codesift-mcp 0.3.0 → 0.5.0

package/dist/tools/nextjs-route-readers.js

@@ -0,0 +1,340 @@
+/**
+ * Next.js route readers: AST-based route segment config extraction,
+ * rendering strategy classification, and single-file parsing.
+ *
+ * These readers are pure helpers with no orchestration logic. They are used by
+ * `nextjs-route-tools.ts` (orchestrator) and re-exported from it for backward
+ * compatibility with existing consumers and tests. Split follows the T2/T3
+ * reader + orchestrator precedent.
+ */
+import { readFile } from "node:fs/promises";
+import { relative, basename } from "node:path";
+import { cachedParseFile as parseFile } from "../utils/nextjs-audit-cache.js";
+import { computeLayoutChain, deriveUrlPath, extractFetchCalls, scanDirective, } from "../utils/nextjs.js";
+// ---------------------------------------------------------------------------
+// Route segment config reader (AST initializer extraction)
+// ---------------------------------------------------------------------------
+const KNOWN_CONFIG_NAMES = new Set([
+    "dynamic",
+    "revalidate",
+    "runtime",
+    "fetchCache",
+    "preferredRegion",
+    "maxDuration",
+    "dynamicParams",
+]);
+const DYNAMIC_VALUES = new Set(["auto", "force-dynamic", "force-static", "error"]);
+const RUNTIME_VALUES = new Set(["nodejs", "edge"]);
+/**
+ * Read Next.js route segment config exports from an AST.
+ *
+ * Recognizes:
+ *   export const dynamic = "force-dynamic"
+ *   export const revalidate = 60 | false
+ *   export const runtime = "edge"
+ *   export async function generateStaticParams() {...}
+ *
+ * Non-literal initializers (Identifier, BinaryExpression, etc.) set a
+ * `_non_literal` flag and leave the corresponding value `undefined`.
+ *
+ * @internal exported for unit testing
+ */
+export function readRouteSegmentConfig(tree, _source) {
+    const config = { has_generate_static_params: false };
+    const root = tree.rootNode;
+    for (const exportNode of root.descendantsOfType("export_statement")) {
+        // `export const X = Y` → lexical_declaration > variable_declarator
+        for (const decl of exportNode.descendantsOfType("variable_declarator")) {
+            const nameNode = decl.childForFieldName("name") ?? decl.namedChild(0);
+            if (nameNode?.type !== "identifier")
+                continue;
+            const name = nameNode.text;
+            if (!KNOWN_CONFIG_NAMES.has(name))
+                continue;
+            const value = decl.childForFieldName("value") ?? decl.namedChild(1);
+            if (!value)
+                continue;
+            readConfigValue(config, name, value);
+        }
+        // `export async function generateStaticParams() {...}` / `export function ...`
+        for (const fn of exportNode.descendantsOfType("function_declaration")) {
+            const nameNode = fn.childForFieldName("name") ?? fn.namedChild(0);
+            if (nameNode?.type === "identifier" && nameNode.text === "generateStaticParams") {
+                config.has_generate_static_params = true;
+            }
+        }
+    }
+    return config;
+}
+function readConfigValue(config, name, value) {
+    // String literal
+    if (value.type === "string") {
+        const frag = value.namedChild(0);
+        const text = frag?.type === "string_fragment" ? frag.text : value.text.slice(1, -1);
+        if (name === "dynamic" && DYNAMIC_VALUES.has(text)) {
+            config.dynamic = text;
+        }
+        else if (name === "runtime" && RUNTIME_VALUES.has(text)) {
+            config.runtime = text;
+        }
+        return;
+    }
+    // Number literal
+    if (value.type === "number") {
+        const num = parseFloat(value.text);
+        if (!Number.isNaN(num) && name === "revalidate") {
+            config.revalidate = num;
+        }
+        return;
+    }
+    // Boolean false literal
+    if (value.type === "false") {
+        if (name === "revalidate")
+            config.revalidate = false;
+        return;
+    }
+    if (value.type === "true") {
+        // `revalidate = true` is not a valid Next.js value — ignore
+        return;
+    }
+    // Any other initializer (Identifier, BinaryExpression, CallExpression, ...)
+    // is "non-literal". Flag it so callers know the value is unknowable at
+    // static-analysis time.
+    if (name === "dynamic")
+        config.dynamic_non_literal = true;
+    else if (name === "revalidate")
+        config.revalidate_non_literal = true;
+    else if (name === "runtime")
+        config.runtime_non_literal = true;
+}
+// ---------------------------------------------------------------------------
+// Rendering strategy classification
+// ---------------------------------------------------------------------------
+/**
+ * Map a route segment config (+ optional Pages Router signals) to a
+ * rendering strategy.
+ *
+ * Priority (App Router): runtime=edge > force-dynamic > force-static >
+ * revalidate > generateStaticParams > default (static).
+ *
+ * Pages Router: getServerSideProps → ssr; getStaticProps + revalidate → isr;
+ * getStaticProps → static; otherwise unknown.
+ *
+ * @internal exported for unit testing
+ */
+export function classifyRendering(config, router, pagesSignals) {
+    if (router === "pages") {
+        if (pagesSignals?.hasGetServerSideProps)
+            return "ssr";
+        if (pagesSignals?.hasGetStaticProps) {
+            return pagesSignals.hasRevalidateInReturn ? "isr" : "static";
+        }
+        return "unknown";
+    }
+    // App Router priority
+    if (config.runtime === "edge")
+        return "edge";
+    if (config.dynamic === "force-dynamic")
+        return "ssr";
+    if (config.dynamic === "force-static")
+        return "static";
+    if (typeof config.revalidate === "number" && config.revalidate > 0)
+        return "isr";
+    if (config.has_generate_static_params)
+        return "static";
+    // Next.js 15 default: static
+    return "static";
+}
+// ---------------------------------------------------------------------------
+// parseRouteFile — process a single route file into a NextjsRouteEntry
+// ---------------------------------------------------------------------------
+const HTTP_METHODS = new Set([
+    "GET", "POST", "PUT", "DELETE", "PATCH", "HEAD", "OPTIONS",
+]);
+const APP_CONVENTION_TYPES = {
+    page: "page",
+    route: "route",
+    layout: "layout",
+    loading: "loading",
+    error: "error",
+    "not-found": "not-found",
+    "global-error": "global-error",
+    default: "default",
+    template: "template",
+};
+/** Derive a route file's `type` field from its path. */
+function deriveRouteType(filePath, router) {
+    const name = basename(filePath).replace(/\.[jt]sx?$/, "");
+    if (router === "pages") {
+        if (name === "_app")
+            return "app";
+        if (name === "_document")
+            return "document";
+        if (name === "_error")
+            return "error_page";
+        // default for pages/ files: treat api/* as route, otherwise page
+        return filePath.includes("/api/") ? "route" : "page";
+    }
+    // App Router
+    if (filePath.includes("/@"))
+        return "parallel";
+    if (/\/\(\.{1,3}\)/.test(filePath))
+        return "intercepting";
+    return APP_CONVENTION_TYPES[name] ?? "page";
+}
+/** Detect Pages Router data-fetching signals via exported function/const names. */
+function detectPagesRouterSignals(tree) {
+    const signals = {};
+    for (const exportNode of tree.rootNode.descendantsOfType("export_statement")) {
+        for (const fn of exportNode.descendantsOfType("function_declaration")) {
+            const name = (fn.childForFieldName("name") ?? fn.namedChild(0))?.text;
+            if (name === "getServerSideProps")
+                signals.hasGetServerSideProps = true;
+            if (name === "getStaticProps")
+                signals.hasGetStaticProps = true;
+        }
+        for (const decl of exportNode.descendantsOfType("variable_declarator")) {
+            const name = (decl.childForFieldName("name") ?? decl.namedChild(0))?.text;
+            if (name === "getServerSideProps")
+                signals.hasGetServerSideProps = true;
+            if (name === "getStaticProps")
+                signals.hasGetStaticProps = true;
+        }
+    }
+    return signals;
+}
+/** Detect `export const metadata = {...}` or `export function generateMetadata`. */
+function detectMetadataExport(tree) {
+    for (const exportNode of tree.rootNode.descendantsOfType("export_statement")) {
+        for (const decl of exportNode.descendantsOfType("variable_declarator")) {
+            const name = (decl.childForFieldName("name") ?? decl.namedChild(0))?.text;
+            if (name === "metadata")
+                return true;
+        }
+        for (const fn of exportNode.descendantsOfType("function_declaration")) {
+            const name = (fn.childForFieldName("name") ?? fn.namedChild(0))?.text;
+            if (name === "generateMetadata")
+                return true;
+        }
+    }
+    return false;
+}
+/** Collect HTTP method names from top-level exports of a route.ts file. */
+function extractHttpMethods(tree) {
+    const methods = new Set();
+    for (const exportNode of tree.rootNode.descendantsOfType("export_statement")) {
+        for (const fn of exportNode.descendantsOfType("function_declaration")) {
+            const name = (fn.childForFieldName("name") ?? fn.namedChild(0))?.text;
+            if (name && HTTP_METHODS.has(name))
+                methods.add(name);
+        }
+        for (const decl of exportNode.descendantsOfType("variable_declarator")) {
+            const name = (decl.childForFieldName("name") ?? decl.namedChild(0))?.text;
+            if (name && HTTP_METHODS.has(name))
+                methods.add(name);
+        }
+    }
+    return [...methods];
+}
+/**
+ * Process a single route file into a `NextjsRouteEntry`.
+ *
+ * @internal exported for unit testing
+ */
+export async function parseRouteFile(filePath, repoRoot, router) {
+    const relPath = relative(repoRoot, filePath);
+    const type = deriveRouteType(relPath, router);
+    const url_path = deriveUrlPath(relPath, router);
+    const source = await readFile(filePath, "utf8");
+    const tree = await parseFile(filePath, source);
+    if (!tree) {
+        return {
+            url_path,
+            file_path: relPath,
+            router,
+            type,
+            rendering: "unknown",
+            config: { has_generate_static_params: false },
+            has_metadata: false,
+            layout_chain: [],
+            middleware_applies: false,
+            is_client_component: false,
+        };
+    }
+    const config = readRouteSegmentConfig(tree, source);
+    const has_metadata = detectMetadataExport(tree);
+    let methods;
+    if (type === "route") {
+        methods = extractHttpMethods(tree);
+    }
+    const pagesSignals = router === "pages" ? detectPagesRouterSignals(tree) : undefined;
+    let rendering = classifyRendering(config, router, pagesSignals);
+    // Q2 — detect runtime SSR triggers (cookies/headers/fetch no-store) and
+    // upgrade `static` → `ssr` when present, capturing a human-readable reason.
+    let rendering_reason;
+    if (router === "app") {
+        if (rendering === "ssr") {
+            // Already SSR — explain why.
+            if (config.dynamic === "force-dynamic") {
+                rendering_reason = "dynamic='force-dynamic' config export";
+            }
+            else {
+                const fetches = extractFetchCalls(tree, source);
+                const noStore = fetches.find((f) => f.callee === "fetch" && f.cacheOption === "no-store");
+                if (noStore) {
+                    rendering_reason = `fetch with cache:'no-store' at line ${noStore.line}`;
+                }
+                else {
+                    const dynamicCall = fetches.find((f) => f.callee === "cookies" || f.callee === "headers");
+                    if (dynamicCall) {
+                        rendering_reason = `${dynamicCall.callee}() called at line ${dynamicCall.line}`;
+                    }
+                    else {
+                        rendering_reason = "unknown SSR trigger";
+                    }
+                }
+            }
+        }
+        else if (rendering === "static") {
+            // Maybe upgrade: presence of cookies/headers/fetch no-store implies SSR.
+            const fetches = extractFetchCalls(tree, source);
+            const noStore = fetches.find((f) => f.callee === "fetch" && f.cacheOption === "no-store");
+            if (noStore) {
+                rendering = "ssr";
+                rendering_reason = `fetch with cache:'no-store' at line ${noStore.line}`;
+            }
+            else {
+                const dynamicCall = fetches.find((f) => f.callee === "cookies" || f.callee === "headers");
+                if (dynamicCall) {
+                    rendering = "ssr";
+                    rendering_reason = `${dynamicCall.callee}() called at line ${dynamicCall.line}`;
+                }
+            }
+        }
+    }
+    const directive = await scanDirective(filePath);
+    const is_client_component = directive === "use client";
+    const layout_chain = router === "app"
+        ? await computeLayoutChain(relPath, repoRoot)
+        : [];
+    const entry = {
+        url_path,
+        file_path: relPath,
+        router,
+        type,
+        rendering,
+        config,
+        has_metadata,
+        layout_chain,
+        middleware_applies: false, // filled in by orchestrator (Task 30)
+        is_client_component,
+    };
+    if (methods !== undefined) {
+        entry.methods = methods;
+    }
+    if (rendering_reason !== undefined) {
+        entry.rendering_reason = rendering_reason;
+    }
+    return entry;
+}
+//# sourceMappingURL=nextjs-route-readers.js.map

package/dist/tools/nextjs-route-readers.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"nextjs-route-readers.js","sourceRoot":"","sources":["../../src/tools/nextjs-route-readers.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC5C,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAC;AAE/C,OAAO,EAAE,eAAe,IAAI,SAAS,EAAE,MAAM,gCAAgC,CAAC;AAC9E,OAAO,EACL,kBAAkB,EAClB,aAAa,EACb,iBAAiB,EACjB,aAAa,GACd,MAAM,oBAAoB,CAAC;AAoE5B,8EAA8E;AAC9E,2DAA2D;AAC3D,8EAA8E;AAE9E,MAAM,kBAAkB,GAAG,IAAI,GAAG,CAAC;IACjC,SAAS;IACT,YAAY;IACZ,SAAS;IACT,YAAY;IACZ,iBAAiB;IACjB,aAAa;IACb,eAAe;CAChB,CAAC,CAAC;AAEH,MAAM,cAAc,GAAG,IAAI,GAAG,CAAC,CAAC,MAAM,EAAE,eAAe,EAAE,cAAc,EAAE,OAAO,CAAC,CAAC,CAAC;AACnF,MAAM,cAAc,GAAG,IAAI,GAAG,CAAC,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC;AAEnD;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,sBAAsB,CACpC,IAAiB,EACjB,OAAe;IAEf,MAAM,MAAM,GAAuB,EAAE,0BAA0B,EAAE,KAAK,EAAE,CAAC;IACzE,MAAM,IAAI,GAAG,IAAI,CAAC,QAAQ,CAAC;IAE3B,KAAK,MAAM,UAAU,IAAI,IAAI,CAAC,iBAAiB,CAAC,kBAAkB,CAAC,EAAE,CAAC;QACpE,mEAAmE;QACnE,KAAK,MAAM,IAAI,IAAI,UAAU,CAAC,iBAAiB,CAAC,qBAAqB,CAAC,EAAE,CAAC;YACvE,MAAM,QAAQ,GAAG,IAAI,CAAC,iBAAiB,CAAC,MAAM,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;YACtE,IAAI,QAAQ,EAAE,IAAI,KAAK,YAAY;gBAAE,SAAS;YAC9C,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAI,CAAC;YAC3B,IAAI,CAAC,kBAAkB,CAAC,GAAG,CAAC,IAAI,CAAC;gBAAE,SAAS;YAE5C,MAAM,KAAK,GAAG,IAAI,CAAC,iBAAiB,CAAC,OAAO,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;YACpE,IAAI,CAAC,KAAK;gBAAE,SAAS;YAErB,eAAe,CAAC,MAAM,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;QACvC,CAAC;QAED,+EAA+E;QAC/E,KAAK,MAAM,EAAE,IAAI,UAAU,CAAC,iBAAiB,CAAC,sBAAsB,CAAC,EAAE,CAAC;YACtE,MAAM,QAAQ,GAAG,EAAE,CAAC,iBAAiB,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;YAClE,IAAI,QAAQ,EAAE,IAAI,KAAK,YAAY,IAAI,QAAQ,CAAC,IAAI,KAAK,sBAAsB,EAAE,CAAC;gBAChF,MAAM,CAAC,0BAA0B,GAAG,IAAI,CAAC;YAC3C,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,eAAe,CACtB,MAA0B,EAC1B,IAAY,EACZ,KAAwB;IAExB,iBAAiB;IACjB,IAAI,KAAK,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;QAC5B,MAAM,IAAI,GAAG,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;QACjC,MAAM,IAAI,GAAG,IAAI,EAAE,IAAI,KAAK,iBAAiB,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;QACpF,IAAI,IAAI,KAAK,SAAS,IAAI,cAAc,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;YACnD,MAAM,CAAC,OAAO,GAAG,IAA2D,CAAC;QAC/E,CAAC;aAAM,IAAI,IAAI,KAAK,SAAS,IAAI,cAAc,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;YAC1D,MAAM,CAAC,OAAO,GAAG,IAAyB,CAAC;QAC7C,CAAC;QACD,OAAO;IACT,CAAC;IAED,iBAAiB;IACjB,IAAI,KAAK,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;QAC5B,MAAM,GAAG,GAAG,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QACnC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,IAAI,KAAK,YAAY,EAAE,CAAC;YAChD,MAAM,CAAC,UAAU,GAAG,GAAG,CAAC;QAC1B,CAAC;QACD,OAAO;IACT,CAAC;IAED,wBAAwB;IACxB,IAAI,KAAK,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;QAC3B,IAAI,IAAI,KAAK,YAAY;YAAE,MAAM,CAAC,UAAU,GAAG,KAAK,CAAC;QACrD,OAAO;IACT,CAAC;IACD,IAAI,KAAK,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;QAC1B,4DAA4D;QAC5D,OAAO;IACT,CAAC;IAED,4EAA4E;IAC5E,uEAAuE;IACvE,wBAAwB;IACxB,IAAI,IAAI,KAAK,SAAS;QAAE,MAAM,CAAC,mBAAmB,GAAG,IAAI,CAAC;SACrD,IAAI,IAAI,KAAK,YAAY;QAAE,MAAM,CAAC,sBAAsB,GAAG,IAAI,CAAC;SAChE,IAAI,IAAI,KAAK,SAAS;QAAE,MAAM,CAAC,mBAAmB,GAAG,IAAI,CAAC;AACjE,CAAC;AAED,8EAA8E;AAC9E,oCAAoC;AACpC,8EAA8E;AAE9E;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,iBAAiB,CAC/B,MAA0B,EAC1B,MAAuB,EACvB,YAAiC;IAEjC,IAAI,MAAM,KAAK,OAAO,EAAE,CAAC;QACvB,IAAI,YAAY,EAAE,qBAAqB;YAAE,OAAO,KAAK,CAAC;QACtD,IAAI,YAAY,EAAE,iBAAiB,EAAE,CAAC;YACpC,OAAO,YAAY,CAAC,qBAAqB,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC;QAC/D,CAAC;QACD,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,sBAAsB;IACtB,IAAI,MAAM,CAAC,OAAO,KAAK,MAAM;QAAE,OAAO,MAAM,CAAC;IAC7C,IAAI,MAAM,CAAC,OAAO,KAAK,eAAe;QAAE,OAAO,KAAK,CAAC;IACrD,IAAI,MAAM,CAAC,OAAO,KAAK,cAAc;QAAE,OAAO,QAAQ,CAAC;IACvD,IAAI,OAAO,MAAM,CAAC,UAAU,KAAK,QAAQ,IAAI,MAAM,CAAC,UAAU,GAAG,CAAC;QAAE,OAAO,KAAK,CAAC;IACjF,IAAI,MAAM,CAAC,0BAA0B;QAAE,OAAO,QAAQ,CAAC;IAEvD,6BAA6B;IAC7B,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,8EAA8E;AAC9E,uEAAuE;AACvE,8EAA8E;AAE9E,MAAM,YAAY,GAAG,IAAI,GAAG,CAAC;IAC3B,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,EAAE,SAAS;CAC3D,CAAC,CAAC;AAEH,MAAM,oBAAoB,GAAmC;IAC3D,IAAI,EAAE,MAAM;IACZ,KAAK,EAAE,OAAO;IACd,MAAM,EAAE,QAAQ;IAChB,OAAO,EAAE,SAAS;IAClB,KAAK,EAAE,OAAO;IACd,WAAW,EAAE,WAAW;IACxB,cAAc,EAAE,cAAc;IAC9B,OAAO,EAAE,SAAS;IAClB,QAAQ,EAAE,UAAU;CACrB,CAAC;AAEF,wDAAwD;AACxD,SAAS,eAAe,CAAC,QAAgB,EAAE,MAAuB;IAChE,MAAM,IAAI,GAAG,QAAQ,CAAC,QAAQ,CAAC,CAAC,OAAO,CAAC,YAAY,EAAE,EAAE,CAAC,CAAC;IAE1D,IAAI,MAAM,KAAK,OAAO,EAAE,CAAC;QACvB,IAAI,IAAI,KAAK,MAAM;YAAE,OAAO,KAAK,CAAC;QAClC,IAAI,IAAI,KAAK,WAAW;YAAE,OAAO,UAAU,CAAC;QAC5C,IAAI,IAAI,KAAK,QAAQ;YAAE,OAAO,YAAY,CAAC;QAC3C,iEAAiE;QACjE,OAAO,QAAQ,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC;IACvD,CAAC;IAED,aAAa;IACb,IAAI,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC;QAAE,OAAO,UAAU,CAAC;IAC/C,IAAI,eAAe,CAAC,IAAI,CAAC,QAAQ,CAAC;QAAE,OAAO,cAAc,CAAC;IAC1D,OAAO,oBAAoB,CAAC,IAAI,CAAC,IAAI,MAAM,CAAC;AAC9C,CAAC;AAED,mFAAmF;AACnF,SAAS,wBAAwB,CAAC,IAAiB;IACjD,MAAM,OAAO,GAAuB,EAAE,CAAC;IACvC,KAAK,MAAM,UAAU,IAAI,IAAI,CAAC,QAAQ,CAAC,iBAAiB,CAAC,kBAAkB,CAAC,EAAE,CAAC;QAC7E,KAAK,MAAM,EAAE,IAAI,UAAU,CAAC,iBAAiB,CAAC,sBAAsB,CAAC,EAAE,CAAC;YACtE,MAAM,IAAI,GAAG,CAAC,EAAE,CAAC,iBAAiB,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC;YACtE,IAAI,IAAI,KAAK,oBAAoB;gBAAE,OAAO,CAAC,qBAAqB,GAAG,IAAI,CAAC;YACxE,IAAI,IAAI,KAAK,gBAAgB;gBAAE,OAAO,CAAC,iBAAiB,GAAG,IAAI,CAAC;QAClE,CAAC;QACD,KAAK,MAAM,IAAI,IAAI,UAAU,CAAC,iBAAiB,CAAC,qBAAqB,CAAC,EAAE,CAAC;YACvE,MAAM,IAAI,GAAG,CAAC,IAAI,CAAC,iBAAiB,CAAC,MAAM,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC;YAC1E,IAAI,IAAI,KAAK,oBAAoB;gBAAE,OAAO,CAAC,qBAAqB,GAAG,IAAI,CAAC;YACxE,IAAI,IAAI,KAAK,gBAAgB;gBAAE,OAAO,CAAC,iBAAiB,GAAG,IAAI,CAAC;QAClE,CAAC;IACH,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,oFAAoF;AACpF,SAAS,oBAAoB,CAAC,IAAiB;IAC7C,KAAK,MAAM,UAAU,IAAI,IAAI,CAAC,QAAQ,CAAC,iBAAiB,CAAC,kBAAkB,CAAC,EAAE,CAAC;QAC7E,KAAK,MAAM,IAAI,IAAI,UAAU,CAAC,iBAAiB,CAAC,qBAAqB,CAAC,EAAE,CAAC;YACvE,MAAM,IAAI,GAAG,CAAC,IAAI,CAAC,iBAAiB,CAAC,MAAM,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC;YAC1E,IAAI,IAAI,KAAK,UAAU;gBAAE,OAAO,IAAI,CAAC;QACvC,CAAC;QACD,KAAK,MAAM,EAAE,IAAI,UAAU,CAAC,iBAAiB,CAAC,sBAAsB,CAAC,EAAE,CAAC;YACtE,MAAM,IAAI,GAAG,CAAC,EAAE,CAAC,iBAAiB,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC;YACtE,IAAI,IAAI,KAAK,kBAAkB;gBAAE,OAAO,IAAI,CAAC;QAC/C,CAAC;IACH,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,2EAA2E;AAC3E,SAAS,kBAAkB,CAAC,IAAiB;IAC3C,MAAM,OAAO,GAAG,IAAI,GAAG,EAAU,CAAC;IAClC,KAAK,MAAM,UAAU,IAAI,IAAI,CAAC,QAAQ,CAAC,iBAAiB,CAAC,kBAAkB,CAAC,EAAE,CAAC;QAC7E,KAAK,MAAM,EAAE,IAAI,UAAU,CAAC,iBAAiB,CAAC,sBAAsB,CAAC,EAAE,CAAC;YACtE,MAAM,IAAI,GAAG,CAAC,EAAE,CAAC,iBAAiB,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC;YACtE,IAAI,IAAI,IAAI,YAAY,CAAC,GAAG,CAAC,IAAI,CAAC;gBAAE,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACxD,CAAC;QACD,KAAK,MAAM,IAAI,IAAI,UAAU,CAAC,iBAAiB,CAAC,qBAAqB,CAAC,EAAE,CAAC;YACvE,MAAM,IAAI,GAAG,CAAC,IAAI,CAAC,iBAAiB,CAAC,MAAM,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC;YAC1E,IAAI,IAAI,IAAI,YAAY,CAAC,GAAG,CAAC,IAAI,CAAC;gBAAE,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACxD,CAAC;IACH,CAAC;IACD,OAAO,CAAC,GAAG,OAAO,CAAC,CAAC;AACtB,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,QAAgB,EAChB,QAAgB,EAChB,MAAuB;IAEvB,MAAM,OAAO,GAAG,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;IAC7C,MAAM,IAAI,GAAG,eAAe,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IAC9C,MAAM,QAAQ,GAAG,aAAa,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IAEhD,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IAChD,MAAM,IAAI,GAAG,MAAM,SAAS,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IAE/C,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,OAAO;YACL,QAAQ;YACR,SAAS,EAAE,OAAO;YAClB,MAAM;YACN,IAAI;YACJ,SAAS,EAAE,SAAS;YACpB,MAAM,EAAE,EAAE,0BAA0B,EAAE,KAAK,EAAE;YAC7C,YAAY,EAAE,KAAK;YACnB,YAAY,EAAE,EAAE;YAChB,kBAAkB,EAAE,KAAK;YACzB,mBAAmB,EAAE,KAAK;SAC3B,CAAC;IACJ,CAAC;IAED,MAAM,MAAM,GAAG,sBAAsB,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IACpD,MAAM,YAAY,GAAG,oBAAoB,CAAC,IAAI,CAAC,CAAC;IAEhD,IAAI,OAA6B,CAAC;IAClC,IAAI,IAAI,KAAK,OAAO,EAAE,CAAC;QACrB,OAAO,GAAG,kBAAkB,CAAC,IAAI,CAAC,CAAC;IACrC,CAAC;IAED,MAAM,YAAY,GAAG,MAAM,KAAK,OAAO,CAAC,CAAC,CAAC,wBAAwB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IACrF,IAAI,SAAS,GAAG,iBAAiB,CAAC,MAAM,EAAE,MAAM,EAAE,YAAY,CAAC,CAAC;IAEhE,wEAAwE;IACxE,4EAA4E;IAC5E,IAAI,gBAAoC,CAAC;IACzC,IAAI,MAAM,KAAK,KAAK,EAAE,CAAC;QACrB,IAAI,SAAS,KAAK,KAAK,EAAE,CAAC;YACxB,6BAA6B;YAC7B,IAAI,MAAM,CAAC,OAAO,KAAK,eAAe,EAAE,CAAC;gBACvC,gBAAgB,GAAG,uCAAuC,CAAC;YAC7D,CAAC;iBAAM,CAAC;gBACN,MAAM,OAAO,GAAG,iBAAiB,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;gBAChD,MAAM,OAAO,GAAG,OAAO,CAAC,IAAI,CAC1B,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,OAAO,IAAI,CAAC,CAAC,WAAW,KAAK,UAAU,CAC5D,CAAC;gBACF,IAAI,OAAO,EAAE,CAAC;oBACZ,gBAAgB,GAAG,uCAAuC,OAAO,CAAC,IAAI,EAAE,CAAC;gBAC3E,CAAC;qBAAM,CAAC;oBACN,MAAM,WAAW,GAAG,OAAO,CAAC,IAAI,CAC9B,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,SAAS,IAAI,CAAC,CAAC,MAAM,KAAK,SAAS,CACxD,CAAC;oBACF,IAAI,WAAW,EAAE,CAAC;wBAChB,gBAAgB,GAAG,GAAG,WAAW,CAAC,MAAM,qBAAqB,WAAW,CAAC,IAAI,EAAE,CAAC;oBAClF,CAAC;yBAAM,CAAC;wBACN,gBAAgB,GAAG,qBAAqB,CAAC;oBAC3C,CAAC;gBACH,CAAC;YACH,CAAC;QACH,CAAC;aAAM,IAAI,SAAS,KAAK,QAAQ,EAAE,CAAC;YAClC,yEAAyE;YACzE,MAAM,OAAO,GAAG,iBAAiB,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;YAChD,MAAM,OAAO,GAAG,OAAO,CAAC,IAAI,CAC1B,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,OAAO,IAAI,CAAC,CAAC,WAAW,KAAK,UAAU,CAC5D,CAAC;YACF,IAAI,OAAO,EAAE,CAAC;gBACZ,SAAS,GAAG,KAAK,CAAC;gBAClB,gBAAgB,GAAG,uCAAuC,OAAO,CAAC,IAAI,EAAE,CAAC;YAC3E,CAAC;iBAAM,CAAC;gBACN,MAAM,WAAW,GAAG,OAAO,CAAC,IAAI,CAC9B,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,SAAS,IAAI,CAAC,CAAC,MAAM,KAAK,SAAS,CACxD,CAAC;gBACF,IAAI,WAAW,EAAE,CAAC;oBAChB,SAAS,GAAG,KAAK,CAAC;oBAClB,gBAAgB,GAAG,GAAG,WAAW,CAAC,MAAM,qBAAqB,WAAW,CAAC,IAAI,EAAE,CAAC;gBAClF,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;IAED,MAAM,SAAS,GAAG,MAAM,aAAa,CAAC,QAAQ,CAAC,CAAC;IAChD,MAAM,mBAAmB,GAAG,SAAS,KAAK,YAAY,CAAC;IAEvD,MAAM,YAAY,GAAG,MAAM,KAAK,KAAK;QACnC,CAAC,CAAC,MAAM,kBAAkB,CAAC,OAAO,EAAE,QAAQ,CAAC;QAC7C,CAAC,CAAC,EAAE,CAAC;IAEP,MAAM,KAAK,GAAqB;QAC9B,QAAQ;QACR,SAAS,EAAE,OAAO;QAClB,MAAM;QACN,IAAI;QACJ,SAAS;QACT,MAAM;QACN,YAAY;QACZ,YAAY;QACZ,kBAAkB,EAAE,KAAK,EAAE,sCAAsC;QACjE,mBAAmB;KACpB,CAAC;IACF,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;QAC1B,KAAK,CAAC,OAAO,GAAG,OAAO,CAAC;IAC1B,CAAC;IACD,IAAI,gBAAgB,KAAK,SAAS,EAAE,CAAC;QACnC,KAAK,CAAC,gBAAgB,GAAG,gBAAgB,CAAC;IAC5C,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC"}

package/dist/tools/nextjs-route-tools.d.ts

@@ -0,0 +1,36 @@
+/**
+ * Next.js route map: enumerate all route files (App Router + Pages Router),
+ * classify rendering strategy from route segment config, and detect hybrid
+ * conflicts where the same URL is served by both routers.
+ *
+ * This file is the orchestrator. AST reader helpers (`readRouteSegmentConfig`,
+ * `classifyRendering`, `parseRouteFile`) live in `nextjs-route-readers.ts` and
+ * are re-exported from here for backward compatibility.
+ */
+import type { NextjsRouteEntry, NextjsRouteConflict } from "./nextjs-route-readers.js";
+export { readRouteSegmentConfig, classifyRendering, parseRouteFile, } from "./nextjs-route-readers.js";
+export type { RenderingStrategy, RouteEntryType, RouteSegmentConfig, NextjsRouteEntry, NextjsRouteConflict, PagesRouterSignals, } from "./nextjs-route-readers.js";
+export interface NextjsRouteMapResult {
+    routes: NextjsRouteEntry[];
+    conflicts: NextjsRouteConflict[];
+    middleware: {
+        file: string;
+        matchers: string[];
+    } | null;
+    workspaces_scanned: string[];
+    scan_errors: string[];
+    truncated: boolean;
+    truncated_at?: number;
+}
+export interface NextjsRouteMapOptions {
+    workspace?: string | undefined;
+    router?: "app" | "pages" | "both" | undefined;
+    include_metadata?: boolean | undefined;
+    max_routes?: number | undefined;
+}
+/**
+ * Enumerate all Next.js routes (App + Pages Router) with rendering strategy
+ * classification and hybrid conflict detection.
+ */
+export declare function nextjsRouteMap(repo: string, options?: NextjsRouteMapOptions): Promise<NextjsRouteMapResult>;
+//# sourceMappingURL=nextjs-route-tools.d.ts.map

package/dist/tools/nextjs-route-tools.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"nextjs-route-tools.d.ts","sourceRoot":"","sources":["../../src/tools/nextjs-route-tools.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAOH,OAAO,KAAK,EAAE,gBAAgB,EAAE,mBAAmB,EAAE,MAAM,2BAA2B,CAAC;AAGvF,OAAO,EACL,sBAAsB,EACtB,iBAAiB,EACjB,cAAc,GACf,MAAM,2BAA2B,CAAC;AACnC,YAAY,EACV,iBAAiB,EACjB,cAAc,EACd,kBAAkB,EAClB,gBAAgB,EAChB,mBAAmB,EACnB,kBAAkB,GACnB,MAAM,2BAA2B,CAAC;AAMnC,MAAM,WAAW,oBAAoB;IACnC,MAAM,EAAE,gBAAgB,EAAE,CAAC;IAC3B,SAAS,EAAE,mBAAmB,EAAE,CAAC;IACjC,UAAU,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,EAAE,CAAA;KAAE,GAAG,IAAI,CAAC;IACxD,kBAAkB,EAAE,MAAM,EAAE,CAAC;IAC7B,WAAW,EAAE,MAAM,EAAE,CAAC;IACtB,SAAS,EAAE,OAAO,CAAC;IACnB,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAED,MAAM,WAAW,qBAAqB;IACpC,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC/B,MAAM,CAAC,EAAE,KAAK,GAAG,OAAO,GAAG,MAAM,GAAG,SAAS,CAAC;IAC9C,gBAAgB,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;IACvC,UAAU,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CACjC;AAgBD;;;GAGG;AACH,wBAAsB,cAAc,CAClC,IAAI,EAAE,MAAM,EACZ,OAAO,CAAC,EAAE,qBAAqB,GAC9B,OAAO,CAAC,oBAAoB,CAAC,CAoJ/B"}

package/dist/tools/nextjs-route-tools.js

@@ -0,0 +1,175 @@
+/**
+ * Next.js route map: enumerate all route files (App Router + Pages Router),
+ * classify rendering strategy from route segment config, and detect hybrid
+ * conflicts where the same URL is served by both routers.
+ *
+ * This file is the orchestrator. AST reader helpers (`readRouteSegmentConfig`,
+ * `classifyRendering`, `parseRouteFile`) live in `nextjs-route-readers.ts` and
+ * are re-exported from here for backward compatibility.
+ */
+import { relative, join } from "node:path";
+import { discoverWorkspaces, traceMiddleware } from "../utils/nextjs.js";
+import { cachedWalkDirectory as walkDirectory } from "../utils/nextjs-audit-cache.js";
+import { getCodeIndex } from "./index-tools.js";
+import { parseRouteFile } from "./nextjs-route-readers.js";
+// Re-export reader APIs so existing consumers continue to import from this file.
+export { readRouteSegmentConfig, classifyRendering, parseRouteFile, } from "./nextjs-route-readers.js";
+// ---------------------------------------------------------------------------
+// Orchestrator
+// ---------------------------------------------------------------------------
+const APP_CONVENTION_RE = /^(page|layout|loading|error|not-found|global-error|default|template|route)\.[jt]sx?$/;
+const ROUTE_EXTS = new Set([".tsx", ".jsx", ".ts", ".js"]);
+const DEFAULT_MAX_ROUTES = 1000;
+const ROUTE_PARSE_CONCURRENCY = 10;
+/** Whether a file in `app/` is a canonical convention route file. */
+function isAppConventionFile(name) {
+    return APP_CONVENTION_RE.test(name);
+}
+/**
+ * Enumerate all Next.js routes (App + Pages Router) with rendering strategy
+ * classification and hybrid conflict detection.
+ */
+export async function nextjsRouteMap(repo, options) {
+    if (process.env.CODESIFT_DISABLE_TOOLS?.includes("nextjs_route_map")) {
+        throw new Error("nextjs_route_map is disabled via CODESIFT_DISABLE_TOOLS");
+    }
+    const index = await getCodeIndex(repo);
+    if (!index) {
+        throw new Error(`Repository not found: ${repo}. Run index_folder first.`);
+    }
+    const projectRoot = index.root;
+    // Resolve workspaces
+    let workspaceRoots;
+    if (options?.workspace) {
+        workspaceRoots = [join(projectRoot, options.workspace)];
+    }
+    else {
+        const discovered = await discoverWorkspaces(projectRoot);
+        workspaceRoots = discovered.length > 0
+            ? discovered.map((w) => w.root)
+            : [projectRoot];
+    }
+    const routerFilter = options?.router ?? "both";
+    const maxRoutes = options?.max_routes ?? DEFAULT_MAX_ROUTES;
+    const routes = [];
+    const scan_errors = [];
+    const workspaces_scanned = [];
+    let truncated = false;
+    let truncated_at;
+    // Middleware: use the first workspace's middleware.ts (single-app case).
+    // traceMiddleware accepts a URL path for matching — we pass "/" as a probe
+    // so we can still return the file + matchers fields.
+    let middleware = null;
+    for (const wsRoot of workspaceRoots) {
+        workspaces_scanned.push(wsRoot);
+        // Collect candidate files
+        const appCandidates = [];
+        const pagesCandidates = [];
+        if (routerFilter === "app" || routerFilter === "both") {
+            for (const appDir of ["app", "src/app"]) {
+                try {
+                    const walked = await walkDirectory(join(wsRoot, appDir), {
+                        followSymlinks: true,
+                        fileFilter: (ext, name) => {
+                            if (!ROUTE_EXTS.has(ext))
+                                return false;
+                            return name ? isAppConventionFile(name) : false;
+                        },
+                    });
+                    appCandidates.push(...walked);
+                }
+                catch (err) {
+                    scan_errors.push(`${appDir}: ${err instanceof Error ? err.message : String(err)}`);
+                }
+            }
+        }
+        if (routerFilter === "pages" || routerFilter === "both") {
+            for (const pagesDir of ["pages", "src/pages"]) {
+                try {
+                    const walked = await walkDirectory(join(wsRoot, pagesDir), {
+                        followSymlinks: true,
+                        fileFilter: (ext) => ROUTE_EXTS.has(ext),
+                    });
+                    pagesCandidates.push(...walked);
+                }
+                catch (err) {
+                    scan_errors.push(`${pagesDir}: ${err instanceof Error ? err.message : String(err)}`);
+                }
+            }
+        }
+        const wsMiddleware = await traceMiddleware(wsRoot, "/").catch(() => null);
+        if (wsMiddleware && !middleware) {
+            middleware = { file: wsMiddleware.file, matchers: wsMiddleware.matchers };
+        }
+        // Process each router's candidates. Apply the global max_routes cap.
+        const workspaceFiles = [
+            ...appCandidates.map((p) => ({ path: p, router: "app" })),
+            ...pagesCandidates.map((p) => ({ path: p, router: "pages" })),
+        ];
+        for (let i = 0; i < workspaceFiles.length; i += ROUTE_PARSE_CONCURRENCY) {
+            if (routes.length >= maxRoutes) {
+                truncated = true;
+                truncated_at = maxRoutes;
+                break;
+            }
+            const chunk = workspaceFiles.slice(i, i + ROUTE_PARSE_CONCURRENCY);
+            const entries = await Promise.all(chunk.map(async ({ path, router }) => {
+                try {
+                    // Parse relative to workspace root so deriveUrlPath sees `app/…`
+                    const entry = await parseRouteFile(path, wsRoot, router);
+                    // Re-anchor file_path to the repo root for display
+                    entry.file_path = relative(projectRoot, path);
+                    // Fill middleware_applies per route
+                    if (wsMiddleware) {
+                        const perRoute = await traceMiddleware(wsRoot, entry.url_path).catch(() => null);
+                        entry.middleware_applies = perRoute?.applies ?? false;
+                    }
+                    return entry;
+                }
+                catch (err) {
+                    const rel = relative(projectRoot, path);
+                    scan_errors.push(`${rel}: ${err instanceof Error ? err.message : String(err)}`);
+                    return null;
+                }
+            }));
+            for (const entry of entries) {
+                if (entry === null)
+                    continue;
+                if (routes.length >= maxRoutes) {
+                    truncated = true;
+                    truncated_at = maxRoutes;
+                    break;
+                }
+                routes.push(entry);
+            }
+        }
+    }
+    // Detect hybrid conflicts: same url_path appears in both routers
+    const byPath = new Map();
+    for (const route of routes) {
+        const bucket = byPath.get(route.url_path) ?? {};
+        if (route.router === "app" && !bucket.app)
+            bucket.app = route.file_path;
+        if (route.router === "pages" && !bucket.pages)
+            bucket.pages = route.file_path;
+        byPath.set(route.url_path, bucket);
+    }
+    const conflicts = [];
+    for (const [url_path, bucket] of byPath.entries()) {
+        if (bucket.app && bucket.pages) {
+            conflicts.push({ url_path, app: bucket.app, pages: bucket.pages });
+        }
+    }
+    const result = {
+        routes,
+        conflicts,
+        middleware,
+        workspaces_scanned,
+        scan_errors,
+        truncated,
+    };
+    if (truncated_at !== undefined)
+        result.truncated_at = truncated_at;
+    return result;
+}
+//# sourceMappingURL=nextjs-route-tools.js.map

package/dist/tools/nextjs-route-tools.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"nextjs-route-tools.js","sourceRoot":"","sources":["../../src/tools/nextjs-route-tools.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAC3C,OAAO,EAAE,kBAAkB,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AACzE,OAAO,EAAE,mBAAmB,IAAI,aAAa,EAAE,MAAM,gCAAgC,CAAC;AACtF,OAAO,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAC;AAChD,OAAO,EAAE,cAAc,EAAE,MAAM,2BAA2B,CAAC;AAG3D,iFAAiF;AACjF,OAAO,EACL,sBAAsB,EACtB,iBAAiB,EACjB,cAAc,GACf,MAAM,2BAA2B,CAAC;AA+BnC,8EAA8E;AAC9E,eAAe;AACf,8EAA8E;AAE9E,MAAM,iBAAiB,GAAG,sFAAsF,CAAC;AACjH,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC;AAC3D,MAAM,kBAAkB,GAAG,IAAI,CAAC;AAChC,MAAM,uBAAuB,GAAG,EAAE,CAAC;AAEnC,qEAAqE;AACrE,SAAS,mBAAmB,CAAC,IAAY;IACvC,OAAO,iBAAiB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACtC,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,IAAY,EACZ,OAA+B;IAE/B,IAAI,OAAO,CAAC,GAAG,CAAC,sBAAsB,EAAE,QAAQ,CAAC,kBAAkB,CAAC,EAAE,CAAC;QACrE,MAAM,IAAI,KAAK,CAAC,yDAAyD,CAAC,CAAC;IAC7E,CAAC;IAED,MAAM,KAAK,GAAG,MAAM,YAAY,CAAC,IAAI,CAAC,CAAC;IACvC,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,MAAM,IAAI,KAAK,CAAC,yBAAyB,IAAI,2BAA2B,CAAC,CAAC;IAC5E,CAAC;IACD,MAAM,WAAW,GAAG,KAAK,CAAC,IAAI,CAAC;IAE/B,qBAAqB;IACrB,IAAI,cAAwB,CAAC;IAC7B,IAAI,OAAO,EAAE,SAAS,EAAE,CAAC;QACvB,cAAc,GAAG,CAAC,IAAI,CAAC,WAAW,EAAE,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC;IAC1D,CAAC;SAAM,CAAC;QACN,MAAM,UAAU,GAAG,MAAM,kBAAkB,CAAC,WAAW,CAAC,CAAC;QACzD,cAAc,GAAG,UAAU,CAAC,MAAM,GAAG,CAAC;YACpC,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;YAC/B,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC;IACpB,CAAC;IAED,MAAM,YAAY,GAAG,OAAO,EAAE,MAAM,IAAI,MAAM,CAAC;IAC/C,MAAM,SAAS,GAAG,OAAO,EAAE,UAAU,IAAI,kBAAkB,CAAC;IAC5D,MAAM,MAAM,GAAuB,EAAE,CAAC;IACtC,MAAM,WAAW,GAAa,EAAE,CAAC;IACjC,MAAM,kBAAkB,GAAa,EAAE,CAAC;IACxC,IAAI,SAAS,GAAG,KAAK,CAAC;IACtB,IAAI,YAAgC,CAAC;IAErC,yEAAyE;IACzE,2EAA2E;IAC3E,qDAAqD;IACrD,IAAI,UAAU,GAAuC,IAAI,CAAC;IAE1D,KAAK,MAAM,MAAM,IAAI,cAAc,EAAE,CAAC;QACpC,kBAAkB,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAEhC,0BAA0B;QAC1B,MAAM,aAAa,GAAa,EAAE,CAAC;QACnC,MAAM,eAAe,GAAa,EAAE,CAAC;QAErC,IAAI,YAAY,KAAK,KAAK,IAAI,YAAY,KAAK,MAAM,EAAE,CAAC;YACtD,KAAK,MAAM,MAAM,IAAI,CAAC,KAAK,EAAE,SAAS,CAAC,EAAE,CAAC;gBACxC,IAAI,CAAC;oBACH,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC,IAAI,CAAC,MAAM,EAAE,MAAM,CAAC,EAAE;wBACvD,cAAc,EAAE,IAAI;wBACpB,UAAU,EAAE,CAAC,GAAG,EAAE,IAAI,EAAE,EAAE;4BACxB,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC;gCAAE,OAAO,KAAK,CAAC;4BACvC,OAAO,IAAI,CAAC,CAAC,CAAC,mBAAmB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;wBAClD,CAAC;qBACF,CAAC,CAAC;oBACH,aAAa,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,CAAC;gBAChC,CAAC;gBAAC,OAAO,GAAG,EAAE,CAAC;oBACb,WAAW,CAAC,IAAI,CAAC,GAAG,MAAM,KAAK,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;gBACrF,CAAC;YACH,CAAC;QACH,CAAC;QAED,IAAI,YAAY,KAAK,OAAO,IAAI,YAAY,KAAK,MAAM,EAAE,CAAC;YACxD,KAAK,MAAM,QAAQ,IAAI,CAAC,OAAO,EAAE,WAAW,CAAC,EAAE,CAAC;gBAC9C,IAAI,CAAC;oBACH,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC,IAAI,CAAC,MAAM,EAAE,QAAQ,CAAC,EAAE;wBACzD,cAAc,EAAE,IAAI;wBACpB,UAAU,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC;qBACzC,CAAC,CAAC;oBACH,eAAe,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,CAAC;gBAClC,CAAC;gBAAC,OAAO,GAAG,EAAE,CAAC;oBACb,WAAW,CAAC,IAAI,CAAC,GAAG,QAAQ,KAAK,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;gBACvF,CAAC;YACH,CAAC;QACH,CAAC;QAED,MAAM,YAAY,GAAG,MAAM,eAAe,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;QAC1E,IAAI,YAAY,IAAI,CAAC,UAAU,EAAE,CAAC;YAChC,UAAU,GAAG,EAAE,IAAI,EAAE,YAAY,CAAC,IAAI,EAAE,QAAQ,EAAE,YAAY,CAAC,QAAQ,EAAE,CAAC;QAC5E,CAAC;QAED,qEAAqE;QACrE,MAAM,cAAc,GAAqD;YACvE,GAAG,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,MAAM,EAAE,KAAc,EAAE,CAAC,CAAC;YAClE,GAAG,eAAe,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,MAAM,EAAE,OAAgB,EAAE,CAAC,CAAC;SACvE,CAAC;QAEF,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,cAAc,CAAC,MAAM,EAAE,CAAC,IAAI,uBAAuB,EAAE,CAAC;YACxE,IAAI,MAAM,CAAC,MAAM,IAAI,SAAS,EAAE,CAAC;gBAC/B,SAAS,GAAG,IAAI,CAAC;gBACjB,YAAY,GAAG,SAAS,CAAC;gBACzB,MAAM;YACR,CAAC;YACD,MAAM,KAAK,GAAG,cAAc,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,GAAG,uBAAuB,CAAC,CAAC;YACnE,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,GAAG,CAC/B,KAAK,CAAC,GAAG,CAAC,KAAK,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE;gBACnC,IAAI,CAAC;oBACH,iEAAiE;oBACjE,MAAM,KAAK,GAAG,MAAM,cAAc,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;oBACzD,mDAAmD;oBACnD,KAAK,CAAC,SAAS,GAAG,QAAQ,CAAC,WAAW,EAAE,IAAI,CAAC,CAAC;oBAC9C,oCAAoC;oBACpC,IAAI,YAAY,EAAE,CAAC;wBACjB,MAAM,QAAQ,GAAG,MAAM,eAAe,CAAC,MAAM,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;wBACjF,KAAK,CAAC,kBAAkB,GAAG,QAAQ,EAAE,OAAO,IAAI,KAAK,CAAC;oBACxD,CAAC;oBACD,OAAO,KAAK,CAAC;gBACf,CAAC;gBAAC,OAAO,GAAG,EAAE,CAAC;oBACb,MAAM,GAAG,GAAG,QAAQ,CAAC,WAAW,EAAE,IAAI,CAAC,CAAC;oBACxC,WAAW,CAAC,IAAI,CAAC,GAAG,GAAG,KAAK,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;oBAChF,OAAO,IAAI,CAAC;gBACd,CAAC;YACH,CAAC,CAAC,CACH,CAAC;YACF,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;gBAC5B,IAAI,KAAK,KAAK,IAAI;oBAAE,SAAS;gBAC7B,IAAI,MAAM,CAAC,MAAM,IAAI,SAAS,EAAE,CAAC;oBAC/B,SAAS,GAAG,IAAI,CAAC;oBACjB,YAAY,GAAG,SAAS,CAAC;oBACzB,MAAM;gBACR,CAAC;gBACD,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACrB,CAAC;QACH,CAAC;IACH,CAAC;IAED,iEAAiE;IACjE,MAAM,MAAM,GAAG,IAAI,GAAG,EAA4C,CAAC;IACnE,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,MAAM,MAAM,GAAG,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC;QAChD,IAAI,KAAK,CAAC,MAAM,KAAK,KAAK,IAAI,CAAC,MAAM,CAAC,GAAG;YAAE,MAAM,CAAC,GAAG,GAAG,KAAK,CAAC,SAAS,CAAC;QACxE,IAAI,KAAK,CAAC,MAAM,KAAK,OAAO,IAAI,CAAC,MAAM,CAAC,KAAK;YAAE,MAAM,CAAC,KAAK,GAAG,KAAK,CAAC,SAAS,CAAC;QAC9E,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IACrC,CAAC;IACD,MAAM,SAAS,GAA0B,EAAE,CAAC;IAC5C,KAAK,MAAM,CAAC,QAAQ,EAAE,MAAM,CAAC,IAAI,MAAM,CAAC,OAAO,EAAE,EAAE,CAAC;QAClD,IAAI,MAAM,CAAC,GAAG,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;YAC/B,SAAS,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,GAAG,EAAE,MAAM,CAAC,GAAG,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC;QACrE,CAAC;IACH,CAAC;IAED,MAAM,MAAM,GAAyB;QACnC,MAAM;QACN,SAAS;QACT,UAAU;QACV,kBAAkB;QAClB,WAAW;QACX,SAAS;KACV,CAAC;IACF,IAAI,YAAY,KAAK,SAAS;QAAE,MAAM,CAAC,YAAY,GAAG,YAAY,CAAC;IACnE,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/tools/nextjs-security-readers.d.ts

@@ -0,0 +1,22 @@
+/**
+ * AST readers for Next.js Server Actions security audit (T2).
+ *
+ * Each reader is a focused, pure function that extracts a specific signal
+ * from a parsed tree-sitter Tree. The orchestrator in `nextjs-security-tools.ts`
+ * composes them into a per-action audit.
+ */
+import type Parser from "web-tree-sitter";
+import type { AuthGuardInfo, InputValidationInfo, RateLimitingInfo } from "./nextjs-security-tools.js";
+export interface ServerActionFn {
+    name: string;
+    file: string;
+    line: number;
+    isAsync: boolean;
+    bodyNode: Parser.SyntaxNode | null;
+    fnNode: Parser.SyntaxNode;
+}
+export declare function extractServerActionFunctions(tree: Parser.Tree, _source: string, file: string): ServerActionFn[];
+export declare function detectAuthGuard(fn: ServerActionFn): AuthGuardInfo;
+export declare function detectInputValidation(fn: ServerActionFn, tree: Parser.Tree, source: string): InputValidationInfo;
+export declare function detectRateLimiting(fn: ServerActionFn, _tree: Parser.Tree, _source: string): RateLimitingInfo;
+//# sourceMappingURL=nextjs-security-readers.d.ts.map

package/dist/tools/nextjs-security-readers.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"nextjs-security-readers.d.ts","sourceRoot":"","sources":["../../src/tools/nextjs-security-readers.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,KAAK,MAAM,MAAM,iBAAiB,CAAC;AAE1C,OAAO,KAAK,EACV,aAAa,EACb,mBAAmB,EACnB,gBAAgB,EACjB,MAAM,4BAA4B,CAAC;AA+BpC,MAAM,WAAW,cAAc;IAC7B,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,OAAO,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC,UAAU,GAAG,IAAI,CAAC;IACnC,MAAM,EAAE,MAAM,CAAC,UAAU,CAAC;CAC3B;AAED,wBAAgB,4BAA4B,CAC1C,IAAI,EAAE,MAAM,CAAC,IAAI,EACjB,OAAO,EAAE,MAAM,EACf,IAAI,EAAE,MAAM,GACX,cAAc,EAAE,CAwGlB;AAmBD,wBAAgB,eAAe,CAAC,EAAE,EAAE,cAAc,GAAG,aAAa,CAiGjE;AAMD,wBAAgB,qBAAqB,CACnC,EAAE,EAAE,cAAc,EAClB,IAAI,EAAE,MAAM,CAAC,IAAI,EACjB,MAAM,EAAE,MAAM,GACb,mBAAmB,CAiCrB;AAcD,wBAAgB,kBAAkB,CAChC,EAAE,EAAE,cAAc,EAClB,KAAK,EAAE,MAAM,CAAC,IAAI,EAClB,OAAO,EAAE,MAAM,GACd,gBAAgB,CAWlB"}