code-standards 8.72.1__tar.gz → 8.74.0__tar.gz

{code_standards-8.72.1 → code_standards-8.74.0}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.5
 Name: code-standards
-Version: 8.72.1
+Version: 8.74.0
 Summary: One deterministic quality gate for Sarj Python, TypeScript, Swift, Kotlin, shell, SQL, IaC, and repository policy.
 Project-URL: Homepage, https://code-standards.sarj.ai/
 Project-URL: Documentation, https://code-standards.sarj.ai/cli/
@@ -28,10 +28,10 @@ Requires-Dist: pre-commit==4.7.0
 Requires-Dist: pydantic==2.14.1
 Requires-Dist: pyyaml==6.0.3
 Requires-Dist: referencing==0.37.0
-Requires-Dist: repo-standards==6.7.6
+Requires-Dist: repo-standards==6.8.0
 Requires-Dist: ruff==0.17.0
 Requires-Dist: sarj-iac-lint==0.23.2
-Requires-Dist: sarj-python-lint==1.43.1
+Requires-Dist: sarj-python-lint==1.44.0
 Requires-Dist: sarj-rule-contracts==0.2.5
 Requires-Dist: sarj-sql-lint==0.22.2
 Requires-Dist: shellcheck-py==0.11.0.1; (sys_platform == 'darwin' and platform_machine == 'arm64') or (sys_platform == 'darwin' and platform_machine == 'x86_64') or (sys_platform == 'linux' and platform_machine == 'x86_64') or (sys_platform == 'win32' and platform_machine == 'AMD64')

{code_standards-8.72.1 → code_standards-8.74.0}/pyproject.toml

@@ -1,6 +1,6 @@
 [project]
 name = "code-standards"
-version = "8.72.1"
+version = "8.74.0"
 description = "One deterministic quality gate for Sarj Python, TypeScript, Swift, Kotlin, shell, SQL, IaC, and repository policy."
 readme = "README.md"
 requires-python = ">=3.14"
@@ -28,11 +28,11 @@ dependencies = [
   "PyYAML==6.0.3",
   "jsonschema==4.26.0",
   "referencing==0.37.0",
-  "repo-standards==6.7.6",
+  "repo-standards==6.8.0",
   "ruff==0.17.0",
   "shellcheck-py==0.11.0.1; (sys_platform == 'darwin' and platform_machine == 'arm64') or (sys_platform == 'darwin' and platform_machine == 'x86_64') or (sys_platform == 'linux' and platform_machine == 'x86_64') or (sys_platform == 'win32' and platform_machine == 'AMD64')",
   "sarj-iac-lint==0.23.2",
-  "sarj-python-lint==1.43.1",
+  "sarj-python-lint==1.44.0",
   "sarj-sql-lint==0.22.2",
   "typer==0.27.3",
 ]

{code_standards-8.72.1 → code_standards-8.74.0}/src/sarj_standards/api.py

@@ -662,6 +662,10 @@ def _without_baselined_diagnostics(
         return False
 
     def filter_tool(item: ToolReport) -> ToolReport:
+        # A native policy ratchet owns its accepted debt independently. A central
+        # diagnostic budget cannot erase its active findings or failed decision.
+        if item.policy_failed:
+            return item
         diagnostics = tuple(diagnostic for diagnostic in item.diagnostics if active(diagnostic))
         return replace(
             item,
@@ -968,22 +972,13 @@ def _filter_report_selectors(
     *,
     upstream_rules: UpstreamESLintRules = _NO_UPSTREAM_ESLINT_RULES,
 ) -> ToolReport:
+    if report.policy_failed:
+        return report
     engine = RuleEngine(report.name) if report.name in {"eslint", "zizmor", "checkov"} else None
     allowed: frozenset[str] = frozenset() if engine is None else selected.native_ids_for(engine)
     if engine is RuleEngine.ESLINT:
         allowed |= upstream_rules.ids
-    return ToolReport(
-        report.name,
-        report.completion,
-        diagnostics=tuple(item for item in report.diagnostics if item.rule_id in allowed),
-        issues=report.issues,
-        analyzer_id=report.analyzer_id,
-        invocation_id=report.invocation_id,
-        version=report.version,
-        duration_ms=report.duration_ms,
-        file_count=report.file_count,
-        cache_status=report.cache_status,
-    )
+    return replace(report, diagnostics=tuple(item for item in report.diagnostics if item.rule_id in allowed))
 
 
 def _warning_rule_keys(mode: AnalysisMode, selected: RuleSelection | None) -> frozenset[RuleSelector]:
@@ -1007,9 +1002,8 @@ def _with_warning_severity(
     if not selectors and not upstream_rules.warning_only:
         return report
     tools = tuple(
-        ToolReport(
-            tool.name,
-            tool.completion,
+        replace(
+            tool,
             diagnostics=tuple(
                 replace(item, severity=Severity.WARNING)
                 if _selector_for_diagnostic(item) in selectors
@@ -1017,13 +1011,6 @@ def _with_warning_severity(
                 else item
                 for item in tool.diagnostics
             ),
-            issues=tool.issues,
-            analyzer_id=tool.analyzer_id,
-            invocation_id=tool.invocation_id,
-            version=tool.version,
-            duration_ms=tool.duration_ms,
-            file_count=tool.file_count,
-            cache_status=tool.cache_status,
         )
         for tool in report.tools
     )
@@ -1084,18 +1071,9 @@ def _policy_report(root: Path, selected: Sequence[str]) -> ToolReport:
 
 
 def _filter_tool_report(report: ToolReport, policy: Policy) -> ToolReport:
-    return ToolReport(
-        report.name,
-        report.completion,
-        diagnostics=policy.filter_diagnostics(report.diagnostics),
-        issues=report.issues,
-        analyzer_id=report.analyzer_id,
-        invocation_id=report.invocation_id,
-        version=report.version,
-        duration_ms=report.duration_ms,
-        file_count=report.file_count,
-        cache_status=report.cache_status,
-    )
+    if report.policy_failed:
+        return report
+    return replace(report, diagnostics=policy.filter_diagnostics(report.diagnostics))
 
 
 def _repository_root(root: str | Path) -> Path:

{code_standards-8.72.1 → code_standards-8.74.0}/src/sarj_standards/cli/main.py

@@ -76,6 +76,10 @@ _REACT_DOCTOR_METADATA = frozenset(
         "doctor.config.json",
         "eslint.config.js",
         "eslint.config.mjs",
+        "eslint.config.cjs",
+        "eslint.config.ts",
+        "eslint.config.mts",
+        "eslint.config.cts",
         "package-lock.json",
         "package.json",
         "pnpm-lock.yaml",
@@ -2972,7 +2976,10 @@ def build_app(handler: Callable[[_Args], int] = _dispatch) -> typer.Typer:
         ] = None,
         typescript_dest: Annotated[
             str | None,
-            typer.Option("--typescript-dest", help="the directory that owns the npm lockfile (default: detected)"),
+            typer.Option(
+                "--typescript-dest",
+                help="the directory that owns the npm lockfile (default: detected); new ESLint entrypoints use TypeScript",
+            ),
         ] = None,
         swift_dest: Annotated[
             str | None,

code_standards-8.74.0/src/sarj_standards/configs/cli-reference.v1.json

@@ -0,0 +1 @@
+{"commands":[{"commands":[],"name":"commit-message","options":[{"choices":[],"kind":"option","metavar":null,"names":["-h","--help"],"repeatable":false,"required":false,"summary":"Show this message and exit."},{"choices":[],"kind":"positional","metavar":"COMMIT_MSG_FILE","names":["message_file"],"repeatable":false,"required":true,"summary":"Git commit-message file supplied by the commit-msg hook"}],"path":["commit-message"],"summary":"enforce [(i/N) ][TICKET] type(scope)!: description with safe mechanical fixes","usage":"code-standards commit-message [-h] COMMIT_MSG_FILE"},{"commands":[],"name":"doctor","options":[{"choices":[],"kind":"option","metavar":null,"names":["-h","--help"],"repeatable":false,"required":false,"summary":"Show this message and exit."},{"choices":["text","json"],"kind":"option","metavar":"OUTPUT_FORMAT","names":["--format"],"repeatable":false,"required":false,"summary":"output format (default: text)"},{"choices":[],"kind":"option","metavar":null,"names":["--repair"],"repeatable":false,"required":false,"summary":"transactionally repair safe drift with the executing bundle, then re-diagnose"},{"choices":[],"kind":"option","metavar":null,"names":["--no-install"],"repeatable":false,"required":false,"summary":"with --repair, update configuration without installing dependencies or hooks"}],"path":["doctor"],"summary":"diagnose adoption health and optionally repair safe drift","usage":"code-standards doctor [-h] [--format OUTPUT_FORMAT] [--repair] [--no-install]"},{"commands":[],"name":"setup","options":[{"choices":[],"kind":"option","metavar":null,"names":["-h","--help"],"repeatable":false,"required":false,"summary":"Show this message and exit."},{"choices":["pre-commit","lefthook","none"],"kind":"option","metavar":"HOOKS","names":["--hooks"],"repeatable":false,"required":false,"summary":"hook manager (default: detect Lefthook, otherwise pre-commit)"},{"choices":[],"kind":"option","metavar":"PYTHON_DEST","names":["--python-dest"],"repeatable":false,"required":false,"summary":"the directory that owns pyproject.toml (default: detected)"},{"choices":[],"kind":"option","metavar":"TYPESCRIPT_DEST","names":["--typescript-dest"],"repeatable":false,"required":false,"summary":"the directory that owns the npm lockfile (default: detected); new ESLint entrypoints use TypeScript"},{"choices":[],"kind":"option","metavar":"SWIFT_DEST","names":["--swift-dest"],"repeatable":false,"required":false,"summary":"the directory that owns one reviewed Swift project (default: mobile project detection)"},{"choices":[],"kind":"option","metavar":"KOTLIN_DEST","names":["--kotlin-dest"],"repeatable":false,"required":false,"summary":"the directory that owns one reviewed Android/KMP project (default: detected)"},{"choices":[],"kind":"option","metavar":null,"names":["--dry-run"],"repeatable":false,"required":false,"summary":"print the complete plan without writing"},{"choices":[],"kind":"option","metavar":null,"names":["--force"],"repeatable":false,"required":false,"summary":"replace conflicting generated lint configuration after review"},{"choices":[],"kind":"option","metavar":null,"names":["--no-install"],"repeatable":false,"required":false,"summary":"write wiring without installing dependencies or hooks"},{"choices":[],"kind":"option","metavar":null,"names":["--tools-only"],"repeatable":false,"required":false,"summary":"install and attest pinned native tools for an adopted repository"},{"choices":[],"kind":"option","metavar":null,"names":["--commit-policy-only"],"repeatable":false,"required":false,"summary":"adopt only commit-message and PR-history policy without changing language tooling"},{"choices":["checkov","detekt","eslint","ktlint","markdownlint","mobile-security","pyright","ruff","shellcheck","swiftformat","swiftlint","taplo","yamllint","zizmor"],"kind":"option","metavar":"ONLY","names":["--config"],"repeatable":true,"required":false,"summary":"select one config explicitly (repeatable)"},{"choices":[],"kind":"option","metavar":"ENABLE_REPOSITORY_RULE","names":["--enable-repository-rule"],"repeatable":true,"required":false,"summary":"explicitly enable one reviewed, installed error-stage repository rule (repeatable); preserve existing rules and capped exceptions"}],"path":["setup"],"summary":"adopt or converge the repository in one idempotent operation","usage":"code-standards setup [-h] [--hooks HOOKS] [--python-dest PYTHON_DEST] [--typescript-dest TYPESCRIPT_DEST] [--swift-dest SWIFT_DEST] [--kotlin-dest KOTLIN_DEST] [--dry-run] [--force] [--no-install] [--tools-only] [--commit-policy-only] [--config ONLY ...] [--enable-repository-rule ENABLE_REPOSITORY_RULE ...]"},{"commands":[],"name":"analyze","options":[{"choices":[],"kind":"option","metavar":null,"names":["-h","--help"],"repeatable":false,"required":false,"summary":"Show this message and exit."},{"choices":[],"kind":"option","metavar":null,"names":["--external"],"repeatable":false,"required":false,"summary":"run pinned upstream analyzers"},{"choices":[],"kind":"option","metavar":null,"names":["--prepared-only"],"repeatable":false,"required":false,"summary":"validate prepared artifacts; source analysis stays in the CI source gate"},{"choices":[],"kind":"option","metavar":null,"names":["--trust-repository-code"],"repeatable":false,"required":false,"summary":"allow prepared local Terraform provider/plugin validation"},{"choices":[],"kind":"option","metavar":"PREPARED_DEVOPS","names":["--prepared-devops"],"repeatable":true,"required":false,"summary":"data-only preparation receipt (repeatable)"},{"choices":[],"kind":"option","metavar":"PREPARED_TARGET","names":["--prepared-target"],"repeatable":true,"required":false,"summary":"select an exact declared target (repeatable)"},{"choices":["text","json","sarif","github"],"kind":"option","metavar":"OUTPUT_FORMAT","names":["--format"],"repeatable":false,"required":false,"summary":""},{"choices":[],"kind":"option","metavar":"OUTPUT","names":["--output"],"repeatable":false,"required":false,"summary":""},{"choices":[],"kind":"positional","metavar":"FILES","names":["files"],"repeatable":true,"required":false,"summary":"selected source paths"}],"path":["analyze"],"summary":"emit canonical diagnostics, including prepared DevOps artifacts","usage":"code-standards analyze [-h] [--external] [--prepared-only] [--trust-repository-code] [--prepared-devops PREPARED_DEVOPS ...] [--prepared-target PREPARED_TARGET ...] [--format OUTPUT_FORMAT] [--output OUTPUT] [FILES ...]"},{"commands":[],"name":"check","options":[{"choices":[],"kind":"option","metavar":null,"names":["-h","--help"],"repeatable":false,"required":false,"summary":"Show this message and exit."},{"choices":[],"kind":"option","metavar":null,"names":["--trust-repository-code"],"repeatable":false,"required":false,"summary":"allow executable repository ESLint configuration (generated hooks and CI set this explicitly)"},{"choices":[],"kind":"option","metavar":"JOBS","names":["--jobs"],"repeatable":false,"required":false,"summary":"overlap native and external analysis (default: 2; 1 for serial debugging)"},{"choices":[],"kind":"option","metavar":null,"names":["--skip-python-type-check"],"repeatable":false,"required":false,"summary":"leave BasedPyright to the repository's own required CI; configs stay managed"},{"choices":[],"kind":"option","metavar":null,"names":["--staged"],"repeatable":false,"required":false,"summary":"run the complete gate on staged files; optional paths narrow the staged selection"},{"choices":[],"kind":"option","metavar":"SELECTED_RULES","names":["--rule"],"repeatable":true,"required":false,"summary":"check only this custom ENGINE:ID rule (repeatable)"},{"choices":["text","json","sarif","github"],"kind":"option","metavar":"OUTPUT_FORMAT","names":["--format"],"repeatable":false,"required":false,"summary":""},{"choices":[],"kind":"option","metavar":"OUTPUT","names":["--output"],"repeatable":false,"required":false,"summary":"write JSON or SARIF atomically to PATH"},{"choices":[],"kind":"option","metavar":"MAX_ANNOTATIONS_PER_LEVEL","names":["--max-annotations-per-level"],"repeatable":false,"required":false,"summary":""},{"choices":[],"kind":"positional","metavar":"FILES","names":["files"],"repeatable":true,"required":false,"summary":"selected paths; when omitted, check the complete repository"}],"path":["check"],"summary":"run the complete quality gate or check selected paths or custom rules","usage":"code-standards check [-h] [--trust-repository-code] [--jobs JOBS] [--skip-python-type-check] [--staged] [--rule SELECTED_RULES ...] [--format OUTPUT_FORMAT] [--output OUTPUT] [--max-annotations-per-level MAX_ANNOTATIONS_PER_LEVEL] [FILES ...]"},{"commands":[],"name":"validate-slack-automations","options":[{"choices":[],"kind":"option","metavar":null,"names":["-h","--help"],"repeatable":false,"required":false,"summary":"Show this message and exit."},{"choices":[],"kind":"positional","metavar":"PATH","names":["slack_catalog"],"repeatable":false,"required":true,"summary":""}],"path":["validate-slack-automations"],"summary":"validate a versioned Slack automation catalog","usage":"code-standards validate-slack-automations [-h] PATH"},{"commands":[],"name":"observe","options":[{"choices":[],"kind":"option","metavar":null,"names":["-h","--help"],"repeatable":false,"required":false,"summary":"Show this message and exit."},{"choices":[],"kind":"option","metavar":"SELECTED_RULES","names":["--rule"],"repeatable":true,"required":false,"summary":"canonical ENGINE:ID selector (repeatable)"},{"choices":[],"kind":"option","metavar":null,"names":["--test-value"],"repeatable":false,"required":false,"summary":"report curated test-oracle and redundancy advisories"},{"choices":[],"kind":"option","metavar":"BASE","names":["--base"],"repeatable":false,"required":false,"summary":"observe existing paths changed from this Git base"},{"choices":["text","json","sarif","github"],"kind":"option","metavar":"OUTPUT_FORMAT","names":["--format"],"repeatable":false,"required":false,"summary":""},{"choices":[],"kind":"option","metavar":"OUTPUT","names":["--output"],"repeatable":false,"required":false,"summary":""},{"choices":[],"kind":"option","metavar":null,"names":["--trust-repository-code"],"repeatable":false,"required":false,"summary":"allow repository ESLint configuration to execute"},{"choices":[],"kind":"option","metavar":"MAX_ANNOTATIONS_PER_LEVEL","names":["--max-annotations-per-level"],"repeatable":false,"required":false,"summary":""},{"choices":[],"kind":"positional","metavar":"FILES","names":["files"],"repeatable":true,"required":false,"summary":"selected paths; defaults to adopted verification paths"}],"path":["observe"],"summary":"report warning-stage findings with exit 0; invalid input or execution still exits 2","usage":"code-standards observe [-h] [--rule SELECTED_RULES ...] [--test-value] [--base BASE] [--format OUTPUT_FORMAT] [--output OUTPUT] [--trust-repository-code] [--max-annotations-per-level MAX_ANNOTATIONS_PER_LEVEL] [FILES ...]"},{"commands":[],"name":"fix","options":[{"choices":[],"kind":"option","metavar":null,"names":["-h","--help"],"repeatable":false,"required":false,"summary":"Show this message and exit."},{"choices":[],"kind":"option","metavar":null,"names":["--staged"],"repeatable":false,"required":false,"summary":"fix only files staged in Git"},{"choices":[],"kind":"positional","metavar":"FILES","names":["files"],"repeatable":true,"required":false,"summary":"selected paths; when omitted, fix the complete repository"}],"path":["fix"],"summary":"apply safe formatting and lint fixes","usage":"code-standards fix [-h] [--staged] [FILES ...]"},{"commands":[],"name":"update","options":[{"choices":[],"kind":"option","metavar":null,"names":["-h","--help"],"repeatable":false,"required":false,"summary":"Show this message and exit."},{"choices":[],"kind":"option","metavar":null,"names":["--check"],"repeatable":false,"required":false,"summary":"preview without writing; exit 1 when changes exist"},{"choices":[],"kind":"option","metavar":null,"names":["--offline"],"repeatable":false,"required":false,"summary":"reconverge the executing bundle and skip every network-dependent install; does not resolve latest"},{"choices":[],"kind":"option","metavar":"VERSION","names":["--to"],"repeatable":false,"required":false,"summary":"resolve and apply exactly this immutable coherent bundle version"},{"choices":[],"kind":"option","metavar":null,"names":["--no-install"],"repeatable":false,"required":false,"summary":"do not install dependencies or hooks"}],"path":["update"],"summary":"upgrade to the latest published coherent Standards bundle","usage":"code-standards update [-h] [--check] [--offline] [--to VERSION] [--no-install]"},{"commands":[{"commands":[],"name":"init","options":[{"choices":[],"kind":"option","metavar":null,"names":["-h","--help"],"repeatable":false,"required":false,"summary":"Show this message and exit."},{"choices":[],"kind":"option","metavar":"JOBS","names":["--jobs"],"repeatable":false,"required":false,"summary":"overlap independent baseline scans"},{"choices":[],"kind":"option","metavar":"OUTPUT","names":["--output"],"repeatable":false,"required":false,"summary":"baseline JSON (default: diagnostic-baseline.json)"},{"choices":[],"kind":"option","metavar":null,"names":["--trust-repository-code"],"repeatable":false,"required":false,"summary":"run repository-local analyzers that execute project code"},{"choices":[],"kind":"positional","metavar":"FILES","names":["files"],"repeatable":true,"required":false,"summary":"paths to analyze (default: the whole repository)"}],"path":["baseline","init"],"summary":"record the first diagnostic baseline","usage":"code-standards baseline init [-h] [--jobs JOBS] [--output OUTPUT] [--trust-repository-code] [FILES ...]"},{"commands":[],"name":"update","options":[{"choices":[],"kind":"option","metavar":null,"names":["-h","--help"],"repeatable":false,"required":false,"summary":"Show this message and exit."},{"choices":[],"kind":"option","metavar":"JOBS","names":["--jobs"],"repeatable":false,"required":false,"summary":"overlap independent baseline scans"},{"choices":[],"kind":"option","metavar":"OUTPUT","names":["--output"],"repeatable":false,"required":false,"summary":"baseline JSON (default: diagnostic-baseline.json)"},{"choices":[],"kind":"option","metavar":null,"names":["--trust-repository-code"],"repeatable":false,"required":false,"summary":"run repository-local analyzers that execute project code"},{"choices":[],"kind":"option","metavar":"BASELINE_RULES","names":["--rule"],"repeatable":true,"required":false,"summary":"replace debt only for this newly promoted rule (repeatable; source:RULE is also accepted)"},{"choices":[],"kind":"positional","metavar":"FILES","names":["files"],"repeatable":true,"required":false,"summary":"paths to analyze (default: the whole repository)"}],"path":["baseline","update"],"summary":"re-record the diagnostic baseline after reviewed cleanup","usage":"code-standards baseline update [-h] [--jobs JOBS] [--output OUTPUT] [--trust-repository-code] [--rule BASELINE_RULES ...] [FILES ...]"}],"name":"baseline","options":[{"choices":[],"kind":"option","metavar":null,"names":["-h","--help"],"repeatable":false,"required":false,"summary":"Show this message and exit."}],"path":["baseline"],"summary":"grandfather today's findings so only new ones fail","usage":"code-standards baseline [-h] {init,update}"},{"commands":[{"commands":[],"name":"init","options":[{"choices":[],"kind":"option","metavar":null,"names":["-h","--help"],"repeatable":false,"required":false,"summary":"Show this message and exit."},{"choices":[],"kind":"option","metavar":"BASELINE","names":["--baseline"],"repeatable":false,"required":false,"summary":"budget JSON (default: suppression-baseline.json)"},{"choices":[],"kind":"option","metavar":"PACKAGE","names":["--package"],"repeatable":true,"required":false,"summary":"Python package root (repeatable)"},{"choices":[],"kind":"option","metavar":"EXCLUDE_SUBTREE","names":["--exclude-subtree"],"repeatable":true,"required":false,"summary":"generated or vendored subtree to persistently exclude (repeatable)"}],"path":["ratchet","init"],"summary":"create the first suppression budget","usage":"code-standards ratchet init [-h] [--baseline BASELINE] [--package PACKAGE ...] [--exclude-subtree EXCLUDE_SUBTREE ...]"},{"commands":[],"name":"check","options":[{"choices":[],"kind":"option","metavar":null,"names":["-h","--help"],"repeatable":false,"required":false,"summary":"Show this message and exit."},{"choices":[],"kind":"option","metavar":"BASELINE","names":["--baseline"],"repeatable":false,"required":false,"summary":"budget JSON (default: suppression-baseline.json)"},{"choices":[],"kind":"option","metavar":"PACKAGE","names":["--package"],"repeatable":true,"required":false,"summary":"Python package root (repeatable)"},{"choices":[],"kind":"option","metavar":"EXCLUDE_SUBTREE","names":["--exclude-subtree"],"repeatable":true,"required":false,"summary":"generated or vendored subtree to persistently exclude (repeatable)"}],"path":["ratchet","check"],"summary":"fail when suppression debt grows","usage":"code-standards ratchet check [-h] [--baseline BASELINE] [--package PACKAGE ...] [--exclude-subtree EXCLUDE_SUBTREE ...]"},{"commands":[],"name":"status","options":[{"choices":[],"kind":"option","metavar":null,"names":["-h","--help"],"repeatable":false,"required":false,"summary":"Show this message and exit."},{"choices":[],"kind":"option","metavar":"BASELINE","names":["--baseline"],"repeatable":false,"required":false,"summary":"budget JSON (default: suppression-baseline.json)"},{"choices":[],"kind":"option","metavar":"PACKAGE","names":["--package"],"repeatable":true,"required":false,"summary":"Python package root (repeatable)"},{"choices":[],"kind":"option","metavar":"EXCLUDE_SUBTREE","names":["--exclude-subtree"],"repeatable":true,"required":false,"summary":"generated or vendored subtree to persistently exclude (repeatable)"}],"path":["ratchet","status"],"summary":"show current suppression debt and available reductions","usage":"code-standards ratchet status [-h] [--baseline BASELINE] [--package PACKAGE ...] [--exclude-subtree EXCLUDE_SUBTREE ...]"},{"commands":[],"name":"update","options":[{"choices":[],"kind":"option","metavar":null,"names":["-h","--help"],"repeatable":false,"required":false,"summary":"Show this message and exit."},{"choices":[],"kind":"option","metavar":"BASELINE","names":["--baseline"],"repeatable":false,"required":false,"summary":"budget JSON (default: suppression-baseline.json)"},{"choices":[],"kind":"option","metavar":"PACKAGE","names":["--package"],"repeatable":true,"required":false,"summary":"Python package root (repeatable)"},{"choices":[],"kind":"option","metavar":"EXCLUDE_SUBTREE","names":["--exclude-subtree"],"repeatable":true,"required":false,"summary":"generated or vendored subtree to persistently exclude (repeatable)"},{"choices":[],"kind":"option","metavar":null,"names":["--allow-increase"],"repeatable":false,"required":false,"summary":"permit a reviewed increase in suppression debt"}],"path":["ratchet","update"],"summary":"lock in reviewed suppression-budget changes","usage":"code-standards ratchet update [-h] [--baseline BASELINE] [--package PACKAGE ...] [--exclude-subtree EXCLUDE_SUBTREE ...] [--allow-increase]"}],"name":"ratchet","options":[{"choices":[],"kind":"option","metavar":null,"names":["-h","--help"],"repeatable":false,"required":false,"summary":"Show this message and exit."}],"path":["ratchet"],"summary":"keep the Python suppression budget from growing","usage":"code-standards ratchet [-h] {init,check,status,update}"},{"commands":[{"commands":[],"name":"list","options":[{"choices":[],"kind":"option","metavar":null,"names":["-h","--help"],"repeatable":false,"required":false,"summary":"Show this message and exit."}],"path":["exclude","list"],"summary":"list the complete denylist","usage":"code-standards exclude list [-h]"},{"commands":[],"name":"add","options":[{"choices":[],"kind":"option","metavar":null,"names":["-h","--help"],"repeatable":false,"required":false,"summary":"Show this message and exit."},{"choices":["path","rule"],"kind":"positional","metavar":"{path,rule}","names":["exclude_kind"],"repeatable":false,"required":true,"summary":""},{"choices":[],"kind":"positional","metavar":"VALUE","names":["value"],"repeatable":false,"required":true,"summary":"repository-relative glob or canonical engine:rule selector"}],"path":["exclude","add"],"summary":"add one exact denylist entry","usage":"code-standards exclude add [-h] {path,rule} VALUE"},{"commands":[],"name":"remove","options":[{"choices":[],"kind":"option","metavar":null,"names":["-h","--help"],"repeatable":false,"required":false,"summary":"Show this message and exit."},{"choices":["path","rule"],"kind":"positional","metavar":"{path,rule}","names":["exclude_kind"],"repeatable":false,"required":true,"summary":""},{"choices":[],"kind":"positional","metavar":"VALUE","names":["value"],"repeatable":false,"required":true,"summary":"repository-relative glob or canonical engine:rule selector"}],"path":["exclude","remove"],"summary":"remove one exact denylist entry","usage":"code-standards exclude remove [-h] {path,rule} VALUE"}],"name":"exclude","options":[{"choices":[],"kind":"option","metavar":null,"names":["-h","--help"],"repeatable":false,"required":false,"summary":"Show this message and exit."}],"path":["exclude"],"summary":"inspect or change explicit path and rule exclusions","usage":"code-standards exclude [-h] {list,add,remove}"},{"commands":[{"commands":[],"name":"state","options":[{"choices":[],"kind":"option","metavar":null,"names":["-h","--help"],"repeatable":false,"required":false,"summary":"Show this message and exit."}],"path":["show","state"],"summary":"print detected adoption state as JSON","usage":"code-standards show state [-h]"},{"commands":[],"name":"configs","options":[{"choices":[],"kind":"option","metavar":null,"names":["-h","--help"],"repeatable":false,"required":false,"summary":"Show this message and exit."}],"path":["show","configs"],"summary":"list bundled configurations","usage":"code-standards show configs [-h]"},{"commands":[],"name":"config","options":[{"choices":[],"kind":"option","metavar":null,"names":["-h","--help"],"repeatable":false,"required":false,"summary":"Show this message and exit."},{"choices":["checkov","detekt","eslint","ktlint","markdownlint","mobile-security","pyright","ruff","shellcheck","swiftformat","swiftlint","taplo","yamllint","zizmor"],"kind":"positional","metavar":"NAME","names":["name"],"repeatable":false,"required":true,"summary":""}],"path":["show","config"],"summary":"print one bundled configuration path","usage":"code-standards show config [-h] NAME"},{"commands":[],"name":"peers","options":[{"choices":[],"kind":"option","metavar":null,"names":["-h","--help"],"repeatable":false,"required":false,"summary":"Show this message and exit."}],"path":["show","peers"],"summary":"show tested ESLint peer dependencies and install command","usage":"code-standards show peers [-h]"},{"commands":[],"name":"rules","options":[{"choices":[],"kind":"option","metavar":null,"names":["-h","--help"],"repeatable":false,"required":false,"summary":"Show this message and exit."}],"path":["show","rules"],"summary":"print the machine-readable custom-rule inventory","usage":"code-standards show rules [-h]"},{"commands":[],"name":"ci","options":[{"choices":[],"kind":"option","metavar":null,"names":["-h","--help"],"repeatable":false,"required":false,"summary":"Show this message and exit."},{"choices":[],"kind":"option","metavar":"OUTPUT","names":["--output"],"repeatable":false,"required":false,"summary":"write a managed workflow inside the repository"}],"path":["show","ci"],"summary":"print a complete versioned GitHub Actions standards workflow","usage":"code-standards show ci [-h] [--output OUTPUT]"}],"name":"show","options":[{"choices":[],"kind":"option","metavar":null,"names":["-h","--help"],"repeatable":false,"required":false,"summary":"Show this message and exit."}],"path":["show"],"summary":"print read-only package and adoption information","usage":"code-standards show [-h] {state,configs,config,peers,rules,ci}"},{"commands":[{"commands":[],"name":"setup","options":[{"choices":[],"kind":"option","metavar":null,"names":["-h","--help"],"repeatable":false,"required":false,"summary":"Show this message and exit."},{"choices":[],"kind":"option","metavar":null,"names":["--check"],"repeatable":false,"required":false,"summary":"print the deterministic setup plan without executing it"}],"path":["maintain","setup"],"summary":"install every standards development environment and repository hook","usage":"code-standards maintain setup [-h] [--check]"},{"commands":[],"name":"check","options":[{"choices":[],"kind":"option","metavar":null,"names":["-h","--help"],"repeatable":false,"required":false,"summary":"Show this message and exit."},{"choices":["ci-history","file-conventions","private-refs","versions"],"kind":"option","metavar":"REPO_ONLY","names":["--only"],"repeatable":true,"required":false,"summary":""},{"choices":[],"kind":"option","metavar":"COMMITS","names":["--commits"],"repeatable":false,"required":false,"summary":"also inspect commit messages in this revision range"},{"choices":[],"kind":"option","metavar":"POLICY_DEST","names":["--policy-root"],"repeatable":false,"required":false,"summary":"trusted repository policy root (default: --root)"},{"choices":[],"kind":"option","metavar":"PRIVATE_REFS_FILE","names":["--private-refs-file"],"repeatable":false,"required":false,"summary":"private-reference TOML outside the scanned repository"},{"choices":[],"kind":"option","metavar":null,"names":["--quiet"],"repeatable":false,"required":false,"summary":"hide finding details"}],"path":["maintain","check"],"summary":"run repository policy gates","usage":"code-standards maintain check [-h] [--only REPO_ONLY ...] [--commits COMMITS] [--policy-root POLICY_DEST] [--private-refs-file PRIVATE_REFS_FILE] [--quiet]"},{"commands":[],"name":"sync-ledger","options":[{"choices":[],"kind":"option","metavar":null,"names":["-h","--help"],"repeatable":false,"required":false,"summary":"Show this message and exit."},{"choices":[],"kind":"option","metavar":null,"names":["--check"],"repeatable":false,"required":false,"summary":"report drift without writing"}],"path":["maintain","sync-ledger"],"summary":"synchronize the rule compatibility ledger","usage":"code-standards maintain sync-ledger [-h] [--check]"},{"commands":[],"name":"comment-corpus","options":[{"choices":[],"kind":"option","metavar":null,"names":["-h","--help"],"repeatable":false,"required":false,"summary":"Show this message and exit."},{"choices":[],"kind":"positional","metavar":"ROOTS","names":["roots"],"repeatable":true,"required":true,"summary":""},{"choices":[],"kind":"option","metavar":"PRIVATE_JSONL","names":["--include-text"],"repeatable":false,"required":false,"summary":"write sensitive comment text to a new owner-readable file"}],"path":["maintain","comment-corpus"],"summary":"extract comments for calibration","usage":"code-standards maintain comment-corpus [-h] ROOTS ... [--include-text PRIVATE_JSONL]"},{"commands":[{"commands":[],"name":"check-tag","options":[{"choices":[],"kind":"option","metavar":null,"names":["-h","--help"],"repeatable":false,"required":false,"summary":"Show this message and exit."},{"choices":[],"kind":"positional","metavar":"TAG","names":["tag"],"repeatable":false,"required":true,"summary":""}],"path":["maintain","release","check-tag"],"summary":"require a release tag to match its package manifest","usage":"code-standards maintain release check-tag [-h] TAG"},{"commands":[],"name":"verify-tags","options":[{"choices":[],"kind":"option","metavar":null,"names":["-h","--help"],"repeatable":false,"required":false,"summary":"Show this message and exit."},{"choices":[],"kind":"option","metavar":"RELEASE_COMMIT","names":["--commit"],"repeatable":false,"required":false,"summary":"also require existing tags to match this publishing commit or an unchanged package tree"}],"path":["maintain","release","verify-tags"],"summary":"verify all manifest release tags on origin","usage":"code-standards maintain release verify-tags [-h] [--commit RELEASE_COMMIT]"},{"commands":[],"name":"create-tags","options":[{"choices":[],"kind":"option","metavar":null,"names":["-h","--help"],"repeatable":false,"required":false,"summary":"Show this message and exit."},{"choices":["contracts","typescript","bootstrap","python","sql","iac","standards","tsconfig"],"kind":"positional","metavar":"RELEASE_TARGETS","names":["release_targets"],"repeatable":true,"required":true,"summary":""},{"choices":[],"kind":"option","metavar":"RELEASE_COMMIT","names":["--commit"],"repeatable":false,"required":true,"summary":"exact commit that was published"},{"choices":[],"kind":"option","metavar":"ATTEMPTS","names":["--attempts"],"repeatable":false,"required":false,"summary":""},{"choices":[],"kind":"option","metavar":"DELAY_SECONDS","names":["--delay-seconds"],"repeatable":false,"required":false,"summary":""}],"path":["maintain","release","create-tags"],"summary":"create and push manifest release tags","usage":"code-standards maintain release create-tags [-h] RELEASE_TARGETS ... --commit RELEASE_COMMIT [--attempts ATTEMPTS] [--delay-seconds DELAY_SECONDS]"},{"commands":[],"name":"changes","options":[{"choices":[],"kind":"option","metavar":null,"names":["-h","--help"],"repeatable":false,"required":false,"summary":"Show this message and exit."},{"choices":[],"kind":"option","metavar":"BEFORE","names":["--before"],"repeatable":false,"required":true,"summary":""},{"choices":[],"kind":"option","metavar":"AFTER","names":["--after"],"repeatable":false,"required":true,"summary":""},{"choices":[],"kind":"option","metavar":"GITHUB_OUTPUT","names":["--github-output"],"repeatable":false,"required":true,"summary":""}],"path":["maintain","release","changes"],"summary":"emit package version changes between Git revisions","usage":"code-standards maintain release changes [-h] --before BEFORE --after AFTER --github-output GITHUB_OUTPUT"},{"commands":[],"name":"causality","options":[{"choices":[],"kind":"option","metavar":null,"names":["-h","--help"],"repeatable":false,"required":false,"summary":"Show this message and exit."},{"choices":[],"kind":"option","metavar":"BEFORE","names":["--before"],"repeatable":false,"required":true,"summary":""},{"choices":[],"kind":"option","metavar":"AFTER","names":["--after"],"repeatable":false,"required":true,"summary":""}],"path":["maintain","release","causality"],"summary":"require every publishable package change to bump its version","usage":"code-standards maintain release causality [-h] --before BEFORE --after AFTER"},{"commands":[],"name":"lock-age","options":[{"choices":[],"kind":"option","metavar":null,"names":["-h","--help"],"repeatable":false,"required":false,"summary":"Show this message and exit."},{"choices":[],"kind":"positional","metavar":"LOCKFILE","names":["lockfile"],"repeatable":false,"required":true,"summary":""},{"choices":[],"kind":"option","metavar":"MINIMUM_AGE","names":["--minimum-days"],"repeatable":false,"required":false,"summary":""},{"choices":[],"kind":"option","metavar":"RELEASE_EXCLUDE","names":["--exclude"],"repeatable":true,"required":false,"summary":""},{"choices":[],"kind":"option","metavar":"RELEASE_EXCLUDE_FILE","names":["--exclude-file"],"repeatable":true,"required":false,"summary":"line-oriented exact package@version exceptions (repeatable)"}],"path":["maintain","release","lock-age"],"summary":"enforce npm lockfile minimum release age","usage":"code-standards maintain release lock-age [-h] LOCKFILE [--minimum-days MINIMUM_AGE] [--exclude RELEASE_EXCLUDE ...] [--exclude-file RELEASE_EXCLUDE_FILE ...]"},{"commands":[],"name":"typescript","options":[{"choices":[],"kind":"option","metavar":null,"names":["-h","--help"],"repeatable":false,"required":false,"summary":"Show this message and exit."},{"choices":["check","pack","publish"],"kind":"positional","metavar":"RELEASE_MODE","names":["release_mode"],"repeatable":false,"required":true,"summary":""},{"choices":[],"kind":"option","metavar":"OUTPUT","names":["--output"],"repeatable":false,"required":false,"summary":"artifact directory (required for pack)"}],"path":["maintain","release","typescript"],"summary":"check, pack, or publish the TypeScript package","usage":"code-standards maintain release typescript [-h] RELEASE_MODE [--output OUTPUT]"},{"commands":[],"name":"verify-wheel","options":[{"choices":[],"kind":"option","metavar":null,"names":["-h","--help"],"repeatable":false,"required":false,"summary":"Show this message and exit."},{"choices":[],"kind":"positional","metavar":"WHEELS","names":["wheels"],"repeatable":true,"required":true,"summary":""}],"path":["maintain","release","verify-wheel"],"summary":"require non-empty license text in built Python wheels","usage":"code-standards maintain release verify-wheel [-h] WHEELS ..."},{"commands":[],"name":"status","options":[{"choices":[],"kind":"option","metavar":null,"names":["-h","--help"],"repeatable":false,"required":false,"summary":"Show this message and exit."},{"choices":[],"kind":"option","metavar":"RELEASE_COMMIT","names":["--commit"],"repeatable":false,"required":false,"summary":""},{"choices":["json","text"],"kind":"option","metavar":"OUTPUT_FORMAT","names":["--format"],"repeatable":false,"required":false,"summary":""}],"path":["maintain","release","status"],"summary":"show release stages and queue time for an exact revision","usage":"code-standards maintain release status [-h] [--commit RELEASE_COMMIT] [--format OUTPUT_FORMAT]"},{"commands":[],"name":"verify-publications","options":[{"choices":[],"kind":"option","metavar":null,"names":["-h","--help"],"repeatable":false,"required":false,"summary":"Show this message and exit."},{"choices":[],"kind":"option","metavar":"ATTEMPTS","names":["--attempts"],"repeatable":false,"required":false,"summary":""},{"choices":[],"kind":"option","metavar":"DELAY_SECONDS","names":["--delay-seconds"],"repeatable":false,"required":false,"summary":""}],"path":["maintain","release","verify-publications"],"summary":"wait for every exact sibling publication required by Standards","usage":"code-standards maintain release verify-publications [-h] [--attempts ATTEMPTS] [--delay-seconds DELAY_SECONDS]"},{"commands":[],"name":"publish","options":[{"choices":[],"kind":"option","metavar":null,"names":["-h","--help"],"repeatable":false,"required":false,"summary":"Show this message and exit."},{"choices":["contracts","typescript","bootstrap","python","sql","iac","standards","tsconfig"],"kind":"positional","metavar":"RELEASE_TARGET","names":["release_target"],"repeatable":false,"required":true,"summary":""}],"path":["maintain","release","publish"],"summary":"build and publish one package through its native client","usage":"code-standards maintain release publish [-h] RELEASE_TARGET"}],"name":"release","options":[{"choices":[],"kind":"option","metavar":null,"names":["-h","--help"],"repeatable":false,"required":false,"summary":"Show this message and exit."}],"path":["maintain","release"],"summary":"validate and build publishable release artifacts","usage":"code-standards maintain release [-h] {check-tag,verify-tags,create-tags,changes,causality,lock-age,typescript,verify-wheel,status,verify-publications,publish}"},{"commands":[{"commands":[],"name":"check","options":[{"choices":[],"kind":"option","metavar":null,"names":["-h","--help"],"repeatable":false,"required":false,"summary":"Show this message and exit."}],"path":["maintain","docs","check"],"summary":"","usage":"code-standards maintain docs check [-h]"},{"commands":[],"name":"sync","options":[{"choices":[],"kind":"option","metavar":null,"names":["-h","--help"],"repeatable":false,"required":false,"summary":"Show this message and exit."}],"path":["maintain","docs","sync"],"summary":"","usage":"code-standards maintain docs sync [-h]"}],"name":"docs","options":[{"choices":[],"kind":"option","metavar":null,"names":["-h","--help"],"repeatable":false,"required":false,"summary":"Show this message and exit."}],"path":["maintain","docs"],"summary":"check or synchronize source-derived documentation","usage":"code-standards maintain docs [-h] {check,sync}"},{"commands":[{"commands":[],"name":"install","options":[{"choices":[],"kind":"option","metavar":null,"names":["-h","--help"],"repeatable":false,"required":false,"summary":"Show this message and exit."}],"path":["maintain","hooks","install"],"summary":"install Lefthook","usage":"code-standards maintain hooks install [-h]"}],"name":"hooks","options":[{"choices":[],"kind":"option","metavar":null,"names":["-h","--help"],"repeatable":false,"required":false,"summary":"Show this message and exit."}],"path":["maintain","hooks"],"summary":"manage the pinned repository hooks","usage":"code-standards maintain hooks [-h] {install}"},{"commands":[{"commands":[],"name":"manifest","options":[{"choices":[],"kind":"option","metavar":null,"names":["-h","--help"],"repeatable":false,"required":false,"summary":"Show this message and exit."}],"path":["maintain","rules","manifest"],"summary":"print the shipped rule inventory","usage":"code-standards maintain rules manifest [-h]"},{"commands":[],"name":"check","options":[{"choices":[],"kind":"option","metavar":null,"names":["-h","--help"],"repeatable":false,"required":false,"summary":"Show this message and exit."}],"path":["maintain","rules","check"],"summary":"verify the shipped rule inventory matches live registries","usage":"code-standards maintain rules check [-h]"},{"commands":[],"name":"sync","options":[{"choices":[],"kind":"option","metavar":null,"names":["-h","--help"],"repeatable":false,"required":false,"summary":"Show this message and exit."}],"path":["maintain","rules","sync"],"summary":"update the shipped rule inventory from live registries","usage":"code-standards maintain rules sync [-h]"},{"commands":[],"name":"new","options":[{"choices":[],"kind":"option","metavar":null,"names":["-h","--help"],"repeatable":false,"required":false,"summary":"Show this message and exit."},{"choices":[],"kind":"positional","metavar":"SELECTOR","names":["selector"],"repeatable":false,"required":true,"summary":"canonical ENGINE:ID selector"},{"choices":["architecture","correctness","maintainability","performance","security","style","testing"],"kind":"option","metavar":"RULE_CATEGORY","names":["--category"],"repeatable":false,"required":true,"summary":""},{"choices":[],"kind":"option","metavar":"RULE_SUMMARY","names":["--summary"],"repeatable":false,"required":true,"summary":""},{"choices":[],"kind":"option","metavar":null,"names":["--apply"],"repeatable":false,"required":false,"summary":"create the planned files"}],"path":["maintain","rules","new"],"summary":"plan or create author-owned rule and test skeletons","usage":"code-standards maintain rules new [-h] SELECTOR --category RULE_CATEGORY --summary RULE_SUMMARY [--apply]"},{"commands":[],"name":"stage-warning","options":[{"choices":[],"kind":"option","metavar":null,"names":["-h","--help"],"repeatable":false,"required":false,"summary":"Show this message and exit."},{"choices":[],"kind":"positional","metavar":"SELECTOR","names":["selector"],"repeatable":false,"required":true,"summary":"canonical ENGINE:ID selector"},{"choices":[],"kind":"option","metavar":null,"names":["--check"],"repeatable":false,"required":false,"summary":"report required staging without writing"}],"path":["maintain","rules","stage-warning"],"summary":"prepare one registered rule for warning-first publication","usage":"code-standards maintain rules stage-warning [-h] SELECTOR [--check]"},{"commands":[],"name":"promote-error","options":[{"choices":[],"kind":"option","metavar":null,"names":["-h","--help"],"repeatable":false,"required":false,"summary":"Show this message and exit."},{"choices":[],"kind":"positional","metavar":"SELECTOR","names":["selector"],"repeatable":false,"required":true,"summary":"canonical ENGINE:ID selector"},{"choices":[],"kind":"option","metavar":null,"names":["--check"],"repeatable":false,"required":false,"summary":"report required promotion without writing"}],"path":["maintain","rules","promote-error"],"summary":"promote one warning-staged rule to blocking error severity","usage":"code-standards maintain rules promote-error [-h] SELECTOR [--check]"},{"commands":[],"name":"prepare","options":[{"choices":[],"kind":"option","metavar":null,"names":["-h","--help"],"repeatable":false,"required":false,"summary":"Show this message and exit."},{"choices":[],"kind":"positional","metavar":"SELECTOR","names":["selector"],"repeatable":false,"required":true,"summary":"canonical ENGINE:ID selector"},{"choices":[],"kind":"option","metavar":null,"names":["--check"],"repeatable":false,"required":false,"summary":"report required preparation without writing"}],"path":["maintain","rules","prepare"],"summary":"validate and prepare one registered rule for warning-first publication","usage":"code-standards maintain rules prepare [-h] SELECTOR [--check]"},{"commands":[],"name":"verify","options":[{"choices":[],"kind":"option","metavar":null,"names":["-h","--help"],"repeatable":false,"required":false,"summary":"Show this message and exit."},{"choices":[],"kind":"positional","metavar":"SELECTOR","names":["selector"],"repeatable":false,"required":true,"summary":"canonical ENGINE:ID selector"}],"path":["maintain","rules","verify"],"summary":"validate one registered rule's authored files and public examples","usage":"code-standards maintain rules verify [-h] SELECTOR"},{"commands":[],"name":"bench","options":[{"choices":[],"kind":"option","metavar":null,"names":["-h","--help"],"repeatable":false,"required":false,"summary":"Show this message and exit."},{"choices":[],"kind":"positional","metavar":"FILES","names":["files"],"repeatable":true,"required":true,"summary":"Python files or directories"},{"choices":[],"kind":"option","metavar":"REPEATS","names":["--repeats"],"repeatable":false,"required":false,"summary":""},{"choices":[],"kind":"option","metavar":"SELECTED_RULES","names":["--rule"],"repeatable":true,"required":false,"summary":"python:ID selector; defaults to all Python rules"}],"path":["maintain","rules","bench"],"summary":"measure native Python analysis with diagnostic and source digests","usage":"code-standards maintain rules bench [-h] FILES ... [--repeats REPEATS] [--rule SELECTED_RULES ...]"},{"commands":[],"name":"changes","options":[{"choices":[],"kind":"option","metavar":null,"names":["-h","--help"],"repeatable":false,"required":false,"summary":"Show this message and exit."},{"choices":[],"kind":"option","metavar":"BEFORE","names":["--before"],"repeatable":false,"required":true,"summary":""},{"choices":[],"kind":"option","metavar":"AFTER","names":["--after"],"repeatable":false,"required":true,"summary":""},{"choices":["json","text"],"kind":"option","metavar":"OUTPUT_FORMAT","names":["--format"],"repeatable":false,"required":false,"summary":""},{"choices":["warning"],"kind":"option","metavar":"REQUIRED_ADDED_LEVEL","names":["--require-added-level"],"repeatable":false,"required":false,"summary":"fail when an added rule does not start at this level"}],"path":["maintain","rules","changes"],"summary":"compare rule inventory and policy between two Git revisions","usage":"code-standards maintain rules changes [-h] --before BEFORE --after AFTER [--format OUTPUT_FORMAT] [--require-added-level REQUIRED_ADDED_LEVEL]"},{"commands":[],"name":"evaluate","options":[{"choices":[],"kind":"option","metavar":null,"names":["-h","--help"],"repeatable":false,"required":false,"summary":"Show this message and exit."},{"choices":[],"kind":"option","metavar":"SELECTED_RULES","names":["--rule"],"repeatable":true,"required":true,"summary":"canonical ENGINE:ID selector (repeatable)"},{"choices":[],"kind":"option","metavar":"CORPUS_MANIFEST","names":["--corpus-manifest"],"repeatable":false,"required":false,"summary":"evaluate immutable repositories declared by a public corpus manifest"},{"choices":[],"kind":"option","metavar":"PRIVATE_OVERLAY","names":["--private-overlay"],"repeatable":false,"required":false,"summary":"merge an owner-readable private corpus overlay (requires --corpus-manifest)"},{"choices":["corpus","effective"],"kind":"option","metavar":"EVALUATION_SCOPE","names":["--scope"],"repeatable":false,"required":false,"summary":"corpus ignores baselines/rule exclusions; effective applies adopted repository policy"},{"choices":["json","text"],"kind":"option","metavar":"OUTPUT_FORMAT","names":["--format"],"repeatable":false,"required":false,"summary":""},{"choices":[],"kind":"option","metavar":"OUTPUT","names":["--output"],"repeatable":false,"required":false,"summary":""},{"choices":[],"kind":"option","metavar":null,"names":["--trust-repository-code"],"repeatable":false,"required":false,"summary":"allow executable repository ESLint configuration"},{"choices":[],"kind":"positional","metavar":"FILES","names":["files"],"repeatable":true,"required":false,"summary":""}],"path":["maintain","rules","evaluate"],"summary":"calibrate selected custom rules; findings exit 1 and invalid input or execution exits 2","usage":"code-standards maintain rules evaluate [-h] --rule SELECTED_RULES ... [--corpus-manifest CORPUS_MANIFEST] [--private-overlay PRIVATE_OVERLAY] [--scope EVALUATION_SCOPE] [--format OUTPUT_FORMAT] [--output OUTPUT] [--trust-repository-code] [FILES ...]"}],"name":"rules","options":[{"choices":[],"kind":"option","metavar":null,"names":["-h","--help"],"repeatable":false,"required":false,"summary":"Show this message and exit."}],"path":["maintain","rules"],"summary":"inspect live custom rules","usage":"code-standards maintain rules [-h] {manifest,check,sync,new,stage-warning,promote-error,prepare,verify,bench,changes,evaluate}"},{"commands":[{"commands":[],"name":"check","options":[{"choices":[],"kind":"option","metavar":null,"names":["-h","--help"],"repeatable":false,"required":false,"summary":"Show this message and exit."},{"choices":[],"kind":"option","metavar":null,"names":["--typescript-built"],"repeatable":false,"required":false,"summary":"reuse the TypeScript build completed by this verification run"}],"path":["maintain","catalog","check"],"summary":"verify the public catalog matches every live rule","usage":"code-standards maintain catalog check [-h] [--typescript-built]"},{"commands":[],"name":"sync","options":[{"choices":[],"kind":"option","metavar":null,"names":["-h","--help"],"repeatable":false,"required":false,"summary":"Show this message and exit."}],"path":["maintain","catalog","sync"],"summary":"update the public catalog from source-owned rule metadata","usage":"code-standards maintain catalog sync [-h]"}],"name":"catalog","options":[{"choices":[],"kind":"option","metavar":null,"names":["-h","--help"],"repeatable":false,"required":false,"summary":"Show this message and exit."}],"path":["maintain","catalog"],"summary":"maintain the source-derived public rule catalog","usage":"code-standards maintain catalog [-h] {check,sync}"},{"commands":[{"commands":[],"name":"check","options":[{"choices":[],"kind":"option","metavar":null,"names":["-h","--help"],"repeatable":false,"required":false,"summary":"Show this message and exit."}],"path":["maintain","cli-reference","check"],"summary":"verify the shipped reference matches the parser graph","usage":"code-standards maintain cli-reference check [-h]"},{"commands":[],"name":"sync","options":[{"choices":[],"kind":"option","metavar":null,"names":["-h","--help"],"repeatable":false,"required":false,"summary":"Show this message and exit."}],"path":["maintain","cli-reference","sync"],"summary":"update the shipped reference from the parser graph","usage":"code-standards maintain cli-reference sync [-h]"}],"name":"cli-reference","options":[{"choices":[],"kind":"option","metavar":null,"names":["-h","--help"],"repeatable":false,"required":false,"summary":"Show this message and exit."}],"path":["maintain","cli-reference"],"summary":"maintain the source-derived CLI reference","usage":"code-standards maintain cli-reference [-h] {check,sync}"}],"name":"maintain","options":[{"choices":[],"kind":"option","metavar":null,"names":["-h","--help"],"repeatable":false,"required":false,"summary":"Show this message and exit."}],"path":["maintain"],"summary":"repository policy, hooks, rule ledgers, and releases","usage":"code-standards maintain [-h] {setup,check,sync-ledger,comment-corpus,release,docs,hooks,rules,catalog,cli-reference}"}],"epilog":"Start with `code-standards setup`, then use `code-standards check`.","globalOptions":[{"choices":[],"kind":"option","metavar":null,"names":["-h","--help"],"repeatable":false,"required":false,"summary":"Show this message and exit."},{"choices":[],"kind":"option","metavar":"DEST","names":["--root"],"repeatable":false,"required":false,"summary":"repository root shared by the selected command (default: current directory)"},{"choices":[],"kind":"option","metavar":null,"names":["--version"],"repeatable":false,"required":false,"summary":""}],"launcher":{"install":"uv tool install --python 3.15.0 code-standards","runLatest":"uvx --no-config --isolated --python 3.15.0 --from code-standards code-standards"},"program":"code-standards","schemaVersion":1,"summary":"Adopt, check, fix, diagnose, and update sarj-ai standards (v8.74.0).","version":"8.74.0"}

code_standards-8.74.0/src/sarj_standards/configs/eslint-compact-formatter.mts

@@ -0,0 +1,32 @@
+import type { ESLint } from "eslint";
+
+export default function eslintCompactFormatter(
+  results: readonly ESLint.LintResult[],
+): string {
+  return JSON.stringify(
+    results.map(({ filePath, messages }) => ({
+      filePath,
+      messages: messages.map(
+        ({
+          ruleId,
+          severity,
+          fatal,
+          message,
+          line,
+          column,
+          endLine,
+          endColumn,
+        }) => ({
+          ruleId,
+          severity,
+          fatal,
+          message,
+          line,
+          column,
+          endLine,
+          endColumn,
+        }),
+      ),
+    })),
+  );
+}

code_standards-8.72.1/src/sarj_standards/configs/eslint-selected-rules.mjs → code_standards-8.74.0/src/sarj_standards/configs/eslint-selected-rules.mts

@@ -2,17 +2,42 @@ import { readFile } from "node:fs/promises";
 import { createRequire } from "node:module";
 import { relative, resolve, sep } from "node:path";
 
-import format from "./eslint-compact-formatter.mjs";
+import type { ESLint as NativeESLint } from "eslint";
+import { record, strings } from "./tool-json.mts";
+
+import format from "./eslint-compact-formatter.mts";
 
 // Resolve the consumer's installed ESLint, including workspace hoisting and PnP.
 const require = createRequire(resolve("package.json"));
-const { ESLint } = require("eslint");
-const request = JSON.parse(process.argv[2]);
+const { ESLint } = require("eslint") as typeof import("eslint");
+const argument = process.argv[2];
+if (argument === undefined)
+  throw new Error("Selected ESLint request is required");
+const rawRequest = record(
+  JSON.parse(argument) as unknown,
+  "Selected ESLint request",
+);
+const configPath = rawRequest["config"];
+if (configPath !== null && typeof configPath !== "string")
+  throw new Error("Selected ESLint config must be a path or null");
+const request = {
+  rules: strings(rawRequest["rules"], "Selected ESLint rules"),
+  config: configPath,
+  upstreamRules: strings(
+    rawRequest["upstreamRules"] ?? [],
+    "Selected upstream rules",
+  ),
+  upstreamAdvisories: strings(
+    rawRequest["upstreamAdvisories"] ?? [],
+    "Selected upstream advisories",
+  ),
+  passOnUnpruned: rawRequest["passOnUnpruned"] === true,
+};
 const selected = new Set([
   ...request.rules.map((rule) => `@sarj/${rule}`),
   ...(request.upstreamRules ?? []),
 ]);
-const options = {
+const options: NativeESLint.Options = {
   cwd: process.cwd(),
   ...(request.config === null ? {} : { overrideConfigFile: request.config }),
   // A partial rule run cannot validate whether unrelated inline directives are
@@ -33,32 +58,46 @@ const options = {
 const eslint = new ESLint(options);
 const files = process.argv.slice(4);
 const advisories = request.upstreamAdvisories ?? [];
-let results;
+let results: NativeESLint.LintResult[];
 if (advisories.length === 0) {
   results = await eslint.lintFiles(files);
 } else {
-  const packages = {
+  const packages: Record<string, string> = {
     "@sarj": "@sarj/eslint-plugin",
     vitest: "@vitest/eslint-plugin",
   };
   const namespaces = [
     ...new Set(advisories.map((rule) => rule.slice(0, rule.lastIndexOf("/")))),
   ];
-  const groups = new Map();
+  const groups = new Map<string, { missing: string[]; files: string[] }>();
   for (const file of files) {
-    const config = await eslint.calculateConfigForFile(file);
-    const missing = config
-      ? namespaces.filter((name) => !config.plugins?.[name])
-      : [];
+    const configured: unknown = await eslint.calculateConfigForFile(file);
+    const plugins =
+      configured === undefined
+        ? {}
+        : record(
+            record(configured, "effective ESLint config")["plugins"] ?? {},
+            "effective ESLint plugins",
+          );
+    const missing =
+      configured === undefined
+        ? []
+        : namespaces.filter((name) => !plugins[name]);
     const key = missing.join(",");
-    if (!groups.has(key)) groups.set(key, { missing, files: [] });
-    groups.get(key).files.push(file);
+    const group = groups.get(key) ?? { missing, files: [] };
+    group.files.push(file);
+    groups.set(key, group);
   }
   results = [];
   for (const group of groups.values()) {
     const plugins = Object.fromEntries(
       group.missing.map((name) => {
-        const loaded = require(packages[name]);
+        const packageName = packages[name];
+        if (packageName === undefined)
+          throw new Error(`Unsupported advisory namespace ${name}`);
+        const loaded = require(packageName) as NativeESLint.Plugin & {
+          readonly default?: NativeESLint.Plugin;
+        };
         return [name, loaded.default ?? loaded];
       }),
     );
@@ -78,13 +117,29 @@ if (advisories.length === 0) {
 // callers. Check only rules that actually ran; unselected entries remain valid.
 let unused = false;
 if (!request.passOnUnpruned) {
-  let suppressions = {};
+  const suppressions = new Map<string, Map<string, { count: number }>>();
   try {
-    suppressions = JSON.parse(
-      await readFile("eslint-suppressions.json", "utf8"),
+    const document = record(
+      JSON.parse(await readFile("eslint-suppressions.json", "utf8")) as unknown,
+      "ESLint suppressions",
     );
+    for (const [path, value] of Object.entries(document)) {
+      const entries = new Map<string, { count: number }>();
+      for (const [id, entry] of Object.entries(
+        record(value, "ESLint file suppressions"),
+      )) {
+        const count = record(entry, "ESLint suppression")["count"];
+        if (typeof count !== "number" || !Number.isInteger(count) || count < 0)
+          throw new Error(
+            "ESLint suppression count must be a nonnegative integer",
+          );
+        entries.set(id, { count });
+      }
+      suppressions.set(path, entries);
+    }
   } catch (error) {
-    if (error.code !== "ENOENT") throw error;
+    if (!(error instanceof Error && "code" in error && error.code === "ENOENT"))
+      throw error;
   }
   unused = results.some((result) => {
     const file = relative(process.cwd(), result.filePath).split(sep).join("/");
@@ -94,7 +149,7 @@ if (!request.passOnUnpruned) {
         message.suppressions.some((suppression) => suppression.kind === "file"),
       ),
     ];
-    return Object.entries(suppressions[file] ?? {}).some(
+    return [...(suppressions.get(file) ?? [])].some(
       ([ruleId, entry]) =>
         selected.has(ruleId) &&
         entry.count >

{code_standards-8.72.1 → code_standards-8.74.0}/src/sarj_standards/configs/eslint.peers.json

@@ -19,7 +19,7 @@
     "@eslint-community/eslint-plugin-eslint-comments": "4.8.1",
     "@eslint/compat": "2.1.1",
     "@eslint/js": "10.0.1",
-    "@sarj/eslint-plugin": "16.16.1",
+    "@sarj/eslint-plugin": "16.18.0",
     "@shadcn/lint": "0.2.1",
     "@typescript/native": "npm:typescript@7.0.2",
     "@vitest/eslint-plugin": "1.6.27",
@@ -40,10 +40,11 @@
     "eslint-plugin-zod": "5.0.1",
     "react-doctor": "0.9.18",
     "typescript": "npm:@typescript/typescript6@6.0.2",
-    "typescript-eslint": "8.71.2"
+    "typescript-eslint": "8.71.2",
+    "jiti": "2.7.0"
   },
   "ageGatePreapprovals": {
-    "@sarj/eslint-plugin": "16.16.1"
+    "@sarj/eslint-plugin": "16.18.0"
   },
   "yarnIdentityPins": {
     "@typescript-eslint/eslint-plugin": "8.71.2",

{code_standards-8.72.1 → code_standards-8.74.0}/src/sarj_standards/configs/eslint.strict.mjs

@@ -1371,6 +1371,7 @@ export function createConfig(options = {}) {
       "@sarj/no-known-value-widening": "error",
       "@sarj/no-invalid-typed-mutation": "warn",
       "@sarj/no-contradictory-type-predicate": "warn",
+      "@sarj/no-partial-type-predicate": "warn",
       "@sarj/no-broad-return-type": "error",
       "@sarj/prefer-typed-reflection": "error",
       "@sarj/no-conditional-empty-object-spread": "error",

{code_standards-8.72.1 → code_standards-8.74.0}/src/sarj_standards/configs/rule-calibration-campaign.v1.json

@@ -2,6 +2,14 @@
   "schemaVersion": 1,
   "precisionGate": "Review every finding up to 200; above 200, review every major cluster and a deterministic stratified sample of at least 50. Treat ambiguous findings as false positives for error-level rules.",
   "tasks": [
+    {
+      "task": "rule-audit/typescript/no-partial-type-predicate",
+      "family": "typescript",
+      "ruleId": "no-partial-type-predicate",
+      "state": "complete",
+      "evidence": "Fifty substantive guard-design review decisions completed with reproducible counterexamples and valid-boundary controls. An explicit broad primitive predicate can reject a valid member and make its false branch unsafe. Numeric enum witnesses must belong to the actual input domain; preserve overloads, contextual/public callable contracts, refinements, ambient and transformed functions. Exact TS5.0.4 replay175/175 and native6.0.3 proofs pass. Corpus findings, final source hashes and performance are recorded in packages/standards/benchmarks/type-guard-design-50-passes.json.",
+      "outcome": "Ship at warning severity without autofix. Use an ordinary boolean filter for value selection or prove both branches of a narrowing predicate. Canonical verification and exact-head CI must pass before administrative merge."
+    },
     {
       "task": "rule-audit/python/no-invalid-pydantic-bypass",
       "family": "python",
@@ -15,7 +23,7 @@
       "family": "python",
       "ruleId": "no-partial-type-is",
       "state": "complete",
-      "evidence": "Expert type-safety calibration 2026-10-16. An import-proven TypeIs predicate rejects a concrete valid builtin target member. Preserve intentionally partial TypeGuard, refined or opaque inputs and unsupported control flow. 79 focused tests include finite scalar and empty-container witnesses and bounded deep-input analysis. Focused and independent semantic reviews pass. Exact final source hashes, reused immutable local corpus coverage, labeled results, native proofs, performance observations and canonical verification are recorded in packages/standards/benchmarks/expert-type-safety.json. Finite zero-unseeded-hit calibration does not estimate empirical precision on unseen defects.",
+      "evidence": "Expert type-safety calibration 2026-10-16. An import-proven TypeIs predicate rejects a concrete valid builtin target member. Preserve intentionally partial TypeGuard, refined or opaque inputs and unsupported control flow. 79 focused tests include finite scalar and empty-container witnesses and bounded deep-input analysis. Focused and independent semantic reviews pass. Exact final source hashes, reused immutable local corpus coverage, labeled results, native proofs, performance observations and canonical verification are recorded in packages/standards/benchmarks/expert-type-safety.json. Finite zero-unseeded-hit calibration does not estimate empirical precision on unseen defects. Follow-up fifty-pass guard design review2026-10-16: finite primitive/Literal witnesses, public callable input domains, and native namespace capability/identity boundaries were reviewed. Final source pins, every decision, inspected pinned-corpus findings, native proofs and bounded performance observations are recorded in packages/standards/benchmarks/type-guard-design-50-passes.json. Reused files and semantic matrices are not independent precision observations; no universal precision claim or unsafe autofix.",
       "outcome": "Stage SARJ512 at warning severity without autofix. Report only source-proven contradictions; abstain at ambiguous domain or runtime boundaries. Preserve external contracts and intentional refinements. Require exact-head CI before administrative merge."
     },
     {
@@ -23,7 +31,7 @@
       "family": "python",
       "ruleId": "no-contradictory-type-guard",
       "state": "complete",
-      "evidence": "Expert type-safety calibration 2026-10-16. An import-proven TypeGuard/TypeIs directly checks a contradictory builtin runtime type. Model bool as a subtype of int and preserve legal partial TypeGuard. 458 focused tests include a 384-case runtime-derived guard/target/check/input matrix; these are related semantic vectors, not independent corpus findings. Focused and independent semantic reviews pass. Exact final source hashes, reused immutable local corpus coverage, labeled results, native proofs, performance observations and canonical verification are recorded in packages/standards/benchmarks/expert-type-safety.json. Finite zero-unseeded-hit calibration does not estimate empirical precision on unseen defects.",
+      "evidence": "Expert type-safety calibration 2026-10-16. An import-proven TypeGuard/TypeIs directly checks a contradictory builtin runtime type. Model bool as a subtype of int and preserve legal partial TypeGuard. 458 focused tests include a 384-case runtime-derived guard/target/check/input matrix; these are related semantic vectors, not independent corpus findings. Focused and independent semantic reviews pass. Exact final source hashes, reused immutable local corpus coverage, labeled results, native proofs, performance observations and canonical verification are recorded in packages/standards/benchmarks/expert-type-safety.json. Finite zero-unseeded-hit calibration does not estimate empirical precision on unseen defects. Follow-up fifty-pass guard design review2026-10-16: finite primitive/Literal witnesses, public callable input domains, and native namespace capability/identity boundaries were reviewed. Final source pins, every decision, inspected pinned-corpus findings, native proofs and bounded performance observations are recorded in packages/standards/benchmarks/type-guard-design-50-passes.json. Reused files and semantic matrices are not independent precision observations; no universal precision claim or unsafe autofix.",
       "outcome": "Stage SARJ513 at warning severity without autofix. Report only source-proven contradictions; abstain at ambiguous domain or runtime boundaries. Preserve external contracts and intentional refinements. Require exact-head CI before administrative merge."
     },
     {
@@ -39,7 +47,7 @@
       "family": "typescript",
       "ruleId": "no-contradictory-type-predicate",
       "state": "complete",
-      "evidence": "Expert type-safety calibration 2026-10-16. A one-return explicit primitive type predicate contradicts its direct typeof check in the true or false branch. Require native checker proof of broad primitive input/target domains; preserve literals, brands, generics, structural refinements, assertions and complex predicates. Native compiler tests reproduce both caller-narrowing hazards. Focused and independent semantic reviews pass. Exact final source hashes, reused immutable local corpus coverage, labeled results, native proofs, performance observations and canonical verification are recorded in packages/standards/benchmarks/expert-type-safety.json. Finite zero-unseeded-hit calibration does not estimate empirical precision on unseen defects.",
+      "evidence": "Expert type-safety calibration 2026-10-16. A one-return explicit primitive type predicate contradicts its direct typeof check in the true or false branch. Require native checker proof of broad primitive input/target domains; preserve literals, brands, generics, structural refinements, assertions and complex predicates. Native compiler tests reproduce both caller-narrowing hazards. Focused and independent semantic reviews pass. Exact final source hashes, reused immutable local corpus coverage, labeled results, native proofs, performance observations and canonical verification are recorded in packages/standards/benchmarks/expert-type-safety.json. Finite zero-unseeded-hit calibration does not estimate empirical precision on unseen defects. Follow-up fifty-pass guard design review2026-10-16: finite primitive/Literal witnesses, public callable input domains, and native namespace capability/identity boundaries were reviewed. Final source pins, every decision, inspected pinned-corpus findings, native proofs and bounded performance observations are recorded in packages/standards/benchmarks/type-guard-design-50-passes.json. Reused files and semantic matrices are not independent precision observations; no universal precision claim or unsafe autofix.",
       "outcome": "Stage eslint:no-contradictory-type-predicate at warning severity without autofix. Report only source-proven contradictions; abstain at ambiguous domain or runtime boundaries. Preserve external contracts and intentional refinements. Require exact-head CI before administrative merge."
     },
     {
@@ -2373,7 +2381,7 @@
       "family": "python",
       "ruleId": "no-shallow-container-type-guard",
       "state": "complete",
-      "evidence": "85 focused tests pass, including 78 labeled cases (18 true positives, 60 true negatives). Fifteen added exception/pattern-shadow negatives reproduce false warnings before the rule-local gate; three unrelated or wildcard capture positives preserve the admitted scope. The earlier combined rule/registry/metadata suite passed 387 tests. Three added default-walrus shadow negatives also reproduced false warnings before the rule-local gate, while one unrelated walrus positive preserves the admitted scope. Recorded corpus and timing measurements precede these conservative shadow-binding refinements; no revised overhead measurement is claimed. An independent 71-case adversarial review covers 17 positives and 54 negatives, exact Return-line suppression, aliases, shadowing, wildcard imports, attribute mutations, generated sources, conservative omissions, repeatability and nearby-rule precedence. Pinned already-local source evaluation scans 2,378 Python files / 23,573,078 bytes in 13 fresh processes capped at 250 files, including Standards revision d1c5b3962dc6d14beb82c7ffcd265575d7257525, installed Python 3.14.7 and Pydantic subsets, owner-readable private source and independent seeds. Seeds produce three true positives and three true negatives with no false positives, false negatives or duplicates. All 16 natural contract matches were inspected: 14 rely on parser/framework origin assumptions and two feed separate exact-key validators; no runtime incident is claimed. Candidate analysis takes 3.148 seconds cold / 3.185 seconds warm with 84,049,920 bytes peak worker memory. Three rotated comparisons on 48 files / 391,687 bytes through normal analyze use SARJ008/040/095/447/469 as selected controls: summed cold baseline/combined medians are 0.23797/0.23831 seconds and warm medians 0.23210/0.23123 seconds, within timing noise. Full-registry comparison timed out before selecting the candidate; no full-registry overhead or broad precision estimate is claimed. OS caches were not flushed; private identities and pins remain in owner-readable reports. Follow-up 2026-10-12 additional thirty-pass campaign: Five judge rounds review strict typing and maintainability admission; bounded native WARNING tiers preserve runtime special signatures, source-visible model effects, variance/Self and frame/regex lifetime where relevant. Exact verification, corpus controls, sampling, performance and CI gate evidence is recorded in packages/python/benchmarks/error-promotion-next-30-passes.json. Follow-up expert type-safety calibration 2026-10-16: imported typing/builtins namespace aliases, argument/container escapes, __dict__ access and visible mutation invalidate builtin identity proof. Six new escape regressions preserve all four reviewed real corpus findings while removing the seeded namespace false positive. See expert-type-safety.json for exact final sources and bounded calibration.",
+      "evidence": "85 focused tests pass, including 78 labeled cases (18 true positives, 60 true negatives). Fifteen added exception/pattern-shadow negatives reproduce false warnings before the rule-local gate; three unrelated or wildcard capture positives preserve the admitted scope. The earlier combined rule/registry/metadata suite passed 387 tests. Three added default-walrus shadow negatives also reproduced false warnings before the rule-local gate, while one unrelated walrus positive preserves the admitted scope. Recorded corpus and timing measurements precede these conservative shadow-binding refinements; no revised overhead measurement is claimed. An independent 71-case adversarial review covers 17 positives and 54 negatives, exact Return-line suppression, aliases, shadowing, wildcard imports, attribute mutations, generated sources, conservative omissions, repeatability and nearby-rule precedence. Pinned already-local source evaluation scans 2,378 Python files / 23,573,078 bytes in 13 fresh processes capped at 250 files, including Standards revision d1c5b3962dc6d14beb82c7ffcd265575d7257525, installed Python 3.14.7 and Pydantic subsets, owner-readable private source and independent seeds. Seeds produce three true positives and three true negatives with no false positives, false negatives or duplicates. All 16 natural contract matches were inspected: 14 rely on parser/framework origin assumptions and two feed separate exact-key validators; no runtime incident is claimed. Candidate analysis takes 3.148 seconds cold / 3.185 seconds warm with 84,049,920 bytes peak worker memory. Three rotated comparisons on 48 files / 391,687 bytes through normal analyze use SARJ008/040/095/447/469 as selected controls: summed cold baseline/combined medians are 0.23797/0.23831 seconds and warm medians 0.23210/0.23123 seconds, within timing noise. Full-registry comparison timed out before selecting the candidate; no full-registry overhead or broad precision estimate is claimed. OS caches were not flushed; private identities and pins remain in owner-readable reports. Follow-up 2026-10-12 additional thirty-pass campaign: Five judge rounds review strict typing and maintainability admission; bounded native WARNING tiers preserve runtime special signatures, source-visible model effects, variance/Self and frame/regex lifetime where relevant. Exact verification, corpus controls, sampling, performance and CI gate evidence is recorded in packages/python/benchmarks/error-promotion-next-30-passes.json. Follow-up expert type-safety calibration 2026-10-16: imported typing/builtins namespace aliases, argument/container escapes, __dict__ access and visible mutation invalidate builtin identity proof. Six new escape regressions preserve all four reviewed real corpus findings while removing the seeded namespace false positive. See expert-type-safety.json for exact final sources and bounded calibration. Follow-up fifty-pass guard design review2026-10-16: finite primitive/Literal witnesses, public callable input domains, and native namespace capability/identity boundaries were reviewed. Final source pins, every decision, inspected pinned-corpus findings, native proofs and bounded performance observations are recorded in packages/standards/benchmarks/type-guard-design-50-passes.json. Reused files and semantic matrices are not independent precision observations; no universal precision claim or unsafe autofix.",
       "outcome": "Ship SARJ472 at warning level without autofix. Diagnose only proven object-input TypeGuard/TypeIs definitions that use one shallow builtin dict/list/set check while claiming primitive contents. Preserve broad object slots, constrained inputs, unions, unknowns, Protocols, full validators and ambiguous scopes. Prefer honest unchecked-container annotations or preserved input proof; legitimate origin assumptions may justify a local exception. Adding redundant validation everywhere is not the remediation. Broader public diversity and a separate warning release are required before any blocking promotion. Promotion follow-up 2026-10-12: Enable the supported default at ERROR in Python 1.33.0 / TypeScript 16.8.0 / Standards 8.52.0. A bare container isinstance check cannot prove narrower element, key, or value types; retain object slots or validate contents. No unsafe autofix or universal semantic-precision claim; preserve required contracts with the documented alternative or reasoned exact-code exception."
     },
     {