fallow 2.79.0 → 2.81.0

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "fallow",
-  "version": "2.79.0",
+  "version": "2.81.0",
   "description": "Deterministic codebase intelligence for TypeScript and JavaScript. Quality, risk, architecture, dependencies, duplication, and safe cleanup evidence for humans, CI, and agents. Optional runtime intelligence layer (Fallow Runtime) adds production execution evidence. Rust-native, sub-second, 96 framework plugins.",
   "license": "MIT",
   "repository": {
@@ -81,13 +81,13 @@
     "@tanstack/intent": "0.0.41"
   },
   "optionalDependencies": {
-    "@fallow-cli/darwin-arm64": "2.79.0",
-    "@fallow-cli/darwin-x64": "2.79.0",
-    "@fallow-cli/linux-x64-gnu": "2.79.0",
-    "@fallow-cli/linux-arm64-gnu": "2.79.0",
-    "@fallow-cli/linux-x64-musl": "2.79.0",
-    "@fallow-cli/linux-arm64-musl": "2.79.0",
-    "@fallow-cli/win32-arm64-msvc": "2.79.0",
-    "@fallow-cli/win32-x64-msvc": "2.79.0"
+    "@fallow-cli/darwin-arm64": "2.81.0",
+    "@fallow-cli/darwin-x64": "2.81.0",
+    "@fallow-cli/linux-x64-gnu": "2.81.0",
+    "@fallow-cli/linux-arm64-gnu": "2.81.0",
+    "@fallow-cli/linux-x64-musl": "2.81.0",
+    "@fallow-cli/linux-arm64-musl": "2.81.0",
+    "@fallow-cli/win32-arm64-msvc": "2.81.0",
+    "@fallow-cli/win32-x64-msvc": "2.81.0"
   }
 }

package/schema.json

@@ -865,7 +865,7 @@
           ]
         },
         "emailMode": {
-          "description": "Privacy mode for emitted author emails. Defaults to `handle`.\nOverride on the CLI via `--ownership-emails=raw|handle|hash`.",
+          "description": "Privacy mode for emitted author emails. Defaults to `handle`.\nOverride on the CLI via `--ownership-emails=raw|handle|anonymized`.\nThe legacy spelling `hash` is still accepted for compatibility.",
           "$ref": "#/$defs/EmailMode",
           "default": "handle"
         }
@@ -885,7 +885,12 @@
           "const": "handle"
         },
         {
-          "description": "Show a stable `xxh3:<16hex>` pseudonym derived from the raw email.\nNon-cryptographic; suitable to keep raw emails out of CI artifacts\n(SARIF, code-scanning uploads) but not as a security primitive --\na known list of org emails can be brute-forced into a rainbow table.\nUse in regulated environments where even local-parts are sensitive.",
+          "description": "Show a stable `xxh3:<16hex>` pseudonym derived from the raw email.\nNon-cryptographic; suitable to keep raw emails out of CI artifacts\n(SARIF, code-scanning uploads) but not as a security primitive:\na known list of org emails can be brute-forced into a rainbow table.\nUse in regulated environments where even local-parts are sensitive.",
+          "type": "string",
+          "const": "anonymized"
+        },
+        {
+          "description": "Legacy spelling for [`EmailMode::Anonymized`].",
           "type": "string",
           "const": "hash"
         }

package/scripts/verify-binary.js

@@ -386,7 +386,6 @@ module.exports = {
   verifyDigestAt,
   verifyInstalled,
   _verifyWithKey,
-  fetchReleaseDigest,
   normalizeDigest,
   readEmbeddedDigest,
   sha256Hex,

package/skills/fallow/references/cli-reference.md

@@ -342,7 +342,7 @@ Angular templates contribute synthetic `<template>` complexity findings whenever
 | `--since` | string | `6m` | Git history window for hotspot analysis. Accepts durations (`6m`, `90d`, `1y`, `2w`) or ISO dates (`2025-06-01`). |
 | `--min-commits` | number | `3` | Minimum number of commits for a file to be included in hotspot ranking. |
 | `--ownership` | bool | `false` | Attach ownership signals to hotspot entries: bus factor (Avelino truck factor), contributor count, top contributor with stale-days, recent contributors (top-3), `suggested_reviewers`, declared CODEOWNERS owner, ownership drift, unowned-hotspot detection. Human output gains a project-level summary line. JSON adds `low-bus-factor`, `unowned-hotspot`, `ownership-drift` action types. Test files get a `[test]` tag. Implies `--hotspots`. Requires git. |
-| `--ownership-emails` | `raw\|handle\|hash` | `handle` | Privacy mode for author emails. `handle` shows the local-part only (default, with GitHub noreply unwrap). `hash` emits stable `xxh3:` pseudonyms. `raw` shows full addresses. Use `hash` in regulated environments. Implies `--ownership`. Configure default via `health.ownership.emailMode`. |
+| `--ownership-emails` | `raw\|handle\|anonymized\|hash` | `handle` | Privacy mode for author emails. `handle` shows the local-part only (default, with GitHub noreply unwrap and deterministic same-handle disambiguation). `anonymized` emits stable `xxh3:` pseudonyms; `hash` remains accepted as the legacy spelling. `raw` shows full addresses. Use `anonymized` in regulated environments. Implies `--ownership`. Configure default via `health.ownership.emailMode`. |
 | `--changed-since` | string | — | Only analyze files changed since a git ref |
 | `--workspace` | string | — | Scope to one or more workspaces. Comma-separated values, globs (`apps/*`, `@scope/*`), and `!`-prefixed negation (`!apps/legacy`) supported. Matched against package name AND workspace path relative to repo root. Vital signs, health score, hotspots, file scores, findings, and `summary.files_analyzed` are all recomputed against the scoped subset. |
 | `--group-by` | `owner\|directory\|package\|section` | — | Partition the report into per-group sections. JSON adds `grouped_by` plus a `groups` array; each group contains its own `vital_signs`, `health_score`, `findings`, `file_scores`, `hotspots`, `large_functions`, and `targets` recomputed against the group's files. The top-level metrics stay project-wide so consumers that ignore grouping still see the project headline. Human output adds a per-group score / files / hot / p90 summary block (sorted worst-first when `--score`). SARIF results carry `properties.group` and CodeClimate issues carry a top-level `group` field so GitHub Code Scanning / GitLab Code Quality can partition per team / package. Compact, markdown, and badge fall back to ungrouped output with a stderr note. |

package/types/output-contract.d.ts

@@ -423,7 +423,11 @@ export type ChurnTrend = ("accelerating" | "stable" | "cooling")
 /**
  * Format discriminator for [`ContributorEntry::identifier`].
  */
-export type ContributorIdentifierFormat = ("raw" | "handle" | "hash")
+export type ContributorIdentifierFormat = ("raw" | "handle" | "anonymized" | "hash")
+/**
+ * Machine-readable ownership state for a hotspot.
+ */
+export type OwnershipState = ("active" | "unowned" | "declared_inactive" | "drifting")
 /**
  * Discriminant for [`HotspotAction::kind`].
  */
@@ -3497,6 +3501,7 @@ declared_owner?: (string | null)
  * CODEOWNERS file was discovered for the repository (cannot determine).
  */
 unowned?: (boolean | null)
+ownership_state: OwnershipState
 /**
  * True when ownership has drifted from the original author to a new
  * top contributor. Pairs with [`drift_reason`](Self::drift_reason).
@@ -3510,17 +3515,17 @@ drift_reason?: (string | null)
 }
 /**
  * Per-author contribution summary. The identifier is rendered per the
- * configured ownership.emailMode (handle, hash, or raw); the format field
- * discriminates the three so type-aware consumers can branch without
+ * configured ownership.emailMode (handle, anonymized/hash, or raw); the format field
+ * discriminates the modes so type-aware consumers can branch without
  * re-parsing.
  */
 export interface ContributorEntry {
 /**
  * Display string per the configured email mode: raw email
- * (`alice@example.com`), local-part handle (`alice`), or stable hash
+ * (`alice@example.com`), local-part handle (`alice`), or stable anonymized hash
  * pseudonym (`xxh3:<16hex>`). The format depends on `format`.
  *
- * Renamed from `email` because in `handle` and `hash` modes the value
+ * Renamed from `email` because in `handle` and `anonymized`/`hash` modes the value
  * is no longer an email address; consumers tempted to use it as one
  * (e.g. `mailto:`) would be wrong.
  */
@@ -4549,10 +4554,22 @@ resolution_comments_posted: number
  * Stale review threads actually resolved (zero on dry runs).
  */
 threads_resolved: number
+/**
+ * Operator-facing retry hint when apply stopped early.
+ */
+apply_hint?: (string | null)
 /**
  * Errors collected during apply, one entry per failure.
  */
 apply_errors: string[]
+/**
+ * Stale fingerprints whose provider mutation failed.
+ */
+failed_fingerprints?: string[]
+/**
+ * Stale fingerprints not fully applied after the fail-fast stop.
+ */
+unapplied_fingerprints?: string[]
 }
 /**
  * Envelope emitted by `fallow coverage setup --json`. Deterministic