@opensip-cli/checks-cpp 0.1.0

package/LICENSE

@@ -0,0 +1,202 @@
+
+                                 Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "[]"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright [yyyy] [name of copyright owner]
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.

package/NOTICE

@@ -0,0 +1,8 @@
+OpenSIP CLI
+Copyright 2026 opensip-ai
+
+Licensed under the Apache License, Version 2.0 (the "License"); you may not use
+this software except in compliance with the License. A copy of the License is
+included in the LICENSE file and is also available at:
+
+    http://www.apache.org/licenses/LICENSE-2.0

package/README.md

@@ -0,0 +1,31 @@
+<!-- Generated by scripts/build-package-readmes.mjs — do not edit by hand.
+     Change the package's "description" (or the generator template) and run
+     `pnpm docs:readmes`. CI enforces sync via `pnpm docs:readmes:check`. -->
+
+# @opensip-cli/checks-cpp
+
+> C/C++ fitness checks (clang-tidy backed)
+
+This is a **fitness check pack**. Install it alongside the `opensip-cli` CLI and its checks are discovered automatically.
+
+Part of [**opensip-cli**](https://github.com/opensip-ai/opensip-cli) — an open-source codebase-analysis toolkit: fitness checks (`fit`), static call-graph analysis (`graph`), and simulation (`sim`).
+
+## Install
+
+Most users install the CLI, which bundles the first-party tools:
+
+```bash
+curl -fsSL https://opensip.ai/cli/install.sh | bash
+```
+
+This package is published for the CLI and advanced plugin authors; most users should not install `@opensip-cli/checks-cpp` directly.
+
+## Documentation
+
+- 📚 Project docs: https://opensip.ai/docs/opensip-cli/
+- 🧭 Package catalog (what every package does): https://github.com/opensip-ai/opensip-cli/blob/v0.1.0/docs/public/70-reference/02-package-catalog.md
+- 📦 Source: https://github.com/opensip-ai/opensip-cli/tree/v0.1.0/packages/fitness/checks-cpp
+
+## License
+
+Apache-2.0 © opensip-ai

package/dist/__tests__/clang-tidy.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=clang-tidy.test.d.ts.map

package/dist/__tests__/clang-tidy.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"clang-tidy.test.d.ts","sourceRoot":"","sources":["../../src/__tests__/clang-tidy.test.ts"],"names":[],"mappings":""}

package/dist/__tests__/clang-tidy.test.js

@@ -0,0 +1,91 @@
+import { describe, expect, it } from 'vitest';
+import { parseClangTidyOutput } from '../checks/clang-tidy-passthrough.js';
+describe('parseClangTidyOutput', () => {
+    it('parses a single warning with a lint name', () => {
+        const out = `/abs/path/foo.cpp:42:10: warning: do not use 'goto' [hicpp-avoid-goto]`;
+        const violations = parseClangTidyOutput(out, '', 0, ['/abs/path/foo.cpp'], '/abs');
+        expect(violations).toHaveLength(1);
+        expect(violations[0]?.severity).toBe('warning');
+        expect(violations[0]?.line).toBe(42);
+        expect(violations[0]?.message).toContain('hicpp-avoid-goto');
+    });
+    it('captures the file path relative to cwd when the file is inside cwd', () => {
+        const out = `/abs/path/foo.cpp:42:10: warning: do not use 'goto' [hicpp-avoid-goto]`;
+        const violations = parseClangTidyOutput(out, '', 0, ['/abs/path/foo.cpp'], '/abs');
+        expect(violations).toHaveLength(1);
+        expect(violations[0]?.filePath).toBe('path/foo.cpp');
+    });
+    it('captures the file path as absolute when the file is outside cwd', () => {
+        // System headers (e.g. /usr/include/...) commonly appear in clang-tidy
+        // output and must remain absolute so they aren't ambiguously rooted.
+        const out = `/usr/include/stdio.h:10:1: warning: foo [check-x]`;
+        const violations = parseClangTidyOutput(out, '', 0, [], '/abs/project');
+        expect(violations).toHaveLength(1);
+        expect(violations[0]?.filePath).toBe('/usr/include/stdio.h');
+    });
+    it('captures the column from group 3', () => {
+        const out = `/abs/path/foo.cpp:42:17: warning: do not use 'goto' [hicpp-avoid-goto]`;
+        const violations = parseClangTidyOutput(out, '', 0, [], '/abs');
+        expect(violations).toHaveLength(1);
+        expect(violations[0]?.column).toBe(17);
+    });
+    it('parses errors with severity error', () => {
+        const out = `/x/y.cpp:5:1: error: expected ';' [clang-diagnostic-error]`;
+        const violations = parseClangTidyOutput(out, '', 1, ['/x/y.cpp'], '/x');
+        expect(violations).toHaveLength(1);
+        expect(violations[0]?.severity).toBe('error');
+    });
+    it('skips note: lines (notes are continuations of prior diagnostics)', () => {
+        const out = [
+            '/x/y.cpp:5:1: warning: prefer enum class [modernize-use-enum-class]',
+            '/x/y.cpp:5:1: note: change here',
+        ].join('\n');
+        const violations = parseClangTidyOutput(out, '', 0, [], '/x');
+        expect(violations).toHaveLength(1);
+    });
+    it('handles diagnostics without a lint name', () => {
+        const out = `/a/b.cpp:1:1: warning: bare warning`;
+        const violations = parseClangTidyOutput(out, '', 0, [], '/a');
+        expect(violations).toHaveLength(1);
+        expect(violations[0]?.message).toBe('bare warning');
+    });
+    it('returns empty array on empty stdout', () => {
+        expect(parseClangTidyOutput('', '', 0, [], '/x')).toHaveLength(0);
+    });
+    it('skips lines that do not match the expected diagnostic format', () => {
+        const out = 'random output\n2 warnings generated.\n';
+        expect(parseClangTidyOutput(out, '', 0, [], '/x')).toEqual([]);
+    });
+    it('returns multiple violations for multi-line output', () => {
+        const out = [
+            '/x/y.cpp:1:1: warning: a [check-a]',
+            '/x/y.cpp:5:1: warning: b [check-b]',
+            '/x/y.cpp:9:1: error: c [check-c]',
+        ].join('\n');
+        const violations = parseClangTidyOutput(out, '', 0, [], '/x');
+        expect(violations).toHaveLength(3);
+        expect(violations[0]?.line).toBe(1);
+        expect(violations[1]?.line).toBe(5);
+        expect(violations[2]?.line).toBe(9);
+    });
+    it('preserves per-file grouping across violations from multiple files', () => {
+        // This is the core bug the fix addresses: without filePath capture
+        // every violation was bucketed under '' and per-file grouping in the
+        // dashboard / SARIF output collapsed unrelated diagnostics together.
+        const out = [
+            '/proj/src/foo.cpp:1:1: warning: a [check-a]',
+            '/proj/src/bar.cpp:5:1: warning: b [check-b]',
+            '/proj/src/foo.cpp:9:1: error: c [check-c]',
+        ].join('\n');
+        const violations = parseClangTidyOutput(out, '', 0, [], '/proj');
+        expect(violations).toHaveLength(3);
+        expect(violations[0]?.filePath).toBe('src/foo.cpp');
+        expect(violations[1]?.filePath).toBe('src/bar.cpp');
+        expect(violations[2]?.filePath).toBe('src/foo.cpp');
+        // Verify that grouping by filePath produces two distinct buckets,
+        // not one empty-string bucket as the bug originally produced.
+        const filesTouched = new Set(violations.map((v) => v.filePath));
+        expect(filesTouched.size).toBe(2);
+    });
+});
+//# sourceMappingURL=clang-tidy.test.js.map

package/dist/__tests__/clang-tidy.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"clang-tidy.test.js","sourceRoot":"","sources":["../../src/__tests__/clang-tidy.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAE9C,OAAO,EAAE,oBAAoB,EAAE,MAAM,qCAAqC,CAAC;AAE3E,QAAQ,CAAC,sBAAsB,EAAE,GAAG,EAAE;IACpC,EAAE,CAAC,0CAA0C,EAAE,GAAG,EAAE;QAClD,MAAM,GAAG,GAAG,wEAAwE,CAAC;QACrF,MAAM,UAAU,GAAG,oBAAoB,CAAC,GAAG,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,mBAAmB,CAAC,EAAE,MAAM,CAAC,CAAC;QACnF,MAAM,CAAC,UAAU,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;QACnC,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QAChD,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACrC,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC,SAAS,CAAC,kBAAkB,CAAC,CAAC;IAC/D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,oEAAoE,EAAE,GAAG,EAAE;QAC5E,MAAM,GAAG,GAAG,wEAAwE,CAAC;QACrF,MAAM,UAAU,GAAG,oBAAoB,CAAC,GAAG,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,mBAAmB,CAAC,EAAE,MAAM,CAAC,CAAC;QACnF,MAAM,CAAC,UAAU,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;QACnC,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;IACvD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,iEAAiE,EAAE,GAAG,EAAE;QACzE,uEAAuE;QACvE,qEAAqE;QACrE,MAAM,GAAG,GAAG,mDAAmD,CAAC;QAChE,MAAM,UAAU,GAAG,oBAAoB,CAAC,GAAG,EAAE,EAAE,EAAE,CAAC,EAAE,EAAE,EAAE,cAAc,CAAC,CAAC;QACxE,MAAM,CAAC,UAAU,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;QACnC,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAC;IAC/D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,kCAAkC,EAAE,GAAG,EAAE;QAC1C,MAAM,GAAG,GAAG,wEAAwE,CAAC;QACrF,MAAM,UAAU,GAAG,oBAAoB,CAAC,GAAG,EAAE,EAAE,EAAE,CAAC,EAAE,EAAE,EAAE,MAAM,CAAC,CAAC;QAChE,MAAM,CAAC,UAAU,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;QACnC,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACzC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,mCAAmC,EAAE,GAAG,EAAE;QAC3C,MAAM,GAAG,GAAG,4DAA4D,CAAC;QACzE,MAAM,UAAU,GAAG,oBAAoB,CAAC,GAAG,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,UAAU,CAAC,EAAE,IAAI,CAAC,CAAC;QACxE,MAAM,CAAC,UAAU,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;QACnC,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAChD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,kEAAkE,EAAE,GAAG,EAAE;QAC1E,MAAM,GAAG,GAAG;YACV,qEAAqE;YACrE,iCAAiC;SAClC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACb,MAAM,UAAU,GAAG,oBAAoB,CAAC,GAAG,EAAE,EAAE,EAAE,CAAC,EAAE,EAAE,EAAE,IAAI,CAAC,CAAC;QAC9D,MAAM,CAAC,UAAU,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;IACrC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,yCAAyC,EAAE,GAAG,EAAE;QACjD,MAAM,GAAG,GAAG,qCAAqC,CAAC;QAClD,MAAM,UAAU,GAAG,oBAAoB,CAAC,GAAG,EAAE,EAAE,EAAE,CAAC,EAAE,EAAE,EAAE,IAAI,CAAC,CAAC;QAC9D,MAAM,CAAC,UAAU,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;QACnC,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;IACtD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,qCAAqC,EAAE,GAAG,EAAE;QAC7C,MAAM,CAAC,oBAAoB,CAAC,EAAE,EAAE,EAAE,EAAE,CAAC,EAAE,EAAE,EAAE,IAAI,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;IACpE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,8DAA8D,EAAE,GAAG,EAAE;QACtE,MAAM,GAAG,GAAG,wCAAwC,CAAC;QACrD,MAAM,CAAC,oBAAoB,CAAC,GAAG,EAAE,EAAE,EAAE,CAAC,EAAE,EAAE,EAAE,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IACjE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,mDAAmD,EAAE,GAAG,EAAE;QAC3D,MAAM,GAAG,GAAG;YACV,oCAAoC;YACpC,oCAAoC;YACpC,kCAAkC;SACnC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACb,MAAM,UAAU,GAAG,oBAAoB,CAAC,GAAG,EAAE,EAAE,EAAE,CAAC,EAAE,EAAE,EAAE,IAAI,CAAC,CAAC;QAC9D,MAAM,CAAC,UAAU,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;QACnC,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACpC,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACpC,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACtC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,mEAAmE,EAAE,GAAG,EAAE;QAC3E,mEAAmE;QACnE,qEAAqE;QACrE,qEAAqE;QACrE,MAAM,GAAG,GAAG;YACV,6CAA6C;YAC7C,6CAA6C;YAC7C,2CAA2C;SAC5C,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACb,MAAM,UAAU,GAAG,oBAAoB,CAAC,GAAG,EAAE,EAAE,EAAE,CAAC,EAAE,EAAE,EAAE,OAAO,CAAC,CAAC;QACjE,MAAM,CAAC,UAAU,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;QACnC,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;QACpD,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;QACpD,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;QACpD,kEAAkE;QAClE,8DAA8D;QAC9D,MAAM,YAAY,GAAG,IAAI,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC;QAChE,MAAM,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACpC,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/__tests__/fixture-coverage.allowlist.d.ts

@@ -0,0 +1,22 @@
+/**
+ * Per-check fixture-coverage allowlist for checks-cpp (testing gap P0).
+ *
+ * `ALLOWLIST` is currently empty: there are no shipped, fixture-exercisable
+ * checks missing clean+violation fixtures. A future entry would mean a check
+ * whose pass/fail fixture coverage is still owed.
+ *
+ * `COMMAND_EXEMPTIONS` are `analysisMode:'command'` checks that shell out to
+ * external tools and cannot be exercised by writing a fixture file; they are
+ * covered by the failure-mode / packed-smoke lanes instead (gap register).
+ *
+ * checks-cpp ships exactly one check today — `cpp-clang-tidy` — and it is a
+ * command-mode passthrough to `clang-tidy`. There is therefore no fixture-
+ * exercisable check in this pack: ALLOWLIST is already `[]`, and the sole
+ * shipped check lives in COMMAND_EXEMPTIONS.
+ */
+import type { CommandExemptions, CoverageAllowlist, FilenameOverrides } from '@opensip-cli/test-support';
+export declare const ALLOWLIST: CoverageAllowlist;
+export declare const COMMAND_EXEMPTIONS: CommandExemptions;
+export declare const FILENAME_OVERRIDES: FilenameOverrides;
+export declare const KNOWN_UNFIXTURABLE: CommandExemptions;
+//# sourceMappingURL=fixture-coverage.allowlist.d.ts.map

package/dist/__tests__/fixture-coverage.allowlist.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"fixture-coverage.allowlist.d.ts","sourceRoot":"","sources":["../../src/__tests__/fixture-coverage.allowlist.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH,OAAO,KAAK,EACV,iBAAiB,EACjB,iBAAiB,EACjB,iBAAiB,EAClB,MAAM,2BAA2B,CAAC;AAEnC,eAAO,MAAM,SAAS,EAAE,iBAAsB,CAAC;AAE/C,eAAO,MAAM,kBAAkB,EAAE,iBAGhC,CAAC;AAEF,eAAO,MAAM,kBAAkB,EAAE,iBAAsB,CAAC;AAExD,eAAO,MAAM,kBAAkB,EAAE,iBAAsB,CAAC"}

package/dist/__tests__/fixture-coverage.allowlist.js

@@ -0,0 +1,23 @@
+/**
+ * Per-check fixture-coverage allowlist for checks-cpp (testing gap P0).
+ *
+ * `ALLOWLIST` is currently empty: there are no shipped, fixture-exercisable
+ * checks missing clean+violation fixtures. A future entry would mean a check
+ * whose pass/fail fixture coverage is still owed.
+ *
+ * `COMMAND_EXEMPTIONS` are `analysisMode:'command'` checks that shell out to
+ * external tools and cannot be exercised by writing a fixture file; they are
+ * covered by the failure-mode / packed-smoke lanes instead (gap register).
+ *
+ * checks-cpp ships exactly one check today — `cpp-clang-tidy` — and it is a
+ * command-mode passthrough to `clang-tidy`. There is therefore no fixture-
+ * exercisable check in this pack: ALLOWLIST is already `[]`, and the sole
+ * shipped check lives in COMMAND_EXEMPTIONS.
+ */
+export const ALLOWLIST = [];
+export const COMMAND_EXEMPTIONS = {
+    'cpp-clang-tidy': "analysisMode:'command' — shells to clang-tidy; covered by failure-mode + packed-smoke lanes",
+};
+export const FILENAME_OVERRIDES = {};
+export const KNOWN_UNFIXTURABLE = {};
+//# sourceMappingURL=fixture-coverage.allowlist.js.map

package/dist/__tests__/fixture-coverage.allowlist.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"fixture-coverage.allowlist.js","sourceRoot":"","sources":["../../src/__tests__/fixture-coverage.allowlist.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAQH,MAAM,CAAC,MAAM,SAAS,GAAsB,EAAE,CAAC;AAE/C,MAAM,CAAC,MAAM,kBAAkB,GAAsB;IACnD,gBAAgB,EACd,6FAA6F;CAChG,CAAC;AAEF,MAAM,CAAC,MAAM,kBAAkB,GAAsB,EAAE,CAAC;AAExD,MAAM,CAAC,MAAM,kBAAkB,GAAsB,EAAE,CAAC"}

package/dist/__tests__/fixture-coverage.test.d.ts

@@ -0,0 +1,13 @@
+/**
+ * Per-check pass/fail fixture coverage for checks-cpp (testing gap P0).
+ *
+ * Every shipped, non-command, fixture-exercisable check must have a clean
+ * fixture (0 findings) and a violation fixture (>=1) under a co-located
+ * `__fixtures__/<slug>/` directory next to the check's source. The ALLOWLIST is
+ * empty, so the ratchet is live: a new uncovered check fails this test. Command
+ * checks live in COMMAND_EXEMPTIONS; structurally un-exercisable checks live in
+ * KNOWN_UNFIXTURABLE. The harness runs each check in-process via the engine's
+ * internal coverage helpers.
+ */
+export {};
+//# sourceMappingURL=fixture-coverage.test.d.ts.map

package/dist/__tests__/fixture-coverage.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"fixture-coverage.test.d.ts","sourceRoot":"","sources":["../../src/__tests__/fixture-coverage.test.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG"}

package/dist/__tests__/fixture-coverage.test.js

@@ -0,0 +1,57 @@
+/**
+ * Per-check pass/fail fixture coverage for checks-cpp (testing gap P0).
+ *
+ * Every shipped, non-command, fixture-exercisable check must have a clean
+ * fixture (0 findings) and a violation fixture (>=1) under a co-located
+ * `__fixtures__/<slug>/` directory next to the check's source. The ALLOWLIST is
+ * empty, so the ratchet is live: a new uncovered check fails this test. Command
+ * checks live in COMMAND_EXEMPTIONS; structurally un-exercisable checks live in
+ * KNOWN_UNFIXTURABLE. The harness runs each check in-process via the engine's
+ * internal coverage helpers.
+ */
+import { dirname, join } from 'node:path';
+import { fileURLToPath } from 'node:url';
+import { planCoverageCases, runCheckOnFixture, validateBookkeeping, } from '@opensip-cli/test-support';
+import { describe, expect, it } from 'vitest';
+import { checks } from '../index.js';
+import { ALLOWLIST, COMMAND_EXEMPTIONS, FILENAME_OVERRIDES, KNOWN_UNFIXTURABLE, } from './fixture-coverage.allowlist.js';
+const PACK_SRC = join(dirname(fileURLToPath(import.meta.url)), '..');
+const config = {
+    packName: 'checks-cpp',
+    checks,
+    allowlist: ALLOWLIST,
+    commandExemptions: COMMAND_EXEMPTIONS,
+    knownUnfixturable: KNOWN_UNFIXTURABLE,
+    filenameOverrides: FILENAME_OVERRIDES,
+};
+const cases = await planCoverageCases(config, PACK_SRC);
+describe('checks-cpp · fixture-coverage bookkeeping', () => {
+    it('config is self-consistent (allowlist empty, exemptions valid)', () => {
+        expect(validateBookkeeping(config)).toEqual([]);
+    });
+});
+describe('checks-cpp · fixture-coverage', () => {
+    if (cases.length === 0) {
+        // No fixturable checks (e.g. an all-command pack): assert every shipped
+        // check is accounted for by an exemption rather than silently uncovered.
+        it('every shipped check is exempted or allowlisted', () => {
+            const accounted = ALLOWLIST.length +
+                Object.keys(COMMAND_EXEMPTIONS).length +
+                Object.keys(KNOWN_UNFIXTURABLE).length;
+            expect(accounted).toBeGreaterThan(0);
+        });
+        return;
+    }
+    it.each(cases)('$label', async (testCase) => {
+        if (!testCase.fixture)
+            expect.fail(testCase.missingHint);
+        const run = await runCheckOnFixture(testCase.check, testCase.fixture);
+        if (testCase.variant === 'clean') {
+            expect(run.findings, `clean fixture for '${testCase.slug}' must produce 0 findings`).toHaveLength(0);
+        }
+        else {
+            expect(run.findings.length, `violation fixture for '${testCase.slug}' must produce >=1 finding`).toBeGreaterThanOrEqual(1);
+        }
+    });
+});
+//# sourceMappingURL=fixture-coverage.test.js.map

package/dist/__tests__/fixture-coverage.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"fixture-coverage.test.js","sourceRoot":"","sources":["../../src/__tests__/fixture-coverage.test.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAEzC,OAAO,EACL,iBAAiB,EACjB,iBAAiB,EACjB,mBAAmB,GAEpB,MAAM,2BAA2B,CAAC;AACnC,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAE9C,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AAErC,OAAO,EACL,SAAS,EACT,kBAAkB,EAClB,kBAAkB,EAClB,kBAAkB,GACnB,MAAM,iCAAiC,CAAC;AAEzC,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC;AAErE,MAAM,MAAM,GAAmB;IAC7B,QAAQ,EAAE,YAAY;IACtB,MAAM;IACN,SAAS,EAAE,SAAS;IACpB,iBAAiB,EAAE,kBAAkB;IACrC,iBAAiB,EAAE,kBAAkB;IACrC,iBAAiB,EAAE,kBAAkB;CACtC,CAAC;AAEF,MAAM,KAAK,GAAG,MAAM,iBAAiB,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;AAExD,QAAQ,CAAC,2CAA2C,EAAE,GAAG,EAAE;IACzD,EAAE,CAAC,+DAA+D,EAAE,GAAG,EAAE;QACvE,MAAM,CAAC,mBAAmB,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IAClD,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,+BAA+B,EAAE,GAAG,EAAE;IAC7C,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACvB,wEAAwE;QACxE,yEAAyE;QACzE,EAAE,CAAC,gDAAgD,EAAE,GAAG,EAAE;YACxD,MAAM,SAAS,GACb,SAAS,CAAC,MAAM;gBAChB,MAAM,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC,MAAM;gBACtC,MAAM,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC,MAAM,CAAC;YACzC,MAAM,CAAC,SAAS,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC;QACvC,CAAC,CAAC,CAAC;QACH,OAAO;IACT,CAAC;IACD,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,QAAQ,EAAE,KAAK,EAAE,QAAQ,EAAE,EAAE;QAC1C,IAAI,CAAC,QAAQ,CAAC,OAAO;YAAE,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;QACzD,MAAM,GAAG,GAAG,MAAM,iBAAiB,CAAC,QAAQ,CAAC,KAAK,EAAE,QAAQ,CAAC,OAAO,CAAC,CAAC;QACtE,IAAI,QAAQ,CAAC,OAAO,KAAK,OAAO,EAAE,CAAC;YACjC,MAAM,CACJ,GAAG,CAAC,QAAQ,EACZ,sBAAsB,QAAQ,CAAC,IAAI,2BAA2B,CAC/D,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;QACpB,CAAC;aAAM,CAAC;YACN,MAAM,CACJ,GAAG,CAAC,QAAQ,CAAC,MAAM,EACnB,0BAA0B,QAAQ,CAAC,IAAI,4BAA4B,CACpE,CAAC,sBAAsB,CAAC,CAAC,CAAC,CAAC;QAC9B,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/__tests__/run.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=run.test.d.ts.map

package/dist/__tests__/run.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"run.test.d.ts","sourceRoot":"","sources":["../../src/__tests__/run.test.ts"],"names":[],"mappings":""}

package/dist/__tests__/run.test.js

@@ -0,0 +1,55 @@
+/**
+ * @fileoverview Execute the check end-to-end so the closures inside the
+ * `defineCheck({...})` config (specifically `command.args`) are invoked.
+ *
+ * The pure parser is exercised by parse.test.ts and clang-tidy.test.ts.
+ * This file's purpose is execution coverage for the un-called closures
+ * declared inside the check definition.
+ */
+import { describe, expect, it } from 'vitest';
+import { clangTidyPassthrough } from '../checks/clang-tidy-passthrough.js';
+describe('clangTidyPassthrough.run() execution coverage', () => {
+    // The clang-tidy bin may be absent (returns ENOENT instantly,
+    // common on dev hosts), present and fast (a few seconds), or
+    // present and slow (cold-spawn + system-header scans against a
+    // missing TU). All three paths satisfy the test's contract: the
+    // run does not crash. If the test's 60 s vitest timeout fires
+    // during a slow path, the framework throws a clean
+    // CheckAbortedError — that's also success because it proves the
+    // check responded to the abort signal correctly.
+    //
+    // The check itself caps at 30 s via
+    // `clangTidyPassthrough.config.timeout` so a runaway invocation
+    // can't hang indefinitely under any path.
+    it('runs end-to-end against a fake target file (clang-tidy not required)', async () => {
+        // No fixture content needed — when clang-tidy is missing, the executor
+        // returns an error result after invoking config.command.args(files).
+        // When clang-tidy is present, it parses output via parseClangTidyOutput.
+        // Either path exercises the args() closure.
+        try {
+            const result = await clangTidyPassthrough.run(process.cwd(), {
+                targetFiles: ['/nonexistent/fixture.cpp'],
+            });
+            expect(result).toBeDefined();
+            expect(Array.isArray(result.signals)).toBe(true);
+            expect(typeof result.errors).toBe('number');
+            expect(typeof result.warnings).toBe('number');
+        }
+        catch (error) {
+            const isCleanAbort = error !== null &&
+                typeof error === 'object' &&
+                'name' in error &&
+                error.name === 'CheckAbortedError';
+            if (!isCleanAbort)
+                throw error;
+            expect(isCleanAbort).toBe(true);
+        }
+    }, 60_000);
+    it('exposes a stable check config (id/slug/tags/analysisMode)', () => {
+        expect(clangTidyPassthrough.config.slug).toBe('cpp-clang-tidy');
+        expect(clangTidyPassthrough.config.analysisMode).toBe('command');
+        expect(clangTidyPassthrough.config.tags).toContain('cpp');
+        expect(clangTidyPassthrough.config.scansFiles).toBe(false);
+    });
+});
+//# sourceMappingURL=run.test.js.map

package/dist/__tests__/run.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"run.test.js","sourceRoot":"","sources":["../../src/__tests__/run.test.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AACH,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAE9C,OAAO,EAAE,oBAAoB,EAAE,MAAM,qCAAqC,CAAC;AAE3E,QAAQ,CAAC,+CAA+C,EAAE,GAAG,EAAE;IAC7D,8DAA8D;IAC9D,6DAA6D;IAC7D,+DAA+D;IAC/D,gEAAgE;IAChE,8DAA8D;IAC9D,mDAAmD;IACnD,gEAAgE;IAChE,iDAAiD;IACjD,EAAE;IACF,oCAAoC;IACpC,gEAAgE;IAChE,0CAA0C;IAC1C,EAAE,CAAC,sEAAsE,EAAE,KAAK,IAAI,EAAE;QACpF,uEAAuE;QACvE,qEAAqE;QACrE,yEAAyE;QACzE,4CAA4C;QAC5C,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,oBAAoB,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE;gBAC3D,WAAW,EAAE,CAAC,0BAA0B,CAAC;aAC1C,CAAC,CAAC;YAEH,MAAM,CAAC,MAAM,CAAC,CAAC,WAAW,EAAE,CAAC;YAC7B,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACjD,MAAM,CAAC,OAAO,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;YAC5C,MAAM,CAAC,OAAO,MAAM,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAChD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,YAAY,GAChB,KAAK,KAAK,IAAI;gBACd,OAAO,KAAK,KAAK,QAAQ;gBACzB,MAAM,IAAI,KAAK;gBACd,KAA4B,CAAC,IAAI,KAAK,mBAAmB,CAAC;YAC7D,IAAI,CAAC,YAAY;gBAAE,MAAM,KAAK,CAAC;YAC/B,MAAM,CAAC,YAAY,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAClC,CAAC;IACH,CAAC,EAAE,MAAM,CAAC,CAAC;IAEX,EAAE,CAAC,2DAA2D,EAAE,GAAG,EAAE;QACnE,MAAM,CAAC,oBAAoB,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;QAChE,MAAM,CAAC,oBAAoB,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QACjE,MAAM,CAAC,oBAAoB,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;QAC1D,MAAM,CAAC,oBAAoB,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC7D,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/checks/clang-tidy-passthrough.d.ts

@@ -0,0 +1,12 @@
+import { type CheckViolation } from '@opensip-cli/fitness';
+/**
+ * Pure parser for clang-tidy stdout. Accepts the diagnostic format:
+ *   path/to/file.cpp:LINE:COL: warning: <message> [check-name]
+ * Returns one CheckViolation per warning/error line. `note:` lines
+ * are dropped today; revisit when adopting `clang-tidy --export-fixes`,
+ * where notes are first-class children of diagnostics rather than
+ * standalone lines that need re-attachment.
+ */
+export declare function parseClangTidyOutput(stdout: string, _stderr: string, _exitCode: number, _files: readonly string[], cwd: string): CheckViolation[];
+export declare const clangTidyPassthrough: import("@opensip-cli/fitness").Check;
+//# sourceMappingURL=clang-tidy-passthrough.d.ts.map

package/dist/checks/clang-tidy-passthrough.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"clang-tidy-passthrough.d.ts","sourceRoot":"","sources":["../../src/checks/clang-tidy-passthrough.ts"],"names":[],"mappings":"AAUA,OAAO,EAAe,KAAK,cAAc,EAAE,MAAM,sBAAsB,CAAC;AA8BxE;;;;;;;GAOG;AACH,wBAAgB,oBAAoB,CAClC,MAAM,EAAE,MAAM,EACd,OAAO,EAAE,MAAM,EACf,SAAS,EAAE,MAAM,EACjB,MAAM,EAAE,SAAS,MAAM,EAAE,EACzB,GAAG,EAAE,MAAM,GACV,cAAc,EAAE,CAgClB;AAED,eAAO,MAAM,oBAAoB,sCAoB/B,CAAC"}

package/dist/checks/clang-tidy-passthrough.js

@@ -0,0 +1,101 @@
+/**
+ * @fileoverview clang-tidy passthrough check.
+ *
+ * Runs `clang-tidy` against the matched files and surfaces its
+ * diagnostics as opensip-cli violations. The user's `.clang-tidy`
+ * config (if present) controls which lints fire — we don't override
+ * it. Use `--checks=...` in the args if you want a fixed lint set.
+ */
+import * as path from 'node:path';
+import { defineCheck } from '@opensip-cli/fitness';
+const CLANG_TIDY_LINE = 
+// eslint-disable-next-line sonarjs/slow-regex -- input is one bounded line of clang-tidy output; no real ReDoS exposure
+/^(.+?):(\d+):(\d+):\s+(warning|error|note):\s+(.+?)(?:\s+\[([\w\-,.]+)\])?$/;
+/**
+ * Resolve a captured clang-tidy file path against `cwd` and convert it
+ * to project-relative form when the resolved path falls inside `cwd`.
+ * Paths outside `cwd` (e.g. system headers under `/usr/include`) are
+ * left absolute so they remain unambiguous.
+ *
+ * Note on empty `cwd`: when called with `cwd === ''`, `path.resolve`
+ * falls back to `process.cwd()`. The production `command`-mode caller
+ * (`executeCommandMode` in `@opensip-cli/fitness`) always passes a
+ * non-empty cwd, so the production contract is well-defined; the
+ * pass-through is tolerated only as a convenience for tests and is
+ * not part of the public surface.
+ */
+function resolveFilePath(capturedPath, cwd) {
+    const absolute = path.resolve(cwd, capturedPath);
+    const relative = path.relative(cwd, absolute);
+    // `path.relative` returns a `..`-prefixed path (or absolute on Windows
+    // when drives differ) when the resolved path is outside `cwd`.
+    if (relative === '' || relative.startsWith('..') || path.isAbsolute(relative)) {
+        return absolute;
+    }
+    return relative;
+}
+/**
+ * Pure parser for clang-tidy stdout. Accepts the diagnostic format:
+ *   path/to/file.cpp:LINE:COL: warning: <message> [check-name]
+ * Returns one CheckViolation per warning/error line. `note:` lines
+ * are dropped today; revisit when adopting `clang-tidy --export-fixes`,
+ * where notes are first-class children of diagnostics rather than
+ * standalone lines that need re-attachment.
+ */
+export function parseClangTidyOutput(stdout, _stderr, _exitCode, _files, cwd) {
+    const violations = [];
+    const lines = stdout.split('\n');
+    for (const line of lines) {
+        const match = CLANG_TIDY_LINE.exec(line);
+        if (!match)
+            continue;
+        const filePath = match[1];
+        const lineStr = match[2];
+        const colStr = match[3];
+        const severity = match[4];
+        const message = match[5];
+        const lintName = match[6];
+        if (severity === 'note')
+            continue;
+        // The regex guarantees groups 1 (filePath), 2 (lineStr), 3 (colStr), 4
+        // (severity) and 5 (message) are non-empty captures when it matches; the
+        // `?` / `??` fallbacks below exist for type-narrowing of `match[n]` (which
+        // is typed `string | undefined`) and are not reachable at runtime. Only
+        // group 6 (lintName) is optional in the pattern and is exercised by tests.
+        violations.push({
+            /* v8 ignore next */
+            message: lintName ? `[${lintName}] ${message}` : (message ?? 'clang-tidy diagnostic'),
+            severity: severity === 'error' ? 'error' : 'warning',
+            /* v8 ignore next */
+            line: lineStr ? Number.parseInt(lineStr, 10) : 1,
+            /* v8 ignore next */
+            column: colStr ? Number.parseInt(colStr, 10) : undefined,
+            /* v8 ignore next */
+            filePath: filePath ? resolveFilePath(filePath, cwd) : undefined,
+            suggestion: 'See clang-tidy docs for the named lint',
+        });
+    }
+    return violations;
+}
+export const clangTidyPassthrough = defineCheck({
+    id: 'e9769a00-b576-44a6-b73a-b340c597bc86',
+    slug: 'cpp-clang-tidy',
+    description: 'Run clang-tidy and surface its diagnostics as opensip-cli violations',
+    scope: { languages: ['cpp'], concerns: [] },
+    tags: ['quality', 'cpp'],
+    // Cap the per-invocation runtime so a slow clang-tidy (or one hung
+    // on an unusual TU) can't block the run indefinitely. Most healthy
+    // clang-tidy invocations finish within a few seconds; anything
+    // taking longer is more useful aborted than awaited.
+    timeout: 30_000,
+    command: {
+        bin: 'clang-tidy',
+        args: (files) => [...files, '--quiet'],
+        parseOutput: parseClangTidyOutput,
+        // clang-tidy returns 1 when warnings are emitted with -warnings-as-errors,
+        // but with --quiet and default config, exit 0 means clean run.
+        // Diagnostics are present on stdout regardless.
+        expectedExitCodes: [0, 1],
+    },
+});
+//# sourceMappingURL=clang-tidy-passthrough.js.map

package/dist/checks/clang-tidy-passthrough.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"clang-tidy-passthrough.js","sourceRoot":"","sources":["../../src/checks/clang-tidy-passthrough.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AACH,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAElC,OAAO,EAAE,WAAW,EAAuB,MAAM,sBAAsB,CAAC;AAExE,MAAM,eAAe;AACnB,wHAAwH;AACxH,6EAA6E,CAAC;AAEhF;;;;;;;;;;;;GAYG;AACH,SAAS,eAAe,CAAC,YAAoB,EAAE,GAAW;IACxD,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,YAAY,CAAC,CAAC;IACjD,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;IAC9C,uEAAuE;IACvE,+DAA+D;IAC/D,IAAI,QAAQ,KAAK,EAAE,IAAI,QAAQ,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC9E,OAAO,QAAQ,CAAC;IAClB,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,oBAAoB,CAClC,MAAc,EACd,OAAe,EACf,SAAiB,EACjB,MAAyB,EACzB,GAAW;IAEX,MAAM,UAAU,GAAqB,EAAE,CAAC;IACxC,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACjC,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,KAAK,GAAG,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACzC,IAAI,CAAC,KAAK;YAAE,SAAS;QACrB,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;QAC1B,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;QACzB,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;QACxB,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;QAC1B,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;QACzB,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;QAC1B,IAAI,QAAQ,KAAK,MAAM;YAAE,SAAS;QAClC,uEAAuE;QACvE,yEAAyE;QACzE,2EAA2E;QAC3E,wEAAwE;QACxE,2EAA2E;QAC3E,UAAU,CAAC,IAAI,CAAC;YACd,oBAAoB;YACpB,OAAO,EAAE,QAAQ,CAAC,CAAC,CAAC,IAAI,QAAQ,KAAK,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC,OAAO,IAAI,uBAAuB,CAAC;YACrF,QAAQ,EAAE,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS;YACpD,oBAAoB;YACpB,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;YAChD,oBAAoB;YACpB,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS;YACxD,oBAAoB;YACpB,QAAQ,EAAE,QAAQ,CAAC,CAAC,CAAC,eAAe,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS;YAC/D,UAAU,EAAE,wCAAwC;SACrD,CAAC,CAAC;IACL,CAAC;IACD,OAAO,UAAU,CAAC;AACpB,CAAC;AAED,MAAM,CAAC,MAAM,oBAAoB,GAAG,WAAW,CAAC;IAC9C,EAAE,EAAE,sCAAsC;IAC1C,IAAI,EAAE,gBAAgB;IACtB,WAAW,EAAE,sEAAsE;IACnF,KAAK,EAAE,EAAE,SAAS,EAAE,CAAC,KAAK,CAAC,EAAE,QAAQ,EAAE,EAAE,EAAE;IAC3C,IAAI,EAAE,CAAC,SAAS,EAAE,KAAK,CAAC;IACxB,mEAAmE;IACnE,mEAAmE;IACnE,+DAA+D;IAC/D,qDAAqD;IACrD,OAAO,EAAE,MAAM;IACf,OAAO,EAAE;QACP,GAAG,EAAE,YAAY;QACjB,IAAI,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,GAAG,KAAK,EAAE,SAAS,CAAC;QACtC,WAAW,EAAE,oBAAoB;QACjC,2EAA2E;QAC3E,+DAA+D;QAC/D,gDAAgD;QAChD,iBAAiB,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC;KAC1B;CACF,CAAC,CAAC"}

package/dist/display/index.d.ts

@@ -0,0 +1,9 @@
+/**
+ * Display metadata for C/C++ fitness checks.
+ *
+ * Maps each check slug to its [icon, displayName] tuple for CLI/report
+ * rendering. Keys must match the `slug` of the corresponding check.
+ */
+import type { CheckDisplayEntry } from '@opensip-cli/fitness';
+export declare const checkDisplay: Readonly<Record<string, CheckDisplayEntry>>;
+//# sourceMappingURL=index.d.ts.map

package/dist/display/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/display/index.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,sBAAsB,CAAC;AAE9D,eAAO,MAAM,YAAY,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,iBAAiB,CAAC,CAEpE,CAAC"}

package/dist/display/index.js

@@ -0,0 +1,4 @@
+export const checkDisplay = {
+    'clang-tidy-passthrough': ['🧹', 'Clang-Tidy Passthrough'],
+};
+//# sourceMappingURL=index.js.map

package/dist/display/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/display/index.ts"],"names":[],"mappings":"AAQA,MAAM,CAAC,MAAM,YAAY,GAAgD;IACvE,wBAAwB,EAAE,CAAC,IAAI,EAAE,wBAAwB,CAAC;CAC3D,CAAC"}

package/dist/index.d.ts

@@ -0,0 +1,2 @@
+export declare const checks: import("@opensip-cli/fitness").Check[];
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAOA,eAAO,MAAM,MAAM,wCAA0D,CAAC"}

package/dist/index.js

@@ -0,0 +1,7 @@
+import { applyCheckDisplay } from '@opensip-cli/fitness';
+import { clangTidyPassthrough } from './checks/clang-tidy-passthrough.js';
+import { checkDisplay } from './display/index.js';
+// Display (icon + name) is folded ONTO each check from this pack's `checkDisplay`
+// authoring map (§5.3) — display travels on `check.config`, no separate export.
+export const checks = applyCheckDisplay([clangTidyPassthrough], checkDisplay);
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAE,MAAM,sBAAsB,CAAC;AAEzD,OAAO,EAAE,oBAAoB,EAAE,MAAM,oCAAoC,CAAC;AAC1E,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAElD,kFAAkF;AAClF,gFAAgF;AAChF,MAAM,CAAC,MAAM,MAAM,GAAG,iBAAiB,CAAC,CAAC,oBAAoB,CAAC,EAAE,YAAY,CAAC,CAAC"}

package/package.json

@@ -0,0 +1,53 @@
+{
+  "name": "@opensip-cli/checks-cpp",
+  "version": "0.1.0",
+  "license": "Apache-2.0",
+  "description": "C/C++ fitness checks (clang-tidy backed)",
+  "keywords": [
+    "opensip-cli",
+    "static-analysis",
+    "code-quality",
+    "fitness-checks",
+    "linting",
+    "cpp",
+    "c++"
+  ],
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/opensip-ai/opensip-cli.git",
+    "directory": "packages/fitness/checks-cpp"
+  },
+  "homepage": "https://github.com/opensip-ai/opensip-cli",
+  "bugs": {
+    "url": "https://github.com/opensip-ai/opensip-cli/issues"
+  },
+  "type": "module",
+  "opensipTools": {
+    "kind": "fit-pack"
+  },
+  "main": "./dist/index.js",
+  "types": "./dist/index.d.ts",
+  "exports": {
+    ".": "./dist/index.js"
+  },
+  "files": [
+    "dist",
+    "LICENSE",
+    "NOTICE"
+  ],
+  "dependencies": {
+    "@opensip-cli/core": "0.1.0",
+    "@opensip-cli/fitness": "0.1.0"
+  },
+  "devDependencies": {
+    "@types/node": "^24.13.2",
+    "vitest": "^4.1.8",
+    "@opensip-cli/test-support": "0.1.0"
+  },
+  "scripts": {
+    "build": "tsc",
+    "test": "vitest run --passWithNoTests",
+    "typecheck": "tsc --noEmit",
+    "clean": "rm -rf dist"
+  }
+}