harnessgap 0.1.0

package/dist/detector/signals.js

@@ -0,0 +1,221 @@
+// Pure detector signal computation. Each SignalValues field is computed by a
+// small named helper; `computeSignals` assembles them. No I/O, no mutation.
+const EXPLORE_TOOLS = new Set(['search', 'read', 'list']);
+/**
+ * Compute all detector signals for a normalized event stream. Pure: no I/O,
+ * no mutation of inputs. See field contracts in `types.ts` / the design spec.
+ */
+export function computeSignals(events, cfg) {
+    return {
+        explore_ratio: computeExploreRatio(events),
+        reread: computeReread(events, cfg),
+        failure_streak: computeFailureStreak(events),
+        corrections: computeCorrections(events, cfg),
+        abandonment: computeAbandonment(events, cfg),
+        oscillation: computeOscillation(events, cfg),
+        wall_clock_per_line_ms: computeWallClockPerLine(events),
+    };
+}
+/**
+ * (search + read + list tool_calls) / totalEditedLines. `null` when no edit
+ * lines were produced (does not contribute to scoring).
+ */
+function computeExploreRatio(events) {
+    let exploreCount = 0;
+    let totalEditedLines = 0;
+    for (const e of events) {
+        if (e.kind !== 'tool_call' || e.tool === null)
+            continue;
+        if (EXPLORE_TOOLS.has(e.tool)) {
+            exploreCount += 1;
+        }
+        else if (e.tool === 'edit') {
+            totalEditedLines += e.input_digest.lines_changed ?? 0;
+        }
+    }
+    if (totalEditedLines === 0)
+        return null;
+    return exploreCount / totalEditedLines;
+}
+/** Distinct file paths read >= `reread_threshold` times across read tool_calls. */
+function computeReread(events, cfg) {
+    const threshold = cfg.detector.reread_threshold;
+    const counts = new Map();
+    for (const e of events) {
+        if (e.kind !== 'tool_call' || e.tool !== 'read')
+            continue;
+        for (const f of e.input_digest.files) {
+            counts.set(f, (counts.get(f) ?? 0) + 1);
+        }
+    }
+    let reread = 0;
+    for (const c of counts.values()) {
+        if (c >= threshold)
+            reread += 1;
+    }
+    return reread;
+}
+/** Longest run of consecutive `exec` tool_calls with `ok === false`. 0 if none. */
+function computeFailureStreak(events) {
+    let max = 0;
+    let cur = 0;
+    for (const e of events) {
+        if (e.kind === 'tool_call' && e.tool === 'exec' && e.ok === false) {
+            cur += 1;
+            if (cur > max)
+                max = cur;
+        }
+        else {
+            cur = 0;
+        }
+    }
+    return max;
+}
+/**
+ * Count `user_msg` corrections tied to the most recent preceding `tool_call`.
+ * A correction counts if:
+ *   - it lands within `correction_window_ms` after the last tool_call, OR
+ *   - it is late but no `assistant_msg` intervened between that tool_call and
+ *     the correction (still the user's direct response to that tool_call).
+ * A new `tool_call` resets the window; an `assistant_msg` marks intervention.
+ */
+function computeCorrections(events, cfg) {
+    const windowMs = cfg.detector.correction_window_ms;
+    let count = 0;
+    let lastToolCallTime = null;
+    let sawAssistantMsgSinceToolCall = false;
+    for (const e of events) {
+        if (e.kind === 'tool_call') {
+            lastToolCallTime = Date.parse(e.t);
+            sawAssistantMsgSinceToolCall = false;
+        }
+        else if (e.kind === 'assistant_msg') {
+            sawAssistantMsgSinceToolCall = true;
+        }
+        else if (e.kind === 'user_msg' && e.correction?.matched === true) {
+            if (lastToolCallTime !== null) {
+                const dt = Date.parse(e.t) - lastToolCallTime;
+                if (dt <= windowMs) {
+                    count += 1;
+                }
+                else if (!sawAssistantMsgSinceToolCall) {
+                    count += 1;
+                }
+            }
+        }
+    }
+    return count;
+}
+/**
+ * True when the last `tail_fraction` of events is explore-heavy (explore-ratio
+ * ≥ `explore_ratio_min`) with zero edit events. Suppressed (forced false) when
+ * `suppress_abandonment_when_no_exec` is set and the whole session is a
+ * research signature (zero edits AND zero test/build exec calls).
+ */
+function computeAbandonment(events, cfg) {
+    if (events.length === 0)
+        return false;
+    const tailSize = Math.floor(events.length * cfg.areas.tail_fraction);
+    if (tailSize === 0)
+        return false;
+    const tail = events.slice(events.length - tailSize);
+    let tailExploreCount = 0;
+    let tailEditedLines = 0;
+    let tailEditCount = 0;
+    for (const e of tail) {
+        if (e.kind !== 'tool_call' || e.tool === null)
+            continue;
+        if (EXPLORE_TOOLS.has(e.tool)) {
+            tailExploreCount += 1;
+        }
+        else if (e.tool === 'edit') {
+            tailEditCount += 1;
+            tailEditedLines += e.input_digest.lines_changed ?? 0;
+        }
+    }
+    const tailExploreRatio = tailExploreCount / Math.max(tailEditedLines, 1);
+    let abandonment = tailExploreRatio >= cfg.areas.explore_ratio_min && tailEditCount === 0;
+    if (abandonment && cfg.areas.suppress_abandonment_when_no_exec) {
+        let wholeSessionEdits = 0;
+        let wholeSessionTestExec = false;
+        for (const e of events) {
+            if (e.kind !== 'tool_call' || e.tool === null)
+                continue;
+            if (e.tool === 'edit') {
+                wholeSessionEdits += 1;
+            }
+            else if (e.tool === 'exec' &&
+                isTestBuildExec(e.input_digest.cmd, cfg.areas.test_cmd_patterns)) {
+                wholeSessionTestExec = true;
+            }
+        }
+        if (wholeSessionEdits === 0 && !wholeSessionTestExec) {
+            abandonment = false;
+        }
+    }
+    return abandonment;
+}
+/**
+ * Count completed `edit → test/build-exec(ok=false) → edit-same-file` cycles
+ * per file. Tracks two sets per file: `pending` (edit seen, awaiting a failed
+ * test) and `failedTestPending` (edit + failed test seen, awaiting a re-edit).
+ * On a failed test/build exec, all pending files move to failedTestPending.
+ * On an edit touching F: if F is in failedTestPending a cycle completes; F then
+ * re-enters pending (a new potential cycle). Exact path-string match.
+ */
+function computeOscillation(events, cfg) {
+    const patterns = cfg.areas.test_cmd_patterns;
+    const pending = new Set();
+    const failedTestPending = new Set();
+    let cycles = 0;
+    for (const e of events) {
+        if (e.kind !== 'tool_call' || e.tool === null)
+            continue;
+        if (e.tool === 'edit') {
+            for (const f of e.input_digest.files) {
+                if (failedTestPending.has(f)) {
+                    cycles += 1;
+                    failedTestPending.delete(f);
+                }
+                pending.add(f);
+            }
+        }
+        else if (e.tool === 'exec' &&
+            e.ok === false &&
+            isTestBuildExec(e.input_digest.cmd, patterns)) {
+            for (const f of pending) {
+                failedTestPending.add(f);
+            }
+            pending.clear();
+        }
+    }
+    return cycles;
+}
+/**
+ * `(last event t − first event t)` in ms / totalEditedLines. `null` when no
+ * edit lines were produced. Derived from event timestamps only; this can
+ * diverge from `envelope.duration_ms`, which the adapter derives from raw
+ * record timestamps (first..last record). After the tool_use/result merge a
+ * merged tool_call's `t` is the result's timestamp, so the two spans are not
+ * guaranteed equal.
+ */
+function computeWallClockPerLine(events) {
+    let totalEditedLines = 0;
+    for (const e of events) {
+        if (e.kind === 'tool_call' && e.tool === 'edit') {
+            totalEditedLines += e.input_digest.lines_changed ?? 0;
+        }
+    }
+    if (totalEditedLines === 0)
+        return null;
+    const durationMs = Date.parse(events[events.length - 1].t) - Date.parse(events[0].t);
+    return durationMs / totalEditedLines;
+}
+/** Case-insensitive substring match of any pattern against a scrubbed cmd. */
+function isTestBuildExec(cmd, patterns) {
+    if (cmd === null)
+        return false;
+    const lower = cmd.toLowerCase();
+    return patterns.some((p) => lower.includes(p.toLowerCase()));
+}
+//# sourceMappingURL=signals.js.map

package/dist/detector/signals.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"signals.js","sourceRoot":"","sources":["../../src/detector/signals.ts"],"names":[],"mappings":"AAAA,6EAA6E;AAC7E,4EAA4E;AAI5E,MAAM,aAAa,GAA0B,IAAI,GAAG,CAAW,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;AAE3F;;;GAGG;AACH,MAAM,UAAU,cAAc,CAAC,MAAyB,EAAE,GAAW;IACnE,OAAO;QACL,aAAa,EAAE,mBAAmB,CAAC,MAAM,CAAC;QAC1C,MAAM,EAAE,aAAa,CAAC,MAAM,EAAE,GAAG,CAAC;QAClC,cAAc,EAAE,oBAAoB,CAAC,MAAM,CAAC;QAC5C,WAAW,EAAE,kBAAkB,CAAC,MAAM,EAAE,GAAG,CAAC;QAC5C,WAAW,EAAE,kBAAkB,CAAC,MAAM,EAAE,GAAG,CAAC;QAC5C,WAAW,EAAE,kBAAkB,CAAC,MAAM,EAAE,GAAG,CAAC;QAC5C,sBAAsB,EAAE,uBAAuB,CAAC,MAAM,CAAC;KACxD,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,SAAS,mBAAmB,CAAC,MAAyB;IACpD,IAAI,YAAY,GAAG,CAAC,CAAC;IACrB,IAAI,gBAAgB,GAAG,CAAC,CAAC;IACzB,KAAK,MAAM,CAAC,IAAI,MAAM,EAAE,CAAC;QACvB,IAAI,CAAC,CAAC,IAAI,KAAK,WAAW,IAAI,CAAC,CAAC,IAAI,KAAK,IAAI;YAAE,SAAS;QACxD,IAAI,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC;YAC9B,YAAY,IAAI,CAAC,CAAC;QACpB,CAAC;aAAM,IAAI,CAAC,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;YAC7B,gBAAgB,IAAI,CAAC,CAAC,YAAY,CAAC,aAAa,IAAI,CAAC,CAAC;QACxD,CAAC;IACH,CAAC;IACD,IAAI,gBAAgB,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACxC,OAAO,YAAY,GAAG,gBAAgB,CAAC;AACzC,CAAC;AAED,mFAAmF;AACnF,SAAS,aAAa,CAAC,MAAyB,EAAE,GAAW;IAC3D,MAAM,SAAS,GAAG,GAAG,CAAC,QAAQ,CAAC,gBAAgB,CAAC;IAChD,MAAM,MAAM,GAAG,IAAI,GAAG,EAAkB,CAAC;IACzC,KAAK,MAAM,CAAC,IAAI,MAAM,EAAE,CAAC;QACvB,IAAI,CAAC,CAAC,IAAI,KAAK,WAAW,IAAI,CAAC,CAAC,IAAI,KAAK,MAAM;YAAE,SAAS;QAC1D,KAAK,MAAM,CAAC,IAAI,CAAC,CAAC,YAAY,CAAC,KAAK,EAAE,CAAC;YACrC,MAAM,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;QAC1C,CAAC;IACH,CAAC;IACD,IAAI,MAAM,GAAG,CAAC,CAAC;IACf,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,MAAM,EAAE,EAAE,CAAC;QAChC,IAAI,CAAC,IAAI,SAAS;YAAE,MAAM,IAAI,CAAC,CAAC;IAClC,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,mFAAmF;AACnF,SAAS,oBAAoB,CAAC,MAAyB;IACrD,IAAI,GAAG,GAAG,CAAC,CAAC;IACZ,IAAI,GAAG,GAAG,CAAC,CAAC;IACZ,KAAK,MAAM,CAAC,IAAI,MAAM,EAAE,CAAC;QACvB,IAAI,CAAC,CAAC,IAAI,KAAK,WAAW,IAAI,CAAC,CAAC,IAAI,KAAK,MAAM,IAAI,CAAC,CAAC,EAAE,KAAK,KAAK,EAAE,CAAC;YAClE,GAAG,IAAI,CAAC,CAAC;YACT,IAAI,GAAG,GAAG,GAAG;gBAAE,GAAG,GAAG,GAAG,CAAC;QAC3B,CAAC;aAAM,CAAC;YACN,GAAG,GAAG,CAAC,CAAC;QACV,CAAC;IACH,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;;;;;GAOG;AACH,SAAS,kBAAkB,CAAC,MAAyB,EAAE,GAAW;IAChE,MAAM,QAAQ,GAAG,GAAG,CAAC,QAAQ,CAAC,oBAAoB,CAAC;IACnD,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,IAAI,gBAAgB,GAAkB,IAAI,CAAC;IAC3C,IAAI,4BAA4B,GAAG,KAAK,CAAC;IAEzC,KAAK,MAAM,CAAC,IAAI,MAAM,EAAE,CAAC;QACvB,IAAI,CAAC,CAAC,IAAI,KAAK,WAAW,EAAE,CAAC;YAC3B,gBAAgB,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YACnC,4BAA4B,GAAG,KAAK,CAAC;QACvC,CAAC;aAAM,IAAI,CAAC,CAAC,IAAI,KAAK,eAAe,EAAE,CAAC;YACtC,4BAA4B,GAAG,IAAI,CAAC;QACtC,CAAC;aAAM,IAAI,CAAC,CAAC,IAAI,KAAK,UAAU,IAAI,CAAC,CAAC,UAAU,EAAE,OAAO,KAAK,IAAI,EAAE,CAAC;YACnE,IAAI,gBAAgB,KAAK,IAAI,EAAE,CAAC;gBAC9B,MAAM,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,gBAAgB,CAAC;gBAC9C,IAAI,EAAE,IAAI,QAAQ,EAAE,CAAC;oBACnB,KAAK,IAAI,CAAC,CAAC;gBACb,CAAC;qBAAM,IAAI,CAAC,4BAA4B,EAAE,CAAC;oBACzC,KAAK,IAAI,CAAC,CAAC;gBACb,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;;GAKG;AACH,SAAS,kBAAkB,CAAC,MAAyB,EAAE,GAAW;IAChE,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IACtC,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,GAAG,GAAG,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC;IACrE,IAAI,QAAQ,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IACjC,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,GAAG,QAAQ,CAAC,CAAC;IAEpD,IAAI,gBAAgB,GAAG,CAAC,CAAC;IACzB,IAAI,eAAe,GAAG,CAAC,CAAC;IACxB,IAAI,aAAa,GAAG,CAAC,CAAC;IACtB,KAAK,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC;QACrB,IAAI,CAAC,CAAC,IAAI,KAAK,WAAW,IAAI,CAAC,CAAC,IAAI,KAAK,IAAI;YAAE,SAAS;QACxD,IAAI,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC;YAC9B,gBAAgB,IAAI,CAAC,CAAC;QACxB,CAAC;aAAM,IAAI,CAAC,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;YAC7B,aAAa,IAAI,CAAC,CAAC;YACnB,eAAe,IAAI,CAAC,CAAC,YAAY,CAAC,aAAa,IAAI,CAAC,CAAC;QACvD,CAAC;IACH,CAAC;IACD,MAAM,gBAAgB,GAAG,gBAAgB,GAAG,IAAI,CAAC,GAAG,CAAC,eAAe,EAAE,CAAC,CAAC,CAAC;IACzE,IAAI,WAAW,GAAG,gBAAgB,IAAI,GAAG,CAAC,KAAK,CAAC,iBAAiB,IAAI,aAAa,KAAK,CAAC,CAAC;IAEzF,IAAI,WAAW,IAAI,GAAG,CAAC,KAAK,CAAC,iCAAiC,EAAE,CAAC;QAC/D,IAAI,iBAAiB,GAAG,CAAC,CAAC;QAC1B,IAAI,oBAAoB,GAAG,KAAK,CAAC;QACjC,KAAK,MAAM,CAAC,IAAI,MAAM,EAAE,CAAC;YACvB,IAAI,CAAC,CAAC,IAAI,KAAK,WAAW,IAAI,CAAC,CAAC,IAAI,KAAK,IAAI;gBAAE,SAAS;YACxD,IAAI,CAAC,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;gBACtB,iBAAiB,IAAI,CAAC,CAAC;YACzB,CAAC;iBAAM,IACL,CAAC,CAAC,IAAI,KAAK,MAAM;gBACjB,eAAe,CAAC,CAAC,CAAC,YAAY,CAAC,GAAG,EAAE,GAAG,CAAC,KAAK,CAAC,iBAAiB,CAAC,EAChE,CAAC;gBACD,oBAAoB,GAAG,IAAI,CAAC;YAC9B,CAAC;QACH,CAAC;QACD,IAAI,iBAAiB,KAAK,CAAC,IAAI,CAAC,oBAAoB,EAAE,CAAC;YACrD,WAAW,GAAG,KAAK,CAAC;QACtB,CAAC;IACH,CAAC;IACD,OAAO,WAAW,CAAC;AACrB,CAAC;AAED;;;;;;;GAOG;AACH,SAAS,kBAAkB,CAAC,MAAyB,EAAE,GAAW;IAChE,MAAM,QAAQ,GAAG,GAAG,CAAC,KAAK,CAAC,iBAAiB,CAAC;IAC7C,MAAM,OAAO,GAAG,IAAI,GAAG,EAAU,CAAC;IAClC,MAAM,iBAAiB,GAAG,IAAI,GAAG,EAAU,CAAC;IAC5C,IAAI,MAAM,GAAG,CAAC,CAAC;IAEf,KAAK,MAAM,CAAC,IAAI,MAAM,EAAE,CAAC;QACvB,IAAI,CAAC,CAAC,IAAI,KAAK,WAAW,IAAI,CAAC,CAAC,IAAI,KAAK,IAAI;YAAE,SAAS;QACxD,IAAI,CAAC,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;YACtB,KAAK,MAAM,CAAC,IAAI,CAAC,CAAC,YAAY,CAAC,KAAK,EAAE,CAAC;gBACrC,IAAI,iBAAiB,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;oBAC7B,MAAM,IAAI,CAAC,CAAC;oBACZ,iBAAiB,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;gBAC9B,CAAC;gBACD,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;YACjB,CAAC;QACH,CAAC;aAAM,IACL,CAAC,CAAC,IAAI,KAAK,MAAM;YACjB,CAAC,CAAC,EAAE,KAAK,KAAK;YACd,eAAe,CAAC,CAAC,CAAC,YAAY,CAAC,GAAG,EAAE,QAAQ,CAAC,EAC7C,CAAC;YACD,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;gBACxB,iBAAiB,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;YAC3B,CAAC;YACD,OAAO,CAAC,KAAK,EAAE,CAAC;QAClB,CAAC;IACH,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;;;;;;GAOG;AACH,SAAS,uBAAuB,CAAC,MAAyB;IACxD,IAAI,gBAAgB,GAAG,CAAC,CAAC;IACzB,KAAK,MAAM,CAAC,IAAI,MAAM,EAAE,CAAC;QACvB,IAAI,CAAC,CAAC,IAAI,KAAK,WAAW,IAAI,CAAC,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;YAChD,gBAAgB,IAAI,CAAC,CAAC,YAAY,CAAC,aAAa,IAAI,CAAC,CAAC;QACxD,CAAC;IACH,CAAC;IACD,IAAI,gBAAgB,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACxC,MAAM,UAAU,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACrF,OAAO,UAAU,GAAG,gBAAgB,CAAC;AACvC,CAAC;AAED,8EAA8E;AAC9E,SAAS,eAAe,CAAC,GAAkB,EAAE,QAAkB;IAC7D,IAAI,GAAG,KAAK,IAAI;QAAE,OAAO,KAAK,CAAC;IAC/B,MAAM,KAAK,GAAG,GAAG,CAAC,WAAW,EAAE,CAAC;IAChC,OAAO,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC;AAC/D,CAAC"}

package/dist/egress.d.ts

@@ -0,0 +1,8 @@
+export declare const FORBIDDEN_IMPORT: RegExp;
+export declare const FORBIDDEN_FETCH_CALL: RegExp;
+/** True if `content` contains a forbidden network-module import. */
+export declare function hasForbiddenImport(content: string): boolean;
+/** True if `content` invokes the global fetch. */
+export declare function hasFetchCall(content: string): boolean;
+/** True if `content` has any forbidden network egress (import or fetch call). */
+export declare function hasForbiddenEgress(content: string): boolean;

package/dist/egress.js

@@ -0,0 +1,37 @@
+// §11 egress guard: forbidden network-egress detection. Single source of truth
+// shared by the no-network audit (test/egress.test.ts) and its unit tests.
+//
+// The CLI must be stateless and offline (§11): no src file may import a network
+// module or invoke the global fetch. This module encodes what counts as
+// "forbidden" so the scan and the unit tests cannot drift apart.
+// Matches four import shapes whose specifier is a forbidden network module
+// (http, https, net, node:net, node:http, node:https, undici, fetch — the
+// `node:` prefix is optional and `https?` collapses http/https):
+//   1. static import with a binding list (possibly multi-line): import … from 'spec'
+//      — `[\s\S]*?` matches across newlines so multi-line named imports are caught.
+//   2. side-effect import: bare import 'spec' (no `from`).
+//   3. dynamic import: import('spec').
+//   4. CommonJS require: require('spec').
+// Errs toward flagging (matches inside comments/strings too) — acceptable for a
+// security control; the scan asserts zero offenders in src/.
+export const FORBIDDEN_IMPORT = /(?:import\s+[\s\S]*?\s+from\s+|import\s*|import\s*\(\s*|require\s*\(\s*)['"](?:node:)?(?:https?|net|undici|fetch)['"]/;
+// Matches a call to the global fetch — a network API available as a global in
+// Node 18+ (this project targets Node >=22.12), so an import is not required to
+// use it. Catches a fetch invocation with any arguments. Case-sensitive so it
+// does not match `WebFetch` or `hasFetchCall`; a locally-defined fetch function
+// would still match, which is acceptable in a no-network codebase where no such
+// local binding exists. Errs toward flagging (matches inside comments/strings).
+export const FORBIDDEN_FETCH_CALL = /\bfetch\s*\(/;
+/** True if `content` contains a forbidden network-module import. */
+export function hasForbiddenImport(content) {
+    return FORBIDDEN_IMPORT.test(content);
+}
+/** True if `content` invokes the global fetch. */
+export function hasFetchCall(content) {
+    return FORBIDDEN_FETCH_CALL.test(content);
+}
+/** True if `content` has any forbidden network egress (import or fetch call). */
+export function hasForbiddenEgress(content) {
+    return hasForbiddenImport(content) || hasFetchCall(content);
+}
+//# sourceMappingURL=egress.js.map

package/dist/egress.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"egress.js","sourceRoot":"","sources":["../src/egress.ts"],"names":[],"mappings":"AAAA,+EAA+E;AAC/E,2EAA2E;AAC3E,EAAE;AACF,gFAAgF;AAChF,wEAAwE;AACxE,iEAAiE;AAEjE,2EAA2E;AAC3E,0EAA0E;AAC1E,iEAAiE;AACjE,qFAAqF;AACrF,oFAAoF;AACpF,2DAA2D;AAC3D,uCAAuC;AACvC,0CAA0C;AAC1C,gFAAgF;AAChF,6DAA6D;AAC7D,MAAM,CAAC,MAAM,gBAAgB,GAC3B,uHAAuH,CAAC;AAE1H,8EAA8E;AAC9E,gFAAgF;AAChF,8EAA8E;AAC9E,gFAAgF;AAChF,gFAAgF;AAChF,gFAAgF;AAChF,MAAM,CAAC,MAAM,oBAAoB,GAAG,cAAc,CAAC;AAEnD,oEAAoE;AACpE,MAAM,UAAU,kBAAkB,CAAC,OAAe;IAChD,OAAO,gBAAgB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;AACxC,CAAC;AAED,kDAAkD;AAClD,MAAM,UAAU,YAAY,CAAC,OAAe;IAC1C,OAAO,oBAAoB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;AAC5C,CAAC;AAED,iFAAiF;AACjF,MAAM,UAAU,kBAAkB,CAAC,OAAe;IAChD,OAAO,kBAAkB,CAAC,OAAO,CAAC,IAAI,YAAY,CAAC,OAAO,CAAC,CAAC;AAC9D,CAAC"}

package/dist/git.d.ts

@@ -0,0 +1,16 @@
+/**
+ * Sandboxed git toplevel resolver.
+ *
+ * Resolves the git toplevel for `cwd` via a locked-down
+ * `git rev-parse --show-toplevel`. Returns `null` (never throws) when `cwd` is
+ * not a repo, git is unavailable, or `cwd` is missing.
+ *
+ * Security: `cwd` originates from transcripts (untrusted). The sandbox — env
+ * vars (`GIT_CONFIG_NOSYSTEM`, `GIT_CONFIG_GLOBAL`), `-c` overrides
+ * (`core.fsmonitor`, `core.pager`, `core.hooksPath`), `execFile` (no shell),
+ * and rev-parse only — prevents git from invoking external programs via
+ * repo-local config. Do not relax these.
+ *
+ * Memoized by `cwd` when a `cache` Map is passed.
+ */
+export declare function resolveToplevel(cwd: string, cache?: Map<string, string | null>): Promise<string | null>;

package/dist/git.js

@@ -0,0 +1,59 @@
+import * as child_process from 'node:child_process';
+/**
+ * Sandboxed git toplevel resolver.
+ *
+ * Resolves the git toplevel for `cwd` via a locked-down
+ * `git rev-parse --show-toplevel`. Returns `null` (never throws) when `cwd` is
+ * not a repo, git is unavailable, or `cwd` is missing.
+ *
+ * Security: `cwd` originates from transcripts (untrusted). The sandbox — env
+ * vars (`GIT_CONFIG_NOSYSTEM`, `GIT_CONFIG_GLOBAL`), `-c` overrides
+ * (`core.fsmonitor`, `core.pager`, `core.hooksPath`), `execFile` (no shell),
+ * and rev-parse only — prevents git from invoking external programs via
+ * repo-local config. Do not relax these.
+ *
+ * Memoized by `cwd` when a `cache` Map is passed.
+ */
+export function resolveToplevel(cwd, cache) {
+    if (cache?.has(cwd)) {
+        return Promise.resolve(cache.get(cwd) ?? null);
+    }
+    return new Promise((resolve) => {
+        try {
+            child_process.execFile('git', [
+                '-C',
+                cwd,
+                '-c',
+                'core.fsmonitor=',
+                '-c',
+                'core.pager=cat',
+                '-c',
+                'core.hooksPath=',
+                'rev-parse',
+                '--show-toplevel',
+            ], {
+                env: {
+                    ...process.env,
+                    GIT_CONFIG_NOSYSTEM: '1',
+                    GIT_CONFIG_GLOBAL: '/dev/null',
+                },
+                windowsHide: true,
+            }, (err, stdout) => {
+                if (err) {
+                    // non-zero exit, git missing (ENOENT), cwd missing, etc.
+                    cache?.set(cwd, null);
+                    return resolve(null);
+                }
+                const toplevel = String(stdout).trim();
+                cache?.set(cwd, toplevel);
+                resolve(toplevel);
+            });
+        }
+        catch {
+            // synchronous throw (invalid args, etc.) — never propagate
+            cache?.set(cwd, null);
+            resolve(null);
+        }
+    });
+}
+//# sourceMappingURL=git.js.map

package/dist/git.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"git.js","sourceRoot":"","sources":["../src/git.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,aAAa,MAAM,oBAAoB,CAAC;AAEpD;;;;;;;;;;;;;;GAcG;AACH,MAAM,UAAU,eAAe,CAC7B,GAAW,EACX,KAAkC;IAElC,IAAI,KAAK,EAAE,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;QACpB,OAAO,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,CAAC;IACjD,CAAC;IAED,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QAC7B,IAAI,CAAC;YACH,aAAa,CAAC,QAAQ,CACpB,KAAK,EACL;gBACE,IAAI;gBACJ,GAAG;gBACH,IAAI;gBACJ,iBAAiB;gBACjB,IAAI;gBACJ,gBAAgB;gBAChB,IAAI;gBACJ,iBAAiB;gBACjB,WAAW;gBACX,iBAAiB;aAClB,EACD;gBACE,GAAG,EAAE;oBACH,GAAG,OAAO,CAAC,GAAG;oBACd,mBAAmB,EAAE,GAAG;oBACxB,iBAAiB,EAAE,WAAW;iBAC/B;gBACD,WAAW,EAAE,IAAI;aAClB,EACD,CAAC,GAAG,EAAE,MAAM,EAAE,EAAE;gBACd,IAAI,GAAG,EAAE,CAAC;oBACR,yDAAyD;oBACzD,KAAK,EAAE,GAAG,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;oBACtB,OAAO,OAAO,CAAC,IAAI,CAAC,CAAC;gBACvB,CAAC;gBACD,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC;gBACvC,KAAK,EAAE,GAAG,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;gBAC1B,OAAO,CAAC,QAAQ,CAAC,CAAC;YACpB,CAAC,CACF,CAAC;QACJ,CAAC;QAAC,MAAM,CAAC;YACP,2DAA2D;YAC3D,KAAK,EAAE,GAAG,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;YACtB,OAAO,CAAC,IAAI,CAAC,CAAC;QAChB,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/index.d.ts

@@ -0,0 +1 @@
+export declare function ping(): string;

package/dist/index.js

@@ -0,0 +1,4 @@
+export function ping() {
+    return 'harnessgap';
+}
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,MAAM,UAAU,IAAI;IAClB,OAAO,YAAY,CAAC;AACtB,CAAC"}

package/dist/output/calibrate.d.ts

@@ -0,0 +1,35 @@
+import type { Config, ScoringMode, SignalName, SignalValues } from '../types.js';
+/** Per-signal aggregate stats in the calibrate object. */
+interface CalibrateSignalStat {
+    min: number;
+    p50: number;
+    p90: number;
+    max: number;
+    active_threshold: number;
+}
+/** Inputs to `buildCalibrateObject`. */
+interface CalibrateInput {
+    mode: ScoringMode;
+    session_count: number;
+    flag_pct: number;
+    signals: SignalValues[];
+    bootstrap_thresholds: Config['detector']['bootstrap_thresholds'];
+}
+/** The calibrate aggregate-stats object (no per-session values). */
+interface CalibrateObject {
+    mode: ScoringMode;
+    session_count: number;
+    flag_pct: number;
+    signals: Record<SignalName, CalibrateSignalStat>;
+}
+/**
+ * Build the calibrate aggregate-stats object. Pure: no I/O, no per-session
+ * values in the output (only min/p50/p90/max/active_threshold per signal).
+ */
+export declare function buildCalibrateObject(input: CalibrateInput): CalibrateObject;
+/**
+ * Format the calibrate object as a human-readable table. Aggregate numbers +
+ * signal names only — no per-session examples, no commands, no prose.
+ */
+export declare function formatCalibrateTable(obj: ReturnType<typeof buildCalibrateObject>): string;
+export {};

package/dist/output/calibrate.js

@@ -0,0 +1,149 @@
+// Pure calibrate builders: turn per-session `SignalValues[]` into aggregate
+// statistics (min/p50/p90/max/active_threshold per signal) and a human table.
+// No I/O, no per-session values in the output, no commands, no prose.
+//
+// `active_threshold` semantics:
+// - bootstrap mode → `bootstrap_thresholds[name]` (the configured absolute
+//   threshold; for `wall_clock_per_line` this is `wall_clock_per_line_ms`).
+// - percentile mode → the `flag_pct`-percentile value of that signal across
+//   sessions (sorted-index linear interpolation).
+// - `abandonment` (boolean): treated as 0/1 throughout. Its `active_threshold`
+//   is `bootstrap_thresholds.abandonment` (true) represented as 1 for both
+//   modes, so the entire abandonment entry stays uniformly 0/1.
+// SignalName → field on `SignalValues`. Only `wall_clock_per_line` differs
+// (its field is `wall_clock_per_line_ms`).
+const SIGNAL_FIELDS = {
+    explore_ratio: 'explore_ratio',
+    reread: 'reread',
+    failure_streak: 'failure_streak',
+    corrections: 'corrections',
+    abandonment: 'abandonment',
+    oscillation: 'oscillation',
+    wall_clock_per_line: 'wall_clock_per_line_ms',
+};
+// SignalName → key on `bootstrap_thresholds`. Only `wall_clock_per_line` differs
+// (its threshold key is `wall_clock_per_line_ms`).
+const THRESHOLD_KEYS = {
+    explore_ratio: 'explore_ratio',
+    reread: 'reread',
+    failure_streak: 'failure_streak',
+    corrections: 'corrections',
+    abandonment: 'abandonment',
+    oscillation: 'oscillation',
+    wall_clock_per_line: 'wall_clock_per_line_ms',
+};
+// Canonical signal order for deterministic output.
+const SIGNAL_ORDER = [
+    'explore_ratio',
+    'reread',
+    'failure_streak',
+    'corrections',
+    'abandonment',
+    'oscillation',
+    'wall_clock_per_line',
+];
+/**
+ * Build the calibrate aggregate-stats object. Pure: no I/O, no per-session
+ * values in the output (only min/p50/p90/max/active_threshold per signal).
+ */
+export function buildCalibrateObject(input) {
+    const { mode, session_count, flag_pct, signals, bootstrap_thresholds } = input;
+    const out = {};
+    for (const name of SIGNAL_ORDER) {
+        out[name] = computeStat(name, signals, mode, flag_pct, bootstrap_thresholds);
+    }
+    return { mode, session_count, flag_pct, signals: out };
+}
+/**
+ * Compute min/p50/p90/max/active_threshold for one signal across all sessions.
+ *
+ * - `abandonment`: 0/1 stats (min = any false, max = any true, p50 = strict
+ *   majority true, p90 = max, active_threshold = configured boolean → 1).
+ * - numeric/nullable: filter nulls; min/max are extremes; p50/p90/active use
+ *   sorted-index linear interpolation. Empty (all-null) → all zeros.
+ */
+function computeStat(name, signals, mode, flag_pct, bootstrap_thresholds) {
+    if (name === 'abandonment') {
+        return computeAbandonmentStat(signals, bootstrap_thresholds);
+    }
+    const field = SIGNAL_FIELDS[name];
+    const raw = signals
+        .map((s) => s[field])
+        .filter((v) => v !== null);
+    const bootThreshold = bootstrap_thresholds[THRESHOLD_KEYS[name]];
+    if (raw.length === 0) {
+        // No non-null values: stats are 0; active_threshold is the configured boot
+        // threshold in bootstrap mode, else 0 (no percentile of an empty set).
+        return {
+            min: 0,
+            p50: 0,
+            p90: 0,
+            max: 0,
+            active_threshold: mode === 'bootstrap' ? round(bootThreshold) : 0,
+        };
+    }
+    const sorted = [...raw].sort((a, b) => a - b);
+    const min = sorted[0];
+    const max = sorted[sorted.length - 1];
+    const p50 = percentile(sorted, 50);
+    const p90 = percentile(sorted, 90);
+    const active_threshold = mode === 'bootstrap' ? bootThreshold : percentile(sorted, flag_pct);
+    return {
+        min: round(min),
+        p50: round(p50),
+        p90: round(p90),
+        max: round(max),
+        active_threshold: round(active_threshold),
+    };
+}
+/** Abandonment stats: booleans as 0/1, all outputs constrained to {0,1}. */
+function computeAbandonmentStat(signals, bootstrap_thresholds) {
+    if (signals.length === 0) {
+        return { min: 0, p50: 0, p90: 0, max: 0, active_threshold: 0 };
+    }
+    const vals = signals.map((s) => (s.abandonment ? 1 : 0));
+    const trues = vals.reduce((acc, v) => acc + v, 0);
+    const min = vals.includes(0) ? 0 : 1;
+    const max = trues > 0 ? 1 : 0;
+    // strict majority true (tie → 0), matching the leaderboard median-boolean rule
+    const p50 = trues * 2 > vals.length ? 1 : 0;
+    const p90 = max; // 90th percentile of 0/1: 1 if any session abandoned
+    const active_threshold = bootstrap_thresholds.abandonment ? 1 : 0;
+    return { min, p50, p90, max, active_threshold };
+}
+/**
+ * Percentile via sorted-index linear interpolation (R-7 / numpy default).
+ * `sorted` must be ascending and non-empty. `p` is in [0, 100].
+ */
+function percentile(sorted, p) {
+    const n = sorted.length;
+    if (n === 0)
+        return 0;
+    if (n === 1)
+        return sorted[0];
+    const rank = (p / 100) * (n - 1);
+    const lower = Math.floor(rank);
+    const upper = Math.ceil(rank);
+    if (lower === upper)
+        return sorted[lower];
+    return sorted[lower] + (rank - lower) * (sorted[upper] - sorted[lower]);
+}
+/** Round to 2 decimal places to keep aggregate stats readable. */
+function round(x) {
+    return Math.round(x * 100) / 100;
+}
+/**
+ * Format the calibrate object as a human-readable table. Aggregate numbers +
+ * signal names only — no per-session examples, no commands, no prose.
+ */
+export function formatCalibrateTable(obj) {
+    const lines = [];
+    lines.push(`harnessgap calibrate — mode: ${obj.mode} · ${obj.session_count} sessions · flag_pct: ${obj.flag_pct}`);
+    lines.push(`${'SIGNAL'.padEnd(22)} | ${'MIN'.padStart(10)} | ${'P50'.padStart(10)} | ${'P90'.padStart(10)} | ${'MAX'.padStart(10)} | ${'THRESHOLD'.padStart(10)}`);
+    for (const name of SIGNAL_ORDER) {
+        const s = obj.signals[name];
+        lines.push(`${name.padEnd(22)} | ${String(s.min).padStart(10)} | ${String(s.p50).padStart(10)} | ${String(s.p90).padStart(10)} | ${String(s.max).padStart(10)} | ${String(s.active_threshold).padStart(10)}`);
+    }
+    return lines.join('\n');
+}
+//# sourceMappingURL=calibrate.js.map

package/dist/output/calibrate.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"calibrate.js","sourceRoot":"","sources":["../../src/output/calibrate.ts"],"names":[],"mappings":"AAAA,4EAA4E;AAC5E,8EAA8E;AAC9E,sEAAsE;AACtE,EAAE;AACF,gCAAgC;AAChC,2EAA2E;AAC3E,4EAA4E;AAC5E,4EAA4E;AAC5E,kDAAkD;AAClD,+EAA+E;AAC/E,2EAA2E;AAC3E,gEAAgE;AAmChE,2EAA2E;AAC3E,2CAA2C;AAC3C,MAAM,aAAa,GAA2C;IAC5D,aAAa,EAAE,eAAe;IAC9B,MAAM,EAAE,QAAQ;IAChB,cAAc,EAAE,gBAAgB;IAChC,WAAW,EAAE,aAAa;IAC1B,WAAW,EAAE,aAAa;IAC1B,WAAW,EAAE,aAAa;IAC1B,mBAAmB,EAAE,wBAAwB;CAC9C,CAAC;AAEF,iFAAiF;AACjF,mDAAmD;AACnD,MAAM,cAAc,GAGhB;IACF,aAAa,EAAE,eAAe;IAC9B,MAAM,EAAE,QAAQ;IAChB,cAAc,EAAE,gBAAgB;IAChC,WAAW,EAAE,aAAa;IAC1B,WAAW,EAAE,aAAa;IAC1B,WAAW,EAAE,aAAa;IAC1B,mBAAmB,EAAE,wBAAwB;CAC9C,CAAC;AAEF,mDAAmD;AACnD,MAAM,YAAY,GAA0B;IAC1C,eAAe;IACf,QAAQ;IACR,gBAAgB;IAChB,aAAa;IACb,aAAa;IACb,aAAa;IACb,qBAAqB;CACtB,CAAC;AAEF;;;GAGG;AACH,MAAM,UAAU,oBAAoB,CAAC,KAAqB;IACxD,MAAM,EAAE,IAAI,EAAE,aAAa,EAAE,QAAQ,EAAE,OAAO,EAAE,oBAAoB,EAAE,GAAG,KAAK,CAAC;IAC/E,MAAM,GAAG,GAAG,EAA6C,CAAC;IAC1D,KAAK,MAAM,IAAI,IAAI,YAAY,EAAE,CAAC;QAChC,GAAG,CAAC,IAAI,CAAC,GAAG,WAAW,CAAC,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,oBAAoB,CAAC,CAAC;IAC/E,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,aAAa,EAAE,QAAQ,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC;AACzD,CAAC;AAED;;;;;;;GAOG;AACH,SAAS,WAAW,CAClB,IAAgB,EAChB,OAAuB,EACvB,IAAiB,EACjB,QAAgB,EAChB,oBAAgE;IAEhE,IAAI,IAAI,KAAK,aAAa,EAAE,CAAC;QAC3B,OAAO,sBAAsB,CAAC,OAAO,EAAE,oBAAoB,CAAC,CAAC;IAC/D,CAAC;IACD,MAAM,KAAK,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC;IAClC,MAAM,GAAG,GAAG,OAAO;SAChB,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAkB,CAAC;SACrC,MAAM,CAAC,CAAC,CAAC,EAAe,EAAE,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC;IAE1C,MAAM,aAAa,GAAG,oBAAoB,CAAC,cAAc,CAAC,IAAI,CAAC,CAAW,CAAC;IAE3E,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACrB,2EAA2E;QAC3E,uEAAuE;QACvE,OAAO;YACL,GAAG,EAAE,CAAC;YACN,GAAG,EAAE,CAAC;YACN,GAAG,EAAE,CAAC;YACN,GAAG,EAAE,CAAC;YACN,gBAAgB,EAAE,IAAI,KAAK,WAAW,CAAC,CAAC,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC;SAClE,CAAC;IACJ,CAAC;IAED,MAAM,MAAM,GAAG,CAAC,GAAG,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;IAC9C,MAAM,GAAG,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC;IACtB,MAAM,GAAG,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IACtC,MAAM,GAAG,GAAG,UAAU,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IACnC,MAAM,GAAG,GAAG,UAAU,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IACnC,MAAM,gBAAgB,GACpB,IAAI,KAAK,WAAW,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,UAAU,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;IAEtE,OAAO;QACL,GAAG,EAAE,KAAK,CAAC,GAAG,CAAC;QACf,GAAG,EAAE,KAAK,CAAC,GAAG,CAAC;QACf,GAAG,EAAE,KAAK,CAAC,GAAG,CAAC;QACf,GAAG,EAAE,KAAK,CAAC,GAAG,CAAC;QACf,gBAAgB,EAAE,KAAK,CAAC,gBAAgB,CAAC;KAC1C,CAAC;AACJ,CAAC;AAED,4EAA4E;AAC5E,SAAS,sBAAsB,CAC7B,OAAuB,EACvB,oBAAgE;IAEhE,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO,EAAE,GAAG,EAAE,CAAC,EAAE,GAAG,EAAE,CAAC,EAAE,GAAG,EAAE,CAAC,EAAE,GAAG,EAAE,CAAC,EAAE,gBAAgB,EAAE,CAAC,EAAE,CAAC;IACjE,CAAC;IACD,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACzD,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,CAAS,CAAC,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,GAAG,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC;IAC1D,MAAM,GAAG,GAAG,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACrC,MAAM,GAAG,GAAG,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC9B,+EAA+E;IAC/E,MAAM,GAAG,GAAG,KAAK,GAAG,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC5C,MAAM,GAAG,GAAG,GAAG,CAAC,CAAC,qDAAqD;IACtE,MAAM,gBAAgB,GAAG,oBAAoB,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAClE,OAAO,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,gBAAgB,EAAE,CAAC;AAClD,CAAC;AAED;;;GAGG;AACH,SAAS,UAAU,CAAC,MAAgB,EAAE,CAAS;IAC7C,MAAM,CAAC,GAAG,MAAM,CAAC,MAAM,CAAC;IACxB,IAAI,CAAC,KAAK,CAAC;QAAE,OAAO,CAAC,CAAC;IACtB,IAAI,CAAC,KAAK,CAAC;QAAE,OAAO,MAAM,CAAC,CAAC,CAAC,CAAC;IAC9B,MAAM,IAAI,GAAG,CAAC,CAAC,GAAG,GAAG,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;IACjC,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC/B,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC9B,IAAI,KAAK,KAAK,KAAK;QAAE,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC;IAC1C,OAAO,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,GAAG,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;AAC1E,CAAC;AAED,kEAAkE;AAClE,SAAS,KAAK,CAAC,CAAS;IACtB,OAAO,IAAI,CAAC,KAAK,CAAC,CAAC,GAAG,GAAG,CAAC,GAAG,GAAG,CAAC;AACnC,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,oBAAoB,CAAC,GAA4C;IAC/E,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,KAAK,CAAC,IAAI,CACR,gCAAgC,GAAG,CAAC,IAAI,MAAM,GAAG,CAAC,aAAa,yBAAyB,GAAG,CAAC,QAAQ,EAAE,CACvG,CAAC;IACF,KAAK,CAAC,IAAI,CACR,GAAG,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAC,MAAM,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAC,MAAM,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAC,MAAM,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAC,MAAM,WAAW,CAAC,QAAQ,CAAC,EAAE,CAAC,EAAE,CACvJ,CAAC;IACF,KAAK,MAAM,IAAI,IAAI,YAAY,EAAE,CAAC;QAChC,MAAM,CAAC,GAAG,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QAC5B,KAAK,CAAC,IAAI,CACR,GAAG,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,MAAM,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,MAAM,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,MAAM,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,MAAM,MAAM,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,EAAE,CAClM,CAAC;IACJ,CAAC;IACD,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC"}

package/dist/output/human.d.ts

@@ -0,0 +1,24 @@
+import type { AreaRow, ScoringMode, Warnings } from '../types.js';
+/** Inputs to `formatHuman`. */
+interface HumanInput {
+    repo: string;
+    mode: ScoringMode;
+    sessionCount: number;
+    areas: AreaRow[];
+    summary: {
+        flagged: number;
+        unflagged: number;
+        unlocalized: number;
+    };
+    warnings: Warnings;
+}
+/**
+ * Format the scan leaderboard as a human-readable string. Pure.
+ *
+ * Layout: header line, column-aligned table (or a "no flagged areas" line when
+ * empty), summary line, and a warnings line (only non-zero categories). The
+ * bootstrap count in the summary line is `sessionCount` when mode is bootstrap,
+ * else 0.
+ */
+export declare function formatHuman(input: HumanInput): string;
+export {};