tamperward 2.29.5 → 2.29.6

package/dist/cli/index.js

@@ -3432,22 +3432,53 @@ function isCommentLine(trimmed, lang) {
   return SLASH_COMMENT.test(trimmed);
 }
 function insideStringLiteral(line, idx, lang) {
-  const hash = HASH_COMMENT_LANGS.has(lang ?? "js");
+  const l = lang ?? "js";
+  const hash = HASH_COMMENT_LANGS.has(l);
   let quote = null;
   for (let j = 0; j < idx; j++) {
     const ch = line[j];
     if (quote) {
       if (ch === "\\") j++;
-      else if (ch === quote) quote = null;
+      else if (quote.length === 3) {
+        if (ch === quote[0] && line[j + 1] === quote[0] && line[j + 2] === quote[0]) {
+          quote = null;
+          j += 2;
+        }
+      } else if (ch === quote) quote = null;
       continue;
     }
-    if (ch === '"' || ch === "'" || ch === "`") quote = ch;
+    if (l === "py" && (ch === '"' || ch === "'") && line[j + 1] === ch && line[j + 2] === ch) {
+      quote = ch.repeat(3);
+      j += 2;
+    } else if (ch === '"' || ch === "'" || ch === "`") quote = ch;
     else if (ch === "/" && (line[j + 1] === "/" || line[j + 1] === "*")) return false;
+    else if (l === "js" && ch === "/" && regexPosition(line.slice(0, j))) j = skipRegexLiteral(line, j);
     else if (hash && ch === "#") return false;
   }
   return quote !== null;
 }
-var CODE, EXT, COMMON, IMPORTS, HASH_COMMENT, DEBUG_ONLY, SLASH_COMMENT, HASH_COMMENT_LANGS;
+function regexPosition(before) {
+  const s = before.replace(/\s+$/, "");
+  if (s === "") return true;
+  const last = s[s.length - 1];
+  if (/[\w$]/.test(last)) {
+    const kw = /[A-Za-z_$][\w$]*$/.exec(s);
+    return kw !== null && REGEX_KEYWORDS.has(kw[0]);
+  }
+  return last !== ")" && last !== "]" && last !== '"' && last !== "'" && last !== "`";
+}
+function skipRegexLiteral(line, start) {
+  let inClass = false;
+  for (let k = start + 1; k < line.length; k++) {
+    const c = line[k];
+    if (c === "\\") k++;
+    else if (c === "[") inClass = true;
+    else if (c === "]") inClass = false;
+    else if (c === "/" && !inClass) return k;
+  }
+  return line.length - 1;
+}
+var CODE, EXT, COMMON, IMPORTS, HASH_COMMENT, DEBUG_ONLY, SLASH_COMMENT, HASH_COMMENT_LANGS, REGEX_KEYWORDS;
 var init_files = __esm({
   "src/detectors/files.ts"() {
     "use strict";
@@ -3479,6 +3510,21 @@ var init_files = __esm({
     DEBUG_ONLY = /^(?:console\.\w+\(.*\)\s*;?|debugger\s*;?)$/;
     SLASH_COMMENT = /^(?:\/\/|\/\*|\*(?:\s|\/|$))/;
     HASH_COMMENT_LANGS = /* @__PURE__ */ new Set(["py", "rb", "php"]);
+    REGEX_KEYWORDS = /* @__PURE__ */ new Set([
+      "return",
+      "throw",
+      "case",
+      "yield",
+      "do",
+      "else",
+      "in",
+      "of",
+      "typeof",
+      "void",
+      "delete",
+      "instanceof",
+      "new"
+    ]);
   }
 });
 
@@ -3890,8 +3936,8 @@ var init_lint_suppression = __esm({
         { re: /\bbiome-ignore\b/, why: "biome-ignore suppresses Biome diagnostics" }
       ],
       py: [
-        { re: /#\s*noqa\b/, why: "# noqa suppresses flake8/ruff findings" },
-        { re: /#\s*(?:ruff|flake8):\s*noqa\b/, why: "# ruff: noqa / # flake8: noqa suppresses every finding in the file" },
+        { re: /#\s*noqa\b/i, why: "# noqa suppresses flake8/ruff findings" },
+        { re: /#\s*(?:ruff|flake8):\s*noqa\b/i, why: "# ruff: noqa / # flake8: noqa suppresses every finding in the file" },
         { re: /#\s*type:\s*ignore\b/, why: "# type: ignore suppresses the type checker" },
         { re: /#\s*mypy:\s*ignore-errors\b/, why: "# mypy: ignore-errors suppresses the type checker for the file" },
         { re: /#\s*pyright:\s*ignore\b/, why: "# pyright: ignore suppresses the type checker" },

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "tamperward",
-  "version": "2.29.5",
+  "version": "2.29.6",
   "description": "The deterministic agent-integrity gate. One ruleset, evaluated on the actual diff/commands as a verdict, enforced everywhere a change can be made.",
   "license": "Apache-2.0",
   "author": "hexrift",