@clossys/writer 0.3.9 → 0.5.0

package/dist/resolve.d.ts

@@ -7,14 +7,47 @@
  * source provenance, and an approved entry. The result exposes every one of
  * those inputs so `@example/surface` can place them in its output
  * manifest without knowing how a consumer stores copy.
+ *
+ * Target policy: an owner-approved entry resolves on both `"preview"` and
+ * `"production"` (the default target). A delegate-approved entry resolves
+ * freely on `"preview"`, but on `"production"` is refused
+ * (`delegate-approval-refused`) unless the caller opts in with
+ * `acceptDelegateInProduction: true`, or passes `approvalPlan`, the bytes of
+ * a plan whose latest approval names that plan's own digest and which
+ * declares `delegatedCopyApproval` covering the entry — a delegate's sign-off
+ * is not, by itself, sufficient evidence to publish, only to preview.
  */
 import type { CopyRef, CopyRegistry, CopyResolution, CopyResolver } from "./types.js";
-export type CopyResolveIssueReason = "invalid-registry" | "invalid-ref" | "locale-mismatch" | "unknown-copy-id" | "copy-not-approved" | "missing-placeholder-value" | "unexpected-placeholder-value";
+import type { PlanDelegateCopyRefusal } from "./plan-authority.js";
+export type CopyResolveIssueReason = "invalid-registry" | "invalid-ref" | "locale-mismatch" | "unknown-copy-id" | "copy-not-approved" | "missing-placeholder-value" | "unexpected-placeholder-value" | "invalid-options" | "approval-stale" | "approval-expired" | "delegate-approval-refused";
+/** Which audience a resolution is for — see this file's top doc comment for the policy difference. */
+export type CopyResolveTarget = "preview" | "production";
+/** Options controlling how strictly `resolveCopyRef`/`createCopyResolver` treat an entry's approval record. */
+export interface CopyResolveOptions {
+    /** Defaults to `"production"`. */
+    target?: CopyResolveTarget;
+    /** Defaults to `false`. Only meaningful when `target` is `"production"`. */
+    acceptDelegateInProduction?: boolean;
+    /** Defaults to `new Date()`, evaluated per call. */
+    now?: Date;
+    /**
+     * The bytes of an Advisor plan record (a `Uint8Array`; Node's `Buffer` is
+     * one), read by the caller. Consulted only for a delegate-approved entry on
+     * `"production"` when `acceptDelegateInProduction` is not `true`: see
+     * `planDelegateCopyAuthority()`. Not a `Uint8Array`, or given together with
+     * `acceptDelegateInProduction: true`, is `"invalid-options"`.
+     */
+    approvalPlan?: Uint8Array;
+}
+/** Why an `approvalPlan` did not authorize an entry: the plan's own refusal, or that the entry is outside the scopes the plan declares. */
+export type CopyResolvePlanRefusal = PlanDelegateCopyRefusal | "entry-outside-plan-scopes";
 export interface CopyResolveIssue {
     reason: CopyResolveIssueReason;
     message: string;
     id?: string;
     placeholder?: string;
+    /** Only on `"delegate-approval-refused"` when an `approvalPlan` was given: why it did not authorize this entry. */
+    planRefusal?: CopyResolvePlanRefusal;
 }
 export interface CopyResolveResult {
     resolution?: CopyResolution;
@@ -23,11 +56,12 @@ export interface CopyResolveResult {
 }
 /**
  * Resolves a `CopyRef` against one locale-specific registry. Any absence,
- * lifecycle failure, locale mismatch, or placeholder mismatch produces no
- * text and a non-complete result. Consumers may log `issues`; renderers must
- * treat a missing `resolution` as an unresolved required input.
+ * lifecycle failure, locale mismatch, staleness/expiry, delegate-in-production
+ * refusal, or placeholder mismatch produces no text and a non-complete
+ * result. Consumers may log `issues`; renderers must treat a missing
+ * `resolution` as an unresolved required input.
  */
-export declare function resolveCopyRef(registry: CopyRegistry | unknown, ref: CopyRef | unknown): CopyResolveResult;
+export declare function resolveCopyRef(registry: CopyRegistry | unknown, ref: CopyRef | unknown, options?: CopyResolveOptions | unknown): CopyResolveResult;
 /** Creates the narrow resolver callback for presentation code. */
-export declare function createCopyResolver(registry: CopyRegistry | unknown): CopyResolver;
+export declare function createCopyResolver(registry: CopyRegistry | unknown, options?: CopyResolveOptions | unknown): CopyResolver;
 //# sourceMappingURL=resolve.d.ts.map

package/dist/resolve.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"resolve.d.ts","sourceRoot":"","sources":["../src/resolve.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,KAAK,EACV,OAAO,EACP,YAAY,EACZ,cAAc,EACd,YAAY,EAEb,MAAM,YAAY,CAAC;AAGpB,MAAM,MAAM,sBAAsB,GAC9B,kBAAkB,GAClB,aAAa,GACb,iBAAiB,GACjB,iBAAiB,GACjB,mBAAmB,GACnB,2BAA2B,GAC3B,8BAA8B,CAAC;AAEnC,MAAM,WAAW,gBAAgB;IAC/B,MAAM,EAAE,sBAAsB,CAAC;IAC/B,OAAO,EAAE,MAAM,CAAC;IAChB,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,WAAW,iBAAiB;IAChC,UAAU,CAAC,EAAE,cAAc,CAAC;IAC5B,MAAM,EAAE,gBAAgB,EAAE,CAAC;IAC3B,QAAQ,EAAE,OAAO,CAAC;CACnB;AAkBD;;;;;GAKG;AACH,wBAAgB,cAAc,CAAC,QAAQ,EAAE,YAAY,GAAG,OAAO,EAAE,GAAG,EAAE,OAAO,GAAG,OAAO,GAAG,iBAAiB,CAsG1G;AAED,kEAAkE;AAClE,wBAAgB,kBAAkB,CAAC,QAAQ,EAAE,YAAY,GAAG,OAAO,GAAG,YAAY,CAEjF"}
+{"version":3,"file":"resolve.d.ts","sourceRoot":"","sources":["../src/resolve.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAEH,OAAO,KAAK,EACV,OAAO,EACP,YAAY,EACZ,cAAc,EAEd,YAAY,EAEb,MAAM,YAAY,CAAC;AAIpB,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,qBAAqB,CAAC;AAEnE,MAAM,MAAM,sBAAsB,GAC9B,kBAAkB,GAClB,aAAa,GACb,iBAAiB,GACjB,iBAAiB,GACjB,mBAAmB,GACnB,2BAA2B,GAC3B,8BAA8B,GAC9B,iBAAiB,GACjB,gBAAgB,GAChB,kBAAkB,GAClB,2BAA2B,CAAC;AAEhC,sGAAsG;AACtG,MAAM,MAAM,iBAAiB,GAAG,SAAS,GAAG,YAAY,CAAC;AAEzD,+GAA+G;AAC/G,MAAM,WAAW,kBAAkB;IACjC,kCAAkC;IAClC,MAAM,CAAC,EAAE,iBAAiB,CAAC;IAC3B,4EAA4E;IAC5E,0BAA0B,CAAC,EAAE,OAAO,CAAC;IACrC,oDAAoD;IACpD,GAAG,CAAC,EAAE,IAAI,CAAC;IACX;;;;;;OAMG;IACH,YAAY,CAAC,EAAE,UAAU,CAAC;CAC3B;AAED,2IAA2I;AAC3I,MAAM,MAAM,sBAAsB,GAAG,uBAAuB,GAAG,2BAA2B,CAAC;AAE3F,MAAM,WAAW,gBAAgB;IAC/B,MAAM,EAAE,sBAAsB,CAAC;IAC/B,OAAO,EAAE,MAAM,CAAC;IAChB,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,mHAAmH;IACnH,WAAW,CAAC,EAAE,sBAAsB,CAAC;CACtC;AAED,MAAM,WAAW,iBAAiB;IAChC,UAAU,CAAC,EAAE,cAAc,CAAC;IAC5B,MAAM,EAAE,gBAAgB,EAAE,CAAC;IAC3B,QAAQ,EAAE,OAAO,CAAC;CACnB;AAmDD;;;;;;GAMG;AACH,wBAAgB,cAAc,CAC5B,QAAQ,EAAE,YAAY,GAAG,OAAO,EAChC,GAAG,EAAE,OAAO,GAAG,OAAO,EACtB,OAAO,CAAC,EAAE,kBAAkB,GAAG,OAAO,GACrC,iBAAiB,CA2LnB;AAED,kEAAkE;AAClE,wBAAgB,kBAAkB,CAAC,QAAQ,EAAE,YAAY,GAAG,OAAO,EAAE,OAAO,CAAC,EAAE,kBAAkB,GAAG,OAAO,GAAG,YAAY,CAEzH"}

package/dist/resolve.js

@@ -7,8 +7,19 @@
  * source provenance, and an approved entry. The result exposes every one of
  * those inputs so `@example/surface` can place them in its output
  * manifest without knowing how a consumer stores copy.
+ *
+ * Target policy: an owner-approved entry resolves on both `"preview"` and
+ * `"production"` (the default target). A delegate-approved entry resolves
+ * freely on `"preview"`, but on `"production"` is refused
+ * (`delegate-approval-refused`) unless the caller opts in with
+ * `acceptDelegateInProduction: true`, or passes `approvalPlan`, the bytes of
+ * a plan whose latest approval names that plan's own digest and which
+ * declares `delegatedCopyApproval` covering the entry — a delegate's sign-off
+ * is not, by itself, sufficient evidence to publish, only to preview.
  */
 import { validateCopyRegistryShape } from "./schema.js";
+import { isApprovalExpired, isApprovalStale, isEntryInDelegateScope } from "./approval.js";
+import { isPlanBytes, planDelegateCopyAuthority } from "./plan-authority.js";
 function isNonEmptyString(value) {
     return typeof value === "string" && value.trim().length > 0;
 }
@@ -21,13 +32,53 @@ function isCopyValue(value) {
 function interpolate(text, values) {
     return text.replace(/\{([^{}]+)\}/g, (_match, name) => String(values[name]));
 }
+/**
+ * Reads a well-formed `CopyResolveOptions`, or returns null — checked before
+ * anything else so a malformed caller-supplied options object fails closed
+ * rather than silently falling back to defaults. Each property is read
+ * exactly once, into a local that is validated and then used, so a getter
+ * cannot answer differently at validation and at use.
+ */
+function readResolveOptions(value) {
+    if (value === undefined)
+        return { target: "production", acceptDelegateInProduction: false, now: new Date(), approvalPlan: undefined };
+    if (!isPlainObject(value))
+        return null;
+    const { target, acceptDelegateInProduction, now, approvalPlan } = value;
+    if (target !== undefined && target !== "preview" && target !== "production")
+        return null;
+    if (acceptDelegateInProduction !== undefined && typeof acceptDelegateInProduction !== "boolean")
+        return null;
+    if (now !== undefined && !(now instanceof Date && Number.isFinite(now.getTime())))
+        return null;
+    if (approvalPlan !== undefined && !isPlanBytes(approvalPlan))
+        return null;
+    // Two authorities for one decision is an ambiguity, so it is refused: no precedence needs defining.
+    if (approvalPlan !== undefined && acceptDelegateInProduction === true)
+        return null;
+    return {
+        target: target ?? "production",
+        acceptDelegateInProduction: acceptDelegateInProduction ?? false,
+        now: now ?? new Date(),
+        approvalPlan,
+    };
+}
 /**
  * Resolves a `CopyRef` against one locale-specific registry. Any absence,
- * lifecycle failure, locale mismatch, or placeholder mismatch produces no
- * text and a non-complete result. Consumers may log `issues`; renderers must
- * treat a missing `resolution` as an unresolved required input.
+ * lifecycle failure, locale mismatch, staleness/expiry, delegate-in-production
+ * refusal, or placeholder mismatch produces no text and a non-complete
+ * result. Consumers may log `issues`; renderers must treat a missing
+ * `resolution` as an unresolved required input.
  */
-export function resolveCopyRef(registry, ref) {
+export function resolveCopyRef(registry, ref, options) {
+    const settings = readResolveOptions(options);
+    if (settings === null) {
+        return {
+            issues: [{ reason: "invalid-options", message: "CopyResolveOptions is malformed." }],
+            complete: false,
+        };
+    }
+    const { target, acceptDelegateInProduction, now, approvalPlan } = settings;
     const registryFindings = validateCopyRegistryShape(registry);
     if (registryFindings.length > 0) {
         return {
@@ -79,6 +130,70 @@ export function resolveCopyRef(registry, ref) {
             complete: false,
         };
     }
+    const approval = entry.approval;
+    // Set only when an approvalPlan, not the flag, authorized a delegate entry on production.
+    let authorizingPlanDigest;
+    if (approval) {
+        if (isApprovalStale(entry)) {
+            return {
+                issues: [
+                    {
+                        reason: "approval-stale",
+                        id: validRef.id,
+                        message: `CopyRef "${validRef.id}"'s approval record no longer matches its current text.`,
+                    },
+                ],
+                complete: false,
+            };
+        }
+        if (isApprovalExpired(approval, now)) {
+            return {
+                issues: [
+                    {
+                        reason: "approval-expired",
+                        id: validRef.id,
+                        message: `CopyRef "${validRef.id}"'s approval expired at ${approval.expiresAt}.`,
+                    },
+                ],
+                complete: false,
+            };
+        }
+        if (approval.approvedBy === "delegate" && target === "production" && acceptDelegateInProduction !== true) {
+            // The flag did not authorize this entry, so only a plan can. The plan is
+            // read here and nowhere else: never for preview, an owner entry, a
+            // record-less entry, or once the flag is true, and never before the
+            // entry's own staleness and expiry, which outrank it.
+            if (approvalPlan === undefined) {
+                return {
+                    issues: [
+                        {
+                            reason: "delegate-approval-refused",
+                            id: validRef.id,
+                            message: `CopyRef "${validRef.id}" was approved by a delegate; production resolution requires acceptDelegateInProduction: true.`,
+                        },
+                    ],
+                    complete: false,
+                };
+            }
+            const planRefused = (code) => ({
+                issues: [
+                    {
+                        reason: "delegate-approval-refused",
+                        id: validRef.id,
+                        planRefusal: code,
+                        message: `CopyRef "${validRef.id}" was approved by a delegate; the approvalPlan given does not authorize it on production (${code}).`,
+                    },
+                ],
+                complete: false,
+            });
+            const authority = planDelegateCopyAuthority(approvalPlan);
+            if (!authority.authorized)
+                return planRefused(authority.refusal);
+            if (authority.scopes !== undefined && !isEntryInDelegateScope(entry.id, authority.scopes))
+                return planRefused("entry-outside-plan-scopes");
+            authorizingPlanDigest = authority.planDigest;
+        }
+    }
     const values = validRef.values ?? {};
     const issues = [];
     const declared = new Set(entry.placeholders ?? []);
@@ -112,22 +227,33 @@ export function resolveCopyRef(registry, ref) {
     }
     if (issues.length > 0)
         return { issues, complete: false };
-    return {
-        resolution: {
-            ref: validRef,
-            text: interpolate(entry.text, values),
-            recordId: validRegistry.id,
-            revision: validRegistry.revision,
-            locale: validRegistry.locale,
-            source: validRegistry.source,
-            entryId: entry.id,
-        },
-        issues: [],
-        complete: true,
+    const resolution = {
+        ref: validRef,
+        text: interpolate(entry.text, values),
+        recordId: validRegistry.id,
+        revision: validRegistry.revision,
+        locale: validRegistry.locale,
+        source: validRegistry.source,
+        entryId: entry.id,
     };
+    // Only set when the entry actually carries a record — an approved entry
+    // with no record resolves exactly as it did before this field existed,
+    // with no `approval` key on the resolution at all.
+    if (approval) {
+        // Built explicitly, so the digest key exists only when a plan authorized the entry.
+        const facts = approval.approvedBy === "owner"
+            ? { approvedBy: "owner", pendingOwnerReview: false }
+            : {
+                approvedBy: "delegate",
+                pendingOwnerReview: approval.pendingOwnerReview === true,
+                ...(authorizingPlanDigest === undefined ? {} : { authorizingPlanDigest }),
+            };
+        resolution.approval = facts;
+    }
+    return { resolution, issues: [], complete: true };
 }
 /** Creates the narrow resolver callback for presentation code. */
-export function createCopyResolver(registry) {
-    return (ref) => resolveCopyRef(registry, ref).resolution;
+export function createCopyResolver(registry, options) {
+    return (ref) => resolveCopyRef(registry, ref, options).resolution;
 }
 //# sourceMappingURL=resolve.js.map

package/dist/resolve.js.map

@@ -1 +1 @@
-{"version":3,"file":"resolve.js","sourceRoot":"","sources":["../src/resolve.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AASH,OAAO,EAAE,yBAAyB,EAAE,MAAM,aAAa,CAAC;AAwBxD,SAAS,gBAAgB,CAAC,KAAc;IACtC,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,CAAC;AAC9D,CAAC;AAED,SAAS,aAAa,CAAC,KAAc;IACnC,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAC9E,CAAC;AAED,SAAS,WAAW,CAAC,KAAc;IACjC,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,OAAO,KAAK,KAAK,SAAS,CAAC;AAC9F,CAAC;AAED,SAAS,WAAW,CAAC,IAAY,EAAE,MAA2C;IAC5E,OAAO,IAAI,CAAC,OAAO,CAAC,eAAe,EAAE,CAAC,MAAM,EAAE,IAAY,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAE,CAAC,CAAC,CAAC;AACxF,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,cAAc,CAAC,QAAgC,EAAE,GAAsB;IACrF,MAAM,gBAAgB,GAAG,yBAAyB,CAAC,QAAQ,CAAC,CAAC;IAC7D,IAAI,gBAAgB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAChC,OAAO;YACL,MAAM,EAAE,CAAC,EAAE,MAAM,EAAE,kBAAkB,EAAE,OAAO,EAAE,kFAAkF,EAAE,CAAC;YACrI,QAAQ,EAAE,KAAK;SAChB,CAAC;IACJ,CAAC;IACD,mEAAmE;IACnE,wEAAwE;IACxE,gEAAgE;IAChE,MAAM,aAAa,GAAG,QAAwB,CAAC;IAE/C,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,KAAK,SAAS,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,KAAK,SAAS,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC;QAChL,OAAO;YACL,MAAM,EAAE,CAAC,EAAE,MAAM,EAAE,aAAa,EAAE,OAAO,EAAE,wCAAwC,EAAE,CAAC;YACtF,QAAQ,EAAE,KAAK;SAChB,CAAC;IACJ,CAAC;IACD,MAAM,QAAQ,GAAG,GAAkF,CAAC;IAEpG,IAAI,QAAQ,CAAC,MAAM,KAAK,SAAS,IAAI,QAAQ,CAAC,MAAM,KAAK,aAAa,CAAC,MAAM,EAAE,CAAC;QAC9E,OAAO;YACL,MAAM,EAAE;gBACN;oBACE,MAAM,EAAE,iBAAiB;oBACzB,EAAE,EAAE,QAAQ,CAAC,EAAE;oBACf,OAAO,EAAE,YAAY,QAAQ,CAAC,EAAE,sBAAsB,QAAQ,CAAC,MAAM,kCAAkC,aAAa,CAAC,MAAM,IAAI;iBAChI;aACF;YACD,QAAQ,EAAE,KAAK;SAChB,CAAC;IACJ,CAAC;IAED,MAAM,KAAK,GAAG,aAAa,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,EAAE,KAAK,QAAQ,CAAC,EAAE,CAAC,CAAC;IACtF,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,OAAO;YACL,MAAM,EAAE;gBACN,EAAE,MAAM,EAAE,iBAAiB,EAAE,EAAE,EAAE,QAAQ,CAAC,EAAE,EAAE,OAAO,EAAE,YAAY,QAAQ,CAAC,EAAE,iCAAiC,aAAa,CAAC,EAAE,IAAI,EAAE;aACtI;YACD,QAAQ,EAAE,KAAK;SAChB,CAAC;IACJ,CAAC;IAED,IAAI,KAAK,CAAC,MAAM,KAAK,UAAU,EAAE,CAAC;QAChC,OAAO;YACL,MAAM,EAAE;gBACN;oBACE,MAAM,EAAE,mBAAmB;oBAC3B,EAAE,EAAE,QAAQ,CAAC,EAAE;oBACf,OAAO,EAAE,YAAY,QAAQ,CAAC,EAAE,QAAQ,KAAK,CAAC,MAAM,+CAA+C;iBACpG;aACF;YACD,QAAQ,EAAE,KAAK;SAChB,CAAC;IACJ,CAAC;IAED,MAAM,MAAM,GAAG,QAAQ,CAAC,MAAM,IAAI,EAAE,CAAC;IACrC,MAAM,MAAM,GAAuB,EAAE,CAAC;IACtC,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,YAAY,IAAI,EAAE,CAAC,CAAC;IACnD,KAAK,MAAM,WAAW,IAAI,QAAQ,EAAE,CAAC;QACnC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,WAAW,CAAC,EAAE,CAAC;YACxC,MAAM,CAAC,IAAI,CAAC;gBACV,MAAM,EAAE,2BAA2B;gBACnC,EAAE,EAAE,QAAQ,CAAC,EAAE;gBACf,WAAW;gBACX,OAAO,EAAE,YAAY,QAAQ,CAAC,EAAE,kDAAkD,WAAW,IAAI;aAClG,CAAC,CAAC;QACL,CAAC;aAAM,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,EAAE,CAAC;YAC7C,MAAM,CAAC,IAAI,CAAC;gBACV,MAAM,EAAE,2BAA2B;gBACnC,EAAE,EAAE,QAAQ,CAAC,EAAE;gBACf,WAAW;gBACX,OAAO,EAAE,YAAY,QAAQ,CAAC,EAAE,2CAA2C,WAAW,IAAI;aAC3F,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IACD,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;QACvC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;YACxB,MAAM,CAAC,IAAI,CAAC;gBACV,MAAM,EAAE,8BAA8B;gBACtC,EAAE,EAAE,QAAQ,CAAC,EAAE;gBACf,WAAW,EAAE,IAAI;gBACjB,OAAO,EAAE,YAAY,QAAQ,CAAC,EAAE,eAAe,IAAI,8CAA8C;aAClG,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IACD,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;IAE1D,OAAO;QACL,UAAU,EAAE;YACV,GAAG,EAAE,QAA8B;YACnC,IAAI,EAAE,WAAW,CAAC,KAAK,CAAC,IAAI,EAAE,MAA6C,CAAC;YAC5E,QAAQ,EAAE,aAAa,CAAC,EAAE;YAC1B,QAAQ,EAAE,aAAa,CAAC,QAAQ;YAChC,MAAM,EAAE,aAAa,CAAC,MAAM;YAC5B,MAAM,EAAE,aAAa,CAAC,MAAM;YAC5B,OAAO,EAAE,KAAK,CAAC,EAAE;SAClB;QACD,MAAM,EAAE,EAAE;QACV,QAAQ,EAAE,IAAI;KACf,CAAC;AACJ,CAAC;AAED,kEAAkE;AAClE,MAAM,UAAU,kBAAkB,CAAC,QAAgC;IACjE,OAAO,CAAC,GAAG,EAAE,EAAE,CAAC,cAAc,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC,UAAU,CAAC;AAC3D,CAAC"}
+{"version":3,"file":"resolve.js","sourceRoot":"","sources":["../src/resolve.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAUH,OAAO,EAAE,yBAAyB,EAAE,MAAM,aAAa,CAAC;AACxD,OAAO,EAAE,iBAAiB,EAAE,eAAe,EAAE,sBAAsB,EAAE,MAAM,eAAe,CAAC;AAC3F,OAAO,EAAE,WAAW,EAAE,yBAAyB,EAAE,MAAM,qBAAqB,CAAC;AAuD7E,SAAS,gBAAgB,CAAC,KAAc;IACtC,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,CAAC;AAC9D,CAAC;AAED,SAAS,aAAa,CAAC,KAAc;IACnC,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAC9E,CAAC;AAED,SAAS,WAAW,CAAC,KAAc;IACjC,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,OAAO,KAAK,KAAK,SAAS,CAAC;AAC9F,CAAC;AAED,SAAS,WAAW,CAAC,IAAY,EAAE,MAA2C;IAC5E,OAAO,IAAI,CAAC,OAAO,CAAC,eAAe,EAAE,CAAC,MAAM,EAAE,IAAY,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAE,CAAC,CAAC,CAAC;AACxF,CAAC;AAUD;;;;;;GAMG;AACH,SAAS,kBAAkB,CAAC,KAAc;IACxC,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,EAAE,MAAM,EAAE,YAAY,EAAE,0BAA0B,EAAE,KAAK,EAAE,GAAG,EAAE,IAAI,IAAI,EAAE,EAAE,YAAY,EAAE,SAAS,EAAE,CAAC;IACtI,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACvC,MAAM,EAAE,MAAM,EAAE,0BAA0B,EAAE,GAAG,EAAE,YAAY,EAAE,GAAG,KAAK,CAAC;IACxE,IAAI,MAAM,KAAK,SAAS,IAAI,MAAM,KAAK,SAAS,IAAI,MAAM,KAAK,YAAY;QAAE,OAAO,IAAI,CAAC;IACzF,IAAI,0BAA0B,KAAK,SAAS,IAAI,OAAO,0BAA0B,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC;IAC7G,IAAI,GAAG,KAAK,SAAS,IAAI,CAAC,CAAC,GAAG,YAAY,IAAI,IAAI,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IAC/F,IAAI,YAAY,KAAK,SAAS,IAAI,CAAC,WAAW,CAAC,YAAY,CAAC;QAAE,OAAO,IAAI,CAAC;IAC1E,oGAAoG;IACpG,IAAI,YAAY,KAAK,SAAS,IAAI,0BAA0B,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IACnF,OAAO;QACL,MAAM,EAAE,MAAM,IAAI,YAAY;QAC9B,0BAA0B,EAAE,0BAA0B,IAAI,KAAK;QAC/D,GAAG,EAAE,GAAG,IAAI,IAAI,IAAI,EAAE;QACtB,YAAY;KACb,CAAC;AACJ,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,cAAc,CAC5B,QAAgC,EAChC,GAAsB,EACtB,OAAsC;IAEtC,MAAM,QAAQ,GAAG,kBAAkB,CAAC,OAAO,CAAC,CAAC;IAC7C,IAAI,QAAQ,KAAK,IAAI,EAAE,CAAC;QACtB,OAAO;YACL,MAAM,EAAE,CAAC,EAAE,MAAM,EAAE,iBAAiB,EAAE,OAAO,EAAE,kCAAkC,EAAE,CAAC;YACpF,QAAQ,EAAE,KAAK;SAChB,CAAC;IACJ,CAAC;IACD,MAAM,EAAE,MAAM,EAAE,0BAA0B,EAAE,GAAG,EAAE,YAAY,EAAE,GAAG,QAAQ,CAAC;IAE3E,MAAM,gBAAgB,GAAG,yBAAyB,CAAC,QAAQ,CAAC,CAAC;IAC7D,IAAI,gBAAgB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAChC,OAAO;YACL,MAAM,EAAE,CAAC,EAAE,MAAM,EAAE,kBAAkB,EAAE,OAAO,EAAE,kFAAkF,EAAE,CAAC;YACrI,QAAQ,EAAE,KAAK;SAChB,CAAC;IACJ,CAAC;IACD,mEAAmE;IACnE,wEAAwE;IACxE,gEAAgE;IAChE,MAAM,aAAa,GAAG,QAAwB,CAAC;IAE/C,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,KAAK,SAAS,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,KAAK,SAAS,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC;QAChL,OAAO;YACL,MAAM,EAAE,CAAC,EAAE,MAAM,EAAE,aAAa,EAAE,OAAO,EAAE,wCAAwC,EAAE,CAAC;YACtF,QAAQ,EAAE,KAAK;SAChB,CAAC;IACJ,CAAC;IACD,MAAM,QAAQ,GAAG,GAAkF,CAAC;IAEpG,IAAI,QAAQ,CAAC,MAAM,KAAK,SAAS,IAAI,QAAQ,CAAC,MAAM,KAAK,aAAa,CAAC,MAAM,EAAE,CAAC;QAC9E,OAAO;YACL,MAAM,EAAE;gBACN;oBACE,MAAM,EAAE,iBAAiB;oBACzB,EAAE,EAAE,QAAQ,CAAC,EAAE;oBACf,OAAO,EAAE,YAAY,QAAQ,CAAC,EAAE,sBAAsB,QAAQ,CAAC,MAAM,kCAAkC,aAAa,CAAC,MAAM,IAAI;iBAChI;aACF;YACD,QAAQ,EAAE,KAAK;SAChB,CAAC;IACJ,CAAC;IAED,MAAM,KAAK,GAAG,aAAa,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,EAAE,KAAK,QAAQ,CAAC,EAAE,CAAC,CAAC;IACtF,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,OAAO;YACL,MAAM,EAAE;gBACN,EAAE,MAAM,EAAE,iBAAiB,EAAE,EAAE,EAAE,QAAQ,CAAC,EAAE,EAAE,OAAO,EAAE,YAAY,QAAQ,CAAC,EAAE,iCAAiC,aAAa,CAAC,EAAE,IAAI,EAAE;aACtI;YACD,QAAQ,EAAE,KAAK;SAChB,CAAC;IACJ,CAAC;IAED,IAAI,KAAK,CAAC,MAAM,KAAK,UAAU,EAAE,CAAC;QAChC,OAAO;YACL,MAAM,EAAE;gBACN;oBACE,MAAM,EAAE,mBAAmB;oBAC3B,EAAE,EAAE,QAAQ,CAAC,EAAE;oBACf,OAAO,EAAE,YAAY,QAAQ,CAAC,EAAE,QAAQ,KAAK,CAAC,MAAM,+CAA+C;iBACpG;aACF;YACD,QAAQ,EAAE,KAAK;SAChB,CAAC;IACJ,CAAC;IAED,MAAM,QAAQ,GAAG,KAAK,CAAC,QAAQ,CAAC;IAChC,0FAA0F;IAC1F,IAAI,qBAAyC,CAAC;IAC9C,IAAI,QAAQ,EAAE,CAAC;QACb,IAAI,eAAe,CAAC,KAAK,CAAC,EAAE,CAAC;YAC3B,OAAO;gBACL,MAAM,EAAE;oBACN;wBACE,MAAM,EAAE,gBAAgB;wBACxB,EAAE,EAAE,QAAQ,CAAC,EAAE;wBACf,OAAO,EAAE,YAAY,QAAQ,CAAC,EAAE,yDAAyD;qBAC1F;iBACF;gBACD,QAAQ,EAAE,KAAK;aAChB,CAAC;QACJ,CAAC;QACD,IAAI,iBAAiB,CAAC,QAAQ,EAAE,GAAG,CAAC,EAAE,CAAC;YACrC,OAAO;gBACL,MAAM,EAAE;oBACN;wBACE,MAAM,EAAE,kBAAkB;wBAC1B,EAAE,EAAE,QAAQ,CAAC,EAAE;wBACf,OAAO,EAAE,YAAY,QAAQ,CAAC,EAAE,2BAA2B,QAAQ,CAAC,SAAS,GAAG;qBACjF;iBACF;gBACD,QAAQ,EAAE,KAAK;aAChB,CAAC;QACJ,CAAC;QACD,IAAI,QAAQ,CAAC,UAAU,KAAK,UAAU,IAAI,MAAM,KAAK,YAAY,IAAI,0BAA0B,KAAK,IAAI,EAAE,CAAC;YACzG,yEAAyE;YACzE,mEAAmE;YACnE,oEAAoE;YACpE,sDAAsD;YACtD,IAAI,YAAY,KAAK,SAAS,EAAE,CAAC;gBAC/B,OAAO;oBACL,MAAM,EAAE;wBACN;4BACE,MAAM,EAAE,2BAA2B;4BACnC,EAAE,EAAE,QAAQ,CAAC,EAAE;4BACf,OAAO,EAAE,YAAY,QAAQ,CAAC,EAAE,gGAAgG;yBACjI;qBACF;oBACD,QAAQ,EAAE,KAAK;iBAChB,CAAC;YACJ,CAAC;YACD,MAAM,WAAW,GAAG,CAAC,IAA4B,EAAqB,EAAE,CAAC,CAAC;gBACxE,MAAM,EAAE;oBACN;wBACE,MAAM,EAAE,2BAA2B;wBACnC,EAAE,EAAE,QAAQ,CAAC,EAAE;wBACf,WAAW,EAAE,IAAI;wBACjB,OAAO,EAAE,YAAY,QAAQ,CAAC,EAAE,6FAA6F,IAAI,IAAI;qBACtI;iBACF;gBACD,QAAQ,EAAE,KAAK;aAChB,CAAC,CAAC;YACH,MAAM,SAAS,GAAG,yBAAyB,CAAC,YAAY,CAAC,CAAC;YAC1D,IAAI,CAAC,SAAS,CAAC,UAAU;gBAAE,OAAO,WAAW,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;YACjE,IAAI,SAAS,CAAC,MAAM,KAAK,SAAS,IAAI,CAAC,sBAAsB,CAAC,KAAK,CAAC,EAAE,EAAE,SAAS,CAAC,MAAM,CAAC;gBAAE,OAAO,WAAW,CAAC,2BAA2B,CAAC,CAAC;YAC3I,qBAAqB,GAAG,SAAS,CAAC,UAAU,CAAC;QAC/C,CAAC;IACH,CAAC;IAED,MAAM,MAAM,GAAG,QAAQ,CAAC,MAAM,IAAI,EAAE,CAAC;IACrC,MAAM,MAAM,GAAuB,EAAE,CAAC;IACtC,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,YAAY,IAAI,EAAE,CAAC,CAAC;IACnD,KAAK,MAAM,WAAW,IAAI,QAAQ,EAAE,CAAC;QACnC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,WAAW,CAAC,EAAE,CAAC;YACxC,MAAM,CAAC,IAAI,CAAC;gBACV,MAAM,EAAE,2BAA2B;gBACnC,EAAE,EAAE,QAAQ,CAAC,EAAE;gBACf,WAAW;gBACX,OAAO,EAAE,YAAY,QAAQ,CAAC,EAAE,kDAAkD,WAAW,IAAI;aAClG,CAAC,CAAC;QACL,CAAC;aAAM,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,EAAE,CAAC;YAC7C,MAAM,CAAC,IAAI,CAAC;gBACV,MAAM,EAAE,2BAA2B;gBACnC,EAAE,EAAE,QAAQ,CAAC,EAAE;gBACf,WAAW;gBACX,OAAO,EAAE,YAAY,QAAQ,CAAC,EAAE,2CAA2C,WAAW,IAAI;aAC3F,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IACD,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;QACvC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;YACxB,MAAM,CAAC,IAAI,CAAC;gBACV,MAAM,EAAE,8BAA8B;gBACtC,EAAE,EAAE,QAAQ,CAAC,EAAE;gBACf,WAAW,EAAE,IAAI;gBACjB,OAAO,EAAE,YAAY,QAAQ,CAAC,EAAE,eAAe,IAAI,8CAA8C;aAClG,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IACD,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;IAE1D,MAAM,UAAU,GAAmB;QACjC,GAAG,EAAE,QAA8B;QACnC,IAAI,EAAE,WAAW,CAAC,KAAK,CAAC,IAAI,EAAE,MAA6C,CAAC;QAC5E,QAAQ,EAAE,aAAa,CAAC,EAAE;QAC1B,QAAQ,EAAE,aAAa,CAAC,QAAQ;QAChC,MAAM,EAAE,aAAa,CAAC,MAAM;QAC5B,MAAM,EAAE,aAAa,CAAC,MAAM;QAC5B,OAAO,EAAE,KAAK,CAAC,EAAE;KAClB,CAAC;IACF,wEAAwE;IACxE,uEAAuE;IACvE,mDAAmD;IACnD,IAAI,QAAQ,EAAE,CAAC;QACb,oFAAoF;QACpF,MAAM,KAAK,GACT,QAAQ,CAAC,UAAU,KAAK,OAAO;YAC7B,CAAC,CAAC,EAAE,UAAU,EAAE,OAAO,EAAE,kBAAkB,EAAE,KAAK,EAAE;YACpD,CAAC,CAAC;gBACE,UAAU,EAAE,UAAU;gBACtB,kBAAkB,EAAE,QAAQ,CAAC,kBAAkB,KAAK,IAAI;gBACxD,GAAG,CAAC,qBAAqB,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,qBAAqB,EAAE,CAAC;aAC1E,CAAC;QACR,UAAU,CAAC,QAAQ,GAAG,KAAK,CAAC;IAC9B,CAAC;IAED,OAAO,EAAE,UAAU,EAAE,MAAM,EAAE,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;AACpD,CAAC;AAED,kEAAkE;AAClE,MAAM,UAAU,kBAAkB,CAAC,QAAgC,EAAE,OAAsC;IACzG,OAAO,CAAC,GAAG,EAAE,EAAE,CAAC,cAAc,CAAC,QAAQ,EAAE,GAAG,EAAE,OAAO,CAAC,CAAC,UAAU,CAAC;AACpE,CAAC"}

package/dist/scan.d.ts

@@ -454,4 +454,36 @@ interface ExtractResult {
  * source-text fixture.
  */
 export declare function extractCopyCandidates(content: string, filePath: string): ExtractResult;
+/** One string or template literal `maskNonCode` found, with its position in the original content. */
+export interface MaskedLiteral {
+    kind: "string" | "template";
+    line: number;
+    /** Index of the opening quote/backtick. */
+    start: number;
+    /** Index one past the closing quote/backtick. */
+    end: number;
+    raw: string;
+    /** The literal's static text, unescaped; a template's interpolations are dropped. */
+    text: string;
+}
+/** `maskNonCode`'s result. `code` has the same length and line breaks as the input. */
+export interface CodeMask {
+    code: string;
+    literals: MaskedLiteral[];
+    failure?: string;
+}
+/**
+ * Pure. Runs this file's tokenizer over `content` and returns a copy of it in
+ * which every comment, string literal, template static segment, regex literal
+ * and (in a `.tsx`/`.jsx` file) JSX text run is replaced by spaces, keeping
+ * every newline and every character offset. A caller can then match code
+ * patterns against `code` without a comment or a string ever matching, and
+ * look up the literal at a given offset through `literals`. A template's
+ * `${...}` interpolations stay visible in `code`, because they are code.
+ *
+ * Exported for `approval-bypass.ts` so it delegates literal and comment
+ * boundaries to this tokenizer instead of growing a second one. Deliberately
+ * not re-exported from `index.ts`: it is an internal helper, not package API.
+ */
+export declare function maskNonCode(content: string, filePath: string): CodeMask;
 //# sourceMappingURL=scan.d.ts.map

package/dist/scan.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"scan.d.ts","sourceRoot":"","sources":["../src/scan.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6RG;AAIH,OAAO,EAGL,KAAK,YAAY,EACjB,KAAK,aAAa,EAClB,KAAK,oBAAoB,EAE1B,MAAM,sBAAsB,CAAC;AAE9B,YAAY,EAAE,YAAY,EAAE,aAAa,EAAE,oBAAoB,EAAE,wBAAwB,EAAE,MAAM,sBAAsB,CAAC;AAIxH,MAAM,WAAW,WAAW;IAC1B,sGAAsG;IACtG,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC;IACtB,gGAAgG;IAChG,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAC;IACpB;;;;;;;OAOG;IACH,cAAc,CAAC,EAAE,aAAa,EAAE,CAAC;CAClC;AAQD,MAAM,WAAW,aAAa;IAC5B,kEAAkE;IAClE,IAAI,EAAE,MAAM,CAAC;IACb,sDAAsD;IACtD,IAAI,EAAE,MAAM,CAAC;IACb,4MAA4M;IAC5M,IAAI,EAAE,QAAQ,GAAG,UAAU,GAAG,UAAU,CAAC;IACzC;;;;;;OAMG;IACH,GAAG,EAAE,MAAM,CAAC;IACZ;;;;;;;;;OASG;IACH,UAAU,EAAE,MAAM,CAAC;IACnB,sEAAsE;IACtE,gBAAgB,EAAE,MAAM,CAAC;IACzB;;;;;;;OAOG;IACH,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,mHAAmH;IACnH,eAAe,EAAE,OAAO,CAAC;CAC1B;AAED;;;;;;;;GAQG;AACH,MAAM,WAAW,QAAQ;IACvB,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,EAAE,EAAE,MAAM,CAAC;CACZ;AAYD,MAAM,MAAM,eAAe,GACvB,6BAA6B,GAC7B,6BAA6B,GAC7B,2BAA2B,GAC3B,8BAA8B,GAC9B,oCAAoC,GACpC,4BAA4B,GAC5B,+BAA+B,GAC/B,YAAY,GACZ,sBAAsB,CAAC;AAE3B,MAAM,WAAW,eAAe;IAC9B,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,gGAAgG;IAChG,GAAG,EAAE,MAAM,CAAC;IACZ,MAAM,EAAE,eAAe,CAAC;CACzB;AAED,MAAM,WAAW,YAAY;IAC3B,IAAI,EAAE,MAAM,CAAC;IACb,kJAAkJ;IAClJ,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,WAAW;IAC1B,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,oBAAoB,CAAC;CAC9B;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,uMAAuM;IACvM,IAAI,EAAE,MAAM,CAAC;IACb,6EAA6E;IAC7E,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,UAAU;IACzB,sNAAsN;IACtN,YAAY,EAAE,MAAM,CAAC;IACrB,UAAU,EAAE,aAAa,EAAE,CAAC;IAC5B,iIAAiI;IACjI,QAAQ,EAAE,eAAe,EAAE,CAAC;IAC5B,wJAAwJ;IACxJ,SAAS,EAAE,QAAQ,EAAE,CAAC;IACtB,mJAAmJ;IACnJ,eAAe,EAAE,WAAW,EAAE,CAAC;IAC/B,4LAA4L;IAC5L,aAAa,EAAE,YAAY,EAAE,CAAC;IAC9B,kOAAkO;IAClO,SAAS,EAAE,aAAa,EAAE,CAAC;IAC3B,yWAAyW;IACzW,aAAa,EAAE,YAAY,EAAE,CAAC;IAC9B,4aAA4a;IAC5a,qBAAqB,EAAE,oBAAoB,EAAE,CAAC;CAC/C;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,GAAE,WAAgB,GAAG,UAAU,CAoHtF;AAID;;;;;;;;;;GAUG;AACH,eAAO,MAAM,oBAAoB,WAAW,CAAC;AAkrC7C,UAAU,aAAa;IACrB,UAAU,EAAE,aAAa,EAAE,CAAC;IAC5B,QAAQ,EAAE,eAAe,EAAE,CAAC;IAC5B,SAAS,EAAE,QAAQ,EAAE,CAAC;IACtB,uGAAuG;IACvG,SAAS,EAAE,aAAa,EAAE,CAAC;IAC3B,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AA8BD;;;;;;;;GAQG;AACH,wBAAgB,qBAAqB,CAAC,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,aAAa,CAyItF"}
+{"version":3,"file":"scan.d.ts","sourceRoot":"","sources":["../src/scan.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6RG;AAIH,OAAO,EAGL,KAAK,YAAY,EACjB,KAAK,aAAa,EAClB,KAAK,oBAAoB,EAE1B,MAAM,sBAAsB,CAAC;AAE9B,YAAY,EAAE,YAAY,EAAE,aAAa,EAAE,oBAAoB,EAAE,wBAAwB,EAAE,MAAM,sBAAsB,CAAC;AAIxH,MAAM,WAAW,WAAW;IAC1B,sGAAsG;IACtG,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC;IACtB,gGAAgG;IAChG,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAC;IACpB;;;;;;;OAOG;IACH,cAAc,CAAC,EAAE,aAAa,EAAE,CAAC;CAClC;AAQD,MAAM,WAAW,aAAa;IAC5B,kEAAkE;IAClE,IAAI,EAAE,MAAM,CAAC;IACb,sDAAsD;IACtD,IAAI,EAAE,MAAM,CAAC;IACb,4MAA4M;IAC5M,IAAI,EAAE,QAAQ,GAAG,UAAU,GAAG,UAAU,CAAC;IACzC;;;;;;OAMG;IACH,GAAG,EAAE,MAAM,CAAC;IACZ;;;;;;;;;OASG;IACH,UAAU,EAAE,MAAM,CAAC;IACnB,sEAAsE;IACtE,gBAAgB,EAAE,MAAM,CAAC;IACzB;;;;;;;OAOG;IACH,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,mHAAmH;IACnH,eAAe,EAAE,OAAO,CAAC;CAC1B;AAED;;;;;;;;GAQG;AACH,MAAM,WAAW,QAAQ;IACvB,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,EAAE,EAAE,MAAM,CAAC;CACZ;AAYD,MAAM,MAAM,eAAe,GACvB,6BAA6B,GAC7B,6BAA6B,GAC7B,2BAA2B,GAC3B,8BAA8B,GAC9B,oCAAoC,GACpC,4BAA4B,GAC5B,+BAA+B,GAC/B,YAAY,GACZ,sBAAsB,CAAC;AAE3B,MAAM,WAAW,eAAe;IAC9B,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,gGAAgG;IAChG,GAAG,EAAE,MAAM,CAAC;IACZ,MAAM,EAAE,eAAe,CAAC;CACzB;AAED,MAAM,WAAW,YAAY;IAC3B,IAAI,EAAE,MAAM,CAAC;IACb,kJAAkJ;IAClJ,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,WAAW;IAC1B,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,oBAAoB,CAAC;CAC9B;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,uMAAuM;IACvM,IAAI,EAAE,MAAM,CAAC;IACb,6EAA6E;IAC7E,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,UAAU;IACzB,sNAAsN;IACtN,YAAY,EAAE,MAAM,CAAC;IACrB,UAAU,EAAE,aAAa,EAAE,CAAC;IAC5B,iIAAiI;IACjI,QAAQ,EAAE,eAAe,EAAE,CAAC;IAC5B,wJAAwJ;IACxJ,SAAS,EAAE,QAAQ,EAAE,CAAC;IACtB,mJAAmJ;IACnJ,eAAe,EAAE,WAAW,EAAE,CAAC;IAC/B,4LAA4L;IAC5L,aAAa,EAAE,YAAY,EAAE,CAAC;IAC9B,kOAAkO;IAClO,SAAS,EAAE,aAAa,EAAE,CAAC;IAC3B,yWAAyW;IACzW,aAAa,EAAE,YAAY,EAAE,CAAC;IAC9B,4aAA4a;IAC5a,qBAAqB,EAAE,oBAAoB,EAAE,CAAC;CAC/C;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,GAAE,WAAgB,GAAG,UAAU,CAoHtF;AAID;;;;;;;;;;GAUG;AACH,eAAO,MAAM,oBAAoB,WAAW,CAAC;AAutC7C,UAAU,aAAa;IACrB,UAAU,EAAE,aAAa,EAAE,CAAC;IAC5B,QAAQ,EAAE,eAAe,EAAE,CAAC;IAC5B,SAAS,EAAE,QAAQ,EAAE,CAAC;IACtB,uGAAuG;IACvG,SAAS,EAAE,aAAa,EAAE,CAAC;IAC3B,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AA8BD;;;;;;;;GAQG;AACH,wBAAgB,qBAAqB,CAAC,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,aAAa,CAyItF;AAED,qGAAqG;AACrG,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,QAAQ,GAAG,UAAU,CAAC;IAC5B,IAAI,EAAE,MAAM,CAAC;IACb,2CAA2C;IAC3C,KAAK,EAAE,MAAM,CAAC;IACd,iDAAiD;IACjD,GAAG,EAAE,MAAM,CAAC;IACZ,GAAG,EAAE,MAAM,CAAC;IACZ,qFAAqF;IACrF,IAAI,EAAE,MAAM,CAAC;CACd;AAED,uFAAuF;AACvF,MAAM,WAAW,QAAQ;IACvB,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,aAAa,EAAE,CAAC;IAC1B,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED;;;;;;;;;;;;GAYG;AACH,wBAAgB,WAAW,CAAC,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,QAAQ,CAmBvE"}

package/dist/scan.js

@@ -479,6 +479,7 @@ function tokenize(content, isJsxFile) {
     const literals = [];
     const jsxTexts = [];
     const unchecked = [];
+    const opaque = [];
     const n = content.length;
     let i = 0;
     let line = 1;
@@ -536,6 +537,7 @@ function tokenize(content, isJsxFile) {
             }
             if (ck === '"' || ck === "'") {
                 const q = ck;
+                const stringStart = j;
                 j++;
                 while (j < n && content[j] !== q) {
                     if (content[j] === "\\")
@@ -545,6 +547,7 @@ function tokenize(content, isJsxFile) {
                     j++;
                 }
                 j++; // consume closing quote, or run past EOF — caught by the outer unterminated-template check
+                opaque.push([stringStart, Math.min(j, n)]);
                 continue;
             }
             if (ck === "`") {
@@ -556,6 +559,7 @@ function tokenize(content, isJsxFile) {
             }
             if (ck === "/" && content[j + 1] === "/") {
                 const nl = content.indexOf("\n", j);
+                opaque.push([j, nl === -1 ? n : nl]);
                 j = nl === -1 ? n : nl;
                 continue;
             }
@@ -564,6 +568,7 @@ function tokenize(content, isJsxFile) {
                 if (close === -1)
                     return -1;
                 advanceLine(j, close + 2);
+                opaque.push([j, close + 2]);
                 j = close + 2;
                 continue;
             }
@@ -574,24 +579,29 @@ function tokenize(content, isJsxFile) {
     /** Skips an entire template literal starting at `pos` (`content[pos] === "\`"`), including every interpolation it contains, recursively. Returns the index one past its closing backtick, or `-1` if unterminated. */
     function skipTemplateFrom(pos) {
         let j = pos + 1;
+        let segmentStart = pos;
         while (j < n) {
             const cj = content[j];
             if (cj === "\\" && j + 1 < n) {
                 j += 2;
                 continue;
             }
-            if (cj === "`")
+            if (cj === "`") {
+                opaque.push([segmentStart, j + 1]);
                 return j + 1;
+            }
             if (cj === "\n") {
                 line++;
                 j++;
                 continue;
             }
             if (cj === "$" && content[j + 1] === "{") {
+                opaque.push([segmentStart, j]);
                 const next = skipInterpolation(j + 2);
                 if (next === -1)
                     return -1;
                 j = next;
+                segmentStart = j;
                 continue;
             }
             j++;
@@ -653,6 +663,7 @@ function tokenize(content, isJsxFile) {
             literalFailure = `unterminated string starting at line ${startLine}`;
             return -1;
         }
+        opaque.push([start, j]);
         literals.push({
             kind: "string",
             line: startLine,
@@ -686,6 +697,7 @@ function tokenize(content, isJsxFile) {
         let j = pos + 1;
         let current = "";
         let closed = false;
+        let segmentStart = pos;
         while (j < n) {
             const cj = content[j];
             if (cj === "\\" && j + 1 < n) {
@@ -699,6 +711,7 @@ function tokenize(content, isJsxFile) {
                 break;
             }
             if (cj === "$" && content[j + 1] === "{") {
+                opaque.push([segmentStart, j]);
                 staticParts.push(unescape(current));
                 current = "";
                 placeholderCount++;
@@ -714,6 +727,7 @@ function tokenize(content, isJsxFile) {
                     return -1;
                 }
                 j = next;
+                segmentStart = j;
                 continue;
             }
             if (cj === "\n")
@@ -726,6 +740,7 @@ function tokenize(content, isJsxFile) {
             return -1;
         }
         staticParts.push(unescape(current));
+        opaque.push([segmentStart, j]);
         literals.push({
             kind: "template",
             line: startLine,
@@ -775,6 +790,7 @@ function tokenize(content, isJsxFile) {
             }
             if (cj === "/" && content[j + 1] === "/") {
                 const nl = content.indexOf("\n", j);
+                opaque.push([j, nl === -1 ? n : nl]);
                 j = nl === -1 ? n : nl;
                 continue;
             }
@@ -783,6 +799,7 @@ function tokenize(content, isJsxFile) {
                 if (close === -1)
                     return -1;
                 advanceLine(j, close + 2);
+                opaque.push([j, close + 2]);
                 j = close + 2;
                 continue;
             }
@@ -881,6 +898,7 @@ function tokenize(content, isJsxFile) {
                         let m = found + 1;
                         while (m < n && /[a-z]/i.test(content[m]))
                             m++;
+                        opaque.push([j, m]);
                         j = m;
                         localLast = "value";
                         continue;
@@ -916,8 +934,10 @@ function tokenize(content, isJsxFile) {
         const flush = () => {
             if (j > runStart) {
                 const raw = content.slice(runStart, j);
-                if (raw.trim().length > 0)
+                if (raw.trim().length > 0) {
                     jsxTexts.push({ line: runStartLine, raw });
+                    opaque.push([runStart, j]);
+                }
             }
         };
         while (j < n) {
@@ -1052,11 +1072,13 @@ function tokenize(content, isJsxFile) {
         const entryLiteralsCount = literals.length;
         const entryJsxTextsCount = jsxTexts.length;
         const entryUncheckedCount = unchecked.length;
+        const entryOpaqueCount = opaque.length;
         function backtrack() {
             line = entryLine;
             literals.length = entryLiteralsCount;
             jsxTexts.length = entryJsxTextsCount;
             unchecked.length = entryUncheckedCount;
+            opaque.length = entryOpaqueCount;
             return null;
         }
         if (depth > MAX_JSX_DEPTH) {
@@ -1118,6 +1140,7 @@ function tokenize(content, isJsxFile) {
                 // above.
                 if (cj === "/" && content[j + 1] === "/") {
                     const nl = content.indexOf("\n", j);
+                    opaque.push([j, nl === -1 ? n : nl]);
                     j = nl === -1 ? n : nl;
                     continue;
                 }
@@ -1126,6 +1149,7 @@ function tokenize(content, isJsxFile) {
                     if (close === -1)
                         return backtrack(); // unterminated block comment — not committed, silently not-JSX
                     advanceLine(j, close + 2);
+                    opaque.push([j, close + 2]);
                     j = close + 2;
                     continue;
                 }
@@ -1226,6 +1250,7 @@ function tokenize(content, isJsxFile) {
         // line comment
         if (c === "/" && content[i + 1] === "/") {
             const nl = content.indexOf("\n", i);
+            opaque.push([i, nl === -1 ? n : nl]);
             i = nl === -1 ? n : nl;
             continue;
         }
@@ -1233,8 +1258,9 @@ function tokenize(content, isJsxFile) {
         if (c === "/" && content[i + 1] === "*") {
             const close = content.indexOf("*/", i + 2);
             if (close === -1)
-                return { literals, jsxTexts, unchecked, failure: `unterminated block comment starting at line ${line}` };
+                return { literals, jsxTexts, unchecked, opaque, failure: `unterminated block comment starting at line ${line}` };
             advanceLine(i, close + 2);
+            opaque.push([i, close + 2]);
             i = close + 2;
             continue;
         }
@@ -1242,7 +1268,7 @@ function tokenize(content, isJsxFile) {
         if (c === '"' || c === "'") {
             const end = scanStringLiteral(i);
             if (end === -1)
-                return { literals, jsxTexts, unchecked, failure: literalFailure };
+                return { literals, jsxTexts, unchecked, opaque, failure: literalFailure };
             lastTokenType = "value";
             i = end;
             continue;
@@ -1251,7 +1277,7 @@ function tokenize(content, isJsxFile) {
         if (c === "`") {
             const end = scanTemplateLiteral(i);
             if (end === -1)
-                return { literals, jsxTexts, unchecked, failure: literalFailure };
+                return { literals, jsxTexts, unchecked, opaque, failure: literalFailure };
             lastTokenType = "value";
             i = end;
             continue;
@@ -1311,6 +1337,7 @@ function tokenize(content, isJsxFile) {
                     let k = found + 1;
                     while (k < n && /[a-z]/i.test(content[k]))
                         k++;
+                    opaque.push([i, k]);
                     i = k;
                     lastTokenType = "value";
                     continue;
@@ -1351,7 +1378,7 @@ function tokenize(content, isJsxFile) {
         lastTokenType = "other";
         i++;
     }
-    return { literals, jsxTexts, unchecked };
+    return { literals, jsxTexts, unchecked, opaque };
 }
 // ---------------------------------------------------------- classification
 const ARIA_DATA_ATTR_RE = /^(aria|data)[-A-Z]/i;
@@ -1725,4 +1752,38 @@ export function extractCopyCandidates(content, filePath) {
     const unchecked = rawUnchecked.map((u) => ({ file: filePath, line: u.line, kind: u.kind, detail: u.detail }));
     return { candidates, excluded, citations, unchecked };
 }
+/**
+ * Pure. Runs this file's tokenizer over `content` and returns a copy of it in
+ * which every comment, string literal, template static segment, regex literal
+ * and (in a `.tsx`/`.jsx` file) JSX text run is replaced by spaces, keeping
+ * every newline and every character offset. A caller can then match code
+ * patterns against `code` without a comment or a string ever matching, and
+ * look up the literal at a given offset through `literals`. A template's
+ * `${...}` interpolations stay visible in `code`, because they are code.
+ *
+ * Exported for `approval-bypass.ts` so it delegates literal and comment
+ * boundaries to this tokenizer instead of growing a second one. Deliberately
+ * not re-exported from `index.ts`: it is an internal helper, not package API.
+ */
+export function maskNonCode(content, filePath) {
+    const { literals, opaque, failure } = tokenize(content, JSX_FILE_RE.test(filePath));
+    const masked = content.split("");
+    if (!failure) {
+        for (const [start, end] of opaque) {
+            for (let k = start; k < end && k < masked.length; k++) {
+                if (masked[k] !== "\n")
+                    masked[k] = " ";
+            }
+        }
+    }
+    const out = literals.map((lit) => ({
+        kind: lit.kind,
+        line: lit.line,
+        start: lit.start,
+        end: lit.end,
+        raw: lit.raw,
+        text: lit.staticParts.join(""),
+    }));
+    return failure ? { code: masked.join(""), literals: out, failure } : { code: masked.join(""), literals: out };
+}
 //# sourceMappingURL=scan.js.map