mjolnir-qa 0.5.12 → 0.5.14

package/dist/mcp/stdio.mjs

@@ -12480,26 +12480,26 @@ function topFixes(findings, n = 3) {
 }
 //#endregion
 //#region src/reporter/art.ts
-/** Block-character logo. Keep ≤ 62 cols wide. */
+/**
+* The report's wordmark. A LOCKUP, not a picture of a hammer.
+*
+* This used to be eight rows of box-drawing that spelled out a hammer —
+* directly above the score instrument, which is also a hammer. Two
+* hammers, ten lines apart, and the smaller static one came first, so
+* appendScoreSection's own claim that "the hammer is the instrument: the
+* first thing the eye lands on" was false in every report the tool has
+* ever printed.
+*
+* There is one hammer now, and it is the one that means something: the
+* state-resolved instrument in HAMMER_STATES. The wordmark stays out of
+* its way.
+*/
 const LOGO = `
- ╔═══════════╗
- ║           ║
- ╠═══════════╣    M J Ö L N I R
- ║     ║     ║
- ╚═════╩═════╝    VERIFICATION TRUST ENGINE
-       ║
-       ║
+  M J Ö L N I R  ·  VERIFICATION TRUST ENGINE
 `;
-/** Plain-ASCII fallback logo for cmd.exe/legacy consoles where the
-* block-drawing LOGO above renders as mangled "?" glyphs. */
+/** Plain-ASCII fallback for cmd.exe/legacy consoles. */
 const LOGO_ASCII = `
- +-----------+
- |           |
- +-----------+    M J O L N I R
- |     |     |
- +-----+-----+    VERIFICATION TRUST ENGINE
-       |
-       |
+  M J O L N I R  -  VERIFICATION TRUST ENGINE
 `;
 const TROPHY = String.raw`
         ___________
@@ -13000,7 +13000,12 @@ const CARD_GUTTER = "    ";
 function pushCard(lines, card, ui) {
 	const { p, width } = ui;
 	const contentWidth = Math.max(20, width - 2 - 4 - CARD_LABEL_PAD);
-	lines.push(`  ${severityIcon(card.severity, ui)} ${p.bold(card.loc)}  ${p.dim(card.evidence)}`);
+	const header = `  ${severityIcon(card.severity, ui)} ${p.bold(card.loc)}`;
+	if (measure(`${header}  ${card.evidence}`) <= width) lines.push(`${header}  ${p.dim(card.evidence)}`);
+	else {
+		lines.push(header);
+		lines.push(`${CARD_GUTTER}${p.dim(card.evidence)}`);
+	}
 	const fields = [
 		{
 			label: "Finding",
@@ -13040,7 +13045,7 @@ function pushCard(lines, card, ui) {
 * overflow line; --verbose shows everything.
 */
 function appendFindings(lines, result, counts, verbose, ui, tone) {
-	const { p } = ui;
+	const { p, width } = ui;
 	if (counts.total === 0) return;
 	if (result.findings.length === 0) {
 		lines.push(ui.p.dim("  filtered view: no findings in the selected category"));
@@ -13089,9 +13094,21 @@ function appendFindings(lines, result, counts, verbose, ui, tone) {
 				hiddenRules.add(unit.ruleId);
 				continue;
 			}
-			lines.push(`  ${severityIcon(maxSeverity(unit.findings), ui)} ${p.bold(sanitizeData(unit.ruleId))} ${p.dim(`× ${n} — same fix applies`)} ${p.dim(evidenceTag$1(first))}`);
-			lines.push(`${CARD_GUTTER}${p.accent("Fix".padEnd(CARD_LABEL_PAD))}${p.dim(sanitizeData(first.fix))}`);
-			for (const f of unit.findings) lines.push(`${CARD_GUTTER}${" ".repeat(CARD_LABEL_PAD)}${p.dim(`· ${sanitizeData(f.file)}:${f.line} — ${sanitizeData(f.message)}`)}`);
+			const groupHead = `  ${severityIcon(maxSeverity(unit.findings), ui)} ${p.bold(sanitizeData(unit.ruleId))} ${p.dim(`× ${n} — same fix applies`)}`;
+			const groupEvidence = evidenceTag$1(first);
+			if (measure(`${groupHead} ${groupEvidence}`) <= width) lines.push(`${groupHead} ${p.dim(groupEvidence)}`);
+			else {
+				lines.push(groupHead);
+				lines.push(`${CARD_GUTTER}${p.dim(groupEvidence)}`);
+			}
+			const groupContentWidth = Math.max(20, width - 2 - 4 - CARD_LABEL_PAD);
+			wrapLines(sanitizeData(first.fix), groupContentWidth).forEach((seg, i) => {
+				const label = i === 0 ? p.accent("Fix".padEnd(CARD_LABEL_PAD)) : " ".repeat(CARD_LABEL_PAD);
+				lines.push(`${CARD_GUTTER}${label}${p.dim(seg)}`);
+			});
+			for (const f of unit.findings) wrapLines(`· ${sanitizeData(f.file)}:${f.line} — ${sanitizeData(f.message)}`, groupContentWidth).forEach((seg, i) => {
+				lines.push(`${CARD_GUTTER}${" ".repeat(CARD_LABEL_PAD)}${p.dim(i === 0 ? seg : `  ${seg}`)}`);
+			});
 			lines.push("");
 			shown++;
 			continue;
@@ -13129,22 +13146,34 @@ function appendForgedBlock(lines, p, ascii) {
 	lines.push(p.forged(TROPHY));
 	lines.push("");
 }
+/**
+* Pushes dimmed prose that respects the terminal width.
+*
+* The honesty footer used to be pushed as single unbroken strings — the
+* rule-coverage line alone is ~147 columns, so it overflowed every
+* default 80- or 100-column terminal and ignored `--width` entirely.
+* `wrapText` is the same helper the finding cards already use.
+*/
+function pushWrapped(lines, p, text, width) {
+	const indent = "  ";
+	for (const line of wrapText(text, Math.max(20, width - 2))) lines.push(p.dim(`${indent}${line}`));
+}
 function appendFooter(lines, result, ui) {
-	const { p } = ui;
+	const { p, width } = ui;
 	lines.push(...buildFooter({
 		ui,
 		complete: result.analysisStatus.discovery !== "partial",
 		durationMs: result.analysisStatus.durationMs
 	}));
 	const advisory = result.findings.filter((f) => (f.evidenceLevel ?? deriveEvidenceLevel(f.findingType, f.confidence)) === "E0").length;
-	if (advisory > 0) lines.push(p.dim(`  ${advisory} advisory finding${advisory === 1 ? "" : "s"} (E0 — observation only, no score impact)`));
+	if (advisory > 0) pushWrapped(lines, p, `${advisory} advisory finding${advisory === 1 ? "" : "s"} (E0 — observation only, no score impact)`, width);
 	if (result.findings.length > 0) {
 		const firedRuleIds = new Set(result.findings.map((f) => f.ruleId));
 		const measuredHere = [...firedRuleIds].filter((id) => MEASURED_FP[id] !== void 0).length;
-		lines.push(p.dim(`  Rule coverage: ${measuredHere}/${firedRuleIds.size} rules that fired here have a measured false-positive rate; the rest are heuristics. \`mjolnir rules --unmeasured\` lists them.`));
+		pushWrapped(lines, p, `Rule coverage: ${measuredHere}/${firedRuleIds.size} rules that fired here have a measured false-positive rate; the rest are heuristics. \`mjolnir rules --unmeasured\` lists them.`, width);
 		const verified = result.findings.filter((f) => f.runtimeCorroboration !== void 0).length;
-		if (verified > 0) lines.push(p.dim(`  Runtime evidence: ${verified}/${result.findings.length} findings corroborated by a real run report (trust L3–L5); the rest are static-only.`));
-		else lines.push(p.dim(`  Runtime evidence: not available — no run report (mjolnir.report.json / test-results) next to the scan target; all findings are static-only (L0–L2).`));
+		if (verified > 0) pushWrapped(lines, p, `Runtime evidence: ${verified}/${result.findings.length} findings corroborated by a real run report (trust L3–L5); the rest are static-only.`, width);
+		else pushWrapped(lines, p, `Runtime evidence: not available — no run report (mjolnir.report.json / test-results) next to the scan target; all findings are static-only (L0–L2).`, width);
 	}
 	const profile = result.agenticProfile;
 	if (profile && (profile.generatedMarkedFiles > 0 || profile.codegenLikeFiles > 0)) {
@@ -13224,7 +13253,7 @@ function renderSarif(result, repoRootUri) {
 		tool: { driver: {
 			name: "Mjölnir",
 			informationUri: "https://github.com/Sergey-Bar/Mjolnir",
-			version: "0.5.12",
+			version: "0.5.14",
 			rules: [...rules.values()].map((r) => {
 				const meta = RULES.find((x) => x.id === r.id);
 				return {
@@ -15262,6 +15291,12 @@ const HELP_ENTRIES = [
 		summary: "install the agent instruction surfaces + optional staged hook",
 		usage: "mjolnir install [--staged-hook] [--dry-run] [--force]",
 		examples: ["mjolnir install --dry-run", "mjolnir install --staged-hook"]
+	},
+	{
+		verb: "mcp",
+		summary: "run as an MCP server over stdio (scan / explain / diff tools)",
+		usage: "mjolnir mcp",
+		examples: ["mjolnir mcp"]
 	}
 ];
 /** Scan-flag entries documented per-flag via the overview. */
@@ -15426,7 +15461,8 @@ const GROUPS = [
 			"explain",
 			"why",
 			"handoff",
-			"install"
+			"install",
+			"mcp"
 		]
 	}
 ];
@@ -17456,14 +17492,29 @@ function explainRule(ruleId, fixturesRoot) {
 		ok: true,
 		rule,
 		exampleFinding: example,
-		exampleFixturePath: fixturePath
+		exampleFixturePath: fixturePath,
+		exampleFixtureRelPath: relative(fixturesRoot, fixturePath).replaceAll("\\", "/")
 	};
 }
-function renderExplain(result) {
+/**
+* Default column budget when no width is supplied.
+*
+* `explain`'s prose used to be pushed as unbroken strings — the
+* "HOW TO VERIFY THE FIX" paragraph alone is 150 columns — so every
+* explanation overflowed a default terminal. Renderers here take a width
+* rather than reading process.stdout, so output stays a pure function of
+* its arguments (same rule the reporter's palette follows).
+*/
+const DEFAULT_EXPLAIN_WIDTH = 80;
+function renderExplain(result, width = DEFAULT_EXPLAIN_WIDTH) {
 	if (!result.ok || !result.rule) return `explain failed: ${result.error ?? "unknown error"}`;
 	const r = result.rule;
 	const evidenceLevel = r.evidenceLevel ?? deriveEvidenceLevel(r.findingType, r.confidence);
 	const lines = [];
+	/** Pushes prose indented two columns, wrapped to the budget. */
+	const pushBody = (text) => {
+		for (const seg of wrapText(text, Math.max(20, width - 2))) lines.push(`  ${seg}`);
+	};
 	lines.push(sectionHeader(`${r.id} — ${r.title}`, ui$1));
 	lines.push("");
 	lines.push(`Severity:    ${r.severity}`);
@@ -17480,19 +17531,19 @@ function renderExplain(result) {
 	if (result.exampleFinding) {
 		const f = result.exampleFinding;
 		lines.push("WHAT WAS FOUND (real detector output, not a mockup)");
-		lines.push(`  ${f.message}`);
+		pushBody(f.message);
 		lines.push("");
 		lines.push("WHY IT MATTERS");
-		lines.push(`  ${f.why}`);
+		pushBody(f.why);
 		lines.push("");
 		lines.push("HOW TO FIX");
-		lines.push(`  ${f.fix}`);
+		pushBody(f.fix);
 		lines.push("");
-		lines.push(`Example from this rule's own must-fire fixture: ${result.exampleFixturePath ?? "(unknown path)"}`);
-	} else lines.push("No example available — run this command from a mjolnir checkout (or pass --fixtures-root) so the fixture that proves this rule works can be shown as a real example.");
+		pushBody(`Example from this rule's own must-fire fixture: ${result.exampleFixtureRelPath ?? result.exampleFixturePath ?? "(unknown path)"}`);
+	} else for (const seg of wrapText("No example available — run this command from a mjolnir checkout (or pass --fixtures-root) so the fixture that proves this rule works can be shown as a real example.", width)) lines.push(seg);
 	lines.push("");
 	lines.push("HOW TO VERIFY THE FIX");
-	lines.push("  Re-run `mjolnir` on the changed file(s) — this finding should no longer appear. `mjolnir --scope changed` scopes the check to just what you touched.");
+	pushBody("Re-run `mjolnir` on the changed file(s) — this finding should no longer appear. `mjolnir --scope changed` scopes the check to just what you touched.");
 	lines.push("");
 	lines.push(`Docs: mjolnir rules --md   (full catalog, this rule included)`);
 	return lines.join("\n");
@@ -17649,7 +17700,7 @@ const { runScan, buildUniversalRules, fallbackWorkspace, pathMatchesGlob, isVali
 * `scripts/sync-sarif-version.cjs` on release and guarded by
 * `tests/version-consistency.spec.ts` locally.
 */
-const CLI_VERSION = "0.5.12";
+const CLI_VERSION = "0.5.14";
 function parseArgs(argv, onError) {
 	const args = {
 		target: ".",
@@ -18513,7 +18564,8 @@ const SUBCOMMANDS = /* @__PURE__ */ new Set([
 	"doctor",
 	"rules",
 	"explain",
-	"doctor:playwright"
+	"doctor:playwright",
+	"mcp"
 ]);
 async function main(argv = process$1.argv.slice(2), io = {
 	out,
@@ -18550,6 +18602,10 @@ async function main(argv = process$1.argv.slice(2), io = {
 	if (argv[0] === "why") return runWhyCommand(argv.slice(1), io);
 	if (argv[0] === "handoff") return runHandoffCommand(argv.slice(1), io);
 	if (argv[0] === "install") return runInstallCommand(argv.slice(1), io);
+	if (argv[0] === "mcp") {
+		await runStdioTransport(process$1.stdin, process$1.stdout);
+		return 0;
+	}
 	if (argv[0] === "help") return runHelpCommand(argv.slice(1), io);
 	if (SUBCOMMANDS.has(argv[0] ?? "")) {
 		err(`mjolnir: incomplete or unknown subcommand "${argv[0]}".`);
@@ -18983,7 +19039,14 @@ async function handleStdioLine(line, write) {
 //#endregion
 //#region src/mcp/stdio.ts
 /**
-* `mjolnir mcp` — the MCP stdio binary entrypoint (blueprint §21).
+* The standalone MCP stdio binary (blueprint §21), built to
+* `dist/mcp/stdio.mjs` and run by `npm run mcp`.
+*
+* `mjolnir mcp` reaches the same transport through the CLI and is what
+* the README documents, since it needs no path into node_modules. This
+* entry stays because the packaged binary is addressable without the
+* CLI's arg parsing in front of it, which is what the spawned-binary
+* contract test exercises.
 *
 * Thin glue: wires real stdin/stdout into the transport loop, then exits.
 * All transport logic lives in ./transport.ts and is covered there; THIS

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "mjolnir-qa",
-  "version": "0.5.12",
+  "version": "0.5.14",
   "description": "Mjölnir — the Verification Trust Engine for QA. Audits test suites and CI pipelines, reports a worthiness score and prioritized findings.",
   "type": "module",
   "engines": {
@@ -38,12 +38,17 @@
     "docs:capability": "tsx scripts/generate-capability-matrix.ts",
     "docs:machine-contract": "tsx scripts/generate-machine-contract-doc.ts",
     "docs:hero": "tsx scripts/generate-readme-hero.ts",
+    "docs:gauge": "tsx scripts/generate-readme-score-gauge.ts",
     "docs:formats": "tsx scripts/generate-site-formats.ts",
     "docs:forensics-samples": "tsx scripts/generate-forensics-samples.ts",
     "site:doctor": "npm --prefix site run doctor",
     "site:audit": "node site/scripts/audit-live.mjs",
     "site:lighthouse": "node site/scripts/lighthouse-run.mjs",
     "docs:demo": "tsx scripts/generate-readme-demo.ts",
+    "docs:video:capture": "tsx scripts/video/write-scripts.ts",
+    "docs:video:glyphs": "tsx scripts/video/check-glyphs.ts",
+    "docs:video:render": "tsx scripts/video/render.ts",
+    "docs:video": "npm run docs:video:capture && npm run docs:video:render",
     "docs:translations": "node scripts/check-readme-translations.mjs",
     "self-scan": "node dist/cli.mjs .",
     "prepare": "husky",
@@ -91,6 +96,7 @@
     "husky": "^9.1.7",
     "lighthouse": "^13.4.1",
     "lint-staged": "^17.3.0",
+    "playwright-core": "^1.63.0",
     "prettier": "^3.3.0",
     "tsdown": "^0.22.14",
     "tsx": "^4.16.0",