@aimarket/warden 0.17.0 → 0.19.0

package/dist/review-diff.d.ts

@@ -0,0 +1,52 @@
+/**
+ * What changed between the tool definitions a person approved and the ones a server serves now,
+ * field by field, for the re-approval review.
+ *
+ * A pin is a hash: it says THAT something changed. A reviewer needs WHAT changed. Over four weeks
+ * of HISTOR's log (snapshot 2026-10-20, 23,821 changes), 59.5% changed a tool's description
+ * (45.1% by more than digits) and 30.8% added or removed tools, while 13.4% touched nothing but
+ * digits, separators or whitespace (live counters, prices and limits written into definitions).
+ * A review that shows two full JSON blobs for each of those trains people to approve without
+ * reading. This module
+ * shows the path of every changed value, the words added and removed in text, and marks a change
+ * made only of numbers. It marks; it never approves: a changed limit is also a number.
+ */
+import type { ToolDef } from "./types.js";
+export type WordOp = ["=" | "+" | "-", string];
+export interface FieldChange {
+    /** Dotted path inside the tool, e.g. `description` or `inputSchema.properties.days.maximum`. */
+    path: string;
+    /** Absent when the value did not exist on that side. */
+    before?: unknown;
+    after?: unknown;
+    /** For a string on both sides: the word diff. */
+    words?: WordOp[];
+    /** Only digits, separators or whitespace differ (a counter, a date, a limit). Still a change. */
+    numbersOnly: boolean;
+}
+export interface ToolChange {
+    tool: string;
+    kind: "added" | "removed" | "changed";
+    /** For `changed`: every value that differs. */
+    fields: FieldChange[];
+    /** For `added` / `removed`: the whole definition. */
+    definition?: ToolDef;
+    /** A changed tool whose every field change is numbers only. */
+    numbersOnly: boolean;
+}
+export interface DefinitionDiff {
+    changes: ToolChange[];
+    added: number;
+    removed: number;
+    changed: number;
+    /** Changed tools whose changes are numbers only. */
+    numbersOnly: number;
+}
+/** Words and the spaces between them, so that joining the tokens gives the text back. */
+export declare function tokenize(text: string): string[];
+export declare function wordDiff(before: string, after: string): WordOp[];
+/** Field-level changes from `before` (approved) to `after` (served now), tools matched by name. */
+export declare function diffToolDefinitions(before: readonly ToolDef[], after: readonly ToolDef[]): DefinitionDiff;
+/** The diff as review lines: `[-removed-]` and `{+added+}` inside text, `before → after` for values. */
+export declare function formatDefinitionDiff(diff: DefinitionDiff): string[];
+//# sourceMappingURL=review-diff.d.ts.map

package/dist/review-diff.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"review-diff.d.ts","sourceRoot":"","sources":["../src/review-diff.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AACH,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,YAAY,CAAC;AAE1C,MAAM,MAAM,MAAM,GAAG,CAAC,GAAG,GAAG,GAAG,GAAG,GAAG,EAAE,MAAM,CAAC,CAAC;AAE/C,MAAM,WAAW,WAAW;IAC1B,gGAAgG;IAChG,IAAI,EAAE,MAAM,CAAC;IACb,wDAAwD;IACxD,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,iDAAiD;IACjD,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC;IACjB,iGAAiG;IACjG,WAAW,EAAE,OAAO,CAAC;CACtB;AAED,MAAM,WAAW,UAAU;IACzB,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,OAAO,GAAG,SAAS,GAAG,SAAS,CAAC;IACtC,+CAA+C;IAC/C,MAAM,EAAE,WAAW,EAAE,CAAC;IACtB,qDAAqD;IACrD,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,+DAA+D;IAC/D,WAAW,EAAE,OAAO,CAAC;CACtB;AAED,MAAM,WAAW,cAAc;IAC7B,OAAO,EAAE,UAAU,EAAE,CAAC;IACtB,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC;IAChB,oDAAoD;IACpD,WAAW,EAAE,MAAM,CAAC;CACrB;AAyBD,yFAAyF;AACzF,wBAAgB,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,EAAE,CAG/C;AAED,wBAAgB,QAAQ,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,MAAM,EAAE,CAuChE;AAoED,mGAAmG;AACnG,wBAAgB,mBAAmB,CAAC,MAAM,EAAE,SAAS,OAAO,EAAE,EAAE,KAAK,EAAE,SAAS,OAAO,EAAE,GAAG,cAAc,CAqBzG;AAOD,wGAAwG;AACxG,wBAAgB,oBAAoB,CAAC,IAAI,EAAE,cAAc,GAAG,MAAM,EAAE,CA0BnE"}

package/dist/review-diff.js

@@ -0,0 +1,237 @@
+const NUMERIC_TEXT = /^[\s\d.,:\-/+%]*$/;
+/** Above this many token pairs the word diff falls back to "common start, common end, the middle replaced". */
+const LCS_LIMIT = 4_000_000;
+const MAX_FIELDS_PER_TOOL = 200;
+function isPlainObject(v) {
+    return typeof v === "object" && v !== null && !Array.isArray(v);
+}
+function isPrimitive(v) {
+    return v === null || (typeof v !== "object" && typeof v !== "function");
+}
+function same(a, b) {
+    return JSON.stringify(a) === JSON.stringify(b);
+}
+function joinPath(base, key) {
+    if (typeof key === "number")
+        return `${base}[${key}]`;
+    const safe = /^[A-Za-z_$][\w$-]*$/.test(key) ? key : JSON.stringify(key);
+    return base ? `${base}.${safe}` : safe;
+}
+/** Words and the spaces between them, so that joining the tokens gives the text back. */
+export function tokenize(text) {
+    // A number keeps its separators (6,426 · 1.5 · 2026-10-21), so a moved counter reads as one edit.
+    return text.match(/\s+|\d+(?:[.,:/-]\d+)*(?![\p{L}_])|[\p{L}\p{N}_]+|[^\s\p{L}\p{N}_]/gu) ?? [];
+}
+export function wordDiff(before, after) {
+    const a = tokenize(before), b = tokenize(after);
+    let start = 0;
+    while (start < a.length && start < b.length && a[start] === b[start])
+        start++;
+    let endA = a.length, endB = b.length;
+    while (endA > start && endB > start && a[endA - 1] === b[endB - 1]) {
+        endA--;
+        endB--;
+    }
+    const midA = a.slice(start, endA), midB = b.slice(start, endB);
+    const ops = [];
+    const push = (op, text) => {
+        if (!text)
+            return;
+        const last = ops[ops.length - 1];
+        if (last && last[0] === op)
+            last[1] += text;
+        else
+            ops.push([op, text]);
+    };
+    push("=", a.slice(0, start).join(""));
+    if (midA.length * midB.length > LCS_LIMIT) {
+        push("-", midA.join(""));
+        push("+", midB.join(""));
+    }
+    else {
+        // Longest common subsequence over the middle (after trimming the common start and end).
+        const n = midA.length, m = midB.length;
+        const table = Array.from({ length: n + 1 }, () => new Uint32Array(m + 1));
+        for (let i = n - 1; i >= 0; i--) {
+            const row = table[i], next = table[i + 1];
+            for (let j = m - 1; j >= 0; j--) {
+                row[j] = midA[i] === midB[j] ? next[j + 1] + 1 : Math.max(next[j], row[j + 1]);
+            }
+        }
+        let i = 0, j = 0;
+        while (i < n && j < m) {
+            if (midA[i] === midB[j]) {
+                push("=", midA[i]);
+                i++;
+                j++;
+            }
+            else if (table[i + 1][j] >= table[i][j + 1]) {
+                push("-", midA[i]);
+                i++;
+            }
+            else {
+                push("+", midB[j]);
+                j++;
+            }
+        }
+        while (i < n)
+            push("-", midA[i++]);
+        while (j < m)
+            push("+", midB[j++]);
+    }
+    push("=", a.slice(endA).join(""));
+    return coalesce(ops);
+}
+/** Text so short and plain that splitting two edits around it only makes them harder to read. */
+const GLUE = /^[\s\p{P}\p{S}]{1,3}$/u;
+/**
+ * Join edits separated only by spaces or a stray punctuation mark into one removed and one added
+ * phrase: "[-Force a new-]{+Delete all previous+} login" reads; "[-Force-]{+Delete+} [-a-]{+all+}"
+ * does not. The glue appears on both sides, so the two sides still spell the old and new text.
+ */
+function coalesce(ops) {
+    const out = [];
+    let del = "", ins = "";
+    const flush = () => {
+        if (del)
+            out.push(["-", del]);
+        if (ins)
+            out.push(["+", ins]);
+        del = "";
+        ins = "";
+    };
+    for (let i = 0; i < ops.length; i++) {
+        const [op, text] = ops[i];
+        if (op === "-")
+            del += text;
+        else if (op === "+")
+            ins += text;
+        else if ((del || ins) && i + 1 < ops.length && GLUE.test(text)) {
+            del += text;
+            ins += text;
+        }
+        else {
+            flush();
+            out.push(["=", text]);
+        }
+    }
+    flush();
+    return out;
+}
+function textNumbersOnly(ops) {
+    const edits = ops.filter(op => op[0] !== "=").map(op => op[1]);
+    return edits.length > 0 && edits.every(e => NUMERIC_TEXT.test(e));
+}
+function walk(path, before, after, out) {
+    if (out.length >= MAX_FIELDS_PER_TOOL || same(before, after))
+        return;
+    if (isPlainObject(before) && isPlainObject(after)) {
+        const keys = [...new Set([...Object.keys(before), ...Object.keys(after)])].sort();
+        for (const key of keys) {
+            const p = joinPath(path, key);
+            const hasB = Object.prototype.hasOwnProperty.call(before, key), hasA = Object.prototype.hasOwnProperty.call(after, key);
+            if (hasB && hasA)
+                walk(p, before[key], after[key], out);
+            else if (hasB)
+                out.push({ path: p, before: before[key], numbersOnly: false });
+            else
+                out.push({ path: p, after: after[key], numbersOnly: false });
+            if (out.length >= MAX_FIELDS_PER_TOOL)
+                return;
+        }
+        return;
+    }
+    if (Array.isArray(before) && Array.isArray(after) && !(before.every(isPrimitive) && after.every(isPrimitive))) {
+        const n = Math.max(before.length, after.length);
+        for (let i = 0; i < n; i++) {
+            const p = joinPath(path, i);
+            if (i >= before.length)
+                out.push({ path: p, after: after[i], numbersOnly: false });
+            else if (i >= after.length)
+                out.push({ path: p, before: before[i], numbersOnly: false });
+            else
+                walk(p, before[i], after[i], out);
+            if (out.length >= MAX_FIELDS_PER_TOOL)
+                return;
+        }
+        return;
+    }
+    if (typeof before === "string" && typeof after === "string") {
+        const words = wordDiff(before, after);
+        out.push({ path, before, after, words, numbersOnly: textNumbersOnly(words) });
+        return;
+    }
+    const numbersOnly = typeof before === "number" && typeof after === "number";
+    out.push({ path, before, after, numbersOnly });
+}
+/** Field-level changes from `before` (approved) to `after` (served now), tools matched by name. */
+export function diffToolDefinitions(before, after) {
+    const old = new Map(before.map(t => [t.name, t])), next = new Map(after.map(t => [t.name, t]));
+    const names = [...new Set([...old.keys(), ...next.keys()])].sort();
+    const changes = [];
+    for (const name of names) {
+        const b = old.get(name), a = next.get(name);
+        if (!b && a)
+            changes.push({ tool: name, kind: "added", fields: [], definition: a, numbersOnly: false });
+        else if (b && !a)
+            changes.push({ tool: name, kind: "removed", fields: [], definition: b, numbersOnly: false });
+        else if (b && a && !same(b, a)) {
+            const fields = [];
+            walk("", b, a, fields);
+            changes.push({ tool: name, kind: "changed", fields, numbersOnly: fields.length > 0 && fields.every(f => f.numbersOnly) });
+        }
+    }
+    return {
+        changes,
+        added: changes.filter(c => c.kind === "added").length,
+        removed: changes.filter(c => c.kind === "removed").length,
+        changed: changes.filter(c => c.kind === "changed").length,
+        numbersOnly: changes.filter(c => c.numbersOnly).length,
+    };
+}
+function show(value, max = 400) {
+    const text = JSON.stringify(value) ?? "undefined";
+    return text.length > max ? `${text.slice(0, max)}… (${text.length} chars)` : text;
+}
+/** The diff as review lines: `[-removed-]` and `{+added+}` inside text, `before → after` for values. */
+export function formatDefinitionDiff(diff) {
+    if (diff.changes.length === 0)
+        return ["Tool definitions: unchanged."];
+    const lines = [`Tool definitions: ${diff.changed} changed, ${diff.added} added, ${diff.removed} removed` +
+            (diff.numbersOnly ? ` (${diff.numbersOnly} changed only in numbers: still a change, a number can be a limit)` : "")];
+    for (const c of diff.changes) {
+        if (c.kind === "added") {
+            lines.push(`+ ${c.tool}  (new tool)`, `    ${show(c.definition, 4000)}`);
+            continue;
+        }
+        if (c.kind === "removed") {
+            lines.push(`- ${c.tool}  (removed)`);
+            continue;
+        }
+        lines.push(`~ ${c.tool}${c.numbersOnly ? "  (numbers only)" : ""}`);
+        for (const f of c.fields) {
+            const tag = f.numbersOnly && !c.numbersOnly ? "  (numbers only)" : "";
+            if (f.words) {
+                const rendered = f.words.map(([op, text]) => op === "=" ? text : op === "-" ? `[-${text}-]` : `{+${text}+}`).join("");
+                lines.push(`    ${f.path}: ${rendered}${tag}`);
+            }
+            else if (!("before" in f))
+                lines.push(`    ${f.path}: added ${show(f.after)}`);
+            else if (!("after" in f))
+                lines.push(`    ${f.path}: removed (was ${show(f.before)})`);
+            else if (Array.isArray(f.before) && Array.isArray(f.after)) {
+                // A list of plain values (required, enum, type): which entries came and went.
+                const was = new Set(f.before.map(v => JSON.stringify(v))), now = new Set(f.after.map(v => JSON.stringify(v)));
+                const plus = [...now].filter(v => !was.has(v)), minus = [...was].filter(v => !now.has(v));
+                const parts = [plus.length ? `added ${plus.join(", ")}` : "", minus.length ? `removed ${minus.join(", ")}` : ""].filter(Boolean);
+                lines.push(`    ${f.path}: ${parts.length ? parts.join("; ") : `reordered ${show(f.before)} → ${show(f.after)}`}`);
+            }
+            else
+                lines.push(`    ${f.path}: ${show(f.before)} → ${show(f.after)}${tag}`);
+        }
+        if (c.fields.length >= MAX_FIELDS_PER_TOOL)
+            lines.push(`    … more than ${MAX_FIELDS_PER_TOOL} changed values; see the full definitions below`);
+    }
+    return lines;
+}
+//# sourceMappingURL=review-diff.js.map

package/dist/review-diff.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"review-diff.js","sourceRoot":"","sources":["../src/review-diff.ts"],"names":[],"mappings":"AAiDA,MAAM,YAAY,GAAG,mBAAmB,CAAC;AACzC,+GAA+G;AAC/G,MAAM,SAAS,GAAG,SAAS,CAAC;AAC5B,MAAM,mBAAmB,GAAG,GAAG,CAAC;AAEhC,SAAS,aAAa,CAAC,CAAU;IAC/B,OAAO,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;AAClE,CAAC;AAED,SAAS,WAAW,CAAC,CAAU;IAC7B,OAAO,CAAC,KAAK,IAAI,IAAI,CAAC,OAAO,CAAC,KAAK,QAAQ,IAAI,OAAO,CAAC,KAAK,UAAU,CAAC,CAAC;AAC1E,CAAC;AAED,SAAS,IAAI,CAAC,CAAU,EAAE,CAAU;IAClC,OAAO,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;AACjD,CAAC;AAED,SAAS,QAAQ,CAAC,IAAY,EAAE,GAAoB;IAClD,IAAI,OAAO,GAAG,KAAK,QAAQ;QAAE,OAAO,GAAG,IAAI,IAAI,GAAG,GAAG,CAAC;IACtD,MAAM,IAAI,GAAG,qBAAqB,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;IACzE,OAAO,IAAI,CAAC,CAAC,CAAC,GAAG,IAAI,IAAI,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;AACzC,CAAC;AAED,yFAAyF;AACzF,MAAM,UAAU,QAAQ,CAAC,IAAY;IACnC,kGAAkG;IAClG,OAAO,IAAI,CAAC,KAAK,CAAC,sEAAsE,CAAC,IAAI,EAAE,CAAC;AAClG,CAAC;AAED,MAAM,UAAU,QAAQ,CAAC,MAAc,EAAE,KAAa;IACpD,MAAM,CAAC,GAAG,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC;IAChD,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,OAAO,KAAK,GAAG,CAAC,CAAC,MAAM,IAAI,KAAK,GAAG,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC;QAAE,KAAK,EAAE,CAAC;IAC9E,IAAI,IAAI,GAAG,CAAC,CAAC,MAAM,EAAE,IAAI,GAAG,CAAC,CAAC,MAAM,CAAC;IACrC,OAAO,IAAI,GAAG,KAAK,IAAI,IAAI,GAAG,KAAK,IAAI,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,EAAE,CAAC;QAAC,IAAI,EAAE,CAAC;QAAC,IAAI,EAAE,CAAC;IAAC,CAAC;IACvF,MAAM,IAAI,GAAG,CAAC,CAAC,KAAK,CAAC,KAAK,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG,CAAC,CAAC,KAAK,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;IAC/D,MAAM,GAAG,GAAa,EAAE,CAAC;IACzB,MAAM,IAAI,GAAG,CAAC,EAAa,EAAE,IAAY,EAAE,EAAE;QAC3C,IAAI,CAAC,IAAI;YAAE,OAAO;QAClB,MAAM,IAAI,GAAG,GAAG,CAAC,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;QACjC,IAAI,IAAI,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,EAAE;YAAE,IAAI,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC;;YACvC,GAAG,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC,CAAC;IAC5B,CAAC,CAAC;IACF,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;IACtC,IAAI,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,GAAG,SAAS,EAAE,CAAC;QAC1C,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;QACzB,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;IAC3B,CAAC;SAAM,CAAC;QACN,wFAAwF;QACxF,MAAM,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC;QACvC,MAAM,KAAK,GAAkB,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC,GAAG,CAAC,EAAE,EAAE,GAAG,EAAE,CAAC,IAAI,WAAW,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;QACzF,KAAK,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;YAChC,MAAM,GAAG,GAAG,KAAK,CAAC,CAAC,CAAE,EAAE,IAAI,GAAG,KAAK,CAAC,CAAC,GAAG,CAAC,CAAE,CAAC;YAC5C,KAAK,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;gBAChC,GAAG,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAE,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAE,EAAE,GAAG,CAAC,CAAC,GAAG,CAAC,CAAE,CAAC,CAAC;YACpF,CAAC;QACH,CAAC;QACD,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC;QACjB,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;YACtB,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;gBAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC,CAAE,CAAC,CAAC;gBAAC,CAAC,EAAE,CAAC;gBAAC,CAAC,EAAE,CAAC;YAAC,CAAC;iBACtD,IAAI,KAAK,CAAC,CAAC,GAAG,CAAC,CAAE,CAAC,CAAC,CAAE,IAAI,KAAK,CAAC,CAAC,CAAE,CAAC,CAAC,GAAG,CAAC,CAAE,EAAE,CAAC;gBAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC,CAAE,CAAC,CAAC;gBAAC,CAAC,EAAE,CAAC;YAAC,CAAC;iBACzE,CAAC;gBAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC,CAAE,CAAC,CAAC;gBAAC,CAAC,EAAE,CAAC;YAAC,CAAC;QACpC,CAAC;QACD,OAAO,CAAC,GAAG,CAAC;YAAE,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC,EAAE,CAAE,CAAC,CAAC;QACpC,OAAO,CAAC,GAAG,CAAC;YAAE,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC,EAAE,CAAE,CAAC,CAAC;IACtC,CAAC;IACD,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;IAClC,OAAO,QAAQ,CAAC,GAAG,CAAC,CAAC;AACvB,CAAC;AAED,iGAAiG;AACjG,MAAM,IAAI,GAAG,wBAAwB,CAAC;AAEtC;;;;GAIG;AACH,SAAS,QAAQ,CAAC,GAAa;IAC7B,MAAM,GAAG,GAAa,EAAE,CAAC;IACzB,IAAI,GAAG,GAAG,EAAE,EAAE,GAAG,GAAG,EAAE,CAAC;IACvB,MAAM,KAAK,GAAG,GAAG,EAAE;QACjB,IAAI,GAAG;YAAE,GAAG,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC;QAC9B,IAAI,GAAG;YAAE,GAAG,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC;QAC9B,GAAG,GAAG,EAAE,CAAC;QAAC,GAAG,GAAG,EAAE,CAAC;IACrB,CAAC,CAAC;IACF,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,GAAG,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACpC,MAAM,CAAC,EAAE,EAAE,IAAI,CAAC,GAAG,GAAG,CAAC,CAAC,CAAE,CAAC;QAC3B,IAAI,EAAE,KAAK,GAAG;YAAE,GAAG,IAAI,IAAI,CAAC;aACvB,IAAI,EAAE,KAAK,GAAG;YAAE,GAAG,IAAI,IAAI,CAAC;aAC5B,IAAI,CAAC,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,GAAG,CAAC,MAAM,IAAI,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YAAC,GAAG,IAAI,IAAI,CAAC;YAAC,GAAG,IAAI,IAAI,CAAC;QAAC,CAAC;aACxF,CAAC;YAAC,KAAK,EAAE,CAAC;YAAC,GAAG,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC,CAAC;QAAC,CAAC;IAC1C,CAAC;IACD,KAAK,EAAE,CAAC;IACR,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,eAAe,CAAC,GAAa;IACpC,MAAM,KAAK,GAAG,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IAC/D,OAAO,KAAK,CAAC,MAAM,GAAG,CAAC,IAAI,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;AACpE,CAAC;AAED,SAAS,IAAI,CAAC,IAAY,EAAE,MAAe,EAAE,KAAc,EAAE,GAAkB;IAC7E,IAAI,GAAG,CAAC,MAAM,IAAI,mBAAmB,IAAI,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC;QAAE,OAAO;IACrE,IAAI,aAAa,CAAC,MAAM,CAAC,IAAI,aAAa,CAAC,KAAK,CAAC,EAAE,CAAC;QAClD,MAAM,IAAI,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QAClF,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;YACvB,MAAM,CAAC,GAAG,QAAQ,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;YAC9B,MAAM,IAAI,GAAG,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,CAAC,EAAE,IAAI,GAAG,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;YACxH,IAAI,IAAI,IAAI,IAAI;gBAAE,IAAI,CAAC,CAAC,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,KAAK,CAAC,GAAG,CAAC,EAAE,GAAG,CAAC,CAAC;iBACnD,IAAI,IAAI;gBAAE,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,WAAW,EAAE,KAAK,EAAE,CAAC,CAAC;;gBACzE,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,GAAG,CAAC,EAAE,WAAW,EAAE,KAAK,EAAE,CAAC,CAAC;YAClE,IAAI,GAAG,CAAC,MAAM,IAAI,mBAAmB;gBAAE,OAAO;QAChD,CAAC;QACD,OAAO;IACT,CAAC;IACD,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,WAAW,CAAC,IAAI,KAAK,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,EAAE,CAAC;QAC9G,MAAM,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;QAChD,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;YAC3B,MAAM,CAAC,GAAG,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;YAC5B,IAAI,CAAC,IAAI,MAAM,CAAC,MAAM;gBAAE,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,KAAK,EAAE,CAAC,CAAC;iBAC9E,IAAI,CAAC,IAAI,KAAK,CAAC,MAAM;gBAAE,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,KAAK,EAAE,CAAC,CAAC;;gBACpF,IAAI,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;YACvC,IAAI,GAAG,CAAC,MAAM,IAAI,mBAAmB;gBAAE,OAAO;QAChD,CAAC;QACD,OAAO;IACT,CAAC;IACD,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC5D,MAAM,KAAK,GAAG,QAAQ,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;QACtC,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,WAAW,EAAE,eAAe,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QAC9E,OAAO;IACT,CAAC;IACD,MAAM,WAAW,GAAG,OAAO,MAAM,KAAK,QAAQ,IAAI,OAAO,KAAK,KAAK,QAAQ,CAAC;IAC5E,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC,CAAC;AACjD,CAAC;AAED,mGAAmG;AACnG,MAAM,UAAU,mBAAmB,CAAC,MAA0B,EAAE,KAAyB;IACvF,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IAC/F,MAAM,KAAK,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,GAAG,CAAC,IAAI,EAAE,EAAE,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IACnE,MAAM,OAAO,GAAiB,EAAE,CAAC;IACjC,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,CAAC,GAAG,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAC5C,IAAI,CAAC,CAAC,IAAI,CAAC;YAAE,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,EAAE,EAAE,UAAU,EAAE,CAAC,EAAE,WAAW,EAAE,KAAK,EAAE,CAAC,CAAC;aACnG,IAAI,CAAC,IAAI,CAAC,CAAC;YAAE,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,EAAE,EAAE,UAAU,EAAE,CAAC,EAAE,WAAW,EAAE,KAAK,EAAE,CAAC,CAAC;aAC1G,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC;YAC/B,MAAM,MAAM,GAAkB,EAAE,CAAC;YACjC,IAAI,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC,EAAE,MAAM,CAAC,CAAC;YACvB,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,CAAC,MAAM,GAAG,CAAC,IAAI,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC;QAC5H,CAAC;IACH,CAAC;IACD,OAAO;QACL,OAAO;QACP,KAAK,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,OAAO,CAAC,CAAC,MAAM;QACrD,OAAO,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,MAAM;QACzD,OAAO,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,MAAM;QACzD,WAAW,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,MAAM;KACvD,CAAC;AACJ,CAAC;AAED,SAAS,IAAI,CAAC,KAAc,EAAE,GAAG,GAAG,GAAG;IACrC,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,WAAW,CAAC;IAClD,OAAO,IAAI,CAAC,MAAM,GAAG,GAAG,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,MAAM,IAAI,CAAC,MAAM,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC;AACpF,CAAC;AAED,wGAAwG;AACxG,MAAM,UAAU,oBAAoB,CAAC,IAAoB;IACvD,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,CAAC,8BAA8B,CAAC,CAAC;IACvE,MAAM,KAAK,GAAG,CAAC,qBAAqB,IAAI,CAAC,OAAO,aAAa,IAAI,CAAC,KAAK,WAAW,IAAI,CAAC,OAAO,UAAU;YACtG,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC,WAAW,oEAAoE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IACvH,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;QAC7B,IAAI,CAAC,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;YAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,cAAc,EAAE,OAAO,IAAI,CAAC,CAAC,CAAC,UAAU,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC;YAAC,SAAS;QAAC,CAAC;QAC/G,IAAI,CAAC,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;YAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,aAAa,CAAC,CAAC;YAAC,SAAS;QAAC,CAAC;QAC7E,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,kBAAkB,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QACpE,KAAK,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,CAAC;YACzB,MAAM,GAAG,GAAG,CAAC,CAAC,WAAW,IAAI,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,kBAAkB,CAAC,CAAC,CAAC,EAAE,CAAC;YACtE,IAAI,CAAC,CAAC,KAAK,EAAE,CAAC;gBACZ,MAAM,QAAQ,GAAG,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC,KAAK,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,IAAI,IAAI,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;gBACtH,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,IAAI,KAAK,QAAQ,GAAG,GAAG,EAAE,CAAC,CAAC;YACjD,CAAC;iBAAM,IAAI,CAAC,CAAC,QAAQ,IAAI,CAAC,CAAC;gBAAE,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,IAAI,WAAW,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;iBAC5E,IAAI,CAAC,CAAC,OAAO,IAAI,CAAC,CAAC;gBAAE,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,IAAI,kBAAkB,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;iBAClF,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC;gBAC3D,8EAA8E;gBAC9E,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,GAAG,GAAG,IAAI,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;gBAC9G,MAAM,IAAI,GAAG,CAAC,GAAG,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,KAAK,GAAG,CAAC,GAAG,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;gBAC1F,MAAM,KAAK,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,WAAW,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;gBACjI,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,IAAI,KAAK,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,aAAa,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC;YACrH,CAAC;;gBAAM,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,GAAG,EAAE,CAAC,CAAC;QACjF,CAAC;QACD,IAAI,CAAC,CAAC,MAAM,CAAC,MAAM,IAAI,mBAAmB;YAAE,KAAK,CAAC,IAAI,CAAC,mBAAmB,mBAAmB,iDAAiD,CAAC,CAAC;IAClJ,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC"}

package/dist/static-scan.d.ts

@@ -69,7 +69,7 @@ type Surface = "name" | "description" | "inputSchema" | "title" | "outputSchema"
  *     autonomy phrasing (`autonomy`), and the zero-width joiner inside an emoji sequence. The
  *     hidden-character rule now also catches the Unicode-tag block and the bidi isolates.
  */
-export declare const STATIC_SCAN_RULESET_VERSION = "14";
+export declare const STATIC_SCAN_RULESET_VERSION = "15";
 export interface StaticScanRule {
     code: string;
     severity: Severity;

package/dist/static-scan.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"static-scan.d.ts","sourceRoot":"","sources":["../src/static-scan.ts"],"names":[],"mappings":"AAMA,OAAO,KAAK,EACV,UAAU,EACV,QAAQ,EAER,OAAO,EACP,UAAU,EACV,eAAe,EACf,gBAAgB,EAChB,YAAY,EACb,MAAM,YAAY,CAAC;AAEpB;;;;;;;;;;;;;;;;;;;;;GAqBG;AAEH,KAAK,IAAI,GAAG,OAAO,GAAG,QAAQ,CAAC;AAE/B;;;;;;;;;;;;;;GAcG;AACH,KAAK,OAAO,GAAG,MAAM,GAAG,aAAa,GAAG,aAAa,GAAG,OAAO,GAAG,cAAc,GAAG,aAAa,GAAG,UAAU,CAAC;AA6/B9G;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;AAQH,eAAO,MAAM,2BAA2B,OAAO,CAAC;AAmBhD,MAAM,WAAW,cAAc;IAC7B,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,QAAQ,CAAC;IACnB,IAAI,EAAE,IAAI,CAAC;IACX,iFAAiF;IACjF,QAAQ,EAAE,OAAO,EAAE,CAAC;IACpB,oEAAoE;IACpE,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,MAAM,CAAC;IACd;;;;OAIG;IACH,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,2EAA2E;IAC3E,GAAG,EAAE,OAAO,CAAC;CACd;AAED,MAAM,WAAW,iBAAkB,SAAQ,UAAU;IACnD,+EAA+E;IAC/E,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,cAAc,EAAE,CAAC;CACzB;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,iBAAiB,IAAI,iBAAiB,CAgBrD;AAOD,uEAAuE;AACvE,wBAAgB,oBAAoB,IAAI,UAAU,CAGjD;AAED,qBAAa,cAAe,YAAW,UAAU;IAUC,OAAO,CAAC,QAAQ,CAAC,iBAAiB,CAAC;IATnF,QAAQ,CAAC,IAAI,iBAAiB;IAE9B,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAe;IAEnC;;;;OAIG;gBACS,GAAG,GAAE,YAA6B,EAAmB,iBAAiB,CAAC,GAAE,CAAC,IAAI,EAAE,OAAO,KAAK,OAAO,aAAA;IAIzG,QAAQ,CAAC,KAAK,EAAE,eAAe,GAAG,OAAO,CAAC,gBAAgB,CAAC;CA2FlE"}
+{"version":3,"file":"static-scan.d.ts","sourceRoot":"","sources":["../src/static-scan.ts"],"names":[],"mappings":"AAMA,OAAO,KAAK,EACV,UAAU,EACV,QAAQ,EAER,OAAO,EACP,UAAU,EACV,eAAe,EACf,gBAAgB,EAChB,YAAY,EACb,MAAM,YAAY,CAAC;AAEpB;;;;;;;;;;;;;;;;;;;;;GAqBG;AAEH,KAAK,IAAI,GAAG,OAAO,GAAG,QAAQ,CAAC;AAE/B;;;;;;;;;;;;;;GAcG;AACH,KAAK,OAAO,GAAG,MAAM,GAAG,aAAa,GAAG,aAAa,GAAG,OAAO,GAAG,cAAc,GAAG,aAAa,GAAG,UAAU,CAAC;AAiiC9G;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;AAYH,eAAO,MAAM,2BAA2B,OAAO,CAAC;AAmBhD,MAAM,WAAW,cAAc;IAC7B,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,QAAQ,CAAC;IACnB,IAAI,EAAE,IAAI,CAAC;IACX,iFAAiF;IACjF,QAAQ,EAAE,OAAO,EAAE,CAAC;IACpB,oEAAoE;IACpE,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,MAAM,CAAC;IACd;;;;OAIG;IACH,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,2EAA2E;IAC3E,GAAG,EAAE,OAAO,CAAC;CACd;AAED,MAAM,WAAW,iBAAkB,SAAQ,UAAU;IACnD,+EAA+E;IAC/E,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,cAAc,EAAE,CAAC;CACzB;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,iBAAiB,IAAI,iBAAiB,CAgBrD;AAOD,uEAAuE;AACvE,wBAAgB,oBAAoB,IAAI,UAAU,CAGjD;AAED,qBAAa,cAAe,YAAW,UAAU;IAUC,OAAO,CAAC,QAAQ,CAAC,iBAAiB,CAAC;IATnF,QAAQ,CAAC,IAAI,iBAAiB;IAE9B,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAe;IAEnC;;;;OAIG;gBACS,GAAG,GAAE,YAA6B,EAAmB,iBAAiB,CAAC,GAAE,CAAC,IAAI,EAAE,OAAO,KAAK,OAAO,aAAA;IAIzG,QAAQ,CAAC,KAAK,EAAE,eAAe,GAAG,OAAO,CAAC,gBAAgB,CAAC;CA2FlE"}

package/dist/static-scan.js

@@ -190,18 +190,40 @@ const ID = String.raw `(?:[\`'"]?([A-Za-z][A-Za-z0-9]*(?:[_-][A-Za-z0-9]+)+|[a-z
 const ci = (w) => w.replace(/[a-z]/g, (c) => `[${c}${c.toUpperCase()}]`);
 const CALL_VERB = `(?:${["call", "calling", "use", "using", "run", "running", "invoke", "invoking", "execute", "executing", "fetch", "fetching", "query", "querying", "trigger", "triggering"].map(ci).join("|")})`;
 const S = String.raw `\s+`;
-const CROSS_TOOL_FRAME = new RegExp(String.raw `\b(?:${["when", "whenever", "before", "after", "while", "if"].map(ci).join("|")}|${ci("each")}${S}${ci("time")}|${ci("every")}${S}${ci("time")})${S}(?:${ci("you")}${S})?(?:${ci("are")}${S})?(?:${ci("first")}${S})?${CALL_VERB}${S}(?:${ci("the")}${S})?${ID}` +
+const WHEN = `(?:${["when", "whenever", "if"].map(ci).join("|")})`;
+const CROSS_TOOL_FRAME = new RegExp(String.raw `\b(?:${["when", "whenever", "before", "after", "while", "if"].map(ci).join("|")}|${ci("each")}${S}${ci("time")}|${ci("every")}${S}${ci("time")})${S}(?:${ci("you")}${S})?(?:${ci("are")}${S})?(?:${ci("first")}${S})?${CALL_VERB}${S}(?:${ci("the")}${S})?(?:${ci("tool")}${S})?${ID}` +
+    // v15: the call is the user's ("when a user calls `X`", "when a user's query for `X` …") or named passively
+    // ("when `X` is called"), or every call of it is meant ("all `X` requests must …").
+    String.raw `|\b${WHEN}${S}(?:${ci("a")}|${ci("the")}|${ci("any")})${S}${ci("user")}${S}(?:${["calls", "uses", "invokes", "runs", "executes"].map(ci).join("|")})${S}(?:${ci("the")}${S})?(?:${ci("tool")}${S})?${ID}` +
+    String.raw `|\b${WHEN}${S}(?:${ci("a")}|${ci("the")})${S}(?:${ci("user")}'s${S})?(?:${["query", "request", "call", "input"].map(ci).join("|")})${S}(?:${ci("for")}|${ci("to")})${S}(?:${ci("the")}${S})?${ID}` +
+    String.raw `|\b(?:${["all", "any", "every", "each"].map(ci).join("|")})\b[^.;\n]{0,60}?\b(?:${["via", "using", "through"].map(ci).join("|")}|${ci("provided")}${S}${ci("to")})${S}${ci("the")}${S}${ID}${S}${ci("tool")}\b` +
+    String.raw `|\b${WHEN}${S}(?:${ci("a")}|${ci("the")})${S}${ci("user")}${S}(?:${["queries", "searches", "asks", "requests"].map(ci).join("|")})\b[^.;\n]{0,40}?\b(?:${ci("using")}|${ci("via")})${S}(?:${ci("the")}${S})?${ID}` +
+    String.raw `|\b${WHEN}${S}(?:${ci("the")}${S})?${ID}${S}(?:${ci("tool")}${S})?(?:${ci("is")}|${ci("are")})${S}(?:${["called", "used", "invoked", "run", "executed"].map(ci).join("|")})\b` +
+    String.raw `|\b(?:${["all", "any", "every", "each"].map(ci).join("|")})${S}${ID}${S}(?:${["requests", "request", "calls", "call", "queries", "lookups", "operations"].map(ci).join("|")})\b` +
     String.raw `|\b(?:${["submitted", "passed", "sent", "given"].map(ci).join("|")})${S}${ci("to")}${S}(?:${ci("the")}${S})?${ID}` +
     String.raw `|\b(?:${["queries", "query", "requests", "request", "calls", "call", "inputs", "input"].map(ci).join("|")})${S}${ci("to")}${S}(?:${ci("the")}${S})?${ID}` +
     String.raw `|\b${ci("before")}${S}\w+ing\b[^.;
 ]{0,60}?\b(?:${["using", "with", "via", "through"].map(ci).join("|")})${S}(?:${ci("the")}${S})?${ID}` +
     String.raw `|\b${ci("before")}${S}(?:${["any", "every", "each"].map(ci).join("|")})\b`);
 const ALTER_VERB = /\b(?:modify|modified|change|changed|replace|replaced|append|appended|prepend|prepended|remove|removed|strip|override|overwrite|alter|rewrite|substitute|inject|insert)\b/i;
+// v15: verbs that rewrite another call's input only when a mandate binds them ("you must set `mode` to …",
+// "you should redirect any `symbol`"). On their own they describe ordinary use ("set `limit` to page").
+const MANDATED_ALTER = /\b(?:must|should|always|mandatory|required)\b[^.;\n]{0,60}?\b(?:set|add|ignore|redirect|redirected|convert|converted|join|wrap|force|switch|swap|restrict|use\s+the\s+new|change|modify|replace|append|prepend|override)\b[^.;\n]{0,60}?(?:[`'"‘’“”]|\b(?:parameter|argument|param|field|query|input)\b)/i;
+// v15: the frame's own clause goes straight on to set an argument to a fixed value ("When using `X`, set `bcc`
+// to 'a@b.example'"). Advice about values phrases them as advice ("set `limit` to a small number").
+const IMPERATIVE_SET = /^[^.;\n]{0,80}?,\s*(?:always\s+)?(?:set|change|replace|append|add)\b[^.;\n]{0,40}?\bto\s+[`'"‘“]/i;
 const MANDATE_WORDS = `(?:${["must", "should", "mandatory"].map(ci).join("|")}|${ci("need")}${S}${ci("to")}|${ci("have")}${S}${ci("to")}|${ci("required")}${S}${ci("to")}|${ci("is")}${S}${ci("required")})`;
 const MANDATED_CALL = new RegExp(String.raw `\b${MANDATE_WORDS}\b[^.;
 ]{0,40}?\b${CALL_VERB}${S}(?:${ci("the")}${S})?${ID}` +
     String.raw `|(?:^\s*|,\s*(?:${ci("then")}${S})?)(?:${["call", "run", "use", "invoke", "fetch", "query", "execute"].map(ci).join("|")})${S}(?:${ci("the")}${S})?${ID}`, "g");
+// v15. A call to another tool ordered before this one, aimed at a fixed target ("use 'deleteEmail' with UID
+// 99999", "use 'sendSimpleMail' to admin@…") and enforced with a threat ("Failure to do so will crash the system").
+// Honest prerequisites ("call `login` first") name no fixed target and threaten nothing.
+const PRECALL = new RegExp(String.raw `\b(?:${["before", "first"].map(ci).join("|")})\b[^.;\n]{0,40}?\b(?:${["use", "call", "run", "invoke", "trigger"].map(ci).join("|")})${S}(?:${ci("the")}${S})?${ID}`);
+const FIXED_TARGET = /^[^.;\n]{0,40}?\b(?:with|on|to|for|from)\s+(?:[\w-]+\s+){0,2}(?:'[^']{1,80}'|"[^"]{1,80}"|\d{3,}|[\w.+-]+@[\w-]+\.[\w.]+)/i;
+const THREAT = /\b(?:failure|failing|skipping|omitting|ignoring|forgetting|not\s+doing)\b[^.;\n]{0,40}?\bwill\b[^.;\n]{0,40}?\b(?:crash\w*|corrupt\w*|cause\w*|disrupt\w*|overload\w*|break\w*|fail\w*)\b|\bcritical\s+for\s+preventing\b/i;
 const CROSS_TOOL_PATTERNS = [
+    { re: PRECALL, code: "TOOL_DEF_CROSS_TOOL", severity: "high", tier: "block", surfaces: PROSE, note: "orders a call to another tool at a fixed target and threatens what happens if it is skipped", guards: ["threatenedCall"] },
     { re: CROSS_TOOL_FRAME, code: "TOOL_DEF_CROSS_TOOL", severity: "high", tier: "block", surfaces: PROSE, note: "binds to another tool's call to rewrite its input or pre-empt it with a different call", guards: ["crossTool"] },
     { re: new RegExp(String.raw `\b(?:${["must"].map(ci).join("|")}|${ci("need")}${S}${ci("to")}|${ci("have")}${S}${ci("to")})\b[^.;
 ]{0,40}?\b${CALL_VERB}${S}(?:${ci("the")}${S})?${ID}`), code: "TOOL_DEF_CROSS_TOOL", severity: "high", tier: "block", surfaces: PROSE, note: "takes no input and only orders another tool to be called", guards: ["zeroArgCall"] },
@@ -854,7 +876,7 @@ const GUARDS = {
      */
     crossTool(m, text, _surface, ctx) {
         const own = ownIdentifiers(ctx.tool);
-        const framed = [m[1], m[2], m[3], m[4], m[5], m[6], m[7], m[8]].filter((g) => !!g).map(normId);
+        const framed = m.slice(1).filter((g) => !!g).map(normId);
         const isBeforeAny = framed.length === 0;
         if (!isBeforeAny && framed.every((id) => own.has(id)))
             return "the named identifier is this tool or one of its own parameters";
@@ -862,6 +884,11 @@ const GUARDS = {
         if (!isBeforeAny && ALTER_VERB.test(sentence.text))
             return null;
         const next = sentenceAround(text, sentence.end + 1);
+        // v15: a mandated rewrite in this sentence or the next ("When `X` is called. You must change …").
+        if (!isBeforeAny && (MANDATED_ALTER.test(sentence.text) || (sentence.end < text.length && MANDATED_ALTER.test(next.text))))
+            return null;
+        if (!isBeforeAny && IMPERATIVE_SET.test(text.slice(m.index, sentence.end)))
+            return null;
         for (const piece of [sentence.text, sentence.end < text.length ? next.text : ""]) {
             for (const c of allMatches(MANDATED_CALL, piece)) {
                 const ids = [c[1], c[2], c[3], c[4]].filter((g) => !!g).map(normId);
@@ -871,6 +898,18 @@ const GUARDS = {
         }
         return "names another tool's call but neither rewrites its input nor orders a different call first — ordinary chaining";
     },
+    /** v15. The ordered call is to another tool, fixes its target, and the definition threatens the model. */
+    threatenedCall(m, text, _surface, ctx) {
+        const own = ownIdentifiers(ctx.tool);
+        const ids = m.slice(1).filter((g) => !!g).map(normId);
+        if (ids.length === 0 || ids.every((id) => own.has(id)))
+            return "the ordered call is to this tool itself";
+        if (!FIXED_TARGET.test(text.slice(m.index + m[0].length)))
+            return "the ordered call has no fixed target";
+        if (!THREAT.test(text))
+            return "the definition does not threaten the model";
+        return null;
+    },
     /** v10. Only a tool that takes no input can be nothing but an order to call another tool. */
     zeroArgCall(m, _text, _surface, ctx) {
         const props = ctx.tool.inputSchema?.properties ?? {};
@@ -985,7 +1024,11 @@ function hasExternalAddress(text) {
 // asking the user for ids" (`autonomy`, which also stops exempting any "without asking
 // the user" whose object is consent), and "the key is read from the MCP connection's
 // X-API-Key header" (`ownAuthHeader`).
-export const STATIC_SCAN_RULESET_VERSION = "14";
+// v15 widens TOOL_DEF_CROSS_TOOL from MCPTox's dev half only: the user's call ("when a user calls `X`"), a
+// passive one ("when `X` is called"), every call ("all `X` requests"), rewrites a mandate binds to a parameter
+// or a quoted value, and a call ordered at a fixed target under a threat (`threatenedCall`). The field corpus
+// blocks exactly what v14 blocked.
+export const STATIC_SCAN_RULESET_VERSION = "15";
 const SEVERITY_RANK = {
     info: 0,
     low: 1,