@a11yst/reporters 1.0.0

package/dist/finding-source-report.js

@@ -0,0 +1,134 @@
+const MAX_ALTERNATIVES = 5;
+function flatRegion(region) {
+    return {
+        startLine: region.start.line,
+        ...(region.start.column !== undefined ? { startColumn: region.start.column } : {}),
+    };
+}
+function candidateLocationKey(location) {
+    const flat = flatRegion(location.region);
+    return `${location.uri}\0${flat.startLine}\0${flat.startColumn ?? ""}`;
+}
+function readLegacySourceLocation(finding) {
+    const extension = finding;
+    const legacy = extension.sourceLocation;
+    if (!legacy?.uri || !legacy.startLine) {
+        return undefined;
+    }
+    return {
+        uri: legacy.uri,
+        region: {
+            start: {
+                line: legacy.startLine,
+                ...(legacy.startColumn !== undefined ? { column: legacy.startColumn } : {}),
+            },
+            ...(legacy.endLine !== undefined
+                ? {
+                    end: {
+                        line: legacy.endLine,
+                        ...(legacy.endColumn !== undefined ? { column: legacy.endColumn } : {}),
+                    },
+                }
+                : {}),
+        },
+    };
+}
+function compareLocations(left, right) {
+    const uriOrder = left.uri.localeCompare(right.uri);
+    if (uriOrder !== 0) {
+        return uriOrder;
+    }
+    const leftFlat = flatRegion(left.region);
+    const rightFlat = flatRegion(right.region);
+    if (leftFlat.startLine !== rightFlat.startLine) {
+        return leftFlat.startLine - rightFlat.startLine;
+    }
+    return (leftFlat.startColumn ?? 0) - (rightFlat.startColumn ?? 0);
+}
+function dedupeAlternatives(locations) {
+    const seen = new Set();
+    const result = [];
+    for (const location of [...locations].sort(compareLocations)) {
+        const key = candidateLocationKey(location);
+        if (!seen.has(key)) {
+            seen.add(key);
+            result.push(location);
+        }
+    }
+    return result.slice(0, MAX_ALTERNATIVES);
+}
+export function resolveFindingReportSource(finding) {
+    const mapping = finding.sourceMapping;
+    if (mapping?.status === "mapped" && mapping.selected) {
+        return {
+            status: "mapped",
+            location: mapping.selected.location,
+            confidence: mapping.selected.confidence,
+            provenance: mapping.selected.provenance,
+        };
+    }
+    if (mapping?.status === "invalid") {
+        return { status: "invalid" };
+    }
+    if (mapping?.status === "ambiguous") {
+        return {
+            status: "ambiguous",
+            alternatives: dedupeAlternatives(mapping.candidates.map((candidate) => candidate.location)),
+        };
+    }
+    const legacy = readLegacySourceLocation(finding);
+    if (legacy) {
+        return {
+            status: "mapped",
+            location: legacy,
+            confidence: "exact",
+            provenance: "existing-source-location",
+        };
+    }
+    if (mapping?.status === "unmapped") {
+        return { status: "unmapped" };
+    }
+    return { status: "unmapped" };
+}
+export function formatReportSourceLocation(location) {
+    const flat = flatRegion(location.region);
+    const column = flat.startColumn !== undefined ? `:${flat.startColumn}` : "";
+    return `${location.uri}:${flat.startLine}${column}`;
+}
+const UNIX_ABSOLUTE = /^\//;
+const WINDOWS_ABSOLUTE = /^[A-Za-z]:[\\/]/;
+/** Strip absolute or home-like paths from source URIs for human-facing reports. */
+export function sanitizeSourceUriForReport(uri) {
+    const normalized = uri.replace(/\\/g, "/");
+    if (!UNIX_ABSOLUTE.test(normalized) && !WINDOWS_ABSOLUTE.test(normalized)) {
+        return normalized;
+    }
+    const segments = normalized.split("/").filter(Boolean);
+    if (segments.length >= 2) {
+        return segments.slice(-2).join("/");
+    }
+    return segments[segments.length - 1] ?? "source";
+}
+export function formatSafeReportSourceLocation(location) {
+    return formatReportSourceLocation({
+        ...location,
+        uri: sanitizeSourceUriForReport(location.uri),
+    });
+}
+export function resolveFindingRecommendationSummary(finding) {
+    const recommendations = finding.recommendations;
+    if (!recommendations || recommendations.recommendations.length === 0) {
+        return undefined;
+    }
+    const primary = recommendations.recommendations[0];
+    if (!primary) {
+        return undefined;
+    }
+    return {
+        status: recommendations.status,
+        applicability: primary.applicability,
+        title: primary.title,
+        summary: primary.summary,
+    };
+}
+//# sourceMappingURL=finding-source-report.js.map

package/dist/finding-source-report.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"finding-source-report.js","sourceRoot":"","sources":["../src/finding-source-report.ts"],"names":[],"mappings":"AAsBA,MAAM,gBAAgB,GAAG,CAAC,CAAC;AAE3B,SAAS,UAAU,CAAC,MAAgC;IAIlD,OAAO;QACL,SAAS,EAAE,MAAM,CAAC,KAAK,CAAC,IAAI;QAC5B,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACnF,CAAC;AACJ,CAAC;AAED,SAAS,oBAAoB,CAAC,QAAwB;IACpD,MAAM,IAAI,GAAG,UAAU,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IACzC,OAAO,GAAG,QAAQ,CAAC,GAAG,KAAK,IAAI,CAAC,SAAS,KAAK,IAAI,CAAC,WAAW,IAAI,EAAE,EAAE,CAAC;AACzE,CAAC;AAED,SAAS,wBAAwB,CAAC,OAAgB;IAChD,MAAM,SAAS,GAAG,OAQjB,CAAC;IACF,MAAM,MAAM,GAAG,SAAS,CAAC,cAAc,CAAC;IACxC,IAAI,CAAC,MAAM,EAAE,GAAG,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE,CAAC;QACtC,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,OAAO;QACL,GAAG,EAAE,MAAM,CAAC,GAAG;QACf,MAAM,EAAE;YACN,KAAK,EAAE;gBACL,IAAI,EAAE,MAAM,CAAC,SAAS;gBACtB,GAAG,CAAC,MAAM,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aAC5E;YACD,GAAG,CAAC,MAAM,CAAC,OAAO,KAAK,SAAS;gBAC9B,CAAC,CAAC;oBACE,GAAG,EAAE;wBACH,IAAI,EAAE,MAAM,CAAC,OAAO;wBACpB,GAAG,CAAC,MAAM,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;qBACxE;iBACF;gBACH,CAAC,CAAC,EAAE,CAAC;SACR;KACF,CAAC;AACJ,CAAC;AAED,SAAS,gBAAgB,CAAC,IAAoB,EAAE,KAAqB;IACnE,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,CAAC,aAAa,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACnD,IAAI,QAAQ,KAAK,CAAC,EAAE,CAAC;QACnB,OAAO,QAAQ,CAAC;IAClB,CAAC;IACD,MAAM,QAAQ,GAAG,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACzC,MAAM,SAAS,GAAG,UAAU,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAC3C,IAAI,QAAQ,CAAC,SAAS,KAAK,SAAS,CAAC,SAAS,EAAE,CAAC;QAC/C,OAAO,QAAQ,CAAC,SAAS,GAAG,SAAS,CAAC,SAAS,CAAC;IAClD,CAAC;IACD,OAAO,CAAC,QAAQ,CAAC,WAAW,IAAI,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,WAAW,IAAI,CAAC,CAAC,CAAC;AACpE,CAAC;AAED,SAAS,kBAAkB,CAAC,SAA2B;IACrD,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,MAAM,MAAM,GAAqB,EAAE,CAAC;IACpC,KAAK,MAAM,QAAQ,IAAI,CAAC,GAAG,SAAS,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC,EAAE,CAAC;QAC7D,MAAM,GAAG,GAAG,oBAAoB,CAAC,QAAQ,CAAC,CAAC;QAC3C,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;YACnB,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YACd,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QACxB,CAAC;IACH,CAAC;IACD,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,gBAAgB,CAAC,CAAC;AAC3C,CAAC;AAED,MAAM,UAAU,0BAA0B,CAAC,OAAgB;IACzD,MAAM,OAAO,GAAG,OAAO,CAAC,aAAa,CAAC;IACtC,IAAI,OAAO,EAAE,MAAM,KAAK,QAAQ,IAAI,OAAO,CAAC,QAAQ,EAAE,CAAC;QACrD,OAAO;YACL,MAAM,EAAE,QAAQ;YAChB,QAAQ,EAAE,OAAO,CAAC,QAAQ,CAAC,QAAQ;YACnC,UAAU,EAAE,OAAO,CAAC,QAAQ,CAAC,UAAU;YACvC,UAAU,EAAE,OAAO,CAAC,QAAQ,CAAC,UAAU;SACxC,CAAC;IACJ,CAAC;IAED,IAAI,OAAO,EAAE,MAAM,KAAK,SAAS,EAAE,CAAC;QAClC,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;IAC/B,CAAC;IAED,IAAI,OAAO,EAAE,MAAM,KAAK,WAAW,EAAE,CAAC;QACpC,OAAO;YACL,MAAM,EAAE,WAAW;YACnB,YAAY,EAAE,kBAAkB,CAAC,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;SAC5F,CAAC;IACJ,CAAC;IAED,MAAM,MAAM,GAAG,wBAAwB,CAAC,OAAO,CAAC,CAAC;IACjD,IAAI,MAAM,EAAE,CAAC;QACX,OAAO;YACL,MAAM,EAAE,QAAQ;YAChB,QAAQ,EAAE,MAAM;YAChB,UAAU,EAAE,OAAO;YACnB,UAAU,EAAE,0BAA0B;SACvC,CAAC;IACJ,CAAC;IAED,IAAI,OAAO,EAAE,MAAM,KAAK,UAAU,EAAE,CAAC;QACnC,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC;IAChC,CAAC;IAED,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC;AAChC,CAAC;AAED,MAAM,UAAU,0BAA0B,CAAC,QAAwB;IACjE,MAAM,IAAI,GAAG,UAAU,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IACzC,MAAM,MAAM,GAAG,IAAI,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IAC5E,OAAO,GAAG,QAAQ,CAAC,GAAG,IAAI,IAAI,CAAC,SAAS,GAAG,MAAM,EAAE,CAAC;AACtD,CAAC;AAED,MAAM,aAAa,GAAG,KAAK,CAAC;AAC5B,MAAM,gBAAgB,GAAG,iBAAiB,CAAC;AAE3C,mFAAmF;AACnF,MAAM,UAAU,0BAA0B,CAAC,GAAW;IACpD,MAAM,UAAU,GAAG,GAAG,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;IAC3C,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC;QAC1E,OAAO,UAAU,CAAC;IACpB,CAAC;IACD,MAAM,QAAQ,GAAG,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IACvD,IAAI,QAAQ,CAAC,MAAM,IAAI,CAAC,EAAE,CAAC;QACzB,OAAO,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACtC,CAAC;IACD,OAAO,QAAQ,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,IAAI,QAAQ,CAAC;AACnD,CAAC;AAED,MAAM,UAAU,8BAA8B,CAAC,QAAwB;IACrE,OAAO,0BAA0B,CAAC;QAChC,GAAG,QAAQ;QACX,GAAG,EAAE,0BAA0B,CAAC,QAAQ,CAAC,GAAG,CAAC;KAC9C,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,mCAAmC,CACjD,OAAgB;IAEhB,MAAM,eAAe,GAAG,OAAO,CAAC,eAAe,CAAC;IAChD,IAAI,CAAC,eAAe,IAAI,eAAe,CAAC,eAAe,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACrE,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,MAAM,OAAO,GAAG,eAAe,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC;IACnD,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,OAAO;QACL,MAAM,EAAE,eAAe,CAAC,MAAM;QAC9B,aAAa,EAAE,OAAO,CAAC,aAAa;QACpC,KAAK,EAAE,OAAO,CAAC,KAAK;QACpB,OAAO,EAAE,OAAO,CAAC,OAAO;KACzB,CAAC;AACJ,CAAC"}

package/dist/github/escape.d.ts

@@ -0,0 +1,13 @@
+export declare function escapeGitHubCommandProperty(value: string): string;
+export declare function escapeGitHubCommandMessage(value: string): string;
+export declare function serializeGitHubAnnotationCommand(input: {
+    level: "error" | "warning" | "notice";
+    title: string;
+    message: string;
+    file?: string;
+    line?: number;
+    column?: number;
+    endLine?: number;
+    endColumn?: number;
+}): string;
+//# sourceMappingURL=escape.d.ts.map

package/dist/github/escape.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"escape.d.ts","sourceRoot":"","sources":["../../src/github/escape.ts"],"names":[],"mappings":"AAAA,wBAAgB,2BAA2B,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAOjE;AAED,wBAAgB,0BAA0B,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAMhE;AAED,wBAAgB,gCAAgC,CAAC,KAAK,EAAE;IACtD,KAAK,EAAE,OAAO,GAAG,SAAS,GAAG,QAAQ,CAAC;IACtC,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB,GAAG,MAAM,CAoBT"}

package/dist/github/escape.js

@@ -0,0 +1,37 @@
+export function escapeGitHubCommandProperty(value) {
+    return value
+        .replace(/%/g, "%25")
+        .replace(/\r/g, "%0D")
+        .replace(/\n/g, "%0A")
+        .replace(/:/g, "%3A")
+        .replace(/,/g, "%2C");
+}
+export function escapeGitHubCommandMessage(value) {
+    return value
+        .replace(/%/g, "%25")
+        .replace(/\r/g, "%0D")
+        .replace(/\n/g, "%0A")
+        .replace(/:/g, "%3A");
+}
+export function serializeGitHubAnnotationCommand(input) {
+    const properties = [];
+    if (input.file) {
+        properties.push(`file=${escapeGitHubCommandProperty(input.file)}`);
+    }
+    if (input.line !== undefined) {
+        properties.push(`line=${input.line}`);
+    }
+    if (input.column !== undefined) {
+        properties.push(`col=${input.column}`);
+    }
+    if (input.endLine !== undefined) {
+        properties.push(`endLine=${input.endLine}`);
+    }
+    if (input.endColumn !== undefined) {
+        properties.push(`endColumn=${input.endColumn}`);
+    }
+    properties.push(`title=${escapeGitHubCommandProperty(input.title)}`);
+    const prefix = properties.length > 0 ? `${properties.join(",")}::` : "";
+    return `::${input.level} ${prefix}${escapeGitHubCommandMessage(input.message)}::`;
+}
+//# sourceMappingURL=escape.js.map

package/dist/github/escape.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"escape.js","sourceRoot":"","sources":["../../src/github/escape.ts"],"names":[],"mappings":"AAAA,MAAM,UAAU,2BAA2B,CAAC,KAAa;IACvD,OAAO,KAAK;SACT,OAAO,CAAC,IAAI,EAAE,KAAK,CAAC;SACpB,OAAO,CAAC,KAAK,EAAE,KAAK,CAAC;SACrB,OAAO,CAAC,KAAK,EAAE,KAAK,CAAC;SACrB,OAAO,CAAC,IAAI,EAAE,KAAK,CAAC;SACpB,OAAO,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;AAC1B,CAAC;AAED,MAAM,UAAU,0BAA0B,CAAC,KAAa;IACtD,OAAO,KAAK;SACT,OAAO,CAAC,IAAI,EAAE,KAAK,CAAC;SACpB,OAAO,CAAC,KAAK,EAAE,KAAK,CAAC;SACrB,OAAO,CAAC,KAAK,EAAE,KAAK,CAAC;SACrB,OAAO,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;AAC1B,CAAC;AAED,MAAM,UAAU,gCAAgC,CAAC,KAShD;IACC,MAAM,UAAU,GAAa,EAAE,CAAC;IAChC,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC;QACf,UAAU,CAAC,IAAI,CAAC,QAAQ,2BAA2B,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACrE,CAAC;IACD,IAAI,KAAK,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;QAC7B,UAAU,CAAC,IAAI,CAAC,QAAQ,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;IACxC,CAAC;IACD,IAAI,KAAK,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;QAC/B,UAAU,CAAC,IAAI,CAAC,OAAO,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC;IACzC,CAAC;IACD,IAAI,KAAK,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;QAChC,UAAU,CAAC,IAAI,CAAC,WAAW,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;IAC9C,CAAC;IACD,IAAI,KAAK,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;QAClC,UAAU,CAAC,IAAI,CAAC,aAAa,KAAK,CAAC,SAAS,EAAE,CAAC,CAAC;IAClD,CAAC;IACD,UAAU,CAAC,IAAI,CAAC,SAAS,2BAA2B,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IACrE,MAAM,MAAM,GAAG,UAAU,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;IACxE,OAAO,KAAK,KAAK,CAAC,KAAK,IAAI,MAAM,GAAG,0BAA0B,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC;AACpF,CAAC"}

package/dist/github/generate.d.ts

@@ -0,0 +1,3 @@
+import type { GitHubAnnotationGenerationResult, GitHubAnnotationInput, GitHubAnnotationOptions } from "./types.js";
+export declare function generateGitHubAnnotations(input: GitHubAnnotationInput, options?: GitHubAnnotationOptions): GitHubAnnotationGenerationResult;
+//# sourceMappingURL=generate.d.ts.map

package/dist/github/generate.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"generate.d.ts","sourceRoot":"","sources":["../../src/github/generate.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAGV,gCAAgC,EAChC,qBAAqB,EACrB,uBAAuB,EACxB,MAAM,YAAY,CAAC;AAiEpB,wBAAgB,yBAAyB,CACvC,KAAK,EAAE,qBAAqB,EAC5B,OAAO,GAAE,uBAA4B,GACpC,gCAAgC,CAgGlC"}

package/dist/github/generate.js

@@ -0,0 +1,140 @@
+import { serializeGitHubAnnotationCommand } from "./escape.js";
+import { annotationFromFinding } from "./source-location.js";
+import { breachMessage as formatBreachMessage, findingByFingerprint } from "./types.js";
+const SEVERITY_ORDER = ["critical", "high", "medium", "minor"];
+const DEFAULT_MAX_ANNOTATIONS = 50;
+function breachPriority(breach) {
+    const severityBase = SEVERITY_ORDER.indexOf(breach.severity) * 10;
+    switch (breach.kind) {
+        case "new-finding":
+            return 100 + severityBase;
+        case "regressed-finding":
+            return 200 + severityBase;
+        case "expired-classification":
+            return 300 + severityBase;
+    }
+}
+function sortCandidates(candidates) {
+    return [...candidates].sort((a, b) => {
+        if (a.priority !== b.priority)
+            return a.priority - b.priority;
+        const title = a.annotation.title.localeCompare(b.annotation.title);
+        if (title !== 0)
+            return title;
+        return (a.annotation.fingerprint ?? "").localeCompare(b.annotation.fingerprint ?? "");
+    });
+}
+function operationalCandidates(runs, diagnostics) {
+    if (!runs)
+        return [];
+    const candidates = [];
+    for (const run of runs) {
+        if (run.status !== "failed")
+            continue;
+        const message = run.diagnostics.find((entry) => entry.severity === "error")?.message ??
+            run.skipReason ??
+            "Audit run failed.";
+        const route = run.route ?? run.flowId ?? "run";
+        candidates.push({
+            priority: 0,
+            annotation: {
+                level: "error",
+                title: `a11yst: ${route}`,
+                message: message.replace(/\s+/g, " ").trim(),
+                fingerprint: run.runId,
+            },
+        });
+        if (/password|token|authorization|cookie/i.test(message)) {
+            diagnostics.push({
+                code: "redacted-content",
+                level: "info",
+                message: "Operational annotation message may contain sensitive content.",
+            });
+        }
+    }
+    return candidates;
+}
+export function generateGitHubAnnotations(input, options = {}) {
+    const diagnostics = [];
+    const maxAnnotations = options.maxAnnotations ?? DEFAULT_MAX_ANNOTATIONS;
+    const candidates = operationalCandidates(input.runs, diagnostics);
+    const evaluation = input.policyEvaluation;
+    if (evaluation?.policyEnabled && evaluation.status === "not-evaluated") {
+        const message = evaluation.diagnostics.find((entry) => entry.level === "error")?.message ??
+            evaluation.diagnostics[0]?.message ??
+            "The enabled CI policy requires a baseline comparison.";
+        candidates.push({
+            priority: 1,
+            annotation: {
+                level: "error",
+                title: "a11yst CI policy was not evaluated",
+                message,
+            },
+        });
+    }
+    else if (evaluation?.policyEnabled && evaluation.status === "failed") {
+        for (const breach of evaluation.breaches) {
+            const finding = findingByFingerprint(input.findings, breach.fingerprint);
+            candidates.push({
+                priority: breachPriority(breach),
+                annotation: annotationFromFinding(finding, "error", `a11yst: ${breach.ruleId}`, formatBreachMessage(breach), breach.fingerprint, diagnostics),
+            });
+        }
+    }
+    const sorted = sortCandidates(candidates);
+    const truncated = Math.max(0, sorted.length - maxAnnotations);
+    let selected = sorted.slice(0, maxAnnotations);
+    if (truncated > 0) {
+        diagnostics.push({
+            code: "truncated-annotations",
+            level: "info",
+            message: `GitHub annotations truncated to ${maxAnnotations}.`,
+        });
+        if (selected.length < maxAnnotations) {
+            selected = sorted.slice(0, maxAnnotations);
+        }
+        else {
+            selected = sorted.slice(0, maxAnnotations - 1);
+            selected.push({
+                priority: 9999,
+                annotation: {
+                    level: "notice",
+                    title: "a11yst annotations truncated",
+                    message: `${truncated} additional annotations were not emitted.`,
+                },
+            });
+        }
+    }
+    const annotations = selected.map((candidate) => candidate.annotation);
+    const commands = annotations.length === 0
+        ? ""
+        : `${annotations
+            .map((annotation) => serializeGitHubAnnotationCommand({
+            level: annotation.level,
+            title: annotation.title,
+            message: annotation.message,
+            ...(annotation.file ? { file: annotation.file } : {}),
+            ...(annotation.line !== undefined ? { line: annotation.line } : {}),
+            ...(annotation.column !== undefined ? { column: annotation.column } : {}),
+            ...(annotation.endLine !== undefined ? { endLine: annotation.endLine } : {}),
+            ...(annotation.endColumn !== undefined ? { endColumn: annotation.endColumn } : {}),
+        }))
+            .join("\n")}\n`;
+    const summary = {
+        annotations: annotations.length,
+        errors: annotations.filter((annotation) => annotation.level === "error").length,
+        warnings: annotations.filter((annotation) => annotation.level === "warning").length,
+        notices: annotations.filter((annotation) => annotation.level === "notice").length,
+        truncated,
+    };
+    return {
+        annotations,
+        commands,
+        summary,
+        diagnostics: [...diagnostics].sort((a, b) => {
+            const byCode = a.code.localeCompare(b.code);
+            return byCode !== 0 ? byCode : a.message.localeCompare(b.message);
+        }),
+    };
+}
+//# sourceMappingURL=generate.js.map

package/dist/github/generate.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"generate.js","sourceRoot":"","sources":["../../src/github/generate.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,gCAAgC,EAAE,MAAM,aAAa,CAAC;AAC/D,OAAO,EAAE,qBAAqB,EAAE,MAAM,sBAAsB,CAAC;AAQ7D,OAAO,EAAE,aAAa,IAAI,mBAAmB,EAAE,oBAAoB,EAAE,MAAM,YAAY,CAAC;AAExF,MAAM,cAAc,GAAe,CAAC,UAAU,EAAE,MAAM,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC;AAC3E,MAAM,uBAAuB,GAAG,EAAE,CAAC;AAOnC,SAAS,cAAc,CAAC,MAAoB;IAC1C,MAAM,YAAY,GAAG,cAAc,CAAC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,EAAE,CAAC;IAClE,QAAQ,MAAM,CAAC,IAAI,EAAE,CAAC;QACpB,KAAK,aAAa;YAChB,OAAO,GAAG,GAAG,YAAY,CAAC;QAC5B,KAAK,mBAAmB;YACtB,OAAO,GAAG,GAAG,YAAY,CAAC;QAC5B,KAAK,wBAAwB;YAC3B,OAAO,GAAG,GAAG,YAAY,CAAC;IAC9B,CAAC;AACH,CAAC;AAED,SAAS,cAAc,CAAC,UAAuB;IAC7C,OAAO,CAAC,GAAG,UAAU,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE;QACnC,IAAI,CAAC,CAAC,QAAQ,KAAK,CAAC,CAAC,QAAQ;YAAE,OAAO,CAAC,CAAC,QAAQ,GAAG,CAAC,CAAC,QAAQ,CAAC;QAC9D,MAAM,KAAK,GAAG,CAAC,CAAC,UAAU,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;QACnE,IAAI,KAAK,KAAK,CAAC;YAAE,OAAO,KAAK,CAAC;QAC9B,OAAO,CAAC,CAAC,CAAC,UAAU,CAAC,WAAW,IAAI,EAAE,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,UAAU,CAAC,WAAW,IAAI,EAAE,CAAC,CAAC;IACxF,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,qBAAqB,CAC5B,IAAkC,EAClC,WAAyC;IAEzC,IAAI,CAAC,IAAI;QAAE,OAAO,EAAE,CAAC;IACrB,MAAM,UAAU,GAAgB,EAAE,CAAC;IACnC,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,IAAI,GAAG,CAAC,MAAM,KAAK,QAAQ;YAAE,SAAS;QACtC,MAAM,OAAO,GACX,GAAG,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,QAAQ,KAAK,OAAO,CAAC,EAAE,OAAO;YACpE,GAAG,CAAC,UAAU;YACd,mBAAmB,CAAC;QACtB,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,IAAI,GAAG,CAAC,MAAM,IAAI,KAAK,CAAC;QAC/C,UAAU,CAAC,IAAI,CAAC;YACd,QAAQ,EAAE,CAAC;YACX,UAAU,EAAE;gBACV,KAAK,EAAE,OAAO;gBACd,KAAK,EAAE,WAAW,KAAK,EAAE;gBACzB,OAAO,EAAE,OAAO,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE;gBAC5C,WAAW,EAAE,GAAG,CAAC,KAAK;aACvB;SACF,CAAC,CAAC;QACH,IAAI,sCAAsC,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;YACzD,WAAW,CAAC,IAAI,CAAC;gBACf,IAAI,EAAE,kBAAkB;gBACxB,KAAK,EAAE,MAAM;gBACb,OAAO,EAAE,+DAA+D;aACzE,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IACD,OAAO,UAAU,CAAC;AACpB,CAAC;AAED,MAAM,UAAU,yBAAyB,CACvC,KAA4B,EAC5B,UAAmC,EAAE;IAErC,MAAM,WAAW,GAAiC,EAAE,CAAC;IACrD,MAAM,cAAc,GAAG,OAAO,CAAC,cAAc,IAAI,uBAAuB,CAAC;IACzE,MAAM,UAAU,GAAgB,qBAAqB,CAAC,KAAK,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC;IAE/E,MAAM,UAAU,GAAG,KAAK,CAAC,gBAAgB,CAAC;IAC1C,IAAI,UAAU,EAAE,aAAa,IAAI,UAAU,CAAC,MAAM,KAAK,eAAe,EAAE,CAAC;QACvE,MAAM,OAAO,GACX,UAAU,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,KAAK,KAAK,OAAO,CAAC,EAAE,OAAO;YACxE,UAAU,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,OAAO;YAClC,uDAAuD,CAAC;QAC1D,UAAU,CAAC,IAAI,CAAC;YACd,QAAQ,EAAE,CAAC;YACX,UAAU,EAAE;gBACV,KAAK,EAAE,OAAO;gBACd,KAAK,EAAE,oCAAoC;gBAC3C,OAAO;aACR;SACF,CAAC,CAAC;IACL,CAAC;SAAM,IAAI,UAAU,EAAE,aAAa,IAAI,UAAU,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;QACvE,KAAK,MAAM,MAAM,IAAI,UAAU,CAAC,QAAQ,EAAE,CAAC;YACzC,MAAM,OAAO,GAAG,oBAAoB,CAAC,KAAK,CAAC,QAAQ,EAAE,MAAM,CAAC,WAAW,CAAC,CAAC;YACzE,UAAU,CAAC,IAAI,CAAC;gBACd,QAAQ,EAAE,cAAc,CAAC,MAAM,CAAC;gBAChC,UAAU,EAAE,qBAAqB,CAC/B,OAAO,EACP,OAAO,EACP,WAAW,MAAM,CAAC,MAAM,EAAE,EAC1B,mBAAmB,CAAC,MAAM,CAAC,EAC3B,MAAM,CAAC,WAAW,EAClB,WAAW,CACZ;aACF,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,MAAM,MAAM,GAAG,cAAc,CAAC,UAAU,CAAC,CAAC;IAC1C,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,MAAM,CAAC,MAAM,GAAG,cAAc,CAAC,CAAC;IAC9D,IAAI,QAAQ,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,cAAc,CAAC,CAAC;IAC/C,IAAI,SAAS,GAAG,CAAC,EAAE,CAAC;QAClB,WAAW,CAAC,IAAI,CAAC;YACf,IAAI,EAAE,uBAAuB;YAC7B,KAAK,EAAE,MAAM;YACb,OAAO,EAAE,mCAAmC,cAAc,GAAG;SAC9D,CAAC,CAAC;QACH,IAAI,QAAQ,CAAC,MAAM,GAAG,cAAc,EAAE,CAAC;YACrC,QAAQ,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,cAAc,CAAC,CAAC;QAC7C,CAAC;aAAM,CAAC;YACN,QAAQ,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,cAAc,GAAG,CAAC,CAAC,CAAC;YAC/C,QAAQ,CAAC,IAAI,CAAC;gBACZ,QAAQ,EAAE,IAAI;gBACd,UAAU,EAAE;oBACV,KAAK,EAAE,QAAQ;oBACf,KAAK,EAAE,8BAA8B;oBACrC,OAAO,EAAE,GAAG,SAAS,2CAA2C;iBACjE;aACF,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,MAAM,WAAW,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC;IACtE,MAAM,QAAQ,GACZ,WAAW,CAAC,MAAM,KAAK,CAAC;QACtB,CAAC,CAAC,EAAE;QACJ,CAAC,CAAC,GAAG,WAAW;aACX,GAAG,CAAC,CAAC,UAAU,EAAE,EAAE,CAClB,gCAAgC,CAAC;YAC/B,KAAK,EAAE,UAAU,CAAC,KAAK;YACvB,KAAK,EAAE,UAAU,CAAC,KAAK;YACvB,OAAO,EAAE,UAAU,CAAC,OAAO;YAC3B,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,UAAU,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACrD,GAAG,CAAC,UAAU,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,UAAU,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACnE,GAAG,CAAC,UAAU,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,UAAU,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACzE,GAAG,CAAC,UAAU,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,UAAU,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC5E,GAAG,CAAC,UAAU,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,UAAU,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACnF,CAAC,CACH;aACA,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC;IAExB,MAAM,OAAO,GAAG;QACd,WAAW,EAAE,WAAW,CAAC,MAAM;QAC/B,MAAM,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,UAAU,CAAC,KAAK,KAAK,OAAO,CAAC,CAAC,MAAM;QAC/E,QAAQ,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,UAAU,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,MAAM;QACnF,OAAO,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,UAAU,CAAC,KAAK,KAAK,QAAQ,CAAC,CAAC,MAAM;QACjF,SAAS;KACV,CAAC;IAEF,OAAO;QACL,WAAW;QACX,QAAQ;QACR,OAAO;QACP,WAAW,EAAE,CAAC,GAAG,WAAW,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE;YAC1C,MAAM,MAAM,GAAG,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;YAC5C,OAAO,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;QACpE,CAAC,CAAC;KACH,CAAC;AACJ,CAAC"}

package/dist/github/source-location.d.ts

@@ -0,0 +1,4 @@
+import type { Finding } from "@a11yst/types";
+import type { GitHubAnnotation, GitHubAnnotationDiagnostic } from "./types.js";
+export declare function annotationFromFinding(finding: Finding | undefined, level: GitHubAnnotation["level"], title: string, message: string, fingerprint: string, diagnostics: GitHubAnnotationDiagnostic[]): GitHubAnnotation;
+//# sourceMappingURL=source-location.d.ts.map

package/dist/github/source-location.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"source-location.d.ts","sourceRoot":"","sources":["../../src/github/source-location.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,eAAe,CAAC;AAC7C,OAAO,KAAK,EAAE,gBAAgB,EAAE,0BAA0B,EAAE,MAAM,YAAY,CAAC;AAgB/E,wBAAgB,qBAAqB,CACnC,OAAO,EAAE,OAAO,GAAG,SAAS,EAC5B,KAAK,EAAE,gBAAgB,CAAC,OAAO,CAAC,EAChC,KAAK,EAAE,MAAM,EACb,OAAO,EAAE,MAAM,EACf,WAAW,EAAE,MAAM,EACnB,WAAW,EAAE,0BAA0B,EAAE,GACxC,gBAAgB,CA+DlB"}

package/dist/github/source-location.js

@@ -0,0 +1,69 @@
+import { validateSourceLocation } from "@a11yst/sarif";
+import { formatReportSourceLocation, resolveFindingRecommendationSummary, resolveFindingReportSource, } from "../finding-source-report.js";
+function flatLegacyRegion(location) {
+    return {
+        startLine: location.region.start.line,
+        startColumn: location.region.start.column,
+        endLine: location.region.end?.line,
+        endColumn: location.region.end?.column,
+    };
+}
+export function annotationFromFinding(finding, level, title, message, fingerprint, diagnostics) {
+    let composedMessage = message;
+    const recommendation = finding ? resolveFindingRecommendationSummary(finding) : undefined;
+    if (recommendation?.title) {
+        composedMessage = `${composedMessage} Suggested review: ${recommendation.title}.`;
+    }
+    if (!finding) {
+        return { level, title, message: composedMessage, fingerprint };
+    }
+    const source = resolveFindingReportSource(finding);
+    if (source.status === "ambiguous") {
+        const count = source.alternatives?.length ?? 0;
+        return {
+            level,
+            title,
+            message: `${composedMessage} Source location is ambiguous${count > 0 ? ` (${count} alternatives)` : ""}.`,
+            fingerprint,
+        };
+    }
+    if (source.status !== "mapped" || !source.location) {
+        return { level, title, message: composedMessage, fingerprint };
+    }
+    const confidence = source.confidence ?? "medium";
+    if (confidence === "medium" || confidence === "low") {
+        const locationText = formatReportSourceLocation(source.location);
+        return {
+            level,
+            title,
+            message: `${composedMessage} Probable source ${locationText} (${confidence} confidence).`,
+            fingerprint,
+        };
+    }
+    const validated = validateSourceLocation({
+        uri: source.location.uri,
+        ...flatLegacyRegion(source.location),
+    });
+    if (!validated) {
+        diagnostics.push({
+            code: "invalid-source-location",
+            level: "warning",
+            message: `Omitted invalid source location for fingerprint ${fingerprint.slice(0, 8)}.`,
+        });
+        return { level, title, message: composedMessage, fingerprint };
+    }
+    return {
+        level,
+        title,
+        message: composedMessage,
+        file: validated.uri,
+        line: validated.region.startLine,
+        ...(validated.region.startColumn !== undefined
+            ? { column: validated.region.startColumn }
+            : {}),
+        ...(validated.region.endLine !== undefined ? { endLine: validated.region.endLine } : {}),
+        ...(validated.region.endColumn !== undefined ? { endColumn: validated.region.endColumn } : {}),
+        fingerprint,
+    };
+}
+//# sourceMappingURL=source-location.js.map

package/dist/github/source-location.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"source-location.js","sourceRoot":"","sources":["../../src/github/source-location.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,sBAAsB,EAAE,MAAM,eAAe,CAAC;AAGvD,OAAO,EACL,0BAA0B,EAC1B,mCAAmC,EACnC,0BAA0B,GAC3B,MAAM,6BAA6B,CAAC;AAErC,SAAS,gBAAgB,CAAC,QAAgF;IACxG,OAAO;QACL,SAAS,EAAE,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI;QACrC,WAAW,EAAE,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM;QACzC,OAAO,EAAE,QAAQ,CAAC,MAAM,CAAC,GAAG,EAAE,IAAI;QAClC,SAAS,EAAE,QAAQ,CAAC,MAAM,CAAC,GAAG,EAAE,MAAM;KACvC,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,qBAAqB,CACnC,OAA4B,EAC5B,KAAgC,EAChC,KAAa,EACb,OAAe,EACf,WAAmB,EACnB,WAAyC;IAEzC,IAAI,eAAe,GAAG,OAAO,CAAC;IAC9B,MAAM,cAAc,GAAG,OAAO,CAAC,CAAC,CAAC,mCAAmC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAC1F,IAAI,cAAc,EAAE,KAAK,EAAE,CAAC;QAC1B,eAAe,GAAG,GAAG,eAAe,sBAAsB,cAAc,CAAC,KAAK,GAAG,CAAC;IACpF,CAAC;IAED,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,eAAe,EAAE,WAAW,EAAE,CAAC;IACjE,CAAC;IAED,MAAM,MAAM,GAAG,0BAA0B,CAAC,OAAO,CAAC,CAAC;IACnD,IAAI,MAAM,CAAC,MAAM,KAAK,WAAW,EAAE,CAAC;QAClC,MAAM,KAAK,GAAG,MAAM,CAAC,YAAY,EAAE,MAAM,IAAI,CAAC,CAAC;QAC/C,OAAO;YACL,KAAK;YACL,KAAK;YACL,OAAO,EAAE,GAAG,eAAe,gCAAgC,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,KAAK,gBAAgB,CAAC,CAAC,CAAC,EAAE,GAAG;YACzG,WAAW;SACZ,CAAC;IACJ,CAAC;IAED,IAAI,MAAM,CAAC,MAAM,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC;QACnD,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,eAAe,EAAE,WAAW,EAAE,CAAC;IACjE,CAAC;IAED,MAAM,UAAU,GAAG,MAAM,CAAC,UAAU,IAAI,QAAQ,CAAC;IACjD,IAAI,UAAU,KAAK,QAAQ,IAAI,UAAU,KAAK,KAAK,EAAE,CAAC;QACpD,MAAM,YAAY,GAAG,0BAA0B,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QACjE,OAAO;YACL,KAAK;YACL,KAAK;YACL,OAAO,EAAE,GAAG,eAAe,oBAAoB,YAAY,KAAK,UAAU,eAAe;YACzF,WAAW;SACZ,CAAC;IACJ,CAAC;IAED,MAAM,SAAS,GAAG,sBAAsB,CAAC;QACvC,GAAG,EAAE,MAAM,CAAC,QAAQ,CAAC,GAAG;QACxB,GAAG,gBAAgB,CAAC,MAAM,CAAC,QAAQ,CAAC;KACrC,CAAC,CAAC;IACH,IAAI,CAAC,SAAS,EAAE,CAAC;QACf,WAAW,CAAC,IAAI,CAAC;YACf,IAAI,EAAE,yBAAyB;YAC/B,KAAK,EAAE,SAAS;YAChB,OAAO,EAAE,mDAAmD,WAAW,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG;SACvF,CAAC,CAAC;QACH,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,eAAe,EAAE,WAAW,EAAE,CAAC;IACjE,CAAC;IAED,OAAO;QACL,KAAK;QACL,KAAK;QACL,OAAO,EAAE,eAAe;QACxB,IAAI,EAAE,SAAS,CAAC,GAAG;QACnB,IAAI,EAAE,SAAS,CAAC,MAAM,CAAC,SAAS;QAChC,GAAG,CAAC,SAAS,CAAC,MAAM,CAAC,WAAW,KAAK,SAAS;YAC5C,CAAC,CAAC,EAAE,MAAM,EAAE,SAAS,CAAC,MAAM,CAAC,WAAW,EAAE;YAC1C,CAAC,CAAC,EAAE,CAAC;QACP,GAAG,CAAC,SAAS,CAAC,MAAM,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,SAAS,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACxF,GAAG,CAAC,SAAS,CAAC,MAAM,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,SAAS,CAAC,MAAM,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC9F,WAAW;KACZ,CAAC;AACJ,CAAC"}

package/dist/github/types.d.ts

@@ -0,0 +1,42 @@
+import type { AuditRunResult, Finding, FindingLocation, PolicyBreach } from "@a11yst/types";
+import type { MarkdownReportInput } from "../markdown/types.js";
+export type GitHubAnnotationLevel = "error" | "warning" | "notice";
+export type GitHubAnnotation = {
+    level: GitHubAnnotationLevel;
+    title: string;
+    message: string;
+    file?: string;
+    line?: number;
+    column?: number;
+    endLine?: number;
+    endColumn?: number;
+    fingerprint?: string;
+};
+export type GitHubAnnotationInput = MarkdownReportInput & {
+    runs?: AuditRunResult[];
+};
+export type GitHubAnnotationOptions = {
+    maxAnnotations?: number;
+};
+export type GitHubAnnotationDiagnosticCode = "truncated-annotations" | "invalid-source-location" | "redacted-content";
+export type GitHubAnnotationDiagnostic = {
+    code: GitHubAnnotationDiagnosticCode;
+    level: "info" | "warning" | "error";
+    message: string;
+};
+export type GitHubAnnotationGenerationResult = {
+    annotations: GitHubAnnotation[];
+    commands: string;
+    summary: {
+        annotations: number;
+        errors: number;
+        warnings: number;
+        notices: number;
+        truncated: number;
+    };
+    diagnostics: GitHubAnnotationDiagnostic[];
+};
+export declare function formatBreachLocation(location: FindingLocation): string;
+export declare function breachMessage(breach: PolicyBreach): string;
+export declare function findingByFingerprint(findings: Finding[], fingerprint: string): Finding | undefined;
+//# sourceMappingURL=types.d.ts.map

package/dist/github/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/github/types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,OAAO,EAAE,eAAe,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAC5F,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,sBAAsB,CAAC;AAEhE,MAAM,MAAM,qBAAqB,GAAG,OAAO,GAAG,SAAS,GAAG,QAAQ,CAAC;AAEnE,MAAM,MAAM,gBAAgB,GAAG;IAC7B,KAAK,EAAE,qBAAqB,CAAC;IAC7B,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB,CAAC;AAEF,MAAM,MAAM,qBAAqB,GAAG,mBAAmB,GAAG;IACxD,IAAI,CAAC,EAAE,cAAc,EAAE,CAAC;CACzB,CAAC;AAEF,MAAM,MAAM,uBAAuB,GAAG;IACpC,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB,CAAC;AAEF,MAAM,MAAM,8BAA8B,GACtC,uBAAuB,GACvB,yBAAyB,GACzB,kBAAkB,CAAC;AAEvB,MAAM,MAAM,0BAA0B,GAAG;IACvC,IAAI,EAAE,8BAA8B,CAAC;IACrC,KAAK,EAAE,MAAM,GAAG,SAAS,GAAG,OAAO,CAAC;IACpC,OAAO,EAAE,MAAM,CAAC;CACjB,CAAC;AAEF,MAAM,MAAM,gCAAgC,GAAG;IAC7C,WAAW,EAAE,gBAAgB,EAAE,CAAC;IAChC,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE;QACP,WAAW,EAAE,MAAM,CAAC;QACpB,MAAM,EAAE,MAAM,CAAC;QACf,QAAQ,EAAE,MAAM,CAAC;QACjB,OAAO,EAAE,MAAM,CAAC;QAChB,SAAS,EAAE,MAAM,CAAC;KACnB,CAAC;IACF,WAAW,EAAE,0BAA0B,EAAE,CAAC;CAC3C,CAAC;AAEF,wBAAgB,oBAAoB,CAAC,QAAQ,EAAE,eAAe,GAAG,MAAM,CAKtE;AAED,wBAAgB,aAAa,CAAC,MAAM,EAAE,YAAY,GAAG,MAAM,CAQ1D;AAED,wBAAgB,oBAAoB,CAClC,QAAQ,EAAE,OAAO,EAAE,EACnB,WAAW,EAAE,MAAM,GAClB,OAAO,GAAG,SAAS,CAErB"}

package/dist/github/types.js

@@ -0,0 +1,18 @@
+export function formatBreachLocation(location) {
+    if (location.kind === "route") {
+        return `route ${location.route}`;
+    }
+    return `flow ${location.flowId} / ${location.checkpointId}`;
+}
+export function breachMessage(breach) {
+    const prefix = breach.kind === "new-finding"
+        ? "New"
+        : breach.kind === "regressed-finding"
+            ? "Regressed"
+            : "Expired classification breach for";
+    return `${prefix} ${breach.severity} accessibility finding in ${breach.projectName} at ${formatBreachLocation(breach.location)}. Fingerprint: ${breach.fingerprint.slice(0, 8)}.`;
+}
+export function findingByFingerprint(findings, fingerprint) {
+    return findings.find((finding) => finding.fingerprint === fingerprint);
+}
+//# sourceMappingURL=types.js.map

package/dist/github/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/github/types.ts"],"names":[],"mappings":"AAiDA,MAAM,UAAU,oBAAoB,CAAC,QAAyB;IAC5D,IAAI,QAAQ,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;QAC9B,OAAO,SAAS,QAAQ,CAAC,KAAK,EAAE,CAAC;IACnC,CAAC;IACD,OAAO,QAAQ,QAAQ,CAAC,MAAM,MAAM,QAAQ,CAAC,YAAY,EAAE,CAAC;AAC9D,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,MAAoB;IAChD,MAAM,MAAM,GACV,MAAM,CAAC,IAAI,KAAK,aAAa;QAC3B,CAAC,CAAC,KAAK;QACP,CAAC,CAAC,MAAM,CAAC,IAAI,KAAK,mBAAmB;YACnC,CAAC,CAAC,WAAW;YACb,CAAC,CAAC,mCAAmC,CAAC;IAC5C,OAAO,GAAG,MAAM,IAAI,MAAM,CAAC,QAAQ,6BAA6B,MAAM,CAAC,WAAW,OAAO,oBAAoB,CAAC,MAAM,CAAC,QAAQ,CAAC,kBAAkB,MAAM,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC;AACpL,CAAC;AAED,MAAM,UAAU,oBAAoB,CAClC,QAAmB,EACnB,WAAmB;IAEnB,OAAO,QAAQ,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,WAAW,KAAK,WAAW,CAAC,CAAC;AACzE,CAAC"}

package/dist/html.d.ts

@@ -0,0 +1,8 @@
+import type { AuditExecutionResult } from "@a11yst/types";
+import { type LoadedProfileEvidence } from "./profile-evidence.js";
+export interface RenderHtmlReportOptions {
+    auditId?: string;
+    loadedProfileEvidence?: Map<string, LoadedProfileEvidence>;
+}
+export declare function renderHtmlReport(auditResult: AuditExecutionResult, options?: RenderHtmlReportOptions): string;
+//# sourceMappingURL=html.d.ts.map

package/dist/html.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"html.d.ts","sourceRoot":"","sources":["../src/html.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,oBAAoB,EAMrB,MAAM,eAAe,CAAC;AAevB,OAAO,EACL,KAAK,qBAAqB,EAE3B,MAAM,uBAAuB,CAAC;AAwe/B,MAAM,WAAW,uBAAuB;IACtC,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,qBAAqB,CAAC,EAAE,GAAG,CAAC,MAAM,EAAE,qBAAqB,CAAC,CAAC;CAC5D;AA4DD,wBAAgB,gBAAgB,CAC9B,WAAW,EAAE,oBAAoB,EACjC,OAAO,GAAE,uBAA4B,GACpC,MAAM,CA0KR"}