ghagga-core 2.4.0 → 2.5.0

package/dist/enhance/enhance.d.ts

@@ -0,0 +1,31 @@
+/**
+ * AI Enhance — post-analysis intelligence layer.
+ *
+ * Calls an LLM to group, prioritize, and filter static analysis findings.
+ * Failures are non-blocking — returns empty result on any error.
+ */
+import type { ReviewFinding } from '../types.js';
+import type { EnhanceInput, EnhanceMetadata, EnhanceResult } from './types.js';
+/** A ReviewFinding augmented with AI enhance metadata. */
+export interface EnhancedReviewFinding extends ReviewFinding {
+    groupId?: string;
+    aiPriority?: number;
+    aiFiltered?: boolean;
+    filterReason?: string;
+}
+/**
+ * Enhance static analysis findings using AI.
+ *
+ * @param input - Findings and LLM configuration
+ * @returns Enhanced result with groups, priorities, suggestions, and filtered findings
+ */
+export declare function enhanceFindings(input: EnhanceInput): Promise<{
+    result: EnhanceResult;
+    metadata: EnhanceMetadata;
+}>;
+/**
+ * Merge enhance results back onto the original findings.
+ * Assigns groupId, aiPriority, aiFiltered, and filterReason.
+ */
+export declare function mergeEnhanceResult(findings: ReviewFinding[], enhanceResult: EnhanceResult): EnhancedReviewFinding[];
+//# sourceMappingURL=enhance.d.ts.map

package/dist/enhance/enhance.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"enhance.d.ts","sourceRoot":"","sources":["../../src/enhance/enhance.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAIH,OAAO,KAAK,EAAe,aAAa,EAAE,MAAM,aAAa,CAAC;AAO9D,OAAO,KAAK,EAAE,YAAY,EAAE,eAAe,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAE/E,0DAA0D;AAC1D,MAAM,WAAW,qBAAsB,SAAQ,aAAa;IAC1D,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAaD;;;;;GAKG;AACH,wBAAsB,eAAe,CACnC,KAAK,EAAE,YAAY,GAClB,OAAO,CAAC;IAAE,MAAM,EAAE,aAAa,CAAC;IAAC,QAAQ,EAAE,eAAe,CAAA;CAAE,CAAC,CAuD/D;AA+BD;;;GAGG;AACH,wBAAgB,kBAAkB,CAChC,QAAQ,EAAE,aAAa,EAAE,EACzB,aAAa,EAAE,aAAa,GAC3B,qBAAqB,EAAE,CAmCzB"}

package/dist/enhance/enhance.js

@@ -0,0 +1,140 @@
+/**
+ * AI Enhance — post-analysis intelligence layer.
+ *
+ * Calls an LLM to group, prioritize, and filter static analysis findings.
+ * Failures are non-blocking — returns empty result on any error.
+ */
+import { generateText } from 'ai';
+import { createModel } from '../providers/index.js';
+import { buildEnhancePrompt, ENHANCE_SYSTEM_PROMPT, truncateByTokenBudget, } from './prompt.js';
+/** Default token budget for the enhance prompt (4K tokens). */
+const DEFAULT_TOKEN_BUDGET = 4000;
+/** Empty result returned on failure or zero findings. */
+const EMPTY_RESULT = {
+    groups: [],
+    priorities: {},
+    suggestions: {},
+    filtered: [],
+};
+/**
+ * Enhance static analysis findings using AI.
+ *
+ * @param input - Findings and LLM configuration
+ * @returns Enhanced result with groups, priorities, suggestions, and filtered findings
+ */
+export async function enhanceFindings(input) {
+    // Skip AI call if no findings
+    if (input.findings.length === 0) {
+        return {
+            result: EMPTY_RESULT,
+            metadata: {
+                model: input.model,
+                tokenUsage: { input: 0, output: 0 },
+                groupCount: 0,
+                filteredCount: 0,
+            },
+        };
+    }
+    try {
+        // Truncate to fit token budget
+        const truncated = truncateByTokenBudget(input.findings, DEFAULT_TOKEN_BUDGET);
+        const prompt = buildEnhancePrompt(truncated);
+        // Call LLM
+        const model = createModel(input.provider, input.model, input.apiKey);
+        const response = await generateText({
+            model,
+            system: ENHANCE_SYSTEM_PROMPT,
+            prompt,
+            maxOutputTokens: 2000,
+        });
+        // Parse response
+        const parsed = parseEnhanceResponse(response.text);
+        return {
+            result: parsed,
+            metadata: {
+                model: input.model,
+                tokenUsage: {
+                    input: response.usage?.inputTokens ?? 0,
+                    output: response.usage?.outputTokens ?? 0,
+                },
+                groupCount: parsed.groups.length,
+                filteredCount: parsed.filtered.length,
+            },
+        };
+    }
+    catch {
+        // Non-blocking — return empty result on any error
+        return {
+            result: EMPTY_RESULT,
+            metadata: {
+                model: input.model,
+                tokenUsage: { input: 0, output: 0 },
+                groupCount: 0,
+                filteredCount: 0,
+            },
+        };
+    }
+}
+/**
+ * Parse the LLM response text into an EnhanceResult.
+ * Gracefully handles malformed JSON.
+ */
+function parseEnhanceResponse(text) {
+    try {
+        // Extract JSON from response (may have markdown code fences)
+        const jsonMatch = text.match(/\{[\s\S]*\}/);
+        if (!jsonMatch)
+            return EMPTY_RESULT;
+        const parsed = JSON.parse(jsonMatch[0]);
+        return {
+            groups: Array.isArray(parsed.groups) ? parsed.groups : [],
+            priorities: typeof parsed.priorities === 'object' && parsed.priorities !== null
+                ? parsed.priorities
+                : {},
+            suggestions: typeof parsed.suggestions === 'object' && parsed.suggestions !== null
+                ? parsed.suggestions
+                : {},
+            filtered: Array.isArray(parsed.filtered) ? parsed.filtered : [],
+        };
+    }
+    catch {
+        return EMPTY_RESULT;
+    }
+}
+/**
+ * Merge enhance results back onto the original findings.
+ * Assigns groupId, aiPriority, aiFiltered, and filterReason.
+ */
+export function mergeEnhanceResult(findings, enhanceResult) {
+    // Build lookup maps
+    const groupByFindingId = new Map();
+    for (const group of enhanceResult.groups) {
+        for (const id of group.findingIds) {
+            groupByFindingId.set(id, group.groupId);
+        }
+    }
+    const filteredMap = new Map();
+    for (const f of enhanceResult.filtered) {
+        filteredMap.set(f.findingId, f.reason);
+    }
+    return findings.map((finding, index) => {
+        const id = index + 1; // IDs are 1-based from serializeFindings
+        const enhanced = { ...finding };
+        const groupId = groupByFindingId.get(id);
+        if (groupId)
+            enhanced.groupId = groupId;
+        const priority = enhanceResult.priorities[id];
+        if (priority !== undefined)
+            enhanced.aiPriority = priority;
+        const suggestion = enhanceResult.suggestions[id];
+        if (suggestion)
+            enhanced.suggestion = suggestion;
+        const filterReason = filteredMap.get(id);
+        if (filterReason) {
+            enhanced.aiFiltered = true;
+            enhanced.filterReason = filterReason;
+        }
+        return enhanced;
+    });
+}
+//# sourceMappingURL=enhance.js.map

package/dist/enhance/enhance.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"enhance.js","sourceRoot":"","sources":["../../src/enhance/enhance.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,YAAY,EAAE,MAAM,IAAI,CAAC;AAClC,OAAO,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAC;AAEpD,OAAO,EACL,kBAAkB,EAClB,qBAAqB,EAErB,qBAAqB,GACtB,MAAM,aAAa,CAAC;AAWrB,+DAA+D;AAC/D,MAAM,oBAAoB,GAAG,IAAI,CAAC;AAElC,yDAAyD;AACzD,MAAM,YAAY,GAAkB;IAClC,MAAM,EAAE,EAAE;IACV,UAAU,EAAE,EAAE;IACd,WAAW,EAAE,EAAE;IACf,QAAQ,EAAE,EAAE;CACb,CAAC;AAEF;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,KAAmB;IAEnB,8BAA8B;IAC9B,IAAI,KAAK,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAChC,OAAO;YACL,MAAM,EAAE,YAAY;YACpB,QAAQ,EAAE;gBACR,KAAK,EAAE,KAAK,CAAC,KAAK;gBAClB,UAAU,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE;gBACnC,UAAU,EAAE,CAAC;gBACb,aAAa,EAAE,CAAC;aACjB;SACF,CAAC;IACJ,CAAC;IAED,IAAI,CAAC;QACH,+BAA+B;QAC/B,MAAM,SAAS,GAAG,qBAAqB,CAAC,KAAK,CAAC,QAAQ,EAAE,oBAAoB,CAAC,CAAC;QAC9E,MAAM,MAAM,GAAG,kBAAkB,CAAC,SAAS,CAAC,CAAC;QAE7C,WAAW;QACX,MAAM,KAAK,GAAG,WAAW,CAAC,KAAK,CAAC,QAAuB,EAAE,KAAK,CAAC,KAAK,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;QACpF,MAAM,QAAQ,GAAG,MAAM,YAAY,CAAC;YAClC,KAAK;YACL,MAAM,EAAE,qBAAqB;YAC7B,MAAM;YACN,eAAe,EAAE,IAAI;SACtB,CAAC,CAAC;QAEH,iBAAiB;QACjB,MAAM,MAAM,GAAG,oBAAoB,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;QAEnD,OAAO;YACL,MAAM,EAAE,MAAM;YACd,QAAQ,EAAE;gBACR,KAAK,EAAE,KAAK,CAAC,KAAK;gBAClB,UAAU,EAAE;oBACV,KAAK,EAAE,QAAQ,CAAC,KAAK,EAAE,WAAW,IAAI,CAAC;oBACvC,MAAM,EAAE,QAAQ,CAAC,KAAK,EAAE,YAAY,IAAI,CAAC;iBAC1C;gBACD,UAAU,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM;gBAChC,aAAa,EAAE,MAAM,CAAC,QAAQ,CAAC,MAAM;aACtC;SACF,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,kDAAkD;QAClD,OAAO;YACL,MAAM,EAAE,YAAY;YACpB,QAAQ,EAAE;gBACR,KAAK,EAAE,KAAK,CAAC,KAAK;gBAClB,UAAU,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE;gBACnC,UAAU,EAAE,CAAC;gBACb,aAAa,EAAE,CAAC;aACjB;SACF,CAAC;IACJ,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,SAAS,oBAAoB,CAAC,IAAY;IACxC,IAAI,CAAC;QACH,6DAA6D;QAC7D,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC;QAC5C,IAAI,CAAC,SAAS;YAAE,OAAO,YAAY,CAAC;QAEpC,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC;QAExC,OAAO;YACL,MAAM,EAAE,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE;YACzD,UAAU,EACR,OAAO,MAAM,CAAC,UAAU,KAAK,QAAQ,IAAI,MAAM,CAAC,UAAU,KAAK,IAAI;gBACjE,CAAC,CAAC,MAAM,CAAC,UAAU;gBACnB,CAAC,CAAC,EAAE;YACR,WAAW,EACT,OAAO,MAAM,CAAC,WAAW,KAAK,QAAQ,IAAI,MAAM,CAAC,WAAW,KAAK,IAAI;gBACnE,CAAC,CAAC,MAAM,CAAC,WAAW;gBACpB,CAAC,CAAC,EAAE;YACR,QAAQ,EAAE,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE;SAChE,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,YAAY,CAAC;IACtB,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,kBAAkB,CAChC,QAAyB,EACzB,aAA4B;IAE5B,oBAAoB;IACpB,MAAM,gBAAgB,GAAG,IAAI,GAAG,EAAkB,CAAC;IACnD,KAAK,MAAM,KAAK,IAAI,aAAa,CAAC,MAAM,EAAE,CAAC;QACzC,KAAK,MAAM,EAAE,IAAI,KAAK,CAAC,UAAU,EAAE,CAAC;YAClC,gBAAgB,CAAC,GAAG,CAAC,EAAE,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;QAC1C,CAAC;IACH,CAAC;IAED,MAAM,WAAW,GAAG,IAAI,GAAG,EAAkB,CAAC;IAC9C,KAAK,MAAM,CAAC,IAAI,aAAa,CAAC,QAAQ,EAAE,CAAC;QACvC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC;IACzC,CAAC;IAED,OAAO,QAAQ,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,KAAK,EAAE,EAAE;QACrC,MAAM,EAAE,GAAG,KAAK,GAAG,CAAC,CAAC,CAAC,yCAAyC;QAC/D,MAAM,QAAQ,GAA0B,EAAE,GAAG,OAAO,EAAE,CAAC;QAEvD,MAAM,OAAO,GAAG,gBAAgB,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACzC,IAAI,OAAO;YAAE,QAAQ,CAAC,OAAO,GAAG,OAAO,CAAC;QAExC,MAAM,QAAQ,GAAG,aAAa,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC;QAC9C,IAAI,QAAQ,KAAK,SAAS;YAAE,QAAQ,CAAC,UAAU,GAAG,QAAQ,CAAC;QAE3D,MAAM,UAAU,GAAG,aAAa,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC;QACjD,IAAI,UAAU;YAAE,QAAQ,CAAC,UAAU,GAAG,UAAU,CAAC;QAEjD,MAAM,YAAY,GAAG,WAAW,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACzC,IAAI,YAAY,EAAE,CAAC;YACjB,QAAQ,CAAC,UAAU,GAAG,IAAI,CAAC;YAC3B,QAAQ,CAAC,YAAY,GAAG,YAAY,CAAC;QACvC,CAAC;QAED,OAAO,QAAQ,CAAC;IAClB,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/enhance/index.d.ts

@@ -0,0 +1,5 @@
+export type { EnhancedReviewFinding } from './enhance.js';
+export { enhanceFindings, mergeEnhanceResult } from './enhance.js';
+export { serializeFindings, truncateByTokenBudget } from './prompt.js';
+export type { EnhanceInput, EnhanceMetadata, EnhanceResult, FilteredFinding, FindingGroup, } from './types.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/enhance/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/enhance/index.ts"],"names":[],"mappings":"AAAA,YAAY,EAAE,qBAAqB,EAAE,MAAM,cAAc,CAAC;AAC1D,OAAO,EAAE,eAAe,EAAE,kBAAkB,EAAE,MAAM,cAAc,CAAC;AACnE,OAAO,EAAE,iBAAiB,EAAE,qBAAqB,EAAE,MAAM,aAAa,CAAC;AACvE,YAAY,EACV,YAAY,EACZ,eAAe,EACf,aAAa,EACb,eAAe,EACf,YAAY,GACb,MAAM,YAAY,CAAC"}

package/dist/enhance/index.js

@@ -0,0 +1,3 @@
+export { enhanceFindings, mergeEnhanceResult } from './enhance.js';
+export { serializeFindings, truncateByTokenBudget } from './prompt.js';
+//# sourceMappingURL=index.js.map

package/dist/enhance/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/enhance/index.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,eAAe,EAAE,kBAAkB,EAAE,MAAM,cAAc,CAAC;AACnE,OAAO,EAAE,iBAAiB,EAAE,qBAAqB,EAAE,MAAM,aAAa,CAAC"}

package/dist/enhance/prompt.d.ts

@@ -0,0 +1,22 @@
+/**
+ * AI Enhance prompt template and serialization utilities.
+ */
+import type { ReviewFinding } from '../types.js';
+import type { EnhanceFindingSummary } from './types.js';
+/** System prompt for the enhance AI call. */
+export declare const ENHANCE_SYSTEM_PROMPT = "You are a code review assistant analyzing static analysis findings.\nYour job is to make the findings MORE actionable by:\n1. Grouping related findings that share a root cause\n2. Prioritizing findings by real-world impact (1-10 scale, 10 = most critical)\n3. Suggesting concrete fixes for the highest-priority findings\n4. Identifying likely false positives\n\nRespond with ONLY valid JSON matching this schema:\n{\n  \"groups\": [{ \"groupId\": \"g1\", \"label\": \"Description of related issue\", \"findingIds\": [1, 2] }],\n  \"priorities\": { \"1\": 8, \"2\": 6 },\n  \"suggestions\": { \"1\": \"Use parameterized queries instead of string concatenation\" },\n  \"filtered\": [{ \"findingId\": 3, \"reason\": \"Test file, not production code\" }]\n}\n\nRules:\n- Every finding must appear in exactly one group\n- Priority scores: 10=critical security flaw, 7-9=high impact, 4-6=moderate, 1-3=low impact/noise\n- Only suggest fixes for findings with priority >= 7\n- Only filter findings you are >90% confident are false positives\n- Keep suggestions concise (1-2 sentences)";
+/**
+ * Build the user prompt with serialized findings.
+ */
+export declare function buildEnhancePrompt(findings: EnhanceFindingSummary[]): string;
+/**
+ * Map full ReviewFindings to compact summaries with sequential IDs.
+ */
+export declare function serializeFindings(findings: ReviewFinding[]): EnhanceFindingSummary[];
+/**
+ * Truncate findings to fit within a token budget.
+ * Drops lowest-severity findings first.
+ * Rough estimate: ~20 tokens per finding.
+ */
+export declare function truncateByTokenBudget(summaries: EnhanceFindingSummary[], maxTokens: number): EnhanceFindingSummary[];
+//# sourceMappingURL=prompt.d.ts.map

package/dist/enhance/prompt.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"prompt.d.ts","sourceRoot":"","sources":["../../src/enhance/prompt.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AACjD,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,YAAY,CAAC;AAExD,6CAA6C;AAC7C,eAAO,MAAM,qBAAqB,2jCAoBS,CAAC;AAE5C;;GAEG;AACH,wBAAgB,kBAAkB,CAAC,QAAQ,EAAE,qBAAqB,EAAE,GAAG,MAAM,CAS5E;AAED;;GAEG;AACH,wBAAgB,iBAAiB,CAAC,QAAQ,EAAE,aAAa,EAAE,GAAG,qBAAqB,EAAE,CAUpF;AAWD;;;;GAIG;AACH,wBAAgB,qBAAqB,CACnC,SAAS,EAAE,qBAAqB,EAAE,EAClC,SAAS,EAAE,MAAM,GAChB,qBAAqB,EAAE,CAYzB"}

package/dist/enhance/prompt.js

@@ -0,0 +1,71 @@
+/**
+ * AI Enhance prompt template and serialization utilities.
+ */
+/** System prompt for the enhance AI call. */
+export const ENHANCE_SYSTEM_PROMPT = `You are a code review assistant analyzing static analysis findings.
+Your job is to make the findings MORE actionable by:
+1. Grouping related findings that share a root cause
+2. Prioritizing findings by real-world impact (1-10 scale, 10 = most critical)
+3. Suggesting concrete fixes for the highest-priority findings
+4. Identifying likely false positives
+
+Respond with ONLY valid JSON matching this schema:
+{
+  "groups": [{ "groupId": "g1", "label": "Description of related issue", "findingIds": [1, 2] }],
+  "priorities": { "1": 8, "2": 6 },
+  "suggestions": { "1": "Use parameterized queries instead of string concatenation" },
+  "filtered": [{ "findingId": 3, "reason": "Test file, not production code" }]
+}
+
+Rules:
+- Every finding must appear in exactly one group
+- Priority scores: 10=critical security flaw, 7-9=high impact, 4-6=moderate, 1-3=low impact/noise
+- Only suggest fixes for findings with priority >= 7
+- Only filter findings you are >90% confident are false positives
+- Keep suggestions concise (1-2 sentences)`;
+/**
+ * Build the user prompt with serialized findings.
+ */
+export function buildEnhancePrompt(findings) {
+    const serialized = findings
+        .map((f) => `[${f.id}] ${f.severity} | ${f.source}/${f.category} | ${f.file}${f.line ? `:${f.line}` : ''} | ${f.message}`)
+        .join('\n');
+    return `Analyze these ${findings.length} static analysis findings:\n\n${serialized}`;
+}
+/**
+ * Map full ReviewFindings to compact summaries with sequential IDs.
+ */
+export function serializeFindings(findings) {
+    return findings.map((f, index) => ({
+        id: index + 1,
+        file: f.file,
+        line: f.line,
+        severity: f.severity,
+        category: f.category ?? 'general',
+        message: f.message,
+        source: f.source ?? 'unknown',
+    }));
+}
+/** Severity priority order for truncation (drop lowest first). */
+const SEVERITY_ORDER = {
+    info: 0,
+    low: 1,
+    medium: 2,
+    high: 3,
+    critical: 4,
+};
+/**
+ * Truncate findings to fit within a token budget.
+ * Drops lowest-severity findings first.
+ * Rough estimate: ~20 tokens per finding.
+ */
+export function truncateByTokenBudget(summaries, maxTokens) {
+    const tokensPerFinding = 20;
+    const maxFindings = Math.floor(maxTokens / tokensPerFinding);
+    if (summaries.length <= maxFindings)
+        return summaries;
+    // Sort by severity descending (keep highest severity)
+    const sorted = [...summaries].sort((a, b) => (SEVERITY_ORDER[b.severity] ?? 0) - (SEVERITY_ORDER[a.severity] ?? 0));
+    return sorted.slice(0, maxFindings);
+}
+//# sourceMappingURL=prompt.js.map

package/dist/enhance/prompt.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"prompt.js","sourceRoot":"","sources":["../../src/enhance/prompt.ts"],"names":[],"mappings":"AAAA;;GAEG;AAKH,6CAA6C;AAC7C,MAAM,CAAC,MAAM,qBAAqB,GAAG;;;;;;;;;;;;;;;;;;;;2CAoBM,CAAC;AAE5C;;GAEG;AACH,MAAM,UAAU,kBAAkB,CAAC,QAAiC;IAClE,MAAM,UAAU,GAAG,QAAQ;SACxB,GAAG,CACF,CAAC,CAAC,EAAE,EAAE,CACJ,IAAI,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,QAAQ,MAAM,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,QAAQ,MAAM,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,OAAO,EAAE,CAChH;SACA,IAAI,CAAC,IAAI,CAAC,CAAC;IAEd,OAAO,iBAAiB,QAAQ,CAAC,MAAM,iCAAiC,UAAU,EAAE,CAAC;AACvF,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,iBAAiB,CAAC,QAAyB;IACzD,OAAO,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC;QACjC,EAAE,EAAE,KAAK,GAAG,CAAC;QACb,IAAI,EAAE,CAAC,CAAC,IAAI;QACZ,IAAI,EAAE,CAAC,CAAC,IAAI;QACZ,QAAQ,EAAE,CAAC,CAAC,QAAQ;QACpB,QAAQ,EAAE,CAAC,CAAC,QAAQ,IAAI,SAAS;QACjC,OAAO,EAAE,CAAC,CAAC,OAAO;QAClB,MAAM,EAAE,CAAC,CAAC,MAAM,IAAI,SAAS;KAC9B,CAAC,CAAC,CAAC;AACN,CAAC;AAED,kEAAkE;AAClE,MAAM,cAAc,GAA2B;IAC7C,IAAI,EAAE,CAAC;IACP,GAAG,EAAE,CAAC;IACN,MAAM,EAAE,CAAC;IACT,IAAI,EAAE,CAAC;IACP,QAAQ,EAAE,CAAC;CACZ,CAAC;AAEF;;;;GAIG;AACH,MAAM,UAAU,qBAAqB,CACnC,SAAkC,EAClC,SAAiB;IAEjB,MAAM,gBAAgB,GAAG,EAAE,CAAC;IAC5B,MAAM,WAAW,GAAG,IAAI,CAAC,KAAK,CAAC,SAAS,GAAG,gBAAgB,CAAC,CAAC;IAE7D,IAAI,SAAS,CAAC,MAAM,IAAI,WAAW;QAAE,OAAO,SAAS,CAAC;IAEtD,sDAAsD;IACtD,MAAM,MAAM,GAAG,CAAC,GAAG,SAAS,CAAC,CAAC,IAAI,CAChC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAChF,CAAC;IAEF,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,WAAW,CAAC,CAAC;AACtC,CAAC"}

package/dist/enhance/types.d.ts

@@ -0,0 +1,55 @@
+/**
+ * AI Enhance types — used by the enhance module to group,
+ * prioritize, and filter static analysis findings.
+ */
+import type { FindingSeverity } from '../types.js';
+/** Input for the enhance function. */
+export interface EnhanceInput {
+    findings: EnhanceFindingSummary[];
+    provider: string;
+    model: string;
+    apiKey: string;
+}
+/** Compact finding representation for the AI prompt (token-efficient). */
+export interface EnhanceFindingSummary {
+    id: number;
+    file: string;
+    line?: number;
+    severity: FindingSeverity;
+    category: string;
+    message: string;
+    source: string;
+}
+/** Result from the AI enhance pass. */
+export interface EnhanceResult {
+    /** Grouped findings by root cause. */
+    groups: FindingGroup[];
+    /** AI-assigned priority scores (findingId → 1-10). */
+    priorities: Record<number, number>;
+    /** Fix suggestions for top findings (findingId → suggestion text). */
+    suggestions: Record<number, string>;
+    /** Findings flagged as likely false positives. */
+    filtered: FilteredFinding[];
+}
+/** A group of related findings. */
+export interface FindingGroup {
+    groupId: string;
+    label: string;
+    findingIds: number[];
+}
+/** A finding flagged as a likely false positive. */
+export interface FilteredFinding {
+    findingId: number;
+    reason: string;
+}
+/** Metadata from the enhance pass. */
+export interface EnhanceMetadata {
+    model: string;
+    tokenUsage: {
+        input: number;
+        output: number;
+    };
+    groupCount: number;
+    filteredCount: number;
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/enhance/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/enhance/types.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAEnD,sCAAsC;AACtC,MAAM,WAAW,YAAY;IAC3B,QAAQ,EAAE,qBAAqB,EAAE,CAAC;IAClC,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,0EAA0E;AAC1E,MAAM,WAAW,qBAAqB;IACpC,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,eAAe,CAAC;IAC1B,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,uCAAuC;AACvC,MAAM,WAAW,aAAa;IAC5B,sCAAsC;IACtC,MAAM,EAAE,YAAY,EAAE,CAAC;IACvB,sDAAsD;IACtD,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACnC,sEAAsE;IACtE,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACpC,kDAAkD;IAClD,QAAQ,EAAE,eAAe,EAAE,CAAC;CAC7B;AAED,mCAAmC;AACnC,MAAM,WAAW,YAAY;IAC3B,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,EAAE,MAAM,CAAC;IACd,UAAU,EAAE,MAAM,EAAE,CAAC;CACtB;AAED,oDAAoD;AACpD,MAAM,WAAW,eAAe;IAC9B,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,sCAAsC;AACtC,MAAM,WAAW,eAAe;IAC9B,KAAK,EAAE,MAAM,CAAC;IACd,UAAU,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC;IAC9C,UAAU,EAAE,MAAM,CAAC;IACnB,aAAa,EAAE,MAAM,CAAC;CACvB"}

package/dist/enhance/types.js

@@ -0,0 +1,6 @@
+/**
+ * AI Enhance types — used by the enhance module to group,
+ * prioritize, and filter static analysis findings.
+ */
+export {};
+//# sourceMappingURL=types.js.map

package/dist/enhance/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/enhance/types.ts"],"names":[],"mappings":"AAAA;;;GAGG"}

package/dist/health/index.d.ts

@@ -0,0 +1,4 @@
+export { generateRecommendations, type HealthRecommendation, } from './recommendations.js';
+export { computeHealthScore, formatTopIssues, getScoreColor, type HealthScore, SEVERITY_WEIGHTS, } from './score.js';
+export { computeTrend, type HealthHistoryEntry, type HealthTrend, loadHistory, saveHistory, } from './trends.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/health/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/health/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,uBAAuB,EACvB,KAAK,oBAAoB,GAC1B,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EACL,kBAAkB,EAClB,eAAe,EACf,aAAa,EACb,KAAK,WAAW,EAChB,gBAAgB,GACjB,MAAM,YAAY,CAAC;AACpB,OAAO,EACL,YAAY,EACZ,KAAK,kBAAkB,EACvB,KAAK,WAAW,EAChB,WAAW,EACX,WAAW,GACZ,MAAM,aAAa,CAAC"}

package/dist/health/index.js

@@ -0,0 +1,4 @@
+export { generateRecommendations, } from './recommendations.js';
+export { computeHealthScore, formatTopIssues, getScoreColor, SEVERITY_WEIGHTS, } from './score.js';
+export { computeTrend, loadHistory, saveHistory, } from './trends.js';
+//# sourceMappingURL=index.js.map

package/dist/health/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/health/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,uBAAuB,GAExB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EACL,kBAAkB,EAClB,eAAe,EACf,aAAa,EAEb,gBAAgB,GACjB,MAAM,YAAY,CAAC;AACpB,OAAO,EACL,YAAY,EAGZ,WAAW,EACX,WAAW,GACZ,MAAM,aAAa,CAAC"}

package/dist/health/recommendations.d.ts

@@ -0,0 +1,17 @@
+/**
+ * Health recommendations — actionable advice from findings.
+ */
+import type { ReviewFinding } from '../types.js';
+/** A single recommendation. */
+export interface HealthRecommendation {
+    category: string;
+    action: string;
+    impact: 'high' | 'medium' | 'low';
+    findingCount: number;
+}
+/**
+ * Generate actionable recommendations from findings.
+ * Groups by category, sorts by impact, returns top N.
+ */
+export declare function generateRecommendations(findings: ReviewFinding[], limit?: number): HealthRecommendation[];
+//# sourceMappingURL=recommendations.d.ts.map

package/dist/health/recommendations.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"recommendations.d.ts","sourceRoot":"","sources":["../../src/health/recommendations.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAEjD,+BAA+B;AAC/B,MAAM,WAAW,oBAAoB;IACnC,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,GAAG,QAAQ,GAAG,KAAK,CAAC;IAClC,YAAY,EAAE,MAAM,CAAC;CACtB;AA8CD;;;GAGG;AACH,wBAAgB,uBAAuB,CACrC,QAAQ,EAAE,aAAa,EAAE,EACzB,KAAK,SAAI,GACR,oBAAoB,EAAE,CAuCxB"}

package/dist/health/recommendations.js

@@ -0,0 +1,81 @@
+/**
+ * Health recommendations — actionable advice from findings.
+ */
+/** Map finding source -> health category. */
+const SOURCE_CATEGORY = {
+    semgrep: 'security',
+    trivy: 'dependencies',
+    gitleaks: 'secrets',
+    shellcheck: 'scripts',
+    lizard: 'complexity',
+    cpd: 'duplication',
+    ruff: 'quality',
+    eslint: 'quality',
+    hadolint: 'containers',
+    bandit: 'security',
+    phpstan: 'quality',
+    checkstyle: 'quality',
+    detekt: 'quality',
+    clippy: 'quality',
+};
+/** Recommendation templates per category. */
+const TEMPLATES = {
+    security: 'Review and fix {count} security finding(s). Run static analysis regularly to catch vulnerabilities early.',
+    dependencies: 'Address {count} dependency issue(s). Run `npm audit fix` or update vulnerable packages.',
+    secrets: 'Remove {count} exposed secret(s) immediately! Rotate any compromised credentials.',
+    scripts: 'Fix {count} shell script issue(s). Consider using ShellCheck in your CI pipeline.',
+    complexity: 'Refactor {count} overly complex function(s). Break large functions into smaller units.',
+    duplication: 'Reduce {count} instance(s) of code duplication. Extract shared logic into reusable functions.',
+    quality: 'Address {count} code quality issue(s). Configure linters in CI to prevent regressions.',
+    containers: 'Fix {count} Dockerfile issue(s). Follow Dockerfile best practices for smaller, more secure images.',
+};
+/** Severity weights for impact ranking. */
+const IMPACT_WEIGHTS = {
+    critical: 20,
+    high: 10,
+    medium: 3,
+    low: 1,
+    info: 0,
+};
+/**
+ * Generate actionable recommendations from findings.
+ * Groups by category, sorts by impact, returns top N.
+ */
+export function generateRecommendations(findings, limit = 5) {
+    if (findings.length === 0)
+        return [];
+    // Group findings by category
+    const categories = new Map();
+    for (const finding of findings) {
+        const category = SOURCE_CATEGORY[finding.source] ?? 'quality';
+        if (!categories.has(category)) {
+            categories.set(category, { findings: [], impact: 0 });
+        }
+        const cat = categories.get(category);
+        cat.findings.push(finding);
+        cat.impact += IMPACT_WEIGHTS[finding.severity] ?? 0;
+    }
+    // Filter out categories with only info findings (zero impact)
+    const meaningful = Array.from(categories.entries()).filter(([, data]) => data.impact > 0);
+    // Sort by impact (highest first)
+    meaningful.sort((a, b) => b[1].impact - a[1].impact);
+    // Generate recommendations
+    return meaningful.slice(0, limit).map(([category, data]) => {
+        const template = TEMPLATES[category] ?? `Address {count} ${category} issue(s).`;
+        const action = template.replace('{count}', String(data.findings.length));
+        let impact;
+        if (data.impact >= 20)
+            impact = 'high';
+        else if (data.impact >= 5)
+            impact = 'medium';
+        else
+            impact = 'low';
+        return {
+            category,
+            action,
+            impact,
+            findingCount: data.findings.length,
+        };
+    });
+}
+//# sourceMappingURL=recommendations.js.map

package/dist/health/recommendations.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"recommendations.js","sourceRoot":"","sources":["../../src/health/recommendations.ts"],"names":[],"mappings":"AAAA;;GAEG;AAYH,6CAA6C;AAC7C,MAAM,eAAe,GAA2B;IAC9C,OAAO,EAAE,UAAU;IACnB,KAAK,EAAE,cAAc;IACrB,QAAQ,EAAE,SAAS;IACnB,UAAU,EAAE,SAAS;IACrB,MAAM,EAAE,YAAY;IACpB,GAAG,EAAE,aAAa;IAClB,IAAI,EAAE,SAAS;IACf,MAAM,EAAE,SAAS;IACjB,QAAQ,EAAE,YAAY;IACtB,MAAM,EAAE,UAAU;IAClB,OAAO,EAAE,SAAS;IAClB,UAAU,EAAE,SAAS;IACrB,MAAM,EAAE,SAAS;IACjB,MAAM,EAAE,SAAS;CAClB,CAAC;AAEF,6CAA6C;AAC7C,MAAM,SAAS,GAA2B;IACxC,QAAQ,EACN,2GAA2G;IAC7G,YAAY,EACV,yFAAyF;IAC3F,OAAO,EAAE,mFAAmF;IAC5F,OAAO,EAAE,mFAAmF;IAC5F,UAAU,EACR,wFAAwF;IAC1F,WAAW,EACT,+FAA+F;IACjG,OAAO,EAAE,wFAAwF;IACjG,UAAU,EACR,oGAAoG;CACvG,CAAC;AAEF,2CAA2C;AAC3C,MAAM,cAAc,GAA2B;IAC7C,QAAQ,EAAE,EAAE;IACZ,IAAI,EAAE,EAAE;IACR,MAAM,EAAE,CAAC;IACT,GAAG,EAAE,CAAC;IACN,IAAI,EAAE,CAAC;CACR,CAAC;AAEF;;;GAGG;AACH,MAAM,UAAU,uBAAuB,CACrC,QAAyB,EACzB,KAAK,GAAG,CAAC;IAET,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IAErC,6BAA6B;IAC7B,MAAM,UAAU,GAAG,IAAI,GAAG,EAAyD,CAAC;IAEpF,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;QAC/B,MAAM,QAAQ,GAAG,eAAe,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,SAAS,CAAC;QAC9D,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC9B,UAAU,CAAC,GAAG,CAAC,QAAQ,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,CAAC,EAAE,CAAC,CAAC;QACxD,CAAC;QACD,MAAM,GAAG,GAAG,UAAU,CAAC,GAAG,CAAC,QAAQ,CAAE,CAAC;QACtC,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAC3B,GAAG,CAAC,MAAM,IAAI,cAAc,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;IACtD,CAAC;IAED,8DAA8D;IAC9D,MAAM,UAAU,GAAG,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IAE1F,iCAAiC;IACjC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;IAErD,2BAA2B;IAC3B,OAAO,UAAU,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,QAAQ,EAAE,IAAI,CAAC,EAAE,EAAE;QACzD,MAAM,QAAQ,GAAG,SAAS,CAAC,QAAQ,CAAC,IAAI,mBAAmB,QAAQ,YAAY,CAAC;QAChF,MAAM,MAAM,GAAG,QAAQ,CAAC,OAAO,CAAC,SAAS,EAAE,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;QAEzE,IAAI,MAAsC,CAAC;QAC3C,IAAI,IAAI,CAAC,MAAM,IAAI,EAAE;YAAE,MAAM,GAAG,MAAM,CAAC;aAClC,IAAI,IAAI,CAAC,MAAM,IAAI,CAAC;YAAE,MAAM,GAAG,QAAQ,CAAC;;YACxC,MAAM,GAAG,KAAK,CAAC;QAEpB,OAAO;YACL,QAAQ;YACR,MAAM;YACN,MAAM;YACN,YAAY,EAAE,IAAI,CAAC,QAAQ,CAAC,MAAM;SACnC,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/health/score.d.ts

@@ -0,0 +1,32 @@
+/**
+ * Health scoring — deterministic score from static analysis findings.
+ */
+import type { FindingSeverity, ReviewFinding } from '../types.js';
+/** Severity weights for health score computation. */
+export declare const SEVERITY_WEIGHTS: Record<FindingSeverity, number>;
+/** Health score result. */
+export interface HealthScore {
+    /** Score 0-100 (higher is better). */
+    score: number;
+    /** Letter grade: A (80+), B (60-79), C (40-59), D (20-39), F (0-19). */
+    grade: string;
+    /** Finding counts per severity level. */
+    findingCounts: Record<FindingSeverity, number>;
+    /** Total number of findings. */
+    totalFindings: number;
+}
+/**
+ * Compute health score from findings.
+ * Base score = 100. Each finding subtracts its severity weight.
+ * Result clamped to [0, 100].
+ */
+export declare function computeHealthScore(findings: ReviewFinding[]): HealthScore;
+/**
+ * Get color category for a health score.
+ */
+export declare function getScoreColor(score: number): 'green' | 'yellow' | 'red';
+/**
+ * Get top N issues sorted by severity (critical first).
+ */
+export declare function formatTopIssues(findings: ReviewFinding[], limit: number): ReviewFinding[];
+//# sourceMappingURL=score.d.ts.map

package/dist/health/score.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"score.d.ts","sourceRoot":"","sources":["../../src/health/score.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,KAAK,EAAE,eAAe,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAElE,qDAAqD;AACrD,eAAO,MAAM,gBAAgB,EAAE,MAAM,CAAC,eAAe,EAAE,MAAM,CAM5D,CAAC;AAEF,2BAA2B;AAC3B,MAAM,WAAW,WAAW;IAC1B,sCAAsC;IACtC,KAAK,EAAE,MAAM,CAAC;IACd,wEAAwE;IACxE,KAAK,EAAE,MAAM,CAAC;IACd,yCAAyC;IACzC,aAAa,EAAE,MAAM,CAAC,eAAe,EAAE,MAAM,CAAC,CAAC;IAC/C,gCAAgC;IAChC,aAAa,EAAE,MAAM,CAAC;CACvB;AAWD;;;;GAIG;AACH,wBAAgB,kBAAkB,CAAC,QAAQ,EAAE,aAAa,EAAE,GAAG,WAAW,CAwBzE;AAED;;GAEG;AACH,wBAAgB,aAAa,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,GAAG,QAAQ,GAAG,KAAK,CAIvE;AAWD;;GAEG;AACH,wBAAgB,eAAe,CAAC,QAAQ,EAAE,aAAa,EAAE,EAAE,KAAK,EAAE,MAAM,GAAG,aAAa,EAAE,CAIzF"}

package/dist/health/score.js

@@ -0,0 +1,73 @@
+/**
+ * Health scoring — deterministic score from static analysis findings.
+ */
+/** Severity weights for health score computation. */
+export const SEVERITY_WEIGHTS = {
+    critical: -20,
+    high: -10,
+    medium: -3,
+    low: -1,
+    info: 0,
+};
+/** Grade thresholds. */
+const GRADES = [
+    [80, 'A'],
+    [60, 'B'],
+    [40, 'C'],
+    [20, 'D'],
+    [0, 'F'],
+];
+/**
+ * Compute health score from findings.
+ * Base score = 100. Each finding subtracts its severity weight.
+ * Result clamped to [0, 100].
+ */
+export function computeHealthScore(findings) {
+    const findingCounts = {
+        critical: 0,
+        high: 0,
+        medium: 0,
+        low: 0,
+        info: 0,
+    };
+    let deductions = 0;
+    for (const finding of findings) {
+        findingCounts[finding.severity] = (findingCounts[finding.severity] ?? 0) + 1;
+        deductions += Math.abs(SEVERITY_WEIGHTS[finding.severity] ?? 0);
+    }
+    const score = Math.max(0, Math.min(100, 100 - deductions));
+    const grade = GRADES.find(([threshold]) => score >= threshold)?.[1] ?? 'F';
+    return {
+        score,
+        grade,
+        findingCounts,
+        totalFindings: findings.length,
+    };
+}
+/**
+ * Get color category for a health score.
+ */
+export function getScoreColor(score) {
+    if (score >= 80)
+        return 'green';
+    if (score >= 50)
+        return 'yellow';
+    return 'red';
+}
+/** Severity sort order (critical first). */
+const SEVERITY_ORDER = {
+    critical: 0,
+    high: 1,
+    medium: 2,
+    low: 3,
+    info: 4,
+};
+/**
+ * Get top N issues sorted by severity (critical first).
+ */
+export function formatTopIssues(findings, limit) {
+    return [...findings]
+        .sort((a, b) => (SEVERITY_ORDER[a.severity] ?? 5) - (SEVERITY_ORDER[b.severity] ?? 5))
+        .slice(0, limit);
+}
+//# sourceMappingURL=score.js.map

package/dist/health/score.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"score.js","sourceRoot":"","sources":["../../src/health/score.ts"],"names":[],"mappings":"AAAA;;GAEG;AAIH,qDAAqD;AACrD,MAAM,CAAC,MAAM,gBAAgB,GAAoC;IAC/D,QAAQ,EAAE,CAAC,EAAE;IACb,IAAI,EAAE,CAAC,EAAE;IACT,MAAM,EAAE,CAAC,CAAC;IACV,GAAG,EAAE,CAAC,CAAC;IACP,IAAI,EAAE,CAAC;CACR,CAAC;AAcF,wBAAwB;AACxB,MAAM,MAAM,GAAuB;IACjC,CAAC,EAAE,EAAE,GAAG,CAAC;IACT,CAAC,EAAE,EAAE,GAAG,CAAC;IACT,CAAC,EAAE,EAAE,GAAG,CAAC;IACT,CAAC,EAAE,EAAE,GAAG,CAAC;IACT,CAAC,CAAC,EAAE,GAAG,CAAC;CACT,CAAC;AAEF;;;;GAIG;AACH,MAAM,UAAU,kBAAkB,CAAC,QAAyB;IAC1D,MAAM,aAAa,GAAoC;QACrD,QAAQ,EAAE,CAAC;QACX,IAAI,EAAE,CAAC;QACP,MAAM,EAAE,CAAC;QACT,GAAG,EAAE,CAAC;QACN,IAAI,EAAE,CAAC;KACR,CAAC;IAEF,IAAI,UAAU,GAAG,CAAC,CAAC;IACnB,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;QAC/B,aAAa,CAAC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,aAAa,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;QAC7E,UAAU,IAAI,IAAI,CAAC,GAAG,CAAC,gBAAgB,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC;IAClE,CAAC;IAED,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,GAAG,GAAG,UAAU,CAAC,CAAC,CAAC;IAC3D,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,EAAE,EAAE,CAAC,KAAK,IAAI,SAAS,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC;IAE3E,OAAO;QACL,KAAK;QACL,KAAK;QACL,aAAa;QACb,aAAa,EAAE,QAAQ,CAAC,MAAM;KAC/B,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,aAAa,CAAC,KAAa;IACzC,IAAI,KAAK,IAAI,EAAE;QAAE,OAAO,OAAO,CAAC;IAChC,IAAI,KAAK,IAAI,EAAE;QAAE,OAAO,QAAQ,CAAC;IACjC,OAAO,KAAK,CAAC;AACf,CAAC;AAED,4CAA4C;AAC5C,MAAM,cAAc,GAA2B;IAC7C,QAAQ,EAAE,CAAC;IACX,IAAI,EAAE,CAAC;IACP,MAAM,EAAE,CAAC;IACT,GAAG,EAAE,CAAC;IACN,IAAI,EAAE,CAAC;CACR,CAAC;AAEF;;GAEG;AACH,MAAM,UAAU,eAAe,CAAC,QAAyB,EAAE,KAAa;IACtE,OAAO,CAAC,GAAG,QAAQ,CAAC;SACjB,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC;SACrF,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;AACrB,CAAC"}