fix(scripts): close three coverage gaps in the specifier audit

Review round 1 on #6351. All three findings were real and all three let the exact
regression this guard exists for slip through.

- Reported line numbers were one early. `SPECIFIER_RE` opens with `(?:^|\n)`, so
  `m.index` is the newline ENDING the previous line, not the start of the statement.
  `./helpers.js` on line 13 was reported as line 12. Anchoring to the specifier's own
  offset is exact, and for a multi-line import it points at the `from '...'` line —
  where the reader needs to look anyway.

- `require()` was not scanned. This repo uses lazy requires deliberately to break import
  cycles: `tools/params.ts` reaches `@/blocks` that way and `blocks/blocks/agent.ts`
  reaches `@/blocks/registry`, 22 first-party call sites in total. Those edges resolve
  exactly like static ones, so a bad specifier in one fails identically. Verified by
  pointing `tools/params.ts` at a non-existent module and watching the audit catch it.

- `apps/docs` was not scanned, despite being a second Next.js app with its own
  `next.config.ts` — so it carries identical Turbopack exposure. Now covered, and clean.

Side-effect imports and dynamic `import()` were called out in the same round but are
already covered: the optional `from` group in `SPECIFIER_RE` matches bare `import '...'`,
and `DYNAMIC_RE` handles `import('...')`. That review ran against 1c6073e, before the
resolver rewrite.

Coverage goes from 37,307 specifiers across 11,182 files to 37,438 across 11,243, still
with zero violations.

Author: waleedlatif1

scripts/check-import-specifiers.ts

@@ -43,7 +43,7 @@ import { fileURLToPath } from 'node:url'
 
 const SCRIPT_DIR = dirname(fileURLToPath(import.meta.url))
 const ROOT = resolve(SCRIPT_DIR, '..')
-const SCAN_DIRS = ['apps/sim', 'apps/realtime', 'packages']
+const SCAN_DIRS = ['apps/sim', 'apps/realtime', 'apps/docs', 'packages']
 const SKIP_DIRS = new Set(['node_modules', '.next', 'dist', 'build', '.turbo'])
 
 /**
@@ -58,6 +58,13 @@ const SPECIFIER_RE =
   /(?:^|\n)\s*(?:import|export)\s+(?!type\s)(?:[\s\S]*?from\s*)?['"]([^'"]+)['"]/g
 /** `import(...)` — resolved at call time, but the path still has to exist. */
 const DYNAMIC_RE = /\bimport\s*\(\s*['"]([^'"]+)['"]\s*\)/g
+/**
+ * `require('@/...')` — this repo uses lazy requires deliberately to break import cycles
+ * (`tools/params.ts` reaches `@/blocks` that way, `blocks/blocks/agent.ts` reaches
+ * `@/blocks/registry`). Those edges resolve exactly like static ones, so a bad specifier
+ * in one fails identically and must be checked.
+ */
+const REQUIRE_RE = /\brequire\s*\(\s*['"]([^'"]+)['"]\s*\)/g
 
 /**
  * Packages that must be imported by subpath. Opt-in rather than opt-out: `@sim/emcn` and
@@ -312,18 +319,25 @@ for (const file of files) {
     return lo + 1
   }
 
-  for (const pattern of [SPECIFIER_RE, DYNAMIC_RE]) {
+  for (const pattern of [SPECIFIER_RE, DYNAMIC_RE, REQUIRE_RE]) {
     pattern.lastIndex = 0
     let m = pattern.exec(src)
     while (m !== null) {
       const spec = m[1]
+      /**
+       * Anchor to the specifier, not to `m.index`. SPECIFIER_RE opens with `(?:^|\n)`, so
+       * `m.index` is the newline ENDING the previous line — reporting it put every violation
+       * one line early. The specifier's own offset is exact, and for a multi-line import it
+       * points at the `from '...'` line, which is where the reader needs to look anyway.
+       */
+      const at = m.index + m[0].lastIndexOf(spec)
       const outcome = resolveSpecifier(spec, file)
       if (outcome) {
         checked++
         if (!outcome.ok) {
           violations.push({
             file: relative(ROOT, file),
-            line: lineAt(m.index),
+            line: lineAt(at),
             specifier: spec,
             kind: 'unresolved',
             reason: outcome.reason,
@@ -335,7 +349,7 @@ for (const file of files) {
         const example = subs ? [...subs.keys()].find((k) => k !== '.') : undefined
         violations.push({
           file: relative(ROOT, file),
-          line: lineAt(m.index),
+          line: lineAt(at),
           specifier: spec,
           kind: 'bare-barrel',
           reason: example