@lyse-labs/lyse 0.1.0-alpha.2

package/dist/commands/email-prompt.js

@@ -0,0 +1,160 @@
+import { existsSync, readFileSync } from "node:fs";
+import { mkdir, writeFile } from "node:fs/promises";
+import { homedir } from "node:os";
+import { join } from "node:path";
+import prompts from "prompts";
+import { VERSION } from "../index.js";
+const EMAIL_RFC5322_LITE = /^[^\s@]+@[^\s@]+\.[^\s@]+$/;
+const DEFAULT_WORKER_ENDPOINT = "https://api.getlyse.com/v1/profile/email";
+const DEFAULT_POST_TIMEOUT_MS = 2000;
+export function workerEmailEndpoint(env = process.env) {
+    return env["LYSE_EMAIL_ENDPOINT"] ?? DEFAULT_WORKER_ENDPOINT;
+}
+export function isValidEmail(input) {
+    return EMAIL_RFC5322_LITE.test(input);
+}
+export function profilePath(homeDir = homedir()) {
+    return join(homeDir, ".lyse", "profile.json");
+}
+export function hasProfileDecision(homeDir = homedir()) {
+    return existsSync(profilePath(homeDir));
+}
+export function readProfile(homeDir = homedir()) {
+    const path = profilePath(homeDir);
+    if (!existsSync(path))
+        return null;
+    try {
+        const parsed = JSON.parse(readFileSync(path, "utf8"));
+        if (parsed && typeof parsed === "object") {
+            const o = parsed;
+            if (typeof o["email"] === "string" && typeof o["createdAt"] === "string") {
+                return parsed;
+            }
+            if (o["declined"] === true && typeof o["declinedAt"] === "string") {
+                return parsed;
+            }
+        }
+        return null;
+    }
+    catch {
+        return null;
+    }
+}
+export function shouldPromptForEmail(opt, env = process.env, isTTY = process.stdout.isTTY ?? false, homeDir = homedir()) {
+    if (opt.yes)
+        return false;
+    if (env["LYSE_NO_EMAIL_PROMPT"] === "1")
+        return false;
+    if (env["CI"] === "1" || env["CI"] === "true")
+        return false;
+    if (!isTTY)
+        return false;
+    if (hasProfileDecision(homeDir))
+        return false;
+    return true;
+}
+export function buildProfile(email, now = new Date()) {
+    return { email, createdAt: now.toISOString(), lyseVersion: VERSION };
+}
+export function buildDeclinedProfile(now = new Date()) {
+    return { declined: true, declinedAt: now.toISOString(), lyseVersion: VERSION };
+}
+export async function persistProfile(profile, homeDir = homedir()) {
+    const dir = join(homeDir, ".lyse");
+    const path = join(dir, "profile.json");
+    await mkdir(dir, { recursive: true });
+    await writeFile(path, JSON.stringify(profile, null, 2) + "\n");
+    return path;
+}
+export async function postEmailToWorker(email, opt = {}) {
+    const env = opt.env ?? process.env;
+    if (env["LYSE_NO_EMAIL_POST"] === "1")
+        return false;
+    const endpoint = opt.endpoint ?? workerEmailEndpoint(env);
+    const timeoutMs = opt.timeoutMs ?? DEFAULT_POST_TIMEOUT_MS;
+    try {
+        const res = await fetch(endpoint, {
+            method: "POST",
+            headers: { "content-type": "application/json" },
+            body: JSON.stringify({
+                email,
+                lyseVersion: VERSION,
+                capturedAt: new Date().toISOString(),
+            }),
+            signal: AbortSignal.timeout(timeoutMs),
+        });
+        return res.ok;
+    }
+    catch {
+        return false;
+    }
+}
+export async function syncPendingEmail(homeDir = homedir()) {
+    const profile = readProfile(homeDir);
+    if (!profile)
+        return "skipped";
+    if ("declined" in profile)
+        return "skipped";
+    if (profile.sentAt)
+        return "skipped";
+    const ok = await postEmailToWorker(profile.email);
+    if (!ok)
+        return "failed";
+    try {
+        await persistProfile({ ...profile, sentAt: new Date().toISOString() }, homeDir);
+        return "sent";
+    }
+    catch {
+        return "failed";
+    }
+}
+export async function maybePromptForEmail(opt) {
+    if (!shouldPromptForEmail(opt))
+        return;
+    const r = await prompts({
+        type: "text",
+        name: "email",
+        message: "Get release & security updates? Type your email (Enter to skip):",
+    });
+    const raw = typeof r.email === "string" ? r.email.trim() : "";
+    if (!raw) {
+        try {
+            await persistProfile(buildDeclinedProfile());
+        }
+        catch {
+            // ignore
+        }
+        return;
+    }
+    if (!isValidEmail(raw)) {
+        console.log("  ⚠ That doesn't look like a valid email — skipping.\n");
+        try {
+            await persistProfile(buildDeclinedProfile());
+        }
+        catch {
+            // ignore
+        }
+        return;
+    }
+    try {
+        await persistProfile(buildProfile(raw));
+    }
+    catch (err) {
+        console.log(`  ⚠ Couldn't save email locally: ${err.message}\n`);
+        return;
+    }
+    const ok = await postEmailToWorker(raw);
+    if (ok) {
+        try {
+            await persistProfile({ ...buildProfile(raw), sentAt: new Date().toISOString() });
+        }
+        catch {
+            // re-POST on next audit
+        }
+        console.log("  ✓ Thanks — you'll get release & security updates.\n");
+    }
+    else {
+        console.log("  ✓ Saved. We'll retry sending on the next audit.\n");
+    }
+}
+//# sourceMappingURL=email-prompt.js.map

package/dist/commands/email-prompt.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"email-prompt.js","sourceRoot":"","sources":["../../src/commands/email-prompt.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACnD,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AACpD,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,OAAO,MAAM,SAAS,CAAC;AAC9B,OAAO,EAAE,OAAO,EAAE,MAAM,aAAa,CAAC;AAYtC,MAAM,kBAAkB,GAAG,4BAA4B,CAAC;AACxD,MAAM,uBAAuB,GAAG,0CAA0C,CAAC;AAC3E,MAAM,uBAAuB,GAAG,IAAI,CAAC;AAErC,MAAM,UAAU,mBAAmB,CAAC,MAAyB,OAAO,CAAC,GAAG;IACtE,OAAO,GAAG,CAAC,qBAAqB,CAAC,IAAI,uBAAuB,CAAC;AAC/D,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,KAAa;IACxC,OAAO,kBAAkB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;AACxC,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,UAAkB,OAAO,EAAE;IACrD,OAAO,IAAI,CAAC,OAAO,EAAE,OAAO,EAAE,cAAc,CAAC,CAAC;AAChD,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,UAAkB,OAAO,EAAE;IAC5D,OAAO,UAAU,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC,CAAC;AAC1C,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,UAAkB,OAAO,EAAE;IACrD,MAAM,IAAI,GAAG,WAAW,CAAC,OAAO,CAAC,CAAC;IAClC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IACnC,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAY,CAAC;QACjE,IAAI,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,EAAE,CAAC;YACzC,MAAM,CAAC,GAAG,MAAiC,CAAC;YAC5C,IAAI,OAAO,CAAC,CAAC,OAAO,CAAC,KAAK,QAAQ,IAAI,OAAO,CAAC,CAAC,WAAW,CAAC,KAAK,QAAQ,EAAE,CAAC;gBACzE,OAAO,MAAqB,CAAC;YAC/B,CAAC;YACD,IAAI,CAAC,CAAC,UAAU,CAAC,KAAK,IAAI,IAAI,OAAO,CAAC,CAAC,YAAY,CAAC,KAAK,QAAQ,EAAE,CAAC;gBAClE,OAAO,MAAqB,CAAC;YAC/B,CAAC;QACH,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,MAAM,UAAU,oBAAoB,CAClC,GAAsB,EACtB,MAAyB,OAAO,CAAC,GAAG,EACpC,QAAiB,OAAO,CAAC,MAAM,CAAC,KAAK,IAAI,KAAK,EAC9C,UAAkB,OAAO,EAAE;IAE3B,IAAI,GAAG,CAAC,GAAG;QAAE,OAAO,KAAK,CAAC;IAC1B,IAAI,GAAG,CAAC,sBAAsB,CAAC,KAAK,GAAG;QAAE,OAAO,KAAK,CAAC;IACtD,IAAI,GAAG,CAAC,IAAI,CAAC,KAAK,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,KAAK,MAAM;QAAE,OAAO,KAAK,CAAC;IAC5D,IAAI,CAAC,KAAK;QAAE,OAAO,KAAK,CAAC;IACzB,IAAI,kBAAkB,CAAC,OAAO,CAAC;QAAE,OAAO,KAAK,CAAC;IAC9C,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,KAAa,EAAE,MAAY,IAAI,IAAI,EAAE;IAChE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,GAAG,CAAC,WAAW,EAAE,EAAE,WAAW,EAAE,OAAO,EAAE,CAAC;AACvE,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,MAAY,IAAI,IAAI,EAAE;IACzD,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,UAAU,EAAE,GAAG,CAAC,WAAW,EAAE,EAAE,WAAW,EAAE,OAAO,EAAE,CAAC;AACjF,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,OAAoB,EAAE,UAAkB,OAAO,EAAE;IACpF,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IACnC,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,EAAE,cAAc,CAAC,CAAC;IACvC,MAAM,KAAK,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACtC,MAAM,SAAS,CAAC,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;IAC/D,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,KAAa,EACb,MAA0E,EAAE;IAE5E,MAAM,GAAG,GAAG,GAAG,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,CAAC;IACnC,IAAI,GAAG,CAAC,oBAAoB,CAAC,KAAK,GAAG;QAAE,OAAO,KAAK,CAAC;IACpD,MAAM,QAAQ,GAAG,GAAG,CAAC,QAAQ,IAAI,mBAAmB,CAAC,GAAG,CAAC,CAAC;IAC1D,MAAM,SAAS,GAAG,GAAG,CAAC,SAAS,IAAI,uBAAuB,CAAC;IAC3D,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,QAAQ,EAAE;YAChC,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;YAC/C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;gBACnB,KAAK;gBACL,WAAW,EAAE,OAAO;gBACpB,UAAU,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;aACrC,CAAC;YACF,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,SAAS,CAAC;SACvC,CAAC,CAAC;QACH,OAAO,GAAG,CAAC,EAAE,CAAC;IAChB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,UAAkB,OAAO,EAAE;IAChE,MAAM,OAAO,GAAG,WAAW,CAAC,OAAO,CAAC,CAAC;IACrC,IAAI,CAAC,OAAO;QAAE,OAAO,SAAS,CAAC;IAC/B,IAAI,UAAU,IAAI,OAAO;QAAE,OAAO,SAAS,CAAC;IAC5C,IAAI,OAAO,CAAC,MAAM;QAAE,OAAO,SAAS,CAAC;IACrC,MAAM,EAAE,GAAG,MAAM,iBAAiB,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IAClD,IAAI,CAAC,EAAE;QAAE,OAAO,QAAQ,CAAC;IACzB,IAAI,CAAC;QACH,MAAM,cAAc,CAAC,EAAE,GAAG,OAAO,EAAE,MAAM,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,EAAE,OAAO,CAAC,CAAC;QAChF,OAAO,MAAM,CAAC;IAChB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,QAAQ,CAAC;IAClB,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,mBAAmB,CAAC,GAAsB;IAC9D,IAAI,CAAC,oBAAoB,CAAC,GAAG,CAAC;QAAE,OAAO;IAEvC,MAAM,CAAC,GAAG,MAAM,OAAO,CAAC;QACtB,IAAI,EAAE,MAAM;QACZ,IAAI,EAAE,OAAO;QACb,OAAO,EAAE,kEAAkE;KAC5E,CAAC,CAAC;IACH,MAAM,GAAG,GAAG,OAAO,CAAC,CAAC,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IAE9D,IAAI,CAAC,GAAG,EAAE,CAAC;QACT,IAAI,CAAC;YACH,MAAM,cAAc,CAAC,oBAAoB,EAAE,CAAC,CAAC;QAC/C,CAAC;QAAC,MAAM,CAAC;YACP,SAAS;QACX,CAAC;QACD,OAAO;IACT,CAAC;IAED,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,EAAE,CAAC;QACvB,OAAO,CAAC,GAAG,CAAC,wDAAwD,CAAC,CAAC;QACtE,IAAI,CAAC;YACH,MAAM,cAAc,CAAC,oBAAoB,EAAE,CAAC,CAAC;QAC/C,CAAC;QAAC,MAAM,CAAC;YACP,SAAS;QACX,CAAC;QACD,OAAO;IACT,CAAC;IAED,IAAI,CAAC;QACH,MAAM,cAAc,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC;IAC1C,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,CAAC,GAAG,CAAC,oCAAqC,GAAa,CAAC,OAAO,IAAI,CAAC,CAAC;QAC5E,OAAO;IACT,CAAC;IAED,MAAM,EAAE,GAAG,MAAM,iBAAiB,CAAC,GAAG,CAAC,CAAC;IACxC,IAAI,EAAE,EAAE,CAAC;QACP,IAAI,CAAC;YACH,MAAM,cAAc,CAAC,EAAE,GAAG,YAAY,CAAC,GAAG,CAAC,EAAE,MAAM,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;QACnF,CAAC;QAAC,MAAM,CAAC;YACP,wBAAwB;QAC1B,CAAC;QACD,OAAO,CAAC,GAAG,CAAC,uDAAuD,CAAC,CAAC;IACvE,CAAC;SAAM,CAAC;QACN,OAAO,CAAC,GAAG,CAAC,qDAAqD,CAAC,CAAC;IACrE,CAAC;AACH,CAAC"}

package/dist/commands/explain-score.d.ts

@@ -0,0 +1,35 @@
+import type { Finding as ReliabilityFinding } from "../reliability/types.js";
+export interface ExplainScoreOpts {
+    cwd: string;
+    staticOnly?: boolean;
+}
+interface AxisBucket {
+    subAxisId: string;
+    name: string;
+    status: "stable" | "experimental" | "disabled";
+    countedFindings: number;
+    reportedOnlyFindings: number;
+    confidence: number;
+    penalty: number;
+}
+export interface ExplainScoreResult {
+    score: number;
+    version: string;
+    countedTotal: number;
+    reportedOnlyTotal: number;
+    buckets: AxisBucket[];
+    rawText: string;
+}
+export interface FormatExplainScoreArgs {
+    findings: ReliabilityFinding[];
+    stableSubAxes: Set<string>;
+    confidenceByAxis: Record<string, number>;
+}
+export declare function formatExplainScore(args: FormatExplainScoreArgs): ExplainScoreResult;
+/**
+ * Compute the score breakdown for the current repo and return both the
+ * structured data (for tests) and a Lighthouse-style text rendering (for stdout).
+ */
+export declare function explainScore(opts: ExplainScoreOpts): Promise<ExplainScoreResult>;
+export declare function runExplainScore(opts: ExplainScoreOpts): Promise<void>;
+export {};

package/dist/commands/explain-score.js

@@ -0,0 +1,137 @@
+import { resolve } from "node:path";
+import { auditDirectory } from "./audit-pipeline.js";
+import { SUB_AXES } from "../reliability/catalogue/sub-axes.js";
+import { computeScoreV1 } from "../reliability/score/formula-v1.js";
+import { CURRENT_SCORING_VERSION } from "../reliability/score/version-pin.js";
+import { findingWeight } from "../reliability/score/weight.js";
+import { BUNDLED_MANIFEST } from "../reliability/confidence/bundled-manifest.js";
+const RULE_TO_SUB_AXIS = (() => {
+    const m = new Map();
+    for (const sa of SUB_AXES) {
+        for (const r of sa.ruleIds)
+            m.set(r, sa.id);
+    }
+    return m;
+})();
+function subAxisForRule(ruleId) {
+    return RULE_TO_SUB_AXIS.get(ruleId) ?? "unmapped";
+}
+function legacyToReliability(f) {
+    const sev = f.severity;
+    const severity = (sev === "warn" ? "warning" : sev);
+    return {
+        ruleId: f.ruleId,
+        subAxisId: subAxisForRule(f.ruleId),
+        severity,
+        confidence: f.confidence ?? "high",
+        message: f.message,
+        file: f.location.file,
+        line: f.location.line,
+        column: f.location.column,
+    };
+}
+export function formatExplainScore(args) {
+    const { findings, stableSubAxes, confidenceByAxis } = args;
+    const scoring = computeScoreV1({ findings, stableSubAxes, confidenceByAxis });
+    const bucketsBySubAxis = new Map();
+    for (const f of findings) {
+        const sa = SUB_AXES.find((s) => s.id === f.subAxisId);
+        const id = f.subAxisId;
+        let b = bucketsBySubAxis.get(id);
+        if (!b) {
+            const conf = confidenceByAxis[id] ?? 0;
+            b = {
+                subAxisId: id,
+                name: sa?.name ?? id,
+                status: stableSubAxes.has(id) ? "stable" : sa?.status ?? "experimental",
+                countedFindings: 0,
+                reportedOnlyFindings: 0,
+                confidence: conf,
+                penalty: 0,
+            };
+            bucketsBySubAxis.set(id, b);
+        }
+        if (stableSubAxes.has(id)) {
+            b.countedFindings += 1;
+            b.penalty += findingWeight(f.severity, b.confidence);
+        }
+        else {
+            b.reportedOnlyFindings += 1;
+        }
+    }
+    const buckets = Array.from(bucketsBySubAxis.values()).sort((a, b) => {
+        if (a.status === "stable" && b.status !== "stable")
+            return -1;
+        if (b.status === "stable" && a.status !== "stable")
+            return 1;
+        if (b.penalty !== a.penalty)
+            return b.penalty - a.penalty;
+        return a.subAxisId.localeCompare(b.subAxisId);
+    });
+    const lines = [];
+    lines.push("");
+    lines.push(`  Health Score: ${scoring.score} / 100  ·  ${CURRENT_SCORING_VERSION}`);
+    lines.push(`  Counted findings: ${scoring.findingsCountedInScore}  ·  experimental (reported only): ${scoring.findingsReportedOnly}`);
+    lines.push("");
+    lines.push("  Formula:  score = clamp(100 - penalty × 1.5, 0, 100)");
+    lines.push("            penalty per finding = severity_weight × axis_confidence");
+    lines.push("            severity weights: error=4 · warning=2 · info=1");
+    lines.push("");
+    if (buckets.length === 0) {
+        lines.push("  No findings — no penalties applied.");
+        lines.push("");
+    }
+    else {
+        const stableBuckets = buckets.filter((b) => b.status === "stable");
+        const experimentalBuckets = buckets.filter((b) => b.status !== "stable");
+        if (stableBuckets.length > 0) {
+            lines.push("  Counted toward score (stable sub-axes):");
+            for (const b of stableBuckets) {
+                lines.push(`    • ${b.name}  (${b.subAxisId})`);
+                lines.push(`        ${b.countedFindings} findings × confidence ${b.confidence.toFixed(2)} → penalty ${b.penalty.toFixed(2)}`);
+            }
+            lines.push("");
+        }
+        if (experimentalBuckets.length > 0) {
+            lines.push("  Reported only (experimental sub-axes — not counted):");
+            for (const b of experimentalBuckets) {
+                lines.push(`    • ${b.name}  (${b.subAxisId})  — ${b.reportedOnlyFindings} findings`);
+            }
+            lines.push("");
+        }
+    }
+    return {
+        score: scoring.score,
+        version: scoring.version,
+        countedTotal: scoring.findingsCountedInScore,
+        reportedOnlyTotal: scoring.findingsReportedOnly,
+        buckets,
+        rawText: lines.join("\n"),
+    };
+}
+/**
+ * Compute the score breakdown for the current repo and return both the
+ * structured data (for tests) and a Lighthouse-style text rendering (for stdout).
+ */
+export async function explainScore(opts) {
+    const repoRoot = resolve(opts.cwd);
+    const pipeline = await auditDirectory(repoRoot, opts.staticOnly === true ? { staticOnly: true } : undefined);
+    const findings = pipeline.result.findings.map(legacyToReliability);
+    const stableSubAxes = new Set(SUB_AXES.filter((s) => s.status === "stable" && s.contributesToScore).map((s) => s.id));
+    const confidenceByAxis = {};
+    for (const sa of SUB_AXES) {
+        const manifestEntry = BUNDLED_MANIFEST.subAxes[sa.id];
+        if (manifestEntry)
+            confidenceByAxis[sa.id] = manifestEntry.precision;
+        else if (sa.precisionWilsonLowerBound !== null)
+            confidenceByAxis[sa.id] = sa.precisionWilsonLowerBound;
+        else
+            confidenceByAxis[sa.id] = 1.0;
+    }
+    return formatExplainScore({ findings, stableSubAxes, confidenceByAxis });
+}
+export async function runExplainScore(opts) {
+    const result = await explainScore(opts);
+    process.stdout.write(result.rawText + "\n");
+}
+//# sourceMappingURL=explain-score.js.map

package/dist/commands/explain-score.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"explain-score.js","sourceRoot":"","sources":["../../src/commands/explain-score.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AACrD,OAAO,EAAE,QAAQ,EAAE,MAAM,sCAAsC,CAAC;AAChE,OAAO,EAAE,cAAc,EAAE,MAAM,oCAAoC,CAAC;AACpE,OAAO,EAAE,uBAAuB,EAAE,MAAM,qCAAqC,CAAC;AAC9E,OAAO,EAAE,aAAa,EAAE,MAAM,gCAAgC,CAAC;AAC/D,OAAO,EAAE,gBAAgB,EAAE,MAAM,+CAA+C,CAAC;AAmBjF,MAAM,gBAAgB,GAAwB,CAAC,GAAG,EAAE;IAClD,MAAM,CAAC,GAAG,IAAI,GAAG,EAAkB,CAAC;IACpC,KAAK,MAAM,EAAE,IAAI,QAAQ,EAAE,CAAC;QAC1B,KAAK,MAAM,CAAC,IAAI,EAAE,CAAC,OAAO;YAAE,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC;IAC9C,CAAC;IACD,OAAO,CAAC,CAAC;AACX,CAAC,CAAC,EAAE,CAAC;AAEL,SAAS,cAAc,CAAC,MAAc;IACpC,OAAO,gBAAgB,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,UAAU,CAAC;AACpD,CAAC;AAED,SAAS,mBAAmB,CAAC,CAAgB;IAC3C,MAAM,GAAG,GAAW,CAAC,CAAC,QAAQ,CAAC;IAC/B,MAAM,QAAQ,GAAG,CAAC,GAAG,KAAK,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,GAAG,CAAmC,CAAC;IACtF,OAAO;QACL,MAAM,EAAE,CAAC,CAAC,MAAM;QAChB,SAAS,EAAE,cAAc,CAAC,CAAC,CAAC,MAAM,CAAC;QACnC,QAAQ;QACR,UAAU,EAAE,CAAC,CAAC,UAAU,IAAI,MAAM;QAClC,OAAO,EAAE,CAAC,CAAC,OAAO;QAClB,IAAI,EAAE,CAAC,CAAC,QAAQ,CAAC,IAAI;QACrB,IAAI,EAAE,CAAC,CAAC,QAAQ,CAAC,IAAI;QACrB,MAAM,EAAE,CAAC,CAAC,QAAQ,CAAC,MAAM;KAC1B,CAAC;AACJ,CAAC;AAiBD,MAAM,UAAU,kBAAkB,CAAC,IAA4B;IAC7D,MAAM,EAAE,QAAQ,EAAE,aAAa,EAAE,gBAAgB,EAAE,GAAG,IAAI,CAAC;IAC3D,MAAM,OAAO,GAAG,cAAc,CAAC,EAAE,QAAQ,EAAE,aAAa,EAAE,gBAAgB,EAAE,CAAC,CAAC;IAC9E,MAAM,gBAAgB,GAAG,IAAI,GAAG,EAAsB,CAAC;IACvD,KAAK,MAAM,CAAC,IAAI,QAAQ,EAAE,CAAC;QACzB,MAAM,EAAE,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,SAAS,CAAC,CAAC;QACtD,MAAM,EAAE,GAAG,CAAC,CAAC,SAAS,CAAC;QACvB,IAAI,CAAC,GAAG,gBAAgB,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACjC,IAAI,CAAC,CAAC,EAAE,CAAC;YACP,MAAM,IAAI,GAAG,gBAAgB,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC;YACvC,CAAC,GAAG;gBACF,SAAS,EAAE,EAAE;gBACb,IAAI,EAAE,EAAE,EAAE,IAAI,IAAI,EAAE;gBACpB,MAAM,EAAE,aAAa,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,EAAE,MAAM,IAAI,cAAc;gBACvE,eAAe,EAAE,CAAC;gBAClB,oBAAoB,EAAE,CAAC;gBACvB,UAAU,EAAE,IAAI;gBAChB,OAAO,EAAE,CAAC;aACX,CAAC;YACF,gBAAgB,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;QAC9B,CAAC;QACD,IAAI,aAAa,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC;YAC1B,CAAC,CAAC,eAAe,IAAI,CAAC,CAAC;YACvB,CAAC,CAAC,OAAO,IAAI,aAAa,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC,UAAU,CAAC,CAAC;QACvD,CAAC;aAAM,CAAC;YACN,CAAC,CAAC,oBAAoB,IAAI,CAAC,CAAC;QAC9B,CAAC;IACH,CAAC;IAED,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,CAAC,gBAAgB,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE;QAClE,IAAI,CAAC,CAAC,MAAM,KAAK,QAAQ,IAAI,CAAC,CAAC,MAAM,KAAK,QAAQ;YAAE,OAAO,CAAC,CAAC,CAAC;QAC9D,IAAI,CAAC,CAAC,MAAM,KAAK,QAAQ,IAAI,CAAC,CAAC,MAAM,KAAK,QAAQ;YAAE,OAAO,CAAC,CAAC;QAC7D,IAAI,CAAC,CAAC,OAAO,KAAK,CAAC,CAAC,OAAO;YAAE,OAAO,CAAC,CAAC,OAAO,GAAG,CAAC,CAAC,OAAO,CAAC;QAC1D,OAAO,CAAC,CAAC,SAAS,CAAC,aAAa,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;IAChD,CAAC,CAAC,CAAC;IAEH,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACf,KAAK,CAAC,IAAI,CAAC,mBAAmB,OAAO,CAAC,KAAK,cAAc,uBAAuB,EAAE,CAAC,CAAC;IACpF,KAAK,CAAC,IAAI,CAAC,uBAAuB,OAAO,CAAC,sBAAsB,sCAAsC,OAAO,CAAC,oBAAoB,EAAE,CAAC,CAAC;IACtI,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACf,KAAK,CAAC,IAAI,CAAC,wDAAwD,CAAC,CAAC;IACrE,KAAK,CAAC,IAAI,CAAC,qEAAqE,CAAC,CAAC;IAClF,KAAK,CAAC,IAAI,CAAC,4DAA4D,CAAC,CAAC;IACzE,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAEf,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzB,KAAK,CAAC,IAAI,CAAC,uCAAuC,CAAC,CAAC;QACpD,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACjB,CAAC;SAAM,CAAC;QACN,MAAM,aAAa,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC;QACnE,MAAM,mBAAmB,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC;QAEzE,IAAI,aAAa,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC7B,KAAK,CAAC,IAAI,CAAC,2CAA2C,CAAC,CAAC;YACxD,KAAK,MAAM,CAAC,IAAI,aAAa,EAAE,CAAC;gBAC9B,KAAK,CAAC,IAAI,CACR,SAAS,CAAC,CAAC,IAAI,MAAM,CAAC,CAAC,SAAS,GAAG,CACpC,CAAC;gBACF,KAAK,CAAC,IAAI,CACR,WAAW,CAAC,CAAC,eAAe,0BAA0B,CAAC,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAClH,CAAC;YACJ,CAAC;YACD,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACjB,CAAC;QAED,IAAI,mBAAmB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACnC,KAAK,CAAC,IAAI,CAAC,wDAAwD,CAAC,CAAC;YACrE,KAAK,MAAM,CAAC,IAAI,mBAAmB,EAAE,CAAC;gBACpC,KAAK,CAAC,IAAI,CACR,SAAS,CAAC,CAAC,IAAI,MAAM,CAAC,CAAC,SAAS,QAAQ,CAAC,CAAC,oBAAoB,WAAW,CAC1E,CAAC;YACJ,CAAC;YACD,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACjB,CAAC;IACH,CAAC;IAED,OAAO;QACL,KAAK,EAAE,OAAO,CAAC,KAAK;QACpB,OAAO,EAAE,OAAO,CAAC,OAAO;QACxB,YAAY,EAAE,OAAO,CAAC,sBAAsB;QAC5C,iBAAiB,EAAE,OAAO,CAAC,oBAAoB;QAC/C,OAAO;QACP,OAAO,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC;KAC1B,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,IAAsB;IACvD,MAAM,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACnC,MAAM,QAAQ,GAAG,MAAM,cAAc,CACnC,QAAQ,EACR,IAAI,CAAC,UAAU,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,SAAS,CAC5D,CAAC;IACF,MAAM,QAAQ,GAAG,QAAQ,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,mBAAmB,CAAC,CAAC;IAEnE,MAAM,aAAa,GAAG,IAAI,GAAG,CAC3B,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,QAAQ,IAAI,CAAC,CAAC,kBAAkB,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CACvF,CAAC;IACF,MAAM,gBAAgB,GAA2B,EAAE,CAAC;IACpD,KAAK,MAAM,EAAE,IAAI,QAAQ,EAAE,CAAC;QAC1B,MAAM,aAAa,GAAG,gBAAgB,CAAC,OAAO,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;QACtD,IAAI,aAAa;YAAE,gBAAgB,CAAC,EAAE,CAAC,EAAE,CAAC,GAAG,aAAa,CAAC,SAAS,CAAC;aAChE,IAAI,EAAE,CAAC,yBAAyB,KAAK,IAAI;YAAE,gBAAgB,CAAC,EAAE,CAAC,EAAE,CAAC,GAAG,EAAE,CAAC,yBAAyB,CAAC;;YAClG,gBAAgB,CAAC,EAAE,CAAC,EAAE,CAAC,GAAG,GAAG,CAAC;IACrC,CAAC;IAED,OAAO,kBAAkB,CAAC,EAAE,QAAQ,EAAE,aAAa,EAAE,gBAAgB,EAAE,CAAC,CAAC;AAC3E,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,IAAsB;IAC1D,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC,IAAI,CAAC,CAAC;IACxC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,GAAG,IAAI,CAAC,CAAC;AAC9C,CAAC"}

package/dist/commands/explain.d.ts

@@ -0,0 +1,6 @@
+export interface RunExplainArgs {
+    cwd: string;
+    ruleId: string;
+    format?: string;
+}
+export declare function runExplain(args: RunExplainArgs): Promise<void>;

package/dist/commands/explain.js

@@ -0,0 +1,93 @@
+import { findRuleMeta, RULE_METADATA } from '../rules/manifest.js';
+function renderExplainText(meta) {
+    const lines = [
+        '',
+        `  ${meta.id}`,
+        `  ${'-'.repeat(meta.id.length + 4)}`,
+        '',
+        `  axis:             ${meta.axis}`,
+        `  default severity: ${meta.defaultSeverity}`,
+        `  help:             ${meta.helpUri}`,
+        '',
+        '  Description',
+        '  -----------',
+        `  ${meta.fullDescription}`,
+        '',
+        '  Rationale',
+        '  ---------',
+        ...meta.rationale.split('\n').map((l) => `  ${l}`),
+        '',
+        '  Examples',
+        '  --------',
+        ...meta.examples.flatMap((ex, i) => [
+            `  Example ${i + 1}`,
+            `    good:  ${ex.good}`,
+            `    bad:   ${ex.bad}`,
+        ]),
+        '',
+        '  Allowlist',
+        '  ---------',
+        ...meta.allowlist.map((a) => `  • ${a}`),
+        '',
+    ];
+    return lines.join('\n');
+}
+function renderExplainMarkdown(meta) {
+    return [
+        `# \`${meta.id}\``,
+        '',
+        `**Axis:** ${meta.axis} · **Default severity:** ${meta.defaultSeverity}`,
+        '',
+        `[Full docs](${meta.helpUri})`,
+        '',
+        '## Description',
+        '',
+        meta.fullDescription,
+        '',
+        '## Rationale',
+        '',
+        meta.rationale,
+        '',
+        '## Examples',
+        '',
+        ...meta.examples.flatMap((ex, i) => [
+            `**Example ${i + 1}**`,
+            '',
+            '✅ Good:',
+            '```',
+            ex.good,
+            '```',
+            '',
+            '❌ Bad:',
+            '```',
+            ex.bad,
+            '```',
+            '',
+        ]),
+        '## Allowlist',
+        '',
+        ...meta.allowlist.map((a) => `- ${a}`),
+        '',
+    ].join('\n');
+}
+export async function runExplain(args) {
+    const meta = findRuleMeta(args.ruleId);
+    if (!meta) {
+        process.stderr.write(`Unknown rule: ${args.ruleId}\n`);
+        process.stderr.write('\n');
+        process.stderr.write('Available rules:\n');
+        for (const r of RULE_METADATA)
+            process.stderr.write(`  ${r.id}\n`);
+        process.exitCode = 64;
+        return;
+    }
+    let staticOutput;
+    if (args.format === 'md') {
+        staticOutput = renderExplainMarkdown(meta);
+    }
+    else {
+        staticOutput = renderExplainText(meta);
+    }
+    process.stdout.write(staticOutput);
+}
+//# sourceMappingURL=explain.js.map

package/dist/commands/explain.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"explain.js","sourceRoot":"","sources":["../../src/commands/explain.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AASnE,SAAS,iBAAiB,CAAC,IAAc;IACvC,MAAM,KAAK,GAAa;QACtB,EAAE;QACF,KAAK,IAAI,CAAC,EAAE,EAAE;QACd,KAAK,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,GAAG,CAAC,CAAC,EAAE;QACrC,EAAE;QACF,uBAAuB,IAAI,CAAC,IAAI,EAAE;QAClC,uBAAuB,IAAI,CAAC,eAAe,EAAE;QAC7C,uBAAuB,IAAI,CAAC,OAAO,EAAE;QACrC,EAAE;QACF,eAAe;QACf,eAAe;QACf,KAAK,IAAI,CAAC,eAAe,EAAE;QAC3B,EAAE;QACF,aAAa;QACb,aAAa;QACb,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC;QAClD,EAAE;QACF,YAAY;QACZ,YAAY;QACZ,GAAG,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC;YAClC,aAAa,CAAC,GAAG,CAAC,EAAE;YACpB,cAAc,EAAE,CAAC,IAAI,EAAE;YACvB,cAAc,EAAE,CAAC,GAAG,EAAE;SACvB,CAAC;QACF,EAAE;QACF,aAAa;QACb,aAAa;QACb,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC;QACxC,EAAE;KACH,CAAC;IACF,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC;AAED,SAAS,qBAAqB,CAAC,IAAc;IAC3C,OAAO;QACL,OAAO,IAAI,CAAC,EAAE,IAAI;QAClB,EAAE;QACF,aAAa,IAAI,CAAC,IAAI,4BAA4B,IAAI,CAAC,eAAe,EAAE;QACxE,EAAE;QACF,eAAe,IAAI,CAAC,OAAO,GAAG;QAC9B,EAAE;QACF,gBAAgB;QAChB,EAAE;QACF,IAAI,CAAC,eAAe;QACpB,EAAE;QACF,cAAc;QACd,EAAE;QACF,IAAI,CAAC,SAAS;QACd,EAAE;QACF,aAAa;QACb,EAAE;QACF,GAAG,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC;YAClC,aAAa,CAAC,GAAG,CAAC,IAAI;YACtB,EAAE;YACF,SAAS;YACT,KAAK;YACL,EAAE,CAAC,IAAI;YACP,KAAK;YACL,EAAE;YACF,QAAQ;YACR,KAAK;YACL,EAAE,CAAC,GAAG;YACN,KAAK;YACL,EAAE;SACH,CAAC;QACF,cAAc;QACd,EAAE;QACF,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC;QACtC,EAAE;KACH,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACf,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,IAAoB;IACnD,MAAM,IAAI,GAAG,YAAY,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACvC,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,iBAAiB,IAAI,CAAC,MAAM,IAAI,CAAC,CAAC;QACvD,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAC3B,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,oBAAoB,CAAC,CAAC;QAC3C,KAAK,MAAM,CAAC,IAAI,aAAa;YAAE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC;QACnE,OAAO,CAAC,QAAQ,GAAG,EAAE,CAAC;QACtB,OAAO;IACT,CAAC;IAED,IAAI,YAAoB,CAAC;IACzB,IAAI,IAAI,CAAC,MAAM,KAAK,IAAI,EAAE,CAAC;QACzB,YAAY,GAAG,qBAAqB,CAAC,IAAI,CAAC,CAAC;IAC7C,CAAC;SAAM,CAAC;QACN,YAAY,GAAG,iBAAiB,CAAC,IAAI,CAAC,CAAC;IACzC,CAAC;IACD,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;AACrC,CAAC"}

package/dist/commands/feedback.d.ts

@@ -0,0 +1,31 @@
+export interface FeedbackMissedArgs {
+    cwd: string;
+    missed: string;
+    subAxisId?: string;
+    autoConfirm?: boolean;
+    endpoint?: string;
+    saltUrl?: string;
+    saltOverride?: string;
+    remoteUrlOverride?: string;
+    fetcher?: typeof fetch;
+}
+export interface FeedbackMissedPayload {
+    file: string;
+    line: number;
+    snippet: string;
+    subAxisId: string;
+    repoBucket: string;
+    ts: number;
+}
+interface ParsedMissedSpec {
+    file: string;
+    line: number;
+}
+export declare function parseMissedSpec(spec: string): ParsedMissedSpec | null;
+export declare function extractSnippet(content: string, line: number): string;
+export declare function getMissedEndpoint(): string;
+export declare function feedbackMissed(args: FeedbackMissedArgs): Promise<{
+    ok: boolean;
+    reason?: string;
+}>;
+export {};

package/dist/commands/feedback.js

@@ -0,0 +1,155 @@
+import { readFile } from "node:fs/promises";
+import { existsSync } from "node:fs";
+import { resolve } from "node:path";
+import { computeRepoBucket } from "../reliability/feedback/repo-bucket.js";
+import { fetchBucketSalt, getRemoteOriginUrl, getSaltUrl, } from "../reliability/feedback/interactive.js";
+import { confirm } from "../menu/prompts.js";
+import { telemetryEnabled } from "../telemetry/index.js";
+const DEFAULT_MISSED_ENDPOINT = "https://api.getlyse.com/v1/missed-finding";
+const SNIPPET_MAX_CHARS = 120;
+export function parseMissedSpec(spec) {
+    const idx = spec.lastIndexOf(":");
+    if (idx < 0)
+        return null;
+    const file = spec.slice(0, idx);
+    const lineStr = spec.slice(idx + 1);
+    const line = Number(lineStr);
+    if (!file || !Number.isInteger(line) || line < 1)
+        return null;
+    return { file, line };
+}
+export function extractSnippet(content, line) {
+    const lines = content.split("\n");
+    const raw = lines[line - 1] ?? "";
+    if (raw.length <= SNIPPET_MAX_CHARS)
+        return raw;
+    return raw.slice(0, SNIPPET_MAX_CHARS) + "…";
+}
+export function getMissedEndpoint() {
+    const override = process.env["LYSE_MISSED_ENDPOINT"];
+    return override && override.length > 0 ? override : DEFAULT_MISSED_ENDPOINT;
+}
+export async function feedbackMissed(args) {
+    if (!telemetryEnabled()) {
+        process.stderr.write("lyse feedback --missed requires telemetry consent.\n" +
+            "Sending a missed-finding report uploads ONE line of source code to api.getlyse.com so it can be hand-labelled.\n" +
+            "Run `lyse telemetry on` to opt in for this command.\n");
+        return { ok: false, reason: "telemetry-disabled" };
+    }
+    const parsed = parseMissedSpec(args.missed);
+    if (!parsed) {
+        process.stderr.write(`Invalid --missed value: ${args.missed}. Expected <file>:<line>.\n`);
+        return { ok: false, reason: "invalid-spec" };
+    }
+    const repoRoot = resolve(args.cwd);
+    const absPath = resolve(repoRoot, parsed.file);
+    if (!existsSync(absPath)) {
+        process.stderr.write(`File not found: ${parsed.file}\n`);
+        return { ok: false, reason: "file-not-found" };
+    }
+    let content;
+    try {
+        content = await readFile(absPath, "utf8");
+    }
+    catch (err) {
+        process.stderr.write(`Could not read ${parsed.file}: ${err.message}\n`);
+        return { ok: false, reason: "read-error" };
+    }
+    const snippet = extractSnippet(content, parsed.line);
+    if (!snippet || snippet.trim().length === 0) {
+        process.stderr.write(`Line ${parsed.line} of ${parsed.file} is empty.\n`);
+        return { ok: false, reason: "empty-line" };
+    }
+    // Client-side secret heuristic — refuse to even prompt for upload if the
+    // line or file looks like credentials. Defense in depth (the worker also
+    // screens server-side; the two pattern lists are kept in sync manually).
+    const SECRET_SUBSTRING_PATTERNS = [
+        /-----BEGIN [A-Z ]+PRIVATE KEY-----/,
+        /api[_-]?key\s*[:=]/i,
+        /secret\s*[:=]/i,
+        /token\s*[:=]/i,
+        /password\s*[:=]/i,
+        /authorization\s*:\s*bearer\s+/i,
+        /(aws|gcp|azure)[_-](access|secret|session)/i,
+        /[A-Za-z0-9+/]{40,}={0,2}/,
+    ];
+    const SENSITIVE_FILE_PATTERNS = [
+        /(^|\/)\.env(\.|$)/,
+        /(^|\/)\.npmrc$/,
+        /\.pem$/i,
+        /\.key$/i,
+        /credentials/i,
+        /secrets?[/_-]/i,
+    ];
+    if (SENSITIVE_FILE_PATTERNS.some((re) => re.test(parsed.file))) {
+        process.stderr.write(`Refusing to upload from a sensitive file (${parsed.file}). lyse feedback --missed will not send .env/keys/credentials.\n`);
+        return { ok: false, reason: "sensitive-file" };
+    }
+    if (SECRET_SUBSTRING_PATTERNS.some((re) => re.test(snippet))) {
+        process.stderr.write(`Refusing to upload: line ${parsed.line} of ${parsed.file} matches a secret heuristic (api_key/secret/bearer/pem/etc.). If this is a false positive, please file an issue with a redacted example.\n`);
+        return { ok: false, reason: "secret-detected" };
+    }
+    if (!args.autoConfirm) {
+        // Show the EXACT snippet content the user is about to upload — so they can
+        // veto if the heuristic missed something. The reviewer flagged that hiding
+        // the line behind "<1 line>" was a meaningful UX gap (#76 review A2).
+        const truncated = snippet.length > 120 ? snippet.slice(0, 117) + "..." : snippet;
+        const banner = [
+            "",
+            `This will upload 1 line of source code (${snippet.length} chars) to api.getlyse.com`,
+            "for the hand-label queue.",
+            "",
+            "  Payload preview:",
+            `    file:       ${parsed.file}`,
+            `    line:       ${parsed.line}`,
+            `    snippet:    ${JSON.stringify(truncated)}`,
+            `    subAxisId:  ${args.subAxisId ?? "unmapped"}`,
+            `    repoBucket: <HMAC-SHA256 16-hex>`,
+            "",
+            "Privacy: https://getlyse.com/privacy  (no IP, no other code, no remote URL)",
+            "",
+        ].join("\n");
+        process.stdout.write(banner);
+        const proceed = await confirm("Send missed-finding report?", false);
+        if (!proceed) {
+            process.stdout.write("Aborted (nothing sent).\n");
+            return { ok: false, reason: "user-declined" };
+        }
+    }
+    const remoteUrl = args.remoteUrlOverride ?? getRemoteOriginUrl(repoRoot);
+    const salt = args.saltOverride ?? (await fetchBucketSalt(args.saltUrl ?? getSaltUrl()));
+    if (!remoteUrl || !salt) {
+        process.stderr.write("Could not derive an anonymous repo bucket (missing git remote or salt). Nothing sent.\n");
+        return { ok: false, reason: "bucket-unavailable" };
+    }
+    const repoBucket = computeRepoBucket(remoteUrl, salt);
+    const payload = {
+        file: parsed.file,
+        line: parsed.line,
+        snippet,
+        subAxisId: args.subAxisId ?? "unmapped",
+        repoBucket,
+        ts: Date.now(),
+    };
+    const endpoint = args.endpoint ?? getMissedEndpoint();
+    const fetcher = args.fetcher ?? fetch;
+    try {
+        const res = await fetcher(endpoint, {
+            method: "POST",
+            headers: { "content-type": "application/json" },
+            body: JSON.stringify(payload),
+            signal: AbortSignal.timeout(3000),
+        });
+        if (!res.ok) {
+            process.stderr.write(`Server returned ${res.status}; missed-finding not queued.\n`);
+            return { ok: false, reason: `http-${res.status}` };
+        }
+    }
+    catch (err) {
+        process.stderr.write(`Network error: ${err.message}\n`);
+        return { ok: false, reason: "network-error" };
+    }
+    process.stdout.write("Thanks! Missed finding queued for the hand-label queue.\n");
+    return { ok: true };
+}
+//# sourceMappingURL=feedback.js.map

package/dist/commands/feedback.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"feedback.js","sourceRoot":"","sources":["../../src/commands/feedback.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC5C,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACrC,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,iBAAiB,EAAE,MAAM,wCAAwC,CAAC;AAC3E,OAAO,EACL,eAAe,EACf,kBAAkB,EAClB,UAAU,GACX,MAAM,wCAAwC,CAAC;AAChD,OAAO,EAAE,OAAO,EAAE,MAAM,oBAAoB,CAAC;AAC7C,OAAO,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAC;AAEzD,MAAM,uBAAuB,GAAG,2CAA2C,CAAC;AAC5E,MAAM,iBAAiB,GAAG,GAAG,CAAC;AAiC9B,MAAM,UAAU,eAAe,CAAC,IAAY;IAC1C,MAAM,GAAG,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;IAClC,IAAI,GAAG,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IACzB,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;IAChC,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC;IACpC,MAAM,IAAI,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC;IAC7B,IAAI,CAAC,IAAI,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,IAAI,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IAC9D,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;AACxB,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,OAAe,EAAE,IAAY;IAC1D,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAClC,MAAM,GAAG,GAAG,KAAK,CAAC,IAAI,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;IAClC,IAAI,GAAG,CAAC,MAAM,IAAI,iBAAiB;QAAE,OAAO,GAAG,CAAC;IAChD,OAAO,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,iBAAiB,CAAC,GAAG,GAAG,CAAC;AAC/C,CAAC;AAED,MAAM,UAAU,iBAAiB;IAC/B,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,sBAAsB,CAAC,CAAC;IACrD,OAAO,QAAQ,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,uBAAuB,CAAC;AAC9E,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,IAAwB;IAC3D,IAAI,CAAC,gBAAgB,EAAE,EAAE,CAAC;QACxB,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,sDAAsD;YACpD,kHAAkH;YAClH,uDAAuD,CAC1D,CAAC;QACF,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,oBAAoB,EAAE,CAAC;IACrD,CAAC;IAED,MAAM,MAAM,GAAG,eAAe,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAC5C,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,2BAA2B,IAAI,CAAC,MAAM,6BAA6B,CAAC,CAAC;QAC1F,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,cAAc,EAAE,CAAC;IAC/C,CAAC;IAED,MAAM,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACnC,MAAM,OAAO,GAAG,OAAO,CAAC,QAAQ,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC;IAC/C,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;QACzB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,mBAAmB,MAAM,CAAC,IAAI,IAAI,CAAC,CAAC;QACzD,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,gBAAgB,EAAE,CAAC;IACjD,CAAC;IAED,IAAI,OAAe,CAAC;IACpB,IAAI,CAAC;QACH,OAAO,GAAG,MAAM,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IAC5C,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,kBAAkB,MAAM,CAAC,IAAI,KAAM,GAAa,CAAC,OAAO,IAAI,CAAC,CAAC;QACnF,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,YAAY,EAAE,CAAC;IAC7C,CAAC;IAED,MAAM,OAAO,GAAG,cAAc,CAAC,OAAO,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC;IACrD,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC5C,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,QAAQ,MAAM,CAAC,IAAI,OAAO,MAAM,CAAC,IAAI,cAAc,CAAC,CAAC;QAC1E,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,YAAY,EAAE,CAAC;IAC7C,CAAC;IAED,yEAAyE;IACzE,yEAAyE;IACzE,yEAAyE;IACzE,MAAM,yBAAyB,GAAG;QAChC,oCAAoC;QACpC,qBAAqB;QACrB,gBAAgB;QAChB,eAAe;QACf,kBAAkB;QAClB,gCAAgC;QAChC,6CAA6C;QAC7C,0BAA0B;KAC3B,CAAC;IACF,MAAM,uBAAuB,GAAG;QAC9B,mBAAmB;QACnB,gBAAgB;QAChB,SAAS;QACT,SAAS;QACT,cAAc;QACd,gBAAgB;KACjB,CAAC;IACF,IAAI,uBAAuB,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC;QAC/D,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,6CAA6C,MAAM,CAAC,IAAI,kEAAkE,CAC3H,CAAC;QACF,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,gBAAgB,EAAE,CAAC;IACjD,CAAC;IACD,IAAI,yBAAyB,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC;QAC7D,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,4BAA4B,MAAM,CAAC,IAAI,OAAO,MAAM,CAAC,IAAI,4IAA4I,CACtM,CAAC;QACF,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,iBAAiB,EAAE,CAAC;IAClD,CAAC;IAED,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC;QACtB,2EAA2E;QAC3E,2EAA2E;QAC3E,sEAAsE;QACtE,MAAM,SAAS,GAAG,OAAO,CAAC,MAAM,GAAG,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC;QACjF,MAAM,MAAM,GAAG;YACb,EAAE;YACF,2CAA2C,OAAO,CAAC,MAAM,4BAA4B;YACrF,2BAA2B;YAC3B,EAAE;YACF,oBAAoB;YACpB,mBAAmB,MAAM,CAAC,IAAI,EAAE;YAChC,mBAAmB,MAAM,CAAC,IAAI,EAAE;YAChC,mBAAmB,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,EAAE;YAC9C,mBAAmB,IAAI,CAAC,SAAS,IAAI,UAAU,EAAE;YACjD,sCAAsC;YACtC,EAAE;YACF,6EAA6E;YAC7E,EAAE;SACH,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACb,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QAC7B,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,6BAA6B,EAAE,KAAK,CAAC,CAAC;QACpE,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,2BAA2B,CAAC,CAAC;YAClD,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,eAAe,EAAE,CAAC;QAChD,CAAC;IACH,CAAC;IAED,MAAM,SAAS,GAAG,IAAI,CAAC,iBAAiB,IAAI,kBAAkB,CAAC,QAAQ,CAAC,CAAC;IACzE,MAAM,IAAI,GAAG,IAAI,CAAC,YAAY,IAAI,CAAC,MAAM,eAAe,CAAC,IAAI,CAAC,OAAO,IAAI,UAAU,EAAE,CAAC,CAAC,CAAC;IAExF,IAAI,CAAC,SAAS,IAAI,CAAC,IAAI,EAAE,CAAC;QACxB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,yFAAyF,CAAC,CAAC;QAChH,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,oBAAoB,EAAE,CAAC;IACrD,CAAC;IAED,MAAM,UAAU,GAAG,iBAAiB,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;IACtD,MAAM,OAAO,GAA0B;QACrC,IAAI,EAAE,MAAM,CAAC,IAAI;QACjB,IAAI,EAAE,MAAM,CAAC,IAAI;QACjB,OAAO;QACP,SAAS,EAAE,IAAI,CAAC,SAAS,IAAI,UAAU;QACvC,UAAU;QACV,EAAE,EAAE,IAAI,CAAC,GAAG,EAAE;KACf,CAAC;IAEF,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,IAAI,iBAAiB,EAAE,CAAC;IACtD,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,IAAI,KAAK,CAAC;IACtC,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,QAAQ,EAAE;YAClC,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;YAC/C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC;YAC7B,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,IAAI,CAAC;SAClC,CAAC,CAAC;QACH,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;YACZ,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,mBAAmB,GAAG,CAAC,MAAM,gCAAgC,CAAC,CAAC;YACpF,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,QAAQ,GAAG,CAAC,MAAM,EAAE,EAAE,CAAC;QACrD,CAAC;IACH,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,kBAAmB,GAAa,CAAC,OAAO,IAAI,CAAC,CAAC;QACnE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,eAAe,EAAE,CAAC;IAChD,CAAC;IAED,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,2DAA2D,CAAC,CAAC;IAClF,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;AACtB,CAAC"}