@codraoss/core 0.9.4

package/dist/chunk-R2HRWFRH.js

@@ -0,0 +1,108 @@
+// src/rules/table.ts
+var ts = ["ts", "tsx", "js", "jsx", "mjs", "cjs"];
+var RULES = [
+  {
+    id: "empty-catch",
+    claimType: "swallowed_error",
+    severity: "P2",
+    title: "Empty catch block swallows the error",
+    body: "This `catch` has no body, so the error is discarded with no log, no rethrow and no recovery. A failure here becomes silent. If the error is genuinely expected, say so in a comment inside the block.",
+    triggers: ["catch"],
+    pattern: /\bcatch\s*(\([^)]*\))?\s*\{\s*\}/,
+    rejectRaw: /\bcatch\s*(\([^)]*\))?\s*\{\s*(?:\/\/|\/\*)/,
+    extensions: ts,
+    enabled: true
+  },
+  {
+    id: "debugger-statement",
+    claimType: "other",
+    severity: "P1",
+    title: "`debugger` statement left in the diff",
+    body: "A `debugger` statement halts execution whenever devtools are open. This is almost always a leftover from local debugging.",
+    triggers: ["debugger"],
+    pattern: /^\s*debugger\s*;?\s*$/,
+    extensions: ts,
+    enabled: true
+  },
+  {
+    id: "focused-test",
+    claimType: "other",
+    severity: "P1",
+    title: "Focused test will skip the rest of the suite",
+    body: "A focused test (`.only`) silently prevents every other test in the file from running, so CI stays green while covering almost nothing.",
+    triggers: [".only"],
+    pattern: /\b(?:describe|it|test|context|suite)\s*\.\s*only\s*\(/,
+    extensions: ts,
+    enabled: true
+  },
+  {
+    id: "dynamic-code-exec",
+    claimType: "unsafe_dynamic_code",
+    severity: "P1",
+    title: "Dynamic code execution",
+    body: "`eval` and the `Function` constructor execute arbitrary strings as code. If any part of that string can be influenced by input, this is remote code execution.",
+    triggers: ["eval(", "Function("],
+    pattern: /(?:^|[^.\w])eval\s*\(|new\s+Function\s*\(/,
+    extensions: ts,
+    enabled: true
+  },
+  {
+    id: "dynamic-html-sink",
+    claimType: "unsafe_dom_sink",
+    severity: "P1",
+    title: "Unsanitized value assigned to an HTML sink",
+    body: "Assigning a non-literal to `innerHTML`/`outerHTML` (or passing one to `insertAdjacentHTML`) executes any markup it contains. If the value can carry user input this is XSS.",
+    triggers: ["innerHTML", "outerHTML", "insertAdjacentHTML"],
+    pattern: /\.(?:inner|outer)HTML\s*=\s*[A-Za-z_$][\w$.[\]()]*|insertAdjacentHTML\s*\([^)]*,\s*[A-Za-z_$]/,
+    extensions: ts,
+    enabled: true
+  },
+  {
+    id: "mutable-default-arg",
+    claimType: "mutable_default_arg",
+    severity: "P2",
+    title: "Mutable default argument",
+    body: "Python evaluates a default argument once, at definition time, so this list/dict/set is shared by every call. Mutating it leaks state between invocations. Use `None` and build the value inside the function.",
+    triggers: ["def "],
+    pattern: /\bdef\s+\w+\s*\([^)]*=\s*(?:\[\s*\]|\{\s*\}|set\s*\(\s*\)|dict\s*\(\s*\)|list\s*\(\s*\))/,
+    extensions: ["py"],
+    enabled: true
+  },
+  {
+    id: "destructive-migration",
+    claimType: "destructive_migration",
+    severity: "P1",
+    title: "Destructive migration statement",
+    body: "This statement discards data irreversibly. On a forward-only migration chain there is no rollback: confirm the column/table is genuinely unused and that a backup exists.",
+    triggers: ["DROP", "TRUNCATE", "drop", "truncate"],
+    pattern: /\b(?:drop\s+(?:column|table)|truncate\s+table|truncate\s+\w)/i,
+    extensions: ["sql"],
+    enabled: true
+  },
+  {
+    id: "hardcoded-secret",
+    claimType: "hardcoded_secret",
+    severity: "P0",
+    title: "Possible hardcoded credential",
+    body: "This looks like a literal credential committed to the repository. If it is real, rotate it and move it to a secret binding.",
+    triggers: ["sk-", "AIza", "ghp_", "AKIA"],
+    pattern: /\b(?:sk-[A-Za-z0-9]{20,}|AIza[0-9A-Za-z_-]{30,}|gh[pousr]_[A-Za-z0-9]{30,}|AKIA[0-9A-Z]{16})\b/,
+    enabled: false
+  },
+  {
+    id: "insecure-random",
+    claimType: "insecure_randomness",
+    severity: "P2",
+    title: "`Math.random()` used for a security-sensitive value",
+    body: "`Math.random()` is not cryptographically secure and its output is predictable. Use `crypto.getRandomValues()` for tokens, ids or anything an attacker should not guess.",
+    triggers: ["Math.random"],
+    pattern: /\b(?:token|secret|key|nonce|salt|password|session|id)\w*\s*=[^=]*Math\.random\s*\(/i,
+    extensions: ts,
+    enabled: false
+  }
+];
+
+export {
+  RULES
+};
+//# sourceMappingURL=chunk-R2HRWFRH.js.map

package/dist/chunk-R2HRWFRH.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/rules/table.ts"],"sourcesContent":["import type { ClaimType, reviewSeverities } from '@codraoss/schema';\r\n\r\ntype ReviewSeverity = typeof reviewSeverities[number];\r\n\r\nexport type Rule = {\r\n  id: string;\r\n  claimType: ClaimType;\r\n  severity: ReviewSeverity;\r\n  title: string;\r\n  body: string;\r\n  triggers: readonly string[];\r\n  pattern: RegExp;\r\n  rejectRaw?: RegExp;\r\n  extensions?: readonly string[];\r\n  enabled: boolean;\r\n};\r\n\r\nconst ts = ['ts', 'tsx', 'js', 'jsx', 'mjs', 'cjs'] as const;\r\n\r\nexport const RULES: readonly Rule[] = [\r\n  {\r\n    id: 'empty-catch',\r\n    claimType: 'swallowed_error',\r\n    severity: 'P2',\r\n    title: 'Empty catch block swallows the error',\r\n    body: 'This `catch` has no body, so the error is discarded with no log, no rethrow and no recovery. '\r\n      + 'A failure here becomes silent. If the error is genuinely expected, say so in a comment inside the block.',\r\n    triggers: ['catch'],\r\n    pattern: /\\bcatch\\s*(\\([^)]*\\))?\\s*\\{\\s*\\}/,\r\n    rejectRaw: /\\bcatch\\s*(\\([^)]*\\))?\\s*\\{\\s*(?:\\/\\/|\\/\\*)/,\r\n    extensions: ts,\r\n    enabled: true,\r\n  },\r\n  {\r\n    id: 'debugger-statement',\r\n    claimType: 'other',\r\n    severity: 'P1',\r\n    title: '`debugger` statement left in the diff',\r\n    body: 'A `debugger` statement halts execution whenever devtools are open. This is almost always '\r\n      + 'a leftover from local debugging.',\r\n    triggers: ['debugger'],\r\n    pattern: /^\\s*debugger\\s*;?\\s*$/,\r\n    extensions: ts,\r\n    enabled: true,\r\n  },\r\n  {\r\n    id: 'focused-test',\r\n    claimType: 'other',\r\n    severity: 'P1',\r\n    title: 'Focused test will skip the rest of the suite',\r\n    body: 'A focused test (`.only`) silently prevents every other test in the file from running, so '\r\n      + 'CI stays green while covering almost nothing.',\r\n    triggers: ['.only'],\r\n    pattern: /\\b(?:describe|it|test|context|suite)\\s*\\.\\s*only\\s*\\(/,\r\n    extensions: ts,\r\n    enabled: true,\r\n  },\r\n  {\r\n    id: 'dynamic-code-exec',\r\n    claimType: 'unsafe_dynamic_code',\r\n    severity: 'P1',\r\n    title: 'Dynamic code execution',\r\n    body: '`eval` and the `Function` constructor execute arbitrary strings as code. If any part of '\r\n      + 'that string can be influenced by input, this is remote code execution.',\r\n    triggers: ['eval(', 'Function('],\r\n    pattern: /(?:^|[^.\\w])eval\\s*\\(|new\\s+Function\\s*\\(/,\r\n    extensions: ts,\r\n    enabled: true,\r\n  },\r\n  {\r\n    id: 'dynamic-html-sink',\r\n    claimType: 'unsafe_dom_sink',\r\n    severity: 'P1',\r\n    title: 'Unsanitized value assigned to an HTML sink',\r\n    body: 'Assigning a non-literal to `innerHTML`/`outerHTML` (or passing one to `insertAdjacentHTML`) '\r\n      + 'executes any markup it contains. If the value can carry user input this is XSS.',\r\n    triggers: ['innerHTML', 'outerHTML', 'insertAdjacentHTML'],\r\n    pattern: /\\.(?:inner|outer)HTML\\s*=\\s*[A-Za-z_$][\\w$.[\\]()]*|insertAdjacentHTML\\s*\\([^)]*,\\s*[A-Za-z_$]/,\r\n    extensions: ts,\r\n    enabled: true,\r\n  },\r\n  {\r\n    id: 'mutable-default-arg',\r\n    claimType: 'mutable_default_arg',\r\n    severity: 'P2',\r\n    title: 'Mutable default argument',\r\n    body: 'Python evaluates a default argument once, at definition time, so this list/dict/set is '\r\n      + 'shared by every call. Mutating it leaks state between invocations. Use `None` and build the '\r\n      + 'value inside the function.',\r\n    triggers: ['def '],\r\n    pattern: /\\bdef\\s+\\w+\\s*\\([^)]*=\\s*(?:\\[\\s*\\]|\\{\\s*\\}|set\\s*\\(\\s*\\)|dict\\s*\\(\\s*\\)|list\\s*\\(\\s*\\))/,\r\n    extensions: ['py'],\r\n    enabled: true,\r\n  },\r\n  {\r\n    id: 'destructive-migration',\r\n    claimType: 'destructive_migration',\r\n    severity: 'P1',\r\n    title: 'Destructive migration statement',\r\n    body: 'This statement discards data irreversibly. On a forward-only migration chain there is no '\r\n      + 'rollback: confirm the column/table is genuinely unused and that a backup exists.',\r\n    triggers: ['DROP', 'TRUNCATE', 'drop', 'truncate'],\r\n    pattern: /\\b(?:drop\\s+(?:column|table)|truncate\\s+table|truncate\\s+\\w)/i,\r\n    extensions: ['sql'],\r\n    enabled: true,\r\n  },\r\n\r\n\r\n  {\r\n    id: 'hardcoded-secret',\r\n    claimType: 'hardcoded_secret',\r\n    severity: 'P0',\r\n    title: 'Possible hardcoded credential',\r\n    body: 'This looks like a literal credential committed to the repository. If it is real, rotate it '\r\n      + 'and move it to a secret binding.',\r\n    triggers: ['sk-', 'AIza', 'ghp_', 'AKIA'],\r\n    pattern: /\\b(?:sk-[A-Za-z0-9]{20,}|AIza[0-9A-Za-z_-]{30,}|gh[pousr]_[A-Za-z0-9]{30,}|AKIA[0-9A-Z]{16})\\b/,\r\n    enabled: false,\r\n  },\r\n  {\r\n    id: 'insecure-random',\r\n    claimType: 'insecure_randomness',\r\n    severity: 'P2',\r\n    title: '`Math.random()` used for a security-sensitive value',\r\n    body: '`Math.random()` is not cryptographically secure and its output is predictable. Use '\r\n      + '`crypto.getRandomValues()` for tokens, ids or anything an attacker should not guess.',\r\n    triggers: ['Math.random'],\r\n    pattern: /\\b(?:token|secret|key|nonce|salt|password|session|id)\\w*\\s*=[^=]*Math\\.random\\s*\\(/i,\r\n    extensions: ts,\r\n    enabled: false,\r\n  },\r\n];\r\n\r\n"],"mappings":";AAiBA,IAAM,KAAK,CAAC,MAAM,OAAO,MAAM,OAAO,OAAO,KAAK;AAE3C,IAAM,QAAyB;AAAA,EACpC;AAAA,IACE,IAAI;AAAA,IACJ,WAAW;AAAA,IACX,UAAU;AAAA,IACV,OAAO;AAAA,IACP,MAAM;AAAA,IAEN,UAAU,CAAC,OAAO;AAAA,IAClB,SAAS;AAAA,IACT,WAAW;AAAA,IACX,YAAY;AAAA,IACZ,SAAS;AAAA,EACX;AAAA,EACA;AAAA,IACE,IAAI;AAAA,IACJ,WAAW;AAAA,IACX,UAAU;AAAA,IACV,OAAO;AAAA,IACP,MAAM;AAAA,IAEN,UAAU,CAAC,UAAU;AAAA,IACrB,SAAS;AAAA,IACT,YAAY;AAAA,IACZ,SAAS;AAAA,EACX;AAAA,EACA;AAAA,IACE,IAAI;AAAA,IACJ,WAAW;AAAA,IACX,UAAU;AAAA,IACV,OAAO;AAAA,IACP,MAAM;AAAA,IAEN,UAAU,CAAC,OAAO;AAAA,IAClB,SAAS;AAAA,IACT,YAAY;AAAA,IACZ,SAAS;AAAA,EACX;AAAA,EACA;AAAA,IACE,IAAI;AAAA,IACJ,WAAW;AAAA,IACX,UAAU;AAAA,IACV,OAAO;AAAA,IACP,MAAM;AAAA,IAEN,UAAU,CAAC,SAAS,WAAW;AAAA,IAC/B,SAAS;AAAA,IACT,YAAY;AAAA,IACZ,SAAS;AAAA,EACX;AAAA,EACA;AAAA,IACE,IAAI;AAAA,IACJ,WAAW;AAAA,IACX,UAAU;AAAA,IACV,OAAO;AAAA,IACP,MAAM;AAAA,IAEN,UAAU,CAAC,aAAa,aAAa,oBAAoB;AAAA,IACzD,SAAS;AAAA,IACT,YAAY;AAAA,IACZ,SAAS;AAAA,EACX;AAAA,EACA;AAAA,IACE,IAAI;AAAA,IACJ,WAAW;AAAA,IACX,UAAU;AAAA,IACV,OAAO;AAAA,IACP,MAAM;AAAA,IAGN,UAAU,CAAC,MAAM;AAAA,IACjB,SAAS;AAAA,IACT,YAAY,CAAC,IAAI;AAAA,IACjB,SAAS;AAAA,EACX;AAAA,EACA;AAAA,IACE,IAAI;AAAA,IACJ,WAAW;AAAA,IACX,UAAU;AAAA,IACV,OAAO;AAAA,IACP,MAAM;AAAA,IAEN,UAAU,CAAC,QAAQ,YAAY,QAAQ,UAAU;AAAA,IACjD,SAAS;AAAA,IACT,YAAY,CAAC,KAAK;AAAA,IAClB,SAAS;AAAA,EACX;AAAA,EAGA;AAAA,IACE,IAAI;AAAA,IACJ,WAAW;AAAA,IACX,UAAU;AAAA,IACV,OAAO;AAAA,IACP,MAAM;AAAA,IAEN,UAAU,CAAC,OAAO,QAAQ,QAAQ,MAAM;AAAA,IACxC,SAAS;AAAA,IACT,SAAS;AAAA,EACX;AAAA,EACA;AAAA,IACE,IAAI;AAAA,IACJ,WAAW;AAAA,IACX,UAAU;AAAA,IACV,OAAO;AAAA,IACP,MAAM;AAAA,IAEN,UAAU,CAAC,aAAa;AAAA,IACxB,SAAS;AAAA,IACT,YAAY;AAAA,IACZ,SAAS;AAAA,EACX;AACF;","names":[]}

package/dist/chunk-RQ5S67XB.js

@@ -0,0 +1,82 @@
+// src/prompts/languages.ts
+var LANGUAGE_GUIDELINES = [
+  {
+    language: "TypeScript/JavaScript",
+    persona: "an expert TypeScript engineer focused on correctness and safe async code",
+    extensions: ["ts", "tsx", "js", "jsx", "mjs", "cjs"],
+    guidelines: [
+      "Flag unhandled promise rejections, missing await, or async errors that can crash or silently drop work.",
+      "Flag resource leaks that cause real bugs (uncleared timers/intervals/listeners on a path that runs repeatedly).",
+      "Flag security pitfalls such as eval() on untrusted input or ReDoS-prone regexes.",
+      "Flag runtime-breaking null/undefined access introduced by the diff."
+    ]
+  },
+  {
+    language: "Python",
+    persona: "a Python engineer focused on correctness",
+    extensions: ["py"],
+    guidelines: [
+      "Flag mutable default arguments that cause shared-state bugs.",
+      'Flag bare "except:" that swallows errors and hides failures.',
+      "Flag incorrect exception handling or resource handling (files/sockets not closed)."
+    ]
+  },
+  {
+    language: "CSS/SCSS/Less",
+    persona: "a frontend engineer",
+    extensions: ["css", "scss", "sass", "less"],
+    guidelines: [
+      "Flag only rules that break layout or rendering; do not report stylistic preferences."
+    ]
+  },
+  {
+    language: "SQL",
+    persona: "a database engineer focused on query safety and correctness",
+    extensions: ["sql"],
+    guidelines: [
+      "Flag SQL injection risks (unparameterized/interpolated user input).",
+      "Flag destructive or non-atomic migrations that risk data loss."
+    ]
+  },
+  {
+    language: "Markdown",
+    persona: "a technical writer",
+    extensions: ["md", "mdx"],
+    guidelines: [
+      "Flag only broken links/images or factually incorrect content; do not report style or grammar nits."
+    ]
+  },
+  {
+    language: "HTML",
+    persona: "a web engineer",
+    extensions: ["html", "htm"],
+    guidelines: [
+      "Flag only markup that is broken or functionally inaccessible; do not report SEO or style preferences."
+    ]
+  },
+  {
+    language: "JSON/Config",
+    persona: "a DevOps engineer",
+    extensions: ["json", "jsonc", "yaml", "yml", "toml"],
+    guidelines: [
+      "Flag invalid syntax/schema or hardcoded secrets; do not report naming-convention preferences."
+    ]
+  }
+];
+function getLanguageForFile(path) {
+  const ext = path.split(".").pop()?.toLowerCase();
+  if (!ext) return void 0;
+  const matches = LANGUAGE_GUIDELINES.filter((g) => g.extensions.includes(ext));
+  if (matches.length === 0) return void 0;
+  if (matches.length > 1) {
+    return matches.reduce(
+      (best, candidate) => candidate.extensions.length < best.extensions.length ? candidate : best
+    );
+  }
+  return matches[0];
+}
+
+export {
+  getLanguageForFile
+};
+//# sourceMappingURL=chunk-RQ5S67XB.js.map

package/dist/chunk-RQ5S67XB.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/prompts/languages.ts"],"sourcesContent":["export type LanguageGuideline = {\r\n  language: string;\r\n  extensions: string[];\r\n  guidelines: string[];\r\n  persona?: string;\r\n};\r\n\r\nconst LANGUAGE_GUIDELINES: LanguageGuideline[] = [\r\n  {\r\n    language: 'TypeScript/JavaScript',\r\n    persona: 'an expert TypeScript engineer focused on correctness and safe async code',\r\n    extensions: ['ts', 'tsx', 'js', 'jsx', 'mjs', 'cjs'],\r\n    guidelines: [\r\n      'Flag unhandled promise rejections, missing await, or async errors that can crash or silently drop work.',\r\n      'Flag resource leaks that cause real bugs (uncleared timers/intervals/listeners on a path that runs repeatedly).',\r\n      'Flag security pitfalls such as eval() on untrusted input or ReDoS-prone regexes.',\r\n      'Flag runtime-breaking null/undefined access introduced by the diff.',\r\n    ],\r\n  },\r\n  {\r\n    language: 'Python',\r\n    persona: 'a Python engineer focused on correctness',\r\n    extensions: ['py'],\r\n    guidelines: [\r\n      'Flag mutable default arguments that cause shared-state bugs.',\r\n      'Flag bare \"except:\" that swallows errors and hides failures.',\r\n      'Flag incorrect exception handling or resource handling (files/sockets not closed).',\r\n    ],\r\n  },\r\n  {\r\n    language: 'CSS/SCSS/Less',\r\n    persona: 'a frontend engineer',\r\n    extensions: ['css', 'scss', 'sass', 'less'],\r\n    guidelines: [\r\n      'Flag only rules that break layout or rendering; do not report stylistic preferences.',\r\n    ],\r\n  },\r\n  {\r\n    language: 'SQL',\r\n    persona: 'a database engineer focused on query safety and correctness',\r\n    extensions: ['sql'],\r\n    guidelines: [\r\n      'Flag SQL injection risks (unparameterized/interpolated user input).',\r\n      'Flag destructive or non-atomic migrations that risk data loss.',\r\n    ],\r\n  },\r\n  {\r\n    language: 'Markdown',\r\n    persona: 'a technical writer',\r\n    extensions: ['md', 'mdx'],\r\n    guidelines: [\r\n      'Flag only broken links/images or factually incorrect content; do not report style or grammar nits.',\r\n    ],\r\n  },\r\n  {\r\n    language: 'HTML',\r\n    persona: 'a web engineer',\r\n    extensions: ['html', 'htm'],\r\n    guidelines: [\r\n      'Flag only markup that is broken or functionally inaccessible; do not report SEO or style preferences.',\r\n    ],\r\n  },\r\n  {\r\n    language: 'JSON/Config',\r\n    persona: 'a DevOps engineer',\r\n    extensions: ['json', 'jsonc', 'yaml', 'yml', 'toml'],\r\n    guidelines: [\r\n      'Flag invalid syntax/schema or hardcoded secrets; do not report naming-convention preferences.',\r\n    ],\r\n  },\r\n];\r\n\r\nexport function getLanguageForFile(path: string): LanguageGuideline | undefined {\r\n  const ext = path.split('.').pop()?.toLowerCase();\r\n  if (!ext) return undefined;\r\n\r\n  const matches = LANGUAGE_GUIDELINES.filter((g) => g.extensions.includes(ext));\r\n  \r\n  if (matches.length === 0) return undefined;\r\n\r\n  if (matches.length > 1) {\r\n    return matches.reduce((best, candidate) =>\r\n      candidate.extensions.length < best.extensions.length ? candidate : best,\r\n    );\r\n  }\r\n\r\n  return matches[0];\r\n}\r\n"],"mappings":";AAOA,IAAM,sBAA2C;AAAA,EAC/C;AAAA,IACE,UAAU;AAAA,IACV,SAAS;AAAA,IACT,YAAY,CAAC,MAAM,OAAO,MAAM,OAAO,OAAO,KAAK;AAAA,IACnD,YAAY;AAAA,MACV;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,IACF;AAAA,EACF;AAAA,EACA;AAAA,IACE,UAAU;AAAA,IACV,SAAS;AAAA,IACT,YAAY,CAAC,IAAI;AAAA,IACjB,YAAY;AAAA,MACV;AAAA,MACA;AAAA,MACA;AAAA,IACF;AAAA,EACF;AAAA,EACA;AAAA,IACE,UAAU;AAAA,IACV,SAAS;AAAA,IACT,YAAY,CAAC,OAAO,QAAQ,QAAQ,MAAM;AAAA,IAC1C,YAAY;AAAA,MACV;AAAA,IACF;AAAA,EACF;AAAA,EACA;AAAA,IACE,UAAU;AAAA,IACV,SAAS;AAAA,IACT,YAAY,CAAC,KAAK;AAAA,IAClB,YAAY;AAAA,MACV;AAAA,MACA;AAAA,IACF;AAAA,EACF;AAAA,EACA;AAAA,IACE,UAAU;AAAA,IACV,SAAS;AAAA,IACT,YAAY,CAAC,MAAM,KAAK;AAAA,IACxB,YAAY;AAAA,MACV;AAAA,IACF;AAAA,EACF;AAAA,EACA;AAAA,IACE,UAAU;AAAA,IACV,SAAS;AAAA,IACT,YAAY,CAAC,QAAQ,KAAK;AAAA,IAC1B,YAAY;AAAA,MACV;AAAA,IACF;AAAA,EACF;AAAA,EACA;AAAA,IACE,UAAU;AAAA,IACV,SAAS;AAAA,IACT,YAAY,CAAC,QAAQ,SAAS,QAAQ,OAAO,MAAM;AAAA,IACnD,YAAY;AAAA,MACV;AAAA,IACF;AAAA,EACF;AACF;AAEO,SAAS,mBAAmB,MAA6C;AAC9E,QAAM,MAAM,KAAK,MAAM,GAAG,EAAE,IAAI,GAAG,YAAY;AAC/C,MAAI,CAAC,IAAK,QAAO;AAEjB,QAAM,UAAU,oBAAoB,OAAO,CAAC,MAAM,EAAE,WAAW,SAAS,GAAG,CAAC;AAE5E,MAAI,QAAQ,WAAW,EAAG,QAAO;AAEjC,MAAI,QAAQ,SAAS,GAAG;AACtB,WAAO,QAAQ;AAAA,MAAO,CAAC,MAAM,cAC3B,UAAU,WAAW,SAAS,KAAK,WAAW,SAAS,YAAY;AAAA,IACrE;AAAA,EACF;AAEA,SAAO,QAAQ,CAAC;AAClB;","names":[]}

package/dist/chunk-U3VKVDZ7.js

@@ -0,0 +1,266 @@
+import {
+  normalizeDiffText
+} from "./chunk-NSTV4TRP.js";
+
+// src/claim-checks.ts
+var PROXIMITY_WINDOW_LINES = 25;
+var MIN_IDENTIFIER_LENGTH = 3;
+var ABSENCE_PATTERNS = [
+  /\b(?:never|not|no longer)\s+(?:being\s+)?(?:passed|provided|supplied|forwarded|included|used|called|invoked|awaited|checked|set|declared|defined|imported)\b/i,
+  /\bdoes not\s+(?:pass|include|call|use|await|check|set|import)\b/i,
+  /\bfails to\s+(?:pass|include|call|await|check|import)\b/i,
+  /\bwithout\s+(?:passing|including|calling|awaiting|checking|importing)\b/i,
+  /\b(?:missing|omitted|absent)\b/i,
+  /\bis not defined\b/i
+];
+var IDENTIFIER_STOPLIST = /* @__PURE__ */ new Set([
+  "await",
+  "async",
+  "if",
+  "else",
+  "try",
+  "catch",
+  "finally",
+  "return",
+  "throw",
+  "new",
+  "const",
+  "let",
+  "var",
+  "function",
+  "class",
+  "this",
+  "super",
+  "import",
+  "export",
+  "from",
+  "default",
+  "null",
+  "undefined",
+  "true",
+  "false",
+  "void",
+  "typeof",
+  "instanceof",
+  "delete",
+  "yield",
+  "props",
+  "state",
+  "error",
+  "err",
+  "data",
+  "value",
+  "key",
+  "id",
+  "type",
+  "name",
+  "index",
+  "result",
+  "response",
+  "request",
+  "req",
+  "res",
+  "params",
+  "options",
+  "config",
+  "args"
+]);
+var VERSION_CLAIM_PATTERNS = [
+  /\b(?:does not|doesn't|do not|don't)\s+exist\b/i,
+  /\b(?:non-?existent|nonexistent)\b/i,
+  /\bis not a valid\b/i,
+  /\blatest (?:major )?version\b/i,
+  /\bno such (?:version|tag|release)\b/i,
+  /\bnot a valid (?:configuration )?(?:option|key|property)\b/i,
+  /\b(?:does not|doesn't|do not|don't)\s+(?:expose|provide|have|support|include|offer)\b/i,
+  /\bno such (?:function|method|export|property|api|field)\b/i,
+  /\bis not (?:exposed|exported|available) (?:by|from|in)\b/i
+];
+var CROSS_FILE_SUBJECT = /\b(?:other|another|external|downstream|consuming|importing|dependent|calling)\s+(?:module|file|component|caller|package|consumer|import)s?\b/i;
+var CROSS_FILE_CONSEQUENCE = /\b(?:break|breaks|breaking|broken|fail|fails|failing|error|errors|cannot import|can't import|unable to|compilation|compile|prevent|prevents|preventing|block|blocks|blocking)\b/i;
+var ENVIRONMENT_HEDGE = /\b(?:depending on|might not|may not|could be undefined|if (?:this|the|it)\b[^.]{0,60}\b(?:is )?(?:rendered|run|executed|used)\b)/i;
+var ENVIRONMENT_SUBJECT = /\b(?:older|legacy|earlier|some)\s+(?:node(?:\.js)?|browsers?|runtimes?|environments?|engines?|versions?)\b|\bserver[- ]side\b|\bSSR\b|\bhydration\b|\bpolyfill\b|\bis not defined on the server\b/i;
+var CALLEE_FAILURE_CONDITION = /\b(?:if|when|should|were)\b(?:(?!\.\s)[^;!?]){0,62}\b(?:fails?|failing|rejects?|rejecting|throws?|throwing|errors? out)\b/i;
+var CALLEE_CALL_SHAPE = /[\w.$]{1,50}\s*\(\s*\)|`[\w.$]{1,50}\(/;
+var CALLEE_UNHANDLED_OUTCOME = /\bunhandled\b|\bunhandled promise\b|\bnot (?:caught|handled)\b|\bno (?:\.)?catch\b|\bwithout (?:a )?(?:try|catch)\b|\bcrash\b/i;
+function refuteUndecidableClaim(input) {
+  const text = `${input.title}
+${input.body}`;
+  if (CROSS_FILE_SUBJECT.test(text) && CROSS_FILE_CONSEQUENCE.test(text)) return "cross-file";
+  if (ENVIRONMENT_HEDGE.test(text) && ENVIRONMENT_SUBJECT.test(text)) return "environment";
+  if (CALLEE_FAILURE_CONDITION.test(text) && CALLEE_CALL_SHAPE.test(text) && CALLEE_UNHANDLED_OUTCOME.test(text)) {
+    return "callee-errors";
+  }
+  return null;
+}
+var FULL_SHA_PATTERN = /\b[0-9a-f]{40}\b/;
+function looksLikeExternalVersionClaim(title, body) {
+  const text = `${title}
+${body}`;
+  return VERSION_CLAIM_PATTERNS.some((pattern) => pattern.test(text));
+}
+function isVersionClaimRefutedByPin(input) {
+  if (!looksLikeExternalVersionClaim(input.title, input.body)) return false;
+  return FULL_SHA_PATTERN.test(input.anchorContent);
+}
+function commentSyntaxFor(path) {
+  const ext = path.toLowerCase().split(".").pop() ?? "";
+  if (ext === "py" || ext === "rb" || ext === "sh" || ext === "yaml" || ext === "yml" || ext === "toml") {
+    return { line: ["#"], block: false };
+  }
+  if (ext === "sql") return { line: ["--"], block: true };
+  return { line: ["//"], block: true };
+}
+function stripCommentsAndStrings(input, syntax) {
+  let out = "";
+  let i = 0;
+  while (i < input.length) {
+    const rest = input.slice(i);
+    if (syntax.line.some((token) => rest.startsWith(token))) break;
+    if (syntax.block && rest.startsWith("/*")) {
+      const end = input.indexOf("*/", i + 2);
+      if (end === -1) return null;
+      out += " ";
+      i = end + 2;
+      continue;
+    }
+    const char = input[i];
+    if (char === "'" || char === '"') {
+      const close = findStringEnd(input, i + 1, char);
+      if (close === -1) return null;
+      out += " ";
+      i = close + 1;
+      continue;
+    }
+    if (char === "`") {
+      const scanned = scanTemplateLiteral(input, i);
+      if (!scanned) return null;
+      out += scanned.code;
+      i = scanned.next;
+      continue;
+    }
+    out += char;
+    i += 1;
+  }
+  return out;
+}
+function findStringEnd(input, start, quote) {
+  for (let i = start; i < input.length; i++) {
+    if (input[i] === "\\") {
+      i += 1;
+      continue;
+    }
+    if (input[i] === quote) return i;
+  }
+  return -1;
+}
+function scanTemplateLiteral(input, start) {
+  let code = " ";
+  let i = start + 1;
+  while (i < input.length) {
+    if (input[i] === "\\") {
+      i += 2;
+      continue;
+    }
+    if (input[i] === "`") return { code, next: i + 1 };
+    if (input[i] === "$" && input[i + 1] === "{") {
+      let depth = 1;
+      let j = i + 2;
+      while (j < input.length && depth > 0) {
+        if (input[j] === "{") depth += 1;
+        else if (input[j] === "}") depth -= 1;
+        j += 1;
+      }
+      if (depth !== 0) return null;
+      code += ` ${input.slice(i + 2, j - 1)} `;
+      i = j;
+      continue;
+    }
+    i += 1;
+  }
+  return null;
+}
+var TOKEN_PATTERN = /[A-Za-z_$][\w$]*/g;
+function buildPresenceIndex(file) {
+  const syntax = commentSyntaxFor(file.path);
+  const byToken = /* @__PURE__ */ new Map();
+  const entries = [];
+  const hunkByLine = /* @__PURE__ */ new Map();
+  file.hunks.forEach((hunk, hunkIndex) => {
+    for (const line of hunk.lines) {
+      if (line.newLineNumber !== void 0) hunkByLine.set(line.newLineNumber, hunkIndex);
+      if (line.kind === "del") continue;
+      const code = stripCommentsAndStrings(normalizeDiffText(line.content), syntax);
+      if (code === null) continue;
+      const entry = { line, hunkIndex, code };
+      entries.push(entry);
+      for (const match of code.matchAll(TOKEN_PATTERN)) {
+        const token = match[0];
+        const existing = byToken.get(token);
+        if (existing) existing.push(entry);
+        else byToken.set(token, [entry]);
+      }
+    }
+  });
+  return { byToken, entries, hunkByLine };
+}
+var SIMPLE_IDENTIFIER = /^[A-Za-z_$][\w$]*$/;
+var DOTTED_IDENTIFIER = /^[A-Za-z_$][\w$]*(?:\.[A-Za-z_$][\w$]*)+$/;
+function extractIdentifier(sentence) {
+  const spans = [
+    ...sentence.matchAll(/`([^`]+)`/g),
+    ...sentence.matchAll(/'([^']+)'/g),
+    ...sentence.matchAll(/"([^"]+)"/g)
+  ].map((match) => match[1].trim());
+  const candidates = new Set(
+    spans.filter((span) => SIMPLE_IDENTIFIER.test(span) || DOTTED_IDENTIFIER.test(span))
+  );
+  if (candidates.size === 0) return "none";
+  if (candidates.size > 1) return "ambiguous";
+  return { identifier: [...candidates][0] };
+}
+function absenceSentences(text) {
+  return text.split(/[.;\n]/).filter((sentence) => ABSENCE_PATTERNS.some((pattern) => pattern.test(sentence)));
+}
+function checkAbsenceClaim(input) {
+  const text = `${input.title}
+${input.body.slice(0, 600)}`;
+  const sentences = absenceSentences(text);
+  if (sentences.length === 0) return { status: "unknown", reason: "not_absence_shaped" };
+  let identifier;
+  for (const sentence of sentences) {
+    const extracted = extractIdentifier(sentence);
+    if (extracted === "ambiguous") return { status: "unknown", reason: "ambiguous_identifier" };
+    if (extracted !== "none") {
+      identifier = extracted.identifier;
+      break;
+    }
+  }
+  if (!identifier) return { status: "unknown", reason: "no_identifier" };
+  const head = identifier.split(".")[0];
+  if (identifier.length < MIN_IDENTIFIER_LENGTH) return { status: "unknown", reason: "stoplisted" };
+  if (IDENTIFIER_STOPLIST.has(identifier.toLowerCase()) || IDENTIFIER_STOPLIST.has(head.toLowerCase())) {
+    return { status: "unknown", reason: "stoplisted" };
+  }
+  const occurrences = identifier.includes(".") ? input.index.entries.filter((entry) => entry.code.replace(/\s*\.\s*/g, ".").includes(identifier)) : input.index.byToken.get(identifier) ?? [];
+  if (occurrences.length === 0) return { status: "unknown", reason: "not_present" };
+  const anchorHunk = input.anchorLine !== void 0 ? input.index.hunkByLine.get(input.anchorLine) : void 0;
+  const nearby = occurrences.find((entry) => {
+    if (anchorHunk !== void 0 && entry.hunkIndex === anchorHunk) return true;
+    if (input.anchorLine === void 0 || entry.line.newLineNumber === void 0) return false;
+    return Math.abs(entry.line.newLineNumber - input.anchorLine) <= PROXIMITY_WINDOW_LINES;
+  });
+  if (!nearby) return { status: "unknown", reason: "out_of_window" };
+  return { status: "refuted", identifier, line: nearby.line };
+}
+
+export {
+  refuteUndecidableClaim,
+  looksLikeExternalVersionClaim,
+  isVersionClaimRefutedByPin,
+  commentSyntaxFor,
+  stripCommentsAndStrings,
+  buildPresenceIndex,
+  checkAbsenceClaim
+};
+//# sourceMappingURL=chunk-U3VKVDZ7.js.map

package/dist/chunk-U3VKVDZ7.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/claim-checks.ts"],"sourcesContent":["// SOUNDNESS, binding on every change: `refuted` asserts only that \"X does not appear\" is FALSE. There is no `confirmed` verdict, since a check that can confirm findings manufactures them. Losing a refutation is free; a wrong one silences a real defect.\r\nimport type { DiffLine, FileDiff } from './diff';\r\nimport { normalizeDiffText } from './fingerprint';\r\n\r\nconst PROXIMITY_WINDOW_LINES = 25;\r\n\r\nconst MIN_IDENTIFIER_LENGTH = 3;\r\n\r\nconst ABSENCE_PATTERNS: readonly RegExp[] = [\r\n  /\\b(?:never|not|no longer)\\s+(?:being\\s+)?(?:passed|provided|supplied|forwarded|included|used|called|invoked|awaited|checked|set|declared|defined|imported)\\b/i,\r\n  /\\bdoes not\\s+(?:pass|include|call|use|await|check|set|import)\\b/i,\r\n  /\\bfails to\\s+(?:pass|include|call|await|check|import)\\b/i,\r\n  /\\bwithout\\s+(?:passing|including|calling|awaiting|checking|importing)\\b/i,\r\n  /\\b(?:missing|omitted|absent)\\b/i,\r\n  /\\bis not defined\\b/i,\r\n];\r\n\r\nconst IDENTIFIER_STOPLIST = new Set([\r\n  'await', 'async', 'if', 'else', 'try', 'catch', 'finally', 'return', 'throw', 'new', 'const',\r\n  'let', 'var', 'function', 'class', 'this', 'super', 'import', 'export', 'from', 'default',\r\n  'null', 'undefined', 'true', 'false', 'void', 'typeof', 'instanceof', 'delete', 'yield',\r\n  'props', 'state', 'error', 'err', 'data', 'value', 'key', 'id', 'type', 'name', 'index',\r\n  'result', 'response', 'request', 'req', 'res', 'params', 'options', 'config', 'args',\r\n]);\r\n\r\nconst VERSION_CLAIM_PATTERNS: readonly RegExp[] = [\r\n  /\\b(?:does not|doesn't|do not|don't)\\s+exist\\b/i,\r\n  /\\b(?:non-?existent|nonexistent)\\b/i,\r\n  /\\bis not a valid\\b/i,\r\n  /\\blatest (?:major )?version\\b/i,\r\n  /\\bno such (?:version|tag|release)\\b/i,\r\n  /\\bnot a valid (?:configuration )?(?:option|key|property)\\b/i,\r\n  /\\b(?:does not|doesn't|do not|don't)\\s+(?:expose|provide|have|support|include|offer)\\b/i,\r\n  /\\bno such (?:function|method|export|property|api|field)\\b/i,\r\n  /\\bis not (?:exposed|exported|available) (?:by|from|in)\\b/i,\r\n];\r\n\r\n// Same soundness rule as the absence checker above: a refutation asserts only that the claim cannot be\r\n\r\nconst CROSS_FILE_SUBJECT = /\\b(?:other|another|external|downstream|consuming|importing|dependent|calling)\\s+(?:module|file|component|caller|package|consumer|import)s?\\b/i;\r\nconst CROSS_FILE_CONSEQUENCE = /\\b(?:break|breaks|breaking|broken|fail|fails|failing|error|errors|cannot import|can't import|unable to|compilation|compile|prevent|prevents|preventing|block|blocks|blocking)\\b/i;\r\n\r\nconst ENVIRONMENT_HEDGE = /\\b(?:depending on|might not|may not|could be undefined|if (?:this|the|it)\\b[^.]{0,60}\\b(?:is )?(?:rendered|run|executed|used)\\b)/i;\r\nconst ENVIRONMENT_SUBJECT = /\\b(?:older|legacy|earlier|some)\\s+(?:node(?:\\.js)?|browsers?|runtimes?|environments?|engines?|versions?)\\b|\\bserver[- ]side\\b|\\bSSR\\b|\\bhydration\\b|\\bpolyfill\\b|\\bis not defined on the server\\b/i;\r\n\r\nconst CALLEE_FAILURE_CONDITION = /\\b(?:if|when|should|were)\\b(?:(?!\\.\\s)[^;!?]){0,62}\\b(?:fails?|failing|rejects?|rejecting|throws?|throwing|errors? out)\\b/i;\r\nconst CALLEE_CALL_SHAPE = /[\\w.$]{1,50}\\s*\\(\\s*\\)|`[\\w.$]{1,50}\\(/;\r\nconst CALLEE_UNHANDLED_OUTCOME = /\\bunhandled\\b|\\bunhandled promise\\b|\\bnot (?:caught|handled)\\b|\\bno (?:\\.)?catch\\b|\\bwithout (?:a )?(?:try|catch)\\b|\\bcrash\\b/i;\r\n\r\nexport type UndecidableClaimReason = 'cross-file' | 'environment' | 'callee-errors';\r\n\r\n/**\r\n * Refutes a claim whose truth lives outside the diff, returning the family it belongs to or null.\r\n *\r\n * Deliberately requires TWO independent signals per family -- a subject and a consequence -- because\r\n * either alone is ordinary review language. \"This breaks the build\" is a normal thing to say about\r\n * code in the diff; \"other modules import this\" is a normal aside. Only together do they describe a\r\n * consequence in a file nobody showed the model.\r\n */\r\nexport function refuteUndecidableClaim(input: { title: string; body: string }): UndecidableClaimReason | null {\r\n  const text = `${input.title}\\n${input.body}`;\r\n\r\n  if (CROSS_FILE_SUBJECT.test(text) && CROSS_FILE_CONSEQUENCE.test(text)) return 'cross-file';\r\n  if (ENVIRONMENT_HEDGE.test(text) && ENVIRONMENT_SUBJECT.test(text)) return 'environment';\r\n  if (CALLEE_FAILURE_CONDITION.test(text) && CALLEE_CALL_SHAPE.test(text) && CALLEE_UNHANDLED_OUTCOME.test(text)) {\r\n    return 'callee-errors';\r\n  }\r\n\r\n  return null;\r\n}\r\n\r\nconst FULL_SHA_PATTERN = /\\b[0-9a-f]{40}\\b/;\r\n\r\nexport function looksLikeExternalVersionClaim(title: string, body: string): boolean {\r\n  const text = `${title}\\n${body}`;\r\n  return VERSION_CLAIM_PATTERNS.some((pattern) => pattern.test(text));\r\n}\r\n\r\nexport function isVersionClaimRefutedByPin(input: { title: string; body: string; anchorContent: string }): boolean {\r\n  if (!looksLikeExternalVersionClaim(input.title, input.body)) return false;\r\n  return FULL_SHA_PATTERN.test(input.anchorContent);\r\n}\r\n\r\ntype PresenceEntry = { line: DiffLine; hunkIndex: number; code: string };\r\n\r\nexport type PresenceIndex = {\r\n  byToken: Map<string, PresenceEntry[]>;\r\n  entries: PresenceEntry[];\r\n  hunkByLine: Map<number, number>;\r\n};\r\n\r\nexport type AbsenceClaimVerdict =\r\n  | {\r\n      status: 'unknown';\r\n      reason:\r\n        | 'not_absence_shaped'\r\n        | 'no_identifier'\r\n        | 'ambiguous_identifier'\r\n        | 'stoplisted'\r\n        | 'not_present'\r\n        | 'out_of_window';\r\n    }\r\n  | { status: 'refuted'; identifier: string; line: DiffLine };\r\n\r\ntype CommentSyntax = { line: readonly string[]; block: boolean };\r\n\r\nexport function commentSyntaxFor(path: string): CommentSyntax {\r\n  const ext = path.toLowerCase().split('.').pop() ?? '';\r\n  if (ext === 'py' || ext === 'rb' || ext === 'sh' || ext === 'yaml' || ext === 'yml' || ext === 'toml') {\r\n    return { line: ['#'], block: false };\r\n  }\r\n  if (ext === 'sql') return { line: ['--'], block: true };\r\n  return { line: ['//'], block: true };\r\n}\r\n\r\nexport function stripCommentsAndStrings(input: string, syntax: CommentSyntax): string | null {\r\n  let out = '';\r\n  let i = 0;\r\n\r\n  while (i < input.length) {\r\n    const rest = input.slice(i);\r\n\r\n    if (syntax.line.some((token) => rest.startsWith(token))) break;\r\n\r\n    if (syntax.block && rest.startsWith('/*')) {\r\n      const end = input.indexOf('*/', i + 2);\r\n      if (end === -1) return null;\r\n      out += ' ';\r\n      i = end + 2;\r\n      continue;\r\n    }\r\n\r\n    const char = input[i];\r\n\r\n    if (char === \"'\" || char === '\"') {\r\n      const close = findStringEnd(input, i + 1, char);\r\n      if (close === -1) return null;\r\n      out += ' ';\r\n      i = close + 1;\r\n      continue;\r\n    }\r\n\r\n    if (char === '`') {\r\n      const scanned = scanTemplateLiteral(input, i);\r\n      if (!scanned) return null;\r\n      out += scanned.code;\r\n      i = scanned.next;\r\n      continue;\r\n    }\r\n\r\n    out += char;\r\n    i += 1;\r\n  }\r\n\r\n  return out;\r\n}\r\n\r\nfunction findStringEnd(input: string, start: number, quote: string): number {\r\n  for (let i = start; i < input.length; i++) {\r\n    if (input[i] === '\\\\') {\r\n      i += 1;\r\n      continue;\r\n    }\r\n    if (input[i] === quote) return i;\r\n  }\r\n  return -1;\r\n}\r\n\r\nfunction scanTemplateLiteral(input: string, start: number): { code: string; next: number } | null {\r\n  let code = ' ';\r\n  let i = start + 1;\r\n\r\n  while (i < input.length) {\r\n    if (input[i] === '\\\\') {\r\n      i += 2;\r\n      continue;\r\n    }\r\n    if (input[i] === '`') return { code, next: i + 1 };\r\n    if (input[i] === '$' && input[i + 1] === '{') {\r\n      let depth = 1;\r\n      let j = i + 2;\r\n      while (j < input.length && depth > 0) {\r\n        if (input[j] === '{') depth += 1;\r\n        else if (input[j] === '}') depth -= 1;\r\n        j += 1;\r\n      }\r\n      if (depth !== 0) return null;\r\n      code += ` ${input.slice(i + 2, j - 1)} `;\r\n      i = j;\r\n      continue;\r\n    }\r\n    i += 1;\r\n  }\r\n\r\n  return null;\r\n}\r\n\r\nconst TOKEN_PATTERN = /[A-Za-z_$][\\w$]*/g;\r\n\r\nexport function buildPresenceIndex(file: FileDiff): PresenceIndex {\r\n  const syntax = commentSyntaxFor(file.path);\r\n  const byToken = new Map<string, PresenceEntry[]>();\r\n  const entries: PresenceEntry[] = [];\r\n  const hunkByLine = new Map<number, number>();\r\n\r\n  file.hunks.forEach((hunk, hunkIndex) => {\r\n    for (const line of hunk.lines) {\r\n      if (line.newLineNumber !== undefined) hunkByLine.set(line.newLineNumber, hunkIndex);\r\n\r\n      if (line.kind === 'del') continue;\r\n\r\n      const code = stripCommentsAndStrings(normalizeDiffText(line.content), syntax);\r\n      if (code === null) continue;\r\n\r\n      const entry: PresenceEntry = { line, hunkIndex, code };\r\n      entries.push(entry);\r\n\r\n      for (const match of code.matchAll(TOKEN_PATTERN)) {\r\n        const token = match[0];\r\n        const existing = byToken.get(token);\r\n        if (existing) existing.push(entry);\r\n        else byToken.set(token, [entry]);\r\n      }\r\n    }\r\n  });\r\n\r\n  return { byToken, entries, hunkByLine };\r\n}\r\n\r\nconst SIMPLE_IDENTIFIER = /^[A-Za-z_$][\\w$]*$/;\r\nconst DOTTED_IDENTIFIER = /^[A-Za-z_$][\\w$]*(?:\\.[A-Za-z_$][\\w$]*)+$/;\r\n\r\nfunction extractIdentifier(sentence: string): { identifier: string } | 'none' | 'ambiguous' {\r\n  const spans = [\r\n    ...sentence.matchAll(/`([^`]+)`/g),\r\n    ...sentence.matchAll(/'([^']+)'/g),\r\n    ...sentence.matchAll(/\"([^\"]+)\"/g),\r\n  ].map((match) => match[1].trim());\r\n\r\n  const candidates = new Set(\r\n    spans.filter((span) => SIMPLE_IDENTIFIER.test(span) || DOTTED_IDENTIFIER.test(span)),\r\n  );\r\n\r\n  if (candidates.size === 0) return 'none';\r\n  if (candidates.size > 1) return 'ambiguous';\r\n  return { identifier: [...candidates][0] };\r\n}\r\n\r\nfunction absenceSentences(text: string): string[] {\r\n  return text.split(/[.;\\n]/).filter((sentence) => ABSENCE_PATTERNS.some((pattern) => pattern.test(sentence)));\r\n}\r\n\r\nexport function checkAbsenceClaim(input: {\r\n  title: string;\r\n  body: string;\r\n  anchorLine: number | undefined;\r\n  index: PresenceIndex;\r\n}): AbsenceClaimVerdict {\r\n  const text = `${input.title}\\n${input.body.slice(0, 600)}`;\r\n\r\n  const sentences = absenceSentences(text);\r\n  if (sentences.length === 0) return { status: 'unknown', reason: 'not_absence_shaped' };\r\n\r\n  let identifier: string | undefined;\r\n  for (const sentence of sentences) {\r\n    const extracted = extractIdentifier(sentence);\r\n    if (extracted === 'ambiguous') return { status: 'unknown', reason: 'ambiguous_identifier' };\r\n    if (extracted !== 'none') {\r\n      identifier = extracted.identifier;\r\n      break;\r\n    }\r\n  }\r\n  if (!identifier) return { status: 'unknown', reason: 'no_identifier' };\r\n\r\n  const head = identifier.split('.')[0];\r\n  if (identifier.length < MIN_IDENTIFIER_LENGTH) return { status: 'unknown', reason: 'stoplisted' };\r\n  if (IDENTIFIER_STOPLIST.has(identifier.toLowerCase()) || IDENTIFIER_STOPLIST.has(head.toLowerCase())) {\r\n    return { status: 'unknown', reason: 'stoplisted' };\r\n  }\r\n\r\n  const occurrences = identifier.includes('.')\r\n    ? input.index.entries.filter((entry) => entry.code.replace(/\\s*\\.\\s*/g, '.').includes(identifier))\r\n    : (input.index.byToken.get(identifier) ?? []);\r\n\r\n  if (occurrences.length === 0) return { status: 'unknown', reason: 'not_present' };\r\n\r\n  const anchorHunk = input.anchorLine !== undefined ? input.index.hunkByLine.get(input.anchorLine) : undefined;\r\n  const nearby = occurrences.find((entry) => {\r\n    if (anchorHunk !== undefined && entry.hunkIndex === anchorHunk) return true;\r\n    if (input.anchorLine === undefined || entry.line.newLineNumber === undefined) return false;\r\n    return Math.abs(entry.line.newLineNumber - input.anchorLine) <= PROXIMITY_WINDOW_LINES;\r\n  });\r\n\r\n  if (!nearby) return { status: 'unknown', reason: 'out_of_window' };\r\n  return { status: 'refuted', identifier, line: nearby.line };\r\n}\r\n"],"mappings":";;;;;AAIA,IAAM,yBAAyB;AAE/B,IAAM,wBAAwB;AAE9B,IAAM,mBAAsC;AAAA,EAC1C;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF;AAEA,IAAM,sBAAsB,oBAAI,IAAI;AAAA,EAClC;AAAA,EAAS;AAAA,EAAS;AAAA,EAAM;AAAA,EAAQ;AAAA,EAAO;AAAA,EAAS;AAAA,EAAW;AAAA,EAAU;AAAA,EAAS;AAAA,EAAO;AAAA,EACrF;AAAA,EAAO;AAAA,EAAO;AAAA,EAAY;AAAA,EAAS;AAAA,EAAQ;AAAA,EAAS;AAAA,EAAU;AAAA,EAAU;AAAA,EAAQ;AAAA,EAChF;AAAA,EAAQ;AAAA,EAAa;AAAA,EAAQ;AAAA,EAAS;AAAA,EAAQ;AAAA,EAAU;AAAA,EAAc;AAAA,EAAU;AAAA,EAChF;AAAA,EAAS;AAAA,EAAS;AAAA,EAAS;AAAA,EAAO;AAAA,EAAQ;AAAA,EAAS;AAAA,EAAO;AAAA,EAAM;AAAA,EAAQ;AAAA,EAAQ;AAAA,EAChF;AAAA,EAAU;AAAA,EAAY;AAAA,EAAW;AAAA,EAAO;AAAA,EAAO;AAAA,EAAU;AAAA,EAAW;AAAA,EAAU;AAChF,CAAC;AAED,IAAM,yBAA4C;AAAA,EAChD;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF;AAIA,IAAM,qBAAqB;AAC3B,IAAM,yBAAyB;AAE/B,IAAM,oBAAoB;AAC1B,IAAM,sBAAsB;AAE5B,IAAM,2BAA2B;AACjC,IAAM,oBAAoB;AAC1B,IAAM,2BAA2B;AAY1B,SAAS,uBAAuB,OAAuE;AAC5G,QAAM,OAAO,GAAG,MAAM,KAAK;AAAA,EAAK,MAAM,IAAI;AAE1C,MAAI,mBAAmB,KAAK,IAAI,KAAK,uBAAuB,KAAK,IAAI,EAAG,QAAO;AAC/E,MAAI,kBAAkB,KAAK,IAAI,KAAK,oBAAoB,KAAK,IAAI,EAAG,QAAO;AAC3E,MAAI,yBAAyB,KAAK,IAAI,KAAK,kBAAkB,KAAK,IAAI,KAAK,yBAAyB,KAAK,IAAI,GAAG;AAC9G,WAAO;AAAA,EACT;AAEA,SAAO;AACT;AAEA,IAAM,mBAAmB;AAElB,SAAS,8BAA8B,OAAe,MAAuB;AAClF,QAAM,OAAO,GAAG,KAAK;AAAA,EAAK,IAAI;AAC9B,SAAO,uBAAuB,KAAK,CAAC,YAAY,QAAQ,KAAK,IAAI,CAAC;AACpE;AAEO,SAAS,2BAA2B,OAAwE;AACjH,MAAI,CAAC,8BAA8B,MAAM,OAAO,MAAM,IAAI,EAAG,QAAO;AACpE,SAAO,iBAAiB,KAAK,MAAM,aAAa;AAClD;AAyBO,SAAS,iBAAiB,MAA6B;AAC5D,QAAM,MAAM,KAAK,YAAY,EAAE,MAAM,GAAG,EAAE,IAAI,KAAK;AACnD,MAAI,QAAQ,QAAQ,QAAQ,QAAQ,QAAQ,QAAQ,QAAQ,UAAU,QAAQ,SAAS,QAAQ,QAAQ;AACrG,WAAO,EAAE,MAAM,CAAC,GAAG,GAAG,OAAO,MAAM;AAAA,EACrC;AACA,MAAI,QAAQ,MAAO,QAAO,EAAE,MAAM,CAAC,IAAI,GAAG,OAAO,KAAK;AACtD,SAAO,EAAE,MAAM,CAAC,IAAI,GAAG,OAAO,KAAK;AACrC;AAEO,SAAS,wBAAwB,OAAe,QAAsC;AAC3F,MAAI,MAAM;AACV,MAAI,IAAI;AAER,SAAO,IAAI,MAAM,QAAQ;AACvB,UAAM,OAAO,MAAM,MAAM,CAAC;AAE1B,QAAI,OAAO,KAAK,KAAK,CAAC,UAAU,KAAK,WAAW,KAAK,CAAC,EAAG;AAEzD,QAAI,OAAO,SAAS,KAAK,WAAW,IAAI,GAAG;AACzC,YAAM,MAAM,MAAM,QAAQ,MAAM,IAAI,CAAC;AACrC,UAAI,QAAQ,GAAI,QAAO;AACvB,aAAO;AACP,UAAI,MAAM;AACV;AAAA,IACF;AAEA,UAAM,OAAO,MAAM,CAAC;AAEpB,QAAI,SAAS,OAAO,SAAS,KAAK;AAChC,YAAM,QAAQ,cAAc,OAAO,IAAI,GAAG,IAAI;AAC9C,UAAI,UAAU,GAAI,QAAO;AACzB,aAAO;AACP,UAAI,QAAQ;AACZ;AAAA,IACF;AAEA,QAAI,SAAS,KAAK;AAChB,YAAM,UAAU,oBAAoB,OAAO,CAAC;AAC5C,UAAI,CAAC,QAAS,QAAO;AACrB,aAAO,QAAQ;AACf,UAAI,QAAQ;AACZ;AAAA,IACF;AAEA,WAAO;AACP,SAAK;AAAA,EACP;AAEA,SAAO;AACT;AAEA,SAAS,cAAc,OAAe,OAAe,OAAuB;AAC1E,WAAS,IAAI,OAAO,IAAI,MAAM,QAAQ,KAAK;AACzC,QAAI,MAAM,CAAC,MAAM,MAAM;AACrB,WAAK;AACL;AAAA,IACF;AACA,QAAI,MAAM,CAAC,MAAM,MAAO,QAAO;AAAA,EACjC;AACA,SAAO;AACT;AAEA,SAAS,oBAAoB,OAAe,OAAsD;AAChG,MAAI,OAAO;AACX,MAAI,IAAI,QAAQ;AAEhB,SAAO,IAAI,MAAM,QAAQ;AACvB,QAAI,MAAM,CAAC,MAAM,MAAM;AACrB,WAAK;AACL;AAAA,IACF;AACA,QAAI,MAAM,CAAC,MAAM,IAAK,QAAO,EAAE,MAAM,MAAM,IAAI,EAAE;AACjD,QAAI,MAAM,CAAC,MAAM,OAAO,MAAM,IAAI,CAAC,MAAM,KAAK;AAC5C,UAAI,QAAQ;AACZ,UAAI,IAAI,IAAI;AACZ,aAAO,IAAI,MAAM,UAAU,QAAQ,GAAG;AACpC,YAAI,MAAM,CAAC,MAAM,IAAK,UAAS;AAAA,iBACtB,MAAM,CAAC,MAAM,IAAK,UAAS;AACpC,aAAK;AAAA,MACP;AACA,UAAI,UAAU,EAAG,QAAO;AACxB,cAAQ,IAAI,MAAM,MAAM,IAAI,GAAG,IAAI,CAAC,CAAC;AACrC,UAAI;AACJ;AAAA,IACF;AACA,SAAK;AAAA,EACP;AAEA,SAAO;AACT;AAEA,IAAM,gBAAgB;AAEf,SAAS,mBAAmB,MAA+B;AAChE,QAAM,SAAS,iBAAiB,KAAK,IAAI;AACzC,QAAM,UAAU,oBAAI,IAA6B;AACjD,QAAM,UAA2B,CAAC;AAClC,QAAM,aAAa,oBAAI,IAAoB;AAE3C,OAAK,MAAM,QAAQ,CAAC,MAAM,cAAc;AACtC,eAAW,QAAQ,KAAK,OAAO;AAC7B,UAAI,KAAK,kBAAkB,OAAW,YAAW,IAAI,KAAK,eAAe,SAAS;AAElF,UAAI,KAAK,SAAS,MAAO;AAEzB,YAAM,OAAO,wBAAwB,kBAAkB,KAAK,OAAO,GAAG,MAAM;AAC5E,UAAI,SAAS,KAAM;AAEnB,YAAM,QAAuB,EAAE,MAAM,WAAW,KAAK;AACrD,cAAQ,KAAK,KAAK;AAElB,iBAAW,SAAS,KAAK,SAAS,aAAa,GAAG;AAChD,cAAM,QAAQ,MAAM,CAAC;AACrB,cAAM,WAAW,QAAQ,IAAI,KAAK;AAClC,YAAI,SAAU,UAAS,KAAK,KAAK;AAAA,YAC5B,SAAQ,IAAI,OAAO,CAAC,KAAK,CAAC;AAAA,MACjC;AAAA,IACF;AAAA,EACF,CAAC;AAED,SAAO,EAAE,SAAS,SAAS,WAAW;AACxC;AAEA,IAAM,oBAAoB;AAC1B,IAAM,oBAAoB;AAE1B,SAAS,kBAAkB,UAAiE;AAC1F,QAAM,QAAQ;AAAA,IACZ,GAAG,SAAS,SAAS,YAAY;AAAA,IACjC,GAAG,SAAS,SAAS,YAAY;AAAA,IACjC,GAAG,SAAS,SAAS,YAAY;AAAA,EACnC,EAAE,IAAI,CAAC,UAAU,MAAM,CAAC,EAAE,KAAK,CAAC;AAEhC,QAAM,aAAa,IAAI;AAAA,IACrB,MAAM,OAAO,CAAC,SAAS,kBAAkB,KAAK,IAAI,KAAK,kBAAkB,KAAK,IAAI,CAAC;AAAA,EACrF;AAEA,MAAI,WAAW,SAAS,EAAG,QAAO;AAClC,MAAI,WAAW,OAAO,EAAG,QAAO;AAChC,SAAO,EAAE,YAAY,CAAC,GAAG,UAAU,EAAE,CAAC,EAAE;AAC1C;AAEA,SAAS,iBAAiB,MAAwB;AAChD,SAAO,KAAK,MAAM,QAAQ,EAAE,OAAO,CAAC,aAAa,iBAAiB,KAAK,CAAC,YAAY,QAAQ,KAAK,QAAQ,CAAC,CAAC;AAC7G;AAEO,SAAS,kBAAkB,OAKV;AACtB,QAAM,OAAO,GAAG,MAAM,KAAK;AAAA,EAAK,MAAM,KAAK,MAAM,GAAG,GAAG,CAAC;AAExD,QAAM,YAAY,iBAAiB,IAAI;AACvC,MAAI,UAAU,WAAW,EAAG,QAAO,EAAE,QAAQ,WAAW,QAAQ,qBAAqB;AAErF,MAAI;AACJ,aAAW,YAAY,WAAW;AAChC,UAAM,YAAY,kBAAkB,QAAQ;AAC5C,QAAI,cAAc,YAAa,QAAO,EAAE,QAAQ,WAAW,QAAQ,uBAAuB;AAC1F,QAAI,cAAc,QAAQ;AACxB,mBAAa,UAAU;AACvB;AAAA,IACF;AAAA,EACF;AACA,MAAI,CAAC,WAAY,QAAO,EAAE,QAAQ,WAAW,QAAQ,gBAAgB;AAErE,QAAM,OAAO,WAAW,MAAM,GAAG,EAAE,CAAC;AACpC,MAAI,WAAW,SAAS,sBAAuB,QAAO,EAAE,QAAQ,WAAW,QAAQ,aAAa;AAChG,MAAI,oBAAoB,IAAI,WAAW,YAAY,CAAC,KAAK,oBAAoB,IAAI,KAAK,YAAY,CAAC,GAAG;AACpG,WAAO,EAAE,QAAQ,WAAW,QAAQ,aAAa;AAAA,EACnD;AAEA,QAAM,cAAc,WAAW,SAAS,GAAG,IACvC,MAAM,MAAM,QAAQ,OAAO,CAAC,UAAU,MAAM,KAAK,QAAQ,aAAa,GAAG,EAAE,SAAS,UAAU,CAAC,IAC9F,MAAM,MAAM,QAAQ,IAAI,UAAU,KAAK,CAAC;AAE7C,MAAI,YAAY,WAAW,EAAG,QAAO,EAAE,QAAQ,WAAW,QAAQ,cAAc;AAEhF,QAAM,aAAa,MAAM,eAAe,SAAY,MAAM,MAAM,WAAW,IAAI,MAAM,UAAU,IAAI;AACnG,QAAM,SAAS,YAAY,KAAK,CAAC,UAAU;AACzC,QAAI,eAAe,UAAa,MAAM,cAAc,WAAY,QAAO;AACvE,QAAI,MAAM,eAAe,UAAa,MAAM,KAAK,kBAAkB,OAAW,QAAO;AACrF,WAAO,KAAK,IAAI,MAAM,KAAK,gBAAgB,MAAM,UAAU,KAAK;AAAA,EAClE,CAAC;AAED,MAAI,CAAC,OAAQ,QAAO,EAAE,QAAQ,WAAW,QAAQ,gBAAgB;AACjE,SAAO,EAAE,QAAQ,WAAW,YAAY,MAAM,OAAO,KAAK;AAC5D;","names":[]}