code-auditor-mcp 3.1.0 → 3.4.0

package/dist/config/defaults.d.ts

@@ -1,7 +1,7 @@
 /**
  * Default configurations for the code auditor
  */
-import { AuditConfig } from '../types.js';
+import { AuditConfig, PathProfile } from '../types.js';
 /**
  * Get default configuration
  */
@@ -36,6 +36,11 @@ export declare const DEFAULT_ANALYZER_CONFIGS: {
         checkStrings: boolean;
         ignoreComments: boolean;
         ignoreWhitespace: boolean;
+        divergence: {
+            divergenceThreshold: number;
+            divergenceRuns: number;
+            minPairSimilarity: number;
+        };
     };
     security: {
         authPatterns: string[];
@@ -70,6 +75,9 @@ export declare const DEFAULT_ANALYZER_CONFIGS: {
             maxJoins: number;
             warnOnSelectStar: boolean;
         };
+        detection: {
+            mode: 'hybrid';
+        };
     };
     documentation: {
         requireFunctionDocs: boolean;
@@ -96,8 +104,71 @@ export declare const DEFAULT_ANALYZER_CONFIGS: {
         dbCallMethods: string[];
         dbBindingNames: string[];
         fileGateGlobs: string[];
+        detection: {
+            mode: 'hybrid';
+        };
+        validatorPackageList: string[];
+    };
+    styles: {
+        minCorpus: number;
+        colorDeltaE: number;
+        outlierMaxShare: number;
+        modeMinCount: number;
+        scaleProperties: string[];
+        zIndexMaxDistinct: number;
+        mechanismFragmentationMinMechanisms: number;
+        declarationSetMinDeclarations: number;
+        declarationSetSimilarityThreshold: number;
+    };
+    conventions: {
+        minCorpus: number;
+        pairConfidence: number;
+        modeShare: number;
+        maxConventionsPerDomain: number;
+    };
+    crossDomain: {
+        schemaLifecycle: {
+            enableWrittenNeverRead: boolean;
+            enableReadNeverWritten: boolean;
+            enableTransactionBoundaryRisk: boolean;
+            txnTableMax: number;
+        };
+        validatorBypass: {
+            validators: never[];
+            modeShare: number;
+            minCorpus: number;
+            depth: number;
+        };
+        coverage: {
+            testGlobs: string[];
+            staticReachDepth: number;
+            topRiskDecile: number;
+        };
     };
 };
+/**
+ * Built-in path profiles shipped with the tool.
+ *
+ * "scripts-and-tests" caps scripts, tests, and test fixtures to
+ * "suggestion" severity — grounded in the Spec 11 triage numbers
+ * showing these directories produce noise, not signal.
+ *
+ * Disable entirely via `"builtin": false` in .codeauditor.json.
+ * Replace a specific built-in via a user profile with the same name
+ * and `"builtin": false`.
+ */
+export declare const BUILTIN_PATH_PROFILES: PathProfile[];
+/**
+ * Merge built-in path profiles with user-configured profiles.
+ *
+ * - `builtin: false` at top level → no built-ins
+ * - User profile with `builtin: false` → replaces built-in of same name
+ * - Otherwise: built-ins come first, user profiles appended after
+ *   (later wins on conflict)
+ *
+ * @returns The merged profile array, or undefined if no profiles active
+ */
+export declare function mergePathProfiles(userProfiles: PathProfile[] | undefined, builtinEnabled: boolean | undefined): PathProfile[] | undefined;
 /**
  * Default code index configuration
  */

package/dist/config/defaults.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"defaults.d.ts","sourceRoot":"","sources":["../../src/config/defaults.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAE1C;;GAEG;AACH,wBAAgB,gBAAgB,IAAI,WAAW,CAwB9C;AAED;;GAEG;AACH,wBAAgB,sBAAsB,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,CAAC,CA+BhF;AAED;;GAEG;AACH,wBAAgB,sBAAsB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,CAAC,CAyBxE;AAED;;GAEG;AACH,eAAO,MAAM,wBAAwB;IAGnC,KAAK;QACH,kBAAkB;QAClB,iBAAiB;QACjB,sBAAsB;QACtB,iBAAiB;QACjB,aAAa;QAEb,mBAAmB;QAEnB,qBAAqB;QACrB,wBAAwB;;IAI1B,GAAG;QACD,gBAAgB;QAChB,mBAAmB;QACnB,eAAe;QACf,YAAY;QACZ,YAAY;QACZ,cAAc;QACd,gBAAgB;;IAGlB,QAAQ;QACN,YAAY;QACZ,aAAa;QACb,iBAAiB;QACjB,cAAc;;IAGhB,SAAS;QACP,iBAAiB;YACf,KAAK;gBACH,UAAU;gBACV,KAAK;gBACL,OAAO;;;QAGX,oBAAoB;QACpB,aAAa;QACb,UAAU;;IAGZ,UAAU;QAER,YAAY;QACZ,gBAAgB;YACd,QAAQ;YACR,KAAK;YACL,OAAO;;QAET,gBAAgB;YACd,aAAa;YACb,SAAS;;QAEX,qBAAqB;YACnB,QAAQ;YACR,gBAAgB;;;IAKpB,aAAa;QACX,mBAAmB;QACnB,gBAAgB;QAChB,gBAAgB;QAChB,iBAAiB;QACjB,oBAAoB;QACpB,cAAc;QASd,KAAK;QACL,YAAY;QACZ,WAAW;QACX,eAAe;;IAcjB,MAAM;QACJ,wBAAwB;QACxB,sBAAsB;QACtB,sBAAsB;QACtB,kBAAkB;QAClB,qBAAqB;QACrB,qBAAqB;QACrB,eAAe;QACf,WAAW;QACX,eAAe;QACf,aAAa;QACb,cAAc;QACd,aAAa;;CAEhB,CAAC;AAEF;;GAEG;AACH,eAAO,MAAM,yBAAyB;IACpC,YAAY;IACZ,YAAY;IACZ,iBAAiB;IACjB,eAAe;CAChB,CAAC"}
+{"version":3,"file":"defaults.d.ts","sourceRoot":"","sources":["../../src/config/defaults.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EAAE,WAAW,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAEvD;;GAEG;AACH,wBAAgB,gBAAgB,IAAI,WAAW,CA0C9C;AAED;;GAEG;AACH,wBAAgB,sBAAsB,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,CAAC,CA+BhF;AAED;;GAEG;AACH,wBAAgB,sBAAsB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,CAAC,CAyBxE;AAED;;GAEG;AACH,eAAO,MAAM,wBAAwB;IAGnC,KAAK;QACH,kBAAkB;QAClB,iBAAiB;QACjB,sBAAsB;QACtB,iBAAiB;QACjB,aAAa;QAEb,mBAAmB;QAEnB,qBAAqB;QACrB,wBAAwB;;IAK1B,GAAG;QACD,gBAAgB;QAChB,mBAAmB;QACnB,eAAe;QACf,YAAY;QACZ,YAAY;QACZ,cAAc;QACd,gBAAgB;QAEhB,UAAU;YACR,mBAAmB;YACnB,cAAc;YACd,iBAAiB;;;IAIrB,QAAQ;QACN,YAAY;QACZ,aAAa;QACb,iBAAiB;QACjB,cAAc;;IAGhB,SAAS;QACP,iBAAiB;YACf,KAAK;gBACH,UAAU;gBACV,KAAK;gBACL,OAAO;;;QAGX,oBAAoB;QACpB,aAAa;QACb,UAAU;;IAGZ,UAAU;QAER,YAAY;QACZ,gBAAgB;YACd,QAAQ;YACR,KAAK;YACL,OAAO;;QAET,gBAAgB;YACd,aAAa;YACb,SAAS;;QAEX,qBAAqB;YACnB,QAAQ;YACR,gBAAgB;;QAGlB,SAAS;YACP,IAAI,EAAE,QAAQ;;;IAKlB,aAAa;QACX,mBAAmB;QACnB,gBAAgB;QAChB,gBAAgB;QAChB,iBAAiB;QACjB,oBAAoB;QACpB,cAAc;QASd,KAAK;QACL,YAAY;QACZ,WAAW;QACX,eAAe;;IAcjB,MAAM;QACJ,wBAAwB;QACxB,sBAAsB;QACtB,sBAAsB;QACtB,kBAAkB;QAClB,qBAAqB;QACrB,qBAAqB;QACrB,eAAe;QACf,WAAW;QACX,eAAe;QACf,aAAa;QACb,cAAc;QACd,aAAa;QAEb,SAAS;YACP,IAAI,EAAE,QAAQ;;QAGhB,oBAAoB;;IAOtB,MAAM;QACJ,SAAS;QACT,WAAW;QACX,eAAe;QACf,YAAY;QACZ,eAAe;QAKf,iBAAiB;QACjB,mCAAmC;QACnC,6BAA6B;QAC7B,iCAAiC;;IAInC,WAAW;QACT,SAAS;QACT,cAAc;QACd,SAAS;QACT,uBAAuB;;IAIzB,WAAW;QACT,eAAe;YACb,sBAAsB;YACtB,sBAAsB;YACtB,6BAA6B;YAC7B,WAAW;;QAEb,eAAe;YACb,UAAU;YACV,SAAS;YACT,SAAS;YACT,KAAK;;QAEP,QAAQ;YACN,SAAS;YACT,gBAAgB;YAChB,aAAa;;;CAGlB,CAAC;AAEF;;;;;;;;;;GAUG;AACH,eAAO,MAAM,qBAAqB,EAAE,WAAW,EAc9C,CAAC;AAEF;;;;;;;;;GASG;AACH,wBAAgB,iBAAiB,CAC/B,YAAY,EAAE,WAAW,EAAE,GAAG,SAAS,EACvC,cAAc,EAAE,OAAO,GAAG,SAAS,GAClC,WAAW,EAAE,GAAG,SAAS,CAqB3B;AAED;;GAEG;AACH,eAAO,MAAM,yBAAyB;IACpC,YAAY;IACZ,YAAY;IACZ,iBAAiB;IACjB,eAAe;CAChB,CAAC"}

package/dist/config/defaults.js

@@ -6,7 +6,7 @@
  */
 export function getDefaultConfig() {
     return {
-        includePaths: ['**/*.ts', '**/*.tsx', '**/*.js', '**/*.jsx', '**/*.go'],
+        includePaths: ['**/*.ts', '**/*.tsx', '**/*.js', '**/*.jsx', '**/*.go', '**/*.css', '**/*.scss'],
         excludePaths: [
             '**/node_modules/**',
             '**/.next/**',
@@ -16,7 +16,7 @@ export function getDefaultConfig() {
             '**/*.test.{ts,tsx,js,jsx}',
             '**/*.spec.{ts,tsx,js,jsx}'
         ],
-        enabledAnalyzers: ['solid', 'dry', 'security', 'component', 'data-access'],
+        enabledAnalyzers: ['solid', 'dry', 'security', 'component', 'data-access', 'styles', 'conventions', 'cross-domain'],
         outputFormats: ['html', 'json'],
         outputDirectory: './audit-reports',
         minSeverity: 'suggestion',
@@ -26,6 +26,24 @@ export function getDefaultConfig() {
             maxCritical: 0,
             maxWarnings: 100,
             minHealthScore: 75
+        },
+        // Spec-11 R5: Mechanical recalibration — audited 2026-07-20.
+        // Audit report: bench/results/spec-11-recalibration-audit.md
+        //
+        // Demoted (suggestion): domain-mismatch confirmed but users with
+        //   applicable domains (multi-tenant SaaS, known-schema projects)
+        //   need these visible and re-enablable.
+        // Promoted (warning): precision ≥ 0.95, judged-true ≥ 0.90,
+        //   one tier only per Spec 11 R5. single-responsibility promotion
+        //   to critical is withheld — length heuristics should not block hooks.
+        // Restored to defaults: sql-injection-risk, loop-query, unfiltered-query,
+        //   direct-sql, single-responsibility. These have external-corpus evidence
+        //   of utility or insufficient evidence to recalibrate.
+        severityOverrides: {
+            'missing-org-filter': 'suggestion',
+            'unknown-table': 'suggestion',
+            'solid/class-size': 'warning',
+            'dependency-inversion': 'warning',
         }
     };
 }
@@ -95,25 +113,32 @@ export const DEFAULT_ANALYZER_CONFIGS = {
     // and classAggregateComplexity for true cyclomatic complexity.
     solid: {
         maxMethodsPerClass: 10,
-        maxLinesPerMethod: 50,
-        maxParametersPerMethod: 4,
-        maxImportsPerFile: 20,
+        maxLinesPerMethod: 50, // Spec 11 R3 sweep: confirmed
+        maxParametersPerMethod: 4, // Spec 11 R3 sweep: confirmed
+        maxImportsPerFile: 5, // Spec 11 R3 sweep: 20 → 5 (precision-first)
         maxComplexity: 10, // DEPRECATED — old heuristic
         // R5.1: Per-method cyclomatic complexity threshold (true McCC)
-        maxMethodComplexity: 50,
+        maxMethodComplexity: 10, // Spec 11 R3 sweep: 50 → 10 (precision-first)
         // R5.2: Class-level aggregation thresholds
-        classMethodsThreshold: 15,
-        classAggregateComplexity: 100,
+        classMethodsThreshold: 5, // Spec 11 R3 sweep: 15 → 5 (precision-first)
+        classAggregateComplexity: 80, // Spec 11 R3 sweep: 100 → 80 (precision-first)
     },
-    // Spec-17 R3: minLineThreshold raised from 5 → 15
+    // Spec 11 R3 sweep: minLineThreshold 15 → 3, similarityThreshold 0.85 → 0.5 (precision-first)
+    // ⚠️ These sweep recommendations reflect a minimal corpus; R4 real-corpus triage may revert.
     dry: {
-        minLineThreshold: 15,
-        similarityThreshold: 0.85,
+        minLineThreshold: 3,
+        similarityThreshold: 0.5,
         excludePatterns: ['**/*.test.ts', '**/*.spec.ts'],
         checkImports: true,
         checkStrings: true,
         ignoreComments: true,
         ignoreWhitespace: true,
+        // Spec 13 R5 — Diverging-clone detection
+        divergence: {
+            divergenceThreshold: 0.05,
+            divergenceRuns: 2,
+            minPairSimilarity: 0.5,
+        },
     },
     security: {
         authPatterns: ['withAuth', 'requireAuth', 'isAuthenticated'],
@@ -130,7 +155,7 @@ export const DEFAULT_ANALYZER_CONFIGS = {
             }
         },
         checkErrorBoundaries: true,
-        maxComplexity: 15,
+        maxComplexity: 5, // Spec 11 R3 sweep: 15 → 5 (precision-first)
         maxNesting: 4
     },
     dataAccess: {
@@ -148,7 +173,11 @@ export const DEFAULT_ANALYZER_CONFIGS = {
         performanceThresholds: {
             maxJoins: 5,
             warnOnSelectStar: true
-        }
+        },
+        // Spec 21 R3: shared detection mode — provenance-primary with name-fallback
+        detection: {
+            mode: 'hybrid',
+        },
     },
     // Spec-17: documentation analyzer defaults
     documentation: {
@@ -156,7 +185,7 @@ export const DEFAULT_ANALYZER_CONFIGS = {
         requireClassDocs: true,
         requireParamDocs: true,
         requireReturnDocs: true,
-        minDescriptionLength: 10,
+        minDescriptionLength: 2, // Spec 11 R3 sweep: 10 → 2 (precision-first)
         exemptPatterns: [
             '\\.test\\.',
             '\\.spec\\.',
@@ -188,15 +217,117 @@ export const DEFAULT_ANALYZER_CONFIGS = {
         checkNamingConventions: true,
         detectUnusedTables: false,
         validateQueryPatterns: true,
-        maxQueriesPerFunction: 5,
+        maxQueriesPerFunction: 1, // Spec 11 R3 sweep: 5 → 1 (precision-first)
         requiredSchemas: [],
         sqlTagNames: ['sql', 'db'],
         dbReceiverNames: ['db', 'database', 'sql', 'stmt', 'connection', 'pool', 'client'],
         dbCallMethods: ['exec', 'prepare', 'batch', 'run', 'all', 'first', 'query', 'get', 'each'],
         dbBindingNames: ['env.DB'],
         fileGateGlobs: ['**/*.sql', '**/migrations/**'],
+        // Spec 21 R3: shared detection mode — provenance-primary with name-fallback
+        detection: {
+            mode: 'hybrid',
+        },
+        // Spec 21 R4: validator package list for provenanced validator detection
+        validatorPackageList: [
+            'zod', 'joi', 'ajv', 'valibot', 'yup', 'superstruct', 'arktype',
+            '@sinclair/typebox', 'class-validator',
+        ],
+    },
+    // Spec 10 R3: style intelligence analyzer defaults
+    styles: {
+        minCorpus: 20,
+        colorDeltaE: 2.0,
+        outlierMaxShare: 0.05,
+        modeMinCount: 10,
+        scaleProperties: [
+            'margin', 'margin-top', 'margin-right', 'margin-bottom', 'margin-left',
+            'padding', 'padding-top', 'padding-right', 'padding-bottom', 'padding-left',
+            'gap', 'row-gap', 'column-gap', 'font-size',
+        ],
+        zIndexMaxDistinct: 6,
+        mechanismFragmentationMinMechanisms: 3,
+        declarationSetMinDeclarations: 5,
+        declarationSetSimilarityThreshold: 0.9,
+    },
+    // Spec 12 R2: convention mining analyzer defaults
+    conventions: {
+        minCorpus: 20,
+        pairConfidence: 0.9,
+        modeShare: 0.8,
+        maxConventionsPerDomain: 200,
+    },
+    // Spec 15: cross-domain analysis defaults
+    crossDomain: {
+        schemaLifecycle: {
+            enableWrittenNeverRead: true,
+            enableReadNeverWritten: true,
+            enableTransactionBoundaryRisk: true,
+            txnTableMax: 4,
+        },
+        validatorBypass: {
+            validators: [],
+            modeShare: 0.8,
+            minCorpus: 20,
+            depth: 3,
+        },
+        coverage: {
+            testGlobs: ['**/*.test.*', '**/*.spec.*', '**/__tests__/**'],
+            staticReachDepth: 2,
+            topRiskDecile: 0.1,
+        },
     },
 };
+/**
+ * Built-in path profiles shipped with the tool.
+ *
+ * "scripts-and-tests" caps scripts, tests, and test fixtures to
+ * "suggestion" severity — grounded in the Spec 11 triage numbers
+ * showing these directories produce noise, not signal.
+ *
+ * Disable entirely via `"builtin": false` in .codeauditor.json.
+ * Replace a specific built-in via a user profile with the same name
+ * and `"builtin": false`.
+ */
+export const BUILTIN_PATH_PROFILES = [
+    {
+        name: 'scripts-and-tests',
+        paths: [
+            'scripts/**',
+            'tests/**',
+            'test/**',
+            '__tests__/**',
+            'fixtures/**',
+            '*.test.*',
+            '*.spec.*',
+        ],
+        overrides: { severityCap: 'suggestion' },
+    },
+];
+/**
+ * Merge built-in path profiles with user-configured profiles.
+ *
+ * - `builtin: false` at top level → no built-ins
+ * - User profile with `builtin: false` → replaces built-in of same name
+ * - Otherwise: built-ins come first, user profiles appended after
+ *   (later wins on conflict)
+ *
+ * @returns The merged profile array, or undefined if no profiles active
+ */
+export function mergePathProfiles(userProfiles, builtinEnabled) {
+    // builtin: false disables all built-in profiles
+    if (builtinEnabled === false) {
+        return userProfiles && userProfiles.length > 0 ? userProfiles : undefined;
+    }
+    if (!userProfiles || userProfiles.length === 0) {
+        // No user profiles — use built-ins only
+        return BUILTIN_PATH_PROFILES.length > 0 ? [...BUILTIN_PATH_PROFILES] : undefined;
+    }
+    // Merge: built-ins first, user profiles appended (later wins)
+    const userReplaced = new Set(userProfiles.filter((p) => p.builtin === false).map((p) => p.name));
+    const activeBuiltins = BUILTIN_PATH_PROFILES.filter((b) => !userReplaced.has(b.name));
+    return [...activeBuiltins, ...userProfiles];
+}
 /**
  * Default code index configuration
  */

package/dist/config/defaults.js.map

@@ -1 +1 @@
-{"version":3,"file":"defaults.js","sourceRoot":"","sources":["../../src/config/defaults.ts"],"names":[],"mappings":"AAAA;;GAEG;AAIH;;GAEG;AACH,MAAM,UAAU,gBAAgB;IAC9B,OAAO;QACL,YAAY,EAAE,CAAC,SAAS,EAAE,UAAU,EAAE,SAAS,EAAE,UAAU,EAAE,SAAS,CAAC;QACvE,YAAY,EAAE;YACZ,oBAAoB;YACpB,aAAa;YACb,YAAY;YACZ,aAAa;YACb,gBAAgB;YAChB,2BAA2B;YAC3B,2BAA2B;SAC5B;QACD,gBAAgB,EAAE,CAAC,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,WAAW,EAAE,aAAa,CAAC;QAC1E,aAAa,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC;QAC/B,eAAe,EAAE,iBAAiB;QAClC,WAAW,EAAE,YAAY;QACzB,cAAc,EAAE,KAAK;QACrB,YAAY,EAAE,IAAI;QAClB,UAAU,EAAE;YACV,WAAW,EAAE,CAAC;YACd,WAAW,EAAE,GAAG;YAChB,cAAc,EAAE,EAAE;SACnB;KACF,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,sBAAsB,CAAC,WAAmB;IACxD,QAAQ,WAAW,EAAE,CAAC;QACpB,KAAK,QAAQ;YACX,OAAO;gBACL,YAAY,EAAE,CAAC,mBAAmB,EAAE,qBAAqB,EAAE,mBAAmB,CAAC;gBAC/E,YAAY,EAAE;oBACZ,GAAG,gBAAgB,EAAE,CAAC,YAAa;oBACnC,aAAa;oBACb,cAAc;iBACf;aACF,CAAC;QAEJ,KAAK,OAAO;YACV,OAAO;gBACL,YAAY,EAAE,CAAC,0BAA0B,CAAC;gBAC1C,YAAY,EAAE;oBACZ,GAAG,gBAAgB,EAAE,CAAC,YAAa;oBACnC,cAAc;oBACd,aAAa;iBACd;aACF,CAAC;QAEJ,KAAK,MAAM;YACT,OAAO;gBACL,YAAY,EAAE,CAAC,kBAAkB,EAAE,kBAAkB,CAAC;gBACtD,aAAa,EAAE,CAAC,MAAM,EAAE,KAAK,CAAC;aAC/B,CAAC;QAEJ;YACE,OAAO,EAAE,CAAC;IACd,CAAC;AACH,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,sBAAsB,CAAC,GAAW;IAChD,QAAQ,GAAG,EAAE,CAAC;QACZ,KAAK,IAAI;YACP,OAAO;gBACL,aAAa,EAAE,CAAC,MAAM,CAAC;gBACvB,cAAc,EAAE,IAAI;gBACpB,YAAY,EAAE,KAAK;aACpB,CAAC;QAEJ,KAAK,aAAa;YAChB,OAAO;gBACL,aAAa,EAAE,CAAC,MAAM,CAAC;gBACvB,YAAY,EAAE,IAAI;gBAClB,WAAW,EAAE,YAAY;aAC1B,CAAC;QAEJ,KAAK,YAAY;YACf,OAAO;gBACL,WAAW,EAAE,SAAS;gBACtB,cAAc,EAAE,IAAI;aACrB,CAAC;QAEJ;YACE,OAAO,EAAE,CAAC;IACd,CAAC;AACH,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAAG;IACtC,gFAAgF;IAChF,+DAA+D;IAC/D,KAAK,EAAE;QACL,kBAAkB,EAAE,EAAE;QACtB,iBAAiB,EAAE,EAAE;QACrB,sBAAsB,EAAE,CAAC;QACzB,iBAAiB,EAAE,EAAE;QACrB,aAAa,EAAE,EAAE,EAAoB,6BAA6B;QAClE,+DAA+D;QAC/D,mBAAmB,EAAE,EAAE;QACvB,2CAA2C;QAC3C,qBAAqB,EAAE,EAAE;QACzB,wBAAwB,EAAE,GAAG;KAC9B;IAED,kDAAkD;IAClD,GAAG,EAAE;QACH,gBAAgB,EAAE,EAAE;QACpB,mBAAmB,EAAE,IAAI;QACzB,eAAe,EAAE,CAAC,cAAc,EAAE,cAAc,CAAC;QACjD,YAAY,EAAE,IAAI;QAClB,YAAY,EAAE,IAAI;QAClB,cAAc,EAAE,IAAI;QACpB,gBAAgB,EAAE,IAAI;KACvB;IAED,QAAQ,EAAE;QACR,YAAY,EAAE,CAAC,UAAU,EAAE,aAAa,EAAE,iBAAiB,CAAC;QAC5D,aAAa,EAAE,CAAC,WAAW,EAAE,cAAc,EAAE,SAAS,CAAC;QACvD,iBAAiB,EAAE,CAAC,WAAW,EAAE,eAAe,CAAC;QACjD,cAAc,EAAE,CAAC,QAAQ,EAAE,QAAQ,EAAE,UAAU,CAAC;KACjD;IAED,SAAS,EAAE;QACT,iBAAiB,EAAE;YACjB,KAAK,EAAE;gBACL,UAAU,EAAE,CAAC,OAAO,EAAE,OAAO,CAAC;gBAC9B,KAAK,EAAE,CAAC,MAAM,CAAC;gBACf,OAAO,EAAE,CAAC,UAAU,EAAE,WAAW,CAAC;aACnC;SACF;QACD,oBAAoB,EAAE,IAAI;QAC1B,aAAa,EAAE,EAAE;QACjB,UAAU,EAAE,CAAC;KACd;IAED,UAAU,EAAE;QACV,yFAAyF;QACzF,YAAY,EAAE,MAAM;QACpB,gBAAgB,EAAE;YAChB,QAAQ,EAAE,CAAC,IAAI,EAAE,UAAU,EAAE,YAAY,CAAC;YAC1C,KAAK,EAAE,CAAC,OAAO,EAAE,QAAQ,CAAC;YAC1B,OAAO,EAAE,CAAC,SAAS,EAAE,UAAU,CAAC;SACjC;QACD,gBAAgB,EAAE;YAChB,aAAa,EAAE,CAAC,GAAG,EAAE,IAAI,EAAE,QAAQ,CAAC;YACpC,SAAS,EAAE,CAAC,UAAU,EAAE,QAAQ,EAAE,OAAO,CAAC;SAC3C;QACD,qBAAqB,EAAE;YACrB,QAAQ,EAAE,CAAC;YACX,gBAAgB,EAAE,IAAI;SACvB;KACF;IAED,2CAA2C;IAC3C,aAAa,EAAE;QACb,mBAAmB,EAAE,IAAI;QACzB,gBAAgB,EAAE,IAAI;QACtB,gBAAgB,EAAE,IAAI;QACtB,iBAAiB,EAAE,IAAI;QACvB,oBAAoB,EAAE,EAAE;QACxB,cAAc,EAAE;YACd,YAAY;YACZ,YAAY;YACZ,YAAY;YACZ,MAAM;YACN,SAAS;YACT,WAAW;YACX,UAAU;SACX;QACD,KAAK,EAAE,QAAQ;QACf,YAAY,EAAE,CAAC;QACf,WAAW,EAAE,KAAK;QAClB,eAAe,EAAE;YACf,sBAAsB;YACtB,oBAAoB;YACpB,iBAAiB;YACjB,kBAAkB;YAClB,aAAa;YACb,WAAW;YACX,cAAc;YACd,eAAe;YACf,WAAW;SACZ;KACF;IAED,uCAAuC;IACvC,MAAM,EAAE;QACN,wBAAwB,EAAE,IAAI;QAC9B,sBAAsB,EAAE,IAAI;QAC5B,sBAAsB,EAAE,IAAI;QAC5B,kBAAkB,EAAE,KAAK;QACzB,qBAAqB,EAAE,IAAI;QAC3B,qBAAqB,EAAE,CAAC;QACxB,eAAe,EAAE,EAAE;QACnB,WAAW,EAAE,CAAC,KAAK,EAAE,IAAI,CAAC;QAC1B,eAAe,EAAE,CAAC,IAAI,EAAE,UAAU,EAAE,KAAK,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,EAAE,QAAQ,CAAC;QAClF,aAAa,EAAE,CAAC,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,CAAC;QAC1F,cAAc,EAAE,CAAC,QAAQ,CAAC;QAC1B,aAAa,EAAE,CAAC,UAAU,EAAE,kBAAkB,CAAC;KAChD;CACF,CAAC;AAEF;;GAEG;AACH,MAAM,CAAC,MAAM,yBAAyB,GAAG;IACvC,YAAY,EAAE,wBAAwB;IACtC,YAAY,EAAE,IAAI;IAClB,iBAAiB,EAAE,GAAG;IACtB,eAAe,EAAE,KAAK;CACvB,CAAC"}
+{"version":3,"file":"defaults.js","sourceRoot":"","sources":["../../src/config/defaults.ts"],"names":[],"mappings":"AAAA;;GAEG;AAIH;;GAEG;AACH,MAAM,UAAU,gBAAgB;IAC9B,OAAO;QACL,YAAY,EAAE,CAAC,SAAS,EAAE,UAAU,EAAE,SAAS,EAAE,UAAU,EAAE,SAAS,EAAE,UAAU,EAAE,WAAW,CAAC;QAChG,YAAY,EAAE;YACZ,oBAAoB;YACpB,aAAa;YACb,YAAY;YACZ,aAAa;YACb,gBAAgB;YAChB,2BAA2B;YAC3B,2BAA2B;SAC5B;QACD,gBAAgB,EAAE,CAAC,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,WAAW,EAAE,aAAa,EAAE,QAAQ,EAAE,aAAa,EAAE,cAAc,CAAC;QACnH,aAAa,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC;QAC/B,eAAe,EAAE,iBAAiB;QAClC,WAAW,EAAE,YAAY;QACzB,cAAc,EAAE,KAAK;QACrB,YAAY,EAAE,IAAI;QAClB,UAAU,EAAE;YACV,WAAW,EAAE,CAAC;YACd,WAAW,EAAE,GAAG;YAChB,cAAc,EAAE,EAAE;SACnB;QACD,6DAA6D;QAC7D,6DAA6D;QAC7D,EAAE;QACF,iEAAiE;QACjE,kEAAkE;QAClE,yCAAyC;QACzC,4DAA4D;QAC5D,kEAAkE;QAClE,wEAAwE;QACxE,0EAA0E;QAC1E,2EAA2E;QAC3E,wDAAwD;QACxD,iBAAiB,EAAE;YACjB,oBAAoB,EAAE,YAAY;YAClC,eAAe,EAAE,YAAY;YAC7B,kBAAkB,EAAE,SAAS;YAC7B,sBAAsB,EAAE,SAAS;SAClC;KACF,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,sBAAsB,CAAC,WAAmB;IACxD,QAAQ,WAAW,EAAE,CAAC;QACpB,KAAK,QAAQ;YACX,OAAO;gBACL,YAAY,EAAE,CAAC,mBAAmB,EAAE,qBAAqB,EAAE,mBAAmB,CAAC;gBAC/E,YAAY,EAAE;oBACZ,GAAG,gBAAgB,EAAE,CAAC,YAAa;oBACnC,aAAa;oBACb,cAAc;iBACf;aACF,CAAC;QAEJ,KAAK,OAAO;YACV,OAAO;gBACL,YAAY,EAAE,CAAC,0BAA0B,CAAC;gBAC1C,YAAY,EAAE;oBACZ,GAAG,gBAAgB,EAAE,CAAC,YAAa;oBACnC,cAAc;oBACd,aAAa;iBACd;aACF,CAAC;QAEJ,KAAK,MAAM;YACT,OAAO;gBACL,YAAY,EAAE,CAAC,kBAAkB,EAAE,kBAAkB,CAAC;gBACtD,aAAa,EAAE,CAAC,MAAM,EAAE,KAAK,CAAC;aAC/B,CAAC;QAEJ;YACE,OAAO,EAAE,CAAC;IACd,CAAC;AACH,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,sBAAsB,CAAC,GAAW;IAChD,QAAQ,GAAG,EAAE,CAAC;QACZ,KAAK,IAAI;YACP,OAAO;gBACL,aAAa,EAAE,CAAC,MAAM,CAAC;gBACvB,cAAc,EAAE,IAAI;gBACpB,YAAY,EAAE,KAAK;aACpB,CAAC;QAEJ,KAAK,aAAa;YAChB,OAAO;gBACL,aAAa,EAAE,CAAC,MAAM,CAAC;gBACvB,YAAY,EAAE,IAAI;gBAClB,WAAW,EAAE,YAAY;aAC1B,CAAC;QAEJ,KAAK,YAAY;YACf,OAAO;gBACL,WAAW,EAAE,SAAS;gBACtB,cAAc,EAAE,IAAI;aACrB,CAAC;QAEJ;YACE,OAAO,EAAE,CAAC;IACd,CAAC;AACH,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAAG;IACtC,gFAAgF;IAChF,+DAA+D;IAC/D,KAAK,EAAE;QACL,kBAAkB,EAAE,EAAE;QACtB,iBAAiB,EAAE,EAAE,EAAgB,8BAA8B;QACnE,sBAAsB,EAAE,CAAC,EAAY,8BAA8B;QACnE,iBAAiB,EAAE,CAAC,EAAiB,6CAA6C;QAClF,aAAa,EAAE,EAAE,EAAoB,6BAA6B;QAClE,+DAA+D;QAC/D,mBAAmB,EAAE,EAAE,EAAa,8CAA8C;QAClF,2CAA2C;QAC3C,qBAAqB,EAAE,CAAC,EAAa,6CAA6C;QAClF,wBAAwB,EAAE,EAAE,EAAS,+CAA+C;KACrF;IAED,8FAA8F;IAC9F,6FAA6F;IAC7F,GAAG,EAAE;QACH,gBAAgB,EAAE,CAAC;QACnB,mBAAmB,EAAE,GAAG;QACxB,eAAe,EAAE,CAAC,cAAc,EAAE,cAAc,CAAC;QACjD,YAAY,EAAE,IAAI;QAClB,YAAY,EAAE,IAAI;QAClB,cAAc,EAAE,IAAI;QACpB,gBAAgB,EAAE,IAAI;QACtB,yCAAyC;QACzC,UAAU,EAAE;YACV,mBAAmB,EAAE,IAAI;YACzB,cAAc,EAAE,CAAC;YACjB,iBAAiB,EAAE,GAAG;SACvB;KACF;IAED,QAAQ,EAAE;QACR,YAAY,EAAE,CAAC,UAAU,EAAE,aAAa,EAAE,iBAAiB,CAAC;QAC5D,aAAa,EAAE,CAAC,WAAW,EAAE,cAAc,EAAE,SAAS,CAAC;QACvD,iBAAiB,EAAE,CAAC,WAAW,EAAE,eAAe,CAAC;QACjD,cAAc,EAAE,CAAC,QAAQ,EAAE,QAAQ,EAAE,UAAU,CAAC;KACjD;IAED,SAAS,EAAE;QACT,iBAAiB,EAAE;YACjB,KAAK,EAAE;gBACL,UAAU,EAAE,CAAC,OAAO,EAAE,OAAO,CAAC;gBAC9B,KAAK,EAAE,CAAC,MAAM,CAAC;gBACf,OAAO,EAAE,CAAC,UAAU,EAAE,WAAW,CAAC;aACnC;SACF;QACD,oBAAoB,EAAE,IAAI;QAC1B,aAAa,EAAE,CAAC,EAAe,6CAA6C;QAC5E,UAAU,EAAE,CAAC;KACd;IAED,UAAU,EAAE;QACV,yFAAyF;QACzF,YAAY,EAAE,MAAM;QACpB,gBAAgB,EAAE;YAChB,QAAQ,EAAE,CAAC,IAAI,EAAE,UAAU,EAAE,YAAY,CAAC;YAC1C,KAAK,EAAE,CAAC,OAAO,EAAE,QAAQ,CAAC;YAC1B,OAAO,EAAE,CAAC,SAAS,EAAE,UAAU,CAAC;SACjC;QACD,gBAAgB,EAAE;YAChB,aAAa,EAAE,CAAC,GAAG,EAAE,IAAI,EAAE,QAAQ,CAAC;YACpC,SAAS,EAAE,CAAC,UAAU,EAAE,QAAQ,EAAE,OAAO,CAAC;SAC3C;QACD,qBAAqB,EAAE;YACrB,QAAQ,EAAE,CAAC;YACX,gBAAgB,EAAE,IAAI;SACvB;QACD,4EAA4E;QAC5E,SAAS,EAAE;YACT,IAAI,EAAE,QAAiB;SACxB;KACF;IAED,2CAA2C;IAC3C,aAAa,EAAE;QACb,mBAAmB,EAAE,IAAI;QACzB,gBAAgB,EAAE,IAAI;QACtB,gBAAgB,EAAE,IAAI;QACtB,iBAAiB,EAAE,IAAI;QACvB,oBAAoB,EAAE,CAAC,EAAQ,6CAA6C;QAC5E,cAAc,EAAE;YACd,YAAY;YACZ,YAAY;YACZ,YAAY;YACZ,MAAM;YACN,SAAS;YACT,WAAW;YACX,UAAU;SACX;QACD,KAAK,EAAE,QAAQ;QACf,YAAY,EAAE,CAAC;QACf,WAAW,EAAE,KAAK;QAClB,eAAe,EAAE;YACf,sBAAsB;YACtB,oBAAoB;YACpB,iBAAiB;YACjB,kBAAkB;YAClB,aAAa;YACb,WAAW;YACX,cAAc;YACd,eAAe;YACf,WAAW;SACZ;KACF;IAED,uCAAuC;IACvC,MAAM,EAAE;QACN,wBAAwB,EAAE,IAAI;QAC9B,sBAAsB,EAAE,IAAI;QAC5B,sBAAsB,EAAE,IAAI;QAC5B,kBAAkB,EAAE,KAAK;QACzB,qBAAqB,EAAE,IAAI;QAC3B,qBAAqB,EAAE,CAAC,EAAO,4CAA4C;QAC3E,eAAe,EAAE,EAAE;QACnB,WAAW,EAAE,CAAC,KAAK,EAAE,IAAI,CAAC;QAC1B,eAAe,EAAE,CAAC,IAAI,EAAE,UAAU,EAAE,KAAK,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,EAAE,QAAQ,CAAC;QAClF,aAAa,EAAE,CAAC,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,CAAC;QAC1F,cAAc,EAAE,CAAC,QAAQ,CAAC;QAC1B,aAAa,EAAE,CAAC,UAAU,EAAE,kBAAkB,CAAC;QAC/C,4EAA4E;QAC5E,SAAS,EAAE;YACT,IAAI,EAAE,QAAiB;SACxB;QACD,yEAAyE;QACzE,oBAAoB,EAAE;YACpB,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,SAAS,EAAE,KAAK,EAAE,aAAa,EAAE,SAAS;YAC/D,mBAAmB,EAAE,iBAAiB;SACvC;KACF;IAED,mDAAmD;IACnD,MAAM,EAAE;QACN,SAAS,EAAE,EAAE;QACb,WAAW,EAAE,GAAG;QAChB,eAAe,EAAE,IAAI;QACrB,YAAY,EAAE,EAAE;QAChB,eAAe,EAAE;YACf,QAAQ,EAAE,YAAY,EAAE,cAAc,EAAE,eAAe,EAAE,aAAa;YACtE,SAAS,EAAE,aAAa,EAAE,eAAe,EAAE,gBAAgB,EAAE,cAAc;YAC3E,KAAK,EAAE,SAAS,EAAE,YAAY,EAAE,WAAW;SAC5C;QACD,iBAAiB,EAAE,CAAC;QACpB,mCAAmC,EAAE,CAAC;QACtC,6BAA6B,EAAE,CAAC;QAChC,iCAAiC,EAAE,GAAG;KACvC;IAED,kDAAkD;IAClD,WAAW,EAAE;QACX,SAAS,EAAE,EAAE;QACb,cAAc,EAAE,GAAG;QACnB,SAAS,EAAE,GAAG;QACd,uBAAuB,EAAE,GAAG;KAC7B;IAED,0CAA0C;IAC1C,WAAW,EAAE;QACX,eAAe,EAAE;YACf,sBAAsB,EAAE,IAAI;YAC5B,sBAAsB,EAAE,IAAI;YAC5B,6BAA6B,EAAE,IAAI;YACnC,WAAW,EAAE,CAAC;SACf;QACD,eAAe,EAAE;YACf,UAAU,EAAE,EAAE;YACd,SAAS,EAAE,GAAG;YACd,SAAS,EAAE,EAAE;YACb,KAAK,EAAE,CAAC;SACT;QACD,QAAQ,EAAE;YACR,SAAS,EAAE,CAAC,aAAa,EAAE,aAAa,EAAE,iBAAiB,CAAC;YAC5D,gBAAgB,EAAE,CAAC;YACnB,aAAa,EAAE,GAAG;SACnB;KACF;CACF,CAAC;AAEF;;;;;;;;;;GAUG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAkB;IAClD;QACE,IAAI,EAAE,mBAAmB;QACzB,KAAK,EAAE;YACL,YAAY;YACZ,UAAU;YACV,SAAS;YACT,cAAc;YACd,aAAa;YACb,UAAU;YACV,UAAU;SACX;QACD,SAAS,EAAE,EAAE,WAAW,EAAE,YAAY,EAAE;KACzC;CACF,CAAC;AAEF;;;;;;;;;GASG;AACH,MAAM,UAAU,iBAAiB,CAC/B,YAAuC,EACvC,cAAmC;IAEnC,gDAAgD;IAChD,IAAI,cAAc,KAAK,KAAK,EAAE,CAAC;QAC7B,OAAO,YAAY,IAAI,YAAY,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS,CAAC;IAC5E,CAAC;IAED,IAAI,CAAC,YAAY,IAAI,YAAY,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC/C,wCAAwC;QACxC,OAAO,qBAAqB,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,qBAAqB,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IACnF,CAAC;IAED,8DAA8D;IAC9D,MAAM,YAAY,GAAG,IAAI,GAAG,CAC1B,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,KAAK,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CACnE,CAAC;IAEF,MAAM,cAAc,GAAG,qBAAqB,CAAC,MAAM,CACjD,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CACjC,CAAC;IAEF,OAAO,CAAC,GAAG,cAAc,EAAE,GAAG,YAAY,CAAC,CAAC;AAC9C,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,MAAM,yBAAyB,GAAG;IACvC,YAAY,EAAE,wBAAwB;IACtC,YAAY,EAAE,IAAI;IAClB,iBAAiB,EAAE,GAAG;IACtB,eAAe,EAAE,KAAK;CACvB,CAAC"}

package/dist/config/pathProfiles.d.ts

@@ -0,0 +1,38 @@
+/**
+ * Path Profile resolution — per-file config overrides driven by glob patterns.
+ *
+ * Path profiles are an ordered array in .codeauditor.json. Each profile has
+ * `name`, `paths` (glob patterns), and `overrides`. Files matching multiple
+ * profiles merge in order — later wins.
+ *
+ * Built-in profiles (e.g. scripts-and-tests) ship with the tool and can be
+ * disabled via `builtin: false` in config.
+ */
+export interface PathProfile {
+    /** Unique name for this profile. */
+    name: string;
+    /** Glob patterns matching file paths relative to project root. */
+    paths: string[];
+    /** Analyzer config overrides applied to files matching this profile. */
+    overrides: Record<string, unknown>;
+    /** Set to false to replace a built-in profile of the same name. */
+    builtin?: boolean;
+}
+export interface ResolvedProfile {
+    /** Merged overrides (excluding severityCap). */
+    overrides: Record<string, unknown>;
+    /** Severity cap to apply post-analysis, if any. */
+    severityCap?: string;
+    /** Names of all profiles that matched this file, in match order. */
+    matchedProfileNames: string[];
+}
+/**
+ * Resolve which profiles match a file and merge their overrides.
+ *
+ * @param filePath - Absolute path to the file being analyzed
+ * @param projectRoot - Project root directory
+ * @param profiles - Ordered array of path profiles (built-in + user)
+ * @returns Merged overrides, severity cap, and matched profile names
+ */
+export declare function resolvePathProfile(filePath: string, projectRoot: string, profiles: PathProfile[]): ResolvedProfile;
+//# sourceMappingURL=pathProfiles.d.ts.map

package/dist/config/pathProfiles.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"pathProfiles.d.ts","sourceRoot":"","sources":["../../src/config/pathProfiles.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAKH,MAAM,WAAW,WAAW;IAC1B,oCAAoC;IACpC,IAAI,EAAE,MAAM,CAAC;IACb,kEAAkE;IAClE,KAAK,EAAE,MAAM,EAAE,CAAC;IAChB,wEAAwE;IACxE,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACnC,mEAAmE;IACnE,OAAO,CAAC,EAAE,OAAO,CAAC;CACnB;AAED,MAAM,WAAW,eAAe;IAC9B,gDAAgD;IAChD,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACnC,mDAAmD;IACnD,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,oEAAoE;IACpE,mBAAmB,EAAE,MAAM,EAAE,CAAC;CAC/B;AAID;;;;;;;GAOG;AACH,wBAAgB,kBAAkB,CAChC,QAAQ,EAAE,MAAM,EAChB,WAAW,EAAE,MAAM,EACnB,QAAQ,EAAE,WAAW,EAAE,GACtB,eAAe,CA4BjB"}

package/dist/config/pathProfiles.js

@@ -0,0 +1,47 @@
+/**
+ * Path Profile resolution — per-file config overrides driven by glob patterns.
+ *
+ * Path profiles are an ordered array in .codeauditor.json. Each profile has
+ * `name`, `paths` (glob patterns), and `overrides`. Files matching multiple
+ * profiles merge in order — later wins.
+ *
+ * Built-in profiles (e.g. scripts-and-tests) ship with the tool and can be
+ * disabled via `builtin: false` in config.
+ */
+import picomatch from 'picomatch';
+import path from 'path';
+const VALID_SEVERITIES = new Set(['suggestion', 'warning', 'critical']);
+/**
+ * Resolve which profiles match a file and merge their overrides.
+ *
+ * @param filePath - Absolute path to the file being analyzed
+ * @param projectRoot - Project root directory
+ * @param profiles - Ordered array of path profiles (built-in + user)
+ * @returns Merged overrides, severity cap, and matched profile names
+ */
+export function resolvePathProfile(filePath, projectRoot, profiles) {
+    const overrides = {};
+    let severityCap;
+    const matchedProfileNames = [];
+    const relativePath = path.relative(projectRoot, filePath);
+    for (const profile of profiles) {
+        const matches = profile.paths.some((glob) => picomatch.isMatch(relativePath, glob));
+        if (!matches)
+            continue;
+        matchedProfileNames.push(profile.name);
+        for (const [key, value] of Object.entries(profile.overrides)) {
+            if (key === 'severityCap') {
+                severityCap = value;
+            }
+            else {
+                overrides[key] = value;
+            }
+        }
+    }
+    if (severityCap && !VALID_SEVERITIES.has(severityCap)) {
+        // Should never reach here if validateConfig catches it, but guard anyway
+        severityCap = undefined;
+    }
+    return { overrides, severityCap, matchedProfileNames };
+}
+//# sourceMappingURL=pathProfiles.js.map

package/dist/config/pathProfiles.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pathProfiles.js","sourceRoot":"","sources":["../../src/config/pathProfiles.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,SAAS,MAAM,WAAW,CAAC;AAClC,OAAO,IAAI,MAAM,MAAM,CAAC;AAsBxB,MAAM,gBAAgB,GAAG,IAAI,GAAG,CAAC,CAAC,YAAY,EAAE,SAAS,EAAE,UAAU,CAAC,CAAC,CAAC;AAExE;;;;;;;GAOG;AACH,MAAM,UAAU,kBAAkB,CAChC,QAAgB,EAChB,WAAmB,EACnB,QAAuB;IAEvB,MAAM,SAAS,GAA4B,EAAE,CAAC;IAC9C,IAAI,WAA+B,CAAC;IACpC,MAAM,mBAAmB,GAAa,EAAE,CAAC;IAEzC,MAAM,YAAY,GAAG,IAAI,CAAC,QAAQ,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC;IAE1D,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;QAC/B,MAAM,OAAO,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,SAAS,CAAC,OAAO,CAAC,YAAY,EAAE,IAAI,CAAC,CAAC,CAAC;QACpF,IAAI,CAAC,OAAO;YAAE,SAAS;QAEvB,mBAAmB,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QAEvC,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,CAAC;YAC7D,IAAI,GAAG,KAAK,aAAa,EAAE,CAAC;gBAC1B,WAAW,GAAG,KAAe,CAAC;YAChC,CAAC;iBAAM,CAAC;gBACN,SAAS,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;YACzB,CAAC;QACH,CAAC;IACH,CAAC;IAED,IAAI,WAAW,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,WAAW,CAAC,EAAE,CAAC;QACtD,yEAAyE;QACzE,WAAW,GAAG,SAAS,CAAC;IAC1B,CAAC;IAED,OAAO,EAAE,SAAS,EAAE,WAAW,EAAE,mBAAmB,EAAE,CAAC;AACzD,CAAC"}

package/dist/conventions/conventionMiner.d.ts

@@ -0,0 +1,63 @@
+/**
+ * Spec 12 — Convention Mining
+ *
+ * Mines five domains of unwritten codebase conventions from the SQLite function
+ * index. All mining runs on the existing `functions` and `function_calls` tables;
+ * no new parsing infrastructure required.
+ *
+ * Domains:
+ *   1. usage-pair    — calls that always co-occur (from function_calls table)
+ *   2. import-form   — dominant import style per (source, directory)
+ *   3. error-handling — dominant error-handling shape per directory
+ *   4. export-shape  — dominant export style per directory
+ *   5. naming        — dominant exported-symbol casing per directory
+ */
+import Database from 'better-sqlite3';
+import type { Convention, ConventionMiningConfig } from '../types.js';
+/** Escape regex special characters in a string. */
+export declare function escapeRegex(s: string): string;
+/** Detect whether a string contains non-Latin-script characters (Spec 21 R5.4). */
+export declare function hasNonLatinChars(name: string): boolean;
+/** Classify a symbol name into a casing convention. Returns null for
+ *  non-Latin, unclassifiable, or ambiguous names. */
+export declare function detectCase(name: string): string | null;
+/**
+ * Parse import statements from raw file content.
+ *
+ * Handles: import default, import named, import namespace, import side-effect,
+ * require default, require destructured.
+ * Multi-line imports supported via {}-accumulation.
+ */
+export declare function parseFileImports(content: string): Array<{
+    source: string;
+    localNames: string[];
+    form: 'default' | 'named' | 'namespace' | 'side-effect' | 'require';
+    line: number;
+}>;
+/**
+ * Parse the export form for a specific exported function from its source file.
+ * Returns null if we can't determine the form.
+ */
+export declare function detectExportForm(filePath: string, functionName: string): 'default' | 'named' | null;
+/**
+ * Detect the error-handling shape used in a function body.
+ * Returns null if no error handling is present (function should not be counted
+ * in the corpus for mode computation).
+ */
+export declare function detectErrorHandlingShape(body: string | undefined | null): string | null;
+/**
+ * Compute a content hash of the miner inputs for change detection.
+ * Callers can store this in the meta table to skip re-mining when unchanged.
+ */
+export declare function computeMinerInputHash(db: Database.Database, config: ConventionMiningConfig): string;
+/**
+ * Mine all five convention domains from the SQLite index.
+ *
+ * @param db           The better-sqlite3 database instance.
+ * @param config       Threshold configuration for the miner.
+ * @param projectRoot  Optional project root — required for import-form and
+ *                     export-shape mining to resolve file paths.
+ * @returns Array of mined conventions (uncapped — caller should upsert).
+ */
+export declare function mineConventions(db: Database.Database, config: ConventionMiningConfig, projectRoot?: string): Convention[];
+//# sourceMappingURL=conventionMiner.d.ts.map

package/dist/conventions/conventionMiner.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"conventionMiner.d.ts","sourceRoot":"","sources":["../../src/conventions/conventionMiner.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAKH,OAAO,QAAQ,MAAM,gBAAgB,CAAC;AACtC,OAAO,KAAK,EAAE,UAAU,EAAE,sBAAsB,EAAE,MAAM,aAAa,CAAC;AAItE,mDAAmD;AACnD,wBAAgB,WAAW,CAAC,CAAC,EAAE,MAAM,GAAG,MAAM,CAE7C;AAED,mFAAmF;AACnF,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAiBtD;AAED;qDACqD;AACrD,wBAAgB,UAAU,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAoBtD;AAED;;;;;;GAMG;AACH,wBAAgB,gBAAgB,CAC9B,OAAO,EAAE,MAAM,GACd,KAAK,CAAC;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,MAAM,EAAE,CAAC;IAAC,IAAI,EAAE,SAAS,GAAG,OAAO,GAAG,WAAW,GAAG,aAAa,GAAG,SAAS,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,CAAC,CA6HpI;AAED;;;GAGG;AACH,wBAAgB,gBAAgB,CAC9B,QAAQ,EAAE,MAAM,EAChB,YAAY,EAAE,MAAM,GACnB,SAAS,GAAG,OAAO,GAAG,IAAI,CA6B5B;AAED;;;;GAIG;AACH,wBAAgB,wBAAwB,CAAC,IAAI,EAAE,MAAM,GAAG,SAAS,GAAG,IAAI,GAAG,MAAM,GAAG,IAAI,CASvF;AA0gBD;;;GAGG;AACH,wBAAgB,qBAAqB,CACnC,EAAE,EAAE,QAAQ,CAAC,QAAQ,EACrB,MAAM,EAAE,sBAAsB,GAC7B,MAAM,CASR;AAED;;;;;;;;GAQG;AACH,wBAAgB,eAAe,CAC7B,EAAE,EAAE,QAAQ,CAAC,QAAQ,EACrB,MAAM,EAAE,sBAAsB,EAC9B,WAAW,CAAC,EAAE,MAAM,GACnB,UAAU,EAAE,CAoBd"}