@avinashchby/aireview 0.1.0

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 Avinash Chaubey
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -0,0 +1,157 @@
+# aireview
+
+**Catch what your AI missed.** Static analysis for LLM-generated code -- no API keys, no cloud, no cost.
+
+[![npm version](https://img.shields.io/npm/v/aireview.svg)](https://www.npmjs.com/package/aireview)
+[![license](https://img.shields.io/npm/l/aireview.svg)](https://github.com/avinashchaubey/aireview/blob/main/LICENSE)
+[![node](https://img.shields.io/node/v/aireview.svg)](https://nodejs.org)
+
+```bash
+npx aireview .
+```
+
+```
+src/api.ts (confidence: 42%)
+  ✗ 3:1   'openai-functions' is a commonly hallucinated package  [phantom-imports]
+    | import { createFunction } from 'openai-functions';
+
+  ✗ 14:5  'fs.readFileAsync' does not exist  [hallucinated-apis]
+    | const data = await fs.readFileAsync('config.json');
+    Fix: Use 'fs.promises.readFile'
+
+  ✗ 22:0  eval() is a code injection vector  [security-antipatterns]
+    | const result = eval(userInput);
+
+  ⚠ 28:1  Hedging comment: "adjust as needed"  [confidence-patterns]
+    | // adjust as needed for your use case
+
+---
+Scanned 12 files in 38ms
+Found 3 errors, 1 warning
+```
+
+## Why this exists
+
+LLMs write confident-looking code that compiles, passes a glance review, and breaks in production. The failure modes are predictable:
+
+- **Phantom imports** -- packages that sound right but don't exist on npm/PyPI
+- **Hallucinated APIs** -- `fs.readFileAsync()`, `array.flatten()`, `dict.has_key()` -- methods that were never real or were removed years ago
+- **Placeholder stubs** -- empty function bodies, `// TODO` comments, `throw new Error("Not implemented")` hidden behind working-looking signatures
+- **Security holes** -- `eval()`, SQL string concatenation, hardcoded API keys -- patterns LLMs reproduce from training data without understanding the risk
+- **Swallowed errors** -- `catch(e) {}`, bare `except:`, `.catch(() => {})` -- silent failure modes that make debugging impossible
+
+These patterns are hard to catch in code review because they look intentional. `aireview` knows the specific shapes of LLM mistakes and flags them before they ship.
+
+**Zero API calls.** Pure AST parsing and pattern matching. Runs in milliseconds, works offline, costs nothing.
+
+## Install
+
+```bash
+npx aireview .              # run without installing
+npm install -g aireview     # or install globally
+```
+
+Requires Node.js >= 18.
+
+## Usage
+
+```bash
+aireview .                              # scan current directory
+aireview src/api.ts                     # scan a specific file
+aireview src/ lib/                      # scan multiple paths
+aireview --diff                         # scan staged git changes
+aireview --diff HEAD~1                  # scan last commit
+aireview --ci                           # CI mode: exit 1 if errors found
+aireview --format json                  # JSON output for tooling
+aireview --fix                          # auto-fix safe issues
+aireview --severity error               # only errors, skip warnings/info
+aireview --ignore phantom-imports       # skip specific rules
+```
+
+## Detection rules
+
+| Rule | Catches | Severity |
+|------|---------|----------|
+| `phantom-imports` | Imports of packages not in your dependency file, known hallucinated package names | warning/error |
+| `hallucinated-apis` | `fs.readFileAsync()`, `array.flatten()`, `new Buffer()`, `dict.has_key()`, 30+ more | error |
+| `placeholder-code` | TODO/FIXME, empty functions, `NotImplementedError`, `// ...` elisions | warning/error |
+| `confidence-patterns` | Generic variable names (`data`, `result`, `temp`), hedging comments, inconsistent style | info/warning |
+| `security-antipatterns` | `eval()`, `new Function()`, SQL injection, hardcoded secrets, disabled TLS | error |
+| `type-safety` | `any` overuse, `as any` casts, `@ts-ignore`, `@ts-nocheck`, loose equality | warning/error |
+| `error-handling` | Empty catch blocks, catch-only-logs, bare `except:`, missing `.catch()` | error/warning |
+
+## Configuration
+
+Create `.aireviewrc.json` in your project root:
+
+```json
+{
+  "rules": {
+    "phantom-imports": "error",
+    "hallucinated-apis": "error",
+    "placeholder-code": "warn",
+    "confidence-patterns": "off",
+    "security-antipatterns": "error",
+    "type-safety": "warn",
+    "error-handling": "error"
+  },
+  "ignore": ["*.test.ts", "*.spec.js"]
+}
+```
+
+Or add an `"aireview"` key to your `package.json`.
+
+## GitHub Actions
+
+```yaml
+name: AI Code Review
+on: [pull_request]
+
+jobs:
+  aireview:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+        with:
+          fetch-depth: 0
+
+      - uses: actions/setup-node@v4
+        with:
+          node-version: '20'
+
+      - name: Run aireview
+        run: npx aireview --diff origin/main --ci
+```
+
+Findings appear as inline annotations on the PR diff. Use `--format json` to pipe into other tools.
+
+## Programmatic API
+
+```typescript
+import { scan } from 'aireview';
+
+const result = await scan({
+  paths: ['src/'],
+  severity: 'warning',
+  ignore: ['confidence-patterns'],
+});
+
+for (const file of result.files) {
+  console.log(`${file.filePath}: ${file.confidenceScore}% confidence`);
+  for (const finding of file.findings) {
+    console.log(`  ${finding.line}:${finding.column} ${finding.message}`);
+  }
+}
+```
+
+## Supported languages
+
+- JavaScript (`.js`, `.jsx`) -- TypeScript compiler API
+- TypeScript (`.ts`, `.tsx`) -- TypeScript compiler API
+- Python (`.py`) -- regex-based parser (no native dependencies)
+
+Designed for extensibility. Add a language by implementing a parser that returns `ParserResult` and registering rules.
+
+## License
+
+MIT

package/bin/aireview.js

@@ -0,0 +1,2 @@
+#!/usr/bin/env node
+require('../dist/cli.js');

package/dist/cli.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=cli.d.ts.map

package/dist/cli.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cli.d.ts","sourceRoot":"","sources":["../src/cli.ts"],"names":[],"mappings":""}

package/dist/cli.js

@@ -0,0 +1,79 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+const commander_1 = require("commander");
+const index_js_1 = require("./scanner/index.js");
+const index_js_2 = require("./reporters/index.js");
+const index_js_3 = require("./fixer/index.js");
+const config_js_1 = require("./config.js");
+/** Create and configure the CLI program. */
+function createProgram() {
+    const program = new commander_1.Command();
+    program
+        .name('aireview')
+        .description('Static analysis tool that detects LLM hallucination patterns in code')
+        .version('0.1.0')
+        .argument('[paths...]', 'paths to scan', ['.'])
+        .option('--diff [ref]', 'scan git diff (staged if no ref)')
+        .option('--ci', 'CI mode with GitHub Actions annotations')
+        .option('--format <format>', 'output format (text or json)', 'text')
+        .option('--fix', 'auto-fix issues where possible')
+        .option('--severity <level>', 'minimum severity to report (error, warning, info)', 'info')
+        .option('--ignore <rules>', 'comma-separated rule IDs to skip')
+        .option('--config <path>', 'path to config file')
+        .action(runScan);
+    return program;
+}
+/** Main scan action handler. */
+async function runScan(paths, opts) {
+    const config = await (0, config_js_1.loadConfig)(opts.config);
+    const options = buildScanOptions(paths, opts, config);
+    const result = await (0, index_js_1.scan)(options);
+    if (opts.fix) {
+        const fixCount = await (0, index_js_3.applyFixes)(result);
+        if (fixCount > 0) {
+            console.log(`Applied ${fixCount} fixes.`);
+        }
+    }
+    const format = validateFormat(opts.format);
+    const reporter = (0, index_js_2.getReporter)(format, opts.ci ?? false);
+    reporter(result);
+    if (result.errorCount > 0 && opts.ci) {
+        process.exitCode = 1;
+    }
+}
+/** Build ScanOptions from CLI args and config. */
+function buildScanOptions(paths, opts, config) {
+    const ignoreRules = opts.ignore
+        ? opts.ignore.split(',').map((s) => s.trim())
+        : [];
+    return {
+        paths: paths.length > 0 ? paths : ['.'],
+        diff: opts.diff,
+        ci: opts.ci,
+        format: validateFormat(opts.format),
+        fix: opts.fix,
+        severity: validateSeverity(opts.severity),
+        ignore: [...ignoreRules, ...(config.ignore ?? [])],
+        config: opts.config,
+    };
+}
+/** Validate and return a format option. */
+function validateFormat(format) {
+    if (format === 'json')
+        return 'json';
+    return 'text';
+}
+/** Validate and return a severity option. */
+function validateSeverity(severity) {
+    if (severity === 'error' || severity === 'warning' || severity === 'info') {
+        return severity;
+    }
+    return 'info';
+}
+/** Entry point. */
+const program = createProgram();
+program.parseAsync(process.argv).catch((err) => {
+    console.error('Fatal error:', err instanceof Error ? err.message : String(err));
+    process.exitCode = 1;
+});
+//# sourceMappingURL=cli.js.map

package/dist/cli.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cli.js","sourceRoot":"","sources":["../src/cli.ts"],"names":[],"mappings":";;AAAA,yCAAoC;AACpC,iDAA0C;AAC1C,mDAAmD;AACnD,+CAA8C;AAC9C,2CAAyC;AAGzC,4CAA4C;AAC5C,SAAS,aAAa;IACpB,MAAM,OAAO,GAAG,IAAI,mBAAO,EAAE,CAAC;IAE9B,OAAO;SACJ,IAAI,CAAC,UAAU,CAAC;SAChB,WAAW,CAAC,sEAAsE,CAAC;SACnF,OAAO,CAAC,OAAO,CAAC;SAChB,QAAQ,CAAC,YAAY,EAAE,eAAe,EAAE,CAAC,GAAG,CAAC,CAAC;SAC9C,MAAM,CAAC,cAAc,EAAE,kCAAkC,CAAC;SAC1D,MAAM,CAAC,MAAM,EAAE,yCAAyC,CAAC;SACzD,MAAM,CAAC,mBAAmB,EAAE,8BAA8B,EAAE,MAAM,CAAC;SACnE,MAAM,CAAC,OAAO,EAAE,gCAAgC,CAAC;SACjD,MAAM,CAAC,oBAAoB,EAAE,mDAAmD,EAAE,MAAM,CAAC;SACzF,MAAM,CAAC,kBAAkB,EAAE,kCAAkC,CAAC;SAC9D,MAAM,CAAC,iBAAiB,EAAE,qBAAqB,CAAC;SAChD,MAAM,CAAC,OAAO,CAAC,CAAC;IAEnB,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,gCAAgC;AAChC,KAAK,UAAU,OAAO,CACpB,KAAe,EACf,IAQC;IAED,MAAM,MAAM,GAAG,MAAM,IAAA,sBAAU,EAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAC7C,MAAM,OAAO,GAAG,gBAAgB,CAAC,KAAK,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC;IACtD,MAAM,MAAM,GAAG,MAAM,IAAA,eAAI,EAAC,OAAO,CAAC,CAAC;IAEnC,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC;QACb,MAAM,QAAQ,GAAG,MAAM,IAAA,qBAAU,EAAC,MAAM,CAAC,CAAC;QAC1C,IAAI,QAAQ,GAAG,CAAC,EAAE,CAAC;YACjB,OAAO,CAAC,GAAG,CAAC,WAAW,QAAQ,SAAS,CAAC,CAAC;QAC5C,CAAC;IACH,CAAC;IAED,MAAM,MAAM,GAAG,cAAc,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAC3C,MAAM,QAAQ,GAAG,IAAA,sBAAW,EAAC,MAAM,EAAE,IAAI,CAAC,EAAE,IAAI,KAAK,CAAC,CAAC;IACvD,QAAQ,CAAC,MAAM,CAAC,CAAC;IAEjB,IAAI,MAAM,CAAC,UAAU,GAAG,CAAC,IAAI,IAAI,CAAC,EAAE,EAAE,CAAC;QACrC,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;IACvB,CAAC;AACH,CAAC;AAED,kDAAkD;AAClD,SAAS,gBAAgB,CACvB,KAAe,EACf,IAQC,EACD,MAA2C;IAE3C,MAAM,WAAW,GAAG,IAAI,CAAC,MAAM;QAC7B,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QAC7C,CAAC,CAAC,EAAE,CAAC;IAEP,OAAO;QACL,KAAK,EAAE,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC;QACvC,IAAI,EAAE,IAAI,CAAC,IAAI;QACf,EAAE,EAAE,IAAI,CAAC,EAAE;QACX,MAAM,EAAE,cAAc,CAAC,IAAI,CAAC,MAAM,CAAC;QACnC,GAAG,EAAE,IAAI,CAAC,GAAG;QACb,QAAQ,EAAE,gBAAgB,CAAC,IAAI,CAAC,QAAQ,CAAC;QACzC,MAAM,EAAE,CAAC,GAAG,WAAW,EAAE,GAAG,CAAC,MAAM,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC;QAClD,MAAM,EAAE,IAAI,CAAC,MAAM;KACpB,CAAC;AACJ,CAAC;AAED,2CAA2C;AAC3C,SAAS,cAAc,CAAC,MAAe;IACrC,IAAI,MAAM,KAAK,MAAM;QAAE,OAAO,MAAM,CAAC;IACrC,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,6CAA6C;AAC7C,SAAS,gBAAgB,CAAC,QAAiB;IACzC,IAAI,QAAQ,KAAK,OAAO,IAAI,QAAQ,KAAK,SAAS,IAAI,QAAQ,KAAK,MAAM,EAAE,CAAC;QAC1E,OAAO,QAAQ,CAAC;IAClB,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,mBAAmB;AACnB,MAAM,OAAO,GAAG,aAAa,EAAE,CAAC;AAChC,OAAO,CAAC,UAAU,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,GAAY,EAAE,EAAE;IACtD,OAAO,CAAC,KAAK,CAAC,cAAc,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;IAChF,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;AACvB,CAAC,CAAC,CAAC"}

package/dist/config.d.ts

@@ -0,0 +1,4 @@
+import type { AireviewConfig } from './types.js';
+/** Load aireview configuration from file or defaults. */
+export declare function loadConfig(configPath?: string): Promise<AireviewConfig>;
+//# sourceMappingURL=config.d.ts.map

package/dist/config.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AASjD,yDAAyD;AACzD,wBAAsB,UAAU,CAAC,UAAU,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,cAAc,CAAC,CAgB7E"}

package/dist/config.js

@@ -0,0 +1,78 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.loadConfig = loadConfig;
+const promises_1 = require("node:fs/promises");
+const node_path_1 = require("node:path");
+const node_fs_1 = require("node:fs");
+const CONFIG_FILENAME = '.aireviewrc.json';
+const DEFAULT_CONFIG = {
+    rules: {},
+    ignore: [],
+    languages: ['javascript', 'typescript', 'python'],
+};
+/** Load aireview configuration from file or defaults. */
+async function loadConfig(configPath) {
+    if (configPath) {
+        return mergeWithDefaults(await readConfigFile(configPath));
+    }
+    const found = await findConfigFile(process.cwd());
+    if (found) {
+        return mergeWithDefaults(await readConfigFile(found));
+    }
+    const pkgConfig = await loadFromPackageJson(process.cwd());
+    if (pkgConfig) {
+        return mergeWithDefaults(pkgConfig);
+    }
+    return { ...DEFAULT_CONFIG };
+}
+/** Read and parse a config file. */
+async function readConfigFile(path) {
+    try {
+        const content = await (0, promises_1.readFile)(path, 'utf-8');
+        return JSON.parse(content);
+    }
+    catch {
+        return {};
+    }
+}
+/** Walk up directories looking for .aireviewrc.json. */
+async function findConfigFile(startDir) {
+    let dir = startDir;
+    const root = (0, node_path_1.dirname)(dir);
+    for (let i = 0; i < 20; i++) {
+        const candidate = (0, node_path_1.join)(dir, CONFIG_FILENAME);
+        if ((0, node_fs_1.existsSync)(candidate))
+            return candidate;
+        const parent = (0, node_path_1.dirname)(dir);
+        if (parent === dir || parent === root)
+            break;
+        dir = parent;
+    }
+    return null;
+}
+/** Check package.json for an "aireview" config key. */
+async function loadFromPackageJson(startDir) {
+    const pkgPath = (0, node_path_1.join)(startDir, 'package.json');
+    if (!(0, node_fs_1.existsSync)(pkgPath))
+        return null;
+    try {
+        const content = await (0, promises_1.readFile)(pkgPath, 'utf-8');
+        const pkg = JSON.parse(content);
+        if (pkg['aireview'] && typeof pkg['aireview'] === 'object') {
+            return pkg['aireview'];
+        }
+    }
+    catch {
+        // Ignore parse errors
+    }
+    return null;
+}
+/** Merge a partial config with defaults. */
+function mergeWithDefaults(partial) {
+    return {
+        rules: { ...DEFAULT_CONFIG.rules, ...partial.rules },
+        ignore: partial.ignore ?? DEFAULT_CONFIG.ignore,
+        languages: partial.languages ?? DEFAULT_CONFIG.languages,
+    };
+}
+//# sourceMappingURL=config.js.map

package/dist/config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.js","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":";;AAaA,gCAgBC;AA7BD,+CAA4C;AAC5C,yCAA0C;AAC1C,qCAAqC;AAGrC,MAAM,eAAe,GAAG,kBAAkB,CAAC;AAC3C,MAAM,cAAc,GAAmB;IACrC,KAAK,EAAE,EAAE;IACT,MAAM,EAAE,EAAE;IACV,SAAS,EAAE,CAAC,YAAY,EAAE,YAAY,EAAE,QAAQ,CAAC;CAClD,CAAC;AAEF,yDAAyD;AAClD,KAAK,UAAU,UAAU,CAAC,UAAmB;IAClD,IAAI,UAAU,EAAE,CAAC;QACf,OAAO,iBAAiB,CAAC,MAAM,cAAc,CAAC,UAAU,CAAC,CAAC,CAAC;IAC7D,CAAC;IAED,MAAM,KAAK,GAAG,MAAM,cAAc,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC;IAClD,IAAI,KAAK,EAAE,CAAC;QACV,OAAO,iBAAiB,CAAC,MAAM,cAAc,CAAC,KAAK,CAAC,CAAC,CAAC;IACxD,CAAC;IAED,MAAM,SAAS,GAAG,MAAM,mBAAmB,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC;IAC3D,IAAI,SAAS,EAAE,CAAC;QACd,OAAO,iBAAiB,CAAC,SAAS,CAAC,CAAC;IACtC,CAAC;IAED,OAAO,EAAE,GAAG,cAAc,EAAE,CAAC;AAC/B,CAAC;AAED,oCAAoC;AACpC,KAAK,UAAU,cAAc,CAAC,IAAY;IACxC,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,MAAM,IAAA,mBAAQ,EAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QAC9C,OAAO,IAAI,CAAC,KAAK,CAAC,OAAO,CAA4B,CAAC;IACxD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED,wDAAwD;AACxD,KAAK,UAAU,cAAc,CAAC,QAAgB;IAC5C,IAAI,GAAG,GAAG,QAAQ,CAAC;IACnB,MAAM,IAAI,GAAG,IAAA,mBAAO,EAAC,GAAG,CAAC,CAAC;IAE1B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC;QAC5B,MAAM,SAAS,GAAG,IAAA,gBAAI,EAAC,GAAG,EAAE,eAAe,CAAC,CAAC;QAC7C,IAAI,IAAA,oBAAU,EAAC,SAAS,CAAC;YAAE,OAAO,SAAS,CAAC;QAE5C,MAAM,MAAM,GAAG,IAAA,mBAAO,EAAC,GAAG,CAAC,CAAC;QAC5B,IAAI,MAAM,KAAK,GAAG,IAAI,MAAM,KAAK,IAAI;YAAE,MAAM;QAC7C,GAAG,GAAG,MAAM,CAAC;IACf,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC;AAED,uDAAuD;AACvD,KAAK,UAAU,mBAAmB,CAChC,QAAgB;IAEhB,MAAM,OAAO,GAAG,IAAA,gBAAI,EAAC,QAAQ,EAAE,cAAc,CAAC,CAAC;IAC/C,IAAI,CAAC,IAAA,oBAAU,EAAC,OAAO,CAAC;QAAE,OAAO,IAAI,CAAC;IAEtC,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,MAAM,IAAA,mBAAQ,EAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QACjD,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAA4B,CAAC;QAC3D,IAAI,GAAG,CAAC,UAAU,CAAC,IAAI,OAAO,GAAG,CAAC,UAAU,CAAC,KAAK,QAAQ,EAAE,CAAC;YAC3D,OAAO,GAAG,CAAC,UAAU,CAA4B,CAAC;QACpD,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,sBAAsB;IACxB,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC;AAED,4CAA4C;AAC5C,SAAS,iBAAiB,CAAC,OAAgC;IACzD,OAAO;QACL,KAAK,EAAE,EAAE,GAAG,cAAc,CAAC,KAAK,EAAE,GAAG,OAAO,CAAC,KAAK,EAAE;QACpD,MAAM,EAAE,OAAO,CAAC,MAAM,IAAI,cAAc,CAAC,MAAM;QAC/C,SAAS,EAAE,OAAO,CAAC,SAAS,IAAI,cAAc,CAAC,SAAS;KACzD,CAAC;AACJ,CAAC"}

package/dist/fixer/index.d.ts

@@ -0,0 +1,4 @@
+import type { ScanResult } from '../types.js';
+/** Apply auto-fixes for findings that have a replacement. Returns count of fixes applied. */
+export declare function applyFixes(result: ScanResult): Promise<number>;
+//# sourceMappingURL=index.d.ts.map

package/dist/fixer/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/fixer/index.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,UAAU,EAAW,MAAM,aAAa,CAAC;AAEvD,6FAA6F;AAC7F,wBAAsB,UAAU,CAAC,MAAM,EAAE,UAAU,GAAG,OAAO,CAAC,MAAM,CAAC,CAYpE"}

package/dist/fixer/index.js

@@ -0,0 +1,54 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.applyFixes = applyFixes;
+const promises_1 = require("node:fs/promises");
+/** Apply auto-fixes for findings that have a replacement. Returns count of fixes applied. */
+async function applyFixes(result) {
+    let totalFixed = 0;
+    for (const file of result.files) {
+        const fixable = getFixableFindings(file.findings);
+        if (fixable.length === 0)
+            continue;
+        const fixed = await applyFixesToFile(file.filePath, fixable);
+        totalFixed += fixed;
+    }
+    return totalFixed;
+}
+/** Get findings that have a fix with a replacement, sorted bottom-up. */
+function getFixableFindings(findings) {
+    return findings
+        .filter((f) => f.fix?.replacement !== undefined)
+        .sort((a, b) => b.line - a.line);
+}
+/** Apply fixes to a single file, processing from bottom to top. */
+async function applyFixesToFile(filePath, findings) {
+    let source;
+    try {
+        source = await (0, promises_1.readFile)(filePath, 'utf-8');
+    }
+    catch {
+        return 0;
+    }
+    const lines = source.split('\n');
+    let applied = 0;
+    for (const finding of findings) {
+        if (!finding.fix?.replacement === undefined)
+            continue;
+        const lineIdx = finding.line - 1;
+        if (lineIdx < 0 || lineIdx >= lines.length)
+            continue;
+        const replacement = finding.fix.replacement;
+        lines[lineIdx] = applyLineReplacement(lines[lineIdx], finding.column - 1, finding.fix.endColumn ? finding.fix.endColumn - 1 : undefined, replacement);
+        applied++;
+    }
+    if (applied > 0) {
+        await (0, promises_1.writeFile)(filePath, lines.join('\n'), 'utf-8');
+    }
+    return applied;
+}
+/** Apply a replacement to a specific position within a line. */
+function applyLineReplacement(line, startCol, endCol, replacement) {
+    const end = endCol ?? line.length;
+    return line.slice(0, startCol) + replacement + line.slice(end);
+}
+//# sourceMappingURL=index.js.map

package/dist/fixer/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/fixer/index.ts"],"names":[],"mappings":";;AAIA,gCAYC;AAhBD,+CAAuD;AAGvD,6FAA6F;AACtF,KAAK,UAAU,UAAU,CAAC,MAAkB;IACjD,IAAI,UAAU,GAAG,CAAC,CAAC;IAEnB,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;QAChC,MAAM,OAAO,GAAG,kBAAkB,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAClD,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;YAAE,SAAS;QAEnC,MAAM,KAAK,GAAG,MAAM,gBAAgB,CAAC,IAAI,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;QAC7D,UAAU,IAAI,KAAK,CAAC;IACtB,CAAC;IAED,OAAO,UAAU,CAAC;AACpB,CAAC;AAED,yEAAyE;AACzE,SAAS,kBAAkB,CAAC,QAAmB;IAC7C,OAAO,QAAQ;SACZ,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,EAAE,WAAW,KAAK,SAAS,CAAC;SAC/C,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC;AACrC,CAAC;AAED,mEAAmE;AACnE,KAAK,UAAU,gBAAgB,CAC7B,QAAgB,EAChB,QAAmB;IAEnB,IAAI,MAAc,CAAC;IACnB,IAAI,CAAC;QACH,MAAM,GAAG,MAAM,IAAA,mBAAQ,EAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;IAC7C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,CAAC,CAAC;IACX,CAAC;IAED,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACjC,IAAI,OAAO,GAAG,CAAC,CAAC;IAEhB,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;QAC/B,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,WAAW,KAAK,SAAS;YAAE,SAAS;QACtD,MAAM,OAAO,GAAG,OAAO,CAAC,IAAI,GAAG,CAAC,CAAC;QACjC,IAAI,OAAO,GAAG,CAAC,IAAI,OAAO,IAAI,KAAK,CAAC,MAAM;YAAE,SAAS;QAErD,MAAM,WAAW,GAAG,OAAO,CAAC,GAAI,CAAC,WAAY,CAAC;QAC9C,KAAK,CAAC,OAAO,CAAC,GAAG,oBAAoB,CACnC,KAAK,CAAC,OAAO,CAAC,EACd,OAAO,CAAC,MAAM,GAAG,CAAC,EAClB,OAAO,CAAC,GAAI,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,GAAI,CAAC,SAAS,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,EAC/D,WAAW,CACZ,CAAC;QACF,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,IAAI,OAAO,GAAG,CAAC,EAAE,CAAC;QAChB,MAAM,IAAA,oBAAS,EAAC,QAAQ,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,OAAO,CAAC,CAAC;IACvD,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,gEAAgE;AAChE,SAAS,oBAAoB,CAC3B,IAAY,EACZ,QAAgB,EAChB,MAA0B,EAC1B,WAAmB;IAEnB,MAAM,GAAG,GAAG,MAAM,IAAI,IAAI,CAAC,MAAM,CAAC;IAClC,OAAO,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,QAAQ,CAAC,GAAG,WAAW,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;AACjE,CAAC"}

package/dist/index.d.ts

@@ -0,0 +1,4 @@
+/** Programmatic API for aireview. */
+export { scan } from './scanner/index.js';
+export type { Severity, RuleCategory, Language, FixSuggestion, Finding, FileResult, ScanResult, ScanOptions, ParsedImport, FunctionCall, FunctionDecl, Comment, TypeAnnotation, CatchBlock, StringLiteral, ParserResult, Rule, RuleContext, AireviewConfig, } from './types.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,qCAAqC;AACrC,OAAO,EAAE,IAAI,EAAE,MAAM,oBAAoB,CAAC;AAC1C,YAAY,EACV,QAAQ,EACR,YAAY,EACZ,QAAQ,EACR,aAAa,EACb,OAAO,EACP,UAAU,EACV,UAAU,EACV,WAAW,EACX,YAAY,EACZ,YAAY,EACZ,YAAY,EACZ,OAAO,EACP,cAAc,EACd,UAAU,EACV,aAAa,EACb,YAAY,EACZ,IAAI,EACJ,WAAW,EACX,cAAc,GACf,MAAM,YAAY,CAAC"}

package/dist/index.js

@@ -0,0 +1,7 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.scan = void 0;
+/** Programmatic API for aireview. */
+var index_js_1 = require("./scanner/index.js");
+Object.defineProperty(exports, "scan", { enumerable: true, get: function () { return index_js_1.scan; } });
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";;;AAAA,qCAAqC;AACrC,+CAA0C;AAAjC,gGAAA,IAAI,OAAA"}

package/dist/parsers/index.d.ts

@@ -0,0 +1,8 @@
+import type { ParserResult, Language } from '../types.js';
+/** Get the supported file extensions. */
+export declare function getSupportedExtensions(): string[];
+/** Determine the language of a file by its extension. */
+export declare function getLanguage(filePath: string): Language | null;
+/** Parse a source file into a structured ParserResult. */
+export declare function parseFile(source: string, filePath: string): ParserResult;
+//# sourceMappingURL=index.d.ts.map

package/dist/parsers/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/parsers/index.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,YAAY,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AAoB1D,yCAAyC;AACzC,wBAAgB,sBAAsB,IAAI,MAAM,EAAE,CAEjD;AAED,yDAAyD;AACzD,wBAAgB,WAAW,CAAC,QAAQ,EAAE,MAAM,GAAG,QAAQ,GAAG,IAAI,CAG7D;AAED,0DAA0D;AAC1D,wBAAgB,SAAS,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,YAAY,CAOxE"}

package/dist/parsers/index.js

@@ -0,0 +1,47 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.getSupportedExtensions = getSupportedExtensions;
+exports.getLanguage = getLanguage;
+exports.parseFile = parseFile;
+const typescript_parser_js_1 = require("./typescript-parser.js");
+const python_parser_js_1 = require("./python-parser.js");
+/** Map of file extensions to their parser functions. */
+const PARSER_MAP = {
+    '.ts': typescript_parser_js_1.parseTypeScript,
+    '.tsx': typescript_parser_js_1.parseTypeScript,
+    '.js': typescript_parser_js_1.parseTypeScript,
+    '.jsx': typescript_parser_js_1.parseTypeScript,
+    '.py': python_parser_js_1.parsePython,
+};
+/** Map of file extensions to their language identifier. */
+const LANGUAGE_MAP = {
+    '.ts': 'typescript',
+    '.tsx': 'typescript',
+    '.js': 'javascript',
+    '.jsx': 'javascript',
+    '.py': 'python',
+};
+/** Get the supported file extensions. */
+function getSupportedExtensions() {
+    return Object.keys(PARSER_MAP);
+}
+/** Determine the language of a file by its extension. */
+function getLanguage(filePath) {
+    const ext = getExtension(filePath);
+    return LANGUAGE_MAP[ext] ?? null;
+}
+/** Parse a source file into a structured ParserResult. */
+function parseFile(source, filePath) {
+    const ext = getExtension(filePath);
+    const parser = PARSER_MAP[ext];
+    if (!parser) {
+        throw new Error(`Unsupported file extension: ${ext}`);
+    }
+    return parser(source, filePath);
+}
+/** Extract the file extension from a path. */
+function getExtension(filePath) {
+    const match = filePath.match(/\.[^.]+$/);
+    return match ? match[0] : '';
+}
+//# sourceMappingURL=index.js.map

package/dist/parsers/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/parsers/index.ts"],"names":[],"mappings":";;AAuBA,wDAEC;AAGD,kCAGC;AAGD,8BAOC;AAzCD,iEAAyD;AACzD,yDAAiD;AAGjD,wDAAwD;AACxD,MAAM,UAAU,GAAuE;IACrF,KAAK,EAAE,sCAAe;IACtB,MAAM,EAAE,sCAAe;IACvB,KAAK,EAAE,sCAAe;IACtB,MAAM,EAAE,sCAAe;IACvB,KAAK,EAAE,8BAAW;CACnB,CAAC;AAEF,2DAA2D;AAC3D,MAAM,YAAY,GAA6B;IAC7C,KAAK,EAAE,YAAY;IACnB,MAAM,EAAE,YAAY;IACpB,KAAK,EAAE,YAAY;IACnB,MAAM,EAAE,YAAY;IACpB,KAAK,EAAE,QAAQ;CAChB,CAAC;AAEF,yCAAyC;AACzC,SAAgB,sBAAsB;IACpC,OAAO,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;AACjC,CAAC;AAED,yDAAyD;AACzD,SAAgB,WAAW,CAAC,QAAgB;IAC1C,MAAM,GAAG,GAAG,YAAY,CAAC,QAAQ,CAAC,CAAC;IACnC,OAAO,YAAY,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC;AACnC,CAAC;AAED,0DAA0D;AAC1D,SAAgB,SAAS,CAAC,MAAc,EAAE,QAAgB;IACxD,MAAM,GAAG,GAAG,YAAY,CAAC,QAAQ,CAAC,CAAC;IACnC,MAAM,MAAM,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC;IAC/B,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,MAAM,IAAI,KAAK,CAAC,+BAA+B,GAAG,EAAE,CAAC,CAAC;IACxD,CAAC;IACD,OAAO,MAAM,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;AAClC,CAAC;AAED,8CAA8C;AAC9C,SAAS,YAAY,CAAC,QAAgB;IACpC,MAAM,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;IACzC,OAAO,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;AAC/B,CAAC"}

package/dist/parsers/python-parser.d.ts

@@ -0,0 +1,4 @@
+import type { ParserResult } from '../types.js';
+/** Parse a Python source file using regex-based extraction. */
+export declare function parsePython(source: string, filePath: string): ParserResult;
+//# sourceMappingURL=python-parser.d.ts.map

package/dist/parsers/python-parser.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"python-parser.d.ts","sourceRoot":"","sources":["../../src/parsers/python-parser.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAOV,YAAY,EAEb,MAAM,aAAa,CAAC;AAErB,+DAA+D;AAC/D,wBAAgB,WAAW,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,YAAY,CAc1E"}