@ryanstark24/sfgraph-core 1.2.0 → 1.4.0

package/dist/analyze/__tests__/audit-graph.test.js

@@ -119,4 +119,83 @@ describe("deleteDanglingEdges", () => {
         await store.close();
     });
 });
+describe("platform-builtin reference classification", () => {
+    function edge(orgId, src, rel, dst) {
+        const ts = Date.now();
+        return {
+            orgId,
+            srcQualifiedName: asQualifiedName(src),
+            dstQualifiedName: asQualifiedName(dst),
+            relType: rel,
+            attributes: {},
+            firstSeenAt: ts,
+            lastSeenAt: ts,
+        };
+    }
+    async function seedPlatform() {
+        const store = new SqliteGraphStore({ dbPath: ":memory:" });
+        await store.init();
+        const orgId = asOrgId("org_platform");
+        store.upsertOrg({
+            id: orgId,
+            alias: "test",
+            instanceUrl: "https://example.test",
+            apiVersion: "59.0",
+            createdAt: Date.now(),
+        });
+        const ts = Date.now();
+        store.mergeNodes([
+            {
+                orgId,
+                qualifiedName: asQualifiedName("Profile:Admin"),
+                label: "Profile",
+                attributes: {},
+                sourceHash: asSha256("p"),
+                firstSeenAt: ts,
+                lastSeenAt: ts,
+                lastModifiedAt: ts,
+            },
+        ]);
+        store.mergeEdges([
+            // Platform built-ins: standard tab + standard-schema field.
+            edge(orgId, "Profile:Admin", REL_TYPES.GRANTS_TAB_ACCESS, "CustomTab:standard-Account"),
+            edge(orgId, "Profile:Admin", REL_TYPES.GRANTS_FIELD_ACCESS, "CustomField:Incident.Status"),
+            // Unexpected: custom-suffixed targets that SHOULD have nodes.
+            edge(orgId, "Profile:Admin", REL_TYPES.GRANTS_TAB_ACCESS, "CustomTab:Booking__c"),
+            edge(orgId, "Profile:Admin", REL_TYPES.GRANTS_FIELD_ACCESS, "CustomField:Account.Active__c"),
+        ]);
+        return { store, orgId };
+    }
+    it("splits danglingCount into platformRefCount and unexpectedCount", async () => {
+        const { store, orgId } = await seedPlatform();
+        const result = auditDanglingEdges(store, orgId);
+        expect(result.danglingCount).toBe(4);
+        expect(result.platformRefCount).toBe(2);
+        expect(result.unexpectedCount).toBe(2);
+        // Unexpected edges are sampled first.
+        expect(result.sample
+            .slice(0, 2)
+            .map((s) => s.dst)
+            .sort()).toEqual(["CustomField:Account.Active__c", "CustomTab:Booking__c"]);
+        await store.close();
+    });
+    it("deleteDanglingEdges keeps platform refs by default and reports them", async () => {
+        const { store, orgId } = await seedPlatform();
+        const result = deleteDanglingEdges(store, orgId);
+        expect(result.deleted).toBe(2);
+        expect(result.keptPlatformRefs).toBe(2);
+        const after = auditDanglingEdges(store, orgId);
+        expect(after.danglingCount).toBe(2);
+        expect(after.platformRefCount).toBe(2);
+        await store.close();
+    });
+    it("deleteDanglingEdges includePlatformRefs:true deletes everything", async () => {
+        const { store, orgId } = await seedPlatform();
+        const result = deleteDanglingEdges(store, orgId, { includePlatformRefs: true });
+        expect(result.deleted).toBe(4);
+        expect(result.keptPlatformRefs).toBe(0);
+        expect(auditDanglingEdges(store, orgId).danglingCount).toBe(0);
+        await store.close();
+    });
+});
 //# sourceMappingURL=audit-graph.test.js.map

package/dist/analyze/__tests__/audit-graph.test.js.map

@@ -1 +1 @@
-{"version":3,"file":"audit-graph.test.js","sourceRoot":"","sources":["../../../src/analyze/__tests__/audit-graph.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,eAAe,EAAE,QAAQ,EAAE,MAAM,6BAA6B,CAAC;AACjF,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAC9C,OAAO,EAAE,SAAS,EAAE,MAAM,uBAAuB,CAAC;AAClD,OAAO,EAAE,gBAAgB,EAAE,MAAM,qCAAqC,CAAC;AACvE,OAAO,EAAE,kBAAkB,EAAE,mBAAmB,EAAE,MAAM,mBAAmB,CAAC;AAE5E,KAAK,UAAU,IAAI;IACjB,MAAM,KAAK,GAAG,IAAI,gBAAgB,CAAC,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC,CAAC;IAC3D,MAAM,KAAK,CAAC,IAAI,EAAE,CAAC;IACnB,MAAM,KAAK,GAAG,OAAO,CAAC,WAAW,CAAC,CAAC;IACnC,KAAK,CAAC,SAAS,CAAC;QACd,EAAE,EAAE,KAAK;QACT,KAAK,EAAE,MAAM;QACb,WAAW,EAAE,sBAAsB;QACnC,UAAU,EAAE,MAAM;QAClB,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;KACtB,CAAC,CAAC;IACH,MAAM,EAAE,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACtB,iBAAiB;IACjB,KAAK,CAAC,UAAU,CAAC;QACf;YACE,KAAK;YACL,aAAa,EAAE,eAAe,CAAC,eAAe,CAAC;YAC/C,KAAK,EAAE,WAAW;YAClB,UAAU,EAAE,EAAE;YACd,UAAU,EAAE,QAAQ,CAAC,KAAK,CAAC;YAC3B,WAAW,EAAE,EAAE;YACf,UAAU,EAAE,EAAE;YACd,cAAc,EAAE,EAAE;SACnB;QACD;YACE,KAAK;YACL,aAAa,EAAE,eAAe,CAAC,uBAAuB,CAAC;YACvD,KAAK,EAAE,YAAY;YACnB,UAAU,EAAE,EAAE;YACd,UAAU,EAAE,QAAQ,CAAC,QAAQ,CAAC;YAC9B,WAAW,EAAE,EAAE;YACf,UAAU,EAAE,EAAE;YACd,cAAc,EAAE,EAAE;SACnB;KACF,CAAC,CAAC;IACH,sCAAsC;IACtC,KAAK,CAAC,UAAU,CAAC;QACf;YACE,KAAK;YACL,gBAAgB,EAAE,eAAe,CAAC,eAAe,CAAC;YAClD,gBAAgB,EAAE,eAAe,CAAC,uBAAuB,CAAC;YAC1D,OAAO,EAAE,SAAS,CAAC,eAAe;YAClC,UAAU,EAAE,EAAE;YACd,WAAW,EAAE,EAAE;YACf,UAAU,EAAE,EAAE;SACf;QACD;YACE,KAAK;YACL,gBAAgB,EAAE,eAAe,CAAC,uBAAuB,CAAC;YAC1D,gBAAgB,EAAE,eAAe,CAAC,6BAA6B,CAAC;YAChE,OAAO,EAAE,SAAS,CAAC,KAAK;YACxB,UAAU,EAAE,EAAE;YACd,WAAW,EAAE,EAAE;YACf,UAAU,EAAE,EAAE;SACf;QACD;YACE,KAAK;YACL,gBAAgB,EAAE,eAAe,CAAC,uBAAuB,CAAC;YAC1D,gBAAgB,EAAE,eAAe,CAAC,gCAAgC,CAAC;YACnE,OAAO,EAAE,SAAS,CAAC,WAAW;YAC9B,UAAU,EAAE,EAAE;YACd,WAAW,EAAE,EAAE;YACf,UAAU,EAAE,EAAE;SACf;KACF,CAAC,CAAC;IACH,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC;AAC1B,CAAC;AAED,QAAQ,CAAC,oBAAoB,EAAE,GAAG,EAAE;IAClC,EAAE,CAAC,0DAA0D,EAAE,KAAK,IAAI,EAAE;QACxE,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,MAAM,IAAI,EAAE,CAAC;QACtC,MAAM,MAAM,GAAG,kBAAkB,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;QAEhD,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClC,MAAM,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACrC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,aAAa,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,WAAW,EAAE,CAAC,EAAE,CAAC,CAAC;QACjE,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,aAAa,CAAC,EAAE,UAAU,EAAE,CAAC,EAAE,WAAW,EAAE,CAAC,EAAE,CAAC,CAAC;QAC5E,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;QACtC,MAAM,KAAK,CAAC,KAAK,EAAE,CAAC;IACtB,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,qBAAqB,EAAE,KAAK,IAAI,EAAE;QACnC,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,MAAM,IAAI,EAAE,CAAC;QACtC,MAAM,MAAM,GAAG,kBAAkB,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE,UAAU,EAAE,CAAC,EAAE,CAAC,CAAC;QACnE,MAAM,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACrC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;QACtC,MAAM,KAAK,CAAC,KAAK,EAAE,CAAC;IACtB,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,2DAA2D,EAAE,KAAK,IAAI,EAAE;QACzE,MAAM,KAAK,GAAG,IAAI,gBAAgB,CAAC,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC,CAAC;QAC3D,MAAM,KAAK,CAAC,IAAI,EAAE,CAAC;QACnB,MAAM,KAAK,GAAG,OAAO,CAAC,WAAW,CAAC,CAAC;QACnC,KAAK,CAAC,SAAS,CAAC;YACd,EAAE,EAAE,KAAK;YACT,KAAK,EAAE,MAAM;YACb,WAAW,EAAE,sBAAsB;YACnC,UAAU,EAAE,MAAM;YAClB,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;SACtB,CAAC,CAAC;QACH,MAAM,MAAM,GAAG,kBAAkB,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;QAChD,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClC,MAAM,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACrC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;QACtC,MAAM,KAAK,CAAC,KAAK,EAAE,CAAC;IACtB,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,qBAAqB,EAAE,GAAG,EAAE;IACnC,EAAE,CAAC,oDAAoD,EAAE,KAAK,IAAI,EAAE;QAClE,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,MAAM,IAAI,EAAE,CAAC;QACtC,MAAM,MAAM,GAAG,kBAAkB,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;QAChD,MAAM,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAErC,MAAM,EAAE,OAAO,EAAE,GAAG,mBAAmB,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;QACtD,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAExB,MAAM,KAAK,GAAG,kBAAkB,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;QAC/C,MAAM,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACpC,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,qBAAqB;QACvD,MAAM,KAAK,CAAC,KAAK,EAAE,CAAC;IACtB,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}
+{"version":3,"file":"audit-graph.test.js","sourceRoot":"","sources":["../../../src/analyze/__tests__/audit-graph.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,eAAe,EAAE,QAAQ,EAAE,MAAM,6BAA6B,CAAC;AACjF,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAC9C,OAAO,EAAE,SAAS,EAAE,MAAM,uBAAuB,CAAC;AAClD,OAAO,EAAE,gBAAgB,EAAE,MAAM,qCAAqC,CAAC;AACvE,OAAO,EAAE,kBAAkB,EAAE,mBAAmB,EAAE,MAAM,mBAAmB,CAAC;AAE5E,KAAK,UAAU,IAAI;IACjB,MAAM,KAAK,GAAG,IAAI,gBAAgB,CAAC,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC,CAAC;IAC3D,MAAM,KAAK,CAAC,IAAI,EAAE,CAAC;IACnB,MAAM,KAAK,GAAG,OAAO,CAAC,WAAW,CAAC,CAAC;IACnC,KAAK,CAAC,SAAS,CAAC;QACd,EAAE,EAAE,KAAK;QACT,KAAK,EAAE,MAAM;QACb,WAAW,EAAE,sBAAsB;QACnC,UAAU,EAAE,MAAM;QAClB,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;KACtB,CAAC,CAAC;IACH,MAAM,EAAE,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACtB,iBAAiB;IACjB,KAAK,CAAC,UAAU,CAAC;QACf;YACE,KAAK;YACL,aAAa,EAAE,eAAe,CAAC,eAAe,CAAC;YAC/C,KAAK,EAAE,WAAW;YAClB,UAAU,EAAE,EAAE;YACd,UAAU,EAAE,QAAQ,CAAC,KAAK,CAAC;YAC3B,WAAW,EAAE,EAAE;YACf,UAAU,EAAE,EAAE;YACd,cAAc,EAAE,EAAE;SACnB;QACD;YACE,KAAK;YACL,aAAa,EAAE,eAAe,CAAC,uBAAuB,CAAC;YACvD,KAAK,EAAE,YAAY;YACnB,UAAU,EAAE,EAAE;YACd,UAAU,EAAE,QAAQ,CAAC,QAAQ,CAAC;YAC9B,WAAW,EAAE,EAAE;YACf,UAAU,EAAE,EAAE;YACd,cAAc,EAAE,EAAE;SACnB;KACF,CAAC,CAAC;IACH,sCAAsC;IACtC,KAAK,CAAC,UAAU,CAAC;QACf;YACE,KAAK;YACL,gBAAgB,EAAE,eAAe,CAAC,eAAe,CAAC;YAClD,gBAAgB,EAAE,eAAe,CAAC,uBAAuB,CAAC;YAC1D,OAAO,EAAE,SAAS,CAAC,eAAe;YAClC,UAAU,EAAE,EAAE;YACd,WAAW,EAAE,EAAE;YACf,UAAU,EAAE,EAAE;SACf;QACD;YACE,KAAK;YACL,gBAAgB,EAAE,eAAe,CAAC,uBAAuB,CAAC;YAC1D,gBAAgB,EAAE,eAAe,CAAC,6BAA6B,CAAC;YAChE,OAAO,EAAE,SAAS,CAAC,KAAK;YACxB,UAAU,EAAE,EAAE;YACd,WAAW,EAAE,EAAE;YACf,UAAU,EAAE,EAAE;SACf;QACD;YACE,KAAK;YACL,gBAAgB,EAAE,eAAe,CAAC,uBAAuB,CAAC;YAC1D,gBAAgB,EAAE,eAAe,CAAC,gCAAgC,CAAC;YACnE,OAAO,EAAE,SAAS,CAAC,WAAW;YAC9B,UAAU,EAAE,EAAE;YACd,WAAW,EAAE,EAAE;YACf,UAAU,EAAE,EAAE;SACf;KACF,CAAC,CAAC;IACH,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC;AAC1B,CAAC;AAED,QAAQ,CAAC,oBAAoB,EAAE,GAAG,EAAE;IAClC,EAAE,CAAC,0DAA0D,EAAE,KAAK,IAAI,EAAE;QACxE,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,MAAM,IAAI,EAAE,CAAC;QACtC,MAAM,MAAM,GAAG,kBAAkB,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;QAEhD,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClC,MAAM,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACrC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,aAAa,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,WAAW,EAAE,CAAC,EAAE,CAAC,CAAC;QACjE,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,aAAa,CAAC,EAAE,UAAU,EAAE,CAAC,EAAE,WAAW,EAAE,CAAC,EAAE,CAAC,CAAC;QAC5E,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;QACtC,MAAM,KAAK,CAAC,KAAK,EAAE,CAAC;IACtB,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,qBAAqB,EAAE,KAAK,IAAI,EAAE;QACnC,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,MAAM,IAAI,EAAE,CAAC;QACtC,MAAM,MAAM,GAAG,kBAAkB,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE,UAAU,EAAE,CAAC,EAAE,CAAC,CAAC;QACnE,MAAM,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACrC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;QACtC,MAAM,KAAK,CAAC,KAAK,EAAE,CAAC;IACtB,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,2DAA2D,EAAE,KAAK,IAAI,EAAE;QACzE,MAAM,KAAK,GAAG,IAAI,gBAAgB,CAAC,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC,CAAC;QAC3D,MAAM,KAAK,CAAC,IAAI,EAAE,CAAC;QACnB,MAAM,KAAK,GAAG,OAAO,CAAC,WAAW,CAAC,CAAC;QACnC,KAAK,CAAC,SAAS,CAAC;YACd,EAAE,EAAE,KAAK;YACT,KAAK,EAAE,MAAM;YACb,WAAW,EAAE,sBAAsB;YACnC,UAAU,EAAE,MAAM;YAClB,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;SACtB,CAAC,CAAC;QACH,MAAM,MAAM,GAAG,kBAAkB,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;QAChD,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClC,MAAM,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACrC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;QACtC,MAAM,KAAK,CAAC,KAAK,EAAE,CAAC;IACtB,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,qBAAqB,EAAE,GAAG,EAAE;IACnC,EAAE,CAAC,oDAAoD,EAAE,KAAK,IAAI,EAAE;QAClE,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,MAAM,IAAI,EAAE,CAAC;QACtC,MAAM,MAAM,GAAG,kBAAkB,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;QAChD,MAAM,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAErC,MAAM,EAAE,OAAO,EAAE,GAAG,mBAAmB,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;QACtD,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAExB,MAAM,KAAK,GAAG,kBAAkB,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;QAC/C,MAAM,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACpC,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,qBAAqB;QACvD,MAAM,KAAK,CAAC,KAAK,EAAE,CAAC;IACtB,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,2CAA2C,EAAE,GAAG,EAAE;IACzD,SAAS,IAAI,CAAC,KAAiC,EAAE,GAAW,EAAE,GAAW,EAAE,GAAW;QACpF,MAAM,EAAE,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACtB,OAAO;YACL,KAAK;YACL,gBAAgB,EAAE,eAAe,CAAC,GAAG,CAAC;YACtC,gBAAgB,EAAE,eAAe,CAAC,GAAG,CAAC;YACtC,OAAO,EAAE,GAAiD;YAC1D,UAAU,EAAE,EAAE;YACd,WAAW,EAAE,EAAE;YACf,UAAU,EAAE,EAAE;SACf,CAAC;IACJ,CAAC;IAED,KAAK,UAAU,YAAY;QACzB,MAAM,KAAK,GAAG,IAAI,gBAAgB,CAAC,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC,CAAC;QAC3D,MAAM,KAAK,CAAC,IAAI,EAAE,CAAC;QACnB,MAAM,KAAK,GAAG,OAAO,CAAC,cAAc,CAAC,CAAC;QACtC,KAAK,CAAC,SAAS,CAAC;YACd,EAAE,EAAE,KAAK;YACT,KAAK,EAAE,MAAM;YACb,WAAW,EAAE,sBAAsB;YACnC,UAAU,EAAE,MAAM;YAClB,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;SACtB,CAAC,CAAC;QACH,MAAM,EAAE,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACtB,KAAK,CAAC,UAAU,CAAC;YACf;gBACE,KAAK;gBACL,aAAa,EAAE,eAAe,CAAC,eAAe,CAAC;gBAC/C,KAAK,EAAE,SAAS;gBAChB,UAAU,EAAE,EAAE;gBACd,UAAU,EAAE,QAAQ,CAAC,GAAG,CAAC;gBACzB,WAAW,EAAE,EAAE;gBACf,UAAU,EAAE,EAAE;gBACd,cAAc,EAAE,EAAE;aACnB;SACF,CAAC,CAAC;QACH,KAAK,CAAC,UAAU,CAAC;YACf,4DAA4D;YAC5D,IAAI,CAAC,KAAK,EAAE,eAAe,EAAE,SAAS,CAAC,iBAAiB,EAAE,4BAA4B,CAAC;YACvF,IAAI,CAAC,KAAK,EAAE,eAAe,EAAE,SAAS,CAAC,mBAAmB,EAAE,6BAA6B,CAAC;YAC1F,8DAA8D;YAC9D,IAAI,CAAC,KAAK,EAAE,eAAe,EAAE,SAAS,CAAC,iBAAiB,EAAE,sBAAsB,CAAC;YACjF,IAAI,CAAC,KAAK,EAAE,eAAe,EAAE,SAAS,CAAC,mBAAmB,EAAE,+BAA+B,CAAC;SAC7F,CAAC,CAAC;QACH,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC;IAC1B,CAAC;IAED,EAAE,CAAC,gEAAgE,EAAE,KAAK,IAAI,EAAE;QAC9E,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,MAAM,YAAY,EAAE,CAAC;QAC9C,MAAM,MAAM,GAAG,kBAAkB,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;QAChD,MAAM,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACrC,MAAM,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACxC,MAAM,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACvC,sCAAsC;QACtC,MAAM,CACJ,MAAM,CAAC,MAAM;aACV,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC;aACX,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC;aACjB,IAAI,EAAE,CACV,CAAC,OAAO,CAAC,CAAC,+BAA+B,EAAE,sBAAsB,CAAC,CAAC,CAAC;QACrE,MAAM,KAAK,CAAC,KAAK,EAAE,CAAC;IACtB,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,qEAAqE,EAAE,KAAK,IAAI,EAAE;QACnF,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,MAAM,YAAY,EAAE,CAAC;QAC9C,MAAM,MAAM,GAAG,mBAAmB,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;QACjD,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAC/B,MAAM,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACxC,MAAM,KAAK,GAAG,kBAAkB,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;QAC/C,MAAM,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACpC,MAAM,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACvC,MAAM,KAAK,CAAC,KAAK,EAAE,CAAC;IACtB,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,iEAAiE,EAAE,KAAK,IAAI,EAAE;QAC/E,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,MAAM,YAAY,EAAE,CAAC;QAC9C,MAAM,MAAM,GAAG,mBAAmB,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE,mBAAmB,EAAE,IAAI,EAAE,CAAC,CAAC;QAChF,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAC/B,MAAM,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACxC,MAAM,CAAC,kBAAkB,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC,aAAa,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAC/D,MAAM,KAAK,CAAC,KAAK,EAAE,CAAC;IACtB,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/analyze/__tests__/edge-filters.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=edge-filters.test.d.ts.map

package/dist/analyze/__tests__/edge-filters.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"edge-filters.test.d.ts","sourceRoot":"","sources":["../../../src/analyze/__tests__/edge-filters.test.ts"],"names":[],"mappings":""}

package/dist/analyze/__tests__/edge-filters.test.js

@@ -0,0 +1,66 @@
+import { asOrgId, asQualifiedName, asSha256 } from "@ryanstark24/sfgraph-shared";
+import { beforeEach, describe, expect, it } from "vitest";
+import { SqliteGraphStore } from "../../storage/sqlite/graph-store.js";
+import { findDependents } from "../dependents.js";
+import { isReflectionEdge, keepEdge } from "../edge-filters.js";
+const ORG = asOrgId("orgFilter");
+let store;
+function edge(src, dst, rel, attrs = {}) {
+    return {
+        orgId: ORG,
+        srcQualifiedName: asQualifiedName(src),
+        dstQualifiedName: asQualifiedName(dst),
+        relType: rel,
+        attributes: attrs,
+        firstSeenAt: 1,
+        lastSeenAt: 1,
+    };
+}
+beforeEach(async () => {
+    store = new SqliteGraphStore({ dbPath: ":memory:" });
+    await store.init();
+    store.upsertOrg({ id: ORG, alias: "a", instanceUrl: "x", apiVersion: "59.0", createdAt: 1 });
+    store.mergeNodes(["ApexClass:Target", "ApexClass:TargetTest", "Profile:Admin", "Profile:Sales"].map((q) => ({
+        orgId: ORG,
+        label: q.split(":")[0],
+        qualifiedName: asQualifiedName(q),
+        attributes: {},
+        sourceHash: asSha256("h"),
+        firstSeenAt: 1,
+        lastSeenAt: 1,
+        lastModifiedAt: 1,
+    })));
+    store.mergeEdges([
+        edge("ApexClass:TargetTest", "ApexClass:Target", "IS_TEST_FOR"),
+        edge("Profile:Admin", "ApexClass:Target", "GRANTS_APEX_ACCESS"),
+        edge("Profile:Sales", "ApexClass:Target", "GRANTS_APEX_ACCESS"),
+    ]);
+});
+describe("edge-filters", () => {
+    it("keepEdge drops security grants and reflection edges by default", () => {
+        const grant = edge("Profile:Admin", "ApexClass:Target", "GRANTS_APEX_ACCESS");
+        const refl = edge("DataRaptor:Foo", "CustomApplication:DataRaptor", "REFERENCES", {
+            source: "reflection",
+        });
+        const real = edge("ApexClass:TargetTest", "ApexClass:Target", "IS_TEST_FOR");
+        expect(keepEdge(grant, {})).toBe(false);
+        expect(keepEdge(refl, {})).toBe(false);
+        expect(keepEdge(real, {})).toBe(true);
+        expect(isReflectionEdge(refl)).toBe(true);
+        expect(keepEdge(grant, { excludeSecurity: false })).toBe(true);
+        expect(keepEdge(refl, { excludeReflection: false })).toBe(true);
+    });
+    it("findDependents hides grant edges and reports filtered count", () => {
+        const r = findDependents(store, ORG, asQualifiedName("ApexClass:Target"), 3);
+        expect(r.nodes.map((node) => String(node.qualifiedName))).toEqual(["ApexClass:TargetTest"]);
+        expect(r.filtered).toBe(2);
+    });
+    it("findDependents includes grants when excludeSecurity:false", () => {
+        const r = findDependents(store, ORG, asQualifiedName("ApexClass:Target"), 3, {
+            excludeSecurity: false,
+        });
+        expect(r.nodes.length).toBe(3);
+        expect(r.filtered).toBe(0);
+    });
+});
+//# sourceMappingURL=edge-filters.test.js.map

package/dist/analyze/__tests__/edge-filters.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"edge-filters.test.js","sourceRoot":"","sources":["../../../src/analyze/__tests__/edge-filters.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,eAAe,EAAE,QAAQ,EAAE,MAAM,6BAA6B,CAAC;AACjF,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAC1D,OAAO,EAAE,gBAAgB,EAAE,MAAM,qCAAqC,CAAC;AACvE,OAAO,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAClD,OAAO,EAAE,gBAAgB,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAEhE,MAAM,GAAG,GAAG,OAAO,CAAC,WAAW,CAAC,CAAC;AACjC,IAAI,KAAuB,CAAC;AAE5B,SAAS,IAAI,CAAC,GAAW,EAAE,GAAW,EAAE,GAAW,EAAE,QAAiC,EAAE;IACtF,OAAO;QACL,KAAK,EAAE,GAAG;QACV,gBAAgB,EAAE,eAAe,CAAC,GAAG,CAAC;QACtC,gBAAgB,EAAE,eAAe,CAAC,GAAG,CAAC;QACtC,OAAO,EAAE,GAAY;QACrB,UAAU,EAAE,KAAK;QACjB,WAAW,EAAE,CAAC;QACd,UAAU,EAAE,CAAC;KACd,CAAC;AACJ,CAAC;AAED,UAAU,CAAC,KAAK,IAAI,EAAE;IACpB,KAAK,GAAG,IAAI,gBAAgB,CAAC,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC,CAAC;IACrD,MAAM,KAAK,CAAC,IAAI,EAAE,CAAC;IACnB,KAAK,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,GAAG,EAAE,KAAK,EAAE,GAAG,EAAE,WAAW,EAAE,GAAG,EAAE,UAAU,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,EAAE,CAAC,CAAC;IAC7F,KAAK,CAAC,UAAU,CACd,CAAC,kBAAkB,EAAE,sBAAsB,EAAE,eAAe,EAAE,eAAe,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QACzF,KAAK,EAAE,GAAG;QACV,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAW;QAChC,aAAa,EAAE,eAAe,CAAC,CAAC,CAAC;QACjC,UAAU,EAAE,EAAE;QACd,UAAU,EAAE,QAAQ,CAAC,GAAG,CAAC;QACzB,WAAW,EAAE,CAAC;QACd,UAAU,EAAE,CAAC;QACb,cAAc,EAAE,CAAC;KAClB,CAAC,CAAC,CACJ,CAAC;IACF,KAAK,CAAC,UAAU,CAAC;QACf,IAAI,CAAC,sBAAsB,EAAE,kBAAkB,EAAE,aAAa,CAAC;QAC/D,IAAI,CAAC,eAAe,EAAE,kBAAkB,EAAE,oBAAoB,CAAC;QAC/D,IAAI,CAAC,eAAe,EAAE,kBAAkB,EAAE,oBAAoB,CAAC;KAChE,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,cAAc,EAAE,GAAG,EAAE;IAC5B,EAAE,CAAC,gEAAgE,EAAE,GAAG,EAAE;QACxE,MAAM,KAAK,GAAG,IAAI,CAAC,eAAe,EAAE,kBAAkB,EAAE,oBAAoB,CAAC,CAAC;QAC9E,MAAM,IAAI,GAAG,IAAI,CAAC,gBAAgB,EAAE,8BAA8B,EAAE,YAAY,EAAE;YAChF,MAAM,EAAE,YAAY;SACrB,CAAC,CAAC;QACH,MAAM,IAAI,GAAG,IAAI,CAAC,sBAAsB,EAAE,kBAAkB,EAAE,aAAa,CAAC,CAAC;QAC7E,MAAM,CAAC,QAAQ,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACxC,MAAM,CAAC,QAAQ,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACvC,MAAM,CAAC,QAAQ,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACtC,MAAM,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC1C,MAAM,CAAC,QAAQ,CAAC,KAAK,EAAE,EAAE,eAAe,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC/D,MAAM,CAAC,QAAQ,CAAC,IAAI,EAAE,EAAE,iBAAiB,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAClE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,6DAA6D,EAAE,GAAG,EAAE;QACrE,MAAM,CAAC,GAAG,cAAc,CAAC,KAAK,EAAE,GAAG,EAAE,eAAe,CAAC,kBAAkB,CAAC,EAAE,CAAC,CAAC,CAAC;QAC7E,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,sBAAsB,CAAC,CAAC,CAAC;QAC5F,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAC7B,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,2DAA2D,EAAE,GAAG,EAAE;QACnE,MAAM,CAAC,GAAG,cAAc,CAAC,KAAK,EAAE,GAAG,EAAE,eAAe,CAAC,kBAAkB,CAAC,EAAE,CAAC,EAAE;YAC3E,eAAe,EAAE,KAAK;SACvB,CAAC,CAAC;QACH,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAC/B,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAC7B,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/analyze/__tests__/findings.test.js

@@ -1,21 +1,25 @@
 import { describe, expect, it } from "vitest";
-import { collectFindings, danglingEdgesToFindings, deadCodeToFindings, governorRisksToFindings, RULE_CATALOG, securityAuditToFindings, } from "../findings.js";
+import { RULE_CATALOG, collectFindings, danglingEdgesToFindings, deadCodeToFindings, governorRisksToFindings, securityAuditToFindings, } from "../findings.js";
 describe("W3-01: Finding adapters", () => {
     it("RULE_CATALOG includes every ruleId the adapters can emit", () => {
         const referenced = new Set();
         // Exercise every adapter on a representative input
-        governorRisksToFindings([
+        for (const f of governorRisksToFindings([
             { qualifiedName: "X", risk: "soql_in_loop", evidence: "" },
             { qualifiedName: "X", risk: "dml_in_loop", evidence: "" },
             { qualifiedName: "X", risk: "unbounded_query", evidence: "" },
             { qualifiedName: "X", risk: "no_bulk", evidence: "" },
-        ]).forEach((f) => referenced.add(f.ruleId));
-        securityAuditToFindings({
+        ])) {
+            referenced.add(f.ruleId);
+        }
+        for (const f of securityAuditToFindings({
             sharingFullAccess: ["CustomObject:X"],
             flsGaps: ["CustomField:X.Y"],
             fieldAccessMatrix: [],
-        }).forEach((f) => referenced.add(f.ruleId));
-        deadCodeToFindings([
+        })) {
+            referenced.add(f.ruleId);
+        }
+        for (const f of deadCodeToFindings([
             {
                 orgId: "org",
                 qualifiedName: "X",
@@ -26,14 +30,20 @@ describe("W3-01: Finding adapters", () => {
                 lastSeenAt: 0,
                 lastModifiedAt: 0,
             },
-        ]).forEach((f) => referenced.add(f.ruleId));
-        danglingEdgesToFindings({
+        ])) {
+            referenced.add(f.ruleId);
+        }
+        for (const f of danglingEdgesToFindings({
             totalEdges: 1,
             danglingCount: 1,
+            platformRefCount: 0,
+            unexpectedCount: 1,
             byRel: {},
             byDstPrefix: {},
             sample: [{ src: "X", rel: "CALLS", dst: "Y" }],
-        }).forEach((f) => referenced.add(f.ruleId));
+        })) {
+            referenced.add(f.ruleId);
+        }
         for (const id of referenced) {
             expect(RULE_CATALOG[id], `RULE_CATALOG should contain ${id}`).toBeDefined();
         }

package/dist/analyze/__tests__/findings.test.js.map

@@ -1 +1 @@
-{"version":3,"file":"findings.test.js","sourceRoot":"","sources":["../../../src/analyze/__tests__/findings.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAC9C,OAAO,EACL,eAAe,EACf,uBAAuB,EACvB,kBAAkB,EAClB,uBAAuB,EACvB,YAAY,EACZ,uBAAuB,GACxB,MAAM,gBAAgB,CAAC;AAKxB,QAAQ,CAAC,yBAAyB,EAAE,GAAG,EAAE;IACvC,EAAE,CAAC,0DAA0D,EAAE,GAAG,EAAE;QAClE,MAAM,UAAU,GAAG,IAAI,GAAG,EAAU,CAAC;QACrC,mDAAmD;QACnD,uBAAuB,CAAC;YACtB,EAAE,aAAa,EAAE,GAAG,EAAE,IAAI,EAAE,cAAc,EAAE,QAAQ,EAAE,EAAE,EAAE;YAC1D,EAAE,aAAa,EAAE,GAAG,EAAE,IAAI,EAAE,aAAa,EAAE,QAAQ,EAAE,EAAE,EAAE;YACzD,EAAE,aAAa,EAAE,GAAG,EAAE,IAAI,EAAE,iBAAiB,EAAE,QAAQ,EAAE,EAAE,EAAE;YAC7D,EAAE,aAAa,EAAE,GAAG,EAAE,IAAI,EAAE,SAAS,EAAE,QAAQ,EAAE,EAAE,EAAE;SACtD,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC;QAC5C,uBAAuB,CAAC;YACtB,iBAAiB,EAAE,CAAC,gBAAgB,CAAC;YACrC,OAAO,EAAE,CAAC,iBAAiB,CAAC;YAC5B,iBAAiB,EAAE,EAAE;SACtB,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC;QAC5C,kBAAkB,CAAC;YACjB;gBACE,KAAK,EAAE,KAAc;gBACrB,aAAa,EAAE,GAAY;gBAC3B,KAAK,EAAE,WAAW;gBAClB,UAAU,EAAE,EAAE;gBACd,UAAU,EAAE,GAAY;gBACxB,WAAW,EAAE,CAAC;gBACd,UAAU,EAAE,CAAC;gBACb,cAAc,EAAE,CAAC;aAClB;SACF,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC;QAC5C,uBAAuB,CAAC;YACtB,UAAU,EAAE,CAAC;YACb,aAAa,EAAE,CAAC;YAChB,KAAK,EAAE,EAAE;YACT,WAAW,EAAE,EAAE;YACf,MAAM,EAAE,CAAC,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC;SAC/C,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC;QAE5C,KAAK,MAAM,EAAE,IAAI,UAAU,EAAE,CAAC;YAC5B,MAAM,CAAC,YAAY,CAAC,EAAE,CAAC,EAAE,+BAA+B,EAAE,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;QAC9E,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,2DAA2D,EAAE,GAAG,EAAE;QACnE,MAAM,KAAK,GAAmB;YAC5B,EAAE,aAAa,EAAE,eAAe,EAAE,IAAI,EAAE,cAAc,EAAE,QAAQ,EAAE,GAAG,EAAE;YACvE,EAAE,aAAa,EAAE,eAAe,EAAE,IAAI,EAAE,aAAa,EAAE,QAAQ,EAAE,GAAG,EAAE;SACvE,CAAC;QACF,MAAM,QAAQ,GAAG,uBAAuB,CAAC,KAAK,CAAC,CAAC;QAChD,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC;YACnD,sBAAsB;YACtB,uBAAuB;SACxB,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,oEAAoE,EAAE,GAAG,EAAE;QAC5E,MAAM,KAAK,GAAkB;YAC3B,iBAAiB,EAAE,CAAC,sBAAsB,CAAC;YAC3C,OAAO,EAAE,CAAC,4BAA4B,CAAC;YACvC,iBAAiB,EAAE,EAAE;SACtB,CAAC;QACF,MAAM,QAAQ,GAAG,uBAAuB,CAAC,KAAK,CAAC,CAAC;QAChD,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;QACzD,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,kBAAkB,CAAC,EAAE,QAAQ,CAAC,aAAa,CAAC,CAAC,IAAI,CAC/D,4BAA4B,CAC7B,CAAC;QACF,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,8BAA8B,CAAC,EAAE,QAAQ,CAAC,aAAa,CAAC,CAAC,IAAI,CAC3E,sBAAsB,CACvB,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,mEAAmE,EAAE,GAAG,EAAE;QAC3E,MAAM,QAAQ,GAAG,eAAe,CAAC;YAC/B,QAAQ,EAAE,CAAC,EAAE,aAAa,EAAE,GAAG,EAAE,IAAI,EAAE,cAAc,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC;YACtE,QAAQ,EAAE,EAAE,iBAAiB,EAAE,EAAE,EAAE,OAAO,EAAE,CAAC,iBAAiB,CAAC,EAAE,iBAAiB,EAAE,EAAE,EAAE;SAChD,CAAC,CAAC;QAC5C,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAChC,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC;YACnD,uBAAuB;YACvB,kBAAkB;SACnB,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,wFAAwF,EAAE,GAAG,EAAE;QAChG,MAAM,QAAQ,GAAG,kBAAkB,CAAC;YAClC;gBACE,KAAK,EAAE,KAAc;gBACrB,aAAa,EAAE,kBAA2B;gBAC1C,KAAK,EAAE,WAAW;gBAClB,UAAU,EAAE,EAAE,SAAS,EAAE,+BAA+B,EAAE;gBAC1D,UAAU,EAAE,GAAY;gBACxB,WAAW,EAAE,CAAC;gBACd,UAAU,EAAE,CAAC;gBACb,cAAc,EAAE,CAAC;aAClB;SACF,CAAC,CAAC;QACH,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,+BAA+B,CAAC,CAAC;IAChF,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}
+{"version":3,"file":"findings.test.js","sourceRoot":"","sources":["../../../src/analyze/__tests__/findings.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAE9C,OAAO,EACL,YAAY,EACZ,eAAe,EACf,uBAAuB,EACvB,kBAAkB,EAClB,uBAAuB,EACvB,uBAAuB,GACxB,MAAM,gBAAgB,CAAC;AAIxB,QAAQ,CAAC,yBAAyB,EAAE,GAAG,EAAE;IACvC,EAAE,CAAC,0DAA0D,EAAE,GAAG,EAAE;QAClE,MAAM,UAAU,GAAG,IAAI,GAAG,EAAU,CAAC;QACrC,mDAAmD;QACnD,KAAK,MAAM,CAAC,IAAI,uBAAuB,CAAC;YACtC,EAAE,aAAa,EAAE,GAAG,EAAE,IAAI,EAAE,cAAc,EAAE,QAAQ,EAAE,EAAE,EAAE;YAC1D,EAAE,aAAa,EAAE,GAAG,EAAE,IAAI,EAAE,aAAa,EAAE,QAAQ,EAAE,EAAE,EAAE;YACzD,EAAE,aAAa,EAAE,GAAG,EAAE,IAAI,EAAE,iBAAiB,EAAE,QAAQ,EAAE,EAAE,EAAE;YAC7D,EAAE,aAAa,EAAE,GAAG,EAAE,IAAI,EAAE,SAAS,EAAE,QAAQ,EAAE,EAAE,EAAE;SACtD,CAAC,EAAE,CAAC;YACH,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;QAC3B,CAAC;QACD,KAAK,MAAM,CAAC,IAAI,uBAAuB,CAAC;YACtC,iBAAiB,EAAE,CAAC,gBAAgB,CAAC;YACrC,OAAO,EAAE,CAAC,iBAAiB,CAAC;YAC5B,iBAAiB,EAAE,EAAE;SACtB,CAAC,EAAE,CAAC;YACH,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;QAC3B,CAAC;QACD,KAAK,MAAM,CAAC,IAAI,kBAAkB,CAAC;YACjC;gBACE,KAAK,EAAE,KAAc;gBACrB,aAAa,EAAE,GAAY;gBAC3B,KAAK,EAAE,WAAW;gBAClB,UAAU,EAAE,EAAE;gBACd,UAAU,EAAE,GAAY;gBACxB,WAAW,EAAE,CAAC;gBACd,UAAU,EAAE,CAAC;gBACb,cAAc,EAAE,CAAC;aAClB;SACF,CAAC,EAAE,CAAC;YACH,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;QAC3B,CAAC;QACD,KAAK,MAAM,CAAC,IAAI,uBAAuB,CAAC;YACtC,UAAU,EAAE,CAAC;YACb,aAAa,EAAE,CAAC;YAChB,gBAAgB,EAAE,CAAC;YACnB,eAAe,EAAE,CAAC;YAClB,KAAK,EAAE,EAAE;YACT,WAAW,EAAE,EAAE;YACf,MAAM,EAAE,CAAC,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC;SAC/C,CAAC,EAAE,CAAC;YACH,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;QAC3B,CAAC;QAED,KAAK,MAAM,EAAE,IAAI,UAAU,EAAE,CAAC;YAC5B,MAAM,CAAC,YAAY,CAAC,EAAE,CAAC,EAAE,+BAA+B,EAAE,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;QAC9E,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,2DAA2D,EAAE,GAAG,EAAE;QACnE,MAAM,KAAK,GAAmB;YAC5B,EAAE,aAAa,EAAE,eAAe,EAAE,IAAI,EAAE,cAAc,EAAE,QAAQ,EAAE,GAAG,EAAE;YACvE,EAAE,aAAa,EAAE,eAAe,EAAE,IAAI,EAAE,aAAa,EAAE,QAAQ,EAAE,GAAG,EAAE;SACvE,CAAC;QACF,MAAM,QAAQ,GAAG,uBAAuB,CAAC,KAAK,CAAC,CAAC;QAChD,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC;YACnD,sBAAsB;YACtB,uBAAuB;SACxB,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,oEAAoE,EAAE,GAAG,EAAE;QAC5E,MAAM,KAAK,GAAkB;YAC3B,iBAAiB,EAAE,CAAC,sBAAsB,CAAC;YAC3C,OAAO,EAAE,CAAC,4BAA4B,CAAC;YACvC,iBAAiB,EAAE,EAAE;SACtB,CAAC;QACF,MAAM,QAAQ,GAAG,uBAAuB,CAAC,KAAK,CAAC,CAAC;QAChD,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;QACzD,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,kBAAkB,CAAC,EAAE,QAAQ,CAAC,aAAa,CAAC,CAAC,IAAI,CAAC,4BAA4B,CAAC,CAAC;QAChG,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,8BAA8B,CAAC,EAAE,QAAQ,CAAC,aAAa,CAAC,CAAC,IAAI,CAC3E,sBAAsB,CACvB,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,mEAAmE,EAAE,GAAG,EAAE;QAC3E,MAAM,QAAQ,GAAG,eAAe,CAAC;YAC/B,QAAQ,EAAE,CAAC,EAAE,aAAa,EAAE,GAAG,EAAE,IAAI,EAAE,cAAc,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC;YACtE,QAAQ,EAAE,EAAE,iBAAiB,EAAE,EAAE,EAAE,OAAO,EAAE,CAAC,iBAAiB,CAAC,EAAE,iBAAiB,EAAE,EAAE,EAAE;SAChD,CAAC,CAAC;QAC5C,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAChC,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC;YACnD,uBAAuB;YACvB,kBAAkB;SACnB,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,wFAAwF,EAAE,GAAG,EAAE;QAChG,MAAM,QAAQ,GAAG,kBAAkB,CAAC;YAClC;gBACE,KAAK,EAAE,KAAc;gBACrB,aAAa,EAAE,kBAA2B;gBAC1C,KAAK,EAAE,WAAW;gBAClB,UAAU,EAAE,EAAE,SAAS,EAAE,+BAA+B,EAAE;gBAC1D,UAAU,EAAE,GAAY;gBACxB,WAAW,EAAE,CAAC;gBACd,UAAU,EAAE,CAAC;gBACb,cAAc,EAAE,CAAC;aAClB;SACF,CAAC,CAAC;QACH,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,+BAA+B,CAAC,CAAC;IAChF,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/analyze/__tests__/governor-risks-detection.test.js

@@ -67,4 +67,94 @@ describe("governor risk detection heuristics", () => {
         expect(r.c).toBeGreaterThan(0);
     });
 });
+describe("governor risk detection — edge-based (live ingest, no body)", () => {
+    function methodNode(qname) {
+        return {
+            orgId: ORG,
+            label: "ApexMethod",
+            qualifiedName: asQualifiedName(qname),
+            // Live-ingest reality: NO body/source on the node.
+            attributes: { sourceUri: "x" },
+            sourceHash: asSha256("h"),
+            firstSeenAt: 1,
+            lastSeenAt: 1,
+            lastModifiedAt: Date.now(),
+        };
+    }
+    it("flags soql_in_loop from an inLoop EXECUTES_SOQL edge", () => {
+        store.mergeNodes([methodNode("ApexMethod:Acme.run(0)")]);
+        store.mergeEdges([
+            {
+                orgId: ORG,
+                srcQualifiedName: asQualifiedName("ApexMethod:Acme.run(0)"),
+                dstQualifiedName: asQualifiedName("CustomObject:Account"),
+                relType: "EXECUTES_SOQL",
+                attributes: { inLoop: true, query: "[SELECT Id FROM Account]" },
+                firstSeenAt: 1,
+                lastSeenAt: 1,
+            },
+        ]);
+        const count = populateGovernorRisks(store, ORG, db);
+        expect(count).toBeGreaterThanOrEqual(1);
+        const rows = db
+            .prepare("SELECT risk_type FROM _sfgraph_governor_risks WHERE org_id = ?")
+            .all(ORG)
+            .map((r) => r.risk_type);
+        expect(rows).toContain("soql_in_loop");
+        // unbounded_query is intentionally NOT emitted from edges (too noisy on
+        // real orgs — every WHERE-less query would flag).
+        expect(rows).not.toContain("unbounded_query");
+    });
+    it("does NOT flag a WHERE-less SOQL edge that is outside any loop", () => {
+        store.mergeNodes([methodNode("ApexMethod:Acme.list(0)")]);
+        store.mergeEdges([
+            {
+                orgId: ORG,
+                srcQualifiedName: asQualifiedName("ApexMethod:Acme.list(0)"),
+                dstQualifiedName: asQualifiedName("CustomObject:RecordType"),
+                relType: "EXECUTES_SOQL",
+                attributes: { query: "[SELECT Id FROM RecordType]" },
+                firstSeenAt: 1,
+                lastSeenAt: 1,
+            },
+        ]);
+        expect(populateGovernorRisks(store, ORG, db)).toBe(0);
+    });
+    it("flags dml_in_loop from EXECUTES_DML edge attrs", () => {
+        store.mergeNodes([methodNode("ApexMethod:Acme.save(0)")]);
+        store.mergeEdges([
+            {
+                orgId: ORG,
+                srcQualifiedName: asQualifiedName("ApexMethod:Acme.save(0)"),
+                dstQualifiedName: asQualifiedName("DML:update"),
+                relType: "EXECUTES_DML",
+                attributes: { inLoop: true },
+                firstSeenAt: 1,
+                lastSeenAt: 1,
+            },
+        ]);
+        populateGovernorRisks(store, ORG, db);
+        const rows = db
+            .prepare("SELECT risk_type FROM _sfgraph_governor_risks WHERE org_id = ?")
+            .all(ORG)
+            .map((r) => r.risk_type);
+        expect(rows).toContain("dml_in_loop");
+    });
+    it("does NOT flag a bounded query outside a loop", () => {
+        store.mergeNodes([methodNode("ApexMethod:Acme.safe(0)")]);
+        store.mergeEdges([
+            {
+                orgId: ORG,
+                srcQualifiedName: asQualifiedName("ApexMethod:Acme.safe(0)"),
+                dstQualifiedName: asQualifiedName("CustomObject:Account"),
+                relType: "EXECUTES_SOQL",
+                attributes: { query: "[SELECT Id FROM Account WHERE Id = :x LIMIT 1]" },
+                firstSeenAt: 1,
+                lastSeenAt: 1,
+            },
+        ]);
+        const count = populateGovernorRisks(store, ORG, db);
+        expect(count).toBe(0);
+    });
+});
 //# sourceMappingURL=governor-risks-detection.test.js.map

package/dist/analyze/__tests__/governor-risks-detection.test.js.map

@@ -1 +1 @@
-{"version":3,"file":"governor-risks-detection.test.js","sourceRoot":"","sources":["../../../src/analyze/__tests__/governor-risks-detection.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,eAAe,EAAE,QAAQ,EAAE,MAAM,6BAA6B,CAAC;AAEjF,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAE1D,OAAO,EAAE,gBAAgB,EAAE,MAAM,qCAAqC,CAAC;AACvE,OAAO,EAAE,qBAAqB,EAAE,MAAM,gBAAgB,CAAC;AAEvD,MAAM,GAAG,GAAG,OAAO,CAAC,WAAW,CAAC,CAAC;AAEjC,IAAI,KAAuB,CAAC;AAC5B,IAAI,EAAqB,CAAC;AAE1B,SAAS,CAAC,CAAC,KAAa,EAAE,MAAc;IACtC,OAAO;QACL,KAAK,EAAE,GAAG;QACV,KAAK,EAAE,WAAW;QAClB,aAAa,EAAE,eAAe,CAAC,KAAK,CAAC;QACrC,UAAU,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,GAAG,EAAE;QACtC,UAAU,EAAE,QAAQ,CAAC,GAAG,CAAC;QACzB,WAAW,EAAE,CAAC;QACd,UAAU,EAAE,CAAC;QACb,cAAc,EAAE,IAAI,CAAC,GAAG,EAAE;KAC3B,CAAC;AACJ,CAAC;AAED,UAAU,CAAC,KAAK,IAAI,EAAE;IACpB,KAAK,GAAG,IAAI,gBAAgB,CAAC,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC,CAAC;IACrD,MAAM,KAAK,CAAC,IAAI,EAAE,CAAC;IACnB,KAAK,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,GAAG,EAAE,KAAK,EAAE,GAAG,EAAE,WAAW,EAAE,GAAG,EAAE,UAAU,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,EAAE,CAAC,CAAC;IAC7F,EAAE,GAAI,KAA8C,CAAC,EAAE,CAAC;AAC1D,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,oCAAoC,EAAE,GAAG,EAAE;IAClD,EAAE,CAAC,8BAA8B,EAAE,GAAG,EAAE;QACtC,KAAK,CAAC,UAAU,CAAC;YACf,CAAC,CACC,oBAAoB,EACpB,iHAAiH,CAClH;SACF,CAAC,CAAC;QACH,qBAAqB,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE,CAAC,CAAC;QACtC,MAAM,CAAC,GAAG,EAAE;aACT,OAAO,CAAC,kFAAkF,CAAC;aAC3F,GAAG,EAAmB,CAAC;QAC1B,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC;IACjC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,+BAA+B,EAAE,GAAG,EAAE;QACvC,KAAK,CAAC,UAAU,CAAC;YACf,CAAC,CACC,mBAAmB,EACnB,8FAA8F,CAC/F;SACF,CAAC,CAAC;QACH,qBAAqB,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE,CAAC,CAAC;QACtC,MAAM,CAAC,GAAG,EAAE;aACT,OAAO,CAAC,iFAAiF,CAAC;aAC1F,GAAG,EAAmB,CAAC;QAC1B,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC;IACjC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,2CAA2C,EAAE,GAAG,EAAE;QACnD,KAAK,CAAC,UAAU,CAAC;YACf,CAAC,CACC,qBAAqB,EACrB,4EAA4E,CAC7E;SACF,CAAC,CAAC;QACH,qBAAqB,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE,CAAC,CAAC;QACtC,MAAM,CAAC,GAAG,EAAE;aACT,OAAO,CACN,qFAAqF,CACtF;aACA,GAAG,EAAmB,CAAC;QAC1B,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC;IACjC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,gDAAgD,EAAE,GAAG,EAAE;QACxD,MAAM,CAAC,GAAa;YAClB,GAAG,CAAC,CACF,gBAAgB,EAChB,yFAAyF,CAC1F;YACD,KAAK,EAAE,aAAa;SACrB,CAAC;QACF,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACtB,qBAAqB,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE,CAAC,CAAC;QACtC,MAAM,CAAC,GAAG,EAAE;aACT,OAAO,CAAC,6EAA6E,CAAC;aACtF,GAAG,EAAmB,CAAC;QAC1B,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC;IACjC,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}
+{"version":3,"file":"governor-risks-detection.test.js","sourceRoot":"","sources":["../../../src/analyze/__tests__/governor-risks-detection.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,eAAe,EAAE,QAAQ,EAAE,MAAM,6BAA6B,CAAC;AAEjF,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAE1D,OAAO,EAAE,gBAAgB,EAAE,MAAM,qCAAqC,CAAC;AACvE,OAAO,EAAE,qBAAqB,EAAE,MAAM,gBAAgB,CAAC;AAEvD,MAAM,GAAG,GAAG,OAAO,CAAC,WAAW,CAAC,CAAC;AAEjC,IAAI,KAAuB,CAAC;AAC5B,IAAI,EAAqB,CAAC;AAE1B,SAAS,CAAC,CAAC,KAAa,EAAE,MAAc;IACtC,OAAO;QACL,KAAK,EAAE,GAAG;QACV,KAAK,EAAE,WAAW;QAClB,aAAa,EAAE,eAAe,CAAC,KAAK,CAAC;QACrC,UAAU,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,GAAG,EAAE;QACtC,UAAU,EAAE,QAAQ,CAAC,GAAG,CAAC;QACzB,WAAW,EAAE,CAAC;QACd,UAAU,EAAE,CAAC;QACb,cAAc,EAAE,IAAI,CAAC,GAAG,EAAE;KAC3B,CAAC;AACJ,CAAC;AAED,UAAU,CAAC,KAAK,IAAI,EAAE;IACpB,KAAK,GAAG,IAAI,gBAAgB,CAAC,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC,CAAC;IACrD,MAAM,KAAK,CAAC,IAAI,EAAE,CAAC;IACnB,KAAK,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,GAAG,EAAE,KAAK,EAAE,GAAG,EAAE,WAAW,EAAE,GAAG,EAAE,UAAU,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,EAAE,CAAC,CAAC;IAC7F,EAAE,GAAI,KAA8C,CAAC,EAAE,CAAC;AAC1D,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,oCAAoC,EAAE,GAAG,EAAE;IAClD,EAAE,CAAC,8BAA8B,EAAE,GAAG,EAAE;QACtC,KAAK,CAAC,UAAU,CAAC;YACf,CAAC,CACC,oBAAoB,EACpB,iHAAiH,CAClH;SACF,CAAC,CAAC;QACH,qBAAqB,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE,CAAC,CAAC;QACtC,MAAM,CAAC,GAAG,EAAE;aACT,OAAO,CAAC,kFAAkF,CAAC;aAC3F,GAAG,EAAmB,CAAC;QAC1B,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC;IACjC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,+BAA+B,EAAE,GAAG,EAAE;QACvC,KAAK,CAAC,UAAU,CAAC;YACf,CAAC,CACC,mBAAmB,EACnB,8FAA8F,CAC/F;SACF,CAAC,CAAC;QACH,qBAAqB,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE,CAAC,CAAC;QACtC,MAAM,CAAC,GAAG,EAAE;aACT,OAAO,CAAC,iFAAiF,CAAC;aAC1F,GAAG,EAAmB,CAAC;QAC1B,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC;IACjC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,2CAA2C,EAAE,GAAG,EAAE;QACnD,KAAK,CAAC,UAAU,CAAC;YACf,CAAC,CACC,qBAAqB,EACrB,4EAA4E,CAC7E;SACF,CAAC,CAAC;QACH,qBAAqB,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE,CAAC,CAAC;QACtC,MAAM,CAAC,GAAG,EAAE;aACT,OAAO,CACN,qFAAqF,CACtF;aACA,GAAG,EAAmB,CAAC;QAC1B,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC;IACjC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,gDAAgD,EAAE,GAAG,EAAE;QACxD,MAAM,CAAC,GAAa;YAClB,GAAG,CAAC,CACF,gBAAgB,EAChB,yFAAyF,CAC1F;YACD,KAAK,EAAE,aAAa;SACrB,CAAC;QACF,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACtB,qBAAqB,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE,CAAC,CAAC;QACtC,MAAM,CAAC,GAAG,EAAE;aACT,OAAO,CAAC,6EAA6E,CAAC;aACtF,GAAG,EAAmB,CAAC;QAC1B,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC;IACjC,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,6DAA6D,EAAE,GAAG,EAAE;IAC3E,SAAS,UAAU,CAAC,KAAa;QAC/B,OAAO;YACL,KAAK,EAAE,GAAG;YACV,KAAK,EAAE,YAAY;YACnB,aAAa,EAAE,eAAe,CAAC,KAAK,CAAC;YACrC,mDAAmD;YACnD,UAAU,EAAE,EAAE,SAAS,EAAE,GAAG,EAAE;YAC9B,UAAU,EAAE,QAAQ,CAAC,GAAG,CAAC;YACzB,WAAW,EAAE,CAAC;YACd,UAAU,EAAE,CAAC;YACb,cAAc,EAAE,IAAI,CAAC,GAAG,EAAE;SAC3B,CAAC;IACJ,CAAC;IAED,EAAE,CAAC,sDAAsD,EAAE,GAAG,EAAE;QAC9D,KAAK,CAAC,UAAU,CAAC,CAAC,UAAU,CAAC,wBAAwB,CAAC,CAAC,CAAC,CAAC;QACzD,KAAK,CAAC,UAAU,CAAC;YACf;gBACE,KAAK,EAAE,GAAG;gBACV,gBAAgB,EAAE,eAAe,CAAC,wBAAwB,CAAC;gBAC3D,gBAAgB,EAAE,eAAe,CAAC,sBAAsB,CAAC;gBACzD,OAAO,EAAE,eAAwB;gBACjC,UAAU,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,0BAA0B,EAAE;gBAC/D,WAAW,EAAE,CAAC;gBACd,UAAU,EAAE,CAAC;aACd;SACF,CAAC,CAAC;QACH,MAAM,KAAK,GAAG,qBAAqB,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE,CAAC,CAAC;QACpD,MAAM,CAAC,KAAK,CAAC,CAAC,sBAAsB,CAAC,CAAC,CAAC,CAAC;QACxC,MAAM,IAAI,GAAG,EAAE;aACZ,OAAO,CAAC,gEAAgE,CAAC;aACzE,GAAG,CAAC,GAAG,CAAC;aACR,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAE,CAA2B,CAAC,SAAS,CAAC,CAAC;QACtD,MAAM,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,cAAc,CAAC,CAAC;QACvC,wEAAwE;QACxE,kDAAkD;QAClD,MAAM,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,iBAAiB,CAAC,CAAC;IAChD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,+DAA+D,EAAE,GAAG,EAAE;QACvE,KAAK,CAAC,UAAU,CAAC,CAAC,UAAU,CAAC,yBAAyB,CAAC,CAAC,CAAC,CAAC;QAC1D,KAAK,CAAC,UAAU,CAAC;YACf;gBACE,KAAK,EAAE,GAAG;gBACV,gBAAgB,EAAE,eAAe,CAAC,yBAAyB,CAAC;gBAC5D,gBAAgB,EAAE,eAAe,CAAC,yBAAyB,CAAC;gBAC5D,OAAO,EAAE,eAAwB;gBACjC,UAAU,EAAE,EAAE,KAAK,EAAE,6BAA6B,EAAE;gBACpD,WAAW,EAAE,CAAC;gBACd,UAAU,EAAE,CAAC;aACd;SACF,CAAC,CAAC;QACH,MAAM,CAAC,qBAAqB,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACxD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,gDAAgD,EAAE,GAAG,EAAE;QACxD,KAAK,CAAC,UAAU,CAAC,CAAC,UAAU,CAAC,yBAAyB,CAAC,CAAC,CAAC,CAAC;QAC1D,KAAK,CAAC,UAAU,CAAC;YACf;gBACE,KAAK,EAAE,GAAG;gBACV,gBAAgB,EAAE,eAAe,CAAC,yBAAyB,CAAC;gBAC5D,gBAAgB,EAAE,eAAe,CAAC,YAAY,CAAC;gBAC/C,OAAO,EAAE,cAAuB;gBAChC,UAAU,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE;gBAC5B,WAAW,EAAE,CAAC;gBACd,UAAU,EAAE,CAAC;aACd;SACF,CAAC,CAAC;QACH,qBAAqB,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE,CAAC,CAAC;QACtC,MAAM,IAAI,GAAG,EAAE;aACZ,OAAO,CAAC,gEAAgE,CAAC;aACzE,GAAG,CAAC,GAAG,CAAC;aACR,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAE,CAA2B,CAAC,SAAS,CAAC,CAAC;QACtD,MAAM,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,aAAa,CAAC,CAAC;IACxC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,8CAA8C,EAAE,GAAG,EAAE;QACtD,KAAK,CAAC,UAAU,CAAC,CAAC,UAAU,CAAC,yBAAyB,CAAC,CAAC,CAAC,CAAC;QAC1D,KAAK,CAAC,UAAU,CAAC;YACf;gBACE,KAAK,EAAE,GAAG;gBACV,gBAAgB,EAAE,eAAe,CAAC,yBAAyB,CAAC;gBAC5D,gBAAgB,EAAE,eAAe,CAAC,sBAAsB,CAAC;gBACzD,OAAO,EAAE,eAAwB;gBACjC,UAAU,EAAE,EAAE,KAAK,EAAE,gDAAgD,EAAE;gBACvE,WAAW,EAAE,CAAC;gBACd,UAAU,EAAE,CAAC;aACd;SACF,CAAC,CAAC;QACH,MAAM,KAAK,GAAG,qBAAqB,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE,CAAC,CAAC;QACpD,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACxB,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/analyze/__tests__/security-fls-filter.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=security-fls-filter.test.d.ts.map

package/dist/analyze/__tests__/security-fls-filter.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"security-fls-filter.test.d.ts","sourceRoot":"","sources":["../../../src/analyze/__tests__/security-fls-filter.test.ts"],"names":[],"mappings":""}

package/dist/analyze/__tests__/security-fls-filter.test.js

@@ -0,0 +1,23 @@
+import { describe, expect, it } from "vitest";
+import { isFlsRelevantField } from "../security.js";
+describe("isFlsRelevantField", () => {
+    it("keeps custom + standard non-system fields on real objects", () => {
+        expect(isFlsRelevantField("CustomField:Account.Tier__c")).toBe(true);
+        expect(isFlsRelevantField("CustomField:Order.CustomThing__c")).toBe(true);
+        expect(isFlsRelevantField("CustomField:Account.Industry")).toBe(true);
+    });
+    it("drops Custom Metadata Type fields", () => {
+        expect(isFlsRelevantField("CustomField:AMS_Bulk_Template__mdt.Is_Active__c")).toBe(false);
+        expect(isFlsRelevantField("CustomField:Foo__mdt.DeveloperName")).toBe(false);
+    });
+    it("drops standard system/audit fields on any object", () => {
+        for (const f of ["Id", "CreatedById", "LastModifiedDate", "SystemModstamp", "OwnerId"]) {
+            expect(isFlsRelevantField(`CustomField:Account.${f}`)).toBe(false);
+        }
+    });
+    it("drops platform-event and big-object fields", () => {
+        expect(isFlsRelevantField("CustomField:MyEvent__e.Payload__c")).toBe(false);
+        expect(isFlsRelevantField("CustomField:MyBig__b.Data__c")).toBe(false);
+    });
+});
+//# sourceMappingURL=security-fls-filter.test.js.map

package/dist/analyze/__tests__/security-fls-filter.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"security-fls-filter.test.js","sourceRoot":"","sources":["../../../src/analyze/__tests__/security-fls-filter.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAC9C,OAAO,EAAE,kBAAkB,EAAE,MAAM,gBAAgB,CAAC;AAEpD,QAAQ,CAAC,oBAAoB,EAAE,GAAG,EAAE;IAClC,EAAE,CAAC,2DAA2D,EAAE,GAAG,EAAE;QACnE,MAAM,CAAC,kBAAkB,CAAC,6BAA6B,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACrE,MAAM,CAAC,kBAAkB,CAAC,kCAAkC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC1E,MAAM,CAAC,kBAAkB,CAAC,8BAA8B,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACxE,CAAC,CAAC,CAAC;IACH,EAAE,CAAC,mCAAmC,EAAE,GAAG,EAAE;QAC3C,MAAM,CAAC,kBAAkB,CAAC,iDAAiD,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC1F,MAAM,CAAC,kBAAkB,CAAC,oCAAoC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC/E,CAAC,CAAC,CAAC;IACH,EAAE,CAAC,kDAAkD,EAAE,GAAG,EAAE;QAC1D,KAAK,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,aAAa,EAAE,kBAAkB,EAAE,gBAAgB,EAAE,SAAS,CAAC,EAAE,CAAC;YACvF,MAAM,CAAC,kBAAkB,CAAC,uBAAuB,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACrE,CAAC;IACH,CAAC,CAAC,CAAC;IACH,EAAE,CAAC,4CAA4C,EAAE,GAAG,EAAE;QACpD,MAAM,CAAC,kBAAkB,CAAC,mCAAmC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC5E,MAAM,CAAC,kBAAkB,CAAC,8BAA8B,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACzE,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/analyze/audit-graph.d.ts

@@ -25,6 +25,16 @@ export interface DanglingEdgeSample {
 export interface AuditResult {
     totalEdges: number;
     danglingCount: number;
+    /** Dangling edges whose dst is a platform built-in that can never have a
+     *  metadata source: standard tabs (`CustomTab:standard-*`) and fields /
+     *  objects of standard-schema entities (no `__c`/`__mdt`/… suffix).
+     *  These are *expected* — the reference data is real and useful (e.g.
+     *  profile tab visibility), the target just isn't org metadata. Included
+     *  in `danglingCount`; broken out so the headline number isn't dominated
+     *  by ~60k standard-tab grants on a vanilla org. */
+    platformRefCount: number;
+    /** danglingCount - platformRefCount: the subset worth investigating. */
+    unexpectedCount: number;
     byRel: Record<string, number>;
     byDstPrefix: Record<string, number>;
     sample: DanglingEdgeSample[];
@@ -35,14 +45,28 @@ export interface AuditOpts {
     /** Hard upper bound on rows scanned per edge table. Default unlimited. */
     scanLimit?: number;
 }
+/** True when a dangling dst names a platform built-in that no extractor can
+ *  ever materialize: standard tabs, or fields/objects of standard-schema
+ *  entities (Incident, Location, Case, …) the org metadata pass doesn't
+ *  enumerate. Custom-suffixed targets are NEVER platform refs — a missing
+ *  `__c` target is a real gap worth surfacing. */
+export declare function isPlatformBuiltinRef(dst: string): boolean;
 export declare function auditDanglingEdges(store: GraphStore, orgIdIn: OrgId | string, opts?: AuditOpts): AuditResult;
 /**
- * Destructive companion to `auditDanglingEdges`: deletes every dangling edge.
+ * Destructive companion to `auditDanglingEdges`: deletes dangling edges.
  * Reserved for the CLI `--delete-dangling --yes` flag; callers must own the
  * authorization decision (we just do the work).
+ *
+ * Platform-builtin references (standard-tab grants, standard-schema field
+ * grants) are KEPT by default — they're real, queryable security data whose
+ * target simply has no metadata source. Pass `includePlatformRefs: true` to
+ * delete those too.
  */
-export declare function deleteDanglingEdges(store: GraphStore, orgIdIn: OrgId | string): {
+export declare function deleteDanglingEdges(store: GraphStore, orgIdIn: OrgId | string, opts?: {
+    includePlatformRefs?: boolean;
+}): {
     deleted: number;
+    keptPlatformRefs: number;
 };
 export type { EdgeFact };
 //# sourceMappingURL=audit-graph.d.ts.map

package/dist/analyze/audit-graph.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"audit-graph.d.ts","sourceRoot":"","sources":["../../src/analyze/audit-graph.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,KAAK,EAAiB,MAAM,6BAA6B,CAAC;AACxE,OAAO,KAAK,EAAE,QAAQ,EAAW,MAAM,oBAAoB,CAAC;AAC5D,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,0BAA0B,CAAC;AAE3D;;;;;;;;;;;;;;;GAeG;AACH,MAAM,WAAW,kBAAkB;IACjC,GAAG,EAAE,MAAM,CAAC;IACZ,GAAG,EAAE,MAAM,CAAC;IACZ,GAAG,EAAE,MAAM,CAAC;CACb;AAED,MAAM,WAAW,WAAW;IAC1B,UAAU,EAAE,MAAM,CAAC;IACnB,aAAa,EAAE,MAAM,CAAC;IACtB,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC9B,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACpC,MAAM,EAAE,kBAAkB,EAAE,CAAC;CAC9B;AAED,MAAM,WAAW,SAAS;IACxB,+DAA+D;IAC/D,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,0EAA0E;IAC1E,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAOD,wBAAgB,kBAAkB,CAChC,KAAK,EAAE,UAAU,EACjB,OAAO,EAAE,KAAK,GAAG,MAAM,EACvB,IAAI,GAAE,SAAc,GACnB,WAAW,CA8Bb;AAED;;;;GAIG;AACH,wBAAgB,mBAAmB,CACjC,KAAK,EAAE,UAAU,EACjB,OAAO,EAAE,KAAK,GAAG,MAAM,GACtB;IAAE,OAAO,EAAE,MAAM,CAAA;CAAE,CAgBrB;AAED,YAAY,EAAE,QAAQ,EAAE,CAAC"}
+{"version":3,"file":"audit-graph.d.ts","sourceRoot":"","sources":["../../src/analyze/audit-graph.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,KAAK,EAAiB,MAAM,6BAA6B,CAAC;AACxE,OAAO,KAAK,EAAE,QAAQ,EAAW,MAAM,oBAAoB,CAAC;AAC5D,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,0BAA0B,CAAC;AAE3D;;;;;;;;;;;;;;;GAeG;AACH,MAAM,WAAW,kBAAkB;IACjC,GAAG,EAAE,MAAM,CAAC;IACZ,GAAG,EAAE,MAAM,CAAC;IACZ,GAAG,EAAE,MAAM,CAAC;CACb;AAED,MAAM,WAAW,WAAW;IAC1B,UAAU,EAAE,MAAM,CAAC;IACnB,aAAa,EAAE,MAAM,CAAC;IACtB;;;;;;wDAMoD;IACpD,gBAAgB,EAAE,MAAM,CAAC;IACzB,wEAAwE;IACxE,eAAe,EAAE,MAAM,CAAC;IACxB,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC9B,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACpC,MAAM,EAAE,kBAAkB,EAAE,CAAC;CAC9B;AAED,MAAM,WAAW,SAAS;IACxB,+DAA+D;IAC/D,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,0EAA0E;IAC1E,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AASD;;;;kDAIkD;AAClD,wBAAgB,oBAAoB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAczD;AAED,wBAAgB,kBAAkB,CAChC,KAAK,EAAE,UAAU,EACjB,OAAO,EAAE,KAAK,GAAG,MAAM,EACvB,IAAI,GAAE,SAAc,GACnB,WAAW,CA2Cb;AAED;;;;;;;;;GASG;AACH,wBAAgB,mBAAmB,CACjC,KAAK,EAAE,UAAU,EACjB,OAAO,EAAE,KAAK,GAAG,MAAM,EACvB,IAAI,GAAE;IAAE,mBAAmB,CAAC,EAAE,OAAO,CAAA;CAAO,GAC3C;IAAE,OAAO,EAAE,MAAM,CAAC;IAAC,gBAAgB,EAAE,MAAM,CAAA;CAAE,CAqB/C;AAED,YAAY,EAAE,QAAQ,EAAE,CAAC"}

package/dist/analyze/audit-graph.js

@@ -3,6 +3,29 @@ function prefix(qname) {
     const idx = qname.indexOf(":");
     return idx > 0 ? qname.slice(0, idx) : "(unlabeled)";
 }
+const CUSTOM_SUFFIX_RE = /__(?:c|e|b|mdt|x|kav)$/i;
+/** True when a dangling dst names a platform built-in that no extractor can
+ *  ever materialize: standard tabs, or fields/objects of standard-schema
+ *  entities (Incident, Location, Case, …) the org metadata pass doesn't
+ *  enumerate. Custom-suffixed targets are NEVER platform refs — a missing
+ *  `__c` target is a real gap worth surfacing. */
+export function isPlatformBuiltinRef(dst) {
+    if (dst.startsWith("CustomTab:standard-"))
+        return true;
+    if (dst.startsWith("CustomField:")) {
+        const rest = dst.slice("CustomField:".length);
+        const dot = rest.indexOf(".");
+        if (dot <= 0)
+            return false;
+        const obj = rest.slice(0, dot);
+        const field = rest.slice(dot + 1);
+        return !CUSTOM_SUFFIX_RE.test(obj) && !CUSTOM_SUFFIX_RE.test(field);
+    }
+    if (dst.startsWith("CustomObject:")) {
+        return !CUSTOM_SUFFIX_RE.test(dst.slice("CustomObject:".length));
+    }
+    return false;
+}
 export function auditDanglingEdges(store, orgIdIn, opts = {}) {
     const orgId = typeof orgIdIn === "string" ? asOrgId(orgIdIn) : orgIdIn;
     // Clamp to ≥0; a negative slice index would silently return a tail of the
@@ -12,12 +35,24 @@ export function auditDanglingEdges(store, orgIdIn, opts = {}) {
     const dangling = store.listDanglingEdges(orgId, opts.scanLimit);
     const byRel = {};
     const byDstPrefix = {};
+    let platformRefCount = 0;
     for (const e of dangling) {
         byRel[e.relType] = (byRel[e.relType] ?? 0) + 1;
-        const p = prefix(String(e.dstQualifiedName));
+        const dst = String(e.dstQualifiedName);
+        const p = prefix(dst);
         byDstPrefix[p] = (byDstPrefix[p] ?? 0) + 1;
+        if (isPlatformBuiltinRef(dst))
+            platformRefCount += 1;
     }
-    const sample = dangling.slice(0, sampleSize).map((e) => ({
+    // Sample the *unexpected* dangling edges first — those are the ones a
+    // user can act on; platform refs only pad the sample once the unexpected
+    // set is smaller than sampleSize.
+    const unexpectedFirst = [...dangling].sort((a, b) => {
+        const ap = isPlatformBuiltinRef(String(a.dstQualifiedName)) ? 1 : 0;
+        const bp = isPlatformBuiltinRef(String(b.dstQualifiedName)) ? 1 : 0;
+        return ap - bp;
+    });
+    const sample = unexpectedFirst.slice(0, sampleSize).map((e) => ({
         src: String(e.srcQualifiedName),
         rel: String(e.relType),
         dst: String(e.dstQualifiedName),
@@ -25,26 +60,38 @@ export function auditDanglingEdges(store, orgIdIn, opts = {}) {
     return {
         totalEdges,
         danglingCount: dangling.length,
+        platformRefCount,
+        unexpectedCount: dangling.length - platformRefCount,
         byRel,
         byDstPrefix,
         sample,
     };
 }
 /**
- * Destructive companion to `auditDanglingEdges`: deletes every dangling edge.
+ * Destructive companion to `auditDanglingEdges`: deletes dangling edges.
  * Reserved for the CLI `--delete-dangling --yes` flag; callers must own the
  * authorization decision (we just do the work).
+ *
+ * Platform-builtin references (standard-tab grants, standard-schema field
+ * grants) are KEPT by default — they're real, queryable security data whose
+ * target simply has no metadata source. Pass `includePlatformRefs: true` to
+ * delete those too.
  */
-export function deleteDanglingEdges(store, orgIdIn) {
+export function deleteDanglingEdges(store, orgIdIn, opts = {}) {
     const orgId = typeof orgIdIn === "string" ? asOrgId(orgIdIn) : orgIdIn;
     const dangling = store.listDanglingEdges(orgId);
     let deleted = 0;
+    let keptPlatformRefs = 0;
     store.transaction(() => {
         for (const e of dangling) {
+            if (!opts.includePlatformRefs && isPlatformBuiltinRef(String(e.dstQualifiedName))) {
+                keptPlatformRefs += 1;
+                continue;
+            }
             store.deleteEdge(orgId, e.srcQualifiedName, e.dstQualifiedName, e.relType);
             deleted += 1;
         }
     });
-    return { deleted };
+    return { deleted, keptPlatformRefs };
 }
 //# sourceMappingURL=audit-graph.js.map

package/dist/analyze/audit-graph.js.map

@@ -1 +1 @@
-{"version":3,"file":"audit-graph.js","sourceRoot":"","sources":["../../src/analyze/audit-graph.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,6BAA6B,CAAC;AA0CtD,SAAS,MAAM,CAAC,KAAa;IAC3B,MAAM,GAAG,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAC/B,OAAO,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC;AACvD,CAAC;AAED,MAAM,UAAU,kBAAkB,CAChC,KAAiB,EACjB,OAAuB,EACvB,OAAkB,EAAE;IAEpB,MAAM,KAAK,GAAG,OAAO,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC;IACvE,0EAA0E;IAC1E,8CAA8C;IAC9C,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,UAAU,IAAI,EAAE,CAAC,CAAC;IAEtD,MAAM,UAAU,GAAG,KAAK,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;IAC3C,MAAM,QAAQ,GAAG,KAAK,CAAC,iBAAiB,CAAC,KAAK,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;IAEhE,MAAM,KAAK,GAA2B,EAAE,CAAC;IACzC,MAAM,WAAW,GAA2B,EAAE,CAAC;IAC/C,KAAK,MAAM,CAAC,IAAI,QAAQ,EAAE,CAAC;QACzB,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;QAC/C,MAAM,CAAC,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC;QAC7C,WAAW,CAAC,CAAC,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;IAC7C,CAAC;IAED,MAAM,MAAM,GAAyB,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,UAAU,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QAC7E,GAAG,EAAE,MAAM,CAAC,CAAC,CAAC,gBAAgB,CAAC;QAC/B,GAAG,EAAE,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC;QACtB,GAAG,EAAE,MAAM,CAAC,CAAC,CAAC,gBAAgB,CAAC;KAChC,CAAC,CAAC,CAAC;IAEJ,OAAO;QACL,UAAU;QACV,aAAa,EAAE,QAAQ,CAAC,MAAM;QAC9B,KAAK;QACL,WAAW;QACX,MAAM;KACP,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,mBAAmB,CACjC,KAAiB,EACjB,OAAuB;IAEvB,MAAM,KAAK,GAAG,OAAO,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC;IACvE,MAAM,QAAQ,GAAG,KAAK,CAAC,iBAAiB,CAAC,KAAK,CAAC,CAAC;IAChD,IAAI,OAAO,GAAG,CAAC,CAAC;IAChB,KAAK,CAAC,WAAW,CAAC,GAAG,EAAE;QACrB,KAAK,MAAM,CAAC,IAAI,QAAQ,EAAE,CAAC;YACzB,KAAK,CAAC,UAAU,CACd,KAAK,EACL,CAAC,CAAC,gBAAiC,EACnC,CAAC,CAAC,gBAAiC,EACnC,CAAC,CAAC,OAAkB,CACrB,CAAC;YACF,OAAO,IAAI,CAAC,CAAC;QACf,CAAC;IACH,CAAC,CAAC,CAAC;IACH,OAAO,EAAE,OAAO,EAAE,CAAC;AACrB,CAAC"}
+{"version":3,"file":"audit-graph.js","sourceRoot":"","sources":["../../src/analyze/audit-graph.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,6BAA6B,CAAC;AAoDtD,SAAS,MAAM,CAAC,KAAa;IAC3B,MAAM,GAAG,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAC/B,OAAO,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC;AACvD,CAAC;AAED,MAAM,gBAAgB,GAAG,yBAAyB,CAAC;AAEnD;;;;kDAIkD;AAClD,MAAM,UAAU,oBAAoB,CAAC,GAAW;IAC9C,IAAI,GAAG,CAAC,UAAU,CAAC,qBAAqB,CAAC;QAAE,OAAO,IAAI,CAAC;IACvD,IAAI,GAAG,CAAC,UAAU,CAAC,cAAc,CAAC,EAAE,CAAC;QACnC,MAAM,IAAI,GAAG,GAAG,CAAC,KAAK,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC;QAC9C,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QAC9B,IAAI,GAAG,IAAI,CAAC;YAAE,OAAO,KAAK,CAAC;QAC3B,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;QAC/B,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC;QAClC,OAAO,CAAC,gBAAgB,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACtE,CAAC;IACD,IAAI,GAAG,CAAC,UAAU,CAAC,eAAe,CAAC,EAAE,CAAC;QACpC,OAAO,CAAC,gBAAgB,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC,CAAC;IACnE,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,UAAU,kBAAkB,CAChC,KAAiB,EACjB,OAAuB,EACvB,OAAkB,EAAE;IAEpB,MAAM,KAAK,GAAG,OAAO,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC;IACvE,0EAA0E;IAC1E,8CAA8C;IAC9C,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,UAAU,IAAI,EAAE,CAAC,CAAC;IAEtD,MAAM,UAAU,GAAG,KAAK,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;IAC3C,MAAM,QAAQ,GAAG,KAAK,CAAC,iBAAiB,CAAC,KAAK,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;IAEhE,MAAM,KAAK,GAA2B,EAAE,CAAC;IACzC,MAAM,WAAW,GAA2B,EAAE,CAAC;IAC/C,IAAI,gBAAgB,GAAG,CAAC,CAAC;IACzB,KAAK,MAAM,CAAC,IAAI,QAAQ,EAAE,CAAC;QACzB,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;QAC/C,MAAM,GAAG,GAAG,MAAM,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC;QACvC,MAAM,CAAC,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;QACtB,WAAW,CAAC,CAAC,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;QAC3C,IAAI,oBAAoB,CAAC,GAAG,CAAC;YAAE,gBAAgB,IAAI,CAAC,CAAC;IACvD,CAAC;IAED,sEAAsE;IACtE,yEAAyE;IACzE,kCAAkC;IAClC,MAAM,eAAe,GAAG,CAAC,GAAG,QAAQ,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE;QAClD,MAAM,EAAE,GAAG,oBAAoB,CAAC,MAAM,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACpE,MAAM,EAAE,GAAG,oBAAoB,CAAC,MAAM,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACpE,OAAO,EAAE,GAAG,EAAE,CAAC;IACjB,CAAC,CAAC,CAAC;IACH,MAAM,MAAM,GAAyB,eAAe,CAAC,KAAK,CAAC,CAAC,EAAE,UAAU,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QACpF,GAAG,EAAE,MAAM,CAAC,CAAC,CAAC,gBAAgB,CAAC;QAC/B,GAAG,EAAE,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC;QACtB,GAAG,EAAE,MAAM,CAAC,CAAC,CAAC,gBAAgB,CAAC;KAChC,CAAC,CAAC,CAAC;IAEJ,OAAO;QACL,UAAU;QACV,aAAa,EAAE,QAAQ,CAAC,MAAM;QAC9B,gBAAgB;QAChB,eAAe,EAAE,QAAQ,CAAC,MAAM,GAAG,gBAAgB;QACnD,KAAK;QACL,WAAW;QACX,MAAM;KACP,CAAC;AACJ,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,mBAAmB,CACjC,KAAiB,EACjB,OAAuB,EACvB,OAA0C,EAAE;IAE5C,MAAM,KAAK,GAAG,OAAO,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC;IACvE,MAAM,QAAQ,GAAG,KAAK,CAAC,iBAAiB,CAAC,KAAK,CAAC,CAAC;IAChD,IAAI,OAAO,GAAG,CAAC,CAAC;IAChB,IAAI,gBAAgB,GAAG,CAAC,CAAC;IACzB,KAAK,CAAC,WAAW,CAAC,GAAG,EAAE;QACrB,KAAK,MAAM,CAAC,IAAI,QAAQ,EAAE,CAAC;YACzB,IAAI,CAAC,IAAI,CAAC,mBAAmB,IAAI,oBAAoB,CAAC,MAAM,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,EAAE,CAAC;gBAClF,gBAAgB,IAAI,CAAC,CAAC;gBACtB,SAAS;YACX,CAAC;YACD,KAAK,CAAC,UAAU,CACd,KAAK,EACL,CAAC,CAAC,gBAAiC,EACnC,CAAC,CAAC,gBAAiC,EACnC,CAAC,CAAC,OAAkB,CACrB,CAAC;YACF,OAAO,IAAI,CAAC,CAAC;QACf,CAAC;IACH,CAAC,CAAC,CAAC;IACH,OAAO,EAAE,OAAO,EAAE,gBAAgB,EAAE,CAAC;AACvC,CAAC"}

package/dist/analyze/dependencies.d.ts

@@ -1,5 +1,5 @@
 import type { OrgId, QualifiedName } from "@ryanstark24/sfgraph-shared";
 import type { GraphStore } from "../storage/interfaces.js";
-import { type TraversalResult } from "./dependents.js";
-export declare function findDependencies(store: GraphStore, orgId: OrgId, qname: QualifiedName, depth?: number): TraversalResult;
+import { type TraversalOpts, type TraversalResult } from "./dependents.js";
+export declare function findDependencies(store: GraphStore, orgId: OrgId, qname: QualifiedName, depth?: number, opts?: TraversalOpts): TraversalResult;
 //# sourceMappingURL=dependencies.d.ts.map

package/dist/analyze/dependencies.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"dependencies.d.ts","sourceRoot":"","sources":["../../src/analyze/dependencies.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,KAAK,EAAE,aAAa,EAAE,MAAM,6BAA6B,CAAC;AAExE,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,0BAA0B,CAAC;AAC3D,OAAO,EAA8B,KAAK,eAAe,EAAE,MAAM,iBAAiB,CAAC;AASnF,wBAAgB,gBAAgB,CAC9B,KAAK,EAAE,UAAU,EACjB,KAAK,EAAE,KAAK,EACZ,KAAK,EAAE,aAAa,EACpB,KAAK,SAAI,GACR,eAAe,CA6BjB"}
+{"version":3,"file":"dependencies.d.ts","sourceRoot":"","sources":["../../src/analyze/dependencies.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,KAAK,EAAE,aAAa,EAAE,MAAM,6BAA6B,CAAC;AAExE,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,0BAA0B,CAAC;AAC3D,OAAO,EAEL,KAAK,aAAa,EAClB,KAAK,eAAe,EACrB,MAAM,iBAAiB,CAAC;AAUzB,wBAAgB,gBAAgB,CAC9B,KAAK,EAAE,UAAU,EACjB,KAAK,EAAE,KAAK,EACZ,KAAK,EAAE,aAAa,EACpB,KAAK,SAAI,EACT,IAAI,GAAE,aAAkB,GACvB,eAAe,CAkCjB"}