sourceverity 1.0.0

package/dist/baseline/manager.js

@@ -0,0 +1,77 @@
+import fs from "node:fs/promises";
+import path from "node:path";
+import { normalizePath } from "../core/paths.js";
+export const DEFAULT_BASELINE_FILENAME = ".sourceverity-baseline.json";
+/**
+ * Creates a BaselineFile structure from a list of audit findings.
+ */
+export function createBaseline(findings, repoRoot) {
+    const entriesMap = new Map();
+    for (const f of findings) {
+        if (!entriesMap.has(f.fingerprint)) {
+            entriesMap.set(f.fingerprint, {
+                fingerprint: f.fingerprint,
+                ruleId: f.ruleId,
+                file: normalizePath(f.file, repoRoot),
+                message: f.message,
+            });
+        }
+    }
+    const entries = Array.from(entriesMap.values()).sort((a, b) => a.fingerprint.localeCompare(b.fingerprint));
+    return {
+        version: 1,
+        generatedAt: new Date().toISOString(),
+        repositoryRoot: normalizePath(repoRoot),
+        entries,
+    };
+}
+/**
+ * Atomically writes a baseline file to disk.
+ */
+export async function saveBaseline(baseline, filePath) {
+    const resolvedPath = path.resolve(filePath);
+    const dir = path.dirname(resolvedPath);
+    await fs.mkdir(dir, { recursive: true });
+    const tempPath = `${resolvedPath}.${Date.now()}.tmp`;
+    const serialized = JSON.stringify(baseline, null, 2);
+    await fs.writeFile(tempPath, serialized, "utf-8");
+    await fs.rename(tempPath, resolvedPath);
+}
+/**
+ * Loads and validates a baseline file from disk. Returns null if missing or malformed.
+ */
+export async function loadBaseline(filePath) {
+    try {
+        const raw = await fs.readFile(path.resolve(filePath), "utf-8");
+        // sourceverity-disable-next-line typescript/unsafe-unvalidated-assertion -- validated by version and entries checks below
+        const parsed = JSON.parse(raw);
+        if (parsed && parsed.version === 1 && Array.isArray(parsed.entries)) {
+            return parsed;
+        }
+        return null;
+    }
+    catch {
+        return null;
+    }
+}
+/**
+ * Compares current audit findings against a baseline to determine new and resolved findings.
+ */
+export function compareWithBaseline(currentFindings, baseline) {
+    const baselineFingerprints = new Set(baseline.entries.map((e) => e.fingerprint));
+    const currentFingerprints = new Set(currentFindings.map((f) => f.fingerprint));
+    const newFindings = currentFindings.filter((f) => !baselineFingerprints.has(f.fingerprint));
+    let resolvedCount = 0;
+    for (const fp of baselineFingerprints) {
+        if (!currentFingerprints.has(fp)) {
+            resolvedCount++;
+        }
+    }
+    return {
+        newFindings,
+        baselineCount: baseline.entries.length,
+        resolvedCount,
+        newCount: newFindings.length,
+    };
+}
+//# sourceMappingURL=manager.js.map

package/dist/baseline/manager.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"manager.js","sourceRoot":"","sources":["../../src/baseline/manager.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,kBAAkB,CAAC;AAClC,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AAIjD,MAAM,CAAC,MAAM,yBAAyB,GAAG,6BAA6B,CAAC;AAEvE;;GAEG;AACH,MAAM,UAAU,cAAc,CAAC,QAA4B,EAAE,QAAgB;IAC3E,MAAM,UAAU,GAAG,IAAI,GAAG,EAAyB,CAAC;IAEpD,KAAK,MAAM,CAAC,IAAI,QAAQ,EAAE,CAAC;QACzB,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,WAAW,CAAC,EAAE,CAAC;YACnC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,WAAW,EAAE;gBAC5B,WAAW,EAAE,CAAC,CAAC,WAAW;gBAC1B,MAAM,EAAE,CAAC,CAAC,MAAM;gBAChB,IAAI,EAAE,aAAa,CAAC,CAAC,CAAC,IAAI,EAAE,QAAQ,CAAC;gBACrC,OAAO,EAAE,CAAC,CAAC,OAAO;aACnB,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,CAAC,aAAa,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC;IAE3G,OAAO;QACL,OAAO,EAAE,CAAC;QACV,WAAW,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QACrC,cAAc,EAAE,aAAa,CAAC,QAAQ,CAAC;QACvC,OAAO;KACR,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,QAAsB,EAAE,QAAgB;IACzE,MAAM,YAAY,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;IAC5C,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;IACvC,MAAM,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAEzC,MAAM,QAAQ,GAAG,GAAG,YAAY,IAAI,IAAI,CAAC,GAAG,EAAE,MAAM,CAAC;IACrD,MAAM,UAAU,GAAG,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;IAErD,MAAM,EAAE,CAAC,SAAS,CAAC,QAAQ,EAAE,UAAU,EAAE,OAAO,CAAC,CAAC;IAClD,MAAM,EAAE,CAAC,MAAM,CAAC,QAAQ,EAAE,YAAY,CAAC,CAAC;AAC1C,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,QAAgB;IACjD,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,OAAO,CAAC,CAAC;QAC/D,0HAA0H;QAC1H,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAiB,CAAC;QAC/C,IAAI,MAAM,IAAI,MAAM,CAAC,OAAO,KAAK,CAAC,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC;YACpE,OAAO,MAAM,CAAC;QAChB,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,mBAAmB,CACjC,eAAmC,EACnC,QAAsB;IAEtB,MAAM,oBAAoB,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC;IACjF,MAAM,mBAAmB,GAAG,IAAI,GAAG,CAAC,eAAe,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC;IAE/E,MAAM,WAAW,GAAG,eAAe,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,oBAAoB,CAAC,GAAG,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC;IAE5F,IAAI,aAAa,GAAG,CAAC,CAAC;IACtB,KAAK,MAAM,EAAE,IAAI,oBAAoB,EAAE,CAAC;QACtC,IAAI,CAAC,mBAAmB,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC;YACjC,aAAa,EAAE,CAAC;QAClB,CAAC;IACH,CAAC;IAED,OAAO;QACL,WAAW;QACX,aAAa,EAAE,QAAQ,CAAC,OAAO,CAAC,MAAM;QACtC,aAAa;QACb,QAAQ,EAAE,WAAW,CAAC,MAAM;KAC7B,CAAC;AACJ,CAAC"}

package/dist/baseline/types.d.ts

@@ -0,0 +1,20 @@
+import type { Finding } from "../core/types.ts";
+export interface BaselineEntry {
+    readonly fingerprint: string;
+    readonly ruleId: string;
+    readonly file: string;
+    readonly message: string;
+}
+export interface BaselineFile {
+    readonly version: 1;
+    readonly generatedAt: string;
+    readonly repositoryRoot: string;
+    readonly entries: readonly BaselineEntry[];
+}
+export interface BaselineDelta {
+    readonly newFindings: readonly Finding[];
+    readonly baselineCount: number;
+    readonly resolvedCount: number;
+    readonly newCount: number;
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/baseline/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/baseline/types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,kBAAkB,CAAC;AAEhD,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;CAC1B;AAED,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,OAAO,EAAE,CAAC,CAAC;IACpB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,OAAO,EAAE,SAAS,aAAa,EAAE,CAAC;CAC5C;AAED,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,WAAW,EAAE,SAAS,OAAO,EAAE,CAAC;IACzC,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;CAC3B"}

package/dist/baseline/types.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=types.js.map

package/dist/baseline/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/baseline/types.ts"],"names":[],"mappings":""}

package/dist/cli/args.d.ts

@@ -0,0 +1,26 @@
+export type CliCommand = "scan" | "strictness" | "rules" | "explain" | "baseline" | "help" | "version";
+export type OutputFormat = "pretty" | "json" | "agent" | "sarif";
+export type MinConfidence = "high" | "medium" | "low";
+export type FailOnSeverity = "error" | "warning" | "never";
+export interface CliOptions {
+    readonly command: CliCommand;
+    readonly targetDir: string;
+    readonly format: OutputFormat;
+    readonly minConfidence: MinConfidence;
+    readonly failOn: FailOnSeverity;
+    readonly configPath?: string | undefined;
+    readonly baselinePath?: string | undefined;
+    readonly updateBaseline: boolean;
+    readonly changedOnly: boolean;
+    readonly verbose: boolean;
+    readonly quiet: boolean;
+    readonly color?: boolean | undefined;
+    readonly ruleArg?: string | undefined;
+    readonly baselineSubcommand?: "create" | "check" | undefined;
+}
+/**
+ * Parses raw command-line arguments into structured CliOptions.
+ * Throws an Error with a descriptive message on invalid input.
+ */
+export declare function parseCliArgs(argv: readonly string[]): CliOptions;
+//# sourceMappingURL=args.d.ts.map

package/dist/cli/args.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"args.d.ts","sourceRoot":"","sources":["../../src/cli/args.ts"],"names":[],"mappings":"AAEA,MAAM,MAAM,UAAU,GAAG,MAAM,GAAG,YAAY,GAAG,OAAO,GAAG,SAAS,GAAG,UAAU,GAAG,MAAM,GAAG,SAAS,CAAC;AAEvG,MAAM,MAAM,YAAY,GAAG,QAAQ,GAAG,MAAM,GAAG,OAAO,GAAG,OAAO,CAAC;AAEjE,MAAM,MAAM,aAAa,GAAG,MAAM,GAAG,QAAQ,GAAG,KAAK,CAAC;AAEtD,MAAM,MAAM,cAAc,GAAG,OAAO,GAAG,SAAS,GAAG,OAAO,CAAC;AAE3D,MAAM,WAAW,UAAU;IACzB,QAAQ,CAAC,OAAO,EAAE,UAAU,CAAC;IAC7B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,MAAM,EAAE,YAAY,CAAC;IAC9B,QAAQ,CAAC,aAAa,EAAE,aAAa,CAAC;IACtC,QAAQ,CAAC,MAAM,EAAE,cAAc,CAAC;IAChC,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACzC,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC3C,QAAQ,CAAC,cAAc,EAAE,OAAO,CAAC;IACjC,QAAQ,CAAC,WAAW,EAAE,OAAO,CAAC;IAC9B,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;IAC1B,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAC;IACxB,QAAQ,CAAC,KAAK,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;IACrC,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACtC,QAAQ,CAAC,kBAAkB,CAAC,EAAE,QAAQ,GAAG,OAAO,GAAG,SAAS,CAAC;CAC9D;AAED;;;GAGG;AACH,wBAAgB,YAAY,CAAC,IAAI,EAAE,SAAS,MAAM,EAAE,GAAG,UAAU,CAiHhE"}

package/dist/cli/args.js

@@ -0,0 +1,126 @@
+import { parseArgs } from "node:util";
+/**
+ * Parses raw command-line arguments into structured CliOptions.
+ * Throws an Error with a descriptive message on invalid input.
+ */
+export function parseCliArgs(argv) {
+    const optionsConfig = {
+        help: { type: "boolean", short: "h" },
+        version: { type: "boolean", short: "v" },
+        format: { type: "string", short: "f" },
+        "min-confidence": { type: "string" },
+        "fail-on": { type: "string" },
+        config: { type: "string", short: "c" },
+        baseline: { type: "string", short: "b" },
+        "update-baseline": { type: "boolean", short: "u" },
+        changed: { type: "boolean" },
+        verbose: { type: "boolean" },
+        quiet: { type: "boolean", short: "q" },
+        color: { type: "boolean" },
+        "no-color": { type: "boolean" },
+    };
+    const parsed = parseArgs({
+        args: [...argv],
+        options: optionsConfig,
+        allowPositionals: true,
+        strict: true,
+    });
+    if (parsed.values.help) {
+        return createDefaultOptions("help");
+    }
+    if (parsed.values.version) {
+        return createDefaultOptions("version");
+    }
+    const positionals = parsed.positionals;
+    let command = "scan";
+    let targetDir = ".";
+    let ruleArg;
+    let baselineSubcommand;
+    const first = positionals[0];
+    if (first) {
+        if (first === "scan" ||
+            first === "strictness" ||
+            first === "rules" ||
+            first === "explain" ||
+            first === "baseline" ||
+            first === "help" ||
+            first === "version") {
+            command = first;
+            if (command === "explain") {
+                ruleArg = positionals[1];
+                if (!ruleArg) {
+                    throw new Error("Missing rule identifier for 'explain' command. Usage: sourceverity explain <rule-id>");
+                }
+            }
+            else if (command === "baseline") {
+                const sub = positionals[1];
+                if (sub === "create" || sub === "check") {
+                    baselineSubcommand = sub;
+                    targetDir = positionals[2] ?? ".";
+                }
+                else if (sub) {
+                    targetDir = sub;
+                }
+            }
+            else {
+                targetDir = positionals[1] ?? ".";
+            }
+        }
+        else {
+            // First positional is targetDir for default 'scan' command
+            targetDir = first;
+        }
+    }
+    // Format validation
+    const rawFormat = parsed.values.format ?? "pretty";
+    if (rawFormat !== "pretty" && rawFormat !== "json" && rawFormat !== "agent" && rawFormat !== "sarif") {
+        throw new Error(`Invalid --format '${rawFormat}'. Valid options: pretty, json, agent, sarif`);
+    }
+    // Min confidence validation
+    const rawConfidence = parsed.values["min-confidence"] ?? "medium";
+    if (rawConfidence !== "high" && rawConfidence !== "medium" && rawConfidence !== "low") {
+        throw new Error(`Invalid --min-confidence '${rawConfidence}'. Valid options: high, medium, low`);
+    }
+    // Fail on validation
+    const rawFailOn = parsed.values["fail-on"] ?? "error";
+    if (rawFailOn !== "error" && rawFailOn !== "warning" && rawFailOn !== "never") {
+        throw new Error(`Invalid --fail-on '${rawFailOn}'. Valid options: error, warning, never`);
+    }
+    let colorOption;
+    if (parsed.values["no-color"]) {
+        colorOption = false;
+    }
+    else if (parsed.values.color !== undefined) {
+        colorOption = parsed.values.color;
+    }
+    return {
+        command,
+        targetDir,
+        format: rawFormat,
+        minConfidence: rawConfidence,
+        failOn: rawFailOn,
+        configPath: parsed.values.config,
+        baselinePath: parsed.values.baseline,
+        updateBaseline: Boolean(parsed.values["update-baseline"]),
+        changedOnly: Boolean(parsed.values.changed),
+        verbose: Boolean(parsed.values.verbose),
+        quiet: Boolean(parsed.values.quiet),
+        color: colorOption,
+        ruleArg,
+        baselineSubcommand,
+    };
+}
+function createDefaultOptions(command) {
+    return {
+        command,
+        targetDir: ".",
+        format: "pretty",
+        minConfidence: "medium",
+        failOn: "error",
+        updateBaseline: false,
+        changedOnly: false,
+        verbose: false,
+        quiet: false,
+    };
+}
+//# sourceMappingURL=args.js.map

package/dist/cli/args.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"args.js","sourceRoot":"","sources":["../../src/cli/args.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AA2BtC;;;GAGG;AACH,MAAM,UAAU,YAAY,CAAC,IAAuB;IAClD,MAAM,aAAa,GAAG;QACpB,IAAI,EAAE,EAAE,IAAI,EAAE,SAAkB,EAAE,KAAK,EAAE,GAAG,EAAE;QAC9C,OAAO,EAAE,EAAE,IAAI,EAAE,SAAkB,EAAE,KAAK,EAAE,GAAG,EAAE;QACjD,MAAM,EAAE,EAAE,IAAI,EAAE,QAAiB,EAAE,KAAK,EAAE,GAAG,EAAE;QAC/C,gBAAgB,EAAE,EAAE,IAAI,EAAE,QAAiB,EAAE;QAC7C,SAAS,EAAE,EAAE,IAAI,EAAE,QAAiB,EAAE;QACtC,MAAM,EAAE,EAAE,IAAI,EAAE,QAAiB,EAAE,KAAK,EAAE,GAAG,EAAE;QAC/C,QAAQ,EAAE,EAAE,IAAI,EAAE,QAAiB,EAAE,KAAK,EAAE,GAAG,EAAE;QACjD,iBAAiB,EAAE,EAAE,IAAI,EAAE,SAAkB,EAAE,KAAK,EAAE,GAAG,EAAE;QAC3D,OAAO,EAAE,EAAE,IAAI,EAAE,SAAkB,EAAE;QACrC,OAAO,EAAE,EAAE,IAAI,EAAE,SAAkB,EAAE;QACrC,KAAK,EAAE,EAAE,IAAI,EAAE,SAAkB,EAAE,KAAK,EAAE,GAAG,EAAE;QAC/C,KAAK,EAAE,EAAE,IAAI,EAAE,SAAkB,EAAE;QACnC,UAAU,EAAE,EAAE,IAAI,EAAE,SAAkB,EAAE;KACzC,CAAC;IAEF,MAAM,MAAM,GAAG,SAAS,CAAC;QACvB,IAAI,EAAE,CAAC,GAAG,IAAI,CAAC;QACf,OAAO,EAAE,aAAa;QACtB,gBAAgB,EAAE,IAAI;QACtB,MAAM,EAAE,IAAI;KACb,CAAC,CAAC;IAEH,IAAI,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;QACvB,OAAO,oBAAoB,CAAC,MAAM,CAAC,CAAC;IACtC,CAAC;IAED,IAAI,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QAC1B,OAAO,oBAAoB,CAAC,SAAS,CAAC,CAAC;IACzC,CAAC;IAED,MAAM,WAAW,GAAG,MAAM,CAAC,WAAW,CAAC;IACvC,IAAI,OAAO,GAAe,MAAM,CAAC;IACjC,IAAI,SAAS,GAAG,GAAG,CAAC;IACpB,IAAI,OAA2B,CAAC;IAChC,IAAI,kBAAkD,CAAC;IAEvD,MAAM,KAAK,GAAG,WAAW,CAAC,CAAC,CAAC,CAAC;IAC7B,IAAI,KAAK,EAAE,CAAC;QACV,IACE,KAAK,KAAK,MAAM;YAChB,KAAK,KAAK,YAAY;YACtB,KAAK,KAAK,OAAO;YACjB,KAAK,KAAK,SAAS;YACnB,KAAK,KAAK,UAAU;YACpB,KAAK,KAAK,MAAM;YAChB,KAAK,KAAK,SAAS,EACnB,CAAC;YACD,OAAO,GAAG,KAAK,CAAC;YAChB,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;gBAC1B,OAAO,GAAG,WAAW,CAAC,CAAC,CAAC,CAAC;gBACzB,IAAI,CAAC,OAAO,EAAE,CAAC;oBACb,MAAM,IAAI,KAAK,CAAC,sFAAsF,CAAC,CAAC;gBAC1G,CAAC;YACH,CAAC;iBAAM,IAAI,OAAO,KAAK,UAAU,EAAE,CAAC;gBAClC,MAAM,GAAG,GAAG,WAAW,CAAC,CAAC,CAAC,CAAC;gBAC3B,IAAI,GAAG,KAAK,QAAQ,IAAI,GAAG,KAAK,OAAO,EAAE,CAAC;oBACxC,kBAAkB,GAAG,GAAG,CAAC;oBACzB,SAAS,GAAG,WAAW,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC;gBACpC,CAAC;qBAAM,IAAI,GAAG,EAAE,CAAC;oBACf,SAAS,GAAG,GAAG,CAAC;gBAClB,CAAC;YACH,CAAC;iBAAM,CAAC;gBACN,SAAS,GAAG,WAAW,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC;YACpC,CAAC;QACH,CAAC;aAAM,CAAC;YACN,2DAA2D;YAC3D,SAAS,GAAG,KAAK,CAAC;QACpB,CAAC;IACH,CAAC;IAED,oBAAoB;IACpB,MAAM,SAAS,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,IAAI,QAAQ,CAAC;IACnD,IAAI,SAAS,KAAK,QAAQ,IAAI,SAAS,KAAK,MAAM,IAAI,SAAS,KAAK,OAAO,IAAI,SAAS,KAAK,OAAO,EAAE,CAAC;QACrG,MAAM,IAAI,KAAK,CAAC,qBAAqB,SAAS,8CAA8C,CAAC,CAAC;IAChG,CAAC;IAED,4BAA4B;IAC5B,MAAM,aAAa,GAAG,MAAM,CAAC,MAAM,CAAC,gBAAgB,CAAC,IAAI,QAAQ,CAAC;IAClE,IAAI,aAAa,KAAK,MAAM,IAAI,aAAa,KAAK,QAAQ,IAAI,aAAa,KAAK,KAAK,EAAE,CAAC;QACtF,MAAM,IAAI,KAAK,CAAC,6BAA6B,aAAa,qCAAqC,CAAC,CAAC;IACnG,CAAC;IAED,qBAAqB;IACrB,MAAM,SAAS,GAAG,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI,OAAO,CAAC;IACtD,IAAI,SAAS,KAAK,OAAO,IAAI,SAAS,KAAK,SAAS,IAAI,SAAS,KAAK,OAAO,EAAE,CAAC;QAC9E,MAAM,IAAI,KAAK,CAAC,sBAAsB,SAAS,yCAAyC,CAAC,CAAC;IAC5F,CAAC;IAED,IAAI,WAAgC,CAAC;IACrC,IAAI,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,EAAE,CAAC;QAC9B,WAAW,GAAG,KAAK,CAAC;IACtB,CAAC;SAAM,IAAI,MAAM,CAAC,MAAM,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;QAC7C,WAAW,GAAG,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC;IACpC,CAAC;IAED,OAAO;QACL,OAAO;QACP,SAAS;QACT,MAAM,EAAE,SAAyB;QACjC,aAAa,EAAE,aAA8B;QAC7C,MAAM,EAAE,SAA2B;QACnC,UAAU,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM;QAChC,YAAY,EAAE,MAAM,CAAC,MAAM,CAAC,QAAQ;QACpC,cAAc,EAAE,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,iBAAiB,CAAC,CAAC;QACzD,WAAW,EAAE,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC;QAC3C,OAAO,EAAE,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC;QACvC,KAAK,EAAE,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC;QACnC,KAAK,EAAE,WAAW;QAClB,OAAO;QACP,kBAAkB;KACnB,CAAC;AACJ,CAAC;AAED,SAAS,oBAAoB,CAAC,OAAmB;IAC/C,OAAO;QACL,OAAO;QACP,SAAS,EAAE,GAAG;QACd,MAAM,EAAE,QAAQ;QAChB,aAAa,EAAE,QAAQ;QACvB,MAAM,EAAE,OAAO;QACf,cAAc,EAAE,KAAK;QACrB,WAAW,EAAE,KAAK;QAClB,OAAO,EAAE,KAAK;QACd,KAAK,EAAE,KAAK;KACb,CAAC;AACJ,CAAC"}

package/dist/cli/exitCodes.d.ts

@@ -0,0 +1,8 @@
+export declare const EXIT_CODES: {
+    readonly SUCCESS: 0;
+    readonly POLICY_VIOLATION: 1;
+    readonly USER_ERROR: 2;
+    readonly INTERNAL_ERROR: 3;
+};
+export type ExitCode = (typeof EXIT_CODES)[keyof typeof EXIT_CODES];
+//# sourceMappingURL=exitCodes.d.ts.map

package/dist/cli/exitCodes.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"exitCodes.d.ts","sourceRoot":"","sources":["../../src/cli/exitCodes.ts"],"names":[],"mappings":"AAAA,eAAO,MAAM,UAAU;;;;;CAKb,CAAC;AAEX,MAAM,MAAM,QAAQ,GAAG,CAAC,OAAO,UAAU,CAAC,CAAC,MAAM,OAAO,UAAU,CAAC,CAAC"}

package/dist/cli/exitCodes.js

@@ -0,0 +1,7 @@
+export const EXIT_CODES = {
+    SUCCESS: 0,
+    POLICY_VIOLATION: 1,
+    USER_ERROR: 2,
+    INTERNAL_ERROR: 3,
+};
+//# sourceMappingURL=exitCodes.js.map

package/dist/cli/exitCodes.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"exitCodes.js","sourceRoot":"","sources":["../../src/cli/exitCodes.ts"],"names":[],"mappings":"AAAA,MAAM,CAAC,MAAM,UAAU,GAAG;IACxB,OAAO,EAAE,CAAC;IACV,gBAAgB,EAAE,CAAC;IACnB,UAAU,EAAE,CAAC;IACb,cAAc,EAAE,CAAC;CACT,CAAC"}

package/dist/cli/help.d.ts

@@ -0,0 +1,5 @@
+/**
+ * Formats help text for the SourceVerity CLI.
+ */
+export declare function getHelpText(): string;
+//# sourceMappingURL=help.d.ts.map

package/dist/cli/help.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"help.d.ts","sourceRoot":"","sources":["../../src/cli/help.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,wBAAgB,WAAW,IAAI,MAAM,CAyCpC"}

package/dist/cli/help.js

@@ -0,0 +1,46 @@
+/**
+ * Formats help text for the SourceVerity CLI.
+ */
+export function getHelpText() {
+    return `SourceVerity - Repository-aware frontend correctness and quality auditor
+
+USAGE:
+  sourceverity scan [path] [options]
+  sourceverity strictness [path] [options]
+  sourceverity rules
+  sourceverity explain <rule-id>
+  sourceverity baseline create [path]
+  sourceverity baseline check [path]
+
+COMMANDS:
+  scan [path]           Audit frontend repository for correctness problems (default)
+  strictness [path]     Analyze TypeScript configuration safety and migration impact
+  rules                 List all available audit rules
+  explain <rule-id>     Show documentation and examples for a specific rule
+  baseline create       Generate or update .sourceverity-baseline.json
+  baseline check        Scan repository and report only new findings against baseline
+  help                  Show this help message
+  version               Show SourceVerity version
+
+OPTIONS:
+  -f, --format <type>   Output format: pretty (default), json, agent, sarif
+  --min-confidence <lvl> Minimum finding confidence to report: medium (default), high, low
+  --fail-on <severity>  Exit with status 1 on: error (default), warning, never
+  -b, --baseline <path> Path to baseline file (default: .sourceverity-baseline.json)
+  -u, --update-baseline Update baseline file with current findings
+  --changed             Analyze only git-changed files in the repository
+  -c, --config <path>   Path to custom sourceverity.json configuration
+  --color / --no-color  Force enable or disable ANSI color output
+  -q, --quiet           Suppress informational messages and progress
+  --verbose             Show extended diagnostic and framework metadata
+  -h, --help            Show help
+  -v, --version         Show version
+
+EXIT CODES:
+  0  Scan passed or findings within configured thresholds
+  1  Findings violated configured failure policy (--fail-on)
+  2  Configuration, arguments, or repository input error
+  3  Internal analysis or execution error
+`;
+}
+//# sourceMappingURL=help.js.map

package/dist/cli/help.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"help.js","sourceRoot":"","sources":["../../src/cli/help.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,MAAM,UAAU,WAAW;IACzB,OAAO;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAuCR,CAAC;AACF,CAAC"}

package/dist/cli/main.d.ts

@@ -0,0 +1,7 @@
+import { type ExitCode } from "./exitCodes.js";
+import "../rules/index.js";
+/**
+ * Main CLI execution entry point.
+ */
+export declare function runCli(argv: readonly string[]): Promise<ExitCode>;
+//# sourceMappingURL=main.d.ts.map

package/dist/cli/main.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"main.d.ts","sourceRoot":"","sources":["../../src/cli/main.ts"],"names":[],"mappings":"AAEA,OAAO,EAAc,KAAK,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AAoB3D,OAAO,mBAAmB,CAAC;AAE3B;;GAEG;AACH,wBAAsB,MAAM,CAAC,IAAI,EAAE,SAAS,MAAM,EAAE,GAAG,OAAO,CAAC,QAAQ,CAAC,CAwJvE"}

package/dist/cli/main.js

@@ -0,0 +1,156 @@
+import path from "node:path";
+import { parseCliArgs } from "./args.js";
+import { EXIT_CODES } from "./exitCodes.js";
+import { getHelpText } from "./help.js";
+import { runAudit } from "../engine/runner.js";
+import { globalRuleRegistry } from "../engine/registry.js";
+import { discoverRepository } from "../repository/detector.js";
+import { loadRepositoryTypeScript } from "../repository/tsLoader.js";
+import { getChangedFiles } from "../repository/git.js";
+import { evaluateStrictnessGap, renderStrictnessReport } from "../strictness/evaluator.js";
+import { createBaseline, saveBaseline, loadBaseline, compareWithBaseline, DEFAULT_BASELINE_FILENAME, } from "../baseline/manager.js";
+import { renderTerminalReport } from "../reporters/terminal.js";
+import { renderJsonReport } from "../reporters/json.js";
+import { renderAgentReport } from "../reporters/agent.js";
+import { renderSarifReport } from "../reporters/sarif.js";
+import { createStyler } from "../core/terminal.js";
+import "../rules/index.js";
+/**
+ * Main CLI execution entry point.
+ */
+export async function runCli(argv) {
+    let options;
+    try {
+        options = parseCliArgs(argv);
+    }
+    catch (err) {
+        const msg = err instanceof Error ? err.message : String(err);
+        process.stderr.write(`sourceverity: ${msg}\n\n${getHelpText()}\n`);
+        return EXIT_CODES.USER_ERROR;
+    }
+    const styler = createStyler(options.color !== undefined ? { color: options.color } : undefined);
+    // 1. Help command
+    if (options.command === "help") {
+        process.stdout.write(getHelpText() + "\n");
+        return EXIT_CODES.SUCCESS;
+    }
+    // 2. Version command
+    if (options.command === "version") {
+        process.stdout.write("1.0.0\n");
+        return EXIT_CODES.SUCCESS;
+    }
+    // 3. Rules listing command
+    if (options.command === "rules") {
+        const rules = globalRuleRegistry.getAll();
+        process.stdout.write(styler.bold("SourceVerity Rules\n\n"));
+        for (const r of rules) {
+            const paddedId = r.meta.id.padEnd(45, " ");
+            const sev = r.meta.defaultSeverity.padEnd(8, " ");
+            process.stdout.write(`  ${styler.bold(paddedId)} ${sev} ${styler.dim(r.meta.description)}\n`);
+        }
+        process.stdout.write(`\nTotal rules: ${rules.length}\n`);
+        return EXIT_CODES.SUCCESS;
+    }
+    // 4. Explain rule command
+    if (options.command === "explain") {
+        const ruleId = options.ruleArg;
+        const rule = ruleId ? globalRuleRegistry.get(ruleId) : undefined;
+        if (!rule) {
+            process.stderr.write(`sourceverity: unknown rule '${ruleId}'. Run 'sourceverity rules' to list all rules.\n`);
+            return EXIT_CODES.USER_ERROR;
+        }
+        process.stdout.write(styler.bold(`${rule.meta.id}\n\n`));
+        process.stdout.write(`${rule.meta.description}\n\n`);
+        process.stdout.write(`Category:           ${rule.meta.category}\n`);
+        process.stdout.write(`Default Severity:   ${rule.meta.defaultSeverity}\n`);
+        process.stdout.write(`Confidence:         ${rule.meta.defaultConfidence}\n`);
+        process.stdout.write(`Type Information:   ${rule.meta.requiresTypeInformation ? "required" : "syntax only"}\n`);
+        return EXIT_CODES.SUCCESS;
+    }
+    // 5. Strictness gap analysis command
+    if (options.command === "strictness") {
+        const targetDir = path.resolve(options.targetDir);
+        const repo = await discoverRepository(targetDir);
+        const tsInst = loadRepositoryTypeScript(targetDir);
+        if (!tsInst) {
+            process.stderr.write(`sourceverity: strictness analysis requires a local TypeScript installation in '${targetDir}'.\n`);
+            return EXIT_CODES.USER_ERROR;
+        }
+        const report = evaluateStrictnessGap(repo, tsInst);
+        process.stdout.write(renderStrictnessReport(report, options.color !== undefined ? { color: options.color } : undefined));
+        return EXIT_CODES.SUCCESS;
+    }
+    // 6. Baseline generation subcommand
+    if (options.command === "baseline" && options.baselineSubcommand === "create") {
+        const targetDir = path.resolve(options.targetDir);
+        const auditResult = await runAudit({ targetDir, minConfidence: options.minConfidence });
+        const baselineFile = options.baselinePath ?? path.join(targetDir, DEFAULT_BASELINE_FILENAME);
+        const baseline = createBaseline(auditResult.findings, targetDir);
+        await saveBaseline(baseline, baselineFile);
+        process.stdout.write(`Generated baseline with ${baseline.entries.length} findings at '${baselineFile}'.\n`);
+        return EXIT_CODES.SUCCESS;
+    }
+    // 7. Audit scan command (default)
+    let changedFiles;
+    if (options.changedOnly) {
+        const foundChanged = await getChangedFiles(options.targetDir);
+        if (foundChanged === null) {
+            process.stderr.write(`sourceverity: --changed requested but '${options.targetDir}' is not a git repository.\n`);
+            return EXIT_CODES.USER_ERROR;
+        }
+        changedFiles = foundChanged;
+    }
+    const result = await runAudit({
+        targetDir: options.targetDir,
+        minConfidence: options.minConfidence,
+        changedFiles,
+    });
+    // Handle baseline comparison if baseline path is provided or checking baseline
+    let effectiveResult = result;
+    if (options.baselinePath || options.command === "baseline") {
+        const baselineFile = options.baselinePath ?? path.join(path.resolve(options.targetDir), DEFAULT_BASELINE_FILENAME);
+        const loadedBaseline = await loadBaseline(baselineFile);
+        if (loadedBaseline) {
+            const delta = compareWithBaseline(result.findings, loadedBaseline);
+            effectiveResult = {
+                ...result,
+                findings: delta.newFindings,
+            };
+            if (!options.quiet && options.format === "pretty") {
+                process.stdout.write(`Baseline check against '${baselineFile}': ${delta.baselineCount} baseline, ${delta.newCount} new, ${delta.resolvedCount} resolved.\n\n`);
+            }
+        }
+    }
+    if (options.updateBaseline) {
+        const baselineFile = options.baselinePath ?? path.join(path.resolve(options.targetDir), DEFAULT_BASELINE_FILENAME);
+        const updatedBaseline = createBaseline(result.findings, options.targetDir);
+        await saveBaseline(updatedBaseline, baselineFile);
+    }
+    // Output formatting
+    if (options.format === "pretty") {
+        process.stdout.write(renderTerminalReport(effectiveResult, { color: options.color, verbose: options.verbose }));
+    }
+    else if (options.format === "json") {
+        process.stdout.write(renderJsonReport(effectiveResult) + "\n");
+    }
+    else if (options.format === "agent") {
+        process.stdout.write(renderAgentReport(effectiveResult) + "\n");
+    }
+    else if (options.format === "sarif") {
+        process.stdout.write(renderSarifReport(effectiveResult) + "\n");
+    }
+    // Policy exit code evaluation
+    if (options.failOn === "never") {
+        return EXIT_CODES.SUCCESS;
+    }
+    const hasErrors = effectiveResult.findings.some((f) => f.severity === "error");
+    const hasWarnings = effectiveResult.findings.some((f) => f.severity === "warning");
+    if (options.failOn === "error" && hasErrors) {
+        return EXIT_CODES.POLICY_VIOLATION;
+    }
+    if (options.failOn === "warning" && (hasErrors || hasWarnings)) {
+        return EXIT_CODES.POLICY_VIOLATION;
+    }
+    return EXIT_CODES.SUCCESS;
+}
+//# sourceMappingURL=main.js.map

package/dist/cli/main.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"main.js","sourceRoot":"","sources":["../../src/cli/main.ts"],"names":[],"mappings":"AAAA,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,YAAY,EAAmB,MAAM,WAAW,CAAC;AAC1D,OAAO,EAAE,UAAU,EAAiB,MAAM,gBAAgB,CAAC;AAC3D,OAAO,EAAE,WAAW,EAAE,MAAM,WAAW,CAAC;AACxC,OAAO,EAAE,QAAQ,EAAE,MAAM,qBAAqB,CAAC;AAC/C,OAAO,EAAE,kBAAkB,EAAE,MAAM,uBAAuB,CAAC;AAC3D,OAAO,EAAE,kBAAkB,EAAE,MAAM,2BAA2B,CAAC;AAC/D,OAAO,EAAE,wBAAwB,EAAE,MAAM,2BAA2B,CAAC;AACrE,OAAO,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC;AACvD,OAAO,EAAE,qBAAqB,EAAE,sBAAsB,EAAE,MAAM,4BAA4B,CAAC;AAC3F,OAAO,EACL,cAAc,EACd,YAAY,EACZ,YAAY,EACZ,mBAAmB,EACnB,yBAAyB,GAC1B,MAAM,wBAAwB,CAAC;AAChC,OAAO,EAAE,oBAAoB,EAAE,MAAM,0BAA0B,CAAC;AAChE,OAAO,EAAE,gBAAgB,EAAE,MAAM,sBAAsB,CAAC;AACxD,OAAO,EAAE,iBAAiB,EAAE,MAAM,uBAAuB,CAAC;AAC1D,OAAO,EAAE,iBAAiB,EAAE,MAAM,uBAAuB,CAAC;AAC1D,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACnD,OAAO,mBAAmB,CAAC;AAE3B;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,MAAM,CAAC,IAAuB;IAClD,IAAI,OAAmB,CAAC;IACxB,IAAI,CAAC;QACH,OAAO,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC;IAC/B,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,GAAG,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAC7D,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,iBAAiB,GAAG,OAAO,WAAW,EAAE,IAAI,CAAC,CAAC;QACnE,OAAO,UAAU,CAAC,UAAU,CAAC;IAC/B,CAAC;IAED,MAAM,MAAM,GAAG,YAAY,CAAC,OAAO,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;IAEhG,kBAAkB;IAClB,IAAI,OAAO,CAAC,OAAO,KAAK,MAAM,EAAE,CAAC;QAC/B,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,WAAW,EAAE,GAAG,IAAI,CAAC,CAAC;QAC3C,OAAO,UAAU,CAAC,OAAO,CAAC;IAC5B,CAAC;IAED,qBAAqB;IACrB,IAAI,OAAO,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;QAClC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;QAChC,OAAO,UAAU,CAAC,OAAO,CAAC;IAC5B,CAAC;IAED,2BAA2B;IAC3B,IAAI,OAAO,CAAC,OAAO,KAAK,OAAO,EAAE,CAAC;QAChC,MAAM,KAAK,GAAG,kBAAkB,CAAC,MAAM,EAAE,CAAC;QAC1C,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,wBAAwB,CAAC,CAAC,CAAC;QAC5D,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;YACtB,MAAM,QAAQ,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC;YAC3C,MAAM,GAAG,GAAG,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;YAClD,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,GAAG,IAAI,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC;QAChG,CAAC;QACD,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,kBAAkB,KAAK,CAAC,MAAM,IAAI,CAAC,CAAC;QACzD,OAAO,UAAU,CAAC,OAAO,CAAC;IAC5B,CAAC;IAED,0BAA0B;IAC1B,IAAI,OAAO,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;QAClC,MAAM,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;QAC/B,MAAM,IAAI,GAAG,MAAM,CAAC,CAAC,CAAC,kBAAkB,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QACjE,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,+BAA+B,MAAM,kDAAkD,CAAC,CAAC;YAC9G,OAAO,UAAU,CAAC,UAAU,CAAC;QAC/B,CAAC;QAED,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC;QACzD,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,WAAW,MAAM,CAAC,CAAC;QACrD,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,uBAAuB,IAAI,CAAC,IAAI,CAAC,QAAQ,IAAI,CAAC,CAAC;QACpE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,uBAAuB,IAAI,CAAC,IAAI,CAAC,eAAe,IAAI,CAAC,CAAC;QAC3E,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,uBAAuB,IAAI,CAAC,IAAI,CAAC,iBAAiB,IAAI,CAAC,CAAC;QAC7E,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,uBAAuB,IAAI,CAAC,IAAI,CAAC,uBAAuB,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,aAAa,IAAI,CAAC,CAAC;QAChH,OAAO,UAAU,CAAC,OAAO,CAAC;IAC5B,CAAC;IAED,qCAAqC;IACrC,IAAI,OAAO,CAAC,OAAO,KAAK,YAAY,EAAE,CAAC;QACrC,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;QAClD,MAAM,IAAI,GAAG,MAAM,kBAAkB,CAAC,SAAS,CAAC,CAAC;QACjD,MAAM,MAAM,GAAG,wBAAwB,CAAC,SAAS,CAAC,CAAC;QAEnD,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,kFAAkF,SAAS,MAAM,CAAC,CAAC;YACxH,OAAO,UAAU,CAAC,UAAU,CAAC;QAC/B,CAAC;QAED,MAAM,MAAM,GAAG,qBAAqB,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QACnD,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,sBAAsB,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC;QACzH,OAAO,UAAU,CAAC,OAAO,CAAC;IAC5B,CAAC;IAED,oCAAoC;IACpC,IAAI,OAAO,CAAC,OAAO,KAAK,UAAU,IAAI,OAAO,CAAC,kBAAkB,KAAK,QAAQ,EAAE,CAAC;QAC9E,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;QAClD,MAAM,WAAW,GAAG,MAAM,QAAQ,CAAC,EAAE,SAAS,EAAE,aAAa,EAAE,OAAO,CAAC,aAAa,EAAE,CAAC,CAAC;QACxF,MAAM,YAAY,GAAG,OAAO,CAAC,YAAY,IAAI,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,yBAAyB,CAAC,CAAC;QAE7F,MAAM,QAAQ,GAAG,cAAc,CAAC,WAAW,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC;QACjE,MAAM,YAAY,CAAC,QAAQ,EAAE,YAAY,CAAC,CAAC;QAE3C,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,2BAA2B,QAAQ,CAAC,OAAO,CAAC,MAAM,iBAAiB,YAAY,MAAM,CAAC,CAAC;QAC5G,OAAO,UAAU,CAAC,OAAO,CAAC;IAC5B,CAAC;IAED,kCAAkC;IAClC,IAAI,YAAkC,CAAC;IACvC,IAAI,OAAO,CAAC,WAAW,EAAE,CAAC;QACxB,MAAM,YAAY,GAAG,MAAM,eAAe,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;QAC9D,IAAI,YAAY,KAAK,IAAI,EAAE,CAAC;YAC1B,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,0CAA0C,OAAO,CAAC,SAAS,8BAA8B,CAAC,CAAC;YAChH,OAAO,UAAU,CAAC,UAAU,CAAC;QAC/B,CAAC;QACD,YAAY,GAAG,YAAY,CAAC;IAC9B,CAAC;IAED,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC;QAC5B,SAAS,EAAE,OAAO,CAAC,SAAS;QAC5B,aAAa,EAAE,OAAO,CAAC,aAAa;QACpC,YAAY;KACb,CAAC,CAAC;IAEH,+EAA+E;IAC/E,IAAI,eAAe,GAAG,MAAM,CAAC;IAC7B,IAAI,OAAO,CAAC,YAAY,IAAI,OAAO,CAAC,OAAO,KAAK,UAAU,EAAE,CAAC;QAC3D,MAAM,YAAY,GAAG,OAAO,CAAC,YAAY,IAAI,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,yBAAyB,CAAC,CAAC;QACnH,MAAM,cAAc,GAAG,MAAM,YAAY,CAAC,YAAY,CAAC,CAAC;QACxD,IAAI,cAAc,EAAE,CAAC;YACnB,MAAM,KAAK,GAAG,mBAAmB,CAAC,MAAM,CAAC,QAAQ,EAAE,cAAc,CAAC,CAAC;YACnE,eAAe,GAAG;gBAChB,GAAG,MAAM;gBACT,QAAQ,EAAE,KAAK,CAAC,WAAW;aAC5B,CAAC;YACF,IAAI,CAAC,OAAO,CAAC,KAAK,IAAI,OAAO,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;gBAClD,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,2BAA2B,YAAY,MAAM,KAAK,CAAC,aAAa,cAAc,KAAK,CAAC,QAAQ,SAAS,KAAK,CAAC,aAAa,gBAAgB,CAAC,CAAC;YACjK,CAAC;QACH,CAAC;IACH,CAAC;IAED,IAAI,OAAO,CAAC,cAAc,EAAE,CAAC;QAC3B,MAAM,YAAY,GAAG,OAAO,CAAC,YAAY,IAAI,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,yBAAyB,CAAC,CAAC;QACnH,MAAM,eAAe,GAAG,cAAc,CAAC,MAAM,CAAC,QAAQ,EAAE,OAAO,CAAC,SAAS,CAAC,CAAC;QAC3E,MAAM,YAAY,CAAC,eAAe,EAAE,YAAY,CAAC,CAAC;IACpD,CAAC;IAED,oBAAoB;IACpB,IAAI,OAAO,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;QAChC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,oBAAoB,CAAC,eAAe,EAAE,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;IAClH,CAAC;SAAM,IAAI,OAAO,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;QACrC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,gBAAgB,CAAC,eAAe,CAAC,GAAG,IAAI,CAAC,CAAC;IACjE,CAAC;SAAM,IAAI,OAAO,CAAC,MAAM,KAAK,OAAO,EAAE,CAAC;QACtC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,iBAAiB,CAAC,eAAe,CAAC,GAAG,IAAI,CAAC,CAAC;IAClE,CAAC;SAAM,IAAI,OAAO,CAAC,MAAM,KAAK,OAAO,EAAE,CAAC;QACtC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,iBAAiB,CAAC,eAAe,CAAC,GAAG,IAAI,CAAC,CAAC;IAClE,CAAC;IAED,8BAA8B;IAC9B,IAAI,OAAO,CAAC,MAAM,KAAK,OAAO,EAAE,CAAC;QAC/B,OAAO,UAAU,CAAC,OAAO,CAAC;IAC5B,CAAC;IAED,MAAM,SAAS,GAAG,eAAe,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC;IAC/E,MAAM,WAAW,GAAG,eAAe,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC;IAEnF,IAAI,OAAO,CAAC,MAAM,KAAK,OAAO,IAAI,SAAS,EAAE,CAAC;QAC5C,OAAO,UAAU,CAAC,gBAAgB,CAAC;IACrC,CAAC;IAED,IAAI,OAAO,CAAC,MAAM,KAAK,SAAS,IAAI,CAAC,SAAS,IAAI,WAAW,CAAC,EAAE,CAAC;QAC/D,OAAO,UAAU,CAAC,gBAAgB,CAAC;IACrC,CAAC;IAED,OAAO,UAAU,CAAC,OAAO,CAAC;AAC5B,CAAC"}

package/dist/core/fingerprint.d.ts

@@ -0,0 +1,18 @@
+export interface FingerprintInput {
+    readonly ruleId: string;
+    readonly filePath: string;
+    readonly enclosingScope?: string;
+    readonly nodeKind?: string | number;
+    readonly symbolName?: string;
+    readonly snippet?: string;
+    readonly extraKey?: string;
+}
+/**
+ * Computes a deterministic, semantic-first finding fingerprint.
+ *
+ * Uses SHA-256 digest truncated to 16 hex characters prefixed with "sv_".
+ * Deliberately excludes volatile source line/column numbers to maintain
+ * baseline identity when unrelated code edits occur above the finding.
+ */
+export declare function computeFingerprint(input: FingerprintInput): string;
+//# sourceMappingURL=fingerprint.d.ts.map

package/dist/core/fingerprint.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"fingerprint.d.ts","sourceRoot":"","sources":["../../src/core/fingerprint.ts"],"names":[],"mappings":"AAEA,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;IACpC,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;CAC5B;AAED;;;;;;GAMG;AACH,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,gBAAgB,GAAG,MAAM,CAkBlE"}

package/dist/core/fingerprint.js

@@ -0,0 +1,26 @@
+import { createHash } from "node:crypto";
+/**
+ * Computes a deterministic, semantic-first finding fingerprint.
+ *
+ * Uses SHA-256 digest truncated to 16 hex characters prefixed with "sv_".
+ * Deliberately excludes volatile source line/column numbers to maintain
+ * baseline identity when unrelated code edits occur above the finding.
+ */
+export function computeFingerprint(input) {
+    const normalizedPath = input.filePath.replace(/\\/g, "/");
+    const normalizedSnippet = (input.snippet ?? "")
+        .replace(/\s+/g, " ")
+        .trim();
+    const payload = [
+        input.ruleId,
+        normalizedPath,
+        input.enclosingScope ?? "global",
+        String(input.nodeKind ?? ""),
+        input.symbolName ?? "",
+        normalizedSnippet,
+        input.extraKey ?? "",
+    ].join("::");
+    const hash = createHash("sha256").update(payload, "utf-8").digest("hex").slice(0, 16);
+    return `sv_${hash}`;
+}
+//# sourceMappingURL=fingerprint.js.map

package/dist/core/fingerprint.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"fingerprint.js","sourceRoot":"","sources":["../../src/core/fingerprint.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAYzC;;;;;;GAMG;AACH,MAAM,UAAU,kBAAkB,CAAC,KAAuB;IACxD,MAAM,cAAc,GAAG,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;IAC1D,MAAM,iBAAiB,GAAG,CAAC,KAAK,CAAC,OAAO,IAAI,EAAE,CAAC;SAC5C,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC;SACpB,IAAI,EAAE,CAAC;IAEV,MAAM,OAAO,GAAG;QACd,KAAK,CAAC,MAAM;QACZ,cAAc;QACd,KAAK,CAAC,cAAc,IAAI,QAAQ;QAChC,MAAM,CAAC,KAAK,CAAC,QAAQ,IAAI,EAAE,CAAC;QAC5B,KAAK,CAAC,UAAU,IAAI,EAAE;QACtB,iBAAiB;QACjB,KAAK,CAAC,QAAQ,IAAI,EAAE;KACrB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAEb,MAAM,IAAI,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IACtF,OAAO,MAAM,IAAI,EAAE,CAAC;AACtB,CAAC"}

package/dist/core/paths.d.ts

@@ -0,0 +1,10 @@
+/**
+ * Normalizes any file system path into a standardized POSIX relative path.
+ * Ensures consistent output across Windows and POSIX systems.
+ */
+export declare function normalizePath(filePath: string, relativeTo?: string): string;
+/**
+ * Determines whether a file path has an accepted TypeScript or JavaScript extension.
+ */
+export declare function isSourceFile(filePath: string): boolean;
+//# sourceMappingURL=paths.d.ts.map

package/dist/core/paths.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"paths.d.ts","sourceRoot":"","sources":["../../src/core/paths.ts"],"names":[],"mappings":"AAEA;;;GAGG;AACH,wBAAgB,aAAa,CAAC,QAAQ,EAAE,MAAM,EAAE,UAAU,CAAC,EAAE,MAAM,GAAG,MAAM,CAsB3E;AAED;;GAEG;AACH,wBAAgB,YAAY,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAEtD"}