@monoes/monograph 1.5.6 → 1.5.7

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (596) hide show
  1. package/README.md +25 -9
  2. package/dist/src/mcp-tools/impact.d.ts.map +1 -1
  3. package/dist/src/mcp-tools/impact.js +1 -10
  4. package/dist/src/mcp-tools/impact.js.map +1 -1
  5. package/dist/tsconfig.tsbuildinfo +1 -1
  6. package/package.json +12 -9
  7. package/.monomind/data/ranked-context.json +0 -5
  8. package/.monomind/loops/mastermind-review-1782162423447.json +0 -16
  9. package/.monomind/sessions/session-1777578175215.json +0 -15
  10. package/.monomind/sessions/session-1777823684507.json +0 -15
  11. package/.monomind/sessions/session-1777928944749.json +0 -15
  12. package/.monomind/sessions/session-1778052902210.json +0 -15
  13. package/.monomind/sessions/session-1778056744636.json +0 -15
  14. package/.monomind/sessions/session-1778061077599.json +0 -15
  15. package/.monomind/sessions/session-1778102154764.json +0 -15
  16. package/__tests__/analysis/shape-extractor.test.ts +0 -124
  17. package/__tests__/analysis/surprise-scorer.test.ts +0 -154
  18. package/__tests__/cache/extraction-cache.test.ts +0 -45
  19. package/__tests__/cli/ai-context.test.ts +0 -175
  20. package/__tests__/cli/augment.test.ts +0 -128
  21. package/__tests__/cli/doctor.test.ts +0 -125
  22. package/__tests__/cli/eval-server.test.ts +0 -89
  23. package/__tests__/cli/setup.test.ts +0 -178
  24. package/__tests__/cli/skill-gen.test.ts +0 -280
  25. package/__tests__/export/formats.test.ts +0 -82
  26. package/__tests__/fixtures/sample.c +0 -25
  27. package/__tests__/fixtures/sample.cpp +0 -32
  28. package/__tests__/fixtures/sample.dart +0 -34
  29. package/__tests__/fixtures/sample.kt +0 -30
  30. package/__tests__/fixtures/sample.php +0 -30
  31. package/__tests__/fixtures/sample.py +0 -11
  32. package/__tests__/fixtures/sample.rb +0 -26
  33. package/__tests__/fixtures/sample.swift +0 -42
  34. package/__tests__/fixtures/sample.ts +0 -17
  35. package/__tests__/fixtures/sample.vue +0 -40
  36. package/__tests__/groups/group-search.test.ts +0 -221
  37. package/__tests__/groups/group-sync.test.ts +0 -336
  38. package/__tests__/integration/build-atomicity.test.ts +0 -61
  39. package/__tests__/integration/call-attribution.test.ts +0 -116
  40. package/__tests__/integration/full-pipeline.test.ts +0 -64
  41. package/__tests__/integration/graph-report-freshness.test.ts +0 -53
  42. package/__tests__/integration/incremental-build.test.ts +0 -103
  43. package/__tests__/mcp-resources/resources.test.ts +0 -256
  44. package/__tests__/mcp-tools/api-impact.test.ts +0 -188
  45. package/__tests__/mcp-tools/context.test.ts +0 -130
  46. package/__tests__/mcp-tools/cypher.test.ts +0 -258
  47. package/__tests__/mcp-tools/detect-changes.test.ts +0 -114
  48. package/__tests__/mcp-tools/impact.test.ts +0 -133
  49. package/__tests__/mcp-tools/rename.test.ts +0 -117
  50. package/__tests__/mcp-tools/route-map.test.ts +0 -237
  51. package/__tests__/mcp-tools/shape-check.test.ts +0 -202
  52. package/__tests__/mcp-tools/tool-map.test.ts +0 -135
  53. package/__tests__/parsers/c.test.ts +0 -28
  54. package/__tests__/parsers/cpp.test.ts +0 -28
  55. package/__tests__/parsers/csharp.test.ts +0 -62
  56. package/__tests__/parsers/dart.test.ts +0 -28
  57. package/__tests__/parsers/kotlin.test.ts +0 -28
  58. package/__tests__/parsers/loader.test.ts +0 -14
  59. package/__tests__/parsers/php.test.ts +0 -28
  60. package/__tests__/parsers/python.test.ts +0 -32
  61. package/__tests__/parsers/ruby.test.ts +0 -33
  62. package/__tests__/parsers/swift.test.ts +0 -28
  63. package/__tests__/parsers/typescript.test.ts +0 -45
  64. package/__tests__/parsers/vue.test.ts +0 -28
  65. package/__tests__/pipeline/analysis.test.ts +0 -58
  66. package/__tests__/pipeline/phases/corpus-check.test.ts +0 -26
  67. package/__tests__/pipeline/phases/evidence.test.ts +0 -41
  68. package/__tests__/pipeline/phases/field-access.test.ts +0 -22
  69. package/__tests__/pipeline/phases/leiden.test.ts +0 -72
  70. package/__tests__/pipeline/phases/markdown.test.ts +0 -84
  71. package/__tests__/pipeline/phases/middleware-extractor.test.ts +0 -131
  72. package/__tests__/pipeline/phases/orm.test.ts +0 -379
  73. package/__tests__/pipeline/phases/processes.test.ts +0 -191
  74. package/__tests__/pipeline/phases/routes.test.ts +0 -195
  75. package/__tests__/pipeline/phases/scope-resolution.test.ts +0 -133
  76. package/__tests__/pipeline/phases/tools.test.ts +0 -161
  77. package/__tests__/pipeline/phases/variables.test.ts +0 -30
  78. package/__tests__/pipeline/phases/wildcard-synthesis.test.ts +0 -207
  79. package/__tests__/pipeline/phases.test.ts +0 -41
  80. package/__tests__/pipeline/runner.test.ts +0 -28
  81. package/__tests__/registry/repo-registry.test.ts +0 -127
  82. package/__tests__/reporting/graph-report.suggest.test.ts +0 -36
  83. package/__tests__/reporting/graph-report.test.ts +0 -165
  84. package/__tests__/search/ast-chunker.test.ts +0 -63
  85. package/__tests__/search/rrf.test.ts +0 -95
  86. package/__tests__/security/safe-fetch.test.ts +0 -41
  87. package/__tests__/security/sensitive-files.test.ts +0 -32
  88. package/__tests__/setup.ts +0 -1
  89. package/__tests__/skills/platform-skills.test.ts +0 -63
  90. package/__tests__/staleness/git-staleness.test.ts +0 -107
  91. package/__tests__/storage/db.test.ts +0 -37
  92. package/__tests__/storage/evidence-roundtrip.test.ts +0 -89
  93. package/__tests__/storage/stores.test.ts +0 -165
  94. package/__tests__/types.test.ts +0 -13
  95. package/__tests__/validation/extraction-validator.test.ts +0 -48
  96. package/__tests__/watch/watcher.test.ts +0 -31
  97. package/__tests__/web/analyze-api.test.ts +0 -66
  98. package/__tests__/web/api.test.ts +0 -210
  99. package/__tests__/web/mcp-http.test.ts +0 -67
  100. package/__tests__/web/react-ui.test.ts +0 -43
  101. package/__tests__/wiki/gist-publisher.test.ts +0 -66
  102. package/__tests__/wiki/providers.test.ts +0 -69
  103. package/__tests__/wiki/wiki-generator.test.ts +0 -260
  104. package/src/__tests__/analysis/benchmark.test.ts +0 -59
  105. package/src/__tests__/analysis/cluster-quality.test.ts +0 -106
  106. package/src/__tests__/analysis/corpus-health.test.ts +0 -33
  107. package/src/__tests__/analysis/dependency-health.test.ts +0 -105
  108. package/src/__tests__/analysis/file-classifier.test.ts +0 -50
  109. package/src/__tests__/analysis/node-similarity.test.ts +0 -81
  110. package/src/__tests__/cache/augment-cache.test.ts +0 -55
  111. package/src/__tests__/cli/check-update.test.ts +0 -42
  112. package/src/__tests__/cli/hooks-install.test.ts +0 -56
  113. package/src/__tests__/cli/hooks-marker.test.ts +0 -138
  114. package/src/__tests__/cli/hooks-status.test.ts +0 -42
  115. package/src/__tests__/export/adjacency-matrix.test.ts +0 -116
  116. package/src/__tests__/export/csv.test.ts +0 -39
  117. package/src/__tests__/export/dot.test.ts +0 -86
  118. package/src/__tests__/export/gexf.test.ts +0 -78
  119. package/src/__tests__/export/graphml.test.ts +0 -57
  120. package/src/__tests__/export/mermaid.test.ts +0 -89
  121. package/src/__tests__/graph/betweenness.test.ts +0 -89
  122. package/src/__tests__/graph/cycles.test.ts +0 -131
  123. package/src/__tests__/graph/dead-code.test.ts +0 -174
  124. package/src/__tests__/graph/dfs.test.ts +0 -62
  125. package/src/__tests__/graph/diff-summary.test.ts +0 -83
  126. package/src/__tests__/graph/edge-filter.test.ts +0 -129
  127. package/src/__tests__/graph/import-chain.test.ts +0 -111
  128. package/src/__tests__/graph/merge.test.ts +0 -151
  129. package/src/__tests__/graph/node-search.test.ts +0 -167
  130. package/src/__tests__/graph/normalize-id.test.ts +0 -102
  131. package/src/__tests__/graph/pagerank.test.ts +0 -96
  132. package/src/__tests__/graph/prune.test.ts +0 -110
  133. package/src/__tests__/graph/regex-search.test.ts +0 -166
  134. package/src/__tests__/graph/ripple-impact.test.ts +0 -73
  135. package/src/__tests__/graph/scc.test.ts +0 -85
  136. package/src/__tests__/graph/statistics.test.ts +0 -219
  137. package/src/__tests__/graph/subgraph.test.ts +0 -127
  138. package/src/__tests__/graph/topo-sort.test.ts +0 -110
  139. package/src/__tests__/graph/wcc.test.ts +0 -101
  140. package/src/__tests__/groups/grpc-extractor.test.ts +0 -47
  141. package/src/__tests__/groups/service-boundary.test.ts +0 -86
  142. package/src/__tests__/groups/topic-extractor.test.ts +0 -43
  143. package/src/__tests__/ingest/git-clone.test.ts +0 -128
  144. package/src/__tests__/ingest/query-memory.test.ts +0 -123
  145. package/src/__tests__/ingest/transcribe.test.ts +0 -58
  146. package/src/__tests__/ingest/url-ingest.test.ts +0 -48
  147. package/src/__tests__/mcp-resources/repo-context-resource.test.ts +0 -37
  148. package/src/__tests__/mcp-resources/repos-resource.test.ts +0 -71
  149. package/src/__tests__/mcp-resources/wiki-resource.test.ts +0 -52
  150. package/src/__tests__/mcp-tools/explain.test.ts +0 -46
  151. package/src/__tests__/mcp-tools/graph-query.test.ts +0 -45
  152. package/src/__tests__/mcp-tools/group-sync.test.ts +0 -8
  153. package/src/__tests__/mcp-tools/impact-filtering.test.ts +0 -48
  154. package/src/__tests__/mcp-tools/impact.risk.test.ts +0 -24
  155. package/src/__tests__/mcp-tools/list-repos.test.ts +0 -24
  156. package/src/__tests__/mcp-tools/neighbors.test.ts +0 -48
  157. package/src/__tests__/mcp-tools/query.test.ts +0 -42
  158. package/src/__tests__/parsers/language-parsers.test.ts +0 -52
  159. package/src/__tests__/parsers/named-bindings.test.ts +0 -73
  160. package/src/__tests__/pipeline/cluster-only.test.ts +0 -33
  161. package/src/__tests__/pipeline/phases/bridge-adapters/electron-ipc.test.ts +0 -87
  162. package/src/__tests__/pipeline/phases/bridge-adapters/tauri.test.ts +0 -116
  163. package/src/__tests__/pipeline/phases/bridge-adapters/wails.test.ts +0 -81
  164. package/src/__tests__/pipeline/phases/bridge-resolver.test.ts +0 -110
  165. package/src/__tests__/pipeline/phases/communities.cohesion.test.ts +0 -43
  166. package/src/__tests__/pipeline/phases/community-split.test.ts +0 -30
  167. package/src/__tests__/pipeline/phases/framework-detect.test.ts +0 -65
  168. package/src/__tests__/pipeline/phases/import-resolver.test.ts +0 -64
  169. package/src/__tests__/pipeline/phases/parse-arrow.test.ts +0 -33
  170. package/src/__tests__/pipeline/phases/parse-csharp.test.ts +0 -33
  171. package/src/__tests__/pipeline/phases/scan.monographignore.test.ts +0 -53
  172. package/src/__tests__/pipeline/phases/scan.negation.test.ts +0 -40
  173. package/src/__tests__/pipeline/phases/scope-resolution.go.test.ts +0 -34
  174. package/src/__tests__/pipeline/phases/scope-resolution.java.test.ts +0 -30
  175. package/src/__tests__/pipeline/phases/scope-resolution.rust.test.ts +0 -31
  176. package/src/__tests__/pipeline/phases/suggest-questions.test.ts +0 -46
  177. package/src/__tests__/pipeline/phases/surprises-scoring.test.ts +0 -46
  178. package/src/__tests__/pipeline/phases/variables-phase.test.ts +0 -78
  179. package/src/__tests__/pipeline/phases/wildcard-phase.test.ts +0 -99
  180. package/src/__tests__/pipeline/runner.parallel.test.ts +0 -78
  181. package/src/__tests__/reporting/graph-report-confidence.test.ts +0 -43
  182. package/src/__tests__/reporting/graph-report-gaps.test.ts +0 -41
  183. package/src/__tests__/scope-resolution/call-sites.test.ts +0 -89
  184. package/src/__tests__/scope-resolution/evidence-weights.test.ts +0 -49
  185. package/src/__tests__/search/diacritic.test.ts +0 -23
  186. package/src/__tests__/security/safe-fetch.test.ts +0 -125
  187. package/src/__tests__/skills/platform-skills.extra.test.ts +0 -36
  188. package/src/__tests__/web/api.clusters.test.ts +0 -65
  189. package/src/__tests__/web/api.file.test.ts +0 -44
  190. package/src/__tests__/web/api.grep.test.ts +0 -47
  191. package/src/__tests__/web/api.info.test.ts +0 -18
  192. package/src/__tests__/web/api.jobs.test.ts +0 -47
  193. package/src/__tests__/web/api.progress.test.ts +0 -25
  194. package/src/__tests__/web/api.stream.test.ts +0 -35
  195. package/src/__tests__/wiki/providers-reasoning.test.ts +0 -46
  196. package/src/__tests__/wiki/wiki-review-mode.test.ts +0 -22
  197. package/src/analysis/benchmark.ts +0 -132
  198. package/src/analysis/changed-files.ts +0 -73
  199. package/src/analysis/changed-workspaces.ts +0 -94
  200. package/src/analysis/churn-cache.ts +0 -179
  201. package/src/analysis/churn-trend.ts +0 -57
  202. package/src/analysis/churn.ts +0 -263
  203. package/src/analysis/cluster-quality.ts +0 -142
  204. package/src/analysis/combined.ts +0 -41
  205. package/src/analysis/corpus-health.ts +0 -41
  206. package/src/analysis/coverage-gaps.ts +0 -246
  207. package/src/analysis/dep-classification.ts +0 -167
  208. package/src/analysis/dependency-health.ts +0 -146
  209. package/src/analysis/duplicate-exports.ts +0 -110
  210. package/src/analysis/fallow-suppression.ts +0 -98
  211. package/src/analysis/feature-flags-config.ts +0 -47
  212. package/src/analysis/feature-flags.ts +0 -223
  213. package/src/analysis/file-classifier.ts +0 -87
  214. package/src/analysis/git-changed-files.ts +0 -62
  215. package/src/analysis/health-baseline.ts +0 -80
  216. package/src/analysis/issue-filters.ts +0 -56
  217. package/src/analysis/list.ts +0 -74
  218. package/src/analysis/node-similarity.ts +0 -115
  219. package/src/analysis/private-type-leaks.ts +0 -119
  220. package/src/analysis/progress.ts +0 -43
  221. package/src/analysis/project-state.ts +0 -95
  222. package/src/analysis/regression-config.ts +0 -36
  223. package/src/analysis/rule-overrides.ts +0 -81
  224. package/src/analysis/scripts.ts +0 -95
  225. package/src/analysis/shape-extractor.ts +0 -202
  226. package/src/analysis/since-duration.ts +0 -42
  227. package/src/analysis/suppression-context.ts +0 -95
  228. package/src/analysis/suppressions.ts +0 -80
  229. package/src/analysis/surprise-scorer.ts +0 -74
  230. package/src/analysis/targets.ts +0 -237
  231. package/src/analysis/unused-class-members.ts +0 -79
  232. package/src/analysis/workspace-filter.ts +0 -89
  233. package/src/analyze/boundary-analysis.ts +0 -129
  234. package/src/analyze/predicates/file.ts +0 -86
  235. package/src/analyze/predicates/import.ts +0 -90
  236. package/src/analyze/predicates/lifecycle.ts +0 -55
  237. package/src/analyze/unused-deps.ts +0 -70
  238. package/src/analyze/unused-exports.ts +0 -145
  239. package/src/analyze/unused-files.ts +0 -46
  240. package/src/api/production-override.ts +0 -63
  241. package/src/api/programmatic.ts +0 -118
  242. package/src/audit.ts +0 -234
  243. package/src/cache/augment-cache.ts +0 -63
  244. package/src/cache/extraction-cache.ts +0 -141
  245. package/src/check/filtering.ts +0 -78
  246. package/src/check/index.ts +0 -99
  247. package/src/check/output.ts +0 -79
  248. package/src/check/rules.ts +0 -61
  249. package/src/ci-template.ts +0 -84
  250. package/src/claude-cli.ts +0 -59
  251. package/src/cli/ai-context.ts +0 -193
  252. package/src/cli/augment.ts +0 -114
  253. package/src/cli/check-update.ts +0 -40
  254. package/src/cli/doctor.ts +0 -182
  255. package/src/cli/eval-server.ts +0 -126
  256. package/src/cli/hooks-install.ts +0 -202
  257. package/src/cli/setup.ts +0 -197
  258. package/src/cli/skill-gen.ts +0 -347
  259. package/src/commands/flags.ts +0 -72
  260. package/src/config/boundary-config.ts +0 -183
  261. package/src/config/cli-schema.ts +0 -81
  262. package/src/config/config-parsing.ts +0 -102
  263. package/src/config/duplicates-config.ts +0 -62
  264. package/src/config/external-plugin.ts +0 -77
  265. package/src/config/health-config.ts +0 -42
  266. package/src/config/ignore-exports-used-in-file.ts +0 -46
  267. package/src/config/migration-types.ts +0 -73
  268. package/src/config/output-format.ts +0 -24
  269. package/src/config/plugins/builtin.ts +0 -411
  270. package/src/config/plugins/registry.ts +0 -77
  271. package/src/config/plugins/types.ts +0 -14
  272. package/src/config/resolution.ts +0 -102
  273. package/src/config/rules.ts +0 -70
  274. package/src/config/schema-gen.ts +0 -115
  275. package/src/config/types.ts +0 -149
  276. package/src/config/used-class-members.ts +0 -53
  277. package/src/config/validate.ts +0 -108
  278. package/src/config/workspace.ts +0 -137
  279. package/src/coverage/cloud-client.ts +0 -111
  280. package/src/coverage/upload-inventory.ts +0 -84
  281. package/src/coverage/upload-source-maps.ts +0 -97
  282. package/src/discover/entry-points.ts +0 -51
  283. package/src/discover/infrastructure-entries.ts +0 -175
  284. package/src/duplicates/detect/concatenation.ts +0 -37
  285. package/src/duplicates/detect/extraction.ts +0 -107
  286. package/src/duplicates/detect/filtering.ts +0 -112
  287. package/src/duplicates/detect/lcp.ts +0 -27
  288. package/src/duplicates/detect/ranking.ts +0 -16
  289. package/src/duplicates/detect/statistics.ts +0 -69
  290. package/src/duplicates/detect/suffix-array.ts +0 -88
  291. package/src/duplicates/families.ts +0 -95
  292. package/src/duplicates/normalize.ts +0 -58
  293. package/src/duplicates/shingle-filter.ts +0 -37
  294. package/src/duplicates/token-types.ts +0 -62
  295. package/src/duplicates/tokenize/index.ts +0 -104
  296. package/src/error/fallow-error.ts +0 -94
  297. package/src/error.ts +0 -47
  298. package/src/export/adjacency-matrix.ts +0 -127
  299. package/src/export/analysis-json.ts +0 -87
  300. package/src/export/badge.ts +0 -105
  301. package/src/export/canvas.ts +0 -42
  302. package/src/export/codeclimate.ts +0 -201
  303. package/src/export/compact-health.ts +0 -119
  304. package/src/export/compact.ts +0 -83
  305. package/src/export/csv.ts +0 -33
  306. package/src/export/cypher.ts +0 -33
  307. package/src/export/dot.ts +0 -52
  308. package/src/export/gexf.ts +0 -59
  309. package/src/export/graphml.ts +0 -50
  310. package/src/export/html.ts +0 -548
  311. package/src/export/index.ts +0 -9
  312. package/src/export/json.ts +0 -36
  313. package/src/export/markdown.ts +0 -290
  314. package/src/export/mermaid.ts +0 -100
  315. package/src/export/obsidian.ts +0 -44
  316. package/src/export/sarif.ts +0 -245
  317. package/src/export/svg.ts +0 -68
  318. package/src/fix/deps.ts +0 -70
  319. package/src/fix/enum-members.ts +0 -103
  320. package/src/fix/export-surgery.ts +0 -197
  321. package/src/fix/exports.ts +0 -93
  322. package/src/fix/orchestrator.ts +0 -67
  323. package/src/graph/analyzer.ts +0 -69
  324. package/src/graph/author-analytics.ts +0 -217
  325. package/src/graph/baseline.ts +0 -432
  326. package/src/graph/clone-families.ts +0 -132
  327. package/src/graph/codeowners-extended.ts +0 -114
  328. package/src/graph/codeowners-gitlab.ts +0 -150
  329. package/src/graph/codeowners.ts +0 -217
  330. package/src/graph/complexity.ts +0 -200
  331. package/src/graph/cross-reference-findings.ts +0 -85
  332. package/src/graph/cross-reference.ts +0 -139
  333. package/src/graph/cycle-detection.ts +0 -311
  334. package/src/graph/cycles.ts +0 -222
  335. package/src/graph/dead-code.ts +0 -128
  336. package/src/graph/dependency-closure.ts +0 -126
  337. package/src/graph/dfs.ts +0 -118
  338. package/src/graph/diff.ts +0 -92
  339. package/src/graph/duplication-stats.ts +0 -79
  340. package/src/graph/edge-filter.ts +0 -117
  341. package/src/graph/explain.ts +0 -133
  342. package/src/graph/external-style-usage.ts +0 -81
  343. package/src/graph/health-score.ts +0 -179
  344. package/src/graph/hotspots.ts +0 -219
  345. package/src/graph/import-chain.ts +0 -148
  346. package/src/graph/loader.ts +0 -44
  347. package/src/graph/maintainability.ts +0 -156
  348. package/src/graph/merge.ts +0 -174
  349. package/src/graph/mirrored-dirs.ts +0 -202
  350. package/src/graph/narrowing.ts +0 -92
  351. package/src/graph/node-search.ts +0 -201
  352. package/src/graph/node-types.ts +0 -67
  353. package/src/graph/normalize-id.ts +0 -138
  354. package/src/graph/pagerank.ts +0 -165
  355. package/src/graph/prune.ts +0 -95
  356. package/src/graph/re-exports/propagate.ts +0 -95
  357. package/src/graph/reachability.ts +0 -99
  358. package/src/graph/regex-search.ts +0 -232
  359. package/src/graph/regression.ts +0 -199
  360. package/src/graph/resolve/discover-types.ts +0 -45
  361. package/src/graph/resolve/dynamic-imports.ts +0 -102
  362. package/src/graph/resolve/fallbacks.ts +0 -79
  363. package/src/graph/resolve/index.ts +0 -68
  364. package/src/graph/resolve/path-info.ts +0 -41
  365. package/src/graph/resolve/re-exports.ts +0 -14
  366. package/src/graph/resolve/react-native.ts +0 -27
  367. package/src/graph/resolve/require-imports.ts +0 -18
  368. package/src/graph/resolve/specifier.ts +0 -120
  369. package/src/graph/resolve/static-imports.ts +0 -14
  370. package/src/graph/resolve/types.ts +0 -108
  371. package/src/graph/resolve/upgrades.ts +0 -32
  372. package/src/graph/ripple-impact.ts +0 -131
  373. package/src/graph/risk-profile.ts +0 -179
  374. package/src/graph/statistics.ts +0 -165
  375. package/src/graph/stats.ts +0 -157
  376. package/src/graph/subgraph.ts +0 -162
  377. package/src/graph/topo-sort.ts +0 -171
  378. package/src/graph/wcc.ts +0 -187
  379. package/src/groups/contract-bridge.ts +0 -103
  380. package/src/groups/contract-registry.ts +0 -263
  381. package/src/groups/group-config.ts +0 -108
  382. package/src/groups/group-search.ts +0 -139
  383. package/src/groups/group-sync.ts +0 -82
  384. package/src/groups/grpc-extractor.ts +0 -64
  385. package/src/groups/service-boundary.ts +0 -119
  386. package/src/groups/topic-extractor.ts +0 -90
  387. package/src/health/analysis-counts-snapshot.ts +0 -57
  388. package/src/health/analysis-counts.ts +0 -70
  389. package/src/health/complexity-findings.ts +0 -115
  390. package/src/health/distribution-thresholds.ts +0 -54
  391. package/src/health/grouping.ts +0 -138
  392. package/src/health/health-grouping.ts +0 -86
  393. package/src/health/health-report-types.ts +0 -165
  394. package/src/health/health-report.ts +0 -81
  395. package/src/health/health-score.ts +0 -65
  396. package/src/health/hotspot-utils.ts +0 -55
  397. package/src/health/hotspots.ts +0 -104
  398. package/src/health/large-functions.ts +0 -34
  399. package/src/health/ownership-metrics.ts +0 -61
  400. package/src/health/ownership-risk.ts +0 -98
  401. package/src/health/ownership.ts +0 -174
  402. package/src/health/quality-gate.ts +0 -57
  403. package/src/health/risk-profile.ts +0 -39
  404. package/src/health/runtime-coverage-report.ts +0 -101
  405. package/src/health/runtime-coverage.ts +0 -71
  406. package/src/health/scores.ts +0 -72
  407. package/src/health/scoring-types.ts +0 -48
  408. package/src/health/target-thresholds.ts +0 -92
  409. package/src/health/target-types.ts +0 -54
  410. package/src/health/targets.ts +0 -151
  411. package/src/health/timings.ts +0 -86
  412. package/src/health/trend-types.ts +0 -57
  413. package/src/health/trends.ts +0 -86
  414. package/src/health/vital-signs-compute.ts +0 -108
  415. package/src/health/vital-signs-snapshot.ts +0 -72
  416. package/src/health/vital-signs.ts +0 -101
  417. package/src/index.ts +0 -111
  418. package/src/ingest/git-clone.ts +0 -246
  419. package/src/ingest/query-memory.ts +0 -132
  420. package/src/ingest/transcribe.ts +0 -254
  421. package/src/ingest/url-ingest.ts +0 -87
  422. package/src/init/agent-hooks.ts +0 -86
  423. package/src/init/git-hooks.ts +0 -71
  424. package/src/init/project-detection.ts +0 -105
  425. package/src/license/manager.ts +0 -120
  426. package/src/lsp/code-actions.ts +0 -127
  427. package/src/lsp/code-lens.ts +0 -56
  428. package/src/lsp/diagnostics-ext.ts +0 -150
  429. package/src/lsp/diagnostics-push.ts +0 -103
  430. package/src/lsp/diagnostics.ts +0 -98
  431. package/src/lsp/hover.ts +0 -64
  432. package/src/lsp/server.ts +0 -254
  433. package/src/mcp/params.ts +0 -201
  434. package/src/mcp/resources.ts +0 -124
  435. package/src/mcp/tool-builders.ts +0 -203
  436. package/src/mcp-resources/communities-resource.ts +0 -72
  437. package/src/mcp-resources/graph-resource.ts +0 -14
  438. package/src/mcp-resources/index.ts +0 -9
  439. package/src/mcp-resources/named-cluster-resource.ts +0 -35
  440. package/src/mcp-resources/named-process-resource.ts +0 -26
  441. package/src/mcp-resources/processes-resource.ts +0 -67
  442. package/src/mcp-resources/repo-context-resource.ts +0 -36
  443. package/src/mcp-resources/repos-resource.ts +0 -21
  444. package/src/mcp-resources/schema-resource.ts +0 -46
  445. package/src/mcp-resources/wiki-resource.ts +0 -23
  446. package/src/mcp-tools/api-impact.ts +0 -181
  447. package/src/mcp-tools/context.ts +0 -111
  448. package/src/mcp-tools/cypher.ts +0 -29
  449. package/src/mcp-tools/detect-changes.ts +0 -116
  450. package/src/mcp-tools/explain.ts +0 -65
  451. package/src/mcp-tools/graph-query.ts +0 -128
  452. package/src/mcp-tools/group-list.ts +0 -88
  453. package/src/mcp-tools/group-query.ts +0 -26
  454. package/src/mcp-tools/group-sync.ts +0 -32
  455. package/src/mcp-tools/impact.ts +0 -202
  456. package/src/mcp-tools/index.ts +0 -21
  457. package/src/mcp-tools/list-repos.ts +0 -38
  458. package/src/mcp-tools/neighbors.ts +0 -80
  459. package/src/mcp-tools/query.ts +0 -86
  460. package/src/mcp-tools/rename.ts +0 -118
  461. package/src/mcp-tools/route-map.ts +0 -98
  462. package/src/mcp-tools/serve.ts +0 -41
  463. package/src/mcp-tools/shape-check.ts +0 -182
  464. package/src/mcp-tools/staleness.ts +0 -13
  465. package/src/mcp-tools/tool-map.ts +0 -66
  466. package/src/mcp-tools/wiki-build.ts +0 -37
  467. package/src/mcp-tools/wiki.ts +0 -28
  468. package/src/migrate/jscpd.ts +0 -78
  469. package/src/migrate/jsonc-gen.ts +0 -38
  470. package/src/migrate/knip.ts +0 -126
  471. package/src/migrate/toml-gen.ts +0 -48
  472. package/src/parsers/c.ts +0 -31
  473. package/src/parsers/cpp.ts +0 -29
  474. package/src/parsers/csharp.ts +0 -43
  475. package/src/parsers/dart.ts +0 -39
  476. package/src/parsers/extractor.ts +0 -202
  477. package/src/parsers/go.ts +0 -27
  478. package/src/parsers/java.ts +0 -27
  479. package/src/parsers/kotlin.ts +0 -36
  480. package/src/parsers/language-config.ts +0 -28
  481. package/src/parsers/language-parsers.ts +0 -120
  482. package/src/parsers/loader.ts +0 -149
  483. package/src/parsers/named-bindings.ts +0 -63
  484. package/src/parsers/php.ts +0 -37
  485. package/src/parsers/python.ts +0 -26
  486. package/src/parsers/ruby.ts +0 -39
  487. package/src/parsers/rust.ts +0 -25
  488. package/src/parsers/swift.ts +0 -28
  489. package/src/parsers/typescript.ts +0 -41
  490. package/src/parsers/vue.ts +0 -79
  491. package/src/pipeline/cluster-only.ts +0 -64
  492. package/src/pipeline/effort.ts +0 -50
  493. package/src/pipeline/orchestrator.ts +0 -384
  494. package/src/pipeline/phases/boundary.ts +0 -151
  495. package/src/pipeline/phases/bridge-adapters/electron-ipc.ts +0 -91
  496. package/src/pipeline/phases/bridge-adapters/registry.ts +0 -14
  497. package/src/pipeline/phases/bridge-adapters/tauri.ts +0 -103
  498. package/src/pipeline/phases/bridge-adapters/types.ts +0 -31
  499. package/src/pipeline/phases/bridge-adapters/wails.ts +0 -33
  500. package/src/pipeline/phases/bridge-resolver.ts +0 -77
  501. package/src/pipeline/phases/call-site-extractors.ts +0 -177
  502. package/src/pipeline/phases/communities.ts +0 -183
  503. package/src/pipeline/phases/contextual-proximity.ts +0 -88
  504. package/src/pipeline/phases/cross-file.ts +0 -116
  505. package/src/pipeline/phases/docs-parse.ts +0 -307
  506. package/src/pipeline/phases/evidence.ts +0 -9
  507. package/src/pipeline/phases/field-access.ts +0 -49
  508. package/src/pipeline/phases/framework-detect.ts +0 -109
  509. package/src/pipeline/phases/god-nodes.ts +0 -163
  510. package/src/pipeline/phases/import-resolver.ts +0 -114
  511. package/src/pipeline/phases/leiden.ts +0 -77
  512. package/src/pipeline/phases/llm-extract.ts +0 -178
  513. package/src/pipeline/phases/markdown.ts +0 -121
  514. package/src/pipeline/phases/middleware-extractor.ts +0 -127
  515. package/src/pipeline/phases/module-resolution.ts +0 -294
  516. package/src/pipeline/phases/mro.ts +0 -56
  517. package/src/pipeline/phases/orm.ts +0 -503
  518. package/src/pipeline/phases/parse.ts +0 -222
  519. package/src/pipeline/phases/pdf-parse.ts +0 -133
  520. package/src/pipeline/phases/processes.ts +0 -249
  521. package/src/pipeline/phases/re-export-propagation.ts +0 -160
  522. package/src/pipeline/phases/reachability.ts +0 -156
  523. package/src/pipeline/phases/routes.ts +0 -350
  524. package/src/pipeline/phases/scan.ts +0 -133
  525. package/src/pipeline/phases/scope-resolution.ts +0 -442
  526. package/src/pipeline/phases/structure.ts +0 -68
  527. package/src/pipeline/phases/suggest.ts +0 -92
  528. package/src/pipeline/phases/surprises.ts +0 -83
  529. package/src/pipeline/phases/tools.ts +0 -180
  530. package/src/pipeline/phases/variables-phase.ts +0 -37
  531. package/src/pipeline/phases/variables.ts +0 -67
  532. package/src/pipeline/phases/wildcard-phase.ts +0 -50
  533. package/src/pipeline/phases/wildcard-synthesis.ts +0 -214
  534. package/src/pipeline/progress.ts +0 -58
  535. package/src/pipeline/runner.ts +0 -88
  536. package/src/pipeline/types.ts +0 -41
  537. package/src/query/cypher-parser.ts +0 -450
  538. package/src/registry/repo-registry.ts +0 -125
  539. package/src/regression/baseline-deltas.ts +0 -215
  540. package/src/regression/baseline.ts +0 -76
  541. package/src/regression/counts.ts +0 -87
  542. package/src/regression/outcome.ts +0 -78
  543. package/src/regression/tolerance.ts +0 -35
  544. package/src/report/attributed-duplication.ts +0 -112
  545. package/src/report/badge-svg.ts +0 -100
  546. package/src/report/cross-ref-human.ts +0 -50
  547. package/src/report/duplication-grouping.ts +0 -74
  548. package/src/report/grouping.ts +0 -137
  549. package/src/report/human-check.ts +0 -291
  550. package/src/report/human-dupes.ts +0 -142
  551. package/src/report/human-health.ts +0 -195
  552. package/src/report/human.ts +0 -120
  553. package/src/report/json-actions.ts +0 -91
  554. package/src/report/json-builders.ts +0 -70
  555. package/src/report/json-schema.ts +0 -75
  556. package/src/report/number-format.ts +0 -91
  557. package/src/report/output-grouped.ts +0 -102
  558. package/src/report/pipeline-perf.ts +0 -56
  559. package/src/report/trace-human.ts +0 -127
  560. package/src/reporting/graph-report.ts +0 -431
  561. package/src/results/fallow-results.ts +0 -152
  562. package/src/results/types.ts +0 -149
  563. package/src/scope-resolution/evidence-weights.ts +0 -41
  564. package/src/search/ast-chunker.ts +0 -206
  565. package/src/search/diacritic.ts +0 -7
  566. package/src/search/hybrid-query.ts +0 -65
  567. package/src/search/rrf.ts +0 -51
  568. package/src/security/safe-fetch.ts +0 -113
  569. package/src/security/sensitive-files.ts +0 -24
  570. package/src/skills/platform-skills.ts +0 -233
  571. package/src/staleness/git-staleness.ts +0 -66
  572. package/src/storage/db.ts +0 -110
  573. package/src/storage/edge-store.ts +0 -103
  574. package/src/storage/file-cache.ts +0 -78
  575. package/src/storage/fts-store.ts +0 -385
  576. package/src/storage/node-store.ts +0 -209
  577. package/src/storage/schema.ts +0 -171
  578. package/src/storage/suppressions.ts +0 -145
  579. package/src/storage/unlinked-refs.ts +0 -117
  580. package/src/types.ts +0 -197
  581. package/src/validation/extraction-validator.ts +0 -54
  582. package/src/watch/watcher.ts +0 -160
  583. package/src/web/analyze-api.ts +0 -146
  584. package/src/web/api.ts +0 -584
  585. package/src/web/async-jobs.ts +0 -109
  586. package/src/web/mcp-http.ts +0 -227
  587. package/src/web/react-ui.ts +0 -78
  588. package/src/web/server.ts +0 -90
  589. package/src/web/ui/index.html +0 -204
  590. package/src/wiki/gist-publisher.ts +0 -76
  591. package/src/wiki/prompt-builder.ts +0 -35
  592. package/src/wiki/providers.ts +0 -134
  593. package/src/wiki/wiki-generator.ts +0 -223
  594. package/src/wiki/wiki-store.ts +0 -49
  595. package/tsconfig.json +0 -11
  596. package/vitest.config.ts +0 -20
@@ -1,160 +0,0 @@
1
- import chokidar from 'chokidar';
2
- import { EventEmitter } from 'events';
3
- import { isSupportedExtension } from '../parsers/loader.js';
4
- import type { PipelineProgress } from '../types.js';
5
- import { extname } from 'path';
6
-
7
- export interface WatcherOptions {
8
- debounceMs?: number; // default 3000ms
9
- }
10
-
11
- export interface WatchAsyncOptions extends WatcherOptions {
12
- onProgress?: (p: PipelineProgress) => void;
13
- force?: boolean;
14
- codeOnly?: boolean;
15
- llmMaxSections?: number;
16
- /** Auto-stop after this many ms of no file changes. Default 30min. 0 = never. */
17
- idleTimeoutMs?: number;
18
- }
19
-
20
- /** Convenience: start a watcher and trigger buildAsync on every change. Returns stop() fn. */
21
- export async function watchAsync(
22
- repoPath: string,
23
- opts: WatchAsyncOptions = {},
24
- ): Promise<{ stop: () => Promise<void> }> {
25
- const { buildAsync, buildIncrementalAsync } = await import('../pipeline/orchestrator.js');
26
- const watcher = new MonographWatcher(repoPath, { debounceMs: opts.debounceMs ?? 3000 });
27
-
28
- const idleMs = opts.idleTimeoutMs ?? 30 * 60_000;
29
- let idleTimer: ReturnType<typeof setTimeout> | null = null;
30
- const resetIdle = (): void => {
31
- if (idleMs <= 0) return;
32
- if (idleTimer) clearTimeout(idleTimer);
33
- idleTimer = setTimeout(() => {
34
- opts.onProgress?.({ phase: 'watch', message: `No changes for ${Math.round(idleMs / 60_000)}min — auto-stopping watcher.` });
35
- watcher.stop().catch(() => {});
36
- }, idleMs);
37
- (idleTimer as { unref?: () => void }).unref?.();
38
- };
39
-
40
- // After 60s of no incremental activity, run a full rebuild to refresh
41
- // aggregate phases (communities, god-nodes, surprises, churn, report).
42
- const FULL_REBUILD_IDLE_MS = 60_000;
43
- let fullRebuildTimer: ReturnType<typeof setTimeout> | null = null;
44
- let incrementalSinceLastFull = false;
45
- const scheduleFullRebuild = (): void => {
46
- if (fullRebuildTimer) clearTimeout(fullRebuildTimer);
47
- fullRebuildTimer = setTimeout(async () => {
48
- if (!incrementalSinceLastFull) return;
49
- incrementalSinceLastFull = false;
50
- opts.onProgress?.({ phase: 'watch', message: 'Deferred full rebuild for aggregate analysis...' });
51
- try {
52
- await buildAsync(repoPath, { onProgress: opts.onProgress, codeOnly: opts.codeOnly, llmMaxSections: opts.llmMaxSections ?? 0 });
53
- opts.onProgress?.({ phase: 'watch', message: 'Full rebuild complete.' });
54
- } catch (err) {
55
- watcher.emit('monograph:error', err);
56
- }
57
- }, FULL_REBUILD_IDLE_MS);
58
- (fullRebuildTimer as { unref?: () => void }).unref?.();
59
- };
60
-
61
- let building = false;
62
- let pendingFiles = new Set<string>();
63
- watcher.on('monograph:updated', async (files: string[]) => {
64
- resetIdle();
65
- for (const f of files) pendingFiles.add(f);
66
- if (building) return;
67
- building = true;
68
- try {
69
- while (pendingFiles.size > 0) {
70
- const batch = [...pendingFiles];
71
- pendingFiles = new Set();
72
- opts.onProgress?.({ phase: 'watch', message: `Changed: ${batch.slice(0, 3).join(', ')}` });
73
- try {
74
- await buildIncrementalAsync(repoPath, batch, {
75
- onProgress: opts.onProgress, force: opts.force,
76
- codeOnly: opts.codeOnly, llmMaxSections: opts.llmMaxSections ?? 0,
77
- });
78
- incrementalSinceLastFull = true;
79
- scheduleFullRebuild();
80
- opts.onProgress?.({ phase: 'watch', message: 'Graph updated (incremental).' });
81
- } catch (err) {
82
- watcher.emit('monograph:error', err);
83
- opts.onProgress?.({ phase: 'watch', message: `Rebuild failed: ${err instanceof Error ? err.message : String(err)}` });
84
- }
85
- }
86
- } finally {
87
- building = false;
88
- }
89
- });
90
-
91
- await watcher.start();
92
- resetIdle();
93
- return {
94
- stop: async () => {
95
- if (idleTimer) clearTimeout(idleTimer);
96
- if (fullRebuildTimer) clearTimeout(fullRebuildTimer);
97
- await watcher.stop();
98
- },
99
- };
100
- }
101
-
102
- export class MonographWatcher extends EventEmitter {
103
- private watcher: chokidar.FSWatcher | null = null;
104
- private debounceTimer: ReturnType<typeof setTimeout> | null = null;
105
- private pendingChanges = new Set<string>();
106
- private readonly debounceMs: number;
107
-
108
- constructor(private readonly repoPath: string, opts: WatcherOptions = {}) {
109
- super();
110
- this.debounceMs = opts.debounceMs ?? 3000;
111
- }
112
-
113
- async start(): Promise<void> {
114
- // FSEvents works natively on macOS — polling the whole tree every second is
115
- // far more expensive (especially on external/exFAT volumes). Poll only when
116
- // explicitly requested via env (e.g. network mounts where events don't fire).
117
- const usePolling = process.env.MONOGRAPH_WATCH_POLL === '1';
118
-
119
- this.watcher = chokidar.watch(this.repoPath, {
120
- ignored: [
121
- /(^|[/\\])\../, // dotfiles
122
- /node_modules/,
123
- /\.monomind/,
124
- /dist\//,
125
- /build\//,
126
- ],
127
- persistent: true,
128
- ignoreInitial: true,
129
- usePolling,
130
- interval: usePolling ? 1000 : undefined,
131
- });
132
-
133
- this.watcher.on('change', (path: string) => this.handleChange(path));
134
- this.watcher.on('add', (path: string) => this.handleChange(path));
135
- this.watcher.on('unlink', (path: string) => this.handleChange(path));
136
- this.watcher.on('error', (err: unknown) => this.emit('monograph:error', err));
137
-
138
- await new Promise<void>(resolve => this.watcher!.once('ready', resolve));
139
- }
140
-
141
- async stop(): Promise<void> {
142
- if (this.debounceTimer) clearTimeout(this.debounceTimer);
143
- if (this.watcher) await this.watcher.close();
144
- this.watcher = null;
145
- }
146
-
147
- private handleChange(filePath: string): void {
148
- const ext = extname(filePath);
149
- if (!isSupportedExtension(ext)) return;
150
-
151
- this.pendingChanges.add(filePath);
152
-
153
- if (this.debounceTimer) clearTimeout(this.debounceTimer);
154
- this.debounceTimer = setTimeout(() => {
155
- const changed = [...this.pendingChanges];
156
- this.pendingChanges.clear();
157
- this.emit('monograph:updated', changed);
158
- }, this.debounceMs);
159
- }
160
- }
@@ -1,146 +0,0 @@
1
- import type { Server, IncomingMessage, ServerResponse } from 'http';
2
- import { buildAsync } from '../pipeline/orchestrator.js';
3
- import { countNodes } from '../storage/node-store.js';
4
- import { countEdges } from '../storage/edge-store.js';
5
- import { openDb, closeDb } from '../storage/db.js';
6
- import { resolve, join, sep } from 'path';
7
-
8
- // ── Types ─────────────────────────────────────────────────────────────────────
9
-
10
- export interface AnalyzeRequest {
11
- repoPath: string;
12
- codeOnly?: boolean;
13
- force?: boolean;
14
- }
15
-
16
- export interface AnalyzeProgressEvent {
17
- type: 'progress' | 'complete' | 'error';
18
- phase?: string;
19
- message?: string;
20
- error?: string;
21
- nodeCount?: number;
22
- edgeCount?: number;
23
- }
24
-
25
- // ── SSE helpers ───────────────────────────────────────────────────────────────
26
-
27
- function sendEvent(res: ServerResponse, event: AnalyzeProgressEvent): void {
28
- res.write(`data: ${JSON.stringify(event)}\n\n`);
29
- }
30
-
31
- function parseQueryParams(url: string): { repoPath?: string; codeOnly?: boolean; force?: boolean } {
32
- const parsed = new URL(url, 'http://localhost');
33
- const repoPath = parsed.searchParams.get('repoPath') ?? undefined;
34
- const codeOnly = parsed.searchParams.has('codeOnly')
35
- ? parsed.searchParams.get('codeOnly') !== 'false'
36
- : undefined;
37
- const force = parsed.searchParams.has('force')
38
- ? parsed.searchParams.get('force') !== 'false'
39
- : undefined;
40
- return { repoPath, codeOnly, force };
41
- }
42
-
43
- // ── Route handler ─────────────────────────────────────────────────────────────
44
-
45
- async function handleAnalyze(req: IncomingMessage, res: ServerResponse): Promise<void> {
46
- const { repoPath, codeOnly, force } = parseQueryParams(req.url ?? '/');
47
-
48
- if (!repoPath) {
49
- res.writeHead(400, { 'Content-Type': 'application/json' });
50
- res.end(JSON.stringify({ error: 'repoPath query parameter is required' }));
51
- return;
52
- }
53
-
54
- // Set SSE headers
55
- const origin = req.headers['origin'] ?? '';
56
- const allowedOrigin = /^https?:\/\/(localhost|127\.0\.0\.1)(:\d+)?$/.test(origin) ? origin : '';
57
- res.writeHead(200, {
58
- 'Content-Type': 'text/event-stream',
59
- 'Cache-Control': 'no-cache',
60
- 'Connection': 'keep-alive',
61
- ...(allowedOrigin && { 'Access-Control-Allow-Origin': allowedOrigin }),
62
- });
63
-
64
- const dbPath = resolve(join(repoPath, '.monomind', 'monograph.db'));
65
-
66
- try {
67
- await buildAsync(repoPath, {
68
- codeOnly,
69
- force,
70
- onProgress: (p) => {
71
- sendEvent(res, {
72
- type: 'progress',
73
- phase: p.phase,
74
- message: p.message,
75
- });
76
- },
77
- });
78
-
79
- const db = openDb(dbPath);
80
- try {
81
- const nodeCount = countNodes(db);
82
- const edgeCount = countEdges(db);
83
- sendEvent(res, { type: 'complete', nodeCount, edgeCount });
84
- } finally {
85
- closeDb(db);
86
- }
87
- } catch (err) {
88
- sendEvent(res, { type: 'error', error: `Build failed: ${String(err)}` });
89
- } finally {
90
- res.end();
91
- }
92
- }
93
-
94
- // ── Route registration ────────────────────────────────────────────────────────
95
-
96
- /**
97
- * Register the /api/analyze SSE endpoint on an existing HTTP server.
98
- *
99
- * GET /api/analyze?repoPath=<path>&codeOnly=<bool>&force=<bool>
100
- *
101
- * Responds with Content-Type: text/event-stream
102
- * Emits:
103
- * data: {"type":"progress","phase":"scan","message":"Scanning files..."}\n\n
104
- * data: {"type":"complete","nodeCount":123,"edgeCount":456}\n\n
105
- * (or on error)
106
- * data: {"type":"error","error":"Build failed: ..."}\n\n
107
- */
108
- export function registerAnalyzeRoute(
109
- server: Server,
110
- pathPrefix: string = '/api',
111
- /** Allowlisted repo root — only this path (and its subdirectories) may be analyzed */
112
- allowedRepoRoot?: string,
113
- ): void {
114
- const analyzePath = `${pathPrefix}/analyze`;
115
-
116
- server.on('request', (req: IncomingMessage, res: ServerResponse) => {
117
- const url = req.url ?? '/';
118
- const pathname = url.split('?')[0];
119
-
120
- if (pathname !== analyzePath || req.method !== 'GET') return;
121
-
122
- // DNS rebinding protection: reject requests with a non-localhost Host header
123
- const host = ((req.headers['host'] ?? '').split(':')[0] ?? '').toLowerCase();
124
- if (host !== 'localhost' && host !== '127.0.0.1' && host !== '::1' && host !== '') {
125
- res.writeHead(403, { 'Content-Type': 'application/json' });
126
- res.end(JSON.stringify({ error: 'Forbidden' }));
127
- return;
128
- }
129
-
130
- // If an allowedRepoRoot was provided, enforce it before handling
131
- if (allowedRepoRoot) {
132
- const { repoPath } = parseQueryParams(url);
133
- if (repoPath) {
134
- const resolved = resolve(repoPath);
135
- const root = resolve(allowedRepoRoot);
136
- if (resolved !== root && !resolved.startsWith(root + sep)) {
137
- res.writeHead(403, { 'Content-Type': 'application/json' });
138
- res.end(JSON.stringify({ error: 'repoPath outside allowed root' }));
139
- return;
140
- }
141
- }
142
- }
143
-
144
- void handleAnalyze(req, res);
145
- });
146
- }