guardvibe 1.9.0 → 1.9.1

package/build/tools/check-code.js

@@ -218,6 +218,23 @@ function isDuplicatePair(a, b) {
         return true;
     if (a.rule.name.includes("Unsafe innerHTML") && b.rule.name.includes("XSS via innerHTML"))
         return true;
+    // Both are auth/unprotected route rules — VG420+VG952+VG002 duplicate case
+    const authPatterns = ["Unprotected Route", "Without Authentication", "Missing authentication"];
+    const aIsAuth = authPatterns.some(p => a.rule.name.includes(p));
+    const bIsAuth = authPatterns.some(p => b.rule.name.includes(p));
+    if (aIsAuth && bIsAuth)
+        return true;
+    // Both are CORS wildcard rules — VG040+VG403+VG973 duplicate case
+    const aIsCors = a.rule.name.includes("CORS") && a.rule.name.includes("ildcard");
+    const bIsCors = b.rule.name.includes("CORS") && b.rule.name.includes("ildcard");
+    if (aIsCors && bIsCors)
+        return true;
+    // Both are admin role check rules — VG426+VG957 duplicate case
+    const adminPatterns = ["Admin", "Role Check", "Role Verification"];
+    const aIsAdmin = adminPatterns.some(p => a.rule.name.includes(p));
+    const bIsAdmin = adminPatterns.some(p => b.rule.name.includes(p));
+    if (aIsAdmin && bIsAdmin)
+        return true;
     return false;
 }
 /** Check if rule A is more specific than rule B (framework rules > core rules). */

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "guardvibe",
-  "version": "1.9.0",
+  "version": "1.9.1",
   "description": "Security MCP for vibe coding. 277 rules, 24 tools for Next.js, Supabase, Clerk, Stripe, Prisma, tRPC, Hono, GraphQL, Convex, Turso, Uploadthing, AI SDK, and the full AI-generated stack.",
   "type": "module",
   "bin": {