lintbase-mcp 0.1.0

package/dist/core/analysis.utils.d.ts

@@ -0,0 +1,13 @@
+import { LintBaseDocument, LintBaseScanResult } from '../types.js';
+export interface CollectionStats {
+    docs: LintBaseDocument[];
+    count: number;
+    totalBytes: number;
+    avgBytes: number;
+    maxDepth: number;
+}
+export declare function groupByCollection(result: LintBaseScanResult): Map<string, CollectionStats>;
+export interface AnalysisOptions {
+    limit: number;
+}
+//# sourceMappingURL=analysis.utils.d.ts.map

package/dist/core/analysis.utils.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"analysis.utils.d.ts","sourceRoot":"","sources":["../../src/core/analysis.utils.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,gBAAgB,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAC;AAEnE,MAAM,WAAW,eAAe;IAC5B,IAAI,EAAE,gBAAgB,EAAE,CAAC;IACzB,KAAK,EAAE,MAAM,CAAC;IACd,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;CACpB;AAED,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,kBAAkB,GAAG,GAAG,CAAC,MAAM,EAAE,eAAe,CAAC,CAiB1F;AAED,MAAM,WAAW,eAAe;IAC5B,KAAK,EAAE,MAAM,CAAC;CACjB"}

package/dist/core/analysis.utils.js

@@ -0,0 +1,22 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.groupByCollection = groupByCollection;
+function groupByCollection(result) {
+    const map = new Map();
+    for (const col of result.collections) {
+        map.set(col, { docs: [], count: 0, totalBytes: 0, avgBytes: 0, maxDepth: 0 });
+    }
+    for (const doc of result.documents) {
+        const existing = map.get(doc.collection) ?? { docs: [], count: 0, totalBytes: 0, avgBytes: 0, maxDepth: 0 };
+        existing.docs.push(doc);
+        existing.count++;
+        existing.totalBytes += doc.sizeBytes;
+        existing.maxDepth = Math.max(existing.maxDepth, doc.depth);
+        map.set(doc.collection, existing);
+    }
+    for (const [col, stats] of map.entries()) {
+        map.set(col, { ...stats, avgBytes: stats.count > 0 ? Math.round(stats.totalBytes / stats.count) : 0 });
+    }
+    return map;
+}
+//# sourceMappingURL=analysis.utils.js.map

package/dist/core/analysis.utils.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"analysis.utils.js","sourceRoot":"","sources":["../../src/core/analysis.utils.ts"],"names":[],"mappings":";;AAWA,8CAiBC;AAjBD,SAAgB,iBAAiB,CAAC,MAA0B;IACxD,MAAM,GAAG,GAAG,IAAI,GAAG,EAA2B,CAAC;IAC/C,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,WAAW,EAAE,CAAC;QACnC,GAAG,CAAC,GAAG,CAAC,GAAG,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,UAAU,EAAE,CAAC,EAAE,QAAQ,EAAE,CAAC,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC,CAAC;IAClF,CAAC;IACD,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,SAAS,EAAE,CAAC;QACjC,MAAM,QAAQ,GAAG,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,EAAE,IAAI,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,UAAU,EAAE,CAAC,EAAE,QAAQ,EAAE,CAAC,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC;QAC5G,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACxB,QAAQ,CAAC,KAAK,EAAE,CAAC;QACjB,QAAQ,CAAC,UAAU,IAAI,GAAG,CAAC,SAAS,CAAC;QACrC,QAAQ,CAAC,QAAQ,GAAG,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,QAAQ,EAAE,GAAG,CAAC,KAAK,CAAC,CAAC;QAC3D,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC;IACtC,CAAC;IACD,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,GAAG,CAAC,OAAO,EAAE,EAAE,CAAC;QACvC,GAAG,CAAC,GAAG,CAAC,GAAG,EAAE,EAAE,GAAG,KAAK,EAAE,QAAQ,EAAE,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,UAAU,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IAC3G,CAAC;IACD,OAAO,GAAG,CAAC;AACf,CAAC"}

package/dist/core/cost.analyzer.d.ts

@@ -0,0 +1,4 @@
+import { LintBaseIssue, LintBaseScanResult } from '../types.js';
+import { AnalysisOptions } from './analysis.utils.js';
+export declare function analyze(result: LintBaseScanResult, options: AnalysisOptions): LintBaseIssue[];
+//# sourceMappingURL=cost.analyzer.d.ts.map

package/dist/core/cost.analyzer.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cost.analyzer.d.ts","sourceRoot":"","sources":["../../src/core/cost.analyzer.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,aAAa,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAC;AAChE,OAAO,EAAqB,eAAe,EAAE,MAAM,qBAAqB,CAAC;AAMzE,wBAAgB,OAAO,CAAC,MAAM,EAAE,kBAAkB,EAAE,OAAO,EAAE,eAAe,GAAG,aAAa,EAAE,CAgD7F"}

package/dist/core/cost.analyzer.js

@@ -0,0 +1,60 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.analyze = analyze;
+const analysis_utils_js_1 = require("./analysis.utils.js");
+const ERROR_AVG_BYTES = 50 * 1024;
+const WARN_AVG_BYTES = 5 * 1024;
+const LOG_SINK_PATTERNS = [/^console/i, /^log[s]?$/i, /^audit/i, /^event[s]?$/i, /^request(get|post|put|delete|patch)$/i, /payload/i, /^trace[s]?$/i, /^webhook/i, /^analytics/i];
+function analyze(result, options) {
+    const issues = [];
+    const byCollection = (0, analysis_utils_js_1.groupByCollection)(result);
+    for (const [col, stats] of byCollection.entries()) {
+        if (stats.count === 0)
+            continue;
+        if (stats.avgBytes > ERROR_AVG_BYTES) {
+            issues.push({ severity: 'error', collection: col, rule: 'cost/large-avg-document', message: `"${col}" has an average document size of ${(stats.avgBytes / 1024).toFixed(1)} KB. At scale this will significantly increase read bandwidth costs.`, suggestion: 'Move large blob fields to Cloud Storage or a separate sub-collection.' });
+        }
+        else if (stats.avgBytes > WARN_AVG_BYTES) {
+            issues.push({ severity: 'warning', collection: col, rule: 'cost/large-avg-document', message: `"${col}" average document size is ${(stats.avgBytes / 1024).toFixed(1)} KB.`, suggestion: 'Consider splitting large documents or using sub-collections for frequently-updated sub-objects.' });
+        }
+    }
+    for (const [col] of byCollection.entries()) {
+        if (LOG_SINK_PATTERNS.some((re) => re.test(col))) {
+            issues.push({ severity: 'error', collection: col, rule: 'cost/logging-sink', message: `"${col}" appears to be used as a logging or event sink. Firestore charges per document write — unbounded logging will compound costs.`, suggestion: 'Use Cloud Logging, BigQuery, or a dedicated logging service instead.' });
+        }
+    }
+    const colList = [...byCollection.entries()].filter(([, s]) => s.count > 0);
+    const redundancyGroups = [];
+    const visited = new Set();
+    for (let i = 0; i < colList.length; i++) {
+        const [colA, statsA] = colList[i];
+        if (visited.has(colA))
+            continue;
+        const group = [colA];
+        for (let j = i + 1; j < colList.length; j++) {
+            const [colB, statsB] = colList[j];
+            if (visited.has(colB))
+                continue;
+            const byteRatio = statsA.avgBytes > 0 ? Math.abs(statsA.avgBytes - statsB.avgBytes) / statsA.avgBytes : 1;
+            if (byteRatio <= 0.15 && statsA.maxDepth === statsB.maxDepth && statsA.avgBytes > 0) {
+                group.push(colB);
+                visited.add(colB);
+            }
+        }
+        if (group.length > 1) {
+            redundancyGroups.push(group);
+            for (const c of group)
+                visited.add(c);
+        }
+    }
+    for (const group of redundancyGroups) {
+        issues.push({ severity: 'warning', collection: group[0], rule: 'cost/redundant-collections', message: `Collections [${group.map((c) => `"${c}"`).join(', ')}] have identical average document sizes and nesting depth — they likely store the same schema.`, suggestion: 'Merge redundant collections into one, using a "type" field to differentiate records.' });
+    }
+    for (const [col, stats] of byCollection.entries()) {
+        if (stats.count === options.limit) {
+            issues.push({ severity: 'info', collection: col, rule: 'cost/collection-at-limit', message: `"${col}" hit the ${options.limit}-document sampling cap — actual size is unknown.`, suggestion: `If this collection grows unbounded, set up a Cloud Function or cron job to archive or delete old documents.` });
+        }
+    }
+    return issues;
+}
+//# sourceMappingURL=cost.analyzer.js.map

package/dist/core/cost.analyzer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cost.analyzer.js","sourceRoot":"","sources":["../../src/core/cost.analyzer.ts"],"names":[],"mappings":";;AAQA,0BAgDC;AAtDD,2DAAyE;AAEzE,MAAM,eAAe,GAAG,EAAE,GAAG,IAAI,CAAC;AAClC,MAAM,cAAc,GAAG,CAAC,GAAG,IAAI,CAAC;AAChC,MAAM,iBAAiB,GAAG,CAAC,WAAW,EAAE,YAAY,EAAE,SAAS,EAAE,cAAc,EAAE,uCAAuC,EAAE,UAAU,EAAE,cAAc,EAAE,WAAW,EAAE,aAAa,CAAC,CAAC;AAElL,SAAgB,OAAO,CAAC,MAA0B,EAAE,OAAwB;IACxE,MAAM,MAAM,GAAoB,EAAE,CAAC;IACnC,MAAM,YAAY,GAAG,IAAA,qCAAiB,EAAC,MAAM,CAAC,CAAC;IAE/C,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,YAAY,CAAC,OAAO,EAAE,EAAE,CAAC;QAChD,IAAI,KAAK,CAAC,KAAK,KAAK,CAAC;YAAE,SAAS;QAChC,IAAI,KAAK,CAAC,QAAQ,GAAG,eAAe,EAAE,CAAC;YACnC,MAAM,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,OAAO,EAAE,UAAU,EAAE,GAAG,EAAE,IAAI,EAAE,yBAAyB,EAAE,OAAO,EAAE,IAAI,GAAG,qCAAqC,CAAC,KAAK,CAAC,QAAQ,GAAG,IAAI,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,sEAAsE,EAAE,UAAU,EAAE,uEAAuE,EAAE,CAAC,CAAC;QAC7U,CAAC;aAAM,IAAI,KAAK,CAAC,QAAQ,GAAG,cAAc,EAAE,CAAC;YACzC,MAAM,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,SAAS,EAAE,UAAU,EAAE,GAAG,EAAE,IAAI,EAAE,yBAAyB,EAAE,OAAO,EAAE,IAAI,GAAG,8BAA8B,CAAC,KAAK,CAAC,QAAQ,GAAG,IAAI,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,EAAE,UAAU,EAAE,iGAAiG,EAAE,CAAC,CAAC;QAClS,CAAC;IACL,CAAC;IAED,KAAK,MAAM,CAAC,GAAG,CAAC,IAAI,YAAY,CAAC,OAAO,EAAE,EAAE,CAAC;QACzC,IAAI,iBAAiB,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC;YAC/C,MAAM,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,OAAO,EAAE,UAAU,EAAE,GAAG,EAAE,IAAI,EAAE,mBAAmB,EAAE,OAAO,EAAE,IAAI,GAAG,gIAAgI,EAAE,UAAU,EAAE,sEAAsE,EAAE,CAAC,CAAC;QACzT,CAAC;IACL,CAAC;IAED,MAAM,OAAO,GAAG,CAAC,GAAG,YAAY,CAAC,OAAO,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC;IAC3E,MAAM,gBAAgB,GAAe,EAAE,CAAC;IACxC,MAAM,OAAO,GAAG,IAAI,GAAG,EAAU,CAAC;IAClC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACtC,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,GAAG,OAAO,CAAC,CAAC,CAAE,CAAC;QACnC,IAAI,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC;YAAE,SAAS;QAChC,MAAM,KAAK,GAAa,CAAC,IAAI,CAAC,CAAC;QAC/B,KAAK,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YAC1C,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,GAAG,OAAO,CAAC,CAAC,CAAE,CAAC;YACnC,IAAI,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC;gBAAE,SAAS;YAChC,MAAM,SAAS,GAAG,MAAM,CAAC,QAAQ,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC,GAAG,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;YAC1G,IAAI,SAAS,IAAI,IAAI,IAAI,MAAM,CAAC,QAAQ,KAAK,MAAM,CAAC,QAAQ,IAAI,MAAM,CAAC,QAAQ,GAAG,CAAC,EAAE,CAAC;gBAClF,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBACjB,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YACtB,CAAC;QACL,CAAC;QACD,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAAC,gBAAgB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YAAC,KAAK,MAAM,CAAC,IAAI,KAAK;gBAAE,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;QAAC,CAAC;IAClG,CAAC;IACD,KAAK,MAAM,KAAK,IAAI,gBAAgB,EAAE,CAAC;QACnC,MAAM,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,SAAS,EAAE,UAAU,EAAE,KAAK,CAAC,CAAC,CAAE,EAAE,IAAI,EAAE,4BAA4B,EAAE,OAAO,EAAE,gBAAgB,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,gGAAgG,EAAE,UAAU,EAAE,sFAAsF,EAAE,CAAC,CAAC;IACxW,CAAC;IAED,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,YAAY,CAAC,OAAO,EAAE,EAAE,CAAC;QAChD,IAAI,KAAK,CAAC,KAAK,KAAK,OAAO,CAAC,KAAK,EAAE,CAAC;YAChC,MAAM,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,MAAM,EAAE,UAAU,EAAE,GAAG,EAAE,IAAI,EAAE,0BAA0B,EAAE,OAAO,EAAE,IAAI,GAAG,aAAa,OAAO,CAAC,KAAK,kDAAkD,EAAE,UAAU,EAAE,6GAA6G,EAAE,CAAC,CAAC;QAClT,CAAC;IACL,CAAC;IAED,OAAO,MAAM,CAAC;AAClB,CAAC"}

package/dist/core/performance.analyzer.d.ts

@@ -0,0 +1,4 @@
+import { LintBaseIssue, LintBaseScanResult } from '../types.js';
+import { AnalysisOptions } from './analysis.utils.js';
+export declare function analyze(result: LintBaseScanResult, options: AnalysisOptions): LintBaseIssue[];
+//# sourceMappingURL=performance.analyzer.d.ts.map

package/dist/core/performance.analyzer.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"performance.analyzer.d.ts","sourceRoot":"","sources":["../../src/core/performance.analyzer.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,aAAa,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAC;AAChE,OAAO,EAAqB,eAAe,EAAE,MAAM,qBAAqB,CAAC;AAQzE,wBAAgB,OAAO,CAAC,MAAM,EAAE,kBAAkB,EAAE,OAAO,EAAE,eAAe,GAAG,aAAa,EAAE,CA8B7F"}

package/dist/core/performance.analyzer.js

@@ -0,0 +1,39 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.analyze = analyze;
+const analysis_utils_js_1 = require("./analysis.utils.js");
+const MAX_RECOMMENDED_DEPTH = 5;
+const WARN_DEPTH = 3;
+const ERROR_SIZE_BYTES = 500 * 1024;
+const WARN_SIZE_BYTES = 50 * 1024;
+const WARN_AVG_BYTES = 100 * 1024;
+function analyze(result, options) {
+    const issues = [];
+    const byCollection = (0, analysis_utils_js_1.groupByCollection)(result);
+    for (const [col, stats] of byCollection.entries()) {
+        if (stats.count === 0)
+            continue;
+        if (stats.maxDepth > MAX_RECOMMENDED_DEPTH) {
+            issues.push({ severity: 'error', collection: col, rule: 'perf/excessive-nesting', message: `"${col}" contains documents nested ${stats.maxDepth} levels deep (recommended max: ${MAX_RECOMMENDED_DEPTH}).`, affectedDocuments: stats.docs.filter((d) => d.depth > MAX_RECOMMENDED_DEPTH).map((d) => d.id).slice(0, 5), suggestion: 'Flatten deeply nested objects into separate sub-collections or top-level fields.' });
+        }
+        else if (stats.maxDepth > WARN_DEPTH) {
+            issues.push({ severity: 'warning', collection: col, rule: 'perf/excessive-nesting', message: `"${col}" documents reach a nesting depth of ${stats.maxDepth}. Consider keeping nesting ≤ ${WARN_DEPTH} for optimal query performance.`, affectedDocuments: stats.docs.filter((d) => d.depth > WARN_DEPTH).map((d) => d.id).slice(0, 5), suggestion: 'Deep nesting makes composite indexes necessary and increases document read cost.' });
+        }
+        const oversizedDocs = stats.docs.filter((d) => d.sizeBytes > ERROR_SIZE_BYTES);
+        const largeDocs = stats.docs.filter((d) => d.sizeBytes > WARN_SIZE_BYTES && d.sizeBytes <= ERROR_SIZE_BYTES);
+        if (oversizedDocs.length > 0) {
+            issues.push({ severity: 'error', collection: col, rule: 'perf/document-too-large', message: `${oversizedDocs.length} document(s) in "${col}" exceed 500 KB. Largest: ${Math.round(oversizedDocs[0].sizeBytes / 1024)} KB.`, affectedDocuments: oversizedDocs.map((d) => d.id).slice(0, 5), suggestion: 'Split large documents or move blob data to Cloud Storage.' });
+        }
+        if (largeDocs.length > 0) {
+            issues.push({ severity: 'warning', collection: col, rule: 'perf/document-too-large', message: `${largeDocs.length} document(s) in "${col}" are between 50 KB and 500 KB.`, affectedDocuments: largeDocs.map((d) => d.id).slice(0, 5), suggestion: 'Large documents increase read latency and bandwidth cost.' });
+        }
+        if (stats.avgBytes > WARN_AVG_BYTES) {
+            issues.push({ severity: 'warning', collection: col, rule: 'perf/avg-document-large', message: `"${col}" has an average document size of ${Math.round(stats.avgBytes / 1024)} KB.`, suggestion: 'Consider pagination, partial reads, or moving large fields to a sub-collection.' });
+        }
+        if (stats.count === options.limit) {
+            issues.push({ severity: 'info', collection: col, rule: 'perf/sampling-limit-reached', message: `"${col}" returned exactly ${options.limit} documents — the sampling limit. This collection likely has more data.`, suggestion: `Run with a higher sampleSize for a more complete picture of "${col}".` });
+        }
+    }
+    return issues;
+}
+//# sourceMappingURL=performance.analyzer.js.map

package/dist/core/performance.analyzer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"performance.analyzer.js","sourceRoot":"","sources":["../../src/core/performance.analyzer.ts"],"names":[],"mappings":";;AAUA,0BA8BC;AAtCD,2DAAyE;AAEzE,MAAM,qBAAqB,GAAG,CAAC,CAAC;AAChC,MAAM,UAAU,GAAG,CAAC,CAAC;AACrB,MAAM,gBAAgB,GAAG,GAAG,GAAG,IAAI,CAAC;AACpC,MAAM,eAAe,GAAG,EAAE,GAAG,IAAI,CAAC;AAClC,MAAM,cAAc,GAAG,GAAG,GAAG,IAAI,CAAC;AAElC,SAAgB,OAAO,CAAC,MAA0B,EAAE,OAAwB;IACxE,MAAM,MAAM,GAAoB,EAAE,CAAC;IACnC,MAAM,YAAY,GAAG,IAAA,qCAAiB,EAAC,MAAM,CAAC,CAAC;IAE/C,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,YAAY,CAAC,OAAO,EAAE,EAAE,CAAC;QAChD,IAAI,KAAK,CAAC,KAAK,KAAK,CAAC;YAAE,SAAS;QAEhC,IAAI,KAAK,CAAC,QAAQ,GAAG,qBAAqB,EAAE,CAAC;YACzC,MAAM,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,OAAO,EAAE,UAAU,EAAE,GAAG,EAAE,IAAI,EAAE,wBAAwB,EAAE,OAAO,EAAE,IAAI,GAAG,+BAA+B,KAAK,CAAC,QAAQ,kCAAkC,qBAAqB,IAAI,EAAE,iBAAiB,EAAE,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,GAAG,qBAAqB,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,UAAU,EAAE,kFAAkF,EAAE,CAAC,CAAC;QAC7Z,CAAC;aAAM,IAAI,KAAK,CAAC,QAAQ,GAAG,UAAU,EAAE,CAAC;YACrC,MAAM,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,SAAS,EAAE,UAAU,EAAE,GAAG,EAAE,IAAI,EAAE,wBAAwB,EAAE,OAAO,EAAE,IAAI,GAAG,wCAAwC,KAAK,CAAC,QAAQ,gCAAgC,UAAU,iCAAiC,EAAE,iBAAiB,EAAE,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,GAAG,UAAU,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,UAAU,EAAE,kFAAkF,EAAE,CAAC,CAAC;QAC7a,CAAC;QAED,MAAM,aAAa,GAAG,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,GAAG,gBAAgB,CAAC,CAAC;QAC/E,MAAM,SAAS,GAAG,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,GAAG,eAAe,IAAI,CAAC,CAAC,SAAS,IAAI,gBAAgB,CAAC,CAAC;QAE7G,IAAI,aAAa,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC3B,MAAM,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,OAAO,EAAE,UAAU,EAAE,GAAG,EAAE,IAAI,EAAE,yBAAyB,EAAE,OAAO,EAAE,GAAG,aAAa,CAAC,MAAM,oBAAoB,GAAG,6BAA6B,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC,CAAE,CAAC,SAAS,GAAG,IAAI,CAAC,MAAM,EAAE,iBAAiB,EAAE,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,UAAU,EAAE,2DAA2D,EAAE,CAAC,CAAC;QAC3W,CAAC;QACD,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACvB,MAAM,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,SAAS,EAAE,UAAU,EAAE,GAAG,EAAE,IAAI,EAAE,yBAAyB,EAAE,OAAO,EAAE,GAAG,SAAS,CAAC,MAAM,oBAAoB,GAAG,iCAAiC,EAAE,iBAAiB,EAAE,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,UAAU,EAAE,2DAA2D,EAAE,CAAC,CAAC;QACrT,CAAC;QACD,IAAI,KAAK,CAAC,QAAQ,GAAG,cAAc,EAAE,CAAC;YAClC,MAAM,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,SAAS,EAAE,UAAU,EAAE,GAAG,EAAE,IAAI,EAAE,yBAAyB,EAAE,OAAO,EAAE,IAAI,GAAG,qCAAqC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,QAAQ,GAAG,IAAI,CAAC,MAAM,EAAE,UAAU,EAAE,iFAAiF,EAAE,CAAC,CAAC;QACxR,CAAC;QACD,IAAI,KAAK,CAAC,KAAK,KAAK,OAAO,CAAC,KAAK,EAAE,CAAC;YAChC,MAAM,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,MAAM,EAAE,UAAU,EAAE,GAAG,EAAE,IAAI,EAAE,6BAA6B,EAAE,OAAO,EAAE,IAAI,GAAG,sBAAsB,OAAO,CAAC,KAAK,wEAAwE,EAAE,UAAU,EAAE,gEAAgE,GAAG,IAAI,EAAE,CAAC,CAAC;QAC9S,CAAC;IACL,CAAC;IACD,OAAO,MAAM,CAAC;AAClB,CAAC"}

package/dist/core/schema-drift.analyzer.d.ts

@@ -0,0 +1,4 @@
+import { LintBaseIssue, LintBaseScanResult } from '../types.js';
+import { AnalysisOptions } from './analysis.utils.js';
+export declare function analyze(result: LintBaseScanResult, _options: AnalysisOptions): LintBaseIssue[];
+//# sourceMappingURL=schema-drift.analyzer.d.ts.map

package/dist/core/schema-drift.analyzer.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"schema-drift.analyzer.d.ts","sourceRoot":"","sources":["../../src/core/schema-drift.analyzer.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,aAAa,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAC;AAChE,OAAO,EAAqB,eAAe,EAAE,MAAM,qBAAqB,CAAC;AAEzE,wBAAgB,OAAO,CAAC,MAAM,EAAE,kBAAkB,EAAE,QAAQ,EAAE,eAAe,GAAG,aAAa,EAAE,CAkD9F"}

package/dist/core/schema-drift.analyzer.js

@@ -0,0 +1,52 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.analyze = analyze;
+const analysis_utils_js_1 = require("./analysis.utils.js");
+function analyze(result, _options) {
+    const issues = [];
+    const byCollection = (0, analysis_utils_js_1.groupByCollection)(result);
+    for (const [col, stats] of byCollection.entries()) {
+        if (stats.count === 0) {
+            issues.push({ severity: 'info', collection: col, rule: 'schema/empty-collection', message: `No documents were sampled from "${col}" — schema cannot be analysed.`, suggestion: 'Ensure the collection contains data or check Firestore security rules.' });
+            continue;
+        }
+        const fieldTypes = new Map();
+        const fieldCounts = new Map();
+        const fieldCountsPerDoc = [];
+        for (const doc of stats.docs) {
+            let docFieldCount = 0;
+            for (const [field, { type }] of Object.entries(doc.fields)) {
+                docFieldCount++;
+                if (!fieldTypes.has(field))
+                    fieldTypes.set(field, new Set());
+                fieldTypes.get(field).add(type);
+                fieldCounts.set(field, (fieldCounts.get(field) ?? 0) + 1);
+            }
+            fieldCountsPerDoc.push(docFieldCount);
+        }
+        for (const [field, types] of fieldTypes.entries()) {
+            if (types.size > 1) {
+                issues.push({ severity: 'error', collection: col, rule: 'schema/field-type-mismatch', message: `Field "${field}" in "${col}" has ${types.size} different types: [${[...types].join(', ')}].`, suggestion: 'Normalise this field to a single type. Schema drift makes queries unreliable and is hard to fix at scale.' });
+            }
+        }
+        const presence60 = stats.count * 0.6;
+        const presence80 = stats.count * 0.8;
+        for (const [field, count] of fieldCounts.entries()) {
+            if (count < presence60) {
+                issues.push({ severity: 'warning', collection: col, rule: 'schema/sparse-field', message: `Field "${field}" in "${col}" is present in only ${count}/${stats.count} documents (${Math.round((count / stats.count) * 100)}%).`, suggestion: 'Consider adding a default value or marking it as optional in your application model to prevent runtime null errors.' });
+            }
+            else if (count < presence80) {
+                issues.push({ severity: 'info', collection: col, rule: 'schema/sparse-field', message: `Field "${field}" in "${col}" is present in ${count}/${stats.count} documents (${Math.round((count / stats.count) * 100)}%).`, suggestion: 'Track optional fields explicitly in your data model to avoid unexpected undefined reads.' });
+            }
+        }
+        if (fieldCountsPerDoc.length > 1) {
+            const min = Math.min(...fieldCountsPerDoc);
+            const max = Math.max(...fieldCountsPerDoc);
+            if (max > 0 && max - min > Math.max(3, min * 0.5)) {
+                issues.push({ severity: 'warning', collection: col, rule: 'schema/high-field-variance', message: `Documents in "${col}" have between ${min} and ${max} fields — high structural variance.`, suggestion: 'High field variance is a sign of schema drift over time. Consider a migration or schema validation layer.' });
+            }
+        }
+    }
+    return issues;
+}
+//# sourceMappingURL=schema-drift.analyzer.js.map

package/dist/core/schema-drift.analyzer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"schema-drift.analyzer.js","sourceRoot":"","sources":["../../src/core/schema-drift.analyzer.ts"],"names":[],"mappings":";;AAIA,0BAkDC;AApDD,2DAAyE;AAEzE,SAAgB,OAAO,CAAC,MAA0B,EAAE,QAAyB;IACzE,MAAM,MAAM,GAAoB,EAAE,CAAC;IACnC,MAAM,YAAY,GAAG,IAAA,qCAAiB,EAAC,MAAM,CAAC,CAAC;IAE/C,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,YAAY,CAAC,OAAO,EAAE,EAAE,CAAC;QAChD,IAAI,KAAK,CAAC,KAAK,KAAK,CAAC,EAAE,CAAC;YACpB,MAAM,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,MAAM,EAAE,UAAU,EAAE,GAAG,EAAE,IAAI,EAAE,yBAAyB,EAAE,OAAO,EAAE,mCAAmC,GAAG,gCAAgC,EAAE,UAAU,EAAE,wEAAwE,EAAE,CAAC,CAAC;YAC3P,SAAS;QACb,CAAC;QAED,MAAM,UAAU,GAAG,IAAI,GAAG,EAAuB,CAAC;QAClD,MAAM,WAAW,GAAG,IAAI,GAAG,EAAkB,CAAC;QAC9C,MAAM,iBAAiB,GAAa,EAAE,CAAC;QAEvC,KAAK,MAAM,GAAG,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC;YAC3B,IAAI,aAAa,GAAG,CAAC,CAAC;YACtB,KAAK,MAAM,CAAC,KAAK,EAAE,EAAE,IAAI,EAAE,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;gBACzD,aAAa,EAAE,CAAC;gBAChB,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC;oBAAE,UAAU,CAAC,GAAG,CAAC,KAAK,EAAE,IAAI,GAAG,EAAE,CAAC,CAAC;gBAC7D,UAAU,CAAC,GAAG,CAAC,KAAK,CAAE,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;gBACjC,WAAW,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC,WAAW,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;YAC9D,CAAC;YACD,iBAAiB,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;QAC1C,CAAC;QAED,KAAK,MAAM,CAAC,KAAK,EAAE,KAAK,CAAC,IAAI,UAAU,CAAC,OAAO,EAAE,EAAE,CAAC;YAChD,IAAI,KAAK,CAAC,IAAI,GAAG,CAAC,EAAE,CAAC;gBACjB,MAAM,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,OAAO,EAAE,UAAU,EAAE,GAAG,EAAE,IAAI,EAAE,4BAA4B,EAAE,OAAO,EAAE,UAAU,KAAK,SAAS,GAAG,SAAS,KAAK,CAAC,IAAI,sBAAsB,CAAC,GAAG,KAAK,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,UAAU,EAAE,2GAA2G,EAAE,CAAC,CAAC;YAC7T,CAAC;QACL,CAAC;QAED,MAAM,UAAU,GAAG,KAAK,CAAC,KAAK,GAAG,GAAG,CAAC;QACrC,MAAM,UAAU,GAAG,KAAK,CAAC,KAAK,GAAG,GAAG,CAAC;QACrC,KAAK,MAAM,CAAC,KAAK,EAAE,KAAK,CAAC,IAAI,WAAW,CAAC,OAAO,EAAE,EAAE,CAAC;YACjD,IAAI,KAAK,GAAG,UAAU,EAAE,CAAC;gBACrB,MAAM,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,SAAS,EAAE,UAAU,EAAE,GAAG,EAAE,IAAI,EAAE,qBAAqB,EAAE,OAAO,EAAE,UAAU,KAAK,SAAS,GAAG,wBAAwB,KAAK,IAAI,KAAK,CAAC,KAAK,eAAe,IAAI,CAAC,KAAK,CAAC,CAAC,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,GAAG,CAAC,KAAK,EAAE,UAAU,EAAE,qHAAqH,EAAE,CAAC,CAAC;YACvW,CAAC;iBAAM,IAAI,KAAK,GAAG,UAAU,EAAE,CAAC;gBAC5B,MAAM,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,MAAM,EAAE,UAAU,EAAE,GAAG,EAAE,IAAI,EAAE,qBAAqB,EAAE,OAAO,EAAE,UAAU,KAAK,SAAS,GAAG,mBAAmB,KAAK,IAAI,KAAK,CAAC,KAAK,eAAe,IAAI,CAAC,KAAK,CAAC,CAAC,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,GAAG,CAAC,KAAK,EAAE,UAAU,EAAE,0FAA0F,EAAE,CAAC,CAAC;YACpU,CAAC;QACL,CAAC;QAED,IAAI,iBAAiB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC/B,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,iBAAiB,CAAC,CAAC;YAC3C,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,iBAAiB,CAAC,CAAC;YAC3C,IAAI,GAAG,GAAG,CAAC,IAAI,GAAG,GAAG,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,GAAG,GAAG,GAAG,CAAC,EAAE,CAAC;gBAChD,MAAM,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,SAAS,EAAE,UAAU,EAAE,GAAG,EAAE,IAAI,EAAE,4BAA4B,EAAE,OAAO,EAAE,iBAAiB,GAAG,kBAAkB,GAAG,QAAQ,GAAG,qCAAqC,EAAE,UAAU,EAAE,2GAA2G,EAAE,CAAC,CAAC;YAC3T,CAAC;QACL,CAAC;IACL,CAAC;IACD,OAAO,MAAM,CAAC;AAClB,CAAC"}

package/dist/core/security.analyzer.d.ts

@@ -0,0 +1,4 @@
+import { LintBaseIssue, LintBaseScanResult } from '../types.js';
+import { AnalysisOptions } from './analysis.utils.js';
+export declare function analyze(result: LintBaseScanResult, _options: AnalysisOptions): LintBaseIssue[];
+//# sourceMappingURL=security.analyzer.d.ts.map

package/dist/core/security.analyzer.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"security.analyzer.d.ts","sourceRoot":"","sources":["../../src/core/security.analyzer.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,aAAa,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAC;AAChE,OAAO,EAAqB,eAAe,EAAE,MAAM,qBAAqB,CAAC;AAOzE,wBAAgB,OAAO,CAAC,MAAM,EAAE,kBAAkB,EAAE,QAAQ,EAAE,eAAe,GAAG,aAAa,EAAE,CAgC9F"}

package/dist/core/security.analyzer.js

@@ -0,0 +1,40 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.analyze = analyze;
+const analysis_utils_js_1 = require("./analysis.utils.js");
+const SENSITIVE_PATTERNS = [/^bank/i, /credit/i, /payment/i, /invoice/i, /billing/i, /ssn/i, /passport/i, /secret/i, /password/i, /private/i, /token/i, /api.?key/i, /credential/i, /account.?info/i];
+const DEBUG_PATTERNS = [/^console/i, /^log[s]?$/i, /^debug/i, /^test/i, /^temp/i, /^request(get|post|put|delete|patch)$/i, /payload/i, /webhook\s*log/i, /^dev/i];
+const SENSITIVE_FIELD_PATTERNS = [/\bpassword\b/i, /\bpasswd\b/i, /\bsecret\b/i, /\bapi[_-]?key\b/i, /\bprivate[_-]?key\b/i, /\btoken\b/i, /\bssn\b/i, /\bcredit[_-]?card\b/i, /\bcvv\b/i, /\b(card[_-]?)?pin\b/i];
+const AUTH_COLLECTION_NAMES = /^(users?|accounts?|membres?|members?)$/i;
+function analyze(result, _options) {
+    const issues = [];
+    const byCollection = (0, analysis_utils_js_1.groupByCollection)(result);
+    for (const [col, stats] of byCollection.entries()) {
+        const matchedSensitive = SENSITIVE_PATTERNS.find((re) => re.test(col));
+        if (matchedSensitive) {
+            issues.push({ severity: 'error', collection: col, rule: 'security/sensitive-collection', message: `Collection "${col}" appears to store sensitive data (matched pattern: ${matchedSensitive}).`, suggestion: 'Verify that Firestore Security Rules restrict read access to authenticated users only.' });
+        }
+        const matchedDebug = DEBUG_PATTERNS.find((re) => re.test(col));
+        if (matchedDebug) {
+            issues.push({ severity: 'error', collection: col, rule: 'security/debug-data-in-production', message: `Collection "${col}" looks like debug or test data left in production.`, suggestion: 'Delete or archive this collection. Debug data in production is a security and cost risk.' });
+        }
+        if (AUTH_COLLECTION_NAMES.test(col) && stats.count < 3 && stats.avgBytes < 50) {
+            issues.push({ severity: 'warning', collection: col, rule: 'security/stub-auth-collection', message: `"${col}" looks like an auth/user collection but contains very few, tiny documents (${stats.count} docs, avg ${stats.avgBytes} bytes).`, suggestion: 'Confirm whether user data is stored here or in Firebase Auth. Orphaned collections should be removed.' });
+        }
+        if (stats.count === 0)
+            continue;
+        const allFieldNames = new Set();
+        for (const doc of stats.docs) {
+            for (const field of Object.keys(doc.fields))
+                allFieldNames.add(field);
+        }
+        for (const field of allFieldNames) {
+            const matchedField = SENSITIVE_FIELD_PATTERNS.find((re) => re.test(field));
+            if (matchedField) {
+                issues.push({ severity: 'error', collection: col, rule: 'security/field-contains-secret', message: `Field "${field}" in "${col}" has a name that suggests it stores a secret or PII value.`, suggestion: 'Never store raw passwords, tokens, or PII in Firestore. Hash passwords, use Firebase Auth for credentials.' });
+            }
+        }
+    }
+    return issues;
+}
+//# sourceMappingURL=security.analyzer.js.map

package/dist/core/security.analyzer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"security.analyzer.js","sourceRoot":"","sources":["../../src/core/security.analyzer.ts"],"names":[],"mappings":";;AASA,0BAgCC;AAvCD,2DAAyE;AAEzE,MAAM,kBAAkB,GAAG,CAAC,QAAQ,EAAE,SAAS,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,EAAE,WAAW,EAAE,SAAS,EAAE,WAAW,EAAE,UAAU,EAAE,QAAQ,EAAE,WAAW,EAAE,aAAa,EAAE,gBAAgB,CAAC,CAAC;AACtM,MAAM,cAAc,GAAG,CAAC,WAAW,EAAE,YAAY,EAAE,SAAS,EAAE,QAAQ,EAAE,QAAQ,EAAE,uCAAuC,EAAE,UAAU,EAAE,gBAAgB,EAAE,OAAO,CAAC,CAAC;AAClK,MAAM,wBAAwB,GAAG,CAAC,eAAe,EAAE,aAAa,EAAE,aAAa,EAAE,kBAAkB,EAAE,sBAAsB,EAAE,YAAY,EAAE,UAAU,EAAE,sBAAsB,EAAE,UAAU,EAAE,sBAAsB,CAAC,CAAC;AACnN,MAAM,qBAAqB,GAAG,yCAAyC,CAAC;AAExE,SAAgB,OAAO,CAAC,MAA0B,EAAE,QAAyB;IACzE,MAAM,MAAM,GAAoB,EAAE,CAAC;IACnC,MAAM,YAAY,GAAG,IAAA,qCAAiB,EAAC,MAAM,CAAC,CAAC;IAE/C,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,YAAY,CAAC,OAAO,EAAE,EAAE,CAAC;QAChD,MAAM,gBAAgB,GAAG,kBAAkB,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;QACvE,IAAI,gBAAgB,EAAE,CAAC;YACnB,MAAM,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,OAAO,EAAE,UAAU,EAAE,GAAG,EAAE,IAAI,EAAE,+BAA+B,EAAE,OAAO,EAAE,eAAe,GAAG,uDAAuD,gBAAgB,IAAI,EAAE,UAAU,EAAE,wFAAwF,EAAE,CAAC,CAAC;QAC7S,CAAC;QAED,MAAM,YAAY,GAAG,cAAc,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;QAC/D,IAAI,YAAY,EAAE,CAAC;YACf,MAAM,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,OAAO,EAAE,UAAU,EAAE,GAAG,EAAE,IAAI,EAAE,mCAAmC,EAAE,OAAO,EAAE,eAAe,GAAG,qDAAqD,EAAE,UAAU,EAAE,0FAA0F,EAAE,CAAC,CAAC;QAC7R,CAAC;QAED,IAAI,qBAAqB,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,KAAK,GAAG,CAAC,IAAI,KAAK,CAAC,QAAQ,GAAG,EAAE,EAAE,CAAC;YAC5E,MAAM,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,SAAS,EAAE,UAAU,EAAE,GAAG,EAAE,IAAI,EAAE,+BAA+B,EAAE,OAAO,EAAE,IAAI,GAAG,+EAA+E,KAAK,CAAC,KAAK,cAAc,KAAK,CAAC,QAAQ,UAAU,EAAE,UAAU,EAAE,uGAAuG,EAAE,CAAC,CAAC;QACxW,CAAC;QAED,IAAI,KAAK,CAAC,KAAK,KAAK,CAAC;YAAE,SAAS;QAChC,MAAM,aAAa,GAAG,IAAI,GAAG,EAAU,CAAC;QACxC,KAAK,MAAM,GAAG,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC;YAC3B,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC;gBAAE,aAAa,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QAC1E,CAAC;QACD,KAAK,MAAM,KAAK,IAAI,aAAa,EAAE,CAAC;YAChC,MAAM,YAAY,GAAG,wBAAwB,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;YAC3E,IAAI,YAAY,EAAE,CAAC;gBACf,MAAM,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,OAAO,EAAE,UAAU,EAAE,GAAG,EAAE,IAAI,EAAE,gCAAgC,EAAE,OAAO,EAAE,UAAU,KAAK,SAAS,GAAG,6DAA6D,EAAE,UAAU,EAAE,4GAA4G,EAAE,CAAC,CAAC;YAC7T,CAAC;QACL,CAAC;IACL,CAAC;IACD,OAAO,MAAM,CAAC;AAClB,CAAC"}

package/dist/server.d.ts

@@ -0,0 +1,3 @@
+#!/usr/bin/env node
+export {};
+//# sourceMappingURL=server.d.ts.map

package/dist/server.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"server.d.ts","sourceRoot":"","sources":["../src/server.ts"],"names":[],"mappings":""}

package/dist/server.js

@@ -0,0 +1,31 @@
+#!/usr/bin/env node
+"use strict";
+// packages/lintbase-mcp/src/server.ts
+// Entry point for the LintBase MCP server.
+// Run via `npx lintbase-mcp` — the IDE spawns this as a stdio process.
+Object.defineProperty(exports, "__esModule", { value: true });
+const mcp_js_1 = require("@modelcontextprotocol/sdk/server/mcp.js");
+const stdio_js_1 = require("@modelcontextprotocol/sdk/server/stdio.js");
+const scan_tool_js_1 = require("./tools/scan.tool.js");
+const schema_tool_js_1 = require("./tools/schema.tool.js");
+const issues_tool_js_1 = require("./tools/issues.tool.js");
+const server = new mcp_js_1.McpServer({
+    name: 'lintbase-mcp',
+    version: '0.1.0',
+});
+// ── Register all 3 tools ──────────────────────────────────────────────────────
+(0, scan_tool_js_1.registerScanTool)(server); // Full scan → complete report
+(0, schema_tool_js_1.registerSchemaTool)(server); // Schema introspection → field names + types
+(0, issues_tool_js_1.registerIssuesTool)(server); // Filtered issues → targeted queries
+// ── Start ─────────────────────────────────────────────────────────────────────
+async function main() {
+    const transport = new stdio_js_1.StdioServerTransport();
+    await server.connect(transport);
+    // Log to stderr so it doesn't pollute the MCP stdio protocol on stdout
+    console.error('LintBase MCP server v0.1.0 running on stdio');
+}
+main().catch((err) => {
+    console.error('Fatal error starting LintBase MCP server:', err);
+    process.exit(1);
+});
+//# sourceMappingURL=server.js.map

package/dist/server.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"server.js","sourceRoot":"","sources":["../src/server.ts"],"names":[],"mappings":";;AACA,sCAAsC;AACtC,2CAA2C;AAC3C,uEAAuE;;AAEvE,oEAAoE;AACpE,wEAAiF;AAEjF,uDAAwD;AACxD,2DAA4D;AAC5D,2DAA4D;AAE5D,MAAM,MAAM,GAAG,IAAI,kBAAS,CAAC;IACzB,IAAI,EAAE,cAAc;IACpB,OAAO,EAAE,OAAO;CACnB,CAAC,CAAC;AAEH,iFAAiF;AACjF,IAAA,+BAAgB,EAAC,MAAM,CAAC,CAAC,CAAK,8BAA8B;AAC5D,IAAA,mCAAkB,EAAC,MAAM,CAAC,CAAC,CAAG,6CAA6C;AAC3E,IAAA,mCAAkB,EAAC,MAAM,CAAC,CAAC,CAAG,qCAAqC;AAInE,iFAAiF;AACjF,KAAK,UAAU,IAAI;IACf,MAAM,SAAS,GAAG,IAAI,+BAAoB,EAAE,CAAC;IAC7C,MAAM,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IAChC,uEAAuE;IACvE,OAAO,CAAC,KAAK,CAAC,6CAA6C,CAAC,CAAC;AACjE,CAAC;AAED,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;IACjB,OAAO,CAAC,KAAK,CAAC,2CAA2C,EAAE,GAAG,CAAC,CAAC;IAChE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AACpB,CAAC,CAAC,CAAC"}

package/dist/tools/issues.tool.d.ts

@@ -0,0 +1,3 @@
+import { McpServer } from '@modelcontextprotocol/sdk/server/mcp.js';
+export declare function registerIssuesTool(server: McpServer): void;
+//# sourceMappingURL=issues.tool.d.ts.map

package/dist/tools/issues.tool.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"issues.tool.d.ts","sourceRoot":"","sources":["../../src/tools/issues.tool.ts"],"names":[],"mappings":"AAiBA,OAAO,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AAoKpE,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,SAAS,GAAG,IAAI,CAyE1D"}

package/dist/tools/issues.tool.js

@@ -0,0 +1,250 @@
+"use strict";
+// packages/lintbase-mcp/src/tools/issues.tool.ts
+//
+// MCP Tool: lintbase_get_issues
+//
+// Runs all LintBase analyzers and returns only the filtered issues list —
+// no summaries, no scan metadata, just the actionable problems.
+//
+// Designed for targeted AI queries like:
+//   "Any errors in the users collection before I add a field?"
+//   "Show me all security issues"
+//   "Are there any schema drift problems?"
+//
+// Filters:
+//   - severity:   'error' | 'warning' | 'info'  (omit = all)
+//   - collection: string                          (omit = all collections)
+//   - rule:       string prefix, e.g. "schema/"  (omit = all rules)
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.registerIssuesTool = registerIssuesTool;
+const zod_1 = require("zod");
+const admin = __importStar(require("firebase-admin"));
+const fs = __importStar(require("fs"));
+const path = __importStar(require("path"));
+const SchemaDrift = __importStar(require("../core/schema-drift.analyzer.js"));
+const Performance = __importStar(require("../core/performance.analyzer.js"));
+const Security = __importStar(require("../core/security.analyzer.js"));
+const Cost = __importStar(require("../core/cost.analyzer.js"));
+// ── Firestore helpers ─────────────────────────────────────────────────────────
+function inferType(value) {
+    if (value === null)
+        return 'null';
+    if (value === undefined)
+        return 'undefined';
+    if (Array.isArray(value))
+        return 'array';
+    if (typeof value === 'object' && value !== null &&
+        'toDate' in value && typeof value.toDate === 'function')
+        return 'timestamp';
+    if (typeof value === 'object' && value !== null &&
+        'path' in value && 'id' in value)
+        return 'reference';
+    if (typeof value === 'object')
+        return 'map';
+    return typeof value;
+}
+function calculateDepth(obj, current = 1) {
+    if (typeof obj !== 'object' || obj === null || Array.isArray(obj))
+        return current;
+    const values = Object.values(obj);
+    if (values.length === 0)
+        return current;
+    return Math.max(...values.map((v) => calculateDepth(v, current + 1)));
+}
+function mapDocument(doc, collection) {
+    const rawData = doc.data();
+    const fields = {};
+    for (const [key, value] of Object.entries(rawData)) {
+        fields[key] = { value, type: inferType(value) };
+    }
+    const depth = calculateDepth(rawData);
+    const sizeBytes = (() => {
+        try {
+            return Buffer.byteLength(JSON.stringify(rawData), 'utf-8');
+        }
+        catch {
+            return 0;
+        }
+    })();
+    return { id: doc.id, collection, fields, depth, sizeBytes };
+}
+// ── Core function ─────────────────────────────────────────────────────────────
+async function getIssues(keyPath, sampleSize, filters) {
+    const resolvedKey = path.resolve(keyPath);
+    if (!fs.existsSync(resolvedKey)) {
+        throw new Error(`Service account file not found: ${resolvedKey}`);
+    }
+    const serviceAccount = JSON.parse(fs.readFileSync(resolvedKey, 'utf-8'));
+    if (!admin.apps.length) {
+        admin.initializeApp({ credential: admin.credential.cert(serviceAccount) });
+    }
+    const db = admin.firestore();
+    const allCollections = (await db.listCollections()).map((c) => c.id);
+    // Apply collection filter
+    let targetCollections = allCollections;
+    if (filters.collection) {
+        targetCollections = allCollections.filter((c) => c === filters.collection);
+        if (targetCollections.length === 0) {
+            throw new Error(`Collection "${filters.collection}" not found. Available: [${allCollections.join(', ')}]`);
+        }
+    }
+    else if (filters.collections && filters.collections.length > 0) {
+        const filterSet = new Set(filters.collections);
+        targetCollections = allCollections.filter((c) => filterSet.has(c));
+    }
+    // Sample documents
+    const allDocuments = [];
+    for (const col of targetCollections) {
+        const snapshot = await db.collection(col).limit(sampleSize).get();
+        allDocuments.push(...snapshot.docs.map((doc) => mapDocument(doc, col)));
+    }
+    const scanResult = {
+        connector: 'firestore',
+        collections: targetCollections,
+        documentCount: allDocuments.length,
+        documents: allDocuments,
+        scannedAt: new Date(),
+    };
+    const analysisOptions = { limit: sampleSize };
+    const [schemaDriftIssues, perfIssues, securityIssues, costIssues] = await Promise.all([
+        Promise.resolve(SchemaDrift.analyze(scanResult, analysisOptions)),
+        Promise.resolve(Performance.analyze(scanResult, analysisOptions)),
+        Promise.resolve(Security.analyze(scanResult, analysisOptions)),
+        Promise.resolve(Cost.analyze(scanResult, analysisOptions)),
+    ]);
+    let issues = [
+        ...schemaDriftIssues,
+        ...perfIssues,
+        ...securityIssues,
+        ...costIssues,
+    ];
+    // Apply filters
+    if (filters.severity) {
+        issues = issues.filter((i) => i.severity === filters.severity);
+    }
+    if (filters.rule) {
+        issues = issues.filter((i) => i.rule.startsWith(filters.rule));
+    }
+    // Sort: errors → warnings → infos, then by collection name
+    const severityOrder = { error: 0, warning: 1, info: 2 };
+    issues.sort((a, b) => {
+        const sOrder = severityOrder[a.severity] - severityOrder[b.severity];
+        if (sOrder !== 0)
+            return sOrder;
+        return a.collection.localeCompare(b.collection);
+    });
+    return {
+        issues,
+        totalScanned: allDocuments.length,
+        collectionsScanned: targetCollections,
+    };
+}
+// ── Input schema ──────────────────────────────────────────────────────────────
+const issuesInputShape = {
+    keyPath: zod_1.z.string().describe('Absolute or relative path to the Firebase service account JSON file.'),
+    severity: zod_1.z.enum(['error', 'warning', 'info']).optional().describe('Filter by severity. Omit to return all severities.'),
+    collection: zod_1.z.string().optional().describe('Filter to a single collection name. Omit to scan all collections.'),
+    rule: zod_1.z.string().optional().describe('Filter by rule prefix, e.g. "schema/" returns only schema drift issues, "security/" only security issues.'),
+    sampleSize: zod_1.z.number().int().min(1).max(500).optional().describe('Max documents to sample per collection (default: 50).'),
+};
+const IssuesInput = zod_1.z.object({
+    keyPath: zod_1.z.string(),
+    severity: zod_1.z.enum(['error', 'warning', 'info']).optional(),
+    collection: zod_1.z.string().optional(),
+    rule: zod_1.z.string().optional(),
+    sampleSize: zod_1.z.number().int().min(1).max(500).default(50),
+});
+// ── Register with MCP server ──────────────────────────────────────────────────
+function registerIssuesTool(server) {
+    // eslint-disable-next-line @typescript-eslint/no-explicit-any
+    server.registerTool('lintbase_get_issues', {
+        title: 'LintBase Get Issues',
+        description: 'Runs all LintBase analyzers and returns a filtered list of issues. ' +
+            'Use this for targeted questions like "any errors in users?", "schema issues only?", or "all security problems?". ' +
+            'Lighter than lintbase_scan — returns only actionable issues, no summary metadata. ' +
+            'Filter by severity (error/warning/info), collection name, or rule prefix (schema/, security/, perf/, cost/).',
+        inputSchema: issuesInputShape,
+    }, async (rawInput) => {
+        try {
+            const { keyPath, severity, collection, rule, sampleSize } = IssuesInput.parse(rawInput);
+            const { issues, totalScanned, collectionsScanned } = await getIssues(keyPath, sampleSize, { severity, collection, rule });
+            if (issues.length === 0) {
+                const filterDesc = [
+                    severity && `severity=${severity}`,
+                    collection && `collection=${collection}`,
+                    rule && `rule~=${rule}`,
+                ].filter(Boolean).join(', ');
+                return {
+                    content: [{
+                            type: 'text',
+                            text: `✅ No issues found${filterDesc ? ` matching filters [${filterDesc}]` : ''}.\n` +
+                                `Scanned ${totalScanned} documents across ${collectionsScanned.length} collection(s): [${collectionsScanned.join(', ')}]`,
+                        }],
+                };
+            }
+            // Format as a clean markdown issue list
+            const lines = [
+                `# LintBase Issues`,
+                `Found **${issues.length}** issue(s) across ${collectionsScanned.length} collection(s) (${totalScanned} docs sampled)`,
+                ``,
+            ];
+            const ICON = { error: '🔴', warning: '🟡', info: '🔵' };
+            for (const issue of issues) {
+                lines.push(`### ${ICON[issue.severity] ?? '⚪'} [${issue.severity.toUpperCase()}] \`${issue.rule}\``);
+                lines.push(`**Collection:** \`${issue.collection}\``);
+                lines.push(`**Message:** ${issue.message}`);
+                if (issue.suggestion) {
+                    lines.push(`**Fix:** ${issue.suggestion}`);
+                }
+                if (issue.affectedDocuments && issue.affectedDocuments.length > 0) {
+                    lines.push(`**Affected docs:** ${issue.affectedDocuments.slice(0, 3).join(', ')}${issue.affectedDocuments.length > 3 ? ` (+${issue.affectedDocuments.length - 3} more)` : ''}`);
+                }
+                lines.push('');
+            }
+            return {
+                content: [{ type: 'text', text: lines.join('\n') }],
+            };
+        }
+        catch (err) {
+            const message = err instanceof Error ? err.message : String(err);
+            return {
+                content: [{ type: 'text', text: `lintbase_get_issues failed: ${message}` }],
+                isError: true,
+            };
+        }
+    });
+}
+//# sourceMappingURL=issues.tool.js.map