@flagshark/core 1.3.1 → 1.4.0

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AACA,cAAc,sBAAsB,CAAA;AAGpC,OAAO,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAA;AACjD,YAAY,EAAE,SAAS,EAAE,gBAAgB,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAA;AAGlF,OAAO,EAAE,YAAY,EAAE,MAAM,cAAc,CAAA;AAC3C,YAAY,EAAE,WAAW,EAAE,MAAM,cAAc,CAAA;AAG/C,OAAO,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAA;AACzC,YAAY,EAAE,eAAe,EAAE,cAAc,EAAE,UAAU,EAAE,MAAM,gBAAgB,CAAA;AAGjF,cAAc,mBAAmB,CAAA"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AACA,cAAc,sBAAsB,CAAA;AAGpC,OAAO,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAA;AACjD,YAAY,EAAE,SAAS,EAAE,gBAAgB,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAA;AAGlF,OAAO,EAAE,YAAY,EAAE,MAAM,cAAc,CAAA;AAC3C,YAAY,EAAE,WAAW,EAAE,MAAM,cAAc,CAAA;AAG/C,OAAO,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAA;AACzC,YAAY,EAAE,eAAe,EAAE,cAAc,EAAE,UAAU,EAAE,MAAM,gBAAgB,CAAA;AAGjF,cAAc,mBAAmB,CAAA;AAGjC,cAAc,mBAAmB,CAAA;AAGjC,cAAc,sBAAsB,CAAA"}

package/dist/index.js

@@ -8,4 +8,8 @@ export { collectFiles } from './scanner.js';
 export { scanRepo } from './scan-repo.js';
 // Config module
 export * from './config/index.js';
+// Output formatters
+export * from './output/index.js';
+// Platform integration providers
+export * from './providers/index.js';
 //# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,wCAAwC;AACxC,cAAc,sBAAsB,CAAA;AAEpC,+BAA+B;AAC/B,OAAO,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAA;AAGjD,gDAAgD;AAChD,OAAO,EAAE,YAAY,EAAE,MAAM,cAAc,CAAA;AAG3C,kCAAkC;AAClC,OAAO,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAA;AAGzC,gBAAgB;AAChB,cAAc,mBAAmB,CAAA"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,wCAAwC;AACxC,cAAc,sBAAsB,CAAA;AAEpC,+BAA+B;AAC/B,OAAO,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAA;AAGjD,gDAAgD;AAChD,OAAO,EAAE,YAAY,EAAE,MAAM,cAAc,CAAA;AAG3C,kCAAkC;AAClC,OAAO,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAA;AAGzC,gBAAgB;AAChB,cAAc,mBAAmB,CAAA;AAEjC,oBAAoB;AACpB,cAAc,mBAAmB,CAAA;AAEjC,iCAAiC;AACjC,cAAc,sBAAsB,CAAA"}

package/dist/output/csv.d.ts

@@ -0,0 +1,9 @@
+/**
+ * RFC 4180-compliant CSV output. One row per stale flag.
+ *
+ * Header columns: flag, file, line, language, provider, signals, age
+ * Multi-value `signals` are joined with `; ` inside a single quoted cell.
+ */
+import type { ScanRepoResult } from '../scan-repo.js';
+export declare function formatCsv(result: ScanRepoResult): string;
+//# sourceMappingURL=csv.d.ts.map

package/dist/output/csv.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"csv.d.ts","sourceRoot":"","sources":["../../src/output/csv.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAA;AAUrD,wBAAgB,SAAS,CAAC,MAAM,EAAE,cAAc,GAAG,MAAM,CAqBxD"}

package/dist/output/csv.js

@@ -0,0 +1,31 @@
+/**
+ * RFC 4180-compliant CSV output. One row per stale flag.
+ *
+ * Header columns: flag, file, line, language, provider, signals, age
+ * Multi-value `signals` are joined with `; ` inside a single quoted cell.
+ */
+const HEADER = 'flag,file,line,language,provider,signals,age,severity';
+/** RFC 4180 cell escape: wrap in quotes; double any internal quotes. */
+function csvCell(value) {
+    const s = value == null ? '' : String(value);
+    return `"${s.replace(/"/g, '""')}"`;
+}
+export function formatCsv(result) {
+    const lines = [HEADER];
+    for (const flag of result.staleFlags) {
+        const signals = flag.signals.map((s) => s.type).join('; ');
+        const severity = flag.signals.some((s) => s.severity === 'error') ? 'error' : 'warning';
+        lines.push([
+            csvCell(flag.name),
+            csvCell(flag.filePath),
+            String(flag.lineNumber),
+            csvCell(flag.language),
+            csvCell(flag.provider),
+            csvCell(signals),
+            csvCell(flag.age),
+            csvCell(severity),
+        ].join(','));
+    }
+    return lines.join('\n') + '\n';
+}
+//# sourceMappingURL=csv.js.map

package/dist/output/csv.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"csv.js","sourceRoot":"","sources":["../../src/output/csv.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAIH,MAAM,MAAM,GAAG,uDAAuD,CAAA;AAEtE,wEAAwE;AACxE,SAAS,OAAO,CAAC,KAAkC;IACjD,MAAM,CAAC,GAAG,KAAK,IAAI,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;IAC5C,OAAO,IAAI,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC,GAAG,CAAA;AACrC,CAAC;AAED,MAAM,UAAU,SAAS,CAAC,MAAsB;IAC9C,MAAM,KAAK,GAAa,CAAC,MAAM,CAAC,CAAA;IAEhC,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,UAAU,EAAE,CAAC;QACrC,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QAC1D,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAA;QACvF,KAAK,CAAC,IAAI,CACR;YACE,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC;YAClB,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC;YACtB,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC;YACvB,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC;YACtB,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC;YACtB,OAAO,CAAC,OAAO,CAAC;YAChB,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC;YACjB,OAAO,CAAC,QAAQ,CAAC;SAClB,CAAC,IAAI,CAAC,GAAG,CAAC,CACZ,CAAA;IACH,CAAC;IAED,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI,CAAA;AAChC,CAAC"}

package/dist/output/index.d.ts

@@ -0,0 +1,8 @@
+export { formatText, type TextFormatOptions } from './text.js';
+export { formatJson, type JsonFormatOptions } from './json.js';
+export { formatMarkdown, type MarkdownFormatOptions } from './markdown.js';
+export { formatCsv } from './csv.js';
+export { formatSarif, type SarifFormatOptions } from './sarif.js';
+export { selectFormatter, type FormatName, type Formatter, type UnifiedFormatOptions } from './select.js';
+export { healthEmoji, uniqueStaleCount, sarifLevel } from './shared.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/output/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/output/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,KAAK,iBAAiB,EAAE,MAAM,WAAW,CAAA;AAC9D,OAAO,EAAE,UAAU,EAAE,KAAK,iBAAiB,EAAE,MAAM,WAAW,CAAA;AAC9D,OAAO,EAAE,cAAc,EAAE,KAAK,qBAAqB,EAAE,MAAM,eAAe,CAAA;AAC1E,OAAO,EAAE,SAAS,EAAE,MAAM,UAAU,CAAA;AACpC,OAAO,EAAE,WAAW,EAAE,KAAK,kBAAkB,EAAE,MAAM,YAAY,CAAA;AACjE,OAAO,EAAE,eAAe,EAAE,KAAK,UAAU,EAAE,KAAK,SAAS,EAAE,KAAK,oBAAoB,EAAE,MAAM,aAAa,CAAA;AACzG,OAAO,EAAE,WAAW,EAAE,gBAAgB,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA"}

package/dist/output/index.js

@@ -0,0 +1,8 @@
+export { formatText } from './text.js';
+export { formatJson } from './json.js';
+export { formatMarkdown } from './markdown.js';
+export { formatCsv } from './csv.js';
+export { formatSarif } from './sarif.js';
+export { selectFormatter } from './select.js';
+export { healthEmoji, uniqueStaleCount, sarifLevel } from './shared.js';
+//# sourceMappingURL=index.js.map

package/dist/output/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/output/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAA0B,MAAM,WAAW,CAAA;AAC9D,OAAO,EAAE,UAAU,EAA0B,MAAM,WAAW,CAAA;AAC9D,OAAO,EAAE,cAAc,EAA8B,MAAM,eAAe,CAAA;AAC1E,OAAO,EAAE,SAAS,EAAE,MAAM,UAAU,CAAA;AACpC,OAAO,EAAE,WAAW,EAA2B,MAAM,YAAY,CAAA;AACjE,OAAO,EAAE,eAAe,EAA8D,MAAM,aAAa,CAAA;AACzG,OAAO,EAAE,WAAW,EAAE,gBAAgB,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA"}

package/dist/output/json.d.ts

@@ -0,0 +1,13 @@
+/**
+ * JSON output for FlagShark scan results.
+ *
+ * This is the STABLE OUTPUT API — downstream tooling (the Action, custom CI
+ * scripts, the hosted SaaS) can rely on the shape produced here.
+ */
+import type { ScanRepoResult } from '../scan-repo.js';
+export interface JsonFormatOptions {
+    /** Library version to embed in the output (`version` field). */
+    version: string;
+}
+export declare function formatJson(result: ScanRepoResult, options: JsonFormatOptions): string;
+//# sourceMappingURL=json.d.ts.map

package/dist/output/json.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"json.d.ts","sourceRoot":"","sources":["../../src/output/json.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAA;AAErD,MAAM,WAAW,iBAAiB;IAChC,gEAAgE;IAChE,OAAO,EAAE,MAAM,CAAA;CAChB;AAED,wBAAgB,UAAU,CAAC,MAAM,EAAE,cAAc,EAAE,OAAO,EAAE,iBAAiB,GAAG,MAAM,CAuCrF"}

package/dist/output/json.js

@@ -0,0 +1,43 @@
+/**
+ * JSON output for FlagShark scan results.
+ *
+ * This is the STABLE OUTPUT API — downstream tooling (the Action, custom CI
+ * scripts, the hosted SaaS) can rely on the shape produced here.
+ */
+export function formatJson(result, options) {
+    const languages = { ...result.languageBreakdown };
+    const flags = result.staleFlags.map((sf) => {
+        const flagSeverity = sf.signals.some((s) => s.severity === 'error') ? 'error' : 'warning';
+        return {
+            name: sf.name,
+            file: sf.filePath,
+            line: sf.lineNumber,
+            language: sf.language,
+            provider: sf.provider,
+            stale: true,
+            severity: flagSeverity,
+            signals: sf.signals.map((s) => ({ type: s.type, severity: s.severity, description: s.description })),
+            age: sf.age ?? null,
+        };
+    });
+    const errorCount = result.staleFlags.filter((sf) => sf.signals.some((s) => s.severity === 'error')).length;
+    const output = {
+        version: options.version,
+        totalFlags: result.totalFlags,
+        staleFlags: new Set(result.staleFlags.map((f) => f.name)).size,
+        errorCount,
+        healthScore: result.healthScore,
+        detectedProviders: result.detectedProviders,
+        languages,
+        flags,
+        excludedPaths: result.excludedPaths,
+        scanDuration: result.scanDuration,
+        links: {
+            dashboard: 'https://flagshark.com',
+            cli: 'https://github.com/FlagShark/flagshark',
+            npm: 'https://www.npmjs.com/package/flagshark',
+        },
+    };
+    return JSON.stringify(output, null, 2);
+}
+//# sourceMappingURL=json.js.map

package/dist/output/json.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"json.js","sourceRoot":"","sources":["../../src/output/json.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AASH,MAAM,UAAU,UAAU,CAAC,MAAsB,EAAE,OAA0B;IAC3E,MAAM,SAAS,GAA2B,EAAE,GAAG,MAAM,CAAC,iBAAiB,EAAE,CAAA;IAEzE,MAAM,KAAK,GAAG,MAAM,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE;QACzC,MAAM,YAAY,GAAwB,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAA;QAC9G,OAAO;YACL,IAAI,EAAE,EAAE,CAAC,IAAI;YACb,IAAI,EAAE,EAAE,CAAC,QAAQ;YACjB,IAAI,EAAE,EAAE,CAAC,UAAU;YACnB,QAAQ,EAAE,EAAE,CAAC,QAAQ;YACrB,QAAQ,EAAE,EAAE,CAAC,QAAQ;YACrB,KAAK,EAAE,IAAI;YACX,QAAQ,EAAE,YAAY;YACtB,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC,QAAQ,EAAE,WAAW,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC;YACpG,GAAG,EAAE,EAAE,CAAC,GAAG,IAAI,IAAI;SACpB,CAAA;IACH,CAAC,CAAC,CAAA;IAEF,MAAM,UAAU,GAAG,MAAM,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,MAAM,CAAA;IAE1G,MAAM,MAAM,GAAG;QACb,OAAO,EAAE,OAAO,CAAC,OAAO;QACxB,UAAU,EAAE,MAAM,CAAC,UAAU;QAC7B,UAAU,EAAE,IAAI,GAAG,CAAC,MAAM,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI;QAC9D,UAAU;QACV,WAAW,EAAE,MAAM,CAAC,WAAW;QAC/B,iBAAiB,EAAE,MAAM,CAAC,iBAAiB;QAC3C,SAAS;QACT,KAAK;QACL,aAAa,EAAE,MAAM,CAAC,aAAa;QACnC,YAAY,EAAE,MAAM,CAAC,YAAY;QACjC,KAAK,EAAE;YACL,SAAS,EAAE,uBAAuB;YAClC,GAAG,EAAE,wCAAwC;YAC7C,GAAG,EAAE,yCAAyC;SAC/C;KACF,CAAA;IAED,OAAO,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAA;AACxC,CAAC"}

package/dist/output/markdown.d.ts

@@ -0,0 +1,23 @@
+/**
+ * Markdown output for FlagShark scan results.
+ *
+ * Used in two places:
+ *   1. CLI: `flagshark scan --format markdown > REPORT.md`
+ *   2. GitHub Action: PR comment body
+ *
+ * The Action passes `linkPrefix` so file paths render as absolute GitHub URLs;
+ * the CLI omits the prefix and uses relative paths.
+ */
+import type { ScanRepoResult } from '../scan-repo.js';
+export interface MarkdownFormatOptions {
+    /** 'full' or 'changed' — drives the "scan mode" label in the stats table. */
+    scanMode: 'full' | 'changed';
+    /** Prefix for file links (e.g. `https://github.com/owner/repo/blob/<sha>/`). When set, file paths become absolute URLs. */
+    linkPrefix?: string;
+    /** HTML comment to prepend (used by the Action to find + update its own comment). */
+    commentMarker?: string;
+    /** Cap on rendered stale flags before "...and N more". Default: 20. */
+    maxStaleFlags?: number;
+}
+export declare function formatMarkdown(result: ScanRepoResult, options: MarkdownFormatOptions): string;
+//# sourceMappingURL=markdown.d.ts.map

package/dist/output/markdown.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"markdown.d.ts","sourceRoot":"","sources":["../../src/output/markdown.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAA;AAKrD,MAAM,WAAW,qBAAqB;IACpC,6EAA6E;IAC7E,QAAQ,EAAE,MAAM,GAAG,SAAS,CAAA;IAC5B,2HAA2H;IAC3H,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,qFAAqF;IACrF,aAAa,CAAC,EAAE,MAAM,CAAA;IACtB,uEAAuE;IACvE,aAAa,CAAC,EAAE,MAAM,CAAA;CACvB;AAID,wBAAgB,cAAc,CAAC,MAAM,EAAE,cAAc,EAAE,OAAO,EAAE,qBAAqB,GAAG,MAAM,CAiF7F"}

package/dist/output/markdown.js

@@ -0,0 +1,94 @@
+/**
+ * Markdown output for FlagShark scan results.
+ *
+ * Used in two places:
+ *   1. CLI: `flagshark scan --format markdown > REPORT.md`
+ *   2. GitHub Action: PR comment body
+ *
+ * The Action passes `linkPrefix` so file paths render as absolute GitHub URLs;
+ * the CLI omits the prefix and uses relative paths.
+ */
+import { uniqueStaleCount, healthEmoji } from './shared.js';
+const DEFAULT_MAX_STALE = 20;
+export function formatMarkdown(result, options) {
+    const staleCount = uniqueStaleCount(result.staleFlags);
+    const emoji = healthEmoji(result.healthScore);
+    const modeLabel = options.scanMode === 'full' ? 'Full repo scan' : 'Changed files only';
+    const maxStale = options.maxStaleFlags ?? DEFAULT_MAX_STALE;
+    const langList = Object.entries(result.languageBreakdown)
+        .map(([l, c]) => `${l} (${c})`)
+        .join(', ');
+    const providerList = result.detectedProviders.length > 0
+        ? result.detectedProviders.slice(0, 5).join(', ') +
+            (result.detectedProviders.length > 5 ? ` +${result.detectedProviders.length - 5} more` : '')
+        : 'none detected';
+    let body = '';
+    if (options.commentMarker) {
+        body += `${options.commentMarker}\n`;
+    }
+    // Header
+    if (staleCount === 0) {
+        body += `## 🦈 FlagShark — All flags healthy\n\n`;
+    }
+    else {
+        body += `## 🦈 FlagShark — ${staleCount} stale flag${staleCount !== 1 ? 's' : ''} found\n\n`;
+    }
+    // Health badge
+    body += `${emoji} **Health Score: ${result.healthScore}/100**\n\n`;
+    // Compute error / warning split up front (used in both sections below)
+    const errorFlags = result.staleFlags.filter((f) => f.signals.some((s) => s.severity === 'error'));
+    const warningFlags = result.staleFlags.filter((f) => !f.signals.some((s) => s.severity === 'error'));
+    // Production-risk section (before stats table so it appears at a higher position)
+    if (errorFlags.length > 0) {
+        body += `### 🚨 Production-risk: flags missing in platform\n\n`;
+        body += '| Flag | File | Age | Why it looks stale |\n';
+        body += '|------|------|-----|--------------------|\n';
+        for (const flag of errorFlags) {
+            body += `| ${formatRow(flag, options.linkPrefix)} |\n`;
+        }
+        body += '\n';
+    }
+    // Stats table
+    body += `| Metric | Value |\n`;
+    body += `|--------|-------|\n`;
+    body += `| Flags detected | ${result.totalFlags} |\n`;
+    body += `| Stale flags | ${staleCount} |\n`;
+    body += `| Languages | ${langList || 'none'} |\n`;
+    body += `| Providers | ${providerList} |\n`;
+    body += `| Scan mode | ${modeLabel} |\n`;
+    body += `| Scan time | ${result.scanDuration}ms |\n\n`;
+    // Warning-severity stale flags section
+    if (warningFlags.length > 0) {
+        const displayFlags = warningFlags.slice(0, maxStale);
+        body += `<details${warningFlags.length <= 5 ? ' open' : ''}>\n`;
+        body += `<summary><strong>Stale flags (${warningFlags.length})</strong></summary>\n\n`;
+        body += '| Flag | File | Age | Why it looks stale |\n';
+        body += '|------|------|-----|--------------------|\n';
+        for (const flag of displayFlags) {
+            body += `| ${formatRow(flag, options.linkPrefix)} |\n`;
+        }
+        if (warningFlags.length > maxStale) {
+            body += `\n*... and ${warningFlags.length - maxStale} more. Run \`npx flagshark scan --verbose\` locally for the full list.*\n`;
+        }
+        body += '\n</details>\n\n';
+    }
+    // Footer
+    body += '---\n';
+    body += `*[FlagShark](https://github.com/FlagShark/flagshark) finds stale feature flags before they cause incidents*\n\n`;
+    body += `[Automate flag cleanup](https://flagshark.com) · `;
+    body += `[Install CLI](https://www.npmjs.com/package/flagshark) · `;
+    body += `[Open source](https://github.com/FlagShark/flagshark)\n`;
+    return body;
+}
+function formatRow(flag, linkPrefix) {
+    const signals = flag.signals.map((s) => s.description).join(', ');
+    const shortPath = flag.filePath.replace(/^\.\//, '');
+    const fileCell = linkPrefix
+        ? `[${shortPath}:${flag.lineNumber}](${normalizePrefix(linkPrefix)}${shortPath}#L${flag.lineNumber})`
+        : `\`${shortPath}:${flag.lineNumber}\``;
+    return `\`${flag.name}\` | ${fileCell} | ${flag.age || 'unknown'} | ${signals}`;
+}
+function normalizePrefix(prefix) {
+    return prefix.endsWith('/') ? prefix : prefix + '/';
+}
+//# sourceMappingURL=markdown.js.map

package/dist/output/markdown.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"markdown.js","sourceRoot":"","sources":["../../src/output/markdown.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAKH,OAAO,EAAE,gBAAgB,EAAE,WAAW,EAAE,MAAM,aAAa,CAAA;AAa3D,MAAM,iBAAiB,GAAG,EAAE,CAAA;AAE5B,MAAM,UAAU,cAAc,CAAC,MAAsB,EAAE,OAA8B;IACnF,MAAM,UAAU,GAAG,gBAAgB,CAAC,MAAM,CAAC,UAAU,CAAC,CAAA;IACtD,MAAM,KAAK,GAAG,WAAW,CAAC,MAAM,CAAC,WAAW,CAAC,CAAA;IAC7C,MAAM,SAAS,GAAG,OAAO,CAAC,QAAQ,KAAK,MAAM,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,oBAAoB,CAAA;IACvF,MAAM,QAAQ,GAAG,OAAO,CAAC,aAAa,IAAI,iBAAiB,CAAA;IAE3D,MAAM,QAAQ,GAAG,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,iBAAiB,CAAC;SACtD,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC;SAC9B,IAAI,CAAC,IAAI,CAAC,CAAA;IACb,MAAM,YAAY,GAAG,MAAM,CAAC,iBAAiB,CAAC,MAAM,GAAG,CAAC;QACtD,CAAC,CAAC,MAAM,CAAC,iBAAiB,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;YAC/C,CAAC,MAAM,CAAC,iBAAiB,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,MAAM,CAAC,iBAAiB,CAAC,MAAM,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;QAC9F,CAAC,CAAC,eAAe,CAAA;IAEnB,IAAI,IAAI,GAAG,EAAE,CAAA;IACb,IAAI,OAAO,CAAC,aAAa,EAAE,CAAC;QAC1B,IAAI,IAAI,GAAG,OAAO,CAAC,aAAa,IAAI,CAAA;IACtC,CAAC;IAED,SAAS;IACT,IAAI,UAAU,KAAK,CAAC,EAAE,CAAC;QACrB,IAAI,IAAI,yCAAyC,CAAA;IACnD,CAAC;SAAM,CAAC;QACN,IAAI,IAAI,qBAAqB,UAAU,cAAc,UAAU,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,YAAY,CAAA;IAC9F,CAAC;IAED,eAAe;IACf,IAAI,IAAI,GAAG,KAAK,oBAAoB,MAAM,CAAC,WAAW,YAAY,CAAA;IAElE,uEAAuE;IACvE,MAAM,UAAU,GAAG,MAAM,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAA;IACjG,MAAM,YAAY,GAAG,MAAM,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAA;IAEpG,kFAAkF;IAClF,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC1B,IAAI,IAAI,uDAAuD,CAAA;QAC/D,IAAI,IAAI,8CAA8C,CAAA;QACtD,IAAI,IAAI,8CAA8C,CAAA;QACtD,KAAK,MAAM,IAAI,IAAI,UAAU,EAAE,CAAC;YAC9B,IAAI,IAAI,KAAK,SAAS,CAAC,IAAI,EAAE,OAAO,CAAC,UAAU,CAAC,MAAM,CAAA;QACxD,CAAC;QACD,IAAI,IAAI,IAAI,CAAA;IACd,CAAC;IAED,cAAc;IACd,IAAI,IAAI,sBAAsB,CAAA;IAC9B,IAAI,IAAI,sBAAsB,CAAA;IAC9B,IAAI,IAAI,sBAAsB,MAAM,CAAC,UAAU,MAAM,CAAA;IACrD,IAAI,IAAI,mBAAmB,UAAU,MAAM,CAAA;IAC3C,IAAI,IAAI,iBAAiB,QAAQ,IAAI,MAAM,MAAM,CAAA;IACjD,IAAI,IAAI,iBAAiB,YAAY,MAAM,CAAA;IAC3C,IAAI,IAAI,iBAAiB,SAAS,MAAM,CAAA;IACxC,IAAI,IAAI,iBAAiB,MAAM,CAAC,YAAY,UAAU,CAAA;IAEtD,uCAAuC;IACvC,IAAI,YAAY,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC5B,MAAM,YAAY,GAAG,YAAY,CAAC,KAAK,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAA;QAEpD,IAAI,IAAI,WAAW,YAAY,CAAC,MAAM,IAAI,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,KAAK,CAAA;QAC/D,IAAI,IAAI,iCAAiC,YAAY,CAAC,MAAM,0BAA0B,CAAA;QACtF,IAAI,IAAI,8CAA8C,CAAA;QACtD,IAAI,IAAI,8CAA8C,CAAA;QAEtD,KAAK,MAAM,IAAI,IAAI,YAAY,EAAE,CAAC;YAChC,IAAI,IAAI,KAAK,SAAS,CAAC,IAAI,EAAE,OAAO,CAAC,UAAU,CAAC,MAAM,CAAA;QACxD,CAAC;QAED,IAAI,YAAY,CAAC,MAAM,GAAG,QAAQ,EAAE,CAAC;YACnC,IAAI,IAAI,cAAc,YAAY,CAAC,MAAM,GAAG,QAAQ,2EAA2E,CAAA;QACjI,CAAC;QACD,IAAI,IAAI,kBAAkB,CAAA;IAC5B,CAAC;IAED,SAAS;IACT,IAAI,IAAI,OAAO,CAAA;IACf,IAAI,IAAI,iHAAiH,CAAA;IACzH,IAAI,IAAI,mDAAmD,CAAA;IAC3D,IAAI,IAAI,2DAA2D,CAAA;IACnE,IAAI,IAAI,yDAAyD,CAAA;IAEjE,OAAO,IAAI,CAAA;AACb,CAAC;AAED,SAAS,SAAS,CAAC,IAAe,EAAE,UAAmB;IACrD,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IACjE,MAAM,SAAS,GAAG,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CAAA;IACpD,MAAM,QAAQ,GAAG,UAAU;QACzB,CAAC,CAAC,IAAI,SAAS,IAAI,IAAI,CAAC,UAAU,KAAK,eAAe,CAAC,UAAU,CAAC,GAAG,SAAS,KAAK,IAAI,CAAC,UAAU,GAAG;QACrG,CAAC,CAAC,KAAK,SAAS,IAAI,IAAI,CAAC,UAAU,IAAI,CAAA;IACzC,OAAO,KAAK,IAAI,CAAC,IAAI,QAAQ,QAAQ,MAAM,IAAI,CAAC,GAAG,IAAI,SAAS,MAAM,OAAO,EAAE,CAAA;AACjF,CAAC;AAED,SAAS,eAAe,CAAC,MAAc;IACrC,OAAO,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,GAAG,GAAG,CAAA;AACrD,CAAC"}

package/dist/output/sarif.d.ts

@@ -0,0 +1,16 @@
+/**
+ * SARIF v2.1.0 output for FlagShark scan results.
+ *
+ * Consumable directly by `github/codeql-action/upload-sarif` so stale flags
+ * appear in the repo's Security → Code Scanning tab — same UX as CodeQL,
+ * ESLint with SARIF output, etc.
+ *
+ * Spec: https://docs.oasis-open.org/sarif/sarif/v2.1.0/sarif-v2.1.0.html
+ */
+import type { ScanRepoResult } from '../scan-repo.js';
+export interface SarifFormatOptions {
+    /** Tool driver version (the FlagShark release version). */
+    version: string;
+}
+export declare function formatSarif(result: ScanRepoResult, options: SarifFormatOptions): string;
+//# sourceMappingURL=sarif.d.ts.map

package/dist/output/sarif.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sarif.d.ts","sourceRoot":"","sources":["../../src/output/sarif.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAA;AAGrD,MAAM,WAAW,kBAAkB;IACjC,2DAA2D;IAC3D,OAAO,EAAE,MAAM,CAAA;CAChB;AAwDD,wBAAgB,WAAW,CAAC,MAAM,EAAE,cAAc,EAAE,OAAO,EAAE,kBAAkB,GAAG,MAAM,CA4BvF"}

package/dist/output/sarif.js

@@ -0,0 +1,104 @@
+/**
+ * SARIF v2.1.0 output for FlagShark scan results.
+ *
+ * Consumable directly by `github/codeql-action/upload-sarif` so stale flags
+ * appear in the repo's Security → Code Scanning tab — same UX as CodeQL,
+ * ESLint with SARIF output, etc.
+ *
+ * Spec: https://docs.oasis-open.org/sarif/sarif/v2.1.0/sarif-v2.1.0.html
+ */
+const RULE_DEFS = {
+    'stale-age': {
+        id: 'stale-age',
+        name: 'Stale by age',
+        shortDescription: { text: 'Flag reference older than the configured threshold' },
+        helpUri: 'https://github.com/FlagShark/flagshark#how-staleness-works',
+    },
+    'stale-low-usage': {
+        id: 'stale-low-usage',
+        name: 'Stale by usage',
+        shortDescription: { text: 'Flag appears in only one file across the repo' },
+        helpUri: 'https://github.com/FlagShark/flagshark#how-staleness-works',
+    },
+    'stale-hardcoded': {
+        id: 'stale-hardcoded',
+        name: 'Stale by hardcoded variation',
+        shortDescription: { text: 'Flag call uses a constant default — the flag may be permanently removed upstream' },
+        helpUri: 'https://github.com/FlagShark/flagshark#how-staleness-works',
+    },
+    'flagshark/missing-in-platform': {
+        id: 'flagshark/missing-in-platform',
+        name: 'Missing in platform',
+        shortDescription: { text: 'Flag is referenced in code but does not exist in the feature flag platform' },
+        helpUri: 'https://github.com/FlagShark/flagshark#how-staleness-works',
+    },
+    'flagshark/archived-in-platform': {
+        id: 'flagshark/archived-in-platform',
+        name: 'Archived in platform',
+        shortDescription: { text: 'Flag is referenced in code but has been archived in the feature flag platform' },
+        helpUri: 'https://github.com/FlagShark/flagshark#how-staleness-works',
+    },
+};
+function signalTypeToRuleId(signalType) {
+    if (signalType === 'age')
+        return 'stale-age';
+    if (signalType === 'low-usage')
+        return 'stale-low-usage';
+    if (signalType === 'missing-in-platform')
+        return 'flagshark/missing-in-platform';
+    if (signalType === 'archived-in-platform')
+        return 'flagshark/archived-in-platform';
+    return 'stale-hardcoded';
+}
+export function formatSarif(result, options) {
+    const results = result.staleFlags.map((flag) => toSarifResult(flag));
+    // Collect only the rule IDs that appear in results
+    const usedRuleIds = new Set(results.map((r) => r.ruleId));
+    const rules = [...usedRuleIds]
+        .filter((id) => id in RULE_DEFS)
+        .map((id) => RULE_DEFS[id]);
+    const envelope = {
+        $schema: 'https://json.schemastore.org/sarif-2.1.0.json',
+        version: '2.1.0',
+        runs: [
+            {
+                tool: {
+                    driver: {
+                        name: 'FlagShark',
+                        version: options.version,
+                        informationUri: 'https://github.com/FlagShark/flagshark',
+                        rules,
+                    },
+                },
+                results,
+            },
+        ],
+    };
+    return JSON.stringify(envelope, null, 2);
+}
+function toSarifResult(flag) {
+    const firstSignal = flag.signals[0];
+    const ruleId = signalTypeToRuleId(firstSignal ? firstSignal.type : '');
+    // Level is based on max severity across all signals
+    const level = flag.signals.some((s) => s.severity === 'error') ? 'error' : 'warning';
+    return {
+        ruleId,
+        level,
+        message: {
+            text: `Flag "${flag.name}" appears stale. ${flag.signals.map((s) => s.description).join('; ')}`,
+        },
+        locations: [{
+                physicalLocation: {
+                    artifactLocation: { uri: flag.filePath.replace(/^\.\//, '') },
+                    region: { startLine: flag.lineNumber },
+                },
+            }],
+        properties: {
+            flag: flag.name,
+            provider: flag.provider,
+            language: flag.language,
+            age: flag.age ?? '',
+        },
+    };
+}
+//# sourceMappingURL=sarif.js.map

package/dist/output/sarif.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sarif.js","sourceRoot":"","sources":["../../src/output/sarif.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAuBH,MAAM,SAAS,GAAsG;IACnH,WAAW,EAAE;QACX,EAAE,EAAE,WAAW;QACf,IAAI,EAAE,cAAc;QACpB,gBAAgB,EAAE,EAAE,IAAI,EAAE,oDAAoD,EAAE;QAChF,OAAO,EAAE,4DAA4D;KACtE;IACD,iBAAiB,EAAE;QACjB,EAAE,EAAE,iBAAiB;QACrB,IAAI,EAAE,gBAAgB;QACtB,gBAAgB,EAAE,EAAE,IAAI,EAAE,+CAA+C,EAAE;QAC3E,OAAO,EAAE,4DAA4D;KACtE;IACD,iBAAiB,EAAE;QACjB,EAAE,EAAE,iBAAiB;QACrB,IAAI,EAAE,8BAA8B;QACpC,gBAAgB,EAAE,EAAE,IAAI,EAAE,kFAAkF,EAAE;QAC9G,OAAO,EAAE,4DAA4D;KACtE;IACD,+BAA+B,EAAE;QAC/B,EAAE,EAAE,+BAA+B;QACnC,IAAI,EAAE,qBAAqB;QAC3B,gBAAgB,EAAE,EAAE,IAAI,EAAE,4EAA4E,EAAE;QACxG,OAAO,EAAE,4DAA4D;KACtE;IACD,gCAAgC,EAAE;QAChC,EAAE,EAAE,gCAAgC;QACpC,IAAI,EAAE,sBAAsB;QAC5B,gBAAgB,EAAE,EAAE,IAAI,EAAE,+EAA+E,EAAE;QAC3G,OAAO,EAAE,4DAA4D;KACtE;CACF,CAAA;AAED,SAAS,kBAAkB,CAAC,UAAkB;IAC5C,IAAI,UAAU,KAAK,KAAK;QAAE,OAAO,WAAW,CAAA;IAC5C,IAAI,UAAU,KAAK,WAAW;QAAE,OAAO,iBAAiB,CAAA;IACxD,IAAI,UAAU,KAAK,qBAAqB;QAAE,OAAO,+BAA+B,CAAA;IAChF,IAAI,UAAU,KAAK,sBAAsB;QAAE,OAAO,gCAAgC,CAAA;IAClF,OAAO,iBAAiB,CAAA;AAC1B,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,MAAsB,EAAE,OAA2B;IAC7E,MAAM,OAAO,GAAkB,MAAM,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC,CAAA;IAEnF,mDAAmD;IACnD,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAA;IACzD,MAAM,KAAK,GAAG,CAAC,GAAG,WAAW,CAAC;SAC3B,MAAM,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,IAAI,SAAS,CAAC;SAC/B,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC,CAAA;IAE7B,MAAM,QAAQ,GAAG;QACf,OAAO,EAAE,+CAA+C;QACxD,OAAO,EAAE,OAAO;QAChB,IAAI,EAAE;YACJ;gBACE,IAAI,EAAE;oBACJ,MAAM,EAAE;wBACN,IAAI,EAAE,WAAW;wBACjB,OAAO,EAAE,OAAO,CAAC,OAAO;wBACxB,cAAc,EAAE,wCAAwC;wBACxD,KAAK;qBACN;iBACF;gBACD,OAAO;aACR;SACF;KACF,CAAA;IAED,OAAO,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,CAAA;AAC1C,CAAC;AAED,SAAS,aAAa,CAAC,IAAe;IACpC,MAAM,WAAW,GAAG,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAA;IACnC,MAAM,MAAM,GAAG,kBAAkB,CAAC,WAAW,CAAC,CAAC,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAA;IAEtE,oDAAoD;IACpD,MAAM,KAAK,GAAwB,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAA;IAEzG,OAAO;QACL,MAAM;QACN,KAAK;QACL,OAAO,EAAE;YACP,IAAI,EAAE,SAAS,IAAI,CAAC,IAAI,oBAAoB,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;SAChG;QACD,SAAS,EAAE,CAAC;gBACV,gBAAgB,EAAE;oBAChB,gBAAgB,EAAE,EAAE,GAAG,EAAE,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,EAAE;oBAC7D,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,CAAC,UAAU,EAAE;iBACvC;aACF,CAAC;QACF,UAAU,EAAE;YACV,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,GAAG,EAAE,IAAI,CAAC,GAAG,IAAI,EAAE;SACpB;KACF,CAAA;AACH,CAAC"}

package/dist/output/select.d.ts

@@ -0,0 +1,23 @@
+/**
+ * Format-name dispatcher. Returns a unified callable that all formatters
+ * conform to, so CLI/Action callers don't switch on format name themselves.
+ */
+import type { ScanRepoResult } from '../scan-repo.js';
+export type FormatName = 'text' | 'json' | 'markdown' | 'csv' | 'sarif';
+export interface UnifiedFormatOptions {
+    /** Tool version (used by JSON + SARIF envelopes). */
+    version: string;
+    /** Scan mode label (used by markdown). */
+    scanMode: 'full' | 'changed';
+    /** Verbose flag (used by text). Default false. */
+    verbose?: boolean;
+    /** Max stale flags rendered in text/markdown. Default: 10 (text), 20 (markdown). */
+    maxDisplay?: number;
+    /** Link prefix for markdown (Action-context absolute URLs). */
+    linkPrefix?: string;
+    /** Comment marker (Action only). */
+    commentMarker?: string;
+}
+export type Formatter = (result: ScanRepoResult, options: UnifiedFormatOptions) => string;
+export declare function selectFormatter(name: FormatName): Formatter;
+//# sourceMappingURL=select.d.ts.map

package/dist/output/select.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"select.d.ts","sourceRoot":"","sources":["../../src/output/select.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAA;AAQrD,MAAM,MAAM,UAAU,GAAG,MAAM,GAAG,MAAM,GAAG,UAAU,GAAG,KAAK,GAAG,OAAO,CAAA;AAEvE,MAAM,WAAW,oBAAoB;IACnC,qDAAqD;IACrD,OAAO,EAAE,MAAM,CAAA;IACf,0CAA0C;IAC1C,QAAQ,EAAE,MAAM,GAAG,SAAS,CAAA;IAC5B,kDAAkD;IAClD,OAAO,CAAC,EAAE,OAAO,CAAA;IACjB,oFAAoF;IACpF,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,+DAA+D;IAC/D,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,oCAAoC;IACpC,aAAa,CAAC,EAAE,MAAM,CAAA;CACvB;AAED,MAAM,MAAM,SAAS,GAAG,CAAC,MAAM,EAAE,cAAc,EAAE,OAAO,EAAE,oBAAoB,KAAK,MAAM,CAAA;AAKzF,wBAAgB,eAAe,CAAC,IAAI,EAAE,UAAU,GAAG,SAAS,CAuB3D"}

package/dist/output/select.js

@@ -0,0 +1,36 @@
+/**
+ * Format-name dispatcher. Returns a unified callable that all formatters
+ * conform to, so CLI/Action callers don't switch on format name themselves.
+ */
+import { formatCsv } from './csv.js';
+import { formatJson } from './json.js';
+import { formatMarkdown } from './markdown.js';
+import { formatSarif } from './sarif.js';
+import { formatText } from './text.js';
+const TEXT_DEFAULT_MAX = 10;
+const MARKDOWN_DEFAULT_MAX = 20;
+export function selectFormatter(name) {
+    switch (name) {
+        case 'text':
+            return (result, opts) => formatText(result, {
+                verbose: opts.verbose ?? false,
+                maxDisplay: opts.maxDisplay ?? TEXT_DEFAULT_MAX,
+            });
+        case 'json':
+            return (result, opts) => formatJson(result, { version: opts.version });
+        case 'markdown':
+            return (result, opts) => formatMarkdown(result, {
+                scanMode: opts.scanMode,
+                linkPrefix: opts.linkPrefix,
+                commentMarker: opts.commentMarker,
+                maxStaleFlags: opts.maxDisplay ?? MARKDOWN_DEFAULT_MAX,
+            });
+        case 'csv':
+            return (result) => formatCsv(result);
+        case 'sarif':
+            return (result, opts) => formatSarif(result, { version: opts.version });
+        default:
+            throw new Error(`Unknown format: ${name}`);
+    }
+}
+//# sourceMappingURL=select.js.map

package/dist/output/select.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"select.js","sourceRoot":"","sources":["../../src/output/select.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAIH,OAAO,EAAE,SAAS,EAAE,MAAM,UAAU,CAAA;AACpC,OAAO,EAAE,UAAU,EAAE,MAAM,WAAW,CAAA;AACtC,OAAO,EAAE,cAAc,EAAE,MAAM,eAAe,CAAA;AAC9C,OAAO,EAAE,WAAW,EAAE,MAAM,YAAY,CAAA;AACxC,OAAO,EAAE,UAAU,EAAE,MAAM,WAAW,CAAA;AAqBtC,MAAM,gBAAgB,GAAG,EAAE,CAAA;AAC3B,MAAM,oBAAoB,GAAG,EAAE,CAAA;AAE/B,MAAM,UAAU,eAAe,CAAC,IAAgB;IAC9C,QAAQ,IAAI,EAAE,CAAC;QACb,KAAK,MAAM;YACT,OAAO,CAAC,MAAM,EAAE,IAAI,EAAE,EAAE,CAAC,UAAU,CAAC,MAAM,EAAE;gBAC1C,OAAO,EAAE,IAAI,CAAC,OAAO,IAAI,KAAK;gBAC9B,UAAU,EAAE,IAAI,CAAC,UAAU,IAAI,gBAAgB;aAChD,CAAC,CAAA;QACJ,KAAK,MAAM;YACT,OAAO,CAAC,MAAM,EAAE,IAAI,EAAE,EAAE,CAAC,UAAU,CAAC,MAAM,EAAE,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC,CAAA;QACxE,KAAK,UAAU;YACb,OAAO,CAAC,MAAM,EAAE,IAAI,EAAE,EAAE,CAAC,cAAc,CAAC,MAAM,EAAE;gBAC9C,QAAQ,EAAE,IAAI,CAAC,QAAQ;gBACvB,UAAU,EAAE,IAAI,CAAC,UAAU;gBAC3B,aAAa,EAAE,IAAI,CAAC,aAAa;gBACjC,aAAa,EAAE,IAAI,CAAC,UAAU,IAAI,oBAAoB;aACvD,CAAC,CAAA;QACJ,KAAK,KAAK;YACR,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,SAAS,CAAC,MAAM,CAAC,CAAA;QACtC,KAAK,OAAO;YACV,OAAO,CAAC,MAAM,EAAE,IAAI,EAAE,EAAE,CAAC,WAAW,CAAC,MAAM,EAAE,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC,CAAA;QACzE;YACE,MAAM,IAAI,KAAK,CAAC,mBAAmB,IAAc,EAAE,CAAC,CAAA;IACxD,CAAC;AACH,CAAC"}

package/dist/output/shared.d.ts

@@ -0,0 +1,13 @@
+import type { StaleFlag } from '../staleness.js';
+/** Returns the count of unique stale flag names (de-duped across occurrences). */
+export declare function uniqueStaleCount(stale: StaleFlag[]): number;
+/** Map health score to an emoji used in markdown + SARIF + Action summary. */
+export declare function healthEmoji(score: number): string;
+/**
+ * SARIF severity level mapping based on number of staleness signals on a flag.
+ *   1 signal  → 'note'
+ *   2 signals → 'warning'
+ *   3+ signals → 'error'
+ */
+export declare function sarifLevel(signalCount: number): 'note' | 'warning' | 'error';
+//# sourceMappingURL=shared.d.ts.map

package/dist/output/shared.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"shared.d.ts","sourceRoot":"","sources":["../../src/output/shared.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAA;AAEhD,kFAAkF;AAClF,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,SAAS,EAAE,GAAG,MAAM,CAE3D;AAED,8EAA8E;AAC9E,wBAAgB,WAAW,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAKjD;AAED;;;;;GAKG;AACH,wBAAgB,UAAU,CAAC,WAAW,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,GAAG,OAAO,CAI5E"}

package/dist/output/shared.js

@@ -0,0 +1,28 @@
+/** Returns the count of unique stale flag names (de-duped across occurrences). */
+export function uniqueStaleCount(stale) {
+    return new Set(stale.map((f) => f.name)).size;
+}
+/** Map health score to an emoji used in markdown + SARIF + Action summary. */
+export function healthEmoji(score) {
+    if (score >= 90)
+        return '🟢';
+    if (score >= 70)
+        return '🟡';
+    if (score >= 40)
+        return '🟠';
+    return '🔴';
+}
+/**
+ * SARIF severity level mapping based on number of staleness signals on a flag.
+ *   1 signal  → 'note'
+ *   2 signals → 'warning'
+ *   3+ signals → 'error'
+ */
+export function sarifLevel(signalCount) {
+    if (signalCount >= 3)
+        return 'error';
+    if (signalCount === 2)
+        return 'warning';
+    return 'note';
+}
+//# sourceMappingURL=shared.js.map

package/dist/output/shared.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"shared.js","sourceRoot":"","sources":["../../src/output/shared.ts"],"names":[],"mappings":"AAEA,kFAAkF;AAClF,MAAM,UAAU,gBAAgB,CAAC,KAAkB;IACjD,OAAO,IAAI,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAA;AAC/C,CAAC;AAED,8EAA8E;AAC9E,MAAM,UAAU,WAAW,CAAC,KAAa;IACvC,IAAI,KAAK,IAAI,EAAE;QAAE,OAAO,IAAI,CAAA;IAC5B,IAAI,KAAK,IAAI,EAAE;QAAE,OAAO,IAAI,CAAA;IAC5B,IAAI,KAAK,IAAI,EAAE;QAAE,OAAO,IAAI,CAAA;IAC5B,OAAO,IAAI,CAAA;AACb,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,UAAU,CAAC,WAAmB;IAC5C,IAAI,WAAW,IAAI,CAAC;QAAE,OAAO,OAAO,CAAA;IACpC,IAAI,WAAW,KAAK,CAAC;QAAE,OAAO,SAAS,CAAA;IACvC,OAAO,MAAM,CAAA;AACf,CAAC"}

package/dist/output/text.d.ts

@@ -0,0 +1,11 @@
+/**
+ * Human-readable text output for FlagShark scan results.
+ */
+import type { ScanRepoResult } from '../scan-repo.js';
+export interface TextFormatOptions {
+    verbose: boolean;
+    /** Max stale flags to show before truncating. Default: 10. Ignored if verbose. */
+    maxDisplay: number;
+}
+export declare function formatText(result: ScanRepoResult, options: TextFormatOptions): string;
+//# sourceMappingURL=text.d.ts.map

package/dist/output/text.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"text.d.ts","sourceRoot":"","sources":["../../src/output/text.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAA;AAGrD,MAAM,WAAW,iBAAiB;IAChC,OAAO,EAAE,OAAO,CAAA;IAChB,kFAAkF;IAClF,UAAU,EAAE,MAAM,CAAA;CACnB;AAmDD,wBAAgB,UAAU,CAAC,MAAM,EAAE,cAAc,EAAE,OAAO,EAAE,iBAAiB,GAAG,MAAM,CAoErF"}