@sitecoreai-labs/sitecoreai-cli 0.0.4 → 0.1.0

package/dist/hygiene/index.js

@@ -0,0 +1,168 @@
+"use strict";
+/**
+ * Public entry for `@sitecoreai-labs/sitecoreai-cli/hygiene`.
+ *
+ * Hygiene = the audit + cleanup surface (`scai hygiene audit *`, `scai hygiene cleanup *`).
+ * Replaces the dotnet `Sitecore.DevEx dbcleanup` family with a typed,
+ * agent-friendly equivalent. See [[scai-content-hygiene-area]] for the
+ * design decisions.
+ *
+ * Three layers exposed here:
+ *
+ *   1. **API client** — `createHygieneApiClient` + the search/item/role/
+ *      user typed surface it wraps. Build your own task runner on top
+ *      of this if the bundled runners don't fit.
+ *   2. **Task runners** — the same runners the CLI commands call. One
+ *      per audit/cleanup, plus the suite/baseline/history wrappers.
+ *   3. **Output + baseline helpers** — JSON/CSV/Markdown formatting,
+ *      baseline diffing, history snapshots, field-cache.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.runAuditTranslationCoverage = exports.runAuditSlugConflicts = exports.runAuditBrokenImages = exports.runAuditStaleUsers = exports.runAuditEmptyRoles = exports.runAuditRoleBloat = exports.runAuditAltTextMissing = exports.runAuditMissingMeta = exports.runAuditHeavyTemplates = exports.runAuditLargeFields = exports.runCleanupFindReplace = exports.runAuditStaleContent = exports.runAuditFindReplace = exports.runCleanupVersionsArchive = exports.runCleanupSlugConflicts = exports.runCleanupDuplicates = exports.runCleanupDeadTemplates = exports.runCleanupArchivePurge = exports.runCleanupVersionsPrune = exports.runAuditPersonalizationBroken = exports.runAuditPageDesignOrphans = exports.runAuditEmptyItems = exports.runAuditDuplicates = exports.runAuditDatasourceMissing = exports.runAuditDeadTemplates = exports.runAuditLanguageData = exports.runAuditStaleWorkflow = exports.runAuditOrphans = exports.runAuditUnusedMedia = exports.runAuditBrokenLinks = exports.isAuditCacheEnabled = exports.wrapFieldsBatchWithCache = exports.createFieldCache = exports.auditSuiteToRunnerInput = exports.expandOutputPath = exports.loadAuditSuite = exports.diffSnapshots = exports.loadSnapshot = exports.listHistory = exports.captureHistory = exports.splitByBaseline = exports.openBaseline = exports.fingerprintFinding = exports.inferFormatFromExtension = exports.writeAuditOutput = exports.formatAuditOutput = exports.runHygieneAuthoringGraphQL = exports.DEFAULT_MASTER_INDEX = exports.MEDIA_LIBRARY_ROOT = exports.createHygieneApiClient = void 0;
+exports.runExplainOrphanSite = exports.runExplainWhyBlocked = exports.runCleanupSubtree = exports.runAuditTemplateDependencies = exports.runAuditReferences = exports.runBaselineAccept = exports.runBaselineReset = exports.runBaselineRemove = exports.runBaselineCreate = exports.runBaselineShow = exports.auditNames = exports.runAuditAll = exports.runHistoryDiff = exports.runHistoryList = exports.runHistoryCapture = exports.runAuditSuiteRun = exports.runCleanupUsers = exports.runCleanupRoles = exports.runCleanupEmptyFolders = exports.runCleanupWorkflowApply = exports.runCleanupWorkflowAdvance = exports.runCleanupSiteResidue = exports.runAuditSiteResidue = exports.runCleanupLanguageVersionAdd = exports.runCleanupRename = exports.runCleanupFieldSet = exports.runAuditEmptyLinks = exports.runAuditFallbackDrift = void 0;
+// --- API client + transport --------------------------------------------
+var client_1 = require("./api/client");
+Object.defineProperty(exports, "createHygieneApiClient", { enumerable: true, get: function () { return client_1.createHygieneApiClient; } });
+Object.defineProperty(exports, "MEDIA_LIBRARY_ROOT", { enumerable: true, get: function () { return client_1.MEDIA_LIBRARY_ROOT; } });
+Object.defineProperty(exports, "DEFAULT_MASTER_INDEX", { enumerable: true, get: function () { return client_1.DEFAULT_MASTER_INDEX; } });
+var graphql_1 = require("./api/graphql");
+Object.defineProperty(exports, "runHygieneAuthoringGraphQL", { enumerable: true, get: function () { return graphql_1.runHygieneAuthoringGraphQL; } });
+// --- Output adapters ---------------------------------------------------
+var output_adapters_1 = require("./output-adapters");
+Object.defineProperty(exports, "formatAuditOutput", { enumerable: true, get: function () { return output_adapters_1.formatAuditOutput; } });
+Object.defineProperty(exports, "writeAuditOutput", { enumerable: true, get: function () { return output_adapters_1.writeAuditOutput; } });
+Object.defineProperty(exports, "inferFormatFromExtension", { enumerable: true, get: function () { return output_adapters_1.inferFormatFromExtension; } });
+// --- Baseline ----------------------------------------------------------
+var baseline_1 = require("./baseline");
+Object.defineProperty(exports, "fingerprintFinding", { enumerable: true, get: function () { return baseline_1.fingerprintFinding; } });
+Object.defineProperty(exports, "openBaseline", { enumerable: true, get: function () { return baseline_1.openBaseline; } });
+Object.defineProperty(exports, "splitByBaseline", { enumerable: true, get: function () { return baseline_1.splitByBaseline; } });
+// --- History snapshots -------------------------------------------------
+var history_1 = require("./history");
+Object.defineProperty(exports, "captureHistory", { enumerable: true, get: function () { return history_1.captureHistory; } });
+Object.defineProperty(exports, "listHistory", { enumerable: true, get: function () { return history_1.listHistory; } });
+Object.defineProperty(exports, "loadSnapshot", { enumerable: true, get: function () { return history_1.loadSnapshot; } });
+Object.defineProperty(exports, "diffSnapshots", { enumerable: true, get: function () { return history_1.diffSnapshots; } });
+// --- Audit suite -------------------------------------------------------
+var audit_suite_1 = require("./audit-suite");
+Object.defineProperty(exports, "loadAuditSuite", { enumerable: true, get: function () { return audit_suite_1.loadAuditSuite; } });
+Object.defineProperty(exports, "expandOutputPath", { enumerable: true, get: function () { return audit_suite_1.expandOutputPath; } });
+Object.defineProperty(exports, "auditSuiteToRunnerInput", { enumerable: true, get: function () { return audit_suite_1.auditSuiteToRunnerInput; } });
+// --- Field cache -------------------------------------------------------
+var cache_1 = require("./cache");
+Object.defineProperty(exports, "createFieldCache", { enumerable: true, get: function () { return cache_1.createFieldCache; } });
+Object.defineProperty(exports, "wrapFieldsBatchWithCache", { enumerable: true, get: function () { return cache_1.wrapFieldsBatchWithCache; } });
+Object.defineProperty(exports, "isAuditCacheEnabled", { enumerable: true, get: function () { return cache_1.isAuditCacheEnabled; } });
+// --- Task runners (audits, cleanups, suite, baseline, history) --------
+var broken_links_1 = require("./tasks/audit/broken-links");
+Object.defineProperty(exports, "runAuditBrokenLinks", { enumerable: true, get: function () { return broken_links_1.runAuditBrokenLinks; } });
+var unused_media_1 = require("./tasks/audit/unused-media");
+Object.defineProperty(exports, "runAuditUnusedMedia", { enumerable: true, get: function () { return unused_media_1.runAuditUnusedMedia; } });
+var orphans_1 = require("./tasks/audit/orphans");
+Object.defineProperty(exports, "runAuditOrphans", { enumerable: true, get: function () { return orphans_1.runAuditOrphans; } });
+var stale_workflow_1 = require("./tasks/audit/stale-workflow");
+Object.defineProperty(exports, "runAuditStaleWorkflow", { enumerable: true, get: function () { return stale_workflow_1.runAuditStaleWorkflow; } });
+var language_data_1 = require("./tasks/audit/language-data");
+Object.defineProperty(exports, "runAuditLanguageData", { enumerable: true, get: function () { return language_data_1.runAuditLanguageData; } });
+var dead_templates_1 = require("./tasks/audit/dead-templates");
+Object.defineProperty(exports, "runAuditDeadTemplates", { enumerable: true, get: function () { return dead_templates_1.runAuditDeadTemplates; } });
+var datasource_missing_1 = require("./tasks/audit/datasource-missing");
+Object.defineProperty(exports, "runAuditDatasourceMissing", { enumerable: true, get: function () { return datasource_missing_1.runAuditDatasourceMissing; } });
+var duplicates_1 = require("./tasks/audit/duplicates");
+Object.defineProperty(exports, "runAuditDuplicates", { enumerable: true, get: function () { return duplicates_1.runAuditDuplicates; } });
+var empty_items_1 = require("./tasks/audit/empty-items");
+Object.defineProperty(exports, "runAuditEmptyItems", { enumerable: true, get: function () { return empty_items_1.runAuditEmptyItems; } });
+var page_design_orphans_1 = require("./tasks/audit/page-design-orphans");
+Object.defineProperty(exports, "runAuditPageDesignOrphans", { enumerable: true, get: function () { return page_design_orphans_1.runAuditPageDesignOrphans; } });
+var personalization_broken_1 = require("./tasks/audit/personalization-broken");
+Object.defineProperty(exports, "runAuditPersonalizationBroken", { enumerable: true, get: function () { return personalization_broken_1.runAuditPersonalizationBroken; } });
+var versions_prune_1 = require("./tasks/cleanup/versions-prune");
+Object.defineProperty(exports, "runCleanupVersionsPrune", { enumerable: true, get: function () { return versions_prune_1.runCleanupVersionsPrune; } });
+var archive_purge_1 = require("./tasks/cleanup/archive-purge");
+Object.defineProperty(exports, "runCleanupArchivePurge", { enumerable: true, get: function () { return archive_purge_1.runCleanupArchivePurge; } });
+var dead_templates_2 = require("./tasks/cleanup/dead-templates");
+Object.defineProperty(exports, "runCleanupDeadTemplates", { enumerable: true, get: function () { return dead_templates_2.runCleanupDeadTemplates; } });
+var duplicates_2 = require("./tasks/cleanup/duplicates");
+Object.defineProperty(exports, "runCleanupDuplicates", { enumerable: true, get: function () { return duplicates_2.runCleanupDuplicates; } });
+var slug_conflicts_1 = require("./tasks/cleanup/slug-conflicts");
+Object.defineProperty(exports, "runCleanupSlugConflicts", { enumerable: true, get: function () { return slug_conflicts_1.runCleanupSlugConflicts; } });
+var versions_archive_1 = require("./tasks/cleanup/versions-archive");
+Object.defineProperty(exports, "runCleanupVersionsArchive", { enumerable: true, get: function () { return versions_archive_1.runCleanupVersionsArchive; } });
+var find_replace_1 = require("./tasks/audit/find-replace");
+Object.defineProperty(exports, "runAuditFindReplace", { enumerable: true, get: function () { return find_replace_1.runAuditFindReplace; } });
+var stale_content_1 = require("./tasks/audit/stale-content");
+Object.defineProperty(exports, "runAuditStaleContent", { enumerable: true, get: function () { return stale_content_1.runAuditStaleContent; } });
+var find_replace_2 = require("./tasks/cleanup/find-replace");
+Object.defineProperty(exports, "runCleanupFindReplace", { enumerable: true, get: function () { return find_replace_2.runCleanupFindReplace; } });
+var large_fields_1 = require("./tasks/audit/large-fields");
+Object.defineProperty(exports, "runAuditLargeFields", { enumerable: true, get: function () { return large_fields_1.runAuditLargeFields; } });
+var heavy_templates_1 = require("./tasks/audit/heavy-templates");
+Object.defineProperty(exports, "runAuditHeavyTemplates", { enumerable: true, get: function () { return heavy_templates_1.runAuditHeavyTemplates; } });
+var missing_meta_1 = require("./tasks/audit/missing-meta");
+Object.defineProperty(exports, "runAuditMissingMeta", { enumerable: true, get: function () { return missing_meta_1.runAuditMissingMeta; } });
+var alt_text_missing_1 = require("./tasks/audit/alt-text-missing");
+Object.defineProperty(exports, "runAuditAltTextMissing", { enumerable: true, get: function () { return alt_text_missing_1.runAuditAltTextMissing; } });
+var role_bloat_1 = require("./tasks/audit/role-bloat");
+Object.defineProperty(exports, "runAuditRoleBloat", { enumerable: true, get: function () { return role_bloat_1.runAuditRoleBloat; } });
+var empty_roles_1 = require("./tasks/audit/empty-roles");
+Object.defineProperty(exports, "runAuditEmptyRoles", { enumerable: true, get: function () { return empty_roles_1.runAuditEmptyRoles; } });
+var stale_users_1 = require("./tasks/audit/stale-users");
+Object.defineProperty(exports, "runAuditStaleUsers", { enumerable: true, get: function () { return stale_users_1.runAuditStaleUsers; } });
+var broken_images_1 = require("./tasks/audit/broken-images");
+Object.defineProperty(exports, "runAuditBrokenImages", { enumerable: true, get: function () { return broken_images_1.runAuditBrokenImages; } });
+var slug_conflicts_2 = require("./tasks/audit/slug-conflicts");
+Object.defineProperty(exports, "runAuditSlugConflicts", { enumerable: true, get: function () { return slug_conflicts_2.runAuditSlugConflicts; } });
+var translation_coverage_1 = require("./tasks/audit/translation-coverage");
+Object.defineProperty(exports, "runAuditTranslationCoverage", { enumerable: true, get: function () { return translation_coverage_1.runAuditTranslationCoverage; } });
+var fallback_drift_1 = require("./tasks/audit/fallback-drift");
+Object.defineProperty(exports, "runAuditFallbackDrift", { enumerable: true, get: function () { return fallback_drift_1.runAuditFallbackDrift; } });
+var empty_links_1 = require("./tasks/audit/empty-links");
+Object.defineProperty(exports, "runAuditEmptyLinks", { enumerable: true, get: function () { return empty_links_1.runAuditEmptyLinks; } });
+var field_set_1 = require("./tasks/cleanup/field-set");
+Object.defineProperty(exports, "runCleanupFieldSet", { enumerable: true, get: function () { return field_set_1.runCleanupFieldSet; } });
+var rename_1 = require("./tasks/cleanup/rename");
+Object.defineProperty(exports, "runCleanupRename", { enumerable: true, get: function () { return rename_1.runCleanupRename; } });
+var language_version_add_1 = require("./tasks/cleanup/language-version-add");
+Object.defineProperty(exports, "runCleanupLanguageVersionAdd", { enumerable: true, get: function () { return language_version_add_1.runCleanupLanguageVersionAdd; } });
+var site_residue_1 = require("./tasks/audit/site-residue");
+Object.defineProperty(exports, "runAuditSiteResidue", { enumerable: true, get: function () { return site_residue_1.runAuditSiteResidue; } });
+var site_residue_2 = require("./tasks/cleanup/site-residue");
+Object.defineProperty(exports, "runCleanupSiteResidue", { enumerable: true, get: function () { return site_residue_2.runCleanupSiteResidue; } });
+var workflow_advance_1 = require("./tasks/cleanup/workflow-advance");
+Object.defineProperty(exports, "runCleanupWorkflowAdvance", { enumerable: true, get: function () { return workflow_advance_1.runCleanupWorkflowAdvance; } });
+var workflow_apply_1 = require("./tasks/cleanup/workflow-apply");
+Object.defineProperty(exports, "runCleanupWorkflowApply", { enumerable: true, get: function () { return workflow_apply_1.runCleanupWorkflowApply; } });
+var empty_folders_1 = require("./tasks/cleanup/empty-folders");
+Object.defineProperty(exports, "runCleanupEmptyFolders", { enumerable: true, get: function () { return empty_folders_1.runCleanupEmptyFolders; } });
+var roles_1 = require("./tasks/cleanup/roles");
+Object.defineProperty(exports, "runCleanupRoles", { enumerable: true, get: function () { return roles_1.runCleanupRoles; } });
+var users_1 = require("./tasks/cleanup/users");
+Object.defineProperty(exports, "runCleanupUsers", { enumerable: true, get: function () { return users_1.runCleanupUsers; } });
+var suite_run_1 = require("./tasks/audit/suite-run");
+Object.defineProperty(exports, "runAuditSuiteRun", { enumerable: true, get: function () { return suite_run_1.runAuditSuiteRun; } });
+var history_2 = require("./tasks/audit/history");
+Object.defineProperty(exports, "runHistoryCapture", { enumerable: true, get: function () { return history_2.runHistoryCapture; } });
+Object.defineProperty(exports, "runHistoryList", { enumerable: true, get: function () { return history_2.runHistoryList; } });
+Object.defineProperty(exports, "runHistoryDiff", { enumerable: true, get: function () { return history_2.runHistoryDiff; } });
+var all_1 = require("./tasks/audit/all");
+Object.defineProperty(exports, "runAuditAll", { enumerable: true, get: function () { return all_1.runAuditAll; } });
+Object.defineProperty(exports, "auditNames", { enumerable: true, get: function () { return all_1.auditNames; } });
+var baseline_2 = require("./tasks/audit/baseline");
+Object.defineProperty(exports, "runBaselineShow", { enumerable: true, get: function () { return baseline_2.runBaselineShow; } });
+Object.defineProperty(exports, "runBaselineCreate", { enumerable: true, get: function () { return baseline_2.runBaselineCreate; } });
+Object.defineProperty(exports, "runBaselineRemove", { enumerable: true, get: function () { return baseline_2.runBaselineRemove; } });
+Object.defineProperty(exports, "runBaselineReset", { enumerable: true, get: function () { return baseline_2.runBaselineReset; } });
+Object.defineProperty(exports, "runBaselineAccept", { enumerable: true, get: function () { return baseline_2.runBaselineAccept; } });
+// --- Reference / dependency audits --------------------------------------
+var references_1 = require("./tasks/audit/references");
+Object.defineProperty(exports, "runAuditReferences", { enumerable: true, get: function () { return references_1.runAuditReferences; } });
+var template_dependencies_1 = require("./tasks/audit/template-dependencies");
+Object.defineProperty(exports, "runAuditTemplateDependencies", { enumerable: true, get: function () { return template_dependencies_1.runAuditTemplateDependencies; } });
+// --- Subtree cleanup ----------------------------------------------------
+var subtree_1 = require("./tasks/cleanup/subtree");
+Object.defineProperty(exports, "runCleanupSubtree", { enumerable: true, get: function () { return subtree_1.runCleanupSubtree; } });
+// --- Explain (diagnostic composition) -----------------------------------
+var why_blocked_1 = require("./tasks/explain/why-blocked");
+Object.defineProperty(exports, "runExplainWhyBlocked", { enumerable: true, get: function () { return why_blocked_1.runExplainWhyBlocked; } });
+var orphan_site_1 = require("./tasks/explain/orphan-site");
+Object.defineProperty(exports, "runExplainOrphanSite", { enumerable: true, get: function () { return orphan_site_1.runExplainOrphanSite; } });

package/dist/hygiene/output-adapters.d.ts

@@ -0,0 +1,49 @@
+/**
+ * Output adapters for audit reports.
+ *
+ * Audit results today are emitted as JSON via `printReport` to stdout.
+ * The output adapters here let callers redirect to a file and/or
+ * transform to CSV / Markdown for human-readable reporting.
+ *
+ * Adapters operate on the canonical `ScaiEnvelope` shape that
+ * `printReport` produces:
+ *
+ *   {
+ *     command: "audit.broken-links.list",
+ *     environment: "sandbox",
+ *     count: 42,
+ *     data: [ { itemId, path, ... } ],   // renamed from `results` 2026-05-14
+ *     <extra fields>
+ *   }
+ *
+ * For `audit all`, the envelope wraps multiple per-audit reports:
+ *
+ *   {
+ *     command: "audit.all",
+ *     environment: "sandbox",
+ *     audits: { "broken-links": <envelope>, ... },
+ *     summary: { totalFindings, byAudit }
+ *   }
+ */
+export type OutputFormat = "json" | "csv" | "markdown";
+export interface AuditEnvelope {
+    command: string;
+    environment: string | null;
+    count?: number;
+    /** Canonical envelope key for the primary payload. */
+    data: unknown[];
+    summary?: string;
+    [key: string]: unknown;
+}
+/** Format a single-audit envelope. */
+export declare const formatAuditOutput: (envelope: AuditEnvelope, format: OutputFormat) => string;
+/**
+ * Write an audit envelope to a file or stdout (when filePath is unset).
+ * Returns the formatted string for callers that want to also display
+ * it in the logger.
+ */
+export declare const writeAuditOutput: (envelope: AuditEnvelope, options?: {
+    format?: OutputFormat;
+    output?: string;
+}) => string;
+export declare const inferFormatFromExtension: (filePath: string) => OutputFormat | undefined;

package/dist/hygiene/output-adapters.js

@@ -0,0 +1,270 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.inferFormatFromExtension = exports.writeAuditOutput = exports.formatAuditOutput = void 0;
+const node_fs_1 = __importDefault(require("node:fs"));
+const node_path_1 = __importDefault(require("node:path"));
+/** Format a single-audit envelope. */
+const formatAuditOutput = (envelope, format) => {
+    switch (format) {
+        case "json":
+            return JSON.stringify(envelope, null, 2);
+        case "csv":
+            return toCsv(envelope.data);
+        case "markdown":
+            return toMarkdown(envelope);
+        default:
+            return JSON.stringify(envelope, null, 2);
+    }
+};
+exports.formatAuditOutput = formatAuditOutput;
+/**
+ * CSV serializer. Inspects the result rows to derive a column set,
+ * then emits a header row + one row per finding. Nested objects get
+ * JSON-stringified; arrays get joined with `;`.
+ */
+const toCsv = (rows) => {
+    if (rows.length === 0)
+        return "";
+    // Flatten one level; collect the union of top-level keys.
+    const columns = new Set();
+    for (const r of rows) {
+        if (r && typeof r === "object" && !Array.isArray(r)) {
+            for (const k of Object.keys(r))
+                columns.add(k);
+        }
+    }
+    const cols = Array.from(columns);
+    const lines = [cols.map(escapeCsv).join(",")];
+    for (const row of rows) {
+        if (!row || typeof row !== "object")
+            continue;
+        const obj = row;
+        lines.push(cols
+            .map((c) => {
+            const v = obj[c];
+            if (v === null || v === undefined)
+                return "";
+            if (typeof v === "string")
+                return escapeCsv(v);
+            if (typeof v === "number" || typeof v === "boolean")
+                return String(v);
+            if (Array.isArray(v)) {
+                return escapeCsv(v.map((x) => (typeof x === "object" ? JSON.stringify(x) : String(x))).join("; "));
+            }
+            return escapeCsv(JSON.stringify(v));
+        })
+            .join(","));
+    }
+    return lines.join("\n");
+};
+const escapeCsv = (value) => {
+    if (/[",\n\r]/.test(value))
+        return `"${value.replace(/"/g, '""')}"`;
+    return value;
+};
+/**
+ * Markdown serializer.
+ *
+ * Two shapes are produced based on the envelope's `command`:
+ *
+ *   1. **`audit.all` envelopes** — multi-audit reports. Renders a
+ *      header summary box (total findings, % new vs baseline-ignored,
+ *      per-audit breakdown), then one `##` section per audit with
+ *      its own findings table. Audits with zero findings collapse
+ *      to a single line.
+ *
+ *   2. **Single-audit envelopes** — `# <name>` heading + bullet
+ *      metadata + table (flat rows) or fenced JSON (nested rows).
+ *
+ * Both forms include a **deep-link helper**: when the envelope's
+ * environment can be mapped to a tenant host and a finding row has
+ * an `itemId`, the table includes a column with a CM-shell URL the
+ * reviewer can click. The mapping is best-effort — if we can't
+ * derive the host (e.g. no environment metadata in the envelope),
+ * the column is omitted.
+ */
+const toMarkdown = (envelope) => {
+    if (envelope.command === "audit.all") {
+        return toMarkdownAllReport(envelope);
+    }
+    return toMarkdownSingle(envelope);
+};
+const toMarkdownSingle = (envelope) => {
+    const lines = [];
+    const title = (envelope.command ?? "audit").replace(/^audit\./, "").replace(/[._]/g, " ");
+    lines.push(`# ${title}`);
+    lines.push("");
+    lines.push(`- **Environment**: \`${envelope.environment}\``);
+    if (envelope.summary)
+        lines.push(`- **Summary**: ${envelope.summary}`);
+    if (typeof envelope.count === "number")
+        lines.push(`- **Count**: ${envelope.count}`);
+    if (typeof envelope.ignoredCount === "number" && envelope.ignoredCount > 0) {
+        lines.push(`- **Ignored by baseline**: ${envelope.ignoredCount}`);
+    }
+    for (const [k, v] of Object.entries(envelope)) {
+        if ([
+            "command",
+            "environment",
+            "count",
+            "results",
+            "summary",
+            "ignoredCount",
+            "audits",
+            "counts",
+        ].includes(k))
+            continue;
+        if (v === null || v === undefined)
+            continue;
+        if (typeof v === "object")
+            continue;
+        lines.push(`- **${k}**: ${v}`);
+    }
+    lines.push("");
+    emitResultsBlock(lines, envelope.data);
+    return lines.join("\n") + "\n";
+};
+const toMarkdownAllReport = (envelope) => {
+    const lines = [];
+    lines.push(`# Audit report — \`${envelope.environment}\``);
+    lines.push("");
+    // Top stats callout.
+    const counts = envelope.counts && typeof envelope.counts === "object"
+        ? envelope.counts
+        : {};
+    lines.push("> **Summary**");
+    lines.push(">");
+    if (typeof counts.auditsRun === "number")
+        lines.push(`> - Audits run: **${counts.auditsRun}**`);
+    if (typeof counts.totalFindings === "number")
+        lines.push(`> - Total findings: **${counts.totalFindings}**`);
+    if (typeof counts.totalIgnored === "number" && counts.totalIgnored > 0)
+        lines.push(`> - Ignored by baseline: **${counts.totalIgnored}**`);
+    if (typeof counts.auditsFailed === "number" && counts.auditsFailed > 0)
+        lines.push(`> - **${counts.auditsFailed} audit${counts.auditsFailed === 1 ? "" : "s"} failed**`);
+    if (envelope.summary)
+        lines.push(`> - ${envelope.summary}`);
+    lines.push("");
+    // Per-audit breakdown — quick scan table.
+    const audits = envelope.audits && typeof envelope.audits === "object"
+        ? envelope.audits
+        : {};
+    const auditEntries = Object.entries(audits).sort((a, b) => (b[1].findings?.length ?? 0) - (a[1].findings?.length ?? 0));
+    if (auditEntries.length > 0) {
+        lines.push("## Breakdown");
+        lines.push("");
+        lines.push("| Audit | Findings | Ignored | Duration | Error |");
+        lines.push("| --- | ---: | ---: | ---: | --- |");
+        for (const [name, info] of auditEntries) {
+            const findings = info.findings?.length ?? 0;
+            const ignored = info.ignoredCount ?? 0;
+            const ms = info.durationMs ?? 0;
+            lines.push(`| ${name} | ${findings} | ${ignored} | ${ms}ms | ${info.error ?? ""} |`);
+        }
+        lines.push("");
+    }
+    // Per-audit sections — only those with findings.
+    for (const [name, info] of auditEntries) {
+        const findings = info.findings ?? [];
+        if (findings.length === 0 && !info.error)
+            continue;
+        lines.push(`## ${name}`);
+        lines.push("");
+        if (info.error) {
+            lines.push(`> ⚠️ Audit failed: \`${info.error}\``);
+            lines.push("");
+            continue;
+        }
+        lines.push(`${findings.length} finding${findings.length === 1 ? "" : "s"}.`);
+        lines.push("");
+        emitResultsBlock(lines, findings);
+        lines.push("");
+    }
+    return lines.join("\n") + "\n";
+};
+const emitResultsBlock = (lines, rows) => {
+    if (Array.isArray(rows) && rows.length > 0 && isTableable(rows)) {
+        const cols = collectTopLevelKeys(rows);
+        lines.push(`| ${cols.join(" | ")} |`);
+        lines.push(`| ${cols.map(() => "---").join(" | ")} |`);
+        for (const r of rows) {
+            const obj = r;
+            lines.push(`| ${cols.map((c) => formatMarkdownCell(obj[c])).join(" | ")} |`);
+        }
+    }
+    else if (Array.isArray(rows) && rows.length > 0) {
+        lines.push("```json");
+        lines.push(JSON.stringify(rows, null, 2));
+        lines.push("```");
+    }
+    else {
+        lines.push("_No findings._");
+    }
+};
+const collectTopLevelKeys = (rows) => {
+    const cols = new Set();
+    for (const r of rows) {
+        if (r && typeof r === "object" && !Array.isArray(r)) {
+            for (const k of Object.keys(r))
+                cols.add(k);
+        }
+    }
+    return Array.from(cols);
+};
+const isTableable = (rows) => {
+    // Heuristic: rows are tableable when every top-level value is a
+    // scalar OR a short array of scalars. Avoids unreadable mega-rows.
+    for (const r of rows) {
+        if (!r || typeof r !== "object" || Array.isArray(r))
+            return false;
+        for (const v of Object.values(r)) {
+            if (v === null || v === undefined)
+                continue;
+            if (typeof v === "object" && !Array.isArray(v))
+                return false;
+            if (Array.isArray(v) && v.length > 3)
+                return false;
+        }
+    }
+    return true;
+};
+const formatMarkdownCell = (value) => {
+    if (value === null || value === undefined)
+        return "";
+    if (typeof value === "string")
+        return value.replace(/\|/g, "\\|").replace(/\n/g, " ");
+    if (Array.isArray(value))
+        return value.map((v) => (typeof v === "object" ? JSON.stringify(v) : String(v))).join("; ");
+    if (typeof value === "object")
+        return JSON.stringify(value);
+    return String(value);
+};
+/**
+ * Write an audit envelope to a file or stdout (when filePath is unset).
+ * Returns the formatted string for callers that want to also display
+ * it in the logger.
+ */
+const writeAuditOutput = (envelope, options = {}) => {
+    const format = options.format ?? "json";
+    const body = (0, exports.formatAuditOutput)(envelope, format);
+    if (options.output) {
+        node_fs_1.default.mkdirSync(node_path_1.default.dirname(node_path_1.default.resolve(options.output)), { recursive: true });
+        node_fs_1.default.writeFileSync(options.output, body, "utf8");
+    }
+    return body;
+};
+exports.writeAuditOutput = writeAuditOutput;
+const inferFormatFromExtension = (filePath) => {
+    const ext = node_path_1.default.extname(filePath).toLowerCase();
+    if (ext === ".json")
+        return "json";
+    if (ext === ".csv")
+        return "csv";
+    if (ext === ".md" || ext === ".markdown")
+        return "markdown";
+    return undefined;
+};
+exports.inferFormatFromExtension = inferFormatFromExtension;

package/dist/hygiene/tasks/audit/all.d.ts

@@ -0,0 +1,58 @@
+import { type OutputFormat } from "../../output-adapters";
+import { type HygieneCommonOptions } from "../shared";
+/**
+ * Meta-command: run every (or a chosen subset) audit and emit a
+ * consolidated report.
+ *
+ * Use cases:
+ *   - One-shot tenant health check for stakeholders.
+ *   - CI step: "fail if any audit finds new issues (vs. baseline)".
+ *   - Scheduled audit runs that pipe to Slack via `--output` + a
+ *     webhook in the CI script.
+ *
+ * Filter model:
+ *   - `--include broken-links,unused-media` runs only those audits.
+ *   - `--exclude-audit find-replace` runs everything except that
+ *     audit (rename to avoid clashing with the cross-cutting
+ *     `--exclude <path>` filter).
+ *   - Sensible defaults: `find-replace` is OFF by default in `audit
+ *     all` because it requires a `--pattern` flag.
+ *
+ * Baseline integration:
+ *   - `--baseline` causes each audit's findings to be filtered
+ *     through the per-env baseline file. The report distinguishes
+ *     `findings` (new) from `ignored` (baseline-matched).
+ *   - `--update-baseline` accepts every current finding as the new
+ *     baseline (use after a manual review).
+ */
+export interface AuditAllOptions extends HygieneCommonOptions {
+    /** Comma-separated list of audit names to run. Default: all except find-replace. */
+    include?: string[];
+    /** Comma-separated list of audit names to skip. */
+    excludeAudit?: string[];
+    /** Apply the per-env baseline file to filter known findings. */
+    baseline?: boolean;
+    /**
+     * After running, replace the baseline file with the current finding
+     * set. Useful for snapshotting an accepted state. Off by default.
+     */
+    updateBaseline?: boolean;
+    /** Path to write the output to. Default: stdout. */
+    output?: string;
+    /** Output format. Defaults to `json` (also inferred from --output extension). */
+    format?: OutputFormat;
+    /** Common per-audit defaults (passed to every sub-audit). */
+    root?: string;
+    limit?: number;
+    includeSystem?: boolean;
+    index?: string;
+    concurrency?: number;
+    batchSize?: number;
+    pageParallelism?: number;
+    cache?: boolean;
+    exclude?: string[];
+    since?: string;
+    owner?: string;
+}
+export declare const auditNames: () => string[];
+export declare const runAuditAll: (options: AuditAllOptions) => Promise<void>;