@untangle-code/scanner 0.0.0-stage → 0.1.0

package/dist/language-classifier.js

@@ -0,0 +1,114 @@
+// MVP + Public Beta languages (spec.md §7.2) plus common structural/text
+// formats the scanner needs to tell apart from opaque binaries.
+const EXTENSION_LANGUAGE_MAP = {
+    ts: "typescript",
+    mts: "typescript",
+    cts: "typescript",
+    tsx: "tsx",
+    js: "javascript",
+    mjs: "javascript",
+    cjs: "javascript",
+    jsx: "jsx",
+    py: "python",
+    pyi: "python",
+    pyw: "python",
+    go: "go",
+    java: "java",
+    kt: "kotlin",
+    kts: "kotlin",
+    cs: "csharp",
+    rs: "rust",
+    php: "php",
+    phtml: "php",
+    rb: "ruby",
+    // WP-86: die Parser-Registry fuehrt diese Endungen als Ruby beziehungsweise
+    // PHP und Swift. Fehlten sie hier, meldete der Scanner "unknown" fuer eine
+    // Datei, die der Adapter danach doch tief analysiert — zwei Aussagen ueber
+    // dieselbe Datei, von denen eine falsch ist.
+    rake: "ruby",
+    gemspec: "ruby",
+    swift: "swift",
+    c: "c",
+    h: "c",
+    cpp: "cpp",
+    cc: "cpp",
+    cxx: "cpp",
+    hpp: "cpp",
+    hh: "cpp",
+    hxx: "cpp",
+    json: "json",
+    jsonc: "json",
+    yaml: "yaml",
+    yml: "yaml",
+    toml: "toml",
+    md: "markdown",
+    mdx: "markdown",
+    css: "css",
+    scss: "scss",
+    less: "less",
+    html: "html",
+    htm: "html",
+    vue: "vue",
+    svelte: "svelte",
+    sh: "shell",
+    bash: "shell",
+    zsh: "shell",
+    ksh: "shell",
+    sql: "sql",
+    graphql: "graphql",
+    gql: "graphql",
+    proto: "protobuf",
+    xml: "xml",
+};
+/** Extension-based language guess; `undefined` for extensionless or unknown extensions. */
+export function detectLanguageByExtension(relativePath) {
+    const base = relativePath.slice(relativePath.lastIndexOf("/") + 1);
+    const dot = base.lastIndexOf(".");
+    // dot <= 0 covers "no extension" and dotfiles like ".gitignore".
+    if (dot <= 0) {
+        return undefined;
+    }
+    const ext = base.slice(dot + 1).toLowerCase();
+    return EXTENSION_LANGUAGE_MAP[ext];
+}
+const SHEBANG_MARKERS = [
+    { pattern: /^#!.*\bnode\b/, languageId: "javascript" },
+    { pattern: /^#!.*\bdeno\b/, languageId: "typescript" },
+    { pattern: /^#!.*\bpython[0-9.]*\b/, languageId: "python" },
+    { pattern: /^#!.*\b(?:bash|sh|zsh|dash|ksh)\b/, languageId: "shell" },
+    { pattern: /^#!.*\bruby\b/, languageId: "ruby" },
+    { pattern: /^#!.*\bperl\b/, languageId: "perl" },
+];
+const CONTENT_MARKERS = [
+    { pattern: /^<\?php/, languageId: "php" },
+    { pattern: /^<\?xml/, languageId: "xml" },
+    { pattern: /^\s*<!DOCTYPE html/i, languageId: "html" },
+];
+/** Content-based language guess for extensionless files (shebang or leading markers). */
+export function detectLanguageFromContent(text) {
+    const head = text.slice(0, 256);
+    for (const marker of SHEBANG_MARKERS) {
+        if (marker.pattern.test(head)) {
+            return marker.languageId;
+        }
+    }
+    for (const marker of CONTENT_MARKERS) {
+        if (marker.pattern.test(head)) {
+            return marker.languageId;
+        }
+    }
+    return undefined;
+}
+/** Combines extension and content sniffing; `languageId` is "unknown" if neither matches. */
+export function detectLanguage(relativePath, sampleText) {
+    const byExtension = detectLanguageByExtension(relativePath);
+    if (byExtension !== undefined) {
+        return { languageId: byExtension, detectedBy: "extension" };
+    }
+    const byContent = detectLanguageFromContent(sampleText);
+    if (byContent !== undefined) {
+        return { languageId: byContent, detectedBy: "content" };
+    }
+    return { languageId: "unknown", detectedBy: "unknown" };
+}
+//# sourceMappingURL=language-classifier.js.map

package/dist/language-classifier.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"language-classifier.js","sourceRoot":"","sources":["../src/language-classifier.ts"],"names":[],"mappings":"AASA,yEAAyE;AACzE,gEAAgE;AAChE,MAAM,sBAAsB,GAAqC;IAC/D,EAAE,EAAE,YAAY;IAChB,GAAG,EAAE,YAAY;IACjB,GAAG,EAAE,YAAY;IACjB,GAAG,EAAE,KAAK;IACV,EAAE,EAAE,YAAY;IAChB,GAAG,EAAE,YAAY;IACjB,GAAG,EAAE,YAAY;IACjB,GAAG,EAAE,KAAK;IACV,EAAE,EAAE,QAAQ;IACZ,GAAG,EAAE,QAAQ;IACb,GAAG,EAAE,QAAQ;IACb,EAAE,EAAE,IAAI;IACR,IAAI,EAAE,MAAM;IACZ,EAAE,EAAE,QAAQ;IACZ,GAAG,EAAE,QAAQ;IACb,EAAE,EAAE,QAAQ;IACZ,EAAE,EAAE,MAAM;IACV,GAAG,EAAE,KAAK;IACV,KAAK,EAAE,KAAK;IACZ,EAAE,EAAE,MAAM;IACV,4EAA4E;IAC5E,2EAA2E;IAC3E,2EAA2E;IAC3E,6CAA6C;IAC7C,IAAI,EAAE,MAAM;IACZ,OAAO,EAAE,MAAM;IACf,KAAK,EAAE,OAAO;IACd,CAAC,EAAE,GAAG;IACN,CAAC,EAAE,GAAG;IACN,GAAG,EAAE,KAAK;IACV,EAAE,EAAE,KAAK;IACT,GAAG,EAAE,KAAK;IACV,GAAG,EAAE,KAAK;IACV,EAAE,EAAE,KAAK;IACT,GAAG,EAAE,KAAK;IACV,IAAI,EAAE,MAAM;IACZ,KAAK,EAAE,MAAM;IACb,IAAI,EAAE,MAAM;IACZ,GAAG,EAAE,MAAM;IACX,IAAI,EAAE,MAAM;IACZ,EAAE,EAAE,UAAU;IACd,GAAG,EAAE,UAAU;IACf,GAAG,EAAE,KAAK;IACV,IAAI,EAAE,MAAM;IACZ,IAAI,EAAE,MAAM;IACZ,IAAI,EAAE,MAAM;IACZ,GAAG,EAAE,MAAM;IACX,GAAG,EAAE,KAAK;IACV,MAAM,EAAE,QAAQ;IAChB,EAAE,EAAE,OAAO;IACX,IAAI,EAAE,OAAO;IACb,GAAG,EAAE,OAAO;IACZ,GAAG,EAAE,OAAO;IACZ,GAAG,EAAE,KAAK;IACV,OAAO,EAAE,SAAS;IAClB,GAAG,EAAE,SAAS;IACd,KAAK,EAAE,UAAU;IACjB,GAAG,EAAE,KAAK;CACX,CAAC;AAEF,2FAA2F;AAC3F,MAAM,UAAU,yBAAyB,CAAC,YAAoB;IAC5D,MAAM,IAAI,GAAG,YAAY,CAAC,KAAK,CAAC,YAAY,CAAC,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC;IACnE,MAAM,GAAG,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;IAClC,iEAAiE;IACjE,IAAI,GAAG,IAAI,CAAC,EAAE,CAAC;QACb,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC;IAC9C,OAAO,sBAAsB,CAAC,GAAG,CAAC,CAAC;AACrC,CAAC;AAOD,MAAM,eAAe,GAA6B;IAChD,EAAE,OAAO,EAAE,eAAe,EAAE,UAAU,EAAE,YAAY,EAAE;IACtD,EAAE,OAAO,EAAE,eAAe,EAAE,UAAU,EAAE,YAAY,EAAE;IACtD,EAAE,OAAO,EAAE,wBAAwB,EAAE,UAAU,EAAE,QAAQ,EAAE;IAC3D,EAAE,OAAO,EAAE,mCAAmC,EAAE,UAAU,EAAE,OAAO,EAAE;IACrE,EAAE,OAAO,EAAE,eAAe,EAAE,UAAU,EAAE,MAAM,EAAE;IAChD,EAAE,OAAO,EAAE,eAAe,EAAE,UAAU,EAAE,MAAM,EAAE;CACjD,CAAC;AAEF,MAAM,eAAe,GAA6B;IAChD,EAAE,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,KAAK,EAAE;IACzC,EAAE,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,KAAK,EAAE;IACzC,EAAE,OAAO,EAAE,qBAAqB,EAAE,UAAU,EAAE,MAAM,EAAE;CACvD,CAAC;AAEF,yFAAyF;AACzF,MAAM,UAAU,yBAAyB,CAAC,IAAY;IACpD,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;IAChC,KAAK,MAAM,MAAM,IAAI,eAAe,EAAE,CAAC;QACrC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YAC9B,OAAO,MAAM,CAAC,UAAU,CAAC;QAC3B,CAAC;IACH,CAAC;IACD,KAAK,MAAM,MAAM,IAAI,eAAe,EAAE,CAAC;QACrC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YAC9B,OAAO,MAAM,CAAC,UAAU,CAAC;QAC3B,CAAC;IACH,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAOD,6FAA6F;AAC7F,MAAM,UAAU,cAAc,CAAC,YAAoB,EAAE,UAAkB;IACrE,MAAM,WAAW,GAAG,yBAAyB,CAAC,YAAY,CAAC,CAAC;IAC5D,IAAI,WAAW,KAAK,SAAS,EAAE,CAAC;QAC9B,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,UAAU,EAAE,WAAW,EAAE,CAAC;IAC9D,CAAC;IACD,MAAM,SAAS,GAAG,yBAAyB,CAAC,UAAU,CAAC,CAAC;IACxD,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;QAC5B,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,UAAU,EAAE,SAAS,EAAE,CAAC;IAC1D,CAAC;IACD,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,UAAU,EAAE,SAAS,EAAE,CAAC;AAC1D,CAAC"}

package/dist/node-fs/index.d.ts

@@ -0,0 +1,10 @@
+/**
+ * `@untangle-code/scanner/node-fs` — the Node.js-specific half of the
+ * scanner: a `FileSystemPort` adapter and a genuinely streaming
+ * `ContentHasher`. Kept out of the package's main entry point so that
+ * entry point stays testable against any `FileSystemPort` (e.g. an
+ * in-memory one) without pulling in `node:fs` (see README, "Entscheidungen").
+ */
+export { NodeFileSystem } from "./node-file-system.js";
+export { createNodeStreamingHasher } from "./node-streaming-hasher.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/node-fs/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/node-fs/index.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AACvD,OAAO,EAAE,yBAAyB,EAAE,MAAM,4BAA4B,CAAC"}

package/dist/node-fs/index.js

@@ -0,0 +1,10 @@
+/**
+ * `@untangle-code/scanner/node-fs` — the Node.js-specific half of the
+ * scanner: a `FileSystemPort` adapter and a genuinely streaming
+ * `ContentHasher`. Kept out of the package's main entry point so that
+ * entry point stays testable against any `FileSystemPort` (e.g. an
+ * in-memory one) without pulling in `node:fs` (see README, "Entscheidungen").
+ */
+export { NodeFileSystem } from "./node-file-system.js";
+export { createNodeStreamingHasher } from "./node-streaming-hasher.js";
+//# sourceMappingURL=index.js.map

package/dist/node-fs/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/node-fs/index.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AACvD,OAAO,EAAE,yBAAyB,EAAE,MAAM,4BAA4B,CAAC"}

package/dist/node-fs/node-file-system.d.ts

@@ -0,0 +1,19 @@
+import type { DirEntryV1, FileStatV1, FileSystemPort, PortCallOptions } from "@untangle-code/domain";
+/** Production `FileSystemPort` adapter backed by `node:fs/promises`. */
+export declare class NodeFileSystem implements FileSystemPort {
+    stat(path: string, options?: PortCallOptions): Promise<FileStatV1 | null>;
+    lstat(path: string, options?: PortCallOptions): Promise<FileStatV1 | null>;
+    readFile(path: string, options?: PortCallOptions): Promise<Uint8Array>;
+    readTextFile(path: string, options?: PortCallOptions): Promise<string>;
+    readDir(path: string, options?: PortCallOptions): Promise<DirEntryV1[]>;
+    realPath(path: string, options?: PortCallOptions): Promise<string>;
+    writeFile(path: string, data: Uint8Array, options?: PortCallOptions): Promise<void>;
+    mkdir(path: string, options?: PortCallOptions & {
+        recursive?: boolean;
+    }): Promise<void>;
+    rename(from: string, to: string, options?: PortCallOptions): Promise<void>;
+    remove(path: string, options?: PortCallOptions & {
+        recursive?: boolean;
+    }): Promise<void>;
+}
+//# sourceMappingURL=node-file-system.d.ts.map

package/dist/node-fs/node-file-system.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"node-file-system.d.ts","sourceRoot":"","sources":["../../src/node-fs/node-file-system.ts"],"names":[],"mappings":"AASA,OAAO,KAAK,EACV,UAAU,EACV,UAAU,EACV,cAAc,EACd,eAAe,EAChB,MAAM,uBAAuB,CAAC;AAyC/B,wEAAwE;AACxE,qBAAa,cAAe,YAAW,cAAc;IACtC,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,eAAe,GAAG,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC;IAazE,KAAK,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,eAAe,GAAG,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC;IAa1E,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,eAAe,GAAG,OAAO,CAAC,UAAU,CAAC;IAKtE,YAAY,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,eAAe,GAAG,OAAO,CAAC,MAAM,CAAC;IAItE,OAAO,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,eAAe,GAAG,OAAO,CAAC,UAAU,EAAE,CAAC;IAevE,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,eAAe,GAAG,OAAO,CAAC,MAAM,CAAC;IAKlE,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU,EAAE,OAAO,CAAC,EAAE,eAAe,GAAG,OAAO,CAAC,IAAI,CAAC;IAInF,KAAK,CAChB,IAAI,EAAE,MAAM,EACZ,OAAO,CAAC,EAAE,eAAe,GAAG;QAAE,SAAS,CAAC,EAAE,OAAO,CAAA;KAAE,GAClD,OAAO,CAAC,IAAI,CAAC;IAKH,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,eAAe,GAAG,OAAO,CAAC,IAAI,CAAC;IAK1E,MAAM,CACjB,IAAI,EAAE,MAAM,EACZ,OAAO,CAAC,EAAE,eAAe,GAAG;QAAE,SAAS,CAAC,EAAE,OAAO,CAAA;KAAE,GAClD,OAAO,CAAC,IAAI,CAAC;CAIjB"}

package/dist/node-fs/node-file-system.js

@@ -0,0 +1,104 @@
+/**
+ * Node.js implementation of `FileSystemPort` (domain). This is the only
+ * file in the package allowed to import `node:fs` — the core (`../index.ts`)
+ * stays testable against any port implementation, this adapter is what
+ * production code actually wires up.
+ */
+import * as nodeFs from "node:fs/promises";
+import * as nodePath from "node:path";
+function kindOf(stats) {
+    if (stats.isSymbolicLink()) {
+        return "symlink";
+    }
+    if (stats.isDirectory()) {
+        return "directory";
+    }
+    if (stats.isFile()) {
+        return "file";
+    }
+    return "other";
+}
+function toFileStat(path, stats) {
+    return {
+        path,
+        sizeBytes: stats.size,
+        mtimeEpochMs: Math.trunc(stats.mtimeMs),
+        kind: kindOf(stats),
+    };
+}
+function isNotFoundError(error) {
+    return (typeof error === "object" &&
+        error !== null &&
+        "code" in error &&
+        error.code === "ENOENT");
+}
+/** Production `FileSystemPort` adapter backed by `node:fs/promises`. */
+export class NodeFileSystem {
+    async stat(path, options) {
+        options?.signal?.throwIfAborted();
+        try {
+            const stats = await nodeFs.stat(path);
+            return toFileStat(path, stats);
+        }
+        catch (error) {
+            if (isNotFoundError(error)) {
+                return null;
+            }
+            throw error;
+        }
+    }
+    async lstat(path, options) {
+        options?.signal?.throwIfAborted();
+        try {
+            const stats = await nodeFs.lstat(path);
+            return toFileStat(path, stats);
+        }
+        catch (error) {
+            if (isNotFoundError(error)) {
+                return null;
+            }
+            throw error;
+        }
+    }
+    async readFile(path, options) {
+        const buffer = await nodeFs.readFile(path, { signal: options?.signal });
+        return new Uint8Array(buffer.buffer, buffer.byteOffset, buffer.byteLength);
+    }
+    async readTextFile(path, options) {
+        return await nodeFs.readFile(path, { encoding: "utf8", signal: options?.signal });
+    }
+    async readDir(path, options) {
+        options?.signal?.throwIfAborted();
+        const entries = await nodeFs.readdir(path, { withFileTypes: true });
+        return entries.map((entry) => {
+            const kind = entry.isSymbolicLink()
+                ? "symlink"
+                : entry.isDirectory()
+                    ? "directory"
+                    : entry.isFile()
+                        ? "file"
+                        : "other";
+            return { name: entry.name, path: nodePath.join(path, entry.name), kind };
+        });
+    }
+    async realPath(path, options) {
+        options?.signal?.throwIfAborted();
+        return await nodeFs.realpath(path);
+    }
+    async writeFile(path, data, options) {
+        await nodeFs.writeFile(path, data, { signal: options?.signal });
+    }
+    async mkdir(path, options) {
+        options?.signal?.throwIfAborted();
+        await nodeFs.mkdir(path, { recursive: options?.recursive ?? false });
+    }
+    async rename(from, to, options) {
+        options?.signal?.throwIfAborted();
+        await nodeFs.rename(from, to);
+    }
+    async remove(path, options) {
+        options?.signal?.throwIfAborted();
+        await nodeFs.rm(path, { recursive: options?.recursive ?? false, force: true });
+    }
+}
+//# sourceMappingURL=node-file-system.js.map

package/dist/node-fs/node-file-system.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"node-file-system.js","sourceRoot":"","sources":["../../src/node-fs/node-file-system.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,OAAO,KAAK,MAAM,MAAM,kBAAkB,CAAC;AAC3C,OAAO,KAAK,QAAQ,MAAM,WAAW,CAAC;AAiBtC,SAAS,MAAM,CAAC,KAAoB;IAClC,IAAI,KAAK,CAAC,cAAc,EAAE,EAAE,CAAC;QAC3B,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,IAAI,KAAK,CAAC,WAAW,EAAE,EAAE,CAAC;QACxB,OAAO,WAAW,CAAC;IACrB,CAAC;IACD,IAAI,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC;QACnB,OAAO,MAAM,CAAC;IAChB,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,SAAS,UAAU,CAAC,IAAY,EAAE,KAAoB;IACpD,OAAO;QACL,IAAI;QACJ,SAAS,EAAE,KAAK,CAAC,IAAI;QACrB,YAAY,EAAE,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC;QACvC,IAAI,EAAE,MAAM,CAAC,KAAK,CAAC;KACpB,CAAC;AACJ,CAAC;AAED,SAAS,eAAe,CAAC,KAAc;IACrC,OAAO,CACL,OAAO,KAAK,KAAK,QAAQ;QACzB,KAAK,KAAK,IAAI;QACd,MAAM,IAAI,KAAK;QACd,KAA4B,CAAC,IAAI,KAAK,QAAQ,CAChD,CAAC;AACJ,CAAC;AAED,wEAAwE;AACxE,MAAM,OAAO,cAAc;IAClB,KAAK,CAAC,IAAI,CAAC,IAAY,EAAE,OAAyB;QACvD,OAAO,EAAE,MAAM,EAAE,cAAc,EAAE,CAAC;QAClC,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACtC,OAAO,UAAU,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;QACjC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,eAAe,CAAC,KAAK,CAAC,EAAE,CAAC;gBAC3B,OAAO,IAAI,CAAC;YACd,CAAC;YACD,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;IAEM,KAAK,CAAC,KAAK,CAAC,IAAY,EAAE,OAAyB;QACxD,OAAO,EAAE,MAAM,EAAE,cAAc,EAAE,CAAC;QAClC,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,MAAM,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YACvC,OAAO,UAAU,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;QACjC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,eAAe,CAAC,KAAK,CAAC,EAAE,CAAC;gBAC3B,OAAO,IAAI,CAAC;YACd,CAAC;YACD,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;IAEM,KAAK,CAAC,QAAQ,CAAC,IAAY,EAAE,OAAyB;QAC3D,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,QAAQ,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC;QACxE,OAAO,IAAI,UAAU,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,UAAU,EAAE,MAAM,CAAC,UAAU,CAAC,CAAC;IAC7E,CAAC;IAEM,KAAK,CAAC,YAAY,CAAC,IAAY,EAAE,OAAyB;QAC/D,OAAO,MAAM,MAAM,CAAC,QAAQ,CAAC,IAAI,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC;IACpF,CAAC;IAEM,KAAK,CAAC,OAAO,CAAC,IAAY,EAAE,OAAyB;QAC1D,OAAO,EAAE,MAAM,EAAE,cAAc,EAAE,CAAC;QAClC,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;QACpE,OAAO,OAAO,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE;YAC3B,MAAM,IAAI,GAAuB,KAAK,CAAC,cAAc,EAAE;gBACrD,CAAC,CAAC,SAAS;gBACX,CAAC,CAAC,KAAK,CAAC,WAAW,EAAE;oBACnB,CAAC,CAAC,WAAW;oBACb,CAAC,CAAC,KAAK,CAAC,MAAM,EAAE;wBACd,CAAC,CAAC,MAAM;wBACR,CAAC,CAAC,OAAO,CAAC;YAChB,OAAO,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,IAAI,EAAE,QAAQ,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,CAAC;QAC3E,CAAC,CAAC,CAAC;IACL,CAAC;IAEM,KAAK,CAAC,QAAQ,CAAC,IAAY,EAAE,OAAyB;QAC3D,OAAO,EAAE,MAAM,EAAE,cAAc,EAAE,CAAC;QAClC,OAAO,MAAM,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;IACrC,CAAC;IAEM,KAAK,CAAC,SAAS,CAAC,IAAY,EAAE,IAAgB,EAAE,OAAyB;QAC9E,MAAM,MAAM,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC;IAClE,CAAC;IAEM,KAAK,CAAC,KAAK,CAChB,IAAY,EACZ,OAAmD;QAEnD,OAAO,EAAE,MAAM,EAAE,cAAc,EAAE,CAAC;QAClC,MAAM,MAAM,CAAC,KAAK,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,OAAO,EAAE,SAAS,IAAI,KAAK,EAAE,CAAC,CAAC;IACvE,CAAC;IAEM,KAAK,CAAC,MAAM,CAAC,IAAY,EAAE,EAAU,EAAE,OAAyB;QACrE,OAAO,EAAE,MAAM,EAAE,cAAc,EAAE,CAAC;QAClC,MAAM,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;IAChC,CAAC;IAEM,KAAK,CAAC,MAAM,CACjB,IAAY,EACZ,OAAmD;QAEnD,OAAO,EAAE,MAAM,EAAE,cAAc,EAAE,CAAC;QAClC,MAAM,MAAM,CAAC,EAAE,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,OAAO,EAAE,SAAS,IAAI,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IACjF,CAAC;CACF"}

package/dist/node-fs/node-streaming-hasher.d.ts

@@ -0,0 +1,4 @@
+import type { ContentHasher } from "../types.js";
+/** `ContentHasher` that streams the file instead of buffering it whole. */
+export declare function createNodeStreamingHasher(): ContentHasher;
+//# sourceMappingURL=node-streaming-hasher.d.ts.map

package/dist/node-fs/node-streaming-hasher.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"node-streaming-hasher.d.ts","sourceRoot":"","sources":["../../src/node-fs/node-streaming-hasher.ts"],"names":[],"mappings":"AAaA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAEjD,2EAA2E;AAC3E,wBAAgB,yBAAyB,IAAI,aAAa,CAkBzD"}

package/dist/node-fs/node-streaming-hasher.js

@@ -0,0 +1,33 @@
+/**
+ * Streaming SHA-256 content hasher for the Node adapter.
+ *
+ * `FileSystemPort.readFile` (domain) only exposes whole-buffer reads, so
+ * the port-based default hasher (`createPortContentHasher`, in the pure
+ * core) must materialize a file's bytes to hash them. This implementation
+ * hashes straight off `fs.createReadStream` instead, without ever holding
+ * the whole file in memory — the genuine "streaming hashing for large
+ * files" the WP-05 order asks for (see README, "Entscheidungen").
+ */
+import { createHash } from "node:crypto";
+import { createReadStream } from "node:fs";
+/** `ContentHasher` that streams the file instead of buffering it whole. */
+export function createNodeStreamingHasher() {
+    return {
+        hashFile(absolutePath, _sizeBytes, options) {
+            return new Promise((resolve, reject) => {
+                const hash = createHash("sha256");
+                const stream = createReadStream(absolutePath, { signal: options?.signal });
+                stream.on("data", (chunk) => {
+                    hash.update(typeof chunk === "string" ? Buffer.from(chunk) : chunk);
+                });
+                stream.on("error", (error) => {
+                    reject(error);
+                });
+                stream.on("end", () => {
+                    resolve(hash.digest("hex"));
+                });
+            });
+        },
+    };
+}
+//# sourceMappingURL=node-streaming-hasher.js.map

package/dist/node-fs/node-streaming-hasher.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"node-streaming-hasher.js","sourceRoot":"","sources":["../../src/node-fs/node-streaming-hasher.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AACH,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,gBAAgB,EAAE,MAAM,SAAS,CAAC;AAI3C,2EAA2E;AAC3E,MAAM,UAAU,yBAAyB;IACvC,OAAO;QACL,QAAQ,CAAC,YAAY,EAAE,UAAU,EAAE,OAAO;YACxC,OAAO,IAAI,OAAO,CAAS,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;gBAC7C,MAAM,IAAI,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC;gBAClC,MAAM,MAAM,GAAG,gBAAgB,CAAC,YAAY,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC;gBAC3E,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAsB,EAAE,EAAE;oBAC3C,IAAI,CAAC,MAAM,CAAC,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;gBACtE,CAAC,CAAC,CAAC;gBACH,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE;oBAC3B,MAAM,CAAC,KAAK,CAAC,CAAC;gBAChB,CAAC,CAAC,CAAC;gBACH,MAAM,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE;oBACpB,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;gBAC9B,CAAC,CAAC,CAAC;YACL,CAAC,CAAC,CAAC;QACL,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/port-options.d.ts

@@ -0,0 +1,8 @@
+/**
+ * Builds a `PortCallOptions` from an optional `AbortSignal` without ever
+ * setting `signal: undefined` explicitly — required because domain's
+ * `PortCallOptions` is checked under `exactOptionalPropertyTypes`.
+ */
+import type { PortCallOptions } from "@untangle-code/domain";
+export declare function portOptions(signal: AbortSignal | undefined): PortCallOptions | undefined;
+//# sourceMappingURL=port-options.d.ts.map

package/dist/port-options.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"port-options.d.ts","sourceRoot":"","sources":["../src/port-options.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AAE7D,wBAAgB,WAAW,CAAC,MAAM,EAAE,WAAW,GAAG,SAAS,GAAG,eAAe,GAAG,SAAS,CAExF"}

package/dist/port-options.js

@@ -0,0 +1,4 @@
+export function portOptions(signal) {
+    return signal === undefined ? undefined : { signal };
+}
+//# sourceMappingURL=port-options.js.map

package/dist/port-options.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"port-options.js","sourceRoot":"","sources":["../src/port-options.ts"],"names":[],"mappings":"AAOA,MAAM,UAAU,WAAW,CAAC,MAA+B;IACzD,OAAO,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC;AACvD,CAAC"}

package/dist/semaphore.d.ts

@@ -0,0 +1,18 @@
+/**
+ * A minimal counting semaphore used to bound I/O parallelism during
+ * discovery (spec.md §6.1; architecture.md §13.1 "bounded queues").
+ *
+ * Deliberately hand-rolled per WP-05 order ("ein einfacher, eigenen
+ * Semaphor/Pool") instead of pulling in a scheduling dependency.
+ */
+export declare class Semaphore {
+    private available;
+    private readonly waiters;
+    constructor(concurrency: number);
+    /** Resolves once a slot is free; returns the matching release function. */
+    acquire(): Promise<() => void>;
+    private release;
+    /** Number of currently free slots — exposed for tests only. */
+    get availableCount(): number;
+}
+//# sourceMappingURL=semaphore.d.ts.map

package/dist/semaphore.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"semaphore.d.ts","sourceRoot":"","sources":["../src/semaphore.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,qBAAa,SAAS;IACpB,OAAO,CAAC,SAAS,CAAS;IAC1B,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAyB;gBAE9B,WAAW,EAAE,MAAM;IAOtC,2EAA2E;IACpE,OAAO,IAAI,OAAO,CAAC,MAAM,IAAI,CAAC;IAarC,OAAO,CAAC,OAAO;IAQf,+DAA+D;IAC/D,IAAW,cAAc,IAAI,MAAM,CAElC;CACF"}

package/dist/semaphore.js

@@ -0,0 +1,42 @@
+/**
+ * A minimal counting semaphore used to bound I/O parallelism during
+ * discovery (spec.md §6.1; architecture.md §13.1 "bounded queues").
+ *
+ * Deliberately hand-rolled per WP-05 order ("ein einfacher, eigenen
+ * Semaphor/Pool") instead of pulling in a scheduling dependency.
+ */
+export class Semaphore {
+    available;
+    waiters = [];
+    constructor(concurrency) {
+        if (!Number.isInteger(concurrency) || concurrency < 1) {
+            throw new RangeError(`Semaphore concurrency must be a positive integer, got ${concurrency}`);
+        }
+        this.available = concurrency;
+    }
+    /** Resolves once a slot is free; returns the matching release function. */
+    acquire() {
+        if (this.available > 0) {
+            this.available -= 1;
+            return Promise.resolve(() => this.release());
+        }
+        return new Promise((resolve) => {
+            this.waiters.push(() => {
+                this.available -= 1;
+                resolve(() => this.release());
+            });
+        });
+    }
+    release() {
+        this.available += 1;
+        const next = this.waiters.shift();
+        if (next !== undefined) {
+            next();
+        }
+    }
+    /** Number of currently free slots — exposed for tests only. */
+    get availableCount() {
+        return this.available;
+    }
+}
+//# sourceMappingURL=semaphore.js.map

package/dist/semaphore.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"semaphore.js","sourceRoot":"","sources":["../src/semaphore.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,MAAM,OAAO,SAAS;IACZ,SAAS,CAAS;IACT,OAAO,GAAsB,EAAE,CAAC;IAEjD,YAAmB,WAAmB;QACpC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,WAAW,CAAC,IAAI,WAAW,GAAG,CAAC,EAAE,CAAC;YACtD,MAAM,IAAI,UAAU,CAAC,yDAAyD,WAAW,EAAE,CAAC,CAAC;QAC/F,CAAC;QACD,IAAI,CAAC,SAAS,GAAG,WAAW,CAAC;IAC/B,CAAC;IAED,2EAA2E;IACpE,OAAO;QACZ,IAAI,IAAI,CAAC,SAAS,GAAG,CAAC,EAAE,CAAC;YACvB,IAAI,CAAC,SAAS,IAAI,CAAC,CAAC;YACpB,OAAO,OAAO,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC;QAC/C,CAAC;QACD,OAAO,IAAI,OAAO,CAAa,CAAC,OAAO,EAAE,EAAE;YACzC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,EAAE;gBACrB,IAAI,CAAC,SAAS,IAAI,CAAC,CAAC;gBACpB,OAAO,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC;YAChC,CAAC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;IACL,CAAC;IAEO,OAAO;QACb,IAAI,CAAC,SAAS,IAAI,CAAC,CAAC;QACpB,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;QAClC,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;YACvB,IAAI,EAAE,CAAC;QACT,CAAC;IACH,CAAC;IAED,+DAA+D;IAC/D,IAAW,cAAc;QACvB,OAAO,IAAI,CAAC,SAAS,CAAC;IACxB,CAAC;CACF"}

package/dist/types.d.ts

@@ -0,0 +1,102 @@
+/**
+ * Scanner-local contracts (spec.md §6.1–§6.3, §12.1; architecture.md §6.4).
+ *
+ * `ScannedFileV1` is a WP-05-local type, not an import from
+ * `@untangle-code/domain` — see README, "Entscheidungen" (Entscheidung 1)
+ * for the full reasoning. In short: docs/BUILD_PLAN.md §3's Contract-Register
+ * (the authoritative, exhaustive list of what MUST live in domain) requires
+ * `FileManifestV1` for a file's tracked analysis state but does not register
+ * a raw pre-analysis scan output shape at all; the name deliberately avoids
+ * "FileSnapshot" (architecture.md §6.1's informal domain-entity name for
+ * this concept) so it cannot be mistaken for that domain contract by name
+ * alone. Downstream packages (parser-registry, chunker) consume it
+ * positionally, not by importing domain types for it.
+ */
+import type { FileSystemPort, PortCallOptions } from "@untangle-code/domain";
+/** Coarse text-encoding guess from a byte sample (BOM + byte-range heuristics). */
+export type TextEncodingGuess = "utf8" | "utf16le" | "utf16be" | "ascii" | "unknown";
+/** How a file's language id was determined. */
+export type LanguageDetectionSource = "extension" | "content" | "unknown";
+/** Why a discovered path was excluded from the yielded candidate stream. */
+export type ExclusionReason = "security" | "config-exclude" | "untangleignore" | "gitignore" | "default-exclude" | "binary" | "size-limit" | "symlink-cycle" | "symlink-escape" | "unreadable";
+/**
+ * One file discovered and accepted for downstream analysis (spec.md §12.1
+ * comparison fields: path, size, mtime as hint, hash as source of truth).
+ */
+export interface ScannedFileV1 {
+    /** "/"-normalized path relative to the scanned repository root. */
+    relativePath: string;
+    /** Absolute path to read content from (post symlink resolution). */
+    absolutePath: string;
+    sizeBytes: number;
+    /** Fast change hint only — never authoritative (spec.md §12.1). */
+    mtimeEpochMs: number;
+    /** SHA-256 hex of the raw file content; sole "unchanged" authority. */
+    contentHash: string;
+    languageId: string;
+    languageDetectedBy: LanguageDetectionSource;
+    isMinified: boolean;
+    encoding: TextEncodingGuess;
+    hasBom: boolean;
+}
+/** One path the scanner decided not to yield, with its reason. */
+export interface ScanSkipV1 {
+    relativePath: string;
+    reason: ExclusionReason;
+    detail?: string;
+}
+/**
+ * Pluggable content hasher (spec.md §12.1 hash pipeline).
+ *
+ * `FileSystemPort` (domain) exposes only whole-buffer reads, so the default,
+ * port-based implementation cannot avoid materializing a file's bytes. A
+ * Node-specific streaming implementation is provided from `./node-fs` for
+ * callers that want to hash large files without buffering them fully — see
+ * README, "Entscheidungen".
+ */
+export interface ContentHasher {
+    hashFile(absolutePath: string, sizeBytes: number, options?: PortCallOptions): Promise<string>;
+}
+export interface IgnoreConfig {
+    /** RepositoryConfig.include (spec.md §4.3) — overrides default excludes only. */
+    configInclude?: readonly string[];
+    /** RepositoryConfig.exclude (spec.md §4.3) — layer 2, spec.md §6.2. */
+    configExclude?: readonly string[];
+    /** File name searched for at every directory level. Default ".untangleignore". */
+    untangleIgnoreFileName?: string;
+    /** File name searched for at every directory level. Default ".gitignore". */
+    gitIgnoreFileName?: string;
+    /** Extra patterns appended to the overridable default-exclude layer. */
+    additionalDefaultExcludes?: readonly string[];
+}
+export interface IgnoreDecision {
+    ignored: boolean;
+    reason?: ExclusionReason;
+}
+export interface BinaryClassification {
+    isBinary: boolean;
+    hasNullByte: boolean;
+    nonPrintableRatio: number;
+    encoding: TextEncodingGuess;
+    hasBom: boolean;
+}
+export interface ScanOptions {
+    fs: FileSystemPort;
+    /** Workspace roots for `assertWithinWorkspace` (architecture.md §23.1). */
+    roots: readonly string[];
+    /** Absolute path to the repository directory to scan. */
+    repoRoot: string;
+    ignore?: IgnoreConfig;
+    /** Reject before a full read via `stat` (spec.md §6.1). Default 5 MiB. */
+    maxFileSizeBytes?: number;
+    /** Bytes inspected for binary/minified/language-content classification. Default 8 KiB. */
+    sampleBytes?: number;
+    /** Bounded parallelism for the per-file processing stage. Default 8. */
+    concurrency?: number;
+    /** Non-printable-byte ratio above which a sample is classified binary. Default 0.3. */
+    nonPrintableThreshold?: number;
+    hasher?: ContentHasher;
+    onSkip?: (skip: ScanSkipV1) => void;
+    signal?: AbortSignal;
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AACH,OAAO,KAAK,EAAE,cAAc,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AAE7E,mFAAmF;AACnF,MAAM,MAAM,iBAAiB,GAAG,MAAM,GAAG,SAAS,GAAG,SAAS,GAAG,OAAO,GAAG,SAAS,CAAC;AAErF,+CAA+C;AAC/C,MAAM,MAAM,uBAAuB,GAAG,WAAW,GAAG,SAAS,GAAG,SAAS,CAAC;AAE1E,4EAA4E;AAC5E,MAAM,MAAM,eAAe,GACvB,UAAU,GACV,gBAAgB,GAChB,gBAAgB,GAChB,WAAW,GACX,iBAAiB,GACjB,QAAQ,GACR,YAAY,GACZ,eAAe,GACf,gBAAgB,GAChB,YAAY,CAAC;AAEjB;;;GAGG;AACH,MAAM,WAAW,aAAa;IAC5B,mEAAmE;IACnE,YAAY,EAAE,MAAM,CAAC;IACrB,oEAAoE;IACpE,YAAY,EAAE,MAAM,CAAC;IACrB,SAAS,EAAE,MAAM,CAAC;IAClB,mEAAmE;IACnE,YAAY,EAAE,MAAM,CAAC;IACrB,uEAAuE;IACvE,WAAW,EAAE,MAAM,CAAC;IACpB,UAAU,EAAE,MAAM,CAAC;IACnB,kBAAkB,EAAE,uBAAuB,CAAC;IAC5C,UAAU,EAAE,OAAO,CAAC;IACpB,QAAQ,EAAE,iBAAiB,CAAC;IAC5B,MAAM,EAAE,OAAO,CAAC;CACjB;AAED,kEAAkE;AAClE,MAAM,WAAW,UAAU;IACzB,YAAY,EAAE,MAAM,CAAC;IACrB,MAAM,EAAE,eAAe,CAAC;IACxB,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED;;;;;;;;GAQG;AACH,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,YAAY,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,eAAe,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;CAC/F;AAED,MAAM,WAAW,YAAY;IAC3B,iFAAiF;IACjF,aAAa,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAClC,uEAAuE;IACvE,aAAa,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAClC,kFAAkF;IAClF,sBAAsB,CAAC,EAAE,MAAM,CAAC;IAChC,6EAA6E;IAC7E,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,wEAAwE;IACxE,yBAAyB,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;CAC/C;AAED,MAAM,WAAW,cAAc;IAC7B,OAAO,EAAE,OAAO,CAAC;IACjB,MAAM,CAAC,EAAE,eAAe,CAAC;CAC1B;AAED,MAAM,WAAW,oBAAoB;IACnC,QAAQ,EAAE,OAAO,CAAC;IAClB,WAAW,EAAE,OAAO,CAAC;IACrB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,QAAQ,EAAE,iBAAiB,CAAC;IAC5B,MAAM,EAAE,OAAO,CAAC;CACjB;AAED,MAAM,WAAW,WAAW;IAC1B,EAAE,EAAE,cAAc,CAAC;IACnB,2EAA2E;IAC3E,KAAK,EAAE,SAAS,MAAM,EAAE,CAAC;IACzB,yDAAyD;IACzD,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,CAAC,EAAE,YAAY,CAAC;IACtB,0EAA0E;IAC1E,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,0FAA0F;IAC1F,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,wEAAwE;IACxE,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,uFAAuF;IACvF,qBAAqB,CAAC,EAAE,MAAM,CAAC;IAC/B,MAAM,CAAC,EAAE,aAAa,CAAC;IACvB,MAAM,CAAC,EAAE,CAAC,IAAI,EAAE,UAAU,KAAK,IAAI,CAAC;IACpC,MAAM,CAAC,EAAE,WAAW,CAAC;CACtB"}

package/dist/types.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=types.js.map

package/dist/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":""}

package/package.json

@@ -1,6 +1,66 @@
 {
   "name": "@untangle-code/scanner",
-  "version": "0.0.0-stage",
-  "stub": true,
-  "description": "Temporary package placeholder for staged publishing"
+  "version": "0.1.0",
+  "private": false,
+  "type": "module",
+  "description": "Untangle scanner: recursive file discovery, ignore rules, symlink safety, binary/language classification and the content-hash pipeline.",
+  "license": "AGPL-3.0-only",
+  "homepage": "https://github.com/lboel/untangle",
+  "bugs": {
+    "url": "https://github.com/lboel/untangle/issues"
+  },
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/lboel/untangle.git",
+    "directory": "packages/scanner"
+  },
+  "publishConfig": {
+    "access": "public"
+  },
+  "engines": {
+    "node": "^22.13.0 || >=24.0.0"
+  },
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "default": "./dist/index.js"
+    },
+    "./node-fs": {
+      "types": "./dist/node-fs/index.d.ts",
+      "default": "./dist/node-fs/index.js"
+    }
+  },
+  "files": [
+    "dist",
+    "!dist/**/*.test.*",
+    "!dist/**/test-helpers.*",
+    "!dist/**/test-support.*",
+    "!dist/**/test-support/**",
+    "!dist/**/testing/**",
+    "!dist/**/__tests__/**",
+    "src",
+    "!src/**/*.test.ts",
+    "!src/**/test-helpers.ts",
+    "!src/**/test-support.ts",
+    "!src/**/test-support/**",
+    "!src/**/testing/**",
+    "LICENSE",
+    "NOTICE",
+    "README.md",
+    "THIRD_PARTY_LICENSES.md"
+  ],
+  "dependencies": {
+    "@untangle-code/domain": "0.1.0"
+  },
+  "devDependencies": {
+    "@types/node": "22.19.7",
+    "typescript": "5.9.3",
+    "vitest": "3.2.7"
+  },
+  "scripts": {
+    "build": "node ../../scripts/tsc-build.mjs tsconfig.json",
+    "typecheck": "tsc -p tsconfig.typecheck.json",
+    "test": "vitest run",
+    "clean": "rm -rf dist *.tsbuildinfo"
+  }
 }