slopbrick 0.25.0 → 0.26.0

package/dist/engine/worker.cjs

@@ -37026,6 +37026,48 @@ var javaArraylistVsLinkedlistRule = createRule({
   }
 });
 
+// src/rules/java/builder-overuse.ts
+var BUILDER_ANNOTATION_REGEX = /@Builder\b/;
+var FIELD_DECL_REGEX = /(?:private|public|protected)\s+(?:final\s+)?[\w<>,\s]+\s+(\w+)\s*[=;]/g;
+var DEFAULT_FIELD_COUNT_CAP = 3;
+var javaBuilderOveruseRule = createRule({
+  id: "java/builder-overuse",
+  category: "typo",
+  severity: "low",
+  aiSpecific: true,
+  description: "@Builder on a class with few fields \u2014 plain constructor is simpler",
+  create(_context) {
+    return { fieldCountCap: DEFAULT_FIELD_COUNT_CAP };
+  },
+  analyze(context, facts) {
+    const issues = [];
+    const source = facts.v2?._source;
+    if (!source) return issues;
+    if (!/\.java$/i.test(facts.filePath)) return issues;
+    BUILDER_ANNOTATION_REGEX.lastIndex = 0;
+    const builderMatch = BUILDER_ANNOTATION_REGEX.exec(source);
+    if (!builderMatch) return issues;
+    const firstBuilderLine = source.slice(0, builderMatch.index).split("\n").length;
+    FIELD_DECL_REGEX.lastIndex = 0;
+    let fieldCount = 0;
+    while (FIELD_DECL_REGEX.exec(source) !== null) {
+      fieldCount++;
+    }
+    if (fieldCount > context.fieldCountCap) return issues;
+    issues.push({
+      ruleId: "java/builder-overuse",
+      category: "typo",
+      severity: "low",
+      aiSpecific: true,
+      message: `@Builder on a class with ${fieldCount} field(s) \u2014 plain constructor is simpler`,
+      line: firstBuilderLine,
+      column: 1,
+      advice: "Use a plain constructor for classes with \u2264 3 fields. AI agents default to @Builder because their training data emphasizes the pattern. Builder adds Lombok dependency and a Builder inner class for every annotated class. Reference: java/builder-overuse v0.26.0."
+    });
+    return issues;
+  }
+});
+
 // src/rules/java/empty-catch-block.ts
 var SINGLE_LINE_EMPTY_CATCH_REGEX = /catch\s*\([^)]*\)\s*\{\s*\}/g;
 var javaEmptyCatchBlockRule = createRule({
@@ -37061,6 +37103,58 @@ var javaEmptyCatchBlockRule = createRule({
   }
 });
 
+// src/rules/java/immutable-collection-preference.ts
+var IMMUTABLE_REGEX = /\b(List|Map|Set)\.of\s*\(/g;
+var MUTABLE_REGEX = /new\s+(ArrayList|HashMap|HashSet|LinkedList|TreeMap)\s*[<(]/g;
+var DEFAULT_IMMUTABLE_THRESHOLD = 5;
+var DEFAULT_MUTABLE_CAP = 1;
+var javaImmutableCollectionPreferenceRule = createRule({
+  id: "java/immutable-collection-preference",
+  category: "typo",
+  severity: "low",
+  aiSpecific: true,
+  description: "Immutable factory method over-use \u2014 prefer mutable when collection will be modified",
+  create(_context) {
+    return {
+      immutableThreshold: DEFAULT_IMMUTABLE_THRESHOLD,
+      mutableCap: DEFAULT_MUTABLE_CAP
+    };
+  },
+  analyze(context, facts) {
+    const issues = [];
+    const source = facts.v2?._source;
+    if (!source) return issues;
+    if (!/\.java$/i.test(facts.filePath)) return issues;
+    IMMUTABLE_REGEX.lastIndex = 0;
+    let immutableCount = 0;
+    let firstIdx = 0;
+    let m;
+    while ((m = IMMUTABLE_REGEX.exec(source)) !== null) {
+      immutableCount++;
+      if (firstIdx === 0) firstIdx = m.index;
+    }
+    if (immutableCount < context.immutableThreshold) return issues;
+    MUTABLE_REGEX.lastIndex = 0;
+    let mutableCount = 0;
+    while ((m = MUTABLE_REGEX.exec(source)) !== null) {
+      mutableCount++;
+    }
+    if (mutableCount > context.mutableCap) return issues;
+    const line = source.slice(0, firstIdx).split("\n").length;
+    issues.push({
+      ruleId: "java/immutable-collection-preference",
+      category: "typo",
+      severity: "low",
+      aiSpecific: true,
+      message: `${immutableCount} immutable factory calls (List/Map/Set.of) with only ${mutableCount} mutable collection \u2014 likely over-preferring immutability`,
+      line,
+      column: 1,
+      advice: "Prefer mutable collections (new ArrayList<>()) when the collection will be modified later. AI agents default to List.of/Map.of/Set.of because their training data emphasizes functional-style Java. Reference: java/immutable-collection-preference v0.26.0."
+    });
+    return issues;
+  }
+});
+
 // src/rules/java/legacy-date-api.ts
 var LEGACY_IMPORT_REGEX = /^import\s+(?:static\s+)?java\.(?:util|sql)\.(?:Date|Calendar|GregorianCalendar)\s*;/gm;
 var LEGACY_USAGE_REGEX = /\bnew\s+(?:Date|GregorianCalendar)\s*\(/g;
@@ -37130,6 +37224,52 @@ var javaLegacyDateApiRule = createRule({
   }
 });
 
+// src/rules/java/optional-overuse.ts
+var OR_ELSE_THROW_REGEX = /\.orElseThrow\s*\(/g;
+var NULL_CHECK_REGEX = /Objects\.requireNonNull\s*\(|if\s*\([^)]*==\s*null\)\s*(?:throw|return)/g;
+var DEFAULT_THRESHOLD = 2;
+var javaOptionalOveruseRule = createRule({
+  id: "java/optional-overuse",
+  category: "typo",
+  severity: "low",
+  aiSpecific: true,
+  description: "Optional chain over-use \u2014 null check or Objects.requireNonNull is faster",
+  create(_context) {
+    return { threshold: DEFAULT_THRESHOLD };
+  },
+  analyze(context, facts) {
+    const issues = [];
+    const source = facts.v2?._source;
+    if (!source) return issues;
+    if (!/\.java$/i.test(facts.filePath)) return issues;
+    OR_ELSE_THROW_REGEX.lastIndex = 0;
+    let orElseThrowCount = 0;
+    let firstIdx = 0;
+    let m;
+    while ((m = OR_ELSE_THROW_REGEX.exec(source)) !== null) {
+      orElseThrowCount++;
+      if (firstIdx === 0) firstIdx = m.index;
+    }
+    if (orElseThrowCount < context.threshold) return issues;
+    NULL_CHECK_REGEX.lastIndex = 0;
+    const nullCheckCount = (source.match(NULL_CHECK_REGEX) ?? []).length;
+    const optionalRatio = orElseThrowCount / Math.max(orElseThrowCount + nullCheckCount, 1);
+    if (optionalRatio < 0.6) return issues;
+    const line = source.slice(0, firstIdx).split("\n").length;
+    issues.push({
+      ruleId: "java/optional-overuse",
+      category: "typo",
+      severity: "low",
+      aiSpecific: true,
+      message: `${orElseThrowCount} .orElseThrow() calls with ${nullCheckCount} null checks \u2014 Optional chain over-use`,
+      line,
+      column: 1,
+      advice: 'Use Objects.requireNonNull(x, "msg") for null checks; reserve Optional for return values. AI agents default to Optional chains because their training data emphasizes null-safety. Real Java code uses null checks in hot paths. Reference: java/optional-overuse v0.26.0.'
+    });
+    return issues;
+  }
+});
+
 // src/rules/java/raw-type-overuse.ts
 var RAW_TYPE_REGEX = /\b(List|Map|Set|Collection|Iterable)\s+(?![<A-Z])(\w+)/g;
 var javaRawTypeOveruseRule = createRule({
@@ -37166,6 +37306,68 @@ var javaRawTypeOveruseRule = createRule({
   }
 });
 
+// src/rules/java/stream-overuse.ts
+var STREAM_OPS = [
+  ".map(",
+  ".filter(",
+  ".flatMap(",
+  ".collect(",
+  ".reduce(",
+  ".sorted(",
+  ".distinct(",
+  ".limit(",
+  ".skip(",
+  ".anyMatch(",
+  ".allMatch(",
+  ".noneMatch(",
+  ".findFirst(",
+  ".findAny("
+];
+var DEFAULT_CHAIN_THRESHOLD = 3;
+var javaStreamOveruseRule = createRule({
+  id: "java/stream-overuse",
+  category: "typo",
+  severity: "low",
+  aiSpecific: true,
+  description: "Stream API chain over-use \u2014 for-loop is faster for simple transformations",
+  create(_context) {
+    return { chainThreshold: DEFAULT_CHAIN_THRESHOLD };
+  },
+  analyze(context, facts) {
+    const issues = [];
+    const source = facts.v2?._source;
+    if (!source) return issues;
+    if (!/\.java$/i.test(facts.filePath)) return issues;
+    const lines = source.split("\n");
+    const streamOpPattern = new RegExp(STREAM_OPS.map((op) => op.replace(/[.*+?^${}()|[\]\\]/g, "\\$&")).join("|"), "g");
+    let firstOffendingLine = 0;
+    let firstOffendingCount = 0;
+    for (let i = 0; i < lines.length; i++) {
+      const line = lines[i] ?? "";
+      if (line.trim().startsWith("//") || line.trim().startsWith("*")) continue;
+      const matches = line.match(streamOpPattern);
+      if (matches && matches.length >= context.chainThreshold) {
+        if (firstOffendingLine === 0) {
+          firstOffendingLine = i + 1;
+          firstOffendingCount = matches.length;
+        }
+      }
+    }
+    if (firstOffendingLine === 0) return issues;
+    issues.push({
+      ruleId: "java/stream-overuse",
+      category: "typo",
+      severity: "low",
+      aiSpecific: true,
+      message: `${firstOffendingCount} stream operations on a single line \u2014 for-loop is faster`,
+      line: firstOffendingLine,
+      column: 1,
+      advice: "Prefer a for-loop for simple transformations. AI agents default to Stream API chains because their training data emphasizes functional-style Java. Stream chains allocate intermediate objects; for small collections, a for-loop is faster and more readable. Reference: java/stream-overuse v0.26.0."
+    });
+    return issues;
+  }
+});
+
 // src/rules/java/string-concat-loop.ts
 var STRING_CONCAT_REGEX = /(\b\w+)\s*=\s*\1\s*\+\s*[^;]+;|(\b\w+)\s*\+=\s*['"`]/g;
 var javaStringConcatLoopRule = createRule({
@@ -37204,7 +37406,7 @@ var javaStringConcatLoopRule = createRule({
 
 // src/rules/java/system-out-println.ts
 var PRINTLN_REGEX = /System\.out\.println\s*\(/g;
-var DEFAULT_THRESHOLD = 1;
+var DEFAULT_THRESHOLD2 = 1;
 var javaSystemOutPrintlnRule = createRule({
   id: "java/system-out-println",
   category: "typo",
@@ -37212,7 +37414,7 @@ var javaSystemOutPrintlnRule = createRule({
   aiSpecific: true,
   description: "System.out.println in production code \u2014 use a logger (SLF4J, Log4j, etc.)",
   create(_context) {
-    return { threshold: DEFAULT_THRESHOLD };
+    return { threshold: DEFAULT_THRESHOLD2 };
   },
   analyze(context, facts) {
     const issues = [];
@@ -37245,6 +37447,56 @@ var javaSystemOutPrintlnRule = createRule({
   }
 });
 
+// src/rules/java/verbose-javadoc.ts
+var TAG_REGEX = /@(param|return|throws)\b/g;
+var DEFAULT_TAG_THRESHOLD = 3;
+var DEFAULT_BODY_LENGTH_CAP = 5;
+var javaVerboseJavadocRule = createRule({
+  id: "java/verbose-javadoc",
+  category: "typo",
+  severity: "low",
+  aiSpecific: true,
+  description: "Excessive Javadoc tags on trivial methods \u2014 over-documentation is an AI fingerprint",
+  create(_context) {
+    return {
+      tagThreshold: DEFAULT_TAG_THRESHOLD,
+      bodyLengthCap: DEFAULT_BODY_LENGTH_CAP
+    };
+  },
+  analyze(context, facts) {
+    const issues = [];
+    const source = facts.v2?._source;
+    if (!source) return issues;
+    if (!/\.java$/i.test(facts.filePath)) return issues;
+    TAG_REGEX.lastIndex = 0;
+    let tagCount = 0;
+    let firstTagLine = 0;
+    let m;
+    while ((m = TAG_REGEX.exec(source)) !== null) {
+      tagCount++;
+      if (firstTagLine === 0) {
+        firstTagLine = source.slice(0, m.index).split("\n").length;
+      }
+    }
+    if (tagCount < context.tagThreshold) return issues;
+    const lineCount = source.split("\n").length;
+    const tagDensity = tagCount / Math.max(lineCount, 1);
+    if (tagDensity < 0.05) return issues;
+    if (lineCount > 200) return issues;
+    issues.push({
+      ruleId: "java/verbose-javadoc",
+      category: "typo",
+      severity: "low",
+      aiSpecific: true,
+      message: `${tagCount} Javadoc tags in ${lineCount} lines (density ${(tagDensity * 100).toFixed(1)}%) \u2014 likely over-documented`,
+      line: firstTagLine,
+      column: 1,
+      advice: "Skip Javadoc on trivial methods (getters, setters, builders). AI agents default to over-documentation because their training data has countless textbook Javadoc examples. Real Java code limits Javadoc to public API surface. Reference: java/verbose-javadoc v0.26.0."
+    });
+    return issues;
+  }
+});
+
 // src/rules/kotlin/coroutine-global-scope.ts
 var GLOBAL_SCOPE_REGEX = /GlobalScope\s*\.\s*(?:launch|async|runBlocking)\s*[({]/g;
 var kotlinCoroutineGlobalScopeRule = createRule({
@@ -37389,7 +37641,7 @@ var kotlinObjectSingletonMisuseRule = createRule({
 
 // src/rules/kotlin/println-debug.ts
 var PRINTLN_REGEX2 = /^\s*println\s*\(/gm;
-var DEFAULT_THRESHOLD2 = 1;
+var DEFAULT_THRESHOLD3 = 1;
 var kotlinPrintlnDebugRule = createRule({
   id: "kotlin/println-debug",
   category: "typo",
@@ -37397,7 +37649,7 @@ var kotlinPrintlnDebugRule = createRule({
   aiSpecific: true,
   description: "println(...) in production code \u2014 use Timber, android.util.Log, or an SLF4J facade",
   create(_context) {
-    return { threshold: DEFAULT_THRESHOLD2 };
+    return { threshold: DEFAULT_THRESHOLD3 };
   },
   analyze(context, facts) {
     const issues = [];
@@ -37840,19 +38092,24 @@ var DEFAULT_CONFIG3 = {
    *   - `tests/rules/**` — rule test files contain expected-issue
    *     assertions, also meta-code.
    *
-   * Three patterns, ~70 issues removed per self-scan. Combined with
-   * the v0.25.0 graded security cap, this restores the v9 plan's
-   * "security ≥ 80" criterion (unachievable in v0.24.0 due to 90
-   * self-scan FPs collapsing the score to 0).
+   * Three patterns (broadened in v0.25.1 from the v0.25.0 narrow
+   * set, which missed `tests/engine/**`, `tests/cli/**`, and
+   * `snippet/**`), ~80 issues removed per self-scan. Combined
+   * with the v0.25.0 graded security cap, this restores the
+   * v9 plan's "security ≥ 80" criterion (unachievable in
+   * v0.24.0 due to 90 self-scan FPs collapsing the score to 0).
    *
    * Set `selfScan: { excludePaths: [] }` in `slopbrick.config.mjs`
    * to opt out and scan every file (legacy behavior).
    */
   selfScan: {
     excludePaths: [
-      "src/rules/**",
-      "tests/fixtures/**",
-      "tests/rules/**"
+      "**/src/rules/**",
+      // rule definitions are meta-code
+      "**/snippet/**",
+      // RULE_HINTS examples are intentional bad code
+      "**/tests/**"
+      // all test files (fixtures + unit + integration)
     ]
   }
 };
@@ -40322,7 +40579,7 @@ var swiftImplicitlyUnwrappedOptionalRule = createRule({
 
 // src/rules/swift/print-debug.ts
 var PRINT_REGEX = /\bprint\s*\(/g;
-var DEFAULT_THRESHOLD3 = 1;
+var DEFAULT_THRESHOLD4 = 1;
 var swiftPrintDebugRule = createRule({
   id: "swift/print-debug",
   category: "typo",
@@ -40330,7 +40587,7 @@ var swiftPrintDebugRule = createRule({
   aiSpecific: true,
   description: "print(...) in production Swift \u2014 use Logger (os.log) for level-controlled output",
   create(_context) {
-    return { threshold: DEFAULT_THRESHOLD3 };
+    return { threshold: DEFAULT_THRESHOLD4 };
   },
   analyze(context, facts) {
     const issues = [];
@@ -42986,11 +43243,16 @@ var builtinRules = [
   goNilSliceVsEmptyRule,
   goStructTagInconsistencyRule,
   javaArraylistVsLinkedlistRule,
+  javaBuilderOveruseRule,
   javaEmptyCatchBlockRule,
+  javaImmutableCollectionPreferenceRule,
   javaLegacyDateApiRule,
+  javaOptionalOveruseRule,
   javaRawTypeOveruseRule,
+  javaStreamOveruseRule,
   javaStringConcatLoopRule,
   javaSystemOutPrintlnRule,
+  javaVerboseJavadocRule,
   kotlinCoroutineGlobalScopeRule,
   kotlinDataClassDefaultsOveruseRule,
   kotlinObjectSingletonMisuseRule,
@@ -43856,13 +44118,13 @@ var signal_strength_default = {
     defaultOff: true
   },
   "java/arraylist-vs-linkedlist": {
-    recall: 0,
-    fpRate: 0,
-    ratio: 1,
-    precision: 0,
-    lastCalibratedAt: "2026-07-01T00:00:00Z",
+    recall: 35e-4,
+    fpRate: 94e-4,
+    ratio: 0.37,
+    precision: 0.0446,
+    lastCalibratedAt: "2026-07-02T19:34:00Z",
     verdict: "DORMANT",
-    _calibrationNote: "v0.20: new rule (new LinkedList<>() \u2014 use ArrayList (Effective Java Item 28)). Not yet calibrated. Scheduled for v9 Java corpus calibration.",
+    _calibrationNote: "v9 Java corpus calibration (v0.25.0, 2026-07-02): 81891 neg + 10305 pos Java files = 92196 total. v9 TP=36, FP=771, P=4.46%, FPR=0.94%, recall=0.35%, ratio=0.37, lift=P/FPR=4.74. Rule fires more on legacy enterprise Java (neg) than on AI/ML-integration Java (pos) because modern Java idiom defaults to ArrayList. v0.20: new rule (new LinkedList<>() \u2014 use ArrayList, Effective Java Item 28).",
     aiSpecific: true,
     _v7Verdict: "DORMANT",
     _v7Lift: 1,
@@ -43871,16 +44133,21 @@ var signal_strength_default = {
     _v7Precision: 0,
     _v8Verdict: "DORMANT",
     _v8Lift: 1,
+    _v9Verdict: "DORMANT",
+    _v9Lift: 4.74,
+    _v9Recall: 35e-4,
+    _v9FpRate: 94e-4,
+    _v9Precision: 0.0446,
     defaultOff: true
   },
   "java/empty-catch-block": {
-    recall: 0,
-    fpRate: 0,
-    ratio: 1,
-    precision: 0,
-    lastCalibratedAt: "2026-07-01T00:00:00Z",
+    recall: 8e-3,
+    fpRate: 0.1118,
+    ratio: 0.07,
+    precision: 89e-4,
+    lastCalibratedAt: "2026-07-02T19:34:00Z",
     verdict: "DORMANT",
-    _calibrationNote: "v0.20: new rule (Empty catch block \u2014 silently swallows exceptions). Not yet calibrated. Scheduled for v9 Java corpus calibration.",
+    _calibrationNote: "v9 Java corpus calibration (v0.25.0, 2026-07-02): 81891 neg + 10305 pos Java files. v9 TP=82, FP=9159, P=0.89%, FPR=11.18%, recall=0.80%, ratio=0.07, lift=P/FPR=0.08. Strongly INVERTED: empty catch blocks are 14x more common in legacy enterprise Java than in AI/Java-modern pos repos. Heuristic likely needs to be tightened (e.g., require at least a comment) before it can serve as a meaningful discriminator. v0.20: new rule.",
     aiSpecific: true,
     _v7Verdict: "DORMANT",
     _v7Lift: 1,
@@ -43889,16 +44156,21 @@ var signal_strength_default = {
     _v7Precision: 0,
     _v8Verdict: "DORMANT",
     _v8Lift: 1,
+    _v9Verdict: "DORMANT",
+    _v9Lift: 0.08,
+    _v9Recall: 8e-3,
+    _v9FpRate: 0.1118,
+    _v9Precision: 89e-4,
     defaultOff: true
   },
   "java/legacy-date-api": {
-    recall: 0,
-    fpRate: 0,
-    ratio: 1,
-    precision: 0,
-    lastCalibratedAt: "2026-07-01T00:00:00Z",
+    recall: 0.0285,
+    fpRate: 0.0511,
+    ratio: 0.56,
+    precision: 0.0657,
+    lastCalibratedAt: "2026-07-02T19:34:00Z",
     verdict: "DORMANT",
-    _calibrationNote: "v0.20: new rule (Legacy java.util.Date / Calendar \u2014 use java.time (JSR-310)). Not yet calibrated. Scheduled for v9 Java corpus calibration.",
+    _calibrationNote: "v9 Java corpus calibration (v0.25.0, 2026-07-02): 81891 neg + 10305 pos Java files. v9 TP=294, FP=4181, P=6.57%, FPR=5.11%, recall=2.85%, ratio=0.56, lift=P/FPR=1.29. INVERTED-to-NOISY: legacy date API is more common in older enterprise Java (neg) than in modern AI/Java repos (pos). The heuristic correctly flags the legacy pattern, but the legacy pattern is over-represented in the neg baseline (older codebases). v0.20: new rule.",
     aiSpecific: true,
     _v7Verdict: "DORMANT",
     _v7Lift: 1,
@@ -43907,16 +44179,101 @@ var signal_strength_default = {
     _v7Precision: 0,
     _v8Verdict: "DORMANT",
     _v8Lift: 1,
+    _v9Verdict: "DORMANT",
+    _v9Lift: 1.29,
+    _v9Recall: 0.0285,
+    _v9FpRate: 0.0511,
+    _v9Precision: 0.0657,
     defaultOff: true
   },
-  "java/raw-type-overuse": {
+  "java/verbose-javadoc": {
     recall: 0,
     fpRate: 0,
     ratio: 1,
     precision: 0,
-    lastCalibratedAt: "2026-07-01T00:00:00Z",
+    lastCalibratedAt: "2026-07-03T00:00:00Z",
+    verdict: "DORMANT",
+    _calibrationNote: "v0.26.0: new positive AI-signal rule. Triggers when a small Java file (< 200 lines) has 3+ Javadoc tags with density >= 0.05. Calibration pending v9 Java corpus re-run; placeholder values until then. v0.20.0: anti-pattern design was wrong (humans write more Javadoc on trivial methods because their training data has it). v0.26.0: redesigned as positive signal (AI over-documents trivial methods). Reference: java/verbose-javadoc v0.26.0.",
+    aiSpecific: true,
+    _v9Verdict: "DORMANT",
+    _v9Lift: 1,
+    _v9Recall: 0,
+    _v9FpRate: 0,
+    _v9Precision: 0,
+    defaultOff: true
+  },
+  "java/optional-overuse": {
+    recall: 0,
+    fpRate: 0,
+    ratio: 1,
+    precision: 0,
+    lastCalibratedAt: "2026-07-03T00:00:00Z",
+    verdict: "DORMANT",
+    _calibrationNote: "v0.26.0: new positive AI-signal rule. Triggers when a Java file has 2+ .orElseThrow() calls AND 0 Objects.requireNonNull()/null checks (optionalRatio > 0.6). Calibration pending v9 Java corpus re-run; placeholder values until then. v0.26.0: redesigned as positive signal (AI chains Optional.ofNullable().orElseThrow() where null checks would be cleaner). Reference: java/optional-overuse v0.26.0.",
+    aiSpecific: true,
+    _v9Verdict: "DORMANT",
+    _v9Lift: 1,
+    _v9Recall: 0,
+    _v9FpRate: 0,
+    _v9Precision: 0,
+    defaultOff: true
+  },
+  "java/immutable-collection-preference": {
+    recall: 0,
+    fpRate: 0,
+    ratio: 1,
+    precision: 0,
+    lastCalibratedAt: "2026-07-03T00:00:00Z",
+    verdict: "DORMANT",
+    _calibrationNote: "v0.26.0: new positive AI-signal rule. Triggers when a Java file has 5+ List.of/Map.of/Set.of calls AND < 1 new ArrayList/HashMap/HashSet/LinkedList/TreeMap calls. Calibration pending v9 Java corpus re-run; placeholder values until then. v0.26.0: redesigned as positive signal (AI defaults to immutable factory methods). Reference: java/immutable-collection-preference v0.26.0.",
+    aiSpecific: true,
+    _v9Verdict: "DORMANT",
+    _v9Lift: 1,
+    _v9Recall: 0,
+    _v9FpRate: 0,
+    _v9Precision: 0,
+    defaultOff: true
+  },
+  "java/builder-overuse": {
+    recall: 0,
+    fpRate: 0,
+    ratio: 1,
+    precision: 0,
+    lastCalibratedAt: "2026-07-03T00:00:00Z",
+    verdict: "DORMANT",
+    _calibrationNote: "v0.26.0: new positive AI-signal rule. Triggers when @Builder annotation (Lombok) is used on a class with <= 3 fields. Calibration pending v9 Java corpus re-run; placeholder values until then. v0.26.0: redesigned as positive signal (AI defaults to Builder pattern even for simple data classes). Reference: java/builder-overuse v0.26.0.",
+    aiSpecific: true,
+    _v9Verdict: "DORMANT",
+    _v9Lift: 1,
+    _v9Recall: 0,
+    _v9FpRate: 0,
+    _v9Precision: 0,
+    defaultOff: true
+  },
+  "java/stream-overuse": {
+    recall: 0,
+    fpRate: 0,
+    ratio: 1,
+    precision: 0,
+    lastCalibratedAt: "2026-07-03T00:00:00Z",
+    verdict: "DORMANT",
+    _calibrationNote: "v0.26.0: new positive AI-signal rule. Triggers when a single line has 3+ Stream API operations (.map, .filter, .flatMap, .collect, .reduce, .sorted, .distinct, .limit, .skip, .anyMatch, .allMatch, .noneMatch, .findFirst, .findAny). Calibration pending v9 Java corpus re-run; placeholder values until then. v0.26.0: redesigned as positive signal (AI chains Stream API for everything). Reference: java/stream-overuse v0.26.0.",
+    aiSpecific: true,
+    _v9Verdict: "DORMANT",
+    _v9Lift: 1,
+    _v9Recall: 0,
+    _v9FpRate: 0,
+    _v9Precision: 0,
+    defaultOff: true
+  },
+  "java/raw-type-overuse": {
+    recall: 0.1093,
+    fpRate: 0.2041,
+    ratio: 0.54,
+    precision: 0.0632,
+    lastCalibratedAt: "2026-07-02T19:34:00Z",
     verdict: "DORMANT",
-    _calibrationNote: "v0.20: new rule (Raw type usage \u2014 use generics). DORMANT until v9 Java corpus calibration.",
+    _calibrationNote: "v9 Java corpus calibration (v0.25.0, 2026-07-02): 81891 neg + 10305 pos Java files. v9 TP=1126, FP=16712, P=6.32%, FPR=20.41%, recall=10.93%, ratio=0.54, lift=P/FPR=0.31. Strongly INVERTED: raw types (no generics) are 2x more common in legacy enterprise Java (neg) than in modern Java repos (pos). Heuristic is correctly identifying the legacy anti-pattern, but it's an age marker more than an AI-fingerprint. v0.20: new rule.",
     aiSpecific: true,
     _v7Verdict: "DORMANT",
     _v7Lift: 1,
@@ -43925,16 +44282,21 @@ var signal_strength_default = {
     _v7Precision: 0,
     _v8Verdict: "DORMANT",
     _v8Lift: 1,
+    _v9Verdict: "DORMANT",
+    _v9Lift: 0.31,
+    _v9Recall: 0.1093,
+    _v9FpRate: 0.2041,
+    _v9Precision: 0.0632,
     defaultOff: true
   },
   "java/string-concat-loop": {
-    recall: 0,
-    fpRate: 0,
-    ratio: 1,
-    precision: 0,
-    lastCalibratedAt: "2026-07-01T00:00:00Z",
+    recall: 46e-4,
+    fpRate: 0.0358,
+    ratio: 0.13,
+    precision: 0.0158,
+    lastCalibratedAt: "2026-07-02T19:34:00Z",
     verdict: "DORMANT",
-    _calibrationNote: "v0.20: new rule (String concat in loop \u2014 use StringBuilder). DORMANT until v9 Java corpus calibration.",
+    _calibrationNote: "v9 Java corpus calibration (v0.25.0, 2026-07-02): 81891 neg + 10305 pos Java files. v9 TP=47, FP=2933, P=1.58%, FPR=3.58%, recall=0.46%, ratio=0.13, lift=P/FPR=0.44. Strongly INVERTED: string concatenation in a loop is 8x more common in legacy enterprise Java (neg) than in AI/ML/Java-modern pos repos. Modern Java training data and modern IDE warnings discourage the pattern. v0.20: new rule.",
     aiSpecific: true,
     _v7Verdict: "DORMANT",
     _v7Lift: 1,
@@ -43943,16 +44305,21 @@ var signal_strength_default = {
     _v7Precision: 0,
     _v8Verdict: "DORMANT",
     _v8Lift: 1,
+    _v9Verdict: "DORMANT",
+    _v9Lift: 0.44,
+    _v9Recall: 46e-4,
+    _v9FpRate: 0.0358,
+    _v9Precision: 0.0158,
     defaultOff: true
   },
   "java/system-out-println": {
-    recall: 0,
-    fpRate: 0,
-    ratio: 1,
-    precision: 0,
-    lastCalibratedAt: "2026-07-01T00:00:00Z",
+    recall: 0.1503,
+    fpRate: 0.2533,
+    ratio: 0.59,
+    precision: 0.0695,
+    lastCalibratedAt: "2026-07-02T19:34:00Z",
     verdict: "DORMANT",
-    _calibrationNote: "v0.20: new rule (System.out.println in production code \u2014 use a logger). Not yet calibrated. Scheduled for v9 Java corpus calibration.",
+    _calibrationNote: "v9 Java corpus calibration (v0.25.0, 2026-07-02): 81891 neg + 10305 pos Java files. v9 TP=1549, FP=20737, P=6.95%, FPR=25.32%, recall=15.03%, ratio=0.59, lift=P/FPR=0.27. INVERTED: System.out.println is more common in legacy enterprise Java (neg) than in modern AI/Java repos (pos). Modern Java defaults to SLF4J/Log4j, AI-generated Java starts with a logger import. The pattern is the opposite of the v0.20 design intent (which assumed println was the AI-fingerprint signal). v0.25.x: consider gating this rule by Java era (recent file mtime) or making it an age-fingerprint rather than AI-fingerprint. v0.20: new rule.",
     aiSpecific: true,
     _v7Verdict: "DORMANT",
     _v7Lift: 1,
@@ -43961,6 +44328,11 @@ var signal_strength_default = {
     _v7Precision: 0,
     _v8Verdict: "DORMANT",
     _v8Lift: 1,
+    _v9Verdict: "DORMANT",
+    _v9Lift: 0.27,
+    _v9Recall: 0.1503,
+    _v9FpRate: 0.2533,
+    _v9Precision: 0.0695,
     defaultOff: true
   },
   "layout/forced-layout": {