@dataparade/cli 0.0.1

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (621) hide show
  1. package/LICENSE +674 -0
  2. package/README.md +592 -0
  3. package/dist/bin/cli.d.ts +2 -0
  4. package/dist/bin/cli.js +7 -0
  5. package/dist/bin/load-env.d.ts +2 -0
  6. package/dist/bin/load-env.js +4 -0
  7. package/dist/src/ai-enrichment/agent-orchestrator.d.ts +28 -0
  8. package/dist/src/ai-enrichment/agent-orchestrator.js +476 -0
  9. package/dist/src/ai-enrichment/agents/index.d.ts +4 -0
  10. package/dist/src/ai-enrichment/agents/index.js +50 -0
  11. package/dist/src/ai-enrichment/candidate-selector.d.ts +10 -0
  12. package/dist/src/ai-enrichment/candidate-selector.js +158 -0
  13. package/dist/src/ai-enrichment/fallbacks.d.ts +6 -0
  14. package/dist/src/ai-enrichment/fallbacks.js +762 -0
  15. package/dist/src/ai-enrichment/index.d.ts +15 -0
  16. package/dist/src/ai-enrichment/index.js +31 -0
  17. package/dist/src/ai-enrichment/merge-rules.d.ts +12 -0
  18. package/dist/src/ai-enrichment/merge-rules.js +321 -0
  19. package/dist/src/ai-enrichment/non-pii-signal-rules.d.ts +10 -0
  20. package/dist/src/ai-enrichment/non-pii-signal-rules.js +72 -0
  21. package/dist/src/ai-enrichment/openai-proposals-response.schema.d.ts +94 -0
  22. package/dist/src/ai-enrichment/openai-proposals-response.schema.js +82 -0
  23. package/dist/src/ai-enrichment/pii-signal-rules.d.ts +8 -0
  24. package/dist/src/ai-enrichment/pii-signal-rules.js +68 -0
  25. package/dist/src/ai-enrichment/pipeline.d.ts +2 -0
  26. package/dist/src/ai-enrichment/pipeline.js +48 -0
  27. package/dist/src/ai-enrichment/planner.d.ts +2 -0
  28. package/dist/src/ai-enrichment/planner.js +60 -0
  29. package/dist/src/ai-enrichment/prompts/provider-enrichment-prompts.d.ts +12 -0
  30. package/dist/src/ai-enrichment/prompts/provider-enrichment-prompts.js +45 -0
  31. package/dist/src/ai-enrichment/provider-prompt.d.ts +32 -0
  32. package/dist/src/ai-enrichment/provider-prompt.js +222 -0
  33. package/dist/src/ai-enrichment/provider-topology-rules.d.ts +52 -0
  34. package/dist/src/ai-enrichment/provider-topology-rules.js +190 -0
  35. package/dist/src/ai-enrichment/provider-topology-shared.d.ts +48 -0
  36. package/dist/src/ai-enrichment/provider-topology-shared.js +329 -0
  37. package/dist/src/ai-enrichment/providers/endpoint-resolution.d.ts +13 -0
  38. package/dist/src/ai-enrichment/providers/endpoint-resolution.js +41 -0
  39. package/dist/src/ai-enrichment/providers/families/chat-completions-family.d.ts +13 -0
  40. package/dist/src/ai-enrichment/providers/families/chat-completions-family.js +181 -0
  41. package/dist/src/ai-enrichment/providers/families/generate-content-family.d.ts +10 -0
  42. package/dist/src/ai-enrichment/providers/families/generate-content-family.js +93 -0
  43. package/dist/src/ai-enrichment/providers/families/messages-family.d.ts +10 -0
  44. package/dist/src/ai-enrichment/providers/families/messages-family.js +86 -0
  45. package/dist/src/ai-enrichment/providers/families/ollama-generate-family.d.ts +10 -0
  46. package/dist/src/ai-enrichment/providers/families/ollama-generate-family.js +69 -0
  47. package/dist/src/ai-enrichment/providers/fetch-with-timeout.d.ts +2 -0
  48. package/dist/src/ai-enrichment/providers/fetch-with-timeout.js +22 -0
  49. package/dist/src/ai-enrichment/providers/index.d.ts +16 -0
  50. package/dist/src/ai-enrichment/providers/index.js +40 -0
  51. package/dist/src/ai-enrichment/providers/mock.d.ts +5 -0
  52. package/dist/src/ai-enrichment/providers/mock.js +12 -0
  53. package/dist/src/ai-enrichment/providers/platform-proxy-provider.d.ts +20 -0
  54. package/dist/src/ai-enrichment/providers/platform-proxy-provider.js +116 -0
  55. package/dist/src/ai-enrichment/providers/presets.d.ts +14 -0
  56. package/dist/src/ai-enrichment/providers/presets.js +50 -0
  57. package/dist/src/ai-enrichment/providers/provider-contract.d.ts +20 -0
  58. package/dist/src/ai-enrichment/providers/provider-contract.js +703 -0
  59. package/dist/src/ai-enrichment/providers/provider-json-parse.d.ts +23 -0
  60. package/dist/src/ai-enrichment/providers/provider-json-parse.js +96 -0
  61. package/dist/src/ai-enrichment/providers/provider-output-token-budget.d.ts +5 -0
  62. package/dist/src/ai-enrichment/providers/provider-output-token-budget.js +11 -0
  63. package/dist/src/ai-enrichment/providers/provider-pricing.d.ts +7 -0
  64. package/dist/src/ai-enrichment/providers/provider-pricing.js +32 -0
  65. package/dist/src/ai-enrichment/providers/provider-runtime.d.ts +9 -0
  66. package/dist/src/ai-enrichment/providers/provider-runtime.js +54 -0
  67. package/dist/src/ai-enrichment/providers/resolve-provider.d.ts +27 -0
  68. package/dist/src/ai-enrichment/providers/resolve-provider.js +41 -0
  69. package/dist/src/ai-enrichment/providers/types.d.ts +24 -0
  70. package/dist/src/ai-enrichment/providers/types.js +2 -0
  71. package/dist/src/ai-enrichment/scan-paths.d.ts +9 -0
  72. package/dist/src/ai-enrichment/scan-paths.js +28 -0
  73. package/dist/src/ai-enrichment/sensitive-paths.d.ts +5 -0
  74. package/dist/src/ai-enrichment/sensitive-paths.js +10 -0
  75. package/dist/src/ai-enrichment/third-party-data-flow.d.ts +27 -0
  76. package/dist/src/ai-enrichment/third-party-data-flow.js +518 -0
  77. package/dist/src/ai-enrichment/third-party-evidence.d.ts +14 -0
  78. package/dist/src/ai-enrichment/third-party-evidence.js +426 -0
  79. package/dist/src/ai-enrichment/third-party-property-matrix.d.ts +14 -0
  80. package/dist/src/ai-enrichment/third-party-property-matrix.js +52 -0
  81. package/dist/src/ai-enrichment/third-party-subtype.d.ts +14 -0
  82. package/dist/src/ai-enrichment/third-party-subtype.js +166 -0
  83. package/dist/src/ai-enrichment/tools/index.d.ts +39 -0
  84. package/dist/src/ai-enrichment/tools/index.js +121 -0
  85. package/dist/src/ai-enrichment/types.d.ts +170 -0
  86. package/dist/src/ai-enrichment/types.js +12 -0
  87. package/dist/src/analyzers/python/dependency-manifests.d.ts +8 -0
  88. package/dist/src/analyzers/python/dependency-manifests.js +131 -0
  89. package/dist/src/analyzers/python/detector.d.ts +3 -0
  90. package/dist/src/analyzers/python/detector.js +22 -0
  91. package/dist/src/analyzers/python/index.d.ts +2 -0
  92. package/dist/src/analyzers/python/index.js +11 -0
  93. package/dist/src/analyzers/python/manifest-parsers.d.ts +3 -0
  94. package/dist/src/analyzers/python/manifest-parsers.js +134 -0
  95. package/dist/src/analyzers/python/parser.d.ts +26 -0
  96. package/dist/src/analyzers/python/parser.js +187 -0
  97. package/dist/src/analyzers/python/patterns.d.ts +7 -0
  98. package/dist/src/analyzers/python/patterns.js +106 -0
  99. package/dist/src/analyzers/python/python-detection-config.d.ts +75 -0
  100. package/dist/src/analyzers/python/python-detection-config.js +148 -0
  101. package/dist/src/analyzers/registry.d.ts +13 -0
  102. package/dist/src/analyzers/registry.js +60 -0
  103. package/dist/src/analyzers/shared/manifest-budgets.d.ts +19 -0
  104. package/dist/src/analyzers/shared/manifest-budgets.js +21 -0
  105. package/dist/src/analyzers/shared/manifest-fs.d.ts +13 -0
  106. package/dist/src/analyzers/shared/manifest-fs.js +138 -0
  107. package/dist/src/analyzers/shared/property-inference.d.ts +8 -0
  108. package/dist/src/analyzers/shared/property-inference.js +165 -0
  109. package/dist/src/analyzers/terraform/detector.d.ts +10 -0
  110. package/dist/src/analyzers/terraform/detector.js +198 -0
  111. package/dist/src/analyzers/terraform/index.d.ts +2 -0
  112. package/dist/src/analyzers/terraform/index.js +13 -0
  113. package/dist/src/analyzers/terraform/parser.d.ts +29 -0
  114. package/dist/src/analyzers/terraform/parser.js +202 -0
  115. package/dist/src/analyzers/terraform/terraform-detection-config.d.ts +48 -0
  116. package/dist/src/analyzers/terraform/terraform-detection-config.js +218 -0
  117. package/dist/src/analyzers/terraform/terraform-exec.d.ts +11 -0
  118. package/dist/src/analyzers/terraform/terraform-exec.js +35 -0
  119. package/dist/src/analyzers/terraform/terraform-module-manifest.d.ts +19 -0
  120. package/dist/src/analyzers/terraform/terraform-module-manifest.js +75 -0
  121. package/dist/src/analyzers/terraform/terraform-show-json.d.ts +15 -0
  122. package/dist/src/analyzers/terraform/terraform-show-json.js +188 -0
  123. package/dist/src/analyzers/terraform/terraform-utility-resource.d.ts +12 -0
  124. package/dist/src/analyzers/terraform/terraform-utility-resource.js +30 -0
  125. package/dist/src/analyzers/types.d.ts +5 -0
  126. package/dist/src/analyzers/types.js +2 -0
  127. package/dist/src/analyzers/typescript/actor-detection.d.ts +4 -0
  128. package/dist/src/analyzers/typescript/actor-detection.js +15 -0
  129. package/dist/src/analyzers/typescript/dependency-manifests.d.ts +9 -0
  130. package/dist/src/analyzers/typescript/dependency-manifests.js +131 -0
  131. package/dist/src/analyzers/typescript/detector.d.ts +3 -0
  132. package/dist/src/analyzers/typescript/detector.js +23 -0
  133. package/dist/src/analyzers/typescript/index.d.ts +2 -0
  134. package/dist/src/analyzers/typescript/index.js +11 -0
  135. package/dist/src/analyzers/typescript/manifest-parsers.d.ts +1 -0
  136. package/dist/src/analyzers/typescript/manifest-parsers.js +30 -0
  137. package/dist/src/analyzers/typescript/parser.d.ts +44 -0
  138. package/dist/src/analyzers/typescript/parser.js +287 -0
  139. package/dist/src/analyzers/typescript/third-party-detection.d.ts +4 -0
  140. package/dist/src/analyzers/typescript/third-party-detection.js +16 -0
  141. package/dist/src/analyzers/typescript/typescript-detection-config.d.ts +68 -0
  142. package/dist/src/analyzers/typescript/typescript-detection-config.js +171 -0
  143. package/dist/src/analyzers/typescript/typescript-detection.d.ts +10 -0
  144. package/dist/src/analyzers/typescript/typescript-detection.js +57 -0
  145. package/dist/src/classifier/application-injection.d.ts +12 -0
  146. package/dist/src/classifier/application-injection.js +335 -0
  147. package/dist/src/classifier/classify.d.ts +3 -0
  148. package/dist/src/classifier/classify.js +15 -0
  149. package/dist/src/classifier/component-factory.d.ts +3 -0
  150. package/dist/src/classifier/component-factory.js +488 -0
  151. package/dist/src/classifier/config.d.ts +38 -0
  152. package/dist/src/classifier/config.js +260 -0
  153. package/dist/src/classifier/enhance-defaults.d.ts +28 -0
  154. package/dist/src/classifier/enhance-defaults.js +369 -0
  155. package/dist/src/classifier/enhance.d.ts +13 -0
  156. package/dist/src/classifier/enhance.js +295 -0
  157. package/dist/src/classifier/external-url-third-party.d.ts +26 -0
  158. package/dist/src/classifier/external-url-third-party.js +195 -0
  159. package/dist/src/classifier/grouping.d.ts +1 -0
  160. package/dist/src/classifier/grouping.js +2 -0
  161. package/dist/src/classifier/main-application-selection.d.ts +41 -0
  162. package/dist/src/classifier/main-application-selection.js +222 -0
  163. package/dist/src/classifier/naming.d.ts +4 -0
  164. package/dist/src/classifier/naming.js +78 -0
  165. package/dist/src/classifier/postprocessing.d.ts +12 -0
  166. package/dist/src/classifier/postprocessing.js +510 -0
  167. package/dist/src/classifier/sectioning.d.ts +5 -0
  168. package/dist/src/classifier/sectioning.js +60 -0
  169. package/dist/src/classifier/terraform-provider-hub.d.ts +6 -0
  170. package/dist/src/classifier/terraform-provider-hub.js +38 -0
  171. package/dist/src/cli.d.ts +2 -0
  172. package/dist/src/cli.js +498 -0
  173. package/dist/src/config/actor-detection-config.d.ts +21 -0
  174. package/dist/src/config/actor-detection-config.js +97 -0
  175. package/dist/src/config/env.d.ts +2 -0
  176. package/dist/src/config/env.js +75 -0
  177. package/dist/src/config/file.d.ts +6 -0
  178. package/dist/src/config/file.js +74 -0
  179. package/dist/src/config/inference-scope.d.ts +2 -0
  180. package/dist/src/config/inference-scope.js +15 -0
  181. package/dist/src/config/load-cli-env.d.ts +1 -0
  182. package/dist/src/config/load-cli-env.js +54 -0
  183. package/dist/src/config/normalize-ai-provider.d.ts +5 -0
  184. package/dist/src/config/normalize-ai-provider.js +18 -0
  185. package/dist/src/config/property-detection-config.d.ts +27 -0
  186. package/dist/src/config/property-detection-config.js +355 -0
  187. package/dist/src/config/redact.d.ts +3 -0
  188. package/dist/src/config/redact.js +14 -0
  189. package/dist/src/config/resolve.d.ts +15 -0
  190. package/dist/src/config/resolve.js +361 -0
  191. package/dist/src/config/scan-env.d.ts +7 -0
  192. package/dist/src/config/scan-env.js +38 -0
  193. package/dist/src/config/third-party-detection-config.d.ts +25 -0
  194. package/dist/src/config/third-party-detection-config.js +97 -0
  195. package/dist/src/config/types.d.ts +106 -0
  196. package/dist/src/config/types.js +2 -0
  197. package/dist/src/config/validate-scan-ai.d.ts +3 -0
  198. package/dist/src/config/validate-scan-ai.js +33 -0
  199. package/dist/src/core/pipeline/ai-orchestrator-options.d.ts +6 -0
  200. package/dist/src/core/pipeline/ai-orchestrator-options.js +46 -0
  201. package/dist/src/core/pipeline/classifier-phase.d.ts +7 -0
  202. package/dist/src/core/pipeline/classifier-phase.js +78 -0
  203. package/dist/src/core/pipeline/dataflow-phase.d.ts +7 -0
  204. package/dist/src/core/pipeline/dataflow-phase.js +10 -0
  205. package/dist/src/core/pipeline/diagram-layout/app-section-layout.d.ts +7 -0
  206. package/dist/src/core/pipeline/diagram-layout/app-section-layout.js +74 -0
  207. package/dist/src/core/pipeline/diagram-layout/constants.d.ts +11 -0
  208. package/dist/src/core/pipeline/diagram-layout/constants.js +14 -0
  209. package/dist/src/core/pipeline/diagram-layout/edge-handles.d.ts +3 -0
  210. package/dist/src/core/pipeline/diagram-layout/edge-handles.js +26 -0
  211. package/dist/src/core/pipeline/diagram-layout/managed-provider-layout.d.ts +3 -0
  212. package/dist/src/core/pipeline/diagram-layout/managed-provider-layout.js +40 -0
  213. package/dist/src/core/pipeline/diagram-layout/minimal-terraform-layout.d.ts +6 -0
  214. package/dist/src/core/pipeline/diagram-layout/minimal-terraform-layout.js +53 -0
  215. package/dist/src/core/pipeline/diagram-layout/section-helpers.d.ts +30 -0
  216. package/dist/src/core/pipeline/diagram-layout/section-helpers.js +62 -0
  217. package/dist/src/core/pipeline/diagram-layout/terraform-lane-layout.d.ts +3 -0
  218. package/dist/src/core/pipeline/diagram-layout/terraform-lane-layout.js +109 -0
  219. package/dist/src/core/pipeline/diagram-layout/types.d.ts +2 -0
  220. package/dist/src/core/pipeline/diagram-layout/types.js +2 -0
  221. package/dist/src/core/pipeline/graph-mapping.d.ts +6 -0
  222. package/dist/src/core/pipeline/graph-mapping.js +308 -0
  223. package/dist/src/core/pipeline/mixed-app-terraform-scan.d.ts +13 -0
  224. package/dist/src/core/pipeline/mixed-app-terraform-scan.js +81 -0
  225. package/dist/src/core/pipeline/orchestrator-result.d.ts +6 -0
  226. package/dist/src/core/pipeline/orchestrator-result.js +2 -0
  227. package/dist/src/core/pipeline/orchestrator.d.ts +26 -0
  228. package/dist/src/core/pipeline/orchestrator.js +79 -0
  229. package/dist/src/core/pipeline/resolve-path-under-scan-root.d.ts +7 -0
  230. package/dist/src/core/pipeline/resolve-path-under-scan-root.js +55 -0
  231. package/dist/src/core/pipeline/scan-pipeline.d.ts +6 -0
  232. package/dist/src/core/pipeline/scan-pipeline.js +364 -0
  233. package/dist/src/core/pipeline/sorting.d.ts +3 -0
  234. package/dist/src/core/pipeline/sorting.js +48 -0
  235. package/dist/src/core/pipeline/stable-component-ids.d.ts +15 -0
  236. package/dist/src/core/pipeline/stable-component-ids.js +68 -0
  237. package/dist/src/core/pipeline/structural-scan.d.ts +19 -0
  238. package/dist/src/core/pipeline/structural-scan.js +304 -0
  239. package/dist/src/core/pipeline/terraform-flow-utils.d.ts +6 -0
  240. package/dist/src/core/pipeline/terraform-flow-utils.js +32 -0
  241. package/dist/src/core/pipeline/terraform-minimal-services.d.ts +31 -0
  242. package/dist/src/core/pipeline/terraform-minimal-services.js +225 -0
  243. package/dist/src/core/schema/dataflow-wrapper.schema.d.ts +83 -0
  244. package/dist/src/core/schema/dataflow-wrapper.schema.js +40 -0
  245. package/dist/src/core/schema/diagram-graph.schema.d.ts +93 -0
  246. package/dist/src/core/schema/diagram-graph.schema.js +55 -0
  247. package/dist/src/core/schema/index.d.ts +4 -0
  248. package/dist/src/core/schema/index.js +20 -0
  249. package/dist/src/core/schema/scan-config.schema.d.ts +66 -0
  250. package/dist/src/core/schema/scan-config.schema.js +67 -0
  251. package/dist/src/core/schema/scan-result.schema.d.ts +450 -0
  252. package/dist/src/core/schema/scan-result.schema.js +236 -0
  253. package/dist/src/core/sectioning/discover-service-sections.d.ts +80 -0
  254. package/dist/src/core/sectioning/discover-service-sections.js +468 -0
  255. package/dist/src/core/sectioning/section-runtime.d.ts +21 -0
  256. package/dist/src/core/sectioning/section-runtime.js +148 -0
  257. package/dist/src/core/terraform/component-predicates.d.ts +13 -0
  258. package/dist/src/core/terraform/component-predicates.js +71 -0
  259. package/dist/src/core/types/component.d.ts +18 -0
  260. package/dist/src/core/types/component.js +2 -0
  261. package/dist/src/core/types/config.d.ts +57 -0
  262. package/dist/src/core/types/config.js +2 -0
  263. package/dist/src/core/types/data-flow.d.ts +24 -0
  264. package/dist/src/core/types/data-flow.js +2 -0
  265. package/dist/src/core/types/detection.d.ts +12 -0
  266. package/dist/src/core/types/detection.js +19 -0
  267. package/dist/src/core/types/file.d.ts +14 -0
  268. package/dist/src/core/types/file.js +2 -0
  269. package/dist/src/core/types/index.d.ts +7 -0
  270. package/dist/src/core/types/index.js +23 -0
  271. package/dist/src/core/types/progress.d.ts +9 -0
  272. package/dist/src/core/types/progress.js +2 -0
  273. package/dist/src/core/types/result.d.ts +140 -0
  274. package/dist/src/core/types/result.js +2 -0
  275. package/dist/src/data-flow/application-hub.d.ts +7 -0
  276. package/dist/src/data-flow/application-hub.js +88 -0
  277. package/dist/src/data-flow/dedupe.d.ts +7 -0
  278. package/dist/src/data-flow/dedupe.js +92 -0
  279. package/dist/src/data-flow/detect.d.ts +16 -0
  280. package/dist/src/data-flow/detect.js +203 -0
  281. package/dist/src/data-flow/detector.d.ts +15 -0
  282. package/dist/src/data-flow/detector.js +18 -0
  283. package/dist/src/data-flow/drop-cross-section-flows.d.ts +8 -0
  284. package/dist/src/data-flow/drop-cross-section-flows.js +32 -0
  285. package/dist/src/data-flow/ensure-actor-flow.d.ts +16 -0
  286. package/dist/src/data-flow/ensure-actor-flow.js +101 -0
  287. package/dist/src/data-flow/ensure-manifest-declared-flows.d.ts +14 -0
  288. package/dist/src/data-flow/ensure-manifest-declared-flows.js +76 -0
  289. package/dist/src/data-flow/ensure-section-api-flows.d.ts +6 -0
  290. package/dist/src/data-flow/ensure-section-api-flows.js +57 -0
  291. package/dist/src/data-flow/flow-builder.d.ts +5 -0
  292. package/dist/src/data-flow/flow-builder.js +80 -0
  293. package/dist/src/data-flow/import-graph.d.ts +10 -0
  294. package/dist/src/data-flow/import-graph.js +147 -0
  295. package/dist/src/data-flow/index.d.ts +8 -0
  296. package/dist/src/data-flow/index.js +20 -0
  297. package/dist/src/data-flow/internal-fetch.d.ts +8 -0
  298. package/dist/src/data-flow/internal-fetch.js +209 -0
  299. package/dist/src/data-flow/postprocess.d.ts +9 -0
  300. package/dist/src/data-flow/postprocess.js +63 -0
  301. package/dist/src/data-flow/rewire.d.ts +10 -0
  302. package/dist/src/data-flow/rewire.js +93 -0
  303. package/dist/src/data-flow/source-attribution.d.ts +8 -0
  304. package/dist/src/data-flow/source-attribution.js +131 -0
  305. package/dist/src/data-flow/source-resolution.d.ts +13 -0
  306. package/dist/src/data-flow/source-resolution.js +61 -0
  307. package/dist/src/data-flow/target-matching.d.ts +21 -0
  308. package/dist/src/data-flow/target-matching.js +253 -0
  309. package/dist/src/data-flow/terraform-flows.d.ts +32 -0
  310. package/dist/src/data-flow/terraform-flows.js +170 -0
  311. package/dist/src/evals/metrics.d.ts +18 -0
  312. package/dist/src/evals/metrics.js +58 -0
  313. package/dist/src/evals/run-model-matrix.d.ts +1 -0
  314. package/dist/src/evals/run-model-matrix.js +68 -0
  315. package/dist/src/index.d.ts +2 -0
  316. package/dist/src/index.js +20 -0
  317. package/dist/src/ingest/file-system.d.ts +17 -0
  318. package/dist/src/ingest/file-system.js +239 -0
  319. package/dist/src/ingest/gitignore.d.ts +12 -0
  320. package/dist/src/ingest/gitignore.js +127 -0
  321. package/dist/src/ingest/sensitive-paths.d.ts +2 -0
  322. package/dist/src/ingest/sensitive-paths.js +8 -0
  323. package/dist/src/observability/scan-sentry.d.ts +20 -0
  324. package/dist/src/observability/scan-sentry.js +133 -0
  325. package/dist/src/output/json.d.ts +51 -0
  326. package/dist/src/output/json.js +59 -0
  327. package/dist/src/patterns/config.d.ts +22 -0
  328. package/dist/src/patterns/config.js +119 -0
  329. package/dist/src/patterns/detectors/helpers.d.ts +19 -0
  330. package/dist/src/patterns/detectors/helpers.js +68 -0
  331. package/dist/src/patterns/detectors/python.d.ts +8 -0
  332. package/dist/src/patterns/detectors/python.js +412 -0
  333. package/dist/src/patterns/detectors/typescript.d.ts +8 -0
  334. package/dist/src/patterns/detectors/typescript.js +328 -0
  335. package/dist/src/patterns/engine.d.ts +40 -0
  336. package/dist/src/patterns/engine.js +111 -0
  337. package/dist/src/patterns/flow-source-patterns.d.ts +6 -0
  338. package/dist/src/patterns/flow-source-patterns.js +39 -0
  339. package/dist/src/patterns/frontend-frameworks.d.ts +4 -0
  340. package/dist/src/patterns/frontend-frameworks.js +25 -0
  341. package/dist/src/patterns/scan-exclusions.d.ts +14 -0
  342. package/dist/src/patterns/scan-exclusions.js +76 -0
  343. package/dist/src/platform-api/dataparade-api-base-url.d.ts +8 -0
  344. package/dist/src/platform-api/dataparade-api-base-url.js +17 -0
  345. package/dist/src/platform-api/estimate-scan-footprint.d.ts +8 -0
  346. package/dist/src/platform-api/estimate-scan-footprint.js +120 -0
  347. package/dist/src/platform-api/scan-quota-client.d.ts +28 -0
  348. package/dist/src/platform-api/scan-quota-client.js +79 -0
  349. package/dist/src/tracing/langsmith-tracing.d.ts +37 -0
  350. package/dist/src/tracing/langsmith-tracing.js +171 -0
  351. package/dist/tests/cli/cli.spec.d.ts +1 -0
  352. package/dist/tests/cli/cli.spec.js +87 -0
  353. package/dist/tests/fixtures/e2e-ts-sample/db-client-import.d.ts +2 -0
  354. package/dist/tests/fixtures/e2e-ts-sample/db-client-import.js +8 -0
  355. package/dist/tests/fixtures/e2e-ts-sample/db.d.ts +3 -0
  356. package/dist/tests/fixtures/e2e-ts-sample/db.js +7 -0
  357. package/dist/tests/fixtures/e2e-ts-sample/external-api.d.ts +1 -0
  358. package/dist/tests/fixtures/e2e-ts-sample/external-api.js +18 -0
  359. package/dist/tests/fixtures/e2e-ts-sample/pg-client.d.ts +3 -0
  360. package/dist/tests/fixtures/e2e-ts-sample/pg-client.js +7 -0
  361. package/dist/tests/fixtures/e2e-ts-sample/server.d.ts +14 -0
  362. package/dist/tests/fixtures/e2e-ts-sample/server.js +4 -0
  363. package/dist/tests/fixtures/e2e-ts-sentry-route-env/server.d.ts +1 -0
  364. package/dist/tests/fixtures/e2e-ts-sentry-route-env/server.js +24 -0
  365. package/dist/tests/fixtures/ingest-basic/src/index.d.ts +1 -0
  366. package/dist/tests/fixtures/ingest-basic/src/index.js +6 -0
  367. package/dist/tests/fixtures/mixed-language-basic/api.d.ts +2 -0
  368. package/dist/tests/fixtures/mixed-language-basic/api.js +12 -0
  369. package/dist/tests/fixtures/monorepo-app-plus-terraform/packages/app/app/route.d.ts +1 -0
  370. package/dist/tests/fixtures/monorepo-app-plus-terraform/packages/app/app/route.js +6 -0
  371. package/dist/tests/fixtures/monorepo-front-back-sections/backend/app/route.d.ts +1 -0
  372. package/dist/tests/fixtures/monorepo-front-back-sections/backend/app/route.js +6 -0
  373. package/dist/tests/fixtures/monorepo-front-back-sections/frontend/app/route.d.ts +1 -0
  374. package/dist/tests/fixtures/monorepo-front-back-sections/frontend/app/route.js +7 -0
  375. package/dist/tests/fixtures/typescript-basic/app/route.d.ts +1 -0
  376. package/dist/tests/fixtures/typescript-basic/app/route.js +7 -0
  377. package/dist/tests/fixtures/typescript-basic/db-client-import.d.ts +2 -0
  378. package/dist/tests/fixtures/typescript-basic/db-client-import.js +8 -0
  379. package/dist/tests/fixtures/typescript-basic/db.d.ts +3 -0
  380. package/dist/tests/fixtures/typescript-basic/db.js +7 -0
  381. package/dist/tests/fixtures/typescript-basic/external-api.d.ts +1 -0
  382. package/dist/tests/fixtures/typescript-basic/external-api.js +18 -0
  383. package/dist/tests/fixtures/typescript-basic/pg-client.d.ts +3 -0
  384. package/dist/tests/fixtures/typescript-basic/pg-client.js +7 -0
  385. package/dist/tests/fixtures/typescript-basic/server.d.ts +14 -0
  386. package/dist/tests/fixtures/typescript-basic/server.js +4 -0
  387. package/dist/tests/fixtures/typescript-dependency-manifests-basic/src/index.d.ts +0 -0
  388. package/dist/tests/fixtures/typescript-dependency-manifests-basic/src/index.js +2 -0
  389. package/dist/tests/helpers/scan-result-builders.d.ts +2 -0
  390. package/dist/tests/helpers/scan-result-builders.js +15 -0
  391. package/dist/tests/schema/dataflow-wrapper.schema.spec.d.ts +1 -0
  392. package/dist/tests/schema/dataflow-wrapper.schema.spec.js +89 -0
  393. package/dist/tests/schema/diagram-graph.schema.spec.d.ts +1 -0
  394. package/dist/tests/schema/diagram-graph.schema.spec.js +48 -0
  395. package/dist/tests/schema/scan-config.schema.spec.d.ts +1 -0
  396. package/dist/tests/schema/scan-config.schema.spec.js +135 -0
  397. package/dist/tests/schema/scan-result.schema.spec.d.ts +1 -0
  398. package/dist/tests/schema/scan-result.schema.spec.js +177 -0
  399. package/dist/tests/unit/ai-enrichment/agent-orchestrator.spec.d.ts +1 -0
  400. package/dist/tests/unit/ai-enrichment/agent-orchestrator.spec.js +483 -0
  401. package/dist/tests/unit/ai-enrichment/candidate-selector.spec.d.ts +1 -0
  402. package/dist/tests/unit/ai-enrichment/candidate-selector.spec.js +106 -0
  403. package/dist/tests/unit/ai-enrichment/create-ai-provider.spec.d.ts +1 -0
  404. package/dist/tests/unit/ai-enrichment/create-ai-provider.spec.js +32 -0
  405. package/dist/tests/unit/ai-enrichment/endpoint-resolution.spec.d.ts +1 -0
  406. package/dist/tests/unit/ai-enrichment/endpoint-resolution.spec.js +47 -0
  407. package/dist/tests/unit/ai-enrichment/fallbacks.spec.d.ts +1 -0
  408. package/dist/tests/unit/ai-enrichment/fallbacks.spec.js +1304 -0
  409. package/dist/tests/unit/ai-enrichment/families/chat-completions-family.spec.d.ts +1 -0
  410. package/dist/tests/unit/ai-enrichment/families/chat-completions-family.spec.js +219 -0
  411. package/dist/tests/unit/ai-enrichment/families/generate-content-family.spec.d.ts +1 -0
  412. package/dist/tests/unit/ai-enrichment/families/generate-content-family.spec.js +119 -0
  413. package/dist/tests/unit/ai-enrichment/families/messages-family.spec.d.ts +1 -0
  414. package/dist/tests/unit/ai-enrichment/families/messages-family.spec.js +129 -0
  415. package/dist/tests/unit/ai-enrichment/families/ollama-generate-family.spec.d.ts +1 -0
  416. package/dist/tests/unit/ai-enrichment/families/ollama-generate-family.spec.js +69 -0
  417. package/dist/tests/unit/ai-enrichment/merge-rules.spec.d.ts +1 -0
  418. package/dist/tests/unit/ai-enrichment/merge-rules.spec.js +422 -0
  419. package/dist/tests/unit/ai-enrichment/openai-proposals-response.schema.spec.d.ts +1 -0
  420. package/dist/tests/unit/ai-enrichment/openai-proposals-response.schema.spec.js +30 -0
  421. package/dist/tests/unit/ai-enrichment/pipeline.spec.d.ts +1 -0
  422. package/dist/tests/unit/ai-enrichment/pipeline.spec.js +120 -0
  423. package/dist/tests/unit/ai-enrichment/planner.spec.d.ts +1 -0
  424. package/dist/tests/unit/ai-enrichment/planner.spec.js +106 -0
  425. package/dist/tests/unit/ai-enrichment/platform-proxy-provider.spec.d.ts +1 -0
  426. package/dist/tests/unit/ai-enrichment/platform-proxy-provider.spec.js +51 -0
  427. package/dist/tests/unit/ai-enrichment/provider-contract.spec.d.ts +1 -0
  428. package/dist/tests/unit/ai-enrichment/provider-contract.spec.js +244 -0
  429. package/dist/tests/unit/ai-enrichment/provider-json-parse.spec.d.ts +1 -0
  430. package/dist/tests/unit/ai-enrichment/provider-json-parse.spec.js +24 -0
  431. package/dist/tests/unit/ai-enrichment/provider-output-token-budget.spec.d.ts +1 -0
  432. package/dist/tests/unit/ai-enrichment/provider-output-token-budget.spec.js +15 -0
  433. package/dist/tests/unit/ai-enrichment/provider-prompt-env.spec.d.ts +1 -0
  434. package/dist/tests/unit/ai-enrichment/provider-prompt-env.spec.js +54 -0
  435. package/dist/tests/unit/ai-enrichment/provider-prompt.spec.d.ts +1 -0
  436. package/dist/tests/unit/ai-enrichment/provider-prompt.spec.js +206 -0
  437. package/dist/tests/unit/ai-enrichment/provider-topology-terraform-aws.spec.d.ts +1 -0
  438. package/dist/tests/unit/ai-enrichment/provider-topology-terraform-aws.spec.js +43 -0
  439. package/dist/tests/unit/ai-enrichment/provider-topology-terraform-kubernetes.spec.d.ts +1 -0
  440. package/dist/tests/unit/ai-enrichment/provider-topology-terraform-kubernetes.spec.js +40 -0
  441. package/dist/tests/unit/ai-enrichment/providers/fetch-with-timeout.spec.d.ts +1 -0
  442. package/dist/tests/unit/ai-enrichment/providers/fetch-with-timeout.spec.js +22 -0
  443. package/dist/tests/unit/ai-enrichment/resolve-provider.spec.d.ts +1 -0
  444. package/dist/tests/unit/ai-enrichment/resolve-provider.spec.js +67 -0
  445. package/dist/tests/unit/ai-enrichment/scan-paths-exact.spec.d.ts +1 -0
  446. package/dist/tests/unit/ai-enrichment/scan-paths-exact.spec.js +35 -0
  447. package/dist/tests/unit/ai-enrichment/scan-paths.spec.d.ts +1 -0
  448. package/dist/tests/unit/ai-enrichment/scan-paths.spec.js +21 -0
  449. package/dist/tests/unit/ai-enrichment/sensitive-paths.spec.d.ts +1 -0
  450. package/dist/tests/unit/ai-enrichment/sensitive-paths.spec.js +20 -0
  451. package/dist/tests/unit/ai-enrichment/third-party-data-flow.spec.d.ts +1 -0
  452. package/dist/tests/unit/ai-enrichment/third-party-data-flow.spec.js +963 -0
  453. package/dist/tests/unit/ai-enrichment/third-party-evidence.spec.d.ts +1 -0
  454. package/dist/tests/unit/ai-enrichment/third-party-evidence.spec.js +117 -0
  455. package/dist/tests/unit/ai-enrichment/third-party-subtype.spec.d.ts +1 -0
  456. package/dist/tests/unit/ai-enrichment/third-party-subtype.spec.js +45 -0
  457. package/dist/tests/unit/ai-enrichment/tools-validation.spec.d.ts +1 -0
  458. package/dist/tests/unit/ai-enrichment/tools-validation.spec.js +66 -0
  459. package/dist/tests/unit/analyzers/python/parser.spec.d.ts +1 -0
  460. package/dist/tests/unit/analyzers/python/parser.spec.js +104 -0
  461. package/dist/tests/unit/analyzers/python/patterns.spec.d.ts +1 -0
  462. package/dist/tests/unit/analyzers/python/patterns.spec.js +289 -0
  463. package/dist/tests/unit/analyzers/registry.spec.d.ts +1 -0
  464. package/dist/tests/unit/analyzers/registry.spec.js +234 -0
  465. package/dist/tests/unit/analyzers/terraform/classifier-subtype-parity.spec.d.ts +1 -0
  466. package/dist/tests/unit/analyzers/terraform/classifier-subtype-parity.spec.js +87 -0
  467. package/dist/tests/unit/analyzers/terraform/detector.spec.d.ts +1 -0
  468. package/dist/tests/unit/analyzers/terraform/detector.spec.js +110 -0
  469. package/dist/tests/unit/analyzers/terraform/generated-provider-hints.spec.d.ts +1 -0
  470. package/dist/tests/unit/analyzers/terraform/generated-provider-hints.spec.js +53 -0
  471. package/dist/tests/unit/analyzers/terraform/parser.spec.d.ts +1 -0
  472. package/dist/tests/unit/analyzers/terraform/parser.spec.js +56 -0
  473. package/dist/tests/unit/analyzers/terraform/terraform-module-manifest.spec.d.ts +1 -0
  474. package/dist/tests/unit/analyzers/terraform/terraform-module-manifest.spec.js +63 -0
  475. package/dist/tests/unit/analyzers/terraform/terraform-utility-resource.spec.d.ts +1 -0
  476. package/dist/tests/unit/analyzers/terraform/terraform-utility-resource.spec.js +19 -0
  477. package/dist/tests/unit/analyzers/terraform-exec.spec.d.ts +1 -0
  478. package/dist/tests/unit/analyzers/terraform-exec.spec.js +27 -0
  479. package/dist/tests/unit/analyzers/terraform-show-json.spec.d.ts +1 -0
  480. package/dist/tests/unit/analyzers/terraform-show-json.spec.js +77 -0
  481. package/dist/tests/unit/analyzers/typescript/dependency-manifests.spec.d.ts +1 -0
  482. package/dist/tests/unit/analyzers/typescript/dependency-manifests.spec.js +61 -0
  483. package/dist/tests/unit/analyzers/typescript/detector.spec.d.ts +1 -0
  484. package/dist/tests/unit/analyzers/typescript/detector.spec.js +225 -0
  485. package/dist/tests/unit/analyzers/typescript/external-apis-auth0.spec.d.ts +1 -0
  486. package/dist/tests/unit/analyzers/typescript/external-apis-auth0.spec.js +49 -0
  487. package/dist/tests/unit/analyzers/typescript/external-apis-sentry.spec.d.ts +1 -0
  488. package/dist/tests/unit/analyzers/typescript/external-apis-sentry.spec.js +27 -0
  489. package/dist/tests/unit/analyzers/typescript/fixture-integration.spec.d.ts +1 -0
  490. package/dist/tests/unit/analyzers/typescript/fixture-integration.spec.js +64 -0
  491. package/dist/tests/unit/analyzers/typescript/parser.spec.d.ts +1 -0
  492. package/dist/tests/unit/analyzers/typescript/parser.spec.js +99 -0
  493. package/dist/tests/unit/analyzers/typescript/pattern-config.spec.d.ts +1 -0
  494. package/dist/tests/unit/analyzers/typescript/pattern-config.spec.js +24 -0
  495. package/dist/tests/unit/analyzers/typescript/property-detection.spec.d.ts +1 -0
  496. package/dist/tests/unit/analyzers/typescript/property-detection.spec.js +138 -0
  497. package/dist/tests/unit/classifier/classify.spec.d.ts +1 -0
  498. package/dist/tests/unit/classifier/classify.spec.js +1453 -0
  499. package/dist/tests/unit/classifier/enhance.spec.d.ts +1 -0
  500. package/dist/tests/unit/classifier/enhance.spec.js +400 -0
  501. package/dist/tests/unit/classifier/external-url-third-party.spec.d.ts +1 -0
  502. package/dist/tests/unit/classifier/external-url-third-party.spec.js +83 -0
  503. package/dist/tests/unit/classifier/frontend-framework-grouping.spec.d.ts +1 -0
  504. package/dist/tests/unit/classifier/frontend-framework-grouping.spec.js +44 -0
  505. package/dist/tests/unit/classifier/terraform-grouping.spec.d.ts +1 -0
  506. package/dist/tests/unit/classifier/terraform-grouping.spec.js +96 -0
  507. package/dist/tests/unit/cli/config-command.spec.d.ts +1 -0
  508. package/dist/tests/unit/cli/config-command.spec.js +51 -0
  509. package/dist/tests/unit/cli/scan-command-ai-flags.spec.d.ts +0 -0
  510. package/dist/tests/unit/cli/scan-command-ai-flags.spec.js +149 -0
  511. package/dist/tests/unit/cli/scan-command-diagram-graph.spec.d.ts +1 -0
  512. package/dist/tests/unit/cli/scan-command-diagram-graph.spec.js +26 -0
  513. package/dist/tests/unit/cli/scan-command-e2e-monorepo-app-plus-terraform.spec.d.ts +1 -0
  514. package/dist/tests/unit/cli/scan-command-e2e-monorepo-app-plus-terraform.spec.js +107 -0
  515. package/dist/tests/unit/cli/scan-command-e2e-monorepo-front-back-sections.spec.d.ts +1 -0
  516. package/dist/tests/unit/cli/scan-command-e2e-monorepo-front-back-sections.spec.js +74 -0
  517. package/dist/tests/unit/cli/scan-command-e2e-python-basic.spec.d.ts +1 -0
  518. package/dist/tests/unit/cli/scan-command-e2e-python-basic.spec.js +43 -0
  519. package/dist/tests/unit/cli/scan-command-e2e-terraform-basic.spec.d.ts +1 -0
  520. package/dist/tests/unit/cli/scan-command-e2e-terraform-basic.spec.js +62 -0
  521. package/dist/tests/unit/cli/scan-command-e2e-ts-sample.spec.d.ts +1 -0
  522. package/dist/tests/unit/cli/scan-command-e2e-ts-sample.spec.js +41 -0
  523. package/dist/tests/unit/cli/scan-command-e2e-ts-sentry-route-env.spec.d.ts +1 -0
  524. package/dist/tests/unit/cli/scan-command-e2e-ts-sentry-route-env.spec.js +85 -0
  525. package/dist/tests/unit/cli/scan-command-exit-code.spec.d.ts +1 -0
  526. package/dist/tests/unit/cli/scan-command-exit-code.spec.js +131 -0
  527. package/dist/tests/unit/cli/scan-quota-flow.spec.d.ts +1 -0
  528. package/dist/tests/unit/cli/scan-quota-flow.spec.js +76 -0
  529. package/dist/tests/unit/config/property-detection-config.spec.d.ts +1 -0
  530. package/dist/tests/unit/config/property-detection-config.spec.js +38 -0
  531. package/dist/tests/unit/config/redact.spec.d.ts +1 -0
  532. package/dist/tests/unit/config/redact.spec.js +19 -0
  533. package/dist/tests/unit/config/resolve-config.spec.d.ts +1 -0
  534. package/dist/tests/unit/config/resolve-config.spec.js +172 -0
  535. package/dist/tests/unit/config/scan-env-debug.spec.d.ts +1 -0
  536. package/dist/tests/unit/config/scan-env-debug.spec.js +17 -0
  537. package/dist/tests/unit/config/validate-scan-ai.spec.d.ts +1 -0
  538. package/dist/tests/unit/config/validate-scan-ai.spec.js +53 -0
  539. package/dist/tests/unit/core/classifier-phase-regressions.spec.d.ts +1 -0
  540. package/dist/tests/unit/core/classifier-phase-regressions.spec.js +68 -0
  541. package/dist/tests/unit/core/dependency-manifest-performance-budgets.spec.d.ts +1 -0
  542. package/dist/tests/unit/core/dependency-manifest-performance-budgets.spec.js +66 -0
  543. package/dist/tests/unit/core/dependency-manifest-toggles-confidence.spec.d.ts +1 -0
  544. package/dist/tests/unit/core/dependency-manifest-toggles-confidence.spec.js +132 -0
  545. package/dist/tests/unit/core/discover-service-sections.spec.d.ts +1 -0
  546. package/dist/tests/unit/core/discover-service-sections.spec.js +204 -0
  547. package/dist/tests/unit/core/graph-mapping.spec.d.ts +1 -0
  548. package/dist/tests/unit/core/graph-mapping.spec.js +779 -0
  549. package/dist/tests/unit/core/invariant-tests-dedupe-determinism.spec.d.ts +1 -0
  550. package/dist/tests/unit/core/invariant-tests-dedupe-determinism.spec.js +64 -0
  551. package/dist/tests/unit/core/manifest-package-hub.spec.d.ts +1 -0
  552. package/dist/tests/unit/core/manifest-package-hub.spec.js +53 -0
  553. package/dist/tests/unit/core/monorepo-package-sections.spec.d.ts +1 -0
  554. package/dist/tests/unit/core/monorepo-package-sections.spec.js +121 -0
  555. package/dist/tests/unit/core/no-source-code-leakage.spec.d.ts +1 -0
  556. package/dist/tests/unit/core/no-source-code-leakage.spec.js +48 -0
  557. package/dist/tests/unit/core/orchestrator.spec.d.ts +1 -0
  558. package/dist/tests/unit/core/orchestrator.spec.js +252 -0
  559. package/dist/tests/unit/core/output-json.spec.d.ts +1 -0
  560. package/dist/tests/unit/core/output-json.spec.js +65 -0
  561. package/dist/tests/unit/core/parsing-error-handling-nonfatal.spec.d.ts +1 -0
  562. package/dist/tests/unit/core/parsing-error-handling-nonfatal.spec.js +42 -0
  563. package/dist/tests/unit/core/resolve-path-under-scan-root.spec.d.ts +1 -0
  564. package/dist/tests/unit/core/resolve-path-under-scan-root.spec.js +54 -0
  565. package/dist/tests/unit/core/scan-result-language-stats.spec.d.ts +1 -0
  566. package/dist/tests/unit/core/scan-result-language-stats.spec.js +15 -0
  567. package/dist/tests/unit/core/section-discovery-excludes.spec.d.ts +1 -0
  568. package/dist/tests/unit/core/section-discovery-excludes.spec.js +49 -0
  569. package/dist/tests/unit/core/section-runtime.spec.d.ts +1 -0
  570. package/dist/tests/unit/core/section-runtime.spec.js +166 -0
  571. package/dist/tests/unit/core/stable-component-ids.spec.d.ts +1 -0
  572. package/dist/tests/unit/core/stable-component-ids.spec.js +112 -0
  573. package/dist/tests/unit/core/structural-scan.spec.d.ts +1 -0
  574. package/dist/tests/unit/core/structural-scan.spec.js +83 -0
  575. package/dist/tests/unit/core/terraform-json-overlay.spec.d.ts +1 -0
  576. package/dist/tests/unit/core/terraform-json-overlay.spec.js +36 -0
  577. package/dist/tests/unit/core/terraform-minimal-services.spec.d.ts +1 -0
  578. package/dist/tests/unit/core/terraform-minimal-services.spec.js +378 -0
  579. package/dist/tests/unit/data-flow/application-hub.spec.d.ts +1 -0
  580. package/dist/tests/unit/data-flow/application-hub.spec.js +48 -0
  581. package/dist/tests/unit/data-flow/cross-section-terraform-bridge.spec.d.ts +1 -0
  582. package/dist/tests/unit/data-flow/cross-section-terraform-bridge.spec.js +95 -0
  583. package/dist/tests/unit/data-flow/dedupe.spec.d.ts +1 -0
  584. package/dist/tests/unit/data-flow/dedupe.spec.js +134 -0
  585. package/dist/tests/unit/data-flow/detector.spec.d.ts +1 -0
  586. package/dist/tests/unit/data-flow/detector.spec.js +1254 -0
  587. package/dist/tests/unit/data-flow/drop-cross-section-flows.spec.d.ts +1 -0
  588. package/dist/tests/unit/data-flow/drop-cross-section-flows.spec.js +132 -0
  589. package/dist/tests/unit/data-flow/ensure-actor-flow.spec.d.ts +1 -0
  590. package/dist/tests/unit/data-flow/ensure-actor-flow.spec.js +233 -0
  591. package/dist/tests/unit/data-flow/ensure-manifest-declared-flows.spec.d.ts +1 -0
  592. package/dist/tests/unit/data-flow/ensure-manifest-declared-flows.spec.js +125 -0
  593. package/dist/tests/unit/data-flow/ensure-section-api-flows.spec.d.ts +1 -0
  594. package/dist/tests/unit/data-flow/ensure-section-api-flows.spec.js +40 -0
  595. package/dist/tests/unit/data-flow/postprocess.spec.d.ts +1 -0
  596. package/dist/tests/unit/data-flow/postprocess.spec.js +78 -0
  597. package/dist/tests/unit/data-flow/rewire.spec.d.ts +1 -0
  598. package/dist/tests/unit/data-flow/rewire.spec.js +194 -0
  599. package/dist/tests/unit/data-flow/terraform-flows.spec.d.ts +1 -0
  600. package/dist/tests/unit/data-flow/terraform-flows.spec.js +199 -0
  601. package/dist/tests/unit/evals/metrics.spec.d.ts +1 -0
  602. package/dist/tests/unit/evals/metrics.spec.js +54 -0
  603. package/dist/tests/unit/ingest/env-exclusion.spec.d.ts +1 -0
  604. package/dist/tests/unit/ingest/env-exclusion.spec.js +43 -0
  605. package/dist/tests/unit/ingest/file-system.spec.d.ts +1 -0
  606. package/dist/tests/unit/ingest/file-system.spec.js +180 -0
  607. package/dist/tests/unit/ingest/gitignore.spec.d.ts +1 -0
  608. package/dist/tests/unit/ingest/gitignore.spec.js +30 -0
  609. package/dist/tests/unit/observability/scan-sentry.spec.d.ts +1 -0
  610. package/dist/tests/unit/observability/scan-sentry.spec.js +60 -0
  611. package/dist/tests/unit/patterns/scan-exclusions.spec.d.ts +1 -0
  612. package/dist/tests/unit/patterns/scan-exclusions.spec.js +58 -0
  613. package/dist/tests/unit/pipeline/ai-orchestrator-options.spec.d.ts +1 -0
  614. package/dist/tests/unit/pipeline/ai-orchestrator-options.spec.js +19 -0
  615. package/dist/tests/unit/platform-api/dataparade-api-base-url.spec.d.ts +1 -0
  616. package/dist/tests/unit/platform-api/dataparade-api-base-url.spec.js +19 -0
  617. package/dist/tests/unit/platform-api/estimate-scan-footprint.spec.d.ts +1 -0
  618. package/dist/tests/unit/platform-api/estimate-scan-footprint.spec.js +50 -0
  619. package/dist/tests/unit/tracing/langsmith-tracing.spec.d.ts +1 -0
  620. package/dist/tests/unit/tracing/langsmith-tracing.spec.js +118 -0
  621. package/package.json +84 -0
@@ -0,0 +1,287 @@
1
+ "use strict";
2
+ var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
3
+ if (k2 === undefined) k2 = k;
4
+ var desc = Object.getOwnPropertyDescriptor(m, k);
5
+ if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
6
+ desc = { enumerable: true, get: function() { return m[k]; } };
7
+ }
8
+ Object.defineProperty(o, k2, desc);
9
+ }) : (function(o, m, k, k2) {
10
+ if (k2 === undefined) k2 = k;
11
+ o[k2] = m[k];
12
+ }));
13
+ var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
14
+ Object.defineProperty(o, "default", { enumerable: true, value: v });
15
+ }) : function(o, v) {
16
+ o["default"] = v;
17
+ });
18
+ var __importStar = (this && this.__importStar) || (function () {
19
+ var ownKeys = function(o) {
20
+ ownKeys = Object.getOwnPropertyNames || function (o) {
21
+ var ar = [];
22
+ for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
23
+ return ar;
24
+ };
25
+ return ownKeys(o);
26
+ };
27
+ return function (mod) {
28
+ if (mod && mod.__esModule) return mod;
29
+ var result = {};
30
+ if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
31
+ __setModuleDefault(result, mod);
32
+ return result;
33
+ };
34
+ })();
35
+ Object.defineProperty(exports, "__esModule", { value: true });
36
+ exports.normalizePath = normalizePath;
37
+ exports.buildCodeModel = buildCodeModel;
38
+ const nodePath = __importStar(require("path"));
39
+ const ts = __importStar(require("typescript"));
40
+ /**
41
+ * Normalize a file system path to a POSIX-style string (forward slashes).
42
+ * This keeps path handling consistent across platforms.
43
+ */
44
+ function normalizePath(p) {
45
+ if (!p)
46
+ return "";
47
+ return p.split("\\").join("/");
48
+ }
49
+ /**
50
+ * Build a lightweight code model for a TypeScript/JavaScript file.
51
+ *
52
+ * - Ensures the language is correctly inferred for TS/JS files.
53
+ * - Indexes import statements and simple require() calls.
54
+ * - Indexes top-level function declarations, exported functions, and basic
55
+ * arrow/function expressions assigned to exported variables.
56
+ * - Surfaces parser/diagnostic issues as warnings instead of throwing.
57
+ */
58
+ function buildCodeModel(file) {
59
+ const warnings = [];
60
+ const normalizedPath = normalizePath(file.path);
61
+ const language = ensureParserLanguage(file, warnings);
62
+ if (!language) {
63
+ warnings.push(`Unsupported language '${file.language}' for TS/JS parser in file '${file.path}'.`);
64
+ // Return a minimal, non-fatal result so callers can safely continue.
65
+ return {
66
+ file,
67
+ normalizedPath,
68
+ // Fallback language is arbitrary here; callers should rely on file.language
69
+ // and the warning above rather than this value when language is unsupported.
70
+ language: "javascript",
71
+ imports: [],
72
+ functions: [],
73
+ warnings,
74
+ };
75
+ }
76
+ let sourceFile;
77
+ try {
78
+ sourceFile = ts.createSourceFile(file.path, file.content ?? "", ts.ScriptTarget.Latest,
79
+ /*setParentNodes*/ true, language === "typescript"
80
+ ? ts.ScriptKind.TSX // covers .ts and .tsx
81
+ : ts.ScriptKind.JSX);
82
+ }
83
+ catch (err) {
84
+ const message = err instanceof Error ? err.message : "Unknown parser error creating SourceFile";
85
+ warnings.push(`Failed to parse '${file.path}' as ${language}: ${message}`);
86
+ return {
87
+ file,
88
+ normalizedPath,
89
+ language,
90
+ imports: [],
91
+ functions: [],
92
+ warnings,
93
+ };
94
+ }
95
+ const diagnostics = sourceFile.parseDiagnostics;
96
+ if (diagnostics && diagnostics.length > 0) {
97
+ const first = diagnostics[0];
98
+ const msg = ts.flattenDiagnosticMessageText(first.messageText, " ");
99
+ warnings.push(`Parse diagnostics in '${file.path}': ${msg}`);
100
+ }
101
+ const imports = [];
102
+ const functions = [];
103
+ const toLocation = (node) => {
104
+ const start = sourceFile.getLineAndCharacterOfPosition(node.getStart(sourceFile));
105
+ const end = sourceFile.getLineAndCharacterOfPosition(node.getEnd());
106
+ return {
107
+ filePath: file.path,
108
+ startLine: start.line + 1,
109
+ endLine: end.line + 1,
110
+ };
111
+ };
112
+ const resolveRelativeImport = (moduleSpecifier) => {
113
+ if (!moduleSpecifier.startsWith("."))
114
+ return undefined;
115
+ const baseDir = normalizePath(nodePath.dirname(file.path));
116
+ const joined = normalizePath(nodePath.join(baseDir, moduleSpecifier));
117
+ return joined;
118
+ };
119
+ const collectImport = (node) => {
120
+ const moduleSpecifier = node.moduleSpecifier.text;
121
+ const importedNames = [];
122
+ const clause = node.importClause;
123
+ const isTypeOnly = !!clause?.isTypeOnly;
124
+ if (clause) {
125
+ if (clause.name) {
126
+ importedNames.push(clause.name.text);
127
+ }
128
+ if (clause.namedBindings) {
129
+ if (ts.isNamespaceImport(clause.namedBindings)) {
130
+ importedNames.push(clause.namedBindings.name.text);
131
+ }
132
+ else if (ts.isNamedImports(clause.namedBindings)) {
133
+ for (const spec of clause.namedBindings.elements) {
134
+ importedNames.push(spec.name.text);
135
+ }
136
+ }
137
+ }
138
+ }
139
+ imports.push({
140
+ moduleSpecifier,
141
+ importedNames,
142
+ isTypeOnly,
143
+ resolvedPath: resolveRelativeImport(moduleSpecifier),
144
+ location: toLocation(node),
145
+ });
146
+ };
147
+ const collectRequireCall = (node) => {
148
+ const expression = node.expression;
149
+ if (!ts.isIdentifier(expression) || expression.text !== "require")
150
+ return;
151
+ if (node.arguments.length === 0)
152
+ return;
153
+ const arg = node.arguments[0];
154
+ if (!ts.isStringLiteral(arg))
155
+ return;
156
+ const moduleSpecifier = arg.text;
157
+ const importedNames = [];
158
+ // Try to infer the bound identifier from a simple `const x = require("y")` pattern.
159
+ if (ts.isVariableDeclaration(node.parent) &&
160
+ ts.isIdentifier(node.parent.name)) {
161
+ importedNames.push(node.parent.name.text);
162
+ }
163
+ imports.push({
164
+ moduleSpecifier,
165
+ importedNames,
166
+ isTypeOnly: false,
167
+ resolvedPath: resolveRelativeImport(moduleSpecifier),
168
+ location: toLocation(node),
169
+ });
170
+ };
171
+ const hasExportModifier = (modifiers) => !!modifiers?.some((m) => m.kind === ts.SyntaxKind.ExportKeyword ||
172
+ m.kind === ts.SyntaxKind.DefaultKeyword);
173
+ const collectFunctionDeclaration = (node) => {
174
+ const name = node.name?.text ?? "<anonymous>";
175
+ const isExported = !!node.modifiers?.some((m) => m.kind === ts.SyntaxKind.ExportKeyword);
176
+ const exportKind = node.modifiers?.some((m) => m.kind === ts.SyntaxKind.DefaultKeyword)
177
+ ? "default"
178
+ : isExported
179
+ ? "named"
180
+ : undefined;
181
+ functions.push({
182
+ name,
183
+ isExported,
184
+ exportKind,
185
+ location: toLocation(node),
186
+ });
187
+ };
188
+ const collectVariableFunctions = (node) => {
189
+ const isExported = hasExportModifier(node.modifiers);
190
+ for (const decl of node.declarationList.declarations) {
191
+ const init = decl.initializer;
192
+ if (!init ||
193
+ (!ts.isArrowFunction(init) && !ts.isFunctionExpression(init))) {
194
+ continue;
195
+ }
196
+ let name = "<anonymous>";
197
+ if (ts.isIdentifier(decl.name)) {
198
+ name = decl.name.text;
199
+ }
200
+ functions.push({
201
+ name,
202
+ isExported,
203
+ exportKind: isExported ? "named" : undefined,
204
+ location: toLocation(init),
205
+ });
206
+ }
207
+ };
208
+ const collectMethodDeclaration = (node) => {
209
+ let name = "<anonymous>";
210
+ if (ts.isIdentifier(node.name)) {
211
+ name = node.name.text;
212
+ }
213
+ const parent = node.parent;
214
+ const parentIsExported = ts.isClassDeclaration(parent) && hasExportModifier(parent.modifiers);
215
+ functions.push({
216
+ name,
217
+ isExported: parentIsExported,
218
+ exportKind: parentIsExported ? "named" : undefined,
219
+ location: toLocation(node),
220
+ });
221
+ };
222
+ const collectExportAssignment = (node) => {
223
+ const expr = node.expression;
224
+ if (!ts.isFunctionExpression(expr) && !ts.isArrowFunction(expr))
225
+ return;
226
+ const name = "<anonymous>";
227
+ functions.push({
228
+ name,
229
+ isExported: true,
230
+ exportKind: "default",
231
+ location: toLocation(expr),
232
+ });
233
+ };
234
+ const visit = (node) => {
235
+ if (ts.isImportDeclaration(node)) {
236
+ collectImport(node);
237
+ }
238
+ else if (ts.isCallExpression(node)) {
239
+ collectRequireCall(node);
240
+ }
241
+ else if (ts.isFunctionDeclaration(node)) {
242
+ collectFunctionDeclaration(node);
243
+ }
244
+ else if (ts.isVariableStatement(node)) {
245
+ collectVariableFunctions(node);
246
+ }
247
+ else if (ts.isMethodDeclaration(node)) {
248
+ collectMethodDeclaration(node);
249
+ }
250
+ else if (ts.isExportAssignment(node)) {
251
+ collectExportAssignment(node);
252
+ }
253
+ ts.forEachChild(node, visit);
254
+ };
255
+ visit(sourceFile);
256
+ return {
257
+ file,
258
+ normalizedPath,
259
+ language,
260
+ imports,
261
+ functions,
262
+ warnings,
263
+ };
264
+ }
265
+ function ensureParserLanguage(file, warnings) {
266
+ const ext = nodePath.extname(file.name || file.path).toLowerCase();
267
+ let fromExtension;
268
+ if (ext === ".ts" || ext === ".tsx") {
269
+ fromExtension = "typescript";
270
+ }
271
+ else if (ext === ".js" ||
272
+ ext === ".jsx" ||
273
+ ext === ".mjs" ||
274
+ ext === ".cjs") {
275
+ fromExtension = "javascript";
276
+ }
277
+ if (!fromExtension) {
278
+ if (file.language === "typescript" || file.language === "javascript") {
279
+ return file.language;
280
+ }
281
+ return undefined;
282
+ }
283
+ if (file.language !== fromExtension) {
284
+ warnings.push(`File language '${file.language}' adjusted to '${fromExtension}' based on extension '${ext}' for '${file.path}'.`);
285
+ }
286
+ return fromExtension;
287
+ }
@@ -0,0 +1,4 @@
1
+ import type { FileInfo } from "../../core/types/file";
2
+ import type { RawFinding } from "../../core/types/detection";
3
+ import type { ParserResult } from "./parser";
4
+ export declare function detectExternalApiCalls(file: FileInfo, model: ParserResult): RawFinding[];
@@ -0,0 +1,16 @@
1
+ "use strict";
2
+ Object.defineProperty(exports, "__esModule", { value: true });
3
+ exports.detectExternalApiCalls = detectExternalApiCalls;
4
+ const engine_1 = require("../../patterns/engine");
5
+ function detectExternalApiCalls(file, model) {
6
+ const importsForEngine = model.imports.map((imp) => ({
7
+ module: imp.moduleSpecifier,
8
+ names: imp.importedNames,
9
+ }));
10
+ return (0, engine_1.matchPatterns)({
11
+ language: model.language,
12
+ file,
13
+ imports: importsForEngine,
14
+ includeThirdPartyHttpLinePatterns: true,
15
+ }).filter((f) => f.pattern === "external_api_call");
16
+ }
@@ -0,0 +1,68 @@
1
+ import { type PatternId } from "../../core/types/detection";
2
+ /** Normalized config entries (after validation); patternId is guaranteed valid. */
3
+ export interface WithPatternId {
4
+ patternId: PatternId;
5
+ }
6
+ export interface RouteFrameworkConfig extends WithPatternId {
7
+ id: string;
8
+ imports: string[];
9
+ routeCallRegexes: RegExp[];
10
+ controllerDecoratorRegexes: RegExp[];
11
+ routeDecoratorRegexes: RegExp[];
12
+ confidence: number;
13
+ }
14
+ export interface DbClientConfig extends WithPatternId {
15
+ id: string;
16
+ databaseType: string;
17
+ importModules: string[];
18
+ creationRegexes: RegExp[];
19
+ /** Confidence when a creation regex matches; import-only uses confidence - 0.2 (min 0.5). */
20
+ confidence: number;
21
+ }
22
+ export interface AuthLibraryConfig extends WithPatternId {
23
+ id: string;
24
+ importFragments: string[];
25
+ callRegexes: RegExp[];
26
+ confidence: number;
27
+ }
28
+ export interface ConfigKeyConfig extends WithPatternId {
29
+ name: string;
30
+ confidence: number;
31
+ }
32
+ export interface HeuristicsConfig {
33
+ processEnv: {
34
+ regex: RegExp;
35
+ confidence: number;
36
+ };
37
+ sqlKeyword: {
38
+ regex: RegExp;
39
+ patternId: PatternId;
40
+ confidence: number;
41
+ };
42
+ nextRouteHandler: {
43
+ regex: RegExp;
44
+ confidence: number;
45
+ };
46
+ configKeyAccess: {
47
+ regex: RegExp;
48
+ };
49
+ }
50
+ export interface TypeScriptPatternConfig {
51
+ routes: {
52
+ frameworks: RouteFrameworkConfig[];
53
+ };
54
+ dbClients: DbClientConfig[];
55
+ auth: {
56
+ libraries: AuthLibraryConfig[];
57
+ };
58
+ heuristics: HeuristicsConfig;
59
+ envVariables: {
60
+ importantKeys: string[];
61
+ };
62
+ configKeys: {
63
+ keys: ConfigKeyConfig[];
64
+ };
65
+ }
66
+ /** Clears the config cache (for tests). */
67
+ export declare function clearTypeScriptPatternConfigCache(): void;
68
+ export declare function loadTypeScriptPatternConfig(): TypeScriptPatternConfig;
@@ -0,0 +1,171 @@
1
+ "use strict";
2
+ var __importDefault = (this && this.__importDefault) || function (mod) {
3
+ return (mod && mod.__esModule) ? mod : { "default": mod };
4
+ };
5
+ Object.defineProperty(exports, "__esModule", { value: true });
6
+ exports.clearTypeScriptPatternConfigCache = clearTypeScriptPatternConfigCache;
7
+ exports.loadTypeScriptPatternConfig = loadTypeScriptPatternConfig;
8
+ const fs_1 = __importDefault(require("fs"));
9
+ const path_1 = __importDefault(require("path"));
10
+ const yaml_1 = __importDefault(require("yaml"));
11
+ const detection_1 = require("../../core/types/detection");
12
+ /** Default confidence when not specified in YAML. */
13
+ const DEFAULT_CONFIDENCE = 0.8;
14
+ function validatePatternId(rawValue, context) {
15
+ const id = String(rawValue);
16
+ if (!detection_1.PATTERN_IDS.includes(id)) {
17
+ throw new Error(`Invalid patternId '${rawValue}' in ${context}`);
18
+ }
19
+ return id;
20
+ }
21
+ function compileRegex(pattern, flags) {
22
+ try {
23
+ return new RegExp(pattern, flags ?? "");
24
+ }
25
+ catch (err) {
26
+ const message = err instanceof Error ? err.message : "Unknown regex compilation error";
27
+ throw new Error(`Invalid regex pattern '${pattern}': ${message}`);
28
+ }
29
+ }
30
+ function compileRegexList(patterns) {
31
+ if (!patterns || patterns.length === 0) {
32
+ return [];
33
+ }
34
+ return patterns.map((p) => compileRegex(p));
35
+ }
36
+ function normalizeRawConfig(raw) {
37
+ const frameworks = raw.routes?.frameworks?.map((fw) => {
38
+ const patternId = validatePatternId(fw.patternId, `routes.frameworks entry '${fw.id}'`);
39
+ return {
40
+ id: fw.id,
41
+ patternId,
42
+ imports: fw.imports ?? [],
43
+ routeCallRegexes: compileRegexList(fw.routeCallRegexes),
44
+ controllerDecoratorRegexes: compileRegexList(fw.controllerDecoratorRegexes),
45
+ routeDecoratorRegexes: compileRegexList(fw.routeDecoratorRegexes),
46
+ confidence: fw.confidence ?? DEFAULT_CONFIDENCE,
47
+ };
48
+ }) ?? [];
49
+ const dbClients = raw.db_clients?.map((c) => {
50
+ const patternId = validatePatternId(c.patternId, `db_clients entry '${c.id}'`);
51
+ return {
52
+ id: c.id,
53
+ patternId,
54
+ databaseType: c.databaseType,
55
+ importModules: c.importModules ?? [],
56
+ creationRegexes: compileRegexList(c.regexes),
57
+ confidence: c.confidence ?? DEFAULT_CONFIDENCE,
58
+ };
59
+ }) ?? [];
60
+ const authLibraries = raw.auth?.libraries?.map((lib) => {
61
+ const patternId = validatePatternId(lib.patternId, `auth.libraries entry '${lib.id}'`);
62
+ return {
63
+ id: lib.id,
64
+ patternId,
65
+ importFragments: lib.importFragments ?? [],
66
+ callRegexes: compileRegexList(lib.regexes),
67
+ confidence: lib.confidence ?? DEFAULT_CONFIDENCE,
68
+ };
69
+ }) ?? [];
70
+ const configKeys = raw.config_keys?.keys?.map((k) => {
71
+ const patternId = validatePatternId(k.patternId, `config_keys.keys entry '${k.name}'`);
72
+ return {
73
+ name: k.name,
74
+ patternId,
75
+ confidence: k.confidence ?? DEFAULT_CONFIDENCE,
76
+ };
77
+ }) ?? [];
78
+ const importantKeys = raw.env_variables?.importantKeys?.slice() ?? [];
79
+ const h = raw.heuristics;
80
+ if (!h?.processEnv?.regex || !h?.sqlKeyword?.regex || !h?.nextRouteHandler?.regex || !h?.configKeyAccess?.regex) {
81
+ throw new Error("TypeScript pattern config requires heuristics.processEnv.regex, heuristics.sqlKeyword.regex, heuristics.nextRouteHandler.regex, and heuristics.configKeyAccess.regex in the YAML file.");
82
+ }
83
+ const processEnvRegex = compileRegex(h.processEnv.regex);
84
+ const sqlKeywordRegex = compileRegex(h.sqlKeyword.regex, "i");
85
+ const nextRouteHandlerRegex = compileRegex(h.nextRouteHandler.regex);
86
+ const configKeyAccessRegex = compileRegex(h.configKeyAccess.regex);
87
+ const sqlKeywordPatternId = h.sqlKeyword.patternId
88
+ ? validatePatternId(h.sqlKeyword.patternId, "heuristics.sqlKeyword")
89
+ : "database_connection";
90
+ const heuristics = {
91
+ processEnv: {
92
+ regex: processEnvRegex,
93
+ confidence: h.processEnv.confidence ?? 0.95,
94
+ },
95
+ sqlKeyword: {
96
+ regex: sqlKeywordRegex,
97
+ patternId: sqlKeywordPatternId,
98
+ confidence: h.sqlKeyword.confidence ?? 0.6,
99
+ },
100
+ nextRouteHandler: {
101
+ regex: nextRouteHandlerRegex,
102
+ confidence: h.nextRouteHandler.confidence ?? 0.75,
103
+ },
104
+ configKeyAccess: { regex: configKeyAccessRegex },
105
+ };
106
+ return {
107
+ routes: {
108
+ frameworks,
109
+ },
110
+ dbClients,
111
+ auth: {
112
+ libraries: authLibraries,
113
+ },
114
+ heuristics,
115
+ envVariables: {
116
+ importantKeys,
117
+ },
118
+ configKeys: {
119
+ keys: configKeys,
120
+ },
121
+ };
122
+ }
123
+ let cachedConfig;
124
+ /** Clears the config cache (for tests). */
125
+ function clearTypeScriptPatternConfigCache() {
126
+ cachedConfig = undefined;
127
+ }
128
+ function getPatternsFilePath() {
129
+ // During tests, this module runs from src/analyzers/typescript.
130
+ // In the built package, it runs from dist/src/analyzers/typescript.
131
+ // We want the CLI package root that contains the `patterns/` directory.
132
+ const parts = __dirname.split(path_1.default.sep);
133
+ const distIndex = parts.lastIndexOf("dist");
134
+ let cliRoot;
135
+ if (distIndex !== -1) {
136
+ // e.g. /path/to/cli/dist/src/analyzers/typescript -> /path/to/cli
137
+ cliRoot = parts.slice(0, distIndex).join(path_1.default.sep);
138
+ }
139
+ else {
140
+ // e.g. /path/to/cli/src/analyzers/typescript -> /path/to/cli
141
+ cliRoot = path_1.default.resolve(__dirname, "../../..");
142
+ }
143
+ return path_1.default.join(cliRoot, "patterns", "typescript.patterns.yaml");
144
+ }
145
+ function loadTypeScriptPatternConfig() {
146
+ if (cachedConfig) {
147
+ return cachedConfig;
148
+ }
149
+ const patternsPath = getPatternsFilePath();
150
+ let raw;
151
+ try {
152
+ raw = fs_1.default.readFileSync(patternsPath, "utf8");
153
+ }
154
+ catch (err) {
155
+ const message = err instanceof Error ? err.message : String(err);
156
+ throw new Error(`TypeScript pattern config is required but could not be read from '${patternsPath}': ${message}`);
157
+ }
158
+ const parsed = yaml_1.default.parse(raw);
159
+ if (!parsed || typeof parsed !== "object") {
160
+ throw new Error(`TypeScript pattern config at '${patternsPath}' did not parse to an object.`);
161
+ }
162
+ try {
163
+ const normalized = normalizeRawConfig(parsed);
164
+ cachedConfig = normalized;
165
+ return normalized;
166
+ }
167
+ catch (err) {
168
+ const message = err instanceof Error ? err.message : String(err);
169
+ throw new Error(`Invalid TypeScript pattern config at '${patternsPath}': ${message}`);
170
+ }
171
+ }
@@ -0,0 +1,10 @@
1
+ import type { FileInfo } from "../../core/types/file";
2
+ import type { RawFinding } from "../../core/types/detection";
3
+ import type { ParserResult } from "./parser";
4
+ type TsPatternDetector = (file: FileInfo, model: ParserResult) => RawFinding[];
5
+ export declare const detectRoutePatterns: TsPatternDetector;
6
+ export declare const detectDatabaseConnections: TsPatternDetector;
7
+ export declare const detectExternalApiCalls: TsPatternDetector;
8
+ export declare const detectAuthMiddleware: TsPatternDetector;
9
+ export declare const detectConfigAndEnvUsage: TsPatternDetector;
10
+ export {};
@@ -0,0 +1,57 @@
1
+ "use strict";
2
+ Object.defineProperty(exports, "__esModule", { value: true });
3
+ exports.detectConfigAndEnvUsage = exports.detectAuthMiddleware = exports.detectExternalApiCalls = exports.detectDatabaseConnections = exports.detectRoutePatterns = void 0;
4
+ const third_party_detection_1 = require("./third-party-detection");
5
+ const engine_1 = require("../../patterns/engine");
6
+ function toImportLikes(model) {
7
+ return model.imports.map((imp) => ({
8
+ module: imp.moduleSpecifier,
9
+ names: imp.importedNames,
10
+ }));
11
+ }
12
+ const detectRoutePatterns = (file, model) => {
13
+ const importsForEngine = toImportLikes(model);
14
+ const allFindings = (0, engine_1.matchPatterns)({
15
+ language: model.language,
16
+ file,
17
+ imports: importsForEngine,
18
+ normalizedPath: model.normalizedPath,
19
+ });
20
+ return allFindings.filter((f) => f.pattern === "express_route");
21
+ };
22
+ exports.detectRoutePatterns = detectRoutePatterns;
23
+ const detectDatabaseConnections = (file, model) => {
24
+ const importsForEngine = toImportLikes(model);
25
+ const allFindings = (0, engine_1.matchPatterns)({
26
+ language: model.language,
27
+ file,
28
+ imports: importsForEngine,
29
+ normalizedPath: model.normalizedPath,
30
+ });
31
+ return allFindings.filter((f) => f.pattern === "database_connection");
32
+ };
33
+ exports.detectDatabaseConnections = detectDatabaseConnections;
34
+ const detectExternalApiCalls = (file, model) => (0, third_party_detection_1.detectExternalApiCalls)(file, model);
35
+ exports.detectExternalApiCalls = detectExternalApiCalls;
36
+ const detectAuthMiddleware = (file, model) => {
37
+ const importsForEngine = toImportLikes(model);
38
+ const allFindings = (0, engine_1.matchPatterns)({
39
+ language: model.language,
40
+ file,
41
+ imports: importsForEngine,
42
+ normalizedPath: model.normalizedPath,
43
+ });
44
+ return allFindings.filter((f) => f.pattern === "auth_middleware");
45
+ };
46
+ exports.detectAuthMiddleware = detectAuthMiddleware;
47
+ const detectConfigAndEnvUsage = (file, model) => {
48
+ const importsForEngine = toImportLikes(model);
49
+ const allFindings = (0, engine_1.matchPatterns)({
50
+ language: model.language,
51
+ file,
52
+ imports: importsForEngine,
53
+ normalizedPath: model.normalizedPath,
54
+ });
55
+ return allFindings.filter((f) => f.pattern === "env_variable" || f.pattern === "config_file");
56
+ };
57
+ exports.detectConfigAndEnvUsage = detectConfigAndEnvUsage;
@@ -0,0 +1,12 @@
1
+ import type { DetectedComponent } from "../core/types/component";
2
+ import type { ServiceSection } from "../core/sectioning/discover-service-sections";
3
+ /** Synthetic main app created when no code hub exists (e.g. IaC-only scan). */
4
+ export declare const INJECTED_PROJECT_PLACEHOLDER_SOURCE_CONTEXT: "injected_project_placeholder";
5
+ export declare function injectApplicationAssetsPerSectionIfMissing(components: DetectedComponent[], sections: ServiceSection[], opts?: {
6
+ projectName?: string;
7
+ }): DetectedComponent[];
8
+ export declare function injectApplicationAssetIfMissing(components: DetectedComponent[], opts?: {
9
+ projectName?: string;
10
+ }): DetectedComponent[];
11
+ export declare function injectActorIfMissing(components: DetectedComponent[]): DetectedComponent[];
12
+ export declare function synthesizeSectionApiNodes(components: DetectedComponent[]): DetectedComponent[];