Scope nullable block guard detection to the matched guard body

internal/codeguard/checks/quality/quality_defensive.go

@@ -168,7 +168,7 @@
 			strings.HasSuffix(name, "row") ||
 			strings.Contains(name, "rowpart") ||
 			strings.HasSuffix(name, "part") ||
 			regexp.MustCompile(`part\d+$`).MatchString(name) ||
 			strings.HasSuffix(name, "context") ||
 			strings.HasSuffix(name, "ctx") ||
 			strings.Contains(name, "dto") ||
@@ -334,12 +334,20 @@
 	if guardStart == nil {
 		return false
 	}
-	windowStart := guardStart[1]
-	windowEnd := windowStart + 3000
-	if windowEnd > len(loweredBody) {
-		windowEnd = len(loweredBody)
+	blockStart := guardStart[1] - 1
+	depth := 1
+	for blockEnd := blockStart + 1; blockEnd < len(loweredBody); blockEnd++ {
+		switch loweredBody[blockEnd] {
+		case '{':
+			depth++
+		case '}':
+			depth--
+			if depth == 0 {
+				return regexp.MustCompile(`\b(?:return|throw|continue|break)\b`).MatchString(loweredBody[blockStart+1 : blockEnd])
+			}
+		}
 	}
-	return regexp.MustCompile(`\b(?:return|throw|continue|break)\b`).MatchString(loweredBody[windowStart:windowEnd])
+	return false
 }
 
 func nullableUseLine(fn precisionFunction, name string) int {

internal/codeguard/checks/quality/quality_defensive_test.go

@@ -0,0 +1,44 @@
+package quality
+
+import (
+	"regexp"
+	"testing"
+)
+
+func TestNullableParamHasBlockExitGuardRequiresExitInsideGuard(t *testing.T) {
+	tests := []struct {
+		name string
+		body string
+		want bool
+	}{
+		{
+			name: "return in guard",
+			body: `if (!user) { return missingUser(); } return user.email;`,
+			want: true,
+		},
+		{
+			name: "return after guard",
+			body: `if (!user) { logMissing(); } return user.email;`,
+			want: false,
+		},
+		{
+			name: "return in nested guard scope",
+			body: `if (!user) { if (missing()) { return fallback; } throw err; } use(user);`,
+			want: true,
+		},
+		{
+			name: "unclosed guard",
+			body: `if (!user) { logMissing(); return fallback;`,
+			want: false,
+		},
+	}
+
+	for _, tt := range tests {
+		t.Run(tt.name, func(t *testing.T) {
+			got := nullableParamHasBlockExitGuard(tt.body, regexp.QuoteMeta("user"))
+			if got != tt.want {
+				t.Fatalf("nullableParamHasBlockExitGuard() = %v, want %v", got, tt.want)
+			}
+		})
+	}
+}