@xenos1996/usa 2.0.0

package/dist/engine/audit.js

@@ -0,0 +1,366 @@
+import path from 'node:path';
+import { SEVERITY_LADDER } from './loader.js';
+import { MAX_FILE_BYTES, MAX_FILES, Project } from '../util/project.js';
+import { detect, loadDetectorFile } from '../detect/index.js';
+import { loadRulePacks, applyRuleOverrides } from './loader.js';
+import { evaluateRule, packApplies, ruleApplies } from './evaluate.js';
+import { loadSections } from './sections.js';
+import { loadProfiles, dampen } from './maturity.js';
+import { loadConfig } from '../config.js';
+import fs from 'node:fs';
+import { fileURLToPath } from 'node:url';
+/** `rules/`, resolved relative to the installed package (works from src and dist). */
+const DEFAULT_RULES_DIR = path.resolve(path.dirname(fileURLToPath(import.meta.url)), '..', '..', 'rules');
+/** Version of this build, read from package.json so it never drifts. */
+const DEFAULT_VERSION = (() => {
+    try {
+        const pkg = JSON.parse(fs.readFileSync(path.resolve(path.dirname(fileURLToPath(import.meta.url)), '..', '..', 'package.json'), 'utf8'));
+        return pkg.version ?? '0.0.0';
+    }
+    catch {
+        return '0.0.0';
+    }
+})();
+import { score } from './score.js';
+export function runAudit(options) {
+    // The programmatic entry point must be usable with nothing but a target, so
+    // every knob the CLI exposes gets a sane default here rather than a crash.
+    const config = options.config ?? loadConfig(options.target);
+    const opts = normalizeAuditOptions(options, config);
+    const warnings = [];
+    const project = new Project(opts.target, config.ignore ?? [], resolveLimits(options, config, warnings));
+    const git = project.gitInfo();
+    appendHistoryWarnings(git, warnings);
+    const detectors = loadDetectorFile(opts.rulesDir);
+    const detection = detect(project, detectors, git, config.facts ?? []);
+    const { packs, warnings: packWarnings } = loadRulePacks(opts.rulesDir);
+    warnings.push(...packWarnings);
+    mergeExtraPacks(packs, options.extraPacks);
+    const { disabled, overrides } = collectRuleSettings(config, warnings);
+    applyRuleOverrides(packs, overrides);
+    const suppressions = resolveSuppressions(config.suppressions, warnings);
+    const { include, exclude } = resolvePackSets(options, config);
+    // A pack may assert extra facts simply by applying (e.g. "we are a monorepo").
+    const facts = detection.facts;
+    const selection = selectInitialPacks(packs, facts, include, exclude);
+    // Packs can contribute facts, which can make another pack apply. Resolve to a
+    // fixed point (bounded, so a malformed pack cannot hang the audit).
+    resolvePackFacts(packs, facts, include, exclude, selection);
+    const sections = selectSections(loadSections(opts.rulesDir), config.sections, warnings);
+    const profiles = loadProfiles(opts.rulesDir);
+    const maturity = resolveMaturity(opts.profile, config.maturity, detection.maturity, warnings);
+    const profile = profiles[maturity];
+    const ctx = {
+        project,
+        facts,
+        depth: opts.depth,
+        allowCommands: opts.allowCommands,
+        disabled,
+        suppressions,
+    };
+    const evaluatedAll = evaluatePacks(selection.activePacks, facts, opts.depth, include, ctx, profile);
+    // A `sections:` restriction narrows both the scored set and the report, so a
+    // scoped audit cannot leak findings it promised to exclude.
+    const sectionFilter = config.sections ?? [];
+    const wanted = new Set(sections.map((s) => s.id));
+    const evaluated = sectionFilter.length > 0
+        ? evaluatedAll.filter((e) => wanted.has(e.finding.section))
+        : evaluatedAll;
+    // Index warnings go last: content reads happen lazily during rule
+    // evaluation, so oversize counts are only complete once scoring is done.
+    appendIndexWarnings(project, warnings);
+    const card = score(evaluated, sections, profile);
+    const report = buildReport(opts, git, detection, facts, maturity, card, evaluated, selection.packsLoaded, selection.packsSkipped);
+    return { report, warnings, profile };
+}
+/**
+ * Merges an additional capability set into the loaded packs for a single run.
+ * A pack id already present in the base registry wins (the registry is the
+ * source of truth); duplicate ids from `extraPacks` are dropped silently so a
+ * released capability cannot shadow a shipped one.
+ */
+function mergeExtraPacks(packs, extra) {
+    if (!extra || extra.length === 0)
+        return;
+    const seen = new Set(packs.map((p) => p.id));
+    for (const p of extra) {
+        if (!seen.has(p.id)) {
+            seen.add(p.id);
+            packs.push(p);
+        }
+    }
+}
+function normalizeAuditOptions(options, config) {
+    return {
+        rulesDir: options.rulesDir ?? DEFAULT_RULES_DIR,
+        depth: options.depth ?? 'standard',
+        profile: options.profile ?? 'auto',
+        allowCommands: options.allowCommands ?? false,
+        usaVersion: options.usaVersion ?? DEFAULT_VERSION,
+        target: options.target,
+        config,
+    };
+}
+/**
+ * Expired (or undated) waivers fail closed: an `until` date in the past — or
+ * one that cannot be parsed — excludes the suppression and raises a warning,
+ * so an audit never silently honours dead risk acceptances.
+ */
+function resolveSuppressions(suppressions, warnings) {
+    const map = new Map();
+    for (const s of suppressions ?? []) {
+        if (!s.rule)
+            continue;
+        if (s.until && isSuppressionExpired(s.rule, s.until, warnings))
+            continue;
+        map.set(s.rule, s.reason);
+    }
+    return map;
+}
+function isSuppressionExpired(rule, until, warnings) {
+    const t = Date.parse(until);
+    if (Number.isNaN(t)) {
+        warnings.push(`suppression for ${rule} has an unparseable "until" date ("${until}") — waiver ignored`);
+        return true;
+    }
+    if (t < Date.now()) {
+        warnings.push(`suppression for ${rule} expired on ${until} — treating as an active finding`);
+        return true;
+    }
+    return false;
+}
+const MATURITIES = ['prototype', 'mvp', 'beta', 'production', 'legacy'];
+/**
+ * CLI --profile wins; otherwise a valid config `maturity` pins the bar;
+ * otherwise auto-detection stands. Invalid config values warn and fall back.
+ */
+function resolveMaturity(cliProfile, configMaturity, detected, warnings) {
+    if (cliProfile !== 'auto')
+        return cliProfile;
+    if (configMaturity === undefined)
+        return detected;
+    if (MATURITIES.includes(configMaturity))
+        return configMaturity;
+    warnings.push(`.usa.yaml: invalid maturity "${String(configMaturity)}" — using auto-detected ${detected}`);
+    return detected;
+}
+/** Restrict scoring and reporting to the configured sections, if any. */
+function selectSections(all, wanted, warnings) {
+    if (!wanted || wanted.length === 0)
+        return all;
+    const known = new Set(all.map((s) => s.id));
+    for (const id of wanted) {
+        if (!known.has(id))
+            warnings.push(`.usa.yaml: unknown section "${id}" in sections — ignored`);
+    }
+    return all.filter((s) => wanted.includes(s.id));
+}
+/**
+ * Scale honesty: a truncated index or skipped oversize files means PASS
+ * verdicts may rest on unseen files. Loud warning, never silent absorption.
+ */
+function appendIndexWarnings(project, warnings) {
+    if (project.truncated) {
+        warnings.push(`index truncated at ${MAX_FILES} files — the tree is bigger than the audit can see; ` +
+            'treat PASS verdicts as partial and split the target (e.g. per-package audits)');
+    }
+    if (project.skippedLarge > 0) {
+        warnings.push(`${project.skippedLarge} file(s) skipped for exceeding ${MAX_FILE_BYTES} bytes — ` +
+            'content checks could not see them');
+    }
+}
+/**
+ * CLI flags win over config file; both are validated with warnings.
+ * Invalid values fall back to engine defaults (never zero, never infinite).
+ */
+function resolveLimits(options, config, warnings) {
+    return {
+        maxFiles: validatedLimit(options.maxFiles ?? config.limits?.max_files, 'limits.max_files / --max-files', warnings),
+        maxBytes: validatedLimit(options.maxBytes ?? config.limits?.max_bytes, 'limits.max_bytes / --max-bytes', warnings),
+    };
+}
+function validatedLimit(v, name, warnings) {
+    if (v === undefined)
+        return undefined;
+    if (typeof v === 'number' && Number.isFinite(v) && v > 0)
+        return Math.floor(v);
+    warnings.push(`invalid ${name} "${String(v)}" (must be a positive number) — using defaults`);
+    return undefined;
+}
+/**
+ * History-thin targets blind the history-dependent rules (REPO-003 scans
+ * `git log`, REL-002 needs tags, maturity signals need commits). The
+ * negation in REPO-003 even turns git errors into PASS — true only in the
+ * vacuous sense. Say so loudly instead of scoring blind confidence.
+ */
+function appendHistoryWarnings(git, warnings) {
+    if (!git.isRepo) {
+        warnings.push('not a git repository — history and provenance checks cannot verify anything; ' +
+            'treat history-dependent findings as vacuous');
+        return;
+    }
+    if (git.commits <= 1) {
+        warnings.push('single-commit history (shallow clone?) — maturity signals, tag checks, and ' +
+            'history scans are under-verified; prefer a full clone for release-grade audits');
+    }
+}
+function resolvePackSets(options, config) {
+    return {
+        include: new Set(options.includePacks ?? config.include ?? []),
+        exclude: new Set(options.excludePacks ?? config.exclude ?? []),
+    };
+}
+function collectRuleSettings(config, warnings) {
+    const disabled = new Set();
+    const overrides = {};
+    for (const [id, o] of Object.entries(config.rules ?? {})) {
+        if (o.disabled)
+            disabled.add(id);
+        const severity = validateOverrideSeverity(id, o.severity, warnings);
+        const weight = validateOverrideWeight(id, o.weight, warnings);
+        if (severity !== undefined || weight !== undefined) {
+            overrides[id] = { severity, weight };
+        }
+    }
+    return { disabled, overrides };
+}
+/**
+ * Config overrides flow straight into scoring arithmetic — an invalid severity
+ * yields NaN totals and a negative weight yields scores outside 0–100.
+ * Reject loudly rather than corrupt the report.
+ */
+function validateOverrideSeverity(id, v, warnings) {
+    if (v === undefined)
+        return undefined;
+    if (SEVERITY_LADDER.includes(String(v))) {
+        return String(v);
+    }
+    warnings.push(`rules.${id}: invalid severity "${String(v)}" — override ignored`);
+    return undefined;
+}
+function validateOverrideWeight(id, v, warnings) {
+    if (v === undefined)
+        return undefined;
+    if (typeof v === 'number' && Number.isFinite(v) && v >= 0)
+        return v;
+    warnings.push(`rules.${id}: invalid weight "${String(v)}" (must be a finite number ≥ 0) — override ignored`);
+    return undefined;
+}
+function selectInitialPacks(packs, facts, include, exclude) {
+    const selection = { activePacks: [], packsLoaded: [], packsSkipped: [] };
+    selection.activePacks = packs.filter((p) => selectPack(p, facts, include, exclude, selection));
+    return selection;
+}
+function selectPack(pack, facts, include, exclude, selection) {
+    if (exclude.has(pack.id)) {
+        selection.packsSkipped.push(pack.id);
+        return false;
+    }
+    if (include.has(pack.id)) {
+        selection.packsLoaded.push(pack.id);
+        pack.provides?.forEach((f) => facts.flags.add(f));
+        return true;
+    }
+    if (!packApplies(pack, facts)) {
+        selection.packsSkipped.push(pack.id);
+        return false;
+    }
+    selection.packsLoaded.push(pack.id);
+    pack.provides?.forEach((f) => facts.flags.add(f));
+    return true;
+}
+function resolvePackFacts(packs, facts, include, exclude, selection) {
+    for (let pass = 0; pass < 3; pass++) {
+        let changed = false;
+        for (const p of packs) {
+            if (selection.packsLoaded.includes(p.id) || exclude.has(p.id) || include.has(p.id))
+                continue;
+            if (!packApplies(p, facts))
+                continue;
+            selection.packsLoaded.push(p.id);
+            p.provides?.forEach((f) => facts.flags.add(f));
+            selection.activePacks.push(p);
+            changed = true;
+        }
+        if (!changed)
+            break;
+    }
+}
+function evaluatePacks(activePacks, facts, depth, include, ctx, profile) {
+    const evaluated = [];
+    for (const pack of activePacks) {
+        for (const rule of pack.rules) {
+            if (!ruleApplies(rule, facts, depth, include.has(pack.id)))
+                continue;
+            evaluated.push(scoreFinding(rule, ctx, profile));
+        }
+    }
+    return evaluated;
+}
+function scoreFinding(rule, ctx, profile) {
+    const finding = evaluateRule(rule, ctx);
+    if (finding.status === 'PASS' || finding.status === 'NOT_APPLICABLE') {
+        return { rule, finding };
+    }
+    const { severity, dampened } = dampen(rule.severity, rule.ruleClass, profile);
+    finding.severity = severity;
+    finding.dampened = dampened;
+    return { rule, finding };
+}
+function buildReport(opts, git, detection, facts, maturity, card, evaluated, packsLoaded, packsSkipped) {
+    return {
+        schema: 'usa-report-v1',
+        generatedAt: new Date().toISOString(),
+        usaVersion: opts.usaVersion,
+        target: {
+            path: path.resolve(opts.target),
+            name: path.basename(path.resolve(opts.target)) || opts.target,
+            commit: git.commit,
+            ref: git.ref,
+            repoUrl: git.repoUrl,
+        },
+        detection: {
+            maturity,
+            maturitySignals: detection.maturitySignals,
+            projectTypes: pick(facts, 'project'),
+            platforms: pick(facts, 'platform'),
+            languages: pick(facts, 'lang'),
+            frameworks: pick(facts, 'fw'),
+            packageManagers: pick(facts, 'pm'),
+            databases: pick(facts, 'db'),
+            flags: [...facts.flags].filter((f) => f.startsWith('has:')).sort(),
+            metrics: facts.metrics,
+        },
+        options: {
+            depth: opts.depth,
+            profile: opts.profile,
+            rulesDir: opts.rulesDir,
+            packsLoaded,
+            packsSkipped,
+        },
+        score: card,
+        findings: evaluated
+            .map((e) => e.finding)
+            .filter((f) => f.status !== 'NOT_APPLICABLE')
+            .sort(bySeverityThenSection),
+    };
+}
+function pick(facts, prefix) {
+    const out = [];
+    for (const f of facts.flags) {
+        if (f.startsWith(`${prefix}:`))
+            out.push(f.slice(prefix.length + 1));
+    }
+    return out.sort();
+}
+const ORDER = { CRITICAL: 0, HIGH: 1, MEDIUM: 2, LOW: 3, FUTURE: 4 };
+function bySeverityThenSection(a, b) {
+    const sa = ORDER[a.severity] ?? 9;
+    const sb = ORDER[b.severity] ?? 9;
+    if (sa !== sb)
+        return sa - sb;
+    if (a.section !== b.section)
+        return a.section.localeCompare(b.section, undefined, { numeric: true });
+    return a.ruleId.localeCompare(b.ruleId);
+}
+//# sourceMappingURL=audit.js.map

package/dist/engine/audit.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"audit.js","sourceRoot":"","sources":["../../src/engine/audit.ts"],"names":[],"mappings":"AAAA,OAAO,IAAI,MAAM,WAAW,CAAC;AAY7B,OAAO,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAC9C,OAAO,EAAE,cAAc,EAAE,SAAS,EAAE,OAAO,EAAE,MAAM,oBAAoB,CAAC;AACxE,OAAO,EAAE,MAAM,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AAC9D,OAAO,EAAE,aAAa,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAC;AAChE,OAAO,EAAE,YAAY,EAAE,WAAW,EAAE,WAAW,EAAoB,MAAM,eAAe,CAAC;AACzF,OAAO,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAC7C,OAAO,EAAE,YAAY,EAAE,MAAM,EAAwB,MAAM,eAAe,CAAC;AAC3E,OAAO,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAC1C,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAEzC,sFAAsF;AACtF,MAAM,iBAAiB,GAAG,IAAI,CAAC,OAAO,CACpC,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAC5C,IAAI,EACJ,IAAI,EACJ,OAAO,CACR,CAAC;AAEF,wEAAwE;AACxE,MAAM,eAAe,GAAG,CAAC,GAAG,EAAE;IAC5B,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CACpB,EAAE,CAAC,YAAY,CACb,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,cAAc,CAAC,EACtF,MAAM,CACP,CACsB,CAAC;QAC1B,OAAO,GAAG,CAAC,OAAO,IAAI,OAAO,CAAC;IAChC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,OAAO,CAAC;IACjB,CAAC;AACH,CAAC,CAAC,EAAE,CAAC;AACL,OAAO,EAAE,KAAK,EAAmB,MAAM,YAAY,CAAC;AAgCpD,MAAM,UAAU,QAAQ,CAAC,OAAqB;IAC5C,4EAA4E;IAC5E,2EAA2E;IAC3E,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,UAAU,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IAC5D,MAAM,IAAI,GAAG,qBAAqB,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IACpD,MAAM,QAAQ,GAAa,EAAE,CAAC;IAC9B,MAAM,OAAO,GAAG,IAAI,OAAO,CACzB,IAAI,CAAC,MAAM,EACX,MAAM,CAAC,MAAM,IAAI,EAAE,EACnB,aAAa,CAAC,OAAO,EAAE,MAAM,EAAE,QAAQ,CAAC,CACzC,CAAC;IACF,MAAM,GAAG,GAAG,OAAO,CAAC,OAAO,EAAE,CAAC;IAC9B,qBAAqB,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;IACrC,MAAM,SAAS,GAAG,gBAAgB,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IAClD,MAAM,SAAS,GAAG,MAAM,CAAC,OAAO,EAAE,SAAS,EAAE,GAAG,EAAE,MAAM,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC;IAEtE,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,YAAY,EAAE,GAAG,aAAa,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IACvE,QAAQ,CAAC,IAAI,CAAC,GAAG,YAAY,CAAC,CAAC;IAE/B,eAAe,CAAC,KAAK,EAAE,OAAO,CAAC,UAAU,CAAC,CAAC;IAE3C,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,GAAG,mBAAmB,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;IACtE,kBAAkB,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC;IAErC,MAAM,YAAY,GAAG,mBAAmB,CAAC,MAAM,CAAC,YAAY,EAAE,QAAQ,CAAC,CAAC;IACxE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,GAAG,eAAe,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IAE9D,+EAA+E;IAC/E,MAAM,KAAK,GAAU,SAAS,CAAC,KAAK,CAAC;IACrC,MAAM,SAAS,GAAG,kBAAkB,CAAC,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;IAErE,8EAA8E;IAC9E,oEAAoE;IACpE,gBAAgB,CAAC,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,SAAS,CAAC,CAAC;IAE5D,MAAM,QAAQ,GAAG,cAAc,CAAC,YAAY,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;IACxF,MAAM,QAAQ,GAAG,YAAY,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IAC7C,MAAM,QAAQ,GAAG,eAAe,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,QAAQ,EAAE,SAAS,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;IAC9F,MAAM,OAAO,GAAG,QAAQ,CAAC,QAAQ,CAAC,CAAC;IAEnC,MAAM,GAAG,GAAgB;QACvB,OAAO;QACP,KAAK;QACL,KAAK,EAAE,IAAI,CAAC,KAAK;QACjB,aAAa,EAAE,IAAI,CAAC,aAAa;QACjC,QAAQ;QACR,YAAY;KACb,CAAC;IAEF,MAAM,YAAY,GAAG,aAAa,CAChC,SAAS,CAAC,WAAW,EACrB,KAAK,EACL,IAAI,CAAC,KAAK,EACV,OAAO,EACP,GAAG,EACH,OAAO,CACR,CAAC;IACF,6EAA6E;IAC7E,4DAA4D;IAC5D,MAAM,aAAa,GAAG,MAAM,CAAC,QAAQ,IAAI,EAAE,CAAC;IAC5C,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IAClD,MAAM,SAAS,GACb,aAAa,CAAC,MAAM,GAAG,CAAC;QACtB,CAAC,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QAC3D,CAAC,CAAC,YAAY,CAAC;IACnB,kEAAkE;IAClE,yEAAyE;IACzE,mBAAmB,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;IACvC,MAAM,IAAI,GAAG,KAAK,CAAC,SAAS,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC;IACjD,MAAM,MAAM,GAAG,WAAW,CACxB,IAAI,EACJ,GAAG,EACH,SAAS,EACT,KAAK,EACL,QAAQ,EACR,IAAI,EACJ,SAAS,EACT,SAAS,CAAC,WAAW,EACrB,SAAS,CAAC,YAAY,CACvB,CAAC;IAEF,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC;AACvC,CAAC;AAED;;;;;GAKG;AACH,SAAS,eAAe,CAAC,KAAiB,EAAE,KAA6B;IACvE,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO;IACzC,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IAC7C,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;QACtB,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;YACpB,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;YACf,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAChB,CAAC;IACH,CAAC;AACH,CAAC;AAED,SAAS,qBAAqB,CAAC,OAAqB,EAAE,MAAiB;IACrE,OAAO;QACL,QAAQ,EAAE,OAAO,CAAC,QAAQ,IAAI,iBAAiB;QAC/C,KAAK,EAAE,OAAO,CAAC,KAAK,IAAK,UAAoB;QAC7C,OAAO,EAAE,OAAO,CAAC,OAAO,IAAK,MAA4B;QACzD,aAAa,EAAE,OAAO,CAAC,aAAa,IAAI,KAAK;QAC7C,UAAU,EAAE,OAAO,CAAC,UAAU,IAAI,eAAe;QACjD,MAAM,EAAE,OAAO,CAAC,MAAM;QACtB,MAAM;KACP,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,SAAS,mBAAmB,CAC1B,YAAuC,EACvC,QAAkB;IAElB,MAAM,GAAG,GAAG,IAAI,GAAG,EAAkB,CAAC;IACtC,KAAK,MAAM,CAAC,IAAI,YAAY,IAAI,EAAE,EAAE,CAAC;QACnC,IAAI,CAAC,CAAC,CAAC,IAAI;YAAE,SAAS;QACtB,IAAI,CAAC,CAAC,KAAK,IAAI,oBAAoB,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,KAAK,EAAE,QAAQ,CAAC;YAAE,SAAS;QACzE,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC;IAC5B,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,oBAAoB,CAAC,IAAY,EAAE,KAAa,EAAE,QAAkB;IAC3E,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IAC5B,IAAI,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;QACpB,QAAQ,CAAC,IAAI,CACX,mBAAmB,IAAI,sCAAsC,KAAK,qBAAqB,CACxF,CAAC;QACF,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;QACnB,QAAQ,CAAC,IAAI,CAAC,mBAAmB,IAAI,eAAe,KAAK,kCAAkC,CAAC,CAAC;QAC7F,OAAO,IAAI,CAAC;IACd,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,UAAU,GAAe,CAAC,WAAW,EAAE,KAAK,EAAE,MAAM,EAAE,YAAY,EAAE,QAAQ,CAAC,CAAC;AAEpF;;;GAGG;AACH,SAAS,eAAe,CACtB,UAA6B,EAC7B,cAAoC,EACpC,QAAkB,EAClB,QAAkB;IAElB,IAAI,UAAU,KAAK,MAAM;QAAE,OAAO,UAAU,CAAC;IAC7C,IAAI,cAAc,KAAK,SAAS;QAAE,OAAO,QAAQ,CAAC;IAClD,IAAK,UAAgC,CAAC,QAAQ,CAAC,cAAc,CAAC;QAAE,OAAO,cAAc,CAAC;IACtF,QAAQ,CAAC,IAAI,CACX,gCAAgC,MAAM,CAAC,cAAc,CAAC,2BAA2B,QAAQ,EAAE,CAC5F,CAAC;IACF,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,yEAAyE;AACzE,SAAS,cAAc,CACrB,GAAiB,EACjB,MAA4B,EAC5B,QAAkB;IAElB,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,GAAG,CAAC;IAC/C,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IAC5C,KAAK,MAAM,EAAE,IAAI,MAAM,EAAE,CAAC;QACxB,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;YAAE,QAAQ,CAAC,IAAI,CAAC,+BAA+B,EAAE,yBAAyB,CAAC,CAAC;IAChG,CAAC;IACD,OAAO,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;AAClD,CAAC;AAED;;;GAGG;AACH,SAAS,mBAAmB,CAAC,OAAgB,EAAE,QAAkB;IAC/D,IAAI,OAAO,CAAC,SAAS,EAAE,CAAC;QACtB,QAAQ,CAAC,IAAI,CACX,sBAAsB,SAAS,sDAAsD;YACnF,+EAA+E,CAClF,CAAC;IACJ,CAAC;IACD,IAAI,OAAO,CAAC,YAAY,GAAG,CAAC,EAAE,CAAC;QAC7B,QAAQ,CAAC,IAAI,CACX,GAAG,OAAO,CAAC,YAAY,kCAAkC,cAAc,WAAW;YAChF,mCAAmC,CACtC,CAAC;IACJ,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,SAAS,aAAa,CACpB,OAAqB,EACrB,MAAiB,EACjB,QAAkB;IAElB,OAAO;QACL,QAAQ,EAAE,cAAc,CACtB,OAAO,CAAC,QAAQ,IAAI,MAAM,CAAC,MAAM,EAAE,SAAS,EAC5C,gCAAgC,EAChC,QAAQ,CACT;QACD,QAAQ,EAAE,cAAc,CACtB,OAAO,CAAC,QAAQ,IAAI,MAAM,CAAC,MAAM,EAAE,SAAS,EAC5C,gCAAgC,EAChC,QAAQ,CACT;KACF,CAAC;AACJ,CAAC;AAED,SAAS,cAAc,CACrB,CAAqB,EACrB,IAAY,EACZ,QAAkB;IAElB,IAAI,CAAC,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IACtC,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IAC/E,QAAQ,CAAC,IAAI,CAAC,WAAW,IAAI,KAAK,MAAM,CAAC,CAAC,CAAC,gDAAgD,CAAC,CAAC;IAC7F,OAAO,SAAS,CAAC;AACnB,CAAC;AAED;;;;;GAKG;AACH,SAAS,qBAAqB,CAAC,GAAmC,EAAE,QAAkB;IACpF,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,CAAC;QAChB,QAAQ,CAAC,IAAI,CACX,+EAA+E;YAC7E,6CAA6C,CAChD,CAAC;QACF,OAAO;IACT,CAAC;IACD,IAAI,GAAG,CAAC,OAAO,IAAI,CAAC,EAAE,CAAC;QACrB,QAAQ,CAAC,IAAI,CACX,6EAA6E;YAC3E,gFAAgF,CACnF,CAAC;IACJ,CAAC;AACH,CAAC;AAED,SAAS,eAAe,CACtB,OAAqB,EACrB,MAAiB;IAEjB,OAAO;QACL,OAAO,EAAE,IAAI,GAAG,CAAC,OAAO,CAAC,YAAY,IAAI,MAAM,CAAC,OAAO,IAAI,EAAE,CAAC;QAC9D,OAAO,EAAE,IAAI,GAAG,CAAC,OAAO,CAAC,YAAY,IAAI,MAAM,CAAC,OAAO,IAAI,EAAE,CAAC;KAC/D,CAAC;AACJ,CAAC;AAID,SAAS,mBAAmB,CAC1B,MAAiB,EACjB,QAAkB;IAKlB,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAU,CAAC;IACnC,MAAM,SAAS,GAAiC,EAAE,CAAC;IACnD,KAAK,MAAM,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,IAAI,EAAE,CAAC,EAAE,CAAC;QACzD,IAAI,CAAC,CAAC,QAAQ;YAAE,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACjC,MAAM,QAAQ,GAAG,wBAAwB,CAAC,EAAE,EAAE,CAAC,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;QACpE,MAAM,MAAM,GAAG,sBAAsB,CAAC,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;QAC9D,IAAI,QAAQ,KAAK,SAAS,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;YACnD,SAAS,CAAC,EAAE,CAAC,GAAG,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC;QACvC,CAAC;IACH,CAAC;IACD,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC;AACjC,CAAC;AAED;;;;GAIG;AACH,SAAS,wBAAwB,CAC/B,EAAU,EACV,CAAU,EACV,QAAkB;IAElB,IAAI,CAAC,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IACtC,IAAK,eAAqC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAC/D,OAAO,MAAM,CAAC,CAAC,CAA6B,CAAC;IAC/C,CAAC;IACD,QAAQ,CAAC,IAAI,CAAC,SAAS,EAAE,uBAAuB,MAAM,CAAC,CAAC,CAAC,sBAAsB,CAAC,CAAC;IACjF,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAS,sBAAsB,CAAC,EAAU,EAAE,CAAU,EAAE,QAAkB;IACxE,IAAI,CAAC,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IACtC,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,CAAC,CAAC;IACpE,QAAQ,CAAC,IAAI,CACX,SAAS,EAAE,qBAAqB,MAAM,CAAC,CAAC,CAAC,oDAAoD,CAC9F,CAAC;IACF,OAAO,SAAS,CAAC;AACnB,CAAC;AAQD,SAAS,kBAAkB,CACzB,KAAiB,EACjB,KAAY,EACZ,OAAoB,EACpB,OAAoB;IAEpB,MAAM,SAAS,GAAkB,EAAE,WAAW,EAAE,EAAE,EAAE,WAAW,EAAE,EAAE,EAAE,YAAY,EAAE,EAAE,EAAE,CAAC;IACxF,SAAS,CAAC,WAAW,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,SAAS,CAAC,CAAC,CAAC;IAC/F,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAS,UAAU,CACjB,IAAc,EACd,KAAY,EACZ,OAAoB,EACpB,OAAoB,EACpB,SAAwB;IAExB,IAAI,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC;QACzB,SAAS,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACrC,OAAO,KAAK,CAAC;IACf,CAAC;IACD,IAAI,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC;QACzB,SAAS,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACpC,IAAI,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;QAClD,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,CAAC,WAAW,CAAC,IAAI,EAAE,KAAK,CAAC,EAAE,CAAC;QAC9B,SAAS,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACrC,OAAO,KAAK,CAAC;IACf,CAAC;IACD,SAAS,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACpC,IAAI,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;IAClD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,gBAAgB,CACvB,KAAiB,EACjB,KAAY,EACZ,OAAoB,EACpB,OAAoB,EACpB,SAAwB;IAExB,KAAK,IAAI,IAAI,GAAG,CAAC,EAAE,IAAI,GAAG,CAAC,EAAE,IAAI,EAAE,EAAE,CAAC;QACpC,IAAI,OAAO,GAAG,KAAK,CAAC;QACpB,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;YACtB,IAAI,SAAS,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;gBAAE,SAAS;YAC7F,IAAI,CAAC,WAAW,CAAC,CAAC,EAAE,KAAK,CAAC;gBAAE,SAAS;YACrC,SAAS,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;YACjC,CAAC,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;YAC/C,SAAS,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAC9B,OAAO,GAAG,IAAI,CAAC;QACjB,CAAC;QACD,IAAI,CAAC,OAAO;YAAE,MAAM;IACtB,CAAC;AACH,CAAC;AAED,SAAS,aAAa,CACpB,WAAuB,EACvB,KAAY,EACZ,KAAY,EACZ,OAAoB,EACpB,GAAgB,EAChB,OAAwB;IAExB,MAAM,SAAS,GAAiB,EAAE,CAAC;IACnC,KAAK,MAAM,IAAI,IAAI,WAAW,EAAE,CAAC;QAC/B,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;YAC9B,IAAI,CAAC,WAAW,CAAC,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;gBAAE,SAAS;YACrE,SAAS,CAAC,IAAI,CAAC,YAAY,CAAC,IAAI,EAAE,GAAG,EAAE,OAAO,CAAC,CAAC,CAAC;QACnD,CAAC;IACH,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAS,YAAY,CACnB,IAA+B,EAC/B,GAAgB,EAChB,OAAwB;IAExB,MAAM,OAAO,GAAG,YAAY,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IACxC,IAAI,OAAO,CAAC,MAAM,KAAK,MAAM,IAAI,OAAO,CAAC,MAAM,KAAK,gBAAgB,EAAE,CAAC;QACrE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;IAC3B,CAAC;IACD,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,GAAG,MAAM,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;IAC9E,OAAO,CAAC,QAAQ,GAAG,QAAQ,CAAC;IAC5B,OAAO,CAAC,QAAQ,GAAG,QAAQ,CAAC;IAC5B,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;AAC3B,CAAC;AAED,SAAS,WAAW,CAClB,IAMC,EACD,GAAmC,EACnC,SAAoC,EACpC,KAAY,EACZ,QAAkB,EAClB,IAA0B,EAC1B,SAAuB,EACvB,WAAqB,EACrB,YAAsB;IAEtB,OAAO;QACL,MAAM,EAAE,eAAe;QACvB,WAAW,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QACrC,UAAU,EAAE,IAAI,CAAC,UAAU;QAC3B,MAAM,EAAE;YACN,IAAI,EAAE,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC;YAC/B,IAAI,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,IAAI,CAAC,MAAM;YAC7D,MAAM,EAAE,GAAG,CAAC,MAAM;YAClB,GAAG,EAAE,GAAG,CAAC,GAAG;YACZ,OAAO,EAAE,GAAG,CAAC,OAAO;SACrB;QACD,SAAS,EAAE;YACT,QAAQ;YACR,eAAe,EAAE,SAAS,CAAC,eAAe;YAC1C,YAAY,EAAE,IAAI,CAAC,KAAK,EAAE,SAAS,CAAC;YACpC,SAAS,EAAE,IAAI,CAAC,KAAK,EAAE,UAAU,CAAC;YAClC,SAAS,EAAE,IAAI,CAAC,KAAK,EAAE,MAAM,CAAC;YAC9B,UAAU,EAAE,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC;YAC7B,eAAe,EAAE,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC;YAClC,SAAS,EAAE,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC;YAC5B,KAAK,EAAE,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,EAAE;YAClE,OAAO,EAAE,KAAK,CAAC,OAAO;SACvB;QACD,OAAO,EAAE;YACP,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,WAAW;YACX,YAAY;SACb;QACD,KAAK,EAAE,IAAI;QACX,QAAQ,EAAE,SAAS;aAChB,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC;aACrB,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,gBAAgB,CAAC;aAC5C,IAAI,CAAC,qBAAqB,CAAC;KAC/B,CAAC;AACJ,CAAC;AAED,SAAS,IAAI,CAAC,KAAY,EAAE,MAAc;IACxC,MAAM,GAAG,GAAa,EAAE,CAAC;IACzB,KAAK,MAAM,CAAC,IAAI,KAAK,CAAC,KAAK,EAAE,CAAC;QAC5B,IAAI,CAAC,CAAC,UAAU,CAAC,GAAG,MAAM,GAAG,CAAC;YAAE,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC;IACvE,CAAC;IACD,OAAO,GAAG,CAAC,IAAI,EAAE,CAAC;AACpB,CAAC;AAED,MAAM,KAAK,GAA2B,EAAE,QAAQ,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,GAAG,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,CAAC;AAE7F,SAAS,qBAAqB,CAAC,CAAU,EAAE,CAAU;IACnD,MAAM,EAAE,GAAG,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;IAClC,MAAM,EAAE,GAAG,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;IAClC,IAAI,EAAE,KAAK,EAAE;QAAE,OAAO,EAAE,GAAG,EAAE,CAAC;IAC9B,IAAI,CAAC,CAAC,OAAO,KAAK,CAAC,CAAC,OAAO;QACzB,OAAO,CAAC,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC,CAAC,OAAO,EAAE,SAAS,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;IAC1E,OAAO,CAAC,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;AAC1C,CAAC"}

package/dist/engine/diff.d.ts

@@ -0,0 +1,24 @@
+export interface TrailerData {
+    schema?: string;
+    generated_at?: string;
+    usa_version?: string;
+    overall?: number;
+    sections?: Record<string, {
+        score: number;
+        open: number;
+        review: number;
+    }>;
+    severity_totals?: Record<string, number>;
+    rules?: Record<string, {
+        status: string;
+        severity: string;
+        section: string;
+    }>;
+}
+/**
+ * An audit you can't compare against the last one is just a number.
+ * `usa diff` reads the YAML trailer USA embeds in every Markdown report and
+ * reports movement: regressions, fixes, and drift.
+ */
+export declare function diffReports(beforeRaw: string, afterRaw: string): string;
+//# sourceMappingURL=diff.d.ts.map

package/dist/engine/diff.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"diff.d.ts","sourceRoot":"","sources":["../../src/engine/diff.ts"],"names":[],"mappings":"AAGA,MAAM,WAAW,WAAW;IAC1B,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAC3E,eAAe,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACzC,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;CAC/E;AAED;;;;GAIG;AACH,wBAAgB,WAAW,CAAC,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,MAAM,CAoCvE"}

package/dist/engine/diff.js

@@ -0,0 +1,136 @@
+import { parse as parseYaml } from 'yaml';
+/**
+ * An audit you can't compare against the last one is just a number.
+ * `usa diff` reads the YAML trailer USA embeds in every Markdown report and
+ * reports movement: regressions, fixes, and drift.
+ */
+export function diffReports(beforeRaw, afterRaw) {
+    const before = parseYaml(beforeRaw);
+    const after = parseYaml(afterRaw);
+    if (!before || !after)
+        throw new Error('Could not parse one or both report trailers.');
+    const out = [];
+    const p = (s = '') => out.push(s);
+    const b = before.overall ?? 0;
+    const a = after.overall ?? 0;
+    const delta = Math.round((a - b) * 10) / 10;
+    renderDiffHeader(p, before, after, b, a, delta);
+    const buckets = classifyAllRules(before.rules ?? {}, after.rules ?? {});
+    const list = (title, items) => {
+        p(`## ${title} (${items.length})`);
+        p();
+        if (items.length === 0)
+            p('None. ✅');
+        else
+            for (const i of items)
+                p(`- ${i}`);
+        p();
+    };
+    list('✅ Fixed', buckets.fixed);
+    list('🔺 Regressed', buckets.regressed);
+    list('🟡 Changed (still open)', buckets.improved);
+    list('🆕 Newly applicable', buckets.newRules);
+    if (buckets.goneRules.length > 0)
+        list('➖ No longer applicable', buckets.goneRules);
+    p('---');
+    p();
+    p(renderDiffVerdict(delta));
+    p();
+    return out.join('\n');
+}
+function renderDiffHeader(p, before, after, b, a, delta) {
+    p('# 🔁 USA Audit Diff');
+    p();
+    p('| | Before | After | Δ |');
+    p('|---|---:|---:|---:|');
+    p(`| **Overall score** | ${b} | ${a} | ${sign(delta)} |`);
+    const sevKeys = ['CRITICAL', 'HIGH', 'MEDIUM', 'LOW', 'FUTURE'];
+    for (const k of sevKeys) {
+        const bv = before.severity_totals?.[k] ?? 0;
+        const av = after.severity_totals?.[k] ?? 0;
+        p(`| ${k} | ${bv} | ${av} | ${sign(av - bv)} |`);
+    }
+    p();
+    p(`*Before: ${before.generated_at ?? 'unknown'} · After: ${after.generated_at ?? 'unknown'}*`);
+    p();
+}
+function classifyAllRules(bRules, aRules) {
+    const buckets = {
+        fixed: [],
+        regressed: [],
+        improved: [],
+        newRules: [],
+        goneRules: [],
+    };
+    const ids = [...new Set([...Object.keys(bRules), ...Object.keys(aRules)])].sort();
+    for (const id of ids) {
+        classifyRuleChange(id, bRules[id], aRules[id], buckets);
+    }
+    return buckets;
+}
+const PASSING = new Set(['PASS']);
+const OPEN = new Set(['FAIL', 'WRONG', 'MISSING', 'DEPRECATED', 'EXPERIMENTAL']);
+function classifyRuleChange(id, x, y, buckets) {
+    if (!x) {
+        buckets.newRules.push(`${id} — now applicable (${y.status})`);
+        return;
+    }
+    if (!y) {
+        buckets.goneRules.push(id);
+        return;
+    }
+    if (x.status === y.status)
+        return;
+    if (classifyUnknownTransition(id, x.status, y.status, buckets))
+        return;
+    classifyOpenTransition(id, x.status, y.status, buckets);
+}
+/**
+ * Movements to or from the judgement queue. Previously these were dropped
+ * entirely, so resolving the queue (the tool's headline workflow) was
+ * invisible in `usa diff` — "No net movement… nothing changed" while a
+ * human did the most valuable work.
+ */
+function classifyUnknownTransition(id, xs, ys, buckets) {
+    if (xs !== 'UNKNOWN' && ys !== 'UNKNOWN')
+        return false;
+    if (xs === 'UNKNOWN' && ys === 'PASS') {
+        buckets.fixed.push(`${id} — UNKNOWN → PASS (resolved by review)`);
+    }
+    else if (ys === 'UNKNOWN' && !OPEN.has(xs)) {
+        buckets.regressed.push(`${id} — ${xs} → UNKNOWN (needs review)`);
+    }
+    else {
+        buckets.improved.push(`${id} — ${xs} → ${ys}`);
+    }
+    return true;
+}
+function classifyOpenTransition(id, xs, ys, buckets) {
+    const wasOpen = OPEN.has(xs);
+    const isOpen = OPEN.has(ys);
+    if (wasOpen && PASSING.has(ys)) {
+        buckets.fixed.push(`${id} — ${xs} → PASS`);
+    }
+    else if (!wasOpen && isOpen) {
+        buckets.regressed.push(`${id} — ${xs} → ${ys}`);
+    }
+    else if (wasOpen && isOpen) {
+        buckets.improved.push(`${id} — ${xs} → ${ys}`);
+    }
+}
+function renderDiffVerdict(delta) {
+    if (delta > 0) {
+        return `**Net movement: +${delta} points.** Keep going — the fixed list is the progress report.`;
+    }
+    if (delta < 0) {
+        return `**Net movement: ${delta} points.** New rules became applicable, or something regressed. Start with 🔺 Regressed.`;
+    }
+    return '**No net movement.** Either nothing changed, or fixes were offset by newly applicable rules.';
+}
+function sign(n) {
+    const v = Math.round(n * 10) / 10;
+    if (v === 0)
+        return '0';
+    return v > 0 ? `+${v}` : `${v}`;
+}
+//# sourceMappingURL=diff.js.map

package/dist/engine/diff.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"diff.js","sourceRoot":"","sources":["../../src/engine/diff.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,IAAI,SAAS,EAAE,MAAM,MAAM,CAAC;AAa1C;;;;GAIG;AACH,MAAM,UAAU,WAAW,CAAC,SAAiB,EAAE,QAAgB;IAC7D,MAAM,MAAM,GAAG,SAAS,CAAC,SAAS,CAAuB,CAAC;IAC1D,MAAM,KAAK,GAAG,SAAS,CAAC,QAAQ,CAAuB,CAAC;IACxD,IAAI,CAAC,MAAM,IAAI,CAAC,KAAK;QAAE,MAAM,IAAI,KAAK,CAAC,8CAA8C,CAAC,CAAC;IAEvF,MAAM,GAAG,GAAa,EAAE,CAAC;IACzB,MAAM,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAElC,MAAM,CAAC,GAAG,MAAM,CAAC,OAAO,IAAI,CAAC,CAAC;IAC9B,MAAM,CAAC,GAAG,KAAK,CAAC,OAAO,IAAI,CAAC,CAAC;IAC7B,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,CAAC,GAAG,EAAE,CAAC;IAE5C,gBAAgB,CAAC,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,EAAE,KAAK,CAAC,CAAC;IAEhD,MAAM,OAAO,GAAG,gBAAgB,CAAC,MAAM,CAAC,KAAK,IAAI,EAAE,EAAE,KAAK,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC;IAExE,MAAM,IAAI,GAAG,CAAC,KAAa,EAAE,KAAe,EAAE,EAAE;QAC9C,CAAC,CAAC,MAAM,KAAK,KAAK,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC;QACnC,CAAC,EAAE,CAAC;QACJ,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;YAAE,CAAC,CAAC,SAAS,CAAC,CAAC;;YAChC,KAAK,MAAM,CAAC,IAAI,KAAK;gBAAE,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QACxC,CAAC,EAAE,CAAC;IACN,CAAC,CAAC;IAEF,IAAI,CAAC,SAAS,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC;IAC/B,IAAI,CAAC,cAAc,EAAE,OAAO,CAAC,SAAS,CAAC,CAAC;IACxC,IAAI,CAAC,yBAAyB,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAC;IAClD,IAAI,CAAC,qBAAqB,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAC;IAC9C,IAAI,OAAO,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC;QAAE,IAAI,CAAC,wBAAwB,EAAE,OAAO,CAAC,SAAS,CAAC,CAAC;IAEpF,CAAC,CAAC,KAAK,CAAC,CAAC;IACT,CAAC,EAAE,CAAC;IACJ,CAAC,CAAC,iBAAiB,CAAC,KAAK,CAAC,CAAC,CAAC;IAC5B,CAAC,EAAE,CAAC;IAEJ,OAAO,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACxB,CAAC;AAED,SAAS,gBAAgB,CACvB,CAAuB,EACvB,MAAmB,EACnB,KAAkB,EAClB,CAAS,EACT,CAAS,EACT,KAAa;IAEb,CAAC,CAAC,qBAAqB,CAAC,CAAC;IACzB,CAAC,EAAE,CAAC;IACJ,CAAC,CAAC,0BAA0B,CAAC,CAAC;IAC9B,CAAC,CAAC,sBAAsB,CAAC,CAAC;IAC1B,CAAC,CAAC,yBAAyB,CAAC,MAAM,CAAC,MAAM,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAE1D,MAAM,OAAO,GAAe,CAAC,UAAU,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,QAAQ,CAAC,CAAC;IAC5E,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;QACxB,MAAM,EAAE,GAAG,MAAM,CAAC,eAAe,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QAC5C,MAAM,EAAE,GAAG,KAAK,CAAC,eAAe,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QAC3C,CAAC,CAAC,KAAK,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,IAAI,CAAC,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;IACnD,CAAC;IACD,CAAC,EAAE,CAAC;IACJ,CAAC,CAAC,YAAY,MAAM,CAAC,YAAY,IAAI,SAAS,aAAa,KAAK,CAAC,YAAY,IAAI,SAAS,GAAG,CAAC,CAAC;IAC/F,CAAC,EAAE,CAAC;AACN,CAAC;AAYD,SAAS,gBAAgB,CACvB,MAAmC,EACnC,MAAmC;IAEnC,MAAM,OAAO,GAAgB;QAC3B,KAAK,EAAE,EAAE;QACT,SAAS,EAAE,EAAE;QACb,QAAQ,EAAE,EAAE;QACZ,QAAQ,EAAE,EAAE;QACZ,SAAS,EAAE,EAAE;KACd,CAAC;IACF,MAAM,GAAG,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IAClF,KAAK,MAAM,EAAE,IAAI,GAAG,EAAE,CAAC;QACrB,kBAAkB,CAAC,EAAE,EAAE,MAAM,CAAC,EAAE,CAAC,EAAE,MAAM,CAAC,EAAE,CAAC,EAAE,OAAO,CAAC,CAAC;IAC1D,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC;AAClC,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,CAAC,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,YAAY,EAAE,cAAc,CAAC,CAAC,CAAC;AAEjF,SAAS,kBAAkB,CACzB,EAAU,EACV,CAA0B,EAC1B,CAA0B,EAC1B,OAAoB;IAEpB,IAAI,CAAC,CAAC,EAAE,CAAC;QACP,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,EAAE,sBAAsB,CAAE,CAAC,MAAM,GAAG,CAAC,CAAC;QAC/D,OAAO;IACT,CAAC;IACD,IAAI,CAAC,CAAC,EAAE,CAAC;QACP,OAAO,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAC3B,OAAO;IACT,CAAC;IACD,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,MAAM;QAAE,OAAO;IAClC,IAAI,yBAAyB,CAAC,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,OAAO,CAAC;QAAE,OAAO;IACvE,sBAAsB,CAAC,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;AAC1D,CAAC;AAED;;;;;GAKG;AACH,SAAS,yBAAyB,CAChC,EAAU,EACV,EAAU,EACV,EAAU,EACV,OAAoB;IAEpB,IAAI,EAAE,KAAK,SAAS,IAAI,EAAE,KAAK,SAAS;QAAE,OAAO,KAAK,CAAC;IACvD,IAAI,EAAE,KAAK,SAAS,IAAI,EAAE,KAAK,MAAM,EAAE,CAAC;QACtC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,wCAAwC,CAAC,CAAC;IACpE,CAAC;SAAM,IAAI,EAAE,KAAK,SAAS,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,EAAY,CAAC,EAAE,CAAC;QACvD,OAAO,CAAC,SAAS,CAAC,IAAI,CAAC,GAAG,EAAE,MAAM,EAAE,2BAA2B,CAAC,CAAC;IACnE,CAAC;SAAM,CAAC;QACN,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,EAAE,CAAC,CAAC;IACjD,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,sBAAsB,CAAC,EAAU,EAAE,EAAU,EAAE,EAAU,EAAE,OAAoB;IACtF,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,CAAC,EAAY,CAAC,CAAC;IACvC,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,EAAY,CAAC,CAAC;IACtC,IAAI,OAAO,IAAI,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC;QAC/B,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,MAAM,EAAE,SAAS,CAAC,CAAC;IAC7C,CAAC;SAAM,IAAI,CAAC,OAAO,IAAI,MAAM,EAAE,CAAC;QAC9B,OAAO,CAAC,SAAS,CAAC,IAAI,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,EAAE,CAAC,CAAC;IAClD,CAAC;SAAM,IAAI,OAAO,IAAI,MAAM,EAAE,CAAC;QAC7B,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,EAAE,CAAC,CAAC;IACjD,CAAC;AACH,CAAC;AAED,SAAS,iBAAiB,CAAC,KAAa;IACtC,IAAI,KAAK,GAAG,CAAC,EAAE,CAAC;QACd,OAAO,oBAAoB,KAAK,gEAAgE,CAAC;IACnG,CAAC;IACD,IAAI,KAAK,GAAG,CAAC,EAAE,CAAC;QACd,OAAO,mBAAmB,KAAK,0FAA0F,CAAC;IAC5H,CAAC;IACD,OAAO,8FAA8F,CAAC;AACxG,CAAC;AAED,SAAS,IAAI,CAAC,CAAS;IACrB,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,CAAC,GAAG,EAAE,CAAC;IAClC,IAAI,CAAC,KAAK,CAAC;QAAE,OAAO,GAAG,CAAC;IACxB,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC;AAClC,CAAC"}

package/dist/engine/evaluate.d.ts

@@ -0,0 +1,19 @@
+import type { Depth, Facts, Finding, Predicate, Rule, RulePack, Severity } from '../types.js';
+import { Project } from '../util/project.js';
+export interface EvalContext {
+    project: Project;
+    facts: Facts;
+    depth: Depth;
+    allowCommands: boolean;
+    disabled: Set<string>;
+    suppressions: Map<string, string>;
+}
+export declare function evalPredicate(p: Predicate | undefined, facts: Facts): boolean;
+export declare function ruleApplies(rule: Rule, facts: Facts, depth: Depth, includeAll?: boolean): boolean;
+export declare function packApplies(pack: RulePack, facts: Facts): boolean;
+export declare function evaluateRule(rule: Rule, ctx: EvalContext): Finding;
+export declare function resolvePath(obj: unknown, dotted: string): unknown;
+/** Effective weight of a rule: explicit override, else the severity default. */
+export declare function ruleWeight(rule: Rule): number;
+export declare function severityRank(s: Severity): number;
+//# sourceMappingURL=evaluate.d.ts.map

package/dist/engine/evaluate.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"evaluate.d.ts","sourceRoot":"","sources":["../../src/engine/evaluate.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAEV,KAAK,EACL,KAAK,EACL,OAAO,EAEP,SAAS,EACT,IAAI,EACJ,QAAQ,EACR,QAAQ,EAET,MAAM,aAAa,CAAC;AACrB,OAAO,EAAE,OAAO,EAAE,MAAM,oBAAoB,CAAC;AAG7C,MAAM,WAAW,WAAW;IAC1B,OAAO,EAAE,OAAO,CAAC;IACjB,KAAK,EAAE,KAAK,CAAC;IACb,KAAK,EAAE,KAAK,CAAC;IACb,aAAa,EAAE,OAAO,CAAC;IACvB,QAAQ,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;IACtB,YAAY,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CACnC;AAID,wBAAgB,aAAa,CAAC,CAAC,EAAE,SAAS,GAAG,SAAS,EAAE,KAAK,EAAE,KAAK,GAAG,OAAO,CAQ7E;AA+DD,wBAAgB,WAAW,CAAC,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,UAAU,UAAQ,GAAG,OAAO,CAS/F;AAED,wBAAgB,WAAW,CAAC,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,KAAK,GAAG,OAAO,CAEjE;AAID,wBAAgB,YAAY,CAAC,IAAI,EAAE,IAAI,EAAE,GAAG,EAAE,WAAW,GAAG,OAAO,CAyClE;AAuTD,wBAAgB,WAAW,CAAC,GAAG,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAOjE;AAED,gFAAgF;AAChF,wBAAgB,UAAU,CAAC,IAAI,EAAE,IAAI,GAAG,MAAM,CAE7C;AAED,wBAAgB,YAAY,CAAC,CAAC,EAAE,QAAQ,GAAG,MAAM,CAEhD"}