diffimpactscout 0.3.0__tar.gz → 0.4.0__tar.gz

{diffimpactscout-0.3.0/src/diffimpactscout.egg-info → diffimpactscout-0.4.0}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: diffimpactscout
-Version: 0.3.0
+Version: 0.4.0
 Summary: Incremental pre-push guard and AST blast-radius impact analyzer for git repositories.
 Author: DiffImpactScout contributors
 License: MIT
@@ -66,11 +66,11 @@ diffimpactscout guard
 # 3. Analyze the blast radius of your change
 diffimpactscout impact
 
-# 4. Run the guard automatically on every push
+# 4. Install the pre-push hook (guard + impact report by default)
 diffimpactscout install-hooks
 ```
 
-`init` accepts `--profile generic|django|fastapi|python|frontend` to seed profile-appropriate settings. `install-hooks` detects the stack automatically (see [Supported setups](#supported-setups)).
+`init` accepts `--profile generic|django|fastapi|python|frontend` to seed profile-appropriate settings. `install-hooks` detects the stack automatically (see [Supported setups](#supported-setups)) and, unless the config's `mode` says otherwise, the hook runs both the guard and the impact report on every push.
 
 ## Supported setups
 
@@ -120,15 +120,29 @@ Analyzes the blast radius of the change-set. In an interactive terminal it print
 | `--fast` | Skip template and frontend scanning; limit Python scanning to the changed files plus import-linked files. |
 | `--json` | Emit the report as JSON (`{changed_count, rows, unresolved}`) instead of a markdown table. |
 
+### `diffimpactscout guard-and-impact-check`
+
+Runs the `guard` checks first, then always falls through to the `impact` blast-radius report so the developer sees the guard verdict and the affected areas together. This is the default pre-push hook scope, so one push runs the whole workflow. The command exits non-zero when the guard blocks in strict mode (or when impact is set to block), so a failing guard still surfaces the impact report but the push is rejected.
+
+| Flag | Description |
+| --- | --- |
+| `--staged` | Restrict both the guard and the impact analysis to staged files. |
+| `--fast` | Passes through to `impact` (skip template/frontend scanning). |
+| `--json` | Passes through to `impact` (emit the report as JSON). |
+
+### `diffimpactscout dependency-check`
+
+Verifies that every external tool referenced by the configured guard checks is on `PATH` (`ruff`, `eslint`, `prettier`). Missing tools print an install hint and exit `1`; a clean run prints an OK banner and exits `0`. `install-hooks` also runs a non-blocking version of this check after installing a hook, warning about missing tools only when stdin is a terminal.
+
 ### `diffimpactscout check CHECK_ID [files...]`
 
 Runs a single check by id (see [Checks reference](#checks-reference)). With no file arguments it runs against the change-set.
 
 ### `diffimpactscout install-hooks`
 
-Installs a `pre-push` git hook that runs `diffimpactscout guard` on push.
+Installs a `pre-push` git hook that runs the configured hook scope on push: `diffimpactscout guard-and-impact-check` by default (guard checks then the impact blast-radius report), or `diffimpactscout guard` when `mode` is `pre-push`.
 
-On first run the command detects the stack, prints a preview of the `.diffimpactscout.json` it would write, and (when stdin is a terminal) asks for confirmation. Answer `n` to override profile, blocking mode, extra checks, and impact. Use `--yes` in CI to skip prompts, `--profile` and `--blocking` to pre-select settings, and `--reconfigure` to rewrite an existing config. Without `--reconfigure` an existing config is left untouched.
+On first run the command detects the stack, prints a preview of the `.diffimpactscout.json` it would write, and (when stdin is a terminal) asks for confirmation. Answer `n` to override profile, blocking mode, extra checks, impact, and the hook scope (mode). Use `--yes` in CI to skip prompts, `--profile` and `--blocking` to pre-select settings, and `--reconfigure` to rewrite an existing config. Without `--reconfigure` an existing config is left untouched (and its mode is reused for the hook).
 
 | Flag | Description |
 | --- | --- |
@@ -139,6 +153,8 @@ On first run the command detects the stack, prints a preview of the `.diffimpact
 | `--force` | Overwrite an existing `pre-push` hook that DiffImpactScout did not install. |
 | `--uninstall` | Remove the DiffImpactScout `pre-push` hook. |
 
+After a hook is installed a non-blocking dependency check runs: tools referenced by the guard checks (`ruff`, `eslint`, `prettier`) that are missing on `PATH` are reported with install hints, so e.g. a first-time `ruff` install is prompted instead of silently degrading the checks.
+
 ### `diffimpactscout --version`
 
 Prints the installed version.
@@ -150,7 +166,7 @@ DiffImpactScout is configured by a `.diffimpactscout.json` file in the repositor
 ```json
 {
   "version": 1,
-  "mode": "pre-push",
+  "mode": "guard-and-impact-check",
   "ignore_paths": [
     "**/node_modules/**",
     "**/venv/**",
@@ -189,6 +205,7 @@ DiffImpactScout is configured by a `.diffimpactscout.json` file in the repositor
 
 | Section | Key | Meaning |
 | --- | --- | --- |
+| top-level | `mode` | Hook scope: `guard-and-impact-check` (default, runs the guard then the impact report on every push) or `pre-push` (guard only). |
 | top-level | `ignore_paths` | Glob patterns (matching any path suffix) excluded from all checks and from impact scanning. |
 | top-level | `use_gitignore` | When `true`, also excludes paths ignored by `git check-ignore`. |
 | `guard` | `checks` | Ordered list of check entries; each `{"id": ...}` may add `args`, `blocking`, and `always_block` overrides. |
@@ -226,12 +243,12 @@ External checks run `command` (each `{file}` placeholder is replaced with the fi
 
 ## Pre-push hook
 
-`diffimpactscout install-hooks` writes a `pre-push` hook that runs `diffimpactscout guard` on every push.
+`diffimpactscout install-hooks` writes a `pre-push` hook that runs the configured hook scope on every push — `guard-and-impact-check` by default (guard checks plus the impact report), `guard` only when `mode` is `pre-push`.
 
 - The hook directory is resolved from `git rev-parse --git-common-dir` and honors `core.hooksPath`.
 - The hook script is marked with `# diffimpactscout pre-push hook`. On `--uninstall` (or a re-install with `--force`), only a hook carrying this marker is touched.
 - If a `pre-push` hook already exists without the marker, installation refuses with a `use --force to overwrite` message.
-- The hook runs `diffimpactscout guard`; if the tool is not found, it prints a notice and exits `0`, so pushes are never blocked by a missing install.
+- If the tool is not found, the hook prints a notice and exits `0`, so pushes are never blocked by a missing install.
 - Because the guard is warn-by-default, an installed hook reports issues without blocking the push unless you enable strict mode.
 
 ### Environment variables
@@ -248,7 +265,7 @@ External checks run `command` (each `{file}` placeholder is replaced with the fi
 The `impact` command answers: if I push these changes, what else could break?
 
 1. It parses the change-set (`git diff --find-renames`) and extracts the Python entities you added, removed, or renamed: classes, functions, methods, module fields, and class fields.
-2. It builds an AST symbol map of every tracked Python file in the repo (skipping excluded paths), cached in `impact.cache_file`, and finds every reference to the changed symbols. Lookup kind follows the entity: class fields match attribute loads, methods match name and attribute loads, functions/classes also match imports.
+2. It builds an AST symbol map of every tracked Python file in the repo (skipping excluded paths), cached in `impact.cache_file`, and finds every reference to the changed symbols. Lookup kind follows the entity: class fields match attribute loads, methods match name and attribute loads, functions/classes also match imports. To keep the blast radius honest, entities are scoped to the diff hunks that actually changed (a one-line tweak inside a large function does not report the whole function), and same-name references in other files are only reported when the file imports the name from the changed module (`views.orders` counts, a bare `orders` in an unrelated file does not).
 3. Depending on the profile it extracts routes:
    - `django`: `path()`/`re_path()`/`url()` entries in `urls_globs` that carry a `name=`.
    - `fastapi`: `get`/`post`/`put`/`delete`/`patch`/`options` decorators on `router`/`app`-style objects in `urls_globs`.

{diffimpactscout-0.3.0 → diffimpactscout-0.4.0}/README.md

@@ -49,11 +49,11 @@ diffimpactscout guard
 # 3. Analyze the blast radius of your change
 diffimpactscout impact
 
-# 4. Run the guard automatically on every push
+# 4. Install the pre-push hook (guard + impact report by default)
 diffimpactscout install-hooks
 ```
 
-`init` accepts `--profile generic|django|fastapi|python|frontend` to seed profile-appropriate settings. `install-hooks` detects the stack automatically (see [Supported setups](#supported-setups)).
+`init` accepts `--profile generic|django|fastapi|python|frontend` to seed profile-appropriate settings. `install-hooks` detects the stack automatically (see [Supported setups](#supported-setups)) and, unless the config's `mode` says otherwise, the hook runs both the guard and the impact report on every push.
 
 ## Supported setups
 
@@ -103,15 +103,29 @@ Analyzes the blast radius of the change-set. In an interactive terminal it print
 | `--fast` | Skip template and frontend scanning; limit Python scanning to the changed files plus import-linked files. |
 | `--json` | Emit the report as JSON (`{changed_count, rows, unresolved}`) instead of a markdown table. |
 
+### `diffimpactscout guard-and-impact-check`
+
+Runs the `guard` checks first, then always falls through to the `impact` blast-radius report so the developer sees the guard verdict and the affected areas together. This is the default pre-push hook scope, so one push runs the whole workflow. The command exits non-zero when the guard blocks in strict mode (or when impact is set to block), so a failing guard still surfaces the impact report but the push is rejected.
+
+| Flag | Description |
+| --- | --- |
+| `--staged` | Restrict both the guard and the impact analysis to staged files. |
+| `--fast` | Passes through to `impact` (skip template/frontend scanning). |
+| `--json` | Passes through to `impact` (emit the report as JSON). |
+
+### `diffimpactscout dependency-check`
+
+Verifies that every external tool referenced by the configured guard checks is on `PATH` (`ruff`, `eslint`, `prettier`). Missing tools print an install hint and exit `1`; a clean run prints an OK banner and exits `0`. `install-hooks` also runs a non-blocking version of this check after installing a hook, warning about missing tools only when stdin is a terminal.
+
 ### `diffimpactscout check CHECK_ID [files...]`
 
 Runs a single check by id (see [Checks reference](#checks-reference)). With no file arguments it runs against the change-set.
 
 ### `diffimpactscout install-hooks`
 
-Installs a `pre-push` git hook that runs `diffimpactscout guard` on push.
+Installs a `pre-push` git hook that runs the configured hook scope on push: `diffimpactscout guard-and-impact-check` by default (guard checks then the impact blast-radius report), or `diffimpactscout guard` when `mode` is `pre-push`.
 
-On first run the command detects the stack, prints a preview of the `.diffimpactscout.json` it would write, and (when stdin is a terminal) asks for confirmation. Answer `n` to override profile, blocking mode, extra checks, and impact. Use `--yes` in CI to skip prompts, `--profile` and `--blocking` to pre-select settings, and `--reconfigure` to rewrite an existing config. Without `--reconfigure` an existing config is left untouched.
+On first run the command detects the stack, prints a preview of the `.diffimpactscout.json` it would write, and (when stdin is a terminal) asks for confirmation. Answer `n` to override profile, blocking mode, extra checks, impact, and the hook scope (mode). Use `--yes` in CI to skip prompts, `--profile` and `--blocking` to pre-select settings, and `--reconfigure` to rewrite an existing config. Without `--reconfigure` an existing config is left untouched (and its mode is reused for the hook).
 
 | Flag | Description |
 | --- | --- |
@@ -122,6 +136,8 @@ On first run the command detects the stack, prints a preview of the `.diffimpact
 | `--force` | Overwrite an existing `pre-push` hook that DiffImpactScout did not install. |
 | `--uninstall` | Remove the DiffImpactScout `pre-push` hook. |
 
+After a hook is installed a non-blocking dependency check runs: tools referenced by the guard checks (`ruff`, `eslint`, `prettier`) that are missing on `PATH` are reported with install hints, so e.g. a first-time `ruff` install is prompted instead of silently degrading the checks.
+
 ### `diffimpactscout --version`
 
 Prints the installed version.
@@ -133,7 +149,7 @@ DiffImpactScout is configured by a `.diffimpactscout.json` file in the repositor
 ```json
 {
   "version": 1,
-  "mode": "pre-push",
+  "mode": "guard-and-impact-check",
   "ignore_paths": [
     "**/node_modules/**",
     "**/venv/**",
@@ -172,6 +188,7 @@ DiffImpactScout is configured by a `.diffimpactscout.json` file in the repositor
 
 | Section | Key | Meaning |
 | --- | --- | --- |
+| top-level | `mode` | Hook scope: `guard-and-impact-check` (default, runs the guard then the impact report on every push) or `pre-push` (guard only). |
 | top-level | `ignore_paths` | Glob patterns (matching any path suffix) excluded from all checks and from impact scanning. |
 | top-level | `use_gitignore` | When `true`, also excludes paths ignored by `git check-ignore`. |
 | `guard` | `checks` | Ordered list of check entries; each `{"id": ...}` may add `args`, `blocking`, and `always_block` overrides. |
@@ -209,12 +226,12 @@ External checks run `command` (each `{file}` placeholder is replaced with the fi
 
 ## Pre-push hook
 
-`diffimpactscout install-hooks` writes a `pre-push` hook that runs `diffimpactscout guard` on every push.
+`diffimpactscout install-hooks` writes a `pre-push` hook that runs the configured hook scope on every push — `guard-and-impact-check` by default (guard checks plus the impact report), `guard` only when `mode` is `pre-push`.
 
 - The hook directory is resolved from `git rev-parse --git-common-dir` and honors `core.hooksPath`.
 - The hook script is marked with `# diffimpactscout pre-push hook`. On `--uninstall` (or a re-install with `--force`), only a hook carrying this marker is touched.
 - If a `pre-push` hook already exists without the marker, installation refuses with a `use --force to overwrite` message.
-- The hook runs `diffimpactscout guard`; if the tool is not found, it prints a notice and exits `0`, so pushes are never blocked by a missing install.
+- If the tool is not found, the hook prints a notice and exits `0`, so pushes are never blocked by a missing install.
 - Because the guard is warn-by-default, an installed hook reports issues without blocking the push unless you enable strict mode.
 
 ### Environment variables
@@ -231,7 +248,7 @@ External checks run `command` (each `{file}` placeholder is replaced with the fi
 The `impact` command answers: if I push these changes, what else could break?
 
 1. It parses the change-set (`git diff --find-renames`) and extracts the Python entities you added, removed, or renamed: classes, functions, methods, module fields, and class fields.
-2. It builds an AST symbol map of every tracked Python file in the repo (skipping excluded paths), cached in `impact.cache_file`, and finds every reference to the changed symbols. Lookup kind follows the entity: class fields match attribute loads, methods match name and attribute loads, functions/classes also match imports.
+2. It builds an AST symbol map of every tracked Python file in the repo (skipping excluded paths), cached in `impact.cache_file`, and finds every reference to the changed symbols. Lookup kind follows the entity: class fields match attribute loads, methods match name and attribute loads, functions/classes also match imports. To keep the blast radius honest, entities are scoped to the diff hunks that actually changed (a one-line tweak inside a large function does not report the whole function), and same-name references in other files are only reported when the file imports the name from the changed module (`views.orders` counts, a bare `orders` in an unrelated file does not).
 3. Depending on the profile it extracts routes:
    - `django`: `path()`/`re_path()`/`url()` entries in `urls_globs` that carry a `name=`.
    - `fastapi`: `get`/`post`/`put`/`delete`/`patch`/`options` decorators on `router`/`app`-style objects in `urls_globs`.

{diffimpactscout-0.3.0 → diffimpactscout-0.4.0}/setup.py

@@ -7,7 +7,7 @@ with io.open("README.md", encoding="utf-8") as fh:
 
 setup(
     name="diffimpactscout",
-    version="0.3.0",
+    version="0.4.0",
     description="Incremental pre-push guard and AST blast-radius impact analyzer for git repositories.",
     long_description=long_description,
     long_description_content_type="text/markdown",

{diffimpactscout-0.3.0 → diffimpactscout-0.4.0}/src/diffimpactscout/__init__.py

@@ -1,3 +1,3 @@
 """diffimpactscout: incremental pre-push guard and AST blast-radius impact analyzer."""
 
-__version__ = "0.3.0"
+__version__ = "0.4.0"

{diffimpactscout-0.3.0 → diffimpactscout-0.4.0}/src/diffimpactscout/base.py

@@ -34,7 +34,8 @@ the `HEAD` tree. Consequences:
 
 Sprint branch resolution:
 
-In sprint-based development models (e.g. Contify) work is branched from active
+In sprint-based development models (e.g. custom in-house platforms) work is
+branched from active
 sprint branches such as `refs/remotes/upstream/sprint/33.1` rather than from
 `master`. The resolver inspects `refs/remotes/upstream/master` plus the top
 `DEFAULT_MAX_SPRINT_CANDIDATES` (5) most recent sprint branches sorted by

{diffimpactscout-0.3.0 → diffimpactscout-0.4.0}/src/diffimpactscout/checks/syntax.py

@@ -7,6 +7,7 @@ merge conflict, and a dev-added invalid JSON file is flagged.
 import ast
 import json
 import os
+import warnings
 
 from diffimpactscout.checks.base import (
     Check,
@@ -64,7 +65,9 @@ class AstSyntaxCheck(Check):
             except OSError:
                 continue
             try:
-                ast.parse(data.decode("utf-8-sig"), filename=path)
+                with warnings.catch_warnings():
+                    warnings.simplefilter("ignore", SyntaxWarning)
+                    ast.parse(data.decode("utf-8-sig"), filename=path)
             except SyntaxError as exc:
                 issues.append(
                     CheckIssue(

{diffimpactscout-0.3.0 → diffimpactscout-0.4.0}/src/diffimpactscout/cli.py

@@ -6,6 +6,7 @@ import os
 import sys
 
 import diffimpactscout.config as config
+import diffimpactscout.dependency_check as dependency_check
 import diffimpactscout.detect as detect
 import diffimpactscout.env as env
 import diffimpactscout.gitrun as gitrun
@@ -53,6 +54,20 @@ def _parser():
     )
     p_impact.set_defaults(func=_cmd_impact)
 
+    p_guard_impact = sub.add_parser(
+        "guard-and-impact-check",
+        help="run guard checks then the impact blast-radius report (full pre-push pipeline)",
+    )
+    p_guard_impact.add_argument("--staged", action="store_true")
+    p_guard_impact.add_argument("--fast", action="store_true")
+    p_guard_impact.add_argument("--json", action="store_true")
+    p_guard_impact.add_argument(
+        "--markdown",
+        action="store_true",
+        help="emit a Markdown table instead of the plain ASCII table",
+    )
+    p_guard_impact.set_defaults(func=_cmd_guard_and_analyse_impact)
+
     p_check = sub.add_parser(
         "check", help="run a single check by id against files or the change-set"
     )
@@ -93,6 +108,12 @@ def _parser():
     )
     p_hooks.set_defaults(func=_cmd_install_hooks)
 
+    p_dep = sub.add_parser(
+        "dependency-check",
+        help="verify the external tools referenced by the config are installed",
+    )
+    p_dep.set_defaults(func=_cmd_dependency_check)
+
     return parser
 
 
@@ -157,6 +178,35 @@ def _cmd_impact(args):
     )
 
 
+def _cmd_guard_and_analyse_impact(args):
+    root = _require_repo()
+    if root is None:
+        return 1
+    cfg = config.load_config(root)
+    guard_rc = guard.run_guard(
+        root,
+        cfg,
+        staged=args.staged,
+    )
+    impact_rc = impact_module.run_impact(
+        root,
+        cfg,
+        staged=args.staged,
+        fast=args.fast,
+        json_out=args.json,
+        markdown=args.markdown,
+    )
+    return guard_rc if guard_rc != 0 else impact_rc
+
+
+def _cmd_dependency_check(args):
+    root = _require_repo()
+    if root is None:
+        return 1
+    cfg = config.load_config(root)
+    return dependency_check.run_dependency_check(root, cfg)
+
+
 def _cmd_check(args):
     root = _require_repo()
     if root is None:
@@ -263,6 +313,21 @@ def _prompt_blocking(default):
     return default
 
 
+def _prompt_mode(default):
+    sys.stdout.write(
+        "Push hook scope: guard-and-impact-check (recommended: guard checks + "
+        "impact blast-radius report) or pre-push (guard checks only)? "
+        "[guard-and-impact-check/Pre-push] (default: %s): " % default
+    )
+    sys.stdout.flush()
+    answer = _read_answer()
+    if answer in ("guard-and-impact-check", "g"):
+        return config.MODE_GUARD_AND_IMPACT
+    if answer in ("pre-push", "p"):
+        return config.MODE_PRE_PUSH
+    return default
+
+
 def _check_id(entry):
     if isinstance(entry, dict):
         return entry.get("id", "?")
@@ -284,6 +349,14 @@ def _render_preview(detected, cfg):
     checks = cfg["guard"]["checks"]
     impact_on = profile != config.DEFAULT_PROFILE
     blocking = cfg["guard"].get("blocking", "warn")
+    mode = cfg.get("mode") or config.DEFAULT_MODE
+    if mode not in (config.MODE_PRE_PUSH, config.MODE_GUARD_AND_IMPACT):
+        mode = config.DEFAULT_MODE
+    hook_command = (
+        config.MODE_GUARD_AND_IMPACT
+        if mode == config.MODE_GUARD_AND_IMPACT
+        else "guard"
+    )
     lines = []
     if detected == profile:
         lines.append("detected framework: %s" % detected)
@@ -291,13 +364,15 @@ def _render_preview(detected, cfg):
     lines.append("diffimpactscout will write .diffimpactscout.json")
     lines.append("  profile   : %s" % profile)
     lines.append("  blocking  : %s" % blocking)
+    lines.append("  mode      : %s" % mode)
     lines.append("  impact    : %s" % ("on" if impact_on else "off"))
     lines.append("  checks    : %d" % len(checks))
     for entry in checks:
         lines.append("    - %s" % _check_id(entry))
     lines.append("")
     lines.append(
-        "  then installs the pre-push hook -> runs `diffimpactscout guard` on each push."
+        "  then installs the pre-push hook -> runs `diffimpactscout %s` on each push."
+        % hook_command
     )
     lines.append("")
     return "\n".join(lines)
@@ -321,6 +396,7 @@ def _build_config_data(profile, args):
     data = config._deep_merge(data, config.load_profile(profile))
     if args.blocking:
         data["guard"]["blocking"] = args.blocking
+    data["mode"] = data.get("mode") or config.DEFAULT_MODE
     return data
 
 
@@ -371,6 +447,7 @@ def _ask_overrides(data, args):
             config._defaults(), config.load_profile("generic")
         )
         data["impact"] = generic["impact"]
+    data["mode"] = _prompt_mode(data.get("mode") or config.DEFAULT_MODE)
 
 
 def _cmd_install_hooks(args):
@@ -390,6 +467,7 @@ def _cmd_install_hooks(args):
         else:
             print("nothing to remove")
         return 0
+    data = None
     cfg_path = os.path.join(root, config.CFG_NAME)
     has_config = os.path.exists(cfg_path)
     proceed = True
@@ -422,8 +500,20 @@ def _cmd_install_hooks(args):
     if not proceed:
         print("diffimpactscout: setup skipped; no changes made")
         return 0
+    mode = None
+    if has_config and not args.reconfigure:
+        existing = config._read_user(root)
+        if existing and isinstance(existing.get("mode"), str):
+            mode = existing["mode"]
+    if mode is None:
+        mode = (data or {}).get("mode") or config.DEFAULT_MODE
+    command = (
+        config.MODE_GUARD_AND_IMPACT
+        if mode == config.MODE_GUARD_AND_IMPACT
+        else "guard"
+    )
     try:
-        installed = launcher.install_hook(root, force=args.force)
+        installed = launcher.install_hook(root, force=args.force, command=command)
     except OSError as exc:
         sys.stderr.write(
             "diffimpactscout: cannot install pre-push hook: %s\n" % exc
@@ -432,4 +522,6 @@ def _cmd_install_hooks(args):
     if not installed:
         return 1
     print("pre-push hook installed")
-    return 0
+    effective = config.load_config(root)
+    dependency_check.report_missing(effective)
+    return 0

{diffimpactscout-0.3.0 → diffimpactscout-0.4.0}/src/diffimpactscout/config.py

@@ -11,6 +11,8 @@ CFG_NAME = ".diffimpactscout.json"
 DEFAULT_PROFILE = "generic"
 PROFILE_CHOICES = ("generic", "django", "fastapi", "python", "frontend")
 MODE_PRE_PUSH = "pre-push"
+MODE_GUARD_AND_IMPACT = "guard-and-impact-check"
+DEFAULT_MODE = MODE_GUARD_AND_IMPACT
 
 DEFAULT_IGNORE_PATHS = [
     "**/node_modules/**",
@@ -40,7 +42,7 @@ DEFAULT_GUARD_CHECKS = [
 def _defaults():
     return {
         "version": 1,
-        "mode": MODE_PRE_PUSH,
+        "mode": DEFAULT_MODE,
         "ignore_paths": list(DEFAULT_IGNORE_PATHS),
         "use_gitignore": False,
         "guard": {

diffimpactscout-0.4.0/src/diffimpactscout/dependency_check.py

@@ -0,0 +1,108 @@
+"""Check that the tools referenced by the guard checks and impact profile are available.
+
+Example: a Django profile that enables ruff/ruff-format reports `ruff` as
+missing with an install hint the first time hooks are set up.
+"""
+
+import shutil
+import sys
+
+_CHECK_TOOLS = (
+    ("ruff", "ruff", "pip install ruff"),
+    ("eslint", "eslint", "npm install --save-dev eslint"),
+    ("prettier", "prettier", "npm install --save-dev prettier"),
+)
+
+_TOOL_CHECK_IDS = {
+    "ruff": "ruff",
+    "ruff-format": "ruff",
+    "eslint": "eslint",
+    "prettier": "prettier",
+}
+
+
+def required_tools(cfg):
+    """Return the set of tool names referenced by the current config."""
+    tools = set()
+    for entry in cfg.get("guard", {}).get("checks") or []:
+        if isinstance(entry, dict):
+            check_id = entry.get("id")
+        else:
+            check_id = entry
+        mapped = _TOOL_CHECK_IDS.get(check_id)
+        if mapped:
+            tools.add(mapped)
+    return sorted(tools)
+
+
+def _resolve(binary):
+    return shutil.which(binary) or shutil.which(binary + ".exe")
+
+
+def check_tools(cfg):
+    """Return a list of {"tool", "found", "hint"} for every config-referenced tool."""
+    results = []
+    for tool, binary, hint in _CHECK_TOOLS:
+        if tool in required_tools(cfg):
+            results.append(
+                {
+                    "tool": tool,
+                    "binary": binary,
+                    "found": _resolve(binary) is not None,
+                    "hint": hint,
+                }
+            )
+    return results
+
+
+def run_dependency_check(root, cfg):
+    results = check_tools(cfg)
+    if not results:
+        print("No external tools are referenced by the current configuration.")
+        return 0
+    missing = [r for r in results if not r["found"]]
+    print("=" * 70)
+    print("  DiffImpactScout Dependency Check")
+    print("=" * 70)
+    for result in results:
+        state = "OK" if result["found"] else "MISSING"
+        location = ""
+        if result["found"]:
+            location = " (%s)" % _resolve(result["binary"])
+        print(
+            "  [%s] %s%s" % (state, result["tool"], location)
+        )
+    print("-" * 70)
+    if not missing:
+        print("  All referenced tools are available.")
+        print("=" * 70)
+        return 0
+    for result in missing:
+        sys.stderr.write(
+            "diffimpactscout: %s is required by the guard checks but was not "
+            "found. Install it with: %s\n" % (result["tool"], result["hint"])
+        )
+    sys.stderr.write(
+        "diffimpactscout: missing tools degrade the affected checks to warnings; "
+        "install them to enforce the full guard.\n"
+    )
+    print("=" * 70)
+    return 1
+
+
+def report_missing(cfg, tty=None):
+    """Print a non-fatal warning for every referenced-but-missing tool."""
+    if tty is None:
+        try:
+            tty = sys.stdin.isatty()
+        except (OSError, ValueError):
+            tty = False
+    if not tty:
+        return
+    missing = [r for r in check_tools(cfg) if not r["found"]]
+    for result in missing:
+        sys.stderr.write(
+            "diffimpactscout: %s was not found; the affected checks will only "
+            "warn until it is installed (%s).\n"
+            % (result["tool"], result["hint"])
+        )

diffimpactscout-0.4.0/src/diffimpactscout/impact/_parse.py

@@ -0,0 +1,15 @@
+"""Quiet AST parsing of third-party source.
+
+Analyzed code may carry latent issues (for example invalid escape sequences
+in string literals) that Python surfaces as ``SyntaxWarning`` when compiling
+the module. Those warnings must not leak into the tool's report output.
+"""
+
+import ast
+import warnings
+
+
+def parse_quiet(source, filename="<unknown>"):
+    with warnings.catch_warnings():
+        warnings.simplefilter("ignore", SyntaxWarning)
+        return ast.parse(source, filename=filename)