debtlens 0.1.0

package/dist/detectors/stateSprawl.js

@@ -0,0 +1,47 @@
+import { Node, SyntaxKind } from "ts-morph";
+import { collectFunctionLikes, getFunctionBody } from "../utils/ast.js";
+import { createIssue } from "../utils/createIssue.js";
+import { nodeLineSpan } from "../utils/lines.js";
+const statefulHooks = new Set(["useState", "useReducer", "useRef", "useSyncExternalStore", "useTransition", "useOptimistic"]);
+export const stateSprawlDetector = {
+    id: "state-sprawl",
+    name: "State sprawl",
+    description: "Flags components/hooks that manage many independent pieces of local state.",
+    defaultSeverity: "medium",
+    tags: ["react", "state", "complexity"],
+    detect(context) {
+        const issues = [];
+        const maxStatefulHooks = context.getThreshold("state-sprawl.maxStatefulHooks", 6);
+        for (const file of context.files) {
+            for (const fn of collectFunctionLikes(file)) {
+                if (fn.classification === "function")
+                    continue;
+                const body = getFunctionBody(fn.node) ?? fn.node;
+                const calls = body.getDescendantsOfKind(SyntaxKind.CallExpression).filter((call) => {
+                    const expression = call.getExpression();
+                    if (Node.isIdentifier(expression))
+                        return statefulHooks.has(expression.getText());
+                    if (Node.isPropertyAccessExpression(expression))
+                        return statefulHooks.has(expression.getName());
+                    return false;
+                });
+                if (calls.length < maxStatefulHooks)
+                    continue;
+                const span = nodeLineSpan(body);
+                const names = calls.map((call) => call.getExpression().getText());
+                issues.push(createIssue({
+                    detector: stateSprawlDetector,
+                    severity: calls.length >= maxStatefulHooks + 4 ? "high" : "medium",
+                    confidence: 0.82,
+                    file: file.relativePath,
+                    location: { startLine: span.startLine, endLine: span.endLine },
+                    message: `${fn.name} manages ${calls.length} stateful hook calls. This often means one component is coordinating several unrelated workflows.`,
+                    evidence: [`Stateful hooks: ${names.join(", ")}`],
+                    suggestion: "Group related state in a reducer, extract state machines into a hook, or move server/cache state out of component state.",
+                }));
+            }
+        }
+        return issues;
+    },
+};
+//# sourceMappingURL=stateSprawl.js.map

package/dist/detectors/stateSprawl.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"stateSprawl.js","sourceRoot":"","sources":["../../src/detectors/stateSprawl.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,MAAM,UAAU,CAAC;AAE5C,OAAO,EAAE,oBAAoB,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAC;AACxE,OAAO,EAAE,WAAW,EAAE,MAAM,yBAAyB,CAAC;AACtD,OAAO,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AAEjD,MAAM,aAAa,GAAG,IAAI,GAAG,CAAC,CAAC,UAAU,EAAE,YAAY,EAAE,QAAQ,EAAE,sBAAsB,EAAE,eAAe,EAAE,eAAe,CAAC,CAAC,CAAC;AAE9H,MAAM,CAAC,MAAM,mBAAmB,GAAa;IAC3C,EAAE,EAAE,cAAc;IAClB,IAAI,EAAE,cAAc;IACpB,WAAW,EAAE,4EAA4E;IACzF,eAAe,EAAE,QAAQ;IACzB,IAAI,EAAE,CAAC,OAAO,EAAE,OAAO,EAAE,YAAY,CAAC;IACtC,MAAM,CAAC,OAAwB;QAC7B,MAAM,MAAM,GAAgB,EAAE,CAAC;QAC/B,MAAM,gBAAgB,GAAG,OAAO,CAAC,YAAY,CAAC,+BAA+B,EAAE,CAAC,CAAC,CAAC;QAElF,KAAK,MAAM,IAAI,IAAI,OAAO,CAAC,KAAK,EAAE,CAAC;YACjC,KAAK,MAAM,EAAE,IAAI,oBAAoB,CAAC,IAAI,CAAC,EAAE,CAAC;gBAC5C,IAAI,EAAE,CAAC,cAAc,KAAK,UAAU;oBAAE,SAAS;gBAC/C,MAAM,IAAI,GAAG,eAAe,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC;gBACjD,MAAM,KAAK,GAAG,IAAI,CAAC,oBAAoB,CAAC,UAAU,CAAC,cAAc,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE;oBACjF,MAAM,UAAU,GAAG,IAAI,CAAC,aAAa,EAAE,CAAC;oBACxC,IAAI,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC;wBAAE,OAAO,aAAa,CAAC,GAAG,CAAC,UAAU,CAAC,OAAO,EAAE,CAAC,CAAC;oBAClF,IAAI,IAAI,CAAC,0BAA0B,CAAC,UAAU,CAAC;wBAAE,OAAO,aAAa,CAAC,GAAG,CAAC,UAAU,CAAC,OAAO,EAAE,CAAC,CAAC;oBAChG,OAAO,KAAK,CAAC;gBACf,CAAC,CAAC,CAAC;gBAEH,IAAI,KAAK,CAAC,MAAM,GAAG,gBAAgB;oBAAE,SAAS;gBAE9C,MAAM,IAAI,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC;gBAChC,MAAM,KAAK,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,aAAa,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC;gBAClE,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC;oBACtB,QAAQ,EAAE,mBAAmB;oBAC7B,QAAQ,EAAE,KAAK,CAAC,MAAM,IAAI,gBAAgB,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ;oBAClE,UAAU,EAAE,IAAI;oBAChB,IAAI,EAAE,IAAI,CAAC,YAAY;oBACvB,QAAQ,EAAE,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE;oBAC9D,OAAO,EAAE,GAAG,EAAE,CAAC,IAAI,YAAY,KAAK,CAAC,MAAM,mGAAmG;oBAC9I,QAAQ,EAAE,CAAC,mBAAmB,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;oBACjD,UAAU,EAAE,0HAA0H;iBACvI,CAAC,CAAC,CAAC;YACN,CAAC;QACH,CAAC;QAED,OAAO,MAAM,CAAC;IAChB,CAAC;CACF,CAAC"}

package/dist/detectors/todoComment.d.ts

@@ -0,0 +1,2 @@
+import type { Detector } from "../core/types.js";
+export declare const todoCommentDetector: Detector;

package/dist/detectors/todoComment.js

@@ -0,0 +1,45 @@
+import { createIssue } from "../utils/createIssue.js";
+const patterns = [
+    { regex: /\b(FIXME|BUG|BROKEN)\b/i, severity: "medium", label: "fixme/bug marker" },
+    { regex: /\b(HACK|WORKAROUND|KLUDGE)\b/i, severity: "medium", label: "hack/workaround marker" },
+    { regex: /\b(TODO|XXX)\b/i, severity: "low", label: "todo marker" },
+    { regex: /\b(for now|temporary|temp|quick fix|placeholder|stub)\b/i, severity: "low", label: "temporary implementation marker" },
+    { regex: /\b(generated by|ai generated|copilot|cursor|codex)\b/i, severity: "info", label: "assistant-generation marker" },
+];
+export const todoCommentDetector = {
+    id: "todo-comment",
+    name: "Debt marker comment",
+    description: "Finds comment markers that often identify debt accepted during fast implementation.",
+    defaultSeverity: "low",
+    tags: ["comments", "review", "cleanup"],
+    detect(context) {
+        const issues = [];
+        for (const file of context.files) {
+            const lines = file.content.split(/\r?\n/);
+            let countForFile = 0;
+            for (let index = 0; index < lines.length; index += 1) {
+                const line = lines[index] ?? "";
+                if (!line.includes("//") && !line.includes("/*") && !line.includes("*"))
+                    continue;
+                const match = patterns.find((pattern) => pattern.regex.test(line));
+                if (!match)
+                    continue;
+                issues.push(createIssue({
+                    detector: todoCommentDetector,
+                    severity: match.severity,
+                    confidence: 0.9,
+                    file: file.relativePath,
+                    location: { startLine: index + 1 },
+                    message: `Comment contains a ${match.label}.`,
+                    evidence: [line.trim().slice(0, 220)],
+                    suggestion: "Convert the marker into a tracked issue, add a removal condition, or fix it before more code depends on it.",
+                }));
+                countForFile += 1;
+                if (countForFile >= 12)
+                    break;
+            }
+        }
+        return issues;
+    },
+};
+//# sourceMappingURL=todoComment.js.map

package/dist/detectors/todoComment.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"todoComment.js","sourceRoot":"","sources":["../../src/detectors/todoComment.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,WAAW,EAAE,MAAM,yBAAyB,CAAC;AAEtD,MAAM,QAAQ,GAAgE;IAC5E,EAAE,KAAK,EAAE,yBAAyB,EAAE,QAAQ,EAAE,QAAQ,EAAE,KAAK,EAAE,kBAAkB,EAAE;IACnF,EAAE,KAAK,EAAE,+BAA+B,EAAE,QAAQ,EAAE,QAAQ,EAAE,KAAK,EAAE,wBAAwB,EAAE;IAC/F,EAAE,KAAK,EAAE,iBAAiB,EAAE,QAAQ,EAAE,KAAK,EAAE,KAAK,EAAE,aAAa,EAAE;IACnE,EAAE,KAAK,EAAE,0DAA0D,EAAE,QAAQ,EAAE,KAAK,EAAE,KAAK,EAAE,iCAAiC,EAAE;IAChI,EAAE,KAAK,EAAE,uDAAuD,EAAE,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,6BAA6B,EAAE;CAC3H,CAAC;AAEF,MAAM,CAAC,MAAM,mBAAmB,GAAa;IAC3C,EAAE,EAAE,cAAc;IAClB,IAAI,EAAE,qBAAqB;IAC3B,WAAW,EAAE,qFAAqF;IAClG,eAAe,EAAE,KAAK;IACtB,IAAI,EAAE,CAAC,UAAU,EAAE,QAAQ,EAAE,SAAS,CAAC;IACvC,MAAM,CAAC,OAAwB;QAC7B,MAAM,MAAM,GAAgB,EAAE,CAAC;QAE/B,KAAK,MAAM,IAAI,IAAI,OAAO,CAAC,KAAK,EAAE,CAAC;YACjC,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;YAC1C,IAAI,YAAY,GAAG,CAAC,CAAC;YACrB,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,KAAK,CAAC,MAAM,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;gBACrD,MAAM,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;gBAChC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC;oBAAE,SAAS;gBAClF,MAAM,KAAK,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;gBACnE,IAAI,CAAC,KAAK;oBAAE,SAAS;gBAErB,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC;oBACtB,QAAQ,EAAE,mBAAmB;oBAC7B,QAAQ,EAAE,KAAK,CAAC,QAAQ;oBACxB,UAAU,EAAE,GAAG;oBACf,IAAI,EAAE,IAAI,CAAC,YAAY;oBACvB,QAAQ,EAAE,EAAE,SAAS,EAAE,KAAK,GAAG,CAAC,EAAE;oBAClC,OAAO,EAAE,sBAAsB,KAAK,CAAC,KAAK,GAAG;oBAC7C,QAAQ,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;oBACrC,UAAU,EAAE,6GAA6G;iBAC1H,CAAC,CAAC,CAAC;gBAEJ,YAAY,IAAI,CAAC,CAAC;gBAClB,IAAI,YAAY,IAAI,EAAE;oBAAE,MAAM;YAChC,CAAC;QACH,CAAC;QAED,OAAO,MAAM,CAAC;IAChB,CAAC;CACF,CAAC"}

package/dist/reporters/index.d.ts

@@ -0,0 +1,4 @@
+import type { OutputFormat, ScanResult } from "../core/types.js";
+export declare function renderReport(result: ScanResult, format: OutputFormat, options?: {
+    color?: boolean;
+}): string;

package/dist/reporters/index.js

@@ -0,0 +1,14 @@
+import { renderJson } from "./jsonReporter.js";
+import { renderMarkdown } from "./markdownReporter.js";
+import { renderSarif } from "./sarifReporter.js";
+import { renderTerminal } from "./terminalReporter.js";
+export function renderReport(result, format, options = {}) {
+    if (format === "json")
+        return renderJson(result);
+    if (format === "markdown")
+        return renderMarkdown(result);
+    if (format === "sarif")
+        return renderSarif(result);
+    return renderTerminal(result, { color: options.color ?? true });
+}
+//# sourceMappingURL=index.js.map

package/dist/reporters/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/reporters/index.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAC/C,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AACvD,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AACjD,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AAEvD,MAAM,UAAU,YAAY,CAAC,MAAkB,EAAE,MAAoB,EAAE,UAA+B,EAAE;IACtG,IAAI,MAAM,KAAK,MAAM;QAAE,OAAO,UAAU,CAAC,MAAM,CAAC,CAAC;IACjD,IAAI,MAAM,KAAK,UAAU;QAAE,OAAO,cAAc,CAAC,MAAM,CAAC,CAAC;IACzD,IAAI,MAAM,KAAK,OAAO;QAAE,OAAO,WAAW,CAAC,MAAM,CAAC,CAAC;IACnD,OAAO,cAAc,CAAC,MAAM,EAAE,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,IAAI,IAAI,EAAE,CAAC,CAAC;AAClE,CAAC"}

package/dist/reporters/jsonReporter.d.ts

@@ -0,0 +1,2 @@
+import type { ScanResult } from "../core/types.js";
+export declare function renderJson(result: ScanResult): string;

package/dist/reporters/jsonReporter.js

@@ -0,0 +1,4 @@
+export function renderJson(result) {
+    return `${JSON.stringify(result, null, 2)}\n`;
+}
+//# sourceMappingURL=jsonReporter.js.map

package/dist/reporters/jsonReporter.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"jsonReporter.js","sourceRoot":"","sources":["../../src/reporters/jsonReporter.ts"],"names":[],"mappings":"AAEA,MAAM,UAAU,UAAU,CAAC,MAAkB;IAC3C,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC;AAChD,CAAC"}

package/dist/reporters/markdownReporter.d.ts

@@ -0,0 +1,2 @@
+import type { ScanResult } from "../core/types.js";
+export declare function renderMarkdown(result: ScanResult): string;

package/dist/reporters/markdownReporter.js

@@ -0,0 +1,52 @@
+const severityOrder = ["high", "medium", "low", "info"];
+export function renderMarkdown(result) {
+    const lines = [];
+    lines.push("# DebtLens Report");
+    lines.push("");
+    lines.push(`Scanned **${result.summary.filesScanned}** files with **${result.summary.rulesRun}** rules in **${result.summary.elapsedMs}ms**.`);
+    lines.push("");
+    lines.push("## Summary");
+    lines.push("");
+    lines.push(`- Total issues: **${result.summary.totalIssues}**`);
+    for (const severity of severityOrder) {
+        lines.push(`- ${capitalize(severity)}: **${result.summary.bySeverity[severity]}**`);
+    }
+    if (result.issues.length === 0) {
+        lines.push("");
+        lines.push("No maintainability debt found at the configured severity level.");
+        return `${lines.join("\n")}\n`;
+    }
+    for (const severity of severityOrder) {
+        const issues = result.issues.filter((issue) => issue.severity === severity);
+        if (issues.length === 0)
+            continue;
+        lines.push("");
+        lines.push(`## ${capitalize(severity)} severity`);
+        lines.push("");
+        for (const issue of issues) {
+            const location = issue.location ? `:${issue.location.startLine}` : "";
+            lines.push(`### ${issue.ruleName} — \`${issue.file}${location}\``);
+            lines.push("");
+            lines.push(issue.message);
+            lines.push("");
+            lines.push(`Confidence: **${Math.round(issue.confidence * 100)}%**`);
+            if (issue.evidence?.length) {
+                lines.push("");
+                lines.push("Evidence:");
+                for (const evidence of issue.evidence) {
+                    lines.push(`- ${evidence}`);
+                }
+            }
+            if (issue.suggestion) {
+                lines.push("");
+                lines.push(`Suggestion: ${issue.suggestion}`);
+            }
+            lines.push("");
+        }
+    }
+    return `${lines.join("\n")}\n`;
+}
+function capitalize(value) {
+    return `${value.charAt(0).toUpperCase()}${value.slice(1)}`;
+}
+//# sourceMappingURL=markdownReporter.js.map

package/dist/reporters/markdownReporter.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"markdownReporter.js","sourceRoot":"","sources":["../../src/reporters/markdownReporter.ts"],"names":[],"mappings":"AAEA,MAAM,aAAa,GAAe,CAAC,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC;AAEpE,MAAM,UAAU,cAAc,CAAC,MAAkB;IAC/C,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,KAAK,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC;IAChC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACf,KAAK,CAAC,IAAI,CAAC,aAAa,MAAM,CAAC,OAAO,CAAC,YAAY,mBAAmB,MAAM,CAAC,OAAO,CAAC,QAAQ,iBAAiB,MAAM,CAAC,OAAO,CAAC,SAAS,OAAO,CAAC,CAAC;IAC/I,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACf,KAAK,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;IACzB,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACf,KAAK,CAAC,IAAI,CAAC,qBAAqB,MAAM,CAAC,OAAO,CAAC,WAAW,IAAI,CAAC,CAAC;IAChE,KAAK,MAAM,QAAQ,IAAI,aAAa,EAAE,CAAC;QACrC,KAAK,CAAC,IAAI,CAAC,KAAK,UAAU,CAAC,QAAQ,CAAC,OAAO,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;IACtF,CAAC;IAED,IAAI,MAAM,CAAC,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC/B,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACf,KAAK,CAAC,IAAI,CAAC,iEAAiE,CAAC,CAAC;QAC9E,OAAO,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC;IACjC,CAAC;IAED,KAAK,MAAM,QAAQ,IAAI,aAAa,EAAE,CAAC;QACrC,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC;QAC5E,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;YAAE,SAAS;QAClC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACf,KAAK,CAAC,IAAI,CAAC,MAAM,UAAU,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;QAClD,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACf,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;YAC3B,MAAM,QAAQ,GAAG,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACtE,KAAK,CAAC,IAAI,CAAC,OAAO,KAAK,CAAC,QAAQ,QAAQ,KAAK,CAAC,IAAI,GAAG,QAAQ,IAAI,CAAC,CAAC;YACnE,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YACf,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;YAC1B,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YACf,KAAK,CAAC,IAAI,CAAC,iBAAiB,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,UAAU,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC;YACrE,IAAI,KAAK,CAAC,QAAQ,EAAE,MAAM,EAAE,CAAC;gBAC3B,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;gBACf,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;gBACxB,KAAK,MAAM,QAAQ,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAC;oBACtC,KAAK,CAAC,IAAI,CAAC,KAAK,QAAQ,EAAE,CAAC,CAAC;gBAC9B,CAAC;YACH,CAAC;YACD,IAAI,KAAK,CAAC,UAAU,EAAE,CAAC;gBACrB,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;gBACf,KAAK,CAAC,IAAI,CAAC,eAAe,KAAK,CAAC,UAAU,EAAE,CAAC,CAAC;YAChD,CAAC;YACD,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACjB,CAAC;IACH,CAAC;IAED,OAAO,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC;AACjC,CAAC;AAED,SAAS,UAAU,CAAC,KAAa;IAC/B,OAAO,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;AAC7D,CAAC"}

package/dist/reporters/sarifReporter.d.ts

@@ -0,0 +1,7 @@
+import type { ScanResult } from "../core/types.js";
+/**
+ * Render a scan result as SARIF 2.1.0 for GitHub code scanning and other tools.
+ * The full rule catalog (all detectors) is always emitted under `tool.driver.rules`
+ * so rule indices stay stable regardless of which rules produced results.
+ */
+export declare function renderSarif(result: ScanResult): string;

package/dist/reporters/sarifReporter.js

@@ -0,0 +1,77 @@
+import { allDetectors } from "../detectors/index.js";
+const TOOL_VERSION = "0.1.0";
+const INFORMATION_URI = "https://github.com/ColumbusLabs/debtlens";
+function toSarifLevel(severity) {
+    switch (severity) {
+        case "high":
+            return "error";
+        case "medium":
+            return "warning";
+        case "low":
+        case "info":
+            return "note";
+        default:
+            return "none";
+    }
+}
+/**
+ * Render a scan result as SARIF 2.1.0 for GitHub code scanning and other tools.
+ * The full rule catalog (all detectors) is always emitted under `tool.driver.rules`
+ * so rule indices stay stable regardless of which rules produced results.
+ */
+export function renderSarif(result) {
+    const ruleIndex = new Map();
+    const rules = allDetectors.map((detector, index) => {
+        ruleIndex.set(detector.id, index);
+        return {
+            id: detector.id,
+            name: detector.name,
+            shortDescription: { text: detector.description },
+            defaultConfiguration: { level: toSarifLevel(detector.defaultSeverity) },
+            properties: { tags: detector.tags },
+        };
+    });
+    const results = result.issues.map((issue) => ({
+        ruleId: issue.ruleId,
+        ruleIndex: ruleIndex.get(issue.ruleId) ?? -1,
+        level: toSarifLevel(issue.severity),
+        message: { text: issue.message },
+        locations: [
+            {
+                physicalLocation: {
+                    artifactLocation: { uri: issue.file },
+                    region: {
+                        startLine: issue.location?.startLine ?? 1,
+                        ...(issue.location?.endLine ? { endLine: issue.location.endLine } : {}),
+                        ...(issue.location?.startColumn ? { startColumn: issue.location.startColumn } : {}),
+                    },
+                },
+            },
+        ],
+        properties: {
+            confidence: issue.confidence,
+            severity: issue.severity,
+            ...(issue.evidence?.length ? { evidence: issue.evidence } : {}),
+            ...(issue.suggestion ? { suggestion: issue.suggestion } : {}),
+        },
+    }));
+    const sarif = {
+        $schema: "https://json.schemastore.org/sarif-2.1.0.json",
+        version: "2.1.0",
+        runs: [
+            {
+                tool: {
+                    driver: {
+                        name: "DebtLens",
+                        informationUri: INFORMATION_URI,
+                        version: TOOL_VERSION,
+                        rules,
+                    },
+                },
+                results,
+            },
+        ],
+    };
+    return `${JSON.stringify(sarif, null, 2)}\n`;
+}
+//# sourceMappingURL=sarifReporter.js.map

package/dist/reporters/sarifReporter.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sarifReporter.js","sourceRoot":"","sources":["../../src/reporters/sarifReporter.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAC;AAErD,MAAM,YAAY,GAAG,OAAO,CAAC;AAC7B,MAAM,eAAe,GAAG,0CAA0C,CAAC;AAInE,SAAS,YAAY,CAAC,QAAkB;IACtC,QAAQ,QAAQ,EAAE,CAAC;QACjB,KAAK,MAAM;YACT,OAAO,OAAO,CAAC;QACjB,KAAK,QAAQ;YACX,OAAO,SAAS,CAAC;QACnB,KAAK,KAAK,CAAC;QACX,KAAK,MAAM;YACT,OAAO,MAAM,CAAC;QAChB;YACE,OAAO,MAAM,CAAC;IAClB,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,WAAW,CAAC,MAAkB;IAC5C,MAAM,SAAS,GAAG,IAAI,GAAG,EAAkB,CAAC;IAC5C,MAAM,KAAK,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,KAAK,EAAE,EAAE;QACjD,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC;QAClC,OAAO;YACL,EAAE,EAAE,QAAQ,CAAC,EAAE;YACf,IAAI,EAAE,QAAQ,CAAC,IAAI;YACnB,gBAAgB,EAAE,EAAE,IAAI,EAAE,QAAQ,CAAC,WAAW,EAAE;YAChD,oBAAoB,EAAE,EAAE,KAAK,EAAE,YAAY,CAAC,QAAQ,CAAC,eAAe,CAAC,EAAE;YACvE,UAAU,EAAE,EAAE,IAAI,EAAE,QAAQ,CAAC,IAAI,EAAE;SACpC,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,MAAM,OAAO,GAAG,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;QAC5C,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,SAAS,EAAE,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QAC5C,KAAK,EAAE,YAAY,CAAC,KAAK,CAAC,QAAQ,CAAC;QACnC,OAAO,EAAE,EAAE,IAAI,EAAE,KAAK,CAAC,OAAO,EAAE;QAChC,SAAS,EAAE;YACT;gBACE,gBAAgB,EAAE;oBAChB,gBAAgB,EAAE,EAAE,GAAG,EAAE,KAAK,CAAC,IAAI,EAAE;oBACrC,MAAM,EAAE;wBACN,SAAS,EAAE,KAAK,CAAC,QAAQ,EAAE,SAAS,IAAI,CAAC;wBACzC,GAAG,CAAC,KAAK,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,KAAK,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;wBACvE,GAAG,CAAC,KAAK,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,KAAK,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;qBACpF;iBACF;aACF;SACF;QACD,UAAU,EAAE;YACV,UAAU,EAAE,KAAK,CAAC,UAAU;YAC5B,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,GAAG,CAAC,KAAK,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC/D,GAAG,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,KAAK,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC9D;KACF,CAAC,CAAC,CAAC;IAEJ,MAAM,KAAK,GAAG;QACZ,OAAO,EAAE,+CAA+C;QACxD,OAAO,EAAE,OAAO;QAChB,IAAI,EAAE;YACJ;gBACE,IAAI,EAAE;oBACJ,MAAM,EAAE;wBACN,IAAI,EAAE,UAAU;wBAChB,cAAc,EAAE,eAAe;wBAC/B,OAAO,EAAE,YAAY;wBACrB,KAAK;qBACN;iBACF;gBACD,OAAO;aACR;SACF;KACF,CAAC;IAEF,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC;AAC/C,CAAC"}

package/dist/reporters/terminalReporter.d.ts

@@ -0,0 +1,4 @@
+import type { ScanResult } from "../core/types.js";
+export declare function renderTerminal(result: ScanResult, options?: {
+    color: boolean;
+}): string;

package/dist/reporters/terminalReporter.js

@@ -0,0 +1,39 @@
+import { createColorizer } from "../utils/color.js";
+const severityOrder = ["high", "medium", "low", "info"];
+export function renderTerminal(result, options = { color: true }) {
+    const color = createColorizer(options.color);
+    const lines = [];
+    lines.push(color.bold("DebtLens Report"));
+    lines.push(`Scanned ${result.summary.filesScanned} files with ${result.summary.rulesRun} rules in ${result.summary.elapsedMs}ms.`);
+    lines.push(`Issues: ${result.summary.totalIssues} | high ${result.summary.bySeverity.high} | medium ${result.summary.bySeverity.medium} | low ${result.summary.bySeverity.low} | info ${result.summary.bySeverity.info}`);
+    if (result.issues.length === 0) {
+        lines.push("");
+        lines.push("No maintainability debt found at the configured severity level.");
+        return `${lines.join("\n")}\n`;
+    }
+    for (const severity of severityOrder) {
+        const issues = result.issues.filter((issue) => issue.severity === severity);
+        if (issues.length === 0)
+            continue;
+        lines.push("");
+        lines.push(color.severity(severity, color.bold(`${severity.toUpperCase()} (${issues.length})`)));
+        for (const issue of issues) {
+            const location = issue.location ? `:${issue.location.startLine}` : "";
+            lines.push(`  ${color.severity(issue.severity, issue.ruleName)} ${color.gray(`[${issue.ruleId}]`)}`);
+            lines.push(`  ${issue.file}${location}`);
+            lines.push(`  ${issue.message}`);
+            lines.push(`  confidence ${Math.round(issue.confidence * 100)}%`);
+            if (issue.evidence?.length) {
+                for (const evidence of issue.evidence.slice(0, 3)) {
+                    lines.push(`  - ${evidence}`);
+                }
+            }
+            if (issue.suggestion) {
+                lines.push(`  suggestion: ${issue.suggestion}`);
+            }
+            lines.push("");
+        }
+    }
+    return `${lines.join("\n")}\n`;
+}
+//# sourceMappingURL=terminalReporter.js.map

package/dist/reporters/terminalReporter.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"terminalReporter.js","sourceRoot":"","sources":["../../src/reporters/terminalReporter.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AAEpD,MAAM,aAAa,GAAe,CAAC,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC;AAEpE,MAAM,UAAU,cAAc,CAAC,MAAkB,EAAE,UAA8B,EAAE,KAAK,EAAE,IAAI,EAAE;IAC9F,MAAM,KAAK,GAAG,eAAe,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IAC7C,MAAM,KAAK,GAAa,EAAE,CAAC;IAE3B,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC,CAAC;IAC1C,KAAK,CAAC,IAAI,CAAC,WAAW,MAAM,CAAC,OAAO,CAAC,YAAY,eAAe,MAAM,CAAC,OAAO,CAAC,QAAQ,aAAa,MAAM,CAAC,OAAO,CAAC,SAAS,KAAK,CAAC,CAAC;IACnI,KAAK,CAAC,IAAI,CAAC,WAAW,MAAM,CAAC,OAAO,CAAC,WAAW,WAAW,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,IAAI,aAAa,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,MAAM,UAAU,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,GAAG,WAAW,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,IAAI,EAAE,CAAC,CAAC;IAE1N,IAAI,MAAM,CAAC,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC/B,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACf,KAAK,CAAC,IAAI,CAAC,iEAAiE,CAAC,CAAC;QAC9E,OAAO,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC;IACjC,CAAC;IAED,KAAK,MAAM,QAAQ,IAAI,aAAa,EAAE,CAAC;QACrC,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC;QAC5E,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;YAAE,SAAS;QAClC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACf,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,QAAQ,EAAE,KAAK,CAAC,IAAI,CAAC,GAAG,QAAQ,CAAC,WAAW,EAAE,KAAK,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC;QAEjG,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;YAC3B,MAAM,QAAQ,GAAG,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACtE,KAAK,CAAC,IAAI,CAAC,KAAK,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,QAAQ,CAAC,IAAI,KAAK,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC,CAAC;YACrG,KAAK,CAAC,IAAI,CAAC,KAAK,KAAK,CAAC,IAAI,GAAG,QAAQ,EAAE,CAAC,CAAC;YACzC,KAAK,CAAC,IAAI,CAAC,KAAK,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;YACjC,KAAK,CAAC,IAAI,CAAC,gBAAgB,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,UAAU,GAAG,GAAG,CAAC,GAAG,CAAC,CAAC;YAClE,IAAI,KAAK,CAAC,QAAQ,EAAE,MAAM,EAAE,CAAC;gBAC3B,KAAK,MAAM,QAAQ,IAAI,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC;oBAClD,KAAK,CAAC,IAAI,CAAC,OAAO,QAAQ,EAAE,CAAC,CAAC;gBAChC,CAAC;YACH,CAAC;YACD,IAAI,KAAK,CAAC,UAAU,EAAE,CAAC;gBACrB,KAAK,CAAC,IAAI,CAAC,iBAAiB,KAAK,CAAC,UAAU,EAAE,CAAC,CAAC;YAClD,CAAC;YACD,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACjB,CAAC;IACH,CAAC;IAED,OAAO,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC;AACjC,CAAC"}

package/dist/utils/ast.d.ts

@@ -0,0 +1,23 @@
+import type { ArrowFunction, FunctionDeclaration, FunctionExpression, Node as MorphNode, SourceFile, VariableDeclaration } from "ts-morph";
+import type { SourceFileInfo } from "../core/types.js";
+export type FunctionNode = FunctionDeclaration | ArrowFunction | FunctionExpression;
+export interface FunctionLikeInfo {
+    name: string;
+    node: FunctionNode;
+    declaration: FunctionDeclaration | VariableDeclaration;
+    file: SourceFileInfo;
+    classification: "component" | "hook" | "function";
+}
+export declare function collectFunctionLikes(file: SourceFileInfo): FunctionLikeInfo[];
+export declare function classifyFunctionName(name: string): FunctionLikeInfo["classification"];
+export declare function getFunctionBody(node: FunctionNode): MorphNode | undefined;
+export declare function countHookCalls(node: MorphNode): number;
+export declare function countBranches(node: MorphNode): number;
+export declare function getCallName(callExpressionText: string): string | undefined;
+export declare function getSourceFileLine(sourceFile: SourceFile, lineNumber: number): string;
+/**
+ * Build a structural fingerprint of a function body: a multiset of node-shape tokens
+ * that ignores identifier and literal values. Two functions that share control-flow
+ * and call shape produce similar fingerprints even when every name differs.
+ */
+export declare function structuralFingerprint(node: MorphNode): Map<string, number>;

package/dist/utils/ast.js

@@ -0,0 +1,132 @@
+import { Node, SyntaxKind } from "ts-morph";
+import { isHookName, isPascalCase } from "./identifiers.js";
+export function collectFunctionLikes(file) {
+    const results = [];
+    for (const declaration of file.sourceFile.getFunctions()) {
+        const name = declaration.getName();
+        if (!name)
+            continue;
+        results.push({
+            name,
+            node: declaration,
+            declaration,
+            file,
+            classification: classifyFunctionName(name),
+        });
+    }
+    for (const declaration of file.sourceFile.getVariableDeclarations()) {
+        const name = declaration.getName();
+        const initializer = declaration.getInitializer();
+        if (!initializer)
+            continue;
+        if (Node.isArrowFunction(initializer) || Node.isFunctionExpression(initializer)) {
+            results.push({
+                name,
+                node: initializer,
+                declaration,
+                file,
+                classification: classifyFunctionName(name),
+            });
+        }
+    }
+    return results;
+}
+export function classifyFunctionName(name) {
+    if (isHookName(name))
+        return "hook";
+    if (isPascalCase(name))
+        return "component";
+    return "function";
+}
+export function getFunctionBody(node) {
+    if (Node.isFunctionDeclaration(node) || Node.isFunctionExpression(node) || Node.isArrowFunction(node)) {
+        return node.getBody();
+    }
+    return undefined;
+}
+export function countHookCalls(node) {
+    return node.getDescendantsOfKind(SyntaxKind.CallExpression).filter((call) => {
+        const expression = call.getExpression();
+        return Node.isIdentifier(expression) && isHookName(expression.getText());
+    }).length;
+}
+export function countBranches(node) {
+    return node.getDescendants().filter((descendant) => {
+        const kind = descendant.getKind();
+        return kind === SyntaxKind.IfStatement
+            || kind === SyntaxKind.ConditionalExpression
+            || kind === SyntaxKind.SwitchStatement
+            || kind === SyntaxKind.ForStatement
+            || kind === SyntaxKind.ForOfStatement
+            || kind === SyntaxKind.ForInStatement
+            || kind === SyntaxKind.WhileStatement
+            || kind === SyntaxKind.DoStatement
+            || kind === SyntaxKind.CatchClause;
+    }).length;
+}
+export function getCallName(callExpressionText) {
+    const match = callExpressionText.match(/^([A-Za-z_$][\w$]*)\s*\(/);
+    return match?.[1];
+}
+export function getSourceFileLine(sourceFile, lineNumber) {
+    return sourceFile.getFullText().split(/\r?\n/)[lineNumber - 1] ?? "";
+}
+/**
+ * Build a structural fingerprint of a function body: a multiset of node-shape tokens
+ * that ignores identifier and literal values. Two functions that share control-flow
+ * and call shape produce similar fingerprints even when every name differs.
+ */
+export function structuralFingerprint(node) {
+    const counts = new Map();
+    const bump = (token) => counts.set(token, (counts.get(token) ?? 0) + 1);
+    for (const descendant of node.getDescendants()) {
+        switch (descendant.getKind()) {
+            case SyntaxKind.IfStatement:
+                bump("if");
+                break;
+            case SyntaxKind.ConditionalExpression:
+                bump("ternary");
+                break;
+            case SyntaxKind.ForStatement:
+            case SyntaxKind.ForOfStatement:
+            case SyntaxKind.ForInStatement:
+                bump("for");
+                break;
+            case SyntaxKind.WhileStatement:
+            case SyntaxKind.DoStatement:
+                bump("while");
+                break;
+            case SyntaxKind.SwitchStatement:
+                bump("switch");
+                break;
+            case SyntaxKind.ReturnStatement:
+                bump("return");
+                break;
+            case SyntaxKind.AwaitExpression:
+                bump("await");
+                break;
+            case SyntaxKind.TryStatement:
+                bump("try");
+                break;
+            case SyntaxKind.VariableDeclaration:
+                bump("var");
+                break;
+            case SyntaxKind.BinaryExpression:
+                bump("binop");
+                break;
+            case SyntaxKind.CallExpression: {
+                const expression = descendant.getExpression();
+                bump(Node.isPropertyAccessExpression(expression) ? "call.prop" : "call.id");
+                break;
+            }
+            case SyntaxKind.JsxElement:
+            case SyntaxKind.JsxSelfClosingElement:
+                bump("jsx");
+                break;
+            default:
+                break;
+        }
+    }
+    return counts;
+}
+//# sourceMappingURL=ast.js.map

package/dist/utils/ast.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ast.js","sourceRoot":"","sources":["../../src/utils/ast.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,MAAM,UAAU,CAAC;AAG5C,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAC;AAY5D,MAAM,UAAU,oBAAoB,CAAC,IAAoB;IACvD,MAAM,OAAO,GAAuB,EAAE,CAAC;IAEvC,KAAK,MAAM,WAAW,IAAI,IAAI,CAAC,UAAU,CAAC,YAAY,EAAE,EAAE,CAAC;QACzD,MAAM,IAAI,GAAG,WAAW,CAAC,OAAO,EAAE,CAAC;QACnC,IAAI,CAAC,IAAI;YAAE,SAAS;QACpB,OAAO,CAAC,IAAI,CAAC;YACX,IAAI;YACJ,IAAI,EAAE,WAAW;YACjB,WAAW;YACX,IAAI;YACJ,cAAc,EAAE,oBAAoB,CAAC,IAAI,CAAC;SAC3C,CAAC,CAAC;IACL,CAAC;IAED,KAAK,MAAM,WAAW,IAAI,IAAI,CAAC,UAAU,CAAC,uBAAuB,EAAE,EAAE,CAAC;QACpE,MAAM,IAAI,GAAG,WAAW,CAAC,OAAO,EAAE,CAAC;QACnC,MAAM,WAAW,GAAG,WAAW,CAAC,cAAc,EAAE,CAAC;QACjD,IAAI,CAAC,WAAW;YAAE,SAAS;QAC3B,IAAI,IAAI,CAAC,eAAe,CAAC,WAAW,CAAC,IAAI,IAAI,CAAC,oBAAoB,CAAC,WAAW,CAAC,EAAE,CAAC;YAChF,OAAO,CAAC,IAAI,CAAC;gBACX,IAAI;gBACJ,IAAI,EAAE,WAAW;gBACjB,WAAW;gBACX,IAAI;gBACJ,cAAc,EAAE,oBAAoB,CAAC,IAAI,CAAC;aAC3C,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,IAAY;IAC/C,IAAI,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,MAAM,CAAC;IACpC,IAAI,YAAY,CAAC,IAAI,CAAC;QAAE,OAAO,WAAW,CAAC;IAC3C,OAAO,UAAU,CAAC;AACpB,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,IAAkB;IAChD,IAAI,IAAI,CAAC,qBAAqB,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,oBAAoB,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,EAAE,CAAC;QACtG,OAAO,IAAI,CAAC,OAAO,EAAE,CAAC;IACxB,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,IAAe;IAC5C,OAAO,IAAI,CAAC,oBAAoB,CAAC,UAAU,CAAC,cAAc,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE;QAC1E,MAAM,UAAU,GAAG,IAAI,CAAC,aAAa,EAAE,CAAC;QACxC,OAAO,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,IAAI,UAAU,CAAC,UAAU,CAAC,OAAO,EAAE,CAAC,CAAC;IAC3E,CAAC,CAAC,CAAC,MAAM,CAAC;AACZ,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,IAAe;IAC3C,OAAO,IAAI,CAAC,cAAc,EAAE,CAAC,MAAM,CAAC,CAAC,UAAU,EAAE,EAAE;QACjD,MAAM,IAAI,GAAG,UAAU,CAAC,OAAO,EAAE,CAAC;QAClC,OAAO,IAAI,KAAK,UAAU,CAAC,WAAW;eACjC,IAAI,KAAK,UAAU,CAAC,qBAAqB;eACzC,IAAI,KAAK,UAAU,CAAC,eAAe;eACnC,IAAI,KAAK,UAAU,CAAC,YAAY;eAChC,IAAI,KAAK,UAAU,CAAC,cAAc;eAClC,IAAI,KAAK,UAAU,CAAC,cAAc;eAClC,IAAI,KAAK,UAAU,CAAC,cAAc;eAClC,IAAI,KAAK,UAAU,CAAC,WAAW;eAC/B,IAAI,KAAK,UAAU,CAAC,WAAW,CAAC;IACvC,CAAC,CAAC,CAAC,MAAM,CAAC;AACZ,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,kBAA0B;IACpD,MAAM,KAAK,GAAG,kBAAkB,CAAC,KAAK,CAAC,0BAA0B,CAAC,CAAC;IACnE,OAAO,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC;AACpB,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,UAAsB,EAAE,UAAkB;IAC1E,OAAO,UAAU,CAAC,WAAW,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,UAAU,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;AACvE,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,qBAAqB,CAAC,IAAe;IACnD,MAAM,MAAM,GAAG,IAAI,GAAG,EAAkB,CAAC;IACzC,MAAM,IAAI,GAAG,CAAC,KAAa,EAAE,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;IAEhF,KAAK,MAAM,UAAU,IAAI,IAAI,CAAC,cAAc,EAAE,EAAE,CAAC;QAC/C,QAAQ,UAAU,CAAC,OAAO,EAAE,EAAE,CAAC;YAC7B,KAAK,UAAU,CAAC,WAAW;gBACzB,IAAI,CAAC,IAAI,CAAC,CAAC;gBACX,MAAM;YACR,KAAK,UAAU,CAAC,qBAAqB;gBACnC,IAAI,CAAC,SAAS,CAAC,CAAC;gBAChB,MAAM;YACR,KAAK,UAAU,CAAC,YAAY,CAAC;YAC7B,KAAK,UAAU,CAAC,cAAc,CAAC;YAC/B,KAAK,UAAU,CAAC,cAAc;gBAC5B,IAAI,CAAC,KAAK,CAAC,CAAC;gBACZ,MAAM;YACR,KAAK,UAAU,CAAC,cAAc,CAAC;YAC/B,KAAK,UAAU,CAAC,WAAW;gBACzB,IAAI,CAAC,OAAO,CAAC,CAAC;gBACd,MAAM;YACR,KAAK,UAAU,CAAC,eAAe;gBAC7B,IAAI,CAAC,QAAQ,CAAC,CAAC;gBACf,MAAM;YACR,KAAK,UAAU,CAAC,eAAe;gBAC7B,IAAI,CAAC,QAAQ,CAAC,CAAC;gBACf,MAAM;YACR,KAAK,UAAU,CAAC,eAAe;gBAC7B,IAAI,CAAC,OAAO,CAAC,CAAC;gBACd,MAAM;YACR,KAAK,UAAU,CAAC,YAAY;gBAC1B,IAAI,CAAC,KAAK,CAAC,CAAC;gBACZ,MAAM;YACR,KAAK,UAAU,CAAC,mBAAmB;gBACjC,IAAI,CAAC,KAAK,CAAC,CAAC;gBACZ,MAAM;YACR,KAAK,UAAU,CAAC,gBAAgB;gBAC9B,IAAI,CAAC,OAAO,CAAC,CAAC;gBACd,MAAM;YACR,KAAK,UAAU,CAAC,cAAc,CAAC,CAAC,CAAC;gBAC/B,MAAM,UAAU,GAAI,UAA6B,CAAC,aAAa,EAAE,CAAC;gBAClE,IAAI,CAAC,IAAI,CAAC,0BAA0B,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;gBAC5E,MAAM;YACR,CAAC;YACD,KAAK,UAAU,CAAC,UAAU,CAAC;YAC3B,KAAK,UAAU,CAAC,qBAAqB;gBACnC,IAAI,CAAC,KAAK,CAAC,CAAC;gBACZ,MAAM;YACR;gBACE,MAAM;QACV,CAAC;IACH,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/utils/color.d.ts

@@ -0,0 +1,8 @@
+import type { Severity } from "../core/types.js";
+export interface Colorizer {
+    bold: (value: string) => string;
+    dim: (value: string) => string;
+    severity: (severity: Severity, value: string) => string;
+    gray: (value: string) => string;
+}
+export declare function createColorizer(enabled: boolean): Colorizer;

package/dist/utils/color.js

@@ -0,0 +1,27 @@
+const codes = {
+    reset: "\u001b[0m",
+    dim: "\u001b[2m",
+    bold: "\u001b[1m",
+    red: "\u001b[31m",
+    yellow: "\u001b[33m",
+    cyan: "\u001b[36m",
+    gray: "\u001b[90m",
+};
+export function createColorizer(enabled) {
+    const wrap = (open, value) => enabled ? `${open}${value}${codes.reset}` : value;
+    return {
+        bold: (value) => wrap(codes.bold, value),
+        dim: (value) => wrap(codes.dim, value),
+        gray: (value) => wrap(codes.gray, value),
+        severity: (severity, value) => {
+            if (severity === "high")
+                return wrap(codes.red, value);
+            if (severity === "medium")
+                return wrap(codes.yellow, value);
+            if (severity === "info")
+                return wrap(codes.cyan, value);
+            return value;
+        },
+    };
+}
+//# sourceMappingURL=color.js.map

package/dist/utils/color.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"color.js","sourceRoot":"","sources":["../../src/utils/color.ts"],"names":[],"mappings":"AAEA,MAAM,KAAK,GAAG;IACZ,KAAK,EAAE,WAAW;IAClB,GAAG,EAAE,WAAW;IAChB,IAAI,EAAE,WAAW;IACjB,GAAG,EAAE,YAAY;IACjB,MAAM,EAAE,YAAY;IACpB,IAAI,EAAE,YAAY;IAClB,IAAI,EAAE,YAAY;CACnB,CAAC;AASF,MAAM,UAAU,eAAe,CAAC,OAAgB;IAC9C,MAAM,IAAI,GAAG,CAAC,IAAY,EAAE,KAAa,EAAE,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,IAAI,GAAG,KAAK,GAAG,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC;IAChG,OAAO;QACL,IAAI,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC;QACxC,GAAG,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,KAAK,CAAC;QACtC,IAAI,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC;QACxC,QAAQ,EAAE,CAAC,QAAQ,EAAE,KAAK,EAAE,EAAE;YAC5B,IAAI,QAAQ,KAAK,MAAM;gBAAE,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;YACvD,IAAI,QAAQ,KAAK,QAAQ;gBAAE,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;YAC5D,IAAI,QAAQ,KAAK,MAAM;gBAAE,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;YACxD,OAAO,KAAK,CAAC;QACf,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/utils/createIssue.d.ts

@@ -0,0 +1,13 @@
+import type { DebtIssue, Detector, IssueLocation, Severity } from "../core/types.js";
+export interface CreateIssueInput {
+    detector: Detector;
+    severity?: Severity;
+    confidence?: number;
+    message: string;
+    file: string;
+    location?: IssueLocation;
+    evidence?: string[];
+    suggestion?: string;
+    tags?: string[];
+}
+export declare function createIssue(input: CreateIssueInput): DebtIssue;

package/dist/utils/createIssue.js

@@ -0,0 +1,28 @@
+export function createIssue(input) {
+    const stable = `${input.detector.id}:${input.file}:${input.location?.startLine ?? 0}:${input.message}`;
+    return {
+        id: hashString(stable),
+        ruleId: input.detector.id,
+        ruleName: input.detector.name,
+        severity: input.severity ?? input.detector.defaultSeverity,
+        confidence: clamp(input.confidence ?? 0.75, 0, 1),
+        message: input.message,
+        file: input.file,
+        location: input.location,
+        evidence: input.evidence,
+        suggestion: input.suggestion,
+        tags: Array.from(new Set([...(input.detector.tags ?? []), ...(input.tags ?? [])])),
+    };
+}
+function clamp(value, min, max) {
+    return Math.max(min, Math.min(max, value));
+}
+function hashString(value) {
+    let hash = 2166136261;
+    for (let i = 0; i < value.length; i += 1) {
+        hash ^= value.charCodeAt(i);
+        hash += (hash << 1) + (hash << 4) + (hash << 7) + (hash << 8) + (hash << 24);
+    }
+    return `dl_${(hash >>> 0).toString(16)}`;
+}
+//# sourceMappingURL=createIssue.js.map

package/dist/utils/createIssue.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"createIssue.js","sourceRoot":"","sources":["../../src/utils/createIssue.ts"],"names":[],"mappings":"AAcA,MAAM,UAAU,WAAW,CAAC,KAAuB;IACjD,MAAM,MAAM,GAAG,GAAG,KAAK,CAAC,QAAQ,CAAC,EAAE,IAAI,KAAK,CAAC,IAAI,IAAI,KAAK,CAAC,QAAQ,EAAE,SAAS,IAAI,CAAC,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC;IAEvG,OAAO;QACL,EAAE,EAAE,UAAU,CAAC,MAAM,CAAC;QACtB,MAAM,EAAE,KAAK,CAAC,QAAQ,CAAC,EAAE;QACzB,QAAQ,EAAE,KAAK,CAAC,QAAQ,CAAC,IAAI;QAC7B,QAAQ,EAAE,KAAK,CAAC,QAAQ,IAAI,KAAK,CAAC,QAAQ,CAAC,eAAe;QAC1D,UAAU,EAAE,KAAK,CAAC,KAAK,CAAC,UAAU,IAAI,IAAI,EAAE,CAAC,EAAE,CAAC,CAAC;QACjD,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,QAAQ,EAAE,KAAK,CAAC,QAAQ;QACxB,QAAQ,EAAE,KAAK,CAAC,QAAQ;QACxB,UAAU,EAAE,KAAK,CAAC,UAAU;QAC5B,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,IAAI,EAAE,CAAC,EAAE,GAAG,CAAC,KAAK,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;KACnF,CAAC;AACJ,CAAC;AAED,SAAS,KAAK,CAAC,KAAa,EAAE,GAAW,EAAE,GAAW;IACpD,OAAO,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC,CAAC;AAC7C,CAAC;AAED,SAAS,UAAU,CAAC,KAAa;IAC/B,IAAI,IAAI,GAAG,UAAU,CAAC;IACtB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;QACzC,IAAI,IAAI,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;QAC5B,IAAI,IAAI,CAAC,IAAI,IAAI,CAAC,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;IAC/E,CAAC;IACD,OAAO,MAAM,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,EAAE,CAAC;AAC3C,CAAC"}

package/dist/utils/git.d.ts

@@ -0,0 +1,15 @@
+export declare function isGitRepo(cwd: string): boolean;
+export interface ChangedFiles {
+    root: string;
+    files: string[];
+}
+/**
+ * Collect changed files as absolute paths. Returns `null` when `cwd` is not inside a
+ * git work tree, so the caller can degrade gracefully.
+ *
+ * - With `base`, includes the committed diff `base...HEAD` (merge-base — the PR's own
+ *   changes). An unknown `base` throws a clear error.
+ * - Always unions in uncommitted working-tree changes vs HEAD and untracked files.
+ * - Deletions are excluded (`--diff-filter=d`) since deleted files cannot be scanned.
+ */
+export declare function getChangedFiles(cwd: string, base?: string): ChangedFiles | null;