peaks-loop 4.0.54 → 4.1.1

package/dist/services/lint/detect-ocr-18.js

@@ -30,7 +30,11 @@ function probeNpx() {
             ? { available: false, reason: 'not-launchable', detail: error.message }
             : { available: false, reason: 'not-on-path', detail: error.message };
     }
-    return { available: false, reason: 'probe-failed', detail: `npx --version exited ${probe.status ?? 'null'}` };
+    return {
+        available: false,
+        reason: 'probe-failed',
+        detail: `npx --version exited ${probe.status ?? 'null'}`
+    };
 }
 /** The scoped directory and exact version a `name@version` spec names. */
 function splitSpec(spec) {
@@ -110,8 +114,12 @@ export function detectOcr18(options = {}) {
                 state: 'detection-failed',
                 npxAvailable: false,
                 package: OCR_18_PACKAGE,
-                warnings: [`${NPX_PROBE_UNRESOLVED_CODE}: could not launch npx to probe (${probe.detail}).`],
-                nextActions: ['Ensure Node.js >= 20 with its bundled npm is installed; `npx --version` must succeed.']
+                warnings: [
+                    `${NPX_PROBE_UNRESOLVED_CODE}: could not launch npx to probe (${probe.detail}).`
+                ],
+                nextActions: [
+                    'Ensure Node.js >= 20 with its bundled npm is installed; `npx --version` must succeed.'
+                ]
             };
         }
         return {

package/dist/services/lint/eslint-runner-support.d.ts

@@ -0,0 +1,22 @@
+import type { BaselineViolation, EslintFinding, EslintRunOptions, EslintRunResult, EslintState, EslintSummary, RedLineEntry } from './eslint-runner-types.js';
+export declare function severityFor(value: unknown): 'error' | 'warn' | 'info';
+export declare function summarize(findings: readonly EslintFinding[]): EslintSummary;
+type DiffRange = {
+    readonly file: string;
+    readonly lines: readonly number[];
+};
+/**
+ * Read `git diff HEAD --unified=0` and parse every `+` line as a
+ * touched line number. Falls back to [] on any parse error so the
+ * caller treats all findings as out-of-diff (no silent zero-result).
+ */
+export declare function resolveProjectRoot(cwd: string): string;
+export declare function inDiff(filePath: string, line: number, ranges: readonly DiffRange[]): boolean;
+export declare function loadBaseline(projectRoot: string, baselineFile: string): readonly BaselineViolation[];
+export declare function matchBaseline(finding: EslintFinding, baseline: readonly BaselineViolation[], projectRoot: string): boolean;
+export declare function aggregateRedLine(baseline: readonly BaselineViolation[]): readonly RedLineEntry[];
+export declare const EMPTY_DIFF_RANGE: readonly DiffRange[];
+export declare const EMPTY_REDLINE: readonly RedLineEntry[];
+export declare function emptyResult(state: EslintState, start: number, rawOutput: string): EslintRunResult;
+export declare function buildEslintArgs(options: EslintRunOptions): string[];
+export type { DiffRange };

package/dist/services/lint/eslint-runner-support.js

@@ -0,0 +1,185 @@
+/**
+ * ESLint runner pipeline helpers — moved VERBATIM out of `eslint-runner.ts`
+ * for the 300-raw-line cap (slice `b1-filesplit-campaign`, wave 3C): the
+ * severity map, diff-range gate, baseline waiver / red-line aggregation,
+ * project-root walk, empty-result factory and the argv builder.
+ * `eslint-runner.ts` re-exports the public names, so existing import paths
+ * keep working.
+ */
+import { existsSync, readFileSync } from 'node:fs';
+import { dirname, join } from 'node:path';
+import { isArray } from '../../shared/array-guards.js';
+import { repoRelativeKey } from '../../shared/path-utils.js';
+const ESLINT_SEVERITY_ERROR = 2;
+const ESLINT_SEVERITY_WARN = 1;
+const PROJECT_ROOT_WALK_MAX_DEPTH = 8;
+const RED_LINE_TOP_FILES = 5;
+export function severityFor(value) {
+    if (value === ESLINT_SEVERITY_ERROR)
+        return 'error';
+    if (value === ESLINT_SEVERITY_WARN)
+        return 'warn';
+    return 'info';
+}
+export function summarize(findings) {
+    let error = 0;
+    let warn = 0;
+    let info = 0;
+    for (const f of findings) {
+        if (f.severity === 'error')
+            error++;
+        else if (f.severity === 'warn')
+            warn++;
+        else
+            info++;
+    }
+    return { error, warn, info };
+}
+/**
+ * Read `git diff HEAD --unified=0` and parse every `+` line as a
+ * touched line number. Falls back to [] on any parse error so the
+ * caller treats all findings as out-of-diff (no silent zero-result).
+ */
+export function resolveProjectRoot(cwd) {
+    // ESLint 8 auto-discovers `.eslintrc.*` from cwd upward. When the
+    // CLI is launched via `node bin/peaks.js`, cwd is the bin/ dir and
+    // ESLint fails to find the config. Walk up until we see
+    // `config/eslint/.peaks-rules.cjs` and use that as the project root.
+    const marker = join('config', 'eslint', '.peaks-rules.cjs');
+    let current = cwd;
+    for (let depth = 0; depth < PROJECT_ROOT_WALK_MAX_DEPTH; depth += 1) {
+        if (existsSync(join(current, marker)))
+            return current;
+        const parent = dirname(current);
+        if (parent === current)
+            break;
+        current = parent;
+    }
+    return cwd;
+}
+export function inDiff(filePath, line, ranges) {
+    if (ranges.length === 0)
+        return false;
+    for (const r of ranges) {
+        if (r.file !== filePath)
+            continue;
+        for (const ln of r.lines) {
+            if (Math.abs(ln - line) <= 0)
+                return true;
+        }
+    }
+    return false;
+}
+export function loadBaseline(projectRoot, baselineFile) {
+    const fullPath = join(projectRoot, baselineFile);
+    let raw;
+    try {
+        raw = readFileSync(fullPath, 'utf8');
+    }
+    catch {
+        return [];
+    }
+    let parsed;
+    try {
+        parsed = JSON.parse(raw);
+    }
+    catch {
+        return [];
+    }
+    // `isArray` (not `Array.isArray`, typed `arg is any[]`), so `parsed.violations`
+    // keeps the `ReadonlyArray<{ruleId?: unknown; …}>` shape declared by
+    // `BaselineFile` and `v` below is a typed read. The `!== undefined` half is
+    // required because a `boolean` helper cannot narrow. See
+    // `src/shared/array-guards.ts`.
+    const violations = parsed.violations !== undefined && isArray(parsed.violations) ? parsed.violations : [];
+    const out = [];
+    for (const v of violations) {
+        if (typeof v.ruleId !== 'string' || typeof v.file !== 'string' || typeof v.line !== 'number')
+            continue;
+        out.push({
+            ruleId: v.ruleId,
+            // Reduce to the comparison key on load, so `matchBaseline` and the
+            // red-line aggregation both read one canonical form.
+            file: repoRelativeKey(v.file, projectRoot),
+            line: v.line,
+            severity: severityFor(v.severity),
+            message: typeof v.message === 'string' ? v.message : ''
+        });
+    }
+    return out;
+}
+export function matchBaseline(finding, baseline, projectRoot) {
+    // The finding side is reduced by the SAME key the baseline was loaded
+    // through — this is the half that made the waiver inert across machines.
+    const findingKey = repoRelativeKey(finding.filePath, projectRoot);
+    for (const v of baseline) {
+        if (v.ruleId !== finding.ruleId)
+            continue;
+        if (v.file !== findingKey)
+            continue;
+        if (v.line !== finding.line)
+            continue;
+        return true;
+    }
+    return false;
+}
+export function aggregateRedLine(baseline) {
+    const byRule = new Map();
+    for (const v of baseline) {
+        const existing = byRule.get(v.ruleId);
+        if (existing === undefined) {
+            const fileCounts = new Map();
+            fileCounts.set(v.file, 1);
+            byRule.set(v.ruleId, { count: 1, fileCounts });
+        }
+        else {
+            existing.count += 1;
+            existing.fileCounts.set(v.file, (existing.fileCounts.get(v.file) ?? 0) + 1);
+        }
+    }
+    const out = [];
+    for (const [ruleId, agg] of byRule.entries()) {
+        const topFiles = [...agg.fileCounts.entries()]
+            .map(([file, count]) => ({ file, count }))
+            .sort((a, b) => b.count - a.count)
+            .slice(0, RED_LINE_TOP_FILES);
+        out.push({ ruleId, count: agg.count, topFiles });
+    }
+    out.sort((a, b) => b.count - a.count);
+    return out;
+}
+export const EMPTY_DIFF_RANGE = [];
+export const EMPTY_REDLINE = [];
+export function emptyResult(state, start, rawOutput) {
+    return {
+        state,
+        findings: [],
+        summary: { error: 0, warn: 0, info: 0 },
+        durationMs: Date.now() - start,
+        rawOutput,
+        baselineWaived: [],
+        redLine: EMPTY_REDLINE
+    };
+}
+export function buildEslintArgs(options) {
+    if (options.fix === true || options.write === true) {
+        throw Object.assign(new Error('peaks code lint is read-only; --fix and --write are forbidden'), {
+            code: 'LINT_FIX_FORBIDDEN'
+        });
+    }
+    // The runner now uses the locally-installed eslint binary
+    // (`./node_modules/eslint/bin/eslint.js`) instead of the npx
+    // --package wrapper, which is broken on Windows (npm 10.9.4 chdirs
+    // the child to its own cache bin, breaking config auto-discovery).
+    // The pin constants are kept for detect-eslint's npm-registry
+    // probe + for the npx-resolver fallback path.
+    const args = ['--format', 'json'];
+    // Always pass the legacy .peaks-rules.cjs path; ESLint 8
+    // auto-discovers only `.eslintrc.*` files and our config lives at
+    // `config/eslint/.peaks-rules.cjs`. Callers may override via
+    // `options.configPath`.
+    const effectiveConfigPath = options.configPath ?? join('config', 'eslint', '.peaks-rules.cjs');
+    args.push('--config', effectiveConfigPath);
+    args.push(...(options.scope !== undefined && options.scope.length > 0 ? [options.scope] : ['.']));
+    return args;
+}

package/dist/services/lint/eslint-runner-types.d.ts

@@ -0,0 +1,69 @@
+/**
+ * ESLint runner public type surface + package pins — moved VERBATIM out of
+ * `eslint-runner.ts` for the 300-raw-line cap (slice `b1-filesplit-campaign`,
+ * wave 3C). `eslint-runner.ts` re-exports every name, so existing import
+ * paths keep working.
+ */
+export declare const ESLINT_PACKAGE_PINS: {
+    readonly eslint: "8.57.1";
+    readonly typescriptEslintParser: "8.66.0";
+    readonly typescriptEslintPlugin: "8.66.0";
+};
+export type RedLineMode = 'none' | 'baseline-aware';
+export type EslintState = 'ok' | 'eslint-missing' | 'npx-failed' | 'execution-failed' | 'baseline-missing';
+export type EslintFinding = {
+    readonly filePath: string;
+    readonly line: number;
+    readonly column: number;
+    readonly ruleId: string | null;
+    readonly severity: 'error' | 'warn' | 'info';
+    readonly message: string;
+};
+export type EslintSummary = {
+    readonly error: number;
+    readonly warn: number;
+    readonly info: number;
+};
+export type BaselineViolation = {
+    readonly ruleId: string;
+    readonly file: string;
+    readonly line: number;
+    readonly severity: 'error' | 'warn' | 'info';
+    readonly message: string;
+};
+export type RedLineEntry = {
+    readonly ruleId: string;
+    readonly count: number;
+    readonly topFiles: ReadonlyArray<{
+        readonly file: string;
+        readonly count: number;
+    }>;
+};
+export type EslintRunResult = {
+    readonly state: EslintState;
+    readonly findings: readonly EslintFinding[];
+    readonly summary: EslintSummary;
+    readonly durationMs: number;
+    readonly rawOutput: string;
+    readonly baselineWaived: readonly EslintFinding[];
+    readonly redLine: readonly RedLineEntry[];
+};
+export type EslintRunOptions = {
+    readonly cwd: string;
+    readonly scope?: string;
+    readonly configPath?: string;
+    readonly fix?: boolean;
+    readonly write?: boolean;
+    readonly timeoutMs?: number;
+    readonly diffOnly?: boolean;
+    readonly baselineFile?: string;
+    readonly redLineMode?: RedLineMode;
+};
+export type EslintMessage = {
+    filePath?: unknown;
+    line?: unknown;
+    column?: unknown;
+    ruleId?: unknown;
+    severity?: unknown;
+    message?: unknown;
+};

package/dist/services/lint/eslint-runner-types.js

@@ -0,0 +1,11 @@
+/**
+ * ESLint runner public type surface + package pins — moved VERBATIM out of
+ * `eslint-runner.ts` for the 300-raw-line cap (slice `b1-filesplit-campaign`,
+ * wave 3C). `eslint-runner.ts` re-exports every name, so existing import
+ * paths keep working.
+ */
+export const ESLINT_PACKAGE_PINS = {
+    eslint: '8.57.1',
+    typescriptEslintParser: '8.66.0',
+    typescriptEslintPlugin: '8.66.0'
+};

package/dist/services/lint/eslint-runner.d.ts

@@ -1,57 +1,5 @@
-export declare const ESLINT_PACKAGE_PINS: {
-    readonly eslint: "8.57.1";
-    readonly typescriptEslintParser: "8.66.0";
-    readonly typescriptEslintPlugin: "8.66.0";
-};
-export type RedLineMode = 'none' | 'baseline-aware';
-export type EslintState = 'ok' | 'eslint-missing' | 'npx-failed' | 'execution-failed' | 'baseline-missing';
-export type EslintFinding = {
-    readonly filePath: string;
-    readonly line: number;
-    readonly column: number;
-    readonly ruleId: string | null;
-    readonly severity: 'error' | 'warn' | 'info';
-    readonly message: string;
-};
-export type EslintSummary = {
-    readonly error: number;
-    readonly warn: number;
-    readonly info: number;
-};
-export type BaselineViolation = {
-    readonly ruleId: string;
-    readonly file: string;
-    readonly line: number;
-    readonly severity: 'error' | 'warn' | 'info';
-    readonly message: string;
-};
-export type RedLineEntry = {
-    readonly ruleId: string;
-    readonly count: number;
-    readonly topFiles: ReadonlyArray<{
-        readonly file: string;
-        readonly count: number;
-    }>;
-};
-export type EslintRunResult = {
-    readonly state: EslintState;
-    readonly findings: readonly EslintFinding[];
-    readonly summary: EslintSummary;
-    readonly durationMs: number;
-    readonly rawOutput: string;
-    readonly baselineWaived: readonly EslintFinding[];
-    readonly redLine: readonly RedLineEntry[];
-};
-export type EslintRunOptions = {
-    readonly cwd: string;
-    readonly scope?: string;
-    readonly configPath?: string;
-    readonly fix?: boolean;
-    readonly write?: boolean;
-    readonly timeoutMs?: number;
-    readonly diffOnly?: boolean;
-    readonly baselineFile?: string;
-    readonly redLineMode?: RedLineMode;
-};
-export declare function buildEslintArgs(options: EslintRunOptions): string[];
+import { type EslintRunOptions, type EslintRunResult } from './eslint-runner-types.js';
+export { ESLINT_PACKAGE_PINS } from './eslint-runner-types.js';
+export { buildEslintArgs, resolveProjectRoot } from './eslint-runner-support.js';
+export type { BaselineViolation, EslintFinding, EslintRunOptions, EslintRunResult, EslintState, EslintSummary, RedLineEntry, RedLineMode } from './eslint-runner-types.js';
 export declare function runEslint(options: EslintRunOptions): EslintRunResult;

package/dist/services/lint/eslint-runner.js

@@ -18,73 +18,26 @@
  *     red-line. Enforces D6 + supplementary S2.
  */
 import { spawnSync } from 'node:child_process';
-import { existsSync, readFileSync } from 'node:fs';
-import { dirname, join } from 'node:path';
+import { existsSync } from 'node:fs';
+import { join } from 'node:path';
+import { repoRelativeKey } from '../../shared/path-utils.js';
 import { resolveNpxInvocation } from './npx-resolver.js';
+import { ESLINT_PACKAGE_PINS } from './eslint-runner-types.js';
+import { aggregateRedLine, buildEslintArgs, EMPTY_DIFF_RANGE, EMPTY_REDLINE, emptyResult, inDiff, loadBaseline, matchBaseline, resolveProjectRoot, severityFor, summarize } from './eslint-runner-support.js';
+export { ESLINT_PACKAGE_PINS } from './eslint-runner-types.js';
+export { buildEslintArgs, resolveProjectRoot } from './eslint-runner-support.js';
 /**
  * PRD-002b slice 2 — extract runner-pipeline magic numbers (ESLint
  * severity codes, buffer / timeout budgets, max project-root walk
  * depth, red-line top-N aggregation cap, base severity defaults).
  * Values are bytewise-identical to the original literals.
  */
-const ESLINT_SEVERITY_ERROR = 2;
-const ESLINT_SEVERITY_WARN = 1;
 const ESLINT_DEFAULT_TIMEOUT_MS = 60_000;
 const KB_PER_MB = 1024;
 const BYTES_PER_KB = 1024;
 const MB_TO_BYTES = KB_PER_MB * BYTES_PER_KB;
 const DIFF_BUFFER_BYTES = 16 * MB_TO_BYTES;
 const OUTPUT_BUFFER_BYTES = 32 * MB_TO_BYTES;
-const PROJECT_ROOT_WALK_MAX_DEPTH = 8;
-const RED_LINE_TOP_FILES = 5;
-export const ESLINT_PACKAGE_PINS = {
-    eslint: '8.57.1',
-    typescriptEslintParser: '8.66.0',
-    typescriptEslintPlugin: '8.66.0'
-};
-function severityFor(value) {
-    if (value === ESLINT_SEVERITY_ERROR)
-        return 'error';
-    if (value === ESLINT_SEVERITY_WARN)
-        return 'warn';
-    return 'info';
-}
-function summarize(findings) {
-    let error = 0;
-    let warn = 0;
-    let info = 0;
-    for (const f of findings) {
-        if (f.severity === 'error')
-            error++;
-        else if (f.severity === 'warn')
-            warn++;
-        else
-            info++;
-    }
-    return { error, warn, info };
-}
-/**
- * Read `git diff HEAD --unified=0` and parse every `+` line as a
- * touched line number. Falls back to [] on any parse error so the
- * caller treats all findings as out-of-diff (no silent zero-result).
- */
-function resolveProjectRoot(cwd) {
-    // ESLint 8 auto-discovers `.eslintrc.*` from cwd upward. When the
-    // CLI is launched via `node bin/peaks.js`, cwd is the bin/ dir and
-    // ESLint fails to find the config. Walk up until we see
-    // `config/eslint/.peaks-rules.cjs` and use that as the project root.
-    const marker = join('config', 'eslint', '.peaks-rules.cjs');
-    let current = cwd;
-    for (let depth = 0; depth < PROJECT_ROOT_WALK_MAX_DEPTH; depth += 1) {
-        if (existsSync(join(current, marker)))
-            return current;
-        const parent = dirname(current);
-        if (parent === current)
-            break;
-        current = parent;
-    }
-    return cwd;
-}
 function loadDiffRanges(cwd) {
     const ranges = [];
     try {
@@ -127,122 +80,6 @@ function loadDiffRanges(cwd) {
     }
     return ranges;
 }
-function inDiff(filePath, line, ranges) {
-    if (ranges.length === 0)
-        return false;
-    for (const r of ranges) {
-        if (r.file !== filePath)
-            continue;
-        for (const ln of r.lines) {
-            if (Math.abs(ln - line) <= 0)
-                return true;
-        }
-    }
-    return false;
-}
-function loadBaseline(cwd, baselineFile) {
-    const fullPath = join(cwd, baselineFile);
-    let raw;
-    try {
-        raw = readFileSync(fullPath, 'utf8');
-    }
-    catch {
-        return [];
-    }
-    let parsed;
-    try {
-        parsed = JSON.parse(raw);
-    }
-    catch {
-        return [];
-    }
-    const violations = Array.isArray(parsed.violations) ? parsed.violations : [];
-    const out = [];
-    for (const v of violations) {
-        if (typeof v.ruleId !== 'string' || typeof v.file !== 'string' || typeof v.line !== 'number')
-            continue;
-        out.push({
-            ruleId: v.ruleId,
-            file: v.file,
-            line: v.line,
-            severity: severityFor(v.severity),
-            message: typeof v.message === 'string' ? v.message : ''
-        });
-    }
-    return out;
-}
-function matchBaseline(finding, baseline) {
-    for (const v of baseline) {
-        if (v.ruleId !== finding.ruleId)
-            continue;
-        if (v.file !== finding.filePath)
-            continue;
-        if (v.line !== finding.line)
-            continue;
-        return true;
-    }
-    return false;
-}
-function aggregateRedLine(baseline) {
-    const byRule = new Map();
-    for (const v of baseline) {
-        const existing = byRule.get(v.ruleId);
-        if (existing === undefined) {
-            const fileCounts = new Map();
-            fileCounts.set(v.file, 1);
-            byRule.set(v.ruleId, { count: 1, fileCounts });
-        }
-        else {
-            existing.count += 1;
-            existing.fileCounts.set(v.file, (existing.fileCounts.get(v.file) ?? 0) + 1);
-        }
-    }
-    const out = [];
-    for (const [ruleId, agg] of byRule.entries()) {
-        const topFiles = [...agg.fileCounts.entries()]
-            .map(([file, count]) => ({ file, count }))
-            .sort((a, b) => b.count - a.count)
-            .slice(0, RED_LINE_TOP_FILES);
-        out.push({ ruleId, count: agg.count, topFiles });
-    }
-    out.sort((a, b) => b.count - a.count);
-    return out;
-}
-const EMPTY_DIFF_RANGE = [];
-const EMPTY_REDLINE = [];
-function emptyResult(state, start, rawOutput) {
-    return {
-        state,
-        findings: [],
-        summary: { error: 0, warn: 0, info: 0 },
-        durationMs: Date.now() - start,
-        rawOutput,
-        baselineWaived: [],
-        redLine: EMPTY_REDLINE
-    };
-}
-export function buildEslintArgs(options) {
-    if (options.fix === true || options.write === true) {
-        throw Object.assign(new Error('peaks code lint is read-only; --fix and --write are forbidden'), {
-            code: 'LINT_FIX_FORBIDDEN'
-        });
-    }
-    // The runner now uses the locally-installed eslint binary
-    // (`./node_modules/eslint/bin/eslint.js`) instead of the npx
-    // --package wrapper, which is broken on Windows (npm 10.9.4 chdirs
-    // the child to its own cache bin, breaking config auto-discovery).
-    // The pin constants are kept for detect-eslint's npm-registry
-    // probe + for the npx-resolver fallback path.
-    const args = ['--format', 'json'];
-    // Always pass the legacy .peaks-rules.cjs path; ESLint 8
-    // auto-discovers only `.eslintrc.*` files and our config lives at
-    // `config/eslint/.peaks-rules.cjs`. Callers may override via
-    // `options.configPath`.
-    const effectiveConfigPath = options.configPath ?? join('config', 'eslint', '.peaks-rules.cjs');
-    args.push('--config', effectiveConfigPath);
-    args.push(...(options.scope !== undefined && options.scope.length > 0 ? [options.scope] : ['.']));
-    return args;
-}
 export function runEslint(options) {
     const start = Date.now();
     let args;
@@ -277,10 +114,15 @@ export function runEslint(options) {
         // Fallback: resolve `npx` through the user's bundled npm install to
         // bypass the Windows .cmd shim + shell-quoting issues.
         const resolved = resolveNpxInvocation([
-            '--package', `eslint@${ESLINT_PACKAGE_PINS.eslint}`,
-            '--package', `@typescript-eslint/parser@${ESLINT_PACKAGE_PINS.typescriptEslintParser}`,
-            '--package', `@typescript-eslint/eslint-plugin@${ESLINT_PACKAGE_PINS.typescriptEslintPlugin}`,
-            '--', 'eslint', ...args
+            '--package',
+            `eslint@${ESLINT_PACKAGE_PINS.eslint}`,
+            '--package',
+            `@typescript-eslint/parser@${ESLINT_PACKAGE_PINS.typescriptEslintParser}`,
+            '--package',
+            `@typescript-eslint/eslint-plugin@${ESLINT_PACKAGE_PINS.typescriptEslintPlugin}`,
+            '--',
+            'eslint',
+            ...args
         ]);
         command = resolved.command;
         invocationArgs = resolved.args;
@@ -336,18 +178,22 @@ export function runEslint(options) {
     const diffOnly = options.diffOnly !== false;
     const redLineMode = options.redLineMode ?? 'baseline-aware';
     const baselinePath = options.baselineFile ?? '.peaks/lint/baseline.json';
-    const baseline = loadBaseline(options.cwd, baselinePath);
-    const diffRanges = diffOnly ? loadDiffRanges(options.cwd) : EMPTY_DIFF_RANGE;
+    const baseline = loadBaseline(projectRoot, baselinePath);
+    const diffRanges = diffOnly ? loadDiffRanges(projectRoot) : EMPTY_DIFF_RANGE;
     let activeFindings = findings;
     let waived = [];
     if (diffOnly) {
-        activeFindings = findings.filter((f) => inDiff(f.filePath, f.line, diffRanges));
+        // `git diff` reports repo-relative paths; ESLint reports absolute ones.
+        // Reducing the finding through the same key is what lets the diff gate
+        // match at all (measured: without it, every finding is dropped as
+        // out-of-diff on every machine).
+        activeFindings = findings.filter((f) => inDiff(repoRelativeKey(f.filePath, projectRoot), f.line, diffRanges));
     }
     if (baseline.length > 0) {
         const next = [];
         waived = [];
         for (const f of activeFindings) {
-            if (matchBaseline(f, baseline)) {
+            if (matchBaseline(f, baseline, projectRoot)) {
                 waived.push(f);
             }
             else {

package/dist/services/lint/npx-resolver.js

@@ -21,9 +21,7 @@ function locateNpmCliScript(scriptFile) {
             `C:/nvm4w/nodejs/node_modules/npm/bin/${scriptFile}`,
             `C:/Program Files/nodejs/node_modules/npm/bin/${scriptFile}`
         ]
-        : [
-            join(process.execPath, '..', '..', 'lib', 'node_modules', 'npm', 'bin', scriptFile)
-        ];
+        : [join(process.execPath, '..', '..', 'lib', 'node_modules', 'npm', 'bin', scriptFile)];
     for (const candidate of candidates) {
         if (existsSync(candidate))
             return candidate;

package/dist/services/lint/ocr-18-acquire.js

@@ -176,7 +176,9 @@ export function releaseOcrLock() {
     }
 }
 function isLiveLock(body) {
-    return body !== null && isProcessAlive(body.pid) && Date.now() - Date.parse(body.startedAt) <= ACQUIRE_LOCK_STALE_MS;
+    return (body !== null &&
+        isProcessAlive(body.pid) &&
+        Date.now() - Date.parse(body.startedAt) <= ACQUIRE_LOCK_STALE_MS);
 }
 function ownsLock(target) {
     return readLock(target)?.pid === process.pid;
@@ -184,7 +186,11 @@ function ownsLock(target) {
 function tryCreateLock(target) {
     const body = { pid: process.pid, startedAt: new Date().toISOString() };
     try {
-        writeFileSync(target, JSON.stringify(body), { flag: 'wx', encoding: 'utf8', mode: LOCK_FILE_MODE });
+        writeFileSync(target, JSON.stringify(body), {
+            flag: 'wx',
+            encoding: 'utf8',
+            mode: LOCK_FILE_MODE
+        });
         return true;
     }
     catch {
@@ -339,10 +345,15 @@ function runOcrAcquire(shell, asJson) {
     // spawn in this repo does (see `resolveNpxInvocation`). `shell: true` is NOT
     // an alternative — it concatenates and splits the `--package` argv.
     const invocation = resolveNpxInvocation(acquireCommandArgs());
-    return spawnSync(invocation.command, [...invocation.args], { ...options, env: invocation.baseEnv });
+    return spawnSync(invocation.command, [...invocation.args], {
+        ...options,
+        env: invocation.baseEnv
+    });
 }
 function spawnFailure(error, shell, startedAt) {
-    const code = error.code === 'ETIMEDOUT' ? 'OCR18_ACQUIRE_TIMEOUT' : 'OCR18_ACQUIRE_FAILED';
+    const code = error.code === 'ETIMEDOUT'
+        ? 'OCR18_ACQUIRE_TIMEOUT'
+        : 'OCR18_ACQUIRE_FAILED';
     return failure(code, `the acquisition did not complete: ${error.message}`, shell, startedAt);
 }
 function failure(code, message, shell, startedAt) {