tamperward 2.29.5 → 2.29.7

package/dist/cli/index.js

@@ -3432,22 +3432,53 @@ function isCommentLine(trimmed, lang) {
   return SLASH_COMMENT.test(trimmed);
 }
 function insideStringLiteral(line, idx, lang) {
-  const hash = HASH_COMMENT_LANGS.has(lang ?? "js");
+  const l = lang ?? "js";
+  const hash = HASH_COMMENT_LANGS.has(l);
   let quote = null;
   for (let j = 0; j < idx; j++) {
     const ch = line[j];
     if (quote) {
       if (ch === "\\") j++;
-      else if (ch === quote) quote = null;
+      else if (quote.length === 3) {
+        if (ch === quote[0] && line[j + 1] === quote[0] && line[j + 2] === quote[0]) {
+          quote = null;
+          j += 2;
+        }
+      } else if (ch === quote) quote = null;
       continue;
     }
-    if (ch === '"' || ch === "'" || ch === "`") quote = ch;
+    if (l === "py" && (ch === '"' || ch === "'") && line[j + 1] === ch && line[j + 2] === ch) {
+      quote = ch.repeat(3);
+      j += 2;
+    } else if (ch === '"' || ch === "'" || ch === "`") quote = ch;
     else if (ch === "/" && (line[j + 1] === "/" || line[j + 1] === "*")) return false;
+    else if (l === "js" && ch === "/" && regexPosition(line.slice(0, j))) j = skipRegexLiteral(line, j);
     else if (hash && ch === "#") return false;
   }
   return quote !== null;
 }
-var CODE, EXT, COMMON, IMPORTS, HASH_COMMENT, DEBUG_ONLY, SLASH_COMMENT, HASH_COMMENT_LANGS;
+function regexPosition(before) {
+  const s = before.replace(/\s+$/, "");
+  if (s === "") return true;
+  const last = s[s.length - 1];
+  if (/[\w$]/.test(last)) {
+    const kw = /[A-Za-z_$][\w$]*$/.exec(s);
+    return kw !== null && REGEX_KEYWORDS.has(kw[0]);
+  }
+  return last !== ")" && last !== "]" && last !== '"' && last !== "'" && last !== "`";
+}
+function skipRegexLiteral(line, start) {
+  let inClass = false;
+  for (let k = start + 1; k < line.length; k++) {
+    const c = line[k];
+    if (c === "\\") k++;
+    else if (c === "[") inClass = true;
+    else if (c === "]") inClass = false;
+    else if (c === "/" && !inClass) return k;
+  }
+  return line.length - 1;
+}
+var CODE, EXT, COMMON, IMPORTS, HASH_COMMENT, DEBUG_ONLY, SLASH_COMMENT, HASH_COMMENT_LANGS, REGEX_KEYWORDS;
 var init_files = __esm({
   "src/detectors/files.ts"() {
     "use strict";
@@ -3479,6 +3510,21 @@ var init_files = __esm({
     DEBUG_ONLY = /^(?:console\.\w+\(.*\)\s*;?|debugger\s*;?)$/;
     SLASH_COMMENT = /^(?:\/\/|\/\*|\*(?:\s|\/|$))/;
     HASH_COMMENT_LANGS = /* @__PURE__ */ new Set(["py", "rb", "php"]);
+    REGEX_KEYWORDS = /* @__PURE__ */ new Set([
+      "return",
+      "throw",
+      "case",
+      "yield",
+      "do",
+      "else",
+      "in",
+      "of",
+      "typeof",
+      "void",
+      "delete",
+      "instanceof",
+      "new"
+    ]);
   }
 });
 
@@ -3890,8 +3936,8 @@ var init_lint_suppression = __esm({
         { re: /\bbiome-ignore\b/, why: "biome-ignore suppresses Biome diagnostics" }
       ],
       py: [
-        { re: /#\s*noqa\b/, why: "# noqa suppresses flake8/ruff findings" },
-        { re: /#\s*(?:ruff|flake8):\s*noqa\b/, why: "# ruff: noqa / # flake8: noqa suppresses every finding in the file" },
+        { re: /#\s*noqa\b/i, why: "# noqa suppresses flake8/ruff findings" },
+        { re: /#\s*(?:ruff|flake8):\s*noqa\b/i, why: "# ruff: noqa / # flake8: noqa suppresses every finding in the file" },
         { re: /#\s*type:\s*ignore\b/, why: "# type: ignore suppresses the type checker" },
         { re: /#\s*mypy:\s*ignore-errors\b/, why: "# mypy: ignore-errors suppresses the type checker for the file" },
         { re: /#\s*pyright:\s*ignore\b/, why: "# pyright: ignore suppresses the type checker" },
@@ -9868,7 +9914,7 @@ function namesProtectedSnapshot(seg, policy) {
   }
   return null;
 }
-var RULE12, RUNNER3, PM_TEST_SCRIPT, UPDATE_ANY, UPDATE_WITH_RUNNER, INSTA_ACCEPT, UPDATE_EXPECT, REGEN_SCRIPT, MUTATE, snapshotRewrite;
+var RULE12, RUNNER3, PM_TEST_SCRIPT, UPDATE_ANY, UPDATE_WITH_RUNNER, INSTA_ACCEPT, UPDATE_EXPECT, TAP_SNAPSHOT, REGEN_SCRIPT, MUTATE, snapshotRewrite;
 var init_snapshot_rewrite = __esm({
   "src/detectors/snapshot-rewrite.ts"() {
     "use strict";
@@ -9876,12 +9922,13 @@ var init_snapshot_rewrite = __esm({
     init_finding();
     init_command();
     RULE12 = "snapshot-rewrite";
-    RUNNER3 = /\b(?:jest|vitest|playwright|ava)\b/;
+    RUNNER3 = /\b(?:jest|vitest|playwright|ava|tap)\b/;
     PM_TEST_SCRIPT = /(?:^|\s)(?:npm|pnpm|yarn|bun)\s+(?:t|tst|test|run(?:-script)?\s+\S*test\S*)(?:\s|$)/;
     UPDATE_ANY = /--(?:update-?[sS]napshots?|test-update-snapshots|snapshot-update)\b/;
-    UPDATE_WITH_RUNNER = /(?:^|\s)(?:-u|--update)(?:\s|$)/;
+    UPDATE_WITH_RUNNER = /(?:^|\s)(?:-u|--update|--snapshot)(?:=(?:1|true))?(?:\s|$)/;
     INSTA_ACCEPT = /\bcargo\s+insta\s+(?:accept\b|.*\s--accept\b)/;
     UPDATE_EXPECT = /(?:^|\s)UPDATE_EXPECT=\S+/;
+    TAP_SNAPSHOT = /(?:^|\s)TAP_SNAPSHOT=1(?:\s|$)/;
     REGEN_SCRIPT = /\b(?:update|regen(?:erate)?|re?bless)[-_.]?(?:golden|snapshots?|baselines?|expected)\b/i;
     MUTATE = /(?:^|\s)(?:rm|cp|mv|tee|truncate|dd)(?:\s|$)|sed\s+-i|>{1,2}|\bfind\b.*\s-(?:delete\b|exec\s+rm\b)|\bgit\s+(?:checkout|restore)\b/;
     snapshotRewrite = {
@@ -9899,6 +9946,7 @@ var init_snapshot_rewrite = __esm({
               else if ((RUNNER3.test(seg) || PM_TEST_SCRIPT.test(seg)) && UPDATE_WITH_RUNNER.test(seg)) why = "running the test runner in update mode rewrites failing snapshots to match current output";
               else if (INSTA_ACCEPT.test(seg)) why = "cargo insta accept rewrites every pending snapshot to match current output";
               else if (UPDATE_EXPECT.test(seg)) why = "UPDATE_EXPECT=1 rewrites every expect-test expectation to match current output";
+              else if (TAP_SNAPSHOT.test(seg)) why = "TAP_SNAPSHOT=1 rewrites every node-tap snapshot to match current output";
               else if (REGEN_SCRIPT.test(seg)) why = "a regeneration script rewrites the recorded expected output from current output";
               else {
                 const path = MUTATE.test(seg) ? namesProtectedSnapshot(seg, policy) : null;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "tamperward",
-  "version": "2.29.5",
+  "version": "2.29.7",
   "description": "The deterministic agent-integrity gate. One ruleset, evaluated on the actual diff/commands as a verdict, enforced everywhere a change can be made.",
   "license": "Apache-2.0",
   "author": "hexrift",