sonecheck 0.0.1

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 aifuun
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -0,0 +1,108 @@
+# SoneCheck
+
+**The sub-second System-1 AI code risk inspector for VS Code and Git hooks.**
+
+SoneCheck reads your staged diff, splits it into hunks, scores each hunk with a
+System-1 decision model, and surfaces only the one to three changes that actually
+deserve your eyes before you commit.
+
+> **Project documentation is written in Chinese**: see [`docs/`](docs/) for the
+> full product requirements, technical spec, system design, contracts, UI design,
+> roadmap and observability plan.
+
+---
+
+## Status: `0.0.1` is a name reservation
+
+**This release contains no functional implementation.** It exists to reserve the
+`sonecheck` package name ahead of the first working version.
+
+Installing it will not give you a working tool. Every exported API throws a
+descriptive `SONECHECK_NOT_IMPLEMENTED` error rather than failing silently:
+
+```js
+const { inspectStaged } = require('sonecheck');
+
+inspectStaged();
+// Error: sonecheck@0.0.1 does not implement "inspectStaged" yet. ...
+//   code: 'SONECHECK_NOT_IMPLEMENTED'
+```
+
+The first functional release will be **`0.1.0`**. This placeholder exists only so
+that the name is not taken by an unrelated project in the meantime.
+
+---
+
+## Why this exists
+
+AI coding tools made code *generation* far faster than code *review*. A single
+commit can now span dozens of hunks across many files, and nobody reads all of
+them. Review queues back up and low-quality changes get waved through.
+
+Existing generative-AI reviewers make this worse in three ways: they are slow
+(5–15s per review, so people skip them), they are expensive (billed per generated
+token), and they hallucinate (they rewrite code and invent explanations).
+
+SoneCheck removes the *generation* step entirely. A System-1 decision model
+outputs structured choices and scores instead of prose, so scoring returns in a
+fraction of a second, costs next to nothing, and cannot hallucinate code.
+
+---
+
+## What is planned
+
+| Milestone | Scope |
+|-----------|-------|
+| M1 — local MVP | Read staged diff → split hunks → score → show top risks → jump to the line |
+| M2 — distributable | `.vsix` package and a documented install path |
+| M3 — trustworthy | Better context assembly, tunable thresholds, false-positive feedback |
+| M4 — team-ready | Hosted option, shared team rules, audit trail |
+
+Design principles the implementation must hold to:
+
+- **Never block a commit.** If the decision service is unreachable, the check is
+  skipped and the developer is told once. Failures always resolve to "let it pass".
+- **Never upload a whole file.** Only diff hunks plus bounded local context
+  (≤ 2KB per hunk) leave the machine.
+- **Never touch your workspace.** The check is strictly read-only.
+- **Never nag.** All-clear runs silently, with no popup.
+
+These are recorded as testable invariants in
+[`docs/03_CONTRACTS_AND_API.md`](docs/03_CONTRACTS_AND_API.md).
+
+---
+
+## Privacy boundary
+
+SoneCheck is designed so that sensitive source never leaves the machine wholesale:
+
+- Only the hunks you have staged, plus a bounded slice of surrounding context,
+  are sent for scoring.
+- Your API key is stored in the OS-level secret store, never in a plain file, and
+  never written to logs.
+- The extension never modifies, stages, formats or deletes your files.
+
+The full payload boundary is specified in
+[`docs/03_CONTRACTS_AND_API.md`](docs/03_CONTRACTS_AND_API.md) §1.
+
+---
+
+## Not affiliated
+
+SoneCheck is an independent, unofficial project. It is not affiliated with,
+endorsed by, or sponsored by Jev, TypeSafe AI, or any other AI model vendor.
+"Jev" and "TypeSafe AI" are the property of their respective owners, referenced
+here only to describe a technical dependency.
+
+---
+
+## Contributing
+
+The project is at the design stage. Issues and discussions are welcome via
+[GitHub Issues](https://github.com/aifuun/sonecheck/issues).
+
+---
+
+## License
+
+[MIT](LICENSE)

package/index.d.ts

@@ -0,0 +1,33 @@
+/**
+ * Type definitions for sonecheck 0.0.1 — name-reservation release.
+ *
+ * No functional implementation is available in this version.
+ */
+
+/** Error code attached to every "not implemented yet" error. */
+export declare const NOT_IMPLEMENTED: 'SONECHECK_NOT_IMPLEMENTED';
+
+/** Version of the placeholder release. */
+export declare const RESERVED_VERSION: '0.0.1';
+
+/** The first release expected to contain a working implementation. */
+export declare const FIRST_FUNCTIONAL_VERSION: '0.1.0';
+
+/** Error thrown by every placeholder entry point in 0.0.1. */
+export interface SoneCheckNotImplementedError extends Error {
+  code: typeof NOT_IMPLEMENTED;
+}
+
+/**
+ * Inspect an arbitrary set of changes for risk.
+ *
+ * @throws {SoneCheckNotImplementedError} Always, until 0.1.0.
+ */
+export declare function inspect(): never;
+
+/**
+ * Inspect the staged diff of the current repository.
+ *
+ * @throws {SoneCheckNotImplementedError} Always, until 0.1.0.
+ */
+export declare function inspectStaged(): never;

package/index.js

@@ -0,0 +1,68 @@
+'use strict';
+
+/**
+ * sonecheck 0.0.1 — name-reservation release.
+ *
+ * This release contains no functional implementation. It exists to reserve the
+ * public package name `sonecheck` before the first working version ships.
+ *
+ * Every exported entry point throws a descriptive error instead of failing
+ * silently, so that anyone who installs this version learns immediately where
+ * the real implementation lives.
+ *
+ * Roadmap and design documents: https://github.com/aifuun/sonecheck
+ *
+ * @see README.md
+ */
+
+/** Error code attached to every "not implemented yet" error. */
+const NOT_IMPLEMENTED = 'SONECHECK_NOT_IMPLEMENTED';
+
+/** Version of the placeholder release. */
+const RESERVED_VERSION = '0.0.1';
+
+/** The first release expected to contain a working implementation. */
+const FIRST_FUNCTIONAL_VERSION = '0.1.0';
+
+/**
+ * Build the error thrown by every placeholder entry point.
+ *
+ * @param {string} apiName Name of the API that was called.
+ * @returns {Error & { code: string }} A descriptive, non-silent error.
+ */
+function createNotImplementedError(apiName) {
+  const error = new Error(
+    `sonecheck@${RESERVED_VERSION} does not implement "${apiName}" yet. ` +
+      `This version only reserves the package name. ` +
+      `The first functional release is ${FIRST_FUNCTIONAL_VERSION}. ` +
+      `Status: https://github.com/aifuun/sonecheck`
+  );
+  error.code = NOT_IMPLEMENTED;
+  return error;
+}
+
+/**
+ * Inspect an arbitrary set of changes for risk. Not implemented in 0.0.1.
+ *
+ * @returns {never} Always throws.
+ */
+function inspect() {
+  throw createNotImplementedError('inspect');
+}
+
+/**
+ * Inspect the staged diff of the current repository. Not implemented in 0.0.1.
+ *
+ * @returns {never} Always throws.
+ */
+function inspectStaged() {
+  throw createNotImplementedError('inspectStaged');
+}
+
+module.exports = {
+  NOT_IMPLEMENTED,
+  RESERVED_VERSION,
+  FIRST_FUNCTIONAL_VERSION,
+  inspect,
+  inspectStaged,
+};

package/package.json

@@ -0,0 +1,39 @@
+{
+  "name": "sonecheck",
+  "version": "0.0.1",
+  "description": "100ms System-1 AI code risk inspector for VS Code and Git hooks. Name-reservation release; the first functional release is 0.1.0.",
+  "keywords": [
+    "vscode",
+    "vscode-extension",
+    "git-diff",
+    "code-review",
+    "static-analysis",
+    "risk-analysis",
+    "developer-tools",
+    "system-1"
+  ],
+  "license": "MIT",
+  "author": "aifuun",
+  "homepage": "https://github.com/aifuun/sonecheck#readme",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/aifuun/sonecheck.git"
+  },
+  "bugs": {
+    "url": "https://github.com/aifuun/sonecheck/issues"
+  },
+  "main": "./index.js",
+  "types": "./index.d.ts",
+  "files": [
+    "index.js",
+    "index.d.ts"
+  ],
+  "engines": {
+    "node": ">=22"
+  },
+  "sideEffects": false,
+  "publishConfig": {
+    "access": "public",
+    "registry": "https://registry.npmjs.org/"
+  }
+}