@synchronized-studio/cmsassets-agent 0.5.1 → 0.6.0

package/CHANGELOG.md

@@ -1,10 +1,54 @@
 # Changelog
 
+## 0.6.0
+
+### Fixed
+
+- **Scanner — false positive CMS detection from comments**: `hasCmsFetchSignal()` was matching CMS keywords found in `//` and `/* */` comments (e.g. `// Prismic link objects:`). Now strips all comments before pattern matching, preventing utility composables like `useFilterField` from being incorrectly flagged as CMS data files.
+- **Scanner — overly broad `CMS_FETCH_PATTERNS`**: Patterns were matching bare words like `prismic` in variable names or JSX component names (`PrismicLink`). Patterns are now scoped to package imports (`from '@prismicio/'`), SDK instance calls (`$prismic.`, `usePrismic()`, `createClient()`), and CMS CDN URL patterns — not arbitrary word matches.
+- **Scanner — router/URL object returns incorrectly flagged**: `return { query: ... }`, `return { path: '...' }`, `return { redirect: ... }`, `return { statusCode: }`, `return { headers: }`, `return { ...route.query }` are now excluded from `NON_DATA_RETURN_PATTERNS` and will never be treated as CMS data injection points.
+- **Scanner — new callback property exclusions**: `filter:`, `sort:`, `where:`, `orderBy:`, `select:` added to `CALLBACK_PROPERTY_PATTERNS` so query-builder callbacks are not mistaken for data returns.
+- **Patcher/Planner — `__runtimeConfig` undefined variable**: `resolveRuntimeConfigRef` could leave `__runtimeConfig` in the output without injecting the declaration. The structural validator now detects this via `detectUnresolvedPlaceholders()` and blocks the patch.
+- **Patcher — new `checkNonCmsReturnWrapping` guard**: Added to both AST/hybrid and AI patch modes in `patcher/index.ts`. Prevents wrapping of router/navigation/HTTP return objects even if the scanner missed them (defense-in-depth).
+- **Planner — belt-and-suspenders guard**: `createPlan()` now calls `checkNonCmsReturnWrapping()` before emitting a patch, so router returns are filtered at plan creation time as well.
+- **Rescan — comment false positives**: `findUnwrappedCmsCalls()` in `rescan.ts` now strips `//` and `/* */` comments before checking for unwrapped CMS calls, preventing false positives in the AI verify phase.
+- **AI prompts updated**: `aiFilePatch.ts` and `aiReview.ts` prompts now explicitly forbid wrapping of navigation/routing objects and flag undefined `__runtimeConfig` references.
+
+### Tests
+
+- Added `tests/fixtures/nuxt-prismic/composables/useFilterField.js` — realistic utility composable with Prismic mentions only in comments.
+- Scanner tests: verifies `useFilterField` produces zero injection points; verifies `{ query: }` and `{ path: }` returns are excluded.
+- Structural validator tests: `detectUnresolvedPlaceholders` rejects `__runtimeConfig` without declaration; `checkNonCmsReturnWrapping` correctly classifies router vs. CMS returns.
+
 ## 0.5.1
 
 ### Fixed
 - **Vue/Nuxt**: When injecting `const __runtimeConfig = useRuntimeConfig()` in `.vue` files, the declaration is now placed before the full destructuring block instead of inside it. Previously, multiline destructuring like `const { data, error } = await useAsyncData(...)` could be corrupted (declaration inserted between `}` and `= await useAsyncData`, breaking syntax). The patcher now walks back to the opening `const {` line and inserts there.
 
+## 0.5.0
+
+### Added
+- **AI-first patching mode** (`--patch-mode ai`): sends entire files to an LLM for transformation instead of AST surgery. New `aiFilePatch.ts` module.
+- **Structural validator** (`structuralValidator.ts`): pre/post-patch snapshot comparison that catches broken exports, missing functions, unreachable code, and function-value wrapping errors.
+- **Nuxt runtimeConfig injection** (`injectNuxtRuntimeConfig.ts`): automatically adds `runtimeConfig.public.cmsAssetsUrl` to `nuxt.config` (inline or external file). Idempotent.
+- **`__runtimeConfig` placeholder system**: planner emits `__runtimeConfig.public.cmsAssetsUrl` in Nuxt 3 client-side patches; `resolveRuntimeConfigRef` resolves it to an existing `useRuntimeConfig()` variable or injects a new one.
+- **Nuxt 2 support**: scanner detects `asyncData` hooks and Vuex store actions with CMS fetches; planner generates `asyncData-return`, `vuex-action-return`, and `vuex-commit` wrap templates.
+- **Factory return detection**: `isFactoryReturn()` skips objects like `return { getPage, generateMetadata }` where all shorthand props are locally defined functions.
+- **`useAsyncData-transform` / `useFetch-transform`** injection types for Nuxt 3 pages and composables — adds `{ transform: (raw) => fn(raw, opts) }` option instead of wrapping the return.
+- Callback-return filtering: return statements inside `useAsyncData`/`useFetch` callbacks are excluded from generic `return` candidates.
+- Test fixtures for Nuxt 2 + Contentful (`nuxt2-contentful/`), Nuxt 3 + Prismic pages and composables.
+
+### Changed
+- Scanner: multiline return expansion, improved `looksLikeDataReturn` heuristics, `isInsideCallbackOption` guard, non-data return exclusions.
+- Planner: `buildCmsOptions` accepts `runtimeUrlExpr` for client-side Nuxt 3 patches.
+- AST patcher: 5-strategy matching system with +-1 line tolerance and near-line fallback.
+- String patcher (Vue/Svelte/Astro): deterministic `__runtimeConfig` resolution before string replacement.
+- Verifier: expanded profiles and rescan logic.
+- CLI version bumped to `0.5.0`.
+
+### Removed
+- Deleted legacy `llmFallback.ts` (replaced by `aiFilePatch.ts` and `--patch-mode` system).
+
 ## 0.4.0
 
 ### Breaking changes

package/dist/aiReview-HPR3RZ47.js

@@ -0,0 +1,9 @@
+import {
+  aiReviewAll
+} from "./chunk-GMERN6MA.js";
+import "./chunk-W7TNFULQ.js";
+import "./chunk-E74TGIFQ.js";
+import "./chunk-QGM4M3NI.js";
+export {
+  aiReviewAll
+};