tamperward 2.29.4 → 2.29.6

package/dist/cli/index.js

@@ -3432,22 +3432,53 @@ function isCommentLine(trimmed, lang) {
   return SLASH_COMMENT.test(trimmed);
 }
 function insideStringLiteral(line, idx, lang) {
-  const hash = HASH_COMMENT_LANGS.has(lang ?? "js");
+  const l = lang ?? "js";
+  const hash = HASH_COMMENT_LANGS.has(l);
   let quote = null;
   for (let j = 0; j < idx; j++) {
     const ch = line[j];
     if (quote) {
       if (ch === "\\") j++;
-      else if (ch === quote) quote = null;
+      else if (quote.length === 3) {
+        if (ch === quote[0] && line[j + 1] === quote[0] && line[j + 2] === quote[0]) {
+          quote = null;
+          j += 2;
+        }
+      } else if (ch === quote) quote = null;
       continue;
     }
-    if (ch === '"' || ch === "'" || ch === "`") quote = ch;
+    if (l === "py" && (ch === '"' || ch === "'") && line[j + 1] === ch && line[j + 2] === ch) {
+      quote = ch.repeat(3);
+      j += 2;
+    } else if (ch === '"' || ch === "'" || ch === "`") quote = ch;
     else if (ch === "/" && (line[j + 1] === "/" || line[j + 1] === "*")) return false;
+    else if (l === "js" && ch === "/" && regexPosition(line.slice(0, j))) j = skipRegexLiteral(line, j);
     else if (hash && ch === "#") return false;
   }
   return quote !== null;
 }
-var CODE, EXT, COMMON, IMPORTS, HASH_COMMENT, DEBUG_ONLY, SLASH_COMMENT, HASH_COMMENT_LANGS;
+function regexPosition(before) {
+  const s = before.replace(/\s+$/, "");
+  if (s === "") return true;
+  const last = s[s.length - 1];
+  if (/[\w$]/.test(last)) {
+    const kw = /[A-Za-z_$][\w$]*$/.exec(s);
+    return kw !== null && REGEX_KEYWORDS.has(kw[0]);
+  }
+  return last !== ")" && last !== "]" && last !== '"' && last !== "'" && last !== "`";
+}
+function skipRegexLiteral(line, start) {
+  let inClass = false;
+  for (let k = start + 1; k < line.length; k++) {
+    const c = line[k];
+    if (c === "\\") k++;
+    else if (c === "[") inClass = true;
+    else if (c === "]") inClass = false;
+    else if (c === "/" && !inClass) return k;
+  }
+  return line.length - 1;
+}
+var CODE, EXT, COMMON, IMPORTS, HASH_COMMENT, DEBUG_ONLY, SLASH_COMMENT, HASH_COMMENT_LANGS, REGEX_KEYWORDS;
 var init_files = __esm({
   "src/detectors/files.ts"() {
     "use strict";
@@ -3479,6 +3510,21 @@ var init_files = __esm({
     DEBUG_ONLY = /^(?:console\.\w+\(.*\)\s*;?|debugger\s*;?)$/;
     SLASH_COMMENT = /^(?:\/\/|\/\*|\*(?:\s|\/|$))/;
     HASH_COMMENT_LANGS = /* @__PURE__ */ new Set(["py", "rb", "php"]);
+    REGEX_KEYWORDS = /* @__PURE__ */ new Set([
+      "return",
+      "throw",
+      "case",
+      "yield",
+      "do",
+      "else",
+      "in",
+      "of",
+      "typeof",
+      "void",
+      "delete",
+      "instanceof",
+      "new"
+    ]);
   }
 });
 
@@ -3890,8 +3936,8 @@ var init_lint_suppression = __esm({
         { re: /\bbiome-ignore\b/, why: "biome-ignore suppresses Biome diagnostics" }
       ],
       py: [
-        { re: /#\s*noqa\b/, why: "# noqa suppresses flake8/ruff findings" },
-        { re: /#\s*(?:ruff|flake8):\s*noqa\b/, why: "# ruff: noqa / # flake8: noqa suppresses every finding in the file" },
+        { re: /#\s*noqa\b/i, why: "# noqa suppresses flake8/ruff findings" },
+        { re: /#\s*(?:ruff|flake8):\s*noqa\b/i, why: "# ruff: noqa / # flake8: noqa suppresses every finding in the file" },
         { re: /#\s*type:\s*ignore\b/, why: "# type: ignore suppresses the type checker" },
         { re: /#\s*mypy:\s*ignore-errors\b/, why: "# mypy: ignore-errors suppresses the type checker for the file" },
         { re: /#\s*pyright:\s*ignore\b/, why: "# pyright: ignore suppresses the type checker" },
@@ -10801,14 +10847,14 @@ function renderText(input, opts) {
     const isBlock = f.severity === "block";
     const mark = paint(isBlock ? "BLOCK" : "warn ", isBlock ? BOLD + RED : YELLOW, c);
     const loc = f.file ? `${stripControl(escapeControl(f.file))}${f.line ? `:${f.line}` : ""}` : "(command)";
-    out3.push(`  ${mark}  ${paint(stripControl(f.rule), BOLD, c)}  ${paint(loc, DIM, c)}`);
+    out3.push(`  ${mark}  ${paint(stripControl(f.rule), BOLD, c)}  ${paint(loc, CYAN, c)}`);
     for (const l of wrap(f.message, opts.width - 4)) out3.push(`    ${l}`);
     const row = (key2, lines) => {
       lines.forEach((l, i) => out3.push(`    ${paint(pad(i === 0 ? key2 : ""), DIM, c)}  ${l}`));
     };
     row("evidence", [paint(clip(f.evidence, body), DIM, c)]);
     row("instead", wrap(f.remediation, body));
-    if (f.signoff.required) row("sign-off", [stripControl(f.signoff.command)]);
+    if (f.signoff.required) row("sign-off", [paint(stripControl(f.signoff.command), YELLOW, c)]);
     out3.push("");
   }
   if (blocks2.length > 0) {
@@ -10818,7 +10864,7 @@ function renderText(input, opts) {
   }
   return out3.join("\n").replace(/\n+$/, "") + "\n";
 }
-var ESC, RESET, BOLD, DIM, RED, YELLOW, GREEN, SIGNOFF_NOTE;
+var ESC, RESET, BOLD, DIM, truecolour, RED, YELLOW, GREEN, CYAN, SIGNOFF_NOTE;
 var init_text = __esm({
   "src/cli/render/text.ts"() {
     "use strict";
@@ -10827,9 +10873,11 @@ var init_text = __esm({
     RESET = `${ESC}[0m`;
     BOLD = `${ESC}[1m`;
     DIM = `${ESC}[2m`;
-    RED = `${ESC}[31m`;
-    YELLOW = `${ESC}[33m`;
-    GREEN = `${ESC}[32m`;
+    truecolour = (r, g, b) => `${ESC}[38;2;${r};${g};${b}m`;
+    RED = truecolour(255, 107, 107);
+    YELLOW = truecolour(227, 179, 65);
+    GREEN = truecolour(63, 185, 80);
+    CYAN = truecolour(86, 212, 221);
     SIGNOFF_NOTE = "A blocking finding clears only with a human sign-off. In CI that sign-off is out-of-band \u2014 a PR label applied by a reviewer \u2014 never a file committed on the branch under review. See SPEC \xA75.4.";
   }
 });
@@ -18194,7 +18242,7 @@ async function runOnboard(opts, io = {}) {
     if (kind === "ok") return GREEN2;
     if (kind === "warn") return YELLOW2;
     if (kind === "bad") return RED2;
-    if (kind === "info") return CYAN;
+    if (kind === "info") return CYAN2;
     return DIM2;
   };
   const status = (label, text, kind = "info") => {
@@ -18251,7 +18299,7 @@ async function runOnboard(opts, io = {}) {
   const section = (n) => {
     sectionNo = n;
     out3("");
-    out3(paint2(n + "/" + SECTIONS.length + "  " + SECTIONS[n - 1], BOLD2 + CYAN, colour));
+    out3(paint2(n + "/" + SECTIONS.length + "  " + SECTIONS[n - 1], BOLD2 + CYAN2, colour));
   };
   const wrote = [];
   let verifyCommand;
@@ -18593,7 +18641,7 @@ function runDemo(cwd, head, runners, out3) {
     out3("changed it while the demo ran; inspect with `git status`.");
   }
 }
-var Aborted, SECTIONS, MANUAL_CONTROLS, ESC2, RESET2, BOLD2, DIM2, RED2, YELLOW2, GREEN2, CYAN, JS_TEST_PATH, JS_TEST_BLOCK;
+var Aborted, SECTIONS, MANUAL_CONTROLS, ESC2, RESET2, BOLD2, DIM2, RED2, YELLOW2, GREEN2, CYAN2, JS_TEST_PATH, JS_TEST_BLOCK;
 var init_onboard = __esm({
   "src/cli/onboard.ts"() {
     "use strict";
@@ -18630,7 +18678,7 @@ var init_onboard = __esm({
     RED2 = `${ESC2}[31m`;
     YELLOW2 = `${ESC2}[33m`;
     GREEN2 = `${ESC2}[32m`;
-    CYAN = `${ESC2}[36m`;
+    CYAN2 = `${ESC2}[36m`;
     JS_TEST_PATH = /(?:^|\/)(?:[^/]+\.(?:test|spec)\.[cm]?[jt]sx?|__tests__\/[^/]+\.[cm]?[jt]sx?)$/;
     JS_TEST_BLOCK = /^(\s*)(it|test|describe)(\s*\()/m;
   }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "tamperward",
-  "version": "2.29.4",
+  "version": "2.29.6",
   "description": "The deterministic agent-integrity gate. One ruleset, evaluated on the actual diff/commands as a verdict, enforced everywhere a change can be made.",
   "license": "Apache-2.0",
   "author": "hexrift",