@opencodehub/cli 0.1.0

package/dist/commands/impact.js

@@ -0,0 +1,91 @@
+/**
+ * `codehub impact <symbol>` — dependent graph traversal for blast-radius.
+ *
+ * Delegates to `@opencodehub/analysis`'s `runImpact()` which owns the
+ * risk-tier scoring and PROCESS_STEP fan-out logic. The CLI layer only
+ * maps the user-facing `--direction` flag into the analysis query shape
+ * and formats the result.
+ */
+import { runImpact as runImpactAnalysis } from "@opencodehub/analysis";
+import { openStoreForCommand } from "./open-store.js";
+function mapDirection(dir) {
+    if (dir === "up")
+        return "upstream";
+    if (dir === "down")
+        return "downstream";
+    return "both";
+}
+export async function runImpact(symbol, opts = {}) {
+    const depth = opts.depth ?? 3;
+    const direction = opts.direction ?? "both";
+    const { store, repoPath } = await openStoreForCommand(opts);
+    try {
+        const query = {
+            target: symbol,
+            direction: mapDirection(direction),
+            maxDepth: depth,
+        };
+        if (opts.targetUid !== undefined && opts.targetUid.length > 0) {
+            query.targetUid = opts.targetUid;
+        }
+        if (opts.filePath !== undefined && opts.filePath.length > 0) {
+            query.filePath = opts.filePath;
+        }
+        if (opts.kind !== undefined && opts.kind.length > 0)
+            query.kind = opts.kind;
+        const result = await runImpactAnalysis(store.graph, query);
+        if (result.ambiguous) {
+            if (opts.json) {
+                console.log(JSON.stringify(result, null, 2));
+                process.exitCode = 1;
+                return;
+            }
+            const candidates = result.targetCandidates.slice(0, 10);
+            console.warn(`impact: "${symbol}" matched ${result.targetCandidates.length} symbols in ${repoPath}. Re-call with --target-uid, --file-path, or --kind.`);
+            for (let i = 0; i < candidates.length; i += 1) {
+                const c = candidates[i];
+                if (!c)
+                    continue;
+                console.warn(`  ${i + 1}. [${c.kind}] ${c.name} — ${c.filePath}  (${c.id})`);
+            }
+            if (result.targetCandidates.length > candidates.length) {
+                console.warn(`  … ${result.targetCandidates.length - candidates.length} more`);
+            }
+            process.exitCode = 1;
+            return;
+        }
+        if (!result.chosenTarget) {
+            console.warn(`impact: no symbol matching "${symbol}" in ${repoPath}`);
+            if (opts.json) {
+                console.log(JSON.stringify(result, null, 2));
+            }
+            return;
+        }
+        if (opts.json) {
+            console.log(JSON.stringify(result, null, 2));
+            return;
+        }
+        console.warn(`impact: ${result.chosenTarget.name} — risk=${result.risk}, ${result.totalAffected} reachable nodes at depth ≤ ${depth} (${direction}), ${result.affectedProcesses.length} affected process(es)`);
+        const header = ["DEPTH", "NODE", "VIA"];
+        const widths = header.map((h) => h.length);
+        const rows = [];
+        for (const bucket of result.byDepth) {
+            for (const node of bucket.nodes) {
+                rows.push([String(bucket.depth), node.id, node.viaRelation]);
+            }
+        }
+        for (const row of rows) {
+            widths[0] = Math.max(widths[0] ?? 0, (row[0] ?? "").length);
+            widths[1] = Math.max(widths[1] ?? 0, (row[1] ?? "").length);
+            widths[2] = Math.max(widths[2] ?? 0, (row[2] ?? "").length);
+        }
+        const line = (cols) => cols.map((c, i) => c.padEnd(widths[i] ?? 0)).join("  ");
+        console.log(line(header));
+        for (const row of rows)
+            console.log(line(row));
+    }
+    finally {
+        await store.close();
+    }
+}
+//# sourceMappingURL=impact.js.map

package/dist/commands/impact.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"impact.js","sourceRoot":"","sources":["../../src/commands/impact.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EAAE,SAAS,IAAI,iBAAiB,EAAE,MAAM,uBAAuB,CAAC;AACvE,OAAO,EAAE,mBAAmB,EAAE,MAAM,iBAAiB,CAAC;AAgBtD,SAAS,YAAY,CAAC,GAA2B;IAC/C,IAAI,GAAG,KAAK,IAAI;QAAE,OAAO,UAAU,CAAC;IACpC,IAAI,GAAG,KAAK,MAAM;QAAE,OAAO,YAAY,CAAC;IACxC,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,SAAS,CAAC,MAAc,EAAE,OAAsB,EAAE;IACtE,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,IAAI,CAAC,CAAC;IAC9B,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,IAAI,MAAM,CAAC;IAC3C,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,GAAG,MAAM,mBAAmB,CAAC,IAAI,CAAC,CAAC;IAC5D,IAAI,CAAC;QACH,MAAM,KAAK,GAOP;YACF,MAAM,EAAE,MAAM;YACd,SAAS,EAAE,YAAY,CAAC,SAAS,CAAC;YAClC,QAAQ,EAAE,KAAK;SAChB,CAAC;QACF,IAAI,IAAI,CAAC,SAAS,KAAK,SAAS,IAAI,IAAI,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC9D,KAAK,CAAC,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC;QACnC,CAAC;QACD,IAAI,IAAI,CAAC,QAAQ,KAAK,SAAS,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC5D,KAAK,CAAC,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC;QACjC,CAAC;QACD,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS,IAAI,IAAI,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC;YAAE,KAAK,CAAC,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC;QAC5E,MAAM,MAAM,GAAG,MAAM,iBAAiB,CAAC,KAAK,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;QAE3D,IAAI,MAAM,CAAC,SAAS,EAAE,CAAC;YACrB,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;gBACd,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;gBAC7C,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;gBACrB,OAAO;YACT,CAAC;YACD,MAAM,UAAU,GAAG,MAAM,CAAC,gBAAgB,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YACxD,OAAO,CAAC,IAAI,CACV,YAAY,MAAM,aAAa,MAAM,CAAC,gBAAgB,CAAC,MAAM,eAAe,QAAQ,sDAAsD,CAC3I,CAAC;YACF,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,UAAU,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;gBAC9C,MAAM,CAAC,GAAG,UAAU,CAAC,CAAC,CAAC,CAAC;gBACxB,IAAI,CAAC,CAAC;oBAAE,SAAS;gBACjB,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,IAAI,MAAM,CAAC,CAAC,QAAQ,MAAM,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;YAC/E,CAAC;YACD,IAAI,MAAM,CAAC,gBAAgB,CAAC,MAAM,GAAG,UAAU,CAAC,MAAM,EAAE,CAAC;gBACvD,OAAO,CAAC,IAAI,CAAC,OAAO,MAAM,CAAC,gBAAgB,CAAC,MAAM,GAAG,UAAU,CAAC,MAAM,OAAO,CAAC,CAAC;YACjF,CAAC;YACD,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;YACrB,OAAO;QACT,CAAC;QAED,IAAI,CAAC,MAAM,CAAC,YAAY,EAAE,CAAC;YACzB,OAAO,CAAC,IAAI,CAAC,+BAA+B,MAAM,QAAQ,QAAQ,EAAE,CAAC,CAAC;YACtE,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;gBACd,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;YAC/C,CAAC;YACD,OAAO;QACT,CAAC;QAED,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;YACd,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;YAC7C,OAAO;QACT,CAAC;QAED,OAAO,CAAC,IAAI,CACV,WAAW,MAAM,CAAC,YAAY,CAAC,IAAI,WAAW,MAAM,CAAC,IAAI,KAAK,MAAM,CAAC,aAAa,+BAA+B,KAAK,KAAK,SAAS,MAAM,MAAM,CAAC,iBAAiB,CAAC,MAAM,uBAAuB,CACjM,CAAC;QACF,MAAM,MAAM,GAAG,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC;QACxC,MAAM,MAAM,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;QAC3C,MAAM,IAAI,GAAe,EAAE,CAAC;QAC5B,KAAK,MAAM,MAAM,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;YACpC,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;gBAChC,IAAI,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,IAAI,CAAC,EAAE,EAAE,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC;YAC/D,CAAC;QACH,CAAC;QACD,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;YACvB,MAAM,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC;YAC5D,MAAM,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC;YAC5D,MAAM,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC;QAC9D,CAAC;QACD,MAAM,IAAI,GAAG,CAAC,IAAuB,EAAU,EAAE,CAC/C,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC1D,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC;QAC1B,KAAK,MAAM,GAAG,IAAI,IAAI;YAAE,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;IACjD,CAAC;YAAS,CAAC;QACT,MAAM,KAAK,CAAC,KAAK,EAAE,CAAC;IACtB,CAAC;AACH,CAAC"}

package/dist/commands/index-repo.d.ts

@@ -0,0 +1,39 @@
+/**
+ * `codehub index [path...]` — register an existing `.codehub/` folder.
+ *
+ * Unlike `codehub analyze`, this command performs no ingestion. It reads
+ * `<path>/.codehub/meta.json` and upserts a registry entry keyed by the repo
+ * basename. Useful when a pre-built `.codehub/` directory is already present
+ * (shared team index, restore from backup, CI artifact download, etc.).
+ *
+ * Flag semantics:
+ *   --force           If `.codehub/meta.json` is missing but the path looks
+ *                     indexable, stamp a minimal meta sidecar using
+ *                     `git rev-parse HEAD` (when available) and register
+ *                     with zero node/edge counts. Without `--force`, a
+ *                     missing meta.json is a hard failure for that path.
+ *   --allow-non-git   Skip the `.git/` presence check so folders that carry
+ *                     only a `.codehub/` (e.g. synthetic fixtures) can still
+ *                     be registered.
+ *
+ * Multi-path behavior:
+ *   Every path is processed independently. A failure on one path sets
+ *   `process.exitCode = 1` but does not abort the remaining paths; all
+ *   successful paths are still upserted into the registry.
+ */
+import { type RepoEntry } from "../registry.js";
+export interface IndexRepoOptions {
+    readonly force?: boolean;
+    readonly allowNonGit?: boolean;
+    /** Test hook: override the home dir used for the registry. */
+    readonly home?: string;
+    /** Test hook: override the git HEAD reader (pure, no spawn). */
+    readonly readGitHead?: (repoPath: string) => Promise<string | undefined>;
+}
+export interface IndexRepoResult {
+    readonly successCount: number;
+    readonly failureCount: number;
+    readonly entries: readonly RepoEntry[];
+}
+export declare function runIndexRepo(paths: readonly string[], opts?: IndexRepoOptions): Promise<IndexRepoResult>;
+//# sourceMappingURL=index-repo.d.ts.map

package/dist/commands/index-repo.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index-repo.d.ts","sourceRoot":"","sources":["../../src/commands/index-repo.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AAMH,OAAO,EAAE,KAAK,SAAS,EAAkB,MAAM,gBAAgB,CAAC;AAEhE,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,KAAK,CAAC,EAAE,OAAO,CAAC;IACzB,QAAQ,CAAC,WAAW,CAAC,EAAE,OAAO,CAAC;IAC/B,8DAA8D;IAC9D,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IACvB,gEAAgE;IAChE,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC,QAAQ,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;CAC1E;AAED,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,OAAO,EAAE,SAAS,SAAS,EAAE,CAAC;CACxC;AAED,wBAAsB,YAAY,CAChC,KAAK,EAAE,SAAS,MAAM,EAAE,EACxB,IAAI,GAAE,gBAAqB,GAC1B,OAAO,CAAC,eAAe,CAAC,CA2B1B"}

package/dist/commands/index-repo.js

@@ -0,0 +1,148 @@
+/**
+ * `codehub index [path...]` — register an existing `.codehub/` folder.
+ *
+ * Unlike `codehub analyze`, this command performs no ingestion. It reads
+ * `<path>/.codehub/meta.json` and upserts a registry entry keyed by the repo
+ * basename. Useful when a pre-built `.codehub/` directory is already present
+ * (shared team index, restore from backup, CI artifact download, etc.).
+ *
+ * Flag semantics:
+ *   --force           If `.codehub/meta.json` is missing but the path looks
+ *                     indexable, stamp a minimal meta sidecar using
+ *                     `git rev-parse HEAD` (when available) and register
+ *                     with zero node/edge counts. Without `--force`, a
+ *                     missing meta.json is a hard failure for that path.
+ *   --allow-non-git   Skip the `.git/` presence check so folders that carry
+ *                     only a `.codehub/` (e.g. synthetic fixtures) can still
+ *                     be registered.
+ *
+ * Multi-path behavior:
+ *   Every path is processed independently. A failure on one path sets
+ *   `process.exitCode = 1` but does not abort the remaining paths; all
+ *   successful paths are still upserted into the registry.
+ */
+import { access, mkdir, stat } from "node:fs/promises";
+import { basename, resolve } from "node:path";
+import { SCHEMA_VERSION } from "@opencodehub/core-types";
+import { readStoreMeta, resolveRepoMetaDir, writeStoreMeta } from "@opencodehub/storage";
+import { upsertRegistry } from "../registry.js";
+export async function runIndexRepo(paths, opts = {}) {
+    const targets = paths.length === 0 ? [process.cwd()] : paths;
+    const entries = [];
+    let successCount = 0;
+    let failureCount = 0;
+    for (const rawPath of targets) {
+        try {
+            const entry = await indexOne(rawPath, opts);
+            entries.push(entry);
+            successCount += 1;
+            console.warn(`codehub index: registered ${entry.name} at ${entry.path} ` +
+                `(${entry.nodeCount} nodes, ${entry.edgeCount} edges)`);
+        }
+        catch (err) {
+            failureCount += 1;
+            const message = err instanceof Error ? err.message : String(err);
+            console.warn(`codehub index: ${resolve(rawPath)}: ${message}`);
+        }
+    }
+    if (failureCount > 0) {
+        process.exitCode = 1;
+    }
+    return { successCount, failureCount, entries };
+}
+async function indexOne(rawPath, opts) {
+    const repoPath = resolve(rawPath);
+    // Path must exist and be a directory.
+    let st;
+    try {
+        st = await stat(repoPath);
+    }
+    catch {
+        throw new Error("path does not exist");
+    }
+    if (!st.isDirectory()) {
+        throw new Error("path is not a directory");
+    }
+    // `.git/` gate, unless explicitly bypassed.
+    if (opts.allowNonGit !== true) {
+        const gitDir = resolve(repoPath, ".git");
+        try {
+            await access(gitDir);
+        }
+        catch {
+            throw new Error("not a git repository (use --allow-non-git to override)");
+        }
+    }
+    const metaDir = resolveRepoMetaDir(repoPath);
+    let meta = await readStoreMeta(repoPath);
+    if (meta === undefined) {
+        if (opts.force !== true) {
+            throw new Error(".codehub/meta.json not found (use --force to stamp a minimal stub, " +
+                "or run `codehub analyze` to build the index)");
+        }
+        // --force: stamp a minimal meta sidecar so the registry entry is coherent.
+        // Node/edge counts are zero because we genuinely don't know them; consumers
+        // (`codehub status`, MCP resources) treat that as "not yet analyzed".
+        await mkdir(metaDir, { recursive: true });
+        const readHead = opts.readGitHead ?? readGitHeadViaSpawn;
+        const head = opts.allowNonGit === true ? undefined : await readHead(repoPath);
+        meta = {
+            schemaVersion: SCHEMA_VERSION,
+            indexedAt: new Date().toISOString(),
+            nodeCount: 0,
+            edgeCount: 0,
+            ...(head !== undefined ? { lastCommit: head } : {}),
+        };
+        await writeStoreMeta(repoPath, meta);
+    }
+    const entry = {
+        name: basename(repoPath),
+        path: repoPath,
+        indexedAt: meta.indexedAt,
+        nodeCount: meta.nodeCount,
+        edgeCount: meta.edgeCount,
+        ...(meta.lastCommit !== undefined ? { lastCommit: meta.lastCommit } : {}),
+    };
+    const registryOpts = opts.home !== undefined ? { home: opts.home } : {};
+    await upsertRegistry(entry, registryOpts);
+    return entry;
+}
+/**
+ * Default git HEAD reader. Returns `undefined` when git is unavailable,
+ * the directory is not a git repo, or HEAD cannot be resolved (detached
+ * work trees on a fresh init with zero commits). Never throws.
+ */
+async function readGitHeadViaSpawn(repoPath) {
+    const { spawn } = await import("node:child_process");
+    return new Promise((resolveP) => {
+        let stdout = "";
+        let settled = false;
+        const child = spawn("git", ["rev-parse", "HEAD"], {
+            cwd: repoPath,
+            stdio: ["ignore", "pipe", "ignore"],
+        });
+        child.stdout.setEncoding("utf8");
+        child.stdout.on("data", (chunk) => {
+            stdout += chunk;
+        });
+        child.on("error", () => {
+            if (!settled) {
+                settled = true;
+                resolveP(undefined);
+            }
+        });
+        child.on("close", (code) => {
+            if (settled)
+                return;
+            settled = true;
+            if (code === 0) {
+                const trimmed = stdout.trim();
+                resolveP(trimmed.length > 0 ? trimmed : undefined);
+            }
+            else {
+                resolveP(undefined);
+            }
+        });
+    });
+}
+//# sourceMappingURL=index-repo.js.map

package/dist/commands/index-repo.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index-repo.js","sourceRoot":"","sources":["../../src/commands/index-repo.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AAEH,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAC;AACvD,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAC9C,OAAO,EAAE,cAAc,EAAE,MAAM,yBAAyB,CAAC;AACzD,OAAO,EAAE,aAAa,EAAE,kBAAkB,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AACzF,OAAO,EAAkB,cAAc,EAAE,MAAM,gBAAgB,CAAC;AAiBhE,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,KAAwB,EACxB,OAAyB,EAAE;IAE3B,MAAM,OAAO,GAAG,KAAK,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;IAC7D,MAAM,OAAO,GAAgB,EAAE,CAAC;IAChC,IAAI,YAAY,GAAG,CAAC,CAAC;IACrB,IAAI,YAAY,GAAG,CAAC,CAAC;IAErB,KAAK,MAAM,OAAO,IAAI,OAAO,EAAE,CAAC;QAC9B,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,MAAM,QAAQ,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;YAC5C,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACpB,YAAY,IAAI,CAAC,CAAC;YAClB,OAAO,CAAC,IAAI,CACV,6BAA6B,KAAK,CAAC,IAAI,OAAO,KAAK,CAAC,IAAI,GAAG;gBACzD,IAAI,KAAK,CAAC,SAAS,WAAW,KAAK,CAAC,SAAS,SAAS,CACzD,CAAC;QACJ,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,YAAY,IAAI,CAAC,CAAC;YAClB,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YACjE,OAAO,CAAC,IAAI,CAAC,kBAAkB,OAAO,CAAC,OAAO,CAAC,KAAK,OAAO,EAAE,CAAC,CAAC;QACjE,CAAC;IACH,CAAC;IAED,IAAI,YAAY,GAAG,CAAC,EAAE,CAAC;QACrB,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;IACvB,CAAC;IAED,OAAO,EAAE,YAAY,EAAE,YAAY,EAAE,OAAO,EAAE,CAAC;AACjD,CAAC;AAED,KAAK,UAAU,QAAQ,CAAC,OAAe,EAAE,IAAsB;IAC7D,MAAM,QAAQ,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IAElC,sCAAsC;IACtC,IAAI,EAAoC,CAAC;IACzC,IAAI,CAAC;QACH,EAAE,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,CAAC;IAC5B,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,KAAK,CAAC,qBAAqB,CAAC,CAAC;IACzC,CAAC;IACD,IAAI,CAAC,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC;QACtB,MAAM,IAAI,KAAK,CAAC,yBAAyB,CAAC,CAAC;IAC7C,CAAC;IAED,4CAA4C;IAC5C,IAAI,IAAI,CAAC,WAAW,KAAK,IAAI,EAAE,CAAC;QAC9B,MAAM,MAAM,GAAG,OAAO,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;QACzC,IAAI,CAAC;YACH,MAAM,MAAM,CAAC,MAAM,CAAC,CAAC;QACvB,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,IAAI,KAAK,CAAC,wDAAwD,CAAC,CAAC;QAC5E,CAAC;IACH,CAAC;IAED,MAAM,OAAO,GAAG,kBAAkB,CAAC,QAAQ,CAAC,CAAC;IAC7C,IAAI,IAAI,GAAG,MAAM,aAAa,CAAC,QAAQ,CAAC,CAAC;IAEzC,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;QACvB,IAAI,IAAI,CAAC,KAAK,KAAK,IAAI,EAAE,CAAC;YACxB,MAAM,IAAI,KAAK,CACb,qEAAqE;gBACnE,8CAA8C,CACjD,CAAC;QACJ,CAAC;QACD,2EAA2E;QAC3E,4EAA4E;QAC5E,sEAAsE;QACtE,MAAM,KAAK,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC1C,MAAM,QAAQ,GAAG,IAAI,CAAC,WAAW,IAAI,mBAAmB,CAAC;QACzD,MAAM,IAAI,GAAG,IAAI,CAAC,WAAW,KAAK,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,QAAQ,CAAC,QAAQ,CAAC,CAAC;QAC9E,IAAI,GAAG;YACL,aAAa,EAAE,cAAc;YAC7B,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YACnC,SAAS,EAAE,CAAC;YACZ,SAAS,EAAE,CAAC;YACZ,GAAG,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACpD,CAAC;QACF,MAAM,cAAc,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;IACvC,CAAC;IAED,MAAM,KAAK,GAAc;QACvB,IAAI,EAAE,QAAQ,CAAC,QAAQ,CAAC;QACxB,IAAI,EAAE,QAAQ;QACd,SAAS,EAAE,IAAI,CAAC,SAAS;QACzB,SAAS,EAAE,IAAI,CAAC,SAAS;QACzB,SAAS,EAAE,IAAI,CAAC,SAAS;QACzB,GAAG,CAAC,IAAI,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,IAAI,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC1E,CAAC;IACF,MAAM,YAAY,GAAG,IAAI,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IACxE,MAAM,cAAc,CAAC,KAAK,EAAE,YAAY,CAAC,CAAC;IAC1C,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;GAIG;AACH,KAAK,UAAU,mBAAmB,CAAC,QAAgB;IACjD,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,MAAM,CAAC,oBAAoB,CAAC,CAAC;IACrD,OAAO,IAAI,OAAO,CAAC,CAAC,QAAQ,EAAE,EAAE;QAC9B,IAAI,MAAM,GAAG,EAAE,CAAC;QAChB,IAAI,OAAO,GAAG,KAAK,CAAC;QACpB,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,EAAE,CAAC,WAAW,EAAE,MAAM,CAAC,EAAE;YAChD,GAAG,EAAE,QAAQ;YACb,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,CAAC;SACpC,CAAC,CAAC;QACH,KAAK,CAAC,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;QACjC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAK,EAAE,EAAE;YAChC,MAAM,IAAI,KAAK,CAAC;QAClB,CAAC,CAAC,CAAC;QACH,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE;YACrB,IAAI,CAAC,OAAO,EAAE,CAAC;gBACb,OAAO,GAAG,IAAI,CAAC;gBACf,QAAQ,CAAC,SAAS,CAAC,CAAC;YACtB,CAAC;QACH,CAAC,CAAC,CAAC;QACH,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE;YACzB,IAAI,OAAO;gBAAE,OAAO;YACpB,OAAO,GAAG,IAAI,CAAC;YACf,IAAI,IAAI,KAAK,CAAC,EAAE,CAAC;gBACf,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC;gBAC9B,QAAQ,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;YACrD,CAAC;iBAAM,CAAC;gBACN,QAAQ,CAAC,SAAS,CAAC,CAAC;YACtB,CAAC;QACH,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/commands/ingest-sarif.d.ts

@@ -0,0 +1,64 @@
+/**
+ * `codehub ingest-sarif <sarif-file>` — import a SARIF v2.1.0 log into
+ * the code graph as `Finding` nodes + `FOUND_IN` edges.
+ *
+ * Flow:
+ *   1. Read + parse + validate the SARIF file via `@opencodehub/sarif`.
+ *   2. Resolve the target repo (either `--repo <name>` or CWD).
+ *   3. Open the DuckDB store and pull a per-file, line-sorted symbol
+ *      index over the SARIF's referenced URIs (used to resolve Finding
+ *      → Symbol edges).
+ *   4. For every Result across every Run, build a Finding node keyed by
+ *      `Finding:<scannerId>:<ruleId>:<uri>:<startLine>`. Emit FOUND_IN
+ *      edges to the target File node (matched by `artifactLocation.uri`
+ *      against `file_path`) plus a second FOUND_IN edge to the tightest
+ *      enclosing symbol at `(uri, startLine)` when the graph contains
+ *      one. A scanner-provided `opencodehub.symbolId` hint wins over the
+ *      enclosing lookup when set.
+ *   5. UPSERT into DuckDB via `store.bulkLoad({ mode: "upsert" })`.
+ *
+ * The command is idempotent — re-running with the same SARIF produces
+ * the same nodes and edges. Results without a parsable location (no
+ * physicalLocation.artifactLocation.uri) are skipped with a warning.
+ */
+import { KnowledgeGraph } from "@opencodehub/core-types";
+import { type SarifRun } from "@opencodehub/sarif";
+import { type NodesByFile } from "./find-enclosing-symbol.js";
+export interface IngestSarifOptions {
+    /** `--repo <name>`: look up a registered repo instead of using CWD. */
+    readonly repo?: string;
+    /** Test hook: override the registry home. */
+    readonly home?: string;
+}
+export interface IngestSarifSummary {
+    readonly sarifFile: string;
+    readonly repoPath: string;
+    readonly findingsEmitted: number;
+    readonly edgesEmitted: number;
+    readonly resultsSkipped: number;
+    readonly warnings: readonly string[];
+}
+export declare function runIngestSarif(sarifFile: string, opts?: IngestSarifOptions): Promise<IngestSarifSummary>;
+interface BuildSummary {
+    readonly findingsEmitted: number;
+    readonly edgesEmitted: number;
+    readonly resultsSkipped: number;
+    readonly warnings: readonly string[];
+}
+/**
+ * Pure builder over SARIF runs. Exposed for unit tests so we can exercise
+ * the node/edge emission logic without touching DuckDB.
+ *
+ * `nodesByFile` is the per-file, line-sorted symbol index (produced by
+ * {@link indexNodesByFile}) used to resolve each SARIF result back to the
+ * tightest-enclosing code symbol when the scanner did not populate
+ * `result.properties["opencodehub.symbolId"]` itself. Callers that only
+ * want the File-level edge (e.g. unit tests) can omit it — an empty map
+ * means every symbol lookup misses and only the File edge is emitted.
+ */
+export declare function buildFindingsGraph(runs: readonly SarifRun[], nodesByFile?: NodesByFile): {
+    graph: KnowledgeGraph;
+    summary: BuildSummary;
+};
+export {};
+//# sourceMappingURL=ingest-sarif.d.ts.map

package/dist/commands/ingest-sarif.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ingest-sarif.d.ts","sourceRoot":"","sources":["../../src/commands/ingest-sarif.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AAIH,OAAO,EAAoB,cAAc,EAA2B,MAAM,yBAAyB,CAAC;AACpG,OAAO,EAML,KAAK,QAAQ,EACd,MAAM,oBAAoB,CAAC;AAQ5B,OAAO,EAKL,KAAK,WAAW,EACjB,MAAM,4BAA4B,CAAC;AAEpC,MAAM,WAAW,kBAAkB;IACjC,uEAAuE;IACvE,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IACvB,6CAA6C;IAC7C,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,QAAQ,EAAE,SAAS,MAAM,EAAE,CAAC;CACtC;AAED,wBAAsB,cAAc,CAClC,SAAS,EAAE,MAAM,EACjB,IAAI,GAAE,kBAAuB,GAC5B,OAAO,CAAC,kBAAkB,CAAC,CA8D7B;AAED,UAAU,YAAY;IACpB,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,QAAQ,EAAE,SAAS,MAAM,EAAE,CAAC;CACtC;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,kBAAkB,CAChC,IAAI,EAAE,SAAS,QAAQ,EAAE,EACzB,WAAW,GAAE,WAAuB,GACnC;IACD,KAAK,EAAE,cAAc,CAAC;IACtB,OAAO,EAAE,YAAY,CAAC;CACvB,CAgEA"}