@lyse-labs/lyse 0.1.0-alpha.2

package/dist/commands/audit-pipeline.js

@@ -0,0 +1,342 @@
+/**
+ * Shared audit pipeline — extracted so both the CLI and the fix orchestrator
+ * can run a full audit without going through the CLI entry point.
+ *
+ * Returns AuditResult plus auxiliary data (tokens, config) needed by the fix
+ * orchestrator to build a ClassifyContext.
+ */
+import { readFileSync, existsSync, readdirSync, statSync } from "node:fs";
+import { join, resolve } from "node:path";
+import { parse as parseYaml } from "yaml";
+import { loadConfig, resolveConfigPath } from "../config/schema.js";
+import { hashDeps } from "../util/hash-deps.js";
+import { detectFromPackageJson } from "../detection/from-package-json.js";
+import { walk, DEFAULT_EXCLUDE_PATHS } from "../walker.js";
+import { parseTs } from "../parsers/ts.js";
+import { parseCss } from "../parsers/css.js";
+import { extractCssInJs } from "../parsers/css-in-js.js";
+import { loadTokens } from "../loaders/tokens.js";
+import { loadStories } from "../loaders/stories.js";
+import { buildComponentInventory } from "../loaders/components.js";
+import { ruleObjects } from "../rules/registry.js";
+import { loadGeneratedPack } from "../rules/pack-loader.js";
+import { runRules } from "../rule-runner.js";
+import { scoreFromFindings } from "../scorer.js";
+import { VERSION } from "../index.js";
+import { RULES_VERSION } from "../rules/manifest.js";
+import { runLayer4Stage } from "../llm/layer4-stage.js";
+import { isSuppressed } from "../suppression/inline.js";
+import { loadLyseIgnore } from "../suppression/lyseignore.js";
+// Import for local use within this module (function signatures).
+import { RefuseToRunError } from "./audit-flags.js";
+// Re-export AuditFlags + RefuseToRunError for backward compatibility.
+// External callers (cli.ts, fix.ts, tests) import these from audit-pipeline.
+export { RefuseToRunError };
+function maybePrintRefreshHint(repoRoot) {
+    const metaPath = join(repoRoot, ".lyse", "init-meta.json");
+    if (!existsSync(metaPath))
+        return;
+    try {
+        const meta = JSON.parse(readFileSync(metaPath, "utf8"));
+        const daysSince = (Date.now() - meta.generated_at_ms) / 86_400_000;
+        const currentHash = hashDeps(repoRoot, meta.selected_deps);
+        const depsChanged = currentHash !== meta.deps_hash;
+        if (depsChanged) {
+            process.stderr.write(`[hint] Major dependency change detected since last init. Run 'lyse init --refresh' to update your rule pack.\n`);
+        }
+        else if (daysSince > 90) {
+            process.stderr.write(`[hint] Your rule pack was generated ${Math.floor(daysSince)} days ago. Consider 'lyse init --refresh' to regenerate it.\n`);
+        }
+    }
+    catch {
+        /* ignore malformed meta */
+    }
+}
+function readPackageJson(path) {
+    try {
+        return JSON.parse(readFileSync(path, "utf8"));
+    }
+    catch {
+        return null;
+    }
+}
+function collectAllDeps(pkg) {
+    return { ...pkg.dependencies, ...pkg.devDependencies };
+}
+function readWorkspaceGlobs(repoRoot, rootPkg) {
+    if (rootPkg.workspaces) {
+        if (Array.isArray(rootPkg.workspaces))
+            return rootPkg.workspaces;
+        if (rootPkg.workspaces.packages)
+            return rootPkg.workspaces.packages;
+    }
+    try {
+        const raw = readFileSync(join(repoRoot, "pnpm-workspace.yaml"), "utf8");
+        const parsed = parseYaml(raw);
+        if (parsed?.packages && Array.isArray(parsed.packages))
+            return parsed.packages;
+    }
+    catch {
+        // no pnpm-workspace.yaml — fine
+    }
+    return [];
+}
+// Workspace globs like "apps/*" — we only resolve the first wildcard level
+// (no recursive ** support) which is enough for the stack-detection signal we
+// need without pulling fast-glob into the audit hot path.
+function resolveWorkspaceGlob(repoRoot, glob) {
+    const segments = glob.split("/");
+    let candidates = [repoRoot];
+    for (const seg of segments) {
+        const next = [];
+        for (const base of candidates) {
+            if (seg === "*") {
+                try {
+                    for (const child of readdirSync(base)) {
+                        const full = join(base, child);
+                        try {
+                            if (statSync(full).isDirectory() && child !== "node_modules")
+                                next.push(full);
+                        }
+                        catch {
+                            // skip unreadable entries
+                        }
+                    }
+                }
+                catch {
+                    // skip unreadable directories
+                }
+            }
+            else {
+                next.push(join(base, seg));
+            }
+        }
+        candidates = next;
+    }
+    return candidates;
+}
+function detectStack(repoRoot) {
+    const rootPkg = readPackageJson(join(repoRoot, "package.json"));
+    if (!rootPkg)
+        return [];
+    const aggregate = collectAllDeps(rootPkg);
+    // Monorepo support: if the root package.json declares workspaces, merge sub-
+    // package deps so stack detection works for cal.com-style repos where react/
+    // tailwind/storybook live in `apps/web/package.json` not the root.
+    const globs = readWorkspaceGlobs(repoRoot, rootPkg);
+    if (globs.length > 0) {
+        const seen = new Set();
+        for (const glob of globs) {
+            for (const dir of resolveWorkspaceGlob(repoRoot, glob)) {
+                if (seen.has(dir))
+                    continue;
+                seen.add(dir);
+                const subPkg = readPackageJson(join(dir, "package.json"));
+                if (!subPkg)
+                    continue;
+                Object.assign(aggregate, collectAllDeps(subPkg));
+            }
+        }
+    }
+    const has = (k) => Object.prototype.hasOwnProperty.call(aggregate, k);
+    const stack = [];
+    if (has("react"))
+        stack.push("react");
+    if (has("tailwindcss"))
+        stack.push("tailwind");
+    if (has("@storybook/react") || has("storybook"))
+        stack.push("storybook");
+    if (has("styled-components"))
+        stack.push("styled-components");
+    return stack;
+}
+/**
+ * Run a full audit on a repository root.
+ * This is the same pipeline as the `lyse audit` CLI command, extracted for
+ * programmatic use by the fix orchestrator and future commands.
+ *
+ * @param repoRoot - Absolute path to the repository root.
+ * @param flags    - Optional CLI-level overrides (e.g. --static-only).
+ */
+export async function auditDirectory(repoRoot, flags) {
+    const absoluteRoot = resolve(repoRoot);
+    const t0 = Date.now();
+    const config = loadConfig(absoluteRoot);
+    // Resolve componentsModule: prefer explicit config, fall back to auto-detection
+    // so DS monorepos (workspace-walk branch) get scored without needing lyse init.
+    let componentsModule = config.designSystem?.componentsModule ?? null;
+    let dsSelfMode = false;
+    if (!componentsModule) {
+        const detected = await detectFromPackageJson(absoluteRoot);
+        componentsModule = detected.componentsModule.value ?? null;
+        // When detection source is "workspace DS export", the repo IS the DS itself.
+        // Rules like no-native-shadows and stories/coverage have consumer-of-DS semantics
+        // and must skip — v0.2 will add DS-self-aware rule variants.
+        if (detected.componentsModule.source.startsWith("workspace DS export")) {
+            dsSelfMode = true;
+        }
+    }
+    const userExcludePaths = config.designSystem?.excludePaths ?? [];
+    // `.lyseignore` patterns (loaded once at repo root) — same gitignore-style
+    // syntax as user `excludePaths`. Threaded to the walker and respected at
+    // the file-walk layer (no work done on these files at all).
+    const lyseIgnorePatterns = loadLyseIgnore(absoluteRoot);
+    // Combine DEFAULT_EXCLUDE_PATHS with user-provided excludePaths.
+    // User paths EXTEND the defaults (they never replace them).
+    // The walker already applies DEFAULT_EXCLUDE_PATHS internally; extraIgnores
+    // carries the user's additions so they are also respected at the walker layer.
+    const excludePaths = [...DEFAULT_EXCLUDE_PATHS, ...userExcludePaths, ...lyseIgnorePatterns];
+    flags?.progress?.update("Discovering files…");
+    const files = await walk(absoluteRoot, { extraIgnores: [...userExcludePaths, ...lyseIgnorePatterns] });
+    flags?.progress?.update(`Parsing source (${files.length} files)…`);
+    const parsed = { ts: [], css: [], cssInJs: [] };
+    // Keep the raw source per relative file path so we can apply inline
+    // suppression directives (`// lyse-disable-next-line <ruleId>`) AFTER
+    // runRules emits findings. Without this map, the directives — promised in
+    // docs/configuration.md — would silently no-op.
+    const fileContents = new Map();
+    let parseErrorCount = 0;
+    const fileResults = await Promise.all(files.map(async (path) => {
+        const source = readFileSync(path, "utf8");
+        const rel = path.startsWith(absoluteRoot + "/") ? path.slice(absoluteRoot.length + 1) : path;
+        if (/\.(tsx?|jsx?|mjs|cjs)$/.test(path)) {
+            const ts = await parseTs(rel, source);
+            const cssInJs = ts.ast !== null ? extractCssInJs(rel, source) : [];
+            return { kind: "ts", ts, cssInJs, rel, source };
+        }
+        if (/\.(s?css)$/.test(path)) {
+            const css = await parseCss(rel, source);
+            return { kind: "css", css, path, rel, source };
+        }
+        return null;
+    }));
+    for (const r of fileResults) {
+        if (r)
+            fileContents.set(r.rel, r.source);
+    }
+    for (const r of fileResults) {
+        if (r?.kind === "ts") {
+            parsed.ts.push(r.ts);
+            if (r.ts.ast === null)
+                parseErrorCount++;
+            else
+                parsed.cssInJs.push(...r.cssInJs);
+        }
+        else if (r?.kind === "css") {
+            if (r.css.skipped) {
+                // The walker only globs `.css` / `.scss` and the SCSS transform either
+                // succeeds or falls back to `skipped: true` — both reach this branch
+                // as a generic parse error.
+                parseErrorCount++;
+            }
+            else {
+                parsed.css.push(r.css);
+            }
+        }
+    }
+    if (parseErrorCount > 0) {
+        process.stderr.write(`[lyse] Warning: skipped ${parseErrorCount} file${parseErrorCount !== 1 ? "s" : ""} due to parse errors ` +
+            `(malformed source — file is excluded from audit results)\n`);
+    }
+    flags?.progress?.update("Loading tokens + components + stories…");
+    const tokens = await loadTokens(absoluteRoot);
+    const storyIndex = await loadStories(absoluteRoot);
+    const componentInventory = componentsModule
+        ? buildComponentInventory(componentsModule, parsed.ts)
+        : [];
+    const ctx = {
+        repoRoot: absoluteRoot,
+        tokens,
+        componentsModule,
+        componentInventory,
+        storyIndex,
+        excludePaths,
+        dsSelfMode,
+    };
+    const generated = loadGeneratedPack(absoluteRoot);
+    for (const w of generated.warnings)
+        process.stderr.write(`[lyse] ${w}\n`);
+    const allRules = [...ruleObjects, ...generated.rules];
+    flags?.progress?.update(`Running ${allRules.length} rules…`);
+    const runResult = await runRules(allRules, ctx, parsed);
+    // Apply inline suppression directives — `// lyse-disable-next-line <ruleId>`
+    // and `/* lyse-disable <ruleId> */` — to drop findings the user has
+    // explicitly approved. Filter happens AFTER the rule engine so rules don't
+    // need to be suppression-aware. Per `packages/core/src/suppression/inline.ts`.
+    const suppressedCount = { value: 0 };
+    runResult.findings = runResult.findings.filter((f) => {
+        const source = fileContents.get(f.location.file);
+        if (!source)
+            return true;
+        if (isSuppressed(source, f.ruleId, f.location.line)) {
+            suppressedCount.value++;
+            return false;
+        }
+        return true;
+    });
+    // Re-tally findingsByAxis after suppression to keep score math accurate.
+    for (const axis of Object.keys(runResult.findingsByAxis)) {
+        runResult.findingsByAxis[axis] = runResult.findings.filter((f) => f.axis === axis).length;
+    }
+    // -----------------------------------------------------------------------
+    // Layer 4: LLM augmentation (ADR-0015) — delegated to llm/layer4-stage.ts.
+    // -----------------------------------------------------------------------
+    const layer4 = await runLayer4Stage({
+        repoRoot: absoluteRoot,
+        config,
+        flags,
+        staticFindings: runResult.findings,
+    });
+    // Merge augmented findings into static findings BEFORE scoring so the
+    // final score reflects both Layers 1+2 and Layer 4.
+    if (layer4.augmentedFindings.length > 0) {
+        runResult.findings.push(...layer4.augmentedFindings);
+        // Keep findingsByAxis counts in sync so score() reflects the new findings.
+        for (const f of layer4.augmentedFindings) {
+            const ax = f.axis;
+            if (ax in runResult.findingsByAxis) {
+                runResult.findingsByAxis[ax]++;
+            }
+        }
+        // Re-sort by severity (error < warn < info)
+        const severityOrder = { error: 0, warn: 1, info: 2 };
+        runResult.findings.sort((a, b) => (severityOrder[a.severity] ?? 9) - (severityOrder[b.severity] ?? 9));
+    }
+    const layer4Meta = layer4.meta;
+    // -----------------------------------------------------------------------
+    // Phase 4.1 — v2 scorer: severity-weighted rate + log-scaled absolute cap.
+    // We pass the flat findings list (post-suppression, post-Layer-4) directly;
+    // the adapter aggregates into per-axis severity buckets internally.
+    flags?.progress?.update("Scoring…");
+    const scoring = scoreFromFindings(runResult.findings, runResult.opportunitiesByAxis);
+    const result = {
+        schemaVersion: 2,
+        rulesVersion: RULES_VERSION,
+        toolVersion: VERSION,
+        // "scoring-v1" = pinned axis-weighted formula in `scorer.ts` (the v0.1.0
+        // active path). The sub-axis-aware variant (`computeScoreV1` in
+        // `reliability/score/formula-v1.ts`) is read-only at v0.1.0 — powers
+        // `lyse explain --score` and goes live as the actual scorer once gold-set
+        // promotion of sub-axes to `stable` lands (v0.2+). Same semver bump.
+        scoringVersion: "scoring-v1",
+        repoRoot: absoluteRoot,
+        timestamp: new Date().toISOString(),
+        stack: detectStack(absoluteRoot),
+        finalScore: scoring.finalScore,
+        tier: scoring.tier,
+        axes: scoring.axes,
+        findings: runResult.findings,
+        meta: {
+            ...(layer4Meta ? { layer4: layer4Meta } : {}),
+            coverage: {
+                scannedFiles: files.length,
+                durationMs: Date.now() - t0,
+                configPath: resolveConfigPath(absoluteRoot),
+                ...(runResult.parseErrors.length > 0 ? { parseErrors: runResult.parseErrors } : {}),
+            },
+        },
+    };
+    maybePrintRefreshHint(absoluteRoot);
+    return { result, tokens, config, componentInventory, fileCount: files.length };
+}
+//# sourceMappingURL=audit-pipeline.js.map

package/dist/commands/audit-pipeline.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"audit-pipeline.js","sourceRoot":"","sources":["../../src/commands/audit-pipeline.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,YAAY,EAAE,UAAU,EAAE,WAAW,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AAC1E,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,KAAK,IAAI,SAAS,EAAE,MAAM,MAAM,CAAC;AAC1C,OAAO,EAAE,UAAU,EAAE,iBAAiB,EAAE,MAAM,qBAAqB,CAAC;AACpE,OAAO,EAAE,QAAQ,EAAE,MAAM,sBAAsB,CAAC;AAChD,OAAO,EAAE,qBAAqB,EAAE,MAAM,mCAAmC,CAAC;AAC1E,OAAO,EAAE,IAAI,EAAE,qBAAqB,EAAE,MAAM,cAAc,CAAC;AAC3D,OAAO,EAAE,OAAO,EAAE,MAAM,kBAAkB,CAAC;AAC3C,OAAO,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAC;AAC7C,OAAO,EAAE,cAAc,EAAE,MAAM,yBAAyB,CAAC;AACzD,OAAO,EAAE,UAAU,EAAE,MAAM,sBAAsB,CAAC;AAClD,OAAO,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAC;AACpD,OAAO,EAAE,uBAAuB,EAAE,MAAM,0BAA0B,CAAC;AACnE,OAAO,EAAE,WAAW,EAAE,MAAM,sBAAsB,CAAC;AACnD,OAAO,EAAE,iBAAiB,EAAE,MAAM,yBAAyB,CAAC;AAC5D,OAAO,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAC;AAC7C,OAAO,EAAE,iBAAiB,EAAE,MAAM,cAAc,CAAC;AACjD,OAAO,EAAE,OAAO,EAAE,MAAM,aAAa,CAAC;AACtC,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AACrD,OAAO,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAC;AACxD,OAAO,EAAE,YAAY,EAAE,MAAM,0BAA0B,CAAC;AACxD,OAAO,EAAE,cAAc,EAAE,MAAM,8BAA8B,CAAC;AAW9D,iEAAiE;AACjE,OAAO,EAAE,gBAAgB,EAAmB,MAAM,kBAAkB,CAAC;AACrE,sEAAsE;AACtE,6EAA6E;AAC7E,OAAO,EAAE,gBAAgB,EAAmB,CAAC;AAe7C,SAAS,qBAAqB,CAAC,QAAgB;IAC7C,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,EAAE,OAAO,EAAE,gBAAgB,CAAC,CAAC;IAC3D,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC;QAAE,OAAO;IAClC,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,QAAQ,EAAE,MAAM,CAAC,CAIrD,CAAC;QACF,MAAM,SAAS,GAAG,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,eAAe,CAAC,GAAG,UAAU,CAAC;QACnE,MAAM,WAAW,GAAG,QAAQ,CAAC,QAAQ,EAAE,IAAI,CAAC,aAAa,CAAC,CAAC;QAC3D,MAAM,WAAW,GAAG,WAAW,KAAK,IAAI,CAAC,SAAS,CAAC;QACnD,IAAI,WAAW,EAAE,CAAC;YAChB,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,gHAAgH,CACjH,CAAC;QACJ,CAAC;aAAM,IAAI,SAAS,GAAG,EAAE,EAAE,CAAC;YAC1B,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,uCAAuC,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,+DAA+D,CAC5H,CAAC;QACJ,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,2BAA2B;IAC7B,CAAC;AACH,CAAC;AAQD,SAAS,eAAe,CAAC,IAAY;IACnC,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAoB,CAAC;IACnE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,SAAS,cAAc,CAAC,GAAoB;IAC1C,OAAO,EAAE,GAAG,GAAG,CAAC,YAAY,EAAE,GAAG,GAAG,CAAC,eAAe,EAAE,CAAC;AACzD,CAAC;AAED,SAAS,kBAAkB,CAAC,QAAgB,EAAE,OAAwB;IACpE,IAAI,OAAO,CAAC,UAAU,EAAE,CAAC;QACvB,IAAI,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,UAAU,CAAC;YAAE,OAAO,OAAO,CAAC,UAAU,CAAC;QACjE,IAAI,OAAO,CAAC,UAAU,CAAC,QAAQ;YAAE,OAAO,OAAO,CAAC,UAAU,CAAC,QAAQ,CAAC;IACtE,CAAC;IACD,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,YAAY,CAAC,IAAI,CAAC,QAAQ,EAAE,qBAAqB,CAAC,EAAE,MAAM,CAAC,CAAC;QACxE,MAAM,MAAM,GAAG,SAAS,CAAC,GAAG,CAAmC,CAAC;QAChE,IAAI,MAAM,EAAE,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC;YAAE,OAAO,MAAM,CAAC,QAAQ,CAAC;IACjF,CAAC;IAAC,MAAM,CAAC;QACP,gCAAgC;IAClC,CAAC;IACD,OAAO,EAAE,CAAC;AACZ,CAAC;AAED,2EAA2E;AAC3E,8EAA8E;AAC9E,0DAA0D;AAC1D,SAAS,oBAAoB,CAAC,QAAgB,EAAE,IAAY;IAC1D,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACjC,IAAI,UAAU,GAAG,CAAC,QAAQ,CAAC,CAAC;IAC5B,KAAK,MAAM,GAAG,IAAI,QAAQ,EAAE,CAAC;QAC3B,MAAM,IAAI,GAAa,EAAE,CAAC;QAC1B,KAAK,MAAM,IAAI,IAAI,UAAU,EAAE,CAAC;YAC9B,IAAI,GAAG,KAAK,GAAG,EAAE,CAAC;gBAChB,IAAI,CAAC;oBACH,KAAK,MAAM,KAAK,IAAI,WAAW,CAAC,IAAI,CAAC,EAAE,CAAC;wBACtC,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;wBAC/B,IAAI,CAAC;4BACH,IAAI,QAAQ,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE,IAAI,KAAK,KAAK,cAAc;gCAAE,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;wBAChF,CAAC;wBAAC,MAAM,CAAC;4BACP,0BAA0B;wBAC5B,CAAC;oBACH,CAAC;gBACH,CAAC;gBAAC,MAAM,CAAC;oBACP,8BAA8B;gBAChC,CAAC;YACH,CAAC;iBAAM,CAAC;gBACN,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,CAAC;YAC7B,CAAC;QACH,CAAC;QACD,UAAU,GAAG,IAAI,CAAC;IACpB,CAAC;IACD,OAAO,UAAU,CAAC;AACpB,CAAC;AAED,SAAS,WAAW,CAAC,QAAgB;IACnC,MAAM,OAAO,GAAG,eAAe,CAAC,IAAI,CAAC,QAAQ,EAAE,cAAc,CAAC,CAAC,CAAC;IAChE,IAAI,CAAC,OAAO;QAAE,OAAO,EAAE,CAAC;IAExB,MAAM,SAAS,GAA2B,cAAc,CAAC,OAAO,CAAC,CAAC;IAClE,6EAA6E;IAC7E,6EAA6E;IAC7E,mEAAmE;IACnE,MAAM,KAAK,GAAG,kBAAkB,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;IACpD,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACrB,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;QAC/B,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,KAAK,MAAM,GAAG,IAAI,oBAAoB,CAAC,QAAQ,EAAE,IAAI,CAAC,EAAE,CAAC;gBACvD,IAAI,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;oBAAE,SAAS;gBAC5B,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;gBACd,MAAM,MAAM,GAAG,eAAe,CAAC,IAAI,CAAC,GAAG,EAAE,cAAc,CAAC,CAAC,CAAC;gBAC1D,IAAI,CAAC,MAAM;oBAAE,SAAS;gBACtB,MAAM,CAAC,MAAM,CAAC,SAAS,EAAE,cAAc,CAAC,MAAM,CAAC,CAAC,CAAC;YACnD,CAAC;QACH,CAAC;IACH,CAAC;IAED,MAAM,GAAG,GAAG,CAAC,CAAS,EAAW,EAAE,CAAC,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC;IACvF,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,IAAI,GAAG,CAAC,OAAO,CAAC;QAAE,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACtC,IAAI,GAAG,CAAC,aAAa,CAAC;QAAE,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IAC/C,IAAI,GAAG,CAAC,kBAAkB,CAAC,IAAI,GAAG,CAAC,WAAW,CAAC;QAAE,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;IACzE,IAAI,GAAG,CAAC,mBAAmB,CAAC;QAAE,KAAK,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC;IAC9D,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,QAAgB,EAAE,KAAkB;IACvE,MAAM,YAAY,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC;IACvC,MAAM,EAAE,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACtB,MAAM,MAAM,GAAG,UAAU,CAAC,YAAY,CAAC,CAAC;IAExC,gFAAgF;IAChF,gFAAgF;IAChF,IAAI,gBAAgB,GAAG,MAAM,CAAC,YAAY,EAAE,gBAAgB,IAAI,IAAI,CAAC;IACrE,IAAI,UAAU,GAAG,KAAK,CAAC;IACvB,IAAI,CAAC,gBAAgB,EAAE,CAAC;QACtB,MAAM,QAAQ,GAAG,MAAM,qBAAqB,CAAC,YAAY,CAAC,CAAC;QAC3D,gBAAgB,GAAG,QAAQ,CAAC,gBAAgB,CAAC,KAAK,IAAI,IAAI,CAAC;QAC3D,6EAA6E;QAC7E,kFAAkF;QAClF,6DAA6D;QAC7D,IAAI,QAAQ,CAAC,gBAAgB,CAAC,MAAM,CAAC,UAAU,CAAC,qBAAqB,CAAC,EAAE,CAAC;YACvE,UAAU,GAAG,IAAI,CAAC;QACpB,CAAC;IACH,CAAC;IAED,MAAM,gBAAgB,GAAG,MAAM,CAAC,YAAY,EAAE,YAAY,IAAI,EAAE,CAAC;IACjE,2EAA2E;IAC3E,yEAAyE;IACzE,4DAA4D;IAC5D,MAAM,kBAAkB,GAAG,cAAc,CAAC,YAAY,CAAC,CAAC;IAExD,iEAAiE;IACjE,4DAA4D;IAC5D,4EAA4E;IAC5E,+EAA+E;IAC/E,MAAM,YAAY,GAAG,CAAC,GAAG,qBAAqB,EAAE,GAAG,gBAAgB,EAAE,GAAG,kBAAkB,CAAC,CAAC;IAC5F,KAAK,EAAE,QAAQ,EAAE,MAAM,CAAC,oBAAoB,CAAC,CAAC;IAC9C,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,YAAY,EAAE,EAAE,YAAY,EAAE,CAAC,GAAG,gBAAgB,EAAE,GAAG,kBAAkB,CAAC,EAAE,CAAC,CAAC;IACvG,KAAK,EAAE,QAAQ,EAAE,MAAM,CAAC,mBAAmB,KAAK,CAAC,MAAM,UAAU,CAAC,CAAC;IACnE,MAAM,MAAM,GAAgB,EAAE,EAAE,EAAE,EAAE,EAAE,GAAG,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC;IAC7D,oEAAoE;IACpE,sEAAsE;IACtE,0EAA0E;IAC1E,gDAAgD;IAChD,MAAM,YAAY,GAAG,IAAI,GAAG,EAAkB,CAAC;IAC/C,IAAI,eAAe,GAAG,CAAC,CAAC;IAOxB,MAAM,WAAW,GAAG,MAAM,OAAO,CAAC,GAAG,CACnC,KAAK,CAAC,GAAG,CAAC,KAAK,EAAE,IAAI,EAAuB,EAAE;QAC5C,MAAM,MAAM,GAAG,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QAC1C,MAAM,GAAG,GAAG,IAAI,CAAC,UAAU,CAAC,YAAY,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QAC7F,IAAI,wBAAwB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YACxC,MAAM,EAAE,GAAG,MAAM,OAAO,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;YACtC,MAAM,OAAO,GAAG,EAAE,CAAC,GAAG,KAAK,IAAI,CAAC,CAAC,CAAC,cAAc,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YACnE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,EAAE,CAAC;QAClD,CAAC;QACD,IAAI,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YAC5B,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;YACxC,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG,EAAE,MAAM,EAAE,CAAC;QACjD,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC,CAAC,CACH,CAAC;IAEF,KAAK,MAAM,CAAC,IAAI,WAAW,EAAE,CAAC;QAC5B,IAAI,CAAC;YAAE,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC;IAC3C,CAAC;IAED,KAAK,MAAM,CAAC,IAAI,WAAW,EAAE,CAAC;QAC5B,IAAI,CAAC,EAAE,IAAI,KAAK,IAAI,EAAE,CAAC;YACrB,MAAM,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;YACrB,IAAI,CAAC,CAAC,EAAE,CAAC,GAAG,KAAK,IAAI;gBAAE,eAAe,EAAE,CAAC;;gBACpC,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,CAAC;QACzC,CAAC;aAAM,IAAI,CAAC,EAAE,IAAI,KAAK,KAAK,EAAE,CAAC;YAC7B,IAAI,CAAC,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC;gBAClB,uEAAuE;gBACvE,qEAAqE;gBACrE,4BAA4B;gBAC5B,eAAe,EAAE,CAAC;YACpB,CAAC;iBAAM,CAAC;gBACN,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;YACzB,CAAC;QACH,CAAC;IACH,CAAC;IACD,IAAI,eAAe,GAAG,CAAC,EAAE,CAAC;QACxB,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,2BAA2B,eAAe,QAAQ,eAAe,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,uBAAuB;YACvG,4DAA4D,CAC/D,CAAC;IACJ,CAAC;IAED,KAAK,EAAE,QAAQ,EAAE,MAAM,CAAC,wCAAwC,CAAC,CAAC;IAClE,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,YAAY,CAAC,CAAC;IAC9C,MAAM,UAAU,GAAG,MAAM,WAAW,CAAC,YAAY,CAAC,CAAC;IACnD,MAAM,kBAAkB,GAAG,gBAAgB;QACzC,CAAC,CAAC,uBAAuB,CAAC,gBAAgB,EAAE,MAAM,CAAC,EAAE,CAAC;QACtD,CAAC,CAAC,EAAE,CAAC;IAEP,MAAM,GAAG,GAAgB;QACvB,QAAQ,EAAE,YAAY;QACtB,MAAM;QACN,gBAAgB;QAChB,kBAAkB;QAClB,UAAU;QACV,YAAY;QACZ,UAAU;KACX,CAAC;IAEF,MAAM,SAAS,GAAG,iBAAiB,CAAC,YAAY,CAAC,CAAC;IAClD,KAAK,MAAM,CAAC,IAAI,SAAS,CAAC,QAAQ;QAAE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;IAC1E,MAAM,QAAQ,GAAG,CAAC,GAAG,WAAW,EAAE,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC;IACtD,KAAK,EAAE,QAAQ,EAAE,MAAM,CAAC,WAAW,QAAQ,CAAC,MAAM,SAAS,CAAC,CAAC;IAC7D,MAAM,SAAS,GAAG,MAAM,QAAQ,CAAC,QAAQ,EAAE,GAAG,EAAE,MAAM,CAAC,CAAC;IAExD,6EAA6E;IAC7E,oEAAoE;IACpE,2EAA2E;IAC3E,+EAA+E;IAC/E,MAAM,eAAe,GAAG,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC;IACrC,SAAS,CAAC,QAAQ,GAAG,SAAS,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE;QACnD,MAAM,MAAM,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;QACjD,IAAI,CAAC,MAAM;YAAE,OAAO,IAAI,CAAC;QACzB,IAAI,YAAY,CAAC,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;YACpD,eAAe,CAAC,KAAK,EAAE,CAAC;YACxB,OAAO,KAAK,CAAC;QACf,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC,CAAC,CAAC;IACH,yEAAyE;IACzE,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,cAAc,CAA8C,EAAE,CAAC;QACtG,SAAS,CAAC,cAAc,CAAC,IAAI,CAAC,GAAG,SAAS,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC,MAAM,CAAC;IAC5F,CAAC;IAED,0EAA0E;IAC1E,2EAA2E;IAC3E,0EAA0E;IAC1E,MAAM,MAAM,GAAG,MAAM,cAAc,CAAC;QAClC,QAAQ,EAAE,YAAY;QACtB,MAAM;QACN,KAAK;QACL,cAAc,EAAE,SAAS,CAAC,QAAQ;KACnC,CAAC,CAAC;IAEH,sEAAsE;IACtE,oDAAoD;IACpD,IAAI,MAAM,CAAC,iBAAiB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACxC,SAAS,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,iBAAiB,CAAC,CAAC;QACrD,2EAA2E;QAC3E,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,iBAAiB,EAAE,CAAC;YACzC,MAAM,EAAE,GAAG,CAAC,CAAC,IAA6C,CAAC;YAC3D,IAAI,EAAE,IAAI,SAAS,CAAC,cAAc,EAAE,CAAC;gBACnC,SAAS,CAAC,cAAc,CAAC,EAAE,CAAC,EAAE,CAAC;YACjC,CAAC;QACH,CAAC;QACD,4CAA4C;QAC5C,MAAM,aAAa,GAA2B,EAAE,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;QAC7E,SAAS,CAAC,QAAQ,CAAC,IAAI,CACrB,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAC9E,CAAC;IACJ,CAAC;IACD,MAAM,UAAU,GAAe,MAAM,CAAC,IAAI,CAAC;IAC3C,0EAA0E;IAE1E,2EAA2E;IAC3E,4EAA4E;IAC5E,oEAAoE;IACpE,KAAK,EAAE,QAAQ,EAAE,MAAM,CAAC,UAAU,CAAC,CAAC;IACpC,MAAM,OAAO,GAAG,iBAAiB,CAAC,SAAS,CAAC,QAAQ,EAAE,SAAS,CAAC,mBAAmB,CAAC,CAAC;IAErF,MAAM,MAAM,GAAgB;QAC1B,aAAa,EAAE,CAAC;QAChB,YAAY,EAAE,aAAa;QAC3B,WAAW,EAAE,OAAO;QACpB,yEAAyE;QACzE,gEAAgE;QAChE,qEAAqE;QACrE,0EAA0E;QAC1E,qEAAqE;QACrE,cAAc,EAAE,YAAY;QAC5B,QAAQ,EAAE,YAAY;QACtB,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QACnC,KAAK,EAAE,WAAW,CAAC,YAAY,CAAC;QAChC,UAAU,EAAE,OAAO,CAAC,UAAU;QAC9B,IAAI,EAAE,OAAO,CAAC,IAAI;QAClB,IAAI,EAAE,OAAO,CAAC,IAAI;QAClB,QAAQ,EAAE,SAAS,CAAC,QAAQ;QAC5B,IAAI,EAAE;YACJ,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC7C,QAAQ,EAAE;gBACR,YAAY,EAAE,KAAK,CAAC,MAAM;gBAC1B,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE;gBAC3B,UAAU,EAAE,iBAAiB,CAAC,YAAY,CAAC;gBAC3C,GAAG,CAAC,SAAS,CAAC,WAAW,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,SAAS,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aACpF;SACF;KACF,CAAC;IAEF,qBAAqB,CAAC,YAAY,CAAC,CAAC;IACpC,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,kBAAkB,EAAE,SAAS,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC;AACjF,CAAC"}

package/dist/commands/bench-pack.d.ts

@@ -0,0 +1,5 @@
+export interface RunBenchPackOptions {
+    cwd: string;
+    output: string;
+}
+export declare function runBenchPack(opts: RunBenchPackOptions): Promise<void>;

package/dist/commands/bench-pack.js

@@ -0,0 +1,61 @@
+import { writeFile, mkdir, readFile } from "node:fs/promises";
+import { dirname, basename, join, resolve } from "node:path";
+import { execFileSync } from "node:child_process";
+import { buildEvidencePack } from "../bench/evidence-pack/builder.js";
+import { VERSION } from "../index.js";
+function resolveHeadSha(repoRoot) {
+    try {
+        return execFileSync("git", ["rev-parse", "HEAD"], { cwd: repoRoot, encoding: "utf8" }).trim();
+    }
+    catch {
+        return "unknown";
+    }
+}
+async function readPackageJsonName(repoRoot) {
+    try {
+        const raw = await readFile(join(repoRoot, "package.json"), "utf8");
+        const parsed = JSON.parse(raw);
+        if (typeof parsed.name === "string" && parsed.name.length > 0)
+            return parsed.name;
+    }
+    catch {
+        // ignore
+    }
+    return null;
+}
+async function resolveOwnerName(repoRoot) {
+    // package.json `name` is the most reliable identifier when the bench pack is
+    // produced from a non-git fixture or a subdirectory whose parent git repo is
+    // not the package under audit. When present, it wins over the parsed remote.
+    const pkgName = await readPackageJsonName(repoRoot);
+    try {
+        const remote = execFileSync("git", ["config", "--get", "remote.origin.url"], { cwd: repoRoot, encoding: "utf8" }).trim();
+        const match = remote.match(/[:/]([^/]+)\/([^/.]+?)(\.git)?$/);
+        if (match) {
+            return { owner: match[1] ?? "unknown", name: pkgName ?? match[2] ?? "unknown" };
+        }
+    }
+    catch {
+        // fallthrough
+    }
+    if (pkgName !== null)
+        return { owner: "unknown", name: pkgName };
+    return { owner: "unknown", name: basename(repoRoot) };
+}
+export async function runBenchPack(opts) {
+    const repoRoot = resolve(opts.cwd);
+    const headSha = resolveHeadSha(repoRoot);
+    const ownerName = await resolveOwnerName(repoRoot);
+    const pack = await buildEvidencePack({
+        repoRoot,
+        owner: ownerName.owner,
+        name: ownerName.name,
+        headSha,
+        lyseCliVersion: VERSION,
+        extractedAt: new Date().toISOString(),
+    });
+    await mkdir(dirname(resolve(opts.output)), { recursive: true });
+    await writeFile(resolve(opts.output), JSON.stringify(pack), "utf8");
+    console.log(`bench-pack: wrote ${opts.output}`);
+}
+//# sourceMappingURL=bench-pack.js.map

package/dist/commands/bench-pack.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"bench-pack.js","sourceRoot":"","sources":["../../src/commands/bench-pack.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC9D,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAC7D,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,iBAAiB,EAAE,MAAM,mCAAmC,CAAC;AACtE,OAAO,EAAE,OAAO,EAAE,MAAM,aAAa,CAAC;AAOtC,SAAS,cAAc,CAAC,QAAgB;IACtC,IAAI,CAAC;QACH,OAAO,YAAY,CAAC,KAAK,EAAE,CAAC,WAAW,EAAE,MAAM,CAAC,EAAE,EAAE,GAAG,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IAChG,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED,KAAK,UAAU,mBAAmB,CAAC,QAAgB;IACjD,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,QAAQ,EAAE,cAAc,CAAC,EAAE,MAAM,CAAC,CAAC;QACnE,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAsB,CAAC;QACpD,IAAI,OAAO,MAAM,CAAC,IAAI,KAAK,QAAQ,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC;YAAE,OAAO,MAAM,CAAC,IAAI,CAAC;IACpF,CAAC;IAAC,MAAM,CAAC;QACP,SAAS;IACX,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,KAAK,UAAU,gBAAgB,CAAC,QAAgB;IAC9C,6EAA6E;IAC7E,6EAA6E;IAC7E,6EAA6E;IAC7E,MAAM,OAAO,GAAG,MAAM,mBAAmB,CAAC,QAAQ,CAAC,CAAC;IACpD,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,YAAY,CAAC,KAAK,EAAE,CAAC,QAAQ,EAAE,OAAO,EAAE,mBAAmB,CAAC,EAAE,EAAE,GAAG,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;QACzH,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,iCAAiC,CAAC,CAAC;QAC9D,IAAI,KAAK,EAAE,CAAC;YACV,OAAO,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC,IAAI,SAAS,EAAE,IAAI,EAAE,OAAO,IAAI,KAAK,CAAC,CAAC,CAAC,IAAI,SAAS,EAAE,CAAC;QAClF,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,cAAc;IAChB,CAAC;IACD,IAAI,OAAO,KAAK,IAAI;QAAE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;IACjE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;AACxD,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,IAAyB;IAC1D,MAAM,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACnC,MAAM,OAAO,GAAG,cAAc,CAAC,QAAQ,CAAC,CAAC;IACzC,MAAM,SAAS,GAAG,MAAM,gBAAgB,CAAC,QAAQ,CAAC,CAAC;IACnD,MAAM,IAAI,GAAG,MAAM,iBAAiB,CAAC;QACnC,QAAQ;QACR,KAAK,EAAE,SAAS,CAAC,KAAK;QACtB,IAAI,EAAE,SAAS,CAAC,IAAI;QACpB,OAAO;QACP,cAAc,EAAE,OAAO;QACvB,WAAW,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;KACtC,CAAC,CAAC;IAEH,MAAM,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAChE,MAAM,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC,CAAC;IACpE,OAAO,CAAC,GAAG,CAAC,qBAAqB,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;AAClD,CAAC"}

package/dist/commands/ci-setup.d.ts

@@ -0,0 +1,9 @@
+export interface CiSetupOptions {
+    cwd: string;
+    threshold?: number;
+    postPrComment?: boolean;
+    uploadSarif?: boolean;
+    publishBench?: boolean;
+    autoApprove?: boolean;
+}
+export declare function runCiSetup(opt: CiSetupOptions): Promise<void>;

package/dist/commands/ci-setup.js

@@ -0,0 +1,42 @@
+import { readFile, writeFile, mkdir, access } from "node:fs/promises";
+import { join, dirname } from "node:path";
+import { fileURLToPath } from "node:url";
+import { detectFromGit } from "../detection/from-git.js";
+import { confirm } from "../menu/prompts.js";
+import { appendCiSetupCompletedEvent } from "../history/ndjson-store.js";
+export async function runCiSetup(opt) {
+    const git = await detectFromGit(opt.cwd);
+    if (!git.github.value) {
+        throw new Error("No GitHub remote detected. `lyse ci setup` requires a GitHub repo.");
+    }
+    const wfPath = join(opt.cwd, ".github/workflows/lyse.yml");
+    try {
+        await access(wfPath);
+        if (!opt.autoApprove) {
+            const overwrite = await confirm(`.github/workflows/lyse.yml exists. Overwrite?`, false);
+            if (!overwrite) {
+                console.log("Aborted (existing file preserved).");
+                return;
+            }
+        }
+    }
+    catch {
+        // File does not exist — proceed to create
+    }
+    // Read template — file is co-located via package.json files[]
+    const templatePath = join(dirname(fileURLToPath(import.meta.url)), "templates/lyse-workflow.yml.template");
+    const template = await readFile(templatePath, "utf8");
+    const rendered = template
+        .replaceAll("{{ default_branch }}", git.git.value?.defaultBranch ?? "main")
+        .replaceAll("{{ threshold }}", String(opt.threshold ?? 70))
+        .replaceAll("{{ post_pr_comment }}", String(opt.postPrComment ?? true))
+        .replaceAll("{{ upload_sarif }}", String(opt.uploadSarif ?? true))
+        .replaceAll("{{ publish_bench }}", String(opt.publishBench ?? false));
+    await mkdir(join(opt.cwd, ".github/workflows"), { recursive: true });
+    await writeFile(wfPath, rendered);
+    console.log(`✓ Created ${wfPath}`);
+    console.log(`  Don't forget: git add .github/workflows/lyse.yml && commit && push`);
+    // Emit telemetry event (opt-in only)
+    await appendCiSetupCompletedEvent(opt.cwd, opt.threshold ?? 70);
+}
+//# sourceMappingURL=ci-setup.js.map

package/dist/commands/ci-setup.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ci-setup.js","sourceRoot":"","sources":["../../src/commands/ci-setup.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAC;AACtE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EAAE,aAAa,EAAE,MAAM,0BAA0B,CAAC;AACzD,OAAO,EAAE,OAAO,EAAE,MAAM,oBAAoB,CAAC;AAC7C,OAAO,EAAE,2BAA2B,EAAE,MAAM,4BAA4B,CAAC;AAWzE,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,GAAmB;IAClD,MAAM,GAAG,GAAG,MAAM,aAAa,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IACzC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;QACtB,MAAM,IAAI,KAAK,CAAC,oEAAoE,CAAC,CAAC;IACxF,CAAC;IAED,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,4BAA4B,CAAC,CAAC;IAC3D,IAAI,CAAC;QACH,MAAM,MAAM,CAAC,MAAM,CAAC,CAAC;QACrB,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC;YACrB,MAAM,SAAS,GAAG,MAAM,OAAO,CAAC,+CAA+C,EAAE,KAAK,CAAC,CAAC;YACxF,IAAI,CAAC,SAAS,EAAE,CAAC;gBACf,OAAO,CAAC,GAAG,CAAC,oCAAoC,CAAC,CAAC;gBAClD,OAAO;YACT,CAAC;QACH,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,0CAA0C;IAC5C,CAAC;IAED,8DAA8D;IAC9D,MAAM,YAAY,GAAG,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,sCAAsC,CAAC,CAAC;IAC3G,MAAM,QAAQ,GAAG,MAAM,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC;IAEtD,MAAM,QAAQ,GAAG,QAAQ;SACtB,UAAU,CAAC,sBAAsB,EAAE,GAAG,CAAC,GAAG,CAAC,KAAK,EAAE,aAAa,IAAI,MAAM,CAAC;SAC1E,UAAU,CAAC,iBAAiB,EAAE,MAAM,CAAC,GAAG,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC;SAC1D,UAAU,CAAC,uBAAuB,EAAE,MAAM,CAAC,GAAG,CAAC,aAAa,IAAI,IAAI,CAAC,CAAC;SACtE,UAAU,CAAC,oBAAoB,EAAE,MAAM,CAAC,GAAG,CAAC,WAAW,IAAI,IAAI,CAAC,CAAC;SACjE,UAAU,CAAC,qBAAqB,EAAE,MAAM,CAAC,GAAG,CAAC,YAAY,IAAI,KAAK,CAAC,CAAC,CAAC;IAExE,MAAM,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,mBAAmB,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACrE,MAAM,SAAS,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;IAElC,OAAO,CAAC,GAAG,CAAC,aAAa,MAAM,EAAE,CAAC,CAAC;IACnC,OAAO,CAAC,GAAG,CAAC,sEAAsE,CAAC,CAAC;IAEpF,qCAAqC;IACrC,MAAM,2BAA2B,CAAC,GAAG,CAAC,GAAG,EAAE,GAAG,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC;AAClE,CAAC"}

package/dist/commands/email-prompt.d.ts

@@ -0,0 +1,36 @@
+/**
+ * `~/.lyse/profile.json` records the once-per-machine opt-in decision so we
+ * never re-prompt. After a 2xx from the Worker the email itself is dropped
+ * locally (only `sentAt` survives); if delivery failed we keep the email
+ * locally so the next audit can retry.
+ */
+export type ProfileFile = {
+    email: string;
+    createdAt: string;
+    lyseVersion: string;
+    sentAt?: string;
+} | {
+    declined: true;
+    declinedAt: string;
+    lyseVersion: string;
+};
+export declare function workerEmailEndpoint(env?: NodeJS.ProcessEnv): string;
+export declare function isValidEmail(input: string): boolean;
+export declare function profilePath(homeDir?: string): string;
+export declare function hasProfileDecision(homeDir?: string): boolean;
+export declare function readProfile(homeDir?: string): ProfileFile | null;
+export declare function shouldPromptForEmail(opt: {
+    yes?: boolean;
+}, env?: NodeJS.ProcessEnv, isTTY?: boolean, homeDir?: string): boolean;
+export declare function buildProfile(email: string, now?: Date): ProfileFile;
+export declare function buildDeclinedProfile(now?: Date): ProfileFile;
+export declare function persistProfile(profile: ProfileFile, homeDir?: string): Promise<string>;
+export declare function postEmailToWorker(email: string, opt?: {
+    endpoint?: string;
+    timeoutMs?: number;
+    env?: NodeJS.ProcessEnv;
+}): Promise<boolean>;
+export declare function syncPendingEmail(homeDir?: string): Promise<"sent" | "skipped" | "failed">;
+export declare function maybePromptForEmail(opt: {
+    yes?: boolean;
+}): Promise<void>;