human-to-code 0.1.14 → 0.1.16

package/docs/MODULES.md

@@ -84,12 +84,15 @@ accept typed, already-reviewed data and perform no I/O or mutation.
 | --- | --- |
 | `types.ts` | Direct-agent request, unit, progress, result, and provider-option types. |
 | `languages.ts` | Language-to-extension and human-readable prompt-label mapping. |
-| `marker-parser.ts` | Lightweight lexical scanner for real `@human` comment markers; quoted and already-commented examples stay inert. |
-| `discovery.ts` | Bounded file walking and conversion-unit creation for `.human` files and inline markers. |
-| `file-memory.ts` | Ephemeral declaration memory, replacement normalization, retry isolation, and sequential per-file generation. |
+| `marker-parser.ts` | Lightweight lexical scanner for real line, block, and JSDoc `@human` comment markers; quoted and already-commented examples stay inert. |
+| `discovery.ts` | Bounded file walking and conversion-unit creation, including existing-target and unsupported-marker notices. |
+| `declarations.ts` | Language-aware declared-identifier extraction, including type-led C, C++, C#, and Java declarations. |
+| `replacement.ts` | Exact inline-marker byte verification plus newline-preserving indentation formatting shared by memory and application. |
+| `candidate-validation.ts` | Pre-write syntax gate: TypeScript parser diagnostics for JS/TS and deterministic structure checks for other direct languages. It does not claim semantic or sandbox verification. |
+| `file-memory.ts` | Ephemeral declaration memory, replacement normalization, candidate-validation retry isolation, and sequential per-file generation. |
 | `generation-client.ts` | One direct provider request through OpenAI-compatible chat or Ollama, using the central direct prompt builder. |
-| `presentation.ts` | Stable conversion receipt and code-fence cleanup. |
-| `application.ts` | Exact-range inline replacement and whole-file writes. |
+| `presentation.ts` | Stable conversion receipt and unambiguous single-code-block extraction; rejects multiple or unterminated fences. |
+| `application.ts` | Stale-safe inline replacement and exclusive whole-file creation that never overwrites a sibling. |
 | `index.ts` | Direct-agent export surface used by the CLI and package entry point. |
 
 ### `src/agents/guided/`
@@ -112,7 +115,7 @@ accept typed, already-reviewed data and perform no I/O or mutation.
 | `patch.ts` | Constrained patch validation and atomic application (`preparePatch`, `applyPatchAtomic`, `PatchSafetyError`, `PatchPolicy`): scope/hash/anchor checks, protected/generated/lockfile refusal, traversal/symlink/binary/collision rejection, per-file atomic writes, rollback artifacts. |
 | `validation.ts` | Strong container-only validation (`validateBaselineAndCandidate`, `strongSandboxAvailable`): Docker/Podman sandbox with no network, read-only root, scrubbed environment, resource limits; unchanged baseline first, then candidate; secret-scanned output. |
 | `run-store.ts` | `RunStore`: durable, private, crash-safe run metadata (contracts, patches, reports, rollback artifacts) with recursive secret gating on every write. |
-| `file-memory.ts` | Dependency-free static declaration/signature indexing for every language scanned by the direct path. Produces exact line-range evidence without executing project code. |
+| `file-memory.ts` | Dependency-free static declaration/signature indexing for every language scanned by the direct path, including JavaScript regex-literal awareness. Produces exact line-range evidence without executing project code. |
 | `simple.ts` | Deprecated source-compatibility re-export for `agents/direct/`; contains no implementation. |
 | `workflow.ts` | Deprecated source-compatibility re-export for `agents/guided/`; contains no implementation. |
 
@@ -129,5 +132,6 @@ accept typed, already-reviewed data and perform no I/O or mutation.
 | `test/certification.test.ts`, `test/release-gate.test.ts` | Certification evidence gate and release-status honesty. |
 | `test/planner.test.ts`, `test/patch.test.ts`, `test/snapshot.test.ts`, `test/run-store.test.ts`, `test/validation.test.ts`, `test/guided-agent.test.ts` | Guided mechanics and lifecycle stage by stage, including apply/rollback and repair limits. |
 | `test/direct-agent.test.ts` | Lexical marker discovery, FileMemory indexing/normalization, provider prompts, retry isolation, and application. |
+| `test/direct-reliability.test.ts` | Regression coverage for direct issues 02 and 04–11: JSDoc, output cleanup, validation, overwrite/staleness/indent guards, regex memory, C-family declarations, and discovery notices. |
 | `test/cli.test.ts` | Command surface and exit codes. |
 | `test/package-smoke.mjs` | Packed-tarball install, public import, installed-CLI invocation (`npm run package:check`). |

package/docs/SCALABILITY.md

@@ -87,9 +87,10 @@ between releases:
   `noUncheckedIndexedAccess` stay on; avoid `any` and non-null assertions —
   validate at the boundary and let types flow.
 - **Minimal production dependencies.** HTTP, hashing, JSON, process handling,
-  provider access, and orchestration use Node built-ins. Adding a runtime
-  dependency changes the supply-chain posture and needs a design discussion
-  first.
+  provider access, and orchestration use Node built-ins. TypeScript is the one
+  deliberate runtime parser dependency for direct JS/TS candidate validation.
+  Adding another runtime dependency changes the supply-chain posture and needs
+  a design discussion first.
 - **Errors are typed and named.** Each layer exports its own error classes
   (`ArtifactValidationError`, `ProviderError`, `PatchSafetyError`, …) so the
   CLI can map failures to exit codes without string matching. Error messages

package/docs/roadmap/README.md

@@ -12,7 +12,8 @@ up this ladder deliberately:
 1. **Direct path** (`src/agents/direct/`) — the language has an entry in
    `LANGUAGE_PROFILES` (output extension + prompt label) and, if it has an
    inline-comment form, its source extensions are in `SCANNED_EXTENSIONS` for
-   `@human` markers. No grounding, no validation; receipt-and-confirm only.
+   `@human` markers. This path has pre-write syntax/structure checks, but no API
+   grounding, project build/test execution, sandbox, or `VERIFIED` status.
    *Today: TypeScript, JavaScript, Python, Rust, Go, Java, Ruby, C#, C++, C.*
 2. **General fallback** (`src/analysis/adapters/general.ts`) — any declared
    language can flow through the guided pipeline ungrounded, permanently

package/docs/roadmap/ruby.md

@@ -1,9 +1,9 @@
 # Ruby support plan
 
 ## Status today
-Level 1: `LANGUAGE_PROFILES` has `ruby` (`.rb`); `.rb` is **not** yet in
-`SCANNED_EXTENSIONS`, so inline `# @human` markers in Ruby files are not
-discovered — adding it is a one-line prerequisite worth shipping early.
+Level 1: `LANGUAGE_PROFILES` has `ruby` (`.rb`) and `.rb` is in
+`SCANNED_EXTENSIONS`, so whole-file `.human` and inline `# @human` markers
+work through the direct path. No grounded profile exists yet.
 
 ## Target profile
 - `Ecosystem`: `ruby`.
@@ -38,7 +38,6 @@ elevated-risk. Dynamic requires make import grounding partially opaque —
 document as an accepted limitation like Python's.
 
 ## Checklist
-0. Add `.rb` to `SCANNED_EXTENSIONS` in `agents/direct/discovery.ts` (independent quick win).
 1. `Ecosystem` union + `analysis/adapters/ruby.ts`.
 2. `ruby/gem`, `ruby/rails`, `ruby/rack` at `preview`.
 3. Register adapter; Ruby/Rails skill pack.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "human-to-code",
-  "version": "0.1.14",
+  "version": "0.1.16",
   "description": "Safely turn reviewed natural-language change contracts into validated code patches.",
   "type": "module",
   "main": "./dist/index.js",
@@ -28,6 +28,9 @@
   "engines": {
     "node": ">=24.0.0"
   },
+  "dependencies": {
+    "typescript": "5.9.3"
+  },
   "scripts": {
     "build": "tsc -p tsconfig.json",
     "clean": "node -e \"require('node:fs').rmSync('dist', { recursive: true, force: true })\"",
@@ -50,7 +53,6 @@
     "access": "public"
   },
   "devDependencies": {
-    "@types/node": "24.13.3",
-    "typescript": "5.9.3"
+    "@types/node": "24.13.3"
   }
 }