fallow 3.31.0 → 3.32.0

package/types/output-contract.d.ts

@@ -112,7 +112,7 @@ kind: "similar-code-review"
 /**
  * Schema projection for the audit envelope's exact version.
  */
-export type AuditSchemaVersion = 11
+export type AuditSchemaVersion = 12
 /**
  * Fallow CLI version that produced this envelope. Renders to the JSON wire as
  * a bare string (e.g. `"2.74.0"`).
@@ -204,7 +204,7 @@ export type TypeAwareAbstentionReason = ("no-project" | "ambiguous-project" | "b
 /**
  * Schema projection for the dead-code envelope's exact version.
  */
-export type CheckSchemaVersion = 9
+export type CheckSchemaVersion = 10
 /**
  * A suggested action attached to a finding in the JSON output. Each finding
  * carries an `actions` array; consumers (agents, IDE clients, CI bots) can
@@ -261,7 +261,7 @@ export type IssueAction = (FixAction | SuppressLineAction | SuppressFileAction |
  * Discriminant string for [`FixAction`]. Kebab-case per the JSON output
  * contract.
  */
-export type FixActionType = ("remove-export" | "delete-file" | "remove-dependency" | "move-dependency" | "remove-enum-member" | "remove-class-member" | "resolve-import" | "install-dependency" | "remove-duplicate" | "move-to-dev" | "move-to-prod" | "refactor-cycle" | "refactor-re-export-cycle" | "refactor-boundary" | "export-type" | "migrate-deprecated-export" | "remove-catalog-entry" | "remove-empty-catalog-group" | "update-catalog-reference" | "add-catalog-entry" | "remove-catalog-reference" | "remove-dependency-override" | "fix-dependency-override" | "resolve-policy-violation" | "move-to-server-module" | "split-mixed-barrel" | "hoist-directive" | "wire-server-action" | "provide-inject" | "use-load-data" | "render-component" | "use-component-prop" | "emit-component-event" | "wire-svelte-event" | "resolve-route-collision" | "resolve-dynamic-segment-name-conflict" | "add-suppression-reason" | "remove-stale-suppression")
+export type FixActionType = ("remove-export" | "delete-file" | "remove-dependency" | "move-dependency" | "remove-enum-member" | "remove-class-member" | "resolve-import" | "install-dependency" | "remove-duplicate" | "move-to-dev" | "move-to-prod" | "refactor-cycle" | "refactor-re-export-cycle" | "refactor-boundary" | "export-type" | "migrate-deprecated-export" | "remove-catalog-entry" | "remove-empty-catalog-group" | "update-catalog-reference" | "add-catalog-entry" | "remove-catalog-reference" | "remove-dependency-override" | "fix-dependency-override" | "resolve-policy-violation" | "move-to-server-module" | "split-mixed-barrel" | "hoist-directive" | "wire-server-action" | "provide-inject" | "use-load-data" | "render-component" | "use-component-prop" | "review-component-prop" | "emit-component-event" | "wire-svelte-event" | "resolve-route-collision" | "resolve-dynamic-segment-name-conflict" | "add-suppression-reason" | "remove-stale-suppression")
 /**
  * Singleton discriminant for [`SuppressLineAction`].
  */
@@ -380,7 +380,7 @@ export type ReExportCycleKind = ("multi-node" | "self-loop")
 /**
  * Which rule-pack rule kind produced a [`PolicyViolation`].
  */
-export type PolicyRuleKind = ("banned-call" | "banned-import" | "banned-effect" | "banned-export")
+export type PolicyRuleKind = ("banned-call" | "banned-import" | "banned-effect" | "banned-export" | "gdp-proof-producer")
 /**
  * Effective severity of a single [`PolicyViolation`]. Per-rule `severity`
  * overrides the `rules."policy-violation"` master; `off` rules emit nothing,
@@ -562,7 +562,7 @@ kind: "malformed-tsconfig"
 kind: "tsconfig-reference-dir-missing"
 } | {
 /**
- * `serde_yaml_ng` parse error text.
+ * YAML parse error text.
  */
 error: string
 kind: "malformed-pnpm-workspace-yaml"
@@ -602,8 +602,15 @@ kind: "bun-lockb-override-resolution-skipped"
 } | {
 kind: "bun-lock-override-resolution-skipped"
 } | {
+kind: "pnpm-lock-override-resolution-skipped"
+} | {
+kind: "npm-lock-override-resolution-skipped"
+} | {
 kind: "bun-resolutions-shadowed-by-overrides"
 } | {
+cause: PnpmWorkspaceOverridesIgnoredCause
+kind: "pnpm-workspace-overrides-ignored"
+} | {
 kind: "node-modules-missing"
 } | {
 kind: "boundaries-not-configured"
@@ -690,6 +697,13 @@ kind: "ownership-unavailable"
 error: string
 kind: "trend-snapshot-unreadable"
 } | {
+/**
+ * Why the groups have no baseline, as a kebab-case token:
+ * `snapshot-has-no-groups` or `grouped-by-mismatch`. The set is open.
+ */
+cause: string
+kind: "trend-group-baseline-unavailable"
+} | {
 /**
  * The plugin that read the config, as it labels itself:
  * `module-federation` for a standalone `module-federation.config.*`,
@@ -761,6 +775,11 @@ kind: "ignore-dependencies-glob-unmatched"
 pattern: string
 kind: "ignore-findings-pattern-unmatched"
 })
+/**
+ * Why the declared pnpm version ignores the `overrides` section of
+ * `pnpm-workspace.yaml`.
+ */
+export type PnpmWorkspaceOverridesIgnoredCause = ("package-json-overrides" | "pnpm-version")
 /**
  * Discriminant for [`CloneGroupAction::kind`]. Mirrors the action types
  * emitted by the legacy `build_clone_group_actions` walker.
@@ -839,6 +858,15 @@ export type CoverageInputFormat = ("istanbul" | "v8")
  * Whether CRAP findings in the report used one coverage-source kind or a mix.
  */
 export type CoverageSourceConsistency = ("uniform" | "mixed")
+/**
+ * One health section that a run produced.
+ *
+ * A section is in [`HealthReport::sections`] when the run computed it and
+ * the report carries its result, also when that result is empty. The value
+ * set is OPEN: a later release can add a section, so a consumer must accept
+ * a token that it does not know.
+ */
+export type HealthSection = ("complexity" | "vital-signs" | "score" | "file-scores" | "coverage-gaps" | "hotspots" | "targets" | "trend" | "runtime-coverage" | "css")
 /**
  * Lifecycle state for a configured threshold override.
  */
@@ -1202,6 +1230,12 @@ export type HealthSchemaVersion = 11
  * groups by GitLab CODEOWNERS `[Section]` header name.
  */
 export type GroupByMode = ("owner" | "directory" | "package" | "section")
+/**
+ * What the group trend compared, for one group.
+ *
+ * The value set is open: read an unknown value as "no trend for this group".
+ */
+export type GroupTrendStatus = ("compared" | "new_group" | "no_group_baseline")
 /**
  * Schema projection for the duplication envelope's CLI and programmatic
  * version lineages.
@@ -1318,7 +1352,7 @@ export type SecurityBlindSpotsSchemaVersion = "1"
 /**
  * Schema projection for the combined envelope's exact version.
  */
-export type CombinedSchemaVersion = 12
+export type CombinedSchemaVersion = 13
 /**
  * Schema projection for the feature-flags envelope's exact version.
  */
@@ -1363,7 +1397,7 @@ export type VendorFlagState = ("on" | "off" | "rolled_out" | "archived" | "exper
  * Independently-versioned wire-version newtype for the brief envelope.
  * Serializes as the integer `REVIEW_BRIEF_SCHEMA_VERSION`.
  */
-export type ReviewBriefSchemaVersion = 11
+export type ReviewBriefSchemaVersion = 12
 /**
  * The exactly-three shippable decision categories (the SOLID-3). No cut category
  * (abstraction / deletion / convention / irreversibility) is representable: this
@@ -1687,7 +1721,8 @@ duplication_demoted: number
  * gate and leaves the object absent.
  *
  * The names this build can emit are `error-severity-findings`, `regression`,
- * `stale-baseline`, `baseline-growth`, `duplication-threshold`, `health-min-score`,
+ * `stale-baseline`, `baseline-growth`, `duplication-threshold`,
+ * `duplication-findings`, `health-min-score`,
  * `health-min-severity`, `health-findings`, `health-coverage-gaps`,
  * `health-runtime-coverage`, `security`, `security-advisory`, `audit-verdict`,
  * `type-aware-require` and `parse-error`. The set is OPEN: a name a consumer does not
@@ -1725,7 +1760,9 @@ enforced: boolean
 /**
  * The measured value the gate compared, when there is one: the duplication
  * percentage, the health score, the number of findings at or above the
- * severity floor, or the number of files in `files`. Whole numbers are
+ * severity floor, the number of `error` findings of `health-findings` and
+ * of `error-severity-findings`, or
+ * the number of files in `files`. Whole numbers are
  * carried as JSON numbers, so a count of three reads as `3.0`. Absent for
  * gates that compare no number.
  */
@@ -1738,7 +1775,9 @@ threshold?: (number | null)
 /**
  * How the limit was spelled, for a gate whose `threshold` number does not
  * carry its own unit. `health-min-severity` sets it to the severity floor
- * (`moderate`, `high` or `critical`); `regression` sets it to the
+ * (`moderate`, `high` or `critical`); `health-findings` and
+ * `error-severity-findings` set it to `error`, the rule severity they
+ * count; `regression` sets it to the
  * tolerance as the user wrote it (`"50%"` or `"5"`), because `threshold`
  * there is the allowance in issues and the percentage would otherwise be
  * unrecoverable on the grouped envelope, which carries no `regression`
@@ -2976,6 +3015,10 @@ dynamic_segment_name_conflicts?: DynamicSegmentNameConflictFinding[]
  * array natively. Default severity is `warn`.
  */
 unused_component_props?: UnusedComponentPropFinding[]
+/**
+ * Used optional component inputs absent from inspected reachable callers. Off by default.
+ */
+absent_component_props?: AbsentComponentPropFinding[]
 /**
  * Vue `<script setup>` `defineEmits` events emitted nowhere in their own SFC
  * (no `emit('<name>')` call). Wrapped in [`UnusedComponentEmitFinding`] so
@@ -3252,6 +3295,10 @@ unrendered_components?: number
  * Vue, Svelte, or React props referenced nowhere inside their own component.
  */
 unused_component_props?: number
+/**
+ * Optional consumed props omitted by known reachable callers, for manual review.
+ */
+absent_component_props?: number
 /**
  * Vue `<script setup>` emits emitted nowhere inside their own SFC.
  */
@@ -3942,6 +3989,12 @@ line: number
  * Workspace roots that import this package even though the declaring workspace does not.
  */
 used_in_workspaces?: string[]
+/**
+ * Workspace roots whose package.json declares this package for the files
+ * that import it. Only a root finding fills this field: these imports use
+ * the nearer workspace declaration, so the root declaration stays unused.
+ */
+declared_and_imported_in?: string[]
 /**
  * Stable id of this finding: `dc1:<rule>:<16 hex digits>`, with a
  * `~<k>` suffix when several findings of one type share an identity.
@@ -4003,6 +4056,12 @@ line: number
  * Workspace roots that import this package even though the declaring workspace does not.
  */
 used_in_workspaces?: string[]
+/**
+ * Workspace roots whose package.json declares this package for the files
+ * that import it. Only a root finding fills this field: these imports use
+ * the nearer workspace declaration, so the root declaration stays unused.
+ */
+declared_and_imported_in?: string[]
 /**
  * Stable id of this finding: `dc1:<rule>:<16 hex digits>`, with a
  * `~<k>` suffix when several findings of one type share an identity.
@@ -4064,6 +4123,12 @@ line: number
  * Workspace roots that import this package even though the declaring workspace does not.
  */
 used_in_workspaces?: string[]
+/**
+ * Workspace roots whose package.json declares this package for the files
+ * that import it. Only a root finding fills this field: these imports use
+ * the nearer workspace declaration, so the root declaration stays unused.
+ */
+declared_and_imported_in?: string[]
 /**
  * Stable id of this finding: `dc1:<rule>:<16 hex digits>`, with a
  * `~<k>` suffix when several findings of one type share an identity.
@@ -5043,7 +5108,8 @@ kind: PolicyRuleKind
  * What matched: the written callee path for `banned-call` (e.g.
  * `cp.exec`), the raw import specifier for `banned-import` (e.g.
  * `moment/locale/nl`), `<effect>: <callee>` for `banned-effect`, or the
- * exported name for `banned-export`.
+ * exported name for `banned-export`. For `gdp-proof-producer`, the canonical
+ * factory with its JSON-quoted literal label or `...` for a dynamic label.
  */
 matched: string
 severity: PolicyViolationSeverity
@@ -5866,6 +5932,92 @@ introduced?: (AuditIntroduced | null)
  */
 effective_severity?: (EffectiveSeverity | null)
 }
+/**
+ * Wire-shape envelope for an [`AbsentComponentProp`] finding. There is no safe
+ * auto-fix: removing a declared prop is judgement-bearing (the prop may be part
+ * of a deliberately-stable public component API). Actions are manual
+ * remediation guidance plus a line-level suppress at the prop declaration.
+ */
+export interface AbsentComponentPropFinding {
+/**
+ * Source path of the input declaration.
+ */
+path: string
+/**
+ * Semantic declaration name, or SFC filename stem.
+ */
+component_name: string
+/**
+ * Public framework token.
+ */
+framework: string
+/**
+ * Public optional input name.
+ */
+prop_name: string
+/**
+ * 1-based declaration line.
+ */
+line: number
+/**
+ * 0-based declaration byte column.
+ */
+col: number
+/**
+ * Whether omission has a declared default.
+ */
+has_default: boolean
+/**
+ * Every inspected reachable caller, deterministically ordered.
+ */
+inspected_call_sites: ComponentPropCallSite[]
+/**
+ * Manual-review meaning and limits of static evidence.
+ */
+explanation: string
+/**
+ * Stable id of this finding: `dc1:<rule>:<16 hex digits>`, with a
+ * `~<k>` suffix when several findings of one type share an identity.
+ * Line and column are not inputs, so the id survives line shifts,
+ * reformats and reorders. A rename of the file or the symbol gives a
+ * new id. Absent in output from older versions.
+ */
+finding_id?: (string | null)
+/**
+ * Suggested next steps. Always emitted (possibly empty for
+ * forward-compat).
+ */
+actions: IssueAction[]
+/**
+ * Set by the audit pass when this finding is introduced relative to
+ * the merge-base.
+ */
+introduced?: (AuditIntroduced | null)
+/**
+ * Gate severity of this finding after `rules` and `overrides[].rules`
+ * resolve for its path. CI formats read it for the annotation, SARIF
+ * and CodeClimate level. Absent in output from older versions. Not
+ * part of the finding identity, baseline keys or fingerprints.
+ */
+effective_severity?: (EffectiveSeverity | null)
+}
+/**
+ * One inspected reachable component invocation.
+ */
+export interface ComponentPropCallSite {
+/**
+ * Caller source path.
+ */
+path: string
+/**
+ * 1-based opening-tag line.
+ */
+line: number
+/**
+ * 0-based original-source byte column.
+ */
+col: number
+}
 /**
  * Wire-shape envelope for an [`UnusedComponentEmit`] finding. There is no safe
  * auto-fix: removing a declared emit is judgement-bearing (the event may be
@@ -6486,6 +6638,18 @@ stale_entries: number
  * when every entry went unmatched.
  */
 current_findings: number
+/**
+ * Health only: the number of functions above a complexity threshold that
+ * the baseline does not accept. This is a count of functions, like
+ * `summary.functions_above_threshold`, not a count of baseline entries,
+ * and it is the value before `--top`. A run that does not list the
+ * complexity findings (for example `--score`) still reports it, so a
+ * reader can tell the new functions from the accepted ones.
+ *
+ * `dead-code` and `dupes` do not emit it. An envelope from a fallow
+ * version before this member does not carry it either.
+ */
+remaining_findings?: (number | null)
 /**
  * True when this run analyzed only part of the project, so a whole-project
  * baseline matches less of it for reasons that are not rot. The channels
@@ -6701,7 +6865,7 @@ reason?: (string | null)
  * all of it applied, which is a different and false claim.
  *
  * The names this build can emit are `changed-since`, `diff-filter`,
- * `package-baselines` and `sarif-file`. The reasons are `git-missing`,
+ * `package-baselines`, `sarif-file` and `group-filter`. The reasons are `git-missing`,
  * `not-a-repository`, `git-failed` and `invalid-ref` for `changed-since`,
  * `unknown-workspace`, `git-missing`, `not-a-repository` and `git-failed`
  * for `package-baselines`, `oversize`,
@@ -6719,8 +6883,9 @@ reason?: (string | null)
  * whole object narrows the report tells its reader an unwritten SARIF file
  * widened the analysis, which is what `affects` exists to prevent.
  *
- * `scope_size` is emitted for `diff-filter`, in added lines, and for
- * `changed-since`, in changed files that the run analyzed. `package-baselines`
+ * `scope_size` is emitted for `diff-filter`, in added lines, for
+ * `changed-since`, in changed files that the run analyzed, and for
+ * `group-filter`, in groups that the run kept. `package-baselines`
  * and `sarif-file` measure no scope; the applied package refs travel in
  * `package_baselines`. A consumer reads the unit off the name, so a name that
  * starts to measure its own scope in a later release needs no change here.
@@ -6749,7 +6914,8 @@ affects: RequestEffect
  * `--diff-stdin`, `$FALLOW_DIFF_FILE build/pr.diff`, or
  * `diffFile pr.diff` for the programmatic option) for `diff-filter`,
  * `workspaces.changedSince` for `package-baselines`, the target path for
- * `sarif-file`. Echoed rather than normalised, so a
+ * `sarif-file`, the comma-joined selector patterns for `group-filter`.
+ * Echoed rather than normalised, so a
  * consumer must not join it to the project root the way it joins every
  * other path-shaped field.
  */
@@ -6766,7 +6932,7 @@ requested: string
  * rule dropped does not count, so a change to a README only gives `0`. A
  * combined run counts a file that any of its analyses kept, because a
  * per-analysis `production` setting can give its analyses different
- * files.
+ * files. `group-filter` counts the groups that the run kept.
  * Read the unit off the name the entry is keyed under, never across names,
  * and read an absent member as "not measured" rather than as zero.
  *
@@ -6983,6 +7149,15 @@ end_col: number
  * wants the source reads it from the file.
  */
 fragment?: string
+/**
+ * Whether the file path is a symlink, or lies under a symlinked
+ * directory, inside the project root. Omitted when `false`.
+ *
+ * A clone with a symlinked instance can be the same file under two
+ * paths, not copied code. `duplicates.ignoreSymlinks` (or
+ * `fallow dupes --ignore-symlinks`) removes these instances.
+ */
+is_symlink?: boolean
 }
 /**
  * Per-action wire shape attached to each `CloneGroupFinding` and
@@ -7197,6 +7372,15 @@ export interface HealthReport {
  */
 findings: HealthFinding[]
 summary: HealthSummary
+/**
+ * The sections that this run produced, in a fixed order. A renderer
+ * reads it to tell an empty section from a section that the run did not
+ * produce: `findings` is the complexity list only when `complexity` is
+ * in this array. The value set is OPEN (see [`HealthSection`]). Absent
+ * in an envelope from a fallow version before this member, and on a
+ * report that no health run built.
+ */
+sections?: (HealthSection[] | null)
 /**
  * Configured threshold override states. Entries are emitted for active
  * exceptions, stale exceptions, and full-run no-match cleanup hints.
@@ -9633,6 +9817,11 @@ score?: (number | null)
  * Letter grade from the snapshot.
  */
 grade?: (string | null)
+/**
+ * Formula used for the stored score; absent on legacy snapshots.
+ * A score delta is emitted only when this matches the current score formula.
+ */
+score_formula_version?: (number | null)
 /**
  * Coverage model used for CRAP computation in this snapshot.
  */
@@ -11460,17 +11649,26 @@ imported_by: string[]
  */
 type_only_imported_by: string[]
 /**
- * Whether the dependency is invoked from package.json scripts or CI configs.
+ * Whether the dependency is invoked from package.json scripts, CI configs
+ * or git hooks.
  */
 used_in_scripts: boolean
 /**
- * Whether the dependency is used at all.
+ * Whether the dependency is used at all: imported, invoked from scripts,
+ * or listed as a peer by a used package (`peer_of`).
  */
 is_used: boolean
 /**
  * Total import count.
  */
 import_count: number
+/**
+ * Used packages that list this dependency in their installed
+ * `peerDependencies`, required or optional, sorted by name. The
+ * unused-dependency check credits such a peer, because the package that
+ * lists it loads it at runtime. Absent when no used package lists it.
+ */
+peer_of?: string[]
 /**
  * The configs that declare this name as a Module Federation remote alias
  * under `remotes`, one per config. A remote alias is provided by a
@@ -11478,6 +11676,58 @@ import_count: number
  * Federation config declares the name (issue #2796).
  */
 sources?: TraceSource[]
+/**
+ * Why the unused devDependency check credits the dependency as tooling
+ * when no file imports it and no script, CI workflow or git hook runs it.
+ * When present, `is_used` is `true`. Absent otherwise.
+ */
+tooling_credit?: (ToolingCredit | null)
+/**
+ * The manifests that the unused-dependency check flags for this name,
+ * relative to the project root and sorted. The check reads each
+ * declaring manifest on its own. An import credits the nearest manifest
+ * that installs the package, so a name that one workspace uses can still
+ * be unused in the root manifest or in another workspace. Absent when no
+ * manifest is flagged.
+ */
+unused_in?: string[]
+}
+/**
+ * Why the unused devDependency check counts a dependency as used tooling
+ * although no source file imports it.
+ */
+export interface ToolingCredit {
+/**
+ * The evidence: `plugin-config` when the plugin that declares the
+ * dependency found its own config file, `plugin-reference` when a
+ * package.json script, a CI workflow or a git hook runs one of that
+ * plugin's packages, `ambient-types` for a type package that declares
+ * globals, `types-target` when the project declares or imports the
+ * package that a `@types/` package types, `types-config` when a config
+ * file, such as a tsconfig `types` entry, names the type package,
+ * `known-tooling` for a library from the tooling catalogue,
+ * `known-tooling-config` when a command-line tool from the catalogue has
+ * its own config file, and `own-peer` when the same manifest lists the
+ * devDependency in `peerDependencies`. The set is open.
+ */
+reason: string
+/**
+ * The plugin that declares the dependency as tooling.
+ */
+plugin?: (string | null)
+/**
+ * The config file found, relative to the project root, for
+ * `plugin-config` and `known-tooling-config`. A `package.json` path when
+ * the config is a package.json key. For `own-peer`, the manifest that
+ * lists the dependency.
+ */
+config?: (string | null)
+/**
+ * The package that a script, CI workflow or git hook runs, for
+ * `plugin-reference`, or the package that a `@types/` package types,
+ * for `types-target`.
+ */
+reference?: (string | null)
 }
 /**
  * Result of tracing a clone: all groups containing the code at a source
@@ -12467,6 +12717,15 @@ elapsed_ms: ElapsedMs
  */
 findings: HealthFinding[]
 summary: HealthSummary
+/**
+ * The sections that this run produced, in a fixed order. A renderer
+ * reads it to tell an empty section from a section that the run did not
+ * produce: `findings` is the complexity list only when `complexity` is
+ * in this array. The value set is OPEN (see [`HealthSection`]). Absent
+ * in an envelope from a fallow version before this member, and on a
+ * report that no health run built.
+ */
+sections?: (HealthSection[] | null)
 /**
  * Configured threshold override states. Entries are emitted for active
  * exceptions, stale exceptions, and full-run no-match cleanup hints.
@@ -12591,6 +12850,12 @@ grouped_by?: (GroupByMode | null)
  * Per-bucket recomputed metrics; present only in grouped output.
  */
 groups?: (HealthGroup[] | null)
+/**
+ * The `--group` selector patterns, as given, when the run kept only some
+ * groups. A group that is not in `groups` was filtered out by this
+ * selector. The project-level sections are not filtered.
+ */
+group_filter?: (string[] | null)
 /**
  * The verdict of every gate this run evaluated, keyed by name. The CLI
  * always emits it, with the command's default exit rule in it also when
@@ -12640,6 +12905,11 @@ next_steps?: NextStep[]
  * a single invocation. `files_analyzed` and `functions_above_threshold`
  * summarise the subset for parity with the project-level
  * project-level health summary.
+ *
+ * A group carries a per-file list (`findings`, `file_scores`, `hotspots`,
+ * `large_functions`, `targets`) only when the project report shows the same
+ * list. A `--score` run keeps the score and the counts of each group and
+ * omits the lists.
  */
 export interface HealthGroup {
 /**
@@ -12664,9 +12934,37 @@ files_analyzed: number
  * Number of findings in this group, mirroring the project-level
  * `summary.functions_above_threshold` semantics post-baseline /
  * post-`--top` truncation. When `--top` was supplied this reflects the
- * rendered finding count, not the un-truncated total.
+ * rendered finding count of the group, not the un-truncated total.
  */
 functions_above_threshold: number
+/**
+ * Number of critical-severity findings in this group, after the baseline
+ * filter and before `--top`. The project `summary.severity_critical_count`
+ * counts before the baseline filter, so with `--baseline` the group
+ * counts can add up to less.
+ */
+severity_critical_count: number
+/**
+ * Number of high-severity findings in this group, after the baseline
+ * filter and before `--top`. The project `summary.severity_high_count`
+ * counts before the baseline filter, so with `--baseline` the group
+ * counts can add up to less.
+ */
+severity_high_count: number
+/**
+ * Number of moderate-severity findings in this group, after the baseline
+ * filter and before `--top`. The project `summary.severity_moderate_count`
+ * counts before the baseline filter, so with `--baseline` the group
+ * counts can add up to less.
+ */
+severity_moderate_count: number
+/**
+ * Number of ranked hotspot entries in this group, before `--top`. This
+ * is the length of the group's ranked hotspot list. It is not
+ * `vital_signs.hotspot_count`, which counts only the files with a
+ * hotspot score of 50 or more and feeds the health score.
+ */
+hotspot_count: number
 /**
  * Whether CRAP findings in this group share a single coverage-source kind
  * (`uniform`) or combine Istanbul / estimated / inherited sources
@@ -12680,9 +12978,24 @@ coverage_source_consistency?: (CoverageSourceConsistency | null)
 vital_signs?: (VitalSigns | null)
 /**
  * Per-group health score recomputed from the per-group vital signs. Absent
- * when --score was not requested.
+ * when --score was not requested. The duplication penalty counts each
+ * clone group with two or more instances in total and one or more in
+ * this group, and counts only the lines of the instances in this group.
+ * A clone that spans two groups thus lowers the score of each group.
+ * `dupes --group-by` assigns each clone group to one owner instead.
  */
 health_score?: (HealthScore | null)
+/**
+ * Trend of this group against the same group in the baseline snapshot.
+ * Present only when `--trend` or `--trend-from` was requested and the
+ * baseline holds this group with the same `grouped_by` mode.
+ */
+trend?: (HealthTrend | null)
+/**
+ * Why `trend` is present or absent. Present only when a trend was
+ * requested and a baseline snapshot was loaded.
+ */
+trend_status?: (GroupTrendStatus | null)
 /**
  * Findings restricted to files in this group. Each entry is the typed
  * [`HealthFinding`] wrapper around a
@@ -12797,9 +13110,10 @@ baseline_staleness?: (BaselineStaleness | null)
 /**
  * The verdict of every gate this run armed, keyed by name, absent when
  * it armed none. `dupes` has no default exit rule: a run with no armed
- * gate always exits 0, so an absent object means that the run passed. A
- * gate fails the build when `status` is `fail` AND `enforced` is true.
- * See [`crate::GateOutcomes`].
+ * gate always exits 0, so an absent object means that the run passed.
+ * `--fail-on-issues` and `--ci` arm `duplication-findings`, which fails
+ * on any clone group. A gate fails the build when `status` is `fail` AND
+ * `enforced` is true. See [`crate::GateOutcomes`].
  */
 gate_outcomes?: (GateOutcomes | null)
 /**
@@ -12947,6 +13261,15 @@ end_col: number
  * wants the source reads it from the file.
  */
 fragment?: string
+/**
+ * Whether the file path is a symlink, or lies under a symlinked
+ * directory, inside the project root. Omitted when `false`.
+ *
+ * A clone with a symlinked instance can be the same file under two
+ * paths, not copied code. `duplicates.ignoreSymlinks` (or
+ * `fallow dupes --ignore-symlinks`) removes these instances.
+ */
+is_symlink?: boolean
 /**
  * Resolver key for this specific instance (per-instance, not the
  * group-level largest-owner).
@@ -13320,6 +13643,10 @@ dynamic_segment_name_conflicts?: DynamicSegmentNameConflictFinding[]
  * array natively. Default severity is `warn`.
  */
 unused_component_props?: UnusedComponentPropFinding[]
+/**
+ * Used optional component inputs absent from inspected reachable callers. Off by default.
+ */
+absent_component_props?: AbsentComponentPropFinding[]
 /**
  * Vue `<script setup>` `defineEmits` events emitted nowhere in their own SFC
  * (no `emit('<name>')` call). Wrapped in [`UnusedComponentEmitFinding`] so
@@ -14660,7 +14987,8 @@ elapsed_ms: ElapsedMs
  * `--fail-on-issues` or `--ci`, the machine formats of the combined run
  * exit 0 for findings, so most entries have `enforced: false`. With one of
  * these flags, the findings rules and `duplication-threshold` are
- * `enforced`, and every format exits 1 when one fails. For the default
+ * `enforced`, the dupes section adds an enforced `duplication-findings`
+ * entry, and every format exits 1 when one fails. For the default
  * exit rules (`error-severity-findings`,
  * `health-findings`), `status` gives the verdict of the human run. An
  * advisory entry can report `fail` without a failure of the human run: an