code-auditor-mcp 3.4.17 → 3.5.0

package/dist/nextFileIncremental.d.ts

@@ -0,0 +1,141 @@
+/**
+ * Incremental `next-file` — snapshot + content-hash diff + per-analyzer merge.
+ *
+ * The refactoring loop (`code-audit next-file`) must not pay a full cold audit
+ * on every call, or an agent calls it once and stops. This module seeds a full
+ * audit once, persists a snapshot of (file → content hash + mtime + findings),
+ * then on each warm call hashes the current file set, re-audits only what
+ * changed, and merges per-analyzer.
+ *
+ * ## Per-analyzer cacheability (the crux of incremental correctness)
+ *
+ * Findings fall into three buckets, decided per analyzer rather than globally —
+ * a uniform "cache everything" or "recompute everything" is wrong for one of
+ * the three, and that is the part that silently corrupts a cached queue.
+ *
+ * | Bucket | Analyzers | On a warm call | Why it is safe |
+ * |--------|-----------|----------------|----------------|
+ * | **File-local** (cache per file) | solid, data-access, documentation, react, dry, schema-sql, schema-code, schema-prisma, schema-json, invariants | re-audit only changed/added files; unchanged files keep their cache | a finding on file F is a pure function of F's AST + the (session-stable) rules. `dry` cross-file findings are re-emitted from whichever file is (re)visited, so a still-broken file comes back. |
+ * | **Corpus (DB-backed)** (recompute every call) | styles, conventions, cross-domain | recompute from the scoped audit's reducer output | these reducers read the persistent SQLite index (full corpus), not the scoped file list, so their scoped-run output is already full-corpus. |
+ * | **Corpus (fact-based) — schema** (cache + escalate) | schema | reuse cached findings UNLESS a schema-definition file changed, in which case force a full re-seed | the known-tables catalog is built in-memory from the current run's visitor facts. A scoped run sees only scoped facts, so an unchanged migration's tables would vanish and query files would be falsely flagged `unknown-table`. The catalog can only change when a schema-definition file changes — detect that and re-seed; otherwise the cache is correct. |
+ *
+ * The two file-local caveats, documented rather than hidden:
+ * - `invariants` is a Stage-3 reducer that runs per-file. Its `module-boundary`
+ *   import resolution uses the *scope's* known-files set, so a warm re-audit of
+ *   a changed file that imports an unchanged file can under-resolve a boundary.
+ *   This is the same limitation the diff-scoped `changed` hook already has; the
+ *   cold seed (full known-files) is the authoritative baseline.
+ * - `schema` (fact-based) is the only analyzer that must NOT be recomputed from
+ *   a scoped run; see the escalation rule above.
+ *
+ * ## Staleness is structural, not periodic
+ *
+ * The snapshot records a content hash AND mtime per file it covers. On every
+ * call the current file set is hashed; if a file's content changed but its
+ * mtime did not, the (mtime-based) diff missed a change and that is a hard
+ * error — never a quiet re-seed. Same shape as the file-accounting balance
+ * assertion.
+ */
+import type { Violation } from './types.js';
+/** Per-file record in the snapshot: content hash + mtime for the staleness gate. */
+export interface FileRecord {
+    hash: string;
+    mtimeMs: number;
+}
+export interface NextFileSnapshot {
+    version: 1;
+    projectRoot: string;
+    files: Record<string, FileRecord>;
+    visitorFindings: Record<string, Violation[]>;
+    corpusFindings: Violation[];
+    schemaFindings: Violation[];
+}
+export interface FileDiff {
+    changed: string[];
+    added: string[];
+    deleted: string[];
+}
+export type StalenessReason = 'mtime-preserved-content-change' | 'missing-on-disk';
+export interface StalenessViolation {
+    file: string;
+    reason: StalenessReason;
+}
+/** Hash + stat every file, keyed by project-relative path. */
+export declare function hashAndStatFiles(files: string[], projectRoot: string): Record<string, FileRecord>;
+/** Diff the current file set against the snapshot's recorded set. */
+export declare function diffFiles(snapshotFiles: Record<string, FileRecord>, current: Record<string, FileRecord>): FileDiff;
+/**
+ * Structural staleness check. Returns violations that must hard-error rather
+ * than quietly proceeding with stale cache:
+ *
+ *  - `mtime-preserved-content-change`: a file's content hash changed but its
+ *    mtime did not — an mtime-based diff would have missed this change.
+ *  - `missing-on-disk`: a file left the current set but still exists on disk —
+ *    discovery missed it, and dropping its findings would be silent data loss.
+ */
+export declare function assertNoStaleFiles(snapshotFiles: Record<string, FileRecord>, current: Record<string, FileRecord>, projectRoot: string): StalenessViolation[];
+/** A structural view of one analyzer result (violations only). */
+export interface AnalyzerResultLike {
+    violations: Violation[];
+}
+export interface SplitResult {
+    visitorFindings: Record<string, Violation[]>;
+    corpusFindings: Violation[];
+    schemaFindings: Violation[];
+}
+/** Split an audit result into file-local / corpus-DB / schema-fact buckets. */
+export declare function splitFindings(analyzerResults: Record<string, AnalyzerResultLike>, projectRoot: string): SplitResult;
+export interface MergeInput {
+    cachedVisitor: Record<string, Violation[]>;
+    freshVisitor: Record<string, Violation[]>;
+    freshCorpus: Violation[];
+    freshSchema: Violation[];
+    changed: string[];
+    added: string[];
+    deleted: string[];
+}
+export interface MergeOutput {
+    visitorFindings: Record<string, Violation[]>;
+    corpusFindings: Violation[];
+    schemaFindings: Violation[];
+    all: Violation[];
+}
+/**
+ * Merge cached per-file findings with fresh scoped results. Unchanged files
+ * keep their cache; changed/added files are overwritten (including to empty —
+ * a fixed file must not fall back to its stale cache); deleted files drop.
+ * Corpus-DB findings are replaced wholesale (they are full-corpus); schema
+ * findings are passed through (the caller decides cache-vs-re-seed).
+ */
+export declare function mergeFindings(input: MergeInput): MergeOutput;
+export interface RunNextFileResult {
+    snapshot: NextFileSnapshot;
+    violations: Violation[];
+    cold: boolean;
+    summary: NextFileSummary;
+}
+export interface NextFileSummary {
+    totalViolations: number;
+    criticalIssues: number;
+    warnings: number;
+    suggestions: number;
+    violationsByCategory: Record<string, number>;
+    topIssues: Array<{
+        type: string;
+        count: number;
+    }>;
+}
+/** Compute a summary from a merged violation set (cached + fresh). */
+export declare function summarizeViolations(violations: Violation[]): NextFileSummary;
+/**
+ * Orchestrate one `next-file` call. Cold (no snapshot) → full audit + seed.
+ * Warm → hash current set, assert no stale files, re-audit only changed/added,
+ * merge, and persist the refreshed snapshot. A warm call that touches a
+ * schema-definition file escalates to a full re-seed (the schema catalog can
+ * only be rebuilt correctly from the full corpus).
+ */
+export declare function runNextFile(options: {
+    projectRoot: string;
+    configName?: string;
+}): Promise<RunNextFileResult>;
+//# sourceMappingURL=nextFileIncremental.d.ts.map

package/dist/nextFileIncremental.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"nextFileIncremental.d.ts","sourceRoot":"","sources":["../src/nextFileIncremental.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAqCG;AAUH,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,YAAY,CAAC;AAoC5C,oFAAoF;AACpF,MAAM,WAAW,UAAU;IACzB,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,gBAAgB;IAC/B,OAAO,EAAE,CAAC,CAAC;IACX,WAAW,EAAE,MAAM,CAAC;IACpB,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;IAClC,eAAe,EAAE,MAAM,CAAC,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC;IAC7C,cAAc,EAAE,SAAS,EAAE,CAAC;IAC5B,cAAc,EAAE,SAAS,EAAE,CAAC;CAC7B;AAED,MAAM,WAAW,QAAQ;IACvB,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,KAAK,EAAE,MAAM,EAAE,CAAC;IAChB,OAAO,EAAE,MAAM,EAAE,CAAC;CACnB;AAED,MAAM,MAAM,eAAe,GAAG,gCAAgC,GAAG,iBAAiB,CAAC;AAEnF,MAAM,WAAW,kBAAkB;IACjC,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,eAAe,CAAC;CACzB;AAMD,8DAA8D;AAC9D,wBAAgB,gBAAgB,CAC9B,KAAK,EAAE,MAAM,EAAE,EACf,WAAW,EAAE,MAAM,GAClB,MAAM,CAAC,MAAM,EAAE,UAAU,CAAC,CAc5B;AAED,qEAAqE;AACrE,wBAAgB,SAAS,CACvB,aAAa,EAAE,MAAM,CAAC,MAAM,EAAE,UAAU,CAAC,EACzC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,UAAU,CAAC,GAClC,QAAQ,CAmBV;AAED;;;;;;;;GAQG;AACH,wBAAgB,kBAAkB,CAChC,aAAa,EAAE,MAAM,CAAC,MAAM,EAAE,UAAU,CAAC,EACzC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,UAAU,CAAC,EACnC,WAAW,EAAE,MAAM,GAClB,kBAAkB,EAAE,CAetB;AAED,kEAAkE;AAClE,MAAM,WAAW,kBAAkB;IACjC,UAAU,EAAE,SAAS,EAAE,CAAC;CACzB;AAED,MAAM,WAAW,WAAW;IAC1B,eAAe,EAAE,MAAM,CAAC,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC;IAC7C,cAAc,EAAE,SAAS,EAAE,CAAC;IAC5B,cAAc,EAAE,SAAS,EAAE,CAAC;CAC7B;AAED,+EAA+E;AAC/E,wBAAgB,aAAa,CAC3B,eAAe,EAAE,MAAM,CAAC,MAAM,EAAE,kBAAkB,CAAC,EACnD,WAAW,EAAE,MAAM,GAClB,WAAW,CAqBb;AAED,MAAM,WAAW,UAAU;IACzB,aAAa,EAAE,MAAM,CAAC,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC;IAC3C,YAAY,EAAE,MAAM,CAAC,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC;IAC1C,WAAW,EAAE,SAAS,EAAE,CAAC;IACzB,WAAW,EAAE,SAAS,EAAE,CAAC;IACzB,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,KAAK,EAAE,MAAM,EAAE,CAAC;IAChB,OAAO,EAAE,MAAM,EAAE,CAAC;CACnB;AAED,MAAM,WAAW,WAAW;IAC1B,eAAe,EAAE,MAAM,CAAC,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC;IAC7C,cAAc,EAAE,SAAS,EAAE,CAAC;IAC5B,cAAc,EAAE,SAAS,EAAE,CAAC;IAC5B,GAAG,EAAE,SAAS,EAAE,CAAC;CAClB;AAED;;;;;;GAMG;AACH,wBAAgB,aAAa,CAAC,KAAK,EAAE,UAAU,GAAG,WAAW,CAmB5D;AAED,MAAM,WAAW,iBAAiB;IAChC,QAAQ,EAAE,gBAAgB,CAAC;IAC3B,UAAU,EAAE,SAAS,EAAE,CAAC;IACxB,IAAI,EAAE,OAAO,CAAC;IACd,OAAO,EAAE,eAAe,CAAC;CAC1B;AAED,MAAM,WAAW,eAAe;IAC9B,eAAe,EAAE,MAAM,CAAC;IACxB,cAAc,EAAE,MAAM,CAAC;IACvB,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,EAAE,MAAM,CAAC;IACpB,oBAAoB,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC7C,SAAS,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;CACnD;AAED,sEAAsE;AACtE,wBAAgB,mBAAmB,CAAC,UAAU,EAAE,SAAS,EAAE,GAAG,eAAe,CAiB5E;AAmBD;;;;;;GAMG;AACH,wBAAsB,WAAW,CAAC,OAAO,EAAE;IACzC,WAAW,EAAE,MAAM,CAAC;IACpB,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB,GAAG,OAAO,CAAC,iBAAiB,CAAC,CA4F7B"}

package/dist/nextFileIncremental.js

@@ -0,0 +1,314 @@
+/**
+ * Incremental `next-file` — snapshot + content-hash diff + per-analyzer merge.
+ *
+ * The refactoring loop (`code-audit next-file`) must not pay a full cold audit
+ * on every call, or an agent calls it once and stops. This module seeds a full
+ * audit once, persists a snapshot of (file → content hash + mtime + findings),
+ * then on each warm call hashes the current file set, re-audits only what
+ * changed, and merges per-analyzer.
+ *
+ * ## Per-analyzer cacheability (the crux of incremental correctness)
+ *
+ * Findings fall into three buckets, decided per analyzer rather than globally —
+ * a uniform "cache everything" or "recompute everything" is wrong for one of
+ * the three, and that is the part that silently corrupts a cached queue.
+ *
+ * | Bucket | Analyzers | On a warm call | Why it is safe |
+ * |--------|-----------|----------------|----------------|
+ * | **File-local** (cache per file) | solid, data-access, documentation, react, dry, schema-sql, schema-code, schema-prisma, schema-json, invariants | re-audit only changed/added files; unchanged files keep their cache | a finding on file F is a pure function of F's AST + the (session-stable) rules. `dry` cross-file findings are re-emitted from whichever file is (re)visited, so a still-broken file comes back. |
+ * | **Corpus (DB-backed)** (recompute every call) | styles, conventions, cross-domain | recompute from the scoped audit's reducer output | these reducers read the persistent SQLite index (full corpus), not the scoped file list, so their scoped-run output is already full-corpus. |
+ * | **Corpus (fact-based) — schema** (cache + escalate) | schema | reuse cached findings UNLESS a schema-definition file changed, in which case force a full re-seed | the known-tables catalog is built in-memory from the current run's visitor facts. A scoped run sees only scoped facts, so an unchanged migration's tables would vanish and query files would be falsely flagged `unknown-table`. The catalog can only change when a schema-definition file changes — detect that and re-seed; otherwise the cache is correct. |
+ *
+ * The two file-local caveats, documented rather than hidden:
+ * - `invariants` is a Stage-3 reducer that runs per-file. Its `module-boundary`
+ *   import resolution uses the *scope's* known-files set, so a warm re-audit of
+ *   a changed file that imports an unchanged file can under-resolve a boundary.
+ *   This is the same limitation the diff-scoped `changed` hook already has; the
+ *   cold seed (full known-files) is the authoritative baseline.
+ * - `schema` (fact-based) is the only analyzer that must NOT be recomputed from
+ *   a scoped run; see the escalation rule above.
+ *
+ * ## Staleness is structural, not periodic
+ *
+ * The snapshot records a content hash AND mtime per file it covers. On every
+ * call the current file set is hashed; if a file's content changed but its
+ * mtime did not, the (mtime-based) diff missed a change and that is a hard
+ * error — never a quiet re-seed. Same shape as the file-accounting balance
+ * assertion.
+ */
+import { readFileSync, statSync, existsSync } from 'fs';
+import { createHash } from 'crypto';
+import { relative, resolve, join, isAbsolute } from 'path';
+import { createAuditRunner } from './auditRunner.js';
+import { CodeIndexDB } from './codeIndexDB.js';
+import { findConfigFileUp, loadConfig } from './config/configLoader.js';
+import { discoverFilesDetailed } from './utils/fileDiscovery.js';
+const SNAPSHOT_KEY = 'next-file:snapshot';
+/** Extensions that carry table/DDL definitions — a deleted one can shift the catalog. */
+const SCHEMA_DEFINITION_EXTENSIONS = new Set(['.sql', '.prisma']);
+/**
+ * File-local analyzers: a finding on F is a pure function of F's AST (+ rules).
+ * Cacheable per file. `dry` is a stage-2 visitor; its within-file findings are
+ * file-local and its cross-file findings are re-emitted from whatever file is
+ * (re)visited, so caching per file preserves the "a still-broken file comes
+ * back" guarantee. `invariants` runs per-file (see module doc caveat).
+ */
+const FILE_LOCAL = new Set([
+    'solid',
+    'data-access',
+    'documentation',
+    'react',
+    'dry',
+    'schema-sql',
+    'schema-code',
+    'schema-prisma',
+    'schema-json',
+    'invariants',
+]);
+/**
+ * Corpus (DB-backed) analyzers: findings depend on the whole corpus but are
+ * re-derived from the persistent index on every scoped run, so recomputing them
+ * each warm call is correct. Anything not listed and not `schema`/FILE_LOCAL is
+ * also treated as DB-backed (safe default: never cache what you can't prove is
+ * file-local).
+ */
+const CORPUS_DB = new Set(['styles', 'conventions', 'cross-domain']);
+function sha256(data) {
+    return createHash('sha256').update(data).digest('hex');
+}
+/** Hash + stat every file, keyed by project-relative path. */
+export function hashAndStatFiles(files, projectRoot) {
+    const out = {};
+    for (const file of files) {
+        const abs = isAbsolute(file) ? file : join(projectRoot, file);
+        try {
+            out[relative(projectRoot, abs)] = {
+                hash: sha256(readFileSync(abs)),
+                mtimeMs: statSync(abs).mtimeMs,
+            };
+        }
+        catch {
+            // Unreadable (deleted between discovery and hash) — excluded from the set.
+        }
+    }
+    return out;
+}
+/** Diff the current file set against the snapshot's recorded set. */
+export function diffFiles(snapshotFiles, current) {
+    const changed = [];
+    const added = [];
+    const deleted = [];
+    for (const [rel, rec] of Object.entries(current)) {
+        const prev = snapshotFiles[rel];
+        if (!prev)
+            added.push(rel);
+        else if (prev.hash !== rec.hash)
+            changed.push(rel);
+    }
+    for (const rel of Object.keys(snapshotFiles)) {
+        if (!(rel in current))
+            deleted.push(rel);
+    }
+    // Sort for deterministic output.
+    changed.sort();
+    added.sort();
+    deleted.sort();
+    return { changed, added, deleted };
+}
+/**
+ * Structural staleness check. Returns violations that must hard-error rather
+ * than quietly proceeding with stale cache:
+ *
+ *  - `mtime-preserved-content-change`: a file's content hash changed but its
+ *    mtime did not — an mtime-based diff would have missed this change.
+ *  - `missing-on-disk`: a file left the current set but still exists on disk —
+ *    discovery missed it, and dropping its findings would be silent data loss.
+ */
+export function assertNoStaleFiles(snapshotFiles, current, projectRoot) {
+    const out = [];
+    for (const [rel, prev] of Object.entries(snapshotFiles)) {
+        const cur = current[rel];
+        if (!cur) {
+            if (existsSync(join(projectRoot, rel))) {
+                out.push({ file: rel, reason: 'missing-on-disk' });
+            }
+            continue;
+        }
+        if (prev.hash !== cur.hash && prev.mtimeMs === cur.mtimeMs) {
+            out.push({ file: rel, reason: 'mtime-preserved-content-change' });
+        }
+    }
+    return out;
+}
+/** Split an audit result into file-local / corpus-DB / schema-fact buckets. */
+export function splitFindings(analyzerResults, projectRoot) {
+    const visitorFindings = {};
+    const corpusFindings = [];
+    const schemaFindings = [];
+    for (const [name, ar] of Object.entries(analyzerResults)) {
+        const vs = ar.violations || [];
+        if (FILE_LOCAL.has(name)) {
+            for (const v of vs) {
+                const rel = relative(projectRoot, v.file || '');
+                (visitorFindings[rel] = visitorFindings[rel] || []).push(v);
+            }
+        }
+        else if (name === 'schema') {
+            schemaFindings.push(...vs);
+        }
+        else {
+            // CORPUS_DB or unknown — recompute each warm call (safe: DB-backed).
+            corpusFindings.push(...vs);
+        }
+    }
+    return { visitorFindings, corpusFindings, schemaFindings };
+}
+/**
+ * Merge cached per-file findings with fresh scoped results. Unchanged files
+ * keep their cache; changed/added files are overwritten (including to empty —
+ * a fixed file must not fall back to its stale cache); deleted files drop.
+ * Corpus-DB findings are replaced wholesale (they are full-corpus); schema
+ * findings are passed through (the caller decides cache-vs-re-seed).
+ */
+export function mergeFindings(input) {
+    const drop = new Set([...input.deleted, ...input.changed, ...input.added]);
+    const visitorFindings = {};
+    for (const [rel, vs] of Object.entries(input.cachedVisitor)) {
+        if (!drop.has(rel))
+            visitorFindings[rel] = vs;
+    }
+    for (const rel of [...input.changed, ...input.added]) {
+        visitorFindings[rel] = input.freshVisitor[rel] || [];
+    }
+    const corpusFindings = input.freshCorpus;
+    const schemaFindings = input.freshSchema;
+    const all = [
+        ...Object.values(visitorFindings).flat(),
+        ...corpusFindings,
+        ...schemaFindings,
+    ];
+    return { visitorFindings, corpusFindings, schemaFindings, all };
+}
+/** Compute a summary from a merged violation set (cached + fresh). */
+export function summarizeViolations(violations) {
+    let criticalIssues = 0;
+    let warnings = 0;
+    let suggestions = 0;
+    const violationsByCategory = {};
+    for (const v of violations) {
+        if (v.severity === 'critical')
+            criticalIssues++;
+        else if (v.severity === 'warning')
+            warnings++;
+        else if (v.severity === 'suggestion')
+            suggestions++;
+        const cat = v.analyzer || v.type || 'other';
+        violationsByCategory[cat] = (violationsByCategory[cat] || 0) + 1;
+    }
+    const topIssues = Object.entries(violationsByCategory)
+        .sort(([, a], [, b]) => b - a)
+        .slice(0, 5)
+        .map(([type, count]) => ({ type, count }));
+    return { totalViolations: violations.length, criticalIssues, warnings, suggestions, violationsByCategory, topIssues };
+}
+/** The three-violation arrays flattened into one, in a stable order. */
+function flatten(s) {
+    return [...Object.values(s.visitorFindings).flat(), ...s.corpusFindings, ...s.schemaFindings];
+}
+/** Build a snapshot from a full-audit result split. */
+function seedSnapshot(root, files, split) {
+    return {
+        version: 1,
+        projectRoot: root,
+        files,
+        visitorFindings: split.visitorFindings,
+        corpusFindings: split.corpusFindings,
+        schemaFindings: split.schemaFindings,
+    };
+}
+/**
+ * Orchestrate one `next-file` call. Cold (no snapshot) → full audit + seed.
+ * Warm → hash current set, assert no stale files, re-audit only changed/added,
+ * merge, and persist the refreshed snapshot. A warm call that touches a
+ * schema-definition file escalates to a full re-seed (the schema catalog can
+ * only be rebuilt correctly from the full corpus).
+ */
+export async function runNextFile(options) {
+    const root = resolve(options.projectRoot || process.cwd());
+    // Load config (walk-up) so discovery matches what the audit actually sees.
+    const configPath = await findConfigFileUp(root);
+    const config = await loadConfig({ configPath: configPath ?? undefined });
+    const discovered = await discoverFilesDetailed(root, {
+        includePaths: config.includePaths,
+        excludePaths: config.excludePaths,
+    });
+    const current = hashAndStatFiles(discovered.files, root);
+    const db = CodeIndexDB.getInstance(undefined, root);
+    await db.initialize();
+    const raw = db.getMeta(SNAPSHOT_KEY);
+    const snapshot = raw ? JSON.parse(raw) : null;
+    // Shared full-audit-and-seed (cold path + schema escalation).
+    const fullSeed = async () => {
+        const runner = createAuditRunner({ projectRoot: root, configName: options.configName });
+        const result = await runner.run();
+        const split = splitFindings(result.analyzerResults, root);
+        const seeded = seedSnapshot(root, current, split);
+        db.setMeta(SNAPSHOT_KEY, JSON.stringify(seeded));
+        return { snapshot: seeded, violations: flatten(seeded), cold: true, summary: summarizeViolations(flatten(seeded)) };
+    };
+    if (!snapshot) {
+        return fullSeed();
+    }
+    const diff = diffFiles(snapshot.files, current);
+    const stale = assertNoStaleFiles(snapshot.files, current, root);
+    if (stale.length > 0) {
+        const detail = stale
+            .map((s) => `${s.file}: ${s.reason}`)
+            .join('; ');
+        throw new Error(`next-file: structural staleness check failed — the diff missed a change. ` +
+            `Refusing to proceed with a stale cache. ${detail}`);
+    }
+    if (diff.changed.length === 0 && diff.added.length === 0 && diff.deleted.length === 0) {
+        // Nothing changed — reuse the cached queue wholesale.
+        return { snapshot, violations: flatten(snapshot), cold: false, summary: summarizeViolations(flatten(snapshot)) };
+    }
+    const scopeFiles = [...diff.changed, ...diff.added].map((rel) => join(root, rel));
+    const runner = createAuditRunner({
+        projectRoot: root,
+        configName: options.configName,
+        scope: scopeFiles,
+    });
+    const result = await runner.run();
+    const fresh = splitFindings(result.analyzerResults, root);
+    // Schema catalog hazard: the known-tables catalog is rebuilt in-memory from a
+    // run's visitor facts, so a scoped run only sees the tables *changed* files
+    // define. If a changed/added file defined any table (a non-empty tableCatalog
+    // in this scoped run) — or a schema-definition file was deleted — the catalog
+    // may have shifted and must be rebuilt from the full corpus: escalate to a
+    // full re-seed rather than return a silently-wrong unknown-table verdict.
+    const schemaCatalogTouched = (result.metadata?.tableCatalog?.length ?? 0) > 0;
+    const schemaDefinitionDeleted = diff.deleted.some((rel) => SCHEMA_DEFINITION_EXTENSIONS.has(rel.slice(rel.lastIndexOf('.'))));
+    if (schemaCatalogTouched || schemaDefinitionDeleted) {
+        return fullSeed();
+    }
+    const merged = mergeFindings({
+        cachedVisitor: snapshot.visitorFindings,
+        freshVisitor: fresh.visitorFindings,
+        freshCorpus: fresh.corpusFindings,
+        freshSchema: snapshot.schemaFindings,
+        changed: diff.changed,
+        added: diff.added,
+        deleted: diff.deleted,
+    });
+    const refreshed = {
+        version: 1,
+        projectRoot: root,
+        files: current,
+        visitorFindings: merged.visitorFindings,
+        corpusFindings: merged.corpusFindings,
+        schemaFindings: merged.schemaFindings,
+    };
+    db.setMeta(SNAPSHOT_KEY, JSON.stringify(refreshed));
+    return { snapshot: refreshed, violations: merged.all, cold: false, summary: summarizeViolations(merged.all) };
+}
+//# sourceMappingURL=nextFileIncremental.js.map

package/dist/nextFileIncremental.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"nextFileIncremental.js","sourceRoot":"","sources":["../src/nextFileIncremental.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAqCG;AAEH,OAAO,EAAE,YAAY,EAAE,QAAQ,EAAE,UAAU,EAAE,MAAM,IAAI,CAAC;AACxD,OAAO,EAAE,UAAU,EAAE,MAAM,QAAQ,CAAC;AACpC,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,MAAM,MAAM,CAAC;AAE3D,OAAO,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AACrD,OAAO,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAC/C,OAAO,EAAE,gBAAgB,EAAE,UAAU,EAAE,MAAM,0BAA0B,CAAC;AACxE,OAAO,EAAE,qBAAqB,EAAE,MAAM,0BAA0B,CAAC;AAGjE,MAAM,YAAY,GAAG,oBAAoB,CAAC;AAE1C,yFAAyF;AACzF,MAAM,4BAA4B,GAAG,IAAI,GAAG,CAAC,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC,CAAC;AAElE;;;;;;GAMG;AACH,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC;IACzB,OAAO;IACP,aAAa;IACb,eAAe;IACf,OAAO;IACP,KAAK;IACL,YAAY;IACZ,aAAa;IACb,eAAe;IACf,aAAa;IACb,YAAY;CACb,CAAC,CAAC;AAEH;;;;;;GAMG;AACH,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,CAAC,QAAQ,EAAE,aAAa,EAAE,cAAc,CAAC,CAAC,CAAC;AA8BrE,SAAS,MAAM,CAAC,IAAqB;IACnC,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AACzD,CAAC;AAED,8DAA8D;AAC9D,MAAM,UAAU,gBAAgB,CAC9B,KAAe,EACf,WAAmB;IAEnB,MAAM,GAAG,GAA+B,EAAE,CAAC;IAC3C,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,GAAG,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,EAAE,IAAI,CAAC,CAAC;QAC9D,IAAI,CAAC;YACH,GAAG,CAAC,QAAQ,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC,GAAG;gBAChC,IAAI,EAAE,MAAM,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC;gBAC/B,OAAO,EAAE,QAAQ,CAAC,GAAG,CAAC,CAAC,OAAO;aAC/B,CAAC;QACJ,CAAC;QAAC,MAAM,CAAC;YACP,2EAA2E;QAC7E,CAAC;IACH,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,qEAAqE;AACrE,MAAM,UAAU,SAAS,CACvB,aAAyC,EACzC,OAAmC;IAEnC,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,MAAM,OAAO,GAAa,EAAE,CAAC;IAE7B,KAAK,MAAM,CAAC,GAAG,EAAE,GAAG,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;QACjD,MAAM,IAAI,GAAG,aAAa,CAAC,GAAG,CAAC,CAAC;QAChC,IAAI,CAAC,IAAI;YAAE,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;aACtB,IAAI,IAAI,CAAC,IAAI,KAAK,GAAG,CAAC,IAAI;YAAE,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACrD,CAAC;IACD,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,aAAa,CAAC,EAAE,CAAC;QAC7C,IAAI,CAAC,CAAC,GAAG,IAAI,OAAO,CAAC;YAAE,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC3C,CAAC;IAED,iCAAiC;IACjC,OAAO,CAAC,IAAI,EAAE,CAAC;IACf,KAAK,CAAC,IAAI,EAAE,CAAC;IACb,OAAO,CAAC,IAAI,EAAE,CAAC;IACf,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC;AACrC,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,kBAAkB,CAChC,aAAyC,EACzC,OAAmC,EACnC,WAAmB;IAEnB,MAAM,GAAG,GAAyB,EAAE,CAAC;IACrC,KAAK,MAAM,CAAC,GAAG,EAAE,IAAI,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,aAAa,CAAC,EAAE,CAAC;QACxD,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC;QACzB,IAAI,CAAC,GAAG,EAAE,CAAC;YACT,IAAI,UAAU,CAAC,IAAI,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC,EAAE,CAAC;gBACvC,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,MAAM,EAAE,iBAAiB,EAAE,CAAC,CAAC;YACrD,CAAC;YACD,SAAS;QACX,CAAC;QACD,IAAI,IAAI,CAAC,IAAI,KAAK,GAAG,CAAC,IAAI,IAAI,IAAI,CAAC,OAAO,KAAK,GAAG,CAAC,OAAO,EAAE,CAAC;YAC3D,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,MAAM,EAAE,gCAAgC,EAAE,CAAC,CAAC;QACpE,CAAC;IACH,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAaD,+EAA+E;AAC/E,MAAM,UAAU,aAAa,CAC3B,eAAmD,EACnD,WAAmB;IAEnB,MAAM,eAAe,GAAgC,EAAE,CAAC;IACxD,MAAM,cAAc,GAAgB,EAAE,CAAC;IACvC,MAAM,cAAc,GAAgB,EAAE,CAAC;IAEvC,KAAK,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,eAAe,CAAC,EAAE,CAAC;QACzD,MAAM,EAAE,GAAG,EAAE,CAAC,UAAU,IAAI,EAAE,CAAC;QAC/B,IAAI,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;YACzB,KAAK,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC;gBACnB,MAAM,GAAG,GAAG,QAAQ,CAAC,WAAW,EAAE,CAAC,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;gBAChD,CAAC,eAAe,CAAC,GAAG,CAAC,GAAG,eAAe,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAC9D,CAAC;QACH,CAAC;aAAM,IAAI,IAAI,KAAK,QAAQ,EAAE,CAAC;YAC7B,cAAc,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;QAC7B,CAAC;aAAM,CAAC;YACN,qEAAqE;YACrE,cAAc,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;QAC7B,CAAC;IACH,CAAC;IAED,OAAO,EAAE,eAAe,EAAE,cAAc,EAAE,cAAc,EAAE,CAAC;AAC7D,CAAC;AAmBD;;;;;;GAMG;AACH,MAAM,UAAU,aAAa,CAAC,KAAiB;IAC7C,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,KAAK,CAAC,OAAO,EAAE,GAAG,KAAK,CAAC,OAAO,EAAE,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC;IAE3E,MAAM,eAAe,GAAgC,EAAE,CAAC;IACxD,KAAK,MAAM,CAAC,GAAG,EAAE,EAAE,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,aAAa,CAAC,EAAE,CAAC;QAC5D,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;YAAE,eAAe,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC;IAChD,CAAC;IACD,KAAK,MAAM,GAAG,IAAI,CAAC,GAAG,KAAK,CAAC,OAAO,EAAE,GAAG,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC;QACrD,eAAe,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC,YAAY,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC;IACvD,CAAC;IAED,MAAM,cAAc,GAAG,KAAK,CAAC,WAAW,CAAC;IACzC,MAAM,cAAc,GAAG,KAAK,CAAC,WAAW,CAAC;IACzC,MAAM,GAAG,GAAG;QACV,GAAG,MAAM,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC,IAAI,EAAE;QACxC,GAAG,cAAc;QACjB,GAAG,cAAc;KAClB,CAAC;IACF,OAAO,EAAE,eAAe,EAAE,cAAc,EAAE,cAAc,EAAE,GAAG,EAAE,CAAC;AAClE,CAAC;AAkBD,sEAAsE;AACtE,MAAM,UAAU,mBAAmB,CAAC,UAAuB;IACzD,IAAI,cAAc,GAAG,CAAC,CAAC;IACvB,IAAI,QAAQ,GAAG,CAAC,CAAC;IACjB,IAAI,WAAW,GAAG,CAAC,CAAC;IACpB,MAAM,oBAAoB,GAA2B,EAAE,CAAC;IACxD,KAAK,MAAM,CAAC,IAAI,UAAU,EAAE,CAAC;QAC3B,IAAI,CAAC,CAAC,QAAQ,KAAK,UAAU;YAAE,cAAc,EAAE,CAAC;aAC3C,IAAI,CAAC,CAAC,QAAQ,KAAK,SAAS;YAAE,QAAQ,EAAE,CAAC;aACzC,IAAI,CAAC,CAAC,QAAQ,KAAK,YAAY;YAAE,WAAW,EAAE,CAAC;QACpD,MAAM,GAAG,GAAG,CAAC,CAAC,QAAQ,IAAI,CAAC,CAAC,IAAI,IAAI,OAAO,CAAC;QAC5C,oBAAoB,CAAC,GAAG,CAAC,GAAG,CAAC,oBAAoB,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;IACnE,CAAC;IACD,MAAM,SAAS,GAAG,MAAM,CAAC,OAAO,CAAC,oBAAoB,CAAC;SACnD,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC;SAC7B,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC;SACX,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC;IAC7C,OAAO,EAAE,eAAe,EAAE,UAAU,CAAC,MAAM,EAAE,cAAc,EAAE,QAAQ,EAAE,WAAW,EAAE,oBAAoB,EAAE,SAAS,EAAE,CAAC;AACxH,CAAC;AAED,wEAAwE;AACxE,SAAS,OAAO,CAAC,CAAmB;IAClC,OAAO,CAAC,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,IAAI,EAAE,EAAE,GAAG,CAAC,CAAC,cAAc,EAAE,GAAG,CAAC,CAAC,cAAc,CAAC,CAAC;AAChG,CAAC;AAED,uDAAuD;AACvD,SAAS,YAAY,CAAC,IAAY,EAAE,KAAiC,EAAE,KAAkB;IACvF,OAAO;QACL,OAAO,EAAE,CAAC;QACV,WAAW,EAAE,IAAI;QACjB,KAAK;QACL,eAAe,EAAE,KAAK,CAAC,eAAe;QACtC,cAAc,EAAE,KAAK,CAAC,cAAc;QACpC,cAAc,EAAE,KAAK,CAAC,cAAc;KACrC,CAAC;AACJ,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,OAGjC;IACC,MAAM,IAAI,GAAG,OAAO,CAAC,OAAO,CAAC,WAAW,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC;IAE3D,2EAA2E;IAC3E,MAAM,UAAU,GAAG,MAAM,gBAAgB,CAAC,IAAI,CAAC,CAAC;IAChD,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,EAAE,UAAU,EAAE,UAAU,IAAI,SAAS,EAAE,CAAC,CAAC;IAEzE,MAAM,UAAU,GAAG,MAAM,qBAAqB,CAAC,IAAI,EAAE;QACnD,YAAY,EAAE,MAAM,CAAC,YAAY;QACjC,YAAY,EAAE,MAAM,CAAC,YAAY;KAClC,CAAC,CAAC;IACH,MAAM,OAAO,GAAG,gBAAgB,CAAC,UAAU,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;IAEzD,MAAM,EAAE,GAAG,WAAW,CAAC,WAAW,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;IACpD,MAAM,EAAE,CAAC,UAAU,EAAE,CAAC;IACtB,MAAM,GAAG,GAAG,EAAE,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;IACrC,MAAM,QAAQ,GAA4B,GAAG,CAAC,CAAC,CAAE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAsB,CAAC,CAAC,CAAC,IAAI,CAAC;IAE7F,8DAA8D;IAC9D,MAAM,QAAQ,GAAG,KAAK,IAAgC,EAAE;QACtD,MAAM,MAAM,GAAG,iBAAiB,CAAC,EAAE,WAAW,EAAE,IAAI,EAAE,UAAU,EAAE,OAAO,CAAC,UAAU,EAAE,CAAC,CAAC;QACxF,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,GAAG,EAAE,CAAC;QAClC,MAAM,KAAK,GAAG,aAAa,CAAC,MAAM,CAAC,eAAe,EAAE,IAAI,CAAC,CAAC;QAC1D,MAAM,MAAM,GAAG,YAAY,CAAC,IAAI,EAAE,OAAO,EAAE,KAAK,CAAC,CAAC;QAClD,EAAE,CAAC,OAAO,CAAC,YAAY,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC;QACjD,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,UAAU,EAAE,OAAO,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,mBAAmB,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC;IACtH,CAAC,CAAC;IAEF,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,OAAO,QAAQ,EAAE,CAAC;IACpB,CAAC;IAED,MAAM,IAAI,GAAG,SAAS,CAAC,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;IAChD,MAAM,KAAK,GAAG,kBAAkB,CAAC,QAAQ,CAAC,KAAK,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC;IAChE,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACrB,MAAM,MAAM,GAAG,KAAK;aACjB,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,MAAM,EAAE,CAAC;aACpC,IAAI,CAAC,IAAI,CAAC,CAAC;QACd,MAAM,IAAI,KAAK,CACb,2EAA2E;YACzE,2CAA2C,MAAM,EAAE,CACtD,CAAC;IACJ,CAAC;IAED,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACtF,sDAAsD;QACtD,OAAO,EAAE,QAAQ,EAAE,UAAU,EAAE,OAAO,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,mBAAmB,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC;IACnH,CAAC;IAED,MAAM,UAAU,GAAG,CAAC,GAAG,IAAI,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,CAAC;IAClF,MAAM,MAAM,GAAG,iBAAiB,CAAC;QAC/B,WAAW,EAAE,IAAI;QACjB,UAAU,EAAE,OAAO,CAAC,UAAU;QAC9B,KAAK,EAAE,UAAU;KAClB,CAAC,CAAC;IACH,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,GAAG,EAAE,CAAC;IAClC,MAAM,KAAK,GAAG,aAAa,CAAC,MAAM,CAAC,eAAe,EAAE,IAAI,CAAC,CAAC;IAE1D,8EAA8E;IAC9E,4EAA4E;IAC5E,8EAA8E;IAC9E,8EAA8E;IAC9E,2EAA2E;IAC3E,0EAA0E;IAC1E,MAAM,oBAAoB,GAAG,CAAC,MAAM,CAAC,QAAQ,EAAE,YAAY,EAAE,MAAM,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;IAC9E,MAAM,uBAAuB,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CACxD,4BAA4B,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,CAClE,CAAC;IACF,IAAI,oBAAoB,IAAI,uBAAuB,EAAE,CAAC;QACpD,OAAO,QAAQ,EAAE,CAAC;IACpB,CAAC;IAED,MAAM,MAAM,GAAG,aAAa,CAAC;QAC3B,aAAa,EAAE,QAAQ,CAAC,eAAe;QACvC,YAAY,EAAE,KAAK,CAAC,eAAe;QACnC,WAAW,EAAE,KAAK,CAAC,cAAc;QACjC,WAAW,EAAE,QAAQ,CAAC,cAAc;QACpC,OAAO,EAAE,IAAI,CAAC,OAAO;QACrB,KAAK,EAAE,IAAI,CAAC,KAAK;QACjB,OAAO,EAAE,IAAI,CAAC,OAAO;KACtB,CAAC,CAAC;IAEH,MAAM,SAAS,GAAqB;QAClC,OAAO,EAAE,CAAC;QACV,WAAW,EAAE,IAAI;QACjB,KAAK,EAAE,OAAO;QACd,eAAe,EAAE,MAAM,CAAC,eAAe;QACvC,cAAc,EAAE,MAAM,CAAC,cAAc;QACrC,cAAc,EAAE,MAAM,CAAC,cAAc;KACtC,CAAC;IACF,EAAE,CAAC,OAAO,CAAC,YAAY,EAAE,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC,CAAC;IACpD,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,UAAU,EAAE,MAAM,CAAC,GAAG,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,mBAAmB,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC;AAChH,CAAC"}

package/dist/pipeline.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"pipeline.d.ts","sourceRoot":"","sources":["../src/pipeline.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAMH,OAAO,EAKL,KAAK,cAAc,EACnB,KAAK,cAAc,EACnB,KAAK,YAAY,EACjB,KAAK,eAAe,EACpB,KAAK,WAAW,EAChB,KAAK,aAAa,EAClB,KAAK,cAAc,EACnB,KAAK,cAAc,EACnB,KAAK,YAAY,EACjB,KAAK,aAAa,EAIlB,KAAK,SAAS,EACf,MAAM,YAAY,CAAC;AAEpB,OAAO,EAA6B,KAAK,iBAAiB,EAA8B,MAAM,8BAA8B,CAAC;AAoM7H,wBAAsB,SAAS,CAC7B,MAAM,EAAE,aAAa,CAAC,YAAY,CAAC,EACnC,QAAQ,EAAE,aAAa,EAAE,EACzB,MAAM,EAAE,cAAc,EACtB,UAAU,EAAE,MAAM,GACjB,OAAO,CAAC;IACT,cAAc,EAAE,GAAG,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC;IAC5C,QAAQ,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;IAC/C,UAAU,EAAE,eAAe,EAAE,CAAC;IAC9B,iBAAiB,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACvC,SAAS,EAAE,MAAM,CAAC;CACnB,CAAC,CA8MD;AAsLD;;;;;;GAMG;AAEH,wBAAsB,WAAW,CAC/B,MAAM,EAAE,cAAc,EACtB,WAAW,CAAC,EAAE,WAAW,GACxB,OAAO,CAAC,cAAc,CAAC,CA6PzB;AAED;;;;;;GAMG;AAGH;;;;;;;;;GASG;AACH,wBAAgB,mBAAmB,CAAC,MAAM,EAAE,WAAW,EAAE,KAAK,EAAE,eAAe,EAAE,GAAG,IAAI,CA+BvF;AAED,wBAAsB,oBAAoB,CACxC,MAAM,EAAE,cAAc,EACtB,WAAW,CAAC,EAAE,WAAW,EACzB,eAAe,CAAC,EAAE,CAAC,KAAK,EAAE,eAAe,EAAE,KAAK,OAAO,CAAC,IAAI,CAAC,GAC5D,OAAO,CAAC;IACT,MAAM,EAAE,cAAc,CAAC;IACvB,UAAU,EAAE,eAAe,EAAE,CAAC;CAC/B,CAAC,CAcD;AAID;;;;GAIG;AACH,wBAAgB,iBAAiB,CAAC,cAAc,EAAE,MAAM;YACrC,aAAa;;EAC/B;AAED,wBAAgB,iBAAiB,CAAC,aAAa,EAAE,MAAM;YACpC,aAAa;;EAC/B;AAED;;;GAGG;AACH,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,cAAc,GAAG,MAAM,CAKhE;AAED;;;GAGG;AACH,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,cAAc,GAAG,MAAM,CAK/D;AAED;;GAEG;AACH,wBAAgB,eAAe,CAAC,MAAM,EAAE,cAAc,GAAG,OAAO,CAE/D;AAED;;GAEG;AACH,wBAAgB,eAAe,CAAC,MAAM,EAAE,cAAc,GAAG,OAAO,CAE/D;AA4CD;;;;GAIG;AACH,wBAAgB,oBAAoB,CAAC,CAAC,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,SAAS,GAAG,OAAO,CAOrG;AAED;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,wBAAgB,mBAAmB,CACjC,eAAe,EAAE,MAAM,CAAC,MAAM,EAAE,cAAc,CAAC,EAC/C,MAAM,EAAE,cAAc,EACtB,aAAa,CAAC,EAAE,aAAa,EAC7B,iBAAiB,CAAC,EAAE,WAAW,CAAC,MAAM,EAAE,iBAAiB,CAAC,GACzD,YAAY,EAAE,CAsHhB"}
+{"version":3,"file":"pipeline.d.ts","sourceRoot":"","sources":["../src/pipeline.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAMH,OAAO,EAKL,KAAK,cAAc,EACnB,KAAK,cAAc,EACnB,KAAK,YAAY,EACjB,KAAK,eAAe,EACpB,KAAK,WAAW,EAChB,KAAK,aAAa,EAClB,KAAK,cAAc,EACnB,KAAK,cAAc,EACnB,KAAK,YAAY,EACjB,KAAK,aAAa,EAIlB,KAAK,SAAS,EACf,MAAM,YAAY,CAAC;AAEpB,OAAO,EAA6B,KAAK,iBAAiB,EAA8B,MAAM,8BAA8B,CAAC;AAoM7H,wBAAsB,SAAS,CAC7B,MAAM,EAAE,aAAa,CAAC,YAAY,CAAC,EACnC,QAAQ,EAAE,aAAa,EAAE,EACzB,MAAM,EAAE,cAAc,EACtB,UAAU,EAAE,MAAM,GACjB,OAAO,CAAC;IACT,cAAc,EAAE,GAAG,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC;IAC5C,QAAQ,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;IAC/C,UAAU,EAAE,eAAe,EAAE,CAAC;IAC9B,iBAAiB,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACvC,SAAS,EAAE,MAAM,CAAC;CACnB,CAAC,CA8MD;AA0LD;;;;;;GAMG;AAEH,wBAAsB,WAAW,CAC/B,MAAM,EAAE,cAAc,EACtB,WAAW,CAAC,EAAE,WAAW,GACxB,OAAO,CAAC,cAAc,CAAC,CA8PzB;AAED;;;;;;GAMG;AAGH;;;;;;;;;GASG;AACH,wBAAgB,mBAAmB,CAAC,MAAM,EAAE,WAAW,EAAE,KAAK,EAAE,eAAe,EAAE,GAAG,IAAI,CA+BvF;AAED,wBAAsB,oBAAoB,CACxC,MAAM,EAAE,cAAc,EACtB,WAAW,CAAC,EAAE,WAAW,EACzB,eAAe,CAAC,EAAE,CAAC,KAAK,EAAE,eAAe,EAAE,KAAK,OAAO,CAAC,IAAI,CAAC,GAC5D,OAAO,CAAC;IACT,MAAM,EAAE,cAAc,CAAC;IACvB,UAAU,EAAE,eAAe,EAAE,CAAC;CAC/B,CAAC,CAcD;AAID;;;;GAIG;AACH,wBAAgB,iBAAiB,CAAC,cAAc,EAAE,MAAM;YACrC,aAAa;;EAC/B;AAED,wBAAgB,iBAAiB,CAAC,aAAa,EAAE,MAAM;YACpC,aAAa;;EAC/B;AAED;;;GAGG;AACH,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,cAAc,GAAG,MAAM,CAKhE;AAED;;;GAGG;AACH,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,cAAc,GAAG,MAAM,CAK/D;AAED;;GAEG;AACH,wBAAgB,eAAe,CAAC,MAAM,EAAE,cAAc,GAAG,OAAO,CAE/D;AAED;;GAEG;AACH,wBAAgB,eAAe,CAAC,MAAM,EAAE,cAAc,GAAG,OAAO,CAE/D;AA4CD;;;;GAIG;AACH,wBAAgB,oBAAoB,CAAC,CAAC,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,SAAS,GAAG,OAAO,CAOrG;AAED;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,wBAAgB,mBAAmB,CACjC,eAAe,EAAE,MAAM,CAAC,MAAM,EAAE,cAAc,CAAC,EAC/C,MAAM,EAAE,cAAc,EACtB,aAAa,CAAC,EAAE,aAAa,EAC7B,iBAAiB,CAAC,EAAE,WAAW,CAAC,MAAM,EAAE,iBAAiB,CAAC,GACzD,YAAY,EAAE,CAwIhB"}

package/dist/pipeline.js

@@ -425,6 +425,8 @@ async function runStage3(allFacts, reducers, config, indexHandle) {
             indexHandle,
             abortSignal: config.abortSignal,
             readSource,
+            isScoped: config.isScoped,
+            styleContributingFiles: config.styleContributingFiles,
         };
         try {
             const r0 = performance.now();
@@ -494,6 +496,8 @@ async function runStage4(allFacts, derivedReducers, config, indexHandle) {
             config: reducerConfig,
             indexHandle,
             abortSignal: config.abortSignal,
+            isScoped: config.isScoped,
+            styleContributingFiles: config.styleContributingFiles,
         };
         try {
             const r0 = performance.now();
@@ -759,6 +763,7 @@ export async function runPipeline(config, indexHandle) {
                 ruleId,
                 applicable: app.applicable,
                 reason: app.reason,
+                kind: app.kind,
             })),
             tableCatalog,
             ...(skippedFiles.length > 0 && { skippedFiles }),
@@ -954,6 +959,21 @@ export function buildCoverageReport(analyzerResults, config, inputPresence, rule
         if (!(analyzerName in (config.config ?? {}))) {
             continue;
         }
+        // Spec 44 bucket 2 — a `cannot-fire` rule is broken in the tool (its
+        // predicate reads a field no extractor populates). That verdict holds on
+        // every run regardless of whether the analyzer found input, so it precedes
+        // the run-status checks below.
+        const cannotFire = ruleApplicability?.get(ruleId);
+        if (cannotFire && !cannotFire.applicable && cannotFire.kind === 'cannot-fire') {
+            coverage.push({
+                ruleId,
+                analyzer: analyzerName,
+                state: 'cannot-fire',
+                count: 0,
+                reason: cannotFire.reason,
+            });
+            continue;
+        }
         const result = analyzerResults[analyzerName];
         // Analyzer not in results → notRun-equivalent
         if (!result) {
@@ -1018,6 +1038,8 @@ export function buildCoverageReport(analyzerResults, config, inputPresence, rule
         }
         // Spec 39 — derived applicability. A rule whose predicate evaluated false is
         // `notApplicable` with the predicate's reason, before any finding is counted.
+        // (`cannot-fire` was already reported above; only per-corpus `notApplicable`
+        // reaches this branch.)
         const applicability = ruleApplicability?.get(ruleId);
         if (applicability && !applicability.applicable) {
             coverage.push({