@mirnoorata/codexa 0.2.0

package/dist/rules.js

@@ -0,0 +1,107 @@
+export const CODE_PATTERN_RULES = [
+    {
+        id: "shell-execution-boundary",
+        reason: "exec/spawn/subprocess call crosses a shell or process boundary",
+        score: 2.5,
+        pattern: /\b(execFileSync|execFile|spawn|spawnSync|execSync|subprocess\.(run|Popen|call|check_call|check_output))\s*\(/,
+        languages: ["typescript", "javascript", "python"]
+    },
+    {
+        id: "filesystem-write-boundary",
+        reason: "file write/remove/rename operation can change generated or source artifacts",
+        score: 2,
+        pattern: /\b(writeFile|appendFile|rename|rm|unlink|mkdir|open)\s*\(|\bfs\.(writeFile|appendFile|rename|rm|unlink|mkdir)\b/,
+        languages: ["typescript", "javascript", "python"]
+    },
+    {
+        id: "mcp-tool-surface",
+        reason: "MCP tool registration changes agent-visible behavior and annotations",
+        score: 2,
+        pattern: /\bregisterTool\s*\(/,
+        languages: ["typescript", "javascript"],
+        path: /(^|\/)mcp\.[cm]?[jt]s$/
+    },
+    {
+        id: "dangerous-html-sink",
+        reason: "raw HTML sink requires source and escaping review",
+        score: 2,
+        pattern: /\bdangerouslySetInnerHTML\b/,
+        languages: ["typescript", "javascript"]
+    },
+    {
+        id: "sql-execution-boundary",
+        reason: "SQL execution boundary requires parameterization and migration review",
+        score: 2,
+        pattern: /\.(execute|executemany|executescript|raw)\s*\(/,
+        languages: ["typescript", "javascript", "python"]
+    },
+    {
+        id: "fastapi-dependency-boundary",
+        reason: "FastAPI dependency injection or router registration can hide runtime wiring from direct calls",
+        score: 1.5,
+        pattern: /\b(APIRouter|FastAPI|Depends|include_router)\b/,
+        languages: ["python"]
+    },
+    {
+        id: "pydantic-model-boundary",
+        reason: "Pydantic model schema changes can affect API serialization and validation",
+        score: 1.5,
+        pattern: /\b(BaseModel|Field|model_validate|model_dump)\b/,
+        languages: ["python"]
+    },
+    {
+        id: "sqlalchemy-model-boundary",
+        reason: "SQLAlchemy model/session changes can affect persistence, migrations, and query behavior",
+        score: 1.5,
+        pattern: /\b(SQLAlchemy|declarative_base|relationship|mapped_column|Session|select)\b/,
+        languages: ["python"]
+    },
+    {
+        id: "celery-job-boundary",
+        reason: "Celery/RQ/task registration can affect background execution paths",
+        score: 1.5,
+        pattern: /\b(celery|Celery|shared_task|@task|@job|rq\.|enqueue)\b/,
+        languages: ["python"]
+    },
+    {
+        id: "queue-lifecycle-boundary",
+        reason: "Queue/run lifecycle changes must preserve polling, recovery, cancellation, and terminal-state semantics",
+        score: 2,
+        pattern: /\b(run_id|queue|polling|queued|running|completed|failed|cancelled|recover|terminal)\b/i,
+        languages: ["typescript", "javascript", "python"],
+        path: /(^|\/)(api|backend|server|service|src|web\/src|tests)\//
+    },
+    {
+        id: "generator-node-invariant",
+        reason: "Generator nodes should preserve shared template, run/lock, prompt-builder, and runtime identity behavior",
+        score: 2,
+        pattern: /\b(generator|runtime_identity|managed_output|prompt_builder|run_status|generator-node-template)\b/i,
+        languages: ["typescript", "javascript", "json"],
+        path: /(^|\/)(src|web\/src|packages?|manifests?)\//
+    },
+    {
+        id: "manifest-adapter-contract",
+        reason: "Manifest adapter keys must stay aligned with runtime adapter registration and tests",
+        score: 2,
+        pattern: /\b(type_id|adapter_key|inputs|outputs|managed_output|node_type)\b/i,
+        languages: ["json", "python", "typescript", "javascript"],
+        path: /(^|\/)(packages?|manifests?|adapters?|src|web\/src)\//
+    },
+    {
+        id: "frontend-polling-boundary",
+        reason: "Frontend polling changes can affect queue visibility, silent error surfacing, and run state hydration",
+        score: 1.8,
+        pattern: /\b(useRunPolling|pollInterval|setInterval|refetch|queue|runStatus|last_error|silent)\b/,
+        languages: ["typescript", "javascript"],
+        path: /(^|\/)web\/src\//
+    },
+    {
+        id: "release-service-boundary",
+        reason: "Release/service control changes can affect live symlinks, staged releases, service managers, or off-port verification",
+        score: 2,
+        pattern: /\b(release|promote|rollback|systemctl|app\.service|RUN_COORDINATOR_ENABLED|BACKGROUND_INGEST_ENABLED)\b/,
+        languages: ["typescript", "javascript", "python"],
+        path: /(^|\/)(scripts|api|backend|server|service|src|web\/src)\//
+    }
+];
+//# sourceMappingURL=rules.js.map

package/dist/rules.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"rules.js","sourceRoot":"","sources":["../src/rules.ts"],"names":[],"mappings":"AAWA,MAAM,CAAC,MAAM,kBAAkB,GAAsB;IACnD;QACE,EAAE,EAAE,0BAA0B;QAC9B,MAAM,EAAE,gEAAgE;QACxE,KAAK,EAAE,GAAG;QACV,OAAO,EAAE,8GAA8G;QACvH,SAAS,EAAE,CAAC,YAAY,EAAE,YAAY,EAAE,QAAQ,CAAC;KAClD;IACD;QACE,EAAE,EAAE,2BAA2B;QAC/B,MAAM,EAAE,6EAA6E;QACrF,KAAK,EAAE,CAAC;QACR,OAAO,EAAE,iHAAiH;QAC1H,SAAS,EAAE,CAAC,YAAY,EAAE,YAAY,EAAE,QAAQ,CAAC;KAClD;IACD;QACE,EAAE,EAAE,kBAAkB;QACtB,MAAM,EAAE,sEAAsE;QAC9E,KAAK,EAAE,CAAC;QACR,OAAO,EAAE,qBAAqB;QAC9B,SAAS,EAAE,CAAC,YAAY,EAAE,YAAY,CAAC;QACvC,IAAI,EAAE,wBAAwB;KAC/B;IACD;QACE,EAAE,EAAE,qBAAqB;QACzB,MAAM,EAAE,mDAAmD;QAC3D,KAAK,EAAE,CAAC;QACR,OAAO,EAAE,6BAA6B;QACtC,SAAS,EAAE,CAAC,YAAY,EAAE,YAAY,CAAC;KACxC;IACD;QACE,EAAE,EAAE,wBAAwB;QAC5B,MAAM,EAAE,uEAAuE;QAC/E,KAAK,EAAE,CAAC;QACR,OAAO,EAAE,gDAAgD;QACzD,SAAS,EAAE,CAAC,YAAY,EAAE,YAAY,EAAE,QAAQ,CAAC;KAClD;IACD;QACE,EAAE,EAAE,6BAA6B;QACjC,MAAM,EAAE,+FAA+F;QACvG,KAAK,EAAE,GAAG;QACV,OAAO,EAAE,gDAAgD;QACzD,SAAS,EAAE,CAAC,QAAQ,CAAC;KACtB;IACD;QACE,EAAE,EAAE,yBAAyB;QAC7B,MAAM,EAAE,2EAA2E;QACnF,KAAK,EAAE,GAAG;QACV,OAAO,EAAE,iDAAiD;QAC1D,SAAS,EAAE,CAAC,QAAQ,CAAC;KACtB;IACD;QACE,EAAE,EAAE,2BAA2B;QAC/B,MAAM,EAAE,yFAAyF;QACjG,KAAK,EAAE,GAAG;QACV,OAAO,EAAE,6EAA6E;QACtF,SAAS,EAAE,CAAC,QAAQ,CAAC;KACtB;IACD;QACE,EAAE,EAAE,qBAAqB;QACzB,MAAM,EAAE,mEAAmE;QAC3E,KAAK,EAAE,GAAG;QACV,OAAO,EAAE,yDAAyD;QAClE,SAAS,EAAE,CAAC,QAAQ,CAAC;KACtB;IACD;QACE,EAAE,EAAE,0BAA0B;QAC9B,MAAM,EAAE,yGAAyG;QACjH,KAAK,EAAE,CAAC;QACR,OAAO,EAAE,wFAAwF;QACjG,SAAS,EAAE,CAAC,YAAY,EAAE,YAAY,EAAE,QAAQ,CAAC;QACjD,IAAI,EAAE,yDAAyD;KAChE;IACD;QACE,EAAE,EAAE,0BAA0B;QAC9B,MAAM,EAAE,0GAA0G;QAClH,KAAK,EAAE,CAAC;QACR,OAAO,EAAE,oGAAoG;QAC7G,SAAS,EAAE,CAAC,YAAY,EAAE,YAAY,EAAE,MAAM,CAAC;QAC/C,IAAI,EAAE,6CAA6C;KACpD;IACD;QACE,EAAE,EAAE,2BAA2B;QAC/B,MAAM,EAAE,qFAAqF;QAC7F,KAAK,EAAE,CAAC;QACR,OAAO,EAAE,oEAAoE;QAC7E,SAAS,EAAE,CAAC,MAAM,EAAE,QAAQ,EAAE,YAAY,EAAE,YAAY,CAAC;QACzD,IAAI,EAAE,uDAAuD;KAC9D;IACD;QACE,EAAE,EAAE,2BAA2B;QAC/B,MAAM,EAAE,uGAAuG;QAC/G,KAAK,EAAE,GAAG;QACV,OAAO,EAAE,wFAAwF;QACjG,SAAS,EAAE,CAAC,YAAY,EAAE,YAAY,CAAC;QACvC,IAAI,EAAE,kBAAkB;KACzB;IACD;QACE,EAAE,EAAE,0BAA0B;QAC9B,MAAM,EAAE,uHAAuH;QAC/H,KAAK,EAAE,CAAC;QACR,OAAO,EAAE,yGAAyG;QAClH,SAAS,EAAE,CAAC,YAAY,EAAE,YAAY,EAAE,QAAQ,CAAC;QACjD,IAAI,EAAE,2DAA2D;KAClE;CACF,CAAC"}

package/dist/semantic/python.d.ts

@@ -0,0 +1,9 @@
+import type { CodexaIndex } from "../types.js";
+export interface PythonSemanticSourceFile {
+    path: string;
+    sourceText: string;
+    contentHash: string;
+}
+export declare function applyPythonSemanticAssist(index: CodexaIndex, options: {
+    files: PythonSemanticSourceFile[];
+}): CodexaIndex;