@reneturcios/hookcheck 0.1.13 → 0.1.15

package/dist/types.d.ts

@@ -20,6 +20,17 @@ export interface HookFinding {
     command: string;
     /** 1-based line number of the hook inside its file, when known (workflow run steps). */
     line?: number;
+    /**
+     * Aggregation (P-070, v0.1.15): when at least 3 identical SAFE
+     * findings (same file, source, hook, command, rules, and evidence)
+     * repeat, they collapse into one aggregate record carrying count
+     * (the number of findings folded into it) and lastLine (the line
+     * of the last folded finding; line keeps the first). Only SAFE
+     * findings are ever aggregated. Absent on ordinary findings.
+     */
+    count?: number;
+    /** Line of the last finding folded into an aggregate record. */
+    lastLine?: number;
     classification: Classification;
     /** Rule ids that fired, e.g. ["NET-FETCH", "CRED-ACCESS"]. Empty for SAFE. */
     rules: string[];
@@ -36,6 +47,20 @@ export interface ScanReport {
         risky: number;
         unknown: number;
     };
+    /**
+     * Aggregation summary (P-070, v0.1.15), present only when at
+     * least one group of identical SAFE findings was collapsed.
+     * counts reflect the reported records; findingsBeforeAggregation
+     * preserves the full inventory total, and the verdict was
+     * computed on that full inventory before aggregation. The note
+     * states the collapse in words so it is never silent.
+     */
+    aggregation?: {
+        findingsBeforeAggregation: number;
+        aggregateRecords: number;
+        collapsedFindings: number;
+        note: string;
+    };
     warnings: string[];
     scannedAt: string;
     /**

package/package.json

@@ -37,5 +37,5 @@
     "test": "tsx --test test/*.test.ts"
   },
   "type": "module",
-  "version": "0.1.13"
+  "version": "0.1.15"
 }

package/server.json

@@ -17,7 +17,7 @@
       "transport": {
         "type": "stdio"
       },
-      "version": "0.1.13"
+      "version": "0.1.15"
     },
     {
       "identifier": "ghcr.io/cloudcorprecords/hookcheck:0.1.3",
@@ -48,5 +48,5 @@
     "source": "github",
     "url": "https://github.com/CloudCorpRecords/hookcheck"
   },
-  "version": "0.1.13"
+  "version": "0.1.15"
 }