mjolnir-qa 0.5.15 → 0.5.16

package/CHANGELOG.md

@@ -9,7 +9,13 @@ Rule behavior changes (new rules, FP-rate changes against the corpus,
 severity changes) are first-class entries here — rule IDs are immutable
 once shipped, so this file is the record of what changed between versions.
 
-# [0.5.4] — 2026-09-06
+## [0.5.16] — 2026-09-07
+
+### Changes since 0.5.15
+
+- Curation + mechanical hygiene: QA-PW-124 D3 alignment, F7-F10 closures (#51)
+
+## [0.5.4] — 2026-09-06
 
 ### Agent Handoff + Minimized Reporting (plan 1788599400000)
 

package/dist/cli.d.mts

@@ -699,7 +699,7 @@ declare const runScan: typeof runScan$1, buildUniversalRules: typeof buildUniver
  * `scripts/sync-sarif-version.cjs` on release and guarded by
  * `tests/version-consistency.spec.ts` locally.
  */
-declare const CLI_VERSION = "0.5.15";
+declare const CLI_VERSION = "0.5.16";
 /** A usage-error detail: the offending token, when one exists. */
 interface UsageErrorDetail {
   /** The unknown flag or rejected value (e.g. `--nope`, `loud`). */

package/dist/cli.mjs

@@ -5403,6 +5403,13 @@ const pwNoTraceOnRetry = defineRule({
 * QA-PW-124 — Projects defined but no smoke/regression split.
 * Severity: info · Confidence: high · deterministic-defect
 * One monolithic project forces full-suite-or-nothing; PR feedback dies.
+*
+* detectorRevision 2 (certification-audit D3, 2026-09-07): the rule is now
+* DECLARED as a config-gated rule (`configRule` + `configFiles`) instead of
+* relying only on its internal basename gate — same gating surface as
+* QA-PW-121/122/141/143/144. Detection logic is unchanged (the internal
+* basename gate remains as defense in depth), so scan output is
+* byte-identical; the revision bump declares the metadata change per §07.
 */
 const pwNoProjectSplit = defineRule({
 	id: "QA-PW-124",
@@ -5413,13 +5420,16 @@ const pwNoProjectSplit = defineRule({
 	findingType: "heuristic-risk",
 	qaImpact: "HYGIENE",
 	appliesTo: "test-files",
+	configRule: true,
+	configFiles: ["^playwright\\.config\\.(?:ts|js|mjs|cts)$"],
 	languages: ["typescript", "javascript"],
 	frameworks: ["playwright"],
 	falsePositiveRisk: "low",
 	autofix: false,
 	detectionStrategy: "LEXICAL",
-	detectionNotes: "regex heuristic",
+	detectionNotes: "regex heuristic over playwright.config.* (adapter-gated)",
 	introduced: "0.3.0",
+	detectorRevision: 2,
 	run(ctx) {
 		const text = ctx.text;
 		const findings = [];
@@ -13254,7 +13264,7 @@ function renderSarif(result, repoRootUri) {
 		tool: { driver: {
 			name: "Mjölnir",
 			informationUri: "https://github.com/Sergey-Bar/Mjolnir",
-			version: "0.5.15",
+			version: "0.5.16",
 			rules: [...rules.values()].map((r) => {
 				const meta = RULES.find((x) => x.id === r.id);
 				return {
@@ -18064,7 +18074,7 @@ const { runScan, buildUniversalRules, fallbackWorkspace, pathMatchesGlob, isVali
 * `scripts/sync-sarif-version.cjs` on release and guarded by
 * `tests/version-consistency.spec.ts` locally.
 */
-const CLI_VERSION = "0.5.15";
+const CLI_VERSION = "0.5.16";
 function parseArgs(argv, onError) {
 	const args = {
 		target: ".",

package/dist/mcp/stdio.mjs

@@ -5402,6 +5402,13 @@ const pwNoTraceOnRetry = defineRule({
 * QA-PW-124 — Projects defined but no smoke/regression split.
 * Severity: info · Confidence: high · deterministic-defect
 * One monolithic project forces full-suite-or-nothing; PR feedback dies.
+*
+* detectorRevision 2 (certification-audit D3, 2026-09-07): the rule is now
+* DECLARED as a config-gated rule (`configRule` + `configFiles`) instead of
+* relying only on its internal basename gate — same gating surface as
+* QA-PW-121/122/141/143/144. Detection logic is unchanged (the internal
+* basename gate remains as defense in depth), so scan output is
+* byte-identical; the revision bump declares the metadata change per §07.
 */
 const pwNoProjectSplit = defineRule({
 	id: "QA-PW-124",
@@ -5412,13 +5419,16 @@ const pwNoProjectSplit = defineRule({
 	findingType: "heuristic-risk",
 	qaImpact: "HYGIENE",
 	appliesTo: "test-files",
+	configRule: true,
+	configFiles: ["^playwright\\.config\\.(?:ts|js|mjs|cts)$"],
 	languages: ["typescript", "javascript"],
 	frameworks: ["playwright"],
 	falsePositiveRisk: "low",
 	autofix: false,
 	detectionStrategy: "LEXICAL",
-	detectionNotes: "regex heuristic",
+	detectionNotes: "regex heuristic over playwright.config.* (adapter-gated)",
 	introduced: "0.3.0",
+	detectorRevision: 2,
 	run(ctx) {
 		const text = ctx.text;
 		const findings = [];
@@ -13253,7 +13263,7 @@ function renderSarif(result, repoRootUri) {
 		tool: { driver: {
 			name: "Mjölnir",
 			informationUri: "https://github.com/Sergey-Bar/Mjolnir",
-			version: "0.5.15",
+			version: "0.5.16",
 			rules: [...rules.values()].map((r) => {
 				const meta = RULES.find((x) => x.id === r.id);
 				return {
@@ -17700,7 +17710,7 @@ const { runScan, buildUniversalRules, fallbackWorkspace, pathMatchesGlob, isVali
 * `scripts/sync-sarif-version.cjs` on release and guarded by
 * `tests/version-consistency.spec.ts` locally.
 */
-const CLI_VERSION = "0.5.15";
+const CLI_VERSION = "0.5.16";
 function parseArgs(argv, onError) {
 	const args = {
 		target: ".",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "mjolnir-qa",
-  "version": "0.5.15",
+  "version": "0.5.16",
   "description": "Mjölnir — the Verification Trust Engine for QA. Audits test suites and CI pipelines, reports a worthiness score and prioritized findings.",
   "type": "module",
   "engines": {
@@ -87,7 +87,6 @@
     "@playwright/test": "^1.50.0",
     "@types/node": "^26.4.0",
     "@vitest/coverage-istanbul": "^4.1.11",
-    "@vitest/coverage-v8": "^4.1.11",
     "axe-core": "^4.13.0",
     "eslint": "^10.9.1",
     "eslint-plugin-regexp": "^3.3.0",