trimference 0.3.0

package/action.yml

@@ -0,0 +1,182 @@
+name: "Trimference"
+description: "Review LLM application code for missing efficiency safeguards."
+author: "Trimference contributors"
+branding:
+  icon: "wind"
+  color: "green"
+
+inputs:
+  path:
+    description: "Path to scan"
+    required: false
+    default: "."
+  min-severity:
+    description: "Minimum severity to report (low | medium | high)"
+    required: false
+    default: "low"
+  format:
+    description: "Report format (markdown | json)"
+    required: false
+    default: "markdown"
+  comment:
+    description: "Post or update a Trimference comment on pull requests"
+    required: false
+    default: "false"
+  baseline:
+    description: "Optional Trimference baseline path, relative to the scanned path"
+    required: false
+    default: ""
+  fail-on:
+    description: "Fail after reporting at this severity (none | low | medium | high)"
+    required: false
+    default: "none"
+  changed-since:
+    description: "Optional local Git ref; scan only files changed since it"
+    required: false
+    default: ""
+
+runs:
+  using: "composite"
+  steps:
+    - name: Run Trimference
+      id: trimference
+      shell: bash
+      env:
+        INPUT_PATH: ${{ inputs.path }}
+        INPUT_MIN_SEVERITY: ${{ inputs.min-severity }}
+        INPUT_FORMAT: ${{ inputs.format }}
+        INPUT_BASELINE: ${{ inputs.baseline }}
+        INPUT_CHANGED_SINCE: ${{ inputs.changed-since }}
+      run: |
+        REPORT="${RUNNER_TEMP:-.}/trimference-report.md"
+
+        # Always generate a Markdown report file for the job summary and any PR
+        # comment. Markdown reports include every finding.
+        EXTRA_ARGS=()
+        if [ -n "$INPUT_BASELINE" ]; then
+          EXTRA_ARGS+=(--baseline "$INPUT_BASELINE")
+        fi
+        if [ -n "$INPUT_CHANGED_SINCE" ]; then
+          EXTRA_ARGS+=(--changed-since "$INPUT_CHANGED_SINCE")
+        fi
+
+        npx --yes trimference@0.3.0 scan \
+          --path "$INPUT_PATH" \
+          --min-severity "$INPUT_MIN_SEVERITY" \
+          --markdown \
+          --output "$REPORT" \
+          "${EXTRA_ARGS[@]}"
+
+        # The CLI skips writing the file when there are no scannable files;
+        # fall back to a minimal report so the summary and comment steps work.
+        if [ ! -f "$REPORT" ]; then
+          printf '# Trimference Report\n\nNo scannable files were found under `%s`.\n' \
+            "$INPUT_PATH" > "$REPORT"
+        fi
+
+        # Print the report to the workflow log in the requested display format.
+        if [ "$INPUT_FORMAT" = "json" ]; then
+          npx --yes trimference@0.3.0 scan \
+            --path "$INPUT_PATH" \
+            --min-severity "$INPUT_MIN_SEVERITY" \
+            --json \
+            "${EXTRA_ARGS[@]}" || true
+        else
+          cat "$REPORT"
+        fi
+
+        # Publish the report to the job summary.
+        if [ -n "${GITHUB_STEP_SUMMARY:-}" ]; then
+          cat "$REPORT" >> "$GITHUB_STEP_SUMMARY"
+        fi
+
+        echo "report-path=$REPORT" >> "$GITHUB_OUTPUT"
+
+    - name: Post or update PR comment
+      if: ${{ inputs.comment == 'true' && github.event_name == 'pull_request' }}
+      uses: actions/github-script@v7
+      env:
+        REPORT_PATH: ${{ steps.trimference.outputs.report-path }}
+      with:
+        github-token: ${{ github.token }}
+        script: |
+          // Mirrors src/prComment.ts (buildCommentBody). Keep the two in sync.
+          const fs = require("fs");
+          const MARKER = "<!-- trimference-report -->";
+          const LEGACY_MARKER = "<!-- ecolint-ai-report -->";
+          const MAX_LENGTH = 60000;
+
+          const report = fs.readFileSync(process.env.REPORT_PATH, "utf8").trimEnd();
+
+          let body;
+          if (report.length <= MAX_LENGTH) {
+            body = `${MARKER}\n${report}\n`;
+          } else {
+            const slice = report.slice(0, MAX_LENGTH);
+            const lastNewline = slice.lastIndexOf("\n");
+            const truncated = (lastNewline > 0 ? slice.slice(0, lastNewline) : slice).trimEnd();
+            const note =
+              "> ⚠️ This report was truncated to fit a PR comment. " +
+              "See the full Trimference report in the workflow **job summary**.";
+            body = `${MARKER}\n${truncated}\n\n---\n\n${note}\n`;
+          }
+
+          const { owner, repo } = context.repo;
+          const issue_number = context.issue.number;
+
+          const comments = await github.paginate(github.rest.issues.listComments, {
+            owner,
+            repo,
+            issue_number,
+            per_page: 100,
+          });
+          const existing = comments.find(
+            (c) => c.body && (c.body.includes(MARKER) || c.body.includes(LEGACY_MARKER)),
+          );
+
+          if (existing) {
+            await github.rest.issues.updateComment({
+              owner,
+              repo,
+              comment_id: existing.id,
+              body,
+            });
+          } else {
+            await github.rest.issues.createComment({
+              owner,
+              repo,
+              issue_number,
+              body,
+            });
+          }
+
+    - name: PR comment skipped (not a pull request)
+      if: ${{ inputs.comment == 'true' && github.event_name != 'pull_request' }}
+      shell: bash
+      run: |
+        echo "Trimference: PR comments are only available on pull_request events." \
+          "The report was written to the job summary instead."
+
+    - name: Enforce Trimference threshold
+      if: ${{ inputs.fail-on != 'none' }}
+      shell: bash
+      env:
+        INPUT_PATH: ${{ inputs.path }}
+        INPUT_MIN_SEVERITY: ${{ inputs.min-severity }}
+        INPUT_BASELINE: ${{ inputs.baseline }}
+        INPUT_FAIL_ON: ${{ inputs.fail-on }}
+        INPUT_CHANGED_SINCE: ${{ inputs.changed-since }}
+      run: |
+        EXTRA_ARGS=()
+        if [ -n "$INPUT_BASELINE" ]; then
+          EXTRA_ARGS+=(--baseline "$INPUT_BASELINE")
+        fi
+        if [ -n "$INPUT_CHANGED_SINCE" ]; then
+          EXTRA_ARGS+=(--changed-since "$INPUT_CHANGED_SINCE")
+        fi
+        npx --yes trimference@0.3.0 scan \
+          --path "$INPUT_PATH" \
+          --min-severity "$INPUT_MIN_SEVERITY" \
+          --summary \
+          --fail-on "$INPUT_FAIL_ON" \
+          "${EXTRA_ARGS[@]}"

package/dist/baseline.d.ts

@@ -0,0 +1,13 @@
+import type { Finding } from "./types.js";
+export declare const BASELINE_VERSION = 1;
+export type TrimferenceBaseline = {
+    version: typeof BASELINE_VERSION;
+    fingerprints: string[];
+};
+/** @deprecated Use TrimferenceBaseline. */
+export type EcoLintBaseline = TrimferenceBaseline;
+/** Read and validate a Trimference baseline file. */
+export declare function readBaseline(filePath: string): Promise<string[]>;
+/** Write the current findings as accepted baseline debt. */
+export declare function writeBaseline(filePath: string, findings: Finding[]): Promise<void>;
+//# sourceMappingURL=baseline.d.ts.map

package/dist/baseline.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"baseline.d.ts","sourceRoot":"","sources":["../src/baseline.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,YAAY,CAAC;AAG1C,eAAO,MAAM,gBAAgB,IAAI,CAAC;AAElC,MAAM,MAAM,mBAAmB,GAAG;IAChC,OAAO,EAAE,OAAO,gBAAgB,CAAC;IACjC,YAAY,EAAE,MAAM,EAAE,CAAC;CACxB,CAAC;AAEF,2CAA2C;AAC3C,MAAM,MAAM,eAAe,GAAG,mBAAmB,CAAC;AAElD,qDAAqD;AACrD,wBAAsB,YAAY,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CAatE;AAED,4DAA4D;AAC5D,wBAAsB,aAAa,CACjC,QAAQ,EAAE,MAAM,EAChB,QAAQ,EAAE,OAAO,EAAE,GAClB,OAAO,CAAC,IAAI,CAAC,CAMf"}

package/dist/baseline.js

@@ -0,0 +1,23 @@
+import { promises as fs } from "node:fs";
+import { findingFingerprint } from "./scanner.js";
+export const BASELINE_VERSION = 1;
+/** Read and validate a Trimference baseline file. */
+export async function readBaseline(filePath) {
+    const raw = await fs.readFile(filePath, "utf8");
+    const parsed = JSON.parse(raw);
+    if (parsed.version !== BASELINE_VERSION ||
+        !Array.isArray(parsed.fingerprints) ||
+        !parsed.fingerprints.every((item) => typeof item === "string")) {
+        throw new Error(`Invalid baseline at ${filePath}. Expected version ${BASELINE_VERSION}.`);
+    }
+    return parsed.fingerprints;
+}
+/** Write the current findings as accepted baseline debt. */
+export async function writeBaseline(filePath, findings) {
+    const baseline = {
+        version: BASELINE_VERSION,
+        fingerprints: [...new Set(findings.map(findingFingerprint))].sort(),
+    };
+    await fs.writeFile(filePath, `${JSON.stringify(baseline, null, 2)}\n`, "utf8");
+}
+//# sourceMappingURL=baseline.js.map

package/dist/baseline.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"baseline.js","sourceRoot":"","sources":["../src/baseline.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,IAAI,EAAE,EAAE,MAAM,SAAS,CAAC;AAEzC,OAAO,EAAE,kBAAkB,EAAE,MAAM,cAAc,CAAC;AAElD,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,CAAC;AAUlC,qDAAqD;AACrD,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,QAAgB;IACjD,MAAM,GAAG,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IAChD,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAiC,CAAC;IAC/D,IACE,MAAM,CAAC,OAAO,KAAK,gBAAgB;QACnC,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,YAAY,CAAC;QACnC,CAAC,MAAM,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,IAAI,KAAK,QAAQ,CAAC,EAC9D,CAAC;QACD,MAAM,IAAI,KAAK,CACb,uBAAuB,QAAQ,sBAAsB,gBAAgB,GAAG,CACzE,CAAC;IACJ,CAAC;IACD,OAAO,MAAM,CAAC,YAAY,CAAC;AAC7B,CAAC;AAED,4DAA4D;AAC5D,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,QAAgB,EAChB,QAAmB;IAEnB,MAAM,QAAQ,GAAwB;QACpC,OAAO,EAAE,gBAAgB;QACzB,YAAY,EAAE,CAAC,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE;KACpE,CAAC;IACF,MAAM,EAAE,CAAC,SAAS,CAAC,QAAQ,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;AACjF,CAAC"}

package/dist/cli.d.ts

@@ -0,0 +1,3 @@
+#!/usr/bin/env node
+export {};
+//# sourceMappingURL=cli.d.ts.map

package/dist/cli.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cli.d.ts","sourceRoot":"","sources":["../src/cli.ts"],"names":[],"mappings":""}

package/dist/cli.js

@@ -0,0 +1,245 @@
+#!/usr/bin/env node
+import { promises as fs, readFileSync } from "node:fs";
+import { execFile } from "node:child_process";
+import path from "node:path";
+import { promisify } from "node:util";
+import { fileURLToPath } from "node:url";
+import { Command } from "commander";
+import pc from "picocolors";
+import { readBaseline, writeBaseline } from "./baseline.js";
+import { SEVERITY_WEIGHT } from "./impact.js";
+import { CONFIG_FILENAME, SAMPLE_CONFIG, loadConfig } from "./config.js";
+import { scan } from "./scanner.js";
+import { renderTerminalReport, } from "./reporters/terminalReporter.js";
+import { renderJsonReport } from "./reporters/jsonReporter.js";
+import { renderSarifReport } from "./reporters/sarifReporter.js";
+import { renderMarkdownReport } from "./reporters/markdownReporter.js";
+/** Read the package version so `--version` always matches package.json. */
+function readVersion() {
+    try {
+        const pkgPath = fileURLToPath(new URL("../package.json", import.meta.url));
+        const pkg = JSON.parse(readFileSync(pkgPath, "utf8"));
+        return pkg.version ?? "0.0.0";
+    }
+    catch {
+        return "0.0.0";
+    }
+}
+const VALID_SEVERITIES = ["low", "medium", "high"];
+const VALID_PROVIDERS = [
+    "openai",
+    "anthropic",
+    "google",
+    "mistral",
+    "unknown",
+];
+const execFileAsync = promisify(execFile);
+function parseMaxFindings(value) {
+    const n = Number(value);
+    if (!Number.isInteger(n) || n < 0) {
+        throw new Error(`Invalid --max-findings "${value}". Expected a non-negative integer (0 = show all).`);
+    }
+    return n;
+}
+function parseSeverity(value) {
+    const lower = value.toLowerCase();
+    if (!VALID_SEVERITIES.includes(lower)) {
+        throw new Error(`Invalid --min-severity "${value}". Expected one of: ${VALID_SEVERITIES.join(", ")}.`);
+    }
+    return lower;
+}
+function parseFailOn(value) {
+    if (value.toLowerCase() === "none")
+        return "none";
+    return parseSeverity(value);
+}
+function parseProvider(value) {
+    const lower = value.toLowerCase();
+    if (!VALID_PROVIDERS.includes(lower)) {
+        throw new Error(`Invalid --provider "${value}". Expected one of: ${VALID_PROVIDERS.join(", ")}.`);
+    }
+    return lower;
+}
+function renderFor(format, result, terminalOptions = {}) {
+    switch (format) {
+        case "json":
+            return renderJsonReport(result);
+        case "markdown":
+            return renderMarkdownReport(result);
+        case "sarif":
+            return renderSarifReport(result);
+        case "terminal":
+            return renderTerminalReport(result, terminalOptions);
+    }
+}
+async function runScan(options) {
+    const targetPath = options.path ?? ".";
+    // Fail clearly if the path does not exist.
+    const stat = await fs.stat(path.resolve(targetPath)).catch(() => null);
+    if (!stat) {
+        console.error(pc.red(`Error: path does not exist: ${targetPath}`));
+        process.exitCode = 1;
+        return;
+    }
+    // Load optional config; CLI flags take precedence over config values.
+    const config = await loadConfig(targetPath);
+    const minSeverity = options.minSeverity
+        ? parseSeverity(options.minSeverity)
+        : config.minSeverity ?? "low";
+    const provider = options.provider
+        ? parseProvider(options.provider)
+        : config.provider;
+    const failOn = parseFailOn(options.failOn ?? config.failOn ?? "none");
+    const baselineSetting = options.writeBaseline
+        ? undefined
+        : options.baseline ?? config.baseline;
+    const baselinePath = baselineSetting
+        ? path.resolve(stat.isDirectory() ? targetPath : path.dirname(targetPath), baselineSetting)
+        : undefined;
+    const baselineKeys = baselinePath ? await readBaseline(baselinePath) : undefined;
+    const includedPaths = options.changedSince
+        ? await changedPaths(targetPath, stat.isDirectory(), options.changedSince)
+        : undefined;
+    const result = await scan({
+        path: targetPath,
+        minSeverity,
+        provider,
+        ignoredRules: config.ignoredRules,
+        ignoredPaths: config.ignoredPaths,
+        baselineKeys,
+        includedPaths,
+    });
+    if (result.summary.filesScanned === 0) {
+        console.error(pc.yellow(options.changedSince
+            ? `No changed scannable files found since "${options.changedSince}" under "${targetPath}".`
+            : `No scannable files found under "${targetPath}". Supported: .ts, .tsx, .js, .jsx, .mjs, .cjs, .py`));
+        // Not an error exit — just nothing to do.
+        return;
+    }
+    if (options.writeBaseline) {
+        const target = path.resolve(stat.isDirectory() ? targetPath : path.dirname(targetPath), options.writeBaseline);
+        await writeBaseline(target, result.findings);
+        console.log(pc.green(`Trimference: wrote baseline to ${target} (${result.findings.length} findings).`));
+        return;
+    }
+    const format = options.json
+        ? "json"
+        : options.sarif
+            ? "sarif"
+            : options.markdown
+                ? "markdown"
+                : "terminal";
+    // When writing to a file, default to markdown unless json is explicitly set.
+    // File reports (markdown/JSON) always include every finding.
+    if (options.output) {
+        const fileFormat = options.json
+            ? "json"
+            : options.sarif
+                ? "sarif"
+                : "markdown";
+        const content = renderFor(fileFormat, result);
+        await fs.writeFile(options.output, content, "utf8");
+        console.log(pc.green(`Trimference: wrote ${fileFormat} report to ${options.output} ` +
+            `(${result.summary.totalFindings} findings).`));
+        setFailureExitCode(result, failOn);
+        return;
+    }
+    const terminalOptions = {
+        summary: options.summary,
+        maxFindings: options.maxFindings
+            ? parseMaxFindings(options.maxFindings)
+            : undefined,
+    };
+    console.log(renderFor(format, result, terminalOptions));
+    setFailureExitCode(result, failOn);
+}
+async function changedPaths(targetPath, targetIsDirectory, reference) {
+    const absoluteTarget = path.resolve(targetPath);
+    const gitCwd = targetIsDirectory ? absoluteTarget : path.dirname(absoluteTarget);
+    try {
+        const { stdout: rootOutput } = await execFileAsync("git", ["-C", gitCwd, "rev-parse", "--show-toplevel"], { encoding: "utf8" });
+        const repoRoot = rootOutput.trim();
+        const { stdout } = await execFileAsync("git", [
+            "-C",
+            repoRoot,
+            "diff",
+            "--name-only",
+            "--diff-filter=ACMR",
+            `${reference}...HEAD`,
+            "--",
+        ], { encoding: "utf8" });
+        const targetRoot = targetIsDirectory ? absoluteTarget : path.dirname(absoluteTarget);
+        return stdout
+            .split(/\r?\n/)
+            .filter(Boolean)
+            .map((relative) => path.resolve(repoRoot, relative))
+            .filter((absolute) => targetIsDirectory
+            ? !path.relative(targetRoot, absolute).startsWith("..")
+            : absolute === absoluteTarget)
+            .map((absolute) => path.relative(targetRoot, absolute).split(path.sep).join("/"));
+    }
+    catch (error) {
+        const message = error instanceof Error ? error.message : String(error);
+        throw new Error(`Could not determine files changed since "${reference}". ` +
+            `Ensure the Git reference is available locally. ${message}`);
+    }
+}
+function setFailureExitCode(result, failOn) {
+    if (failOn === "none")
+        return;
+    if (result.findings.some((finding) => SEVERITY_WEIGHT[finding.severity] >= SEVERITY_WEIGHT[failOn])) {
+        process.exitCode = 2;
+    }
+}
+async function runInit() {
+    const target = path.resolve(CONFIG_FILENAME);
+    const exists = await fs
+        .stat(target)
+        .then(() => true)
+        .catch(() => false);
+    if (exists) {
+        console.error(pc.yellow(`Config already exists at ${target}. Not overwriting.`));
+        return;
+    }
+    await fs.writeFile(target, SAMPLE_CONFIG, "utf8");
+    console.log(pc.green(`Created ${target}`));
+}
+async function main() {
+    const program = new Command();
+    program
+        .name("trimference")
+        .description("Review LLM application code for missing efficiency safeguards.")
+        .version(readVersion());
+    program
+        .command("scan")
+        .description("Review a codebase for missing AI efficiency safeguards")
+        .option("-p, --path <path>", "Path to scan", ".")
+        .option("--json", "Output findings as JSON")
+        .option("--markdown", "Output findings as Markdown")
+        .option("--sarif", "Output SARIF 2.1.0 for code scanning")
+        .option("-o, --output <file>", "Write the report to a file")
+        .option("--min-severity <level>", "Minimum severity to report (low | medium | high). Overrides config.")
+        .option("--provider <name>", "Provider hint for model suggestions (openai | anthropic | google | mistral). Overrides config.")
+        .option("--max-findings <number>", "Max detailed findings to show in the terminal (0 = show all). Default 8.")
+        .option("--summary", "Show only the high-level summary (no detailed findings).")
+        .option("--baseline <file>", "Hide findings recorded in a baseline file (path is relative to --path).")
+        .option("--write-baseline <file>", "Write current findings to a baseline file relative to --path, then exit.")
+        .option("--fail-on <level>", "Exit 2 when findings meet this severity (none | low | medium | high).")
+        .option("--changed-since <git-ref>", "Scan only files changed since a local Git reference.")
+        .action(async (opts) => {
+        await runScan(opts);
+    });
+    program
+        .command("init")
+        .description(`Create a sample ${CONFIG_FILENAME} config file`)
+        .action(async () => {
+        await runInit();
+    });
+    await program.parseAsync(process.argv);
+}
+main().catch((err) => {
+    const message = err instanceof Error ? err.message : String(err);
+    console.error(pc.red(`Trimference error: ${message}`));
+    process.exitCode = 1;
+});
+//# sourceMappingURL=cli.js.map

package/dist/cli.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cli.js","sourceRoot":"","sources":["../src/cli.ts"],"names":[],"mappings":";AACA,OAAO,EAAE,QAAQ,IAAI,EAAE,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACvD,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAC9C,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AACtC,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,MAAM,YAAY,CAAC;AAC5B,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AAC5D,OAAO,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAC9C,OAAO,EAAE,eAAe,EAAE,aAAa,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzE,OAAO,EAAE,IAAI,EAAE,MAAM,cAAc,CAAC;AACpC,OAAO,EACL,oBAAoB,GAErB,MAAM,iCAAiC,CAAC;AACzC,OAAO,EAAE,gBAAgB,EAAE,MAAM,6BAA6B,CAAC;AAC/D,OAAO,EAAE,iBAAiB,EAAE,MAAM,8BAA8B,CAAC;AACjE,OAAO,EAAE,oBAAoB,EAAE,MAAM,iCAAiC,CAAC;AAIvE,2EAA2E;AAC3E,SAAS,WAAW;IAClB,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,aAAa,CAAC,IAAI,GAAG,CAAC,iBAAiB,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;QAC3E,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,OAAO,EAAE,MAAM,CAAC,CAAyB,CAAC;QAC9E,OAAO,GAAG,CAAC,OAAO,IAAI,OAAO,CAAC;IAChC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,OAAO,CAAC;IACjB,CAAC;AACH,CAAC;AAED,MAAM,gBAAgB,GAAe,CAAC,KAAK,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC;AAC/D,MAAM,eAAe,GAAe;IAClC,QAAQ;IACR,WAAW;IACX,QAAQ;IACR,SAAS;IACT,SAAS;CACV,CAAC;AAkBF,MAAM,aAAa,GAAG,SAAS,CAAC,QAAQ,CAAC,CAAC;AAE1C,SAAS,gBAAgB,CAAC,KAAa;IACrC,MAAM,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;IACxB,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;QAClC,MAAM,IAAI,KAAK,CACb,2BAA2B,KAAK,oDAAoD,CACrF,CAAC;IACJ,CAAC;IACD,OAAO,CAAC,CAAC;AACX,CAAC;AAED,SAAS,aAAa,CAAC,KAAa;IAClC,MAAM,KAAK,GAAG,KAAK,CAAC,WAAW,EAAE,CAAC;IAClC,IAAI,CAAC,gBAAgB,CAAC,QAAQ,CAAC,KAAiB,CAAC,EAAE,CAAC;QAClD,MAAM,IAAI,KAAK,CACb,2BAA2B,KAAK,uBAAuB,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CACtF,CAAC;IACJ,CAAC;IACD,OAAO,KAAiB,CAAC;AAC3B,CAAC;AAED,SAAS,WAAW,CAAC,KAAa;IAChC,IAAI,KAAK,CAAC,WAAW,EAAE,KAAK,MAAM;QAAE,OAAO,MAAM,CAAC;IAClD,OAAO,aAAa,CAAC,KAAK,CAAC,CAAC;AAC9B,CAAC;AAED,SAAS,aAAa,CAAC,KAAa;IAClC,MAAM,KAAK,GAAG,KAAK,CAAC,WAAW,EAAE,CAAC;IAClC,IAAI,CAAC,eAAe,CAAC,QAAQ,CAAC,KAAiB,CAAC,EAAE,CAAC;QACjD,MAAM,IAAI,KAAK,CACb,uBAAuB,KAAK,uBAAuB,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CACjF,CAAC;IACJ,CAAC;IACD,OAAO,KAAiB,CAAC;AAC3B,CAAC;AAID,SAAS,SAAS,CAChB,MAAc,EACd,MAAkB,EAClB,kBAAyC,EAAE;IAE3C,QAAQ,MAAM,EAAE,CAAC;QACf,KAAK,MAAM;YACT,OAAO,gBAAgB,CAAC,MAAM,CAAC,CAAC;QAClC,KAAK,UAAU;YACb,OAAO,oBAAoB,CAAC,MAAM,CAAC,CAAC;QACtC,KAAK,OAAO;YACV,OAAO,iBAAiB,CAAC,MAAM,CAAC,CAAC;QACnC,KAAK,UAAU;YACb,OAAO,oBAAoB,CAAC,MAAM,EAAE,eAAe,CAAC,CAAC;IACzD,CAAC;AACH,CAAC;AAED,KAAK,UAAU,OAAO,CAAC,OAAuB;IAC5C,MAAM,UAAU,GAAG,OAAO,CAAC,IAAI,IAAI,GAAG,CAAC;IAEvC,2CAA2C;IAC3C,MAAM,IAAI,GAAG,MAAM,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;IACvE,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,GAAG,CAAC,+BAA+B,UAAU,EAAE,CAAC,CAAC,CAAC;QACnE,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;QACrB,OAAO;IACT,CAAC;IAED,sEAAsE;IACtE,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,UAAU,CAAC,CAAC;IAC5C,MAAM,WAAW,GAAG,OAAO,CAAC,WAAW;QACrC,CAAC,CAAC,aAAa,CAAC,OAAO,CAAC,WAAW,CAAC;QACpC,CAAC,CAAC,MAAM,CAAC,WAAW,IAAI,KAAK,CAAC;IAChC,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ;QAC/B,CAAC,CAAC,aAAa,CAAC,OAAO,CAAC,QAAQ,CAAC;QACjC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC;IACpB,MAAM,MAAM,GAAG,WAAW,CAAC,OAAO,CAAC,MAAM,IAAI,MAAM,CAAC,MAAM,IAAI,MAAM,CAAC,CAAC;IACtE,MAAM,eAAe,GAAG,OAAO,CAAC,aAAa;QAC3C,CAAC,CAAC,SAAS;QACX,CAAC,CAAC,OAAO,CAAC,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC;IACxC,MAAM,YAAY,GAAG,eAAe;QAClC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,eAAe,CAAC;QAC3F,CAAC,CAAC,SAAS,CAAC;IACd,MAAM,YAAY,GAAG,YAAY,CAAC,CAAC,CAAC,MAAM,YAAY,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IACjF,MAAM,aAAa,GAAG,OAAO,CAAC,YAAY;QACxC,CAAC,CAAC,MAAM,YAAY,CAAC,UAAU,EAAE,IAAI,CAAC,WAAW,EAAE,EAAE,OAAO,CAAC,YAAY,CAAC;QAC1E,CAAC,CAAC,SAAS,CAAC;IAEd,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC;QACxB,IAAI,EAAE,UAAU;QAChB,WAAW;QACX,QAAQ;QACR,YAAY,EAAE,MAAM,CAAC,YAAY;QACjC,YAAY,EAAE,MAAM,CAAC,YAAY;QACjC,YAAY;QACZ,aAAa;KACd,CAAC,CAAC;IAEH,IAAI,MAAM,CAAC,OAAO,CAAC,YAAY,KAAK,CAAC,EAAE,CAAC;QACtC,OAAO,CAAC,KAAK,CACX,EAAE,CAAC,MAAM,CACP,OAAO,CAAC,YAAY;YAClB,CAAC,CAAC,2CAA2C,OAAO,CAAC,YAAY,YAAY,UAAU,IAAI;YAC3F,CAAC,CAAC,mCAAmC,UAAU,qDAAqD,CACvG,CACF,CAAC;QACF,0CAA0C;QAC1C,OAAO;IACT,CAAC;IAED,IAAI,OAAO,CAAC,aAAa,EAAE,CAAC;QAC1B,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CACzB,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,EAC1D,OAAO,CAAC,aAAa,CACtB,CAAC;QACF,MAAM,aAAa,CAAC,MAAM,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC;QAC7C,OAAO,CAAC,GAAG,CACT,EAAE,CAAC,KAAK,CACN,kCAAkC,MAAM,KAAK,MAAM,CAAC,QAAQ,CAAC,MAAM,aAAa,CACjF,CACF,CAAC;QACF,OAAO;IACT,CAAC;IAED,MAAM,MAAM,GAAW,OAAO,CAAC,IAAI;QACjC,CAAC,CAAC,MAAM;QACR,CAAC,CAAC,OAAO,CAAC,KAAK;YACb,CAAC,CAAC,OAAO;YACX,CAAC,CAAC,OAAO,CAAC,QAAQ;gBAChB,CAAC,CAAC,UAAU;gBACZ,CAAC,CAAC,UAAU,CAAC;IAEjB,6EAA6E;IAC7E,6DAA6D;IAC7D,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;QACnB,MAAM,UAAU,GAAW,OAAO,CAAC,IAAI;YACrC,CAAC,CAAC,MAAM;YACR,CAAC,CAAC,OAAO,CAAC,KAAK;gBACb,CAAC,CAAC,OAAO;gBACT,CAAC,CAAC,UAAU,CAAC;QACjB,MAAM,OAAO,GAAG,SAAS,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;QAC9C,MAAM,EAAE,CAAC,SAAS,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;QACpD,OAAO,CAAC,GAAG,CACT,EAAE,CAAC,KAAK,CACN,sBAAsB,UAAU,cAAc,OAAO,CAAC,MAAM,GAAG;YAC7D,IAAI,MAAM,CAAC,OAAO,CAAC,aAAa,aAAa,CAChD,CACF,CAAC;QACF,kBAAkB,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QACnC,OAAO;IACT,CAAC;IAED,MAAM,eAAe,GAA0B;QAC7C,OAAO,EAAE,OAAO,CAAC,OAAO;QACxB,WAAW,EAAE,OAAO,CAAC,WAAW;YAC9B,CAAC,CAAC,gBAAgB,CAAC,OAAO,CAAC,WAAW,CAAC;YACvC,CAAC,CAAC,SAAS;KACd,CAAC;IAEF,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,MAAM,EAAE,MAAM,EAAE,eAAe,CAAC,CAAC,CAAC;IACxD,kBAAkB,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;AACrC,CAAC;AAED,KAAK,UAAU,YAAY,CACzB,UAAkB,EAClB,iBAA0B,EAC1B,SAAiB;IAEjB,MAAM,cAAc,GAAG,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;IAChD,MAAM,MAAM,GAAG,iBAAiB,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC;IACjF,IAAI,CAAC;QACH,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,GAAG,MAAM,aAAa,CAChD,KAAK,EACL,CAAC,IAAI,EAAE,MAAM,EAAE,WAAW,EAAE,iBAAiB,CAAC,EAC9C,EAAE,QAAQ,EAAE,MAAM,EAAE,CACrB,CAAC;QACF,MAAM,QAAQ,GAAG,UAAU,CAAC,IAAI,EAAE,CAAC;QACnC,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,aAAa,CACpC,KAAK,EACL;YACE,IAAI;YACJ,QAAQ;YACR,MAAM;YACN,aAAa;YACb,oBAAoB;YACpB,GAAG,SAAS,SAAS;YACrB,IAAI;SACL,EACD,EAAE,QAAQ,EAAE,MAAM,EAAE,CACrB,CAAC;QACF,MAAM,UAAU,GAAG,iBAAiB,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC;QACrF,OAAO,MAAM;aACV,KAAK,CAAC,OAAO,CAAC;aACd,MAAM,CAAC,OAAO,CAAC;aACf,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;aACnD,MAAM,CAAC,CAAC,QAAQ,EAAE,EAAE,CACnB,iBAAiB;YACf,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC;YACvD,CAAC,CAAC,QAAQ,KAAK,cAAc,CAChC;aACA,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;IACtF,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACvE,MAAM,IAAI,KAAK,CACb,4CAA4C,SAAS,KAAK;YACxD,kDAAkD,OAAO,EAAE,CAC9D,CAAC;IACJ,CAAC;AACH,CAAC;AAED,SAAS,kBAAkB,CACzB,MAAkB,EAClB,MAAyB;IAEzB,IAAI,MAAM,KAAK,MAAM;QAAE,OAAO;IAC9B,IAAI,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CACnC,eAAe,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,eAAe,CAAC,MAAM,CAAC,CAC7D,EAAE,CAAC;QACF,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;IACvB,CAAC;AACH,CAAC;AAED,KAAK,UAAU,OAAO;IACpB,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC;IAC7C,MAAM,MAAM,GAAG,MAAM,EAAE;SACpB,IAAI,CAAC,MAAM,CAAC;SACZ,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC;SAChB,KAAK,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,CAAC;IACtB,IAAI,MAAM,EAAE,CAAC;QACX,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,MAAM,CAAC,4BAA4B,MAAM,oBAAoB,CAAC,CAAC,CAAC;QACjF,OAAO;IACT,CAAC;IACD,MAAM,EAAE,CAAC,SAAS,CAAC,MAAM,EAAE,aAAa,EAAE,MAAM,CAAC,CAAC;IAClD,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,KAAK,CAAC,WAAW,MAAM,EAAE,CAAC,CAAC,CAAC;AAC7C,CAAC;AAED,KAAK,UAAU,IAAI;IACjB,MAAM,OAAO,GAAG,IAAI,OAAO,EAAE,CAAC;IAE9B,OAAO;SACJ,IAAI,CAAC,aAAa,CAAC;SACnB,WAAW,CAAC,gEAAgE,CAAC;SAC7E,OAAO,CAAC,WAAW,EAAE,CAAC,CAAC;IAE1B,OAAO;SACJ,OAAO,CAAC,MAAM,CAAC;SACf,WAAW,CAAC,wDAAwD,CAAC;SACrE,MAAM,CAAC,mBAAmB,EAAE,cAAc,EAAE,GAAG,CAAC;SAChD,MAAM,CAAC,QAAQ,EAAE,yBAAyB,CAAC;SAC3C,MAAM,CAAC,YAAY,EAAE,6BAA6B,CAAC;SACnD,MAAM,CAAC,SAAS,EAAE,sCAAsC,CAAC;SACzD,MAAM,CAAC,qBAAqB,EAAE,4BAA4B,CAAC;SAC3D,MAAM,CACL,wBAAwB,EACxB,qEAAqE,CACtE;SACA,MAAM,CACL,mBAAmB,EACnB,gGAAgG,CACjG;SACA,MAAM,CACL,yBAAyB,EACzB,0EAA0E,CAC3E;SACA,MAAM,CAAC,WAAW,EAAE,0DAA0D,CAAC;SAC/E,MAAM,CACL,mBAAmB,EACnB,yEAAyE,CAC1E;SACA,MAAM,CACL,yBAAyB,EACzB,0EAA0E,CAC3E;SACA,MAAM,CACL,mBAAmB,EACnB,uEAAuE,CACxE;SACA,MAAM,CACL,2BAA2B,EAC3B,sDAAsD,CACvD;SACA,MAAM,CAAC,KAAK,EAAE,IAAoB,EAAE,EAAE;QACrC,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;IACtB,CAAC,CAAC,CAAC;IAEL,OAAO;SACJ,OAAO,CAAC,MAAM,CAAC;SACf,WAAW,CAAC,mBAAmB,eAAe,cAAc,CAAC;SAC7D,MAAM,CAAC,KAAK,IAAI,EAAE;QACjB,MAAM,OAAO,EAAE,CAAC;IAClB,CAAC,CAAC,CAAC;IAEL,MAAM,OAAO,CAAC,UAAU,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;AACzC,CAAC;AAED,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,GAAY,EAAE,EAAE;IAC5B,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IACjE,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,GAAG,CAAC,sBAAsB,OAAO,EAAE,CAAC,CAAC,CAAC;IACvD,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;AACvB,CAAC,CAAC,CAAC"}

package/dist/config.d.ts

@@ -0,0 +1,31 @@
+import type { Severity } from "./types.js";
+import type { Provider } from "./models.js";
+/**
+ * Optional on-disk config. The CLI works without it; when present it provides
+ * defaults that CLI flags override.
+ */
+export type TrimferenceFileConfig = {
+    minSeverity?: Severity;
+    ignoredRules?: string[];
+    ignoredPaths?: string[];
+    provider?: Provider;
+    baseline?: string;
+    failOn?: Severity | "none";
+};
+/** @deprecated Use TrimferenceFileConfig. */
+export type EcoLintFileConfig = TrimferenceFileConfig;
+export declare const SCANNABLE_EXTENSIONS: string[];
+export declare const IGNORE_GLOBS: string[];
+export declare const DEFAULT_CONFIG: Required<TrimferenceFileConfig>;
+export declare const CONFIG_FILENAME = "trimference.config.json";
+export declare const LEGACY_CONFIG_FILENAME = "ecolint.config.json";
+/** Contents written by `trimference init`. */
+export declare const SAMPLE_CONFIG = "{\n  \"minSeverity\": \"low\",\n  \"ignoredRules\": [],\n  \"ignoredPaths\": [],\n  \"provider\": \"openai\",\n  \"failOn\": \"none\"\n}\n";
+/**
+ * Load `trimference.config.json`, searching the scan path first and then the
+ * current working directory. The former `ecolint.config.json` name is accepted
+ * as a migration fallback. Returns an empty object (not defaults) when no file
+ * exists, so callers can tell "unset" from "set to default".
+ */
+export declare function loadConfig(scanPath: string): Promise<TrimferenceFileConfig>;
+//# sourceMappingURL=config.d.ts.map

package/dist/config.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAC;AAC3C,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AAE5C;;;GAGG;AACH,MAAM,MAAM,qBAAqB,GAAG;IAClC,WAAW,CAAC,EAAE,QAAQ,CAAC;IACvB,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;IACxB,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;IACxB,QAAQ,CAAC,EAAE,QAAQ,CAAC;IACpB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,MAAM,CAAC,EAAE,QAAQ,GAAG,MAAM,CAAC;CAC5B,CAAC;AAEF,6CAA6C;AAC7C,MAAM,MAAM,iBAAiB,GAAG,qBAAqB,CAAC;AAEtD,eAAO,MAAM,oBAAoB,UAQhC,CAAC;AAEF,eAAO,MAAM,YAAY,UAWxB,CAAC;AAEF,eAAO,MAAM,cAAc,EAAE,QAAQ,CAAC,qBAAqB,CAO1D,CAAC;AAEF,eAAO,MAAM,eAAe,4BAA4B,CAAC;AACzD,eAAO,MAAM,sBAAsB,wBAAwB,CAAC;AAE5D,8CAA8C;AAC9C,eAAO,MAAM,aAAa,+IAOzB,CAAC;AAWF;;;;;GAKG;AACH,wBAAsB,UAAU,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,qBAAqB,CAAC,CAmBjF"}

package/dist/config.js

@@ -0,0 +1,127 @@
+import { promises as fs } from "node:fs";
+import path from "node:path";
+export const SCANNABLE_EXTENSIONS = [
+    ".ts",
+    ".tsx",
+    ".js",
+    ".jsx",
+    ".mjs",
+    ".cjs",
+    ".py",
+];
+export const IGNORE_GLOBS = [
+    "**/node_modules/**",
+    "**/.git/**",
+    "**/dist/**",
+    "**/build/**",
+    "**/.next/**",
+    "**/coverage/**",
+    "**/*.lock",
+    "**/package-lock.json",
+    "**/pnpm-lock.yaml",
+    "**/yarn.lock",
+];
+export const DEFAULT_CONFIG = {
+    minSeverity: "low",
+    ignoredRules: [],
+    ignoredPaths: [],
+    provider: "unknown",
+    baseline: "",
+    failOn: "none",
+};
+export const CONFIG_FILENAME = "trimference.config.json";
+export const LEGACY_CONFIG_FILENAME = "ecolint.config.json";
+/** Contents written by `trimference init`. */
+export const SAMPLE_CONFIG = `{
+  "minSeverity": "low",
+  "ignoredRules": [],
+  "ignoredPaths": [],
+  "provider": "openai",
+  "failOn": "none"
+}
+`;
+const VALID_SEVERITIES = ["low", "medium", "high"];
+const VALID_PROVIDERS = [
+    "openai",
+    "anthropic",
+    "google",
+    "mistral",
+    "unknown",
+];
+/**
+ * Load `trimference.config.json`, searching the scan path first and then the
+ * current working directory. The former `ecolint.config.json` name is accepted
+ * as a migration fallback. Returns an empty object (not defaults) when no file
+ * exists, so callers can tell "unset" from "set to default".
+ */
+export async function loadConfig(scanPath) {
+    const candidates = [...new Set([
+            path.resolve(scanPath, CONFIG_FILENAME),
+            path.resolve(scanPath, LEGACY_CONFIG_FILENAME),
+            path.resolve(process.cwd(), CONFIG_FILENAME),
+            path.resolve(process.cwd(), LEGACY_CONFIG_FILENAME),
+        ])];
+    for (const candidate of candidates) {
+        const raw = await fs.readFile(candidate, "utf8").catch(() => null);
+        if (raw === null)
+            continue;
+        try {
+            return normalizeConfig(JSON.parse(raw), candidate);
+        }
+        catch (err) {
+            const message = err instanceof Error ? err.message : String(err);
+            throw new Error(`Invalid config at ${candidate}: ${message}`);
+        }
+    }
+    return {};
+}
+function normalizeConfig(input, source) {
+    if (typeof input !== "object" || input === null) {
+        throw new Error("expected a JSON object");
+    }
+    const obj = input;
+    const config = {};
+    if (obj.minSeverity !== undefined) {
+        if (!VALID_SEVERITIES.includes(obj.minSeverity)) {
+            throw new Error(`minSeverity must be one of ${VALID_SEVERITIES.join(", ")}`);
+        }
+        config.minSeverity = obj.minSeverity;
+    }
+    if (obj.ignoredRules !== undefined) {
+        if (!isStringArray(obj.ignoredRules)) {
+            throw new Error("ignoredRules must be an array of strings");
+        }
+        config.ignoredRules = obj.ignoredRules;
+    }
+    if (obj.ignoredPaths !== undefined) {
+        if (!isStringArray(obj.ignoredPaths)) {
+            throw new Error("ignoredPaths must be an array of strings");
+        }
+        config.ignoredPaths = obj.ignoredPaths;
+    }
+    if (obj.provider !== undefined) {
+        if (!VALID_PROVIDERS.includes(obj.provider)) {
+            throw new Error(`provider must be one of ${VALID_PROVIDERS.join(", ")}`);
+        }
+        config.provider = obj.provider;
+    }
+    if (obj.baseline !== undefined) {
+        if (typeof obj.baseline !== "string") {
+            throw new Error("baseline must be a string path");
+        }
+        config.baseline = obj.baseline;
+    }
+    if (obj.failOn !== undefined) {
+        if (obj.failOn !== "none" &&
+            !VALID_SEVERITIES.includes(obj.failOn)) {
+            throw new Error(`failOn must be none or one of ${VALID_SEVERITIES.join(", ")}`);
+        }
+        config.failOn = obj.failOn;
+    }
+    void source;
+    return config;
+}
+function isStringArray(value) {
+    return Array.isArray(value) && value.every((v) => typeof v === "string");
+}
+//# sourceMappingURL=config.js.map