From d3ab8fe7b9ae67dab1aff12af6b77ab9078e75d0 Mon Sep 17 00:00:00 2001
From: Sawyer Cutler <sawyer@dirtroad.dev>
Date: Sun, 1 Nov 2026 15:19:20 -0800
Subject: [PATCH] fix(policy): nest request-URL constraints inside the ast-grep
 rule

checkPolicyFile refused rules[10] because constraints sat beside rule instead of inside it.
---
 .corbits-triage.yml | 12 ++++++------
 1 file changed, 6 insertions(+), 6 deletions(-)

diff --git a/.corbits-triage.yml b/.corbits-triage.yml
index 0d6e4f8..087eeb1 100644
--- a/.corbits-triage.yml
+++ b/.corbits-triage.yml
@@ -117,9 +117,9 @@ rules:
             - pattern: console.info($$$URL$$$)
             - pattern: console.error($$$URL$$$)
             - pattern: console.debug($$$URL$$$)
-        constraints:
-          URL:
-            regex: ^(req|request|raw)\.url$
+          constraints:
+            URL:
+              regex: ^(req|request|raw)\.url$
       - id: no-request-url-in-logs
         language: javascript
         message: Logs a request URL.
@@ -138,9 +138,9 @@ rules:
             - pattern: console.info($$$URL$$$)
             - pattern: console.error($$$URL$$$)
             - pattern: console.debug($$$URL$$$)
-        constraints:
-          URL:
-            regex: ^(req|request|raw)\.url$
+          constraints:
+            URL:
+              regex: ^(req|request|raw)\.url$
 actions:
   pass:
     - do: approve