code-auditor-mcp 3.6.0 → 3.8.0

package/dist/analyzers/universal/UniversalSecretsAnalyzer.d.ts

@@ -0,0 +1,55 @@
+/**
+ * Universal Secrets Analyzer
+ * Detects hardcoded credentials, API keys, and tokens in source.
+ *
+ * The reference case is a Playwright/Puppeteer automation script typing a real
+ * password into a login form:
+ *
+ *   page.type('#password', 'vyy8AUVvish34Fq')
+ *
+ * A secret is a string literal that (a) sits in a credential position — a
+ * variable/field/object-key named like a secret, or a call argument whose
+ * sibling argument is a credential selector (`#password`) — and (b) looks like
+ * a real value rather than a placeholder (`'password'`, `'your-api-key'`,
+ * `'changeme'`).
+ *
+ * Near-miss classes that must stay silent (critical severity gates — a false
+ * positive blocks the edit loop, so precision is the design constraint):
+ *   - test fixtures / mocks (`.test.*`, `.spec.*`, `__tests__`, `fixtures`) —
+ *     excluded by file path, before any literal is read;
+ *   - placeholder values (`'changeme'`, `'your-api-key'`, `'<token>'`) —
+ *     rejected by the value heuristic;
+ *   - env var references (`process.env.PASSWORD`, `import.meta.env.VITE_KEY`) —
+ *     these are `member_expression`/`identifier` nodes, never `string` literals,
+ *     so they are never candidates.
+ */
+import { UniversalAnalyzer } from '../../languages/UniversalAnalyzer.js';
+import type { Violation } from '../../types.js';
+import type { AST, LanguageAdapter } from '../../languages/types.js';
+/**
+ * Configuration for the Secrets analyzer.
+ */
+export interface SecretsAnalyzerConfig {
+    /** Toggle the hardcoded-secret check. Default true (default-on). */
+    checkHardcodedSecrets?: boolean;
+}
+export declare const DEFAULT_SECRETS_CONFIG: SecretsAnalyzerConfig;
+/**
+ * Flags hardcoded credentials, API keys, and tokens. Critical severity — a false
+ * positive blocks the edit loop, so detection is precision-first (see the file
+ * header for the near-miss classes that must stay silent).
+ */
+export declare class UniversalSecretsAnalyzer extends UniversalAnalyzer {
+    readonly name = "secrets";
+    readonly description = "Detects hardcoded credentials, API keys, and tokens";
+    readonly category = "security";
+    protected analyzeAST(ast: AST, adapter: LanguageAdapter, config: SecretsAnalyzerConfig, sourceCode: string): Promise<Violation[]>;
+    /**
+     * Inspect one AST node for hardcoded credentials in a credential position;
+     * returns the violations to report (possibly empty).
+     */
+    private inspectNode;
+    private checkCredentialCall;
+    private makeViolation;
+}
+//# sourceMappingURL=UniversalSecretsAnalyzer.d.ts.map

package/dist/analyzers/universal/UniversalSecretsAnalyzer.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"UniversalSecretsAnalyzer.d.ts","sourceRoot":"","sources":["../../../src/analyzers/universal/UniversalSecretsAnalyzer.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AAEH,OAAO,EAAE,iBAAiB,EAAE,MAAM,sCAAsC,CAAC;AAGzE,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAC;AAChD,OAAO,KAAK,EAAE,GAAG,EAAE,eAAe,EAAW,MAAM,0BAA0B,CAAC;AAE9E;;GAEG;AACH,MAAM,WAAW,qBAAqB;IACpC,oEAAoE;IACpE,qBAAqB,CAAC,EAAE,OAAO,CAAC;CACjC;AAED,eAAO,MAAM,sBAAsB,EAAE,qBAEpC,CAAC;AAoMF;;;;GAIG;AACH,qBAAa,wBAAyB,SAAQ,iBAAiB;IAC7D,QAAQ,CAAC,IAAI,aAAa;IAC1B,QAAQ,CAAC,WAAW,yDAAyD;IAC7E,QAAQ,CAAC,QAAQ,cAAc;IAE/B,UAAgB,UAAU,CACxB,GAAG,EAAE,GAAG,EACR,OAAO,EAAE,eAAe,EACxB,MAAM,EAAE,qBAAqB,EAC7B,UAAU,EAAE,MAAM,GACjB,OAAO,CAAC,SAAS,EAAE,CAAC,CAatB;IAED;;;OAGG;IACH,OAAO,CAAC,WAAW;IA4CnB,OAAO,CAAC,mBAAmB;IAyB3B,OAAO,CAAC,aAAa;CAsBtB"}

package/dist/analyzers/universal/UniversalSecretsAnalyzer.js

@@ -0,0 +1,318 @@
+/**
+ * Universal Secrets Analyzer
+ * Detects hardcoded credentials, API keys, and tokens in source.
+ *
+ * The reference case is a Playwright/Puppeteer automation script typing a real
+ * password into a login form:
+ *
+ *   page.type('#password', 'vyy8AUVvish34Fq')
+ *
+ * A secret is a string literal that (a) sits in a credential position — a
+ * variable/field/object-key named like a secret, or a call argument whose
+ * sibling argument is a credential selector (`#password`) — and (b) looks like
+ * a real value rather than a placeholder (`'password'`, `'your-api-key'`,
+ * `'changeme'`).
+ *
+ * Near-miss classes that must stay silent (critical severity gates — a false
+ * positive blocks the edit loop, so precision is the design constraint):
+ *   - test fixtures / mocks (`.test.*`, `.spec.*`, `__tests__`, `fixtures`) —
+ *     excluded by file path, before any literal is read;
+ *   - placeholder values (`'changeme'`, `'your-api-key'`, `'<token>'`) —
+ *     rejected by the value heuristic;
+ *   - env var references (`process.env.PASSWORD`, `import.meta.env.VITE_KEY`) —
+ *     these are `member_expression`/`identifier` nodes, never `string` literals,
+ *     so they are never candidates.
+ */
+import { UniversalAnalyzer } from '../../languages/UniversalAnalyzer.js';
+import { withRuleTiming } from '../ruleTiming.js';
+import { walkAST } from '../../languages/adapterBridge.js';
+export const DEFAULT_SECRETS_CONFIG = {
+    checkHardcodedSecrets: true,
+};
+/**
+ * Secret-ish names, normalized (lowercased, non-alphanumerics stripped) so
+ * `apiKey`, `api_key`, `API_KEY`, and `x-api-key` all collapse to one form.
+ * Matched against variable names, object keys, field names, and the core of
+ * credential selectors (`#password` → `password`).
+ */
+const SECRET_NAMES = new Set([
+    'password', 'passwd', 'pwd', 'passphrase',
+    'secret', 'clientsecret',
+    'apikey',
+    'accesskey', 'accesstoken',
+    'authtoken',
+    'token',
+    'privatekey',
+    'credential', 'credentials',
+    'awssecret', 'awskey',
+    'sessionkey', 'signingkey',
+    'authorization',
+    'xapikey', 'xauthtoken',
+]);
+function normalizeName(name) {
+    return name.toLowerCase().replace(/[^a-z0-9]/g, '');
+}
+function isSecretName(name) {
+    const norm = normalizeName(name);
+    return norm.length > 0 && SECRET_NAMES.has(norm);
+}
+/**
+ * Extract the raw text of a `string` literal, preferring the `string_fragment`
+ * child (the content without quotes/delimiters) and falling back to stripping
+ * surrounding quotes from the node text.
+ */
+function stringValue(node, adapter, sourceCode) {
+    const frag = node.children?.find((c) => c.type === 'string_fragment');
+    if (frag)
+        return adapter.getNodeText(frag, sourceCode);
+    let text = adapter.getNodeText(node, sourceCode).trim();
+    if ((text.startsWith("'") && text.endsWith("'")) ||
+        (text.startsWith('"') && text.endsWith('"')) ||
+        (text.startsWith('`') && text.endsWith('`'))) {
+        text = text.slice(1, -1);
+    }
+    return text;
+}
+/** Find a direct `string` child (the literal value), not a nested one. */
+function directStringChild(node, adapter, sourceCode) {
+    for (const c of node.children ?? []) {
+        if (c.type === 'string')
+            return stringValue(c, adapter, sourceCode);
+    }
+    return null;
+}
+/** A symbol that is not a common word separator (`-`, `_`, `.`, space). */
+const HARD_SYMBOL = /[^A-Za-z0-9\-_.\s]/;
+/**
+ * A known token prefix (`Bearer …`, `sk-…`, `ghp_…`, `AKIA…`, `xoxb-…`, JWT
+ * `eyJ…`) marks a value as a secret on its own, even when it is short.
+ */
+function hasKnownTokenPrefix(value) {
+    const t = value.trim();
+    return (/^Bearer\s/i.test(t) ||
+        /^sk-[A-Za-z0-9]{20,}/.test(t) || // OpenAI
+        /^(ghp|gho|ghu|ghs|github_pat)_[A-Za-z0-9]{20,}/.test(t) || // GitHub
+        /^(sk|rk|pk)_(live|test)_[A-Za-z0-9]{10,}/.test(t) || // Stripe
+        /^AKIA[0-9A-Z]{16}$/.test(t) || // AWS access key
+        /^xox[baprs]-/.test(t) || // Slack
+        /^eyJ[A-Za-z0-9_-]{10,}\./.test(t) // JWT
+    );
+}
+const PLACEHOLDERS = new Set([
+    'password', 'passwd', 'pwd', 'changeme', 'changethis', 'secret', 'yoursecret',
+    'yourapikey', 'yourtoken', 'yourapitoken', 'apikey', 'token', 'example',
+    'dummy', 'placeholder', 'replaceme', 'todo', 'fixme', 'xxx', 'xxxx', 'xxxxx',
+    'test', 'testpassword', 'testsecret', 'testtoken', '123456', '12345678',
+    '123456789', 'password123', 'qwerty', 'letmein', 'abc123', 'foobar',
+    'helloworld', 'notareal', 'notreal', 'sample', 'samplekey', 'sampletoken',
+    'insecure', 'insecurepassword', 'notasecret',
+]);
+/** Reject placeholder/example values: templates, redactions, and common words. */
+function isPlaceholder(value) {
+    const t = value.trim();
+    if (t.length === 0)
+        return true;
+    if (/^<[^>]+>$/.test(t))
+        return true; // <your-token>
+    if (/^[.…]{3,}$/.test(t))
+        return true; // ...
+    if (/^[*xX]{3,}$/.test(t))
+        return true; // *** or xxx
+    if (/^redacted$/i.test(t))
+        return true;
+    const norm = normalizeName(t);
+    if (PLACEHOLDERS.has(norm))
+        return true;
+    if (/^(your|test|example|sample|dummy|placeholder|replaceme|changeme)/.test(norm))
+        return true;
+    return false;
+}
+/**
+ * Does this literal look like a real credential value rather than a placeholder?
+ *
+ * Precision-first: the value must either carry a known token prefix or be long
+ * enough (≥8 chars) and show character variety (a digit, an uppercase letter,
+ * or a non-separator symbol). Pure-lowercase words (`changeme`) and hyphenated
+ * phrases (`your-api-key`) fail this; high-entropy values (`vyy8AUVvish34Fq`)
+ * pass. Emails and URLs are explicitly not secrets.
+ */
+function looksLikeRealSecret(value) {
+    const t = value.trim();
+    if (isPlaceholder(t))
+        return false;
+    if (hasKnownTokenPrefix(t))
+        return true;
+    if (t.length < 8)
+        return false;
+    if (/^[^@\s]+@[^@\s]+\.[^@\s]+$/.test(t))
+        return false; // email
+    if (/^https?:\/\//i.test(t))
+        return false; // URL
+    const hasDigit = /\d/.test(t);
+    const hasUpper = /[A-Z]/.test(t);
+    const hasHardSymbol = HARD_SYMBOL.test(t);
+    return hasDigit || hasUpper || hasHardSymbol;
+}
+/**
+ * Is this path a test/fixture file? Excluded up front — a hardcoded credential
+ * in a test fixture or mock is expected and must not block the edit loop.
+ */
+function isTestOrFixtureFile(filePath) {
+    const lower = filePath.toLowerCase();
+    return (lower.includes('.test.') || lower.includes('.spec.') ||
+        lower.includes('__tests__') ||
+        lower.includes('/test/') || lower.includes('/tests/') ||
+        lower.includes('/fixtures/') || lower.includes('.fixture.') ||
+        lower.endsWith('_test.go'));
+}
+/** Extract the variable name from a `variable_declarator`. */
+function declaratorName(node, adapter, sourceCode) {
+    const name = node.children?.find((c) => c.type === 'identifier');
+    return name ? adapter.getNodeText(name, sourceCode) : null;
+}
+/** Extract the assigned field name from an `assignment_expression` left side. */
+function assignmentKey(node, adapter, sourceCode) {
+    const left = node.children?.find((c) => c.type === 'member_expression' || c.type === 'subscript_expression' || c.type === 'identifier');
+    if (!left)
+        return null;
+    if (left.type === 'member_expression') {
+        const prop = left.children?.find((c) => c.type === 'property_identifier');
+        return prop ? adapter.getNodeText(prop, sourceCode) : null;
+    }
+    if (left.type === 'subscript_expression') {
+        const key = left.children?.find((c) => c.type === 'string');
+        return key ? stringValue(key, adapter, sourceCode) : null;
+    }
+    return adapter.getNodeText(left, sourceCode);
+}
+/** Extract `{ key, value }` from an object `pair` node. */
+function pairKeyAndValue(node, adapter, sourceCode) {
+    const strings = (node.children ?? []).filter((c) => c.type === 'string');
+    if (strings.length === 0)
+        return null;
+    const keyNode = node.children?.find((c) => c.type === 'property_identifier') ?? strings[0];
+    const valueNode = strings[strings.length - 1];
+    if (valueNode === keyNode && strings.length < 2)
+        return null;
+    const key = keyNode.type === 'property_identifier'
+        ? adapter.getNodeText(keyNode, sourceCode)
+        : stringValue(keyNode, adapter, sourceCode);
+    const value = stringValue(valueNode, adapter, sourceCode);
+    return { key, value };
+}
+/**
+ * Is this string a credential *field selector* (`#password`, `.api_key`,
+ * `input[name=token]`)? Extracts the field-name core and checks it against the
+ * secret-name set.
+ */
+function isCredentialSelector(text) {
+    let core = text.trim().replace(/^['"]|['"]$/g, '');
+    core = core.replace(/^[.#]/, '').trim();
+    const bracket = core.match(/\[([^\[\]]+)\]$/);
+    if (bracket)
+        core = bracket[1];
+    core = core.replace(/^name\s*=\s*["']?|["']?$/gi, '');
+    core = core.replace(/["']/g, '').trim();
+    return isSecretName(core);
+}
+/**
+ * Flags hardcoded credentials, API keys, and tokens. Critical severity — a false
+ * positive blocks the edit loop, so detection is precision-first (see the file
+ * header for the near-miss classes that must stay silent).
+ */
+export class UniversalSecretsAnalyzer extends UniversalAnalyzer {
+    name = 'secrets';
+    description = 'Detects hardcoded credentials, API keys, and tokens';
+    category = 'security';
+    async analyzeAST(ast, adapter, config, sourceCode) {
+        const violations = [];
+        const finalConfig = { ...DEFAULT_SECRETS_CONFIG, ...config };
+        if (finalConfig.checkHardcodedSecrets === false)
+            return violations;
+        if (isTestOrFixtureFile(ast.filePath))
+            return violations;
+        withRuleTiming('hardcoded-secret', () => {
+            walkAST(ast.root, (node) => {
+                violations.push(...this.inspectNode(node, adapter, sourceCode, ast.filePath));
+            });
+        });
+        return violations;
+    }
+    /**
+     * Inspect one AST node for hardcoded credentials in a credential position;
+     * returns the violations to report (possibly empty).
+     */
+    inspectNode(node, adapter, sourceCode, filePath) {
+        // 1. `const <name> = '<value>'`
+        if (node.type === 'variable_declarator') {
+            const name = declaratorName(node, adapter, sourceCode);
+            const value = directStringChild(node, adapter, sourceCode);
+            if (name && value !== null && isSecretName(name) && looksLikeRealSecret(value)) {
+                return [this.makeViolation(filePath, node, name, value)];
+            }
+            return [];
+        }
+        // 2. `<obj>.<field> = '<value>'` / `<field> = '<value>'`
+        if (node.type === 'assignment_expression') {
+            const key = assignmentKey(node, adapter, sourceCode);
+            const value = directStringChild(node, adapter, sourceCode);
+            if (key && value !== null && isSecretName(key) && looksLikeRealSecret(value)) {
+                return [this.makeViolation(filePath, node, key, value)];
+            }
+            return [];
+        }
+        // 3. `{ <key>: '<value>' }`
+        if (node.type === 'pair') {
+            const pv = pairKeyAndValue(node, adapter, sourceCode);
+            if (pv && isSecretName(pv.key) && looksLikeRealSecret(pv.value)) {
+                return [this.makeViolation(filePath, node, pv.key, pv.value)];
+            }
+            return [];
+        }
+        // 4. `fn('<selector>', '<secret>')` — a credential selector string plus a
+        //    sibling secret-value string (the page.type reference case).
+        if (node.type === 'call_expression') {
+            return this.checkCredentialCall(node, adapter, sourceCode, filePath);
+        }
+        return [];
+    }
+    checkCredentialCall(node, adapter, sourceCode, filePath) {
+        const argsNode = node.children?.find((c) => c.type === 'arguments');
+        if (!argsNode)
+            return [];
+        const stringArgs = (argsNode.children ?? []).filter((c) => c.type === 'string');
+        if (stringArgs.length < 2)
+            return [];
+        const hasSelector = stringArgs.some((a) => isCredentialSelector(stringValue(a, adapter, sourceCode)));
+        if (!hasSelector)
+            return [];
+        const found = [];
+        for (const a of stringArgs) {
+            const value = stringValue(a, adapter, sourceCode);
+            if (isCredentialSelector(value))
+                continue; // the selector is not the secret
+            if (looksLikeRealSecret(value)) {
+                found.push(this.makeViolation(filePath, node, undefined, value));
+            }
+        }
+        return found;
+    }
+    makeViolation(file, node, name, value) {
+        const label = name ? ` "${name}"` : '';
+        const reference = name
+            ? `process.env.${normalizeName(name).toUpperCase()}`
+            : 'process.env.SECRET';
+        return this.createViolation(file, node.location.start, `Hardcoded secret${label} detected: a ${value.length}-character credential is embedded in source. Move it to an environment variable or secret store.`, {
+            severity: 'critical',
+            rule: 'hardcoded-secret',
+            resolution: {
+                action: 'remove-hardcoded-secret',
+                summary: `Replace the hardcoded${label} credential with a reference to an environment variable or secret store (e.g. ${reference}).`,
+                symbols: name ? [name] : undefined,
+                files: [file],
+                lines: [node.location.start.line],
+            },
+        });
+    }
+}
+//# sourceMappingURL=UniversalSecretsAnalyzer.js.map

package/dist/analyzers/universal/UniversalSecretsAnalyzer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"UniversalSecretsAnalyzer.js","sourceRoot":"","sources":["../../../src/analyzers/universal/UniversalSecretsAnalyzer.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AAEH,OAAO,EAAE,iBAAiB,EAAE,MAAM,sCAAsC,CAAC;AACzE,OAAO,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAClD,OAAO,EAAE,OAAO,EAAE,MAAM,kCAAkC,CAAC;AAY3D,MAAM,CAAC,MAAM,sBAAsB,GAA0B;IAC3D,qBAAqB,EAAE,IAAI;CAC5B,CAAC;AAEF;;;;;GAKG;AACH,MAAM,YAAY,GAAG,IAAI,GAAG,CAAC;IAC3B,UAAU,EAAE,QAAQ,EAAE,KAAK,EAAE,YAAY;IACzC,QAAQ,EAAE,cAAc;IACxB,QAAQ;IACR,WAAW,EAAE,aAAa;IAC1B,WAAW;IACX,OAAO;IACP,YAAY;IACZ,YAAY,EAAE,aAAa;IAC3B,WAAW,EAAE,QAAQ;IACrB,YAAY,EAAE,YAAY;IAC1B,eAAe;IACf,SAAS,EAAE,YAAY;CACxB,CAAC,CAAC;AAEH,SAAS,aAAa,CAAC,IAAY;IACjC,OAAO,IAAI,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,YAAY,EAAE,EAAE,CAAC,CAAC;AACtD,CAAC;AAED,SAAS,YAAY,CAAC,IAAY;IAChC,MAAM,IAAI,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC;IACjC,OAAO,IAAI,CAAC,MAAM,GAAG,CAAC,IAAI,YAAY,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;AACnD,CAAC;AAED;;;;GAIG;AACH,SAAS,WAAW,CAAC,IAAa,EAAE,OAAwB,EAAE,UAAkB;IAC9E,MAAM,IAAI,GAAG,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,iBAAiB,CAAC,CAAC;IACtE,IAAI,IAAI;QAAE,OAAO,OAAO,CAAC,WAAW,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;IACvD,IAAI,IAAI,GAAG,OAAO,CAAC,WAAW,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC,IAAI,EAAE,CAAC;IACxD,IACE,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;QAC5C,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;QAC5C,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,EAC5C,CAAC;QACD,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IAC3B,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,0EAA0E;AAC1E,SAAS,iBAAiB,CAAC,IAAa,EAAE,OAAwB,EAAE,UAAkB;IACpF,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,QAAQ,IAAI,EAAE,EAAE,CAAC;QACpC,IAAI,CAAC,CAAC,IAAI,KAAK,QAAQ;YAAE,OAAO,WAAW,CAAC,CAAC,EAAE,OAAO,EAAE,UAAU,CAAC,CAAC;IACtE,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,2EAA2E;AAC3E,MAAM,WAAW,GAAG,oBAAoB,CAAC;AAEzC;;;GAGG;AACH,SAAS,mBAAmB,CAAC,KAAa;IACxC,MAAM,CAAC,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;IACvB,OAAO,CACL,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC;QACpB,sBAAsB,CAAC,IAAI,CAAC,CAAC,CAAC,IAA4B,SAAS;QACnE,gDAAgD,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,SAAS;QACrE,0CAA0C,CAAC,IAAI,CAAC,CAAC,CAAC,IAAQ,SAAS;QACnE,oBAAoB,CAAC,IAAI,CAAC,CAAC,CAAC,IAA8B,iBAAiB;QAC3E,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC,IAAoC,QAAQ;QAClE,0BAA0B,CAAC,IAAI,CAAC,CAAC,CAAC,CAAwB,MAAM;KACjE,CAAC;AACJ,CAAC;AAED,MAAM,YAAY,GAAG,IAAI,GAAG,CAAC;IAC3B,UAAU,EAAE,QAAQ,EAAE,KAAK,EAAE,UAAU,EAAE,YAAY,EAAE,QAAQ,EAAE,YAAY;IAC7E,YAAY,EAAE,WAAW,EAAE,cAAc,EAAE,QAAQ,EAAE,OAAO,EAAE,SAAS;IACvE,OAAO,EAAE,aAAa,EAAE,WAAW,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO;IAC5E,MAAM,EAAE,cAAc,EAAE,YAAY,EAAE,WAAW,EAAE,QAAQ,EAAE,UAAU;IACvE,WAAW,EAAE,aAAa,EAAE,QAAQ,EAAE,SAAS,EAAE,QAAQ,EAAE,QAAQ;IACnE,YAAY,EAAE,UAAU,EAAE,SAAS,EAAE,QAAQ,EAAE,WAAW,EAAE,aAAa;IACzE,UAAU,EAAE,kBAAkB,EAAE,YAAY;CAC7C,CAAC,CAAC;AAEH,kFAAkF;AAClF,SAAS,aAAa,CAAC,KAAa;IAClC,MAAM,CAAC,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;IACvB,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IAChC,IAAI,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC,CAAQ,eAAe;IAC5D,IAAI,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC,CAAO,MAAM;IACnD,IAAI,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC,CAAM,aAAa;IAC1D,IAAI,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IACvC,MAAM,IAAI,GAAG,aAAa,CAAC,CAAC,CAAC,CAAC;IAC9B,IAAI,YAAY,CAAC,GAAG,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IACxC,IAAI,kEAAkE,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IAC/F,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;;;;;GAQG;AACH,SAAS,mBAAmB,CAAC,KAAa;IACxC,MAAM,CAAC,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;IACvB,IAAI,aAAa,CAAC,CAAC,CAAC;QAAE,OAAO,KAAK,CAAC;IACnC,IAAI,mBAAmB,CAAC,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IACxC,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,KAAK,CAAC;IAC/B,IAAI,4BAA4B,CAAC,IAAI,CAAC,CAAC,CAAC;QAAE,OAAO,KAAK,CAAC,CAAC,QAAQ;IAChE,IAAI,eAAe,CAAC,IAAI,CAAC,CAAC,CAAC;QAAE,OAAO,KAAK,CAAC,CAAe,MAAM;IAC/D,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAC9B,MAAM,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACjC,MAAM,aAAa,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAC1C,OAAO,QAAQ,IAAI,QAAQ,IAAI,aAAa,CAAC;AAC/C,CAAC;AAED;;;GAGG;AACH,SAAS,mBAAmB,CAAC,QAAgB;IAC3C,MAAM,KAAK,GAAG,QAAQ,CAAC,WAAW,EAAE,CAAC;IACrC,OAAO,CACL,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC;QACpD,KAAK,CAAC,QAAQ,CAAC,WAAW,CAAC;QAC3B,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,SAAS,CAAC;QACrD,KAAK,CAAC,QAAQ,CAAC,YAAY,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,WAAW,CAAC;QAC3D,KAAK,CAAC,QAAQ,CAAC,UAAU,CAAC,CAC3B,CAAC;AACJ,CAAC;AAED,8DAA8D;AAC9D,SAAS,cAAc,CAAC,IAAa,EAAE,OAAwB,EAAE,UAAkB;IACjF,MAAM,IAAI,GAAG,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,YAAY,CAAC,CAAC;IACjE,OAAO,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,WAAW,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;AAC7D,CAAC;AAED,iFAAiF;AACjF,SAAS,aAAa,CAAC,IAAa,EAAE,OAAwB,EAAE,UAAkB;IAChF,MAAM,IAAI,GAAG,IAAI,CAAC,QAAQ,EAAE,IAAI,CAC9B,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,mBAAmB,IAAI,CAAC,CAAC,IAAI,KAAK,sBAAsB,IAAI,CAAC,CAAC,IAAI,KAAK,YAAY,CACtG,CAAC;IACF,IAAI,CAAC,IAAI;QAAE,OAAO,IAAI,CAAC;IACvB,IAAI,IAAI,CAAC,IAAI,KAAK,mBAAmB,EAAE,CAAC;QACtC,MAAM,IAAI,GAAG,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,qBAAqB,CAAC,CAAC;QAC1E,OAAO,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,WAAW,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAC7D,CAAC;IACD,IAAI,IAAI,CAAC,IAAI,KAAK,sBAAsB,EAAE,CAAC;QACzC,MAAM,GAAG,GAAG,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC;QAC5D,OAAO,GAAG,CAAC,CAAC,CAAC,WAAW,CAAC,GAAG,EAAE,OAAO,EAAE,UAAU,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAC5D,CAAC;IACD,OAAO,OAAO,CAAC,WAAW,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;AAC/C,CAAC;AAED,2DAA2D;AAC3D,SAAS,eAAe,CACtB,IAAa,EACb,OAAwB,EACxB,UAAkB;IAElB,MAAM,OAAO,GAAG,CAAC,IAAI,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC;IACzE,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACtC,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,qBAAqB,CAAC,IAAI,OAAO,CAAC,CAAC,CAAC,CAAC;IAC3F,MAAM,SAAS,GAAG,OAAO,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IAC9C,IAAI,SAAS,KAAK,OAAO,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IAC7D,MAAM,GAAG,GAAG,OAAO,CAAC,IAAI,KAAK,qBAAqB;QAChD,CAAC,CAAC,OAAO,CAAC,WAAW,CAAC,OAAO,EAAE,UAAU,CAAC;QAC1C,CAAC,CAAC,WAAW,CAAC,OAAO,EAAE,OAAO,EAAE,UAAU,CAAC,CAAC;IAC9C,MAAM,KAAK,GAAG,WAAW,CAAC,SAAS,EAAE,OAAO,EAAE,UAAU,CAAC,CAAC;IAC1D,OAAO,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC;AACxB,CAAC;AAED;;;;GAIG;AACH,SAAS,oBAAoB,CAAC,IAAY;IACxC,IAAI,IAAI,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,cAAc,EAAE,EAAE,CAAC,CAAC;IACnD,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IACxC,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC;IAC9C,IAAI,OAAO;QAAE,IAAI,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;IAC/B,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,4BAA4B,EAAE,EAAE,CAAC,CAAC;IACtD,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IACxC,OAAO,YAAY,CAAC,IAAI,CAAC,CAAC;AAC5B,CAAC;AAED;;;;GAIG;AACH,MAAM,OAAO,wBAAyB,SAAQ,iBAAiB;IACpD,IAAI,GAAG,SAAS,CAAC;IACjB,WAAW,GAAG,qDAAqD,CAAC;IACpE,QAAQ,GAAG,UAAU,CAAC;IAErB,KAAK,CAAC,UAAU,CACxB,GAAQ,EACR,OAAwB,EACxB,MAA6B,EAC7B,UAAkB;QAElB,MAAM,UAAU,GAAgB,EAAE,CAAC;QACnC,MAAM,WAAW,GAAG,EAAE,GAAG,sBAAsB,EAAE,GAAG,MAAM,EAAE,CAAC;QAC7D,IAAI,WAAW,CAAC,qBAAqB,KAAK,KAAK;YAAE,OAAO,UAAU,CAAC;QACnE,IAAI,mBAAmB,CAAC,GAAG,CAAC,QAAQ,CAAC;YAAE,OAAO,UAAU,CAAC;QAEzD,cAAc,CAAC,kBAAkB,EAAE,GAAG,EAAE;YACtC,OAAO,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,IAAI,EAAE,EAAE;gBACzB,UAAU,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,WAAW,CAAC,IAAI,EAAE,OAAO,EAAE,UAAU,EAAE,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC;YAChF,CAAC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;QAEH,OAAO,UAAU,CAAC;IACpB,CAAC;IAED;;;OAGG;IACK,WAAW,CACjB,IAAa,EACb,OAAwB,EACxB,UAAkB,EAClB,QAAgB;QAEhB,gCAAgC;QAChC,IAAI,IAAI,CAAC,IAAI,KAAK,qBAAqB,EAAE,CAAC;YACxC,MAAM,IAAI,GAAG,cAAc,CAAC,IAAI,EAAE,OAAO,EAAE,UAAU,CAAC,CAAC;YACvD,MAAM,KAAK,GAAG,iBAAiB,CAAC,IAAI,EAAE,OAAO,EAAE,UAAU,CAAC,CAAC;YAC3D,IAAI,IAAI,IAAI,KAAK,KAAK,IAAI,IAAI,YAAY,CAAC,IAAI,CAAC,IAAI,mBAAmB,CAAC,KAAK,CAAC,EAAE,CAAC;gBAC/E,OAAO,CAAC,IAAI,CAAC,aAAa,CAAC,QAAQ,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC;YAC3D,CAAC;YACD,OAAO,EAAE,CAAC;QACZ,CAAC;QAED,yDAAyD;QACzD,IAAI,IAAI,CAAC,IAAI,KAAK,uBAAuB,EAAE,CAAC;YAC1C,MAAM,GAAG,GAAG,aAAa,CAAC,IAAI,EAAE,OAAO,EAAE,UAAU,CAAC,CAAC;YACrD,MAAM,KAAK,GAAG,iBAAiB,CAAC,IAAI,EAAE,OAAO,EAAE,UAAU,CAAC,CAAC;YAC3D,IAAI,GAAG,IAAI,KAAK,KAAK,IAAI,IAAI,YAAY,CAAC,GAAG,CAAC,IAAI,mBAAmB,CAAC,KAAK,CAAC,EAAE,CAAC;gBAC7E,OAAO,CAAC,IAAI,CAAC,aAAa,CAAC,QAAQ,EAAE,IAAI,EAAE,GAAG,EAAE,KAAK,CAAC,CAAC,CAAC;YAC1D,CAAC;YACD,OAAO,EAAE,CAAC;QACZ,CAAC;QAED,4BAA4B;QAC5B,IAAI,IAAI,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;YACzB,MAAM,EAAE,GAAG,eAAe,CAAC,IAAI,EAAE,OAAO,EAAE,UAAU,CAAC,CAAC;YACtD,IAAI,EAAE,IAAI,YAAY,CAAC,EAAE,CAAC,GAAG,CAAC,IAAI,mBAAmB,CAAC,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC;gBAChE,OAAO,CAAC,IAAI,CAAC,aAAa,CAAC,QAAQ,EAAE,IAAI,EAAE,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC;YAChE,CAAC;YACD,OAAO,EAAE,CAAC;QACZ,CAAC;QAED,0EAA0E;QAC1E,iEAAiE;QACjE,IAAI,IAAI,CAAC,IAAI,KAAK,iBAAiB,EAAE,CAAC;YACpC,OAAO,IAAI,CAAC,mBAAmB,CAAC,IAAI,EAAE,OAAO,EAAE,UAAU,EAAE,QAAQ,CAAC,CAAC;QACvE,CAAC;QAED,OAAO,EAAE,CAAC;IACZ,CAAC;IAEO,mBAAmB,CACzB,IAAa,EACb,OAAwB,EACxB,UAAkB,EAClB,QAAgB;QAEhB,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,WAAW,CAAC,CAAC;QACpE,IAAI,CAAC,QAAQ;YAAE,OAAO,EAAE,CAAC;QACzB,MAAM,UAAU,GAAG,CAAC,QAAQ,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC;QAChF,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC;YAAE,OAAO,EAAE,CAAC;QAErC,MAAM,WAAW,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,oBAAoB,CAAC,WAAW,CAAC,CAAC,EAAE,OAAO,EAAE,UAAU,CAAC,CAAC,CAAC,CAAC;QACtG,IAAI,CAAC,WAAW;YAAE,OAAO,EAAE,CAAC;QAE5B,MAAM,KAAK,GAAgB,EAAE,CAAC;QAC9B,KAAK,MAAM,CAAC,IAAI,UAAU,EAAE,CAAC;YAC3B,MAAM,KAAK,GAAG,WAAW,CAAC,CAAC,EAAE,OAAO,EAAE,UAAU,CAAC,CAAC;YAClD,IAAI,oBAAoB,CAAC,KAAK,CAAC;gBAAE,SAAS,CAAC,iCAAiC;YAC5E,IAAI,mBAAmB,CAAC,KAAK,CAAC,EAAE,CAAC;gBAC/B,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,QAAQ,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,CAAC,CAAC,CAAC;YACnE,CAAC;QACH,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IAEO,aAAa,CAAC,IAAY,EAAE,IAAa,EAAE,IAAwB,EAAE,KAAa;QACxF,MAAM,KAAK,GAAG,IAAI,CAAC,CAAC,CAAC,KAAK,IAAI,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;QACvC,MAAM,SAAS,GAAG,IAAI;YACpB,CAAC,CAAC,eAAe,aAAa,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE,EAAE;YACpD,CAAC,CAAC,oBAAoB,CAAC;QACzB,OAAO,IAAI,CAAC,eAAe,CACzB,IAAI,EACJ,IAAI,CAAC,QAAQ,CAAC,KAAK,EACnB,mBAAmB,KAAK,gBAAgB,KAAK,CAAC,MAAM,kGAAkG,EACtJ;YACE,QAAQ,EAAE,UAAU;YACpB,IAAI,EAAE,kBAAkB;YACxB,UAAU,EAAE;gBACV,MAAM,EAAE,yBAAyB;gBACjC,OAAO,EAAE,wBAAwB,KAAK,iFAAiF,SAAS,IAAI;gBACpI,OAAO,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS;gBAClC,KAAK,EAAE,CAAC,IAAI,CAAC;gBACb,KAAK,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC;aAClC;SACF,CACF,CAAC;IACJ,CAAC;CACF"}

package/dist/analyzers/universal/UniversalStylesAnalyzer.d.ts

@@ -90,16 +90,10 @@ declare abstract class UniversalStylesAnalyzerDetectors extends UniversalStylesA
      */
     protected detectExactValueDrift(property: string, decls: StyleDeclRow[], cfg: StylesAnalyzerConfig): Violation[];
     /**
-     * For scale-family properties (margin, padding, gap, font-size),
-     * infer the project scale from modal values + Tailwind defaults,
-     * and flag values that don't fit the scale.
+     * For scale-family properties (margin, padding, gap, font-size), flag values
+     * that are not members of the property's Tailwind design scale.
      */
     protected detectOffScaleValues(byProperty: Map<string, StyleDeclRow[]>, cfg: StylesAnalyzerConfig): Violation[];
-    /**
-     * Infer the dominant scale step from a set of px values.
-     * Uses the Tailwind scale as candidate steps.
-     */
-    protected inferScaleStep(values: number[]): number | null;
 }
 /**
  * Universal styles analyzer.

package/dist/analyzers/universal/UniversalStylesAnalyzer.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"UniversalStylesAnalyzer.d.ts","sourceRoot":"","sources":["../../../src/analyzers/universal/UniversalStylesAnalyzer.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAGH,OAAO,EAAE,iBAAiB,EAAE,MAAM,sCAAsC,CAAC;AAEzE,OAAO,KAAK,EAAE,cAAc,EAAe,SAAS,EAAE,UAAU,EAAE,MAAM,gBAAgB,CAAC;AACzF,OAAO,KAAK,EAAE,GAAG,EAAE,eAAe,EAAE,MAAM,0BAA0B,CAAC;AAUrE,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,gBAAgB,CAAC;AAQ3D,eAAO,MAAM,qBAAqB,EAAE,oBAcnC,CAAC;AAwBF,UAAU,YAAY;IACpB,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,gBAAgB,EAAE,MAAM,GAAG,IAAI,CAAC;IAChC,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;CAC1B;AAgDD;;;;GAIG;AACH,UAAU,4BAA4B;IACpC,QAAQ,EAAE,UAAU,GAAG,SAAS,GAAG,YAAY,CAAC;IAChD,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,sEAAsE;IACtE,UAAU,CAAC,EAAE,UAAU,CAAC;CACzB;AAwBD;;;GAGG;AACH,uBAAe,2BAA4B,SAAQ,iBAAiB;IAClE,QAAQ,CAAC,IAAI,YAAY;IACzB,QAAQ,CAAC,WAAW,SAEmE;IACvF,QAAQ,CAAC,QAAQ,WAAW;IAE5B,SAAS,CAAC,aAAa,CACrB,QAAQ,EAAE,MAAM,EAChB,IAAI,EAAE,MAAM,EACZ,OAAO,EAAE,MAAM,EACf,cAAc,EAAE,4BAA4B,GAC3C,SAAS,CAiBX;IAED,qDAAqD;IACrD,SAAS,CAAC,eAAe,CAAC,GAAG,EAAE,MAAM,GAAG,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,GAAG,IAAI,CAgDtE;IAED,sDAAsD;IACtD,SAAS,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,GAAG,MAAM,CAKjF;IAED;;;;OAIG;IACH,SAAS,CAAC,eAAe,CACvB,KAAK,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,YAAY,CAAC;QAAC,GAAG,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,CAAA;KAAE,CAAC,EACnE,SAAS,EAAE,MAAM,GAChB,KAAK,CAAC,KAAK,CAAC;QAAE,IAAI,EAAE,YAAY,CAAC;QAAC,GAAG,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,CAAA;KAAE,CAAC,CAAC,CAoBrE;IAED,2EAA2E;IAC3E,SAAS,CAAC,eAAe,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAwBpD;CACF;AAOD,uBAAe,gCAAiC,SAAQ,2BAA2B;IAKjF;;;;;;;OAOG;IACH,SAAS,CAAC,gBAAgB,CACxB,UAAU,EAAE,GAAG,CAAC,MAAM,EAAE,YAAY,EAAE,CAAC,EACvC,GAAG,EAAE,oBAAoB,EACzB,QAAQ,EAAE,YAAY,EAAE,GACvB,SAAS,EAAE,CAwBb;IAED;;;;OAIG;IACH,SAAS,CAAC,qBAAqB,CAAC,KAAK,EAAE,YAAY,EAAE,GAAG,OAAO,CAe9D;IAED,SAAS,CAAC,eAAe,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CASnD;IAED;;OAEG;IACH,SAAS,CAAC,gBAAgB,CACxB,QAAQ,EAAE,MAAM,EAChB,KAAK,EAAE,YAAY,EAAE,EACrB,GAAG,EAAE,oBAAoB,GACxB,SAAS,EAAE,CAsBb;IAED;;OAEG;IACH,SAAS,CAAC,qBAAqB,CAC7B,QAAQ,EAAE,MAAM,EAChB,KAAK,EAAE,YAAY,EAAE,EACrB,GAAG,EAAE,oBAAoB,GACxB,SAAS,EAAE,CA6Cb;IAMD;;;;OAIG;IACH,SAAS,CAAC,oBAAoB,CAC5B,UAAU,EAAE,GAAG,CAAC,MAAM,EAAE,YAAY,EAAE,CAAC,EACvC,GAAG,EAAE,oBAAoB,GACxB,SAAS,EAAE,CAyCb;IAED;;;OAGG;IACH,SAAS,CAAC,cAAc,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,GAAG,IAAI,CAsBxD;CACF;AA62BD;;GAEG;AACH,qBAAa,uBAAwB,SAAQ,gCAAgC;IAC3E,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAiE;IAE3F;;;;;;;OAOG;IACG,OAAO,CACX,KAAK,EAAE,MAAM,EAAE,EACf,MAAM,GAAE,GAAQ,EAChB,OAAO,GAAE,GAAQ,GAChB,OAAO,CAAC,cAAc,CAAC,CAqCzB;IAED,2EAA2E;YAC7D,eAAe;IAkB7B,8DAA8D;YAChD,YAAY;IAa1B,iDAAiD;IACjD,UAAgB,UAAU,CACxB,IAAI,EAAE,GAAG,EACT,QAAQ,EAAE,eAAe,EACzB,OAAO,EAAE,GAAG,EACZ,WAAW,EAAE,MAAM,GAClB,OAAO,CAAC,SAAS,EAAE,CAAC,CAEtB;IAMD,OAAO,CAAC,iBAAiB;IAWzB,OAAO,CAAC,WAAW;IAQnB,OAAO,CAAC,eAAe;CAOxB"}
+{"version":3,"file":"UniversalStylesAnalyzer.d.ts","sourceRoot":"","sources":["../../../src/analyzers/universal/UniversalStylesAnalyzer.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAGH,OAAO,EAAE,iBAAiB,EAAE,MAAM,sCAAsC,CAAC;AAEzE,OAAO,KAAK,EAAE,cAAc,EAAe,SAAS,EAAE,UAAU,EAAE,MAAM,gBAAgB,CAAC;AACzF,OAAO,KAAK,EAAE,GAAG,EAAE,eAAe,EAAE,MAAM,0BAA0B,CAAC;AAUrE,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,gBAAgB,CAAC;AAQ3D,eAAO,MAAM,qBAAqB,EAAE,oBAcnC,CAAC;AA4DF,UAAU,YAAY;IACpB,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,gBAAgB,EAAE,MAAM,GAAG,IAAI,CAAC;IAChC,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;CAC1B;AAgDD;;;;GAIG;AACH,UAAU,4BAA4B;IACpC,QAAQ,EAAE,UAAU,GAAG,SAAS,GAAG,YAAY,CAAC;IAChD,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,sEAAsE;IACtE,UAAU,CAAC,EAAE,UAAU,CAAC;CACzB;AAwBD;;;GAGG;AACH,uBAAe,2BAA4B,SAAQ,iBAAiB;IAClE,QAAQ,CAAC,IAAI,YAAY;IACzB,QAAQ,CAAC,WAAW,SAEmE;IACvF,QAAQ,CAAC,QAAQ,WAAW;IAE5B,SAAS,CAAC,aAAa,CACrB,QAAQ,EAAE,MAAM,EAChB,IAAI,EAAE,MAAM,EACZ,OAAO,EAAE,MAAM,EACf,cAAc,EAAE,4BAA4B,GAC3C,SAAS,CAiBX;IAED,qDAAqD;IACrD,SAAS,CAAC,eAAe,CAAC,GAAG,EAAE,MAAM,GAAG,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,GAAG,IAAI,CAgDtE;IAED,sDAAsD;IACtD,SAAS,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,GAAG,MAAM,CAKjF;IAED;;;;OAIG;IACH,SAAS,CAAC,eAAe,CACvB,KAAK,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,YAAY,CAAC;QAAC,GAAG,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,CAAA;KAAE,CAAC,EACnE,SAAS,EAAE,MAAM,GAChB,KAAK,CAAC,KAAK,CAAC;QAAE,IAAI,EAAE,YAAY,CAAC;QAAC,GAAG,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,CAAA;KAAE,CAAC,CAAC,CAoBrE;IAED,2EAA2E;IAC3E,SAAS,CAAC,eAAe,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAwBpD;CACF;AAOD,uBAAe,gCAAiC,SAAQ,2BAA2B;IAKjF;;;;;;;OAOG;IACH,SAAS,CAAC,gBAAgB,CACxB,UAAU,EAAE,GAAG,CAAC,MAAM,EAAE,YAAY,EAAE,CAAC,EACvC,GAAG,EAAE,oBAAoB,EACzB,QAAQ,EAAE,YAAY,EAAE,GACvB,SAAS,EAAE,CAwBb;IAED;;;;OAIG;IACH,SAAS,CAAC,qBAAqB,CAAC,KAAK,EAAE,YAAY,EAAE,GAAG,OAAO,CAe9D;IAED,SAAS,CAAC,eAAe,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CASnD;IAED;;OAEG;IACH,SAAS,CAAC,gBAAgB,CACxB,QAAQ,EAAE,MAAM,EAChB,KAAK,EAAE,YAAY,EAAE,EACrB,GAAG,EAAE,oBAAoB,GACxB,SAAS,EAAE,CAsBb;IAED;;OAEG;IACH,SAAS,CAAC,qBAAqB,CAC7B,QAAQ,EAAE,MAAM,EAChB,KAAK,EAAE,YAAY,EAAE,EACrB,GAAG,EAAE,oBAAoB,GACxB,SAAS,EAAE,CA6Cb;IAMD;;;OAGG;IACH,SAAS,CAAC,oBAAoB,CAC5B,UAAU,EAAE,GAAG,CAAC,MAAM,EAAE,YAAY,EAAE,CAAC,EACvC,GAAG,EAAE,oBAAoB,GACxB,SAAS,EAAE,CAsCb;CACF;AAi3BD;;GAEG;AACH,qBAAa,uBAAwB,SAAQ,gCAAgC;IAC3E,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAiE;IAE3F;;;;;;;OAOG;IACG,OAAO,CACX,KAAK,EAAE,MAAM,EAAE,EACf,MAAM,GAAE,GAAQ,EAChB,OAAO,GAAE,GAAQ,GAChB,OAAO,CAAC,cAAc,CAAC,CAqCzB;IAED,2EAA2E;YAC7D,eAAe;IAkB7B,8DAA8D;YAChD,YAAY;IAa1B,iDAAiD;IACjD,UAAgB,UAAU,CACxB,IAAI,EAAE,GAAG,EACT,QAAQ,EAAE,eAAe,EACzB,OAAO,EAAE,GAAG,EACZ,WAAW,EAAE,MAAM,GAClB,OAAO,CAAC,SAAS,EAAE,CAAC,CAEtB;IAMD,OAAO,CAAC,iBAAiB;IAWzB,OAAO,CAAC,WAAW;IAQnB,OAAO,CAAC,eAAe;CAOxB"}

package/dist/analyzers/universal/UniversalStylesAnalyzer.js

@@ -34,11 +34,19 @@ export const DEFAULT_STYLES_CONFIG = {
     declarationSetSimilarityThreshold: 0.9,
 };
 // ---------------------------------------------------------------------------
-// Tailwind v4 default spacing scale (px equivalents)
+// Tailwind default design scales (px equivalents)
 // ---------------------------------------------------------------------------
+//
+// Two distinct scales: the *spacing* scale (margin/padding/gap) and the
+// *font-size* scale. They are not interchangeable — `14px` is a valid font size
+// (`text-sm`) but not a named spacing step, and `28px` is a valid spacing step
+// (`spacing-7`) but not a named font size. The old proxy collapsed both onto a
+// single inferred step, which is why `font-size` was silently judged against a
+// spacing step it never uses.
 const TAILWIND_SPACING_PX = {
     '0': 0, 'px': 1, '0.5': 2,
-    '1': 4, '2': 8, '3': 12, '4': 16,
+    '1': 4, '1.5': 6, '2': 8, '2.5': 10,
+    '3': 12, '3.5': 14, '4': 16,
     '5': 20, '6': 24, '7': 28, '8': 32,
     '9': 36, '10': 40, '11': 44, '12': 48,
     '14': 56, '16': 64, '20': 80, '24': 96,
@@ -47,7 +55,35 @@ const TAILWIND_SPACING_PX = {
     '60': 240, '64': 256, '72': 288, '80': 320,
     '96': 384,
 };
-const TAILWIND_SCALE_VALUES = Object.values(TAILWIND_SPACING_PX).sort((a, b) => a - b);
+/** Named Tailwind font-size steps (`text-xs` … `text-9xl`), px equivalents. */
+const TAILWIND_FONT_SIZE_PX = [
+    12, 14, 16, 18, 20, 24, 30, 36, 48, 60, 72, 96, 128,
+];
+const TAILWIND_SPACING_VALUES = Object.values(TAILWIND_SPACING_PX).sort((a, b) => a - b);
+/** O(1) membership sets for "is this px value on the Tailwind scale". */
+const TAILWIND_SPACING_SET = new Set(TAILWIND_SPACING_VALUES);
+const TAILWIND_FONT_SIZE_SET = new Set(TAILWIND_FONT_SIZE_PX);
+/** The design scale a property belongs to. */
+function scaleForProperty(property) {
+    if (property === 'font-size') {
+        return { values: TAILWIND_FONT_SIZE_PX, set: TAILWIND_FONT_SIZE_SET, label: 'font-size scale' };
+    }
+    return { values: TAILWIND_SPACING_VALUES, set: TAILWIND_SPACING_SET, label: 'spacing scale' };
+}
+/** The nearest scale values on either side of `px` (for the suggestion). */
+function nearestScaleValues(px, values) {
+    let lower = 0;
+    let upper = values[values.length - 1];
+    for (const s of values) {
+        if (s <= px)
+            lower = s;
+        if (s >= px) {
+            upper = s;
+            break;
+        }
+    }
+    return [lower, upper];
+}
 /**
  * Stable symbol for a value-scoped finding: `<property>: <value>`.
  *
@@ -353,9 +389,8 @@ class UniversalStylesAnalyzerDetectors extends UniversalStylesAnalyzerBase {
     // Detector 2: Off-Scale Values
     // -----------------------------------------------------------------------
     /**
-     * For scale-family properties (margin, padding, gap, font-size),
-     * infer the project scale from modal values + Tailwind defaults,
-     * and flag values that don't fit the scale.
+     * For scale-family properties (margin, padding, gap, font-size), flag values
+     * that are not members of the property's Tailwind design scale.
      */
     detectOffScaleValues(byProperty, cfg) {
         const violations = [];
@@ -373,51 +408,21 @@ class UniversalStylesAnalyzerDetectors extends UniversalStylesAnalyzerBase {
             }
             if (parsed.length < cfg.minCorpus)
                 continue;
-            // Infer the project scale step
-            const step = this.inferScaleStep(parsed.map(p => p.px));
-            if (step === null || step === 0)
-                continue;
-            // Flag off-scale values
+            // Flag values that are not members of the property's scale. Spacing
+            // properties are judged against the spacing scale, `font-size` against
+            // the font-size scale — they are not interchangeable.
+            const scale = scaleForProperty(property);
             for (const { decl, px } of parsed) {
-                const remainder = px % step;
-                // Allow near-zero remainders (floating point tolerance: < 1px)
-                if (Math.abs(remainder) > 1 && Math.abs(remainder - step) > 1) {
+                if (!scale.set.has(px)) {
+                    const [lower, upper] = nearestScaleValues(px, scale.values);
                     violations.push(this.makeViolation(decl.file_path, decl.line, `Off-scale "${property}" value: "${decl.raw_value}" (${px}px) ` +
-                        `does not align with the inferred ${step}px scale step. ` +
-                        `Nearby scale values: ${Math.floor(px / step) * step}px or ` +
-                        `${Math.ceil(px / step) * step}px.`, { severity: 'warning', rule: 'styles/off-scale', symbol: declValueKey(decl) }));
+                        `is not on the Tailwind ${scale.label}. ` +
+                        `Nearest scale values: ${lower}px or ${upper}px.`, { severity: 'warning', rule: 'styles/off-scale', symbol: declValueKey(decl) }));
                 }
             }
         }
         return violations;
     }
-    /**
-     * Infer the dominant scale step from a set of px values.
-     * Uses the Tailwind scale as candidate steps.
-     */
-    inferScaleStep(values) {
-        if (values.length < 3)
-            return null;
-        // Count how many values align with each tailwind step
-        const candidates = [2, 4, 8, 16];
-        let bestStep = 4;
-        let bestScore = 0;
-        for (const step of candidates) {
-            let score = 0;
-            for (const v of values) {
-                if (v % step === 0)
-                    score++;
-            }
-            if (score > bestScore) {
-                bestScore = score;
-                bestStep = step;
-            }
-        }
-        // Require at least 60% alignment
-        if (bestScore / values.length < 0.6)
-            return null;
-        return bestStep;
-    }
 }
 // ---------------------------------------------------------------------------
 // Structure detectors: class/token/mechanism integrity checks over the raw
@@ -890,7 +895,11 @@ function buildTokenValueMap(tokens) {
         if (t.file_path === 'built-in defaults')
             continue;
         const normalizedTokenVal = normalizeValue(t.value, '__token__');
-        tokenValueMap.set(t.value, { name: t.name, valueType: normalizedTokenVal?.type ?? null });
+        // Key by the same normalized spelling the lookup uses, so a shorthand or
+        // case-differing token value (`#fff`, `#FFFFFF`) still matches a raw
+        // declaration of the same colour (`#ffffff`). The ledger's key-normalization
+        // asymmetry — raw key vs normalized lookup — was the last crude gap.
+        tokenValueMap.set(normalizeForTokenMatch(t.value), { name: t.name, valueType: normalizedTokenVal?.type ?? null });
     }
     return tokenValueMap;
 }