@opensip-cli/checks-universal 0.1.0

package/dist/checks/resilience/batch-operations.js

@@ -0,0 +1,422 @@
+// @fitness-ignore-file file-length-limit -- JSDoc documentation required for public API
+// @fitness-ignore-file duplicate-implementation-detection -- similar patterns across diagnostic modules
+/**
+ * @fileoverview Batch operations and memory resilience checks
+ */
+import { logger } from '@opensip-cli/core';
+import { defineCheck, isTestFile, getLineNumber } from '@opensip-cli/fitness';
+import { stripStringsAndCommentsPreservingPositions } from '@opensip-cli/fitness';
+const UNBOUNDED_BATCH_PATTERNS = [
+    { pattern: '.map', type: 'async' },
+    { pattern: '.forEach', type: 'async' },
+    { pattern: 'for', type: 'forOf' },
+];
+function findUnboundedBatchMatch(content, patternDef, startIndex) {
+    logger.debug({
+        evt: 'fitness.checks.batch_operations.find_unbounded_batch_match',
+        msg: 'Finding unbounded batch pattern match at position in content',
+    });
+    const idx = content.indexOf(patternDef.pattern, startIndex);
+    if (idx === -1)
+        return null;
+    if (patternDef.type === 'async') {
+        const afterPattern = content.slice(idx + patternDef.pattern.length, idx + patternDef.pattern.length + 20);
+        const asyncMatch = /^\s*\(\s*async/.exec(afterPattern);
+        if (asyncMatch) {
+            return { index: idx, match: patternDef.pattern + asyncMatch[0] };
+        }
+    }
+    else {
+        const afterFor = content.slice(idx, idx + 50);
+        const forOfMatch = /^for\s*\(\s*const\s+\w+\s+of/.exec(afterFor);
+        if (forOfMatch) {
+            return { index: idx, match: forOfMatch[0] };
+        }
+    }
+    return null;
+}
+const BOUNDED_KEYWORDS = [
+    'batch',
+    'chunk',
+    'page',
+    'limit',
+    'take',
+    'skip',
+    'offset',
+    'slice',
+];
+function hasBoundedKeyword(content) {
+    const lowerContent = content.toLowerCase();
+    return BOUNDED_KEYWORDS.some((keyword) => lowerContent.includes(keyword));
+}
+function findUnboundedQueryCalls(content) {
+    logger.debug({
+        evt: 'fitness.checks.batch_operations.find_unbounded_query_calls',
+        msg: 'Finding unbounded query calls like findAll, getAll, findMany with empty args',
+    });
+    const results = [];
+    const methods = ['findAll', 'getAll', 'findMany'];
+    for (const method of methods) {
+        const pattern = `.${method}`;
+        let searchStart = 0;
+        while (searchStart < content.length) {
+            const idx = content.indexOf(pattern, searchStart);
+            if (idx === -1)
+                break;
+            const afterMethod = content.slice(idx + pattern.length, idx + pattern.length + 10);
+            const emptyArgsMatch = /^\s*\(\s*\)/.exec(afterMethod);
+            if (emptyArgsMatch) {
+                results.push({
+                    index: idx,
+                    methodName: method,
+                    match: pattern + emptyArgsMatch[0],
+                });
+            }
+            searchStart = idx + pattern.length;
+        }
+    }
+    return results;
+}
+/**
+ * Check: resilience/batch-operation-limits
+ *
+ * Detects batch operations that may process unbounded data:
+ * - Array operations on potentially large datasets without pagination
+ * - Async operations without concurrency limits
+ * - Database queries without LIMIT clauses
+ */
+export const batchOperationLimits = defineCheck({
+    id: 'c4d9b853-147e-4c29-9702-f392b1f51056',
+    slug: 'batch-operation-limits',
+    scope: { languages: ['typescript'], concerns: ['backend', 'frontend', 'cli'] },
+    contentFilter: 'strip-strings',
+    confidence: 'medium',
+    description: 'Detect batch operations that may process unbounded data',
+    longDescription: `**Purpose:** Prevents batch operations from processing arbitrarily large datasets without pagination or concurrency controls.
+
+**Detects:**
+- Unbounded query calls: \`.findAll()\`, \`.getAll()\`, \`.findMany()\` with empty parentheses
+- Async callbacks in \`.map(\` and \`.forEach(\` without nearby batching keywords
+- \`for (const x of\` loops without pagination indicators
+- Skips files containing bounded keywords: \`batch\`, \`chunk\`, \`page\`, \`limit\`, \`take\`, \`skip\`, \`offset\`, \`slice\`
+
+**Why it matters:** Processing unbounded datasets can exhaust memory and starve other operations of resources.
+
+**Scope:** General best practice. Analyzes each file individually via string matching.`,
+    tags: ['resilience', 'performance', 'memory'],
+    fileTypes: ['ts'],
+    analyze(content, filePath) {
+        if (isTestFile(filePath))
+            return [];
+        logger.debug({
+            evt: 'fitness.checks.batch_operations.analyze_unbounded_batch',
+            msg: 'Analyzing file for unbounded batch operations that may process excessive data',
+        });
+        const violations = [];
+        if (hasBoundedKeyword(content)) {
+            return violations;
+        }
+        const unboundedQueries = findUnboundedQueryCalls(content);
+        for (const query of unboundedQueries) {
+            const lineNumber = getLineNumber(content, query.index);
+            violations.push({
+                line: lineNumber,
+                column: 0,
+                message: `Unbounded ${query.methodName}() call may load excessive data`,
+                severity: 'warning',
+                suggestion: `Add pagination with limit/offset or use cursor-based pagination. Example: ${query.methodName}({ take: 100, skip: offset }) or use a cursor-based approach for large datasets.`,
+                match: query.match,
+                type: 'unbounded-query',
+                filePath,
+            });
+        }
+        for (const patternDef of UNBOUNDED_BATCH_PATTERNS) {
+            let searchStart = 0;
+            while (searchStart < content.length) {
+                const matchResult = findUnboundedBatchMatch(content, patternDef, searchStart);
+                if (!matchResult)
+                    break;
+                const start = Math.max(0, matchResult.index - 300);
+                const end = Math.min(content.length, matchResult.index + 300);
+                const context = content.slice(start, end);
+                if (!hasBoundedKeyword(context)) {
+                    const lineNumber = getLineNumber(content, matchResult.index);
+                    violations.push({
+                        line: lineNumber,
+                        column: 0,
+                        message: 'Async operation in loop without batching may exhaust resources',
+                        severity: 'warning',
+                        suggestion: 'Add batch processing or concurrency limits. Use chunk() to process in batches or pLimit() to limit concurrent operations.',
+                        match: matchResult.match,
+                        type: 'unbounded-async-loop',
+                        filePath,
+                    });
+                }
+                searchStart = matchResult.index + 1;
+            }
+        }
+        return violations;
+    },
+});
+const COLLECTION_TYPES = ['new Map(', 'new Set(', '= []', ': []'];
+/** Patterns indicating a collection is bounded by design (static registries, constants, DI tokens). */
+const BOUNDED_DECLARATION_PATTERNS = [
+    'static readonly',
+    'static ',
+    'readonly ',
+    'const ',
+    '= Object.freeze',
+    'as const',
+    // DI injection tokens
+    'INJECTION_TOKEN',
+    'InjectionToken',
+    'DI_TOKEN',
+    'Symbol(',
+    // Known bounded types
+    'WeakMap',
+    'WeakSet',
+];
+function isBoundedDeclaration(line) {
+    const trimmed = line.trim();
+    return BOUNDED_DECLARATION_PATTERNS.some((pattern) => trimmed.includes(pattern));
+}
+function findCollectionDeclarations(content) {
+    logger.debug({
+        evt: 'fitness.checks.batch_operations.find_collection_declarations',
+        msg: 'Finding private collection declarations that may grow without bounds',
+    });
+    const results = [];
+    const lines = content.split('\n');
+    let charIndex = 0;
+    for (const line of lines) {
+        const currentCharIndex = charIndex;
+        charIndex += line.length + 1; // +1 for newline
+        const trimmed = line.trim();
+        const isPrivateDeclaration = trimmed.startsWith('private');
+        const collectionType = isPrivateDeclaration
+            ? COLLECTION_TYPES.find((type) => line.includes(type))
+            : undefined;
+        if (collectionType) {
+            if (isBoundedDeclaration(line)) {
+                continue;
+            }
+            const matchStart = line.indexOf('private');
+            const lineEnd = line.includes(';') ? line.indexOf(';') + 1 : line.length;
+            results.push({
+                index: currentCharIndex + matchStart,
+                match: line.slice(matchStart, lineEnd).trim(),
+            });
+        }
+    }
+    return results;
+}
+const EVICTION_KEYWORDS = [
+    '.delete(',
+    '.clear(',
+    '.splice(',
+    '.shift(',
+    '.pop(',
+    '.length = 0',
+    '.length=0',
+    'maxsize',
+    'max_size',
+    'limit',
+    'evict',
+    'prune',
+    'cleanup',
+    'truncate',
+    'lru',
+    'overflow',
+    '@bounded-collection',
+];
+function hasEvictionKeyword(content) {
+    const lowerContent = content.toLowerCase();
+    return EVICTION_KEYWORDS.some((keyword) => lowerContent.includes(keyword.toLowerCase()));
+}
+/** String literals for pattern matching, not actual fs calls. */
+// @fitness-ignore-next-line fitness-check-standards -- These are string literals for pattern matching, not actual fs calls
+const FILE_READ_METHODS = ['readFileSync(', 'readFile('];
+const FILE_SIZE_CHECK_KEYWORDS = [
+    'statsync(',
+    'stat(',
+    '.size <',
+    '.size >',
+    '.size<',
+    '.size>',
+    'max_file_size',
+    'maxfilesize',
+];
+function hasFileSizeCheck(content) {
+    const lowerContent = content.toLowerCase();
+    return FILE_SIZE_CHECK_KEYWORDS.some((keyword) => lowerContent.includes(keyword));
+}
+/**
+ * A read whose result is handed directly to `JSON.parse(...)` is loading a
+ * structured document (config / manifest / internal IPC spec), not streaming
+ * an arbitrarily large blob — the same bounded-by-nature rationale as the
+ * `.json` entry in {@link KNOWN_SMALL_FILE_PATTERNS}. Matches `JSON.parse(`
+ * (whitespace-tolerant) directly preceding the read call.
+ */
+function isStructuredParseRead(code, readIndex) {
+    const before = code.slice(Math.max(0, readIndex - 16), readIndex);
+    return /JSON\s*\.\s*parse\s*\(\s*$/.test(before);
+}
+/**
+ * Markers indicating a read resolved against the module's OWN location.
+ */
+const SELF_RELATIVE_MARKERS = ['import.meta.url', '__dirname', '__filename', 'fileurltopath'];
+/**
+ * A read resolved against the module's own location (`import.meta.url`,
+ * `__dirname`, `__filename`, `fileURLToPath`) loads a committed, version-
+ * pinned asset shipped alongside the code (e.g. a vendored bundle), not
+ * untrusted external input — detected by a self-location marker in the
+ * look-back window.
+ */
+function isModuleSelfRelativeRead(codeContext) {
+    const lower = codeContext.toLowerCase();
+    return SELF_RELATIVE_MARKERS.some((marker) => lower.includes(marker));
+}
+/** Config files that are bounded by nature and don't need size validation. */
+const KNOWN_SMALL_FILE_PATTERNS = [
+    'package.json',
+    'tsconfig',
+    '.json',
+    '.yaml',
+    '.yml',
+    '.toml',
+    '.env',
+    '.config',
+    '.eslintrc',
+    '.prettierrc',
+];
+function isReadingKnownSmallFile(content, readIndex) {
+    const start = Math.max(0, readIndex - 100);
+    const end = Math.min(content.length, readIndex + 150);
+    const context = content.slice(start, end).toLowerCase();
+    return KNOWN_SMALL_FILE_PATTERNS.some((pattern) => context.includes(pattern));
+}
+function findFileReadCalls(content) {
+    logger.debug({
+        evt: 'fitness.checks.batch_operations.find_file_read_calls',
+        msg: 'Finding file read calls that may cause OOM without size validation',
+    });
+    const results = [];
+    for (const method of FILE_READ_METHODS) {
+        let searchStart = 0;
+        while (searchStart < content.length) {
+            const idx = content.indexOf(method, searchStart);
+            if (idx === -1)
+                break;
+            results.push({ index: idx, match: method });
+            searchStart = idx + method.length;
+        }
+    }
+    return results;
+}
+function hasGrowthMethod(content) {
+    const methods = ['.set(', '.push(', '.add('];
+    return methods.some((method) => content.includes(method));
+}
+/**
+ * Check: resilience/unbounded-memory
+ *
+ * Detects potential memory leaks and OOM risks:
+ * - Maps/Sets/Arrays in classes without eviction logic
+ * - File reads without prior size checks
+ * - Growing buffers without backpressure
+ */
+export const unboundedMemory = defineCheck({
+    id: '1f3c347d-3511-4157-87e0-050fd57c28b3',
+    slug: 'unbounded-memory',
+    description: 'Detect unbounded collections and file reads that may cause OOM',
+    longDescription: `**Purpose:** Identifies potential memory leaks from collections that grow without bounds and file reads without size validation.
+
+**Detects:**
+- Private class fields initialized with \`new Map(\`, \`new Set(\`, or empty arrays that have growth methods (\`.set\`, \`.push\`, \`.add\`) but no eviction keywords (\`.delete\`, \`.clear\`, \`maxsize\`, \`evict\`, \`prune\`, \`lru\`, etc.)
+- \`readFileSync(\` and \`readFile(\` calls without a preceding \`stat()\` / \`.size\` check within 500 characters
+- Skips \`static\`, \`readonly\`, \`const\`, \`WeakMap\`, and DI token declarations
+
+**Why it matters:** Unbounded in-memory collections cause gradual OOM in long-running services; reading files without size guards risks instant OOM on large inputs.
+
+**Scope:** General best practice. Analyzes each file individually via string matching.`,
+    scope: { languages: ['typescript'], concerns: [] },
+    tags: ['resilience', 'memory', 'performance'],
+    analyze(content, filePath) {
+        if (isTestFile(filePath))
+            return [];
+        // Fitness checks reference readFile/readFileSync as string literals, not actual calls
+        if (filePath.includes('/fitness/src/checks/'))
+            return [];
+        logger.debug({
+            evt: 'fitness.checks.batch_operations.analyze_file_operations',
+            msg: 'Analyzing file for unbounded memory usage and file read operations',
+        });
+        const violations = [];
+        // Strip string literals + block / single-line comments BEFORE scanning
+        // for `readFile(` matches. Doc prose like "// followed by readFile()
+        // below" or `@module readFile` JSDoc previously yielded false positives
+        // because the regex hit the comment text. Use the position-preserving
+        // variant so match indexes map back to the original source line.
+        //
+        // Eviction-keyword and file-size-check detection intentionally run on
+        // the ORIGINAL content so author-supplied hints in comments
+        // ("// bounded by upstream cap", "// max-size enforced upstream")
+        // continue to mark the file as bounded. Stripping them there would
+        // surface previously-passing files as new positives every time we
+        // tighten the regex.
+        const codeOnly = stripStringsAndCommentsPreservingPositions(content);
+        const collectionDeclarations = findCollectionDeclarations(codeOnly);
+        for (const declaration of collectionDeclarations) {
+            const hasEviction = hasEvictionKeyword(content);
+            const hasGrowth = hasGrowthMethod(content);
+            if (hasGrowth && !hasEviction) {
+                const lineNumber = getLineNumber(content, declaration.index);
+                violations.push({
+                    line: lineNumber,
+                    column: 0,
+                    message: 'Unbounded collection that grows without eviction',
+                    severity: 'warning',
+                    suggestion: 'Add maxSize limit and eviction logic (e.g., LRU). Use a shared cache utility for caching or implement periodic cleanup with .delete() or .clear().',
+                    match: declaration.match,
+                    type: 'unbounded-collection',
+                    filePath,
+                });
+            }
+        }
+        const fileReadCalls = findFileReadCalls(codeOnly);
+        for (const readCall of fileReadCalls) {
+            // Widen the look-back window to 1500 chars so a stat() guard placed
+            // up to ~30 lines earlier in the same function still counts.
+            // Real-world bundle/file readers interleave stat → branch → recover
+            // → readFile, easily putting the guard >500 chars upstream.
+            const start = Math.max(0, readCall.index - 1500);
+            const context = content.slice(start, readCall.index);
+            const codeContext = codeOnly.slice(start, readCall.index);
+            if (isReadingKnownSmallFile(content, readCall.index)) {
+                continue;
+            }
+            // Bounded-by-nature reads: a `JSON.parse(readFile(...))` structured-doc
+            // load, or a read of a module-self-relative committed asset.
+            if (isStructuredParseRead(codeOnly, readCall.index) ||
+                isModuleSelfRelativeRead(codeContext)) {
+                continue;
+            }
+            if (!hasFileSizeCheck(context)) {
+                const lineNumber = getLineNumber(content, readCall.index);
+                violations.push({
+                    line: lineNumber,
+                    column: 0,
+                    message: 'File read without size validation may cause OOM',
+                    severity: 'warning',
+                    // @fitness-ignore-next-line performance-anti-patterns -- 'await' appears in suggestion string literal, not actual await expression
+                    suggestion: 'Check fs.stat().size before reading to prevent OOM on large files. Example: const stats = await fs.stat(path); if (stats.size > MAX_FILE_SIZE) throw new Error("File too large");',
+                    match: readCall.match,
+                    type: 'unbounded-file-read',
+                    filePath,
+                });
+            }
+        }
+        return violations;
+    },
+});
+//# sourceMappingURL=batch-operations.js.map

package/dist/checks/resilience/batch-operations.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"batch-operations.js","sourceRoot":"","sources":["../../../src/checks/resilience/batch-operations.ts"],"names":[],"mappings":"AAAA,wFAAwF;AACxF,wGAAwG;AACxG;;GAEG;AAEH,OAAO,EAAE,MAAM,EAAE,MAAM,mBAAmB,CAAC;AAC3C,OAAO,EAAE,WAAW,EAAE,UAAU,EAAuB,aAAa,EAAE,MAAM,sBAAsB,CAAC;AACnG,OAAO,EAAE,0CAA0C,EAAE,MAAM,sBAAsB,CAAC;AAOlF,MAAM,wBAAwB,GAA4B;IACxD,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE;IAClC,EAAE,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,OAAO,EAAE;IACtC,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE;CAClC,CAAC;AAEF,SAAS,uBAAuB,CAC9B,OAAe,EACf,UAAiC,EACjC,UAAkB;IAElB,MAAM,CAAC,KAAK,CAAC;QACX,GAAG,EAAE,4DAA4D;QACjE,GAAG,EAAE,8DAA8D;KACpE,CAAC,CAAC;IACH,MAAM,GAAG,GAAG,OAAO,CAAC,OAAO,CAAC,UAAU,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC;IAC5D,IAAI,GAAG,KAAK,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IAE5B,IAAI,UAAU,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;QAChC,MAAM,YAAY,GAAG,OAAO,CAAC,KAAK,CAChC,GAAG,GAAG,UAAU,CAAC,OAAO,CAAC,MAAM,EAC/B,GAAG,GAAG,UAAU,CAAC,OAAO,CAAC,MAAM,GAAG,EAAE,CACrC,CAAC;QACF,MAAM,UAAU,GAAG,gBAAgB,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;QACvD,IAAI,UAAU,EAAE,CAAC;YACf,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,UAAU,CAAC,OAAO,GAAG,UAAU,CAAC,CAAC,CAAC,EAAE,CAAC;QACnE,CAAC;IACH,CAAC;SAAM,CAAC;QACN,MAAM,QAAQ,GAAG,OAAO,CAAC,KAAK,CAAC,GAAG,EAAE,GAAG,GAAG,EAAE,CAAC,CAAC;QAC9C,MAAM,UAAU,GAAG,8BAA8B,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QACjE,IAAI,UAAU,EAAE,CAAC;YACf,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,UAAU,CAAC,CAAC,CAAC,EAAE,CAAC;QAC9C,CAAC;IACH,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,gBAAgB,GAAG;IACvB,OAAO;IACP,OAAO;IACP,MAAM;IACN,OAAO;IACP,MAAM;IACN,MAAM;IACN,QAAQ;IACR,OAAO;CACC,CAAC;AAEX,SAAS,iBAAiB,CAAC,OAAe;IACxC,MAAM,YAAY,GAAG,OAAO,CAAC,WAAW,EAAE,CAAC;IAC3C,OAAO,gBAAgB,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,YAAY,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC;AAC5E,CAAC;AAED,SAAS,uBAAuB,CAC9B,OAAe;IAEf,MAAM,CAAC,KAAK,CAAC;QACX,GAAG,EAAE,4DAA4D;QACjE,GAAG,EAAE,8EAA8E;KACpF,CAAC,CAAC;IACH,MAAM,OAAO,GAA2D,EAAE,CAAC;IAC3E,MAAM,OAAO,GAAG,CAAC,SAAS,EAAE,QAAQ,EAAE,UAAU,CAAC,CAAC;IAElD,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;QAC7B,MAAM,OAAO,GAAG,IAAI,MAAM,EAAE,CAAC;QAC7B,IAAI,WAAW,GAAG,CAAC,CAAC;QAEpB,OAAO,WAAW,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC;YACpC,MAAM,GAAG,GAAG,OAAO,CAAC,OAAO,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;YAClD,IAAI,GAAG,KAAK,CAAC,CAAC;gBAAE,MAAM;YAEtB,MAAM,WAAW,GAAG,OAAO,CAAC,KAAK,CAAC,GAAG,GAAG,OAAO,CAAC,MAAM,EAAE,GAAG,GAAG,OAAO,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC;YACnF,MAAM,cAAc,GAAG,aAAa,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;YAEvD,IAAI,cAAc,EAAE,CAAC;gBACnB,OAAO,CAAC,IAAI,CAAC;oBACX,KAAK,EAAE,GAAG;oBACV,UAAU,EAAE,MAAM;oBAClB,KAAK,EAAE,OAAO,GAAG,cAAc,CAAC,CAAC,CAAC;iBACnC,CAAC,CAAC;YACL,CAAC;YAED,WAAW,GAAG,GAAG,GAAG,OAAO,CAAC,MAAM,CAAC;QACrC,CAAC;IACH,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAG,WAAW,CAAC;IAC9C,EAAE,EAAE,sCAAsC;IAC1C,IAAI,EAAE,wBAAwB;IAC9B,KAAK,EAAE,EAAE,SAAS,EAAE,CAAC,YAAY,CAAC,EAAE,QAAQ,EAAE,CAAC,SAAS,EAAE,UAAU,EAAE,KAAK,CAAC,EAAE;IAC9E,aAAa,EAAE,eAAe;IAE9B,UAAU,EAAE,QAAQ;IACpB,WAAW,EAAE,yDAAyD;IACtE,eAAe,EAAE;;;;;;;;;;uFAUoE;IACrF,IAAI,EAAE,CAAC,YAAY,EAAE,aAAa,EAAE,QAAQ,CAAC;IAC7C,SAAS,EAAE,CAAC,IAAI,CAAC;IAEjB,OAAO,CAAC,OAAe,EAAE,QAAgB;QACvC,IAAI,UAAU,CAAC,QAAQ,CAAC;YAAE,OAAO,EAAE,CAAC;QAEpC,MAAM,CAAC,KAAK,CAAC;YACX,GAAG,EAAE,yDAAyD;YAC9D,GAAG,EAAE,+EAA+E;SACrF,CAAC,CAAC;QACH,MAAM,UAAU,GAAqB,EAAE,CAAC;QAExC,IAAI,iBAAiB,CAAC,OAAO,CAAC,EAAE,CAAC;YAC/B,OAAO,UAAU,CAAC;QACpB,CAAC;QAED,MAAM,gBAAgB,GAAG,uBAAuB,CAAC,OAAO,CAAC,CAAC;QAC1D,KAAK,MAAM,KAAK,IAAI,gBAAgB,EAAE,CAAC;YACrC,MAAM,UAAU,GAAG,aAAa,CAAC,OAAO,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC;YACvD,UAAU,CAAC,IAAI,CAAC;gBACd,IAAI,EAAE,UAAU;gBAChB,MAAM,EAAE,CAAC;gBACT,OAAO,EAAE,aAAa,KAAK,CAAC,UAAU,iCAAiC;gBACvE,QAAQ,EAAE,SAAS;gBACnB,UAAU,EAAE,6EAA6E,KAAK,CAAC,UAAU,kFAAkF;gBAC3L,KAAK,EAAE,KAAK,CAAC,KAAK;gBAClB,IAAI,EAAE,iBAAiB;gBACvB,QAAQ;aACT,CAAC,CAAC;QACL,CAAC;QAED,KAAK,MAAM,UAAU,IAAI,wBAAwB,EAAE,CAAC;YAClD,IAAI,WAAW,GAAG,CAAC,CAAC;YACpB,OAAO,WAAW,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC;gBACpC,MAAM,WAAW,GAAG,uBAAuB,CAAC,OAAO,EAAE,UAAU,EAAE,WAAW,CAAC,CAAC;gBAC9E,IAAI,CAAC,WAAW;oBAAE,MAAM;gBAExB,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,WAAW,CAAC,KAAK,GAAG,GAAG,CAAC,CAAC;gBACnD,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,MAAM,EAAE,WAAW,CAAC,KAAK,GAAG,GAAG,CAAC,CAAC;gBAC9D,MAAM,OAAO,GAAG,OAAO,CAAC,KAAK,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;gBAE1C,IAAI,CAAC,iBAAiB,CAAC,OAAO,CAAC,EAAE,CAAC;oBAChC,MAAM,UAAU,GAAG,aAAa,CAAC,OAAO,EAAE,WAAW,CAAC,KAAK,CAAC,CAAC;oBAC7D,UAAU,CAAC,IAAI,CAAC;wBACd,IAAI,EAAE,UAAU;wBAChB,MAAM,EAAE,CAAC;wBACT,OAAO,EAAE,gEAAgE;wBACzE,QAAQ,EAAE,SAAS;wBACnB,UAAU,EACR,2HAA2H;wBAC7H,KAAK,EAAE,WAAW,CAAC,KAAK;wBACxB,IAAI,EAAE,sBAAsB;wBAC5B,QAAQ;qBACT,CAAC,CAAC;gBACL,CAAC;gBAED,WAAW,GAAG,WAAW,CAAC,KAAK,GAAG,CAAC,CAAC;YACtC,CAAC;QACH,CAAC;QAED,OAAO,UAAU,CAAC;IACpB,CAAC;CACF,CAAC,CAAC;AAEH,MAAM,gBAAgB,GAAG,CAAC,UAAU,EAAE,UAAU,EAAE,MAAM,EAAE,MAAM,CAAU,CAAC;AAE3E,uGAAuG;AACvG,MAAM,4BAA4B,GAAG;IACnC,iBAAiB;IACjB,SAAS;IACT,WAAW;IACX,QAAQ;IACR,iBAAiB;IACjB,UAAU;IACV,sBAAsB;IACtB,iBAAiB;IACjB,gBAAgB;IAChB,UAAU;IACV,SAAS;IACT,sBAAsB;IACtB,SAAS;IACT,SAAS;CACV,CAAC;AAEF,SAAS,oBAAoB,CAAC,IAAY;IACxC,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;IAC5B,OAAO,4BAA4B,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC;AACnF,CAAC;AAED,SAAS,0BAA0B,CAAC,OAAe;IACjD,MAAM,CAAC,KAAK,CAAC;QACX,GAAG,EAAE,8DAA8D;QACnE,GAAG,EAAE,sEAAsE;KAC5E,CAAC,CAAC;IACH,MAAM,OAAO,GAAuC,EAAE,CAAC;IACvD,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAClC,IAAI,SAAS,GAAG,CAAC,CAAC;IAElB,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,gBAAgB,GAAG,SAAS,CAAC;QACnC,SAAS,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,iBAAiB;QAE/C,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;QAC5B,MAAM,oBAAoB,GAAG,OAAO,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC;QAC3D,MAAM,cAAc,GAAG,oBAAoB;YACzC,CAAC,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;YACtD,CAAC,CAAC,SAAS,CAAC;QAEd,IAAI,cAAc,EAAE,CAAC;YACnB,IAAI,oBAAoB,CAAC,IAAI,CAAC,EAAE,CAAC;gBAC/B,SAAS;YACX,CAAC;YAED,MAAM,UAAU,GAAG,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;YAC3C,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC;YACzE,OAAO,CAAC,IAAI,CAAC;gBACX,KAAK,EAAE,gBAAgB,GAAG,UAAU;gBACpC,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC,IAAI,EAAE;aAC9C,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,MAAM,iBAAiB,GAAG;IACxB,UAAU;IACV,SAAS;IACT,UAAU;IACV,SAAS;IACT,OAAO;IACP,aAAa;IACb,WAAW;IACX,SAAS;IACT,UAAU;IACV,OAAO;IACP,OAAO;IACP,OAAO;IACP,SAAS;IACT,UAAU;IACV,KAAK;IACL,UAAU;IACV,qBAAqB;CACb,CAAC;AAEX,SAAS,kBAAkB,CAAC,OAAe;IACzC,MAAM,YAAY,GAAG,OAAO,CAAC,WAAW,EAAE,CAAC;IAC3C,OAAO,iBAAiB,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,YAAY,CAAC,QAAQ,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC;AAC3F,CAAC;AAED,iEAAiE;AACjE,2HAA2H;AAC3H,MAAM,iBAAiB,GAAG,CAAC,eAAe,EAAE,WAAW,CAAU,CAAC;AAElE,MAAM,wBAAwB,GAAG;IAC/B,WAAW;IACX,OAAO;IACP,SAAS;IACT,SAAS;IACT,QAAQ;IACR,QAAQ;IACR,eAAe;IACf,aAAa;CACL,CAAC;AAEX,SAAS,gBAAgB,CAAC,OAAe;IACvC,MAAM,YAAY,GAAG,OAAO,CAAC,WAAW,EAAE,CAAC;IAC3C,OAAO,wBAAwB,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,YAAY,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC;AACpF,CAAC;AAED;;;;;;GAMG;AACH,SAAS,qBAAqB,CAAC,IAAY,EAAE,SAAiB;IAC5D,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,SAAS,GAAG,EAAE,CAAC,EAAE,SAAS,CAAC,CAAC;IAClE,OAAO,4BAA4B,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;AACnD,CAAC;AAED;;GAEG;AACH,MAAM,qBAAqB,GAAG,CAAC,iBAAiB,EAAE,WAAW,EAAE,YAAY,EAAE,eAAe,CAAC,CAAC;AAE9F;;;;;;GAMG;AACH,SAAS,wBAAwB,CAAC,WAAmB;IACnD,MAAM,KAAK,GAAG,WAAW,CAAC,WAAW,EAAE,CAAC;IACxC,OAAO,qBAAqB,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;AACxE,CAAC;AAED,8EAA8E;AAC9E,MAAM,yBAAyB,GAAG;IAChC,cAAc;IACd,UAAU;IACV,OAAO;IACP,OAAO;IACP,MAAM;IACN,OAAO;IACP,MAAM;IACN,SAAS;IACT,WAAW;IACX,aAAa;CACd,CAAC;AAEF,SAAS,uBAAuB,CAAC,OAAe,EAAE,SAAiB;IACjE,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,SAAS,GAAG,GAAG,CAAC,CAAC;IAC3C,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,MAAM,EAAE,SAAS,GAAG,GAAG,CAAC,CAAC;IACtD,MAAM,OAAO,GAAG,OAAO,CAAC,KAAK,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,WAAW,EAAE,CAAC;IACxD,OAAO,yBAAyB,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC;AAChF,CAAC;AAED,SAAS,iBAAiB,CAAC,OAAe;IACxC,MAAM,CAAC,KAAK,CAAC;QACX,GAAG,EAAE,sDAAsD;QAC3D,GAAG,EAAE,oEAAoE;KAC1E,CAAC,CAAC;IACH,MAAM,OAAO,GAAuC,EAAE,CAAC;IAEvD,KAAK,MAAM,MAAM,IAAI,iBAAiB,EAAE,CAAC;QACvC,IAAI,WAAW,GAAG,CAAC,CAAC;QACpB,OAAO,WAAW,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC;YACpC,MAAM,GAAG,GAAG,OAAO,CAAC,OAAO,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;YACjD,IAAI,GAAG,KAAK,CAAC,CAAC;gBAAE,MAAM;YACtB,OAAO,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC;YAC5C,WAAW,GAAG,GAAG,GAAG,MAAM,CAAC,MAAM,CAAC;QACpC,CAAC;IACH,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,SAAS,eAAe,CAAC,OAAe;IACtC,MAAM,OAAO,GAAG,CAAC,OAAO,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC;IAC7C,OAAO,OAAO,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;AAC5D,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,eAAe,GAAG,WAAW,CAAC;IACzC,EAAE,EAAE,sCAAsC;IAC1C,IAAI,EAAE,kBAAkB;IACxB,WAAW,EAAE,gEAAgE;IAC7E,eAAe,EAAE;;;;;;;;;uFASoE;IACrF,KAAK,EAAE,EAAE,SAAS,EAAE,CAAC,YAAY,CAAC,EAAE,QAAQ,EAAE,EAAE,EAAE;IAClD,IAAI,EAAE,CAAC,YAAY,EAAE,QAAQ,EAAE,aAAa,CAAC;IAE7C,OAAO,CAAC,OAAe,EAAE,QAAgB;QACvC,IAAI,UAAU,CAAC,QAAQ,CAAC;YAAE,OAAO,EAAE,CAAC;QACpC,sFAAsF;QACtF,IAAI,QAAQ,CAAC,QAAQ,CAAC,sBAAsB,CAAC;YAAE,OAAO,EAAE,CAAC;QAEzD,MAAM,CAAC,KAAK,CAAC;YACX,GAAG,EAAE,yDAAyD;YAC9D,GAAG,EAAE,oEAAoE;SAC1E,CAAC,CAAC;QACH,MAAM,UAAU,GAAqB,EAAE,CAAC;QAExC,uEAAuE;QACvE,qEAAqE;QACrE,wEAAwE;QACxE,sEAAsE;QACtE,iEAAiE;QACjE,EAAE;QACF,sEAAsE;QACtE,4DAA4D;QAC5D,kEAAkE;QAClE,mEAAmE;QACnE,kEAAkE;QAClE,qBAAqB;QACrB,MAAM,QAAQ,GAAG,0CAA0C,CAAC,OAAO,CAAC,CAAC;QAErE,MAAM,sBAAsB,GAAG,0BAA0B,CAAC,QAAQ,CAAC,CAAC;QACpE,KAAK,MAAM,WAAW,IAAI,sBAAsB,EAAE,CAAC;YACjD,MAAM,WAAW,GAAG,kBAAkB,CAAC,OAAO,CAAC,CAAC;YAChD,MAAM,SAAS,GAAG,eAAe,CAAC,OAAO,CAAC,CAAC;YAE3C,IAAI,SAAS,IAAI,CAAC,WAAW,EAAE,CAAC;gBAC9B,MAAM,UAAU,GAAG,aAAa,CAAC,OAAO,EAAE,WAAW,CAAC,KAAK,CAAC,CAAC;gBAC7D,UAAU,CAAC,IAAI,CAAC;oBACd,IAAI,EAAE,UAAU;oBAChB,MAAM,EAAE,CAAC;oBACT,OAAO,EAAE,kDAAkD;oBAC3D,QAAQ,EAAE,SAAS;oBACnB,UAAU,EACR,oJAAoJ;oBACtJ,KAAK,EAAE,WAAW,CAAC,KAAK;oBACxB,IAAI,EAAE,sBAAsB;oBAC5B,QAAQ;iBACT,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAED,MAAM,aAAa,GAAG,iBAAiB,CAAC,QAAQ,CAAC,CAAC;QAClD,KAAK,MAAM,QAAQ,IAAI,aAAa,EAAE,CAAC;YACrC,oEAAoE;YACpE,6DAA6D;YAC7D,oEAAoE;YACpE,4DAA4D;YAC5D,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,QAAQ,CAAC,KAAK,GAAG,IAAI,CAAC,CAAC;YACjD,MAAM,OAAO,GAAG,OAAO,CAAC,KAAK,CAAC,KAAK,EAAE,QAAQ,CAAC,KAAK,CAAC,CAAC;YACrD,MAAM,WAAW,GAAG,QAAQ,CAAC,KAAK,CAAC,KAAK,EAAE,QAAQ,CAAC,KAAK,CAAC,CAAC;YAE1D,IAAI,uBAAuB,CAAC,OAAO,EAAE,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;gBACrD,SAAS;YACX,CAAC;YAED,wEAAwE;YACxE,6DAA6D;YAC7D,IACE,qBAAqB,CAAC,QAAQ,EAAE,QAAQ,CAAC,KAAK,CAAC;gBAC/C,wBAAwB,CAAC,WAAW,CAAC,EACrC,CAAC;gBACD,SAAS;YACX,CAAC;YAED,IAAI,CAAC,gBAAgB,CAAC,OAAO,CAAC,EAAE,CAAC;gBAC/B,MAAM,UAAU,GAAG,aAAa,CAAC,OAAO,EAAE,QAAQ,CAAC,KAAK,CAAC,CAAC;gBAC1D,UAAU,CAAC,IAAI,CAAC;oBACd,IAAI,EAAE,UAAU;oBAChB,MAAM,EAAE,CAAC;oBACT,OAAO,EAAE,iDAAiD;oBAC1D,QAAQ,EAAE,SAAS;oBACnB,mIAAmI;oBACnI,UAAU,EACR,mLAAmL;oBACrL,KAAK,EAAE,QAAQ,CAAC,KAAK;oBACrB,IAAI,EAAE,qBAAqB;oBAC3B,QAAQ;iBACT,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAED,OAAO,UAAU,CAAC;IACpB,CAAC;CACF,CAAC,CAAC"}

package/dist/checks/resilience/cache-ttl-validation.d.ts

@@ -0,0 +1,13 @@
+/**
+ * @fileoverview Cache TTL validation check
+ */
+/**
+ * Check: resilience/cache-ttl-validation
+ *
+ * Validates cache TTL values to prevent:
+ * - Thundering herd (TTL too short)
+ * - Stale data issues (TTL too long for sensitive data)
+ * - Financial data cached inappropriately
+ */
+export declare const cacheTtlValidation: import("@opensip-cli/fitness").Check;
+//# sourceMappingURL=cache-ttl-validation.d.ts.map

package/dist/checks/resilience/cache-ttl-validation.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cache-ttl-validation.d.ts","sourceRoot":"","sources":["../../../src/checks/resilience/cache-ttl-validation.ts"],"names":[],"mappings":"AAEA;;GAEG;AA8LH;;;;;;;GAOG;AACH,eAAO,MAAM,kBAAkB,sCAsE7B,CAAC"}