lockwire 0.1.22 → 0.1.24

package/dist/values.js

@@ -0,0 +1,167 @@
+/**
+ * Value anchors: a claim bound to a value in a data file rather than to code.
+ *
+ *   <!-- lockwire results/metrics.json#ci.canon.cve.lo value -->
+ *   The lower bound of the canonical CVE interval is 0.18.
+ *
+ *   <!-- lockwire paper/numbers.tex#ciCanonCVELo value -->
+ *
+ * The `value` tier fingerprints the value itself (not the file, so re-serialising a JSON file with
+ * its keys in a different order changes nothing). And because a number in a sentence can be checked
+ * against the number it came from, a value anchor is a real truth check: the claim is compared with
+ * the current value, rounded to the precision the sentence shows.
+ */
+import { canonicalJson } from "./hash.js";
+const DATA_EXTENSIONS = {
+    ".json": "json",
+    ".tex": "tex",
+    ".sty": "tex",
+    ".ltx": "tex",
+};
+export function dataFormatOf(path) {
+    const dot = path.lastIndexOf(".");
+    return dot < 0 ? undefined : DATA_EXTENSIONS[path.slice(dot).toLowerCase()];
+}
+/** `a.b[0].c`, `a.b.0.c`, or a JSON Pointer (`/a/b/0/c`, for keys that contain dots). */
+function jsonPath(key) {
+    if (key.startsWith("/"))
+        return key
+            .slice(1)
+            .split("/")
+            .map((s) => s.replace(/~1/g, "/").replace(/~0/g, "~"));
+    return key
+        .replace(/\[(\d+)\]/g, ".$1")
+        .split(".")
+        .filter((s) => s !== "");
+}
+/** LaTeX: `\newcommand{\name}{body}`, `\renewcommand`, `\providecommand`, `\def\name{body}`. */
+function texMacros(text) {
+    const out = new Map();
+    const re = /\\(?:(?:re)?newcommand|providecommand)\*?\s*\{?\s*\\([A-Za-z@]+)\s*\}?\s*(?:\[\d\])?\s*\{|\\def\s*\\([A-Za-z@]+)\s*\{/g;
+    for (let m = re.exec(text); m; m = re.exec(text)) {
+        const name = m[1] ?? m[2];
+        if (!name)
+            continue;
+        // read the balanced-brace body that starts right after the match
+        let depth = 1;
+        let i = re.lastIndex;
+        for (; i < text.length && depth > 0; i++) {
+            const c = text[i];
+            if (c === "\\")
+                i++;
+            else if (c === "{")
+                depth++;
+            else if (c === "}")
+                depth--;
+        }
+        out.set(name, text.slice(re.lastIndex, i - 1));
+        re.lastIndex = i;
+    }
+    return out;
+}
+/** Strip the LaTeX that typically wraps a generated number: `\num{0.18}`, `$0.18$`, `0.18\%`, `\SI{3}{ms}`. */
+function texValue(body) {
+    let s = body.trim();
+    for (;;) {
+        const unwrapped = s
+            .replace(/^\\(?:num|ensuremath|text|mathrm|textrm)\s*\{([\s\S]*)\}$/, "$1")
+            .replace(/^\\SI\s*\{([^}]*)\}\s*\{[^}]*\}$/, "$1")
+            .replace(/^\$([\s\S]*)\$$/, "$1")
+            .trim();
+        if (unwrapped === s)
+            break;
+        s = unwrapped;
+    }
+    const percent = /^(.*?)\s*\\%$/.exec(s);
+    const core = (percent?.[1] ?? s).replace(/\{,\}/g, "").replace(/\\,/g, "");
+    if (/^[-+]?(?:\d+\.?\d*|\.\d+)(?:[eE][-+]?\d+)?$/.test(core))
+        return Number(core);
+    return s;
+}
+/** Looks up `key` in the data file's text. Throws only on a file that can't be parsed at all. */
+export function resolveValue(text, format, key) {
+    if (format === "tex") {
+        const macros = texMacros(text);
+        const name = key.replace(/^\\/, "");
+        if (!macros.has(name))
+            return { found: false };
+        const value = texValue(macros.get(name) ?? "");
+        return { found: true, value, display: displayValue(value) };
+    }
+    let node = JSON.parse(text);
+    for (const seg of jsonPath(key)) {
+        if (Array.isArray(node) && /^\d+$/.test(seg))
+            node = node[Number(seg)];
+        else if (node && typeof node === "object" && Object.hasOwn(node, seg))
+            node = node[seg];
+        else
+            return { found: false };
+        if (node === undefined)
+            return { found: false };
+    }
+    return { found: true, value: node, display: displayValue(node) };
+}
+/** A stable serialisation of the value for fingerprinting: key order never matters. */
+export function valueFingerprintInput(value) {
+    return canonicalJson(value ?? null);
+}
+/** The whole data file as content, insensitive to JSON key order and to line endings. */
+export function wholeFileContent(text, format) {
+    if (format === "json")
+        return canonicalJson(JSON.parse(text));
+    return text.replace(/\r\n?/g, "\n");
+}
+export function displayValue(value) {
+    if (typeof value === "string")
+        return JSON.stringify(value);
+    if (typeof value === "number" || typeof value === "boolean" || value === null)
+        return String(value);
+    const s = JSON.stringify(value);
+    return s.length > 60 ? `${s.slice(0, 59)}…` : s;
+}
+/** Numbers a sentence states, skipping digits that are part of a word or identifier (`v2`, `x86`, `h264`). */
+export function claimNumbers(text) {
+    const out = [];
+    const re = /(?<![\w.])([-−]?(?:\d{1,3}(?:,\d{3})+|\d+)(?:\.\d+)?|[-−]?\.\d+)(?:[eE]([-+]?\d+))?(?![\w])(\s*(?:%|\\%|percent\b))?/g;
+    for (let m = re.exec(text); m; m = re.exec(text)) {
+        const literal = (m[1] ?? "").replace("−", "-");
+        const exp = m[2];
+        const n = Number(literal.replace(/,/g, "")) * (exp ? 10 ** Number(exp) : 1);
+        if (!Number.isFinite(n))
+            continue;
+        const frac = /\.(\d+)$/.exec(literal);
+        const decimals = Math.max(0, (frac?.[1]?.length ?? 0) - (exp ? Number(exp) : 0));
+        out.push({ text: m[0].trim(), value: n, decimals, percent: Boolean(m[3]) });
+    }
+    return out;
+}
+/** Whether `stated` is `actual` at the precision the sentence shows (0.18 matches 0.1834, not 0.19). */
+function sameAtPrecision(stated, decimals, actual) {
+    const half = 0.5 * 10 ** -decimals;
+    return Math.abs(actual - stated) <= half + 1e-9 * Math.max(1, Math.abs(actual));
+}
+/**
+ * Does the claim state this value? A number value matches if any number in the sentence equals it at
+ * the sentence's own precision (a percentage also matches the value × 100). A string value matches
+ * if the sentence contains it. Other values (objects, booleans, null) aren't checked against prose.
+ */
+export function checkClaimAgainstValue(claimText, value) {
+    const numeric = typeof value === "number"
+        ? value
+        : typeof value === "string" && /^\s*[-+]?(?:\d+\.?\d*|\.\d+)(?:[eE][-+]?\d+)?\s*$/.test(value)
+            ? Number(value)
+            : undefined;
+    if (numeric !== undefined && Number.isFinite(numeric)) {
+        const nums = claimNumbers(claimText);
+        if (nums.length === 0)
+            return { checkable: false, matches: true, claimed: [] };
+        const matches = nums.some((n) => sameAtPrecision(n.value, n.decimals, numeric) ||
+            (n.percent && sameAtPrecision(n.value, n.decimals, numeric * 100)));
+        return { checkable: true, matches, claimed: nums.map((n) => n.text) };
+    }
+    if (typeof value === "string" && value.trim() !== "") {
+        return { checkable: true, matches: claimText.includes(value), claimed: [] };
+    }
+    return { checkable: false, matches: true, claimed: [] };
+}
+//# sourceMappingURL=values.js.map

package/dist/values.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"values.js","sourceRoot":"","sources":["../src/values.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AACH,OAAO,EAAE,aAAa,EAAE,MAAM,WAAW,CAAC;AAE1C,MAAM,eAAe,GAAmC;IACtD,OAAO,EAAE,MAAM;IACf,MAAM,EAAE,KAAK;IACb,MAAM,EAAE,KAAK;IACb,MAAM,EAAE,KAAK;CACd,CAAC;AAIF,MAAM,UAAU,YAAY,CAAC,IAAY;IACvC,MAAM,GAAG,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;IAClC,OAAO,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,eAAe,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC;AAC9E,CAAC;AASD,yFAAyF;AACzF,SAAS,QAAQ,CAAC,GAAW;IAC3B,IAAI,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC;QACrB,OAAO,GAAG;aACP,KAAK,CAAC,CAAC,CAAC;aACR,KAAK,CAAC,GAAG,CAAC;aACV,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,CAAC;IAC3D,OAAO,GAAG;SACP,OAAO,CAAC,YAAY,EAAE,KAAK,CAAC;SAC5B,KAAK,CAAC,GAAG,CAAC;SACV,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC;AAC7B,CAAC;AAED,gGAAgG;AAChG,SAAS,SAAS,CAAC,IAAY;IAC7B,MAAM,GAAG,GAAG,IAAI,GAAG,EAAkB,CAAC;IACtC,MAAM,EAAE,GACN,wHAAwH,CAAC;IAC3H,KAAK,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QACjD,MAAM,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;QAC1B,IAAI,CAAC,IAAI;YAAE,SAAS;QACpB,iEAAiE;QACjE,IAAI,KAAK,GAAG,CAAC,CAAC;QACd,IAAI,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC;QACrB,OAAO,CAAC,GAAG,IAAI,CAAC,MAAM,IAAI,KAAK,GAAG,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;YACzC,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;YAClB,IAAI,CAAC,KAAK,IAAI;gBAAE,CAAC,EAAE,CAAC;iBACf,IAAI,CAAC,KAAK,GAAG;gBAAE,KAAK,EAAE,CAAC;iBACvB,IAAI,CAAC,KAAK,GAAG;gBAAE,KAAK,EAAE,CAAC;QAC9B,CAAC;QACD,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,SAAS,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;QAC/C,EAAE,CAAC,SAAS,GAAG,CAAC,CAAC;IACnB,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,+GAA+G;AAC/G,SAAS,QAAQ,CAAC,IAAY;IAC5B,IAAI,CAAC,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;IACpB,SAAS,CAAC;QACR,MAAM,SAAS,GAAG,CAAC;aAChB,OAAO,CAAC,2DAA2D,EAAE,IAAI,CAAC;aAC1E,OAAO,CAAC,kCAAkC,EAAE,IAAI,CAAC;aACjD,OAAO,CAAC,iBAAiB,EAAE,IAAI,CAAC;aAChC,IAAI,EAAE,CAAC;QACV,IAAI,SAAS,KAAK,CAAC;YAAE,MAAM;QAC3B,CAAC,GAAG,SAAS,CAAC;IAChB,CAAC;IACD,MAAM,OAAO,GAAG,eAAe,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACxC,MAAM,IAAI,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IAC3E,IAAI,6CAA6C,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,MAAM,CAAC,IAAI,CAAC,CAAC;IAClF,OAAO,CAAC,CAAC;AACX,CAAC;AAED,iGAAiG;AACjG,MAAM,UAAU,YAAY,CAAC,IAAY,EAAE,MAAkB,EAAE,GAAW;IACxE,IAAI,MAAM,KAAK,KAAK,EAAE,CAAC;QACrB,MAAM,MAAM,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;QAC/B,MAAM,IAAI,GAAG,GAAG,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;QACpC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC;YAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC;QAC/C,MAAM,KAAK,GAAG,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;QAC/C,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,YAAY,CAAC,KAAK,CAAC,EAAE,CAAC;IAC9D,CAAC;IACD,IAAI,IAAI,GAAY,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACrC,KAAK,MAAM,GAAG,IAAI,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;QAChC,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC;YAAE,IAAI,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;aAClE,IAAI,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,GAAG,CAAC;YACnE,IAAI,GAAI,IAAgC,CAAC,GAAG,CAAC,CAAC;;YAC3C,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC;QAC7B,IAAI,IAAI,KAAK,SAAS;YAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC;IAClD,CAAC;IACD,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,YAAY,CAAC,IAAI,CAAC,EAAE,CAAC;AACnE,CAAC;AAED,uFAAuF;AACvF,MAAM,UAAU,qBAAqB,CAAC,KAAc;IAClD,OAAO,aAAa,CAAC,KAAK,IAAI,IAAI,CAAC,CAAC;AACtC,CAAC;AAED,yFAAyF;AACzF,MAAM,UAAU,gBAAgB,CAAC,IAAY,EAAE,MAAkB;IAC/D,IAAI,MAAM,KAAK,MAAM;QAAE,OAAO,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;IAC9D,OAAO,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;AACtC,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,KAAc;IACzC,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IAC5D,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,OAAO,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,IAAI;QAC3E,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC;IACvB,MAAM,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IAChC,OAAO,CAAC,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;AAClD,CAAC;AAcD,8GAA8G;AAC9G,MAAM,UAAU,YAAY,CAAC,IAAY;IACvC,MAAM,GAAG,GAAkB,EAAE,CAAC;IAC9B,MAAM,EAAE,GACN,uHAAuH,CAAC;IAC1H,KAAK,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QACjD,MAAM,OAAO,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;QAC/C,MAAM,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;QACjB,MAAM,CAAC,GAAG,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,IAAI,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAC5E,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC;YAAE,SAAS;QAClC,MAAM,IAAI,GAAG,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACtC,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,IAAI,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACjF,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,QAAQ,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IAC9E,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,wGAAwG;AACxG,SAAS,eAAe,CAAC,MAAc,EAAE,QAAgB,EAAE,MAAc;IACvE,MAAM,IAAI,GAAG,GAAG,GAAG,EAAE,IAAI,CAAC,QAAQ,CAAC;IACnC,OAAO,IAAI,CAAC,GAAG,CAAC,MAAM,GAAG,MAAM,CAAC,IAAI,IAAI,GAAG,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC;AAClF,CAAC;AAUD;;;;GAIG;AACH,MAAM,UAAU,sBAAsB,CAAC,SAAiB,EAAE,KAAc;IACtE,MAAM,OAAO,GACX,OAAO,KAAK,KAAK,QAAQ;QACvB,CAAC,CAAC,KAAK;QACP,CAAC,CAAC,OAAO,KAAK,KAAK,QAAQ,IAAI,mDAAmD,CAAC,IAAI,CAAC,KAAK,CAAC;YAC5F,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;YACf,CAAC,CAAC,SAAS,CAAC;IAClB,IAAI,OAAO,KAAK,SAAS,IAAI,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;QACtD,MAAM,IAAI,GAAG,YAAY,CAAC,SAAS,CAAC,CAAC;QACrC,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC;QAC/E,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CACvB,CAAC,CAAC,EAAE,EAAE,CACJ,eAAe,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,QAAQ,EAAE,OAAO,CAAC;YAC7C,CAAC,CAAC,CAAC,OAAO,IAAI,eAAe,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,QAAQ,EAAE,OAAO,GAAG,GAAG,CAAC,CAAC,CACrE,CAAC;QACF,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC;IACxE,CAAC;IACD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;QACrD,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,OAAO,EAAE,SAAS,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC;IAC9E,CAAC;IACD,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC;AAC1D,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "lockwire",
-  "version": "0.1.22",
+  "version": "0.1.24",
   "description": "Bind documentation claims to code fingerprints. Catch stale CLAUDE.md, AGENTS.md and docs at write time inside Claude Code and Codex, with a tamper-evident history.",
   "license": "MIT",
   "type": "module",