@promptci/core 0.0.1 → 0.1.0

package/dist/negative-instructions.js

@@ -0,0 +1,174 @@
+/**
+ * Negative-instruction overload detector (FEAT-010).
+ *
+ * Models follow positive directives ("use const") more reliably than
+ * prohibitions ("don't use var"). A file whose directive sentences are
+ * overwhelmingly phrased as prohibitions is harder to follow than the same
+ * guidance framed positively.
+ *
+ * Heuristic: split the file into candidate sentences, classify each as a
+ * positive directive, a negative directive, or neither, and — when there are
+ * enough directives to be meaningful — flag files where more than 40% of the
+ * directives are negative. Info severity only; the wording is deliberately
+ * cautious and the recommendation offers a positive-rewrite hint.
+ *
+ * Deterministic and rule-based: no clock, network, or randomness.
+ */
+import * as crypto from 'node:crypto';
+import * as path from 'node:path';
+import { snippet } from './evidence.js';
+/** Persistent, always-loaded instruction files this detector applies to. */
+const TARGET_FILE_TYPES = new Set([
+    'claude',
+    'agents',
+    'cursor',
+    'windsurf',
+    'copilot',
+    'prompt',
+]);
+/**
+ * A sentence is a NEGATIVE directive when it contains one of these prohibition
+ * markers. Negative markers take precedence over positive ones, so "always
+ * avoid mutation" counts as negative — its operative instruction is a
+ * prohibition.
+ */
+const NEGATIVE_MARKERS = [
+    // Second-person imperative prohibitions only. Third-person "does not" /
+    // "doesn't" is descriptive narration ("this file does not repeat it"), not a
+    // directive, so it is deliberately excluded to avoid inflating the count.
+    /\bdo\s+not\b/i,
+    /\bdon['’]?t\b/i,
+    /\bnever\b/i,
+    /\bavoid\b/i,
+    /\brefrain\s+from\b/i,
+    /\bmust\s+not\b/i,
+    /\bmustn['’]?t\b/i,
+    /\bshould\s+not\b/i,
+    /\bshouldn['’]?t\b/i,
+    /\bcannot\b/i,
+    /\bcan['’]?t\b/i,
+    /\bwon['’]?t\b/i,
+    /\bno\s+longer\b/i,
+];
+/**
+ * A sentence is a POSITIVE directive when it starts with an imperative verb or
+ * carries a positive modal ("must"/"should"/"always" not already caught as
+ * negative above). This intentionally under-counts rather than over-counts:
+ * only clearly directive sentences enter the denominator.
+ */
+const POSITIVE_IMPERATIVE_START = /^(use|always|prefer|ensure|make\s+sure|keep|run|write|add|follow|call|set|return|check|verify|read|ask|include|place|put|store|document|test|update|create|define|import|export|name|group|split|choose|pick|apply|treat|surface|confirm|report|explain|favor|favour|default\s+to|stick\s+to|remember\s+to|be\s+sure\s+to)\b/i;
+const POSITIVE_MODAL = /\b(must|should|always|shall)\b/i;
+const MIN_DIRECTIVES = 8; // below this the ratio is too noisy to be meaningful
+const NEGATIVE_RATIO_THRESHOLD = 0.4; // > 40% negative → finding
+/** Strip a leading markdown list bullet / ordered-list marker / heading hash. */
+function stripLeadingMarkers(line) {
+    return line
+        .replace(/^\s*#{1,6}\s+/, '')
+        .replace(/^\s*[-*+]\s+/, '')
+        .replace(/^\s*\d+[.)]\s+/, '')
+        .replace(/^\s*>\s+/, '')
+        .trim();
+}
+/**
+ * Strip leading markdown emphasis (`**bold**`, `*italic*`, `` `code` ``) so the
+ * operative verb is visible to the imperative test — otherwise "**Report** ..."
+ * hides the "Report" that makes the sentence a positive directive.
+ */
+function stripLeadingEmphasis(text) {
+    return text.replace(/^[*_`]+/, '').trimStart();
+}
+/**
+ * Split file content into candidate directive sentences. Fenced code blocks are
+ * dropped (a bash comment is not an instruction sentence). Each non-blank line
+ * is stripped of list/heading markers, then split on sentence terminators so a
+ * line holding two clauses is counted as two.
+ */
+export function splitSentences(content) {
+    const lines = content.split(/\r?\n/);
+    const sentences = [];
+    let inFence = false;
+    for (const raw of lines) {
+        const fenceToggle = /^\s*(```|~~~)/.test(raw);
+        if (fenceToggle) {
+            inFence = !inFence;
+            continue;
+        }
+        if (inFence)
+            continue;
+        const cleaned = stripLeadingMarkers(raw);
+        if (!cleaned)
+            continue;
+        for (const part of cleaned.split(/(?<=[.!?])\s+/)) {
+            const trimmed = part.trim();
+            // Require a few words so table cells / fragments don't count as sentences.
+            if (trimmed.split(/\s+/).length >= 3)
+                sentences.push(trimmed);
+        }
+    }
+    return sentences;
+}
+function classify(sentence) {
+    const lead = stripLeadingEmphasis(sentence);
+    // The LEADING imperative governs: a positively-framed instruction that also
+    // mentions a prohibition ("Keep diffs focused; do not refactor unrelated
+    // code") is a positive directive, not a negative one. Only sentences whose
+    // primary verb is not a positive imperative fall through to the prohibition
+    // markers.
+    if (POSITIVE_IMPERATIVE_START.test(lead))
+        return 'positive';
+    for (const re of NEGATIVE_MARKERS) {
+        if (re.test(sentence))
+            return 'negative';
+    }
+    if (POSITIVE_MODAL.test(sentence))
+        return 'positive';
+    return 'none';
+}
+function issueId(filePath) {
+    const hash = crypto.createHash('sha1').update(`negative-overload:${filePath}`).digest('hex').slice(0, 12);
+    return `negative-overload-${hash}`;
+}
+export function detectNegativeInstructionOverload(files) {
+    const issues = [];
+    for (const file of files) {
+        if (!TARGET_FILE_TYPES.has(file.fileType))
+            continue;
+        const sentences = splitSentences(file.content);
+        const negatives = [];
+        let positiveCount = 0;
+        for (const sentence of sentences) {
+            const kind = classify(sentence);
+            if (kind === 'negative')
+                negatives.push(sentence);
+            else if (kind === 'positive')
+                positiveCount++;
+        }
+        const total = negatives.length + positiveCount;
+        if (total < MIN_DIRECTIVES)
+            continue;
+        const ratio = negatives.length / total;
+        if (ratio <= NEGATIVE_RATIO_THRESHOLD)
+            continue;
+        const fileName = path.basename(file.path);
+        const pct = Math.round(ratio * 100);
+        const examples = negatives.slice(0, 3).map((s) => snippet(s, 100));
+        issues.push({
+            id: issueId(file.path),
+            severity: 'info',
+            category: 'agent_practices',
+            title: 'High proportion of negative instructions',
+            summary: `About ${pct}% of the directive sentences in "${fileName}" are phrased as prohibitions ` +
+                `(${negatives.length} of ${total}). Models tend to follow positive directives more ` +
+                `reliably than prohibitions, so heavily negative guidance can be harder to apply.`,
+            filePaths: [file.path],
+            locations: [],
+            evidence: examples.map((e) => `Negative directive: "${e}"`),
+            recommendation: 'Where practical, rephrase prohibitions as positive directives — e.g. instead of ' +
+                '"don\'t use var", write "always use const or let". Keep prohibitions for the cases ' +
+                'where no positive form is possible.',
+            confidence: 0.5,
+        });
+    }
+    return issues;
+}
+//# sourceMappingURL=negative-instructions.js.map

package/dist/negative-instructions.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"negative-instructions.js","sourceRoot":"","sources":["../src/negative-instructions.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH,OAAO,KAAK,MAAM,MAAM,aAAa,CAAC;AACtC,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAElC,OAAO,EAAE,OAAO,EAAE,MAAM,eAAe,CAAC;AAExC,4EAA4E;AAC5E,MAAM,iBAAiB,GAA6C,IAAI,GAAG,CAAC;IAC1E,QAAQ;IACR,QAAQ;IACR,QAAQ;IACR,UAAU;IACV,SAAS;IACT,QAAQ;CACT,CAAC,CAAC;AAEH;;;;;GAKG;AACH,MAAM,gBAAgB,GAAa;IACjC,wEAAwE;IACxE,6EAA6E;IAC7E,0EAA0E;IAC1E,eAAe;IACf,gBAAgB;IAChB,YAAY;IACZ,YAAY;IACZ,qBAAqB;IACrB,iBAAiB;IACjB,kBAAkB;IAClB,mBAAmB;IACnB,oBAAoB;IACpB,aAAa;IACb,gBAAgB;IAChB,gBAAgB;IAChB,kBAAkB;CACnB,CAAC;AAEF;;;;;GAKG;AACH,MAAM,yBAAyB,GAC7B,+TAA+T,CAAC;AAClU,MAAM,cAAc,GAAG,iCAAiC,CAAC;AAEzD,MAAM,cAAc,GAAG,CAAC,CAAC,CAAC,qDAAqD;AAC/E,MAAM,wBAAwB,GAAG,GAAG,CAAC,CAAC,2BAA2B;AAIjE,iFAAiF;AACjF,SAAS,mBAAmB,CAAC,IAAY;IACvC,OAAO,IAAI;SACR,OAAO,CAAC,eAAe,EAAE,EAAE,CAAC;SAC5B,OAAO,CAAC,cAAc,EAAE,EAAE,CAAC;SAC3B,OAAO,CAAC,gBAAgB,EAAE,EAAE,CAAC;SAC7B,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC;SACvB,IAAI,EAAE,CAAC;AACZ,CAAC;AAED;;;;GAIG;AACH,SAAS,oBAAoB,CAAC,IAAY;IACxC,OAAO,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC,SAAS,EAAE,CAAC;AACjD,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,cAAc,CAAC,OAAe;IAC5C,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IACrC,MAAM,SAAS,GAAa,EAAE,CAAC;IAC/B,IAAI,OAAO,GAAG,KAAK,CAAC;IAEpB,KAAK,MAAM,GAAG,IAAI,KAAK,EAAE,CAAC;QACxB,MAAM,WAAW,GAAG,eAAe,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC9C,IAAI,WAAW,EAAE,CAAC;YAChB,OAAO,GAAG,CAAC,OAAO,CAAC;YACnB,SAAS;QACX,CAAC;QACD,IAAI,OAAO;YAAE,SAAS;QAEtB,MAAM,OAAO,GAAG,mBAAmB,CAAC,GAAG,CAAC,CAAC;QACzC,IAAI,CAAC,OAAO;YAAE,SAAS;QAEvB,KAAK,MAAM,IAAI,IAAI,OAAO,CAAC,KAAK,CAAC,eAAe,CAAC,EAAE,CAAC;YAClD,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;YAC5B,2EAA2E;YAC3E,IAAI,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,MAAM,IAAI,CAAC;gBAAE,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAChE,CAAC;IACH,CAAC;IAED,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAS,QAAQ,CAAC,QAAgB;IAChC,MAAM,IAAI,GAAG,oBAAoB,CAAC,QAAQ,CAAC,CAAC;IAC5C,4EAA4E;IAC5E,yEAAyE;IACzE,2EAA2E;IAC3E,4EAA4E;IAC5E,WAAW;IACX,IAAI,yBAAyB,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,UAAU,CAAC;IAC5D,KAAK,MAAM,EAAE,IAAI,gBAAgB,EAAE,CAAC;QAClC,IAAI,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC;YAAE,OAAO,UAAU,CAAC;IAC3C,CAAC;IACD,IAAI,cAAc,CAAC,IAAI,CAAC,QAAQ,CAAC;QAAE,OAAO,UAAU,CAAC;IACrD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,OAAO,CAAC,QAAgB;IAC/B,MAAM,IAAI,GAAG,MAAM,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,qBAAqB,QAAQ,EAAE,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IAC1G,OAAO,qBAAqB,IAAI,EAAE,CAAC;AACrC,CAAC;AAED,MAAM,UAAU,iCAAiC,CAAC,KAAwB;IACxE,MAAM,MAAM,GAAoB,EAAE,CAAC;IAEnC,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC;YAAE,SAAS;QAEpD,MAAM,SAAS,GAAG,cAAc,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAC/C,MAAM,SAAS,GAAa,EAAE,CAAC;QAC/B,IAAI,aAAa,GAAG,CAAC,CAAC;QAEtB,KAAK,MAAM,QAAQ,IAAI,SAAS,EAAE,CAAC;YACjC,MAAM,IAAI,GAAG,QAAQ,CAAC,QAAQ,CAAC,CAAC;YAChC,IAAI,IAAI,KAAK,UAAU;gBAAE,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;iBAC7C,IAAI,IAAI,KAAK,UAAU;gBAAE,aAAa,EAAE,CAAC;QAChD,CAAC;QAED,MAAM,KAAK,GAAG,SAAS,CAAC,MAAM,GAAG,aAAa,CAAC;QAC/C,IAAI,KAAK,GAAG,cAAc;YAAE,SAAS;QAErC,MAAM,KAAK,GAAG,SAAS,CAAC,MAAM,GAAG,KAAK,CAAC;QACvC,IAAI,KAAK,IAAI,wBAAwB;YAAE,SAAS;QAEhD,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC1C,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,GAAG,GAAG,CAAC,CAAC;QACpC,MAAM,QAAQ,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC;QAEnE,MAAM,CAAC,IAAI,CAAC;YACV,EAAE,EAAE,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC;YACtB,QAAQ,EAAE,MAAM;YAChB,QAAQ,EAAE,iBAAiB;YAC3B,KAAK,EAAE,0CAA0C;YACjD,OAAO,EACL,SAAS,GAAG,oCAAoC,QAAQ,gCAAgC;gBACxF,IAAI,SAAS,CAAC,MAAM,OAAO,KAAK,oDAAoD;gBACpF,kFAAkF;YACpF,SAAS,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC;YACtB,SAAS,EAAE,EAAE;YACb,QAAQ,EAAE,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,wBAAwB,CAAC,GAAG,CAAC;YAC3D,cAAc,EACZ,kFAAkF;gBAClF,qFAAqF;gBACrF,qCAAqC;YACvC,UAAU,EAAE,GAAG;SAChB,CAAC,CAAC;IACL,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/path-containment.d.ts

@@ -0,0 +1,12 @@
+/**
+ * True when `candidatePath` resolves to `root` itself or a descendant of it.
+ * Both arguments are resolved to absolute form first, so either may be relative.
+ */
+export declare function isWithinRoot(root: string, candidatePath: string): boolean;
+/**
+ * Resolve `candidatePath` — treated as relative to `root` unless it is itself
+ * absolute — and return the absolute path when it stays within `root`, or
+ * `null` when it escapes (via `..`, an absolute path, or a different drive).
+ */
+export declare function resolveWithinRoot(root: string, candidatePath: string): string | null;
+//# sourceMappingURL=path-containment.d.ts.map

package/dist/path-containment.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"path-containment.d.ts","sourceRoot":"","sources":["../src/path-containment.ts"],"names":[],"mappings":"AAqBA;;;GAGG;AACH,wBAAgB,YAAY,CAAC,IAAI,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,GAAG,OAAO,CAYzE;AAED;;;;GAIG;AACH,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAUpF"}

package/dist/path-containment.js

@@ -0,0 +1,53 @@
+/**
+ * The one path-containment check for the whole toolchain.
+ *
+ * Every place that resolves an externally-influenced path (a config value, an
+ * LLM-proposed edit target, a fix's file path) must confirm the result stays
+ * inside the repo/target root before touching the filesystem. This module is
+ * the single, tested implementation those checks share.
+ *
+ * The naive guard this replaces — `resolved.startsWith(root)` — is wrong two
+ * ways:
+ *   - **Sibling prefix.** `/repo-evil` starts with `/repo`, so a sibling
+ *     directory whose name merely shares a prefix reads as "contained".
+ *   - **Separator / drive blind spots.** On Windows a raw string prefix ignores
+ *     the path separator boundary and cross-drive absolutes.
+ *
+ * Comparing the *relative* path from the root sidesteps both: a contained path
+ * yields `''` (the root itself) or a forward walk with no leading `..`; any
+ * escape yields a leading `..` segment or an absolute path (a different drive).
+ */
+import * as path from 'node:path';
+/**
+ * True when `candidatePath` resolves to `root` itself or a descendant of it.
+ * Both arguments are resolved to absolute form first, so either may be relative.
+ */
+export function isWithinRoot(root, candidatePath) {
+    const resolvedRoot = path.resolve(root);
+    const resolved = path.resolve(candidatePath);
+    const rel = path.relative(resolvedRoot, resolved);
+    // '' is the root itself. A genuine escape is exactly '..' or begins with
+    // '..<sep>' (a child literally named e.g. '..foo' is NOT an escape), or is
+    // absolute — which path.relative only returns when the target is on a
+    // different Windows drive and cannot be reached by walking up.
+    return (rel === '' ||
+        (rel !== '..' && !rel.startsWith(`..${path.sep}`) && !path.isAbsolute(rel)));
+}
+/**
+ * Resolve `candidatePath` — treated as relative to `root` unless it is itself
+ * absolute — and return the absolute path when it stays within `root`, or
+ * `null` when it escapes (via `..`, an absolute path, or a different drive).
+ */
+export function resolveWithinRoot(root, candidatePath) {
+    try {
+        const resolvedRoot = path.resolve(root);
+        const resolved = path.isAbsolute(candidatePath)
+            ? path.resolve(candidatePath)
+            : path.resolve(resolvedRoot, candidatePath);
+        return isWithinRoot(resolvedRoot, resolved) ? resolved : null;
+    }
+    catch {
+        return null;
+    }
+}
+//# sourceMappingURL=path-containment.js.map

package/dist/path-containment.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"path-containment.js","sourceRoot":"","sources":["../src/path-containment.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AACH,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAElC;;;GAGG;AACH,MAAM,UAAU,YAAY,CAAC,IAAY,EAAE,aAAqB;IAC9D,MAAM,YAAY,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IACxC,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC;IAC7C,MAAM,GAAG,GAAG,IAAI,CAAC,QAAQ,CAAC,YAAY,EAAE,QAAQ,CAAC,CAAC;IAClD,yEAAyE;IACzE,2EAA2E;IAC3E,sEAAsE;IACtE,+DAA+D;IAC/D,OAAO,CACL,GAAG,KAAK,EAAE;QACV,CAAC,GAAG,KAAK,IAAI,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,KAAK,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAC5E,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,iBAAiB,CAAC,IAAY,EAAE,aAAqB;IACnE,IAAI,CAAC;QACH,MAAM,YAAY,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QACxC,MAAM,QAAQ,GAAG,IAAI,CAAC,UAAU,CAAC,aAAa,CAAC;YAC7C,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC;YAC7B,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,YAAY,EAAE,aAAa,CAAC,CAAC;QAC9C,OAAO,YAAY,CAAC,YAAY,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC;IAChE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC"}

package/dist/project-type.d.ts

@@ -1,7 +1,12 @@
 import type { InstructionFile, ProjectType } from './types.js';
 /**
  * Detect the primary project type for a repo at repoRoot.
- * Detection order: nextjs → typescript → unity → dotnet → unknown
+ * Detection order: nextjs → unity → dotnet → typescript → python → go → rust → unknown
+ *
+ * Unity/.NET probes run before the package.json→typescript branch: Unity and .NET
+ * repos commonly carry a root package.json for JS tooling (husky, prettier), so the
+ * bare-package.json check must not shadow their more specific markers. This matches
+ * the unity-before-typescript ordering in detectProjectTypeFromContent.
  */
 export declare function detectProjectType(repoRoot: string): Promise<ProjectType>;
 /**
@@ -9,7 +14,12 @@ export declare function detectProjectType(repoRoot: string): Promise<ProjectType
  * scan returns 'unknown' (e.g. repos that only contain instruction files, no source).
  * Checks the combined content of all scanned instruction files for strong signals.
  *
- * Detection order: nextjs → unity → typescript → dotnet → python → go → rust → unknown
+ * Detection order: nextjs → unity → dotnet → typescript → python → go → rust → unknown
+ *
+ * .NET is checked before typescript for the same reason as in the file-system
+ * probe above: .NET repos commonly mention JS tooling (pnpm, npm run, jest) in
+ * their instructions, so the broader typescript signals must not shadow the
+ * more specific .NET ones.
  */
 export declare function detectProjectTypeFromContent(files: InstructionFile[]): ProjectType;
 //# sourceMappingURL=project-type.d.ts.map

package/dist/project-type.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"project-type.d.ts","sourceRoot":"","sources":["../src/project-type.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,eAAe,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAoB/D;;;GAGG;AACH,wBAAsB,iBAAiB,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,CAAC,CA4D9E;AAED;;;;;;GAMG;AACH,wBAAgB,4BAA4B,CAAC,KAAK,EAAE,eAAe,EAAE,GAAG,WAAW,CA0BlF"}
+{"version":3,"file":"project-type.d.ts","sourceRoot":"","sources":["../src/project-type.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,eAAe,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAoB/D;;;;;;;;GAQG;AACH,wBAAsB,iBAAiB,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,CAAC,CA+D9E;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,4BAA4B,CAAC,KAAK,EAAE,eAAe,EAAE,GAAG,WAAW,CA0BlF"}

package/dist/project-type.js

@@ -21,7 +21,12 @@ async function dirExists(p) {
 }
 /**
  * Detect the primary project type for a repo at repoRoot.
- * Detection order: nextjs → typescript → unity → dotnet → unknown
+ * Detection order: nextjs → unity → dotnet → typescript → python → go → rust → unknown
+ *
+ * Unity/.NET probes run before the package.json→typescript branch: Unity and .NET
+ * repos commonly carry a root package.json for JS tooling (husky, prettier), so the
+ * bare-package.json check must not shadow their more specific markers. This matches
+ * the unity-before-typescript ordering in detectProjectTypeFromContent.
  */
 export async function detectProjectType(repoRoot) {
     const root = path.resolve(repoRoot);
@@ -42,19 +47,17 @@ export async function detectProjectType(repoRoot) {
         if (hasApp || hasPages)
             return 'nextjs';
     }
-    // ── TypeScript ───────────────────────────────────────────────────────────
-    // package.json or tsconfig.json present
-    const hasTsConfig = await exists(path.join(root, 'tsconfig.json'));
-    if (hasPkgJson || hasTsConfig)
-        return 'typescript';
     // ── Unity ────────────────────────────────────────────────────────────────
-    // Assets/ directory AND ProjectSettings/ProjectVersion.txt both exist
+    // Assets/ directory AND ProjectSettings/ProjectVersion.txt both exist.
+    // Checked before the package.json→typescript branch so a Unity repo with a
+    // root package.json is not misclassified as typescript.
     const hasAssets = await dirExists(path.join(root, 'Assets'));
     const hasProjectVersion = await exists(path.join(root, 'ProjectSettings', 'ProjectVersion.txt'));
     if (hasAssets && hasProjectVersion)
         return 'unity';
     // ── .NET ─────────────────────────────────────────────────────────────────
-    // any .sln or .csproj file at repo root level
+    // any .sln or .csproj file at repo root level. Also checked before the
+    // typescript branch for the same reason (JS tooling drops a package.json).
     const dotnetFiles = await fg(['*.sln', '*.csproj'], {
         cwd: root,
         dot: false,
@@ -63,6 +66,11 @@ export async function detectProjectType(repoRoot) {
     });
     if (dotnetFiles.length > 0)
         return 'dotnet';
+    // ── TypeScript ───────────────────────────────────────────────────────────
+    // package.json or tsconfig.json present
+    const hasTsConfig = await exists(path.join(root, 'tsconfig.json'));
+    if (hasPkgJson || hasTsConfig)
+        return 'typescript';
     // ── Python ───────────────────────────────────────────────────────────────
     const hasPyProject = await exists(path.join(root, 'pyproject.toml'));
     const hasRequirements = await exists(path.join(root, 'requirements.txt'));
@@ -86,7 +94,12 @@ export async function detectProjectType(repoRoot) {
  * scan returns 'unknown' (e.g. repos that only contain instruction files, no source).
  * Checks the combined content of all scanned instruction files for strong signals.
  *
- * Detection order: nextjs → unity → typescript → dotnet → python → go → rust → unknown
+ * Detection order: nextjs → unity → dotnet → typescript → python → go → rust → unknown
+ *
+ * .NET is checked before typescript for the same reason as in the file-system
+ * probe above: .NET repos commonly mention JS tooling (pnpm, npm run, jest) in
+ * their instructions, so the broader typescript signals must not shadow the
+ * more specific .NET ones.
  */
 export function detectProjectTypeFromContent(files) {
     const combined = files.map((f) => f.content).join('\n');
@@ -96,12 +109,12 @@ export function detectProjectTypeFromContent(files) {
     if ((/\bunity\b/i.test(combined) && /\b(lts|editor|hub|engine)\b/i.test(combined)) || /\bmonobehaviour\b|\bunityengine\b|\bgameobject\b|\bprefab\b|\bscriptableobject\b/i.test(combined)) {
         return 'unity';
     }
-    if (/\btypescript\b|\btsconfig\b|\btsc\s|\bpnpm\b|\bnpm\s+run\b|\bvitest\b|\bjest\b/i.test(combined)) {
-        return 'typescript';
-    }
     if (/\bdotnet\b|\.sln\b|\.csproj\b|\bxunit\b|\bnunit\b|\bmstest\b/i.test(combined)) {
         return 'dotnet';
     }
+    if (/\btypescript\b|\btsconfig\b|\btsc\s|\bpnpm\b|\bnpm\s+run\b|\bvitest\b|\bjest\b/i.test(combined)) {
+        return 'typescript';
+    }
     if (/\bpython\b|\bpip\b|\bpoetry\b|\bvenv\b|\bpytest\b|\bpyproject\.toml\b/i.test(combined)) {
         return 'python';
     }

package/dist/project-type.js.map

@@ -1 +1 @@
-{"version":3,"file":"project-type.js","sourceRoot":"","sources":["../src/project-type.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,kBAAkB,CAAC;AACvC,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAClC,OAAO,EAAE,MAAM,WAAW,CAAC;AAG3B,KAAK,UAAU,MAAM,CAAC,CAAS;IAC7B,IAAI,CAAC;QACH,MAAM,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;QACnB,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,KAAK,UAAU,SAAS,CAAC,CAAS;IAChC,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAC9B,OAAO,IAAI,CAAC,WAAW,EAAE,CAAC;IAC5B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,QAAgB;IACtD,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;IAEpC,4EAA4E;IAC5E,kEAAkE;IAClE,MAAM,cAAc,GAAG,MAAM,EAAE,CAAC,eAAe,EAAE;QAC/C,GAAG,EAAE,IAAI;QACT,GAAG,EAAE,KAAK;QACV,mBAAmB,EAAE,KAAK;QAC1B,IAAI,EAAE,CAAC;KACR,CAAC,CAAC;IACH,IAAI,cAAc,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,QAAQ,CAAC;IAE/C,MAAM,UAAU,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,cAAc,CAAC,CAAC,CAAC;IACjE,IAAI,UAAU,EAAE,CAAC;QACf,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC;QACvD,MAAM,QAAQ,GAAG,MAAM,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC;QAC3D,IAAI,MAAM,IAAI,QAAQ;YAAE,OAAO,QAAQ,CAAC;IAC1C,CAAC;IAED,4EAA4E;IAC5E,wCAAwC;IACxC,MAAM,WAAW,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,eAAe,CAAC,CAAC,CAAC;IACnE,IAAI,UAAU,IAAI,WAAW;QAAE,OAAO,YAAY,CAAC;IAEnD,4EAA4E;IAC5E,sEAAsE;IACtE,MAAM,SAAS,GAAG,MAAM,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC,CAAC;IAC7D,MAAM,iBAAiB,GAAG,MAAM,MAAM,CACpC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,iBAAiB,EAAE,oBAAoB,CAAC,CACzD,CAAC;IACF,IAAI,SAAS,IAAI,iBAAiB;QAAE,OAAO,OAAO,CAAC;IAEnD,4EAA4E;IAC5E,8CAA8C;IAC9C,MAAM,WAAW,GAAG,MAAM,EAAE,CAAC,CAAC,OAAO,EAAE,UAAU,CAAC,EAAE;QAClD,GAAG,EAAE,IAAI;QACT,GAAG,EAAE,KAAK;QACV,mBAAmB,EAAE,KAAK;QAC1B,IAAI,EAAE,CAAC;KACR,CAAC,CAAC;IACH,IAAI,WAAW,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,QAAQ,CAAC;IAE5C,4EAA4E;IAC5E,MAAM,YAAY,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,gBAAgB,CAAC,CAAC,CAAC;IACrE,MAAM,eAAe,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,kBAAkB,CAAC,CAAC,CAAC;IAC1E,MAAM,UAAU,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC,CAAC;IAC5D,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,iBAAiB,CAAC,CAAC,CAAC;IAClE,MAAM,UAAU,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC,CAAC;IAC7D,IAAI,YAAY,IAAI,eAAe,IAAI,UAAU,IAAI,QAAQ,IAAI,UAAU;QAAE,OAAO,QAAQ,CAAC;IAE7F,4EAA4E;IAC5E,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC,CAAC;IACzD,IAAI,QAAQ;QAAE,OAAO,IAAI,CAAC;IAE1B,4EAA4E;IAC5E,MAAM,YAAY,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,YAAY,CAAC,CAAC,CAAC;IACjE,IAAI,YAAY;QAAE,OAAO,MAAM,CAAC;IAEhC,OAAO,SAAS,CAAC;AACnB,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,4BAA4B,CAAC,KAAwB;IACnE,MAAM,QAAQ,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAExD,IAAI,qFAAqF,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;QACzG,OAAO,QAAQ,CAAC;IAClB,CAAC;IACD,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,8BAA8B,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,IAAI,mFAAmF,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;QACzL,OAAO,OAAO,CAAC;IACjB,CAAC;IACD,IAAI,iFAAiF,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;QACrG,OAAO,YAAY,CAAC;IACtB,CAAC;IACD,IAAI,+DAA+D,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;QACnF,OAAO,QAAQ,CAAC;IAClB,CAAC;IACD,IAAI,wEAAwE,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC5F,OAAO,QAAQ,CAAC;IAClB,CAAC;IACD,IAAI,2DAA2D,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC/E,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,oEAAoE,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;QACxF,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,OAAO,SAAS,CAAC;AACnB,CAAC"}
+{"version":3,"file":"project-type.js","sourceRoot":"","sources":["../src/project-type.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,kBAAkB,CAAC;AACvC,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAClC,OAAO,EAAE,MAAM,WAAW,CAAC;AAG3B,KAAK,UAAU,MAAM,CAAC,CAAS;IAC7B,IAAI,CAAC;QACH,MAAM,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;QACnB,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,KAAK,UAAU,SAAS,CAAC,CAAS;IAChC,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAC9B,OAAO,IAAI,CAAC,WAAW,EAAE,CAAC;IAC5B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,QAAgB;IACtD,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;IAEpC,4EAA4E;IAC5E,kEAAkE;IAClE,MAAM,cAAc,GAAG,MAAM,EAAE,CAAC,eAAe,EAAE;QAC/C,GAAG,EAAE,IAAI;QACT,GAAG,EAAE,KAAK;QACV,mBAAmB,EAAE,KAAK;QAC1B,IAAI,EAAE,CAAC;KACR,CAAC,CAAC;IACH,IAAI,cAAc,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,QAAQ,CAAC;IAE/C,MAAM,UAAU,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,cAAc,CAAC,CAAC,CAAC;IACjE,IAAI,UAAU,EAAE,CAAC;QACf,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC;QACvD,MAAM,QAAQ,GAAG,MAAM,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC;QAC3D,IAAI,MAAM,IAAI,QAAQ;YAAE,OAAO,QAAQ,CAAC;IAC1C,CAAC;IAED,4EAA4E;IAC5E,uEAAuE;IACvE,2EAA2E;IAC3E,wDAAwD;IACxD,MAAM,SAAS,GAAG,MAAM,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC,CAAC;IAC7D,MAAM,iBAAiB,GAAG,MAAM,MAAM,CACpC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,iBAAiB,EAAE,oBAAoB,CAAC,CACzD,CAAC;IACF,IAAI,SAAS,IAAI,iBAAiB;QAAE,OAAO,OAAO,CAAC;IAEnD,4EAA4E;IAC5E,uEAAuE;IACvE,2EAA2E;IAC3E,MAAM,WAAW,GAAG,MAAM,EAAE,CAAC,CAAC,OAAO,EAAE,UAAU,CAAC,EAAE;QAClD,GAAG,EAAE,IAAI;QACT,GAAG,EAAE,KAAK;QACV,mBAAmB,EAAE,KAAK;QAC1B,IAAI,EAAE,CAAC;KACR,CAAC,CAAC;IACH,IAAI,WAAW,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,QAAQ,CAAC;IAE5C,4EAA4E;IAC5E,wCAAwC;IACxC,MAAM,WAAW,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,eAAe,CAAC,CAAC,CAAC;IACnE,IAAI,UAAU,IAAI,WAAW;QAAE,OAAO,YAAY,CAAC;IAEnD,4EAA4E;IAC5E,MAAM,YAAY,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,gBAAgB,CAAC,CAAC,CAAC;IACrE,MAAM,eAAe,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,kBAAkB,CAAC,CAAC,CAAC;IAC1E,MAAM,UAAU,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC,CAAC;IAC5D,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,iBAAiB,CAAC,CAAC,CAAC;IAClE,MAAM,UAAU,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC,CAAC;IAC7D,IAAI,YAAY,IAAI,eAAe,IAAI,UAAU,IAAI,QAAQ,IAAI,UAAU;QAAE,OAAO,QAAQ,CAAC;IAE7F,4EAA4E;IAC5E,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC,CAAC;IACzD,IAAI,QAAQ;QAAE,OAAO,IAAI,CAAC;IAE1B,4EAA4E;IAC5E,MAAM,YAAY,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,YAAY,CAAC,CAAC,CAAC;IACjE,IAAI,YAAY;QAAE,OAAO,MAAM,CAAC;IAEhC,OAAO,SAAS,CAAC;AACnB,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,4BAA4B,CAAC,KAAwB;IACnE,MAAM,QAAQ,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAExD,IAAI,qFAAqF,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;QACzG,OAAO,QAAQ,CAAC;IAClB,CAAC;IACD,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,8BAA8B,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,IAAI,mFAAmF,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;QACzL,OAAO,OAAO,CAAC;IACjB,CAAC;IACD,IAAI,+DAA+D,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;QACnF,OAAO,QAAQ,CAAC;IAClB,CAAC;IACD,IAAI,iFAAiF,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;QACrG,OAAO,YAAY,CAAC;IACtB,CAAC;IACD,IAAI,wEAAwE,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC5F,OAAO,QAAQ,CAAC;IAClB,CAAC;IACD,IAAI,2DAA2D,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC/E,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,oEAAoE,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;QACxF,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,OAAO,SAAS,CAAC;AACnB,CAAC"}

package/dist/prompt-cache.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"prompt-cache.d.ts","sourceRoot":"","sources":["../src/prompt-cache.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAqCjE,wBAAgB,6BAA6B,CAAC,KAAK,EAAE,eAAe,EAAE,GAAG,aAAa,EAAE,CAiIvF"}
+{"version":3,"file":"prompt-cache.d.ts","sourceRoot":"","sources":["../src/prompt-cache.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAmDjE,wBAAgB,6BAA6B,CAAC,KAAK,EAAE,eAAe,EAAE,GAAG,aAAa,EAAE,CAiIvF"}

package/dist/prompt-cache.js

@@ -1,3 +1,4 @@
+import { matchEvidence } from './evidence.js';
 import * as path from 'node:path';
 import * as crypto from 'node:crypto';
 /**
@@ -10,33 +11,39 @@ function promptCacheIssueId(kind, filePath) {
     return `prompt-cache-${kind}-${hash}`;
 }
 const DATE_PATTERNS = [
-    /\b(?:last\s+updated|last\s+modified|updated\s+at|modified\s+at|date)\b\s*:\s*\b\d{4}-\d{2}-\d{2}\b/i,
-    /\b\d{4}-\d{2}-\d{2}t\d{2}:\d{2}:\d{2}\b/i,
-    /\b(?:january|february|march|april|may|june|july|august|september|october|november|december)\s+\d{1,2}(?:st|nd|rd|th)?,\s+\d{4}\b/i,
+    {
+        re: /\b(?:last\s+updated|last\s+modified|updated\s+at|modified\s+at|date)\b\s*:\s*\b\d{4}-\d{2}-\d{2}\b/i,
+        label: 'Dated "last updated"/"modified" line',
+    },
+    { re: /\b\d{4}-\d{2}-\d{2}t\d{2}:\d{2}:\d{2}\b/i, label: 'ISO 8601 timestamp' },
+    {
+        re: /\b(?:january|february|march|april|may|june|july|august|september|october|november|december)\s+\d{1,2}(?:st|nd|rd|th)?,\s+\d{4}\b/i,
+        label: 'Long-form calendar date',
+    },
 ];
 const SCAN_REPORT_PATTERNS = [
-    /health\s+score\s*:\s*\d+/i,
-    /files\s+scanned\s*:\s*\d+/i,
-    /promptci\s+report/i,
-    /\bgenerated\s+by\s+promptci\b/i,
-    /latest\s+scan\s+results/i,
-    /scan\s+history/i,
+    { re: /health\s+score\s*:\s*\d+/i, label: 'Health-score line from a scan report' },
+    { re: /files\s+scanned\s*:\s*\d+/i, label: 'File-count line from a scan report' },
+    { re: /promptci\s+report/i, label: 'PromptCI report heading' },
+    { re: /\bgenerated\s+by\s+promptci\b/i, label: 'PromptCI generated-by marker' },
+    { re: /latest\s+scan\s+results/i, label: 'Pasted "latest scan results" section' },
+    { re: /scan\s+history/i, label: 'Pasted "scan history" section' },
 ];
 const BRANCH_TASK_PATTERNS = [
-    /current\s+branch\s*:\s*\S+/i,
-    /git\s+branch\s*:\s*\S+/i,
-    /current\s+task\s*:\s*\S+/i,
+    { re: /current\s+branch\s*:\s*\S+/i, label: 'Current-branch line' },
+    { re: /git\s+branch\s*:\s*\S+/i, label: 'Git-branch line' },
+    { re: /current\s+task\s*:\s*\S+/i, label: 'Current-task line' },
 ];
 const LOCAL_PATH_PATTERN = /(?:[a-zA-Z]:\\users\\[a-zA-Z0-9_-]+)|(?:\/users\/[a-zA-Z0-9_-]+\/)|(?:\/home\/(?!runner)[a-zA-Z0-9_-]+\/)/i;
 export function detectPromptCacheFriendliness(files) {
     const issues = [];
     // Focus only on persistent, always-loaded instruction files
-    const targetFiles = files.filter((f) => ['claude', 'agents', 'cursor', 'copilot', 'prompt'].includes(f.fileType));
+    const targetFiles = files.filter((f) => ['claude', 'agents', 'cursor', 'windsurf', 'copilot', 'prompt'].includes(f.fileType));
     for (const file of targetFiles) {
         const fileName = path.basename(file.path);
         // 1. Timestamps and Dates
         for (const pat of DATE_PATTERNS) {
-            if (pat.test(file.content)) {
+            if (pat.re.test(file.content)) {
                 issues.push({
                     id: promptCacheIssueId('volatile-timestamp', file.path),
                     severity: 'warning',
@@ -45,7 +52,7 @@ export function detectPromptCacheFriendliness(files) {
                     summary: `The instruction file "${fileName}" contains a volatile date or timestamp. Frequently changing dates in persistent instruction files invalidate prompt caches.`,
                     filePaths: [file.path],
                     locations: [],
-                    evidence: [`Matched pattern: ${pat.toString()}`],
+                    evidence: [matchEvidence(file.content, pat.re, pat.label)],
                     recommendation: 'Move volatile dates to a separate task-specific prompt or scratch file, or remove them from canonical instructions.',
                     fixRecipe: 'Remove the "Last updated: <date>" or timestamp line from the file.',
                     confidence: 0.85,
@@ -55,7 +62,7 @@ export function detectPromptCacheFriendliness(files) {
         }
         // 2. Pasted Scan Outputs/Reports
         for (const pat of SCAN_REPORT_PATTERNS) {
-            if (pat.test(file.content)) {
+            if (pat.re.test(file.content)) {
                 issues.push({
                     id: promptCacheIssueId('pasted-report', file.path),
                     severity: 'warning',
@@ -64,7 +71,7 @@ export function detectPromptCacheFriendliness(files) {
                     summary: `The instruction file "${fileName}" contains pasted scan results or reports. Committing generated reports into canonical instruction files breaks prompt caching and bloats context.`,
                     filePaths: [file.path],
                     locations: [],
-                    evidence: [`Matched pattern: ${pat.toString()}`],
+                    evidence: [matchEvidence(file.content, pat.re, pat.label)],
                     recommendation: 'Link to the generated report file or read it on-demand instead of pasting its contents into canonical instructions.',
                     fixRecipe: 'Delete the pasted report summary block and reference the report file path instead.',
                     confidence: 0.9,
@@ -74,7 +81,7 @@ export function detectPromptCacheFriendliness(files) {
         }
         // 3. Current Branch or Task status
         for (const pat of BRANCH_TASK_PATTERNS) {
-            if (pat.test(file.content)) {
+            if (pat.re.test(file.content)) {
                 issues.push({
                     id: promptCacheIssueId('volatile-branch-task', file.path),
                     severity: 'warning',
@@ -83,7 +90,7 @@ export function detectPromptCacheFriendliness(files) {
                     summary: `The instruction file "${fileName}" contains active git branch or task details. Frequently updated task status or branch names break prompt caching.`,
                     filePaths: [file.path],
                     locations: [],
-                    evidence: [`Matched pattern: ${pat.toString()}`],
+                    evidence: [matchEvidence(file.content, pat.re, pat.label)],
                     recommendation: 'Move branch-specific notes and active task details to git commit messages, PR descriptions, or a temporary scratch file.',
                     fixRecipe: 'Remove active branch and task notes from the persistent instructions.',
                     confidence: 0.85,

package/dist/prompt-cache.js.map

@@ -1 +1 @@
-{"version":3,"file":"prompt-cache.js","sourceRoot":"","sources":["../src/prompt-cache.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAClC,OAAO,KAAK,MAAM,MAAM,aAAa,CAAC;AAEtC;;;;GAIG;AACH,SAAS,kBAAkB,CAAC,IAAY,EAAE,QAAgB;IACxD,MAAM,IAAI,GAAG,MAAM,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,gBAAgB,IAAI,IAAI,QAAQ,EAAE,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IAC7G,OAAO,gBAAgB,IAAI,IAAI,IAAI,EAAE,CAAC;AACxC,CAAC;AAED,MAAM,aAAa,GAAG;IACpB,qGAAqG;IACrG,0CAA0C;IAC1C,mIAAmI;CACpI,CAAC;AAEF,MAAM,oBAAoB,GAAG;IAC3B,2BAA2B;IAC3B,4BAA4B;IAC5B,oBAAoB;IACpB,gCAAgC;IAChC,0BAA0B;IAC1B,iBAAiB;CAClB,CAAC;AAEF,MAAM,oBAAoB,GAAG;IAC3B,6BAA6B;IAC7B,yBAAyB;IACzB,2BAA2B;CAC5B,CAAC;AAEF,MAAM,kBAAkB,GAAG,4GAA4G,CAAC;AAExI,MAAM,UAAU,6BAA6B,CAAC,KAAwB;IACpE,MAAM,MAAM,GAAoB,EAAE,CAAC;IAEnC,4DAA4D;IAC5D,MAAM,WAAW,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CACrC,CAAC,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE,SAAS,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,CACzE,CAAC;IAEF,KAAK,MAAM,IAAI,IAAI,WAAW,EAAE,CAAC;QAC/B,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAE1C,0BAA0B;QAC1B,KAAK,MAAM,GAAG,IAAI,aAAa,EAAE,CAAC;YAChC,IAAI,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;gBAC3B,MAAM,CAAC,IAAI,CAAC;oBACV,EAAE,EAAE,kBAAkB,CAAC,oBAAoB,EAAE,IAAI,CAAC,IAAI,CAAC;oBACvD,QAAQ,EAAE,SAAS;oBACnB,QAAQ,EAAE,eAAe;oBACzB,KAAK,EAAE,wCAAwC;oBAC/C,OAAO,EAAE,yBAAyB,QAAQ,8HAA8H;oBACxK,SAAS,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC;oBACtB,SAAS,EAAE,EAAE;oBACb,QAAQ,EAAE,CAAC,oBAAoB,GAAG,CAAC,QAAQ,EAAE,EAAE,CAAC;oBAChD,cAAc,EAAE,qHAAqH;oBACrI,SAAS,EAAE,oEAAoE;oBAC/E,UAAU,EAAE,IAAI;iBACjB,CAAC,CAAC;gBACH,MAAM,CAAC,gBAAgB;YACzB,CAAC;QACH,CAAC;QAED,iCAAiC;QACjC,KAAK,MAAM,GAAG,IAAI,oBAAoB,EAAE,CAAC;YACvC,IAAI,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;gBAC3B,MAAM,CAAC,IAAI,CAAC;oBACV,EAAE,EAAE,kBAAkB,CAAC,eAAe,EAAE,IAAI,CAAC,IAAI,CAAC;oBAClD,QAAQ,EAAE,SAAS;oBACnB,QAAQ,EAAE,eAAe;oBACzB,KAAK,EAAE,+CAA+C;oBACtD,OAAO,EAAE,yBAAyB,QAAQ,oJAAoJ;oBAC9L,SAAS,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC;oBACtB,SAAS,EAAE,EAAE;oBACb,QAAQ,EAAE,CAAC,oBAAoB,GAAG,CAAC,QAAQ,EAAE,EAAE,CAAC;oBAChD,cAAc,EAAE,qHAAqH;oBACrI,SAAS,EAAE,oFAAoF;oBAC/F,UAAU,EAAE,GAAG;iBAChB,CAAC,CAAC;gBACH,MAAM;YACR,CAAC;QACH,CAAC;QAED,mCAAmC;QACnC,KAAK,MAAM,GAAG,IAAI,oBAAoB,EAAE,CAAC;YACvC,IAAI,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;gBAC3B,MAAM,CAAC,IAAI,CAAC;oBACV,EAAE,EAAE,kBAAkB,CAAC,sBAAsB,EAAE,IAAI,CAAC,IAAI,CAAC;oBACzD,QAAQ,EAAE,SAAS;oBACnB,QAAQ,EAAE,eAAe;oBACzB,KAAK,EAAE,gDAAgD;oBACvD,OAAO,EAAE,yBAAyB,QAAQ,oHAAoH;oBAC9J,SAAS,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC;oBACtB,SAAS,EAAE,EAAE;oBACb,QAAQ,EAAE,CAAC,oBAAoB,GAAG,CAAC,QAAQ,EAAE,EAAE,CAAC;oBAChD,cAAc,EAAE,0HAA0H;oBAC1I,SAAS,EAAE,uEAAuE;oBAClF,UAAU,EAAE,IAAI;iBACjB,CAAC,CAAC;gBACH,MAAM;YACR,CAAC;QACH,CAAC;QAED,sBAAsB;QACtB,IAAI,kBAAkB,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;YAC1C,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,kBAAkB,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;YAChE,MAAM,CAAC,IAAI,CAAC;gBACV,EAAE,EAAE,kBAAkB,CAAC,aAAa,EAAE,IAAI,CAAC,IAAI,CAAC;gBAChD,QAAQ,EAAE,SAAS;gBACnB,QAAQ,EAAE,eAAe;gBACzB,KAAK,EAAE,qCAAqC;gBAC5C,OAAO,EAAE,yBAAyB,QAAQ,6CAA6C,KAAK,kGAAkG;gBAC9L,SAAS,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC;gBACtB,SAAS,EAAE,EAAE;gBACb,QAAQ,EAAE,CAAC,8BAA8B,KAAK,EAAE,CAAC;gBACjD,cAAc,EAAE,wEAAwE;gBACxF,SAAS,EAAE,8DAA8D;gBACzE,UAAU,EAAE,GAAG;aAChB,CAAC,CAAC;QACL,CAAC;QAED,sCAAsC;QACtC,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QAC1C,IAAI,YAAY,GAAG,CAAC,CAAC;QACrB,IAAI,gBAAgB,GAAG,CAAC,CAAC;QACzB,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;YAC5B,IAAI,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;gBACrD,IAAI,gBAAgB,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;oBACnC,SAAS;gBACX,CAAC;gBACD,gBAAgB,EAAE,CAAC;YACrB,CAAC;iBAAM,CAAC;gBACN,IAAI,gBAAgB,GAAG,YAAY,EAAE,CAAC;oBACpC,YAAY,GAAG,gBAAgB,CAAC;gBAClC,CAAC;gBACD,gBAAgB,GAAG,CAAC,CAAC;YACvB,CAAC;QACH,CAAC;QACD,IAAI,gBAAgB,GAAG,YAAY,EAAE,CAAC;YACpC,YAAY,GAAG,gBAAgB,CAAC;QAClC,CAAC;QAED,IAAI,YAAY,GAAG,EAAE,EAAE,CAAC;YACtB,MAAM,CAAC,IAAI,CAAC;gBACV,EAAE,EAAE,kBAAkB,CAAC,aAAa,EAAE,IAAI,CAAC,IAAI,CAAC;gBAChD,QAAQ,EAAE,SAAS;gBACnB,QAAQ,EAAE,eAAe;gBACzB,KAAK,EAAE,iCAAiC;gBACxC,OAAO,EAAE,yBAAyB,QAAQ,sCAAsC,YAAY,4EAA4E;gBACxK,SAAS,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC;gBACtB,SAAS,EAAE,EAAE;gBACb,QAAQ,EAAE,CAAC,uBAAuB,YAAY,kBAAkB,QAAQ,GAAG,CAAC;gBAC5E,cAAc,EAAE,8JAA8J;gBAC9K,SAAS,EAAE,0DAA0D;gBACrE,UAAU,EAAE,GAAG;aAChB,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC"}
+{"version":3,"file":"prompt-cache.js","sourceRoot":"","sources":["../src/prompt-cache.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AAC9C,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAClC,OAAO,KAAK,MAAM,MAAM,aAAa,CAAC;AAEtC;;;;GAIG;AACH,SAAS,kBAAkB,CAAC,IAAY,EAAE,QAAgB;IACxD,MAAM,IAAI,GAAG,MAAM,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,gBAAgB,IAAI,IAAI,QAAQ,EAAE,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IAC7G,OAAO,gBAAgB,IAAI,IAAI,IAAI,EAAE,CAAC;AACxC,CAAC;AASD,MAAM,aAAa,GAAsB;IACvC;QACE,EAAE,EAAE,qGAAqG;QACzG,KAAK,EAAE,sCAAsC;KAC9C;IACD,EAAE,EAAE,EAAE,0CAA0C,EAAE,KAAK,EAAE,oBAAoB,EAAE;IAC/E;QACE,EAAE,EAAE,mIAAmI;QACvI,KAAK,EAAE,yBAAyB;KACjC;CACF,CAAC;AAEF,MAAM,oBAAoB,GAAsB;IAC9C,EAAE,EAAE,EAAE,2BAA2B,EAAE,KAAK,EAAE,sCAAsC,EAAE;IAClF,EAAE,EAAE,EAAE,4BAA4B,EAAE,KAAK,EAAE,oCAAoC,EAAE;IACjF,EAAE,EAAE,EAAE,oBAAoB,EAAE,KAAK,EAAE,yBAAyB,EAAE;IAC9D,EAAE,EAAE,EAAE,gCAAgC,EAAE,KAAK,EAAE,8BAA8B,EAAE;IAC/E,EAAE,EAAE,EAAE,0BAA0B,EAAE,KAAK,EAAE,sCAAsC,EAAE;IACjF,EAAE,EAAE,EAAE,iBAAiB,EAAE,KAAK,EAAE,+BAA+B,EAAE;CAClE,CAAC;AAEF,MAAM,oBAAoB,GAAsB;IAC9C,EAAE,EAAE,EAAE,6BAA6B,EAAE,KAAK,EAAE,qBAAqB,EAAE;IACnE,EAAE,EAAE,EAAE,yBAAyB,EAAE,KAAK,EAAE,iBAAiB,EAAE;IAC3D,EAAE,EAAE,EAAE,2BAA2B,EAAE,KAAK,EAAE,mBAAmB,EAAE;CAChE,CAAC;AAEF,MAAM,kBAAkB,GAAG,4GAA4G,CAAC;AAExI,MAAM,UAAU,6BAA6B,CAAC,KAAwB;IACpE,MAAM,MAAM,GAAoB,EAAE,CAAC;IAEnC,4DAA4D;IAC5D,MAAM,WAAW,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CACrC,CAAC,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE,UAAU,EAAE,SAAS,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,CACrF,CAAC;IAEF,KAAK,MAAM,IAAI,IAAI,WAAW,EAAE,CAAC;QAC/B,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAE1C,0BAA0B;QAC1B,KAAK,MAAM,GAAG,IAAI,aAAa,EAAE,CAAC;YAChC,IAAI,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;gBAC9B,MAAM,CAAC,IAAI,CAAC;oBACV,EAAE,EAAE,kBAAkB,CAAC,oBAAoB,EAAE,IAAI,CAAC,IAAI,CAAC;oBACvD,QAAQ,EAAE,SAAS;oBACnB,QAAQ,EAAE,eAAe;oBACzB,KAAK,EAAE,wCAAwC;oBAC/C,OAAO,EAAE,yBAAyB,QAAQ,8HAA8H;oBACxK,SAAS,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC;oBACtB,SAAS,EAAE,EAAE;oBACb,QAAQ,EAAE,CAAC,aAAa,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,CAAC,EAAE,EAAE,GAAG,CAAC,KAAK,CAAC,CAAC;oBAC1D,cAAc,EAAE,qHAAqH;oBACrI,SAAS,EAAE,oEAAoE;oBAC/E,UAAU,EAAE,IAAI;iBACjB,CAAC,CAAC;gBACH,MAAM,CAAC,gBAAgB;YACzB,CAAC;QACH,CAAC;QAED,iCAAiC;QACjC,KAAK,MAAM,GAAG,IAAI,oBAAoB,EAAE,CAAC;YACvC,IAAI,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;gBAC9B,MAAM,CAAC,IAAI,CAAC;oBACV,EAAE,EAAE,kBAAkB,CAAC,eAAe,EAAE,IAAI,CAAC,IAAI,CAAC;oBAClD,QAAQ,EAAE,SAAS;oBACnB,QAAQ,EAAE,eAAe;oBACzB,KAAK,EAAE,+CAA+C;oBACtD,OAAO,EAAE,yBAAyB,QAAQ,oJAAoJ;oBAC9L,SAAS,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC;oBACtB,SAAS,EAAE,EAAE;oBACb,QAAQ,EAAE,CAAC,aAAa,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,CAAC,EAAE,EAAE,GAAG,CAAC,KAAK,CAAC,CAAC;oBAC1D,cAAc,EAAE,qHAAqH;oBACrI,SAAS,EAAE,oFAAoF;oBAC/F,UAAU,EAAE,GAAG;iBAChB,CAAC,CAAC;gBACH,MAAM;YACR,CAAC;QACH,CAAC;QAED,mCAAmC;QACnC,KAAK,MAAM,GAAG,IAAI,oBAAoB,EAAE,CAAC;YACvC,IAAI,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;gBAC9B,MAAM,CAAC,IAAI,CAAC;oBACV,EAAE,EAAE,kBAAkB,CAAC,sBAAsB,EAAE,IAAI,CAAC,IAAI,CAAC;oBACzD,QAAQ,EAAE,SAAS;oBACnB,QAAQ,EAAE,eAAe;oBACzB,KAAK,EAAE,gDAAgD;oBACvD,OAAO,EAAE,yBAAyB,QAAQ,oHAAoH;oBAC9J,SAAS,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC;oBACtB,SAAS,EAAE,EAAE;oBACb,QAAQ,EAAE,CAAC,aAAa,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,CAAC,EAAE,EAAE,GAAG,CAAC,KAAK,CAAC,CAAC;oBAC1D,cAAc,EAAE,0HAA0H;oBAC1I,SAAS,EAAE,uEAAuE;oBAClF,UAAU,EAAE,IAAI;iBACjB,CAAC,CAAC;gBACH,MAAM;YACR,CAAC;QACH,CAAC;QAED,sBAAsB;QACtB,IAAI,kBAAkB,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;YAC1C,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,kBAAkB,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;YAChE,MAAM,CAAC,IAAI,CAAC;gBACV,EAAE,EAAE,kBAAkB,CAAC,aAAa,EAAE,IAAI,CAAC,IAAI,CAAC;gBAChD,QAAQ,EAAE,SAAS;gBACnB,QAAQ,EAAE,eAAe;gBACzB,KAAK,EAAE,qCAAqC;gBAC5C,OAAO,EAAE,yBAAyB,QAAQ,6CAA6C,KAAK,kGAAkG;gBAC9L,SAAS,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC;gBACtB,SAAS,EAAE,EAAE;gBACb,QAAQ,EAAE,CAAC,8BAA8B,KAAK,EAAE,CAAC;gBACjD,cAAc,EAAE,wEAAwE;gBACxF,SAAS,EAAE,8DAA8D;gBACzE,UAAU,EAAE,GAAG;aAChB,CAAC,CAAC;QACL,CAAC;QAED,sCAAsC;QACtC,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QAC1C,IAAI,YAAY,GAAG,CAAC,CAAC;QACrB,IAAI,gBAAgB,GAAG,CAAC,CAAC;QACzB,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;YAC5B,IAAI,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;gBACrD,IAAI,gBAAgB,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;oBACnC,SAAS;gBACX,CAAC;gBACD,gBAAgB,EAAE,CAAC;YACrB,CAAC;iBAAM,CAAC;gBACN,IAAI,gBAAgB,GAAG,YAAY,EAAE,CAAC;oBACpC,YAAY,GAAG,gBAAgB,CAAC;gBAClC,CAAC;gBACD,gBAAgB,GAAG,CAAC,CAAC;YACvB,CAAC;QACH,CAAC;QACD,IAAI,gBAAgB,GAAG,YAAY,EAAE,CAAC;YACpC,YAAY,GAAG,gBAAgB,CAAC;QAClC,CAAC;QAED,IAAI,YAAY,GAAG,EAAE,EAAE,CAAC;YACtB,MAAM,CAAC,IAAI,CAAC;gBACV,EAAE,EAAE,kBAAkB,CAAC,aAAa,EAAE,IAAI,CAAC,IAAI,CAAC;gBAChD,QAAQ,EAAE,SAAS;gBACnB,QAAQ,EAAE,eAAe;gBACzB,KAAK,EAAE,iCAAiC;gBACxC,OAAO,EAAE,yBAAyB,QAAQ,sCAAsC,YAAY,4EAA4E;gBACxK,SAAS,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC;gBACtB,SAAS,EAAE,EAAE;gBACb,QAAQ,EAAE,CAAC,uBAAuB,YAAY,kBAAkB,QAAQ,GAAG,CAAC;gBAC5E,cAAc,EAAE,8JAA8J;gBAC9K,SAAS,EAAE,0DAA0D;gBACrE,UAAU,EAAE,GAAG;aAChB,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/promptci-gitignore.d.ts

@@ -0,0 +1,34 @@
+/**
+ * The recommended `.gitignore` stanza for the `.promptci/` directory.
+ *
+ * BUG-7: the old recommendation everywhere — `init`, the security-pack
+ * detector, the docs, and this repo's own .gitignore — was a bare
+ * `.promptci/`, which ignores the entire directory including
+ * `.promptci/baseline.json`. The CI ratchet (`--baseline` / `--fail-on-new`)
+ * only works when the team's agreed baseline is committed and readable in CI,
+ * so the recommended pattern was defeating the feature the directory exists to
+ * serve. `config.json` is carved out for the same reason: a per-repo config
+ * that only lives on one developer's machine is not a per-repo config.
+ *
+ * `custom-rules.json` is carved out on the same principle: custom rules must be
+ * committed for a local scan and the GitHub Action to see the same rules — a
+ * gitignored rule file would make the two disagree.
+ *
+ * Two details of the pattern are load-bearing:
+ *
+ *   - `.promptci/*` rather than `.promptci/`. Git does not descend into an
+ *     ignored *directory*, so with a trailing-slash pattern the `!` negations
+ *     below would never be evaluated. Matching the directory's *contents*
+ *     leaves them reachable.
+ *   - The leading globstar segment. A pattern containing a slash is anchored
+ *     to the .gitignore's own directory, so an unprefixed `.promptci/*` would
+ *     stop covering nested checkouts that the old unanchored `.promptci/` did
+ *     cover — in a monorepo, every sub-package's generated reports would start
+ *     showing up as untracked files.
+ */
+export declare const PROMPTCI_GITIGNORE_LINES: readonly string[];
+/** The same stanza as text, LF-terminated. Callers on CRLF files should re-join. */
+export declare const PROMPTCI_GITIGNORE_BLOCK: string;
+/** Renders the stanza with the given line ending, trailing terminator included. */
+export declare function renderPromptCiGitignore(lineEnding: string): string;
+//# sourceMappingURL=promptci-gitignore.d.ts.map

package/dist/promptci-gitignore.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"promptci-gitignore.d.ts","sourceRoot":"","sources":["../src/promptci-gitignore.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AACH,eAAO,MAAM,wBAAwB,EAAE,SAAS,MAAM,EAMrD,CAAC;AAEF,oFAAoF;AACpF,eAAO,MAAM,wBAAwB,EAAE,MAAmD,CAAC;AAE3F,mFAAmF;AACnF,wBAAgB,uBAAuB,CAAC,UAAU,EAAE,MAAM,GAAG,MAAM,CAElE"}

package/dist/promptci-gitignore.js

@@ -0,0 +1,42 @@
+/**
+ * The recommended `.gitignore` stanza for the `.promptci/` directory.
+ *
+ * BUG-7: the old recommendation everywhere — `init`, the security-pack
+ * detector, the docs, and this repo's own .gitignore — was a bare
+ * `.promptci/`, which ignores the entire directory including
+ * `.promptci/baseline.json`. The CI ratchet (`--baseline` / `--fail-on-new`)
+ * only works when the team's agreed baseline is committed and readable in CI,
+ * so the recommended pattern was defeating the feature the directory exists to
+ * serve. `config.json` is carved out for the same reason: a per-repo config
+ * that only lives on one developer's machine is not a per-repo config.
+ *
+ * `custom-rules.json` is carved out on the same principle: custom rules must be
+ * committed for a local scan and the GitHub Action to see the same rules — a
+ * gitignored rule file would make the two disagree.
+ *
+ * Two details of the pattern are load-bearing:
+ *
+ *   - `.promptci/*` rather than `.promptci/`. Git does not descend into an
+ *     ignored *directory*, so with a trailing-slash pattern the `!` negations
+ *     below would never be evaluated. Matching the directory's *contents*
+ *     leaves them reachable.
+ *   - The leading globstar segment. A pattern containing a slash is anchored
+ *     to the .gitignore's own directory, so an unprefixed `.promptci/*` would
+ *     stop covering nested checkouts that the old unanchored `.promptci/` did
+ *     cover — in a monorepo, every sub-package's generated reports would start
+ *     showing up as untracked files.
+ */
+export const PROMPTCI_GITIGNORE_LINES = [
+    '# PromptCI: ignore generated reports, keep the shared baseline, config, and custom rules',
+    '**/.promptci/*',
+    '!**/.promptci/baseline.json',
+    '!**/.promptci/config.json',
+    '!**/.promptci/custom-rules.json',
+];
+/** The same stanza as text, LF-terminated. Callers on CRLF files should re-join. */
+export const PROMPTCI_GITIGNORE_BLOCK = `${PROMPTCI_GITIGNORE_LINES.join('\n')}\n`;
+/** Renders the stanza with the given line ending, trailing terminator included. */
+export function renderPromptCiGitignore(lineEnding) {
+    return `${PROMPTCI_GITIGNORE_LINES.join(lineEnding)}${lineEnding}`;
+}
+//# sourceMappingURL=promptci-gitignore.js.map

package/dist/promptci-gitignore.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"promptci-gitignore.js","sourceRoot":"","sources":["../src/promptci-gitignore.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAAsB;IACzD,0FAA0F;IAC1F,gBAAgB;IAChB,6BAA6B;IAC7B,2BAA2B;IAC3B,iCAAiC;CAClC,CAAC;AAEF,oFAAoF;AACpF,MAAM,CAAC,MAAM,wBAAwB,GAAW,GAAG,wBAAwB,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC;AAE3F,mFAAmF;AACnF,MAAM,UAAU,uBAAuB,CAAC,UAAkB;IACxD,OAAO,GAAG,wBAAwB,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,UAAU,EAAE,CAAC;AACrE,CAAC"}