@opensip-cli/graph 0.1.0

package/dist/rules/unexpected-coupling.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"unexpected-coupling.js","sourceRoot":"","sources":["../../src/rules/unexpected-coupling.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AAEH,OAAO,EAAE,KAAK,EAAE,MAAM,sBAAsB,CAAC;AAE7C,OAAO,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAC;AAC7D,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAK9C,MAAM,CAAC,MAAM,sBAAsB,GAAG,UAAU,CAAC;IAC/C,IAAI,EAAE,2BAA2B;IACjC,eAAe,EAAE,OAAO;IACxB,WAAW,EAAE,CAAC,iBAAiB,EAAE,KAAK,CAAC;IACvC,QAAQ,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE;QACpC,4EAA4E;QAC5E,IAAI,CAAC,QAAQ;YAAE,OAAO,EAAE,CAAC;QACzB,MAAM,KAAK,GAAG,iBAAiB,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;QAC/C,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,EAAE,CAAC;QAElC,MAAM,OAAO,GAAa,EAAE,CAAC;QAC7B,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,KAAK,EAAE,CAAC;YAC3B,MAAM,MAAM,GAAG,wBAAwB,CAAC,CAAC,EAAE,CAAC,EAAE,OAAO,CAAC,CAAC;YACvD,oEAAoE;YACpE,yDAAyD;YACzD,oBAAoB;YACpB,IAAI,CAAC,MAAM;gBAAE,SAAS;YACtB,MAAM,eAAe,GAAG,qBAAqB,CAAC,QAAQ,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,EAAE,OAAO,CAAC,CAAC;YAC3E,OAAO,CAAC,IAAI,CACV,iBAAiB,CAAC,2BAA2B,EAAE,MAAM,EAAE;gBACrD,QAAQ,EAAE,MAAM;gBAChB,QAAQ,EAAE,cAAc;gBACxB,OAAO,EAAE,YAAY,CAAC,QAAQ,CAAC,qDAAqD;gBACpF,IAAI,EAAE,EAAE,IAAI,EAAE,MAAM,CAAC,QAAQ,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE;gBACzE,UAAU,EACR,2GAA2G;gBAC7G,QAAQ,EAAE;oBACR,QAAQ,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC;oBAChB,eAAe;iBAChB;aACF,CAAC,CACH,CAAC;QACJ,CAAC;QACD,OAAO,OAAO,CAAC;IACjB,CAAC;CACF,CAAC,CAAC;AAEH;;;;GAIG;AACH,SAAS,iBAAiB,CACxB,KAAoC;IAEpC,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAU,CAAC;IACnC,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;QACtB,IAAI,CAAC,CAAC,aAAa,KAAK,CAAC,CAAC,aAAa;YAAE,SAAS,CAAC,8BAA8B;QACjF,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,aAAa,IAAI,CAAC,CAAC,aAAa,EAAE,CAAC,CAAC;IACxD,CAAC;IACD,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,MAAM,GAAG,GAAkC,EAAE,CAAC;IAC9C,KAAK,MAAM,GAAG,IAAI,QAAQ,EAAE,CAAC;QAC3B,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,CAAqB,CAAC;QACtD,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,IAAI,EAAE,CAAC;YAAE,SAAS,CAAC,gCAAgC;QAC9E,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,IAAI,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;QACnD,MAAM,OAAO,GAAG,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;QAC5B,IAAI,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC;YAAE,SAAS;QAChC,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QAClB,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAU,CAAC,CAAC;IAC5B,CAAC;IACD,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,aAAa,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,aAAa,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IAC5F,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;;GAIG;AACH,SAAS,wBAAwB,CAC/B,CAAS,EACT,CAAS,EACT,OAAgB;IAEhB,IAAI,IAAoC,CAAC;IACzC,IAAI,IAAoC,CAAC;IACzC,KAAK,MAAM,GAAG,IAAI,OAAO,CAAC,UAAU,CAAC,MAAM,EAAE,EAAE,CAAC;QAC9C,MAAM,GAAG,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC;QACvB,IAAI,GAAG,KAAK,CAAC,EAAE,CAAC;YACd,IAAI,GAAG,CAAC,IAAI,KAAK,aAAa,IAAI,GAAG,CAAC,QAAQ;gBAAE,OAAO,GAAG,CAAC;YAC3D,IAAI,CAAC,IAAI,IAAI,GAAG,CAAC,QAAQ;gBAAE,IAAI,GAAG,GAAG,CAAC;QACxC,CAAC;aAAM,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,IAAI,GAAG,CAAC,QAAQ,EAAE,CAAC;YAC9C,IAAI,GAAG,GAAG,CAAC;QACb,CAAC;IACH,CAAC;IACD,OAAO,IAAI,IAAI,IAAI,CAAC;AACtB,CAAC;AAED;;;;GAIG;AACH,SAAS,qBAAqB,CAC5B,IAA4B,EAC5B,CAAS,EACT,CAAS,EACT,OAAgB;IAEhB,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,IAAI,GAAG,CAAC,eAAe,IAAI,YAAY,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,EAAE,OAAO,CAAC;YAAE,KAAK,EAAE,CAAC;IACvE,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,gFAAgF;AAChF,SAAS,YAAY,CAAC,GAAgB,EAAE,CAAS,EAAE,CAAS,EAAE,OAAgB;IAC5E,IAAI,IAAI,GAAG,KAAK,CAAC;IACjB,IAAI,IAAI,GAAG,KAAK,CAAC;IACjB,KAAK,MAAM,EAAE,IAAI,GAAG,CAAC,OAAO,EAAE,CAAC;QAC7B,MAAM,GAAG,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACpC,IAAI,CAAC,GAAG;YAAE,SAAS;QACnB,MAAM,GAAG,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC;QACvB,IAAI,GAAG,KAAK,CAAC;YAAE,IAAI,GAAG,IAAI,CAAC;aACtB,IAAI,GAAG,KAAK,CAAC;YAAE,IAAI,GAAG,IAAI,CAAC;QAChC,IAAI,IAAI,IAAI,IAAI;YAAE,OAAO,IAAI,CAAC;IAChC,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC"}

package/dist/rules/wide-function.d.ts

@@ -0,0 +1,18 @@
+/**
+ * graph:wide-function — flag functions with too many parameters. A two-band
+ * predicate over `FunctionOccurrence.params.length` (raw catalog data — no
+ * feature column, hence no Plan C dependency).
+ *
+ * Bands (defaults from the dashboard's former Wide Functions view,
+ * `view-wide.ts`: "above 5–6 worth scrutinizing"):
+ *   - `params.length <= warn` → no signal.
+ *   - `(warn, error]`         → base `medium`.
+ *   - `> error`               → base `high`.
+ *
+ * Thresholds are in-rule opinionated constants, overridable via
+ * `config.wideFunctionWarnParams` / `wideFunctionErrorParams` (Phase A). The
+ * emitted severity routes through the opt-in `applySeverityOverride` clamp
+ * (ADR-0005). Language-agnostic: every adapter emits `params`.
+ */
+export declare const wideFunctionRule: import("../types.js").Rule;
+//# sourceMappingURL=wide-function.d.ts.map

package/dist/rules/wide-function.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"wide-function.d.ts","sourceRoot":"","sources":["../../src/rules/wide-function.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAYH,eAAO,MAAM,gBAAgB,4BAkC3B,CAAC"}

package/dist/rules/wide-function.js

@@ -0,0 +1,58 @@
+/**
+ * graph:wide-function — flag functions with too many parameters. A two-band
+ * predicate over `FunctionOccurrence.params.length` (raw catalog data — no
+ * feature column, hence no Plan C dependency).
+ *
+ * Bands (defaults from the dashboard's former Wide Functions view,
+ * `view-wide.ts`: "above 5–6 worth scrutinizing"):
+ *   - `params.length <= warn` → no signal.
+ *   - `(warn, error]`         → base `medium`.
+ *   - `> error`               → base `high`.
+ *
+ * Thresholds are in-rule opinionated constants, overridable via
+ * `config.wideFunctionWarnParams` / `wideFunctionErrorParams` (Phase A). The
+ * emitted severity routes through the opt-in `applySeverityOverride` clamp
+ * (ADR-0005). Language-agnostic: every adapter emits `params`.
+ */
+import { createGraphSignal } from './create-graph-signal.js';
+import { defineRule } from './define-rule.js';
+// warn=5: `> 4 params` is a common, clean signature (e.g. a small options-ish
+// positional set), so warning at 5 was noisy; warn at 6+, error at 8+ instead.
+const DEFAULT_WARN_PARAMS = 5;
+const DEFAULT_ERROR_PARAMS = 7;
+export const wideFunctionRule = defineRule({
+    slug: 'graph:wide-function',
+    defaultSeverity: 'warning',
+    evaluate({ indexes, config }) {
+        const warn = config.wideFunctionWarnParams ?? DEFAULT_WARN_PARAMS;
+        const error = config.wideFunctionErrorParams ?? DEFAULT_ERROR_PARAMS;
+        const signals = [];
+        for (const occ of indexes.byBodyHash.values()) {
+            /* v8 ignore next */
+            if (!occ.filePath)
+                continue;
+            // Test files are not production code subject to this quality gate (same
+            // exclusion as large-function / high-blast-untested).
+            if (occ.inTestFile)
+                continue;
+            const n = occ.params.length;
+            if (n <= warn)
+                continue;
+            const base = n > error ? 'high' : 'medium';
+            signals.push(createGraphSignal('graph:wide-function', config, {
+                severity: base,
+                category: 'quality',
+                message: `${occ.simpleName} takes ${String(n)} parameters.`,
+                code: { file: occ.filePath, line: occ.line, column: occ.column },
+                suggestion: 'Group related parameters into an options object or split the function.',
+                metadata: {
+                    paramCount: n,
+                    params: occ.params.map((p) => p.name),
+                    qualifiedName: occ.qualifiedName,
+                },
+            }));
+        }
+        return signals;
+    },
+});
+//# sourceMappingURL=wide-function.js.map

package/dist/rules/wide-function.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"wide-function.js","sourceRoot":"","sources":["../../src/rules/wide-function.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH,OAAO,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAC;AAC7D,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAI9C,8EAA8E;AAC9E,+EAA+E;AAC/E,MAAM,mBAAmB,GAAG,CAAC,CAAC;AAC9B,MAAM,oBAAoB,GAAG,CAAC,CAAC;AAE/B,MAAM,CAAC,MAAM,gBAAgB,GAAG,UAAU,CAAC;IACzC,IAAI,EAAE,qBAAqB;IAC3B,eAAe,EAAE,SAAS;IAC1B,QAAQ,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE;QAC1B,MAAM,IAAI,GAAG,MAAM,CAAC,sBAAsB,IAAI,mBAAmB,CAAC;QAClE,MAAM,KAAK,GAAG,MAAM,CAAC,uBAAuB,IAAI,oBAAoB,CAAC;QAErE,MAAM,OAAO,GAAa,EAAE,CAAC;QAC7B,KAAK,MAAM,GAAG,IAAI,OAAO,CAAC,UAAU,CAAC,MAAM,EAAE,EAAE,CAAC;YAC9C,oBAAoB;YACpB,IAAI,CAAC,GAAG,CAAC,QAAQ;gBAAE,SAAS;YAC5B,wEAAwE;YACxE,sDAAsD;YACtD,IAAI,GAAG,CAAC,UAAU;gBAAE,SAAS;YAC7B,MAAM,CAAC,GAAG,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC;YAC5B,IAAI,CAAC,IAAI,IAAI;gBAAE,SAAS;YACxB,MAAM,IAAI,GAAG,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC;YAC3C,OAAO,CAAC,IAAI,CACV,iBAAiB,CAAC,qBAAqB,EAAE,MAAM,EAAE;gBAC/C,QAAQ,EAAE,IAAI;gBACd,QAAQ,EAAE,SAAS;gBACnB,OAAO,EAAE,GAAG,GAAG,CAAC,UAAU,UAAU,MAAM,CAAC,CAAC,CAAC,cAAc;gBAC3D,IAAI,EAAE,EAAE,IAAI,EAAE,GAAG,CAAC,QAAQ,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE;gBAChE,UAAU,EAAE,wEAAwE;gBACpF,QAAQ,EAAE;oBACR,UAAU,EAAE,CAAC;oBACb,MAAM,EAAE,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;oBACrC,aAAa,EAAE,GAAG,CAAC,aAAa;iBACjC;aACF,CAAC,CACH,CAAC;QACJ,CAAC;QACD,OAAO,OAAO,CAAC;IACjB,CAAC;CACF,CAAC,CAAC"}

package/dist/scope-augmentation.d.ts

@@ -0,0 +1,58 @@
+/**
+ * @fileoverview RunScope augmentation for graph.
+ *
+ * D7 (tool subscopes via module augmentation, per the RunScope/
+ * Registry architecture): tool-specific concerns nest under the
+ * tool's name on `RunScope` and
+ * are added via TypeScript module augmentation from the tool's own
+ * package. Core never imports graph-shaped types — the layer rule
+ * stays intact (`core ← contracts ← {graph, ...}`).
+ *
+ * Two singletons used to hang off this package as module-level state:
+ *
+ *   - lang-adapter `registry` — per-process language adapter registry.
+ *   - rules `registry`        — per-process rule registry (seeded with
+ *                              the built-in rules at construction).
+ *
+ * Both are now per-RunScope. The graph tool's `contributeScope` hook (in
+ * `tool.ts`) instantiates fresh registries and attaches them to
+ * `scope.graph` once per CLI invocation. Tools and library code read
+ * via `currentScope()?.graph?.{adapters,rules}`.
+ *
+ * The `graph` slot is intentionally optional and mutable (no
+ * `readonly`) on the augmented interface: the kernel doesn't construct
+ * it, and only the graph tool's `contributeScope` writes to it during
+ * scope construction. A run that doesn't load the graph tool carries
+ * no `scope.graph`, and reads return `undefined`.
+ */
+import type { GraphAdapterRegistry } from './lang-adapter/registry.js';
+import type { GraphRecipeRegistry } from './recipes/registry.js';
+import type { GraphRulesRegistry } from './rules/registry.js';
+/**
+ * Per-RunScope graph state. Constructed by the graph tool's
+ * `contributeScope()` hook and attached to `scope.graph`.
+ */
+export interface GraphSubscope {
+    /** Language-adapter registry — populated when first-party graph
+     *  adapter packages (graph-typescript, graph-python, graph-rust)
+     *  register via the CLI's discovery walker. */
+    readonly adapters: GraphAdapterRegistry;
+    /** Rule registry — pre-seeded with the built-in rules. */
+    readonly rules: GraphRulesRegistry;
+    /** Recipe registry — pre-seeded with the built-in graph recipes. */
+    readonly recipes: GraphRecipeRegistry;
+}
+declare module '@opensip-cli/core' {
+    interface ScopeContribution {
+        /**
+         * Graph tool's per-run state. Returned by the graph tool's
+         * `contributeScope` hook and installed by the kernel; absent in runs
+         * where the graph tool is not registered. Consumers MUST null-check
+         * before reading. Augments `ScopeContribution`, which `ToolScope`/
+         * `RunScope` extend — so `cli.scope.graph` / `currentScope()?.graph`
+         * stay readable (audit 2026-05-29, M4).
+         */
+        graph?: GraphSubscope;
+    }
+}
+//# sourceMappingURL=scope-augmentation.d.ts.map

package/dist/scope-augmentation.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"scope-augmentation.d.ts","sourceRoot":"","sources":["../src/scope-augmentation.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AAEH,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,4BAA4B,CAAC;AACvE,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,uBAAuB,CAAC;AACjE,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,qBAAqB,CAAC;AAE9D;;;GAGG;AACH,MAAM,WAAW,aAAa;IAC5B;;mDAE+C;IAC/C,QAAQ,CAAC,QAAQ,EAAE,oBAAoB,CAAC;IACxC,0DAA0D;IAC1D,QAAQ,CAAC,KAAK,EAAE,kBAAkB,CAAC;IACnC,oEAAoE;IACpE,QAAQ,CAAC,OAAO,EAAE,mBAAmB,CAAC;CACvC;AAED,OAAO,QAAQ,mBAAmB,CAAC;IACjC,UAAU,iBAAiB;QACzB;;;;;;;WAOG;QACH,KAAK,CAAC,EAAE,aAAa,CAAC;KACvB;CACF"}

package/dist/scope-augmentation.js

@@ -0,0 +1,29 @@
+/**
+ * @fileoverview RunScope augmentation for graph.
+ *
+ * D7 (tool subscopes via module augmentation, per the RunScope/
+ * Registry architecture): tool-specific concerns nest under the
+ * tool's name on `RunScope` and
+ * are added via TypeScript module augmentation from the tool's own
+ * package. Core never imports graph-shaped types — the layer rule
+ * stays intact (`core ← contracts ← {graph, ...}`).
+ *
+ * Two singletons used to hang off this package as module-level state:
+ *
+ *   - lang-adapter `registry` — per-process language adapter registry.
+ *   - rules `registry`        — per-process rule registry (seeded with
+ *                              the built-in rules at construction).
+ *
+ * Both are now per-RunScope. The graph tool's `contributeScope` hook (in
+ * `tool.ts`) instantiates fresh registries and attaches them to
+ * `scope.graph` once per CLI invocation. Tools and library code read
+ * via `currentScope()?.graph?.{adapters,rules}`.
+ *
+ * The `graph` slot is intentionally optional and mutable (no
+ * `readonly`) on the augmented interface: the kernel doesn't construct
+ * it, and only the graph tool's `contributeScope` writes to it during
+ * scope construction. A run that doesn't load the graph tool carries
+ * no `scope.graph`, and reads return `undefined`.
+ */
+export {};
+//# sourceMappingURL=scope-augmentation.js.map

package/dist/scope-augmentation.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"scope-augmentation.js","sourceRoot":"","sources":["../src/scope-augmentation.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG"}

package/dist/tool.d.ts

@@ -0,0 +1,29 @@
+/**
+ * graphTool — graph as a Tool plugin.
+ *
+ * Since launch (Phase 5 — the largest migration) the Commander wiring is
+ * no longer hand-rolled: the tool exports declarative {@link CommandSpec}s
+ * (`commandSpecs`) and the host's `mountCommandSpec` mounts them
+ * (name/description/aliases, the ADR-0021 common flags, each command's
+ * options/args) and owns the parse→handler→error→exit pipeline. This file owns
+ * only the command-spec assembly + the per-run scope/report contributions; the
+ * spec modules under `cli/graph/` own the option declarations and handler bodies.
+ *
+ * Per spec §10A AC-2 / AC-1: this module does NOT import from opensip-cli. It
+ * receives the ToolCliContext interface from @opensip-cli/core.
+ *
+ * History: v0.2 originally registered three subcommands (`graph`,
+ * `graph-orphans`, `graph-entry-points`). The orphans and entry-points
+ * subcommands were folded into the unified `graph` output — all three data slices
+ * (rules, entry points, catalog summary) are reachable via the single `graph`
+ * invocation.
+ */
+import './scope-augmentation.js';
+import type { Tool } from '@opensip-cli/core';
+/**
+ * Per-tool contract version (ADR-0047). Exported from the public barrel.
+ */
+export declare const GRAPH_CONTRACT_VERSION = "1.0.0";
+export declare const GRAPH_STABLE_ID = "3873f1c2-02a9-4719-930a-bca74b62b706";
+export declare const graphTool: Tool;
+//# sourceMappingURL=tool.d.ts.map

package/dist/tool.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tool.d.ts","sourceRoot":"","sources":["../src/tool.ts"],"names":[],"mappings":"AACA;;;;;;;;;;;;;;;;;;;GAmBG;AA+BH,OAAO,yBAAyB,CAAC;AAGjC,OAAO,KAAK,EAIV,IAAI,EAIL,MAAM,mBAAmB,CAAC;AAyK3B;;GAEG;AACH,eAAO,MAAM,sBAAsB,UAAU,CAAC;AAE9C,eAAO,MAAM,eAAe,yCAAyC,CAAC;AAEtE,eAAO,MAAM,SAAS,EAAE,IAgDvB,CAAC"}

package/dist/tool.js

@@ -0,0 +1,241 @@
+// @fitness-ignore-file module-coupling-fan-out -- composition root: the graph Tool descriptor wires every subcommand spec, the scope contribution, and the adapter/rule/recipe registries; high intra-project fan-out is inherent to a tool-wiring file (cf. the index.ts / code-paths.ts barrels that suppress the same check).
+/**
+ * graphTool — graph as a Tool plugin.
+ *
+ * Since launch (Phase 5 — the largest migration) the Commander wiring is
+ * no longer hand-rolled: the tool exports declarative {@link CommandSpec}s
+ * (`commandSpecs`) and the host's `mountCommandSpec` mounts them
+ * (name/description/aliases, the ADR-0021 common flags, each command's
+ * options/args) and owns the parse→handler→error→exit pipeline. This file owns
+ * only the command-spec assembly + the per-run scope/report contributions; the
+ * spec modules under `cli/graph/` own the option declarations and handler bodies.
+ *
+ * Per spec §10A AC-2 / AC-1: this module does NOT import from opensip-cli. It
+ * receives the ToolCliContext interface from @opensip-cli/core.
+ *
+ * History: v0.2 originally registered three subcommands (`graph`,
+ * `graph-orphans`, `graph-entry-points`). The orphans and entry-points
+ * subcommands were folded into the unified `graph` output — all three data slices
+ * (rules, entry points, catalog summary) are reachable via the single `graph`
+ * invocation.
+ */
+import { logger, readPackageVersion } from '@opensip-cli/core';
+// PR 3 of plan 2026-05-23-plan-graph-adapter-package-split.md: the
+// engine no longer hosts adapter source. First-party adapters live in
+// their own packages and register via the CLI's discovery walker
+// (register-graph-adapters.ts). The historical engine-side bootstrap is
+// gone.
+import { graphFingerprintStrategy } from './baseline-strategy.js';
+import { graphBaselineExportCommandSpec, graphCatalogExportCommandSpec, graphEquivalenceCheckCommandSpec, graphLookupCommandSpec, graphRecipesCommandSpec, graphSarifExportCommandSpec, graphShardWorkerCommandSpec, graphSymbolIndexCommandSpec, } from './cli/graph/graph-aux-command-specs.js';
+import { graphCommandSpec } from './cli/graph/graph-command-spec.js';
+import { graphConfigDeclaration } from './cli/graph-config-schema.js';
+import { graphRunWorkerCommandSpec } from './cli/graph-worker.js';
+import { buildGraphRecipeCatalog, buildGraphRuleCatalog } from './cli/report-data.js';
+import { createAdapterRegistry, currentAdapterRegistry } from './lang-adapter/registry.js';
+import { CatalogRepo } from './persistence/catalog-repo.js';
+import { graphReplayFromSession } from './persistence/session-replay.js';
+import { createRecipeRegistry } from './recipes/registry.js';
+import { createRulesRegistry } from './rules/registry.js';
+// Side-effect import: ensures the RunScope.graph augmentation is
+// loaded so `scope.graph` is correctly-typed here.
+import './scope-augmentation.js';
+// =============================================================================
+// COMMAND DESCRIPTORS — used by --help listings and conflict detection.
+// =============================================================================
+const GRAPH = {
+    name: 'graph',
+    description: 'Run static call-graph analysis (rules, entry points, catalog summary in one report)',
+};
+const GRAPH_LOOKUP = {
+    name: 'graph-lookup',
+    description: 'Look up function occurrences by simple name from the persisted catalog',
+};
+const GRAPH_SYMBOL_INDEX = {
+    name: 'graph-symbol-index',
+    description: 'Emit a symbolindex.json artifact (name→file:line and file→names) from the persisted catalog',
+};
+const GRAPH_BASELINE_EXPORT = {
+    name: 'graph-baseline-export',
+    description: 'Export the graph gate baseline (JSON) from the datastore to a file',
+};
+const GRAPH_SHARD_WORKER = {
+    name: 'graph-shard-worker',
+    description: '[internal] Build one shard from a spec file and emit a ShardBuildResult JSON (spawned by the sharded build)',
+};
+const GRAPH_EQUIVALENCE_CHECK = {
+    name: 'graph-equivalence-check',
+    description: '[internal] Verify the sharded build is byte-equivalent to the exact build on a real repo (gates production edge divergence against a committed budget)',
+};
+const GRAPH_RUN_WORKER = {
+    name: 'graph-run-worker',
+    description: '[internal] Run the graph build headless and stream progress + result over IPC (forked by the live view)',
+};
+const GRAPH_CATALOG_EXPORT = {
+    name: 'catalog-export',
+    description: 'Run graph analysis and write the CatalogExport JSON document (symbols + edges + provenance) to a file',
+};
+const GRAPH_SARIF_EXPORT = {
+    name: 'sarif-export',
+    description: 'Run graph analysis and write OpenSIP-convention SARIF v2.1.0 findings to a file',
+};
+const GRAPH_RECIPES = {
+    name: 'graph-recipes',
+    description: 'List available graph recipes',
+};
+// =============================================================================
+// COMMAND-SPEC ASSEMBLY
+// =============================================================================
+/**
+ * graph's declarative command surface (launch Phase 5). The host mounts
+ * each spec via `mountCommandSpec`; graph no longer touches Commander. Order is
+ * preserved from the former `register()` mount order (graph, graph-lookup,
+ * graph-shard-worker, graph-symbol-index, graph-baseline-export, catalog-export,
+ * sarif-export, graph-recipes). The primary `graph` spec sets its own live-view
+ * renderer up lazily inside its handler's interactive branch (no mount-time
+ * `register()` hook in the spec-mounted world).
+ */
+const graphCommandSpecs = [
+    graphCommandSpec,
+    graphLookupCommandSpec,
+    graphShardWorkerCommandSpec,
+    graphRunWorkerCommandSpec,
+    graphSymbolIndexCommandSpec,
+    graphBaselineExportCommandSpec,
+    graphCatalogExportCommandSpec,
+    graphSarifExportCommandSpec,
+    graphRecipesCommandSpec,
+    graphEquivalenceCheckCommandSpec,
+];
+/**
+ * The graph tool's REAL registrar for its `graph-adapter` capability domain
+ * (§5.3 / Phase 4). The host registers the domain from graph's manifest with a
+ * deferred placeholder, then swaps in this registrar once graph's module is
+ * loaded. A routed contribution (already shape-checked against the domain's
+ * `requiredKeys: ['id']` schema by the host) is registered into THIS run's
+ * scope-owned adapter registry — graph owns the registration semantics, the
+ * host only routes.
+ */
+const registerGraphAdapter = (contribution) => {
+    currentAdapterRegistry().register(contribution);
+};
+/**
+ * Per-run subscope contribution (D7). Called by the CLI's pre-action-hook
+ * after constructing the scope and before entering it; the kernel installs
+ * the returned `graph` slot. Fresh adapter + rule registries per run so
+ * concurrent scopes carry independent graph state.
+ *
+ * Adapter seeding: the fresh adapter registry starts EMPTY. The generic
+ * capability loader (§5.3/§4.5) discovers `graph-adapter` packages per run and
+ * routes each through {@link registerGraphAdapter} into this scope's registry
+ * (driven by the CLI pre-action hook), so `pickAdapter` resolves them — no
+ * process-global discovered-adapters holder.
+ */
+function contributeScope() {
+    return {
+        graph: {
+            adapters: createAdapterRegistry(),
+            rules: createRulesRegistry(),
+            recipes: createRecipeRegistry(),
+        },
+    };
+}
+/**
+ * Dashboard-data contribution (audit 2026-05-29, L2). Graph owns its
+ * Code Paths panel data: it returns the graph catalog (via its own
+ * `CatalogRepo`) under the `graphCatalog` key that `generateDashboardHtml`
+ * consumes. Best-effort — a missing/empty catalog yields no contribution
+ * and the panel renders a no-data state. This is what lets the CLI
+ * compose the cross-tool dashboard without fitness reaching into graph.
+ *
+ * The returned `graphCatalog.features` (Plan C) is populated when the
+ * producing `graph` run requested the dashboard columns
+ * (`['blast','scc','packageCoupling']`, see `executeGraph`); it rides on the
+ * loaded contract for free via `loadCatalogContract`. This stays a pure read
+ * — no on-demand engine compute at report-compose time (ADR-0006). When a
+ * catalog was produced by a non-dashboard run, `features` is absent and the
+ * panel renders a no-data state.
+ */
+function collectReportData(scope) {
+    // Rule + recipe catalogs are cheap, scope-only reads (no I/O). A run
+    // without the graph subscope yields empty arrays, not a throw. These use
+    // DISTINCT keys from fitness's `checkCatalog`/`recipeCatalog` (which the
+    // CLI merges via Object.assign) so graph never clobbers fitness.
+    const graphRuleCatalog = buildGraphRuleCatalog(scope);
+    const graphRecipeCatalog = buildGraphRecipeCatalog(scope);
+    const datastore = scope.datastore();
+    if (!datastore)
+        return { graphRuleCatalog, graphRecipeCatalog };
+    try {
+        return {
+            graphCatalog: new CatalogRepo(datastore).loadCatalogContract(),
+            graphRuleCatalog,
+            graphRecipeCatalog,
+        };
+    }
+    catch (error) {
+        // No catalog (or an unreadable one) → the panel renders its no-data
+        // state. Log at debug so the empty-result path is traceable rather
+        // than silent.
+        logger.debug({
+            evt: 'graph.dashboard.catalog_load_failed',
+            module: 'graph:tool',
+            err: error instanceof Error ? error.message : String(error),
+        });
+        return { graphRuleCatalog, graphRecipeCatalog };
+    }
+}
+/**
+ * Per-tool contract version (ADR-0047). Exported from the public barrel.
+ */
+export const GRAPH_CONTRACT_VERSION = '1.0.0';
+export const GRAPH_STABLE_ID = '3873f1c2-02a9-4719-930a-bca74b62b706';
+export const graphTool = {
+    metadata: {
+        id: GRAPH_STABLE_ID, // stable UUID (per ADR-0048; matches Checks `id` naming)
+        name: 'graph', // human key (previously the value in `id`)
+        version: readPackageVersion(import.meta.url),
+        description: 'Static call-graph + dead-end analysis',
+    },
+    commands: [
+        GRAPH,
+        GRAPH_LOOKUP,
+        GRAPH_SYMBOL_INDEX,
+        GRAPH_BASELINE_EXPORT,
+        GRAPH_SHARD_WORKER,
+        GRAPH_EQUIVALENCE_CHECK,
+        GRAPH_RUN_WORKER,
+        GRAPH_CATALOG_EXPORT,
+        GRAPH_SARIF_EXPORT,
+        GRAPH_RECIPES,
+    ],
+    // Launch Phase 5: graph declares its command surface; the host mounts
+    // each spec via mountCommandSpec. The deprecated `register()` fallback is gone
+    // — graph no longer touches Commander.
+    commandSpecs: graphCommandSpecs,
+    contributeScope,
+    collectReportData,
+    sessionReplay: {
+        tool: 'graph',
+        replaySession: graphReplayFromSession,
+    },
+    // ADR-0023 Phase 4: graph contributes its namespaced `graph:` Zod schema so
+    // the host composes + strict-validates the whole config document before
+    // dispatch. The schema-bearing `ToolConfigDeclaration` narrows to the
+    // kernel-side `ToolConfigContribution` carrier (core carries no Zod).
+    config: graphConfigDeclaration,
+    // §5.3 Phase 4: graph owns the `graph-adapter` capability domain (declared in
+    // its manifest). It supplies the REAL registrar so the host can replace the
+    // manifest-time deferred placeholder once graph's module loads.
+    capabilityRegistrars: { 'graph-adapter': registerGraphAdapter },
+    // ADR-0036: graph's byte-preserved baseline identity (ruleId|filePath|line|col),
+    // read by the host baseline/ratchet seams when graph stamps its gate envelope.
+    fingerprintStrategy: graphFingerprintStrategy,
+    // ADR-0047: per-tool contract version for graph's domain surface (rules, catalog,
+    // execution model, adapter contract, etc.). Independent of core
+    // TOOL_CONTRACT_VERSION. Declared under extensionPoints for discoverability
+    // by hosts, agent-catalog, and third-party graph packs.
+    extensionPoints: {
+        graphContractVersion: GRAPH_CONTRACT_VERSION,
+    },
+};
+//# sourceMappingURL=tool.js.map

package/dist/tool.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tool.js","sourceRoot":"","sources":["../src/tool.ts"],"names":[],"mappings":"AAAA,iUAAiU;AACjU;;;;;;;;;;;;;;;;;;;GAmBG;AAEH,OAAO,EAAE,MAAM,EAAE,kBAAkB,EAAE,MAAM,mBAAmB,CAAC;AAE/D,mEAAmE;AACnE,sEAAsE;AACtE,iEAAiE;AACjE,wEAAwE;AACxE,QAAQ;AACR,OAAO,EAAE,wBAAwB,EAAE,MAAM,wBAAwB,CAAC;AAClE,OAAO,EACL,8BAA8B,EAC9B,6BAA6B,EAC7B,gCAAgC,EAChC,sBAAsB,EACtB,uBAAuB,EACvB,2BAA2B,EAC3B,2BAA2B,EAC3B,2BAA2B,GAC5B,MAAM,wCAAwC,CAAC;AAChD,OAAO,EAAE,gBAAgB,EAAE,MAAM,mCAAmC,CAAC;AACrE,OAAO,EAAE,sBAAsB,EAAE,MAAM,8BAA8B,CAAC;AACtE,OAAO,EAAE,yBAAyB,EAAE,MAAM,uBAAuB,CAAC;AAClE,OAAO,EAAE,uBAAuB,EAAE,qBAAqB,EAAE,MAAM,sBAAsB,CAAC;AACtF,OAAO,EAAE,qBAAqB,EAAE,sBAAsB,EAAE,MAAM,4BAA4B,CAAC;AAC3F,OAAO,EAAE,WAAW,EAAE,MAAM,+BAA+B,CAAC;AAC5D,OAAO,EAAE,sBAAsB,EAAE,MAAM,iCAAiC,CAAC;AACzE,OAAO,EAAE,oBAAoB,EAAE,MAAM,uBAAuB,CAAC;AAC7D,OAAO,EAAE,mBAAmB,EAAE,MAAM,qBAAqB,CAAC;AAC1D,iEAAiE;AACjE,mDAAmD;AACnD,OAAO,yBAAyB,CAAC;AAcjC,gFAAgF;AAChF,wEAAwE;AACxE,gFAAgF;AAEhF,MAAM,KAAK,GAA0B;IACnC,IAAI,EAAE,OAAO;IACb,WAAW,EACT,qFAAqF;CACxF,CAAC;AAEF,MAAM,YAAY,GAA0B;IAC1C,IAAI,EAAE,cAAc;IACpB,WAAW,EAAE,wEAAwE;CACtF,CAAC;AAEF,MAAM,kBAAkB,GAA0B;IAChD,IAAI,EAAE,oBAAoB;IAC1B,WAAW,EACT,6FAA6F;CAChG,CAAC;AAEF,MAAM,qBAAqB,GAA0B;IACnD,IAAI,EAAE,uBAAuB;IAC7B,WAAW,EAAE,oEAAoE;CAClF,CAAC;AAEF,MAAM,kBAAkB,GAA0B;IAChD,IAAI,EAAE,oBAAoB;IAC1B,WAAW,EACT,6GAA6G;CAChH,CAAC;AAEF,MAAM,uBAAuB,GAA0B;IACrD,IAAI,EAAE,yBAAyB;IAC/B,WAAW,EACT,wJAAwJ;CAC3J,CAAC;AAEF,MAAM,gBAAgB,GAA0B;IAC9C,IAAI,EAAE,kBAAkB;IACxB,WAAW,EACT,yGAAyG;CAC5G,CAAC;AAEF,MAAM,oBAAoB,GAA0B;IAClD,IAAI,EAAE,gBAAgB;IACtB,WAAW,EACT,uGAAuG;CAC1G,CAAC;AAEF,MAAM,kBAAkB,GAA0B;IAChD,IAAI,EAAE,cAAc;IACpB,WAAW,EAAE,iFAAiF;CAC/F,CAAC;AAEF,MAAM,aAAa,GAA0B;IAC3C,IAAI,EAAE,eAAe;IACrB,WAAW,EAAE,8BAA8B;CAC5C,CAAC;AAEF,gFAAgF;AAChF,wBAAwB;AACxB,gFAAgF;AAEhF;;;;;;;;GAQG;AACH,MAAM,iBAAiB,GAAoD;IACzE,gBAAgB;IAChB,sBAAsB;IACtB,2BAA2B;IAC3B,yBAAyB;IACzB,2BAA2B;IAC3B,8BAA8B;IAC9B,6BAA6B;IAC7B,2BAA2B;IAC3B,uBAAuB;IACvB,gCAAgC;CACjC,CAAC;AAEF;;;;;;;;GAQG;AACH,MAAM,oBAAoB,GAAwB,CAAC,YAAY,EAAE,EAAE;IACjE,sBAAsB,EAAE,CAAC,QAAQ,CAAC,YAAoC,CAAC,CAAC;AAC1E,CAAC,CAAC;AAEF;;;;;;;;;;;GAWG;AACH,SAAS,eAAe;IACtB,OAAO;QACL,KAAK,EAAE;YACL,QAAQ,EAAE,qBAAqB,EAAE;YACjC,KAAK,EAAE,mBAAmB,EAAE;YAC5B,OAAO,EAAE,oBAAoB,EAAE;SAChC;KACF,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;;;;;GAeG;AACH,SAAS,iBAAiB,CAAC,KAAgB;IACzC,qEAAqE;IACrE,yEAAyE;IACzE,yEAAyE;IACzE,iEAAiE;IACjE,MAAM,gBAAgB,GAAG,qBAAqB,CAAC,KAAK,CAAC,CAAC;IACtD,MAAM,kBAAkB,GAAG,uBAAuB,CAAC,KAAK,CAAC,CAAC;IAE1D,MAAM,SAAS,GAAG,KAAK,CAAC,SAAS,EAA2B,CAAC;IAC7D,IAAI,CAAC,SAAS;QAAE,OAAO,EAAE,gBAAgB,EAAE,kBAAkB,EAAE,CAAC;IAChE,IAAI,CAAC;QACH,OAAO;YACL,YAAY,EAAE,IAAI,WAAW,CAAC,SAAS,CAAC,CAAC,mBAAmB,EAAE;YAC9D,gBAAgB;YAChB,kBAAkB;SACnB,CAAC;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,oEAAoE;QACpE,mEAAmE;QACnE,eAAe;QACf,MAAM,CAAC,KAAK,CAAC;YACX,GAAG,EAAE,qCAAqC;YAC1C,MAAM,EAAE,YAAY;YACpB,GAAG,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;SAC5D,CAAC,CAAC;QACH,OAAO,EAAE,gBAAgB,EAAE,kBAAkB,EAAE,CAAC;IAClD,CAAC;AACH,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAG,OAAO,CAAC;AAE9C,MAAM,CAAC,MAAM,eAAe,GAAG,sCAAsC,CAAC;AAEtE,MAAM,CAAC,MAAM,SAAS,GAAS;IAC7B,QAAQ,EAAE;QACR,EAAE,EAAE,eAAe,EAAE,yDAAyD;QAC9E,IAAI,EAAE,OAAO,EAAE,2CAA2C;QAC1D,OAAO,EAAE,kBAAkB,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC;QAC5C,WAAW,EAAE,uCAAuC;KACrD;IACD,QAAQ,EAAE;QACR,KAAK;QACL,YAAY;QACZ,kBAAkB;QAClB,qBAAqB;QACrB,kBAAkB;QAClB,uBAAuB;QACvB,gBAAgB;QAChB,oBAAoB;QACpB,kBAAkB;QAClB,aAAa;KACd;IACD,sEAAsE;IACtE,+EAA+E;IAC/E,uCAAuC;IACvC,YAAY,EAAE,iBAAiB;IAC/B,eAAe;IACf,iBAAiB;IACjB,aAAa,EAAE;QACb,IAAI,EAAE,OAAO;QACb,aAAa,EAAE,sBAAsB;KACtC;IACD,4EAA4E;IAC5E,wEAAwE;IACxE,sEAAsE;IACtE,sEAAsE;IACtE,MAAM,EAAE,sBAAsB;IAC9B,8EAA8E;IAC9E,4EAA4E;IAC5E,gEAAgE;IAChE,oBAAoB,EAAE,EAAE,eAAe,EAAE,oBAAoB,EAAE;IAC/D,iFAAiF;IACjF,+EAA+E;IAC/E,mBAAmB,EAAE,wBAAwB;IAC7C,kFAAkF;IAClF,gEAAgE;IAChE,4EAA4E;IAC5E,wDAAwD;IACxD,eAAe,EAAE;QACf,oBAAoB,EAAE,sBAAsB;KAC7C;CACF,CAAC"}