@redential/cli 0.1.0

package/signatures/ai/whisper.json

@@ -0,0 +1,36 @@
+{
+  "slug": "ai/whisper",
+  "importPatterns": [],
+  "apiPatterns": [
+    "openai\\.audio\\.transcriptions\\.create\\(",
+    "[\"']whisper-1[\"']",
+    "pipeline\\(\\s*[\"']automatic-speech-recognition[\"']"
+  ],
+  "configFilePatterns": [],
+  "fixtures": {
+    "positive": [
+      {
+        "path": "src/lib/whisper-openai.ts",
+        "diff": "const transcript = await openai.audio.transcriptions.create({ file, model: \"whisper-1\" });"
+      },
+      {
+        "path": "src/lib/whisper-local.ts",
+        "diff": "import { pipeline } from \"@xenova/transformers\";\nconst transcriber = await pipeline(\"automatic-speech-recognition\", \"openai/whisper-tiny.en\");"
+      },
+      {
+        "path": "src/lib/whisper-local.js",
+        "diff": "const { pipeline } = require(\"@xenova/transformers\");\nconst transcriber = await pipeline(\"automatic-speech-recognition\");"
+      }
+    ],
+    "negative": [
+      {
+        "path": "README.md",
+        "diff": "We looked at OpenAI's Whisper model and the @xenova/transformers whisper-tiny build but ended up using a third-party transcription vendor instead."
+      },
+      {
+        "path": "src/lib/embeddings.ts",
+        "diff": "import { pipeline } from \"@xenova/transformers\";\nconst embedder = await pipeline(\"feature-extraction\", \"Xenova/all-MiniLM-L6-v2\");"
+      }
+    ]
+  }
+}

package/signatures/auth/firebase-auth.json

@@ -0,0 +1,43 @@
+{
+  "slug": "auth/firebase-auth",
+  "importPatterns": [
+    "from\\s+[\"']firebase(-admin)?/auth[\"']",
+    "require\\(\\s*[\"']firebase(-admin)?/auth[\"']\\s*\\)"
+  ],
+  "apiPatterns": [
+    "\\bsignInWithEmailAndPassword\\(",
+    "\\bsignInWithPopup\\(",
+    "\\bcreateUserWithEmailAndPassword\\("
+  ],
+  "configFilePatterns": [],
+  "fixtures": {
+    "positive": [
+      {
+        "path": "src/lib/firebase.ts",
+        "diff": "import { getAuth, signInWithEmailAndPassword } from \"firebase/auth\";\nconst auth = getAuth(app);\nawait signInWithEmailAndPassword(auth, email, password);"
+      },
+      {
+        "path": "src/lib/firebase-admin.ts",
+        "diff": "import { getAuth } from \"firebase-admin/auth\";\nconst adminAuth = getAuth();"
+      },
+      {
+        "path": "src/lib/firebase-social.ts",
+        "diff": "import { getAuth, signInWithPopup, GoogleAuthProvider, createUserWithEmailAndPassword } from \"firebase/auth\";\nconst auth = getAuth(app);\nawait signInWithPopup(auth, new GoogleAuthProvider());\nawait createUserWithEmailAndPassword(auth, email, password);"
+      },
+      {
+        "path": "src/lib/firebase-legacy.js",
+        "diff": "const { getAuth } = require(\"firebase/auth\");\nconst auth = getAuth();"
+      }
+    ],
+    "negative": [
+      {
+        "path": "README.md",
+        "diff": "We use Firebase for Firestore and Storage in this service, not for authentication."
+      },
+      {
+        "path": "src/lib/clerk.ts",
+        "diff": "import { getAuth } from \"@clerk/nextjs/server\";\nconst { userId } = getAuth(req);"
+      }
+    ]
+  }
+}

package/signatures/auth/oauth-oidc.json

@@ -0,0 +1,41 @@
+{
+  "slug": "auth/oauth-oidc",
+  "importPatterns": [
+    "from\\s+[\"']openid-client[\"']",
+    "from\\s+[\"']oauth4webapi[\"']",
+    "require\\(\\s*[\"'](openid-client|oauth4webapi)[\"']\\s*\\)"
+  ],
+  "apiPatterns": [
+    "grant_type=authorization_code",
+    "response_type=code",
+    "code_verifier",
+    "\\.well-known/openid-configuration"
+  ],
+  "configFilePatterns": [],
+  "fixtures": {
+    "positive": [
+      {
+        "path": "src/lib/oidc.ts",
+        "diff": "import { Configuration, authorizationCodeGrant } from \"openid-client\";\nconst config = new Configuration(issuer, clientId, clientSecret);"
+      },
+      {
+        "path": "src/lib/oauth-client.ts",
+        "diff": "import * as oauth from \"oauth4webapi\";\nconst tokenUrl = `https://provider.example.com/token?grant_type=authorization_code&code_verifier=${codeVerifier}`;"
+      },
+      {
+        "path": "src/lib/oidc-discovery.ts",
+        "diff": "import { discovery } from \"openid-client\";\nconst authUrl = `${issuer}/authorize?response_type=code&client_id=${clientId}&redirect_uri=${redirectUri}`;\nconst discoveryUrl = `${issuer}/.well-known/openid-configuration`;"
+      },
+      {
+        "path": "src/lib/oidc-legacy.js",
+        "diff": "const { Issuer } = require(\"openid-client\");"
+      }
+    ],
+    "negative": [
+      {
+        "path": "README.md",
+        "diff": "We discussed adding generic OAuth/OIDC support with PKCE and discovery documents but shipped Supabase's built-in provider instead."
+      }
+    ]
+  }
+}

package/signatures/auth/supabase-auth.json

@@ -0,0 +1,29 @@
+{
+  "slug": "auth/supabase-auth",
+  "importPatterns": [
+    "from\\s+[\"']@supabase/(ssr|auth-helpers-nextjs|supabase-js)[\"']",
+    "require\\(\\s*[\"']@supabase/(ssr|auth-helpers-nextjs|supabase-js)[\"']\\s*\\)"
+  ],
+  "apiPatterns": [
+    "\\bsupabase\\.auth\\.(signInWithPassword|signInWithOAuth|getUser|getSession|exchangeCodeForSession|onAuthStateChange)\\("
+  ],
+  "configFilePatterns": [],
+  "fixtures": {
+    "positive": [
+      {
+        "path": "src/lib/supabase/server.ts",
+        "diff": "import { createServerClient } from \"@supabase/ssr\";\nconst supabase = createServerClient(url, key, cookieOptions);\nconst { data } = await supabase.auth.getUser();"
+      },
+      {
+        "path": "src/lib/supabase-client.js",
+        "diff": "const { createClient } = require(\"@supabase/supabase-js\");"
+      }
+    ],
+    "negative": [
+      {
+        "path": "README.md",
+        "diff": "We use Supabase for the Postgres database in this project, not for auth -- auth is handled by our own session cookies."
+      }
+    ]
+  }
+}

package/signatures/backend/axum.json

@@ -0,0 +1,24 @@
+{
+  "slug": "backend/axum",
+  "importPatterns": ["\\buse\\s+axum(::|\\s*;)"],
+  "apiPatterns": ["\\baxum::Router\\b"],
+  "configFilePatterns": [],
+  "fixtures": {
+    "positive": [
+      {
+        "path": "src/main.rs",
+        "diff": "use axum::{Router, routing::get};\n\nasync fn handler() -> &'static str {\n    \"hello\"\n}\n\nfn app() -> Router {\n    Router::new().route(\"/\", get(handler))\n}"
+      },
+      {
+        "path": "src/routes.rs",
+        "diff": "let router = axum::Router::new().route(\"/health\", axum::routing::get(health));"
+      }
+    ],
+    "negative": [
+      {
+        "path": "README.md",
+        "diff": "We evaluated axum early on but ended up building the API on Actix instead."
+      }
+    ]
+  }
+}

package/signatures/db/activerecord.json

@@ -0,0 +1,21 @@
+{
+  "slug": "db/activerecord",
+  "importPatterns": [],
+  "apiPatterns": [
+    "class\\s+\\w+\\s*<\\s*ApplicationRecord\\b",
+    "class\\s+\\w+\\s*<\\s*ActiveRecord::Base\\b"
+  ],
+  "configFilePatterns": [],
+  "fixtures": {
+    "positive": [
+      { "path": "app/models/user.rb", "diff": "class User < ApplicationRecord\n  has_many :posts\nend" },
+      { "path": "app/models/legacy_post.rb", "diff": "class LegacyPost < ActiveRecord::Base\nend" }
+    ],
+    "negative": [
+      {
+        "path": "README.md",
+        "diff": "We use ActiveRecord for most models but this one talks to an external API instead of a table."
+      }
+    ]
+  }
+}

package/signatures/db/eloquent.json

@@ -0,0 +1,22 @@
+{
+  "slug": "db/eloquent",
+  "importPatterns": [
+    "use\\s+Illuminate\\\\Database\\\\Eloquent\\\\Model\\b"
+  ],
+  "apiPatterns": [],
+  "configFilePatterns": [],
+  "fixtures": {
+    "positive": [
+      {
+        "path": "app/Models/Post.php",
+        "diff": "use Illuminate\\Database\\Eloquent\\Model;\n\nclass Post extends Model\n{\n    protected $fillable = ['title'];\n}"
+      }
+    ],
+    "negative": [
+      {
+        "path": "README.md",
+        "diff": "We use Eloquent for most models but this one is a plain PHP class, not extending Model."
+      }
+    ]
+  }
+}

package/signatures/db/supabase.json

@@ -0,0 +1,31 @@
+{
+  "slug": "db/supabase",
+  "importPatterns": [
+    "from\\s+[\"']@supabase/supabase-js[\"']",
+    "require\\(\\s*[\"']@supabase/supabase-js[\"']\\s*\\)"
+  ],
+  "apiPatterns": [
+    "supabase\\.from\\(",
+    "supabase\\.storage\\.",
+    "supabase\\.rpc\\("
+  ],
+  "configFilePatterns": [],
+  "fixtures": {
+    "positive": [
+      {
+        "path": "src/lib/supabase.ts",
+        "diff": "import { createClient } from \"@supabase/supabase-js\";\nconst supabase = createClient(process.env.SUPABASE_URL!, process.env.SUPABASE_ANON_KEY!);\nconst { data } = await supabase.from(\"profiles\").select(\"*\").eq(\"id\", userId);\nawait supabase.storage.from(\"avatars\").upload(path, file);\nconst { data: total } = await supabase.rpc(\"get_total_revenue\");"
+      },
+      {
+        "path": "src/lib/supabase.js",
+        "diff": "const { createClient } = require(\"@supabase/supabase-js\");"
+      }
+    ],
+    "negative": [
+      {
+        "path": "README.md",
+        "diff": "supabase.auth.signInWithPassword handles our login; we're not using supabase for storage or database queries here."
+      }
+    ]
+  }
+}

package/signatures/frontend/tailwind.json

@@ -0,0 +1,28 @@
+{
+  "slug": "frontend/tailwind",
+  "importPatterns": [
+    "@tailwind\\s+(base|components|utilities)"
+  ],
+  "apiPatterns": [],
+  "configFilePatterns": [
+    "(^|/)tailwind\\.config\\.(js|ts|cjs|mjs)$"
+  ],
+  "fixtures": {
+    "positive": [
+      {
+        "path": "tailwind.config.js",
+        "diff": "module.exports = { content: [\"./src/**/*.{js,ts,jsx,tsx}\"], theme: { extend: {} }, plugins: [] };"
+      },
+      {
+        "path": "src/styles/globals.css",
+        "diff": "@tailwind base;\n@tailwind components;\n@tailwind utilities;"
+      }
+    ],
+    "negative": [
+      {
+        "path": "README.md",
+        "diff": "We style everything with tailwind utility classes directly in JSX, configured via a tailwind config file described in the docs."
+      }
+    ]
+  }
+}

package/signatures/infra/docker.json

@@ -0,0 +1,20 @@
+{
+  "slug": "infra/docker",
+  "importPatterns": [],
+  "apiPatterns": [],
+  "configFilePatterns": [
+    "(^|/)Dockerfile$",
+    "(^|/)docker-compose\\.ya?ml$",
+    "(^|/)compose\\.ya?ml$"
+  ],
+  "fixtures": {
+    "positive": [
+      { "path": "Dockerfile", "diff": "FROM node:20-alpine\nWORKDIR /app\nCOPY . .\nRUN npm ci\nCMD [\"node\", \"index.js\"]" },
+      { "path": "docker-compose.yml", "diff": "version: \"3.8\"\nservices:\n  app:\n    build: .\n    ports:\n      - \"3000:3000\"" },
+      { "path": "infra/compose.yaml", "diff": "services:\n  web:\n    image: nginx:latest" }
+    ],
+    "negative": [
+      { "path": "README.md", "diff": "We containerize the app with docker; the build steps are documented in the deploy guide, not in a checked-in Dockerfile yet." }
+    ]
+  }
+}

package/signatures/infra/github-actions.json

@@ -0,0 +1,19 @@
+{
+  "slug": "infra/github-actions",
+  "importPatterns": [],
+  "apiPatterns": [
+    "uses:\\s*actions/checkout",
+    "runs-on:\\s*ubuntu"
+  ],
+  "configFilePatterns": [
+    "(^|/)\\.github/workflows/.*\\.ya?ml$"
+  ],
+  "fixtures": {
+    "positive": [
+      { "path": ".github/workflows/ci.yml", "diff": "name: CI\non: [push]\njobs:\n  test:\n    runs-on: ubuntu-latest\n    steps:\n      - uses: actions/checkout@v4\n      - run: npm test" }
+    ],
+    "negative": [
+      { "path": "README.md", "diff": "We use github actions for CI, but the workflow file hasn't been checked into the repo yet." }
+    ]
+  }
+}

package/signatures/infra/kubernetes.json

@@ -0,0 +1,21 @@
+{
+  "slug": "infra/kubernetes",
+  "importPatterns": [],
+  "apiPatterns": [
+    "apiVersion:\\s*apps/v1",
+    "kind:\\s*Deployment",
+    "kind:\\s*Service"
+  ],
+  "configFilePatterns": [
+    "(^|/)(deployment|service|ingress)\\.ya?ml$"
+  ],
+  "fixtures": {
+    "positive": [
+      { "path": "k8s/deployment.yaml", "diff": "apiVersion: apps/v1\nkind: Deployment\nmetadata:\n  name: web\nspec:\n  replicas: 3" },
+      { "path": "k8s/service.yaml", "diff": "apiVersion: v1\nkind: Service\nspec:\n  selector:\n    app: web\n  ports:\n    - port: 80" }
+    ],
+    "negative": [
+      { "path": "README.md", "diff": "We deploy to kubernetes but haven't finished the ingress config for the staging cluster yet." }
+    ]
+  }
+}

package/signatures/infra/terraform.json

@@ -0,0 +1,22 @@
+{
+  "slug": "infra/terraform",
+  "importPatterns": [],
+  "apiPatterns": [
+    "resource\\s+[\"']\\w+[\"']\\s+[\"']\\w+[\"']\\s*\\{",
+    "provider\\s+[\"']\\w+[\"']\\s*\\{"
+  ],
+  "configFilePatterns": [
+    "\\.tf$",
+    "\\.tfvars$"
+  ],
+  "fixtures": {
+    "positive": [
+      { "path": "infra/main.tf", "diff": "resource \"aws_s3_bucket\" \"data\" {\n  bucket = \"my-bucket\"\n}" },
+      { "path": "infra/provider.tf", "diff": "provider \"aws\" {\n  region = \"us-east-1\"\n}" },
+      { "path": "infra/prod.tfvars", "diff": "region = \"us-east-1\"\ninstance_type = \"t3.micro\"" }
+    ],
+    "negative": [
+      { "path": "README.md", "diff": "We manage infrastructure with terraform, but not every resource has been migrated from the manual setup yet." }
+    ]
+  }
+}