botversion-sdk 1.0.4 → 1.0.6

package/scanner.js

@@ -4,31 +4,84 @@
 /**
  * Scans an Express app object and extracts all registered routes
  */
-function scanExpressRoutes(app) {
+function scanExpressRoutes(app, cwd) {
   const endpoints = [];
   const seen = new Set();
 
-  // Force Express to initialize its router if it hasn't yet
-  if (app.lazyrouter) app.lazyrouter();
-  const router = app._router || app.router || (app.stack ? app : null);
+  // Build body map from ALL files upfront
+  const bodyMap = cwd ? buildBodyMap(cwd) : {};
 
-  if (!router) {
-    console.warn(
-      "[BotVersion SDK] No router found — trying app._events fallback",
-    );
+  if (app) {
+    if (app.lazyrouter) app.lazyrouter();
+    const router = app._router || app.router || (app.stack ? app : null);
+    if (router) {
+      const stack = router.stack || [];
+      extractRoutes(stack, "", endpoints, seen, bodyMap);
+    }
+  }
 
-    if (app._events && app._events.request) {
-      const handler = app._events.request;
-      if (handler && handler.stack) {
-        extractRoutes(handler.stack, "", endpoints, seen);
-        return endpoints;
-      }
+  // ALSO scan all JS/TS files statically for route definitions
+  if (cwd) {
+    const allFiles = scanAllExpressFiles(cwd);
+    for (const file of allFiles) {
+      const fileEndpoints = scanExpressFileStatically(file, seen);
+      endpoints.push(...fileEndpoints);
     }
+  }
+
+  endpoints.forEach((ep) => {
+    const status = ep.requestBody ? "✅" : "❌ NULL";
+  });
+
+  return endpoints;
+}
+
+function scanExpressFileStatically(filePath, seen) {
+  const fs = require("fs");
+  const endpoints = [];
+
+  let content;
+  try {
+    content = fs.readFileSync(filePath, "utf8");
+  } catch {
     return endpoints;
   }
 
-  const stack = router.stack || [];
-  extractRoutes(stack, "", endpoints, seen);
+  // Match patterns like:
+  // app.get('/path', ...)
+  // router.post('/path', ...)
+  // app.all('/curd.php', ...)
+  const routePattern =
+    /\.(get|post|put|delete|patch|all)\s*\(\s*['"`]([^'"`]+)['"`]/gi;
+
+  let match;
+  while ((match = routePattern.exec(content)) !== null) {
+    const method = match[1].toUpperCase();
+    const routePath = match[2];
+
+    // Skip middleware patterns
+    if (routePath.includes("*")) continue;
+
+    const key = method + ":" + routePath;
+    if (seen.has(key)) continue;
+    seen.add(key);
+
+    const effectiveMethod = method === "ALL" ? "GET" : method;
+    const needsBody = ["POST", "PUT", "PATCH"].includes(effectiveMethod);
+    const bodyFields = needsBody ? extractBodyFieldsFromFile(content) : null;
+
+    const routeParamMap = buildRouteParamMap(routePath, []);
+
+    endpoints.push({
+      method: effectiveMethod,
+      path: routePath,
+      description: "",
+      requestBody: bodyFields,
+      routeParamMap: routeParamMap,
+      detectedBy: "static-scan-file",
+    });
+  }
+
   return endpoints;
 }
 
@@ -40,7 +93,7 @@ function scanExpressRoutes(app) {
  *   - a router layer → layer.name === 'router', has its own .handle.stack
  *   - middleware     → everything else (body-parser, cors, etc.) — skip these
  */
-function extractRoutes(stack, prefix, endpoints, seen) {
+function extractRoutes(stack, prefix, endpoints, seen, bodyMap) {
   prefix = prefix || "";
 
   stack.forEach(function (layer) {
@@ -53,28 +106,47 @@ function extractRoutes(stack, prefix, endpoints, seen) {
 
       methods.forEach(function (method) {
         method = method.toUpperCase();
-
-        // Skip Express internals
         if (method === "_ALL") return;
 
         var key = method + ":" + routePath;
         if (seen.has(key)) return;
         seen.add(key);
 
-        var params = extractPathParams(routePath);
+        const needsBody = ["POST", "PUT", "PATCH"].includes(method);
+        let requestBody = null;
+
+        if (needsBody) {
+          // Strategy 1: scan inline handler directly via fn.toString() — most accurate
+          for (const handler of layer.route.stack) {
+            const fn = handler.handle || handler;
+            const fnStr = fn.toString();
+            const fields = extractBodyFieldsFromFile(fnStr);
+            if (fields) {
+              requestBody = fields;
+              break;
+            }
+          }
+
+          // Strategy 2: fall back to bodyMap using handler name
+          if (!requestBody) {
+            const handlerName = extractHandlerName(layer);
+            if (handlerName && bodyMap[handlerName]) {
+              requestBody = bodyMap[handlerName];
+            }
+          }
+        }
+
+        const routeParamMap = buildRouteParamMap(routePath, []);
 
         endpoints.push({
           method: method,
           path: routePath,
           description: "",
-          requestBody:
-            method !== "GET" && params.length > 0
-              ? buildParamSchema(params)
-              : null,
+          requestBody: requestBody,
+          routeParamMap: routeParamMap,
           detectedBy: "static-scan",
         });
       });
-
       return;
     }
 
@@ -82,7 +154,7 @@ function extractRoutes(stack, prefix, endpoints, seen) {
     if (layer.name === "router" && layer.handle && layer.handle.stack) {
       // Extract the mount path from the regexp
       var mountPath = prefix + regexpToPath(layer.regexp, layer.keys);
-      extractRoutes(layer.handle.stack, mountPath, endpoints, seen);
+      extractRoutes(layer.handle.stack, mountPath, endpoints, seen, bodyMap);
       return;
     }
 
@@ -101,7 +173,6 @@ function scanNextJsRoutes(pagesDir) {
   const apiDir = path.join(pagesDir, "api");
 
   if (!fs.existsSync(apiDir)) {
-    console.warn("[BotVersion SDK] No pages/api directory found at:", apiDir);
     return endpoints;
   }
 
@@ -139,11 +210,14 @@ function scanNextJsRoutes(pagesDir) {
           bodyFields ||
           (method === "DELETE" && queryFields ? queryFields : null);
 
+        const routeParamMap = buildRouteParamMap(normalizedPath, []);
+
         endpoints.push({
           method: method,
           path: normalizedPath,
           description: "",
           requestBody: effectiveRequestBody,
+          routeParamMap: routeParamMap,
           detectedBy: "static-scan",
         });
       });
@@ -230,6 +304,37 @@ function buildParamSchema(params) {
   return schema;
 }
 
+function inferFieldType(fieldName, content) {
+  const arrayPatterns = [
+    new RegExp(
+      `${fieldName}\\s*\\.\\s*(map|filter|forEach|push|reduce|find|some|every|includes|join|slice|splice|length)\\b`,
+    ),
+    new RegExp(`Array\\.isArray\\s*\\(\\s*${fieldName}\\s*\\)`),
+    new RegExp(`for\\s*\\(.*of\\s+${fieldName}\\b`),
+    new RegExp(`\\[\\s*\\.\\.\\.${fieldName}\\s*\\]`),
+  ];
+  if (arrayPatterns.some((p) => p.test(content))) return "array";
+
+  const numberPatterns = [
+    new RegExp(`${fieldName}\\s*[+\\-*/%]\\s*\\d`),
+    new RegExp(`parseInt\\s*\\(\\s*${fieldName}`),
+    new RegExp(`parseFloat\\s*\\(\\s*${fieldName}`),
+    new RegExp(`Number\\s*\\(\\s*${fieldName}`),
+  ];
+  if (numberPatterns.some((p) => p.test(content))) return "number";
+
+  const boolPatterns = [
+    new RegExp(`${fieldName}\\s*===?\\s*(true|false)`),
+    new RegExp(`(true|false)\\s*===?\\s*${fieldName}`),
+    new RegExp(`Boolean\\s*\\(\\s*${fieldName}`),
+    new RegExp(`typeof\\s+${fieldName}\\s*!==?\\s*["']boolean["']`),
+    new RegExp(`typeof\\s+${fieldName}\\s*===?\\s*["']boolean["']`),
+  ];
+  if (boolPatterns.some((p) => p.test(content))) return "boolean";
+
+  return "string";
+}
+
 function extractBodyFieldsFromFile(content) {
   const fields = new Set();
 
@@ -284,12 +389,188 @@ function extractBodyFieldsFromFile(content) {
 
   const properties = {};
   fields.forEach(function (field) {
-    properties[field] = { type: "string" };
+    const type = inferFieldType(field, content);
+    properties[field] =
+      type === "array"
+        ? { type: "array", items: { type: "object" } }
+        : { type };
+  });
+
+  return { type: "object", properties };
+}
+
+function scanNextJsAppRoutes(appDir) {
+  const fs = require("fs");
+  const path = require("path");
+  const endpoints = [];
+
+  const apiDir = path.join(appDir, "api");
+  if (!fs.existsSync(apiDir)) {
+    return endpoints;
+  }
+
+  function walkDir(dir, routePath) {
+    routePath = routePath || "/api";
+    const files = fs.readdirSync(dir);
+
+    files.forEach(function (file) {
+      const fullPath = path.join(dir, file);
+      const stat = fs.statSync(fullPath);
+
+      if (stat.isDirectory()) {
+        // Convert [param] → :param
+        const segment = file.replace(/\[([^\]]+)\]/g, ":$1");
+        walkDir(fullPath, routePath + "/" + segment);
+        return;
+      }
+
+      // Only process route.ts / route.js
+      if (!/^route\.(js|ts)$/.test(file)) return;
+
+      const content = fs.readFileSync(fullPath, "utf8");
+      const methods = detectAppRouterMethods(content);
+
+      methods.forEach(function (method) {
+        const bodyFields =
+          method !== "GET" ? extractAppRouterBodyFields(content) : null;
+        const queryFields = extractQueryFieldsFromFile(content);
+
+        const routeParamMap = buildRouteParamMap(routePath, []);
+
+        endpoints.push({
+          method: method,
+          path: routePath,
+          description: "",
+          requestBody:
+            bodyFields ||
+            (method === "DELETE" && queryFields ? queryFields : null),
+          routeParamMap: routeParamMap,
+          detectedBy: "static-scan",
+        });
+      });
+    });
+  }
+
+  walkDir(apiDir);
+  return endpoints;
+}
+
+function detectAppRouterMethods(content) {
+  const methods = [];
+  const patterns = [
+    { pattern: /export\s+async\s+function\s+GET\b/, method: "GET" },
+    { pattern: /export\s+async\s+function\s+POST\b/, method: "POST" },
+    { pattern: /export\s+async\s+function\s+PUT\b/, method: "PUT" },
+    { pattern: /export\s+async\s+function\s+DELETE\b/, method: "DELETE" },
+    { pattern: /export\s+async\s+function\s+PATCH\b/, method: "PATCH" },
+    // named exports too: export { POST }
+    { pattern: /export\s+function\s+GET\b/, method: "GET" },
+    { pattern: /export\s+function\s+POST\b/, method: "POST" },
+    { pattern: /export\s+function\s+PUT\b/, method: "PUT" },
+    { pattern: /export\s+function\s+DELETE\b/, method: "DELETE" },
+    { pattern: /export\s+function\s+PATCH\b/, method: "PATCH" },
+  ];
+
+  patterns.forEach(function (p) {
+    if (p.pattern.test(content)) methods.push(p.method);
+  });
+
+  return methods.length > 0 ? methods : ["GET"];
+}
+
+function extractAppRouterBodyFields(content) {
+  const fields = new Set();
+
+  // Pattern 1: const { userId, tokens } = await request.json()
+  const destructureMatches = content.matchAll(
+    /const\s*\{([^}]+)\}\s*=\s*await\s+\w+\.json\(\)/g,
+  );
+  for (const match of destructureMatches) {
+    match[1].split(",").forEach(function (f) {
+      const clean = f.trim().split(":")[0].trim();
+      if (clean) fields.add(clean);
+    });
+  }
+
+  // Pattern 2: const body = await request.json() then body.userId
+  const bodyVarMatch = content.match(
+    /const\s+(\w+)\s*=\s*await\s+\w+\.json\(\)/,
+  );
+  if (bodyVarMatch) {
+    const varName = bodyVarMatch[1];
+    const varMatches = content.matchAll(
+      new RegExp(`${varName}\\.([a-zA-Z_][a-zA-Z0-9_]*)`, "g"),
+    );
+    for (const match of varMatches) {
+      fields.add(match[1]);
+    }
+  }
+
+  // Pattern 3: (await request.json()).userId
+  const inlineMatches = content.matchAll(
+    /\(await\s+\w+\.json\(\)\)\.([a-zA-Z_][a-zA-Z0-9_]*)/g,
+  );
+  for (const match of inlineMatches) {
+    fields.add(match[1]);
+  }
+
+  if (fields.size === 0) return null;
+
+  const properties = {};
+  fields.forEach(function (field) {
+    const type = inferFieldType(field, content);
+    properties[field] =
+      type === "array"
+        ? { type: "array", items: { type: "object" } }
+        : { type };
   });
 
   return { type: "object", properties };
 }
 
+function buildRouteParamMap(routePath, segments) {
+  const paramMap = {};
+  const parts = routePath.split("/").filter(Boolean);
+
+  for (let i = 0; i < parts.length; i++) {
+    const part = parts[i];
+
+    // Skip catch-all [...slug] and optional [[...slug]]
+    if (/^\[?\[\.\.\./.test(part)) continue;
+
+    // Check if this segment is a dynamic param
+    // Handles both Next.js style [id] and Express style :id
+    const nextParamMatch = part.match(/^\[([^\]]+)\]$/);
+    const expressParamMatch = part.match(/^:([a-zA-Z_][a-zA-Z0-9_]*)$/);
+    const paramMatch = nextParamMatch || expressParamMatch;
+    if (!paramMatch) continue;
+
+    const paramName = paramMatch[1];
+
+    // If param already has a descriptive name like [projectId], use it as-is
+    if (paramName !== "id" && paramName !== "slug" && paramName !== "param") {
+      paramMap[paramName] = paramName;
+      continue;
+    }
+
+    // If param is just [id], look at the parent folder name to figure out type
+    // e.g. projects/[id] → projectId
+    const parentSegment = parts[i - 1];
+    if (parentSegment) {
+      // Remove any dynamic brackets from parent if it's also a param
+      const cleanParent = parentSegment.replace(/^\[([^\]]+)\]$/, "$1");
+      // Singularize simple plural names: projects → project, users → user
+      const singular = cleanParent.replace(/ies$/, "y").replace(/s$/, "");
+      paramMap[paramName] = singular + "Id";
+    } else {
+      // No parent segment, just call it "id"
+      paramMap[paramName] = "id";
+    }
+  }
+
+  return paramMap;
+}
+
 function extractQueryFieldsFromFile(content) {
   const fields = new Set();
 
@@ -355,8 +636,432 @@ function regexpToPath(regexp, keys) {
   }
 }
 
+function scanAllExpressFiles(cwd) {
+  const fs = require("fs");
+  const path = require("path");
+
+  const SKIP_DIRS = [
+    "node_modules",
+    ".git",
+    ".next",
+    "dist",
+    "build",
+    ".cache",
+    "coverage",
+    "out",
+  ];
+
+  const routeFiles = [];
+
+  function walk(dir, depth) {
+    if (depth > 4) return;
+
+    let entries;
+    try {
+      entries = fs.readdirSync(dir);
+    } catch {
+      return;
+    }
+
+    for (const entry of entries) {
+      if (SKIP_DIRS.includes(entry)) continue;
+
+      const fullPath = path.join(dir, entry);
+      let stat;
+      try {
+        stat = fs.statSync(fullPath);
+      } catch {
+        continue;
+      }
+
+      if (stat.isDirectory()) {
+        walk(fullPath, depth + 1);
+      } else if (/\.(js|ts)$/.test(entry)) {
+        try {
+          const content = fs.readFileSync(fullPath, "utf8");
+          // Check if file contains Express route definitions
+          const isExpressFile =
+            content.includes("express()") ||
+            content.includes("express.Router()") ||
+            content.includes("Router()") ||
+            // Match only route-like patterns: app.get('/...) or router.post('/...)
+            /(?:app|router|server)\.(get|post|put|delete|patch|all)\s*\(\s*['"`]\//.test(
+              content,
+            );
+
+          if (isExpressFile) {
+            routeFiles.push(fullPath);
+          }
+        } catch {
+          continue;
+        }
+      }
+    }
+  }
+
+  walk(cwd, 0);
+  return routeFiles;
+}
+
+function buildBodyMap(cwd) {
+  const fs = require("fs");
+  const path = require("path");
+  const bodyMap = {}; // { functionName: { type: "object", properties: {...} } }
+
+  const SKIP_DIRS = [
+    "node_modules",
+    ".git",
+    ".next",
+    "dist",
+    "build",
+    ".cache",
+    "coverage",
+    "out",
+  ];
+
+  function walk(dir, depth) {
+    if (depth > 4) return;
+    let entries;
+    try {
+      entries = fs.readdirSync(dir);
+    } catch {
+      return;
+    }
+
+    for (const entry of entries) {
+      if (SKIP_DIRS.includes(entry)) continue;
+      const fullPath = path.join(dir, entry);
+      let stat;
+      try {
+        stat = fs.statSync(fullPath);
+      } catch {
+        continue;
+      }
+
+      if (stat.isDirectory()) {
+        walk(fullPath, depth + 1);
+        continue;
+      }
+
+      if (!/\.(js|ts)$/.test(entry)) continue;
+
+      let content;
+      try {
+        content = fs.readFileSync(fullPath, "utf8");
+      } catch {
+        continue;
+      }
+
+      // Skip files with no req.body at all
+      // Split file into individual function chunks more reliably
+      // by finding each function and extracting a reasonable chunk after it
+
+      const fnPatterns = [
+        // function loginUser(req, res) {
+        /(?:export\s+)?(?:async\s+)?function\s+([a-zA-Z_][a-zA-Z0-9_]*)\s*\([^)]*\)\s*\{/g,
+        // const loginUser = async (req, res) => {
+        /const\s+([a-zA-Z_][a-zA-Z0-9_]*)\s*=\s*(?:async\s*)?\([^)]*\)\s*=>\s*\{/g,
+        // exports.loginUser = async (req, res) => {
+        /exports\.([a-zA-Z_][a-zA-Z0-9_]*)\s*=\s*(?:async\s*)?\([^)]*\)\s*=>\s*\{/g,
+        // export const loginUser = async (req, res) => {
+        /export\s+const\s+([a-zA-Z_][a-zA-Z0-9_]*)\s*=\s*(?:async\s*)?\([^)]*\)\s*=>\s*\{/g,
+      ];
+
+      // Map every function name in this file to the whole file's body fields.
+      // Brace-counting is unreliable across JS/TS variations, so we use
+      // file-level field extraction here. Per-function accuracy is handled
+      // at runtime by Strategy 2 (fn.toString()) in extractRoutes.
+      const fileFields = extractBodyFieldsFromFile(content);
+      if (fileFields) {
+        const fnNames = new Set();
+        for (const pattern of fnPatterns) {
+          pattern.lastIndex = 0; // reset regex state before each use
+          let m;
+          while ((m = pattern.exec(content)) !== null) fnNames.add(m[1]);
+        }
+        for (const name of fnNames) {
+          if (!bodyMap[name]) {
+            // don't overwrite a more precise entry
+            bodyMap[name] = fileFields;
+          }
+        }
+      }
+    }
+  }
+
+  walk(cwd, 0);
+  return bodyMap;
+}
+
+function extractHandlerName(layer) {
+  const handlers = layer.route.stack.map((h) => h.handle || h);
+
+  const SKIP_NAMES = new Set([
+    "anonymous",
+    "",
+    "bound dispatch",
+    "middleware",
+    "protect",
+    "admin",
+    "auth",
+    "verify",
+    "validate",
+    "isAuth",
+    "isAdmin",
+    "checkAuth",
+    "authenticate",
+  ]);
+
+  // Try from last to first, skip known middleware names
+  for (let i = handlers.length - 1; i >= 0; i--) {
+    const fn = handlers[i];
+    const name = fn.name || "";
+    if (name && !SKIP_NAMES.has(name) && !name.startsWith("bound ")) {
+      return name;
+    }
+  }
+  return null;
+}
+
+function convertNextJsSegment(segment) {
+  // Skip catch-all [...slug] and optional [[...slug]]
+  if (/^\[?\[\.\.\./.test(segment)) return null;
+  // Convert [projectId] → :projectId (Next.js / Nuxt / SvelteKit)
+  if (/^\[([^\]]+)\]$/.test(segment))
+    return segment.replace(/^\[([^\]]+)\]$/, ":$1");
+  // Convert $projectId → :projectId (Remix)
+  if (/^\$([a-zA-Z_][a-zA-Z0-9_]*)$/.test(segment))
+    return segment.replace(/^\$/, ":");
+  return segment;
+}
+
+function extractParamPositions(segments) {
+  const paramMap = {};
+  segments.forEach(function (segment, index) {
+    if (segment && segment.startsWith(":")) {
+      const paramName = segment.slice(1);
+      paramMap[paramName] = index;
+    }
+  });
+  return paramMap;
+}
+
+function scanConfigBasedRoutes(cwd) {
+  const fs = require("fs");
+  const path = require("path");
+  const patterns = [];
+  const seen = new Set();
+
+  // Files to scan for route definitions
+  const filesToCheck = [
+    // React Router — common file names
+    path.join(cwd, "src", "App.jsx"),
+    path.join(cwd, "src", "App.tsx"),
+    path.join(cwd, "src", "App.js"),
+    path.join(cwd, "src", "router.jsx"),
+    path.join(cwd, "src", "router.tsx"),
+    path.join(cwd, "src", "router.js"),
+    path.join(cwd, "src", "routes.jsx"),
+    path.join(cwd, "src", "routes.tsx"),
+    path.join(cwd, "src", "routes.js"),
+    path.join(cwd, "src", "Router.jsx"),
+    path.join(cwd, "src", "Router.tsx"),
+    // Vue Router
+    path.join(cwd, "src", "router", "index.js"),
+    path.join(cwd, "src", "router", "index.ts"),
+    path.join(cwd, "src", "router.js"),
+    path.join(cwd, "src", "router.ts"),
+    // Angular
+    path.join(cwd, "src", "app", "app-routing.module.ts"),
+    path.join(cwd, "src", "app", "app.routes.ts"),
+  ];
+
+  for (const filePath of filesToCheck) {
+    if (!fs.existsSync(filePath)) continue;
+
+    let content;
+    try {
+      content = fs.readFileSync(filePath, "utf8");
+    } catch {
+      continue;
+    }
+
+    // Pattern 1 — React Router JSX: <Route path="/:projectId/dashboard" />
+    const jsxRouteMatches = content.matchAll(
+      /<Route[^>]+path=["']([^"']+)["']/g,
+    );
+    for (const match of jsxRouteMatches) {
+      addConfigPattern(match[1], seen, patterns);
+    }
+
+    // Pattern 2 — React Router / Vue Router object: { path: '/:projectId/dashboard' }
+    const objectRouteMatches = content.matchAll(/path\s*:\s*["']([^"']+)["']/g);
+    for (const match of objectRouteMatches) {
+      addConfigPattern(match[1], seen, patterns);
+    }
+
+    // Pattern 3 — Angular: { path: ':projectId/dashboard' }
+    const angularRouteMatches = content.matchAll(
+      /\{\s*path\s*:\s*["']([^"']+)["']/g,
+    );
+    for (const match of angularRouteMatches) {
+      addConfigPattern(match[1], seen, patterns);
+    }
+  }
+
+  return patterns;
+}
+
+function addConfigPattern(routePath, seen, patterns) {
+  // Skip empty, wildcard and catch-all routes
+  if (!routePath || routePath === "*" || routePath === "**") return;
+  // Skip routes with no dynamic params
+  if (!routePath.includes(":") && !routePath.includes("$")) return;
+
+  // Normalize — ensure leading slash
+  const normalized = routePath.startsWith("/") ? routePath : "/" + routePath;
+
+  if (seen.has(normalized)) return;
+  seen.add(normalized);
+
+  // Extract params and their positions
+  const segments = normalized.split("/").filter(Boolean);
+  const paramMap = {};
+  segments.forEach(function (segment, index) {
+    if (segment.startsWith(":")) {
+      paramMap[segment.slice(1)] = index;
+    }
+  });
+
+  if (Object.keys(paramMap).length === 0) return;
+
+  patterns.push({ pattern: normalized, params: paramMap });
+}
+
+function scanFrontendRoutes(cwd) {
+  const fs = require("fs");
+  const path = require("path");
+  const patterns = [];
+  const seen = new Set();
+
+  const dirsToScan = [
+    // Next.js Pages Router
+    path.join(cwd, "pages"),
+    path.join(cwd, "src", "pages"),
+    // Next.js App Router
+    path.join(cwd, "app"),
+    path.join(cwd, "src", "app"),
+    // Nuxt.js
+    path.join(cwd, "pages"),
+    // SvelteKit
+    path.join(cwd, "src", "routes"),
+    path.join(cwd, "routes"),
+    // Remix
+    path.join(cwd, "app", "routes"),
+  ];
+
+  function walkDir(dir, routeSegments) {
+    if (!fs.existsSync(dir)) return;
+    let entries;
+    try {
+      entries = fs.readdirSync(dir);
+    } catch {
+      return;
+    }
+
+    entries.forEach(function (file) {
+      const fullPath = path.join(dir, file);
+      let stat;
+      try {
+        stat = fs.statSync(fullPath);
+      } catch {
+        return;
+      }
+
+      if (stat.isDirectory()) {
+        if (file === "api") return; // skip API routes
+        if (file.startsWith("_")) return; // skip Next.js internals
+        if (/^\(.*\)$/.test(file)) {
+          // route groups like (marketing) — don't add to URL
+          walkDir(fullPath, routeSegments);
+          return;
+        }
+        const segment = convertNextJsSegment(file);
+        if (!segment) return;
+        walkDir(fullPath, routeSegments.concat(segment));
+        return;
+      }
+
+      if (!/\.(js|ts|jsx|tsx|vue|svelte)$/.test(file)) return;
+      if (file.startsWith("_")) return;
+
+      const routeName = file.replace(/\.(js|ts|jsx|tsx|vue|svelte)$/, "");
+
+      // Skip non-page files
+      if (
+        ["layout", "loading", "error", "template", "not-found"].includes(
+          routeName,
+        )
+      )
+        return;
+
+      // SvelteKit uses +page.svelte — skip +layout, +error etc.
+      if (routeName.startsWith("+") && routeName !== "+page") return;
+
+      // Remix uses dots as path separators — e.g. $projectId.dashboard.tsx → /:projectId/dashboard
+      const isRemixRoute =
+        routeName.includes(".") && !routeName.startsWith("+");
+      let finalSegments;
+
+      if (isRemixRoute) {
+        // Split by dots and convert each segment
+        const remixSegments = routeName
+          .split(".")
+          .map((s) => convertNextJsSegment(s) || s);
+        finalSegments = routeSegments.concat(remixSegments);
+      } else if (
+        routeName === "index" ||
+        routeName === "page" ||
+        routeName === "+page"
+      ) {
+        finalSegments = routeSegments;
+      } else {
+        finalSegments = routeSegments.concat(
+          convertNextJsSegment(routeName) || routeName,
+        );
+      }
+
+      const pattern = "/" + finalSegments.filter(Boolean).join("/");
+      if (seen.has(pattern)) return;
+      seen.add(pattern);
+
+      const paramMap = extractParamPositions(finalSegments);
+      if (Object.keys(paramMap).length === 0) return; // no dynamic params, skip static routes
+
+      patterns.push({ pattern, params: paramMap });
+    });
+  }
+
+  dirsToScan.forEach(function (dir) {
+    if (fs.existsSync(dir)) walkDir(dir, []);
+  });
+
+  // Also scan config-based frameworks (React Router, Vue Router, Angular)
+  const configPatterns = scanConfigBasedRoutes(cwd);
+  configPatterns.forEach(function (p) {
+    if (!seen.has(p.pattern)) {
+      seen.add(p.pattern);
+      patterns.push(p);
+    }
+  });
+
+  return patterns;
+}
+
 module.exports = {
   scanExpressRoutes,
   scanNextJsRoutes,
+  scanNextJsAppRoutes,
   extractPathParams,
+  scanFrontendRoutes,
 };