@opensip-cli/fitness 0.1.0

package/dist/recipes/built-in-recipes.js

@@ -0,0 +1,241 @@
+/**
+ * @fileoverview Built-in fitness recipe definitions
+ *
+ * Defines the standard set of recipes (default, quick-smoke, backend, etc.)
+ * that ship with the fitness framework.
+ */
+import { DEFAULT_MAX_PARALLEL, defineRecipe } from './types.js';
+// =============================================================================
+// DEFAULT RECIPE
+// =============================================================================
+/** Default recipe: runs all enabled checks in parallel */
+const defaultRecipe = defineRecipe({
+    name: 'default',
+    displayName: 'Default',
+    description: 'Run all enabled checks in parallel',
+    checks: { type: 'all' },
+    execution: { mode: 'parallel', stopOnFirstFailure: false, timeout: 30_000 },
+    reporting: { format: 'table', verbose: false },
+    tags: ['comprehensive', 'default'],
+});
+// =============================================================================
+// QUICK SMOKE RECIPE
+// =============================================================================
+/** Quick smoke recipe: fast critical checks for rapid validation */
+const quickSmokeRecipe = defineRecipe({
+    name: 'quick-smoke',
+    displayName: 'Quick Smoke',
+    description: 'Fast critical checks for rapid validation',
+    checks: {
+        type: 'explicit',
+        checkIds: [
+            'no-console-log',
+            'no-any-types',
+            'null-safety',
+            'detached-promises',
+            'catch-clause-safety',
+            'error-handling-quality',
+            'no-hardcoded-secrets',
+            'no-eval',
+            'sql-injection',
+            'env-secret-exposure',
+            'input-sanitization',
+            'no-skipped-tests',
+        ],
+    },
+    execution: { mode: 'parallel', stopOnFirstFailure: false, timeout: 15_000 },
+    reporting: { format: 'table', verbose: false },
+    tags: ['fast', 'smoke', 'critical'],
+});
+// =============================================================================
+// BACKEND RECIPE
+// =============================================================================
+/** Backend recipe: architecture, resilience, and quality checks for server code */
+const backendRecipe = defineRecipe({
+    name: 'backend',
+    displayName: 'Backend',
+    description: 'Backend-focused checks (architecture, resilience, quality)',
+    checks: {
+        type: 'pattern',
+        include: [
+            'architecture/*',
+            'resilience/*',
+            'quality/*-backend',
+            'quality/fastify-*',
+            'quality/database-*',
+            'quality/pino-*',
+            'quality/logging-*',
+            'quality/correlation-*',
+            'quality/no-console-log',
+            'quality/result-pattern-*',
+            'quality/api-*',
+            'quality/null-safety',
+            'quality/no-any-types',
+            'quality/file-headers',
+            'quality/concurrency-safety',
+            'quality/error-swallowing-*',
+            'security/*',
+            'testing/*',
+        ],
+        exclude: ['quality/*-frontend', 'testing/*-frontend'],
+    },
+    execution: { mode: 'parallel', stopOnFirstFailure: false, timeout: 30_000 },
+    reporting: { format: 'table', verbose: false },
+    tags: ['backend', 'server', 'api'],
+});
+// =============================================================================
+// FRONTEND RECIPE
+// =============================================================================
+/** Frontend recipe: React and accessibility checks for UI code */
+const frontendRecipe = defineRecipe({
+    name: 'frontend',
+    displayName: 'Frontend',
+    description: 'Frontend-focused checks (React, accessibility)',
+    checks: {
+        type: 'pattern',
+        include: [
+            'quality/*-frontend',
+            'quality/navigation-*',
+            'quality/theme-*',
+            'quality/image-*',
+            'quality/async-state-*',
+            'quality/no-any-types',
+            'quality/null-safety',
+            'architecture/heavy-import-detection',
+            'testing/no-skipped-tests',
+            'testing/*-frontend',
+        ],
+        exclude: ['quality/*-backend', 'testing/*-backend'],
+    },
+    execution: { mode: 'parallel', stopOnFirstFailure: false, timeout: 30_000 },
+    reporting: { format: 'table', verbose: false },
+    tags: ['frontend', 'react', 'ui'],
+});
+// =============================================================================
+// SECURITY RECIPE
+// =============================================================================
+/** Security recipe: comprehensive security audit checks */
+const securityRecipe = defineRecipe({
+    name: 'security',
+    displayName: 'Security Audit',
+    description: 'Comprehensive security analysis',
+    checks: {
+        type: 'pattern',
+        include: [
+            'security/*',
+            'quality/pii-*',
+            'quality/dependency-security-*',
+            'quality/centralized-input-*',
+            'quality/security-*',
+            'quality/no-console-log',
+            'resilience/no-custom-cache',
+            'resilience/no-custom-rate-limiter',
+            'resilience/context-leakage',
+        ],
+    },
+    execution: { mode: 'sequential', stopOnFirstFailure: false, timeout: 60_000 },
+    reporting: { format: 'table', verbose: true },
+    tags: ['security', 'audit', 'comprehensive'],
+});
+// =============================================================================
+// PRE-COMMIT RECIPE
+// =============================================================================
+/** Pre-commit recipe: fast checks suitable for git pre-commit hooks */
+const preCommitRecipe = defineRecipe({
+    name: 'pre-commit',
+    displayName: 'Pre-Commit',
+    description: 'Fast checks for git pre-commit hooks',
+    checks: {
+        type: 'explicit',
+        checkIds: [
+            'no-console-log',
+            'no-any-types',
+            'no-hardcoded-secrets',
+            'detached-promises',
+            'no-skipped-tests',
+        ],
+    },
+    execution: { mode: 'parallel', stopOnFirstFailure: true, timeout: 10_000 },
+    reporting: { format: 'table', verbose: false },
+    tags: ['fast', 'hook', 'pre-commit'],
+});
+// =============================================================================
+// PRE-RELEASE RECIPE
+// =============================================================================
+/** Pre-release recipe: comprehensive checks run before a release */
+const preReleaseRecipe = defineRecipe({
+    name: 'pre-release',
+    displayName: 'Pre-Release',
+    description: 'Comprehensive checks before release',
+    checks: { type: 'all' },
+    execution: { mode: 'sequential', stopOnFirstFailure: false, timeout: 120_000 },
+    reporting: { format: 'unified', verbose: true },
+    tags: ['comprehensive', 'release', 'thorough'],
+});
+// =============================================================================
+// NIGHTLY FULL RECIPE
+// =============================================================================
+/** Nightly full recipe: complete check suite for scheduled nightly runs */
+const nightlyFullRecipe = defineRecipe({
+    name: 'nightly-full',
+    displayName: 'Nightly Full',
+    description: 'Complete suite for nightly scheduled runs',
+    checks: { type: 'all' },
+    execution: {
+        mode: 'parallel',
+        stopOnFirstFailure: false,
+        timeout: 300_000,
+        maxParallel: DEFAULT_MAX_PARALLEL,
+    },
+    reporting: { format: 'unified', verbose: true, outputPath: 'fitness-nightly-report.json' },
+    tags: ['nightly', 'comprehensive', 'scheduled'],
+});
+// =============================================================================
+// CI RECIPE
+// =============================================================================
+/** CI recipe: optimized for CI pipelines with JSON output */
+const ciRecipe = defineRecipe({
+    name: 'ci',
+    displayName: 'CI',
+    description: 'Optimized for CI pipelines with JSON output',
+    checks: { type: 'all', exclude: ['testing/flaky-*', 'performance/*'] },
+    execution: { mode: 'parallel', stopOnFirstFailure: false, timeout: 60_000 },
+    reporting: { format: 'json', verbose: false },
+    tags: ['ci', 'pipeline', 'automated'],
+});
+// =============================================================================
+// ARCHITECTURE RECIPE
+// =============================================================================
+/** Architecture recipe: architecture validation and compliance checks */
+const architectureRecipe = defineRecipe({
+    name: 'architecture',
+    displayName: 'Architecture Review',
+    description: 'Architecture validation and compliance',
+    checks: { type: 'tags', include: ['architecture'] },
+    execution: { mode: 'parallel', stopOnFirstFailure: false, timeout: 30_000 },
+    reporting: { format: 'table', verbose: true },
+    tags: ['architecture', 'structure'],
+});
+// =============================================================================
+// EXPORTS
+// =============================================================================
+/** All built-in fitness recipes */
+export const builtInRecipes = Object.freeze([
+    defaultRecipe,
+    quickSmokeRecipe,
+    backendRecipe,
+    frontendRecipe,
+    securityRecipe,
+    preCommitRecipe,
+    preReleaseRecipe,
+    nightlyFullRecipe,
+    ciRecipe,
+    architectureRecipe,
+]);
+/** Map of built-in recipe name to recipe definition */
+export const builtInRecipesByName = new Map(builtInRecipes.map((recipe) => [recipe.name, recipe]));
+/** Check whether a recipe name corresponds to a built-in recipe */
+export function isBuiltInRecipe(name) {
+    return builtInRecipesByName.has(name);
+}
+//# sourceMappingURL=built-in-recipes.js.map

package/dist/recipes/built-in-recipes.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"built-in-recipes.js","sourceRoot":"","sources":["../../src/recipes/built-in-recipes.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,oBAAoB,EAAE,YAAY,EAAsB,MAAM,YAAY,CAAC;AAEpF,gFAAgF;AAChF,iBAAiB;AACjB,gFAAgF;AAEhF,0DAA0D;AAC1D,MAAM,aAAa,GAAkB,YAAY,CAAC;IAChD,IAAI,EAAE,SAAS;IACf,WAAW,EAAE,SAAS;IACtB,WAAW,EAAE,oCAAoC;IACjD,MAAM,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE;IACvB,SAAS,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,kBAAkB,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE;IAC3E,SAAS,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE;IAC9C,IAAI,EAAE,CAAC,eAAe,EAAE,SAAS,CAAC;CACnC,CAAC,CAAC;AAEH,gFAAgF;AAChF,qBAAqB;AACrB,gFAAgF;AAEhF,oEAAoE;AACpE,MAAM,gBAAgB,GAAkB,YAAY,CAAC;IACnD,IAAI,EAAE,aAAa;IACnB,WAAW,EAAE,aAAa;IAC1B,WAAW,EAAE,2CAA2C;IACxD,MAAM,EAAE;QACN,IAAI,EAAE,UAAU;QAChB,QAAQ,EAAE;YACR,gBAAgB;YAChB,cAAc;YACd,aAAa;YACb,mBAAmB;YACnB,qBAAqB;YACrB,wBAAwB;YACxB,sBAAsB;YACtB,SAAS;YACT,eAAe;YACf,qBAAqB;YACrB,oBAAoB;YACpB,kBAAkB;SACnB;KACF;IACD,SAAS,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,kBAAkB,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE;IAC3E,SAAS,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE;IAC9C,IAAI,EAAE,CAAC,MAAM,EAAE,OAAO,EAAE,UAAU,CAAC;CACpC,CAAC,CAAC;AAEH,gFAAgF;AAChF,iBAAiB;AACjB,gFAAgF;AAEhF,mFAAmF;AACnF,MAAM,aAAa,GAAkB,YAAY,CAAC;IAChD,IAAI,EAAE,SAAS;IACf,WAAW,EAAE,SAAS;IACtB,WAAW,EAAE,4DAA4D;IACzE,MAAM,EAAE;QACN,IAAI,EAAE,SAAS;QACf,OAAO,EAAE;YACP,gBAAgB;YAChB,cAAc;YACd,mBAAmB;YACnB,mBAAmB;YACnB,oBAAoB;YACpB,gBAAgB;YAChB,mBAAmB;YACnB,uBAAuB;YACvB,wBAAwB;YACxB,0BAA0B;YAC1B,eAAe;YACf,qBAAqB;YACrB,sBAAsB;YACtB,sBAAsB;YACtB,4BAA4B;YAC5B,4BAA4B;YAC5B,YAAY;YACZ,WAAW;SACZ;QACD,OAAO,EAAE,CAAC,oBAAoB,EAAE,oBAAoB,CAAC;KACtD;IACD,SAAS,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,kBAAkB,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE;IAC3E,SAAS,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE;IAC9C,IAAI,EAAE,CAAC,SAAS,EAAE,QAAQ,EAAE,KAAK,CAAC;CACnC,CAAC,CAAC;AAEH,gFAAgF;AAChF,kBAAkB;AAClB,gFAAgF;AAEhF,kEAAkE;AAClE,MAAM,cAAc,GAAkB,YAAY,CAAC;IACjD,IAAI,EAAE,UAAU;IAChB,WAAW,EAAE,UAAU;IACvB,WAAW,EAAE,gDAAgD;IAC7D,MAAM,EAAE;QACN,IAAI,EAAE,SAAS;QACf,OAAO,EAAE;YACP,oBAAoB;YACpB,sBAAsB;YACtB,iBAAiB;YACjB,iBAAiB;YACjB,uBAAuB;YACvB,sBAAsB;YACtB,qBAAqB;YACrB,qCAAqC;YACrC,0BAA0B;YAC1B,oBAAoB;SACrB;QACD,OAAO,EAAE,CAAC,mBAAmB,EAAE,mBAAmB,CAAC;KACpD;IACD,SAAS,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,kBAAkB,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE;IAC3E,SAAS,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE;IAC9C,IAAI,EAAE,CAAC,UAAU,EAAE,OAAO,EAAE,IAAI,CAAC;CAClC,CAAC,CAAC;AAEH,gFAAgF;AAChF,kBAAkB;AAClB,gFAAgF;AAEhF,2DAA2D;AAC3D,MAAM,cAAc,GAAkB,YAAY,CAAC;IACjD,IAAI,EAAE,UAAU;IAChB,WAAW,EAAE,gBAAgB;IAC7B,WAAW,EAAE,iCAAiC;IAC9C,MAAM,EAAE;QACN,IAAI,EAAE,SAAS;QACf,OAAO,EAAE;YACP,YAAY;YACZ,eAAe;YACf,+BAA+B;YAC/B,6BAA6B;YAC7B,oBAAoB;YACpB,wBAAwB;YACxB,4BAA4B;YAC5B,mCAAmC;YACnC,4BAA4B;SAC7B;KACF;IACD,SAAS,EAAE,EAAE,IAAI,EAAE,YAAY,EAAE,kBAAkB,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE;IAC7E,SAAS,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE;IAC7C,IAAI,EAAE,CAAC,UAAU,EAAE,OAAO,EAAE,eAAe,CAAC;CAC7C,CAAC,CAAC;AAEH,gFAAgF;AAChF,oBAAoB;AACpB,gFAAgF;AAEhF,uEAAuE;AACvE,MAAM,eAAe,GAAkB,YAAY,CAAC;IAClD,IAAI,EAAE,YAAY;IAClB,WAAW,EAAE,YAAY;IACzB,WAAW,EAAE,sCAAsC;IACnD,MAAM,EAAE;QACN,IAAI,EAAE,UAAU;QAChB,QAAQ,EAAE;YACR,gBAAgB;YAChB,cAAc;YACd,sBAAsB;YACtB,mBAAmB;YACnB,kBAAkB;SACnB;KACF;IACD,SAAS,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,kBAAkB,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE;IAC1E,SAAS,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE;IAC9C,IAAI,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,YAAY,CAAC;CACrC,CAAC,CAAC;AAEH,gFAAgF;AAChF,qBAAqB;AACrB,gFAAgF;AAEhF,oEAAoE;AACpE,MAAM,gBAAgB,GAAkB,YAAY,CAAC;IACnD,IAAI,EAAE,aAAa;IACnB,WAAW,EAAE,aAAa;IAC1B,WAAW,EAAE,qCAAqC;IAClD,MAAM,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE;IACvB,SAAS,EAAE,EAAE,IAAI,EAAE,YAAY,EAAE,kBAAkB,EAAE,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE;IAC9E,SAAS,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE,IAAI,EAAE;IAC/C,IAAI,EAAE,CAAC,eAAe,EAAE,SAAS,EAAE,UAAU,CAAC;CAC/C,CAAC,CAAC;AAEH,gFAAgF;AAChF,sBAAsB;AACtB,gFAAgF;AAEhF,2EAA2E;AAC3E,MAAM,iBAAiB,GAAkB,YAAY,CAAC;IACpD,IAAI,EAAE,cAAc;IACpB,WAAW,EAAE,cAAc;IAC3B,WAAW,EAAE,2CAA2C;IACxD,MAAM,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE;IACvB,SAAS,EAAE;QACT,IAAI,EAAE,UAAU;QAChB,kBAAkB,EAAE,KAAK;QACzB,OAAO,EAAE,OAAO;QAChB,WAAW,EAAE,oBAAoB;KAClC;IACD,SAAS,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,6BAA6B,EAAE;IAC1F,IAAI,EAAE,CAAC,SAAS,EAAE,eAAe,EAAE,WAAW,CAAC;CAChD,CAAC,CAAC;AAEH,gFAAgF;AAChF,YAAY;AACZ,gFAAgF;AAEhF,6DAA6D;AAC7D,MAAM,QAAQ,GAAkB,YAAY,CAAC;IAC3C,IAAI,EAAE,IAAI;IACV,WAAW,EAAE,IAAI;IACjB,WAAW,EAAE,6CAA6C;IAC1D,MAAM,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,iBAAiB,EAAE,eAAe,CAAC,EAAE;IACtE,SAAS,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,kBAAkB,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE;IAC3E,SAAS,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE;IAC7C,IAAI,EAAE,CAAC,IAAI,EAAE,UAAU,EAAE,WAAW,CAAC;CACtC,CAAC,CAAC;AAEH,gFAAgF;AAChF,sBAAsB;AACtB,gFAAgF;AAEhF,yEAAyE;AACzE,MAAM,kBAAkB,GAAkB,YAAY,CAAC;IACrD,IAAI,EAAE,cAAc;IACpB,WAAW,EAAE,qBAAqB;IAClC,WAAW,EAAE,wCAAwC;IACrD,MAAM,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,cAAc,CAAC,EAAE;IACnD,SAAS,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,kBAAkB,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE;IAC3E,SAAS,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE;IAC7C,IAAI,EAAE,CAAC,cAAc,EAAE,WAAW,CAAC;CACpC,CAAC,CAAC;AAEH,gFAAgF;AAChF,UAAU;AACV,gFAAgF;AAEhF,mCAAmC;AACnC,MAAM,CAAC,MAAM,cAAc,GAA6B,MAAM,CAAC,MAAM,CAAC;IACpE,aAAa;IACb,gBAAgB;IAChB,aAAa;IACb,cAAc;IACd,cAAc;IACd,eAAe;IACf,gBAAgB;IAChB,iBAAiB;IACjB,QAAQ;IACR,kBAAkB;CACnB,CAAC,CAAC;AAEH,uDAAuD;AACvD,MAAM,CAAC,MAAM,oBAAoB,GAAuC,IAAI,GAAG,CAC7E,cAAc,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CACtD,CAAC;AAEF,mEAAmE;AACnE,MAAM,UAAU,eAAe,CAAC,IAAY;IAC1C,OAAO,oBAAoB,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;AACxC,CAAC"}

package/dist/recipes/check-config.d.ts

@@ -0,0 +1,56 @@
+/**
+ * @fileoverview Per-check recipe configuration plumbing.
+ *
+ * These accessors are now thin aliases of the generic core accessors
+ * (`getUnitConfig` / `setCurrentRecipeUnitConfig` /
+ * `clearCurrentRecipeUnitConfig` in `@opensip-cli/core`); the fitness
+ * names are preserved because checks import `getCheckConfig` from the
+ * `@opensip-cli/fitness` barrel and the recipe service calls
+ * `setCurrentRecipeCheckConfig` / `clearCurrentRecipeCheckConfig`.
+ *
+ * Recipes can carry a `checks.config` map keyed by check slug. The recipe
+ * service projects this map into the current `RunScope`'s
+ * `recipeUnitConfig` slot before any check runs and clears it once the
+ * run completes. Individual checks read their slice via
+ * `getCheckConfig<T>(slug)` and merge it with their built-in defaults.
+ *
+ * Scope-bound (not module-bound) lookup is load-bearing — the runtime
+ * frequently has TWO copies of `@opensip-cli/fitness` loaded:
+ *
+ *   1. The CLI's bundled copy (running the recipe service).
+ *   2. The plugin pack's resolved copy (running the check, calling
+ *      `getCheckConfig(slug)`).
+ *
+ * Each copy has its own module-scope state. The lookup routes through
+ * `currentScope()` from `@opensip-cli/core` (inside `getUnitConfig`) so
+ * the slot identity is bound to core — a single resolved copy in every
+ * npm graph — rather than to whichever fitness copy loaded first.
+ *
+ * Calling `getCheckConfig(...)` outside any `runWithScope` (e.g. unit
+ * tests that don't set up a scope) returns an empty object — the check's
+ * own defaults handle the empty case.
+ */
+import type { RecipeCheckConfigMap } from './types.js';
+import type { RunScope } from '@opensip-cli/core';
+/**
+ * Read the per-check config slice for the given slug. Alias of core
+ * `getUnitConfig`. Returns an empty object when no recipe-config has been
+ * set or no entry exists — treat as "augmentation only" and merge with
+ * the check's own defaults.
+ *
+ * @typeParam T - The shape the calling check expects.
+ */
+export declare function getCheckConfig<T extends Record<string, unknown>>(slug: string): T;
+/**
+ * Replace the current scope's recipe config. Called by the recipe service
+ * at the start of a recipe run, before any check executes. Alias of core
+ * `setCurrentRecipeUnitConfig`.
+ */
+export declare function setCurrentRecipeCheckConfig(scope: RunScope, config: RecipeCheckConfigMap | undefined): void;
+/**
+ * Clear the current scope's recipe config. Called by the recipe service
+ * at the end of a recipe run (success or failure). Alias of core
+ * `clearCurrentRecipeUnitConfig`.
+ */
+export declare function clearCurrentRecipeCheckConfig(scope: RunScope): void;
+//# sourceMappingURL=check-config.d.ts.map

package/dist/recipes/check-config.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"check-config.d.ts","sourceRoot":"","sources":["../../src/recipes/check-config.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AAQH,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,YAAY,CAAC;AACvD,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAC;AAElD;;;;;;;GAOG;AACH,wBAAgB,cAAc,CAAC,CAAC,SAAS,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,IAAI,EAAE,MAAM,GAAG,CAAC,CAEjF;AAED;;;;GAIG;AACH,wBAAgB,2BAA2B,CACzC,KAAK,EAAE,QAAQ,EACf,MAAM,EAAE,oBAAoB,GAAG,SAAS,GACvC,IAAI,CAEN;AAED;;;;GAIG;AACH,wBAAgB,6BAA6B,CAAC,KAAK,EAAE,QAAQ,GAAG,IAAI,CAEnE"}

package/dist/recipes/check-config.js

@@ -0,0 +1,61 @@
+/**
+ * @fileoverview Per-check recipe configuration plumbing.
+ *
+ * These accessors are now thin aliases of the generic core accessors
+ * (`getUnitConfig` / `setCurrentRecipeUnitConfig` /
+ * `clearCurrentRecipeUnitConfig` in `@opensip-cli/core`); the fitness
+ * names are preserved because checks import `getCheckConfig` from the
+ * `@opensip-cli/fitness` barrel and the recipe service calls
+ * `setCurrentRecipeCheckConfig` / `clearCurrentRecipeCheckConfig`.
+ *
+ * Recipes can carry a `checks.config` map keyed by check slug. The recipe
+ * service projects this map into the current `RunScope`'s
+ * `recipeUnitConfig` slot before any check runs and clears it once the
+ * run completes. Individual checks read their slice via
+ * `getCheckConfig<T>(slug)` and merge it with their built-in defaults.
+ *
+ * Scope-bound (not module-bound) lookup is load-bearing — the runtime
+ * frequently has TWO copies of `@opensip-cli/fitness` loaded:
+ *
+ *   1. The CLI's bundled copy (running the recipe service).
+ *   2. The plugin pack's resolved copy (running the check, calling
+ *      `getCheckConfig(slug)`).
+ *
+ * Each copy has its own module-scope state. The lookup routes through
+ * `currentScope()` from `@opensip-cli/core` (inside `getUnitConfig`) so
+ * the slot identity is bound to core — a single resolved copy in every
+ * npm graph — rather than to whichever fitness copy loaded first.
+ *
+ * Calling `getCheckConfig(...)` outside any `runWithScope` (e.g. unit
+ * tests that don't set up a scope) returns an empty object — the check's
+ * own defaults handle the empty case.
+ */
+import { getUnitConfig, setCurrentRecipeUnitConfig, clearCurrentRecipeUnitConfig, } from '@opensip-cli/core';
+/**
+ * Read the per-check config slice for the given slug. Alias of core
+ * `getUnitConfig`. Returns an empty object when no recipe-config has been
+ * set or no entry exists — treat as "augmentation only" and merge with
+ * the check's own defaults.
+ *
+ * @typeParam T - The shape the calling check expects.
+ */
+export function getCheckConfig(slug) {
+    return getUnitConfig(slug);
+}
+/**
+ * Replace the current scope's recipe config. Called by the recipe service
+ * at the start of a recipe run, before any check executes. Alias of core
+ * `setCurrentRecipeUnitConfig`.
+ */
+export function setCurrentRecipeCheckConfig(scope, config) {
+    setCurrentRecipeUnitConfig(scope, config);
+}
+/**
+ * Clear the current scope's recipe config. Called by the recipe service
+ * at the end of a recipe run (success or failure). Alias of core
+ * `clearCurrentRecipeUnitConfig`.
+ */
+export function clearCurrentRecipeCheckConfig(scope) {
+    clearCurrentRecipeUnitConfig(scope);
+}
+//# sourceMappingURL=check-config.js.map

package/dist/recipes/check-config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"check-config.js","sourceRoot":"","sources":["../../src/recipes/check-config.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AAEH,OAAO,EACL,aAAa,EACb,0BAA0B,EAC1B,4BAA4B,GAC7B,MAAM,mBAAmB,CAAC;AAK3B;;;;;;;GAOG;AACH,MAAM,UAAU,cAAc,CAAoC,IAAY;IAC5E,OAAO,aAAa,CAAI,IAAI,CAAC,CAAC;AAChC,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,2BAA2B,CACzC,KAAe,EACf,MAAwC;IAExC,0BAA0B,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;AAC5C,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,6BAA6B,CAAC,KAAe;IAC3D,4BAA4B,CAAC,KAAK,CAAC,CAAC;AACtC,CAAC"}

package/dist/recipes/check-resolution.d.ts

@@ -0,0 +1,36 @@
+/**
+ * @fileoverview Check resolution for fitness recipes.
+ *
+ * Resolves recipe check selectors (explicit / pattern / tags / all) into
+ * concrete check-key lists. The selection algorithm itself lives once in
+ * `@opensip-cli/core` (`resolveSelector`); this module wires fitness's
+ * registry, `minimatch`, and namespaced-slug reverse-lookup into it. The
+ * per-arm semantics are unchanged from the previous hand-rolled switch.
+ */
+import type { CheckSelector } from './types.js';
+import type { CheckRegistry } from '../framework/registry.js';
+/**
+ * Resolve a CheckSelector to a list of check keys from the registry.
+ *
+ * Delegates to core's generic `resolveSelector`, supplying fitness's
+ * registry-backed hooks:
+ * - the universe is `registry.listSlugs()` (each key becomes a Registerable item);
+ * - `keysOf` is `buildMatchTargets` (key + bare slug + tag/slug targets);
+ * - the `pattern` / `all` matcher is `minimatch` (kept a fitness dependency);
+ * - `resolveExplicit` is the bare-slug → namespaced-key reverse lookup
+ *   (mirrors the previous `resolveExplicitSelector`: exact key first, then
+ *   `getBySlug` + `endsWith(':'+id)`);
+ * - the `tags` arm routes through core's built-in tag-set intersection over
+ *   `check.config.tags` (`tagsOf` reads the registry), matching the previous
+ *   `resolveTagsSelector` exactly.
+ */
+export declare function resolveChecks(selector: CheckSelector, registry: CheckRegistry): readonly string[];
+/** Result of validating check references against the registry */
+interface CheckReferenceValidation {
+    valid: string[];
+    missing: string[];
+}
+/** Validate a list of check IDs against known IDs, returning valid and missing sets */
+export declare function validateCheckReferences(checkIds: readonly string[], allCheckIds: readonly string[]): CheckReferenceValidation;
+export {};
+//# sourceMappingURL=check-resolution.d.ts.map

package/dist/recipes/check-resolution.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"check-resolution.d.ts","sourceRoot":"","sources":["../../src/recipes/check-resolution.ts"],"names":[],"mappings":"AACA;;;;;;;;GAQG;AAKH,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAChD,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,0BAA0B,CAAC;AAwB9D;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,aAAa,CAAC,QAAQ,EAAE,aAAa,EAAE,QAAQ,EAAE,aAAa,GAAG,SAAS,MAAM,EAAE,CAqBjG;AAED,iEAAiE;AACjE,UAAU,wBAAwB;IAChC,KAAK,EAAE,MAAM,EAAE,CAAC;IAChB,OAAO,EAAE,MAAM,EAAE,CAAC;CACnB;AAED,uFAAuF;AACvF,wBAAgB,uBAAuB,CACrC,QAAQ,EAAE,SAAS,MAAM,EAAE,EAC3B,WAAW,EAAE,SAAS,MAAM,EAAE,GAC7B,wBAAwB,CAc1B"}

package/dist/recipes/check-resolution.js

@@ -0,0 +1,81 @@
+// @fitness-ignore-file batch-operation-limits -- iterates bounded collections (registry items / small analysis results)
+/**
+ * @fileoverview Check resolution for fitness recipes.
+ *
+ * Resolves recipe check selectors (explicit / pattern / tags / all) into
+ * concrete check-key lists. The selection algorithm itself lives once in
+ * `@opensip-cli/core` (`resolveSelector`); this module wires fitness's
+ * registry, `minimatch`, and namespaced-slug reverse-lookup into it. The
+ * per-arm semantics are unchanged from the previous hand-rolled switch.
+ */
+import { resolveSelector } from '@opensip-cli/core';
+import { minimatch } from 'minimatch';
+/**
+ * Build the glob match targets for a check key: the key itself, its bare
+ * slug (namespace stripped), and `tag/bareSlug` targets for each of the
+ * check's tags. This is fitness's `keysOf` accessor for the core resolver.
+ */
+function buildMatchTargets(slug, registry) {
+    const targets = [slug];
+    // Extract bare slug from namespaced key (e.g., 'builtin:no-eval' → 'no-eval')
+    const bareSlug = slug.includes(':') ? slug.split(':').pop() : slug;
+    if (bareSlug !== slug)
+        targets.push(bareSlug);
+    if (registry) {
+        const check = registry.getBySlug(slug);
+        if (check?.config.tags) {
+            for (const tag of check.config.tags) {
+                targets.push(`${tag}/${bareSlug}`);
+            }
+        }
+    }
+    return targets;
+}
+/**
+ * Resolve a CheckSelector to a list of check keys from the registry.
+ *
+ * Delegates to core's generic `resolveSelector`, supplying fitness's
+ * registry-backed hooks:
+ * - the universe is `registry.listSlugs()` (each key becomes a Registerable item);
+ * - `keysOf` is `buildMatchTargets` (key + bare slug + tag/slug targets);
+ * - the `pattern` / `all` matcher is `minimatch` (kept a fitness dependency);
+ * - `resolveExplicit` is the bare-slug → namespaced-key reverse lookup
+ *   (mirrors the previous `resolveExplicitSelector`: exact key first, then
+ *   `getBySlug` + `endsWith(':'+id)`);
+ * - the `tags` arm routes through core's built-in tag-set intersection over
+ *   `check.config.tags` (`tagsOf` reads the registry), matching the previous
+ *   `resolveTagsSelector` exactly.
+ */
+export function resolveChecks(selector, registry) {
+    const items = registry.listSlugs().map((key) => ({ id: key, name: key }));
+    const opts = {
+        keysOf: (item) => buildMatchTargets(item.id, registry),
+        tagsOf: (item) => registry.getBySlug(item.id)?.config.tags ?? [],
+        match: (target, pattern) => minimatch(target, pattern, { nocase: false }),
+        // Bare slug → namespaced-key reverse lookup; otherwise no resolution.
+        resolveExplicit: (id) => !id.includes(':') && registry.getBySlug(id)
+            ? (registry.listSlugs().find((s) => s.endsWith(`:${id}`)) ?? id)
+            : undefined,
+    };
+    // The core resolver reads the `explicit` arm's request list from `ids`;
+    // fitness's historical field is `checkIds`. Normalize at the boundary so
+    // recipe literals (`{ type: 'explicit', checkIds: [...] }`) stay valid.
+    const normalized = selector.type === 'explicit' ? { ...selector, ids: selector.checkIds } : selector;
+    return resolveSelector(normalized, items, opts).map((item) => item.id);
+}
+/** Validate a list of check IDs against known IDs, returning valid and missing sets */
+export function validateCheckReferences(checkIds, allCheckIds) {
+    const existingSet = new Set(allCheckIds);
+    const valid = [];
+    const missing = [];
+    for (const id of checkIds) {
+        if (existingSet.has(id)) {
+            valid.push(id);
+        }
+        else {
+            missing.push(id);
+        }
+    }
+    return { valid, missing };
+}
+//# sourceMappingURL=check-resolution.js.map

package/dist/recipes/check-resolution.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"check-resolution.js","sourceRoot":"","sources":["../../src/recipes/check-resolution.ts"],"names":[],"mappings":"AAAA,wHAAwH;AACxH;;;;;;;;GAQG;AAEH,OAAO,EAAE,eAAe,EAA+B,MAAM,mBAAmB,CAAC;AACjF,OAAO,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AAKtC;;;;GAIG;AACH,SAAS,iBAAiB,CAAC,IAAY,EAAE,QAAwB;IAC/D,MAAM,OAAO,GAAG,CAAC,IAAI,CAAC,CAAC;IACvB,8EAA8E;IAC9E,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,EAAG,CAAC,CAAC,CAAC,IAAI,CAAC;IACpE,IAAI,QAAQ,KAAK,IAAI;QAAE,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IAE9C,IAAI,QAAQ,EAAE,CAAC;QACb,MAAM,KAAK,GAAG,QAAQ,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;QACvC,IAAI,KAAK,EAAE,MAAM,CAAC,IAAI,EAAE,CAAC;YACvB,KAAK,MAAM,GAAG,IAAI,KAAK,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;gBACpC,OAAO,CAAC,IAAI,CAAC,GAAG,GAAG,IAAI,QAAQ,EAAE,CAAC,CAAC;YACrC,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;;;;;;;;;;;;;;GAcG;AACH,MAAM,UAAU,aAAa,CAAC,QAAuB,EAAE,QAAuB;IAC5E,MAAM,KAAK,GAAG,QAAQ,CAAC,SAAS,EAAE,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC;IAE1E,MAAM,IAAI,GAAkE;QAC1E,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,iBAAiB,CAAC,IAAI,CAAC,EAAE,EAAE,QAAQ,CAAC;QACtD,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,MAAM,CAAC,IAAI,IAAI,EAAE;QAChE,KAAK,EAAE,CAAC,MAAM,EAAE,OAAO,EAAE,EAAE,CAAC,SAAS,CAAC,MAAM,EAAE,OAAO,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC;QACzE,sEAAsE;QACtE,eAAe,EAAE,CAAC,EAAE,EAAE,EAAE,CACtB,CAAC,EAAE,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC;YACzC,CAAC,CAAC,CAAC,QAAQ,CAAC,SAAS,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;YAChE,CAAC,CAAC,SAAS;KAChB,CAAC;IAEF,wEAAwE;IACxE,yEAAyE;IACzE,wEAAwE;IACxE,MAAM,UAAU,GACd,QAAQ,CAAC,IAAI,KAAK,UAAU,CAAC,CAAC,CAAC,EAAE,GAAG,QAAQ,EAAE,GAAG,EAAE,QAAQ,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC;IAEpF,OAAO,eAAe,CAAC,UAA2B,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;AAC1F,CAAC;AAQD,uFAAuF;AACvF,MAAM,UAAU,uBAAuB,CACrC,QAA2B,EAC3B,WAA8B;IAE9B,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,WAAW,CAAC,CAAC;IACzC,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,MAAM,OAAO,GAAa,EAAE,CAAC;IAE7B,KAAK,MAAM,EAAE,IAAI,QAAQ,EAAE,CAAC;QAC1B,IAAI,WAAW,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC;YACxB,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACjB,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACnB,CAAC;IACH,CAAC;IAED,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC;AAC5B,CAAC"}

package/dist/recipes/check-result-processor.d.ts

@@ -0,0 +1,51 @@
+/**
+ * @fileoverview Check result processor for fitness recipe execution
+ *
+ * Processes individual check results (success or error), updates session state,
+ * builds check summaries, and determines whether execution should stop.
+ */
+import { type CheckMemoryProfile } from '../framework/memory-profiler.js';
+import type { FitnessRecipeServiceCallbacks, FitnessRecipeSession } from './service-types.js';
+import type { FitnessRecipe, RecipeCheckResult } from './types.js';
+import type { CheckResult } from '../types/findings.js';
+/** Input data for processing a successful check result */
+export interface ProcessSuccessInput {
+    checkId: string;
+    checkSlug: string;
+    tags: readonly string[];
+    checkIndex: number;
+    totalChecks: number;
+    result: CheckResult;
+    durationMs: number;
+    memoryBeforeMB: number;
+}
+/** Input data for processing a failed or timed-out check result */
+export interface ProcessErrorInput {
+    checkId: string;
+    checkSlug: string;
+    checkIndex: number;
+    totalChecks: number;
+    error: unknown;
+    durationMs: number;
+    memoryBeforeMB: number;
+    timedOut: boolean;
+    timeoutMs?: number;
+}
+/** Context required by the result processor (session, callbacks, recipe) */
+export interface ProcessorContext {
+    session: FitnessRecipeSession;
+    callbacks: FitnessRecipeServiceCallbacks;
+    recipe: FitnessRecipe;
+    includeViolations: boolean;
+}
+/** Output from processing a check result, including whether execution should stop */
+export interface ProcessResultOutput {
+    checkResult: RecipeCheckResult;
+    memoryProfile: CheckMemoryProfile;
+    shouldStop: boolean;
+}
+/** Process a successful check result: update session, invoke callbacks, and determine stop condition */
+export declare function processSuccessResult(ctx: ProcessorContext, input: ProcessSuccessInput): ProcessResultOutput;
+/** Process a failed check result: update session, invoke callbacks, and determine stop condition */
+export declare function processErrorResult(ctx: ProcessorContext, input: ProcessErrorInput): ProcessResultOutput;
+//# sourceMappingURL=check-result-processor.d.ts.map

package/dist/recipes/check-result-processor.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"check-result-processor.d.ts","sourceRoot":"","sources":["../../src/recipes/check-result-processor.ts"],"names":[],"mappings":"AACA;;;;;GAKG;AAIH,OAAO,EAAkB,KAAK,kBAAkB,EAAE,MAAM,iCAAiC,CAAC;AAG1F,OAAO,KAAK,EAEV,6BAA6B,EAC7B,oBAAoB,EACrB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,KAAK,EAAE,aAAa,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAC;AACnE,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,sBAAsB,CAAC;AAMxD,0DAA0D;AAC1D,MAAM,WAAW,mBAAmB;IAClC,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;IAClB,IAAI,EAAE,SAAS,MAAM,EAAE,CAAC;IACxB,UAAU,EAAE,MAAM,CAAC;IACnB,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,EAAE,WAAW,CAAC;IACpB,UAAU,EAAE,MAAM,CAAC;IACnB,cAAc,EAAE,MAAM,CAAC;CACxB;AAED,mEAAmE;AACnE,MAAM,WAAW,iBAAiB;IAChC,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;IACnB,WAAW,EAAE,MAAM,CAAC;IACpB,KAAK,EAAE,OAAO,CAAC;IACf,UAAU,EAAE,MAAM,CAAC;IACnB,cAAc,EAAE,MAAM,CAAC;IACvB,QAAQ,EAAE,OAAO,CAAC;IAClB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,4EAA4E;AAC5E,MAAM,WAAW,gBAAgB;IAC/B,OAAO,EAAE,oBAAoB,CAAC;IAC9B,SAAS,EAAE,6BAA6B,CAAC;IACzC,MAAM,EAAE,aAAa,CAAC;IACtB,iBAAiB,EAAE,OAAO,CAAC;CAC5B;AAED,qFAAqF;AACrF,MAAM,WAAW,mBAAmB;IAClC,WAAW,EAAE,iBAAiB,CAAC;IAC/B,aAAa,EAAE,kBAAkB,CAAC;IAClC,UAAU,EAAE,OAAO,CAAC;CACrB;AAoGD,wGAAwG;AACxG,wBAAgB,oBAAoB,CAClC,GAAG,EAAE,gBAAgB,EACrB,KAAK,EAAE,mBAAmB,GACzB,mBAAmB,CAiGrB;AAED,oGAAoG;AACpG,wBAAgB,kBAAkB,CAChC,GAAG,EAAE,gBAAgB,EACrB,KAAK,EAAE,iBAAiB,GACvB,mBAAmB,CA2DrB"}