ios-agent-mcp 2.0.0

package/dist/analyzers/swiftui.js

@@ -0,0 +1,67 @@
+import { eachLine, isSupportFile } from "./types.js";
+const DESIGN_DOC = "docs/design/design-tokens.md";
+const STATE_DOC = "docs/swiftui/state-and-data-flow.md";
+export function analyzeSwiftUI(file) {
+    const findings = [];
+    if (isSupportFile(file.path))
+        return findings;
+    if (!/import\s+SwiftUI/.test(file.content))
+        return findings;
+    const push = (line, excerpt, rule, severity, message, consequence, fix, doc) => findings.push({
+        file: file.path,
+        line,
+        severity,
+        rule,
+        message,
+        consequence,
+        fix,
+        doc,
+        excerpt: excerpt.trim(),
+    });
+    eachLine(file, (line, number) => {
+        // Fixed font size breaks Dynamic Type.
+        if (/\.font\(\s*\.system\(\s*size:\s*\d+/.test(line) && !/relativeTo:/.test(line)) {
+            push(number, line, "fixed-font-size", "serious", "Fixed font size ignores Dynamic Type.", "Text stays the same size at every accessibility setting, making the app unusable for low-vision users.", "Use a semantic style (`.body`, `.headline`) or `.custom(_:size:relativeTo:)`.", DESIGN_DOC);
+        }
+        // Fixed height on a text container clips at large sizes.
+        if (/\.frame\(\s*height:\s*\d+/.test(line)) {
+            push(number, line, "fixed-height", "minor", "Fixed height clips content at large Dynamic Type sizes.", "Text is cut off at accessibility text sizes rather than growing.", "Use `minHeight:` so the container can grow.", DESIGN_DOC);
+        }
+        // AnyView defeats structural diffing.
+        if (/\bAnyView\s*\(/.test(line)) {
+            push(number, line, "any-view", "minor", "AnyView erases the view type.", "SwiftUI loses structural identity, so it cannot diff efficiently and animations may break.", "Restructure with `@ViewBuilder` or `some View`.", "docs/swiftui/views-and-controls.md");
+        }
+        // Deprecated modifier.
+        if (/\.cornerRadius\(/.test(line)) {
+            push(number, line, "deprecated-corner-radius", "minor", ".cornerRadius is deprecated.", "Clips without antialiasing control and does not compose with shape-based backgrounds.", "Use `.clipShape(.rect(cornerRadius:))` or the `in:` parameter of `.background`.", DESIGN_DOC);
+        }
+        // Literal design values at a call site.
+        const padding = /\.padding\(\s*(\d+)\s*\)/.exec(line);
+        if (padding) {
+            push(number, line, "literal-spacing", "minor", `Literal spacing value (${padding[1]}) at a call site.`, "Changing the spacing rhythm means finding every literal by hand, and values drift apart over time.", "Use a spacing token (`Space.contentInset`).", DESIGN_DOC);
+        }
+        // Material with nothing behind it renders as flat gray.
+        if (/\.background\(\s*\.(ultraThin|thin|regular|thick)Material\s*\)/.test(line)) {
+            push(number, line, "material-possibly-on-solid", "minor", "Material effect — verify there is content behind it.", "Applied over a solid background a material renders as flat gray mud, which is the most common way a SwiftUI screen looks unfinished.", "Use materials only over scrolling or layered content. Otherwise use a solid surface token.", DESIGN_DOC);
+        }
+        // Transient UI state on an observable model.
+        if (/^\s*var\s+(show|is)\w*(Sheet|Alert|Presented|Expanded)\b/.test(line)) {
+            if (/@Observable/.test(file.content) && !/struct\s+\w+\s*:\s*View/.test(file.content)) {
+                push(number, line, "view-state-on-model", "minor", "Transient presentation state lives on an observable model.", "Sheet flags and draft text are view-local; storing them on a model couples unrelated screens and survives longer than the view.", "Move it to `@State` on the view.", STATE_DOC);
+            }
+        }
+        // Legacy observation in new code.
+        if (/:\s*ObservableObject\b/.test(line)) {
+            push(number, line, "legacy-observableobject", "minor", "ObservableObject is legacy on iOS 17+.", "Coarser invalidation — any published change re-renders every observing view — and requires @Published on every property.", "Use `@MainActor @Observable final class` (Observation framework).", STATE_DOC);
+        }
+        if (/@EnvironmentObject\b/.test(line)) {
+            push(number, line, "environmentobject", "serious", "@EnvironmentObject crashes at runtime when the object is missing.", "A missing injection is a crash in production rather than a compile error.", "Use `@Environment(Type.self)` with an `@Observable` type.", STATE_DOC);
+        }
+        // try! is a crash waiting to happen.
+        if (/\btry!\s/.test(line)) {
+            push(number, line, "force-try", "serious", "try! crashes the app on any thrown error.", "Any failure — a malformed response, a full disk — terminates the process instead of surfacing.", "Use `try` with `do`/`catch`, or `try?` where a nil result is genuinely correct.", "patterns/error-handling.md");
+        }
+    });
+    return findings;
+}
+//# sourceMappingURL=swiftui.js.map

package/dist/analyzers/swiftui.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"swiftui.js","sourceRoot":"","sources":["../../src/analyzers/swiftui.ts"],"names":[],"mappings":"AAAA,OAAO,EAAuB,QAAQ,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAE1E,MAAM,UAAU,GAAG,8BAA8B,CAAC;AAClD,MAAM,SAAS,GAAG,qCAAqC,CAAC;AAExD,MAAM,UAAU,cAAc,CAAC,IAAgB;IAC7C,MAAM,QAAQ,GAAc,EAAE,CAAC;IAC/B,IAAI,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,QAAQ,CAAC;IAC9C,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC;QAAE,OAAO,QAAQ,CAAC;IAE5D,MAAM,IAAI,GAAG,CACX,IAAY,EACZ,OAAe,EACf,IAAY,EACZ,QAA6B,EAC7B,OAAe,EACf,WAAmB,EACnB,GAAW,EACX,GAAW,EACX,EAAE,CACF,QAAQ,CAAC,IAAI,CAAC;QACZ,IAAI,EAAE,IAAI,CAAC,IAAI;QACf,IAAI;QACJ,QAAQ;QACR,IAAI;QACJ,OAAO;QACP,WAAW;QACX,GAAG;QACH,GAAG;QACH,OAAO,EAAE,OAAO,CAAC,IAAI,EAAE;KACxB,CAAC,CAAC;IAEL,QAAQ,CAAC,IAAI,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE;QAC9B,uCAAuC;QACvC,IAAI,qCAAqC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YAClF,IAAI,CACF,MAAM,EACN,IAAI,EACJ,iBAAiB,EACjB,SAAS,EACT,uCAAuC,EACvC,wGAAwG,EACxG,+EAA+E,EAC/E,UAAU,CACX,CAAC;QACJ,CAAC;QAED,yDAAyD;QACzD,IAAI,2BAA2B,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YAC3C,IAAI,CACF,MAAM,EACN,IAAI,EACJ,cAAc,EACd,OAAO,EACP,yDAAyD,EACzD,kEAAkE,EAClE,6CAA6C,EAC7C,UAAU,CACX,CAAC;QACJ,CAAC;QAED,sCAAsC;QACtC,IAAI,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YAChC,IAAI,CACF,MAAM,EACN,IAAI,EACJ,UAAU,EACV,OAAO,EACP,+BAA+B,EAC/B,4FAA4F,EAC5F,iDAAiD,EACjD,oCAAoC,CACrC,CAAC;QACJ,CAAC;QAED,uBAAuB;QACvB,IAAI,kBAAkB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YAClC,IAAI,CACF,MAAM,EACN,IAAI,EACJ,0BAA0B,EAC1B,OAAO,EACP,8BAA8B,EAC9B,uFAAuF,EACvF,iFAAiF,EACjF,UAAU,CACX,CAAC;QACJ,CAAC;QAED,wCAAwC;QACxC,MAAM,OAAO,GAAG,0BAA0B,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACtD,IAAI,OAAO,EAAE,CAAC;YACZ,IAAI,CACF,MAAM,EACN,IAAI,EACJ,iBAAiB,EACjB,OAAO,EACP,0BAA0B,OAAO,CAAC,CAAC,CAAC,mBAAmB,EACvD,oGAAoG,EACpG,6CAA6C,EAC7C,UAAU,CACX,CAAC;QACJ,CAAC;QAED,wDAAwD;QACxD,IAAI,gEAAgE,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YAChF,IAAI,CACF,MAAM,EACN,IAAI,EACJ,4BAA4B,EAC5B,OAAO,EACP,sDAAsD,EACtD,sIAAsI,EACtI,4FAA4F,EAC5F,UAAU,CACX,CAAC;QACJ,CAAC;QAED,6CAA6C;QAC7C,IAAI,0DAA0D,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YAC1E,IAAI,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,yBAAyB,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;gBACtF,IAAI,CACF,MAAM,EACN,IAAI,EACJ,qBAAqB,EACrB,OAAO,EACP,4DAA4D,EAC5D,iIAAiI,EACjI,kCAAkC,EAClC,SAAS,CACV,CAAC;YACJ,CAAC;QACH,CAAC;QAED,kCAAkC;QAClC,IAAI,wBAAwB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YACxC,IAAI,CACF,MAAM,EACN,IAAI,EACJ,yBAAyB,EACzB,OAAO,EACP,wCAAwC,EACxC,0HAA0H,EAC1H,mEAAmE,EACnE,SAAS,CACV,CAAC;QACJ,CAAC;QAED,IAAI,sBAAsB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YACtC,IAAI,CACF,MAAM,EACN,IAAI,EACJ,mBAAmB,EACnB,SAAS,EACT,mEAAmE,EACnE,2EAA2E,EAC3E,2DAA2D,EAC3D,SAAS,CACV,CAAC;QACJ,CAAC;QAED,qCAAqC;QACrC,IAAI,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YAC1B,IAAI,CACF,MAAM,EACN,IAAI,EACJ,WAAW,EACX,SAAS,EACT,2CAA2C,EAC3C,gGAAgG,EAChG,iFAAiF,EACjF,4BAA4B,CAC7B,CAAC;QACJ,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,OAAO,QAAQ,CAAC;AAClB,CAAC"}

package/dist/analyzers/types.d.ts

@@ -0,0 +1,41 @@
+/** Severity of a finding, ordered most-serious first when reported. */
+export type Severity = "blocker" | "serious" | "minor";
+/** A single rule violation, anchored to a location with a concrete fix. */
+export interface Finding {
+    /** Repo-relative path. */
+    file: string;
+    /** 1-indexed line. */
+    line: number;
+    severity: Severity;
+    /** Short kebab-case rule id, e.g. "observable-without-mainactor". */
+    rule: string;
+    /** One sentence stating the defect. */
+    message: string;
+    /** What goes wrong at runtime, concretely. */
+    consequence: string;
+    /** The specific change to make. */
+    fix: string;
+    /** Path into this repo's docs that explains the rule in full. */
+    doc: string;
+    /** The offending source line, trimmed. */
+    excerpt: string;
+}
+/** A Swift source file to analyze. */
+export interface SourceFile {
+    /** Repo-relative path. */
+    path: string;
+    content: string;
+}
+export type Analyzer = (file: SourceFile) => Finding[];
+/** Most severe first, then by file and line, so output is stable. */
+export declare function sortFindings(findings: Finding[]): Finding[];
+/**
+ * Files that legitimately do things app code must not — test doubles construct
+ * live-looking types, previews hardcode values. Excluding them is what keeps
+ * the signal-to-noise ratio high enough that the output is worth reading.
+ */
+export declare function isSupportFile(path: string): boolean;
+/** Strip `//` line comments so commented-out code is not reported. */
+export declare function stripComment(line: string): string;
+/** Walk lines with 1-indexed numbers, skipping comment-only content. */
+export declare function eachLine(file: SourceFile, visit: (line: string, number: number, raw: string) => void): void;

package/dist/analyzers/types.js

@@ -0,0 +1,47 @@
+const SEVERITY_ORDER = {
+    blocker: 0,
+    serious: 1,
+    minor: 2,
+};
+/** Most severe first, then by file and line, so output is stable. */
+export function sortFindings(findings) {
+    return [...findings].sort((a, b) => SEVERITY_ORDER[a.severity] - SEVERITY_ORDER[b.severity] ||
+        a.file.localeCompare(b.file) ||
+        a.line - b.line);
+}
+/**
+ * Files that legitimately do things app code must not — test doubles construct
+ * live-looking types, previews hardcode values. Excluding them is what keeps
+ * the signal-to-noise ratio high enough that the output is worth reading.
+ */
+export function isSupportFile(path) {
+    return /(Tests?|Mock\w*|Stub\w*|Fake\w*|Preview\w*|\w*Preview|Fixtures?)\.swift$/i.test(path);
+}
+/** Strip `//` line comments so commented-out code is not reported. */
+export function stripComment(line) {
+    const index = line.indexOf("//");
+    return index === -1 ? line : line.slice(0, index);
+}
+/** Walk lines with 1-indexed numbers, skipping comment-only content. */
+export function eachLine(file, visit) {
+    const lines = file.content.split("\n");
+    let inBlockComment = false;
+    for (let index = 0; index < lines.length; index += 1) {
+        const raw = lines[index];
+        if (inBlockComment) {
+            if (raw.includes("*/"))
+                inBlockComment = false;
+            continue;
+        }
+        if (raw.trimStart().startsWith("/*")) {
+            if (!raw.includes("*/"))
+                inBlockComment = true;
+            continue;
+        }
+        const code = stripComment(raw);
+        if (code.trim() === "")
+            continue;
+        visit(code, index + 1, raw);
+    }
+}
+//# sourceMappingURL=types.js.map

package/dist/analyzers/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/analyzers/types.ts"],"names":[],"mappings":"AAiCA,MAAM,cAAc,GAA6B;IAC/C,OAAO,EAAE,CAAC;IACV,OAAO,EAAE,CAAC;IACV,KAAK,EAAE,CAAC;CACT,CAAC;AAEF,qEAAqE;AACrE,MAAM,UAAU,YAAY,CAAC,QAAmB;IAC9C,OAAO,CAAC,GAAG,QAAQ,CAAC,CAAC,IAAI,CACvB,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CACP,cAAc,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,cAAc,CAAC,CAAC,CAAC,QAAQ,CAAC;QACvD,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC;QAC5B,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,IAAI,CAClB,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,aAAa,CAAC,IAAY;IACxC,OAAO,2EAA2E,CAAC,IAAI,CACrF,IAAI,CACL,CAAC;AACJ,CAAC;AAED,sEAAsE;AACtE,MAAM,UAAU,YAAY,CAAC,IAAY;IACvC,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IACjC,OAAO,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;AACpD,CAAC;AAED,wEAAwE;AACxE,MAAM,UAAU,QAAQ,CACtB,IAAgB,EAChB,KAA0D;IAE1D,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACvC,IAAI,cAAc,GAAG,KAAK,CAAC;IAE3B,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,KAAK,CAAC,MAAM,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;QACrD,MAAM,GAAG,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC;QAEzB,IAAI,cAAc,EAAE,CAAC;YACnB,IAAI,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC;gBAAE,cAAc,GAAG,KAAK,CAAC;YAC/C,SAAS;QACX,CAAC;QACD,IAAI,GAAG,CAAC,SAAS,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;YACrC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC;gBAAE,cAAc,GAAG,IAAI,CAAC;YAC/C,SAAS;QACX,CAAC;QAED,MAAM,IAAI,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC;QAC/B,IAAI,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE;YAAE,SAAS;QACjC,KAAK,CAAC,IAAI,EAAE,KAAK,GAAG,CAAC,EAAE,GAAG,CAAC,CAAC;IAC9B,CAAC;AACH,CAAC"}

package/dist/index.d.ts

@@ -0,0 +1,2 @@
+#!/usr/bin/env node
+export {};

package/dist/index.js

@@ -0,0 +1,238 @@
+#!/usr/bin/env node
+import { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
+import { StdioServerTransport } from "@modelcontextprotocol/sdk/server/stdio.js";
+import { z } from "zod";
+import { analyzeConcurrency } from "./analyzers/concurrency.js";
+import { analyzeArchitecture } from "./analyzers/architecture.js";
+import { analyzeSwiftUI } from "./analyzers/swiftui.js";
+import { analyzeAvailability } from "./analyzers/availability.js";
+import { analyzeAppStore, analyzeProjectLevelAppStore } from "./analyzers/appstore.js";
+import { readProjectContext, readSwiftFiles, resolveProjectRoot, summarizeProject, } from "./scan.js";
+import { renderFindings } from "./report.js";
+const VERSION = "1.0.0";
+/**
+ * Handle CLI flags before starting the stdio transport.
+ *
+ * Without this, `ios-agent-mcp --help` starts the server and blocks on stdin
+ * forever — indistinguishable from a hang, and the first thing someone tries
+ * after installing. MCP clients spawn the binary with no arguments, so this
+ * never interferes with normal operation.
+ */
+function handleCLIFlags(argv) {
+    if (argv.includes("--version") || argv.includes("-v")) {
+        process.stdout.write(`${VERSION}\n`);
+        return true;
+    }
+    if (argv.includes("--help") || argv.includes("-h")) {
+        process.stdout.write([
+            `ios-agent-mcp ${VERSION}`,
+            "",
+            "An MCP server that reviews Swift projects for iOS-specific defects.",
+            "",
+            "This is a Model Context Protocol server. It speaks JSON-RPC over stdio",
+            "and is meant to be launched by an MCP client, not run directly.",
+            "",
+            "USAGE",
+            "  ios-agent-mcp              Start the server (stdio transport)",
+            "  ios-agent-mcp --help       Show this message",
+            "  ios-agent-mcp --version    Print the version",
+            "",
+            "SETUP",
+            "  Claude Code     claude mcp add ios-agent -- npx -y ios-agent-mcp",
+            "  Claude Desktop  add to claude_desktop_config.json",
+            "  Cursor          add to .cursor/mcp.json",
+            "",
+            "TOOLS",
+            "  analyze_swift_project        Overview plus findings per category",
+            "  review_swift_concurrency     Actor isolation and Swift 6 concurrency",
+            "  review_swift_architecture    Layer boundaries and testability",
+            "  review_swiftui               Views, state, Dynamic Type, tokens",
+            "  check_availability_guards    Missing and over-restrictive @available",
+            "  audit_app_store_readiness    Purpose strings, privacy, accessibility",
+            "",
+            "Each tool takes one argument: an absolute path to a Swift project root.",
+            "",
+            "DOCS  https://github.com/Nagarjuna2997/ios-agent-skill/tree/main/docs/mcp",
+            "",
+        ].join("\n"));
+        return true;
+    }
+    return false;
+}
+if (handleCLIFlags(process.argv.slice(2))) {
+    process.exit(0);
+}
+const server = new McpServer({
+    name: "ios-agent-mcp",
+    version: VERSION,
+});
+const pathInput = {
+    path: z
+        .string()
+        .describe("Absolute path to the Swift project root (the folder containing Package.swift or the .xcodeproj)."),
+};
+/** Shared plumbing: resolve, scan, analyze, render — with real errors on bad input. */
+async function scanAndRender(path, title, analyze) {
+    try {
+        const root = await resolveProjectRoot(path);
+        const files = await readSwiftFiles(root);
+        if (files.length === 0) {
+            return {
+                content: [
+                    {
+                        type: "text",
+                        text: `No Swift files found under \`${root}\`.\n\nCheck the path points at the project root. Build directories (\`.build\`, \`DerivedData\`, \`Pods\`) are skipped deliberately.`,
+                    },
+                ],
+            };
+        }
+        const findings = await analyze(files);
+        return {
+            content: [{ type: "text", text: renderFindings(title, findings, files.length) }],
+        };
+    }
+    catch (error) {
+        return {
+            content: [
+                {
+                    type: "text",
+                    text: `Scan failed: ${error instanceof Error ? error.message : String(error)}`,
+                },
+            ],
+            isError: true,
+        };
+    }
+}
+server.registerTool("review_swift_concurrency", {
+    title: "Review Swift concurrency and actor isolation",
+    description: "Check a Swift project for Swift 6 concurrency and isolation defects: @Observable types missing @MainActor, Task.detached, DispatchQueue.main.async in async code, @unchecked Sendable, nonisolated(unsafe), unstructured Tasks in onAppear, empty catch blocks, and types named Task that shadow _Concurrency.Task. Use when reviewing Swift code, migrating to Swift 6, or diagnosing a data race.",
+    inputSchema: pathInput,
+}, async ({ path }) => scanAndRender(path, "Swift Concurrency Review", (files) => files.flatMap(analyzeConcurrency)));
+server.registerTool("review_swift_architecture", {
+    title: "Review iOS architecture boundaries",
+    description: "Check a Swift project for architecture and testability defects: dependencies defaulting to live implementations, the presentation layer naming concrete data-layer types (URLSession, APIClient, ModelContext), singletons resolved inside view models, the domain layer importing UI frameworks, nested NavigationStacks, and deprecated NavigationView. Use when reviewing MVVM or Clean Architecture code, or when a screen cannot be previewed without a network.",
+    inputSchema: pathInput,
+}, async ({ path }) => scanAndRender(path, "Architecture Review", (files) => files.flatMap(analyzeArchitecture)));
+server.registerTool("review_swiftui", {
+    title: "Review SwiftUI views and state",
+    description: "Check SwiftUI code for view and state defects: fixed font sizes and heights that break Dynamic Type, AnyView, deprecated .cornerRadius, literal spacing values instead of design tokens, materials applied over solid backgrounds, transient presentation state stored on models, legacy ObservableObject and @EnvironmentObject, and try!. Use when reviewing or building SwiftUI screens.",
+    inputSchema: pathInput,
+}, async ({ path }) => scanAndRender(path, "SwiftUI Review", (files) => files.flatMap(analyzeSwiftUI)));
+server.registerTool("check_availability_guards", {
+    title: "Check iOS availability guards",
+    description: "Verify that version-gated Apple APIs are guarded on the version where they were INTRODUCED rather than the newest SDK. Catches both missing guards and over-restrictive ones — for example Liquid Glass (iOS 26) guarded at iOS 27, which silently drops every iOS 26 device to the fallback. Also flags Foundation Models used without a runtime SystemLanguageModel.availability check. Use before shipping, or after bumping an SDK.",
+    inputSchema: pathInput,
+}, async ({ path }) => scanAndRender(path, "Availability Guard Check", (files) => files.flatMap(analyzeAvailability)));
+server.registerTool("audit_app_store_readiness", {
+    title: "Audit App Store submission readiness",
+    description: "Check a Swift project for issues that cause App Store rejection or runtime termination: permission-gated frameworks used without an Info.plist purpose string, a missing PrivacyInfo.xcprivacy manifest, unlocalized user-facing strings, icon-only buttons with no accessibility label, and print() used for logging. Use before submitting to App Review.",
+    inputSchema: pathInput,
+}, async ({ path }) => {
+    try {
+        const root = await resolveProjectRoot(path);
+        const [files, context] = await Promise.all([
+            readSwiftFiles(root),
+            readProjectContext(root),
+        ]);
+        const findings = [
+            ...analyzeProjectLevelAppStore(context),
+            ...files.flatMap((file) => analyzeAppStore(file, context)),
+        ];
+        return {
+            content: [
+                {
+                    type: "text",
+                    text: renderFindings("App Store Readiness Audit", findings, files.length),
+                },
+            ],
+        };
+    }
+    catch (error) {
+        return {
+            content: [
+                {
+                    type: "text",
+                    text: `Audit failed: ${error instanceof Error ? error.message : String(error)}`,
+                },
+            ],
+            isError: true,
+        };
+    }
+});
+server.registerTool("analyze_swift_project", {
+    title: "Analyze a Swift project",
+    description: "Produce an overview of a Swift project — file and line counts, deployment target, Swift tools version, frameworks in use, whether tests exist — together with a summary count of findings across every rule category (concurrency, architecture, SwiftUI, availability, App Store). Use this first when you are unfamiliar with a codebase, then run the focused tools on whichever category has findings.",
+    inputSchema: pathInput,
+}, async ({ path }) => {
+    try {
+        const root = await resolveProjectRoot(path);
+        const [files, context] = await Promise.all([
+            readSwiftFiles(root),
+            readProjectContext(root),
+        ]);
+        const summary = await summarizeProject(root, files);
+        const categories = {
+            Concurrency: files.flatMap(analyzeConcurrency),
+            Architecture: files.flatMap(analyzeArchitecture),
+            SwiftUI: files.flatMap(analyzeSwiftUI),
+            Availability: files.flatMap(analyzeAvailability),
+            "App Store": [
+                ...analyzeProjectLevelAppStore(context),
+                ...files.flatMap((file) => analyzeAppStore(file, context)),
+            ],
+        };
+        const lines = [
+            "# Swift Project Analysis",
+            "",
+            "## Structure",
+            "",
+            `- **Swift files:** ${summary.swiftFileCount}`,
+            `- **Lines:** ${summary.lineCount.toLocaleString()}`,
+            `- **Deployment target:** ${summary.deploymentTarget ? `iOS ${summary.deploymentTarget}` : "not detected"}`,
+            `- **Swift tools version:** ${summary.swiftToolsVersion ?? "not detected"}`,
+            `- **Package.swift:** ${summary.hasPackageSwift ? "yes" : "no"}`,
+            `- **Xcode project:** ${summary.hasXcodeProject ? "yes" : "no"}`,
+            `- **Test files:** ${summary.hasTests ? "found" : "**none found**"}`,
+            "",
+            `- **Frameworks:** ${summary.frameworks.slice(0, 25).join(", ") || "none detected"}`,
+            "",
+            "## Findings by category",
+            "",
+            "| Category | 🔴 Blocker | 🟠 Serious | 🟡 Minor | Tool |",
+            "|---|---:|---:|---:|---|",
+        ];
+        const toolFor = {
+            Concurrency: "review_swift_concurrency",
+            Architecture: "review_swift_architecture",
+            SwiftUI: "review_swiftui",
+            Availability: "check_availability_guards",
+            "App Store": "audit_app_store_readiness",
+        };
+        let total = 0;
+        for (const [name, findings] of Object.entries(categories)) {
+            const blocker = findings.filter((f) => f.severity === "blocker").length;
+            const serious = findings.filter((f) => f.severity === "serious").length;
+            const minor = findings.filter((f) => f.severity === "minor").length;
+            total += findings.length;
+            lines.push(`| ${name} | ${blocker} | ${serious} | ${minor} | \`${toolFor[name]}\` |`);
+        }
+        lines.push("", total === 0
+            ? "**No findings in any category.**"
+            : `**${total} findings total.** Run the tool in the right-hand column for details on any category.`, "", "---", "", "_Static analysis only. It cannot prove the app builds or behaves correctly — run `swift build` and `swift test` for that._");
+        return { content: [{ type: "text", text: lines.join("\n") }] };
+    }
+    catch (error) {
+        return {
+            content: [
+                {
+                    type: "text",
+                    text: `Analysis failed: ${error instanceof Error ? error.message : String(error)}`,
+                },
+            ],
+            isError: true,
+        };
+    }
+});
+const transport = new StdioServerTransport();
+await server.connect(transport);
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";AACA,OAAO,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AACpE,OAAO,EAAE,oBAAoB,EAAE,MAAM,2CAA2C,CAAC;AACjF,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAGxB,OAAO,EAAE,kBAAkB,EAAE,MAAM,4BAA4B,CAAC;AAChE,OAAO,EAAE,mBAAmB,EAAE,MAAM,6BAA6B,CAAC;AAClE,OAAO,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAC;AACxD,OAAO,EAAE,mBAAmB,EAAE,MAAM,6BAA6B,CAAC;AAClE,OAAO,EAAE,eAAe,EAAE,2BAA2B,EAAE,MAAM,yBAAyB,CAAC;AACvF,OAAO,EACL,kBAAkB,EAClB,cAAc,EACd,kBAAkB,EAClB,gBAAgB,GACjB,MAAM,WAAW,CAAC;AACnB,OAAO,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAE7C,MAAM,OAAO,GAAG,OAAO,CAAC;AAExB;;;;;;;GAOG;AACH,SAAS,cAAc,CAAC,IAAc;IACpC,IAAI,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QACtD,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,OAAO,IAAI,CAAC,CAAC;QACrC,OAAO,IAAI,CAAC;IACd,CAAC;IAED,IAAI,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QACnD,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB;YACE,iBAAiB,OAAO,EAAE;YAC1B,EAAE;YACF,qEAAqE;YACrE,EAAE;YACF,wEAAwE;YACxE,iEAAiE;YACjE,EAAE;YACF,OAAO;YACP,iEAAiE;YACjE,gDAAgD;YAChD,gDAAgD;YAChD,EAAE;YACF,OAAO;YACP,oEAAoE;YACpE,qDAAqD;YACrD,2CAA2C;YAC3C,EAAE;YACF,OAAO;YACP,oEAAoE;YACpE,wEAAwE;YACxE,iEAAiE;YACjE,mEAAmE;YACnE,wEAAwE;YACxE,wEAAwE;YACxE,EAAE;YACF,yEAAyE;YACzE,EAAE;YACF,2EAA2E;YAC3E,EAAE;SACH,CAAC,IAAI,CAAC,IAAI,CAAC,CACb,CAAC;QACF,OAAO,IAAI,CAAC;IACd,CAAC;IAED,OAAO,KAAK,CAAC;AACf,CAAC;AAED,IAAI,cAAc,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IAC1C,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC;AAED,MAAM,MAAM,GAAG,IAAI,SAAS,CAAC;IAC3B,IAAI,EAAE,eAAe;IACrB,OAAO,EAAE,OAAO;CACjB,CAAC,CAAC;AAEH,MAAM,SAAS,GAAG;IAChB,IAAI,EAAE,CAAC;SACJ,MAAM,EAAE;SACR,QAAQ,CAAC,kGAAkG,CAAC;CAChH,CAAC;AAEF,uFAAuF;AACvF,KAAK,UAAU,aAAa,CAC1B,IAAY,EACZ,KAAa,EACb,OAA8F;IAE9F,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,kBAAkB,CAAC,IAAI,CAAC,CAAC;QAC5C,MAAM,KAAK,GAAG,MAAM,cAAc,CAAC,IAAI,CAAC,CAAC;QAEzC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACvB,OAAO;gBACL,OAAO,EAAE;oBACP;wBACE,IAAI,EAAE,MAAM;wBACZ,IAAI,EAAE,gCAAgC,IAAI,uIAAuI;qBAClL;iBACF;aACF,CAAC;QACJ,CAAC;QAED,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,KAAK,CAAC,CAAC;QACtC,OAAO;YACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,cAAc,CAAC,KAAK,EAAE,QAAQ,EAAE,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC;SACjF,CAAC;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO;YACL,OAAO,EAAE;gBACP;oBACE,IAAI,EAAE,MAAM;oBACZ,IAAI,EAAE,gBAAgB,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE;iBAC/E;aACF;YACD,OAAO,EAAE,IAAI;SACd,CAAC;IACJ,CAAC;AACH,CAAC;AAED,MAAM,CAAC,YAAY,CACjB,0BAA0B,EAC1B;IACE,KAAK,EAAE,8CAA8C;IACrD,WAAW,EACT,qYAAqY;IACvY,WAAW,EAAE,SAAS;CACvB,EACD,KAAK,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,CACjB,aAAa,CAAC,IAAI,EAAE,0BAA0B,EAAE,CAAC,KAAK,EAAE,EAAE,CACxD,KAAK,CAAC,OAAO,CAAC,kBAAkB,CAAC,CAClC,CACJ,CAAC;AAEF,MAAM,CAAC,YAAY,CACjB,2BAA2B,EAC3B;IACE,KAAK,EAAE,oCAAoC;IAC3C,WAAW,EACT,ucAAuc;IACzc,WAAW,EAAE,SAAS;CACvB,EACD,KAAK,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,CACjB,aAAa,CAAC,IAAI,EAAE,qBAAqB,EAAE,CAAC,KAAK,EAAE,EAAE,CACnD,KAAK,CAAC,OAAO,CAAC,mBAAmB,CAAC,CACnC,CACJ,CAAC;AAEF,MAAM,CAAC,YAAY,CACjB,gBAAgB,EAChB;IACE,KAAK,EAAE,gCAAgC;IACvC,WAAW,EACT,6XAA6X;IAC/X,WAAW,EAAE,SAAS;CACvB,EACD,KAAK,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,CACjB,aAAa,CAAC,IAAI,EAAE,gBAAgB,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC,CAClF,CAAC;AAEF,MAAM,CAAC,YAAY,CACjB,2BAA2B,EAC3B;IACE,KAAK,EAAE,+BAA+B;IACtC,WAAW,EACT,yaAAya;IAC3a,WAAW,EAAE,SAAS;CACvB,EACD,KAAK,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,CACjB,aAAa,CAAC,IAAI,EAAE,0BAA0B,EAAE,CAAC,KAAK,EAAE,EAAE,CACxD,KAAK,CAAC,OAAO,CAAC,mBAAmB,CAAC,CACnC,CACJ,CAAC;AAEF,MAAM,CAAC,YAAY,CACjB,2BAA2B,EAC3B;IACE,KAAK,EAAE,sCAAsC;IAC7C,WAAW,EACT,6VAA6V;IAC/V,WAAW,EAAE,SAAS;CACvB,EACD,KAAK,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE;IACjB,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,kBAAkB,CAAC,IAAI,CAAC,CAAC;QAC5C,MAAM,CAAC,KAAK,EAAE,OAAO,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;YACzC,cAAc,CAAC,IAAI,CAAC;YACpB,kBAAkB,CAAC,IAAI,CAAC;SACzB,CAAC,CAAC;QACH,MAAM,QAAQ,GAAG;YACf,GAAG,2BAA2B,CAAC,OAAO,CAAC;YACvC,GAAG,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,eAAe,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;SAC3D,CAAC;QACF,OAAO;YACL,OAAO,EAAE;gBACP;oBACE,IAAI,EAAE,MAAe;oBACrB,IAAI,EAAE,cAAc,CAAC,2BAA2B,EAAE,QAAQ,EAAE,KAAK,CAAC,MAAM,CAAC;iBAC1E;aACF;SACF,CAAC;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO;YACL,OAAO,EAAE;gBACP;oBACE,IAAI,EAAE,MAAe;oBACrB,IAAI,EAAE,iBAAiB,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE;iBAChF;aACF;YACD,OAAO,EAAE,IAAI;SACd,CAAC;IACJ,CAAC;AACH,CAAC,CACF,CAAC;AAEF,MAAM,CAAC,YAAY,CACjB,uBAAuB,EACvB;IACE,KAAK,EAAE,yBAAyB;IAChC,WAAW,EACT,4YAA4Y;IAC9Y,WAAW,EAAE,SAAS;CACvB,EACD,KAAK,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE;IACjB,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,kBAAkB,CAAC,IAAI,CAAC,CAAC;QAC5C,MAAM,CAAC,KAAK,EAAE,OAAO,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;YACzC,cAAc,CAAC,IAAI,CAAC;YACpB,kBAAkB,CAAC,IAAI,CAAC;SACzB,CAAC,CAAC;QACH,MAAM,OAAO,GAAG,MAAM,gBAAgB,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;QAEpD,MAAM,UAAU,GAAG;YACjB,WAAW,EAAE,KAAK,CAAC,OAAO,CAAC,kBAAkB,CAAC;YAC9C,YAAY,EAAE,KAAK,CAAC,OAAO,CAAC,mBAAmB,CAAC;YAChD,OAAO,EAAE,KAAK,CAAC,OAAO,CAAC,cAAc,CAAC;YACtC,YAAY,EAAE,KAAK,CAAC,OAAO,CAAC,mBAAmB,CAAC;YAChD,WAAW,EAAE;gBACX,GAAG,2BAA2B,CAAC,OAAO,CAAC;gBACvC,GAAG,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,eAAe,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;aAC3D;SACF,CAAC;QAEF,MAAM,KAAK,GAAa;YACtB,0BAA0B;YAC1B,EAAE;YACF,cAAc;YACd,EAAE;YACF,sBAAsB,OAAO,CAAC,cAAc,EAAE;YAC9C,gBAAgB,OAAO,CAAC,SAAS,CAAC,cAAc,EAAE,EAAE;YACpD,4BAA4B,OAAO,CAAC,gBAAgB,CAAC,CAAC,CAAC,OAAO,OAAO,CAAC,gBAAgB,EAAE,CAAC,CAAC,CAAC,cAAc,EAAE;YAC3G,8BAA8B,OAAO,CAAC,iBAAiB,IAAI,cAAc,EAAE;YAC3E,wBAAwB,OAAO,CAAC,eAAe,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE;YAChE,wBAAwB,OAAO,CAAC,eAAe,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE;YAChE,qBAAqB,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,gBAAgB,EAAE;YACpE,EAAE;YACF,qBAAqB,OAAO,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,eAAe,EAAE;YACpF,EAAE;YACF,yBAAyB;YACzB,EAAE;YACF,0DAA0D;YAC1D,0BAA0B;SAC3B,CAAC;QAEF,MAAM,OAAO,GAA2B;YACtC,WAAW,EAAE,0BAA0B;YACvC,YAAY,EAAE,2BAA2B;YACzC,OAAO,EAAE,gBAAgB;YACzB,YAAY,EAAE,2BAA2B;YACzC,WAAW,EAAE,2BAA2B;SACzC,CAAC;QAEF,IAAI,KAAK,GAAG,CAAC,CAAC;QACd,KAAK,MAAM,CAAC,IAAI,EAAE,QAAQ,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,CAAC;YAC1D,MAAM,OAAO,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,MAAM,CAAC;YACxE,MAAM,OAAO,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,MAAM,CAAC;YACxE,MAAM,KAAK,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,MAAM,CAAC;YACpE,KAAK,IAAI,QAAQ,CAAC,MAAM,CAAC;YACzB,KAAK,CAAC,IAAI,CACR,KAAK,IAAI,MAAM,OAAO,MAAM,OAAO,MAAM,KAAK,QAAQ,OAAO,CAAC,IAAI,CAAC,MAAM,CAC1E,CAAC;QACJ,CAAC;QAED,KAAK,CAAC,IAAI,CACR,EAAE,EACF,KAAK,KAAK,CAAC;YACT,CAAC,CAAC,kCAAkC;YACpC,CAAC,CAAC,KAAK,KAAK,uFAAuF,EACrG,EAAE,EACF,KAAK,EACL,EAAE,EACF,4HAA4H,CAC7H,CAAC;QAEF,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC;IAC1E,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO;YACL,OAAO,EAAE;gBACP;oBACE,IAAI,EAAE,MAAe;oBACrB,IAAI,EAAE,oBAAoB,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE;iBACnF;aACF;YACD,OAAO,EAAE,IAAI;SACd,CAAC;IACJ,CAAC;AACH,CAAC,CACF,CAAC;AAEF,MAAM,SAAS,GAAG,IAAI,oBAAoB,EAAE,CAAC;AAC7C,MAAM,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC"}

package/dist/report.d.ts

@@ -0,0 +1,11 @@
+import { Finding } from "./analyzers/types.js";
+/**
+ * Render findings as readable markdown.
+ *
+ * Deliberately reports counts and the empty case explicitly: a report that says
+ * nothing is indistinguishable from a check that never ran. See
+ * docs/orchestration/verification.md.
+ */
+export declare function renderFindings(title: string, findings: Finding[], scanned: number, options?: {
+    limit?: number;
+}): string;

package/dist/report.js

@@ -0,0 +1,41 @@
+import { sortFindings } from "./analyzers/types.js";
+const ICON = {
+    blocker: "🔴",
+    serious: "🟠",
+    minor: "🟡",
+};
+/**
+ * Render findings as readable markdown.
+ *
+ * Deliberately reports counts and the empty case explicitly: a report that says
+ * nothing is indistinguishable from a check that never ran. See
+ * docs/orchestration/verification.md.
+ */
+export function renderFindings(title, findings, scanned, options = {}) {
+    const limit = options.limit ?? 50;
+    const sorted = sortFindings(findings);
+    const lines = [`# ${title}`, ""];
+    lines.push(`Scanned **${scanned}** Swift file${scanned === 1 ? "" : "s"}.`, "");
+    if (sorted.length === 0) {
+        lines.push("**No findings.** Every rule in this category passed.", "", "_This is a static check. It cannot verify behavior — run the build and the test suite for that._");
+        return lines.join("\n");
+    }
+    const counts = {
+        blocker: sorted.filter((f) => f.severity === "blocker").length,
+        serious: sorted.filter((f) => f.severity === "serious").length,
+        minor: sorted.filter((f) => f.severity === "minor").length,
+    };
+    lines.push(`**${sorted.length} finding${sorted.length === 1 ? "" : "s"}** — ` +
+        `🔴 ${counts.blocker} blocker · 🟠 ${counts.serious} serious · 🟡 ${counts.minor} minor`, "");
+    const shown = sorted.slice(0, limit);
+    for (const finding of shown) {
+        lines.push(`### ${ICON[finding.severity]} ${finding.file}:${finding.line} — ${finding.message}`, "", "```swift", finding.excerpt, "```", "", `**Why it matters:** ${finding.consequence}`, "", `**Fix:** ${finding.fix}`, "", `_Rule \`${finding.rule}\` · see \`${finding.doc}\`_`, "");
+    }
+    if (sorted.length > shown.length) {
+        lines.push(`_… and ${sorted.length - shown.length} more. Narrow the scan with \`path\` to see them._`, "");
+    }
+    lines.push("---", "", "_Static analysis only. It cannot prove the app builds or behaves correctly — " +
+        "run `swift build` and `swift test` for that._");
+    return lines.join("\n");
+}
+//# sourceMappingURL=report.js.map

package/dist/report.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"report.js","sourceRoot":"","sources":["../src/report.ts"],"names":[],"mappings":"AAAA,OAAO,EAAW,YAAY,EAAE,MAAM,sBAAsB,CAAC;AAE7D,MAAM,IAAI,GAAwC;IAChD,OAAO,EAAE,IAAI;IACb,OAAO,EAAE,IAAI;IACb,KAAK,EAAE,IAAI;CACZ,CAAC;AAEF;;;;;;GAMG;AACH,MAAM,UAAU,cAAc,CAC5B,KAAa,EACb,QAAmB,EACnB,OAAe,EACf,UAA8B,EAAE;IAEhC,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,IAAI,EAAE,CAAC;IAClC,MAAM,MAAM,GAAG,YAAY,CAAC,QAAQ,CAAC,CAAC;IACtC,MAAM,KAAK,GAAa,CAAC,KAAK,KAAK,EAAE,EAAE,EAAE,CAAC,CAAC;IAE3C,KAAK,CAAC,IAAI,CACR,aAAa,OAAO,gBAAgB,OAAO,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,GAAG,EAC/D,EAAE,CACH,CAAC;IAEF,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACxB,KAAK,CAAC,IAAI,CACR,sDAAsD,EACtD,EAAE,EACF,kGAAkG,CACnG,CAAC;QACF,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC1B,CAAC;IAED,MAAM,MAAM,GAAG;QACb,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,MAAM;QAC9D,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,MAAM;QAC9D,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,MAAM;KAC3D,CAAC;IAEF,KAAK,CAAC,IAAI,CACR,KAAK,MAAM,CAAC,MAAM,WAAW,MAAM,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,OAAO;QAChE,MAAM,MAAM,CAAC,OAAO,iBAAiB,MAAM,CAAC,OAAO,iBAAiB,MAAM,CAAC,KAAK,QAAQ,EAC1F,EAAE,CACH,CAAC;IAEF,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;IACrC,KAAK,MAAM,OAAO,IAAI,KAAK,EAAE,CAAC;QAC5B,KAAK,CAAC,IAAI,CACR,OAAO,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,OAAO,CAAC,IAAI,IAAI,OAAO,CAAC,IAAI,MAAM,OAAO,CAAC,OAAO,EAAE,EACpF,EAAE,EACF,UAAU,EACV,OAAO,CAAC,OAAO,EACf,KAAK,EACL,EAAE,EACF,uBAAuB,OAAO,CAAC,WAAW,EAAE,EAC5C,EAAE,EACF,YAAY,OAAO,CAAC,GAAG,EAAE,EACzB,EAAE,EACF,WAAW,OAAO,CAAC,IAAI,cAAc,OAAO,CAAC,GAAG,KAAK,EACrD,EAAE,CACH,CAAC;IACJ,CAAC;IAED,IAAI,MAAM,CAAC,MAAM,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC;QACjC,KAAK,CAAC,IAAI,CACR,UAAU,MAAM,CAAC,MAAM,GAAG,KAAK,CAAC,MAAM,oDAAoD,EAC1F,EAAE,CACH,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,IAAI,CACR,KAAK,EACL,EAAE,EACF,+EAA+E;QAC7E,+CAA+C,CAClD,CAAC;IAEF,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC"}

package/dist/scan.d.ts

@@ -0,0 +1,25 @@
+import { SourceFile } from "./analyzers/types.js";
+import { ProjectContext } from "./analyzers/appstore.js";
+/**
+ * Resolve and validate a project root.
+ *
+ * Rejects paths that do not exist or are not directories, so a typo produces a
+ * clear error rather than an empty, falsely-clean report.
+ */
+export declare function resolveProjectRoot(path: string): Promise<string>;
+/** Read every Swift source file under `root`, capped for safety. */
+export declare function readSwiftFiles(root: string): Promise<SourceFile[]>;
+/** Gather the project-level context the App Store checks need. */
+export declare function readProjectContext(root: string): Promise<ProjectContext>;
+export interface ProjectSummary {
+    swiftFileCount: number;
+    lineCount: number;
+    deploymentTarget: string | null;
+    swiftToolsVersion: string | null;
+    frameworks: string[];
+    hasTests: boolean;
+    hasPackageSwift: boolean;
+    hasXcodeProject: boolean;
+}
+/** A structural overview of the project, independent of rule violations. */
+export declare function summarizeProject(root: string, files: SourceFile[]): Promise<ProjectSummary>;