@opensip-cli/checks-universal 0.1.0

package/dist/checks/quality/linting/semgrep-justifications.js

@@ -0,0 +1,229 @@
+// @fitness-ignore-file semgrep-justifications -- This check's own code references nosemgrep patterns for detection purposes
+/**
+ * @fileoverview Semgrep Justifications check
+ *
+ * Validates that all nosemgrep directives have proper justifications.
+ * Similar to eslint-justifications, this ensures suppression directives
+ * are documented with specific reasons.
+ */
+import { defineCheck } from '@opensip-cli/fitness';
+// =============================================================================
+// CONSTANTS
+// =============================================================================
+const CHECK_SLUG = 'semgrep-justifications';
+const CHECK_ID = 'f83332d7-b3f2-463c-be54-8689a0fac5e4';
+const ISSUE_TYPE_MISSING_JUSTIFICATION = 'missing-justification';
+const ISSUE_TYPE_GENERIC_JUSTIFICATION = 'generic-justification';
+const ISSUE_TYPE_MISSING_RULE = 'missing-rule';
+// Generic justification patterns - pre-compiled for safety
+const GENERIC_JUSTIFICATIONS = [
+    /^todo$/i,
+    /^fix\s?(?:this|later|me)?$/i,
+    /^temporary$/i,
+    /^temp$/i,
+    /^wip$/i,
+    /^ignore$/i,
+    /^skip$/i,
+    /^disabled?$/i,
+    /^hack$/i,
+    /^workaround$/i,
+    /^needed$/i,
+    /^required$/i,
+    /^necessary$/i,
+    /^legacy$/i,
+    /^old\s?code$/i,
+    /^safe$/i,
+    /^ok$/i,
+    /^fine$/i,
+    /^false\s?positive$/i, // Too generic without explanation
+];
+const MIN_JUSTIFICATION_LENGTH = 10;
+// =============================================================================
+// ANALYSIS FUNCTIONS
+// =============================================================================
+/**
+ * Validates generic justification patterns
+ */
+function isGenericJustification(justification) {
+    const trimmed = justification.trim();
+    if (trimmed.length < MIN_JUSTIFICATION_LENGTH) {
+        return true;
+    }
+    return GENERIC_JUSTIFICATIONS.some((pattern) => pattern.test(trimmed));
+}
+/**
+ * Parse a nosemgrep directive line and extract rule ID and reason.
+ * Format: // nosemgrep: rule.id -- reason
+ *         // nosemgrep: rule.id
+ *         // nosemgrep -- reason (discouraged)
+ *         // nosemgrep (discouraged)
+ */
+function parseNosemgrepLine(line) {
+    const commentIdx = line.indexOf('//');
+    if (commentIdx === -1) {
+        return { isDirective: false, ruleId: null, reason: null };
+    }
+    const afterComment = line.slice(commentIdx + 2).trim();
+    if (!afterComment.startsWith('nosemgrep')) {
+        return { isDirective: false, ruleId: null, reason: null };
+    }
+    const afterMarker = afterComment.slice('nosemgrep'.length);
+    // No rule ID and no reason: // nosemgrep
+    if (afterMarker.trim() === '') {
+        return { isDirective: true, ruleId: null, reason: null };
+    }
+    let ruleId = null;
+    let reason = null;
+    // Check for : separator (rule ID follows)
+    if (afterMarker.startsWith(':')) {
+        const afterColon = afterMarker.slice(1).trim();
+        // Check for -- separator (reason follows)
+        const reasonSeparator = afterColon.indexOf('--');
+        if (reasonSeparator === -1) {
+            ruleId = afterColon.trim() || null;
+        }
+        else {
+            ruleId = afterColon.slice(0, reasonSeparator).trim() || null;
+            reason = afterColon.slice(reasonSeparator + 2).trim() || null;
+        }
+    }
+    else if (afterMarker.trim().startsWith('--')) {
+        // Just a reason, no rule ID: // nosemgrep -- reason
+        reason = afterMarker.trim().slice(2).trim() || null;
+    }
+    return { isDirective: true, ruleId, reason };
+}
+/**
+ * Check a single line for nosemgrep suppression issues.
+ */
+function checkNosemgrepLine(line, lineNumber) {
+    const { isDirective, ruleId, reason } = parseNosemgrepLine(line);
+    if (!isDirective) {
+        return null;
+    }
+    // Case 1: Missing rule ID (blanket suppress)
+    if (!ruleId) {
+        return {
+            line: lineNumber,
+            type: ISSUE_TYPE_MISSING_RULE,
+            ruleId: null,
+            comment: line.trim(),
+            message: reason
+                ? `Blanket nosemgrep without rule ID. Specify which rule: // nosemgrep: specific.rule.id -- ${reason}`
+                : 'Blanket nosemgrep without rule ID or justification. Add: // nosemgrep: specific.rule.id -- [reason why this is safe]',
+        };
+    }
+    // Case 2: Missing justification
+    if (!reason) {
+        return {
+            line: lineNumber,
+            type: ISSUE_TYPE_MISSING_JUSTIFICATION,
+            ruleId,
+            comment: line.trim(),
+            message: `nosemgrep for '${ruleId}' missing justification. Add: // nosemgrep: ${ruleId} -- [specific reason why this is safe]`,
+        };
+    }
+    // Case 3: Generic justification
+    if (isGenericJustification(reason)) {
+        return {
+            line: lineNumber,
+            type: ISSUE_TYPE_GENERIC_JUSTIFICATION,
+            ruleId,
+            comment: line.trim(),
+            message: `Generic justification for '${ruleId}': "${reason}". Replace with specific reason explaining why this code is safe (e.g., "Input validated by Zod schema" or "Internal CLI tool with trusted input only")`,
+        };
+    }
+    // Valid justification
+    return null;
+}
+/**
+ * Validates nosemgrep suppressions in file content.
+ */
+function validateNosemgrepSuppressions(content) {
+    const issues = [];
+    const lines = content.split('\n');
+    for (const [i, line] of lines.entries()) {
+        if (!line)
+            continue;
+        const issue = checkNosemgrepLine(line, i + 1);
+        if (issue) {
+            issues.push(issue);
+        }
+    }
+    return issues;
+}
+// =============================================================================
+// HELPERS
+// =============================================================================
+function getSuggestionForIssueType(issueType) {
+    switch (issueType) {
+        case ISSUE_TYPE_MISSING_JUSTIFICATION: {
+            return 'Add a justification after -- explaining why this suppression is safe';
+        }
+        case ISSUE_TYPE_GENERIC_JUSTIFICATION: {
+            return 'Replace generic justification with a specific explanation of why this code is safe';
+        }
+        case ISSUE_TYPE_MISSING_RULE: {
+            return 'Specify the rule ID being suppressed: // nosemgrep: rule.id -- reason';
+        }
+        default: {
+            return 'Fix the nosemgrep directive format: // nosemgrep: rule.id -- reason';
+        }
+    }
+}
+function getSeverityForIssueType(issueType) {
+    // Generic justifications are warnings, missing justifications/rules are errors
+    return issueType === ISSUE_TYPE_GENERIC_JUSTIFICATION ? 'warning' : 'error';
+}
+// =============================================================================
+// CHECK DEFINITION
+// =============================================================================
+/**
+ * Check: quality/semgrep-justifications
+ *
+ * Ensures all nosemgrep suppressions have proper justifications.
+ * Missing justifications are errors; generic justifications are warnings.
+ * Blanket suppressions (without rule IDs) are errors.
+ */
+export const semgrepJustifications = defineCheck({
+    id: CHECK_ID,
+    slug: CHECK_SLUG,
+    scope: { languages: ['typescript'], concerns: ['backend', 'frontend', 'cli'] },
+    contentFilter: 'raw',
+    confidence: 'medium',
+    description: 'Ensures all nosemgrep suppressions have proper justifications',
+    longDescription: `**Purpose:** Enforces that every \`nosemgrep\` directive includes a specific rule ID and a meaningful justification explaining why the suppression is safe.
+
+**Detects:**
+- Blanket \`nosemgrep\` directives without a rule ID (e.g., \`// nosemgrep\` instead of \`// nosemgrep: rule.id\`)
+- Missing justifications (no \`--\` separator with reason after the rule ID)
+- Generic justifications matching patterns like \`todo\`, \`fix later\`, \`temp\`, \`hack\`, \`safe\`, \`ok\`, \`false positive\`, etc. (18 patterns total)
+- Justifications shorter than 10 characters
+
+**Why it matters:** Semgrep suppressions hide security and correctness findings. Without specific justifications, it is impossible to audit whether suppressions are still valid or were added carelessly.
+
+**Scope:** Analyzes each file individually. General best practice for security suppression documentation.`,
+    tags: ['compliance', 'documentation', 'security', 'quality'],
+    fileTypes: ['ts', 'tsx'],
+    analyze: (content, filePath) => {
+        const violations = [];
+        // Early exit optimization: skip files without any nosemgrep
+        if (!content.includes('nosemgrep')) {
+            return violations;
+        }
+        const issues = validateNosemgrepSuppressions(content);
+        for (const issue of issues) {
+            violations.push({
+                filePath,
+                line: issue.line,
+                message: issue.message,
+                severity: getSeverityForIssueType(issue.type),
+                suggestion: getSuggestionForIssueType(issue.type),
+                type: issue.type,
+                match: issue.comment,
+            });
+        }
+        return violations;
+    },
+});
+//# sourceMappingURL=semgrep-justifications.js.map

package/dist/checks/quality/linting/semgrep-justifications.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"semgrep-justifications.js","sourceRoot":"","sources":["../../../../src/checks/quality/linting/semgrep-justifications.ts"],"names":[],"mappings":"AAAA,4HAA4H;AAC5H;;;;;;GAMG;AAEH,OAAO,EAAE,WAAW,EAAuB,MAAM,sBAAsB,CAAC;AAExE,gFAAgF;AAChF,YAAY;AACZ,gFAAgF;AAEhF,MAAM,UAAU,GAAG,wBAAwB,CAAC;AAC5C,MAAM,QAAQ,GAAG,sCAAsC,CAAC;AAExD,MAAM,gCAAgC,GAAG,uBAAgC,CAAC;AAC1E,MAAM,gCAAgC,GAAG,uBAAgC,CAAC;AAC1E,MAAM,uBAAuB,GAAG,cAAuB,CAAC;AAExD,2DAA2D;AAC3D,MAAM,sBAAsB,GAAG;IAC7B,SAAS;IACT,6BAA6B;IAC7B,cAAc;IACd,SAAS;IACT,QAAQ;IACR,WAAW;IACX,SAAS;IACT,cAAc;IACd,SAAS;IACT,eAAe;IACf,WAAW;IACX,aAAa;IACb,cAAc;IACd,WAAW;IACX,eAAe;IACf,SAAS;IACT,OAAO;IACP,SAAS;IACT,qBAAqB,EAAE,kCAAkC;CAC1D,CAAC;AAEF,MAAM,wBAAwB,GAAG,EAAE,CAAC;AAmBpC,gFAAgF;AAChF,qBAAqB;AACrB,gFAAgF;AAEhF;;GAEG;AACH,SAAS,sBAAsB,CAAC,aAAqB;IACnD,MAAM,OAAO,GAAG,aAAa,CAAC,IAAI,EAAE,CAAC;IACrC,IAAI,OAAO,CAAC,MAAM,GAAG,wBAAwB,EAAE,CAAC;QAC9C,OAAO,IAAI,CAAC;IACd,CAAC;IACD,OAAO,sBAAsB,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC;AACzE,CAAC;AAED;;;;;;GAMG;AACH,SAAS,kBAAkB,CAAC,IAAY;IAKtC,MAAM,UAAU,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IACtC,IAAI,UAAU,KAAK,CAAC,CAAC,EAAE,CAAC;QACtB,OAAO,EAAE,WAAW,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;IAC5D,CAAC;IAED,MAAM,YAAY,GAAG,IAAI,CAAC,KAAK,CAAC,UAAU,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IACvD,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,WAAW,CAAC,EAAE,CAAC;QAC1C,OAAO,EAAE,WAAW,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;IAC5D,CAAC;IAED,MAAM,WAAW,GAAG,YAAY,CAAC,KAAK,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;IAE3D,yCAAyC;IACzC,IAAI,WAAW,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;QAC9B,OAAO,EAAE,WAAW,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;IAC3D,CAAC;IAED,IAAI,MAAM,GAAkB,IAAI,CAAC;IACjC,IAAI,MAAM,GAAkB,IAAI,CAAC;IAEjC,0CAA0C;IAC1C,IAAI,WAAW,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QAChC,MAAM,UAAU,GAAG,WAAW,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QAE/C,0CAA0C;QAC1C,MAAM,eAAe,GAAG,UAAU,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QACjD,IAAI,eAAe,KAAK,CAAC,CAAC,EAAE,CAAC;YAC3B,MAAM,GAAG,UAAU,CAAC,IAAI,EAAE,IAAI,IAAI,CAAC;QACrC,CAAC;aAAM,CAAC;YACN,MAAM,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC,EAAE,eAAe,CAAC,CAAC,IAAI,EAAE,IAAI,IAAI,CAAC;YAC7D,MAAM,GAAG,UAAU,CAAC,KAAK,CAAC,eAAe,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,IAAI,IAAI,CAAC;QAChE,CAAC;IACH,CAAC;SAAM,IAAI,WAAW,CAAC,IAAI,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;QAC/C,oDAAoD;QACpD,MAAM,GAAG,WAAW,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,IAAI,IAAI,CAAC;IACtD,CAAC;IAED,OAAO,EAAE,WAAW,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;AAC/C,CAAC;AAED;;GAEG;AACH,SAAS,kBAAkB,CAAC,IAAY,EAAE,UAAkB;IAC1D,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,kBAAkB,CAAC,IAAI,CAAC,CAAC;IAEjE,IAAI,CAAC,WAAW,EAAE,CAAC;QACjB,OAAO,IAAI,CAAC;IACd,CAAC;IAED,6CAA6C;IAC7C,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,OAAO;YACL,IAAI,EAAE,UAAU;YAChB,IAAI,EAAE,uBAAuB;YAC7B,MAAM,EAAE,IAAI;YACZ,OAAO,EAAE,IAAI,CAAC,IAAI,EAAE;YACpB,OAAO,EAAE,MAAM;gBACb,CAAC,CAAC,4FAA4F,MAAM,EAAE;gBACtG,CAAC,CAAC,sHAAsH;SAC3H,CAAC;IACJ,CAAC;IAED,gCAAgC;IAChC,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,OAAO;YACL,IAAI,EAAE,UAAU;YAChB,IAAI,EAAE,gCAAgC;YACtC,MAAM;YACN,OAAO,EAAE,IAAI,CAAC,IAAI,EAAE;YACpB,OAAO,EAAE,kBAAkB,MAAM,+CAA+C,MAAM,wCAAwC;SAC/H,CAAC;IACJ,CAAC;IAED,gCAAgC;IAChC,IAAI,sBAAsB,CAAC,MAAM,CAAC,EAAE,CAAC;QACnC,OAAO;YACL,IAAI,EAAE,UAAU;YAChB,IAAI,EAAE,gCAAgC;YACtC,MAAM;YACN,OAAO,EAAE,IAAI,CAAC,IAAI,EAAE;YACpB,OAAO,EAAE,8BAA8B,MAAM,OAAO,MAAM,yJAAyJ;SACpN,CAAC;IACJ,CAAC;IAED,sBAAsB;IACtB,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;GAEG;AACH,SAAS,6BAA6B,CAAC,OAAe;IACpD,MAAM,MAAM,GAA8B,EAAE,CAAC;IAC7C,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAElC,KAAK,MAAM,CAAC,CAAC,EAAE,IAAI,CAAC,IAAI,KAAK,CAAC,OAAO,EAAE,EAAE,CAAC;QACxC,IAAI,CAAC,IAAI;YAAE,SAAS;QAEpB,MAAM,KAAK,GAAG,kBAAkB,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;QAC9C,IAAI,KAAK,EAAE,CAAC;YACV,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACrB,CAAC;IACH,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,gFAAgF;AAChF,UAAU;AACV,gFAAgF;AAEhF,SAAS,yBAAyB,CAAC,SAAoB;IACrD,QAAQ,SAAS,EAAE,CAAC;QAClB,KAAK,gCAAgC,CAAC,CAAC,CAAC;YACtC,OAAO,sEAAsE,CAAC;QAChF,CAAC;QACD,KAAK,gCAAgC,CAAC,CAAC,CAAC;YACtC,OAAO,oFAAoF,CAAC;QAC9F,CAAC;QACD,KAAK,uBAAuB,CAAC,CAAC,CAAC;YAC7B,OAAO,uEAAuE,CAAC;QACjF,CAAC;QACD,OAAO,CAAC,CAAC,CAAC;YACR,OAAO,qEAAqE,CAAC;QAC/E,CAAC;IACH,CAAC;AACH,CAAC;AAED,SAAS,uBAAuB,CAAC,SAAoB;IACnD,+EAA+E;IAC/E,OAAO,SAAS,KAAK,gCAAgC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC;AAC9E,CAAC;AAED,gFAAgF;AAChF,mBAAmB;AACnB,gFAAgF;AAEhF;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAG,WAAW,CAAC;IAC/C,EAAE,EAAE,QAAQ;IACZ,IAAI,EAAE,UAAU;IAChB,KAAK,EAAE,EAAE,SAAS,EAAE,CAAC,YAAY,CAAC,EAAE,QAAQ,EAAE,CAAC,SAAS,EAAE,UAAU,EAAE,KAAK,CAAC,EAAE;IAC9E,aAAa,EAAE,KAAK;IAEpB,UAAU,EAAE,QAAQ;IACpB,WAAW,EAAE,+DAA+D;IAC5E,eAAe,EAAE;;;;;;;;;;0GAUuF;IACxG,IAAI,EAAE,CAAC,YAAY,EAAE,eAAe,EAAE,UAAU,EAAE,SAAS,CAAC;IAC5D,SAAS,EAAE,CAAC,IAAI,EAAE,KAAK,CAAC;IAExB,OAAO,EAAE,CAAC,OAAe,EAAE,QAAgB,EAAoB,EAAE;QAC/D,MAAM,UAAU,GAAqB,EAAE,CAAC;QAExC,4DAA4D;QAC5D,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC;YACnC,OAAO,UAAU,CAAC;QACpB,CAAC;QAED,MAAM,MAAM,GAAG,6BAA6B,CAAC,OAAO,CAAC,CAAC;QAEtD,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;YAC3B,UAAU,CAAC,IAAI,CAAC;gBACd,QAAQ;gBACR,IAAI,EAAE,KAAK,CAAC,IAAI;gBAChB,OAAO,EAAE,KAAK,CAAC,OAAO;gBACtB,QAAQ,EAAE,uBAAuB,CAAC,KAAK,CAAC,IAAI,CAAC;gBAC7C,UAAU,EAAE,yBAAyB,CAAC,KAAK,CAAC,IAAI,CAAC;gBACjD,IAAI,EAAE,KAAK,CAAC,IAAI;gBAChB,KAAK,EAAE,KAAK,CAAC,OAAO;aACrB,CAAC,CAAC;QACL,CAAC;QAED,OAAO,UAAU,CAAC;IACpB,CAAC;CACF,CAAC,CAAC"}

package/dist/checks/quality/linting/typescript-directive-hygiene.d.ts

@@ -0,0 +1,12 @@
+/**
+ * @fileoverview TypeScript Directive Hygiene Check
+ *
+ * Validates TypeScript suppression directives (@ts-expect-error, @ts-ignore) have proper justifications.
+ */
+/**
+ * Check: quality/typescript-directive-hygiene
+ *
+ * Ensures @ts-expect-error and @ts-ignore have proper justifications.
+ */
+export declare const typescriptDirectiveHygiene: import("@opensip-cli/fitness").Check;
+//# sourceMappingURL=typescript-directive-hygiene.d.ts.map

package/dist/checks/quality/linting/typescript-directive-hygiene.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"typescript-directive-hygiene.d.ts","sourceRoot":"","sources":["../../../../src/checks/quality/linting/typescript-directive-hygiene.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAsEH;;;;GAIG;AACH,eAAO,MAAM,0BAA0B,sCA+ErC,CAAC"}

package/dist/checks/quality/linting/typescript-directive-hygiene.js

@@ -0,0 +1,142 @@
+/**
+ * @fileoverview TypeScript Directive Hygiene Check
+ *
+ * Validates TypeScript suppression directives (@ts-expect-error, @ts-ignore) have proper justifications.
+ */
+import { defineCheck, isTestFile } from '@opensip-cli/fitness';
+/** Check ID constant to avoid duplicate string literals */
+const CHECK_SLUG = 'typescript-directive-hygiene';
+const CHECK_ID = 'e7007f81-f00c-4a2e-99a2-fc8a2193f658';
+/**
+ * Regex to match TypeScript directive comments.
+ * Uses character class for whitespace to prevent ReDoS (no backtracking on \s*).
+ * Pattern: // followed by optional spaces/tabs, then directive, then rest of line
+ */
+const TS_DIRECTIVE_REGEX = /\/\/[ \t]*(@ts-expect-error|@ts-ignore)([^\n]*)$/;
+const GENERIC_JUSTIFICATIONS = [
+    /^$/,
+    /^[ \t]*$/,
+    /^todo$/i,
+    /^fix[ \t]*(?:this|later|me)?$/i,
+    /^temporary$/i,
+    /^temp$/i,
+    /^wip$/i,
+    /^ignore$/i,
+    /^skip$/i,
+    /^hack$/i,
+    /^workaround$/i,
+];
+const MIN_JUSTIFICATION_LENGTH = 10;
+/**
+ * Extract justification from the text after a TypeScript directive
+ */
+function extractJustification(afterDirective) {
+    const trimmed = afterDirective.trim();
+    // Check for -- separator (non-greedy, use string operations)
+    if (trimmed.startsWith('--')) {
+        const rest = trimmed.slice(2).trim();
+        return rest || null;
+    }
+    // Check for - separator (must have space after dash)
+    if (trimmed.startsWith('- ')) {
+        const rest = trimmed.slice(2).trim();
+        return rest || null;
+    }
+    // Check for : separator
+    if (trimmed.startsWith(':')) {
+        const rest = trimmed.slice(1).trim();
+        return rest || null;
+    }
+    // Accept substantial text without separator
+    if (trimmed.length >= MIN_JUSTIFICATION_LENGTH)
+        return trimmed;
+    return null;
+}
+/**
+ * Check if a justification is too generic
+ */
+function isGeneric(justification) {
+    const trimmed = justification.trim();
+    if (trimmed.length < MIN_JUSTIFICATION_LENGTH)
+        return true;
+    return GENERIC_JUSTIFICATIONS.some((p) => p.test(trimmed));
+}
+/**
+ * Check: quality/typescript-directive-hygiene
+ *
+ * Ensures @ts-expect-error and @ts-ignore have proper justifications.
+ */
+export const typescriptDirectiveHygiene = defineCheck({
+    id: CHECK_ID,
+    slug: CHECK_SLUG,
+    scope: { languages: ['typescript'], concerns: ['backend', 'frontend', 'cli'] },
+    contentFilter: 'raw',
+    confidence: 'medium',
+    description: 'Ensures TypeScript directives have proper justifications',
+    longDescription: `**Purpose:** Enforces that every \`@ts-expect-error\` and \`@ts-ignore\` directive includes a meaningful justification and prefers \`@ts-expect-error\` over \`@ts-ignore\`.
+
+**Detects:**
+- Missing justifications on \`@ts-expect-error\` and \`@ts-ignore\` directives (no \`--\`, \`-\`, or \`:\` separator with reason)
+- Generic justifications matching patterns like \`todo\`, \`fix later\`, \`temp\`, \`hack\`, \`workaround\`, etc., or text shorter than 10 characters
+- Usage of \`@ts-ignore\` where \`@ts-expect-error\` should be used instead (warns about stale suppression risk)
+
+**Why it matters:** Unjustified type suppressions hide real type errors and accumulate as technical debt. Using \`@ts-expect-error\` over \`@ts-ignore\` ensures suppressions are automatically flagged when the underlying issue is fixed.
+
+**Scope:** Analyzes each file individually (excludes test files: \`**/__tests__/**\`, \`**/*.test.*\`, \`**/*.spec.*\`). General best practice.`,
+    tags: ['quality', 'code-quality', 'documentation'],
+    fileTypes: ['ts'],
+    analyze: (content, filePath) => {
+        const violations = [];
+        // Skip test files — directives inside test-fixture string literals are
+        // not source-level directives (the longDescription has always claimed this).
+        if (isTestFile(filePath))
+            return violations;
+        // Quick filter - skip files without directives
+        if (!content.includes('@ts-expect-error') && !content.includes('@ts-ignore')) {
+            return violations;
+        }
+        const lines = content.split('\n');
+        for (const [i, line_] of lines.entries()) {
+            const line = line_ ?? '';
+            const match = TS_DIRECTIVE_REGEX.exec(line);
+            if (!match)
+                continue;
+            const directive = match[1];
+            const afterDirective = match[2] ?? '';
+            const justification = extractJustification(afterDirective);
+            const lineNum = i + 1;
+            if (!justification) {
+                violations.push({
+                    filePath,
+                    line: lineNum,
+                    message: `${directive} missing justification`,
+                    severity: 'error',
+                    suggestion: `Add a justification after the directive: ${directive} -- Reason why this suppression is needed`,
+                    match: directive,
+                });
+            }
+            else if (isGeneric(justification)) {
+                violations.push({
+                    filePath,
+                    line: lineNum,
+                    message: `${directive} has generic justification: "${justification}"`,
+                    severity: 'warning',
+                    suggestion: `Replace generic justification with a specific explanation. Minimum ${MIN_JUSTIFICATION_LENGTH} characters describing WHY the suppression is needed`,
+                    match: justification,
+                });
+            }
+            else if (directive === '@ts-ignore') {
+                violations.push({
+                    filePath,
+                    line: lineNum,
+                    message: `Use @ts-expect-error instead of @ts-ignore`,
+                    severity: 'warning',
+                    suggestion: 'Replace @ts-ignore with @ts-expect-error. The latter will error if the suppressed issue is fixed, preventing stale suppressions',
+                    match: directive,
+                });
+            }
+        }
+        return violations;
+    },
+});
+//# sourceMappingURL=typescript-directive-hygiene.js.map

package/dist/checks/quality/linting/typescript-directive-hygiene.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"typescript-directive-hygiene.js","sourceRoot":"","sources":["../../../../src/checks/quality/linting/typescript-directive-hygiene.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,WAAW,EAAE,UAAU,EAAuB,MAAM,sBAAsB,CAAC;AAEpF,2DAA2D;AAC3D,MAAM,UAAU,GAAG,8BAA8B,CAAC;AAClD,MAAM,QAAQ,GAAG,sCAAsC,CAAC;AAExD;;;;GAIG;AACH,MAAM,kBAAkB,GAAG,kDAAkD,CAAC;AAE9E,MAAM,sBAAsB,GAAG;IAC7B,IAAI;IACJ,UAAU;IACV,SAAS;IACT,gCAAgC;IAChC,cAAc;IACd,SAAS;IACT,QAAQ;IACR,WAAW;IACX,SAAS;IACT,SAAS;IACT,eAAe;CAChB,CAAC;AAEF,MAAM,wBAAwB,GAAG,EAAE,CAAC;AAEpC;;GAEG;AACH,SAAS,oBAAoB,CAAC,cAAsB;IAClD,MAAM,OAAO,GAAG,cAAc,CAAC,IAAI,EAAE,CAAC;IAEtC,6DAA6D;IAC7D,IAAI,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;QAC7B,MAAM,IAAI,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QACrC,OAAO,IAAI,IAAI,IAAI,CAAC;IACtB,CAAC;IAED,qDAAqD;IACrD,IAAI,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;QAC7B,MAAM,IAAI,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QACrC,OAAO,IAAI,IAAI,IAAI,CAAC;IACtB,CAAC;IAED,wBAAwB;IACxB,IAAI,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QAC5B,MAAM,IAAI,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QACrC,OAAO,IAAI,IAAI,IAAI,CAAC;IACtB,CAAC;IAED,4CAA4C;IAC5C,IAAI,OAAO,CAAC,MAAM,IAAI,wBAAwB;QAAE,OAAO,OAAO,CAAC;IAE/D,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;GAEG;AACH,SAAS,SAAS,CAAC,aAAqB;IACtC,MAAM,OAAO,GAAG,aAAa,CAAC,IAAI,EAAE,CAAC;IACrC,IAAI,OAAO,CAAC,MAAM,GAAG,wBAAwB;QAAE,OAAO,IAAI,CAAC;IAC3D,OAAO,sBAAsB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC;AAC7D,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,MAAM,0BAA0B,GAAG,WAAW,CAAC;IACpD,EAAE,EAAE,QAAQ;IACZ,IAAI,EAAE,UAAU;IAChB,KAAK,EAAE,EAAE,SAAS,EAAE,CAAC,YAAY,CAAC,EAAE,QAAQ,EAAE,CAAC,SAAS,EAAE,UAAU,EAAE,KAAK,CAAC,EAAE;IAC9E,aAAa,EAAE,KAAK;IAEpB,UAAU,EAAE,QAAQ;IACpB,WAAW,EAAE,0DAA0D;IACvE,eAAe,EAAE;;;;;;;;;gJAS6H;IAC9I,IAAI,EAAE,CAAC,SAAS,EAAE,cAAc,EAAE,eAAe,CAAC;IAClD,SAAS,EAAE,CAAC,IAAI,CAAC;IAEjB,OAAO,EAAE,CAAC,OAAe,EAAE,QAAgB,EAAoB,EAAE;QAC/D,MAAM,UAAU,GAAqB,EAAE,CAAC;QAExC,uEAAuE;QACvE,6EAA6E;QAC7E,IAAI,UAAU,CAAC,QAAQ,CAAC;YAAE,OAAO,UAAU,CAAC;QAE5C,+CAA+C;QAC/C,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,kBAAkB,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAC,EAAE,CAAC;YAC7E,OAAO,UAAU,CAAC;QACpB,CAAC;QAED,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAElC,KAAK,MAAM,CAAC,CAAC,EAAE,KAAK,CAAC,IAAI,KAAK,CAAC,OAAO,EAAE,EAAE,CAAC;YACzC,MAAM,IAAI,GAAG,KAAK,IAAI,EAAE,CAAC;YACzB,MAAM,KAAK,GAAG,kBAAkB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAC5C,IAAI,CAAC,KAAK;gBAAE,SAAS;YAErB,MAAM,SAAS,GAAG,KAAK,CAAC,CAAC,CAAsC,CAAC;YAChE,MAAM,cAAc,GAAG,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;YACtC,MAAM,aAAa,GAAG,oBAAoB,CAAC,cAAc,CAAC,CAAC;YAE3D,MAAM,OAAO,GAAG,CAAC,GAAG,CAAC,CAAC;YAEtB,IAAI,CAAC,aAAa,EAAE,CAAC;gBACnB,UAAU,CAAC,IAAI,CAAC;oBACd,QAAQ;oBACR,IAAI,EAAE,OAAO;oBACb,OAAO,EAAE,GAAG,SAAS,wBAAwB;oBAC7C,QAAQ,EAAE,OAAO;oBACjB,UAAU,EAAE,4CAA4C,SAAS,2CAA2C;oBAC5G,KAAK,EAAE,SAAS;iBACjB,CAAC,CAAC;YACL,CAAC;iBAAM,IAAI,SAAS,CAAC,aAAa,CAAC,EAAE,CAAC;gBACpC,UAAU,CAAC,IAAI,CAAC;oBACd,QAAQ;oBACR,IAAI,EAAE,OAAO;oBACb,OAAO,EAAE,GAAG,SAAS,gCAAgC,aAAa,GAAG;oBACrE,QAAQ,EAAE,SAAS;oBACnB,UAAU,EAAE,sEAAsE,wBAAwB,sDAAsD;oBAChK,KAAK,EAAE,aAAa;iBACrB,CAAC,CAAC;YACL,CAAC;iBAAM,IAAI,SAAS,KAAK,YAAY,EAAE,CAAC;gBACtC,UAAU,CAAC,IAAI,CAAC;oBACd,QAAQ;oBACR,IAAI,EAAE,OAAO;oBACb,OAAO,EAAE,4CAA4C;oBACrD,QAAQ,EAAE,SAAS;oBACnB,UAAU,EACR,iIAAiI;oBACnI,KAAK,EAAE,SAAS;iBACjB,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAED,OAAO,UAAU,CAAC;IACpB,CAAC;CACF,CAAC,CAAC"}

package/dist/checks/quality/no-compatibility-layer-names.d.ts

@@ -0,0 +1,13 @@
+/**
+ * @fileoverview Detects compatibility-layer / legacy-wrapper /
+ * backward-compat declarations.
+ *
+ * Catches class/function/variable declarations whose names contain
+ * `CompatibilityLayer`, `LegacyWrapper`, or `BackwardCompat`. Refactor
+ * to the modern implementation directly; don't keep both paths alive
+ * behind a wrapper.
+ *
+ * Extracted from the former `no-legacy-code` umbrella in Phase C4.
+ */
+export declare const noCompatibilityLayerNames: import("@opensip-cli/fitness").Check;
+//# sourceMappingURL=no-compatibility-layer-names.d.ts.map

package/dist/checks/quality/no-compatibility-layer-names.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"no-compatibility-layer-names.d.ts","sourceRoot":"","sources":["../../../src/checks/quality/no-compatibility-layer-names.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAwDH,eAAO,MAAM,yBAAyB,sCAkDpC,CAAC"}

package/dist/checks/quality/no-compatibility-layer-names.js

@@ -0,0 +1,100 @@
+/**
+ * @fileoverview Detects compatibility-layer / legacy-wrapper /
+ * backward-compat declarations.
+ *
+ * Catches class/function/variable declarations whose names contain
+ * `CompatibilityLayer`, `LegacyWrapper`, or `BackwardCompat`. Refactor
+ * to the modern implementation directly; don't keep both paths alive
+ * behind a wrapper.
+ *
+ * Extracted from the former `no-legacy-code` umbrella in Phase C4.
+ */
+import { defineCheck } from '@opensip-cli/fitness';
+const EXCLUDE_PATTERNS = [/fitness/, /test/, /spec/, /docs/, /reports/, /versioning/];
+function shouldExcludeFile(relativePath) {
+    return EXCLUDE_PATTERNS.some((pattern) => pattern.test(relativePath));
+}
+const DECLARATION_KEYWORDS = ['class ', 'function ', 'const ', 'let ', 'var '];
+const MATCHERS = [
+    {
+        needle: 'compatibilitylayer',
+        type: 'compatibility-layer',
+        message: 'Found compatibility layer class/function - refactor directly instead',
+        suggestion: 'Refactor to use the new implementation directly without a compatibility layer',
+        allowClass: true,
+    },
+    {
+        needle: 'legacywrapper',
+        type: 'legacy-code-path',
+        message: 'Found legacy wrapper class/function - remove and update all dependent code',
+        suggestion: 'Remove the legacy wrapper and update all dependent code to use the modern implementation',
+        allowClass: true,
+    },
+    {
+        needle: 'backwardcompat',
+        type: 'migration-utility',
+        message: 'Found backwards compatibility utility - not needed during pre-launch phase',
+        suggestion: 'Remove backwards compatibility utilities and use direct implementations',
+        allowClass: false,
+    },
+];
+function matchesDeclaration(line, matcher) {
+    const lower = line.toLowerCase();
+    if (!lower.includes(matcher.needle))
+        return false;
+    return DECLARATION_KEYWORDS.some((kw) => {
+        if (!matcher.allowClass && kw === 'class ')
+            return false;
+        return lower.includes(kw);
+    });
+}
+export const noCompatibilityLayerNames = defineCheck({
+    id: 'e39edca8-ee4d-4de8-9a39-655f4d0eb86d',
+    slug: 'no-compatibility-layer-names',
+    scope: { languages: ['typescript'], concerns: ['backend', 'frontend', 'cli'] },
+    contentFilter: 'raw',
+    confidence: 'medium',
+    description: 'Detects compatibility-layer, legacy-wrapper, and backward-compat declarations',
+    longDescription: `**Purpose:** Flags class/function/variable declarations whose names announce themselves as a compatibility layer. Once a refactor is done, the wrapper should be removed and call sites updated to the new implementation directly.
+
+**Detects:**
+- Declarations containing \`CompatibilityLayer\` (class/function/const/let/var)
+- Declarations containing \`LegacyWrapper\` (class/function/const/let/var)
+- Declarations containing \`BackwardCompat\` (function/const/let/var; \`class\` excluded — too rare to be reliable)
+
+**Why it matters:** Wrapper names signal that two implementations are alive at once. Resolving the wrapper to a single direct implementation removes a source of drift.
+
+**Scope:** General best practice. Analyzes each file individually; excludes test/docs/versioning paths.`,
+    tags: ['code-quality', 'compliance', 'quality'],
+    fileTypes: ['ts', 'tsx'],
+    analyze(content, filePath) {
+        if (shouldExcludeFile(filePath))
+            return [];
+        const lower = content.toLowerCase();
+        const hasAnyNeedle = MATCHERS.some((m) => lower.includes(m.needle));
+        if (!hasAnyNeedle)
+            return [];
+        const violations = [];
+        const lines = content.split('\n');
+        for (const [i, line] of lines.entries()) {
+            if (!line)
+                continue;
+            for (const matcher of MATCHERS) {
+                if (matchesDeclaration(line, matcher)) {
+                    violations.push({
+                        line: i + 1,
+                        column: 0,
+                        message: matcher.message,
+                        severity: 'error',
+                        type: matcher.type,
+                        suggestion: matcher.suggestion,
+                        match: line.trim(),
+                    });
+                    break; // one finding per line
+                }
+            }
+        }
+        return violations;
+    },
+});
+//# sourceMappingURL=no-compatibility-layer-names.js.map

package/dist/checks/quality/no-compatibility-layer-names.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"no-compatibility-layer-names.js","sourceRoot":"","sources":["../../../src/checks/quality/no-compatibility-layer-names.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,EAAE,WAAW,EAAuB,MAAM,sBAAsB,CAAC;AAExE,MAAM,gBAAgB,GAAG,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,YAAY,CAAC,CAAC;AAEtF,SAAS,iBAAiB,CAAC,YAAoB;IAC7C,OAAO,gBAAgB,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC;AACxE,CAAC;AAED,MAAM,oBAAoB,GAAG,CAAC,QAAQ,EAAE,WAAW,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;AAY/E,MAAM,QAAQ,GAA2B;IACvC;QACE,MAAM,EAAE,oBAAoB;QAC5B,IAAI,EAAE,qBAAqB;QAC3B,OAAO,EAAE,sEAAsE;QAC/E,UAAU,EAAE,+EAA+E;QAC3F,UAAU,EAAE,IAAI;KACjB;IACD;QACE,MAAM,EAAE,eAAe;QACvB,IAAI,EAAE,kBAAkB;QACxB,OAAO,EAAE,4EAA4E;QACrF,UAAU,EACR,0FAA0F;QAC5F,UAAU,EAAE,IAAI;KACjB;IACD;QACE,MAAM,EAAE,gBAAgB;QACxB,IAAI,EAAE,mBAAmB;QACzB,OAAO,EAAE,4EAA4E;QACrF,UAAU,EAAE,yEAAyE;QACrF,UAAU,EAAE,KAAK;KAClB;CACF,CAAC;AAEF,SAAS,kBAAkB,CAAC,IAAY,EAAE,OAAoB;IAC5D,MAAM,KAAK,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC;IACjC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,MAAM,CAAC;QAAE,OAAO,KAAK,CAAC;IAClD,OAAO,oBAAoB,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE;QACtC,IAAI,CAAC,OAAO,CAAC,UAAU,IAAI,EAAE,KAAK,QAAQ;YAAE,OAAO,KAAK,CAAC;QACzD,OAAO,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;IAC5B,CAAC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,CAAC,MAAM,yBAAyB,GAAG,WAAW,CAAC;IACnD,EAAE,EAAE,sCAAsC;IAC1C,IAAI,EAAE,8BAA8B;IACpC,KAAK,EAAE,EAAE,SAAS,EAAE,CAAC,YAAY,CAAC,EAAE,QAAQ,EAAE,CAAC,SAAS,EAAE,UAAU,EAAE,KAAK,CAAC,EAAE;IAC9E,aAAa,EAAE,KAAK;IACpB,UAAU,EAAE,QAAQ;IACpB,WAAW,EAAE,+EAA+E;IAC5F,eAAe,EAAE;;;;;;;;;wGASqF;IACtG,IAAI,EAAE,CAAC,cAAc,EAAE,YAAY,EAAE,SAAS,CAAC;IAC/C,SAAS,EAAE,CAAC,IAAI,EAAE,KAAK,CAAC;IAExB,OAAO,CAAC,OAAO,EAAE,QAAQ;QACvB,IAAI,iBAAiB,CAAC,QAAQ,CAAC;YAAE,OAAO,EAAE,CAAC;QAE3C,MAAM,KAAK,GAAG,OAAO,CAAC,WAAW,EAAE,CAAC;QACpC,MAAM,YAAY,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC;QACpE,IAAI,CAAC,YAAY;YAAE,OAAO,EAAE,CAAC;QAE7B,MAAM,UAAU,GAAqB,EAAE,CAAC;QACxC,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAElC,KAAK,MAAM,CAAC,CAAC,EAAE,IAAI,CAAC,IAAI,KAAK,CAAC,OAAO,EAAE,EAAE,CAAC;YACxC,IAAI,CAAC,IAAI;gBAAE,SAAS;YACpB,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;gBAC/B,IAAI,kBAAkB,CAAC,IAAI,EAAE,OAAO,CAAC,EAAE,CAAC;oBACtC,UAAU,CAAC,IAAI,CAAC;wBACd,IAAI,EAAE,CAAC,GAAG,CAAC;wBACX,MAAM,EAAE,CAAC;wBACT,OAAO,EAAE,OAAO,CAAC,OAAO;wBACxB,QAAQ,EAAE,OAAO;wBACjB,IAAI,EAAE,OAAO,CAAC,IAAI;wBAClB,UAAU,EAAE,OAAO,CAAC,UAAU;wBAC9B,KAAK,EAAE,IAAI,CAAC,IAAI,EAAE;qBACnB,CAAC,CAAC;oBACH,MAAM,CAAC,uBAAuB;gBAChC,CAAC;YACH,CAAC;QACH,CAAC;QAED,OAAO,UAAU,CAAC;IACpB,CAAC;CACF,CAAC,CAAC"}

package/dist/checks/quality/no-deprecated-tags.d.ts

@@ -0,0 +1,11 @@
+/**
+ * @fileoverview Detects `@deprecated` JSDoc tags in production code.
+ *
+ * Once a symbol is marked deprecated, the deprecated implementation
+ * should be removed in the same PR — leaving it behind keeps two
+ * paths alive and accumulates tech debt.
+ *
+ * Extracted from the former `no-legacy-code` umbrella in Phase C4.
+ */
+export declare const noDeprecatedTags: import("@opensip-cli/fitness").Check;
+//# sourceMappingURL=no-deprecated-tags.d.ts.map

package/dist/checks/quality/no-deprecated-tags.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"no-deprecated-tags.d.ts","sourceRoot":"","sources":["../../../src/checks/quality/no-deprecated-tags.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AA8BH,eAAO,MAAM,gBAAgB,sCA4C3B,CAAC"}

package/dist/checks/quality/no-deprecated-tags.js

@@ -0,0 +1,76 @@
+/**
+ * @fileoverview Detects `@deprecated` JSDoc tags in production code.
+ *
+ * Once a symbol is marked deprecated, the deprecated implementation
+ * should be removed in the same PR — leaving it behind keeps two
+ * paths alive and accumulates tech debt.
+ *
+ * Extracted from the former `no-legacy-code` umbrella in Phase C4.
+ */
+import { defineCheck } from '@opensip-cli/fitness';
+const EXCLUDE_PATTERNS = [
+    /fitness/,
+    /test/,
+    /spec/,
+    /docs/,
+    /reports/,
+    // Schema-migration utilities legitimately mark superseded versions
+    /versioning/,
+];
+function shouldExcludeFile(relativePath) {
+    return EXCLUDE_PATTERNS.some((pattern) => pattern.test(relativePath));
+}
+/**
+ * Detects JSDoc `@deprecated` tag lines. Uses string operations to
+ * avoid regex complexity and ReDoS.
+ */
+function isDeprecatedJsdocLine(line) {
+    const trimmed = line.trim();
+    const normalized = trimmed.startsWith('*') ? trimmed.slice(1).trim() : trimmed;
+    // Defensive concatenation — avoids accidental self-detection in this file's source.
+    const marker = '@' + 'deprecated';
+    return normalized.toLowerCase().startsWith(marker);
+}
+export const noDeprecatedTags = defineCheck({
+    id: '3a27c17d-a926-46a8-864d-610de1a385eb',
+    slug: 'no-deprecated-tags',
+    scope: { languages: ['typescript'], concerns: ['backend', 'frontend', 'cli'] },
+    contentFilter: 'raw',
+    confidence: 'medium',
+    description: 'Detects @deprecated JSDoc tags in production code',
+    longDescription: `**Purpose:** Surfaces \`@deprecated\` JSDoc tags so the deprecated implementation can be removed and call sites updated in the same PR.
+
+**Detects:**
+- JSDoc lines whose first non-asterisk word is \`@deprecated\` (case-insensitive)
+
+**Why it matters:** Deprecation tags accumulate when the deprecated path stays alive. The fitness rule treats every tag as a follow-up to schedule, not a permanent annotation.
+
+**Scope:** General best practice. Analyzes each file individually; excludes test/docs/versioning paths.`,
+    tags: ['code-quality', 'compliance', 'quality'],
+    fileTypes: ['ts', 'tsx'],
+    analyze(content, filePath) {
+        if (shouldExcludeFile(filePath))
+            return [];
+        if (!content.toLowerCase().includes('deprecated'))
+            return [];
+        const violations = [];
+        const lines = content.split('\n');
+        for (const [i, line] of lines.entries()) {
+            if (!line)
+                continue;
+            if (isDeprecatedJsdocLine(line)) {
+                violations.push({
+                    line: i + 1,
+                    column: 0,
+                    message: 'Found @deprecated JSDoc tag - remove this deprecated code and update all callers in the same PR',
+                    severity: 'error',
+                    type: 'deprecated-tag',
+                    suggestion: 'Remove the deprecated code entirely and update all call sites in the same PR',
+                    match: line.trim(),
+                });
+            }
+        }
+        return violations;
+    },
+});
+//# sourceMappingURL=no-deprecated-tags.js.map

package/dist/checks/quality/no-deprecated-tags.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"no-deprecated-tags.js","sourceRoot":"","sources":["../../../src/checks/quality/no-deprecated-tags.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,EAAE,WAAW,EAAuB,MAAM,sBAAsB,CAAC;AAExE,MAAM,gBAAgB,GAAG;IACvB,SAAS;IACT,MAAM;IACN,MAAM;IACN,MAAM;IACN,SAAS;IACT,mEAAmE;IACnE,YAAY;CACb,CAAC;AAEF,SAAS,iBAAiB,CAAC,YAAoB;IAC7C,OAAO,gBAAgB,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC;AACxE,CAAC;AAED;;;GAGG;AACH,SAAS,qBAAqB,CAAC,IAAY;IACzC,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;IAC5B,MAAM,UAAU,GAAG,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC;IAC/E,oFAAoF;IACpF,MAAM,MAAM,GAAG,GAAG,GAAG,YAAY,CAAC;IAClC,OAAO,UAAU,CAAC,WAAW,EAAE,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;AACrD,CAAC;AAED,MAAM,CAAC,MAAM,gBAAgB,GAAG,WAAW,CAAC;IAC1C,EAAE,EAAE,sCAAsC;IAC1C,IAAI,EAAE,oBAAoB;IAC1B,KAAK,EAAE,EAAE,SAAS,EAAE,CAAC,YAAY,CAAC,EAAE,QAAQ,EAAE,CAAC,SAAS,EAAE,UAAU,EAAE,KAAK,CAAC,EAAE;IAC9E,aAAa,EAAE,KAAK;IACpB,UAAU,EAAE,QAAQ;IACpB,WAAW,EAAE,mDAAmD;IAChE,eAAe,EAAE;;;;;;;wGAOqF;IACtG,IAAI,EAAE,CAAC,cAAc,EAAE,YAAY,EAAE,SAAS,CAAC;IAC/C,SAAS,EAAE,CAAC,IAAI,EAAE,KAAK,CAAC;IAExB,OAAO,CAAC,OAAO,EAAE,QAAQ;QACvB,IAAI,iBAAiB,CAAC,QAAQ,CAAC;YAAE,OAAO,EAAE,CAAC;QAC3C,IAAI,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,YAAY,CAAC;YAAE,OAAO,EAAE,CAAC;QAE7D,MAAM,UAAU,GAAqB,EAAE,CAAC;QACxC,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAElC,KAAK,MAAM,CAAC,CAAC,EAAE,IAAI,CAAC,IAAI,KAAK,CAAC,OAAO,EAAE,EAAE,CAAC;YACxC,IAAI,CAAC,IAAI;gBAAE,SAAS;YACpB,IAAI,qBAAqB,CAAC,IAAI,CAAC,EAAE,CAAC;gBAChC,UAAU,CAAC,IAAI,CAAC;oBACd,IAAI,EAAE,CAAC,GAAG,CAAC;oBACX,MAAM,EAAE,CAAC;oBACT,OAAO,EACL,iGAAiG;oBACnG,QAAQ,EAAE,OAAO;oBACjB,IAAI,EAAE,gBAAgB;oBACtB,UAAU,EACR,8EAA8E;oBAChF,KAAK,EAAE,IAAI,CAAC,IAAI,EAAE;iBACnB,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAED,OAAO,UAAU,CAAC;IACpB,CAAC;CACF,CAAC,CAAC"}

package/dist/checks/quality/no-markdown-references.d.ts

@@ -0,0 +1,16 @@
+/**
+ * @fileoverview Detect markdown file references in code comments
+ *
+ * File path references to markdown documents become stale when documents are
+ * moved, renamed, or deleted. Use stable identifiers instead.
+ */
+/**
+ * Check: quality/no-markdown-references
+ *
+ * Detects markdown file path references in code comments. These references
+ * become stale when documents are moved, renamed, or deleted.
+ *
+ * Use stable identifiers instead of file paths to avoid stale references.
+ */
+export declare const noMarkdownReferences: import("@opensip-cli/fitness").Check;
+//# sourceMappingURL=no-markdown-references.d.ts.map

package/dist/checks/quality/no-markdown-references.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"no-markdown-references.d.ts","sourceRoot":"","sources":["../../../src/checks/quality/no-markdown-references.ts"],"names":[],"mappings":"AAEA;;;;;GAKG;AAwGH;;;;;;;GAOG;AACH,eAAO,MAAM,oBAAoB,sCA4C/B,CAAC"}