@opensip-cli/graph 0.1.0

package/dist/cli/build-envelope.js

@@ -0,0 +1,88 @@
+/**
+ * @fileoverview Graph's signal-envelope assembly (ADR-0011, Phase 5).
+ *
+ * Collapses a graph run's flat `Signal[]` into the one tool-run
+ * {@link SignalEnvelope}: the shared output currency the composition root
+ * renders (table), emits (`--json`), and delivers (cloud + `--report-to`).
+ *
+ * SARIF ruleId decision — Option A (ADR-0011, Phase 5): at envelope assembly
+ * each signal's engine slug (`graph:<rule>`) is mapped to its OpenSIP-
+ * convention rule ID (`graph.<family>.<rule>`) via
+ * {@link mapEngineSlugToOpenSipRuleId}, set on BOTH `ruleId` AND `source`. One
+ * canonical id then flows to `--json`, the terminal table (grouped by
+ * `signal.source`), and SARIF (`signal.ruleId`). `mapEngineSlugToOpenSipRuleId`
+ * stays graph-owned (tool vocabulary does not belong in the tool-agnostic
+ * output layer).
+ *
+ * Fingerprints (ADR-0036): this builder passes `graphFingerprintStrategy`
+ * (`ruleId|filePath|line|col`, `baseline-strategy.ts`) to
+ * {@link buildSignalEnvelope}, which stamps every signal at construction — so
+ * each built envelope (gate, `--json`, cloud, SARIF) is gate-ready, not just
+ * the gate path. The strategy is applied AFTER the Option-A `ruleId` remap
+ * below, so fingerprints are computed over the canonical (OpenSIP-convention)
+ * rule IDs — byte-identical to the prior post-hoc gate-path stamping. The
+ * dashboard session payload (`persistence/session-payload.ts`) keeps
+ * the engine slug (its metric-column keys are engine slugs).
+ *
+ * Pure: no IO, no clock, no id generation — `runId`/`createdAt` arrive on the
+ * input (formatter-purity contract).
+ */
+import { buildSignalEnvelope } from '@opensip-cli/contracts';
+import { isErrorSignal, resolveVerdictPolicy } from '@opensip-cli/core';
+import { graphFingerprintStrategy } from '../baseline-strategy.js';
+import { mapEngineSlugToOpenSipRuleId } from '../render/rule-id-mapping.js';
+/**
+ * Assemble the graph run's {@link SignalEnvelope}.
+ *
+ * Each signal is remapped to its OpenSIP rule ID (Option A) on both `ruleId`
+ * and `source`; signals are then grouped by that mapped source into one
+ * {@link UnitResult} per rule that fired (`passed` ⇔ no `critical`/`high` in
+ * that group). A rule that emitted no signals produces no unit row — graph's
+ * `RunGraphResult` does not carry the full ran-rule set, matching the prior
+ * `buildCliOutput` behaviour (one `CheckOutput` per rule that fired).
+ */
+export function buildGraphEnvelope(input) {
+    const mapped = input.signals.map((signal) => {
+        const ruleId = mapEngineSlugToOpenSipRuleId(signal.ruleId);
+        return { ...signal, ruleId, source: ruleId };
+    });
+    const bySource = new Map();
+    for (const signal of mapped) {
+        const bucket = bySource.get(signal.source);
+        if (bucket)
+            bucket.push(signal);
+        else
+            bySource.set(signal.source, [signal]);
+    }
+    const units = [];
+    for (const [slug, group] of bySource) {
+        const hasError = group.some(isErrorSignal);
+        units.push({
+            slug,
+            passed: !hasError,
+            violationCount: group.length,
+            durationMs: 0,
+        });
+    }
+    return buildSignalEnvelope({
+        tool: 'graph',
+        recipe: input.recipe,
+        runId: input.runId,
+        createdAt: input.createdAt,
+        units,
+        signals: mapped,
+        // ADR-0035: graph declares no failOn* keys, so it inherits the host fallback
+        // {1,0} — reproducing gate-save's "any error-level finding fails" exactly.
+        // Graph has no pre-unit fault concept, so runFaulted stays false.
+        policy: resolveVerdictPolicy('graph'),
+        runFaulted: false,
+        // ADR-0036: graph's byte-preserved identity, stamped at construction (over
+        // the remapped canonical ruleIds — see the header note).
+        fingerprintStrategy: graphFingerprintStrategy,
+        // Honest-approximation marker: surfaced ONLY when the run was fast, so
+        // machine consumers see that edges are syntactic/approximate. An exact
+        // (or absent) tier carries no marker — parity with the prior CliOutput.
+        ...(input.resolutionMode === 'fast' ? { resolutionMode: 'fast' } : {}),
+    });
+}
+//# sourceMappingURL=build-envelope.js.map

package/dist/cli/build-envelope.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"build-envelope.js","sourceRoot":"","sources":["../../src/cli/build-envelope.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AAEH,OAAO,EAAE,mBAAmB,EAAE,MAAM,wBAAwB,CAAC;AAC7D,OAAO,EAAE,aAAa,EAAE,oBAAoB,EAAE,MAAM,mBAAmB,CAAC;AAExE,OAAO,EAAE,wBAAwB,EAAE,MAAM,yBAAyB,CAAC;AACnE,OAAO,EAAE,4BAA4B,EAAE,MAAM,8BAA8B,CAAC;AAgB5E;;;;;;;;;GASG;AACH,MAAM,UAAU,kBAAkB,CAAC,KAA8B;IAC/D,MAAM,MAAM,GAAa,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE;QACpD,MAAM,MAAM,GAAG,4BAA4B,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QAC3D,OAAO,EAAE,GAAG,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;IAC/C,CAAC,CAAC,CAAC;IAEH,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAoB,CAAC;IAC7C,KAAK,MAAM,MAAM,IAAI,MAAM,EAAE,CAAC;QAC5B,MAAM,MAAM,GAAG,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QAC3C,IAAI,MAAM;YAAE,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;;YAC3B,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC;IAC7C,CAAC;IAED,MAAM,KAAK,GAAiB,EAAE,CAAC;IAC/B,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,QAAQ,EAAE,CAAC;QACrC,MAAM,QAAQ,GAAG,KAAK,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;QAC3C,KAAK,CAAC,IAAI,CAAC;YACT,IAAI;YACJ,MAAM,EAAE,CAAC,QAAQ;YACjB,cAAc,EAAE,KAAK,CAAC,MAAM;YAC5B,UAAU,EAAE,CAAC;SACd,CAAC,CAAC;IACL,CAAC;IAED,OAAO,mBAAmB,CAAC;QACzB,IAAI,EAAE,OAAO;QACb,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,KAAK,EAAE,KAAK,CAAC,KAAK;QAClB,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,KAAK;QACL,OAAO,EAAE,MAAM;QACf,6EAA6E;QAC7E,2EAA2E;QAC3E,kEAAkE;QAClE,MAAM,EAAE,oBAAoB,CAAC,OAAO,CAAC;QACrC,UAAU,EAAE,KAAK;QACjB,2EAA2E;QAC3E,yDAAyD;QACzD,mBAAmB,EAAE,wBAAwB;QAC7C,uEAAuE;QACvE,uEAAuE;QACvE,wEAAwE;QACxE,GAAG,CAAC,KAAK,CAAC,cAAc,KAAK,MAAM,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,MAAe,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAChF,CAAC,CAAC;AACL,CAAC"}

package/dist/cli/detect.d.ts

@@ -0,0 +1,37 @@
+/**
+ * Language detection for the `graph` CLI. Scans the project root for
+ * known language marker files (tsconfig.json, Cargo.toml, pyproject.toml,
+ * etc.) and returns the set of canonical adapter ids that apply. All
+ * matched adapters apply simultaneously (polyglot per spec D6).
+ *
+ * Detection is filtered by the registry — markers whose adapter isn't
+ * registered in the current CLI bootstrap are reported in
+ * `matchedMarkers` but excluded from `adapterIds`.
+ */
+import { type LanguageRegistry } from '@opensip-cli/core';
+interface DetectionMatch {
+    readonly marker: string;
+    readonly adapterId: string;
+}
+/**
+ * Result of a project-root language scan. `adapterIds` is the
+ * authoritative list of adapters the CLI should query; `matchedMarkers`
+ * is diagnostic context (which marker files fired, useful for error
+ * messages when an adapter is unregistered).
+ */
+export interface DetectionResult {
+    /** Canonical adapter ids of the languages detected at `rootDir`. */
+    readonly adapterIds: readonly string[];
+    /** Marker files actually found, paired with the adapter they identified. */
+    readonly matchedMarkers: readonly DetectionMatch[];
+}
+/**
+ * Scan the project root for known language marker files. Returns ALL
+ * matched adapter ids (polyglot supported). Only adapters registered
+ * with the given registry are surfaced — if an adapter isn't registered,
+ * its markers are still recorded in `matchedMarkers` but filtered from
+ * `adapterIds` (defensive against partial CLI bootstrap configurations).
+ */
+export declare function detectLanguages(rootDir: string, registry: LanguageRegistry): DetectionResult;
+export {};
+//# sourceMappingURL=detect.d.ts.map

package/dist/cli/detect.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"detect.d.ts","sourceRoot":"","sources":["../../src/cli/detect.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAKH,OAAO,EAAU,KAAK,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AAuBlE,UAAU,cAAc;IACtB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;CAC5B;AAED;;;;;GAKG;AACH,MAAM,WAAW,eAAe;IAC9B,oEAAoE;IACpE,QAAQ,CAAC,UAAU,EAAE,SAAS,MAAM,EAAE,CAAC;IACvC,4EAA4E;IAC5E,QAAQ,CAAC,cAAc,EAAE,SAAS,cAAc,EAAE,CAAC;CACpD;AAED;;;;;;GAMG;AACH,wBAAgB,eAAe,CAAC,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,gBAAgB,GAAG,eAAe,CAiB5F"}

package/dist/cli/detect.js

@@ -0,0 +1,60 @@
+/**
+ * Language detection for the `graph` CLI. Scans the project root for
+ * known language marker files (tsconfig.json, Cargo.toml, pyproject.toml,
+ * etc.) and returns the set of canonical adapter ids that apply. All
+ * matched adapters apply simultaneously (polyglot per spec D6).
+ *
+ * Detection is filtered by the registry — markers whose adapter isn't
+ * registered in the current CLI bootstrap are reported in
+ * `matchedMarkers` but excluded from `adapterIds`.
+ */
+import { existsSync } from 'node:fs';
+import { join } from 'node:path';
+import { logger } from '@opensip-cli/core';
+const MODULE_GRAPH_CLI = 'graph:cli';
+/**
+ * Marker-file → canonical adapter id. Order matters only for
+ * documentation; detection returns ALL matches (polyglot).
+ */
+const MARKER_MAP = [
+    { marker: 'tsconfig.json', adapterId: 'typescript' },
+    { marker: 'package.json', adapterId: 'typescript' },
+    { marker: 'Cargo.toml', adapterId: 'rust' },
+    { marker: 'pyproject.toml', adapterId: 'python' },
+    { marker: 'setup.py', adapterId: 'python' },
+    { marker: 'setup.cfg', adapterId: 'python' },
+    { marker: 'go.mod', adapterId: 'go' },
+    { marker: 'pom.xml', adapterId: 'java' },
+    { marker: 'build.gradle', adapterId: 'java' },
+    { marker: 'build.gradle.kts', adapterId: 'java' },
+    { marker: 'CMakeLists.txt', adapterId: 'cpp' },
+    { marker: 'meson.build', adapterId: 'cpp' },
+];
+/**
+ * Scan the project root for known language marker files. Returns ALL
+ * matched adapter ids (polyglot supported). Only adapters registered
+ * with the given registry are surfaced — if an adapter isn't registered,
+ * its markers are still recorded in `matchedMarkers` but filtered from
+ * `adapterIds` (defensive against partial CLI bootstrap configurations).
+ */
+export function detectLanguages(rootDir, registry) {
+    logger.info({ evt: 'graph.cli.detect.start', module: MODULE_GRAPH_CLI, rootDir });
+    const matchedMarkers = [];
+    const adapterIdSet = new Set();
+    for (const { marker, adapterId } of MARKER_MAP) {
+        if (!existsSync(join(rootDir, marker)))
+            continue;
+        matchedMarkers.push({ marker, adapterId });
+        if (registry.get(adapterId) === undefined)
+            continue;
+        adapterIdSet.add(adapterId);
+    }
+    const adapterIds = [...adapterIdSet];
+    logger.info({
+        evt: adapterIds.length > 1 ? 'graph.cli.detect.polyglot' : 'graph.cli.detect.result',
+        module: MODULE_GRAPH_CLI,
+        adapterIds,
+    });
+    return { adapterIds, matchedMarkers };
+}
+//# sourceMappingURL=detect.js.map

package/dist/cli/detect.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"detect.js","sourceRoot":"","sources":["../../src/cli/detect.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACrC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAEjC,OAAO,EAAE,MAAM,EAAyB,MAAM,mBAAmB,CAAC;AAElE,MAAM,gBAAgB,GAAG,WAAW,CAAC;AAErC;;;GAGG;AACH,MAAM,UAAU,GAAuE;IACrF,EAAE,MAAM,EAAE,eAAe,EAAE,SAAS,EAAE,YAAY,EAAE;IACpD,EAAE,MAAM,EAAE,cAAc,EAAE,SAAS,EAAE,YAAY,EAAE;IACnD,EAAE,MAAM,EAAE,YAAY,EAAE,SAAS,EAAE,MAAM,EAAE;IAC3C,EAAE,MAAM,EAAE,gBAAgB,EAAE,SAAS,EAAE,QAAQ,EAAE;IACjD,EAAE,MAAM,EAAE,UAAU,EAAE,SAAS,EAAE,QAAQ,EAAE;IAC3C,EAAE,MAAM,EAAE,WAAW,EAAE,SAAS,EAAE,QAAQ,EAAE;IAC5C,EAAE,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,IAAI,EAAE;IACrC,EAAE,MAAM,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,EAAE;IACxC,EAAE,MAAM,EAAE,cAAc,EAAE,SAAS,EAAE,MAAM,EAAE;IAC7C,EAAE,MAAM,EAAE,kBAAkB,EAAE,SAAS,EAAE,MAAM,EAAE;IACjD,EAAE,MAAM,EAAE,gBAAgB,EAAE,SAAS,EAAE,KAAK,EAAE;IAC9C,EAAE,MAAM,EAAE,aAAa,EAAE,SAAS,EAAE,KAAK,EAAE;CAC5C,CAAC;AAoBF;;;;;;GAMG;AACH,MAAM,UAAU,eAAe,CAAC,OAAe,EAAE,QAA0B;IACzE,MAAM,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,wBAAwB,EAAE,MAAM,EAAE,gBAAgB,EAAE,OAAO,EAAE,CAAC,CAAC;IAClF,MAAM,cAAc,GAAqB,EAAE,CAAC;IAC5C,MAAM,YAAY,GAAG,IAAI,GAAG,EAAU,CAAC;IACvC,KAAK,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,IAAI,UAAU,EAAE,CAAC;QAC/C,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;YAAE,SAAS;QACjD,cAAc,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC;QAC3C,IAAI,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,KAAK,SAAS;YAAE,SAAS;QACpD,YAAY,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;IAC9B,CAAC;IACD,MAAM,UAAU,GAAG,CAAC,GAAG,YAAY,CAAC,CAAC;IACrC,MAAM,CAAC,IAAI,CAAC;QACV,GAAG,EAAE,UAAU,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,2BAA2B,CAAC,CAAC,CAAC,yBAAyB;QACpF,MAAM,EAAE,gBAAgB;QACxB,UAAU;KACX,CAAC,CAAC;IACH,OAAO,EAAE,UAAU,EAAE,cAAc,EAAE,CAAC;AACxC,CAAC"}

package/dist/cli/equivalence-check-command.d.ts

@@ -0,0 +1,45 @@
+/**
+ * `graph-equivalence-check` — the REAL-REPO sharded≡exact equivalence guardrail
+ * command handler.
+ *
+ * Builds BOTH catalogs on the target repo (default: cwd) with the REAL language
+ * adapter — so workspace `@scope/pkg` imports resolve through Node16 to built
+ * `dist/*.d.ts`, the exact divergence class the exact-engine-under-resolution
+ * bug lived in (which the SYNTHETIC in-test harness cannot model):
+ *   - EXACT single-program catalog via `runGraph` (the `--exact` path), and
+ *   - SHARDED catalog via `runShardedGraph`, sharded the SAME way a production
+ *     `graph` run shards (`resolveShardsForCwd`).
+ * Both COLD + no-cache + no datastore (a fresh in-memory oracle every run), and
+ * with an EMPTY rule set (the catalog — functions + edges + SCCs — is the diff
+ * currency; rules only produce signals, so skipping them keeps the run lean).
+ *
+ * It then diffs (`diffCatalogs`), classifies the residual by OWNER FILE
+ * (test/fixture-owned ⇒ gate-invisible/benign; production ⇒ the meaningful
+ * signal), and compares the PRODUCTION count to the committed budget
+ * (`.config/graph-equivalence-budget.json`). Exits non-zero on a budget breach
+ * (a regression) or any function-set / SCC divergence. A decrease passes with a
+ * tighten hint. `--update-budget` rewrites the budget to the observed production
+ * count (capture the initial residual / tighten the ratchet).
+ *
+ * Heap: the exact build over ~1500 files needs adequate heap; the CI step runs
+ * the compiled engine under `NODE_OPTIONS=--max-old-space-size=...` (see
+ * `.github/workflows/ci.yml`). This command does NOT run heap-preflight (that is
+ * the interactive `graph` path); it relies on the CI step's NODE_OPTIONS.
+ */
+import type { ToolCliContext } from '@opensip-cli/core';
+export interface EquivalenceCheckOptions {
+    readonly cwd: string;
+    /** Override the budget file path (relative to cwd or absolute). */
+    readonly budget?: string;
+    /** Rewrite the budget file to the observed production divergence count. */
+    readonly updateBudget?: boolean;
+}
+/**
+ * Run the real-repo sharded≡exact equivalence guardrail and set the process
+ * exit code via `cli.setExitCode`. Never propagates: every error raised in the
+ * body (no CLI entry script, non-shardable repo, a failed catalog build, a
+ * missing/invalid budget) is caught locally and converted to
+ * `EXIT_CODES.RUNTIME_ERROR` — so this function does not throw to its caller.
+ */
+export declare function executeEquivalenceCheck(opts: EquivalenceCheckOptions, cli: ToolCliContext): Promise<void>;
+//# sourceMappingURL=equivalence-check-command.d.ts.map

package/dist/cli/equivalence-check-command.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"equivalence-check-command.d.ts","sourceRoot":"","sources":["../../src/cli/equivalence-check-command.ts"],"names":[],"mappings":"AAEA;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AAoBH,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AAOxD,MAAM,WAAW,uBAAuB;IACtC,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,mEAAmE;IACnE,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,2EAA2E;IAC3E,QAAQ,CAAC,YAAY,CAAC,EAAE,OAAO,CAAC;CACjC;AAwFD;;;;;;GAMG;AAEH,wBAAsB,uBAAuB,CAC3C,IAAI,EAAE,uBAAuB,EAC7B,GAAG,EAAE,cAAc,GAClB,OAAO,CAAC,IAAI,CAAC,CAmEf"}

package/dist/cli/equivalence-check-command.js

@@ -0,0 +1,196 @@
+// @fitness-ignore-file no-direct-stdout-in-tool-engine -- internal dogfood/CI guardrail subcommand: `graph-equivalence-check` writes its multi-line PASS/FAIL report to stdout and sets its own exit code (a CI gate, the documented non-Ink raw-stream exception). This is not the signal-envelope run output (ADR-0011).
+// @fitness-ignore-file only-documented-toolcli-seams -- same rationale as above: this internal CI-gate subcommand owns its stdout report and exit code; it is not user-facing run output through a ToolCliContext seam.
+/**
+ * `graph-equivalence-check` — the REAL-REPO sharded≡exact equivalence guardrail
+ * command handler.
+ *
+ * Builds BOTH catalogs on the target repo (default: cwd) with the REAL language
+ * adapter — so workspace `@scope/pkg` imports resolve through Node16 to built
+ * `dist/*.d.ts`, the exact divergence class the exact-engine-under-resolution
+ * bug lived in (which the SYNTHETIC in-test harness cannot model):
+ *   - EXACT single-program catalog via `runGraph` (the `--exact` path), and
+ *   - SHARDED catalog via `runShardedGraph`, sharded the SAME way a production
+ *     `graph` run shards (`resolveShardsForCwd`).
+ * Both COLD + no-cache + no datastore (a fresh in-memory oracle every run), and
+ * with an EMPTY rule set (the catalog — functions + edges + SCCs — is the diff
+ * currency; rules only produce signals, so skipping them keeps the run lean).
+ *
+ * It then diffs (`diffCatalogs`), classifies the residual by OWNER FILE
+ * (test/fixture-owned ⇒ gate-invisible/benign; production ⇒ the meaningful
+ * signal), and compares the PRODUCTION count to the committed budget
+ * (`.config/graph-equivalence-budget.json`). Exits non-zero on a budget breach
+ * (a regression) or any function-set / SCC divergence. A decrease passes with a
+ * tighten hint. `--update-budget` rewrites the budget to the observed production
+ * count (capture the initial residual / tighten the ratchet).
+ *
+ * Heap: the exact build over ~1500 files needs adequate heap; the CI step runs
+ * the compiled engine under `NODE_OPTIONS=--max-old-space-size=...` (see
+ * `.github/workflows/ci.yml`). This command does NOT run heap-preflight (that is
+ * the interactive `graph` path); it relies on the CI step's NODE_OPTIONS.
+ */
+import { readFileSync, writeFileSync, existsSync, mkdirSync } from 'node:fs';
+import { dirname, resolve } from 'node:path';
+import { EXIT_CODES } from '@opensip-cli/contracts';
+import { logger } from '@opensip-cli/core';
+import { pickAdapter } from '../lang-adapter/registry.js';
+import { resolveShardsForCwd } from './graph.js';
+import { buildEquivalenceReport, judgeEquivalence, } from './orchestrate/equivalence-check.js';
+import { runGraph, runShardedGraph } from './orchestrate.js';
+const MODULE = 'graph:cli';
+/** Default committed budget path, relative to the target repo root. */
+const DEFAULT_BUDGET_REL = '.config/graph-equivalence-budget.json';
+const BUDGET_NOTE = 'Accepted PRODUCTION (non-test/fixture) sharded≡exact RESOLVED-edge divergences ' +
+    'on this repo, classified by DIRECTION on the unified model (ADR-0033): phantom ' +
+    '(sharded-only / exact-declined), decline (exact-only / sharded-declined), and ' +
+    'conflict (both resolved, different targets — the same-name disambiguation class). ' +
+    'functionsOnly{Exact,Sharded} MUST be 0 (a hard failure). A run EXCEEDING any ' +
+    'direction’s floor fails graph-equivalence-check (a NEW divergence on the ' +
+    'unified model — direction tells you which bound is insufficient). This is a ' +
+    'ratchet: a decrease passes and prints a hint to tighten that number. The pinned-' +
+    'corpus resolution-completeness floor lives in resolution-completeness-floor.test.ts.';
+/** Numeric divergence keys every budget file must carry. */
+const BUDGET_KEYS = [
+    'phantomDivergences',
+    'declineDivergences',
+    'conflictDivergences',
+    'sccDivergences',
+];
+/** Read + validate the committed budget. A missing file is a configuration error
+ *  (the budget is committed; CI must compare against it), unless --update-budget
+ *  is set (then a missing file is seeded).
+ *  @throws {Error} If the budget file is missing/unreadable, is not valid JSON, or
+ *    does not carry every numeric key in {@link BUDGET_KEYS}. */
+function loadBudget(path) {
+    // Structured-doc load: the budget is a small committed JSON file parsed
+    // immediately — bounded by nature, not a streamed blob.
+    const parsed = JSON.parse(readFileSync(path, 'utf8'));
+    const rec = parsed;
+    if (typeof rec !== 'object' ||
+        rec === null ||
+        BUDGET_KEYS.some((k) => typeof rec[k] !== 'number')) {
+        const keyList = BUDGET_KEYS.map((k) => `"${k}"`).join(', ');
+        throw new Error(`Invalid budget file ${path}: expected numeric { ${keyList} }.`);
+    }
+    const obj = parsed;
+    return {
+        phantomDivergences: obj.phantomDivergences,
+        declineDivergences: obj.declineDivergences,
+        conflictDivergences: obj.conflictDivergences,
+        sccDivergences: obj.sccDivergences,
+        ...(typeof obj.note === 'string' ? { note: obj.note } : {}),
+    };
+}
+function writeBudget(path, verdict) {
+    const budget = {
+        phantomDivergences: verdict.phantomCount,
+        declineDivergences: verdict.declineCount,
+        conflictDivergences: verdict.conflictCount,
+        sccDivergences: verdict.sccCount,
+        note: BUDGET_NOTE,
+    };
+    mkdirSync(dirname(path), { recursive: true });
+    writeFileSync(path, `${JSON.stringify(budget, null, 2)}\n`, 'utf8');
+}
+/** Build the exact single-program catalog (the oracle): cold, no cache, no
+ *  datastore, empty rule set. */
+async function buildExactCatalog(cwd) {
+    const result = await runGraph({ cwd, noCache: true, resolution: 'exact', rules: [] });
+    return result.catalog;
+}
+/** Build the sharded catalog: cold, no cache, no datastore, empty rule set. */
+async function buildShardedCatalog(input) {
+    const result = await runShardedGraph({
+        shards: input.shards,
+        projectRoot: input.projectRoot,
+        cliScript: input.cliScript,
+        adapter: pickAdapter(input.projectRoot),
+        resolutionMode: input.resolutionMode,
+        useCache: false,
+        catalogRepo: null,
+        rules: [],
+    });
+    return result.catalog;
+}
+/**
+ * Run the real-repo sharded≡exact equivalence guardrail and set the process
+ * exit code via `cli.setExitCode`. Never propagates: every error raised in the
+ * body (no CLI entry script, non-shardable repo, a failed catalog build, a
+ * missing/invalid budget) is caught locally and converted to
+ * `EXIT_CODES.RUNTIME_ERROR` — so this function does not throw to its caller.
+ */
+// @fitness-ignore-next-line throws-documentation -- All throws in the body are caught by this function's own try/catch and converted to an exit code; the function never propagates an error to its caller, so a caller-facing @throws tag would be inaccurate.
+export async function executeEquivalenceCheck(opts, cli) {
+    const cwd = resolve(opts.cwd);
+    const budgetPath = opts.budget ? resolve(cwd, opts.budget) : resolve(cwd, DEFAULT_BUDGET_REL);
+    logger.info({ evt: 'graph.cli.equivalence_check.start', module: MODULE, cwd, budgetPath });
+    try {
+        const cliScript = process.argv[1] ?? '';
+        if (cliScript.length === 0) {
+            throw new Error('graph-equivalence-check: no CLI entry script (process.argv[1]) to spawn shard workers.');
+        }
+        const shards = await resolveShardsForCwd(cwd, cliScript, cli);
+        if (shards.length <= 1) {
+            throw new Error(`graph-equivalence-check: ${cwd} is not shardable (${String(shards.length)} shard(s)). ` +
+                'The comparison requires a multi-package (shardable) repo so the sharded and ' +
+                'exact engines actually diverge through real dist/*.d.ts resolution.');
+        }
+        const report = await buildEquivalenceReport({
+            cwd,
+            shards,
+            cliScript,
+            buildExact: buildExactCatalog,
+            buildSharded: buildShardedCatalog,
+        });
+        const seedMissing = opts.updateBudget === true && !existsSync(budgetPath);
+        const budget = seedMissing
+            ? {
+                phantomDivergences: report.productionPhantom.length,
+                declineDivergences: report.productionDecline.length,
+                conflictDivergences: report.productionConflict.length,
+                sccDivergences: report.sccDifferences.length,
+            }
+            : loadBudget(budgetPath);
+        const verdict = judgeEquivalence(report, budget);
+        for (const line of verdict.lines)
+            process.stdout.write(`${line}\n`);
+        if (opts.updateBudget === true) {
+            // @fitness-ignore-next-line detached-promises -- writeBudget is a synchronous void helper (writeFileSync); there is no promise to await.
+            writeBudget(budgetPath, verdict);
+            process.stdout.write(`Wrote budget phantom=${String(verdict.phantomCount)} ` +
+                `decline=${String(verdict.declineCount)} conflict=${String(verdict.conflictCount)} ` +
+                `scc=${String(verdict.sccCount)} to ${budgetPath}\n`);
+            // --update-budget is a capture/tighten action, not a gate run: always
+            // exit 0 so a maintainer can record the new floor without the (now-stale)
+            // budget failing the same invocation.
+            cli.setExitCode(EXIT_CODES.SUCCESS);
+            // @fitness-ignore-next-line detached-promises -- logEnd is a synchronous void helper (logger.info); there is no promise to await.
+            logEnd(report, verdict, false);
+            return;
+        }
+        cli.setExitCode(verdict.failed ? EXIT_CODES.RUNTIME_ERROR : EXIT_CODES.SUCCESS);
+        // @fitness-ignore-next-line detached-promises -- logEnd is a synchronous void helper (logger.info); there is no promise to await.
+        logEnd(report, verdict, verdict.failed);
+    }
+    catch (error) {
+        const message = error instanceof Error ? error.message : String(error);
+        logger.error({ evt: 'graph.cli.equivalence_check.error', module: MODULE, err: message });
+        process.stderr.write(`graph-equivalence-check: ${message}\n`);
+        cli.setExitCode(EXIT_CODES.RUNTIME_ERROR);
+    }
+}
+function logEnd(report, verdict, failed) {
+    logger.info({
+        evt: 'graph.cli.equivalence_check.complete',
+        module: MODULE,
+        failed,
+        productionResolved: report.productionResolvedDifferences.length,
+        phantom: verdict.phantomCount,
+        decline: verdict.declineCount,
+        conflict: verdict.conflictCount,
+        testResolved: report.testResolvedDifferences.length,
+        structural: report.structuralDifferences.length,
+        scc: report.sccDifferences.length,
+        sccBudget: verdict.sccBudget,
+    });
+}
+//# sourceMappingURL=equivalence-check-command.js.map

package/dist/cli/equivalence-check-command.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"equivalence-check-command.js","sourceRoot":"","sources":["../../src/cli/equivalence-check-command.ts"],"names":[],"mappings":"AAAA,2TAA2T;AAC3T,wNAAwN;AACxN;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AAEH,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AAC7E,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAE7C,OAAO,EAAE,UAAU,EAAE,MAAM,wBAAwB,CAAC;AACpD,OAAO,EAAE,MAAM,EAAE,MAAM,mBAAmB,CAAC;AAE3C,OAAO,EAAE,WAAW,EAAE,MAAM,6BAA6B,CAAC;AAE1D,OAAO,EAAE,mBAAmB,EAAE,MAAM,YAAY,CAAC;AACjD,OAAO,EACL,sBAAsB,EACtB,gBAAgB,GAGjB,MAAM,oCAAoC,CAAC;AAC5C,OAAO,EAAE,QAAQ,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAC;AAK7D,MAAM,MAAM,GAAG,WAAW,CAAC;AAE3B,uEAAuE;AACvE,MAAM,kBAAkB,GAAG,uCAAuC,CAAC;AAUnE,MAAM,WAAW,GACf,iFAAiF;IACjF,iFAAiF;IACjF,gFAAgF;IAChF,oFAAoF;IACpF,+EAA+E;IAC/E,2EAA2E;IAC3E,8EAA8E;IAC9E,kFAAkF;IAClF,sFAAsF,CAAC;AAEzF,4DAA4D;AAC5D,MAAM,WAAW,GAAG;IAClB,oBAAoB;IACpB,oBAAoB;IACpB,qBAAqB;IACrB,gBAAgB;CACR,CAAC;AAEX;;;;iEAIiE;AACjE,SAAS,UAAU,CAAC,IAAY;IAC9B,wEAAwE;IACxE,wDAAwD;IACxD,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAY,CAAC;IACjE,MAAM,GAAG,GAAG,MAAwC,CAAC;IACrD,IACE,OAAO,GAAG,KAAK,QAAQ;QACvB,GAAG,KAAK,IAAI;QACZ,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,GAAG,CAAC,CAAC,CAAC,KAAK,QAAQ,CAAC,EACnD,CAAC;QACD,MAAM,OAAO,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC5D,MAAM,IAAI,KAAK,CAAC,uBAAuB,IAAI,wBAAwB,OAAO,KAAK,CAAC,CAAC;IACnF,CAAC;IACD,MAAM,GAAG,GAAG,MAA0E,CAAC;IACvF,OAAO;QACL,kBAAkB,EAAE,GAAG,CAAC,kBAAkB;QAC1C,kBAAkB,EAAE,GAAG,CAAC,kBAAkB;QAC1C,mBAAmB,EAAE,GAAG,CAAC,mBAAmB;QAC5C,cAAc,EAAE,GAAG,CAAC,cAAc;QAClC,GAAG,CAAC,OAAO,GAAG,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC5D,CAAC;AACJ,CAAC;AAED,SAAS,WAAW,CAAC,IAAY,EAAE,OAA2B;IAC5D,MAAM,MAAM,GAAG;QACb,kBAAkB,EAAE,OAAO,CAAC,YAAY;QACxC,kBAAkB,EAAE,OAAO,CAAC,YAAY;QACxC,mBAAmB,EAAE,OAAO,CAAC,aAAa;QAC1C,cAAc,EAAE,OAAO,CAAC,QAAQ;QAChC,IAAI,EAAE,WAAW;KAClB,CAAC;IACF,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC9C,aAAa,CAAC,IAAI,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;AACtE,CAAC;AAED;iCACiC;AACjC,KAAK,UAAU,iBAAiB,CAAC,GAAW;IAC1C,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,EAAE,GAAG,EAAE,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,CAAC;IACtF,OAAO,MAAM,CAAC,OAAO,CAAC;AACxB,CAAC;AAED,+EAA+E;AAC/E,KAAK,UAAU,mBAAmB,CAAC,KAKlC;IACC,MAAM,MAAM,GAAG,MAAM,eAAe,CAAC;QACnC,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,WAAW,EAAE,KAAK,CAAC,WAAW;QAC9B,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,OAAO,EAAE,WAAW,CAAC,KAAK,CAAC,WAAW,CAAC;QACvC,cAAc,EAAE,KAAK,CAAC,cAAc;QACpC,QAAQ,EAAE,KAAK;QACf,WAAW,EAAE,IAAI;QACjB,KAAK,EAAE,EAAE;KACV,CAAC,CAAC;IACH,OAAO,MAAM,CAAC,OAAO,CAAC;AACxB,CAAC;AAED;;;;;;GAMG;AACH,gQAAgQ;AAChQ,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAC3C,IAA6B,EAC7B,GAAmB;IAEnB,MAAM,GAAG,GAAG,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC9B,MAAM,UAAU,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE,kBAAkB,CAAC,CAAC;IAC9F,MAAM,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,mCAAmC,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,UAAU,EAAE,CAAC,CAAC;IAC3F,IAAI,CAAC;QACH,MAAM,SAAS,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QACxC,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC3B,MAAM,IAAI,KAAK,CACb,wFAAwF,CACzF,CAAC;QACJ,CAAC;QACD,MAAM,MAAM,GAAG,MAAM,mBAAmB,CAAC,GAAG,EAAE,SAAS,EAAE,GAAG,CAAC,CAAC;QAC9D,IAAI,MAAM,CAAC,MAAM,IAAI,CAAC,EAAE,CAAC;YACvB,MAAM,IAAI,KAAK,CACb,4BAA4B,GAAG,sBAAsB,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,cAAc;gBACtF,8EAA8E;gBAC9E,qEAAqE,CACxE,CAAC;QACJ,CAAC;QAED,MAAM,MAAM,GAAG,MAAM,sBAAsB,CAAC;YAC1C,GAAG;YACH,MAAM;YACN,SAAS;YACT,UAAU,EAAE,iBAAiB;YAC7B,YAAY,EAAE,mBAAmB;SAClC,CAAC,CAAC;QAEH,MAAM,WAAW,GAAG,IAAI,CAAC,YAAY,KAAK,IAAI,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC;QAC1E,MAAM,MAAM,GAAsB,WAAW;YAC3C,CAAC,CAAC;gBACE,kBAAkB,EAAE,MAAM,CAAC,iBAAiB,CAAC,MAAM;gBACnD,kBAAkB,EAAE,MAAM,CAAC,iBAAiB,CAAC,MAAM;gBACnD,mBAAmB,EAAE,MAAM,CAAC,kBAAkB,CAAC,MAAM;gBACrD,cAAc,EAAE,MAAM,CAAC,cAAc,CAAC,MAAM;aAC7C;YACH,CAAC,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC;QAC3B,MAAM,OAAO,GAAG,gBAAgB,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QAEjD,KAAK,MAAM,IAAI,IAAI,OAAO,CAAC,KAAK;YAAE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,IAAI,IAAI,CAAC,CAAC;QAEpE,IAAI,IAAI,CAAC,YAAY,KAAK,IAAI,EAAE,CAAC;YAC/B,yIAAyI;YACzI,WAAW,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;YACjC,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,wBAAwB,MAAM,CAAC,OAAO,CAAC,YAAY,CAAC,GAAG;gBACrD,WAAW,MAAM,CAAC,OAAO,CAAC,YAAY,CAAC,aAAa,MAAM,CAAC,OAAO,CAAC,aAAa,CAAC,GAAG;gBACpF,OAAO,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,OAAO,UAAU,IAAI,CACvD,CAAC;YACF,sEAAsE;YACtE,0EAA0E;YAC1E,sCAAsC;YACtC,GAAG,CAAC,WAAW,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;YACpC,kIAAkI;YAClI,MAAM,CAAC,MAAM,EAAE,OAAO,EAAE,KAAK,CAAC,CAAC;YAC/B,OAAO;QACT,CAAC;QAED,GAAG,CAAC,WAAW,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,UAAU,CAAC,aAAa,CAAC,CAAC,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;QAChF,kIAAkI;QAClI,MAAM,CAAC,MAAM,EAAE,OAAO,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;IAC1C,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACvE,MAAM,CAAC,KAAK,CAAC,EAAE,GAAG,EAAE,mCAAmC,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,CAAC,CAAC;QACzF,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,4BAA4B,OAAO,IAAI,CAAC,CAAC;QAC9D,GAAG,CAAC,WAAW,CAAC,UAAU,CAAC,aAAa,CAAC,CAAC;IAC5C,CAAC;AACH,CAAC;AAED,SAAS,MAAM,CACb,MAKC,EACD,OAA2B,EAC3B,MAAe;IAEf,MAAM,CAAC,IAAI,CAAC;QACV,GAAG,EAAE,sCAAsC;QAC3C,MAAM,EAAE,MAAM;QACd,MAAM;QACN,kBAAkB,EAAE,MAAM,CAAC,6BAA6B,CAAC,MAAM;QAC/D,OAAO,EAAE,OAAO,CAAC,YAAY;QAC7B,OAAO,EAAE,OAAO,CAAC,YAAY;QAC7B,QAAQ,EAAE,OAAO,CAAC,aAAa;QAC/B,YAAY,EAAE,MAAM,CAAC,uBAAuB,CAAC,MAAM;QACnD,UAAU,EAAE,MAAM,CAAC,qBAAqB,CAAC,MAAM;QAC/C,GAAG,EAAE,MAAM,CAAC,cAAc,CAAC,MAAM;QACjC,SAAS,EAAE,OAAO,CAAC,SAAS;KAC7B,CAAC,CAAC;AACL,CAAC"}

package/dist/cli/graph/graph-aux-command-specs.d.ts

@@ -0,0 +1,60 @@
+/**
+ * graph-aux-command-specs — the declarative graph auxiliary commands (release
+ * launch Phase 5 Task 5.2).
+ *
+ * Replaces graph's hand-rolled `registerGraph*Command()` bodies. The host mounts
+ * each spec via `mountCommandSpec`; the tool no longer touches Commander. Each
+ * helper's raw `.option()`/`.argument()` calls translate 1:1 to
+ * `OptionSpec`/`ArgSpec`; positional arguments arrive on the parsed-opts object
+ * under the `_args` key (the host's uniform positional convention — see
+ * `mountCommandSpec`).
+ *
+ * Output modes:
+ *  - `graph-recipes` → `command-result`: the handler returns the list result;
+ *    the host dispatches it through the shared seam (`--json` → JSON, else
+ *    render). Byte-identical to the former `if (json) emitJson else render` body.
+ *  - every other aux command → `raw-stream`: each owns its full IO (writes a
+ *    file and/or prints a line, sets its own exit code, owns its `--json`
+ *    branch) — the documented non-Ink exception. The host renders nothing.
+ */
+import type { CommandSpec, ToolCliContext } from '@opensip-cli/core';
+/** `graph-lookup` — look up function occurrences by simple name. */
+export declare const graphLookupCommandSpec: CommandSpec<unknown, ToolCliContext>;
+/** `graph-shard-worker` — [internal] build one shard from a spec file. */
+export declare const graphShardWorkerCommandSpec: CommandSpec<unknown, ToolCliContext>;
+/**
+ * `graph-equivalence-check` — [internal] REAL-REPO sharded≡exact equivalence
+ * guardrail. Builds both catalogs on the target with the real adapter (real
+ * `dist/*.d.ts` resolution), classifies the residual by owner file, and gates
+ * the PRODUCTION divergence against the committed budget. The dogfood/CI gate
+ * the synthetic in-test harness cannot be (it agrees by construction). Owns its
+ * full IO + exit code (raw-stream).
+ */
+export declare const graphEquivalenceCheckCommandSpec: CommandSpec<unknown, ToolCliContext>;
+/** `graph-symbol-index` — emit a symbolindex.json artifact. */
+export declare const graphSymbolIndexCommandSpec: CommandSpec<unknown, ToolCliContext>;
+/** `graph-baseline-export` — export the graph gate baseline (JSON). */
+export declare const graphBaselineExportCommandSpec: CommandSpec<unknown, ToolCliContext>;
+/**
+ * `catalog-export` — dedicated subcommand carrying the catalog-JSON renderer +
+ * machine flags (`--catalog-output`/`--tenant-id`/`--repo-id`/`--git-sha`). This
+ * is the CLI contract the opensip `EngineSubprocessPort.runCatalogExport` spawns
+ * (DEC-498). The flags live here, NOT on `graph` — the v1 `graph
+ * --catalog-output` shape was retired by the split, so docs/consumers must
+ * target `catalog-export`.
+ */
+export declare const graphCatalogExportCommandSpec: CommandSpec<unknown, ToolCliContext>;
+/**
+ * `sarif-export` — runs the pipeline and writes OpenSIP-convention SARIF to a
+ * file, matching the opensip `EngineSubprocessPort.runSarifExport` contract
+ * (DEC-498). Always a full run (findings, not incremental).
+ */
+export declare const graphSarifExportCommandSpec: CommandSpec<unknown, ToolCliContext>;
+/**
+ * `graph-recipes` — list available graph recipes (mirrors fit-recipes). Reuses
+ * the shared ListRecipesResult contract + viewListRecipes renderer.
+ * `command-result`: the host dispatches the returned result through the shared
+ * seam (`--json` → JSON, else render).
+ */
+export declare const graphRecipesCommandSpec: CommandSpec<unknown, ToolCliContext>;
+//# sourceMappingURL=graph-aux-command-specs.d.ts.map

package/dist/cli/graph/graph-aux-command-specs.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"graph-aux-command-specs.d.ts","sourceRoot":"","sources":["../../../src/cli/graph/graph-aux-command-specs.ts"],"names":[],"mappings":"AAGA;;;;;;;;;;;;;;;;;;GAkBG;AAgBH,OAAO,KAAK,EAAE,WAAW,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AAsBrE,oEAAoE;AACpE,eAAO,MAAM,sBAAsB,EAAE,WAAW,CAAC,OAAO,EAAE,cAAc,CAetE,CAAC;AAEH,0EAA0E;AAC1E,eAAO,MAAM,2BAA2B,EAAE,WAAW,CAAC,OAAO,EAAE,cAAc,CAe3E,CAAC;AAEH;;;;;;;GAOG;AACH,eAAO,MAAM,gCAAgC,EAAE,WAAW,CAAC,OAAO,EAAE,cAAc,CAoChF,CAAC;AAEH,+DAA+D;AAC/D,eAAO,MAAM,2BAA2B,EAAE,WAAW,CAAC,OAAO,EAAE,cAAc,CAgC3E,CAAC;AAEH,uEAAuE;AACvE,eAAO,MAAM,8BAA8B,EAAE,WAAW,CAAC,OAAO,EAAE,cAAc,CAoD9E,CAAC;AAEH;;;;;;;GAOG;AACH,eAAO,MAAM,6BAA6B,EAAE,WAAW,CAAC,OAAO,EAAE,cAAc,CA4H7E,CAAC;AAEH;;;;GAIG;AACH,eAAO,MAAM,2BAA2B,EAAE,WAAW,CAAC,OAAO,EAAE,cAAc,CA4E3E,CAAC;AAEH;;;;;GAKG;AACH,eAAO,MAAM,uBAAuB,EAAE,WAAW,CAAC,OAAO,EAAE,cAAc,CAUvE,CAAC"}