,EAAE,wCAAwC,CAAC;gBACnD,IAAI,CAAC,GAAG,EAAE,iCAAiC,CAAC;gBAC5C,IAAI,CAAC,GAAG,EAAE,yCAAyC,CAAC;gBACpD,IAAI,CAAC,GAAG,EAAE,uCAAuC,CAAC;aACnD;SACF,CAAC,CAAC;QACH,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;QAC5D,gEAAgE;QAChE,qEAAqE;QACrE,MAAM,CAAC,OAAO,CAAC,CAAC,SAAS,CAAC,mBAAmB,CAAC,CAAC;QAC/C,MAAM,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,eAAe,CAAC,CAAC;QAC/C,MAAM,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,YAAY,CAAC,CAAC;QAC5C,MAAM,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,kBAAkB,CAAC,CAAC;IACpD,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,gFAAgF;AAChF,sEAAsE;AACtE,gFAAgF;AAEhF,QAAQ,CAAC,uCAAuC,EAAE,GAAG,EAAE;IACrD,IAAI,GAAW,CAAC;IAEhB,SAAS,CAAC,GAAG,EAAE;QACb,GAAG,GAAG,cAAc,CAAC,aAAa,CAAC,CAAC;QACpC,2EAA2E;QAC3E,YAAY,CACV,GAAG,EACH,gBAAgB,EAChB,CAAC,wCAAwC,EAAE,gBAAgB,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CACxE,CAAC;QACF,oEAAoE;QACpE,sDAAsD;QACtD,YAAY,CACV,GAAG,EACH,kBAAkB,EAClB,CAAC,qDAAqD,EAAE,gBAAgB,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CACrF,CAAC;QACF,2CAA2C;QAC3C,YAAY,CACV,GAAG,EACH,WAAW,EACX;YACE,uFAAuF;YACvF,gBAAgB;SACjB,CAAC,IAAI,CAAC,IAAI,CAAC,CACb,CAAC;QACF,sEAAsE;QACtE,yEAAyE;QACzE,YAAY,CACV,GAAG,EACH,iBAAiB,EACjB,CAAC,8BAA8B,EAAE,WAAW,EAAE,YAAY,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CACvE,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;IAE9D,EAAE,CAAC,mDAAmD,EAAE,KAAK,IAAI,EAAE;QACjE,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,uBAAuB,CAAC,CAAC,GAAG,CAAC,GAAG,EAAE;YAC/D,WAAW,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,gBAAgB,CAAC,CAAC;SAC3C,CAAC,CAAC;QACH,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC;IACnD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,uCAAuC,EAAE,KAAK,IAAI,EAAE;QACrD,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,uBAAuB,CAAC,CAAC,GAAG,CAAC,GAAG,EAAE;YAC/D,WAAW,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,kBAAkB,CAAC,CAAC;SAC7C,CAAC,CAAC;QACH,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC;IACnD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,2CAA2C,EAAE,KAAK,IAAI,EAAE;QACzD,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,uBAAuB,CAAC,CAAC,GAAG,CAAC,GAAG,EAAE;YAC/D,WAAW,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,WAAW,CAAC,CAAC;SACtC,CAAC,CAAC;QACH,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACxC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,mDAAmD,EAAE,KAAK,IAAI,EAAE;QACjE,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,uBAAuB,CAAC,CAAC,GAAG,CAAC,GAAG,EAAE;YAC/D,WAAW,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,iBAAiB,CAAC,CAAC;SAC5C,CAAC,CAAC;QACH,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC;IACnD,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,gFAAgF;AAChF,8EAA8E;AAC9E,gFAAgF;AAEhF,QAAQ,CAAC,gCAAgC,EAAE,GAAG,EAAE;IAC9C,IAAI,GAAW,CAAC;IAEhB,SAAS,CAAC,GAAG,EAAE;QACb,GAAG,GAAG,cAAc,CAAC,YAAY,CAAC,CAAC;QACnC,uEAAuE;QACvE,YAAY,CACV,GAAG,EACH,uBAAuB,EACvB;YACE,gCAAgC;YAChC,eAAe;YACf,aAAa;YACb,wBAAwB;YACxB,IAAI;SACL,CAAC,IAAI,CAAC,IAAI,CAAC,CACb,CAAC;QACF,4DAA4D;QAC5D,YAAY,CACV,GAAG,EACH,oBAAoB,EACpB;YACE,gCAAgC;YAChC,8BAA8B;YAC9B,oCAAoC;YACpC,GAAG;SACJ,CAAC,IAAI,CAAC,IAAI,CAAC,CACb,CAAC;QACF,6EAA6E;QAC7E,YAAY,CACV,GAAG,EACH,0BAA0B,EAC1B;YACE,gCAAgC;YAChC,8BAA8B;YAC9B,8BAA8B;YAC9B,GAAG;SACJ,CAAC,IAAI,CAAC,IAAI,CAAC,CACb,CAAC;QACF,2EAA2E;QAC3E,YAAY,CACV,GAAG,EACH,sBAAsB,EACtB;YACE,gCAAgC;YAChC,6BAA6B;YAC7B,kCAAkC;YAClC,GAAG;SACJ,CAAC,IAAI,CAAC,IAAI,CAAC,CACb,CAAC;QACF,sDAAsD;QACtD,YAAY,CACV,GAAG,EACH,sBAAsB,EACtB;YACE,gCAAgC;YAChC,eAAe;YACf,aAAa;YACb,uCAAuC;YACvC,IAAI;SACL,CAAC,IAAI,CAAC,IAAI,CAAC,CACb,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;IAE9D,EAAE,CAAC,iDAAiD,EAAE,KAAK,IAAI,EAAE;QAC/D,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,sBAAsB,CAAC,CAAC,GAAG,CAAC,GAAG,EAAE;YAC9D,WAAW,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,uBAAuB,CAAC,CAAC;SAClD,CAAC,CAAC;QACH,MAAM,KAAK,GAAG,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;QACzD,MAAM,CAAC,KAAK,CAAC,CAAC,SAAS,CAAC,sBAAsB,CAAC,CAAC;IAClD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,uDAAuD,EAAE,KAAK,IAAI,EAAE;QACrE,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,sBAAsB,CAAC,CAAC,GAAG,CAAC,GAAG,EAAE;YAC9D,WAAW,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,oBAAoB,CAAC,CAAC;SAC/C,CAAC,CAAC;QACH,MAAM,KAAK,GAAG,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;QACzD,MAAM,CAAC,KAAK,CAAC,CAAC,SAAS,CAAC,uBAAuB,CAAC,CAAC;IACnD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,uDAAuD,EAAE,KAAK,IAAI,EAAE;QACrE,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,sBAAsB,CAAC,CAAC,GAAG,CAAC,GAAG,EAAE;YAC9D,WAAW,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,0BAA0B,CAAC,CAAC;SACrD,CAAC,CAAC;QACH,MAAM,KAAK,GAAG,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;QACzD,MAAM,CAAC,KAAK,CAAC,CAAC,SAAS,CAAC,uBAAuB,CAAC,CAAC;IACnD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,iDAAiD,EAAE,KAAK,IAAI,EAAE;QAC/D,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,sBAAsB,CAAC,CAAC,GAAG,CAAC,GAAG,EAAE;YAC9D,WAAW,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,sBAAsB,CAAC,CAAC;SACjD,CAAC,CAAC;QACH,MAAM,KAAK,GAAG,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;QACzD,MAAM,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,uBAAuB,CAAC,CAAC;IACvD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,sDAAsD,EAAE,KAAK,IAAI,EAAE;QACpE,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,sBAAsB,CAAC,CAAC,GAAG,CAAC,GAAG,EAAE;YAC9D,WAAW,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,sBAAsB,CAAC,CAAC;SACjD,CAAC,CAAC;QACH,MAAM,KAAK,GAAG,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;QACzD,MAAM,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,sBAAsB,CAAC,CAAC;IACtD,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/__tests__/behavior-fixtures-11.test.d.ts

@@ -0,0 +1,8 @@
+/**
+ * @fileoverview Branch-behavior tests for medium-coverage checks (round 11).
+ *
+ * Targets the fitness/TypeScript directive parsers (direct unit tests)
+ * and the public-api-jsdoc analyzer's export-kind / lookback branches.
+ */
+export {};
+//# sourceMappingURL=behavior-fixtures-11.test.d.ts.map

package/dist/__tests__/behavior-fixtures-11.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"behavior-fixtures-11.test.d.ts","sourceRoot":"","sources":["../../src/__tests__/behavior-fixtures-11.test.ts"],"names":[],"mappings":"AACA;;;;;GAKG"}

package/dist/__tests__/behavior-fixtures-11.test.js

@@ -0,0 +1,120 @@
+// @fitness-ignore-file file-length-limit -- behavior fixture suite; related scenarios stay together while checks are split into focused tests.
+/**
+ * @fileoverview Branch-behavior tests for medium-coverage checks (round 11).
+ *
+ * Targets the fitness/TypeScript directive parsers (direct unit tests)
+ * and the public-api-jsdoc analyzer's export-kind / lookback branches.
+ */
+import { mkdirSync, mkdtempSync, rmSync, writeFileSync } from 'node:fs';
+import { tmpdir } from 'node:os';
+import { dirname, join } from 'node:path';
+import { fileCache } from '@opensip-cli/fitness';
+import { afterAll, afterEach, beforeAll, describe, expect, it } from 'vitest';
+import { parseFitnessDirectives } from '../checks/documentation/_directives/fitness.js';
+import { parseTypeScriptDirectives } from '../checks/documentation/_directives/typescript.js';
+import { _resetPublicApiGraphCache } from '../checks/documentation/_public-api-graph.js';
+import { checks } from '../index.js';
+function findCheck(slug) {
+    const check = checks.find((c) => c.config.slug === slug);
+    if (!check)
+        throw new Error(`check not found: ${slug}`);
+    return check;
+}
+function makeFixtureDir(prefix) {
+    return mkdtempSync(join(tmpdir(), `cu-cov11-${prefix}-`));
+}
+function writeFixture(cwd, rel, content) {
+    const abs = join(cwd, rel);
+    mkdirSync(dirname(abs), { recursive: true });
+    writeFileSync(abs, content);
+    return abs;
+}
+afterEach(() => {
+    fileCache.clear();
+    _resetPublicApiGraphCache();
+});
+// =============================================================================
+// parseFitnessDirectives: check-id + reason grammar branches
+// =============================================================================
+describe('parseFitnessDirectives', () => {
+    it('parses a file-scope directive with id and reason', () => {
+        const [d] = parseFitnessDirectives('// @fitness-ignore-file my-check -- justified for X', 'a.ts', 'a.ts');
+        expect(d?.rule).toBe('fitness/my-check');
+        expect(d?.scope).toBe('file');
+        expect(d?.reason).toBe('justified for X');
+    });
+    it('parses a next-line directive', () => {
+        const [d] = parseFitnessDirectives('const x = 1 // @fitness-ignore-next-line some-check -- inline reason', 'a.ts', 'a.ts');
+        expect(d?.scope).toBe('next-line');
+        expect(d?.rule).toBe('fitness/some-check');
+    });
+    it('returns nothing for lines without a fitness marker', () => {
+        expect(parseFitnessDirectives('const x = 1', 'a.ts', 'a.ts')).toEqual([]);
+    });
+    it('returns nothing when there is no space after the marker', () => {
+        // `@fitness-ignore-file` immediately at end of line — no id token.
+        expect(parseFitnessDirectives('// @fitness-ignore-file', 'a.ts', 'a.ts')).toEqual([]);
+    });
+    it('returns nothing when the -- reason separator is absent', () => {
+        expect(parseFitnessDirectives('// @fitness-ignore-file my-check', 'a.ts', 'a.ts')).toEqual([]);
+    });
+});
+// =============================================================================
+// parseTypeScriptDirectives: comment-context branch
+// =============================================================================
+describe('parseTypeScriptDirectives', () => {
+    it('parses a @ts-expect-error directive inside a // comment', () => {
+        const [d] = parseTypeScriptDirectives('// @ts-expect-error: upstream typings are wrong', 'a.ts', 'a.ts');
+        expect(d?.rule).toBe('@ts-expect-error');
+        expect(d?.reason).toBe('upstream typings are wrong');
+    });
+    it('ignores a @ts-expect-error token that is not in a // comment', () => {
+        // The token appears bare (e.g. inside a non-comment string of source),
+        // with no `//` before it -> the comment-context guard rejects it.
+        expect(parseTypeScriptDirectives('const s = @ts-expect-error', 'a.ts', 'a.ts')).toEqual([]);
+    });
+    it('returns nothing for lines without the directive', () => {
+        expect(parseTypeScriptDirectives('const x = 1', 'a.ts', 'a.ts')).toEqual([]);
+    });
+});
+// =============================================================================
+// public-api-jsdoc: export-kind + JSDoc-lookback branches
+// =============================================================================
+describe('public-api-jsdoc lookback branches', () => {
+    let cwd;
+    beforeAll(() => {
+        cwd = makeFixtureDir('jsdoc-lookback');
+        // A package whose barrel re-exports the file under test, making it part
+        // of the public API surface.
+        writeFixture(cwd, 'package.json', JSON.stringify({
+            name: '@org/api',
+            exports: './dist/index.js',
+        }));
+        writeFixture(cwd, 'src/index.ts', "export * from './surface.js'");
+        writeFixture(cwd, 'src/surface.ts', [
+            '// a single-line comment, not JSDoc',
+            '',
+            'export type Undocumented = number',
+            '',
+            "export * from './other.js'",
+            '',
+            '/**',
+            ' * Documented function.',
+            ' */',
+            '',
+            'export function documented() { return 1 }',
+        ].join('\n'));
+    });
+    afterAll(() => rmSync(cwd, { recursive: true, force: true }));
+    it('flags an undocumented type export but not a JSDoc-documented one or a re-export', async () => {
+        const result = await findCheck('public-api-jsdoc').run(cwd, {
+            targetFiles: [join(cwd, 'src/surface.ts')],
+        });
+        const messages = result.signals.map((s) => s.message);
+        // The `type` export with only a `//` comment + blank line above is flagged.
+        expect(messages.some((m) => m.includes("'Undocumented'") && m.includes('type'))).toBe(true);
+        // The function preceded by a JSDoc block (with a blank line gap) is not.
+        expect(messages.some((m) => m.includes("'documented'"))).toBe(false);
+    });
+});
+//# sourceMappingURL=behavior-fixtures-11.test.js.map

package/dist/__tests__/behavior-fixtures-11.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"behavior-fixtures-11.test.js","sourceRoot":"","sources":["../../src/__tests__/behavior-fixtures-11.test.ts"],"names":[],"mappings":"AAAA,+IAA+I;AAC/I;;;;;GAKG;AAEH,OAAO,EAAE,SAAS,EAAE,WAAW,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AACxE,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACjC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAE1C,OAAO,EAAE,SAAS,EAAE,MAAM,sBAAsB,CAAC;AACjD,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAE9E,OAAO,EAAE,sBAAsB,EAAE,MAAM,gDAAgD,CAAC;AACxF,OAAO,EAAE,yBAAyB,EAAE,MAAM,mDAAmD,CAAC;AAC9F,OAAO,EAAE,yBAAyB,EAAE,MAAM,8CAA8C,CAAC;AACzF,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AAErC,SAAS,SAAS,CAAC,IAAY;IAC7B,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC;IACzD,IAAI,CAAC,KAAK;QAAE,MAAM,IAAI,KAAK,CAAC,oBAAoB,IAAI,EAAE,CAAC,CAAC;IACxD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,cAAc,CAAC,MAAc;IACpC,OAAO,WAAW,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,YAAY,MAAM,GAAG,CAAC,CAAC,CAAC;AAC5D,CAAC;AAED,SAAS,YAAY,CAAC,GAAW,EAAE,GAAW,EAAE,OAAe;IAC7D,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;IAC3B,SAAS,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC7C,aAAa,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;IAC5B,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,CAAC,GAAG,EAAE;IACb,SAAS,CAAC,KAAK,EAAE,CAAC;IAClB,yBAAyB,EAAE,CAAC;AAC9B,CAAC,CAAC,CAAC;AAEH,gFAAgF;AAChF,6DAA6D;AAC7D,gFAAgF;AAEhF,QAAQ,CAAC,wBAAwB,EAAE,GAAG,EAAE;IACtC,EAAE,CAAC,kDAAkD,EAAE,GAAG,EAAE;QAC1D,MAAM,CAAC,CAAC,CAAC,GAAG,sBAAsB,CAChC,qDAAqD,EACrD,MAAM,EACN,MAAM,CACP,CAAC;QACF,MAAM,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC;QACzC,MAAM,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAC9B,MAAM,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;IAC5C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,8BAA8B,EAAE,GAAG,EAAE;QACtC,MAAM,CAAC,CAAC,CAAC,GAAG,sBAAsB,CAChC,sEAAsE,EACtE,MAAM,EACN,MAAM,CACP,CAAC;QACF,MAAM,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QACnC,MAAM,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC;IAC7C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,oDAAoD,EAAE,GAAG,EAAE;QAC5D,MAAM,CAAC,sBAAsB,CAAC,aAAa,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IAC5E,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,yDAAyD,EAAE,GAAG,EAAE;QACjE,mEAAmE;QACnE,MAAM,CAAC,sBAAsB,CAAC,yBAAyB,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IACxF,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,wDAAwD,EAAE,GAAG,EAAE;QAChE,MAAM,CAAC,sBAAsB,CAAC,kCAAkC,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IACjG,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,gFAAgF;AAChF,oDAAoD;AACpD,gFAAgF;AAEhF,QAAQ,CAAC,2BAA2B,EAAE,GAAG,EAAE;IACzC,EAAE,CAAC,yDAAyD,EAAE,GAAG,EAAE;QACjE,MAAM,CAAC,CAAC,CAAC,GAAG,yBAAyB,CACnC,iDAAiD,EACjD,MAAM,EACN,MAAM,CACP,CAAC;QACF,MAAM,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC;QACzC,MAAM,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,IAAI,CAAC,4BAA4B,CAAC,CAAC;IACvD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,8DAA8D,EAAE,GAAG,EAAE;QACtE,uEAAuE;QACvE,kEAAkE;QAClE,MAAM,CAAC,yBAAyB,CAAC,4BAA4B,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IAC9F,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,iDAAiD,EAAE,GAAG,EAAE;QACzD,MAAM,CAAC,yBAAyB,CAAC,aAAa,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IAC/E,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,gFAAgF;AAChF,0DAA0D;AAC1D,gFAAgF;AAEhF,QAAQ,CAAC,oCAAoC,EAAE,GAAG,EAAE;IAClD,IAAI,GAAW,CAAC;IAEhB,SAAS,CAAC,GAAG,EAAE;QACb,GAAG,GAAG,cAAc,CAAC,gBAAgB,CAAC,CAAC;QACvC,wEAAwE;QACxE,6BAA6B;QAC7B,YAAY,CACV,GAAG,EACH,cAAc,EACd,IAAI,CAAC,SAAS,CAAC;YACb,IAAI,EAAE,UAAU;YAChB,OAAO,EAAE,iBAAiB;SAC3B,CAAC,CACH,CAAC;QACF,YAAY,CAAC,GAAG,EAAE,cAAc,EAAE,8BAA8B,CAAC,CAAC;QAClE,YAAY,CACV,GAAG,EACH,gBAAgB,EAChB;YACE,qCAAqC;YACrC,EAAE;YACF,mCAAmC;YACnC,EAAE;YACF,4BAA4B;YAC5B,EAAE;YACF,KAAK;YACL,yBAAyB;YACzB,KAAK;YACL,EAAE;YACF,2CAA2C;SAC5C,CAAC,IAAI,CAAC,IAAI,CAAC,CACb,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;IAE9D,EAAE,CAAC,iFAAiF,EAAE,KAAK,IAAI,EAAE;QAC/F,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,kBAAkB,CAAC,CAAC,GAAG,CAAC,GAAG,EAAE;YAC1D,WAAW,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,gBAAgB,CAAC,CAAC;SAC3C,CAAC,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;QACtD,4EAA4E;QAC5E,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC5F,yEAAyE;QACzE,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACvE,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/__tests__/behavior-fixtures-12.test.d.ts

@@ -0,0 +1,8 @@
+/**
+ * @fileoverview Branch-behavior tests for medium-coverage checks (round 12).
+ *
+ * Targets the dangerous-config-defaults value extractors (config, TLS,
+ * pool-size) and the exit-code-correctness catch-block analyzer.
+ */
+export {};
+//# sourceMappingURL=behavior-fixtures-12.test.d.ts.map

package/dist/__tests__/behavior-fixtures-12.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"behavior-fixtures-12.test.d.ts","sourceRoot":"","sources":["../../src/__tests__/behavior-fixtures-12.test.ts"],"names":[],"mappings":"AACA;;;;;GAKG"}

package/dist/__tests__/behavior-fixtures-12.test.js

@@ -0,0 +1,157 @@
+// @fitness-ignore-file file-length-limit -- behavior fixture suite; related scenarios stay together while checks are split into focused tests.
+/**
+ * @fileoverview Branch-behavior tests for medium-coverage checks (round 12).
+ *
+ * Targets the dangerous-config-defaults value extractors (config, TLS,
+ * pool-size) and the exit-code-correctness catch-block analyzer.
+ */
+import { mkdirSync, mkdtempSync, rmSync, writeFileSync } from 'node:fs';
+import { tmpdir } from 'node:os';
+import { dirname, join } from 'node:path';
+import { fileCache } from '@opensip-cli/fitness';
+import { afterAll, afterEach, beforeAll, describe, expect, it } from 'vitest';
+import { checks } from '../index.js';
+function findCheck(slug) {
+    const check = checks.find((c) => c.config.slug === slug);
+    if (!check)
+        throw new Error(`check not found: ${slug}`);
+    return check;
+}
+function makeFixtureDir(prefix) {
+    return mkdtempSync(join(tmpdir(), `cu-cov12-${prefix}-`));
+}
+function writeFixture(cwd, rel, content) {
+    const abs = join(cwd, rel);
+    mkdirSync(dirname(abs), { recursive: true });
+    writeFileSync(abs, content);
+    return abs;
+}
+afterEach(() => fileCache.clear());
+// =============================================================================
+// dangerous-config-defaults: config / TLS-with-quotes / pool-size extractors
+// =============================================================================
+describe('dangerous-config-defaults extractors', () => {
+    let cwd;
+    beforeAll(() => {
+        cwd = makeFixtureDir('dcd');
+        // ssl: false and rejectUnauthorized: false and debug: true.
+        writeFixture(cwd, 'src/config.ts', [
+            'export const db = {',
+            '  ssl: false,',
+            '  rejectUnauthorized: false,',
+            '  debug: true,',
+            '}',
+        ].join('\n'));
+        // Global TLS reject env var set to 0 with quotes -> TLS extractor branches.
+        writeFixture(cwd, 'src/tls.ts', ["process.env.NODE_TLS_REJECT_UNAUTHORIZED = '0'"].join('\n'));
+        // Very small connection pool -> pool-size extractor branch.
+        writeFixture(cwd, 'src/pool.ts', ['export const opts = { poolSize: 1 }'].join('\n'));
+        // A safe config (ssl: true) -> the expected-value mismatch path, no flag.
+        writeFixture(cwd, 'src/safe.ts', ['export const db = { ssl: true }'].join('\n'));
+    });
+    afterAll(() => rmSync(cwd, { recursive: true, force: true }));
+    it('flags ssl/rejectUnauthorized=false and debug=true', async () => {
+        const result = await findCheck('dangerous-config-defaults').run(cwd, {
+            targetFiles: [join(cwd, 'src/config.ts')],
+        });
+        expect(result.signals.length).toBeGreaterThanOrEqual(2);
+    });
+    it('flags NODE_TLS_REJECT_UNAUTHORIZED set to a quoted 0', async () => {
+        const result = await findCheck('dangerous-config-defaults').run(cwd, {
+            targetFiles: [join(cwd, 'src/tls.ts')],
+        });
+        expect(result.signals.length).toBeGreaterThan(0);
+    });
+    it('flags a dangerously small connection pool size', async () => {
+        const result = await findCheck('dangerous-config-defaults').run(cwd, {
+            targetFiles: [join(cwd, 'src/pool.ts')],
+        });
+        expect(result.signals.length).toBeGreaterThan(0);
+    });
+    it('does not flag a safe ssl: true config', async () => {
+        const result = await findCheck('dangerous-config-defaults').run(cwd, {
+            targetFiles: [join(cwd, 'src/safe.ts')],
+        });
+        expect(result.signals.length).toBe(0);
+    });
+});
+// =============================================================================
+// exit-code-correctness: catch-block propagation analysis
+// =============================================================================
+describe('exit-code-correctness catch blocks', () => {
+    let cwd;
+    beforeAll(() => {
+        cwd = makeFixtureDir('exit-code');
+        // A CLI file whose catch logs but does not propagate -> flagged.
+        writeFixture(cwd, 'cli/run.ts', [
+            'export async function main() {',
+            '  try {',
+            '    await doWork()',
+            '  } catch (err) {',
+            '    logger.error(err)',
+            '  }',
+            '}',
+        ].join('\n'));
+        // A catch that logs AND re-throws -> propagation path, not flagged.
+        writeFixture(cwd, 'cli/ok.ts', [
+            'export async function main() {',
+            '  try {',
+            '    await doWork()',
+            '  } catch (err) {',
+            '    logger.error(err)',
+            '    throw err',
+            '  }',
+            '}',
+        ].join('\n'));
+        // A catch that does NOT log an error -> logsError-false continue branch.
+        writeFixture(cwd, 'cli/silent.ts', [
+            'export async function main() {',
+            '  try {',
+            '    await doWork()',
+            '  } catch (err) {',
+            '    return undefined',
+            '  }',
+            '}',
+        ].join('\n'));
+        // A CLI test file -> skipped by the test-file guard.
+        writeFixture(cwd, 'cli/run.test.ts', [
+            'export async function main() {',
+            '  try { await doWork() } catch (err) { logger.error(err) }',
+            '}',
+        ].join('\n'));
+        // A non-CLI file -> skipped by the path guard.
+        writeFixture(cwd, 'src/util.ts', ['export function f() { try { g() } catch (e) { logger.error(e) } }'].join('\n'));
+    });
+    afterAll(() => rmSync(cwd, { recursive: true, force: true }));
+    it('flags a CLI catch block that logs but does not propagate', async () => {
+        const result = await findCheck('exit-code-correctness').run(cwd, {
+            targetFiles: [join(cwd, 'cli/run.ts')],
+        });
+        expect(result.signals.length).toBeGreaterThan(0);
+    });
+    it('does not flag a catch that re-throws', async () => {
+        const result = await findCheck('exit-code-correctness').run(cwd, {
+            targetFiles: [join(cwd, 'cli/ok.ts')],
+        });
+        expect(result.signals.length).toBe(0);
+    });
+    it('does not flag a catch that does not log an error', async () => {
+        const result = await findCheck('exit-code-correctness').run(cwd, {
+            targetFiles: [join(cwd, 'cli/silent.ts')],
+        });
+        expect(result.signals.length).toBe(0);
+    });
+    it('skips CLI test files', async () => {
+        const result = await findCheck('exit-code-correctness').run(cwd, {
+            targetFiles: [join(cwd, 'cli/run.test.ts')],
+        });
+        expect(result.signals.length).toBe(0);
+    });
+    it('skips non-CLI files', async () => {
+        const result = await findCheck('exit-code-correctness').run(cwd, {
+            targetFiles: [join(cwd, 'src/util.ts')],
+        });
+        expect(result.signals.length).toBe(0);
+    });
+});
+//# sourceMappingURL=behavior-fixtures-12.test.js.map

package/dist/__tests__/behavior-fixtures-12.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"behavior-fixtures-12.test.js","sourceRoot":"","sources":["../../src/__tests__/behavior-fixtures-12.test.ts"],"names":[],"mappings":"AAAA,+IAA+I;AAC/I;;;;;GAKG;AAEH,OAAO,EAAE,SAAS,EAAE,WAAW,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AACxE,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACjC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAE1C,OAAO,EAAE,SAAS,EAAE,MAAM,sBAAsB,CAAC;AACjD,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAE9E,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AAErC,SAAS,SAAS,CAAC,IAAY;IAC7B,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC;IACzD,IAAI,CAAC,KAAK;QAAE,MAAM,IAAI,KAAK,CAAC,oBAAoB,IAAI,EAAE,CAAC,CAAC;IACxD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,cAAc,CAAC,MAAc;IACpC,OAAO,WAAW,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,YAAY,MAAM,GAAG,CAAC,CAAC,CAAC;AAC5D,CAAC;AAED,SAAS,YAAY,CAAC,GAAW,EAAE,GAAW,EAAE,OAAe;IAC7D,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;IAC3B,SAAS,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC7C,aAAa,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;IAC5B,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,KAAK,EAAE,CAAC,CAAC;AAEnC,gFAAgF;AAChF,6EAA6E;AAC7E,gFAAgF;AAEhF,QAAQ,CAAC,sCAAsC,EAAE,GAAG,EAAE;IACpD,IAAI,GAAW,CAAC;IAEhB,SAAS,CAAC,GAAG,EAAE;QACb,GAAG,GAAG,cAAc,CAAC,KAAK,CAAC,CAAC;QAC5B,4DAA4D;QAC5D,YAAY,CACV,GAAG,EACH,eAAe,EACf;YACE,qBAAqB;YACrB,eAAe;YACf,8BAA8B;YAC9B,gBAAgB;YAChB,GAAG;SACJ,CAAC,IAAI,CAAC,IAAI,CAAC,CACb,CAAC;QACF,4EAA4E;QAC5E,YAAY,CAAC,GAAG,EAAE,YAAY,EAAE,CAAC,gDAAgD,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;QAC/F,4DAA4D;QAC5D,YAAY,CAAC,GAAG,EAAE,aAAa,EAAE,CAAC,qCAAqC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;QACrF,0EAA0E;QAC1E,YAAY,CAAC,GAAG,EAAE,aAAa,EAAE,CAAC,iCAAiC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;IACnF,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;IAE9D,EAAE,CAAC,mDAAmD,EAAE,KAAK,IAAI,EAAE;QACjE,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,2BAA2B,CAAC,CAAC,GAAG,CAAC,GAAG,EAAE;YACnE,WAAW,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,eAAe,CAAC,CAAC;SAC1C,CAAC,CAAC;QACH,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,sBAAsB,CAAC,CAAC,CAAC,CAAC;IAC1D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,sDAAsD,EAAE,KAAK,IAAI,EAAE;QACpE,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,2BAA2B,CAAC,CAAC,GAAG,CAAC,GAAG,EAAE;YACnE,WAAW,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,YAAY,CAAC,CAAC;SACvC,CAAC,CAAC;QACH,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC;IACnD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,gDAAgD,EAAE,KAAK,IAAI,EAAE;QAC9D,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,2BAA2B,CAAC,CAAC,GAAG,CAAC,GAAG,EAAE;YACnE,WAAW,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,aAAa,CAAC,CAAC;SACxC,CAAC,CAAC;QACH,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC;IACnD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,uCAAuC,EAAE,KAAK,IAAI,EAAE;QACrD,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,2BAA2B,CAAC,CAAC,GAAG,CAAC,GAAG,EAAE;YACnE,WAAW,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,aAAa,CAAC,CAAC;SACxC,CAAC,CAAC;QACH,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACxC,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,gFAAgF;AAChF,0DAA0D;AAC1D,gFAAgF;AAEhF,QAAQ,CAAC,oCAAoC,EAAE,GAAG,EAAE;IAClD,IAAI,GAAW,CAAC;IAEhB,SAAS,CAAC,GAAG,EAAE;QACb,GAAG,GAAG,cAAc,CAAC,WAAW,CAAC,CAAC;QAClC,iEAAiE;QACjE,YAAY,CACV,GAAG,EACH,YAAY,EACZ;YACE,gCAAgC;YAChC,SAAS;YACT,oBAAoB;YACpB,mBAAmB;YACnB,uBAAuB;YACvB,KAAK;YACL,GAAG;SACJ,CAAC,IAAI,CAAC,IAAI,CAAC,CACb,CAAC;QACF,oEAAoE;QACpE,YAAY,CACV,GAAG,EACH,WAAW,EACX;YACE,gCAAgC;YAChC,SAAS;YACT,oBAAoB;YACpB,mBAAmB;YACnB,uBAAuB;YACvB,eAAe;YACf,KAAK;YACL,GAAG;SACJ,CAAC,IAAI,CAAC,IAAI,CAAC,CACb,CAAC;QACF,yEAAyE;QACzE,YAAY,CACV,GAAG,EACH,eAAe,EACf;YACE,gCAAgC;YAChC,SAAS;YACT,oBAAoB;YACpB,mBAAmB;YACnB,sBAAsB;YACtB,KAAK;YACL,GAAG;SACJ,CAAC,IAAI,CAAC,IAAI,CAAC,CACb,CAAC;QACF,qDAAqD;QACrD,YAAY,CACV,GAAG,EACH,iBAAiB,EACjB;YACE,gCAAgC;YAChC,4DAA4D;YAC5D,GAAG;SACJ,CAAC,IAAI,CAAC,IAAI,CAAC,CACb,CAAC;QACF,+CAA+C;QAC/C,YAAY,CACV,GAAG,EACH,aAAa,EACb,CAAC,mEAAmE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CACjF,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;IAE9D,EAAE,CAAC,0DAA0D,EAAE,KAAK,IAAI,EAAE;QACxE,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,uBAAuB,CAAC,CAAC,GAAG,CAAC,GAAG,EAAE;YAC/D,WAAW,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,YAAY,CAAC,CAAC;SACvC,CAAC,CAAC;QACH,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC;IACnD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,sCAAsC,EAAE,KAAK,IAAI,EAAE;QACpD,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,uBAAuB,CAAC,CAAC,GAAG,CAAC,GAAG,EAAE;YAC/D,WAAW,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,WAAW,CAAC,CAAC;SACtC,CAAC,CAAC;QACH,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACxC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,kDAAkD,EAAE,KAAK,IAAI,EAAE;QAChE,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,uBAAuB,CAAC,CAAC,GAAG,CAAC,GAAG,EAAE;YAC/D,WAAW,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,eAAe,CAAC,CAAC;SAC1C,CAAC,CAAC;QACH,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACxC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,sBAAsB,EAAE,KAAK,IAAI,EAAE;QACpC,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,uBAAuB,CAAC,CAAC,GAAG,CAAC,GAAG,EAAE;YAC/D,WAAW,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,iBAAiB,CAAC,CAAC;SAC5C,CAAC,CAAC;QACH,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACxC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,qBAAqB,EAAE,KAAK,IAAI,EAAE;QACnC,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,uBAAuB,CAAC,CAAC,GAAG,CAAC,GAAG,EAAE;YAC/D,WAAW,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,aAAa,CAAC,CAAC;SACxC,CAAC,CAAC;QACH,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACxC,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/__tests__/behavior-fixtures-2.test.d.ts

@@ -0,0 +1,8 @@
+/**
+ * @fileoverview Additional fixture tests for universal check behavior.
+ *
+ * Pattern matches `behavior-fixtures.test.ts`: per-check fixtures driven
+ * through `check.run(cwd, { targetFiles })`.
+ */
+export {};
+//# sourceMappingURL=behavior-fixtures-2.test.d.ts.map

package/dist/__tests__/behavior-fixtures-2.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"behavior-fixtures-2.test.d.ts","sourceRoot":"","sources":["../../src/__tests__/behavior-fixtures-2.test.ts"],"names":[],"mappings":"AACA;;;;;GAKG"}