fallow 3.22.0 → 3.23.0

package/capabilities.json

@@ -1,6 +1,6 @@
 {
   "name": "fallow",
-  "version": "3.22.0",
+  "version": "3.23.0",
   "manifest_version": "1",
   "description": "Codebase analyzer for TypeScript/JavaScript: unused code, circular dependencies, code duplication, complexity hotspots, and architecture boundary violations",
   "global_flags": [
@@ -906,6 +906,11 @@
       "description": "Inspect the optional TypeScript semantic companion",
       "flags": []
     },
+    {
+      "name": "doctor",
+      "description": "Diagnose project readiness without analysis or mutation",
+      "flags": []
+    },
     {
       "name": "similar-code",
       "description": "Find semantically similar functions with a pinned local model (opt-in)",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "fallow",
-  "version": "3.22.0",
+  "version": "3.23.0",
   "mcpName": "io.github.fallow-rs/fallow",
   "description": "Codebase intelligence for TypeScript and JavaScript. Free static analysis of code and styles, optional paid runtime intelligence (Fallow Runtime). Quality, risk, architecture, dependencies, duplication, and design-system drift for humans, CI, and the agents writing your code. Zero-config framework support.",
   "license": "MIT",
@@ -88,14 +88,14 @@
     "@tanstack/intent": "0.3.6"
   },
   "optionalDependencies": {
-    "@fallow-cli/darwin-arm64": "3.22.0",
-    "@fallow-cli/darwin-x64": "3.22.0",
-    "@fallow-cli/linux-x64-gnu": "3.22.0",
-    "@fallow-cli/linux-arm64-gnu": "3.22.0",
-    "@fallow-cli/linux-x64-musl": "3.22.0",
-    "@fallow-cli/linux-arm64-musl": "3.22.0",
-    "@fallow-cli/win32-arm64-msvc": "3.22.0",
-    "@fallow-cli/win32-x64-msvc": "3.22.0",
-    "fallow-type-aware": "3.22.0"
+    "@fallow-cli/darwin-arm64": "3.23.0",
+    "@fallow-cli/darwin-x64": "3.23.0",
+    "@fallow-cli/linux-x64-gnu": "3.23.0",
+    "@fallow-cli/linux-arm64-gnu": "3.23.0",
+    "@fallow-cli/linux-x64-musl": "3.23.0",
+    "@fallow-cli/linux-arm64-musl": "3.23.0",
+    "@fallow-cli/win32-arm64-msvc": "3.23.0",
+    "@fallow-cli/win32-x64-msvc": "3.23.0",
+    "fallow-type-aware": "3.23.0"
   }
 }

package/schema.json

@@ -905,7 +905,7 @@
           "type": "array",
           "items": {
             "type": "string",
-            "pattern": "^dup:(?:[0-9a-f]{8}|[0-9a-f]{16}(?:-[1-9][0-9]*)?):(?:[2-9]|[1-9][0-9]+)$"
+            "pattern": "^dup:(?:[0-9a-f]{8}|[0-9a-f]{16}(?:-r?[1-9][0-9]*)?):(?:[2-9]|[1-9][0-9]+)$"
           },
           "default": []
         },

package/skills/fallow/SKILL.md

@@ -87,6 +87,7 @@ Route by intent before reaching for the big analysis commands. Same matrix as `f
 | `dead-code` | Dead code analysis (`check` is an alias) | `--unused-exports`, `--changed-since`, `--changed-workspaces`, `--production`, `--file`, `--include-entry-exports`, `--stale-suppressions`, `--ci`, `--group-by`, `--summary`, `--fail-on-regression`, `--tolerance`, `--regression-baseline`, `--save-regression-baseline` |
 | `watch` | Watch for changes and re-run analysis | `--no-clear` |
 | `type-aware` | Inspect the optional TypeScript semantic companion |  |
+| `doctor` | Diagnose project readiness without analysis or mutation |  |
 | `similar-code` | Find semantically similar functions with a pinned local model (opt-in) | `--threshold`, `--min-lines`, `--top`, `--file` |
 | `inspect` | Compose one evidence bundle for a file or exported symbol | `--file <path>`, `--symbol <file>:<export>` |
 | `trace` | Trace a symbol's call chain (best-effort, syntactic; OFF the ranked path) | `symbol`, `--callers`, `--callees`, `--depth` |

package/skills/fallow/references/cli-reference.md

@@ -385,7 +385,7 @@ Human output groups paths under "Shared with your team (commit these)" and "Loca
 {
   "kind": "agent-install",
   "schema_version": 1,
-  "fallow_version": "3.22.0",
+  "fallow_version": "3.23.0",
   "root": "/abs/path",
   "mode": "install",
   "dry_run": false,
@@ -589,7 +589,7 @@ fallow health --format json --quiet --trend
 {
   "kind": "health",
   "schema_version": 7,
-  "version": "3.22.0",
+  "version": "3.23.0",
   "elapsed_ms": 32,
   "summary": {
     "files_analyzed": 482,
@@ -987,7 +987,7 @@ fallow audit \
 {
   "kind": "audit",
   "schema_version": 7,
-  "version": "3.22.0",
+  "version": "3.23.0",
   "command": "audit",
   "verdict": "fail",
   "changed_files_count": 12,
@@ -1064,7 +1064,7 @@ fallow flags --format json --quiet --workspace my-package
 ```json
 {
   "schema_version": 7,
-  "version": "3.22.0",
+  "version": "3.23.0",
   "elapsed_ms": 116,
   "feature_flags": [],
   "total_flags": 0
@@ -1165,7 +1165,7 @@ fallow security --gate newly-reachable --changed-since origin/main
 {
   "kind": "security",
   "schema_version": "4",
-  "version": "3.22.0",
+  "version": "3.23.0",
   "elapsed_ms": 42,
   "config": {
     "rules": {
@@ -1194,7 +1194,7 @@ fallow security --gate newly-reachable --changed-since origin/main
 {
   "kind": "security",
   "schema_version": "4",
-  "version": "3.22.0",
+  "version": "3.23.0",
   "elapsed_ms": 42,
   "config": {
     "rules": {
@@ -1959,7 +1959,7 @@ The HTTP layer mirrors the bash `gh_api_retry` / `curl_retry` helpers: `FALLOW_A
 {
   "kind": "dead-code",
   "schema_version": 7,
-  "version": "3.22.0",
+  "version": "3.23.0",
   "elapsed_ms": 45,
   "total_issues": 12,
   "entry_points": {
@@ -2119,7 +2119,7 @@ When `--baseline` is used in combined output, the JSON includes a `baseline_delt
 {
   "kind": "dupes",
   "schema_version": 7,
-  "version": "3.22.0",
+  "version": "3.23.0",
   "elapsed_ms": 82,
   "total_clones": 15,
   "total_lines_duplicated": 230,
@@ -2163,11 +2163,11 @@ When running `fallow` with no subcommand (all analyses), the JSON output combine
 {
   "kind": "combined",
   "schema_version": 7,
-  "version": "3.22.0",
+  "version": "3.23.0",
   "elapsed_ms": 159,
   "check": {
     "schema_version": 7,
-    "version": "3.22.0",
+    "version": "3.23.0",
     "elapsed_ms": 45,
     "total_issues": 12,
     "unused_files": [],

package/types/output-contract.d.ts

@@ -24,7 +24,7 @@
 
 
 /**
- * Schemas for the JSON output of fallow commands. Object-shaped envelopes covered by the `FallowOutput` contract carry a top-level `kind` discriminator. Current kind values: `audit`, `explain`, `inspect_target`, `trace`, `review-envelope`, `review-reconcile`, `coverage-setup`, `coverage-analyze`, `list-boundaries`, `list-workspaces`, `health`, `dupes`, `dead-code-grouped`, `impact`, `impact-cross-repo`, `security`, `security-survivors`, `security-blind-spots`, `dead-code`, `combined`, `feature-flags`, `audit-brief`, `decision-surface`, `review-walkthrough-guide`, `review-walkthrough-validation`, `suppression-inventory`, `type-aware-status`, `similar-code`, `similar-code-inspect`, `similar-code-review`. Consumers should branch on `kind` instead of probing for unique field presence. `CodeClimateOutput` is a bare JSON array (per the Code Climate / GitLab Code Quality spec) and stays a sibling root branch discriminated by checking whether the document root is an array. `ErrorOutput` is the `--format json` failure document, emitted on stdout with a non-zero exit; it carries no `kind` and is discriminated by the `error: true` field.
+ * Schemas for the JSON output of fallow commands. Object-shaped envelopes covered by the `FallowOutput` contract carry a top-level `kind` discriminator. Current kind values: `audit`, `explain`, `inspect_target`, `trace`, `review-envelope`, `review-reconcile`, `coverage-setup`, `coverage-analyze`, `list-boundaries`, `list-workspaces`, `health`, `dupes`, `dead-code-grouped`, `impact`, `impact-cross-repo`, `security`, `security-survivors`, `security-blind-spots`, `dead-code`, `combined`, `feature-flags`, `audit-brief`, `decision-surface`, `review-walkthrough-guide`, `review-walkthrough-validation`, `suppression-inventory`, `doctor`, `type-aware-status`, `similar-code`, `similar-code-inspect`, `similar-code-review`. Consumers should branch on `kind` instead of probing for unique field presence. `CodeClimateOutput` is a bare JSON array (per the Code Climate / GitLab Code Quality spec) and stays a sibling root branch discriminated by checking whether the document root is an array. `ErrorOutput` is the `--format json` failure document, emitted on stdout with a non-zero exit; it carries no `kind` and is discriminated by the `error: true` field.
  */
 export type FallowJsonOutput = (FallowOutput | CodeClimateOutput | ErrorOutput)
 /**
@@ -96,6 +96,8 @@ kind: "review-walkthrough-guide"
 kind: "review-walkthrough-validation"
 }) | (SuppressionInventoryOutput & {
 kind: "suppression-inventory"
+}) | (DoctorOutput & {
+kind: "doctor"
 }) | (TypeAwareStatusOutput & {
 kind: "type-aware-status"
 }) | (SimilarCodeOutput & {
@@ -1059,6 +1061,30 @@ export type SuppressionInventoryLevel = ("file" | "line")
  * How a suppression in the inventory was authored.
  */
 export type SuppressionInventoryOrigin = "comment"
+/**
+ * Schema projection for the exact doctor envelope version.
+ */
+export type DoctorSchemaVersion = 1
+/**
+ * Schema projection for `.` as the privacy-safe diagnosed project root.
+ */
+export type DoctorProjectRoot = "."
+/**
+ * Aggregate readiness outcome.
+ */
+export type DoctorStatus = ("pass" | "warn" | "fail")
+/**
+ * Stable identifier for a doctor check. Declaration order is output order.
+ */
+export type DoctorCheckId = ("root" | "config" | "workspaces" | "plugins" | "type-aware")
+/**
+ * Stable category for a doctor check.
+ */
+export type DoctorCheckCategory = ("project" | "configuration" | "workspace" | "plugin" | "companion")
+/**
+ * Per-check readiness outcome.
+ */
+export type DoctorCheckStatus = ("pass" | "warn" | "fail" | "skipped")
 /**
  * Schema projection for the type-aware status envelope's exact version.
  */
@@ -13516,6 +13542,75 @@ reason?: (string | null)
  */
 reason_present: boolean
 }
+/**
+ * Versioned readiness envelope emitted by `fallow doctor --format json`.
+ */
+export interface DoctorOutput {
+schema_version: DoctorSchemaVersion
+version: ToolVersion
+root: DoctorProjectRoot
+status: DoctorStatus
+summary: DoctorSummary
+/**
+ * Checks in stable contract order.
+ */
+checks: DoctorCheck[]
+}
+/**
+ * Counts for every per-check status.
+ */
+export interface DoctorSummary {
+/**
+ * Successful checks.
+ */
+pass: number
+/**
+ * Advisory checks.
+ */
+warn: number
+/**
+ * Failed checks.
+ */
+fail: number
+/**
+ * Inapplicable or prerequisite-blocked checks.
+ */
+skipped: number
+}
+/**
+ * One deterministic doctor check result.
+ */
+export interface DoctorCheck {
+id: DoctorCheckId
+category: DoctorCheckCategory
+status: DoctorCheckStatus
+/**
+ * Whether failure makes the project not ready.
+ */
+required: boolean
+/**
+ * Human-readable result with no host-specific absolute paths.
+ */
+message: string
+/**
+ * Optional actionable next command.
+ */
+remediation?: (DoctorRemediation | null)
+}
+/**
+ * Actionable remediation attached to a doctor check.
+ */
+export interface DoctorRemediation {
+/**
+ * Command the user or agent can choose to run.
+ */
+command: string
+cwd: DoctorProjectRoot
+/**
+ * Whether running the command can modify project files or dependencies.
+ */
+mutating: boolean
+}
 /**
  * Envelope emitted by `fallow type-aware status --format json`.
  */
@@ -14121,6 +14216,12 @@ severity: CodeClimateSeverity
  */
 fingerprint: string
 location: CodeClimateLocation
+/**
+ * Other source locations that provide evidence for the finding. GitLab's
+ * Code Quality widget ignores this standard CodeClimate field, but Fallow
+ * preserves it for review-comment rendering.
+ */
+other_locations?: CodeClimateLocation[]
 /**
  * Optional owner attribution used by grouped dead-code output.
  */
@@ -14142,13 +14243,17 @@ path: string
 lines: CodeClimateLines
 }
 /**
- * `lines.begin` for [`CodeClimateLocation`].
+ * Inclusive line range for [`CodeClimateLocation`].
  */
 export interface CodeClimateLines {
 /**
  * 1-based start line.
  */
 begin: number
+/**
+ * Inclusive 1-based end line. Omitted for point findings.
+ */
+end?: (number | null)
 }
 /**
  * Structured JSON error emitted on stdout when `--format json` is active and a