tryassay 0.28.2 → 0.30.1

package/dist/lib/rule-harvester/ground-truth.js

@@ -0,0 +1,156 @@
+import { execSync } from 'node:child_process';
+export function runTscCheck(repoDir) {
+    try {
+        execSync('npx tsc --noEmit 2>&1', {
+            cwd: repoDir,
+            timeout: 120_000,
+            encoding: 'utf-8',
+        });
+        return { errors: '', exitCode: 0 };
+    }
+    catch (err) {
+        const e = err;
+        if (e.status === undefined) {
+            return null;
+        }
+        const combined = ((e.stdout ?? '') + (e.stderr ?? '')).trim();
+        return { errors: combined, exitCode: e.status };
+    }
+}
+export function tscReportsErrorInFile(tscOutput, filePath) {
+    return tscOutput.includes(filePath);
+}
+export function confirmByGrep(code, claim) {
+    const cat = claim.category.toLowerCase();
+    const desc = claim.description.toLowerCase();
+    // error-handling: await without surrounding try/catch or .catch()
+    if (cat.includes('error-handling') ||
+        desc.includes('error handling') ||
+        desc.includes('try/catch')) {
+        const hasAwait = /\bawait\b/.test(code);
+        const hasTryCatch = /\btry\s*\{/.test(code);
+        const hasCatchChain = /\.catch\s*\(/.test(code);
+        const confirmed = hasAwait && !hasTryCatch && !hasCatchChain;
+        return {
+            claimId: claim.claimId,
+            confirmed,
+            method: 'grep',
+            evidence: confirmed
+                ? 'Found await without try/catch or .catch()'
+                : 'await is wrapped in try/catch or .catch()',
+        };
+    }
+    // security + SQL injection: template literals with SQL keywords and ${
+    if ((cat.includes('security') &&
+        (desc.includes('sql') ||
+            desc.includes('injection') ||
+            desc.includes('query'))) ||
+        cat.includes('injection')) {
+        const sqlTemplatePattern = /`[^`]*(SELECT|INSERT|UPDATE|DELETE|FROM|WHERE)[^`]*\$\{/i;
+        const confirmed = sqlTemplatePattern.test(code);
+        return {
+            claimId: claim.claimId,
+            confirmed,
+            method: 'grep',
+            evidence: confirmed
+                ? 'Found SQL template literal with ${} interpolation'
+                : 'No SQL injection pattern found',
+        };
+    }
+    // hardcoded secrets: key|secret|token|password|api_key = "long_string"
+    if (cat.includes('hardcoded') ||
+        cat.includes('secret') ||
+        desc.includes('hardcoded') ||
+        desc.includes('secret') ||
+        desc.includes('api key') ||
+        desc.includes('api_key')) {
+        const secretPattern = /\b(?:key|secret|token|password|api_key)\s*=\s*["'][^"']{8,}["']/i;
+        const confirmed = secretPattern.test(code);
+        return {
+            claimId: claim.claimId,
+            confirmed,
+            method: 'grep',
+            evidence: confirmed
+                ? 'Found hardcoded secret assignment'
+                : 'No hardcoded secret pattern found',
+        };
+    }
+    // edge-case / null/undefined: nested property access without optional chaining or null checks
+    if (cat.includes('edge-case') ||
+        cat.includes('null') ||
+        cat.includes('undefined') ||
+        desc.includes('null') ||
+        desc.includes('undefined') ||
+        desc.includes('optional')) {
+        // Match a.b.c patterns where there's no ?. in the chain
+        const unsafeAccessPattern = /\b\w+\.\w+\.\w+/;
+        const safeAccessPattern = /\b\w+\??\.\w+\??\.\w+/;
+        const hasUnsafe = unsafeAccessPattern.test(code);
+        const hasSafe = /\?\.\w+/.test(code);
+        const confirmed = hasUnsafe && !hasSafe;
+        return {
+            claimId: claim.claimId,
+            confirmed,
+            method: 'grep',
+            evidence: confirmed
+                ? 'Found nested property access without optional chaining'
+                : 'Optional chaining or null checks present',
+        };
+    }
+    // input validation: req.body/params/query without validation
+    if (cat.includes('input validation') ||
+        cat.includes('validation') ||
+        desc.includes('input validation') ||
+        desc.includes('req.body') ||
+        desc.includes('req.params') ||
+        desc.includes('req.query')) {
+        const hasDirectAccess = /req\.(body|params|query)/.test(code);
+        const hasValidation = /validate|schema|zod|yup|joi|\.parse\(|\.safeParse\(/.test(code);
+        const confirmed = hasDirectAccess && !hasValidation;
+        return {
+            claimId: claim.claimId,
+            confirmed,
+            method: 'grep',
+            evidence: confirmed
+                ? 'Found req.body/params/query without validation'
+                : 'Validation present',
+        };
+    }
+    // unhandled promise: floating promise without await
+    if (cat.includes('unhandled promise') ||
+        cat.includes('promise') ||
+        desc.includes('unhandled promise') ||
+        desc.includes('floating promise')) {
+        // Look for function calls that return promises but are not awaited
+        const floatingPattern = /^\s+(?!.*await\s)\w+\s*\(.*\)\s*;/m;
+        const confirmed = floatingPattern.test(code);
+        return {
+            claimId: claim.claimId,
+            confirmed,
+            method: 'grep',
+            evidence: confirmed
+                ? 'Found potential floating promise (unawaited call)'
+                : 'No floating promise pattern found',
+        };
+    }
+    return {
+        claimId: claim.claimId,
+        confirmed: false,
+        method: 'grep',
+        evidence: `No grep strategy for category "${claim.category}"`,
+    };
+}
+export function parseConfirmation(code, claim, tscOutput, filePath) {
+    if (tscOutput !== null &&
+        claim.category.toLowerCase().includes('type-safety') &&
+        tscReportsErrorInFile(tscOutput, filePath)) {
+        return {
+            claimId: claim.claimId,
+            confirmed: true,
+            method: 'compiler',
+            evidence: `tsc reported error in ${filePath}`,
+        };
+    }
+    return confirmByGrep(code, claim);
+}
+//# sourceMappingURL=ground-truth.js.map

package/dist/lib/rule-harvester/ground-truth.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ground-truth.js","sourceRoot":"","sources":["../../../src/lib/rule-harvester/ground-truth.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAgB9C,MAAM,UAAU,WAAW,CACzB,OAAe;IAEf,IAAI,CAAC;QACH,QAAQ,CAAC,uBAAuB,EAAE;YAChC,GAAG,EAAE,OAAO;YACZ,OAAO,EAAE,OAAO;YAChB,QAAQ,EAAE,OAAO;SAClB,CAAC,CAAC;QACH,OAAO,EAAE,MAAM,EAAE,EAAE,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC;IACrC,CAAC;IAAC,OAAO,GAAY,EAAE,CAAC;QACtB,MAAM,CAAC,GAAG,GAA4D,CAAC;QACvE,IAAI,CAAC,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;YAC3B,OAAO,IAAI,CAAC;QACd,CAAC;QACD,MAAM,QAAQ,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QAC9D,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC;IAClD,CAAC;AACH,CAAC;AAED,MAAM,UAAU,qBAAqB,CACnC,SAAiB,EACjB,QAAgB;IAEhB,OAAO,SAAS,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;AACtC,CAAC;AAED,MAAM,UAAU,aAAa,CAC3B,IAAY,EACZ,KAA2B;IAE3B,MAAM,GAAG,GAAG,KAAK,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC;IACzC,MAAM,IAAI,GAAG,KAAK,CAAC,WAAW,CAAC,WAAW,EAAE,CAAC;IAE7C,kEAAkE;IAClE,IACE,GAAG,CAAC,QAAQ,CAAC,gBAAgB,CAAC;QAC9B,IAAI,CAAC,QAAQ,CAAC,gBAAgB,CAAC;QAC/B,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,EAC1B,CAAC;QACD,MAAM,QAAQ,GAAG,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACxC,MAAM,WAAW,GAAG,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC5C,MAAM,aAAa,GAAG,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAChD,MAAM,SAAS,GAAG,QAAQ,IAAI,CAAC,WAAW,IAAI,CAAC,aAAa,CAAC;QAC7D,OAAO;YACL,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,SAAS;YACT,MAAM,EAAE,MAAM;YACd,QAAQ,EAAE,SAAS;gBACjB,CAAC,CAAC,2CAA2C;gBAC7C,CAAC,CAAC,2CAA2C;SAChD,CAAC;IACJ,CAAC;IAED,uEAAuE;IACvE,IACE,CAAC,GAAG,CAAC,QAAQ,CAAC,UAAU,CAAC;QACvB,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;YACnB,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC;YAC1B,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC;QAC5B,GAAG,CAAC,QAAQ,CAAC,WAAW,CAAC,EACzB,CAAC;QACD,MAAM,kBAAkB,GACtB,0DAA0D,CAAC;QAC7D,MAAM,SAAS,GAAG,kBAAkB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAChD,OAAO;YACL,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,SAAS;YACT,MAAM,EAAE,MAAM;YACd,QAAQ,EAAE,SAAS;gBACjB,CAAC,CAAC,mDAAmD;gBACrD,CAAC,CAAC,gCAAgC;SACrC,CAAC;IACJ,CAAC;IAED,uEAAuE;IACvE,IACE,GAAG,CAAC,QAAQ,CAAC,WAAW,CAAC;QACzB,GAAG,CAAC,QAAQ,CAAC,QAAQ,CAAC;QACtB,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC;QAC1B,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC;QACvB,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC;QACxB,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,EACxB,CAAC;QACD,MAAM,aAAa,GACjB,kEAAkE,CAAC;QACrE,MAAM,SAAS,GAAG,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC3C,OAAO;YACL,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,SAAS;YACT,MAAM,EAAE,MAAM;YACd,QAAQ,EAAE,SAAS;gBACjB,CAAC,CAAC,mCAAmC;gBACrC,CAAC,CAAC,mCAAmC;SACxC,CAAC;IACJ,CAAC;IAED,8FAA8F;IAC9F,IACE,GAAG,CAAC,QAAQ,CAAC,WAAW,CAAC;QACzB,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC;QACpB,GAAG,CAAC,QAAQ,CAAC,WAAW,CAAC;QACzB,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC;QACrB,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC;QAC1B,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,EACzB,CAAC;QACD,wDAAwD;QACxD,MAAM,mBAAmB,GAAG,iBAAiB,CAAC;QAC9C,MAAM,iBAAiB,GAAG,uBAAuB,CAAC;QAClD,MAAM,SAAS,GAAG,mBAAmB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACjD,MAAM,OAAO,GAAG,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACrC,MAAM,SAAS,GAAG,SAAS,IAAI,CAAC,OAAO,CAAC;QACxC,OAAO;YACL,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,SAAS;YACT,MAAM,EAAE,MAAM;YACd,QAAQ,EAAE,SAAS;gBACjB,CAAC,CAAC,wDAAwD;gBAC1D,CAAC,CAAC,0CAA0C;SAC/C,CAAC;IACJ,CAAC;IAED,6DAA6D;IAC7D,IACE,GAAG,CAAC,QAAQ,CAAC,kBAAkB,CAAC;QAChC,GAAG,CAAC,QAAQ,CAAC,YAAY,CAAC;QAC1B,IAAI,CAAC,QAAQ,CAAC,kBAAkB,CAAC;QACjC,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC;QACzB,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAC;QAC3B,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,EAC1B,CAAC;QACD,MAAM,eAAe,GAAG,0BAA0B,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC9D,MAAM,aAAa,GACjB,qDAAqD,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACnE,MAAM,SAAS,GAAG,eAAe,IAAI,CAAC,aAAa,CAAC;QACpD,OAAO;YACL,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,SAAS;YACT,MAAM,EAAE,MAAM;YACd,QAAQ,EAAE,SAAS;gBACjB,CAAC,CAAC,gDAAgD;gBAClD,CAAC,CAAC,oBAAoB;SACzB,CAAC;IACJ,CAAC;IAED,oDAAoD;IACpD,IACE,GAAG,CAAC,QAAQ,CAAC,mBAAmB,CAAC;QACjC,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC;QACvB,IAAI,CAAC,QAAQ,CAAC,mBAAmB,CAAC;QAClC,IAAI,CAAC,QAAQ,CAAC,kBAAkB,CAAC,EACjC,CAAC;QACD,mEAAmE;QACnE,MAAM,eAAe,GAAG,oCAAoC,CAAC;QAC7D,MAAM,SAAS,GAAG,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC7C,OAAO;YACL,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,SAAS;YACT,MAAM,EAAE,MAAM;YACd,QAAQ,EAAE,SAAS;gBACjB,CAAC,CAAC,mDAAmD;gBACrD,CAAC,CAAC,mCAAmC;SACxC,CAAC;IACJ,CAAC;IAED,OAAO;QACL,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,SAAS,EAAE,KAAK;QAChB,MAAM,EAAE,MAAM;QACd,QAAQ,EAAE,kCAAkC,KAAK,CAAC,QAAQ,GAAG;KAC9D,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,iBAAiB,CAC/B,IAAY,EACZ,KAA2B,EAC3B,SAAwB,EACxB,QAAgB;IAEhB,IACE,SAAS,KAAK,IAAI;QAClB,KAAK,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,aAAa,CAAC;QACpD,qBAAqB,CAAC,SAAS,EAAE,QAAQ,CAAC,EAC1C,CAAC;QACD,OAAO;YACL,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,SAAS,EAAE,IAAI;YACf,MAAM,EAAE,UAAU;YAClB,QAAQ,EAAE,yBAAyB,QAAQ,EAAE;SAC9C,CAAC;IACJ,CAAC;IAED,OAAO,aAAa,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;AACpC,CAAC"}

package/dist/lib/rule-harvester/harvest.d.ts

@@ -0,0 +1,26 @@
+export interface HarvestConfig {
+    repoList: Array<{
+        owner: string;
+        name: string;
+        category: string;
+    }>;
+    /** Assay project root — where rules go */
+    catalogPath: string;
+    /** Where progress.json lives */
+    progressDir: string;
+    /** Where run reports go */
+    runsDir: string;
+    /** Temp dir for clones (e.g. /private/tmp/assay-harvester) */
+    workDir: string;
+    /** Model name for reporting */
+    model: string;
+    /** Max repos to scan */
+    limit?: number;
+    /** Only scan these repos (owner/name format) */
+    repoFilter?: string[];
+    /** Skip completed repos */
+    resume?: boolean;
+    /** Logging callback */
+    onLog?: (msg: string) => void;
+}
+export declare function harvestRepos(config: HarvestConfig): Promise<void>;

package/dist/lib/rule-harvester/harvest.js

@@ -0,0 +1,307 @@
+import { execSync } from 'node:child_process';
+import { readFile, rm } from 'node:fs/promises';
+import { readdirSync, readFileSync, statSync } from 'node:fs';
+import { join, relative } from 'node:path';
+import { selectFiles } from './file-selector.js';
+import { scanFile } from './scanner.js';
+import { parseConfirmation, runTscCheck } from './ground-truth.js';
+import { loadProgress, saveProgress, getFileState, setFileState, initRepo, } from './progress.js';
+import { createRunReport, saveRunReport } from './reporter.js';
+import { learnFromFinding, getLearnedRulesSummary } from '../learned-rules/index.js';
+// ── Helpers ───────────────────────────────────────────────────
+function repoKey(repo) {
+    return `${repo.owner}/${repo.name}`;
+}
+function log(config, msg) {
+    if (config.onLog) {
+        config.onLog(msg);
+    }
+    else {
+        console.log(msg);
+    }
+}
+function cloneRepo(repo, targetDir) {
+    const url = `https://github.com/${repo.owner}/${repo.name}.git`;
+    try {
+        execSync(`git clone --depth 1 "${url}" "${targetDir}"`, {
+            timeout: 120_000,
+            stdio: 'pipe',
+        });
+        return true;
+    }
+    catch {
+        return false;
+    }
+}
+function installDeps(repoDir) {
+    try {
+        execSync('npm install --ignore-scripts', {
+            cwd: repoDir,
+            timeout: 180_000,
+            stdio: 'pipe',
+        });
+        return true;
+    }
+    catch {
+        return false;
+    }
+}
+function listTsFiles(dir, base) {
+    const root = base ?? dir;
+    const results = [];
+    const TS_EXTENSIONS = new Set(['.ts', '.tsx', '.js', '.jsx']);
+    const SKIP_DIRS = new Set(['node_modules', '.git', 'dist']);
+    let entries;
+    try {
+        entries = readdirSync(dir);
+    }
+    catch {
+        return results;
+    }
+    for (const entry of entries) {
+        if (SKIP_DIRS.has(entry))
+            continue;
+        const fullPath = join(dir, entry);
+        let stat;
+        try {
+            stat = statSync(fullPath);
+        }
+        catch {
+            continue;
+        }
+        if (stat.isDirectory()) {
+            results.push(...listTsFiles(fullPath, root));
+        }
+        else if (stat.isFile()) {
+            const ext = entry.slice(entry.lastIndexOf('.'));
+            if (!TS_EXTENSIONS.has(ext))
+                continue;
+            let content = '';
+            try {
+                content = readFileSync(fullPath, 'utf-8');
+            }
+            catch {
+                // If unreadable, estimate 0 lines
+            }
+            const lineCount = content ? content.split('\n').length : 0;
+            const relPath = relative(root, fullPath);
+            results.push({ path: relPath, lineCount });
+        }
+    }
+    return results;
+}
+// ── Main Pipeline ─────────────────────────────────────────────
+export async function harvestRepos(config) {
+    const startTime = Date.now();
+    // 1. Load progress if resume=true
+    let progress = {};
+    if (config.resume) {
+        progress = await loadProgress(config.progressDir);
+        log(config, `Resumed progress: ${Object.keys(progress).length} repos tracked`);
+    }
+    // 2. Filter repos by repoFilter and limit
+    let repos = config.repoList;
+    if (config.repoFilter && config.repoFilter.length > 0) {
+        const filterSet = new Set(config.repoFilter);
+        repos = repos.filter((r) => filterSet.has(repoKey(r)));
+    }
+    if (config.limit !== undefined && config.limit > 0) {
+        repos = repos.slice(0, config.limit);
+    }
+    log(config, `Processing ${repos.length} repos`);
+    const allFileResults = [];
+    for (const repo of repos) {
+        const key = repoKey(repo);
+        // 3. Skip completed repos on resume
+        if (config.resume) {
+            const repoProgress = progress[key];
+            if (repoProgress?.status === 'complete') {
+                log(config, `[SKIP] ${key} — already complete`);
+                continue;
+            }
+        }
+        log(config, `[START] ${key}`);
+        const repoDir = join(config.workDir, repo.name);
+        // 4a. Clone
+        const cloneOk = cloneRepo(repo, repoDir);
+        if (!cloneOk) {
+            log(config, `[FAIL] ${key} — clone failed`);
+            continue;
+        }
+        log(config, `[CLONED] ${key}`);
+        // 4b. Install deps (best-effort)
+        const installOk = installDeps(repoDir);
+        if (!installOk) {
+            log(config, `[WARN] ${key} — npm install failed (continuing)`);
+        }
+        // 4c. Run tsc baseline
+        const tscResult = runTscCheck(repoDir);
+        const tscOutput = tscResult?.errors ?? null;
+        log(config, `[TSC] ${key} — exit ${tscResult?.exitCode ?? 'null'}, ${tscOutput?.length ?? 0} chars`);
+        // 4d. List all .ts/.tsx/.js/.jsx files
+        const allFiles = listTsFiles(repoDir);
+        log(config, `[FILES] ${key} — ${allFiles.length} files found`);
+        // 4e. Select files
+        const selectedFiles = selectFiles(allFiles);
+        log(config, `[SELECTED] ${key} — ${selectedFiles.length} files to scan`);
+        // Initialize repo in progress
+        progress = initRepo(progress, key);
+        // 4f. Scan each selected file
+        for (const selectedFile of selectedFiles) {
+            const absFilePath = join(repoDir, selectedFile.path);
+            const fileState = getFileState(progress, key, selectedFile.path);
+            // Skip already-learned/confirmed files on resume
+            if (config.resume && (fileState === 'learned' || fileState === 'confirmed')) {
+                log(config, `  [SKIP] ${selectedFile.path} — ${fileState}`);
+                continue;
+            }
+            const fileStart = Date.now();
+            const result = {
+                repo: key,
+                filePath: selectedFile.path,
+                claimsExtracted: 0,
+                confirmed: 0,
+                rulesLearned: 0,
+                rulesRejected: 0,
+                rulesDuplicate: 0,
+                unmatchedCategories: [],
+                durationMs: 0,
+            };
+            // Read file content
+            let code;
+            try {
+                code = await readFile(absFilePath, 'utf-8');
+            }
+            catch (err) {
+                log(config, `  [WARN] ${selectedFile.path} — unreadable: ${String(err)}`);
+                continue;
+            }
+            // Scan with timeout (clear timer on success to avoid accumulating pending timers)
+            let scanOutput = null;
+            let timer;
+            try {
+                const scanPromise = scanFile(code, 'typescript');
+                const timeoutPromise = new Promise((_, reject) => {
+                    timer = setTimeout(() => reject(new Error('scanFile timeout')), 1_200_000);
+                });
+                scanOutput = await Promise.race([scanPromise, timeoutPromise]);
+            }
+            catch (err) {
+                log(config, `  [SCAN_ERR] ${selectedFile.path} — ${String(err)}`);
+                progress = setFileState(progress, key, selectedFile.path, 'scanned');
+                await saveProgress(config.progressDir, progress);
+                result.durationMs = Date.now() - fileStart;
+                allFileResults.push(result);
+                continue;
+            }
+            finally {
+                if (timer)
+                    clearTimeout(timer);
+            }
+            result.claimsExtracted = scanOutput.result.totalClaims;
+            // Update progress to scanned
+            progress = setFileState(progress, key, selectedFile.path, 'scanned');
+            // For each FAIL/PARTIAL finding, confirm and learn
+            for (const failure of scanOutput.result.failures) {
+                const claimForConfirmation = {
+                    claimId: failure.claimId,
+                    category: failure.category,
+                    description: failure.description,
+                    verdict: 'FAIL',
+                };
+                const groundTruth = parseConfirmation(code, claimForConfirmation, tscOutput, selectedFile.path);
+                if (!groundTruth.confirmed)
+                    continue;
+                result.confirmed += 1;
+                progress = setFileState(progress, key, selectedFile.path, 'confirmed');
+                // Coerce severity: low → medium (ExtractedPattern.severity doesn't include 'low')
+                const rawSeverity = failure.severity;
+                const coercedSeverity = rawSeverity === 'critical' || rawSeverity === 'high' || rawSeverity === 'medium'
+                    ? rawSeverity
+                    : 'medium';
+                const extractionInput = {
+                    claim: {
+                        id: failure.claimId,
+                        category: failure.category,
+                        severity: coercedSeverity,
+                        description: failure.description,
+                        assertion: failure.assertion,
+                    },
+                    verification: {
+                        verdict: 'FAIL',
+                        reasoning: failure.reasoning,
+                    },
+                    code,
+                    language: 'typescript',
+                    filePath: selectedFile.path,
+                };
+                let learnResult;
+                try {
+                    learnResult = await learnFromFinding(config.catalogPath, extractionInput);
+                }
+                catch (err) {
+                    log(config, `  [LEARN_ERR] ${selectedFile.path}:${failure.claimId} — ${String(err)}`);
+                    result.rulesRejected += 1;
+                    continue;
+                }
+                if (learnResult.learned) {
+                    result.rulesLearned += 1;
+                    progress = setFileState(progress, key, selectedFile.path, 'learned');
+                }
+                else {
+                    const reason = learnResult.reason ?? '';
+                    if (reason.includes('No extraction strategy')) {
+                        result.unmatchedCategories.push(failure.category);
+                    }
+                    else if (reason.includes('duplicate')) {
+                        result.rulesDuplicate += 1;
+                    }
+                    else {
+                        result.rulesRejected += 1;
+                    }
+                }
+            }
+            result.durationMs = Date.now() - fileStart;
+            allFileResults.push(result);
+            // Save after each file (Ctrl+C safe)
+            await saveProgress(config.progressDir, progress);
+            log(config, `  [FILE] ${selectedFile.path} — ${result.claimsExtracted} claims, ${result.confirmed} confirmed, ${result.rulesLearned} learned (${result.durationMs}ms)`);
+        }
+        // 4g. Delete clone
+        try {
+            await rm(repoDir, { recursive: true, force: true });
+            log(config, `[CLEANED] ${key}`);
+        }
+        catch (err) {
+            log(config, `[WARN] ${key} — rm failed: ${String(err)}`);
+        }
+        log(config, `[DONE] ${key}`);
+    }
+    // 5. Generate and save run report
+    const catalogSummary = await getLearnedRulesSummary(config.catalogPath);
+    const catalogSize = {
+        total: catalogSummary.total,
+        promoted: catalogSummary.promoted,
+        rejected: catalogSummary.rejected,
+    };
+    const report = createRunReport(allFileResults, config.model, catalogSize);
+    const reportPath = await saveRunReport(config.runsDir, report);
+    // 6. Print summary
+    const totalDurationMin = ((Date.now() - startTime) / 60_000).toFixed(1);
+    log(config, '');
+    log(config, '══════════════════════════════════════');
+    log(config, '  HARVEST COMPLETE');
+    log(config, '══════════════════════════════════════');
+    log(config, `  Repos scanned:      ${report.reposScanned}`);
+    log(config, `  Files scanned:      ${report.filesScanned}`);
+    log(config, `  Claims extracted:   ${report.claimsExtracted}`);
+    log(config, `  Findings confirmed: ${report.findingsConfirmed}`);
+    log(config, `  Rules learned:      ${report.rulesLearned}`);
+    log(config, `  Rules rejected:     ${report.rulesRejected}`);
+    log(config, `  Rules duplicate:    ${report.rulesDuplicate}`);
+    log(config, `  Catalog total:      ${catalogSize.total} (${catalogSize.promoted} promoted)`);
+    log(config, `  Duration:           ${totalDurationMin}m`);
+    log(config, `  Report:             ${reportPath}`);
+    log(config, '══════════════════════════════════════');
+}
+//# sourceMappingURL=harvest.js.map

package/dist/lib/rule-harvester/harvest.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"harvest.js","sourceRoot":"","sources":["../../../src/lib/rule-harvester/harvest.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAC9C,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,kBAAkB,CAAC;AAChD,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AAC9D,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAC;AAE3C,OAAO,EAAE,WAAW,EAAsB,MAAM,oBAAoB,CAAC;AACrE,OAAO,EAAE,QAAQ,EAAE,MAAM,cAAc,CAAC;AACxC,OAAO,EAAE,iBAAiB,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AACnE,OAAO,EACL,YAAY,EACZ,YAAY,EACZ,YAAY,EACZ,YAAY,EACZ,QAAQ,GAET,MAAM,eAAe,CAAC;AACvB,OAAO,EAAE,eAAe,EAAE,aAAa,EAAuB,MAAM,eAAe,CAAC;AACpF,OAAO,EAAE,gBAAgB,EAAE,sBAAsB,EAAE,MAAM,2BAA2B,CAAC;AA0BrF,iEAAiE;AAEjE,SAAS,OAAO,CAAC,IAAqC;IACpD,OAAO,GAAG,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;AACtC,CAAC;AAED,SAAS,GAAG,CAAC,MAAqB,EAAE,GAAW;IAC7C,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;QACjB,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACpB,CAAC;SAAM,CAAC;QACN,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IACnB,CAAC;AACH,CAAC;AAED,SAAS,SAAS,CAChB,IAAqC,EACrC,SAAiB;IAEjB,MAAM,GAAG,GAAG,sBAAsB,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,IAAI,MAAM,CAAC;IAChE,IAAI,CAAC;QACH,QAAQ,CAAC,wBAAwB,GAAG,MAAM,SAAS,GAAG,EAAE;YACtD,OAAO,EAAE,OAAO;YAChB,KAAK,EAAE,MAAM;SACd,CAAC,CAAC;QACH,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,SAAS,WAAW,CAAC,OAAe;IAClC,IAAI,CAAC;QACH,QAAQ,CAAC,8BAA8B,EAAE;YACvC,GAAG,EAAE,OAAO;YACZ,OAAO,EAAE,OAAO;YAChB,KAAK,EAAE,MAAM;SACd,CAAC,CAAC;QACH,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,SAAS,WAAW,CAAC,GAAW,EAAE,IAAa;IAC7C,MAAM,IAAI,GAAG,IAAI,IAAI,GAAG,CAAC;IACzB,MAAM,OAAO,GAAoB,EAAE,CAAC;IACpC,MAAM,aAAa,GAAG,IAAI,GAAG,CAAC,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC;IAC9D,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,CAAC,cAAc,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IAE5D,IAAI,OAAiB,CAAC;IACtB,IAAI,CAAC;QACH,OAAO,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC;IAC7B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAC5B,IAAI,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC;YAAE,SAAS;QAEnC,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;QAClC,IAAI,IAAI,CAAC;QACT,IAAI,CAAC;YACH,IAAI,GAAG,QAAQ,CAAC,QAAQ,CAAC,CAAC;QAC5B,CAAC;QAAC,MAAM,CAAC;YACP,SAAS;QACX,CAAC;QAED,IAAI,IAAI,CAAC,WAAW,EAAE,EAAE,CAAC;YACvB,OAAO,CAAC,IAAI,CAAC,GAAG,WAAW,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC,CAAC;QAC/C,CAAC;aAAM,IAAI,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC;YACzB,MAAM,GAAG,GAAG,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC;YAChD,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,GAAG,CAAC;gBAAE,SAAS;YAEtC,IAAI,OAAO,GAAG,EAAE,CAAC;YACjB,IAAI,CAAC;gBACH,OAAO,GAAG,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;YAC5C,CAAC;YAAC,MAAM,CAAC;gBACP,kCAAkC;YACpC,CAAC;YAED,MAAM,SAAS,GAAG,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;YAC3D,MAAM,OAAO,GAAG,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;YAEzC,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC,CAAC;QAC7C,CAAC;IACH,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,iEAAiE;AAEjE,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,MAAqB;IACtD,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAE7B,kCAAkC;IAClC,IAAI,QAAQ,GAAoB,EAAE,CAAC;IACnC,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC;QAClB,QAAQ,GAAG,MAAM,YAAY,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;QAClD,GAAG,CAAC,MAAM,EAAE,qBAAqB,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,MAAM,gBAAgB,CAAC,CAAC;IACjF,CAAC;IAED,0CAA0C;IAC1C,IAAI,KAAK,GAAG,MAAM,CAAC,QAAQ,CAAC;IAE5B,IAAI,MAAM,CAAC,UAAU,IAAI,MAAM,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACtD,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;QAC7C,KAAK,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,SAAS,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACzD,CAAC;IAED,IAAI,MAAM,CAAC,KAAK,KAAK,SAAS,IAAI,MAAM,CAAC,KAAK,GAAG,CAAC,EAAE,CAAC;QACnD,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC;IACvC,CAAC;IAED,GAAG,CAAC,MAAM,EAAE,cAAc,KAAK,CAAC,MAAM,QAAQ,CAAC,CAAC;IAEhD,MAAM,cAAc,GAAqB,EAAE,CAAC;IAE5C,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,GAAG,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;QAE1B,oCAAoC;QACpC,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC;YAClB,MAAM,YAAY,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC;YACnC,IAAI,YAAY,EAAE,MAAM,KAAK,UAAU,EAAE,CAAC;gBACxC,GAAG,CAAC,MAAM,EAAE,UAAU,GAAG,qBAAqB,CAAC,CAAC;gBAChD,SAAS;YACX,CAAC;QACH,CAAC;QAED,GAAG,CAAC,MAAM,EAAE,WAAW,GAAG,EAAE,CAAC,CAAC;QAE9B,MAAM,OAAO,GAAG,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;QAEhD,YAAY;QACZ,MAAM,OAAO,GAAG,SAAS,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QACzC,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,GAAG,CAAC,MAAM,EAAE,UAAU,GAAG,iBAAiB,CAAC,CAAC;YAC5C,SAAS;QACX,CAAC;QAED,GAAG,CAAC,MAAM,EAAE,YAAY,GAAG,EAAE,CAAC,CAAC;QAE/B,iCAAiC;QACjC,MAAM,SAAS,GAAG,WAAW,CAAC,OAAO,CAAC,CAAC;QACvC,IAAI,CAAC,SAAS,EAAE,CAAC;YACf,GAAG,CAAC,MAAM,EAAE,UAAU,GAAG,oCAAoC,CAAC,CAAC;QACjE,CAAC;QAED,uBAAuB;QACvB,MAAM,SAAS,GAAG,WAAW,CAAC,OAAO,CAAC,CAAC;QACvC,MAAM,SAAS,GAAG,SAAS,EAAE,MAAM,IAAI,IAAI,CAAC;QAC5C,GAAG,CACD,MAAM,EACN,SAAS,GAAG,WAAW,SAAS,EAAE,QAAQ,IAAI,MAAM,KAAK,SAAS,EAAE,MAAM,IAAI,CAAC,QAAQ,CACxF,CAAC;QAEF,uCAAuC;QACvC,MAAM,QAAQ,GAAG,WAAW,CAAC,OAAO,CAAC,CAAC;QACtC,GAAG,CAAC,MAAM,EAAE,WAAW,GAAG,MAAM,QAAQ,CAAC,MAAM,cAAc,CAAC,CAAC;QAE/D,mBAAmB;QACnB,MAAM,aAAa,GAAG,WAAW,CAAC,QAAQ,CAAC,CAAC;QAC5C,GAAG,CAAC,MAAM,EAAE,cAAc,GAAG,MAAM,aAAa,CAAC,MAAM,gBAAgB,CAAC,CAAC;QAEzE,8BAA8B;QAC9B,QAAQ,GAAG,QAAQ,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;QAEnC,8BAA8B;QAC9B,KAAK,MAAM,YAAY,IAAI,aAAa,EAAE,CAAC;YACzC,MAAM,WAAW,GAAG,IAAI,CAAC,OAAO,EAAE,YAAY,CAAC,IAAI,CAAC,CAAC;YACrD,MAAM,SAAS,GAAG,YAAY,CAAC,QAAQ,EAAE,GAAG,EAAE,YAAY,CAAC,IAAI,CAAC,CAAC;YAEjE,iDAAiD;YACjD,IAAI,MAAM,CAAC,MAAM,IAAI,CAAC,SAAS,KAAK,SAAS,IAAI,SAAS,KAAK,WAAW,CAAC,EAAE,CAAC;gBAC5E,GAAG,CAAC,MAAM,EAAE,YAAY,YAAY,CAAC,IAAI,MAAM,SAAS,EAAE,CAAC,CAAC;gBAC5D,SAAS;YACX,CAAC;YAED,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;YAC7B,MAAM,MAAM,GAAmB;gBAC7B,IAAI,EAAE,GAAG;gBACT,QAAQ,EAAE,YAAY,CAAC,IAAI;gBAC3B,eAAe,EAAE,CAAC;gBAClB,SAAS,EAAE,CAAC;gBACZ,YAAY,EAAE,CAAC;gBACf,aAAa,EAAE,CAAC;gBAChB,cAAc,EAAE,CAAC;gBACjB,mBAAmB,EAAE,EAAE;gBACvB,UAAU,EAAE,CAAC;aACd,CAAC;YAEF,oBAAoB;YACpB,IAAI,IAAY,CAAC;YACjB,IAAI,CAAC;gBACH,IAAI,GAAG,MAAM,QAAQ,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;YAC9C,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,GAAG,CAAC,MAAM,EAAE,YAAY,YAAY,CAAC,IAAI,kBAAkB,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;gBAC1E,SAAS;YACX,CAAC;YAED,kFAAkF;YAClF,IAAI,UAAU,GAAgD,IAAI,CAAC;YACnE,IAAI,KAAgD,CAAC;YACrD,IAAI,CAAC;gBACH,MAAM,WAAW,GAAG,QAAQ,CAAC,IAAI,EAAE,YAAY,CAAC,CAAC;gBACjD,MAAM,cAAc,GAAG,IAAI,OAAO,CAAQ,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE;oBACtD,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,kBAAkB,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC;gBAC7E,CAAC,CAAC,CAAC;gBACH,UAAU,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE,cAAc,CAAC,CAAC,CAAC;YACjE,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,GAAG,CAAC,MAAM,EAAE,gBAAgB,YAAY,CAAC,IAAI,MAAM,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;gBAClE,QAAQ,GAAG,YAAY,CAAC,QAAQ,EAAE,GAAG,EAAE,YAAY,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;gBACrE,MAAM,YAAY,CAAC,MAAM,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC;gBACjD,MAAM,CAAC,UAAU,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC;gBAC3C,cAAc,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;gBAC5B,SAAS;YACX,CAAC;oBAAS,CAAC;gBACT,IAAI,KAAK;oBAAE,YAAY,CAAC,KAAK,CAAC,CAAC;YACjC,CAAC;YAED,MAAM,CAAC,eAAe,GAAG,UAAU,CAAC,MAAM,CAAC,WAAW,CAAC;YAEvD,6BAA6B;YAC7B,QAAQ,GAAG,YAAY,CAAC,QAAQ,EAAE,GAAG,EAAE,YAAY,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;YAErE,mDAAmD;YACnD,KAAK,MAAM,OAAO,IAAI,UAAU,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC;gBACjD,MAAM,oBAAoB,GAAG;oBAC3B,OAAO,EAAE,OAAO,CAAC,OAAO;oBACxB,QAAQ,EAAE,OAAO,CAAC,QAAQ;oBAC1B,WAAW,EAAE,OAAO,CAAC,WAAW;oBAChC,OAAO,EAAE,MAAM;iBAChB,CAAC;gBAEF,MAAM,WAAW,GAAG,iBAAiB,CACnC,IAAI,EACJ,oBAAoB,EACpB,SAAS,EACT,YAAY,CAAC,IAAI,CAClB,CAAC;gBAEF,IAAI,CAAC,WAAW,CAAC,SAAS;oBAAE,SAAS;gBAErC,MAAM,CAAC,SAAS,IAAI,CAAC,CAAC;gBACtB,QAAQ,GAAG,YAAY,CAAC,QAAQ,EAAE,GAAG,EAAE,YAAY,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC;gBAEvE,kFAAkF;gBAClF,MAAM,WAAW,GAAG,OAAO,CAAC,QAAkB,CAAC;gBAC/C,MAAM,eAAe,GACnB,WAAW,KAAK,UAAU,IAAI,WAAW,KAAK,MAAM,IAAI,WAAW,KAAK,QAAQ;oBAC9E,CAAC,CAAC,WAAW;oBACb,CAAC,CAAC,QAAQ,CAAC;gBAEf,MAAM,eAAe,GAAG;oBACtB,KAAK,EAAE;wBACL,EAAE,EAAE,OAAO,CAAC,OAAO;wBACnB,QAAQ,EAAE,OAAO,CAAC,QAAQ;wBAC1B,QAAQ,EAAE,eAAe;wBACzB,WAAW,EAAE,OAAO,CAAC,WAAW;wBAChC,SAAS,EAAE,OAAO,CAAC,SAAS;qBAC7B;oBACD,YAAY,EAAE;wBACZ,OAAO,EAAE,MAAe;wBACxB,SAAS,EAAE,OAAO,CAAC,SAAS;qBAC7B;oBACD,IAAI;oBACJ,QAAQ,EAAE,YAAY;oBACtB,QAAQ,EAAE,YAAY,CAAC,IAAI;iBAC5B,CAAC;gBAEF,IAAI,WAAW,CAAC;gBAChB,IAAI,CAAC;oBACH,WAAW,GAAG,MAAM,gBAAgB,CAAC,MAAM,CAAC,WAAW,EAAE,eAAe,CAAC,CAAC;gBAC5E,CAAC;gBAAC,OAAO,GAAG,EAAE,CAAC;oBACb,GAAG,CAAC,MAAM,EAAE,iBAAiB,YAAY,CAAC,IAAI,IAAI,OAAO,CAAC,OAAO,MAAM,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;oBACtF,MAAM,CAAC,aAAa,IAAI,CAAC,CAAC;oBAC1B,SAAS;gBACX,CAAC;gBAED,IAAI,WAAW,CAAC,OAAO,EAAE,CAAC;oBACxB,MAAM,CAAC,YAAY,IAAI,CAAC,CAAC;oBACzB,QAAQ,GAAG,YAAY,CAAC,QAAQ,EAAE,GAAG,EAAE,YAAY,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;gBACvE,CAAC;qBAAM,CAAC;oBACN,MAAM,MAAM,GAAG,WAAW,CAAC,MAAM,IAAI,EAAE,CAAC;oBACxC,IAAI,MAAM,CAAC,QAAQ,CAAC,wBAAwB,CAAC,EAAE,CAAC;wBAC9C,MAAM,CAAC,mBAAmB,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;oBACpD,CAAC;yBAAM,IAAI,MAAM,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC;wBACxC,MAAM,CAAC,cAAc,IAAI,CAAC,CAAC;oBAC7B,CAAC;yBAAM,CAAC;wBACN,MAAM,CAAC,aAAa,IAAI,CAAC,CAAC;oBAC5B,CAAC;gBACH,CAAC;YACH,CAAC;YAED,MAAM,CAAC,UAAU,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC;YAC3C,cAAc,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YAE5B,qCAAqC;YACrC,MAAM,YAAY,CAAC,MAAM,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC;YAEjD,GAAG,CACD,MAAM,EACN,YAAY,YAAY,CAAC,IAAI,MAAM,MAAM,CAAC,eAAe,YAAY,MAAM,CAAC,SAAS,eAAe,MAAM,CAAC,YAAY,aAAa,MAAM,CAAC,UAAU,KAAK,CAC3J,CAAC;QACJ,CAAC;QAED,mBAAmB;QACnB,IAAI,CAAC;YACH,MAAM,EAAE,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;YACpD,GAAG,CAAC,MAAM,EAAE,aAAa,GAAG,EAAE,CAAC,CAAC;QAClC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,GAAG,CAAC,MAAM,EAAE,UAAU,GAAG,iBAAiB,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAC3D,CAAC;QAED,GAAG,CAAC,MAAM,EAAE,UAAU,GAAG,EAAE,CAAC,CAAC;IAC/B,CAAC;IAED,kCAAkC;IAClC,MAAM,cAAc,GAAG,MAAM,sBAAsB,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;IACxE,MAAM,WAAW,GAAG;QAClB,KAAK,EAAE,cAAc,CAAC,KAAK;QAC3B,QAAQ,EAAE,cAAc,CAAC,QAAQ;QACjC,QAAQ,EAAE,cAAc,CAAC,QAAQ;KAClC,CAAC;IAEF,MAAM,MAAM,GAAG,eAAe,CAAC,cAAc,EAAE,MAAM,CAAC,KAAK,EAAE,WAAW,CAAC,CAAC;IAC1E,MAAM,UAAU,GAAG,MAAM,aAAa,CAAC,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IAE/D,mBAAmB;IACnB,MAAM,gBAAgB,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC,GAAG,MAAM,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;IAExE,GAAG,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IAChB,GAAG,CAAC,MAAM,EAAE,wCAAwC,CAAC,CAAC;IACtD,GAAG,CAAC,MAAM,EAAE,oBAAoB,CAAC,CAAC;IAClC,GAAG,CAAC,MAAM,EAAE,wCAAwC,CAAC,CAAC;IACtD,GAAG,CAAC,MAAM,EAAE,yBAAyB,MAAM,CAAC,YAAY,EAAE,CAAC,CAAC;IAC5D,GAAG,CAAC,MAAM,EAAE,yBAAyB,MAAM,CAAC,YAAY,EAAE,CAAC,CAAC;IAC5D,GAAG,CAAC,MAAM,EAAE,yBAAyB,MAAM,CAAC,eAAe,EAAE,CAAC,CAAC;IAC/D,GAAG,CAAC,MAAM,EAAE,yBAAyB,MAAM,CAAC,iBAAiB,EAAE,CAAC,CAAC;IACjE,GAAG,CAAC,MAAM,EAAE,yBAAyB,MAAM,CAAC,YAAY,EAAE,CAAC,CAAC;IAC5D,GAAG,CAAC,MAAM,EAAE,yBAAyB,MAAM,CAAC,aAAa,EAAE,CAAC,CAAC;IAC7D,GAAG,CAAC,MAAM,EAAE,yBAAyB,MAAM,CAAC,cAAc,EAAE,CAAC,CAAC;IAC9D,GAAG,CAAC,MAAM,EAAE,yBAAyB,WAAW,CAAC,KAAK,KAAK,WAAW,CAAC,QAAQ,YAAY,CAAC,CAAC;IAC7F,GAAG,CAAC,MAAM,EAAE,yBAAyB,gBAAgB,GAAG,CAAC,CAAC;IAC1D,GAAG,CAAC,MAAM,EAAE,yBAAyB,UAAU,EAAE,CAAC,CAAC;IACnD,GAAG,CAAC,MAAM,EAAE,wCAAwC,CAAC,CAAC;AACxD,CAAC"}

package/dist/lib/rule-harvester/pr-discovery.d.ts

@@ -0,0 +1,49 @@
+import type { DiscoveredPR, ParsedPRDiff } from '../learned-rules/types.js';
+/** Default labels that indicate a bug-fix PR. Matched case-insensitively as substrings. */
+export declare const DEFAULT_BUG_LABELS: readonly string[];
+/**
+ * Returns true if any label in the array contains a bug-related keyword.
+ * Matches case-insensitively. Accepts optional custom bug label list.
+ */
+export declare function matchesBugLabels(labels: string[], bugLabels?: readonly string[]): boolean;
+/**
+ * Returns true if the PR title matches common bug-fix prefixes.
+ * Looks for fix/bug/resolve/patch at the start or after a conventional commit prefix.
+ */
+export declare function matchesBugTitle(title: string): boolean;
+/**
+ * Returns true if the file path is a TypeScript/JavaScript source file
+ * that is NOT a test file or declaration file.
+ */
+export declare function isTargetFile(path: string): boolean;
+interface DiscoveryConfig {
+    /** Max PRs to fetch per page (GitHub max: 100). */
+    readonly perPage?: number;
+    /** Max pages to paginate through. */
+    readonly maxPages?: number;
+    /** Custom bug labels to match. Defaults to DEFAULT_BUG_LABELS. */
+    readonly bugLabels?: readonly string[];
+    /** Whether to fall back to title matching if no labels match. */
+    readonly titleFallback?: boolean;
+    /** Whether to fetch review comments for each PR. */
+    readonly fetchComments?: boolean;
+}
+/**
+ * Discover merged bug-fix PRs from a GitHub repo.
+ *
+ * Flow:
+ * 1. Fetch closed PRs (paginated)
+ * 2. Filter to merged-only (merged_at !== null)
+ * 3. Filter by bug labels (with optional title fallback)
+ * 4. Optionally enrich with review comments
+ * 5. Collect changed file paths
+ */
+export declare function discoverBugFixPRs(owner: string, name: string, config?: DiscoveryConfig): DiscoveredPR[];
+/**
+ * Fetch and parse diffs for a discovered PR.
+ *
+ * Calls the files endpoint, filters to target files,
+ * and parses each file's patch into typed DiffHunks.
+ */
+export declare function fetchPRDiffs(owner: string, name: string, pr: DiscoveredPR): ParsedPRDiff;
+export {};