@vibecheckai/cli 2.5.1

package/dist/scanner/parallel.d.ts

@@ -0,0 +1,43 @@
+/**
+ * Parallel scanning orchestrator with multi-stage progress
+ */
+import { ScanSecretsResult } from '../commands/scan-secrets';
+import { ScanVulnResult } from '../commands/scan-vulnerabilities';
+export interface ParallelScanOptions {
+    path: string;
+    type: 'all' | 'secrets' | 'vulnerabilities' | 'compliance';
+    format: 'table' | 'json' | 'sarif' | 'markdown';
+    output?: string;
+    excludeTests?: boolean;
+    minConfidence?: number;
+    failOnDetection?: boolean;
+    failOnCritical?: boolean;
+    failOnHigh?: boolean;
+    evidence?: boolean;
+    complianceFramework?: string;
+    since?: string;
+    baseline?: string;
+}
+export interface ParallelScanResult {
+    secrets?: ScanSecretsResult;
+    vulnerabilities?: ScanVulnResult;
+    compliance?: any;
+    duration: number;
+    timestamp: string;
+}
+interface ScanProgress {
+    stage: string;
+    message: string;
+    completed: boolean;
+}
+export declare class ParallelScanner {
+    private progressCallbacks;
+    onProgress(module: string, callback: (progress: ScanProgress) => void): void;
+    private updateProgress;
+    scan(projectPath: string, options: ParallelScanOptions): Promise<ParallelScanResult>;
+    private runSecretsScanner;
+    private runVulnerabilitiesScanner;
+    private runComplianceScanner;
+}
+export {};
+//# sourceMappingURL=parallel.d.ts.map

package/dist/scanner/parallel.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"parallel.d.ts","sourceRoot":"","sources":["../../src/scanner/parallel.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EAAe,iBAAiB,EAAE,MAAM,0BAA0B,CAAC;AAC1E,OAAO,EAAuB,cAAc,EAAE,MAAM,kCAAkC,CAAC;AAEvF,MAAM,WAAW,mBAAmB;IAClC,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,KAAK,GAAG,SAAS,GAAG,iBAAiB,GAAG,YAAY,CAAC;IAC3D,MAAM,EAAE,OAAO,GAAG,MAAM,GAAG,OAAO,GAAG,UAAU,CAAC;IAChD,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,eAAe,CAAC,EAAE,OAAO,CAAC;IAC1B,cAAc,CAAC,EAAE,OAAO,CAAC;IACzB,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,kBAAkB;IACjC,OAAO,CAAC,EAAE,iBAAiB,CAAC;IAC5B,eAAe,CAAC,EAAE,cAAc,CAAC;IACjC,UAAU,CAAC,EAAE,GAAG,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,UAAU,YAAY;IACpB,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,OAAO,CAAC;CACpB;AAED,qBAAa,eAAe;IAC1B,OAAO,CAAC,iBAAiB,CAA4D;IAErF,UAAU,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,QAAQ,EAAE,YAAY,KAAK,IAAI,GAAG,IAAI;IAI5E,OAAO,CAAC,cAAc;IAOhB,IAAI,CAAC,WAAW,EAAE,MAAM,EAAE,OAAO,EAAE,mBAAmB,GAAG,OAAO,CAAC,kBAAkB,CAAC;YA0C5E,iBAAiB;YAkBjB,yBAAyB;YAgBzB,oBAAoB;CAoBnC"}

package/dist/scanner/parallel.js

@@ -0,0 +1,99 @@
+"use strict";
+/**
+ * Parallel scanning orchestrator with multi-stage progress
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ParallelScanner = void 0;
+const scan_secrets_1 = require("../commands/scan-secrets");
+const scan_vulnerabilities_1 = require("../commands/scan-vulnerabilities");
+class ParallelScanner {
+    constructor() {
+        this.progressCallbacks = new Map();
+    }
+    onProgress(module, callback) {
+        this.progressCallbacks.set(module, callback);
+    }
+    updateProgress(module, stage, message, completed = false) {
+        const callback = this.progressCallbacks.get(module);
+        if (callback) {
+            callback({ stage, message, completed });
+        }
+    }
+    async scan(projectPath, options) {
+        const startTime = Date.now();
+        const tasks = [];
+        const result = {
+            duration: 0,
+            timestamp: new Date().toISOString(),
+        };
+        // Secrets scan
+        if (options.type === 'all' || options.type === 'secrets') {
+            tasks.push(this.runSecretsScanner(projectPath, options).then(res => {
+                result.secrets = res;
+            }));
+        }
+        // Vulnerabilities scan
+        if (options.type === 'all' || options.type === 'vulnerabilities') {
+            tasks.push(this.runVulnerabilitiesScanner(projectPath, options).then(res => {
+                result.vulnerabilities = res;
+            }));
+        }
+        // Compliance scan (if selected)
+        if (options.type === 'compliance') {
+            tasks.push(this.runComplianceScanner(projectPath, options).then(res => {
+                result.compliance = res;
+            }));
+        }
+        // Run all scans in parallel
+        await Promise.all(tasks);
+        result.duration = Date.now() - startTime;
+        return result;
+    }
+    async runSecretsScanner(projectPath, options) {
+        this.updateProgress('secrets', 'init', 'Initializing secret scanner...');
+        this.updateProgress('secrets', 'scan', 'Scanning files for secrets...');
+        const result = await (0, scan_secrets_1.scanSecrets)(projectPath, {
+            path: projectPath,
+            format: options.format === 'markdown' ? 'table' : options.format,
+            output: options.output,
+            excludeTests: options.excludeTests || false,
+            minConfidence: options.minConfidence,
+            failOnDetection: options.failOnDetection || false,
+            evidence: options.evidence || false,
+        });
+        this.updateProgress('secrets', 'complete', `Found ${result.findings.length} secrets`, true);
+        return result;
+    }
+    async runVulnerabilitiesScanner(projectPath, options) {
+        this.updateProgress('vulnerabilities', 'init', 'Initializing vulnerability scanner...');
+        this.updateProgress('vulnerabilities', 'scan', 'Analyzing dependencies...');
+        const result = await (0, scan_vulnerabilities_1.scanVulnerabilities)(projectPath, {
+            format: options.format,
+            output: options.output,
+            failOnCritical: options.failOnCritical,
+            failOnHigh: options.failOnHigh,
+        });
+        const total = result.summary.critical + result.summary.high + result.summary.medium + result.summary.low;
+        this.updateProgress('vulnerabilities', 'complete', `Found ${total} vulnerabilities`, true);
+        return result;
+    }
+    async runComplianceScanner(projectPath, options) {
+        this.updateProgress('compliance', 'init', 'Initializing compliance scanner...');
+        this.updateProgress('compliance', 'scan', `Running ${options.complianceFramework || 'SOC2'} checks...`);
+        // Mock compliance result
+        const result = {
+            projectPath,
+            framework: options.complianceFramework || 'SOC2',
+            overallScore: 78,
+            categories: [
+                { name: 'Access Control', score: 85, status: 'pass', checks: 12, passed: 10 },
+                { name: 'Data Encryption', score: 92, status: 'pass', checks: 8, passed: 7 },
+                { name: 'Audit Logging', score: 65, status: 'warning', checks: 10, passed: 6 },
+            ],
+        };
+        this.updateProgress('compliance', 'complete', `Score: ${result.overallScore}%`, true);
+        return result;
+    }
+}
+exports.ParallelScanner = ParallelScanner;
+//# sourceMappingURL=parallel.js.map

package/dist/scanner/parallel.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"parallel.js","sourceRoot":"","sources":["../../src/scanner/parallel.ts"],"names":[],"mappings":";AAAA;;GAEG;;;AAEH,2DAA0E;AAC1E,2EAAuF;AAgCvF,MAAa,eAAe;IAA5B;QACU,sBAAiB,GAAkD,IAAI,GAAG,EAAE,CAAC;IA6GvF,CAAC;IA3GC,UAAU,CAAC,MAAc,EAAE,QAA0C;QACnE,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;IAC/C,CAAC;IAEO,cAAc,CAAC,MAAc,EAAE,KAAa,EAAE,OAAe,EAAE,SAAS,GAAG,KAAK;QACtF,MAAM,QAAQ,GAAG,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QACpD,IAAI,QAAQ,EAAE,CAAC;YACb,QAAQ,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC,CAAC;QAC1C,CAAC;IACH,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,WAAmB,EAAE,OAA4B;QAC1D,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAC7B,MAAM,KAAK,GAAmB,EAAE,CAAC;QACjC,MAAM,MAAM,GAAuB;YACjC,QAAQ,EAAE,CAAC;YACX,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;SACpC,CAAC;QAEF,eAAe;QACf,IAAI,OAAO,CAAC,IAAI,KAAK,KAAK,IAAI,OAAO,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;YACzD,KAAK,CAAC,IAAI,CACR,IAAI,CAAC,iBAAiB,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE;gBACtD,MAAM,CAAC,OAAO,GAAG,GAAG,CAAC;YACvB,CAAC,CAAC,CACH,CAAC;QACJ,CAAC;QAED,uBAAuB;QACvB,IAAI,OAAO,CAAC,IAAI,KAAK,KAAK,IAAI,OAAO,CAAC,IAAI,KAAK,iBAAiB,EAAE,CAAC;YACjE,KAAK,CAAC,IAAI,CACR,IAAI,CAAC,yBAAyB,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE;gBAC9D,MAAM,CAAC,eAAe,GAAG,GAAG,CAAC;YAC/B,CAAC,CAAC,CACH,CAAC;QACJ,CAAC;QAED,gCAAgC;QAChC,IAAI,OAAO,CAAC,IAAI,KAAK,YAAY,EAAE,CAAC;YAClC,KAAK,CAAC,IAAI,CACR,IAAI,CAAC,oBAAoB,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE;gBACzD,MAAM,CAAC,UAAU,GAAG,GAAG,CAAC;YAC1B,CAAC,CAAC,CACH,CAAC;QACJ,CAAC;QAED,4BAA4B;QAC5B,MAAM,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QAEzB,MAAM,CAAC,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC;QACzC,OAAO,MAAM,CAAC;IAChB,CAAC;IAEO,KAAK,CAAC,iBAAiB,CAAC,WAAmB,EAAE,OAA4B;QAC/E,IAAI,CAAC,cAAc,CAAC,SAAS,EAAE,MAAM,EAAE,gCAAgC,CAAC,CAAC;QAEzE,IAAI,CAAC,cAAc,CAAC,SAAS,EAAE,MAAM,EAAE,+BAA+B,CAAC,CAAC;QACxE,MAAM,MAAM,GAAG,MAAM,IAAA,0BAAW,EAAC,WAAW,EAAE;YAC5C,IAAI,EAAE,WAAW;YACjB,MAAM,EAAE,OAAO,CAAC,MAAM,KAAK,UAAU,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM;YAChE,MAAM,EAAE,OAAO,CAAC,MAAM;YACtB,YAAY,EAAE,OAAO,CAAC,YAAY,IAAI,KAAK;YAC3C,aAAa,EAAE,OAAO,CAAC,aAAa;YACpC,eAAe,EAAE,OAAO,CAAC,eAAe,IAAI,KAAK;YACjD,QAAQ,EAAE,OAAO,CAAC,QAAQ,IAAI,KAAK;SACpC,CAAC,CAAC;QAEH,IAAI,CAAC,cAAc,CAAC,SAAS,EAAE,UAAU,EAAE,SAAS,MAAM,CAAC,QAAQ,CAAC,MAAM,UAAU,EAAE,IAAI,CAAC,CAAC;QAC5F,OAAO,MAAM,CAAC;IAChB,CAAC;IAEO,KAAK,CAAC,yBAAyB,CAAC,WAAmB,EAAE,OAA4B;QACvF,IAAI,CAAC,cAAc,CAAC,iBAAiB,EAAE,MAAM,EAAE,uCAAuC,CAAC,CAAC;QAExF,IAAI,CAAC,cAAc,CAAC,iBAAiB,EAAE,MAAM,EAAE,2BAA2B,CAAC,CAAC;QAC5E,MAAM,MAAM,GAAG,MAAM,IAAA,0CAAmB,EAAC,WAAW,EAAE;YACpD,MAAM,EAAE,OAAO,CAAC,MAAM;YACtB,MAAM,EAAE,OAAO,CAAC,MAAM;YACtB,cAAc,EAAE,OAAO,CAAC,cAAc;YACtC,UAAU,EAAE,OAAO,CAAC,UAAU;SAC/B,CAAC,CAAC;QAEH,MAAM,KAAK,GAAG,MAAM,CAAC,OAAO,CAAC,QAAQ,GAAG,MAAM,CAAC,OAAO,CAAC,IAAI,GAAG,MAAM,CAAC,OAAO,CAAC,MAAM,GAAG,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC;QACzG,IAAI,CAAC,cAAc,CAAC,iBAAiB,EAAE,UAAU,EAAE,SAAS,KAAK,kBAAkB,EAAE,IAAI,CAAC,CAAC;QAC3F,OAAO,MAAM,CAAC;IAChB,CAAC;IAEO,KAAK,CAAC,oBAAoB,CAAC,WAAmB,EAAE,OAA4B;QAClF,IAAI,CAAC,cAAc,CAAC,YAAY,EAAE,MAAM,EAAE,oCAAoC,CAAC,CAAC;QAEhF,IAAI,CAAC,cAAc,CAAC,YAAY,EAAE,MAAM,EAAE,WAAW,OAAO,CAAC,mBAAmB,IAAI,MAAM,YAAY,CAAC,CAAC;QAExG,yBAAyB;QACzB,MAAM,MAAM,GAAG;YACb,WAAW;YACX,SAAS,EAAE,OAAO,CAAC,mBAAmB,IAAI,MAAM;YAChD,YAAY,EAAE,EAAE;YAChB,UAAU,EAAE;gBACV,EAAE,IAAI,EAAE,gBAAgB,EAAE,KAAK,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE;gBAC7E,EAAE,IAAI,EAAE,iBAAiB,EAAE,KAAK,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE;gBAC5E,EAAE,IAAI,EAAE,eAAe,EAAE,KAAK,EAAE,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,CAAC,EAAE;aAC/E;SACF,CAAC;QAEF,IAAI,CAAC,cAAc,CAAC,YAAY,EAAE,UAAU,EAAE,UAAU,MAAM,CAAC,YAAY,GAAG,EAAE,IAAI,CAAC,CAAC;QACtF,OAAO,MAAM,CAAC;IAChB,CAAC;CACF;AA9GD,0CA8GC"}

package/dist/scanner/placeholder-detector.d.ts

@@ -0,0 +1,56 @@
+/**
+ * Placeholder Detector with Rule-Tiered Approach
+ *
+ * Implements sophisticated placeholder detection with multiple confidence levels:
+ * - Ignore list (safe): HTML placeholder attributes by default
+ * - High-confidence: UI text nodes, mock responses
+ * - Medium-confidence: "placeholder" in variable names or comments
+ */
+export interface PlaceholderFinding {
+    type: 'ui_text' | 'html_attribute' | 'mock_response' | 'comment' | 'variable';
+    file: string;
+    line: number;
+    column?: number;
+    match: string;
+    confidence: 'high' | 'medium' | 'low';
+    snippet?: string;
+}
+export interface PlaceholderDetectorConfig {
+    /** Count HTML placeholder attributes (default: false) */
+    countInputPlaceholders?: boolean;
+    /** Ignore patterns (regex) */
+    ignorePatterns?: RegExp[];
+}
+export declare class PlaceholderDetector {
+    private config;
+    constructor(config?: PlaceholderDetectorConfig);
+    /**
+     * Detect placeholders in source code
+     */
+    detectPlaceholders(filePath: string, content: string): Promise<PlaceholderFinding[]>;
+    /**
+     * High-confidence placeholders: UI text nodes and mock responses
+     */
+    private detectHighConfidence;
+    /**
+     * Medium-confidence placeholders: comments and variable names
+     */
+    private detectMediumConfidence;
+    /**
+     * Detect HTML placeholder attributes
+     */
+    private detectHtmlPlaceholderAttributes;
+    /**
+     * Check if line is an HTML placeholder attribute
+     */
+    private isHtmlPlaceholderAttribute;
+    /**
+     * Find all matches in a string with their indices
+     */
+    private findAllMatches;
+    /**
+     * Count placeholders by type
+     */
+    static countByType(findings: PlaceholderFinding[]): Record<string, number>;
+}
+//# sourceMappingURL=placeholder-detector.d.ts.map

package/dist/scanner/placeholder-detector.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"placeholder-detector.d.ts","sourceRoot":"","sources":["../../src/scanner/placeholder-detector.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,MAAM,WAAW,kBAAkB;IACjC,IAAI,EAAE,SAAS,GAAG,gBAAgB,GAAG,eAAe,GAAG,SAAS,GAAG,UAAU,CAAC;IAC9E,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,KAAK,EAAE,MAAM,CAAC;IACd,UAAU,EAAE,MAAM,GAAG,QAAQ,GAAG,KAAK,CAAC;IACtC,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,yBAAyB;IACxC,yDAAyD;IACzD,sBAAsB,CAAC,EAAE,OAAO,CAAC;IACjC,8BAA8B;IAC9B,cAAc,CAAC,EAAE,MAAM,EAAE,CAAC;CAC3B;AAED,qBAAa,mBAAmB;IAC9B,OAAO,CAAC,MAAM,CAAsC;gBAExC,MAAM,GAAE,yBAA8B;IAOlD;;OAEG;IACG,kBAAkB,CACtB,QAAQ,EAAE,MAAM,EAChB,OAAO,EAAE,MAAM,GACd,OAAO,CAAC,kBAAkB,EAAE,CAAC;IAsDhC;;OAEG;IACH,OAAO,CAAC,oBAAoB;IA6D5B;;OAEG;IACH,OAAO,CAAC,sBAAsB;IAuD9B;;OAEG;IACH,OAAO,CAAC,+BAA+B;IAiCvC;;OAEG;IACH,OAAO,CAAC,0BAA0B;IAIlC;;OAEG;IACH,OAAO,CAAC,cAAc;IAgBtB;;OAEG;IACH,MAAM,CAAC,WAAW,CAChB,QAAQ,EAAE,kBAAkB,EAAE,GAC7B,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC;CAgB1B"}

package/dist/scanner/placeholder-detector.js

@@ -0,0 +1,220 @@
+"use strict";
+/**
+ * Placeholder Detector with Rule-Tiered Approach
+ *
+ * Implements sophisticated placeholder detection with multiple confidence levels:
+ * - Ignore list (safe): HTML placeholder attributes by default
+ * - High-confidence: UI text nodes, mock responses
+ * - Medium-confidence: "placeholder" in variable names or comments
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.PlaceholderDetector = void 0;
+class PlaceholderDetector {
+    constructor(config = {}) {
+        this.config = {
+            countInputPlaceholders: config.countInputPlaceholders ?? false,
+            ignorePatterns: config.ignorePatterns ?? [],
+        };
+    }
+    /**
+     * Detect placeholders in source code
+     */
+    async detectPlaceholders(filePath, content) {
+        const findings = [];
+        const lines = content.split('\n');
+        for (let lineNum = 0; lineNum < lines.length; lineNum++) {
+            const line = lines[lineNum];
+            const lineContent = line.trim();
+            // Skip empty lines
+            if (!lineContent)
+                continue;
+            // High-confidence patterns: UI text nodes and mock responses
+            const highConfidenceFindings = this.detectHighConfidence(filePath, lineNum + 1, lineContent, line);
+            findings.push(...highConfidenceFindings);
+            // Medium-confidence patterns: comments and variable names
+            if (!this.config.countInputPlaceholders) {
+                // Skip HTML placeholder attributes unless explicitly enabled
+                if (this.isHtmlPlaceholderAttribute(lineContent)) {
+                    continue;
+                }
+            }
+            else {
+                // Count HTML placeholder attributes if enabled
+                const htmlFindings = this.detectHtmlPlaceholderAttributes(filePath, lineNum + 1, lineContent, line);
+                findings.push(...htmlFindings);
+            }
+            const mediumConfidenceFindings = this.detectMediumConfidence(filePath, lineNum + 1, lineContent, line);
+            findings.push(...mediumConfidenceFindings);
+        }
+        // Filter out ignored patterns
+        return findings.filter((finding) => {
+            return !this.config.ignorePatterns.some((pattern) => pattern.test(finding.match));
+        });
+    }
+    /**
+     * High-confidence placeholders: UI text nodes and mock responses
+     */
+    detectHighConfidence(filePath, lineNum, lineContent, originalLine) {
+        const findings = [];
+        // UI text patterns
+        const uiTextPatterns = [
+            /["'`]Coming\s+soon["'`]/i,
+            /["'`]Todo\s+App["'`]/i,
+            /["'`]Chart\s+Placeholder/i,
+            /["'`]Placeholder\.\.\.["'`]/i,
+            /["'`]TODO:.*["'`]/i,
+            /["'`]FIXME:.*["'`]/i,
+        ];
+        for (const pattern of uiTextPatterns) {
+            const matches = this.findAllMatches(lineContent, pattern);
+            for (const match of matches) {
+                findings.push({
+                    type: 'ui_text',
+                    file: filePath,
+                    line: lineNum,
+                    column: match.index,
+                    match: match.text,
+                    confidence: 'high',
+                    snippet: originalLine.trim(),
+                });
+            }
+        }
+        // Mock response patterns
+        const mockResponsePatterns = [
+            /"success":\s*true.*"TODO"/i,
+            /"success":\s*true.*"FIXME"/i,
+            /"mock":\s*true/i,
+            /"isMock":\s*true/i,
+            /mockData\s*[:=]/i,
+            /lorem\s+ipsum/i,
+        ];
+        for (const pattern of mockResponsePatterns) {
+            const matches = this.findAllMatches(lineContent, pattern);
+            for (const match of matches) {
+                findings.push({
+                    type: 'mock_response',
+                    file: filePath,
+                    line: lineNum,
+                    column: match.index,
+                    match: match.text,
+                    confidence: 'high',
+                    snippet: originalLine.trim(),
+                });
+            }
+        }
+        return findings;
+    }
+    /**
+     * Medium-confidence placeholders: comments and variable names
+     */
+    detectMediumConfidence(filePath, lineNum, lineContent, originalLine) {
+        const findings = [];
+        // Comment patterns (medium confidence)
+        const commentPatterns = [
+            /\/\/.*\bplaceholder\b/i,
+            /\/\*.*\bplaceholder\b.*\*\//i,
+            /\/\/.*TODO:/i,
+            /\/\/.*FIXME:/i,
+        ];
+        for (const pattern of commentPatterns) {
+            const matches = this.findAllMatches(lineContent, pattern);
+            for (const match of matches) {
+                findings.push({
+                    type: 'comment',
+                    file: filePath,
+                    line: lineNum,
+                    column: match.index,
+                    match: match.text,
+                    confidence: 'medium',
+                    snippet: originalLine.trim(),
+                });
+            }
+        }
+        // Variable name patterns (medium confidence)
+        const variablePatterns = [
+            /\bplaceholder[A-Z]\w*/i,
+            /\bplaceholder\w*[:=]/i,
+        ];
+        for (const pattern of variablePatterns) {
+            const matches = this.findAllMatches(lineContent, pattern);
+            for (const match of matches) {
+                findings.push({
+                    type: 'variable',
+                    file: filePath,
+                    line: lineNum,
+                    column: match.index,
+                    match: match.text,
+                    confidence: 'medium',
+                    snippet: originalLine.trim(),
+                });
+            }
+        }
+        return findings;
+    }
+    /**
+     * Detect HTML placeholder attributes
+     */
+    detectHtmlPlaceholderAttributes(filePath, lineNum, lineContent, originalLine) {
+        const findings = [];
+        // HTML placeholder attribute pattern
+        const htmlPlaceholderPattern = /placeholder\s*=\s*["']([^"']+)["']/gi;
+        let match;
+        while ((match = htmlPlaceholderPattern.exec(lineContent)) !== null) {
+            const placeholderValue = match[1];
+            // Only flag if the placeholder value looks like actual placeholder text
+            // (not user-facing labels like "Enter your email")
+            if (/placeholder|coming soon|todo|fixme|mock|lorem/i.test(placeholderValue)) {
+                findings.push({
+                    type: 'html_attribute',
+                    file: filePath,
+                    line: lineNum,
+                    column: match.index,
+                    match: match[0],
+                    confidence: 'high',
+                    snippet: originalLine.trim(),
+                });
+            }
+        }
+        return findings;
+    }
+    /**
+     * Check if line is an HTML placeholder attribute
+     */
+    isHtmlPlaceholderAttribute(lineContent) {
+        return /<input[^>]*placeholder\s*=/i.test(lineContent);
+    }
+    /**
+     * Find all matches in a string with their indices
+     */
+    findAllMatches(text, pattern) {
+        const matches = [];
+        let match;
+        const globalPattern = new RegExp(pattern.source, pattern.flags + 'g');
+        while ((match = globalPattern.exec(text)) !== null) {
+            matches.push({
+                text: match[0],
+                index: match.index,
+            });
+        }
+        return matches;
+    }
+    /**
+     * Count placeholders by type
+     */
+    static countByType(findings) {
+        const counts = {
+            ui_text: 0,
+            html_attribute: 0,
+            mock_response: 0,
+            comment: 0,
+            variable: 0,
+            total: findings.length,
+        };
+        for (const finding of findings) {
+            counts[finding.type] = (counts[finding.type] || 0) + 1;
+        }
+        return counts;
+    }
+}
+exports.PlaceholderDetector = PlaceholderDetector;
+//# sourceMappingURL=placeholder-detector.js.map

package/dist/scanner/placeholder-detector.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"placeholder-detector.js","sourceRoot":"","sources":["../../src/scanner/placeholder-detector.ts"],"names":[],"mappings":";AAAA;;;;;;;GAOG;;;AAmBH,MAAa,mBAAmB;IAG9B,YAAY,SAAoC,EAAE;QAChD,IAAI,CAAC,MAAM,GAAG;YACZ,sBAAsB,EAAE,MAAM,CAAC,sBAAsB,IAAI,KAAK;YAC9D,cAAc,EAAE,MAAM,CAAC,cAAc,IAAI,EAAE;SAC5C,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,kBAAkB,CACtB,QAAgB,EAChB,OAAe;QAEf,MAAM,QAAQ,GAAyB,EAAE,CAAC;QAC1C,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAElC,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,GAAG,KAAK,CAAC,MAAM,EAAE,OAAO,EAAE,EAAE,CAAC;YACxD,MAAM,IAAI,GAAG,KAAK,CAAC,OAAO,CAAC,CAAC;YAC5B,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;YAEhC,mBAAmB;YACnB,IAAI,CAAC,WAAW;gBAAE,SAAS;YAE3B,6DAA6D;YAC7D,MAAM,sBAAsB,GAAG,IAAI,CAAC,oBAAoB,CACtD,QAAQ,EACR,OAAO,GAAG,CAAC,EACX,WAAW,EACX,IAAI,CACL,CAAC;YACF,QAAQ,CAAC,IAAI,CAAC,GAAG,sBAAsB,CAAC,CAAC;YAEzC,0DAA0D;YAC1D,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,sBAAsB,EAAE,CAAC;gBACxC,6DAA6D;gBAC7D,IAAI,IAAI,CAAC,0BAA0B,CAAC,WAAW,CAAC,EAAE,CAAC;oBACjD,SAAS;gBACX,CAAC;YACH,CAAC;iBAAM,CAAC;gBACN,+CAA+C;gBAC/C,MAAM,YAAY,GAAG,IAAI,CAAC,+BAA+B,CACvD,QAAQ,EACR,OAAO,GAAG,CAAC,EACX,WAAW,EACX,IAAI,CACL,CAAC;gBACF,QAAQ,CAAC,IAAI,CAAC,GAAG,YAAY,CAAC,CAAC;YACjC,CAAC;YAED,MAAM,wBAAwB,GAAG,IAAI,CAAC,sBAAsB,CAC1D,QAAQ,EACR,OAAO,GAAG,CAAC,EACX,WAAW,EACX,IAAI,CACL,CAAC;YACF,QAAQ,CAAC,IAAI,CAAC,GAAG,wBAAwB,CAAC,CAAC;QAC7C,CAAC;QAED,8BAA8B;QAC9B,OAAO,QAAQ,CAAC,MAAM,CAAC,CAAC,OAAO,EAAE,EAAE;YACjC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAClD,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAC5B,CAAC;QACJ,CAAC,CAAC,CAAC;IACL,CAAC;IAED;;OAEG;IACK,oBAAoB,CAC1B,QAAgB,EAChB,OAAe,EACf,WAAmB,EACnB,YAAoB;QAEpB,MAAM,QAAQ,GAAyB,EAAE,CAAC;QAE1C,mBAAmB;QACnB,MAAM,cAAc,GAAG;YACrB,0BAA0B;YAC1B,uBAAuB;YACvB,2BAA2B;YAC3B,8BAA8B;YAC9B,oBAAoB;YACpB,qBAAqB;SACtB,CAAC;QAEF,KAAK,MAAM,OAAO,IAAI,cAAc,EAAE,CAAC;YACrC,MAAM,OAAO,GAAG,IAAI,CAAC,cAAc,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;YAC1D,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;gBAC5B,QAAQ,CAAC,IAAI,CAAC;oBACZ,IAAI,EAAE,SAAS;oBACf,IAAI,EAAE,QAAQ;oBACd,IAAI,EAAE,OAAO;oBACb,MAAM,EAAE,KAAK,CAAC,KAAK;oBACnB,KAAK,EAAE,KAAK,CAAC,IAAI;oBACjB,UAAU,EAAE,MAAM;oBAClB,OAAO,EAAE,YAAY,CAAC,IAAI,EAAE;iBAC7B,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAED,yBAAyB;QACzB,MAAM,oBAAoB,GAAG;YAC3B,4BAA4B;YAC5B,6BAA6B;YAC7B,iBAAiB;YACjB,mBAAmB;YACnB,kBAAkB;YAClB,gBAAgB;SACjB,CAAC;QAEF,KAAK,MAAM,OAAO,IAAI,oBAAoB,EAAE,CAAC;YAC3C,MAAM,OAAO,GAAG,IAAI,CAAC,cAAc,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;YAC1D,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;gBAC5B,QAAQ,CAAC,IAAI,CAAC;oBACZ,IAAI,EAAE,eAAe;oBACrB,IAAI,EAAE,QAAQ;oBACd,IAAI,EAAE,OAAO;oBACb,MAAM,EAAE,KAAK,CAAC,KAAK;oBACnB,KAAK,EAAE,KAAK,CAAC,IAAI;oBACjB,UAAU,EAAE,MAAM;oBAClB,OAAO,EAAE,YAAY,CAAC,IAAI,EAAE;iBAC7B,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAED,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED;;OAEG;IACK,sBAAsB,CAC5B,QAAgB,EAChB,OAAe,EACf,WAAmB,EACnB,YAAoB;QAEpB,MAAM,QAAQ,GAAyB,EAAE,CAAC;QAE1C,uCAAuC;QACvC,MAAM,eAAe,GAAG;YACtB,wBAAwB;YACxB,8BAA8B;YAC9B,cAAc;YACd,eAAe;SAChB,CAAC;QAEF,KAAK,MAAM,OAAO,IAAI,eAAe,EAAE,CAAC;YACtC,MAAM,OAAO,GAAG,IAAI,CAAC,cAAc,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;YAC1D,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;gBAC5B,QAAQ,CAAC,IAAI,CAAC;oBACZ,IAAI,EAAE,SAAS;oBACf,IAAI,EAAE,QAAQ;oBACd,IAAI,EAAE,OAAO;oBACb,MAAM,EAAE,KAAK,CAAC,KAAK;oBACnB,KAAK,EAAE,KAAK,CAAC,IAAI;oBACjB,UAAU,EAAE,QAAQ;oBACpB,OAAO,EAAE,YAAY,CAAC,IAAI,EAAE;iBAC7B,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAED,6CAA6C;QAC7C,MAAM,gBAAgB,GAAG;YACvB,wBAAwB;YACxB,uBAAuB;SACxB,CAAC;QAEF,KAAK,MAAM,OAAO,IAAI,gBAAgB,EAAE,CAAC;YACvC,MAAM,OAAO,GAAG,IAAI,CAAC,cAAc,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;YAC1D,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;gBAC5B,QAAQ,CAAC,IAAI,CAAC;oBACZ,IAAI,EAAE,UAAU;oBAChB,IAAI,EAAE,QAAQ;oBACd,IAAI,EAAE,OAAO;oBACb,MAAM,EAAE,KAAK,CAAC,KAAK;oBACnB,KAAK,EAAE,KAAK,CAAC,IAAI;oBACjB,UAAU,EAAE,QAAQ;oBACpB,OAAO,EAAE,YAAY,CAAC,IAAI,EAAE;iBAC7B,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAED,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED;;OAEG;IACK,+BAA+B,CACrC,QAAgB,EAChB,OAAe,EACf,WAAmB,EACnB,YAAoB;QAEpB,MAAM,QAAQ,GAAyB,EAAE,CAAC;QAE1C,qCAAqC;QACrC,MAAM,sBAAsB,GAAG,sCAAsC,CAAC;QACtE,IAAI,KAAK,CAAC;QACV,OAAO,CAAC,KAAK,GAAG,sBAAsB,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;YACnE,MAAM,gBAAgB,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;YAClC,wEAAwE;YACxE,mDAAmD;YACnD,IACE,gDAAgD,CAAC,IAAI,CAAC,gBAAgB,CAAC,EACvE,CAAC;gBACD,QAAQ,CAAC,IAAI,CAAC;oBACZ,IAAI,EAAE,gBAAgB;oBACtB,IAAI,EAAE,QAAQ;oBACd,IAAI,EAAE,OAAO;oBACb,MAAM,EAAE,KAAK,CAAC,KAAK;oBACnB,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC;oBACf,UAAU,EAAE,MAAM;oBAClB,OAAO,EAAE,YAAY,CAAC,IAAI,EAAE;iBAC7B,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAED,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED;;OAEG;IACK,0BAA0B,CAAC,WAAmB;QACpD,OAAO,6BAA6B,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;IACzD,CAAC;IAED;;OAEG;IACK,cAAc,CACpB,IAAY,EACZ,OAAe;QAEf,MAAM,OAAO,GAA2C,EAAE,CAAC;QAC3D,IAAI,KAAK,CAAC;QACV,MAAM,aAAa,GAAG,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,GAAG,GAAG,CAAC,CAAC;QACtE,OAAO,CAAC,KAAK,GAAG,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;YACnD,OAAO,CAAC,IAAI,CAAC;gBACX,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC;gBACd,KAAK,EAAE,KAAK,CAAC,KAAK;aACnB,CAAC,CAAC;QACL,CAAC;QACD,OAAO,OAAO,CAAC;IACjB,CAAC;IAED;;OAEG;IACH,MAAM,CAAC,WAAW,CAChB,QAA8B;QAE9B,MAAM,MAAM,GAA2B;YACrC,OAAO,EAAE,CAAC;YACV,cAAc,EAAE,CAAC;YACjB,aAAa,EAAE,CAAC;YAChB,OAAO,EAAE,CAAC;YACV,QAAQ,EAAE,CAAC;YACX,KAAK,EAAE,QAAQ,CAAC,MAAM;SACvB,CAAC;QAEF,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;YAC/B,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;QACzD,CAAC;QAED,OAAO,MAAM,CAAC;IAChB,CAAC;CACF;AAnRD,kDAmRC"}

package/dist/scanner/route-detector.d.ts

@@ -0,0 +1,100 @@
+/**
+ * Route Detector for Client-Side Routers
+ *
+ * Detects routes in various routing frameworks:
+ * - Next.js/Remix (file-based routing)
+ * - React Router (component-based)
+ * - Wouter (lightweight router)
+ * - Generic route inference mode
+ */
+export interface RouteInfo {
+    path: string;
+    file?: string;
+    line?: number;
+    method?: string;
+    dynamic?: boolean;
+    params?: string[];
+    source: 'file_based' | 'component' | 'config' | 'inferred';
+}
+export interface RouteDetectionResult {
+    routes: RouteInfo[];
+    framework: string;
+    confidence: 'high' | 'medium' | 'low';
+    message?: string;
+    hints?: string[];
+}
+export interface RouteDetectorConfig {
+    projectPath: string;
+    framework?: string;
+    /** Custom route hints from config */
+    routeHints?: Array<{
+        path: string;
+        file?: string;
+        description?: string;
+    }>;
+}
+export declare class RouteDetector {
+    private config;
+    constructor(config: RouteDetectorConfig);
+    /**
+     * Detect routes in the project
+     */
+    detectRoutes(): Promise<RouteDetectionResult>;
+    /**
+     * Detect routes based on detected framework
+     */
+    private detectFrameworkRoutes;
+    /**
+     * Detect Next.js file-based routes
+     */
+    private detectNextJSRoutes;
+    /**
+     * Detect Remix routes
+     */
+    private detectRemixRoutes;
+    /**
+     * Detect component-based routes (React Router, Wouter)
+     */
+    private detectComponentRoutes;
+    /**
+     * Generic route inference mode
+     */
+    private detectGenericRoutes;
+    /**
+     * Detect router framework from dependencies
+     */
+    private detectRouterFramework;
+    /**
+     * Check if a string looks like a route path
+     */
+    private looksLikeRoute;
+    /**
+     * Extract route parameters from path
+     */
+    private extractRouteParams;
+    /**
+     * Parse route array from config
+     */
+    private parseRouteArray;
+    /**
+     * Find route files in directory (for file-based routing)
+     */
+    private findRouteFiles;
+    /**
+     * Convert file path to route path
+     */
+    private filePathToRoute;
+    /**
+     * Find all source files in project
+     */
+    private findSourceFiles;
+    /**
+     * Get all files recursively
+     */
+    private getAllFiles;
+    /**
+     * Deduplicate routes
+     */
+    private deduplicateRoutes;
+}
+//# sourceMappingURL=route-detector.d.ts.map

package/dist/scanner/route-detector.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"route-detector.d.ts","sourceRoot":"","sources":["../../src/scanner/route-detector.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAKH,MAAM,WAAW,SAAS;IACxB,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;IAClB,MAAM,EAAE,YAAY,GAAG,WAAW,GAAG,QAAQ,GAAG,UAAU,CAAC;CAC5D;AAED,MAAM,WAAW,oBAAoB;IACnC,MAAM,EAAE,SAAS,EAAE,CAAC;IACpB,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,GAAG,QAAQ,GAAG,KAAK,CAAC;IACtC,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC;CAClB;AAED,MAAM,WAAW,mBAAmB;IAClC,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,qCAAqC;IACrC,UAAU,CAAC,EAAE,KAAK,CAAC;QACjB,IAAI,EAAE,MAAM,CAAC;QACb,IAAI,CAAC,EAAE,MAAM,CAAC;QACd,WAAW,CAAC,EAAE,MAAM,CAAC;KACtB,CAAC,CAAC;CACJ;AAED,qBAAa,aAAa;IACxB,OAAO,CAAC,MAAM,CAAsB;gBAExB,MAAM,EAAE,mBAAmB;IAIvC;;OAEG;IACG,YAAY,IAAI,OAAO,CAAC,oBAAoB,CAAC;IA0CnD;;OAEG;YACW,qBAAqB;IAwBnC;;OAEG;YACW,kBAAkB;IAsBhC;;OAEG;YACW,iBAAiB;IAgB/B;;OAEG;YACW,qBAAqB;IAyEnC;;OAEG;YACW,mBAAmB;IAgDjC;;OAEG;YACW,qBAAqB;IA6BnC;;OAEG;IACH,OAAO,CAAC,cAAc;IAgBtB;;OAEG;IACH,OAAO,CAAC,kBAAkB;IAU1B;;OAEG;IACH,OAAO,CAAC,eAAe;IAevB;;OAEG;YACW,cAAc;IAoB5B;;OAEG;IACH,OAAO,CAAC,eAAe;IAoBvB;;OAEG;YACW,eAAe;IAoC7B;;OAEG;YACW,WAAW;IAmBzB;;OAEG;IACH,OAAO,CAAC,iBAAiB;CAc1B"}