ubon/dist/utils/config.d.ts

Security scanner for AI-generated apps (Cursor, Lovable, Windsurf, v0). Catches hardcoded secrets, prompt injection, hallucinated imports, Server Actions / Edge runtime mistakes, and the vibe-coded vulnerabilities traditional linters miss.

import { ScanOptions } from '../types';
/**
 * Load Ubon configuration. Order of precedence:
 *   1. `ubon.config.json` (always loaded — pure data)
 *   2. `ubon.config.js`   (only loaded if `--allow-config-js` was passed or
 *                          `UBON_ALLOW_CONFIG_JS=1` is set; executes user code)
 *   3. `package.json` "ubon" field (always loaded — pure data)
 *
 * Gating the JS variant matters because Ubon is frequently invoked in CI
 * against untrusted PR branches; loading arbitrary user JS at config time
 * would expand the supply-chain attack surface.
 */
export declare function loadConfig(directory: string, opts?: {
    allowConfigJs?: boolean;
}): Partial<ScanOptions>;
export declare function mergeOptions(config: Partial<ScanOptions>, cli: Partial<ScanOptions>): ScanOptions;
//# sourceMappingURL=config.d.ts.map