apiforge-analyzer 1.1.0 → 1.2.1

package/dist/cjs/detect.js

@@ -1,68 +1,88 @@
 "use strict";
-/**
- * Framework detection utilities
- */
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.detectFramework = detectFramework;
+const fs_1 = require("fs");
+const path_1 = require("path");
+const cwd = () => process.cwd();
+function fileExists(rel) {
+    return (0, fs_1.existsSync)((0, path_1.join)(cwd(), rel));
+}
+function tryResolve(mod) {
+    try {
+        // eslint-disable-next-line @typescript-eslint/no-require-imports
+        require.resolve(mod, { paths: [cwd()] });
+        return true;
+    }
+    catch {
+        return false;
+    }
+}
 /**
- * Detect which framework is being used
+ * Detect the web framework from the live app instance + filesystem hints.
+ * Confidence is used to pick the best match when multiple signals fire.
  */
 function detectFramework(app) {
-    // Express detection
+    // ── Instance-based detection (highest confidence) ─────────────────────────
     if (app && typeof app === 'function') {
+        // Express: _router or lazyrouter
         if (app._router || (app.lazyrouter && typeof app.lazyrouter === 'function')) {
             return { name: 'express', confidence: 1.0 };
         }
-    }
-    // Next.js detection
-    try {
-        const fs = require('fs');
-        const path = require('path');
-        // Check for Next.js Pages Router
-        if (fs.existsSync(path.join(process.cwd(), 'pages'))) {
-            const hasApiFolder = fs.existsSync(path.join(process.cwd(), 'pages', 'api'));
-            if (hasApiFolder) {
-                return { name: 'nextjs-pages', confidence: 0.9 };
-            }
-        }
-        // Check for Next.js App Router
-        if (fs.existsSync(path.join(process.cwd(), 'app'))) {
-            return { name: 'nextjs-app', confidence: 0.9 };
+        // Koa: middleware array
+        if (Array.isArray(app.middleware) && typeof app.use === 'function' && app.context) {
+            return { name: 'koa', confidence: 0.95 };
         }
-        // Check for next.config
-        if (fs.existsSync(path.join(process.cwd(), 'next.config.js')) ||
-            fs.existsSync(path.join(process.cwd(), 'next.config.mjs'))) {
-            return { name: 'nextjs-pages', confidence: 0.7 };
-        }
-    }
-    catch (e) {
-        // Ignore fs errors
     }
-    // Vite detection
-    try {
-        require.resolve('vite');
-        return { name: 'vite', confidence: 0.8 };
+    // Fastify: inject method and route method
+    if (app &&
+        typeof app === 'object' &&
+        typeof app.inject === 'function' &&
+        typeof app.route === 'function') {
+        return { name: 'fastify', confidence: 1.0 };
     }
-    catch (e) {
-        // Vite not installed
+    // Hapi: server with route + start methods
+    if (app &&
+        typeof app === 'object' &&
+        typeof app.route === 'function' &&
+        typeof app.start === 'function' &&
+        typeof app.stop === 'function') {
+        return { name: 'hapi', confidence: 0.95 };
     }
-    // React Router detection
-    try {
-        require.resolve('react-router-dom');
-        return { name: 'react-router', confidence: 0.7 };
+    // NestJS application
+    if (app &&
+        typeof app === 'object' &&
+        typeof app.getHttpServer === 'function' &&
+        typeof app.listen === 'function') {
+        return { name: 'nestjs', confidence: 0.95 };
     }
-    catch (e) {
-        // React Router not installed
+    // ── Filesystem detection ──────────────────────────────────────────────────
+    // Next.js App Router
+    if (fileExists('app') && (fileExists('app/layout.tsx') || fileExists('app/layout.js'))) {
+        return { name: 'nextjs-app', confidence: 0.92 };
     }
-    // Node HTTP detection
-    try {
-        const http = require('http');
-        if (http) {
-            return { name: 'node-http', confidence: 0.5 };
-        }
+    // Next.js Pages Router
+    if (fileExists('pages/api') || fileExists('src/pages/api')) {
+        return { name: 'nextjs-pages', confidence: 0.90 };
     }
-    catch (e) {
-        // HTTP module not available
+    if (fileExists('next.config.js') ||
+        fileExists('next.config.mjs') ||
+        fileExists('next.config.ts')) {
+        return { name: 'nextjs-pages', confidence: 0.75 };
     }
+    // ── Dependency-based detection (lowest confidence) ────────────────────────
+    if (tryResolve('express'))
+        return { name: 'express', confidence: 0.70 };
+    if (tryResolve('fastify'))
+        return { name: 'fastify', confidence: 0.70 };
+    if (tryResolve('koa'))
+        return { name: 'koa', confidence: 0.70 };
+    if (tryResolve('@hapi/hapi') || tryResolve('hapi'))
+        return { name: 'hapi', confidence: 0.70 };
+    if (tryResolve('@nestjs/core'))
+        return { name: 'nestjs', confidence: 0.70 };
+    if (tryResolve('vite'))
+        return { name: 'vite', confidence: 0.60 };
+    if (tryResolve('react-router-dom'))
+        return { name: 'react-router', confidence: 0.55 };
     return { name: 'unknown', confidence: 0 };
 }

package/dist/cjs/frameworks/express.js

@@ -1,10 +1,10 @@
 "use strict";
 /**
- * Express analyzer — accurate route + payload extraction
+ * Express route analyzer — deep extraction of routes, parameters, and auth patterns
  */
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.analyzeExpress = analyzeExpress;
-// ─── Path normalisation ───────────────────────────────────────────────────────
+// ─── Path helpers ─────────────────────────────────────────────────────────────
 function normalizePath(raw) {
     return raw
         .replace(/\\\//g, '/')
@@ -13,11 +13,10 @@ function normalizePath(raw) {
         .replace(/\\\w/g, '')
         .replace(/[\^\$\?\\]/g, '')
         .replace(/\/+/g, '/')
-        .replace(/\/$/, '')
-        || '/';
+        .replace(/\/$/, '') || '/';
 }
 function tagFromPath(path) {
-    const skip = new Set(['api', 'v1', 'v2', 'v3', 'v4']);
+    const skip = new Set(['api', 'v1', 'v2', 'v3', 'v4', 'v5']);
     const meaningful = path
         .split('/')
         .filter(Boolean)
@@ -27,18 +26,18 @@ function tagFromPath(path) {
 function generateSummary(method, path) {
     const parts = path.split('/').filter(s => s && !s.startsWith(':'));
     const action = parts[parts.length - 1] || '';
-    const resource = parts[parts.length - 2] || '';
+    const res = parts[parts.length - 2] || '';
     const map = {
-        GET: action ? `Get ${action}` : `List ${resource}`,
-        POST: action ? `Create ${action}` : `Create ${resource}`,
-        PUT: action ? `Update ${action}` : `Update ${resource}`,
-        PATCH: action ? `Patch ${action}` : `Patch ${resource}`,
-        DELETE: action ? `Delete ${action}` : `Delete ${resource}`,
+        GET: action ? `Get ${action}` : `List ${res}`,
+        POST: action ? `Create ${action}` : `Create ${res}`,
+        PUT: action ? `Update ${action}` : `Replace ${res}`,
+        PATCH: action ? `Patch ${action}` : `Patch ${res}`,
+        DELETE: action ? `Delete ${action}` : `Delete ${res}`,
     };
     const base = map[method] || `${method} ${path}`;
     return (base.charAt(0).toUpperCase() + base.slice(1)).replace(/[-_]/g, ' ');
 }
-// ─── Main analyser ────────────────────────────────────────────────────────────
+// ─── Main export ─────────────────────────────────────────────────────────────
 function analyzeExpress(app) {
     const routes = [];
     const seen = new Set();
@@ -53,36 +52,45 @@ function analyzeExpress(app) {
         console.warn('⚠️  No routes found — ensure routes are registered before analyze()');
         return routes;
     }
+    walkStack(stack, '', routes, seen);
+    return routes;
+}
+function walkStack(stack, basePath, out, seen) {
     for (const layer of stack) {
         if (layer.route) {
-            const r = buildRoute(layer.route, '');
+            const r = buildRoute(layer.route, basePath);
             if (r && !seen.has(r.method + r.path)) {
-                routes.push(r);
+                out.push(r);
                 seen.add(r.method + r.path);
             }
         }
         else if (layer.handle?.stack) {
-            let base = '';
+            // Router or sub-app mounted at a prefix
+            let prefix = '';
             if (layer.regexp?.source)
-                base = normalizePath(layer.regexp.source);
+                prefix = normalizePath(layer.regexp.source);
             else if (layer.path)
-                base = normalizePath(layer.path);
+                prefix = normalizePath(layer.path);
             else if (typeof layer.route === 'string')
-                base = normalizePath(layer.route);
-            for (const sub of layer.handle.stack) {
-                if (sub.route) {
-                    const r = buildRoute(sub.route, base);
-                    if (r && !seen.has(r.method + r.path)) {
-                        routes.push(r);
-                        seen.add(r.method + r.path);
-                    }
-                }
-            }
+                prefix = normalizePath(layer.route);
+            const combined = combinePaths(basePath, prefix);
+            walkStack(layer.handle.stack, combined, out, seen);
         }
     }
-    return routes;
+}
+function combinePaths(base, suffix) {
+    const b = base === '/' ? '' : base;
+    const s = suffix === '/' ? '' : suffix;
+    return b + s || '/';
 }
 // ─── Route builder ────────────────────────────────────────────────────────────
+const AUTH_NAMES = new Set([
+    'authenticateToken', 'authenticate', 'verifyToken', 'requireAuth',
+    'auth', 'protect', 'isAuth', 'checkAuth', 'jwtAuth', 'bearerAuth',
+    'isAuthenticated', 'requireLogin', 'ensureAuth', 'verifyJWT',
+    'checkToken', 'authMiddleware', 'jwt', 'bearer', 'apiKeyAuth',
+    'passport.authenticate',
+]);
 function buildRoute(route, basePath) {
     if (!route.path)
         return null;
@@ -103,59 +111,44 @@ function buildRoute(route, basePath) {
     const middleware = stack
         .map((l) => l.name)
         .filter((n) => n && n !== '<anonymous>' && n !== 'bound dispatch' && n !== 'bound ');
-    // ── Join all handler source text ───────────────────────────────────────────
+    // ── Join all handler source ────────────────────────────────────────────────
     const src = stack.map((l) => l.handle?.toString() ?? '').join('\n');
-    // ── Path params (from route pattern) ──────────────────────────────────────
+    // ── Path params from route pattern ─────────────────────────────────────────
     const pathParams = unique([...fullPath.matchAll(/:(\w+)/g)].map(m => m[1]));
     // ── Query params ───────────────────────────────────────────────────────────
     const queryParams = unique([
-        // req.query.foo
         ...matchAll(src, /req\.query\.([a-zA-Z0-9_$]+)/g),
-        // { foo, bar } = req.query  /  { foo: renamed } = req.query
         ...destructured(src, /(?:const|let|var)\s+\{([^}]+)\}\s*=\s*req\.query/g),
-        // req.query['foo']
         ...matchAll(src, /req\.query\[['"]([a-zA-Z0-9_$]+)['"]\]/g),
     ]);
     // ── Request body fields ────────────────────────────────────────────────────
     const requestBodyFields = unique([
-        // req.body.foo
         ...matchAll(src, /req\.body\.([a-zA-Z0-9_$]+)/g),
-        // { foo, bar: alias, baz = default } = req.body
         ...destructured(src, /(?:const|let|var)\s+\{([^}]+)\}\s*=\s*req\.body/g),
-        // req.body['foo']
         ...matchAll(src, /req\.body\[['"]([a-zA-Z0-9_$]+)['"]\]/g),
-        // body.foo (when `const body = req.body`)
         ...bodyAliasFields(src),
-        // Zod: z.object({ field: z.string() }).parse(req.body)
         ...zodFields(src),
-        // Joi: Joi.object({ field: Joi.string() }).validate(req.body)
         ...joiFields(src),
+        ...typeInterfaceFields(src),
     ]);
     // ── Header params ──────────────────────────────────────────────────────────
     const headerParams = unique([
         ...matchAll(src, /req\.headers\[['"]([a-zA-Z0-9_$-]+)['"]\]/g),
         ...matchAll(src, /req\.get\s*\(\s*['"]([a-zA-Z0-9_$-]+)['"]\s*\)/g),
-        // req.headers.authorization, req.headers['x-api-key'], etc.
         ...matchAll(src, /req\.headers\.([a-zA-Z0-9_$]+)/g),
     ]);
-    // ── Response status codes from `res.status(nnn)` ──────────────────────────
+    // ── Response status codes ──────────────────────────────────────────────────
     const responseStatuses = unique([...src.matchAll(/res\.status\s*\(\s*(\d{3})\s*\)/g)].map(m => parseInt(m[1], 10)));
     // ── Auth detection ─────────────────────────────────────────────────────────
-    const AUTH_NAMES = new Set([
-        'authenticateToken', 'authenticate', 'verifyToken', 'requireAuth', 'auth',
-        'protect', 'isAuth', 'checkAuth', 'jwtAuth', 'bearerAuth', 'isAuthenticated',
-        'requireLogin', 'ensureAuth', 'verifyJWT', 'checkToken', 'authMiddleware',
-        'passport.authenticate', 'jwt', 'bearer',
-    ]);
     const hasAuth = middleware.some(m => AUTH_NAMES.has(m) || [...AUTH_NAMES].some(a => m.toLowerCase().includes(a.toLowerCase()))) ||
-        /req\.user|req\.auth|verifyToken|jwt\.verify|passport\.authenticate/.test(src);
+        /req\.user|req\.auth|req\.currentUser|verifyToken|jwt\.verify|passport\.authenticate/.test(src);
     const method = methods[0];
     const tag = tagFromPath(fullPath);
     const summary = generateSummary(method, fullPath);
     const operationId = `${method.toLowerCase()}_${fullPath
         .replace(/[^a-zA-Z0-9]/g, '_')
         .replace(/_+/g, '_')
-        .replace(/^_|_$/g, '')}`;
+        .replace(/^_|_$/, '')}`;
     return {
         method,
         path: fullPath,
@@ -175,49 +168,33 @@ function buildRoute(route, basePath) {
     };
 }
 // ─── Extraction helpers ───────────────────────────────────────────────────────
-/** Run a global regex and return capture group 1 for every match. */
 function matchAll(src, re) {
     return [...src.matchAll(re)].map(m => m[1]).filter(Boolean);
 }
-/**
- * Extract field names from all destructuring patterns like:
- *   const { a, b: alias, c = default, d: alias2 = default } = req.body
- * Runs ALL occurrences of the given regex, not just the first.
- */
 function destructured(src, re) {
     const results = [];
     for (const match of src.matchAll(re)) {
         match[1]
             .split(',')
-            .map(s => s.trim())
-            // handle "alias: original" — we want the local binding (left side)
-            .map(s => s.split(':')[0].trim())
-            // strip default value
-            .map(s => s.split('=')[0].trim())
+            .map(s => s.trim().split(':')[0].trim().split('=')[0].trim())
             .filter(Boolean)
             .forEach(f => results.push(f));
     }
     return results;
 }
-/**
- * When a developer writes `const body = req.body` and then accesses `body.foo`.
- */
 function bodyAliasFields(src) {
-    const aliasMatch = src.match(/(?:const|let|var)\s+(\w+)\s*=\s*req\.body\b/);
-    if (!aliasMatch)
+    const m = src.match(/(?:const|let|var)\s+(\w+)\s*=\s*req\.body\b/);
+    if (!m)
         return [];
-    const alias = aliasMatch[1];
+    const alias = m[1];
     if (alias === 'body')
         return matchAll(src, /body\.([a-zA-Z0-9_$]+)/g);
     const re = new RegExp(`\\b${alias}\\.([a-zA-Z0-9_$]+)`, 'g');
     return matchAll(src, re);
 }
-/** Extract field names from Zod object schemas. */
 function zodFields(src) {
     const results = [];
-    // z.object({ field: z.xxx(), ... }).parse(req.body) or .safeParse
-    const zodRe = /z\.object\s*\(\s*\{([^}]+)\}/g;
-    for (const match of src.matchAll(zodRe)) {
+    for (const match of src.matchAll(/z\.object\s*\(\s*\{([^}]+)\}/g)) {
         match[1]
             .split(',')
             .map(s => s.trim().split(':')[0].trim())
@@ -226,12 +203,9 @@ function zodFields(src) {
     }
     return results;
 }
-/** Extract field names from Joi object schemas. */
 function joiFields(src) {
     const results = [];
-    // Joi.object({ field: Joi.xxx() }) or yup.object().shape({ field: ... })
-    const joiRe = /(?:Joi|yup)\.object\s*\(?\s*(?:\.shape\s*\()?\s*\{([^}]+)\}/g;
-    for (const match of src.matchAll(joiRe)) {
+    for (const match of src.matchAll(/(?:Joi|yup)\.object\s*\(?\s*(?:\.shape\s*\()?\s*\{([^}]+)\}/g)) {
         match[1]
             .split(',')
             .map(s => s.trim().split(':')[0].trim())
@@ -240,6 +214,38 @@ function joiFields(src) {
     }
     return results;
 }
+/**
+ * Detects TypeScript interface/type fields used as request body type parameters.
+ * Handles patterns like:
+ *   const { name, email } = req.body as CreateUserDto
+ *   function handler(req: Request<{}, {}, CreateUserBody>) { ... }
+ * This runs the interface declaration through a lightweight regex rather than a
+ * full TS AST to keep the package zero-dependency.
+ */
+function typeInterfaceFields(src) {
+    const results = [];
+    // Extract type name used as body generic: Request<P, ResBody, BodyType>
+    const bodyTypeNames = new Set();
+    for (const m of src.matchAll(/Request\s*<[^,]*,[^,]*,\s*([A-Z][a-zA-Z0-9_]*)\s*[,>]/g)) {
+        bodyTypeNames.add(m[1]);
+    }
+    // `req.body as SomeType`
+    for (const m of src.matchAll(/req\.body\s+as\s+([A-Z][a-zA-Z0-9_]*)/g)) {
+        bodyTypeNames.add(m[1]);
+    }
+    for (const typeName of bodyTypeNames) {
+        // Find interface { field: type; ... } or type alias { field: type }
+        const blockRe = new RegExp(`(?:interface|type)\\s+${typeName}\\s*(?:extends[^{]+)?\\{([^}]+)\\}`, 'g');
+        for (const match of src.matchAll(blockRe)) {
+            match[1]
+                .split(/[;,\n]/)
+                .map(line => line.trim().split(/[?:]/)[0].trim())
+                .filter(f => /^[a-zA-Z_$]/.test(f))
+                .forEach(f => results.push(f));
+        }
+    }
+    return results;
+}
 function unique(items) {
     return Array.from(new Set(items.filter(Boolean)));
 }

package/dist/cjs/index.js

@@ -1,10 +1,12 @@
 "use strict";
 /**
- * Main analyzer entry point with dual module support
+ * APIForge Analyzer — main entry point (dual ESM/CJS)
  */
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.detectFramework = exports.uploadRoutes = exports.exportToJSON = exports.analyzeReactRouter = exports.analyzeVite = exports.analyzeNextApp = exports.analyzeNextPages = exports.analyzeExpress = void 0;
 exports.analyze = analyze;
+const fs_1 = require("fs");
+const path_1 = require("path");
 const express_js_1 = require("./frameworks/express.js");
 Object.defineProperty(exports, "analyzeExpress", { enumerable: true, get: function () { return express_js_1.analyzeExpress; } });
 const nextjs_pages_js_1 = require("./frameworks/nextjs-pages.js");
@@ -18,83 +20,142 @@ Object.defineProperty(exports, "analyzeReactRouter", { enumerable: true, get: fu
 const detect_js_1 = require("./detect.js");
 const export_js_1 = require("./export.js");
 const uploader_js_1 = require("./uploader.js");
-// Global state for debouncing
-const analysisState = new Map();
-const DEBOUNCE_TIME = 5000;
+// ─── Env file loader — no dotenv dependency ───────────────────────────────────
 /**
- * Main analyze function with auto-detection
+ * Read a single variable from a .env-style file.
+ * Plain Node/Express doesn't auto-load .env.local, so we do it ourselves.
+ * The package never requires dotenv or any other dep for this.
  */
+function readEnvFile(varName) {
+    const candidates = [
+        '.env.local',
+        '.env.development.local',
+        '.env.development',
+        '.env',
+    ];
+    for (const file of candidates) {
+        try {
+            const content = (0, fs_1.readFileSync)((0, path_1.join)(process.cwd(), file), 'utf-8');
+            for (const line of content.split('\n')) {
+                const trimmed = line.trim();
+                if (trimmed.startsWith('#') || !trimmed.includes('='))
+                    continue;
+                const eqIdx = trimmed.indexOf('=');
+                const key = trimmed.slice(0, eqIdx).trim();
+                if (key !== varName)
+                    continue;
+                return trimmed.slice(eqIdx + 1).trim().replace(/^['"]|['"]$/g, '');
+            }
+        }
+        catch { }
+    }
+    return undefined;
+}
+// ─── File-based debounce (survives nodemon restarts) ──────────────────────────
+const DEBOUNCE_FILE = '.apiforge-last-run.json';
+const DEBOUNCE_MS = 30000; // 30 s
+function readLastRunMs() {
+    try {
+        const raw = (0, fs_1.readFileSync)((0, path_1.join)(process.cwd(), DEBOUNCE_FILE), 'utf-8');
+        return JSON.parse(raw).timestamp ?? 0;
+    }
+    catch {
+        return 0;
+    }
+}
+function stampLastRun() {
+    try {
+        (0, fs_1.writeFileSync)((0, path_1.join)(process.cwd(), DEBOUNCE_FILE), JSON.stringify({ timestamp: Date.now() }), 'utf-8');
+    }
+    catch { }
+}
+// ─── Main analyze ─────────────────────────────────────────────────────────────
 async function analyze(app, options) {
-    // Skip in production
+    // Never run in production
     if (options.skipInProduction !== false && process.env.NODE_ENV === 'production') {
-        console.log('⏭️  Skipping analysis in production');
         return [];
     }
-    // Debounce check
+    // File-based debounce — survives nodemon restarts
     if (options.runOnce !== false) {
-        const cached = analysisState.get(options.projectName);
-        const now = Date.now();
-        if (cached && (now - cached.timestamp) < DEBOUNCE_TIME) {
-            console.log(`⚡ Analysis skipped - already ran ${Math.round((now - cached.timestamp) / 1000)}s ago`);
-            return cached.routes;
+        const elapsed = Date.now() - readLastRunMs();
+        if (elapsed < DEBOUNCE_MS) {
+            console.log(`⚡ APIForge: skipped (last run ${Math.round(elapsed / 1000)}s ago)`);
+            return [];
         }
+        stampLastRun();
+    }
+    // ── Resolve API key ─────────────────────────────────────────────────────────
+    // Priority: explicit option → process.env → .env.local/.env file
+    // This means the package works even if the user's server doesn't load dotenv.
+    if (!options.apiKey) {
+        options.apiKey =
+            process.env.APIFORGE_API_KEY ||
+                readEnvFile('APIFORGE_API_KEY');
     }
-    console.log(`🔍 Analyzing ${options.projectName}...`);
-    // CRITICAL: Prevent restart loops - force saveJson=false when uploading
+    console.log(`🔍 APIForge: analyzing ${options.projectName}…`);
+    // Writing saveJson files into the watched dir triggers nodemon restart loops
     if (options.upload !== false && options.apiKey) {
         options.saveJson = false;
     }
+    // ── Early failure: upload desired but no API key anywhere ──────────────────
+    if (options.upload !== false && !options.apiKey) {
+        const msg = 'APIFORGE_API_KEY not found in options, process.env, or .env.local';
+        console.error(`❌ APIForge: ${msg}`);
+        (0, uploader_js_1.writeStatusFile)('error', { error: msg });
+        return [];
+    }
     let routes = [];
     let framework = options.framework;
-    // Auto-detect framework if not specified
     if (!framework) {
-        const detected = (0, detect_js_1.detectFramework)(app);
-        framework = detected.name;
+        framework = (0, detect_js_1.detectFramework)(app).name;
         console.log(`📦 Detected framework: ${framework}`);
     }
-    // Analyze based on framework
-    switch (framework) {
-        case 'express':
-            if (!app) {
-                console.error('❌ Express app instance required');
+    try {
+        switch (framework) {
+            case 'express':
+                if (!app) {
+                    const msg = 'Express app instance required — pass your app object to analyze()';
+                    console.error(`❌ ${msg}`);
+                    (0, uploader_js_1.writeStatusFile)('error', { error: msg });
+                    return [];
+                }
+                routes = await (0, express_js_1.analyzeExpress)(app);
+                break;
+            case 'nextjs-pages':
+                routes = await (0, nextjs_pages_js_1.analyzeNextPages)(options.nextDir || 'pages/api');
+                break;
+            case 'nextjs-app':
+                routes = await (0, nextjs_app_js_1.analyzeNextApp)(options.nextDir || 'app');
+                break;
+            case 'vite':
+                routes = await (0, vite_js_1.analyzeVite)(options.nextDir || 'vite.config.js');
+                break;
+            case 'react-router':
+                routes = await (0, react_router_js_1.analyzeReactRouter)(options.nextDir || 'src/routes.tsx');
+                break;
+            default:
+                const msg = `Framework "${framework}" not supported yet (express, nextjs-pages, nextjs-app, vite, react-router)`;
+                console.warn(`⚠️  APIForge: ${msg}`);
+                (0, uploader_js_1.writeStatusFile)('error', { error: msg });
                 return [];
-            }
-            routes = await (0, express_js_1.analyzeExpress)(app);
-            break;
-        case 'nextjs-pages':
-            routes = await (0, nextjs_pages_js_1.analyzeNextPages)(options.nextDir || 'pages/api');
-            break;
-        case 'nextjs-app':
-            routes = await (0, nextjs_app_js_1.analyzeNextApp)(options.nextDir || 'app');
-            break;
-        case 'vite':
-            routes = await (0, vite_js_1.analyzeVite)(options.nextDir || 'vite.config.js');
-            break;
-        case 'react-router':
-            routes = await (0, react_router_js_1.analyzeReactRouter)(options.nextDir || 'src/routes.tsx');
-            break;
-        case 'node-http':
-        case 'unknown':
-        default:
-            console.warn(`⚠️  Framework "${framework}" not supported yet`);
-            console.log('💡 Supported: express, nextjs-pages, nextjs-app, vite, react-router');
-            console.log('💡 Tip: Specify framework manually: { framework: "express" }');
-            return [];
+        }
     }
-    console.log(`✅ Found ${routes.length} routes`);
-    // Cache results
-    if (options.runOnce !== false) {
-        analysisState.set(options.projectName, {
-            timestamp: Date.now(),
-            routes
-        });
+    catch (err) {
+        const msg = err.message || 'Unknown error during route extraction';
+        console.error(`❌ APIForge analysis error: ${msg}`);
+        (0, uploader_js_1.writeStatusFile)('error', { error: msg });
+        return [];
     }
-    // Save JSON (only if not uploading)
+    if (routes.length === 0) {
+        const msg = 'No routes found — ensure routes are registered before analyze() is called';
+        console.warn(`⚠️  APIForge: ${msg}`);
+        (0, uploader_js_1.writeStatusFile)('error', { error: msg });
+        return [];
+    }
+    console.log(`✅ Found ${routes.length} routes`);
     if (options.saveJson) {
-        const filePath = options.jsonPath || 'api-export.json';
-        await (0, export_js_1.exportToJSON)(routes, options.projectName, filePath, options.baseUrl);
+        await (0, export_js_1.exportToJSON)(routes, options.projectName, options.jsonPath || 'api-export.json', options.baseUrl);
     }
-    // Upload to APIForge
     if (options.upload !== false && options.apiKey) {
         await (0, uploader_js_1.uploadRoutes)(routes, {
             projectName: options.projectName,
@@ -111,7 +172,6 @@ var uploader_js_2 = require("./uploader.js");
 Object.defineProperty(exports, "uploadRoutes", { enumerable: true, get: function () { return uploader_js_2.uploadRoutes; } });
 var detect_js_2 = require("./detect.js");
 Object.defineProperty(exports, "detectFramework", { enumerable: true, get: function () { return detect_js_2.detectFramework; } });
-// Default export for CommonJS
 exports.default = {
     analyze,
     analyzeExpress: express_js_1.analyzeExpress,
@@ -121,5 +181,5 @@ exports.default = {
     analyzeReactRouter: react_router_js_1.analyzeReactRouter,
     exportToJSON: export_js_1.exportToJSON,
     uploadRoutes: uploader_js_1.uploadRoutes,
-    detectFramework: detect_js_1.detectFramework
+    detectFramework: detect_js_1.detectFramework,
 };