apiwatcher-cli 0.1.0

package/dist/report/render.js

@@ -0,0 +1,211 @@
+/** Cap the call sites listed per finding so a big repo still produces a readable report. */
+const SITES_PER_FINDING = 8;
+const COLORS = {
+    reset: '\u001b[0m',
+    bold: '\u001b[1m',
+    dim: '\u001b[2m',
+    red: '\u001b[31m',
+    yellow: '\u001b[33m',
+    cyan: '\u001b[36m',
+    green: '\u001b[32m',
+    grey: '\u001b[90m',
+};
+export function supportsColor() {
+    if (process.env.NO_COLOR !== undefined && process.env.NO_COLOR !== '')
+        return false;
+    if (process.env.FORCE_COLOR !== undefined && process.env.FORCE_COLOR !== '0')
+        return true;
+    return process.stdout.isTTY === true;
+}
+function makePaint(enabled) {
+    return (text, ...styles) => {
+        if (!enabled)
+            return text;
+        return `${styles.map((s) => COLORS[s]).join('')}${text}${COLORS.reset}`;
+    };
+}
+const SEVERITY_LABEL = {
+    breaking: 'BREAKING',
+    deprecating: 'DEPRECATED',
+    additive: 'ADDED',
+};
+function severityStyle(severity) {
+    if (severity === 'breaking')
+        return ['red', 'bold'];
+    if (severity === 'deprecating')
+        return ['yellow'];
+    return ['green'];
+}
+function versionLine(report) {
+    if (report.currentVersion === null) {
+        return 'current version: unknown (no apiVersion pin and no installed SDK found)';
+    }
+    const how = report.currentVersionSource === 'pinned'
+        ? 'pinned in code'
+        : 'the installed SDK default — no explicit apiVersion pin';
+    return `current version: ${report.currentVersion} (${how})`;
+}
+export function renderTerminal(report, options = {}) {
+    const paint = makePaint(options.color ?? supportsColor());
+    const out = [];
+    out.push(paint('apiwatcher · Stripe', 'bold'));
+    out.push(paint(versionLine(report), 'grey'));
+    out.push(paint(`target version:  ${report.targetVersion}`, 'grey'));
+    out.push(paint(`scanned ${report.filesScanned} file(s) under ${report.root}`, 'grey'));
+    out.push('');
+    if (report.findings.length === 0) {
+        out.push(paint('✓ Nothing in this repo is affected by changes in that range.', 'green', 'bold'));
+        if (report.unaffectedChanges > 0) {
+            out.push(paint(`  (${report.unaffectedChanges} change(s) in range touch code you do not use)`, 'grey'));
+        }
+        out.push(...renderWarnings(report, paint));
+        return `${out.join('\n')}\n`;
+    }
+    const summary = [
+        report.totals.breaking > 0
+            ? paint(`${report.totals.breaking} breaking`, ...severityStyle('breaking'))
+            : null,
+        report.totals.deprecating > 0
+            ? paint(`${report.totals.deprecating} deprecating`, ...severityStyle('deprecating'))
+            : null,
+        report.totals.additive > 0 ? paint(`${report.totals.additive} additive`, 'green') : null,
+    ].filter((s) => s !== null);
+    out.push(`${paint('Impact:', 'bold')} ${summary.join(paint(' · ', 'grey'))}`);
+    out.push('');
+    for (const finding of report.findings) {
+        out.push(renderFindingTerminal(finding, paint));
+        out.push('');
+    }
+    if (report.unaffectedChanges > 0) {
+        out.push(paint(`${report.unaffectedChanges} other change(s) in range do not touch this repo.`, 'grey'));
+    }
+    out.push(...renderWarnings(report, paint));
+    return `${out.join('\n')}\n`;
+}
+function renderWarnings(report, paint) {
+    if (report.warnings.length === 0)
+        return [];
+    const out = ['', paint('Notes:', 'dim')];
+    for (const w of report.warnings)
+        out.push(paint(`  · ${w}`, 'grey'));
+    return out;
+}
+function renderFindingTerminal(finding, paint) {
+    const { change, sites } = finding;
+    const lines = [];
+    const tag = paint(SEVERITY_LABEL[finding.severity], ...severityStyle(finding.severity));
+    const where = change.path
+        ? `${String(change.method ?? '').toUpperCase()} ${change.path}`
+        : (change.event ?? '');
+    lines.push(`${tag} ${paint(where, 'cyan')}  ${paint(change.id, 'grey')}`);
+    lines.push(`  ${change.note}`);
+    lines.push(`  ${paint('→', 'bold')} ${finding.suggestion}`);
+    if (finding.confidence < 0.9) {
+        lines.push(paint(`  confidence ${finding.confidence.toFixed(2)} — verify before changing`, 'yellow'));
+    }
+    const shown = sites.slice(0, SITES_PER_FINDING);
+    for (const site of shown) {
+        lines.push(`    ${paint(`${site.evidence.file}:${site.evidence.line}:${site.evidence.column}`, 'dim')}  ${site.evidence.snippet}`);
+    }
+    if (sites.length > shown.length) {
+        lines.push(paint(`    … and ${sites.length - shown.length} more call site(s)`, 'grey'));
+    }
+    if (change.docsUrl)
+        lines.push(paint(`    docs: ${change.docsUrl}`, 'grey'));
+    return lines.join('\n');
+}
+// --------------------------------------------------------------------------
+export function renderMarkdown(report) {
+    const out = [];
+    out.push('# Stripe API impact report');
+    out.push('');
+    out.push(`- **${versionLine(report).replace('current version: ', 'Current version:** ')}`);
+    out.push(`- **Target version:** ${report.targetVersion}`);
+    out.push(`- **Files scanned:** ${report.filesScanned}`);
+    out.push(`- **Generated:** ${report.scannedAt}`);
+    out.push('');
+    if (report.findings.length === 0) {
+        out.push('Nothing in this repo is affected by changes in that range.');
+        if (report.unaffectedChanges > 0) {
+            out.push('');
+            out.push(`${report.unaffectedChanges} change(s) in range touch code this repo does not use.`);
+        }
+        out.push(...markdownWarnings(report));
+        return `${out.join('\n')}\n`;
+    }
+    out.push(`**${report.totals.breaking} breaking**, ${report.totals.deprecating} deprecating, ${report.totals.additive} additive.`);
+    out.push('');
+    out.push('| Severity | Change | Where | Sites |');
+    out.push('| --- | --- | --- | --- |');
+    for (const f of report.findings) {
+        const where = f.change.path
+            ? `\`${String(f.change.method ?? '').toUpperCase()} ${f.change.path}\``
+            : `\`${f.change.event ?? ''}\``;
+        out.push(`| ${SEVERITY_LABEL[f.severity]} | ${escapePipes(f.change.note)} | ${where} | ${f.sites.length} |`);
+    }
+    out.push('');
+    for (const group of ['breaking', 'deprecating', 'additive']) {
+        const findings = report.findings.filter((f) => f.severity === group);
+        if (findings.length === 0)
+            continue;
+        out.push(`## ${group === 'breaking' ? 'Breaking' : group === 'deprecating' ? 'Deprecated' : 'Additive'}`);
+        out.push('');
+        for (const f of findings)
+            out.push(...markdownFinding(f));
+    }
+    if (report.unaffectedChanges > 0) {
+        out.push(`<sub>${report.unaffectedChanges} other change(s) in range do not touch this repo.</sub>`);
+        out.push('');
+    }
+    out.push(...markdownWarnings(report));
+    return `${out.join('\n')}\n`;
+}
+function markdownFinding(finding) {
+    const { change, sites } = finding;
+    const out = [];
+    const where = change.path
+        ? `${String(change.method ?? '').toUpperCase()} ${change.path}`
+        : (change.event ?? '');
+    out.push(`### \`${where}\` — ${change.note}`);
+    out.push('');
+    out.push(`**Fix:** ${finding.suggestion}`);
+    out.push('');
+    if (finding.confidence < 0.9) {
+        out.push(`> Confidence ${finding.confidence.toFixed(2)}. The call site was matched by shape rather than a resolved client binding — verify before changing.`);
+        out.push('');
+    }
+    const shown = sites.slice(0, SITES_PER_FINDING);
+    for (const site of shown) {
+        out.push(`- \`${site.evidence.file}:${site.evidence.line}\``);
+        out.push('  ```ts');
+        out.push(`  ${site.evidence.snippet}`);
+        out.push('  ```');
+    }
+    if (sites.length > shown.length) {
+        out.push(`- … and ${sites.length - shown.length} more call site(s)`);
+    }
+    out.push('');
+    const meta = [`id: \`${change.id}\``];
+    if (change.docsUrl)
+        meta.push(`[docs](${change.docsUrl})`);
+    out.push(`<sub>${meta.join(' · ')}</sub>`);
+    out.push('');
+    return out;
+}
+function markdownWarnings(report) {
+    if (report.warnings.length === 0)
+        return [];
+    const out = ['## Notes', ''];
+    for (const w of report.warnings)
+        out.push(`- ${w}`);
+    out.push('');
+    return out;
+}
+function escapePipes(text) {
+    return text.replace(/\|/g, '\\|');
+}
+/** Machine-readable output, for the GitHub App and for piping into other tools. */
+export function renderJson(report) {
+    return `${JSON.stringify(report, null, 2)}\n`;
+}
+//# sourceMappingURL=render.js.map

package/dist/report/render.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"render.js","sourceRoot":"","sources":["../../src/report/render.ts"],"names":[],"mappings":"AAGA,4FAA4F;AAC5F,MAAM,iBAAiB,GAAG,CAAC,CAAC;AAE5B,MAAM,MAAM,GAAG;IACb,KAAK,EAAE,WAAW;IAClB,IAAI,EAAE,WAAW;IACjB,GAAG,EAAE,WAAW;IAChB,GAAG,EAAE,YAAY;IACjB,MAAM,EAAE,YAAY;IACpB,IAAI,EAAE,YAAY;IAClB,KAAK,EAAE,YAAY;IACnB,IAAI,EAAE,YAAY;CACnB,CAAC;AAEF,MAAM,UAAU,aAAa;IAC3B,IAAI,OAAO,CAAC,GAAG,CAAC,QAAQ,KAAK,SAAS,IAAI,OAAO,CAAC,GAAG,CAAC,QAAQ,KAAK,EAAE;QAAE,OAAO,KAAK,CAAC;IACpF,IAAI,OAAO,CAAC,GAAG,CAAC,WAAW,KAAK,SAAS,IAAI,OAAO,CAAC,GAAG,CAAC,WAAW,KAAK,GAAG;QAAE,OAAO,IAAI,CAAC;IAC1F,OAAO,OAAO,CAAC,MAAM,CAAC,KAAK,KAAK,IAAI,CAAC;AACvC,CAAC;AAED,SAAS,SAAS,CAAC,OAAgB;IACjC,OAAO,CAAC,IAAY,EAAE,GAAG,MAAkC,EAAU,EAAE;QACrE,IAAI,CAAC,OAAO;YAAE,OAAO,IAAI,CAAC;QAC1B,OAAO,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,GAAG,IAAI,GAAG,MAAM,CAAC,KAAK,EAAE,CAAC;IAC1E,CAAC,CAAC;AACJ,CAAC;AAED,MAAM,cAAc,GAA6B;IAC/C,QAAQ,EAAE,UAAU;IACpB,WAAW,EAAE,YAAY;IACzB,QAAQ,EAAE,OAAO;CAClB,CAAC;AAEF,SAAS,aAAa,CAAC,QAAkB;IACvC,IAAI,QAAQ,KAAK,UAAU;QAAE,OAAO,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;IACpD,IAAI,QAAQ,KAAK,aAAa;QAAE,OAAO,CAAC,QAAQ,CAAC,CAAC;IAClD,OAAO,CAAC,OAAO,CAAC,CAAC;AACnB,CAAC;AAED,SAAS,WAAW,CAAC,MAAoB;IACvC,IAAI,MAAM,CAAC,cAAc,KAAK,IAAI,EAAE,CAAC;QACnC,OAAO,yEAAyE,CAAC;IACnF,CAAC;IACD,MAAM,GAAG,GACP,MAAM,CAAC,oBAAoB,KAAK,QAAQ;QACtC,CAAC,CAAC,gBAAgB;QAClB,CAAC,CAAC,wDAAwD,CAAC;IAC/D,OAAO,oBAAoB,MAAM,CAAC,cAAc,KAAK,GAAG,GAAG,CAAC;AAC9D,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,MAAoB,EAAE,UAA+B,EAAE;IACpF,MAAM,KAAK,GAAG,SAAS,CAAC,OAAO,CAAC,KAAK,IAAI,aAAa,EAAE,CAAC,CAAC;IAC1D,MAAM,GAAG,GAAa,EAAE,CAAC;IAEzB,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,qBAAqB,EAAE,MAAM,CAAC,CAAC,CAAC;IAC/C,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC;IAC7C,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,oBAAoB,MAAM,CAAC,aAAa,EAAE,EAAE,MAAM,CAAC,CAAC,CAAC;IACpE,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,WAAW,MAAM,CAAC,YAAY,kBAAkB,MAAM,CAAC,IAAI,EAAE,EAAE,MAAM,CAAC,CAAC,CAAC;IACvF,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAEb,IAAI,MAAM,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACjC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,8DAA8D,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC;QACjG,IAAI,MAAM,CAAC,iBAAiB,GAAG,CAAC,EAAE,CAAC;YACjC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,MAAM,CAAC,iBAAiB,gDAAgD,EAAE,MAAM,CAAC,CAAC,CAAC;QAC1G,CAAC;QACD,GAAG,CAAC,IAAI,CAAC,GAAG,cAAc,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC,CAAC;QAC3C,OAAO,GAAG,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC;IAC/B,CAAC;IAED,MAAM,OAAO,GAAG;QACd,MAAM,CAAC,MAAM,CAAC,QAAQ,GAAG,CAAC;YACxB,CAAC,CAAC,KAAK,CAAC,GAAG,MAAM,CAAC,MAAM,CAAC,QAAQ,WAAW,EAAE,GAAG,aAAa,CAAC,UAAU,CAAC,CAAC;YAC3E,CAAC,CAAC,IAAI;QACR,MAAM,CAAC,MAAM,CAAC,WAAW,GAAG,CAAC;YAC3B,CAAC,CAAC,KAAK,CAAC,GAAG,MAAM,CAAC,MAAM,CAAC,WAAW,cAAc,EAAE,GAAG,aAAa,CAAC,aAAa,CAAC,CAAC;YACpF,CAAC,CAAC,IAAI;QACR,MAAM,CAAC,MAAM,CAAC,QAAQ,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,MAAM,CAAC,MAAM,CAAC,QAAQ,WAAW,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI;KACzF,CAAC,MAAM,CAAC,CAAC,CAAC,EAAe,EAAE,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC;IACzC,GAAG,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC,SAAS,EAAE,MAAM,CAAC,IAAI,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC;IAC9E,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAEb,KAAK,MAAM,OAAO,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;QACtC,GAAG,CAAC,IAAI,CAAC,qBAAqB,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC,CAAC;QAChD,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACf,CAAC;IAED,IAAI,MAAM,CAAC,iBAAiB,GAAG,CAAC,EAAE,CAAC;QACjC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,MAAM,CAAC,iBAAiB,mDAAmD,EAAE,MAAM,CAAC,CAAC,CAAC;IAC1G,CAAC;IACD,GAAG,CAAC,IAAI,CAAC,GAAG,cAAc,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC,CAAC;IAC3C,OAAO,GAAG,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC;AAC/B,CAAC;AAED,SAAS,cAAc,CAAC,MAAoB,EAAE,KAAmC;IAC/E,IAAI,MAAM,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IAC5C,MAAM,GAAG,GAAG,CAAC,EAAE,EAAE,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC,CAAC;IACzC,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,QAAQ;QAAE,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC,CAAC;IACrE,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,qBAAqB,CAAC,OAAgB,EAAE,KAAmC;IAClF,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,OAAO,CAAC;IAClC,MAAM,KAAK,GAAa,EAAE,CAAC;IAE3B,MAAM,GAAG,GAAG,KAAK,CAAC,cAAc,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,GAAG,aAAa,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC;IACxF,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI;QACvB,CAAC,CAAC,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,IAAI,MAAM,CAAC,IAAI,EAAE;QAC/D,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC;IACzB,KAAK,CAAC,IAAI,CAAC,GAAG,GAAG,IAAI,KAAK,CAAC,KAAK,EAAE,MAAM,CAAC,KAAK,KAAK,CAAC,MAAM,CAAC,EAAE,EAAE,MAAM,CAAC,EAAE,CAAC,CAAC;IAC1E,KAAK,CAAC,IAAI,CAAC,KAAK,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;IAC/B,KAAK,CAAC,IAAI,CAAC,KAAK,KAAK,CAAC,GAAG,EAAE,MAAM,CAAC,IAAI,OAAO,CAAC,UAAU,EAAE,CAAC,CAAC;IAE5D,IAAI,OAAO,CAAC,UAAU,GAAG,GAAG,EAAE,CAAC;QAC7B,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,gBAAgB,OAAO,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC,2BAA2B,EAAE,QAAQ,CAAC,CAAC,CAAC;IACxG,CAAC;IAED,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,iBAAiB,CAAC,CAAC;IAChD,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,KAAK,CAAC,IAAI,CACR,OAAO,KAAK,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,EAAE,KAAK,CAAC,KAAK,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,CACvH,CAAC;IACJ,CAAC;IACD,IAAI,KAAK,CAAC,MAAM,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC;QAChC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,aAAa,KAAK,CAAC,MAAM,GAAG,KAAK,CAAC,MAAM,oBAAoB,EAAE,MAAM,CAAC,CAAC,CAAC;IAC1F,CAAC;IACD,IAAI,MAAM,CAAC,OAAO;QAAE,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,aAAa,MAAM,CAAC,OAAO,EAAE,EAAE,MAAM,CAAC,CAAC,CAAC;IAE7E,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC;AAED,6EAA6E;AAE7E,MAAM,UAAU,cAAc,CAAC,MAAoB;IACjD,MAAM,GAAG,GAAa,EAAE,CAAC;IAEzB,GAAG,CAAC,IAAI,CAAC,4BAA4B,CAAC,CAAC;IACvC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACb,GAAG,CAAC,IAAI,CAAC,OAAO,WAAW,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,mBAAmB,EAAE,qBAAqB,CAAC,EAAE,CAAC,CAAC;IAC3F,GAAG,CAAC,IAAI,CAAC,yBAAyB,MAAM,CAAC,aAAa,EAAE,CAAC,CAAC;IAC1D,GAAG,CAAC,IAAI,CAAC,wBAAwB,MAAM,CAAC,YAAY,EAAE,CAAC,CAAC;IACxD,GAAG,CAAC,IAAI,CAAC,oBAAoB,MAAM,CAAC,SAAS,EAAE,CAAC,CAAC;IACjD,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAEb,IAAI,MAAM,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACjC,GAAG,CAAC,IAAI,CAAC,4DAA4D,CAAC,CAAC;QACvE,IAAI,MAAM,CAAC,iBAAiB,GAAG,CAAC,EAAE,CAAC;YACjC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YACb,GAAG,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,iBAAiB,wDAAwD,CAAC,CAAC;QAChG,CAAC;QACD,GAAG,CAAC,IAAI,CAAC,GAAG,gBAAgB,CAAC,MAAM,CAAC,CAAC,CAAC;QACtC,OAAO,GAAG,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC;IAC/B,CAAC;IAED,GAAG,CAAC,IAAI,CACN,KAAK,MAAM,CAAC,MAAM,CAAC,QAAQ,gBAAgB,MAAM,CAAC,MAAM,CAAC,WAAW,iBAAiB,MAAM,CAAC,MAAM,CAAC,QAAQ,YAAY,CACxH,CAAC;IACF,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACb,GAAG,CAAC,IAAI,CAAC,uCAAuC,CAAC,CAAC;IAClD,GAAG,CAAC,IAAI,CAAC,2BAA2B,CAAC,CAAC;IACtC,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;QAChC,MAAM,KAAK,GAAG,CAAC,CAAC,MAAM,CAAC,IAAI;YACzB,CAAC,CAAC,KAAK,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,IAAI,CAAC,CAAC,MAAM,CAAC,IAAI,IAAI;YACvE,CAAC,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,IAAI,EAAE,IAAI,CAAC;QAClC,GAAG,CAAC,IAAI,CACN,KAAK,cAAc,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,WAAW,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC,KAAK,CAAC,MAAM,IAAI,CACnG,CAAC;IACJ,CAAC;IACD,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAEb,KAAK,MAAM,KAAK,IAAI,CAAC,UAAU,EAAE,aAAa,EAAE,UAAU,CAAU,EAAE,CAAC;QACrE,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,KAAK,CAAC,CAAC;QACrE,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC;YAAE,SAAS;QACpC,GAAG,CAAC,IAAI,CAAC,MAAM,KAAK,KAAK,UAAU,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,KAAK,KAAK,aAAa,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,UAAU,EAAE,CAAC,CAAC;QAC1G,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACb,KAAK,MAAM,CAAC,IAAI,QAAQ;YAAE,GAAG,CAAC,IAAI,CAAC,GAAG,eAAe,CAAC,CAAC,CAAC,CAAC,CAAC;IAC5D,CAAC;IAED,IAAI,MAAM,CAAC,iBAAiB,GAAG,CAAC,EAAE,CAAC;QACjC,GAAG,CAAC,IAAI,CAAC,QAAQ,MAAM,CAAC,iBAAiB,yDAAyD,CAAC,CAAC;QACpG,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACf,CAAC;IACD,GAAG,CAAC,IAAI,CAAC,GAAG,gBAAgB,CAAC,MAAM,CAAC,CAAC,CAAC;IACtC,OAAO,GAAG,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC;AAC/B,CAAC;AAED,SAAS,eAAe,CAAC,OAAgB;IACvC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,OAAO,CAAC;IAClC,MAAM,GAAG,GAAa,EAAE,CAAC;IACzB,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI;QACvB,CAAC,CAAC,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,IAAI,MAAM,CAAC,IAAI,EAAE;QAC/D,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC;IAEzB,GAAG,CAAC,IAAI,CAAC,SAAS,KAAK,QAAQ,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;IAC9C,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACb,GAAG,CAAC,IAAI,CAAC,YAAY,OAAO,CAAC,UAAU,EAAE,CAAC,CAAC;IAC3C,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACb,IAAI,OAAO,CAAC,UAAU,GAAG,GAAG,EAAE,CAAC;QAC7B,GAAG,CAAC,IAAI,CACN,gBAAgB,OAAO,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC,sGAAsG,CACpJ,CAAC;QACF,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACf,CAAC;IAED,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,iBAAiB,CAAC,CAAC;IAChD,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,GAAG,CAAC,IAAI,CAAC,OAAO,IAAI,CAAC,QAAQ,CAAC,IAAI,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,IAAI,CAAC,CAAC;QAC9D,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QACpB,GAAG,CAAC,IAAI,CAAC,KAAK,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC,CAAC;QACvC,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACpB,CAAC;IACD,IAAI,KAAK,CAAC,MAAM,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC;QAChC,GAAG,CAAC,IAAI,CAAC,WAAW,KAAK,CAAC,MAAM,GAAG,KAAK,CAAC,MAAM,oBAAoB,CAAC,CAAC;IACvE,CAAC;IACD,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACb,MAAM,IAAI,GAAG,CAAC,SAAS,MAAM,CAAC,EAAE,IAAI,CAAC,CAAC;IACtC,IAAI,MAAM,CAAC,OAAO;QAAE,IAAI,CAAC,IAAI,CAAC,UAAU,MAAM,CAAC,OAAO,GAAG,CAAC,CAAC;IAC3D,GAAG,CAAC,IAAI,CAAC,QAAQ,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;IAC3C,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACb,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,gBAAgB,CAAC,MAAoB;IAC5C,IAAI,MAAM,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IAC5C,MAAM,GAAG,GAAG,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;IAC7B,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,QAAQ;QAAE,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IACpD,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACb,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,WAAW,CAAC,IAAY;IAC/B,OAAO,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;AACpC,CAAC;AAED,mFAAmF;AACnF,MAAM,UAAU,UAAU,CAAC,MAAoB;IAC7C,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC;AAChD,CAAC"}

package/dist/scanner/ast.d.ts

@@ -0,0 +1,74 @@
+import ts from 'typescript';
+import type { ClientBinding, Usage } from './types.js';
+import { normalizePath, type MethodMap } from '../specdiff/methodmap.js';
+import type { SourceFile } from './walk.js';
+/**
+ * What a module hands out.
+ *
+ * Values and factories need different treatment at the import site: a value
+ * *is* the client, a factory *returns* one. Lazy `getStripeClient()` init is the
+ * recommended pattern in serverless frameworks, so both are common.
+ */
+export interface ClientExports {
+    /** Exported names bound directly to a client. */
+    values: ReadonlySet<string>;
+    /** Exported functions that return a client. */
+    factories: ReadonlySet<string>;
+}
+export interface FileScanInput {
+    file: SourceFile;
+    methodMap: MethodMap;
+    /**
+     * Given an import specifier as written in `file`, return what that module
+     * exports — or undefined if it exports no Stripe client. Resolution lives in
+     * the caller because it needs the whole file list and the tsconfig paths.
+     */
+    resolveClientExports: (specifier: string) => ClientExports | undefined;
+    /** Known Stripe webhook event types, used to filter event-shaped strings. */
+    knownEvents?: ReadonlySet<string>;
+    /** True when package.json declares a stripe dependency. Raises confidence. */
+    stripeInManifest: boolean;
+    /**
+     * Repo-wide constants whose value is a Stripe API version, e.g.
+     * `STRIPE_API_VERSION` -> `2026-02-25.clover`. Lets `apiVersion:
+     * STRIPE_API_VERSION` resolve, which is how most repos pin it.
+     */
+    versionConstants?: ReadonlyMap<string, string>;
+}
+export interface FileScanOutput {
+    usages: Usage[];
+    clients: ClientBinding[];
+    /** Names this file exports that are bound to a Stripe client. */
+    exportedClients: Set<string>;
+    /** Exported functions in this file that return a Stripe client. */
+    exportedClientFactories: Set<string>;
+    /** True when this file imports the `stripe` package. */
+    importsStripePackage: boolean;
+}
+export declare function parseSource(file: SourceFile): ts.SourceFile;
+export interface ResolvedCall {
+    namespace: string;
+    method: string;
+    httpMethod: string;
+    path: string;
+    /** How many leading chain segments were consumed as a wrapper prefix. */
+    droppedPrefix: number;
+}
+/**
+ * Match a call chain against the method map.
+ *
+ * Tries the longest namespace first and walks inward, so `payments.client.
+ * checkout.sessions.create` still resolves to `checkout.sessions.create`. The
+ * map is the oracle here: a chain that matches a real Stripe endpoint is strong
+ * evidence on its own, which is how wrapped clients get unmasked without
+ * needing a model.
+ */
+export declare function resolveCall(map: MethodMap, segments: readonly string[]): ResolvedCall | null;
+export declare function scanFile(input: FileScanInput, parsed?: ts.SourceFile): FileScanOutput;
+/** Pull a Stripe REST path out of a string, whether it is a full URL or not. */
+export declare function extractStripePath(text: string): {
+    path: string;
+    viaHost: boolean;
+} | null;
+export { normalizePath };
+//# sourceMappingURL=ast.d.ts.map

package/dist/scanner/ast.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ast.d.ts","sourceRoot":"","sources":["../../src/scanner/ast.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,YAAY,CAAC;AAE5B,OAAO,KAAK,EAAE,aAAa,EAAY,KAAK,EAAE,MAAM,YAAY,CAAC;AACjE,OAAO,EAAW,aAAa,EAAE,KAAK,SAAS,EAAE,MAAM,0BAA0B,CAAC;AAClF,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AAY5C;;;;;;GAMG;AACH,MAAM,WAAW,aAAa;IAC5B,iDAAiD;IACjD,MAAM,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC;IAC5B,+CAA+C;IAC/C,SAAS,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC;CAChC;AAED,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,UAAU,CAAC;IACjB,SAAS,EAAE,SAAS,CAAC;IACrB;;;;OAIG;IACH,oBAAoB,EAAE,CAAC,SAAS,EAAE,MAAM,KAAK,aAAa,GAAG,SAAS,CAAC;IACvE,6EAA6E;IAC7E,WAAW,CAAC,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC;IAClC,8EAA8E;IAC9E,gBAAgB,EAAE,OAAO,CAAC;IAC1B;;;;OAIG;IACH,gBAAgB,CAAC,EAAE,WAAW,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CAChD;AAED,MAAM,WAAW,cAAc;IAC7B,MAAM,EAAE,KAAK,EAAE,CAAC;IAChB,OAAO,EAAE,aAAa,EAAE,CAAC;IACzB,iEAAiE;IACjE,eAAe,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;IAC7B,mEAAmE;IACnE,uBAAuB,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;IACrC,wDAAwD;IACxD,oBAAoB,EAAE,OAAO,CAAC;CAC/B;AAED,wBAAgB,WAAW,CAAC,IAAI,EAAE,UAAU,GAAG,EAAE,CAAC,UAAU,CAS3D;AA+DD,MAAM,WAAW,YAAY;IAC3B,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,MAAM,CAAC;IACnB,IAAI,EAAE,MAAM,CAAC;IACb,yEAAyE;IACzE,aAAa,EAAE,MAAM,CAAC;CACvB;AAsBD;;;;;;;;GAQG;AACH,wBAAgB,WAAW,CAAC,GAAG,EAAE,SAAS,EAAE,QAAQ,EAAE,SAAS,MAAM,EAAE,GAAG,YAAY,GAAG,IAAI,CAa5F;AAsBD,wBAAgB,QAAQ,CAAC,KAAK,EAAE,aAAa,EAAE,MAAM,CAAC,EAAE,EAAE,CAAC,UAAU,GAAG,cAAc,CA8arF;AAgYD,gFAAgF;AAChF,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,MAAM,GAAG;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,OAAO,CAAA;CAAE,GAAG,IAAI,CAazF;AA+DD,OAAO,EAAE,aAAa,EAAE,CAAC"}