@schemashift/core 0.12.0 → 0.13.0

package/dist/index.cjs

@@ -30,11 +30,16 @@ var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: tru
 // src/index.ts
 var index_exports = {};
 __export(index_exports, {
+  AUDIT_LOG_FILE: () => AUDIT_LOG_FILE,
   ApprovalManager: () => ApprovalManager,
+  BACKUP_DIR: () => BACKUP_DIR,
   BehavioralWarningAnalyzer: () => BehavioralWarningAnalyzer,
   BundleEstimator: () => BundleEstimator,
+  CONFIG_FILE_NAMES: () => CONFIG_FILE_NAMES,
   CompatibilityAnalyzer: () => CompatibilityAnalyzer,
   ComplexityEstimator: () => ComplexityEstimator,
+  DEFAULT_CONFIG_FILE: () => DEFAULT_CONFIG_FILE,
+  DeadSchemaDetector: () => DeadSchemaDetector,
   DetailedAnalyzer: () => DetailedAnalyzer,
   DriftDetector: () => DriftDetector,
   EcosystemAnalyzer: () => EcosystemAnalyzer,
@@ -43,16 +48,22 @@ __export(index_exports, {
   GovernanceEngine: () => GovernanceEngine,
   GovernanceFixer: () => GovernanceFixer,
   GraphExporter: () => GraphExporter,
+  INCREMENTAL_STATE_FILE: () => INCREMENTAL_STATE_FILE,
+  ImportDeduplicator: () => ImportDeduplicator,
   IncrementalTracker: () => IncrementalTracker,
   MigrationAuditLog: () => MigrationAuditLog,
   MigrationChain: () => MigrationChain,
   MonorepoResolver: () => MonorepoResolver,
+  PENDING_DIR: () => PENDING_DIR,
   PackageUpdater: () => PackageUpdater,
   PerformanceAnalyzer: () => PerformanceAnalyzer,
   PluginLoader: () => PluginLoader,
+  SCHEMASHIFT_DIR: () => SCHEMASHIFT_DIR,
+  SCHEMA_SNAPSHOT_FILE: () => SCHEMA_SNAPSHOT_FILE,
   SchemaAnalyzer: () => SchemaAnalyzer,
   SchemaDependencyResolver: () => SchemaDependencyResolver,
   StandardSchemaAdvisor: () => StandardSchemaAdvisor,
+  TESTS_DIR: () => TESTS_DIR,
   TestScaffolder: () => TestScaffolder,
   TransformEngine: () => TransformEngine,
   TypeDedupDetector: () => TypeDedupDetector,
@@ -229,10 +240,30 @@ var SchemaAnalyzer = class {
 // src/approval.ts
 var import_node_fs = require("fs");
 var import_node_path = require("path");
+
+// src/constants.ts
+var SCHEMASHIFT_DIR = ".schemashift";
+var BACKUP_DIR = ".schemashift-backup";
+var CONFIG_FILE_NAMES = [
+  ".schemashiftrc",
+  ".schemashiftrc.json",
+  ".schemashiftrc.yaml",
+  ".schemashiftrc.yml",
+  ".schemashiftrc.js",
+  ".schemashiftrc.cjs"
+];
+var DEFAULT_CONFIG_FILE = ".schemashiftrc.json";
+var INCREMENTAL_STATE_FILE = "incremental.json";
+var AUDIT_LOG_FILE = "audit-log.json";
+var SCHEMA_SNAPSHOT_FILE = "schema-snapshot.json";
+var PENDING_DIR = "pending";
+var TESTS_DIR = "tests";
+
+// src/approval.ts
 var ApprovalManager = class {
   pendingDir;
   constructor(projectPath) {
-    this.pendingDir = (0, import_node_path.join)(projectPath, ".schemashift", "pending");
+    this.pendingDir = (0, import_node_path.join)(projectPath, SCHEMASHIFT_DIR, PENDING_DIR);
   }
   /**
    * Create a new migration request for review.
@@ -281,8 +312,16 @@ var ApprovalManager = class {
     if (!(0, import_node_fs.existsSync)(filePath)) {
       return null;
     }
-    const content = (0, import_node_fs.readFileSync)(filePath, "utf-8");
-    return JSON.parse(content);
+    try {
+      const content = (0, import_node_fs.readFileSync)(filePath, "utf-8");
+      const parsed = JSON.parse(content);
+      if (!this.isValidRequest(parsed)) {
+        return null;
+      }
+      return parsed;
+    } catch {
+      return null;
+    }
   }
   /**
    * List all migration requests, optionally filtered by status.
@@ -294,10 +333,14 @@ var ApprovalManager = class {
     const files = (0, import_node_fs.readdirSync)(this.pendingDir).filter((f) => f.endsWith(".json"));
     const requests = [];
     for (const file of files) {
-      const content = (0, import_node_fs.readFileSync)((0, import_node_path.join)(this.pendingDir, file), "utf-8");
-      const request = JSON.parse(content);
-      if (!status || request.status === status) {
-        requests.push(request);
+      try {
+        const content = (0, import_node_fs.readFileSync)((0, import_node_path.join)(this.pendingDir, file), "utf-8");
+        const parsed = JSON.parse(content);
+        if (!this.isValidRequest(parsed)) continue;
+        if (!status || parsed.status === status) {
+          requests.push(parsed);
+        }
+      } catch {
       }
     }
     return requests.sort(
@@ -323,6 +366,11 @@ var ApprovalManager = class {
     const request = this.getRequest(requestId);
     return request?.status === "approved";
   }
+  isValidRequest(data) {
+    if (typeof data !== "object" || data === null) return false;
+    const obj = data;
+    return typeof obj.id === "string" && typeof obj.from === "string" && typeof obj.to === "string" && Array.isArray(obj.files) && typeof obj.requestedBy === "string" && typeof obj.status === "string" && ["pending", "approved", "rejected"].includes(obj.status);
+  }
   ensureDir() {
     if (!(0, import_node_fs.existsSync)(this.pendingDir)) {
       (0, import_node_fs.mkdirSync)(this.pendingDir, { recursive: true });
@@ -468,15 +516,13 @@ function transformMethodChain(chain, newBase, factoryMapper, methodMapper) {
 var import_node_crypto = require("crypto");
 var import_node_fs2 = require("fs");
 var import_node_path2 = require("path");
-var AUDIT_DIR = ".schemashift";
-var AUDIT_FILE = "audit-log.json";
 var AUDIT_VERSION = 1;
 var MigrationAuditLog = class {
   logDir;
   logPath;
   constructor(projectPath) {
-    this.logDir = (0, import_node_path2.join)(projectPath, AUDIT_DIR);
-    this.logPath = (0, import_node_path2.join)(this.logDir, AUDIT_FILE);
+    this.logDir = (0, import_node_path2.join)(projectPath, SCHEMASHIFT_DIR);
+    this.logPath = (0, import_node_path2.join)(this.logDir, AUDIT_LOG_FILE);
   }
   /**
    * Append a new entry to the audit log.
@@ -520,7 +566,11 @@ var MigrationAuditLog = class {
       if (!content.trim()) {
         return { version: AUDIT_VERSION, entries: [] };
       }
-      return JSON.parse(content);
+      const parsed = JSON.parse(content);
+      if (!this.isValidAuditLog(parsed)) {
+        return { version: AUDIT_VERSION, entries: [] };
+      }
+      return parsed;
     } catch {
       return { version: AUDIT_VERSION, entries: [] };
     }
@@ -690,6 +740,13 @@ var MigrationAuditLog = class {
       gitCommit: process.env.GITHUB_SHA || process.env.CI_COMMIT_SHA || void 0
     };
   }
+  isValidAuditLog(data) {
+    if (typeof data !== "object" || data === null) return false;
+    const obj = data;
+    if (typeof obj.version !== "number") return false;
+    if (!Array.isArray(obj.entries)) return false;
+    return true;
+  }
   write(log) {
     if (!(0, import_node_fs2.existsSync)(this.logDir)) {
       (0, import_node_fs2.mkdirSync)(this.logDir, { recursive: true });
@@ -1133,6 +1190,12 @@ var import_node_path4 = require("path");
 // src/ecosystem.ts
 var import_node_fs3 = require("fs");
 var import_node_path3 = require("path");
+function parseMajorVersion(version) {
+  const match = version.match(/(\d+)/);
+  const num = match?.[1] ? Number.parseInt(match[1], 10) : 0;
+  if (!Number.isFinite(num) || num < 0 || num > 999) return 0;
+  return num;
+}
 var ECOSYSTEM_RULES = [
   // ORM integrations
   {
@@ -1174,8 +1237,7 @@ var ECOSYSTEM_RULES = [
     category: "api",
     migrations: ["zod-v3->v4"],
     check: (version) => {
-      const majorMatch = version.match(/(\d+)/);
-      const major = majorMatch?.[1] ? Number.parseInt(majorMatch[1], 10) : 0;
+      const major = parseMajorVersion(version);
       if (major < 11) {
         return {
           issue: `tRPC v${major} expects Zod v3 types. A v3 ZodType is not assignable to a v4 ZodType.`,
@@ -1208,8 +1270,7 @@ var ECOSYSTEM_RULES = [
     category: "validation-util",
     migrations: ["zod-v3->v4"],
     check: (version) => {
-      const majorMatch = version.match(/(\d+)/);
-      const major = majorMatch?.[1] ? Number.parseInt(majorMatch[1], 10) : 0;
+      const major = parseMajorVersion(version);
       if (major < 4) {
         return {
           issue: `zod-validation-error v${major} is not compatible with Zod v4.`,
@@ -1499,8 +1560,7 @@ var ECOSYSTEM_RULES = [
     category: "validation-util",
     migrations: ["zod-v3->v4"],
     check: (version) => {
-      const majorMatch = version.match(/(\d+)/);
-      const major = majorMatch?.[1] ? Number.parseInt(majorMatch[1], 10) : 0;
+      const major = parseMajorVersion(version);
       if (major < 4) {
         return {
           issue: "zod-to-json-schema v3 may not fully support Zod v4 schemas.",
@@ -1895,7 +1955,7 @@ async function loadConfig(configPath) {
     include: ["**/*.ts", "**/*.tsx"],
     exclude: ["**/node_modules/**", "**/dist/**", "**/*.d.ts"],
     git: { enabled: false },
-    backup: { enabled: true, dir: ".schemashift-backup" },
+    backup: { enabled: true, dir: BACKUP_DIR },
     ...result?.config
   };
 }
@@ -2006,6 +2066,75 @@ function suggestCrossFieldPattern(whenCode) {
   return null;
 }
 
+// src/dead-schema-detector.ts
+var DeadSchemaDetector = class {
+  detect(sourceFiles) {
+    const schemas = this.collectSchemaDefinitions(sourceFiles);
+    const unusedSchemas = this.findUnusedSchemas(schemas, sourceFiles);
+    return {
+      unusedSchemas,
+      totalSchemas: schemas.length,
+      summary: unusedSchemas.length > 0 ? `Found ${unusedSchemas.length} unused schema(s) out of ${schemas.length} total that may be safely removed.` : `All ${schemas.length} schema(s) are referenced.`
+    };
+  }
+  collectSchemaDefinitions(sourceFiles) {
+    const schemas = [];
+    const schemaPattern = /(?:const|let|var|export\s+(?:const|let|var))\s+(\w+)\s*=\s*(?:z\.|yup\.|Yup\.|Joi\.|t\.|v\.|type\(|object\(|string\(|S\.)/;
+    for (const file of sourceFiles) {
+      const text = file.getFullText();
+      const lines = text.split("\n");
+      const filePath = file.getFilePath();
+      for (let i = 0; i < lines.length; i++) {
+        const line = lines[i];
+        if (!line) continue;
+        const match = schemaPattern.exec(line);
+        if (match?.[1]) {
+          schemas.push({
+            schemaName: match[1],
+            filePath,
+            lineNumber: i + 1
+          });
+        }
+      }
+    }
+    return schemas;
+  }
+  findUnusedSchemas(schemas, sourceFiles) {
+    const fileContents = /* @__PURE__ */ new Map();
+    for (const file of sourceFiles) {
+      fileContents.set(file.getFilePath(), file.getFullText());
+    }
+    const unused = [];
+    for (const schema of schemas) {
+      const { schemaName, filePath } = schema;
+      let referenceCount = 0;
+      for (const [path, content] of fileContents) {
+        const pattern = new RegExp(`\\b${schemaName}\\b`, "g");
+        const matches = content.match(pattern);
+        const matchCount = matches?.length ?? 0;
+        if (path === filePath) {
+          if (matchCount > 1) {
+            referenceCount += matchCount - 1;
+          }
+        } else {
+          referenceCount += matchCount;
+        }
+      }
+      const fileContent = fileContents.get(filePath) ?? "";
+      const exportPattern = new RegExp(
+        `export\\s+(?:const|let|var)\\s+${schemaName}\\b|export\\s*\\{[^}]*\\b${schemaName}\\b`
+      );
+      if (exportPattern.test(fileContent)) {
+        referenceCount++;
+      }
+      if (referenceCount === 0) {
+        unused.push(schema);
+      }
+    }
+    return unused;
+  }
+};
+
 // src/dependency-graph.ts
 var import_node_fs5 = require("fs");
 var import_node_path5 = require("path");
@@ -2546,15 +2675,13 @@ var DetailedAnalyzer = class {
 var import_node_crypto2 = require("crypto");
 var import_node_fs7 = require("fs");
 var import_node_path7 = require("path");
-var SNAPSHOT_DIR = ".schemashift";
-var SNAPSHOT_FILE = "schema-snapshot.json";
 var SNAPSHOT_VERSION = 1;
 var DriftDetector = class {
   snapshotDir;
   snapshotPath;
   constructor(projectPath) {
-    this.snapshotDir = (0, import_node_path7.join)(projectPath, SNAPSHOT_DIR);
-    this.snapshotPath = (0, import_node_path7.join)(this.snapshotDir, SNAPSHOT_FILE);
+    this.snapshotDir = (0, import_node_path7.join)(projectPath, SCHEMASHIFT_DIR);
+    this.snapshotPath = (0, import_node_path7.join)(this.snapshotDir, SCHEMA_SNAPSHOT_FILE);
   }
   /**
    * Take a snapshot of the current schema state
@@ -2824,7 +2951,8 @@ var GovernanceEngine = class {
         if (this.rules.has("naming-convention")) {
           const config = this.rules.get("naming-convention") ?? {};
           const pattern = config.pattern || ".*Schema$";
-          if (!new RegExp(pattern).test(schemaName)) {
+          const regex = this.safeRegExp(pattern);
+          if (regex && !regex.test(schemaName)) {
             violations.push({
               rule: "naming-convention",
               message: `Schema "${schemaName}" does not match naming pattern: ${pattern}`,
@@ -2986,6 +3114,14 @@ var GovernanceEngine = class {
       passed: violations.filter((v) => v.severity === "error").length === 0
     };
   }
+  safeRegExp(pattern) {
+    if (pattern.length > 500) return null;
+    try {
+      return new RegExp(pattern);
+    } catch {
+      return null;
+    }
+  }
   detectFileLibrary(sourceFile) {
     for (const imp of sourceFile.getImportDeclarations()) {
       const lib = detectSchemaLibrary(imp.getModuleSpecifierValue());
@@ -3721,17 +3857,77 @@ var GraphExporter = class {
   }
 };
 
+// src/import-deduplicator.ts
+var ImportDeduplicator = class {
+  detect(sourceFiles) {
+    const allGroups = [];
+    for (const file of sourceFiles) {
+      const groups = this.findDuplicatesInFile(file);
+      allGroups.push(...groups);
+    }
+    const totalDuplicates = allGroups.reduce((sum, g) => sum + g.occurrences.length, 0);
+    return {
+      duplicateGroups: allGroups,
+      totalDuplicates,
+      summary: allGroups.length > 0 ? `Found ${allGroups.length} duplicate import group(s) across ${new Set(allGroups.map((g) => g.occurrences[0]?.filePath)).size} file(s). Merge them for cleaner imports.` : "No duplicate imports found."
+    };
+  }
+  findDuplicatesInFile(sourceFile) {
+    const imports = sourceFile.getImportDeclarations();
+    const filePath = sourceFile.getFilePath();
+    const bySource = /* @__PURE__ */ new Map();
+    for (const imp of imports) {
+      const source = imp.getModuleSpecifierValue();
+      const namedImports = imp.getNamedImports().map((n) => n.getName());
+      const namespaceImport = imp.getNamespaceImport()?.getText();
+      const defaultImport = imp.getDefaultImport()?.getText();
+      const importedNames = [];
+      if (defaultImport) importedNames.push(defaultImport);
+      if (namespaceImport) importedNames.push(`* as ${namespaceImport}`);
+      importedNames.push(...namedImports);
+      if (importedNames.length === 0) continue;
+      const entry = {
+        source,
+        filePath,
+        lineNumber: imp.getStartLineNumber(),
+        importedNames
+      };
+      const existing = bySource.get(source);
+      if (existing) {
+        existing.push(entry);
+      } else {
+        bySource.set(source, [entry]);
+      }
+    }
+    const groups = [];
+    for (const [source, occurrences] of bySource) {
+      if (occurrences.length <= 1) continue;
+      const allNames = /* @__PURE__ */ new Set();
+      for (const occ of occurrences) {
+        for (const name of occ.importedNames) {
+          allNames.add(name);
+        }
+      }
+      const mergedNames = [...allNames].sort().join(", ");
+      groups.push({
+        source,
+        occurrences,
+        suggestion: `Merge into single import: import { ${mergedNames} } from '${source}';`
+      });
+    }
+    return groups;
+  }
+};
+
 // src/incremental.ts
 var import_node_fs8 = require("fs");
 var import_node_path8 = require("path");
-var STATE_DIR = ".schemashift";
-var STATE_FILE = "incremental.json";
 var IncrementalTracker = class {
   stateDir;
   statePath;
   constructor(projectPath) {
-    this.stateDir = (0, import_node_path8.join)(projectPath, STATE_DIR);
-    this.statePath = (0, import_node_path8.join)(this.stateDir, STATE_FILE);
+    this.stateDir = (0, import_node_path8.join)(projectPath, SCHEMASHIFT_DIR);
+    this.statePath = (0, import_node_path8.join)(this.stateDir, INCREMENTAL_STATE_FILE);
   }
   start(files, from, to) {
     const state = {
@@ -3768,7 +3964,9 @@ var IncrementalTracker = class {
   getState() {
     if (!(0, import_node_fs8.existsSync)(this.statePath)) return null;
     try {
-      return JSON.parse((0, import_node_fs8.readFileSync)(this.statePath, "utf-8"));
+      const parsed = JSON.parse((0, import_node_fs8.readFileSync)(this.statePath, "utf-8"));
+      if (!this.isValidState(parsed)) return null;
+      return parsed;
     } catch {
       return null;
     }
@@ -3815,6 +4013,11 @@ var IncrementalTracker = class {
       (0, import_node_fs8.unlinkSync)(this.statePath);
     }
   }
+  isValidState(data) {
+    if (typeof data !== "object" || data === null) return false;
+    const obj = data;
+    return typeof obj.migrationId === "string" && typeof obj.from === "string" && typeof obj.to === "string" && typeof obj.startedAt === "string" && Array.isArray(obj.completedFiles) && Array.isArray(obj.remainingFiles) && Array.isArray(obj.failedFiles);
+  }
   saveState(state) {
     if (!(0, import_node_fs8.existsSync)(this.stateDir)) {
       (0, import_node_fs8.mkdirSync)(this.stateDir, { recursive: true });
@@ -4138,11 +4341,15 @@ var WebhookNotifier = class {
       const signature = await computeSignature(payload, webhook.secret);
       headers["X-SchemaShift-Signature"] = `sha256=${signature}`;
     }
+    const timeoutMs = webhook.timeoutMs ?? 1e4;
+    const controller = new AbortController();
+    const timeoutId = setTimeout(() => controller.abort(), timeoutMs);
     try {
       const response = await fetch(webhook.url, {
         method: "POST",
         headers,
-        body: payload
+        body: payload,
+        signal: controller.signal
       });
       return {
         success: response.ok,
@@ -4150,10 +4357,13 @@ var WebhookNotifier = class {
         error: response.ok ? void 0 : `HTTP ${response.status}: ${response.statusText}`
       };
     } catch (err) {
+      const message = err instanceof Error && err.name === "AbortError" ? `Webhook request timed out after ${timeoutMs}ms` : err instanceof Error ? err.message : String(err);
       return {
         success: false,
-        error: err instanceof Error ? err.message : String(err)
+        error: message
       };
+    } finally {
+      clearTimeout(timeoutId);
     }
   }
   /**
@@ -5068,11 +5278,16 @@ var TypeDedupDetector = class {
 };
 // Annotate the CommonJS export names for ESM import in node:
 0 && (module.exports = {
+  AUDIT_LOG_FILE,
   ApprovalManager,
+  BACKUP_DIR,
   BehavioralWarningAnalyzer,
   BundleEstimator,
+  CONFIG_FILE_NAMES,
   CompatibilityAnalyzer,
   ComplexityEstimator,
+  DEFAULT_CONFIG_FILE,
+  DeadSchemaDetector,
   DetailedAnalyzer,
   DriftDetector,
   EcosystemAnalyzer,
@@ -5081,16 +5296,22 @@ var TypeDedupDetector = class {
   GovernanceEngine,
   GovernanceFixer,
   GraphExporter,
+  INCREMENTAL_STATE_FILE,
+  ImportDeduplicator,
   IncrementalTracker,
   MigrationAuditLog,
   MigrationChain,
   MonorepoResolver,
+  PENDING_DIR,
   PackageUpdater,
   PerformanceAnalyzer,
   PluginLoader,
+  SCHEMASHIFT_DIR,
+  SCHEMA_SNAPSHOT_FILE,
   SchemaAnalyzer,
   SchemaDependencyResolver,
   StandardSchemaAdvisor,
+  TESTS_DIR,
   TestScaffolder,
   TransformEngine,
   TypeDedupDetector,