@opensip-cli/external-tool-adapter 0.1.15

package/dist/__tests__/define-external-tool-adapter.test.js

@@ -0,0 +1,165 @@
+import { createSignal, ValidationError } from '@opensip-cli/core';
+import { describe, expect, it } from 'vitest';
+import { deriveAdapterConfigManifest, deriveAdapterManifestRequires } from '../adapter-manifest.js';
+import { defineExternalToolAdapter } from '../define-external-tool-adapter.js';
+import { messageHashFingerprintStrategy } from '../fingerprint.js';
+const baseSpec = {
+    identity: { name: 'examplescan', aliases: ['ex'] },
+    metadata: {
+        id: 'c0ffee00-1234-4abc-8def-0123456789ab',
+        description: 'Example scanner',
+        version: '1.2.3',
+        adapterPackage: '@opensip-cli/tool-example',
+    },
+    binary: { command: 'examplescan', versionArgs: ['version'], minVersion: '1.0.0' },
+    network: 'local-only',
+    commands: [
+        {
+            name: 'scan',
+            args: (ctx) => ['scan', ctx.projectRoot],
+            output: { kind: 'sarif', path: 'example.sarif' },
+        },
+    ],
+};
+describe('defineExternalToolAdapter', () => {
+    it('returns an ordinary Tool with identity + metadata derived', () => {
+        const tool = defineExternalToolAdapter(baseSpec);
+        expect(tool.identity.name).toBe('examplescan');
+        expect(tool.metadata).toMatchObject({
+            id: 'c0ffee00-1234-4abc-8def-0123456789ab',
+            name: 'examplescan',
+            version: '1.2.3',
+            description: 'Example scanner',
+        });
+    });
+    it('mounts the scan primary + nested doctor + version (3 specs)', () => {
+        const tool = defineExternalToolAdapter(baseSpec);
+        const specs = tool.commandSpecs ?? [];
+        expect(specs.map((s) => s.name)).toEqual(['examplescan', 'doctor', 'version']);
+        const [primary, doctor, version] = specs;
+        expect(primary).toMatchObject({
+            name: 'examplescan',
+            scope: 'project',
+            output: 'raw-stream',
+            rawStreamReason: 'runtime-render-dispatch',
+        });
+        expect(primary.aliases).toEqual(['ex']);
+        expect(doctor).toMatchObject({
+            name: 'doctor',
+            parent: 'examplescan',
+            scope: 'none',
+            output: 'raw-stream',
+            rawStreamReason: 'diagnostic-gate',
+        });
+        expect(version).toMatchObject({
+            name: 'version',
+            parent: 'examplescan',
+            scope: 'none',
+            output: 'raw-stream',
+            rawStreamReason: 'diagnostic-gate',
+        });
+    });
+    it('mounts additional scanner commands as nested verbs', () => {
+        const tool = defineExternalToolAdapter({
+            ...baseSpec,
+            commands: [
+                baseSpec.commands[0],
+                { name: 'config', args: () => ['config'], output: { kind: 'sarif' } },
+            ],
+        });
+        expect((tool.commandSpecs ?? []).map((s) => s.name)).toEqual([
+            'examplescan',
+            'config',
+            'doctor',
+            'version',
+        ]);
+    });
+    it('declares the message-hash fingerprint strategy by default (worker-side stamping)', () => {
+        const tool = defineExternalToolAdapter(baseSpec);
+        expect(tool.extensionPoints?.fingerprintStrategy).toBe(messageHashFingerprintStrategy);
+    });
+    it('forwards an optional config contribution', () => {
+        const tool = defineExternalToolAdapter({ ...baseSpec, config: { schema: { marker: true } } });
+        expect(tool.extensionPoints?.config).toMatchObject({
+            namespace: 'examplescan',
+            schema: { marker: true },
+        });
+    });
+    // A4 / R6 (ADR-0090 §4.3): an adapter that declares NO `config` must still CLAIM
+    // its namespace by default — otherwise `scope.toolConfig[<tool>]` is always
+    // undefined (binary pin dead, verdict keys non-configurable, and an operator's
+    // `<tool>:` block bricks the project via the ADR-0043 unclaimed-namespace gate).
+    describe('default config namespace claim (A4 / R6)', () => {
+        it('claims the namespace on the runtime when config is omitted', () => {
+            const tool = defineExternalToolAdapter(baseSpec);
+            const config = tool.extensionPoints?.config;
+            expect(config?.namespace).toBe('examplescan');
+            // The runtime schema is the worker deep-pass Zod (exposes safeParse).
+            expect(typeof (config?.schema).safeParse).toBe('function');
+        });
+        it('the runtime schema accepts the binary pin AND the reserved verdict keys', () => {
+            const tool = defineExternalToolAdapter(baseSpec);
+            const schema = tool.extensionPoints?.config?.schema;
+            expect(schema.safeParse({
+                binaries: { examplescan: { path: '/opt/examplescan' } },
+                failOnWarnings: 2,
+                failOnDegraded: false,
+            }).success).toBe(true);
+            // A typo inside the block is rejected by the deep pass (strict).
+            expect(schema.safeParse({ binares: {} }).success).toBe(false);
+        });
+        it('emits a coarse static config descriptor (the installed-path namespace claim)', () => {
+            const tool = defineExternalToolAdapter(baseSpec);
+            const descriptor = deriveAdapterConfigManifest(tool);
+            expect(descriptor?.namespace).toBe('examplescan');
+            expect(descriptor?.schema.properties?.binaries).toEqual({ type: 'object' });
+        });
+        it('emits NO static descriptor for a custom config (validation defers to the worker)', () => {
+            const tool = defineExternalToolAdapter({ ...baseSpec, config: { schema: { marker: true } } });
+            expect(deriveAdapterConfigManifest(tool)).toBeUndefined();
+        });
+    });
+    // A13 (ADR-0092 §4.8): `requires` is DERIVED from the network posture — the
+    // documented forward-map, not a hand-typed list. `network` rides only on a
+    // non-local-only posture, so a future flip to `networked` is a visible drift.
+    describe('network posture → requires derivation (A13)', () => {
+        it('a local-only adapter derives [subprocess, filesystem] (no network)', () => {
+            const requires = deriveAdapterManifestRequires(defineExternalToolAdapter(baseSpec));
+            expect(requires.map((r) => r.resource)).toEqual(['subprocess', 'filesystem']);
+        });
+        it('a networked adapter derives an added network requirement', () => {
+            const tool = defineExternalToolAdapter({ ...baseSpec, network: 'networked' });
+            const requires = deriveAdapterManifestRequires(tool);
+            expect(requires.map((r) => r.resource)).toEqual(['subprocess', 'filesystem', 'network']);
+            expect(requires.find((r) => r.resource === 'network')?.reason).toContain('networked');
+        });
+        it('an auth-required adapter also derives a network requirement', () => {
+            const tool = defineExternalToolAdapter({ ...baseSpec, network: 'auth-required' });
+            expect(deriveAdapterManifestRequires(tool).some((r) => r.resource === 'network')).toBe(true);
+        });
+    });
+    it('rejects a non-SARIF command with no parse', () => {
+        expect(() => defineExternalToolAdapter({
+            ...baseSpec,
+            commands: [{ name: 'scan', args: () => [], output: { kind: 'json', path: 'x.json' } }],
+        })).toThrow(ValidationError);
+    });
+    it('accepts a JSON command WITH a parse', () => {
+        const tool = defineExternalToolAdapter({
+            ...baseSpec,
+            commands: [
+                {
+                    name: 'scan',
+                    args: () => [],
+                    output: { kind: 'json', path: 'x.json' },
+                    parse: () => [createSignal({ source: 'x', severity: 'low', ruleId: 'r', message: 'm' })],
+                },
+            ],
+        });
+        expect(tool.commandSpecs).toBeDefined();
+    });
+    it('rejects an empty command list', () => {
+        expect(() => defineExternalToolAdapter({ ...baseSpec, commands: [] })).toThrow(ValidationError);
+    });
+});
+//# sourceMappingURL=define-external-tool-adapter.test.js.map

package/dist/__tests__/define-external-tool-adapter.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"define-external-tool-adapter.test.js","sourceRoot":"","sources":["../../src/__tests__/define-external-tool-adapter.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AAClE,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAE9C,OAAO,EAAE,2BAA2B,EAAE,6BAA6B,EAAE,MAAM,wBAAwB,CAAC;AACpG,OAAO,EAAE,yBAAyB,EAAE,MAAM,oCAAoC,CAAC;AAC/E,OAAO,EAAE,8BAA8B,EAAE,MAAM,mBAAmB,CAAC;AAInE,MAAM,QAAQ,GAA4B;IACxC,QAAQ,EAAE,EAAE,IAAI,EAAE,aAAa,EAAE,OAAO,EAAE,CAAC,IAAI,CAAC,EAAE;IAClD,QAAQ,EAAE;QACR,EAAE,EAAE,sCAAsC;QAC1C,WAAW,EAAE,iBAAiB;QAC9B,OAAO,EAAE,OAAO;QAChB,cAAc,EAAE,2BAA2B;KAC5C;IACD,MAAM,EAAE,EAAE,OAAO,EAAE,aAAa,EAAE,WAAW,EAAE,CAAC,SAAS,CAAC,EAAE,UAAU,EAAE,OAAO,EAAE;IACjF,OAAO,EAAE,YAAY;IACrB,QAAQ,EAAE;QACR;YACE,IAAI,EAAE,MAAM;YACZ,IAAI,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,GAAG,CAAC,WAAW,CAAC;YACxC,MAAM,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,eAAe,EAAE;SACjD;KACF;CACF,CAAC;AAEF,QAAQ,CAAC,2BAA2B,EAAE,GAAG,EAAE;IACzC,EAAE,CAAC,2DAA2D,EAAE,GAAG,EAAE;QACnE,MAAM,IAAI,GAAG,yBAAyB,CAAC,QAAQ,CAAC,CAAC;QACjD,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;QAC/C,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,aAAa,CAAC;YAClC,EAAE,EAAE,sCAAsC;YAC1C,IAAI,EAAE,aAAa;YACnB,OAAO,EAAE,OAAO;YAChB,WAAW,EAAE,iBAAiB;SAC/B,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,6DAA6D,EAAE,GAAG,EAAE;QACrE,MAAM,IAAI,GAAG,yBAAyB,CAAC,QAAQ,CAAC,CAAC;QACjD,MAAM,KAAK,GAAG,IAAI,CAAC,YAAY,IAAI,EAAE,CAAC;QACtC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,aAAa,EAAE,QAAQ,EAAE,SAAS,CAAC,CAAC,CAAC;QAE/E,MAAM,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,GAAG,KAAK,CAAC;QACzC,MAAM,CAAC,OAAO,CAAC,CAAC,aAAa,CAAC;YAC5B,IAAI,EAAE,aAAa;YACnB,KAAK,EAAE,SAAS;YAChB,MAAM,EAAE,YAAY;YACpB,eAAe,EAAE,yBAAyB;SAC3C,CAAC,CAAC;QACH,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;QACxC,MAAM,CAAC,MAAM,CAAC,CAAC,aAAa,CAAC;YAC3B,IAAI,EAAE,QAAQ;YACd,MAAM,EAAE,aAAa;YACrB,KAAK,EAAE,MAAM;YACb,MAAM,EAAE,YAAY;YACpB,eAAe,EAAE,iBAAiB;SACnC,CAAC,CAAC;QACH,MAAM,CAAC,OAAO,CAAC,CAAC,aAAa,CAAC;YAC5B,IAAI,EAAE,SAAS;YACf,MAAM,EAAE,aAAa;YACrB,KAAK,EAAE,MAAM;YACb,MAAM,EAAE,YAAY;YACpB,eAAe,EAAE,iBAAiB;SACnC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,oDAAoD,EAAE,GAAG,EAAE;QAC5D,MAAM,IAAI,GAAG,yBAAyB,CAAC;YACrC,GAAG,QAAQ;YACX,QAAQ,EAAE;gBACR,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC;gBACpB,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,CAAC,QAAQ,CAAC,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE;aACtE;SACF,CAAC,CAAC;QACH,MAAM,CAAC,CAAC,IAAI,CAAC,YAAY,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC;YAC3D,aAAa;YACb,QAAQ;YACR,QAAQ;YACR,SAAS;SACV,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,kFAAkF,EAAE,GAAG,EAAE;QAC1F,MAAM,IAAI,GAAG,yBAAyB,CAAC,QAAQ,CAAC,CAAC;QACjD,MAAM,CAAC,IAAI,CAAC,eAAe,EAAE,mBAAmB,CAAC,CAAC,IAAI,CAAC,8BAA8B,CAAC,CAAC;IACzF,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,0CAA0C,EAAE,GAAG,EAAE;QAClD,MAAM,IAAI,GAAG,yBAAyB,CAAC,EAAE,GAAG,QAAQ,EAAE,MAAM,EAAE,EAAE,MAAM,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC;QAC9F,MAAM,CAAC,IAAI,CAAC,eAAe,EAAE,MAAM,CAAC,CAAC,aAAa,CAAC;YACjD,SAAS,EAAE,aAAa;YACxB,MAAM,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE;SACzB,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,iFAAiF;IACjF,4EAA4E;IAC5E,+EAA+E;IAC/E,iFAAiF;IACjF,QAAQ,CAAC,0CAA0C,EAAE,GAAG,EAAE;QACxD,EAAE,CAAC,4DAA4D,EAAE,GAAG,EAAE;YACpE,MAAM,IAAI,GAAG,yBAAyB,CAAC,QAAQ,CAAC,CAAC;YACjD,MAAM,MAAM,GAAG,IAAI,CAAC,eAAe,EAAE,MAAM,CAAC;YAC5C,MAAM,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;YAC9C,sEAAsE;YACtE,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,MAAkC,CAAA,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QACxF,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,yEAAyE,EAAE,GAAG,EAAE;YACjF,MAAM,IAAI,GAAG,yBAAyB,CAAC,QAAQ,CAAC,CAAC;YACjD,MAAM,MAAM,GAAG,IAAI,CAAC,eAAe,EAAE,MAAM,EAAE,MAE5C,CAAC;YACF,MAAM,CACJ,MAAM,CAAC,SAAS,CAAC;gBACf,QAAQ,EAAE,EAAE,WAAW,EAAE,EAAE,IAAI,EAAE,kBAAkB,EAAE,EAAE;gBACvD,cAAc,EAAE,CAAC;gBACjB,cAAc,EAAE,KAAK;aACtB,CAAC,CAAC,OAAO,CACX,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACb,iEAAiE;YACjE,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAChE,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,8EAA8E,EAAE,GAAG,EAAE;YACtF,MAAM,IAAI,GAAG,yBAAyB,CAAC,QAAQ,CAAC,CAAC;YACjD,MAAM,UAAU,GAAG,2BAA2B,CAAC,IAAI,CAAC,CAAC;YACrD,MAAM,CAAC,UAAU,EAAE,SAAS,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;YAClD,MAAM,CAAC,UAAU,EAAE,MAAM,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC;QAC9E,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,kFAAkF,EAAE,GAAG,EAAE;YAC1F,MAAM,IAAI,GAAG,yBAAyB,CAAC,EAAE,GAAG,QAAQ,EAAE,MAAM,EAAE,EAAE,MAAM,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC;YAC9F,MAAM,CAAC,2BAA2B,CAAC,IAAI,CAAC,CAAC,CAAC,aAAa,EAAE,CAAC;QAC5D,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,4EAA4E;IAC5E,2EAA2E;IAC3E,8EAA8E;IAC9E,QAAQ,CAAC,6CAA6C,EAAE,GAAG,EAAE;QAC3D,EAAE,CAAC,oEAAoE,EAAE,GAAG,EAAE;YAC5E,MAAM,QAAQ,GAAG,6BAA6B,CAAC,yBAAyB,CAAC,QAAQ,CAAC,CAAC,CAAC;YACpF,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,YAAY,EAAE,YAAY,CAAC,CAAC,CAAC;QAChF,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,0DAA0D,EAAE,GAAG,EAAE;YAClE,MAAM,IAAI,GAAG,yBAAyB,CAAC,EAAE,GAAG,QAAQ,EAAE,OAAO,EAAE,WAAW,EAAE,CAAC,CAAC;YAC9E,MAAM,QAAQ,GAAG,6BAA6B,CAAC,IAAI,CAAC,CAAC;YACrD,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,YAAY,EAAE,YAAY,EAAE,SAAS,CAAC,CAAC,CAAC;YACzF,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,SAAS,CAAC,EAAE,MAAM,CAAC,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC;QACxF,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,6DAA6D,EAAE,GAAG,EAAE;YACrE,MAAM,IAAI,GAAG,yBAAyB,CAAC,EAAE,GAAG,QAAQ,EAAE,OAAO,EAAE,eAAe,EAAE,CAAC,CAAC;YAClF,MAAM,CAAC,6BAA6B,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC/F,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,2CAA2C,EAAE,GAAG,EAAE;QACnD,MAAM,CAAC,GAAG,EAAE,CACV,yBAAyB,CAAC;YACxB,GAAG,QAAQ;YACX,QAAQ,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,EAAE,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,CAAC;SACvF,CAAC,CACH,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC;IAC7B,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,qCAAqC,EAAE,GAAG,EAAE;QAC7C,MAAM,IAAI,GAAG,yBAAyB,CAAC;YACrC,GAAG,QAAQ;YACX,QAAQ,EAAE;gBACR;oBACE,IAAI,EAAE,MAAM;oBACZ,IAAI,EAAE,GAAG,EAAE,CAAC,EAAE;oBACd,MAAM,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE;oBACxC,KAAK,EAAE,GAAG,EAAE,CAAC,CAAC,YAAY,CAAC,EAAE,MAAM,EAAE,GAAG,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC,CAAC;iBACzF;aACF;SACF,CAAC,CAAC;QACH,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,WAAW,EAAE,CAAC;IAC1C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,+BAA+B,EAAE,GAAG,EAAE;QACvC,MAAM,CAAC,GAAG,EAAE,CAAC,yBAAyB,CAAC,EAAE,GAAG,QAAQ,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC;IAClG,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/__tests__/doctor-command.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=doctor-command.test.d.ts.map

package/dist/__tests__/doctor-command.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"doctor-command.test.d.ts","sourceRoot":"","sources":["../../src/__tests__/doctor-command.test.ts"],"names":[],"mappings":""}

package/dist/__tests__/doctor-command.test.js

@@ -0,0 +1,124 @@
+import { describe, expect, it } from 'vitest';
+import { defaultAdapterConfigSchema } from '../adapter-config.js';
+import { compareVersion, doctorReportLines, probeAdapter } from '../doctor-command.js';
+import { probeVersionReport } from '../version-command.js';
+/**
+ * Build the `gitleaks` namespace config block the way PRODUCTION does — by parsing
+ * it through the adapter's own (default) namespace schema. This is the same Zod the
+ * worker deep pass runs and the same shape the composer projects onto
+ * `scope.toolConfig.gitleaks`, so a test that feeds the parsed result to
+ * `probeAdapter` exercises a genuinely reachable config — not a hand-built shape the
+ * resolver could never deliver (the A4 "production-unreachable" hole).
+ */
+function producibleConfig(raw) {
+    const parsed = defaultAdapterConfigSchema().safeParse(raw);
+    if (!parsed.success)
+        throw new Error('config block is not producible by the adapter schema');
+    return parsed.data;
+}
+function deps(over = {}) {
+    return {
+        binaryDeps: { existsSync: () => true, which: () => '/usr/bin/gitleaks' },
+        probeVersion: () => '8.18.0',
+        env: {},
+        ...over,
+    };
+}
+describe('compareVersion', () => {
+    it('classifies ok / too-old / unknown / not-applicable', () => {
+        expect(compareVersion('8.18.0', '8.0.0')).toBe('ok');
+        expect(compareVersion('8.18.0', '8.18.0')).toBe('ok');
+        expect(compareVersion('7.9.9', '8.0.0')).toBe('too-old');
+        expect(compareVersion(undefined, '8.0.0')).toBe('unknown');
+        expect(compareVersion('not-a-version!', '8.0.0')).toBe('unknown');
+        expect(compareVersion('8.0.0', undefined)).toBe('not-applicable');
+    });
+});
+describe('probeAdapter', () => {
+    const binary = {
+        command: 'gitleaks',
+        versionArgs: ['version'],
+        minVersion: '8.0.0',
+        installHint: 'brew install gitleaks',
+    };
+    it('reports ready when the binary is found and recent enough', () => {
+        const report = probeAdapter({ tool: 'gitleaks', network: 'local-only', binary, config: {} }, deps());
+        expect(report.binary.found).toBe(true);
+        expect(report.binary.layer).toBe('path');
+        expect(report.version).toMatchObject({ detected: '8.18.0', minVersion: '8.0.0', status: 'ok' });
+        expect(report.ready).toBe(true);
+        expect(report.installHint).toBeUndefined();
+    });
+    it('reports not-ready + an install hint when the binary is missing', () => {
+        const report = probeAdapter({ tool: 'gitleaks', network: 'local-only', binary, config: {} }, deps({ binaryDeps: { existsSync: () => false, which: () => undefined } }));
+        expect(report.binary.found).toBe(false);
+        expect(report.ready).toBe(false);
+        expect(report.installHint).toBe('brew install gitleaks');
+    });
+    it('reports not-ready when the version is too old', () => {
+        const report = probeAdapter({ tool: 'gitleaks', network: 'local-only', binary, config: {} }, deps({ probeVersion: () => '7.0.0' }));
+        expect(report.version.status).toBe('too-old');
+        expect(report.ready).toBe(false);
+    });
+    it('honors a config-file pin (from a producible namespace block)', () => {
+        const report = probeAdapter({
+            tool: 'gitleaks',
+            network: 'local-only',
+            binary,
+            // The pin is validated through the adapter's own schema first, so this is
+            // exactly the shape the composer projects onto scope.toolConfig.gitleaks —
+            // not a production-unreachable hand-built object (A4).
+            config: producibleConfig({ binaries: { gitleaks: { path: '/opt/gitleaks' } } }),
+        }, deps());
+        expect(report.binary.path).toBe('/opt/gitleaks');
+        expect(report.binary.layer).toBe('config');
+    });
+    it('surfaces credential presence (presence only) for an auth-required posture', () => {
+        const present = probeAdapter({
+            tool: 'snyk',
+            network: 'auth-required',
+            binary: { command: 'snyk', versionArgs: ['--version'] },
+            config: {},
+        }, deps({ env: { OPENSIP_SNYK_TOKEN: 'secret-value' } }));
+        expect(present.credentialEnv).toEqual({ name: 'OPENSIP_SNYK_TOKEN', present: true });
+        expect(present.ready).toBe(true);
+        const missing = probeAdapter({
+            tool: 'snyk',
+            network: 'auth-required',
+            binary: { command: 'snyk', versionArgs: ['--version'] },
+            config: {},
+        }, deps());
+        expect(missing.credentialEnv?.present).toBe(false);
+        expect(missing.ready).toBe(false);
+    });
+});
+describe('doctorReportLines', () => {
+    it('renders a found+ready report', () => {
+        const lines = doctorReportLines(probeAdapter({
+            tool: 'gitleaks',
+            network: 'local-only',
+            binary: { command: 'gitleaks', versionArgs: ['version'], minVersion: '8.0.0' },
+            config: {},
+        }, deps()));
+        expect(lines.join('\n')).toContain('ready:   yes');
+        expect(lines.join('\n')).toContain('network: local-only');
+    });
+});
+describe('probeVersionReport', () => {
+    it('returns the resolved path + version', () => {
+        const report = probeVersionReport({ tool: 'gitleaks', binary: { command: 'gitleaks', versionArgs: ['version'] }, config: {} }, deps());
+        expect(report).toMatchObject({
+            tool: 'gitleaks',
+            found: true,
+            path: '/usr/bin/gitleaks',
+            version: '8.18.0',
+            layer: 'path',
+        });
+    });
+    it('reports not-found cleanly', () => {
+        const report = probeVersionReport({ tool: 'gitleaks', binary: { command: 'gitleaks', versionArgs: ['version'] }, config: {} }, deps({ binaryDeps: { existsSync: () => false, which: () => undefined } }));
+        expect(report).toMatchObject({ found: false, command: 'gitleaks' });
+        expect(report.version).toBeUndefined();
+    });
+});
+//# sourceMappingURL=doctor-command.test.js.map

package/dist/__tests__/doctor-command.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"doctor-command.test.js","sourceRoot":"","sources":["../../src/__tests__/doctor-command.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAE9C,OAAO,EAAE,0BAA0B,EAAE,MAAM,sBAAsB,CAAC;AAClE,OAAO,EAAE,cAAc,EAAE,iBAAiB,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAC;AACvF,OAAO,EAAE,kBAAkB,EAAE,MAAM,uBAAuB,CAAC;AAI3D;;;;;;;GAOG;AACH,SAAS,gBAAgB,CAAC,GAA4B;IACpD,MAAM,MAAM,GAAG,0BAA0B,EAAE,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;IAC3D,IAAI,CAAC,MAAM,CAAC,OAAO;QAAE,MAAM,IAAI,KAAK,CAAC,sDAAsD,CAAC,CAAC;IAC7F,OAAO,MAAM,CAAC,IAAyC,CAAC;AAC1D,CAAC;AAED,SAAS,IAAI,CAAC,OAAiC,EAAE;IAC/C,OAAO;QACL,UAAU,EAAE,EAAE,UAAU,EAAE,GAAG,EAAE,CAAC,IAAI,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,mBAAmB,EAAE;QACxE,YAAY,EAAE,GAAG,EAAE,CAAC,QAAQ;QAC5B,GAAG,EAAE,EAAE;QACP,GAAG,IAAI;KACR,CAAC;AACJ,CAAC;AAED,QAAQ,CAAC,gBAAgB,EAAE,GAAG,EAAE;IAC9B,EAAE,CAAC,oDAAoD,EAAE,GAAG,EAAE;QAC5D,MAAM,CAAC,cAAc,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACrD,MAAM,CAAC,cAAc,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACtD,MAAM,CAAC,cAAc,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QACzD,MAAM,CAAC,cAAc,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QAC3D,MAAM,CAAC,cAAc,CAAC,gBAAgB,EAAE,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QAClE,MAAM,CAAC,cAAc,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;IACpE,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,cAAc,EAAE,GAAG,EAAE;IAC5B,MAAM,MAAM,GAAG;QACb,OAAO,EAAE,UAAU;QACnB,WAAW,EAAE,CAAC,SAAS,CAAC;QACxB,UAAU,EAAE,OAAO;QACnB,WAAW,EAAE,uBAAuB;KACrC,CAAC;IAEF,EAAE,CAAC,0DAA0D,EAAE,GAAG,EAAE;QAClE,MAAM,MAAM,GAAG,YAAY,CACzB,EAAE,IAAI,EAAE,UAAU,EAAE,OAAO,EAAE,YAAY,EAAE,MAAM,EAAE,MAAM,EAAE,EAAE,EAAE,EAC/D,IAAI,EAAE,CACP,CAAC;QACF,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACvC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACzC,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,aAAa,CAAC,EAAE,QAAQ,EAAE,QAAQ,EAAE,UAAU,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;QAChG,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAChC,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,aAAa,EAAE,CAAC;IAC7C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,gEAAgE,EAAE,GAAG,EAAE;QACxE,MAAM,MAAM,GAAG,YAAY,CACzB,EAAE,IAAI,EAAE,UAAU,EAAE,OAAO,EAAE,YAAY,EAAE,MAAM,EAAE,MAAM,EAAE,EAAE,EAAE,EAC/D,IAAI,CAAC,EAAE,UAAU,EAAE,EAAE,UAAU,EAAE,GAAG,EAAE,CAAC,KAAK,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,SAAS,EAAE,EAAE,CAAC,CAC1E,CAAC;QACF,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACxC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACjC,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,IAAI,CAAC,uBAAuB,CAAC,CAAC;IAC3D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,+CAA+C,EAAE,GAAG,EAAE;QACvD,MAAM,MAAM,GAAG,YAAY,CACzB,EAAE,IAAI,EAAE,UAAU,EAAE,OAAO,EAAE,YAAY,EAAE,MAAM,EAAE,MAAM,EAAE,EAAE,EAAE,EAC/D,IAAI,CAAC,EAAE,YAAY,EAAE,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC,CACtC,CAAC;QACF,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QAC9C,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACnC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,8DAA8D,EAAE,GAAG,EAAE;QACtE,MAAM,MAAM,GAAG,YAAY,CACzB;YACE,IAAI,EAAE,UAAU;YAChB,OAAO,EAAE,YAAY;YACrB,MAAM;YACN,0EAA0E;YAC1E,2EAA2E;YAC3E,uDAAuD;YACvD,MAAM,EAAE,gBAAgB,CAAC,EAAE,QAAQ,EAAE,EAAE,QAAQ,EAAE,EAAE,IAAI,EAAE,eAAe,EAAE,EAAE,EAAE,CAAC;SAChF,EACD,IAAI,EAAE,CACP,CAAC;QACF,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;QACjD,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IAC7C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,2EAA2E,EAAE,GAAG,EAAE;QACnF,MAAM,OAAO,GAAG,YAAY,CAC1B;YACE,IAAI,EAAE,MAAM;YACZ,OAAO,EAAE,eAAe;YACxB,MAAM,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC,WAAW,CAAC,EAAE;YACvD,MAAM,EAAE,EAAE;SACX,EACD,IAAI,CAAC,EAAE,GAAG,EAAE,EAAE,kBAAkB,EAAE,cAAc,EAAE,EAAE,CAAC,CACtD,CAAC;QACF,MAAM,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,oBAAoB,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;QACrF,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAEjC,MAAM,OAAO,GAAG,YAAY,CAC1B;YACE,IAAI,EAAE,MAAM;YACZ,OAAO,EAAE,eAAe;YACxB,MAAM,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC,WAAW,CAAC,EAAE;YACvD,MAAM,EAAE,EAAE;SACX,EACD,IAAI,EAAE,CACP,CAAC;QACF,MAAM,CAAC,OAAO,CAAC,aAAa,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACnD,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACpC,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,mBAAmB,EAAE,GAAG,EAAE;IACjC,EAAE,CAAC,8BAA8B,EAAE,GAAG,EAAE;QACtC,MAAM,KAAK,GAAG,iBAAiB,CAC7B,YAAY,CACV;YACE,IAAI,EAAE,UAAU;YAChB,OAAO,EAAE,YAAY;YACrB,MAAM,EAAE,EAAE,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,CAAC,SAAS,CAAC,EAAE,UAAU,EAAE,OAAO,EAAE;YAC9E,MAAM,EAAE,EAAE;SACX,EACD,IAAI,EAAE,CACP,CACF,CAAC;QACF,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,cAAc,CAAC,CAAC;QACnD,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,qBAAqB,CAAC,CAAC;IAC5D,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,oBAAoB,EAAE,GAAG,EAAE;IAClC,EAAE,CAAC,qCAAqC,EAAE,GAAG,EAAE;QAC7C,MAAM,MAAM,GAAG,kBAAkB,CAC/B,EAAE,IAAI,EAAE,UAAU,EAAE,MAAM,EAAE,EAAE,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,CAAC,SAAS,CAAC,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,EAC3F,IAAI,EAAE,CACP,CAAC;QACF,MAAM,CAAC,MAAM,CAAC,CAAC,aAAa,CAAC;YAC3B,IAAI,EAAE,UAAU;YAChB,KAAK,EAAE,IAAI;YACX,IAAI,EAAE,mBAAmB;YACzB,OAAO,EAAE,QAAQ;YACjB,KAAK,EAAE,MAAM;SACd,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,2BAA2B,EAAE,GAAG,EAAE;QACnC,MAAM,MAAM,GAAG,kBAAkB,CAC/B,EAAE,IAAI,EAAE,UAAU,EAAE,MAAM,EAAE,EAAE,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,CAAC,SAAS,CAAC,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,EAC3F,IAAI,CAAC,EAAE,UAAU,EAAE,EAAE,UAAU,EAAE,GAAG,EAAE,CAAC,KAAK,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,SAAS,EAAE,EAAE,CAAC,CAC1E,CAAC;QACF,MAAM,CAAC,MAAM,CAAC,CAAC,aAAa,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,UAAU,EAAE,CAAC,CAAC;QACpE,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,aAAa,EAAE,CAAC;IACzC,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/__tests__/exit-model.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=exit-model.test.d.ts.map

package/dist/__tests__/exit-model.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"exit-model.test.d.ts","sourceRoot":"","sources":["../../src/__tests__/exit-model.test.ts"],"names":[],"mappings":""}

package/dist/__tests__/exit-model.test.js

@@ -0,0 +1,30 @@
+import { describe, expect, it } from 'vitest';
+import { DEFAULT_EXIT_MODEL, interpretExit } from '../exit-model.js';
+const GITLEAKS = { ok: [0], findings: [1], errorFrom: 2 };
+const TRIVY = { ok: [0], findings: [], errorFrom: 1 };
+describe('interpretExit', () => {
+    it('classifies ok / findings / fault for the default model', () => {
+        expect(interpretExit(0, DEFAULT_EXIT_MODEL)).toBe('ok');
+        expect(interpretExit(1, DEFAULT_EXIT_MODEL)).toBe('findings');
+        expect(interpretExit(2, DEFAULT_EXIT_MODEL)).toBe('fault');
+        expect(interpretExit(127, DEFAULT_EXIT_MODEL)).toBe('fault');
+    });
+    it('gitleaks disambiguation: exit 1 + invalid artifact ⇒ fault, valid ⇒ findings', () => {
+        expect(interpretExit(1, GITLEAKS, { artifactValid: true })).toBe('findings');
+        expect(interpretExit(1, GITLEAKS, { artifactValid: false })).toBe('fault');
+        // undefined artifactValid is treated as valid (stdout scanners).
+        expect(interpretExit(1, GITLEAKS)).toBe('findings');
+    });
+    it('trivy model: 0 is ok, any nonzero is a fault (no exit-code findings)', () => {
+        expect(interpretExit(0, TRIVY)).toBe('ok');
+        expect(interpretExit(1, TRIVY)).toBe('fault');
+        expect(interpretExit(5, TRIVY)).toBe('fault');
+    });
+    it('prefers ok when a code appears in both ok and findings', () => {
+        expect(interpretExit(0, { ok: [0], findings: [0] })).toBe('ok');
+    });
+    it('an unmodeled nonzero with no errorFrom is still a fault', () => {
+        expect(interpretExit(3, { ok: [0], findings: [1] })).toBe('fault');
+    });
+});
+//# sourceMappingURL=exit-model.test.js.map

package/dist/__tests__/exit-model.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"exit-model.test.js","sourceRoot":"","sources":["../../src/__tests__/exit-model.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAE9C,OAAO,EAAE,kBAAkB,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AAIrE,MAAM,QAAQ,GAAqB,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,CAAC;AAC5E,MAAM,KAAK,GAAqB,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,EAAE,EAAE,SAAS,EAAE,CAAC,EAAE,CAAC;AAExE,QAAQ,CAAC,eAAe,EAAE,GAAG,EAAE;IAC7B,EAAE,CAAC,wDAAwD,EAAE,GAAG,EAAE;QAChE,MAAM,CAAC,aAAa,CAAC,CAAC,EAAE,kBAAkB,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACxD,MAAM,CAAC,aAAa,CAAC,CAAC,EAAE,kBAAkB,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QAC9D,MAAM,CAAC,aAAa,CAAC,CAAC,EAAE,kBAAkB,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAC3D,MAAM,CAAC,aAAa,CAAC,GAAG,EAAE,kBAAkB,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAC/D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,8EAA8E,EAAE,GAAG,EAAE;QACtF,MAAM,CAAC,aAAa,CAAC,CAAC,EAAE,QAAQ,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QAC7E,MAAM,CAAC,aAAa,CAAC,CAAC,EAAE,QAAQ,EAAE,EAAE,aAAa,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAC3E,iEAAiE;QACjE,MAAM,CAAC,aAAa,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IACtD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,sEAAsE,EAAE,GAAG,EAAE;QAC9E,MAAM,CAAC,aAAa,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC3C,MAAM,CAAC,aAAa,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAC9C,MAAM,CAAC,aAAa,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAChD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,wDAAwD,EAAE,GAAG,EAAE;QAChE,MAAM,CAAC,aAAa,CAAC,CAAC,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAClE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,yDAAyD,EAAE,GAAG,EAAE;QACjE,MAAM,CAAC,aAAa,CAAC,CAAC,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACrE,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/__tests__/fingerprint.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=fingerprint.test.d.ts.map

package/dist/__tests__/fingerprint.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"fingerprint.test.d.ts","sourceRoot":"","sources":["../../src/__tests__/fingerprint.test.ts"],"names":[],"mappings":""}

package/dist/__tests__/fingerprint.test.js

@@ -0,0 +1,39 @@
+import { createHash } from 'node:crypto';
+import { createSignal, defaultFingerprintStrategy } from '@opensip-cli/core';
+import { describe, expect, it } from 'vitest';
+import { messageHashFingerprintStrategy, resolveFingerprintStrategy } from '../fingerprint.js';
+describe('messageHashFingerprintStrategy', () => {
+    it('is sha256(filePath\\nruleId\\nmessage) — line-shift tolerant', () => {
+        const signal = createSignal({
+            source: 'osv-scanner',
+            severity: 'high',
+            ruleId: 'GHSA-1',
+            message: 'Prototype pollution',
+            code: { file: 'package-lock.json', line: 42 },
+        });
+        const expected = createHash('sha256')
+            .update(`package-lock.json\nGHSA-1\nPrototype pollution`)
+            .digest('hex');
+        expect(messageHashFingerprintStrategy.fingerprint(signal)).toBe(expected);
+    });
+    it('ignores line/column so a shift does not re-key the baseline', () => {
+        const base = {
+            source: 'g',
+            severity: 'high',
+            ruleId: 'R',
+            message: 'm',
+            code: { file: 'a.txt' },
+        };
+        const at10 = messageHashFingerprintStrategy.fingerprint(createSignal({ ...base, code: { file: 'a.txt', line: 10 } }));
+        const at99 = messageHashFingerprintStrategy.fingerprint(createSignal({ ...base, code: { file: 'a.txt', line: 99 } }));
+        expect(at10).toBe(at99);
+    });
+});
+describe('resolveFingerprintStrategy', () => {
+    it('defaults to message-hash and maps rule-location to the host default', () => {
+        expect(resolveFingerprintStrategy(undefined)).toBe(messageHashFingerprintStrategy);
+        expect(resolveFingerprintStrategy('message-hash')).toBe(messageHashFingerprintStrategy);
+        expect(resolveFingerprintStrategy('rule-location')).toBe(defaultFingerprintStrategy);
+    });
+});
+//# sourceMappingURL=fingerprint.test.js.map

package/dist/__tests__/fingerprint.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"fingerprint.test.js","sourceRoot":"","sources":["../../src/__tests__/fingerprint.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAEzC,OAAO,EAAE,YAAY,EAAE,0BAA0B,EAAE,MAAM,mBAAmB,CAAC;AAC7E,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAE9C,OAAO,EAAE,8BAA8B,EAAE,0BAA0B,EAAE,MAAM,mBAAmB,CAAC;AAE/F,QAAQ,CAAC,gCAAgC,EAAE,GAAG,EAAE;IAC9C,EAAE,CAAC,8DAA8D,EAAE,GAAG,EAAE;QACtE,MAAM,MAAM,GAAG,YAAY,CAAC;YAC1B,MAAM,EAAE,aAAa;YACrB,QAAQ,EAAE,MAAM;YAChB,MAAM,EAAE,QAAQ;YAChB,OAAO,EAAE,qBAAqB;YAC9B,IAAI,EAAE,EAAE,IAAI,EAAE,mBAAmB,EAAE,IAAI,EAAE,EAAE,EAAE;SAC9C,CAAC,CAAC;QACH,MAAM,QAAQ,GAAG,UAAU,CAAC,QAAQ,CAAC;aAClC,MAAM,CAAC,gDAAgD,CAAC;aACxD,MAAM,CAAC,KAAK,CAAC,CAAC;QACjB,MAAM,CAAC,8BAA8B,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IAC5E,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,6DAA6D,EAAE,GAAG,EAAE;QACrE,MAAM,IAAI,GAAG;YACX,MAAM,EAAE,GAAG;YACX,QAAQ,EAAE,MAAe;YACzB,MAAM,EAAE,GAAG;YACX,OAAO,EAAE,GAAG;YACZ,IAAI,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE;SACxB,CAAC;QACF,MAAM,IAAI,GAAG,8BAA8B,CAAC,WAAW,CACrD,YAAY,CAAC,EAAE,GAAG,IAAI,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE,EAAE,EAAE,CAAC,CAC7D,CAAC;QACF,MAAM,IAAI,GAAG,8BAA8B,CAAC,WAAW,CACrD,YAAY,CAAC,EAAE,GAAG,IAAI,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE,EAAE,EAAE,CAAC,CAC7D,CAAC;QACF,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC1B,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,4BAA4B,EAAE,GAAG,EAAE;IAC1C,EAAE,CAAC,qEAAqE,EAAE,GAAG,EAAE;QAC7E,MAAM,CAAC,0BAA0B,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,8BAA8B,CAAC,CAAC;QACnF,MAAM,CAAC,0BAA0B,CAAC,cAAc,CAAC,CAAC,CAAC,IAAI,CAAC,8BAA8B,CAAC,CAAC;QACxF,MAAM,CAAC,0BAA0B,CAAC,eAAe,CAAC,CAAC,CAAC,IAAI,CAAC,0BAA0B,CAAC,CAAC;IACvF,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/__tests__/gate-render.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=gate-render.test.d.ts.map

package/dist/__tests__/gate-render.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"gate-render.test.d.ts","sourceRoot":"","sources":["../../src/__tests__/gate-render.test.ts"],"names":[],"mappings":""}

package/dist/__tests__/gate-render.test.js

@@ -0,0 +1,82 @@
+import { createSignal } from '@opensip-cli/core';
+import { describe, expect, it } from 'vitest';
+import { renderGateCompareLines, renderGateSaveLines } from '../gate-render.js';
+function sig(over = {}) {
+    return createSignal({
+        source: 'examplescan',
+        severity: 'high',
+        ruleId: 'secret',
+        message: 'A secret',
+        code: { file: 'src/a.ts', line: 3 },
+        ...over,
+    });
+}
+function result(over = {}) {
+    return { added: [], resolved: [], unchanged: [], degraded: false, ...over };
+}
+describe('renderGateSaveLines', () => {
+    it('reports the tool + finding count', () => {
+        expect(renderGateSaveLines('examplescan', 3)).toEqual([
+            'examplescan: baseline saved (project SQLite store)',
+            '  3 finding(s) recorded',
+        ]);
+    });
+});
+describe('renderGateCompareLines', () => {
+    it('renders STABLE when there is no change', () => {
+        const lines = renderGateCompareLines('examplescan', result({ unchanged: [sig()] }));
+        expect(lines[0]).toBe('examplescan gate compare');
+        expect(lines.at(-1)).toBe('✓ STABLE — no change');
+        expect(lines.join('\n')).toContain('Unchanged (1):');
+    });
+    it('renders DEGRADED with the net-new finding + message when added is non-empty', () => {
+        const added = sig({
+            ruleId: 'aws-key',
+            message: 'AWS Access Key',
+            code: { file: 'p.env', line: 9 },
+        });
+        const lines = renderGateCompareLines('examplescan', result({ added: [added], degraded: true }));
+        const text = lines.join('\n');
+        expect(text).toContain('Added (1):');
+        expect(text).toContain('aws-key');
+        expect(text).toContain('p.env:9');
+        expect(text).toContain('AWS Access Key');
+        expect(lines.at(-1)).toBe('✗ DEGRADED — 1 new finding');
+    });
+    it('pluralizes the DEGRADED footer for multiple new findings', () => {
+        const lines = renderGateCompareLines('examplescan', result({ added: [sig({ ruleId: 'a' }), sig({ ruleId: 'b' })], degraded: true }));
+        expect(lines.at(-1)).toBe('✗ DEGRADED — 2 new findings');
+    });
+    it('renders IMPROVED when findings resolved and none added', () => {
+        const lines = renderGateCompareLines('examplescan', result({ resolved: [sig(), sig({ ruleId: 'b' })] }));
+        expect(lines.join('\n')).toContain('Resolved (2):');
+        expect(lines.at(-1)).toBe('✓ IMPROVED — 2 findings resolved, none added');
+    });
+    it('samples the unchanged bucket to the first five with an overflow note', () => {
+        const unchanged = Array.from({ length: 7 }, (_, i) => sig({ ruleId: `r${i}`, code: { file: `f${i}.ts`, line: i } }));
+        const text = renderGateCompareLines('examplescan', result({ unchanged })).join('\n');
+        expect(text).toContain('Unchanged (7):');
+        expect(text).toContain('... and 2 more');
+    });
+    it('renders a no-location placeholder for a signal with no file', () => {
+        const noFile = sig({ code: { file: '' } });
+        const text = renderGateCompareLines('examplescan', result({ added: [noFile], degraded: true })).join('\n');
+        expect(text).toContain('(no location)');
+    });
+    it('orders same-rule findings by file then line, and truncates a long message', () => {
+        const longMsg = 'x'.repeat(200);
+        const added = [
+            sig({ ruleId: 'dup', message: longMsg, code: { file: 'b.ts', line: 9 } }),
+            sig({ ruleId: 'dup', message: longMsg, code: { file: 'a.ts', line: 2 } }),
+            sig({ ruleId: 'dup', message: longMsg, code: { file: 'a.ts', line: 1 } }),
+        ];
+        const lines = renderGateCompareLines('examplescan', result({ added, degraded: true }));
+        const locOrder = lines.filter((l) => l.includes('dup')).map((l) => l.split(/\s+/).at(-1));
+        expect(locOrder).toEqual(['a.ts:1', 'a.ts:2', 'b.ts:9']);
+        // The 200-char message is truncated with an ellipsis to <= 120 chars.
+        const msgLine = lines.find((l) => l.trimStart().startsWith('x'));
+        expect(msgLine?.trim().length).toBeLessThanOrEqual(120);
+        expect(msgLine).toContain('…');
+    });
+});
+//# sourceMappingURL=gate-render.test.js.map

package/dist/__tests__/gate-render.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"gate-render.test.js","sourceRoot":"","sources":["../../src/__tests__/gate-render.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAuC,MAAM,mBAAmB,CAAC;AACtF,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAE9C,OAAO,EAAE,sBAAsB,EAAE,mBAAmB,EAAE,MAAM,mBAAmB,CAAC;AAEhF,SAAS,GAAG,CAAC,OAAoD,EAAE;IACjE,OAAO,YAAY,CAAC;QAClB,MAAM,EAAE,aAAa;QACrB,QAAQ,EAAE,MAAM;QAChB,MAAM,EAAE,QAAQ;QAChB,OAAO,EAAE,UAAU;QACnB,IAAI,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC,EAAE;QACnC,GAAG,IAAI;KACR,CAAC,CAAC;AACL,CAAC;AAED,SAAS,MAAM,CAAC,OAAmC,EAAE;IACnD,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE,GAAG,IAAI,EAAE,CAAC;AAC9E,CAAC;AAED,QAAQ,CAAC,qBAAqB,EAAE,GAAG,EAAE;IACnC,EAAE,CAAC,kCAAkC,EAAE,GAAG,EAAE;QAC1C,MAAM,CAAC,mBAAmB,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC;YACpD,oDAAoD;YACpD,yBAAyB;SAC1B,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,wBAAwB,EAAE,GAAG,EAAE;IACtC,EAAE,CAAC,wCAAwC,EAAE,GAAG,EAAE;QAChD,MAAM,KAAK,GAAG,sBAAsB,CAAC,aAAa,EAAE,MAAM,CAAC,EAAE,SAAS,EAAE,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;QACpF,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,0BAA0B,CAAC,CAAC;QAClD,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAC;QAClD,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,gBAAgB,CAAC,CAAC;IACvD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,6EAA6E,EAAE,GAAG,EAAE;QACrF,MAAM,KAAK,GAAG,GAAG,CAAC;YAChB,MAAM,EAAE,SAAS;YACjB,OAAO,EAAE,gBAAgB;YACzB,IAAI,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,EAAE;SACjC,CAAC,CAAC;QACH,MAAM,KAAK,GAAG,sBAAsB,CAAC,aAAa,EAAE,MAAM,CAAC,EAAE,KAAK,EAAE,CAAC,KAAK,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;QAChG,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC9B,MAAM,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,YAAY,CAAC,CAAC;QACrC,MAAM,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;QAClC,MAAM,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;QAClC,MAAM,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,gBAAgB,CAAC,CAAC;QACzC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,4BAA4B,CAAC,CAAC;IAC1D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,0DAA0D,EAAE,GAAG,EAAE;QAClE,MAAM,KAAK,GAAG,sBAAsB,CAClC,aAAa,EACb,MAAM,CAAC,EAAE,KAAK,EAAE,CAAC,GAAG,CAAC,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,EAAE,GAAG,CAAC,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAChF,CAAC;QACF,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,6BAA6B,CAAC,CAAC;IAC3D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,wDAAwD,EAAE,GAAG,EAAE;QAChE,MAAM,KAAK,GAAG,sBAAsB,CAClC,aAAa,EACb,MAAM,CAAC,EAAE,QAAQ,EAAE,CAAC,GAAG,EAAE,EAAE,GAAG,CAAC,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC,CACpD,CAAC;QACF,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,eAAe,CAAC,CAAC;QACpD,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,8CAA8C,CAAC,CAAC;IAC5E,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,sEAAsE,EAAE,GAAG,EAAE;QAC9E,MAAM,SAAS,GAAG,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CACnD,GAAG,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,EAAE,EAAE,CAAC,CAC9D,CAAC;QACF,MAAM,IAAI,GAAG,sBAAsB,CAAC,aAAa,EAAE,MAAM,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACrF,MAAM,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,gBAAgB,CAAC,CAAC;QACzC,MAAM,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,gBAAgB,CAAC,CAAC;IAC3C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,6DAA6D,EAAE,GAAG,EAAE;QACrE,MAAM,MAAM,GAAG,GAAG,CAAC,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC;QAC3C,MAAM,IAAI,GAAG,sBAAsB,CACjC,aAAa,EACb,MAAM,CAAC,EAAE,KAAK,EAAE,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAC5C,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACb,MAAM,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,eAAe,CAAC,CAAC;IAC1C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,2EAA2E,EAAE,GAAG,EAAE;QACnF,MAAM,OAAO,GAAG,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAChC,MAAM,KAAK,GAAG;YACZ,GAAG,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,EAAE,EAAE,CAAC;YACzE,GAAG,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,EAAE,EAAE,CAAC;YACzE,GAAG,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,EAAE,EAAE,CAAC;SAC1E,CAAC;QACF,MAAM,KAAK,GAAG,sBAAsB,CAAC,aAAa,EAAE,MAAM,CAAC,EAAE,KAAK,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;QACvF,MAAM,QAAQ,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAC1F,MAAM,CAAC,QAAQ,CAAC,CAAC,OAAO,CAAC,CAAC,QAAQ,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAAC,CAAC;QACzD,sEAAsE;QACtE,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC;QACjE,MAAM,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,MAAM,CAAC,CAAC,mBAAmB,CAAC,GAAG,CAAC,CAAC;QACxD,MAAM,CAAC,OAAO,CAAC,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;IACjC,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/__tests__/ingest-json.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=ingest-json.test.d.ts.map

package/dist/__tests__/ingest-json.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ingest-json.test.d.ts","sourceRoot":"","sources":["../../src/__tests__/ingest-json.test.ts"],"names":[],"mappings":""}

package/dist/__tests__/ingest-json.test.js

@@ -0,0 +1,53 @@
+import { describe, expect, it } from 'vitest';
+import { asArray, asObject, getNumber, getString, navigate, safeParseJson, } from '../ingest-json.js';
+describe('safeParseJson', () => {
+    it('returns ok for valid JSON', () => {
+        expect(safeParseJson('{"a":1}')).toEqual({ ok: true, value: { a: 1 } });
+        expect(safeParseJson('[]')).toEqual({ ok: true, value: [] });
+    });
+    it('returns an error Result for malformed JSON instead of throwing', () => {
+        const result = safeParseJson('{not json');
+        expect(result.ok).toBe(false);
+        if (!result.ok)
+            expect(typeof result.error).toBe('string');
+    });
+});
+describe('asObject / asArray', () => {
+    it('narrows plain objects but not arrays or null', () => {
+        expect(asObject({ a: 1 })).toEqual({ a: 1 });
+        expect(asObject([])).toBeUndefined();
+        expect(asObject(null)).toBeUndefined();
+        expect(asObject('x')).toBeUndefined();
+    });
+    it('narrows arrays only', () => {
+        expect(asArray([1, 2])).toEqual([1, 2]);
+        expect(asArray({})).toBeUndefined();
+    });
+});
+describe('getString / getNumber', () => {
+    it('reads typed properties', () => {
+        expect(getString({ k: 'v' }, 'k')).toBe('v');
+        expect(getString({ k: 1 }, 'k')).toBeUndefined();
+        expect(getString(undefined, 'k')).toBeUndefined();
+    });
+    it('coerces numeric strings for numbers', () => {
+        expect(getNumber({ k: 3 }, 'k')).toBe(3);
+        expect(getNumber({ k: '7.5' }, 'k')).toBe(7.5);
+        expect(getNumber({ k: 'nope' }, 'k')).toBeUndefined();
+        expect(getNumber({ k: Number.NaN }, 'k')).toBeUndefined();
+        expect(getNumber({}, 'k')).toBeUndefined();
+    });
+});
+describe('navigate', () => {
+    const doc = { results: [{ packages: [{ id: 'GHSA-1' }] }] };
+    it('descends objects and array indices', () => {
+        expect(navigate(doc, ['results', '0', 'packages', '0', 'id'])).toBe('GHSA-1');
+    });
+    it('returns undefined on a missing or wrong-typed step', () => {
+        expect(navigate(doc, ['results', '9', 'id'])).toBeUndefined();
+        expect(navigate(doc, ['missing'])).toBeUndefined();
+        expect(navigate(null, ['x'])).toBeUndefined();
+        expect(navigate(doc, ['results', 'notanindex'])).toBeUndefined();
+    });
+});
+//# sourceMappingURL=ingest-json.test.js.map

package/dist/__tests__/ingest-json.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ingest-json.test.js","sourceRoot":"","sources":["../../src/__tests__/ingest-json.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAE9C,OAAO,EACL,OAAO,EACP,QAAQ,EACR,SAAS,EACT,SAAS,EACT,QAAQ,EACR,aAAa,GACd,MAAM,mBAAmB,CAAC;AAE3B,QAAQ,CAAC,eAAe,EAAE,GAAG,EAAE;IAC7B,EAAE,CAAC,2BAA2B,EAAE,GAAG,EAAE;QACnC,MAAM,CAAC,aAAa,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC;QACxE,MAAM,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,CAAC;IAC/D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,gEAAgE,EAAE,GAAG,EAAE;QACxE,MAAM,MAAM,GAAG,aAAa,CAAC,WAAW,CAAC,CAAC;QAC1C,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC9B,IAAI,CAAC,MAAM,CAAC,EAAE;YAAE,MAAM,CAAC,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IAC7D,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,oBAAoB,EAAE,GAAG,EAAE;IAClC,EAAE,CAAC,8CAA8C,EAAE,GAAG,EAAE;QACtD,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;QAC7C,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC,aAAa,EAAE,CAAC;QACrC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,aAAa,EAAE,CAAC;QACvC,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,aAAa,EAAE,CAAC;IACxC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,qBAAqB,EAAE,GAAG,EAAE;QAC7B,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;QACxC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,aAAa,EAAE,CAAC;IACtC,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,uBAAuB,EAAE,GAAG,EAAE;IACrC,EAAE,CAAC,wBAAwB,EAAE,GAAG,EAAE;QAChC,MAAM,CAAC,SAAS,CAAC,EAAE,CAAC,EAAE,GAAG,EAAE,EAAE,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC7C,MAAM,CAAC,SAAS,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC,CAAC,aAAa,EAAE,CAAC;QACjD,MAAM,CAAC,SAAS,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC,CAAC,aAAa,EAAE,CAAC;IACpD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,qCAAqC,EAAE,GAAG,EAAE;QAC7C,MAAM,CAAC,SAAS,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACzC,MAAM,CAAC,SAAS,CAAC,EAAE,CAAC,EAAE,KAAK,EAAE,EAAE,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC/C,MAAM,CAAC,SAAS,CAAC,EAAE,CAAC,EAAE,MAAM,EAAE,EAAE,GAAG,CAAC,CAAC,CAAC,aAAa,EAAE,CAAC;QACtD,MAAM,CAAC,SAAS,CAAC,EAAE,CAAC,EAAE,MAAM,CAAC,GAAG,EAAE,EAAE,GAAG,CAAC,CAAC,CAAC,aAAa,EAAE,CAAC;QAC1D,MAAM,CAAC,SAAS,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC,CAAC,aAAa,EAAE,CAAC;IAC7C,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,UAAU,EAAE,GAAG,EAAE;IACxB,MAAM,GAAG,GAAG,EAAE,OAAO,EAAE,CAAC,EAAE,QAAQ,EAAE,CAAC,EAAE,EAAE,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC;IAE5D,EAAE,CAAC,oCAAoC,EAAE,GAAG,EAAE;QAC5C,MAAM,CAAC,QAAQ,CAAC,GAAG,EAAE,CAAC,SAAS,EAAE,GAAG,EAAE,UAAU,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IAChF,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,oDAAoD,EAAE,GAAG,EAAE;QAC5D,MAAM,CAAC,QAAQ,CAAC,GAAG,EAAE,CAAC,SAAS,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,aAAa,EAAE,CAAC;QAC9D,MAAM,CAAC,QAAQ,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,aAAa,EAAE,CAAC;QACnD,MAAM,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,aAAa,EAAE,CAAC;QAC9C,MAAM,CAAC,QAAQ,CAAC,GAAG,EAAE,CAAC,SAAS,EAAE,YAAY,CAAC,CAAC,CAAC,CAAC,aAAa,EAAE,CAAC;IACnE,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/__tests__/ingest-sarif.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=ingest-sarif.test.d.ts.map

package/dist/__tests__/ingest-sarif.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ingest-sarif.test.d.ts","sourceRoot":"","sources":["../../src/__tests__/ingest-sarif.test.ts"],"names":[],"mappings":""}