@opensip-cli/graph 0.1.0

package/dist/__tests__/cli/sarif-export.test.js

@@ -0,0 +1,94 @@
+/**
+ * Unit tests for `runSarifExportMode` (the `sarif-export` subcommand
+ * helper, DEC-498). Drives the helper directly with synthetic signals —
+ * the subcommand-wiring is covered by the command-list drift tests in
+ * `tool.test.ts` / `tool-register.test.ts`.
+ */
+import { existsSync, mkdirSync, mkdtempSync, readFileSync, rmSync, writeFileSync } from 'node:fs';
+import { tmpdir } from 'node:os';
+import { dirname, join } from 'node:path';
+import { ConfigurationError } from '@opensip-cli/core';
+import { formatSignalSarif } from '@opensip-cli/output';
+import { afterEach, beforeEach, describe, expect, it, vi } from 'vitest';
+import { runSarifExportMode } from '../../cli/sarif-export.js';
+function makeSignal(over = {}) {
+    return {
+        id: 'sig_orphan',
+        source: 'graph',
+        provider: 'opensip-cli',
+        severity: 'medium',
+        category: 'quality',
+        ruleId: 'graph:orphan-subtree',
+        message: "Function 'processOrder' appears unreachable from any entry point.",
+        filePath: 'src/order/process.ts',
+        line: 42,
+        column: undefined,
+        code: { file: 'src/order/process.ts', line: 42, column: undefined },
+        metadata: {},
+        createdAt: '2026-05-27T00:00:00.000Z',
+        ...over,
+    };
+}
+// The root-owned SARIF-file sink (`cli.writeSarif`): formats the envelope
+// through the single shared `formatSignalSarif` and writes it — exactly what
+// the CLI composition root does. Driving the real formatter here keeps the
+// subcommand's byte-output coverage end-to-end through the migrated seam.
+function makeCli() {
+    const setExitCode = vi.fn();
+    // eslint-disable-next-line @typescript-eslint/require-await -- async to match the seam signature
+    const writeSarif = vi.fn(async (envelope, path) => {
+        mkdirSync(dirname(path), { recursive: true });
+        writeFileSync(path, formatSignalSarif(envelope));
+    });
+    const cli = { setExitCode, writeSarif };
+    return { cli, setExitCode };
+}
+let workDir;
+beforeEach(() => {
+    workDir = mkdtempSync(join(tmpdir(), 'sarif-export-'));
+});
+afterEach(() => {
+    rmSync(workDir, { recursive: true, force: true });
+});
+describe('runSarifExportMode', () => {
+    it('writes OpenSIP-convention SARIF v2.1.0 to the output path and sets exit 0', async () => {
+        const outPath = join(workDir, 'out.sarif');
+        const { cli, setExitCode } = makeCli();
+        await runSarifExportMode({ outputSarif: outPath, tenantId: 't1', repoId: 'r1', runId: 'run-1' }, [makeSignal()], cli);
+        expect(existsSync(outPath)).toBe(true);
+        const parsed = JSON.parse(readFileSync(outPath, 'utf8'));
+        expect(parsed.version).toBe('2.1.0');
+        expect(parsed.runs[0]?.tool.driver.name).toBe('opensip-cli-graph');
+        expect(parsed.runs[0]?.results[0]?.ruleId).toBe('graph.dead-code.orphan-subtree');
+        expect(setExitCode).toHaveBeenCalledWith(0);
+    });
+    it('creates the parent directory when the output path is nested', async () => {
+        const outPath = join(workDir, 'nested', 'deep', 'out.sarif');
+        const { cli } = makeCli();
+        await runSarifExportMode({ outputSarif: outPath, tenantId: 't1', repoId: 'r1' }, [makeSignal()], cli);
+        expect(existsSync(outPath)).toBe(true);
+    });
+    it('writes a valid SARIF document with zero results for an empty signal set', async () => {
+        const outPath = join(workDir, 'empty.sarif');
+        const { cli, setExitCode } = makeCli();
+        await runSarifExportMode({ outputSarif: outPath, tenantId: 't1', repoId: 'r1' }, [], cli);
+        const parsed = JSON.parse(readFileSync(outPath, 'utf8'));
+        expect(parsed.version).toBe('2.1.0');
+        expect(parsed.runs[0]?.results).toHaveLength(0);
+        expect(setExitCode).toHaveBeenCalledWith(0);
+    });
+    it('rejects with ConfigurationError (and writes nothing) when --tenant-id is missing', async () => {
+        const outPath = join(workDir, 'no-tenant.sarif');
+        const { cli, setExitCode } = makeCli();
+        await expect(runSarifExportMode({ outputSarif: outPath, repoId: 'r1' }, [makeSignal()], cli)).rejects.toThrow(ConfigurationError);
+        expect(existsSync(outPath)).toBe(false);
+        expect(setExitCode).not.toHaveBeenCalled();
+    });
+    it('rejects with ConfigurationError when --repo-id is missing', async () => {
+        const outPath = join(workDir, 'no-repo.sarif');
+        const { cli } = makeCli();
+        await expect(runSarifExportMode({ outputSarif: outPath, tenantId: 't1' }, [makeSignal()], cli)).rejects.toThrow(ConfigurationError);
+        expect(existsSync(outPath)).toBe(false);
+    });
+});
+//# sourceMappingURL=sarif-export.test.js.map

package/dist/__tests__/cli/sarif-export.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sarif-export.test.js","sourceRoot":"","sources":["../../../src/__tests__/cli/sarif-export.test.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AAClG,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACjC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAE1C,OAAO,EAAE,kBAAkB,EAAE,MAAM,mBAAmB,CAAC;AACvD,OAAO,EAAE,iBAAiB,EAAE,MAAM,qBAAqB,CAAC;AACxD,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAEzE,OAAO,EAAE,kBAAkB,EAAE,MAAM,2BAA2B,CAAC;AAK/D,SAAS,UAAU,CAAC,OAAwB,EAAE;IAC5C,OAAO;QACL,EAAE,EAAE,YAAY;QAChB,MAAM,EAAE,OAAO;QACf,QAAQ,EAAE,aAAa;QACvB,QAAQ,EAAE,QAAQ;QAClB,QAAQ,EAAE,SAAS;QACnB,MAAM,EAAE,sBAAsB;QAC9B,OAAO,EAAE,mEAAmE;QAC5E,QAAQ,EAAE,sBAAsB;QAChC,IAAI,EAAE,EAAE;QACR,MAAM,EAAE,SAAS;QACjB,IAAI,EAAE,EAAE,IAAI,EAAE,sBAAsB,EAAE,IAAI,EAAE,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE;QACnE,QAAQ,EAAE,EAAE;QACZ,SAAS,EAAE,0BAA0B;QACrC,GAAG,IAAI;KACR,CAAC;AACJ,CAAC;AAED,0EAA0E;AAC1E,6EAA6E;AAC7E,2EAA2E;AAC3E,0EAA0E;AAC1E,SAAS,OAAO;IACd,MAAM,WAAW,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC;IAC5B,iGAAiG;IACjG,MAAM,UAAU,GAAG,EAAE,CAAC,EAAE,CAAC,KAAK,EAAE,QAAiB,EAAE,IAAY,EAAE,EAAE;QACjE,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC9C,aAAa,CAAC,IAAI,EAAE,iBAAiB,CAAC,QAA0B,CAAC,CAAC,CAAC;IACrE,CAAC,CAAC,CAAC;IACH,MAAM,GAAG,GAAG,EAAE,WAAW,EAAE,UAAU,EAA+B,CAAC;IACrE,OAAO,EAAE,GAAG,EAAE,WAAW,EAAE,CAAC;AAC9B,CAAC;AAED,IAAI,OAAe,CAAC;AAEpB,UAAU,CAAC,GAAG,EAAE;IACd,OAAO,GAAG,WAAW,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,eAAe,CAAC,CAAC,CAAC;AACzD,CAAC,CAAC,CAAC;AAEH,SAAS,CAAC,GAAG,EAAE;IACb,MAAM,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;AACpD,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,oBAAoB,EAAE,GAAG,EAAE;IAClC,EAAE,CAAC,2EAA2E,EAAE,KAAK,IAAI,EAAE;QACzF,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;QAC3C,MAAM,EAAE,GAAG,EAAE,WAAW,EAAE,GAAG,OAAO,EAAE,CAAC;QAEvC,MAAM,kBAAkB,CACtB,EAAE,WAAW,EAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,EACtE,CAAC,UAAU,EAAE,CAAC,EACd,GAAG,CACJ,CAAC;QAEF,MAAM,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACvC,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,OAAO,EAAE,MAAM,CAAC,CAGtD,CAAC;QACF,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACrC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC;QACnE,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,IAAI,CAAC,gCAAgC,CAAC,CAAC;QAClF,MAAM,CAAC,WAAW,CAAC,CAAC,oBAAoB,CAAC,CAAC,CAAC,CAAC;IAC9C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,6DAA6D,EAAE,KAAK,IAAI,EAAE;QAC3E,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,WAAW,CAAC,CAAC;QAC7D,MAAM,EAAE,GAAG,EAAE,GAAG,OAAO,EAAE,CAAC;QAE1B,MAAM,kBAAkB,CACtB,EAAE,WAAW,EAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,EACtD,CAAC,UAAU,EAAE,CAAC,EACd,GAAG,CACJ,CAAC;QAEF,MAAM,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACzC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,yEAAyE,EAAE,KAAK,IAAI,EAAE;QACvF,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,EAAE,aAAa,CAAC,CAAC;QAC7C,MAAM,EAAE,GAAG,EAAE,WAAW,EAAE,GAAG,OAAO,EAAE,CAAC;QAEvC,MAAM,kBAAkB,CAAC,EAAE,WAAW,EAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE,EAAE,EAAE,GAAG,CAAC,CAAC;QAE1F,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,OAAO,EAAE,MAAM,CAAC,CAGtD,CAAC;QACF,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACrC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;QAChD,MAAM,CAAC,WAAW,CAAC,CAAC,oBAAoB,CAAC,CAAC,CAAC,CAAC;IAC9C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,kFAAkF,EAAE,KAAK,IAAI,EAAE;QAChG,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,EAAE,iBAAiB,CAAC,CAAC;QACjD,MAAM,EAAE,GAAG,EAAE,WAAW,EAAE,GAAG,OAAO,EAAE,CAAC;QAEvC,MAAM,MAAM,CACV,kBAAkB,CAAC,EAAE,WAAW,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE,CAAC,UAAU,EAAE,CAAC,EAAE,GAAG,CAAC,CAChF,CAAC,OAAO,CAAC,OAAO,CAAC,kBAAkB,CAAC,CAAC;QACtC,MAAM,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACxC,MAAM,CAAC,WAAW,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;IAC7C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,2DAA2D,EAAE,KAAK,IAAI,EAAE;QACzE,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,EAAE,eAAe,CAAC,CAAC;QAC/C,MAAM,EAAE,GAAG,EAAE,GAAG,OAAO,EAAE,CAAC;QAE1B,MAAM,MAAM,CACV,kBAAkB,CAAC,EAAE,WAAW,EAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,EAAE,CAAC,UAAU,EAAE,CAAC,EAAE,GAAG,CAAC,CAClF,CAAC,OAAO,CAAC,OAAO,CAAC,kBAAkB,CAAC,CAAC;QACtC,MAAM,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC1C,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/__tests__/cli/session-contract.test.d.ts

@@ -0,0 +1,17 @@
+/**
+ * D12: one CLI invocation = one session.
+ *
+ * Regression test asserting that every dispatch branch of executeGraph
+ * either CONTRIBUTES exactly one session or zero (for opt-out modes). The
+ * commit 2ed25d3 contract must not regress.
+ *
+ * host-owned-run-timing Phase 3: graph no longer writes the generic session
+ * row itself — `executeGraph` RETURNS a `GraphRunOutcome` whose optional
+ * `session` the HOST persists after the handler resolves. So "one invocation =
+ * one session" is now pinned on the RETURNED contribution (present ⇔ the host
+ * persists one row; absent ⇔ opt-out). The payload-shape test persists the
+ * returned contribution inline (as the host would) to verify it round-trips
+ * through the StoredSession contract.
+ */
+export {};
+//# sourceMappingURL=session-contract.test.d.ts.map

package/dist/__tests__/cli/session-contract.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"session-contract.test.d.ts","sourceRoot":"","sources":["../../../src/__tests__/cli/session-contract.test.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG"}

package/dist/__tests__/cli/session-contract.test.js

@@ -0,0 +1,225 @@
+/**
+ * D12: one CLI invocation = one session.
+ *
+ * Regression test asserting that every dispatch branch of executeGraph
+ * either CONTRIBUTES exactly one session or zero (for opt-out modes). The
+ * commit 2ed25d3 contract must not regress.
+ *
+ * host-owned-run-timing Phase 3: graph no longer writes the generic session
+ * row itself — `executeGraph` RETURNS a `GraphRunOutcome` whose optional
+ * `session` the HOST persists after the handler resolves. So "one invocation =
+ * one session" is now pinned on the RETURNED contribution (present ⇔ the host
+ * persists one row; absent ⇔ opt-out). The payload-shape test persists the
+ * returned contribution inline (as the host would) to verify it round-trips
+ * through the StoredSession contract.
+ */
+import { mkdirSync, mkdtempSync, rmSync, writeFileSync } from 'node:fs';
+import { tmpdir } from 'node:os';
+import { join } from 'node:path';
+import { enterScope, generatePrefixedId, LanguageRegistry } from '@opensip-cli/core';
+import { DataStoreFactory } from '@opensip-cli/datastore';
+import { SessionRepo } from '@opensip-cli/session-store';
+import { afterEach, beforeEach, describe, expect, it, vi } from 'vitest';
+import { executeGraph } from '../../cli/graph.js';
+import { currentAdapterRegistry } from '../../lang-adapter/registry.js';
+import { makeGraphTestScope } from '../test-utils/with-graph-scope.js';
+function fakeAdapter(projectDir) {
+    return {
+        id: 'fake',
+        fileExtensions: ['.ts'],
+        displayName: 'Fake',
+        discoverFiles: () => ({
+            projectDirAbs: projectDir,
+            files: [join(projectDir, 'src', 'a.ts')],
+        }),
+        parseProject: () => ({ project: { dummy: true }, parseErrors: [] }),
+        walkProject: () => ({
+            occurrences: {
+                fn: [
+                    {
+                        bodyHash: 'h1',
+                        bodySize: 100,
+                        simpleName: 'fn',
+                        qualifiedName: 'src/a.fn',
+                        filePath: 'src/a.ts',
+                        line: 1,
+                        column: 0,
+                        endLine: 5,
+                        kind: 'function-declaration',
+                        params: [],
+                        returnType: null,
+                        enclosingClass: null,
+                        decorators: [],
+                        visibility: 'module-local',
+                        inTestFile: false,
+                        definedInGenerated: false,
+                        calls: [],
+                    },
+                ],
+            },
+            callSites: [],
+            parseErrors: [],
+        }),
+        resolveCallSites: () => ({
+            edgesByOwner: new Map(),
+            stats: {
+                totalCallSites: 0,
+                resolvedHigh: 0,
+                resolvedMedium: 0,
+                resolvedLow: 0,
+                unresolved: 0,
+            },
+        }),
+        cacheKey: () => 'fake-v1',
+    };
+}
+function mockCli(datastore, languages) {
+    return {
+        datastore,
+        setExitCode: vi.fn(),
+        render: () => Promise.resolve(),
+        scope: {
+            datastore: () => datastore,
+            languages: languages ?? new LanguageRegistry(),
+        },
+    };
+}
+function workspaceLangRegistry(units) {
+    const r = new LanguageRegistry();
+    const adapter = {
+        id: 'typescript',
+        fileExtensions: ['.ts'],
+        parse: () => null,
+        stripStrings: (s) => s,
+        stripComments: (s) => s,
+        // eslint-disable-next-line @typescript-eslint/require-await
+        discoverWorkspaceUnits: async () => units,
+    };
+    r.register(adapter);
+    return r;
+}
+/**
+ * Persist a returned {@link ToolSessionContribution} exactly as the host run
+ * plane would (stamping `startedAt`/`completedAt`/`durationMs`/`id` — timing is
+ * host-owned now). Mirrors the StoredSession contract so the payload-shape test
+ * exercises the same round-trip the production host path produces.
+ */
+function hostPersist(datastore, contribution) {
+    const now = '2026-01-01T00:00:00.000Z';
+    const row = {
+        id: generatePrefixedId('graph'),
+        tool: contribution.tool,
+        startedAt: now,
+        completedAt: now,
+        ...(contribution.recipe === undefined ? {} : { recipe: contribution.recipe }),
+        cwd: contribution.cwd,
+        score: contribution.score,
+        passed: contribution.passed,
+        durationMs: 0,
+        ...(contribution.payload === undefined ? {} : { payload: contribution.payload }),
+    };
+    new SessionRepo(datastore).save(row);
+}
+let stdoutSpy;
+let stderrSpy;
+let projectDir;
+let datastore;
+beforeEach(() => {
+    enterScope(makeGraphTestScope());
+    projectDir = mkdtempSync(join(tmpdir(), 'graph-session-'));
+    datastore = DataStoreFactory.open({ backend: 'memory' });
+    currentAdapterRegistry().register(fakeAdapter(projectDir));
+    stdoutSpy = vi.spyOn(process.stdout, 'write').mockImplementation(() => true);
+    stderrSpy = vi.spyOn(process.stderr, 'write').mockImplementation(() => true);
+});
+afterEach(() => {
+    currentAdapterRegistry().clear();
+    datastore.close();
+    stdoutSpy.mockRestore();
+    stderrSpy.mockRestore();
+    rmSync(projectDir, { recursive: true, force: true });
+});
+describe('D12 — one CLI invocation = one session', () => {
+    it('default run contributes exactly one session', async () => {
+        const outcome = await executeGraph({ cwd: projectDir, noCache: true }, mockCli(datastore));
+        expect(outcome?.session).toBeDefined();
+        expect(outcome?.session?.tool).toBe('graph');
+    });
+    it('single positional path contributes exactly one session', async () => {
+        mkdirSync(join(projectDir, 'sub'));
+        const outcome = await executeGraph({ cwd: projectDir, noCache: true, paths: [join(projectDir, 'sub')] }, mockCli(datastore));
+        expect(outcome?.session).toBeDefined();
+    });
+    it('multiple positional paths contribute exactly one aggregate session', async () => {
+        mkdirSync(join(projectDir, 'a'));
+        mkdirSync(join(projectDir, 'b'));
+        const outcome = await executeGraph({
+            cwd: projectDir,
+            noCache: true,
+            paths: [join(projectDir, 'a'), join(projectDir, 'b')],
+        }, mockCli(datastore));
+        // One aggregate contribution for the whole multi-path invocation.
+        expect(outcome?.session).toBeDefined();
+    });
+    it('--workspace contributes exactly one aggregate session (not one per unit)', async () => {
+        const pkgA = join(projectDir, 'packages', 'a');
+        mkdirSync(pkgA, { recursive: true });
+        writeFileSync(join(pkgA, 'tsconfig.json'), '{}');
+        writeFileSync(join(projectDir, 'tsconfig.json'), '{}');
+        const fakeCliPath = join(projectDir, 'fake.cjs');
+        writeFileSync(fakeCliPath, `process.stdout.write(JSON.stringify({version:'1.0',tool:'graph',timestamp:new Date().toISOString(),recipe:'graph',score:100,passed:true,summary:{total:0,passed:0,failed:0,errors:0,warnings:0},checks:[],durationMs:0}));process.exit(0);`);
+        const units = [
+            { id: 'a', rootDir: pkgA, configPath: join(pkgA, 'tsconfig.json') },
+        ];
+        const outcome = await executeGraph({
+            cwd: projectDir,
+            noCache: true,
+            workspace: true,
+            cliScript: fakeCliPath,
+            concurrency: 1,
+        }, mockCli(datastore, workspaceLangRegistry(units)));
+        // One aggregate contribution, and NO deliverable envelope (audit P1-2).
+        expect(outcome?.session).toBeDefined();
+        expect(outcome?.envelope).toBeUndefined();
+    });
+    it('--json opts out of session contribution', async () => {
+        const outcome = await executeGraph({ cwd: projectDir, noCache: true, json: true }, mockCli(datastore));
+        expect(outcome?.session).toBeUndefined();
+    });
+    it('--gate-save opts out of session contribution', async () => {
+        const outcome = await executeGraph({ cwd: projectDir, noCache: true, gateSave: true }, mockCli(datastore));
+        expect(outcome?.session).toBeUndefined();
+    });
+    it('--report-to opts out of session contribution (even on failure)', async () => {
+        const outcome = await executeGraph({ cwd: projectDir, noCache: true, reportTo: 'http://127.0.0.1:1' }, mockCli(datastore));
+        expect(outcome?.session).toBeUndefined();
+    });
+});
+describe('graph session payload — rule-grouped detail is persisted', () => {
+    it('default run contributes a payload with summary + checks (not summary-only)', async () => {
+        const outcome = await executeGraph({ cwd: projectDir, noCache: true }, mockCli(datastore));
+        expect(outcome?.session).toBeDefined();
+        // Persist the returned contribution exactly as the host run plane would,
+        // then verify it round-trips through the StoredSession contract.
+        hostPersist(datastore, outcome.session);
+        const session = new SessionRepo(datastore).latest();
+        expect(session).not.toBeNull();
+        const payload = session?.payload;
+        expect(payload).toBeDefined();
+        // The native signal summary is carried verbatim from the run's SignalEnvelope.
+        expect(payload?.summary).toEqual(expect.objectContaining({
+            total: expect.any(Number),
+            passed: expect.any(Number),
+            failed: expect.any(Number),
+            errors: expect.any(Number),
+            warnings: expect.any(Number),
+        }));
+        // The rule-grouped detail (`checks`) is what the Code Paths → Sessions
+        // panel renders, and the reason the payload is no longer summary-only.
+        // A regression to `{ summary }` (the pre-extension shape) drops this key —
+        // session count stays 1, so only this assertion catches it.
+        expect(payload).toHaveProperty('checks');
+        expect(Array.isArray(payload?.checks)).toBe(true);
+    });
+});
+//# sourceMappingURL=session-contract.test.js.map

package/dist/__tests__/cli/session-contract.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"session-contract.test.js","sourceRoot":"","sources":["../../../src/__tests__/cli/session-contract.test.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,EAAE,SAAS,EAAE,WAAW,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AACxE,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACjC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAEjC,OAAO,EAAE,UAAU,EAAE,kBAAkB,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AACrF,OAAO,EAAE,gBAAgB,EAAkB,MAAM,wBAAwB,CAAC;AAC1E,OAAO,EAAE,WAAW,EAAE,MAAM,4BAA4B,CAAC;AACzD,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,EAAqB,MAAM,QAAQ,CAAC;AAE5F,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,sBAAsB,EAAE,MAAM,gCAAgC,CAAC;AACxE,OAAO,EAAE,kBAAkB,EAAE,MAAM,mCAAmC,CAAC;AAkBvE,SAAS,WAAW,CAAC,UAAkB;IACrC,OAAO;QACL,EAAE,EAAE,MAAM;QACV,cAAc,EAAE,CAAC,KAAK,CAAC;QACvB,WAAW,EAAE,MAAM;QACnB,aAAa,EAAE,GAAmB,EAAE,CAAC,CAAC;YACpC,aAAa,EAAE,UAAU;YACzB,KAAK,EAAE,CAAC,IAAI,CAAC,UAAU,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC;SACzC,CAAC;QACF,YAAY,EAAE,GAAgB,EAAE,CAAC,CAAC,EAAE,OAAO,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,WAAW,EAAE,EAAE,EAAE,CAAC;QAChF,WAAW,EAAE,GAAe,EAAE,CAAC,CAAC;YAC9B,WAAW,EAAE;gBACX,EAAE,EAAE;oBACF;wBACE,QAAQ,EAAE,IAAI;wBACd,QAAQ,EAAE,GAAG;wBACb,UAAU,EAAE,IAAI;wBAChB,aAAa,EAAE,UAAU;wBACzB,QAAQ,EAAE,UAAU;wBACpB,IAAI,EAAE,CAAC;wBACP,MAAM,EAAE,CAAC;wBACT,OAAO,EAAE,CAAC;wBACV,IAAI,EAAE,sBAAsB;wBAC5B,MAAM,EAAE,EAAE;wBACV,UAAU,EAAE,IAAI;wBAChB,cAAc,EAAE,IAAI;wBACpB,UAAU,EAAE,EAAE;wBACd,UAAU,EAAE,cAAc;wBAC1B,UAAU,EAAE,KAAK;wBACjB,kBAAkB,EAAE,KAAK;wBACzB,KAAK,EAAE,EAAE;qBACV;iBACF;aACF;YACD,SAAS,EAAE,EAAE;YACb,WAAW,EAAE,EAAE;SAChB,CAAC;QACF,gBAAgB,EAAE,GAAkB,EAAE,CAAC,CAAC;YACtC,YAAY,EAAE,IAAI,GAAG,EAAE;YACvB,KAAK,EAAE;gBACL,cAAc,EAAE,CAAC;gBACjB,YAAY,EAAE,CAAC;gBACf,cAAc,EAAE,CAAC;gBACjB,WAAW,EAAE,CAAC;gBACd,UAAU,EAAE,CAAC;aACd;SACF,CAAC;QACF,QAAQ,EAAE,GAAG,EAAE,CAAC,SAAS;KAC1B,CAAC;AACJ,CAAC;AAED,SAAS,OAAO,CAAC,SAAoB,EAAE,SAA4B;IACjE,OAAO;QACL,SAAS;QACT,WAAW,EAAE,EAAE,CAAC,EAAE,EAAE;QACpB,MAAM,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,OAAO,EAAE;QAC/B,KAAK,EAAE;YACL,SAAS,EAAE,GAAG,EAAE,CAAC,SAAS;YAC1B,SAAS,EAAE,SAAS,IAAI,IAAI,gBAAgB,EAAE;SAC/C;KAC2B,CAAC;AACjC,CAAC;AAED,SAAS,qBAAqB,CAAC,KAA+B;IAC5D,MAAM,CAAC,GAAG,IAAI,gBAAgB,EAAE,CAAC;IACjC,MAAM,OAAO,GAAoB;QAC/B,EAAE,EAAE,YAAY;QAChB,cAAc,EAAE,CAAC,KAAK,CAAC;QACvB,KAAK,EAAE,GAAG,EAAE,CAAC,IAAI;QACjB,YAAY,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QACtB,aAAa,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QACvB,4DAA4D;QAC5D,sBAAsB,EAAE,KAAK,IAAI,EAAE,CAAC,KAAK;KAC1C,CAAC;IACF,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;IACpB,OAAO,CAAC,CAAC;AACX,CAAC;AAED;;;;;GAKG;AACH,SAAS,WAAW,CAAC,SAAoB,EAAE,YAAqC;IAC9E,MAAM,GAAG,GAAG,0BAA0B,CAAC;IACvC,MAAM,GAAG,GAAkB;QACzB,EAAE,EAAE,kBAAkB,CAAC,OAAO,CAAC;QAC/B,IAAI,EAAE,YAAY,CAAC,IAAI;QACvB,SAAS,EAAE,GAAG;QACd,WAAW,EAAE,GAAG;QAChB,GAAG,CAAC,YAAY,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,YAAY,CAAC,MAAM,EAAE,CAAC;QAC7E,GAAG,EAAE,YAAY,CAAC,GAAG;QACrB,KAAK,EAAE,YAAY,CAAC,KAAK;QACzB,MAAM,EAAE,YAAY,CAAC,MAAM;QAC3B,UAAU,EAAE,CAAC;QACb,GAAG,CAAC,YAAY,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,YAAY,CAAC,OAAO,EAAE,CAAC;KACjF,CAAC;IACF,IAAI,WAAW,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AACvC,CAAC;AAED,IAAI,SAAoD,CAAC;AACzD,IAAI,SAAoD,CAAC;AACzD,IAAI,UAAkB,CAAC;AACvB,IAAI,SAAoB,CAAC;AAEzB,UAAU,CAAC,GAAG,EAAE;IACd,UAAU,CAAC,kBAAkB,EAAE,CAAC,CAAC;IACjC,UAAU,GAAG,WAAW,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,gBAAgB,CAAC,CAAC,CAAC;IAC3D,SAAS,GAAG,gBAAgB,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC,CAAC;IACzD,sBAAsB,EAAE,CAAC,QAAQ,CAAC,WAAW,CAAC,UAAU,CAAC,CAAC,CAAC;IAC3D,SAAS,GAAG,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,kBAAkB,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;IAC7E,SAAS,GAAG,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,kBAAkB,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;AAC/E,CAAC,CAAC,CAAC;AAEH,SAAS,CAAC,GAAG,EAAE;IACb,sBAAsB,EAAE,CAAC,KAAK,EAAE,CAAC;IACjC,SAAS,CAAC,KAAK,EAAE,CAAC;IAClB,SAAS,CAAC,WAAW,EAAE,CAAC;IACxB,SAAS,CAAC,WAAW,EAAE,CAAC;IACxB,MAAM,CAAC,UAAU,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;AACvD,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,wCAAwC,EAAE,GAAG,EAAE;IACtD,EAAE,CAAC,6CAA6C,EAAE,KAAK,IAAI,EAAE;QAC3D,MAAM,OAAO,GAAG,MAAM,YAAY,CAAC,EAAE,GAAG,EAAE,UAAU,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC;QAC3F,MAAM,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,WAAW,EAAE,CAAC;QACvC,MAAM,CAAC,OAAO,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAC/C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,wDAAwD,EAAE,KAAK,IAAI,EAAE;QACtE,SAAS,CAAC,IAAI,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC,CAAC;QACnC,MAAM,OAAO,GAAG,MAAM,YAAY,CAChC,EAAE,GAAG,EAAE,UAAU,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,IAAI,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC,EAAE,EACpE,OAAO,CAAC,SAAS,CAAC,CACnB,CAAC;QACF,MAAM,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,WAAW,EAAE,CAAC;IACzC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,oEAAoE,EAAE,KAAK,IAAI,EAAE;QAClF,SAAS,CAAC,IAAI,CAAC,UAAU,EAAE,GAAG,CAAC,CAAC,CAAC;QACjC,SAAS,CAAC,IAAI,CAAC,UAAU,EAAE,GAAG,CAAC,CAAC,CAAC;QACjC,MAAM,OAAO,GAAG,MAAM,YAAY,CAChC;YACE,GAAG,EAAE,UAAU;YACf,OAAO,EAAE,IAAI;YACb,KAAK,EAAE,CAAC,IAAI,CAAC,UAAU,EAAE,GAAG,CAAC,EAAE,IAAI,CAAC,UAAU,EAAE,GAAG,CAAC,CAAC;SACtD,EACD,OAAO,CAAC,SAAS,CAAC,CACnB,CAAC;QACF,kEAAkE;QAClE,MAAM,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,WAAW,EAAE,CAAC;IACzC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,0EAA0E,EAAE,KAAK,IAAI,EAAE;QACxF,MAAM,IAAI,GAAG,IAAI,CAAC,UAAU,EAAE,UAAU,EAAE,GAAG,CAAC,CAAC;QAC/C,SAAS,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACrC,aAAa,CAAC,IAAI,CAAC,IAAI,EAAE,eAAe,CAAC,EAAE,IAAI,CAAC,CAAC;QACjD,aAAa,CAAC,IAAI,CAAC,UAAU,EAAE,eAAe,CAAC,EAAE,IAAI,CAAC,CAAC;QACvD,MAAM,WAAW,GAAG,IAAI,CAAC,UAAU,EAAE,UAAU,CAAC,CAAC;QACjD,aAAa,CACX,WAAW,EACX,4OAA4O,CAC7O,CAAC;QACF,MAAM,KAAK,GAAoB;YAC7B,EAAE,EAAE,EAAE,GAAG,EAAE,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,CAAC,IAAI,EAAE,eAAe,CAAC,EAAE;SACpE,CAAC;QACF,MAAM,OAAO,GAAG,MAAM,YAAY,CAChC;YACE,GAAG,EAAE,UAAU;YACf,OAAO,EAAE,IAAI;YACb,SAAS,EAAE,IAAI;YACf,SAAS,EAAE,WAAW;YACtB,WAAW,EAAE,CAAC;SACf,EACD,OAAO,CAAC,SAAS,EAAE,qBAAqB,CAAC,KAAK,CAAC,CAAC,CACjD,CAAC;QACF,wEAAwE;QACxE,MAAM,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,WAAW,EAAE,CAAC;QACvC,MAAM,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC,aAAa,EAAE,CAAC;IAC5C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,yCAAyC,EAAE,KAAK,IAAI,EAAE;QACvD,MAAM,OAAO,GAAG,MAAM,YAAY,CAChC,EAAE,GAAG,EAAE,UAAU,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,EAC9C,OAAO,CAAC,SAAS,CAAC,CACnB,CAAC;QACF,MAAM,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,aAAa,EAAE,CAAC;IAC3C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,8CAA8C,EAAE,KAAK,IAAI,EAAE;QAC5D,MAAM,OAAO,GAAG,MAAM,YAAY,CAChC,EAAE,GAAG,EAAE,UAAU,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,EAClD,OAAO,CAAC,SAAS,CAAC,CACnB,CAAC;QACF,MAAM,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,aAAa,EAAE,CAAC;IAC3C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,gEAAgE,EAAE,KAAK,IAAI,EAAE;QAC9E,MAAM,OAAO,GAAG,MAAM,YAAY,CAChC,EAAE,GAAG,EAAE,UAAU,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,oBAAoB,EAAE,EAClE,OAAO,CAAC,SAAS,CAAC,CACnB,CAAC;QACF,MAAM,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,aAAa,EAAE,CAAC;IAC3C,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,0DAA0D,EAAE,GAAG,EAAE;IACxE,EAAE,CAAC,4EAA4E,EAAE,KAAK,IAAI,EAAE;QAC1F,MAAM,OAAO,GAAG,MAAM,YAAY,CAAC,EAAE,GAAG,EAAE,UAAU,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC;QAC3F,MAAM,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,WAAW,EAAE,CAAC;QAEvC,yEAAyE;QACzE,iEAAiE;QACjE,WAAW,CAAC,SAAS,EAAE,OAAQ,CAAC,OAAQ,CAAC,CAAC;QAE1C,MAAM,OAAO,GAAG,IAAI,WAAW,CAAC,SAAS,CAAC,CAAC,MAAM,EAAE,CAAC;QACpD,MAAM,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC;QAE/B,MAAM,OAAO,GAAG,OAAO,EAAE,OAA0C,CAAC;QACpE,MAAM,CAAC,OAAO,CAAC,CAAC,WAAW,EAAE,CAAC;QAE9B,+EAA+E;QAC/E,MAAM,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,OAAO,CAC9B,MAAM,CAAC,gBAAgB,CAAC;YACtB,KAAK,EAAE,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC;YACzB,MAAM,EAAE,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC;YAC1B,MAAM,EAAE,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC;YAC1B,MAAM,EAAE,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC;YAC1B,QAAQ,EAAE,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC;SAC7B,CAAC,CACH,CAAC;QAEF,uEAAuE;QACvE,uEAAuE;QACvE,2EAA2E;QAC3E,4DAA4D;QAC5D,MAAM,CAAC,OAAO,CAAC,CAAC,cAAc,CAAC,QAAQ,CAAC,CAAC;QACzC,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACpD,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/__tests__/cli/symbol-index.test.d.ts

@@ -0,0 +1,7 @@
+/**
+ * Coverage for `opensip graph symbol-index --out <path>` — the
+ * read-only artifact emitter that serializes the persisted catalog as
+ * a name→{file,line,…} + file→names lookup table.
+ */
+export {};
+//# sourceMappingURL=symbol-index.test.d.ts.map

package/dist/__tests__/cli/symbol-index.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"symbol-index.test.d.ts","sourceRoot":"","sources":["../../../src/__tests__/cli/symbol-index.test.ts"],"names":[],"mappings":"AAAA;;;;GAIG"}

package/dist/__tests__/cli/symbol-index.test.js

@@ -0,0 +1,117 @@
+/**
+ * Coverage for `opensip graph symbol-index --out <path>` — the
+ * read-only artifact emitter that serializes the persisted catalog as
+ * a name→{file,line,…} + file→names lookup table.
+ */
+import { mkdtempSync, readFileSync, rmSync } from 'node:fs';
+import { tmpdir } from 'node:os';
+import { join } from 'node:path';
+import { DataStoreFactory } from '@opensip-cli/datastore';
+import { afterEach, beforeEach, describe, expect, it, vi } from 'vitest';
+import { buildArtifact, executeSymbolIndex } from '../../cli/symbol-index.js';
+import { CatalogRepo } from '../../persistence/catalog-repo.js';
+import { occ } from '../rules/_helpers.js';
+function makeCatalog(occs) {
+    const functions = {};
+    for (const o of occs) {
+        let bucket = functions[o.simpleName];
+        if (!bucket) {
+            bucket = [];
+            functions[o.simpleName] = bucket;
+        }
+        bucket.push(o);
+    }
+    return {
+        version: '3.0',
+        tool: 'graph',
+        language: 'typescript',
+        builtAt: 'x',
+        cacheKey: 'ts-test-v3',
+        functions,
+    };
+}
+function mockCli(datastore) {
+    const setExitCode = vi.fn();
+    return {
+        cli: {
+            datastore,
+            setExitCode,
+            scope: { datastore: () => datastore },
+        },
+        setExitCode,
+    };
+}
+let datastore;
+let workDir;
+let stdoutSpy;
+let stderrSpy;
+beforeEach(() => {
+    datastore = DataStoreFactory.open({ backend: 'memory' });
+    workDir = mkdtempSync(join(tmpdir(), 'graph-symbol-index-'));
+    stdoutSpy = vi.spyOn(process.stdout, 'write').mockImplementation(() => true);
+    stderrSpy = vi.spyOn(process.stderr, 'write').mockImplementation(() => true);
+});
+afterEach(() => {
+    stdoutSpy.mockRestore();
+    stderrSpy.mockRestore();
+    datastore.close();
+    rmSync(workDir, { recursive: true, force: true });
+});
+describe('graph symbol-index', () => {
+    describe('buildArtifact', () => {
+        it('builds bidirectional indexes from a catalog and skips module-init', () => {
+            const a = occ({ bodyHash: 'a', simpleName: 'fnA', filePath: 'src/a.ts' });
+            const b = occ({ bodyHash: 'b', simpleName: 'fnB', filePath: 'src/a.ts' });
+            const m = occ({
+                bodyHash: 'm',
+                simpleName: '<module-init:src/a.ts>',
+                kind: 'module-init',
+                filePath: 'src/a.ts',
+            });
+            const artifact = buildArtifact(makeCatalog([a, b, m]));
+            expect(Object.keys(artifact.symbols).sort()).toEqual(['fnA', 'fnB']);
+            expect(artifact.symbols.fnA?.[0]?.bodyHash).toBe('a');
+            expect([...(artifact.fileSymbols['src/a.ts'] ?? [])].sort()).toEqual(['fnA', 'fnB']);
+        });
+        it('dedupes the per-file name list when the same name has multiple occurrences', () => {
+            const o1 = occ({ bodyHash: 'h1', simpleName: 'fn', filePath: 'src/a.ts' });
+            const o2 = occ({ bodyHash: 'h2', simpleName: 'fn', filePath: 'src/a.ts' });
+            const artifact = buildArtifact(makeCatalog([o1, o2]));
+            expect(artifact.symbols.fn).toHaveLength(2);
+            expect(artifact.fileSymbols['src/a.ts']).toEqual(['fn']);
+        });
+    });
+    describe('executeSymbolIndex', () => {
+        it('writes a JSON artifact and reports symbol/file counts', () => {
+            new CatalogRepo(datastore).replaceAll(makeCatalog([
+                occ({ bodyHash: 'h1', simpleName: 'fnA', filePath: 'src/a.ts' }),
+                occ({ bodyHash: 'h2', simpleName: 'fnB', filePath: 'src/b.ts' }),
+            ]));
+            const { cli, setExitCode } = mockCli(datastore);
+            executeSymbolIndex({ cwd: workDir, out: 'out.json' }, cli);
+            expect(setExitCode).toHaveBeenCalledWith(0);
+            const payload = JSON.parse(readFileSync(join(workDir, 'out.json'), 'utf8'));
+            expect(Object.keys(payload.symbols).sort()).toEqual(['fnA', 'fnB']);
+            expect(Object.keys(payload.fileSymbols).sort()).toEqual(['src/a.ts', 'src/b.ts']);
+        });
+        it('creates the parent directory when --out is nested', () => {
+            new CatalogRepo(datastore).replaceAll(makeCatalog([occ({ bodyHash: 'h1', simpleName: 'fnA', filePath: 'src/a.ts' })]));
+            const { cli, setExitCode } = mockCli(datastore);
+            executeSymbolIndex({ cwd: workDir, out: join('nested', 'deep', 'out.json') }, cli);
+            expect(setExitCode).toHaveBeenCalledWith(0);
+            const payload = JSON.parse(readFileSync(join(workDir, 'nested', 'deep', 'out.json'), 'utf8'));
+            expect(Object.keys(payload.symbols)).toEqual(['fnA']);
+        });
+        it('errors with CONFIGURATION_ERROR when no catalog has been built', () => {
+            const { cli, setExitCode } = mockCli(datastore);
+            executeSymbolIndex({ cwd: workDir, out: 'out.json' }, cli);
+            expect(setExitCode).toHaveBeenCalledWith(2);
+        });
+        it('errors with CONFIGURATION_ERROR when no DataStore is wired', () => {
+            const { cli, setExitCode } = mockCli(undefined);
+            executeSymbolIndex({ cwd: workDir, out: 'out.json' }, cli);
+            expect(setExitCode).toHaveBeenCalledWith(2);
+        });
+    });
+});
+//# sourceMappingURL=symbol-index.test.js.map

package/dist/__tests__/cli/symbol-index.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"symbol-index.test.js","sourceRoot":"","sources":["../../../src/__tests__/cli/symbol-index.test.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AAC5D,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACjC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAEjC,OAAO,EAAE,gBAAgB,EAAkB,MAAM,wBAAwB,CAAC;AAC1E,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,EAAqB,MAAM,QAAQ,CAAC;AAE5F,OAAO,EAAE,aAAa,EAAE,kBAAkB,EAAE,MAAM,2BAA2B,CAAC;AAC9E,OAAO,EAAE,WAAW,EAAE,MAAM,mCAAmC,CAAC;AAChE,OAAO,EAAE,GAAG,EAAE,MAAM,sBAAsB,CAAC;AAK3C,SAAS,WAAW,CAAC,IAAmC;IACtD,MAAM,SAAS,GAAyC,EAAE,CAAC;IAC3D,KAAK,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC;QACrB,IAAI,MAAM,GAAG,SAAS,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC;QACrC,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,MAAM,GAAG,EAAE,CAAC;YACZ,SAAS,CAAC,CAAC,CAAC,UAAU,CAAC,GAAG,MAAM,CAAC;QACnC,CAAC;QACD,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACjB,CAAC;IACD,OAAO;QACL,OAAO,EAAE,KAAK;QACd,IAAI,EAAE,OAAO;QACb,QAAQ,EAAE,YAAY;QACtB,OAAO,EAAE,GAAG;QACZ,QAAQ,EAAE,YAAY;QACtB,SAAS;KACV,CAAC;AACJ,CAAC;AAOD,SAAS,OAAO,CAAC,SAAgC;IAC/C,MAAM,WAAW,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC;IAC5B,OAAO;QACL,GAAG,EAAE;YACH,SAAS;YACT,WAAW;YACX,KAAK,EAAE,EAAE,SAAS,EAAE,GAAG,EAAE,CAAC,SAAS,EAAE;SACT;QAC9B,WAAW;KACZ,CAAC;AACJ,CAAC;AAED,IAAI,SAAoB,CAAC;AACzB,IAAI,OAAe,CAAC;AACpB,IAAI,SAAoD,CAAC;AACzD,IAAI,SAAoD,CAAC;AAEzD,UAAU,CAAC,GAAG,EAAE;IACd,SAAS,GAAG,gBAAgB,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC,CAAC;IACzD,OAAO,GAAG,WAAW,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,qBAAqB,CAAC,CAAC,CAAC;IAC7D,SAAS,GAAG,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,kBAAkB,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;IAC7E,SAAS,GAAG,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,kBAAkB,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;AAC/E,CAAC,CAAC,CAAC;AAEH,SAAS,CAAC,GAAG,EAAE;IACb,SAAS,CAAC,WAAW,EAAE,CAAC;IACxB,SAAS,CAAC,WAAW,EAAE,CAAC;IACxB,SAAS,CAAC,KAAK,EAAE,CAAC;IAClB,MAAM,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;AACpD,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,oBAAoB,EAAE,GAAG,EAAE;IAClC,QAAQ,CAAC,eAAe,EAAE,GAAG,EAAE;QAC7B,EAAE,CAAC,mEAAmE,EAAE,GAAG,EAAE;YAC3E,MAAM,CAAC,GAAG,GAAG,CAAC,EAAE,QAAQ,EAAE,GAAG,EAAE,UAAU,EAAE,KAAK,EAAE,QAAQ,EAAE,UAAU,EAAE,CAAC,CAAC;YAC1E,MAAM,CAAC,GAAG,GAAG,CAAC,EAAE,QAAQ,EAAE,GAAG,EAAE,UAAU,EAAE,KAAK,EAAE,QAAQ,EAAE,UAAU,EAAE,CAAC,CAAC;YAC1E,MAAM,CAAC,GAAG,GAAG,CAAC;gBACZ,QAAQ,EAAE,GAAG;gBACb,UAAU,EAAE,wBAAwB;gBACpC,IAAI,EAAE,aAAa;gBACnB,QAAQ,EAAE,UAAU;aACrB,CAAC,CAAC;YACH,MAAM,QAAQ,GAAG,aAAa,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;YACvD,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC;YACrE,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YACtD,MAAM,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,WAAW,CAAC,UAAU,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC;QACvF,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,4EAA4E,EAAE,GAAG,EAAE;YACpF,MAAM,EAAE,GAAG,GAAG,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,QAAQ,EAAE,UAAU,EAAE,CAAC,CAAC;YAC3E,MAAM,EAAE,GAAG,GAAG,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,QAAQ,EAAE,UAAU,EAAE,CAAC,CAAC;YAC3E,MAAM,QAAQ,GAAG,aAAa,CAAC,WAAW,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC;YACtD,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;YAC5C,MAAM,CAAC,QAAQ,CAAC,WAAW,CAAC,UAAU,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;QAC3D,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,oBAAoB,EAAE,GAAG,EAAE;QAClC,EAAE,CAAC,uDAAuD,EAAE,GAAG,EAAE;YAC/D,IAAI,WAAW,CAAC,SAAS,CAAC,CAAC,UAAU,CACnC,WAAW,CAAC;gBACV,GAAG,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,UAAU,EAAE,KAAK,EAAE,QAAQ,EAAE,UAAU,EAAE,CAAC;gBAChE,GAAG,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,UAAU,EAAE,KAAK,EAAE,QAAQ,EAAE,UAAU,EAAE,CAAC;aACjE,CAAC,CACH,CAAC;YACF,MAAM,EAAE,GAAG,EAAE,WAAW,EAAE,GAAG,OAAO,CAAC,SAAS,CAAC,CAAC;YAChD,kBAAkB,CAAC,EAAE,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,UAAU,EAAE,EAAE,GAAG,CAAC,CAAC;YAC3D,MAAM,CAAC,WAAW,CAAC,CAAC,oBAAoB,CAAC,CAAC,CAAC,CAAC;YAC5C,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,CAAC,OAAO,EAAE,UAAU,CAAC,EAAE,MAAM,CAAC,CAGzE,CAAC;YACF,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC;YACpE,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,UAAU,EAAE,UAAU,CAAC,CAAC,CAAC;QACpF,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,mDAAmD,EAAE,GAAG,EAAE;YAC3D,IAAI,WAAW,CAAC,SAAS,CAAC,CAAC,UAAU,CACnC,WAAW,CAAC,CAAC,GAAG,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,UAAU,EAAE,KAAK,EAAE,QAAQ,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC,CAChF,CAAC;YACF,MAAM,EAAE,GAAG,EAAE,WAAW,EAAE,GAAG,OAAO,CAAC,SAAS,CAAC,CAAC;YAChD,kBAAkB,CAAC,EAAE,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,IAAI,CAAC,QAAQ,EAAE,MAAM,EAAE,UAAU,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC;YACnF,MAAM,CAAC,WAAW,CAAC,CAAC,oBAAoB,CAAC,CAAC,CAAC,CAAC;YAC5C,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CACxB,YAAY,CAAC,IAAI,CAAC,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,UAAU,CAAC,EAAE,MAAM,CAAC,CACxB,CAAC;YAC5C,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC;QACxD,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,gEAAgE,EAAE,GAAG,EAAE;YACxE,MAAM,EAAE,GAAG,EAAE,WAAW,EAAE,GAAG,OAAO,CAAC,SAAS,CAAC,CAAC;YAChD,kBAAkB,CAAC,EAAE,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,UAAU,EAAE,EAAE,GAAG,CAAC,CAAC;YAC3D,MAAM,CAAC,WAAW,CAAC,CAAC,oBAAoB,CAAC,CAAC,CAAC,CAAC;QAC9C,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,4DAA4D,EAAE,GAAG,EAAE;YACpE,MAAM,EAAE,GAAG,EAAE,WAAW,EAAE,GAAG,OAAO,CAAC,SAAS,CAAC,CAAC;YAChD,kBAAkB,CAAC,EAAE,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,UAAU,EAAE,EAAE,GAAG,CAAC,CAAC;YAC3D,MAAM,CAAC,WAAW,CAAC,CAAC,oBAAoB,CAAC,CAAC,CAAC,CAAC;QAC9C,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/__tests__/cli/tool-show-mode.test.d.ts

@@ -0,0 +1,10 @@
+/**
+ * Coverage for graph's `--show` session-replay handler (`runGraphShowMode`).
+ *
+ * Like `sim`, `graph` wires replay into its run command as a `--show <session>`
+ * flag handled inside `graph-command-spec.ts`. This drives that handler through
+ * the real `graphCommandSpec.handler` with a fake `ToolCliContext` whose scope
+ * carries a datastore.
+ */
+export {};
+//# sourceMappingURL=tool-show-mode.test.d.ts.map

package/dist/__tests__/cli/tool-show-mode.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tool-show-mode.test.d.ts","sourceRoot":"","sources":["../../../src/__tests__/cli/tool-show-mode.test.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG"}

package/dist/__tests__/cli/tool-show-mode.test.js

@@ -0,0 +1,128 @@
+/**
+ * Coverage for graph's `--show` session-replay handler (`runGraphShowMode`).
+ *
+ * Like `sim`, `graph` wires replay into its run command as a `--show <session>`
+ * flag handled inside `graph-command-spec.ts`. This drives that handler through
+ * the real `graphCommandSpec.handler` with a fake `ToolCliContext` whose scope
+ * carries a datastore.
+ */
+import { DataStoreFactory } from '@opensip-cli/datastore';
+import { SessionRepo } from '@opensip-cli/session-store';
+import { afterEach, beforeEach, describe, expect, it, vi } from 'vitest';
+import { graphCommandSpec } from '../../cli/graph/graph-command-spec.js';
+function graphSession(overrides = {}) {
+    return {
+        id: 'GRAPH_1',
+        tool: 'graph',
+        cwd: '/repo',
+        startedAt: '2026-06-08T00:00:00.000Z',
+        completedAt: '2026-06-08T00:00:00.000Z',
+        score: 80,
+        passed: false,
+        durationMs: 12,
+        payload: {
+            summary: { total: 1, passed: 0, failed: 1, errors: 1, warnings: 0 },
+            checks: [
+                {
+                    checkSlug: 'graph:god-file',
+                    passed: false,
+                    violationCount: 1,
+                    durationMs: 0,
+                    findings: [
+                        { ruleId: 'graph:god-file', message: 'too big', severity: 'error', filePath: 'a.ts' },
+                    ],
+                },
+            ],
+        },
+        ...overrides,
+    };
+}
+function makeContext(datastore) {
+    const rendered = [];
+    const emitted = [];
+    const exitCodes = [];
+    const ctx = {
+        scope: { datastore: () => datastore },
+        render: vi.fn((result) => {
+            rendered.push(result);
+            return Promise.resolve();
+        }),
+        registerLiveView: vi.fn(),
+        renderLive: vi.fn(() => Promise.resolve()),
+        maybeOpenReport: vi.fn(() => Promise.resolve()),
+        logger: { debug: vi.fn(), info: vi.fn(), warn: vi.fn(), error: vi.fn() },
+        setExitCode: (code) => {
+            exitCodes.push(code);
+        },
+        emitJson: (value) => {
+            emitted.push(value);
+        },
+        emitRaw: vi.fn(),
+        emitEnvelope: (value) => {
+            emitted.push(value);
+        },
+        emitError: (detail) => {
+            exitCodes.push(detail.exitCode);
+            emitted.push(detail);
+        },
+        deliverSignals: () => Promise.resolve(),
+        writeSarif: () => Promise.resolve(),
+    };
+    return { ctx, rendered, emitted, exitCodes };
+}
+let ds;
+beforeEach(() => {
+    ds = DataStoreFactory.open({ backend: 'memory' });
+});
+afterEach(() => {
+    ds.close();
+});
+describe('graph --show (runGraphShowMode)', () => {
+    it('replays a stored session by id and renders the result (non-JSON)', async () => {
+        new SessionRepo(ds).save(graphSession());
+        const { ctx, rendered } = makeContext(ds);
+        await graphCommandSpec.handler({ cwd: '/repo', show: 'GRAPH_1' }, ctx);
+        expect(rendered).toHaveLength(1);
+        // Replays render through the tool-agnostic session-replay view (not the live
+        // graph-done view) — uniform across tools, envelope-driven, no live footer.
+        expect(rendered[0]).toMatchObject({
+            type: 'session-replay',
+            session: { id: 'GRAPH_1', tool: 'graph' },
+            envelope: { tool: 'graph' },
+        });
+    });
+    it('emits a JSON replay wrapper when --json is passed', async () => {
+        new SessionRepo(ds).save(graphSession());
+        const { ctx, emitted } = makeContext(ds);
+        await graphCommandSpec.handler({ cwd: '/repo', show: 'GRAPH_1', json: true }, ctx);
+        expect(emitted).toHaveLength(1);
+        expect(emitted[0]).toMatchObject({
+            session: { id: 'GRAPH_1', tool: 'graph' },
+            fidelity: 'projection',
+            envelope: { tool: 'graph', runId: 'GRAPH_1' },
+        });
+    });
+    it('errors with datastore-unavailable when no datastore is present', async () => {
+        const { ctx, emitted, exitCodes } = makeContext(undefined);
+        await graphCommandSpec.handler({ cwd: '/repo', show: 'latest', json: true }, ctx);
+        expect(exitCodes).toContain(2);
+        expect(emitted[0]).toEqual({
+            message: 'session replay requires a datastore',
+            exitCode: 2,
+            code: 'datastore-unavailable',
+        });
+    });
+    it('errors (non-JSON) with a rendered error result when the session is missing', async () => {
+        const { ctx, rendered, exitCodes } = makeContext(ds);
+        await graphCommandSpec.handler({ cwd: '/repo', show: 'MISSING' }, ctx);
+        expect(exitCodes).toContain(2);
+        expect(rendered[0]).toMatchObject({ type: 'error' });
+    });
+    it('surfaces a decode-error when the stored payload is corrupt', async () => {
+        new SessionRepo(ds).save(graphSession({ id: 'GRAPH_BAD', payload: { not: 'valid' } }));
+        const { ctx, emitted } = makeContext(ds);
+        await graphCommandSpec.handler({ cwd: '/repo', show: 'GRAPH_BAD', json: true }, ctx);
+        expect(emitted[0]).toMatchObject({ code: 'decode-error' });
+    });
+});
+//# sourceMappingURL=tool-show-mode.test.js.map