Directories
¶
| Path | Synopsis |
|---|---|
|
Package cli wires the codefit command tree with cobra: the root command and its global flags, plus every subcommand (init, scan, bench, review, run, baseline, report, mcp serve, auth, set, status).
|
Package cli wires the codefit command tree with cobra: the root command and its global flags, plus every subcommand (init, scan, bench, review, run, baseline, report, mcp serve, auth, set, status). |
|
Package config models and loads .codefit.yaml, the per-project configuration committed to the repository.
|
Package config models and loads .codefit.yaml, the per-project configuration committed to the repository. |
|
core
|
|
|
baseline
Package baseline implements the adoption baseline (PRD RF-08): a committed snapshot of a project's findings so that, with baseline enabled, codefit reports only new findings while pre-existing debt is recorded (baselined: true) and does not block.
|
Package baseline implements the adoption baseline (PRD RF-08): a committed snapshot of a project's findings so that, with baseline enabled, codefit reports only new findings while pre-existing debt is recorded (baselined: true) and does not block. |
|
cache
Package cache defines the content-hash finding cache (PRD section 15, optimization 2).
|
Package cache defines the content-hash finding cache (PRD section 15, optimization 2). |
|
context
Package context defines AuditContext, the immutable struct that carries everything a sensor needs about the project under audit: where it lives, its language and framework, the parsed config, and the run modifiers (incremental ref, no-LLM mode).
|
Package context defines AuditContext, the immutable struct that carries everything a sensor needs about the project under audit: where it lives, its language and framework, the parsed config, and the run modifiers (incremental ref, no-LLM mode). |
|
coverage
Package coverage models codefit's coverage manifest (PRD section 10, RF-07): the explicit, per-language declaration of what codefit detects and what it does not.
|
Package coverage models codefit's coverage manifest (PRD section 10, RF-07): the explicit, per-language declaration of what codefit detects and what it does not. |
|
cve
Package cve checks project dependencies against known vulnerabilities via OSV.dev (PRD section 18, RF-09).
|
Package cve checks project dependencies against known vulnerabilities via OSV.dev (PRD section 18, RF-09). |
|
findings
Package findings defines the universal, language-agnostic vocabulary of an audit: the Finding hallazgo, its Severity and Dimension, the ConsentRecord that authorizes suppressing a critical security finding, and the SensorResult every sensor returns.
|
Package findings defines the universal, language-agnostic vocabulary of an audit: the Finding hallazgo, its Severity and Dimension, the ConsentRecord that authorizes suppressing a critical security finding, and the SensorResult every sensor returns. |
|
pipeline
Package pipeline defines the filtering pyramid (PRD section 15): cheap layers run first and only what they cannot conclude is escalated to the next, more expensive layer.
|
Package pipeline defines the filtering pyramid (PRD section 15): cheap layers run first and only what they cannot conclude is escalated to the next, more expensive layer. |
|
report
Package report defines the canonical audit report and the renderers that present it.
|
Package report defines the canonical audit report and the renderers that present it. |
|
ruleengine
Package ruleengine is codefit's own matcher for a subset of the Semgrep rule format (PRD section 17).
|
Package ruleengine is codefit's own matcher for a subset of the Semgrep rule format (PRD section 17). |
|
scoring
Package scoring computes the per-dimension scores (0-100) and the weighted global score from a set of findings, using the configurable weights from .codefit.yaml (PRD RF-07).
|
Package scoring computes the per-dimension scores (0-100) and the weighted global score from a set of findings, using the configurable weights from .codefit.yaml (PRD RF-07). |
|
surface
Package surface is the core framework for surface mapping (PRD section 10): the language-agnostic home for surface categories and, in Fase 1, the SurfaceQuery format (codefit's own declarative format for enumerating auditable structural surface, distinct from the Semgrep-format rules used for deterministic findings — PRD section 17).
|
Package surface is the core framework for surface mapping (PRD section 10): the language-agnostic home for surface categories and, in Fase 1, the SurfaceQuery format (codefit's own declarative format for enumerating auditable structural surface, distinct from the Semgrep-format rules used for deterministic findings — PRD section 17). |
|
syntax
Package syntax is codefit's parser-agnostic AST boundary.
|
Package syntax is codefit's parser-agnostic AST boundary. |
|
Package mcp implements the MCP server mode: a thin, stateless adapter that exposes the same core sensors as MCP tools (PRD section 10).
|
Package mcp implements the MCP server mode: a thin, stateless adapter that exposes the same core sensors as MCP tools (PRD section 10). |
|
Package providers defines the LanguageProvider contract — the extensibility seam (PRD section 14).
|
Package providers defines the LanguageProvider contract — the extensibility seam (PRD section 14). |
|
golang
Package golang is the Go LanguageProvider.
|
Package golang is the Go LanguageProvider. |
|
typescript
Package typescript is the TypeScript/TSX LanguageProvider.
|
Package typescript is the TypeScript/TSX LanguageProvider. |
|
Package scaffold powers `codefit init`: it inspects a project on disk and produces the artifacts that make codefit usable from an AI agent.
|
Package scaffold powers `codefit init`: it inspects a project on disk and produces the artifacts that make codefit usable from an AI agent. |
|
Package sensors defines the Sensor contract: a module that audits one findings.Dimension and returns a findings.SensorResult.
|
Package sensors defines the Sensor contract: a module that audits one findings.Dimension and returns a findings.SensorResult. |
|
security
Package security is the universal security sensor.
|
Package security is the universal security sensor. |
|
Package version holds the build-time identity of the codefit binary.
|
Package version holds the build-time identity of the codefit binary. |
Click to show internal directories.
Click to hide internal directories.