fiber_audit 0.1.0

data/lib/fiber_audit/findings/finding.rb

@@ -0,0 +1,76 @@
+# frozen_string_literal: true
+
+module FiberAudit
+  Finding = Data.define(
+    :rule_id,
+    :title,
+    :category,
+    :severity,
+    :confidence,
+    :location,
+    :symbol,
+    :operation,
+    :execution_context,
+    :message,
+    :evidence,
+    :remediation,
+    :fingerprint
+  ) do
+    def initialize(
+      rule_id:,
+      category:, severity:, confidence:, message:, title: nil,
+      location: nil,
+      symbol: nil,
+      operation: nil,
+      execution_context: nil,
+      evidence: [],
+      remediation: nil,
+      fingerprint: nil
+    )
+      severity = Severity.coerce(severity)
+      confidence = Confidence.coerce(confidence)
+      evidence = Array(evidence).freeze
+
+      fingerprint ||= Correlation::Fingerprint.call(
+        rule_id: rule_id,
+        path: location&.path,
+        enclosing_symbol: symbol,
+        operation: operation
+      )
+
+      super(
+        rule_id: rule_id,
+        title: title,
+        category: category,
+        severity: severity,
+        confidence: confidence,
+        location: location,
+        symbol: symbol,
+        operation: operation,
+        execution_context: execution_context,
+        message: message,
+        evidence: evidence,
+        remediation: remediation,
+        fingerprint: fingerprint
+      )
+    end
+
+    def to_h_for_json
+      {
+        rule_id: rule_id,
+        title: title,
+        category: category,
+        severity: severity,
+        confidence: confidence,
+        location: location&.to_h_for_json,
+        symbol: symbol,
+        operation: operation,
+        execution_context: execution_context,
+        message: message,
+        evidence: evidence.map(&:to_h_for_json),
+        remediation: remediation,
+        fingerprint: fingerprint
+      }
+    end
+  end
+end

data/lib/fiber_audit/findings/location.rb

@@ -0,0 +1,9 @@
+# frozen_string_literal: true
+
+module FiberAudit
+  Location = Data.define(:path, :line, :column) do
+    def to_h_for_json
+      { path: path, line: line, column: column }
+    end
+  end
+end

data/lib/fiber_audit/findings/severity.rb

@@ -0,0 +1,19 @@
+# frozen_string_literal: true
+
+module FiberAudit
+  module Severity
+    LEVELS = %i[critical high medium low info].freeze
+
+    module_function
+
+    def coerce(value)
+      return value if LEVELS.include?(value)
+
+      raise ArgumentError, "unknown severity: #{value.inspect}"
+    end
+
+    def index(severity)
+      LEVELS.index(severity) || LEVELS.size
+    end
+  end
+end

data/lib/fiber_audit/project.rb

@@ -0,0 +1,96 @@
+# frozen_string_literal: true
+
+require_relative 'errors'
+
+module FiberAudit
+  class Project
+    MARKERS = %w[Gemfile gems.rb config/application.rb].freeze
+    CONFIG_FILENAME = '.fiber-audit.yml'
+
+    attr_reader :root, :invocation_path, :note
+
+    def initialize(root:, invocation_path:, known:, note:)
+      @root = root.freeze
+      @invocation_path = invocation_path.freeze
+      @known = known
+      @note = note&.freeze
+      freeze
+    end
+
+    def known?
+      @known
+    end
+
+    def config_path(override = nil)
+      if override
+        resolve_override(override)
+      else
+        File.join(root, CONFIG_FILENAME)
+      end
+    end
+
+    class << self
+      def detect(start_path: Dir.pwd)
+        validate_start_path(start_path)
+
+        invocation_path = resolve_invocation_path(start_path)
+        detected_root = find_project_root(invocation_path)
+
+        if detected_root
+          new(
+            root: detected_root,
+            invocation_path: invocation_path,
+            known: true,
+            note: nil
+          )
+        else
+          new(
+            root: invocation_path,
+            invocation_path: invocation_path,
+            known: false,
+            note: :unknown_project
+          )
+        end
+      end
+
+      private
+
+      def validate_start_path(path)
+        return if File.exist?(path)
+
+        raise ProjectError, "start_path does not exist: #{path}"
+      end
+
+      def resolve_invocation_path(start_path)
+        expanded = File.expand_path(start_path)
+        File.file?(start_path) ? File.dirname(expanded) : expanded
+      end
+
+      def find_project_root(start_dir)
+        current = start_dir
+        loop do
+          return current if markers_present?(current)
+
+          parent = File.dirname(current)
+          return nil if parent == current
+
+          current = parent
+        end
+      end
+
+      def markers_present?(dir)
+        MARKERS.any? { |marker| File.exist?(File.join(dir, marker)) }
+      end
+    end
+
+    private
+
+    def resolve_override(override)
+      if File.absolute_path?(override)
+        File.expand_path(override)
+      else
+        File.expand_path(override, invocation_path)
+      end
+    end
+  end
+end

data/lib/fiber_audit/reporters/base.rb

@@ -0,0 +1,12 @@
+# frozen_string_literal: true
+
+module FiberAudit
+  module Reporters
+    # Base class for all reporters. Subclasses must implement #render.
+    class Base
+      def render(_result)
+        raise NotImplementedError, "#{self.class}#render must be implemented"
+      end
+    end
+  end
+end

data/lib/fiber_audit/reporters/json.rb

@@ -0,0 +1,34 @@
+# frozen_string_literal: true
+
+require 'json'
+require_relative 'base'
+require_relative 'schema'
+
+module FiberAudit
+  module Reporters
+    # JSON reporter that outputs deterministic, schema-validated JSON.
+    # Calls Schema.build then Schema.validate! to enforce the contract.
+    class JSON < Base
+      def initialize(pretty: false)
+        super()
+        @pretty = pretty
+      end
+
+      def render(result)
+        # Build normalized primitive report hash from result protocol
+        report_hash = Schema.build(result)
+
+        # Validate the hash and return it (also freezes it)
+        Schema.validate!(report_hash)
+
+        json_string = if @pretty
+                        ::JSON.pretty_generate(report_hash)
+                      else
+                        ::JSON.generate(report_hash)
+                      end
+
+        "#{json_string}\n"
+      end
+    end
+  end
+end