@securecode-ai/mcp 0.5.5 → 0.5.6

package/dist/project-map/findTests.js

@@ -0,0 +1,236 @@
+"use strict";
+/**
+ * Test discovery — finds test files that exercise a source file or symbol.
+ *
+ * Two strategies:
+ *   1. Naming convention: derive candidate test file paths from the source
+ *      file (src/foo.ts → tests/foo.test.ts, src/foo.test.ts, etc.)
+ *   2. Symbol reference: if a symbol name is provided, search all test files
+ *      in the workspace for references to that symbol.
+ *
+ * Returns ranked results with match type and confidence.
+ *
+ * Security:
+ *   - All paths workspace-confined via resolveWorkspacePath
+ *   - Output truncated to 16KB
+ *   - No file contents returned — only paths and matched lines
+ */
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.findTests = findTests;
+const fs = __importStar(require("fs"));
+const path = __importStar(require("path"));
+const files_1 = require("../utils/files");
+const searchCode_1 = require("../utils/searchCode");
+const MAX_RESULTS = 30;
+const MAX_PREVIEW_LENGTH = 120;
+function getBaseName(filePath) {
+    const ext = path.extname(filePath);
+    return path.basename(filePath, ext);
+}
+function getExt(filePath) {
+    return path.extname(filePath).toLowerCase();
+}
+function isTestFile(fileName) {
+    const lower = fileName.toLowerCase();
+    return (lower.endsWith('.test.ts') ||
+        lower.endsWith('.test.tsx') ||
+        lower.endsWith('.test.js') ||
+        lower.endsWith('.test.jsx') ||
+        lower.endsWith('.test.mjs') ||
+        lower.endsWith('.test.cjs') ||
+        lower.endsWith('.spec.ts') ||
+        lower.endsWith('.spec.tsx') ||
+        lower.endsWith('.spec.js') ||
+        lower.endsWith('.spec.jsx') ||
+        lower.endsWith('.spec.mjs') ||
+        lower.endsWith('.spec.cjs') ||
+        lower.startsWith('test_') && lower.endsWith('.py') ||
+        lower.endsWith('_test.py'));
+}
+function deriveTestCandidates(filePath) {
+    const ext = getExt(filePath);
+    const baseName = getBaseName(filePath);
+    const dir = path.dirname(filePath);
+    const candidates = [];
+    if (ext === '.py') {
+        const pyTestName = `test_${baseName}.py`;
+        const dirs = ['tests', 'test', dir, 'src', ''];
+        for (const d of dirs) {
+            candidates.push(d ? path.join(d, pyTestName) : pyTestName);
+        }
+        candidates.push(path.join(dir, `test_${baseName}.py`));
+        return candidates;
+    }
+    const tsExts = ['.ts', '.tsx', '.js', '.jsx', '.mjs', '.cjs'];
+    const testDirs = ['tests', 'test', '__tests__', '__test__', 'spec', ''];
+    const sameDir = dir;
+    for (const testExt of tsExts) {
+        for (const suffix of ['.test', '.spec']) {
+            for (const d of testDirs) {
+                candidates.push(d ? path.join(d, baseName + suffix + testExt) : baseName + suffix + testExt);
+            }
+            candidates.push(path.join(sameDir, baseName + suffix + testExt));
+        }
+    }
+    return candidates;
+}
+function findTestsByNaming(workspaceRoot, filePath) {
+    const candidates = deriveTestCandidates(filePath);
+    const results = [];
+    const seen = new Set();
+    for (const candidate of candidates) {
+        try {
+            const abs = (0, files_1.resolveWorkspacePath)(workspaceRoot, candidate);
+            if (fs.existsSync(abs)) {
+                const rel = path.relative(workspaceRoot, abs).replace(/\\/g, '/');
+                if (seen.has(rel))
+                    continue;
+                seen.add(rel);
+                results.push({
+                    filePath: rel,
+                    matchType: 'naming',
+                    confidence: 0.9,
+                });
+            }
+        }
+        catch {
+            // path outside workspace — skip
+        }
+    }
+    return results;
+}
+async function findTestsBySymbol(workspaceRoot, symbol, existing) {
+    const results = [];
+    const escaped = symbol.replace(/[.*+?^${}()|[\]\\]/g, '\\$&');
+    const pattern = `\\b${escaped}\\b`;
+    const testGlobs = [
+        '*.test.ts', '*.test.tsx', '*.test.js', '*.test.jsx',
+        '*.test.mjs', '*.test.cjs',
+        '*.spec.ts', '*.spec.tsx', '*.spec.js', '*.spec.jsx',
+        '*.spec.mjs', '*.spec.cjs',
+        'test_*.py', '*_test.py',
+    ];
+    const byFile = new Map();
+    for (const glob of testGlobs) {
+        try {
+            const result = await (0, searchCode_1.searchCode)(workspaceRoot, pattern, glob);
+            for (const hit of result.hits || []) {
+                const fileName = path.basename(hit.path);
+                if (!isTestFile(fileName))
+                    continue;
+                const existing_ = byFile.get(hit.path);
+                if (existing_) {
+                    if (existing_.lines.length < 5) {
+                        existing_.lines.push(hit.line);
+                        existing_.previews.push(hit.text.slice(0, MAX_PREVIEW_LENGTH));
+                    }
+                }
+                else {
+                    byFile.set(hit.path, {
+                        lines: [hit.line],
+                        previews: [hit.text.slice(0, MAX_PREVIEW_LENGTH)],
+                    });
+                }
+            }
+        }
+        catch {
+            // search failed for this glob — continue
+        }
+    }
+    for (const [filePath, { lines, previews }] of byFile) {
+        if (existing.has(filePath))
+            continue;
+        results.push({
+            filePath,
+            matchType: 'symbol',
+            confidence: 0.7,
+            matchedLines: lines,
+            matchedPreviews: previews,
+        });
+    }
+    return results;
+}
+async function findTests(workspaceRoot, filePath, symbol) {
+    try {
+        (0, files_1.resolveWorkspacePath)(workspaceRoot, filePath);
+    }
+    catch (e) {
+        return `Error: ${e.message}`;
+    }
+    const parts = [];
+    if (!fs.existsSync((0, files_1.resolveWorkspacePath)(workspaceRoot, filePath))) {
+        return `Source file not found: ${filePath}`;
+    }
+    const namingResults = findTestsByNaming(workspaceRoot, filePath);
+    const namingPaths = new Set(namingResults.map(r => r.filePath));
+    let symbolResults = [];
+    if (symbol) {
+        symbolResults = await findTestsBySymbol(workspaceRoot, symbol, namingPaths);
+    }
+    const allResults = [...namingResults, ...symbolResults].slice(0, MAX_RESULTS);
+    if (allResults.length === 0) {
+        const symMsg = symbol ? ` referencing "${symbol}"` : '';
+        return `No test files found for ${filePath}${symMsg}.`;
+    }
+    const symMsg = symbol ? ` referencing "${symbol}"` : '';
+    parts.push(`Tests for ${filePath}${symMsg} (${allResults.length} found):`);
+    parts.push('');
+    const naming = allResults.filter(r => r.matchType === 'naming');
+    const bySymbol = allResults.filter(r => r.matchType === 'symbol');
+    if (naming.length > 0) {
+        parts.push('By naming convention:');
+        for (const r of naming) {
+            parts.push(`  ${r.filePath} (confidence ${r.confidence})`);
+        }
+        parts.push('');
+    }
+    if (bySymbol.length > 0) {
+        parts.push(`By symbol reference "${symbol}":`);
+        for (const r of bySymbol) {
+            const lines = r.matchedLines || [];
+            const previews = r.matchedPreviews || [];
+            const lineSummary = lines.length === 1
+                ? `:${lines[0]}`
+                : `:${lines[0]} (+${lines.length - 1} more)`;
+            parts.push(`  ${r.filePath}${lineSummary} (confidence ${r.confidence})`);
+            for (let i = 0; i < Math.min(lines.length, 3); i++) {
+                parts.push(`    L${lines[i]}: ${previews[i]}`);
+            }
+        }
+    }
+    return parts.join('\n');
+}
+//# sourceMappingURL=findTests.js.map

package/dist/project-map/findTests.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"findTests.js","sourceRoot":"","sources":["../../src/project-map/findTests.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;GAeG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AA2KH,8BA+DC;AAxOD,uCAAyB;AACzB,2CAA6B;AAC7B,0CAAsD;AACtD,oDAAiD;AAejD,MAAM,WAAW,GAAG,EAAE,CAAC;AACvB,MAAM,kBAAkB,GAAG,GAAG,CAAC;AAE/B,SAAS,WAAW,CAAC,QAAgB;IACjC,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;IACnC,OAAO,IAAI,CAAC,QAAQ,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;AACxC,CAAC;AAED,SAAS,MAAM,CAAC,QAAgB;IAC5B,OAAO,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,WAAW,EAAE,CAAC;AAChD,CAAC;AAED,SAAS,UAAU,CAAC,QAAgB;IAChC,MAAM,KAAK,GAAG,QAAQ,CAAC,WAAW,EAAE,CAAC;IACrC,OAAO,CACH,KAAK,CAAC,QAAQ,CAAC,UAAU,CAAC;QAC1B,KAAK,CAAC,QAAQ,CAAC,WAAW,CAAC;QAC3B,KAAK,CAAC,QAAQ,CAAC,UAAU,CAAC;QAC1B,KAAK,CAAC,QAAQ,CAAC,WAAW,CAAC;QAC3B,KAAK,CAAC,QAAQ,CAAC,WAAW,CAAC;QAC3B,KAAK,CAAC,QAAQ,CAAC,WAAW,CAAC;QAC3B,KAAK,CAAC,QAAQ,CAAC,UAAU,CAAC;QAC1B,KAAK,CAAC,QAAQ,CAAC,WAAW,CAAC;QAC3B,KAAK,CAAC,QAAQ,CAAC,UAAU,CAAC;QAC1B,KAAK,CAAC,QAAQ,CAAC,WAAW,CAAC;QAC3B,KAAK,CAAC,QAAQ,CAAC,WAAW,CAAC;QAC3B,KAAK,CAAC,QAAQ,CAAC,WAAW,CAAC;QAC3B,KAAK,CAAC,UAAU,CAAC,OAAO,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC;QAClD,KAAK,CAAC,QAAQ,CAAC,UAAU,CAAC,CAC7B,CAAC;AACN,CAAC;AAED,SAAS,oBAAoB,CAAC,QAAgB;IAC1C,MAAM,GAAG,GAAG,MAAM,CAAC,QAAQ,CAAC,CAAC;IAC7B,MAAM,QAAQ,GAAG,WAAW,CAAC,QAAQ,CAAC,CAAC;IACvC,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;IACnC,MAAM,UAAU,GAAa,EAAE,CAAC;IAEhC,IAAI,GAAG,KAAK,KAAK,EAAE,CAAC;QAChB,MAAM,UAAU,GAAG,QAAQ,QAAQ,KAAK,CAAC;QACzC,MAAM,IAAI,GAAG,CAAC,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC;QAC/C,KAAK,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC;YACnB,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,EAAE,UAAU,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC;QAC/D,CAAC;QACD,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,QAAQ,QAAQ,KAAK,CAAC,CAAC,CAAC;QACvD,OAAO,UAAU,CAAC;IACtB,CAAC;IAED,MAAM,MAAM,GAAG,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;IAC9D,MAAM,QAAQ,GAAG,CAAC,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,EAAE,EAAE,CAAC,CAAC;IACxE,MAAM,OAAO,GAAG,GAAG,CAAC;IAEpB,KAAK,MAAM,OAAO,IAAI,MAAM,EAAE,CAAC;QAC3B,KAAK,MAAM,MAAM,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,EAAE,CAAC;YACtC,KAAK,MAAM,CAAC,IAAI,QAAQ,EAAE,CAAC;gBACvB,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,EAAE,QAAQ,GAAG,MAAM,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC,QAAQ,GAAG,MAAM,GAAG,OAAO,CAAC,CAAC;YACjG,CAAC;YACD,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,QAAQ,GAAG,MAAM,GAAG,OAAO,CAAC,CAAC,CAAC;QACrE,CAAC;IACL,CAAC;IAED,OAAO,UAAU,CAAC;AACtB,CAAC;AAED,SAAS,iBAAiB,CACtB,aAAqB,EACrB,QAAgB;IAEhB,MAAM,UAAU,GAAG,oBAAoB,CAAC,QAAQ,CAAC,CAAC;IAClD,MAAM,OAAO,GAAkB,EAAE,CAAC;IAClC,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAE/B,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;QACjC,IAAI,CAAC;YACD,MAAM,GAAG,GAAG,IAAA,4BAAoB,EAAC,aAAa,EAAE,SAAS,CAAC,CAAC;YAC3D,IAAI,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;gBACrB,MAAM,GAAG,GAAG,IAAI,CAAC,QAAQ,CAAC,aAAa,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;gBAClE,IAAI,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;oBAAE,SAAS;gBAC5B,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;gBACd,OAAO,CAAC,IAAI,CAAC;oBACT,QAAQ,EAAE,GAAG;oBACb,SAAS,EAAE,QAAQ;oBACnB,UAAU,EAAE,GAAG;iBAClB,CAAC,CAAC;YACP,CAAC;QACL,CAAC;QAAC,MAAM,CAAC;YACL,gCAAgC;QACpC,CAAC;IACL,CAAC;IAED,OAAO,OAAO,CAAC;AACnB,CAAC;AAED,KAAK,UAAU,iBAAiB,CAC5B,aAAqB,EACrB,MAAc,EACd,QAAqB;IAErB,MAAM,OAAO,GAAkB,EAAE,CAAC;IAClC,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,qBAAqB,EAAE,MAAM,CAAC,CAAC;IAC9D,MAAM,OAAO,GAAG,MAAM,OAAO,KAAK,CAAC;IAEnC,MAAM,SAAS,GAAG;QACd,WAAW,EAAE,YAAY,EAAE,WAAW,EAAE,YAAY;QACpD,YAAY,EAAE,YAAY;QAC1B,WAAW,EAAE,YAAY,EAAE,WAAW,EAAE,YAAY;QACpD,YAAY,EAAE,YAAY;QAC1B,WAAW,EAAE,WAAW;KAC3B,CAAC;IAEF,MAAM,MAAM,GAAG,IAAI,GAAG,EAAmD,CAAC;IAE1E,KAAK,MAAM,IAAI,IAAI,SAAS,EAAE,CAAC;QAC3B,IAAI,CAAC;YACD,MAAM,MAAM,GAAG,MAAM,IAAA,uBAAU,EAAC,aAAa,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC;YAC9D,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,IAAI,EAAE,EAAE,CAAC;gBAClC,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;gBACzC,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC;oBAAE,SAAS;gBAEpC,MAAM,SAAS,GAAG,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;gBACvC,IAAI,SAAS,EAAE,CAAC;oBACZ,IAAI,SAAS,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;wBAC7B,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;wBAC/B,SAAS,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,kBAAkB,CAAC,CAAC,CAAC;oBACnE,CAAC;gBACL,CAAC;qBAAM,CAAC;oBACJ,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE;wBACjB,KAAK,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC;wBACjB,QAAQ,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,kBAAkB,CAAC,CAAC;qBACpD,CAAC,CAAC;gBACP,CAAC;YACL,CAAC;QACL,CAAC;QAAC,MAAM,CAAC;YACL,yCAAyC;QAC7C,CAAC;IACL,CAAC;IAED,KAAK,MAAM,CAAC,QAAQ,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,IAAI,MAAM,EAAE,CAAC;QACnD,IAAI,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC;YAAE,SAAS;QACrC,OAAO,CAAC,IAAI,CAAC;YACT,QAAQ;YACR,SAAS,EAAE,QAAQ;YACnB,UAAU,EAAE,GAAG;YACf,YAAY,EAAE,KAAK;YACnB,eAAe,EAAE,QAAQ;SAC5B,CAAC,CAAC;IACP,CAAC;IAED,OAAO,OAAO,CAAC;AACnB,CAAC;AAEM,KAAK,UAAU,SAAS,CAC3B,aAAqB,EACrB,QAAgB,EAChB,MAAe;IAEf,IAAI,CAAC;QACD,IAAA,4BAAoB,EAAC,aAAa,EAAE,QAAQ,CAAC,CAAC;IAClD,CAAC;IAAC,OAAO,CAAM,EAAE,CAAC;QACd,OAAO,UAAU,CAAC,CAAC,OAAO,EAAE,CAAC;IACjC,CAAC;IAED,MAAM,KAAK,GAAa,EAAE,CAAC;IAE3B,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,IAAA,4BAAoB,EAAC,aAAa,EAAE,QAAQ,CAAC,CAAC,EAAE,CAAC;QAChE,OAAO,0BAA0B,QAAQ,EAAE,CAAC;IAChD,CAAC;IAED,MAAM,aAAa,GAAG,iBAAiB,CAAC,aAAa,EAAE,QAAQ,CAAC,CAAC;IACjE,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC;IAEhE,IAAI,aAAa,GAAkB,EAAE,CAAC;IACtC,IAAI,MAAM,EAAE,CAAC;QACT,aAAa,GAAG,MAAM,iBAAiB,CAAC,aAAa,EAAE,MAAM,EAAE,WAAW,CAAC,CAAC;IAChF,CAAC;IAED,MAAM,UAAU,GAAG,CAAC,GAAG,aAAa,EAAE,GAAG,aAAa,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,WAAW,CAAC,CAAC;IAE9E,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC1B,MAAM,MAAM,GAAG,MAAM,CAAC,CAAC,CAAC,iBAAiB,MAAM,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;QACxD,OAAO,2BAA2B,QAAQ,GAAG,MAAM,GAAG,CAAC;IAC3D,CAAC;IAED,MAAM,MAAM,GAAG,MAAM,CAAC,CAAC,CAAC,iBAAiB,MAAM,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;IACxD,KAAK,CAAC,IAAI,CAAC,aAAa,QAAQ,GAAG,MAAM,KAAK,UAAU,CAAC,MAAM,UAAU,CAAC,CAAC;IAC3E,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAEf,MAAM,MAAM,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,KAAK,QAAQ,CAAC,CAAC;IAChE,MAAM,QAAQ,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,KAAK,QAAQ,CAAC,CAAC;IAElE,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACpB,KAAK,CAAC,IAAI,CAAC,uBAAuB,CAAC,CAAC;QACpC,KAAK,MAAM,CAAC,IAAI,MAAM,EAAE,CAAC;YACrB,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,QAAQ,gBAAgB,CAAC,CAAC,UAAU,GAAG,CAAC,CAAC;QAC/D,CAAC;QACD,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACnB,CAAC;IAED,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACtB,KAAK,CAAC,IAAI,CAAC,wBAAwB,MAAM,IAAI,CAAC,CAAC;QAC/C,KAAK,MAAM,CAAC,IAAI,QAAQ,EAAE,CAAC;YACvB,MAAM,KAAK,GAAG,CAAC,CAAC,YAAY,IAAI,EAAE,CAAC;YACnC,MAAM,QAAQ,GAAG,CAAC,CAAC,eAAe,IAAI,EAAE,CAAC;YACzC,MAAM,WAAW,GAAG,KAAK,CAAC,MAAM,KAAK,CAAC;gBAClC,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,EAAE;gBAChB,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,MAAM,KAAK,CAAC,MAAM,GAAG,CAAC,QAAQ,CAAC;YACjD,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,QAAQ,GAAG,WAAW,gBAAgB,CAAC,CAAC,UAAU,GAAG,CAAC,CAAC;YACzE,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;gBACjD,KAAK,CAAC,IAAI,CAAC,QAAQ,KAAK,CAAC,CAAC,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;YACnD,CAAC;QACL,CAAC;IACL,CAAC;IAED,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC5B,CAAC"}

package/dist/project-map/handlerInventory.d.ts

@@ -0,0 +1,112 @@
+/**
+ * Handler inventory — discovers and tracks HTTP handlers, RPC methods,
+ * auth operations, and event handlers in a target file.
+ *
+ * A handler is "reviewed" when its source range was delivered AND its
+ * relevant authentication/authorization path was inspected. A handler
+ * is NOT reviewed because it appeared in a function map or search result.
+ */
+import type { LineRange } from '../attack/investigationState';
+export type HandlerKind = 'http-handler' | 'rpc-method' | 'auth-operation' | 'event-handler';
+export interface HandlerInventoryItem {
+    id: string;
+    filePath: string;
+    symbol?: string;
+    range: LineRange;
+    route?: string;
+    method?: string;
+    kind: HandlerKind;
+    securitySensitive: boolean;
+    reviewed: boolean;
+    evidenceRefs: string[];
+}
+export declare class HandlerInventory {
+    private handlers;
+    /**
+     * Add a discovered handler to the inventory.
+     */
+    add(input: Omit<HandlerInventoryItem, 'id' | 'reviewed' | 'evidenceRefs'>): HandlerInventoryItem;
+    /**
+     * Add handlers from discovered endpoints (HTTP route handlers).
+     */
+    addFromEndpoints(endpoints: {
+        method: string;
+        path: string;
+        file: string;
+        line: number;
+    }[], filePath: string): void;
+    /**
+     * Add RPC methods from search results (e.g., WebSocket message handlers).
+     */
+    addRpcMethods(methods: {
+        symbol: string;
+        line: number;
+        filePath: string;
+    }[]): void;
+    /**
+     * Mark a handler as reviewed by linking evidence to it.
+     */
+    addEvidence(handlerId: string, evidenceRef: string): void;
+    /**
+     * Mark a handler as reviewed explicitly (when source range was delivered
+     * AND relevant auth/policy evidence was recorded).
+     */
+    markReviewed(handlerId: string): void;
+    /**
+     * Check if a handler's source range was covered by an actual read.
+     */
+    isRangeCovered(handler: HandlerInventoryItem, coveredRanges: LineRange[]): boolean;
+    /**
+     * Update a handler's reviewed status based on evidence and coverage.
+     */
+    private updateReviewedStatus;
+    /**
+     * Get all handlers in the inventory.
+     */
+    getAll(): HandlerInventoryItem[];
+    /**
+     * Get the number of handlers in the inventory.
+     */
+    size(): number;
+    /**
+     * Get handlers for a specific file.
+     */
+    getForFile(filePath: string): HandlerInventoryItem[];
+    /**
+     * Get all unreviewed handlers.
+     */
+    getUnreviewed(): HandlerInventoryItem[];
+    /**
+     * Get all reviewed handlers.
+     */
+    getReviewed(): HandlerInventoryItem[];
+    /**
+     * Check if all handlers have been reviewed.
+     */
+    allReviewed(): boolean;
+    /**
+     * Get the count of security-sensitive unreviewed handlers.
+     */
+    getUnreviewedSensitiveCount(): number;
+    /**
+     * Get unreviewed handlers sorted by line number for efficient reading.
+     */
+    getUnreviewedSorted(): HandlerInventoryItem[];
+    /**
+     * Get the next unreviewed handler's range, useful for scheduling reads.
+     */
+    getNextUnreviewedRange(): LineRange | null;
+    /**
+     * Snapshot for audit/tracing.
+     */
+    snapshot(): {
+        total: number;
+        reviewed: number;
+        unreviewed: number;
+        sensitive: number;
+    };
+    /**
+     * Clear the inventory (for tests).
+     */
+    clear(): void;
+}

package/dist/project-map/handlerInventory.js

@@ -0,0 +1,184 @@
+"use strict";
+/**
+ * Handler inventory — discovers and tracks HTTP handlers, RPC methods,
+ * auth operations, and event handlers in a target file.
+ *
+ * A handler is "reviewed" when its source range was delivered AND its
+ * relevant authentication/authorization path was inspected. A handler
+ * is NOT reviewed because it appeared in a function map or search result.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.HandlerInventory = void 0;
+let handlerIdCounter = 0;
+class HandlerInventory {
+    handlers = new Map();
+    /**
+     * Add a discovered handler to the inventory.
+     */
+    add(input) {
+        const id = `handler-${++handlerIdCounter}`;
+        const item = {
+            ...input,
+            id,
+            reviewed: false,
+            evidenceRefs: [],
+        };
+        this.handlers.set(id, item);
+        return item;
+    }
+    /**
+     * Add handlers from discovered endpoints (HTTP route handlers).
+     */
+    addFromEndpoints(endpoints, filePath) {
+        for (const ep of endpoints) {
+            const normalizedFile = ep.file.replace(/\\/g, '/').toLowerCase();
+            const targetFile = filePath.replace(/\\/g, '/').toLowerCase();
+            if (normalizedFile !== targetFile && !normalizedFile.includes(targetFile))
+                continue;
+            this.add({
+                filePath: ep.file,
+                symbol: ep.method.toLowerCase(),
+                range: { start: ep.line, end: ep.line },
+                route: ep.path,
+                method: ep.method,
+                kind: 'http-handler',
+                securitySensitive: true,
+            });
+        }
+    }
+    /**
+     * Add RPC methods from search results (e.g., WebSocket message handlers).
+     */
+    addRpcMethods(methods) {
+        for (const m of methods) {
+            this.add({
+                filePath: m.filePath,
+                symbol: m.symbol,
+                range: { start: m.line, end: m.line },
+                kind: 'rpc-method',
+                securitySensitive: true,
+            });
+        }
+    }
+    /**
+     * Mark a handler as reviewed by linking evidence to it.
+     */
+    addEvidence(handlerId, evidenceRef) {
+        const handler = this.handlers.get(handlerId);
+        if (handler && !handler.evidenceRefs.includes(evidenceRef)) {
+            handler.evidenceRefs.push(evidenceRef);
+            this.updateReviewedStatus(handlerId);
+        }
+    }
+    /**
+     * Mark a handler as reviewed explicitly (when source range was delivered
+     * AND relevant auth/policy evidence was recorded).
+     */
+    markReviewed(handlerId) {
+        const handler = this.handlers.get(handlerId);
+        if (handler) {
+            handler.reviewed = true;
+        }
+    }
+    /**
+     * Check if a handler's source range was covered by an actual read.
+     */
+    isRangeCovered(handler, coveredRanges) {
+        return coveredRanges.some(r => r.start <= handler.range.start && r.end >= handler.range.end);
+    }
+    /**
+     * Update a handler's reviewed status based on evidence and coverage.
+     */
+    updateReviewedStatus(handlerId) {
+        const handler = this.handlers.get(handlerId);
+        if (!handler || handler.reviewed)
+            return;
+        // A handler is reviewed when it has at least 2 evidence refs:
+        // typically source-range + policy/guard/flow evidence
+        if (handler.evidenceRefs.length >= 2) {
+            handler.reviewed = true;
+        }
+    }
+    /**
+     * Get all handlers in the inventory.
+     */
+    getAll() {
+        return [...this.handlers.values()];
+    }
+    /**
+     * Get the number of handlers in the inventory.
+     */
+    size() {
+        return this.handlers.size;
+    }
+    /**
+     * Get handlers for a specific file.
+     */
+    getForFile(filePath) {
+        const normalized = filePath.replace(/\\/g, '/').toLowerCase();
+        return [...this.handlers.values()].filter(h => h.filePath.replace(/\\/g, '/').toLowerCase() === normalized);
+    }
+    /**
+     * Get all unreviewed handlers.
+     */
+    getUnreviewed() {
+        return [...this.handlers.values()].filter(h => !h.reviewed);
+    }
+    /**
+     * Get all reviewed handlers.
+     */
+    getReviewed() {
+        return [...this.handlers.values()].filter(h => h.reviewed);
+    }
+    /**
+     * Check if all handlers have been reviewed.
+     */
+    allReviewed() {
+        const all = this.getAll();
+        if (all.length === 0)
+            return true; // No handlers to review
+        return all.every(h => h.reviewed);
+    }
+    /**
+     * Get the count of security-sensitive unreviewed handlers.
+     */
+    getUnreviewedSensitiveCount() {
+        return this.getUnreviewed().filter(h => h.securitySensitive).length;
+    }
+    /**
+     * Get unreviewed handlers sorted by line number for efficient reading.
+     */
+    getUnreviewedSorted() {
+        return this.getUnreviewed().sort((a, b) => a.range.start - b.range.start);
+    }
+    /**
+     * Get the next unreviewed handler's range, useful for scheduling reads.
+     */
+    getNextUnreviewedRange() {
+        const sorted = this.getUnreviewedSorted();
+        if (sorted.length === 0)
+            return null;
+        const first = sorted[0];
+        return first.range;
+    }
+    /**
+     * Snapshot for audit/tracing.
+     */
+    snapshot() {
+        const all = this.getAll();
+        return {
+            total: all.length,
+            reviewed: all.filter(h => h.reviewed).length,
+            unreviewed: all.filter(h => !h.reviewed).length,
+            sensitive: all.filter(h => h.securitySensitive).length,
+        };
+    }
+    /**
+     * Clear the inventory (for tests).
+     */
+    clear() {
+        this.handlers.clear();
+    }
+}
+exports.HandlerInventory = HandlerInventory;
+//# sourceMappingURL=handlerInventory.js.map

package/dist/project-map/handlerInventory.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"handlerInventory.js","sourceRoot":"","sources":["../../src/project-map/handlerInventory.ts"],"names":[],"mappings":";AAAA;;;;;;;GAOG;;;AAmBH,IAAI,gBAAgB,GAAG,CAAC,CAAC;AAEzB,MAAa,gBAAgB;IACjB,QAAQ,GAAG,IAAI,GAAG,EAAgC,CAAC;IAE3D;;OAEG;IACH,GAAG,CAAC,KAAqE;QACrE,MAAM,EAAE,GAAG,WAAW,EAAE,gBAAgB,EAAE,CAAC;QAC3C,MAAM,IAAI,GAAyB;YAC/B,GAAG,KAAK;YACR,EAAE;YACF,QAAQ,EAAE,KAAK;YACf,YAAY,EAAE,EAAE;SACnB,CAAC;QACF,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;QAC5B,OAAO,IAAI,CAAC;IAChB,CAAC;IAED;;OAEG;IACH,gBAAgB,CAAC,SAAyE,EAAE,QAAgB;QACxG,KAAK,MAAM,EAAE,IAAI,SAAS,EAAE,CAAC;YACzB,MAAM,cAAc,GAAG,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,WAAW,EAAE,CAAC;YACjE,MAAM,UAAU,GAAG,QAAQ,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,WAAW,EAAE,CAAC;YAC9D,IAAI,cAAc,KAAK,UAAU,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC,UAAU,CAAC;gBAAE,SAAS;YAEpF,IAAI,CAAC,GAAG,CAAC;gBACL,QAAQ,EAAE,EAAE,CAAC,IAAI;gBACjB,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,WAAW,EAAE;gBAC/B,KAAK,EAAE,EAAE,KAAK,EAAE,EAAE,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE,CAAC,IAAI,EAAE;gBACvC,KAAK,EAAE,EAAE,CAAC,IAAI;gBACd,MAAM,EAAE,EAAE,CAAC,MAAM;gBACjB,IAAI,EAAE,cAAc;gBACpB,iBAAiB,EAAE,IAAI;aAC1B,CAAC,CAAC;QACP,CAAC;IACL,CAAC;IAED;;OAEG;IACH,aAAa,CAAC,OAA6D;QACvE,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;YACtB,IAAI,CAAC,GAAG,CAAC;gBACL,QAAQ,EAAE,CAAC,CAAC,QAAQ;gBACpB,MAAM,EAAE,CAAC,CAAC,MAAM;gBAChB,KAAK,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC,IAAI,EAAE,GAAG,EAAE,CAAC,CAAC,IAAI,EAAE;gBACrC,IAAI,EAAE,YAAY;gBAClB,iBAAiB,EAAE,IAAI;aAC1B,CAAC,CAAC;QACP,CAAC;IACL,CAAC;IAED;;OAEG;IACH,WAAW,CAAC,SAAiB,EAAE,WAAmB;QAC9C,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QAC7C,IAAI,OAAO,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC;YACzD,OAAO,CAAC,YAAY,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;YACvC,IAAI,CAAC,oBAAoB,CAAC,SAAS,CAAC,CAAC;QACzC,CAAC;IACL,CAAC;IAED;;;OAGG;IACH,YAAY,CAAC,SAAiB;QAC1B,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QAC7C,IAAI,OAAO,EAAE,CAAC;YACV,OAAO,CAAC,QAAQ,GAAG,IAAI,CAAC;QAC5B,CAAC;IACL,CAAC;IAED;;OAEG;IACH,cAAc,CAAC,OAA6B,EAAE,aAA0B;QACpE,OAAO,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAC1B,CAAC,CAAC,KAAK,IAAI,OAAO,CAAC,KAAK,CAAC,KAAK,IAAI,CAAC,CAAC,GAAG,IAAI,OAAO,CAAC,KAAK,CAAC,GAAG,CAC/D,CAAC;IACN,CAAC;IAED;;OAEG;IACK,oBAAoB,CAAC,SAAiB;QAC1C,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QAC7C,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,QAAQ;YAAE,OAAO;QAEzC,8DAA8D;QAC9D,sDAAsD;QACtD,IAAI,OAAO,CAAC,YAAY,CAAC,MAAM,IAAI,CAAC,EAAE,CAAC;YACnC,OAAO,CAAC,QAAQ,GAAG,IAAI,CAAC;QAC5B,CAAC;IACL,CAAC;IAED;;OAEG;IACH,MAAM;QACF,OAAO,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;IACvC,CAAC;IAED;;OAEG;IACH,IAAI;QACA,OAAO,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC;IAC9B,CAAC;IAED;;OAEG;IACH,UAAU,CAAC,QAAgB;QACvB,MAAM,UAAU,GAAG,QAAQ,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,WAAW,EAAE,CAAC;QAC9D,OAAO,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAC1C,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,WAAW,EAAE,KAAK,UAAU,CAC9D,CAAC;IACN,CAAC;IAED;;OAEG;IACH,aAAa;QACT,OAAO,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC;IAChE,CAAC;IAED;;OAEG;IACH,WAAW;QACP,OAAO,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC;IAC/D,CAAC;IAED;;OAEG;IACH,WAAW;QACP,MAAM,GAAG,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC;QAC1B,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,IAAI,CAAC,CAAC,wBAAwB;QAC3D,OAAO,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC;IACtC,CAAC;IAED;;OAEG;IACH,2BAA2B;QACvB,OAAO,IAAI,CAAC,aAAa,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,MAAM,CAAC;IACxE,CAAC;IAED;;OAEG;IACH,mBAAmB;QACf,OAAO,IAAI,CAAC,aAAa,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IAC9E,CAAC;IAED;;OAEG;IACH,sBAAsB;QAClB,MAAM,MAAM,GAAG,IAAI,CAAC,mBAAmB,EAAE,CAAC;QAC1C,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,IAAI,CAAC;QACrC,MAAM,KAAK,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC;QACxB,OAAO,KAAK,CAAC,KAAK,CAAC;IACvB,CAAC;IAED;;OAEG;IACH,QAAQ;QACJ,MAAM,GAAG,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC;QAC1B,OAAO;YACH,KAAK,EAAE,GAAG,CAAC,MAAM;YACjB,QAAQ,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,MAAM;YAC5C,UAAU,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,MAAM;YAC/C,SAAS,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,MAAM;SACzD,CAAC;IACN,CAAC;IAED;;OAEG;IACH,KAAK;QACD,IAAI,CAAC,QAAQ,CAAC,KAAK,EAAE,CAAC;IAC1B,CAAC;CACJ;AA7LD,4CA6LC"}

package/dist/project-map/implementationResolver.d.ts

@@ -0,0 +1,43 @@
+/**
+ * Implementation resolver — generic interface-to-implementation redirection.
+ *
+ * When the agent scans an interface, type declaration, or service contract,
+ * the resolver finds the actual implementation files and symbols so the
+ * investigation can continue on real code, not signatures.
+ *
+ * Matching strategies (all generic, no project-specific logic):
+ *   - TypeScript interface → classes that implement it
+ *   - Effect service declaration → live layer implementations
+ *   - Abstract classes → subclasses
+ *   - Exported type → functions returning the type
+ *   - Route contracts → handler registrations
+ *   - Python protocols/abstract classes → implementations (when symbol data supports it)
+ */
+export interface EvidenceLocation {
+    filePath: string;
+    line: number;
+    symbol?: string;
+}
+export interface ImplementationResolution {
+    contractLocations: EvidenceLocation[];
+    implementationLocations: EvidenceLocation[];
+    callSites: EvidenceLocation[];
+    unresolved: boolean;
+    description: string;
+}
+/**
+ * Resolve implementations for a symbol in a contract/interface file.
+ *
+ * This is a generic search — it uses workspace-wide code search to find
+ * patterns that indicate implementation of the given symbol.
+ */
+export declare function resolveImplementation(workspaceRoot: string, filePath: string, symbol: string): Promise<ImplementationResolution>;
+/**
+ * Format an implementation resolution for the agent transcript.
+ */
+export declare function formatImplementationResolution(resolution: ImplementationResolution): string;
+/**
+ * Check if a file looks like a contract/interface/type declaration only
+ * (has no runtime implementation). Generic heuristic, not project-specific.
+ */
+export declare function looksLikeContractOnly(content: string): boolean;