mjolnir-qa 0.5.19 → 0.5.23

package/CHANGELOG.md

@@ -9,6 +9,33 @@ Rule behavior changes (new rules, FP-rate changes against the corpus,
 severity changes) are first-class entries here — rule IDs are immutable
 once shipped, so this file is the record of what changed between versions.
 
+## [0.5.23] — 2026-09-08
+
+### Changes since 0.5.22
+
+- docs(corpus): D14 as amended by owner — re-baseline-per-wave is blocking, PARTIAL repos are tracked debt (never baselines, never a certification gate); zero-PARTIAL is the end state, not the gate
+
+## [0.5.22] — 2026-09-07
+
+### Changes since 0.5.21
+
+- chore: gitignore bench artifacts (machine-local timings + fixture scratch)
+- test(corpus): D14 re-baseline after Wave-1 merges — QA-PW-124 now adapter-gated (configRule metadata), QA-TEST-003/010 surface on repos whose baselines predate the TS project split, corpus regen of partial scans pending quiet-machine rerun
+- chore(qa): eslint-ignore the verbatim QA evidence area (raw probes are committed DATA, certification protocol)
+- chore(qa): commit FINAL-RELEASE certification evidence verbatim (cycle 0, RC 151186b) + lint/format exclusions for raw evidence area (certification plan 1788804968910 protocol)
+
+## [0.5.21] — 2026-09-07
+
+### Changes since 0.5.20
+
+- Integrity layer: category + measurement consistency, measurement census, §27 design pass (Phases 1+4+7) (#56)
+
+## [0.5.20] — 2026-09-07
+
+### Changes since 0.5.19
+
+- Doctor status model + --json contract + certification CI gate (Phase 5, G2/G5/G6) (#55)
+
 ## [0.5.19] — 2026-09-07
 
 ### Changes since 0.5.18

package/README.md

@@ -200,6 +200,7 @@ and you're done. Everything else is optional.
 | `mjolnir badge`                 | shields.io endpoint JSON + snippet                     |
 | `mjolnir rules --md`            | Full rule catalog (JSON or Markdown)                   |
 | `mjolnir doctor`                | Self-audit of Mjölnir's own rule base                  |
+| `mjolnir doctor --json`         | The same self-audit as a machine-readable contract     |
 | `mjolnir create-rule <ID>`      | Scaffold a new rule + fixtures                         |
 | `mjolnir --format mermaid`      | Test-architecture diagram for a PR comment             |
 

package/dist/cli.d.mts

@@ -32,8 +32,17 @@ type EvidenceLevel = (typeof EVIDENCE_ORDER)[number];
  * for the QA engineer's actual job, in their vocabulary.
  */
 type QaImpact = "BLOCKS-RELEASE" | "FLAKY-RISK" | "FALSE-GREEN" | "HYGIENE";
-/** Rule namespaces are frozen public API (§18.4). IDs are never reused. */
-type RuleCategory = "QA-TEST" | "QA-TQUAL" | "QA-PW" | "QA-CI" | "QA-PY" | "QA-ENV" | "QA-JV" | "QA-CS" | "QA-CYP" | "QA-SE" | "QA-WDIO" | "QA-PPTR" | "QA-APM";
+/**
+ * The closed set of rule categories (plan §5.5, certification-audit D6).
+ * Declared FIRST as the single source of truth: the RuleCategory type is
+ * DERIVED from this list (compile-time exhaustiveness — a category added
+ * to the type without the value list, or vice versa, cannot compile).
+ * `--category` values are validated against this list — unknown
+ * categories are a usage error, not a silent no-op. Rule namespaces are
+ * frozen public API (§18.4): IDs are never reused.
+ */
+declare const RULE_CATEGORIES: readonly ["QA-TEST", "QA-TQUAL", "QA-PW", "QA-CI", "QA-PY", "QA-ENV", "QA-JV", "QA-CS", "QA-CYP", "QA-SE", "QA-WDIO", "QA-PPTR", "QA-APM"];
+type RuleCategory = (typeof RULE_CATEGORIES)[number];
 /**
  * Trust levels (Verification Trust Evolution Plan §16): the OVERALL
  * trust a consumer can place in one finding, combining the static
@@ -687,6 +696,26 @@ declare function isValidFindingRecord$1(f: unknown): f is Omit<Finding, "ruleId"
  */
 declare function runScan$1(args: CliArgs, hooks?: ScanHooks): Promise<ScanResult>;
 //#endregion
+//#region src/cli-io.d.ts
+/**
+ * Shared process IO sinks (certification-audit Phase 5, G6): the variadic
+ * console sinks and the internal-error reporter lived in cli.ts, which
+ * made every command module that wanted honest IO depend on the dispatch
+ * table (or duplicate it). Extracted so command modules (doctor-run et
+ * al.) and cli.ts share ONE implementation.
+ */
+/** The variadic IO signature shared by all command handlers. */
+type Output = (...parts: unknown[]) => void;
+declare const out: Output;
+declare const err: Output;
+declare function internalErrorMessage(err: unknown, emit: (s: string) => void, debug: boolean): void;
+//#endregion
+//#region src/commands/doctor-run.d.ts
+declare function runDoctorCommand(argv: string[], io?: {
+  out: Output;
+  err: Output;
+}): number;
+//#endregion
 //#region src/cli.d.ts
 declare const runScan: typeof runScan$1, buildUniversalRules: typeof buildUniversalRules$1, fallbackWorkspace: typeof fallbackWorkspace$1, pathMatchesGlob: typeof pathMatchesGlob$1, isValidFindingRecord: typeof isValidFindingRecord$1, discoverRuntimeReport: typeof discoverRuntimeReport$1, KNOWN_RULE_IDS: ReadonlySet<string>, OVERLAP_META_BY_RULE_ID: ReadonlyMap<string, OverlapMeta>, EVIDENCE_OVERRIDES: ReadonlyMap<string, string>, SUITE_INVALIDATING_RULE_IDS: ReadonlySet<string>;
 /**
@@ -699,7 +728,7 @@ declare const runScan: typeof runScan$1, buildUniversalRules: typeof buildUniver
  * `scripts/sync-sarif-version.cjs` on release and guarded by
  * `tests/version-consistency.spec.ts` locally.
  */
-declare const CLI_VERSION = "0.5.19";
+declare const CLI_VERSION = "0.5.23";
 /** A usage-error detail: the offending token, when one exists. */
 interface UsageErrorDetail {
   /** The unknown flag or rejected value (e.g. `--nope`, `loud`). */
@@ -718,9 +747,6 @@ declare function nearestFlags(flag: string, max?: number): string[];
  * to stderr; findings/usage stay on their documented streams.
  */
 declare function usageErrorMessage(detail: UsageErrorDetail): string;
-type Output = (...parts: unknown[]) => void;
-declare const out: Output;
-declare const err: Output;
 /** Testable `ci install` handler. Returns the process exit code. */
 declare function runCiInstall(argv: string[], io?: {
   out: Output;
@@ -741,11 +767,6 @@ declare function runDoctorPlaywright(argv: string[], io?: {
   out: Output;
   err?: Output;
 }): Promise<number>;
-/** Testable `doctor` handler — self-audit of Mjölnir's own rule base. */
-declare function runDoctorCommand(argv: string[], io?: {
-  out: Output;
-  err: Output;
-}): number;
 /** Testable `rules` handler — rule catalog with Trust Metadata. */
 declare function runRulesCommand(argv: string[], io?: {
   out: Output;
@@ -852,15 +873,6 @@ declare function runHelpCommand(argv: string[], io?: {
   out: Output;
   err: Output;
 }): number;
-/**
- * Friendly exit-20 path (plan M2): the crash says it's Mjölnir's bug,
- * not the user's repo, carries the underlying message for a report, and
- * prints the stack ONLY when `debug` is set (uniform across
- * subcommands — they don't parse scan flags). Tests pin
- * /internal error/i. Exported so the --debug stack arm is directly
- * spec-coverable (spawning a real crash under --debug would be flaky).
- */
-declare function internalErrorMessage(err: unknown, emit: (s: string) => void, debug: boolean): void;
 declare function isEntryPoint(): boolean;
 //#endregion
-export { CLI_VERSION, type CliArgs, EVIDENCE_OVERRIDES, KNOWN_RULE_IDS, OVERLAP_META_BY_RULE_ID, Output, SUITE_INVALIDATING_RULE_IDS, type ScanHooks, UsageErrorDetail, buildUniversalRules, discoverRuntimeReport, err, exitForFindings, fallbackWorkspace, internalErrorMessage, isEntryPoint, isValidFindingRecord, levenshtein, main, nearestFlags, out, parseArgs, pathMatchesGlob, runBadgeCommand, runBaselineCommand, runCiInstall, runCreateRuleCommand, runDebtCommand, runDiffCommand, runDoctorCommand, runDoctorPlaywright, runExplainCommand, runFixCommand, runForensicsCommand, runHandoverCommand, runHelpCommand, runImpactCommand, runInitCommand, runPrCommentCommand, runPwReportCommand, runRulesCommand, runScan, runScanCommand, runStatsCommand, runSuppressions, runTriageCommand, usageErrorMessage };
+export { CLI_VERSION, type CliArgs, EVIDENCE_OVERRIDES, KNOWN_RULE_IDS, OVERLAP_META_BY_RULE_ID, type Output, SUITE_INVALIDATING_RULE_IDS, type ScanHooks, UsageErrorDetail, buildUniversalRules, discoverRuntimeReport, err, exitForFindings, fallbackWorkspace, internalErrorMessage, isEntryPoint, isValidFindingRecord, levenshtein, main, nearestFlags, out, parseArgs, pathMatchesGlob, runBadgeCommand, runBaselineCommand, runCiInstall, runCreateRuleCommand, runDebtCommand, runDiffCommand, runDoctorCommand, runDoctorPlaywright, runExplainCommand, runFixCommand, runForensicsCommand, runHandoverCommand, runHelpCommand, runImpactCommand, runInitCommand, runPrCommentCommand, runPwReportCommand, runRulesCommand, runScan, runScanCommand, runStatsCommand, runSuppressions, runTriageCommand, usageErrorMessage };