mjolnir-qa 2.0.0 → 2.1.0

package/dist/cli.d.mts

@@ -80,7 +80,7 @@ interface RuntimeCorroboration {
    * constrains TRUE-FLAKE derivation, which lives in the analysis, not
    * in the provenance label.
    */
-  source: "playwright-json" | "junit-xml" | "jest-json" | "vitest-json" | "playwright-trace";
+  source: "playwright-json" | "junit-xml" | "jest-json" | "vitest-json" | "playwright-trace" | "har";
   /** Number of tests executed in the finding's file (any level). */
   testsExecuted: number;
   /**
@@ -436,6 +436,13 @@ interface ScanResult {
     sourceCount: number;
     findingIds: string[];
   }>;
+  /**
+   * Aggregate forensic classifications from the discovered runtime
+   * report (plan §10.4, WAVE 5). Present only when a runtime report was
+   * ingested and produced ≥1 classified verdict — absent otherwise, so
+   * the machine contract's `forensicVerdicts` slot is never fabricated.
+   */
+  forensicVerdicts?: ForensicVerdictSummary;
   /**
    * Dependency graph metadata (ECO-005). Present when a dependency
    * manifest (package.json, pyproject.toml, pom.xml) was found.
@@ -490,6 +497,21 @@ interface TrustSummary {
   /** Which incompleteness factors applied (audit trail for the cap). */
   ceilingReasons: string[];
 }
+/**
+ * Aggregate forensic classifications from a runtime report (plan §10.4,
+ * WAVE 5). Present on a ScanResult when a runtime report was ingested
+ * and produced at least one classified verdict. `inconclusive` is a
+ * first-class outcome — the default when evidence is insufficient — and
+ * is also counted inside `byVerdict`.
+ */
+interface ForensicVerdictSummary {
+  /** Total verdicts carrying a forensic classification. */
+  classifications: number;
+  /** Classification count per verdict label. */
+  byVerdict: Record<string, number>;
+  /** INCONCLUSIVE outcome count — a first-class result, not a failure. */
+  inconclusive: number;
+}
 //#endregion
 //#region src/engine/tier-policy.d.ts
 type Tier = "core" | "extended" | "quarantine";
@@ -552,6 +574,13 @@ interface TestVerdict {
    */
   forensic?: ForensicClassification;
 }
+interface NetworkObservation {
+  file: string;
+  title: string;
+  outcome: "succeeded" | "failed" | "unknown";
+  durationMs: number;
+  errors?: string[];
+}
 interface ForensicsReport {
   forensicsSchemaVersion: number;
   /**
@@ -563,7 +592,7 @@ interface ForensicsReport {
    * `playwright-trace`: one record per trace artifact (the per-test
    * trace convention), action-level facts only.
    */
-  source: "playwright-json" | "junit-xml" | "jest-json" | "vitest-json" | "playwright-trace";
+  source: "playwright-json" | "junit-xml" | "jest-json" | "vitest-json" | "playwright-trace" | "har";
   totalTests: number;
   failed: number;
   skipped: number;
@@ -571,6 +600,9 @@ interface ForensicsReport {
   flakyTests: number;
   totalDurationMs: number;
   verdicts: TestVerdict[];
+  totalNetworkObservations?: number;
+  failedNetworkObservations?: number;
+  networkObservations?: NetworkObservation[];
   /**
    * Whether all discovered report files were successfully ingested.
    * FALSE when any files were skipped due to size limits, parse failures,
@@ -1055,7 +1087,7 @@ declare function loadConfig(root: string, options?: {
   warnings: string[];
 };
 declare namespace scan_pipeline_d_exports {
-  export { AssembleScanResultInput, CliArgs, DiscoveryResult, EVIDENCE_OVERRIDES$1 as EVIDENCE_OVERRIDES, FileAnalysisResult, KNOWN_RULE_IDS$1 as KNOWN_RULE_IDS, OVERLAP_META_BY_RULE_ID$1 as OVERLAP_META_BY_RULE_ID, PostScanResult, SUITE_INVALIDATING_RULE_IDS$1 as SUITE_INVALIDATING_RULE_IDS, ScanHooks, applyPostScanProcessing, assembleScanResult, buildUniversalRules$1 as buildUniversalRules, discoverAndParseRuntimeReport$1 as discoverAndParseRuntimeReport, discoverTestFilesPhase, fallbackWorkspace$1 as fallbackWorkspace, isValidFindingRecord$1 as isValidFindingRecord, pathMatchesGlob$1 as pathMatchesGlob, runFileAnalysisPhase, runScan$1 as runScan, selectAdapter };
+  export { AssembleScanResultInput, CliArgs, DiscoveryResult, EVIDENCE_OVERRIDES$1 as EVIDENCE_OVERRIDES, FileAnalysisResult, KNOWN_RULE_IDS$1 as KNOWN_RULE_IDS, OVERLAP_META_BY_RULE_ID$1 as OVERLAP_META_BY_RULE_ID, PostScanResult, SUITE_INVALIDATING_RULE_IDS$1 as SUITE_INVALIDATING_RULE_IDS, ScanHooks, applyPostScanProcessing, assembleScanResult, buildUniversalRules$1 as buildUniversalRules, discoverAndParseRuntimeReport$1 as discoverAndParseRuntimeReport, discoverTestFilesPhase, fallbackWorkspace$1 as fallbackWorkspace, isValidFindingRecord$1 as isValidFindingRecord, pathMatchesGlob$1 as pathMatchesGlob, runFileAnalysisPhase, runScan$1 as runScan, selectAdapter, summarizeForensicVerdicts };
 }
 /** Registered rule IDs — used to warn on unknown severityOverrides keys (M4). */
 declare const KNOWN_RULE_IDS$1: ReadonlySet<string>;
@@ -1194,6 +1226,8 @@ interface ScanHooks {
    * never on the stdout machine contracts.
    */
   onGateNotice?: (notice: string) => void;
+  onTestFilesDiscovered?: (files: readonly string[]) => void;
+  onPreSuppressionFindings?: (findings: readonly Finding[]) => void;
 }
 /**
  * Workspace fallback for targets with no discoverable project root
@@ -1220,11 +1254,11 @@ declare function pathMatchesGlob$1(path: string, glob: string): boolean;
  * Plan §16 + WI-11: locate a runtime run report next to the scan
  * target, using the exact conventions the forensics ingestion already
  * accepts. Zero-config search over conventional artifact names at
- * depth ≤ 2 (src/discovery/evidence-discovery.ts); the FIRST parsable
- * candidate wins (priority: mjolnir-report > playwright-json >
- * test-results-dir > junit-file). Validates each candidate by attempting
- * to parse it and checking that it produces at least one test. Returns
- * the parsed report alongside the path to avoid double-parsing.
+ * depth ≤ 2 (src/discovery/evidence-discovery.ts). The FIRST parsable
+ * candidate with `totalTests > 0` is kept as a fallback; the loop
+ * continues and returns a later candidate when one with
+ * `analysisComplete === true` is found. Returns the parsed report
+ * alongside the path to avoid double-parsing.
  */
 declare function discoverAndParseRuntimeReport$1(scanRoot: string): {
   path: string;
@@ -1272,8 +1306,17 @@ interface PostScanResult {
   suppressionCount: number;
   frameworks: ReturnType<typeof detectFrameworks>;
   runtimeReportPath: string | undefined;
+  /** Aggregate forensic classifications from the ingested runtime report. */
+  forensicVerdicts: ForensicVerdictSummary | undefined;
   config: ReturnType<typeof loadConfig>["config"];
 }
+/**
+ * Summarize forensic classifications from an ingested runtime report
+ * (plan §10.4, WAVE 5). Returns undefined when no verdict carries a
+ * classification — the machine contract slot stays absent rather than
+ * reporting all-zero counts.
+ */
+declare function summarizeForensicVerdicts(report: ForensicsReport): ForensicVerdictSummary | undefined;
 declare function applyPostScanProcessing(findings: Finding[], workspace: Workspace, args: CliArgs, hooks: ScanHooks, scanRoot: Workspace, declarationsByFile: Map<string, number>, testDeclarationCount: number, tierByRuleId: Map<string, Tier>, REVISION_BY_RULE_ID: Map<string, number>): PostScanResult;
 interface AssembleScanResultInput {
   findings: Finding[];
@@ -1307,6 +1350,7 @@ interface AssembleScanResultInput {
   suppressionCount: number;
   frameworks: ReturnType<typeof detectFrameworks>;
   runtimeReportPath: string | undefined;
+  forensicVerdicts: ForensicVerdictSummary | undefined;
   config: ReturnType<typeof loadConfig>["config"];
   fileProvenance: Array<{
     path: string;
@@ -1339,7 +1383,7 @@ declare function runScan$1(args: CliArgs, hooks?: ScanHooks): Promise<ScanResult
  * scripts/sync-sarif-version.cjs and guarded by the version-consistency
  * spec. cli.ts re-exports this as CLI_VERSION.
  */
-declare const ENGINE_VERSION = "2.0.0";
+declare const ENGINE_VERSION = "2.1.0";
 //#endregion
 //#region src/cli-io.d.ts
 /**
@@ -1516,6 +1560,121 @@ export declare function runReleaseTrustCommand(argv: string[], io?: {
   err: Output;
 }): number;
 //#endregion
+//#region src/commands/business-case.d.ts
+/**
+ * Entry point for `mjolnir business-case`.
+ *
+ * Flags:
+ *   --industry <type>    Industry cost profile (default/fintech/healthcare/...)
+ *   --history <months>   Use git history for the last N months (estimates from
+ *                        actual scan improvements, not projections)
+ *   --projected <months> Show projected savings over N months
+ *   --strict             Include quarantine-tier findings
+ */
+export declare function runBusinessCaseCommand(argv: string[], io?: {
+  out: Output;
+  err?: Output;
+}): Promise<number>;
+//#endregion
+//#region src/commands/release-report.d.ts
+/**
+ * CLI verb: `mjolnir release-report [--since <ref>] [--history <json>] [target]`.
+ */
+export declare function runReleaseReportCommand(argv: string[], io: {
+  out: Output;
+  err: Output;
+}): Promise<number>;
+//#endregion
+//#region src/commands/report-playwright.d.ts
+export declare function runReportPlaywrightCommand(argv: string[], io: {
+  out: Output;
+  err: Output;
+}): Promise<number>;
+//#endregion
+//#region src/commands/trend.d.ts
+export declare function runTrendCommand(argv: string[], io: {
+  out: Output;
+  err: Output;
+}): Promise<number>;
+//#endregion
+//#region src/commands/exec-report.d.ts
+export declare function runExecReportCommand(argv: string[], io: {
+  out: Output;
+  err: Output;
+}): Promise<number>;
+//#endregion
+//#region src/commands/policy.d.ts
+export declare function runPolicyCommand(argv: string[], io: {
+  out: Output;
+  err: Output;
+}): Promise<number>;
+//#endregion
+//#region src/commands/quarantine.d.ts
+export declare function runQuarantineCommand(argv: string[], io: {
+  out: Output;
+  err: Output;
+}): Promise<number>;
+//#endregion
+//#region src/commands/analyze.d.ts
+export declare function runAnalyzeCommand(argv: string[], io: {
+  out: Output;
+  err: Output;
+}): number;
+//#endregion
+//#region src/commands/ci-adapter.d.ts
+export declare function runCiAdapterCommand(argv: string[], io: {
+  out: Output;
+  err: Output;
+}): number;
+//#endregion
+//#region src/commands/dashboard.d.ts
+export declare function runDashboardCommand(argv: string[], io: {
+  out: Output;
+  err: Output;
+}): Promise<number>;
+//#endregion
+//#region src/commands/enterprise.d.ts
+export declare function runEnterpriseCommand(argv: string[], io: {
+  out: Output;
+  err: Output;
+}): number;
+//#endregion
+//#region src/commands/maturity.d.ts
+export declare function runMaturityCommand(argv: string[], io: {
+  out: Output;
+  err: Output;
+}): number;
+//#endregion
+//#region src/commands/milestone.d.ts
+export declare function runFrameworkMaturityCommand(argv: string[], io?: {
+  out: Output;
+  err: Output;
+}): number;
+export declare function runSuppressionGateCommand(argv: string[], io?: {
+  out: Output;
+  err: Output;
+}): Promise<number>;
+export declare function runCrossFileCommand(argv: string[], io?: {
+  out: Output;
+  err: Output;
+}): Promise<number>;
+export declare function runContractVerifyCommand(argv: string[], io?: {
+  out: Output;
+  err: Output;
+}): Promise<number>;
+export declare function runTrustTrendCommand(argv: string[], io?: {
+  out: Output;
+  err: Output;
+}): Promise<number>;
+export declare function runEvidenceGraphCommand(argv: string[], io?: {
+  out: Output;
+  err: Output;
+}): Promise<number>;
+export declare function runCIIntegrityCommand(argv: string[], io?: {
+  out: Output;
+  err: Output;
+}): Promise<number>;
+//#endregion
 //#region src/cli.d.ts
 export declare const runScan: typeof runScan$1, buildUniversalRules: typeof buildUniversalRules$1, fallbackWorkspace: typeof fallbackWorkspace$1, pathMatchesGlob: typeof pathMatchesGlob$1, isValidFindingRecord: typeof isValidFindingRecord$1, discoverAndParseRuntimeReport: typeof discoverAndParseRuntimeReport$1, KNOWN_RULE_IDS: ReadonlySet<string>, OVERLAP_META_BY_RULE_ID: ReadonlyMap<string, OverlapMeta>, EVIDENCE_OVERRIDES: ReadonlyMap<string, string>, SUITE_INVALIDATING_RULE_IDS: ReadonlySet<string>;
 /** A usage-error detail: the offending token, when one exists. */
@@ -1568,7 +1727,7 @@ export declare function runSuppressions(io?: {
   out: Output;
   err?: Output;
 }): number;
-export declare function printUsage(print: (s: string) => void): void;
+export declare function printUsage(print: (s: string) => void, width?: number): void;
 export declare function main(argv?: string[], io?: {
   out: Output;
   err: Output;