@geoql/doctor-core 1.0.1 → 1.1.0

package/dist/index.d.ts

@@ -485,5 +485,72 @@ interface ListRulesFilter {
 }
 declare function listRules(filter?: ListRulesFilter): RegisteredRule[];
 //#endregion
-export { type ApplyInlineDisablesOptions, type AuditConfig, type AuditReport, type AuditTimings, BUILT_IN_RECOMMENDED, type Capability, type CliOverrides, ConfigCycleError, ConfigFileNotFoundError, type ConfigSource, DOCTOR_REPORT_SCHEMA_VERSION, DeadCodeImportFailed, DeadCodeTimeoutError, type Diagnostic, type DiagnosticSource, type DirectiveLine, type DirectiveRange, type DirectiveSet, type DoctorReport, type DoctorUserConfig, type Framework, type GitScopeMode, type InitConfigFormat, type InitFileWrite, type InitOptions, type InitPlan, type InitPreset, InvalidConfigError, type ListRulesFilter, type LoadRuleDocOptions, type MonorepoKind, type MonorepoResult, OxlintOutputTooLarge, OxlintSpawnFailed, type ProjectInfo, type ProjectInfoLite, RULE_REGISTRY, type RawInitAnswers, type RegisteredRule, type ReporterFormat, type ReporterInput, type ReporterOptions, type ResolvedDoctorConfig, type ResolvedInitAnswers, type RuleCategory, type RuleDoc, type RuleSource, type ScoreBreakdownEntry, type ScoreConfig, type ScoreResult, type Severity, type VerboseTraceOptions, type WorkspacePackage, agentReport, applyInlineDisables, audit, buildDoctorReport, checkBuildQuality, checkDeadCode, checkDeps, checkNuxtProject, dedupeDeadCodeAgainstLint, defineConfig, detectProject, detectSummary, docsUrl, encodeAnnotation, encodeAnnotations, findMonorepoRoot, format, isNuxtLayoutFile, isNuxtPageFile, isNuxtServerFile, jsonCompactReport, jsonReport, listChangedFiles, listRules, listWorkspacePackages, loadAllRuleDocs, loadDoctorConfig, loadRuleDoc, mergeCliOverrides, normalizeInitAnswers, parseDirectives, parseExcludeList, planInit, prCommentReport, prettyReport, renderDetectSummary, renderVerboseTrace, runCrossFilePass, sarifReport, scoreDiagnostics, validateConfig };
+//#region src/push.d.ts
+/**
+ * The 6 fields the SaaS receives for each finding.
+ * Everything else (message, codeSnippet, recommendation, etc.) is privacy-sensitive
+ * and MUST be stripped before transmission.
+ */
+interface PushedFinding {
+  file: string;
+  line: number;
+  col: number;
+  ruleId: string;
+  severity: Severity;
+  category: string;
+}
+interface PushPayloadInput {
+  project: string;
+  score: number;
+  errorCount: number;
+  warnCount: number;
+  infoCount: number;
+  findings: PushedFinding[];
+}
+interface PushPayload extends PushPayloadInput {
+  commitSha?: string;
+  branch?: string;
+  prNumber?: number;
+}
+interface PushOptions {
+  project: string;
+  score: number;
+  errorCount: number;
+  warnCount: number;
+  infoCount: number;
+  diagnostics: Diagnostic[];
+  url: string;
+  apiKey: string;
+  fetchImpl?: typeof fetch;
+  /** Overrides for the request timeout (ms). Defaults to 5000. Test-only. */
+  timeoutMs?: number;
+}
+type PushResult = {
+  ok: true;
+  status?: number;
+  error?: undefined;
+} | {
+  ok: false;
+  status?: number;
+  error: string;
+};
+/**
+ * Strip a list of Diagnostics down to the 6 allowed push fields.
+ * Privacy boundary: this function is the single point of enforcement.
+ * If you add a new privacy-sensitive field to Diagnostic, add it to the deny list here.
+ */
+declare function stripFindings(diagnostics: Diagnostic[]): PushedFinding[];
+/**
+ * Build the top-level POST body. CI fields (commitSha, branch, prNumber) are
+ * included ONLY when the matching GITHUB_* env var is set.
+ */
+declare function buildPushPayload(input: PushPayloadInput): PushPayload;
+/**
+ * Strip + POST findings to a SaaS endpoint. Never throws — returns
+ * `{ ok: false, error }` on any HTTP / network failure so the audit's
+ * exit code is not affected by SaaS downtime.
+ */
+declare function pushFindings(opts: PushOptions): Promise<PushResult>;
+//#endregion
+export { type ApplyInlineDisablesOptions, type AuditConfig, type AuditReport, type AuditTimings, BUILT_IN_RECOMMENDED, type Capability, type CliOverrides, ConfigCycleError, ConfigFileNotFoundError, type ConfigSource, DOCTOR_REPORT_SCHEMA_VERSION, DeadCodeImportFailed, DeadCodeTimeoutError, type Diagnostic, type DiagnosticSource, type DirectiveLine, type DirectiveRange, type DirectiveSet, type DoctorReport, type DoctorUserConfig, type Framework, type GitScopeMode, type InitConfigFormat, type InitFileWrite, type InitOptions, type InitPlan, type InitPreset, InvalidConfigError, type ListRulesFilter, type LoadRuleDocOptions, type MonorepoKind, type MonorepoResult, OxlintOutputTooLarge, OxlintSpawnFailed, type ProjectInfo, type ProjectInfoLite, type PushOptions, type PushPayload, type PushPayloadInput, type PushResult, type PushedFinding, RULE_REGISTRY, type RawInitAnswers, type RegisteredRule, type ReporterFormat, type ReporterInput, type ReporterOptions, type ResolvedDoctorConfig, type ResolvedInitAnswers, type RuleCategory, type RuleDoc, type RuleSource, type ScoreBreakdownEntry, type ScoreConfig, type ScoreResult, type Severity, type VerboseTraceOptions, type WorkspacePackage, agentReport, applyInlineDisables, audit, buildDoctorReport, buildPushPayload, checkBuildQuality, checkDeadCode, checkDeps, checkNuxtProject, dedupeDeadCodeAgainstLint, defineConfig, detectProject, detectSummary, docsUrl, encodeAnnotation, encodeAnnotations, findMonorepoRoot, format, isNuxtLayoutFile, isNuxtPageFile, isNuxtServerFile, jsonCompactReport, jsonReport, listChangedFiles, listRules, listWorkspacePackages, loadAllRuleDocs, loadDoctorConfig, loadRuleDoc, mergeCliOverrides, normalizeInitAnswers, parseDirectives, parseExcludeList, planInit, prCommentReport, prettyReport, pushFindings, renderDetectSummary, renderVerboseTrace, runCrossFilePass, sarifReport, scoreDiagnostics, stripFindings, validateConfig };
 //# sourceMappingURL=index.d.ts.map

package/dist/index.js

@@ -3474,6 +3474,112 @@ function format(input, kind = "agent", options) {
 	return agentReport(input, options);
 }
 //#endregion
-export { BUILT_IN_RECOMMENDED, ConfigCycleError, ConfigFileNotFoundError, DOCTOR_REPORT_SCHEMA_VERSION, DeadCodeImportFailed, DeadCodeTimeoutError, InvalidConfigError, OxlintOutputTooLarge, OxlintSpawnFailed, RULE_REGISTRY, agentReport, applyInlineDisables, audit, buildDoctorReport, checkBuildQuality, checkDeadCode, checkDeps, checkNuxtProject, dedupeDeadCodeAgainstLint, defineConfig, detectProject, detectSummary, docsUrl, encodeAnnotation, encodeAnnotations, findMonorepoRoot, format, isNuxtLayoutFile, isNuxtPageFile, isNuxtServerFile, jsonCompactReport, jsonReport, listChangedFiles, listRules, listWorkspacePackages, loadAllRuleDocs, loadDoctorConfig, loadRuleDoc, mergeCliOverrides, normalizeInitAnswers, parseDirectives, parseExcludeList, planInit, prCommentReport, prettyReport, renderDetectSummary, renderVerboseTrace, runCrossFilePass, sarifReport, scoreDiagnostics, validateConfig };
+//#region src/push.ts
+const PUSH_TIMEOUT_MS = 5e3;
+const categoryByRuleId = new Map(RULE_REGISTRY.map((r) => [r.id, r.category]));
+function lookupCategory(ruleId) {
+	return categoryByRuleId.get(ruleId) ?? "unknown";
+}
+/**
+* Strip a list of Diagnostics down to the 6 allowed push fields.
+* Privacy boundary: this function is the single point of enforcement.
+* If you add a new privacy-sensitive field to Diagnostic, add it to the deny list here.
+*/
+function stripFindings(diagnostics) {
+	const out = new Array(diagnostics.length);
+	for (let i = 0; i < diagnostics.length; i++) {
+		const d = diagnostics[i];
+		out[i] = {
+			file: d.file,
+			line: d.line,
+			col: d.column,
+			ruleId: d.ruleId,
+			severity: d.severity,
+			category: lookupCategory(d.ruleId)
+		};
+	}
+	return out;
+}
+function readOptionalEnv(name) {
+	const v = process.env[name];
+	return v === void 0 || v === "" ? void 0 : v;
+}
+function readPrNumber() {
+	const raw = readOptionalEnv("GITHUB_PR_NUMBER");
+	if (raw === void 0) return void 0;
+	const n = Number(raw);
+	return Number.isFinite(n) ? n : void 0;
+}
+/**
+* Build the top-level POST body. CI fields (commitSha, branch, prNumber) are
+* included ONLY when the matching GITHUB_* env var is set.
+*/
+function buildPushPayload(input) {
+	const payload = {
+		project: input.project,
+		score: input.score,
+		errorCount: input.errorCount,
+		warnCount: input.warnCount,
+		infoCount: input.infoCount,
+		findings: input.findings
+	};
+	const commitSha = readOptionalEnv("GITHUB_SHA");
+	const branch = readOptionalEnv("GITHUB_REF_NAME");
+	const prNumber = readPrNumber();
+	if (commitSha !== void 0) payload.commitSha = commitSha;
+	if (branch !== void 0) payload.branch = branch;
+	if (prNumber !== void 0) payload.prNumber = prNumber;
+	return payload;
+}
+/**
+* Strip + POST findings to a SaaS endpoint. Never throws — returns
+* `{ ok: false, error }` on any HTTP / network failure so the audit's
+* exit code is not affected by SaaS downtime.
+*/
+async function pushFindings(opts) {
+	const findings = stripFindings(opts.diagnostics);
+	const payload = buildPushPayload({
+		project: opts.project,
+		score: opts.score,
+		errorCount: opts.errorCount,
+		warnCount: opts.warnCount,
+		infoCount: opts.infoCount,
+		findings
+	});
+	const fetchImpl = opts.fetchImpl ?? fetch;
+	const controller = new AbortController();
+	const timeoutMs = opts.timeoutMs ?? PUSH_TIMEOUT_MS;
+	const timer = setTimeout(() => controller.abort(), timeoutMs);
+	timer.unref?.();
+	try {
+		const res = await fetchImpl(opts.url, {
+			method: "POST",
+			headers: {
+				"Content-Type": "application/json",
+				"x-api-key": opts.apiKey
+			},
+			body: JSON.stringify(payload),
+			signal: controller.signal
+		});
+		clearTimeout(timer);
+		if (res.ok) return {
+			ok: true,
+			status: res.status
+		};
+		return {
+			ok: false,
+			status: res.status,
+			error: `HTTP ${res.status} ${res.statusText}`.trim()
+		};
+	} catch (err) {
+		clearTimeout(timer);
+		return {
+			ok: false,
+			error: err instanceof Error ? err.message : String(err)
+		};
+	}
+}
+//#endregion
+export { BUILT_IN_RECOMMENDED, ConfigCycleError, ConfigFileNotFoundError, DOCTOR_REPORT_SCHEMA_VERSION, DeadCodeImportFailed, DeadCodeTimeoutError, InvalidConfigError, OxlintOutputTooLarge, OxlintSpawnFailed, RULE_REGISTRY, agentReport, applyInlineDisables, audit, buildDoctorReport, buildPushPayload, checkBuildQuality, checkDeadCode, checkDeps, checkNuxtProject, dedupeDeadCodeAgainstLint, defineConfig, detectProject, detectSummary, docsUrl, encodeAnnotation, encodeAnnotations, findMonorepoRoot, format, isNuxtLayoutFile, isNuxtPageFile, isNuxtServerFile, jsonCompactReport, jsonReport, listChangedFiles, listRules, listWorkspacePackages, loadAllRuleDocs, loadDoctorConfig, loadRuleDoc, mergeCliOverrides, normalizeInitAnswers, parseDirectives, parseExcludeList, planInit, prCommentReport, prettyReport, pushFindings, renderDetectSummary, renderVerboseTrace, runCrossFilePass, sarifReport, scoreDiagnostics, stripFindings, validateConfig };
 
 //# sourceMappingURL=index.js.map