eslint-plugin-ai-guard 1.1.13 → 1.2.0

package/dist/cli/index.js

@@ -341,8 +341,8 @@ var init_config_manager = __esm({
 
 // cli/index.ts
 var import_commander = require("commander");
-var import_fs7 = __toESM(require("fs"));
-var import_path10 = __toESM(require("path"));
+var import_fs8 = __toESM(require("fs"));
+var import_path11 = __toESM(require("path"));
 
 // cli/commands/run.ts
 var import_ora = __toESM(require("ora"));
@@ -355,13 +355,80 @@ var import_url = require("url");
 
 // cli/utils/logger.ts
 var import_chalk = __toESM(require("chalk"));
+var CATEGORY_ICONS = {
+  Security: "\u{1F534}",
+  Reliability: "\u{1F7E0}",
+  "Async Stability": "\u{1F7E1}",
+  "AI Patterns": "\u{1F535}"
+};
+var CATEGORY_ORDER = ["Security", "Reliability", "Async Stability", "AI Patterns"];
+var RULE_CATEGORY = {
+  "ai-guard/no-empty-catch": "Reliability",
+  "ai-guard/no-broad-exception": "Reliability",
+  "ai-guard/no-catch-log-rethrow": "Reliability",
+  "ai-guard/no-catch-without-use": "Reliability",
+  "ai-guard/no-floating-promise": "Async Stability",
+  "ai-guard/no-await-in-loop": "Async Stability",
+  "ai-guard/no-async-array-callback": "Async Stability",
+  "ai-guard/no-async-without-await": "Async Stability",
+  "ai-guard/no-redundant-await": "Async Stability",
+  "ai-guard/no-hardcoded-secret": "Security",
+  "ai-guard/no-eval-dynamic": "Security",
+  "ai-guard/no-sql-string-concat": "Security",
+  "ai-guard/no-unsafe-deserialize": "Security",
+  "ai-guard/require-auth-middleware": "Security",
+  "ai-guard/require-authz-check": "Security",
+  "ai-guard/no-console-in-handler": "AI Patterns",
+  "ai-guard/no-duplicate-logic-block": "AI Patterns",
+  "ai-guard/no-dead-branch": "AI Patterns"
+};
+var CONFIDENCE_TIER = {
+  // High confidence — near-zero false positive rate
+  "ai-guard/no-hardcoded-secret": "high",
+  "ai-guard/no-eval-dynamic": "high",
+  "ai-guard/no-floating-promise": "high",
+  "ai-guard/no-empty-catch": "high",
+  // Medium confidence — context matters, usually valid
+  "ai-guard/no-sql-string-concat": "medium",
+  "ai-guard/no-await-in-loop": "medium",
+  "ai-guard/require-auth-middleware": "medium",
+  "ai-guard/require-authz-check": "medium",
+  "ai-guard/no-catch-log-rethrow": "medium",
+  "ai-guard/no-catch-without-use": "medium",
+  "ai-guard/no-unsafe-deserialize": "medium",
+  // Low confidence — suggestions, may be intentional
+  "ai-guard/no-async-without-await": "low",
+  "ai-guard/no-async-array-callback": "low",
+  "ai-guard/no-dead-branch": "low",
+  "ai-guard/no-broad-exception": "low",
+  "ai-guard/no-console-in-handler": "low",
+  "ai-guard/no-duplicate-logic-block": "low",
+  "ai-guard/no-redundant-await": "low"
+};
+var ECOSYSTEM_FIX_HINTS = {
+  "react-hooks/exhaustive-deps": "npm install --save-dev eslint-plugin-react-hooks",
+  "react-hooks/rules-of-hooks": "npm install --save-dev eslint-plugin-react-hooks",
+  "@typescript-eslint/": "npm install --save-dev @typescript-eslint/eslint-plugin @typescript-eslint/parser",
+  "import/": "npm install --save-dev eslint-plugin-import",
+  "jsx-a11y/": "npm install --save-dev eslint-plugin-jsx-a11y",
+  "prettier/": "npm install --save-dev eslint-plugin-prettier"
+};
+function getEcosystemFix(ruleId) {
+  if (!ruleId) return null;
+  for (const [prefix, fix] of Object.entries(ECOSYSTEM_FIX_HINTS)) {
+    if (ruleId.startsWith(prefix)) return fix;
+  }
+  return null;
+}
 var PREFIX = {
   success: import_chalk.default.green("\u2714"),
   error: import_chalk.default.red("\u2716"),
   warn: import_chalk.default.yellow("\u26A0"),
   info: import_chalk.default.cyan("\u2139"),
   section: import_chalk.default.bold.white,
-  bullet: import_chalk.default.gray("\u2022")
+  bullet: import_chalk.default.gray("\u2022"),
+  ecosystem: import_chalk.default.yellow("\u26A0"),
+  parser: import_chalk.default.magenta("\u26A1")
 };
 var log = {
   info(msg) {
@@ -381,6 +448,14 @@ var log = {
     console.log(import_chalk.default.bold.cyan(`  \u2500\u2500 ${title} \u2500\u2500`));
     console.log("");
   },
+  /**
+   * Ecosystem section — distinct styling to communicate it's NOT ai-guard output
+   */
+  ecosystemSection(title) {
+    console.log("");
+    console.log(import_chalk.default.bold.yellow(`  \u2500\u2500 ${title} \u2500\u2500`) + import_chalk.default.dim(" (not ai-guard findings)"));
+    console.log("");
+  },
   rule(ruleName, count) {
     console.log(
       `    ${PREFIX.bullet} ${import_chalk.default.yellow(ruleName)} ${import_chalk.default.gray(`(${count} issue${count !== 1 ? "s" : ""})`)}`
@@ -397,6 +472,53 @@ var log = {
       `      ${import_chalk.default.gray(`${line}:${col}`).padEnd(12)} ${icon}  ${import_chalk.default.white(msg)}`
     );
   },
+  /**
+   * Print an ESLint ecosystem issue (missing rule definition, foreign plugin rule, etc.)
+   * with a clear disclaimer that this is NOT an ai-guard finding.
+   */
+  ecosystemIssue(issue, count = 1) {
+    const ruleLabel = issue.ruleId ? import_chalk.default.yellow(issue.ruleId) : import_chalk.default.gray("(no rule id)");
+    const typeLabel = issue.type === "missing-rule" ? import_chalk.default.dim("[missing rule definition]") : issue.type === "config-error" ? import_chalk.default.dim("[config error]") : import_chalk.default.dim("[foreign rule]");
+    const countLabel = count > 1 ? import_chalk.default.gray(` \xD7 ${count}`) : "";
+    console.log(`  ${PREFIX.ecosystem}  ${ruleLabel} ${typeLabel}${countLabel}`);
+    console.log(`       ${import_chalk.default.gray("File:")} ${import_chalk.default.dim(issue.filePath)}${issue.line > 0 ? import_chalk.default.dim(`:${issue.line}`) : ""}`);
+    console.log(`       ${import_chalk.default.gray("Msg:")}  ${import_chalk.default.dim(issue.message.slice(0, 120))}`);
+    const fix = getEcosystemFix(issue.ruleId);
+    if (fix) {
+      console.log(`       ${import_chalk.default.cyan("\u2192 Fix:")} ${import_chalk.default.yellow(fix)}`);
+    }
+    console.log(
+      import_chalk.default.dim(`       Note: This comes from your ESLint config, not from ai-guard.`)
+    );
+    console.log("");
+  },
+  /**
+   * Print a parser/syntax error — clearly NOT an ai-guard finding.
+   */
+  parserError(pe) {
+    console.log(`  ${PREFIX.parser}  ${import_chalk.default.magenta("Parse failure")}  ${import_chalk.default.dim(pe.filePath)}${pe.line > 0 ? import_chalk.default.dim(`:${pe.line}`) : ""}`);
+    console.log(`       ${import_chalk.default.dim(pe.message.slice(0, 120))}`);
+    console.log("");
+  },
+  /**
+   * Print a category summary line with icon, label, and count.
+   */
+  category(icon, label, errors, warnings) {
+    const parts = [];
+    if (errors > 0) parts.push(import_chalk.default.red(`${errors} error${errors !== 1 ? "s" : ""}`));
+    if (warnings > 0) parts.push(import_chalk.default.yellow(`${warnings} warning${warnings !== 1 ? "s" : ""}`));
+    const counts = parts.length > 0 ? parts.join(import_chalk.default.gray(" \xB7 ")) : import_chalk.default.gray("0");
+    const labelPadded = label.padEnd(18);
+    console.log(`  ${icon}  ${import_chalk.default.bold.white(labelPadded)} ${counts}`);
+  },
+  /**
+   * Print the scan stats line.
+   */
+  scanStats(filesScanned, filesWithIssues, durationMs, preset) {
+    console.log(
+      `  ${import_chalk.default.gray("Files scanned:")}  ${import_chalk.default.white(String(filesScanned))}  ${import_chalk.default.gray("\xB7")}  ${import_chalk.default.gray("Issues in:")}  ${import_chalk.default.white(String(filesWithIssues))} file${filesWithIssues !== 1 ? "s" : ""}  ${import_chalk.default.gray("\xB7")}  ${import_chalk.default.gray("Duration:")}  ${import_chalk.default.white(durationMs + "ms")}  ${import_chalk.default.gray("\xB7")}  ${import_chalk.default.gray("Preset:")}  ${import_chalk.default.cyan(preset)}`
+    );
+  },
   divider() {
     console.log(import_chalk.default.gray("  " + "\u2500".repeat(60)));
   },
@@ -434,37 +556,47 @@ function normalizePlugin(raw) {
   );
 }
 var RECOMMENDED_RULES = {
+  // Reliability
   "ai-guard/no-empty-catch": "error",
-  "ai-guard/no-floating-promise": "error",
-  "ai-guard/no-hardcoded-secret": "error",
-  "ai-guard/no-eval-dynamic": "error",
   "ai-guard/no-broad-exception": "warn",
-  "ai-guard/require-auth-middleware": "warn",
+  // Async
+  "ai-guard/no-floating-promise": "error",
   "ai-guard/no-await-in-loop": "warn",
   "ai-guard/no-async-without-await": "warn",
-  "ai-guard/no-sql-string-concat": "warn",
   "ai-guard/no-async-array-callback": "warn",
+  // Security
+  "ai-guard/no-hardcoded-secret": "error",
+  "ai-guard/no-eval-dynamic": "error",
+  "ai-guard/no-sql-string-concat": "warn",
   "ai-guard/no-unsafe-deserialize": "warn",
-  "ai-guard/require-authz-check": "warn"
+  "ai-guard/require-auth-middleware": "warn",
+  "ai-guard/require-authz-check": "warn",
+  // AI Patterns
+  "ai-guard/no-dead-branch": "warn"
 };
 var STRICT_RULES = {
+  // Reliability
   "ai-guard/no-empty-catch": "error",
   "ai-guard/no-broad-exception": "error",
   "ai-guard/no-catch-log-rethrow": "error",
   "ai-guard/no-catch-without-use": "error",
+  // Async
   "ai-guard/no-async-array-callback": "error",
   "ai-guard/no-floating-promise": "error",
   "ai-guard/no-await-in-loop": "error",
   "ai-guard/no-async-without-await": "error",
   "ai-guard/no-redundant-await": "error",
+  // Security
   "ai-guard/no-hardcoded-secret": "error",
   "ai-guard/no-eval-dynamic": "error",
   "ai-guard/no-sql-string-concat": "error",
   "ai-guard/no-unsafe-deserialize": "error",
   "ai-guard/require-auth-middleware": "error",
   "ai-guard/require-authz-check": "error",
+  // AI Patterns
   "ai-guard/no-console-in-handler": "error",
-  "ai-guard/no-duplicate-logic-block": "error"
+  "ai-guard/no-duplicate-logic-block": "error",
+  "ai-guard/no-dead-branch": "error"
 };
 var SECURITY_RULES = {
   "ai-guard/no-hardcoded-secret": "error",
@@ -490,9 +622,27 @@ var DEFAULT_IGNORE_PATTERNS = [
 ];
 function isSkippablePatternError(error) {
   const msg = error.message.toLowerCase();
-  const hasNoFilesSignal = msg.includes("no files") || msg.includes("no files matching");
-  const hasIgnoredSignal = msg.includes("ignored") || msg.includes("all files matched by") || msg.includes("are ignored") || msg.includes("was ignored") || msg.includes("file ignored");
-  return hasNoFilesSignal || hasIgnoredSignal;
+  return msg.includes("no files") || msg.includes("no files matching") || msg.includes("ignored") || msg.includes("all files matched by") || msg.includes("are ignored") || msg.includes("was ignored") || msg.includes("file ignored");
+}
+function classifyMessage(msg) {
+  if (msg.fatal === true) return "parser-error";
+  if (msg.ruleId === null && (msg.message.startsWith("Parsing error") || msg.message.includes("Unexpected token") || msg.message.includes("SyntaxError"))) {
+    return "parser-error";
+  }
+  if (msg.ruleId && msg.ruleId.startsWith("ai-guard/")) {
+    return "ai-guard";
+  }
+  return "ecosystem";
+}
+function classifyEcosystemType(msg) {
+  const lower = msg.message.toLowerCase();
+  if (lower.includes("definition for rule") && lower.includes("was not found")) {
+    return "missing-rule";
+  }
+  if (lower.includes("configuration") || lower.includes("config")) {
+    return "config-error";
+  }
+  return "foreign-rule";
 }
 async function loadPluginModuleFromCwd(cwd) {
   const { createRequire: createRequire2 } = await import("module");
@@ -520,13 +670,22 @@ async function loadPluginModuleFromCwd(cwd) {
   );
 }
 async function runEslint(options) {
+  const overallStart = Date.now();
+  const timing = {
+    pluginLoadMs: 0,
+    parserLoadMs: 0,
+    lintMs: 0,
+    processMs: 0
+  };
   const { ESLint } = await import("eslint").catch(() => {
     throw new Error(
       "ESLint is not installed. Run: npm install --save-dev eslint"
     );
   });
+  const pluginStart = Date.now();
   const rawPlugin = await loadPluginModuleFromCwd(process.cwd());
   const plugin = normalizePlugin(rawPlugin);
+  timing.pluginLoadMs = Date.now() - pluginStart;
   const rules = getRules(options.preset);
   const resolvedTargetPath = import_path.default.resolve(options.targetPath);
   if (!import_fs.default.existsSync(resolvedTargetPath)) {
@@ -535,18 +694,9 @@ async function runEslint(options) {
   const targetStat = import_fs.default.statSync(resolvedTargetPath);
   const isSingleFileTarget = targetStat.isFile();
   const eslintCwd = isSingleFileTarget ? import_path.default.dirname(resolvedTargetPath) : resolvedTargetPath;
-  const startMs = Date.now();
-  const JS_TS_FILES = [
-    "**/*.js",
-    "**/*.jsx",
-    "**/*.ts",
-    "**/*.tsx",
-    "**/*.mts",
-    "**/*.cts",
-    "**/*.mjs",
-    "**/*.cjs"
-  ];
+  const parserStart = Date.now();
   let tsParser = null;
+  let tsParserAvailable = false;
   try {
     try {
       tsParser = require(import_path.default.join(
@@ -558,10 +708,23 @@ async function runEslint(options) {
     } catch {
       tsParser = require("@typescript-eslint/parser");
     }
+    tsParserAvailable = true;
   } catch {
+    log.debug("@typescript-eslint/parser not found \u2014 TypeScript files will use espree fallback");
   }
+  timing.parserLoadMs = Date.now() - parserStart;
+  const JS_TS_FILES = [
+    "**/*.js",
+    "**/*.jsx",
+    "**/*.ts",
+    "**/*.tsx",
+    "**/*.mts",
+    "**/*.cts",
+    "**/*.mjs",
+    "**/*.cjs"
+  ];
   const configBlocks = [
-    // JS/JSX files — default espree parser
+    // JS/JSX files — default espree parser with JSX support
     {
       files: ["**/*.js", "**/*.jsx", "**/*.mjs", "**/*.cjs"],
       plugins: { "ai-guard": plugin },
@@ -584,9 +747,9 @@ async function runEslint(options) {
       languageOptions: {
         parser: tsParser,
         parserOptions: {
-          // project: true would be needed for type-aware rules — skip for speed
           ecmaVersion: "latest",
-          sourceType: "module"
+          sourceType: "module",
+          ecmaFeatures: { jsx: true }
         }
       },
       rules
@@ -595,6 +758,13 @@ async function runEslint(options) {
     configBlocks.splice(1, 0, {
       files: ["**/*.ts", "**/*.tsx", "**/*.mts", "**/*.cts"],
       plugins: { "ai-guard": plugin },
+      languageOptions: {
+        parserOptions: {
+          ecmaVersion: "latest",
+          sourceType: "module",
+          ecmaFeatures: { jsx: true }
+        }
+      },
       rules
     });
   }
@@ -604,67 +774,130 @@ async function runEslint(options) {
     overrideConfig: configBlocks
   });
   const patterns = isSingleFileTarget ? [import_path.default.basename(resolvedTargetPath)] : JS_TS_FILES;
-  const perPatternResults = await Promise.all(
-    patterns.map(async (pattern) => {
-      try {
-        return await eslint.lintFiles([pattern]);
-      } catch (err) {
-        const error = err instanceof Error ? err : new Error(String(err));
-        if (isSkippablePatternError(error)) {
-          log.debug(`Skipping pattern '${pattern}' (no lintable files)`);
-          return [];
-        }
-        throw error;
-      }
-    })
-  );
-  const rawResults = perPatternResults.flat();
-  const durationMs = Date.now() - startMs;
+  const lintStart = Date.now();
+  let rawResults;
+  try {
+    rawResults = await eslint.lintFiles(patterns);
+  } catch (err) {
+    const error = err instanceof Error ? err : new Error(String(err));
+    if (isSkippablePatternError(error)) {
+      log.debug("Single-call lintFiles failed with no-files, falling back to per-pattern");
+      const perPatternResults = await Promise.all(
+        patterns.map(async (pattern) => {
+          try {
+            return await eslint.lintFiles([pattern]);
+          } catch (patternErr) {
+            const patternError = patternErr instanceof Error ? patternErr : new Error(String(patternErr));
+            if (isSkippablePatternError(patternError)) {
+              log.debug(`Skipping pattern '${pattern}' (no lintable files)`);
+              return [];
+            }
+            throw patternError;
+          }
+        })
+      );
+      rawResults = perPatternResults.flat();
+    } else {
+      throw error;
+    }
+  }
+  timing.lintMs = Date.now() - lintStart;
+  const processStart = Date.now();
   const files = [];
+  const ecosystemIssues = [];
+  const parserErrors = [];
   const ruleBreakdown = /* @__PURE__ */ new Map();
   let totalErrors = 0;
   let totalWarnings = 0;
+  const filesScanned = rawResults.length;
   for (const result of rawResults) {
     if (result.messages.length === 0) continue;
-    const issues = result.messages.map((m) => ({
-      ruleId: m.ruleId ?? "unknown",
-      severity: m.severity,
-      message: m.message,
-      line: m.line,
-      column: m.column
-    }));
-    const errorCount = result.errorCount;
-    const warningCount = result.warningCount;
-    totalErrors += errorCount;
-    totalWarnings += warningCount;
-    for (const issue of issues) {
+    const relPath = import_path.default.relative(process.cwd(), result.filePath);
+    const aiGuardIssues = [];
+    let fileErrors = 0;
+    let fileWarnings = 0;
+    for (const m of result.messages) {
+      const source = classifyMessage(m);
+      if (source === "parser-error") {
+        parserErrors.push({
+          filePath: relPath,
+          message: m.message,
+          line: m.line ?? 0
+        });
+        continue;
+      }
+      if (source === "ecosystem") {
+        ecosystemIssues.push({
+          type: classifyEcosystemType(m),
+          ruleId: m.ruleId,
+          message: m.message,
+          filePath: relPath,
+          line: m.line ?? 0,
+          column: m.column ?? 0
+        });
+        continue;
+      }
+      const issue = {
+        ruleId: m.ruleId ?? "unknown",
+        severity: m.severity,
+        message: m.message,
+        line: m.line,
+        column: m.column
+      };
+      aiGuardIssues.push(issue);
+      if (m.severity === 2) {
+        fileErrors++;
+        totalErrors++;
+      } else {
+        fileWarnings++;
+        totalWarnings++;
+      }
       ruleBreakdown.set(
         issue.ruleId,
         (ruleBreakdown.get(issue.ruleId) ?? 0) + 1
       );
     }
-    const relPath = import_path.default.relative(process.cwd(), result.filePath);
-    files.push({ filePath: relPath, issues, errorCount, warningCount });
+    if (aiGuardIssues.length > 0) {
+      files.push({
+        filePath: relPath,
+        issues: aiGuardIssues,
+        errorCount: fileErrors,
+        warningCount: fileWarnings
+      });
+    }
   }
   const topFiles = [...files].sort((a, b) => b.issues.length - a.issues.length).slice(0, 10).map((f) => ({ path: f.filePath, count: f.issues.length }));
+  timing.processMs = Date.now() - processStart;
+  if (options.debugTiming) {
+    log.debug(`Plugin load: ${timing.pluginLoadMs}ms`);
+    log.debug(`Parser load: ${timing.parserLoadMs}ms`);
+    log.debug(`Lint: ${timing.lintMs}ms`);
+    log.debug(`Process: ${timing.processMs}ms`);
+    log.debug(`Total: ${Date.now() - overallStart}ms`);
+  }
   return {
     files,
     totalErrors,
     totalWarnings,
     totalIssues: totalErrors + totalWarnings,
+    filesScanned,
     ruleBreakdown,
     topFiles,
-    durationMs
+    durationMs: Date.now() - overallStart,
+    timing,
+    ecosystemIssues,
+    parserErrors,
+    tsParserAvailable
   };
 }
 
 // cli/commands/run.ts
 function registerRunCommand(program2) {
-  program2.command("run").description("Run ai-guard rules on your project (zero ESLint config required)").option("--path <dir>", "Directory or file to scan", ".").option("--strict", "Use the strict rule preset (all rules at error)").option("--security", "Use the security-only rule preset").option("--json", "Output results as JSON").option(
+  program2.command("run").description("Run ai-guard rules on your project (zero ESLint config required)").option("--path <dir>", "Directory or file to scan", ".").option("--strict", "Use the strict rule preset (all rules at error)").option("--security", "Use the security-only rule preset").option("--json", "Output results as JSON (CI-friendly)").option(
     "--max-warnings <n>",
-    "Fail if warnings exceed this count",
+    "Fail with exit code 1 if warnings exceed this count",
     (value) => Number.parseInt(value, 10)
-  ).action(async (opts) => {
+  ).option("--verbose", "Show all issues \u2014 disable grouping of repeated warnings").option("--debug-timing", "Print per-phase timing diagnostics").action(async (opts) => {
     if (opts.maxWarnings !== void 0 && (!Number.isInteger(opts.maxWarnings) || opts.maxWarnings < 0)) {
       log.blank();
       log.error("--max-warnings must be a non-negative integer.");
@@ -678,13 +911,17 @@ function registerRunCommand(program2) {
       log.blank();
     }
     if (!opts.json) {
-      log.banner("AI GUARD RESULTS");
+      log.banner("AI GUARD");
       log.blank();
     }
     const spinner = opts.json ? null : (0, import_ora.default)({ text: "Scanning\u2026", color: "cyan" }).start();
     let result;
     try {
-      result = await runEslint({ preset, targetPath: opts.path });
+      result = await runEslint({
+        preset,
+        targetPath: opts.path,
+        debugTiming: opts.debugTiming
+      });
       spinner?.stop();
     } catch (err) {
       spinner?.stop();
@@ -711,69 +948,149 @@ function registerRunCommand(program2) {
       const jsonOutput = {
         preset,
         scannedPath: opts.path,
+        filesScanned: result.filesScanned,
         totalErrors: result.totalErrors,
         totalWarnings: result.totalWarnings,
         totalIssues: result.totalIssues,
         durationMs: result.durationMs,
+        timing: result.timing,
         ruleBreakdown: Object.fromEntries(result.ruleBreakdown),
         topFiles: result.topFiles,
-        files: result.files
+        files: result.files,
+        ecosystemIssues: result.ecosystemIssues,
+        parserErrors: result.parserErrors,
+        tsParserAvailable: result.tsParserAvailable
       };
       console.log(JSON.stringify(jsonOutput, null, 2));
       process.exit(getRunExitCode(result, opts.maxWarnings));
       return;
     }
-    log.success(`Scanned:  ${import_chalk2.default.white(opts.path)}`);
-    log.success(`Duration: ${import_chalk2.default.white(result.durationMs + "ms")}`);
+    log.scanStats(result.filesScanned, result.files.length, result.durationMs, preset);
+    if (!result.tsParserAvailable) {
+      log.print(
+        import_chalk2.default.dim(`  \u2139  TypeScript parser not found \u2014 .ts/.tsx files use espree fallback`) + import_chalk2.default.dim(`  (install @typescript-eslint/parser for full TS support)`)
+      );
+    }
     log.blank();
-    if (result.totalIssues === 0) {
+    if (result.totalIssues === 0 && result.ecosystemIssues.length === 0 && result.parserErrors.length === 0) {
       log.print(
-        `  ${import_chalk2.default.green("\u2714")}  ${import_chalk2.default.bold.green("No AI issues found \u2014 your code looks clean")}`
+        `  ${import_chalk2.default.green("\u2714")}  ${import_chalk2.default.bold.green("No AI issues found")}  ${import_chalk2.default.gray(`\u2014 ${result.filesScanned} file${result.filesScanned !== 1 ? "s" : ""} scanned, all clean`)}`
       );
       log.blank();
       process.exit(0);
       return;
     }
-    log.print(
-      `  ${import_chalk2.default.bold("Total Issues:")} ${formatIssueCount(result.totalErrors, result.totalWarnings)}`
-    );
-    log.blank();
-    if (result.ruleBreakdown.size > 0) {
-      log.section("By Rule");
-      const sorted = [...result.ruleBreakdown.entries()].sort(
-        (a, b) => b[1] - a[1]
+    if (result.totalIssues === 0) {
+      log.print(
+        `  ${import_chalk2.default.green("\u2714")}  ${import_chalk2.default.bold.green("No AI issues found")}  ${import_chalk2.default.gray(`\u2014 ${result.filesScanned} file${result.filesScanned !== 1 ? "s" : ""} scanned, all clean`)}`
       );
-      for (const [rule, count] of sorted) {
-        const shortRule = rule.replace(/^ai-guard\//, "");
-        log.print(
-          `    ${import_chalk2.default.gray("\u2022")} ${import_chalk2.default.yellow(shortRule)}${import_chalk2.default.gray(":")} ${import_chalk2.default.white(String(count))}`
+      log.blank();
+    }
+    if (result.totalIssues > 0) {
+      log.section("Summary by Category");
+      const categoryErrors = {};
+      const categoryWarnings = {};
+      for (const file of result.files) {
+        for (const issue of file.issues) {
+          const cat = RULE_CATEGORY[issue.ruleId] ?? "Other";
+          if (issue.severity === 2) {
+            categoryErrors[cat] = (categoryErrors[cat] ?? 0) + 1;
+          } else {
+            categoryWarnings[cat] = (categoryWarnings[cat] ?? 0) + 1;
+          }
+        }
+      }
+      const allCategories = /* @__PURE__ */ new Set([
+        ...CATEGORY_ORDER,
+        ...Object.keys(categoryErrors),
+        ...Object.keys(categoryWarnings)
+      ]);
+      const sortedCategories = [...allCategories].filter(
+        (cat) => (categoryErrors[cat] ?? 0) + (categoryWarnings[cat] ?? 0) > 0
+      );
+      sortedCategories.sort((a, b) => {
+        const ai = CATEGORY_ORDER.indexOf(a);
+        const bi = CATEGORY_ORDER.indexOf(b);
+        if (ai !== -1 && bi !== -1) return ai - bi;
+        if (ai !== -1) return -1;
+        if (bi !== -1) return 1;
+        return a.localeCompare(b);
+      });
+      for (const cat of sortedCategories) {
+        const icon = CATEGORY_ICONS[cat] ?? "\u26AA";
+        log.category(icon, cat, categoryErrors[cat] ?? 0, categoryWarnings[cat] ?? 0);
+      }
+      log.blank();
+      log.print(
+        `  ${import_chalk2.default.bold("Total:")} ${formatIssueCount(result.totalErrors, result.totalWarnings)}`
+      );
+      log.blank();
+      if (result.ruleBreakdown.size > 0) {
+        log.section("By Rule");
+        const sorted = [...result.ruleBreakdown.entries()].sort(
+          (a, b) => b[1] - a[1]
         );
+        for (const [rule, count] of sorted) {
+          const shortRule = rule.replace(/^ai-guard\//, "");
+          const tier = CONFIDENCE_TIER[rule];
+          const tierLabel = tier === "high" ? import_chalk2.default.red.dim("[high]") : tier === "medium" ? import_chalk2.default.yellow.dim("[medium]") : import_chalk2.default.gray.dim("[low]");
+          log.print(
+            `    ${import_chalk2.default.gray("\u2022")} ${import_chalk2.default.yellow(shortRule)} ${tierLabel}${import_chalk2.default.gray(":")} ${import_chalk2.default.white(String(count))}`
+          );
+        }
+        log.blank();
+      }
+      if (result.topFiles.length > 0) {
+        log.section("Top Files");
+        for (const { path: fp, count } of result.topFiles) {
+          log.print(
+            `    ${import_chalk2.default.gray("\u2022")} ${import_chalk2.default.white(fp)} ${import_chalk2.default.gray(`(${count})`)}`
+          );
+        }
+        log.blank();
       }
+      log.section("Issues by File");
       log.blank();
+      const verbose = opts.verbose ?? false;
+      renderIssuesByFile(result, verbose);
     }
-    if (result.topFiles.length > 0) {
-      log.section("Top Files");
-      for (const { path: fp, count } of result.topFiles) {
-        log.print(
-          `    ${import_chalk2.default.gray("\u2022")} ${import_chalk2.default.white(fp)} ${import_chalk2.default.gray(`(${count})`)}`
-        );
+    if (result.ecosystemIssues.length > 0) {
+      log.ecosystemSection("ESLint Config Issues");
+      log.print(
+        import_chalk2.default.dim(`  These issues come from your project's ESLint config, not from ai-guard.`)
+      );
+      log.blank();
+      const seen = /* @__PURE__ */ new Map();
+      for (const issue of result.ecosystemIssues) {
+        const key = `${issue.ruleId ?? "null"}::${issue.message}`;
+        const existing = seen.get(key);
+        if (existing) {
+          existing.count++;
+        } else {
+          seen.set(key, { issue, count: 1 });
+        }
+      }
+      for (const { issue, count } of seen.values()) {
+        log.ecosystemIssue(issue, count);
       }
       log.blank();
     }
-    log.section("Issues by File");
-    log.blank();
-    for (const file of result.files) {
+    if (result.parserErrors.length > 0) {
+      log.ecosystemSection("Parser Errors");
       log.print(
-        `  ${import_chalk2.default.bold.white(file.filePath)} ` + import_chalk2.default.gray(
-          `(${file.errorCount} error${file.errorCount !== 1 ? "s" : ""}, ${file.warningCount} warning${file.warningCount !== 1 ? "s" : ""})`
-        )
+        import_chalk2.default.dim(`  These files could not be parsed \u2014 not ai-guard findings.`)
       );
-      for (const issue of file.issues) {
-        const sev = issue.severity === 2 ? import_chalk2.default.red("error") : import_chalk2.default.yellow(" warn");
-        const loc = import_chalk2.default.gray(`${String(issue.line)}:${String(issue.column)}`).padEnd(12);
-        const ruleShort = import_chalk2.default.gray(issue.ruleId.replace(/^ai-guard\//, ""));
+      log.blank();
+      for (const pe of result.parserErrors) {
+        log.parserError(pe);
+      }
+      if (!result.tsParserAvailable) {
+        log.blank();
         log.print(
-          `    ${loc} ${sev}  ${import_chalk2.default.white(issue.message)}  ${ruleShort}`
+          `  ${import_chalk2.default.cyan("\u2192 Fix:")} ${import_chalk2.default.yellow("npm install --save-dev @typescript-eslint/parser")}`
+        );
+        log.print(
+          import_chalk2.default.dim(`  TypeScript parser resolves most .ts/.tsx parse failures.`)
         );
       }
       log.blank();
@@ -781,15 +1098,83 @@ function registerRunCommand(program2) {
     log.divider();
     log.blank();
     log.section("Next Steps");
-    if (!result.topFiles.length) {
-      log.info(`Run ${import_chalk2.default.cyan("ai-guard init")}     to wire up ESLint for your editor`);
+    if (result.totalIssues > 0) {
+      log.info(`Run ${import_chalk2.default.cyan("ai-guard baseline")} to save these issues and track only new ones`);
+      log.info(`Run ${import_chalk2.default.cyan("ai-guard report")}   to generate a shareable HTML report`);
+      log.info(`Run ${import_chalk2.default.cyan("ai-guard ignore")}   to suppress dist/build noise`);
+    }
+    if (result.ecosystemIssues.length > 0) {
+      log.info(`Run ${import_chalk2.default.cyan("ai-guard doctor")}   to diagnose ESLint config issues`);
+    }
+    if (!opts.verbose && hasGroupedWarnings(result)) {
+      log.info(`Run with ${import_chalk2.default.cyan("--verbose")} to expand grouped warnings`);
     }
-    log.info(`Run ${import_chalk2.default.cyan("ai-guard baseline")} to save these issues and track only new ones`);
-    log.info(`Run ${import_chalk2.default.cyan("ai-guard ignore")}    to suppress dist/build noise`);
     log.blank();
     process.exit(getRunExitCode(result, opts.maxWarnings));
   });
 }
+var GROUP_THRESHOLD = 4;
+function hasGroupedWarnings(result) {
+  for (const file of result.files) {
+    const ruleCounts = /* @__PURE__ */ new Map();
+    for (const issue of file.issues) {
+      ruleCounts.set(issue.ruleId, (ruleCounts.get(issue.ruleId) ?? 0) + 1);
+    }
+    for (const count of ruleCounts.values()) {
+      if (count >= GROUP_THRESHOLD) return true;
+    }
+  }
+  return false;
+}
+function renderIssuesByFile(result, verbose) {
+  for (const file of result.files) {
+    log.print(
+      `  ${import_chalk2.default.bold.white(file.filePath)} ` + import_chalk2.default.gray(
+        `(${file.errorCount} error${file.errorCount !== 1 ? "s" : ""}, ${file.warningCount} warning${file.warningCount !== 1 ? "s" : ""})`
+      )
+    );
+    if (!verbose) {
+      const ruleCounts = /* @__PURE__ */ new Map();
+      for (const issue of file.issues) {
+        const arr = ruleCounts.get(issue.ruleId) ?? [];
+        arr.push(issue);
+        ruleCounts.set(issue.ruleId, arr);
+      }
+      for (const issues of ruleCounts.values()) {
+        const tier = CONFIDENCE_TIER[issues[0].ruleId] ?? "low";
+        if (tier === "low" && issues.length >= GROUP_THRESHOLD) {
+          const sev = issues[0].severity === 2 ? import_chalk2.default.red("error") : import_chalk2.default.yellow(" warn");
+          const shortRule = import_chalk2.default.gray(issues[0].ruleId.replace(/^ai-guard\//, ""));
+          log.print(
+            `    ${sev}  ${import_chalk2.default.white(issues[0].message)}  ${shortRule}`
+          );
+          log.print(
+            import_chalk2.default.dim(`           \u21B3 ${issues.length} occurrences \u2014 run with --verbose to expand`)
+          );
+        } else {
+          for (const issue of issues) {
+            renderSingleIssue(issue);
+          }
+        }
+      }
+    } else {
+      for (const issue of file.issues) {
+        renderSingleIssue(issue);
+      }
+    }
+    log.blank();
+  }
+}
+function renderSingleIssue(issue) {
+  const sev = issue.severity === 2 ? import_chalk2.default.red("error") : import_chalk2.default.yellow(" warn");
+  const loc = import_chalk2.default.gray(`${String(issue.line)}:${String(issue.column)}`).padEnd(12);
+  const ruleShort = import_chalk2.default.gray(issue.ruleId.replace(/^ai-guard\//, ""));
+  const tier = CONFIDENCE_TIER[issue.ruleId];
+  const tierTag = tier === "high" ? "" : tier === "medium" ? "" : import_chalk2.default.dim(" [low]");
+  log.print(
+    `    ${loc} ${sev}  ${import_chalk2.default.white(issue.message)}${tierTag}  ${ruleShort}`
+  );
+}
 function getRunExitCode(result, maxWarnings) {
   if (result.totalErrors > 0) return 1;
   if (maxWarnings !== void 0 && result.totalWarnings > maxWarnings) return 1;
@@ -1224,6 +1609,7 @@ function registerInitCommand(program2) {
 var import_chalk4 = __toESM(require("chalk"));
 var import_path5 = __toESM(require("path"));
 init_config_manager();
+var import_meta = {};
 async function probeConfigLoad(configPath, cwd) {
   try {
     const { ESLint } = await import("eslint");
@@ -1334,6 +1720,73 @@ ${env.allConfigPaths.map((p) => `       ${import_path5.default.relative(cwd, p)}
         note: probe.ok ? void 0 : "Run: ai-guard init --dry-run  to preview a fresh config"
       });
     }
+    {
+      let utilsOk = false;
+      let utilsVersion = null;
+      try {
+        const { createRequire: createRequire2 } = await import("module");
+        const req = createRequire2(import_path5.default.join(cwd, "package.json"));
+        const pkgPath = req.resolve("@typescript-eslint/utils/package.json");
+        const pkg = JSON.parse(
+          (await import("fs")).readFileSync(pkgPath, "utf-8")
+        );
+        utilsVersion = pkg.version ?? null;
+        utilsOk = true;
+      } catch {
+      }
+      if (!utilsOk) {
+        try {
+          const selfDir = import_path5.default.dirname(
+            new URL(import_meta.url).pathname.replace(/^\/([A-Za-z]:)/, "$1")
+          );
+          const pkgPath = import_path5.default.join(selfDir, "../../node_modules/@typescript-eslint/utils/package.json");
+          if ((await import("fs")).existsSync(pkgPath)) {
+            utilsOk = true;
+          }
+        } catch {
+        }
+      }
+      checks.push({
+        label: "@typescript-eslint/utils available at runtime",
+        pass: utilsOk,
+        detail: utilsOk ? `Found${utilsVersion ? ` v${utilsVersion}` : ""}` : "Not found \u2014 rule engine may crash on fresh installs",
+        fix: utilsOk ? void 0 : "npm install @typescript-eslint/utils",
+        note: utilsOk ? void 0 : "This is a runtime dependency of eslint-plugin-ai-guard rules."
+      });
+    }
+    {
+      let parserOk = false;
+      let parserVersion = null;
+      try {
+        const { createRequire: createRequire2 } = await import("module");
+        const req = createRequire2(import_path5.default.join(cwd, "package.json"));
+        const pkgPath = req.resolve("@typescript-eslint/parser/package.json");
+        const pkg = JSON.parse(
+          (await import("fs")).readFileSync(pkgPath, "utf-8")
+        );
+        parserVersion = pkg.version ?? null;
+        parserOk = true;
+      } catch {
+      }
+      const hasTsFiles = (() => {
+        try {
+          const { readdirSync } = require("fs");
+          const files = readdirSync(cwd);
+          return files.some((f) => f.endsWith(".ts") || f.endsWith(".tsx"));
+        } catch {
+          return false;
+        }
+      })();
+      if (!parserOk && hasTsFiles) {
+        checks.push({
+          label: "@typescript-eslint/parser installed (TypeScript project)",
+          pass: false,
+          detail: ".ts/.tsx files detected but TypeScript parser not found",
+          fix: "npm install --save-dev @typescript-eslint/parser",
+          note: "TypeScript files will use espree fallback without this \u2014 some rules may not work correctly."
+        });
+      }
+    }
     log.section("Diagnostics");
     let allPassed = true;
     for (const check of checks) {
@@ -2231,11 +2684,466 @@ function registerInitContextCommand(program2) {
   });
 }
 
+// cli/commands/report.ts
+var import_fs7 = __toESM(require("fs"));
+var import_path10 = __toESM(require("path"));
+var import_ora3 = __toESM(require("ora"));
+var RULE_META = {
+  "ai-guard/no-empty-catch": { description: "Empty catch blocks silently swallow errors", category: "Reliability" },
+  "ai-guard/no-broad-exception": { description: "Catching all exceptions hides bugs", category: "Reliability" },
+  "ai-guard/no-catch-log-rethrow": { description: "Catch-log-rethrow adds noise without context", category: "Reliability" },
+  "ai-guard/no-catch-without-use": { description: "Caught error is not used", category: "Reliability" },
+  "ai-guard/no-floating-promise": { description: "Unhandled promise can crash silently", category: "Async Stability" },
+  "ai-guard/no-await-in-loop": { description: "Sequential await in loops is slow; use Promise.all", category: "Async Stability" },
+  "ai-guard/no-async-array-callback": { description: "Async callbacks in .map()/.filter() return Promises", category: "Async Stability" },
+  "ai-guard/no-async-without-await": { description: "Async function never uses await", category: "Async Stability" },
+  "ai-guard/no-redundant-await": { description: "Redundant await in return position", category: "Async Stability" },
+  "ai-guard/no-hardcoded-secret": { description: "Secrets should come from environment variables", category: "Security" },
+  "ai-guard/no-eval-dynamic": { description: "eval() with dynamic input is a security risk", category: "Security" },
+  "ai-guard/no-sql-string-concat": { description: "SQL string concatenation enables injection", category: "Security" },
+  "ai-guard/no-unsafe-deserialize": { description: "JSON.parse on untrusted input without validation", category: "Security" },
+  "ai-guard/require-auth-middleware": { description: "Route handler missing authentication middleware", category: "Security" },
+  "ai-guard/require-authz-check": { description: "Missing authorization check for resource access", category: "Security" },
+  "ai-guard/no-console-in-handler": { description: "console.log in route handlers should be a logger", category: "AI Patterns" },
+  "ai-guard/no-duplicate-logic-block": { description: "Duplicate consecutive code blocks should be extracted", category: "AI Patterns" },
+  "ai-guard/no-dead-branch": { description: "Always-true/false condition creates dead or unreachable code", category: "AI Patterns" }
+};
+function getProjectName(cwd) {
+  try {
+    const pkgPath = import_path10.default.join(cwd, "package.json");
+    if (import_fs7.default.existsSync(pkgPath)) {
+      const pkg = JSON.parse(import_fs7.default.readFileSync(pkgPath, "utf-8"));
+      if (pkg.name) return pkg.name;
+    }
+  } catch {
+  }
+  return import_path10.default.basename(cwd);
+}
+function getPluginVersion(cwd) {
+  try {
+    const pkgPath = import_path10.default.resolve(__dirname, "../../package.json");
+    if (import_fs7.default.existsSync(pkgPath)) {
+      const pkg = JSON.parse(import_fs7.default.readFileSync(pkgPath, "utf-8"));
+      if (pkg.version) return pkg.version;
+    }
+  } catch {
+  }
+  try {
+    const pkgPath = import_path10.default.join(cwd, "node_modules", "eslint-plugin-ai-guard", "package.json");
+    if (import_fs7.default.existsSync(pkgPath)) {
+      const pkg = JSON.parse(import_fs7.default.readFileSync(pkgPath, "utf-8"));
+      if (pkg.version) return pkg.version;
+    }
+  } catch {
+  }
+  return "0.0.0";
+}
+function calculateScore(totalErrors, totalWarnings) {
+  const penalty = totalErrors * 5 + totalWarnings * 2;
+  return Math.max(0, Math.min(100, 100 - penalty));
+}
+function buildReportData(result, preset, scannedPath, cwd) {
+  const projectName = getProjectName(cwd);
+  const version = getPluginVersion(cwd);
+  const score = calculateScore(result.totalErrors, result.totalWarnings);
+  const topFiles = result.files.sort((a, b) => b.issues.length - a.issues.length).slice(0, 10).map((f) => ({
+    path: f.filePath,
+    count: f.issues.length,
+    errors: f.errorCount,
+    warnings: f.warningCount
+  }));
+  const categoryBreakdown = {};
+  for (const [rule, count] of result.ruleBreakdown.entries()) {
+    const cat = RULE_META[rule]?.category ?? "Other";
+    categoryBreakdown[cat] = (categoryBreakdown[cat] ?? 0) + count;
+  }
+  const sortedRules = [...result.ruleBreakdown.entries()].sort((a, b) => b[1] - a[1]).slice(0, 5);
+  const topRules = sortedRules.map(([rule, count]) => {
+    const meta = RULE_META[rule] ?? { description: "Rule violation", category: "Other" };
+    let example = null;
+    for (const file of result.files) {
+      const issue = file.issues.find((i) => i.ruleId === rule);
+      if (issue) {
+        example = {
+          file: file.filePath,
+          line: issue.line,
+          column: issue.column,
+          message: issue.message
+        };
+        break;
+      }
+    }
+    return {
+      rule: rule.replace(/^ai-guard\//, ""),
+      count,
+      description: meta.description,
+      category: meta.category,
+      example
+    };
+  });
+  const CONFIDENCE_ASSIGNMENT = {
+    "ai-guard/no-hardcoded-secret": "high",
+    "ai-guard/no-eval-dynamic": "high",
+    "ai-guard/no-floating-promise": "high",
+    "ai-guard/no-empty-catch": "high",
+    "ai-guard/no-sql-string-concat": "medium",
+    "ai-guard/no-await-in-loop": "medium",
+    "ai-guard/require-auth-middleware": "medium",
+    "ai-guard/require-authz-check": "medium",
+    "ai-guard/no-catch-log-rethrow": "medium",
+    "ai-guard/no-catch-without-use": "medium",
+    "ai-guard/no-unsafe-deserialize": "medium",
+    "ai-guard/no-async-without-await": "low",
+    "ai-guard/no-async-array-callback": "low",
+    "ai-guard/no-dead-branch": "low",
+    "ai-guard/no-broad-exception": "low",
+    "ai-guard/no-console-in-handler": "low",
+    "ai-guard/no-duplicate-logic-block": "low",
+    "ai-guard/no-redundant-await": "low"
+  };
+  let highCount = 0;
+  let mediumCount = 0;
+  let lowCount = 0;
+  for (const [rule, count] of result.ruleBreakdown.entries()) {
+    const tier = CONFIDENCE_ASSIGNMENT[rule] ?? "low";
+    if (tier === "high") highCount += count;
+    else if (tier === "medium") mediumCount += count;
+    else lowCount += count;
+  }
+  const ecosystemCount = result.ecosystemIssues?.length ?? 0;
+  const parserErrorCount = result.parserErrors?.length ?? 0;
+  return {
+    projectName,
+    version,
+    generatedAt: (/* @__PURE__ */ new Date()).toISOString(),
+    preset,
+    scannedPath,
+    durationMs: result.durationMs,
+    totalIssues: result.totalIssues,
+    totalErrors: result.totalErrors,
+    totalWarnings: result.totalWarnings,
+    score,
+    ruleBreakdown: Object.fromEntries(result.ruleBreakdown),
+    topFiles,
+    topRules,
+    categoryBreakdown,
+    highCount,
+    mediumCount,
+    lowCount,
+    ecosystemCount,
+    parserErrorCount
+  };
+}
+function generateHtml(data) {
+  const scoreColor = data.score >= 80 ? "#10b981" : data.score >= 50 ? "#f59e0b" : "#ef4444";
+  const scoreLabel = data.score >= 80 ? "Great" : data.score >= 50 ? "Needs Work" : "Critical";
+  const formattedDate = new Date(data.generatedAt).toLocaleString();
+  const topFilesRows = data.topFiles.length === 0 ? `<tr><td colspan="4" style="text-align:center;color:#6b7280;padding:2rem;">No issues found</td></tr>` : data.topFiles.map((f) => {
+    const heatColor = f.errors > 0 ? `rgba(239,68,68,${Math.min(0.9, 0.2 + f.errors * 0.1)})` : `rgba(245,158,11,${Math.min(0.9, 0.2 + f.warnings * 0.05)})`;
+    return `
+          <tr style="border-bottom:1px solid #1f2937;">
+            <td style="padding:0.75rem 1rem;font-family:monospace;font-size:0.8rem;color:#e5e7eb;max-width:300px;overflow:hidden;text-overflow:ellipsis;white-space:nowrap;" title="${escHtml(f.path)}">${escHtml(f.path)}</td>
+            <td style="padding:0.75rem 1rem;text-align:center;"><span style="background:${heatColor};border-radius:9999px;padding:0.2rem 0.7rem;font-weight:600;font-size:0.85rem;">${f.count}</span></td>
+            <td style="padding:0.75rem 1rem;text-align:center;color:#f87171;">${f.errors}</td>
+            <td style="padding:0.75rem 1rem;text-align:center;color:#fbbf24;">${f.warnings}</td>
+          </tr>`;
+  }).join("");
+  const topRulesCards = data.topRules.length === 0 ? `<div style="text-align:center;color:#6b7280;padding:2rem;">No rules fired \u2014 clean codebase!</div>` : data.topRules.map((r, i) => {
+    const catColor = {
+      "Reliability": "#ec4899",
+      "Async Stability": "#8b5cf6",
+      "Security": "#ef4444",
+      "AI Patterns": "#14b8a6",
+      Other: "#6b7280"
+    };
+    const color = catColor[r.category] ?? "#6b7280";
+    const exampleHtml = r.example ? `<div style="margin-top:0.75rem;background:#0f172a;border-radius:0.5rem;padding:0.75rem;border-left:3px solid ${color};">
+              <div style="font-size:0.75rem;color:#94a3b8;margin-bottom:0.35rem;">${escHtml(r.example.file)}:${r.example.line}:${r.example.column}</div>
+              <code style="font-size:0.8rem;color:#f1f5f9;white-space:pre-wrap;word-break:break-all;">${escHtml(r.example.message)}</code>
+            </div>` : "";
+    return `
+          <div style="background:#111827;border:1px solid #1f2937;border-radius:0.75rem;padding:1.25rem;display:flex;flex-direction:column;gap:0.5rem;">
+            <div style="display:flex;align-items:center;justify-content:space-between;flex-wrap:wrap;gap:0.5rem;">
+              <div style="display:flex;align-items:center;gap:0.75rem;">
+                <span style="background:#1f2937;color:#9ca3af;font-size:0.75rem;padding:0.15rem 0.5rem;border-radius:9999px;">#${i + 1}</span>
+                <code style="font-size:0.9rem;color:#f9fafb;font-weight:600;">${escHtml(r.rule)}</code>
+              </div>
+              <div style="display:flex;align-items:center;gap:0.5rem;">
+                <span style="background:${color}22;color:${color};border:1px solid ${color}44;font-size:0.72rem;border-radius:9999px;padding:0.15rem 0.6rem;">${escHtml(r.category)}</span>
+                <span style="background:#374151;color:#e5e7eb;font-size:0.8rem;border-radius:9999px;padding:0.2rem 0.7rem;font-weight:600;">${r.count}\xD7</span>
+              </div>
+            </div>
+            <p style="color:#9ca3af;font-size:0.85rem;margin:0;">${escHtml(r.description)}</p>
+            ${exampleHtml}
+          </div>`;
+  }).join("");
+  const categoryCards = Object.entries(data.categoryBreakdown).map(([cat, count]) => {
+    const catColor = {
+      "Reliability": "#ec4899",
+      "Async Stability": "#8b5cf6",
+      "Security": "#ef4444",
+      "AI Patterns": "#14b8a6",
+      Other: "#6b7280"
+    };
+    const color = catColor[cat] ?? "#6b7280";
+    return `
+      <div style="background:#111827;border:1px solid #1f2937;border-radius:0.75rem;padding:1.25rem;display:flex;flex-direction:column;gap:0.5rem;">
+        <div style="font-size:0.8rem;color:#9ca3af;">${escHtml(cat)}</div>
+        <div style="font-size:2rem;font-weight:700;color:${color};">${count}</div>
+        <div style="background:#1f2937;border-radius:9999px;height:4px;overflow:hidden;"><div style="background:${color};height:100%;width:${Math.min(100, count / Math.max(data.totalIssues, 1) * 100)}%;transition:width 0.8s ease;"></div></div>
+      </div>`;
+  }).join("");
+  const cleanBanner = data.totalIssues === 0 ? `<div style="background:#064e3b;border:1px solid #10b981;border-radius:1rem;padding:2rem;text-align:center;margin-bottom:2rem;">
+        <div style="font-size:2.5rem;">\u{1F389}</div>
+        <div style="font-size:1.5rem;font-weight:700;color:#10b981;margin:0.5rem 0;">Clean Codebase!</div>
+        <div style="color:#6ee7b7;">No AI guard issues detected. Your code is production-ready.</div>
+      </div>` : "";
+  return `<!DOCTYPE html>
+<html lang="en">
+<head>
+  <meta charset="UTF-8">
+  <meta name="viewport" content="width=device-width, initial-scale=1.0">
+  <title>AI Guard Report \u2014 ${escHtml(data.projectName)}</title>
+  <script src="https://cdn.tailwindcss.com"></script>
+  <style>
+    * { box-sizing: border-box; margin: 0; padding: 0; }
+    body { background: #030712; color: #f9fafb; font-family: -apple-system, BlinkMacSystemFont, 'Segoe UI', sans-serif; min-height: 100vh; }
+    @keyframes pulse-score { 0%, 100% { opacity: 1; } 50% { opacity: 0.8; } }
+    @keyframes slide-in { from { opacity: 0; transform: translateY(12px); } to { opacity: 1; transform: none; } }
+    .card { animation: slide-in 0.4s ease both; }
+    ::-webkit-scrollbar { width: 6px; height: 6px; }
+    ::-webkit-scrollbar-track { background: #111827; }
+    ::-webkit-scrollbar-thumb { background: #374151; border-radius: 3px; }
+  </style>
+</head>
+<body>
+
+<!-- \u2500\u2500 Header \u2500\u2500 -->
+<header style="background:linear-gradient(135deg,#0f172a 0%,#1e1b4b 50%,#0f172a 100%);border-bottom:1px solid #1f2937;padding:2rem 2rem 1.5rem;">
+  <div style="max-width:1100px;margin:0 auto;">
+    <div style="display:flex;align-items:center;justify-content:space-between;flex-wrap:wrap;gap:1rem;">
+      <div>
+        <div style="display:flex;align-items:center;gap:0.75rem;margin-bottom:0.4rem;">
+          <span style="font-size:1.5rem;">\u{1F6E1}\uFE0F</span>
+          <span style="font-size:0.85rem;color:#818cf8;font-weight:600;letter-spacing:0.05em;">AI GUARD REPORT</span>
+        </div>
+        <h1 style="font-size:1.8rem;font-weight:700;color:#f9fafb;">${escHtml(data.projectName)}</h1>
+        <p style="color:#6b7280;font-size:0.85rem;margin-top:0.25rem;">Scanned: <code style="color:#94a3b8;">${escHtml(data.scannedPath)}</code> \xB7 Preset: <code style="color:#94a3b8;">${escHtml(data.preset)}</code> \xB7 ${data.durationMs}ms</p>
+      </div>
+      <div style="text-align:center;">
+        <div style="font-size:0.75rem;color:#6b7280;margin-bottom:0.75rem;letter-spacing:0.05em;">SIGNAL CONFIDENCE</div>
+        <div style="display:flex;flex-direction:column;gap:0.4rem;">
+          <div style="display:flex;align-items:center;gap:0.5rem;">
+            <span style="width:8px;height:8px;border-radius:50%;background:#ef4444;display:inline-block;"></span>
+            <span style="font-size:0.8rem;color:#f87171;font-weight:600;">${data.highCount} high-confidence</span>
+          </div>
+          <div style="display:flex;align-items:center;gap:0.5rem;">
+            <span style="width:8px;height:8px;border-radius:50%;background:#f59e0b;display:inline-block;"></span>
+            <span style="font-size:0.8rem;color:#fbbf24;font-weight:600;">${data.mediumCount} medium-confidence</span>
+          </div>
+          <div style="display:flex;align-items:center;gap:0.5rem;">
+            <span style="width:8px;height:8px;border-radius:50%;background:#6b7280;display:inline-block;"></span>
+            <span style="font-size:0.8rem;color:#9ca3af;font-weight:600;">${data.lowCount} suggestions</span>
+          </div>
+          ${data.ecosystemCount > 0 ? `<div style="display:flex;align-items:center;gap:0.5rem;margin-top:0.25rem;">
+            <span style="font-size:0.75rem;color:#4b5563;">\u26A0 ${data.ecosystemCount} config issue${data.ecosystemCount !== 1 ? "s" : ""} (not ai-guard)</span>
+          </div>` : ""}
+        </div>
+      </div>
+    </div>
+    <p style="color:#4b5563;font-size:0.75rem;margin-top:1rem;">Generated ${escHtml(formattedDate)}</p>
+  </div>
+</header>
+
+<!-- \u2500\u2500 Main \u2500\u2500 -->
+<main style="max-width:1100px;margin:0 auto;padding:2rem;">
+
+  ${cleanBanner}
+
+  <!-- Summary Cards -->
+  <div class="card" style="display:grid;grid-template-columns:repeat(auto-fit,minmax(160px,1fr));gap:1rem;margin-bottom:2rem;">
+    <div style="background:#111827;border:1px solid #1f2937;border-radius:0.75rem;padding:1.25rem;">
+      <div style="font-size:0.75rem;color:#6b7280;margin-bottom:0.5rem;">TOTAL ISSUES</div>
+      <div style="font-size:2.5rem;font-weight:800;color:#f9fafb;">${data.totalIssues}</div>
+    </div>
+    <div style="background:#111827;border:1px solid #1f2937;border-radius:0.75rem;padding:1.25rem;">
+      <div style="font-size:0.75rem;color:#6b7280;margin-bottom:0.5rem;">ERRORS</div>
+      <div style="font-size:2.5rem;font-weight:800;color:#f87171;">${data.totalErrors}</div>
+    </div>
+    <div style="background:#111827;border:1px solid #1f2937;border-radius:0.75rem;padding:1.25rem;">
+      <div style="font-size:0.75rem;color:#6b7280;margin-bottom:0.5rem;">WARNINGS</div>
+      <div style="font-size:2.5rem;font-weight:800;color:#fbbf24;">${data.totalWarnings}</div>
+    </div>
+    <div style="background:#111827;border:1px solid #1f2937;border-radius:0.75rem;padding:1.25rem;">
+      <div style="font-size:0.75rem;color:#6b7280;margin-bottom:0.5rem;">FILES AFFECTED</div>
+      <div style="font-size:2.5rem;font-weight:800;color:#818cf8;">${data.topFiles.length}</div>
+    </div>
+    <div style="background:#111827;border:1px solid #1f2937;border-radius:0.75rem;padding:1.25rem;">
+      <div style="font-size:0.75rem;color:#6b7280;margin-bottom:0.5rem;">RULES FIRED</div>
+      <div style="font-size:2.5rem;font-weight:800;color:#34d399;">${Object.keys(data.ruleBreakdown).length}</div>
+    </div>
+  </div>
+
+  <!-- Issues by Category -->
+  ${Object.keys(data.categoryBreakdown).length > 0 ? `
+  <section class="card" style="margin-bottom:2rem;">
+    <h2 style="font-size:1rem;font-weight:600;color:#e5e7eb;margin-bottom:1rem;display:flex;align-items:center;gap:0.5rem;">
+      <span>\u{1F4CA}</span> Issues by Category
+    </h2>
+    <div style="display:grid;grid-template-columns:repeat(auto-fit,minmax(140px,1fr));gap:1rem;">
+      ${categoryCards}
+    </div>
+  </section>` : ""}
+
+  <!-- Severity Heatmap by File -->
+  <section class="card" style="margin-bottom:2rem;">
+    <h2 style="font-size:1rem;font-weight:600;color:#e5e7eb;margin-bottom:1rem;display:flex;align-items:center;gap:0.5rem;">
+      <span>\u{1F525}</span> Severity Heatmap \u2014 Top Files
+    </h2>
+    <div style="background:#111827;border:1px solid #1f2937;border-radius:0.75rem;overflow:hidden;">
+      <table style="width:100%;border-collapse:collapse;">
+        <thead>
+          <tr style="background:#0f172a;text-align:left;">
+            <th style="padding:0.75rem 1rem;font-size:0.75rem;color:#6b7280;font-weight:500;letter-spacing:0.05em;">FILE</th>
+            <th style="padding:0.75rem 1rem;font-size:0.75rem;color:#6b7280;font-weight:500;letter-spacing:0.05em;text-align:center;">ISSUES</th>
+            <th style="padding:0.75rem 1rem;font-size:0.75rem;color:#6b7280;font-weight:500;letter-spacing:0.05em;text-align:center;">ERRORS</th>
+            <th style="padding:0.75rem 1rem;font-size:0.75rem;color:#6b7280;font-weight:500;letter-spacing:0.05em;text-align:center;">WARNINGS</th>
+          </tr>
+        </thead>
+        <tbody>
+          ${topFilesRows}
+        </tbody>
+      </table>
+    </div>
+  </section>
+
+  <!-- Top 5 Rules -->
+  <section class="card" style="margin-bottom:2rem;">
+    <h2 style="font-size:1rem;font-weight:600;color:#e5e7eb;margin-bottom:1rem;display:flex;align-items:center;gap:0.5rem;">
+      <span>\u26A1</span> Top Rules That Fired
+    </h2>
+    <div style="display:flex;flex-direction:column;gap:1rem;">
+      ${topRulesCards}
+    </div>
+  </section>
+
+  <!-- Next Steps -->
+  <section class="card" style="margin-bottom:2rem;">
+    <h2 style="font-size:1rem;font-weight:600;color:#e5e7eb;margin-bottom:1rem;display:flex;align-items:center;gap:0.5rem;">
+      <span>\u{1F680}</span> Suggested Next Steps
+    </h2>
+    <div style="display:flex;flex-direction:column;gap:0.75rem;">
+      <div style="background:#111827;border:1px solid #1f2937;border-radius:0.75rem;padding:1rem;display:flex;align-items:flex-start;gap:0.75rem;">
+        <span style="font-size:1.2rem;flex-shrink:0;">\u{1F527}</span>
+        <div>
+          <div style="color:#f9fafb;font-size:0.9rem;font-weight:500;margin-bottom:0.2rem;">Auto-fix safe issues</div>
+          <code style="color:#818cf8;font-size:0.8rem;">npx ai-guard run --fix</code>
+        </div>
+      </div>
+      <div style="background:#111827;border:1px solid #1f2937;border-radius:0.75rem;padding:1rem;display:flex;align-items:flex-start;gap:0.75rem;">
+        <span style="font-size:1.2rem;flex-shrink:0;">\u{1F916}</span>
+        <div>
+          <div style="color:#f9fafb;font-size:0.9rem;font-weight:500;margin-bottom:0.2rem;">Prevent future AI-generated issues</div>
+          <code style="color:#818cf8;font-size:0.8rem;">npx ai-guard init-context</code>
+        </div>
+      </div>
+      <div style="background:#111827;border:1px solid #1f2937;border-radius:0.75rem;padding:1rem;display:flex;align-items:flex-start;gap:0.75rem;">
+        <span style="font-size:1.2rem;flex-shrink:0;">\u{1F4CB}</span>
+        <div>
+          <div style="color:#f9fafb;font-size:0.9rem;font-weight:500;margin-bottom:0.2rem;">Save baseline &amp; track only new issues</div>
+          <code style="color:#818cf8;font-size:0.8rem;">npx ai-guard baseline</code>
+        </div>
+      </div>
+      <div style="background:#111827;border:1px solid #1f2937;border-radius:0.75rem;padding:1rem;display:flex;align-items:flex-start;gap:0.75rem;">
+        <span style="font-size:1.2rem;flex-shrink:0;">\u{1F4E4}</span>
+        <div>
+          <div style="color:#f9fafb;font-size:0.9rem;font-weight:500;margin-bottom:0.2rem;">Share this report with your team</div>
+          <div style="color:#6b7280;font-size:0.8rem;">Send the <code style="color:#94a3b8;">ai-guard-report.html</code> file \u2014 it's fully self-contained.</div>
+        </div>
+      </div>
+    </div>
+  </section>
+
+</main>
+
+<!-- \u2500\u2500 Footer \u2500\u2500 -->
+<footer style="border-top:1px solid #1f2937;padding:1.5rem 2rem;text-align:center;">
+  <p style="color:#4b5563;font-size:0.8rem;">
+    Generated by <a href="https://github.com/YashJadhav21/eslint-plugin-ai-guard" style="color:#818cf8;text-decoration:none;">eslint-plugin-ai-guard</a> v${escHtml(data.version)}
+    &nbsp;\xB7&nbsp;
+    <a href="https://github.com/YashJadhav21/eslint-plugin-ai-guard" style="color:#818cf8;text-decoration:none;">GitHub</a>
+  </p>
+</footer>
+
+</body>
+</html>`;
+}
+function escHtml(str) {
+  return str.replace(/&/g, "&amp;").replace(/</g, "&lt;").replace(/>/g, "&gt;").replace(/"/g, "&quot;").replace(/'/g, "&#39;");
+}
+function registerReportCommand(program2) {
+  program2.command("report").description(
+    "Generate a beautiful HTML report of AI Guard scan results\nPerfect for sharing with your team or in Slack."
+  ).option("--path <dir>", "Directory or file to scan", ".").option("--preset <preset>", "Rule preset: recommended | strict | security", "recommended").option("--html", "Generate HTML report (default behavior)").option("--json", "Output raw JSON to stdout instead of writing HTML").option("--output <filename>", "Output file name", "ai-guard-report.html").option("--no-open", "Do not open the report in the browser after generating").action(async (opts) => {
+    const preset = ["recommended", "strict", "security"].includes(opts.preset) ? opts.preset : "recommended";
+    const spinner = opts.json ? null : (0, import_ora3.default)({ text: "Scanning\u2026", color: "cyan" }).start();
+    let result;
+    try {
+      result = await runEslint({ preset, targetPath: opts.path });
+      spinner?.stop();
+    } catch (err) {
+      spinner?.stop();
+      const msg = err instanceof Error ? err.message : String(err);
+      log.error(msg);
+      process.exit(1);
+      return;
+    }
+    const cwd = process.cwd();
+    const reportData = buildReportData(result, preset, opts.path, cwd);
+    if (opts.json) {
+      console.log(JSON.stringify(reportData, null, 2));
+      process.exit(0);
+      return;
+    }
+    log.banner("AI GUARD REPORT");
+    log.blank();
+    const html = generateHtml(reportData);
+    const outputPath = import_path10.default.resolve(cwd, opts.output);
+    import_fs7.default.writeFileSync(outputPath, html, "utf-8");
+    log.success(`Report saved: ${opts.output}`);
+    log.info(
+      `Score: ${reportData.score}/100 \xB7 ${reportData.totalErrors} errors \xB7 ${reportData.totalWarnings} warnings`
+    );
+    log.blank();
+    if (opts.open !== false) {
+      try {
+        const { default: open } = await import("open").catch(() => {
+          return { default: null };
+        });
+        if (open) {
+          await open(outputPath);
+          log.info("Opened in your browser.");
+        } else {
+          const { execSync } = await import("child_process");
+          const cmd = process.platform === "win32" ? `start "" "${outputPath}"` : process.platform === "darwin" ? `open "${outputPath}"` : `xdg-open "${outputPath}"`;
+          execSync(cmd);
+          log.info("Opened in your browser.");
+        }
+      } catch {
+        log.info(`Open manually: file://${outputPath}`);
+      }
+    } else {
+      log.info(`Open: file://${outputPath}`);
+    }
+    log.blank();
+  });
+}
+
 // cli/index.ts
 function getVersion() {
   try {
-    const pkgPath = import_path10.default.resolve(__dirname, "../../package.json");
-    const raw = import_fs7.default.readFileSync(pkgPath, "utf-8");
+    const pkgPath = import_path11.default.resolve(__dirname, "../../package.json");
+    const raw = import_fs8.default.readFileSync(pkgPath, "utf-8");
     const pkg = JSON.parse(raw);
     return typeof pkg.version === "string" ? pkg.version : "0.0.0";
   } catch {
@@ -2244,7 +3152,7 @@ function getVersion() {
 }
 var program = new import_commander.Command();
 program.name("ai-guard").description(
-  "Production-grade CLI for eslint-plugin-ai-guard\nCatch AI-generated code issues instantly \u2014 no ESLint config required.\n\nQuick start:\n  npx ai-guard run          Scan current project\n  npx ai-guard init         Auto-configure ESLint\n  npx ai-guard init-context Generate AI agent rules\n  npx ai-guard doctor       Check your setup\n  npx ai-guard baseline     Save baseline, track new issues only"
+  "Production-grade CLI for eslint-plugin-ai-guard\nCatch AI-generated code issues instantly \u2014 no ESLint config required.\n\nQuick start:\n  npx ai-guard run          Scan current project\n  npx ai-guard init         Auto-configure ESLint\n  npx ai-guard init-context Generate AI agent rules\n  npx ai-guard report       Generate shareable HTML report\n  npx ai-guard doctor       Check your setup\n  npx ai-guard baseline     Save baseline, track new issues only"
 ).version(getVersion(), "-v, --version", "Print version number").helpOption("-h, --help", "Show help");
 registerRunCommand(program);
 registerInitCommand(program);
@@ -2253,6 +3161,7 @@ registerPresetCommand(program);
 registerIgnoreCommand(program);
 registerBaselineCommand(program);
 registerInitContextCommand(program);
+registerReportCommand(program);
 program.configureOutput({
   writeErr(str) {
     const cleaned = str.replace(/^error:\s*/i, "").trim();