@geoql/doctor-core 1.1.0 → 1.1.1

package/dist/index.d.ts

@@ -485,6 +485,29 @@ interface ListRulesFilter {
 }
 declare function listRules(filter?: ListRulesFilter): RegisteredRule[];
 //#endregion
+//#region src/audit-filter.d.ts
+/**
+ * Filter `report.diagnostics` to a known set of allowed rule ids, then
+ * recompute `score`, `errorCount`, `warnCount`, `infoCount`, `scoreResult`,
+ * `ruleCounts`, and `exitCode` from the filtered array.
+ *
+ * Why: the CLI layer calls `audit()` and then applies its own
+ * `allowedRuleIds` filter to drop suppressed (`off`) and preset-excluded
+ * (`info` rules not in `recommended`) diagnostics. The audit's own
+ * `score`/`counts` are computed BEFORE the CLI filter, so they still
+ * include the suppressed findings. That desync surfaces to consumers
+ * (the SaaS `--push` payload, the dashboard's counts-but-no-findings bug)
+ * and to the `score` itself (suppressed findings still penalize).
+ *
+ * Invariant enforced here:
+ *   report.errorCount + report.warnCount + report.infoCount === report.diagnostics.length
+ *   report.scoreResult.totalFindings === report.diagnostics.length
+ *
+ * `exitCode=2` (oxlint crash) is preserved verbatim; `exitCode=1` is
+ * recomputed from the surviving counts + the `failOn` gate.
+ */
+declare function filterReportByRules(report: AuditReport, allowedRuleIds: ReadonlySet<string>, failOn?: 'error' | 'warn' | 'none', oxlintStderr?: string): AuditReport;
+//#endregion
 //#region src/push.d.ts
 /**
  * The 6 fields the SaaS receives for each finding.
@@ -519,6 +542,8 @@ interface PushOptions {
   warnCount: number;
   infoCount: number;
   diagnostics: Diagnostic[];
+  /** Project root used to relativize absolute finding file paths. */
+  rootDir?: string;
   url: string;
   apiKey: string;
   fetchImpl?: typeof fetch;
@@ -538,8 +563,11 @@ type PushResult = {
  * Strip a list of Diagnostics down to the 6 allowed push fields.
  * Privacy boundary: this function is the single point of enforcement.
  * If you add a new privacy-sensitive field to Diagnostic, add it to the deny list here.
+ *
+ * Absolute file paths are relativized against rootDir so dashboards show
+ * `src/Foo.vue` rather than the CI runner's `/home/runner/work/<repo>/…`.
  */
-declare function stripFindings(diagnostics: Diagnostic[]): PushedFinding[];
+declare function stripFindings(diagnostics: Diagnostic[], rootDir?: string): PushedFinding[];
 /**
  * Build the top-level POST body. CI fields (commitSha, branch, prNumber) are
  * included ONLY when the matching GITHUB_* env var is set.
@@ -552,5 +580,5 @@ declare function buildPushPayload(input: PushPayloadInput): PushPayload;
  */
 declare function pushFindings(opts: PushOptions): Promise<PushResult>;
 //#endregion
-export { type ApplyInlineDisablesOptions, type AuditConfig, type AuditReport, type AuditTimings, BUILT_IN_RECOMMENDED, type Capability, type CliOverrides, ConfigCycleError, ConfigFileNotFoundError, type ConfigSource, DOCTOR_REPORT_SCHEMA_VERSION, DeadCodeImportFailed, DeadCodeTimeoutError, type Diagnostic, type DiagnosticSource, type DirectiveLine, type DirectiveRange, type DirectiveSet, type DoctorReport, type DoctorUserConfig, type Framework, type GitScopeMode, type InitConfigFormat, type InitFileWrite, type InitOptions, type InitPlan, type InitPreset, InvalidConfigError, type ListRulesFilter, type LoadRuleDocOptions, type MonorepoKind, type MonorepoResult, OxlintOutputTooLarge, OxlintSpawnFailed, type ProjectInfo, type ProjectInfoLite, type PushOptions, type PushPayload, type PushPayloadInput, type PushResult, type PushedFinding, RULE_REGISTRY, type RawInitAnswers, type RegisteredRule, type ReporterFormat, type ReporterInput, type ReporterOptions, type ResolvedDoctorConfig, type ResolvedInitAnswers, type RuleCategory, type RuleDoc, type RuleSource, type ScoreBreakdownEntry, type ScoreConfig, type ScoreResult, type Severity, type VerboseTraceOptions, type WorkspacePackage, agentReport, applyInlineDisables, audit, buildDoctorReport, buildPushPayload, checkBuildQuality, checkDeadCode, checkDeps, checkNuxtProject, dedupeDeadCodeAgainstLint, defineConfig, detectProject, detectSummary, docsUrl, encodeAnnotation, encodeAnnotations, findMonorepoRoot, format, isNuxtLayoutFile, isNuxtPageFile, isNuxtServerFile, jsonCompactReport, jsonReport, listChangedFiles, listRules, listWorkspacePackages, loadAllRuleDocs, loadDoctorConfig, loadRuleDoc, mergeCliOverrides, normalizeInitAnswers, parseDirectives, parseExcludeList, planInit, prCommentReport, prettyReport, pushFindings, renderDetectSummary, renderVerboseTrace, runCrossFilePass, sarifReport, scoreDiagnostics, stripFindings, validateConfig };
+export { type ApplyInlineDisablesOptions, type AuditConfig, type AuditReport, type AuditTimings, BUILT_IN_RECOMMENDED, type Capability, type CliOverrides, ConfigCycleError, ConfigFileNotFoundError, type ConfigSource, DOCTOR_REPORT_SCHEMA_VERSION, DeadCodeImportFailed, DeadCodeTimeoutError, type Diagnostic, type DiagnosticSource, type DirectiveLine, type DirectiveRange, type DirectiveSet, type DoctorReport, type DoctorUserConfig, type Framework, type GitScopeMode, type InitConfigFormat, type InitFileWrite, type InitOptions, type InitPlan, type InitPreset, InvalidConfigError, type ListRulesFilter, type LoadRuleDocOptions, type MonorepoKind, type MonorepoResult, OxlintOutputTooLarge, OxlintSpawnFailed, type ProjectInfo, type ProjectInfoLite, type PushOptions, type PushPayload, type PushPayloadInput, type PushResult, type PushedFinding, RULE_REGISTRY, type RawInitAnswers, type RegisteredRule, type ReporterFormat, type ReporterInput, type ReporterOptions, type ResolvedDoctorConfig, type ResolvedInitAnswers, type RuleCategory, type RuleDoc, type RuleSource, type ScoreBreakdownEntry, type ScoreConfig, type ScoreResult, type Severity, type VerboseTraceOptions, type WorkspacePackage, agentReport, applyInlineDisables, audit, buildDoctorReport, buildPushPayload, checkBuildQuality, checkDeadCode, checkDeps, checkNuxtProject, dedupeDeadCodeAgainstLint, defineConfig, detectProject, detectSummary, docsUrl, encodeAnnotation, encodeAnnotations, filterReportByRules, findMonorepoRoot, format, isNuxtLayoutFile, isNuxtPageFile, isNuxtServerFile, jsonCompactReport, jsonReport, listChangedFiles, listRules, listWorkspacePackages, loadAllRuleDocs, loadDoctorConfig, loadRuleDoc, mergeCliOverrides, normalizeInitAnswers, parseDirectives, parseExcludeList, planInit, prCommentReport, prettyReport, pushFindings, renderDetectSummary, renderVerboseTrace, runCrossFilePass, sarifReport, scoreDiagnostics, stripFindings, validateConfig };
 //# sourceMappingURL=index.d.ts.map

package/dist/index.js

@@ -1,5 +1,5 @@
 import { a as listRules, c as InvalidConfigError, i as RULE_REGISTRY, l as BUILT_IN_RECOMMENDED, o as ConfigCycleError, r as validateConfig, s as ConfigFileNotFoundError, t as loadDoctorConfig } from "./load-yXDi-5ti.js";
-import { dirname, join, relative, resolve } from "node:path";
+import { dirname, isAbsolute, join, relative, resolve } from "node:path";
 import { performance } from "node:perf_hooks";
 import { access, mkdir, mkdtemp, readFile, readdir, rm, writeFile } from "node:fs/promises";
 import { createRequire } from "node:module";
@@ -3011,7 +3011,7 @@ async function listWorkspacePackages(rootDir) {
 //#endregion
 //#region src/reporters/docs-url.ts
 function docsUrl(ruleId) {
-	return `https://docs.doctor.geoql.in/rules/${ruleId}`;
+	return `https://docs.the-doctor.report/rules/${ruleId}`;
 }
 //#endregion
 //#region src/reporters/render.ts
@@ -3374,7 +3374,7 @@ function jsonCompactReport(input) {
 }
 //#endregion
 //#region src/reporters/pr-comment.ts
-const DOCS_BASE = "https://docs.doctor.geoql.in/rules/";
+const DOCS_BASE = "https://docs.the-doctor.report/rules/";
 const MAX_PER_SECTION = 5;
 function binName(toolName) {
 	return toolName.replace("@geoql/", "");
@@ -3474,23 +3474,76 @@ function format(input, kind = "agent", options) {
 	return agentReport(input, options);
 }
 //#endregion
+//#region src/audit-filter.ts
+/**
+* Filter `report.diagnostics` to a known set of allowed rule ids, then
+* recompute `score`, `errorCount`, `warnCount`, `infoCount`, `scoreResult`,
+* `ruleCounts`, and `exitCode` from the filtered array.
+*
+* Why: the CLI layer calls `audit()` and then applies its own
+* `allowedRuleIds` filter to drop suppressed (`off`) and preset-excluded
+* (`info` rules not in `recommended`) diagnostics. The audit's own
+* `score`/`counts` are computed BEFORE the CLI filter, so they still
+* include the suppressed findings. That desync surfaces to consumers
+* (the SaaS `--push` payload, the dashboard's counts-but-no-findings bug)
+* and to the `score` itself (suppressed findings still penalize).
+*
+* Invariant enforced here:
+*   report.errorCount + report.warnCount + report.infoCount === report.diagnostics.length
+*   report.scoreResult.totalFindings === report.diagnostics.length
+*
+* `exitCode=2` (oxlint crash) is preserved verbatim; `exitCode=1` is
+* recomputed from the surviving counts + the `failOn` gate.
+*/
+function filterReportByRules(report, allowedRuleIds, failOn = "error", oxlintStderr) {
+	const filtered = [];
+	for (const d of report.diagnostics) if (allowedRuleIds.has(d.ruleId)) filtered.push(d);
+	const threshold = report.scoreResult.threshold;
+	const scoreResult = scoreDiagnostics(filtered, { threshold });
+	const ruleCounts = {};
+	for (const d of filtered) ruleCounts[d.ruleId] = (ruleCounts[d.ruleId] ?? 0) + 1;
+	let exitCode = report.exitCode;
+	if (exitCode !== 2) if (failOn === "none") exitCode = 0;
+	else exitCode = (failOn === "warn" ? scoreResult.errorCount + scoreResult.warnCount : scoreResult.errorCount) > 0 ? 1 : 0;
+	return {
+		...report,
+		diagnostics: filtered,
+		score: scoreResult.score,
+		errorCount: scoreResult.errorCount,
+		warnCount: scoreResult.warnCount,
+		infoCount: scoreResult.infoCount,
+		scoreResult,
+		ruleCounts,
+		exitCode
+	};
+}
+//#endregion
 //#region src/push.ts
 const PUSH_TIMEOUT_MS = 5e3;
 const categoryByRuleId = new Map(RULE_REGISTRY.map((r) => [r.id, r.category]));
 function lookupCategory(ruleId) {
 	return categoryByRuleId.get(ruleId) ?? "unknown";
 }
+function toRepoRelative(file, rootDir) {
+	if (!rootDir || !isAbsolute(file)) return file;
+	const rel = relative(rootDir, file);
+	if (rel.startsWith("..")) return file;
+	return rel;
+}
 /**
 * Strip a list of Diagnostics down to the 6 allowed push fields.
 * Privacy boundary: this function is the single point of enforcement.
 * If you add a new privacy-sensitive field to Diagnostic, add it to the deny list here.
+*
+* Absolute file paths are relativized against rootDir so dashboards show
+* `src/Foo.vue` rather than the CI runner's `/home/runner/work/<repo>/…`.
 */
-function stripFindings(diagnostics) {
+function stripFindings(diagnostics, rootDir) {
 	const out = new Array(diagnostics.length);
 	for (let i = 0; i < diagnostics.length; i++) {
 		const d = diagnostics[i];
 		out[i] = {
-			file: d.file,
+			file: toRepoRelative(d.file, rootDir),
 			line: d.line,
 			col: d.column,
 			ruleId: d.ruleId,
@@ -3537,7 +3590,7 @@ function buildPushPayload(input) {
 * exit code is not affected by SaaS downtime.
 */
 async function pushFindings(opts) {
-	const findings = stripFindings(opts.diagnostics);
+	const findings = stripFindings(opts.diagnostics, opts.rootDir);
 	const payload = buildPushPayload({
 		project: opts.project,
 		score: opts.score,
@@ -3580,6 +3633,6 @@ async function pushFindings(opts) {
 	}
 }
 //#endregion
-export { BUILT_IN_RECOMMENDED, ConfigCycleError, ConfigFileNotFoundError, DOCTOR_REPORT_SCHEMA_VERSION, DeadCodeImportFailed, DeadCodeTimeoutError, InvalidConfigError, OxlintOutputTooLarge, OxlintSpawnFailed, RULE_REGISTRY, agentReport, applyInlineDisables, audit, buildDoctorReport, buildPushPayload, checkBuildQuality, checkDeadCode, checkDeps, checkNuxtProject, dedupeDeadCodeAgainstLint, defineConfig, detectProject, detectSummary, docsUrl, encodeAnnotation, encodeAnnotations, findMonorepoRoot, format, isNuxtLayoutFile, isNuxtPageFile, isNuxtServerFile, jsonCompactReport, jsonReport, listChangedFiles, listRules, listWorkspacePackages, loadAllRuleDocs, loadDoctorConfig, loadRuleDoc, mergeCliOverrides, normalizeInitAnswers, parseDirectives, parseExcludeList, planInit, prCommentReport, prettyReport, pushFindings, renderDetectSummary, renderVerboseTrace, runCrossFilePass, sarifReport, scoreDiagnostics, stripFindings, validateConfig };
+export { BUILT_IN_RECOMMENDED, ConfigCycleError, ConfigFileNotFoundError, DOCTOR_REPORT_SCHEMA_VERSION, DeadCodeImportFailed, DeadCodeTimeoutError, InvalidConfigError, OxlintOutputTooLarge, OxlintSpawnFailed, RULE_REGISTRY, agentReport, applyInlineDisables, audit, buildDoctorReport, buildPushPayload, checkBuildQuality, checkDeadCode, checkDeps, checkNuxtProject, dedupeDeadCodeAgainstLint, defineConfig, detectProject, detectSummary, docsUrl, encodeAnnotation, encodeAnnotations, filterReportByRules, findMonorepoRoot, format, isNuxtLayoutFile, isNuxtPageFile, isNuxtServerFile, jsonCompactReport, jsonReport, listChangedFiles, listRules, listWorkspacePackages, loadAllRuleDocs, loadDoctorConfig, loadRuleDoc, mergeCliOverrides, normalizeInitAnswers, parseDirectives, parseExcludeList, planInit, prCommentReport, prettyReport, pushFindings, renderDetectSummary, renderVerboseTrace, runCrossFilePass, sarifReport, scoreDiagnostics, stripFindings, validateConfig };
 
 //# sourceMappingURL=index.js.map