plumbbob 0.6.5 → 0.8.0

package/node_modules/checkride/dist/agent-setup/hook.js

@@ -0,0 +1,92 @@
+/**
+ * Claude Code Stop hook — the mechanical half of the agent contract.
+ *
+ * `init` and `checkride agent-setup` write an idempotent Stop hook into
+ * `.claude/settings.json`. It runs the project's `check` script as a hard gate:
+ * exit 2 blocks the agent from finishing while the pipeline is red, so "exit 0 =
+ * done" becomes enforcement, not just advice. The command uses the *detected*
+ * package manager's run form (`pnpm run check`, `npm run check`, `yarn run
+ * check`, `bun run check`) so the hook works in any repo, not only pnpm ones
+ * (b7). Merging is surgical: unrelated hooks, other Stop groups, and every other
+ * settings key are preserved, and re-applying with the same PM is a no-op.
+ *
+ * This module owns only the hook; the AGENTS.md stanza and the higher-level
+ * `agent-setup` command live in `init.ts`, which imports the writer here — a
+ * single direction, so there is no cycle.
+ */
+import { mkdir, readFile, writeFile } from 'node:fs/promises';
+import { dirname, join } from 'node:path';
+import { detectPackageManager } from '../pm/index.js';
+/** Project-shared Claude Code settings (committed), relative to the repo root. */
+export const CLAUDE_SETTINGS_FILE = '.claude/settings.json';
+/**
+ * Stable, package-manager-independent marker identifying checkride's Stop hook
+ * inside a settings file. The run prefix varies by PM, so identity keys on the
+ * guidance message, which does not.
+ */
+const HOOK_SENTINEL = 'checkride: the gate is red';
+/** True when a hook entry is checkride's (matched by the PM-independent sentinel). */
+function isCheckrideHook(hook) {
+    return hook.type === 'command' && typeof hook.command === 'string' && hook.command.includes(HOOK_SENTINEL);
+}
+/**
+ * The Stop-hook command for `pm`: run the gate, and on red print guidance and
+ * exit 2 (the blocking code — a plain exit 1 lets the agent stop anyway).
+ */
+export function stopHookCommand(pm) {
+    const run = `${pm} run check`;
+    const guidance = `${HOOK_SENTINEL} — read .check/summary.json, fix the failing slot, then finish (do not stop while checkride is red).`;
+    return `${run} || { echo '${guidance}' >&2; exit 2; }`;
+}
+/**
+ * Merge checkride's Stop hook into parsed settings, idempotently. An existing
+ * checkride hook (found by its sentinel) has its command refreshed in place;
+ * otherwise a new Stop group is appended. Sibling hooks in the same group, other
+ * Stop groups, and every unrelated settings key are left untouched, so applying
+ * twice with the same command yields deep-equal settings.
+ */
+export function applyStopHook(settings, command) {
+    const hooks = { ...settings.hooks };
+    const stop = Array.isArray(hooks.Stop) ? hooks.Stop.map((g) => ({ ...g })) : [];
+    const idx = stop.findIndex((g) => (g.hooks ?? []).some(isCheckrideHook));
+    const existing = idx >= 0 ? stop[idx] : undefined;
+    if (existing) {
+        stop[idx] = {
+            ...existing,
+            hooks: (existing.hooks ?? []).map((h) => (isCheckrideHook(h) ? { ...h, command } : h)),
+        };
+    }
+    else {
+        stop.push({ hooks: [{ type: 'command', command }] });
+    }
+    return { ...settings, hooks: { ...hooks, Stop: stop } };
+}
+async function readIfExists(path) {
+    try {
+        return await readFile(path, 'utf8');
+    }
+    catch {
+        return null;
+    }
+}
+/**
+ * Write or refresh the Stop hook in `cwd/.claude/settings.json` for the detected
+ * (or provided) package manager, preserving any other settings. Returns whether
+ * the file changed: a second run with the same PM leaves it byte-identical, so
+ * `changed` is `false`. `dryRun` computes the result without writing.
+ */
+export async function writeStopHook(cwd, opts = {}) {
+    const path = join(cwd, CLAUDE_SETTINGS_FILE);
+    const pm = opts.pm ?? detectPackageManager({ cwd });
+    const raw = await readIfExists(path);
+    const settings = raw ? JSON.parse(raw) : {};
+    const next = applyStopHook(settings, stopHookCommand(pm));
+    const nextRaw = `${JSON.stringify(next, null, 2)}\n`;
+    const changed = raw !== nextRaw;
+    if (changed && !opts.dryRun) {
+        await mkdir(dirname(path), { recursive: true });
+        await writeFile(path, nextRaw);
+    }
+    return { path: CLAUDE_SETTINGS_FILE, changed };
+}
+//# sourceMappingURL=hook.js.map

package/node_modules/checkride/dist/agent-setup/hook.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"hook.js","sourceRoot":"","sources":["../../src/agent-setup/hook.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAC9D,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAE1C,OAAO,EAAE,oBAAoB,EAAuB,MAAM,gBAAgB,CAAC;AAE3E,kFAAkF;AAClF,MAAM,CAAC,MAAM,oBAAoB,GAAG,uBAAuB,CAAC;AAE5D;;;;GAIG;AACH,MAAM,aAAa,GAAG,4BAA4B,CAAC;AASnD,sFAAsF;AACtF,SAAS,eAAe,CAAC,IAAiB;IACxC,OAAO,IAAI,CAAC,IAAI,KAAK,SAAS,IAAI,OAAO,IAAI,CAAC,OAAO,KAAK,QAAQ,IAAI,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAC,CAAC;AAC7G,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,eAAe,CAAC,EAAkB;IAChD,MAAM,GAAG,GAAG,GAAG,EAAE,YAAY,CAAC;IAC9B,MAAM,QAAQ,GAAG,GAAG,aAAa,sGAAsG,CAAC;IACxI,OAAO,GAAG,GAAG,eAAe,QAAQ,kBAAkB,CAAC;AACzD,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,aAAa,CAAC,QAAwB,EAAE,OAAe;IACrE,MAAM,KAAK,GAAG,EAAE,GAAG,QAAQ,CAAC,KAAK,EAAE,CAAC;IACpC,MAAM,IAAI,GAAgB,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IAC7F,MAAM,GAAG,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC,CAAC;IACzE,MAAM,QAAQ,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAClD,IAAI,QAAQ,EAAE,CAAC;QACb,IAAI,CAAC,GAAG,CAAC,GAAG;YACV,GAAG,QAAQ;YACX,KAAK,EAAE,CAAC,QAAQ,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;SACvF,CAAC;IACJ,CAAC;SAAM,CAAC;QACN,IAAI,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC,CAAC;IACvD,CAAC;IACD,OAAO,EAAE,GAAG,QAAQ,EAAE,KAAK,EAAE,EAAE,GAAG,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,CAAC;AAC1D,CAAC;AAED,KAAK,UAAU,YAAY,CAAC,IAAY;IACtC,IAAI,CAAC;QACH,OAAO,MAAM,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IACtC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAID;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,GAAW,EACX,OAAkD,EAAE;IAEpD,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,EAAE,oBAAoB,CAAC,CAAC;IAC7C,MAAM,EAAE,GAAG,IAAI,CAAC,EAAE,IAAI,oBAAoB,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC;IACpD,MAAM,GAAG,GAAG,MAAM,YAAY,CAAC,IAAI,CAAC,CAAC;IACrC,MAAM,QAAQ,GAAmB,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IAC5D,MAAM,IAAI,GAAG,aAAa,CAAC,QAAQ,EAAE,eAAe,CAAC,EAAE,CAAC,CAAC,CAAC;IAC1D,MAAM,OAAO,GAAG,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC;IACrD,MAAM,OAAO,GAAG,GAAG,KAAK,OAAO,CAAC;IAChC,IAAI,OAAO,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;QAC5B,MAAM,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAChD,MAAM,SAAS,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IACjC,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,oBAAoB,EAAE,OAAO,EAAE,CAAC;AACjD,CAAC"}

package/node_modules/checkride/dist/agent-setup/index.d.ts

@@ -0,0 +1,8 @@
+/**
+ * Agent-setup module — the Claude Code Stop hook (step 12). This barrel is the
+ * module's only public surface (C2): siblings import from `../agent-setup`,
+ * never from `./hook.js` directly.
+ */
+export type { StopHookResult } from './hook.js';
+export { applyStopHook, CLAUDE_SETTINGS_FILE, stopHookCommand, writeStopHook } from './hook.js';
+//# sourceMappingURL=index.d.ts.map

package/node_modules/checkride/dist/agent-setup/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/agent-setup/index.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,YAAY,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC;AAChD,OAAO,EAAE,aAAa,EAAE,oBAAoB,EAAE,eAAe,EAAE,aAAa,EAAE,MAAM,WAAW,CAAC"}

package/node_modules/checkride/dist/agent-setup/index.js

@@ -0,0 +1,7 @@
+/**
+ * Agent-setup module — the Claude Code Stop hook (step 12). This barrel is the
+ * module's only public surface (C2): siblings import from `../agent-setup`,
+ * never from `./hook.js` directly.
+ */
+export { applyStopHook, CLAUDE_SETTINGS_FILE, stopHookCommand, writeStopHook } from './hook.js';
+//# sourceMappingURL=index.js.map

package/node_modules/checkride/dist/agent-setup/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/agent-setup/index.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAGH,OAAO,EAAE,aAAa,EAAE,oBAAoB,EAAE,eAAe,EAAE,aAAa,EAAE,MAAM,WAAW,CAAC"}

package/node_modules/checkride/dist/atomic.d.ts

@@ -0,0 +1,13 @@
+/**
+ * Crash-consistent artifact writes.
+ *
+ * Consumers parse `.check/summary.json` (and the digest, the raw slot files,
+ * and the committed baseline) as machine input; a run killed mid-write must
+ * never leave them a half-written file to read. Writing to a temp sibling
+ * and renaming into place makes each artifact either the previous complete
+ * version or the new complete version — `rename(2)` is atomic within a
+ * directory — never torn.
+ */
+/** Write `data` to `path` atomically: temp sibling first, then rename over. */
+export declare function writeFileAtomic(path: string, data: string): Promise<void>;
+//# sourceMappingURL=atomic.d.ts.map

package/node_modules/checkride/dist/atomic.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"atomic.d.ts","sourceRoot":"","sources":["../src/atomic.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAIH,+EAA+E;AAC/E,wBAAsB,eAAe,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAS/E"}

package/node_modules/checkride/dist/atomic.js

@@ -0,0 +1,24 @@
+/**
+ * Crash-consistent artifact writes.
+ *
+ * Consumers parse `.check/summary.json` (and the digest, the raw slot files,
+ * and the committed baseline) as machine input; a run killed mid-write must
+ * never leave them a half-written file to read. Writing to a temp sibling
+ * and renaming into place makes each artifact either the previous complete
+ * version or the new complete version — `rename(2)` is atomic within a
+ * directory — never torn.
+ */
+import { rename, rm, writeFile } from 'node:fs/promises';
+/** Write `data` to `path` atomically: temp sibling first, then rename over. */
+export async function writeFileAtomic(path, data) {
+    const tmp = `${path}.${process.pid}.tmp`;
+    try {
+        await writeFile(tmp, data);
+        await rename(tmp, path);
+    }
+    catch (err) {
+        await rm(tmp, { force: true });
+        throw err;
+    }
+}
+//# sourceMappingURL=atomic.js.map

package/node_modules/checkride/dist/atomic.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"atomic.js","sourceRoot":"","sources":["../src/atomic.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,EAAE,MAAM,EAAE,EAAE,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAEzD,+EAA+E;AAC/E,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,IAAY,EAAE,IAAY;IAC9D,MAAM,GAAG,GAAG,GAAG,IAAI,IAAI,OAAO,CAAC,GAAG,MAAM,CAAC;IACzC,IAAI,CAAC;QACH,MAAM,SAAS,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;QAC3B,MAAM,MAAM,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IAC1B,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,EAAE,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QAC/B,MAAM,GAAG,CAAC;IACZ,CAAC;AACH,CAAC"}

package/node_modules/checkride/dist/baseline/command.d.ts

@@ -0,0 +1,42 @@
+/**
+ * The `checkride baseline` command (baseline part 2).
+ *
+ * Runs the normal pipeline, fingerprints every fingerprintable slot's raw output
+ * (step 4's per-adapter extractors), and writes the result to
+ * `checkride.baseline.json` at repo root — beside `checkride.config.json`,
+ * committed, NOT under the gitignored `.check/` (D9). The file grandfathers a
+ * legacy repo's existing diagnostics so a later baseline-aware run (step 6) can
+ * subtract them and fail only on genuinely new findings.
+ *
+ * Only slots whose adapter has an extractor participate: a supported-but-clean
+ * slot records an empty array (it opted in and had nothing to grandfather),
+ * while a slot with no extractor (fallow, tsc, links, …) simply never appears —
+ * exactly the "supported vs. unsupported" distinction the fingerprint contract
+ * draws. Running each check under the resolved package manager and capturing raw
+ * output is delegated to {@link runChecks}, so baseline fingerprints precisely
+ * the bytes a normal run would.
+ */
+import type { Adapter, Slot } from '../adapters.js';
+import type { CheckrideConfig } from '../config.js';
+import type { CheckRunner, Out } from '../orchestrator.js';
+import type { PackageManager } from '../pm/index.js';
+import type { Baseline } from './store.js';
+export type BaselineOptions = {
+    cwd?: string;
+    slots?: readonly Slot[];
+    adapters?: readonly Adapter[];
+    config?: CheckrideConfig | null;
+    stdout?: Out;
+    stderr?: Out;
+    runner?: CheckRunner;
+    /** Package manager to run under; detected from `cwd` when omitted. */
+    pm?: PackageManager;
+};
+export type BaselineResult = {
+    ok: boolean;
+    exitCode: number;
+    baseline: Baseline;
+};
+/** Run the pipeline and write the per-adapter fingerprint baseline to `cwd`. */
+export declare function runBaseline(options: BaselineOptions): Promise<BaselineResult>;
+//# sourceMappingURL=command.d.ts.map

package/node_modules/checkride/dist/baseline/command.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"command.d.ts","sourceRoot":"","sources":["../../src/baseline/command.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAEH,OAAO,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,gBAAgB,CAAC;AACpD,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,cAAc,CAAC;AACpD,OAAO,KAAK,EAAE,WAAW,EAAE,GAAG,EAAc,MAAM,oBAAoB,CAAC;AAEvE,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAC;AAGrD,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAC;AAG3C,MAAM,MAAM,eAAe,GAAG;IAC5B,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,KAAK,CAAC,EAAE,SAAS,IAAI,EAAE,CAAC;IACxB,QAAQ,CAAC,EAAE,SAAS,OAAO,EAAE,CAAC;IAC9B,MAAM,CAAC,EAAE,eAAe,GAAG,IAAI,CAAC;IAChC,MAAM,CAAC,EAAE,GAAG,CAAC;IACb,MAAM,CAAC,EAAE,GAAG,CAAC;IACb,MAAM,CAAC,EAAE,WAAW,CAAC;IACrB,sEAAsE;IACtE,EAAE,CAAC,EAAE,cAAc,CAAC;CACrB,CAAC;AAEF,MAAM,MAAM,cAAc,GAAG;IAAE,EAAE,EAAE,OAAO,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,QAAQ,CAAA;CAAE,CAAC;AAEnF,gFAAgF;AAChF,wBAAsB,WAAW,CAAC,OAAO,EAAE,eAAe,GAAG,OAAO,CAAC,cAAc,CAAC,CAsCnF"}

package/node_modules/checkride/dist/baseline/command.js

@@ -0,0 +1,58 @@
+/**
+ * The `checkride baseline` command (baseline part 2).
+ *
+ * Runs the normal pipeline, fingerprints every fingerprintable slot's raw output
+ * (step 4's per-adapter extractors), and writes the result to
+ * `checkride.baseline.json` at repo root — beside `checkride.config.json`,
+ * committed, NOT under the gitignored `.check/` (D9). The file grandfathers a
+ * legacy repo's existing diagnostics so a later baseline-aware run (step 6) can
+ * subtract them and fail only on genuinely new findings.
+ *
+ * Only slots whose adapter has an extractor participate: a supported-but-clean
+ * slot records an empty array (it opted in and had nothing to grandfather),
+ * while a slot with no extractor (fallow, tsc, links, …) simply never appears —
+ * exactly the "supported vs. unsupported" distinction the fingerprint contract
+ * draws. Running each check under the resolved package manager and capturing raw
+ * output is delegated to {@link runChecks}, so baseline fingerprints precisely
+ * the bytes a normal run would.
+ */
+import { runChecks } from '../orchestrator.js';
+import { fingerprint } from './fingerprint.js';
+import { BASELINE_FILE, BASELINE_SCHEMA_VERSION, writeBaseline } from './store.js';
+/** Run the pipeline and write the per-adapter fingerprint baseline to `cwd`. */
+export async function runBaseline(options) {
+    const cwd = options.cwd ?? process.cwd();
+    const stderr = options.stderr ?? process.stderr;
+    // json:false so the run reports progress on stderr and nothing on stdout; the
+    // baseline artifact is the file, so stdout stays clean (C5). baseline:null so a
+    // re-capture records the raw current diagnostics — never masked or pruned by an
+    // existing baseline the run would otherwise pick up (step 6).
+    const runOptions = {
+        cwd,
+        json: false,
+        stderr,
+        baseline: null,
+        ...(options.slots !== undefined ? { slots: options.slots } : {}),
+        ...(options.adapters !== undefined ? { adapters: options.adapters } : {}),
+        ...(options.config !== undefined ? { config: options.config } : {}),
+        ...(options.runner !== undefined ? { runner: options.runner } : {}),
+        ...(options.pm !== undefined ? { pm: options.pm } : {}),
+        ...(options.stdout !== undefined ? { stdout: options.stdout } : {}),
+    };
+    const result = await runChecks(runOptions);
+    const slots = {};
+    for (const run of result.runs) {
+        const keys = fingerprint(run.adapter.name, run.outcome.stdout);
+        if (keys === null)
+            continue;
+        slots[run.slot] = [...keys].toSorted();
+    }
+    const baseline = { schema_version: BASELINE_SCHEMA_VERSION, slots };
+    await writeBaseline(cwd, baseline);
+    const slotNames = Object.keys(slots);
+    const total = Object.values(slots).reduce((n, keys) => n + keys.length, 0);
+    const where = slotNames.length > 0 ? slotNames.join(', ') : '(no fingerprintable slots)';
+    stderr.write(`\nbaseline: wrote ${BASELINE_FILE} — ${total} diagnostic(s) across ${where}\n`);
+    return { ok: true, exitCode: 0, baseline };
+}
+//# sourceMappingURL=command.js.map

package/node_modules/checkride/dist/baseline/command.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"command.js","sourceRoot":"","sources":["../../src/baseline/command.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAKH,OAAO,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAG/C,OAAO,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAE/C,OAAO,EAAE,aAAa,EAAE,uBAAuB,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAgBnF,gFAAgF;AAChF,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,OAAwB;IACxD,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC;IACzC,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,OAAO,CAAC,MAAM,CAAC;IAEhD,8EAA8E;IAC9E,gFAAgF;IAChF,gFAAgF;IAChF,8DAA8D;IAC9D,MAAM,UAAU,GAAe;QAC7B,GAAG;QACH,IAAI,EAAE,KAAK;QACX,MAAM;QACN,QAAQ,EAAE,IAAI;QACd,GAAG,CAAC,OAAO,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAChE,GAAG,CAAC,OAAO,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,OAAO,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACzE,GAAG,CAAC,OAAO,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACnE,GAAG,CAAC,OAAO,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACnE,GAAG,CAAC,OAAO,CAAC,EAAE,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,OAAO,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACvD,GAAG,CAAC,OAAO,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACpE,CAAC;IACF,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,UAAU,CAAC,CAAC;IAE3C,MAAM,KAAK,GAA6B,EAAE,CAAC;IAC3C,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,EAAE,CAAC;QAC9B,MAAM,IAAI,GAAG,WAAW,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QAC/D,IAAI,IAAI,KAAK,IAAI;YAAE,SAAS;QAC5B,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,CAAC,QAAQ,EAAE,CAAC;IACzC,CAAC;IAED,MAAM,QAAQ,GAAa,EAAE,cAAc,EAAE,uBAAuB,EAAE,KAAK,EAAE,CAAC;IAC9E,MAAM,aAAa,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;IAEnC,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACrC,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;IAC3E,MAAM,KAAK,GAAG,SAAS,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,4BAA4B,CAAC;IACzF,MAAM,CAAC,KAAK,CAAC,qBAAqB,aAAa,MAAM,KAAK,yBAAyB,KAAK,IAAI,CAAC,CAAC;IAE9F,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,EAAE,QAAQ,EAAE,CAAC;AAC7C,CAAC"}

package/node_modules/checkride/dist/baseline/fingerprint.d.ts

@@ -0,0 +1,41 @@
+/**
+ * Per-adapter diagnostic fingerprints (baseline part 1).
+ *
+ * A *fingerprint* is a stable, order-independent set of key strings extracted
+ * from one adapter's raw output. Each key names a single finding by what it is
+ * (`<file>:<rule>:<message>`) rather than where it sits, so a finding keeps its
+ * key when unrelated edits shift its line and column — that is what later lets
+ * the baseline (steps 5–6) subtract already-known findings without re-flagging
+ * them every time surrounding code moves.
+ *
+ * This is deliberately NOT a normalized diagnostic schema (D3): each adapter
+ * owns its own key string, the raw `.check/<slot>.json` stays authoritative, and
+ * an adapter whose output isn't a stable diagnostic set simply has no extractor
+ * and returns `null` — baseline is unsupported for that slot, decided
+ * per-adapter against real fixtures (D12), not from an up-front list. Step 4
+ * ships extractors for the blessed lint/struct/spell adapters (oxlint, ast-grep,
+ * cspell); fallow's cross-file findings (cycles, duplication) sit out for now
+ * (a4) and can gain a composite-key extractor later without touching this seam.
+ */
+/** A stable, order-independent set of diagnostic keys for one adapter's output. */
+export type Fingerprint = ReadonlySet<string>;
+/** Turns one adapter's raw output (JSON or text) into a fingerprint. */
+export type Extractor = (raw: string) => Fingerprint;
+/**
+ * Fingerprint one adapter's raw output, or `null` when the adapter has no
+ * extractor (baseline unsupported for that slot). Keyed on adapter name, so an
+ * alternate tool that shares a slot with a supported default (biome/eslint for
+ * `lint`, knip for `dead`) opts out until it grows its own extractor. A
+ * supported adapter with zero findings returns an empty set, never `null` —
+ * "supported but clean" and "unsupported" are distinct, and steps 5–6 depend on
+ * the difference.
+ */
+export declare function fingerprint(adapter: string, raw: string): Fingerprint | null;
+/**
+ * Whether an adapter can be fingerprinted (has an extractor), decided by name
+ * without needing its output. `init --baseline` uses this to tell which failing
+ * slots the baseline can grandfather from those that must still fall back to a
+ * `false` disable.
+ */
+export declare function isFingerprintable(adapter: string): boolean;
+//# sourceMappingURL=fingerprint.d.ts.map

package/node_modules/checkride/dist/baseline/fingerprint.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"fingerprint.d.ts","sourceRoot":"","sources":["../../src/baseline/fingerprint.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAEH,mFAAmF;AACnF,MAAM,MAAM,WAAW,GAAG,WAAW,CAAC,MAAM,CAAC,CAAC;AAE9C,wEAAwE;AACxE,MAAM,MAAM,SAAS,GAAG,CAAC,GAAG,EAAE,MAAM,KAAK,WAAW,CAAC;AAmFrD;;;;;;;;GAQG;AACH,wBAAgB,WAAW,CAAC,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,WAAW,GAAG,IAAI,CAG5E;AAED;;;;;GAKG;AACH,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAE1D"}

package/node_modules/checkride/dist/baseline/fingerprint.js

@@ -0,0 +1,119 @@
+/**
+ * Per-adapter diagnostic fingerprints (baseline part 1).
+ *
+ * A *fingerprint* is a stable, order-independent set of key strings extracted
+ * from one adapter's raw output. Each key names a single finding by what it is
+ * (`<file>:<rule>:<message>`) rather than where it sits, so a finding keeps its
+ * key when unrelated edits shift its line and column — that is what later lets
+ * the baseline (steps 5–6) subtract already-known findings without re-flagging
+ * them every time surrounding code moves.
+ *
+ * This is deliberately NOT a normalized diagnostic schema (D3): each adapter
+ * owns its own key string, the raw `.check/<slot>.json` stays authoritative, and
+ * an adapter whose output isn't a stable diagnostic set simply has no extractor
+ * and returns `null` — baseline is unsupported for that slot, decided
+ * per-adapter against real fixtures (D12), not from an up-front list. Step 4
+ * ships extractors for the blessed lint/struct/spell adapters (oxlint, ast-grep,
+ * cspell); fallow's cross-file findings (cycles, duplication) sit out for now
+ * (a4) and can gain a composite-key extractor later without touching this seam.
+ */
+/**
+ * Build a finding's key from its identity. Line and column are intentionally
+ * excluded so the key survives edits that only move the code; the message is
+ * whitespace-collapsed so cosmetic wrapping differences don't split one finding
+ * into two. `rule` is empty for tools (cspell) that don't name a rule.
+ */
+function key(file, rule, message) {
+    return `${file}:${rule}:${message.replace(/\s+/g, ' ').trim()}`;
+}
+/** Parse JSON output defensively; malformed input yields `null`, never a throw. */
+function parseJson(raw) {
+    try {
+        const parsed = JSON.parse(raw);
+        return parsed;
+    }
+    catch {
+        return null;
+    }
+}
+/** Narrow to a plain object so string fields can be read without assertions. */
+function isRecord(value) {
+    return typeof value === 'object' && value !== null;
+}
+/** Read a field as a string, or `''` when it is missing or not a string. */
+function str(value) {
+    return typeof value === 'string' ? value : '';
+}
+/** Coerce an unknown to an array of unknowns (non-arrays become empty). */
+function asArray(value) {
+    return Array.isArray(value) ? value : [];
+}
+/** oxlint `--format=json`: `{ diagnostics: [{ filename, code, message }] }`. */
+const extractOxlint = (raw) => {
+    const keys = new Set();
+    const payload = parseJson(raw);
+    const diagnostics = isRecord(payload) ? asArray(payload['diagnostics']) : [];
+    for (const d of diagnostics) {
+        if (!isRecord(d))
+            continue;
+        const file = str(d['filename']);
+        const message = str(d['message']);
+        if (file && message)
+            keys.add(key(file, str(d['code']), message));
+    }
+    return keys;
+};
+/** ast-grep `--json=compact`: an array of `{ file, ruleId, message }`. */
+const extractAstGrep = (raw) => {
+    const keys = new Set();
+    for (const m of asArray(parseJson(raw))) {
+        if (!isRecord(m))
+            continue;
+        const file = str(m['file']);
+        const message = str(m['message']);
+        if (file && message)
+            keys.add(key(file, str(m['ruleId']), message));
+    }
+    return keys;
+};
+/** cspell default reporter line: `<file>:<line>:<col> - <message>`. */
+const CSPELL_LINE = /^(.+?):\d+:\d+ - (.+)$/;
+/** cspell has no rule id, so its key is `<file>::<message>` (empty rule slot). */
+const extractCspell = (raw) => {
+    const keys = new Set();
+    for (const line of raw.split('\n')) {
+        const m = CSPELL_LINE.exec(line.trim());
+        if (m)
+            keys.add(key(m[1] ?? '', '', m[2] ?? ''));
+    }
+    return keys;
+};
+/** Extractors keyed by adapter name (not slot); everything else sits out. */
+const EXTRACTORS = {
+    oxlint: extractOxlint,
+    'ast-grep': extractAstGrep,
+    cspell: extractCspell,
+};
+/**
+ * Fingerprint one adapter's raw output, or `null` when the adapter has no
+ * extractor (baseline unsupported for that slot). Keyed on adapter name, so an
+ * alternate tool that shares a slot with a supported default (biome/eslint for
+ * `lint`, knip for `dead`) opts out until it grows its own extractor. A
+ * supported adapter with zero findings returns an empty set, never `null` —
+ * "supported but clean" and "unsupported" are distinct, and steps 5–6 depend on
+ * the difference.
+ */
+export function fingerprint(adapter, raw) {
+    const extractor = EXTRACTORS[adapter];
+    return extractor ? extractor(raw) : null;
+}
+/**
+ * Whether an adapter can be fingerprinted (has an extractor), decided by name
+ * without needing its output. `init --baseline` uses this to tell which failing
+ * slots the baseline can grandfather from those that must still fall back to a
+ * `false` disable.
+ */
+export function isFingerprintable(adapter) {
+    return EXTRACTORS[adapter] !== undefined;
+}
+//# sourceMappingURL=fingerprint.js.map

package/node_modules/checkride/dist/baseline/fingerprint.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"fingerprint.js","sourceRoot":"","sources":["../../src/baseline/fingerprint.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAQH;;;;;GAKG;AACH,SAAS,GAAG,CAAC,IAAY,EAAE,IAAY,EAAE,OAAe;IACtD,OAAO,GAAG,IAAI,IAAI,IAAI,IAAI,OAAO,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC;AAClE,CAAC;AAED,mFAAmF;AACnF,SAAS,SAAS,CAAC,GAAW;IAC5B,IAAI,CAAC;QACH,MAAM,MAAM,GAAY,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QACxC,OAAO,MAAM,CAAC;IAChB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,gFAAgF;AAChF,SAAS,QAAQ,CAAC,KAAc;IAC9B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,CAAC;AACrD,CAAC;AAED,4EAA4E;AAC5E,SAAS,GAAG,CAAC,KAAc;IACzB,OAAO,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;AAChD,CAAC;AAED,2EAA2E;AAC3E,SAAS,OAAO,CAAC,KAAc;IAC7B,OAAO,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;AAC3C,CAAC;AAED,gFAAgF;AAChF,MAAM,aAAa,GAAc,CAAC,GAAG,EAAE,EAAE;IACvC,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,MAAM,OAAO,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC;IAC/B,MAAM,WAAW,GAAG,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IAC7E,KAAK,MAAM,CAAC,IAAI,WAAW,EAAE,CAAC;QAC5B,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC;YAAE,SAAS;QAC3B,MAAM,IAAI,GAAG,GAAG,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC;QAChC,MAAM,OAAO,GAAG,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC;QAClC,IAAI,IAAI,IAAI,OAAO;YAAE,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC,CAAC;IACpE,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC,CAAC;AAEF,0EAA0E;AAC1E,MAAM,cAAc,GAAc,CAAC,GAAG,EAAE,EAAE;IACxC,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,KAAK,MAAM,CAAC,IAAI,OAAO,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC;QACxC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC;YAAE,SAAS;QAC3B,MAAM,IAAI,GAAG,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC;QAC5B,MAAM,OAAO,GAAG,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC;QAClC,IAAI,IAAI,IAAI,OAAO;YAAE,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC,CAAC;IACtE,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC,CAAC;AAEF,uEAAuE;AACvE,MAAM,WAAW,GAAG,wBAAwB,CAAC;AAE7C,kFAAkF;AAClF,MAAM,aAAa,GAAc,CAAC,GAAG,EAAE,EAAE;IACvC,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,KAAK,MAAM,IAAI,IAAI,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;QACnC,MAAM,CAAC,GAAG,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;QACxC,IAAI,CAAC;YAAE,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;IACnD,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC,CAAC;AAEF,6EAA6E;AAC7E,MAAM,UAAU,GAAwC;IACtD,MAAM,EAAE,aAAa;IACrB,UAAU,EAAE,cAAc;IAC1B,MAAM,EAAE,aAAa;CACtB,CAAC;AAEF;;;;;;;;GAQG;AACH,MAAM,UAAU,WAAW,CAAC,OAAe,EAAE,GAAW;IACtD,MAAM,SAAS,GAAG,UAAU,CAAC,OAAO,CAAC,CAAC;IACtC,OAAO,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;AAC3C,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,iBAAiB,CAAC,OAAe;IAC/C,OAAO,UAAU,CAAC,OAAO,CAAC,KAAK,SAAS,CAAC;AAC3C,CAAC"}

package/node_modules/checkride/dist/baseline/index.d.ts

@@ -0,0 +1,13 @@
+/**
+ * Baseline module — per-adapter diagnostic fingerprints (step 4) and, in later
+ * steps, the baseline read/write/ratchet built on top of them. This barrel is
+ * the module's only public surface (C2): siblings import from `../baseline`,
+ * never from `./fingerprint.js` directly.
+ */
+export type { Extractor, Fingerprint } from './fingerprint.js';
+export { fingerprint, isFingerprintable } from './fingerprint.js';
+export type { Baseline, BaselineAdjustment } from './store.js';
+export { applyBaseline, BASELINE_FILE, BASELINE_SCHEMA_VERSION, baselinesEqual, countBaselineKeys, loadBaseline, ratchet, writeBaseline, } from './store.js';
+export type { BaselineOptions, BaselineResult } from './command.js';
+export { runBaseline } from './command.js';
+//# sourceMappingURL=index.d.ts.map

package/node_modules/checkride/dist/baseline/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/baseline/index.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,YAAY,EAAE,SAAS,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAC/D,OAAO,EAAE,WAAW,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AAClE,YAAY,EAAE,QAAQ,EAAE,kBAAkB,EAAE,MAAM,YAAY,CAAC;AAC/D,OAAO,EACL,aAAa,EACb,aAAa,EACb,uBAAuB,EACvB,cAAc,EACd,iBAAiB,EACjB,YAAY,EACZ,OAAO,EACP,aAAa,GACd,MAAM,YAAY,CAAC;AACpB,YAAY,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AACpE,OAAO,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC"}

package/node_modules/checkride/dist/baseline/index.js

@@ -0,0 +1,10 @@
+/**
+ * Baseline module — per-adapter diagnostic fingerprints (step 4) and, in later
+ * steps, the baseline read/write/ratchet built on top of them. This barrel is
+ * the module's only public surface (C2): siblings import from `../baseline`,
+ * never from `./fingerprint.js` directly.
+ */
+export { fingerprint, isFingerprintable } from './fingerprint.js';
+export { applyBaseline, BASELINE_FILE, BASELINE_SCHEMA_VERSION, baselinesEqual, countBaselineKeys, loadBaseline, ratchet, writeBaseline, } from './store.js';
+export { runBaseline } from './command.js';
+//# sourceMappingURL=index.js.map

package/node_modules/checkride/dist/baseline/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/baseline/index.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAGH,OAAO,EAAE,WAAW,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AAElE,OAAO,EACL,aAAa,EACb,aAAa,EACb,uBAAuB,EACvB,cAAc,EACd,iBAAiB,EACjB,YAAY,EACZ,OAAO,EACP,aAAa,GACd,MAAM,YAAY,CAAC;AAEpB,OAAO,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC"}

package/node_modules/checkride/dist/baseline/store.d.ts

@@ -0,0 +1,67 @@
+/**
+ * The baseline artifact: its on-disk shape and the pure read / write / apply /
+ * ratchet operations a baseline-aware run (step 6) is built from.
+ *
+ * This file imports nothing from the orchestrator on purpose: the `baseline`
+ * command (command.ts) bridges to the run pipeline, but a *run* only needs to
+ * mask and ratchet an already-captured baseline, so the orchestrator can depend
+ * on these helpers without a load-order cycle. Keeping the file I/O and the
+ * set algebra here (not in the orchestrator) also preserves the orchestrator's
+ * "never parse diagnostics" thesis — fingerprinting stays inside this module.
+ */
+import type { Fingerprint } from './fingerprint.js';
+/** The committed baseline artifact, at repo root beside `checkride.config.json`. */
+export declare const BASELINE_FILE = "checkride.baseline.json";
+/** Schema version of the baseline file; independent of the summary schema (D8). */
+export declare const BASELINE_SCHEMA_VERSION = 1;
+/** Shape of `checkride.baseline.json`: per-slot sets of grandfathered keys. */
+export type Baseline = {
+    schema_version: number;
+    slots: Record<string, string[]>;
+};
+/** The result of masking one slot's current fingerprint with its baseline. */
+export type BaselineAdjustment = {
+    /** Grandfathered-adjusted pass: the failure is fully explained by known debt. */
+    ok: boolean;
+    /** How many current diagnostics the baseline suppressed (the `baselined` count). */
+    baselined: number;
+    /** Sorted diagnostics present now that the baseline does NOT grandfather. */
+    newKeys: string[];
+};
+/**
+ * Read `checkride.baseline.json` from `cwd`; `null` when absent or unusable. The
+ * baseline is a committed file a run reads on every invocation, so a malformed
+ * one is coerced into a clean shape (or dropped) rather than thrown — a corrupt
+ * baseline must never break `checkride`.
+ */
+export declare function loadBaseline(cwd: string): Baseline | null;
+/** Serialize and write the baseline to `cwd` (pretty-printed, trailing newline, atomic). */
+export declare function writeBaseline(cwd: string, baseline: Baseline): Promise<void>;
+/**
+ * Mask one slot's current fingerprint with its grandfathered keys. Masking is
+ * pure set subtraction: `newKeys` are the current diagnostics the baseline does
+ * not cover, `baselined` counts the ones it does.
+ *
+ * The failure flips to a pass *only* when there are current diagnostics and none
+ * of them are new — a tool that produced no parseable diagnostics (a crash, empty
+ * output that fingerprints to the empty set) is never masked, so a genuine
+ * breakage still fails even while a baseline is active. Correctness beats
+ * precision: better to re-surface a masked finding than to silently green a crash.
+ */
+export declare function applyBaseline(current: Fingerprint, baselinedKeys: readonly string[], rawOk: boolean): BaselineAdjustment;
+/**
+ * Ratchet the baseline against a fully-observed run: for every slot observed this
+ * run, keep only the grandfathered keys still present (a fixed diagnostic is
+ * dropped); a slot absent from `observed` — disabled, without an extractor, or
+ * not run — is preserved untouched. The result never grows: genuinely new findings
+ * are the run's failures, not new debt, so only a `checkride baseline` capture
+ * ever adds keys. Callers gate this on a full run (no `--only`/`--skip`/
+ * `--changed`, no early `--bail` break) so a partial run can't prune keys it
+ * simply didn't observe (a1).
+ */
+export declare function ratchet(baseline: Baseline, observed: ReadonlyMap<string, Fingerprint>): Baseline;
+/** Total grandfathered diagnostics across every slot. */
+export declare function countBaselineKeys(baseline: Baseline): number;
+/** Order-independent structural equality, so an unchanged ratchet skips its write. */
+export declare function baselinesEqual(a: Baseline, b: Baseline): boolean;
+//# sourceMappingURL=store.d.ts.map

package/node_modules/checkride/dist/baseline/store.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"store.d.ts","sourceRoot":"","sources":["../../src/baseline/store.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAMH,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAEpD,oFAAoF;AACpF,eAAO,MAAM,aAAa,4BAA4B,CAAC;AAEvD,mFAAmF;AACnF,eAAO,MAAM,uBAAuB,IAAI,CAAC;AAEzC,+EAA+E;AAC/E,MAAM,MAAM,QAAQ,GAAG;IACrB,cAAc,EAAE,MAAM,CAAC;IACvB,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;CACjC,CAAC;AAEF,8EAA8E;AAC9E,MAAM,MAAM,kBAAkB,GAAG;IAC/B,iFAAiF;IACjF,EAAE,EAAE,OAAO,CAAC;IACZ,oFAAoF;IACpF,SAAS,EAAE,MAAM,CAAC;IAClB,6EAA6E;IAC7E,OAAO,EAAE,MAAM,EAAE,CAAC;CACnB,CAAC;AAOF;;;;;GAKG;AACH,wBAAgB,YAAY,CAAC,GAAG,EAAE,MAAM,GAAG,QAAQ,GAAG,IAAI,CAezD;AAED,4FAA4F;AAC5F,wBAAsB,aAAa,CAAC,GAAG,EAAE,MAAM,EAAE,QAAQ,EAAE,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC,CAElF;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,aAAa,CAC3B,OAAO,EAAE,WAAW,EACpB,aAAa,EAAE,SAAS,MAAM,EAAE,EAChC,KAAK,EAAE,OAAO,GACb,kBAAkB,CAUpB;AAED;;;;;;;;;GASG;AACH,wBAAgB,OAAO,CAAC,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE,WAAW,CAAC,MAAM,EAAE,WAAW,CAAC,GAAG,QAAQ,CAOhG;AAED,yDAAyD;AACzD,wBAAgB,iBAAiB,CAAC,QAAQ,EAAE,QAAQ,GAAG,MAAM,CAE5D;AASD,sFAAsF;AACtF,wBAAgB,cAAc,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,EAAE,QAAQ,GAAG,OAAO,CAEhE"}