oc-pilot 0.5.1 → 0.88.1

package/dist/core/battle.test.js

@@ -0,0 +1,116 @@
+import assert from "node:assert/strict";
+import { mkdtempSync, rmSync } from "node:fs";
+import { tmpdir } from "node:os";
+import { join } from "node:path";
+import test from "node:test";
+import { runBattle } from "./battle.js";
+const DIFF = "diff --git a/src/app.ts b/src/app.ts\n--- a/src/app.ts\n+++ b/src/app.ts\n@@ -1 +1 @@\n-old\n+new\n";
+function fakeRunner(responses, calls = []) {
+    return (args) => {
+        calls.push(args);
+        const command = args[0] ?? "";
+        const payload = responses[command];
+        return { exitCode: payload === undefined ? 0 : 0, json: (payload ?? {}), stderr: "" };
+    };
+}
+test("runBattle passes when the patch has no high findings and tests pass", () => {
+    const dir = mkdtempSync(join(tmpdir(), "oc-pilot-battle-"));
+    try {
+        const calls = [];
+        const runner = fakeRunner({
+            fix: {
+                patch: DIFF,
+                files: ["src/app.ts"],
+                applied: false,
+                tests: { exitCode: 0, timedOut: false },
+            },
+            review: { findings: [] },
+            sast: { findings: [] },
+            authz: { findings: [] },
+            "test-guard": { findings: [] },
+        }, calls);
+        const report = runBattle(dir, { task: "fix the retry", diff: DIFF, runner });
+        assert.equal(report.status, "pass");
+        assert.equal(report.rounds.length, 1);
+        assert.equal(report.rounds[0]?.findings.length, 0);
+        assert.equal(report.rounds[0]?.tests?.passed, true);
+        assert.ok(calls.some((args) => args[0] === "review" && args.includes("--diff")));
+    }
+    finally {
+        rmSync(dir, { recursive: true, force: true });
+    }
+});
+test("runBattle fails without apply when the hacker finds a critical issue", () => {
+    const dir = mkdtempSync(join(tmpdir(), "oc-pilot-battle-"));
+    try {
+        const runner = fakeRunner({
+            fix: { patch: DIFF, files: ["src/app.ts"], applied: false, tests: null },
+            review: { findings: [{ severity: "critical", text: "command injection", location: "src/app.ts:1" }] },
+            sast: { findings: [] },
+            authz: { findings: [] },
+            "test-guard": { findings: [] },
+        });
+        const report = runBattle(dir, { task: "fix the retry", diff: DIFF, runner });
+        assert.equal(report.status, "fail");
+        assert.match(report.reason, /--apply/);
+        assert.equal(report.rounds[0]?.findings[0]?.source, "review");
+    }
+    finally {
+        rmSync(dir, { recursive: true, force: true });
+    }
+});
+test("runBattle stops when the coder proposes no patch", () => {
+    const dir = mkdtempSync(join(tmpdir(), "oc-pilot-battle-"));
+    try {
+        const runner = fakeRunner({ fix: { applied: false, error: "no patch" } });
+        const report = runBattle(dir, { task: "fix the retry", diff: DIFF, runner });
+        assert.equal(report.status, "stopped");
+        assert.equal(report.rounds.length, 1);
+        assert.match(report.reason, /no patch/);
+    }
+    finally {
+        rmSync(dir, { recursive: true, force: true });
+    }
+});
+test("runBattle retries on the working tree after an applied patch", () => {
+    const dir = mkdtempSync(join(tmpdir(), "oc-pilot-battle-"));
+    try {
+        const calls = [];
+        let reviewRound = 0;
+        const runner = (args) => {
+            calls.push(args);
+            const command = args[0];
+            if (command === "fix") {
+                return {
+                    exitCode: 0,
+                    json: { patch: DIFF, files: ["src/app.ts"], applied: true, tests: { exitCode: 0, timedOut: false } },
+                    stderr: "",
+                };
+            }
+            if (command === "review") {
+                reviewRound += 1;
+                return {
+                    exitCode: 0,
+                    json: {
+                        findings: reviewRound === 1
+                            ? [{ severity: "high", text: "missing auth", location: "src/app.ts:2" }]
+                            : [],
+                    },
+                    stderr: "",
+                };
+            }
+            return { exitCode: 0, json: { findings: [] }, stderr: "" };
+        };
+        const report = runBattle(dir, { task: "fix the retry", diff: DIFF, apply: true, rounds: 2, runner });
+        assert.equal(report.status, "pass");
+        assert.equal(report.rounds.length, 2);
+        const coderCalls = calls.filter((args) => args[0] === "fix");
+        assert.equal(coderCalls.length, 2);
+        assert.ok(coderCalls[0]?.includes("--diff"));
+        assert.ok(!coderCalls[1]?.includes("--diff"), "round 2 should use the working tree");
+    }
+    finally {
+        rmSync(dir, { recursive: true, force: true });
+    }
+});
+//# sourceMappingURL=battle.test.js.map

package/dist/core/battle.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"battle.test.js","sourceRoot":"","sources":["../../src/core/battle.test.ts"],"names":[],"mappings":"AAAA,OAAO,MAAM,MAAM,oBAAoB,CAAC;AACxC,OAAO,EAAE,WAAW,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AAC9C,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACjC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,SAAS,EAAqB,MAAM,aAAa,CAAC;AAE3D,MAAM,IAAI,GAAG,qGAAqG,CAAC;AAEnH,SAAS,UAAU,CACjB,SAAkC,EAClC,QAAoB,EAAE;IAEtB,OAAO,CAAC,IAAI,EAAE,EAAE;QACd,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACjB,MAAM,OAAO,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QAC9B,MAAM,OAAO,GAAG,SAAS,CAAC,OAAO,CAAC,CAAC;QACnC,OAAO,EAAE,QAAQ,EAAE,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,OAAO,IAAI,EAAE,CAA4B,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;IACnH,CAAC,CAAC;AACJ,CAAC;AAED,IAAI,CAAC,qEAAqE,EAAE,GAAG,EAAE;IAC/E,MAAM,GAAG,GAAG,WAAW,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,kBAAkB,CAAC,CAAC,CAAC;IAC5D,IAAI,CAAC;QACH,MAAM,KAAK,GAAe,EAAE,CAAC;QAC7B,MAAM,MAAM,GAAG,UAAU,CACvB;YACE,GAAG,EAAE;gBACH,KAAK,EAAE,IAAI;gBACX,KAAK,EAAE,CAAC,YAAY,CAAC;gBACrB,OAAO,EAAE,KAAK;gBACd,KAAK,EAAE,EAAE,QAAQ,EAAE,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE;aACxC;YACD,MAAM,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE;YACxB,IAAI,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE;YACtB,KAAK,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE;YACvB,YAAY,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE;SAC/B,EACD,KAAK,CACN,CAAC;QACF,MAAM,MAAM,GAAG,SAAS,CAAC,GAAG,EAAE,EAAE,IAAI,EAAE,eAAe,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;QAC7E,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QACpC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;QACtC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;QACnD,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC;QACpD,MAAM,CAAC,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,QAAQ,IAAI,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;IACnF,CAAC;YAAS,CAAC;QACT,MAAM,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IAChD,CAAC;AACH,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,sEAAsE,EAAE,GAAG,EAAE;IAChF,MAAM,GAAG,GAAG,WAAW,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,kBAAkB,CAAC,CAAC,CAAC;IAC5D,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,UAAU,CAAC;YACxB,GAAG,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,YAAY,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE;YACxE,MAAM,EAAE,EAAE,QAAQ,EAAE,CAAC,EAAE,QAAQ,EAAE,UAAU,EAAE,IAAI,EAAE,mBAAmB,EAAE,QAAQ,EAAE,cAAc,EAAE,CAAC,EAAE;YACrG,IAAI,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE;YACtB,KAAK,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE;YACvB,YAAY,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE;SAC/B,CAAC,CAAC;QACH,MAAM,MAAM,GAAG,SAAS,CAAC,GAAG,EAAE,EAAE,IAAI,EAAE,eAAe,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;QAC7E,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QACpC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;QACvC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC;IAChE,CAAC;YAAS,CAAC;QACT,MAAM,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IAChD,CAAC;AACH,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,kDAAkD,EAAE,GAAG,EAAE;IAC5D,MAAM,GAAG,GAAG,WAAW,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,kBAAkB,CAAC,CAAC,CAAC;IAC5D,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,UAAU,CAAC,EAAE,GAAG,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,UAAU,EAAE,EAAE,CAAC,CAAC;QAC1E,MAAM,MAAM,GAAG,SAAS,CAAC,GAAG,EAAE,EAAE,IAAI,EAAE,eAAe,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;QAC7E,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;QACvC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;QACtC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;IAC1C,CAAC;YAAS,CAAC;QACT,MAAM,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IAChD,CAAC;AACH,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,8DAA8D,EAAE,GAAG,EAAE;IACxE,MAAM,GAAG,GAAG,WAAW,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,kBAAkB,CAAC,CAAC,CAAC;IAC5D,IAAI,CAAC;QACH,MAAM,KAAK,GAAe,EAAE,CAAC;QAC7B,IAAI,WAAW,GAAG,CAAC,CAAC;QACpB,MAAM,MAAM,GAAiB,CAAC,IAAI,EAAE,EAAE;YACpC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACjB,MAAM,OAAO,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;YACxB,IAAI,OAAO,KAAK,KAAK,EAAE,CAAC;gBACtB,OAAO;oBACL,QAAQ,EAAE,CAAC;oBACX,IAAI,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,YAAY,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,QAAQ,EAAE,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE,EAAE;oBACpG,MAAM,EAAE,EAAE;iBACX,CAAC;YACJ,CAAC;YACD,IAAI,OAAO,KAAK,QAAQ,EAAE,CAAC;gBACzB,WAAW,IAAI,CAAC,CAAC;gBACjB,OAAO;oBACL,QAAQ,EAAE,CAAC;oBACX,IAAI,EAAE;wBACJ,QAAQ,EACN,WAAW,KAAK,CAAC;4BACf,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,cAAc,EAAE,QAAQ,EAAE,cAAc,EAAE,CAAC;4BACxE,CAAC,CAAC,EAAE;qBACT;oBACD,MAAM,EAAE,EAAE;iBACX,CAAC;YACJ,CAAC;YACD,OAAO,EAAE,QAAQ,EAAE,CAAC,EAAE,IAAI,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;QAC7D,CAAC,CAAC;QACF,MAAM,MAAM,GAAG,SAAS,CAAC,GAAG,EAAE,EAAE,IAAI,EAAE,eAAe,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC;QACrG,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QACpC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;QACtC,MAAM,UAAU,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,KAAK,CAAC,CAAC;QAC7D,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;QACnC,MAAM,CAAC,EAAE,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC;QAC7C,MAAM,CAAC,EAAE,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,QAAQ,CAAC,QAAQ,CAAC,EAAE,qCAAqC,CAAC,CAAC;IACvF,CAAC;YAAS,CAAC;QACT,MAAM,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IAChD,CAAC;AACH,CAAC,CAAC,CAAC"}

package/dist/core/boundaries.js

@@ -0,0 +1,200 @@
+import { existsSync, readFileSync } from "node:fs";
+import { dirname, join, normalize } from "node:path";
+import { splitDiffBlocks } from "./diff.js";
+import { PilotError } from "./errors.js";
+import { isCodeFile, isGeneratedPath, isTestFile } from "./slop/source.js";
+export const DEFAULT_BOUNDARY_CONFIG = join(".oc-pilot", "architecture.json");
+export const STARTER_BOUNDARY_CONFIG = `${JSON.stringify({
+    rules: [
+        {
+            from: "src/ui/**",
+            deny: ["src/db/**"],
+            reason: "UI не должен импортировать слой БД напрямую",
+        },
+        {
+            from: "src/routes/**",
+            deny: ["src/db/**"],
+            reason: "Маршруты должны ходить в БД через сервисы",
+        },
+    ],
+}, null, 2)}\n`;
+/** Converts a small glob subset (**, *, ?) to a regular expression. */
+export function globToRegExp(pattern) {
+    const source = pattern.replace(/\\/g, "/").replace(/^\.\//, "");
+    let out = "^";
+    for (let index = 0; index < source.length; index += 1) {
+        const char = source[index];
+        if (char === "*") {
+            if (source[index + 1] === "*") {
+                index += 1;
+                if (source[index + 1] === "/") {
+                    index += 1;
+                    out += "(?:.*/)?";
+                }
+                else {
+                    out += ".*";
+                }
+            }
+            else {
+                out += "[^/]*";
+            }
+            continue;
+        }
+        if (char === "?") {
+            out += "[^/]";
+            continue;
+        }
+        out += /[.+^${}()|[\]\\]/.test(char) ? `\\${char}` : char;
+    }
+    return new RegExp(`${out}$`);
+}
+/** Matches a repo path or a package specifier against a rule pattern. */
+export function matchesBoundary(pattern, value) {
+    const normalized = value.replace(/\\/g, "/");
+    if (!pattern.includes("/") && !pattern.includes("*") && !pattern.includes("?")) {
+        return normalized === pattern || normalized.startsWith(`${pattern}/`);
+    }
+    return globToRegExp(pattern).test(normalized);
+}
+/** Validates the architecture config and returns a typed rule list. */
+export function parseBoundaryConfig(text, path) {
+    let parsed;
+    try {
+        parsed = JSON.parse(text);
+    }
+    catch {
+        throw new PilotError(`Не удалось разобрать ${path}`, {
+            hint: "Файл архитектуры должен быть корректным JSON.",
+            exitCode: 2,
+        });
+    }
+    const rules = parsed?.rules;
+    if (!Array.isArray(rules) || rules.length === 0) {
+        throw new PilotError(`В ${path} нет правил архитектуры`, {
+            hint: 'Ожидается {"rules":[{"from":"src/ui/**","deny":["src/db/**"]}]}.',
+            exitCode: 2,
+        });
+    }
+    return {
+        rules: rules.map((rule, index) => {
+            const value = rule;
+            if (typeof value?.from !== "string" || !value.from.trim()) {
+                throw new PilotError(`Правило ${String(index + 1)} в ${path} без from`, { exitCode: 2 });
+            }
+            if (!Array.isArray(value.deny) || value.deny.some((item) => typeof item !== "string")) {
+                throw new PilotError(`Правило ${String(index + 1)} в ${path} без списка deny`, { exitCode: 2 });
+            }
+            return {
+                from: value.from,
+                deny: value.deny,
+                ...(typeof value.reason === "string" ? { reason: value.reason } : {}),
+            };
+        }),
+    };
+}
+/** Loads an explicit config or the conventional .oc-pilot/architecture.json. */
+export function loadBoundaryConfig(cwd, explicit) {
+    const path = explicit ?? DEFAULT_BOUNDARY_CONFIG;
+    const absolute = join(cwd, path);
+    if (!existsSync(absolute)) {
+        if (explicit) {
+            throw new PilotError(`Файл архитектуры не найден: ${path}`, { exitCode: 2 });
+        }
+        return undefined;
+    }
+    return parseBoundaryConfig(readFileSync(absolute, "utf8"), path);
+}
+const IMPORT_PATTERNS = [
+    /^\s*import\s+(?:type\s+)?(?:[^"']+?\s+from\s+)?["']([^"']+)["']/,
+    /^\s*export\s+(?:type\s+)?[^"']*?\s+from\s+["']([^"']+)["']/,
+    /\brequire\(\s*["']([^"']+)["']\s*\)/,
+    /\bimport\(\s*["']([^"']+)["']\s*\)/,
+];
+/** Resolves a relative or alias import to a repo-relative path. */
+export function resolveImport(file, specifier) {
+    if (specifier.startsWith("@/"))
+        return `src/${specifier.slice(2)}`;
+    if (specifier.startsWith(".")) {
+        const resolved = normalize(join(dirname(file), specifier)).replace(/\\/g, "/");
+        return resolved.replace(/^\.\//, "");
+    }
+    return specifier;
+}
+/** Extracts added imports from a unified diff, skipping tests and generated code. */
+export function addedImports(diff) {
+    const imports = [];
+    for (const block of splitDiffBlocks(diff)) {
+        if (block.path === "(diff)" || block.path === "(unknown)")
+            continue;
+        if (!isCodeFile(block.path) || isTestFile(block.path) || isGeneratedPath(block.path))
+            continue;
+        let newLine = 0;
+        for (const line of block.text.split("\n")) {
+            const hunk = /^@@ -\d+(?:,\d+)? \+(\d+)(?:,\d+)? @@/.exec(line);
+            if (hunk) {
+                newLine = Number(hunk[1]);
+                continue;
+            }
+            if (line.startsWith("+++") || line.startsWith("---"))
+                continue;
+            if (line.startsWith("+")) {
+                const text = line.slice(1);
+                if (!/\bimport\s+type\b/.test(text) && !/\bexport\s+type\b/.test(text)) {
+                    for (const pattern of IMPORT_PATTERNS) {
+                        const match = pattern.exec(text);
+                        if (match?.[1]) {
+                            imports.push({ file: block.path, line: newLine, specifier: match[1] });
+                            break;
+                        }
+                    }
+                }
+                newLine += 1;
+            }
+            else if (line.startsWith(" ") || line === "") {
+                newLine += 1;
+            }
+        }
+    }
+    return imports;
+}
+/** Reports imports that cross a denied architectural boundary. */
+export function analyzeBoundaries(diff, config) {
+    const imports = addedImports(diff);
+    const violations = [];
+    const seen = new Set();
+    for (const use of imports) {
+        const resolved = resolveImport(use.file, use.specifier);
+        for (const rule of config.rules) {
+            if (!matchesBoundary(rule.from, use.file))
+                continue;
+            if (!rule.deny.some((pattern) => matchesBoundary(pattern, resolved) || matchesBoundary(pattern, use.specifier))) {
+                continue;
+            }
+            const key = `${use.file}:${String(use.line)}:${rule.from}:${use.specifier}`;
+            if (seen.has(key))
+                continue;
+            seen.add(key);
+            violations.push({ file: use.file, line: use.line, imported: use.specifier, resolved, rule });
+        }
+    }
+    violations.sort((left, right) => left.file.localeCompare(right.file) || left.line - right.line);
+    return {
+        rules: config.rules.length,
+        violations,
+        scannedFiles: new Set(imports.map((use) => use.file)).size,
+        status: violations.length > 0 ? "fail" : "pass",
+    };
+}
+/** Russian summary capped at ten violations. */
+export function describeBoundaryViolations(violations) {
+    if (violations.length === 0)
+        return "Нарушений границ не найдено.";
+    const lines = violations.slice(0, 10).map((violation) => {
+        const reason = violation.rule.reason ? ` — ${violation.rule.reason}` : "";
+        return `- ${violation.file}:${String(violation.line)}: ${violation.imported} запрещён правилом ${violation.rule.from}${reason}`;
+    });
+    if (violations.length > 10)
+        lines.push(`…и ещё ${String(violations.length - 10)}`);
+    return lines.join("\n");
+}
+//# sourceMappingURL=boundaries.js.map

package/dist/core/boundaries.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"boundaries.js","sourceRoot":"","sources":["../../src/core/boundaries.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACnD,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AACrD,OAAO,EAAE,eAAe,EAAE,MAAM,WAAW,CAAC;AAC5C,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,UAAU,EAAE,eAAe,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AA2B3E,MAAM,CAAC,MAAM,uBAAuB,GAAG,IAAI,CAAC,WAAW,EAAE,mBAAmB,CAAC,CAAC;AAC9E,MAAM,CAAC,MAAM,uBAAuB,GAAG,GAAG,IAAI,CAAC,SAAS,CACtD;IACE,KAAK,EAAE;QACL;YACE,IAAI,EAAE,WAAW;YACjB,IAAI,EAAE,CAAC,WAAW,CAAC;YACnB,MAAM,EAAE,6CAA6C;SACtD;QACD;YACE,IAAI,EAAE,eAAe;YACrB,IAAI,EAAE,CAAC,WAAW,CAAC;YACnB,MAAM,EAAE,2CAA2C;SACpD;KACF;CACF,EACD,IAAI,EACJ,CAAC,CACF,IAAI,CAAC;AAEN,uEAAuE;AACvE,MAAM,UAAU,YAAY,CAAC,OAAe;IAC1C,MAAM,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;IAChE,IAAI,GAAG,GAAG,GAAG,CAAC;IACd,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,MAAM,CAAC,MAAM,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;QACtD,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,CAAE,CAAC;QAC5B,IAAI,IAAI,KAAK,GAAG,EAAE,CAAC;YACjB,IAAI,MAAM,CAAC,KAAK,GAAG,CAAC,CAAC,KAAK,GAAG,EAAE,CAAC;gBAC9B,KAAK,IAAI,CAAC,CAAC;gBACX,IAAI,MAAM,CAAC,KAAK,GAAG,CAAC,CAAC,KAAK,GAAG,EAAE,CAAC;oBAC9B,KAAK,IAAI,CAAC,CAAC;oBACX,GAAG,IAAI,UAAU,CAAC;gBACpB,CAAC;qBAAM,CAAC;oBACN,GAAG,IAAI,IAAI,CAAC;gBACd,CAAC;YACH,CAAC;iBAAM,CAAC;gBACN,GAAG,IAAI,OAAO,CAAC;YACjB,CAAC;YACD,SAAS;QACX,CAAC;QACD,IAAI,IAAI,KAAK,GAAG,EAAE,CAAC;YACjB,GAAG,IAAI,MAAM,CAAC;YACd,SAAS;QACX,CAAC;QACD,GAAG,IAAI,kBAAkB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;IAC5D,CAAC;IACD,OAAO,IAAI,MAAM,CAAC,GAAG,GAAG,GAAG,CAAC,CAAC;AAC/B,CAAC;AAED,yEAAyE;AACzE,MAAM,UAAU,eAAe,CAAC,OAAe,EAAE,KAAa;IAC5D,MAAM,UAAU,GAAG,KAAK,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;IAC7C,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;QAC/E,OAAO,UAAU,KAAK,OAAO,IAAI,UAAU,CAAC,UAAU,CAAC,GAAG,OAAO,GAAG,CAAC,CAAC;IACxE,CAAC;IACD,OAAO,YAAY,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;AAChD,CAAC;AAED,uEAAuE;AACvE,MAAM,UAAU,mBAAmB,CAAC,IAAY,EAAE,IAAY;IAC5D,IAAI,MAAe,CAAC;IACpB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC5B,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,UAAU,CAAC,wBAAwB,IAAI,EAAE,EAAE;YACnD,IAAI,EAAE,+CAA+C;YACrD,QAAQ,EAAE,CAAC;SACZ,CAAC,CAAC;IACL,CAAC;IACD,MAAM,KAAK,GAAI,MAAqC,EAAE,KAAK,CAAC;IAC5D,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAChD,MAAM,IAAI,UAAU,CAAC,KAAK,IAAI,yBAAyB,EAAE;YACvD,IAAI,EAAE,kEAAkE;YACxE,QAAQ,EAAE,CAAC;SACZ,CAAC,CAAC;IACL,CAAC;IACD,OAAO;QACL,KAAK,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE;YAC/B,MAAM,KAAK,GAAG,IAA4D,CAAC;YAC3E,IAAI,OAAO,KAAK,EAAE,IAAI,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,CAAC;gBAC1D,MAAM,IAAI,UAAU,CAAC,WAAW,MAAM,CAAC,KAAK,GAAG,CAAC,CAAC,MAAM,IAAI,WAAW,EAAE,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC,CAAC;YAC3F,CAAC;YACD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,IAAI,KAAK,QAAQ,CAAC,EAAE,CAAC;gBACtF,MAAM,IAAI,UAAU,CAAC,WAAW,MAAM,CAAC,KAAK,GAAG,CAAC,CAAC,MAAM,IAAI,kBAAkB,EAAE,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC,CAAC;YAClG,CAAC;YACD,OAAO;gBACL,IAAI,EAAE,KAAK,CAAC,IAAI;gBAChB,IAAI,EAAE,KAAK,CAAC,IAAgB;gBAC5B,GAAG,CAAC,OAAO,KAAK,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aACtE,CAAC;QACJ,CAAC,CAAC;KACH,CAAC;AACJ,CAAC;AAED,gFAAgF;AAChF,MAAM,UAAU,kBAAkB,CAAC,GAAW,EAAE,QAAiB;IAC/D,MAAM,IAAI,GAAG,QAAQ,IAAI,uBAAuB,CAAC;IACjD,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IACjC,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC1B,IAAI,QAAQ,EAAE,CAAC;YACb,MAAM,IAAI,UAAU,CAAC,+BAA+B,IAAI,EAAE,EAAE,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC,CAAC;QAC/E,CAAC;QACD,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,OAAO,mBAAmB,CAAC,YAAY,CAAC,QAAQ,EAAE,MAAM,CAAC,EAAE,IAAI,CAAC,CAAC;AACnE,CAAC;AAQD,MAAM,eAAe,GAAG;IACtB,iEAAiE;IACjE,4DAA4D;IAC5D,qCAAqC;IACrC,oCAAoC;CACrC,CAAC;AAEF,mEAAmE;AACnE,MAAM,UAAU,aAAa,CAAC,IAAY,EAAE,SAAiB;IAC3D,IAAI,SAAS,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,OAAO,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;IACnE,IAAI,SAAS,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QAC9B,MAAM,QAAQ,GAAG,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;QAC/E,OAAO,QAAQ,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;IACvC,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,qFAAqF;AACrF,MAAM,UAAU,YAAY,CAAC,IAAY;IACvC,MAAM,OAAO,GAAgB,EAAE,CAAC;IAChC,KAAK,MAAM,KAAK,IAAI,eAAe,CAAC,IAAI,CAAC,EAAE,CAAC;QAC1C,IAAI,KAAK,CAAC,IAAI,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,KAAK,WAAW;YAAE,SAAS;QACpE,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,eAAe,CAAC,KAAK,CAAC,IAAI,CAAC;YAAE,SAAS;QAC/F,IAAI,OAAO,GAAG,CAAC,CAAC;QAChB,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;YAC1C,MAAM,IAAI,GAAG,uCAAuC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAChE,IAAI,IAAI,EAAE,CAAC;gBACT,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;gBAC1B,SAAS;YACX,CAAC;YACD,IAAI,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC;gBAAE,SAAS;YAC/D,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;gBACzB,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;gBAC3B,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;oBACvE,KAAK,MAAM,OAAO,IAAI,eAAe,EAAE,CAAC;wBACtC,MAAM,KAAK,GAAG,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;wBACjC,IAAI,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;4BACf,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,SAAS,EAAE,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;4BACvE,MAAM;wBACR,CAAC;oBACH,CAAC;gBACH,CAAC;gBACD,OAAO,IAAI,CAAC,CAAC;YACf,CAAC;iBAAM,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,IAAI,KAAK,EAAE,EAAE,CAAC;gBAC/C,OAAO,IAAI,CAAC,CAAC;YACf,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,kEAAkE;AAClE,MAAM,UAAU,iBAAiB,CAAC,IAAY,EAAE,MAAsB;IACpE,MAAM,OAAO,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC;IACnC,MAAM,UAAU,GAAwB,EAAE,CAAC;IAC3C,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,KAAK,MAAM,GAAG,IAAI,OAAO,EAAE,CAAC;QAC1B,MAAM,QAAQ,GAAG,aAAa,CAAC,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,SAAS,CAAC,CAAC;QACxD,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;YAChC,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,CAAC,IAAI,CAAC;gBAAE,SAAS;YACpD,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,eAAe,CAAC,OAAO,EAAE,QAAQ,CAAC,IAAI,eAAe,CAAC,OAAO,EAAE,GAAG,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC;gBAChH,SAAS;YACX,CAAC;YACD,MAAM,GAAG,GAAG,GAAG,GAAG,CAAC,IAAI,IAAI,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,IAAI,IAAI,GAAG,CAAC,SAAS,EAAE,CAAC;YAC5E,IAAI,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;gBAAE,SAAS;YAC5B,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YACd,UAAU,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,QAAQ,EAAE,GAAG,CAAC,SAAS,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;QAC/F,CAAC;IACH,CAAC;IACD,UAAU,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC;IAChG,OAAO;QACL,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM;QAC1B,UAAU;QACV,YAAY,EAAE,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI;QAC1D,MAAM,EAAE,UAAU,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM;KAChD,CAAC;AACJ,CAAC;AAED,gDAAgD;AAChD,MAAM,UAAU,0BAA0B,CAAC,UAA+B;IACxE,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,8BAA8B,CAAC;IACnE,MAAM,KAAK,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,SAAS,EAAE,EAAE;QACtD,MAAM,MAAM,GAAG,SAAS,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,SAAS,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC1E,OAAO,KAAK,SAAS,CAAC,IAAI,IAAI,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,SAAS,CAAC,QAAQ,sBAAsB,SAAS,CAAC,IAAI,CAAC,IAAI,GAAG,MAAM,EAAE,CAAC;IAClI,CAAC,CAAC,CAAC;IACH,IAAI,UAAU,CAAC,MAAM,GAAG,EAAE;QAAE,KAAK,CAAC,IAAI,CAAC,UAAU,MAAM,CAAC,UAAU,CAAC,MAAM,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC;IACnF,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC"}

package/dist/core/boundaries.test.js

@@ -0,0 +1,62 @@
+import assert from "node:assert/strict";
+import test from "node:test";
+import { addedImports, analyzeBoundaries, globToRegExp, matchesBoundary, parseBoundaryConfig, resolveImport, } from "./boundaries.js";
+const DIFF = [
+    "diff --git a/src/ui/app.ts b/src/ui/app.ts",
+    "--- a/src/ui/app.ts",
+    "+++ b/src/ui/app.ts",
+    "@@ -1,1 +1,5 @@",
+    ' import { Button } from "@/components/button";',
+    '+import { db } from "../db/user";',
+    '+import type { User } from "../db/types";',
+    '+import React from "react";',
+    '+const legacy = require("../db/legacy");',
+    "",
+].join("\n");
+test("globToRegExp and matchesBoundary cover the glob subset", () => {
+    assert.ok(globToRegExp("src/ui/**").test("src/ui/app.ts"));
+    assert.ok(globToRegExp("src/**/test.ts").test("src/a/b/test.ts"));
+    assert.ok(globToRegExp("src/**/test.ts").test("src/test.ts"));
+    assert.ok(!globToRegExp("src/ui/**").test("src/lib/app.ts"));
+    assert.ok(matchesBoundary("src/ui/**", "src/ui/app.ts"));
+    assert.ok(matchesBoundary("react", "react/jsx-runtime"));
+    assert.ok(!matchesBoundary("react", "react-dom"));
+});
+test("resolveImport maps aliases and relative paths", () => {
+    assert.equal(resolveImport("src/ui/app.ts", "@/db/user"), "src/db/user");
+    assert.equal(resolveImport("src/ui/app.ts", "../db/user"), "src/db/user");
+    assert.equal(resolveImport("src/ui/app.ts", "react"), "react");
+});
+test("parseBoundaryConfig validates rules and keeps reasons", () => {
+    const config = parseBoundaryConfig(JSON.stringify({
+        rules: [{ from: "src/ui/**", deny: ["src/db/**"], reason: "UI не ходит в БД" }],
+    }), ".oc-pilot/architecture.json");
+    assert.equal(config.rules.length, 1);
+    assert.equal(config.rules[0]?.reason, "UI не ходит в БД");
+    assert.throws(() => parseBoundaryConfig("{}", "architecture.json"), /нет правил/);
+    assert.throws(() => parseBoundaryConfig(JSON.stringify({ rules: [{ from: "src/ui/**" }] }), "architecture.json"), /без списка deny/);
+});
+test("addedImports reads added imports and skips type-only imports", () => {
+    const imports = addedImports(DIFF);
+    assert.deepEqual(imports.map((use) => `${use.file}:${String(use.line)}:${use.specifier}`), ["src/ui/app.ts:2:../db/user", "src/ui/app.ts:4:react", "src/ui/app.ts:5:../db/legacy"]);
+});
+test("analyzeBoundaries reports denied imports and passes allowed ones", () => {
+    const config = parseBoundaryConfig(JSON.stringify({
+        rules: [{ from: "src/ui/**", deny: ["src/db/**"], reason: "UI не ходит в БД" }],
+    }), ".oc-pilot/architecture.json");
+    const report = analyzeBoundaries(DIFF, config);
+    assert.equal(report.status, "fail");
+    assert.equal(report.scannedFiles, 1);
+    assert.deepEqual(report.violations.map((violation) => `${violation.file}:${String(violation.line)}:${violation.resolved}`), ["src/ui/app.ts:2:src/db/user", "src/ui/app.ts:5:src/db/legacy"]);
+    const allowed = analyzeBoundaries(DIFF, parseBoundaryConfig(JSON.stringify({ rules: [{ from: "src/ui/**", deny: ["src/services/**"] }] }), "architecture.json"));
+    assert.equal(allowed.status, "pass");
+    assert.equal(allowed.violations.length, 0);
+});
+test("analyzeBoundaries matches a denied package by its raw specifier", () => {
+    const config = parseBoundaryConfig(JSON.stringify({ rules: [{ from: "src/ui/**", deny: ["react"] }] }), "architecture.json");
+    const report = analyzeBoundaries(DIFF, config);
+    assert.equal(report.violations.length, 1);
+    assert.equal(report.violations[0]?.imported, "react");
+    assert.equal(report.violations[0]?.resolved, "react");
+});
+//# sourceMappingURL=boundaries.test.js.map

package/dist/core/boundaries.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"boundaries.test.js","sourceRoot":"","sources":["../../src/core/boundaries.test.ts"],"names":[],"mappings":"AAAA,OAAO,MAAM,MAAM,oBAAoB,CAAC;AACxC,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EACL,YAAY,EACZ,iBAAiB,EACjB,YAAY,EACZ,eAAe,EACf,mBAAmB,EACnB,aAAa,GACd,MAAM,iBAAiB,CAAC;AAEzB,MAAM,IAAI,GAAG;IACX,4CAA4C;IAC5C,qBAAqB;IACrB,qBAAqB;IACrB,iBAAiB;IACjB,gDAAgD;IAChD,mCAAmC;IACnC,2CAA2C;IAC3C,6BAA6B;IAC7B,0CAA0C;IAC1C,EAAE;CACH,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAEb,IAAI,CAAC,wDAAwD,EAAE,GAAG,EAAE;IAClE,MAAM,CAAC,EAAE,CAAC,YAAY,CAAC,WAAW,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC,CAAC;IAC3D,MAAM,CAAC,EAAE,CAAC,YAAY,CAAC,gBAAgB,CAAC,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC,CAAC;IAClE,MAAM,CAAC,EAAE,CAAC,YAAY,CAAC,gBAAgB,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC;IAC9D,MAAM,CAAC,EAAE,CAAC,CAAC,YAAY,CAAC,WAAW,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC,CAAC;IAC7D,MAAM,CAAC,EAAE,CAAC,eAAe,CAAC,WAAW,EAAE,eAAe,CAAC,CAAC,CAAC;IACzD,MAAM,CAAC,EAAE,CAAC,eAAe,CAAC,OAAO,EAAE,mBAAmB,CAAC,CAAC,CAAC;IACzD,MAAM,CAAC,EAAE,CAAC,CAAC,eAAe,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC,CAAC;AACpD,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,+CAA+C,EAAE,GAAG,EAAE;IACzD,MAAM,CAAC,KAAK,CAAC,aAAa,CAAC,eAAe,EAAE,WAAW,CAAC,EAAE,aAAa,CAAC,CAAC;IACzE,MAAM,CAAC,KAAK,CAAC,aAAa,CAAC,eAAe,EAAE,YAAY,CAAC,EAAE,aAAa,CAAC,CAAC;IAC1E,MAAM,CAAC,KAAK,CAAC,aAAa,CAAC,eAAe,EAAE,OAAO,CAAC,EAAE,OAAO,CAAC,CAAC;AACjE,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,uDAAuD,EAAE,GAAG,EAAE;IACjE,MAAM,MAAM,GAAG,mBAAmB,CAChC,IAAI,CAAC,SAAS,CAAC;QACb,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC,WAAW,CAAC,EAAE,MAAM,EAAE,kBAAkB,EAAE,CAAC;KAChF,CAAC,EACF,6BAA6B,CAC9B,CAAC;IACF,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;IACrC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,kBAAkB,CAAC,CAAC;IAC1D,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,mBAAmB,CAAC,IAAI,EAAE,mBAAmB,CAAC,EAAE,YAAY,CAAC,CAAC;IAClF,MAAM,CAAC,MAAM,CACX,GAAG,EAAE,CAAC,mBAAmB,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC,EAAE,CAAC,EAAE,mBAAmB,CAAC,EAClG,iBAAiB,CAClB,CAAC;AACJ,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,8DAA8D,EAAE,GAAG,EAAE;IACxE,MAAM,OAAO,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC;IACnC,MAAM,CAAC,SAAS,CACd,OAAO,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,GAAG,CAAC,IAAI,IAAI,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC,SAAS,EAAE,CAAC,EACxE,CAAC,4BAA4B,EAAE,uBAAuB,EAAE,8BAA8B,CAAC,CACxF,CAAC;AACJ,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,kEAAkE,EAAE,GAAG,EAAE;IAC5E,MAAM,MAAM,GAAG,mBAAmB,CAChC,IAAI,CAAC,SAAS,CAAC;QACb,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC,WAAW,CAAC,EAAE,MAAM,EAAE,kBAAkB,EAAE,CAAC;KAChF,CAAC,EACF,6BAA6B,CAC9B,CAAC;IACF,MAAM,MAAM,GAAG,iBAAiB,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IAC/C,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACpC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC;IACrC,MAAM,CAAC,SAAS,CACd,MAAM,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,GAAG,SAAS,CAAC,IAAI,IAAI,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,SAAS,CAAC,QAAQ,EAAE,CAAC,EACzG,CAAC,6BAA6B,EAAE,+BAA+B,CAAC,CACjE,CAAC;IAEF,MAAM,OAAO,GAAG,iBAAiB,CAAC,IAAI,EAAE,mBAAmB,CACzD,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC,iBAAiB,CAAC,EAAE,CAAC,EAAE,CAAC,EAC7E,mBAAmB,CACpB,CAAC,CAAC;IACH,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACrC,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;AAC7C,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,iEAAiE,EAAE,GAAG,EAAE;IAC3E,MAAM,MAAM,GAAG,mBAAmB,CAChC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC,EAAE,CAAC,EACnE,mBAAmB,CACpB,CAAC;IACF,MAAM,MAAM,GAAG,iBAAiB,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IAC/C,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,UAAU,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;IAC1C,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC;IACtD,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC;AACxD,CAAC,CAAC,CAAC"}

package/dist/core/bounty.js

@@ -0,0 +1,128 @@
+import { readRepository } from "./slop/collect.js";
+import { analyzeRepository } from "./slop/index.js";
+import { scanSource } from "./sast.js";
+const SAST_WEIGHT = { high: 5, medium: 3, low: 1 };
+function candidate(map, file) {
+    const existing = map.get(file);
+    if (existing)
+        return existing;
+    const created = { file, score: 0, reasons: [] };
+    map.set(file, created);
+    return created;
+}
+function add(map, file, reason) {
+    const entry = candidate(map, file);
+    entry.score += reason.weight;
+    entry.reasons.push(reason);
+}
+/** Ranks files by the mess they carry: security findings, duplication, dead code, TODOs and churn. */
+export function buildBounty(cwd, options = {}) {
+    const limit = Math.min(20, Math.max(1, options.limit ?? 5));
+    const sinceDays = Math.min(365, Math.max(1, options.sinceDays ?? 30));
+    const slop = analyzeRepository(cwd, { sinceDays, blame: true, limit: 500 });
+    const scores = new Map();
+    for (const file of slop.duplicates) {
+        for (const side of [file.first, file.second]) {
+            add(scores, side.file, {
+                kind: "duplicate",
+                weight: 3,
+                detail: `дубликат блока (${String(file.tokens)} токенов)`,
+            });
+        }
+    }
+    for (const dead of slop.deadExports) {
+        add(scores, dead.file, {
+            kind: "dead-export",
+            weight: 2,
+            detail: `мёртвый экспорт ${dead.name}`,
+        });
+    }
+    for (const todo of slop.todos) {
+        const age = todo.ageDays ?? 0;
+        const weight = 1 + Math.min(3, Math.floor(age / 30));
+        add(scores, todo.file, {
+            kind: "todo",
+            weight,
+            detail: `TODO${age > 0 ? ` возрастом ${String(age)} дн.` : ""}: ${todo.text.slice(0, 80)}`,
+        });
+    }
+    for (const churn of slop.churn) {
+        if (churn.commits < 5)
+            continue;
+        add(scores, churn.file, {
+            kind: "churn",
+            weight: Math.min(5, Math.floor(churn.commits / 5)),
+            detail: `${String(churn.commits)} коммитов без достаточного числа тестов`,
+        });
+    }
+    let scannedFiles = 0;
+    try {
+        const repository = readRepository(cwd).files;
+        scannedFiles = repository.length;
+        for (const file of repository) {
+            for (const finding of scanSource(file.path, file.text).findings) {
+                add(scores, finding.file, {
+                    kind: "sast",
+                    weight: SAST_WEIGHT[finding.severity],
+                    detail: `${finding.severity}: ${finding.rule} в строке ${String(finding.line)}`,
+                });
+            }
+        }
+    }
+    catch {
+        // The poster still works from the slop data when sources cannot be read.
+    }
+    const candidates = [...scores.values()]
+        .filter((entry) => entry.score > 0)
+        .sort((left, right) => right.score - left.score || left.file.localeCompare(right.file))
+        .slice(0, limit);
+    const worst = candidates[0];
+    const report = {
+        file: worst?.file ?? null,
+        score: worst?.score ?? 0,
+        candidates,
+        poster: "",
+        scannedFiles,
+        sinceDays,
+    };
+    report.poster = renderPoster(report);
+    return report;
+}
+function pad(value, width) {
+    return value.length >= width ? value.slice(0, width) : value + " ".repeat(width - value.length);
+}
+export function renderPoster(report) {
+    const lines = [
+        "+--------------------------------------------------------------+",
+        "|                         W A N T E D                          |",
+        "+--------------------------------------------------------------+",
+    ];
+    if (!report.file) {
+        lines.push("|  Ни один файл не попал в розыск. Пока чисто.                 |");
+        lines.push("+--------------------------------------------------------------+");
+        return `${lines.join("\n")}\n`;
+    }
+    lines.push(`|  ${pad(report.file, 58)}|`);
+    lines.push(`|  ${pad(`Награда: ${String(report.score)} очков позора`, 58)}|`);
+    lines.push("+--------------------------------------------------------------+");
+    for (const reason of report.candidates[0].reasons.slice(0, 6)) {
+        lines.push(`|  ${pad(`- ${reason.detail}`, 58)}|`);
+    }
+    lines.push("+--------------------------------------------------------------+");
+    if (report.candidates.length > 1) {
+        const others = report.candidates
+            .slice(1, 4)
+            .map((entry) => `${entry.file} (${String(entry.score)})`)
+            .join(", ");
+        lines.push(`|  ${pad(`Сообщники: ${others}`, 58)}|`);
+        lines.push("+--------------------------------------------------------------+");
+    }
+    return `${lines.join("\n")}\n`;
+}
+export function describeBounty(report) {
+    if (!report.file) {
+        return `Розыск не требуется: ${String(report.scannedFiles)} файл(ов) проверено.`;
+    }
+    return `Худший файл: ${report.file} (${String(report.score)} очков, ${String(report.candidates[0].reasons.length)} причин).`;
+}
+//# sourceMappingURL=bounty.js.map

package/dist/core/bounty.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"bounty.js","sourceRoot":"","sources":["../../src/core/bounty.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AACnD,OAAO,EAAE,iBAAiB,EAAE,MAAM,iBAAiB,CAAC;AACpD,OAAO,EAAE,UAAU,EAAqB,MAAM,WAAW,CAAC;AA8B1D,MAAM,WAAW,GAAiC,EAAE,IAAI,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,GAAG,EAAE,CAAC,EAAE,CAAC;AAQjF,SAAS,SAAS,CAAC,GAAkC,EAAE,IAAY;IACjE,MAAM,QAAQ,GAAG,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAC/B,IAAI,QAAQ;QAAE,OAAO,QAAQ,CAAC;IAC9B,MAAM,OAAO,GAAqB,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC;IAClE,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IACvB,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,SAAS,GAAG,CAAC,GAAkC,EAAE,IAAY,EAAE,MAAoB;IACjF,MAAM,KAAK,GAAG,SAAS,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IACnC,KAAK,CAAC,KAAK,IAAI,MAAM,CAAC,MAAM,CAAC;IAC7B,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;AAC7B,CAAC;AAED,sGAAsG;AACtG,MAAM,UAAU,WAAW,CAAC,GAAW,EAAE,UAAyB,EAAE;IAClE,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,OAAO,CAAC,KAAK,IAAI,CAAC,CAAC,CAAC,CAAC;IAC5D,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,OAAO,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC,CAAC;IACtE,MAAM,IAAI,GAAG,iBAAiB,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,CAAC;IAE5E,MAAM,MAAM,GAAG,IAAI,GAAG,EAA4B,CAAC;IAEnD,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;QACnC,KAAK,MAAM,IAAI,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;YAC7C,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC,IAAI,EAAE;gBACrB,IAAI,EAAE,WAAW;gBACjB,MAAM,EAAE,CAAC;gBACT,MAAM,EAAE,mBAAmB,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,WAAW;aAC1D,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;QACpC,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC,IAAI,EAAE;YACrB,IAAI,EAAE,aAAa;YACnB,MAAM,EAAE,CAAC;YACT,MAAM,EAAE,mBAAmB,IAAI,CAAC,IAAI,EAAE;SACvC,CAAC,CAAC;IACL,CAAC;IAED,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;QAC9B,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,IAAI,CAAC,CAAC;QAC9B,MAAM,MAAM,GAAG,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG,GAAG,EAAE,CAAC,CAAC,CAAC;QACrD,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC,IAAI,EAAE;YACrB,IAAI,EAAE,MAAM;YACZ,MAAM;YACN,MAAM,EAAE,OAAO,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC,cAAc,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,KAAK,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE;SAC3F,CAAC,CAAC;IACL,CAAC;IAED,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;QAC/B,IAAI,KAAK,CAAC,OAAO,GAAG,CAAC;YAAE,SAAS;QAChC,GAAG,CAAC,MAAM,EAAE,KAAK,CAAC,IAAI,EAAE;YACtB,IAAI,EAAE,OAAO;YACb,MAAM,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,OAAO,GAAG,CAAC,CAAC,CAAC;YAClD,MAAM,EAAE,GAAG,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,yCAAyC;SAC1E,CAAC,CAAC;IACL,CAAC;IAED,IAAI,YAAY,GAAG,CAAC,CAAC;IACrB,IAAI,CAAC;QACH,MAAM,UAAU,GAAG,cAAc,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC;QAC7C,YAAY,GAAG,UAAU,CAAC,MAAM,CAAC;QACjC,KAAK,MAAM,IAAI,IAAI,UAAU,EAAE,CAAC;YAC9B,KAAK,MAAM,OAAO,IAAI,UAAU,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,CAAC;gBAChE,GAAG,CAAC,MAAM,EAAE,OAAO,CAAC,IAAI,EAAE;oBACxB,IAAI,EAAE,MAAM;oBACZ,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,QAAQ,CAAC;oBACrC,MAAM,EAAE,GAAG,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC,IAAI,aAAa,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE;iBAChF,CAAC,CAAC;YACL,CAAC;QACH,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,yEAAyE;IAC3E,CAAC;IAED,MAAM,UAAU,GAAG,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC;SACpC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC;SAClC,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;SACtF,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;IAEnB,MAAM,KAAK,GAAG,UAAU,CAAC,CAAC,CAAC,CAAC;IAC5B,MAAM,MAAM,GAAiB;QAC3B,IAAI,EAAE,KAAK,EAAE,IAAI,IAAI,IAAI;QACzB,KAAK,EAAE,KAAK,EAAE,KAAK,IAAI,CAAC;QACxB,UAAU;QACV,MAAM,EAAE,EAAE;QACV,YAAY;QACZ,SAAS;KACV,CAAC;IACF,MAAM,CAAC,MAAM,GAAG,YAAY,CAAC,MAAM,CAAC,CAAC;IACrC,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,GAAG,CAAC,KAAa,EAAE,KAAa;IACvC,OAAO,KAAK,CAAC,MAAM,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,GAAG,GAAG,CAAC,MAAM,CAAC,KAAK,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC;AAClG,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,MAAoB;IAC/C,MAAM,KAAK,GAAG;QACZ,kEAAkE;QAClE,kEAAkE;QAClE,kEAAkE;KACnE,CAAC;IACF,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;QACjB,KAAK,CAAC,IAAI,CAAC,kEAAkE,CAAC,CAAC;QAC/E,KAAK,CAAC,IAAI,CAAC,kEAAkE,CAAC,CAAC;QAC/E,OAAO,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC;IACjC,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC;IAC1C,KAAK,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,YAAY,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,eAAe,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC;IAC9E,KAAK,CAAC,IAAI,CAAC,kEAAkE,CAAC,CAAC;IAC/E,KAAK,MAAM,MAAM,IAAI,MAAM,CAAC,UAAU,CAAC,CAAC,CAAE,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC;QAC/D,KAAK,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,KAAK,MAAM,CAAC,MAAM,EAAE,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC;IACrD,CAAC;IACD,KAAK,CAAC,IAAI,CAAC,kEAAkE,CAAC,CAAC;IAC/E,IAAI,MAAM,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACjC,MAAM,MAAM,GAAG,MAAM,CAAC,UAAU;aAC7B,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC;aACX,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,GAAG,KAAK,CAAC,IAAI,KAAK,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC;aACxD,IAAI,CAAC,IAAI,CAAC,CAAC;QACd,KAAK,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,cAAc,MAAM,EAAE,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC;QACrD,KAAK,CAAC,IAAI,CAAC,kEAAkE,CAAC,CAAC;IACjF,CAAC;IACD,OAAO,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC;AACjC,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,MAAoB;IACjD,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;QACjB,OAAO,wBAAwB,MAAM,CAAC,MAAM,CAAC,YAAY,CAAC,sBAAsB,CAAC;IACnF,CAAC;IACD,OAAO,gBAAgB,MAAM,CAAC,IAAI,KAAK,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,WAAW,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,CAAE,CAAC,OAAO,CAAC,MAAM,CAAC,WAAW,CAAC;AAChI,CAAC"}

package/dist/core/bounty.test.js

@@ -0,0 +1,82 @@
+import assert from "node:assert/strict";
+import { spawnSync } from "node:child_process";
+import { mkdirSync, mkdtempSync, rmSync, writeFileSync } from "node:fs";
+import { tmpdir } from "node:os";
+import { join } from "node:path";
+import test from "node:test";
+import { buildBounty, describeBounty } from "./bounty.js";
+function git(args, cwd) {
+    const result = spawnSync("git", args, { cwd, encoding: "utf8" });
+    if (result.status !== 0) {
+        throw new Error(`git ${args.join(" ")} failed: ${result.stderr}`);
+    }
+}
+function makeRepo(files) {
+    const dir = mkdtempSync(join(tmpdir(), "oc-pilot-bounty-"));
+    git(["init", "-q"], dir);
+    git(["config", "user.email", "test@example.com"], dir);
+    git(["config", "user.name", "Test"], dir);
+    git(["config", "core.autocrlf", "false"], dir);
+    for (const [path, content] of Object.entries(files)) {
+        const full = join(dir, path);
+        mkdirSync(join(full, ".."), { recursive: true });
+        writeFileSync(full, content, "utf8");
+    }
+    git(["add", "."], dir);
+    git(["commit", "-m", "init"], dir);
+    return dir;
+}
+test("buildBounty ranks the file with a SAST finding and an old TODO", () => {
+    const dir = makeRepo({
+        "src/app.js": [
+            'const { exec } = require("child_process");',
+            "// TODO: remove the debug command",
+            "exec(req.query.cmd);",
+            "",
+        ].join("\n"),
+        "src/clean.js": "export const value = 1;\n",
+    });
+    try {
+        const report = buildBounty(dir);
+        assert.equal(report.file, "src/app.js");
+        assert.ok(report.score > 0, `score ${String(report.score)}`);
+        const kinds = report.candidates[0]?.reasons.map((reason) => reason.kind) ?? [];
+        assert.ok(kinds.includes("sast"), `kinds: ${kinds.join(",")}`);
+        assert.ok(kinds.includes("todo"), `kinds: ${kinds.join(",")}`);
+        assert.match(report.poster, /W\s*A\s*N\s*T\s*E\s*D/);
+        assert.match(report.poster, /src\/app\.js/);
+        assert.match(describeBounty(report), /Худший файл: src\/app\.js/);
+    }
+    finally {
+        rmSync(dir, { recursive: true, force: true });
+    }
+});
+test("buildBounty is deterministic for equal scores", () => {
+    const dir = makeRepo({
+        "src/b.js": "// TODO: second\nexport const b = 2;\n",
+        "src/a.js": "// TODO: first\nexport const a = 1;\n",
+    });
+    try {
+        const first = buildBounty(dir);
+        const second = buildBounty(dir);
+        assert.deepEqual(first.candidates.map((candidate) => candidate.file), second.candidates.map((candidate) => candidate.file));
+        assert.equal(first.file, "src/a.js");
+    }
+    finally {
+        rmSync(dir, { recursive: true, force: true });
+    }
+});
+test("buildBounty reports a clean repository", () => {
+    const dir = makeRepo({ "README.md": "# demo\n" });
+    try {
+        const report = buildBounty(dir);
+        assert.equal(report.file, null);
+        assert.equal(report.score, 0);
+        assert.match(report.poster, /Пока чисто/);
+        assert.match(describeBounty(report), /Розыск не требуется/);
+    }
+    finally {
+        rmSync(dir, { recursive: true, force: true });
+    }
+});
+//# sourceMappingURL=bounty.test.js.map

package/dist/core/bounty.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"bounty.test.js","sourceRoot":"","sources":["../../src/core/bounty.test.ts"],"names":[],"mappings":"AAAA,OAAO,MAAM,MAAM,oBAAoB,CAAC;AACxC,OAAO,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAC/C,OAAO,EAAE,SAAS,EAAE,WAAW,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AACxE,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACjC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,WAAW,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAE1D,SAAS,GAAG,CAAC,IAAc,EAAE,GAAW;IACtC,MAAM,MAAM,GAAG,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE,GAAG,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAC;IACjE,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACxB,MAAM,IAAI,KAAK,CAAC,OAAO,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,YAAY,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;IACpE,CAAC;AACH,CAAC;AAED,SAAS,QAAQ,CAAC,KAA6B;IAC7C,MAAM,GAAG,GAAG,WAAW,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,kBAAkB,CAAC,CAAC,CAAC;IAC5D,GAAG,CAAC,CAAC,MAAM,EAAE,IAAI,CAAC,EAAE,GAAG,CAAC,CAAC;IACzB,GAAG,CAAC,CAAC,QAAQ,EAAE,YAAY,EAAE,kBAAkB,CAAC,EAAE,GAAG,CAAC,CAAC;IACvD,GAAG,CAAC,CAAC,QAAQ,EAAE,WAAW,EAAE,MAAM,CAAC,EAAE,GAAG,CAAC,CAAC;IAC1C,GAAG,CAAC,CAAC,QAAQ,EAAE,eAAe,EAAE,OAAO,CAAC,EAAE,GAAG,CAAC,CAAC;IAC/C,KAAK,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACpD,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;QAC7B,SAAS,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACjD,aAAa,CAAC,IAAI,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;IACvC,CAAC;IACD,GAAG,CAAC,CAAC,KAAK,EAAE,GAAG,CAAC,EAAE,GAAG,CAAC,CAAC;IACvB,GAAG,CAAC,CAAC,QAAQ,EAAE,IAAI,EAAE,MAAM,CAAC,EAAE,GAAG,CAAC,CAAC;IACnC,OAAO,GAAG,CAAC;AACb,CAAC;AAED,IAAI,CAAC,gEAAgE,EAAE,GAAG,EAAE;IAC1E,MAAM,GAAG,GAAG,QAAQ,CAAC;QACnB,YAAY,EAAE;YACZ,4CAA4C;YAC5C,mCAAmC;YACnC,sBAAsB;YACtB,EAAE;SACH,CAAC,IAAI,CAAC,IAAI,CAAC;QACZ,cAAc,EAAE,2BAA2B;KAC5C,CAAC,CAAC;IACH,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC;QAChC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,EAAE,YAAY,CAAC,CAAC;QACxC,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,KAAK,GAAG,CAAC,EAAE,SAAS,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QAC7D,MAAM,KAAK,GAAG,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;QAC/E,MAAM,CAAC,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,UAAU,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAC/D,MAAM,CAAC,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,UAAU,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAC/D,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,uBAAuB,CAAC,CAAC;QACrD,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC;QAC5C,MAAM,CAAC,KAAK,CAAC,cAAc,CAAC,MAAM,CAAC,EAAE,2BAA2B,CAAC,CAAC;IACpE,CAAC;YAAS,CAAC;QACT,MAAM,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IAChD,CAAC;AACH,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,+CAA+C,EAAE,GAAG,EAAE;IACzD,MAAM,GAAG,GAAG,QAAQ,CAAC;QACnB,UAAU,EAAE,wCAAwC;QACpD,UAAU,EAAE,uCAAuC;KACpD,CAAC,CAAC;IACH,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC;QAC/B,MAAM,MAAM,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC;QAChC,MAAM,CAAC,SAAS,CACd,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,EACnD,MAAM,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,CACrD,CAAC;QACF,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;IACvC,CAAC;YAAS,CAAC;QACT,MAAM,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IAChD,CAAC;AACH,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,wCAAwC,EAAE,GAAG,EAAE;IAClD,MAAM,GAAG,GAAG,QAAQ,CAAC,EAAE,WAAW,EAAE,UAAU,EAAE,CAAC,CAAC;IAClD,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC;QAChC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QAChC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;QAC9B,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC;QAC1C,MAAM,CAAC,KAAK,CAAC,cAAc,CAAC,MAAM,CAAC,EAAE,qBAAqB,CAAC,CAAC;IAC9D,CAAC;YAAS,CAAC;QACT,MAAM,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IAChD,CAAC;AACH,CAAC,CAAC,CAAC"}