@salesforce/uibundle-sourcemap-validator-engine 11.35.0

package/dist/validators/sourcemap-io.d.ts

@@ -0,0 +1,21 @@
+/**
+ * Copyright (c) 2026, Salesforce, Inc.,
+ * All rights reserved.
+ * For full license text, see the LICENSE.txt file
+ */
+export interface RawSourceMap {
+    version: number;
+    file?: string;
+    sourceRoot?: string;
+    sources: (string | null)[];
+    sourcesContent?: (string | null)[];
+    names?: string[];
+    mappings: string;
+}
+export interface LoadedSourceMap {
+    path: string;
+    map: RawSourceMap;
+}
+export declare function collectSourceMaps(root: string): Promise<LoadedSourceMap[]>;
+export declare function walk(root: string, visit: (file: string) => Promise<void>): Promise<void>;
+//# sourceMappingURL=sourcemap-io.d.ts.map

package/dist/validators/sourcemap-io.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sourcemap-io.d.ts","sourceRoot":"","sources":["../../src/validators/sourcemap-io.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAKH,MAAM,WAAW,YAAY;IAC5B,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,OAAO,EAAE,CAAC,MAAM,GAAG,IAAI,CAAC,EAAE,CAAC;IAC3B,cAAc,CAAC,EAAE,CAAC,MAAM,GAAG,IAAI,CAAC,EAAE,CAAC;IACnC,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,eAAe;IAC/B,IAAI,EAAE,MAAM,CAAC;IACb,GAAG,EAAE,YAAY,CAAC;CAClB;AAED,wBAAsB,iBAAiB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,eAAe,EAAE,CAAC,CAehF;AAED,wBAAsB,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,CAe9F"}

package/dist/validators/sourcemap-io.js

@@ -0,0 +1,44 @@
+/**
+ * Copyright (c) 2026, Salesforce, Inc.,
+ * All rights reserved.
+ * For full license text, see the LICENSE.txt file
+ */
+import { promises as fs } from "node:fs";
+import * as path from "node:path";
+export async function collectSourceMaps(root) {
+    const out = [];
+    await walk(root, async (file) => {
+        if (!file.endsWith(".js.map"))
+            return;
+        try {
+            const raw = await fs.readFile(file, "utf8");
+            const map = JSON.parse(raw);
+            if (typeof map?.mappings === "string" && Array.isArray(map?.sources)) {
+                out.push({ path: file, map });
+            }
+        }
+        catch {
+            // Malformed JSON is surfaced by the vlq-integrity validator instead.
+        }
+    });
+    return out;
+}
+export async function walk(root, visit) {
+    let entries;
+    try {
+        entries = await fs.readdir(root, { withFileTypes: true });
+    }
+    catch {
+        return;
+    }
+    for (const entry of entries) {
+        const full = path.join(root, entry.name);
+        if (entry.isDirectory()) {
+            await walk(full, visit);
+        }
+        else if (entry.isFile()) {
+            await visit(full);
+        }
+    }
+}
+//# sourceMappingURL=sourcemap-io.js.map

package/dist/validators/sourcemap-io.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sourcemap-io.js","sourceRoot":"","sources":["../../src/validators/sourcemap-io.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,QAAQ,IAAI,EAAE,EAAE,MAAM,SAAS,CAAC;AACzC,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAiBlC,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,IAAY;IACnD,MAAM,GAAG,GAAsB,EAAE,CAAC;IAClC,MAAM,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE;QAC/B,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC;YAAE,OAAO;QACtC,IAAI,CAAC;YACJ,MAAM,GAAG,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;YAC5C,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAiB,CAAC;YAC5C,IAAI,OAAO,GAAG,EAAE,QAAQ,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,EAAE,OAAO,CAAC,EAAE,CAAC;gBACtE,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,CAAC;YAC/B,CAAC;QACF,CAAC;QAAC,MAAM,CAAC;YACR,qEAAqE;QACtE,CAAC;IACF,CAAC,CAAC,CAAC;IACH,OAAO,GAAG,CAAC;AACZ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,IAAI,CAAC,IAAY,EAAE,KAAsC;IAC9E,IAAI,OAAO,CAAC;IACZ,IAAI,CAAC;QACJ,OAAO,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;IAC3D,CAAC;IAAC,MAAM,CAAC;QACR,OAAO;IACR,CAAC;IACD,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAC7B,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;QACzC,IAAI,KAAK,CAAC,WAAW,EAAE,EAAE,CAAC;YACzB,MAAM,IAAI,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;QACzB,CAAC;aAAM,IAAI,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC;YAC3B,MAAM,KAAK,CAAC,IAAI,CAAC,CAAC;QACnB,CAAC;IACF,CAAC;AACF,CAAC"}

package/dist/validators/structural-coherence.d.ts

@@ -0,0 +1,29 @@
+/**
+ * Copyright (c) 2026, Salesforce, Inc.,
+ * All rights reserved.
+ * For full license text, see the LICENSE.txt file
+ */
+import { TraceMap } from "@jridgewell/trace-mapping";
+import type { ValidatorResult } from "./types.js";
+export declare const STRUCTURAL_COHERENCE_RULE = "structural-coherence";
+interface BoundsViolation {
+    sourceFile: string;
+    claimedLine: number;
+    claimedCol: number;
+    actualLines: number;
+}
+export interface StructuralCoherenceOptions {
+    sourcePath: string;
+    distPath: string;
+}
+export declare function validateStructuralCoherence(options: StructuralCoherenceOptions): Promise<ValidatorResult>;
+export declare function analyzeCoherence(tracer: TraceMap, sourceContents: Map<string, string>): {
+    totalMappingsChecked: number;
+    boundsViolations: BoundsViolation[];
+    whitespaceOnlyMappings: number;
+    suspiciousJumpRatio: number;
+};
+/** Ported from coherence.rs::points_to_whitespace_or_comment. */
+export declare function pointsToWhitespaceOrComment(source: string, line0: number, col0: number): boolean;
+export {};
+//# sourceMappingURL=structural-coherence.d.ts.map

package/dist/validators/structural-coherence.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"structural-coherence.d.ts","sourceRoot":"","sources":["../../src/validators/structural-coherence.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAIH,OAAO,EAAE,QAAQ,EAAiC,MAAM,2BAA2B,CAAC;AAGpF,OAAO,KAAK,EAAoB,eAAe,EAAE,MAAM,YAAY,CAAC;AAEpE,eAAO,MAAM,yBAAyB,yBAAyB,CAAC;AAQhE,UAAU,eAAe;IACxB,UAAU,EAAE,MAAM,CAAC;IACnB,WAAW,EAAE,MAAM,CAAC;IACpB,UAAU,EAAE,MAAM,CAAC;IACnB,WAAW,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,0BAA0B;IAC1C,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,MAAM,CAAC;CACjB;AAED,wBAAsB,2BAA2B,CAChD,OAAO,EAAE,0BAA0B,GACjC,OAAO,CAAC,eAAe,CAAC,CAgF1B;AAED,wBAAgB,gBAAgB,CAC/B,MAAM,EAAE,QAAQ,EAChB,cAAc,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,GACjC;IACF,oBAAoB,EAAE,MAAM,CAAC;IAC7B,gBAAgB,EAAE,eAAe,EAAE,CAAC;IACpC,sBAAsB,EAAE,MAAM,CAAC;IAC/B,mBAAmB,EAAE,MAAM,CAAC;CAC5B,CA6GA;AAED,iEAAiE;AACjE,wBAAgB,2BAA2B,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAqBhG"}

package/dist/validators/structural-coherence.js

@@ -0,0 +1,247 @@
+/**
+ * Copyright (c) 2026, Salesforce, Inc.,
+ * All rights reserved.
+ * For full license text, see the LICENSE.txt file
+ */
+import { promises as fs } from "node:fs";
+import * as path from "node:path";
+import { TraceMap, eachMapping, sourceContentFor } from "@jridgewell/trace-mapping";
+import { isAsset, isDependency, normalizeSourcePath } from "./classification.js";
+import { walk } from "./sourcemap-io.js";
+export const STRUCTURAL_COHERENCE_RULE = "structural-coherence";
+// Ported from uibundle-sourcemap-validator/src/coherence.rs
+const WHITESPACE_SAMPLE_INTERVAL = 10;
+const WHITESPACE_SUSPICION_THRESHOLD = 0.8;
+const JUMP_RATIO_WARN = 0.5;
+const MAX_LISTED_BOUNDS = 10;
+export async function validateStructuralCoherence(options) {
+    let sourceStat, distStat;
+    try {
+        sourceStat = await fs.stat(options.sourcePath);
+    }
+    catch {
+        return { findings: [], skipped: { reason: `source path not found: ${options.sourcePath}` } };
+    }
+    try {
+        distStat = await fs.stat(options.distPath);
+    }
+    catch {
+        return { findings: [], skipped: { reason: `dist path not found: ${options.distPath}` } };
+    }
+    if (!sourceStat.isDirectory() || !distStat.isDirectory()) {
+        return { findings: [], skipped: { reason: "source and dist must both be directories" } };
+    }
+    const rawIndex = await indexSourceFiles(options.sourcePath);
+    const sourceIndex = expandIndexWithBase(rawIndex, path.basename(options.sourcePath));
+    const findings = [];
+    await walk(options.distPath, async (jsPath) => {
+        if (!jsPath.endsWith(".js"))
+            return;
+        const mapPath = `${jsPath}.map`;
+        let mapRaw;
+        try {
+            mapRaw = await fs.readFile(mapPath, "utf8");
+        }
+        catch {
+            return;
+        }
+        let tracer;
+        try {
+            tracer = new TraceMap(mapRaw);
+        }
+        catch {
+            return;
+        }
+        const report = analyzeCoherence(tracer, sourceIndex);
+        if (report.totalMappingsChecked === 0)
+            return;
+        // Bounds violations
+        if (report.boundsViolations.length > 0) {
+            findings.push({
+                ruleName: STRUCTURAL_COHERENCE_RULE,
+                message: `${report.boundsViolations.length} sourcemap mapping(s) point out of bounds of the referenced source file.`,
+                file: mapPath,
+            });
+            for (const v of report.boundsViolations.slice(0, MAX_LISTED_BOUNDS)) {
+                findings.push({
+                    ruleName: STRUCTURAL_COHERENCE_RULE,
+                    message: `Out-of-bounds: "${v.sourceFile}" claimed line ${v.claimedLine + 1}:${v.claimedCol + 1} but file has ${v.actualLines} line(s).`,
+                    file: mapPath,
+                });
+            }
+        }
+        // Whitespace/comment sampling
+        const sampled = Math.floor(report.totalMappingsChecked / WHITESPACE_SAMPLE_INTERVAL);
+        if (sampled > 0) {
+            const wsRatio = report.whitespaceOnlyMappings / sampled;
+            if (wsRatio > WHITESPACE_SUSPICION_THRESHOLD) {
+                findings.push({
+                    ruleName: STRUCTURAL_COHERENCE_RULE,
+                    message: `${(wsRatio * 100).toFixed(1)}% of sampled mappings point to whitespace or comments (${report.whitespaceOnlyMappings}/${sampled}). Threshold is ${WHITESPACE_SUSPICION_THRESHOLD * 100}%; sourcemap tokens may be fabricated to satisfy coverage without pointing at real code.`,
+                    file: mapPath,
+                });
+            }
+        }
+        // Cross-file jump ratio
+        if (report.suspiciousJumpRatio > JUMP_RATIO_WARN) {
+            findings.push({
+                ruleName: STRUCTURAL_COHERENCE_RULE,
+                message: `Cross-file jump ratio ${report.suspiciousJumpRatio.toFixed(2)} exceeds ${JUMP_RATIO_WARN}: majority of consecutive tokens on the same generated line jump between source files, which is unusual for real bundler output.`,
+                file: mapPath,
+            });
+        }
+    });
+    return { findings };
+}
+export function analyzeCoherence(tracer, sourceContents) {
+    // Cache line lengths per submitted normalized source path
+    const submittedLineLens = new Map();
+    for (const [key, content] of sourceContents) {
+        submittedLineLens.set(key, content.split("\n").map((l) => l.length));
+    }
+    // Cache line lengths per embedded source name (as it appears in sources[])
+    const embeddedLineLens = new Map();
+    const embeddedText = new Map();
+    let totalMappingsChecked = 0;
+    const boundsViolations = [];
+    let whitespaceOnlyMappings = 0;
+    let prevSource = null;
+    let prevDstLine = null;
+    let consecutivePairs = 0;
+    let crossFileJumps = 0;
+    let sampleIndex = 0;
+    eachMapping(tracer, (m) => {
+        if (m.source == null || m.originalLine == null || m.originalColumn == null)
+            return;
+        const srcRaw = m.source;
+        const normalized = normalizeSourcePath(srcRaw);
+        if (isAsset(normalized) || isDependency(normalized))
+            return;
+        // 0-based line/col in the Rust world (sourcemap crate returns 0-based),
+        // 1-based in trace-mapping's EachMapping. We normalize to 0-based here
+        // for direct parity with the ported algorithm.
+        const srcLine = m.originalLine - 1;
+        const srcCol = m.originalColumn;
+        const dstLine = m.generatedLine - 1;
+        let lineLens = submittedLineLens.get(normalized);
+        if (!lineLens) {
+            // Try embedded — cache computed line lengths per raw source name.
+            let cached = embeddedLineLens.get(srcRaw);
+            if (!cached) {
+                try {
+                    const contents = sourceContentFor(tracer, srcRaw);
+                    if (contents != null) {
+                        cached = contents.split("\n").map((l) => l.length);
+                        embeddedLineLens.set(srcRaw, cached);
+                        embeddedText.set(srcRaw, contents);
+                    }
+                }
+                catch {
+                    // ignore
+                }
+            }
+            if (!cached)
+                return;
+            lineLens = cached;
+        }
+        totalMappingsChecked++;
+        // --- Check 1: bounds ---
+        const actualLines = lineLens.length;
+        if (srcLine >= actualLines) {
+            boundsViolations.push({
+                sourceFile: normalized,
+                claimedLine: srcLine,
+                claimedCol: srcCol,
+                actualLines,
+            });
+        }
+        else {
+            const lineLen = lineLens[srcLine];
+            if (srcCol > lineLen) {
+                boundsViolations.push({
+                    sourceFile: normalized,
+                    claimedLine: srcLine,
+                    claimedCol: srcCol,
+                    actualLines,
+                });
+            }
+        }
+        // --- Check 2: whitespace/comment sampling (every 10th mapping) ---
+        if (sampleIndex % WHITESPACE_SAMPLE_INTERVAL === 0 && srcLine < actualLines) {
+            const sourceText = sourceContents.get(normalized) ?? embeddedText.get(srcRaw) ?? null;
+            if (sourceText != null && pointsToWhitespaceOrComment(sourceText, srcLine, srcCol)) {
+                whitespaceOnlyMappings++;
+            }
+        }
+        sampleIndex++;
+        // --- Check 3: cross-file jump ratio (consecutive tokens on same dst line) ---
+        if (prevDstLine !== null && dstLine === prevDstLine) {
+            if (prevSource !== null) {
+                consecutivePairs++;
+                if (prevSource !== srcRaw)
+                    crossFileJumps++;
+            }
+        }
+        prevSource = srcRaw;
+        prevDstLine = dstLine;
+    });
+    const suspiciousJumpRatio = consecutivePairs > 0 ? crossFileJumps / consecutivePairs : 0;
+    return {
+        totalMappingsChecked,
+        boundsViolations,
+        whitespaceOnlyMappings,
+        suspiciousJumpRatio,
+    };
+}
+/** Ported from coherence.rs::points_to_whitespace_or_comment. */
+export function pointsToWhitespaceOrComment(source, line0, col0) {
+    const lines = source.split("\n");
+    if (line0 >= lines.length)
+        return false;
+    const lineText = lines[line0];
+    if (col0 >= lineText.length)
+        return true;
+    const fromCol = lineText.slice(col0);
+    const trimmed = fromCol.replace(/^[\s]+/, "");
+    if (trimmed.length === 0)
+        return true;
+    if (trimmed.startsWith("//") || trimmed.startsWith("/*") || trimmed.startsWith("*"))
+        return true;
+    const lineTrimmed = lineText.trim();
+    if (lineTrimmed.startsWith("//") ||
+        lineTrimmed.startsWith("/*") ||
+        lineTrimmed.startsWith("*") ||
+        lineTrimmed.endsWith("*/"))
+        return true;
+    return false;
+}
+const INDEX_IGNORE_PREFIXES = ["node_modules", ".git", "dist"];
+/**
+ * Add `<sourcePathBase>/<rel>` aliases so `sources[]` entries like
+ * `../src/foo.ts` (which normalize to `src/foo.ts`) find the file even
+ * though the on-disk index is keyed by the path relative to `src/`.
+ */
+function expandIndexWithBase(index, base) {
+    const out = new Map(index);
+    for (const [rel, content] of index) {
+        out.set(`${base}/${rel}`, content);
+    }
+    return out;
+}
+async function indexSourceFiles(sourcePath) {
+    const index = new Map();
+    await walk(sourcePath, async (abs) => {
+        const rel = path.relative(sourcePath, abs);
+        if (INDEX_IGNORE_PREFIXES.some((prefix) => rel.startsWith(prefix)))
+            return;
+        try {
+            const content = await fs.readFile(abs, "utf8");
+            index.set(rel, content);
+        }
+        catch {
+            // binary or unreadable — skip
+        }
+    });
+    return index;
+}
+//# sourceMappingURL=structural-coherence.js.map

package/dist/validators/structural-coherence.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"structural-coherence.js","sourceRoot":"","sources":["../../src/validators/structural-coherence.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,QAAQ,IAAI,EAAE,EAAE,MAAM,SAAS,CAAC;AACzC,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAClC,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,gBAAgB,EAAE,MAAM,2BAA2B,CAAC;AACpF,OAAO,EAAE,OAAO,EAAE,YAAY,EAAE,mBAAmB,EAAE,MAAM,qBAAqB,CAAC;AACjF,OAAO,EAAE,IAAI,EAAE,MAAM,mBAAmB,CAAC;AAGzC,MAAM,CAAC,MAAM,yBAAyB,GAAG,sBAAsB,CAAC;AAEhE,4DAA4D;AAC5D,MAAM,0BAA0B,GAAG,EAAE,CAAC;AACtC,MAAM,8BAA8B,GAAG,GAAG,CAAC;AAC3C,MAAM,eAAe,GAAG,GAAG,CAAC;AAC5B,MAAM,iBAAiB,GAAG,EAAE,CAAC;AAc7B,MAAM,CAAC,KAAK,UAAU,2BAA2B,CAChD,OAAmC;IAEnC,IAAI,UAAU,EAAE,QAAQ,CAAC;IACzB,IAAI,CAAC;QACJ,UAAU,GAAG,MAAM,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;IAChD,CAAC;IAAC,MAAM,CAAC;QACR,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,MAAM,EAAE,0BAA0B,OAAO,CAAC,UAAU,EAAE,EAAE,EAAE,CAAC;IAC9F,CAAC;IACD,IAAI,CAAC;QACJ,QAAQ,GAAG,MAAM,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;IAC5C,CAAC;IAAC,MAAM,CAAC;QACR,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,MAAM,EAAE,wBAAwB,OAAO,CAAC,QAAQ,EAAE,EAAE,EAAE,CAAC;IAC1F,CAAC;IACD,IAAI,CAAC,UAAU,CAAC,WAAW,EAAE,IAAI,CAAC,QAAQ,CAAC,WAAW,EAAE,EAAE,CAAC;QAC1D,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,MAAM,EAAE,0CAA0C,EAAE,EAAE,CAAC;IAC1F,CAAC;IAED,MAAM,QAAQ,GAAG,MAAM,gBAAgB,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;IAC5D,MAAM,WAAW,GAAG,mBAAmB,CAAC,QAAQ,EAAE,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC;IACrF,MAAM,QAAQ,GAAuB,EAAE,CAAC;IAExC,MAAM,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE;QAC7C,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC;YAAE,OAAO;QACpC,MAAM,OAAO,GAAG,GAAG,MAAM,MAAM,CAAC;QAChC,IAAI,MAAc,CAAC;QACnB,IAAI,CAAC;YACJ,MAAM,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QAC7C,CAAC;QAAC,MAAM,CAAC;YACR,OAAO;QACR,CAAC;QACD,IAAI,MAAgB,CAAC;QACrB,IAAI,CAAC;YACJ,MAAM,GAAG,IAAI,QAAQ,CAAC,MAAM,CAAC,CAAC;QAC/B,CAAC;QAAC,MAAM,CAAC;YACR,OAAO;QACR,CAAC;QAED,MAAM,MAAM,GAAG,gBAAgB,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;QAErD,IAAI,MAAM,CAAC,oBAAoB,KAAK,CAAC;YAAE,OAAO;QAE9C,oBAAoB;QACpB,IAAI,MAAM,CAAC,gBAAgB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACxC,QAAQ,CAAC,IAAI,CAAC;gBACb,QAAQ,EAAE,yBAAyB;gBACnC,OAAO,EAAE,GAAG,MAAM,CAAC,gBAAgB,CAAC,MAAM,0EAA0E;gBACpH,IAAI,EAAE,OAAO;aACb,CAAC,CAAC;YACH,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,gBAAgB,CAAC,KAAK,CAAC,CAAC,EAAE,iBAAiB,CAAC,EAAE,CAAC;gBACrE,QAAQ,CAAC,IAAI,CAAC;oBACb,QAAQ,EAAE,yBAAyB;oBACnC,OAAO,EAAE,mBAAmB,CAAC,CAAC,UAAU,kBAAkB,CAAC,CAAC,WAAW,GAAG,CAAC,IAAI,CAAC,CAAC,UAAU,GAAG,CAAC,iBAAiB,CAAC,CAAC,WAAW,WAAW;oBACxI,IAAI,EAAE,OAAO;iBACb,CAAC,CAAC;YACJ,CAAC;QACF,CAAC;QAED,8BAA8B;QAC9B,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,oBAAoB,GAAG,0BAA0B,CAAC,CAAC;QACrF,IAAI,OAAO,GAAG,CAAC,EAAE,CAAC;YACjB,MAAM,OAAO,GAAG,MAAM,CAAC,sBAAsB,GAAG,OAAO,CAAC;YACxD,IAAI,OAAO,GAAG,8BAA8B,EAAE,CAAC;gBAC9C,QAAQ,CAAC,IAAI,CAAC;oBACb,QAAQ,EAAE,yBAAyB;oBACnC,OAAO,EAAE,GAAG,CAAC,OAAO,GAAG,GAAG,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,0DAA0D,MAAM,CAAC,sBAAsB,IAAI,OAAO,mBAAmB,8BAA8B,GAAG,GAAG,0FAA0F;oBACzR,IAAI,EAAE,OAAO;iBACb,CAAC,CAAC;YACJ,CAAC;QACF,CAAC;QAED,wBAAwB;QACxB,IAAI,MAAM,CAAC,mBAAmB,GAAG,eAAe,EAAE,CAAC;YAClD,QAAQ,CAAC,IAAI,CAAC;gBACb,QAAQ,EAAE,yBAAyB;gBACnC,OAAO,EAAE,yBAAyB,MAAM,CAAC,mBAAmB,CAAC,OAAO,CAAC,CAAC,CAAC,YAAY,eAAe,kIAAkI;gBACpO,IAAI,EAAE,OAAO;aACb,CAAC,CAAC;QACJ,CAAC;IACF,CAAC,CAAC,CAAC;IAEH,OAAO,EAAE,QAAQ,EAAE,CAAC;AACrB,CAAC;AAED,MAAM,UAAU,gBAAgB,CAC/B,MAAgB,EAChB,cAAmC;IAOnC,0DAA0D;IAC1D,MAAM,iBAAiB,GAAG,IAAI,GAAG,EAAoB,CAAC;IACtD,KAAK,MAAM,CAAC,GAAG,EAAE,OAAO,CAAC,IAAI,cAAc,EAAE,CAAC;QAC7C,iBAAiB,CAAC,GAAG,CACpB,GAAG,EACH,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CACxC,CAAC;IACH,CAAC;IAED,2EAA2E;IAC3E,MAAM,gBAAgB,GAAG,IAAI,GAAG,EAAoB,CAAC;IACrD,MAAM,YAAY,GAAG,IAAI,GAAG,EAAkB,CAAC;IAE/C,IAAI,oBAAoB,GAAG,CAAC,CAAC;IAC7B,MAAM,gBAAgB,GAAsB,EAAE,CAAC;IAC/C,IAAI,sBAAsB,GAAG,CAAC,CAAC;IAE/B,IAAI,UAAU,GAAkB,IAAI,CAAC;IACrC,IAAI,WAAW,GAAkB,IAAI,CAAC;IACtC,IAAI,gBAAgB,GAAG,CAAC,CAAC;IACzB,IAAI,cAAc,GAAG,CAAC,CAAC;IACvB,IAAI,WAAW,GAAG,CAAC,CAAC;IAEpB,WAAW,CAAC,MAAM,EAAE,CAAC,CAAC,EAAE,EAAE;QACzB,IAAI,CAAC,CAAC,MAAM,IAAI,IAAI,IAAI,CAAC,CAAC,YAAY,IAAI,IAAI,IAAI,CAAC,CAAC,cAAc,IAAI,IAAI;YAAE,OAAO;QACnF,MAAM,MAAM,GAAG,CAAC,CAAC,MAAM,CAAC;QACxB,MAAM,UAAU,GAAG,mBAAmB,CAAC,MAAM,CAAC,CAAC;QAE/C,IAAI,OAAO,CAAC,UAAU,CAAC,IAAI,YAAY,CAAC,UAAU,CAAC;YAAE,OAAO;QAE5D,wEAAwE;QACxE,uEAAuE;QACvE,+CAA+C;QAC/C,MAAM,OAAO,GAAG,CAAC,CAAC,YAAY,GAAG,CAAC,CAAC;QACnC,MAAM,MAAM,GAAG,CAAC,CAAC,cAAc,CAAC;QAChC,MAAM,OAAO,GAAG,CAAC,CAAC,aAAa,GAAG,CAAC,CAAC;QAEpC,IAAI,QAAQ,GAAG,iBAAiB,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QACjD,IAAI,CAAC,QAAQ,EAAE,CAAC;YACf,kEAAkE;YAClE,IAAI,MAAM,GAAG,gBAAgB,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;YAC1C,IAAI,CAAC,MAAM,EAAE,CAAC;gBACb,IAAI,CAAC;oBACJ,MAAM,QAAQ,GAAG,gBAAgB,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;oBAClD,IAAI,QAAQ,IAAI,IAAI,EAAE,CAAC;wBACtB,MAAM,GAAG,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;wBACnD,gBAAgB,CAAC,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;wBACrC,YAAY,CAAC,GAAG,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;oBACpC,CAAC;gBACF,CAAC;gBAAC,MAAM,CAAC;oBACR,SAAS;gBACV,CAAC;YACF,CAAC;YACD,IAAI,CAAC,MAAM;gBAAE,OAAO;YACpB,QAAQ,GAAG,MAAM,CAAC;QACnB,CAAC;QAED,oBAAoB,EAAE,CAAC;QAEvB,0BAA0B;QAC1B,MAAM,WAAW,GAAG,QAAQ,CAAC,MAAM,CAAC;QACpC,IAAI,OAAO,IAAI,WAAW,EAAE,CAAC;YAC5B,gBAAgB,CAAC,IAAI,CAAC;gBACrB,UAAU,EAAE,UAAU;gBACtB,WAAW,EAAE,OAAO;gBACpB,UAAU,EAAE,MAAM;gBAClB,WAAW;aACX,CAAC,CAAC;QACJ,CAAC;aAAM,CAAC;YACP,MAAM,OAAO,GAAG,QAAQ,CAAC,OAAO,CAAE,CAAC;YACnC,IAAI,MAAM,GAAG,OAAO,EAAE,CAAC;gBACtB,gBAAgB,CAAC,IAAI,CAAC;oBACrB,UAAU,EAAE,UAAU;oBACtB,WAAW,EAAE,OAAO;oBACpB,UAAU,EAAE,MAAM;oBAClB,WAAW;iBACX,CAAC,CAAC;YACJ,CAAC;QACF,CAAC;QAED,oEAAoE;QACpE,IAAI,WAAW,GAAG,0BAA0B,KAAK,CAAC,IAAI,OAAO,GAAG,WAAW,EAAE,CAAC;YAC7E,MAAM,UAAU,GAAG,cAAc,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,IAAI,CAAC;YACtF,IAAI,UAAU,IAAI,IAAI,IAAI,2BAA2B,CAAC,UAAU,EAAE,OAAO,EAAE,MAAM,CAAC,EAAE,CAAC;gBACpF,sBAAsB,EAAE,CAAC;YAC1B,CAAC;QACF,CAAC;QACD,WAAW,EAAE,CAAC;QAEd,+EAA+E;QAC/E,IAAI,WAAW,KAAK,IAAI,IAAI,OAAO,KAAK,WAAW,EAAE,CAAC;YACrD,IAAI,UAAU,KAAK,IAAI,EAAE,CAAC;gBACzB,gBAAgB,EAAE,CAAC;gBACnB,IAAI,UAAU,KAAK,MAAM;oBAAE,cAAc,EAAE,CAAC;YAC7C,CAAC;QACF,CAAC;QACD,UAAU,GAAG,MAAM,CAAC;QACpB,WAAW,GAAG,OAAO,CAAC;IACvB,CAAC,CAAC,CAAC;IAEH,MAAM,mBAAmB,GAAG,gBAAgB,GAAG,CAAC,CAAC,CAAC,CAAC,cAAc,GAAG,gBAAgB,CAAC,CAAC,CAAC,CAAC,CAAC;IAEzF,OAAO;QACN,oBAAoB;QACpB,gBAAgB;QAChB,sBAAsB;QACtB,mBAAmB;KACnB,CAAC;AACH,CAAC;AAED,iEAAiE;AACjE,MAAM,UAAU,2BAA2B,CAAC,MAAc,EAAE,KAAa,EAAE,IAAY;IACtF,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACjC,IAAI,KAAK,IAAI,KAAK,CAAC,MAAM;QAAE,OAAO,KAAK,CAAC;IACxC,MAAM,QAAQ,GAAG,KAAK,CAAC,KAAK,CAAE,CAAC;IAC/B,IAAI,IAAI,IAAI,QAAQ,CAAC,MAAM;QAAE,OAAO,IAAI,CAAC;IAEzC,MAAM,OAAO,GAAG,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACrC,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;IAC9C,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACtC,IAAI,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IAEjG,MAAM,WAAW,GAAG,QAAQ,CAAC,IAAI,EAAE,CAAC;IACpC,IACC,WAAW,CAAC,UAAU,CAAC,IAAI,CAAC;QAC5B,WAAW,CAAC,UAAU,CAAC,IAAI,CAAC;QAC5B,WAAW,CAAC,UAAU,CAAC,GAAG,CAAC;QAC3B,WAAW,CAAC,QAAQ,CAAC,IAAI,CAAC;QAE1B,OAAO,IAAI,CAAC;IAEb,OAAO,KAAK,CAAC;AACd,CAAC;AAED,MAAM,qBAAqB,GAAG,CAAC,cAAc,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;AAE/D;;;;GAIG;AACH,SAAS,mBAAmB,CAAC,KAA0B,EAAE,IAAY;IACpE,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC;IAC3B,KAAK,MAAM,CAAC,GAAG,EAAE,OAAO,CAAC,IAAI,KAAK,EAAE,CAAC;QACpC,GAAG,CAAC,GAAG,CAAC,GAAG,IAAI,IAAI,GAAG,EAAE,EAAE,OAAO,CAAC,CAAC;IACpC,CAAC;IACD,OAAO,GAAG,CAAC;AACZ,CAAC;AAED,KAAK,UAAU,gBAAgB,CAAC,UAAkB;IACjD,MAAM,KAAK,GAAG,IAAI,GAAG,EAAkB,CAAC;IACxC,MAAM,IAAI,CAAC,UAAU,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE;QACpC,MAAM,GAAG,GAAG,IAAI,CAAC,QAAQ,CAAC,UAAU,EAAE,GAAG,CAAC,CAAC;QAC3C,IAAI,qBAAqB,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,GAAG,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;YAAE,OAAO;QAC3E,IAAI,CAAC;YACJ,MAAM,OAAO,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;YAC/C,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;QACzB,CAAC;QAAC,MAAM,CAAC;YACR,8BAA8B;QAC/B,CAAC;IACF,CAAC,CAAC,CAAC;IACH,OAAO,KAAK,CAAC;AACd,CAAC"}

package/dist/validators/token-consistency.d.ts

@@ -0,0 +1,32 @@
+/**
+ * Copyright (c) 2026, Salesforce, Inc.,
+ * All rights reserved.
+ * For full license text, see the LICENSE.txt file
+ */
+import { TraceMap } from "@jridgewell/trace-mapping";
+import type { ValidatorResult } from "./types.js";
+export declare const TOKEN_CONSISTENCY_RULE = "token-consistency";
+export type TokenCategory = "StringLiteral" | "NumericLiteral" | "Identifier" | "Punctuation" | "Other";
+interface NameMismatch {
+    expectedName: string;
+    sourceFile: string;
+    line: number;
+    col: number;
+    foundText: string;
+}
+export interface TokenConsistencyOptions {
+    sourcePath: string;
+    distPath: string;
+}
+export declare function validateTokenConsistency(options: TokenConsistencyOptions): Promise<ValidatorResult>;
+export declare function analyzeTokenConsistency(tracer: TraceMap, compiledJs: string, sourceContents: Map<string, string>): {
+    totalSampled: number;
+    consistent: number;
+    inconsistent: number;
+    nameMismatches: NameMismatch[];
+    consistencyScore: number;
+};
+/** Ported from token_check.rs::classify_token_at. */
+export declare function classifyTokenAt(text: string, line0: number, col0: number): TokenCategory;
+export {};
+//# sourceMappingURL=token-consistency.d.ts.map

package/dist/validators/token-consistency.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"token-consistency.d.ts","sourceRoot":"","sources":["../../src/validators/token-consistency.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAIH,OAAO,EAAE,QAAQ,EAAiC,MAAM,2BAA2B,CAAC;AAGpF,OAAO,KAAK,EAAoB,eAAe,EAAE,MAAM,YAAY,CAAC;AAEpE,eAAO,MAAM,sBAAsB,sBAAsB,CAAC;AAS1D,MAAM,MAAM,aAAa,GACtB,eAAe,GACf,gBAAgB,GAChB,YAAY,GACZ,aAAa,GACb,OAAO,CAAC;AAEX,UAAU,YAAY;IACrB,YAAY,EAAE,MAAM,CAAC;IACrB,UAAU,EAAE,MAAM,CAAC;IACnB,IAAI,EAAE,MAAM,CAAC;IACb,GAAG,EAAE,MAAM,CAAC;IACZ,SAAS,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,uBAAuB;IACvC,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,MAAM,CAAC;CACjB;AAED,wBAAsB,wBAAwB,CAC7C,OAAO,EAAE,uBAAuB,GAC9B,OAAO,CAAC,eAAe,CAAC,CA4E1B;AAED,wBAAgB,uBAAuB,CACtC,MAAM,EAAE,QAAQ,EAChB,UAAU,EAAE,MAAM,EAClB,cAAc,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,GACjC;IACF,YAAY,EAAE,MAAM,CAAC;IACrB,UAAU,EAAE,MAAM,CAAC;IACnB,YAAY,EAAE,MAAM,CAAC;IACrB,cAAc,EAAE,YAAY,EAAE,CAAC;IAC/B,gBAAgB,EAAE,MAAM,CAAC;CACzB,CAwEA;AAED,qDAAqD;AACrD,wBAAgB,eAAe,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,aAAa,CAWxF"}

package/dist/validators/token-consistency.js

@@ -0,0 +1,260 @@
+/**
+ * Copyright (c) 2026, Salesforce, Inc.,
+ * All rights reserved.
+ * For full license text, see the LICENSE.txt file
+ */
+import { promises as fs } from "node:fs";
+import * as path from "node:path";
+import { TraceMap, eachMapping, sourceContentFor } from "@jridgewell/trace-mapping";
+import { isAsset, isDependency, isVirtualSource, normalizeSourcePath } from "./classification.js";
+import { walk } from "./sourcemap-io.js";
+export const TOKEN_CONSISTENCY_RULE = "token-consistency";
+// Ported from uibundle-sourcemap-validator/src/token_check.rs
+const SAMPLE_INTERVAL = 20;
+const NAME_WINDOW_TOLERANCE = 3;
+const VERDICT_SUSPICIOUS = 0.7;
+const VERDICT_WARNING = 0.85;
+const MAX_LISTED_MISMATCHES = 10;
+export async function validateTokenConsistency(options) {
+    let sourceStat, distStat;
+    try {
+        sourceStat = await fs.stat(options.sourcePath);
+    }
+    catch {
+        return { findings: [], skipped: { reason: `source path not found: ${options.sourcePath}` } };
+    }
+    try {
+        distStat = await fs.stat(options.distPath);
+    }
+    catch {
+        return { findings: [], skipped: { reason: `dist path not found: ${options.distPath}` } };
+    }
+    if (!sourceStat.isDirectory() || !distStat.isDirectory()) {
+        return { findings: [], skipped: { reason: "source and dist must both be directories" } };
+    }
+    const rawIndex = await indexSourceFiles(options.sourcePath);
+    const sourceIndex = expandIndexWithBase(rawIndex, path.basename(options.sourcePath));
+    const findings = [];
+    await walk(options.distPath, async (jsPath) => {
+        if (!jsPath.endsWith(".js"))
+            return;
+        const mapPath = `${jsPath}.map`;
+        let mapRaw;
+        try {
+            mapRaw = await fs.readFile(mapPath, "utf8");
+        }
+        catch {
+            return;
+        }
+        let tracer;
+        try {
+            tracer = new TraceMap(mapRaw);
+        }
+        catch {
+            return;
+        }
+        let compiledJs;
+        try {
+            compiledJs = await fs.readFile(jsPath, "utf8");
+        }
+        catch {
+            return;
+        }
+        const report = analyzeTokenConsistency(tracer, compiledJs, sourceIndex);
+        if (report.totalSampled === 0)
+            return;
+        if (report.consistencyScore < VERDICT_SUSPICIOUS) {
+            findings.push({
+                ruleName: TOKEN_CONSISTENCY_RULE,
+                message: `Token type consistency ${(report.consistencyScore * 100).toFixed(1)}% is below suspicious threshold ${VERDICT_SUSPICIOUS * 100}% (${report.consistent}/${report.totalSampled} sampled tokens agree between compiled and source positions). Sourcemap tokens appear fabricated.`,
+                file: mapPath,
+            });
+        }
+        else if (report.consistencyScore < VERDICT_WARNING) {
+            findings.push({
+                ruleName: TOKEN_CONSISTENCY_RULE,
+                message: `Token type consistency ${(report.consistencyScore * 100).toFixed(1)}% is below expected threshold ${VERDICT_WARNING * 100}% (${report.consistent}/${report.totalSampled} sampled tokens agree between compiled and source positions).`,
+                file: mapPath,
+            });
+        }
+        if (report.nameMismatches.length > 0) {
+            findings.push({
+                ruleName: TOKEN_CONSISTENCY_RULE,
+                message: `${report.nameMismatches.length} sourcemap name(s) do not exist at the claimed source position (±${NAME_WINDOW_TOLERANCE} col tolerance).`,
+                file: mapPath,
+            });
+            for (const m of report.nameMismatches.slice(0, MAX_LISTED_MISMATCHES)) {
+                findings.push({
+                    ruleName: TOKEN_CONSISTENCY_RULE,
+                    message: `Name mismatch: expected "${m.expectedName}" at ${m.sourceFile}:${m.line + 1}:${m.col + 1}, found "${m.foundText}".`,
+                    file: mapPath,
+                });
+            }
+        }
+    });
+    return { findings };
+}
+export function analyzeTokenConsistency(tracer, compiledJs, sourceContents) {
+    const embeddedCache = new Map();
+    let totalSampled = 0;
+    let consistent = 0;
+    let inconsistent = 0;
+    const nameMismatches = [];
+    let idx = -1;
+    eachMapping(tracer, (m) => {
+        idx++;
+        if (idx % SAMPLE_INTERVAL !== 0)
+            return;
+        if (m.source == null || m.originalLine == null || m.originalColumn == null)
+            return;
+        const srcRaw = m.source;
+        const normalized = normalizeSourcePath(srcRaw);
+        // Skip third-party deps, static assets, and virtual bundler pseudo-sources.
+        // These aren't part of the submitted source tree — the corresponding rules
+        // in the Rust tool (coherence.rs) apply the same filter.
+        if (isDependency(normalized) || isAsset(normalized) || isVirtualSource(normalized))
+            return;
+        // Resolve source text: submitted first, then embedded
+        let sourceText = sourceContents.get(normalized) ?? null;
+        if (sourceText == null) {
+            if (embeddedCache.has(srcRaw)) {
+                sourceText = embeddedCache.get(srcRaw) ?? null;
+            }
+            else {
+                try {
+                    const c = sourceContentFor(tracer, srcRaw);
+                    embeddedCache.set(srcRaw, c);
+                    sourceText = c;
+                }
+                catch {
+                    embeddedCache.set(srcRaw, null);
+                }
+            }
+        }
+        if (sourceText == null)
+            return;
+        totalSampled++;
+        const srcLine = m.originalLine - 1;
+        const srcCol = m.originalColumn;
+        const dstLine = m.generatedLine - 1;
+        const dstCol = m.generatedColumn;
+        // --- Check 1: Name verification ---
+        if (m.name != null) {
+            const [found, foundText] = nameExistsNear(sourceText, srcLine, srcCol, m.name);
+            if (!found) {
+                nameMismatches.push({
+                    expectedName: m.name,
+                    sourceFile: normalized,
+                    line: srcLine,
+                    col: srcCol,
+                    foundText,
+                });
+            }
+        }
+        // --- Check 2: Token category matching ---
+        const genCat = classifyTokenAt(compiledJs, dstLine, dstCol);
+        const srcCat = classifyTokenAt(sourceText, srcLine, srcCol);
+        if (categoriesAreConsistent(genCat, srcCat)) {
+            consistent++;
+        }
+        else {
+            inconsistent++;
+        }
+    });
+    const consistencyScore = totalSampled > 0 ? consistent / totalSampled : 1.0;
+    return { totalSampled, consistent, inconsistent, nameMismatches, consistencyScore };
+}
+/** Ported from token_check.rs::classify_token_at. */
+export function classifyTokenAt(text, line0, col0) {
+    const lines = text.split("\n");
+    if (line0 >= lines.length)
+        return "Other";
+    const lineText = lines[line0];
+    if (col0 >= lineText.length)
+        return "Other";
+    const ch = lineText.charAt(col0);
+    if (ch === '"' || ch === "'" || ch === "`")
+        return "StringLiteral";
+    if (ch >= "0" && ch <= "9")
+        return "NumericLiteral";
+    if (/[A-Za-z_$]/.test(ch))
+        return "Identifier";
+    if (/\s/.test(ch))
+        return "Other";
+    return "Punctuation";
+}
+function categoriesAreConsistent(gen, src) {
+    if (gen === src)
+        return true;
+    if (gen === "Other" || src === "Other")
+        return true;
+    if ((gen === "NumericLiteral" && src === "Identifier") ||
+        (gen === "Identifier" && src === "NumericLiteral"))
+        return true;
+    return false;
+}
+/** Ported from token_check.rs::name_exists_near — ±3 col window. */
+function nameExistsNear(source, line0, col0, expected) {
+    const lines = source.split("\n");
+    if (line0 >= lines.length)
+        return [false, ""];
+    const lineText = lines[line0];
+    for (let offset = 0; offset <= NAME_WINDOW_TOLERANCE; offset++) {
+        for (const dir of [1, -1]) {
+            const checkCol = offset === 0 ? col0 : col0 + offset * dir;
+            if (checkCol < 0)
+                continue;
+            const word = extractWordAt(lineText, checkCol, expected.length + 5);
+            if (word === expected)
+                return [true, word];
+            if (offset === 0)
+                break; // Only check offset=0 once
+        }
+    }
+    const found = extractWordAt(lineText, col0, expected.length + 10);
+    return [false, found];
+}
+function extractWordAt(line, col, maxLen) {
+    if (col >= line.length)
+        return "";
+    let out = "";
+    const end = Math.min(line.length, col + maxLen);
+    for (let i = col; i < end; i++) {
+        const c = line.charAt(i);
+        if (/[A-Za-z0-9_$]/.test(c))
+            out += c;
+        else
+            break;
+    }
+    return out;
+}
+const INDEX_IGNORE_PREFIXES = ["node_modules", ".git", "dist"];
+/**
+ * Add `<sourcePathBase>/<rel>` aliases so `sources[]` entries like
+ * `../src/foo.ts` (which normalize to `src/foo.ts`) find the file even
+ * though the on-disk index is keyed by the path relative to `src/`.
+ */
+function expandIndexWithBase(index, base) {
+    const out = new Map(index);
+    for (const [rel, content] of index) {
+        out.set(`${base}/${rel}`, content);
+    }
+    return out;
+}
+async function indexSourceFiles(sourcePath) {
+    const index = new Map();
+    await walk(sourcePath, async (abs) => {
+        const rel = path.relative(sourcePath, abs);
+        if (INDEX_IGNORE_PREFIXES.some((prefix) => rel.startsWith(prefix)))
+            return;
+        try {
+            const content = await fs.readFile(abs, "utf8");
+            index.set(rel, content);
+        }
+        catch {
+            // binary or unreadable — skip
+        }
+    });
+    return index;
+}
+//# sourceMappingURL=token-consistency.js.map