critical-gate 2.0.0

package/dist/detectors/index.js

@@ -0,0 +1,16 @@
+export { apiSurfaceDetector } from "./api-surface-detector.js";
+export { blastRadiusDetector } from "./blast-radius-detector.js";
+export { configChangeDetector } from "./config-change-detector.js";
+export { dependencyDetector } from "./dependency-detector.js";
+export { existingSolutionDetector } from "./existing-solution-detector.js";
+export { expectedCompanionsDetector } from "./expected-companions-detector.js";
+export { intentVerificationDetector } from "./intent-verification-detector.js";
+export { patternViolationDetector } from "./pattern-violation-detector.js";
+export { rewriteDetector } from "./rewrite-detector.js";
+export { repositoryIntelligenceDetector } from "./repository-intelligence-detector.js";
+export { runDetectors, summarizeFindings } from "./runner.js";
+export { scanAddedLinesForSecretsAndPaths, secretPathDetector } from "./secret-path-detector.js";
+export { scopeDetector } from "./scope-detector.js";
+export { testWeakeningDetector } from "./test-weakening-detector.js";
+export { utilityReinventionDetector } from "./utility-reinvention-detector.js";
+//# sourceMappingURL=index.js.map

package/dist/detectors/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/detectors/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,kBAAkB,EAAE,MAAM,2BAA2B,CAAC;AAC/D,OAAO,EAAE,mBAAmB,EAAE,MAAM,4BAA4B,CAAC;AACjE,OAAO,EAAE,oBAAoB,EAAE,MAAM,6BAA6B,CAAC;AACnE,OAAO,EAAE,kBAAkB,EAAE,MAAM,0BAA0B,CAAC;AAC9D,OAAO,EAAE,wBAAwB,EAAE,MAAM,iCAAiC,CAAC;AAC3E,OAAO,EAAE,0BAA0B,EAAE,MAAM,mCAAmC,CAAC;AAC/E,OAAO,EAAE,0BAA0B,EAAE,MAAM,mCAAmC,CAAC;AAC/E,OAAO,EAAE,wBAAwB,EAAE,MAAM,iCAAiC,CAAC;AAC3E,OAAO,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AACxD,OAAO,EAAE,8BAA8B,EAAE,MAAM,uCAAuC,CAAC;AACvF,OAAO,EAAE,YAAY,EAAE,iBAAiB,EAA8B,MAAM,aAAa,CAAC;AAC1F,OAAO,EAAE,gCAAgC,EAAE,kBAAkB,EAAE,MAAM,2BAA2B,CAAC;AACjG,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AACpD,OAAO,EAAE,qBAAqB,EAAE,MAAM,8BAA8B,CAAC;AACrE,OAAO,EAAE,0BAA0B,EAAE,MAAM,mCAAmC,CAAC"}

package/dist/detectors/intent-verification-detector.d.ts

@@ -0,0 +1,3 @@
+import type { Detector } from "./types.js";
+export declare const intentVerificationDetector: Detector;
+//# sourceMappingURL=intent-verification-detector.d.ts.map

package/dist/detectors/intent-verification-detector.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"intent-verification-detector.d.ts","sourceRoot":"","sources":["../../src/detectors/intent-verification-detector.ts"],"names":[],"mappings":"AAMA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAC;AAE3C,eAAO,MAAM,0BAA0B,EAAE,QAaxC,CAAC"}

package/dist/detectors/intent-verification-detector.js

@@ -0,0 +1,43 @@
+import { buildIntentModel, classifyObservedDiffActions } from "../intent/index.js";
+export const intentVerificationDetector = {
+    name: "intent-verification",
+    run: ({ task, diff }) => {
+        const intent = buildIntentModel(task);
+        const observed = classifyObservedDiffActions(diff.files);
+        const unexpectedClasses = observed.classes
+            .filter((changeClass) => !intent.allowedChangeClasses.includes(changeClass))
+            .filter(isReportableIntentMismatch);
+        return unexpectedClasses.map((changeClass) => toFinding(changeClass, intent.allowedChangeClasses, observed.evidence));
+    }
+};
+function isReportableIntentMismatch(changeClass) {
+    return changeClass === "ci" || changeClass === "source";
+}
+function toFinding(changeClass, allowedClasses, allEvidence) {
+    const evidence = allEvidence
+        .filter((entry) => entry.changeClass === changeClass)
+        .map((entry) => ({
+        kind: entry.symbol === undefined ? "file" : "symbol",
+        path: entry.path,
+        startLine: entry.lineNumber,
+        endLine: entry.lineNumber,
+        symbol: entry.symbol,
+        message: entry.reason,
+        data: {
+            observedClass: changeClass,
+            allowedClasses
+        }
+    }));
+    return {
+        id: `intent-verification:unexpected-${changeClass}`,
+        detector: "intent-verification",
+        severity: "medium",
+        confidence: 0.82,
+        title: `Unexpected ${changeClass} change for task intent`,
+        message: `The diff includes ${changeClass} changes, but the task intent only allows: ${allowedClasses.join(", ")}.`,
+        evidence,
+        repair: "Remove the unrelated change, split it into a separate task, or update the task intent with explicit justification.",
+        tags: ["scope"]
+    };
+}
+//# sourceMappingURL=intent-verification-detector.js.map

package/dist/detectors/intent-verification-detector.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"intent-verification-detector.js","sourceRoot":"","sources":["../../src/detectors/intent-verification-detector.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,gBAAgB,EAChB,2BAA2B,EAE5B,MAAM,oBAAoB,CAAC;AAI5B,MAAM,CAAC,MAAM,0BAA0B,GAAa;IAClD,IAAI,EAAE,qBAAqB;IAC3B,GAAG,EAAE,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,EAAE;QACtB,MAAM,MAAM,GAAG,gBAAgB,CAAC,IAAI,CAAC,CAAC;QACtC,MAAM,QAAQ,GAAG,2BAA2B,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACzD,MAAM,iBAAiB,GAAG,QAAQ,CAAC,OAAO;aACvC,MAAM,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,oBAAoB,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;aAC3E,MAAM,CAAC,0BAA0B,CAAC,CAAC;QAEtC,OAAO,iBAAiB,CAAC,GAAG,CAAC,CAAC,WAAW,EAAE,EAAE,CAC3C,SAAS,CAAC,WAAW,EAAE,MAAM,CAAC,oBAAoB,EAAE,QAAQ,CAAC,QAAQ,CAAC,CACvE,CAAC;IACJ,CAAC;CACF,CAAC;AAEF,SAAS,0BAA0B,CAAC,WAAwB;IAC1D,OAAO,WAAW,KAAK,IAAI,IAAI,WAAW,KAAK,QAAQ,CAAC;AAC1D,CAAC;AAED,SAAS,SAAS,CAChB,WAAwB,EACxB,cAA6B,EAC7B,WAAuE;IAEvE,MAAM,QAAQ,GAAG,WAAW;SACzB,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,WAAW,KAAK,WAAW,CAAC;SACpD,GAAG,CACF,CAAC,KAAK,EAAmB,EAAE,CAAC,CAAC;QAC3B,IAAI,EAAE,KAAK,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ;QACpD,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,SAAS,EAAE,KAAK,CAAC,UAAU;QAC3B,OAAO,EAAE,KAAK,CAAC,UAAU;QACzB,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,OAAO,EAAE,KAAK,CAAC,MAAM;QACrB,IAAI,EAAE;YACJ,aAAa,EAAE,WAAW;YAC1B,cAAc;SACf;KACF,CAAC,CACH,CAAC;IAEJ,OAAO;QACL,EAAE,EAAE,kCAAkC,WAAW,EAAE;QACnD,QAAQ,EAAE,qBAAqB;QAC/B,QAAQ,EAAE,QAAQ;QAClB,UAAU,EAAE,IAAI;QAChB,KAAK,EAAE,cAAc,WAAW,yBAAyB;QACzD,OAAO,EAAE,qBAAqB,WAAW,8CAA8C,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG;QACnH,QAAQ;QACR,MAAM,EACJ,oHAAoH;QACtH,IAAI,EAAE,CAAC,OAAO,CAAC;KAChB,CAAC;AACJ,CAAC"}

package/dist/detectors/pattern-violation-detector.d.ts

@@ -0,0 +1,3 @@
+import type { Detector } from "./types.js";
+export declare const patternViolationDetector: Detector;
+//# sourceMappingURL=pattern-violation-detector.d.ts.map

package/dist/detectors/pattern-violation-detector.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"pattern-violation-detector.d.ts","sourceRoot":"","sources":["../../src/detectors/pattern-violation-detector.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAC;AAS3C,eAAO,MAAM,wBAAwB,EAAE,QActC,CAAC"}

package/dist/detectors/pattern-violation-detector.js

@@ -0,0 +1,83 @@
+import { extractExportedNames } from "../knowledge/index.js";
+export const patternViolationDetector = {
+    name: "pattern-violation",
+    run: ({ diff, context }) => {
+        const patterns = context?.knowledge?.getPatternIndex().patterns ?? [];
+        if (patterns.length === 0) {
+            return [];
+        }
+        return diff.files
+            .filter((file) => file.status === "added" && file.role === "source")
+            .flatMap((file) => detectPatternViolations(file, patterns))
+            .map(toFinding);
+    }
+};
+function detectPatternViolations(file, patterns) {
+    const sourceText = file.hunks
+        .flatMap((hunk) => hunk.lines.filter((line) => line.kind === "add").map((line) => line.content))
+        .join("\n");
+    const exportedNames = extractExportedNames(sourceText);
+    const violations = [];
+    const serviceRoot = strongestRoot(patterns, "service");
+    const hookRoot = strongestRoot(patterns, "hook");
+    if (serviceRoot !== undefined &&
+        /(^|\/)(helpers?|utils?)\//i.test(file.path) &&
+        hasDomainTokenOverlap(file.path, serviceRoot.examples)) {
+        violations.push({
+            file,
+            kind: "service",
+            expectedRoot: serviceRoot.root,
+            message: `${file.path} adds helper-style code, but this repository has an established service pattern at ${serviceRoot.root}.`
+        });
+    }
+    if (hookRoot !== undefined &&
+        exportedNames.some((name) => /^use[A-Z]/.test(name)) &&
+        !file.path.startsWith(`${hookRoot.root}/`)) {
+        violations.push({
+            file,
+            kind: "hook",
+            expectedRoot: hookRoot.root,
+            message: `${file.path} exports a hook-like symbol outside the established hook root ${hookRoot.root}.`
+        });
+    }
+    return violations;
+}
+function strongestRoot(patterns, kind) {
+    return patterns
+        .filter((pattern) => pattern.kind === kind)
+        .sort((left, right) => right.confidence - left.confidence)[0];
+}
+function hasDomainTokenOverlap(path, examples) {
+    const pathTokens = new Set(tokenize(path));
+    return examples.some((example) => tokenize(example).some((token) => pathTokens.has(token)));
+}
+function tokenize(value) {
+    return value
+        .toLowerCase()
+        .split(/[/.\\_-]+/)
+        .filter((token) => token.length >= 3 && !["src", "lib", "app"].includes(token));
+}
+function toFinding(violation) {
+    return {
+        id: `pattern-violation:${violation.kind}:${violation.file.path}`,
+        detector: "pattern-violation",
+        severity: "medium",
+        confidence: 0.76,
+        title: "New file drifts from repository pattern",
+        message: violation.message,
+        evidence: [
+            {
+                kind: "file",
+                path: violation.file.path,
+                message: `Expected ${violation.kind} root: ${violation.expectedRoot}.`,
+                data: {
+                    expectedPattern: violation.kind,
+                    expectedRoot: violation.expectedRoot
+                }
+            }
+        ],
+        repair: `Move this code under ${violation.expectedRoot}, reuse the existing pattern, or document why this task needs a new location.`,
+        tags: ["convention"]
+    };
+}
+//# sourceMappingURL=pattern-violation-detector.js.map

package/dist/detectors/pattern-violation-detector.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pattern-violation-detector.js","sourceRoot":"","sources":["../../src/detectors/pattern-violation-detector.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,oBAAoB,EAAE,MAAM,uBAAuB,CAAC;AAY7D,MAAM,CAAC,MAAM,wBAAwB,GAAa;IAChD,IAAI,EAAE,mBAAmB;IACzB,GAAG,EAAE,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,EAAE;QACzB,MAAM,QAAQ,GAAG,OAAO,EAAE,SAAS,EAAE,eAAe,EAAE,CAAC,QAAQ,IAAI,EAAE,CAAC;QAEtE,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC1B,OAAO,EAAE,CAAC;QACZ,CAAC;QAED,OAAO,IAAI,CAAC,KAAK;aACd,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,KAAK,OAAO,IAAI,IAAI,CAAC,IAAI,KAAK,QAAQ,CAAC;aACnE,OAAO,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,uBAAuB,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;aAC1D,GAAG,CAAC,SAAS,CAAC,CAAC;IACpB,CAAC;CACF,CAAC;AAEF,SAAS,uBAAuB,CAC9B,IAAc,EACd,QAA6B;IAE7B,MAAM,UAAU,GAAG,IAAI,CAAC,KAAK;SAC1B,OAAO,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,KAAK,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;SAC/F,IAAI,CAAC,IAAI,CAAC,CAAC;IACd,MAAM,aAAa,GAAG,oBAAoB,CAAC,UAAU,CAAC,CAAC;IACvD,MAAM,UAAU,GAAuB,EAAE,CAAC;IAC1C,MAAM,WAAW,GAAG,aAAa,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC;IACvD,MAAM,QAAQ,GAAG,aAAa,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IAEjD,IACE,WAAW,KAAK,SAAS;QACzB,4BAA4B,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC;QAC5C,qBAAqB,CAAC,IAAI,CAAC,IAAI,EAAE,WAAW,CAAC,QAAQ,CAAC,EACtD,CAAC;QACD,UAAU,CAAC,IAAI,CAAC;YACd,IAAI;YACJ,IAAI,EAAE,SAAS;YACf,YAAY,EAAE,WAAW,CAAC,IAAI;YAC9B,OAAO,EAAE,GAAG,IAAI,CAAC,IAAI,sFAAsF,WAAW,CAAC,IAAI,GAAG;SAC/H,CAAC,CAAC;IACL,CAAC;IAED,IACE,QAAQ,KAAK,SAAS;QACtB,aAAa,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACpD,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,QAAQ,CAAC,IAAI,GAAG,CAAC,EAC1C,CAAC;QACD,UAAU,CAAC,IAAI,CAAC;YACd,IAAI;YACJ,IAAI,EAAE,MAAM;YACZ,YAAY,EAAE,QAAQ,CAAC,IAAI;YAC3B,OAAO,EAAE,GAAG,IAAI,CAAC,IAAI,iEAAiE,QAAQ,CAAC,IAAI,GAAG;SACvG,CAAC,CAAC;IACL,CAAC;IAED,OAAO,UAAU,CAAC;AACpB,CAAC;AAED,SAAS,aAAa,CACpB,QAA6B,EAC7B,IAA2B;IAE3B,OAAO,QAAQ;SACZ,MAAM,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,KAAK,IAAI,CAAC;SAC1C,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,UAAU,GAAG,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC;AAClE,CAAC;AAED,SAAS,qBAAqB,CAAC,IAAY,EAAE,QAAkB;IAC7D,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC;IAC3C,OAAO,QAAQ,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;AAC9F,CAAC;AAED,SAAS,QAAQ,CAAC,KAAa;IAC7B,OAAO,KAAK;SACT,WAAW,EAAE;SACb,KAAK,CAAC,WAAW,CAAC;SAClB,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC;AACpF,CAAC;AAED,SAAS,SAAS,CAAC,SAA2B;IAC5C,OAAO;QACL,EAAE,EAAE,qBAAqB,SAAS,CAAC,IAAI,IAAI,SAAS,CAAC,IAAI,CAAC,IAAI,EAAE;QAChE,QAAQ,EAAE,mBAAmB;QAC7B,QAAQ,EAAE,QAAQ;QAClB,UAAU,EAAE,IAAI;QAChB,KAAK,EAAE,yCAAyC;QAChD,OAAO,EAAE,SAAS,CAAC,OAAO;QAC1B,QAAQ,EAAE;YACR;gBACE,IAAI,EAAE,MAAM;gBACZ,IAAI,EAAE,SAAS,CAAC,IAAI,CAAC,IAAI;gBACzB,OAAO,EAAE,YAAY,SAAS,CAAC,IAAI,UAAU,SAAS,CAAC,YAAY,GAAG;gBACtE,IAAI,EAAE;oBACJ,eAAe,EAAE,SAAS,CAAC,IAAI;oBAC/B,YAAY,EAAE,SAAS,CAAC,YAAY;iBACrC;aACF;SACF;QACD,MAAM,EAAE,wBAAwB,SAAS,CAAC,YAAY,+EAA+E;QACrI,IAAI,EAAE,CAAC,YAAY,CAAC;KACrB,CAAC;AACJ,CAAC"}

package/dist/detectors/repository-intelligence-detector.d.ts

@@ -0,0 +1,3 @@
+import type { Detector } from "./types.js";
+export declare const repositoryIntelligenceDetector: Detector;
+//# sourceMappingURL=repository-intelligence-detector.d.ts.map

package/dist/detectors/repository-intelligence-detector.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"repository-intelligence-detector.d.ts","sourceRoot":"","sources":["../../src/detectors/repository-intelligence-detector.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAC;AAE3C,eAAO,MAAM,8BAA8B,EAAE,QAmB5C,CAAC"}

package/dist/detectors/repository-intelligence-detector.js

@@ -0,0 +1,51 @@
+export const repositoryIntelligenceDetector = {
+    name: "repository-intelligence",
+    run: ({ diff, context }) => {
+        const profile = context?.repositoryProfile ?? context?.knowledge?.getHistoryIndex().profile;
+        if (profile === undefined || profile.commitCount < profile.minConfidenceCommitCount) {
+            return [];
+        }
+        const changedPaths = diff.files.map((file) => file.path);
+        if (changedPaths.length < 2) {
+            return [];
+        }
+        return diff.files
+            .filter((file) => isHistoricallyUnrelated(file, changedPaths, profile))
+            .map((file) => toFinding(file, changedPaths, profile));
+    }
+};
+function isHistoricallyUnrelated(file, changedPaths, profile) {
+    const coChange = profile.coChanges.find((entry) => entry.path === file.path);
+    if (coChange === undefined || coChange.count === 0) {
+        return false;
+    }
+    const relatedChangedPaths = coChange.relatedPaths.filter((related) => changedPaths.includes(related.path));
+    return relatedChangedPaths.length === 0;
+}
+function toFinding(file, changedPaths, profile) {
+    const coChange = profile.coChanges.find((entry) => entry.path === file.path);
+    const topRelated = coChange?.relatedPaths.slice(0, 3).map((related) => related.path) ?? [];
+    return {
+        id: `repository-intelligence:${file.path}`,
+        detector: "repository-intelligence",
+        severity: "medium",
+        confidence: 0.72,
+        title: "Unusual historical change pattern",
+        message: `${file.path} changed with files it has not historically changed with in this repository.`,
+        evidence: [
+            {
+                kind: "history",
+                path: file.path,
+                message: `No historical co-change match among: ${changedPaths.join(", ")}.`,
+                data: {
+                    commitCount: profile.commitCount,
+                    fileChangeCount: coChange?.count ?? 0,
+                    historicallyRelatedPaths: topRelated
+                }
+            }
+        ],
+        repair: "Confirm this cross-area change belongs in the current task, or split unrelated edits into a separate task.",
+        tags: ["scope"]
+    };
+}
+//# sourceMappingURL=repository-intelligence-detector.js.map

package/dist/detectors/repository-intelligence-detector.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"repository-intelligence-detector.js","sourceRoot":"","sources":["../../src/detectors/repository-intelligence-detector.ts"],"names":[],"mappings":"AAIA,MAAM,CAAC,MAAM,8BAA8B,GAAa;IACtD,IAAI,EAAE,yBAAyB;IAC/B,GAAG,EAAE,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,EAAE;QACzB,MAAM,OAAO,GAAG,OAAO,EAAE,iBAAiB,IAAI,OAAO,EAAE,SAAS,EAAE,eAAe,EAAE,CAAC,OAAO,CAAC;QAE5F,IAAI,OAAO,KAAK,SAAS,IAAI,OAAO,CAAC,WAAW,GAAG,OAAO,CAAC,wBAAwB,EAAE,CAAC;YACpF,OAAO,EAAE,CAAC;QACZ,CAAC;QAED,MAAM,YAAY,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAEzD,IAAI,YAAY,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC5B,OAAO,EAAE,CAAC;QACZ,CAAC;QAED,OAAO,IAAI,CAAC,KAAK;aACd,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,uBAAuB,CAAC,IAAI,EAAE,YAAY,EAAE,OAAO,CAAC,CAAC;aACtE,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,SAAS,CAAC,IAAI,EAAE,YAAY,EAAE,OAAO,CAAC,CAAC,CAAC;IAC3D,CAAC;CACF,CAAC;AAEF,SAAS,uBAAuB,CAC9B,IAAc,EACd,YAAsB,EACtB,OAA0B;IAE1B,MAAM,QAAQ,GAAG,OAAO,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,KAAK,IAAI,CAAC,IAAI,CAAC,CAAC;IAE7E,IAAI,QAAQ,KAAK,SAAS,IAAI,QAAQ,CAAC,KAAK,KAAK,CAAC,EAAE,CAAC;QACnD,OAAO,KAAK,CAAC;IACf,CAAC;IAED,MAAM,mBAAmB,GAAG,QAAQ,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC,OAAO,EAAE,EAAE,CACnE,YAAY,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,CACpC,CAAC;IAEF,OAAO,mBAAmB,CAAC,MAAM,KAAK,CAAC,CAAC;AAC1C,CAAC;AAED,SAAS,SAAS,CAAC,IAAc,EAAE,YAAsB,EAAE,OAA0B;IACnF,MAAM,QAAQ,GAAG,OAAO,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,KAAK,IAAI,CAAC,IAAI,CAAC,CAAC;IAC7E,MAAM,UAAU,GAAG,QAAQ,EAAE,YAAY,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;IAE3F,OAAO;QACL,EAAE,EAAE,2BAA2B,IAAI,CAAC,IAAI,EAAE;QAC1C,QAAQ,EAAE,yBAAyB;QACnC,QAAQ,EAAE,QAAQ;QAClB,UAAU,EAAE,IAAI;QAChB,KAAK,EAAE,mCAAmC;QAC1C,OAAO,EAAE,GAAG,IAAI,CAAC,IAAI,8EAA8E;QACnG,QAAQ,EAAE;YACR;gBACE,IAAI,EAAE,SAAS;gBACf,IAAI,EAAE,IAAI,CAAC,IAAI;gBACf,OAAO,EAAE,wCAAwC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG;gBAC3E,IAAI,EAAE;oBACJ,WAAW,EAAE,OAAO,CAAC,WAAW;oBAChC,eAAe,EAAE,QAAQ,EAAE,KAAK,IAAI,CAAC;oBACrC,wBAAwB,EAAE,UAAU;iBACrC;aACF;SACF;QACD,MAAM,EACJ,4GAA4G;QAC9G,IAAI,EAAE,CAAC,OAAO,CAAC;KAChB,CAAC;AACJ,CAAC"}

package/dist/detectors/rewrite-detector.d.ts

@@ -0,0 +1,3 @@
+import type { Detector } from "./types.js";
+export declare const rewriteDetector: Detector;
+//# sourceMappingURL=rewrite-detector.d.ts.map

package/dist/detectors/rewrite-detector.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"rewrite-detector.d.ts","sourceRoot":"","sources":["../../src/detectors/rewrite-detector.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAC;AAM3C,eAAO,MAAM,eAAe,EAAE,QAa7B,CAAC"}

package/dist/detectors/rewrite-detector.js

@@ -0,0 +1,61 @@
+import { analyzeTaskIntent } from "../intent/index.js";
+const minimumRewriteChurn = 80;
+const minimumBalancedSide = 30;
+const minimumBalanceRatio = 0.55;
+export const rewriteDetector = {
+    name: "rewrite",
+    run: ({ task, diff }) => {
+        const analysis = analyzeTaskIntent(task);
+        if (analysis.complexity === "large") {
+            return [];
+        }
+        return diff.files
+            .filter(isRewriteCandidate)
+            .map((file) => toFinding(file, analysis.complexity === "small" ? "high" : "medium"));
+    }
+};
+function isRewriteCandidate(file) {
+    if (file.role !== "source" || file.status === "added" || file.status === "deleted") {
+        return false;
+    }
+    const smallerSide = Math.min(file.additions, file.deletions);
+    const largerSide = Math.max(file.additions, file.deletions);
+    const churn = file.additions + file.deletions;
+    return (churn >= minimumRewriteChurn &&
+        smallerSide >= minimumBalancedSide &&
+        smallerSide / largerSide >= minimumBalanceRatio);
+}
+function toFinding(file, severity) {
+    const firstChangedLine = file.hunks
+        .flatMap((hunk) => hunk.lines)
+        .find((line) => line.kind === "add" || line.kind === "delete");
+    const lineNumber = firstChangedLine?.newLineNumber ?? firstChangedLine?.oldLineNumber;
+    const churn = file.additions + file.deletions;
+    const rewriteRatio = Math.round((Math.min(file.additions, file.deletions) / Math.max(file.additions, file.deletions)) * 100);
+    return {
+        id: `rewrite:${file.path}`,
+        detector: "rewrite",
+        severity,
+        confidence: severity === "high" ? 0.86 : 0.76,
+        title: "Large balanced rewrite detected",
+        message: `${file.path} has ${churn} changed lines with balanced additions and deletions, which looks like a rewrite.`,
+        evidence: [
+            {
+                kind: "metric",
+                path: file.path,
+                startLine: lineNumber,
+                endLine: lineNumber,
+                message: `Additions: ${file.additions}, deletions: ${file.deletions}, rewrite balance: ${rewriteRatio}%.`,
+                data: {
+                    additions: file.additions,
+                    deletions: file.deletions,
+                    churn,
+                    rewriteRatio
+                }
+            }
+        ],
+        repair: "Reduce the change to targeted edits, or split the rewrite into an explicit refactor task with tests and review notes.",
+        tags: ["rewrite"]
+    };
+}
+//# sourceMappingURL=rewrite-detector.js.map

package/dist/detectors/rewrite-detector.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"rewrite-detector.js","sourceRoot":"","sources":["../../src/detectors/rewrite-detector.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAC;AAKvD,MAAM,mBAAmB,GAAG,EAAE,CAAC;AAC/B,MAAM,mBAAmB,GAAG,EAAE,CAAC;AAC/B,MAAM,mBAAmB,GAAG,IAAI,CAAC;AAEjC,MAAM,CAAC,MAAM,eAAe,GAAa;IACvC,IAAI,EAAE,SAAS;IACf,GAAG,EAAE,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,EAAE;QACtB,MAAM,QAAQ,GAAG,iBAAiB,CAAC,IAAI,CAAC,CAAC;QAEzC,IAAI,QAAQ,CAAC,UAAU,KAAK,OAAO,EAAE,CAAC;YACpC,OAAO,EAAE,CAAC;QACZ,CAAC;QAED,OAAO,IAAI,CAAC,KAAK;aACd,MAAM,CAAC,kBAAkB,CAAC;aAC1B,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,SAAS,CAAC,IAAI,EAAE,QAAQ,CAAC,UAAU,KAAK,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC;IACzF,CAAC;CACF,CAAC;AAEF,SAAS,kBAAkB,CAAC,IAAc;IACxC,IAAI,IAAI,CAAC,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,MAAM,KAAK,OAAO,IAAI,IAAI,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;QACnF,OAAO,KAAK,CAAC;IACf,CAAC;IAED,MAAM,WAAW,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;IAC7D,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;IAC5D,MAAM,KAAK,GAAG,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC;IAE9C,OAAO,CACL,KAAK,IAAI,mBAAmB;QAC5B,WAAW,IAAI,mBAAmB;QAClC,WAAW,GAAG,UAAU,IAAI,mBAAmB,CAChD,CAAC;AACJ,CAAC;AAED,SAAS,SAAS,CAAC,IAAc,EAAE,QAAyB;IAC1D,MAAM,gBAAgB,GAAG,IAAI,CAAC,KAAK;SAChC,OAAO,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC;SAC7B,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC;IACjE,MAAM,UAAU,GAAG,gBAAgB,EAAE,aAAa,IAAI,gBAAgB,EAAE,aAAa,CAAC;IACtF,MAAM,KAAK,GAAG,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC;IAC9C,MAAM,YAAY,GAAG,IAAI,CAAC,KAAK,CAC7B,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,SAAS,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC,GAAG,GAAG,CAC5F,CAAC;IAEF,OAAO;QACL,EAAE,EAAE,WAAW,IAAI,CAAC,IAAI,EAAE;QAC1B,QAAQ,EAAE,SAAS;QACnB,QAAQ;QACR,UAAU,EAAE,QAAQ,KAAK,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI;QAC7C,KAAK,EAAE,iCAAiC;QACxC,OAAO,EAAE,GAAG,IAAI,CAAC,IAAI,QAAQ,KAAK,mFAAmF;QACrH,QAAQ,EAAE;YACR;gBACE,IAAI,EAAE,QAAQ;gBACd,IAAI,EAAE,IAAI,CAAC,IAAI;gBACf,SAAS,EAAE,UAAU;gBACrB,OAAO,EAAE,UAAU;gBACnB,OAAO,EAAE,cAAc,IAAI,CAAC,SAAS,gBAAgB,IAAI,CAAC,SAAS,sBAAsB,YAAY,IAAI;gBACzG,IAAI,EAAE;oBACJ,SAAS,EAAE,IAAI,CAAC,SAAS;oBACzB,SAAS,EAAE,IAAI,CAAC,SAAS;oBACzB,KAAK;oBACL,YAAY;iBACb;aACF;SACF;QACD,MAAM,EACJ,uHAAuH;QACzH,IAAI,EAAE,CAAC,SAAS,CAAC;KAClB,CAAC;AACJ,CAAC"}

package/dist/detectors/runner.d.ts

@@ -0,0 +1,9 @@
+import type { Finding, GateResult, TaskIntent } from "../schema/index.js";
+import type { Detector, DetectorRepoContext } from "./types.js";
+export interface FindingDecisionPolicy {
+    observationDetectors?: string[];
+    blockingDetectors?: string[];
+}
+export declare function runDetectors(task: TaskIntent, diff: GateResult["diff"], context?: DetectorRepoContext, detectors?: Detector[]): Finding[];
+export declare function summarizeFindings(findings: Finding[], task?: TaskIntent, diff?: GateResult["diff"], policy?: FindingDecisionPolicy): GateResult["summary"];
+//# sourceMappingURL=runner.d.ts.map

package/dist/detectors/runner.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"runner.d.ts","sourceRoot":"","sources":["../../src/detectors/runner.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAiB1E,OAAO,KAAK,EAAE,QAAQ,EAAE,mBAAmB,EAAE,MAAM,YAAY,CAAC;AAEhE,MAAM,WAAW,qBAAqB;IACpC,oBAAoB,CAAC,EAAE,MAAM,EAAE,CAAC;IAChC,iBAAiB,CAAC,EAAE,MAAM,EAAE,CAAC;CAC9B;AA2BD,wBAAgB,YAAY,CAC1B,IAAI,EAAE,UAAU,EAChB,IAAI,EAAE,UAAU,CAAC,MAAM,CAAC,EACxB,OAAO,CAAC,EAAE,mBAAmB,EAC7B,SAAS,aAAmB,GAC3B,OAAO,EAAE,CAEX;AAED,wBAAgB,iBAAiB,CAC/B,QAAQ,EAAE,OAAO,EAAE,EACnB,IAAI,CAAC,EAAE,UAAU,EACjB,IAAI,CAAC,EAAE,UAAU,CAAC,MAAM,CAAC,EACzB,MAAM,GAAE,qBAA0B,GACjC,UAAU,CAAC,SAAS,CAAC,CAoBvB"}

package/dist/detectors/runner.js

@@ -0,0 +1,96 @@
+import { calculateDiffCostScore, calculateScopeExpansionScore } from "../intent/index.js";
+import { apiSurfaceDetector } from "./api-surface-detector.js";
+import { blastRadiusDetector } from "./blast-radius-detector.js";
+import { configChangeDetector } from "./config-change-detector.js";
+import { dependencyDetector } from "./dependency-detector.js";
+import { existingSolutionDetector } from "./existing-solution-detector.js";
+import { expectedCompanionsDetector } from "./expected-companions-detector.js";
+import { intentVerificationDetector } from "./intent-verification-detector.js";
+import { patternViolationDetector } from "./pattern-violation-detector.js";
+import { rewriteDetector } from "./rewrite-detector.js";
+import { repositoryIntelligenceDetector } from "./repository-intelligence-detector.js";
+import { secretPathDetector } from "./secret-path-detector.js";
+import { scopeDetector } from "./scope-detector.js";
+import { testWeakeningDetector } from "./test-weakening-detector.js";
+import { utilityReinventionDetector } from "./utility-reinvention-detector.js";
+const defaultObservationDetectors = [
+    "intent-verification",
+    "blast-radius",
+    "existing-solution",
+    "pattern-violation",
+    "expected-companions"
+];
+const defaultDetectors = [
+    dependencyDetector,
+    testWeakeningDetector,
+    configChangeDetector,
+    secretPathDetector,
+    apiSurfaceDetector,
+    intentVerificationDetector,
+    blastRadiusDetector,
+    scopeDetector,
+    rewriteDetector,
+    repositoryIntelligenceDetector,
+    expectedCompanionsDetector,
+    utilityReinventionDetector,
+    existingSolutionDetector,
+    patternViolationDetector
+];
+export function runDetectors(task, diff, context, detectors = defaultDetectors) {
+    return dedupeFindings(detectors.flatMap((detector) => detector.run({ task, diff, context })));
+}
+export function summarizeFindings(findings, task, diff, policy = {}) {
+    const blockerCount = countSeverity(findings, "blocker");
+    const highCount = countSeverity(findings, "high");
+    const blockingFindings = findings.filter((finding) => isBlockingFinding(finding, policy));
+    return {
+        decision: blockingFindings.length > 0 ? "fail" : "pass",
+        findingCount: findings.length,
+        blockerCount,
+        highCount,
+        mediumCount: countSeverity(findings, "medium"),
+        lowCount: countSeverity(findings, "low"),
+        infoCount: countSeverity(findings, "info"),
+        diffCostScore: task !== undefined && diff !== undefined ? calculateDiffCostScore(task, diff.files) : 0,
+        scopeExpansionScore: task !== undefined && diff !== undefined
+            ? calculateScopeExpansionScore(task, diff.files, findings)
+            : undefined
+    };
+}
+function isBlockingFinding(finding, policy) {
+    if (finding.severity !== "blocker" && finding.severity !== "high") {
+        return false;
+    }
+    if (policy.blockingDetectors?.includes(finding.detector) === true) {
+        return true;
+    }
+    const observationDetectors = policy.observationDetectors ?? defaultObservationDetectors;
+    return !observationDetectors.includes(finding.detector);
+}
+function countSeverity(findings, severity) {
+    return findings.filter((finding) => finding.severity === severity).length;
+}
+function dedupeFindings(findings) {
+    const blastRadiusPaths = new Set(findings
+        .filter((finding) => finding.detector === "blast-radius")
+        .flatMap((finding) => finding.evidence.map((evidence) => evidence.path))
+        .filter((path) => path !== undefined));
+    const expectedCompanionSourcePaths = new Set(findings
+        .filter((finding) => finding.detector === "expected-companions")
+        .flatMap((finding) => finding.evidence.map((evidence) => evidence.path))
+        .filter((path) => path !== undefined));
+    if (blastRadiusPaths.size === 0 && expectedCompanionSourcePaths.size === 0) {
+        return findings;
+    }
+    return findings.filter((finding) => {
+        if (finding.detector === "repository-intelligence" &&
+            finding.evidence.some((evidence) => evidence.path !== undefined && expectedCompanionSourcePaths.has(evidence.path))) {
+            return false;
+        }
+        if (finding.detector !== "scope" || finding.severity !== "medium") {
+            return true;
+        }
+        return !finding.evidence.some((evidence) => evidence.path !== undefined && blastRadiusPaths.has(evidence.path));
+    });
+}
+//# sourceMappingURL=runner.js.map

package/dist/detectors/runner.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"runner.js","sourceRoot":"","sources":["../../src/detectors/runner.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,sBAAsB,EAAE,4BAA4B,EAAE,MAAM,oBAAoB,CAAC;AAC1F,OAAO,EAAE,kBAAkB,EAAE,MAAM,2BAA2B,CAAC;AAC/D,OAAO,EAAE,mBAAmB,EAAE,MAAM,4BAA4B,CAAC;AACjE,OAAO,EAAE,oBAAoB,EAAE,MAAM,6BAA6B,CAAC;AACnE,OAAO,EAAE,kBAAkB,EAAE,MAAM,0BAA0B,CAAC;AAC9D,OAAO,EAAE,wBAAwB,EAAE,MAAM,iCAAiC,CAAC;AAC3E,OAAO,EAAE,0BAA0B,EAAE,MAAM,mCAAmC,CAAC;AAC/E,OAAO,EAAE,0BAA0B,EAAE,MAAM,mCAAmC,CAAC;AAC/E,OAAO,EAAE,wBAAwB,EAAE,MAAM,iCAAiC,CAAC;AAC3E,OAAO,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AACxD,OAAO,EAAE,8BAA8B,EAAE,MAAM,uCAAuC,CAAC;AACvF,OAAO,EAAE,kBAAkB,EAAE,MAAM,2BAA2B,CAAC;AAC/D,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AACpD,OAAO,EAAE,qBAAqB,EAAE,MAAM,8BAA8B,CAAC;AACrE,OAAO,EAAE,0BAA0B,EAAE,MAAM,mCAAmC,CAAC;AAQ/E,MAAM,2BAA2B,GAAG;IAClC,qBAAqB;IACrB,cAAc;IACd,mBAAmB;IACnB,mBAAmB;IACnB,qBAAqB;CACtB,CAAC;AAEF,MAAM,gBAAgB,GAAe;IACnC,kBAAkB;IAClB,qBAAqB;IACrB,oBAAoB;IACpB,kBAAkB;IAClB,kBAAkB;IAClB,0BAA0B;IAC1B,mBAAmB;IACnB,aAAa;IACb,eAAe;IACf,8BAA8B;IAC9B,0BAA0B;IAC1B,0BAA0B;IAC1B,wBAAwB;IACxB,wBAAwB;CACzB,CAAC;AAEF,MAAM,UAAU,YAAY,CAC1B,IAAgB,EAChB,IAAwB,EACxB,OAA6B,EAC7B,SAAS,GAAG,gBAAgB;IAE5B,OAAO,cAAc,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC;AAChG,CAAC;AAED,MAAM,UAAU,iBAAiB,CAC/B,QAAmB,EACnB,IAAiB,EACjB,IAAyB,EACzB,SAAgC,EAAE;IAElC,MAAM,YAAY,GAAG,aAAa,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC;IACxD,MAAM,SAAS,GAAG,aAAa,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IAClD,MAAM,gBAAgB,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,iBAAiB,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC;IAE1F,OAAO;QACL,QAAQ,EAAE,gBAAgB,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM;QACvD,YAAY,EAAE,QAAQ,CAAC,MAAM;QAC7B,YAAY;QACZ,SAAS;QACT,WAAW,EAAE,aAAa,CAAC,QAAQ,EAAE,QAAQ,CAAC;QAC9C,QAAQ,EAAE,aAAa,CAAC,QAAQ,EAAE,KAAK,CAAC;QACxC,SAAS,EAAE,aAAa,CAAC,QAAQ,EAAE,MAAM,CAAC;QAC1C,aAAa,EACX,IAAI,KAAK,SAAS,IAAI,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,sBAAsB,CAAC,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;QACzF,mBAAmB,EACjB,IAAI,KAAK,SAAS,IAAI,IAAI,KAAK,SAAS;YACtC,CAAC,CAAC,4BAA4B,CAAC,IAAI,EAAE,IAAI,CAAC,KAAK,EAAE,QAAQ,CAAC;YAC1D,CAAC,CAAC,SAAS;KAChB,CAAC;AACJ,CAAC;AAED,SAAS,iBAAiB,CAAC,OAAgB,EAAE,MAA6B;IACxE,IAAI,OAAO,CAAC,QAAQ,KAAK,SAAS,IAAI,OAAO,CAAC,QAAQ,KAAK,MAAM,EAAE,CAAC;QAClE,OAAO,KAAK,CAAC;IACf,CAAC;IAED,IAAI,MAAM,CAAC,iBAAiB,EAAE,QAAQ,CAAC,OAAO,CAAC,QAAQ,CAAC,KAAK,IAAI,EAAE,CAAC;QAClE,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,oBAAoB,GAAG,MAAM,CAAC,oBAAoB,IAAI,2BAA2B,CAAC;IAExF,OAAO,CAAC,oBAAoB,CAAC,QAAQ,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;AAC1D,CAAC;AAED,SAAS,aAAa,CAAC,QAAmB,EAAE,QAA6B;IACvE,OAAO,QAAQ,CAAC,MAAM,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,MAAM,CAAC;AAC5E,CAAC;AAED,SAAS,cAAc,CAAC,QAAmB;IACzC,MAAM,gBAAgB,GAAG,IAAI,GAAG,CAC9B,QAAQ;SACL,MAAM,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,QAAQ,KAAK,cAAc,CAAC;SACxD,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;SACvE,MAAM,CAAC,CAAC,IAAI,EAAkB,EAAE,CAAC,IAAI,KAAK,SAAS,CAAC,CACxD,CAAC;IACF,MAAM,4BAA4B,GAAG,IAAI,GAAG,CAC1C,QAAQ;SACL,MAAM,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,QAAQ,KAAK,qBAAqB,CAAC;SAC/D,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;SACvE,MAAM,CAAC,CAAC,IAAI,EAAkB,EAAE,CAAC,IAAI,KAAK,SAAS,CAAC,CACxD,CAAC;IAEF,IAAI,gBAAgB,CAAC,IAAI,KAAK,CAAC,IAAI,4BAA4B,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC;QAC3E,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED,OAAO,QAAQ,CAAC,MAAM,CAAC,CAAC,OAAO,EAAE,EAAE;QACjC,IACE,OAAO,CAAC,QAAQ,KAAK,yBAAyB;YAC9C,OAAO,CAAC,QAAQ,CAAC,IAAI,CACnB,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,IAAI,KAAK,SAAS,IAAI,4BAA4B,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,CAC7F,EACD,CAAC;YACD,OAAO,KAAK,CAAC;QACf,CAAC;QAED,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,IAAI,OAAO,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;YAClE,OAAO,IAAI,CAAC;QACd,CAAC;QAED,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAC3B,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,IAAI,KAAK,SAAS,IAAI,gBAAgB,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,CACjF,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/detectors/scope-detector.d.ts

@@ -0,0 +1,3 @@
+import type { Detector } from "./types.js";
+export declare const scopeDetector: Detector;
+//# sourceMappingURL=scope-detector.d.ts.map

package/dist/detectors/scope-detector.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"scope-detector.d.ts","sourceRoot":"","sources":["../../src/detectors/scope-detector.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAC;AAiC3C,eAAO,MAAM,aAAa,EAAE,QAa3B,CAAC"}

package/dist/detectors/scope-detector.js

@@ -0,0 +1,138 @@
+import { analyzeTaskIntent } from "../intent/index.js";
+const broadTaskTerms = ["repo", "project", "all", "setup", "scaffold", "architecture", "refactor"];
+const configTaskTerms = [
+    "build",
+    "ci",
+    "config",
+    "configuration",
+    "github action",
+    "github actions",
+    "lint",
+    "test runner",
+    "workflow"
+];
+const manifestTaskTerms = [
+    "dependency",
+    "dependencies",
+    "engine",
+    "engines",
+    "extension",
+    "manifest",
+    "marketplace",
+    "metadata",
+    "node",
+    "package",
+    "publish",
+    "publisher",
+    "pnpm",
+    "runtime"
+];
+const releaseTaskPattern = /(?:^|\b)(?:v?\d+\.\d+\.\d+(?:[-+][a-z0-9.-]+)?|release|version|bump|publish)(?:\b|$)/i;
+export const scopeDetector = {
+    name: "scope",
+    run: ({ task, diff }) => {
+        const analysis = analyzeTaskIntent(task);
+        if (analysis.complexity !== "small" || isBroadTask(task.text)) {
+            return [];
+        }
+        return diff.files
+            .filter((file) => isUnexpectedForSmallTask(file, analysis.keywords, task.text))
+            .map((file) => toFinding(file, analysis.keywords));
+    }
+};
+function isBroadTask(taskText) {
+    const normalizedTask = taskText.toLowerCase();
+    return broadTaskTerms.some((term) => normalizedTask.includes(term));
+}
+function isUnexpectedForSmallTask(file, keywords, taskText) {
+    if (file.role === "docs" || file.role === "test") {
+        return false;
+    }
+    if (file.role === "manifest" && isVersionOnlyReleaseManifestChange(file, taskText)) {
+        return false;
+    }
+    if (isRoleAlignedConfigOrManifestChange(file, taskText, keywords)) {
+        return false;
+    }
+    if (file.role === "config" || file.role === "manifest" || file.role === "lockfile") {
+        return true;
+    }
+    if (file.role !== "source") {
+        return false;
+    }
+    if (file.status === "deleted" && !isDeletionAcknowledged(file, taskText, keywords)) {
+        return true;
+    }
+    return keywords.length > 0 && !hasPathKeywordAlignment(file.path, keywords);
+}
+function hasPathKeywordAlignment(path, keywords) {
+    const normalizedPath = path.toLowerCase();
+    return keywords.some((keyword) => normalizedPath.includes(keyword));
+}
+function isRoleAlignedConfigOrManifestChange(file, taskText, keywords) {
+    if (file.role === "config") {
+        return (hasAnyTaskTerm(taskText, configTaskTerms) || hasPathKeywordAlignment(file.path, keywords));
+    }
+    if (file.role === "manifest" || file.role === "lockfile") {
+        return hasAnyTaskTerm(taskText, manifestTaskTerms);
+    }
+    return false;
+}
+function hasAnyTaskTerm(taskText, terms) {
+    const normalizedTask = taskText.toLowerCase();
+    return terms.some((term) => normalizedTask.includes(term));
+}
+function isDeletionAcknowledged(file, taskText, keywords) {
+    return (hasAnyTaskTerm(taskText, ["delete", "deleted", "remove", "removed", "drop", "cleanup"]) &&
+        hasPathKeywordAlignment(file.path, keywords));
+}
+function isVersionOnlyReleaseManifestChange(file, taskText) {
+    return isReleaseTask(taskText) && isPackageVersionOnlyChange(file);
+}
+function isReleaseTask(taskText) {
+    return releaseTaskPattern.test(taskText);
+}
+function isPackageVersionOnlyChange(file) {
+    if (file.path !== "package.json" && !file.path.endsWith("/package.json")) {
+        return false;
+    }
+    const changedLines = file.hunks
+        .flatMap((hunk) => hunk.lines)
+        .filter((line) => line.kind === "add" || line.kind === "delete");
+    return (changedLines.length > 0 &&
+        changedLines.every((line) => /^\s*"version":\s*"[^"]+"\s*,?\s*$/.test(line.content)));
+}
+function toFinding(file, keywords) {
+    const firstChangedLine = file.hunks
+        .flatMap((hunk) => hunk.lines)
+        .find((line) => line.kind === "add" || line.kind === "delete");
+    const lineNumber = firstChangedLine?.newLineNumber ?? firstChangedLine?.oldLineNumber;
+    return {
+        id: `scope:${file.path}`,
+        detector: "scope",
+        severity: file.role === "source" && file.status !== "deleted" ? "medium" : "high",
+        confidence: file.role === "source" && file.status !== "deleted" ? 0.7 : 0.84,
+        title: file.status === "deleted"
+            ? "Unexpected file deleted for small task"
+            : "Unexpected file changed for small task",
+        message: `${file.path} ${file.status === "deleted" ? "was deleted" : "changed"} during a small task but does not align with expected scope.`,
+        evidence: [
+            {
+                kind: "file",
+                path: file.path,
+                startLine: lineNumber,
+                endLine: lineNumber,
+                message: `Changed file role: ${file.role}. Task keywords: ${keywords.join(", ") || "none"}.`,
+                data: {
+                    role: file.role,
+                    additions: file.additions,
+                    deletions: file.deletions,
+                    keywords
+                }
+            }
+        ],
+        repair: "Remove unrelated edits or split them into a separate task with explicit justification.",
+        tags: ["scope"]
+    };
+}
+//# sourceMappingURL=scope-detector.js.map

package/dist/detectors/scope-detector.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"scope-detector.js","sourceRoot":"","sources":["../../src/detectors/scope-detector.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAC;AAKvD,MAAM,cAAc,GAAG,CAAC,MAAM,EAAE,SAAS,EAAE,KAAK,EAAE,OAAO,EAAE,UAAU,EAAE,cAAc,EAAE,UAAU,CAAC,CAAC;AACnG,MAAM,eAAe,GAAG;IACtB,OAAO;IACP,IAAI;IACJ,QAAQ;IACR,eAAe;IACf,eAAe;IACf,gBAAgB;IAChB,MAAM;IACN,aAAa;IACb,UAAU;CACX,CAAC;AACF,MAAM,iBAAiB,GAAG;IACxB,YAAY;IACZ,cAAc;IACd,QAAQ;IACR,SAAS;IACT,WAAW;IACX,UAAU;IACV,aAAa;IACb,UAAU;IACV,MAAM;IACN,SAAS;IACT,SAAS;IACT,WAAW;IACX,MAAM;IACN,SAAS;CACV,CAAC;AACF,MAAM,kBAAkB,GACtB,uFAAuF,CAAC;AAE1F,MAAM,CAAC,MAAM,aAAa,GAAa;IACrC,IAAI,EAAE,OAAO;IACb,GAAG,EAAE,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,EAAE;QACtB,MAAM,QAAQ,GAAG,iBAAiB,CAAC,IAAI,CAAC,CAAC;QAEzC,IAAI,QAAQ,CAAC,UAAU,KAAK,OAAO,IAAI,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YAC9D,OAAO,EAAE,CAAC;QACZ,CAAC;QAED,OAAO,IAAI,CAAC,KAAK;aACd,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,wBAAwB,CAAC,IAAI,EAAE,QAAQ,CAAC,QAAQ,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;aAC9E,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,SAAS,CAAC,IAAI,EAAE,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC;IACvD,CAAC;CACF,CAAC;AAEF,SAAS,WAAW,CAAC,QAAgB;IACnC,MAAM,cAAc,GAAG,QAAQ,CAAC,WAAW,EAAE,CAAC;IAC9C,OAAO,cAAc,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,cAAc,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC;AACtE,CAAC;AAED,SAAS,wBAAwB,CAAC,IAAc,EAAE,QAAkB,EAAE,QAAgB;IACpF,IAAI,IAAI,CAAC,IAAI,KAAK,MAAM,IAAI,IAAI,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;QACjD,OAAO,KAAK,CAAC;IACf,CAAC;IAED,IAAI,IAAI,CAAC,IAAI,KAAK,UAAU,IAAI,kCAAkC,CAAC,IAAI,EAAE,QAAQ,CAAC,EAAE,CAAC;QACnF,OAAO,KAAK,CAAC;IACf,CAAC;IAED,IAAI,mCAAmC,CAAC,IAAI,EAAE,QAAQ,EAAE,QAAQ,CAAC,EAAE,CAAC;QAClE,OAAO,KAAK,CAAC;IACf,CAAC;IAED,IAAI,IAAI,CAAC,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,IAAI,KAAK,UAAU,IAAI,IAAI,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;QACnF,OAAO,IAAI,CAAC;IACd,CAAC;IAED,IAAI,IAAI,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;QAC3B,OAAO,KAAK,CAAC;IACf,CAAC;IAED,IAAI,IAAI,CAAC,MAAM,KAAK,SAAS,IAAI,CAAC,sBAAsB,CAAC,IAAI,EAAE,QAAQ,EAAE,QAAQ,CAAC,EAAE,CAAC;QACnF,OAAO,IAAI,CAAC;IACd,CAAC;IAED,OAAO,QAAQ,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,uBAAuB,CAAC,IAAI,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;AAC9E,CAAC;AAED,SAAS,uBAAuB,CAAC,IAAY,EAAE,QAAkB;IAC/D,MAAM,cAAc,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC;IAC1C,OAAO,QAAQ,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,cAAc,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC;AACtE,CAAC;AAED,SAAS,mCAAmC,CAC1C,IAAc,EACd,QAAgB,EAChB,QAAkB;IAElB,IAAI,IAAI,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;QAC3B,OAAO,CACL,cAAc,CAAC,QAAQ,EAAE,eAAe,CAAC,IAAI,uBAAuB,CAAC,IAAI,CAAC,IAAI,EAAE,QAAQ,CAAC,CAC1F,CAAC;IACJ,CAAC;IAED,IAAI,IAAI,CAAC,IAAI,KAAK,UAAU,IAAI,IAAI,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;QACzD,OAAO,cAAc,CAAC,QAAQ,EAAE,iBAAiB,CAAC,CAAC;IACrD,CAAC;IAED,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,cAAc,CAAC,QAAgB,EAAE,KAAe;IACvD,MAAM,cAAc,GAAG,QAAQ,CAAC,WAAW,EAAE,CAAC;IAC9C,OAAO,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,cAAc,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC;AAC7D,CAAC;AAED,SAAS,sBAAsB,CAAC,IAAc,EAAE,QAAgB,EAAE,QAAkB;IAClF,OAAO,CACL,cAAc,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE,SAAS,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,EAAE,SAAS,CAAC,CAAC;QACvF,uBAAuB,CAAC,IAAI,CAAC,IAAI,EAAE,QAAQ,CAAC,CAC7C,CAAC;AACJ,CAAC;AAED,SAAS,kCAAkC,CAAC,IAAc,EAAE,QAAgB;IAC1E,OAAO,aAAa,CAAC,QAAQ,CAAC,IAAI,0BAA0B,CAAC,IAAI,CAAC,CAAC;AACrE,CAAC;AAED,SAAS,aAAa,CAAC,QAAgB;IACrC,OAAO,kBAAkB,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;AAC3C,CAAC;AAED,SAAS,0BAA0B,CAAC,IAAc;IAChD,IAAI,IAAI,CAAC,IAAI,KAAK,cAAc,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,eAAe,CAAC,EAAE,CAAC;QACzE,OAAO,KAAK,CAAC;IACf,CAAC;IAED,MAAM,YAAY,GAAG,IAAI,CAAC,KAAK;SAC5B,OAAO,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC;SAC7B,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC;IAEnE,OAAO,CACL,YAAY,CAAC,MAAM,GAAG,CAAC;QACvB,YAAY,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,mCAAmC,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CACrF,CAAC;AACJ,CAAC;AAED,SAAS,SAAS,CAAC,IAAc,EAAE,QAAkB;IACnD,MAAM,gBAAgB,GAAG,IAAI,CAAC,KAAK;SAChC,OAAO,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC;SAC7B,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC;IACjE,MAAM,UAAU,GAAG,gBAAgB,EAAE,aAAa,IAAI,gBAAgB,EAAE,aAAa,CAAC;IAEtF,OAAO;QACL,EAAE,EAAE,SAAS,IAAI,CAAC,IAAI,EAAE;QACxB,QAAQ,EAAE,OAAO;QACjB,QAAQ,EAAE,IAAI,CAAC,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM;QACjF,UAAU,EAAE,IAAI,CAAC,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI;QAC5E,KAAK,EACH,IAAI,CAAC,MAAM,KAAK,SAAS;YACvB,CAAC,CAAC,wCAAwC;YAC1C,CAAC,CAAC,wCAAwC;QAC9C,OAAO,EAAE,GAAG,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,SAAS,8DAA8D;QAC5I,QAAQ,EAAE;YACR;gBACE,IAAI,EAAE,MAAM;gBACZ,IAAI,EAAE,IAAI,CAAC,IAAI;gBACf,SAAS,EAAE,UAAU;gBACrB,OAAO,EAAE,UAAU;gBACnB,OAAO,EAAE,sBAAsB,IAAI,CAAC,IAAI,oBAAoB,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,MAAM,GAAG;gBAC5F,IAAI,EAAE;oBACJ,IAAI,EAAE,IAAI,CAAC,IAAI;oBACf,SAAS,EAAE,IAAI,CAAC,SAAS;oBACzB,SAAS,EAAE,IAAI,CAAC,SAAS;oBACzB,QAAQ;iBACT;aACF;SACF;QACD,MAAM,EACJ,wFAAwF;QAC1F,IAAI,EAAE,CAAC,OAAO,CAAC;KAChB,CAAC;AACJ,CAAC"}

package/dist/detectors/secret-path-detector.d.ts

@@ -0,0 +1,5 @@
+import type { DiffFile, Finding } from "../schema/index.js";
+import type { Detector } from "./types.js";
+export declare const secretPathDetector: Detector;
+export declare function scanAddedLinesForSecretsAndPaths(file: DiffFile): Finding[];
+//# sourceMappingURL=secret-path-detector.d.ts.map

package/dist/detectors/secret-path-detector.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"secret-path-detector.d.ts","sourceRoot":"","sources":["../../src/detectors/secret-path-detector.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,QAAQ,EAAY,OAAO,EAAmB,MAAM,oBAAoB,CAAC;AAEvF,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAC;AA2B3C,eAAO,MAAM,kBAAkB,EAAE,QAGhC,CAAC;AA8JF,wBAAgB,gCAAgC,CAAC,IAAI,EAAE,QAAQ,GAAG,OAAO,EAAE,CAM1E"}