@vibecheck-ai/mcp 24.6.8 → 24.6.11

package/dist/chunk-QYXENOVK.js

@@ -0,0 +1,499 @@
+import { createRequire } from 'module';
+import { fileURLToPath } from 'url';
+import { dirname } from 'path';
+
+createRequire(import.meta.url);
+const __filename$1 = fileURLToPath(import.meta.url);
+dirname(__filename$1);
+
+// ../engines/dist/chunk-VBAMGELV.js
+function deterministicId(uri, line, varName) {
+  const input = `env:${uri}::${line}::ENV001::${varName}`;
+  let hash = 2166136261;
+  for (let i = 0; i < input.length; i++) {
+    hash ^= input.charCodeAt(i);
+    hash = hash * 16777619 >>> 0;
+  }
+  return `env-${hash.toString(16).padStart(8, "0")}`;
+}
+var ENV_PATTERN = /process\.env\.([A-Z_][A-Z0-9_]*)/g;
+var DESTRUCTURE_PATTERN = /(?:const|let|var)\s+\{([^}]+)\}\s*=\s*process\.env/g;
+var BRACKET_PATTERN = /process\.env\[['"]([A-Z_][A-Z0-9_]*)['"]\]/g;
+var IMPORT_META_ENV_PATTERN = /import\.meta\.env\.([A-Z_][A-Z0-9_]*)/g;
+function hasFallback(line, matchStart, matchEnd) {
+  const rest = line.slice(matchEnd).trimStart();
+  if (/^(?:\|\||[?]{2})\s*(?!\s*(?:undefined|null|void)\b)/.test(rest)) return true;
+  if (rest.startsWith("?") && !rest.startsWith("??") && !rest.startsWith("?.")) return true;
+  const before = line.slice(0, matchStart).trimEnd();
+  if (/(?:\|\||[?]{2})\s*$/.test(before)) return true;
+  if (/\?\s*$/.test(before)) return true;
+  return false;
+}
+function isConditionalCheck(line, matchStart) {
+  const before = line.slice(0, matchStart).trimEnd();
+  if (/(?:if\s*\(|&&\s*$|\?\s*$|\|\|\s*$|!\s*$|!!\s*$)/.test(before)) return true;
+  const afterEnvVar = line.slice(matchStart).replace(/^process\.env\.[A-Z_][A-Z0-9_]*/, "").trimStart();
+  if (/^[?](?!\.)/.test(afterEnvVar) || /^(?:&&|\|\|)/.test(afterEnvVar)) return true;
+  return false;
+}
+var WELL_KNOWN_PREFIXES = [
+  // Frameworks
+  "NEXT_PUBLIC_",
+  "NEXT_",
+  "NEXTAUTH_",
+  "NUXT_",
+  "VITE_",
+  "GATSBY_",
+  "EXPO_PUBLIC_",
+  "REACT_APP_",
+  "VUE_APP_",
+  "PUBLIC_",
+  // Desktop / build tools
+  "ELECTRON_",
+  "TURBO_",
+  "PLASMO_",
+  "TAURI_",
+  // Hosting / CI
+  "VERCEL_",
+  "npm_",
+  "NETLIFY_",
+  "HEROKU_",
+  "RAILWAY_",
+  "RENDER_",
+  "FLY_",
+  "GITHUB_",
+  "GH_",
+  "GITLAB_",
+  "BITBUCKET_",
+  "CIRCLE_",
+  "TRAVIS_",
+  "JENKINS_",
+  "CODESPACE_",
+  "GITPOD_",
+  "REPLIT_",
+  // Cloud providers
+  "AWS_",
+  "AZURE_",
+  "GOOGLE_",
+  "GCP_",
+  "DOCKER_",
+  // Databases
+  "POSTGRES_",
+  "PG_",
+  "MYSQL_",
+  "MONGO_",
+  "MONGODB_",
+  "REDIS_",
+  // SaaS integrations
+  "STRIPE_",
+  "SUPABASE_",
+  "FIREBASE_",
+  "CLERK_",
+  "AUTH0_",
+  "RESEND_",
+  "SENDGRID_",
+  "TWILIO_",
+  "POSTMARK_",
+  "MAILGUN_",
+  "SENTRY_",
+  "DATADOG_",
+  "LOGROCKET_",
+  "SEGMENT_",
+  "POSTHOG_",
+  "ALGOLIA_",
+  "MEILISEARCH_",
+  "TYPESENSE_",
+  "CONTENTFUL_",
+  "SANITY_",
+  "STRAPI_",
+  "PRISMIC_",
+  "STORYBLOK_",
+  "CLOUDINARY_",
+  "IMGIX_",
+  "UPLOADTHING_",
+  "OPENAI_",
+  "ANTHROPIC_",
+  "REPLICATE_",
+  "HUGGINGFACE_",
+  "PLANETSCALE_",
+  "TURSO_",
+  "NEON_",
+  "UPSTASH_",
+  "PUSHER_",
+  "ABLY_",
+  "LIVEBLOCKS_",
+  "CONVEX_",
+  "COHERE_",
+  // Auth
+  "AUTH_",
+  "OAUTH_",
+  "GITHUB_CLIENT_",
+  "GOOGLE_CLIENT_",
+  // Generic infrastructure
+  "LOG_",
+  "CACHE_",
+  "QUEUE_",
+  "WORKER_",
+  "CRON_",
+  "WEBHOOK_",
+  "SMTP_",
+  "MAIL_",
+  "EMAIL_",
+  "S3_",
+  "CDN_",
+  "STORAGE_",
+  // App / project-specific
+  "VIBECHECK_"
+];
+var WELL_KNOWN_EXACT = /* @__PURE__ */ new Set([
+  // Node.js / OS
+  "NODE_ENV",
+  "CI",
+  "HOME",
+  "PATH",
+  "PWD",
+  "USER",
+  "SHELL",
+  "TERM",
+  "LANG",
+  "HOSTNAME",
+  "PORT",
+  "TZ",
+  "EDITOR",
+  "TMPDIR",
+  "TEMP",
+  "TMP",
+  "__dirname",
+  "__filename",
+  // Common app config
+  "DATABASE_URL",
+  "REDIS_URL",
+  "API_URL",
+  "BASE_URL",
+  "HOST",
+  "SECRET",
+  "JWT_SECRET",
+  "SESSION_SECRET",
+  "APP_URL",
+  "SITE_URL",
+  "PUBLIC_URL",
+  "APP_SECRET",
+  "APP_KEY",
+  "APP_NAME",
+  "APP_ENV",
+  "APP_DEBUG",
+  "DIRECT_URL",
+  "SHADOW_DATABASE_URL",
+  // Postgres individual vars
+  "PGHOST",
+  "PGPORT",
+  "PGUSER",
+  "PGPASSWORD",
+  "PGDATABASE",
+  // Vercel
+  "VERCEL",
+  "VERCEL_URL",
+  "VERCEL_ENV",
+  // Misc hosting
+  "HEROKU",
+  "RENDER",
+  "RAILWAY",
+  // CI
+  "GITHUB_ACTIONS",
+  "GITLAB_CI",
+  // Build
+  "ANALYZE",
+  "DEBUG",
+  "VERBOSE",
+  "VERSION",
+  // Common app config (extended)
+  "NEXTAUTH_URL",
+  "NEXTAUTH_SECRET",
+  "AUTH_SECRET",
+  "AUTH_URL",
+  "NEXT_PUBLIC_SUPABASE_URL",
+  "NEXT_PUBLIC_SUPABASE_ANON_KEY",
+  "NEXT_PUBLIC_CLERK_PUBLISHABLE_KEY",
+  "CLERK_SECRET_KEY",
+  "NEXT_PUBLIC_POSTHOG_KEY",
+  "NEXT_PUBLIC_POSTHOG_HOST",
+  "UPSTASH_REDIS_REST_URL",
+  "UPSTASH_REDIS_REST_TOKEN",
+  "TURSO_DATABASE_URL",
+  "TURSO_AUTH_TOKEN",
+  "KV_URL",
+  "KV_REST_API_URL",
+  "KV_REST_API_TOKEN",
+  "BLOB_READ_WRITE_TOKEN",
+  "EDGE_CONFIG",
+  "CRON_SECRET",
+  "WEBHOOK_SECRET"
+]);
+function isWellKnownEnvVar(name) {
+  if (WELL_KNOWN_EXACT.has(name)) return true;
+  return WELL_KNOWN_PREFIXES.some((prefix) => name.startsWith(prefix));
+}
+function levenshtein(a, b) {
+  const m = a.length, n = b.length;
+  const dp = Array.from(
+    { length: m + 1 },
+    (_, i) => Array.from({ length: n + 1 }, (_2, j) => i === 0 ? j : j === 0 ? i : 0)
+  );
+  for (let i = 1; i <= m; i++) {
+    for (let j = 1; j <= n; j++) {
+      dp[i][j] = a[i - 1] === b[j - 1] ? dp[i - 1][j - 1] : 1 + Math.min(dp[i - 1][j], dp[i][j - 1], dp[i - 1][j - 1]);
+    }
+  }
+  return dp[m][n];
+}
+var EnvVarEngine = class {
+  constructor(_envIndex, optsOrThreshold = {}) {
+    this._envIndex = _envIndex;
+    this._resolvedOpts = typeof optsOrThreshold === "number" ? { confidenceThreshold: optsOrThreshold } : optsOrThreshold;
+  }
+  id = "env_var";
+  _resolvedOpts;
+  get _confidenceThreshold() {
+    return this._resolvedOpts.confidenceThreshold ?? 0.75;
+  }
+  get _exampleOnly() {
+    return this._resolvedOpts.exampleOnly ?? false;
+  }
+  get _noEnvFiles() {
+    return this._resolvedOpts.noEnvFiles ?? false;
+  }
+  async scan(delta, signal) {
+    if (signal?.aborted) return [];
+    if (this._noEnvFiles) return [];
+    if (this._envIndex.index.size === 0) return [];
+    const source = delta.fullText;
+    if (!source.includes("process.env") && !source.includes("import.meta.env")) return [];
+    try {
+      const findings = [];
+      const lines = delta.lines ?? source.split("\n");
+      let inBlockComment = false;
+      const seen = /* @__PURE__ */ new Set();
+      for (let lineNum = 0; lineNum < lines.length; lineNum++) {
+        if (signal?.aborted) break;
+        const line = lines[lineNum];
+        if (inBlockComment) {
+          if (line.includes("*/")) inBlockComment = false;
+          continue;
+        }
+        const trimmed = line.trimStart();
+        if (trimmed.startsWith("//") || trimmed.startsWith("#")) continue;
+        if (trimmed.startsWith("/*")) {
+          if (!line.includes("*/")) inBlockComment = true;
+          continue;
+        }
+        if (trimmed.startsWith("*")) continue;
+        if (/^\s*(?:type\s|interface\s|declare\s)/.test(line)) continue;
+        DESTRUCTURE_PATTERN.lastIndex = 0;
+        let dm;
+        while ((dm = DESTRUCTURE_PATTERN.exec(line)) !== null) {
+          const vars = dm[1].split(",").map((v) => {
+            const trimmedVar = v.trim();
+            const colonIdx = trimmedVar.indexOf(":");
+            const eqIdx = trimmedVar.indexOf("=");
+            const hasDefault = eqIdx !== -1;
+            let name = trimmedVar;
+            if (colonIdx !== -1 && (eqIdx === -1 || colonIdx < eqIdx)) {
+              name = trimmedVar.slice(0, colonIdx).trim();
+            } else if (eqIdx !== -1) {
+              name = trimmedVar.slice(0, eqIdx).trim();
+            }
+            return { name, hasDefault };
+          });
+          for (const { name, hasDefault } of vars) {
+            if (!name || !/^[A-Z_][A-Z0-9_]*$/.test(name)) continue;
+            if (this._envIndex.has(name)) continue;
+            if (isWellKnownEnvVar(name)) continue;
+            if (hasDefault) continue;
+            const dedupeKey = `${lineNum}:${name}`;
+            if (seen.has(dedupeKey)) continue;
+            seen.add(dedupeKey);
+            const suggestion = this._findSimilar(name);
+            const confidence = suggestion ? 0.9 : 0.85;
+            if (confidence < this._confidenceThreshold) continue;
+            const severity = this._exampleOnly ? "info" : suggestion ? "high" : "info";
+            findings.push({
+              id: deterministicId(delta.documentUri, lineNum + 1, name),
+              engine: "env_var",
+              severity,
+              category: "env_var",
+              file: delta.documentUri,
+              line: lineNum + 1,
+              column: dm.index,
+              endLine: lineNum + 1,
+              endColumn: dm.index + dm[0].length,
+              message: this._exampleOnly ? `\`${name}\` (destructured from process.env) is not documented in .env.example` : `\`${name}\` (destructured from process.env) is not defined in .env or CI config`,
+              evidence: dm[0],
+              suggestion: suggestion ? `Typo? Similar: ${suggestion}` : `Add ${name} to your .env file`,
+              confidence,
+              autoFixable: false,
+              ruleId: "ENV001"
+            });
+          }
+        }
+        BRACKET_PATTERN.lastIndex = 0;
+        let bm;
+        while ((bm = BRACKET_PATTERN.exec(line)) !== null) {
+          const varName = bm[1];
+          if (this._envIndex.has(varName)) continue;
+          const suggestion = this._findSimilar(varName);
+          if (isWellKnownEnvVar(varName) && !suggestion) continue;
+          const matchEnd = bm.index + bm[0].length;
+          if (hasFallback(line, bm.index, matchEnd)) continue;
+          const dedupeKey = `${lineNum}:${varName}`;
+          if (seen.has(dedupeKey)) continue;
+          seen.add(dedupeKey);
+          const confidence = suggestion ? 0.9 : 0.85;
+          if (confidence < this._confidenceThreshold) continue;
+          const severity = this._exampleOnly ? "info" : suggestion ? "high" : "info";
+          findings.push({
+            id: deterministicId(delta.documentUri, lineNum + 1, varName),
+            engine: "env_var",
+            severity,
+            category: "env_var",
+            file: delta.documentUri,
+            line: lineNum + 1,
+            column: bm.index,
+            endLine: lineNum + 1,
+            endColumn: matchEnd,
+            message: this._exampleOnly ? `\`${varName}\` is not documented in .env.example` : `\`${varName}\` is not defined in .env or CI config`,
+            evidence: bm[0],
+            suggestion: suggestion ? `Typo? Similar: ${suggestion}` : `Add ${varName} to your .env file`,
+            confidence,
+            autoFixable: false,
+            ruleId: "ENV001"
+          });
+        }
+        IMPORT_META_ENV_PATTERN.lastIndex = 0;
+        let iem;
+        while ((iem = IMPORT_META_ENV_PATTERN.exec(line)) !== null) {
+          const varName = iem[1];
+          if (this._envIndex.has(varName)) continue;
+          const suggestion = this._findSimilar(varName);
+          if (isWellKnownEnvVar(varName) && !suggestion) continue;
+          const matchEnd = iem.index + iem[0].length;
+          if (hasFallback(line, iem.index, matchEnd)) continue;
+          const dedupeKey = `${lineNum}:${varName}`;
+          if (seen.has(dedupeKey)) continue;
+          seen.add(dedupeKey);
+          const confidence = suggestion ? 0.9 : 0.85;
+          if (confidence < this._confidenceThreshold) continue;
+          const severity = this._exampleOnly ? "info" : suggestion ? "high" : "info";
+          findings.push({
+            id: deterministicId(delta.documentUri, lineNum + 1, varName),
+            engine: "env_var",
+            severity,
+            category: "env_var",
+            file: delta.documentUri,
+            line: lineNum + 1,
+            column: iem.index,
+            endLine: lineNum + 1,
+            endColumn: matchEnd,
+            message: `\`${varName}\` is not defined in .env or CI config`,
+            evidence: `import.meta.env.${varName}`,
+            suggestion: suggestion ? `Typo? Similar: ${suggestion}` : `Add ${varName} to your .env file`,
+            confidence,
+            autoFixable: false,
+            ruleId: "ENV001"
+          });
+        }
+        ENV_PATTERN.lastIndex = 0;
+        let m;
+        while ((m = ENV_PATTERN.exec(line)) !== null) {
+          const varName = m[1];
+          if (this._envIndex.has(varName)) continue;
+          const suggestion = this._findSimilar(varName);
+          if (isWellKnownEnvVar(varName) && !suggestion) continue;
+          const matchEnd = m.index + m[0].length;
+          if (hasFallback(line, m.index, matchEnd)) continue;
+          const dedupeKey = `${lineNum}:${varName}`;
+          if (seen.has(dedupeKey)) continue;
+          seen.add(dedupeKey);
+          const column = m.index;
+          const confidence = suggestion ? 0.9 : 0.85;
+          if (confidence < this._confidenceThreshold) continue;
+          const isToggle = isConditionalCheck(line, m.index);
+          let severity;
+          if (this._exampleOnly) {
+            severity = "info";
+          } else if (suggestion) {
+            severity = "high";
+          } else if (isToggle) {
+            severity = "info";
+          } else {
+            severity = "info";
+          }
+          findings.push({
+            id: deterministicId(delta.documentUri, lineNum + 1, varName),
+            engine: "env_var",
+            severity,
+            category: "env_var",
+            file: delta.documentUri,
+            line: lineNum + 1,
+            column,
+            endLine: lineNum + 1,
+            endColumn: column + `process.env.${varName}`.length,
+            message: this._exampleOnly ? `\`${varName}\` is not documented in .env.example (informational)` : `\`${varName}\` is not defined in .env or CI config`,
+            evidence: `process.env.${varName}`,
+            suggestion: suggestion ? `Typo? Similar: ${suggestion}` : `Add ${varName} to your .env file`,
+            confidence,
+            autoFixable: false,
+            ruleId: "ENV001"
+          });
+        }
+      }
+      return findings;
+    } catch (error) {
+      const errorMsg = error instanceof Error ? error.message : String(error);
+      console.error(`[EnvVarEngine] Scan failed for ${delta.documentUri}:`, errorMsg);
+      return [{
+        id: deterministicId(delta.documentUri, 1, "ENGINE_ERROR"),
+        engine: "env_var",
+        severity: "medium",
+        category: "engine_error",
+        file: delta.documentUri,
+        line: 1,
+        column: 0,
+        endLine: 1,
+        endColumn: 0,
+        message: `Environment Variable Engine scan failed: ${errorMsg}`,
+        evidence: "Engine internal error",
+        suggestion: "Check file syntax and report this issue if it persists",
+        confidence: 1,
+        autoFixable: false,
+        ruleId: "ENGINE_ERROR"
+      }];
+    }
+  }
+  _findSimilar(name) {
+    let best;
+    let bestDist = 3;
+    for (const v of this._envIndex.index) {
+      if (Math.abs(v.length - name.length) >= bestDist) continue;
+      const d = levenshtein(name, v);
+      if (d <= 2 && d < bestDist) {
+        bestDist = d;
+        best = v;
+      }
+    }
+    if (!best) {
+      const parts = name.split("_");
+      if (parts.length >= 3) {
+        const prefix = parts.slice(0, -1).join("_") + "_";
+        for (const v of this._envIndex.index) {
+          if (v.startsWith(prefix) && v !== name) {
+            best = v;
+            break;
+          }
+        }
+      }
+    }
+    return best;
+  }
+};
+
+export { EnvVarEngine };