@opensip-tools/fitness 1.0.4

package/dist/framework/strip-literals.js

@@ -0,0 +1,188 @@
+/**
+ * @fileoverview Shared utilities for stripping string literal and comment
+ * content from source code. Used by fitness checks to avoid false positives
+ * from patterns appearing inside string literals or comments.
+ */
+/**
+ * Strip string literal contents from a single line.
+ * Replaces content inside '...', "...", and `...` with empty strings.
+ * Used by checks for per-line pattern matching to avoid false positives
+ * from patterns appearing inside string literals.
+ */
+export function stripStringLiterals(line) {
+    return line
+        .replaceAll(/'(?:[^'\\]|\\.)*'/g, "''")
+        .replaceAll(/"(?:[^"\\]|\\.)*"/g, '""')
+        .replaceAll(/`(?:[^`\\]|\\.)*`/gs, '``');
+}
+/** Shared regex patterns for string literal replacement */
+const SINGLE_QUOTE_RE = /'(?:[^'\\]|\\.)*'/g;
+const DOUBLE_QUOTE_RE = /"(?:[^"\\]|\\.)*"/g;
+const BACKTICK_RE = /`(?:[^`\\]|\\.)*`/gs;
+/**
+ * Strip string literals and single-line comments from full file content.
+ * Used by checks for quick-filter gates to avoid matching keywords
+ * that only appear in documentation strings or comments.
+ */
+/**
+ * Check if a position in a line is inside a string literal.
+ * Scans characters before the match position for unescaped quotes/backticks.
+ * Used by checks to avoid false positives from suggestion/description text.
+ */
+export function isInsideStringLiteral(line, matchIndex) {
+    let inSingle = false;
+    let inDouble = false;
+    let inTemplate = false;
+    let escaped = false;
+    for (let i = 0; i < matchIndex; i++) {
+        const ch = line[i];
+        if (escaped) {
+            escaped = false;
+            continue;
+        }
+        if (ch === '\\' && (inSingle || inDouble || inTemplate)) {
+            escaped = true;
+            continue;
+        }
+        if (ch === "'" && !inDouble && !inTemplate)
+            inSingle = !inSingle;
+        else if (ch === '"' && !inSingle && !inTemplate)
+            inDouble = !inDouble;
+        else if (ch === '`' && !inSingle && !inDouble)
+            inTemplate = !inTemplate;
+    }
+    return inSingle || inDouble || inTemplate;
+}
+/**
+ * Strip string literals and single-line comments from full file content.
+ * Used by checks for quick-filter gates to avoid matching keywords
+ * that only appear in documentation strings or comments.
+ */
+export function stripStringsAndComments(content) {
+    // Strip string literals first
+    let result = content
+        .replaceAll(SINGLE_QUOTE_RE, "''")
+        .replaceAll(DOUBLE_QUOTE_RE, '""')
+        .replaceAll(BACKTICK_RE, '``');
+    // Strip single-line comments (after string stripping to avoid matching // inside strings)
+    // eslint-disable-next-line sonarjs/slow-regex -- .*$ anchored to line end; linear scan
+    result = result.replaceAll(/\/\/.*$/gm, '');
+    return result;
+}
+/**
+ * Strip strings, single-line comments, AND block comments while preserving
+ * BOTH character positions and line numbers. Each stripped character is
+ * replaced with a space (non-newline) so the output has identical length
+ * and line offsets to the input. Use this when downstream processing
+ * needs to map a match index back to a line number in the ORIGINAL
+ * source — `stripStringsAndComments` collapses string literals to empty
+ * pairs, which shifts indexes and breaks `getLineNumber(content, idx)`.
+ *
+ * Strips:
+ * - Single-quoted, double-quoted, and template-literal string contents
+ * - Single-line `// ...` comments (to end of line)
+ * - Block `/* ... *\/` comments (including JSDoc `/** ... *\/`)
+ *
+ * Preserves: newlines, total character count, character positions of
+ * code OUTSIDE these regions.
+ */
+// eslint-disable-next-line sonarjs/cognitive-complexity -- token-state-machine: single-pass tokenizer, branches reflect quote/comment state
+export function stripStringsAndCommentsPreservingPositions(content) {
+    const out = [];
+    let i = 0;
+    let inSingle = false;
+    let inDouble = false;
+    let inTemplate = false;
+    let inLineComment = false;
+    let inBlockComment = false;
+    let escaped = false;
+    while (i < content.length) {
+        const ch = content[i];
+        const next = content[i + 1];
+        // Inside any string: blank out chars (preserve newlines) until terminator.
+        if (inSingle || inDouble || inTemplate) {
+            if (escaped) {
+                out.push(ch === '\n' ? '\n' : ' ');
+                escaped = false;
+                i++;
+                continue;
+            }
+            if (ch === '\\') {
+                out.push(' ');
+                escaped = true;
+                i++;
+                continue;
+            }
+            if ((ch === "'" && inSingle) || (ch === '"' && inDouble) || (ch === '`' && inTemplate)) {
+                // Keep terminator for symmetry — replace with space too. The
+                // string itself is gone; outer code doesn't care about the quote.
+                out.push(' ');
+                inSingle = inDouble = inTemplate = false;
+                i++;
+                continue;
+            }
+            out.push(ch === '\n' ? '\n' : ' ');
+            i++;
+            continue;
+        }
+        // Inside line comment: blank to end of line.
+        if (inLineComment) {
+            if (ch === '\n') {
+                inLineComment = false;
+                out.push('\n');
+            }
+            else {
+                out.push(' ');
+            }
+            i++;
+            continue;
+        }
+        // Inside block comment: blank until `*/`.
+        if (inBlockComment) {
+            if (ch === '*' && next === '/') {
+                out.push('  ');
+                inBlockComment = false;
+                i += 2;
+                continue;
+            }
+            out.push(ch === '\n' ? '\n' : ' ');
+            i++;
+            continue;
+        }
+        // Outside any region: detect openers.
+        if (ch === '/' && next === '/') {
+            out.push('  ');
+            inLineComment = true;
+            i += 2;
+            continue;
+        }
+        if (ch === '/' && next === '*') {
+            out.push('  ');
+            inBlockComment = true;
+            i += 2;
+            continue;
+        }
+        if (ch === "'") {
+            out.push(' ');
+            inSingle = true;
+            i++;
+            continue;
+        }
+        if (ch === '"') {
+            out.push(' ');
+            inDouble = true;
+            i++;
+            continue;
+        }
+        if (ch === '`') {
+            out.push(' ');
+            inTemplate = true;
+            i++;
+            continue;
+        }
+        out.push(ch);
+        i++;
+    }
+    return out.join('');
+}
+//# sourceMappingURL=strip-literals.js.map

package/dist/framework/strip-literals.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"strip-literals.js","sourceRoot":"","sources":["../../src/framework/strip-literals.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH;;;;;GAKG;AACH,MAAM,UAAU,mBAAmB,CAAC,IAAY;IAC9C,OAAO,IAAI;SACR,UAAU,CAAC,oBAAoB,EAAE,IAAI,CAAC;SACtC,UAAU,CAAC,oBAAoB,EAAE,IAAI,CAAC;SACtC,UAAU,CAAC,qBAAqB,EAAE,IAAI,CAAC,CAAA;AAC5C,CAAC;AAED,2DAA2D;AAC3D,MAAM,eAAe,GAAG,oBAAoB,CAAA;AAC5C,MAAM,eAAe,GAAG,oBAAoB,CAAA;AAC5C,MAAM,WAAW,GAAG,qBAAqB,CAAA;AAEzC;;;;GAIG;AACH;;;;GAIG;AACH,MAAM,UAAU,qBAAqB,CAAC,IAAY,EAAE,UAAkB;IACpE,IAAI,QAAQ,GAAG,KAAK,CAAA;IACpB,IAAI,QAAQ,GAAG,KAAK,CAAA;IACpB,IAAI,UAAU,GAAG,KAAK,CAAA;IACtB,IAAI,OAAO,GAAG,KAAK,CAAA;IAEnB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,UAAU,EAAE,CAAC,EAAE,EAAE,CAAC;QACpC,MAAM,EAAE,GAAG,IAAI,CAAC,CAAC,CAAC,CAAA;QAElB,IAAI,OAAO,EAAE,CAAC;YACZ,OAAO,GAAG,KAAK,CAAA;YACf,SAAQ;QACV,CAAC;QAED,IAAI,EAAE,KAAK,IAAI,IAAI,CAAC,QAAQ,IAAI,QAAQ,IAAI,UAAU,CAAC,EAAE,CAAC;YACxD,OAAO,GAAG,IAAI,CAAA;YACd,SAAQ;QACV,CAAC;QAED,IAAI,EAAE,KAAK,GAAG,IAAI,CAAC,QAAQ,IAAI,CAAC,UAAU;YAAE,QAAQ,GAAG,CAAC,QAAQ,CAAA;aAC3D,IAAI,EAAE,KAAK,GAAG,IAAI,CAAC,QAAQ,IAAI,CAAC,UAAU;YAAE,QAAQ,GAAG,CAAC,QAAQ,CAAA;aAChE,IAAI,EAAE,KAAK,GAAG,IAAI,CAAC,QAAQ,IAAI,CAAC,QAAQ;YAAE,UAAU,GAAG,CAAC,UAAU,CAAA;IACzE,CAAC;IAED,OAAO,QAAQ,IAAI,QAAQ,IAAI,UAAU,CAAA;AAC3C,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,uBAAuB,CAAC,OAAe;IACrD,8BAA8B;IAC9B,IAAI,MAAM,GAAG,OAAO;SACjB,UAAU,CAAC,eAAe,EAAE,IAAI,CAAC;SACjC,UAAU,CAAC,eAAe,EAAE,IAAI,CAAC;SACjC,UAAU,CAAC,WAAW,EAAE,IAAI,CAAC,CAAA;IAChC,0FAA0F;IAC1F,uFAAuF;IACvF,MAAM,GAAG,MAAM,CAAC,UAAU,CAAC,WAAW,EAAE,EAAE,CAAC,CAAA;IAC3C,OAAO,MAAM,CAAA;AACf,CAAC;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,4IAA4I;AAC5I,MAAM,UAAU,0CAA0C,CAAC,OAAe;IACxE,MAAM,GAAG,GAAa,EAAE,CAAA;IACxB,IAAI,CAAC,GAAG,CAAC,CAAA;IACT,IAAI,QAAQ,GAAG,KAAK,CAAA;IACpB,IAAI,QAAQ,GAAG,KAAK,CAAA;IACpB,IAAI,UAAU,GAAG,KAAK,CAAA;IACtB,IAAI,aAAa,GAAG,KAAK,CAAA;IACzB,IAAI,cAAc,GAAG,KAAK,CAAA;IAC1B,IAAI,OAAO,GAAG,KAAK,CAAA;IAEnB,OAAO,CAAC,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC;QAC1B,MAAM,EAAE,GAAG,OAAO,CAAC,CAAC,CAAC,CAAA;QACrB,MAAM,IAAI,GAAG,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,CAAA;QAE3B,2EAA2E;QAC3E,IAAI,QAAQ,IAAI,QAAQ,IAAI,UAAU,EAAE,CAAC;YACvC,IAAI,OAAO,EAAE,CAAC;gBACZ,GAAG,CAAC,IAAI,CAAC,EAAE,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,CAAA;gBAClC,OAAO,GAAG,KAAK,CAAA;gBACf,CAAC,EAAE,CAAA;gBACH,SAAQ;YACV,CAAC;YACD,IAAI,EAAE,KAAK,IAAI,EAAE,CAAC;gBAChB,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;gBACb,OAAO,GAAG,IAAI,CAAA;gBACd,CAAC,EAAE,CAAA;gBACH,SAAQ;YACV,CAAC;YACD,IAAI,CAAC,EAAE,KAAK,GAAG,IAAI,QAAQ,CAAC,IAAI,CAAC,EAAE,KAAK,GAAG,IAAI,QAAQ,CAAC,IAAI,CAAC,EAAE,KAAK,GAAG,IAAI,UAAU,CAAC,EAAE,CAAC;gBACvF,6DAA6D;gBAC7D,kEAAkE;gBAClE,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;gBACb,QAAQ,GAAG,QAAQ,GAAG,UAAU,GAAG,KAAK,CAAA;gBACxC,CAAC,EAAE,CAAA;gBACH,SAAQ;YACV,CAAC;YACD,GAAG,CAAC,IAAI,CAAC,EAAE,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,CAAA;YAClC,CAAC,EAAE,CAAA;YACH,SAAQ;QACV,CAAC;QAED,6CAA6C;QAC7C,IAAI,aAAa,EAAE,CAAC;YAClB,IAAI,EAAE,KAAK,IAAI,EAAE,CAAC;gBAChB,aAAa,GAAG,KAAK,CAAA;gBACrB,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;YAChB,CAAC;iBAAM,CAAC;gBACN,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;YACf,CAAC;YACD,CAAC,EAAE,CAAA;YACH,SAAQ;QACV,CAAC;QAED,0CAA0C;QAC1C,IAAI,cAAc,EAAE,CAAC;YACnB,IAAI,EAAE,KAAK,GAAG,IAAI,IAAI,KAAK,GAAG,EAAE,CAAC;gBAC/B,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;gBACd,cAAc,GAAG,KAAK,CAAA;gBACtB,CAAC,IAAI,CAAC,CAAA;gBACN,SAAQ;YACV,CAAC;YACD,GAAG,CAAC,IAAI,CAAC,EAAE,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,CAAA;YAClC,CAAC,EAAE,CAAA;YACH,SAAQ;QACV,CAAC;QAED,sCAAsC;QACtC,IAAI,EAAE,KAAK,GAAG,IAAI,IAAI,KAAK,GAAG,EAAE,CAAC;YAC/B,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;YACd,aAAa,GAAG,IAAI,CAAA;YACpB,CAAC,IAAI,CAAC,CAAA;YACN,SAAQ;QACV,CAAC;QACD,IAAI,EAAE,KAAK,GAAG,IAAI,IAAI,KAAK,GAAG,EAAE,CAAC;YAC/B,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;YACd,cAAc,GAAG,IAAI,CAAA;YACrB,CAAC,IAAI,CAAC,CAAA;YACN,SAAQ;QACV,CAAC;QACD,IAAI,EAAE,KAAK,GAAG,EAAE,CAAC;YACf,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;YACb,QAAQ,GAAG,IAAI,CAAA;YACf,CAAC,EAAE,CAAA;YACH,SAAQ;QACV,CAAC;QACD,IAAI,EAAE,KAAK,GAAG,EAAE,CAAC;YACf,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;YACb,QAAQ,GAAG,IAAI,CAAA;YACf,CAAC,EAAE,CAAA;YACH,SAAQ;QACV,CAAC;QACD,IAAI,EAAE,KAAK,GAAG,EAAE,CAAC;YACf,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;YACb,UAAU,GAAG,IAAI,CAAA;YACjB,CAAC,EAAE,CAAA;YACH,SAAQ;QACV,CAAC;QAED,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;QACZ,CAAC,EAAE,CAAA;IACL,CAAC;IAED,OAAO,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;AACrB,CAAC"}

package/dist/gate.d.ts

@@ -0,0 +1,74 @@
+/**
+ * Architecture-gate primitive — pre/post-fix regression detection.
+ *
+ * Operations:
+ *   - saveBaseline(output, path)         — persist current SARIF as the baseline
+ *   - compareToBaseline(output, path)    — diff current SARIF against baseline
+ *   - renderGateCompareOutput(result)    — pretty-print the diff for stdout
+ *
+ * Wired into the `fit` command via `--gate-save` and `--gate-compare` flags
+ * (see commands/fit.ts and index.ts).
+ *
+ * The baseline is opensip-tools' own SARIF document (built via buildSarifLog),
+ * persisted as a file. Diffs match by (filePath, ruleId, message) — line
+ * numbers are intentionally NOT in the matching key so unrelated line shifts
+ * don't register as added/resolved violations.
+ */
+import type { CliOutput } from '@opensip-tools/contracts';
+/** A single violation as it appears in the gate diff. */
+interface GateViolation {
+    /** sha256(filePath + '\n' + ruleId + '\n' + message) — opaque identity */
+    readonly hash: string;
+    readonly ruleId: string;
+    readonly message: string;
+    readonly filePath: string;
+    /** Line number — informational only, NOT used in identity */
+    readonly line?: number;
+    readonly severity: 'error' | 'warning';
+}
+/** Result of comparing current state to a saved baseline. */
+export interface GateCompareResult {
+    readonly baselinePath: string;
+    /** Violations present now but not in baseline. */
+    readonly added: readonly GateViolation[];
+    /** Violations present in baseline but not now. */
+    readonly resolved: readonly GateViolation[];
+    /** Violations present in both. */
+    readonly unchanged: readonly GateViolation[];
+    /** True iff `added` is non-empty — the gate decision. */
+    readonly degraded: boolean;
+}
+/** Thrown when --gate-compare is invoked but the baseline file doesn't exist. */
+export declare class GateBaselineMissingError extends Error {
+    readonly baselinePath: string;
+    constructor(baselinePath: string);
+}
+/** Thrown when the baseline file exists but isn't a parseable SARIF document. */
+export declare class GateBaselineInvalidError extends Error {
+    readonly baselinePath: string;
+    constructor(baselinePath: string, reason: string);
+}
+/**
+ * Default location for the baseline file when --baseline is not
+ * specified. Lives under the per-project gitignored runtime dir.
+ */
+export declare const DEFAULT_BASELINE_PATH = "opensip-tools/.runtime/baseline.sarif";
+/**
+ * Persist the current run's findings as a baseline SARIF document.
+ * Creates parent directories as needed. Overwrites any existing baseline.
+ */
+export declare function saveBaseline(output: CliOutput, baselinePath: string): void;
+/**
+ * Compare current findings against a saved baseline. Returns a structured
+ * diff of added / resolved / unchanged violations.
+ *
+ * @throws {GateBaselineMissingError} when the baseline file doesn't exist
+ * @throws {GateBaselineInvalidError} when the baseline isn't valid SARIF
+ */
+export declare function compareToBaseline(output: CliOutput, baselinePath: string): GateCompareResult;
+/**
+ * Pretty-print a gate compare result for stdout. Caller sets the exit code.
+ */
+export declare function renderGateCompareOutput(result: GateCompareResult): string;
+export {};
+//# sourceMappingURL=gate.d.ts.map

package/dist/gate.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"gate.d.ts","sourceRoot":"","sources":["../src/gate.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAUH,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,0BAA0B,CAAC;AAM1D,yDAAyD;AACzD,UAAU,aAAa;IACrB,0EAA0E;IAC1E,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,6DAA6D;IAC7D,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,QAAQ,EAAE,OAAO,GAAG,SAAS,CAAC;CACxC;AAED,6DAA6D;AAC7D,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,kDAAkD;IAClD,QAAQ,CAAC,KAAK,EAAE,SAAS,aAAa,EAAE,CAAC;IACzC,kDAAkD;IAClD,QAAQ,CAAC,QAAQ,EAAE,SAAS,aAAa,EAAE,CAAC;IAC5C,kCAAkC;IAClC,QAAQ,CAAC,SAAS,EAAE,SAAS,aAAa,EAAE,CAAC;IAC7C,yDAAyD;IACzD,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC;CAC5B;AAED,iFAAiF;AACjF,qBAAa,wBAAyB,SAAQ,KAAK;IACjD,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;gBAClB,YAAY,EAAE,MAAM;CASjC;AAED,iFAAiF;AACjF,qBAAa,wBAAyB,SAAQ,KAAK;IACjD,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;gBAClB,YAAY,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM;CAKjD;AAMD;;;GAGG;AACH,eAAO,MAAM,qBAAqB,0CAA0C,CAAC;AAM7E;;;GAGG;AACH,wBAAgB,YAAY,CAAC,MAAM,EAAE,SAAS,EAAE,YAAY,EAAE,MAAM,GAAG,IAAI,CAe1E;AAMD;;;;;;GAMG;AACH,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,SAAS,EAAE,YAAY,EAAE,MAAM,GAAG,iBAAiB,CAwD5F;AAMD;;GAEG;AAEH,wBAAgB,uBAAuB,CAAC,MAAM,EAAE,iBAAiB,GAAG,MAAM,CA4CzE"}

package/dist/gate.js

@@ -0,0 +1,257 @@
+/**
+ * Architecture-gate primitive — pre/post-fix regression detection.
+ *
+ * Operations:
+ *   - saveBaseline(output, path)         — persist current SARIF as the baseline
+ *   - compareToBaseline(output, path)    — diff current SARIF against baseline
+ *   - renderGateCompareOutput(result)    — pretty-print the diff for stdout
+ *
+ * Wired into the `fit` command via `--gate-save` and `--gate-compare` flags
+ * (see commands/fit.ts and index.ts).
+ *
+ * The baseline is opensip-tools' own SARIF document (built via buildSarifLog),
+ * persisted as a file. Diffs match by (filePath, ruleId, message) — line
+ * numbers are intentionally NOT in the matching key so unrelated line shifts
+ * don't register as added/resolved violations.
+ */
+import { createHash } from 'node:crypto';
+import { existsSync, mkdirSync, readFileSync, writeFileSync } from 'node:fs';
+import { dirname } from 'node:path';
+import { logger } from '@opensip-tools/core';
+import { buildSarifLog } from './sarif.js';
+/** Thrown when --gate-compare is invoked but the baseline file doesn't exist. */
+export class GateBaselineMissingError extends Error {
+    baselinePath;
+    constructor(baselinePath) {
+        super(`Gate baseline not found at ${baselinePath}. ` +
+            `Run \`opensip-tools fit --gate-save\` first to create one, ` +
+            `or pass --baseline <path> if it lives elsewhere.`);
+        this.name = 'GateBaselineMissingError';
+        this.baselinePath = baselinePath;
+    }
+}
+/** Thrown when the baseline file exists but isn't a parseable SARIF document. */
+export class GateBaselineInvalidError extends Error {
+    baselinePath;
+    constructor(baselinePath, reason) {
+        super(`Gate baseline at ${baselinePath} is invalid: ${reason}`);
+        this.name = 'GateBaselineInvalidError';
+        this.baselinePath = baselinePath;
+    }
+}
+// ---------------------------------------------------------------------------
+// Default baseline path
+// ---------------------------------------------------------------------------
+/**
+ * Default location for the baseline file when --baseline is not
+ * specified. Lives under the per-project gitignored runtime dir.
+ */
+export const DEFAULT_BASELINE_PATH = 'opensip-tools/.runtime/baseline.sarif';
+// ---------------------------------------------------------------------------
+// saveBaseline
+// ---------------------------------------------------------------------------
+/**
+ * Persist the current run's findings as a baseline SARIF document.
+ * Creates parent directories as needed. Overwrites any existing baseline.
+ */
+export function saveBaseline(output, baselinePath) {
+    const sarif = buildSarifLog(output);
+    const dir = dirname(baselinePath);
+    // mkdirSync with recursive: true is idempotent — no need to check existsSync first.
+    mkdirSync(dir, { recursive: true });
+    writeFileSync(baselinePath, JSON.stringify(sarif, null, 2), 'utf8');
+    const findingCount = output.checks.reduce((n, c) => n + c.findings.length, 0);
+    logger.info({
+        evt: 'cli.gate.save.complete',
+        module: 'cli:gate',
+        baselinePath,
+        findingCount,
+        checkCount: output.checks.length,
+    });
+}
+// ---------------------------------------------------------------------------
+// compareToBaseline
+// ---------------------------------------------------------------------------
+/**
+ * Compare current findings against a saved baseline. Returns a structured
+ * diff of added / resolved / unchanged violations.
+ *
+ * @throws {GateBaselineMissingError} when the baseline file doesn't exist
+ * @throws {GateBaselineInvalidError} when the baseline isn't valid SARIF
+ */
+export function compareToBaseline(output, baselinePath) {
+    if (!existsSync(baselinePath)) {
+        throw new GateBaselineMissingError(baselinePath);
+    }
+    const baselineRaw = readFileSync(baselinePath, 'utf8');
+    let baselineDoc;
+    try {
+        baselineDoc = JSON.parse(baselineRaw);
+    }
+    catch (error) {
+        const reason = error instanceof Error ? error.message : String(error);
+        throw new GateBaselineInvalidError(baselinePath, `not valid JSON (${reason})`);
+    }
+    const baselineViolations = extractViolationsFromSarif(baselineDoc, baselinePath);
+    const currentViolations = extractViolationsFromCliOutput(output);
+    const baselineByHash = new Map(baselineViolations.map((v) => [v.hash, v]));
+    const currentByHash = new Map(currentViolations.map((v) => [v.hash, v]));
+    const added = [];
+    const unchanged = [];
+    for (const [hash, v] of currentByHash) {
+        if (baselineByHash.has(hash)) {
+            unchanged.push(v);
+        }
+        else {
+            added.push(v);
+        }
+    }
+    const resolved = [];
+    for (const [hash, v] of baselineByHash) {
+        if (!currentByHash.has(hash)) {
+            resolved.push(v);
+        }
+    }
+    const result = {
+        baselinePath,
+        added,
+        resolved,
+        unchanged,
+        degraded: added.length > 0,
+    };
+    logger.info({
+        evt: 'cli.gate.compare.complete',
+        module: 'cli:gate',
+        baselinePath,
+        addedCount: added.length,
+        resolvedCount: resolved.length,
+        unchangedCount: unchanged.length,
+        degraded: result.degraded,
+    });
+    return result;
+}
+// ---------------------------------------------------------------------------
+// renderGateCompareOutput
+// ---------------------------------------------------------------------------
+/**
+ * Pretty-print a gate compare result for stdout. Caller sets the exit code.
+ */
+// eslint-disable-next-line sonarjs/cognitive-complexity -- multi-section diff renderer: added/removed/changed sections each shape output; flatter form would scatter formatting
+export function renderGateCompareOutput(result) {
+    const lines = ['opensip-tools gate compare', ''];
+    if (result.added.length > 0) {
+        lines.push(`Added (${result.added.length}):`);
+        for (const v of sortViolations(result.added)) {
+            lines.push(`  ✗ ${v.ruleId.padEnd(40)} ${formatLocation(v)}`);
+            if (v.message && v.message !== v.ruleId) {
+                lines.push(`      ${truncate(v.message, 120)}`);
+            }
+        }
+        lines.push('');
+    }
+    if (result.resolved.length > 0) {
+        lines.push(`Resolved (${result.resolved.length}):`);
+        for (const v of sortViolations(result.resolved)) {
+            lines.push(`  ✓ ${v.ruleId.padEnd(40)} ${formatLocation(v)}`);
+        }
+        lines.push('');
+    }
+    if (result.unchanged.length > 0) {
+        lines.push(`Unchanged (${result.unchanged.length}):`);
+        // Truncate unchanged list — usually long and not actionable.
+        const sample = sortViolations(result.unchanged).slice(0, 5);
+        for (const v of sample) {
+            lines.push(`  · ${v.ruleId.padEnd(40)} ${formatLocation(v)}`);
+        }
+        if (result.unchanged.length > sample.length) {
+            lines.push(`  · ... and ${result.unchanged.length - sample.length} more`);
+        }
+        lines.push('');
+    }
+    if (result.degraded) {
+        lines.push(`✗ DEGRADED — ${result.added.length} new violation${result.added.length === 1 ? '' : 's'}`);
+    }
+    else if (result.resolved.length > 0) {
+        lines.push(`✓ IMPROVED — ${result.resolved.length} violation${result.resolved.length === 1 ? '' : 's'} resolved, none added`);
+    }
+    else {
+        lines.push(`✓ STABLE — no change`);
+    }
+    return lines.join('\n');
+}
+// ---------------------------------------------------------------------------
+// Internal helpers
+// ---------------------------------------------------------------------------
+function hashViolation(filePath, ruleId, message) {
+    return createHash('sha256').update(`${filePath}\n${ruleId}\n${message}`).digest('hex');
+}
+function extractViolationsFromCliOutput(output) {
+    const violations = [];
+    for (const check of output.checks) {
+        for (const f of check.findings) {
+            const filePath = f.filePath ?? '';
+            violations.push({
+                hash: hashViolation(filePath, f.ruleId, f.message),
+                ruleId: f.ruleId,
+                message: f.message,
+                filePath,
+                line: f.line,
+                severity: f.severity,
+            });
+        }
+    }
+    return violations;
+}
+function extractViolationsFromSarif(doc, baselinePath) {
+    if (typeof doc !== 'object' || doc === null) {
+        throw new GateBaselineInvalidError(baselinePath, 'top-level value is not an object');
+    }
+    const sarif = doc;
+    if (sarif.runs === undefined || !Array.isArray(sarif.runs)) {
+        throw new GateBaselineInvalidError(baselinePath, 'missing or non-array `runs`');
+    }
+    const runs = sarif.runs;
+    const violations = [];
+    for (const run of runs) {
+        const results = run.results;
+        if (results === undefined)
+            continue;
+        for (const result of results) {
+            const ruleId = result.ruleId ?? '';
+            const message = result.message?.text ?? '';
+            const loc = result.locations?.[0]?.physicalLocation;
+            const filePath = loc?.artifactLocation?.uri ?? '';
+            const line = loc?.region?.startLine;
+            const severity = result.level === 'error' ? 'error' : 'warning';
+            violations.push({
+                hash: hashViolation(filePath, ruleId, message),
+                ruleId,
+                message,
+                filePath,
+                line,
+                severity,
+            });
+        }
+    }
+    return violations;
+}
+function formatLocation(v) {
+    if (!v.filePath)
+        return '(no location)';
+    return v.line == null ? v.filePath : `${v.filePath}:${v.line}`;
+}
+function sortViolations(vs) {
+    return [...vs].sort((a, b) => {
+        if (a.ruleId !== b.ruleId)
+            return a.ruleId.localeCompare(b.ruleId);
+        if (a.filePath !== b.filePath)
+            return a.filePath.localeCompare(b.filePath);
+        return (a.line ?? 0) - (b.line ?? 0);
+    });
+}
+function truncate(s, max) {
+    if (s.length <= max)
+        return s;
+    return s.slice(0, max - 1) + '…';
+}
+//# sourceMappingURL=gate.js.map

package/dist/gate.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"gate.js","sourceRoot":"","sources":["../src/gate.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AAC7E,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAEpC,OAAO,EAAE,MAAM,EAAE,MAAM,qBAAqB,CAAC;AAE7C,OAAO,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAiC3C,iFAAiF;AACjF,MAAM,OAAO,wBAAyB,SAAQ,KAAK;IACxC,YAAY,CAAS;IAC9B,YAAY,YAAoB;QAC9B,KAAK,CACH,8BAA8B,YAAY,IAAI;YAC5C,6DAA6D;YAC7D,kDAAkD,CACrD,CAAC;QACF,IAAI,CAAC,IAAI,GAAG,0BAA0B,CAAC;QACvC,IAAI,CAAC,YAAY,GAAG,YAAY,CAAC;IACnC,CAAC;CACF;AAED,iFAAiF;AACjF,MAAM,OAAO,wBAAyB,SAAQ,KAAK;IACxC,YAAY,CAAS;IAC9B,YAAY,YAAoB,EAAE,MAAc;QAC9C,KAAK,CAAC,oBAAoB,YAAY,gBAAgB,MAAM,EAAE,CAAC,CAAC;QAChE,IAAI,CAAC,IAAI,GAAG,0BAA0B,CAAC;QACvC,IAAI,CAAC,YAAY,GAAG,YAAY,CAAC;IACnC,CAAC;CACF;AAED,8EAA8E;AAC9E,wBAAwB;AACxB,8EAA8E;AAE9E;;;GAGG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAG,uCAAuC,CAAC;AAE7E,8EAA8E;AAC9E,eAAe;AACf,8EAA8E;AAE9E;;;GAGG;AACH,MAAM,UAAU,YAAY,CAAC,MAAiB,EAAE,YAAoB;IAClE,MAAM,KAAK,GAAG,aAAa,CAAC,MAAM,CAAC,CAAC;IACpC,MAAM,GAAG,GAAG,OAAO,CAAC,YAAY,CAAC,CAAC;IAClC,oFAAoF;IACpF,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACpC,aAAa,CAAC,YAAY,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;IAEpE,MAAM,YAAY,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;IAC9E,MAAM,CAAC,IAAI,CAAC;QACV,GAAG,EAAE,wBAAwB;QAC7B,MAAM,EAAE,UAAU;QAClB,YAAY;QACZ,YAAY;QACZ,UAAU,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM;KACjC,CAAC,CAAC;AACL,CAAC;AAED,8EAA8E;AAC9E,oBAAoB;AACpB,8EAA8E;AAE9E;;;;;;GAMG;AACH,MAAM,UAAU,iBAAiB,CAAC,MAAiB,EAAE,YAAoB;IACvE,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC,EAAE,CAAC;QAC9B,MAAM,IAAI,wBAAwB,CAAC,YAAY,CAAC,CAAC;IACnD,CAAC;IAED,MAAM,WAAW,GAAG,YAAY,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC;IACvD,IAAI,WAAoB,CAAC;IACzB,IAAI,CAAC;QACH,WAAW,GAAG,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;IACxC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,MAAM,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACtE,MAAM,IAAI,wBAAwB,CAAC,YAAY,EAAE,mBAAmB,MAAM,GAAG,CAAC,CAAC;IACjF,CAAC;IAED,MAAM,kBAAkB,GAAG,0BAA0B,CAAC,WAAW,EAAE,YAAY,CAAC,CAAC;IACjF,MAAM,iBAAiB,GAAG,8BAA8B,CAAC,MAAM,CAAC,CAAC;IAEjE,MAAM,cAAc,GAAG,IAAI,GAAG,CAAC,kBAAkB,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IAC3E,MAAM,aAAa,GAAG,IAAI,GAAG,CAAC,iBAAiB,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IAEzE,MAAM,KAAK,GAAoB,EAAE,CAAC;IAClC,MAAM,SAAS,GAAoB,EAAE,CAAC;IACtC,KAAK,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,aAAa,EAAE,CAAC;QACtC,IAAI,cAAc,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;YAC7B,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACpB,CAAC;aAAM,CAAC;YACN,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAChB,CAAC;IACH,CAAC;IAED,MAAM,QAAQ,GAAoB,EAAE,CAAC;IACrC,KAAK,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,cAAc,EAAE,CAAC;QACvC,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;YAC7B,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACnB,CAAC;IACH,CAAC;IAED,MAAM,MAAM,GAAsB;QAChC,YAAY;QACZ,KAAK;QACL,QAAQ;QACR,SAAS;QACT,QAAQ,EAAE,KAAK,CAAC,MAAM,GAAG,CAAC;KAC3B,CAAC;IAEF,MAAM,CAAC,IAAI,CAAC;QACV,GAAG,EAAE,2BAA2B;QAChC,MAAM,EAAE,UAAU;QAClB,YAAY;QACZ,UAAU,EAAE,KAAK,CAAC,MAAM;QACxB,aAAa,EAAE,QAAQ,CAAC,MAAM;QAC9B,cAAc,EAAE,SAAS,CAAC,MAAM;QAChC,QAAQ,EAAE,MAAM,CAAC,QAAQ;KAC1B,CAAC,CAAC;IAEH,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,8EAA8E;AAC9E,0BAA0B;AAC1B,8EAA8E;AAE9E;;GAEG;AACH,gLAAgL;AAChL,MAAM,UAAU,uBAAuB,CAAC,MAAyB;IAC/D,MAAM,KAAK,GAAa,CAAE,4BAA4B,EAAE,EAAE,CAAC,CAAC;IAE5D,IAAI,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC5B,KAAK,CAAC,IAAI,CAAC,UAAU,MAAM,CAAC,KAAK,CAAC,MAAM,IAAI,CAAC,CAAC;QAC9C,KAAK,MAAM,CAAC,IAAI,cAAc,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;YAC7C,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,cAAc,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;YAC9D,IAAI,CAAC,CAAC,OAAO,IAAI,CAAC,CAAC,OAAO,KAAK,CAAC,CAAC,MAAM,EAAE,CAAC;gBACxC,KAAK,CAAC,IAAI,CAAC,SAAS,QAAQ,CAAC,CAAC,CAAC,OAAO,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC;YAClD,CAAC;QACH,CAAC;QACD,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACjB,CAAC;IAED,IAAI,MAAM,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC/B,KAAK,CAAC,IAAI,CAAC,aAAa,MAAM,CAAC,QAAQ,CAAC,MAAM,IAAI,CAAC,CAAC;QACpD,KAAK,MAAM,CAAC,IAAI,cAAc,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC;YAChD,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,cAAc,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QAChE,CAAC;QACD,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACjB,CAAC;IAED,IAAI,MAAM,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAChC,KAAK,CAAC,IAAI,CAAC,cAAc,MAAM,CAAC,SAAS,CAAC,MAAM,IAAI,CAAC,CAAC;QACtD,6DAA6D;QAC7D,MAAM,MAAM,GAAG,cAAc,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QAC5D,KAAK,MAAM,CAAC,IAAI,MAAM,EAAE,CAAC;YACvB,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,cAAc,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QAChE,CAAC;QACD,IAAI,MAAM,CAAC,SAAS,CAAC,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC;YAC5C,KAAK,CAAC,IAAI,CAAC,eAAe,MAAM,CAAC,SAAS,CAAC,MAAM,GAAG,MAAM,CAAC,MAAM,OAAO,CAAC,CAAC;QAC5E,CAAC;QACD,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACjB,CAAC;IAED,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;QACpB,KAAK,CAAC,IAAI,CAAC,gBAAgB,MAAM,CAAC,KAAK,CAAC,MAAM,iBAAiB,MAAM,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC;IACzG,CAAC;SAAM,IAAI,MAAM,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACtC,KAAK,CAAC,IAAI,CAAC,gBAAgB,MAAM,CAAC,QAAQ,CAAC,MAAM,aAAa,MAAM,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,uBAAuB,CAAC,CAAC;IAChI,CAAC;SAAM,CAAC;QACN,KAAK,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAC;IACrC,CAAC;IAED,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC;AAED,8EAA8E;AAC9E,mBAAmB;AACnB,8EAA8E;AAE9E,SAAS,aAAa,CAAC,QAAgB,EAAE,MAAc,EAAE,OAAe;IACtE,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,GAAG,QAAQ,KAAK,MAAM,KAAK,OAAO,EAAE,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AACzF,CAAC;AAED,SAAS,8BAA8B,CAAC,MAAiB;IACvD,MAAM,UAAU,GAAoB,EAAE,CAAC;IACvC,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC;QAClC,KAAK,MAAM,CAAC,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAC;YAC/B,MAAM,QAAQ,GAAG,CAAC,CAAC,QAAQ,IAAI,EAAE,CAAC;YAClC,UAAU,CAAC,IAAI,CAAC;gBACd,IAAI,EAAE,aAAa,CAAC,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC;gBAClD,MAAM,EAAE,CAAC,CAAC,MAAM;gBAChB,OAAO,EAAE,CAAC,CAAC,OAAO;gBAClB,QAAQ;gBACR,IAAI,EAAE,CAAC,CAAC,IAAI;gBACZ,QAAQ,EAAE,CAAC,CAAC,QAAQ;aACrB,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IACD,OAAO,UAAU,CAAC;AACpB,CAAC;AAwBD,SAAS,0BAA0B,CAAC,GAAY,EAAE,YAAoB;IACpE,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,KAAK,IAAI,EAAE,CAAC;QAC5C,MAAM,IAAI,wBAAwB,CAAC,YAAY,EAAE,kCAAkC,CAAC,CAAC;IACvF,CAAC;IACD,MAAM,KAAK,GAAG,GAAe,CAAC;IAC9B,IAAI,KAAK,CAAC,IAAI,KAAK,SAAS,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;QAC3D,MAAM,IAAI,wBAAwB,CAAC,YAAY,EAAE,6BAA6B,CAAC,CAAC;IAClF,CAAC;IAED,MAAM,IAAI,GAAwB,KAAK,CAAC,IAAI,CAAC;IAC7C,MAAM,UAAU,GAAoB,EAAE,CAAC;IACvC,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,MAAM,OAAO,GAAuC,GAAG,CAAC,OAAO,CAAC;QAChE,IAAI,OAAO,KAAK,SAAS;YAAE,SAAS;QACpC,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;YAC7B,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,IAAI,EAAE,CAAC;YACnC,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,EAAE,IAAI,IAAI,EAAE,CAAC;YAC3C,MAAM,GAAG,GAAG,MAAM,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,gBAAgB,CAAC;YACpD,MAAM,QAAQ,GAAG,GAAG,EAAE,gBAAgB,EAAE,GAAG,IAAI,EAAE,CAAC;YAClD,MAAM,IAAI,GAAG,GAAG,EAAE,MAAM,EAAE,SAAS,CAAC;YACpC,MAAM,QAAQ,GAAG,MAAM,CAAC,KAAK,KAAK,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;YAChE,UAAU,CAAC,IAAI,CAAC;gBACd,IAAI,EAAE,aAAa,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,CAAC;gBAC9C,MAAM;gBACN,OAAO;gBACP,QAAQ;gBACR,IAAI;gBACJ,QAAQ;aACT,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IACD,OAAO,UAAU,CAAC;AACpB,CAAC;AAED,SAAS,cAAc,CAAC,CAAgB;IACtC,IAAI,CAAC,CAAC,CAAC,QAAQ;QAAE,OAAO,eAAe,CAAC;IACxC,OAAO,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,QAAQ,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC;AACjE,CAAC;AAED,SAAS,cAAc,CAAC,EAA4B;IAClD,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE;QAC3B,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,MAAM;YAAE,OAAO,CAAC,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;QACnE,IAAI,CAAC,CAAC,QAAQ,KAAK,CAAC,CAAC,QAAQ;YAAE,OAAO,CAAC,CAAC,QAAQ,CAAC,aAAa,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC;QAC3E,OAAO,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC;IACvC,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,QAAQ,CAAC,CAAS,EAAE,GAAW;IACtC,IAAI,CAAC,CAAC,MAAM,IAAI,GAAG;QAAE,OAAO,CAAC,CAAC;IAC9B,OAAO,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,GAAG,CAAC,CAAC,GAAG,GAAG,CAAC;AACnC,CAAC"}

package/dist/index.d.ts

@@ -0,0 +1,47 @@
+export { defineCheck } from './framework/define-check.js';
+export { CheckRegistry, defaultRegistry } from './framework/registry.js';
+export { registerChecks } from './framework/register-helpers.js';
+export type { CheckViolation, CheckScope, FileAccessor, CheckConcern, CheckLanguage } from './framework/check-config.js';
+export type { Check, CheckConfig, ResolvedScope } from './framework/check-types.js';
+export { isCheck } from './framework/check-types.js';
+export type { ExecutionContext, RunOptions } from './framework/execution-context.js';
+export { getLineNumber, extractSnippet, isAPIFile } from './framework/result-builder.js';
+export { parseSource, walkNodes, getLineNumber as getASTLineNumber, getIdentifierName, getPropertyChain, isInStringLiteral, isLiteral, isPropertyAccess, } from './framework/ast-utilities.js';
+export { execAbortable } from './framework/abortable-exec.js';
+export { fileCache, DEFAULT_PREWARM_PATTERNS } from './framework/file-cache.js';
+export { buildImportGraph, findStronglyConnectedComponents } from './framework/import-graph.js';
+export type { ImportGraph } from './framework/import-graph.js';
+export { isInsideStringLiteral, stripStringLiterals, stripStringsAndComments, stripStringsAndCommentsPreservingPositions } from './framework/strip-literals.js';
+export { filterContent, clearFilterCache } from './framework/content-filter.js';
+export type { FilteredContent } from './framework/content-filter.js';
+import * as _ts from 'typescript';
+export { _ts as ts };
+export type { Finding, Severity, FindingSeverity, ToolOutput, CheckResult, CheckInfo, CheckResultMetadata, ItemType } from './types/findings.js';
+export { createResultWithSignals, createErrorResult, createPassingResult, CheckInfoFactory } from './types/findings.js';
+export { FitnessRecipeService } from './recipes/service.js';
+export type { FitnessRecipeServiceConfig, FitnessRecipeServiceCallbacks, CheckSummary } from './recipes/service-types.js';
+export type { FitnessRecipeResult, RecipeCheckResult, RecipeCheckConfigMap } from './recipes/types.js';
+export { builtInRecipesByName } from './recipes/built-in-recipes.js';
+export { defaultRecipeRegistry, FitnessRecipeRegistry } from './recipes/registry.js';
+export { getCheckConfig, setCurrentRecipeCheckConfig, clearCurrentRecipeCheckConfig } from './recipes/check-config.js';
+export { loadTargetsConfig, resolveTargetFiles } from './targets/index.js';
+export type { TargetsConfig } from './targets/types.js';
+export { TargetRegistry } from './targets/target-registry.js';
+export { buildScopeBasedFileMap } from './framework/scope-resolver.js';
+export { loadSignalersConfig } from './signalers/index.js';
+export type { SignalersConfig } from './signalers/types.js';
+export { loadPlugin, loadAllPlugins } from './plugins/loader.js';
+export type { FitPluginExports } from './plugins/types.js';
+export { discoverCheckPackages, readCheckPackageMetadata, readCheckPackagePreferences, } from './plugins/check-package-discovery.js';
+export type { CheckPackageDiscoveryOptions, DiscoveredCheckPackage, CheckPackageMetadata, } from './plugins/check-package-discovery.js';
+export { fitnessTool } from './tool.js';
+export { executeFit, ensureChecksLoaded, getDisplayName, getEnabledCheckCount, getIcon, getPluginLoadErrors, setPreLoadHook, formatDuration, formatValidatedColumn, } from './cli/fit.js';
+export type { PreLoadHook } from './cli/fit.js';
+export { openDashboard } from './cli/dashboard.js';
+export { listChecks } from './cli/list-checks.js';
+export { listRecipes } from './cli/list-recipes.js';
+export { saveBaseline, compareToBaseline, renderGateCompareOutput, GateBaselineMissingError, GateBaselineInvalidError, DEFAULT_BASELINE_PATH, } from './gate.js';
+export type { GateCompareResult } from './gate.js';
+export { buildSarifLog, chunkSarifRuns, reportToCloud } from './sarif.js';
+export type { ReportResult } from './sarif.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,WAAW,EAAE,MAAM,6BAA6B,CAAC;AAC1D,OAAO,EAAE,aAAa,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAC;AACzE,OAAO,EAAE,cAAc,EAAE,MAAM,iCAAiC,CAAC;AAGjE,YAAY,EAAE,cAAc,EAAE,UAAU,EAAE,YAAY,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,6BAA6B,CAAC;AACzH,YAAY,EAAE,KAAK,EAAE,WAAW,EAAE,aAAa,EAAE,MAAM,4BAA4B,CAAC;AACpF,OAAO,EAAE,OAAO,EAAE,MAAM,4BAA4B,CAAC;AACrD,YAAY,EAAE,gBAAgB,EAAE,UAAU,EAAE,MAAM,kCAAkC,CAAC;AAGrF,OAAO,EAAE,aAAa,EAAE,cAAc,EAAE,SAAS,EAAE,MAAM,+BAA+B,CAAC;AACzF,OAAO,EACL,WAAW,EAAE,SAAS,EACtB,aAAa,IAAI,gBAAgB,EACjC,iBAAiB,EAAE,gBAAgB,EACnC,iBAAiB,EACjB,SAAS,EAAE,gBAAgB,GAC5B,MAAM,8BAA8B,CAAC;AACtC,OAAO,EAAE,aAAa,EAAE,MAAM,+BAA+B,CAAC;AAE9D,OAAO,EAAE,SAAS,EAAE,wBAAwB,EAAE,MAAM,2BAA2B,CAAC;AAChF,OAAO,EAAE,gBAAgB,EAAE,+BAA+B,EAAE,MAAM,6BAA6B,CAAC;AAChG,YAAY,EAAE,WAAW,EAAE,MAAM,6BAA6B,CAAC;AAC/D,OAAO,EAAE,qBAAqB,EAAE,mBAAmB,EAAE,uBAAuB,EAAE,0CAA0C,EAAE,MAAM,+BAA+B,CAAC;AAChK,OAAO,EAAE,aAAa,EAAE,gBAAgB,EAAE,MAAM,+BAA+B,CAAC;AAChF,YAAY,EAAE,eAAe,EAAE,MAAM,+BAA+B,CAAC;AAKrE,OAAO,KAAK,GAAG,MAAM,YAAY,CAAC;AAClC,OAAO,EAAE,GAAG,IAAI,EAAE,EAAE,CAAC;AAKrB,YAAY,EAAE,OAAO,EAAE,QAAQ,EAAE,eAAe,EAAE,UAAU,EAAE,WAAW,EAAE,SAAS,EAAE,mBAAmB,EAAE,QAAQ,EAAE,MAAM,qBAAqB,CAAC;AACjJ,OAAO,EAAE,uBAAuB,EAAE,iBAAiB,EAAE,mBAAmB,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;AAGxH,OAAO,EAAE,oBAAoB,EAAE,MAAM,sBAAsB,CAAC;AAC5D,YAAY,EAAE,0BAA0B,EAAE,6BAA6B,EAAE,YAAY,EAAE,MAAM,4BAA4B,CAAC;AAC1H,YAAY,EAAE,mBAAmB,EAAE,iBAAiB,EAAE,oBAAoB,EAAE,MAAM,oBAAoB,CAAC;AACvG,OAAO,EAAE,oBAAoB,EAAE,MAAM,+BAA+B,CAAC;AACrE,OAAO,EAAE,qBAAqB,EAAE,qBAAqB,EAAE,MAAM,uBAAuB,CAAC;AACrF,OAAO,EAAE,cAAc,EAAE,2BAA2B,EAAE,6BAA6B,EAAE,MAAM,2BAA2B,CAAC;AAGvH,OAAO,EAAE,iBAAiB,EAAE,kBAAkB,EAAE,MAAM,oBAAoB,CAAC;AAC3E,YAAY,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AACxD,OAAO,EAAE,cAAc,EAAE,MAAM,8BAA8B,CAAC;AAC9D,OAAO,EAAE,sBAAsB,EAAE,MAAM,+BAA+B,CAAC;AACvE,OAAO,EAAE,mBAAmB,EAAE,MAAM,sBAAsB,CAAC;AAC3D,YAAY,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC;AAI5D,OAAO,EAAE,UAAU,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AACjE,YAAY,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AAG3D,OAAO,EACL,qBAAqB,EACrB,wBAAwB,EACxB,2BAA2B,GAC5B,MAAM,sCAAsC,CAAC;AAC9C,YAAY,EACV,4BAA4B,EAC5B,sBAAsB,EACtB,oBAAoB,GACrB,MAAM,sCAAsC,CAAC;AAG9C,OAAO,EAAE,WAAW,EAAE,MAAM,WAAW,CAAC;AAKxC,OAAO,EACL,UAAU,EACV,kBAAkB,EAClB,cAAc,EACd,oBAAoB,EACpB,OAAO,EACP,mBAAmB,EACnB,cAAc,EACd,cAAc,EACd,qBAAqB,GACtB,MAAM,cAAc,CAAC;AACtB,YAAY,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAChD,OAAO,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AACnD,OAAO,EAAE,UAAU,EAAE,MAAM,sBAAsB,CAAC;AAClD,OAAO,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAC;AAKpD,OAAO,EACL,YAAY,EACZ,iBAAiB,EACjB,uBAAuB,EACvB,wBAAwB,EACxB,wBAAwB,EACxB,qBAAqB,GACtB,MAAM,WAAW,CAAC;AACnB,YAAY,EAAE,iBAAiB,EAAE,MAAM,WAAW,CAAC;AACnD,OAAO,EAAE,aAAa,EAAE,cAAc,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAC1E,YAAY,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC"}

package/dist/index.js

@@ -0,0 +1,51 @@
+// Framework — check definition API
+export { defineCheck } from './framework/define-check.js';
+export { CheckRegistry, defaultRegistry } from './framework/registry.js';
+export { registerChecks } from './framework/register-helpers.js';
+export { isCheck } from './framework/check-types.js';
+// Framework utilities used by checks
+export { getLineNumber, extractSnippet, isAPIFile } from './framework/result-builder.js';
+export { parseSource, walkNodes, getLineNumber as getASTLineNumber, getIdentifierName, getPropertyChain, isInStringLiteral, isLiteral, isPropertyAccess, } from './framework/ast-utilities.js';
+export { execAbortable } from './framework/abortable-exec.js';
+// File cache (used by checks for content access; tests may seed/clear).
+export { fileCache, DEFAULT_PREWARM_PATTERNS } from './framework/file-cache.js';
+export { buildImportGraph, findStronglyConnectedComponents } from './framework/import-graph.js';
+export { isInsideStringLiteral, stripStringLiterals, stripStringsAndComments, stripStringsAndCommentsPreservingPositions } from './framework/strip-literals.js';
+export { filterContent, clearFilterCache } from './framework/content-filter.js';
+// Re-export TypeScript compiler API for AST-based checks. The typescript module
+// uses `export =`, so `export * as ts from 'typescript'` is invalid; the
+// import-then-rename-export form works under esModuleInterop.
+/* eslint-disable unicorn/prefer-export-from -- `export * as ts from 'typescript'` is invalid (the module uses `export =`); the namespace import + named export is the only working shape */
+import * as _ts from 'typescript';
+export { _ts as ts };
+export { createResultWithSignals, createErrorResult, createPassingResult, CheckInfoFactory } from './types/findings.js';
+// Recipe service
+export { FitnessRecipeService } from './recipes/service.js';
+export { builtInRecipesByName } from './recipes/built-in-recipes.js';
+export { defaultRecipeRegistry, FitnessRecipeRegistry } from './recipes/registry.js';
+export { getCheckConfig, setCurrentRecipeCheckConfig, clearCurrentRecipeCheckConfig } from './recipes/check-config.js';
+// Targets and signalers
+export { loadTargetsConfig, resolveTargetFiles } from './targets/index.js';
+export { TargetRegistry } from './targets/target-registry.js';
+export { buildScopeBasedFileMap } from './framework/scope-resolver.js';
+export { loadSignalersConfig } from './signalers/index.js';
+// Plugin loader (fitness owns the dispatcher; lang plugins also flow through
+// it because lang adapter loading currently shares the same orchestration).
+export { loadPlugin, loadAllPlugins } from './plugins/loader.js';
+// Check-package discovery (fitness-specific — scans @opensip-tools/checks-* packages).
+export { discoverCheckPackages, readCheckPackageMetadata, readCheckPackagePreferences, } from './plugins/check-package-discovery.js';
+// Tool plugin export — fitness as a Tool.
+export { fitnessTool } from './tool.js';
+// CLI command implementations — re-exported for the Phase 2 CLI which
+// still drives commands directly. Phase 4 will collapse these behind
+// the Tool contract.
+export { executeFit, ensureChecksLoaded, getDisplayName, getEnabledCheckCount, getIcon, getPluginLoadErrors, setPreLoadHook, formatDuration, formatValidatedColumn, } from './cli/fit.js';
+export { openDashboard } from './cli/dashboard.js';
+export { listChecks } from './cli/list-checks.js';
+export { listRecipes } from './cli/list-recipes.js';
+// Architecture-gate primitives (baseline save / compare) and SARIF
+// upload — both operate on fitness's CliOutput. Wired into the `fit`
+// subcommand by the tool's register() handler.
+export { saveBaseline, compareToBaseline, renderGateCompareOutput, GateBaselineMissingError, GateBaselineInvalidError, DEFAULT_BASELINE_PATH, } from './gate.js';
+export { buildSarifLog, chunkSarifRuns, reportToCloud } from './sarif.js';
+//# sourceMappingURL=index.js.map