fallow 2.80.0 → 2.82.0

package/skills/fallow/references/cli-reference.md

@@ -342,7 +342,7 @@ Angular templates contribute synthetic `<template>` complexity findings whenever
 | `--since` | string | `6m` | Git history window for hotspot analysis. Accepts durations (`6m`, `90d`, `1y`, `2w`) or ISO dates (`2025-06-01`). |
 | `--min-commits` | number | `3` | Minimum number of commits for a file to be included in hotspot ranking. |
 | `--ownership` | bool | `false` | Attach ownership signals to hotspot entries: bus factor (Avelino truck factor), contributor count, top contributor with stale-days, recent contributors (top-3), `suggested_reviewers`, declared CODEOWNERS owner, ownership drift, unowned-hotspot detection. Human output gains a project-level summary line. JSON adds `low-bus-factor`, `unowned-hotspot`, `ownership-drift` action types. Test files get a `[test]` tag. Implies `--hotspots`. Requires git. |
-| `--ownership-emails` | `raw\|handle\|hash` | `handle` | Privacy mode for author emails. `handle` shows the local-part only (default, with GitHub noreply unwrap). `hash` emits stable `xxh3:` pseudonyms. `raw` shows full addresses. Use `hash` in regulated environments. Implies `--ownership`. Configure default via `health.ownership.emailMode`. |
+| `--ownership-emails` | `raw\|handle\|anonymized\|hash` | `handle` | Privacy mode for author emails. `handle` shows the local-part only (default, with GitHub noreply unwrap and deterministic same-handle disambiguation). `anonymized` emits stable `xxh3:` pseudonyms; `hash` remains accepted as the legacy spelling. `raw` shows full addresses. Use `anonymized` in regulated environments. Implies `--ownership`. Configure default via `health.ownership.emailMode`. |
 | `--changed-since` | string | — | Only analyze files changed since a git ref |
 | `--workspace` | string | — | Scope to one or more workspaces. Comma-separated values, globs (`apps/*`, `@scope/*`), and `!`-prefixed negation (`!apps/legacy`) supported. Matched against package name AND workspace path relative to repo root. Vital signs, health score, hotspots, file scores, findings, and `summary.files_analyzed` are all recomputed against the scoped subset. |
 | `--group-by` | `owner\|directory\|package\|section` | — | Partition the report into per-group sections. JSON adds `grouped_by` plus a `groups` array; each group contains its own `vital_signs`, `health_score`, `findings`, `file_scores`, `hotspots`, `large_functions`, and `targets` recomputed against the group's files. The top-level metrics stay project-wide so consumers that ignore grouping still see the project headline. Human output adds a per-group score / files / hot / p90 summary block (sorted worst-first when `--score`). SARIF results carry `properties.group` and CodeClimate issues carry a top-level `group` field so GitHub Code Scanning / GitLab Code Quality can partition per team / package. Compact, markdown, and badge fall back to ungrouped output with a stderr note. |

package/types/output-contract.d.ts

@@ -423,7 +423,11 @@ export type ChurnTrend = ("accelerating" | "stable" | "cooling")
 /**
  * Format discriminator for [`ContributorEntry::identifier`].
  */
-export type ContributorIdentifierFormat = ("raw" | "handle" | "hash")
+export type ContributorIdentifierFormat = ("raw" | "handle" | "anonymized" | "hash")
+/**
+ * Machine-readable ownership state for a hotspot.
+ */
+export type OwnershipState = ("active" | "unowned" | "declared_inactive" | "drifting")
 /**
  * Discriminant for [`HotspotAction::kind`].
  */
@@ -3497,6 +3501,7 @@ declared_owner?: (string | null)
  * CODEOWNERS file was discovered for the repository (cannot determine).
  */
 unowned?: (boolean | null)
+ownership_state: OwnershipState
 /**
  * True when ownership has drifted from the original author to a new
  * top contributor. Pairs with [`drift_reason`](Self::drift_reason).
@@ -3510,17 +3515,17 @@ drift_reason?: (string | null)
 }
 /**
  * Per-author contribution summary. The identifier is rendered per the
- * configured ownership.emailMode (handle, hash, or raw); the format field
- * discriminates the three so type-aware consumers can branch without
+ * configured ownership.emailMode (handle, anonymized/hash, or raw); the format field
+ * discriminates the modes so type-aware consumers can branch without
  * re-parsing.
  */
 export interface ContributorEntry {
 /**
  * Display string per the configured email mode: raw email
- * (`alice@example.com`), local-part handle (`alice`), or stable hash
+ * (`alice@example.com`), local-part handle (`alice`), or stable anonymized hash
  * pseudonym (`xxh3:<16hex>`). The format depends on `format`.
  *
- * Renamed from `email` because in `handle` and `hash` modes the value
+ * Renamed from `email` because in `handle` and `anonymized`/`hash` modes the value
  * is no longer an email address; consumers tempted to use it as one
  * (e.g. `mailto:`) would be wrong.
  */
@@ -4549,10 +4554,22 @@ resolution_comments_posted: number
  * Stale review threads actually resolved (zero on dry runs).
  */
 threads_resolved: number
+/**
+ * Operator-facing retry hint when apply stopped early.
+ */
+apply_hint?: (string | null)
 /**
  * Errors collected during apply, one entry per failure.
  */
 apply_errors: string[]
+/**
+ * Stale fingerprints whose provider mutation failed.
+ */
+failed_fingerprints?: string[]
+/**
+ * Stale fingerprints not fully applied after the fail-fast stop.
+ */
+unapplied_fingerprints?: string[]
 }
 /**
  * Envelope emitted by `fallow coverage setup --json`. Deterministic

package/scripts/postinstall.js

@@ -1,63 +0,0 @@
-const { getPlatformPackage } = require('./platform-package');
-const { verifyInstalled, SKIP_ENV } = require('./verify-binary');
-
-const pkg = (() => {
-  if (process.platform !== 'linux') {
-    return getPlatformPackage(process.platform, process.arch);
-  }
-
-  try {
-    const { familySync } = require('detect-libc');
-    return getPlatformPackage(process.platform, process.arch, familySync());
-  } catch {
-    return getPlatformPackage(process.platform, process.arch);
-  }
-})();
-
-if (!pkg) {
-  console.warn(
-    `fallow: No prebuilt binary for ${process.platform}-${process.arch}. ` +
-    `You can build from source: https://github.com/fallow-rs/fallow`
-  );
-  process.exit(0);
-}
-
-try {
-  require.resolve(`${pkg}/package.json`);
-} catch {
-  console.warn(
-    `fallow: Platform package ${pkg} not installed. ` +
-    `This may happen if you used --no-optional. ` +
-    `Run 'npm install' to fix.`
-  );
-  // Without the platform package there is nothing to verify; keep the existing
-  // soft-fail behavior for --no-optional installs.
-  process.exit(0);
-}
-
-async function main() {
-  const result = await verifyInstalled();
-  if (result.skipped) {
-    console.warn(
-      `fallow: binary verification skipped (${SKIP_ENV}=${process.env[SKIP_ENV]}). ` +
-      `Only set this when you are deliberately replacing the published binary. ` +
-      `See https://github.com/fallow-rs/fallow/blob/main/SECURITY.md for details.`
-    );
-    process.exit(0);
-  }
-  if (!result.ok) {
-    const where = result.binary ? ` ${result.binary}` : '';
-    console.error(
-      `fallow: binary verification failed${where} (${result.code}): ${result.message}. ` +
-      `This usually means the published platform package was tampered with. ` +
-      `See https://github.com/fallow-rs/fallow/blob/main/SECURITY.md for details. ` +
-      `Set ${SKIP_ENV}=1 only if you are deliberately replacing the binary.`
-    );
-    process.exit(1);
-  }
-}
-
-main().catch((err) => {
-  console.error(`fallow: binary verification failed (internal-error): ${err.message}`);
-  process.exit(1);
-});