acidtest 0.8.0 → 1.0.1

package/dist/validation/pattern-validator.js

@@ -0,0 +1,168 @@
+/**
+ * JSON Schema-based validator for AcidTest pattern files
+ */
+import fs from 'fs';
+import path from 'path';
+import { fileURLToPath } from 'url';
+import { createRequire } from 'module';
+const __dirname = path.dirname(fileURLToPath(import.meta.url));
+const require = createRequire(import.meta.url);
+// Load dependencies via require to avoid ESM issues
+const Ajv = require('ajv');
+const addFormats = require('ajv-formats');
+// Load the JSON Schema
+const schemaPath = path.join(__dirname, '../schemas/pattern.schema.json');
+const schema = JSON.parse(fs.readFileSync(schemaPath, 'utf-8'));
+// Initialize AJV with options
+const ajv = new Ajv({
+    allErrors: true,
+    verbose: true,
+    strict: true,
+    allowUnionTypes: true,
+});
+// Add format validation
+addFormats(ajv);
+// Compile the schema
+const validate = ajv.compile(schema);
+/**
+ * Validate a single pattern file
+ * @param filePath Path to the pattern JSON file
+ * @returns ValidationResult with validation status and errors
+ */
+export function validatePattern(filePath) {
+    try {
+        // Read and parse the file
+        const fileContent = fs.readFileSync(filePath, 'utf-8');
+        let data;
+        try {
+            data = JSON.parse(fileContent);
+        }
+        catch (parseError) {
+            return {
+                valid: false,
+                errors: [
+                    {
+                        message: `JSON Parse Error: ${parseError instanceof Error ? parseError.message : 'Invalid JSON'}`,
+                        path: filePath,
+                    },
+                ],
+                file: filePath,
+            };
+        }
+        // Validate against schema
+        const isValid = validate(data);
+        if (!isValid && validate.errors) {
+            const errors = validate.errors.map((error) => ({
+                message: formatErrorMessage(error),
+                path: error.instancePath || '/',
+                keyword: error.keyword,
+                params: error.params,
+            }));
+            return {
+                valid: false,
+                errors,
+                file: filePath,
+            };
+        }
+        // Additional validation: Check for duplicate pattern IDs
+        const patternData = data;
+        const seenIds = new Set();
+        const duplicateErrors = [];
+        patternData.patterns.forEach((pattern, index) => {
+            if (seenIds.has(pattern.id)) {
+                duplicateErrors.push({
+                    message: `Duplicate pattern ID "${pattern.id}" found at index ${index}`,
+                    path: `/patterns/${index}/id`,
+                });
+            }
+            seenIds.add(pattern.id);
+            // Validate regex patterns can compile
+            if (pattern.match.type === 'regex') {
+                try {
+                    new RegExp(pattern.match.value, pattern.match.flags || '');
+                }
+                catch (regexError) {
+                    duplicateErrors.push({
+                        message: `Invalid regex pattern at /patterns/${index}: ${regexError instanceof Error ? regexError.message : 'Invalid regex'}`,
+                        path: `/patterns/${index}/match/value`,
+                    });
+                }
+            }
+        });
+        if (duplicateErrors.length > 0) {
+            return {
+                valid: false,
+                errors: duplicateErrors,
+                file: filePath,
+                patternCount: patternData.patterns.length,
+            };
+        }
+        return {
+            valid: true,
+            errors: [],
+            file: filePath,
+            patternCount: patternData.patterns.length,
+        };
+    }
+    catch (error) {
+        return {
+            valid: false,
+            errors: [
+                {
+                    message: `Unexpected error: ${error instanceof Error ? error.message : 'Unknown error'}`,
+                    path: filePath,
+                },
+            ],
+            file: filePath,
+        };
+    }
+}
+/**
+ * Validate all pattern files in a directory
+ * @param patternsDir Directory containing pattern JSON files
+ * @returns Array of ValidationResult for each file
+ */
+export function validateAllPatterns(patternsDir) {
+    try {
+        const files = fs.readdirSync(patternsDir).filter((f) => f.endsWith('.json'));
+        return files.map((file) => validatePattern(path.join(patternsDir, file)));
+    }
+    catch (error) {
+        return [
+            {
+                valid: false,
+                errors: [
+                    {
+                        message: `Failed to read patterns directory: ${error instanceof Error ? error.message : 'Unknown error'}`,
+                        path: patternsDir,
+                    },
+                ],
+            },
+        ];
+    }
+}
+/**
+ * Format AJV error into human-readable message
+ */
+function formatErrorMessage(error) {
+    const path = error.instancePath || '/';
+    switch (error.keyword) {
+        case 'required':
+            return `Missing required field: ${error.params?.missingProperty} at ${path}`;
+        case 'enum':
+            return `Invalid value at ${path}. Must be one of: ${JSON.stringify(error.params?.allowedValues)}`;
+        case 'pattern':
+            return `Value at ${path} does not match required pattern: ${error.params?.pattern}`;
+        case 'minLength':
+            return `Value at ${path} is too short (minimum length: ${error.params?.limit})`;
+        case 'minItems':
+            return `Array at ${path} has too few items (minimum: ${error.params?.limit})`;
+        case 'type':
+            return `Invalid type at ${path}. Expected: ${error.params?.type}`;
+        case 'additionalProperties':
+            return `Unexpected property "${error.params?.additionalProperty}" at ${path}`;
+        default:
+            return `${error.message || 'Validation error'} at ${path}`;
+    }
+}
+//# sourceMappingURL=pattern-validator.js.map

package/dist/validation/pattern-validator.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pattern-validator.js","sourceRoot":"","sources":["../../src/validation/pattern-validator.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EAAE,MAAM,IAAI,CAAC;AACpB,OAAO,IAAI,MAAM,MAAM,CAAC;AACxB,OAAO,EAAE,aAAa,EAAE,MAAM,KAAK,CAAC;AACpC,OAAO,EAAE,aAAa,EAAE,MAAM,QAAQ,CAAC;AAIvC,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;AAC/D,MAAM,OAAO,GAAG,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAE/C,oDAAoD;AACpD,MAAM,GAAG,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC;AAC3B,MAAM,UAAU,GAAG,OAAO,CAAC,aAAa,CAAC,CAAC;AAE1C,uBAAuB;AACvB,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,gCAAgC,CAAC,CAAC;AAC1E,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC,CAAC;AAEhE,8BAA8B;AAC9B,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC;IAClB,SAAS,EAAE,IAAI;IACf,OAAO,EAAE,IAAI;IACb,MAAM,EAAE,IAAI;IACZ,eAAe,EAAE,IAAI;CACtB,CAAC,CAAC;AAEH,wBAAwB;AACxB,UAAU,CAAC,GAAG,CAAC,CAAC;AAEhB,qBAAqB;AACrB,MAAM,QAAQ,GAAqB,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;AAsBvD;;;;GAIG;AACH,MAAM,UAAU,eAAe,CAAC,QAAgB;IAC9C,IAAI,CAAC;QACH,0BAA0B;QAC1B,MAAM,WAAW,GAAG,EAAE,CAAC,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;QACvD,IAAI,IAAa,CAAC;QAElB,IAAI,CAAC;YACH,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;QACjC,CAAC;QAAC,OAAO,UAAU,EAAE,CAAC;YACpB,OAAO;gBACL,KAAK,EAAE,KAAK;gBACZ,MAAM,EAAE;oBACN;wBACE,OAAO,EAAE,qBAAqB,UAAU,YAAY,KAAK,CAAC,CAAC,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC,cAAc,EAAE;wBACjG,IAAI,EAAE,QAAQ;qBACf;iBACF;gBACD,IAAI,EAAE,QAAQ;aACf,CAAC;QACJ,CAAC;QAED,0BAA0B;QAC1B,MAAM,OAAO,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC;QAE/B,IAAI,CAAC,OAAO,IAAI,QAAQ,CAAC,MAAM,EAAE,CAAC;YAChC,MAAM,MAAM,GAAsB,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;gBAChE,OAAO,EAAE,kBAAkB,CAAC,KAAK,CAAC;gBAClC,IAAI,EAAE,KAAK,CAAC,YAAY,IAAI,GAAG;gBAC/B,OAAO,EAAE,KAAK,CAAC,OAAO;gBACtB,MAAM,EAAE,KAAK,CAAC,MAAM;aACrB,CAAC,CAAC,CAAC;YAEJ,OAAO;gBACL,KAAK,EAAE,KAAK;gBACZ,MAAM;gBACN,IAAI,EAAE,QAAQ;aACf,CAAC;QACJ,CAAC;QAED,yDAAyD;QACzD,MAAM,WAAW,GAAG,IAAuB,CAAC;QAC5C,MAAM,OAAO,GAAG,IAAI,GAAG,EAAU,CAAC;QAClC,MAAM,eAAe,GAAsB,EAAE,CAAC;QAE9C,WAAW,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,OAAO,EAAE,KAAK,EAAE,EAAE;YAC9C,IAAI,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC,EAAE,CAAC;gBAC5B,eAAe,CAAC,IAAI,CAAC;oBACnB,OAAO,EAAE,yBAAyB,OAAO,CAAC,EAAE,oBAAoB,KAAK,EAAE;oBACvE,IAAI,EAAE,aAAa,KAAK,KAAK;iBAC9B,CAAC,CAAC;YACL,CAAC;YACD,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;YAExB,sCAAsC;YACtC,IAAI,OAAO,CAAC,KAAK,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;gBACnC,IAAI,CAAC;oBACH,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,EAAE,OAAO,CAAC,KAAK,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC;gBAC7D,CAAC;gBAAC,OAAO,UAAU,EAAE,CAAC;oBACpB,eAAe,CAAC,IAAI,CAAC;wBACnB,OAAO,EAAE,sCAAsC,KAAK,KAAK,UAAU,YAAY,KAAK,CAAC,CAAC,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe,EAAE;wBAC7H,IAAI,EAAE,aAAa,KAAK,cAAc;qBACvC,CAAC,CAAC;gBACL,CAAC;YACH,CAAC;QACH,CAAC,CAAC,CAAC;QAEH,IAAI,eAAe,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC/B,OAAO;gBACL,KAAK,EAAE,KAAK;gBACZ,MAAM,EAAE,eAAe;gBACvB,IAAI,EAAE,QAAQ;gBACd,YAAY,EAAE,WAAW,CAAC,QAAQ,CAAC,MAAM;aAC1C,CAAC;QACJ,CAAC;QAED,OAAO;YACL,KAAK,EAAE,IAAI;YACX,MAAM,EAAE,EAAE;YACV,IAAI,EAAE,QAAQ;YACd,YAAY,EAAE,WAAW,CAAC,QAAQ,CAAC,MAAM;SAC1C,CAAC;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO;YACL,KAAK,EAAE,KAAK;YACZ,MAAM,EAAE;gBACN;oBACE,OAAO,EAAE,qBAAqB,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe,EAAE;oBACxF,IAAI,EAAE,QAAQ;iBACf;aACF;YACD,IAAI,EAAE,QAAQ;SACf,CAAC;IACJ,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,mBAAmB,CAAC,WAAmB;IACrD,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,EAAE,CAAC,WAAW,CAAC,WAAW,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC;QAC7E,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC;IAC5E,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO;YACL;gBACE,KAAK,EAAE,KAAK;gBACZ,MAAM,EAAE;oBACN;wBACE,OAAO,EAAE,sCAAsC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe,EAAE;wBACzG,IAAI,EAAE,WAAW;qBAClB;iBACF;aACF;SACF,CAAC;IACJ,CAAC;AACH,CAAC;AAED;;GAEG;AACH,SAAS,kBAAkB,CAAC,KAK3B;IACC,MAAM,IAAI,GAAG,KAAK,CAAC,YAAY,IAAI,GAAG,CAAC;IAEvC,QAAQ,KAAK,CAAC,OAAO,EAAE,CAAC;QACtB,KAAK,UAAU;YACb,OAAO,2BAA2B,KAAK,CAAC,MAAM,EAAE,eAAe,OAAO,IAAI,EAAE,CAAC;QAC/E,KAAK,MAAM;YACT,OAAO,oBAAoB,IAAI,qBAAqB,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,MAAM,EAAE,aAAa,CAAC,EAAE,CAAC;QACpG,KAAK,SAAS;YACZ,OAAO,YAAY,IAAI,qCAAqC,KAAK,CAAC,MAAM,EAAE,OAAO,EAAE,CAAC;QACtF,KAAK,WAAW;YACd,OAAO,YAAY,IAAI,kCAAkC,KAAK,CAAC,MAAM,EAAE,KAAK,GAAG,CAAC;QAClF,KAAK,UAAU;YACb,OAAO,YAAY,IAAI,gCAAgC,KAAK,CAAC,MAAM,EAAE,KAAK,GAAG,CAAC;QAChF,KAAK,MAAM;YACT,OAAO,mBAAmB,IAAI,eAAe,KAAK,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC;QACpE,KAAK,sBAAsB;YACzB,OAAO,wBAAwB,KAAK,CAAC,MAAM,EAAE,kBAAkB,QAAQ,IAAI,EAAE,CAAC;QAChF;YACE,OAAO,GAAG,KAAK,CAAC,OAAO,IAAI,kBAAkB,OAAO,IAAI,EAAE,CAAC;IAC/D,CAAC;AACH,CAAC"}

package/dist/validation/pattern-validator.test.d.ts

@@ -0,0 +1,5 @@
+/**
+ * Tests for pattern validation
+ */
+export {};
+//# sourceMappingURL=pattern-validator.test.d.ts.map

package/dist/validation/pattern-validator.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"pattern-validator.test.d.ts","sourceRoot":"","sources":["../../src/validation/pattern-validator.test.ts"],"names":[],"mappings":"AAAA;;GAEG"}

package/dist/validation/pattern-validator.test.js

@@ -0,0 +1,222 @@
+/**
+ * Tests for pattern validation
+ */
+import { describe, it, expect, beforeEach, afterEach } from 'vitest';
+import { mkdirSync, writeFileSync, rmSync } from 'fs';
+import { join } from 'path';
+import { validatePattern, validateAllPatterns } from './pattern-validator.js';
+describe('Pattern Validator', () => {
+    const testDir = join(process.cwd(), 'test-validation-temp');
+    beforeEach(() => {
+        mkdirSync(testDir, { recursive: true });
+    });
+    afterEach(() => {
+        rmSync(testDir, { recursive: true, force: true });
+    });
+    it('should validate a valid pattern file', () => {
+        const validPattern = {
+            category: 'test-patterns',
+            patterns: [
+                {
+                    id: 'tp-001',
+                    name: 'test-pattern',
+                    description: 'A test pattern',
+                    severity: 'HIGH',
+                    match: {
+                        type: 'regex',
+                        value: 'test.*pattern',
+                        flags: 'i'
+                    },
+                    layer: 'markdown'
+                }
+            ]
+        };
+        const filePath = join(testDir, 'valid-pattern.json');
+        writeFileSync(filePath, JSON.stringify(validPattern, null, 2));
+        const result = validatePattern(filePath);
+        expect(result.valid).toBe(true);
+        expect(result.errors).toHaveLength(0);
+        expect(result.patternCount).toBe(1);
+    });
+    it('should fail validation when required field is missing (name)', () => {
+        const invalidPattern = {
+            category: 'test-patterns',
+            patterns: [
+                {
+                    id: 'tp-001',
+                    // name is missing
+                    severity: 'HIGH',
+                    match: {
+                        type: 'regex',
+                        value: 'test.*pattern'
+                    },
+                    layer: 'markdown'
+                }
+            ]
+        };
+        const filePath = join(testDir, 'missing-name.json');
+        writeFileSync(filePath, JSON.stringify(invalidPattern, null, 2));
+        const result = validatePattern(filePath);
+        expect(result.valid).toBe(false);
+        expect(result.errors.length).toBeGreaterThan(0);
+        expect(result.errors[0].message).toMatch(/name/i);
+    });
+    it('should fail validation with invalid severity enum', () => {
+        const invalidPattern = {
+            category: 'test-patterns',
+            patterns: [
+                {
+                    id: 'tp-001',
+                    name: 'test-pattern',
+                    severity: 'INVALID_SEVERITY', // Invalid severity
+                    match: {
+                        type: 'regex',
+                        value: 'test.*pattern'
+                    },
+                    layer: 'markdown'
+                }
+            ]
+        };
+        const filePath = join(testDir, 'invalid-severity.json');
+        writeFileSync(filePath, JSON.stringify(invalidPattern, null, 2));
+        const result = validatePattern(filePath);
+        expect(result.valid).toBe(false);
+        expect(result.errors.length).toBeGreaterThan(0);
+        expect(result.errors[0].message).toMatch(/(severity|enum)/i);
+    });
+    it('should fail validation with invalid match type', () => {
+        const invalidPattern = {
+            category: 'test-patterns',
+            patterns: [
+                {
+                    id: 'tp-001',
+                    name: 'test-pattern',
+                    severity: 'HIGH',
+                    match: {
+                        type: 'invalid-type', // Invalid match type
+                        value: 'test.*pattern'
+                    },
+                    layer: 'markdown'
+                }
+            ]
+        };
+        const filePath = join(testDir, 'invalid-match-type.json');
+        writeFileSync(filePath, JSON.stringify(invalidPattern, null, 2));
+        const result = validatePattern(filePath);
+        expect(result.valid).toBe(false);
+        expect(result.errors.length).toBeGreaterThan(0);
+        expect(result.errors[0].message).toMatch(/(match|type|enum)/i);
+    });
+    it('should validate all current pattern files in src/patterns/', () => {
+        const patternsDir = join(process.cwd(), 'src', 'patterns');
+        const results = validateAllPatterns(patternsDir);
+        // All pattern files should be valid
+        const allValid = results.every((result) => result.valid);
+        expect(allValid).toBe(true);
+        // Should have validated at least 6 files (based on current patterns)
+        expect(results.length).toBeGreaterThanOrEqual(6);
+        // Display any errors for debugging
+        const errors = results.filter((r) => !r.valid);
+        if (errors.length > 0) {
+            console.error('Pattern validation errors:');
+            errors.forEach((error) => {
+                console.error(`  File: ${error.file}`);
+                error.errors.forEach((e) => {
+                    console.error(`    - ${e.message}`);
+                });
+            });
+        }
+    });
+    it('should detect duplicate pattern IDs in the same file', () => {
+        const duplicatePattern = {
+            category: 'test-patterns',
+            patterns: [
+                {
+                    id: 'tp-001',
+                    name: 'first-pattern',
+                    severity: 'HIGH',
+                    match: {
+                        type: 'regex',
+                        value: 'test1'
+                    },
+                    layer: 'markdown'
+                },
+                {
+                    id: 'tp-001', // Duplicate ID
+                    name: 'second-pattern',
+                    severity: 'HIGH',
+                    match: {
+                        type: 'regex',
+                        value: 'test2'
+                    },
+                    layer: 'markdown'
+                }
+            ]
+        };
+        const filePath = join(testDir, 'duplicate-ids.json');
+        writeFileSync(filePath, JSON.stringify(duplicatePattern, null, 2));
+        const result = validatePattern(filePath);
+        expect(result.valid).toBe(false);
+        expect(result.errors.length).toBeGreaterThan(0);
+        expect(result.errors[0].message).toMatch(/duplicate/i);
+    });
+    it('should detect invalid regex patterns', () => {
+        const invalidRegexPattern = {
+            category: 'test-patterns',
+            patterns: [
+                {
+                    id: 'tp-001',
+                    name: 'invalid-regex',
+                    severity: 'HIGH',
+                    match: {
+                        type: 'regex',
+                        value: '[invalid(regex' // Invalid regex
+                    },
+                    layer: 'markdown'
+                }
+            ]
+        };
+        const filePath = join(testDir, 'invalid-regex.json');
+        writeFileSync(filePath, JSON.stringify(invalidRegexPattern, null, 2));
+        const result = validatePattern(filePath);
+        expect(result.valid).toBe(false);
+        expect(result.errors.length).toBeGreaterThan(0);
+        expect(result.errors[0].message).toMatch(/regex/i);
+    });
+    it('should validate remediation structure when present', () => {
+        const patternWithRemediation = {
+            category: 'test-patterns',
+            patterns: [
+                {
+                    id: 'tp-001',
+                    name: 'test-pattern',
+                    severity: 'HIGH',
+                    match: {
+                        type: 'regex',
+                        value: 'test'
+                    },
+                    layer: 'code',
+                    remediation: {
+                        title: 'Fix this issue',
+                        suggestions: [
+                            'Do this',
+                            'Then do that'
+                        ],
+                        autofix: true,
+                        fixAction: {
+                            type: 'replace',
+                            pattern: 'old',
+                            replacement: 'new'
+                        }
+                    }
+                }
+            ]
+        };
+        const filePath = join(testDir, 'with-remediation.json');
+        writeFileSync(filePath, JSON.stringify(patternWithRemediation, null, 2));
+        const result = validatePattern(filePath);
+        expect(result.valid).toBe(true);
+        expect(result.errors).toHaveLength(0);
+    });
+});
+//# sourceMappingURL=pattern-validator.test.js.map

package/dist/validation/pattern-validator.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pattern-validator.test.js","sourceRoot":"","sources":["../../src/validation/pattern-validator.test.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,QAAQ,CAAC;AACrE,OAAO,EAAE,SAAS,EAAE,aAAa,EAAE,MAAM,EAAE,MAAM,IAAI,CAAC;AACtD,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAC5B,OAAO,EAAE,eAAe,EAAE,mBAAmB,EAAE,MAAM,wBAAwB,CAAC;AAG9E,QAAQ,CAAC,mBAAmB,EAAE,GAAG,EAAE;IACjC,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,sBAAsB,CAAC,CAAC;IAE5D,UAAU,CAAC,GAAG,EAAE;QACd,SAAS,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC1C,CAAC,CAAC,CAAC;IAEH,SAAS,CAAC,GAAG,EAAE;QACb,MAAM,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IACpD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,sCAAsC,EAAE,GAAG,EAAE;QAC9C,MAAM,YAAY,GAAoB;YACpC,QAAQ,EAAE,eAAe;YACzB,QAAQ,EAAE;gBACR;oBACE,EAAE,EAAE,QAAQ;oBACZ,IAAI,EAAE,cAAc;oBACpB,WAAW,EAAE,gBAAgB;oBAC7B,QAAQ,EAAE,MAAM;oBAChB,KAAK,EAAE;wBACL,IAAI,EAAE,OAAO;wBACb,KAAK,EAAE,eAAe;wBACtB,KAAK,EAAE,GAAG;qBACX;oBACD,KAAK,EAAE,UAAU;iBAClB;aACF;SACF,CAAC;QAEF,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,EAAE,oBAAoB,CAAC,CAAC;QACrD,aAAa,CAAC,QAAQ,EAAE,IAAI,CAAC,SAAS,CAAC,YAAY,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;QAE/D,MAAM,MAAM,GAAG,eAAe,CAAC,QAAQ,CAAC,CAAC;QAEzC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAChC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;QACtC,MAAM,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACtC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,8DAA8D,EAAE,GAAG,EAAE;QACtE,MAAM,cAAc,GAAG;YACrB,QAAQ,EAAE,eAAe;YACzB,QAAQ,EAAE;gBACR;oBACE,EAAE,EAAE,QAAQ;oBACZ,kBAAkB;oBAClB,QAAQ,EAAE,MAAM;oBAChB,KAAK,EAAE;wBACL,IAAI,EAAE,OAAO;wBACb,KAAK,EAAE,eAAe;qBACvB;oBACD,KAAK,EAAE,UAAU;iBAClB;aACF;SACF,CAAC;QAEF,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,EAAE,mBAAmB,CAAC,CAAC;QACpD,aAAa,CAAC,QAAQ,EAAE,IAAI,CAAC,SAAS,CAAC,cAAc,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;QAEjE,MAAM,MAAM,GAAG,eAAe,CAAC,QAAQ,CAAC,CAAC;QAEzC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACjC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC;QAChD,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;IACpD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,mDAAmD,EAAE,GAAG,EAAE;QAC3D,MAAM,cAAc,GAAG;YACrB,QAAQ,EAAE,eAAe;YACzB,QAAQ,EAAE;gBACR;oBACE,EAAE,EAAE,QAAQ;oBACZ,IAAI,EAAE,cAAc;oBACpB,QAAQ,EAAE,kBAAkB,EAAE,mBAAmB;oBACjD,KAAK,EAAE;wBACL,IAAI,EAAE,OAAO;wBACb,KAAK,EAAE,eAAe;qBACvB;oBACD,KAAK,EAAE,UAAU;iBAClB;aACF;SACF,CAAC;QAEF,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,EAAE,uBAAuB,CAAC,CAAC;QACxD,aAAa,CAAC,QAAQ,EAAE,IAAI,CAAC,SAAS,CAAC,cAAc,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;QAEjE,MAAM,MAAM,GAAG,eAAe,CAAC,QAAQ,CAAC,CAAC;QAEzC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACjC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC;QAChD,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC,kBAAkB,CAAC,CAAC;IAC/D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,gDAAgD,EAAE,GAAG,EAAE;QACxD,MAAM,cAAc,GAAG;YACrB,QAAQ,EAAE,eAAe;YACzB,QAAQ,EAAE;gBACR;oBACE,EAAE,EAAE,QAAQ;oBACZ,IAAI,EAAE,cAAc;oBACpB,QAAQ,EAAE,MAAM;oBAChB,KAAK,EAAE;wBACL,IAAI,EAAE,cAAc,EAAE,qBAAqB;wBAC3C,KAAK,EAAE,eAAe;qBACvB;oBACD,KAAK,EAAE,UAAU;iBAClB;aACF;SACF,CAAC;QAEF,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,EAAE,yBAAyB,CAAC,CAAC;QAC1D,aAAa,CAAC,QAAQ,EAAE,IAAI,CAAC,SAAS,CAAC,cAAc,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;QAEjE,MAAM,MAAM,GAAG,eAAe,CAAC,QAAQ,CAAC,CAAC;QAEzC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACjC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC;QAChD,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC,oBAAoB,CAAC,CAAC;IACjE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,4DAA4D,EAAE,GAAG,EAAE;QACpE,MAAM,WAAW,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,UAAU,CAAC,CAAC;QAC3D,MAAM,OAAO,GAAG,mBAAmB,CAAC,WAAW,CAAC,CAAC;QAEjD,oCAAoC;QACpC,MAAM,QAAQ,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACzD,MAAM,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAE5B,qEAAqE;QACrE,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,sBAAsB,CAAC,CAAC,CAAC,CAAC;QAEjD,mCAAmC;QACnC,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;QAC/C,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACtB,OAAO,CAAC,KAAK,CAAC,4BAA4B,CAAC,CAAC;YAC5C,MAAM,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,EAAE;gBACvB,OAAO,CAAC,KAAK,CAAC,WAAW,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;gBACvC,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE;oBACzB,OAAO,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;gBACtC,CAAC,CAAC,CAAC;YACL,CAAC,CAAC,CAAC;QACL,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,sDAAsD,EAAE,GAAG,EAAE;QAC9D,MAAM,gBAAgB,GAAG;YACvB,QAAQ,EAAE,eAAe;YACzB,QAAQ,EAAE;gBACR;oBACE,EAAE,EAAE,QAAQ;oBACZ,IAAI,EAAE,eAAe;oBACrB,QAAQ,EAAE,MAAM;oBAChB,KAAK,EAAE;wBACL,IAAI,EAAE,OAAO;wBACb,KAAK,EAAE,OAAO;qBACf;oBACD,KAAK,EAAE,UAAU;iBAClB;gBACD;oBACE,EAAE,EAAE,QAAQ,EAAE,eAAe;oBAC7B,IAAI,EAAE,gBAAgB;oBACtB,QAAQ,EAAE,MAAM;oBAChB,KAAK,EAAE;wBACL,IAAI,EAAE,OAAO;wBACb,KAAK,EAAE,OAAO;qBACf;oBACD,KAAK,EAAE,UAAU;iBAClB;aACF;SACF,CAAC;QAEF,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,EAAE,oBAAoB,CAAC,CAAC;QACrD,aAAa,CAAC,QAAQ,EAAE,IAAI,CAAC,SAAS,CAAC,gBAAgB,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;QAEnE,MAAM,MAAM,GAAG,eAAe,CAAC,QAAQ,CAAC,CAAC;QAEzC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACjC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC;QAChD,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;IACzD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,sCAAsC,EAAE,GAAG,EAAE;QAC9C,MAAM,mBAAmB,GAAG;YAC1B,QAAQ,EAAE,eAAe;YACzB,QAAQ,EAAE;gBACR;oBACE,EAAE,EAAE,QAAQ;oBACZ,IAAI,EAAE,eAAe;oBACrB,QAAQ,EAAE,MAAM;oBAChB,KAAK,EAAE;wBACL,IAAI,EAAE,OAAO;wBACb,KAAK,EAAE,gBAAgB,CAAC,gBAAgB;qBACzC;oBACD,KAAK,EAAE,UAAU;iBAClB;aACF;SACF,CAAC;QAEF,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,EAAE,oBAAoB,CAAC,CAAC;QACrD,aAAa,CAAC,QAAQ,EAAE,IAAI,CAAC,SAAS,CAAC,mBAAmB,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;QAEtE,MAAM,MAAM,GAAG,eAAe,CAAC,QAAQ,CAAC,CAAC;QAEzC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACjC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC;QAChD,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;IACrD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,oDAAoD,EAAE,GAAG,EAAE;QAC5D,MAAM,sBAAsB,GAAoB;YAC9C,QAAQ,EAAE,eAAe;YACzB,QAAQ,EAAE;gBACR;oBACE,EAAE,EAAE,QAAQ;oBACZ,IAAI,EAAE,cAAc;oBACpB,QAAQ,EAAE,MAAM;oBAChB,KAAK,EAAE;wBACL,IAAI,EAAE,OAAO;wBACb,KAAK,EAAE,MAAM;qBACd;oBACD,KAAK,EAAE,MAAM;oBACb,WAAW,EAAE;wBACX,KAAK,EAAE,gBAAgB;wBACvB,WAAW,EAAE;4BACX,SAAS;4BACT,cAAc;yBACf;wBACD,OAAO,EAAE,IAAI;wBACb,SAAS,EAAE;4BACT,IAAI,EAAE,SAAS;4BACf,OAAO,EAAE,KAAK;4BACd,WAAW,EAAE,KAAK;yBACnB;qBACF;iBACF;aACF;SACF,CAAC;QAEF,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,EAAE,uBAAuB,CAAC,CAAC;QACxD,aAAa,CAAC,QAAQ,EAAE,IAAI,CAAC,SAAS,CAAC,sBAAsB,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;QAEzE,MAAM,MAAM,GAAG,eAAe,CAAC,QAAQ,CAAC,CAAC;QAEzC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAChC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;IACxC,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/validation/validate-patterns.d.ts

@@ -0,0 +1,6 @@
+#!/usr/bin/env node
+/**
+ * CLI script to validate all AcidTest pattern files
+ */
+export {};
+//# sourceMappingURL=validate-patterns.d.ts.map

package/dist/validation/validate-patterns.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"validate-patterns.d.ts","sourceRoot":"","sources":["../../src/validation/validate-patterns.ts"],"names":[],"mappings":";AAEA;;GAEG"}

package/dist/validation/validate-patterns.js

@@ -0,0 +1,55 @@
+#!/usr/bin/env node
+/**
+ * CLI script to validate all AcidTest pattern files
+ */
+import path from 'path';
+import { fileURLToPath } from 'url';
+import { validateAllPatterns } from './pattern-validator.js';
+const __dirname = path.dirname(fileURLToPath(import.meta.url));
+const patternsDir = path.join(__dirname, '../patterns');
+console.log('Validating AcidTest pattern files...\n');
+// Validate all patterns
+const results = validateAllPatterns(patternsDir);
+// Track statistics
+let totalFiles = 0;
+let validFiles = 0;
+let totalPatterns = 0;
+let hasErrors = false;
+// Process and display results
+for (const result of results) {
+    totalFiles++;
+    if (result.valid) {
+        validFiles++;
+        totalPatterns += result.patternCount || 0;
+        const fileName = result.file ? path.basename(result.file) : 'unknown';
+        console.log(`✓ ${fileName} (${result.patternCount || 0} pattern${result.patternCount !== 1 ? 's' : ''})`);
+    }
+    else {
+        hasErrors = true;
+        const fileName = result.file ? path.basename(result.file) : 'unknown';
+        console.error(`✗ ${fileName}\n`);
+        // Display all errors for this file
+        for (const error of result.errors) {
+            console.error(`  [Error] ${error.message}`);
+            if (error.path && error.path !== fileName) {
+                console.error(`  Path: ${error.path}`);
+            }
+            console.error('');
+        }
+    }
+}
+// Display summary
+console.log(`${'─'.repeat(50)}`);
+console.log('Validation Results:');
+console.log(`  Files checked: ${totalFiles}`);
+console.log(`  Valid files: ${validFiles}`);
+console.log(`  Patterns validated: ${totalPatterns}`);
+if (hasErrors) {
+    console.log(`  Status: ✗ FAILED\n`);
+    process.exit(1);
+}
+else {
+    console.log(`  Status: ✓ PASSED\n`);
+    process.exit(0);
+}
+//# sourceMappingURL=validate-patterns.js.map

package/dist/validation/validate-patterns.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"validate-patterns.js","sourceRoot":"","sources":["../../src/validation/validate-patterns.ts"],"names":[],"mappings":";AAEA;;GAEG;AAEH,OAAO,IAAI,MAAM,MAAM,CAAC;AACxB,OAAO,EAAE,aAAa,EAAE,MAAM,KAAK,CAAC;AACpC,OAAO,EAAE,mBAAmB,EAAE,MAAM,wBAAwB,CAAC;AAE7D,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;AAC/D,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,aAAa,CAAC,CAAC;AAExD,OAAO,CAAC,GAAG,CAAC,wCAAwC,CAAC,CAAC;AAEtD,wBAAwB;AACxB,MAAM,OAAO,GAAG,mBAAmB,CAAC,WAAW,CAAC,CAAC;AAEjD,mBAAmB;AACnB,IAAI,UAAU,GAAG,CAAC,CAAC;AACnB,IAAI,UAAU,GAAG,CAAC,CAAC;AACnB,IAAI,aAAa,GAAG,CAAC,CAAC;AACtB,IAAI,SAAS,GAAG,KAAK,CAAC;AAEtB,8BAA8B;AAC9B,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;IAC7B,UAAU,EAAE,CAAC;IAEb,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;QACjB,UAAU,EAAE,CAAC;QACb,aAAa,IAAI,MAAM,CAAC,YAAY,IAAI,CAAC,CAAC;QAC1C,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QACtE,OAAO,CAAC,GAAG,CAAC,KAAK,QAAQ,KAAK,MAAM,CAAC,YAAY,IAAI,CAAC,WAAW,MAAM,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;IAC5G,CAAC;SAAM,CAAC;QACN,SAAS,GAAG,IAAI,CAAC;QACjB,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QACtE,OAAO,CAAC,KAAK,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC;QAEjC,mCAAmC;QACnC,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC;YAClC,OAAO,CAAC,KAAK,CAAC,aAAa,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;YAC5C,IAAI,KAAK,CAAC,IAAI,IAAI,KAAK,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;gBAC1C,OAAO,CAAC,KAAK,CAAC,WAAW,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;YACzC,CAAC;YACD,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QACpB,CAAC;IACH,CAAC;AACH,CAAC;AAED,kBAAkB;AAClB,OAAO,CAAC,GAAG,CAAC,GAAG,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;AACjC,OAAO,CAAC,GAAG,CAAC,qBAAqB,CAAC,CAAC;AACnC,OAAO,CAAC,GAAG,CAAC,oBAAoB,UAAU,EAAE,CAAC,CAAC;AAC9C,OAAO,CAAC,GAAG,CAAC,kBAAkB,UAAU,EAAE,CAAC,CAAC;AAC5C,OAAO,CAAC,GAAG,CAAC,yBAAyB,aAAa,EAAE,CAAC,CAAC;AAEtD,IAAI,SAAS,EAAE,CAAC;IACd,OAAO,CAAC,GAAG,CAAC,sBAAsB,CAAC,CAAC;IACpC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC;KAAM,CAAC;IACN,OAAO,CAAC,GAAG,CAAC,sBAAsB,CAAC,CAAC;IACpC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC"}

package/package.json

@@ -1,20 +1,22 @@
 {
   "name": "acidtest",
-  "version": "0.8.0",
+  "version": "1.0.1",
   "type": "module",
   "description": "Security scanner for AI agent skills. Scan before you install.",
   "bin": {
     "acidtest": "./dist/index.js"
   },
   "scripts": {
-    "validate": "node scripts/validate-patterns.js",
-    "build": "node scripts/validate-patterns.js && tsc && mkdir -p dist/patterns && cp src/patterns/*.json dist/patterns/",
+    "validate:patterns": "tsx src/validation/validate-patterns.ts",
+    "prebuild": "npm run validate:patterns",
+    "build": "tsc && mkdir -p dist/patterns dist/schemas && cp src/patterns/*.json dist/patterns/ && cp src/schemas/*.json dist/schemas/",
     "dev": "npm run build && node dist/index.js",
     "watch": "tsc --watch",
     "test": "vitest run",
     "test:watch": "vitest",
     "test:ui": "vitest --ui",
-    "test:coverage": "vitest run --coverage"
+    "test:coverage": "vitest run --coverage",
+    "test:corpus": "tsx src/test-corpus/validate-corpus.ts"
   },
   "files": [
     "dist",
@@ -41,17 +43,22 @@
   "homepage": "https://acidtest.dev",
   "dependencies": {
     "@modelcontextprotocol/sdk": "^1.26.0",
+    "ajv": "^8.17.1",
+    "ajv-formats": "^3.0.1",
     "chalk": "^5.3.0",
     "chokidar": "^5.0.0",
     "cli-table3": "^0.6.5",
     "glob": "^10.3.10",
     "gray-matter": "^4.0.3",
     "ora": "^9.3.0",
+    "tree-sitter": "^0.21.1",
+    "tree-sitter-python": "^0.21.0",
     "typescript": "^5.3.3"
   },
   "devDependencies": {
     "@types/node": "^20.11.0",
     "@vitest/ui": "^4.0.18",
+    "tsx": "^4.21.0",
     "vitest": "^4.0.18"
   },
   "engines": {

package/test-fixtures/fixture-no-manifest-node/README.md

@@ -0,0 +1,4 @@
+# Test Node.js Application
+
+This is a test application without SKILL.md or MCP manifest.
+Used to verify AcidTest can scan generic code.

package/test-fixtures/fixture-no-manifest-node/index.js

@@ -0,0 +1,24 @@
+// Simple Express.js-style application without SKILL.md
+const express = require('express');
+const fs = require('fs');
+
+const app = express();
+const PORT = process.env.PORT || 3000;
+
+// Some potentially risky patterns to detect
+app.get('/data', (req, res) => {
+  // Reading from filesystem
+  const filePath = `/tmp/${req.query.file}`;
+  const content = fs.readFileSync(filePath, 'utf-8');
+  res.send(content);
+});
+
+app.get('/eval', (req, res) => {
+  // Code injection vulnerability
+  const result = eval(req.query.code);
+  res.json({ result });
+});
+
+app.listen(PORT, () => {
+  console.log(`Server running on port ${PORT}`);
+});

package/test-fixtures/fixture-no-manifest-python/README.md

@@ -0,0 +1,4 @@
+# Test Python Application
+
+This is a test Python Flask application without SKILL.md or MCP manifest.
+Used to verify AcidTest can scan generic Python code.

package/test-fixtures/fixture-no-manifest-python/app.py

@@ -0,0 +1,24 @@
+#!/usr/bin/env python3
+# Simple Flask application without SKILL.md
+import os
+import subprocess
+from flask import Flask, request
+
+app = Flask(__name__)
+
+@app.route('/exec')
+def execute_command():
+    # Shell execution vulnerability
+    cmd = request.args.get('cmd')
+    result = subprocess.check_output(cmd, shell=True)
+    return result
+
+@app.route('/env')
+def get_env():
+    # Access environment variables
+    api_key = os.environ.get('API_KEY')
+    secret = os.environ.get('SECRET_TOKEN')
+    return {'api_key': api_key, 'secret': secret}
+
+if __name__ == '__main__':
+    app.run(debug=True)