@heyramzi/lint 0.0.0-stage → 1.32.2

package/data/invisibles.js

@@ -0,0 +1,218 @@
+/**
+ * The invisible-character set, and the one home for it.
+ */
+
+/*
+ * These are the characters a language model drags into its output without anybody seeing them: zero-width spaces, no-break spaces, soft hyphens, bidi controls, variation selectors, tag characters, private-use codepoints.
+ */
+
+/*
+ * They survive a copy and paste into a Reddit textarea, a LinkedIn box or a CMS field, and they survive every rewrite, because they are not words.
+ */
+
+/*
+ * They are the one AI tell a regex catches with certainty.
+ */
+
+/*
+ * WHY here and not beside the skill that used to own it: the set was vendored as 835 lines of Python under `humanizer/scripts/unicode-hygiene/`,
+ */
+
+/*
+ * where no publishing code could call it, so nothing on any publish path ever ran it. `slop-words.js` is the sibling file and the precedent: one home, every consumer imports.
+ */
+
+/*
+ * See `slop.js` for the functions that use this.
+ */
+
+/*
+ * This is a check on our own copy before we publish it. Nothing here defeats a provenance system and nothing here proves human authorship. Say neither.
+ */
+
+/*
+ * Character set originates in guillaumemeyer/watermarks-remover, MIT, layer A of `clean-user-facing-text`, and covers all of it: zero-width, bidi, format controls, tag characters, exotic spaces,
+ */
+
+/*
+ * reserved ignorables, noncharacters, private use, variation selectors and the script-specific carriers. Ported to JS 31 Aug 2026 and completed 31 Aug 2026.
+ */
+
+/*
+ * Two upstream halves are deliberately not here. The media half (C2PA, EXIF, SynthID) has nothing to act on: we publish text.
+ */
+
+/*
+ * And layer B paraphrases to defeat statistical token-sampling watermarks, which is the opposite of what this is for.
+ */
+
+/** Format and invisible controls. Removed outright. */
+export const STRIP_CODEPOINTS = new Set([
+  0x00ad, // soft hyphen
+  0x034f, // combining grapheme joiner
+  0x061c, // Arabic letter mark
+  0x115f, // Hangul choseong filler
+  0x1160, // Hangul jungseong filler
+  0x17b4, // Khmer vowel inherent AQ
+  0x17b5, // Khmer vowel inherent AA
+  0x180b, // Mongolian free variation selector 1
+  0x180c,
+  0x180d,
+  0x180e, // Mongolian vowel separator
+  0x180f, // Mongolian free variation selector 4
+  0x200b, // zero width space
+  0x200c, // zero width non-joiner
+  0x200d, // zero width joiner
+  0x200e, // left-to-right mark
+  0x200f, // right-to-left mark
+  0x202a, // LRE
+  0x202b, // RLE
+  0x202c, // PDF
+  0x202d, // LRO
+  0x202e, // RLO
+  0x2060, // word joiner
+  0x2061, // function application
+  0x2062, // invisible times
+  0x2063, // invisible separator
+  0x2064, // invisible plus
+  0x2065, // unassigned, Default_Ignorable
+  0x2066, // LRI
+  0x2067, // RLI
+  0x2068, // FSI
+  0x2069, // PDI
+  0x206a, // inhibit symmetric swapping
+  0x206b,
+  0x206c,
+  0x206d,
+  0x206e,
+  0x206f,
+  0x3164, // Hangul filler, renders blank
+  0xfeff, // BOM / zero width no-break space
+  0xffa0, // halfwidth Hangul filler, renders blank
+  0xfff9, // interlinear annotation anchor
+  0xfffa,
+  0xfffb,
+]);
+
+/** Spaces that look like U+0020 and are not. Normalised to a plain space. */
+export const SPACE_HOMOGLYPHS = new Map([
+  [0x00a0, " "], // no-break space
+  [0x1680, " "], // Ogham space mark
+  [0x2000, " "], // en quad
+  [0x2001, " "], // em quad
+  [0x2002, " "], // en space
+  [0x2003, " "], // em space
+  [0x2004, " "], // three-per-em space
+  [0x2005, " "], // four-per-em space
+  [0x2006, " "], // six-per-em space
+  [0x2007, " "], // figure space
+  [0x2008, " "], // punctuation space
+  [0x2009, " "], // thin space
+  [0x200a, " "], // hair space
+  [0x202f, " "], // narrow no-break space
+  [0x205f, " "], // medium mathematical space
+  [0x3000, " "], // ideographic space
+]);
+
+/** U+2028 and U+2029. A paste target reads them as a line break or not at all. */
+export const SEPARATORS = new Map([
+  [0x2028, "\n"],
+  [0x2029, "\n\n"],
+]);
+
+/**
+ * Zero-width joiner and the two emoji variation selectors.
+ */
+
+/*
+ * Free-floating they are invisible carriers.
+ */
+
+/*
+ * After an emoji base they are part of the visible sequence (a family, a flag, a heart on fire) and stripping them changes what the reader sees.
+ */
+
+/*
+ * `stripInvisibles` keeps them in that position and removes them everywhere else.
+ */
+export const EMOJI_GLUE = new Set([0x200d, 0xfe0e, 0xfe0f]);
+
+const isPrivateUse = (cp) =>
+  (cp >= 0xe000 && cp <= 0xf8ff) ||
+  (cp >= 0xf0000 && cp <= 0xffffd) ||
+  (cp >= 0x100000 && cp <= 0x10fffd);
+
+/** U+FDD0..U+FDEF plus the two codepoints at the end of every plane. */
+const isNoncharacter = (cp) => (cp >= 0xfdd0 && cp <= 0xfdef) || (cp & 0xfffe) === 0xfffe;
+
+/** Variation selectors: VS1..VS16 in the BMP, VS17..VS256 in plane 14. */
+const isVariationSelector = (cp) =>
+  (cp >= 0xfe00 && cp <= 0xfe0f) || (cp >= 0xe0100 && cp <= 0xe01ef);
+
+/** Tag characters, U+E0001 and U+E0020..U+E007F. A known stego carrier. */
+const isTagChar = (cp) => cp >= 0xe0000 && cp <= 0xe007f;
+
+/** U+FFF0..U+FFF8: reserved, Default_Ignorable, and so invisible in every font. */
+const isReservedIgnorable = (cp) => cp >= 0xfff0 && cp <= 0xfff8;
+
+/**
+ * Format controls belonging to one script, used as carriers in text of another.
+ */
+
+/*
+ * Egyptian hieroglyph quadrat controls, Duployan shorthand overlap controls and the musical beam and phrase controls all render as nothing in Latin text,
+ */
+
+/*
+ * and a model dragging one into a marketing paragraph is a carrier and nothing else.
+ */
+
+/*
+ * WHY it is unconditional here when upstream keeps them beside their own script: this gate runs on our own copy, which is Latin script.
+ */
+
+/*
+ * A hieroglyph document would need the adjacency test; nothing here writes one. Say so before removing this line rather than discovering it on a corpus that does.
+ */
+const isScriptCarrier = (cp) =>
+  (cp >= 0x13430 && cp <= 0x1343f) ||
+  (cp >= 0x1bca0 && cp <= 0x1bca3) ||
+  (cp >= 0x1d173 && cp <= 0x1d17a);
+
+/** True when the codepoint carries no meaning a reader can see. */
+export function isInvisible(cp) {
+  return (
+    STRIP_CODEPOINTS.has(cp) ||
+    isVariationSelector(cp) ||
+    isTagChar(cp) ||
+    isNoncharacter(cp) ||
+    isPrivateUse(cp) ||
+    isReservedIgnorable(cp) ||
+    isScriptCarrier(cp) ||
+    (cp >= 0xe0080 && cp <= 0xe00ff)
+  );
+}
+
+/** The label a finding reports, so a fix does not need a codepoint table. */
+export function invisibleKind(cp) {
+  if (SPACE_HOMOGLYPHS.has(cp)) return "fake space";
+  if (SEPARATORS.has(cp)) return "line separator";
+  if (isTagChar(cp)) return "tag character";
+  if (isVariationSelector(cp) || (cp >= 0x180b && cp <= 0x180f)) return "variation selector";
+  if (
+    cp === 0x061c ||
+    (cp >= 0x200e && cp <= 0x200f) ||
+    (cp >= 0x202a && cp <= 0x202e) ||
+    (cp >= 0x2066 && cp <= 0x2069)
+  )
+    return "bidi control";
+  if (cp === 0x200b || cp === 0x200c || cp === 0x200d || cp === 0x2060 || cp === 0xfeff)
+    return "zero-width";
+  if (isPrivateUse(cp)) return "private use";
+  if (isNoncharacter(cp) || isReservedIgnorable(cp)) return "noncharacter";
+  if (isScriptCarrier(cp)) return "script carrier";
+  return "invisible control";
+}
+
+/** `U+200B` for a log line or a finding. */
+export const hex = (cp) => `U+${cp.toString(16).toUpperCase().padStart(4, "0")}`;

package/data/jev-bench.js

@@ -0,0 +1,115 @@
+// Held-out lines for the Jev shapes: `shape` is the one it should fail, null passes all.
+// Never copy a line from the draft that exposed a shape: scripts/jev-bench.mjs, TECHLOG.md.
+
+export const SENTENCES = [
+  { shape: "inflated", text: "This payroll update is a game changer for small teams." },
+  { shape: "inflated", text: "Our onboarding flow delivers a seamless, delightful experience." },
+  { shape: "inflated", text: "Great kitchens run on great habits and a passion for quality." },
+  { shape: "inflated", text: "The results speak for themselves and the team is thrilled." },
+  { shape: "aphorism", text: "A budget only protects the money you never planned to spend." },
+  { shape: "aphorism", text: "A late invoice reaches every project that shares the account." },
+  { shape: "aphorism", text: "Hire slow and the team will thank you for it." },
+  { shape: "aphorism", text: "A warm-up set earns the heavy set its place." },
+  { shape: "vague", text: "Here's the one hiring mistake that costs founders the most." },
+  { shape: "vague", text: "The Friday reason your invoices go unpaid." },
+  { shape: "vague", text: "There's a simple trick to keeping sauces from splitting." },
+  { shape: "vague", text: "Let me walk you through what changed this quarter." },
+  {
+    shape: "filler",
+    text: "It's worth noting that, in many cases, the gym is generally quieter at noon.",
+  },
+  {
+    shape: "filler",
+    text: "Great question, I'd be happy to help you figure out the payroll dates.",
+  },
+  { shape: "filler", text: "Some experts say that you should probably review contracts yearly." },
+  {
+    shape: "filler",
+    text: "At the end of the day, it's really about basically paying people on time.",
+  },
+  {
+    shape: "filler",
+    text: "In order to renew your passport, you will need to bring along two photos.",
+  },
+  { shape: "filler", text: "The landlord is able to raise the rent once each and every year." },
+  {
+    shape: "filler",
+    text: "Due to the fact that the oven runs hot, reduce the temperature down by 10 degrees.",
+  },
+  {
+    shape: "filler",
+    text: "We went ahead and moved the team meeting to Thursday afternoon at 3pm in the afternoon.",
+  },
+  { shape: "contrast", text: "It's not a hiring problem, it's a pricing problem." },
+  { shape: "contrast", text: "You can either chase every invoice or you can get paid." },
+  { shape: "contrast", text: "From solo bakers to global chains, everyone needs a recipe cost." },
+  { shape: "contrast", text: "The menu is short, and by short I mean it has very few dishes." },
+  { shape: "pitch", text: "Close the books, and payroll is already done." },
+  { shape: "pitch", text: "Book your table and dinner is basically sorted." },
+  { shape: "pitch", text: "Upload the invoice and your accounting is already handled." },
+  { shape: "pitch", text: "Sit back, and your invoices are already sent." },
+  { shape: null, text: "Press stop and the app saves the video to Photos." },
+  { shape: null, text: "Send the invoice, then mark it paid when the money arrives." },
+  { shape: null, text: "Close the books on the last day of the month, then send payroll." },
+  { shape: null, text: "The oven takes 12 minutes to reach 200 degrees." },
+  { shape: "personified", text: "The spreadsheet knows exactly who is behind on rent." },
+  { shape: "personified", text: "This template gives you your Sunday evenings back." },
+  { shape: "personified", text: "Cash flow is the muscle every agency forgets to train." },
+  { shape: "personified", text: "Pricing is the lever that moves the whole business." },
+  { shape: null, text: "Open Payroll, then Settings, and set the pay date to the 25th." },
+  { shape: null, text: "Invoices sent on a Monday were paid 6 days sooner than Friday ones." },
+  { shape: null, text: "Salt the pasta water until it tastes like the sea." },
+  { shape: null, text: "Book the interview for 30 minutes and send the brief the day before." },
+  { shape: null, text: "Add a late fee of 2% to any invoice unpaid after 30 days." },
+  { shape: null, text: "Rest 90 seconds between heavy sets, then log the weight." },
+  { shape: null, text: "The contract renews on 1 March unless you cancel in writing." },
+  { shape: null, text: "Ask the candidate to walk you through the last project they shipped." },
+  { shape: null, text: "Watch me set the pay date in Payroll" },
+  { shape: null, text: "Bring two photos to renew your passport." },
+  { shape: null, text: "The landlord can raise the rent once a year." },
+  { shape: null, text: "The oven runs hot, so set it 10 degrees lower." },
+  { shape: null, text: "The team meeting moved to Thursday at 3pm." },
+  {
+    shape: "stilted",
+    text: "Diners find their allergens in their own column on the menu, with the codes from the kitchen sheet.",
+  },
+  {
+    shape: "stilted",
+    text: "Visitors meet their badge at reception, with the photo from the portal.",
+  },
+  { shape: "stilted", text: "Staff meet no clock-in button on the old tablets." },
+  {
+    shape: "stilted",
+    text: "Patients find their results in their own section of the portal, with the ranges from the lab doc.",
+  },
+  { shape: null, text: "Thanks, that clears up the lease question." },
+  { shape: null, text: "The menu shows allergens in a separate column." },
+  {
+    shape: null,
+    text: "Visitors pick up their badge at reception. It has the photo from the portal.",
+  },
+  { shape: null, text: "Once a member reports a locker lost, it's never given out again." },
+  { shape: null, text: "The old tablets don't have a clock-in button." },
+  { shape: null, text: "Does Friday at 10am still work for you and your accountant?" },
+  { shape: null, text: "Thanks for sending the floor plan so fast." },
+  { shape: null, text: "We'd love to have you at the tasting next week." },
+];
+
+export const PARAGRAPHS = [
+  {
+    shape: "rhythm",
+    text: "Invoices matter. Deadlines matter. Clients matter. That's why the system matters. And that's why we built it.",
+  },
+  {
+    shape: "rhythm",
+    text: "We cut costs. We cut delays. We cut the noise. The result is clarity. The result is growth. The result is freedom.",
+  },
+  {
+    shape: null,
+    text: "Send invoices on Monday morning. When we moved ours from Friday, the average wait dropped from 19 days to 13. The one client who still paid late had a 60-day term in the contract, so we changed the term at renewal.",
+  },
+  {
+    shape: null,
+    text: "Rest 90 seconds between sets. Log the weight before you rack the bar, because you won't remember it after the third set. If the last rep slows down, keep the same weight next week.",
+  },
+];

package/data/jev-code-bench.js

@@ -0,0 +1,313 @@
+// Cases for the Jev code rules: `rule` is the one it should fire, null fires none.
+// Tune questions on TRAIN only; HELDOUT is the score that counts (scripts/jev-code-bench.mjs).
+
+export const TRAIN = [
+  {
+    rule: "cast",
+    file: "src/lib/orders.ts",
+    code: `export function total(res: unknown) {\n  const order = res as any;\n  return order.items.reduce((s: number, i: any) => s + i.price, 0);\n}`,
+  },
+  {
+    rule: "cast",
+    file: "src/routes/+page.server.ts",
+    code: `export async function load({ fetch }) {\n  const body = await (await fetch("/api/me")).json();\n  // @ts-ignore\n  return { name: body.profile.name as string };\n}`,
+  },
+  {
+    rule: "compat",
+    file: "src/lib/billing.ts",
+    code: `export function chargeCustomer(id: string, cents: number) {\n  return stripe.charges.create({ customer: id, amount: cents });\n}\n\n/** @deprecated use chargeCustomer */\nexport const charge = chargeCustomer;`,
+  },
+  {
+    rule: "compat",
+    file: "src/lib/user.ts",
+    code: `export function displayName(u: User) {\n  const first = u.firstName ?? u.first_name;\n  const last = u.lastName ?? u.last_name;\n  return \`\${first} \${last}\`;\n}`,
+  },
+  {
+    rule: "swallowed",
+    file: "src/lib/sync.ts",
+    code: `export async function syncInvoices() {\n  try {\n    await pushToXero(await loadInvoices());\n  } catch (err) {\n    console.log(err);\n  }\n}`,
+  },
+  {
+    rule: "swallowed",
+    file: "Sources/Store.swift",
+    code: `func save(_ note: Note) {\n    do {\n        try context.save()\n    } catch {\n    }\n}`,
+  },
+  {
+    rule: "impossible",
+    file: "src/lib/cart.ts",
+    code: `export function newCart() {\n  const items: Item[] = [];\n  if (!items) throw new Error("items missing");\n  return { items, createdAt: Date.now() };\n}`,
+  },
+  {
+    rule: "impossible",
+    file: "src/lib/math.ts",
+    code: `export function double(n: number) {\n  try {\n    return n * 2;\n  } catch {\n    return 0;\n  }\n}`,
+  },
+  {
+    rule: "wrapper",
+    file: "src/lib/api.ts",
+    code: `export function getProject(id: string) {\n  return fetchProject(id);\n}`,
+  },
+  {
+    rule: "wrapper",
+    file: "src/lib/log.ts",
+    code: `export class Logger {\n  info(msg: string) {\n    console.info(msg);\n  }\n}`,
+  },
+  {
+    rule: "speculative",
+    file: "src/lib/slug.ts",
+    code: `type SlugOptions = { separator?: string; strategy?: "default" };\n\nexport function slugify(text: string, options: SlugOptions = {}) {\n  return text.toLowerCase().trim().replace(/\\s+/g, "-");\n}`,
+  },
+  {
+    rule: "speculative",
+    file: "src/lib/greet.ts",
+    code: `export function greet<T extends string = string>(name: T, hooks: { before?: () => void } = {}) {\n  return \`Hello, \${name}\`;\n}`,
+  },
+  {
+    rule: "naming",
+    file: "src/lib/report.ts",
+    code: `export async function handleStuff(x: string) {\n  const data = await db.query(x);\n  const result = data.rows.map((tmp) => tmp.v);\n  return result;\n}`,
+  },
+  {
+    rule: "naming",
+    file: "src/lib/utils.ts",
+    code: `export const helper = (a: Order[], b: number) => a.filter((c) => c.total > b);`,
+  },
+  {
+    rule: "nesting",
+    file: "src/lib/access.ts",
+    code: `export function canEdit(user, doc) {\n  if (user) {\n    if (user.active) {\n      if (doc.ownerId === user.id) {\n        return true;\n      }\n    }\n  }\n  return false;\n}`,
+  },
+  {
+    rule: "nesting",
+    file: "Sources/Upload.swift",
+    code: `func upload(_ file: URL?) {\n    if let file {\n        if let data = try? Data(contentsOf: file) {\n            if data.count > 0 {\n                client.send(data)\n            }\n        }\n    }\n}`,
+  },
+  {
+    rule: "narration",
+    file: "src/lib/price.ts",
+    code: `// Multiply the price by the quantity\nconst subtotal = price * qty;\n// Add the tax to the subtotal\nconst total = subtotal + tax;`,
+  },
+  {
+    rule: "narration",
+    file: "src/lib/queue.ts",
+    code: `// Changed from setTimeout to setInterval for the new flow\nconst timer = setInterval(drain, 1000);`,
+  },
+  {
+    rule: "leftover",
+    file: "src/lib/checkout.ts",
+    code: `export function checkout(cart: Cart) {\n  console.log("cart here", cart);\n  // const old = legacyCheckout(cart);\n  // return old;\n  return submit(cart);\n}`,
+  },
+  {
+    rule: "leftover",
+    file: "src/lib/refund.ts",
+    code: `export function refund(orderId: string) {\n  // TODO: implement\n  return null;\n}`,
+  },
+  {
+    rule: "workaround",
+    file: "src/routes/api/route.ts",
+    code: `// The route keeps its old name until the rename of the op lands.\nexport const POST = handleOverlay;`,
+  },
+  {
+    rule: "workaround",
+    file: "src/lib/pricing.ts",
+    code: `export function checkout(plan: Plan) {\n  // Quick fix: redirect to signup until auth is wired in\n  return redirect(303, "/signup");\n}`,
+  },
+  {
+    rule: "fallback",
+    file: "src/lib/posts.ts",
+    code: `export function rows(data: Feed) {\n  return data.posts ?? data.items ?? data.results ?? [];\n}`,
+  },
+  {
+    rule: null,
+    file: "src/lib/ocoya.ts",
+    code: `// Named in the 1 Sep changelog, missing from the spec, and answering 404 since 14 Oct.\nexport const ANALYTICS = "GET /analytics/export";`,
+  },
+  {
+    rule: "fallback",
+    file: "src/lib/env.ts",
+    code: `export const apiKey = process.env.STRIPE_KEY ?? "";\nexport const host = process.env.API_HOST || "http://localhost:3000";`,
+  },
+  {
+    rule: "duplicate",
+    file: "src/lib/format.ts",
+    code: `export function formatStart(d: Date) {\n  const y = d.getFullYear();\n  const m = String(d.getMonth() + 1).padStart(2, "0");\n  return \`\${y}-\${m}\`;\n}\nexport function formatEnd(d: Date) {\n  const y = d.getFullYear();\n  const m = String(d.getMonth() + 1).padStart(2, "0");\n  return \`\${y}-\${m}\`;\n}`,
+  },
+  {
+    rule: "duplicate",
+    file: "src/lib/env.ts",
+    code: `const apiUrl = process.env.API_URL;\nif (!apiUrl) throw new Error("API_URL missing");\nconst dbUrl = process.env.DB_URL;\nif (!dbUrl) throw new Error("DB_URL missing");\nconst cdnUrl = process.env.CDN_URL;\nif (!cdnUrl) throw new Error("CDN_URL missing");`,
+  },
+  {
+    rule: "effectSync",
+    file: "src/lib/components/Cart.svelte",
+    code: `let items = $state([]);\nlet total = $state(0);\n\n$effect(() => {\n  total = items.reduce((s, i) => s + i.price, 0);\n});`,
+  },
+  {
+    rule: "effectSync",
+    file: "src/routes/+page.svelte",
+    code: `let first = $state("");\nlet last = $state("");\nlet full = $state("");\n$effect(() => {\n  full = \`\${first} \${last}\`;\n});`,
+  },
+  {
+    rule: "restates",
+    file: "src/lib/tax.test.ts",
+    code: `test("tax", () => {\n  const price = 100;\n  expect(addTax(price)).toBe(price * TAX_RATE + price);\n});`,
+  },
+  {
+    rule: "restates",
+    file: "src/lib/__tests__/mailer.test.ts",
+    code: `test("sends", async () => {\n  const send = vi.fn();\n  await notify({ send }, "a@b.c");\n  expect(send).toHaveBeenCalled();\n});`,
+  },
+  {
+    rule: null,
+    file: "src/lib/invoice.ts",
+    code: `export function dueDate(issued: Date, termsDays: number): Date {\n  const due = new Date(issued);\n  due.setDate(due.getDate() + termsDays);\n  return due;\n}`,
+  },
+  {
+    rule: null,
+    file: "src/routes/api/lead/+server.ts",
+    code: `export async function POST({ request }) {\n  const parsed = Lead.safeParse(await request.json());\n  if (!parsed.success) return json({ error: parsed.error.flatten() }, { status: 400 });\n  await leads.insert(parsed.data);\n  return json({ ok: true });\n}`,
+  },
+  {
+    rule: null,
+    file: "src/lib/components/Badge.svelte",
+    code: `let { label, tone = "neutral" }: { label: string; tone?: "neutral" | "warn" } = $props();\nconst classes = $derived(tone === "warn" ? "bg-amber-100" : "bg-zinc-100");`,
+  },
+  {
+    rule: null,
+    file: "Sources/Timer.swift",
+    code: `@Observable final class Stopwatch {\n    private(set) var elapsed: Duration = .zero\n    func tick(by step: Duration) { elapsed += step }\n}`,
+  },
+  {
+    rule: null,
+    file: "src/lib/retry.ts",
+    code: `// Plunk answers 429 for about a minute after a burst, so back off before retrying.\nexport async function withRetry<T>(fn: () => Promise<T>, tries = 3): Promise<T> {\n  for (let i = 1; ; i++) {\n    try { return await fn(); }\n    catch (err) { if (i >= tries) throw err; await sleep(2 ** i * 1000); }\n  }\n}`,
+  },
+  {
+    rule: null,
+    file: "e2e/checkout.spec.ts",
+    code: `test("a paid order shows its receipt", async ({ page }) => {\n  await page.goto("/cart");\n  await page.getByRole("button", { name: "Pay" }).click();\n  await expect(page.getByText("Receipt #")).toBeVisible();\n});`,
+  },
+  {
+    rule: null,
+    file: "scripts/build.sh",
+    code: `set -euo pipefail\nfor pkg in packages/*; do\n  (cd "$pkg" && pnpm build)\ndone`,
+  },
+  {
+    rule: null,
+    file: "src/lib/cn.ts",
+    code: `const STATUS_LABEL = { draft: "Draft", sent: "Sent", paid: "Paid" } as const;\nexport const statusLabel = (s: keyof typeof STATUS_LABEL) => STATUS_LABEL[s];`,
+  },
+];
+
+export const HELDOUT = [
+  {
+    rule: "cast",
+    file: "src/lib/webhook.ts",
+    code: `export function handle(evt: Stripe.Event) {\n  const session = evt.data.object as unknown as CheckoutSession;\n  return session.customer_email!.toLowerCase();\n}`,
+  },
+  {
+    rule: "compat",
+    file: "src/lib/index.ts",
+    code: `export { renderCard } from "./card";\n// kept so old imports keep working\nexport { renderCard as drawCard } from "./card";`,
+  },
+  {
+    rule: "swallowed",
+    file: "src/lib/cache.ts",
+    code: `export async function readCache(key: string) {\n  try {\n    return JSON.parse(await kv.get(key));\n  } catch {\n    return {};\n  }\n}`,
+  },
+  {
+    rule: "impossible",
+    file: "src/lib/ids.ts",
+    code: `export function makeId() {\n  const id = crypto.randomUUID();\n  if (typeof id !== "string") return "";\n  return id;\n}`,
+  },
+  {
+    rule: "wrapper",
+    file: "src/lib/db.ts",
+    code: `export const Tasks = {\n  list(projectId: string) {\n    return repo.listTasks(projectId);\n  },\n};`,
+  },
+  {
+    rule: "speculative",
+    file: "src/lib/export.ts",
+    code: `export function exportCsv(rows: Row[], format: "csv" = "csv", adapter?: ExportAdapter) {\n  return rows.map((r) => Object.values(r).join(",")).join("\\n");\n}`,
+  },
+  {
+    rule: "naming",
+    file: "src/lib/stats.ts",
+    code: `export function calc(arr: Visit[]) {\n  const res = arr.filter((v) => v.ok);\n  const info = res.length / arr.length;\n  return info;\n}`,
+  },
+  {
+    rule: "nesting",
+    file: "src/lib/ship.ts",
+    code: `function ship(order) {\n  if (order) {\n    if (order.paid) {\n      if (order.address) {\n        if (!order.shipped) {\n          carrier.book(order);\n        }\n      }\n    }\n  }\n}`,
+  },
+  {
+    rule: "narration",
+    file: "src/lib/auth.ts",
+    code: `// Get the session\nconst session = await getSession();\n// Return the user from the session\nreturn session.user;`,
+  },
+  {
+    rule: "leftover",
+    file: "Sources/Feed.swift",
+    code: `func refresh() async {\n    print("DEBUG items", items.count)\n    // items = try await legacyFetch()\n    items = try await api.feed()\n}`,
+  },
+  {
+    rule: "workaround",
+    file: "src/lib/stream.ts",
+    code: `/** Old status name some jobs still send; treated as "running" until they move. */\nexport type JobStatus = "running" | "done" | "generating";`,
+  },
+  {
+    rule: "fallback",
+    file: "src/lib/client.ts",
+    code: `export function client() {\n  const token = env.TOKEN ?? env.API_TOKEN ?? "dev-token";\n  return new Api(token);\n}`,
+  },
+  {
+    rule: null,
+    file: "src/lib/list.ts",
+    code: `export function page(rows: Row[], size = 25) {\n  return rows.slice(0, size);\n}`,
+  },
+  {
+    rule: "duplicate",
+    file: "src/lib/notify.ts",
+    code: `if (user.email) {\n  await mail.send({ to: user.email, subject: "Invoice", body: render(invoice) });\n  await log.write("mail", user.id);\n}\nif (user.billingEmail) {\n  await mail.send({ to: user.billingEmail, subject: "Invoice", body: render(invoice) });\n  await log.write("mail", user.id);\n}`,
+  },
+  {
+    rule: "effectSync",
+    file: "src/lib/components/Filter.svelte",
+    code: `let { rows, query } = $props();\nlet visible = $state([]);\n$effect(() => {\n  visible = rows.filter((r) => r.name.includes(query));\n});`,
+  },
+  {
+    rule: "restates",
+    file: "src/lib/pricing.spec.ts",
+    code: `it("discount", () => {\n  const base = 80;\n  expect(discounted(base)).toEqual(base - base * DISCOUNT);\n});`,
+  },
+  {
+    rule: null,
+    file: "src/lib/slugify.ts",
+    code: `export function slugify(title: string): string {\n  return title.normalize("NFKD").replace(/[^\\w\\s-]/g, "").trim().toLowerCase().replace(/\\s+/g, "-");\n}`,
+  },
+  {
+    rule: null,
+    file: "src/lib/components/Toggle.svelte",
+    code: `let { checked = $bindable(false), label }: { checked?: boolean; label: string } = $props();\n$effect(() => {\n  localStorage.setItem("toggle", String(checked));\n});`,
+  },
+  {
+    rule: null,
+    file: "src/routes/api/upload/+server.ts",
+    code: `export async function POST({ request, locals }) {\n  if (!locals.user) error(401, "Sign in first");\n  const form = await request.formData();\n  const file = form.get("file");\n  if (!(file instanceof File)) error(400, "No file");\n  return json(await storage.put(locals.user.id, file));\n}`,
+  },
+  {
+    rule: null,
+    file: "Sources/Parser.swift",
+    code: `func parse(_ line: String) throws -> Entry {\n    guard let match = line.wholeMatch(of: entryRegex) else { throw ParseError.malformed(line) }\n    return Entry(date: match.date, amount: match.amount)\n}`,
+  },
+  {
+    rule: null,
+    file: "e2e/signup.spec.ts",
+    code: `test("a new user lands on the dashboard", async ({ page }) => {\n  await page.goto("/signup");\n  await page.getByLabel("Email").fill("new@example.com");\n  await page.getByRole("button", { name: "Create account" }).click();\n  await expect(page).toHaveURL(/dashboard/);\n});`,
+  },
+  {
+    rule: null,
+    file: "src/lib/money.ts",
+    code: `// Cents, never floats: 0.1 + 0.2 rounds a Stripe total off by one.\nexport const toCents = (amount: string) => Math.round(Number(amount) * 100);`,
+  },
+];