@neurcode-ai/cli 0.9.65 → 0.10.0

package/dist/structural-rules/python/PY003-broad-except-clause.js

@@ -1,10 +1,194 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.PY003BroadExceptClause = void 0;
+exports.stripCommentsAndStrings = stripCommentsAndStrings;
+exports.classifyExceptionFlow = classifyExceptionFlow;
 // Matches: except Exception: or except Exception as e:
 const BROAD_EXCEPT_RE = /^(\s*)except\s+Exception(\s+as\s+\w+)?\s*:/;
-// Logging/reporting call patterns
+// Logging/reporting call patterns — only checked AFTER stripping comments
 const LOGGING_RE = /\b(?:log|logger|logging|error|warn|warning|report|track|capture|sentry|bugsnag|rollbar|print)\s*[\.(]/i;
+/**
+ * Strip Python comment lines and string literal regions from source lines.
+ *
+ * Algorithm (deterministic state machine):
+ *   - Track whether we are inside a triple-quoted string (""" or ''')
+ *   - Track whether we are inside a single-quoted string (" or ')
+ *   - If a line starts with # (after stripping indent) → replace with empty string
+ *   - Content inside string regions is neutralized (replaced with spaces of same length)
+ *
+ * This is NOT a full Python tokenizer — it handles the common cases that enable
+ * bypass of governance checks while remaining O(n) and dependency-free.
+ */
+function stripCommentsAndStrings(lines) {
+    const result = [];
+    let inTripleDouble = false; // inside """..."""
+    let inTripleSingle = false; // inside '''...'''
+    for (const line of lines) {
+        const trimmed = line.trimStart();
+        // If we are inside a triple-quoted block, look for the closing delimiter
+        if (inTripleDouble) {
+            const closeIdx = line.indexOf('"""');
+            if (closeIdx !== -1) {
+                inTripleDouble = false;
+                // Neutralize up to and including the closing delimiter
+                result.push(' '.repeat(line.length));
+            }
+            else {
+                result.push(' '.repeat(line.length));
+            }
+            continue;
+        }
+        if (inTripleSingle) {
+            const closeIdx = line.indexOf("'''");
+            if (closeIdx !== -1) {
+                inTripleSingle = false;
+                result.push(' '.repeat(line.length));
+            }
+            else {
+                result.push(' '.repeat(line.length));
+            }
+            continue;
+        }
+        // Full-line comment — blank it entirely
+        if (trimmed.startsWith('#')) {
+            result.push('');
+            continue;
+        }
+        // Scan for string/comment delimiters character by character
+        let out = '';
+        let i = 0;
+        let inSingleQ = false;
+        let inDoubleQ = false;
+        while (i < line.length) {
+            const ch = line[i];
+            const remaining = line.slice(i);
+            if (!inSingleQ && !inDoubleQ) {
+                // Check for triple-quote opening
+                if (remaining.startsWith('"""')) {
+                    const rest = line.slice(i + 3);
+                    const closeInSameLine = rest.indexOf('"""');
+                    if (closeInSameLine !== -1) {
+                        // Triple-quote opens and closes on same line — neutralize it
+                        out += ' '.repeat(3 + closeInSameLine + 3);
+                        i += 3 + closeInSameLine + 3;
+                        continue;
+                    }
+                    else {
+                        inTripleDouble = true;
+                        // Neutralize rest of line
+                        out += ' '.repeat(line.length - i);
+                        break;
+                    }
+                }
+                if (remaining.startsWith("'''")) {
+                    const rest = line.slice(i + 3);
+                    const closeInSameLine = rest.indexOf("'''");
+                    if (closeInSameLine !== -1) {
+                        out += ' '.repeat(3 + closeInSameLine + 3);
+                        i += 3 + closeInSameLine + 3;
+                        continue;
+                    }
+                    else {
+                        inTripleSingle = true;
+                        out += ' '.repeat(line.length - i);
+                        break;
+                    }
+                }
+                // Start of single-line string
+                if (ch === '"') {
+                    inDoubleQ = true;
+                    out += ' ';
+                    i++;
+                    continue;
+                }
+                if (ch === "'") {
+                    inSingleQ = true;
+                    out += ' ';
+                    i++;
+                    continue;
+                }
+                // Inline comment
+                if (ch === '#') {
+                    // Rest of line is comment — stop
+                    break;
+                }
+                out += ch;
+            }
+            else if (inDoubleQ) {
+                if (ch === '\\') {
+                    out += '  ';
+                    i += 2;
+                    continue;
+                } // escape
+                if (ch === '"') {
+                    inDoubleQ = false;
+                }
+                out += ' ';
+            }
+            else if (inSingleQ) {
+                if (ch === '\\') {
+                    out += '  ';
+                    i += 2;
+                    continue;
+                }
+                if (ch === "'") {
+                    inSingleQ = false;
+                }
+                out += ' ';
+            }
+            i++;
+        }
+        result.push(out);
+    }
+    return result;
+}
+/**
+ * Classify the exception-handling flow of an except block body.
+ *
+ * Input: stripped lines (comments and strings already neutralized).
+ * Returns the strictest applicable classification.
+ */
+function classifyExceptionFlow(strippedBodyLines, exceptIndent) {
+    // Only consider lines that are within the except block's indentation scope
+    const blockLines = strippedBodyLines.filter(l => {
+        const t = l.trimStart();
+        if (t.length === 0)
+            return false;
+        const indent = l.length - t.length;
+        return indent > exceptIndent;
+    });
+    if (blockLines.length === 0)
+        return 'swallow';
+    const bodyText = blockLines.join('\n');
+    // Detect raise statements — only real Python raise keywords at statement level
+    // (not inside strings or comments, already stripped above)
+    const RAISE_STMT_RE = /^\s*raise\b/m;
+    const hasRaise = RAISE_STMT_RE.test(bodyText);
+    // Detect "raise X from e" or "raise NewException(" — transformed rethrow
+    const TRANSFORM_RAISE_RE = /^\s*raise\s+\w+\s*(?:\(|from)/m;
+    const hasTransformRaise = TRANSFORM_RAISE_RE.test(bodyText);
+    // Detect bare "raise" (re-raises current exception)
+    const BARE_RAISE_RE = /^\s*raise\s*$/m;
+    const hasBareRaise = BARE_RAISE_RE.test(bodyText);
+    // Detect conditional raise (raise inside if block at deeper indent)
+    const CONDITIONAL_RAISE_RE = /^\s+raise\b/m;
+    const hasConditionalRaise = !hasBareRaise && !hasTransformRaise && CONDITIONAL_RAISE_RE.test(bodyText);
+    const hasLogging = LOGGING_RE.test(bodyText);
+    if (hasBareRaise) {
+        // Clean re-raise — not a violation
+        return 'partial-rethrow'; // partial because could be log+reraise
+    }
+    if (hasTransformRaise)
+        return 'transformed-rethrow';
+    if (hasConditionalRaise)
+        return 'partial-rethrow';
+    if (!hasRaise && hasLogging)
+        return 'log-only';
+    if (!hasRaise && !hasLogging)
+        return 'swallow';
+    // raise present but not bare/transform/conditional — treat as partial
+    return 'partial-rethrow';
+}
 class PY003BroadExceptClause {
     id = 'PY003';
     name = 'Broad except clause swallowing errors';
@@ -22,40 +206,46 @@ class PY003BroadExceptClause {
                 if (!match)
                     continue;
                 const exceptIndent = match[1].length;
-                // Collect the except block body (lines more indented than the except statement)
-                const bodyLines = [];
+                // Collect the raw except block body lines (indented deeper than the except)
+                const rawBodyLines = [];
                 let j = i + 1;
                 while (j < lines.length) {
                     const bodyLine = lines[j];
                     const bodyTrimmed = bodyLine.trimStart();
                     // Empty line — continue collecting
                     if (bodyTrimmed.length === 0) {
+                        rawBodyLines.push(bodyLine);
                         j++;
                         continue;
                     }
-                    const bodyIndent = bodyLine.length - bodyLine.trimStart().length;
+                    const bodyIndent = bodyLine.length - bodyTrimmed.length;
                     // If indent is less than or equal to the except indent, block ended
                     if (bodyIndent <= exceptIndent)
                         break;
-                    bodyLines.push(bodyLine);
+                    rawBodyLines.push(bodyLine);
                     j++;
                 }
-                if (bodyLines.length === 0)
+                if (rawBodyLines.length === 0)
                     continue;
-                const bodyText = bodyLines.join('\n');
-                // Check for re-raise
-                const hasReraise = /^\s*raise\b/.test(bodyText) || /\braise\b/.test(bodyText);
-                if (hasReraise)
+                // ── AST-level analysis: strip comments and strings before checking ──
+                const strippedLines = stripCommentsAndStrings(rawBodyLines);
+                const flowClass = classifyExceptionFlow(strippedLines, exceptIndent);
+                // Only violations: swallow and log-only (log without re-raise)
+                // transformed-rethrow and partial-rethrow are handled by the engineer
+                if (flowClass === 'partial-rethrow' || flowClass === 'transformed-rethrow') {
                     continue;
-                // Check for logging
-                if (LOGGING_RE.test(bodyText))
+                }
+                // Bare re-raise check: if bare raise exists in RAW lines (before stripping)
+                // this is not a swallow — the stripCommentsAndStrings already handles
+                // comment stripping, so we just trust classifyExceptionFlow here.
+                if (flowClass !== 'swallow' && flowClass !== 'log-only')
                     continue;
-                // Skip if body only contains pass
-                const nonEmpty = bodyLines
+                const nonEmptyNonPass = strippedLines
                     .map(l => l.trim())
-                    .filter(l => l.length > 0 && l !== 'pass' && !l.startsWith('#'));
-                // If the body is just `pass` or empty meaningful statements, it's swallowing
-                // If it has actual work (return something, set variable), still flag it
+                    .filter(l => l.length > 0 && l !== 'pass');
+                const confidence = flowClass === 'swallow'
+                    ? (nonEmptyNonPass.length === 0 ? 0.97 : 0.88)
+                    : 0.82; // log-only
                 const evidence = line.slice(0, 120);
                 violations.push({
                     ruleId: this.id,
@@ -65,13 +255,14 @@ class PY003BroadExceptClause {
                     filePath,
                     line: i + 1,
                     column: exceptIndent + 1,
-                    evidence,
-                    operationalRisk: 'Catches ALL exceptions (including SystemExit, KeyboardInterrupt, MemoryError) without ' +
-                        'logging or re-raising. Silent failures make debugging impossible and hide operational issues.',
+                    evidence: `${evidence} [flow:${flowClass}]`,
+                    operationalRisk: `except Exception: block classified as '${flowClass}'. ` +
+                        'Catches ALL exceptions (including SystemExit, KeyboardInterrupt, MemoryError) without ' +
+                        're-raising. Silent failures make debugging impossible and hide operational issues.',
                     remediation: 'Either re-raise after handling: `except Exception as e: logger.error(e); raise` ' +
                         'or narrow the exception type. Avoid bare `except Exception` without at minimum logging.',
                     determinism: 'deterministic-structural',
-                    confidence: nonEmpty.length === 0 ? 0.95 : 0.85,
+                    confidence,
                     language: 'python',
                 });
             }

package/dist/structural-rules/python/PY003-broad-except-clause.js.map

@@ -1 +1 @@
-{"version":3,"file":"PY003-broad-except-clause.js","sourceRoot":"","sources":["../../../src/structural-rules/python/PY003-broad-except-clause.ts"],"names":[],"mappings":";;;AAEA,uDAAuD;AACvD,MAAM,eAAe,GAAG,4CAA4C,CAAC;AAErE,kCAAkC;AAClC,MAAM,UAAU,GAAG,wGAAwG,CAAC;AAE5H,MAAa,sBAAsB;IACjC,EAAE,GAAG,OAAO,CAAC;IACb,IAAI,GAAG,uCAAuC,CAAC;IAC/C,SAAS,GAAG,MAAM,CAAC;IACnB,QAAQ,GAAG,UAAmB,CAAC;IAC/B,SAAS,GAAmB,CAAC,QAAQ,CAAC,CAAC;IACvC,WAAW,GACT,iHAAiH,CAAC;IAEpH,KAAK,CAAC,QAAgB,EAAE,UAAkB;QACxC,IAAI,CAAC;YACH,MAAM,UAAU,GAA0B,EAAE,CAAC;YAC7C,MAAM,KAAK,GAAG,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YAErC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;gBACtC,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;gBACtB,MAAM,KAAK,GAAG,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBACzC,IAAI,CAAC,KAAK;oBAAE,SAAS;gBAErB,MAAM,YAAY,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;gBACrC,gFAAgF;gBAChF,MAAM,SAAS,GAAa,EAAE,CAAC;gBAC/B,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;gBACd,OAAO,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC;oBACxB,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;oBAC1B,MAAM,WAAW,GAAG,QAAQ,CAAC,SAAS,EAAE,CAAC;oBAEzC,mCAAmC;oBACnC,IAAI,WAAW,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;wBAC7B,CAAC,EAAE,CAAC;wBACJ,SAAS;oBACX,CAAC;oBAED,MAAM,UAAU,GAAG,QAAQ,CAAC,MAAM,GAAG,QAAQ,CAAC,SAAS,EAAE,CAAC,MAAM,CAAC;oBACjE,oEAAoE;oBACpE,IAAI,UAAU,IAAI,YAAY;wBAAE,MAAM;oBAEtC,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;oBACzB,CAAC,EAAE,CAAC;gBACN,CAAC;gBAED,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC;oBAAE,SAAS;gBAErC,MAAM,QAAQ,GAAG,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBAEtC,qBAAqB;gBACrB,MAAM,UAAU,GAAG,aAAa,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,WAAW,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;gBAC9E,IAAI,UAAU;oBAAE,SAAS;gBAEzB,oBAAoB;gBACpB,IAAI,UAAU,CAAC,IAAI,CAAC,QAAQ,CAAC;oBAAE,SAAS;gBAExC,kCAAkC;gBAClC,MAAM,QAAQ,GAAG,SAAS;qBACvB,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;qBAClB,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,KAAK,MAAM,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC;gBAEnE,6EAA6E;gBAC7E,wEAAwE;gBACxE,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;gBAEpC,UAAU,CAAC,IAAI,CAAC;oBACd,MAAM,EAAE,IAAI,CAAC,EAAE;oBACf,QAAQ,EAAE,IAAI,CAAC,IAAI;oBACnB,SAAS,EAAE,IAAI,CAAC,SAAS;oBACzB,QAAQ,EAAE,IAAI,CAAC,QAAQ;oBACvB,QAAQ;oBACR,IAAI,EAAE,CAAC,GAAG,CAAC;oBACX,MAAM,EAAE,YAAY,GAAG,CAAC;oBACxB,QAAQ;oBACR,eAAe,EACb,wFAAwF;wBACxF,+FAA+F;oBACjG,WAAW,EACT,kFAAkF;wBAClF,yFAAyF;oBAC3F,WAAW,EAAE,0BAA0B;oBACvC,UAAU,EAAE,QAAQ,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI;oBAC/C,QAAQ,EAAE,QAAQ;iBACnB,CAAC,CAAC;YACL,CAAC;YAED,OAAO,UAAU,CAAC;QACpB,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,EAAE,CAAC;QACZ,CAAC;IACH,CAAC;CACF;AAvFD,wDAuFC"}
+{"version":3,"file":"PY003-broad-except-clause.js","sourceRoot":"","sources":["../../../src/structural-rules/python/PY003-broad-except-clause.ts"],"names":[],"mappings":";;;AA4BA,0DAsGC;AAQD,sDAgDC;AAxLD,uDAAuD;AACvD,MAAM,eAAe,GAAG,4CAA4C,CAAC;AAErE,0EAA0E;AAC1E,MAAM,UAAU,GAAG,wGAAwG,CAAC;AAU5H;;;;;;;;;;;GAWG;AACH,SAAgB,uBAAuB,CAAC,KAAe;IACrD,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,IAAI,cAAc,GAAG,KAAK,CAAC,CAAC,mBAAmB;IAC/C,IAAI,cAAc,GAAG,KAAK,CAAC,CAAC,mBAAmB;IAE/C,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,EAAE,CAAC;QAEjC,yEAAyE;QACzE,IAAI,cAAc,EAAE,CAAC;YACnB,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;YACrC,IAAI,QAAQ,KAAK,CAAC,CAAC,EAAE,CAAC;gBACpB,cAAc,GAAG,KAAK,CAAC;gBACvB,uDAAuD;gBACvD,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC;YACvC,CAAC;iBAAM,CAAC;gBACN,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC;YACvC,CAAC;YACD,SAAS;QACX,CAAC;QACD,IAAI,cAAc,EAAE,CAAC;YACnB,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;YACrC,IAAI,QAAQ,KAAK,CAAC,CAAC,EAAE,CAAC;gBACpB,cAAc,GAAG,KAAK,CAAC;gBACvB,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC;YACvC,CAAC;iBAAM,CAAC;gBACN,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC;YACvC,CAAC;YACD,SAAS;QACX,CAAC;QAED,wCAAwC;QACxC,IAAI,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;YAC5B,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YAChB,SAAS;QACX,CAAC;QAED,4DAA4D;QAC5D,IAAI,GAAG,GAAG,EAAE,CAAC;QACb,IAAI,CAAC,GAAG,CAAC,CAAC;QACV,IAAI,SAAS,GAAG,KAAK,CAAC;QACtB,IAAI,SAAS,GAAG,KAAK,CAAC;QAEtB,OAAO,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC;YACvB,MAAM,EAAE,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;YACnB,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;YAEhC,IAAI,CAAC,SAAS,IAAI,CAAC,SAAS,EAAE,CAAC;gBAC7B,iCAAiC;gBACjC,IAAI,SAAS,CAAC,UAAU,CAAC,KAAK,CAAC,EAAE,CAAC;oBAChC,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;oBAC/B,MAAM,eAAe,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;oBAC5C,IAAI,eAAe,KAAK,CAAC,CAAC,EAAE,CAAC;wBAC3B,6DAA6D;wBAC7D,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC,GAAG,eAAe,GAAG,CAAC,CAAC,CAAC;wBAC3C,CAAC,IAAI,CAAC,GAAG,eAAe,GAAG,CAAC,CAAC;wBAC7B,SAAS;oBACX,CAAC;yBAAM,CAAC;wBACN,cAAc,GAAG,IAAI,CAAC;wBACtB,0BAA0B;wBAC1B,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;wBACnC,MAAM;oBACR,CAAC;gBACH,CAAC;gBACD,IAAI,SAAS,CAAC,UAAU,CAAC,KAAK,CAAC,EAAE,CAAC;oBAChC,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;oBAC/B,MAAM,eAAe,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;oBAC5C,IAAI,eAAe,KAAK,CAAC,CAAC,EAAE,CAAC;wBAC3B,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC,GAAG,eAAe,GAAG,CAAC,CAAC,CAAC;wBAC3C,CAAC,IAAI,CAAC,GAAG,eAAe,GAAG,CAAC,CAAC;wBAC7B,SAAS;oBACX,CAAC;yBAAM,CAAC;wBACN,cAAc,GAAG,IAAI,CAAC;wBACtB,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;wBACnC,MAAM;oBACR,CAAC;gBACH,CAAC;gBACD,8BAA8B;gBAC9B,IAAI,EAAE,KAAK,GAAG,EAAE,CAAC;oBAAC,SAAS,GAAG,IAAI,CAAC;oBAAC,GAAG,IAAI,GAAG,CAAC;oBAAC,CAAC,EAAE,CAAC;oBAAC,SAAS;gBAAC,CAAC;gBAChE,IAAI,EAAE,KAAK,GAAG,EAAE,CAAC;oBAAC,SAAS,GAAG,IAAI,CAAC;oBAAC,GAAG,IAAI,GAAG,CAAC;oBAAC,CAAC,EAAE,CAAC;oBAAC,SAAS;gBAAC,CAAC;gBAChE,iBAAiB;gBACjB,IAAI,EAAE,KAAK,GAAG,EAAE,CAAC;oBACf,iCAAiC;oBACjC,MAAM;gBACR,CAAC;gBACD,GAAG,IAAI,EAAE,CAAC;YACZ,CAAC;iBAAM,IAAI,SAAS,EAAE,CAAC;gBACrB,IAAI,EAAE,KAAK,IAAI,EAAE,CAAC;oBAAC,GAAG,IAAI,IAAI,CAAC;oBAAC,CAAC,IAAI,CAAC,CAAC;oBAAC,SAAS;gBAAC,CAAC,CAAC,SAAS;gBAC7D,IAAI,EAAE,KAAK,GAAG,EAAE,CAAC;oBAAC,SAAS,GAAG,KAAK,CAAC;gBAAC,CAAC;gBACtC,GAAG,IAAI,GAAG,CAAC;YACb,CAAC;iBAAM,IAAI,SAAS,EAAE,CAAC;gBACrB,IAAI,EAAE,KAAK,IAAI,EAAE,CAAC;oBAAC,GAAG,IAAI,IAAI,CAAC;oBAAC,CAAC,IAAI,CAAC,CAAC;oBAAC,SAAS;gBAAC,CAAC;gBACnD,IAAI,EAAE,KAAK,GAAG,EAAE,CAAC;oBAAC,SAAS,GAAG,KAAK,CAAC;gBAAC,CAAC;gBACtC,GAAG,IAAI,GAAG,CAAC;YACb,CAAC;YACD,CAAC,EAAE,CAAC;QACN,CAAC;QAED,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACnB,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;;;;GAKG;AACH,SAAgB,qBAAqB,CACnC,iBAA2B,EAC3B,YAAoB;IAEpB,2EAA2E;IAC3E,MAAM,UAAU,GAAG,iBAAiB,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE;QAC9C,MAAM,CAAC,GAAG,CAAC,CAAC,SAAS,EAAE,CAAC;QACxB,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,KAAK,CAAC;QACjC,MAAM,MAAM,GAAG,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,MAAM,CAAC;QACnC,OAAO,MAAM,GAAG,YAAY,CAAC;IAC/B,CAAC,CAAC,CAAC;IAEH,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,SAAS,CAAC;IAE9C,MAAM,QAAQ,GAAG,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAEvC,+EAA+E;IAC/E,2DAA2D;IAC3D,MAAM,aAAa,GAAG,cAAc,CAAC;IACrC,MAAM,QAAQ,GAAG,aAAa,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IAE9C,yEAAyE;IACzE,MAAM,kBAAkB,GAAG,gCAAgC,CAAC;IAC5D,MAAM,iBAAiB,GAAG,kBAAkB,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IAE5D,oDAAoD;IACpD,MAAM,aAAa,GAAG,gBAAgB,CAAC;IACvC,MAAM,YAAY,GAAG,aAAa,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IAElD,oEAAoE;IACpE,MAAM,oBAAoB,GAAG,cAAc,CAAC;IAC5C,MAAM,mBAAmB,GAAG,CAAC,YAAY,IAAI,CAAC,iBAAiB,IAAI,oBAAoB,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IAEvG,MAAM,UAAU,GAAG,UAAU,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IAE7C,IAAI,YAAY,EAAE,CAAC;QACjB,mCAAmC;QACnC,OAAO,iBAAiB,CAAC,CAAC,uCAAuC;IACnE,CAAC;IAED,IAAI,iBAAiB;QAAE,OAAO,qBAAqB,CAAC;IACpD,IAAI,mBAAmB;QAAE,OAAO,iBAAiB,CAAC;IAElD,IAAI,CAAC,QAAQ,IAAI,UAAU;QAAE,OAAO,UAAU,CAAC;IAC/C,IAAI,CAAC,QAAQ,IAAI,CAAC,UAAU;QAAE,OAAO,SAAS,CAAC;IAE/C,sEAAsE;IACtE,OAAO,iBAAiB,CAAC;AAC3B,CAAC;AAED,MAAa,sBAAsB;IACjC,EAAE,GAAG,OAAO,CAAC;IACb,IAAI,GAAG,uCAAuC,CAAC;IAC/C,SAAS,GAAG,MAAM,CAAC;IACnB,QAAQ,GAAG,UAAmB,CAAC;IAC/B,SAAS,GAAmB,CAAC,QAAQ,CAAC,CAAC;IACvC,WAAW,GACT,iHAAiH,CAAC;IAEpH,KAAK,CAAC,QAAgB,EAAE,UAAkB;QACxC,IAAI,CAAC;YACH,MAAM,UAAU,GAA0B,EAAE,CAAC;YAC7C,MAAM,KAAK,GAAG,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YAErC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;gBACtC,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;gBACtB,MAAM,KAAK,GAAG,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBACzC,IAAI,CAAC,KAAK;oBAAE,SAAS;gBAErB,MAAM,YAAY,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;gBAErC,4EAA4E;gBAC5E,MAAM,YAAY,GAAa,EAAE,CAAC;gBAClC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;gBACd,OAAO,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC;oBACxB,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;oBAC1B,MAAM,WAAW,GAAG,QAAQ,CAAC,SAAS,EAAE,CAAC;oBAEzC,mCAAmC;oBACnC,IAAI,WAAW,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;wBAC7B,YAAY,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;wBAC5B,CAAC,EAAE,CAAC;wBACJ,SAAS;oBACX,CAAC;oBAED,MAAM,UAAU,GAAG,QAAQ,CAAC,MAAM,GAAG,WAAW,CAAC,MAAM,CAAC;oBACxD,oEAAoE;oBACpE,IAAI,UAAU,IAAI,YAAY;wBAAE,MAAM;oBAEtC,YAAY,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;oBAC5B,CAAC,EAAE,CAAC;gBACN,CAAC;gBAED,IAAI,YAAY,CAAC,MAAM,KAAK,CAAC;oBAAE,SAAS;gBAExC,uEAAuE;gBACvE,MAAM,aAAa,GAAG,uBAAuB,CAAC,YAAY,CAAC,CAAC;gBAC5D,MAAM,SAAS,GAAG,qBAAqB,CAAC,aAAa,EAAE,YAAY,CAAC,CAAC;gBAErE,+DAA+D;gBAC/D,sEAAsE;gBACtE,IAAI,SAAS,KAAK,iBAAiB,IAAI,SAAS,KAAK,qBAAqB,EAAE,CAAC;oBAC3E,SAAS;gBACX,CAAC;gBAED,4EAA4E;gBAC5E,sEAAsE;gBACtE,kEAAkE;gBAClE,IAAI,SAAS,KAAK,SAAS,IAAI,SAAS,KAAK,UAAU;oBAAE,SAAS;gBAElE,MAAM,eAAe,GAAG,aAAa;qBAClC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;qBAClB,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,KAAK,MAAM,CAAC,CAAC;gBAE7C,MAAM,UAAU,GAAG,SAAS,KAAK,SAAS;oBACxC,CAAC,CAAC,CAAC,eAAe,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;oBAC9C,CAAC,CAAC,IAAI,CAAC,CAAC,WAAW;gBAErB,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;gBAEpC,UAAU,CAAC,IAAI,CAAC;oBACd,MAAM,EAAE,IAAI,CAAC,EAAE;oBACf,QAAQ,EAAE,IAAI,CAAC,IAAI;oBACnB,SAAS,EAAE,IAAI,CAAC,SAAS;oBACzB,QAAQ,EAAE,IAAI,CAAC,QAAQ;oBACvB,QAAQ;oBACR,IAAI,EAAE,CAAC,GAAG,CAAC;oBACX,MAAM,EAAE,YAAY,GAAG,CAAC;oBACxB,QAAQ,EAAE,GAAG,QAAQ,UAAU,SAAS,GAAG;oBAC3C,eAAe,EACb,0CAA0C,SAAS,KAAK;wBACxD,wFAAwF;wBACxF,oFAAoF;oBACtF,WAAW,EACT,kFAAkF;wBAClF,yFAAyF;oBAC3F,WAAW,EAAE,0BAA0B;oBACvC,UAAU;oBACV,QAAQ,EAAE,QAAQ;iBACnB,CAAC,CAAC;YACL,CAAC;YAED,OAAO,UAAU,CAAC;QACpB,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,EAAE,CAAC;QACZ,CAAC;IACH,CAAC;CACF;AAjGD,wDAiGC"}

package/dist/structural-rules/python/PY011-thread-lifecycle.d.ts

@@ -0,0 +1,11 @@
+import { StructuralRule, StructuralViolation, RuleLanguage } from '../types';
+export declare class PY011ThreadLifecycle implements StructuralRule {
+    id: string;
+    name: string;
+    policyRef: string;
+    severity: "BLOCKING";
+    languages: RuleLanguage[];
+    description: string;
+    check(filePath: string, sourceText: string): StructuralViolation[];
+}
+//# sourceMappingURL=PY011-thread-lifecycle.d.ts.map

package/dist/structural-rules/python/PY011-thread-lifecycle.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"PY011-thread-lifecycle.d.ts","sourceRoot":"","sources":["../../../src/structural-rules/python/PY011-thread-lifecycle.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,mBAAmB,EAAE,YAAY,EAAE,MAAM,UAAU,CAAC;AAmB7E,qBAAa,oBAAqB,YAAW,cAAc;IACzD,EAAE,SAAW;IACb,IAAI,SAAoE;IACxE,SAAS,SAAW;IACpB,QAAQ,EAAG,UAAU,CAAU;IAC/B,SAAS,EAAE,YAAY,EAAE,CAAc;IACvC,WAAW,SAEoE;IAE/E,KAAK,CAAC,QAAQ,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,mBAAmB,EAAE;CAuEnE"}

package/dist/structural-rules/python/PY011-thread-lifecycle.js

@@ -0,0 +1,97 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.PY011ThreadLifecycle = void 0;
+/**
+ * PY011 — Thread Lifecycle Governance
+ *
+ * Detects threading.Thread() usage without daemon=True and/or without
+ * a stored reference for later join/stop. In long-running services (e.g.,
+ * Airflow scheduler, API workers), non-daemon threads prevent graceful
+ * shutdown under SIGTERM. Detached thread references cannot be joined,
+ * making stop() semantically unreliable.
+ *
+ * BLOCKING: non-daemon threads in service code cause zombie accumulation
+ * across pod restarts in Kubernetes environments.
+ */
+const THREAD_CREATE_RE = /\bthreading\.Thread\s*\(/;
+const DAEMON_TRUE_RE = /\bdaemon\s*=\s*True\b/;
+const THREAD_INLINE_START_RE = /\bthreading\.Thread\s*\(.*\)\s*\.start\s*\(\)/;
+class PY011ThreadLifecycle {
+    id = 'PY011';
+    name = 'Thread created without daemon=True or without stored reference';
+    policyRef = 'PY011';
+    severity = 'BLOCKING';
+    languages = ['python'];
+    description = 'threading.Thread() without daemon=True prevents graceful shutdown under SIGTERM. ' +
+        'Threads created without storing the reference cannot be joined or stopped.';
+    check(filePath, sourceText) {
+        try {
+            const violations = [];
+            const lines = sourceText.replace(/\r\n/g, '\n').replace(/\r/g, '\n').split('\n');
+            for (let i = 0; i < lines.length; i++) {
+                const line = lines[i];
+                if (!THREAD_CREATE_RE.test(line))
+                    continue;
+                // Inline .start() — reference immediately lost
+                if (THREAD_INLINE_START_RE.test(line)) {
+                    violations.push({
+                        ruleId: this.id,
+                        ruleName: this.name,
+                        policyRef: this.policyRef,
+                        severity: this.severity,
+                        filePath,
+                        line: i + 1,
+                        column: line.indexOf('threading.Thread') + 1,
+                        evidence: line.trim(),
+                        operationalRisk: 'Thread started inline without storing reference: cannot be joined or stopped. ' +
+                            'Under K8s SIGTERM, this thread becomes a zombie blocking clean shutdown.',
+                        remediation: 'Store the thread reference: self._thread = threading.Thread(..., daemon=True)\n' +
+                            'Then call self._thread.join(timeout=5) in your stop/cleanup method.',
+                        determinism: 'deterministic-structural',
+                        confidence: 0.88,
+                        language: 'python',
+                    });
+                    continue;
+                }
+                // Check if daemon=True appears within the next 8 lines
+                const searchAhead = Math.min(i + 8, lines.length);
+                let hasDaemon = DAEMON_TRUE_RE.test(line);
+                if (!hasDaemon) {
+                    for (let j = i + 1; j < searchAhead; j++) {
+                        if (DAEMON_TRUE_RE.test(lines[j])) {
+                            hasDaemon = true;
+                            break;
+                        }
+                        if (/\)\s*$/.test(lines[j].trimEnd()))
+                            break;
+                    }
+                }
+                if (!hasDaemon) {
+                    violations.push({
+                        ruleId: this.id,
+                        ruleName: this.name,
+                        policyRef: this.policyRef,
+                        severity: this.severity,
+                        filePath,
+                        line: i + 1,
+                        column: line.indexOf('threading.Thread') + 1,
+                        evidence: line.trim(),
+                        operationalRisk: 'Non-daemon thread blocks process exit under SIGTERM. ' +
+                            'In Kubernetes, pods will hang at termination until the thread finishes naturally.',
+                        remediation: 'Add daemon=True: threading.Thread(target=..., daemon=True)\n' +
+                            'Store the reference and call .join(timeout=5) in stop/cleanup.',
+                        determinism: 'deterministic-structural',
+                        confidence: 0.88,
+                        language: 'python',
+                    });
+                }
+            }
+            return violations;
+        }
+        catch {
+            return [];
+        }
+    }
+}
+exports.PY011ThreadLifecycle = PY011ThreadLifecycle;
+//# sourceMappingURL=PY011-thread-lifecycle.js.map

package/dist/structural-rules/python/PY011-thread-lifecycle.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"PY011-thread-lifecycle.js","sourceRoot":"","sources":["../../../src/structural-rules/python/PY011-thread-lifecycle.ts"],"names":[],"mappings":";;;AAEA;;;;;;;;;;;GAWG;AAEH,MAAM,gBAAgB,GAAG,0BAA0B,CAAC;AACpD,MAAM,cAAc,GAAG,uBAAuB,CAAC;AAC/C,MAAM,sBAAsB,GAAG,+CAA+C,CAAC;AAE/E,MAAa,oBAAoB;IAC/B,EAAE,GAAG,OAAO,CAAC;IACb,IAAI,GAAG,gEAAgE,CAAC;IACxE,SAAS,GAAG,OAAO,CAAC;IACpB,QAAQ,GAAG,UAAmB,CAAC;IAC/B,SAAS,GAAmB,CAAC,QAAQ,CAAC,CAAC;IACvC,WAAW,GACT,mFAAmF;QACnF,4EAA4E,CAAC;IAE/E,KAAK,CAAC,QAAgB,EAAE,UAAkB;QACxC,IAAI,CAAC;YACH,MAAM,UAAU,GAA0B,EAAE,CAAC;YAC7C,MAAM,KAAK,GAAG,UAAU,CAAC,OAAO,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YAEjF,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;gBACtC,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;gBACtB,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC;oBAAE,SAAS;gBAE3C,+CAA+C;gBAC/C,IAAI,sBAAsB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;oBACtC,UAAU,CAAC,IAAI,CAAC;wBACd,MAAM,EAAE,IAAI,CAAC,EAAE;wBACf,QAAQ,EAAE,IAAI,CAAC,IAAI;wBACnB,SAAS,EAAE,IAAI,CAAC,SAAS;wBACzB,QAAQ,EAAE,IAAI,CAAC,QAAQ;wBACvB,QAAQ;wBACR,IAAI,EAAE,CAAC,GAAG,CAAC;wBACX,MAAM,EAAE,IAAI,CAAC,OAAO,CAAC,kBAAkB,CAAC,GAAG,CAAC;wBAC5C,QAAQ,EAAE,IAAI,CAAC,IAAI,EAAE;wBACrB,eAAe,EACb,gFAAgF;4BAChF,0EAA0E;wBAC5E,WAAW,EACT,iFAAiF;4BACjF,qEAAqE;wBACvE,WAAW,EAAE,0BAAmC;wBAChD,UAAU,EAAE,IAAI;wBAChB,QAAQ,EAAE,QAAQ;qBACnB,CAAC,CAAC;oBACH,SAAS;gBACX,CAAC;gBAED,uDAAuD;gBACvD,MAAM,WAAW,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;gBAClD,IAAI,SAAS,GAAG,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBAC1C,IAAI,CAAC,SAAS,EAAE,CAAC;oBACf,KAAK,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,WAAW,EAAE,CAAC,EAAE,EAAE,CAAC;wBACzC,IAAI,cAAc,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;4BAAC,SAAS,GAAG,IAAI,CAAC;4BAAC,MAAM;wBAAC,CAAC;wBAC/D,IAAI,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC;4BAAE,MAAM;oBAC/C,CAAC;gBACH,CAAC;gBAED,IAAI,CAAC,SAAS,EAAE,CAAC;oBACf,UAAU,CAAC,IAAI,CAAC;wBACd,MAAM,EAAE,IAAI,CAAC,EAAE;wBACf,QAAQ,EAAE,IAAI,CAAC,IAAI;wBACnB,SAAS,EAAE,IAAI,CAAC,SAAS;wBACzB,QAAQ,EAAE,IAAI,CAAC,QAAQ;wBACvB,QAAQ;wBACR,IAAI,EAAE,CAAC,GAAG,CAAC;wBACX,MAAM,EAAE,IAAI,CAAC,OAAO,CAAC,kBAAkB,CAAC,GAAG,CAAC;wBAC5C,QAAQ,EAAE,IAAI,CAAC,IAAI,EAAE;wBACrB,eAAe,EACb,uDAAuD;4BACvD,mFAAmF;wBACrF,WAAW,EACT,8DAA8D;4BAC9D,gEAAgE;wBAClE,WAAW,EAAE,0BAAmC;wBAChD,UAAU,EAAE,IAAI;wBAChB,QAAQ,EAAE,QAAQ;qBACnB,CAAC,CAAC;gBACL,CAAC;YACH,CAAC;YAED,OAAO,UAAU,CAAC;QACpB,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,EAAE,CAAC;QACZ,CAAC;IACH,CAAC;CACF;AAjFD,oDAiFC"}

package/dist/structural-rules/python/PY012-asyncio-run-misuse.d.ts

@@ -0,0 +1,11 @@
+import { StructuralRule, StructuralViolation, RuleLanguage } from '../types';
+export declare class PY012AsyncioRunMisuse implements StructuralRule {
+    id: string;
+    name: string;
+    policyRef: string;
+    severity: "BLOCKING";
+    languages: RuleLanguage[];
+    description: string;
+    check(filePath: string, sourceText: string): StructuralViolation[];
+}
+//# sourceMappingURL=PY012-asyncio-run-misuse.d.ts.map

package/dist/structural-rules/python/PY012-asyncio-run-misuse.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"PY012-asyncio-run-misuse.d.ts","sourceRoot":"","sources":["../../../src/structural-rules/python/PY012-asyncio-run-misuse.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,mBAAmB,EAAE,YAAY,EAAE,MAAM,UAAU,CAAC;AAmB7E,qBAAa,qBAAsB,YAAW,cAAc;IAC1D,EAAE,SAAW;IACb,IAAI,SAA2C;IAC/C,SAAS,SAAW;IACpB,QAAQ,EAAG,UAAU,CAAU;IAC/B,SAAS,EAAE,YAAY,EAAE,CAAc;IACvC,WAAW,SAEiD;IAE5D,KAAK,CAAC,QAAQ,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,mBAAmB,EAAE;CA+DnE"}

package/dist/structural-rules/python/PY012-asyncio-run-misuse.js

@@ -0,0 +1,83 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.PY012AsyncioRunMisuse = void 0;
+/**
+ * PY012 — asyncio.run() Misuse Inside Async Context
+ *
+ * asyncio.run() creates a new event loop and runs until the coroutine completes.
+ * Calling it inside an already-running event loop raises RuntimeError.
+ *
+ * BLOCKING: causes RuntimeError at startup in FastAPI, Airflow, Jupyter, and
+ * any other async runtime environment.
+ */
+const ASYNC_DEF_RE = /^(\s*)async\s+def\s+\w+\s*\(/;
+const ASYNCIO_RUN_RE = /\basyncio\.run\s*\(/;
+function getIndent(line) {
+    return line.length - line.trimStart().length;
+}
+class PY012AsyncioRunMisuse {
+    id = 'PY012';
+    name = 'asyncio.run() called inside async def';
+    policyRef = 'PY012';
+    severity = 'BLOCKING';
+    languages = ['python'];
+    description = 'asyncio.run() inside an async def raises RuntimeError: "This event loop is already running." ' +
+        'Use await coroutine() or asyncio.create_task() instead.';
+    check(filePath, sourceText) {
+        try {
+            const violations = [];
+            const lines = sourceText.replace(/\r\n/g, '\n').replace(/\r/g, '\n').split('\n');
+            const asyncScopes = [];
+            for (let i = 0; i < lines.length; i++) {
+                const line = lines[i];
+                const trimmed = line.trimStart();
+                // Track async def entries
+                const asyncMatch = ASYNC_DEF_RE.exec(line);
+                if (asyncMatch) {
+                    asyncScopes.push({ startLine: i, indent: asyncMatch[1].length });
+                }
+                // Pop scopes that have ended
+                if (asyncScopes.length > 0 && trimmed.length > 0 && !trimmed.startsWith('#')) {
+                    const currentIndent = getIndent(line);
+                    while (asyncScopes.length > 0 &&
+                        currentIndent <= asyncScopes[asyncScopes.length - 1].indent &&
+                        i > asyncScopes[asyncScopes.length - 1].startLine) {
+                        if (/^(def |async def |class |@|if |for |while |with |try:|except|finally:|else:|elif )/.test(trimmed)) {
+                            asyncScopes.pop();
+                        }
+                        else {
+                            break;
+                        }
+                    }
+                }
+                // Detect asyncio.run() inside an async scope
+                if (asyncScopes.length > 0 && ASYNCIO_RUN_RE.test(line)) {
+                    const scope = asyncScopes[asyncScopes.length - 1];
+                    violations.push({
+                        ruleId: this.id,
+                        ruleName: this.name,
+                        policyRef: this.policyRef,
+                        severity: this.severity,
+                        filePath,
+                        line: i + 1,
+                        column: line.indexOf('asyncio.run') + 1,
+                        evidence: line.trim(),
+                        operationalRisk: `asyncio.run() called inside async def (started at line ${scope.startLine + 1}). ` +
+                            'Raises RuntimeError: "This event loop is already running" in FastAPI, Airflow, and Jupyter.',
+                        remediation: 'Replace asyncio.run(coro()) with: await coro()\n' +
+                            'Or if called from module-level code, restructure to avoid calling from inside an async function.',
+                        determinism: 'deterministic-structural',
+                        confidence: 0.85,
+                        language: 'python',
+                    });
+                }
+            }
+            return violations;
+        }
+        catch {
+            return [];
+        }
+    }
+}
+exports.PY012AsyncioRunMisuse = PY012AsyncioRunMisuse;
+//# sourceMappingURL=PY012-asyncio-run-misuse.js.map

package/dist/structural-rules/python/PY012-asyncio-run-misuse.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"PY012-asyncio-run-misuse.js","sourceRoot":"","sources":["../../../src/structural-rules/python/PY012-asyncio-run-misuse.ts"],"names":[],"mappings":";;;AAEA;;;;;;;;GAQG;AAEH,MAAM,YAAY,GAAG,8BAA8B,CAAC;AACpD,MAAM,cAAc,GAAG,qBAAqB,CAAC;AAE7C,SAAS,SAAS,CAAC,IAAY;IAC7B,OAAO,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,SAAS,EAAE,CAAC,MAAM,CAAC;AAC/C,CAAC;AAED,MAAa,qBAAqB;IAChC,EAAE,GAAG,OAAO,CAAC;IACb,IAAI,GAAG,uCAAuC,CAAC;IAC/C,SAAS,GAAG,OAAO,CAAC;IACpB,QAAQ,GAAG,UAAmB,CAAC;IAC/B,SAAS,GAAmB,CAAC,QAAQ,CAAC,CAAC;IACvC,WAAW,GACT,+FAA+F;QAC/F,yDAAyD,CAAC;IAE5D,KAAK,CAAC,QAAgB,EAAE,UAAkB;QACxC,IAAI,CAAC;YACH,MAAM,UAAU,GAA0B,EAAE,CAAC;YAC7C,MAAM,KAAK,GAAG,UAAU,CAAC,OAAO,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YAEjF,MAAM,WAAW,GAAiD,EAAE,CAAC;YAErE,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;gBACtC,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;gBACtB,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,EAAE,CAAC;gBAEjC,0BAA0B;gBAC1B,MAAM,UAAU,GAAG,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBAC3C,IAAI,UAAU,EAAE,CAAC;oBACf,WAAW,CAAC,IAAI,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,MAAM,EAAE,UAAU,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC;gBACnE,CAAC;gBAED,6BAA6B;gBAC7B,IAAI,WAAW,CAAC,MAAM,GAAG,CAAC,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;oBAC7E,MAAM,aAAa,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;oBACtC,OACE,WAAW,CAAC,MAAM,GAAG,CAAC;wBACtB,aAAa,IAAI,WAAW,CAAC,WAAW,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,MAAM;wBAC3D,CAAC,GAAG,WAAW,CAAC,WAAW,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,SAAS,EACjD,CAAC;wBACD,IAAI,oFAAoF,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;4BACvG,WAAW,CAAC,GAAG,EAAE,CAAC;wBACpB,CAAC;6BAAM,CAAC;4BACN,MAAM;wBACR,CAAC;oBACH,CAAC;gBACH,CAAC;gBAED,6CAA6C;gBAC7C,IAAI,WAAW,CAAC,MAAM,GAAG,CAAC,IAAI,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;oBACxD,MAAM,KAAK,GAAG,WAAW,CAAC,WAAW,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;oBAClD,UAAU,CAAC,IAAI,CAAC;wBACd,MAAM,EAAE,IAAI,CAAC,EAAE;wBACf,QAAQ,EAAE,IAAI,CAAC,IAAI;wBACnB,SAAS,EAAE,IAAI,CAAC,SAAS;wBACzB,QAAQ,EAAE,IAAI,CAAC,QAAQ;wBACvB,QAAQ;wBACR,IAAI,EAAE,CAAC,GAAG,CAAC;wBACX,MAAM,EAAE,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,GAAG,CAAC;wBACvC,QAAQ,EAAE,IAAI,CAAC,IAAI,EAAE;wBACrB,eAAe,EACb,0DAA0D,KAAK,CAAC,SAAS,GAAG,CAAC,KAAK;4BAClF,6FAA6F;wBAC/F,WAAW,EACT,kDAAkD;4BAClD,kGAAkG;wBACpG,WAAW,EAAE,0BAAmC;wBAChD,UAAU,EAAE,IAAI;wBAChB,QAAQ,EAAE,QAAQ;qBACnB,CAAC,CAAC;gBACL,CAAC;YACH,CAAC;YAED,OAAO,UAAU,CAAC;QACpB,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,EAAE,CAAC;QACZ,CAAC;IACH,CAAC;CACF;AAzED,sDAyEC"}

package/dist/structural-rules/python/PY013-mutable-default-arg.d.ts

@@ -0,0 +1,11 @@
+import { StructuralRule, StructuralViolation, RuleLanguage } from '../types';
+export declare class PY013MutableDefaultArg implements StructuralRule {
+    id: string;
+    name: string;
+    policyRef: string;
+    severity: "ADVISORY";
+    languages: RuleLanguage[];
+    description: string;
+    check(filePath: string, sourceText: string): StructuralViolation[];
+}
+//# sourceMappingURL=PY013-mutable-default-arg.d.ts.map

package/dist/structural-rules/python/PY013-mutable-default-arg.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"PY013-mutable-default-arg.d.ts","sourceRoot":"","sources":["../../../src/structural-rules/python/PY013-mutable-default-arg.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,mBAAmB,EAAE,YAAY,EAAE,MAAM,UAAU,CAAC;AAe7E,qBAAa,sBAAuB,YAAW,cAAc;IAC3D,EAAE,SAAW;IACb,IAAI,SAAqD;IACzD,SAAS,SAAW;IACpB,QAAQ,EAAG,UAAU,CAAU;IAC/B,SAAS,EAAE,YAAY,EAAE,CAAc;IACvC,WAAW,SAEsD;IAEjE,KAAK,CAAC,QAAQ,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,mBAAmB,EAAE;CAqDnE"}

package/dist/structural-rules/python/PY013-mutable-default-arg.js

@@ -0,0 +1,73 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.PY013MutableDefaultArg = void 0;
+/**
+ * PY013 — Mutable Default Argument
+ *
+ * Python function default arguments are evaluated ONCE at function definition
+ * time. Using mutable objects (dict, list, set) as defaults creates a shared
+ * object across all calls. Classic Python gotcha reliably reproduced by LLMs.
+ *
+ * ADVISORY: correctness bug but not immediately fatal.
+ */
+const PARAM_MUTABLE_RE = /(?::\s*\w+(?:\[.*?\])?\s*)?=\s*(\{\}|\[\]|set\s*\(\s*\))/;
+const DEF_RE = /^(\s*)(?:async\s+)?def\s+\w+\s*\(/;
+class PY013MutableDefaultArg {
+    id = 'PY013';
+    name = 'Mutable default argument in function definition';
+    policyRef = 'PY013';
+    severity = 'ADVISORY';
+    languages = ['python'];
+    description = 'Mutable default arguments ({}, [], set()) are shared across all calls. ' +
+        'Use None as default and initialize inside the function body.';
+    check(filePath, sourceText) {
+        try {
+            const violations = [];
+            const lines = sourceText.replace(/\r\n/g, '\n').replace(/\r/g, '\n').split('\n');
+            for (let i = 0; i < lines.length; i++) {
+                const line = lines[i];
+                if (!DEF_RE.test(line))
+                    continue;
+                // Collect full signature (may span multiple lines)
+                let sig = line;
+                if (!sig.includes(')')) {
+                    for (let j = i + 1; j < Math.min(i + 10, lines.length); j++) {
+                        sig += ' ' + lines[j];
+                        if (lines[j].includes(')'))
+                            break;
+                    }
+                }
+                const mutableMatch = PARAM_MUTABLE_RE.exec(sig);
+                if (mutableMatch) {
+                    const defaultVal = mutableMatch[1];
+                    const label = defaultVal === '{}' ? 'dict {}' :
+                        defaultVal === '[]' ? 'list []' :
+                            'set()';
+                    violations.push({
+                        ruleId: this.id,
+                        ruleName: this.name,
+                        policyRef: this.policyRef,
+                        severity: this.severity,
+                        filePath,
+                        line: i + 1,
+                        column: line.indexOf('def') + 1,
+                        evidence: line.trim(),
+                        operationalRisk: `Mutable default argument (${label}) is shared across all calls to this function. ` +
+                            'Mutations in one call persist to subsequent calls, causing unpredictable behavior.',
+                        remediation: `Use None as default: def f(x=None):\\n    x = x or ${defaultVal === '[]' ? '[]' : '{}'}\n` +
+                            'This ensures each call gets a fresh mutable object.',
+                        determinism: 'deterministic-structural',
+                        confidence: 0.92,
+                        language: 'python',
+                    });
+                }
+            }
+            return violations;
+        }
+        catch {
+            return [];
+        }
+    }
+}
+exports.PY013MutableDefaultArg = PY013MutableDefaultArg;
+//# sourceMappingURL=PY013-mutable-default-arg.js.map

package/dist/structural-rules/python/PY013-mutable-default-arg.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"PY013-mutable-default-arg.js","sourceRoot":"","sources":["../../../src/structural-rules/python/PY013-mutable-default-arg.ts"],"names":[],"mappings":";;;AAEA;;;;;;;;GAQG;AAEH,MAAM,gBAAgB,GAAG,0DAA0D,CAAC;AACpF,MAAM,MAAM,GAAG,mCAAmC,CAAC;AAEnD,MAAa,sBAAsB;IACjC,EAAE,GAAG,OAAO,CAAC;IACb,IAAI,GAAG,iDAAiD,CAAC;IACzD,SAAS,GAAG,OAAO,CAAC;IACpB,QAAQ,GAAG,UAAmB,CAAC;IAC/B,SAAS,GAAmB,CAAC,QAAQ,CAAC,CAAC;IACvC,WAAW,GACT,yEAAyE;QACzE,8DAA8D,CAAC;IAEjE,KAAK,CAAC,QAAgB,EAAE,UAAkB;QACxC,IAAI,CAAC;YACH,MAAM,UAAU,GAA0B,EAAE,CAAC;YAC7C,MAAM,KAAK,GAAG,UAAU,CAAC,OAAO,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YAEjF,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;gBACtC,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;gBACtB,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC;oBAAE,SAAS;gBAEjC,mDAAmD;gBACnD,IAAI,GAAG,GAAG,IAAI,CAAC;gBACf,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;oBACvB,KAAK,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;wBAC5D,GAAG,IAAI,GAAG,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;wBACtB,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC;4BAAE,MAAM;oBACpC,CAAC;gBACH,CAAC;gBAED,MAAM,YAAY,GAAG,gBAAgB,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;gBAChD,IAAI,YAAY,EAAE,CAAC;oBACjB,MAAM,UAAU,GAAG,YAAY,CAAC,CAAC,CAAC,CAAC;oBACnC,MAAM,KAAK,GACT,UAAU,KAAK,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;wBACjC,UAAU,KAAK,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;4BACjC,OAAO,CAAC;oBAEV,UAAU,CAAC,IAAI,CAAC;wBACd,MAAM,EAAE,IAAI,CAAC,EAAE;wBACf,QAAQ,EAAE,IAAI,CAAC,IAAI;wBACnB,SAAS,EAAE,IAAI,CAAC,SAAS;wBACzB,QAAQ,EAAE,IAAI,CAAC,QAAQ;wBACvB,QAAQ;wBACR,IAAI,EAAE,CAAC,GAAG,CAAC;wBACX,MAAM,EAAE,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC;wBAC/B,QAAQ,EAAE,IAAI,CAAC,IAAI,EAAE;wBACrB,eAAe,EACb,6BAA6B,KAAK,iDAAiD;4BACnF,oFAAoF;wBACtF,WAAW,EACT,sDAAsD,UAAU,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,IAAI;4BAC3F,qDAAqD;wBACvD,WAAW,EAAE,0BAAmC;wBAChD,UAAU,EAAE,IAAI;wBAChB,QAAQ,EAAE,QAAQ;qBACnB,CAAC,CAAC;gBACL,CAAC;YACH,CAAC;YAED,OAAO,UAAU,CAAC;QACpB,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,EAAE,CAAC;QACZ,CAAC;IACH,CAAC;CACF;AA/DD,wDA+DC"}

package/dist/structural-rules/python/PY014-fixed-sleep-retry.d.ts

@@ -0,0 +1,11 @@
+import { StructuralRule, StructuralViolation, RuleLanguage } from '../types';
+export declare class PY014FixedSleepRetry implements StructuralRule {
+    id: string;
+    name: string;
+    policyRef: string;
+    severity: "BLOCKING";
+    languages: RuleLanguage[];
+    description: string;
+    check(filePath: string, sourceText: string): StructuralViolation[];
+}
+//# sourceMappingURL=PY014-fixed-sleep-retry.d.ts.map