npm - @monoes/monograph - Versions diffs - 1.5.3 → 1.5.4 - Mend

@monoes/monograph 1.5.3 → 1.5.4

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (500) hide show

package/.monodesign/hook.cache.json +1 -1
package/__tests__/integration/call-attribution.test.ts +116 -0
package/coverage/base.css +224 -0
package/coverage/block-navigation.js +87 -0
package/coverage/coverage-summary.json +399 -0
package/coverage/favicon.png +0 -0
package/coverage/index.html +881 -0
package/coverage/prettify.css +1 -0
package/coverage/prettify.js +2 -0
package/coverage/sort-arrow-sprite.png +0 -0
package/coverage/sorter.js +210 -0
package/coverage/src/analysis/benchmark.ts.html +481 -0
package/coverage/src/analysis/changed-files.ts.html +304 -0
package/coverage/src/analysis/changed-workspaces.ts.html +367 -0
package/coverage/src/analysis/churn-cache.ts.html +622 -0
package/coverage/src/analysis/churn-trend.ts.html +256 -0
package/coverage/src/analysis/churn.ts.html +874 -0
package/coverage/src/analysis/cluster-quality.ts.html +511 -0
package/coverage/src/analysis/combined.ts.html +208 -0
package/coverage/src/analysis/corpus-health.ts.html +208 -0
package/coverage/src/analysis/coverage-gaps.ts.html +823 -0
package/coverage/src/analysis/dep-classification.ts.html +586 -0
package/coverage/src/analysis/dependency-health.ts.html +523 -0
package/coverage/src/analysis/duplicate-exports.ts.html +415 -0
package/coverage/src/analysis/fallow-suppression.ts.html +379 -0
package/coverage/src/analysis/feature-flags-config.ts.html +226 -0
package/coverage/src/analysis/feature-flags.ts.html +754 -0
package/coverage/src/analysis/file-classifier.ts.html +346 -0
package/coverage/src/analysis/git-changed-files.ts.html +271 -0
package/coverage/src/analysis/health-baseline.ts.html +325 -0
package/coverage/src/analysis/index.html +641 -0
package/coverage/src/analysis/issue-filters.ts.html +253 -0
package/coverage/src/analysis/list.ts.html +307 -0
package/coverage/src/analysis/node-similarity.ts.html +430 -0
package/coverage/src/analysis/private-type-leaks.ts.html +442 -0
package/coverage/src/analysis/progress.ts.html +214 -0
package/coverage/src/analysis/project-state.ts.html +370 -0
package/coverage/src/analysis/regression-config.ts.html +193 -0
package/coverage/src/analysis/rule-overrides.ts.html +328 -0
package/coverage/src/analysis/scripts.ts.html +370 -0
package/coverage/src/analysis/shape-extractor.ts.html +691 -0
package/coverage/src/analysis/since-duration.ts.html +211 -0
package/coverage/src/analysis/suppression-context.ts.html +370 -0
package/coverage/src/analysis/suppressions.ts.html +325 -0
package/coverage/src/analysis/surprise-scorer.ts.html +307 -0
package/coverage/src/analysis/targets.ts.html +796 -0
package/coverage/src/analysis/unused-class-members.ts.html +322 -0
package/coverage/src/analysis/workspace-filter.ts.html +352 -0
package/coverage/src/analyze/boundary-analysis.ts.html +472 -0
package/coverage/src/analyze/index.html +161 -0
package/coverage/src/analyze/predicates/file.ts.html +343 -0
package/coverage/src/analyze/predicates/import.ts.html +355 -0
package/coverage/src/analyze/predicates/index.html +146 -0
package/coverage/src/analyze/predicates/lifecycle.ts.html +250 -0
package/coverage/src/analyze/unused-deps.ts.html +295 -0
package/coverage/src/analyze/unused-exports.ts.html +520 -0
package/coverage/src/analyze/unused-files.ts.html +223 -0
package/coverage/src/api/index.html +131 -0
package/coverage/src/api/production-override.ts.html +274 -0
package/coverage/src/api/programmatic.ts.html +439 -0
package/coverage/src/audit.ts.html +787 -0
package/coverage/src/cache/augment-cache.ts.html +274 -0
package/coverage/src/cache/extraction-cache.ts.html +508 -0
package/coverage/src/cache/index.html +131 -0
package/coverage/src/check/filtering.ts.html +319 -0
package/coverage/src/check/index.html +161 -0
package/coverage/src/check/index.ts.html +382 -0
package/coverage/src/check/output.ts.html +322 -0
package/coverage/src/check/rules.ts.html +268 -0
package/coverage/src/ci-template.ts.html +337 -0
package/coverage/src/claude-cli.ts.html +262 -0
package/coverage/src/cli/ai-context.ts.html +664 -0
package/coverage/src/cli/augment.ts.html +427 -0
package/coverage/src/cli/check-update.ts.html +205 -0
package/coverage/src/cli/doctor.ts.html +631 -0
package/coverage/src/cli/eval-server.ts.html +463 -0
package/coverage/src/cli/hooks-install.ts.html +691 -0
package/coverage/src/cli/index.html +221 -0
package/coverage/src/cli/setup.ts.html +676 -0
package/coverage/src/cli/skill-gen.ts.html +1126 -0
package/coverage/src/commands/flags.ts.html +301 -0
package/coverage/src/commands/index.html +116 -0
package/coverage/src/config/boundary-config.ts.html +634 -0
package/coverage/src/config/cli-schema.ts.html +328 -0
package/coverage/src/config/config-parsing.ts.html +391 -0
package/coverage/src/config/duplicates-config.ts.html +271 -0
package/coverage/src/config/external-plugin.ts.html +316 -0
package/coverage/src/config/health-config.ts.html +211 -0
package/coverage/src/config/ignore-exports-used-in-file.ts.html +223 -0
package/coverage/src/config/index.html +341 -0
package/coverage/src/config/migration-types.ts.html +304 -0
package/coverage/src/config/output-format.ts.html +157 -0
package/coverage/src/config/plugins/builtin.ts.html +1318 -0
package/coverage/src/config/plugins/index.html +146 -0
package/coverage/src/config/plugins/registry.ts.html +316 -0
package/coverage/src/config/plugins/types.ts.html +127 -0
package/coverage/src/config/resolution.ts.html +391 -0
package/coverage/src/config/rules.ts.html +295 -0
package/coverage/src/config/schema-gen.ts.html +430 -0
package/coverage/src/config/types.ts.html +532 -0
package/coverage/src/config/used-class-members.ts.html +244 -0
package/coverage/src/config/validate.ts.html +409 -0
package/coverage/src/config/workspace.ts.html +496 -0
package/coverage/src/coverage/cloud-client.ts.html +418 -0
package/coverage/src/coverage/index.html +146 -0
package/coverage/src/coverage/upload-inventory.ts.html +337 -0
package/coverage/src/coverage/upload-source-maps.ts.html +376 -0
package/coverage/src/discover/entry-points.ts.html +238 -0
package/coverage/src/discover/index.html +131 -0
package/coverage/src/discover/infrastructure-entries.ts.html +610 -0
package/coverage/src/duplicates/detect/concatenation.ts.html +196 -0
package/coverage/src/duplicates/detect/extraction.ts.html +406 -0
package/coverage/src/duplicates/detect/filtering.ts.html +421 -0
package/coverage/src/duplicates/detect/index.html +206 -0
package/coverage/src/duplicates/detect/lcp.ts.html +166 -0
package/coverage/src/duplicates/detect/ranking.ts.html +133 -0
package/coverage/src/duplicates/detect/statistics.ts.html +292 -0
package/coverage/src/duplicates/detect/suffix-array.ts.html +349 -0
package/coverage/src/duplicates/families.ts.html +370 -0
package/coverage/src/duplicates/index.html +161 -0
package/coverage/src/duplicates/normalize.ts.html +259 -0
package/coverage/src/duplicates/shingle-filter.ts.html +196 -0
package/coverage/src/duplicates/token-types.ts.html +271 -0
package/coverage/src/duplicates/tokenize/index.html +116 -0
package/coverage/src/duplicates/tokenize/index.ts.html +397 -0
package/coverage/src/error/fallow-error.ts.html +367 -0
package/coverage/src/error/index.html +116 -0
package/coverage/src/error.ts.html +226 -0
package/coverage/src/export/adjacency-matrix.ts.html +466 -0
package/coverage/src/export/analysis-json.ts.html +346 -0
package/coverage/src/export/badge.ts.html +400 -0
package/coverage/src/export/canvas.ts.html +211 -0
package/coverage/src/export/codeclimate.ts.html +688 -0
package/coverage/src/export/compact-health.ts.html +442 -0
package/coverage/src/export/compact.ts.html +334 -0
package/coverage/src/export/csv.ts.html +184 -0
package/coverage/src/export/cypher.ts.html +184 -0
package/coverage/src/export/dot.ts.html +241 -0
package/coverage/src/export/gexf.ts.html +262 -0
package/coverage/src/export/graphml.ts.html +235 -0
package/coverage/src/export/html.ts.html +1729 -0
package/coverage/src/export/index.html +401 -0
package/coverage/src/export/index.ts.html +112 -0
package/coverage/src/export/json.ts.html +193 -0
package/coverage/src/export/markdown.ts.html +955 -0
package/coverage/src/export/mermaid.ts.html +385 -0
package/coverage/src/export/obsidian.ts.html +217 -0
package/coverage/src/export/sarif.ts.html +820 -0
package/coverage/src/export/svg.ts.html +289 -0
package/coverage/src/fix/deps.ts.html +295 -0
package/coverage/src/fix/enum-members.ts.html +394 -0
package/coverage/src/fix/export-surgery.ts.html +676 -0
package/coverage/src/fix/exports.ts.html +364 -0
package/coverage/src/fix/index.html +176 -0
package/coverage/src/fix/orchestrator.ts.html +286 -0
package/coverage/src/graph/analyzer.ts.html +292 -0
package/coverage/src/graph/author-analytics.ts.html +736 -0
package/coverage/src/graph/baseline.ts.html +1381 -0
package/coverage/src/graph/clone-families.ts.html +481 -0
package/coverage/src/graph/codeowners-extended.ts.html +427 -0
package/coverage/src/graph/codeowners-gitlab.ts.html +535 -0
package/coverage/src/graph/codeowners.ts.html +736 -0
package/coverage/src/graph/complexity.ts.html +685 -0
package/coverage/src/graph/cross-reference-findings.ts.html +340 -0
package/coverage/src/graph/cross-reference.ts.html +502 -0
package/coverage/src/graph/cycle-detection.ts.html +1018 -0
package/coverage/src/graph/cycles.ts.html +751 -0
package/coverage/src/graph/dead-code.ts.html +469 -0
package/coverage/src/graph/dependency-closure.ts.html +463 -0
package/coverage/src/graph/dfs.ts.html +439 -0
package/coverage/src/graph/diff.ts.html +361 -0
package/coverage/src/graph/duplication-stats.ts.html +322 -0
package/coverage/src/graph/edge-filter.ts.html +436 -0
package/coverage/src/graph/explain.ts.html +484 -0
package/coverage/src/graph/external-style-usage.ts.html +328 -0
package/coverage/src/graph/health-score.ts.html +622 -0
package/coverage/src/graph/hotspots.ts.html +742 -0
package/coverage/src/graph/import-chain.ts.html +529 -0
package/coverage/src/graph/index.html +746 -0
package/coverage/src/graph/loader.ts.html +217 -0
package/coverage/src/graph/maintainability.ts.html +553 -0
package/coverage/src/graph/merge.ts.html +607 -0
package/coverage/src/graph/mirrored-dirs.ts.html +691 -0
package/coverage/src/graph/narrowing.ts.html +361 -0
package/coverage/src/graph/node-search.ts.html +688 -0
package/coverage/src/graph/node-types.ts.html +286 -0
package/coverage/src/graph/normalize-id.ts.html +499 -0
package/coverage/src/graph/pagerank.ts.html +580 -0
package/coverage/src/graph/prune.ts.html +370 -0
package/coverage/src/graph/re-exports/index.html +116 -0
package/coverage/src/graph/re-exports/propagate.ts.html +370 -0
package/coverage/src/graph/reachability.ts.html +382 -0
package/coverage/src/graph/regex-search.ts.html +781 -0
package/coverage/src/graph/regression.ts.html +682 -0
package/coverage/src/graph/resolve/discover-types.ts.html +220 -0
package/coverage/src/graph/resolve/dynamic-imports.ts.html +391 -0
package/coverage/src/graph/resolve/fallbacks.ts.html +322 -0
package/coverage/src/graph/resolve/index.html +281 -0
package/coverage/src/graph/resolve/index.ts.html +289 -0
package/coverage/src/graph/resolve/path-info.ts.html +208 -0
package/coverage/src/graph/resolve/re-exports.ts.html +127 -0
package/coverage/src/graph/resolve/react-native.ts.html +166 -0
package/coverage/src/graph/resolve/require-imports.ts.html +139 -0
package/coverage/src/graph/resolve/specifier.ts.html +445 -0
package/coverage/src/graph/resolve/static-imports.ts.html +127 -0
package/coverage/src/graph/resolve/types.ts.html +409 -0
package/coverage/src/graph/resolve/upgrades.ts.html +181 -0
package/coverage/src/graph/ripple-impact.ts.html +478 -0
package/coverage/src/graph/risk-profile.ts.html +622 -0
package/coverage/src/graph/statistics.ts.html +580 -0
package/coverage/src/graph/stats.ts.html +556 -0
package/coverage/src/graph/subgraph.ts.html +571 -0
package/coverage/src/graph/topo-sort.ts.html +598 -0
package/coverage/src/graph/wcc.ts.html +646 -0
package/coverage/src/groups/contract-bridge.ts.html +394 -0
package/coverage/src/groups/contract-registry.ts.html +874 -0
package/coverage/src/groups/group-config.ts.html +409 -0
package/coverage/src/groups/group-search.ts.html +502 -0
package/coverage/src/groups/group-sync.ts.html +331 -0
package/coverage/src/groups/grpc-extractor.ts.html +277 -0
package/coverage/src/groups/index.html +221 -0
package/coverage/src/groups/service-boundary.ts.html +442 -0
package/coverage/src/groups/topic-extractor.ts.html +355 -0
package/coverage/src/health/analysis-counts-snapshot.ts.html +256 -0
package/coverage/src/health/analysis-counts.ts.html +295 -0
package/coverage/src/health/complexity-findings.ts.html +430 -0
package/coverage/src/health/distribution-thresholds.ts.html +247 -0
package/coverage/src/health/grouping.ts.html +499 -0
package/coverage/src/health/health-grouping.ts.html +343 -0
package/coverage/src/health/health-report-types.ts.html +580 -0
package/coverage/src/health/health-report.ts.html +328 -0
package/coverage/src/health/health-score.ts.html +280 -0
package/coverage/src/health/hotspot-utils.ts.html +250 -0
package/coverage/src/health/hotspots.ts.html +397 -0
package/coverage/src/health/index.html +551 -0
package/coverage/src/health/large-functions.ts.html +187 -0
package/coverage/src/health/ownership-metrics.ts.html +268 -0
package/coverage/src/health/ownership-risk.ts.html +379 -0
package/coverage/src/health/ownership.ts.html +607 -0
package/coverage/src/health/quality-gate.ts.html +256 -0
package/coverage/src/health/risk-profile.ts.html +202 -0
package/coverage/src/health/runtime-coverage-report.ts.html +388 -0
package/coverage/src/health/runtime-coverage.ts.html +298 -0
package/coverage/src/health/scores.ts.html +301 -0
package/coverage/src/health/scoring-types.ts.html +229 -0
package/coverage/src/health/target-thresholds.ts.html +361 -0
package/coverage/src/health/target-types.ts.html +247 -0
package/coverage/src/health/targets.ts.html +538 -0
package/coverage/src/health/timings.ts.html +343 -0
package/coverage/src/health/trend-types.ts.html +256 -0
package/coverage/src/health/trends.ts.html +343 -0
package/coverage/src/health/vital-signs-compute.ts.html +409 -0
package/coverage/src/health/vital-signs-snapshot.ts.html +301 -0
package/coverage/src/health/vital-signs.ts.html +388 -0
package/coverage/src/index.html +191 -0
package/coverage/src/index.ts.html +418 -0
package/coverage/src/ingest/git-clone.ts.html +823 -0
package/coverage/src/ingest/index.html +161 -0
package/coverage/src/ingest/query-memory.ts.html +481 -0
package/coverage/src/ingest/transcribe.ts.html +847 -0
package/coverage/src/ingest/url-ingest.ts.html +346 -0
package/coverage/src/init/agent-hooks.ts.html +343 -0
package/coverage/src/init/git-hooks.ts.html +298 -0
package/coverage/src/init/index.html +146 -0
package/coverage/src/init/project-detection.ts.html +400 -0
package/coverage/src/license/index.html +116 -0
package/coverage/src/license/manager.ts.html +445 -0
package/coverage/src/lsp/code-actions.ts.html +466 -0
package/coverage/src/lsp/code-lens.ts.html +253 -0
package/coverage/src/lsp/diagnostics-ext.ts.html +535 -0
package/coverage/src/lsp/diagnostics-push.ts.html +394 -0
package/coverage/src/lsp/diagnostics.ts.html +379 -0
package/coverage/src/lsp/hover.ts.html +277 -0
package/coverage/src/lsp/index.html +206 -0
package/coverage/src/lsp/server.ts.html +847 -0
package/coverage/src/mcp/index.html +146 -0
package/coverage/src/mcp/params.ts.html +688 -0
package/coverage/src/mcp/resources.ts.html +457 -0
package/coverage/src/mcp/tool-builders.ts.html +694 -0
package/coverage/src/mcp-resources/communities-resource.ts.html +301 -0
package/coverage/src/mcp-resources/graph-resource.ts.html +127 -0
package/coverage/src/mcp-resources/index.html +251 -0
package/coverage/src/mcp-resources/index.ts.html +112 -0
package/coverage/src/mcp-resources/named-cluster-resource.ts.html +190 -0
package/coverage/src/mcp-resources/named-process-resource.ts.html +163 -0
package/coverage/src/mcp-resources/processes-resource.ts.html +286 -0
package/coverage/src/mcp-resources/repo-context-resource.ts.html +193 -0
package/coverage/src/mcp-resources/repos-resource.ts.html +148 -0
package/coverage/src/mcp-resources/schema-resource.ts.html +223 -0
package/coverage/src/mcp-resources/wiki-resource.ts.html +154 -0
package/coverage/src/mcp-tools/api-impact.ts.html +628 -0
package/coverage/src/mcp-tools/context.ts.html +418 -0
package/coverage/src/mcp-tools/cypher.ts.html +172 -0
package/coverage/src/mcp-tools/detect-changes.ts.html +433 -0
package/coverage/src/mcp-tools/explain.ts.html +280 -0
package/coverage/src/mcp-tools/graph-query.ts.html +469 -0
package/coverage/src/mcp-tools/group-list.ts.html +349 -0
package/coverage/src/mcp-tools/group-query.ts.html +163 -0
package/coverage/src/mcp-tools/group-sync.ts.html +181 -0
package/coverage/src/mcp-tools/impact.ts.html +691 -0
package/coverage/src/mcp-tools/index.html +431 -0
package/coverage/src/mcp-tools/index.ts.html +148 -0
package/coverage/src/mcp-tools/list-repos.ts.html +199 -0
package/coverage/src/mcp-tools/neighbors.ts.html +325 -0
package/coverage/src/mcp-tools/query.ts.html +343 -0
package/coverage/src/mcp-tools/rename.ts.html +439 -0
package/coverage/src/mcp-tools/route-map.ts.html +379 -0
package/coverage/src/mcp-tools/serve.ts.html +208 -0
package/coverage/src/mcp-tools/shape-check.ts.html +631 -0
package/coverage/src/mcp-tools/staleness.ts.html +124 -0
package/coverage/src/mcp-tools/tool-map.ts.html +283 -0
package/coverage/src/mcp-tools/wiki-build.ts.html +196 -0
package/coverage/src/mcp-tools/wiki.ts.html +169 -0
package/coverage/src/migrate/index.html +161 -0
package/coverage/src/migrate/jscpd.ts.html +319 -0
package/coverage/src/migrate/jsonc-gen.ts.html +199 -0
package/coverage/src/migrate/knip.ts.html +463 -0
package/coverage/src/migrate/toml-gen.ts.html +229 -0
package/coverage/src/parsers/c.ts.html +178 -0
package/coverage/src/parsers/cpp.ts.html +172 -0
package/coverage/src/parsers/csharp.ts.html +214 -0
package/coverage/src/parsers/dart.ts.html +202 -0
package/coverage/src/parsers/extractor.ts.html +691 -0
package/coverage/src/parsers/go.ts.html +166 -0
package/coverage/src/parsers/index.html +386 -0
package/coverage/src/parsers/java.ts.html +166 -0
package/coverage/src/parsers/kotlin.ts.html +193 -0
package/coverage/src/parsers/language-config.ts.html +169 -0
package/coverage/src/parsers/language-parsers.ts.html +445 -0
package/coverage/src/parsers/loader.ts.html +532 -0
package/coverage/src/parsers/named-bindings.ts.html +274 -0
package/coverage/src/parsers/php.ts.html +196 -0
package/coverage/src/parsers/python.ts.html +163 -0
package/coverage/src/parsers/ruby.ts.html +202 -0
package/coverage/src/parsers/rust.ts.html +160 -0
package/coverage/src/parsers/swift.ts.html +169 -0
package/coverage/src/parsers/typescript.ts.html +208 -0
package/coverage/src/parsers/vue.ts.html +322 -0
package/coverage/src/pipeline/cluster-only.ts.html +277 -0
package/coverage/src/pipeline/effort.ts.html +235 -0
package/coverage/src/pipeline/index.html +191 -0
package/coverage/src/pipeline/orchestrator.ts.html +844 -0
package/coverage/src/pipeline/phases/boundary.ts.html +538 -0
package/coverage/src/pipeline/phases/bridge-adapters/electron-ipc.ts.html +358 -0
package/coverage/src/pipeline/phases/bridge-adapters/index.html +176 -0
package/coverage/src/pipeline/phases/bridge-adapters/registry.ts.html +127 -0
package/coverage/src/pipeline/phases/bridge-adapters/tauri.ts.html +394 -0
package/coverage/src/pipeline/phases/bridge-adapters/types.ts.html +178 -0
package/coverage/src/pipeline/phases/bridge-adapters/wails.ts.html +184 -0
package/coverage/src/pipeline/phases/bridge-resolver.ts.html +316 -0
package/coverage/src/pipeline/phases/call-site-extractors.ts.html +592 -0
package/coverage/src/pipeline/phases/communities.ts.html +634 -0
package/coverage/src/pipeline/phases/contextual-proximity.ts.html +349 -0
package/coverage/src/pipeline/phases/cross-file.ts.html +433 -0
package/coverage/src/pipeline/phases/docs-parse.ts.html +1006 -0
package/coverage/src/pipeline/phases/evidence.ts.html +112 -0
package/coverage/src/pipeline/phases/field-access.ts.html +232 -0
package/coverage/src/pipeline/phases/framework-detect.ts.html +412 -0
package/coverage/src/pipeline/phases/god-nodes.ts.html +574 -0
package/coverage/src/pipeline/phases/import-resolver.ts.html +427 -0
package/coverage/src/pipeline/phases/index.html +626 -0
package/coverage/src/pipeline/phases/leiden.ts.html +316 -0
package/coverage/src/pipeline/phases/llm-extract.ts.html +577 -0
package/coverage/src/pipeline/phases/markdown.ts.html +448 -0
package/coverage/src/pipeline/phases/middleware-extractor.ts.html +466 -0
package/coverage/src/pipeline/phases/module-resolution.ts.html +967 -0
package/coverage/src/pipeline/phases/mro.ts.html +253 -0
package/coverage/src/pipeline/phases/orm.ts.html +1594 -0
package/coverage/src/pipeline/phases/parse.ts.html +751 -0
package/coverage/src/pipeline/phases/pdf-parse.ts.html +484 -0
package/coverage/src/pipeline/phases/processes.ts.html +832 -0
package/coverage/src/pipeline/phases/re-export-propagation.ts.html +565 -0
package/coverage/src/pipeline/phases/reachability.ts.html +553 -0
package/coverage/src/pipeline/phases/routes.ts.html +1135 -0
package/coverage/src/pipeline/phases/scan.ts.html +484 -0
package/coverage/src/pipeline/phases/scope-resolution.ts.html +1147 -0
package/coverage/src/pipeline/phases/structure.ts.html +289 -0
package/coverage/src/pipeline/phases/suggest.ts.html +361 -0
package/coverage/src/pipeline/phases/surprises.ts.html +334 -0
package/coverage/src/pipeline/phases/tools.ts.html +625 -0
package/coverage/src/pipeline/phases/variables-phase.ts.html +196 -0
package/coverage/src/pipeline/phases/variables.ts.html +286 -0
package/coverage/src/pipeline/phases/wildcard-phase.ts.html +235 -0
package/coverage/src/pipeline/phases/wildcard-synthesis.ts.html +727 -0
package/coverage/src/pipeline/progress.ts.html +259 -0
package/coverage/src/pipeline/runner.ts.html +469 -0
package/coverage/src/pipeline/types.ts.html +208 -0
package/coverage/src/query/cypher-parser.ts.html +1435 -0
package/coverage/src/query/index.html +116 -0
package/coverage/src/registry/index.html +116 -0
package/coverage/src/registry/repo-registry.ts.html +460 -0
package/coverage/src/regression/baseline-deltas.ts.html +730 -0
package/coverage/src/regression/baseline.ts.html +313 -0
package/coverage/src/regression/counts.ts.html +346 -0
package/coverage/src/regression/index.html +176 -0
package/coverage/src/regression/outcome.ts.html +319 -0
package/coverage/src/regression/tolerance.ts.html +190 -0
package/coverage/src/report/attributed-duplication.ts.html +421 -0
package/coverage/src/report/badge-svg.ts.html +385 -0
package/coverage/src/report/cross-ref-human.ts.html +235 -0
package/coverage/src/report/duplication-grouping.ts.html +307 -0
package/coverage/src/report/grouping.ts.html +496 -0
package/coverage/src/report/human-check.ts.html +958 -0
package/coverage/src/report/human-dupes.ts.html +511 -0
package/coverage/src/report/human-health.ts.html +670 -0
package/coverage/src/report/human.ts.html +445 -0
package/coverage/src/report/index.html +341 -0
package/coverage/src/report/json-actions.ts.html +358 -0
package/coverage/src/report/json-builders.ts.html +295 -0
package/coverage/src/report/json-schema.ts.html +310 -0
package/coverage/src/report/number-format.ts.html +358 -0
package/coverage/src/report/output-grouped.ts.html +391 -0
package/coverage/src/report/pipeline-perf.ts.html +253 -0
package/coverage/src/report/trace-human.ts.html +466 -0
package/coverage/src/reporting/graph-report.ts.html +1378 -0
package/coverage/src/reporting/index.html +116 -0
package/coverage/src/results/fallow-results.ts.html +541 -0
package/coverage/src/results/index.html +131 -0
package/coverage/src/results/types.ts.html +532 -0
package/coverage/src/scope-resolution/evidence-weights.ts.html +208 -0
package/coverage/src/scope-resolution/index.html +116 -0
package/coverage/src/search/ast-chunker.ts.html +703 -0
package/coverage/src/search/diacritic.ts.html +106 -0
package/coverage/src/search/hybrid-query.ts.html +280 -0
package/coverage/src/search/index.html +161 -0
package/coverage/src/search/rrf.ts.html +238 -0
package/coverage/src/security/index.html +131 -0
package/coverage/src/security/safe-fetch.ts.html +424 -0
package/coverage/src/security/sensitive-files.ts.html +157 -0
package/coverage/src/skills/index.html +116 -0
package/coverage/src/skills/platform-skills.ts.html +784 -0
package/coverage/src/staleness/git-staleness.ts.html +283 -0
package/coverage/src/staleness/index.html +116 -0
package/coverage/src/storage/db.ts.html +415 -0
package/coverage/src/storage/edge-store.ts.html +400 -0
package/coverage/src/storage/file-cache.ts.html +319 -0
package/coverage/src/storage/fts-store.ts.html +1240 -0
package/coverage/src/storage/index.html +221 -0
package/coverage/src/storage/node-store.ts.html +712 -0
package/coverage/src/storage/schema.ts.html +598 -0
package/coverage/src/storage/suppressions.ts.html +520 -0
package/coverage/src/storage/unlinked-refs.ts.html +436 -0
package/coverage/src/types.ts.html +676 -0
package/coverage/src/validation/extraction-validator.ts.html +247 -0
package/coverage/src/validation/index.html +116 -0
package/coverage/src/watch/index.html +116 -0
package/coverage/src/watch/watcher.ts.html +499 -0
package/coverage/src/web/analyze-api.ts.html +523 -0
package/coverage/src/web/api.ts.html +1837 -0
package/coverage/src/web/async-jobs.ts.html +412 -0
package/coverage/src/web/index.html +191 -0
package/coverage/src/web/mcp-http.ts.html +766 -0
package/coverage/src/web/react-ui.ts.html +319 -0
package/coverage/src/web/server.ts.html +355 -0
package/coverage/src/wiki/gist-publisher.ts.html +313 -0
package/coverage/src/wiki/index.html +176 -0
package/coverage/src/wiki/prompt-builder.ts.html +190 -0
package/coverage/src/wiki/providers.ts.html +487 -0
package/coverage/src/wiki/wiki-generator.ts.html +736 -0
package/coverage/src/wiki/wiki-store.ts.html +232 -0
package/dist/src/cli/eval-server.d.ts.map +1 -1
package/dist/src/cli/eval-server.js +8 -1
package/dist/src/cli/eval-server.js.map +1 -1
package/dist/src/cli/skill-gen.js.map +1 -1
package/dist/src/graph/regex-search.d.ts.map +1 -1
package/dist/src/graph/regex-search.js +13 -13
package/dist/src/graph/regex-search.js.map +1 -1
package/dist/src/graph/statistics.d.ts +0 -4
package/dist/src/graph/statistics.d.ts.map +1 -1
package/dist/src/graph/statistics.js +0 -7
package/dist/src/graph/statistics.js.map +1 -1
package/dist/src/pipeline/phases/call-site-extractors.d.ts +8 -0
package/dist/src/pipeline/phases/call-site-extractors.d.ts.map +1 -1
package/dist/src/pipeline/phases/call-site-extractors.js +9 -9
package/dist/src/pipeline/phases/call-site-extractors.js.map +1 -1
package/dist/src/pipeline/phases/module-resolution.js +2 -2
package/dist/src/pipeline/phases/module-resolution.js.map +1 -1
package/dist/src/pipeline/phases/scope-resolution.d.ts.map +1 -1
package/dist/src/pipeline/phases/scope-resolution.js +76 -1
package/dist/src/pipeline/phases/scope-resolution.js.map +1 -1
package/dist/src/registry/repo-registry.d.ts.map +1 -1
package/dist/src/registry/repo-registry.js +1 -2
package/dist/src/registry/repo-registry.js.map +1 -1
package/dist/tsconfig.tsbuildinfo +1 -1
package/package.json +4 -3
package/src/cli/eval-server.ts +8 -1
package/src/cli/skill-gen.ts +16 -16
package/src/graph/regex-search.ts +13 -14
package/src/graph/statistics.ts +0 -8
package/src/pipeline/phases/call-site-extractors.ts +17 -9
package/src/pipeline/phases/module-resolution.ts +2 -2
package/src/pipeline/phases/scope-resolution.ts +89 -1
package/src/registry/repo-registry.ts +1 -2
package/vitest.config.ts +7 -0
package/src/analysis/cycles.ts +0 -268
package/src/analysis/trace.ts +0 -300
package/src/analysis/worker-pool.ts +0 -81
package/src/graph/clone-detector.ts +0 -163
package/src/graph/shingle-filter.ts +0 -149
package/src/watch/watch-runner.ts +0 -64

package/coverage/src/security/safe-fetch.ts.html ADDED Viewed

@@ -0,0 +1,424 @@
+<!doctype html>
+<html lang="en">
+<head>
+    <title>Code coverage report for src/security/safe-fetch.ts</title>
+    <meta charset="utf-8" />
+    <link rel="stylesheet" href="../../prettify.css" />
+    <link rel="stylesheet" href="../../base.css" />
+    <link rel="shortcut icon" type="image/x-icon" href="../../favicon.png" />
+    <meta name="viewport" content="width=device-width, initial-scale=1" />
+    <style type='text/css'>
+        .coverage-summary .sorter {
+            background-image: url(../../sort-arrow-sprite.png);
+        }
+    </style>
+</head>
+<body>
+<div class='wrapper'>
+    <div class='pad1'>
+        <h1><a href="../../index.html">All files</a> / <a href="index.html">src/security</a> safe-fetch.ts</h1>
+        <div class='clearfix'>
+            <div class='fl pad1y space-right2'>
+                <span class="strong">93.75% </span>
+                <span class="quiet">Statements</span>
+                <span class='fraction'>45/48</span>
+            </div>
+            <div class='fl pad1y space-right2'>
+                <span class="strong">90.47% </span>
+                <span class="quiet">Branches</span>
+                <span class='fraction'>19/21</span>
+            </div>
+            <div class='fl pad1y space-right2'>
+                <span class="strong">80% </span>
+                <span class="quiet">Functions</span>
+                <span class='fraction'>4/5</span>
+            </div>
+            <div class='fl pad1y space-right2'>
+                <span class="strong">95.23% </span>
+                <span class="quiet">Lines</span>
+                <span class='fraction'>40/42</span>
+            </div>
+        </div>
+        <p class="quiet">
+            Press <em>n</em> or <em>j</em> to go to the next uncovered block, <em>b</em>, <em>p</em> or <em>k</em> for the previous block.
+        </p>
+        <template id="filterTemplate">
+            <div class="quiet">
+                Filter:
+                <input type="search" id="fileSearch">
+            </div>
+        </template>
+    </div>
+    <div class='status-line high'></div>
+    <pre><table class="coverage">
+<tr><td class="line-count quiet"><a name='L1'></a><a href='#L1'>1</a>
+<a name='L2'></a><a href='#L2'>2</a>
+<a name='L3'></a><a href='#L3'>3</a>
+<a name='L4'></a><a href='#L4'>4</a>
+<a name='L5'></a><a href='#L5'>5</a>
+<a name='L6'></a><a href='#L6'>6</a>
+<a name='L7'></a><a href='#L7'>7</a>
+<a name='L8'></a><a href='#L8'>8</a>
+<a name='L9'></a><a href='#L9'>9</a>
+<a name='L10'></a><a href='#L10'>10</a>
+<a name='L11'></a><a href='#L11'>11</a>
+<a name='L12'></a><a href='#L12'>12</a>
+<a name='L13'></a><a href='#L13'>13</a>
+<a name='L14'></a><a href='#L14'>14</a>
+<a name='L15'></a><a href='#L15'>15</a>
+<a name='L16'></a><a href='#L16'>16</a>
+<a name='L17'></a><a href='#L17'>17</a>
+<a name='L18'></a><a href='#L18'>18</a>
+<a name='L19'></a><a href='#L19'>19</a>
+<a name='L20'></a><a href='#L20'>20</a>
+<a name='L21'></a><a href='#L21'>21</a>
+<a name='L22'></a><a href='#L22'>22</a>
+<a name='L23'></a><a href='#L23'>23</a>
+<a name='L24'></a><a href='#L24'>24</a>
+<a name='L25'></a><a href='#L25'>25</a>
+<a name='L26'></a><a href='#L26'>26</a>
+<a name='L27'></a><a href='#L27'>27</a>
+<a name='L28'></a><a href='#L28'>28</a>
+<a name='L29'></a><a href='#L29'>29</a>
+<a name='L30'></a><a href='#L30'>30</a>
+<a name='L31'></a><a href='#L31'>31</a>
+<a name='L32'></a><a href='#L32'>32</a>
+<a name='L33'></a><a href='#L33'>33</a>
+<a name='L34'></a><a href='#L34'>34</a>
+<a name='L35'></a><a href='#L35'>35</a>
+<a name='L36'></a><a href='#L36'>36</a>
+<a name='L37'></a><a href='#L37'>37</a>
+<a name='L38'></a><a href='#L38'>38</a>
+<a name='L39'></a><a href='#L39'>39</a>
+<a name='L40'></a><a href='#L40'>40</a>
+<a name='L41'></a><a href='#L41'>41</a>
+<a name='L42'></a><a href='#L42'>42</a>
+<a name='L43'></a><a href='#L43'>43</a>
+<a name='L44'></a><a href='#L44'>44</a>
+<a name='L45'></a><a href='#L45'>45</a>
+<a name='L46'></a><a href='#L46'>46</a>
+<a name='L47'></a><a href='#L47'>47</a>
+<a name='L48'></a><a href='#L48'>48</a>
+<a name='L49'></a><a href='#L49'>49</a>
+<a name='L50'></a><a href='#L50'>50</a>
+<a name='L51'></a><a href='#L51'>51</a>
+<a name='L52'></a><a href='#L52'>52</a>
+<a name='L53'></a><a href='#L53'>53</a>
+<a name='L54'></a><a href='#L54'>54</a>
+<a name='L55'></a><a href='#L55'>55</a>
+<a name='L56'></a><a href='#L56'>56</a>
+<a name='L57'></a><a href='#L57'>57</a>
+<a name='L58'></a><a href='#L58'>58</a>
+<a name='L59'></a><a href='#L59'>59</a>
+<a name='L60'></a><a href='#L60'>60</a>
+<a name='L61'></a><a href='#L61'>61</a>
+<a name='L62'></a><a href='#L62'>62</a>
+<a name='L63'></a><a href='#L63'>63</a>
+<a name='L64'></a><a href='#L64'>64</a>
+<a name='L65'></a><a href='#L65'>65</a>
+<a name='L66'></a><a href='#L66'>66</a>
+<a name='L67'></a><a href='#L67'>67</a>
+<a name='L68'></a><a href='#L68'>68</a>
+<a name='L69'></a><a href='#L69'>69</a>
+<a name='L70'></a><a href='#L70'>70</a>
+<a name='L71'></a><a href='#L71'>71</a>
+<a name='L72'></a><a href='#L72'>72</a>
+<a name='L73'></a><a href='#L73'>73</a>
+<a name='L74'></a><a href='#L74'>74</a>
+<a name='L75'></a><a href='#L75'>75</a>
+<a name='L76'></a><a href='#L76'>76</a>
+<a name='L77'></a><a href='#L77'>77</a>
+<a name='L78'></a><a href='#L78'>78</a>
+<a name='L79'></a><a href='#L79'>79</a>
+<a name='L80'></a><a href='#L80'>80</a>
+<a name='L81'></a><a href='#L81'>81</a>
+<a name='L82'></a><a href='#L82'>82</a>
+<a name='L83'></a><a href='#L83'>83</a>
+<a name='L84'></a><a href='#L84'>84</a>
+<a name='L85'></a><a href='#L85'>85</a>
+<a name='L86'></a><a href='#L86'>86</a>
+<a name='L87'></a><a href='#L87'>87</a>
+<a name='L88'></a><a href='#L88'>88</a>
+<a name='L89'></a><a href='#L89'>89</a>
+<a name='L90'></a><a href='#L90'>90</a>
+<a name='L91'></a><a href='#L91'>91</a>
+<a name='L92'></a><a href='#L92'>92</a>
+<a name='L93'></a><a href='#L93'>93</a>
+<a name='L94'></a><a href='#L94'>94</a>
+<a name='L95'></a><a href='#L95'>95</a>
+<a name='L96'></a><a href='#L96'>96</a>
+<a name='L97'></a><a href='#L97'>97</a>
+<a name='L98'></a><a href='#L98'>98</a>
+<a name='L99'></a><a href='#L99'>99</a>
+<a name='L100'></a><a href='#L100'>100</a>
+<a name='L101'></a><a href='#L101'>101</a>
+<a name='L102'></a><a href='#L102'>102</a>
+<a name='L103'></a><a href='#L103'>103</a>
+<a name='L104'></a><a href='#L104'>104</a>
+<a name='L105'></a><a href='#L105'>105</a>
+<a name='L106'></a><a href='#L106'>106</a>
+<a name='L107'></a><a href='#L107'>107</a>
+<a name='L108'></a><a href='#L108'>108</a>
+<a name='L109'></a><a href='#L109'>109</a>
+<a name='L110'></a><a href='#L110'>110</a>
+<a name='L111'></a><a href='#L111'>111</a>
+<a name='L112'></a><a href='#L112'>112</a>
+<a name='L113'></a><a href='#L113'>113</a>
+<a name='L114'></a><a href='#L114'>114</a></td><td class="line-coverage quiet"><span class="cline-any cline-yes">3x</span>
+<span class="cline-any cline-neutral">&nbsp;</span>
+<span class="cline-any cline-neutral">&nbsp;</span>
+<span class="cline-any cline-neutral">&nbsp;</span>
+<span class="cline-any cline-neutral">&nbsp;</span>
+<span class="cline-any cline-neutral">&nbsp;</span>
+<span class="cline-any cline-neutral">&nbsp;</span>
+<span class="cline-any cline-neutral">&nbsp;</span>
+<span class="cline-any cline-neutral">&nbsp;</span>
+<span class="cline-any cline-neutral">&nbsp;</span>
+<span class="cline-any cline-neutral">&nbsp;</span>
+<span class="cline-any cline-neutral">&nbsp;</span>
+<span class="cline-any cline-neutral">&nbsp;</span>
+<span class="cline-any cline-neutral">&nbsp;</span>
+<span class="cline-any cline-yes">3x</span>
+<span class="cline-any cline-neutral">&nbsp;</span>
+<span class="cline-any cline-neutral">&nbsp;</span>
+<span class="cline-any cline-neutral">&nbsp;</span>
+<span class="cline-any cline-neutral">&nbsp;</span>
+<span class="cline-any cline-neutral">&nbsp;</span>
+<span class="cline-any cline-neutral">&nbsp;</span>
+<span class="cline-any cline-neutral">&nbsp;</span>
+<span class="cline-any cline-neutral">&nbsp;</span>
+<span class="cline-any cline-neutral">&nbsp;</span>
+<span class="cline-any cline-neutral">&nbsp;</span>
+<span class="cline-any cline-neutral">&nbsp;</span>
+<span class="cline-any cline-yes">27x</span>
+<span class="cline-any cline-yes">27x</span>
+<span class="cline-any cline-neutral">&nbsp;</span>
+<span class="cline-any cline-no">&nbsp;</span>
+<span class="cline-any cline-neutral">&nbsp;</span>
+<span class="cline-any cline-yes">27x</span>
+<span class="cline-any cline-yes">27x</span>
+<span class="cline-any cline-yes">24x</span>
+<span class="cline-any cline-yes">137x</span>
+<span class="cline-any cline-neutral">&nbsp;</span>
+<span class="cline-any cline-neutral">&nbsp;</span>
+<span class="cline-any cline-neutral">&nbsp;</span>
+<span class="cline-any cline-neutral">&nbsp;</span>
+<span class="cline-any cline-neutral">&nbsp;</span>
+<span class="cline-any cline-neutral">&nbsp;</span>
+<span class="cline-any cline-neutral">&nbsp;</span>
+<span class="cline-any cline-neutral">&nbsp;</span>
+<span class="cline-any cline-neutral">&nbsp;</span>
+<span class="cline-any cline-yes">15x</span>
+<span class="cline-any cline-yes">15x</span>
+<span class="cline-any cline-neutral">&nbsp;</span>
+<span class="cline-any cline-yes">1x</span>
+<span class="cline-any cline-neutral">&nbsp;</span>
+<span class="cline-any cline-yes">14x</span>
+<span class="cline-any cline-yes">4x</span>
+<span class="cline-any cline-neutral">&nbsp;</span>
+<span class="cline-any cline-yes">10x</span>
+<span class="cline-any cline-yes">3x</span>
+<span class="cline-any cline-neutral">&nbsp;</span>
+<span class="cline-any cline-neutral">&nbsp;</span>
+<span class="cline-any cline-neutral">&nbsp;</span>
+<span class="cline-any cline-neutral">&nbsp;</span>
+<span class="cline-any cline-neutral">&nbsp;</span>
+<span class="cline-any cline-neutral">&nbsp;</span>
+<span class="cline-any cline-neutral">&nbsp;</span>
+<span class="cline-any cline-neutral">&nbsp;</span>
+<span class="cline-any cline-neutral">&nbsp;</span>
+<span class="cline-any cline-neutral">&nbsp;</span>
+<span class="cline-any cline-neutral">&nbsp;</span>
+<span class="cline-any cline-neutral">&nbsp;</span>
+<span class="cline-any cline-neutral">&nbsp;</span>
+<span class="cline-any cline-neutral">&nbsp;</span>
+<span class="cline-any cline-neutral">&nbsp;</span>
+<span class="cline-any cline-neutral">&nbsp;</span>
+<span class="cline-any cline-neutral">&nbsp;</span>
+<span class="cline-any cline-yes">3x</span>
+<span class="cline-any cline-yes">3x</span>
+<span class="cline-any cline-yes">3x</span>
+<span class="cline-any cline-yes">3x</span>
+<span class="cline-any cline-yes">3x</span>
+<span class="cline-any cline-yes">3x</span>
+<span class="cline-any cline-yes">3x</span>
+<span class="cline-any cline-neutral">&nbsp;</span>
+<span class="cline-any cline-neutral">&nbsp;</span>
+<span class="cline-any cline-neutral">&nbsp;</span>
+<span class="cline-any cline-neutral">&nbsp;</span>
+<span class="cline-any cline-yes">2x</span>
+<span class="cline-any cline-no">&nbsp;</span>
+<span class="cline-any cline-neutral">&nbsp;</span>
+<span class="cline-any cline-yes">2x</span>
+<span class="cline-any cline-yes">2x</span>
+<span class="cline-any cline-yes">2x</span>
+<span class="cline-any cline-yes">2x</span>
+<span class="cline-any cline-neutral">&nbsp;</span>
+<span class="cline-any cline-yes">2x</span>
+<span class="cline-any cline-yes">2x</span>
+<span class="cline-any cline-yes">4x</span>
+<span class="cline-any cline-yes">4x</span>
+<span class="cline-any cline-yes">3x</span>
+<span class="cline-any cline-yes">3x</span>
+<span class="cline-any cline-yes">3x</span>
+<span class="cline-any cline-yes">1x</span>
+<span class="cline-any cline-neutral">&nbsp;</span>
+<span class="cline-any cline-yes">2x</span>
+<span class="cline-any cline-neutral">&nbsp;</span>
+<span class="cline-any cline-neutral">&nbsp;</span>
+<span class="cline-any cline-neutral">&nbsp;</span>
+<span class="cline-any cline-yes">1x</span>
+<span class="cline-any cline-neutral">&nbsp;</span>
+<span class="cline-any cline-yes">2x</span>
+<span class="cline-any cline-neutral">&nbsp;</span>
+<span class="cline-any cline-neutral">&nbsp;</span>
+<span class="cline-any cline-yes">1x</span>
+<span class="cline-any cline-neutral">&nbsp;</span>
+<span class="cline-any cline-yes">3x</span>
+<span class="cline-any cline-neutral">&nbsp;</span>
+<span class="cline-any cline-neutral">&nbsp;</span>
+<span class="cline-any cline-neutral">&nbsp;</span></td><td class="text"><pre class="prettyprint lang-js">const PRIVATE_IP_PATTERNS: RegExp[] = [
+  /^127\./,
+  /^10\./,
+  /^192\.168\./,
+  /^172\.(1[6-9]|2\d|3[01])\./,
+  /^169\.254\./,
+  /^::1$|\[::1\]/,
+  /^fc00:|^\[fc00:/i,
+  /^fe80:|^\[fe80:/i,
+  // IPv4-mapped IPv6 (e.g. ::ffff:192.168.1.1) — covers private ranges via mapped form
+  /^::ffff:/i,
+  /^\[::ffff:/i,
+];
+&nbsp;
+const CLOUD_METADATA_HOSTS = new Set([
+  'metadata.google.internal',
+  'metadata.goog',
+  '169.254.169.254',
+]);
+&nbsp;
+/**
+ * Returns true if the given URL resolves to a private, loopback, or cloud
+ * metadata address that should be blocked to prevent SSRF attacks.
+ */
+export function isPrivateUrl(rawUrl: string): boolean {
+  let url: URL;
+  try {
+    url = new URL(rawUrl);
+  } catch {
+<span class="cstat-no" title="statement not covered" >    return false;</span>
+  }
+  const host = url.hostname;
+  if (host === 'localhost') return true;
+  if (CLOUD_METADATA_HOSTS.has(host)) return true;
+  return PRIVATE_IP_PATTERNS.some(p =&gt; p.test(host));
+}
+&nbsp;
+/**
+ * Validates that a URL is safe to fetch: must use http/https and must not
+ * resolve to a private or reserved address.
+ * @throws {Error} if the URL is invalid, uses an unsupported scheme, or is private
+ */
+export function validateUrl(rawUrl: string): void {
+  let url: URL;
+  try {
+    url = new URL(rawUrl);
+  } catch {
+    throw new Error(`Invalid URL: ${rawUrl}`);
+  }
+  if (!['http:', 'https:'].includes(url.protocol)) {
+    throw new Error(`Unsupported scheme: ${url.protocol}`);
+  }
+  if (isPrivateUrl(rawUrl)) {
+    throw new Error(`URL resolves to private/reserved address: ${url.hostname}`);
+  }
+}
+&nbsp;
+/**
+ * Fetches the content of a URL after validating it is safe (not private/internal).
+ * Enforces a maximum response size and request timeout.
+ *
+ * @param rawUrl - The URL to fetch
+ * @param opts.maxBytes - Maximum allowed response size in bytes (default 10 MB)
+ * @param opts.timeoutMs - Request timeout in milliseconds (default 10 000)
+ * @returns The response body as a string
+ * @throws {Error} if the URL is unsafe, the request fails, or the response is too large
+ */
+export async function safeFetch(
+  rawUrl: string,
+  opts: { maxBytes?: number; timeoutMs?: number } = {},
+): Promise&lt;string&gt; {
+  validateUrl(rawUrl);
+  const { maxBytes = 10 * 1024 * 1024, timeoutMs = 10_000 } = opts;
+  const controller = new AbortController();
+  const timer = <span class="fstat-no" title="function not covered" >setTimeout(() =&gt; <span class="cstat-no" title="statement not covered" >c</span>ontroller.abort(), t</span>imeoutMs);
+  try {
+    const res = await fetch(rawUrl, { signal: controller.signal });
+    if (!res.ok) throw new Error(`HTTP ${res.status}: ${rawUrl}`);
+&nbsp;
+    // Stream the body incrementally so we can enforce maxBytes before
+    // the full response is loaded into memory (prevents memory exhaustion
+    // on large/malicious payloads).
+    <span class="missing-if-branch" title="if path not taken" >I</span>if (!res.body) {
+<span class="cstat-no" title="statement not covered" >      throw new Error(`Response body is missing: ${rawUrl}`);</span>
+    }
+    const reader = (res.body as ReadableStream&lt;Uint8Array&gt;).getReader();
+    const decoder = new TextDecoder();
+    const chunks: string[] = [];
+    let totalBytes = 0;
+&nbsp;
+    try {
+      while (true) {
+        const { value, done } = await reader.read();
+        if (done) break;
+        <span class="missing-if-branch" title="else path not taken" >E</span>if (value) {
+          totalBytes += value.byteLength;
+          if (totalBytes &gt; maxBytes) {
+            throw new Error(`Response exceeds ${maxBytes} bytes: ${rawUrl}`);
+          }
+          chunks.push(decoder.decode(value, { stream: true }));
+        }
+      }
+      // Flush any remaining bytes held in the decoder
+      chunks.push(decoder.decode());
+    } finally {
+      reader.releaseLock();
+    }
+&nbsp;
+    return chunks.join('');
+  } finally {
+    clearTimeout(timer);
+  }
+}
+&nbsp;</pre></td></tr></table></pre>
+                <div class='push'></div><!-- for sticky footer -->
+            </div><!-- /wrapper -->
+            <div class='footer quiet pad2 space-top1 center small'>
+                Code coverage generated by
+                <a href="https://istanbul.js.org/" target="_blank" rel="noopener noreferrer">istanbul</a>
+                at 2026-07-25T08:38:16.548Z
+            </div>
+        <script src="../../prettify.js"></script>
+        <script>
+            window.onload = function () {
+                prettyPrint();
+            };
+        </script>
+        <script src="../../sorter.js"></script>
+        <script src="../../block-navigation.js"></script>
+    </body>
+</html>

package/coverage/src/security/sensitive-files.ts.html ADDED Viewed

@@ -0,0 +1,157 @@
+<!doctype html>
+<html lang="en">
+<head>
+    <title>Code coverage report for src/security/sensitive-files.ts</title>
+    <meta charset="utf-8" />
+    <link rel="stylesheet" href="../../prettify.css" />
+    <link rel="stylesheet" href="../../base.css" />
+    <link rel="shortcut icon" type="image/x-icon" href="../../favicon.png" />
+    <meta name="viewport" content="width=device-width, initial-scale=1" />
+    <style type='text/css'>
+        .coverage-summary .sorter {
+            background-image: url(../../sort-arrow-sprite.png);
+        }
+    </style>
+</head>
+<body>
+<div class='wrapper'>
+    <div class='pad1'>
+        <h1><a href="../../index.html">All files</a> / <a href="index.html">src/security</a> sensitive-files.ts</h1>
+        <div class='clearfix'>
+            <div class='fl pad1y space-right2'>
+                <span class="strong">100% </span>
+                <span class="quiet">Statements</span>
+                <span class='fraction'>4/4</span>
+            </div>
+            <div class='fl pad1y space-right2'>
+                <span class="strong">100% </span>
+                <span class="quiet">Branches</span>
+                <span class='fraction'>2/2</span>
+            </div>
+            <div class='fl pad1y space-right2'>
+                <span class="strong">100% </span>
+                <span class="quiet">Functions</span>
+                <span class='fraction'>2/2</span>
+            </div>
+            <div class='fl pad1y space-right2'>
+                <span class="strong">100% </span>
+                <span class="quiet">Lines</span>
+                <span class='fraction'>3/3</span>
+            </div>
+        </div>
+        <p class="quiet">
+            Press <em>n</em> or <em>j</em> to go to the next uncovered block, <em>b</em>, <em>p</em> or <em>k</em> for the previous block.
+        </p>
+        <template id="filterTemplate">
+            <div class="quiet">
+                Filter:
+                <input type="search" id="fileSearch">
+            </div>
+        </template>
+    </div>
+    <div class='status-line high'></div>
+    <pre><table class="coverage">
+<tr><td class="line-count quiet"><a name='L1'></a><a href='#L1'>1</a>
+<a name='L2'></a><a href='#L2'>2</a>
+<a name='L3'></a><a href='#L3'>3</a>
+<a name='L4'></a><a href='#L4'>4</a>
+<a name='L5'></a><a href='#L5'>5</a>
+<a name='L6'></a><a href='#L6'>6</a>
+<a name='L7'></a><a href='#L7'>7</a>
+<a name='L8'></a><a href='#L8'>8</a>
+<a name='L9'></a><a href='#L9'>9</a>
+<a name='L10'></a><a href='#L10'>10</a>
+<a name='L11'></a><a href='#L11'>11</a>
+<a name='L12'></a><a href='#L12'>12</a>
+<a name='L13'></a><a href='#L13'>13</a>
+<a name='L14'></a><a href='#L14'>14</a>
+<a name='L15'></a><a href='#L15'>15</a>
+<a name='L16'></a><a href='#L16'>16</a>
+<a name='L17'></a><a href='#L17'>17</a>
+<a name='L18'></a><a href='#L18'>18</a>
+<a name='L19'></a><a href='#L19'>19</a>
+<a name='L20'></a><a href='#L20'>20</a>
+<a name='L21'></a><a href='#L21'>21</a>
+<a name='L22'></a><a href='#L22'>22</a>
+<a name='L23'></a><a href='#L23'>23</a>
+<a name='L24'></a><a href='#L24'>24</a>
+<a name='L25'></a><a href='#L25'>25</a></td><td class="line-coverage quiet"><span class="cline-any cline-neutral">&nbsp;</span>
+<span class="cline-any cline-neutral">&nbsp;</span>
+<span class="cline-any cline-yes">14x</span>
+<span class="cline-any cline-neutral">&nbsp;</span>
+<span class="cline-any cline-neutral">&nbsp;</span>
+<span class="cline-any cline-neutral">&nbsp;</span>
+<span class="cline-any cline-neutral">&nbsp;</span>
+<span class="cline-any cline-neutral">&nbsp;</span>
+<span class="cline-any cline-neutral">&nbsp;</span>
+<span class="cline-any cline-neutral">&nbsp;</span>
+<span class="cline-any cline-neutral">&nbsp;</span>
+<span class="cline-any cline-neutral">&nbsp;</span>
+<span class="cline-any cline-neutral">&nbsp;</span>
+<span class="cline-any cline-neutral">&nbsp;</span>
+<span class="cline-any cline-neutral">&nbsp;</span>
+<span class="cline-any cline-neutral">&nbsp;</span>
+<span class="cline-any cline-neutral">&nbsp;</span>
+<span class="cline-any cline-neutral">&nbsp;</span>
+<span class="cline-any cline-neutral">&nbsp;</span>
+<span class="cline-any cline-neutral">&nbsp;</span>
+<span class="cline-any cline-neutral">&nbsp;</span>
+<span class="cline-any cline-yes">71x</span>
+<span class="cline-any cline-yes">953x</span>
+<span class="cline-any cline-neutral">&nbsp;</span>
+<span class="cline-any cline-neutral">&nbsp;</span></td><td class="text"><pre class="prettyprint lang-js">import { basename as pathBasename } from 'path';
+&nbsp;
+const SENSITIVE_PATTERNS: RegExp[] = [
+  /^\.env(\.|$)/i,
+  /^\.netrc$/i,
+  /\baws_credentials\b/i,
+  /\bcredentials?\b.*\.(json|yaml|yml|toml|ini|cfg)$/i,
+  /\bsecrets?\b.*\.(json|yaml|yml|toml|ini|cfg)$/i,
+  /\bsecret[_-]?key\b/i,
+  /\bapi[_-]?key\b.*\.(json|txt)$/i,
+  /\bpasswd\b/i,
+  /\bpassword[s]?\b.*\.(txt|json|yaml|yml)$/i,
+  /\btoken\b.*\.(txt|json|env)$/i,
+  /\b(id_rsa|id_dsa|id_ecdsa|id_ed25519)(\.pub)?$/i,
+  /\.(pem|key|pfx|p12|p8|pkcs8)$/i,
+  /\bservice[_-]?account\b.*\.json$/i,
+  /\bkeystore\b/i,
+  /\bvault[_-]?token\b/i,
+];
+&nbsp;
+export function isSensitiveFile(filePath: string): boolean {
+  const base = pathBasename(filePath);
+  return SENSITIVE_PATTERNS.some(p =&gt; p.test(base) || p.test(filePath));
+}
+&nbsp;</pre></td></tr></table></pre>
+                <div class='push'></div><!-- for sticky footer -->
+            </div><!-- /wrapper -->
+            <div class='footer quiet pad2 space-top1 center small'>
+                Code coverage generated by
+                <a href="https://istanbul.js.org/" target="_blank" rel="noopener noreferrer">istanbul</a>
+                at 2026-07-25T08:38:16.548Z
+            </div>
+        <script src="../../prettify.js"></script>
+        <script>
+            window.onload = function () {
+                prettyPrint();
+            };
+        </script>
+        <script src="../../sorter.js"></script>
+        <script src="../../block-navigation.js"></script>
+    </body>
+</html>