agent-roast 0.4.0 → 0.6.0

package/dist/cli.js

@@ -1,17 +1,24 @@
 #!/usr/bin/env node
 import {
+  ConfigError,
   GitError,
   GitResolutionError,
   InvalidDetectorError,
+  RULE_GUIDES,
+  VALID_DETECTORS,
   auditPullRequest,
+  checkProject,
   formatGithubStepSummary,
+  formatReviewMarkdown,
   generateShieldsJson,
   generateShieldsMarkdown,
   generateSvgBadge,
   initProject,
   loadConfig,
-  roastRepository
-} from "./chunk-O4SB2FCT.js";
+  reviewChanges,
+  roastRepository,
+  writeBaseline
+} from "./chunk-RU5OYHLR.js";
 
 // src/cli.ts
 import { Command } from "commander";
@@ -21,32 +28,41 @@ import * as path from "path";
 var require2 = createRequire(import.meta.url);
 var pkg = require2("../package.json");
 var program = new Command();
-program.name("agent-roast").description("Audit your git history or PR diffs for AI coding shortcuts and panic loops").version(pkg.version || "0.4.0").argument("[path]", "Path to git repository (default: current directory)", ".").option("-a, --all", "Audit ALL commits regardless of AI attribution tags", false).option("-s, --since <time>", "Time window for git analysis", "90 days ago").option("-v, --verbose", "Show commit SHAs and line snippets for all infractions", false).option("--json", "Output results as raw JSON", false).option("--base <ref>", "Base git ref/branch for PR mode audit (e.g. origin/main)").option("--head <ref>", "Head git ref/SHA for PR mode audit (default: HEAD)", "HEAD").option("--fail-on <rules>", "Comma-separated detectors that trigger CI failure").option("--fail-under <score>", "Fail CI if agent score is below threshold (0-100)").option("--format <format>", "Output format: terminal, json, github, markdown", "terminal").option("--authors", "Display author names and emails in report", false).action(async (repoPath, options) => {
+program.name("agent-roast").description("Audit your git history or PR diffs for AI coding shortcuts and panic loops").version(pkg.version || "0.4.0").argument("[path]", "Path to git repository (default: current directory)", ".").option("-a, --all", "Audit ALL commits regardless of AI attribution tags", false).option("-s, --since <time>", "Time window for git analysis", "90 days ago").option("-v, --verbose", "Show commit SHAs and line snippets for all infractions", false).option("--json", "Output results as raw JSON", false).option("--staged", "Audit staged changes before committing (including the first commit)", false).option("--base <ref>", "Base git ref/branch for PR mode audit (e.g. origin/main)").option("--head <ref>", "Head git ref/SHA for PR mode audit (default: HEAD)", "HEAD").option("--fail-on <rules>", "Comma-separated detectors that trigger CI failure").option("--fail-under <score>", "Fail CI if agent score is below threshold (0-100)").option("--format <format>", "Output format: terminal, json, github, markdown (check/review also support sarif)", "terminal").option("--authors", "Display author names and emails in report", false).action(async (repoPath, options) => {
   try {
     if (process.env.GITHUB_EVENT_NAME === "pull_request_target") {
       console.warn(
         "Warning: pull_request_target runs with elevated repository privileges. agent-roast recommends running on 'pull_request'."
       );
     }
+    if (options.staged && options.base) throw new ConfigError("--staged cannot be combined with --base.");
+    if (!["terminal", "json", "github", "markdown"].includes(options.format)) {
+      throw new ConfigError("--format must be terminal, json, github, or markdown.");
+    }
+    if (options.failUnder !== void 0 && (options.failUnder.trim() === "" || !Number.isFinite(Number(options.failUnder)) || Number(options.failUnder) < 0 || Number(options.failUnder) > 100)) {
+      throw new ConfigError("--fail-under must be a number between 0 and 100.");
+    }
+    if (!options.base && !options.staged && options.failOn !== void 0) {
+      throw new ConfigError("--fail-on requires --base or --staged.");
+    }
+    if (!options.base && !options.staged && !options.json && !["terminal", "json"].includes(options.format)) {
+      throw new ConfigError("Repository audits support terminal or json format; use --base or --staged for github/markdown.");
+    }
     const config = await loadConfig(repoPath);
-    if (options.base) {
-      let failOnRules;
-      if (options.failOn) {
-        failOnRules = options.failOn.split(",").map((s) => s.trim()).filter(Boolean);
-      } else {
-        const errorRules = Object.entries(config.rules || {}).filter(([_, level]) => level === "error").map(([rule]) => rule);
-        failOnRules = errorRules.length > 0 ? errorRules : ["test-skip"];
-      }
+    if (options.base || options.staged) {
+      const failOnRules = options.failOn !== void 0 ? options.failOn.split(",").map((s) => s.trim()).filter(Boolean) : config.failOn;
       const chosenFormat = options.json ? "json" : options.format || "terminal";
       const prResult = await auditPullRequest({
         cwd: repoPath,
         base: options.base,
+        staged: options.staged,
         head: options.head || "HEAD",
         failOn: failOnRules,
         format: chosenFormat,
         verbose: options.verbose,
         authors: options.authors,
-        ignorePaths: config.ignorePaths
+        ignorePaths: config.ignorePaths,
+        rules: config.rules
       });
       if (process.env.GITHUB_STEP_SUMMARY) {
         try {
@@ -80,9 +96,11 @@ has-supported-changes=${prResult.hasSupportedChanges}
         all: options.all,
         verbose: options.verbose,
         json: options.json,
-        ignorePaths: config.ignorePaths
+        panicLoopWindowMinutes: config.panicLoopWindowMinutes,
+        ignorePaths: config.ignorePaths,
+        rules: config.rules
       });
-      if (options.json) {
+      if (options.json || options.format === "json") {
         console.log(JSON.stringify(result.summary, null, 2));
       } else {
         console.log(result.output);
@@ -95,7 +113,7 @@ has-supported-changes=${prResult.hasSupportedChanges}
       }
     }
   } catch (err) {
-    if (err instanceof GitResolutionError || err instanceof InvalidDetectorError || err instanceof GitError || err.name === "GitError") {
+    if (err instanceof ConfigError || err instanceof GitResolutionError || err instanceof InvalidDetectorError || err instanceof GitError || err.name === "GitError") {
       console.error(`agent-roast error: ${err.message}`);
       process.exitCode = 2;
     } else {
@@ -104,6 +122,95 @@ has-supported-changes=${prResult.hasSupportedChanges}
     }
   }
 });
+program.command("review").description("Compare full changed source at merge-base and head; gate only new findings").argument("[path]", "Path to the Git repository", ".").addHelpText("after", "\nRequired: --base <trusted-ref>  Optional: --head <ref> (default HEAD)\nOutput: --format terminal|json|github|markdown|sarif, --json, --fail-on <rules>\nExample: agent-roast review --base origin/main --format markdown").action(async (repoPath) => {
+  try {
+    const options = program.opts();
+    if (!options.base) throw new ConfigError("review requires --base <trusted-ref>.");
+    if (options.staged || options.all || options.failUnder !== void 0 || program.getOptionValueSource("since") === "cli") {
+      throw new ConfigError("review compares committed refs; --staged, --all, --since and --fail-under do not apply.");
+    }
+    const controller = new AbortController();
+    const abort = () => controller.abort();
+    process.once("SIGINT", abort);
+    process.once("SIGTERM", abort);
+    try {
+      const result = await reviewChanges({
+        cwd: repoPath,
+        base: options.base,
+        head: options.head,
+        failOn: options.failOn !== void 0 ? options.failOn.split(",").map((rule) => rule.trim()).filter(Boolean) : void 0,
+        format: options.json ? "json" : options.format,
+        signal: controller.signal
+      });
+      if (process.env.GITHUB_STEP_SUMMARY) fs.appendFileSync(process.env.GITHUB_STEP_SUMMARY, formatReviewMarkdown(result) + "\n");
+      if (process.env.GITHUB_OUTPUT) fs.appendFileSync(
+        process.env.GITHUB_OUTPUT,
+        `passed=${result.passed}
+infractions-count=${result.infractions.length}
+has-supported-changes=${result.filesInspected > 0}
+complete=${result.complete}
+existing-count=${result.unchangedCount}
+removed-count=${result.removedFindings.length}
+`
+      );
+      console.log(result.output);
+      process.exitCode = result.exitCode;
+    } finally {
+      process.removeListener("SIGINT", abort);
+      process.removeListener("SIGTERM", abort);
+    }
+  } catch (error) {
+    console.error(`agent-roast review error: ${error instanceof Error ? error.message : String(error)}`);
+    process.exitCode = 2;
+  }
+});
+program.command("check").description("Check current tracked and non-ignored untracked source files").argument("[path]", "Path to a git repository", ".").option("--baseline <file>", "Report only findings not accepted in this baseline").option("--write-baseline <file>", "Save current findings for adoption (refuses to overwrite)").addHelpText("after", "\nOutput options: --format terminal|json|github|markdown|sarif, --json, --fail-on <rules>\nExamples:\n  agent-roast check\n  agent-roast check --write-baseline .agentroast-baseline.json\n  agent-roast check --baseline .agentroast-baseline.json --format json").action(async (repoPath, opts) => {
+  try {
+    const global = program.opts();
+    if (global.base || global.staged || global.failUnder !== void 0 || global.all || program.getOptionValueSource("head") === "cli" || program.getOptionValueSource("since") === "cli") {
+      throw new ConfigError("check inspects current files; history, --base, --head, --staged and --fail-under options do not apply.");
+    }
+    if (opts.baseline && opts.writeBaseline) throw new ConfigError("--baseline and --write-baseline cannot be combined.");
+    const result = await checkProject({
+      cwd: repoPath,
+      baseline: opts.baseline,
+      failOn: global.failOn !== void 0 ? global.failOn.split(",").map((rule) => rule.trim()).filter(Boolean) : void 0,
+      format: global.json ? "json" : global.format
+    });
+    if (opts.writeBaseline) {
+      if (!result.complete) throw new ConfigError("Cannot create a baseline from an incomplete scan. Resolve skipped files first.");
+      const basePath = path.resolve(repoPath, opts.writeBaseline);
+      writeBaseline(basePath, result.infractions);
+      const message = `Baseline created: ${basePath}
+Accepted ${result.totalFindings} existing findings. The code has not been fixed.
+Review and commit the baseline, then run check --baseline <file> to catch new findings.`;
+      console.log(global.json || global.format === "json" ? JSON.stringify({ operation: "write-baseline", baseline: basePath, acceptedFindings: result.totalFindings }, null, 2) : message);
+      process.exitCode = 0;
+      return;
+    }
+    console.log(result.output);
+    process.exitCode = result.exitCode;
+  } catch (err) {
+    console.error(`agent-roast check error: ${err instanceof Error ? err.message : String(err)}`);
+    process.exitCode = 2;
+  }
+});
+program.command("explain <rule>").description("Explain a detector, its limits, and how to address a finding").action((rule) => {
+  if (!VALID_DETECTORS.includes(rule)) {
+    console.error(`Unknown rule '${rule}'. Valid rules: ${VALID_DETECTORS.join(", ")}`);
+    process.exitCode = 2;
+    return;
+  }
+  const guide = RULE_GUIDES[rule];
+  console.log(`${rule}: ${guide.title}
+
+Why: ${guide.why}
+
+Next: ${guide.suggestion}
+
+Example: ${guide.example}
+`);
+});
 program.command("init").description("Initialize .agentroastrc.json and CI/hook configurations").argument("[dir]", "Directory to initialize", ".").option("-y, --yes", "Skip interactive prompts and use defaults", false).option("--ci", "Generate GitHub Actions workflow file", false).option("--hook", "Install Git pre-commit hook", false).action(async (targetDir, opts) => {
   try {
     const res = await initProject({
@@ -142,7 +249,9 @@ program.command("badge").description("Generate an AI discipline badge (SVG, Mark
       cwd: repoPath,
       since,
       all: isAll,
-      ignorePaths: config.ignorePaths
+      ignorePaths: config.ignorePaths,
+      rules: config.rules,
+      panicLoopWindowMinutes: config.panicLoopWindowMinutes
     });
     const score = result.summary.score;
     const label = opts.label || "AI Discipline";

package/dist/index.d.ts

@@ -19,6 +19,7 @@ interface Infraction {
     commitHash: string;
     commitDate: string;
     reason: string;
+    suggestion?: string;
 }
 interface MetricSummary {
     schemaVersion: string;
@@ -49,18 +50,23 @@ interface RoastOptions {
     authors?: boolean;
     ignorePaths?: string[];
     scoreThreshold?: number;
+    rules?: Record<string, "error" | "warn" | "off">;
+    panicLoopWindowMinutes?: number;
 }
 interface PrAuditOptions {
     cwd?: string;
-    base: string;
-    head: string;
+    base?: string;
+    head?: string;
+    staged?: boolean;
     failOn?: string[];
     format?: "terminal" | "json" | "github" | "markdown";
     verbose?: boolean;
     authors?: boolean;
     ignorePaths?: string[];
+    rules?: Record<string, "error" | "warn" | "off">;
 }
 interface PrAuditResult {
+    mode?: "pr" | "staged";
     schemaVersion: string;
     baseSha: string;
     headSha: string;
@@ -77,6 +83,71 @@ interface PrAuditResult {
     output: string;
     exitCode: number;
 }
+interface CheckOptions {
+    cwd?: string;
+    failOn?: string[];
+    format?: ReviewFormat;
+    baseline?: string;
+    signal?: AbortSignal;
+}
+interface CheckResult {
+    schemaVersion: string;
+    mode: "check";
+    filesInspected: number;
+    linesInspected: number;
+    totalFindings: number;
+    infractions: Infraction[];
+    baselineCount: number;
+    staleBaselineCount: number;
+    skippedFiles: {
+        file: string;
+        reason: string;
+    }[];
+    complete: boolean;
+    failedRules: string[];
+    passed: boolean;
+    exitCode: number;
+    output: string;
+}
+type ReviewFormat = "terminal" | "json" | "github" | "markdown" | "sarif";
+interface ReviewOptions {
+    cwd?: string;
+    base: string;
+    head?: string;
+    failOn?: string[];
+    format?: ReviewFormat;
+    signal?: AbortSignal;
+}
+interface ReviewResult {
+    schemaVersion: string;
+    mode: "review";
+    baseSha: string;
+    headSha: string;
+    mergeBaseSha: string;
+    policySha: string;
+    policyFile: string | null;
+    policyChanges: string[];
+    filesChanged: number;
+    filesInspected: number;
+    unsupportedFiles: number;
+    excludedFiles: number;
+    renamedFiles: number;
+    linesInspected: number;
+    beforeFindings: number;
+    afterFindings: number;
+    unchangedCount: number;
+    infractions: Infraction[];
+    removedFindings: Infraction[];
+    skippedFiles: {
+        file: string;
+        reason: string;
+    }[];
+    complete: boolean;
+    failedRules: string[];
+    passed: boolean;
+    exitCode: number;
+    output: string;
+}
 
 interface AiAttributionResult {
     isAiAttributed: boolean;
@@ -110,7 +181,7 @@ declare class GitError extends Error {
     code: number | null;
     constructor(stderr: string, code: number | null);
 }
-declare const HERMETIC_GIT_FLAGS: readonly ["-c", "core.quotepath=false", "-c", "diff.noprefix=false", "-c", "diff.mnemonicPrefix=false", "--no-pager"];
+declare const HERMETIC_GIT_FLAGS: readonly ["-c", "core.quotepath=false", "-c", "core.fsmonitor=false", "-c", "diff.noprefix=false", "-c", "diff.mnemonicPrefix=false", "--no-pager"];
 declare function getHermeticGitEnv(extraEnv?: NodeJS.ProcessEnv): NodeJS.ProcessEnv;
 declare function parseGitLogStream(stream: Readable, onCommit: (commit: ParsedCommit, stats: {
     skippedLongLines: number;
@@ -130,7 +201,7 @@ declare function unquoteGitPath(pathStr: string): string;
  */
 declare function parseDiff(rawDiff: string): ParseDiffResult;
 declare function streamGitLog(cwd?: string, since?: string): Readable;
-declare function streamGitDiff(cwd: string, baseSha: string, headSha: string): Readable;
+declare function streamGitDiff(cwd: string, baseSha: string, headSha: string, staged?: boolean): Readable;
 /**
  * Validates and resolves a git ref to a full commit SHA safely using --end-of-options.
  * Exits with code 2 on failure.
@@ -151,6 +222,7 @@ declare function isTestFile(filePath: string): boolean;
  */
 declare function auditFileDiffs(files: ParsedFileDiff[], commitHash?: string, commitDate?: string, options?: {
     ignorePaths?: string[];
+    rules?: Record<string, "error" | "warn" | "off">;
 }): {
     infractions: Infraction[];
     hasSupportedChanges: boolean;
@@ -178,9 +250,13 @@ declare class MetricsCollector {
     private activePanicChain;
     private includeAll;
     private ignorePaths?;
+    private rules?;
+    private panicLoopWindowMinutes;
     constructor(options?: {
         all?: boolean;
         ignorePaths?: string[];
+        rules?: Record<string, "error" | "warn" | "off">;
+        panicLoopWindowMinutes?: number;
     });
     recordSkipped(stats: {
         skippedLongLines?: number;
@@ -197,11 +273,7 @@ declare function formatTerminalCard(summary: MetricSummary, options: {
     verbose?: boolean;
 }): string;
 declare function formatPrTerminalCard(result: PrAuditResult): string;
-/**
- * Generates GitHub Actions workflow commands (::error and ::warning)
- * respecting GitHub's limits (max 10 annotations per level per step).
- */
-declare function formatGithubAnnotations(result: PrAuditResult): string;
+declare function formatGithubAnnotations(result: Pick<PrAuditResult, "infractions" | "failedRules">): string;
 /**
  * Generates GitHub Step Summary Markdown
  */
@@ -210,6 +282,11 @@ declare function formatGithubStepSummary(result: PrAuditResult): string;
  * Generates rich GitHub PR Comment Markdown (for PR comments / sticky bots)
  */
 declare function formatPrMarkdownComment(result: PrAuditResult): string;
+/** Current-tree report emphasizes next actions and explicitly accounts for baseline debt. */
+declare function formatCheckTerminal(result: CheckResult): string;
+declare function formatCheckMarkdown(result: CheckResult): string;
+declare function formatReviewTerminal(result: ReviewResult): string;
+declare function formatReviewMarkdown(result: ReviewResult): string;
 
 interface AgentRoastConfig {
     /** Detector rules to fail CI on in PR mode */
@@ -224,10 +301,13 @@ interface AgentRoastConfig {
     panicLoopWindowMinutes?: number;
 }
 declare const DEFAULT_CONFIG: AgentRoastConfig;
-/**
- * Discovers and parses repository configuration file.
- * Returns DEFAULT_CONFIG if no configuration file is found or if parsing fails.
- */
+declare const CONFIG_FILENAMES: string[];
+declare class ConfigError extends Error {
+    constructor(message: string);
+}
+/** Parse one explicit policy source; shared by worktree and trusted Git reviews. */
+declare function configFromText(text: string, source: string): AgentRoastConfig;
+/** Invalid policy must stop the audit instead of silently changing CI behavior. */
 declare function loadConfig(cwd?: string): AgentRoastConfig;
 /**
  * Matches a relative or normalized file path against an array of glob ignore patterns.
@@ -245,19 +325,14 @@ interface InitResult {
     skipped: string[];
 }
 declare const DEFAULT_CONFIG_TEMPLATE: {
-    $schema: string;
     ignorePaths: string[];
     rules: {
-        "hallucinated-package": string;
-        "empty-catch": string;
-        "trivial-assert": string;
-        "stub-abandonment": string;
-        "mock-leak": string;
+        [x: string]: "error" | "warn" | "off";
     };
     scoreThreshold: number;
 };
-declare const GITHUB_WORKFLOW_TEMPLATE = "name: Agent Roast\non:\n  pull_request:\n    branches: [main, master]\n  push:\n    branches: [main, master]\n\njobs:\n  audit:\n    name: Audit AI Shortcuts\n    runs-on: ubuntu-latest\n    steps:\n      - name: Checkout repository\n        uses: actions/checkout@v4\n        with:\n          fetch-depth: 0\n\n      - name: Setup Node.js\n        uses: actions/setup-node@v4\n        with:\n          node-version: 20\n\n      - name: Run agent-roast PR check\n        if: github.event_name == 'pull_request'\n        run: npx agent-roast --base ${{ github.event.pull_request.base.sha }} --head ${{ github.event.pull_request.head.sha }} --format github\n\n      - name: Run agent-roast repo audit\n        if: github.event_name != 'pull_request'\n        run: npx agent-roast --fail-under 70\n";
-declare const PRE_COMMIT_HOOK_TEMPLATE = "#!/bin/sh\n# Run agent-roast pre-commit verification\nnpx agent-roast --fail-under 70\n";
+declare const GITHUB_WORKFLOW_TEMPLATE = "name: Agent Roast\non:\n  pull_request:\n    branches: [main, master]\n\npermissions:\n  contents: read\n\njobs:\n  audit:\n    name: Audit AI Shortcuts\n    runs-on: ubuntu-latest\n    steps:\n      - name: Checkout repository\n        uses: actions/checkout@v4\n        with:\n          fetch-depth: 0\n\n      - name: Run agent-roast PR check\n        if: github.event_name == 'pull_request'\n        uses: Nari-Ab/agent-roast@v1\n        with:\n          base: ${{ github.event.pull_request.base.sha }}\n          head: ${{ github.event.pull_request.head.sha }}\n          format: github\n          mode: review\n";
+declare const PRE_COMMIT_HOOK_TEMPLATE = "#!/bin/sh\n# Run agent-roast pre-commit verification\nnpx --no-install agent-roast --staged\n";
 declare function initProject(options?: InitOptions): Promise<InitResult>;
 
 interface ShieldsEndpointResponse {
@@ -274,6 +349,52 @@ declare function generateSvgBadge(score: number | null, label?: string): string;
 declare function generateShieldsMarkdown(score: number | null, label?: string, repoUrl?: string): string;
 declare function generateShieldsJson(score: number | null, label?: string): ShieldsEndpointResponse;
 
+/** Read current tracked and non-ignored untracked source; never run project code. */
+declare function checkProject(options?: CheckOptions): Promise<CheckResult>;
+
+/** Match only within the same changed-file pair; Git renames remap old paths.
+ * Counts matter: an identical second shortcut is still a new finding. */
+declare function compareFindings(before: Infraction[], after: Infraction[], newPath: string): {
+    introduced: Infraction[];
+    removed: Infraction[];
+    unchanged: number;
+};
+/** Compare full source blobs in changed files without executing or checking out the candidate. */
+declare function reviewChanges(options: ReviewOptions): Promise<ReviewResult>;
+
+/** Offline SARIF 2.1.0, with relative URIs and explicit incomplete-run status.
+ * Snippets are omitted to avoid embedding source code in integration artifacts. */
+declare function formatSarif(report: CheckResult | ReviewResult): string;
+
+interface FindingBaseline {
+    schemaVersion: "1.0.0";
+    fingerprintVersion: 1;
+    entries: {
+        fingerprint: string;
+        count: number;
+    }[];
+}
+/** Line-independent but multiplicity-aware; adding the same shortcut twice is new. */
+declare function findingFingerprint(finding: Infraction): string;
+declare function createBaseline(findings: Infraction[]): FindingBaseline;
+declare function loadBaseline(filename: string): FindingBaseline;
+declare function applyBaseline(findings: Infraction[], baseline: FindingBaseline): {
+    findings: Infraction[];
+    baselineCount: number;
+    staleBaselineCount: number;
+};
+/** Publish a complete file atomically and refuse to replace an existing baseline. */
+declare function writeBaseline(filename: string, findings: Infraction[]): void;
+
+interface RuleGuide {
+    title: string;
+    why: string;
+    suggestion: string;
+    example: string;
+}
+/** Review guidance, not automatic edits: legitimate exceptions need context. */
+declare const RULE_GUIDES: Record<DetectorType, RuleGuide>;
+
 declare class InvalidDetectorError extends Error {
     constructor(message: string);
 }
@@ -283,4 +404,4 @@ declare function roastRepository(options?: RoastOptions): Promise<{
 }>;
 declare function auditPullRequest(options: PrAuditOptions): Promise<PrAuditResult>;
 
-export { type AgentRoastConfig, type AiAttributionResult, type CommitInfo, DEFAULT_CONFIG, DEFAULT_CONFIG_TEMPLATE, type DetectorType, FIELD_SEPARATOR, GITHUB_WORKFLOW_TEMPLATE, GitError, GitResolutionError, HERMETIC_GIT_FLAGS, type Infraction, type InitOptions, type InitResult, InvalidDetectorError, type MetricSummary, MetricsCollector, PRE_COMMIT_HOOK_TEMPLATE, type ParseDiffResult, type ParsedCommit, type ParsedDiffLine, type ParsedFileDiff, type PrAuditOptions, type PrAuditResult, RECORD_SEPARATOR, type RoastOptions, type ShieldsEndpointResponse, VALID_DETECTORS, auditFileDiffs, auditPullRequest, detectAiAttribution, findMergeBase, formatGithubAnnotations, formatGithubStepSummary, formatPrMarkdownComment, formatPrTerminalCard, formatTerminalCard, generateShareUrl, generateShieldsJson, generateShieldsMarkdown, generateSvgBadge, getHermeticGitEnv, getScoreColor, initProject, isCodeFile, isTestFile, loadConfig, matchIgnorePath, parseDiff, parseGitLogStream, resolveCommitSha, roastRepository, streamGitDiff, streamGitLog, stripStringAndRegexLiterals, unquoteGitPath };
+export { type AgentRoastConfig, type AiAttributionResult, CONFIG_FILENAMES, type CheckOptions, type CheckResult, type CommitInfo, ConfigError, DEFAULT_CONFIG, DEFAULT_CONFIG_TEMPLATE, type DetectorType, FIELD_SEPARATOR, type FindingBaseline, GITHUB_WORKFLOW_TEMPLATE, GitError, GitResolutionError, HERMETIC_GIT_FLAGS, type Infraction, type InitOptions, type InitResult, InvalidDetectorError, type MetricSummary, MetricsCollector, PRE_COMMIT_HOOK_TEMPLATE, type ParseDiffResult, type ParsedCommit, type ParsedDiffLine, type ParsedFileDiff, type PrAuditOptions, type PrAuditResult, RECORD_SEPARATOR, RULE_GUIDES, type ReviewFormat, type ReviewOptions, type ReviewResult, type RoastOptions, type RuleGuide, type ShieldsEndpointResponse, VALID_DETECTORS, applyBaseline, auditFileDiffs, auditPullRequest, checkProject, compareFindings, configFromText, createBaseline, detectAiAttribution, findMergeBase, findingFingerprint, formatCheckMarkdown, formatCheckTerminal, formatGithubAnnotations, formatGithubStepSummary, formatPrMarkdownComment, formatPrTerminalCard, formatReviewMarkdown, formatReviewTerminal, formatSarif, formatTerminalCard, generateShareUrl, generateShieldsJson, generateShieldsMarkdown, generateSvgBadge, getHermeticGitEnv, getScoreColor, initProject, isCodeFile, isTestFile, loadBaseline, loadConfig, matchIgnorePath, parseDiff, parseGitLogStream, resolveCommitSha, reviewChanges, roastRepository, streamGitDiff, streamGitLog, stripStringAndRegexLiterals, unquoteGitPath, writeBaseline };

package/dist/index.js

@@ -1,5 +1,7 @@
 #!/usr/bin/env node
 import {
+  CONFIG_FILENAMES,
+  ConfigError,
   DEFAULT_CONFIG,
   DEFAULT_CONFIG_TEMPLATE,
   FIELD_SEPARATOR,
@@ -11,15 +13,27 @@ import {
   MetricsCollector,
   PRE_COMMIT_HOOK_TEMPLATE,
   RECORD_SEPARATOR,
+  RULE_GUIDES,
   VALID_DETECTORS,
+  applyBaseline,
   auditFileDiffs,
   auditPullRequest,
+  checkProject,
+  compareFindings,
+  configFromText,
+  createBaseline,
   detectAiAttribution,
   findMergeBase,
+  findingFingerprint,
+  formatCheckMarkdown,
+  formatCheckTerminal,
   formatGithubAnnotations,
   formatGithubStepSummary,
   formatPrMarkdownComment,
   formatPrTerminalCard,
+  formatReviewMarkdown,
+  formatReviewTerminal,
+  formatSarif,
   formatTerminalCard,
   generateShareUrl,
   generateShieldsJson,
@@ -30,18 +44,23 @@ import {
   initProject,
   isCodeFile,
   isTestFile,
+  loadBaseline,
   loadConfig,
   matchIgnorePath,
   parseDiff,
   parseGitLogStream,
   resolveCommitSha,
+  reviewChanges,
   roastRepository,
   streamGitDiff,
   streamGitLog,
   stripStringAndRegexLiterals,
-  unquoteGitPath
-} from "./chunk-O4SB2FCT.js";
+  unquoteGitPath,
+  writeBaseline
+} from "./chunk-RU5OYHLR.js";
 export {
+  CONFIG_FILENAMES,
+  ConfigError,
   DEFAULT_CONFIG,
   DEFAULT_CONFIG_TEMPLATE,
   FIELD_SEPARATOR,
@@ -53,15 +72,27 @@ export {
   MetricsCollector,
   PRE_COMMIT_HOOK_TEMPLATE,
   RECORD_SEPARATOR,
+  RULE_GUIDES,
   VALID_DETECTORS,
+  applyBaseline,
   auditFileDiffs,
   auditPullRequest,
+  checkProject,
+  compareFindings,
+  configFromText,
+  createBaseline,
   detectAiAttribution,
   findMergeBase,
+  findingFingerprint,
+  formatCheckMarkdown,
+  formatCheckTerminal,
   formatGithubAnnotations,
   formatGithubStepSummary,
   formatPrMarkdownComment,
   formatPrTerminalCard,
+  formatReviewMarkdown,
+  formatReviewTerminal,
+  formatSarif,
   formatTerminalCard,
   generateShareUrl,
   generateShieldsJson,
@@ -72,14 +103,17 @@ export {
   initProject,
   isCodeFile,
   isTestFile,
+  loadBaseline,
   loadConfig,
   matchIgnorePath,
   parseDiff,
   parseGitLogStream,
   resolveCommitSha,
+  reviewChanges,
   roastRepository,
   streamGitDiff,
   streamGitLog,
   stripStringAndRegexLiterals,
-  unquoteGitPath
+  unquoteGitPath,
+  writeBaseline
 };

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "agent-roast",
-  "version": "0.4.0",
-  "description": "Zero-telemetry CLI scorecard analyzing git history for AI coding agent infractions and panic loops",
+  "version": "0.6.0",
+  "description": "Offline code checks for skipped tests, swallowed errors, unfinished stubs and AI coding shortcuts",
   "type": "module",
   "main": "./dist/index.js",
   "types": "./dist/index.d.ts",
@@ -17,7 +17,9 @@
     "build": "tsup",
     "dev": "tsup --watch",
     "test": "vitest run",
-    "prepublishOnly": "npm run build"
+    "prepublishOnly": "npm run build",
+    "pretest": "npm run build",
+    "typecheck": "tsc --noEmit"
   },
   "keywords": [
     "ai",