Skip to content

feat(vercel_ai): TS has_print_call + VAI-017 fixture - #187

Open
joeymussalli wants to merge 1 commit into
trustabl:mainfrom
joeymussalli:feat/vercel-stdout-vai-017
Open

feat(vercel_ai): TS has_print_call + VAI-017 fixture#187
joeymussalli wants to merge 1 commit into
trustabl:mainfrom
joeymussalli:feat/vercel-stdout-vai-017

Conversation

@joeymussalli

@joeymussalli joeymussalli commented Aug 24, 2026

Copy link
Copy Markdown

Summary

  • Teach PredHasPrintCall to read the TypeScript prints_stdout discovery fact (console.log / console.info / console.debug / process.stdout.write; stderr callees stay silent), mirroring has_write_call / has_shell_call.
  • Add unit coverage for the fact and fire/silent cases for VAI-017 (Vercel AI tool stdout diagnostics).
  • Ship the matching rules-fixture so engine CI can evaluate the new rule.

Overlap

Same prints_stdout / PredHasPrintCall TS branch as #180. If that lands first, I will rebase and drop the overlapping hunks, keeping only the VAI-017 fixture + policy tests. #180 telegraphed MCP follow-up; this claims the Vercel observability rule.

Companion PRs

Test plan

  • go test ./internal/analysis/ -run PrintsStdout
  • go test ./internal/rules/ -run 'VAI-017|OAI-010'

TypeScript tools never fired has_print_call because the Python AST walk
looks for call nodes. Set prints_stdout from stdout callees and branch
PredHasPrintCall like has_write_call, then cover Vercel console.log.

Co-authored-by: Cursor <cursoragent@cursor.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant