candor-ts 0.7.1 → 0.7.2

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "candor-ts",
-  "version": "0.7.1",
+  "version": "0.7.2",
   "description": "candor for TypeScript — per-function side effects, transitively, with a policy gate (candor-spec 0.5)",
   "type": "module",
   "dependencies": {

package/query-core.mjs

@@ -247,8 +247,13 @@ function commonPrefixLen(fns) {
   return (best ?? []).length;
 }
 function layerOf(fn, prefixLen) {
+  // The layer = the first segment after the common prefix, the leaf excluded. candor-ts names functions
+  // with a FILE.fn (free fns) or FILE.Class.method tail — a SHALLOW 1-segment-minimum tail — so the rule is
+  // `prefixLen + 1 < length` (matching candor-rust's layer_of). candor-java uses `+2` because its names carry
+  // an extra Package.Class.method segment; copying that here collapsed every 2-segment free function to
+  // "(root)", killing the dispersion signal on real TS reports.
   const segs = fn.split(".");
-  return prefixLen + 2 < segs.length ? segs[prefixLen] : "(root)";
+  return prefixLen + 1 < segs.length ? segs[prefixLen] : "(root)";
 }
 export function containment(fns, baseFns) {
   const pl = commonPrefixLen(fns);

package/query.mjs

@@ -89,7 +89,12 @@ switch (cmd) {
     // new leak), matching candor-java / candor-query. JSON-only, like every other candor-ts query command.
     const [prefix, basePrefix] = args;
     if (basePrefix) {
-      const r = coreContainment(loadReport(prefix), loadReport(basePrefix));
+      const baseFns = loadReport(basePrefix);
+      if (baseFns.length === 0) {   // fail CLOSED (exit 2), not a wall of bogus "everything leaked" (exit 1)
+        console.error(`candor-ts: no report at baseline prefix '${basePrefix}' — check the path`);
+        process.exit(2);
+      }
+      const r = coreContainment(loadReport(prefix), baseFns);
       emit(r);
       process.exit(r.leaks.length ? 1 : 0);
     }