@codeledger/cli 0.6.3 → 0.6.5

package/dist/review-intelligence/detectors/platform-helpers.js

@@ -0,0 +1,171 @@
+import { detectTriggers } from '../triggers.js';
+/**
+ * INVARIANT 3 — platform_helpers
+ *
+ * Detect bypassing of repository-standard helpers/patterns.
+ *
+ * Examples:
+ *   - raw reply.status(...).send(...) instead of shared error helper
+ *   - manual cache key format instead of shared helper
+ *   - custom rate limit logic instead of shared middleware
+ *
+ * Severity: P2 (repository drift)
+ */
+export const platformHelpersDetector = {
+    name: 'platform_helpers',
+    analyze(ctx) {
+        const findings = [];
+        for (const filePath of ctx.files) {
+            const content = ctx.fileContents.get(filePath);
+            if (!content)
+                continue;
+            if (!isAnalyzableFile(filePath))
+                continue;
+            // Check each pattern category
+            findings.push(...checkErrorResponseDrift(filePath, content, ctx));
+            findings.push(...checkCacheKeyDrift(filePath, content, ctx));
+            findings.push(...checkRateLimitDrift(filePath, content, ctx));
+        }
+        return findings;
+    },
+};
+/**
+ * Detect raw error responses when a shared error helper exists.
+ */
+function checkErrorResponseDrift(filePath, content, ctx) {
+    const errorHelper = ctx.repoStandards.find((s) => {
+        const lower = s.helper_name.toLowerCase();
+        return (lower.includes('error') ||
+            lower.includes('response') ||
+            lower.includes('notfound') ||
+            lower.includes('badrequest') ||
+            lower.includes('send'));
+    });
+    if (!errorHelper)
+        return [];
+    if (isInHelperDefinition(filePath, errorHelper))
+        return [];
+    const findings = [];
+    const triggers = detectTriggers(filePath, content);
+    const errorTriggers = triggers.filter((t) => t.type === 'raw_error_response');
+    for (const trigger of errorTriggers) {
+        // Check if this line or nearby lines use the shared helper
+        const lines = content.split('\n');
+        const startLine = Math.max(0, trigger.line - 4);
+        const endLine = Math.min(lines.length, trigger.line + 3);
+        const nearby = lines.slice(startLine, endLine).join('\n');
+        if (!nearby.includes(errorHelper.helper_name)) {
+            findings.push({
+                rule_id: 'RI-PH-001',
+                title: 'Raw error response bypasses shared error helper',
+                severity: 'P2',
+                category: 'platform_helpers',
+                file: filePath,
+                line: trigger.line,
+                trigger: 'raw error response construction',
+                missing_companions: [`Use ${errorHelper.helper_name} for consistent error responses`],
+                why_it_matters: `This repository has a standard error helper (${errorHelper.helper_name}). ` +
+                    'Using raw reply.status().send() for errors creates inconsistency in error format, ' +
+                    'may miss logging/observability hooks, and makes error handling harder to maintain.',
+                repo_standard: errorHelper,
+                confidence: 'medium',
+            });
+        }
+    }
+    return findings;
+}
+/**
+ * Detect manual cache key construction when a shared helper exists.
+ */
+function checkCacheKeyDrift(filePath, content, ctx) {
+    const cacheHelper = ctx.repoStandards.find((s) => {
+        const lower = s.helper_name.toLowerCase();
+        return (lower.includes('cache') ||
+            lower.includes('key'));
+    });
+    if (!cacheHelper)
+        return [];
+    if (isInHelperDefinition(filePath, cacheHelper))
+        return [];
+    const findings = [];
+    const triggers = detectTriggers(filePath, content);
+    const cacheTriggers = triggers.filter((t) => t.type === 'redis_cache_key');
+    for (const trigger of cacheTriggers) {
+        const lines = content.split('\n');
+        const startLine = Math.max(0, trigger.line - 4);
+        const endLine = Math.min(lines.length, trigger.line + 3);
+        const nearby = lines.slice(startLine, endLine).join('\n');
+        if (!nearby.includes(cacheHelper.helper_name)) {
+            findings.push({
+                rule_id: 'RI-PH-002',
+                title: 'Manual cache key bypasses shared cache helper',
+                severity: 'P2',
+                category: 'platform_helpers',
+                file: filePath,
+                line: trigger.line,
+                trigger: 'manual cache key construction',
+                missing_companions: [`Use ${cacheHelper.helper_name} for consistent cache key format`],
+                why_it_matters: `This repository has a standard cache helper (${cacheHelper.helper_name}). ` +
+                    'Manual cache key construction risks inconsistent key formats, ' +
+                    'missing tenant isolation, or namespace collisions.',
+                repo_standard: cacheHelper,
+                confidence: 'medium',
+            });
+        }
+    }
+    return findings;
+}
+/**
+ * Detect custom rate limiting when shared middleware exists.
+ */
+function checkRateLimitDrift(filePath, content, ctx) {
+    const rateLimitHelper = ctx.repoStandards.find((s) => s.helper_name.includes('rateLimit') ||
+        s.helper_name.includes('rate_limit') ||
+        s.helper_name.includes('throttle'));
+    if (!rateLimitHelper)
+        return [];
+    if (isInHelperDefinition(filePath, rateLimitHelper))
+        return [];
+    const findings = [];
+    // Detect custom rate limiting patterns
+    const rateLimitPatterns = [
+        /\brateLimit\s*\(/,
+        /\bthrottle\s*\(/,
+        /\brequestCount\b.*\b(?:>=|>|===)\b/,
+        /\bwindow\b.*\b(?:requests?|count|limit)\b/i,
+    ];
+    const lines = content.split('\n');
+    for (let i = 0; i < lines.length; i++) {
+        const line = lines[i];
+        const trimmed = line.trim();
+        if (trimmed.startsWith('//') || trimmed.startsWith('import '))
+            continue;
+        for (const pattern of rateLimitPatterns) {
+            if (pattern.test(line) && !line.includes(rateLimitHelper.helper_name)) {
+                findings.push({
+                    rule_id: 'RI-PH-003',
+                    title: 'Custom rate limiting bypasses shared middleware',
+                    severity: 'P2',
+                    category: 'platform_helpers',
+                    file: filePath,
+                    line: i + 1,
+                    trigger: 'custom rate limit logic',
+                    missing_companions: [`Use ${rateLimitHelper.helper_name} for consistent rate limiting`],
+                    why_it_matters: `This repository has a standard rate limiting helper (${rateLimitHelper.helper_name}). ` +
+                        'Custom rate limiting creates inconsistency and may miss distributed coordination.',
+                    repo_standard: rateLimitHelper,
+                    confidence: 'low',
+                });
+                break;
+            }
+        }
+    }
+    return findings;
+}
+function isInHelperDefinition(filePath, helper) {
+    return helper.example_paths.some((p) => filePath === p || filePath.endsWith(p));
+}
+function isAnalyzableFile(filePath) {
+    return /\.(?:ts|tsx|js|jsx|mts|mjs)$/.test(filePath);
+}
+//# sourceMappingURL=platform-helpers.js.map

package/dist/review-intelligence/detectors/platform-helpers.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"platform-helpers.js","sourceRoot":"","sources":["../../../src/review-intelligence/detectors/platform-helpers.ts"],"names":[],"mappings":"AAMA,OAAO,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAC;AAEhD;;;;;;;;;;;GAWG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAAsB;IACxD,IAAI,EAAE,kBAAkB;IAExB,OAAO,CAAC,GAAoB;QAC1B,MAAM,QAAQ,GAAoB,EAAE,CAAC;QAErC,KAAK,MAAM,QAAQ,IAAI,GAAG,CAAC,KAAK,EAAE,CAAC;YACjC,MAAM,OAAO,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;YAC/C,IAAI,CAAC,OAAO;gBAAE,SAAS;YAEvB,IAAI,CAAC,gBAAgB,CAAC,QAAQ,CAAC;gBAAE,SAAS;YAE1C,8BAA8B;YAC9B,QAAQ,CAAC,IAAI,CAAC,GAAG,uBAAuB,CAAC,QAAQ,EAAE,OAAO,EAAE,GAAG,CAAC,CAAC,CAAC;YAClE,QAAQ,CAAC,IAAI,CAAC,GAAG,kBAAkB,CAAC,QAAQ,EAAE,OAAO,EAAE,GAAG,CAAC,CAAC,CAAC;YAC7D,QAAQ,CAAC,IAAI,CAAC,GAAG,mBAAmB,CAAC,QAAQ,EAAE,OAAO,EAAE,GAAG,CAAC,CAAC,CAAC;QAChE,CAAC;QAED,OAAO,QAAQ,CAAC;IAClB,CAAC;CACF,CAAC;AAEF;;GAEG;AACH,SAAS,uBAAuB,CAC9B,QAAgB,EAChB,OAAe,EACf,GAAoB;IAEpB,MAAM,WAAW,GAAG,GAAG,CAAC,aAAa,CAAC,IAAI,CACxC,CAAC,CAAC,EAAE,EAAE;QACJ,MAAM,KAAK,GAAG,CAAC,CAAC,WAAW,CAAC,WAAW,EAAE,CAAC;QAC1C,OAAO,CACL,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC;YACvB,KAAK,CAAC,QAAQ,CAAC,UAAU,CAAC;YAC1B,KAAK,CAAC,QAAQ,CAAC,UAAU,CAAC;YAC1B,KAAK,CAAC,QAAQ,CAAC,YAAY,CAAC;YAC5B,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CACvB,CAAC;IACJ,CAAC,CACF,CAAC;IAEF,IAAI,CAAC,WAAW;QAAE,OAAO,EAAE,CAAC;IAC5B,IAAI,oBAAoB,CAAC,QAAQ,EAAE,WAAW,CAAC;QAAE,OAAO,EAAE,CAAC;IAE3D,MAAM,QAAQ,GAAoB,EAAE,CAAC;IACrC,MAAM,QAAQ,GAAG,cAAc,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;IACnD,MAAM,aAAa,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,oBAAoB,CAAC,CAAC;IAE9E,KAAK,MAAM,OAAO,IAAI,aAAa,EAAE,CAAC;QACpC,2DAA2D;QAC3D,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAClC,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,OAAO,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC;QAChD,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,EAAE,OAAO,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC;QACzD,MAAM,MAAM,GAAG,KAAK,CAAC,KAAK,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAE1D,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,WAAW,CAAC,WAAW,CAAC,EAAE,CAAC;YAC9C,QAAQ,CAAC,IAAI,CAAC;gBACZ,OAAO,EAAE,WAAW;gBACpB,KAAK,EAAE,iDAAiD;gBACxD,QAAQ,EAAE,IAAI;gBACd,QAAQ,EAAE,kBAAkB;gBAC5B,IAAI,EAAE,QAAQ;gBACd,IAAI,EAAE,OAAO,CAAC,IAAI;gBAClB,OAAO,EAAE,iCAAiC;gBAC1C,kBAAkB,EAAE,CAAC,OAAO,WAAW,CAAC,WAAW,iCAAiC,CAAC;gBACrF,cAAc,EACZ,gDAAgD,WAAW,CAAC,WAAW,KAAK;oBAC5E,oFAAoF;oBACpF,oFAAoF;gBACtF,aAAa,EAAE,WAAW;gBAC1B,UAAU,EAAE,QAAQ;aACrB,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED;;GAEG;AACH,SAAS,kBAAkB,CACzB,QAAgB,EAChB,OAAe,EACf,GAAoB;IAEpB,MAAM,WAAW,GAAG,GAAG,CAAC,aAAa,CAAC,IAAI,CACxC,CAAC,CAAC,EAAE,EAAE;QACJ,MAAM,KAAK,GAAG,CAAC,CAAC,WAAW,CAAC,WAAW,EAAE,CAAC;QAC1C,OAAO,CACL,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC;YACvB,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,CACtB,CAAC;IACJ,CAAC,CACF,CAAC;IAEF,IAAI,CAAC,WAAW;QAAE,OAAO,EAAE,CAAC;IAC5B,IAAI,oBAAoB,CAAC,QAAQ,EAAE,WAAW,CAAC;QAAE,OAAO,EAAE,CAAC;IAE3D,MAAM,QAAQ,GAAoB,EAAE,CAAC;IACrC,MAAM,QAAQ,GAAG,cAAc,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;IACnD,MAAM,aAAa,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,iBAAiB,CAAC,CAAC;IAE3E,KAAK,MAAM,OAAO,IAAI,aAAa,EAAE,CAAC;QACpC,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAClC,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,OAAO,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC;QAChD,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,EAAE,OAAO,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC;QACzD,MAAM,MAAM,GAAG,KAAK,CAAC,KAAK,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAE1D,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,WAAW,CAAC,WAAW,CAAC,EAAE,CAAC;YAC9C,QAAQ,CAAC,IAAI,CAAC;gBACZ,OAAO,EAAE,WAAW;gBACpB,KAAK,EAAE,+CAA+C;gBACtD,QAAQ,EAAE,IAAI;gBACd,QAAQ,EAAE,kBAAkB;gBAC5B,IAAI,EAAE,QAAQ;gBACd,IAAI,EAAE,OAAO,CAAC,IAAI;gBAClB,OAAO,EAAE,+BAA+B;gBACxC,kBAAkB,EAAE,CAAC,OAAO,WAAW,CAAC,WAAW,kCAAkC,CAAC;gBACtF,cAAc,EACZ,gDAAgD,WAAW,CAAC,WAAW,KAAK;oBAC5E,gEAAgE;oBAChE,oDAAoD;gBACtD,aAAa,EAAE,WAAW;gBAC1B,UAAU,EAAE,QAAQ;aACrB,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED;;GAEG;AACH,SAAS,mBAAmB,CAC1B,QAAgB,EAChB,OAAe,EACf,GAAoB;IAEpB,MAAM,eAAe,GAAG,GAAG,CAAC,aAAa,CAAC,IAAI,CAC5C,CAAC,CAAC,EAAE,EAAE,CACJ,CAAC,CAAC,WAAW,CAAC,QAAQ,CAAC,WAAW,CAAC;QACnC,CAAC,CAAC,WAAW,CAAC,QAAQ,CAAC,YAAY,CAAC;QACpC,CAAC,CAAC,WAAW,CAAC,QAAQ,CAAC,UAAU,CAAC,CACrC,CAAC;IAEF,IAAI,CAAC,eAAe;QAAE,OAAO,EAAE,CAAC;IAChC,IAAI,oBAAoB,CAAC,QAAQ,EAAE,eAAe,CAAC;QAAE,OAAO,EAAE,CAAC;IAE/D,MAAM,QAAQ,GAAoB,EAAE,CAAC;IAErC,uCAAuC;IACvC,MAAM,iBAAiB,GAAG;QACxB,kBAAkB;QAClB,iBAAiB;QACjB,oCAAoC;QACpC,4CAA4C;KAC7C,CAAC;IAEF,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAClC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACtC,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAE,CAAC;QACvB,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;QAE5B,IAAI,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,OAAO,CAAC,UAAU,CAAC,SAAS,CAAC;YAAE,SAAS;QAExE,KAAK,MAAM,OAAO,IAAI,iBAAiB,EAAE,CAAC;YACxC,IAAI,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,eAAe,CAAC,WAAW,CAAC,EAAE,CAAC;gBACtE,QAAQ,CAAC,IAAI,CAAC;oBACZ,OAAO,EAAE,WAAW;oBACpB,KAAK,EAAE,iDAAiD;oBACxD,QAAQ,EAAE,IAAI;oBACd,QAAQ,EAAE,kBAAkB;oBAC5B,IAAI,EAAE,QAAQ;oBACd,IAAI,EAAE,CAAC,GAAG,CAAC;oBACX,OAAO,EAAE,yBAAyB;oBAClC,kBAAkB,EAAE,CAAC,OAAO,eAAe,CAAC,WAAW,+BAA+B,CAAC;oBACvF,cAAc,EACZ,wDAAwD,eAAe,CAAC,WAAW,KAAK;wBACxF,mFAAmF;oBACrF,aAAa,EAAE,eAAe;oBAC9B,UAAU,EAAE,KAAK;iBAClB,CAAC,CAAC;gBACH,MAAM;YACR,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,SAAS,oBAAoB,CAAC,QAAgB,EAAE,MAAoB;IAClE,OAAO,MAAM,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,QAAQ,KAAK,CAAC,IAAI,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;AAClF,CAAC;AAED,SAAS,gBAAgB,CAAC,QAAgB;IACxC,OAAO,8BAA8B,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;AACvD,CAAC"}

package/dist/review-intelligence/detectors/runtime-validation.d.ts

@@ -0,0 +1,10 @@
+import type { InvariantDetector } from '../types.js';
+/**
+ * INVARIANT 1 — runtime_validation
+ *
+ * Trigger: typed route body/params/query (e.g. server.post<{ Body: ... }>(...))
+ * Invariant: runtime validation must exist (zod, ajv, Fastify schema)
+ * Severity: P1 (missing runtime validation)
+ */
+export declare const runtimeValidationDetector: InvariantDetector;
+//# sourceMappingURL=runtime-validation.d.ts.map

package/dist/review-intelligence/detectors/runtime-validation.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"runtime-validation.d.ts","sourceRoot":"","sources":["../../../src/review-intelligence/detectors/runtime-validation.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,iBAAiB,EAGlB,MAAM,aAAa,CAAC;AAGrB;;;;;;GAMG;AACH,eAAO,MAAM,yBAAyB,EAAE,iBAiEvC,CAAC"}

package/dist/review-intelligence/detectors/runtime-validation.js

@@ -0,0 +1,109 @@
+import { detectTriggers, isTypedRouteTrigger } from '../triggers.js';
+/**
+ * INVARIANT 1 — runtime_validation
+ *
+ * Trigger: typed route body/params/query (e.g. server.post<{ Body: ... }>(...))
+ * Invariant: runtime validation must exist (zod, ajv, Fastify schema)
+ * Severity: P1 (missing runtime validation)
+ */
+export const runtimeValidationDetector = {
+    name: 'runtime_validation',
+    analyze(ctx) {
+        const findings = [];
+        for (const filePath of ctx.files) {
+            const content = ctx.fileContents.get(filePath);
+            if (!content)
+                continue;
+            // Only analyze TypeScript/JavaScript files
+            if (!isAnalyzableFile(filePath))
+                continue;
+            const triggers = detectTriggers(filePath, content);
+            const typedRouteTriggers = triggers.filter(isTypedRouteTrigger);
+            if (typedRouteTriggers.length === 0)
+                continue;
+            // Check if file has runtime validation evidence
+            const hasValidation = checkRuntimeValidation(content, ctx);
+            if (!hasValidation.found) {
+                // Group triggers by proximity to avoid duplicate findings
+                const grouped = groupTriggersByProximity(typedRouteTriggers);
+                for (const group of grouped) {
+                    const firstTrigger = group[0];
+                    const triggerTypes = [...new Set(group.map((t) => t.type))];
+                    const triggerLabel = triggerTypes
+                        .map(formatTriggerType)
+                        .join(', ');
+                    const finding = {
+                        rule_id: 'RI-RV-001',
+                        title: 'Typed route without runtime validation',
+                        severity: 'P1',
+                        category: 'runtime_validation',
+                        file: filePath,
+                        line: firstTrigger.line,
+                        trigger: triggerLabel,
+                        missing_companions: ['Runtime validation (zod, ajv, or Fastify schema)'],
+                        why_it_matters: 'TypeScript generics on route definitions (Body, Params, Querystring) provide compile-time safety only. ' +
+                            'Without runtime validation, malformed input from clients will bypass type checks and may cause unexpected behavior or security issues.',
+                        confidence: 'high',
+                    };
+                    // Attach repo standard if a validation helper was discovered
+                    const validationStandard = ctx.repoStandards.find((s) => s.helper_name.includes('validate') ||
+                        s.helper_name.includes('schema') ||
+                        s.helper_name.includes('parse'));
+                    if (validationStandard) {
+                        finding.repo_standard = validationStandard;
+                    }
+                    findings.push(finding);
+                }
+            }
+        }
+        return findings;
+    },
+};
+function checkRuntimeValidation(content, _ctx) {
+    // Zod: .parse(), .safeParse(), z.object(), z.string(), etc.
+    if (/\bz\.(?:object|string|number|array|enum|union|literal|boolean)\s*\(/.test(content) && /\.(?:parse|safeParse)\s*\(/.test(content)) {
+        return { found: true, type: 'zod' };
+    }
+    // AJV: ajv.compile(), ajv.validate(), validate()
+    if (/\bajv\b/i.test(content) && /\.(?:compile|validate)\s*\(/.test(content)) {
+        return { found: true, type: 'ajv' };
+    }
+    // Fastify schema: schema: { body: ..., params: ..., querystring: ... }
+    if (/schema\s*:\s*\{/.test(content) && /(?:body|params|querystring)\s*:/.test(content)) {
+        return { found: true, type: 'fastify_schema' };
+    }
+    // Generic validation patterns: joi, yup, superstruct, valibot
+    if (/\b(?:joi|yup|superstruct|valibot)\b/i.test(content) && /\.(?:validate|parse|assert)\s*\(/.test(content)) {
+        return { found: true, type: 'generic_validator' };
+    }
+    return { found: false };
+}
+function isAnalyzableFile(filePath) {
+    return /\.(?:ts|tsx|js|jsx|mts|mjs)$/.test(filePath);
+}
+function formatTriggerType(type) {
+    return type.replace(/_/g, ' ');
+}
+/**
+ * Group triggers that are within 10 lines of each other
+ * to avoid duplicate findings for the same route handler.
+ */
+function groupTriggersByProximity(triggers) {
+    if (triggers.length === 0)
+        return [];
+    const sorted = [...triggers].sort((a, b) => a.line - b.line);
+    const groups = [[sorted[0]]];
+    for (let i = 1; i < sorted.length; i++) {
+        const current = sorted[i];
+        const lastGroup = groups[groups.length - 1];
+        const lastInGroup = lastGroup[lastGroup.length - 1];
+        if (current.line - lastInGroup.line <= 10) {
+            lastGroup.push(current);
+        }
+        else {
+            groups.push([current]);
+        }
+    }
+    return groups;
+}
+//# sourceMappingURL=runtime-validation.js.map

package/dist/review-intelligence/detectors/runtime-validation.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"runtime-validation.js","sourceRoot":"","sources":["../../../src/review-intelligence/detectors/runtime-validation.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,cAAc,EAAE,mBAAmB,EAAE,MAAM,gBAAgB,CAAC;AAErE;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,yBAAyB,GAAsB;IAC1D,IAAI,EAAE,oBAAoB;IAE1B,OAAO,CAAC,GAAoB;QAC1B,MAAM,QAAQ,GAAoB,EAAE,CAAC;QAErC,KAAK,MAAM,QAAQ,IAAI,GAAG,CAAC,KAAK,EAAE,CAAC;YACjC,MAAM,OAAO,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;YAC/C,IAAI,CAAC,OAAO;gBAAE,SAAS;YAEvB,2CAA2C;YAC3C,IAAI,CAAC,gBAAgB,CAAC,QAAQ,CAAC;gBAAE,SAAS;YAE1C,MAAM,QAAQ,GAAG,cAAc,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;YACnD,MAAM,kBAAkB,GAAG,QAAQ,CAAC,MAAM,CAAC,mBAAmB,CAAC,CAAC;YAEhE,IAAI,kBAAkB,CAAC,MAAM,KAAK,CAAC;gBAAE,SAAS;YAE9C,gDAAgD;YAChD,MAAM,aAAa,GAAG,sBAAsB,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;YAE3D,IAAI,CAAC,aAAa,CAAC,KAAK,EAAE,CAAC;gBACzB,0DAA0D;gBAC1D,MAAM,OAAO,GAAG,wBAAwB,CAAC,kBAAkB,CAAC,CAAC;gBAE7D,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;oBAC5B,MAAM,YAAY,GAAG,KAAK,CAAC,CAAC,CAAE,CAAC;oBAC/B,MAAM,YAAY,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;oBAC5D,MAAM,YAAY,GAAG,YAAY;yBAC9B,GAAG,CAAC,iBAAiB,CAAC;yBACtB,IAAI,CAAC,IAAI,CAAC,CAAC;oBAEd,MAAM,OAAO,GAAkB;wBAC7B,OAAO,EAAE,WAAW;wBACpB,KAAK,EAAE,wCAAwC;wBAC/C,QAAQ,EAAE,IAAI;wBACd,QAAQ,EAAE,oBAAoB;wBAC9B,IAAI,EAAE,QAAQ;wBACd,IAAI,EAAE,YAAY,CAAC,IAAI;wBACvB,OAAO,EAAE,YAAY;wBACrB,kBAAkB,EAAE,CAAC,kDAAkD,CAAC;wBACxE,cAAc,EACZ,yGAAyG;4BACzG,wIAAwI;wBAC1I,UAAU,EAAE,MAAM;qBACnB,CAAC;oBAEF,6DAA6D;oBAC7D,MAAM,kBAAkB,GAAG,GAAG,CAAC,aAAa,CAAC,IAAI,CAC/C,CAAC,CAAC,EAAE,EAAE,CACJ,CAAC,CAAC,WAAW,CAAC,QAAQ,CAAC,UAAU,CAAC;wBAClC,CAAC,CAAC,WAAW,CAAC,QAAQ,CAAC,QAAQ,CAAC;wBAChC,CAAC,CAAC,WAAW,CAAC,QAAQ,CAAC,OAAO,CAAC,CAClC,CAAC;oBACF,IAAI,kBAAkB,EAAE,CAAC;wBACvB,OAAO,CAAC,aAAa,GAAG,kBAAkB,CAAC;oBAC7C,CAAC;oBAED,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;gBACzB,CAAC;YACH,CAAC;QACH,CAAC;QAED,OAAO,QAAQ,CAAC;IAClB,CAAC;CACF,CAAC;AAOF,SAAS,sBAAsB,CAC7B,OAAe,EACf,IAAqB;IAErB,4DAA4D;IAC5D,IAAI,qEAAqE,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,4BAA4B,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;QACtI,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;IACtC,CAAC;IAED,iDAAiD;IACjD,IAAI,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,6BAA6B,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;QAC5E,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;IACtC,CAAC;IAED,uEAAuE;IACvE,IAAI,iBAAiB,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,iCAAiC,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;QACvF,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,gBAAgB,EAAE,CAAC;IACjD,CAAC;IAED,8DAA8D;IAC9D,IAAI,sCAAsC,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,kCAAkC,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;QAC7G,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,mBAAmB,EAAE,CAAC;IACpD,CAAC;IAED,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC;AAC1B,CAAC;AAED,SAAS,gBAAgB,CAAC,QAAgB;IACxC,OAAO,8BAA8B,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;AACvD,CAAC;AAED,SAAS,iBAAiB,CAAC,IAAY;IACrC,OAAO,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;AACjC,CAAC;AAED;;;GAGG;AACH,SAAS,wBAAwB,CAC/B,QAAmF;IAEnF,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IAErC,MAAM,MAAM,GAAG,CAAC,GAAG,QAAQ,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC;IAC7D,MAAM,MAAM,GAAqC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAE,CAAC,CAAC,CAAC;IAEhE,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACvC,MAAM,OAAO,GAAG,MAAM,CAAC,CAAC,CAAE,CAAC;QAC3B,MAAM,SAAS,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAE,CAAC;QAC7C,MAAM,WAAW,GAAG,SAAS,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC,CAAE,CAAC;QAErD,IAAI,OAAO,CAAC,IAAI,GAAG,WAAW,CAAC,IAAI,IAAI,EAAE,EAAE,CAAC;YAC1C,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAC1B,CAAC;aAAM,CAAC;YACN,MAAM,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;QACzB,CAAC;IACH,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/review-intelligence/index.d.ts

@@ -0,0 +1,17 @@
+import type { ReviewIntelligenceResult, ReviewIntelligenceOptions, ReviewIntelligencePolicy } from './types.js';
+export type { ReviewIntelligenceResult, ReviewIntelligenceOptions, ReviewIntelligencePolicy, ReviewFinding, } from './types.js';
+export { getAvailableInvariantNames } from './invariants.js';
+export { formatHumanOutput, formatJsonOutput, formatDebugOutput, formatVerifySummaryLine } from './output.js';
+/** Default policy when no review_intelligence config is present */
+export declare const DEFAULT_REVIEW_INTELLIGENCE_POLICY: ReviewIntelligencePolicy;
+/**
+ * Run the Review Intelligence engine.
+ *
+ * Pipeline:
+ *   1. Load file contents for changed/relevant files
+ *   2. Discover repo standards (helpers, wrappers)
+ *   3. Run enabled invariant detectors
+ *   4. Sort and summarize findings
+ */
+export declare function runReviewIntelligence(options: ReviewIntelligenceOptions): ReviewIntelligenceResult;
+//# sourceMappingURL=index.d.ts.map

package/dist/review-intelligence/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/review-intelligence/index.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EACV,wBAAwB,EACxB,yBAAyB,EACzB,wBAAwB,EAGzB,MAAM,YAAY,CAAC;AAMpB,YAAY,EACV,wBAAwB,EACxB,yBAAyB,EACzB,wBAAwB,EACxB,aAAa,GACd,MAAM,YAAY,CAAC;AAEpB,OAAO,EAAE,0BAA0B,EAAE,MAAM,iBAAiB,CAAC;AAC7D,OAAO,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,uBAAuB,EAAE,MAAM,aAAa,CAAC;AAE9G,mEAAmE;AACnE,eAAO,MAAM,kCAAkC,EAAE,wBAQhD,CAAC;AAEF;;;;;;;;GAQG;AACH,wBAAgB,qBAAqB,CACnC,OAAO,EAAE,yBAAyB,GACjC,wBAAwB,CAyE1B"}

package/dist/review-intelligence/index.js

@@ -0,0 +1,90 @@
+import { readFileSync } from 'node:fs';
+import { join } from 'node:path';
+import { getEnabledDetectors, getAvailableInvariantNames } from './invariants.js';
+import { discoverRepoStandards } from './standards-discovery.js';
+import { sortFindings, determineStatus } from './severity.js';
+import { detectTriggers } from './triggers.js';
+export { getAvailableInvariantNames } from './invariants.js';
+export { formatHumanOutput, formatJsonOutput, formatDebugOutput, formatVerifySummaryLine } from './output.js';
+/** Default policy when no review_intelligence config is present */
+export const DEFAULT_REVIEW_INTELLIGENCE_POLICY = {
+    enabled: true,
+    severity_threshold: 'P1',
+    invariants: {
+        runtime_validation: { enabled: true },
+        outbound_io: { enabled: true },
+        platform_helpers: { enabled: true },
+    },
+};
+/**
+ * Run the Review Intelligence engine.
+ *
+ * Pipeline:
+ *   1. Load file contents for changed/relevant files
+ *   2. Discover repo standards (helpers, wrappers)
+ *   3. Run enabled invariant detectors
+ *   4. Sort and summarize findings
+ */
+export function runReviewIntelligence(options) {
+    const startTime = Date.now();
+    // Validate invariant filter
+    if (options.invariant) {
+        const available = getAvailableInvariantNames();
+        if (!available.includes(options.invariant)) {
+            throw new Error(`Unknown invariant "${options.invariant}". Available: ${available.join(', ')}`);
+        }
+    }
+    // Load file contents
+    const fileContents = new Map();
+    for (const filePath of options.files) {
+        const fullPath = join(options.cwd, filePath);
+        try {
+            fileContents.set(filePath, readFileSync(fullPath, 'utf-8'));
+        }
+        catch {
+            // Skip files that can't be read (deleted, binary, etc.)
+        }
+    }
+    // Discover repo standards
+    const repoStandards = discoverRepoStandards(options.cwd, options.files);
+    // Build detector context
+    const ctx = {
+        cwd: options.cwd,
+        files: options.files,
+        fileContents,
+        repoStandards,
+        explain: options.explain,
+    };
+    // Run enabled detectors
+    const detectors = getEnabledDetectors(options.policy, options.invariant);
+    const allFindings = [];
+    for (const detector of detectors) {
+        const findings = detector.analyze(ctx);
+        allFindings.push(...findings);
+    }
+    // Sort findings by severity, then file
+    const sortedFindings = sortFindings(allFindings);
+    // Count triggers (for debug output)
+    let triggerCount = 0;
+    for (const [, content] of fileContents) {
+        triggerCount += detectTriggers('', content).length;
+    }
+    // Build summary
+    const summary = {
+        p0: sortedFindings.filter((f) => f.severity === 'P0').length,
+        p1: sortedFindings.filter((f) => f.severity === 'P1').length,
+        p2: sortedFindings.filter((f) => f.severity === 'P2').length,
+        p3: sortedFindings.filter((f) => f.severity === 'P3').length,
+        total: sortedFindings.length,
+    };
+    const status = determineStatus(sortedFindings, options.policy.severity_threshold);
+    const duration = Date.now() - startTime;
+    return {
+        findings: sortedFindings,
+        repo_standards: repoStandards,
+        summary,
+        status,
+        duration_ms: duration,
+    };
+}
+//# sourceMappingURL=index.js.map

package/dist/review-intelligence/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/review-intelligence/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAQjC,OAAO,EAAE,mBAAmB,EAAE,0BAA0B,EAAE,MAAM,iBAAiB,CAAC;AAClF,OAAO,EAAE,qBAAqB,EAAE,MAAM,0BAA0B,CAAC;AACjE,OAAO,EAAE,YAAY,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAC9D,OAAO,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAS/C,OAAO,EAAE,0BAA0B,EAAE,MAAM,iBAAiB,CAAC;AAC7D,OAAO,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,uBAAuB,EAAE,MAAM,aAAa,CAAC;AAE9G,mEAAmE;AACnE,MAAM,CAAC,MAAM,kCAAkC,GAA6B;IAC1E,OAAO,EAAE,IAAI;IACb,kBAAkB,EAAE,IAAI;IACxB,UAAU,EAAE;QACV,kBAAkB,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE;QACrC,WAAW,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE;QAC9B,gBAAgB,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE;KACpC;CACF,CAAC;AAEF;;;;;;;;GAQG;AACH,MAAM,UAAU,qBAAqB,CACnC,OAAkC;IAElC,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAE7B,4BAA4B;IAC5B,IAAI,OAAO,CAAC,SAAS,EAAE,CAAC;QACtB,MAAM,SAAS,GAAG,0BAA0B,EAAE,CAAC;QAC/C,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,CAAC;YAC3C,MAAM,IAAI,KAAK,CACb,sBAAsB,OAAO,CAAC,SAAS,iBAAiB,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAC/E,CAAC;QACJ,CAAC;IACH,CAAC;IAED,qBAAqB;IACrB,MAAM,YAAY,GAAG,IAAI,GAAG,EAAkB,CAAC;IAC/C,KAAK,MAAM,QAAQ,IAAI,OAAO,CAAC,KAAK,EAAE,CAAC;QACrC,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;QAC7C,IAAI,CAAC;YACH,YAAY,CAAC,GAAG,CAAC,QAAQ,EAAE,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC,CAAC;QAC9D,CAAC;QAAC,MAAM,CAAC;YACP,wDAAwD;QAC1D,CAAC;IACH,CAAC;IAED,0BAA0B;IAC1B,MAAM,aAAa,GAAG,qBAAqB,CAAC,OAAO,CAAC,GAAG,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC;IAExE,yBAAyB;IACzB,MAAM,GAAG,GAAoB;QAC3B,GAAG,EAAE,OAAO,CAAC,GAAG;QAChB,KAAK,EAAE,OAAO,CAAC,KAAK;QACpB,YAAY;QACZ,aAAa;QACb,OAAO,EAAE,OAAO,CAAC,OAAO;KACzB,CAAC;IAEF,wBAAwB;IACxB,MAAM,SAAS,GAAG,mBAAmB,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,SAAS,CAAC,CAAC;IACzE,MAAM,WAAW,GAAoB,EAAE,CAAC;IAExC,KAAK,MAAM,QAAQ,IAAI,SAAS,EAAE,CAAC;QACjC,MAAM,QAAQ,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QACvC,WAAW,CAAC,IAAI,CAAC,GAAG,QAAQ,CAAC,CAAC;IAChC,CAAC;IAED,uCAAuC;IACvC,MAAM,cAAc,GAAG,YAAY,CAAC,WAAW,CAAC,CAAC;IAEjD,oCAAoC;IACpC,IAAI,YAAY,GAAG,CAAC,CAAC;IACrB,KAAK,MAAM,CAAC,EAAE,OAAO,CAAC,IAAI,YAAY,EAAE,CAAC;QACvC,YAAY,IAAI,cAAc,CAAC,EAAE,EAAE,OAAO,CAAC,CAAC,MAAM,CAAC;IACrD,CAAC;IAED,gBAAgB;IAChB,MAAM,OAAO,GAAG;QACd,EAAE,EAAE,cAAc,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,IAAI,CAAC,CAAC,MAAM;QAC5D,EAAE,EAAE,cAAc,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,IAAI,CAAC,CAAC,MAAM;QAC5D,EAAE,EAAE,cAAc,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,IAAI,CAAC,CAAC,MAAM;QAC5D,EAAE,EAAE,cAAc,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,IAAI,CAAC,CAAC,MAAM;QAC5D,KAAK,EAAE,cAAc,CAAC,MAAM;KAC7B,CAAC;IAEF,MAAM,MAAM,GAAG,eAAe,CAAC,cAAc,EAAE,OAAO,CAAC,MAAM,CAAC,kBAAkB,CAAC,CAAC;IAClF,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC;IAExC,OAAO;QACL,QAAQ,EAAE,cAAc;QACxB,cAAc,EAAE,aAAa;QAC7B,OAAO;QACP,MAAM;QACN,WAAW,EAAE,QAAQ;KACtB,CAAC;AACJ,CAAC"}

package/dist/review-intelligence/invariants.d.ts

@@ -0,0 +1,10 @@
+import type { InvariantDetector, ReviewIntelligencePolicy } from './types.js';
+/**
+ * Get enabled detectors based on policy configuration and optional filter.
+ */
+export declare function getEnabledDetectors(policy: ReviewIntelligencePolicy, invariantFilter?: string): InvariantDetector[];
+/**
+ * Get all available detector names (for --invariant flag validation).
+ */
+export declare function getAvailableInvariantNames(): string[];
+//# sourceMappingURL=invariants.d.ts.map

package/dist/review-intelligence/invariants.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"invariants.d.ts","sourceRoot":"","sources":["../../src/review-intelligence/invariants.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,iBAAiB,EAAE,wBAAwB,EAAE,MAAM,YAAY,CAAC;AAY9E;;GAEG;AACH,wBAAgB,mBAAmB,CACjC,MAAM,EAAE,wBAAwB,EAChC,eAAe,CAAC,EAAE,MAAM,GACvB,iBAAiB,EAAE,CAWrB;AAED;;GAEG;AACH,wBAAgB,0BAA0B,IAAI,MAAM,EAAE,CAErD"}

package/dist/review-intelligence/invariants.js

@@ -0,0 +1,29 @@
+import { runtimeValidationDetector } from './detectors/runtime-validation.js';
+import { outboundIODetector } from './detectors/outbound-io.js';
+import { platformHelpersDetector } from './detectors/platform-helpers.js';
+/** Registry of all invariant detector modules */
+const ALL_DETECTORS = [
+    runtimeValidationDetector,
+    outboundIODetector,
+    platformHelpersDetector,
+];
+/**
+ * Get enabled detectors based on policy configuration and optional filter.
+ */
+export function getEnabledDetectors(policy, invariantFilter) {
+    let detectors = ALL_DETECTORS.filter((d) => {
+        const config = policy.invariants[d.name];
+        return config?.enabled !== false;
+    });
+    if (invariantFilter) {
+        detectors = detectors.filter((d) => d.name === invariantFilter);
+    }
+    return detectors;
+}
+/**
+ * Get all available detector names (for --invariant flag validation).
+ */
+export function getAvailableInvariantNames() {
+    return ALL_DETECTORS.map((d) => d.name);
+}
+//# sourceMappingURL=invariants.js.map

package/dist/review-intelligence/invariants.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"invariants.js","sourceRoot":"","sources":["../../src/review-intelligence/invariants.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,yBAAyB,EAAE,MAAM,mCAAmC,CAAC;AAC9E,OAAO,EAAE,kBAAkB,EAAE,MAAM,4BAA4B,CAAC;AAChE,OAAO,EAAE,uBAAuB,EAAE,MAAM,iCAAiC,CAAC;AAE1E,iDAAiD;AACjD,MAAM,aAAa,GAAwB;IACzC,yBAAyB;IACzB,kBAAkB;IAClB,uBAAuB;CACxB,CAAC;AAEF;;GAEG;AACH,MAAM,UAAU,mBAAmB,CACjC,MAAgC,EAChC,eAAwB;IAExB,IAAI,SAAS,GAAG,aAAa,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE;QACzC,MAAM,MAAM,GAAG,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QACzC,OAAO,MAAM,EAAE,OAAO,KAAK,KAAK,CAAC;IACnC,CAAC,CAAC,CAAC;IAEH,IAAI,eAAe,EAAE,CAAC;QACpB,SAAS,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,eAAe,CAAC,CAAC;IAClE,CAAC;IAED,OAAO,SAAS,CAAC;AACnB,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,0BAA0B;IACxC,OAAO,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;AAC1C,CAAC"}

package/dist/review-intelligence/output.d.ts

@@ -0,0 +1,25 @@
+import type { ReviewIntelligenceResult } from './types.js';
+import type { ReviewSeverity } from './types.js';
+/**
+ * Format review intelligence results for human-readable console output.
+ */
+export declare function formatHumanOutput(result: ReviewIntelligenceResult, options: {
+    explain: boolean;
+    severityThreshold: ReviewSeverity;
+}): string;
+/**
+ * Format review intelligence results as JSON for machine consumption.
+ */
+export declare function formatJsonOutput(result: ReviewIntelligenceResult): string;
+/**
+ * Format debug output showing trigger detection internals.
+ */
+export declare function formatDebugOutput(result: ReviewIntelligenceResult, _detectorInfo: {
+    filesAnalyzed: number;
+    triggersFound: number;
+}): string;
+/**
+ * Format a compact summary line for the verify output.
+ */
+export declare function formatVerifySummaryLine(result: ReviewIntelligenceResult): string;
+//# sourceMappingURL=output.d.ts.map

package/dist/review-intelligence/output.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"output.d.ts","sourceRoot":"","sources":["../../src/review-intelligence/output.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,wBAAwB,EAA+B,MAAM,YAAY,CAAC;AAGxF,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAEjD;;GAEG;AACH,wBAAgB,iBAAiB,CAC/B,MAAM,EAAE,wBAAwB,EAChC,OAAO,EAAE;IAAE,OAAO,EAAE,OAAO,CAAC;IAAC,iBAAiB,EAAE,cAAc,CAAA;CAAE,GAC/D,MAAM,CA6DR;AAED;;GAEG;AACH,wBAAgB,gBAAgB,CAC9B,MAAM,EAAE,wBAAwB,GAC/B,MAAM,CAER;AAED;;GAEG;AACH,wBAAgB,iBAAiB,CAC/B,MAAM,EAAE,wBAAwB,EAChC,aAAa,EAAE;IAAE,aAAa,EAAE,MAAM,CAAC;IAAC,aAAa,EAAE,MAAM,CAAA;CAAE,GAC9D,MAAM,CAsBR;AAED;;GAEG;AACH,wBAAgB,uBAAuB,CAAC,MAAM,EAAE,wBAAwB,GAAG,MAAM,CAYhF"}

package/dist/review-intelligence/output.js

@@ -0,0 +1,116 @@
+import { generateRepairGuidance, formatRepoStandardRecommendations } from './repair-guidance.js';
+import { filterBySeverity } from './severity.js';
+/**
+ * Format review intelligence results for human-readable console output.
+ */
+export function formatHumanOutput(result, options) {
+    const lines = [];
+    const visibleFindings = filterBySeverity(result.findings, options.severityThreshold);
+    // Header section
+    lines.push('');
+    lines.push('Review Intelligence');
+    lines.push('───────────────────');
+    lines.push(`  Status:   ${result.status}`);
+    lines.push(`  Findings: ${result.summary.total} total (P0:${result.summary.p0} P1:${result.summary.p1} P2:${result.summary.p2} P3:${result.summary.p3})`);
+    if (visibleFindings.length === 0) {
+        lines.push('  No findings at current severity threshold.');
+        lines.push('');
+        return lines.join('\n');
+    }
+    // Top Findings
+    lines.push('');
+    lines.push('  Top Findings');
+    lines.push('  ────────────');
+    for (const finding of visibleFindings) {
+        lines.push('');
+        lines.push(`  [${finding.severity}] ${finding.title}`);
+        lines.push(`      File: ${finding.file}:${finding.line}`);
+        lines.push(`      Trigger: ${finding.trigger}`);
+        if (finding.missing_companions.length > 0) {
+            lines.push(`      Missing: ${finding.missing_companions.join('; ')}`);
+        }
+        if (options.explain) {
+            lines.push(`      Why: ${finding.why_it_matters}`);
+            if (finding.repo_standard) {
+                lines.push(`      Repo standard: ${finding.repo_standard.helper_name} (${finding.repo_standard.usage_count} uses)`);
+                if (finding.repo_standard.example_paths.length > 0) {
+                    lines.push(`      Example: ${finding.repo_standard.example_paths[0]}`);
+                }
+            }
+            const guidance = generateRepairGuidance(finding);
+            if (guidance) {
+                lines.push('      Fix:');
+                for (const guidanceLine of guidance.split('\n')) {
+                    lines.push(`        ${guidanceLine}`);
+                }
+            }
+        }
+    }
+    // Repo standard recommendations (if any findings reference them)
+    const referencedStandards = getReferencedStandards(visibleFindings);
+    if (referencedStandards.length > 0 && options.explain) {
+        lines.push('');
+        lines.push('  ' + formatRepoStandardRecommendations(referencedStandards).split('\n').join('\n  '));
+    }
+    lines.push('');
+    return lines.join('\n');
+}
+/**
+ * Format review intelligence results as JSON for machine consumption.
+ */
+export function formatJsonOutput(result) {
+    return JSON.stringify(result, null, 2);
+}
+/**
+ * Format debug output showing trigger detection internals.
+ */
+export function formatDebugOutput(result, _detectorInfo) {
+    const lines = [];
+    lines.push('');
+    lines.push('Review Intelligence — Debug');
+    lines.push('──────────────────────────');
+    lines.push(`  Files analyzed: ${_detectorInfo.filesAnalyzed}`);
+    lines.push(`  Triggers found: ${_detectorInfo.triggersFound}`);
+    lines.push(`  Findings generated: ${result.summary.total}`);
+    lines.push(`  Repo standards discovered: ${result.repo_standards.length}`);
+    lines.push(`  Duration: ${result.duration_ms}ms`);
+    if (result.repo_standards.length > 0) {
+        lines.push('');
+        lines.push('  Discovered Standards:');
+        for (const std of result.repo_standards) {
+            lines.push(`    ${std.helper_name} — ${std.usage_count} uses — ${std.example_paths.join(', ')}`);
+        }
+    }
+    lines.push('');
+    return lines.join('\n');
+}
+/**
+ * Format a compact summary line for the verify output.
+ */
+export function formatVerifySummaryLine(result) {
+    if (result.summary.total === 0) {
+        return 'Review Intelligence: PASS (no architectural findings)';
+    }
+    const parts = [];
+    if (result.summary.p0 > 0)
+        parts.push(`${result.summary.p0} P0`);
+    if (result.summary.p1 > 0)
+        parts.push(`${result.summary.p1} P1`);
+    if (result.summary.p2 > 0)
+        parts.push(`${result.summary.p2} P2`);
+    if (result.summary.p3 > 0)
+        parts.push(`${result.summary.p3} P3`);
+    return `Review Intelligence: ${result.status} (${parts.join(', ')})`;
+}
+function getReferencedStandards(findings) {
+    const seen = new Set();
+    const standards = [];
+    for (const finding of findings) {
+        if (finding.repo_standard && !seen.has(finding.repo_standard.helper_name)) {
+            seen.add(finding.repo_standard.helper_name);
+            standards.push(finding.repo_standard);
+        }
+    }
+    return standards;
+}
+//# sourceMappingURL=output.js.map

package/dist/review-intelligence/output.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"output.js","sourceRoot":"","sources":["../../src/review-intelligence/output.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,sBAAsB,EAAE,iCAAiC,EAAE,MAAM,sBAAsB,CAAC;AACjG,OAAO,EAAE,gBAAgB,EAAE,MAAM,eAAe,CAAC;AAGjD;;GAEG;AACH,MAAM,UAAU,iBAAiB,CAC/B,MAAgC,EAChC,OAAgE;IAEhE,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,MAAM,eAAe,GAAG,gBAAgB,CAAC,MAAM,CAAC,QAAQ,EAAE,OAAO,CAAC,iBAAiB,CAAC,CAAC;IAErF,iBAAiB;IACjB,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACf,KAAK,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAC;IAClC,KAAK,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAC;IAClC,KAAK,CAAC,IAAI,CAAC,eAAe,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;IAC3C,KAAK,CAAC,IAAI,CAAC,eAAe,MAAM,CAAC,OAAO,CAAC,KAAK,cAAc,MAAM,CAAC,OAAO,CAAC,EAAE,OAAO,MAAM,CAAC,OAAO,CAAC,EAAE,OAAO,MAAM,CAAC,OAAO,CAAC,EAAE,OAAO,MAAM,CAAC,OAAO,CAAC,EAAE,GAAG,CAAC,CAAC;IAE1J,IAAI,eAAe,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACjC,KAAK,CAAC,IAAI,CAAC,8CAA8C,CAAC,CAAC;QAC3D,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACf,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC1B,CAAC;IAED,eAAe;IACf,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACf,KAAK,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;IAC7B,KAAK,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;IAE7B,KAAK,MAAM,OAAO,IAAI,eAAe,EAAE,CAAC;QACtC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACf,KAAK,CAAC,IAAI,CAAC,MAAM,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC;QACvD,KAAK,CAAC,IAAI,CAAC,eAAe,OAAO,CAAC,IAAI,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC;QAC1D,KAAK,CAAC,IAAI,CAAC,kBAAkB,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC;QAEhD,IAAI,OAAO,CAAC,kBAAkB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC1C,KAAK,CAAC,IAAI,CAAC,kBAAkB,OAAO,CAAC,kBAAkB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACxE,CAAC;QAED,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;YACpB,KAAK,CAAC,IAAI,CAAC,cAAc,OAAO,CAAC,cAAc,EAAE,CAAC,CAAC;YAEnD,IAAI,OAAO,CAAC,aAAa,EAAE,CAAC;gBAC1B,KAAK,CAAC,IAAI,CAAC,wBAAwB,OAAO,CAAC,aAAa,CAAC,WAAW,KAAK,OAAO,CAAC,aAAa,CAAC,WAAW,QAAQ,CAAC,CAAC;gBACpH,IAAI,OAAO,CAAC,aAAa,CAAC,aAAa,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;oBACnD,KAAK,CAAC,IAAI,CAAC,kBAAkB,OAAO,CAAC,aAAa,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;gBACzE,CAAC;YACH,CAAC;YAED,MAAM,QAAQ,GAAG,sBAAsB,CAAC,OAAO,CAAC,CAAC;YACjD,IAAI,QAAQ,EAAE,CAAC;gBACb,KAAK,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;gBACzB,KAAK,MAAM,YAAY,IAAI,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;oBAChD,KAAK,CAAC,IAAI,CAAC,WAAW,YAAY,EAAE,CAAC,CAAC;gBACxC,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;IAED,iEAAiE;IACjE,MAAM,mBAAmB,GAAG,sBAAsB,CAAC,eAAe,CAAC,CAAC;IACpE,IAAI,mBAAmB,CAAC,MAAM,GAAG,CAAC,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;QACtD,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACf,KAAK,CAAC,IAAI,CAAC,IAAI,GAAG,iCAAiC,CAAC,mBAAmB,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC;IACrG,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACf,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,gBAAgB,CAC9B,MAAgC;IAEhC,OAAO,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;AACzC,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,iBAAiB,CAC/B,MAAgC,EAChC,aAA+D;IAE/D,MAAM,KAAK,GAAa,EAAE,CAAC;IAE3B,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACf,KAAK,CAAC,IAAI,CAAC,6BAA6B,CAAC,CAAC;IAC1C,KAAK,CAAC,IAAI,CAAC,4BAA4B,CAAC,CAAC;IACzC,KAAK,CAAC,IAAI,CAAC,qBAAqB,aAAa,CAAC,aAAa,EAAE,CAAC,CAAC;IAC/D,KAAK,CAAC,IAAI,CAAC,qBAAqB,aAAa,CAAC,aAAa,EAAE,CAAC,CAAC;IAC/D,KAAK,CAAC,IAAI,CAAC,yBAAyB,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC;IAC5D,KAAK,CAAC,IAAI,CAAC,gCAAgC,MAAM,CAAC,cAAc,CAAC,MAAM,EAAE,CAAC,CAAC;IAC3E,KAAK,CAAC,IAAI,CAAC,eAAe,MAAM,CAAC,WAAW,IAAI,CAAC,CAAC;IAElD,IAAI,MAAM,CAAC,cAAc,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACrC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACf,KAAK,CAAC,IAAI,CAAC,yBAAyB,CAAC,CAAC;QACtC,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,cAAc,EAAE,CAAC;YACxC,KAAK,CAAC,IAAI,CAAC,OAAO,GAAG,CAAC,WAAW,MAAM,GAAG,CAAC,WAAW,WAAW,GAAG,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACnG,CAAC;IACH,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACf,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,uBAAuB,CAAC,MAAgC;IACtE,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,KAAK,CAAC,EAAE,CAAC;QAC/B,OAAO,uDAAuD,CAAC;IACjE,CAAC;IAED,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,IAAI,MAAM,CAAC,OAAO,CAAC,EAAE,GAAG,CAAC;QAAE,KAAK,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,OAAO,CAAC,EAAE,KAAK,CAAC,CAAC;IACjE,IAAI,MAAM,CAAC,OAAO,CAAC,EAAE,GAAG,CAAC;QAAE,KAAK,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,OAAO,CAAC,EAAE,KAAK,CAAC,CAAC;IACjE,IAAI,MAAM,CAAC,OAAO,CAAC,EAAE,GAAG,CAAC;QAAE,KAAK,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,OAAO,CAAC,EAAE,KAAK,CAAC,CAAC;IACjE,IAAI,MAAM,CAAC,OAAO,CAAC,EAAE,GAAG,CAAC;QAAE,KAAK,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,OAAO,CAAC,EAAE,KAAK,CAAC,CAAC;IAEjE,OAAO,wBAAwB,MAAM,CAAC,MAAM,KAAK,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC;AACvE,CAAC;AAED,SAAS,sBAAsB,CAAC,QAAyB;IACvD,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,MAAM,SAAS,GAAmB,EAAE,CAAC;IAErC,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;QAC/B,IAAI,OAAO,CAAC,aAAa,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,aAAa,CAAC,WAAW,CAAC,EAAE,CAAC;YAC1E,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,aAAa,CAAC,WAAW,CAAC,CAAC;YAC5C,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC;QACxC,CAAC;IACH,CAAC;IAED,OAAO,SAAS,CAAC;AACnB,CAAC"}