@opensip-cli/checks-universal 0.1.0

package/dist/checks/resilience/event-patterns.js

@@ -0,0 +1,232 @@
+// @fitness-ignore-file no-custom-event-emitter -- Fitness check definition contains EventEmitter pattern strings for detection, not actual usage
+// @fitness-ignore-file unused-config-options -- Config options reserved for future use or environment-specific
+/**
+ * @fileoverview Event handling resilience checks
+ */
+import { logger } from '@opensip-cli/core';
+import { defineCheck, isTestFile, getLineNumber } from '@opensip-cli/fitness';
+// =============================================================================
+// EVENT ARCHITECTURE
+// =============================================================================
+/**
+ * Patterns indicating event handlers.
+ * Using bounded quantifiers to avoid regex backtracking.
+ */
+const EVENT_HANDLER_PATTERNS = [
+    /@EventHandler/,
+    /EventHandler/i,
+    /\.subscribe\s{0,10}\(/,
+    /\.addListener\s{0,10}\(/,
+];
+/**
+ * Patterns indicating proper event handling
+ */
+const PROPER_EVENT_PATTERNS = [
+    /eventBus/i,
+    /eventEmitter/i,
+    /infrastructure\/events/,
+    /EventPublisher/i,
+];
+/**
+ * Patterns indicating idempotency handling.
+ *
+ * Includes domain-specific delivery-id keys used by upstream dispatchers
+ * (GitHub webhooks: `deliveryId`; AWS SQS: `messageId`; Stripe: `eventId`)
+ * — when a handler references one of these, the upstream framework is
+ * deduplicating on it before invoking the handler.
+ */
+const IDEMPOTENCY_PATTERNS = [
+    /idempotency/i,
+    /dedup/i,
+    /idempotentId/i,
+    /messageId/i,
+    /deliveryId/i,
+    /eventId/i,
+    /processedEvents/i,
+    /alreadyProcessed/i,
+];
+/**
+ * Patterns indicating state-changing operations that need idempotency
+ */
+const STATE_CHANGING_PATTERNS = [
+    /\.save\s*\(/,
+    /\.update\s*\(/,
+    /\.create\s*\(/,
+    /\.insert\s*\(/,
+    /\.delete\s*\(/,
+    /transaction/i,
+];
+/**
+ * Check if content has direct EventEmitter usage.
+ * @param line - Line to check.
+ * @returns True if line has direct EventEmitter pattern.
+ */
+function hasDirectEventEmitterPattern(line) {
+    logger.debug({
+        evt: 'fitness.checks.event_patterns.has_direct_event_emitter_pattern',
+        msg: 'Checking line for direct EventEmitter pattern',
+    });
+    // Check for "new EventEmitter("
+    if (line.includes('new EventEmitter(') || line.includes('new EventEmitter (')) {
+        return true;
+    }
+    // Check for ".emit('event'" or '.emit("event"'
+    const emitIdx = line.indexOf('.emit(');
+    if (emitIdx === -1) {
+        return false;
+    }
+    const afterEmit = line.slice(emitIdx + 6).trimStart();
+    return afterEmit.startsWith("'") || afterEmit.startsWith('"');
+}
+/**
+ * Finds the first event handler pattern match in content.
+ */
+function findFirstEventHandlerMatch(content) {
+    logger.debug({
+        evt: 'fitness.checks.event_patterns.find_first_event_handler_match',
+        msg: 'Searching for first event handler pattern match',
+    });
+    for (const pattern of EVENT_HANDLER_PATTERNS) {
+        pattern.lastIndex = 0;
+        const match = pattern.exec(content);
+        if (match) {
+            return match;
+        }
+    }
+    return null;
+}
+/**
+ * Check: resilience/event-architecture
+ *
+ * Validates event handling follows architectural patterns:
+ * - Using canonical event bus from infrastructure
+ * - Not creating custom EventEmitters in domain code
+ * - Events have proper schemas
+ */
+export const eventArchitecture = defineCheck({
+    id: 'd187e10a-fca8-46e5-9ce7-23a5175ba446',
+    slug: 'event-architecture',
+    disabled: true,
+    scope: { languages: ['typescript'], concerns: ['backend', 'server'] },
+    contentFilter: 'strip-strings',
+    confidence: 'medium',
+    description: 'Validate event handling follows architectural patterns',
+    longDescription: `**Purpose:** Enforces use of the canonical infrastructure EventBus instead of direct \`EventEmitter\` usage in domain code.
+
+**Detects:**
+- \`new EventEmitter(\` instantiation
+- \`.emit(\` calls followed by a string literal (quoted event name)
+- Skips files that reference proper infrastructure patterns: \`eventBus\`, \`eventEmitter\` (as import), \`infrastructure/events\`, \`EventPublisher\`
+
+**Why it matters:** Direct EventEmitter usage bypasses schema validation, observability, and cross-service event routing provided by the infrastructure event bus.
+
+**Scope:** Codebase-specific convention. Analyzes each file individually via string matching.`,
+    tags: ['resilience', 'architecture', 'events'],
+    fileTypes: ['ts'],
+    analyze(content, filePath) {
+        logger.debug({
+            evt: 'fitness.checks.event_patterns.analyze_event_architecture',
+            msg: 'Analyzing file for event architecture pattern violations',
+        });
+        const violations = [];
+        // Skip files that don't have event patterns
+        if (!content.includes('emit') && !content.includes('EventEmitter')) {
+            return violations;
+        }
+        // Skip if file uses proper infrastructure patterns
+        const usesProperPatterns = PROPER_EVENT_PATTERNS.some((p) => p.test(content));
+        if (usesProperPatterns) {
+            return violations;
+        }
+        // Check each line for direct EventEmitter usage
+        const lines = content.split('\n');
+        for (const [i, line] of lines.entries()) {
+            if (!line || !hasDirectEventEmitterPattern(line)) {
+                continue;
+            }
+            const lineNumber = i + 1;
+            violations.push({
+                line: lineNumber,
+                column: 0,
+                message: 'Direct EventEmitter usage bypasses infrastructure event bus',
+                severity: 'warning',
+                suggestion: 'Use a centralized event bus instead. Example: eventBus.publish("event.name", payload) for consistent event handling, schema validation, and observability.',
+                match: line.trim().slice(0, 50),
+                type: 'direct-event-emitter',
+                filePath,
+            });
+        }
+        return violations;
+    },
+});
+// =============================================================================
+// EVENT HANDLER IDEMPOTENCY
+// =============================================================================
+/**
+ * Check: resilience/event-handler-idempotency
+ *
+ * Validates event handlers implement idempotency for at-least-once delivery:
+ * - Checking for duplicate message processing
+ * - Using idempotent operations
+ */
+export const eventHandlerIdempotency = defineCheck({
+    id: '78c29f34-4274-4713-b51e-3fb1694dccdb',
+    slug: 'event-handler-idempotency',
+    scope: { languages: ['typescript'], concerns: ['backend', 'server'] },
+    description: 'Validate event handlers implement idempotency',
+    longDescription: `**Purpose:** Ensures event handlers that perform state-changing operations include idempotency safeguards for at-least-once delivery.
+
+**Detects:**
+- Files containing event handler indicators (\`@EventHandler\`, \`.subscribe(\`, \`.addListener(\`) with state-changing operations (\`.save(\`, \`.update(\`, \`.create(\`, \`.insert(\`, \`.delete(\`, \`transaction\`)
+- Flags when no idempotency patterns are present: \`idempotency\`, \`dedup\`, \`idempotentId\`, \`messageId\`, \`processedEvents\`, \`alreadyProcessed\`
+
+**Why it matters:** Without idempotency checks, duplicate event delivery causes repeated writes, double charges, or corrupted state.
+
+**Scope:** General best practice. Analyzes each file individually via regex.`,
+    tags: ['resilience', 'events', 'idempotency'],
+    analyze(content, filePath) {
+        logger.debug({
+            evt: 'fitness.checks.event_patterns.analyze_event_handler_idempotency',
+            msg: 'Analyzing file for event handler idempotency',
+        });
+        const violations = [];
+        // Test files routinely construct event-handler fixtures inline to
+        // exercise checks like this one; the idempotency contract applies
+        // to production handlers, not test scaffolding.
+        if (isTestFile(filePath))
+            return violations;
+        // Check if this is an event handler file
+        const isEventHandler = EVENT_HANDLER_PATTERNS.some((p) => p.test(content));
+        if (!isEventHandler) {
+            return violations;
+        }
+        // Check if file has state-changing operations
+        const hasStateChanges = STATE_CHANGING_PATTERNS.some((p) => p.test(content));
+        if (!hasStateChanges) {
+            return violations;
+        }
+        // Check for idempotency handling
+        const hasIdempotency = IDEMPOTENCY_PATTERNS.some((p) => p.test(content));
+        if (hasIdempotency) {
+            return violations;
+        }
+        // Find the handler definition for line number
+        const match = findFirstEventHandlerMatch(content);
+        if (!match) {
+            return violations;
+        }
+        const lineNumber = getLineNumber(content, match.index);
+        violations.push({
+            line: lineNumber,
+            column: 0,
+            message: 'Event handler with state changes may not be idempotent',
+            severity: 'warning',
+            suggestion: 'Add idempotency check (deduplication) for at-least-once delivery. Use event.idempotencyKey or event.messageId to track processed events and skip duplicates.',
+            match: match[0],
+            type: 'non-idempotent-handler',
+            filePath,
+        });
+        return violations;
+    },
+});
+//# sourceMappingURL=event-patterns.js.map

package/dist/checks/resilience/event-patterns.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"event-patterns.js","sourceRoot":"","sources":["../../../src/checks/resilience/event-patterns.ts"],"names":[],"mappings":"AAAA,iJAAiJ;AACjJ,+GAA+G;AAC/G;;GAEG;AAEH,OAAO,EAAE,MAAM,EAAE,MAAM,mBAAmB,CAAC;AAC3C,OAAO,EAAE,WAAW,EAAE,UAAU,EAAuB,aAAa,EAAE,MAAM,sBAAsB,CAAC;AAEnG,gFAAgF;AAChF,qBAAqB;AACrB,gFAAgF;AAEhF;;;GAGG;AACH,MAAM,sBAAsB,GAAG;IAC7B,eAAe;IACf,eAAe;IACf,uBAAuB;IACvB,yBAAyB;CAC1B,CAAC;AAEF;;GAEG;AACH,MAAM,qBAAqB,GAAG;IAC5B,WAAW;IACX,eAAe;IACf,wBAAwB;IACxB,iBAAiB;CAClB,CAAC;AAEF;;;;;;;GAOG;AACH,MAAM,oBAAoB,GAAG;IAC3B,cAAc;IACd,QAAQ;IACR,eAAe;IACf,YAAY;IACZ,aAAa;IACb,UAAU;IACV,kBAAkB;IAClB,mBAAmB;CACpB,CAAC;AAEF;;GAEG;AACH,MAAM,uBAAuB,GAAG;IAC9B,aAAa;IACb,eAAe;IACf,eAAe;IACf,eAAe;IACf,eAAe;IACf,cAAc;CACf,CAAC;AAEF;;;;GAIG;AACH,SAAS,4BAA4B,CAAC,IAAY;IAChD,MAAM,CAAC,KAAK,CAAC;QACX,GAAG,EAAE,gEAAgE;QACrE,GAAG,EAAE,+CAA+C;KACrD,CAAC,CAAC;IACH,gCAAgC;IAChC,IAAI,IAAI,CAAC,QAAQ,CAAC,mBAAmB,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,oBAAoB,CAAC,EAAE,CAAC;QAC9E,OAAO,IAAI,CAAC;IACd,CAAC;IAED,+CAA+C;IAC/C,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;IACvC,IAAI,OAAO,KAAK,CAAC,CAAC,EAAE,CAAC;QACnB,OAAO,KAAK,CAAC;IACf,CAAC;IACD,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,GAAG,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC;IACtD,OAAO,SAAS,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,SAAS,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;AAChE,CAAC;AAED;;GAEG;AACH,SAAS,0BAA0B,CAAC,OAAe;IACjD,MAAM,CAAC,KAAK,CAAC;QACX,GAAG,EAAE,8DAA8D;QACnE,GAAG,EAAE,iDAAiD;KACvD,CAAC,CAAC;IACH,KAAK,MAAM,OAAO,IAAI,sBAAsB,EAAE,CAAC;QAC7C,OAAO,CAAC,SAAS,GAAG,CAAC,CAAC;QACtB,MAAM,KAAK,GAAG,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACpC,IAAI,KAAK,EAAE,CAAC;YACV,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAG,WAAW,CAAC;IAC3C,EAAE,EAAE,sCAAsC;IAC1C,IAAI,EAAE,oBAAoB;IAC1B,QAAQ,EAAE,IAAI;IACd,KAAK,EAAE,EAAE,SAAS,EAAE,CAAC,YAAY,CAAC,EAAE,QAAQ,EAAE,CAAC,SAAS,EAAE,QAAQ,CAAC,EAAE;IACrE,aAAa,EAAE,eAAe;IAE9B,UAAU,EAAE,QAAQ;IACpB,WAAW,EAAE,wDAAwD;IACrE,eAAe,EAAE;;;;;;;;;8FAS2E;IAC5F,IAAI,EAAE,CAAC,YAAY,EAAE,cAAc,EAAE,QAAQ,CAAC;IAC9C,SAAS,EAAE,CAAC,IAAI,CAAC;IAEjB,OAAO,CAAC,OAAe,EAAE,QAAgB;QACvC,MAAM,CAAC,KAAK,CAAC;YACX,GAAG,EAAE,0DAA0D;YAC/D,GAAG,EAAE,0DAA0D;SAChE,CAAC,CAAC;QACH,MAAM,UAAU,GAAqB,EAAE,CAAC;QAExC,4CAA4C;QAC5C,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAC,EAAE,CAAC;YACnE,OAAO,UAAU,CAAC;QACpB,CAAC;QAED,mDAAmD;QACnD,MAAM,kBAAkB,GAAG,qBAAqB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC;QAC9E,IAAI,kBAAkB,EAAE,CAAC;YACvB,OAAO,UAAU,CAAC;QACpB,CAAC;QAED,gDAAgD;QAChD,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAClC,KAAK,MAAM,CAAC,CAAC,EAAE,IAAI,CAAC,IAAI,KAAK,CAAC,OAAO,EAAE,EAAE,CAAC;YACxC,IAAI,CAAC,IAAI,IAAI,CAAC,4BAA4B,CAAC,IAAI,CAAC,EAAE,CAAC;gBACjD,SAAS;YACX,CAAC;YAED,MAAM,UAAU,GAAG,CAAC,GAAG,CAAC,CAAC;YACzB,UAAU,CAAC,IAAI,CAAC;gBACd,IAAI,EAAE,UAAU;gBAChB,MAAM,EAAE,CAAC;gBACT,OAAO,EAAE,6DAA6D;gBACtE,QAAQ,EAAE,SAAS;gBACnB,UAAU,EACR,4JAA4J;gBAC9J,KAAK,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC;gBAC/B,IAAI,EAAE,sBAAsB;gBAC5B,QAAQ;aACT,CAAC,CAAC;QACL,CAAC;QAED,OAAO,UAAU,CAAC;IACpB,CAAC;CACF,CAAC,CAAC;AAEH,gFAAgF;AAChF,4BAA4B;AAC5B,gFAAgF;AAEhF;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAAG,WAAW,CAAC;IACjD,EAAE,EAAE,sCAAsC;IAC1C,IAAI,EAAE,2BAA2B;IACjC,KAAK,EAAE,EAAE,SAAS,EAAE,CAAC,YAAY,CAAC,EAAE,QAAQ,EAAE,CAAC,SAAS,EAAE,QAAQ,CAAC,EAAE;IACrE,WAAW,EAAE,+CAA+C;IAC5D,eAAe,EAAE;;;;;;;;6EAQ0D;IAC3E,IAAI,EAAE,CAAC,YAAY,EAAE,QAAQ,EAAE,aAAa,CAAC;IAE7C,OAAO,CAAC,OAAe,EAAE,QAAgB;QACvC,MAAM,CAAC,KAAK,CAAC;YACX,GAAG,EAAE,iEAAiE;YACtE,GAAG,EAAE,8CAA8C;SACpD,CAAC,CAAC;QACH,MAAM,UAAU,GAAqB,EAAE,CAAC;QAExC,kEAAkE;QAClE,kEAAkE;QAClE,gDAAgD;QAChD,IAAI,UAAU,CAAC,QAAQ,CAAC;YAAE,OAAO,UAAU,CAAC;QAE5C,yCAAyC;QACzC,MAAM,cAAc,GAAG,sBAAsB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC;QAC3E,IAAI,CAAC,cAAc,EAAE,CAAC;YACpB,OAAO,UAAU,CAAC;QACpB,CAAC;QAED,8CAA8C;QAC9C,MAAM,eAAe,GAAG,uBAAuB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC;QAC7E,IAAI,CAAC,eAAe,EAAE,CAAC;YACrB,OAAO,UAAU,CAAC;QACpB,CAAC;QAED,iCAAiC;QACjC,MAAM,cAAc,GAAG,oBAAoB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC;QACzE,IAAI,cAAc,EAAE,CAAC;YACnB,OAAO,UAAU,CAAC;QACpB,CAAC;QAED,8CAA8C;QAC9C,MAAM,KAAK,GAAG,0BAA0B,CAAC,OAAO,CAAC,CAAC;QAClD,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,OAAO,UAAU,CAAC;QACpB,CAAC;QAED,MAAM,UAAU,GAAG,aAAa,CAAC,OAAO,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC;QACvD,UAAU,CAAC,IAAI,CAAC;YACd,IAAI,EAAE,UAAU;YAChB,MAAM,EAAE,CAAC;YACT,OAAO,EAAE,wDAAwD;YACjE,QAAQ,EAAE,SAAS;YACnB,UAAU,EACR,8JAA8J;YAChK,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC;YACf,IAAI,EAAE,wBAAwB;YAC9B,QAAQ;SACT,CAAC,CAAC;QAEH,OAAO,UAAU,CAAC;IACpB,CAAC;CACF,CAAC,CAAC"}

package/dist/checks/resilience/exit-code-correctness.d.ts

@@ -0,0 +1,12 @@
+/**
+ * @fileoverview Detects error branches that silently exit with success (exit 0)
+ */
+/**
+ * Check: resilience/exit-code-correctness
+ *
+ * Detects catch blocks that log errors but silently allow execution to continue
+ * (masking failures), especially in CLI command handlers where this means
+ * exiting with code 0 despite a failure.
+ */
+export declare const exitCodeCorrectness: import("@opensip-cli/fitness").Check;
+//# sourceMappingURL=exit-code-correctness.d.ts.map

package/dist/checks/resilience/exit-code-correctness.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"exit-code-correctness.d.ts","sourceRoot":"","sources":["../../../src/checks/resilience/exit-code-correctness.ts"],"names":[],"mappings":"AAEA;;GAEG;AAuCH;;;;;;GAMG;AACH,eAAO,MAAM,mBAAmB,sCA8E9B,CAAC"}

package/dist/checks/resilience/exit-code-correctness.js

@@ -0,0 +1,107 @@
+// @fitness-ignore-file project-readme-existence -- internal module, not a package root
+// @fitness-ignore-file fitness-check-coverage -- check implementation with framework-managed coverage
+/**
+ * @fileoverview Detects error branches that silently exit with success (exit 0)
+ */
+import { defineCheck, isCommentLine, getLineNumber, } from '@opensip-cli/fitness';
+/**
+ * Pattern for catch blocks that log errors but don't propagate failure.
+ * Detects: catch blocks containing logger.error/console.error but no throw/process.exit(1)/return err
+ */
+const CATCH_BLOCK_PATTERN = /\bcatch\s*\([^)]+\)\s*\{([^{}]*(?:\{[^{}]*\}[^{}]*)*)}/g;
+/** Patterns indicating error is logged */
+const ERROR_LOG_PATTERNS = [/logger\.error/, /logger\.fatal/, /console\.error/];
+/** Patterns indicating error is propagated or recorded for the caller */
+const ERROR_PROPAGATION_PATTERNS = [
+    /\bthrow\b/,
+    /process\.exit\s*\(\s*1\s*\)/,
+    /process\.exitCode\s*=\s*1/,
+    /return\s+err\s*\(/,
+    /return\s+Result\.err/,
+    /return\s+\{\s*ok\s*:\s*false/,
+    /return\s+undefined/, // Signal failure to caller via sentinel return
+    /\.errors\.push\(/, // Error aggregation pattern — error is collected for batch reporting
+    /\.push\(\s*`/, // Template literal push to errors array
+    // CLI dispatcher pattern: tools set a non-success exit code on the
+    // shared context instead of calling process.exit() directly. Two forms:
+    // a named exit-code constant (…ERROR / …FAILURE / …FAIL) …
+    /setExitCode\s*\([^)]*(?:ERROR|FAILURE|FAIL)\b/,
+    // … or a numeric non-zero literal (`setExitCode(1)`, `cli.setExitCode(2)`).
+    // A zero literal is intentionally NOT matched — that would mask the very
+    // "log error then exit 0" pattern this check exists to catch.
+    /setExitCode\s*\(\s*[1-9]/,
+];
+/**
+ * Check: resilience/exit-code-correctness
+ *
+ * Detects catch blocks that log errors but silently allow execution to continue
+ * (masking failures), especially in CLI command handlers where this means
+ * exiting with code 0 despite a failure.
+ */
+export const exitCodeCorrectness = defineCheck({
+    id: 'c5007f87-9c72-49be-861a-a419cac1006f',
+    slug: 'exit-code-correctness',
+    scope: { languages: ['typescript'], concerns: ['backend', 'frontend', 'cli'] },
+    contentFilter: 'strip-strings',
+    confidence: 'medium',
+    description: 'Detect error branches that mask failures with silent success exit',
+    longDescription: `**Purpose:** Prevents error branches from silently masking failures by logging the error but allowing execution to continue with an implicit success exit code.
+
+**Detects:**
+- \`catch\` blocks in CLI command files that log errors (\`logger.error\`, \`console.error\`) but do not propagate the failure (via \`throw\`, \`process.exit(1)\`, or \`Result.err\`)
+- This pattern causes CLI commands to exit 0 despite encountering errors, making failures invisible to scripts and CI pipelines
+
+**Why it matters:** Silent failure masking means CI pipelines, scripts, and orchestrators cannot detect that an operation failed, leading to cascading silent corruption.
+
+**Scope:** CLI and command handler files. Analyzes each file individually via regex.`,
+    tags: ['resilience', 'cli', 'error-handling'],
+    fileTypes: ['ts'],
+    analyze(content, filePath) {
+        const violations = [];
+        // Target CLI and command handler files
+        if (!filePath.includes('/cli/') &&
+            !filePath.includes('/commands/') &&
+            !filePath.includes('/bin/')) {
+            return violations;
+        }
+        // Skip test files
+        if (filePath.includes('.test.') ||
+            filePath.includes('.spec.') ||
+            filePath.includes('__tests__')) {
+            return violations;
+        }
+        // Quick check
+        if (!content.includes('catch')) {
+            return violations;
+        }
+        CATCH_BLOCK_PATTERN.lastIndex = 0;
+        let match;
+        while ((match = CATCH_BLOCK_PATTERN.exec(content)) !== null) {
+            const catchBody = match[1] ?? '';
+            // Only flag if it logs an error
+            const logsError = ERROR_LOG_PATTERNS.some((p) => p.test(catchBody));
+            if (!logsError)
+                continue;
+            // Check if error is actually propagated
+            const propagatesError = ERROR_PROPAGATION_PATTERNS.some((p) => p.test(catchBody));
+            if (propagatesError)
+                continue;
+            const lineNumber = getLineNumber(content, match.index);
+            const line = content.split('\n')[lineNumber - 1] ?? '';
+            if (isCommentLine(line))
+                continue;
+            violations.push({
+                line: lineNumber,
+                column: 0,
+                message: 'Catch block logs error but does not propagate failure — process will exit 0',
+                severity: 'warning',
+                suggestion: 'Re-throw the error, call process.exit(1), or return a Result.err() to ensure the failure is visible to callers and CI pipelines.',
+                match: match[0].slice(0, 60),
+                type: 'silent-failure-exit',
+                filePath,
+            });
+        }
+        return violations;
+    },
+});
+//# sourceMappingURL=exit-code-correctness.js.map

package/dist/checks/resilience/exit-code-correctness.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"exit-code-correctness.js","sourceRoot":"","sources":["../../../src/checks/resilience/exit-code-correctness.ts"],"names":[],"mappings":"AAAA,uFAAuF;AACvF,sGAAsG;AACtG;;GAEG;AAEH,OAAO,EACL,WAAW,EACX,aAAa,EAEb,aAAa,GACd,MAAM,sBAAsB,CAAC;AAE9B;;;GAGG;AACH,MAAM,mBAAmB,GAAG,yDAAyD,CAAC;AAEtF,0CAA0C;AAC1C,MAAM,kBAAkB,GAAG,CAAC,eAAe,EAAE,eAAe,EAAE,gBAAgB,CAAC,CAAC;AAEhF,yEAAyE;AACzE,MAAM,0BAA0B,GAAG;IACjC,WAAW;IACX,6BAA6B;IAC7B,2BAA2B;IAC3B,mBAAmB;IACnB,sBAAsB;IACtB,8BAA8B;IAC9B,oBAAoB,EAAE,+CAA+C;IACrE,kBAAkB,EAAE,qEAAqE;IACzF,cAAc,EAAE,wCAAwC;IACxD,mEAAmE;IACnE,wEAAwE;IACxE,2DAA2D;IAC3D,+CAA+C;IAC/C,4EAA4E;IAC5E,yEAAyE;IACzE,8DAA8D;IAC9D,0BAA0B;CAC3B,CAAC;AAEF;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAAG,WAAW,CAAC;IAC7C,EAAE,EAAE,sCAAsC;IAC1C,IAAI,EAAE,uBAAuB;IAC7B,KAAK,EAAE,EAAE,SAAS,EAAE,CAAC,YAAY,CAAC,EAAE,QAAQ,EAAE,CAAC,SAAS,EAAE,UAAU,EAAE,KAAK,CAAC,EAAE;IAC9E,aAAa,EAAE,eAAe;IAE9B,UAAU,EAAE,QAAQ;IACpB,WAAW,EAAE,mEAAmE;IAChF,eAAe,EAAE;;;;;;;;qFAQkE;IACnF,IAAI,EAAE,CAAC,YAAY,EAAE,KAAK,EAAE,gBAAgB,CAAC;IAC7C,SAAS,EAAE,CAAC,IAAI,CAAC;IAEjB,OAAO,CAAC,OAAe,EAAE,QAAgB;QACvC,MAAM,UAAU,GAAqB,EAAE,CAAC;QAExC,uCAAuC;QACvC,IACE,CAAC,QAAQ,CAAC,QAAQ,CAAC,OAAO,CAAC;YAC3B,CAAC,QAAQ,CAAC,QAAQ,CAAC,YAAY,CAAC;YAChC,CAAC,QAAQ,CAAC,QAAQ,CAAC,OAAO,CAAC,EAC3B,CAAC;YACD,OAAO,UAAU,CAAC;QACpB,CAAC;QAED,kBAAkB;QAClB,IACE,QAAQ,CAAC,QAAQ,CAAC,QAAQ,CAAC;YAC3B,QAAQ,CAAC,QAAQ,CAAC,QAAQ,CAAC;YAC3B,QAAQ,CAAC,QAAQ,CAAC,WAAW,CAAC,EAC9B,CAAC;YACD,OAAO,UAAU,CAAC;QACpB,CAAC;QAED,cAAc;QACd,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;YAC/B,OAAO,UAAU,CAAC;QACpB,CAAC;QAED,mBAAmB,CAAC,SAAS,GAAG,CAAC,CAAC;QAClC,IAAI,KAAK,CAAC;QACV,OAAO,CAAC,KAAK,GAAG,mBAAmB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;YAC5D,MAAM,SAAS,GAAG,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;YAEjC,gCAAgC;YAChC,MAAM,SAAS,GAAG,kBAAkB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC;YACpE,IAAI,CAAC,SAAS;gBAAE,SAAS;YAEzB,wCAAwC;YACxC,MAAM,eAAe,GAAG,0BAA0B,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC;YAClF,IAAI,eAAe;gBAAE,SAAS;YAE9B,MAAM,UAAU,GAAG,aAAa,CAAC,OAAO,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC;YACvD,MAAM,IAAI,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,UAAU,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;YACvD,IAAI,aAAa,CAAC,IAAI,CAAC;gBAAE,SAAS;YAElC,UAAU,CAAC,IAAI,CAAC;gBACd,IAAI,EAAE,UAAU;gBAChB,MAAM,EAAE,CAAC;gBACT,OAAO,EAAE,6EAA6E;gBACtF,QAAQ,EAAE,SAAS;gBACnB,UAAU,EACR,kIAAkI;gBACpI,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC;gBAC5B,IAAI,EAAE,qBAAqB;gBAC3B,QAAQ;aACT,CAAC,CAAC;QACL,CAAC;QAED,OAAO,UAAU,CAAC;IACpB,CAAC;CACF,CAAC,CAAC"}

package/dist/checks/resilience/index.d.ts

@@ -0,0 +1,18 @@
+export * from './batch-operations.js';
+export * from './cache-ttl-validation.js';
+export * from './catch-clause-safety.js';
+export * from './dangerous-config-defaults.js';
+export * from './error-code-registration.js';
+export * from './event-patterns.js';
+export * from './exit-code-correctness.js';
+export * from './no-hardcoded-timeouts.js';
+export * from './no-process-exit-in-finally.js';
+export * from './readline-cleanup.js';
+export * from './recovery-patterns.js';
+export * from './reentrancy-guard.js';
+export * from './retry-config-validation.js';
+export * from './sentry/index.js';
+export * from './service-patterns.js';
+export * from './timer-lifecycle.js';
+export * from './transaction-patterns.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/checks/resilience/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/checks/resilience/index.ts"],"names":[],"mappings":"AAAA,cAAc,uBAAuB,CAAC;AACtC,cAAc,2BAA2B,CAAC;AAC1C,cAAc,0BAA0B,CAAC;AACzC,cAAc,gCAAgC,CAAC;AAC/C,cAAc,8BAA8B,CAAC;AAC7C,cAAc,qBAAqB,CAAC;AACpC,cAAc,4BAA4B,CAAC;AAC3C,cAAc,4BAA4B,CAAC;AAC3C,cAAc,iCAAiC,CAAC;AAChD,cAAc,uBAAuB,CAAC;AACtC,cAAc,wBAAwB,CAAC;AACvC,cAAc,uBAAuB,CAAC;AACtC,cAAc,8BAA8B,CAAC;AAC7C,cAAc,mBAAmB,CAAC;AAClC,cAAc,uBAAuB,CAAC;AACtC,cAAc,sBAAsB,CAAC;AACrC,cAAc,2BAA2B,CAAC"}

package/dist/checks/resilience/index.js

@@ -0,0 +1,18 @@
+export * from './batch-operations.js';
+export * from './cache-ttl-validation.js';
+export * from './catch-clause-safety.js';
+export * from './dangerous-config-defaults.js';
+export * from './error-code-registration.js';
+export * from './event-patterns.js';
+export * from './exit-code-correctness.js';
+export * from './no-hardcoded-timeouts.js';
+export * from './no-process-exit-in-finally.js';
+export * from './readline-cleanup.js';
+export * from './recovery-patterns.js';
+export * from './reentrancy-guard.js';
+export * from './retry-config-validation.js';
+export * from './sentry/index.js';
+export * from './service-patterns.js';
+export * from './timer-lifecycle.js';
+export * from './transaction-patterns.js';
+//# sourceMappingURL=index.js.map

package/dist/checks/resilience/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/checks/resilience/index.ts"],"names":[],"mappings":"AAAA,cAAc,uBAAuB,CAAC;AACtC,cAAc,2BAA2B,CAAC;AAC1C,cAAc,0BAA0B,CAAC;AACzC,cAAc,gCAAgC,CAAC;AAC/C,cAAc,8BAA8B,CAAC;AAC7C,cAAc,qBAAqB,CAAC;AACpC,cAAc,4BAA4B,CAAC;AAC3C,cAAc,4BAA4B,CAAC;AAC3C,cAAc,iCAAiC,CAAC;AAChD,cAAc,uBAAuB,CAAC;AACtC,cAAc,wBAAwB,CAAC;AACvC,cAAc,uBAAuB,CAAC;AACtC,cAAc,8BAA8B,CAAC;AAC7C,cAAc,mBAAmB,CAAC;AAClC,cAAc,uBAAuB,CAAC;AACtC,cAAc,sBAAsB,CAAC;AACrC,cAAc,2BAA2B,CAAC"}

package/dist/checks/resilience/no-hardcoded-timeouts.d.ts

@@ -0,0 +1,10 @@
+/**
+ * @fileoverview No hardcoded timeouts check
+ */
+/**
+ * Check: resilience/no-hardcoded-timeouts
+ *
+ * Detects hardcoded timeout values that should be configurable.
+ */
+export declare const noHardcodedTimeouts: import("@opensip-cli/fitness").Check;
+//# sourceMappingURL=no-hardcoded-timeouts.d.ts.map

package/dist/checks/resilience/no-hardcoded-timeouts.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"no-hardcoded-timeouts.d.ts","sourceRoot":"","sources":["../../../src/checks/resilience/no-hardcoded-timeouts.ts"],"names":[],"mappings":"AAAA;;GAEG;AAqQH;;;;GAIG;AACH,eAAO,MAAM,mBAAmB,sCAgE9B,CAAC"}