@opencodereview/core 1.9.1

package/dist/ai/v4/types.d.ts

@@ -0,0 +1,117 @@
+/**
+ * Open Code Review V4 — AI Pipeline Types
+ *
+ * Type definitions for the two-stage AI scan pipeline:
+ * - Stage 1 (Embedding): Fast similarity-based defect detection
+ * - Stage 2 (LLM): Deep analysis of suspicious code blocks
+ *
+ * SLA levels control which stages run:
+ * - L1 Fast: Structural detectors only (no AI)
+ * - L2 Standard: + Embedding recall + Local LLM (Ollama)
+ * - L3 Deep: + Remote LLM (OpenAI/Claude)
+ *
+ * @since 0.4.0
+ */
+import type { DetectorResult } from '../../detectors/v4/types.js';
+/** Service Level Agreement — controls pipeline depth and cost */
+export type SLALevel = 'L1' | 'L2' | 'L3';
+/**
+ * Embedding provider interface.
+ * Generates vector embeddings from text for similarity comparison.
+ */
+export interface EmbeddingProvider {
+    /** Provider name (e.g. 'local-tfidf', 'openai') */
+    readonly name: string;
+    /** Embedding vector dimension */
+    readonly dimension: number;
+    /** Generate embeddings for a batch of text chunks */
+    embed(texts: string[]): Promise<number[][]>;
+}
+/**
+ * LLM provider interface.
+ * Sends prompts to a language model and returns structured responses.
+ */
+export interface LLMProvider {
+    /** Provider name (e.g. 'ollama', 'openai', 'anthropic') */
+    readonly name: string;
+    /** Send a prompt and get a completion */
+    complete(prompt: string, options?: LLMOptions): Promise<LLMResponse>;
+    /** Check if this provider is available and configured */
+    isAvailable(): Promise<boolean>;
+}
+/** Options for LLM completion requests */
+export interface LLMOptions {
+    /** Maximum tokens to generate */
+    maxTokens?: number;
+    /** Sampling temperature (0 = deterministic, 1 = creative) */
+    temperature?: number;
+    /** System prompt for the model */
+    system?: string;
+}
+/** Response from an LLM completion request */
+export interface LLMResponse {
+    /** Generated text content */
+    content: string;
+    /** Token usage statistics */
+    usage?: {
+        prompt: number;
+        completion: number;
+        total: number;
+    };
+    /** Response latency in milliseconds */
+    latencyMs: number;
+}
+/**
+ * Configuration for the AI scan pipeline.
+ * Controls which stages run and how they're configured.
+ */
+export interface AIConfig {
+    /** SLA level determines which stages run */
+    sla: SLALevel;
+    /** Embedding provider configuration */
+    embedding?: {
+        provider: 'local' | 'openai' | 'ollama';
+        model?: string;
+        baseUrl?: string;
+    };
+    /** Local LLM configuration (Ollama) */
+    local?: {
+        provider: 'ollama';
+        model: string;
+        baseUrl?: string;
+    };
+    /** Remote LLM configuration (OpenAI / Anthropic) */
+    remote?: {
+        provider: 'openai' | 'anthropic';
+        model: string;
+        apiKey: string;
+        baseUrl?: string;
+    };
+    /** Maximum code blocks to send to LLM stage (default: 20) */
+    maxLLMBlocks?: number;
+    /** Embedding similarity threshold for flagging blocks (default: 0.7) */
+    similarityThreshold?: number;
+}
+/** Result from a single scan stage */
+export interface ScanStageResult {
+    /** Which stage produced these results */
+    stage: 'structural' | 'embedding' | 'llm';
+    /** Issues detected in this stage */
+    issues: DetectorResult[];
+    /** Time taken in milliseconds */
+    durationMs: number;
+    /** Tokens consumed (LLM stages only) */
+    tokensUsed?: number;
+}
+/** Aggregate result from all pipeline stages */
+export interface AIPipelineResult {
+    /** Results from each stage that ran */
+    stages: ScanStageResult[];
+    /** Total issues across all stages */
+    totalIssues: number;
+    /** Total time across all stages in milliseconds */
+    totalDurationMs: number;
+    /** SLA level that was used */
+    slaLevel: SLALevel;
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/ai/v4/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../src/ai/v4/types.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,6BAA6B,CAAC;AAIlE,iEAAiE;AACjE,MAAM,MAAM,QAAQ,GAAG,IAAI,GAAG,IAAI,GAAG,IAAI,CAAC;AAI1C;;;GAGG;AACH,MAAM,WAAW,iBAAiB;IAChC,mDAAmD;IACnD,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IAEtB,iCAAiC;IACjC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAE3B,qDAAqD;IACrD,KAAK,CAAC,KAAK,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;CAC7C;AAID;;;GAGG;AACH,MAAM,WAAW,WAAW;IAC1B,2DAA2D;IAC3D,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IAEtB,yCAAyC;IACzC,QAAQ,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,UAAU,GAAG,OAAO,CAAC,WAAW,CAAC,CAAC;IAErE,yDAAyD;IACzD,WAAW,IAAI,OAAO,CAAC,OAAO,CAAC,CAAC;CACjC;AAED,0CAA0C;AAC1C,MAAM,WAAW,UAAU;IACzB,iCAAiC;IACjC,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,6DAA6D;IAC7D,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,kCAAkC;IAClC,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,8CAA8C;AAC9C,MAAM,WAAW,WAAW;IAC1B,6BAA6B;IAC7B,OAAO,EAAE,MAAM,CAAC;IAChB,6BAA6B;IAC7B,KAAK,CAAC,EAAE;QACN,MAAM,EAAE,MAAM,CAAC;QACf,UAAU,EAAE,MAAM,CAAC;QACnB,KAAK,EAAE,MAAM,CAAC;KACf,CAAC;IACF,uCAAuC;IACvC,SAAS,EAAE,MAAM,CAAC;CACnB;AAID;;;GAGG;AACH,MAAM,WAAW,QAAQ;IACvB,4CAA4C;IAC5C,GAAG,EAAE,QAAQ,CAAC;IAEd,uCAAuC;IACvC,SAAS,CAAC,EAAE;QACV,QAAQ,EAAE,OAAO,GAAG,QAAQ,GAAG,QAAQ,CAAC;QACxC,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,OAAO,CAAC,EAAE,MAAM,CAAC;KAClB,CAAC;IAEF,uCAAuC;IACvC,KAAK,CAAC,EAAE;QACN,QAAQ,EAAE,QAAQ,CAAC;QACnB,KAAK,EAAE,MAAM,CAAC;QACd,OAAO,CAAC,EAAE,MAAM,CAAC;KAClB,CAAC;IAEF,oDAAoD;IACpD,MAAM,CAAC,EAAE;QACP,QAAQ,EAAE,QAAQ,GAAG,WAAW,CAAC;QACjC,KAAK,EAAE,MAAM,CAAC;QACd,MAAM,EAAE,MAAM,CAAC;QACf,OAAO,CAAC,EAAE,MAAM,CAAC;KAClB,CAAC;IAEF,6DAA6D;IAC7D,YAAY,CAAC,EAAE,MAAM,CAAC;IAEtB,wEAAwE;IACxE,mBAAmB,CAAC,EAAE,MAAM,CAAC;CAC9B;AAID,sCAAsC;AACtC,MAAM,WAAW,eAAe;IAC9B,yCAAyC;IACzC,KAAK,EAAE,YAAY,GAAG,WAAW,GAAG,KAAK,CAAC;IAC1C,oCAAoC;IACpC,MAAM,EAAE,cAAc,EAAE,CAAC;IACzB,iCAAiC;IACjC,UAAU,EAAE,MAAM,CAAC;IACnB,wCAAwC;IACxC,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAID,gDAAgD;AAChD,MAAM,WAAW,gBAAgB;IAC/B,uCAAuC;IACvC,MAAM,EAAE,eAAe,EAAE,CAAC;IAC1B,qCAAqC;IACrC,WAAW,EAAE,MAAM,CAAC;IACpB,mDAAmD;IACnD,eAAe,EAAE,MAAM,CAAC;IACxB,8BAA8B;IAC9B,QAAQ,EAAE,QAAQ,CAAC;CACpB"}

package/dist/ai/v4/types.js

@@ -0,0 +1,16 @@
+/**
+ * Open Code Review V4 — AI Pipeline Types
+ *
+ * Type definitions for the two-stage AI scan pipeline:
+ * - Stage 1 (Embedding): Fast similarity-based defect detection
+ * - Stage 2 (LLM): Deep analysis of suspicious code blocks
+ *
+ * SLA levels control which stages run:
+ * - L1 Fast: Structural detectors only (no AI)
+ * - L2 Standard: + Embedding recall + Local LLM (Ollama)
+ * - L3 Deep: + Remote LLM (OpenAI/Claude)
+ *
+ * @since 0.4.0
+ */
+export {};
+//# sourceMappingURL=types.js.map

package/dist/ai/v4/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../../src/ai/v4/types.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG"}

package/dist/ai-healer/prompt-builder.d.ts

@@ -0,0 +1,33 @@
+/**
+ * AI Healer — Prompt Builder
+ *
+ * Converts validation results into structured prompts that can be fed
+ * back to AI coding assistants (Copilot, Cursor, Claude) to fix issues.
+ */
+import type { AggregateScore } from '../scorer/scoring-engine.js';
+/** Generated fix prompt */
+export interface FixPrompt {
+    file: string;
+    prompt: string;
+    priority: number;
+    categories: string[];
+}
+/**
+ * Build fix prompts from validation results
+ */
+export declare class PromptBuilder {
+    /**
+     * Generate fix prompts for all files with issues
+     */
+    buildPrompts(report: AggregateScore): FixPrompt[];
+    /**
+     * Build a fix prompt for a single file
+     */
+    private buildFilePrompt;
+    /**
+     * Generate a combined prompt for all files (useful for batch fixes)
+     */
+    buildCombinedPrompt(report: AggregateScore): string;
+}
+export default PromptBuilder;
+//# sourceMappingURL=prompt-builder.d.ts.map

package/dist/ai-healer/prompt-builder.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"prompt-builder.d.ts","sourceRoot":"","sources":["../../src/ai-healer/prompt-builder.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,KAAK,EAAE,cAAc,EAAa,MAAM,6BAA6B,CAAC;AAE7E,2BAA2B;AAC3B,MAAM,WAAW,SAAS;IACxB,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,MAAM,EAAE,CAAC;CACtB;AAED;;GAEG;AACH,qBAAa,aAAa;IACxB;;OAEG;IACH,YAAY,CAAC,MAAM,EAAE,cAAc,GAAG,SAAS,EAAE;IAajD;;OAEG;IACH,OAAO,CAAC,eAAe;IA+CvB;;OAEG;IACH,mBAAmB,CAAC,MAAM,EAAE,cAAc,GAAG,MAAM;CAkBpD;AAED,eAAe,aAAa,CAAC"}

package/dist/ai-healer/prompt-builder.js

@@ -0,0 +1,89 @@
+/**
+ * AI Healer — Prompt Builder
+ *
+ * Converts validation results into structured prompts that can be fed
+ * back to AI coding assistants (Copilot, Cursor, Claude) to fix issues.
+ */
+/**
+ * Build fix prompts from validation results
+ */
+export class PromptBuilder {
+    /**
+     * Generate fix prompts for all files with issues
+     */
+    buildPrompts(report) {
+        const prompts = [];
+        for (const file of report.files) {
+            if (file.totalScore >= 95)
+                continue;
+            const prompt = this.buildFilePrompt(file);
+            if (prompt)
+                prompts.push(prompt);
+        }
+        return prompts.sort((a, b) => b.priority - a.priority);
+    }
+    /**
+     * Build a fix prompt for a single file
+     */
+    buildFilePrompt(file) {
+        const sections = [];
+        const categories = [];
+        sections.push(`## Fix Request: ${file.file}`);
+        sections.push(`Current Score: ${file.totalScore}/100 (Grade: ${file.grade})`);
+        sections.push('');
+        sections.push('Please fix the following issues in this file:');
+        sections.push('');
+        const dims = [
+            { key: 'completeness', label: 'Hallucination Issues (Code Completeness)', dim: file.dimensions.completeness },
+            { key: 'coherence', label: 'Logic Gaps (Coherence)', dim: file.dimensions.coherence },
+            { key: 'consistency', label: 'Style Inconsistencies (Architecture Consistency)', dim: file.dimensions.consistency },
+            { key: 'conciseness', label: 'Duplication (Code Conciseness)', dim: file.dimensions.conciseness },
+        ];
+        for (const { key, label, dim } of dims) {
+            if (dim.issueCount > 0) {
+                categories.push(key);
+                sections.push(`### ${label}`);
+                for (const detail of dim.details) {
+                    sections.push(`- ${detail}`);
+                }
+                sections.push('');
+            }
+        }
+        if (categories.length === 0)
+            return null;
+        sections.push('### Guidelines');
+        sections.push('- Fix each issue while preserving existing functionality');
+        sections.push('- Add proper error handling where missing');
+        sections.push('- Remove hallucinated imports/variables');
+        sections.push('- Standardize coding style to match the project conventions');
+        sections.push('- Do NOT introduce new dependencies unless absolutely necessary');
+        const priority = 100 - file.totalScore;
+        return {
+            file: file.file,
+            prompt: sections.join('\n'),
+            priority,
+            categories,
+        };
+    }
+    /**
+     * Generate a combined prompt for all files (useful for batch fixes)
+     */
+    buildCombinedPrompt(report) {
+        const prompts = this.buildPrompts(report);
+        if (prompts.length === 0) {
+            return 'All files passed validation. No fixes needed.';
+        }
+        const header = [
+            '# Open Code Review — Fix Request',
+            '',
+            `Overall Score: ${report.overallScore}/100`,
+            `Files needing fixes: ${prompts.length}`,
+            '',
+            '---',
+            '',
+        ].join('\n');
+        return header + prompts.map(p => p.prompt).join('\n---\n\n');
+    }
+}
+export default PromptBuilder;
+//# sourceMappingURL=prompt-builder.js.map

package/dist/ai-healer/prompt-builder.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"prompt-builder.js","sourceRoot":"","sources":["../../src/ai-healer/prompt-builder.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAYH;;GAEG;AACH,MAAM,OAAO,aAAa;IACxB;;OAEG;IACH,YAAY,CAAC,MAAsB;QACjC,MAAM,OAAO,GAAgB,EAAE,CAAC;QAEhC,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;YAChC,IAAI,IAAI,CAAC,UAAU,IAAI,EAAE;gBAAE,SAAS;YAEpC,MAAM,MAAM,GAAG,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC;YAC1C,IAAI,MAAM;gBAAE,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACnC,CAAC;QAED,OAAO,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,GAAG,CAAC,CAAC,QAAQ,CAAC,CAAC;IACzD,CAAC;IAED;;OAEG;IACK,eAAe,CAAC,IAAe;QACrC,MAAM,QAAQ,GAAa,EAAE,CAAC;QAC9B,MAAM,UAAU,GAAa,EAAE,CAAC;QAEhC,QAAQ,CAAC,IAAI,CAAC,mBAAmB,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;QAC9C,QAAQ,CAAC,IAAI,CAAC,kBAAkB,IAAI,CAAC,UAAU,gBAAgB,IAAI,CAAC,KAAK,GAAG,CAAC,CAAC;QAC9E,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAClB,QAAQ,CAAC,IAAI,CAAC,+CAA+C,CAAC,CAAC;QAC/D,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAElB,MAAM,IAAI,GAAG;YACX,EAAE,GAAG,EAAE,cAAc,EAAE,KAAK,EAAE,0CAA0C,EAAE,GAAG,EAAE,IAAI,CAAC,UAAU,CAAC,YAAY,EAAE;YAC7G,EAAE,GAAG,EAAE,WAAW,EAAE,KAAK,EAAE,wBAAwB,EAAE,GAAG,EAAE,IAAI,CAAC,UAAU,CAAC,SAAS,EAAE;YACrF,EAAE,GAAG,EAAE,aAAa,EAAE,KAAK,EAAE,kDAAkD,EAAE,GAAG,EAAE,IAAI,CAAC,UAAU,CAAC,WAAW,EAAE;YACnH,EAAE,GAAG,EAAE,aAAa,EAAE,KAAK,EAAE,gCAAgC,EAAE,GAAG,EAAE,IAAI,CAAC,UAAU,CAAC,WAAW,EAAE;SAClG,CAAC;QAEF,KAAK,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,GAAG,EAAE,IAAI,IAAI,EAAE,CAAC;YACvC,IAAI,GAAG,CAAC,UAAU,GAAG,CAAC,EAAE,CAAC;gBACvB,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;gBACrB,QAAQ,CAAC,IAAI,CAAC,OAAO,KAAK,EAAE,CAAC,CAAC;gBAC9B,KAAK,MAAM,MAAM,IAAI,GAAG,CAAC,OAAO,EAAE,CAAC;oBACjC,QAAQ,CAAC,IAAI,CAAC,KAAK,MAAM,EAAE,CAAC,CAAC;gBAC/B,CAAC;gBACD,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YACpB,CAAC;QACH,CAAC;QAED,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,IAAI,CAAC;QAEzC,QAAQ,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;QAChC,QAAQ,CAAC,IAAI,CAAC,0DAA0D,CAAC,CAAC;QAC1E,QAAQ,CAAC,IAAI,CAAC,2CAA2C,CAAC,CAAC;QAC3D,QAAQ,CAAC,IAAI,CAAC,yCAAyC,CAAC,CAAC;QACzD,QAAQ,CAAC,IAAI,CAAC,6DAA6D,CAAC,CAAC;QAC7E,QAAQ,CAAC,IAAI,CAAC,iEAAiE,CAAC,CAAC;QAEjF,MAAM,QAAQ,GAAG,GAAG,GAAG,IAAI,CAAC,UAAU,CAAC;QAEvC,OAAO;YACL,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,MAAM,EAAE,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC;YAC3B,QAAQ;YACR,UAAU;SACX,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,mBAAmB,CAAC,MAAsB;QACxC,MAAM,OAAO,GAAG,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC;QAC1C,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACzB,OAAO,+CAA+C,CAAC;QACzD,CAAC;QAED,MAAM,MAAM,GAAG;YACb,kCAAkC;YAClC,EAAE;YACF,kBAAkB,MAAM,CAAC,YAAY,MAAM;YAC3C,wBAAwB,OAAO,CAAC,MAAM,EAAE;YACxC,EAAE;YACF,KAAK;YACL,EAAE;SACH,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAEb,OAAO,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;IAC/D,CAAC;CACF;AAED,eAAe,aAAa,CAAC"}

package/dist/config/defaults.d.ts

@@ -0,0 +1,14 @@
+/**
+ * Default Configuration
+ *
+ * Provides sensible defaults for all configuration options.
+ * Priority chain: CLI args > env vars > .aicv.yml > user global > these defaults
+ */
+import type { AICVConfig } from './types.js';
+export declare const DEFAULT_CONFIG: Readonly<AICVConfig>;
+/**
+ * Create a complete config by merging partial user config with defaults.
+ * Shallow-merges each top-level section.
+ */
+export declare function mergeWithDefaults(partial: Partial<AICVConfig>): AICVConfig;
+//# sourceMappingURL=defaults.d.ts.map

package/dist/config/defaults.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"defaults.d.ts","sourceRoot":"","sources":["../../src/config/defaults.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AAE7C,eAAO,MAAM,cAAc,EAAE,QAAQ,CAAC,UAAU,CA6B/C,CAAC;AAEF;;;GAGG;AACH,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,OAAO,CAAC,UAAU,CAAC,GAAG,UAAU,CAiB1E"}

package/dist/config/defaults.js

@@ -0,0 +1,57 @@
+/**
+ * Default Configuration
+ *
+ * Provides sensible defaults for all configuration options.
+ * Priority chain: CLI args > env vars > .aicv.yml > user global > these defaults
+ */
+export const DEFAULT_CONFIG = {
+    scan: {
+        include: [
+            'src/**/*.ts',
+            'src/**/*.tsx',
+            'src/**/*.js',
+            'src/**/*.jsx',
+        ],
+        exclude: [
+            '**/*.test.*',
+            '**/*.spec.*',
+            '**/__tests__/**',
+            '**/node_modules/**',
+            '**/dist/**',
+            '**/build/**',
+            '**/.git/**',
+        ],
+        languages: [], // auto-detect
+        slaLevel: 'L2',
+    },
+    scoring: {
+        threshold: 70,
+        failOn: 'critical',
+    },
+    report: {
+        format: ['terminal'],
+    },
+};
+/**
+ * Create a complete config by merging partial user config with defaults.
+ * Shallow-merges each top-level section.
+ */
+export function mergeWithDefaults(partial) {
+    return {
+        license: partial.license ?? DEFAULT_CONFIG.license,
+        scan: {
+            ...DEFAULT_CONFIG.scan,
+            ...(partial.scan ?? {}),
+        },
+        scoring: {
+            ...DEFAULT_CONFIG.scoring,
+            ...(partial.scoring ?? {}),
+        },
+        ai: partial.ai ?? DEFAULT_CONFIG.ai,
+        report: {
+            ...DEFAULT_CONFIG.report,
+            ...(partial.report ?? {}),
+        },
+    };
+}
+//# sourceMappingURL=defaults.js.map

package/dist/config/defaults.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"defaults.js","sourceRoot":"","sources":["../../src/config/defaults.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAIH,MAAM,CAAC,MAAM,cAAc,GAAyB;IAClD,IAAI,EAAE;QACJ,OAAO,EAAE;YACP,aAAa;YACb,cAAc;YACd,aAAa;YACb,cAAc;SACf;QACD,OAAO,EAAE;YACP,aAAa;YACb,aAAa;YACb,iBAAiB;YACjB,oBAAoB;YACpB,YAAY;YACZ,aAAa;YACb,YAAY;SACb;QACD,SAAS,EAAE,EAAE,EAAE,cAAc;QAC7B,QAAQ,EAAE,IAAI;KACf;IAED,OAAO,EAAE;QACP,SAAS,EAAE,EAAE;QACb,MAAM,EAAE,UAAU;KACnB;IAED,MAAM,EAAE;QACN,MAAM,EAAE,CAAC,UAAU,CAAC;KACrB;CACF,CAAC;AAEF;;;GAGG;AACH,MAAM,UAAU,iBAAiB,CAAC,OAA4B;IAC5D,OAAO;QACL,OAAO,EAAE,OAAO,CAAC,OAAO,IAAI,cAAc,CAAC,OAAO;QAClD,IAAI,EAAE;YACJ,GAAG,cAAc,CAAC,IAAI;YACtB,GAAG,CAAC,OAAO,CAAC,IAAI,IAAI,EAAE,CAAC;SACxB;QACD,OAAO,EAAE;YACP,GAAG,cAAc,CAAC,OAAO;YACzB,GAAG,CAAC,OAAO,CAAC,OAAO,IAAI,EAAE,CAAC;SAC3B;QACD,EAAE,EAAE,OAAO,CAAC,EAAE,IAAI,cAAc,CAAC,EAAE;QACnC,MAAM,EAAE;YACN,GAAG,cAAc,CAAC,MAAM;YACxB,GAAG,CAAC,OAAO,CAAC,MAAM,IAAI,EAAE,CAAC;SAC1B;KACF,CAAC;AACJ,CAAC"}

package/dist/config/index.d.ts

@@ -0,0 +1,8 @@
+/**
+ * Config Module — Public API
+ */
+export type { AICVConfig, ScanConfig, ScoringConfig, AIConfig, AILocalConfig, AIRemoteConfig, ReportConfig, ReportFormatType, } from './types.js';
+export { DEFAULT_CONFIG, mergeWithDefaults } from './defaults.js';
+export { loadConfig } from './loader.js';
+export type { CLIConfigOverrides, LoadConfigOptions } from './loader.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/config/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/config/index.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,YAAY,EACV,UAAU,EACV,UAAU,EACV,aAAa,EACb,QAAQ,EACR,aAAa,EACb,cAAc,EACd,YAAY,EACZ,gBAAgB,GACjB,MAAM,YAAY,CAAC;AAEpB,OAAO,EAAE,cAAc,EAAE,iBAAiB,EAAE,MAAM,eAAe,CAAC;AAElE,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,YAAY,EAAE,kBAAkB,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC"}

package/dist/config/index.js

@@ -0,0 +1,6 @@
+/**
+ * Config Module — Public API
+ */
+export { DEFAULT_CONFIG, mergeWithDefaults } from './defaults.js';
+export { loadConfig } from './loader.js';
+//# sourceMappingURL=index.js.map

package/dist/config/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/config/index.ts"],"names":[],"mappings":"AAAA;;GAEG;AAaH,OAAO,EAAE,cAAc,EAAE,iBAAiB,EAAE,MAAM,eAAe,CAAC;AAElE,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC"}

package/dist/config/loader.d.ts

@@ -0,0 +1,33 @@
+/**
+ * Configuration Loader
+ *
+ * Loads .aicv.yml with the following priority chain:
+ *   1. CLI args (passed directly)
+ *   2. Environment variables (AICV_*)
+ *   3. Project .aicv.yml (cwd)
+ *   4. User global ~/.aicv/config.yml
+ *   5. Built-in defaults
+ *
+ * Uses the `yaml` package for YAML parsing.
+ */
+import type { AICVConfig } from './types.js';
+export interface CLIConfigOverrides {
+    license?: string;
+    threshold?: number;
+    format?: string | string[];
+    slaLevel?: string;
+    failOn?: string;
+    output?: string;
+}
+export interface LoadConfigOptions {
+    /** Current working directory (default: process.cwd()) */
+    cwd?: string;
+    /** CLI argument overrides */
+    cliOverrides?: CLIConfigOverrides;
+}
+/**
+ * Load configuration with full priority chain:
+ *   CLI args > env vars > project .aicv.yml > user global > defaults
+ */
+export declare function loadConfig(options?: LoadConfigOptions): AICVConfig;
+//# sourceMappingURL=loader.d.ts.map

package/dist/config/loader.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"loader.d.ts","sourceRoot":"","sources":["../../src/config/loader.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAMH,OAAO,KAAK,EAAE,UAAU,EAAoB,MAAM,YAAY,CAAC;AAmJ/D,MAAM,WAAW,kBAAkB;IACjC,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,MAAM,CAAC,EAAE,MAAM,GAAG,MAAM,EAAE,CAAC;IAC3B,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAoCD,MAAM,WAAW,iBAAiB;IAChC,yDAAyD;IACzD,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,6BAA6B;IAC7B,YAAY,CAAC,EAAE,kBAAkB,CAAC;CACnC;AAED;;;GAGG;AACH,wBAAgB,UAAU,CAAC,OAAO,GAAE,iBAAsB,GAAG,UAAU,CAmCtE"}

package/dist/config/loader.js

@@ -0,0 +1,245 @@
+/**
+ * Configuration Loader
+ *
+ * Loads .aicv.yml with the following priority chain:
+ *   1. CLI args (passed directly)
+ *   2. Environment variables (AICV_*)
+ *   3. Project .aicv.yml (cwd)
+ *   4. User global ~/.aicv/config.yml
+ *   5. Built-in defaults
+ *
+ * Uses the `yaml` package for YAML parsing.
+ */
+import { readFileSync, existsSync } from 'node:fs';
+import { resolve, join } from 'node:path';
+import { homedir } from 'node:os';
+import { parse as parseYaml } from 'yaml';
+import { mergeWithDefaults } from './defaults.js';
+// ─── Config File Discovery ─────────────────────────────────────────
+const CONFIG_FILENAMES = ['.ocrrc.yml', '.ocrrc.yaml', '.aicv.yml', '.aicv.yaml', 'aicv.yml', 'aicv.yaml'];
+/**
+ * Search for a config file starting from `startDir` up to the filesystem root.
+ */
+function findConfigFile(startDir) {
+    let dir = resolve(startDir);
+    const root = resolve('/');
+    while (true) {
+        for (const name of CONFIG_FILENAMES) {
+            const candidate = join(dir, name);
+            if (existsSync(candidate)) {
+                return candidate;
+            }
+        }
+        const parent = resolve(dir, '..');
+        if (parent === dir || dir === root)
+            break;
+        dir = parent;
+    }
+    return null;
+}
+/**
+ * Read and parse a YAML config file, returning a partial AICVConfig.
+ * Returns null if the file cannot be read or parsed.
+ */
+function readYamlConfig(filePath) {
+    try {
+        const raw = readFileSync(filePath, 'utf-8');
+        const parsed = parseYaml(raw);
+        if (parsed && typeof parsed === 'object') {
+            return normalizeRawConfig(parsed);
+        }
+        return null;
+    }
+    catch {
+        return null;
+    }
+}
+/**
+ * Normalize raw YAML object into Partial<AICVConfig>.
+ * Handles alternate key names and type coercion.
+ */
+function normalizeRawConfig(raw) {
+    const config = {};
+    if (typeof raw.license === 'string') {
+        config.license = raw.license;
+    }
+    // Scan section
+    if (raw.scan && typeof raw.scan === 'object') {
+        const s = raw.scan;
+        config.scan = {
+            include: toStringArray(s.include ?? s.paths ?? []),
+            exclude: toStringArray(s.exclude ?? []),
+            languages: toStringArray(s.languages ?? []),
+            slaLevel: normalizeSlaLevel(s.slaLevel ?? s.sla_level ?? 'L2'),
+        };
+    }
+    // Scoring section
+    if (raw.scoring && typeof raw.scoring === 'object') {
+        const sc = raw.scoring;
+        config.scoring = {
+            threshold: typeof sc.threshold === 'number' ? sc.threshold : 70,
+            failOn: normalizeFailOn(sc.failOn ?? sc.fail_on ?? 'critical'),
+        };
+    }
+    // AI section (type definition only, no runtime behavior yet)
+    if (raw.ai && typeof raw.ai === 'object') {
+        const ai = raw.ai;
+        config.ai = {
+            local: ai.local,
+            remote: ai.remote,
+            strategy: ai.strategy ?? 'local-first',
+        };
+    }
+    // Report section
+    if (raw.report && typeof raw.report === 'object') {
+        const r = raw.report;
+        config.report = {
+            format: normalizeFormats(r.format),
+            output: typeof r.output === 'string' ? r.output : undefined,
+        };
+    }
+    return config;
+}
+// ─── Env Var Extraction ────────────────────────────────────────────
+/**
+ * Extract config overrides from environment variables.
+ * Supported vars:
+ *   AICV_LICENSE
+ *   AICV_SLA_LEVEL
+ *   AICV_THRESHOLD
+ *   AICV_FAIL_ON
+ *   AICV_FORMAT
+ */
+function configFromEnv() {
+    const config = {};
+    const env = process.env;
+    if (env.AICV_LICENSE) {
+        config.license = env.AICV_LICENSE;
+    }
+    if (env.AICV_SLA_LEVEL || env.AICV_THRESHOLD || env.AICV_FAIL_ON) {
+        config.scan = {};
+        config.scoring = {};
+        if (env.AICV_SLA_LEVEL) {
+            config.scan.slaLevel = normalizeSlaLevel(env.AICV_SLA_LEVEL);
+        }
+        if (env.AICV_THRESHOLD) {
+            const num = parseInt(env.AICV_THRESHOLD, 10);
+            if (!isNaN(num)) {
+                config.scoring.threshold = num;
+            }
+        }
+        if (env.AICV_FAIL_ON) {
+            config.scoring.failOn = normalizeFailOn(env.AICV_FAIL_ON);
+        }
+    }
+    if (env.AICV_FORMAT) {
+        config.report = {
+            format: normalizeFormats(env.AICV_FORMAT),
+        };
+    }
+    return config;
+}
+function configFromCLI(overrides) {
+    const config = {};
+    if (overrides.license) {
+        config.license = overrides.license;
+    }
+    if (overrides.threshold !== undefined || overrides.failOn || overrides.slaLevel) {
+        config.scan = {};
+        config.scoring = {};
+        if (overrides.slaLevel) {
+            config.scan.slaLevel = normalizeSlaLevel(overrides.slaLevel);
+        }
+        if (overrides.threshold !== undefined) {
+            config.scoring.threshold = overrides.threshold;
+        }
+        if (overrides.failOn) {
+            config.scoring.failOn = normalizeFailOn(overrides.failOn);
+        }
+    }
+    if (overrides.format || overrides.output) {
+        config.report = {
+            format: overrides.format ? normalizeFormats(overrides.format) : [],
+            output: overrides.output,
+        };
+    }
+    return config;
+}
+/**
+ * Load configuration with full priority chain:
+ *   CLI args > env vars > project .aicv.yml > user global > defaults
+ */
+export function loadConfig(options = {}) {
+    const cwd = options.cwd ?? process.cwd();
+    // Layer 5: defaults (handled by mergeWithDefaults)
+    // Layer 4: user global config
+    const globalConfigPath = join(homedir(), '.aicv', 'config.yml');
+    const globalConfig = existsSync(globalConfigPath)
+        ? readYamlConfig(globalConfigPath) ?? {}
+        : {};
+    // Layer 3: project config
+    const projectConfigPath = findConfigFile(cwd);
+    const projectConfig = projectConfigPath
+        ? readYamlConfig(projectConfigPath) ?? {}
+        : {};
+    // Layer 2: environment variables
+    const envConfig = configFromEnv();
+    // Layer 1: CLI args
+    const cliConfig = options.cliOverrides
+        ? configFromCLI(options.cliOverrides)
+        : {};
+    // Merge: defaults < global < project < env < cli
+    const merged = deepMergeConfigs({}, globalConfig, projectConfig, envConfig, cliConfig);
+    return mergeWithDefaults(merged);
+}
+// ─── Utility Helpers ───────────────────────────────────────────────
+function toStringArray(val) {
+    if (Array.isArray(val))
+        return val.filter((v) => typeof v === 'string');
+    if (typeof val === 'string')
+        return [val];
+    return [];
+}
+function normalizeSlaLevel(val) {
+    const s = String(val).toUpperCase();
+    if (s === 'L1' || s === 'L2' || s === 'L3')
+        return s;
+    return 'L2';
+}
+function normalizeFailOn(val) {
+    const s = String(val).toLowerCase();
+    if (['critical', 'high', 'medium', 'low', 'none'].includes(s)) {
+        return s;
+    }
+    return 'critical';
+}
+const VALID_FORMATS = new Set(['terminal', 'json', 'html', 'markdown', 'sarif']);
+function normalizeFormats(val) {
+    const arr = toStringArray(val);
+    const result = arr.filter((f) => VALID_FORMATS.has(f));
+    return result.length > 0 ? result : ['terminal'];
+}
+/**
+ * Deep-merge multiple partial configs (left to right, later wins).
+ */
+function deepMergeConfigs(...configs) {
+    const result = {};
+    for (const cfg of configs) {
+        if (cfg.license !== undefined)
+            result.license = cfg.license;
+        if (cfg.scan) {
+            result.scan = { ...(result.scan ?? {}), ...cfg.scan };
+        }
+        if (cfg.scoring) {
+            result.scoring = { ...(result.scoring ?? {}), ...cfg.scoring };
+        }
+        if (cfg.ai) {
+            result.ai = { ...(result.ai ?? {}), ...cfg.ai };
+        }
+        if (cfg.report) {
+            result.report = { ...(result.report ?? {}), ...cfg.report };
+        }
+    }
+    return result;
+}
+//# sourceMappingURL=loader.js.map