@ash-technologia/fathom 0.1.0

package/dist/analyzers/testing/index.js

@@ -0,0 +1,134 @@
+import { createFindingId } from '../../core/findings.js';
+import { createTimer } from '../../utils/timing.js';
+const TEST_DIR_NAMES = new Set([
+    'test',
+    'tests',
+    '__tests__',
+    'spec',
+    'specs',
+    'e2e',
+    'integration',
+    'unit',
+    'test-utils',
+    'testing',
+]);
+/**
+ * Common test script names in package.json scripts.
+ */
+const TEST_SCRIPT_NAMES = [
+    'test',
+    'test:unit',
+    'test:integration',
+    'test:e2e',
+    'vitest',
+    'jest',
+    'mocha',
+    'jasmine',
+];
+export class TestingAnalyzer {
+    id = 'testing';
+    name = 'Testing';
+    category = 'testing';
+    description = 'Checks for test infrastructure: directories, test files, and test scripts.';
+    async analyze(context) {
+        const elapsed = createTimer();
+        const findings = [];
+        const warnings = [];
+        const testFiles = context.files.filter((f) => f.isTest);
+        const sourceFiles = context.files.filter((f) => f.isSource && !f.isTest);
+        // TEST-001: Test directories
+        const allDirs = new Set();
+        for (const file of context.files) {
+            const parts = file.relativePath.split('/');
+            for (let i = 1; i < parts.length; i++) {
+                allDirs.add(parts[i - 1] ?? '');
+            }
+        }
+        const testDirs = [...allDirs].filter((d) => TEST_DIR_NAMES.has(d.toLowerCase()));
+        if (testDirs.length === 0 && context.files.filter((f) => f.isSource).length > 0) {
+            findings.push({
+                id: createFindingId('TEST-001'),
+                ruleId: 'TEST-001',
+                category: 'testing',
+                severity: 'low',
+                title: 'No standard test directory found',
+                description: 'No directories matching common test naming conventions (test, tests, __tests__, spec, etc.) were detected.',
+                recommendation: 'Create a test directory and add tests for your source code.',
+                confidence: 0.8,
+                autoFixable: false,
+            });
+        }
+        // TEST-002: Test files
+        if (testFiles.length === 0) {
+            findings.push({
+                id: createFindingId('TEST-002'),
+                ruleId: 'TEST-002',
+                category: 'testing',
+                severity: 'medium',
+                title: 'No test files detected',
+                description: 'No files matching common test naming conventions were found.',
+                recommendation: 'Add tests for your source code to improve reliability.',
+                confidence: 0.85,
+                autoFixable: false,
+            });
+        }
+        // TEST-003: Test scripts in package.json
+        let hasTestScript = false;
+        if (context.manifests.packageJson?.scripts) {
+            const scripts = context.manifests.packageJson.scripts;
+            hasTestScript = TEST_SCRIPT_NAMES.some((name) => name in scripts);
+            if (!hasTestScript) {
+                findings.push({
+                    id: createFindingId('TEST-003'),
+                    ruleId: 'TEST-003',
+                    category: 'testing',
+                    severity: 'medium',
+                    title: 'No test script in package.json',
+                    description: 'A "test" script makes it easy to run tests consistently.',
+                    recommendation: 'Add a "test" script to package.json.',
+                    confidence: 0.9,
+                    location: { file: 'package.json' },
+                    autoFixable: false,
+                });
+            }
+        }
+        // TEST-004: Test-to-source ratio heuristic
+        const ratio = sourceFiles.length > 0 ? testFiles.length / sourceFiles.length : 0;
+        let ratioSeverity = 'info';
+        if (ratio === 0 && sourceFiles.length > 5)
+            ratioSeverity = 'medium';
+        else if (ratio < 0.1 && sourceFiles.length > 10)
+            ratioSeverity = 'low';
+        if (ratio < 0.1 && sourceFiles.length > 5) {
+            findings.push({
+                id: createFindingId('TEST-004', 'ratio'),
+                ruleId: 'TEST-004',
+                category: 'testing',
+                severity: ratioSeverity,
+                title: 'Low test-to-source file ratio',
+                description: `Test files represent only ${(ratio * 100).toFixed(0)}% of source files (${testFiles.length} tests vs ${sourceFiles.length} source files).`,
+                recommendation: 'Increase test coverage for critical application logic.',
+                confidence: 0.7,
+                autoFixable: false,
+            });
+        }
+        const metrics = {
+            testFiles: testFiles.length,
+            sourceFiles: sourceFiles.length,
+            testDirs: testDirs,
+            hasTestScript,
+            testToSourceRatio: +ratio.toFixed(2),
+        };
+        return {
+            analyzerId: this.id,
+            analyzerName: this.name,
+            category: this.category,
+            status: 'success',
+            findings,
+            metrics,
+            durationMs: elapsed(),
+            warnings,
+        };
+    }
+}
+//# sourceMappingURL=index.js.map

package/dist/analyzers/testing/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/analyzers/testing/index.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AACzD,OAAO,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAC;AAEpD,MAAM,cAAc,GAAG,IAAI,GAAG,CAAC;IAC7B,MAAM;IACN,OAAO;IACP,WAAW;IACX,MAAM;IACN,OAAO;IACP,KAAK;IACL,aAAa;IACb,MAAM;IACN,YAAY;IACZ,SAAS;CACV,CAAC,CAAC;AAEH;;GAEG;AACH,MAAM,iBAAiB,GAAG;IACxB,MAAM;IACN,WAAW;IACX,kBAAkB;IAClB,UAAU;IACV,QAAQ;IACR,MAAM;IACN,OAAO;IACP,SAAS;CACV,CAAC;AAEF,MAAM,OAAO,eAAe;IACjB,EAAE,GAAG,SAAS,CAAC;IACf,IAAI,GAAG,SAAS,CAAC;IACjB,QAAQ,GAAG,SAAkB,CAAC;IAC9B,WAAW,GAClB,4EAA4E,CAAC;IAE/E,KAAK,CAAC,OAAO,CAAC,OAA0B;QACtC,MAAM,OAAO,GAAG,WAAW,EAAE,CAAC;QAC9B,MAAM,QAAQ,GAAc,EAAE,CAAC;QAC/B,MAAM,QAAQ,GAAa,EAAE,CAAC;QAE9B,MAAM,SAAS,GAAG,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;QACxD,MAAM,WAAW,GAAG,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;QAEzE,6BAA6B;QAC7B,MAAM,OAAO,GAAG,IAAI,GAAG,EAAU,CAAC;QAClC,KAAK,MAAM,IAAI,IAAI,OAAO,CAAC,KAAK,EAAE,CAAC;YACjC,MAAM,KAAK,GAAG,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YAC3C,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;gBACtC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;YAClC,CAAC;QACH,CAAC;QAED,MAAM,QAAQ,GAAG,CAAC,GAAG,OAAO,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC;QAEjF,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,IAAI,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAChF,QAAQ,CAAC,IAAI,CAAC;gBACZ,EAAE,EAAE,eAAe,CAAC,UAAU,CAAC;gBAC/B,MAAM,EAAE,UAAU;gBAClB,QAAQ,EAAE,SAAS;gBACnB,QAAQ,EAAE,KAAK;gBACf,KAAK,EAAE,kCAAkC;gBACzC,WAAW,EACT,4GAA4G;gBAC9G,cAAc,EAAE,6DAA6D;gBAC7E,UAAU,EAAE,GAAG;gBACf,WAAW,EAAE,KAAK;aACnB,CAAC,CAAC;QACL,CAAC;QAED,uBAAuB;QACvB,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC3B,QAAQ,CAAC,IAAI,CAAC;gBACZ,EAAE,EAAE,eAAe,CAAC,UAAU,CAAC;gBAC/B,MAAM,EAAE,UAAU;gBAClB,QAAQ,EAAE,SAAS;gBACnB,QAAQ,EAAE,QAAQ;gBAClB,KAAK,EAAE,wBAAwB;gBAC/B,WAAW,EAAE,8DAA8D;gBAC3E,cAAc,EAAE,wDAAwD;gBACxE,UAAU,EAAE,IAAI;gBAChB,WAAW,EAAE,KAAK;aACnB,CAAC,CAAC;QACL,CAAC;QAED,yCAAyC;QACzC,IAAI,aAAa,GAAG,KAAK,CAAC;QAC1B,IAAI,OAAO,CAAC,SAAS,CAAC,WAAW,EAAE,OAAO,EAAE,CAAC;YAC3C,MAAM,OAAO,GAAG,OAAO,CAAC,SAAS,CAAC,WAAW,CAAC,OAAO,CAAC;YACtD,aAAa,GAAG,iBAAiB,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,IAAI,OAAO,CAAC,CAAC;YAClE,IAAI,CAAC,aAAa,EAAE,CAAC;gBACnB,QAAQ,CAAC,IAAI,CAAC;oBACZ,EAAE,EAAE,eAAe,CAAC,UAAU,CAAC;oBAC/B,MAAM,EAAE,UAAU;oBAClB,QAAQ,EAAE,SAAS;oBACnB,QAAQ,EAAE,QAAQ;oBAClB,KAAK,EAAE,gCAAgC;oBACvC,WAAW,EAAE,0DAA0D;oBACvE,cAAc,EAAE,sCAAsC;oBACtD,UAAU,EAAE,GAAG;oBACf,QAAQ,EAAE,EAAE,IAAI,EAAE,cAAc,EAAE;oBAClC,WAAW,EAAE,KAAK;iBACnB,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAED,2CAA2C;QAC3C,MAAM,KAAK,GAAG,WAAW,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,MAAM,GAAG,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;QAEjF,IAAI,aAAa,GAA8B,MAAM,CAAC;QACtD,IAAI,KAAK,KAAK,CAAC,IAAI,WAAW,CAAC,MAAM,GAAG,CAAC;YAAE,aAAa,GAAG,QAAQ,CAAC;aAC/D,IAAI,KAAK,GAAG,GAAG,IAAI,WAAW,CAAC,MAAM,GAAG,EAAE;YAAE,aAAa,GAAG,KAAK,CAAC;QAEvE,IAAI,KAAK,GAAG,GAAG,IAAI,WAAW,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC1C,QAAQ,CAAC,IAAI,CAAC;gBACZ,EAAE,EAAE,eAAe,CAAC,UAAU,EAAE,OAAO,CAAC;gBACxC,MAAM,EAAE,UAAU;gBAClB,QAAQ,EAAE,SAAS;gBACnB,QAAQ,EAAE,aAAa;gBACvB,KAAK,EAAE,+BAA+B;gBACtC,WAAW,EAAE,6BAA6B,CAAC,KAAK,GAAG,GAAG,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,sBAAsB,SAAS,CAAC,MAAM,aAAa,WAAW,CAAC,MAAM,iBAAiB;gBACxJ,cAAc,EAAE,wDAAwD;gBACxE,UAAU,EAAE,GAAG;gBACf,WAAW,EAAE,KAAK;aACnB,CAAC,CAAC;QACL,CAAC;QAED,MAAM,OAAO,GAAY;YACvB,SAAS,EAAE,SAAS,CAAC,MAAM;YAC3B,WAAW,EAAE,WAAW,CAAC,MAAM;YAC/B,QAAQ,EAAE,QAAQ;YAClB,aAAa;YACb,iBAAiB,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;SACrC,CAAC;QAEF,OAAO;YACL,UAAU,EAAE,IAAI,CAAC,EAAE;YACnB,YAAY,EAAE,IAAI,CAAC,IAAI;YACvB,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,MAAM,EAAE,SAAS;YACjB,QAAQ;YACR,OAAO;YACP,UAAU,EAAE,OAAO,EAAE;YACrB,QAAQ;SACT,CAAC;IACJ,CAAC;CACF"}

package/dist/baseline/baseline.d.ts

@@ -0,0 +1,20 @@
+import type { AnalysisResult } from '../core/result.js';
+import type { BaselineData } from './types.js';
+export declare const CURRENT_BASELINE_SCHEMA_VERSION = "1.0";
+export declare const BASELINE_DIR_NAME = ".fathom";
+export declare const BASELINE_FILE_NAME = "baseline.json";
+/**
+ * Get the absolute path to the baseline file for a given repository root.
+ */
+export declare function getBaselinePath(repositoryRoot: string): string;
+/**
+ * Save an AnalysisResult as a deterministic baseline file in .fathom/baseline.json.
+ */
+export declare function saveBaseline(repositoryRoot: string, result: AnalysisResult): Promise<string>;
+/**
+ * Load and validate .fathom/baseline.json from a repository root.
+ * Throws FathomBaselineMissingError if missing.
+ * Throws FathomBaselineCorruptError if malformed or invalid schema.
+ */
+export declare function loadBaseline(repositoryRoot: string): Promise<BaselineData>;
+//# sourceMappingURL=baseline.d.ts.map

package/dist/baseline/baseline.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"baseline.d.ts","sourceRoot":"","sources":["../../src/baseline/baseline.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AAExD,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAG/C,eAAO,MAAM,+BAA+B,QAAQ,CAAC;AACrD,eAAO,MAAM,iBAAiB,YAAY,CAAC;AAC3C,eAAO,MAAM,kBAAkB,kBAAkB,CAAC;AAElD;;GAEG;AACH,wBAAgB,eAAe,CAAC,cAAc,EAAE,MAAM,GAAG,MAAM,CAE9D;AAqCD;;GAEG;AACH,wBAAsB,YAAY,CAChC,cAAc,EAAE,MAAM,EACtB,MAAM,EAAE,cAAc,GACrB,OAAO,CAAC,MAAM,CAAC,CA4CjB;AAED;;;;GAIG;AACH,wBAAsB,YAAY,CAAC,cAAc,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,CAAC,CAmDhF"}

package/dist/baseline/baseline.js

@@ -0,0 +1,134 @@
+import fs from 'node:fs/promises';
+import path from 'node:path';
+import { FathomBaselineMissingError, FathomBaselineCorruptError } from '../core/errors.js';
+export const CURRENT_BASELINE_SCHEMA_VERSION = '1.0';
+export const BASELINE_DIR_NAME = '.fathom';
+export const BASELINE_FILE_NAME = 'baseline.json';
+/**
+ * Get the absolute path to the baseline file for a given repository root.
+ */
+export function getBaselinePath(repositoryRoot) {
+    return path.resolve(repositoryRoot, BASELINE_DIR_NAME, BASELINE_FILE_NAME);
+}
+/**
+ * Sanitize a finding for baseline storage.
+ * Ensures evidence never contains secrets and repository code is never stored.
+ */
+function sanitizeFindingForBaseline(f) {
+    const finding = {
+        id: f.id,
+        ruleId: f.ruleId,
+        category: f.category,
+        severity: f.severity,
+        title: f.title,
+        description: f.description,
+        recommendation: f.recommendation,
+        confidence: f.confidence,
+        autoFixable: f.autoFixable,
+    };
+    if (f.location) {
+        finding.location = {};
+        if (f.location.file !== undefined)
+            finding.location.file = f.location.file;
+        if (f.location.line !== undefined)
+            finding.location.line = f.location.line;
+        if (f.location.column !== undefined)
+            finding.location.column = f.location.column;
+    }
+    if (f.evidence) {
+        finding.evidence = f.evidence.slice(0, 200);
+    }
+    if (f.references) {
+        finding.references = [...f.references];
+    }
+    return finding;
+}
+/**
+ * Save an AnalysisResult as a deterministic baseline file in .fathom/baseline.json.
+ */
+export async function saveBaseline(repositoryRoot, result) {
+    const baselinePath = getBaselinePath(repositoryRoot);
+    const baselineDir = path.dirname(baselinePath);
+    // Ensure .fathom directory exists
+    await fs.mkdir(baselineDir, { recursive: true });
+    // Map analyzer metrics
+    const metrics = {};
+    for (const analyzer of result.analyzers) {
+        metrics[analyzer.analyzerId] = analyzer.metrics;
+    }
+    const baselineData = {
+        schemaVersion: CURRENT_BASELINE_SCHEMA_VERSION,
+        fathomVersion: result.fathomVersion,
+        createdAt: result.timestamp,
+        repositoryPath: path.basename(result.repositoryPath),
+        score: {
+            overall: result.score.overall,
+            band: result.score.band,
+            categories: result.score.categories.map((c) => ({
+                category: c.category,
+                score: c.score,
+                maxScore: c.maxScore,
+                weight: c.weight,
+                findingCount: c.findingCount,
+            })),
+        },
+        // Sort findings stably by ruleId and file for deterministic output
+        findings: result.findings.map(sanitizeFindingForBaseline).sort((a, b) => {
+            const cmpRule = a.ruleId.localeCompare(b.ruleId);
+            if (cmpRule !== 0)
+                return cmpRule;
+            const fileA = a.location?.file ?? '';
+            const fileB = b.location?.file ?? '';
+            return fileA.localeCompare(fileB);
+        }),
+        metrics,
+    };
+    const json = JSON.stringify(baselineData, null, 2);
+    await fs.writeFile(baselinePath, json + '\n', 'utf8');
+    return baselinePath;
+}
+/**
+ * Load and validate .fathom/baseline.json from a repository root.
+ * Throws FathomBaselineMissingError if missing.
+ * Throws FathomBaselineCorruptError if malformed or invalid schema.
+ */
+export async function loadBaseline(repositoryRoot) {
+    const baselinePath = getBaselinePath(repositoryRoot);
+    let rawContent;
+    try {
+        rawContent = await fs.readFile(baselinePath, 'utf8');
+    }
+    catch (err) {
+        const error = err;
+        if (error?.code === 'ENOENT') {
+            throw new FathomBaselineMissingError(baselinePath);
+        }
+        throw new FathomBaselineCorruptError(baselinePath, `Cannot read baseline file (${error?.message ?? String(err)})`);
+    }
+    let parsed;
+    try {
+        parsed = JSON.parse(rawContent);
+    }
+    catch {
+        throw new FathomBaselineCorruptError(baselinePath, 'File contains invalid JSON syntax');
+    }
+    if (typeof parsed !== 'object' || parsed === null || Array.isArray(parsed)) {
+        throw new FathomBaselineCorruptError(baselinePath, 'Expected a root JSON object');
+    }
+    const data = parsed;
+    // Validate required schema fields
+    if (!data.schemaVersion || typeof data.schemaVersion !== 'string') {
+        throw new FathomBaselineCorruptError(baselinePath, 'Missing or invalid "schemaVersion" field');
+    }
+    if (!data.score || typeof data.score !== 'object' || typeof data.score.overall !== 'number') {
+        throw new FathomBaselineCorruptError(baselinePath, 'Missing or invalid "score" object');
+    }
+    if (!Array.isArray(data.score.categories)) {
+        throw new FathomBaselineCorruptError(baselinePath, 'Missing or invalid "score.categories" array');
+    }
+    if (!Array.isArray(data.findings)) {
+        throw new FathomBaselineCorruptError(baselinePath, 'Missing or invalid "findings" array');
+    }
+    return data;
+}
+//# sourceMappingURL=baseline.js.map

package/dist/baseline/baseline.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"baseline.js","sourceRoot":"","sources":["../../src/baseline/baseline.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,kBAAkB,CAAC;AAClC,OAAO,IAAI,MAAM,WAAW,CAAC;AAI7B,OAAO,EAAE,0BAA0B,EAAE,0BAA0B,EAAE,MAAM,mBAAmB,CAAC;AAE3F,MAAM,CAAC,MAAM,+BAA+B,GAAG,KAAK,CAAC;AACrD,MAAM,CAAC,MAAM,iBAAiB,GAAG,SAAS,CAAC;AAC3C,MAAM,CAAC,MAAM,kBAAkB,GAAG,eAAe,CAAC;AAElD;;GAEG;AACH,MAAM,UAAU,eAAe,CAAC,cAAsB;IACpD,OAAO,IAAI,CAAC,OAAO,CAAC,cAAc,EAAE,iBAAiB,EAAE,kBAAkB,CAAC,CAAC;AAC7E,CAAC;AAED;;;GAGG;AACH,SAAS,0BAA0B,CAAC,CAAU;IAC5C,MAAM,OAAO,GAAY;QACvB,EAAE,EAAE,CAAC,CAAC,EAAE;QACR,MAAM,EAAE,CAAC,CAAC,MAAM;QAChB,QAAQ,EAAE,CAAC,CAAC,QAAQ;QACpB,QAAQ,EAAE,CAAC,CAAC,QAAQ;QACpB,KAAK,EAAE,CAAC,CAAC,KAAK;QACd,WAAW,EAAE,CAAC,CAAC,WAAW;QAC1B,cAAc,EAAE,CAAC,CAAC,cAAc;QAChC,UAAU,EAAE,CAAC,CAAC,UAAU;QACxB,WAAW,EAAE,CAAC,CAAC,WAAW;KAC3B,CAAC;IAEF,IAAI,CAAC,CAAC,QAAQ,EAAE,CAAC;QACf,OAAO,CAAC,QAAQ,GAAG,EAAE,CAAC;QACtB,IAAI,CAAC,CAAC,QAAQ,CAAC,IAAI,KAAK,SAAS;YAAE,OAAO,CAAC,QAAQ,CAAC,IAAI,GAAG,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC;QAC3E,IAAI,CAAC,CAAC,QAAQ,CAAC,IAAI,KAAK,SAAS;YAAE,OAAO,CAAC,QAAQ,CAAC,IAAI,GAAG,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC;QAC3E,IAAI,CAAC,CAAC,QAAQ,CAAC,MAAM,KAAK,SAAS;YAAE,OAAO,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC;IACnF,CAAC;IAED,IAAI,CAAC,CAAC,QAAQ,EAAE,CAAC;QACf,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;IAC9C,CAAC;IAED,IAAI,CAAC,CAAC,UAAU,EAAE,CAAC;QACjB,OAAO,CAAC,UAAU,GAAG,CAAC,GAAG,CAAC,CAAC,UAAU,CAAC,CAAC;IACzC,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,cAAsB,EACtB,MAAsB;IAEtB,MAAM,YAAY,GAAG,eAAe,CAAC,cAAc,CAAC,CAAC;IACrD,MAAM,WAAW,GAAG,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;IAE/C,kCAAkC;IAClC,MAAM,EAAE,CAAC,KAAK,CAAC,WAAW,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAEjD,uBAAuB;IACvB,MAAM,OAAO,GAA0C,EAAE,CAAC;IAC1D,KAAK,MAAM,QAAQ,IAAI,MAAM,CAAC,SAAS,EAAE,CAAC;QACxC,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAC,GAAG,QAAQ,CAAC,OAAO,CAAC;IAClD,CAAC;IAED,MAAM,YAAY,GAAiB;QACjC,aAAa,EAAE,+BAA+B;QAC9C,aAAa,EAAE,MAAM,CAAC,aAAa;QACnC,SAAS,EAAE,MAAM,CAAC,SAAS;QAC3B,cAAc,EAAE,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,cAAc,CAAC;QACpD,KAAK,EAAE;YACL,OAAO,EAAE,MAAM,CAAC,KAAK,CAAC,OAAO;YAC7B,IAAI,EAAE,MAAM,CAAC,KAAK,CAAC,IAAI;YACvB,UAAU,EAAE,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;gBAC9C,QAAQ,EAAE,CAAC,CAAC,QAAQ;gBACpB,KAAK,EAAE,CAAC,CAAC,KAAK;gBACd,QAAQ,EAAE,CAAC,CAAC,QAAQ;gBACpB,MAAM,EAAE,CAAC,CAAC,MAAM;gBAChB,YAAY,EAAE,CAAC,CAAC,YAAY;aAC7B,CAAC,CAAC;SACJ;QACD,mEAAmE;QACnE,QAAQ,EAAE,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,0BAA0B,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE;YACtE,MAAM,OAAO,GAAG,CAAC,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;YACjD,IAAI,OAAO,KAAK,CAAC;gBAAE,OAAO,OAAO,CAAC;YAClC,MAAM,KAAK,GAAG,CAAC,CAAC,QAAQ,EAAE,IAAI,IAAI,EAAE,CAAC;YACrC,MAAM,KAAK,GAAG,CAAC,CAAC,QAAQ,EAAE,IAAI,IAAI,EAAE,CAAC;YACrC,OAAO,KAAK,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC;QACpC,CAAC,CAAC;QACF,OAAO;KACR,CAAC;IAEF,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,YAAY,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;IACnD,MAAM,EAAE,CAAC,SAAS,CAAC,YAAY,EAAE,IAAI,GAAG,IAAI,EAAE,MAAM,CAAC,CAAC;IAEtD,OAAO,YAAY,CAAC;AACtB,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,cAAsB;IACvD,MAAM,YAAY,GAAG,eAAe,CAAC,cAAc,CAAC,CAAC;IAErD,IAAI,UAAkB,CAAC;IACvB,IAAI,CAAC;QACH,UAAU,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC;IACvD,CAAC;IAAC,OAAO,GAAY,EAAE,CAAC;QACtB,MAAM,KAAK,GAAG,GAA4B,CAAC;QAC3C,IAAI,KAAK,EAAE,IAAI,KAAK,QAAQ,EAAE,CAAC;YAC7B,MAAM,IAAI,0BAA0B,CAAC,YAAY,CAAC,CAAC;QACrD,CAAC;QACD,MAAM,IAAI,0BAA0B,CAClC,YAAY,EACZ,8BAA8B,KAAK,EAAE,OAAO,IAAI,MAAM,CAAC,GAAG,CAAC,GAAG,CAC/D,CAAC;IACJ,CAAC;IAED,IAAI,MAAe,CAAC;IACpB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;IAClC,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,0BAA0B,CAAC,YAAY,EAAE,mCAAmC,CAAC,CAAC;IAC1F,CAAC;IAED,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QAC3E,MAAM,IAAI,0BAA0B,CAAC,YAAY,EAAE,6BAA6B,CAAC,CAAC;IACpF,CAAC;IAED,MAAM,IAAI,GAAG,MAA+B,CAAC;IAE7C,kCAAkC;IAClC,IAAI,CAAC,IAAI,CAAC,aAAa,IAAI,OAAO,IAAI,CAAC,aAAa,KAAK,QAAQ,EAAE,CAAC;QAClE,MAAM,IAAI,0BAA0B,CAAC,YAAY,EAAE,0CAA0C,CAAC,CAAC;IACjG,CAAC;IAED,IAAI,CAAC,IAAI,CAAC,KAAK,IAAI,OAAO,IAAI,CAAC,KAAK,KAAK,QAAQ,IAAI,OAAO,IAAI,CAAC,KAAK,CAAC,OAAO,KAAK,QAAQ,EAAE,CAAC;QAC5F,MAAM,IAAI,0BAA0B,CAAC,YAAY,EAAE,mCAAmC,CAAC,CAAC;IAC1F,CAAC;IAED,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,EAAE,CAAC;QAC1C,MAAM,IAAI,0BAA0B,CAClC,YAAY,EACZ,6CAA6C,CAC9C,CAAC;IACJ,CAAC;IAED,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;QAClC,MAAM,IAAI,0BAA0B,CAAC,YAAY,EAAE,qCAAqC,CAAC,CAAC;IAC5F,CAAC;IAED,OAAO,IAAoB,CAAC;AAC9B,CAAC"}

package/dist/baseline/compare.d.ts

@@ -0,0 +1,14 @@
+import type { AnalysisResult } from '../core/result.js';
+import type { Finding } from '../core/findings.js';
+import type { BaselineData, ComparisonResult } from './types.js';
+/**
+ * Generate a stable identity key for a finding.
+ * Uses ruleId, normalized file path, and title.
+ * Excludes line numbers so that line shifts in source files do not produce false diffs.
+ */
+export declare function getStableFindingKey(finding: Finding): string;
+/**
+ * Compare a current AnalysisResult against a loaded BaselineData.
+ */
+export declare function compareWithBaseline(currentResult: AnalysisResult, baseline: BaselineData): ComparisonResult;
+//# sourceMappingURL=compare.d.ts.map

package/dist/baseline/compare.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"compare.d.ts","sourceRoot":"","sources":["../../src/baseline/compare.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AACxD,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,qBAAqB,CAAC;AACnD,OAAO,KAAK,EAAE,YAAY,EAAqB,gBAAgB,EAAiB,MAAM,YAAY,CAAC;AAEnG;;;;GAIG;AACH,wBAAgB,mBAAmB,CAAC,OAAO,EAAE,OAAO,GAAG,MAAM,CAK5D;AAED;;GAEG;AACH,wBAAgB,mBAAmB,CACjC,aAAa,EAAE,cAAc,EAC7B,QAAQ,EAAE,YAAY,GACrB,gBAAgB,CAqHlB"}

package/dist/baseline/compare.js

@@ -0,0 +1,113 @@
+/**
+ * Generate a stable identity key for a finding.
+ * Uses ruleId, normalized file path, and title.
+ * Excludes line numbers so that line shifts in source files do not produce false diffs.
+ */
+export function getStableFindingKey(finding) {
+    const fileKey = finding.location?.file
+        ? finding.location.file.replace(/\\/g, '/').toLowerCase()
+        : '__nofile__';
+    return `${finding.ruleId}:${fileKey}:${finding.title}`;
+}
+/**
+ * Compare a current AnalysisResult against a loaded BaselineData.
+ */
+export function compareWithBaseline(currentResult, baseline) {
+    const currentScore = currentResult.score.overall;
+    const baselineScore = baseline.score.overall;
+    const scoreDelta = currentScore - baselineScore;
+    // 1. Compare category scores
+    const categoryDiffs = [];
+    const baselineCategoryMap = new Map(baseline.score.categories.map((c) => [c.category, c.score]));
+    for (const currentCat of currentResult.score.categories) {
+        const baseCatScore = baselineCategoryMap.get(currentCat.category) ?? 100;
+        categoryDiffs.push({
+            category: currentCat.category,
+            baselineScore: baseCatScore,
+            currentScore: currentCat.score,
+            delta: currentCat.score - baseCatScore,
+        });
+    }
+    // 2. Stable 1-to-1 Finding Diffing
+    // Group by stable key
+    const baselineBuckets = new Map();
+    for (const finding of baseline.findings) {
+        const key = getStableFindingKey(finding);
+        const bucket = baselineBuckets.get(key) ?? [];
+        bucket.push(finding);
+        baselineBuckets.set(key, bucket);
+    }
+    const currentBuckets = new Map();
+    for (const finding of currentResult.findings) {
+        const key = getStableFindingKey(finding);
+        const bucket = currentBuckets.get(key) ?? [];
+        bucket.push(finding);
+        currentBuckets.set(key, bucket);
+    }
+    const newFindings = [];
+    const resolvedFindings = [];
+    const unchangedFindings = [];
+    const changedFindings = [];
+    // Union of all unique keys
+    const allKeys = new Set([...baselineBuckets.keys(), ...currentBuckets.keys()]);
+    for (const key of allKeys) {
+        const baseList = baselineBuckets.get(key) ?? [];
+        const currList = currentBuckets.get(key) ?? [];
+        const commonCount = Math.min(baseList.length, currList.length);
+        // Compare paired findings
+        for (let i = 0; i < commonCount; i++) {
+            const baseFinding = baseList[i];
+            const currFinding = currList[i];
+            if (!baseFinding || !currFinding)
+                continue;
+            const severityChanged = currFinding.severity !== baseFinding.severity;
+            const confidenceChanged = Math.abs(currFinding.confidence - baseFinding.confidence) > 0.05;
+            if (severityChanged || confidenceChanged) {
+                changedFindings.push({
+                    current: currFinding,
+                    baseline: baseFinding,
+                    severityChanged,
+                    confidenceChanged,
+                });
+            }
+            else {
+                unchangedFindings.push(currFinding);
+            }
+        }
+        // Surplus in current -> newly introduced
+        if (currList.length > commonCount) {
+            newFindings.push(...currList.slice(commonCount));
+        }
+        // Surplus in baseline -> resolved
+        if (baseList.length > commonCount) {
+            resolvedFindings.push(...baseList.slice(commonCount));
+        }
+    }
+    // 3. Determine if regression occurred
+    // Regression is flagged if:
+    // - Overall score decreased
+    // - Any individual category score decreased
+    // - Newly introduced critical or high severity finding
+    // - Existing finding escalated to critical or high severity
+    const scoreDecreased = scoreDelta < 0;
+    const anyCategoryDecreased = categoryDiffs.some((d) => d.delta < 0);
+    const newCriticalOrHigh = newFindings.some((f) => f.severity === 'critical' || f.severity === 'high');
+    const escalatedToCriticalOrHigh = changedFindings.some((cf) => (cf.current.severity === 'critical' || cf.current.severity === 'high') &&
+        cf.baseline.severity !== 'critical' &&
+        cf.baseline.severity !== 'high');
+    const isRegression = scoreDecreased || anyCategoryDecreased || newCriticalOrHigh || escalatedToCriticalOrHigh;
+    return {
+        baselineTimestamp: baseline.createdAt,
+        baselineVersion: baseline.fathomVersion,
+        baselineScore,
+        currentScore,
+        scoreDelta,
+        isRegression,
+        categoryDiffs,
+        newFindings,
+        resolvedFindings,
+        unchangedFindings,
+        changedFindings,
+    };
+}
+//# sourceMappingURL=compare.js.map

package/dist/baseline/compare.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"compare.js","sourceRoot":"","sources":["../../src/baseline/compare.ts"],"names":[],"mappings":"AAIA;;;;GAIG;AACH,MAAM,UAAU,mBAAmB,CAAC,OAAgB;IAClD,MAAM,OAAO,GAAG,OAAO,CAAC,QAAQ,EAAE,IAAI;QACpC,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,WAAW,EAAE;QACzD,CAAC,CAAC,YAAY,CAAC;IACjB,OAAO,GAAG,OAAO,CAAC,MAAM,IAAI,OAAO,IAAI,OAAO,CAAC,KAAK,EAAE,CAAC;AACzD,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,mBAAmB,CACjC,aAA6B,EAC7B,QAAsB;IAEtB,MAAM,YAAY,GAAG,aAAa,CAAC,KAAK,CAAC,OAAO,CAAC;IACjD,MAAM,aAAa,GAAG,QAAQ,CAAC,KAAK,CAAC,OAAO,CAAC;IAC7C,MAAM,UAAU,GAAG,YAAY,GAAG,aAAa,CAAC;IAEhD,6BAA6B;IAC7B,MAAM,aAAa,GAAwB,EAAE,CAAC;IAC9C,MAAM,mBAAmB,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IAEjG,KAAK,MAAM,UAAU,IAAI,aAAa,CAAC,KAAK,CAAC,UAAU,EAAE,CAAC;QACxD,MAAM,YAAY,GAAG,mBAAmB,CAAC,GAAG,CAAC,UAAU,CAAC,QAAQ,CAAC,IAAI,GAAG,CAAC;QACzE,aAAa,CAAC,IAAI,CAAC;YACjB,QAAQ,EAAE,UAAU,CAAC,QAAQ;YAC7B,aAAa,EAAE,YAAY;YAC3B,YAAY,EAAE,UAAU,CAAC,KAAK;YAC9B,KAAK,EAAE,UAAU,CAAC,KAAK,GAAG,YAAY;SACvC,CAAC,CAAC;IACL,CAAC;IAED,mCAAmC;IACnC,sBAAsB;IACtB,MAAM,eAAe,GAAG,IAAI,GAAG,EAAqB,CAAC;IACrD,KAAK,MAAM,OAAO,IAAI,QAAQ,CAAC,QAAQ,EAAE,CAAC;QACxC,MAAM,GAAG,GAAG,mBAAmB,CAAC,OAAO,CAAC,CAAC;QACzC,MAAM,MAAM,GAAG,eAAe,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC;QAC9C,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACrB,eAAe,CAAC,GAAG,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;IACnC,CAAC;IAED,MAAM,cAAc,GAAG,IAAI,GAAG,EAAqB,CAAC;IACpD,KAAK,MAAM,OAAO,IAAI,aAAa,CAAC,QAAQ,EAAE,CAAC;QAC7C,MAAM,GAAG,GAAG,mBAAmB,CAAC,OAAO,CAAC,CAAC;QACzC,MAAM,MAAM,GAAG,cAAc,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC;QAC7C,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACrB,cAAc,CAAC,GAAG,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;IAClC,CAAC;IAED,MAAM,WAAW,GAAc,EAAE,CAAC;IAClC,MAAM,gBAAgB,GAAc,EAAE,CAAC;IACvC,MAAM,iBAAiB,GAAc,EAAE,CAAC;IACxC,MAAM,eAAe,GAAoB,EAAE,CAAC;IAE5C,2BAA2B;IAC3B,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,eAAe,CAAC,IAAI,EAAE,EAAE,GAAG,cAAc,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;IAE/E,KAAK,MAAM,GAAG,IAAI,OAAO,EAAE,CAAC;QAC1B,MAAM,QAAQ,GAAG,eAAe,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC;QAChD,MAAM,QAAQ,GAAG,cAAc,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC;QAE/C,MAAM,WAAW,GAAG,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,MAAM,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC;QAE/D,0BAA0B;QAC1B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,WAAW,EAAE,CAAC,EAAE,EAAE,CAAC;YACrC,MAAM,WAAW,GAAG,QAAQ,CAAC,CAAC,CAAC,CAAC;YAChC,MAAM,WAAW,GAAG,QAAQ,CAAC,CAAC,CAAC,CAAC;YAChC,IAAI,CAAC,WAAW,IAAI,CAAC,WAAW;gBAAE,SAAS;YAE3C,MAAM,eAAe,GAAG,WAAW,CAAC,QAAQ,KAAK,WAAW,CAAC,QAAQ,CAAC;YACtE,MAAM,iBAAiB,GAAG,IAAI,CAAC,GAAG,CAAC,WAAW,CAAC,UAAU,GAAG,WAAW,CAAC,UAAU,CAAC,GAAG,IAAI,CAAC;YAE3F,IAAI,eAAe,IAAI,iBAAiB,EAAE,CAAC;gBACzC,eAAe,CAAC,IAAI,CAAC;oBACnB,OAAO,EAAE,WAAW;oBACpB,QAAQ,EAAE,WAAW;oBACrB,eAAe;oBACf,iBAAiB;iBAClB,CAAC,CAAC;YACL,CAAC;iBAAM,CAAC;gBACN,iBAAiB,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;YACtC,CAAC;QACH,CAAC;QAED,yCAAyC;QACzC,IAAI,QAAQ,CAAC,MAAM,GAAG,WAAW,EAAE,CAAC;YAClC,WAAW,CAAC,IAAI,CAAC,GAAG,QAAQ,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC;QACnD,CAAC;QAED,kCAAkC;QAClC,IAAI,QAAQ,CAAC,MAAM,GAAG,WAAW,EAAE,CAAC;YAClC,gBAAgB,CAAC,IAAI,CAAC,GAAG,QAAQ,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC;QACxD,CAAC;IACH,CAAC;IAED,sCAAsC;IACtC,4BAA4B;IAC5B,4BAA4B;IAC5B,4CAA4C;IAC5C,uDAAuD;IACvD,4DAA4D;IAC5D,MAAM,cAAc,GAAG,UAAU,GAAG,CAAC,CAAC;IACtC,MAAM,oBAAoB,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC;IACpE,MAAM,iBAAiB,GAAG,WAAW,CAAC,IAAI,CACxC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,UAAU,IAAI,CAAC,CAAC,QAAQ,KAAK,MAAM,CAC1D,CAAC;IACF,MAAM,yBAAyB,GAAG,eAAe,CAAC,IAAI,CACpD,CAAC,EAAE,EAAE,EAAE,CACL,CAAC,EAAE,CAAC,OAAO,CAAC,QAAQ,KAAK,UAAU,IAAI,EAAE,CAAC,OAAO,CAAC,QAAQ,KAAK,MAAM,CAAC;QACtE,EAAE,CAAC,QAAQ,CAAC,QAAQ,KAAK,UAAU;QACnC,EAAE,CAAC,QAAQ,CAAC,QAAQ,KAAK,MAAM,CAClC,CAAC;IAEF,MAAM,YAAY,GAChB,cAAc,IAAI,oBAAoB,IAAI,iBAAiB,IAAI,yBAAyB,CAAC;IAE3F,OAAO;QACL,iBAAiB,EAAE,QAAQ,CAAC,SAAS;QACrC,eAAe,EAAE,QAAQ,CAAC,aAAa;QACvC,aAAa;QACb,YAAY;QACZ,UAAU;QACV,YAAY;QACZ,aAAa;QACb,WAAW;QACX,gBAAgB;QAChB,iBAAiB;QACjB,eAAe;KAChB,CAAC;AACJ,CAAC"}

package/dist/baseline/types.d.ts

@@ -0,0 +1,25 @@
+import type { Finding } from '../core/findings.js';
+import type { HealthScore, Metrics, CategoryScoreDiff, FindingChange, ComparisonResult } from '../core/result.js';
+export type { CategoryScoreDiff, FindingChange, ComparisonResult };
+/**
+ * Persisted format for .fathom/baseline.json.
+ * Versioned for future compatibility.
+ * Contains only metadata, findings, scores, and metrics — NEVER raw source code or secrets.
+ */
+export interface BaselineData {
+    /** Baseline schema version (currently "1.0") */
+    schemaVersion: string;
+    /** Fathom CLI version that generated the baseline */
+    fathomVersion: string;
+    /** ISO timestamp of when the baseline was created */
+    createdAt: string;
+    /** Relative or resolved repository path */
+    repositoryPath: string;
+    /** Overall health score and category breakdown */
+    score: HealthScore;
+    /** Sanitized findings from the baseline analysis */
+    findings: Finding[];
+    /** Metrics map from all analyzers */
+    metrics: Record<string, Metrics>;
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/baseline/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/baseline/types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,qBAAqB,CAAC;AACnD,OAAO,KAAK,EACV,WAAW,EACX,OAAO,EACP,iBAAiB,EACjB,aAAa,EACb,gBAAgB,EACjB,MAAM,mBAAmB,CAAC;AAE3B,YAAY,EAAE,iBAAiB,EAAE,aAAa,EAAE,gBAAgB,EAAE,CAAC;AAEnE;;;;GAIG;AACH,MAAM,WAAW,YAAY;IAC3B,gDAAgD;IAChD,aAAa,EAAE,MAAM,CAAC;IACtB,qDAAqD;IACrD,aAAa,EAAE,MAAM,CAAC;IACtB,qDAAqD;IACrD,SAAS,EAAE,MAAM,CAAC;IAClB,2CAA2C;IAC3C,cAAc,EAAE,MAAM,CAAC;IACvB,kDAAkD;IAClD,KAAK,EAAE,WAAW,CAAC;IACnB,oDAAoD;IACpD,QAAQ,EAAE,OAAO,EAAE,CAAC;IACpB,qCAAqC;IACrC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAClC"}

package/dist/baseline/types.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=types.js.map

package/dist/baseline/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/baseline/types.ts"],"names":[],"mappings":""}

package/dist/cli/commands.d.ts

@@ -0,0 +1,39 @@
+export interface AnalyzeOptions {
+    json?: boolean;
+    sarif?: boolean;
+    html?: string | boolean;
+    ci?: boolean;
+    failUnder?: number;
+    /** Show all findings in terminal output (no 10-finding cap) */
+    verbose?: boolean;
+    /** Write JSON or SARIF output to this file instead of stdout */
+    output?: string;
+    /** Save the current analysis as baseline in .fathom/baseline.json */
+    baseline?: boolean;
+    /** Compare current analysis against .fathom/baseline.json */
+    compare?: boolean;
+    /** Analyze changes introduced by Git diff against base ref */
+    diff?: string | boolean;
+    /** Write Markdown PR summary (to file or GITHUB_STEP_SUMMARY) */
+    summary?: string | boolean;
+    /** Post PR summary comment to GitHub pull request (requires GITHUB_TOKEN) */
+    prComment?: boolean;
+    /** Display architecture model, layers, and boundary checks */
+    architecture?: boolean;
+    /** Display dependency intelligence breakdown */
+    deps?: boolean;
+    /** Enable online dependency vulnerability and freshness checks */
+    online?: boolean;
+}
+/**
+ * Exit codes:
+ * 0 = success
+ * 1 = analysis completed but threshold / high-severity findings triggered
+ * 2 = invalid usage / config error
+ * 3 = unexpected failure
+ */
+/**
+ * The main analyze command.
+ */
+export declare function analyzeCommand(targetPath: string, options: AnalyzeOptions): Promise<void>;
+//# sourceMappingURL=commands.d.ts.map

package/dist/cli/commands.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"commands.d.ts","sourceRoot":"","sources":["../../src/cli/commands.ts"],"names":[],"mappings":"AA8BA,MAAM,WAAW,cAAc;IAC7B,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,IAAI,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC;IACxB,EAAE,CAAC,EAAE,OAAO,CAAC;IACb,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,+DAA+D;IAC/D,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,gEAAgE;IAChE,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,qEAAqE;IACrE,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,6DAA6D;IAC7D,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,8DAA8D;IAC9D,IAAI,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC;IACxB,iEAAiE;IACjE,OAAO,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC;IAC3B,6EAA6E;IAC7E,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,8DAA8D;IAC9D,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB,gDAAgD;IAChD,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,kEAAkE;IAClE,MAAM,CAAC,EAAE,OAAO,CAAC;CAClB;AAED;;;;;;GAMG;AAEH;;GAEG;AACH,wBAAsB,cAAc,CAAC,UAAU,EAAE,MAAM,EAAE,OAAO,EAAE,cAAc,GAAG,OAAO,CAAC,IAAI,CAAC,CAiR/F"}