mjolnir-qa 0.6.7 → 0.6.13

package/CHANGELOG.md

@@ -9,6 +9,42 @@ Rule behavior changes (new rules, FP-rate changes against the corpus,
 severity changes) are first-class entries here — rule IDs are immutable
 once shipped, so this file is the record of what changed between versions.
 
+## [0.6.13] — 2026-09-09
+
+### Changes since 0.6.12
+
+- fix(lint): {4} quantifier for the remaining literal spaces in sync-census regex
+
+## [0.6.12] — 2026-09-09
+
+### Changes since 0.6.11
+
+- fix(lint): no-regex-spaces in sync-census tooling ({2} quantifier)
+
+## [0.6.11] — 2026-09-09
+
+### Changes since 0.6.10
+
+- fix(lint): exclude scripts/*.mts from the typed-parser project route
+
+## [0.6.10] — 2026-09-09
+
+### Changes since 0.6.9
+
+- fix(lint): scripts/*.mts one-shot tooling runs under the plain JS ruleset
+
+## [0.6.9] — 2026-09-09
+
+### Changes since 0.6.8
+
+- feat(measurement): WI-14 closeout — 77/77 measured, 0 PROVISIONAL (1.0.0 census achieved)
+
+## [0.6.8] — 2026-09-09
+
+### Changes since 0
+
+- feat(corpus): WI-14 harvest waves 1-5 — census 60 → 72 of 78 measured
+
 ## [0.6.7] — 2026-09-09
 
 ### Changes since 0.6.6

package/README.md

@@ -262,7 +262,7 @@ have no such requirement.)
 
 ## What Mjölnir finds
 
-**<!-- census:total-rules -->78 rules<!-- /census:total-rules -->** in four families — **test hygiene**, **test quality**,
+**<!-- census:total-rules -->77 rules<!-- /census:total-rules -->** in four families — **test hygiene**, **test quality**,
 **Playwright**, **CI integrity** — over TypeScript/JavaScript, Python,
 Java, C# and GitHub Actions YAML, covering Playwright in all four bindings
 plus pytest, JUnit, TestNG, NUnit, xUnit, MSTest, Jest, Vitest and Mocha,
@@ -442,9 +442,9 @@ Rung by rung: [docs/TERMINOLOGY.md](docs/TERMINOLOGY.md).
 
 ### How much of this is measured
 
-**<!-- census:measured-of-total -->57 of 78<!-- /census:measured-of-total --> rules carry a false-positive rate measured against real OSS code**
+**<!-- census:measured-of-total -->77 of 77<!-- /census:measured-of-total --> rules carry a false-positive rate measured against real OSS code**
 (≥ 10 hand-classified findings each — [docs/FP-AUDIT.md](docs/FP-AUDIT.md)).
-The other <!-- census:unmeasured -->21<!-- /census:unmeasured --> ship on the author's estimate and say so, per rule, in
+The other <!-- census:unmeasured -->0<!-- /census:unmeasured --> ship on the author's estimate and say so, per rule, in
 `mjolnir explain`; `mjolnir rules --unmeasured` lists them, and every scan
 footer reports how many of the rules that actually _fired_ are measured.
 
@@ -685,7 +685,7 @@ artifacts.
   product does what the requirement asked for.
 - **A 100 is not proof of a good suite.** Whether your suite covers your
   actual risk is a different question, and this tool does not answer it.
-- **<!-- census:unmeasured-of-total -->21 of 78<!-- /census:unmeasured-of-total --> rules ship on an estimate**, not a measured rate — disclosed
+- **<!-- census:unmeasured-of-total -->0 of 77<!-- /census:unmeasured-of-total --> rules ship on an estimate**, not a measured rate — disclosed
   per rule, not buried here.
 - **E1 is not E2.** Heuristic findings are worth reading, not worth
   applying blindly.

package/dist/cli.d.mts

@@ -826,7 +826,7 @@ declare const runScan: typeof runScan$1, buildUniversalRules: typeof buildUniver
  * `scripts/sync-sarif-version.cjs` on release and guarded by
  * `tests/version-consistency.spec.ts` locally.
  */
-declare const CLI_VERSION = "0.6.7";
+declare const CLI_VERSION = "0.6.13";
 /** A usage-error detail: the offending token, when one exists. */
 interface UsageErrorDetail {
   /** The unknown flag or rejected value (e.g. `--nope`, `loud`). */

package/dist/cli.mjs

@@ -335,6 +335,13 @@ const MEASURED_FP = {
 		ciLow: 0,
 		ciHigh: .2588
 	},
+	"QA-CS-104": {
+		fpRate: 0,
+		n: 10,
+		detectorRevision: 1,
+		ciLow: 0,
+		ciHigh: .2775
+	},
 	"QA-CS-105": {
 		fpRate: .25,
 		n: 16,
@@ -342,6 +349,27 @@ const MEASURED_FP = {
 		ciLow: .1018,
 		ciHigh: .495
 	},
+	"QA-CS-106": {
+		fpRate: .333,
+		n: 12,
+		detectorRevision: 2,
+		ciLow: .1381,
+		ciHigh: .6094
+	},
+	"QA-CS-107": {
+		fpRate: .083,
+		n: 12,
+		detectorRevision: 1,
+		ciLow: .0149,
+		ciHigh: .3539
+	},
+	"QA-CS-109": {
+		fpRate: 0,
+		n: 10,
+		detectorRevision: 1,
+		ciLow: 0,
+		ciHigh: .2775
+	},
 	"QA-CYP-001": {
 		fpRate: .2,
 		n: 15,
@@ -349,6 +377,20 @@ const MEASURED_FP = {
 		ciLow: .0705,
 		ciHigh: .4519
 	},
+	"QA-CYP-002": {
+		fpRate: 0,
+		n: 10,
+		detectorRevision: 1,
+		ciLow: 0,
+		ciHigh: .2775
+	},
+	"QA-CYP-003": {
+		fpRate: 0,
+		n: 10,
+		detectorRevision: 1,
+		ciLow: 0,
+		ciHigh: .2775
+	},
 	"QA-ENV-001": {
 		fpRate: 1,
 		n: 20,
@@ -391,6 +433,20 @@ const MEASURED_FP = {
 		ciLow: .0279,
 		ciHigh: .301
 	},
+	"QA-JV-106": {
+		fpRate: .333,
+		n: 12,
+		detectorRevision: 2,
+		ciLow: .1381,
+		ciHigh: .6094
+	},
+	"QA-JV-107": {
+		fpRate: 0,
+		n: 10,
+		detectorRevision: 1,
+		ciLow: 0,
+		ciHigh: .2775
+	},
 	"QA-JV-109": {
 		fpRate: 0,
 		n: 18,
@@ -426,6 +482,13 @@ const MEASURED_FP = {
 		ciLow: 0,
 		ciHigh: .1611
 	},
+	"QA-PW-102": {
+		fpRate: .1,
+		n: 10,
+		detectorRevision: 2,
+		ciLow: .0179,
+		ciHigh: .4042
+	},
 	"QA-PW-104": {
 		fpRate: 0,
 		n: 10,
@@ -447,6 +510,13 @@ const MEASURED_FP = {
 		ciLow: .3318,
 		ciHigh: .769
 	},
+	"QA-PW-116": {
+		fpRate: 0,
+		n: 10,
+		detectorRevision: 1,
+		ciLow: 0,
+		ciHigh: .2775
+	},
 	"QA-PW-117": {
 		fpRate: 0,
 		n: 24,
@@ -475,6 +545,20 @@ const MEASURED_FP = {
 		ciLow: .2127,
 		ciHigh: .7199
 	},
+	"QA-PW-124": {
+		fpRate: .067,
+		n: 15,
+		detectorRevision: 2,
+		ciLow: .0119,
+		ciHigh: .2982
+	},
+	"QA-PW-125": {
+		fpRate: 0,
+		n: 10,
+		detectorRevision: 1,
+		ciLow: 0,
+		ciHigh: .2775
+	},
 	"QA-PW-140": {
 		fpRate: 0,
 		n: 10,
@@ -587,6 +671,13 @@ const MEASURED_FP = {
 		ciLow: .2459,
 		ciHigh: .5768
 	},
+	"QA-PY-101": {
+		fpRate: 0,
+		n: 10,
+		detectorRevision: 1,
+		ciLow: 0,
+		ciHigh: .2775
+	},
 	"QA-PY-103": {
 		fpRate: .08,
 		n: 25,
@@ -594,6 +685,13 @@ const MEASURED_FP = {
 		ciLow: .0222,
 		ciHigh: .2497
 	},
+	"QA-PY-104": {
+		fpRate: 0,
+		n: 10,
+		detectorRevision: 2,
+		ciLow: 0,
+		ciHigh: .2775
+	},
 	"QA-PY-105": {
 		fpRate: 0,
 		n: 12,
@@ -601,6 +699,48 @@ const MEASURED_FP = {
 		ciLow: 0,
 		ciHigh: .2425
 	},
+	"QA-PY-106": {
+		fpRate: 0,
+		n: 14,
+		detectorRevision: 1,
+		ciLow: 0,
+		ciHigh: .2153
+	},
+	"QA-PY-107": {
+		fpRate: 0,
+		n: 10,
+		detectorRevision: 1,
+		ciLow: 0,
+		ciHigh: .2775
+	},
+	"QA-PY-108": {
+		fpRate: 0,
+		n: 16,
+		detectorRevision: 1,
+		ciLow: 0,
+		ciHigh: .1936
+	},
+	"QA-SE-001": {
+		fpRate: 0,
+		n: 10,
+		detectorRevision: 1,
+		ciLow: 0,
+		ciHigh: .2775
+	},
+	"QA-SE-002": {
+		fpRate: .077,
+		n: 13,
+		detectorRevision: 1,
+		ciLow: .0137,
+		ciHigh: .3331
+	},
+	"QA-SE-003": {
+		fpRate: 0,
+		n: 11,
+		detectorRevision: 1,
+		ciLow: 0,
+		ciHigh: .2588
+	},
 	"QA-TEST-001": {
 		fpRate: .6,
 		n: 20,
@@ -5933,6 +6073,7 @@ const pwGlobalSetupSharedState = defineRule({
 	findingType: "heuristic-risk",
 	qaImpact: "HYGIENE",
 	appliesTo: "test-files",
+	tier: "extended",
 	languages: ["typescript", "javascript"],
 	frameworks: ["playwright"],
 	falsePositiveRisk: "medium",
@@ -6596,52 +6737,6 @@ const pyPwSyncAsyncMix = defineRule({
 	}
 });
 //#endregion
-//#region src/rules/python/qa-py-102-pw-hard-sleep.ts
-/**
-* QA-PY-102 — Playwright-Python: time.sleep() instead of auto-waiting.
-* Severity: warning · Confidence: high · deterministic-defect
-* The #1 Python-Playwright flake source: sleeping "until the page is
-* ready" instead of waiting on a locator condition.
-*/
-const pyPwHardSleep = defineRule({
-	id: "QA-PY-102",
-	category: "QA-PW",
-	title: "time.sleep() in Playwright test",
-	severity: "warning",
-	confidence: "high",
-	findingType: "deterministic-defect",
-	qaImpact: "FLAKY-RISK",
-	appliesTo: "python",
-	languages: ["python"],
-	frameworks: ["pytest-playwright", "playwright"],
-	falsePositiveRisk: "low",
-	autofix: false,
-	detectionStrategy: "LEXICAL",
-	introduced: "0.3.8",
-	tier: "quarantine",
-	run(ctx) {
-		const text = ctx.codeText ?? ctx.text;
-		const findings = [];
-		if (!ctx.path.endsWith(".py")) return findings;
-		if (!/playwright/i.test(text)) return findings;
-		const re = /\btime\.sleep\s*\(/g;
-		let m;
-		while ((m = re.exec(text)) !== null) findings.push({
-			severity: "warning",
-			confidence: "high",
-			findingType: "deterministic-defect",
-			qaImpact: "FLAKY-RISK",
-			file: ctx.path,
-			line: lineAt(text, m.index),
-			column: colAt(text, m.index),
-			message: "`time.sleep()` used to wait for UI state.",
-			why: "Fixed sleeps guess at timing: too short → flaky failures under load, too long → slow suite. Playwright locators already auto-wait for the element to be actionable.",
-			fix: "Replace with `expect(page.get_by_text(...)).to_be_visible()` or `page.wait_for_selector`."
-		});
-		return findings;
-	}
-});
-//#endregion
 //#region src/rules/python/qa-py-103-wait-for-timeout.ts
 /**
 * QA-PY-103 — Playwright-Python: wait_for_timeout() as synchronization.
@@ -9150,7 +9245,6 @@ const RULES = [
 	pwLocatorNormalize,
 	pwCodegenArtifact,
 	pyPwSyncAsyncMix,
-	pyPwHardSleep,
 	pyPwWaitForTimeout,
 	pyPwNoAssertions,
 	...sharedPageFamily,
@@ -9208,6 +9302,7 @@ const RETIRED_RULE_IDS = [
 	"QA-PY-006",
 	"QA-PY-008",
 	"QA-PY-010",
+	"QA-PY-102",
 	"QA-JV-108",
 	"QA-CS-108",
 	"QA-JV-110",
@@ -12018,7 +12113,6 @@ const BLUNT_MESSAGES = {
 	"QA-PW-101": "A hard sleep in a test is a prayer, not a synchronization strategy.",
 	"QA-TEST-004": "A hard sleep in a test is a prayer, not a synchronization strategy.",
 	"QA-PY-005": "time.sleep() in a test is a prayer. Python doesn't negotiate with timeouts either.",
-	"QA-PY-102": "time.sleep() inside a Playwright test — the browser doesn't pause because you asked nicely.",
 	"QA-PY-103": "wait_for_timeout() as synchronization — the Playwright-Python edition of hoping.",
 	"QA-JV-102": "Thread.sleep() in a test is a prayer. The JVM doesn't negotiate with timeouts.",
 	"QA-JV-105": "waitForTimeout is the Java version of closing your eyes and hoping.",
@@ -12659,7 +12753,7 @@ function renderSarif(result, repoRootUri) {
 		tool: { driver: {
 			name: "Mjölnir",
 			informationUri: "https://github.com/Sergey-Bar/Mjolnir",
-			version: "0.6.7",
+			version: "0.6.13",
 			rules: [...rules.values()].map((r) => {
 				const meta = RULES.find((x) => x.id === r.id);
 				return {
@@ -19063,7 +19157,7 @@ const { runScan, buildUniversalRules, fallbackWorkspace, pathMatchesGlob, isVali
 * `scripts/sync-sarif-version.cjs` on release and guarded by
 * `tests/version-consistency.spec.ts` locally.
 */
-const CLI_VERSION = "0.6.7";
+const CLI_VERSION = "0.6.13";
 function parseArgs(argv, onError) {
 	const args = {
 		target: ".",

package/dist/mcp/stdio.mjs

@@ -334,6 +334,13 @@ const MEASURED_FP = {
 		ciLow: 0,
 		ciHigh: .2588
 	},
+	"QA-CS-104": {
+		fpRate: 0,
+		n: 10,
+		detectorRevision: 1,
+		ciLow: 0,
+		ciHigh: .2775
+	},
 	"QA-CS-105": {
 		fpRate: .25,
 		n: 16,
@@ -341,6 +348,27 @@ const MEASURED_FP = {
 		ciLow: .1018,
 		ciHigh: .495
 	},
+	"QA-CS-106": {
+		fpRate: .333,
+		n: 12,
+		detectorRevision: 2,
+		ciLow: .1381,
+		ciHigh: .6094
+	},
+	"QA-CS-107": {
+		fpRate: .083,
+		n: 12,
+		detectorRevision: 1,
+		ciLow: .0149,
+		ciHigh: .3539
+	},
+	"QA-CS-109": {
+		fpRate: 0,
+		n: 10,
+		detectorRevision: 1,
+		ciLow: 0,
+		ciHigh: .2775
+	},
 	"QA-CYP-001": {
 		fpRate: .2,
 		n: 15,
@@ -348,6 +376,20 @@ const MEASURED_FP = {
 		ciLow: .0705,
 		ciHigh: .4519
 	},
+	"QA-CYP-002": {
+		fpRate: 0,
+		n: 10,
+		detectorRevision: 1,
+		ciLow: 0,
+		ciHigh: .2775
+	},
+	"QA-CYP-003": {
+		fpRate: 0,
+		n: 10,
+		detectorRevision: 1,
+		ciLow: 0,
+		ciHigh: .2775
+	},
 	"QA-ENV-001": {
 		fpRate: 1,
 		n: 20,
@@ -390,6 +432,20 @@ const MEASURED_FP = {
 		ciLow: .0279,
 		ciHigh: .301
 	},
+	"QA-JV-106": {
+		fpRate: .333,
+		n: 12,
+		detectorRevision: 2,
+		ciLow: .1381,
+		ciHigh: .6094
+	},
+	"QA-JV-107": {
+		fpRate: 0,
+		n: 10,
+		detectorRevision: 1,
+		ciLow: 0,
+		ciHigh: .2775
+	},
 	"QA-JV-109": {
 		fpRate: 0,
 		n: 18,
@@ -425,6 +481,13 @@ const MEASURED_FP = {
 		ciLow: 0,
 		ciHigh: .1611
 	},
+	"QA-PW-102": {
+		fpRate: .1,
+		n: 10,
+		detectorRevision: 2,
+		ciLow: .0179,
+		ciHigh: .4042
+	},
 	"QA-PW-104": {
 		fpRate: 0,
 		n: 10,
@@ -446,6 +509,13 @@ const MEASURED_FP = {
 		ciLow: .3318,
 		ciHigh: .769
 	},
+	"QA-PW-116": {
+		fpRate: 0,
+		n: 10,
+		detectorRevision: 1,
+		ciLow: 0,
+		ciHigh: .2775
+	},
 	"QA-PW-117": {
 		fpRate: 0,
 		n: 24,
@@ -474,6 +544,20 @@ const MEASURED_FP = {
 		ciLow: .2127,
 		ciHigh: .7199
 	},
+	"QA-PW-124": {
+		fpRate: .067,
+		n: 15,
+		detectorRevision: 2,
+		ciLow: .0119,
+		ciHigh: .2982
+	},
+	"QA-PW-125": {
+		fpRate: 0,
+		n: 10,
+		detectorRevision: 1,
+		ciLow: 0,
+		ciHigh: .2775
+	},
 	"QA-PW-140": {
 		fpRate: 0,
 		n: 10,
@@ -586,6 +670,13 @@ const MEASURED_FP = {
 		ciLow: .2459,
 		ciHigh: .5768
 	},
+	"QA-PY-101": {
+		fpRate: 0,
+		n: 10,
+		detectorRevision: 1,
+		ciLow: 0,
+		ciHigh: .2775
+	},
 	"QA-PY-103": {
 		fpRate: .08,
 		n: 25,
@@ -593,6 +684,13 @@ const MEASURED_FP = {
 		ciLow: .0222,
 		ciHigh: .2497
 	},
+	"QA-PY-104": {
+		fpRate: 0,
+		n: 10,
+		detectorRevision: 2,
+		ciLow: 0,
+		ciHigh: .2775
+	},
 	"QA-PY-105": {
 		fpRate: 0,
 		n: 12,
@@ -600,6 +698,48 @@ const MEASURED_FP = {
 		ciLow: 0,
 		ciHigh: .2425
 	},
+	"QA-PY-106": {
+		fpRate: 0,
+		n: 14,
+		detectorRevision: 1,
+		ciLow: 0,
+		ciHigh: .2153
+	},
+	"QA-PY-107": {
+		fpRate: 0,
+		n: 10,
+		detectorRevision: 1,
+		ciLow: 0,
+		ciHigh: .2775
+	},
+	"QA-PY-108": {
+		fpRate: 0,
+		n: 16,
+		detectorRevision: 1,
+		ciLow: 0,
+		ciHigh: .1936
+	},
+	"QA-SE-001": {
+		fpRate: 0,
+		n: 10,
+		detectorRevision: 1,
+		ciLow: 0,
+		ciHigh: .2775
+	},
+	"QA-SE-002": {
+		fpRate: .077,
+		n: 13,
+		detectorRevision: 1,
+		ciLow: .0137,
+		ciHigh: .3331
+	},
+	"QA-SE-003": {
+		fpRate: 0,
+		n: 11,
+		detectorRevision: 1,
+		ciLow: 0,
+		ciHigh: .2588
+	},
 	"QA-TEST-001": {
 		fpRate: .6,
 		n: 20,
@@ -5932,6 +6072,7 @@ const pwGlobalSetupSharedState = defineRule({
 	findingType: "heuristic-risk",
 	qaImpact: "HYGIENE",
 	appliesTo: "test-files",
+	tier: "extended",
 	languages: ["typescript", "javascript"],
 	frameworks: ["playwright"],
 	falsePositiveRisk: "medium",
@@ -6595,52 +6736,6 @@ const pyPwSyncAsyncMix = defineRule({
 	}
 });
 //#endregion
-//#region src/rules/python/qa-py-102-pw-hard-sleep.ts
-/**
-* QA-PY-102 — Playwright-Python: time.sleep() instead of auto-waiting.
-* Severity: warning · Confidence: high · deterministic-defect
-* The #1 Python-Playwright flake source: sleeping "until the page is
-* ready" instead of waiting on a locator condition.
-*/
-const pyPwHardSleep = defineRule({
-	id: "QA-PY-102",
-	category: "QA-PW",
-	title: "time.sleep() in Playwright test",
-	severity: "warning",
-	confidence: "high",
-	findingType: "deterministic-defect",
-	qaImpact: "FLAKY-RISK",
-	appliesTo: "python",
-	languages: ["python"],
-	frameworks: ["pytest-playwright", "playwright"],
-	falsePositiveRisk: "low",
-	autofix: false,
-	detectionStrategy: "LEXICAL",
-	introduced: "0.3.8",
-	tier: "quarantine",
-	run(ctx) {
-		const text = ctx.codeText ?? ctx.text;
-		const findings = [];
-		if (!ctx.path.endsWith(".py")) return findings;
-		if (!/playwright/i.test(text)) return findings;
-		const re = /\btime\.sleep\s*\(/g;
-		let m;
-		while ((m = re.exec(text)) !== null) findings.push({
-			severity: "warning",
-			confidence: "high",
-			findingType: "deterministic-defect",
-			qaImpact: "FLAKY-RISK",
-			file: ctx.path,
-			line: lineAt(text, m.index),
-			column: colAt(text, m.index),
-			message: "`time.sleep()` used to wait for UI state.",
-			why: "Fixed sleeps guess at timing: too short → flaky failures under load, too long → slow suite. Playwright locators already auto-wait for the element to be actionable.",
-			fix: "Replace with `expect(page.get_by_text(...)).to_be_visible()` or `page.wait_for_selector`."
-		});
-		return findings;
-	}
-});
-//#endregion
 //#region src/rules/python/qa-py-103-wait-for-timeout.ts
 /**
 * QA-PY-103 — Playwright-Python: wait_for_timeout() as synchronization.
@@ -9149,7 +9244,6 @@ const RULES = [
 	pwLocatorNormalize,
 	pwCodegenArtifact,
 	pyPwSyncAsyncMix,
-	pyPwHardSleep,
 	pyPwWaitForTimeout,
 	pyPwNoAssertions,
 	...sharedPageFamily,
@@ -9207,6 +9301,7 @@ const RETIRED_RULE_IDS = [
 	"QA-PY-006",
 	"QA-PY-008",
 	"QA-PY-010",
+	"QA-PY-102",
 	"QA-JV-108",
 	"QA-CS-108",
 	"QA-JV-110",
@@ -12017,7 +12112,6 @@ const BLUNT_MESSAGES = {
 	"QA-PW-101": "A hard sleep in a test is a prayer, not a synchronization strategy.",
 	"QA-TEST-004": "A hard sleep in a test is a prayer, not a synchronization strategy.",
 	"QA-PY-005": "time.sleep() in a test is a prayer. Python doesn't negotiate with timeouts either.",
-	"QA-PY-102": "time.sleep() inside a Playwright test — the browser doesn't pause because you asked nicely.",
 	"QA-PY-103": "wait_for_timeout() as synchronization — the Playwright-Python edition of hoping.",
 	"QA-JV-102": "Thread.sleep() in a test is a prayer. The JVM doesn't negotiate with timeouts.",
 	"QA-JV-105": "waitForTimeout is the Java version of closing your eyes and hoping.",
@@ -12658,7 +12752,7 @@ function renderSarif(result, repoRootUri) {
 		tool: { driver: {
 			name: "Mjölnir",
 			informationUri: "https://github.com/Sergey-Bar/Mjolnir",
-			version: "0.6.7",
+			version: "0.6.13",
 			rules: [...rules.values()].map((r) => {
 				const meta = RULES.find((x) => x.id === r.id);
 				return {
@@ -18638,7 +18732,7 @@ const { runScan, buildUniversalRules, fallbackWorkspace, pathMatchesGlob, isVali
 * `scripts/sync-sarif-version.cjs` on release and guarded by
 * `tests/version-consistency.spec.ts` locally.
 */
-const CLI_VERSION = "0.6.7";
+const CLI_VERSION = "0.6.13";
 function parseArgs(argv, onError) {
 	const args = {
 		target: ".",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "mjolnir-qa",
-  "version": "0.6.7",
+  "version": "0.6.13",
   "description": "Mjölnir — the Verification Trust Engine for QA. Audits test suites and CI pipelines, reports a worthiness score and prioritized findings.",
   "type": "module",
   "engines": {