@dataparade/cli 0.0.6 → 0.0.7

package/dist/tests/unit/cli/scan-command-ai-flags.spec.js

@@ -34,14 +34,33 @@ jest.mock("../../../src/core/pipeline/graph-mapping", () => ({
 }));
 jest.mock("../../../src/output/json", () => ({
     writeDataflowJson: jest.fn(() => { }),
+    buildDataflowWrapper: jest.fn(() => ({
+        schemaVersion: "1.0",
+        graph: { nodes: [], edges: [], viewport: { x: 0, y: 0, zoom: 1 } },
+        metadata: {
+            componentsCount: 0,
+            dataFlowsCount: 0,
+            filesScanned: 0,
+            scanDurationMs: 0,
+        },
+    })),
 }));
 describe("cli scan command ai flags", () => {
     let consoleLogSpy;
+    let prevSkipAutoUpload;
     beforeEach(() => {
         consoleLogSpy = jest.spyOn(console, "log").mockImplementation(() => { });
+        prevSkipAutoUpload = process.env.DATAPARADE_SKIP_AUTO_UPLOAD;
+        process.env.DATAPARADE_SKIP_AUTO_UPLOAD = "true";
     });
     afterEach(() => {
         consoleLogSpy.mockRestore();
+        if (prevSkipAutoUpload === undefined) {
+            delete process.env.DATAPARADE_SKIP_AUTO_UPLOAD;
+        }
+        else {
+            process.env.DATAPARADE_SKIP_AUTO_UPLOAD = prevSkipAutoUpload;
+        }
     });
     it("normalizes --ai-inference-scope third-party-only to third_party_only", async () => {
         const { run } = require("../../../src/cli");

package/dist/tests/unit/cli/scan-command-e2e-monorepo-app-plus-terraform.spec.js

@@ -21,12 +21,19 @@ function nodeSourcePaths(node) {
 }
 describe("cli scan command - monorepo app plus terraform", () => {
     it("keeps app API hub, reduces TF to provider and module shells, and lays out app left of TF hub", async () => {
-        const prevAiInference = process.env.DATAPARADE_AI_INFERENCE;
-        process.env.DATAPARADE_AI_INFERENCE = "false";
         const fixturesRoot = path_1.default.join(__dirname, "..", "..", "fixtures", "monorepo-app-plus-terraform");
         const outputPath = path_1.default.join(os_1.default.tmpdir(), `dataparade-scan-e2e-monorepo-app-plus-terraform-${Date.now()}.json`);
+        await (0, cli_1.run)([
+            "node",
+            "cli",
+            "scan",
+            fixturesRoot,
+            "--output",
+            outputPath,
+            "--no-ai-inference",
+            "--skip-auto-upload",
+        ]);
         try {
-            await (0, cli_1.run)(["node", "cli", "scan", fixturesRoot, "--output", outputPath]);
             const contents = fs_1.default.readFileSync(outputPath, "utf8");
             const parsed = JSON.parse(contents);
             const validation = (0, dataflow_wrapper_schema_1.validateDataflowJson)(parsed);
@@ -96,11 +103,8 @@ describe("cli scan command - monorepo app plus terraform", () => {
             fs_1.default.unlinkSync(outputPath);
         }
         finally {
-            if (prevAiInference === undefined) {
-                delete process.env.DATAPARADE_AI_INFERENCE;
-            }
-            else {
-                process.env.DATAPARADE_AI_INFERENCE = prevAiInference;
+            if (fs_1.default.existsSync(outputPath)) {
+                fs_1.default.unlinkSync(outputPath);
             }
         }
     }, 20000);

package/dist/tests/unit/cli/scan-command-e2e-monorepo-front-back-sections.spec.js

@@ -12,7 +12,16 @@ describe("cli scan command - monorepo sections", () => {
     it("tags nodes with section_id and avoids cross-section edges", async () => {
         const fixturesRoot = path_1.default.join(__dirname, "..", "..", "fixtures", "monorepo-front-back-sections");
         const outputPath = path_1.default.join(os_1.default.tmpdir(), `dataparade-scan-e2e-monorepo-front-back-sections-${Date.now()}.json`);
-        await (0, cli_1.run)(["node", "cli", "scan", fixturesRoot, "--output", outputPath]);
+        await (0, cli_1.run)([
+            "node",
+            "cli",
+            "scan",
+            fixturesRoot,
+            "--output",
+            outputPath,
+            "--no-ai-inference",
+            "--skip-auto-upload",
+        ]);
         const contents = fs_1.default.readFileSync(outputPath, "utf8");
         const parsed = JSON.parse(contents);
         const validation = (0, dataflow_wrapper_schema_1.validateDataflowJson)(parsed);

package/dist/tests/unit/cli/scan-command-e2e-python-basic.spec.js

@@ -12,7 +12,16 @@ describe("cli scan command - DP-P0-CLI-705 e2e Python basic", () => {
     it("scans python-basic fixture and produces valid dataflow.json with route, database, third-party, and flows", async () => {
         const fixturesRoot = path_1.default.join(__dirname, "..", "..", "fixtures", "python-basic");
         const outputPath = path_1.default.join(os_1.default.tmpdir(), `dataparade-scan-e2e-python-basic-${Date.now()}.json`);
-        await (0, cli_1.run)(["node", "cli", "scan", fixturesRoot, "--output", outputPath]);
+        await (0, cli_1.run)([
+            "node",
+            "cli",
+            "scan",
+            fixturesRoot,
+            "--output",
+            outputPath,
+            "--no-ai-inference",
+            "--skip-auto-upload",
+        ]);
         const contents = fs_1.default.readFileSync(outputPath, "utf8");
         const parsed = JSON.parse(contents);
         const validation = (0, dataflow_wrapper_schema_1.validateDataflowJson)(parsed);

package/dist/tests/unit/cli/scan-command-e2e-terraform-basic.spec.js

@@ -10,12 +10,19 @@ const cli_1 = require("../../../src/cli");
 const dataflow_wrapper_schema_1 = require("../../../src/core/schema/dataflow-wrapper.schema");
 describe("cli scan command - terraform-basic fixture", () => {
     it("scans terraform-basic fixture and produces valid dataflow.json with nodes and edges", async () => {
-        const prevAiInference = process.env.DATAPARADE_AI_INFERENCE;
-        process.env.DATAPARADE_AI_INFERENCE = "false";
         const fixturesRoot = path_1.default.join(__dirname, "..", "..", "fixtures", "terraform-basic");
         const outputPath = path_1.default.join(os_1.default.tmpdir(), `dataparade-scan-e2e-terraform-basic-${Date.now()}.json`);
+        await (0, cli_1.run)([
+            "node",
+            "cli",
+            "scan",
+            fixturesRoot,
+            "--output",
+            outputPath,
+            "--no-ai-inference",
+            "--skip-auto-upload",
+        ]);
         try {
-            await (0, cli_1.run)(["node", "cli", "scan", fixturesRoot, "--output", outputPath]);
             const contents = fs_1.default.readFileSync(outputPath, "utf8");
             const parsed = JSON.parse(contents);
             const validation = (0, dataflow_wrapper_schema_1.validateDataflowJson)(parsed);
@@ -51,11 +58,8 @@ describe("cli scan command - terraform-basic fixture", () => {
             fs_1.default.unlinkSync(outputPath);
         }
         finally {
-            if (prevAiInference === undefined) {
-                delete process.env.DATAPARADE_AI_INFERENCE;
-            }
-            else {
-                process.env.DATAPARADE_AI_INFERENCE = prevAiInference;
+            if (fs_1.default.existsSync(outputPath)) {
+                fs_1.default.unlinkSync(outputPath);
             }
         }
     }, 15000);

package/dist/tests/unit/cli/scan-command-e2e-ts-sample.spec.js

@@ -12,7 +12,16 @@ describe("cli scan command - DP-P0-CLI-404 e2e TypeScript sample", () => {
     it("scans the e2e-ts-sample fixture and produces a valid dataflow.json with database and third-party components and flows", async () => {
         const fixturesRoot = path_1.default.join(__dirname, "..", "..", "fixtures", "e2e-ts-sample");
         const outputPath = path_1.default.join(os_1.default.tmpdir(), `dataparade-scan-e2e-ts-sample-${Date.now()}.json`);
-        await (0, cli_1.run)(["node", "cli", "scan", fixturesRoot, "--output", outputPath]);
+        await (0, cli_1.run)([
+            "node",
+            "cli",
+            "scan",
+            fixturesRoot,
+            "--output",
+            outputPath,
+            "--no-ai-inference",
+            "--skip-auto-upload",
+        ]);
         const contents = fs_1.default.readFileSync(outputPath, "utf8");
         const parsed = JSON.parse(contents);
         const validation = (0, dataflow_wrapper_schema_1.validateDataflowJson)(parsed);

package/dist/tests/unit/cli/scan-command-e2e-ts-sentry-route-env.spec.js

@@ -8,7 +8,7 @@ const orchestrator_1 = require("../../../src/core/pipeline/orchestrator");
 describe("cli scan - DP-P0-CLI regression: sentry/route/env", () => {
     it("detects Sentry third_party, Express route, and API_KEY env_variable", async () => {
         const fixturesRoot = path_1.default.join(__dirname, "..", "..", "fixtures", "e2e-ts-sentry-route-env");
-        const config = (0, orchestrator_1.createDefaultScanConfiguration)({
+        const config = (0, orchestrator_1.createDefaultScanConfiguration)({ enableAiInference: false,
             projectName: "SentryRouteEnvApp",
         });
         const { scanResult, findings } = await (0, orchestrator_1.scan)(fixturesRoot, config, undefined);

package/dist/tests/unit/cli/scan-command-exit-code.spec.js

@@ -44,14 +44,35 @@ jest.mock("../../../src/core/pipeline/graph-mapping", () => ({
 }));
 jest.mock("../../../src/output/json", () => ({
     writeDataflowJson: jest.fn(async () => { }),
+    buildDataflowWrapper: jest.fn(() => ({
+        schemaVersion: "1.0",
+        graph: { nodes: [], edges: [], viewport: { x: 0, y: 0, zoom: 1 } },
+        metadata: {
+            componentsCount: 0,
+            dataFlowsCount: 0,
+            filesScanned: 0,
+            scanDurationMs: 0,
+        },
+    })),
 }));
 describe("cli scan command - exit codes", () => {
     const fixturesRoot = path_1.default.join(__dirname, "..", "..", "fixtures", "typescript-basic");
     function tmpOutputPath() {
         return path_1.default.join(os_1.default.tmpdir(), `dataparade-exit-${Date.now()}.json`);
     }
+    let prevSkipAutoUpload;
+    beforeEach(() => {
+        prevSkipAutoUpload = process.env.DATAPARADE_SKIP_AUTO_UPLOAD;
+        process.env.DATAPARADE_SKIP_AUTO_UPLOAD = "true";
+    });
     afterEach(() => {
         process.exitCode = undefined;
+        if (prevSkipAutoUpload === undefined) {
+            delete process.env.DATAPARADE_SKIP_AUTO_UPLOAD;
+        }
+        else {
+            process.env.DATAPARADE_SKIP_AUTO_UPLOAD = prevSkipAutoUpload;
+        }
     });
     it("sets exitCode=1 when scanResult.errors is non-empty", async () => {
         const { run } = require("../../../src/cli");

package/dist/tests/unit/cli/scan-quota-flow.spec.js

@@ -33,7 +33,7 @@ describe("scan quota flow", () => {
     it("skips quota API when workspace key is present but AI is disabled", async () => {
         process.env.DATAPARADE_WORKSPACE_API_KEY = "dp_live_test";
         process.env.DATAPARADE_SKIP_AUTO_UPLOAD = "true";
-        await (0, cli_1.run)(["node", "cli", "scan", tempRoot]);
+        await (0, cli_1.run)(["node", "cli", "scan", tempRoot, "--no-ai-inference"]);
         expect(fetchMock).not.toHaveBeenCalled();
     });
     it("prints workspace quota message when preflight is quota-blocked", async () => {

package/dist/tests/unit/config/load-cli-env.spec.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/tests/unit/config/load-cli-env.spec.js

@@ -0,0 +1,52 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+const node_fs_1 = __importDefault(require("node:fs"));
+const node_os_1 = __importDefault(require("node:os"));
+const node_path_1 = __importDefault(require("node:path"));
+const load_cli_env_1 = require("../../../src/config/load-cli-env");
+const CLI_PACKAGE_NAME = "@dataparade/cli";
+function writeCliPackageJson(dir) {
+    node_fs_1.default.mkdirSync(dir, { recursive: true });
+    node_fs_1.default.writeFileSync(node_path_1.default.join(dir, "package.json"), JSON.stringify({ name: CLI_PACKAGE_NAME, version: "0.0.0" }));
+}
+describe("findCliPackageRoot", () => {
+    let tempRoot;
+    beforeEach(() => {
+        tempRoot = node_fs_1.default.mkdtempSync(node_path_1.default.join(node_os_1.default.tmpdir(), "dataparade-cli-root-"));
+    });
+    afterEach(() => {
+        node_fs_1.default.rmSync(tempRoot, { recursive: true, force: true });
+    });
+    it("prefers the package root over dist/ when tsc copies package.json", () => {
+        const packageRoot = node_path_1.default.join(tempRoot, "cli");
+        writeCliPackageJson(packageRoot);
+        writeCliPackageJson(node_path_1.default.join(packageRoot, "dist"));
+        const startDir = node_path_1.default.join(packageRoot, "dist", "src", "config");
+        node_fs_1.default.mkdirSync(startDir, { recursive: true });
+        expect((0, load_cli_env_1.findCliPackageRoot)(startDir)).toBe(packageRoot);
+    });
+    it("returns the npm package root when dist/ contains a copied package.json", () => {
+        const packageRoot = node_path_1.default.join(tempRoot, "node_modules", "@dataparade", "cli");
+        writeCliPackageJson(packageRoot);
+        writeCliPackageJson(node_path_1.default.join(packageRoot, "dist"));
+        const startDir = node_path_1.default.join(packageRoot, "dist", "src", "config");
+        node_fs_1.default.mkdirSync(startDir, { recursive: true });
+        expect((0, load_cli_env_1.findCliPackageRoot)(startDir)).toBe(packageRoot);
+    });
+    it("returns dist/ when it is the only matching package root", () => {
+        const distRoot = node_path_1.default.join(tempRoot, "dist-only");
+        writeCliPackageJson(distRoot);
+        const startDir = node_path_1.default.join(distRoot, "src", "config");
+        node_fs_1.default.mkdirSync(startDir, { recursive: true });
+        expect((0, load_cli_env_1.findCliPackageRoot)(startDir)).toBe(distRoot);
+    });
+    it("returns undefined when no @dataparade/cli package.json exists", () => {
+        const startDir = node_path_1.default.join(tempRoot, "other", "src");
+        node_fs_1.default.mkdirSync(startDir, { recursive: true });
+        node_fs_1.default.writeFileSync(node_path_1.default.join(tempRoot, "other", "package.json"), JSON.stringify({ name: "other-package" }));
+        expect((0, load_cli_env_1.findCliPackageRoot)(startDir)).toBeUndefined();
+    });
+});

package/dist/tests/unit/config/redact.spec.js

@@ -12,7 +12,7 @@ describe("redactScanConfigurationForDisplay", () => {
         expect(JSON.stringify(redacted)).not.toContain("sk-secret-key-12345");
     });
     it("leaves config unchanged when aiApiKey is absent", () => {
-        const config = (0, orchestrator_1.createDefaultScanConfiguration)();
+        const config = (0, orchestrator_1.createDefaultScanConfiguration)({ enableAiInference: false });
         const redacted = (0, redact_1.redactScanConfigurationForDisplay)(config);
         expect(redacted.aiApiKey).toBeUndefined();
     });

package/dist/tests/unit/config/resolve-config.spec.js

@@ -98,7 +98,7 @@ describe("resolveScanConfiguration", () => {
             }
         }
     });
-    it("does not auto-enable AI when BYOK envs are set without SCAN_AI_INFERENCE", () => {
+    it("does not set enableAiInference from BYOK envs alone (default comes from createDefaultScanConfiguration)", () => {
         const prevProvider = process.env.SCAN_BYOK_PROVIDER;
         const prevModel = process.env.SCAN_BYOK_MODEL;
         const prevKey = process.env.SCAN_BYOK_API_KEY;

package/dist/tests/unit/config/validate-scan-ai.spec.js

@@ -39,6 +39,31 @@ describe("validate-scan-ai", () => {
         expect((0, validate_scan_ai_1.validateAiInferenceCredentials)(config)).toEqual([]);
         expect((0, validate_scan_ai_1.resolveAiMode)(config)).toBe("platform");
     });
+    it("accepts anonymous session token with job id for platform mode", () => {
+        const config = baseConfig({
+            enableAiInference: true,
+            anonSessionToken: "dp_anon_abc",
+            cliQuotaJobId: "job-1",
+        });
+        expect((0, validate_scan_ai_1.validateAiInferenceCredentials)(config)).toEqual([]);
+        expect((0, validate_scan_ai_1.resolveAiMode)(config)).toBe("platform");
+    });
+    it("rejects workspace key and anonymous session together", () => {
+        const errors = (0, validate_scan_ai_1.validateAiInferenceCredentials)(baseConfig({
+            enableAiInference: true,
+            workspaceApiKey: "dp_live_abc",
+            anonSessionToken: "dp_anon_abc",
+            cliQuotaJobId: "job-1",
+        }));
+        expect(errors.some((e) => e.includes("not both"))).toBe(true);
+    });
+    it("requires job id for anonymous platform mode", () => {
+        const errors = (0, validate_scan_ai_1.validateAiInferenceCredentials)(baseConfig({
+            enableAiInference: true,
+            anonSessionToken: "dp_anon_abc",
+        }));
+        expect(errors.some((e) => e.includes("job id"))).toBe(true);
+    });
     it("accepts hosted worker infer proxy without BYOK or workspace key", () => {
         const config = baseConfig({
             enableAiInference: true,

package/dist/tests/unit/core/ai-orchestrator-options-anon.spec.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/tests/unit/core/ai-orchestrator-options-anon.spec.js

@@ -0,0 +1,29 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+const ai_orchestrator_options_1 = require("../../../src/core/pipeline/ai-orchestrator-options");
+function baseConfig(overrides = {}) {
+    return {
+        enableAPIDetection: true,
+        enableDatabaseDetection: true,
+        enableDataFlowDetection: true,
+        minimumConfidence: 0.5,
+        enableAiInference: true,
+        ...overrides,
+    };
+}
+describe("buildAgentOrchestratorOptions platform anon", () => {
+    it("wires platformProxy with anon session token as bearer", () => {
+        const options = (0, ai_orchestrator_options_1.buildAgentOrchestratorOptions)(baseConfig({
+            anonSessionToken: "dp_anon_session_token",
+            cliQuotaJobId: "job-1",
+            platformApiBaseUrl: "http://localhost:3000",
+        }), { llmEnabled: true, skipStructuralHeuristics: false });
+        expect(options.platformProxy).toEqual({
+            apiBaseUrl: "http://localhost:3000",
+            workspaceApiKey: "dp_anon_session_token",
+            jobId: "job-1",
+        });
+        expect(options.apiKey).toBeUndefined();
+        expect(options.providerConcurrency).toBe(1);
+    });
+});

package/dist/tests/unit/core/dependency-manifest-performance-budgets.spec.js

@@ -47,7 +47,7 @@ describe("dependency-manifest performance budgets (non-fatal)", () => {
             // Create enough manifests to exceed default budgets (maxManifestFiles=500).
             await createManyTypeScriptManifests(root, 600);
             await createManyPythonManifests(root, 600);
-            const config = (0, orchestrator_1.createDefaultScanConfiguration)({
+            const config = (0, orchestrator_1.createDefaultScanConfiguration)({ enableAiInference: false,
                 languages: ["typescript", "python"],
                 enableDataFlowDetection: false,
                 deepAnalysis: false,

package/dist/tests/unit/core/graph-mapping.spec.js

@@ -11,7 +11,7 @@ const scan_result_builders_1 = require("../../helpers/scan-result-builders");
 describe("core/pipeline/graph-mapping - DP-P0-CLI-402", () => {
     it("builds a DiagramGraphJson from a real ScanResult for the typescript-basic fixture", async () => {
         const fixturesRoot = path_1.default.join(__dirname, "..", "..", "fixtures", "typescript-basic");
-        const config = (0, orchestrator_1.createDefaultScanConfiguration)();
+        const config = (0, orchestrator_1.createDefaultScanConfiguration)({ enableAiInference: false });
         const { scanResult } = await (0, orchestrator_1.scan)(fixturesRoot, config);
         const graph = (0, graph_mapping_1.buildDiagramGraphFromScanResult)(scanResult);
         expect(graph.nodes.length).toBe(scanResult.components.length);

package/dist/tests/unit/core/invariant-tests-dedupe-determinism.spec.js

@@ -19,7 +19,7 @@ function shuffleDeterministic(arr, mode) {
 describe("invariant-tests - determinism", () => {
     it("scan() twice produces identical graph outputs", async () => {
         const fixturesRoot = path_1.default.join(__dirname, "..", "..", "fixtures", "typescript-basic");
-        const config = (0, orchestrator_1.createDefaultScanConfiguration)({
+        const config = (0, orchestrator_1.createDefaultScanConfiguration)({ enableAiInference: false,
             deepAnalysis: false,
         });
         const { scanResult: scanResult1 } = await (0, orchestrator_1.scan)(fixturesRoot, config);

package/dist/tests/unit/core/no-source-code-leakage.spec.js

@@ -40,7 +40,7 @@ function graphNodesContainCodeKey(graph) {
 describe("output safety - no source code leakage (DP-P0-CLI-XXX)", () => {
     it("does not emit `code` under graph.nodes[].data", async () => {
         const fixturesRoot = path_1.default.join(__dirname, "..", "..", "fixtures", "typescript-basic");
-        const config = (0, orchestrator_1.createDefaultScanConfiguration)();
+        const config = (0, orchestrator_1.createDefaultScanConfiguration)({ enableAiInference: false });
         const { scanResult } = await (0, orchestrator_1.scan)(fixturesRoot, config);
         const graph = (0, graph_mapping_1.buildDiagramGraphFromScanResult)(scanResult);
         expect(graphNodesContainCodeKey(graph)).toBe(false);

package/dist/tests/unit/core/orchestrator.spec.js

@@ -10,7 +10,7 @@ const orchestrator_1 = require("../../../src/core/pipeline/orchestrator");
 describe("core/pipeline/orchestrator - DP-P0-CLI-401", () => {
     it("runs the full structural pipeline for the typescript-basic fixture", async () => {
         const fixturesRoot = path_1.default.join(__dirname, "..", "..", "fixtures", "typescript-basic");
-        const config = (0, orchestrator_1.createDefaultScanConfiguration)();
+        const config = (0, orchestrator_1.createDefaultScanConfiguration)({ enableAiInference: false });
         const { scanResult } = await (0, orchestrator_1.scan)(fixturesRoot, config);
         expect(scanResult.components.length).toBeGreaterThan(0);
         expect(scanResult.dataFlows.length).toBeGreaterThan(0);
@@ -21,7 +21,7 @@ describe("core/pipeline/orchestrator - DP-P0-CLI-401", () => {
         expect(Array.isArray(scanResult.warnings)).toBe(true);
     });
     it("enables Terraform and monorepo package section auto-inference by default", () => {
-        const config = (0, orchestrator_1.createDefaultScanConfiguration)();
+        const config = (0, orchestrator_1.createDefaultScanConfiguration)({ enableAiInference: false });
         expect(config.autoInferTerraformStackSectionPathDepth).toBe(true);
         expect(config.terraformStackSectionPathDepth).toBeUndefined();
         expect(config.autoInferMonorepoPackageSectionPathDepth).toBe(true);
@@ -29,7 +29,7 @@ describe("core/pipeline/orchestrator - DP-P0-CLI-401", () => {
     });
     it("honors excludePaths by reducing the number of scanned files", async () => {
         const fixturesRoot = path_1.default.join(__dirname, "..", "..", "fixtures", "typescript-basic");
-        const baselineConfig = (0, orchestrator_1.createDefaultScanConfiguration)();
+        const baselineConfig = (0, orchestrator_1.createDefaultScanConfiguration)({ enableAiInference: false });
         const { scanResult: baseline } = await (0, orchestrator_1.scan)(fixturesRoot, baselineConfig);
         const configWithExcludes = (0, orchestrator_1.createDefaultScanConfiguration)({
             excludePaths: ["**/db.ts"],
@@ -39,7 +39,7 @@ describe("core/pipeline/orchestrator - DP-P0-CLI-401", () => {
     });
     it("supports ? wildcard in excludePaths patterns", async () => {
         const fixturesRoot = path_1.default.join(__dirname, "..", "..", "fixtures", "typescript-basic");
-        const baselineConfig = (0, orchestrator_1.createDefaultScanConfiguration)();
+        const baselineConfig = (0, orchestrator_1.createDefaultScanConfiguration)({ enableAiInference: false });
         const { files: baselineFiles } = await (0, orchestrator_1.scan)(fixturesRoot, baselineConfig);
         const configWithQuestionGlob = (0, orchestrator_1.createDefaultScanConfiguration)({
             excludePaths: ["d?.ts"],
@@ -52,7 +52,7 @@ describe("core/pipeline/orchestrator - DP-P0-CLI-401", () => {
     });
     it("filters files by languages when languages are specified", async () => {
         const fixturesRoot = path_1.default.join(__dirname, "..", "..", "fixtures", "typescript-basic");
-        const baselineConfig = (0, orchestrator_1.createDefaultScanConfiguration)();
+        const baselineConfig = (0, orchestrator_1.createDefaultScanConfiguration)({ enableAiInference: false });
         const { scanResult: baseline } = await (0, orchestrator_1.scan)(fixturesRoot, baselineConfig);
         const configLanguagesOnlyTs = (0, orchestrator_1.createDefaultScanConfiguration)({
             languages: ["typescript"],
@@ -79,7 +79,7 @@ describe("core/pipeline/orchestrator - DP-P0-CLI-401", () => {
     });
     it("respects enableAPIDetection and enableDatabaseDetection", async () => {
         const fixturesRoot = path_1.default.join(__dirname, "..", "..", "fixtures", "typescript-basic");
-        const baselineConfig = (0, orchestrator_1.createDefaultScanConfiguration)();
+        const baselineConfig = (0, orchestrator_1.createDefaultScanConfiguration)({ enableAiInference: false });
         const { findings: baselineFindings } = await (0, orchestrator_1.scan)(fixturesRoot, baselineConfig);
         const apiDisabledConfig = (0, orchestrator_1.createDefaultScanConfiguration)({
             enableAPIDetection: false,
@@ -95,7 +95,7 @@ describe("core/pipeline/orchestrator - DP-P0-CLI-401", () => {
     });
     it("emits ScanProgress events in the expected phase order", async () => {
         const fixturesRoot = path_1.default.join(__dirname, "..", "..", "fixtures", "typescript-basic");
-        const config = (0, orchestrator_1.createDefaultScanConfiguration)();
+        const config = (0, orchestrator_1.createDefaultScanConfiguration)({ enableAiInference: false });
         const phases = [];
         await (0, orchestrator_1.scan)(fixturesRoot, config, (progress) => {
             phases.push(progress.phase);
@@ -112,7 +112,7 @@ describe("core/pipeline/orchestrator - DP-P0-CLI-401", () => {
     });
     it("detects third-party services from Python dependency manifests", async () => {
         const fixturesRoot = path_1.default.join(__dirname, "..", "..", "fixtures", "python-dependency-manifests-basic");
-        const config = (0, orchestrator_1.createDefaultScanConfiguration)();
+        const config = (0, orchestrator_1.createDefaultScanConfiguration)({ enableAiInference: false });
         const { scanResult } = await (0, orchestrator_1.scan)(fixturesRoot, config);
         const thirdParties = scanResult.components.filter((c) => c.type === "third_party");
         const serviceNames = thirdParties
@@ -123,7 +123,7 @@ describe("core/pipeline/orchestrator - DP-P0-CLI-401", () => {
     });
     it("detects third-party services from TypeScript dependency manifests", async () => {
         const fixturesRoot = path_1.default.join(__dirname, "..", "..", "fixtures", "typescript-dependency-manifests-basic");
-        const config = (0, orchestrator_1.createDefaultScanConfiguration)();
+        const config = (0, orchestrator_1.createDefaultScanConfiguration)({ enableAiInference: false });
         const { scanResult } = await (0, orchestrator_1.scan)(fixturesRoot, config);
         const thirdParties = scanResult.components.filter((c) => c.type === "third_party");
         const serviceNames = thirdParties
@@ -176,7 +176,7 @@ describe("core/pipeline/orchestrator - DP-P0-CLI-401", () => {
             await promises_1.default.writeFile(path_1.default.join(root, "src", "app.ts"), "export const x = 1;\n", "utf8");
             await promises_1.default.writeFile(path_1.default.join(root, "src", "app.spec.ts"), "import { x } from './app';\n", "utf8");
             await promises_1.default.writeFile(path_1.default.join(root, "playwright.config.ts"), "export default {};\n", "utf8");
-            const { files } = await (0, orchestrator_1.scan)(root, (0, orchestrator_1.createDefaultScanConfiguration)());
+            const { files } = await (0, orchestrator_1.scan)(root, (0, orchestrator_1.createDefaultScanConfiguration)({ enableAiInference: false }));
             const paths = files.map((f) => f.path);
             expect(paths.some((p) => p.endsWith("app.spec.ts"))).toBe(false);
             expect(paths.some((p) => p.includes("playwright.config"))).toBe(false);
@@ -188,7 +188,7 @@ describe("core/pipeline/orchestrator - DP-P0-CLI-401", () => {
     });
     it("produces a combined ScanResult for mixed TypeScript and Python repos", async () => {
         const fixturesRoot = path_1.default.join(__dirname, "..", "..", "fixtures", "mixed-language-basic");
-        const config = (0, orchestrator_1.createDefaultScanConfiguration)();
+        const config = (0, orchestrator_1.createDefaultScanConfiguration)({ enableAiInference: false });
         const { scanResult, files, findings } = await (0, orchestrator_1.scan)(fixturesRoot, config);
         const scannedLanguages = new Set(files.map((file) => file.language));
         expect(scannedLanguages.has("typescript")).toBe(true);
@@ -231,7 +231,7 @@ describe("core/pipeline/orchestrator - DP-P0-CLI-401", () => {
                 "export default app;",
                 "",
             ].join("\n"), "utf8");
-            const config = (0, orchestrator_1.createDefaultScanConfiguration)();
+            const config = (0, orchestrator_1.createDefaultScanConfiguration)({ enableAiInference: false });
             const { scanResult } = await (0, orchestrator_1.scan)(root, config);
             const postgresTargets = scanResult.components.filter((c) => c.type === "asset" &&
                 c.subType === "database" &&

package/dist/tests/unit/core/output-json.spec.js

@@ -13,7 +13,7 @@ const json_1 = require("../../../src/output/json");
 describe("output/json - DP-P0-CLI-403", () => {
     it("builds and writes a validated dataflow.json wrapper for a real ScanResult", async () => {
         const fixturesRoot = path_1.default.join(__dirname, "..", "..", "fixtures", "typescript-basic");
-        const config = (0, orchestrator_1.createDefaultScanConfiguration)();
+        const config = (0, orchestrator_1.createDefaultScanConfiguration)({ enableAiInference: false });
         const { scanResult } = await (0, orchestrator_1.scan)(fixturesRoot, config);
         const graph = (0, graph_mapping_1.buildDiagramGraphFromScanResult)(scanResult);
         const wrapper = (0, json_1.buildDataflowWrapper)(scanResult, graph, {
@@ -43,7 +43,7 @@ describe("output/json - DP-P0-CLI-403", () => {
     });
     it("throws and does not write a file when validation fails", async () => {
         const fixturesRoot = path_1.default.join(__dirname, "..", "..", "fixtures", "typescript-basic");
-        const config = (0, orchestrator_1.createDefaultScanConfiguration)();
+        const config = (0, orchestrator_1.createDefaultScanConfiguration)({ enableAiInference: false });
         const { scanResult } = await (0, orchestrator_1.scan)(fixturesRoot, config);
         const graph = (0, graph_mapping_1.buildDiagramGraphFromScanResult)(scanResult);
         // Create an intentionally invalid graph by clearing the first node id so

package/dist/tests/unit/core/parsing-error-handling-nonfatal.spec.js

@@ -22,7 +22,7 @@ describe("parsing error handling - non-fatal", () => {
             // Python file with a literal null byte to trigger parser warning.
             // Use a Buffer to ensure the null byte is present in the file.
             await promises_1.default.writeFile(path_1.default.join(root, "main.py"), Buffer.from("import os\n\x00\n", "utf8"));
-            const config = (0, orchestrator_1.createDefaultScanConfiguration)({
+            const config = (0, orchestrator_1.createDefaultScanConfiguration)({ enableAiInference: false,
                 languages: ["typescript", "python"],
                 enableDataFlowDetection: false,
             });

package/dist/tests/unit/core/scan-result-language-stats.spec.js

@@ -4,7 +4,7 @@ const orchestrator_1 = require("../../../src/core/pipeline/orchestrator");
 describe("ScanResult.languageStats for Python", () => {
     it("populates languageStats entry for Python files", async () => {
         const rootPath = `${__dirname}/../../fixtures/python-parser-basic`;
-        const config = (0, orchestrator_1.createDefaultScanConfiguration)();
+        const config = (0, orchestrator_1.createDefaultScanConfiguration)({ enableAiInference: false });
         const { scanResult } = await (0, orchestrator_1.scan)(rootPath, config);
         expect(scanResult.languageStats).toBeDefined();
         const pythonStats = scanResult.languageStats?.find((entry) => entry.language === "python");

package/dist/tests/unit/core/structural-scan.spec.js

@@ -74,7 +74,7 @@ describe("core/pipeline/structural-scan - DP-P0-CLI-303", () => {
         const fixturesRoot = path_1.default.join(__dirname, "..", "..", "fixtures", "typescript-basic");
         const outside = path_1.default.join(fixturesRoot, "..", "terraform-show-extra-bucket.json");
         const warnings = [];
-        const config = (0, orchestrator_1.createDefaultScanConfiguration)({
+        const config = (0, orchestrator_1.createDefaultScanConfiguration)({ enableAiInference: false,
             terraformJsonPath: outside,
         });
         await (0, structural_scan_1.runStructuralScanPhase)(fixturesRoot, config, (w) => warnings.push(w));

package/dist/tests/unit/core/terraform-json-overlay.spec.js

@@ -15,7 +15,7 @@ describe("terraform JSON overlay in scan pipeline", () => {
         const overlayInRoot = path_1.default.join(fixturesRoot, "show-overlay.json");
         fs_1.default.copyFileSync(jsonFixture, overlayInRoot);
         try {
-            const config = (0, orchestrator_1.createDefaultScanConfiguration)({
+            const config = (0, orchestrator_1.createDefaultScanConfiguration)({ enableAiInference: false,
                 terraformJsonPath: "show-overlay.json",
             });
             const { scanResult } = await (0, orchestrator_1.scan)(fixturesRoot, config);

package/dist/tests/unit/platform-api/anonymous-ai-session-client.spec.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/tests/unit/platform-api/anonymous-ai-session-client.spec.js

@@ -0,0 +1,35 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+const anonymous_ai_session_client_1 = require("../../../src/platform-api/anonymous-ai-session-client");
+describe("cliAnonymousAiSession", () => {
+    const originalFetch = global.fetch;
+    afterEach(() => {
+        global.fetch = originalFetch;
+    });
+    it("returns session payload on success", async () => {
+        global.fetch = jest.fn().mockResolvedValue({
+            ok: true,
+            json: async () => ({
+                sessionToken: "dp_anon_abc",
+                jobId: "job-1",
+                suggestedAiBudgetTokens: 100000,
+                expiresAt: "2026-01-01T00:00:00.000Z",
+                aiDelivery: "platform_proxy",
+            }),
+        });
+        const out = await (0, anonymous_ai_session_client_1.cliAnonymousAiSession)({ projectName: "Demo" });
+        expect(out.sessionToken).toBe("dp_anon_abc");
+        expect(out.jobId).toBe("job-1");
+        expect(global.fetch).toHaveBeenCalledWith(expect.stringContaining("/api/scans/cli/ai/anonymous-session"), expect.objectContaining({ method: "POST" }));
+    });
+    it("throws CliAnonymousIpLimitError on 429", async () => {
+        global.fetch = jest.fn().mockResolvedValue({
+            ok: false,
+            status: 429,
+            json: async () => ({
+                message: "Too many anonymous CLI scans from this IP (max 3).",
+            }),
+        });
+        await expect((0, anonymous_ai_session_client_1.cliAnonymousAiSession)()).rejects.toBeInstanceOf(anonymous_ai_session_client_1.CliAnonymousIpLimitError);
+    });
+});