flowlint 0.6.2 → 0.7.0

package/dist/cli.js

@@ -965,7 +965,7 @@ var require_command = __commonJS({
     "use strict";
     var EventEmitter2 = require("events").EventEmitter;
     var childProcess = require("child_process");
-    var path4 = require("path");
+    var path5 = require("path");
     var fs3 = require("fs");
     var process2 = require("process");
     var { Argument: Argument2, humanReadableArgName } = require_argument();
@@ -1898,9 +1898,9 @@ Expecting one of '${allowedValues.join("', '")}'`);
         let launchWithNode = false;
         const sourceExt = [".js", ".ts", ".tsx", ".mjs", ".cjs"];
         function findFile(baseDir, baseName) {
-          const localBin = path4.resolve(baseDir, baseName);
+          const localBin = path5.resolve(baseDir, baseName);
           if (fs3.existsSync(localBin)) return localBin;
-          if (sourceExt.includes(path4.extname(baseName))) return void 0;
+          if (sourceExt.includes(path5.extname(baseName))) return void 0;
           const foundExt = sourceExt.find(
             (ext2) => fs3.existsSync(`${localBin}${ext2}`)
           );
@@ -1918,17 +1918,17 @@ Expecting one of '${allowedValues.join("', '")}'`);
           } catch (err) {
             resolvedScriptPath = this._scriptPath;
           }
-          executableDir = path4.resolve(
-            path4.dirname(resolvedScriptPath),
+          executableDir = path5.resolve(
+            path5.dirname(resolvedScriptPath),
             executableDir
           );
         }
         if (executableDir) {
           let localFile = findFile(executableDir, executableFile);
           if (!localFile && !subcommand._executableFile && this._scriptPath) {
-            const legacyName = path4.basename(
+            const legacyName = path5.basename(
               this._scriptPath,
-              path4.extname(this._scriptPath)
+              path5.extname(this._scriptPath)
             );
             if (legacyName !== this._name) {
               localFile = findFile(
@@ -1939,7 +1939,7 @@ Expecting one of '${allowedValues.join("', '")}'`);
           }
           executableFile = localFile || executableFile;
         }
-        launchWithNode = sourceExt.includes(path4.extname(executableFile));
+        launchWithNode = sourceExt.includes(path5.extname(executableFile));
         let proc2;
         if (process2.platform !== "win32") {
           if (launchWithNode) {
@@ -2779,7 +2779,7 @@ Expecting one of '${allowedValues.join("', '")}'`);
        * @return {Command}
        */
       nameFromFilename(filename) {
-        this._name = path4.basename(filename, path4.extname(filename));
+        this._name = path5.basename(filename, path5.extname(filename));
         return this;
       }
       /**
@@ -2793,9 +2793,9 @@ Expecting one of '${allowedValues.join("', '")}'`);
        * @param {string} [path]
        * @return {(string|null|Command)}
        */
-      executableDir(path5) {
-        if (path5 === void 0) return this._executableDir;
-        this._executableDir = path5;
+      executableDir(path6) {
+        if (path6 === void 0) return this._executableDir;
+        this._executableDir = path6;
         return this;
       }
       /**
@@ -3385,17 +3385,17 @@ var require_visit = __commonJS({
     visit.BREAK = BREAK;
     visit.SKIP = SKIP;
     visit.REMOVE = REMOVE;
-    function visit_(key, node, visitor, path4) {
-      const ctrl = callVisitor(key, node, visitor, path4);
+    function visit_(key, node, visitor, path5) {
+      const ctrl = callVisitor(key, node, visitor, path5);
       if (identity.isNode(ctrl) || identity.isPair(ctrl)) {
-        replaceNode(key, path4, ctrl);
-        return visit_(key, ctrl, visitor, path4);
+        replaceNode(key, path5, ctrl);
+        return visit_(key, ctrl, visitor, path5);
       }
       if (typeof ctrl !== "symbol") {
         if (identity.isCollection(node)) {
-          path4 = Object.freeze(path4.concat(node));
+          path5 = Object.freeze(path5.concat(node));
           for (let i = 0; i < node.items.length; ++i) {
-            const ci = visit_(i, node.items[i], visitor, path4);
+            const ci = visit_(i, node.items[i], visitor, path5);
             if (typeof ci === "number")
               i = ci - 1;
             else if (ci === BREAK)
@@ -3406,13 +3406,13 @@ var require_visit = __commonJS({
             }
           }
         } else if (identity.isPair(node)) {
-          path4 = Object.freeze(path4.concat(node));
-          const ck = visit_("key", node.key, visitor, path4);
+          path5 = Object.freeze(path5.concat(node));
+          const ck = visit_("key", node.key, visitor, path5);
           if (ck === BREAK)
             return BREAK;
           else if (ck === REMOVE)
             node.key = null;
-          const cv = visit_("value", node.value, visitor, path4);
+          const cv = visit_("value", node.value, visitor, path5);
           if (cv === BREAK)
             return BREAK;
           else if (cv === REMOVE)
@@ -3433,17 +3433,17 @@ var require_visit = __commonJS({
     visitAsync.BREAK = BREAK;
     visitAsync.SKIP = SKIP;
     visitAsync.REMOVE = REMOVE;
-    async function visitAsync_(key, node, visitor, path4) {
-      const ctrl = await callVisitor(key, node, visitor, path4);
+    async function visitAsync_(key, node, visitor, path5) {
+      const ctrl = await callVisitor(key, node, visitor, path5);
       if (identity.isNode(ctrl) || identity.isPair(ctrl)) {
-        replaceNode(key, path4, ctrl);
-        return visitAsync_(key, ctrl, visitor, path4);
+        replaceNode(key, path5, ctrl);
+        return visitAsync_(key, ctrl, visitor, path5);
       }
       if (typeof ctrl !== "symbol") {
         if (identity.isCollection(node)) {
-          path4 = Object.freeze(path4.concat(node));
+          path5 = Object.freeze(path5.concat(node));
           for (let i = 0; i < node.items.length; ++i) {
-            const ci = await visitAsync_(i, node.items[i], visitor, path4);
+            const ci = await visitAsync_(i, node.items[i], visitor, path5);
             if (typeof ci === "number")
               i = ci - 1;
             else if (ci === BREAK)
@@ -3454,13 +3454,13 @@ var require_visit = __commonJS({
             }
           }
         } else if (identity.isPair(node)) {
-          path4 = Object.freeze(path4.concat(node));
-          const ck = await visitAsync_("key", node.key, visitor, path4);
+          path5 = Object.freeze(path5.concat(node));
+          const ck = await visitAsync_("key", node.key, visitor, path5);
           if (ck === BREAK)
             return BREAK;
           else if (ck === REMOVE)
             node.key = null;
-          const cv = await visitAsync_("value", node.value, visitor, path4);
+          const cv = await visitAsync_("value", node.value, visitor, path5);
           if (cv === BREAK)
             return BREAK;
           else if (cv === REMOVE)
@@ -3487,23 +3487,23 @@ var require_visit = __commonJS({
       }
       return visitor;
     }
-    function callVisitor(key, node, visitor, path4) {
+    function callVisitor(key, node, visitor, path5) {
       if (typeof visitor === "function")
-        return visitor(key, node, path4);
+        return visitor(key, node, path5);
       if (identity.isMap(node))
-        return visitor.Map?.(key, node, path4);
+        return visitor.Map?.(key, node, path5);
       if (identity.isSeq(node))
-        return visitor.Seq?.(key, node, path4);
+        return visitor.Seq?.(key, node, path5);
       if (identity.isPair(node))
-        return visitor.Pair?.(key, node, path4);
+        return visitor.Pair?.(key, node, path5);
       if (identity.isScalar(node))
-        return visitor.Scalar?.(key, node, path4);
+        return visitor.Scalar?.(key, node, path5);
       if (identity.isAlias(node))
-        return visitor.Alias?.(key, node, path4);
+        return visitor.Alias?.(key, node, path5);
       return void 0;
     }
-    function replaceNode(key, path4, node) {
-      const parent = path4[path4.length - 1];
+    function replaceNode(key, path5, node) {
+      const parent = path5[path5.length - 1];
       if (identity.isCollection(parent)) {
         parent.items[key] = node;
       } else if (identity.isPair(parent)) {
@@ -4111,10 +4111,10 @@ var require_Collection = __commonJS({
     var createNode = require_createNode();
     var identity = require_identity();
     var Node = require_Node();
-    function collectionFromPath(schema, path4, value) {
+    function collectionFromPath(schema, path5, value) {
       let v = value;
-      for (let i = path4.length - 1; i >= 0; --i) {
-        const k = path4[i];
+      for (let i = path5.length - 1; i >= 0; --i) {
+        const k = path5[i];
         if (typeof k === "number" && Number.isInteger(k) && k >= 0) {
           const a = [];
           a[k] = v;
@@ -4133,7 +4133,7 @@ var require_Collection = __commonJS({
         sourceObjects: /* @__PURE__ */ new Map()
       });
     }
-    var isEmptyPath = (path4) => path4 == null || typeof path4 === "object" && !!path4[Symbol.iterator]().next().done;
+    var isEmptyPath = (path5) => path5 == null || typeof path5 === "object" && !!path5[Symbol.iterator]().next().done;
     var Collection = class extends Node.NodeBase {
       constructor(type, schema) {
         super(type);
@@ -4163,11 +4163,11 @@ var require_Collection = __commonJS({
        * be a Pair instance or a `{ key, value }` object, which may not have a key
        * that already exists in the map.
        */
-      addIn(path4, value) {
-        if (isEmptyPath(path4))
+      addIn(path5, value) {
+        if (isEmptyPath(path5))
           this.add(value);
         else {
-          const [key, ...rest] = path4;
+          const [key, ...rest] = path5;
           const node = this.get(key, true);
           if (identity.isCollection(node))
             node.addIn(rest, value);
@@ -4181,8 +4181,8 @@ var require_Collection = __commonJS({
        * Removes a value from the collection.
        * @returns `true` if the item was found and removed.
        */
-      deleteIn(path4) {
-        const [key, ...rest] = path4;
+      deleteIn(path5) {
+        const [key, ...rest] = path5;
         if (rest.length === 0)
           return this.delete(key);
         const node = this.get(key, true);
@@ -4196,8 +4196,8 @@ var require_Collection = __commonJS({
        * scalar values from their surrounding node; to disable set `keepScalar` to
        * `true` (collections are always returned intact).
        */
-      getIn(path4, keepScalar) {
-        const [key, ...rest] = path4;
+      getIn(path5, keepScalar) {
+        const [key, ...rest] = path5;
         const node = this.get(key, true);
         if (rest.length === 0)
           return !keepScalar && identity.isScalar(node) ? node.value : node;
@@ -4215,8 +4215,8 @@ var require_Collection = __commonJS({
       /**
        * Checks if the collection includes a value with the key `key`.
        */
-      hasIn(path4) {
-        const [key, ...rest] = path4;
+      hasIn(path5) {
+        const [key, ...rest] = path5;
         if (rest.length === 0)
           return this.has(key);
         const node = this.get(key, true);
@@ -4226,8 +4226,8 @@ var require_Collection = __commonJS({
        * Sets a value in this collection. For `!!set`, `value` needs to be a
        * boolean to add/remove the item from the set.
        */
-      setIn(path4, value) {
-        const [key, ...rest] = path4;
+      setIn(path5, value) {
+        const [key, ...rest] = path5;
         if (rest.length === 0) {
           this.set(key, value);
         } else {
@@ -6731,9 +6731,9 @@ var require_Document = __commonJS({
           this.contents.add(value);
       }
       /** Adds a value to the document. */
-      addIn(path4, value) {
+      addIn(path5, value) {
         if (assertCollection(this.contents))
-          this.contents.addIn(path4, value);
+          this.contents.addIn(path5, value);
       }
       /**
        * Create a new `Alias` node, ensuring that the target `node` has the required anchor.
@@ -6808,14 +6808,14 @@ var require_Document = __commonJS({
        * Removes a value from the document.
        * @returns `true` if the item was found and removed.
        */
-      deleteIn(path4) {
-        if (Collection.isEmptyPath(path4)) {
+      deleteIn(path5) {
+        if (Collection.isEmptyPath(path5)) {
           if (this.contents == null)
             return false;
           this.contents = null;
           return true;
         }
-        return assertCollection(this.contents) ? this.contents.deleteIn(path4) : false;
+        return assertCollection(this.contents) ? this.contents.deleteIn(path5) : false;
       }
       /**
        * Returns item at `key`, or `undefined` if not found. By default unwraps
@@ -6830,10 +6830,10 @@ var require_Document = __commonJS({
        * scalar values from their surrounding node; to disable set `keepScalar` to
        * `true` (collections are always returned intact).
        */
-      getIn(path4, keepScalar) {
-        if (Collection.isEmptyPath(path4))
+      getIn(path5, keepScalar) {
+        if (Collection.isEmptyPath(path5))
           return !keepScalar && identity.isScalar(this.contents) ? this.contents.value : this.contents;
-        return identity.isCollection(this.contents) ? this.contents.getIn(path4, keepScalar) : void 0;
+        return identity.isCollection(this.contents) ? this.contents.getIn(path5, keepScalar) : void 0;
       }
       /**
        * Checks if the document includes a value with the key `key`.
@@ -6844,10 +6844,10 @@ var require_Document = __commonJS({
       /**
        * Checks if the document includes a value at `path`.
        */
-      hasIn(path4) {
-        if (Collection.isEmptyPath(path4))
+      hasIn(path5) {
+        if (Collection.isEmptyPath(path5))
           return this.contents !== void 0;
-        return identity.isCollection(this.contents) ? this.contents.hasIn(path4) : false;
+        return identity.isCollection(this.contents) ? this.contents.hasIn(path5) : false;
       }
       /**
        * Sets a value in this document. For `!!set`, `value` needs to be a
@@ -6864,13 +6864,13 @@ var require_Document = __commonJS({
        * Sets a value in this document. For `!!set`, `value` needs to be a
        * boolean to add/remove the item from the set.
        */
-      setIn(path4, value) {
-        if (Collection.isEmptyPath(path4)) {
+      setIn(path5, value) {
+        if (Collection.isEmptyPath(path5)) {
           this.contents = value;
         } else if (this.contents == null) {
-          this.contents = Collection.collectionFromPath(this.schema, Array.from(path4), value);
+          this.contents = Collection.collectionFromPath(this.schema, Array.from(path5), value);
         } else if (assertCollection(this.contents)) {
-          this.contents.setIn(path4, value);
+          this.contents.setIn(path5, value);
         }
       }
       /**
@@ -8822,9 +8822,9 @@ var require_cst_visit = __commonJS({
     visit.BREAK = BREAK;
     visit.SKIP = SKIP;
     visit.REMOVE = REMOVE;
-    visit.itemAtPath = (cst, path4) => {
+    visit.itemAtPath = (cst, path5) => {
       let item = cst;
-      for (const [field, index] of path4) {
+      for (const [field, index] of path5) {
         const tok = item?.[field];
         if (tok && "items" in tok) {
           item = tok.items[index];
@@ -8833,23 +8833,23 @@ var require_cst_visit = __commonJS({
       }
       return item;
     };
-    visit.parentCollection = (cst, path4) => {
-      const parent = visit.itemAtPath(cst, path4.slice(0, -1));
-      const field = path4[path4.length - 1][0];
+    visit.parentCollection = (cst, path5) => {
+      const parent = visit.itemAtPath(cst, path5.slice(0, -1));
+      const field = path5[path5.length - 1][0];
       const coll = parent?.[field];
       if (coll && "items" in coll)
         return coll;
       throw new Error("Parent collection not found");
     };
-    function _visit(path4, item, visitor) {
-      let ctrl = visitor(item, path4);
+    function _visit(path5, item, visitor) {
+      let ctrl = visitor(item, path5);
       if (typeof ctrl === "symbol")
         return ctrl;
       for (const field of ["key", "value"]) {
         const token = item[field];
         if (token && "items" in token) {
           for (let i = 0; i < token.items.length; ++i) {
-            const ci = _visit(Object.freeze(path4.concat([[field, i]])), token.items[i], visitor);
+            const ci = _visit(Object.freeze(path5.concat([[field, i]])), token.items[i], visitor);
             if (typeof ci === "number")
               i = ci - 1;
             else if (ci === BREAK)
@@ -8860,10 +8860,10 @@ var require_cst_visit = __commonJS({
             }
           }
           if (typeof ctrl === "function" && field === "key")
-            ctrl = ctrl(item, path4);
+            ctrl = ctrl(item, path5);
         }
       }
-      return typeof ctrl === "function" ? ctrl(item, path4) : ctrl;
+      return typeof ctrl === "function" ? ctrl(item, path5) : ctrl;
     }
     exports2.visit = visit;
   }
@@ -13790,8 +13790,8 @@ var require_utils = __commonJS({
       }
       return ind;
     }
-    function removeDotSegments(path4) {
-      let input = path4;
+    function removeDotSegments(path5) {
+      let input = path5;
       const output = [];
       let nextSlash = -1;
       let len = 0;
@@ -13990,8 +13990,8 @@ var require_schemes = __commonJS({
         wsComponent.secure = void 0;
       }
       if (wsComponent.resourceName) {
-        const [path4, query] = wsComponent.resourceName.split("?");
-        wsComponent.path = path4 && path4 !== "/" ? path4 : void 0;
+        const [path5, query] = wsComponent.resourceName.split("?");
+        wsComponent.path = path5 && path5 !== "/" ? path5 : void 0;
         wsComponent.query = query;
         wsComponent.resourceName = void 0;
       }
@@ -17376,7 +17376,7 @@ var {
 
 // src/commands/scan.ts
 var fs = __toESM(require("fs"));
-var path2 = __toESM(require("path"));
+var path3 = __toESM(require("path"));
 
 // node_modules/minimatch/dist/esm/index.js
 var import_brace_expansion = __toESM(require_brace_expansion(), 1);
@@ -21227,12 +21227,12 @@ var PathBase = class {
   /**
    * Get the Path object referenced by the string path, resolved from this Path
    */
-  resolve(path4) {
-    if (!path4) {
+  resolve(path5) {
+    if (!path5) {
       return this;
     }
-    const rootPath = this.getRootString(path4);
-    const dir = path4.substring(rootPath.length);
+    const rootPath = this.getRootString(path5);
+    const dir = path5.substring(rootPath.length);
     const dirParts = dir.split(this.splitSep);
     const result = rootPath ? this.getRoot(rootPath).#resolveParts(dirParts) : this.#resolveParts(dirParts);
     return result;
@@ -21984,8 +21984,8 @@ var PathWin32 = class _PathWin32 extends PathBase {
   /**
    * @internal
    */
-  getRootString(path4) {
-    return import_node_path.win32.parse(path4).root;
+  getRootString(path5) {
+    return import_node_path.win32.parse(path5).root;
   }
   /**
    * @internal
@@ -22031,8 +22031,8 @@ var PathPosix = class _PathPosix extends PathBase {
   /**
    * @internal
    */
-  getRootString(path4) {
-    return path4.startsWith("/") ? "/" : "";
+  getRootString(path5) {
+    return path5.startsWith("/") ? "/" : "";
   }
   /**
    * @internal
@@ -22121,11 +22121,11 @@ var PathScurryBase = class {
   /**
    * Get the depth of a provided path, string, or the cwd
    */
-  depth(path4 = this.cwd) {
-    if (typeof path4 === "string") {
-      path4 = this.cwd.resolve(path4);
+  depth(path5 = this.cwd) {
+    if (typeof path5 === "string") {
+      path5 = this.cwd.resolve(path5);
     }
-    return path4.depth();
+    return path5.depth();
   }
   /**
    * Return the cache of child entries.  Exposed so subclasses can create
@@ -22612,9 +22612,9 @@ var PathScurryBase = class {
     process2();
     return results;
   }
-  chdir(path4 = this.cwd) {
+  chdir(path5 = this.cwd) {
     const oldCwd = this.cwd;
-    this.cwd = typeof path4 === "string" ? this.cwd.resolve(path4) : path4;
+    this.cwd = typeof path5 === "string" ? this.cwd.resolve(path5) : path5;
     this.cwd[setAsCwd](oldCwd);
   }
 };
@@ -22970,8 +22970,8 @@ var MatchRecord = class {
   }
   // match, absolute, ifdir
   entries() {
-    return [...this.store.entries()].map(([path4, n]) => [
-      path4,
+    return [...this.store.entries()].map(([path5, n]) => [
+      path5,
       !!(n & 2),
       !!(n & 1)
     ]);
@@ -23176,9 +23176,9 @@ var GlobUtil = class {
   signal;
   maxDepth;
   includeChildMatches;
-  constructor(patterns, path4, opts) {
+  constructor(patterns, path5, opts) {
     this.patterns = patterns;
-    this.path = path4;
+    this.path = path5;
     this.opts = opts;
     this.#sep = !opts.posix && opts.platform === "win32" ? "\\" : "/";
     this.includeChildMatches = opts.includeChildMatches !== false;
@@ -23197,11 +23197,11 @@ var GlobUtil = class {
       });
     }
   }
-  #ignored(path4) {
-    return this.seen.has(path4) || !!this.#ignore?.ignored?.(path4);
+  #ignored(path5) {
+    return this.seen.has(path5) || !!this.#ignore?.ignored?.(path5);
   }
-  #childrenIgnored(path4) {
-    return !!this.#ignore?.childrenIgnored?.(path4);
+  #childrenIgnored(path5) {
+    return !!this.#ignore?.childrenIgnored?.(path5);
   }
   // backpressure mechanism
   pause() {
@@ -23416,8 +23416,8 @@ var GlobUtil = class {
 };
 var GlobWalker = class extends GlobUtil {
   matches = /* @__PURE__ */ new Set();
-  constructor(patterns, path4, opts) {
-    super(patterns, path4, opts);
+  constructor(patterns, path5, opts) {
+    super(patterns, path5, opts);
   }
   matchEmit(e) {
     this.matches.add(e);
@@ -23454,8 +23454,8 @@ var GlobWalker = class extends GlobUtil {
 };
 var GlobStream = class extends GlobUtil {
   results;
-  constructor(patterns, path4, opts) {
-    super(patterns, path4, opts);
+  constructor(patterns, path5, opts) {
+    super(patterns, path5, opts);
     this.results = new Minipass({
       signal: this.signal,
       objectMode: true
@@ -24059,8 +24059,8 @@ function isTerminalNode(type, name) {
   return TERMINAL_NODE_PATTERNS.some((pattern) => label.includes(pattern));
 }
 function readNumber(source, paths) {
-  for (const path4 of paths) {
-    const value = path4.split(".").reduce((acc, key) => acc ? acc[key] : void 0, source);
+  for (const path5 of paths) {
+    const value = path5.split(".").reduce((acc, key) => acc ? acc[key] : void 0, source);
     if (typeof value === "number") return value;
     if (typeof value === "string" && !Number.isNaN(Number(value))) return Number(value);
   }
@@ -24195,7 +24195,7 @@ function validateN8nWorkflow(data) {
   const validate = getValidator();
   if (!validate(data)) {
     const errors = (validate.errors || []).map((err) => {
-      const path4 = err.instancePath || err.schemaPath;
+      const path5 = err.instancePath || err.schemaPath;
       const message = err.message || "Validation error";
       let suggestion = "";
       if (err.keyword === "required") {
@@ -24207,7 +24207,7 @@ function validateN8nWorkflow(data) {
       } else if (err.keyword === "minLength") {
         suggestion = "This field cannot be empty.";
       }
-      return { path: path4, message, suggestion };
+      return { path: path5, message, suggestion };
     });
     throw new ValidationError(errors);
   }
@@ -24854,11 +24854,11 @@ function loadConfigFromFile(configPath) {
 function loadConfigFromCwd() {
   try {
     const fs3 = __require("fs");
-    const path4 = __require("path");
+    const path5 = __require("path");
     const candidates = [".flowlint.yml", ".flowlint.yaml", "flowlint.config.yml"];
     const cwd = process.cwd();
     for (const candidate of candidates) {
-      const configPath = path4.join(cwd, candidate);
+      const configPath = path5.join(cwd, candidate);
       if (fs3.existsSync(configPath)) {
         const content = fs3.readFileSync(configPath, "utf-8");
         return parseConfig(content);
@@ -24878,32 +24878,146 @@ function countFindingsBySeverity(findings) {
   };
 }
 
+// src/reporters/junit.ts
+var path2 = __toESM(require("path"));
+function formatJunit(findings) {
+  const byFile = findings.reduce((acc, finding) => {
+    const file = finding.path || "unknown";
+    if (!acc[file]) acc[file] = [];
+    acc[file].push(finding);
+    return acc;
+  }, {});
+  let xml = '<?xml version="1.0" encoding="UTF-8"?>\n<testsuites>\n';
+  for (const [file, fileFindings] of Object.entries(byFile)) {
+    const filename = path2.basename(file);
+    const failures = fileFindings.length;
+    xml += `  <testsuite name="${filename}" tests="${failures}" failures="${failures}" errors="0" skipped="0" timestamp="${(/* @__PURE__ */ new Date()).toISOString()}" time="0" hostname="flowlint">
+`;
+    for (const finding of fileFindings) {
+      xml += `    <testcase classname="${file}" name="${finding.rule}" time="0">
+`;
+      xml += `      <failure message="${escapeXml(finding.message)}" type="${finding.severity}">Line ${finding.line || 0}: ${escapeXml(finding.raw_details || "")}</failure>
+`;
+      xml += `    </testcase>
+`;
+    }
+    xml += `  </testsuite>
+`;
+  }
+  xml += "</testsuites>";
+  return xml;
+}
+function escapeXml(unsafe) {
+  if (!unsafe) return "";
+  return unsafe.replace(/[<>&'"]/g, (c) => {
+    switch (c) {
+      case "<":
+        return "&lt;";
+      case ">":
+        return "&gt;";
+      case "&":
+        return "&amp;";
+      case "'":
+        return "&apos;";
+      case '"':
+        return "&quot;";
+      default:
+        return c;
+    }
+  });
+}
+
+// src/reporters/sarif.ts
+function formatSarif(findings) {
+  const rules2 = new Set(findings.map((f) => f.rule));
+  const rulesList = Array.from(rules2).map((ruleId) => ({
+    id: ruleId,
+    shortDescription: { text: ruleId },
+    helpUri: `https://flowlint.dev/rules/${ruleId}`
+  }));
+  const results = findings.map((f) => ({
+    ruleId: f.rule,
+    level: mapSeverityToSarif(f.severity),
+    message: { text: f.message },
+    locations: [{
+      physicalLocation: {
+        artifactLocation: { uri: f.path || "unknown" },
+        region: {
+          startLine: f.line || 1,
+          startColumn: 1
+        }
+      }
+    }]
+  }));
+  const report = {
+    version: "2.1.0",
+    $schema: "http://json.schemastore.org/sarif-2.1.0-rtm.4",
+    runs: [{
+      tool: {
+        driver: {
+          name: "FlowLint",
+          informationUri: "https://flowlint.dev",
+          rules: rulesList
+        }
+      },
+      results
+    }]
+  };
+  return JSON.stringify(report, null, 2);
+}
+function mapSeverityToSarif(severity) {
+  switch (severity) {
+    case "must":
+      return "error";
+    case "should":
+      return "warning";
+    case "nit":
+      return "note";
+    default:
+      return "warning";
+  }
+}
+
+// src/reporters/json.ts
+function formatJson(findings, stats) {
+  return JSON.stringify({
+    findings,
+    summary: countFindingsBySeverity(findings),
+    filesScanned: stats.files,
+    errors: stats.errors
+  }, null, 2);
+}
+
 // src/commands/scan.ts
-var scanCommand = new Command("scan").description("Scan workflow files for issues").argument("[path]", "Directory or file to scan", ".").option("--config <path>", "Path to .flowlint.yml config file").option("--format <format>", "Output format: stylish|json", "stylish").option("--fail-on-error", "Exit with code 1 if errors found", false).action(async (scanPath, options) => {
+var scanCommand = new Command("scan").description("Scan workflow files for issues").argument("[path]", "Directory or file to scan", ".").option("--config <path>", "Path to .flowlint.yml config file").option("--format <format>", "Output format: stylish|json|junit|sarif", "stylish").option("--fail-on-error", "Exit with code 1 if errors found", false).action(async (scanPath, options) => {
   try {
-    const absolutePath = path2.resolve(process.cwd(), scanPath);
+    const absolutePath = path3.resolve(process.cwd(), scanPath);
+    const isStylish = options.format === "stylish";
     const config = options.config ? loadConfig(options.config) : loadConfig();
     const patterns = config.files.include.map(
-      (p) => path2.join(absolutePath, p).replace(/\\/g, "/")
+      (p) => path3.join(absolutePath, p).replace(/\\/g, "/")
     );
     const ignorePatterns = config.files.ignore.map(
-      (p) => path2.join(absolutePath, p).replace(/\\/g, "/")
+      (p) => path3.join(absolutePath, p).replace(/\\/g, "/")
     );
     const files = await glob(patterns, {
       ignore: ignorePatterns,
       nodir: true
     });
     if (files.length === 0) {
-      console.log(import_picocolors.default.yellow("No workflow files found."));
+      if (isStylish) console.log(import_picocolors.default.yellow("No workflow files found."));
       return;
     }
-    console.log(import_picocolors.default.blue("Scanning " + files.length + " file(s)..."));
+    if (isStylish) {
+      console.log(import_picocolors.default.blue("Scanning " + files.length + " file(s)..."));
+      console.log("");
+    }
     const allFindings = [];
     let errorCount = 0;
     for (const file of files) {
       try {
         const content = fs.readFileSync(file, "utf-8");
-        const relativePath = path2.relative(process.cwd(), file);
+        const relativePath = path3.relative(process.cwd(), file);
         const graph = parseN8n(content);
         const findings = runAllRules(graph, {
           path: relativePath,
@@ -24911,74 +25025,75 @@ var scanCommand = new Command("scan").description("Scan workflow files for issue
           nodeLines: graph.meta.nodeLines
         });
         allFindings.push(...findings);
-      } catch (error) {
-        if (error instanceof ValidationError) {
-          console.log(import_picocolors.default.red("x " + path2.relative(process.cwd(), file) + ": Validation error"));
-          error.errors.forEach((e) => {
-            console.log(import_picocolors.default.gray("  " + e.path + ": " + e.message));
+        if (isStylish && findings.length > 0) {
+          console.log(import_picocolors.default.underline(relativePath));
+          findings.forEach((f) => {
+            const color = f.severity === "must" ? import_picocolors.default.red : f.severity === "should" ? import_picocolors.default.yellow : import_picocolors.default.gray;
+            const line = f.line ? `:${f.line}` : "";
+            console.log(`  ${color(f.severity.padEnd(6))} ${f.rule} ${f.message}${import_picocolors.default.gray(line)}`);
           });
-        } else {
-          console.log(import_picocolors.default.red("x " + path2.relative(process.cwd(), file) + ": " + (error instanceof Error ? error.message : String(error))));
+          console.log("");
+        }
+        if (findings.some((f) => f.severity === "must")) {
+          errorCount++;
         }
+      } catch (error) {
+        allFindings.push({
+          rule: "validation-error",
+          message: error instanceof Error ? error.message : String(error),
+          severity: "must",
+          path: path3.relative(process.cwd(), file),
+          line: 0
+        });
         errorCount++;
+        if (isStylish) {
+          if (error instanceof ValidationError) {
+            console.log(import_picocolors.default.red("x " + path3.relative(process.cwd(), file) + ": Validation error"));
+            error.errors.forEach((e) => {
+              console.log(import_picocolors.default.gray("  " + e.path + ": " + e.message));
+            });
+          } else {
+            console.log(import_picocolors.default.red("x " + path3.relative(process.cwd(), file) + ": " + (error instanceof Error ? error.message : String(error))));
+          }
+        }
       }
     }
-    if (options.format === "json") {
-      console.log(JSON.stringify({
-        findings: allFindings,
-        summary: countFindingsBySeverity(allFindings),
-        filesScanned: files.length,
-        errors: errorCount
-      }, null, 2));
-    } else {
-      printStylishOutput(allFindings);
-    }
-    const summary = countFindingsBySeverity(allFindings);
-    console.log("");
-    console.log(import_picocolors.default.bold("Summary:"));
-    console.log("  Files scanned: " + files.length);
-    console.log("  " + import_picocolors.default.red("Errors (must): " + summary.must));
-    console.log("  " + import_picocolors.default.yellow("Warnings (should): " + summary.should));
-    console.log("  " + import_picocolors.default.blue("Notes (nit): " + summary.nit));
-    if (options.failOnError && summary.must > 0) {
+    switch (options.format) {
+      case "json":
+        console.log(formatJson(allFindings, { files: files.length, errors: errorCount }));
+        break;
+      case "junit":
+        console.log(formatJunit(allFindings));
+        break;
+      case "sarif":
+        console.log(formatSarif(allFindings));
+        break;
+      case "stylish":
+      default:
+        const summary = countFindingsBySeverity(allFindings);
+        console.log("Summary:");
+        console.log(`  Files scanned: ${files.length}`);
+        console.log(`  Errors (must): ${import_picocolors.default.red(summary.must)}`);
+        console.log(`  Warnings (should): ${import_picocolors.default.yellow(summary.should)}`);
+        console.log(`  Notes (nit): ${import_picocolors.default.gray(summary.nit)}`);
+        break;
+    }
+    if (options.failOnError && errorCount > 0) {
       process.exit(1);
     }
   } catch (error) {
-    console.error(import_picocolors.default.red("Error:"), error instanceof Error ? error.message : String(error));
-    process.exit(2);
+    console.error(import_picocolors.default.red("Error: " + (error instanceof Error ? error.message : String(error))));
+    process.exit(1);
   }
 });
-function printStylishOutput(findings) {
-  if (findings.length === 0) {
-    console.log(import_picocolors.default.green("No issues found!"));
-    return;
-  }
-  const byFile = /* @__PURE__ */ new Map();
-  for (const finding of findings) {
-    const existing = byFile.get(finding.path) || [];
-    existing.push(finding);
-    byFile.set(finding.path, existing);
-  }
-  for (const [file, fileFindings] of byFile) {
-    console.log("");
-    console.log(import_picocolors.default.underline(file));
-    for (const finding of fileFindings) {
-      const severityColor = finding.severity === "must" ? import_picocolors.default.red : finding.severity === "should" ? import_picocolors.default.yellow : import_picocolors.default.blue;
-      const line = finding.line ? ":" + finding.line : "";
-      console.log(
-        "  " + severityColor(finding.severity.padEnd(6)) + " " + import_picocolors.default.gray(finding.rule) + " " + finding.message + import_picocolors.default.gray(line)
-      );
-    }
-  }
-}
 
 // src/commands/init.ts
 var fs2 = __toESM(require("fs"));
-var path3 = __toESM(require("path"));
+var path4 = __toESM(require("path"));
 var import_picocolors2 = __toESM(require_picocolors());
 var import_yaml3 = __toESM(require_dist());
 var initCommand = new Command("init").description("Initialize FlowLint configuration in the current directory").option("--force", "Overwrite existing config file", false).action((options) => {
-  const configPath = path3.join(process.cwd(), ".flowlint.yml");
+  const configPath = path4.join(process.cwd(), ".flowlint.yml");
   if (fs2.existsSync(configPath) && !options.force) {
     console.log(import_picocolors2.default.yellow(".flowlint.yml already exists. Use --force to overwrite."));
     return;
@@ -25003,7 +25118,7 @@ var initCommand = new Command("init").description("Initialize FlowLint configura
 
 // src/cli.ts
 var program2 = new Command();
-program2.name("flowlint").description("Static analysis tool for n8n workflows").version("0.6.2");
+program2.name("flowlint").description("Static analysis tool for n8n workflows").version("0.7.0");
 program2.addCommand(scanCommand);
 program2.addCommand(initCommand);
 program2.parse(process.argv);