@codeledger/cli 0.6.7 → 0.6.9

package/dist/review-intelligence/engine/dataflow.d.ts

@@ -0,0 +1,34 @@
+/** Represents a scope block (try/catch, if, function) */
+export interface ScopeBlock {
+    kind: 'try' | 'catch' | 'if' | 'function' | 'arrow' | 'block';
+    startLine: number;
+    endLine: number;
+}
+/** Result of checking if a line is wrapped in try/catch */
+export interface TryCatchInfo {
+    isWrapped: boolean;
+    tryStartLine?: number;
+    catchStartLine?: number;
+}
+/**
+ * Find all try/catch blocks in source code.
+ * Returns pairs of (try start line, catch start line, block end line).
+ */
+export declare function findTryCatchBlocks(content: string): ScopeBlock[];
+/**
+ * Check if a specific line is inside a try/catch block.
+ */
+export declare function isInsideTryCatch(content: string, targetLine: number): TryCatchInfo;
+/**
+ * Check if a variable assigned on one line is used in a function call nearby.
+ * Useful for detecting patterns like:
+ *   const result = schema.safeParse(body);
+ *   if (!result.success) return sendInvalidRequest(reply);
+ */
+export declare function tracksVariableUsage(content: string, variableName: string, nearLine: number, windowSize?: number): boolean;
+/**
+ * Detect guard-return patterns: if (condition) return/throw before a target line.
+ * This helps detect validation patterns that guard subsequent code.
+ */
+export declare function hasGuardBefore(content: string, targetLine: number, guardPattern: RegExp, windowSize?: number): boolean;
+//# sourceMappingURL=dataflow.d.ts.map

package/dist/review-intelligence/engine/dataflow.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"dataflow.d.ts","sourceRoot":"","sources":["../../../src/review-intelligence/engine/dataflow.ts"],"names":[],"mappings":"AAOA,yDAAyD;AACzD,MAAM,WAAW,UAAU;IACzB,IAAI,EAAE,KAAK,GAAG,OAAO,GAAG,IAAI,GAAG,UAAU,GAAG,OAAO,GAAG,OAAO,CAAC;IAC9D,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,2DAA2D;AAC3D,MAAM,WAAW,YAAY;IAC3B,SAAS,EAAE,OAAO,CAAC;IACnB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB;AAED;;;GAGG;AACH,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,MAAM,GAAG,UAAU,EAAE,CA6ChE;AAED;;GAEG;AACH,wBAAgB,gBAAgB,CAAC,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,YAAY,CAoBlF;AAED;;;;;GAKG;AACH,wBAAgB,mBAAmB,CACjC,OAAO,EAAE,MAAM,EACf,YAAY,EAAE,MAAM,EACpB,QAAQ,EAAE,MAAM,EAChB,UAAU,GAAE,MAAW,GACtB,OAAO,CAaT;AAED;;;GAGG;AACH,wBAAgB,cAAc,CAC5B,OAAO,EAAE,MAAM,EACf,UAAU,EAAE,MAAM,EAClB,YAAY,EAAE,MAAM,EACpB,UAAU,GAAE,MAAW,GACtB,OAAO,CAqBT"}

package/dist/review-intelligence/engine/dataflow.js

@@ -0,0 +1,115 @@
+// ─── Dataflow Analysis ──────────────────────────────────────────────────────
+//
+// Lightweight dataflow analysis for detecting patterns like:
+// - try/catch wrapping around specific calls
+// - variable assignments flowing into function arguments
+// - guard patterns (if-return before usage)
+/**
+ * Find all try/catch blocks in source code.
+ * Returns pairs of (try start line, catch start line, block end line).
+ */
+export function findTryCatchBlocks(content) {
+    const blocks = [];
+    const lines = content.split('\n');
+    const braceStack = [];
+    for (let i = 0; i < lines.length; i++) {
+        const line = lines[i];
+        const trimmed = line.trim();
+        if (/^\s*try\s*\{/.test(line) || trimmed === 'try {') {
+            braceStack.push({ kind: 'try', startLine: i + 1 });
+        }
+        else if (/^\s*catch\s*/.test(line)) {
+            braceStack.push({ kind: 'catch', startLine: i + 1 });
+        }
+        // Count braces to track block ends
+        const opens = (line.match(/\{/g) ?? []).length;
+        const closes = (line.match(/\}/g) ?? []).length;
+        for (let c = 0; c < closes; c++) {
+            if (braceStack.length > 0) {
+                const top = braceStack.pop();
+                blocks.push({
+                    kind: top.kind,
+                    startLine: top.startLine,
+                    endLine: i + 1,
+                });
+            }
+        }
+        // Re-push opens (minus the ones that also close on the same line)
+        // This is a simplified heuristic — for precise analysis, we'd need
+        // a real parser, but this works for common patterns
+        for (let o = 0; o < opens - closes; o++) {
+            if (/^\s*try\s*\{/.test(line) || trimmed === 'try {') {
+                // Already pushed above
+            }
+            else if (/^\s*catch\s*/.test(line)) {
+                // Already pushed above
+            }
+            else {
+                braceStack.push({ kind: 'block', startLine: i + 1 });
+            }
+        }
+    }
+    return blocks;
+}
+/**
+ * Check if a specific line is inside a try/catch block.
+ */
+export function isInsideTryCatch(content, targetLine) {
+    const blocks = findTryCatchBlocks(content);
+    const tryBlocks = blocks.filter((b) => b.kind === 'try');
+    for (const tryBlock of tryBlocks) {
+        if (targetLine >= tryBlock.startLine && targetLine <= tryBlock.endLine) {
+            // Find the corresponding catch block
+            const catchBlock = blocks.find((b) => b.kind === 'catch' && b.startLine > tryBlock.endLine - 2 && b.startLine <= tryBlock.endLine + 1);
+            return {
+                isWrapped: true,
+                tryStartLine: tryBlock.startLine,
+                catchStartLine: catchBlock?.startLine,
+            };
+        }
+    }
+    return { isWrapped: false };
+}
+/**
+ * Check if a variable assigned on one line is used in a function call nearby.
+ * Useful for detecting patterns like:
+ *   const result = schema.safeParse(body);
+ *   if (!result.success) return sendInvalidRequest(reply);
+ */
+export function tracksVariableUsage(content, variableName, nearLine, windowSize = 10) {
+    const lines = content.split('\n');
+    const start = Math.max(0, nearLine - 1 - windowSize);
+    const end = Math.min(lines.length, nearLine - 1 + windowSize);
+    for (let i = start; i < end; i++) {
+        const line = lines[i];
+        if (line && new RegExp(`\\b${variableName}\\b`).test(line)) {
+            return true;
+        }
+    }
+    return false;
+}
+/**
+ * Detect guard-return patterns: if (condition) return/throw before a target line.
+ * This helps detect validation patterns that guard subsequent code.
+ */
+export function hasGuardBefore(content, targetLine, guardPattern, windowSize = 15) {
+    const lines = content.split('\n');
+    const start = Math.max(0, targetLine - 1 - windowSize);
+    const end = targetLine - 1;
+    for (let i = start; i < end; i++) {
+        const line = lines[i];
+        if (line && guardPattern.test(line)) {
+            // Check if this guard includes a return/throw
+            if (/\b(?:return|throw)\b/.test(line)) {
+                return true;
+            }
+            // Check next line for return/throw
+            const nextLine = lines[i + 1];
+            if (nextLine && /\b(?:return|throw)\b/.test(nextLine)) {
+                return true;
+            }
+        }
+    }
+    return false;
+}
+//# sourceMappingURL=dataflow.js.map

package/dist/review-intelligence/engine/dataflow.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"dataflow.js","sourceRoot":"","sources":["../../../src/review-intelligence/engine/dataflow.ts"],"names":[],"mappings":"AAAA,+EAA+E;AAC/E,EAAE;AACF,6DAA6D;AAC7D,6CAA6C;AAC7C,yDAAyD;AACzD,4CAA4C;AAgB5C;;;GAGG;AACH,MAAM,UAAU,kBAAkB,CAAC,OAAe;IAChD,MAAM,MAAM,GAAiB,EAAE,CAAC;IAChC,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAClC,MAAM,UAAU,GAA2D,EAAE,CAAC;IAE9E,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACtC,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAE,CAAC;QACvB,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;QAE5B,IAAI,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,OAAO,KAAK,OAAO,EAAE,CAAC;YACrD,UAAU,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACrD,CAAC;aAAM,IAAI,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YACrC,UAAU,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACvD,CAAC;QAED,mCAAmC;QACnC,MAAM,KAAK,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC;QAC/C,MAAM,MAAM,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC;QAEhD,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YAChC,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAC1B,MAAM,GAAG,GAAG,UAAU,CAAC,GAAG,EAAG,CAAC;gBAC9B,MAAM,CAAC,IAAI,CAAC;oBACV,IAAI,EAAE,GAAG,CAAC,IAAI;oBACd,SAAS,EAAE,GAAG,CAAC,SAAS;oBACxB,OAAO,EAAE,CAAC,GAAG,CAAC;iBACf,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAED,kEAAkE;QAClE,mEAAmE;QACnE,oDAAoD;QACpD,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,GAAG,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YACxC,IAAI,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,OAAO,KAAK,OAAO,EAAE,CAAC;gBACrD,uBAAuB;YACzB,CAAC;iBAAM,IAAI,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;gBACrC,uBAAuB;YACzB,CAAC;iBAAM,CAAC;gBACN,UAAU,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YACvD,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,gBAAgB,CAAC,OAAe,EAAE,UAAkB;IAClE,MAAM,MAAM,GAAG,kBAAkB,CAAC,OAAO,CAAC,CAAC;IAC3C,MAAM,SAAS,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,KAAK,CAAC,CAAC;IAEzD,KAAK,MAAM,QAAQ,IAAI,SAAS,EAAE,CAAC;QACjC,IAAI,UAAU,IAAI,QAAQ,CAAC,SAAS,IAAI,UAAU,IAAI,QAAQ,CAAC,OAAO,EAAE,CAAC;YACvE,qCAAqC;YACrC,MAAM,UAAU,GAAG,MAAM,CAAC,IAAI,CAC5B,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,OAAO,IAAI,CAAC,CAAC,SAAS,GAAG,QAAQ,CAAC,OAAO,GAAG,CAAC,IAAI,CAAC,CAAC,SAAS,IAAI,QAAQ,CAAC,OAAO,GAAG,CAAC,CACvG,CAAC;YAEF,OAAO;gBACL,SAAS,EAAE,IAAI;gBACf,YAAY,EAAE,QAAQ,CAAC,SAAS;gBAChC,cAAc,EAAE,UAAU,EAAE,SAAS;aACtC,CAAC;QACJ,CAAC;IACH,CAAC;IAED,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC;AAC9B,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,mBAAmB,CACjC,OAAe,EACf,YAAoB,EACpB,QAAgB,EAChB,aAAqB,EAAE;IAEvB,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAClC,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,QAAQ,GAAG,CAAC,GAAG,UAAU,CAAC,CAAC;IACrD,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,EAAE,QAAQ,GAAG,CAAC,GAAG,UAAU,CAAC,CAAC;IAE9D,KAAK,IAAI,CAAC,GAAG,KAAK,EAAE,CAAC,GAAG,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC;QACjC,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;QACtB,IAAI,IAAI,IAAI,IAAI,MAAM,CAAC,MAAM,YAAY,KAAK,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YAC3D,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IAED,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,cAAc,CAC5B,OAAe,EACf,UAAkB,EAClB,YAAoB,EACpB,aAAqB,EAAE;IAEvB,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAClC,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,UAAU,GAAG,CAAC,GAAG,UAAU,CAAC,CAAC;IACvD,MAAM,GAAG,GAAG,UAAU,GAAG,CAAC,CAAC;IAE3B,KAAK,IAAI,CAAC,GAAG,KAAK,EAAE,CAAC,GAAG,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC;QACjC,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;QACtB,IAAI,IAAI,IAAI,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YACpC,8CAA8C;YAC9C,IAAI,sBAAsB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;gBACtC,OAAO,IAAI,CAAC;YACd,CAAC;YACD,mCAAmC;YACnC,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;YAC9B,IAAI,QAAQ,IAAI,sBAAsB,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;gBACtD,OAAO,IAAI,CAAC;YACd,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,KAAK,CAAC;AACf,CAAC"}

package/dist/review-intelligence/engine/index.d.ts

@@ -0,0 +1,7 @@
+export { isAnalyzableFile, parseImports, parseCallExpressions, parseGenerics, parseExports, analyzeFile, } from './ast-parser.js';
+export type { ImportInfo, CallExpressionInfo, GenericInfo, ExportInfo, FileAnalysis, } from './ast-parser.js';
+export { findTryCatchBlocks, isInsideTryCatch, tracksVariableUsage, hasGuardBefore, } from './dataflow.js';
+export type { ScopeBlock, TryCatchInfo } from './dataflow.js';
+export { resolveModule, isWorkspacePackage, extractExternalPackages, isNamedCjsImport, } from './symbol-resolver.js';
+export type { ModuleKind, ResolvedModule } from './symbol-resolver.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/review-intelligence/engine/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/review-intelligence/engine/index.ts"],"names":[],"mappings":"AAIA,OAAO,EACL,gBAAgB,EAChB,YAAY,EACZ,oBAAoB,EACpB,aAAa,EACb,YAAY,EACZ,WAAW,GACZ,MAAM,iBAAiB,CAAC;AACzB,YAAY,EACV,UAAU,EACV,kBAAkB,EAClB,WAAW,EACX,UAAU,EACV,YAAY,GACb,MAAM,iBAAiB,CAAC;AAEzB,OAAO,EACL,kBAAkB,EAClB,gBAAgB,EAChB,mBAAmB,EACnB,cAAc,GACf,MAAM,eAAe,CAAC;AACvB,YAAY,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAE9D,OAAO,EACL,aAAa,EACb,kBAAkB,EAClB,uBAAuB,EACvB,gBAAgB,GACjB,MAAM,sBAAsB,CAAC;AAC9B,YAAY,EAAE,UAAU,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC"}

package/dist/review-intelligence/engine/index.js

@@ -0,0 +1,7 @@
+// ─── AST Engine ─────────────────────────────────────────────────────────────
+//
+// Re-exports for the AST analysis engine.
+export { isAnalyzableFile, parseImports, parseCallExpressions, parseGenerics, parseExports, analyzeFile, } from './ast-parser.js';
+export { findTryCatchBlocks, isInsideTryCatch, tracksVariableUsage, hasGuardBefore, } from './dataflow.js';
+export { resolveModule, isWorkspacePackage, extractExternalPackages, isNamedCjsImport, } from './symbol-resolver.js';
+//# sourceMappingURL=index.js.map

package/dist/review-intelligence/engine/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/review-intelligence/engine/index.ts"],"names":[],"mappings":"AAAA,+EAA+E;AAC/E,EAAE;AACF,0CAA0C;AAE1C,OAAO,EACL,gBAAgB,EAChB,YAAY,EACZ,oBAAoB,EACpB,aAAa,EACb,YAAY,EACZ,WAAW,GACZ,MAAM,iBAAiB,CAAC;AASzB,OAAO,EACL,kBAAkB,EAClB,gBAAgB,EAChB,mBAAmB,EACnB,cAAc,GACf,MAAM,eAAe,CAAC;AAGvB,OAAO,EACL,aAAa,EACb,kBAAkB,EAClB,uBAAuB,EACvB,gBAAgB,GACjB,MAAM,sBAAsB,CAAC"}

package/dist/review-intelligence/engine/symbol-resolver.d.ts

@@ -0,0 +1,34 @@
+/** Classification of an import source */
+export type ModuleKind = 'builtin' | 'local' | 'external' | 'workspace';
+/** Resolved module information */
+export interface ResolvedModule {
+    /** Original import specifier */
+    source: string;
+    /** Classification */
+    kind: ModuleKind;
+    /** Bare package name (e.g. 'lodash' from 'lodash/fp') */
+    packageName?: string;
+    /** Subpath (e.g. '/fp' from 'lodash/fp') */
+    subpath?: string;
+}
+/**
+ * Resolve an import source to its module classification.
+ */
+export declare function resolveModule(source: string): ResolvedModule;
+/**
+ * Check if a package name looks like a workspace package.
+ * Common patterns: @org/package where org matches the monorepo scope.
+ */
+export declare function isWorkspacePackage(packageName: string, workspaceScopes: string[]): boolean;
+/**
+ * Extract all unique external package names from a list of imports.
+ */
+export declare function extractExternalPackages(imports: Array<{
+    source: string;
+}>): Set<string>;
+/**
+ * Check if a CJS module is being imported with named imports.
+ * This is a common ESM/CJS interop issue.
+ */
+export declare function isNamedCjsImport(namedImports: string[], source: string, knownCjsPackages: Set<string>): boolean;
+//# sourceMappingURL=symbol-resolver.d.ts.map

package/dist/review-intelligence/engine/symbol-resolver.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"symbol-resolver.d.ts","sourceRoot":"","sources":["../../../src/review-intelligence/engine/symbol-resolver.ts"],"names":[],"mappings":"AAQA,yCAAyC;AACzC,MAAM,MAAM,UAAU,GAAG,SAAS,GAAG,OAAO,GAAG,UAAU,GAAG,WAAW,CAAC;AAExE,kCAAkC;AAClC,MAAM,WAAW,cAAc;IAC7B,gCAAgC;IAChC,MAAM,EAAE,MAAM,CAAC;IACf,qBAAqB;IACrB,IAAI,EAAE,UAAU,CAAC;IACjB,yDAAyD;IACzD,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,4CAA4C;IAC5C,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAaD;;GAEG;AACH,wBAAgB,aAAa,CAAC,MAAM,EAAE,MAAM,GAAG,cAAc,CAqD5D;AAED;;;GAGG;AACH,wBAAgB,kBAAkB,CAChC,WAAW,EAAE,MAAM,EACnB,eAAe,EAAE,MAAM,EAAE,GACxB,OAAO,CAOT;AAED;;GAEG;AACH,wBAAgB,uBAAuB,CACrC,OAAO,EAAE,KAAK,CAAC;IAAE,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC,GACjC,GAAG,CAAC,MAAM,CAAC,CAWb;AAED;;;GAGG;AACH,wBAAgB,gBAAgB,CAC9B,YAAY,EAAE,MAAM,EAAE,EACtB,MAAM,EAAE,MAAM,EACd,gBAAgB,EAAE,GAAG,CAAC,MAAM,CAAC,GAC5B,OAAO,CAOT"}

package/dist/review-intelligence/engine/symbol-resolver.js

@@ -0,0 +1,106 @@
+// ─── Symbol Resolver ────────────────────────────────────────────────────────
+//
+// Resolves import sources to determine:
+// - Whether a module is a Node.js builtin
+// - Whether a module is a local file (relative import)
+// - Whether a module is an external package
+// - The bare package name (for dependency checking)
+/** Well-known Node.js builtin modules */
+const NODE_BUILTINS = new Set([
+    'assert', 'async_hooks', 'buffer', 'child_process', 'cluster', 'console',
+    'constants', 'crypto', 'dgram', 'diagnostics_channel', 'dns', 'domain',
+    'events', 'fs', 'http', 'http2', 'https', 'inspector', 'module', 'net',
+    'os', 'path', 'perf_hooks', 'process', 'punycode', 'querystring', 'readline',
+    'repl', 'stream', 'string_decoder', 'sys', 'timers', 'tls', 'trace_events',
+    'tty', 'url', 'util', 'v8', 'vm', 'wasi', 'worker_threads', 'zlib',
+    'test', 'sqlite',
+]);
+/**
+ * Resolve an import source to its module classification.
+ */
+export function resolveModule(source) {
+    // node: protocol builtins
+    if (source.startsWith('node:')) {
+        return {
+            source,
+            kind: 'builtin',
+            packageName: source,
+        };
+    }
+    // Bare builtin names
+    const bareName = source.split('/')[0];
+    if (NODE_BUILTINS.has(bareName)) {
+        return {
+            source,
+            kind: 'builtin',
+            packageName: bareName,
+        };
+    }
+    // Relative imports
+    if (source.startsWith('.') || source.startsWith('/')) {
+        return {
+            source,
+            kind: 'local',
+        };
+    }
+    // Scoped packages: @scope/package or @scope/package/subpath
+    if (source.startsWith('@')) {
+        const parts = source.split('/');
+        const packageName = parts.length >= 2 ? `${parts[0]}/${parts[1]}` : source;
+        const subpath = parts.length > 2 ? '/' + parts.slice(2).join('/') : undefined;
+        return {
+            source,
+            kind: 'external',
+            packageName,
+            subpath,
+        };
+    }
+    // Regular external packages: package or package/subpath
+    const parts = source.split('/');
+    const packageName = parts[0];
+    const subpath = parts.length > 1 ? '/' + parts.slice(1).join('/') : undefined;
+    return {
+        source,
+        kind: 'external',
+        packageName,
+        subpath,
+    };
+}
+/**
+ * Check if a package name looks like a workspace package.
+ * Common patterns: @org/package where org matches the monorepo scope.
+ */
+export function isWorkspacePackage(packageName, workspaceScopes) {
+    for (const scope of workspaceScopes) {
+        if (packageName.startsWith(scope + '/')) {
+            return true;
+        }
+    }
+    return false;
+}
+/**
+ * Extract all unique external package names from a list of imports.
+ */
+export function extractExternalPackages(imports) {
+    const packages = new Set();
+    for (const imp of imports) {
+        const resolved = resolveModule(imp.source);
+        if (resolved.kind === 'external' && resolved.packageName) {
+            packages.add(resolved.packageName);
+        }
+    }
+    return packages;
+}
+/**
+ * Check if a CJS module is being imported with named imports.
+ * This is a common ESM/CJS interop issue.
+ */
+export function isNamedCjsImport(namedImports, source, knownCjsPackages) {
+    if (namedImports.length === 0)
+        return false;
+    const resolved = resolveModule(source);
+    if (resolved.kind !== 'external')
+        return false;
+    return knownCjsPackages.has(resolved.packageName ?? source);
+}
+//# sourceMappingURL=symbol-resolver.js.map

package/dist/review-intelligence/engine/symbol-resolver.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"symbol-resolver.js","sourceRoot":"","sources":["../../../src/review-intelligence/engine/symbol-resolver.ts"],"names":[],"mappings":"AAAA,+EAA+E;AAC/E,EAAE;AACF,wCAAwC;AACxC,0CAA0C;AAC1C,uDAAuD;AACvD,4CAA4C;AAC5C,oDAAoD;AAiBpD,yCAAyC;AACzC,MAAM,aAAa,GAAG,IAAI,GAAG,CAAC;IAC5B,QAAQ,EAAE,aAAa,EAAE,QAAQ,EAAE,eAAe,EAAE,SAAS,EAAE,SAAS;IACxE,WAAW,EAAE,QAAQ,EAAE,OAAO,EAAE,qBAAqB,EAAE,KAAK,EAAE,QAAQ;IACtE,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,WAAW,EAAE,QAAQ,EAAE,KAAK;IACtE,IAAI,EAAE,MAAM,EAAE,YAAY,EAAE,SAAS,EAAE,UAAU,EAAE,aAAa,EAAE,UAAU;IAC5E,MAAM,EAAE,QAAQ,EAAE,gBAAgB,EAAE,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAE,cAAc;IAC1E,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,gBAAgB,EAAE,MAAM;IAClE,MAAM,EAAE,QAAQ;CACjB,CAAC,CAAC;AAEH;;GAEG;AACH,MAAM,UAAU,aAAa,CAAC,MAAc;IAC1C,0BAA0B;IAC1B,IAAI,MAAM,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;QAC/B,OAAO;YACL,MAAM;YACN,IAAI,EAAE,SAAS;YACf,WAAW,EAAE,MAAM;SACpB,CAAC;IACJ,CAAC;IAED,qBAAqB;IACrB,MAAM,QAAQ,GAAG,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAE,CAAC;IACvC,IAAI,aAAa,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;QAChC,OAAO;YACL,MAAM;YACN,IAAI,EAAE,SAAS;YACf,WAAW,EAAE,QAAQ;SACtB,CAAC;IACJ,CAAC;IAED,mBAAmB;IACnB,IAAI,MAAM,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,MAAM,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QACrD,OAAO;YACL,MAAM;YACN,IAAI,EAAE,OAAO;SACd,CAAC;IACJ,CAAC;IAED,4DAA4D;IAC5D,IAAI,MAAM,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QAC3B,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAChC,MAAM,WAAW,GAAG,KAAK,CAAC,MAAM,IAAI,CAAC,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC;QAC3E,MAAM,OAAO,GAAG,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QAE9E,OAAO;YACL,MAAM;YACN,IAAI,EAAE,UAAU;YAChB,WAAW;YACX,OAAO;SACR,CAAC;IACJ,CAAC;IAED,wDAAwD;IACxD,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAChC,MAAM,WAAW,GAAG,KAAK,CAAC,CAAC,CAAE,CAAC;IAC9B,MAAM,OAAO,GAAG,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAE9E,OAAO;QACL,MAAM;QACN,IAAI,EAAE,UAAU;QAChB,WAAW;QACX,OAAO;KACR,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,kBAAkB,CAChC,WAAmB,EACnB,eAAyB;IAEzB,KAAK,MAAM,KAAK,IAAI,eAAe,EAAE,CAAC;QACpC,IAAI,WAAW,CAAC,UAAU,CAAC,KAAK,GAAG,GAAG,CAAC,EAAE,CAAC;YACxC,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,uBAAuB,CACrC,OAAkC;IAElC,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAU,CAAC;IAEnC,KAAK,MAAM,GAAG,IAAI,OAAO,EAAE,CAAC;QAC1B,MAAM,QAAQ,GAAG,aAAa,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QAC3C,IAAI,QAAQ,CAAC,IAAI,KAAK,UAAU,IAAI,QAAQ,CAAC,WAAW,EAAE,CAAC;YACzD,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;QACrC,CAAC;IACH,CAAC;IAED,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,gBAAgB,CAC9B,YAAsB,EACtB,MAAc,EACd,gBAA6B;IAE7B,IAAI,YAAY,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IAE5C,MAAM,QAAQ,GAAG,aAAa,CAAC,MAAM,CAAC,CAAC;IACvC,IAAI,QAAQ,CAAC,IAAI,KAAK,UAAU;QAAE,OAAO,KAAK,CAAC;IAE/C,OAAO,gBAAgB,CAAC,GAAG,CAAC,QAAQ,CAAC,WAAW,IAAI,MAAM,CAAC,CAAC;AAC9D,CAAC"}

package/dist/review-intelligence/fixes/index.d.ts

@@ -0,0 +1,54 @@
+import type { ReviewFinding } from '../types.js';
+/** Result of applying an auto-fix */
+export interface FixResult {
+    /** The rule ID that was fixed */
+    rule_id: string;
+    /** File that was modified */
+    file: string;
+    /** New file content after fix */
+    newContent: string;
+    /** Human-readable description of what was changed */
+    description: string;
+}
+/** A fixer function */
+export type Fixer = (finding: ReviewFinding, content: string) => FixResult | undefined;
+/**
+ * Register a fixer for a rule ID. Replaces any existing fixer for that rule.
+ */
+export declare function registerFixer(ruleId: string, fixer: Fixer): void;
+/**
+ * Remove a registered fixer by rule ID. No-op if not found.
+ */
+export declare function unregisterFixer(ruleId: string): void;
+/**
+ * Register a fallback fixer that applies to findings matching a predicate.
+ */
+export declare function registerFallbackFixer(matches: (f: ReviewFinding) => boolean, fixer: Fixer): void;
+/**
+ * Check if a finding has an auto-fix available.
+ */
+export declare function isFixable(finding: ReviewFinding): boolean;
+/**
+ * Apply an auto-fix to a finding.
+ * Returns undefined if no fix is available or the fix cannot be applied safely.
+ */
+export declare function applyFix(finding: ReviewFinding, content: string): FixResult | undefined;
+/**
+ * Apply all available fixes to a file's findings.
+ * Applies fixes in reverse line order to preserve line numbers.
+ */
+export declare function applyAllFixes(findings: ReviewFinding[], content: string): {
+    newContent: string;
+    applied: FixResult[];
+};
+/**
+ * Get all fixable rule IDs.
+ */
+export declare function getFixableRuleIds(): string[];
+/**
+ * Stamp `fixable: true` on findings that have a registered fixer
+ * (exact match OR fallback). Called by the engine after detectors run,
+ * before returning results.
+ */
+export declare function annotateFixable(findings: ReviewFinding[]): void;
+//# sourceMappingURL=index.d.ts.map

package/dist/review-intelligence/fixes/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/review-intelligence/fixes/index.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAEjD,qCAAqC;AACrC,MAAM,WAAW,SAAS;IACxB,iCAAiC;IACjC,OAAO,EAAE,MAAM,CAAC;IAChB,6BAA6B;IAC7B,IAAI,EAAE,MAAM,CAAC;IACb,iCAAiC;IACjC,UAAU,EAAE,MAAM,CAAC;IACnB,qDAAqD;IACrD,WAAW,EAAE,MAAM,CAAC;CACrB;AAED,uBAAuB;AACvB,MAAM,MAAM,KAAK,GAAG,CAAC,OAAO,EAAE,aAAa,EAAE,OAAO,EAAE,MAAM,KAAK,SAAS,GAAG,SAAS,CAAC;AA2BvF;;GAEG;AACH,wBAAgB,aAAa,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,GAAG,IAAI,CAEhE;AAED;;GAEG;AACH,wBAAgB,eAAe,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,CAEpD;AAED;;GAEG;AACH,wBAAgB,qBAAqB,CACnC,OAAO,EAAE,CAAC,CAAC,EAAE,aAAa,KAAK,OAAO,EACtC,KAAK,EAAE,KAAK,GACX,IAAI,CAEN;AAaD;;GAEG;AACH,wBAAgB,SAAS,CAAC,OAAO,EAAE,aAAa,GAAG,OAAO,CAEzD;AAED;;;GAGG;AACH,wBAAgB,QAAQ,CAAC,OAAO,EAAE,aAAa,EAAE,OAAO,EAAE,MAAM,GAAG,SAAS,GAAG,SAAS,CAIvF;AAED;;;GAGG;AACH,wBAAgB,aAAa,CAC3B,QAAQ,EAAE,aAAa,EAAE,EACzB,OAAO,EAAE,MAAM,GACd;IAAE,UAAU,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,SAAS,EAAE,CAAA;CAAE,CAiB9C;AAED;;GAEG;AACH,wBAAgB,iBAAiB,IAAI,MAAM,EAAE,CAE5C;AAED;;;;GAIG;AACH,wBAAgB,eAAe,CAAC,QAAQ,EAAE,aAAa,EAAE,GAAG,IAAI,CAM/D"}