@promptci/core 0.0.1

package/dist/baseline.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"baseline.d.ts","sourceRoot":"","sources":["../src/baseline.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAiB,aAAa,EAAiB,QAAQ,EAAE,MAAM,YAAY,CAAC;AA4ExF;;;;;;;;;;;GAWG;AACH,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,aAAa,EAAE,QAAQ,CAAC,EAAE,MAAM,GAAG,MAAM,CAgBlF;AAID;;;GAGG;AACH,wBAAgB,cAAc,CAAC,MAAM,EAAE,aAAa,EAAE,EAAE,QAAQ,CAAC,EAAE,MAAM,GAAG,QAAQ,CAWnF;AAID;;;GAGG;AACH,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO,CAAC,KAAK,IAAI,QAAQ,CAiB7E;AAID;;;;;;;;;;GAUG;AACH,wBAAgB,eAAe,CAC7B,MAAM,EAAE,aAAa,EAAE,EACvB,QAAQ,EAAE,QAAQ,EAClB,QAAQ,CAAC,EAAE,MAAM,GAChB;IAAE,SAAS,EAAE,aAAa,EAAE,CAAC;IAAC,eAAe,EAAE,aAAa,EAAE,CAAA;CAAE,CA2BlE"}

package/dist/baseline.js

@@ -0,0 +1,172 @@
+import * as crypto from 'node:crypto';
+import * as path from 'node:path';
+/**
+ * Baseline & Ratchet Support
+ *
+ * Provides stable fingerprinting of issues and filtering logic so CI can fail
+ * only on new or worsened issues — not pre-existing noise.
+ *
+ * Baseline file: `.promptci/baseline.json`
+ * Format: `BaselineEntry[]`
+ *
+ * Fingerprint stability contract:
+ *  - Based on category + title + sorted file paths + sorted evidence.
+ *  - Line numbers are excluded so minor file edits do not break the baseline.
+ *  - Severity is stored separately and checked for worsening.
+ */
+// ── Severity ordering ─────────────────────────────────────────────────────────
+const SEVERITY_ORDER = {
+    info: 0,
+    warning: 1,
+    high: 2,
+    critical: 3,
+};
+function severityValue(s) {
+    return SEVERITY_ORDER[s] ?? -1;
+}
+function normalizeSlashes(value) {
+    return value.replace(/\\/g, '/');
+}
+function normalizePathForRoot(filePath, repoRoot) {
+    if (!repoRoot)
+        return filePath;
+    try {
+        const relative = path.relative(repoRoot, filePath);
+        if (relative && !relative.startsWith('..') && !path.isAbsolute(relative)) {
+            return normalizeSlashes(relative);
+        }
+    }
+    catch {
+        // Fall through to string normalization for unusual path formats.
+    }
+    const normalizedPath = normalizeSlashes(filePath);
+    const rootCandidates = [
+        normalizeSlashes(repoRoot).replace(/\/+$/, ''),
+        normalizeSlashes(path.resolve(repoRoot)).replace(/\/+$/, ''),
+    ];
+    for (const normalizedRoot of rootCandidates) {
+        if (normalizedPath === normalizedRoot)
+            return '.';
+        if (normalizedPath.startsWith(`${normalizedRoot}/`)) {
+            return normalizedPath.slice(normalizedRoot.length + 1);
+        }
+    }
+    return normalizedPath;
+}
+function normalizeEvidenceForRoot(evidence, repoRoot) {
+    if (!repoRoot)
+        return evidence;
+    const normalizedEvidence = normalizeSlashes(evidence);
+    const rootCandidates = [
+        normalizeSlashes(repoRoot).replace(/\/+$/, ''),
+        normalizeSlashes(path.resolve(repoRoot)).replace(/\/+$/, ''),
+    ];
+    return rootCandidates.reduce((current, normalizedRoot) => current.replaceAll(normalizedRoot, '<repo>'), normalizedEvidence);
+}
+// ── Fingerprinting ────────────────────────────────────────────────────────────
+/**
+ * Computes a stable fingerprint for an issue.
+ *
+ * Excluded from fingerprint:
+ *  - `id` (may change between versions)
+ *  - `severity` (tracked separately for worsening detection)
+ *  - `locations` / line numbers (unstable across minor file edits)
+ *  - `confidence` (heuristic, may fluctuate)
+ *
+ * Included:
+ *  - `category`, `title`, sorted `filePaths`, sorted `evidence`
+ */
+export function computeFingerprint(issue, repoRoot) {
+    const normalizedFilePaths = issue.filePaths
+        .map((filePath) => normalizePathForRoot(filePath, repoRoot))
+        .sort();
+    const normalizedEvidence = issue.evidence
+        .map((evidence) => normalizeEvidenceForRoot(evidence, repoRoot))
+        .sort();
+    const content = [
+        issue.category,
+        issue.title,
+        ...normalizedFilePaths,
+        ...normalizedEvidence,
+    ].join('|');
+    return crypto.createHash('sha256').update(content).digest('hex');
+}
+// ── Baseline creation ─────────────────────────────────────────────────────────
+/**
+ * Creates a baseline from a list of active issues.
+ * Produces deterministic JSON when sorted by fingerprint.
+ */
+export function createBaseline(issues, repoRoot) {
+    return issues
+        .map((issue) => ({
+        id: issue.id,
+        category: issue.category,
+        title: issue.title,
+        filePaths: issue.filePaths.map((filePath) => normalizePathForRoot(filePath, repoRoot)).sort(),
+        severity: issue.severity,
+        fingerprint: computeFingerprint(issue, repoRoot),
+    }))
+        .sort((a, b) => a.fingerprint.localeCompare(b.fingerprint));
+}
+// ── Baseline validation ───────────────────────────────────────────────────────
+/**
+ * Type-guard that asserts a parsed JSON value is a valid Baseline array.
+ * Throws a descriptive error if the shape is unexpected.
+ */
+export function assertValidBaseline(value) {
+    if (!Array.isArray(value)) {
+        throw new Error('Baseline file must contain a JSON array.');
+    }
+    for (let i = 0; i < value.length; i++) {
+        const entry = value[i];
+        if (typeof entry !== 'object' || entry === null) {
+            throw new Error(`Baseline entry at index ${i} is not an object.`);
+        }
+        const e = entry;
+        if (typeof e['fingerprint'] !== 'string') {
+            throw new Error(`Baseline entry at index ${i} is missing a "fingerprint" string field.`);
+        }
+        if (typeof e['category'] !== 'string') {
+            throw new Error(`Baseline entry at index ${i} is missing a "category" string field.`);
+        }
+    }
+}
+// ── Filtering ─────────────────────────────────────────────────────────────────
+/**
+ * Partitions a list of active issues into new and baselined issues.
+ *
+ * An issue is considered NEW (not baselined) if:
+ *  - Its fingerprint is not in the baseline, OR
+ *  - Its fingerprint IS in the baseline but its severity has worsened
+ *    (e.g. was `warning`, now `high`).
+ *
+ * Issues with the same fingerprint and equal-or-lesser severity are
+ * considered baselined (pre-existing) and do not fail `--fail-on-new` CI.
+ */
+export function filterNewIssues(issues, baseline, repoRoot) {
+    // Build a map from fingerprint → baseline severity for worsening checks
+    const baselineMap = new Map();
+    for (const entry of baseline) {
+        baselineMap.set(entry.fingerprint, entry.severity ?? 'info');
+    }
+    const newIssues = [];
+    const baselinedIssues = [];
+    for (const issue of issues) {
+        const fp = computeFingerprint(issue, repoRoot);
+        const baselinedSeverity = baselineMap.get(fp);
+        if (baselinedSeverity === undefined) {
+            // Not in baseline at all → new
+            newIssues.push(issue);
+        }
+        else if (severityValue(issue.severity) > severityValue(baselinedSeverity)) {
+            // Severity worsened → treat as new/worsened
+            newIssues.push(issue);
+        }
+        else {
+            // Same or reduced severity → pre-existing
+            baselinedIssues.push(issue);
+        }
+    }
+    return { newIssues, baselinedIssues };
+}
+//# sourceMappingURL=baseline.js.map

package/dist/baseline.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"baseline.js","sourceRoot":"","sources":["../src/baseline.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,MAAM,aAAa,CAAC;AACtC,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAGlC;;;;;;;;;;;;;GAaG;AAEH,iFAAiF;AAEjF,MAAM,cAAc,GAAkC;IACpD,IAAI,EAAE,CAAC;IACP,OAAO,EAAE,CAAC;IACV,IAAI,EAAE,CAAC;IACP,QAAQ,EAAE,CAAC;CACZ,CAAC;AAEF,SAAS,aAAa,CAAC,CAAS;IAC9B,OAAO,cAAc,CAAC,CAAkB,CAAC,IAAI,CAAC,CAAC,CAAC;AAClD,CAAC;AAED,SAAS,gBAAgB,CAAC,KAAa;IACrC,OAAO,KAAK,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;AACnC,CAAC;AAED,SAAS,oBAAoB,CAAC,QAAgB,EAAE,QAAiB;IAC/D,IAAI,CAAC,QAAQ;QAAE,OAAO,QAAQ,CAAC;IAE/B,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;QACnD,IAAI,QAAQ,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;YACzE,OAAO,gBAAgB,CAAC,QAAQ,CAAC,CAAC;QACpC,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,iEAAiE;IACnE,CAAC;IAED,MAAM,cAAc,GAAG,gBAAgB,CAAC,QAAQ,CAAC,CAAC;IAClD,MAAM,cAAc,GAAG;QACrB,gBAAgB,CAAC,QAAQ,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC;QAC9C,gBAAgB,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC;KAC7D,CAAC;IACF,KAAK,MAAM,cAAc,IAAI,cAAc,EAAE,CAAC;QAC5C,IAAI,cAAc,KAAK,cAAc;YAAE,OAAO,GAAG,CAAC;QAClD,IAAI,cAAc,CAAC,UAAU,CAAC,GAAG,cAAc,GAAG,CAAC,EAAE,CAAC;YACpD,OAAO,cAAc,CAAC,KAAK,CAAC,cAAc,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;QACzD,CAAC;IACH,CAAC;IACD,OAAO,cAAc,CAAC;AACxB,CAAC;AAED,SAAS,wBAAwB,CAAC,QAAgB,EAAE,QAAiB;IACnE,IAAI,CAAC,QAAQ;QAAE,OAAO,QAAQ,CAAC;IAE/B,MAAM,kBAAkB,GAAG,gBAAgB,CAAC,QAAQ,CAAC,CAAC;IACtD,MAAM,cAAc,GAAG;QACrB,gBAAgB,CAAC,QAAQ,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC;QAC9C,gBAAgB,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC;KAC7D,CAAC;IACF,OAAO,cAAc,CAAC,MAAM,CAC1B,CAAC,OAAO,EAAE,cAAc,EAAE,EAAE,CAAC,OAAO,CAAC,UAAU,CAAC,cAAc,EAAE,QAAQ,CAAC,EACzE,kBAAkB,CACnB,CAAC;AACJ,CAAC;AAED,iFAAiF;AAEjF;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,kBAAkB,CAAC,KAAoB,EAAE,QAAiB;IACxE,MAAM,mBAAmB,GAAG,KAAK,CAAC,SAAS;SACxC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,oBAAoB,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;SAC3D,IAAI,EAAE,CAAC;IACV,MAAM,kBAAkB,GAAG,KAAK,CAAC,QAAQ;SACtC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,wBAAwB,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;SAC/D,IAAI,EAAE,CAAC;IAEV,MAAM,OAAO,GAAG;QACd,KAAK,CAAC,QAAQ;QACd,KAAK,CAAC,KAAK;QACX,GAAG,mBAAmB;QACtB,GAAG,kBAAkB;KACtB,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAEZ,OAAO,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AACnE,CAAC;AAED,iFAAiF;AAEjF;;;GAGG;AACH,MAAM,UAAU,cAAc,CAAC,MAAuB,EAAE,QAAiB;IACvE,OAAO,MAAM;SACV,GAAG,CAAC,CAAC,KAAK,EAAiB,EAAE,CAAC,CAAC;QAC9B,EAAE,EAAE,KAAK,CAAC,EAAE;QACZ,QAAQ,EAAE,KAAK,CAAC,QAAQ;QACxB,KAAK,EAAE,KAAK,CAAC,KAAK;QAClB,SAAS,EAAE,KAAK,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,oBAAoB,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC,CAAC,IAAI,EAAE;QAC7F,QAAQ,EAAE,KAAK,CAAC,QAAQ;QACxB,WAAW,EAAE,kBAAkB,CAAC,KAAK,EAAE,QAAQ,CAAC;KACjD,CAAC,CAAC;SACF,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,CAAC,aAAa,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC;AAChE,CAAC;AAED,iFAAiF;AAEjF;;;GAGG;AACH,MAAM,UAAU,mBAAmB,CAAC,KAAc;IAChD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QAC1B,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC;IAC9D,CAAC;IACD,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACtC,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;QACvB,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;YAChD,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,oBAAoB,CAAC,CAAC;QACpE,CAAC;QACD,MAAM,CAAC,GAAG,KAAgC,CAAC;QAC3C,IAAI,OAAO,CAAC,CAAC,aAAa,CAAC,KAAK,QAAQ,EAAE,CAAC;YACzC,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,2CAA2C,CAAC,CAAC;QAC3F,CAAC;QACD,IAAI,OAAO,CAAC,CAAC,UAAU,CAAC,KAAK,QAAQ,EAAE,CAAC;YACtC,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,wCAAwC,CAAC,CAAC;QACxF,CAAC;IACH,CAAC;AACH,CAAC;AAED,iFAAiF;AAEjF;;;;;;;;;;GAUG;AACH,MAAM,UAAU,eAAe,CAC7B,MAAuB,EACvB,QAAkB,EAClB,QAAiB;IAEjB,wEAAwE;IACxE,MAAM,WAAW,GAAG,IAAI,GAAG,EAAkB,CAAC;IAC9C,KAAK,MAAM,KAAK,IAAI,QAAQ,EAAE,CAAC;QAC7B,WAAW,CAAC,GAAG,CAAC,KAAK,CAAC,WAAW,EAAE,KAAK,CAAC,QAAQ,IAAI,MAAM,CAAC,CAAC;IAC/D,CAAC;IAED,MAAM,SAAS,GAAoB,EAAE,CAAC;IACtC,MAAM,eAAe,GAAoB,EAAE,CAAC;IAE5C,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,MAAM,EAAE,GAAG,kBAAkB,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;QAC/C,MAAM,iBAAiB,GAAG,WAAW,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAE9C,IAAI,iBAAiB,KAAK,SAAS,EAAE,CAAC;YACpC,+BAA+B;YAC/B,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACxB,CAAC;aAAM,IAAI,aAAa,CAAC,KAAK,CAAC,QAAQ,CAAC,GAAG,aAAa,CAAC,iBAAiB,CAAC,EAAE,CAAC;YAC5E,4CAA4C;YAC5C,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACxB,CAAC;aAAM,CAAC;YACN,0CAA0C;YAC1C,eAAe,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC9B,CAAC;IACH,CAAC;IAED,OAAO,EAAE,SAAS,EAAE,eAAe,EAAE,CAAC;AACxC,CAAC"}

package/dist/canonical-owner.d.ts

@@ -0,0 +1,3 @@
+import type { InstructionFile, PromptCiIssue } from './types.js';
+export declare function detectCanonicalOwner(files: InstructionFile[]): PromptCiIssue[];
+//# sourceMappingURL=canonical-owner.d.ts.map

package/dist/canonical-owner.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"canonical-owner.d.ts","sourceRoot":"","sources":["../src/canonical-owner.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,eAAe,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAcjE,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,eAAe,EAAE,GAAG,aAAa,EAAE,CAsI9E"}

package/dist/canonical-owner.js

@@ -0,0 +1,131 @@
+import * as crypto from 'node:crypto';
+import * as path from 'node:path';
+/**
+ * Canonical Owner and Forwarding Detector.
+ */
+const AUTHORITY_PHRASES = [
+    /canonical\s+(?:source\s+of\s+truth|instruction|guidance)/i,
+    /authoritative\s+(?:source|instruction|guidance)/i,
+    /primary\s+(?:source\s+of\s+truth|instruction|guidance)/i,
+    /source\s+of\s+truth\s+for\s+all\s+agents/i,
+    /master\s+instruction\s+file/i,
+];
+export function detectCanonicalOwner(files) {
+    if (files.length === 0)
+        return [];
+    const issues = [];
+    const filesWithAuthority = [];
+    for (const file of files) {
+        if (AUTHORITY_PHRASES.some((re) => re.test(file.content))) {
+            filesWithAuthority.push(file);
+        }
+    }
+    function issueId(name) {
+        const hash = crypto.createHash('sha1').update(name).digest('hex').slice(0, 12);
+        return `canonical-${name}-${hash}`;
+    }
+    if (filesWithAuthority.length > 1) {
+        issues.push({
+            id: issueId('ambiguous-authority'),
+            severity: 'warning',
+            category: 'structure',
+            title: 'Ambiguous authority: multiple files claim to be canonical',
+            summary: `Multiple files (${filesWithAuthority.map((f) => path.basename(f.path)).join(', ')}) ` +
+                `claim to be the "canonical" or "authoritative" source of truth. ` +
+                `This leads to confusion about which instructions take precedence.`,
+            filePaths: filesWithAuthority.map((f) => f.path),
+            locations: filesWithAuthority.map((f) => ({ filePath: f.path })),
+            // CO1: extract evidence from the SAME whole-content match the gate
+            // used, instead of re-scanning line-by-line. The gate tests against
+            // `\s`-containing patterns (e.g. "canonical\s+source of truth"), and
+            // `\s` matches newlines — so a phrase wrapped across two lines
+            // ("canonical\nsource of truth") passes the gate but no SINGLE line
+            // contains the whole phrase, so `lines.find(...)` returned `undefined`
+            // and evidence literally rendered the string "undefined".
+            evidence: filesWithAuthority.map((f) => {
+                let matchText;
+                for (const re of AUTHORITY_PHRASES) {
+                    const m = re.exec(f.content);
+                    if (m) {
+                        matchText = m[0];
+                        break;
+                    }
+                }
+                const snippet = (matchText ?? '').replace(/\s+/g, ' ').trim();
+                return `${path.basename(f.path)}: "${snippet}"`;
+            }),
+            recommendation: 'Designate ONE file (usually AGENTS.md) as the canonical source. ' +
+                'Other files should use forwarding pointers and only contain tool-specific reminders.',
+            confidence: 0.9,
+        });
+    }
+    const agentsFile = files.find((f) => path.basename(f.path).toLowerCase() === 'agents.md');
+    const primaryCanonical = agentsFile || filesWithAuthority[0];
+    if (primaryCanonical) {
+        const getSectionBody = (text) => {
+            const lines = text.split('\n');
+            if (lines.length > 0 && lines[0].trim().startsWith('#')) {
+                return lines.slice(1).join('\n').trim();
+            }
+            return text.trim();
+        };
+        for (const file of files) {
+            if (file === primaryCanonical)
+                continue;
+            const baseName = path.basename(file.path).toLowerCase();
+            const normalizedPath = file.path.replace(/\\/g, '/').toLowerCase();
+            const isToolSpecific = baseName === 'claude.md' ||
+                baseName === '.cursorrules' ||
+                normalizedPath.includes('/.claude/') ||
+                normalizedPath.includes('/.cursor/rules/') ||
+                normalizedPath.includes('/.github/copilot-instructions.md') ||
+                normalizedPath.includes('/.github/instructions/');
+            if (!isToolSpecific)
+                continue;
+            if (file.lineCount > 50) {
+                for (const section of file.sections) {
+                    if (section.endLine - section.startLine > 50) {
+                        const isDuplicate = primaryCanonical.sections.some((s) => {
+                            const sBody = getSectionBody(s.text).toLowerCase().replace(/\s+/g, ' ').trim();
+                            const sectBody = getSectionBody(section.text).toLowerCase().replace(/\s+/g, ' ').trim();
+                            return (sBody === sectBody ||
+                                (sBody.length > 500 && sBody.slice(0, 500) === sectBody.slice(0, 500)));
+                        });
+                        if (isDuplicate) {
+                            // CO2 / B1: agent-practices.ts independently derives an id from
+                            // the exact same `behavior-duplication:${filePath}` hash input
+                            // for a conceptually similar finding — the two detectors
+                            // collide on id for the same file. Namespaced per-detector
+                            // (mirroring the fix on the agent-practices.ts side) so ids
+                            // stay distinct even for the same file path; the public id
+                            // PREFIX is unchanged.
+                            const hash = crypto.createHash('sha1').update(`canonical-owner:behavior-duplication:${file.path}`).digest('hex').slice(0, 12);
+                            const canonicalLabel = path.basename(primaryCanonical.path);
+                            const duplicateTokens = Math.round(section.text.length / 4);
+                            issues.push({
+                                id: `behavior-duplication-${hash}`,
+                                severity: 'info',
+                                category: 'duplicate',
+                                title: 'Large duplicated behavior in tool-specific file',
+                                summary: `The ${baseName} contains a large section (> 50 lines) that appears to be ` +
+                                    `duplicated from ${canonicalLabel}. This can lead to instruction drift.`,
+                                filePaths: [file.path, primaryCanonical.path],
+                                locations: [{ filePath: file.path, startLine: section.startLine, endLine: section.endLine }],
+                                evidence: [
+                                    `Section "${section.heading ?? 'Untitled'}" is near-identical to one in ${canonicalLabel}`,
+                                    `Duplicate size: ~${duplicateTokens} tokens`,
+                                ],
+                                recommendation: `Consider moving shared rules to ${canonicalLabel} and using ` +
+                                    `a forwarding pointer (e.g., "Follow ${canonicalLabel}") to save ~${duplicateTokens} tokens per session.`,
+                                confidence: 0.8,
+                            });
+                            break;
+                        }
+                    }
+                }
+            }
+        }
+    }
+    return issues;
+}
+//# sourceMappingURL=canonical-owner.js.map

package/dist/canonical-owner.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"canonical-owner.js","sourceRoot":"","sources":["../src/canonical-owner.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,MAAM,aAAa,CAAC;AACtC,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAGlC;;GAEG;AAEH,MAAM,iBAAiB,GAAG;IACxB,2DAA2D;IAC3D,kDAAkD;IAClD,yDAAyD;IACzD,2CAA2C;IAC3C,8BAA8B;CAC/B,CAAC;AAEF,MAAM,UAAU,oBAAoB,CAAC,KAAwB;IAC3D,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IAElC,MAAM,MAAM,GAAoB,EAAE,CAAC;IACnC,MAAM,kBAAkB,GAAsB,EAAE,CAAC;IAEjD,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,IAAI,iBAAiB,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC;YAC1D,kBAAkB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAChC,CAAC;IACH,CAAC;IAED,SAAS,OAAO,CAAC,IAAY;QAC3B,MAAM,IAAI,GAAG,MAAM,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QAC/E,OAAO,aAAa,IAAI,IAAI,IAAI,EAAE,CAAC;IACrC,CAAC;IAED,IAAI,kBAAkB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAClC,MAAM,CAAC,IAAI,CAAC;YACV,EAAE,EAAE,OAAO,CAAC,qBAAqB,CAAC;YAClC,QAAQ,EAAE,SAAS;YACnB,QAAQ,EAAE,WAAW;YACrB,KAAK,EAAE,2DAA2D;YAClE,OAAO,EACL,mBAAmB,kBAAkB,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI;gBACtF,kEAAkE;gBAClE,mEAAmE;YACrE,SAAS,EAAE,kBAAkB,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;YAChD,SAAS,EAAE,kBAAkB,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;YAChE,mEAAmE;YACnE,oEAAoE;YACpE,qEAAqE;YACrE,+DAA+D;YAC/D,oEAAoE;YACpE,uEAAuE;YACvE,0DAA0D;YAC1D,QAAQ,EAAE,kBAAkB,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;gBACrC,IAAI,SAA6B,CAAC;gBAClC,KAAK,MAAM,EAAE,IAAI,iBAAiB,EAAE,CAAC;oBACnC,MAAM,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;oBAC7B,IAAI,CAAC,EAAE,CAAC;wBACN,SAAS,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;wBACjB,MAAM;oBACR,CAAC;gBACH,CAAC;gBACD,MAAM,OAAO,GAAG,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;gBAC9D,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,OAAO,GAAG,CAAC;YAClD,CAAC,CAAC;YACF,cAAc,EACZ,kEAAkE;gBAClE,sFAAsF;YACxF,UAAU,EAAE,GAAG;SAChB,CAAC,CAAC;IACL,CAAC;IAED,MAAM,UAAU,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE,KAAK,WAAW,CAAC,CAAC;IAC1F,MAAM,gBAAgB,GAAG,UAAU,IAAI,kBAAkB,CAAC,CAAC,CAAC,CAAC;IAE7D,IAAI,gBAAgB,EAAE,CAAC;QACrB,MAAM,cAAc,GAAG,CAAC,IAAY,EAAU,EAAE;YAC9C,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YAC/B,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,IAAI,KAAK,CAAC,CAAC,CAAE,CAAC,IAAI,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;gBACzD,OAAO,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC;YAC1C,CAAC;YACD,OAAO,IAAI,CAAC,IAAI,EAAE,CAAC;QACrB,CAAC,CAAC;QAEF,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,IAAI,IAAI,KAAK,gBAAgB;gBAAE,SAAS;YAExC,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE,CAAC;YACxD,MAAM,cAAc,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,WAAW,EAAE,CAAC;YACnE,MAAM,cAAc,GAAG,QAAQ,KAAK,WAAW;gBAC7C,QAAQ,KAAK,cAAc;gBAC3B,cAAc,CAAC,QAAQ,CAAC,WAAW,CAAC;gBACpC,cAAc,CAAC,QAAQ,CAAC,iBAAiB,CAAC;gBAC1C,cAAc,CAAC,QAAQ,CAAC,kCAAkC,CAAC;gBAC3D,cAAc,CAAC,QAAQ,CAAC,wBAAwB,CAAC,CAAC;YAEpD,IAAI,CAAC,cAAc;gBAAE,SAAS;YAE9B,IAAI,IAAI,CAAC,SAAS,GAAG,EAAE,EAAE,CAAC;gBACxB,KAAK,MAAM,OAAO,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;oBACpC,IAAI,OAAO,CAAC,OAAO,GAAG,OAAO,CAAC,SAAS,GAAG,EAAE,EAAE,CAAC;wBAC7C,MAAM,WAAW,GAAG,gBAAgB,CAAC,QAAQ,CAAC,IAAI,CAChD,CAAC,CAAC,EAAE,EAAE;4BACJ,MAAM,KAAK,GAAG,cAAc,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;4BAC/E,MAAM,QAAQ,GAAG,cAAc,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;4BACxF,OAAO,CACL,KAAK,KAAK,QAAQ;gCAClB,CAAC,KAAK,CAAC,MAAM,GAAG,GAAG,IAAI,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,KAAK,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CACvE,CAAC;wBACJ,CAAC,CACF,CAAC;wBAEF,IAAI,WAAW,EAAE,CAAC;4BAChB,gEAAgE;4BAChE,+DAA+D;4BAC/D,yDAAyD;4BACzD,2DAA2D;4BAC3D,4DAA4D;4BAC5D,2DAA2D;4BAC3D,uBAAuB;4BACvB,MAAM,IAAI,GAAG,MAAM,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,wCAAwC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;4BAC9H,MAAM,cAAc,GAAG,IAAI,CAAC,QAAQ,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAC;4BAC5D,MAAM,eAAe,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;4BAC5D,MAAM,CAAC,IAAI,CAAC;gCACV,EAAE,EAAE,wBAAwB,IAAI,EAAE;gCAClC,QAAQ,EAAE,MAAM;gCAChB,QAAQ,EAAE,WAAW;gCACrB,KAAK,EAAE,iDAAiD;gCACxD,OAAO,EACL,OAAO,QAAQ,4DAA4D;oCAC3E,mBAAmB,cAAc,uCAAuC;gCAC1E,SAAS,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,gBAAgB,CAAC,IAAI,CAAC;gCAC7C,SAAS,EAAE,CAAC,EAAE,QAAQ,EAAE,IAAI,CAAC,IAAI,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,CAAC;gCAC5F,QAAQ,EAAE;oCACR,YAAY,OAAO,CAAC,OAAO,IAAI,UAAU,iCAAiC,cAAc,EAAE;oCAC1F,oBAAoB,eAAe,SAAS;iCAC7C;gCACD,cAAc,EACZ,mCAAmC,cAAc,aAAa;oCAC9D,uCAAuC,cAAc,eAAe,eAAe,sBAAsB;gCAC3G,UAAU,EAAE,GAAG;6BAChB,CAAC,CAAC;4BACH,MAAM;wBACR,CAAC;oBACH,CAAC;gBACH,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/cheap-model-routing.d.ts

@@ -0,0 +1,4 @@
+import type { RepoContext } from './repo-context.js';
+import type { PromptCiIssue } from './types.js';
+export declare function detectCheapModelRouting(context: RepoContext): PromptCiIssue[];
+//# sourceMappingURL=cheap-model-routing.d.ts.map

package/dist/cheap-model-routing.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cheap-model-routing.d.ts","sourceRoot":"","sources":["../src/cheap-model-routing.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AACrD,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAWhD,wBAAgB,uBAAuB,CAAC,OAAO,EAAE,WAAW,GAAG,aAAa,EAAE,CAsC7E"}

package/dist/cheap-model-routing.js

@@ -0,0 +1,43 @@
+const ROUTING_KEYWORDS = [
+    /\b(?:cheap|cheaper|smaller|cost-aware|routing)\b.*\b(?:model|models|route|routing)\b/i,
+    /\b(?:escalate\s+to|escalation\s+path|stronger\s+model|expensive\s+model)\b/i,
+    /\bgpt-4o-mini\b/i,
+    /\bclaude-3-5-haiku\b|\bhaiku\b/i,
+    /\bgemini-2\.5-flash\b|\bgemini\s+flash\b|\bflash\s+model\b/i,
+    /\bmodel\s+routing\b/i,
+];
+export function detectCheapModelRouting(context) {
+    const { files, metrics } = context;
+    if (files.length === 0) {
+        return [];
+    }
+    // Skip for small/simple repositories to avoid noise
+    if (metrics.estimatedInstructionTokens < 500) {
+        return [];
+    }
+    const combinedContent = files.map((f) => f.content).join('\n');
+    const hasRoutingMentions = ROUTING_KEYWORDS.some((pat) => pat.test(combinedContent));
+    if (!hasRoutingMentions) {
+        return [
+            {
+                id: 'cheap-model-routing-missing',
+                severity: 'info',
+                category: 'agent_practices',
+                title: 'Missing model routing guidance',
+                summary: 'No model routing guidelines found in instruction files. Using expensive frontier models for simple tasks (like linting or formatting) unnecessarily increases AI costs.',
+                filePaths: files.map((f) => f.path),
+                locations: [],
+                evidence: ['No mentions of cheaper models, model routing, or escalation conditions found in instructions.'],
+                recommendation: 'Add guidelines specifying when to use cheaper/smaller models (e.g. Gemini 2.5 Flash, GPT-4o-mini) versus escalating to stronger models.',
+                fixRecipe: [
+                    '### Model Routing Guidance',
+                    '- Use cheaper/smaller models (e.g. Gemini 2.5 Flash, GPT-4o-mini) for: formatting, linting, simple test additions, mechanical renames, and documentation updates.',
+                    '- Escalate to stronger models (e.g. Gemini 2.5 Pro, Claude 3.5 Sonnet) for: complex multi-file debugging, security-sensitive changes, and core architecture decisions.'
+                ].join('\n'),
+                confidence: 0.8,
+            },
+        ];
+    }
+    return [];
+}
+//# sourceMappingURL=cheap-model-routing.js.map

package/dist/cheap-model-routing.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cheap-model-routing.js","sourceRoot":"","sources":["../src/cheap-model-routing.ts"],"names":[],"mappings":"AAGA,MAAM,gBAAgB,GAAG;IACvB,uFAAuF;IACvF,6EAA6E;IAC7E,kBAAkB;IAClB,iCAAiC;IACjC,6DAA6D;IAC7D,sBAAsB;CACvB,CAAC;AAEF,MAAM,UAAU,uBAAuB,CAAC,OAAoB;IAC1D,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,GAAG,OAAO,CAAC;IAEnC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACvB,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,oDAAoD;IACpD,IAAI,OAAO,CAAC,0BAA0B,GAAG,GAAG,EAAE,CAAC;QAC7C,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,MAAM,eAAe,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC/D,MAAM,kBAAkB,GAAG,gBAAgB,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC,CAAC;IAErF,IAAI,CAAC,kBAAkB,EAAE,CAAC;QACxB,OAAO;YACL;gBACE,EAAE,EAAE,6BAA6B;gBACjC,QAAQ,EAAE,MAAM;gBAChB,QAAQ,EAAE,iBAAiB;gBAC3B,KAAK,EAAE,gCAAgC;gBACvC,OAAO,EAAE,yKAAyK;gBAClL,SAAS,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;gBACnC,SAAS,EAAE,EAAE;gBACb,QAAQ,EAAE,CAAC,+FAA+F,CAAC;gBAC3G,cAAc,EAAE,yIAAyI;gBACzJ,SAAS,EAAE;oBACT,4BAA4B;oBAC5B,mKAAmK;oBACnK,wKAAwK;iBACzK,CAAC,IAAI,CAAC,IAAI,CAAC;gBACZ,UAAU,EAAE,GAAG;aAChB;SACF,CAAC;IACJ,CAAC;IAED,OAAO,EAAE,CAAC;AACZ,CAAC"}

package/dist/ci-alignment.d.ts

@@ -0,0 +1,10 @@
+import type { RepoContext } from './repo-context.js';
+import type { PromptCiIssue } from './types.js';
+/**
+ * Entry point for the CI and Workflow Alignment detector.
+ *
+ * Returns an empty array when no workflow files exist so the detector never
+ * creates noise in repos without GitHub Actions.
+ */
+export declare function detectCiAlignment(context: RepoContext): PromptCiIssue[];
+//# sourceMappingURL=ci-alignment.d.ts.map

package/dist/ci-alignment.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ci-alignment.d.ts","sourceRoot":"","sources":["../src/ci-alignment.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,WAAW,EAAmB,MAAM,mBAAmB,CAAC;AACtE,OAAO,KAAK,EAAmB,aAAa,EAAE,MAAM,YAAY,CAAC;AAuWjE;;;;;GAKG;AACH,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,WAAW,GAAG,aAAa,EAAE,CAQvE"}