@dailephd/my-dev-kit-lab 0.4.4 → 0.4.6

package/dist/scripts/audits/runAudit.js

@@ -1,135 +0,0 @@
-#!/usr/bin/env node
-import { parseAuditArgs, normalizeAuditConfig } from "../../src/audits/core/auditConfig.js";
-import { resolveAuditTarget } from "../../src/audits/core/auditTarget.js";
-import { runAudit } from "../../src/audits/core/auditRunner.js";
-import { AUDIT_EXIT_CODES } from "../../src/audits/core/auditExitCode.js";
-import { resolveToolRoot } from "../security/resolveToolRoot.js";
-import { buildAuditReportModel } from "../../src/audits/report/auditReportModel.js";
-import { writeAuditReports } from "../../src/audits/report/writeAuditReports.js";
-// ---------------------------------------------------------------------------
-// v0.3.0 Batch 5 -- npm run audit entrypoint.
-//
-// Thin wiring only: parse args -> normalize config -> resolve target ->
-// runAudit() -> buildAuditReportModel() -> writeAuditReports() -> print a
-// concise console summary -> set process.exitCode. All report-shaping logic
-// (the former inline buildJsonReport()/renderMinimalTextSummary()/
-// summarizeInventory()/summarizeSourceOfTruth() functions from Batch 1/2)
-// now lives in src/audits/report/ -- see auditReportModel.ts,
-// renderAuditJsonReport.ts, renderAuditTextReport.ts, writeAuditReports.ts.
-// Mirrors the structure of scripts/security/validate.ts.
-// ---------------------------------------------------------------------------
-const USAGE = "Usage: npm run audit -- [--target <path>] [--types code-rot,security] " +
-    "[--include docs,tests,package,architecture,cli] [--format text,json] " +
-    "[--fail-on blocker|high|medium|low|none] [--out <path>] [--android]\n" +
-    "\n" +
-    "  --android opts into Batch 2's programmatic Android security integration.\n" +
-    "  Requires --types to include \"security\" (e.g. --types security or --types\n" +
-    "  code-rot,security). Runs the same static, read-only, nineteen-check\n" +
-    "  Android validation security:validate --profile android performs --\n" +
-    "  detection, manifest parsing, and internal advanced security checks --\n" +
-    "  through the existing security adapter, never a subprocess. Confirmed\n" +
-    "  findings are mapped into the normal issue collection; CandidateEvidence\n" +
-    "  remains a separate, bounded summary and is never treated as a confirmed\n" +
-    "  issue. Starts zero Gradle operations, zero external tools, and zero\n" +
-    "  network operations by default; --android does not expose any of those.\n" +
-    "  Example: npm run audit -- --target \"<android-project-path>\" --types security --android --format text,json --fail-on none";
-const rawArgs = process.argv.slice(2);
-const toolRoot = resolveToolRoot(import.meta.url);
-// Help deliberately wins over every other argument, mirroring
-// scripts/security/validate.ts -- no config normalization, target
-// resolution, audit execution, or report write.
-if (rawArgs.includes("--help") || rawArgs.includes("-h")) {
-    console.log(USAGE);
-    process.exitCode = 0;
-    process.exit(0);
-}
-let config;
-try {
-    const args = parseAuditArgs(rawArgs);
-    config = normalizeAuditConfig(args, toolRoot);
-}
-catch (err) {
-    const msg = err instanceof Error ? err.message : String(err);
-    console.error(`\nERROR: ${msg}`);
-    console.error(USAGE);
-    process.exitCode = AUDIT_EXIT_CODES.FATAL_ERROR;
-    process.exit(AUDIT_EXIT_CODES.FATAL_ERROR);
-}
-let target;
-try {
-    target = resolveAuditTarget(config.targetPathArg, toolRoot);
-}
-catch (err) {
-    const msg = err instanceof Error ? err.message : String(err);
-    console.error(`\nERROR: ${msg}`);
-    console.error(USAGE);
-    process.exitCode = AUDIT_EXIT_CODES.FATAL_ERROR;
-    process.exit(AUDIT_EXIT_CODES.FATAL_ERROR);
-}
-console.log("=".repeat(60));
-console.log("my-dev-kit-lab audit");
-console.log("=".repeat(60));
-console.log(`Tool root  : ${toolRoot}`);
-if (!target.isSelf) {
-    console.log(`Target     : ${target.rootPath}`);
-}
-else {
-    console.log(`Mode       : self-audit`);
-}
-console.log(`Types      : ${config.types.join(", ")}`);
-console.log(`Include    : ${config.include.join(", ")}`);
-console.log("");
-let result;
-try {
-    result = await runAudit({ config, toolRoot, target });
-}
-catch (err) {
-    const msg = err instanceof Error ? err.message : String(err);
-    console.error(`\nERROR: audit runtime failure: ${msg}`);
-    process.exitCode = AUDIT_EXIT_CODES.FATAL_ERROR;
-    process.exit(AUDIT_EXIT_CODES.FATAL_ERROR);
-}
-const model = buildAuditReportModel(result, { target });
-const { writtenPaths } = writeAuditReports({ model, config, outDir: config.out });
-console.log(`Issues found        : ${model.summary.totalIssues}`);
-console.log(`  blocker=${model.summary.issuesBySeverity.blocker} high=${model.summary.issuesBySeverity.high} medium=${model.summary.issuesBySeverity.medium} low=${model.summary.issuesBySeverity.low} info=${model.summary.issuesBySeverity.info}`);
-console.log(`Skipped detectors    : ${model.summary.skippedDetectorCount}`);
-if (model.summary.detectorErrorCount > 0) {
-    console.log(`Detector errors      : ${model.summary.detectorErrorCount}`);
-    for (const e of model.detectorErrors) {
-        console.log(`  [${e.id}] ${e.message}`);
-    }
-}
-if (model.summary.noDetectorsRegistered && !model.securitySummary.ran) {
-    console.log(`Note: no code-rot detectors are registered for this run's --types/--include selection -- this run collected inventory/source-of-truth data only.`);
-}
-if (model.securitySummary.ran) {
-    console.log(`\nSecurity validation: verdict=${model.securitySummary.verdictLabel} checks=${model.securitySummary.totalChecks} findings(blocker=${model.securitySummary.findingCounts.blocker} major=${model.securitySummary.findingCounts.major} minor=${model.securitySummary.findingCounts.minor} info=${model.securitySummary.findingCounts.informational})`);
-    if (model.securitySummary.reportPaths.text) {
-        console.log(`  Full report: ${model.securitySummary.reportPaths.text}`);
-    }
-}
-if (model.androidSecurity.summary.requested) {
-    const android = model.androidSecurity.summary;
-    console.log(`\nAndroid security validation: status=${android.status} applicable=${android.applicable ?? "n/a"} verdict=${android.verdict ?? "(unknown)"} checks=${android.totalChecks} confirmed=${android.confirmedFindingCount} mappedIssues=${android.mappedIssueCount} candidates=${android.candidateSummary.totalCount}`);
-    if (android.reportPaths.text) {
-        console.log(`  Full report: ${android.reportPaths.text}`);
-    }
-}
-console.log(`\nInventory: ${model.inventory.totalScannedFileCount} file(s) scanned, ${model.inventory.skippedFileCount} skipped`);
-console.log(`  source=${model.inventory.filesByCategory.source} tests=${model.inventory.filesByCategory.tests} docs=${model.inventory.filesByCategory.docs} package=${model.inventory.filesByCategory.package} config=${model.inventory.filesByCategory.config} scripts=${model.inventory.filesByCategory.scripts} ci=${model.inventory.filesByCategory.ci}`);
-console.log(`Source of truth: package=${model.sourceOfTruth.packageName ?? "(none)"}@${model.sourceOfTruth.packageVersion ?? "?"} readme=${model.sourceOfTruth.hasReadme} changelog=${model.sourceOfTruth.hasChangelog} ciWorkflows=${model.sourceOfTruth.ciWorkflowCount}`);
-console.log(`Source facts: ${model.sourceFacts.totalFilesAnalyzed} file(s) analyzed (parsed=${model.sourceFacts.filesByParseStatus.parsed} file-level-only=${model.sourceFacts.filesByParseStatus["file-level-only"]} unsupported=${model.sourceFacts.filesByParseStatus.unsupported})`);
-if (writtenPaths.length > 0) {
-    console.log(`\nReports written:`);
-    for (const p of writtenPaths) {
-        console.log(`  ${p}`);
-    }
-}
-console.log(`\nHighest severity: ${model.summary.highestSeverity ?? "(none)"}`);
-console.log(`Verdict: ${model.summary.finalVerdictLabel}`);
-console.log(`Exit reason: ${model.exit.reason}`);
-console.log(model.exit.code === AUDIT_EXIT_CODES.SUCCESS
-    ? `Exit 0 -- audit completed.`
-    : `Exit 1 -- fail-on threshold breached.`);
-process.exitCode = model.exit.code;

package/dist/scripts/build-gallery.js

@@ -1,3 +0,0 @@
-#!/usr/bin/env node
-import { runBuildGalleryCommand } from "../src/commands/buildGalleryCommand.js";
-process.exitCode = await runBuildGalleryCommand(process.argv.slice(2));

package/dist/scripts/capture-demo-report.js

@@ -1,3 +0,0 @@
-import { runCaptureDemoReportCommand } from "../src/commands/captureDemoReport.js";
-const exitCode = await runCaptureDemoReportCommand(process.argv.slice(2));
-process.exitCode = exitCode;

package/dist/scripts/evaluate-token-savings.js

@@ -1,2 +0,0 @@
-import { runEvaluateTokenSavingsCommand } from "../src/commands/evaluateTokenSavings.js";
-process.exitCode = await runEvaluateTokenSavingsCommand(process.argv.slice(2));

package/dist/scripts/generate-experiment-plots.js

@@ -1,3 +0,0 @@
-#!/usr/bin/env node
-import { runGenerateExperimentPlotsCommand } from "../src/commands/generateExperimentPlotsCommand.js";
-process.exitCode = await runGenerateExperimentPlotsCommand(process.argv.slice(2));

package/dist/scripts/generate-prompt-variants.js

@@ -1,2 +0,0 @@
-import { runGeneratePromptVariantsCommand } from "../src/commands/generatePromptVariants.js";
-process.exitCode = await runGeneratePromptVariantsCommand(process.argv.slice(2));

package/dist/scripts/render-experiment-report.js

@@ -1,2 +0,0 @@
-import { runRenderExperimentReportCommand } from "../src/commands/renderExperimentReportCommand.js";
-process.exitCode = await runRenderExperimentReportCommand(process.argv.slice(2));

package/dist/scripts/run-agent-prompt.js

@@ -1,2 +0,0 @@
-import { runAgentPromptCommand } from "../src/commands/runAgentPromptCommand.js";
-process.exitCode = await runAgentPromptCommand(process.argv.slice(2));

package/dist/scripts/run-controlled-experiment.js

@@ -1,2 +0,0 @@
-import { runControlledExperimentCommand } from "../src/commands/runControlledExperimentCommand.js";
-process.exitCode = await runControlledExperimentCommand(process.argv.slice(2));

package/dist/scripts/run-lab-demo.js

@@ -1,5 +0,0 @@
-import { runLabDemoCommand } from "../src/commands/runLabDemo.js";
-const exitCode = await runLabDemoCommand(process.argv.slice(2));
-if (exitCode !== 0) {
-    process.exitCode = exitCode;
-}

package/dist/scripts/run-visualization-demos.js

@@ -1,3 +0,0 @@
-#!/usr/bin/env node
-import { runVisualizationDemosCommand } from "../src/commands/runVisualizationDemosCommand.js";
-process.exitCode = await runVisualizationDemosCommand(process.argv.slice(2));

package/dist/scripts/security/resolveToolRoot.js

@@ -1,16 +0,0 @@
-import fs from "node:fs";
-import path from "node:path";
-import { fileURLToPath } from "node:url";
-export function resolveToolRoot(moduleUrl) {
-    let current = path.dirname(fileURLToPath(moduleUrl));
-    while (true) {
-        if (fs.existsSync(path.join(current, "package.json"))) {
-            return current;
-        }
-        const parent = path.dirname(current);
-        if (parent === current) {
-            return process.cwd();
-        }
-        current = parent;
-    }
-}

package/dist/scripts/security/runCodeql.js

@@ -1,58 +0,0 @@
-#!/usr/bin/env node
-import { runCodeqlCheck } from "../../src/securityValidation/staticScans/codeql.js";
-import { resolveValidationTarget } from "../../src/securityValidation/validate/resolveTarget.js";
-import { resolveToolRoot } from "./resolveToolRoot.js";
-const rawArgs = process.argv.slice(2);
-const args = parseArgs(rawArgs);
-const toolRoot = resolveToolRoot(import.meta.url);
-let targetRoot;
-try {
-    const target = resolveValidationTarget(args.target, toolRoot);
-    targetRoot = target.targetRoot;
-    if (!target.isSelf) {
-        console.log(`Target: ${targetRoot}`);
-    }
-}
-catch (err) {
-    console.error(`ERROR: ${err instanceof Error ? err.message : String(err)}`);
-    process.exitCode = 1;
-    process.exit(1);
-}
-console.log("Running CodeQL static analysis check...");
-const result = await runCodeqlCheck({
-    cwd: toolRoot,
-    targetRoot,
-    timeoutMs: 30_000,
-});
-const label = result.status === "skipped"
-    ? `SKIPPED — ${result.skippedReason ?? "tool unavailable"}`
-    : result.status.toUpperCase();
-console.log(`Status: ${label}`);
-if (result.findings.length > 0) {
-    console.log("\nFindings:");
-    for (const f of result.findings) {
-        console.log(`  [${f.severity.toUpperCase()}] ${f.title}`);
-        if (f.description)
-            console.log(`    ${f.description.slice(0, 120)}`);
-    }
-}
-console.log(`\nDuration: ${result.durationMs}ms`);
-if (result.status === "skipped") {
-    console.log("\nCodeQL is optional. Absence does not block release.");
-    process.exitCode = 0;
-}
-else if (result.status === "failed") {
-    process.exitCode = 1;
-}
-else {
-    process.exitCode = 0;
-}
-function parseArgs(argv) {
-    const result = {};
-    for (let i = 0; i < argv.length; i++) {
-        if ((argv[i] === "--target" || argv[i] === "-t") && i + 1 < argv.length) {
-            result.target = argv[++i];
-        }
-    }
-    return result;
-}

package/dist/scripts/security/runDependencyChecks.js

@@ -1,58 +0,0 @@
-#!/usr/bin/env node
-import path from "node:path";
-import { runDependencyChecks } from "../../src/securityValidation/index.js";
-import { DEFAULT_SECURITY_CONFIG } from "../../src/securityValidation/index.js";
-import { resolveValidationTarget } from "../../src/securityValidation/validate/resolveTarget.js";
-import { resolveToolRoot } from "./resolveToolRoot.js";
-const rawArgs = process.argv.slice(2);
-const args = parseArgs(rawArgs);
-const toolRoot = resolveToolRoot(import.meta.url);
-let targetRoot;
-try {
-    const target = resolveValidationTarget(args.target, toolRoot);
-    targetRoot = target.targetRoot;
-    if (!target.isSelf) {
-        console.log(`Target: ${targetRoot}`);
-    }
-}
-catch (err) {
-    console.error(`ERROR: ${err instanceof Error ? err.message : String(err)}`);
-    process.exitCode = 1;
-    process.exit(1);
-}
-const config = {
-    ...DEFAULT_SECURITY_CONFIG,
-    reportDir: path.join(toolRoot, DEFAULT_SECURITY_CONFIG.reportDir),
-    rawOutputDir: path.join(toolRoot, DEFAULT_SECURITY_CONFIG.rawOutputDir),
-};
-console.log("Running dependency checks...");
-console.log(`Report directory: ${config.reportDir}`);
-const output = await runDependencyChecks({ cwd: targetRoot, config });
-const passed = output.checks.filter((c) => c.status === "passed").length;
-const failed = output.checks.filter((c) => c.status === "failed").length;
-const warned = output.checks.filter((c) => c.status === "warning").length;
-const skipped = output.checks.filter((c) => c.status === "skipped").length;
-console.log(`\nDependency checks complete:`);
-console.log(`  Passed:  ${passed}`);
-console.log(`  Warned:  ${warned}`);
-console.log(`  Failed:  ${failed}`);
-console.log(`  Skipped: ${skipped}`);
-console.log(`  Findings: ${output.findings.length}`);
-if (output.findings.length > 0) {
-    console.log("\nFindings:");
-    for (const f of output.findings) {
-        console.log(`  [${f.severity.toUpperCase()}] ${f.title}`);
-    }
-}
-console.log(`\nResults written to ${config.reportDir}`);
-const hasBlocker = output.findings.some((f) => f.severity === "blocker");
-process.exitCode = hasBlocker ? 1 : 0;
-function parseArgs(argv) {
-    const result = {};
-    for (let i = 0; i < argv.length; i++) {
-        if ((argv[i] === "--target" || argv[i] === "-t") && i + 1 < argv.length) {
-            result.target = argv[++i];
-        }
-    }
-    return result;
-}

package/dist/scripts/security/runFuzzSmoke.js

@@ -1,29 +0,0 @@
-#!/usr/bin/env node
-import { runAllFuzzTargets } from "../../src/securityValidation/fuzz/fuzzHarness.js";
-import { ALL_FUZZ_TARGETS } from "../../src/securityValidation/fuzz/fuzzTargets.js";
-const SEED = parseInt(process.env["FUZZ_SEED"] ?? "0xDEADBEEF", 16);
-const ITERATIONS = parseInt(process.env["FUZZ_ITERATIONS"] ?? "50", 10);
-console.log(`Running fuzz smoke tests...`);
-console.log(`  Targets   : ${ALL_FUZZ_TARGETS.length}`);
-console.log(`  Seed      : 0x${SEED.toString(16).toUpperCase()}`);
-console.log(`  Iterations: ${ITERATIONS} per target`);
-const result = await runAllFuzzTargets(ALL_FUZZ_TARGETS, {
-    seed: SEED,
-    iterations: ITERATIONS,
-});
-console.log(`\nStatus  : ${result.status.toUpperCase()}`);
-console.log(`Duration: ${result.durationMs}ms`);
-console.log(`Crashes : ${result.findings.length}`);
-if (result.findings.length > 0) {
-    console.log("\nCrash findings:");
-    for (const f of result.findings) {
-        console.log(`  [${f.severity.toUpperCase()}] ${f.title}`);
-        if (f.evidence)
-            console.log(`    Evidence: ${f.evidence.slice(0, 160)}`);
-    }
-    process.exitCode = 1;
-}
-else {
-    console.log("\nAll fuzz targets completed without crashes.");
-    process.exitCode = 0;
-}

package/dist/scripts/security/runPackageChecks.js

@@ -1,57 +0,0 @@
-#!/usr/bin/env node
-import path from "node:path";
-import { runPackageChecks } from "../../src/securityValidation/index.js";
-import { DEFAULT_SECURITY_CONFIG } from "../../src/securityValidation/index.js";
-import { resolveValidationTarget } from "../../src/securityValidation/validate/resolveTarget.js";
-import { resolveToolRoot } from "./resolveToolRoot.js";
-const rawArgs = process.argv.slice(2);
-const args = parseArgs(rawArgs);
-const toolRoot = resolveToolRoot(import.meta.url);
-let targetRoot;
-try {
-    const target = resolveValidationTarget(args.target, toolRoot);
-    targetRoot = target.targetRoot;
-    if (!target.isSelf) {
-        console.log(`Target: ${targetRoot}`);
-    }
-}
-catch (err) {
-    console.error(`ERROR: ${err instanceof Error ? err.message : String(err)}`);
-    process.exitCode = 1;
-    process.exit(1);
-}
-const config = {
-    ...DEFAULT_SECURITY_CONFIG,
-    reportDir: path.join(toolRoot, DEFAULT_SECURITY_CONFIG.reportDir),
-    rawOutputDir: path.join(toolRoot, DEFAULT_SECURITY_CONFIG.rawOutputDir),
-};
-console.log("Running package content checks...");
-console.log(`Report directory: ${config.reportDir}`);
-const output = await runPackageChecks({ cwd: targetRoot, config });
-const passed = output.checks.filter((c) => c.status === "passed").length;
-const failed = output.checks.filter((c) => c.status === "failed").length;
-const warned = output.checks.filter((c) => c.status === "warning").length;
-console.log(`\nPackage checks complete:`);
-console.log(`  Passed:  ${passed}`);
-console.log(`  Warned:  ${warned}`);
-console.log(`  Failed:  ${failed}`);
-console.log(`  Findings: ${output.findings.length}`);
-if (output.findings.length > 0) {
-    console.log("\nFindings:");
-    for (const f of output.findings) {
-        console.log(`  [${f.severity.toUpperCase()}] ${f.title}`);
-    }
-}
-console.log(`\nResults written to ${config.reportDir}`);
-const hasBlocker = output.findings.some((f) => f.severity === "blocker");
-const hasMajor = output.findings.some((f) => f.severity === "major");
-process.exitCode = hasBlocker || hasMajor ? 1 : 0;
-function parseArgs(argv) {
-    const result = {};
-    for (let i = 0; i < argv.length; i++) {
-        if ((argv[i] === "--target" || argv[i] === "-t") && i + 1 < argv.length) {
-            result.target = argv[++i];
-        }
-    }
-    return result;
-}

package/dist/scripts/security/runSemgrep.js

@@ -1,64 +0,0 @@
-#!/usr/bin/env node
-import path from "node:path";
-import { runSemgrepCheck } from "../../src/securityValidation/staticScans/semgrep.js";
-import { resolveValidationTarget } from "../../src/securityValidation/validate/resolveTarget.js";
-import { resolveToolRoot } from "./resolveToolRoot.js";
-const rawArgs = process.argv.slice(2);
-const args = parseArgs(rawArgs);
-const toolRoot = resolveToolRoot(import.meta.url);
-let targetRoot;
-try {
-    const target = resolveValidationTarget(args.target, toolRoot);
-    targetRoot = target.targetRoot;
-    if (!target.isSelf) {
-        console.log(`Target: ${targetRoot}`);
-    }
-}
-catch (err) {
-    console.error(`ERROR: ${err instanceof Error ? err.message : String(err)}`);
-    process.exitCode = 1;
-    process.exit(1);
-}
-console.log("Running Semgrep static analysis check...");
-console.log(`Config: ${path.join(toolRoot, ".semgrep.yml")}`);
-const result = await runSemgrepCheck({
-    targetRoot,
-    toolRoot,
-    configPath: path.join(toolRoot, ".semgrep.yml"),
-    timeoutMs: 120_000,
-});
-const label = result.status === "skipped"
-    ? `SKIPPED — ${result.skippedReason ?? "tool unavailable"}`
-    : result.status.toUpperCase();
-console.log(`\nStatus: ${label}`);
-if (result.findings.length > 0) {
-    console.log("\nFindings:");
-    for (const f of result.findings) {
-        console.log(`  [${f.severity.toUpperCase()}] ${f.title}`);
-        if (f.affectedFiles && f.affectedFiles.length > 0) {
-            console.log(`    Location: ${f.affectedFiles[0]}`);
-        }
-        if (f.description)
-            console.log(`    ${f.description.slice(0, 120)}`);
-    }
-}
-console.log(`\nDuration: ${result.durationMs}ms`);
-if (result.status === "skipped") {
-    console.log("\nSemgrep is optional. Absence does not block release.");
-    process.exitCode = 0;
-}
-else if (result.status === "failed") {
-    process.exitCode = 1;
-}
-else {
-    process.exitCode = 0;
-}
-function parseArgs(argv) {
-    const result = {};
-    for (let i = 0; i < argv.length; i++) {
-        if ((argv[i] === "--target" || argv[i] === "-t") && i + 1 < argv.length) {
-            result.target = argv[++i];
-        }
-    }
-    return result;
-}