codesift-mcp 0.9.5 → 0.10.0

package/dist/tools/astro-actions/ast.js

@@ -0,0 +1,75 @@
+const MAX_AST_DEPTH = 400;
+export function stripActionQuotes(value) {
+    return (value[0] === '"' || value[0] === "'") && value[value.length - 1] === value[0]
+        ? value.slice(1, -1)
+        : value;
+}
+export function getActionProperty(objectNode, name) {
+    for (const pair of objectNode.namedChildren) {
+        if (pair.type !== "pair")
+            continue;
+        const key = pair.childForFieldName("key");
+        if (key && stripActionQuotes(key.text) === name) {
+            return pair.childForFieldName("value") ?? null;
+        }
+    }
+    return null;
+}
+/** Walk every descendant of a node, with a defensive depth cap. */
+export function walkAll(node, visit, depth = 0) {
+    if (depth > MAX_AST_DEPTH)
+        return;
+    visit(node);
+    for (const child of node.namedChildren)
+        walkAll(child, visit, depth + 1);
+}
+/** Return the receiver of a member-call expression. */
+export function receiverOfCall(call) {
+    const callable = call.childForFieldName("function");
+    if (!callable || callable.type !== "member_expression")
+        return null;
+    return callable.childForFieldName("object");
+}
+/** Return the method name of a member-call expression. */
+export function methodName(call) {
+    const callable = call.childForFieldName("function");
+    if (!callable || callable.type !== "member_expression")
+        return null;
+    return callable.childForFieldName("property")?.text ?? null;
+}
+/** Resolve a chained Zod expression to its underlying z.object call. */
+export function unwrapZodChain(node) {
+    let current = node;
+    while (current?.type === "call_expression") {
+        const name = methodName(current);
+        if (name === "object")
+            return current;
+        if (name === null)
+            return null;
+        current = receiverOfCall(current);
+    }
+    return null;
+}
+function isFunctionBoundary(node) {
+    return node.type === "function_declaration"
+        || node.type === "function_expression"
+        || node.type === "arrow_function"
+        || node.type === "method_definition";
+}
+function containsOwnedReturn(node, root) {
+    if (node.type === "return_statement")
+        return true;
+    if (node !== root && isFunctionBoundary(node))
+        return false;
+    return node.namedChildren.some((child) => containsOwnedReturn(child, root));
+}
+/** Detect a return owned by the handler rather than a nested callback. */
+export function handlerHasTopLevelReturn(handler) {
+    const body = handler.childForFieldName("body");
+    if (!body)
+        return false;
+    if (body.type !== "statement_block")
+        return true;
+    return containsOwnedReturn(body, body);
+}
+//# sourceMappingURL=ast.js.map

package/dist/tools/astro-actions/ast.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ast.js","sourceRoot":"","sources":["../../../src/tools/astro-actions/ast.ts"],"names":[],"mappings":"AAEA,MAAM,aAAa,GAAG,GAAG,CAAC;AAE1B,MAAM,UAAU,iBAAiB,CAAC,KAAa;IAC7C,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,GAAG,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,IAAI,KAAK,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,KAAK,KAAK,CAAC,CAAC,CAAC;QACnF,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QACpB,CAAC,CAAC,KAAK,CAAC;AACZ,CAAC;AAED,MAAM,UAAU,iBAAiB,CAC/B,UAA6B,EAC7B,IAAY;IAEZ,KAAK,MAAM,IAAI,IAAI,UAAU,CAAC,aAAa,EAAE,CAAC;QAC5C,IAAI,IAAI,CAAC,IAAI,KAAK,MAAM;YAAE,SAAS;QACnC,MAAM,GAAG,GAAG,IAAI,CAAC,iBAAiB,CAAC,KAAK,CAAC,CAAC;QAC1C,IAAI,GAAG,IAAI,iBAAiB,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC;YAChD,OAAO,IAAI,CAAC,iBAAiB,CAAC,OAAO,CAAC,IAAI,IAAI,CAAC;QACjD,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,mEAAmE;AACnE,MAAM,UAAU,OAAO,CACrB,IAAuB,EACvB,KAAwC,EACxC,KAAK,GAAG,CAAC;IAET,IAAI,KAAK,GAAG,aAAa;QAAE,OAAO;IAClC,KAAK,CAAC,IAAI,CAAC,CAAC;IACZ,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,aAAa;QAAE,OAAO,CAAC,KAAK,EAAE,KAAK,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC;AAC3E,CAAC;AAED,uDAAuD;AACvD,MAAM,UAAU,cAAc,CAAC,IAAuB;IACpD,MAAM,QAAQ,GAAG,IAAI,CAAC,iBAAiB,CAAC,UAAU,CAAC,CAAC;IACpD,IAAI,CAAC,QAAQ,IAAI,QAAQ,CAAC,IAAI,KAAK,mBAAmB;QAAE,OAAO,IAAI,CAAC;IACpE,OAAO,QAAQ,CAAC,iBAAiB,CAAC,QAAQ,CAAC,CAAC;AAC9C,CAAC;AAED,0DAA0D;AAC1D,MAAM,UAAU,UAAU,CAAC,IAAuB;IAChD,MAAM,QAAQ,GAAG,IAAI,CAAC,iBAAiB,CAAC,UAAU,CAAC,CAAC;IACpD,IAAI,CAAC,QAAQ,IAAI,QAAQ,CAAC,IAAI,KAAK,mBAAmB;QAAE,OAAO,IAAI,CAAC;IACpE,OAAO,QAAQ,CAAC,iBAAiB,CAAC,UAAU,CAAC,EAAE,IAAI,IAAI,IAAI,CAAC;AAC9D,CAAC;AAED,wEAAwE;AACxE,MAAM,UAAU,cAAc,CAAC,IAAuB;IACpD,IAAI,OAAO,GAA6B,IAAI,CAAC;IAC7C,OAAO,OAAO,EAAE,IAAI,KAAK,iBAAiB,EAAE,CAAC;QAC3C,MAAM,IAAI,GAAG,UAAU,CAAC,OAAO,CAAC,CAAC;QACjC,IAAI,IAAI,KAAK,QAAQ;YAAE,OAAO,OAAO,CAAC;QACtC,IAAI,IAAI,KAAK,IAAI;YAAE,OAAO,IAAI,CAAC;QAC/B,OAAO,GAAG,cAAc,CAAC,OAAO,CAAC,CAAC;IACpC,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,kBAAkB,CAAC,IAAuB;IACjD,OAAO,IAAI,CAAC,IAAI,KAAK,sBAAsB;WACtC,IAAI,CAAC,IAAI,KAAK,qBAAqB;WACnC,IAAI,CAAC,IAAI,KAAK,gBAAgB;WAC9B,IAAI,CAAC,IAAI,KAAK,mBAAmB,CAAC;AACzC,CAAC;AAED,SAAS,mBAAmB,CAAC,IAAuB,EAAE,IAAuB;IAC3E,IAAI,IAAI,CAAC,IAAI,KAAK,kBAAkB;QAAE,OAAO,IAAI,CAAC;IAClD,IAAI,IAAI,KAAK,IAAI,IAAI,kBAAkB,CAAC,IAAI,CAAC;QAAE,OAAO,KAAK,CAAC;IAC5D,OAAO,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,mBAAmB,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC;AAC9E,CAAC;AAED,0EAA0E;AAC1E,MAAM,UAAU,wBAAwB,CAAC,OAA0B;IACjE,MAAM,IAAI,GAAG,OAAO,CAAC,iBAAiB,CAAC,MAAM,CAAC,CAAC;IAC/C,IAAI,CAAC,IAAI;QAAE,OAAO,KAAK,CAAC;IACxB,IAAI,IAAI,CAAC,IAAI,KAAK,iBAAiB;QAAE,OAAO,IAAI,CAAC;IACjD,OAAO,mBAAmB,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;AACzC,CAAC"}

package/dist/tools/astro-actions/audit.d.ts

@@ -0,0 +1,5 @@
+import type { CodeIndex } from "../../types.js";
+import type { ActionsAuditResult, ActionsSeverity } from "./types.js";
+export declare const ALL_ACTION_CODES: ("AA01" | "AA02" | "AA03" | "AA04" | "AA05" | "AA06")[];
+export declare function auditAstroActionsFromIndex(index: CodeIndex, severity?: ActionsSeverity): Promise<ActionsAuditResult>;
+//# sourceMappingURL=audit.d.ts.map

package/dist/tools/astro-actions/audit.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"audit.d.ts","sourceRoot":"","sources":["../../../src/tools/astro-actions/audit.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAC;AAGhD,OAAO,KAAK,EAIV,kBAAkB,EAClB,eAAe,EAGhB,MAAM,YAAY,CAAC;AAGpB,eAAO,MAAM,gBAAgB,yDAAoB,CAAC;AAgHlD,wBAAsB,0BAA0B,CAC9C,KAAK,EAAE,SAAS,EAChB,QAAQ,CAAC,EAAE,eAAe,GACzB,OAAO,CAAC,kBAAkB,CAAC,CA4B7B"}

package/dist/tools/astro-actions/audit.js

@@ -0,0 +1,102 @@
+import { scanActionCallers } from "./callers.js";
+import { parseActionsFile } from "./parser.js";
+import { ACTION_CODES } from "./types.js";
+export const ALL_ACTION_CODES = [...ACTION_CODES];
+const SCORE_D_MIN_ERRORS = 3;
+const SCORE_C_MIN_ERRORS = 1;
+const SCORE_C_MIN_WARNINGS = 6;
+const SCORE_B_MIN_WARNINGS = 3;
+function issue(code, severity, message, file, line, fix, action) {
+    const auditIssue = { code, severity, message, file, line, fix };
+    if (action)
+        auditIssue.action = action;
+    return auditIssue;
+}
+function computeScore(issues) {
+    const errors = issues.filter(({ severity }) => severity === "error").length;
+    const warnings = issues.filter(({ severity }) => severity === "warning").length;
+    if (errors >= SCORE_D_MIN_ERRORS)
+        return "D";
+    if (errors >= SCORE_C_MIN_ERRORS || warnings >= SCORE_C_MIN_WARNINGS)
+        return "C";
+    if (warnings >= SCORE_B_MIN_WARNINGS)
+        return "B";
+    return "A";
+}
+function collectDefinitionIssues(actionsFile, actions) {
+    return actions.flatMap((action) => {
+        const issues = [];
+        if (action.handler_missing_return)
+            issues.push(issue("AA01", "error", `Action "${action.name}" handler never returns a value — callers will receive undefined`, actionsFile, action.line, "Return the handler result explicitly (e.g. `return { ok: true }`)", action.name));
+        if (action.refine_on_top_level)
+            issues.push(issue("AA02", "error", `Action "${action.name}" input uses .refine() on top-level z.object() — Astro issue #11641 makes this silently fail`, actionsFile, action.refine_line ?? action.line, "Move .refine() inside a nested z.object() field, or validate inside the handler", action.name));
+        if (action.has_passthrough)
+            issues.push(issue("AA03", "warning", `Action "${action.name}" uses .passthrough() — Astro strips extra fields regardless (issue #11693)`, actionsFile, action.passthrough_line ?? action.line, "Declare every expected field in the schema explicitly — .passthrough() is ignored by Astro Actions", action.name));
+        return issues;
+    });
+}
+function collectCallerIssues(scan) {
+    return scan.reportableCalls.map((call) => call.is_server_side
+        ? issue("AA05", "warning", `Action "${call.action}" called from .astro frontmatter — prefer Astro.callAction() or a direct import`, call.file, call.line, `Use Astro.callAction(actions.${call.action}, input) in server code`, call.action)
+        : issue("AA06", "error", `Client-side code calls unknown action "${call.action}"`, call.file, call.line, `Define "${call.action}" in src/actions/index.ts or remove the call`, call.action));
+}
+function collectFileIssues(actions, scan) {
+    return actions.flatMap((action) => {
+        if (!action.has_file_field)
+            return [];
+        return (scan.callersByAction.get(action.name) ?? []).flatMap((caller) => {
+            if (caller.formTag === null
+                || /enctype\s*=\s*["']multipart\/form-data["']/i.test(caller.formTag))
+                return [];
+            return [issue("AA04", "error", `Action "${action.name}" expects a File but caller form lacks enctype="multipart/form-data"`, caller.file, caller.line, "Add enctype=\"multipart/form-data\" to the <form> tag, or switch the schema off z.instanceof(File)", action.name)];
+        });
+    });
+}
+function filterIssues(issues, severity) {
+    if (severity === "errors")
+        return issues.filter(({ severity: level }) => level === "error");
+    if (severity === "warnings")
+        return issues.filter(({ severity: level }) => level !== "info");
+    return issues;
+}
+function toDescriptor(action) {
+    const descriptor = {
+        name: action.name,
+        file: action.file,
+        line: action.line,
+        has_input_schema: action.has_input_schema,
+        input_fields: action.input_fields,
+    };
+    if (action.accept !== undefined)
+        descriptor.accept = action.accept;
+    return descriptor;
+}
+export async function auditAstroActionsFromIndex(index, severity) {
+    const parsed = await parseActionsFile(index.root);
+    if (!parsed) {
+        return {
+            actions: [], issues: [], anti_patterns_checked: ALL_ACTION_CODES,
+            summary: { total_actions: 0, total_issues: 0, score: "A" },
+        };
+    }
+    const actionNames = new Set(parsed.actions.map(({ name }) => name));
+    const callerScan = scanActionCallers(index, actionNames);
+    const allIssues = [
+        ...collectDefinitionIssues(parsed.file, parsed.actions),
+        ...collectCallerIssues(callerScan),
+        ...collectFileIssues(parsed.actions, callerScan),
+    ];
+    const issues = filterIssues(allIssues, severity);
+    const actions = parsed.actions.map(toDescriptor);
+    return {
+        actions,
+        issues,
+        anti_patterns_checked: ALL_ACTION_CODES,
+        summary: {
+            total_actions: actions.length,
+            total_issues: issues.length,
+            score: computeScore(issues),
+        },
+    };
+}
+//# sourceMappingURL=audit.js.map

package/dist/tools/astro-actions/audit.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"audit.js","sourceRoot":"","sources":["../../../src/tools/astro-actions/audit.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,iBAAiB,EAAE,MAAM,cAAc,CAAC;AACjD,OAAO,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAU/C,OAAO,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAE1C,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,GAAG,YAAY,CAAC,CAAC;AAElD,MAAM,kBAAkB,GAAG,CAAC,CAAC;AAC7B,MAAM,kBAAkB,GAAG,CAAC,CAAC;AAC7B,MAAM,oBAAoB,GAAG,CAAC,CAAC;AAC/B,MAAM,oBAAoB,GAAG,CAAC,CAAC;AAE/B,SAAS,KAAK,CACZ,IAAgB,EAChB,QAAuC,EACvC,OAAe,EACf,IAAY,EACZ,IAAY,EACZ,GAAW,EACX,MAAe;IAEf,MAAM,UAAU,GAAsB,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC;IACnF,IAAI,MAAM;QAAE,UAAU,CAAC,MAAM,GAAG,MAAM,CAAC;IACvC,OAAO,UAAU,CAAC;AACpB,CAAC;AAED,SAAS,YAAY,CAAC,MAA2B;IAC/C,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,MAAM,CAAC;IAC5E,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,MAAM,CAAC;IAChF,IAAI,MAAM,IAAI,kBAAkB;QAAE,OAAO,GAAG,CAAC;IAC7C,IAAI,MAAM,IAAI,kBAAkB,IAAI,QAAQ,IAAI,oBAAoB;QAAE,OAAO,GAAG,CAAC;IACjF,IAAI,QAAQ,IAAI,oBAAoB;QAAE,OAAO,GAAG,CAAC;IACjD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,uBAAuB,CAC9B,WAAmB,EACnB,OAA0B;IAE1B,OAAO,OAAO,CAAC,OAAO,CAAC,CAAC,MAAM,EAAE,EAAE;QAChC,MAAM,MAAM,GAAwB,EAAE,CAAC;QACvC,IAAI,MAAM,CAAC,sBAAsB;YAAE,MAAM,CAAC,IAAI,CAAC,KAAK,CAClD,MAAM,EAAE,OAAO,EACf,WAAW,MAAM,CAAC,IAAI,kEAAkE,EACxF,WAAW,EAAE,MAAM,CAAC,IAAI,EACxB,mEAAmE,EAAE,MAAM,CAAC,IAAI,CACjF,CAAC,CAAC;QACH,IAAI,MAAM,CAAC,mBAAmB;YAAE,MAAM,CAAC,IAAI,CAAC,KAAK,CAC/C,MAAM,EAAE,OAAO,EACf,WAAW,MAAM,CAAC,IAAI,8FAA8F,EACpH,WAAW,EAAE,MAAM,CAAC,WAAW,IAAI,MAAM,CAAC,IAAI,EAC9C,iFAAiF,EAAE,MAAM,CAAC,IAAI,CAC/F,CAAC,CAAC;QACH,IAAI,MAAM,CAAC,eAAe;YAAE,MAAM,CAAC,IAAI,CAAC,KAAK,CAC3C,MAAM,EAAE,SAAS,EACjB,WAAW,MAAM,CAAC,IAAI,6EAA6E,EACnG,WAAW,EAAE,MAAM,CAAC,gBAAgB,IAAI,MAAM,CAAC,IAAI,EACnD,oGAAoG,EACpG,MAAM,CAAC,IAAI,CACZ,CAAC,CAAC;QACH,OAAO,MAAM,CAAC;IAChB,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,mBAAmB,CAAC,IAAsB;IACjD,OAAO,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,cAAc;QAC3D,CAAC,CAAC,KAAK,CACL,MAAM,EAAE,SAAS,EACjB,WAAW,IAAI,CAAC,MAAM,iFAAiF,EACvG,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,EACpB,gCAAgC,IAAI,CAAC,MAAM,yBAAyB,EAAE,IAAI,CAAC,MAAM,CAClF;QACD,CAAC,CAAC,KAAK,CACL,MAAM,EAAE,OAAO,EAAE,0CAA0C,IAAI,CAAC,MAAM,GAAG,EACzE,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,EACpB,WAAW,IAAI,CAAC,MAAM,8CAA8C,EAAE,IAAI,CAAC,MAAM,CAClF,CAAC,CAAC;AACP,CAAC;AAED,SAAS,iBAAiB,CACxB,OAA0B,EAC1B,IAAsB;IAEtB,OAAO,OAAO,CAAC,OAAO,CAAC,CAAC,MAAM,EAAE,EAAE;QAChC,IAAI,CAAC,MAAM,CAAC,cAAc;YAAE,OAAO,EAAE,CAAC;QACtC,OAAO,CAAC,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,MAAM,EAAE,EAAE;YACtE,IAAI,MAAM,CAAC,OAAO,KAAK,IAAI;mBACtB,6CAA6C,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC;gBAAE,OAAO,EAAE,CAAC;YACnF,OAAO,CAAC,KAAK,CACX,MAAM,EAAE,OAAO,EACf,WAAW,MAAM,CAAC,IAAI,sEAAsE,EAC5F,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,EACxB,oGAAoG,EACpG,MAAM,CAAC,IAAI,CACZ,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,YAAY,CAAC,MAA2B,EAAE,QAA0B;IAC3E,IAAI,QAAQ,KAAK,QAAQ;QAAE,OAAO,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,KAAK,KAAK,OAAO,CAAC,CAAC;IAC5F,IAAI,QAAQ,KAAK,UAAU;QAAE,OAAO,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,KAAK,KAAK,MAAM,CAAC,CAAC;IAC7F,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,YAAY,CAAC,MAAuB;IAC3C,MAAM,UAAU,GAAqB;QACnC,IAAI,EAAE,MAAM,CAAC,IAAI;QACjB,IAAI,EAAE,MAAM,CAAC,IAAI;QACjB,IAAI,EAAE,MAAM,CAAC,IAAI;QACjB,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;QACzC,YAAY,EAAE,MAAM,CAAC,YAAY;KAClC,CAAC;IACF,IAAI,MAAM,CAAC,MAAM,KAAK,SAAS;QAAE,UAAU,CAAC,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC;IACnE,OAAO,UAAU,CAAC;AACpB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,0BAA0B,CAC9C,KAAgB,EAChB,QAA0B;IAE1B,MAAM,MAAM,GAAG,MAAM,gBAAgB,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAClD,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,OAAO;YACL,OAAO,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,qBAAqB,EAAE,gBAAgB;YAChE,OAAO,EAAE,EAAE,aAAa,EAAE,CAAC,EAAE,YAAY,EAAE,CAAC,EAAE,KAAK,EAAE,GAAG,EAAE;SAC3D,CAAC;IACJ,CAAC;IAED,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC;IACpE,MAAM,UAAU,GAAG,iBAAiB,CAAC,KAAK,EAAE,WAAW,CAAC,CAAC;IACzD,MAAM,SAAS,GAAG;QAChB,GAAG,uBAAuB,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,OAAO,CAAC;QACvD,GAAG,mBAAmB,CAAC,UAAU,CAAC;QAClC,GAAG,iBAAiB,CAAC,MAAM,CAAC,OAAO,EAAE,UAAU,CAAC;KACjD,CAAC;IACF,MAAM,MAAM,GAAG,YAAY,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;IACjD,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;IACjD,OAAO;QACL,OAAO;QACP,MAAM;QACN,qBAAqB,EAAE,gBAAgB;QACvC,OAAO,EAAE;YACP,aAAa,EAAE,OAAO,CAAC,MAAM;YAC7B,YAAY,EAAE,MAAM,CAAC,MAAM;YAC3B,KAAK,EAAE,YAAY,CAAC,MAAM,CAAC;SAC5B;KACF,CAAC;AACJ,CAAC"}

package/dist/tools/astro-actions/callers.d.ts

@@ -0,0 +1,9 @@
+import type { CodeIndex } from "../../types.js";
+import type { ActionCall, CallerScanResult } from "./types.js";
+/** Locate actions.name() calls and classify Astro frontmatter as server-side. */
+export declare function findActionCalls(file: string, source: string): ActionCall[];
+/** Return the textual form tag enclosing an action call, when one exists. */
+export declare function findEnclosingFormTag(source: string, offset: number): string | null;
+/** Scan indexed Astro/JSX callers while preserving index file order. */
+export declare function scanActionCallers(index: CodeIndex, actionNames: Set<string>): CallerScanResult;
+//# sourceMappingURL=callers.d.ts.map

package/dist/tools/astro-actions/callers.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"callers.d.ts","sourceRoot":"","sources":["../../../src/tools/astro-actions/callers.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAC;AAChD,OAAO,KAAK,EAAE,UAAU,EAAc,gBAAgB,EAAE,MAAM,YAAY,CAAC;AAI3E,iFAAiF;AACjF,wBAAgB,eAAe,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,UAAU,EAAE,CAqB1E;AAED,6EAA6E;AAC7E,wBAAgB,oBAAoB,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAOlF;AAuBD,wEAAwE;AACxE,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,SAAS,EAAE,WAAW,EAAE,GAAG,CAAC,MAAM,CAAC,GAAG,gBAAgB,CAyB9F"}

package/dist/tools/astro-actions/callers.js

@@ -0,0 +1,84 @@
+import { readFileSync } from "node:fs";
+import { join } from "node:path";
+const ACTIONS_CALL_PATTERN = /actions\.([A-Za-z_$][\w$]*)\s*\(/g;
+/** Locate actions.name() calls and classify Astro frontmatter as server-side. */
+export function findActionCalls(file, source) {
+    const matches = [];
+    const isAstro = file.endsWith(".astro");
+    const frontmatter = isAstro
+        ? source.match(/^---[ \t]*\n([\s\S]*?)\n---[ \t]*(?:\n|$)/)
+        : null;
+    const frontmatterEnd = frontmatter?.[0].length ?? -1;
+    ACTIONS_CALL_PATTERN.lastIndex = 0;
+    let match;
+    while ((match = ACTIONS_CALL_PATTERN.exec(source)) !== null) {
+        const action = match[1];
+        if (!action)
+            continue;
+        const line = source.slice(0, match.index).split("\n").length;
+        matches.push({
+            file,
+            line,
+            action,
+            is_server_side: isAstro && frontmatterEnd > 0 && match.index < frontmatterEnd,
+        });
+    }
+    return matches;
+}
+/** Return the textual form tag enclosing an action call, when one exists. */
+export function findEnclosingFormTag(source, offset) {
+    const lastOpen = source.slice(0, offset).lastIndexOf("<form");
+    if (lastOpen === -1)
+        return null;
+    const afterOpen = source.slice(lastOpen);
+    const firstClose = afterOpen.indexOf(">");
+    if (firstClose === -1 || source.indexOf("</form>", offset) === -1)
+        return null;
+    return afterOpen.slice(0, firstClose + 1);
+}
+function lineOffset(source, line) {
+    const lines = source.split("\n");
+    let offset = 0;
+    for (let index = 0; index < line - 1; index++)
+        offset += (lines[index]?.length ?? 0) + 1;
+    return offset;
+}
+function addCaller(callersByAction, call, source) {
+    const callers = callersByAction.get(call.action) ?? [];
+    callers.push({
+        file: call.file,
+        line: call.line,
+        formTag: findEnclosingFormTag(source, lineOffset(source, call.line)),
+    });
+    callersByAction.set(call.action, callers);
+}
+/** Scan indexed Astro/JSX callers while preserving index file order. */
+export function scanActionCallers(index, actionNames) {
+    const result = {
+        callersByAction: new Map(),
+        reportableCalls: [],
+    };
+    const files = index.files.filter(({ path }) => path.endsWith(".astro") || path.endsWith(".tsx") || path.endsWith(".jsx"));
+    for (const file of files) {
+        let source;
+        try {
+            source = readFileSync(join(index.root, file.path), "utf-8");
+        }
+        catch {
+            continue;
+        }
+        for (const call of findActionCalls(file.path, source)) {
+            if (!actionNames.has(call.action)) {
+                if (!call.is_server_side)
+                    result.reportableCalls.push(call);
+                continue;
+            }
+            if (call.is_server_side)
+                result.reportableCalls.push(call);
+            else
+                addCaller(result.callersByAction, call, source);
+        }
+    }
+    return result;
+}
+//# sourceMappingURL=callers.js.map

package/dist/tools/astro-actions/callers.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"callers.js","sourceRoot":"","sources":["../../../src/tools/astro-actions/callers.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAIjC,MAAM,oBAAoB,GAAG,mCAAmC,CAAC;AAEjE,iFAAiF;AACjF,MAAM,UAAU,eAAe,CAAC,IAAY,EAAE,MAAc;IAC1D,MAAM,OAAO,GAAiB,EAAE,CAAC;IACjC,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;IACxC,MAAM,WAAW,GAAG,OAAO;QACzB,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,2CAA2C,CAAC;QAC3D,CAAC,CAAC,IAAI,CAAC;IACT,MAAM,cAAc,GAAG,WAAW,EAAE,CAAC,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,CAAC;IACrD,oBAAoB,CAAC,SAAS,GAAG,CAAC,CAAC;IACnC,IAAI,KAA6B,CAAC;IAClC,OAAO,CAAC,KAAK,GAAG,oBAAoB,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;QAC5D,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;QACxB,IAAI,CAAC,MAAM;YAAE,SAAS;QACtB,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC;QAC7D,OAAO,CAAC,IAAI,CAAC;YACX,IAAI;YACJ,IAAI;YACJ,MAAM;YACN,cAAc,EAAE,OAAO,IAAI,cAAc,GAAG,CAAC,IAAI,KAAK,CAAC,KAAK,GAAG,cAAc;SAC9E,CAAC,CAAC;IACL,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,6EAA6E;AAC7E,MAAM,UAAU,oBAAoB,CAAC,MAAc,EAAE,MAAc;IACjE,MAAM,QAAQ,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC;IAC9D,IAAI,QAAQ,KAAK,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IACjC,MAAM,SAAS,GAAG,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;IACzC,MAAM,UAAU,GAAG,SAAS,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAC1C,IAAI,UAAU,KAAK,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,SAAS,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IAC/E,OAAO,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,UAAU,GAAG,CAAC,CAAC,CAAC;AAC5C,CAAC;AAED,SAAS,UAAU,CAAC,MAAc,EAAE,IAAY;IAC9C,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACjC,IAAI,MAAM,GAAG,CAAC,CAAC;IACf,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,IAAI,GAAG,CAAC,EAAE,KAAK,EAAE;QAAE,MAAM,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,MAAM,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;IACzF,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,SAAS,CAChB,eAA0C,EAC1C,IAAgB,EAChB,MAAc;IAEd,MAAM,OAAO,GAAG,eAAe,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;IACvD,OAAO,CAAC,IAAI,CAAC;QACX,IAAI,EAAE,IAAI,CAAC,IAAI;QACf,IAAI,EAAE,IAAI,CAAC,IAAI;QACf,OAAO,EAAE,oBAAoB,CAAC,MAAM,EAAE,UAAU,CAAC,MAAM,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;KACrE,CAAC,CAAC;IACH,eAAe,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;AAC5C,CAAC;AAED,wEAAwE;AACxE,MAAM,UAAU,iBAAiB,CAAC,KAAgB,EAAE,WAAwB;IAC1E,MAAM,MAAM,GAAqB;QAC/B,eAAe,EAAE,IAAI,GAAG,EAAE;QAC1B,eAAe,EAAE,EAAE;KACpB,CAAC;IACF,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,CAC5C,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;IAE7E,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,IAAI,MAAc,CAAC;QACnB,IAAI,CAAC;YACH,MAAM,GAAG,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,EAAE,OAAO,CAAC,CAAC;QAC9D,CAAC;QAAC,MAAM,CAAC;YACP,SAAS;QACX,CAAC;QACD,KAAK,MAAM,IAAI,IAAI,eAAe,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,EAAE,CAAC;YACtD,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;gBAClC,IAAI,CAAC,IAAI,CAAC,cAAc;oBAAE,MAAM,CAAC,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBAC5D,SAAS;YACX,CAAC;YACD,IAAI,IAAI,CAAC,cAAc;gBAAE,MAAM,CAAC,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;;gBACtD,SAAS,CAAC,MAAM,CAAC,eAAe,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC;QACvD,CAAC;IACH,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/tools/astro-actions/parser.d.ts

@@ -0,0 +1,3 @@
+import type { ActionsFileExtraction } from "./types.js";
+export declare function parseActionsFile(root: string): Promise<ActionsFileExtraction | null>;
+//# sourceMappingURL=parser.d.ts.map

package/dist/tools/astro-actions/parser.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"parser.d.ts","sourceRoot":"","sources":["../../../src/tools/astro-actions/parser.ts"],"names":[],"mappings":"AAaA,OAAO,KAAK,EAAE,qBAAqB,EAAmB,MAAM,YAAY,CAAC;AA0JzE,wBAAsB,gBAAgB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,qBAAqB,GAAG,IAAI,CAAC,CAkB1F"}

package/dist/tools/astro-actions/parser.js

@@ -0,0 +1,156 @@
+import { readFileSync } from "node:fs";
+import { join } from "node:path";
+import { getParser, initParser } from "../../parser/parser-manager.js";
+import { getActionProperty, handlerHasTopLevelReturn, methodName, receiverOfCall, stripActionQuotes, unwrapZodChain, walkAll, } from "./ast.js";
+import { extractZodObjectFields, isZObjectCall } from "./zod-ast.js";
+const ACTIONS_FILE_CANDIDATES = [
+    "src/actions/index.ts",
+    "src/actions/index.js",
+    "src/actions/index.mjs",
+];
+const LANGUAGE_BY_EXTENSION = {
+    ".ts": "typescript",
+    ".tsx": "tsx",
+    ".js": "javascript",
+    ".mjs": "javascript",
+    ".jsx": "javascript",
+};
+function pickLanguage(filePath) {
+    for (const [extension, language] of Object.entries(LANGUAGE_BY_EXTENSION)) {
+        if (filePath.endsWith(extension))
+            return language;
+    }
+    return "typescript";
+}
+function findActionsFile(root) {
+    for (const file of ACTIONS_FILE_CANDIDATES) {
+        try {
+            return { source: readFileSync(join(root, file), "utf-8"), file };
+        }
+        catch {
+            // Preserve the audit's best-effort candidate lookup behavior.
+        }
+    }
+    return null;
+}
+function createDescriptor(name, file, call) {
+    return {
+        name,
+        file,
+        line: call.startPosition.row + 1,
+        has_input_schema: false,
+        input_fields: [],
+        handler_missing_return: false,
+        refine_on_top_level: false,
+        has_passthrough: false,
+        has_file_field: false,
+    };
+}
+function populateInputDetails(descriptor, input) {
+    descriptor.has_input_schema = true;
+    if (input.type === "call_expression") {
+        const outerName = methodName(input);
+        if (outerName === "refine" || outerName === "superRefine") {
+            const receiver = receiverOfCall(input);
+            if (receiver?.type === "call_expression" && isZObjectCall(receiver)) {
+                descriptor.refine_on_top_level = true;
+                descriptor.refine_line = input.startPosition.row + 1;
+            }
+        }
+    }
+    walkAll(input, (node) => {
+        if (node.type !== "call_expression" || methodName(node) !== "passthrough")
+            return;
+        descriptor.has_passthrough = true;
+        descriptor.passthrough_line = node.startPosition.row + 1;
+    });
+    const zodObject = unwrapZodChain(input);
+    if (!zodObject)
+        return;
+    const { fields, hasFileField } = extractZodObjectFields(zodObject);
+    descriptor.input_fields = fields;
+    descriptor.has_file_field = hasFileField;
+}
+function extractAction(name, file, call) {
+    const descriptor = createDescriptor(name, file, call);
+    const args = call.childForFieldName("arguments");
+    const objectNode = args?.namedChildren.find((node) => node.type === "object");
+    if (!objectNode)
+        return descriptor;
+    const acceptNode = getActionProperty(objectNode, "accept");
+    if (acceptNode?.type === "string") {
+        const accept = stripActionQuotes(acceptNode.text);
+        if (accept === "json" || accept === "form")
+            descriptor.accept = accept;
+    }
+    const inputNode = getActionProperty(objectNode, "input");
+    if (inputNode)
+        populateInputDetails(descriptor, inputNode);
+    const handlerNode = getActionProperty(objectNode, "handler");
+    if (handlerNode && (handlerNode.type === "arrow_function"
+        || handlerNode.type === "function_expression"
+        || handlerNode.type === "function"))
+        descriptor.handler_missing_return = !handlerHasTopLevelReturn(handlerNode);
+    return descriptor;
+}
+function collectNestedAction(name, file, node, actions) {
+    walkAll(node, (candidate) => {
+        if (candidate.type !== "call_expression")
+            return;
+        if (candidate.childForFieldName("function")?.text !== "defineAction")
+            return;
+        actions.push(extractAction(name, file, candidate));
+    });
+}
+function collectObjectPropertyAction(pair, file, actions) {
+    if (pair.type !== "pair")
+        return;
+    const key = pair.childForFieldName("key");
+    const value = pair.childForFieldName("value");
+    if (!key || !value)
+        return;
+    const actionName = stripActionQuotes(key.text);
+    if (value.type === "call_expression"
+        && value.childForFieldName("function")?.text === "defineAction") {
+        actions.push(extractAction(actionName, file, value));
+        return;
+    }
+    collectNestedAction(actionName, file, value, actions);
+}
+function collectVariableActions(node, file, actions) {
+    if (node.type !== "variable_declarator")
+        return;
+    const nameNode = node.childForFieldName("name");
+    const valueNode = node.childForFieldName("value");
+    if (!nameNode || !valueNode)
+        return;
+    if (valueNode.type === "call_expression"
+        && valueNode.childForFieldName("function")?.text === "defineAction") {
+        actions.push(extractAction(nameNode.text, file, valueNode));
+        return;
+    }
+    if (valueNode.type !== "object")
+        return;
+    for (const pair of valueNode.namedChildren)
+        collectObjectPropertyAction(pair, file, actions);
+}
+export async function parseActionsFile(root) {
+    const actionsFile = findActionsFile(root);
+    if (!actionsFile)
+        return null;
+    await initParser();
+    const parser = await getParser(pickLanguage(actionsFile.file));
+    if (!parser)
+        return { file: actionsFile.file, actions: [] };
+    let tree;
+    try {
+        tree = parser.parse(actionsFile.source);
+    }
+    catch {
+        return { file: actionsFile.file, actions: [] };
+    }
+    const actions = [];
+    walkAll(tree.rootNode, (node) => collectVariableActions(node, actionsFile.file, actions));
+    return { file: actionsFile.file, actions };
+}
+//# sourceMappingURL=parser.js.map

package/dist/tools/astro-actions/parser.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"parser.js","sourceRoot":"","sources":["../../../src/tools/astro-actions/parser.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAEjC,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,MAAM,gCAAgC,CAAC;AACvE,OAAO,EACL,iBAAiB,EACjB,wBAAwB,EACxB,UAAU,EACV,cAAc,EACd,iBAAiB,EACjB,cAAc,EACd,OAAO,GACR,MAAM,UAAU,CAAC;AAElB,OAAO,EAAE,sBAAsB,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAErE,MAAM,uBAAuB,GAAG;IAC9B,sBAAsB;IACtB,sBAAsB;IACtB,uBAAuB;CACxB,CAAC;AAEF,MAAM,qBAAqB,GAA2B;IACpD,KAAK,EAAE,YAAY;IACnB,MAAM,EAAE,KAAK;IACb,KAAK,EAAE,YAAY;IACnB,MAAM,EAAE,YAAY;IACpB,MAAM,EAAE,YAAY;CACrB,CAAC;AAEF,SAAS,YAAY,CAAC,QAAgB;IACpC,KAAK,MAAM,CAAC,SAAS,EAAE,QAAQ,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,qBAAqB,CAAC,EAAE,CAAC;QAC1E,IAAI,QAAQ,CAAC,QAAQ,CAAC,SAAS,CAAC;YAAE,OAAO,QAAQ,CAAC;IACpD,CAAC;IACD,OAAO,YAAY,CAAC;AACtB,CAAC;AAED,SAAS,eAAe,CAAC,IAAY;IACnC,KAAK,MAAM,IAAI,IAAI,uBAAuB,EAAE,CAAC;QAC3C,IAAI,CAAC;YACH,OAAO,EAAE,MAAM,EAAE,YAAY,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,EAAE,OAAO,CAAC,EAAE,IAAI,EAAE,CAAC;QACnE,CAAC;QAAC,MAAM,CAAC;YACP,8DAA8D;QAChE,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,gBAAgB,CAAC,IAAY,EAAE,IAAY,EAAE,IAAuB;IAC3E,OAAO;QACL,IAAI;QACJ,IAAI;QACJ,IAAI,EAAE,IAAI,CAAC,aAAa,CAAC,GAAG,GAAG,CAAC;QAChC,gBAAgB,EAAE,KAAK;QACvB,YAAY,EAAE,EAAE;QAChB,sBAAsB,EAAE,KAAK;QAC7B,mBAAmB,EAAE,KAAK;QAC1B,eAAe,EAAE,KAAK;QACtB,cAAc,EAAE,KAAK;KACtB,CAAC;AACJ,CAAC;AAED,SAAS,oBAAoB,CAAC,UAA2B,EAAE,KAAwB;IACjF,UAAU,CAAC,gBAAgB,GAAG,IAAI,CAAC;IACnC,IAAI,KAAK,CAAC,IAAI,KAAK,iBAAiB,EAAE,CAAC;QACrC,MAAM,SAAS,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC;QACpC,IAAI,SAAS,KAAK,QAAQ,IAAI,SAAS,KAAK,aAAa,EAAE,CAAC;YAC1D,MAAM,QAAQ,GAAG,cAAc,CAAC,KAAK,CAAC,CAAC;YACvC,IAAI,QAAQ,EAAE,IAAI,KAAK,iBAAiB,IAAI,aAAa,CAAC,QAAQ,CAAC,EAAE,CAAC;gBACpE,UAAU,CAAC,mBAAmB,GAAG,IAAI,CAAC;gBACtC,UAAU,CAAC,WAAW,GAAG,KAAK,CAAC,aAAa,CAAC,GAAG,GAAG,CAAC,CAAC;YACvD,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,CAAC,KAAK,EAAE,CAAC,IAAI,EAAE,EAAE;QACtB,IAAI,IAAI,CAAC,IAAI,KAAK,iBAAiB,IAAI,UAAU,CAAC,IAAI,CAAC,KAAK,aAAa;YAAE,OAAO;QAClF,UAAU,CAAC,eAAe,GAAG,IAAI,CAAC;QAClC,UAAU,CAAC,gBAAgB,GAAG,IAAI,CAAC,aAAa,CAAC,GAAG,GAAG,CAAC,CAAC;IAC3D,CAAC,CAAC,CAAC;IAEH,MAAM,SAAS,GAAG,cAAc,CAAC,KAAK,CAAC,CAAC;IACxC,IAAI,CAAC,SAAS;QAAE,OAAO;IACvB,MAAM,EAAE,MAAM,EAAE,YAAY,EAAE,GAAG,sBAAsB,CAAC,SAAS,CAAC,CAAC;IACnE,UAAU,CAAC,YAAY,GAAG,MAAM,CAAC;IACjC,UAAU,CAAC,cAAc,GAAG,YAAY,CAAC;AAC3C,CAAC;AAED,SAAS,aAAa,CACpB,IAAY,EACZ,IAAY,EACZ,IAAuB;IAEvB,MAAM,UAAU,GAAG,gBAAgB,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;IACtD,MAAM,IAAI,GAAG,IAAI,CAAC,iBAAiB,CAAC,WAAW,CAAC,CAAC;IACjD,MAAM,UAAU,GAAG,IAAI,EAAE,aAAa,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC;IAC9E,IAAI,CAAC,UAAU;QAAE,OAAO,UAAU,CAAC;IAEnC,MAAM,UAAU,GAAG,iBAAiB,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC;IAC3D,IAAI,UAAU,EAAE,IAAI,KAAK,QAAQ,EAAE,CAAC;QAClC,MAAM,MAAM,GAAG,iBAAiB,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;QAClD,IAAI,MAAM,KAAK,MAAM,IAAI,MAAM,KAAK,MAAM;YAAE,UAAU,CAAC,MAAM,GAAG,MAAM,CAAC;IACzE,CAAC;IAED,MAAM,SAAS,GAAG,iBAAiB,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;IACzD,IAAI,SAAS;QAAE,oBAAoB,CAAC,UAAU,EAAE,SAAS,CAAC,CAAC;IAE3D,MAAM,WAAW,GAAG,iBAAiB,CAAC,UAAU,EAAE,SAAS,CAAC,CAAC;IAC7D,IAAI,WAAW,IAAI,CACjB,WAAW,CAAC,IAAI,KAAK,gBAAgB;WAClC,WAAW,CAAC,IAAI,KAAK,qBAAqB;WAC1C,WAAW,CAAC,IAAI,KAAK,UAAU,CACnC;QAAE,UAAU,CAAC,sBAAsB,GAAG,CAAC,wBAAwB,CAAC,WAAW,CAAC,CAAC;IAC9E,OAAO,UAAU,CAAC;AACpB,CAAC;AAED,SAAS,mBAAmB,CAC1B,IAAY,EACZ,IAAY,EACZ,IAAuB,EACvB,OAA0B;IAE1B,OAAO,CAAC,IAAI,EAAE,CAAC,SAAS,EAAE,EAAE;QAC1B,IAAI,SAAS,CAAC,IAAI,KAAK,iBAAiB;YAAE,OAAO;QACjD,IAAI,SAAS,CAAC,iBAAiB,CAAC,UAAU,CAAC,EAAE,IAAI,KAAK,cAAc;YAAE,OAAO;QAC7E,OAAO,CAAC,IAAI,CAAC,aAAa,CAAC,IAAI,EAAE,IAAI,EAAE,SAAS,CAAC,CAAC,CAAC;IACrD,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,2BAA2B,CAClC,IAAuB,EACvB,IAAY,EACZ,OAA0B;IAE1B,IAAI,IAAI,CAAC,IAAI,KAAK,MAAM;QAAE,OAAO;IACjC,MAAM,GAAG,GAAG,IAAI,CAAC,iBAAiB,CAAC,KAAK,CAAC,CAAC;IAC1C,MAAM,KAAK,GAAG,IAAI,CAAC,iBAAiB,CAAC,OAAO,CAAC,CAAC;IAC9C,IAAI,CAAC,GAAG,IAAI,CAAC,KAAK;QAAE,OAAO;IAC3B,MAAM,UAAU,GAAG,iBAAiB,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAC/C,IAAI,KAAK,CAAC,IAAI,KAAK,iBAAiB;WAC/B,KAAK,CAAC,iBAAiB,CAAC,UAAU,CAAC,EAAE,IAAI,KAAK,cAAc,EAAE,CAAC;QAClE,OAAO,CAAC,IAAI,CAAC,aAAa,CAAC,UAAU,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC;QACrD,OAAO;IACT,CAAC;IACD,mBAAmB,CAAC,UAAU,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC;AACxD,CAAC;AAED,SAAS,sBAAsB,CAC7B,IAAuB,EACvB,IAAY,EACZ,OAA0B;IAE1B,IAAI,IAAI,CAAC,IAAI,KAAK,qBAAqB;QAAE,OAAO;IAChD,MAAM,QAAQ,GAAG,IAAI,CAAC,iBAAiB,CAAC,MAAM,CAAC,CAAC;IAChD,MAAM,SAAS,GAAG,IAAI,CAAC,iBAAiB,CAAC,OAAO,CAAC,CAAC;IAClD,IAAI,CAAC,QAAQ,IAAI,CAAC,SAAS;QAAE,OAAO;IAEpC,IAAI,SAAS,CAAC,IAAI,KAAK,iBAAiB;WACnC,SAAS,CAAC,iBAAiB,CAAC,UAAU,CAAC,EAAE,IAAI,KAAK,cAAc,EAAE,CAAC;QACtE,OAAO,CAAC,IAAI,CAAC,aAAa,CAAC,QAAQ,CAAC,IAAI,EAAE,IAAI,EAAE,SAAS,CAAC,CAAC,CAAC;QAC5D,OAAO;IACT,CAAC;IACD,IAAI,SAAS,CAAC,IAAI,KAAK,QAAQ;QAAE,OAAO;IAExC,KAAK,MAAM,IAAI,IAAI,SAAS,CAAC,aAAa;QAAE,2BAA2B,CAAC,IAAI,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC;AAC/F,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,IAAY;IACjD,MAAM,WAAW,GAAG,eAAe,CAAC,IAAI,CAAC,CAAC;IAC1C,IAAI,CAAC,WAAW;QAAE,OAAO,IAAI,CAAC;IAE9B,MAAM,UAAU,EAAE,CAAC;IACnB,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,YAAY,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC;IAC/D,IAAI,CAAC,MAAM;QAAE,OAAO,EAAE,IAAI,EAAE,WAAW,CAAC,IAAI,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC;IAE5D,IAAI,IAAiB,CAAC;IACtB,IAAI,CAAC;QACH,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;IAC1C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,IAAI,EAAE,WAAW,CAAC,IAAI,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC;IACjD,CAAC;IAED,MAAM,OAAO,GAAsB,EAAE,CAAC;IACtC,OAAO,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,sBAAsB,CAAC,IAAI,EAAE,WAAW,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC;IAC1F,OAAO,EAAE,IAAI,EAAE,WAAW,CAAC,IAAI,EAAE,OAAO,EAAE,CAAC;AAC7C,CAAC"}

package/dist/tools/astro-actions/types.d.ts

@@ -0,0 +1,58 @@
+export declare const ACTION_CODES: readonly ["AA01", "AA02", "AA03", "AA04", "AA05", "AA06"];
+export type ActionCode = (typeof ACTION_CODES)[number];
+export interface ActionDescriptor {
+    name: string;
+    file: string;
+    line: number;
+    accept?: "json" | "form";
+    has_input_schema: boolean;
+    input_fields: string[];
+}
+export interface ActionsAuditIssue {
+    code: ActionCode;
+    severity: "error" | "warning" | "info";
+    message: string;
+    file: string;
+    line: number;
+    action?: string;
+    fix: string;
+}
+export interface ActionsAuditResult {
+    actions: ActionDescriptor[];
+    issues: ActionsAuditIssue[];
+    anti_patterns_checked: string[];
+    summary: {
+        total_actions: number;
+        total_issues: number;
+        score: "A" | "B" | "C" | "D";
+    };
+}
+export interface ExtractedAction extends ActionDescriptor {
+    handler_missing_return: boolean;
+    refine_on_top_level: boolean;
+    refine_line?: number;
+    has_passthrough: boolean;
+    passthrough_line?: number;
+    has_file_field: boolean;
+}
+export interface ActionsFileExtraction {
+    file: string;
+    actions: ExtractedAction[];
+}
+export interface ActionCall {
+    file: string;
+    line: number;
+    action: string;
+    is_server_side: boolean;
+}
+export interface CallerInfo {
+    file: string;
+    line: number;
+    formTag: string | null;
+}
+export interface CallerScanResult {
+    callersByAction: Map<string, CallerInfo[]>;
+    reportableCalls: ActionCall[];
+}
+export type ActionsSeverity = "all" | "warnings" | "errors";
+//# sourceMappingURL=types.d.ts.map

package/dist/tools/astro-actions/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../src/tools/astro-actions/types.ts"],"names":[],"mappings":"AAAA,eAAO,MAAM,YAAY,2DAA4D,CAAC;AACtF,MAAM,MAAM,UAAU,GAAG,CAAC,OAAO,YAAY,CAAC,CAAC,MAAM,CAAC,CAAC;AAEvD,MAAM,WAAW,gBAAgB;IAC/B,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;IACzB,gBAAgB,EAAE,OAAO,CAAC;IAC1B,YAAY,EAAE,MAAM,EAAE,CAAC;CACxB;AAED,MAAM,WAAW,iBAAiB;IAChC,IAAI,EAAE,UAAU,CAAC;IACjB,QAAQ,EAAE,OAAO,GAAG,SAAS,GAAG,MAAM,CAAC;IACvC,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,GAAG,EAAE,MAAM,CAAC;CACb;AAED,MAAM,WAAW,kBAAkB;IACjC,OAAO,EAAE,gBAAgB,EAAE,CAAC;IAC5B,MAAM,EAAE,iBAAiB,EAAE,CAAC;IAC5B,qBAAqB,EAAE,MAAM,EAAE,CAAC;IAChC,OAAO,EAAE;QACP,aAAa,EAAE,MAAM,CAAC;QACtB,YAAY,EAAE,MAAM,CAAC;QACrB,KAAK,EAAE,GAAG,GAAG,GAAG,GAAG,GAAG,GAAG,GAAG,CAAC;KAC9B,CAAC;CACH;AAED,MAAM,WAAW,eAAgB,SAAQ,gBAAgB;IACvD,sBAAsB,EAAE,OAAO,CAAC;IAChC,mBAAmB,EAAE,OAAO,CAAC;IAC7B,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,eAAe,EAAE,OAAO,CAAC;IACzB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,cAAc,EAAE,OAAO,CAAC;CACzB;AAED,MAAM,WAAW,qBAAqB;IACpC,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,eAAe,EAAE,CAAC;CAC5B;AAED,MAAM,WAAW,UAAU;IACzB,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;IACf,cAAc,EAAE,OAAO,CAAC;CACzB;AAED,MAAM,WAAW,UAAU;IACzB,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;CACxB;AAED,MAAM,WAAW,gBAAgB;IAC/B,eAAe,EAAE,GAAG,CAAC,MAAM,EAAE,UAAU,EAAE,CAAC,CAAC;IAC3C,eAAe,EAAE,UAAU,EAAE,CAAC;CAC/B;AAED,MAAM,MAAM,eAAe,GAAG,KAAK,GAAG,UAAU,GAAG,QAAQ,CAAC"}

package/dist/tools/astro-actions/types.js

@@ -0,0 +1,2 @@
+export const ACTION_CODES = ["AA01", "AA02", "AA03", "AA04", "AA05", "AA06"];
+//# sourceMappingURL=types.js.map

package/dist/tools/astro-actions/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../../src/tools/astro-actions/types.ts"],"names":[],"mappings":"AAAA,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,CAAU,CAAC"}

package/dist/tools/astro-actions/zod-ast.d.ts

@@ -0,0 +1,7 @@
+import type Parser from "web-tree-sitter";
+export declare function isZObjectCall(call: Parser.SyntaxNode): boolean;
+export declare function extractZodObjectFields(zodCall: Parser.SyntaxNode): {
+    fields: string[];
+    hasFileField: boolean;
+};
+//# sourceMappingURL=zod-ast.d.ts.map

package/dist/tools/astro-actions/zod-ast.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"zod-ast.d.ts","sourceRoot":"","sources":["../../../src/tools/astro-actions/zod-ast.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,MAAM,iBAAiB,CAAC;AAG1C,wBAAgB,aAAa,CAAC,IAAI,EAAE,MAAM,CAAC,UAAU,GAAG,OAAO,CAM9D;AAmBD,wBAAgB,sBAAsB,CAAC,OAAO,EAAE,MAAM,CAAC,UAAU,GAAG;IAClE,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,YAAY,EAAE,OAAO,CAAC;CACvB,CAgBA"}

package/dist/tools/astro-actions/zod-ast.js

@@ -0,0 +1,51 @@
+import { stripActionQuotes, walkAll } from "./ast.js";
+export function isZObjectCall(call) {
+    if (call.type !== "call_expression")
+        return false;
+    const callable = call.childForFieldName("function");
+    if (!callable || callable.type !== "member_expression")
+        return false;
+    return callable.childForFieldName("object")?.text === "z"
+        && callable.childForFieldName("property")?.text === "object";
+}
+function isFileInstanceCall(node) {
+    if (node.type !== "call_expression")
+        return false;
+    const callable = node.childForFieldName("function");
+    if (!callable || callable.type !== "member_expression")
+        return false;
+    if (callable.childForFieldName("object")?.text !== "z")
+        return false;
+    if (callable.childForFieldName("property")?.text !== "instanceof")
+        return false;
+    return node.childForFieldName("arguments")?.namedChildren[0]?.text === "File";
+}
+function containsFileField(value) {
+    let found = false;
+    walkAll(value, (node) => {
+        if (!found && isFileInstanceCall(node))
+            found = true;
+    });
+    return found;
+}
+export function extractZodObjectFields(zodCall) {
+    const fields = [];
+    let hasFileField = false;
+    const args = zodCall.childForFieldName("arguments");
+    const objectNode = args?.namedChildren.find((node) => node.type === "object");
+    if (!objectNode)
+        return { fields, hasFileField };
+    for (const pair of objectNode.namedChildren) {
+        if (pair.type !== "pair")
+            continue;
+        const key = pair.childForFieldName("key");
+        const value = pair.childForFieldName("value");
+        if (!key)
+            continue;
+        fields.push(stripActionQuotes(key.text));
+        if (value && containsFileField(value))
+            hasFileField = true;
+    }
+    return { fields, hasFileField };
+}
+//# sourceMappingURL=zod-ast.js.map

package/dist/tools/astro-actions/zod-ast.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"zod-ast.js","sourceRoot":"","sources":["../../../src/tools/astro-actions/zod-ast.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,iBAAiB,EAAE,OAAO,EAAE,MAAM,UAAU,CAAC;AAEtD,MAAM,UAAU,aAAa,CAAC,IAAuB;IACnD,IAAI,IAAI,CAAC,IAAI,KAAK,iBAAiB;QAAE,OAAO,KAAK,CAAC;IAClD,MAAM,QAAQ,GAAG,IAAI,CAAC,iBAAiB,CAAC,UAAU,CAAC,CAAC;IACpD,IAAI,CAAC,QAAQ,IAAI,QAAQ,CAAC,IAAI,KAAK,mBAAmB;QAAE,OAAO,KAAK,CAAC;IACrE,OAAO,QAAQ,CAAC,iBAAiB,CAAC,QAAQ,CAAC,EAAE,IAAI,KAAK,GAAG;WACpD,QAAQ,CAAC,iBAAiB,CAAC,UAAU,CAAC,EAAE,IAAI,KAAK,QAAQ,CAAC;AACjE,CAAC;AAED,SAAS,kBAAkB,CAAC,IAAuB;IACjD,IAAI,IAAI,CAAC,IAAI,KAAK,iBAAiB;QAAE,OAAO,KAAK,CAAC;IAClD,MAAM,QAAQ,GAAG,IAAI,CAAC,iBAAiB,CAAC,UAAU,CAAC,CAAC;IACpD,IAAI,CAAC,QAAQ,IAAI,QAAQ,CAAC,IAAI,KAAK,mBAAmB;QAAE,OAAO,KAAK,CAAC;IACrE,IAAI,QAAQ,CAAC,iBAAiB,CAAC,QAAQ,CAAC,EAAE,IAAI,KAAK,GAAG;QAAE,OAAO,KAAK,CAAC;IACrE,IAAI,QAAQ,CAAC,iBAAiB,CAAC,UAAU,CAAC,EAAE,IAAI,KAAK,YAAY;QAAE,OAAO,KAAK,CAAC;IAChF,OAAO,IAAI,CAAC,iBAAiB,CAAC,WAAW,CAAC,EAAE,aAAa,CAAC,CAAC,CAAC,EAAE,IAAI,KAAK,MAAM,CAAC;AAChF,CAAC;AAED,SAAS,iBAAiB,CAAC,KAAwB;IACjD,IAAI,KAAK,GAAG,KAAK,CAAC;IAClB,OAAO,CAAC,KAAK,EAAE,CAAC,IAAI,EAAE,EAAE;QACtB,IAAI,CAAC,KAAK,IAAI,kBAAkB,CAAC,IAAI,CAAC;YAAE,KAAK,GAAG,IAAI,CAAC;IACvD,CAAC,CAAC,CAAC;IACH,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,UAAU,sBAAsB,CAAC,OAA0B;IAI/D,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,IAAI,YAAY,GAAG,KAAK,CAAC;IACzB,MAAM,IAAI,GAAG,OAAO,CAAC,iBAAiB,CAAC,WAAW,CAAC,CAAC;IACpD,MAAM,UAAU,GAAG,IAAI,EAAE,aAAa,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC;IAC9E,IAAI,CAAC,UAAU;QAAE,OAAO,EAAE,MAAM,EAAE,YAAY,EAAE,CAAC;IAEjD,KAAK,MAAM,IAAI,IAAI,UAAU,CAAC,aAAa,EAAE,CAAC;QAC5C,IAAI,IAAI,CAAC,IAAI,KAAK,MAAM;YAAE,SAAS;QACnC,MAAM,GAAG,GAAG,IAAI,CAAC,iBAAiB,CAAC,KAAK,CAAC,CAAC;QAC1C,MAAM,KAAK,GAAG,IAAI,CAAC,iBAAiB,CAAC,OAAO,CAAC,CAAC;QAC9C,IAAI,CAAC,GAAG;YAAE,SAAS;QACnB,MAAM,CAAC,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC;QACzC,IAAI,KAAK,IAAI,iBAAiB,CAAC,KAAK,CAAC;YAAE,YAAY,GAAG,IAAI,CAAC;IAC7D,CAAC;IACD,OAAO,EAAE,MAAM,EAAE,YAAY,EAAE,CAAC;AAClC,CAAC"}