@ophan/core 0.0.1 → 0.0.2

package/README.md

@@ -1,107 +1,70 @@
 # @ophan/core
 
-Multi-language analysis engine combining language-native AST parsing with Claude-powered security analysis and documentation.
-
-## Capabilities
-
-### Static Analysis
-- Function extraction via pluggable language parsers (`src/parsers/`)
-- TypeScript/JavaScript: TypeScript compiler API
-- Python: Python's own `ast` module via subprocess (zero npm deps)
-- Content hashing (SHA256) for change detection and content-addressed storage
-- AST traversal for control flow understanding
-
-### Content-Addressed Storage
-Analysis is keyed by SHA256 of function source code:
-- Same function on any branch = same hash = same analysis entry
-- Skip analysis entirely when hash already exists in DB
-- Insert-only sync — no conflict resolution needed
-- Orphaned hashes accumulate harmlessly until manual `ophan gc` (30-day grace period, safe for branch switching)
-
-### Two-Table Schema
-- `function_analysis` — `content_hash → analysis JSON, model_version, created_at, language, entity_type` (synced to cloud)
-- `file_functions` — `file_path + function_name → content_hash, file_mtime, language, entity_type` (local only). No line numbers — resolved at runtime via LSP/parser.
-
-### Incremental Scanning
-1. Check `file_mtime` against stored value — skip unchanged files entirely (no parse)
-2. Re-parse changed files, extract functions, compute hashes
-3. Look up hash in `function_analysis` — skip if exists
-4. Only call Claude API for functions with new/unknown hashes
-5. Update `file_functions` with file path, function name, content_hash, mtime
-
-### AI Analysis
-Leverages Claude to provide:
-- Natural language function descriptions
-- Parameter and return type documentation
-- Security vulnerability identification
-- Data flow classification
+The analysis engine behind [Ophan](https://ophan.dev) — AI-powered security analysis and documentation for codebases.
+
+This package provides the core analysis pipeline: source code parsing, function extraction, Claude-powered security analysis, and local SQLite storage. Used by [`@ophan/cli`](https://www.npmjs.com/package/@ophan/cli) and the [Ophan VS Code extension](https://marketplace.visualstudio.com/items?itemName=ophan.ophan).
+
+## What It Does
+
+- **Parses source code** using language-native ASTs (TypeScript compiler API, Python's `ast` module)
+- **Extracts functions** and computes SHA256 content hashes for change detection
+- **Analyzes with Claude** to detect security vulnerabilities and generate documentation
+- **Stores results** in a local SQLite database, keyed by content hash
 
 ### Security Detection
-Identifies common vulnerabilities:
-- SQL injection risks
-- Cross-site scripting (XSS) potential
-- Hardcoded secrets and credentials
-- Unsanitized user input
-- Path traversal vulnerabilities
-
-### Data Flow Tagging
-Classifies functions by data they handle:
-- `user_input` — Processes user-provided data
-- `pii` — Handles personally identifiable information
-- `credentials` — Works with authentication data
-- `database` — Database read/write operations
-- `external_api` — Makes external HTTP requests
-- `file_system` — File I/O operations
-- `config` — Configuration management
-- `internal` — Internal system operations
-
-## Storage
-
-SQLite database at `.ophan/index.db` (gitignored, per-repo). Designed for:
-- Fast querying by content hash, file path, and line number
-- Incremental updates (only new hashes trigger analysis)
-- JSON storage for structured analysis results
-- Branch-agnostic analysis with branch-specific location mappings
-
-## Multi-Language Architecture
-
-### Parser Interface (`src/parsers/`)
-
-Function extraction is handled by pluggable, language-specific parsers. Each implements the `LanguageParser` interface:
 
-```typescript
-interface LanguageParser {
-  language: string;       // e.g. "typescript", "python"
-  extensions: string[];   // e.g. [".ts", ".tsx"]
-  extractFunctions(filePath: string): FunctionInfo[];
-}
-```
+Identifies vulnerabilities including SQL injection, XSS, hardcoded secrets, path traversal, insecure deserialization, and unsanitized user input.
+
+### Data Flow Classification
+
+Tags functions by the data they handle: user input, PII, credentials, database operations, external APIs, file system access, and more.
+
+### Auto-Documentation
+
+Generates plain-English descriptions, parameter documentation, and return type documentation for every function.
 
-**Current parsers:**
-- **TypeScript/JavaScript** (`parsers/typescript.ts`): Uses the TypeScript compiler API. Handles `.ts`, `.tsx`, `.js`, `.jsx`.
-- **Python** (`parsers/python.ts`): Shells out to `python3` with an inline `ast` module script. Handles `.py`. Gracefully skips if `python3` not installed.
+## Supported Languages
 
-**To add a new language** (e.g. Go, Java):
-1. Create `parsers/go.ts` implementing `LanguageParser`
-2. Register it in `parsers/index.ts`
-3. That's it — the glob pattern, analysis pipeline, DB storage, and sync all pick it up automatically
+| Language | Parser | Extensions |
+|----------|--------|------------|
+| TypeScript | TypeScript compiler API | `.ts`, `.tsx` |
+| JavaScript | TypeScript compiler API | `.js`, `.jsx` |
+| Python | Python `ast` module | `.py` |
 
-**Why no tree-sitter?** Each language uses its own native tooling (TS compiler, Python's ast, go/parser, etc.) rather than a universal parser framework. This avoids native C dependencies, grammar management, and adds zero npm packages per language.
+## Usage
 
-### Schema Fields
+Most users should use [`@ophan/cli`](https://www.npmjs.com/package/@ophan/cli) or the [VS Code extension](https://marketplace.visualstudio.com/items?itemName=ophan.ophan) instead of importing this package directly.
 
-Both tables carry `language` and `entity_type` fields set at parse time:
-- **`language`**: Derived from file extension (`.ts` → `"typescript"`, `.py` → `"python"`). Drives prompt template selection and language-specific security flags.
-- **`entity_type`**: Derived from AST node kind (`isMethodDeclaration` → `"method"`, `FunctionDef` inside `ClassDef` → `"method"`). Enables class-level vs function-level analysis.
+`@ophan/core` is published for tools that need to build on the Ophan analysis pipeline programmatically.
+
+```typescript
+import { analyzeRepository, initDb } from '@ophan/core';
+
+const db = initDb('/path/to/repo');
+await analyzeRepository(db, '/path/to/repo', {
+  apiKey: process.env.ANTHROPIC_API_KEY,
+});
+```
+
+### Schemas
+
+Zod schemas and TypeScript types for Ophan's analysis data are available as a lightweight subpath import — no native dependencies required:
+
+```typescript
+import {
+  ClaudeAnalysisResponse,
+  SECURITY_FLAG_LABELS,
+  DATA_TAG_LABELS,
+} from '@ophan/core/schemas';
+```
 
-### Migration Safety
+## Resources
 
-Both tables use `DEFAULT 'typescript'` and `DEFAULT 'function'` for the new columns. Existing databases are migrated via `ALTER TABLE ADD COLUMN` on init — safe, no data loss.
+- [Documentation](https://docs.ophan.dev)
+- [CLI Package](https://www.npmjs.com/package/@ophan/cli)
+- [VS Code Extension](https://marketplace.visualstudio.com/items?itemName=ophan.ophan)
+- [GitHub](https://github.com/nicholasgriffintn/ophan)
 
-## Extensibility
+## License
 
-Designed to support:
-- Additional programming languages via parser interface (Go, Java, Rust planned)
-- Alternative AI models (Bedrock for enterprise)
-- Custom security rules
-- Supabase sync for cloud features
+MIT

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ophan/core",
-  "version": "0.0.1",
+  "version": "0.0.2",
   "main": "./src/index.ts",
   "types": "./src/index.ts",
   "exports": {
@@ -8,7 +8,9 @@
     "./schemas": "./src/schemas.ts",
     "./test-utils": "./src/test-utils.ts"
   },
-  "files": ["dist"],
+  "files": [
+    "dist"
+  ],
   "publishConfig": {
     "main": "./dist/index.js",
     "types": "./dist/index.d.ts",

package/dist/index.test.d.ts

@@ -1,2 +0,0 @@
-export {};
-//# sourceMappingURL=index.test.d.ts.map

package/dist/index.test.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"index.test.d.ts","sourceRoot":"","sources":["../src/index.test.ts"],"names":[],"mappings":""}

package/dist/index.test.js

@@ -1,492 +0,0 @@
-"use strict";
-var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    var desc = Object.getOwnPropertyDescriptor(m, k);
-    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
-      desc = { enumerable: true, get: function() { return m[k]; } };
-    }
-    Object.defineProperty(o, k2, desc);
-}) : (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    o[k2] = m[k];
-}));
-var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
-    Object.defineProperty(o, "default", { enumerable: true, value: v });
-}) : function(o, v) {
-    o["default"] = v;
-});
-var __importStar = (this && this.__importStar) || (function () {
-    var ownKeys = function(o) {
-        ownKeys = Object.getOwnPropertyNames || function (o) {
-            var ar = [];
-            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
-            return ar;
-        };
-        return ownKeys(o);
-    };
-    return function (mod) {
-        if (mod && mod.__esModule) return mod;
-        var result = {};
-        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
-        __setModuleDefault(result, mod);
-        return result;
-    };
-})();
-var __importDefault = (this && this.__importDefault) || function (mod) {
-    return (mod && mod.__esModule) ? mod : { "default": mod };
-};
-Object.defineProperty(exports, "__esModule", { value: true });
-const vitest_1 = require("vitest");
-const better_sqlite3_1 = __importDefault(require("better-sqlite3"));
-const fs = __importStar(require("fs"));
-const os = __importStar(require("os"));
-const path = __importStar(require("path"));
-const index_1 = require("./index");
-const test_utils_1 = require("./test-utils");
-// ============ mergeAnalysisRows ============
-(0, vitest_1.describe)("mergeAnalysisRows", () => {
-    (0, vitest_1.it)("merges documentation + security rows into unified shape", () => {
-        const result = (0, index_1.mergeAnalysisRows)([
-            {
-                analysis_type: "documentation",
-                analysis: JSON.stringify({
-                    description: "Fetches user",
-                    params: [{ name: "id", type: "string", description: "user id" }],
-                    returns: { type: "User", description: "the user" },
-                }),
-            },
-            {
-                analysis_type: "security",
-                analysis: JSON.stringify({
-                    dataTags: ["database", "pii"],
-                    securityFlags: ["sql_injection"],
-                }),
-            },
-        ]);
-        (0, vitest_1.expect)(result.description).toBe("Fetches user");
-        (0, vitest_1.expect)(result.params).toEqual([
-            { name: "id", type: "string", description: "user id" },
-        ]);
-        (0, vitest_1.expect)(result.returns).toEqual({ type: "User", description: "the user" });
-        (0, vitest_1.expect)(result.dataTags).toEqual(["database", "pii"]);
-        (0, vitest_1.expect)(result.securityFlags).toEqual(["sql_injection"]);
-    });
-    (0, vitest_1.it)("handles documentation-only (missing security row)", () => {
-        const result = (0, index_1.mergeAnalysisRows)([
-            {
-                analysis_type: "documentation",
-                analysis: JSON.stringify({
-                    description: "Test",
-                    params: [],
-                    returns: { type: "void", description: "" },
-                }),
-            },
-        ]);
-        (0, vitest_1.expect)(result.description).toBe("Test");
-        (0, vitest_1.expect)(result.dataTags).toEqual([]);
-        (0, vitest_1.expect)(result.securityFlags).toEqual([]);
-    });
-    (0, vitest_1.it)("handles security-only (missing documentation row)", () => {
-        const result = (0, index_1.mergeAnalysisRows)([
-            {
-                analysis_type: "security",
-                analysis: JSON.stringify({
-                    dataTags: ["internal"],
-                    securityFlags: [],
-                }),
-            },
-        ]);
-        (0, vitest_1.expect)(result.description).toBe("");
-        (0, vitest_1.expect)(result.params).toEqual([]);
-        (0, vitest_1.expect)(result.returns).toEqual({ type: "unknown", description: "" });
-        (0, vitest_1.expect)(result.dataTags).toEqual(["internal"]);
-    });
-    (0, vitest_1.it)("handles empty rows array", () => {
-        const result = (0, index_1.mergeAnalysisRows)([]);
-        (0, vitest_1.expect)(result.description).toBe("");
-        (0, vitest_1.expect)(result.params).toEqual([]);
-        (0, vitest_1.expect)(result.returns).toEqual({ type: "unknown", description: "" });
-        (0, vitest_1.expect)(result.dataTags).toEqual([]);
-        (0, vitest_1.expect)(result.securityFlags).toEqual([]);
-    });
-    (0, vitest_1.it)("ignores unknown analysis_type", () => {
-        const result = (0, index_1.mergeAnalysisRows)([
-            {
-                analysis_type: "future_type",
-                analysis: JSON.stringify({ foo: "bar" }),
-            },
-        ]);
-        (0, vitest_1.expect)(result.description).toBe("");
-        (0, vitest_1.expect)(result.securityFlags).toEqual([]);
-    });
-    (0, vitest_1.it)("last row wins when duplicate analysis_type", () => {
-        const result = (0, index_1.mergeAnalysisRows)([
-            {
-                analysis_type: "documentation",
-                analysis: JSON.stringify({
-                    description: "First",
-                    params: [],
-                    returns: { type: "void", description: "" },
-                }),
-            },
-            {
-                analysis_type: "documentation",
-                analysis: JSON.stringify({
-                    description: "Second",
-                    params: [],
-                    returns: { type: "string", description: "overwritten" },
-                }),
-            },
-        ]);
-        (0, vitest_1.expect)(result.description).toBe("Second");
-        (0, vitest_1.expect)(result.returns.type).toBe("string");
-    });
-});
-// ============ migrateToAnalysisTypes ============
-(0, vitest_1.describe)("migrateToAnalysisTypes", () => {
-    (0, vitest_1.it)("splits single legacy row into documentation + security rows", () => {
-        const db = (0, test_utils_1.createLegacyTestDb)();
-        db.prepare(`INSERT INTO function_analysis
-       (content_hash, analysis, model_version, created_at, last_seen_at, language, entity_type, synced_at)
-       VALUES (?, ?, 'claude-3', 1000, 2000, 'typescript', 'function', 5000)`).run("abc123", JSON.stringify({
-            description: "Test fn",
-            params: [{ name: "x", type: "number", description: "input" }],
-            returns: { type: "number", description: "output" },
-            dataTags: ["internal"],
-            securityFlags: ["xss"],
-        }));
-        (0, index_1.migrateToAnalysisTypes)(db);
-        const rows = db
-            .prepare("SELECT content_hash, analysis_type, analysis, synced_at FROM function_analysis ORDER BY analysis_type")
-            .all();
-        (0, vitest_1.expect)(rows).toHaveLength(2);
-        const docRow = rows.find((r) => r.analysis_type === "documentation");
-        const secRow = rows.find((r) => r.analysis_type === "security");
-        (0, vitest_1.expect)(docRow).toBeDefined();
-        (0, vitest_1.expect)(secRow).toBeDefined();
-        const doc = JSON.parse(docRow.analysis);
-        (0, vitest_1.expect)(doc.description).toBe("Test fn");
-        (0, vitest_1.expect)(doc.params).toEqual([
-            { name: "x", type: "number", description: "input" },
-        ]);
-        const sec = JSON.parse(secRow.analysis);
-        (0, vitest_1.expect)(sec.dataTags).toEqual(["internal"]);
-        (0, vitest_1.expect)(sec.securityFlags).toEqual(["xss"]);
-        // synced_at should be NULL (forced re-sync)
-        (0, vitest_1.expect)(docRow.synced_at).toBeNull();
-        (0, vitest_1.expect)(secRow.synced_at).toBeNull();
-        db.close();
-    });
-    (0, vitest_1.it)("handles NULL language/entity_type with COALESCE defaults", () => {
-        const db = (0, test_utils_1.createLegacyTestDb)();
-        db.prepare(`INSERT INTO function_analysis
-       (content_hash, analysis, model_version, created_at, last_seen_at, language, entity_type)
-       VALUES (?, ?, 'claude-3', 1000, 2000, NULL, NULL)`).run("hash1", JSON.stringify({ description: "Test" }));
-        (0, index_1.migrateToAnalysisTypes)(db);
-        const rows = db
-            .prepare("SELECT language, entity_type FROM function_analysis WHERE content_hash = 'hash1'")
-            .all();
-        for (const row of rows) {
-            (0, vitest_1.expect)(row.language).toBe("typescript");
-            (0, vitest_1.expect)(row.entity_type).toBe("function");
-        }
-        db.close();
-    });
-    (0, vitest_1.it)("splits multiple legacy rows", () => {
-        const db = (0, test_utils_1.createLegacyTestDb)();
-        for (let i = 1; i <= 3; i++) {
-            db.prepare(`INSERT INTO function_analysis
-         (content_hash, analysis, model_version, created_at, last_seen_at)
-         VALUES (?, ?, 'claude-3', 1000, 2000)`).run(`hash${i}`, JSON.stringify({ description: `Fn ${i}` }));
-        }
-        (0, index_1.migrateToAnalysisTypes)(db);
-        const count = db
-            .prepare("SELECT COUNT(*) as c FROM function_analysis")
-            .get();
-        (0, vitest_1.expect)(count.c).toBe(6); // 3 hashes x 2 types
-        db.close();
-    });
-    (0, vitest_1.it)("new table has correct composite PK (content_hash, analysis_type)", () => {
-        const db = (0, test_utils_1.createLegacyTestDb)();
-        db.prepare(`INSERT INTO function_analysis
-       (content_hash, analysis, model_version, created_at, last_seen_at)
-       VALUES (?, ?, 'claude-3', 1000, 2000)`).run("hash1", JSON.stringify({}));
-        (0, index_1.migrateToAnalysisTypes)(db);
-        // Inserting duplicate (same hash + type) should fail
-        (0, vitest_1.expect)(() => db
-            .prepare(`INSERT INTO function_analysis
-           (content_hash, analysis_type, analysis, model_version, schema_version, created_at, last_seen_at, language, entity_type)
-           VALUES ('hash1', 'documentation', '{}', 'test', 1, 1000, 2000, 'typescript', 'function')`)
-            .run()).toThrow();
-        db.close();
-    });
-});
-// ============ gcAnalysis ============
-(0, vitest_1.describe)("gcAnalysis", () => {
-    let tmpDir;
-    let dbPath;
-    function setupDb(setup) {
-        const db = new better_sqlite3_1.default(dbPath);
-        // Create schema
-        const memDb = (0, test_utils_1.createTestDb)();
-        const tables = memDb
-            .prepare("SELECT sql FROM sqlite_master WHERE type='table'")
-            .all();
-        for (const t of tables) {
-            db.exec(t.sql + ";");
-        }
-        const indexes = memDb
-            .prepare("SELECT sql FROM sqlite_master WHERE type='index' AND sql IS NOT NULL")
-            .all();
-        for (const idx of indexes) {
-            db.exec(idx.sql + ";");
-        }
-        memDb.close();
-        setup(db);
-        db.close();
-    }
-    (0, vitest_1.beforeEach)(() => {
-        tmpDir = fs.mkdtempSync(path.join(os.tmpdir(), "ophan-gc-test-"));
-        dbPath = path.join(tmpDir, "index.db");
-    });
-    (0, vitest_1.afterEach)(() => {
-        fs.rmSync(tmpDir, { recursive: true, force: true });
-    });
-    (0, vitest_1.it)("deletes orphaned analysis older than grace period", () => {
-        const ninetyDaysAgo = Math.floor(Date.now() / 1000) - 90 * 24 * 60 * 60;
-        setupDb((db) => {
-            (0, test_utils_1.insertAnalysisPair)(db, "orphan1", { lastSeenAt: ninetyDaysAgo });
-            // No file_functions entry → orphaned
-        });
-        const result = (0, index_1.gcAnalysis)(dbPath, 30);
-        (0, vitest_1.expect)(result.deleted).toBe(2); // doc + sec rows
-        const db = new better_sqlite3_1.default(dbPath, { readonly: true });
-        const remaining = db
-            .prepare("SELECT COUNT(*) as c FROM function_analysis")
-            .get();
-        (0, vitest_1.expect)(remaining.c).toBe(0);
-        db.close();
-    });
-    (0, vitest_1.it)("preserves analysis still referenced by file_functions", () => {
-        const ninetyDaysAgo = Math.floor(Date.now() / 1000) - 90 * 24 * 60 * 60;
-        setupDb((db) => {
-            (0, test_utils_1.insertAnalysisPair)(db, "active1", { lastSeenAt: ninetyDaysAgo });
-            (0, test_utils_1.insertFileFunction)(db, "/src/foo.ts", "foo", "active1");
-        });
-        const result = (0, index_1.gcAnalysis)(dbPath, 30);
-        (0, vitest_1.expect)(result.deleted).toBe(0);
-    });
-    (0, vitest_1.it)("preserves orphaned analysis within grace period", () => {
-        const fiveDaysAgo = Math.floor(Date.now() / 1000) - 5 * 24 * 60 * 60;
-        setupDb((db) => {
-            (0, test_utils_1.insertAnalysisPair)(db, "recent_orphan", { lastSeenAt: fiveDaysAgo });
-        });
-        const result = (0, index_1.gcAnalysis)(dbPath, 30);
-        (0, vitest_1.expect)(result.deleted).toBe(0);
-    });
-    (0, vitest_1.it)("creates tombstones in function_gc before deleting", () => {
-        const ninetyDaysAgo = Math.floor(Date.now() / 1000) - 90 * 24 * 60 * 60;
-        setupDb((db) => {
-            (0, test_utils_1.insertAnalysisPair)(db, "doomed", { lastSeenAt: ninetyDaysAgo });
-        });
-        (0, index_1.gcAnalysis)(dbPath, 30);
-        const db = new better_sqlite3_1.default(dbPath, { readonly: true });
-        const tombstones = db
-            .prepare("SELECT content_hash, analysis_type FROM function_gc ORDER BY analysis_type")
-            .all();
-        (0, vitest_1.expect)(tombstones).toHaveLength(2);
-        (0, vitest_1.expect)(tombstones.map((t) => t.analysis_type).sort()).toEqual([
-            "documentation",
-            "security",
-        ]);
-        db.close();
-    });
-    (0, vitest_1.it)("handles empty database", () => {
-        setupDb(() => { });
-        const result = (0, index_1.gcAnalysis)(dbPath, 30);
-        (0, vitest_1.expect)(result.deleted).toBe(0);
-    });
-});
-// ============ importAnalysis ============
-(0, vitest_1.describe)("importAnalysis", () => {
-    let tmpDir;
-    let dbPath;
-    function setupDb(setup) {
-        const db = new better_sqlite3_1.default(dbPath);
-        const memDb = (0, test_utils_1.createTestDb)();
-        const tables = memDb
-            .prepare("SELECT sql FROM sqlite_master WHERE type='table'")
-            .all();
-        for (const t of tables) {
-            db.exec(t.sql + ";");
-        }
-        memDb.close();
-        if (setup)
-            setup(db);
-        db.close();
-    }
-    (0, vitest_1.beforeEach)(() => {
-        tmpDir = fs.mkdtempSync(path.join(os.tmpdir(), "ophan-import-test-"));
-        dbPath = path.join(tmpDir, "index.db");
-    });
-    (0, vitest_1.afterEach)(() => {
-        fs.rmSync(tmpDir, { recursive: true, force: true });
-    });
-    (0, vitest_1.it)("imports new analysis rows", () => {
-        setupDb();
-        const count = (0, index_1.importAnalysis)(dbPath, [
-            {
-                content_hash: "abc",
-                analysis_type: "documentation",
-                analysis: (0, test_utils_1.makeDocAnalysisJson)(),
-                model_version: "test",
-                schema_version: 1,
-                language: "typescript",
-                entity_type: "function",
-            },
-        ]);
-        (0, vitest_1.expect)(count).toBe(1);
-        const db = new better_sqlite3_1.default(dbPath, { readonly: true });
-        const row = db
-            .prepare("SELECT * FROM function_analysis WHERE content_hash = 'abc'")
-            .get();
-        (0, vitest_1.expect)(row).toBeDefined();
-        (0, vitest_1.expect)(row.analysis_type).toBe("documentation");
-        db.close();
-    });
-    (0, vitest_1.it)("skips existing rows (INSERT OR IGNORE)", () => {
-        setupDb((db) => {
-            (0, test_utils_1.insertAnalysisPair)(db, "exists");
-        });
-        const count = (0, index_1.importAnalysis)(dbPath, [
-            {
-                content_hash: "exists",
-                analysis_type: "documentation",
-                analysis: (0, test_utils_1.makeDocAnalysisJson)({ description: "SHOULD NOT OVERWRITE" }),
-                model_version: "test",
-                schema_version: 1,
-                language: "typescript",
-                entity_type: "function",
-            },
-        ]);
-        (0, vitest_1.expect)(count).toBe(0);
-        // Verify original data unchanged
-        const db = new better_sqlite3_1.default(dbPath, { readonly: true });
-        const row = db
-            .prepare("SELECT analysis FROM function_analysis WHERE content_hash = 'exists' AND analysis_type = 'documentation'")
-            .get();
-        const parsed = JSON.parse(row.analysis);
-        (0, vitest_1.expect)(parsed.description).toBe("Test function description");
-        db.close();
-    });
-    (0, vitest_1.it)("sets synced_at on imported rows", () => {
-        setupDb();
-        (0, index_1.importAnalysis)(dbPath, [
-            {
-                content_hash: "new1",
-                analysis_type: "security",
-                analysis: (0, test_utils_1.makeSecAnalysisJson)(),
-                model_version: "test",
-                schema_version: 1,
-                language: "typescript",
-                entity_type: "function",
-            },
-        ]);
-        const db = new better_sqlite3_1.default(dbPath, { readonly: true });
-        const row = db
-            .prepare("SELECT synced_at FROM function_analysis WHERE content_hash = 'new1'")
-            .get();
-        (0, vitest_1.expect)(row.synced_at).not.toBeNull();
-        db.close();
-    });
-    (0, vitest_1.it)("returns 0 for empty rows array", () => {
-        setupDb();
-        (0, vitest_1.expect)((0, index_1.importAnalysis)(dbPath, [])).toBe(0);
-    });
-    (0, vitest_1.it)("handles mixed new and existing rows", () => {
-        setupDb((db) => {
-            (0, test_utils_1.insertAnalysisPair)(db, "exists");
-        });
-        const count = (0, index_1.importAnalysis)(dbPath, [
-            {
-                content_hash: "exists",
-                analysis_type: "documentation",
-                analysis: (0, test_utils_1.makeDocAnalysisJson)(),
-                model_version: "test",
-                schema_version: 1,
-                language: "typescript",
-                entity_type: "function",
-            },
-            {
-                content_hash: "new1",
-                analysis_type: "documentation",
-                analysis: (0, test_utils_1.makeDocAnalysisJson)(),
-                model_version: "test",
-                schema_version: 1,
-                language: "typescript",
-                entity_type: "function",
-            },
-            {
-                content_hash: "new2",
-                analysis_type: "security",
-                analysis: (0, test_utils_1.makeSecAnalysisJson)(),
-                model_version: "test",
-                schema_version: 1,
-                language: "python",
-                entity_type: "method",
-            },
-        ]);
-        (0, vitest_1.expect)(count).toBe(2);
-    });
-});
-// ============ findMissingHashes ============
-(0, vitest_1.describe)("findMissingHashes", () => {
-    let tmpDir;
-    let dbPath;
-    function setupDb(setup) {
-        const db = new better_sqlite3_1.default(dbPath);
-        const memDb = (0, test_utils_1.createTestDb)();
-        const tables = memDb
-            .prepare("SELECT sql FROM sqlite_master WHERE type='table'")
-            .all();
-        for (const t of tables) {
-            db.exec(t.sql + ";");
-        }
-        memDb.close();
-        setup(db);
-        db.close();
-    }
-    (0, vitest_1.beforeEach)(() => {
-        tmpDir = fs.mkdtempSync(path.join(os.tmpdir(), "ophan-missing-test-"));
-        dbPath = path.join(tmpDir, "index.db");
-    });
-    (0, vitest_1.afterEach)(() => {
-        fs.rmSync(tmpDir, { recursive: true, force: true });
-    });
-    (0, vitest_1.it)("returns hashes in file_functions but not in function_analysis", () => {
-        setupDb((db) => {
-            (0, test_utils_1.insertFileFunction)(db, "/src/foo.ts", "foo", "hash1");
-            (0, test_utils_1.insertFileFunction)(db, "/src/bar.ts", "bar", "hash2");
-            // Only hash1 has analysis
-            (0, test_utils_1.insertAnalysisPair)(db, "hash1");
-        });
-        const missing = (0, index_1.findMissingHashes)(dbPath);
-        (0, vitest_1.expect)(missing).toEqual(["hash2"]);
-    });
-    (0, vitest_1.it)("returns empty when all hashes are analyzed", () => {
-        setupDb((db) => {
-            (0, test_utils_1.insertFileFunction)(db, "/src/foo.ts", "foo", "hash1");
-            (0, test_utils_1.insertAnalysisPair)(db, "hash1");
-        });
-        const missing = (0, index_1.findMissingHashes)(dbPath);
-        (0, vitest_1.expect)(missing).toEqual([]);
-    });
-    (0, vitest_1.it)("deduplicates — same hash in multiple files returned once", () => {
-        setupDb((db) => {
-            (0, test_utils_1.insertFileFunction)(db, "/src/a.ts", "fn", "shared_hash");
-            (0, test_utils_1.insertFileFunction)(db, "/src/b.ts", "fn", "shared_hash");
-        });
-        const missing = (0, index_1.findMissingHashes)(dbPath);
-        (0, vitest_1.expect)(missing).toEqual(["shared_hash"]);
-    });
-});

package/dist/parsers/python.test.d.ts

@@ -1,2 +0,0 @@
-export {};
-//# sourceMappingURL=python.test.d.ts.map

package/dist/parsers/python.test.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"python.test.d.ts","sourceRoot":"","sources":["../../src/parsers/python.test.ts"],"names":[],"mappings":""}

package/dist/parsers/python.test.js

@@ -1,96 +0,0 @@
-"use strict";
-var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    var desc = Object.getOwnPropertyDescriptor(m, k);
-    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
-      desc = { enumerable: true, get: function() { return m[k]; } };
-    }
-    Object.defineProperty(o, k2, desc);
-}) : (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    o[k2] = m[k];
-}));
-var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
-    Object.defineProperty(o, "default", { enumerable: true, value: v });
-}) : function(o, v) {
-    o["default"] = v;
-});
-var __importStar = (this && this.__importStar) || (function () {
-    var ownKeys = function(o) {
-        ownKeys = Object.getOwnPropertyNames || function (o) {
-            var ar = [];
-            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
-            return ar;
-        };
-        return ownKeys(o);
-    };
-    return function (mod) {
-        if (mod && mod.__esModule) return mod;
-        var result = {};
-        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
-        __setModuleDefault(result, mod);
-        return result;
-    };
-})();
-Object.defineProperty(exports, "__esModule", { value: true });
-const vitest_1 = require("vitest");
-const child_process_1 = require("child_process");
-const path = __importStar(require("path"));
-const python_1 = require("./python");
-const parser = new python_1.PythonParser();
-const fixturesDir = path.join(__dirname, "__fixtures__");
-// Must be synchronous at module level — describe.skipIf evaluates immediately
-let pythonAvailable = false;
-try {
-    (0, child_process_1.execFileSync)("python3", ["--version"], { stdio: "ignore" });
-    pythonAvailable = true;
-}
-catch {
-    pythonAvailable = false;
-}
-(0, vitest_1.describe)("PythonParser", () => {
-    vitest_1.describe.skipIf(!pythonAvailable)("method detection", () => {
-        (0, vitest_1.it)('class methods get entityType "method"', () => {
-            const functions = parser.extractFunctions(path.join(fixturesDir, "class-methods.py"));
-            const getUser = functions.find((f) => f.name === "get_user");
-            const createUser = functions.find((f) => f.name === "create_user");
-            (0, vitest_1.expect)(getUser?.entityType).toBe("method");
-            (0, vitest_1.expect)(createUser?.entityType).toBe("method");
-        });
-        (0, vitest_1.it)('top-level functions get entityType "function"', () => {
-            const functions = parser.extractFunctions(path.join(fixturesDir, "class-methods.py"));
-            const standalone = functions.find((f) => f.name === "standalone");
-            (0, vitest_1.expect)(standalone?.entityType).toBe("function");
-        });
-    });
-    vitest_1.describe.skipIf(!pythonAvailable)("async function handling", () => {
-        (0, vitest_1.it)("extracts async def functions", () => {
-            const functions = parser.extractFunctions(path.join(fixturesDir, "simple.py"));
-            const fetchData = functions.find((f) => f.name === "fetch_data");
-            (0, vitest_1.expect)(fetchData).toBeDefined();
-            (0, vitest_1.expect)(fetchData?.language).toBe("python");
-        });
-    });
-    vitest_1.describe.skipIf(!pythonAvailable)("basic extraction", () => {
-        (0, vitest_1.it)("extracts all functions from simple file", () => {
-            const functions = parser.extractFunctions(path.join(fixturesDir, "simple.py"));
-            const names = functions.map((f) => f.name);
-            (0, vitest_1.expect)(names).toContain("greet");
-            (0, vitest_1.expect)(names).toContain("fetch_data");
-            (0, vitest_1.expect)(names).toContain("add");
-        });
-        (0, vitest_1.it)("all extracted functions have contentHash set", () => {
-            const functions = parser.extractFunctions(path.join(fixturesDir, "simple.py"));
-            for (const fn of functions) {
-                (0, vitest_1.expect)(fn.contentHash).toBeDefined();
-                (0, vitest_1.expect)(fn.contentHash.length).toBe(64);
-            }
-        });
-        (0, vitest_1.it)("all functions have language python", () => {
-            const functions = parser.extractFunctions(path.join(fixturesDir, "simple.py"));
-            for (const fn of functions) {
-                (0, vitest_1.expect)(fn.language).toBe("python");
-            }
-        });
-    });
-});

package/dist/parsers/typescript.test.d.ts

@@ -1,2 +0,0 @@
-export {};
-//# sourceMappingURL=typescript.test.d.ts.map

package/dist/parsers/typescript.test.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"typescript.test.d.ts","sourceRoot":"","sources":["../../src/parsers/typescript.test.ts"],"names":[],"mappings":""}

package/dist/parsers/typescript.test.js

@@ -1,106 +0,0 @@
-"use strict";
-var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    var desc = Object.getOwnPropertyDescriptor(m, k);
-    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
-      desc = { enumerable: true, get: function() { return m[k]; } };
-    }
-    Object.defineProperty(o, k2, desc);
-}) : (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    o[k2] = m[k];
-}));
-var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
-    Object.defineProperty(o, "default", { enumerable: true, value: v });
-}) : function(o, v) {
-    o["default"] = v;
-});
-var __importStar = (this && this.__importStar) || (function () {
-    var ownKeys = function(o) {
-        ownKeys = Object.getOwnPropertyNames || function (o) {
-            var ar = [];
-            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
-            return ar;
-        };
-        return ownKeys(o);
-    };
-    return function (mod) {
-        if (mod && mod.__esModule) return mod;
-        var result = {};
-        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
-        __setModuleDefault(result, mod);
-        return result;
-    };
-})();
-Object.defineProperty(exports, "__esModule", { value: true });
-const vitest_1 = require("vitest");
-const path = __importStar(require("path"));
-const typescript_1 = require("./typescript");
-const parser = new typescript_1.TypeScriptParser();
-const fixturesDir = path.join(__dirname, "__fixtures__");
-(0, vitest_1.describe)("TypeScriptParser", () => {
-    (0, vitest_1.describe)("name extraction", () => {
-        (0, vitest_1.it)("extracts name from const arrow function declarations", () => {
-            const functions = parser.extractFunctions(path.join(fixturesDir, "arrow-functions.ts"));
-            const names = functions.map((f) => f.name);
-            (0, vitest_1.expect)(names).toContain("greet");
-            (0, vitest_1.expect)(names).toContain("add");
-            (0, vitest_1.expect)(names).toContain("handler");
-        });
-        (0, vitest_1.it)("skips unnamed default export arrows", () => {
-            const functions = parser.extractFunctions(path.join(fixturesDir, "arrow-functions.ts"));
-            const names = functions.map((f) => f.name);
-            // The default export `(x: number) => x * 2` has no variable declaration parent
-            // so it should not appear in the extracted functions
-            const unnamed = functions.filter((f) => f.name === null || f.name === undefined);
-            (0, vitest_1.expect)(unnamed).toHaveLength(0);
-        });
-        (0, vitest_1.it)("skips callback arrows without variable declaration parent", () => {
-            const functions = parser.extractFunctions(path.join(fixturesDir, "arrow-functions.ts"));
-            const names = functions.map((f) => f.name);
-            // The `(n) => n * 2` inside .map() should not appear
-            // (its parent is a CallExpression argument, not a VariableDeclaration)
-            (0, vitest_1.expect)(names).not.toContain("n");
-        });
-    });
-    (0, vitest_1.describe)("entity type detection", () => {
-        (0, vitest_1.it)('class methods get entityType "method"', () => {
-            const functions = parser.extractFunctions(path.join(fixturesDir, "class-methods.ts"));
-            const getUser = functions.find((f) => f.name === "getUser");
-            const createUser = functions.find((f) => f.name === "createUser");
-            (0, vitest_1.expect)(getUser?.entityType).toBe("method");
-            (0, vitest_1.expect)(createUser?.entityType).toBe("method");
-        });
-        (0, vitest_1.it)('standalone functions get entityType "function"', () => {
-            const functions = parser.extractFunctions(path.join(fixturesDir, "class-methods.ts"));
-            const standalone = functions.find((f) => f.name === "standalone");
-            (0, vitest_1.expect)(standalone?.entityType).toBe("function");
-        });
-    });
-    (0, vitest_1.describe)("language detection", () => {
-        (0, vitest_1.it)(".ts files get language typescript", () => {
-            const functions = parser.extractFunctions(path.join(fixturesDir, "class-methods.ts"));
-            for (const fn of functions) {
-                (0, vitest_1.expect)(fn.language).toBe("typescript");
-            }
-        });
-    });
-    (0, vitest_1.describe)("edge cases", () => {
-        (0, vitest_1.it)("file with no functions returns empty array", () => {
-            const functions = parser.extractFunctions(path.join(fixturesDir, "no-functions.ts"));
-            (0, vitest_1.expect)(functions).toEqual([]);
-        });
-        (0, vitest_1.it)("all extracted functions have contentHash set", () => {
-            const functions = parser.extractFunctions(path.join(fixturesDir, "arrow-functions.ts"));
-            for (const fn of functions) {
-                (0, vitest_1.expect)(fn.contentHash).toBeDefined();
-                (0, vitest_1.expect)(fn.contentHash.length).toBe(64); // SHA256 hex
-            }
-        });
-        (0, vitest_1.it)("same source code produces same hash (deterministic)", () => {
-            const fns1 = parser.extractFunctions(path.join(fixturesDir, "class-methods.ts"));
-            const fns2 = parser.extractFunctions(path.join(fixturesDir, "class-methods.ts"));
-            (0, vitest_1.expect)(fns1.map((f) => f.contentHash)).toEqual(fns2.map((f) => f.contentHash));
-        });
-    });
-});

package/dist/test-utils.d.ts

@@ -1,46 +0,0 @@
-import Database from "better-sqlite3";
-/**
- * Creates an in-memory SQLite database with the current ophan schema.
- * Use for merge, import, GC, and findMissingHashes tests.
- */
-export declare function createTestDb(): Database.Database;
-/**
- * Creates an in-memory DB with the OLD (pre-analysis-type) schema.
- * Used to test migrateToAnalysisTypes().
- */
-export declare function createLegacyTestDb(): Database.Database;
-/** Returns JSON string for a documentation analysis payload. */
-export declare function makeDocAnalysisJson(overrides?: Partial<{
-    description: string;
-    params: {
-        name: string;
-        type: string;
-        description: string;
-    }[];
-    returns: {
-        type: string;
-        description: string;
-    };
-}>): string;
-/** Returns JSON string for a security analysis payload. */
-export declare function makeSecAnalysisJson(overrides?: Partial<{
-    dataTags: string[];
-    securityFlags: string[];
-}>): string;
-/** Inserts a matched pair of documentation + security rows for a content_hash. */
-export declare function insertAnalysisPair(db: Database.Database, contentHash: string, options?: {
-    language?: string;
-    entityType?: string;
-    syncedAt?: number | null;
-    lastSeenAt?: number;
-    createdAt?: number;
-    doc?: Parameters<typeof makeDocAnalysisJson>[0];
-    sec?: Parameters<typeof makeSecAnalysisJson>[0];
-}): void;
-/** Inserts a file_functions row. */
-export declare function insertFileFunction(db: Database.Database, filePath: string, functionName: string, contentHash: string, options?: {
-    mtime?: number;
-    language?: string;
-    entityType?: string;
-}): void;
-//# sourceMappingURL=test-utils.d.ts.map

package/dist/test-utils.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"test-utils.d.ts","sourceRoot":"","sources":["../src/test-utils.ts"],"names":[],"mappings":"AAAA,OAAO,QAAQ,MAAM,gBAAgB,CAAC;AAEtC;;;GAGG;AACH,wBAAgB,YAAY,IAAI,QAAQ,CAAC,QAAQ,CAsDhD;AAED;;;GAGG;AACH,wBAAgB,kBAAkB,IAAI,QAAQ,CAAC,QAAQ,CA2CtD;AAED,gEAAgE;AAChE,wBAAgB,mBAAmB,CACjC,SAAS,GAAE,OAAO,CAAC;IACjB,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,WAAW,EAAE,MAAM,CAAA;KAAE,EAAE,CAAC;IAC9D,OAAO,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,WAAW,EAAE,MAAM,CAAA;KAAE,CAAC;CAChD,CAAM,GACN,MAAM,CAQR;AAED,2DAA2D;AAC3D,wBAAgB,mBAAmB,CACjC,SAAS,GAAE,OAAO,CAAC;IACjB,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,aAAa,EAAE,MAAM,EAAE,CAAC;CACzB,CAAM,GACN,MAAM,CAKR;AAED,kFAAkF;AAClF,wBAAgB,kBAAkB,CAChC,EAAE,EAAE,QAAQ,CAAC,QAAQ,EACrB,WAAW,EAAE,MAAM,EACnB,OAAO,GAAE;IACP,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,GAAG,CAAC,EAAE,UAAU,CAAC,OAAO,mBAAmB,CAAC,CAAC,CAAC,CAAC,CAAC;IAChD,GAAG,CAAC,EAAE,UAAU,CAAC,OAAO,mBAAmB,CAAC,CAAC,CAAC,CAAC,CAAC;CAC5C,GACL,IAAI,CAmCN;AAED,oCAAoC;AACpC,wBAAgB,kBAAkB,CAChC,EAAE,EAAE,QAAQ,CAAC,QAAQ,EACrB,QAAQ,EAAE,MAAM,EAChB,YAAY,EAAE,MAAM,EACpB,WAAW,EAAE,MAAM,EACnB,OAAO,GAAE;IACP,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,UAAU,CAAC,EAAE,MAAM,CAAC;CAChB,GACL,IAAI,CAYN"}

package/dist/test-utils.js

@@ -1,141 +0,0 @@
-"use strict";
-var __importDefault = (this && this.__importDefault) || function (mod) {
-    return (mod && mod.__esModule) ? mod : { "default": mod };
-};
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.createTestDb = createTestDb;
-exports.createLegacyTestDb = createLegacyTestDb;
-exports.makeDocAnalysisJson = makeDocAnalysisJson;
-exports.makeSecAnalysisJson = makeSecAnalysisJson;
-exports.insertAnalysisPair = insertAnalysisPair;
-exports.insertFileFunction = insertFileFunction;
-const better_sqlite3_1 = __importDefault(require("better-sqlite3"));
-/**
- * Creates an in-memory SQLite database with the current ophan schema.
- * Use for merge, import, GC, and findMissingHashes tests.
- */
-function createTestDb() {
-    const db = new better_sqlite3_1.default(":memory:");
-    db.exec(`
-    CREATE TABLE function_analysis (
-      content_hash TEXT NOT NULL,
-      analysis_type TEXT NOT NULL,
-      analysis JSON NOT NULL,
-      model_version TEXT NOT NULL,
-      schema_version INTEGER NOT NULL DEFAULT 1,
-      created_at INTEGER NOT NULL,
-      last_seen_at INTEGER NOT NULL,
-      language TEXT NOT NULL DEFAULT 'typescript',
-      entity_type TEXT NOT NULL DEFAULT 'function',
-      synced_at INTEGER,
-      PRIMARY KEY (content_hash, analysis_type)
-    )
-  `);
-    db.exec(`
-    CREATE TABLE file_functions (
-      file_path TEXT NOT NULL,
-      function_name TEXT NOT NULL,
-      content_hash TEXT NOT NULL,
-      file_mtime INTEGER NOT NULL,
-      language TEXT NOT NULL DEFAULT 'typescript',
-      entity_type TEXT NOT NULL DEFAULT 'function'
-    )
-  `);
-    db.exec(`
-    CREATE TABLE function_gc (
-      content_hash TEXT NOT NULL,
-      analysis_type TEXT,
-      gc_at INTEGER NOT NULL,
-      synced_at INTEGER
-    )
-  `);
-    db.exec(`
-    CREATE TABLE sync_meta (
-      key TEXT PRIMARY KEY,
-      value TEXT NOT NULL
-    )
-  `);
-    db.exec("CREATE INDEX idx_file_functions_path ON file_functions(file_path)");
-    db.exec("CREATE INDEX idx_file_functions_hash ON file_functions(content_hash)");
-    return db;
-}
-/**
- * Creates an in-memory DB with the OLD (pre-analysis-type) schema.
- * Used to test migrateToAnalysisTypes().
- */
-function createLegacyTestDb() {
-    const db = new better_sqlite3_1.default(":memory:");
-    db.exec(`
-    CREATE TABLE function_analysis (
-      content_hash TEXT PRIMARY KEY,
-      analysis JSON NOT NULL,
-      model_version TEXT NOT NULL,
-      created_at INTEGER NOT NULL,
-      last_seen_at INTEGER NOT NULL,
-      language TEXT,
-      entity_type TEXT,
-      synced_at INTEGER
-    )
-  `);
-    db.exec(`
-    CREATE TABLE file_functions (
-      file_path TEXT NOT NULL,
-      function_name TEXT NOT NULL,
-      content_hash TEXT NOT NULL,
-      file_mtime INTEGER NOT NULL,
-      language TEXT NOT NULL DEFAULT 'typescript',
-      entity_type TEXT NOT NULL DEFAULT 'function'
-    )
-  `);
-    db.exec(`
-    CREATE TABLE function_gc (
-      content_hash TEXT NOT NULL,
-      gc_at INTEGER NOT NULL,
-      synced_at INTEGER
-    )
-  `);
-    db.exec(`
-    CREATE TABLE sync_meta (
-      key TEXT PRIMARY KEY,
-      value TEXT NOT NULL
-    )
-  `);
-    return db;
-}
-/** Returns JSON string for a documentation analysis payload. */
-function makeDocAnalysisJson(overrides = {}) {
-    return JSON.stringify({
-        description: overrides.description ?? "Test function description",
-        params: overrides.params ?? [
-            { name: "x", type: "number", description: "input" },
-        ],
-        returns: overrides.returns ?? { type: "number", description: "output" },
-    });
-}
-/** Returns JSON string for a security analysis payload. */
-function makeSecAnalysisJson(overrides = {}) {
-    return JSON.stringify({
-        dataTags: overrides.dataTags ?? ["internal"],
-        securityFlags: overrides.securityFlags ?? [],
-    });
-}
-/** Inserts a matched pair of documentation + security rows for a content_hash. */
-function insertAnalysisPair(db, contentHash, options = {}) {
-    const now = Math.floor(Date.now() / 1000);
-    const language = options.language ?? "typescript";
-    const entityType = options.entityType ?? "function";
-    const createdAt = options.createdAt ?? now;
-    const lastSeenAt = options.lastSeenAt ?? now;
-    const syncedAt = options.syncedAt ?? null;
-    db.prepare(`INSERT INTO function_analysis
-    (content_hash, analysis_type, analysis, model_version, schema_version, created_at, last_seen_at, language, entity_type, synced_at)
-    VALUES (?, 'documentation', ?, 'test-model', 1, ?, ?, ?, ?, ?)`).run(contentHash, makeDocAnalysisJson(options.doc), createdAt, lastSeenAt, language, entityType, syncedAt);
-    db.prepare(`INSERT INTO function_analysis
-    (content_hash, analysis_type, analysis, model_version, schema_version, created_at, last_seen_at, language, entity_type, synced_at)
-    VALUES (?, 'security', ?, 'test-model', 1, ?, ?, ?, ?, ?)`).run(contentHash, makeSecAnalysisJson(options.sec), createdAt, lastSeenAt, language, entityType, syncedAt);
-}
-/** Inserts a file_functions row. */
-function insertFileFunction(db, filePath, functionName, contentHash, options = {}) {
-    db.prepare(`INSERT INTO file_functions (file_path, function_name, content_hash, file_mtime, language, entity_type)
-    VALUES (?, ?, ?, ?, ?, ?)`).run(filePath, functionName, contentHash, options.mtime ?? Date.now(), options.language ?? "typescript", options.entityType ?? "function");
-}