oc-pilot 0.5.1 → 0.88.1

package/dist/commands/roast.js

@@ -0,0 +1,102 @@
+import { describeDiffSource, loadDiff } from "../core/diff-source.js";
+import { PilotError } from "../core/errors.js";
+import { writeOutput } from "../core/io.js";
+import { log } from "../core/log.js";
+import { COMMON_HELP, parseCommandArgs, resolveContext, withCommon } from "../core/options.js";
+import { asBoolean, asString } from "../core/parse.js";
+import { detectProjectType } from "../core/project.js";
+import { buildRoastContext, parsePersona } from "../core/roast.js";
+import { executeRecipeDetailed } from "../core/run.js";
+const OPTIONS = withCommon({
+    persona: { type: "string" },
+    context: { type: "string" },
+    diff: { type: "string" },
+    stdin: { type: "boolean" },
+    "git-diff": { type: "boolean" },
+    staged: { type: "boolean" },
+    base: { type: "string" },
+    "include-untracked": { type: "boolean" },
+    "no-secret-scan": { type: "boolean" },
+    "fail-on-secrets": { type: "boolean" },
+});
+const HELP = `Использование:
+  oc-pilot roast [опции]
+
+Прожарка diff: модель получает роль токсичного сеньора и высмеивает
+сложность, нейминг, лишние абстракции и слепую веру в ИИ. Каждая шутка
+опирается на конкретную строку, в конце — один короткий реальный фикс.
+Код атакуется, автор — нет: без оскорблений личности и выдуманных строк.
+
+Опции:
+      --persona <name>    linus, ramsay, corporate или default (по умолчанию linus)
+      --context <text>    что именно произошло и что стоит высмеять
+      --diff <file|->     готовый unified diff
+      --git-diff          взять git diff HEAD
+      --staged            только staged-изменения
+      --base <ref>        diff против ветки
+      --include-untracked добавить неотслеживаемые файлы
+      --json              вернуть JSON с полем roast
+${COMMON_HELP}
+
+Примеры:
+  oc-pilot roast --staged
+  oc-pilot roast --base main --persona ramsay
+  oc-pilot roast --diff changes.diff --persona corporate --json`;
+export async function runRoast(argv) {
+    const { values, positionals } = parseCommandArgs(argv, OPTIONS);
+    if (asBoolean(values, "help")) {
+        process.stdout.write(HELP);
+        return 0;
+    }
+    if (positionals.length > 0) {
+        throw new PilotError("roast не принимает позиционных аргументов", {
+            hint: "Передайте контекст через --context, а diff — через --diff или git-флаги.",
+            exitCode: 2,
+        });
+    }
+    const ctx = resolveContext(values);
+    const persona = parsePersona(asString(values, "persona"));
+    const diffFlag = asString(values, "diff");
+    const stdinFlag = asBoolean(values, "stdin");
+    const gitDiff = asBoolean(values, "git-diff");
+    const gitFlags = asBoolean(values, "staged") || asBoolean(values, "include-untracked") || asString(values, "base") !== undefined;
+    if (gitDiff && (diffFlag !== undefined || stdinFlag)) {
+        throw new PilotError("--git-diff нельзя комбинировать с --diff или --stdin", { exitCode: 2 });
+    }
+    const wantDiff = gitDiff || gitFlags || diffFlag !== undefined || stdinFlag;
+    const data = wantDiff ? await loadDiff(values, ctx) : undefined;
+    if (data && !data.diff.trim()) {
+        log.info("Изменений нет — прожаривать нечего.");
+        return 0;
+    }
+    const parts = [buildRoastContext(persona, asString(values, "context"))];
+    if (data) {
+        parts.push(`DIFF_SOURCE: ${describeDiffSource(data.source)}`);
+        parts.push(`DIFF_STATS: ${String(data.stats.files)} файл(ов), +${String(data.stats.additions)} / -${String(data.stats.deletions)}`);
+        if (data.changedFiles.length > 0)
+            parts.push(`CHANGED_FILES:\n${data.changedFiles.join("\n")}`);
+    }
+    const result = await executeRecipeDetailed({
+        recipe: "custom",
+        projectType: detectProjectType(ctx.cwd, data?.changedFiles ?? []),
+        additionalContext: parts.join("\n\n"),
+        diff: data?.payloadDiff ?? "",
+        secretFindings: data?.findings ?? [],
+        changedFiles: data?.changedFiles ?? [],
+        failOnSecrets: asBoolean(values, "fail-on-secrets"),
+        noSecretScan: asBoolean(values, "no-secret-scan"),
+        meta: { source: data?.source ?? "без diff", persona },
+    }, ctx);
+    const roast = (result.analysis ?? "").trim();
+    if (ctx.flags.json) {
+        const wrote = writeOutput(JSON.stringify({ persona, roast, meta: result.meta }, null, 2), ctx.flags.output);
+        if (wrote)
+            log.success(`Отчёт сохранён: ${wrote}`);
+        return result.exitCode;
+    }
+    const wrote = writeOutput(`${roast}\n`, ctx.flags.output);
+    if (wrote)
+        log.success(`Отчёт сохранён: ${wrote}`);
+    return result.exitCode;
+}
+//# sourceMappingURL=roast.js.map

package/dist/commands/roast.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"roast.js","sourceRoot":"","sources":["../../src/commands/roast.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,kBAAkB,EAAE,QAAQ,EAAE,MAAM,wBAAwB,CAAC;AACtE,OAAO,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAC/C,OAAO,EAAE,WAAW,EAAE,MAAM,eAAe,CAAC;AAC5C,OAAO,EAAE,GAAG,EAAE,MAAM,gBAAgB,CAAC;AACrC,OAAO,EAAE,WAAW,EAAE,gBAAgB,EAAE,cAAc,EAAE,UAAU,EAAmB,MAAM,oBAAoB,CAAC;AAChH,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AACvD,OAAO,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAC;AACvD,OAAO,EAAE,iBAAiB,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAC;AACnE,OAAO,EAAE,qBAAqB,EAAE,MAAM,gBAAgB,CAAC;AAEvD,MAAM,OAAO,GAAe,UAAU,CAAC;IACrC,OAAO,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;IAC3B,OAAO,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;IAC3B,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;IACxB,KAAK,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE;IAC1B,UAAU,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE;IAC/B,MAAM,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE;IAC3B,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;IACxB,mBAAmB,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE;IACxC,gBAAgB,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE;IACrC,iBAAiB,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE;CACvC,CAAC,CAAC;AAEH,MAAM,IAAI,GAAG;;;;;;;;;;;;;;;;;EAiBX,WAAW;;;;;gEAKmD,CAAC;AAEjE,MAAM,CAAC,KAAK,UAAU,QAAQ,CAAC,IAAc;IAC3C,MAAM,EAAE,MAAM,EAAE,WAAW,EAAE,GAAG,gBAAgB,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IAChE,IAAI,SAAS,CAAC,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC;QAC9B,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAC3B,OAAO,CAAC,CAAC;IACX,CAAC;IACD,IAAI,WAAW,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC3B,MAAM,IAAI,UAAU,CAAC,2CAA2C,EAAE;YAChE,IAAI,EAAE,0EAA0E;YAChF,QAAQ,EAAE,CAAC;SACZ,CAAC,CAAC;IACL,CAAC;IAED,MAAM,GAAG,GAAG,cAAc,CAAC,MAAM,CAAC,CAAC;IACnC,MAAM,OAAO,GAAG,YAAY,CAAC,QAAQ,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC,CAAC;IAC1D,MAAM,QAAQ,GAAG,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC1C,MAAM,SAAS,GAAG,SAAS,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC7C,MAAM,OAAO,GAAG,SAAS,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;IAC9C,MAAM,QAAQ,GAAG,SAAS,CAAC,MAAM,EAAE,QAAQ,CAAC,IAAI,SAAS,CAAC,MAAM,EAAE,mBAAmB,CAAC,IAAI,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC,KAAK,SAAS,CAAC;IACjI,IAAI,OAAO,IAAI,CAAC,QAAQ,KAAK,SAAS,IAAI,SAAS,CAAC,EAAE,CAAC;QACrD,MAAM,IAAI,UAAU,CAAC,sDAAsD,EAAE,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC,CAAC;IAChG,CAAC;IACD,MAAM,QAAQ,GAAG,OAAO,IAAI,QAAQ,IAAI,QAAQ,KAAK,SAAS,IAAI,SAAS,CAAC;IAC5E,MAAM,IAAI,GAAG,QAAQ,CAAC,CAAC,CAAC,MAAM,QAAQ,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAChE,IAAI,IAAI,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,CAAC;QAC9B,GAAG,CAAC,IAAI,CAAC,qCAAqC,CAAC,CAAC;QAChD,OAAO,CAAC,CAAC;IACX,CAAC;IAED,MAAM,KAAK,GAAG,CAAC,iBAAiB,CAAC,OAAO,EAAE,QAAQ,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC;IACxE,IAAI,IAAI,EAAE,CAAC;QACT,KAAK,CAAC,IAAI,CAAC,gBAAgB,kBAAkB,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QAC9D,KAAK,CAAC,IAAI,CAAC,eAAe,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,eAAe,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,OAAO,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;QACpI,IAAI,IAAI,CAAC,YAAY,CAAC,MAAM,GAAG,CAAC;YAAE,KAAK,CAAC,IAAI,CAAC,mBAAmB,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAClG,CAAC;IAED,MAAM,MAAM,GAAG,MAAM,qBAAqB,CACxC;QACE,MAAM,EAAE,QAAQ;QAChB,WAAW,EAAE,iBAAiB,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,EAAE,YAAY,IAAI,EAAE,CAAC;QACjE,iBAAiB,EAAE,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC;QACrC,IAAI,EAAE,IAAI,EAAE,WAAW,IAAI,EAAE;QAC7B,cAAc,EAAE,IAAI,EAAE,QAAQ,IAAI,EAAE;QACpC,YAAY,EAAE,IAAI,EAAE,YAAY,IAAI,EAAE;QACtC,aAAa,EAAE,SAAS,CAAC,MAAM,EAAE,iBAAiB,CAAC;QACnD,YAAY,EAAE,SAAS,CAAC,MAAM,EAAE,gBAAgB,CAAC;QACjD,IAAI,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,IAAI,UAAU,EAAE,OAAO,EAAE;KACtD,EACD,GAAG,CACJ,CAAC;IAEF,MAAM,KAAK,GAAG,CAAC,MAAM,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IAC7C,IAAI,GAAG,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;QACnB,MAAM,KAAK,GAAG,WAAW,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QAC5G,IAAI,KAAK;YAAE,GAAG,CAAC,OAAO,CAAC,mBAAmB,KAAK,EAAE,CAAC,CAAC;QACnD,OAAO,MAAM,CAAC,QAAQ,CAAC;IACzB,CAAC;IACD,MAAM,KAAK,GAAG,WAAW,CAAC,GAAG,KAAK,IAAI,EAAE,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAC1D,IAAI,KAAK;QAAE,GAAG,CAAC,OAAO,CAAC,mBAAmB,KAAK,EAAE,CAAC,CAAC;IACnD,OAAO,MAAM,CAAC,QAAQ,CAAC;AACzB,CAAC"}

package/dist/commands/sandbox.js

@@ -0,0 +1,82 @@
+import { PilotError } from "../core/errors.js";
+import { runSandbox, renderSandbox } from "../core/phantom.js";
+import { writeOutput } from "../core/io.js";
+import { log } from "../core/log.js";
+import { COMMON_HELP, parseCommandArgs, resolveContext, withCommon } from "../core/options.js";
+import { asBoolean, asString } from "../core/parse.js";
+const OPTIONS = withCommon({
+    timeout: { type: "string" },
+    "memory-limit": { type: "string" },
+    "allow-unsafe-exec": { type: "boolean" },
+});
+const HELP = `Использование:
+  oc-pilot sandbox run <file> [опции]
+
+Запускает JavaScript или ESM-файл в node:vm с отдельным контекстом:
+require, import, fetch, process.exit и таймеры длиннее секунды блокируются,
+console перехватывается, а исполнение ограничено таймаутом и кучей.
+TypeScript запускается только если рядом есть собранный dist/*.js.
+Это не ОС-песочница: для нативного кода нужен bwrap/sandbox-exec, поэтому
+флаг --allow-unsafe-exec оставлен явным подтверждением для таких сценариев.
+
+Опции:
+      --timeout <2s|500ms>   таймаут исполнения (по умолчанию 2s)
+      --memory-limit <128MB> лимит кучи процесса (по умолчанию 128MB)
+      --allow-unsafe-exec    разрешить нативный запуск без песочницы (не рекомендуется)
+${COMMON_HELP}
+
+Примеры:
+  oc-pilot sandbox run scripts/demo.mjs
+  oc-pilot sandbox run scripts/demo.mjs --timeout 500ms --json
+  oc-pilot sandbox run dist/task.js --memory-limit 64MB`;
+function parseDuration(raw) {
+    if (raw === undefined || raw.trim() === "")
+        return undefined;
+    const match = /^(\d+(?:\.\d+)?)(ms|s)?$/i.exec(raw.trim());
+    if (!match?.[1]) {
+        throw new PilotError(`Некорректный таймаут: ${raw}`, { hint: "Используйте 2s, 500ms или миллисекунды.", exitCode: 2 });
+    }
+    const value = Number(match[1]);
+    return Math.round(match[2]?.toLowerCase() === "ms" ? value : value * 1000);
+}
+function parseMemory(raw) {
+    if (raw === undefined || raw.trim() === "")
+        return undefined;
+    const match = /^(\d+)(?:mb)?$/i.exec(raw.trim());
+    if (!match?.[1]) {
+        throw new PilotError(`Некорректный лимит памяти: ${raw}`, { hint: "Используйте 128MB или мегабайты.", exitCode: 2 });
+    }
+    return Number(match[1]);
+}
+export async function runSandboxCommand(argv) {
+    const { values, positionals } = parseCommandArgs(argv, OPTIONS);
+    if (asBoolean(values, "help")) {
+        process.stdout.write(HELP);
+        return 0;
+    }
+    const [subcommand, file] = positionals;
+    if (subcommand !== "run" || !file) {
+        throw new PilotError("Использование: oc-pilot sandbox run <file>", { exitCode: 2 });
+    }
+    const ctx = resolveContext(values);
+    const result = runSandbox(ctx.cwd, file, {
+        timeoutMs: parseDuration(asString(values, "timeout")),
+        memoryMb: parseMemory(asString(values, "memory-limit")),
+    });
+    if (ctx.flags.json) {
+        const wrote = writeOutput(JSON.stringify(result, null, 2), ctx.flags.output);
+        if (wrote)
+            log.success(`Результат сохранён: ${wrote}`);
+    }
+    else {
+        const wrote = writeOutput(renderSandbox(result), ctx.flags.output);
+        if (wrote)
+            log.success(`Результат сохранён: ${wrote}`);
+    }
+    if (result.status === "blocked")
+        log.warn("Побочный эффект заблокирован.");
+    if (result.status === "error" || result.status === "timeout")
+        log.error(`Sandbox: ${result.status}.`);
+    return result.status === "ok" || result.status === "blocked" ? 0 : 1;
+}
+//# sourceMappingURL=sandbox.js.map

package/dist/commands/sandbox.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sandbox.js","sourceRoot":"","sources":["../../src/commands/sandbox.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAC/C,OAAO,EAAE,UAAU,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AAC/D,OAAO,EAAE,WAAW,EAAE,MAAM,eAAe,CAAC;AAC5C,OAAO,EAAE,GAAG,EAAE,MAAM,gBAAgB,CAAC;AACrC,OAAO,EAAE,WAAW,EAAE,gBAAgB,EAAE,cAAc,EAAE,UAAU,EAAmB,MAAM,oBAAoB,CAAC;AAChH,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAEvD,MAAM,OAAO,GAAe,UAAU,CAAC;IACrC,OAAO,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;IAC3B,cAAc,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;IAClC,mBAAmB,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE;CACzC,CAAC,CAAC;AAEH,MAAM,IAAI,GAAG;;;;;;;;;;;;;;EAcX,WAAW;;;;;wDAK2C,CAAC;AAEzD,SAAS,aAAa,CAAC,GAAuB;IAC5C,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,CAAC,IAAI,EAAE,KAAK,EAAE;QAAE,OAAO,SAAS,CAAC;IAC7D,MAAM,KAAK,GAAG,2BAA2B,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC;IAC3D,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAChB,MAAM,IAAI,UAAU,CAAC,yBAAyB,GAAG,EAAE,EAAE,EAAE,IAAI,EAAE,yCAAyC,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC,CAAC;IACzH,CAAC;IACD,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IAC/B,OAAO,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,KAAK,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,GAAG,IAAI,CAAC,CAAC;AAC7E,CAAC;AAED,SAAS,WAAW,CAAC,GAAuB;IAC1C,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,CAAC,IAAI,EAAE,KAAK,EAAE;QAAE,OAAO,SAAS,CAAC;IAC7D,MAAM,KAAK,GAAG,iBAAiB,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC;IACjD,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAChB,MAAM,IAAI,UAAU,CAAC,8BAA8B,GAAG,EAAE,EAAE,EAAE,IAAI,EAAE,kCAAkC,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC,CAAC;IACvH,CAAC;IACD,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;AAC1B,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,IAAc;IACpD,MAAM,EAAE,MAAM,EAAE,WAAW,EAAE,GAAG,gBAAgB,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IAChE,IAAI,SAAS,CAAC,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC;QAC9B,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAC3B,OAAO,CAAC,CAAC;IACX,CAAC;IACD,MAAM,CAAC,UAAU,EAAE,IAAI,CAAC,GAAG,WAAW,CAAC;IACvC,IAAI,UAAU,KAAK,KAAK,IAAI,CAAC,IAAI,EAAE,CAAC;QAClC,MAAM,IAAI,UAAU,CAAC,4CAA4C,EAAE,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC,CAAC;IACtF,CAAC;IAED,MAAM,GAAG,GAAG,cAAc,CAAC,MAAM,CAAC,CAAC;IACnC,MAAM,MAAM,GAAG,UAAU,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,EAAE;QACvC,SAAS,EAAE,aAAa,CAAC,QAAQ,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;QACrD,QAAQ,EAAE,WAAW,CAAC,QAAQ,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC;KACxD,CAAC,CAAC;IAEH,IAAI,GAAG,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;QACnB,MAAM,KAAK,GAAG,WAAW,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QAC7E,IAAI,KAAK;YAAE,GAAG,CAAC,OAAO,CAAC,uBAAuB,KAAK,EAAE,CAAC,CAAC;IACzD,CAAC;SAAM,CAAC;QACN,MAAM,KAAK,GAAG,WAAW,CAAC,aAAa,CAAC,MAAM,CAAC,EAAE,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QACnE,IAAI,KAAK;YAAE,GAAG,CAAC,OAAO,CAAC,uBAAuB,KAAK,EAAE,CAAC,CAAC;IACzD,CAAC;IACD,IAAI,MAAM,CAAC,MAAM,KAAK,SAAS;QAAE,GAAG,CAAC,IAAI,CAAC,+BAA+B,CAAC,CAAC;IAC3E,IAAI,MAAM,CAAC,MAAM,KAAK,OAAO,IAAI,MAAM,CAAC,MAAM,KAAK,SAAS;QAAE,GAAG,CAAC,KAAK,CAAC,YAAY,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC;IACtG,OAAO,MAAM,CAAC,MAAM,KAAK,IAAI,IAAI,MAAM,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AACvE,CAAC"}

package/dist/commands/sast.js

@@ -0,0 +1,162 @@
+import { existsSync, readFileSync } from "node:fs";
+import { join, relative, resolve } from "node:path";
+import { loadDiff } from "../core/diff-source.js";
+import { PilotError } from "../core/errors.js";
+import { writeOutput } from "../core/io.js";
+import { log } from "../core/log.js";
+import { COMMON_HELP, parseCommandArgs, resolveContext, withCommon } from "../core/options.js";
+import { asBoolean, asString } from "../core/parse.js";
+import { buildSastReport, parseSastSeverity, renderSast, sastSarif, scanSource, severityAtLeast, } from "../core/sast.js";
+import { BASELINE_VERSION, DEFAULT_BASELINE_PATH, loadFindingsBaseline, saveFindingsBaseline, sastFingerprint } from "../core/findings-baseline.js";
+import { isCodeFile, isGeneratedPath } from "../core/slop/source.js";
+const OPTIONS = withCommon({
+    diff: { type: "string" },
+    stdin: { type: "boolean" },
+    staged: { type: "boolean" },
+    unstaged: { type: "boolean" },
+    base: { type: "string" },
+    "include-untracked": { type: "boolean" },
+    "fail-on-issue": { type: "string" },
+    ignore: { type: "string" },
+    "no-suppressions": { type: "boolean" },
+    baseline: { type: "string" },
+    "update-baseline": { type: "boolean" },
+});
+const HELP = `Использование:
+  oc-pilot sast [пути] [опции]
+
+Детерминированный статический анализ изменённых файлов: инъекции команд и SQL,
+path traversal, SSRF, выполнение кода, XSS, открытые редиректы, отключённая
+проверка TLS, wildcard CORS, prototype pollution, слабые хеши и JWT none.
+Модель не вызывается, сеть не используется.
+
+Опции:
+      --fail-on-issue <level>  код 1 при находке не ниже high|medium|low (по умолчанию high)
+      --ignore <rules>         пропустить правила (через запятую)
+      --no-suppressions        не учитывать комментарии oc-pilot:sast-ignore
+      --baseline <file>        скрыть находки, уже записанные в baseline
+      --update-baseline        записать текущие находки в baseline и выйти с кодом 0
+      --diff <file>            готовый unified diff вместо git-состояния
+      --staged                 взять staged-изменения
+      --unstaged               взять unstaged-изменения
+      --base <ref>             дифф <ref>...HEAD
+      --include-untracked      включить неотслеживаемые файлы
+${COMMON_HELP}
+
+Подавление:
+  // oc-pilot:sast-ignore sql-injection: legacy query builder, вход проверен выше
+
+Примеры:
+  oc-pilot sast --staged
+  oc-pilot sast --base main --fail-on-issue medium
+  oc-pilot sast src/server.ts --json
+  oc-pilot sast --staged --format sarif -o sast.sarif`;
+function normalizePath(cwd, file) {
+    return relative(cwd, resolve(cwd, file)).replace(/\\/g, "/");
+}
+export async function runSast(argv) {
+    const { values, positionals } = parseCommandArgs(argv, OPTIONS);
+    if (asBoolean(values, "help")) {
+        process.stdout.write(HELP);
+        return 0;
+    }
+    const ctx = resolveContext(values);
+    const gate = parseSastSeverity(asString(values, "fail-on-issue") ?? "high");
+    if (!gate) {
+        throw new PilotError(`Некорректный порог --fail-on-issue: ${String(asString(values, "fail-on-issue"))}`, {
+            hint: "Допустимые значения: high, medium, low.",
+            exitCode: 2,
+        });
+    }
+    const ignore = new Set((asString(values, "ignore") ?? "")
+        .split(",")
+        .map((rule) => rule.trim())
+        .filter(Boolean));
+    let files;
+    if (positionals.length > 0) {
+        files = positionals.map((file) => normalizePath(ctx.cwd, file));
+        for (const file of files) {
+            if (!existsSync(join(ctx.cwd, file))) {
+                throw new PilotError(`Файл не найден: ${file}`, { exitCode: 2 });
+            }
+        }
+    }
+    else {
+        const data = await loadDiff(values, ctx, [], { optionalGit: true });
+        files = data.changedFiles.filter((file) => isCodeFile(file) && !isGeneratedPath(file) && existsSync(join(ctx.cwd, file)));
+    }
+    files = [...new Set(files)];
+    if (files.length === 0) {
+        log.info("Нет файлов для проверки.");
+        const empty = buildSastReport(0, []);
+        if (ctx.flags.format === "sarif")
+            writeOutput(sastSarif(empty), ctx.flags.output);
+        else if (ctx.flags.json)
+            writeOutput(`${JSON.stringify(empty, null, 2)}\n`, ctx.flags.output);
+        else
+            writeOutput(renderSast(empty), ctx.flags.output);
+        return 0;
+    }
+    const results = files.map((file) => scanSource(file, readFileSync(join(ctx.cwd, file), "utf8"), {
+        suppressions: !asBoolean(values, "no-suppressions"),
+    }));
+    const report = buildSastReport(files.length, results);
+    const findings = report.findings.filter((finding) => !ignore.has(finding.rule));
+    const summary = { high: 0, medium: 0, low: 0 };
+    for (const finding of findings)
+        summary[finding.severity] += 1;
+    const baselineFile = asString(values, "baseline") ?? DEFAULT_BASELINE_PATH;
+    const updateBaseline = asBoolean(values, "update-baseline");
+    let finalFindings = findings;
+    let baselineSuppressed = 0;
+    let baselineInfo;
+    if (updateBaseline) {
+        const existing = loadFindingsBaseline(ctx.cwd, baselineFile);
+        const path = saveFindingsBaseline(ctx.cwd, baselineFile, {
+            version: BASELINE_VERSION,
+            sast: findings.map(sastFingerprint),
+            authz: existing.baseline.authz,
+        });
+        baselineInfo = { path, updated: true, entries: findings.length };
+        log.success(`Baseline сохранён: ${path} (${String(findings.length)} находок).`);
+    }
+    else if (asString(values, "baseline")) {
+        const loaded = loadFindingsBaseline(ctx.cwd, baselineFile);
+        if (!loaded.exists) {
+            throw new PilotError(`Baseline не найден: ${baselineFile}`, {
+                hint: "Создайте его через --update-baseline.",
+                exitCode: 2,
+            });
+        }
+        const known = new Set(loaded.baseline.sast);
+        finalFindings = findings.filter((finding) => !known.has(sastFingerprint(finding)));
+        baselineSuppressed = findings.length - finalFindings.length;
+    }
+    const finalSummary = { high: 0, medium: 0, low: 0 };
+    for (const finding of finalFindings)
+        finalSummary[finding.severity] += 1;
+    const finalReport = {
+        ...report,
+        findings: finalFindings,
+        summary: finalSummary,
+        baselineSuppressed,
+        ...(baselineInfo ? { baseline: baselineInfo } : {}),
+    };
+    const failed = !updateBaseline && finalFindings.some((finding) => severityAtLeast(finding.severity, gate));
+    const text = ctx.flags.format === "sarif"
+        ? sastSarif(finalReport)
+        : ctx.flags.json
+            ? `${JSON.stringify(finalReport, null, 2)}\n`
+            : renderSast(finalReport);
+    const wrote = writeOutput(text, ctx.flags.output);
+    if (wrote)
+        log.success(`Отчёт сохранён: ${wrote}`);
+    if (ctx.flags.format !== "sarif" && !ctx.flags.json) {
+        if (finalReport.suppressed > 0)
+            log.detail(`Подавлено находок: ${String(finalReport.suppressed)}.`);
+        if (failed)
+            log.error(`Есть находки уровня ${gate} и выше.`);
+    }
+    return failed ? 1 : 0;
+}
+//# sourceMappingURL=sast.js.map

package/dist/commands/sast.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sast.js","sourceRoot":"","sources":["../../src/commands/sast.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACnD,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpD,OAAO,EAAE,QAAQ,EAAE,MAAM,wBAAwB,CAAC;AAClD,OAAO,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAC/C,OAAO,EAAE,WAAW,EAAE,MAAM,eAAe,CAAC;AAC5C,OAAO,EAAE,GAAG,EAAE,MAAM,gBAAgB,CAAC;AACrC,OAAO,EAAE,WAAW,EAAE,gBAAgB,EAAE,cAAc,EAAE,UAAU,EAAmB,MAAM,oBAAoB,CAAC;AAChH,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AACvD,OAAO,EACL,eAAe,EACf,iBAAiB,EACjB,UAAU,EACV,SAAS,EACT,UAAU,EACV,eAAe,GAEhB,MAAM,iBAAiB,CAAC;AACzB,OAAO,EAAE,gBAAgB,EAAE,qBAAqB,EAAE,oBAAoB,EAAE,oBAAoB,EAAE,eAAe,EAAE,MAAM,8BAA8B,CAAC;AACpJ,OAAO,EAAE,UAAU,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AAErE,MAAM,OAAO,GAAe,UAAU,CAAC;IACrC,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;IACxB,KAAK,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE;IAC1B,MAAM,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE;IAC3B,QAAQ,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE;IAC7B,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;IACxB,mBAAmB,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE;IACxC,eAAe,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;IACnC,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;IAC1B,iBAAiB,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE;IACtC,QAAQ,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;IAC5B,iBAAiB,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE;CACvC,CAAC,CAAC;AAEH,MAAM,IAAI,GAAG;;;;;;;;;;;;;;;;;;;EAmBX,WAAW;;;;;;;;;sDASyC,CAAC;AAEvD,SAAS,aAAa,CAAC,GAAW,EAAE,IAAY;IAC9C,OAAO,QAAQ,CAAC,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;AAC/D,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,OAAO,CAAC,IAAc;IAC1C,MAAM,EAAE,MAAM,EAAE,WAAW,EAAE,GAAG,gBAAgB,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IAChE,IAAI,SAAS,CAAC,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC;QAC9B,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAC3B,OAAO,CAAC,CAAC;IACX,CAAC;IAED,MAAM,GAAG,GAAG,cAAc,CAAC,MAAM,CAAC,CAAC;IACnC,MAAM,IAAI,GAAG,iBAAiB,CAAC,QAAQ,CAAC,MAAM,EAAE,eAAe,CAAC,IAAI,MAAM,CAAC,CAAC;IAC5E,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,MAAM,IAAI,UAAU,CAAC,uCAAuC,MAAM,CAAC,QAAQ,CAAC,MAAM,EAAE,eAAe,CAAC,CAAC,EAAE,EAAE;YACvG,IAAI,EAAE,yCAAyC;YAC/C,QAAQ,EAAE,CAAC;SACZ,CAAC,CAAC;IACL,CAAC;IACD,MAAM,MAAM,GAAG,IAAI,GAAG,CACpB,CAAC,QAAQ,CAAC,MAAM,EAAE,QAAQ,CAAC,IAAI,EAAE,CAAC;SAC/B,KAAK,CAAC,GAAG,CAAC;SACV,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;SAC1B,MAAM,CAAC,OAAO,CAAC,CACnB,CAAC;IAEF,IAAI,KAAe,CAAC;IACpB,IAAI,WAAW,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC3B,KAAK,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,aAAa,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC,CAAC;QAChE,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC,EAAE,CAAC;gBACrC,MAAM,IAAI,UAAU,CAAC,mBAAmB,IAAI,EAAE,EAAE,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC,CAAC;YACnE,CAAC;QACH,CAAC;IACH,CAAC;SAAM,CAAC;QACN,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,MAAM,EAAE,GAAG,EAAE,EAAE,EAAE,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC,CAAC;QACpE,KAAK,GAAG,IAAI,CAAC,YAAY,CAAC,MAAM,CAC9B,CAAC,IAAI,EAAE,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,IAAI,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC,CACxF,CAAC;IACJ,CAAC;IACD,KAAK,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC;IAE5B,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACvB,GAAG,CAAC,IAAI,CAAC,0BAA0B,CAAC,CAAC;QACrC,MAAM,KAAK,GAAG,eAAe,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QACrC,IAAI,GAAG,CAAC,KAAK,CAAC,MAAM,KAAK,OAAO;YAAE,WAAW,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;aAC7E,IAAI,GAAG,CAAC,KAAK,CAAC,IAAI;YAAE,WAAW,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;;YACzF,WAAW,CAAC,UAAU,CAAC,KAAK,CAAC,EAAE,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QACtD,OAAO,CAAC,CAAC;IACX,CAAC;IAED,MAAM,OAAO,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CACjC,UAAU,CAAC,IAAI,EAAE,YAAY,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,EAAE;QAC1D,YAAY,EAAE,CAAC,SAAS,CAAC,MAAM,EAAE,iBAAiB,CAAC;KACpD,CAAC,CACH,CAAC;IACF,MAAM,MAAM,GAAG,eAAe,CAAC,KAAK,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACtD,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;IAChF,MAAM,OAAO,GAAiC,EAAE,IAAI,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,GAAG,EAAE,CAAC,EAAE,CAAC;IAC7E,KAAK,MAAM,OAAO,IAAI,QAAQ;QAAE,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;IAE/D,MAAM,YAAY,GAAG,QAAQ,CAAC,MAAM,EAAE,UAAU,CAAC,IAAI,qBAAqB,CAAC;IAC3E,MAAM,cAAc,GAAG,SAAS,CAAC,MAAM,EAAE,iBAAiB,CAAC,CAAC;IAC5D,IAAI,aAAa,GAAG,QAAQ,CAAC;IAC7B,IAAI,kBAAkB,GAAG,CAAC,CAAC;IAC3B,IAAI,YAA6E,CAAC;IAElF,IAAI,cAAc,EAAE,CAAC;QACnB,MAAM,QAAQ,GAAG,oBAAoB,CAAC,GAAG,CAAC,GAAG,EAAE,YAAY,CAAC,CAAC;QAC7D,MAAM,IAAI,GAAG,oBAAoB,CAAC,GAAG,CAAC,GAAG,EAAE,YAAY,EAAE;YACvD,OAAO,EAAE,gBAAgB;YACzB,IAAI,EAAE,QAAQ,CAAC,GAAG,CAAC,eAAe,CAAC;YACnC,KAAK,EAAE,QAAQ,CAAC,QAAQ,CAAC,KAAK;SAC/B,CAAC,CAAC;QACH,YAAY,GAAG,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,QAAQ,CAAC,MAAM,EAAE,CAAC;QACjE,GAAG,CAAC,OAAO,CAAC,sBAAsB,IAAI,KAAK,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;IAClF,CAAC;SAAM,IAAI,QAAQ,CAAC,MAAM,EAAE,UAAU,CAAC,EAAE,CAAC;QACxC,MAAM,MAAM,GAAG,oBAAoB,CAAC,GAAG,CAAC,GAAG,EAAE,YAAY,CAAC,CAAC;QAC3D,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC;YACnB,MAAM,IAAI,UAAU,CAAC,uBAAuB,YAAY,EAAE,EAAE;gBAC1D,IAAI,EAAE,uCAAuC;gBAC7C,QAAQ,EAAE,CAAC;aACZ,CAAC,CAAC;QACL,CAAC;QACD,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;QAC5C,aAAa,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,eAAe,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;QACnF,kBAAkB,GAAG,QAAQ,CAAC,MAAM,GAAG,aAAa,CAAC,MAAM,CAAC;IAC9D,CAAC;IAED,MAAM,YAAY,GAAiC,EAAE,IAAI,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,GAAG,EAAE,CAAC,EAAE,CAAC;IAClF,KAAK,MAAM,OAAO,IAAI,aAAa;QAAE,YAAY,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;IACzE,MAAM,WAAW,GAAG;QAClB,GAAG,MAAM;QACT,QAAQ,EAAE,aAAa;QACvB,OAAO,EAAE,YAAY;QACrB,kBAAkB;QAClB,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACpD,CAAC;IAEF,MAAM,MAAM,GAAG,CAAC,cAAc,IAAI,aAAa,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,eAAe,CAAC,OAAO,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC,CAAC;IAC3G,MAAM,IAAI,GACR,GAAG,CAAC,KAAK,CAAC,MAAM,KAAK,OAAO;QAC1B,CAAC,CAAC,SAAS,CAAC,WAAW,CAAC;QACxB,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI;YACd,CAAC,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,WAAW,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI;YAC7C,CAAC,CAAC,UAAU,CAAC,WAAW,CAAC,CAAC;IAChC,MAAM,KAAK,GAAG,WAAW,CAAC,IAAI,EAAE,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAClD,IAAI,KAAK;QAAE,GAAG,CAAC,OAAO,CAAC,mBAAmB,KAAK,EAAE,CAAC,CAAC;IAEnD,IAAI,GAAG,CAAC,KAAK,CAAC,MAAM,KAAK,OAAO,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;QACpD,IAAI,WAAW,CAAC,UAAU,GAAG,CAAC;YAAE,GAAG,CAAC,MAAM,CAAC,sBAAsB,MAAM,CAAC,WAAW,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;QACpG,IAAI,MAAM;YAAE,GAAG,CAAC,KAAK,CAAC,uBAAuB,IAAI,UAAU,CAAC,CAAC;IAC/D,CAAC;IAED,OAAO,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AACxB,CAAC"}

package/dist/commands/scan.js

@@ -4,6 +4,8 @@ import { log } from "../core/log.js";
 import { COMMON_HELP, parseCommandArgs, resolveContext, withCommon } from "../core/options.js";
 import { asBoolean } from "../core/parse.js";
 import { formatFindings, severityIcon } from "../core/secrets.js";
+import { buildSarif, secretFindingsToSarifResults } from "../core/sarif.js";
+import { scanTree } from "../core/tree-scan.js";
 const OPTIONS = withCommon({
     staged: { type: "boolean" },
     unstaged: { type: "boolean" },
@@ -11,12 +13,13 @@ const OPTIONS = withCommon({
     diff: { type: "string" },
     stdin: { type: "boolean" },
     "include-untracked": { type: "boolean" },
+    all: { type: "boolean" },
     "no-fail": { type: "boolean" },
 });
 const HELP = `Использование:
   oc-pilot scan [пути...] [опции]
 
-Офлайн-поиск секретов в добавленных строках diff. Модель не вызывается.
+Офлайн-поиск секретов. Модель не вызывается.
 
 Опции:
       --staged              только staged-изменения
@@ -25,7 +28,9 @@ const HELP = `Использование:
       --diff <file|->       готовый diff из файла или stdin
       --stdin               читать diff из stdin
       --include-untracked   включить новые файлы
+      --all                 просканировать весь репозиторий, а не diff
       --no-fail             всегда exit 0
+      --format sarif        SARIF 2.1.0 для GitHub Code Scanning
 ${COMMON_HELP}
 
 Коды возврата:
@@ -36,6 +41,8 @@ ${COMMON_HELP}
 Примеры:
   oc-pilot scan
   oc-pilot scan --staged --strict
+  oc-pilot scan --all --json
+  oc-pilot scan --staged --format sarif -o oc-pilot.sarif
   git diff main...HEAD | oc-pilot scan --stdin --json
 `;
 export async function runScan(argv) {
@@ -45,19 +52,45 @@ export async function runScan(argv) {
         return 0;
     }
     const ctx = resolveContext(values);
-    const data = await loadDiff(values, ctx, positionals);
-    if (!data.diff.trim()) {
-        log.info("Изменений нет — сканировать нечего.");
-        return 0;
+    const scanAll = asBoolean(values, "all");
+    let findings;
+    let source;
+    let changedFiles;
+    let stats;
+    let filesScanned;
+    if (scanAll) {
+        const tree = scanTree(ctx.cwd);
+        findings = tree.findings;
+        source = "весь репозиторий";
+        changedFiles = tree.files;
+        filesScanned = tree.files;
+        log.detail(`Проверено файлов: ${tree.files}, пропущено: ${tree.skipped}.`);
+    }
+    else {
+        const data = await loadDiff(values, ctx, positionals);
+        if (!data.diff.trim()) {
+            log.info("Изменений нет — сканировать нечего.");
+            return 0;
+        }
+        findings = data.findings;
+        source = data.source;
+        changedFiles = data.changedFiles.length;
+        stats = data.stats;
+    }
+    if (ctx.flags.format === "sarif") {
+        const sarif = buildSarif(secretFindingsToSarifResults(findings));
+        const path = writeOutput(JSON.stringify(sarif, null, 2), ctx.flags.output);
+        if (path)
+            log.success(`SARIF записан: ${path}`);
     }
-    const findings = data.findings;
-    if (ctx.flags.json) {
+    else if (ctx.flags.json) {
         const payload = {
             findings,
             meta: {
-                source: data.source,
-                filesChanged: data.changedFiles.length,
-                stats: data.stats,
+                source,
+                filesChanged: changedFiles,
+                filesScanned,
+                stats,
                 critical: findings.filter((finding) => finding.severity === "critical").length,
                 warnings: findings.filter((finding) => finding.severity === "warning").length,
             },
@@ -75,8 +108,10 @@ export async function runScan(argv) {
     }
     else {
         const lines = [
-            `Сканирование: ${data.source}`,
-            `Файлов в diff: ${data.changedFiles.length}, найдено: ${findings.length}`,
+            `Сканирование: ${source}`,
+            filesScanned === undefined
+                ? `Файлов в diff: ${changedFiles}, найдено: ${findings.length}`
+                : `Файлов проверено: ${filesScanned}, найдено: ${findings.length}`,
             "",
             ...formatFindings(findings),
             "",

package/dist/commands/scan.js.map

@@ -1 +1 @@
-{"version":3,"file":"scan.js","sourceRoot":"","sources":["../../src/commands/scan.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,wBAAwB,CAAC;AAClD,OAAO,EAAE,WAAW,EAAE,MAAM,eAAe,CAAC;AAC5C,OAAO,EAAE,GAAG,EAAE,MAAM,gBAAgB,CAAC;AACrC,OAAO,EAAE,WAAW,EAAE,gBAAgB,EAAE,cAAc,EAAE,UAAU,EAAmB,MAAM,oBAAoB,CAAC;AAChH,OAAO,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAC7C,OAAO,EAAE,cAAc,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAElE,MAAM,OAAO,GAAe,UAAU,CAAC;IACrC,MAAM,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE;IAC3B,QAAQ,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE;IAC7B,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;IACxB,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;IACxB,KAAK,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE;IAC1B,mBAAmB,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE;IACxC,SAAS,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE;CAC/B,CAAC,CAAC;AAEH,MAAM,IAAI,GAAG;;;;;;;;;;;;;EAaX,WAAW;;;;;;;;;;;CAWZ,CAAC;AAEF,MAAM,CAAC,KAAK,UAAU,OAAO,CAAC,IAAc;IAC1C,MAAM,EAAE,MAAM,EAAE,WAAW,EAAE,GAAG,gBAAgB,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IAChE,IAAI,SAAS,CAAC,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC;QAC9B,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAC3B,OAAO,CAAC,CAAC;IACX,CAAC;IAED,MAAM,GAAG,GAAG,cAAc,CAAC,MAAM,CAAC,CAAC;IACnC,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,MAAM,EAAE,GAAG,EAAE,WAAW,CAAC,CAAC;IAEtD,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,CAAC;QACtB,GAAG,CAAC,IAAI,CAAC,qCAAqC,CAAC,CAAC;QAChD,OAAO,CAAC,CAAC;IACX,CAAC;IAED,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC;IAC/B,IAAI,GAAG,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;QACnB,MAAM,OAAO,GAAG;YACd,QAAQ;YACR,IAAI,EAAE;gBACJ,MAAM,EAAE,IAAI,CAAC,MAAM;gBACnB,YAAY,EAAE,IAAI,CAAC,YAAY,CAAC,MAAM;gBACtC,KAAK,EAAE,IAAI,CAAC,KAAK;gBACjB,QAAQ,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,QAAQ,KAAK,UAAU,CAAC,CAAC,MAAM;gBAC9E,QAAQ,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,MAAM;aAC9E;SACF,CAAC;QACF,MAAM,IAAI,GAAG,WAAW,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QAC7E,IAAI,IAAI;YAAE,GAAG,CAAC,OAAO,CAAC,sBAAsB,IAAI,EAAE,CAAC,CAAC;IACtD,CAAC;SAAM,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACjC,MAAM,MAAM,GAAG,wBAAwB,CAAC;QACxC,MAAM,IAAI,GAAG,WAAW,CAAC,MAAM,EAAE,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QACnD,IAAI,IAAI;YAAE,GAAG,CAAC,OAAO,CAAC,sBAAsB,IAAI,EAAE,CAAC,CAAC;QACpD,GAAG,CAAC,OAAO,CAAC,sBAAsB,CAAC,CAAC;IACtC,CAAC;SAAM,CAAC;QACN,MAAM,KAAK,GAAG;YACZ,iBAAiB,IAAI,CAAC,MAAM,EAAE;YAC9B,kBAAkB,IAAI,CAAC,YAAY,CAAC,MAAM,cAAc,QAAQ,CAAC,MAAM,EAAE;YACzE,EAAE;YACF,GAAG,cAAc,CAAC,QAAQ,CAAC;YAC3B,EAAE;YACF,uFAAuF;SACxF,CAAC;QACF,MAAM,IAAI,GAAG,WAAW,CAAC,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QACpE,IAAI,IAAI;YAAE,GAAG,CAAC,OAAO,CAAC,sBAAsB,IAAI,EAAE,CAAC,CAAC;QACpD,KAAK,MAAM,OAAO,IAAI,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC;YAC5C,GAAG,CAAC,IAAI,CAAC,GAAG,YAAY,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,OAAO,CAAC,IAAI,IAAI,OAAO,CAAC,IAAI,MAAM,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC;QAClG,CAAC;QACD,IAAI,QAAQ,CAAC,MAAM,GAAG,EAAE;YAAE,GAAG,CAAC,MAAM,CAAC,UAAU,QAAQ,CAAC,MAAM,GAAG,EAAE,EAAE,CAAC,CAAC;IACzE,CAAC;IAED,IAAI,SAAS,CAAC,MAAM,EAAE,SAAS,CAAC;QAAE,OAAO,CAAC,CAAC;IAC3C,IAAI,QAAQ,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,QAAQ,KAAK,UAAU,CAAC;QAAE,OAAO,CAAC,CAAC;IAC1E,IAAI,GAAG,CAAC,KAAK,CAAC,MAAM,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,CAAC,CAAC;IACtD,OAAO,CAAC,CAAC;AACX,CAAC"}
+{"version":3,"file":"scan.js","sourceRoot":"","sources":["../../src/commands/scan.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,wBAAwB,CAAC;AAClD,OAAO,EAAE,WAAW,EAAE,MAAM,eAAe,CAAC;AAC5C,OAAO,EAAE,GAAG,EAAE,MAAM,gBAAgB,CAAC;AACrC,OAAO,EAAE,WAAW,EAAE,gBAAgB,EAAE,cAAc,EAAE,UAAU,EAAmB,MAAM,oBAAoB,CAAC;AAChH,OAAO,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAC7C,OAAO,EAAE,cAAc,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClE,OAAO,EAAE,UAAU,EAAE,4BAA4B,EAAE,MAAM,kBAAkB,CAAC;AAC5E,OAAO,EAAE,QAAQ,EAAE,MAAM,sBAAsB,CAAC;AAGhD,MAAM,OAAO,GAAe,UAAU,CAAC;IACrC,MAAM,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE;IAC3B,QAAQ,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE;IAC7B,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;IACxB,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;IACxB,KAAK,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE;IAC1B,mBAAmB,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE;IACxC,GAAG,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE;IACxB,SAAS,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE;CAC/B,CAAC,CAAC;AAEH,MAAM,IAAI,GAAG;;;;;;;;;;;;;;;EAeX,WAAW;;;;;;;;;;;;;CAaZ,CAAC;AAEF,MAAM,CAAC,KAAK,UAAU,OAAO,CAAC,IAAc;IAC1C,MAAM,EAAE,MAAM,EAAE,WAAW,EAAE,GAAG,gBAAgB,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IAChE,IAAI,SAAS,CAAC,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC;QAC9B,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAC3B,OAAO,CAAC,CAAC;IACX,CAAC;IAED,MAAM,GAAG,GAAG,cAAc,CAAC,MAAM,CAAC,CAAC;IACnC,MAAM,OAAO,GAAG,SAAS,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;IAEzC,IAAI,QAAyB,CAAC;IAC9B,IAAI,MAAc,CAAC;IACnB,IAAI,YAAoB,CAAC;IACzB,IAAI,KAAc,CAAC;IACnB,IAAI,YAAgC,CAAC;IAErC,IAAI,OAAO,EAAE,CAAC;QACZ,MAAM,IAAI,GAAG,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAC/B,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC;QACzB,MAAM,GAAG,kBAAkB,CAAC;QAC5B,YAAY,GAAG,IAAI,CAAC,KAAK,CAAC;QAC1B,YAAY,GAAG,IAAI,CAAC,KAAK,CAAC;QAC1B,GAAG,CAAC,MAAM,CAAC,qBAAqB,IAAI,CAAC,KAAK,gBAAgB,IAAI,CAAC,OAAO,GAAG,CAAC,CAAC;IAC7E,CAAC;SAAM,CAAC;QACN,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,MAAM,EAAE,GAAG,EAAE,WAAW,CAAC,CAAC;QACtD,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,CAAC;YACtB,GAAG,CAAC,IAAI,CAAC,qCAAqC,CAAC,CAAC;YAChD,OAAO,CAAC,CAAC;QACX,CAAC;QACD,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC;QACzB,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC;QACrB,YAAY,GAAG,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC;QACxC,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC;IACrB,CAAC;IAED,IAAI,GAAG,CAAC,KAAK,CAAC,MAAM,KAAK,OAAO,EAAE,CAAC;QACjC,MAAM,KAAK,GAAG,UAAU,CAAC,4BAA4B,CAAC,QAAQ,CAAC,CAAC,CAAC;QACjE,MAAM,IAAI,GAAG,WAAW,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QAC3E,IAAI,IAAI;YAAE,GAAG,CAAC,OAAO,CAAC,kBAAkB,IAAI,EAAE,CAAC,CAAC;IAClD,CAAC;SAAM,IAAI,GAAG,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;QAC1B,MAAM,OAAO,GAAG;YACd,QAAQ;YACR,IAAI,EAAE;gBACJ,MAAM;gBACN,YAAY,EAAE,YAAY;gBAC1B,YAAY;gBACZ,KAAK;gBACL,QAAQ,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,QAAQ,KAAK,UAAU,CAAC,CAAC,MAAM;gBAC9E,QAAQ,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,MAAM;aAC9E;SACF,CAAC;QACF,MAAM,IAAI,GAAG,WAAW,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QAC7E,IAAI,IAAI;YAAE,GAAG,CAAC,OAAO,CAAC,sBAAsB,IAAI,EAAE,CAAC,CAAC;IACtD,CAAC;SAAM,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACjC,MAAM,MAAM,GAAG,wBAAwB,CAAC;QACxC,MAAM,IAAI,GAAG,WAAW,CAAC,MAAM,EAAE,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QACnD,IAAI,IAAI;YAAE,GAAG,CAAC,OAAO,CAAC,sBAAsB,IAAI,EAAE,CAAC,CAAC;QACpD,GAAG,CAAC,OAAO,CAAC,sBAAsB,CAAC,CAAC;IACtC,CAAC;SAAM,CAAC;QACN,MAAM,KAAK,GAAG;YACZ,iBAAiB,MAAM,EAAE;YACzB,YAAY,KAAK,SAAS;gBACxB,CAAC,CAAC,kBAAkB,YAAY,cAAc,QAAQ,CAAC,MAAM,EAAE;gBAC/D,CAAC,CAAC,qBAAqB,YAAY,cAAc,QAAQ,CAAC,MAAM,EAAE;YACpE,EAAE;YACF,GAAG,cAAc,CAAC,QAAQ,CAAC;YAC3B,EAAE;YACF,uFAAuF;SACxF,CAAC;QACF,MAAM,IAAI,GAAG,WAAW,CAAC,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QACpE,IAAI,IAAI;YAAE,GAAG,CAAC,OAAO,CAAC,sBAAsB,IAAI,EAAE,CAAC,CAAC;QACpD,KAAK,MAAM,OAAO,IAAI,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC;YAC5C,GAAG,CAAC,IAAI,CAAC,GAAG,YAAY,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,OAAO,CAAC,IAAI,IAAI,OAAO,CAAC,IAAI,MAAM,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC;QAClG,CAAC;QACD,IAAI,QAAQ,CAAC,MAAM,GAAG,EAAE;YAAE,GAAG,CAAC,MAAM,CAAC,UAAU,QAAQ,CAAC,MAAM,GAAG,EAAE,EAAE,CAAC,CAAC;IACzE,CAAC;IAED,IAAI,SAAS,CAAC,MAAM,EAAE,SAAS,CAAC;QAAE,OAAO,CAAC,CAAC;IAC3C,IAAI,QAAQ,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,QAAQ,KAAK,UAAU,CAAC;QAAE,OAAO,CAAC,CAAC;IAC1E,IAAI,GAAG,CAAC,KAAK,CAAC,MAAM,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,CAAC,CAAC;IACtD,OAAO,CAAC,CAAC;AACX,CAAC"}

package/dist/commands/slop.js

@@ -0,0 +1,145 @@
+import { PilotError } from "../core/errors.js";
+import { writeOutput } from "../core/io.js";
+import { log } from "../core/log.js";
+import { COMMON_HELP, parseCommandArgs, resolveContext, withCommon } from "../core/options.js";
+import { asBoolean, asString } from "../core/parse.js";
+import { analyzeAgainst, analyzeRepository } from "../core/slop/index.js";
+import { badgeSvg, describeSlop } from "../core/slop/score.js";
+const OPTIONS = withCommon({
+    since: { type: "string" },
+    "since-days": { type: "string" },
+    limit: { type: "string" },
+    exclude: { type: "string" },
+    "no-blame": { type: "boolean" },
+    "max-index": { type: "string" },
+    "max-delta": { type: "string" },
+    badge: { type: "boolean" },
+});
+const HELP = `Использование:
+  oc-pilot slop [опции]
+
+Slop Index 0-100: насколько репозиторий зарос энтропией от быстрой генерации.
+Считается локально по git и файлам, без API-ключа и сети.
+
+Категории:
+  дубликаты        одинаковые блоки кода в разных файлах
+  мёртвый код      экспорты, которые никто не импортирует
+  churn            файлы, которые часто меняются, а тесты - нет
+  TODO             TODO/FIXME/HACK/XXX и их возраст через git blame
+
+Опции:
+      --since <ref>      сравнить с ревизией: что добавилось и что убрано
+      --since-days <n>   окно истории для churn в днях (по умолчанию 30)
+      --limit <n>        элементов на категорию в отчёте (1-50, по умолчанию 10)
+      --exclude <a,b>    исключить пути (подстрока или glob)
+      --no-blame         не вызывать git blame: быстрее, но без возраста TODO
+      --max-index <n>    код 3, если индекс больше порога (для CI)
+      --max-delta <n>    код 3, если прирост относительно --since больше порога
+      --badge            вывести SVG-бейдж вместо текста
+${COMMON_HELP}
+
+Примеры:
+  oc-pilot slop
+  oc-pilot slop --since origin/main --max-delta 10
+  oc-pilot slop --badge -o slop.svg
+  oc-pilot slop --json -o slop.json --max-index 40`;
+function intOption(values, name, fallback, min, max) {
+    const raw = asString(values, name);
+    if (raw === undefined || raw.trim() === "")
+        return fallback;
+    const parsed = Number(raw);
+    if (!Number.isFinite(parsed) || !Number.isInteger(parsed) || parsed < min || parsed > max) {
+        throw new PilotError(`Некорректное значение --${name}: ${raw}`, {
+            hint: `Ожидается целое число от ${String(min)} до ${String(max)}.`,
+            exitCode: 2,
+        });
+    }
+    return parsed;
+}
+function optionalInt(values, name) {
+    const raw = asString(values, name);
+    if (raw === undefined || raw.trim() === "")
+        return undefined;
+    const parsed = Number(raw);
+    if (!Number.isFinite(parsed)) {
+        throw new PilotError(`Некорректное значение --${name}: ${raw}`, {
+            hint: "Ожидается число.",
+            exitCode: 2,
+        });
+    }
+    return parsed;
+}
+function deltaText(delta) {
+    const sign = delta.deltaPoints > 0 ? "+" : "";
+    const lines = [
+        "",
+        `  Δ относительно ${delta.base}: ${sign}${String(delta.deltaPoints)} баллов · добавлено ${String(delta.introduced)}, убрано ${String(delta.removed)}`,
+    ];
+    for (const category of delta.categories) {
+        if (category.introduced === 0 && category.removed === 0)
+            continue;
+        lines.push(`    ${category.label}  +${String(category.introduced)} / -${String(category.removed)}`);
+    }
+    return lines.join("\n");
+}
+function render(report, ctx, limit) {
+    if (ctx.flags.json) {
+        writeOutput(JSON.stringify(report, null, 2), ctx.flags.output);
+        return;
+    }
+    const wrote = writeOutput(describeSlop(report, limit), ctx.flags.output);
+    if (wrote)
+        log.success(`Отчёт сохранён: ${wrote}`);
+}
+export async function runSlop(argv) {
+    const { values } = parseCommandArgs(argv, OPTIONS);
+    if (asBoolean(values, "help")) {
+        process.stdout.write(HELP);
+        return 0;
+    }
+    const ctx = resolveContext(values);
+    const limit = intOption(values, "limit", 10, 1, 50);
+    const sinceDays = intOption(values, "since-days", 30, 1, 3_650);
+    const exclude = (asString(values, "exclude") ?? "")
+        .split(",")
+        .map((part) => part.trim())
+        .filter(Boolean);
+    const blame = !asBoolean(values, "no-blame");
+    const since = asString(values, "since")?.trim();
+    const maxIndex = optionalInt(values, "max-index");
+    const maxDelta = optionalInt(values, "max-delta");
+    const options = { limit, sinceDays, exclude, blame };
+    if (since) {
+        const { current, delta } = analyzeAgainst(ctx.cwd, since, options);
+        if (asBoolean(values, "badge")) {
+            writeOutput(badgeSvg(current), ctx.flags.output);
+        }
+        else if (ctx.flags.json) {
+            writeOutput(JSON.stringify({ ...current, delta }, null, 2), ctx.flags.output);
+        }
+        else {
+            const text = `${describeSlop(current, limit)}\n${deltaText(delta)}\n`;
+            const wrote = writeOutput(text, ctx.flags.output);
+            if (wrote)
+                log.success(`Отчёт сохранён: ${wrote}`);
+        }
+        if (maxDelta !== undefined && delta.deltaPoints > maxDelta) {
+            log.warn(`Прирост ${String(delta.deltaPoints)} больше порога --max-delta ${String(maxDelta)}.`);
+            return 3;
+        }
+        return 0;
+    }
+    const report = analyzeRepository(ctx.cwd, options);
+    if (asBoolean(values, "badge")) {
+        writeOutput(badgeSvg(report), ctx.flags.output);
+    }
+    else {
+        render(report, ctx, limit);
+    }
+    if (maxIndex !== undefined && report.index > maxIndex) {
+        log.warn(`Индекс ${String(report.index)} больше порога --max-index ${String(maxIndex)}.`);
+        return 3;
+    }
+    return 0;
+}
+//# sourceMappingURL=slop.js.map