@vyuhlabs/dxkit 1.5.0 → 1.6.0

package/dist/languages/go.js

@@ -0,0 +1,321 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.go = void 0;
+exports.mapGolangciLinterSeverity = mapGolangciLinterSeverity;
+const fs = __importStar(require("fs"));
+const path = __importStar(require("path"));
+const coverage_1 = require("../analyzers/tools/coverage");
+const osv_1 = require("../analyzers/tools/osv");
+const runner_1 = require("../analyzers/tools/runner");
+const tool_registry_1 = require("../analyzers/tools/tool-registry");
+/**
+ * Tier a golangci-lint finding by the linter that produced it.
+ *
+ * golangci-lint bundles ~60 linters with different character. The
+ * `FromLinter` field identifies which one fired. `Severity` (often empty)
+ * is used only as a fallback floor for unknown linters.
+ */
+function mapGolangciLinterSeverity(linter) {
+    if (!linter)
+        return 'low';
+    // Security — gosec exclusively flags vuln patterns.
+    if (linter === 'gosec')
+        return 'critical';
+    // Correctness bugs — go vet, staticcheck analyses, type errors, etc.
+    if (linter === 'govet' ||
+        linter === 'staticcheck' ||
+        linter === 'typecheck' ||
+        linter === 'errorlint' ||
+        linter === 'ineffassign' ||
+        linter === 'unused' ||
+        linter === 'nilerr' ||
+        linter === 'bodyclose' ||
+        linter === 'rowserrcheck' ||
+        linter === 'sqlclosecheck' ||
+        linter === 'noctx') {
+        return 'high';
+    }
+    // Best practices / maintenance
+    if (linter === 'errcheck' ||
+        linter === 'gocritic' ||
+        linter === 'revive' ||
+        linter === 'goconst' ||
+        linter === 'gocyclo' ||
+        linter === 'funlen' ||
+        linter === 'dupl' ||
+        linter === 'gosimple' ||
+        linter === 'unconvert' ||
+        linter === 'unparam' ||
+        linter === 'prealloc' ||
+        linter === 'gocognit') {
+        return 'medium';
+    }
+    // Style / formatting
+    if (linter === 'gofmt' ||
+        linter === 'gofumpt' ||
+        linter === 'goimports' ||
+        linter === 'stylecheck' ||
+        linter === 'whitespace' ||
+        linter === 'misspell' ||
+        linter === 'godot' ||
+        linter === 'lll') {
+        return 'low';
+    }
+    return 'low';
+}
+function tierGolangciIssue(issue) {
+    const byLinter = mapGolangciLinterSeverity(issue.FromLinter);
+    // For unknown linters we fell through to 'low' — but golangci-lint's
+    // own Severity field may say otherwise. Use it as a floor.
+    if (byLinter === 'low' && issue.FromLinter) {
+        const sev = (issue.Severity || '').toLowerCase();
+        if (sev === 'error')
+            return 'high';
+        if (sev === 'warning')
+            return 'medium';
+    }
+    return byLinter;
+}
+exports.go = {
+    id: 'go',
+    displayName: 'Go',
+    sourceExtensions: ['.go'],
+    testFilePatterns: ['*_test.go'],
+    extraExcludes: ['vendor'],
+    detect(cwd) {
+        return (0, runner_1.fileExists)(cwd, 'go.mod');
+    },
+    tools: ['golangci-lint', 'govulncheck'],
+    semgrepRulesets: ['p/gosec'],
+    mapLintSeverity: mapGolangciLinterSeverity,
+    parseCoverage(cwd) {
+        for (const file of ['coverage.out', 'cover.out']) {
+            const abs = path.join(cwd, file);
+            let raw;
+            try {
+                raw = fs.readFileSync(abs, 'utf-8');
+            }
+            catch {
+                continue;
+            }
+            try {
+                return (0, coverage_1.parseGoCoverProfile)(raw, file, cwd);
+            }
+            catch {
+                continue;
+            }
+        }
+        return null;
+    },
+    extractImports(content) {
+        const out = [];
+        // Single-line: `import "fmt"` or `import foo "pkg/name"`
+        const singleRe = /^\s*import\s+(?:[a-zA-Z_]\w*\s+)?"([^"]+)"/gm;
+        let m;
+        while ((m = singleRe.exec(content)) !== null) {
+            out.push(m[1]);
+        }
+        // Multi-line: `import (\n  "fmt"\n  alias "pkg"\n)`
+        const blockRe = /import\s*\(([\s\S]*?)\)/g;
+        while ((m = blockRe.exec(content)) !== null) {
+            const block = m[1];
+            const lineRe = /(?:[a-zA-Z_]\w*\s+)?"([^"]+)"/g;
+            let lm;
+            while ((lm = lineRe.exec(block)) !== null) {
+                if (!out.includes(lm[1])) {
+                    out.push(lm[1]);
+                }
+            }
+        }
+        return out;
+    },
+    resolveImport(fromFile, spec, cwd) {
+        // Go import paths are module-based, not file-relative.
+        // Internal packages resolve as <module>/internal/... → cwd/internal/...
+        let goMod;
+        try {
+            goMod = fs.readFileSync(path.join(cwd, 'go.mod'), 'utf-8');
+        }
+        catch {
+            return null;
+        }
+        const moduleMatch = goMod.match(/^module\s+(\S+)/m);
+        if (!moduleMatch)
+            return null;
+        const modulePath = moduleMatch[1];
+        if (!spec.startsWith(modulePath + '/'))
+            return null;
+        const rel = spec.slice(modulePath.length + 1);
+        const dir = path.join(cwd, rel);
+        try {
+            if (fs.statSync(dir).isDirectory()) {
+                return rel;
+            }
+        }
+        catch {
+            // not found
+        }
+        return null;
+    },
+    async gatherMetrics(cwd) {
+        const metrics = {
+            toolsUsed: [],
+            toolsUnavailable: [],
+        };
+        const lint = (0, tool_registry_1.findTool)(tool_registry_1.TOOL_DEFS['golangci-lint'], cwd);
+        if (lint.available && lint.path) {
+            const raw = (0, runner_1.run)(`${lint.path} run --out-format json ./... 2>/dev/null`, cwd, 120000);
+            if (raw) {
+                try {
+                    const data = JSON.parse(raw);
+                    const issues = data.Issues || [];
+                    // Tier each issue by its FromLinter, then collapse:
+                    // critical + high → errors, medium + low → warnings.
+                    let errors = 0;
+                    let warnings = 0;
+                    for (const issue of issues) {
+                        const tier = tierGolangciIssue(issue);
+                        if (tier === 'critical' || tier === 'high')
+                            errors++;
+                        else
+                            warnings++;
+                    }
+                    metrics.lintErrors = errors;
+                    metrics.lintWarnings = warnings;
+                    metrics.lintTool = 'golangci-lint';
+                    metrics.toolsUsed.push('golangci-lint');
+                }
+                catch {
+                    metrics.toolsUnavailable.push('golangci-lint (parse error)');
+                }
+            }
+            else {
+                metrics.lintErrors = 0;
+                metrics.lintWarnings = 0;
+                metrics.lintTool = 'golangci-lint';
+                metrics.toolsUsed.push('golangci-lint');
+            }
+        }
+        else {
+            metrics.toolsUnavailable.push('golangci-lint');
+        }
+        const vuln = (0, tool_registry_1.findTool)(tool_registry_1.TOOL_DEFS.govulncheck, cwd);
+        if (vuln.available && vuln.path) {
+            const raw = (0, runner_1.run)(`${vuln.path} -json ./... 2>/dev/null`, cwd, 120000);
+            if (raw) {
+                try {
+                    // govulncheck emits ndjson with three relevant shapes:
+                    //   { "osv": { ...full OSV record... } }   — the advisory detail
+                    //   { "finding": { "osv": "GO-YYYY-NNNN", "trace": [...] } }  — a call-site hit
+                    //   { "config": ... } / { "progress": ... } — ignored
+                    const findingIds = new Set();
+                    const embeddedOsv = new Map();
+                    for (const line of raw.split('\n')) {
+                        if (!line.trim())
+                            continue;
+                        try {
+                            const obj = JSON.parse(line);
+                            if (obj.finding?.osv)
+                                findingIds.add(obj.finding.osv);
+                            if (obj.osv?.id)
+                                embeddedOsv.set(obj.osv.id, obj.osv);
+                        }
+                        catch {
+                            /* skip non-JSON lines */
+                        }
+                    }
+                    // Prefer severity from the embedded OSV record (already in the
+                    // govulncheck output, no extra API call). Fall back to an OSV.dev
+                    // lookup for IDs without embedded data. Fall back to 'high' (the
+                    // legacy govulncheck default) for anything still unknown.
+                    const ids = [...findingIds];
+                    const needsLookup = ids.filter((id) => {
+                        const rec = embeddedOsv.get(id);
+                        if (!rec)
+                            return true;
+                        return (0, osv_1.classifyOsvSeverity)(rec) === 'unknown';
+                    });
+                    const lookedUp = needsLookup.length > 0 ? await (0, osv_1.enrichSeverities)(needsLookup) : new Map();
+                    let critical = 0;
+                    let high = 0;
+                    let medium = 0;
+                    let low = 0;
+                    let enrichedCount = 0;
+                    for (const id of ids) {
+                        const rec = embeddedOsv.get(id);
+                        let sev = rec ? (0, osv_1.classifyOsvSeverity)(rec) : 'unknown';
+                        if (sev === 'unknown')
+                            sev = lookedUp.get(id) ?? 'unknown';
+                        if (sev !== 'unknown') {
+                            enrichedCount++;
+                            if (sev === 'critical')
+                                critical++;
+                            else if (sev === 'high')
+                                high++;
+                            else if (sev === 'medium')
+                                medium++;
+                            else
+                                low++;
+                        }
+                        else {
+                            high++; // govulncheck legacy default
+                        }
+                    }
+                    metrics.depVulnCritical = critical;
+                    metrics.depVulnHigh = high;
+                    metrics.depVulnMedium = medium;
+                    metrics.depVulnLow = low;
+                    metrics.depAuditTool = 'govulncheck';
+                    metrics.toolsUsed.push('govulncheck');
+                    if (enrichedCount > 0 && needsLookup.length > 0) {
+                        metrics.toolsUsed.push('osv.dev');
+                    }
+                }
+                catch {
+                    metrics.toolsUnavailable.push('govulncheck (parse error)');
+                }
+            }
+        }
+        else {
+            metrics.toolsUnavailable.push('govulncheck');
+        }
+        if ((0, runner_1.fileExists)(cwd, 'go.mod')) {
+            metrics.testFramework = 'go-test';
+        }
+        return metrics;
+    },
+};
+//# sourceMappingURL=go.js.map

package/dist/languages/go.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"go.js","sourceRoot":"","sources":["../../src/languages/go.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AA2BA,8DAwDC;AAnFD,uCAAyB;AACzB,2CAA6B;AAE7B,0DAAkE;AAClE,gDAA6F;AAC7F,sDAA4D;AAC5D,oEAAuE;AAcvE;;;;;;GAMG;AACH,SAAgB,yBAAyB,CAAC,MAA0B;IAClE,IAAI,CAAC,MAAM;QAAE,OAAO,KAAK,CAAC;IAE1B,oDAAoD;IACpD,IAAI,MAAM,KAAK,OAAO;QAAE,OAAO,UAAU,CAAC;IAE1C,qEAAqE;IACrE,IACE,MAAM,KAAK,OAAO;QAClB,MAAM,KAAK,aAAa;QACxB,MAAM,KAAK,WAAW;QACtB,MAAM,KAAK,WAAW;QACtB,MAAM,KAAK,aAAa;QACxB,MAAM,KAAK,QAAQ;QACnB,MAAM,KAAK,QAAQ;QACnB,MAAM,KAAK,WAAW;QACtB,MAAM,KAAK,cAAc;QACzB,MAAM,KAAK,eAAe;QAC1B,MAAM,KAAK,OAAO,EAClB,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,+BAA+B;IAC/B,IACE,MAAM,KAAK,UAAU;QACrB,MAAM,KAAK,UAAU;QACrB,MAAM,KAAK,QAAQ;QACnB,MAAM,KAAK,SAAS;QACpB,MAAM,KAAK,SAAS;QACpB,MAAM,KAAK,QAAQ;QACnB,MAAM,KAAK,MAAM;QACjB,MAAM,KAAK,UAAU;QACrB,MAAM,KAAK,WAAW;QACtB,MAAM,KAAK,SAAS;QACpB,MAAM,KAAK,UAAU;QACrB,MAAM,KAAK,UAAU,EACrB,CAAC;QACD,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED,qBAAqB;IACrB,IACE,MAAM,KAAK,OAAO;QAClB,MAAM,KAAK,SAAS;QACpB,MAAM,KAAK,WAAW;QACtB,MAAM,KAAK,YAAY;QACvB,MAAM,KAAK,YAAY;QACvB,MAAM,KAAK,UAAU;QACrB,MAAM,KAAK,OAAO;QAClB,MAAM,KAAK,KAAK,EAChB,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IAED,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,iBAAiB,CAAC,KAAoB;IAC7C,MAAM,QAAQ,GAAG,yBAAyB,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;IAC7D,qEAAqE;IACrE,2DAA2D;IAC3D,IAAI,QAAQ,KAAK,KAAK,IAAI,KAAK,CAAC,UAAU,EAAE,CAAC;QAC3C,MAAM,GAAG,GAAG,CAAC,KAAK,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;QACjD,IAAI,GAAG,KAAK,OAAO;YAAE,OAAO,MAAM,CAAC;QACnC,IAAI,GAAG,KAAK,SAAS;YAAE,OAAO,QAAQ,CAAC;IACzC,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAEY,QAAA,EAAE,GAAoB;IACjC,EAAE,EAAE,IAAI;IACR,WAAW,EAAE,IAAI;IACjB,gBAAgB,EAAE,CAAC,KAAK,CAAC;IACzB,gBAAgB,EAAE,CAAC,WAAW,CAAC;IAC/B,aAAa,EAAE,CAAC,QAAQ,CAAC;IAEzB,MAAM,CAAC,GAAG;QACR,OAAO,IAAA,mBAAU,EAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;IACnC,CAAC;IAED,KAAK,EAAE,CAAC,eAAe,EAAE,aAAa,CAAC;IACvC,eAAe,EAAE,CAAC,SAAS,CAAC;IAE5B,eAAe,EAAE,yBAAyB;IAE1C,aAAa,CAAC,GAAG;QACf,KAAK,MAAM,IAAI,IAAI,CAAC,cAAc,EAAE,WAAW,CAAC,EAAE,CAAC;YACjD,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;YACjC,IAAI,GAAW,CAAC;YAChB,IAAI,CAAC;gBACH,GAAG,GAAG,EAAE,CAAC,YAAY,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;YACtC,CAAC;YAAC,MAAM,CAAC;gBACP,SAAS;YACX,CAAC;YACD,IAAI,CAAC;gBACH,OAAO,IAAA,8BAAmB,EAAC,GAAG,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC;YAC7C,CAAC;YAAC,MAAM,CAAC;gBACP,SAAS;YACX,CAAC;QACH,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAED,cAAc,CAAC,OAAO;QACpB,MAAM,GAAG,GAAa,EAAE,CAAC;QACzB,yDAAyD;QACzD,MAAM,QAAQ,GAAG,8CAA8C,CAAC;QAChE,IAAI,CAAyB,CAAC;QAC9B,OAAO,CAAC,CAAC,GAAG,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;YAC7C,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACjB,CAAC;QACD,oDAAoD;QACpD,MAAM,OAAO,GAAG,0BAA0B,CAAC;QAC3C,OAAO,CAAC,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;YAC5C,MAAM,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;YACnB,MAAM,MAAM,GAAG,gCAAgC,CAAC;YAChD,IAAI,EAA0B,CAAC;YAC/B,OAAO,CAAC,EAAE,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;gBAC1C,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;oBACzB,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;gBAClB,CAAC;YACH,CAAC;QACH,CAAC;QACD,OAAO,GAAG,CAAC;IACb,CAAC;IAED,aAAa,CAAC,QAAQ,EAAE,IAAI,EAAE,GAAG;QAC/B,uDAAuD;QACvD,wEAAwE;QACxE,IAAI,KAAa,CAAC;QAClB,IAAI,CAAC;YACH,KAAK,GAAG,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,QAAQ,CAAC,EAAE,OAAO,CAAC,CAAC;QAC7D,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,IAAI,CAAC;QACd,CAAC;QACD,MAAM,WAAW,GAAG,KAAK,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAC;QACpD,IAAI,CAAC,WAAW;YAAE,OAAO,IAAI,CAAC;QAC9B,MAAM,UAAU,GAAG,WAAW,CAAC,CAAC,CAAC,CAAC;QAClC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,UAAU,GAAG,GAAG,CAAC;YAAE,OAAO,IAAI,CAAC;QACpD,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;QAC9C,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;QAChC,IAAI,CAAC;YACH,IAAI,EAAE,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC;gBACnC,OAAO,GAAG,CAAC;YACb,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,YAAY;QACd,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAED,KAAK,CAAC,aAAa,CAAC,GAAG;QACrB,MAAM,OAAO,GAA2B;YACtC,SAAS,EAAE,EAAE;YACb,gBAAgB,EAAE,EAAE;SACrB,CAAC;QAEF,MAAM,IAAI,GAAG,IAAA,wBAAQ,EAAC,yBAAS,CAAC,eAAe,CAAC,EAAE,GAAG,CAAC,CAAC;QACvD,IAAI,IAAI,CAAC,SAAS,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;YAChC,MAAM,GAAG,GAAG,IAAA,YAAG,EAAC,GAAG,IAAI,CAAC,IAAI,0CAA0C,EAAE,GAAG,EAAE,MAAM,CAAC,CAAC;YACrF,IAAI,GAAG,EAAE,CAAC;gBACR,IAAI,CAAC;oBACH,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAmB,CAAC;oBAC/C,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,IAAI,EAAE,CAAC;oBACjC,oDAAoD;oBACpD,qDAAqD;oBACrD,IAAI,MAAM,GAAG,CAAC,CAAC;oBACf,IAAI,QAAQ,GAAG,CAAC,CAAC;oBACjB,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;wBAC3B,MAAM,IAAI,GAAG,iBAAiB,CAAC,KAAK,CAAC,CAAC;wBACtC,IAAI,IAAI,KAAK,UAAU,IAAI,IAAI,KAAK,MAAM;4BAAE,MAAM,EAAE,CAAC;;4BAChD,QAAQ,EAAE,CAAC;oBAClB,CAAC;oBACD,OAAO,CAAC,UAAU,GAAG,MAAM,CAAC;oBAC5B,OAAO,CAAC,YAAY,GAAG,QAAQ,CAAC;oBAChC,OAAO,CAAC,QAAQ,GAAG,eAAe,CAAC;oBACnC,OAAO,CAAC,SAAU,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;gBAC3C,CAAC;gBAAC,MAAM,CAAC;oBACP,OAAO,CAAC,gBAAiB,CAAC,IAAI,CAAC,6BAA6B,CAAC,CAAC;gBAChE,CAAC;YACH,CAAC;iBAAM,CAAC;gBACN,OAAO,CAAC,UAAU,GAAG,CAAC,CAAC;gBACvB,OAAO,CAAC,YAAY,GAAG,CAAC,CAAC;gBACzB,OAAO,CAAC,QAAQ,GAAG,eAAe,CAAC;gBACnC,OAAO,CAAC,SAAU,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;YAC3C,CAAC;QACH,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,gBAAiB,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;QAClD,CAAC;QAED,MAAM,IAAI,GAAG,IAAA,wBAAQ,EAAC,yBAAS,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC;QAClD,IAAI,IAAI,CAAC,SAAS,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;YAChC,MAAM,GAAG,GAAG,IAAA,YAAG,EAAC,GAAG,IAAI,CAAC,IAAI,0BAA0B,EAAE,GAAG,EAAE,MAAM,CAAC,CAAC;YACrE,IAAI,GAAG,EAAE,CAAC;gBACR,IAAI,CAAC;oBACH,uDAAuD;oBACvD,iEAAiE;oBACjE,gFAAgF;oBAChF,sDAAsD;oBACtD,MAAM,UAAU,GAAG,IAAI,GAAG,EAAU,CAAC;oBACrC,MAAM,WAAW,GAAG,IAAI,GAAG,EAAmB,CAAC;oBAC/C,KAAK,MAAM,IAAI,IAAI,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;wBACnC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE;4BAAE,SAAS;wBAC3B,IAAI,CAAC;4BACH,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAG1B,CAAC;4BACF,IAAI,GAAG,CAAC,OAAO,EAAE,GAAG;gCAAE,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;4BACtD,IAAI,GAAG,CAAC,GAAG,EAAE,EAAE;gCAAE,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,EAAE,GAAG,CAAC,GAAG,CAAC,CAAC;wBACxD,CAAC;wBAAC,MAAM,CAAC;4BACP,yBAAyB;wBAC3B,CAAC;oBACH,CAAC;oBAED,+DAA+D;oBAC/D,kEAAkE;oBAClE,iEAAiE;oBACjE,0DAA0D;oBAC1D,MAAM,GAAG,GAAG,CAAC,GAAG,UAAU,CAAC,CAAC;oBAC5B,MAAM,WAAW,GAAG,GAAG,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,EAAE;wBACpC,MAAM,GAAG,GAAG,WAAW,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;wBAChC,IAAI,CAAC,GAAG;4BAAE,OAAO,IAAI,CAAC;wBACtB,OAAO,IAAA,yBAAmB,EAAC,GAAG,CAAC,KAAK,SAAS,CAAC;oBAChD,CAAC,CAAC,CAAC;oBACH,MAAM,QAAQ,GAAG,WAAW,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,IAAA,sBAAgB,EAAC,WAAW,CAAC,CAAC,CAAC,CAAC,IAAI,GAAG,EAAE,CAAC;oBAE1F,IAAI,QAAQ,GAAG,CAAC,CAAC;oBACjB,IAAI,IAAI,GAAG,CAAC,CAAC;oBACb,IAAI,MAAM,GAAG,CAAC,CAAC;oBACf,IAAI,GAAG,GAAG,CAAC,CAAC;oBACZ,IAAI,aAAa,GAAG,CAAC,CAAC;oBACtB,KAAK,MAAM,EAAE,IAAI,GAAG,EAAE,CAAC;wBACrB,MAAM,GAAG,GAAG,WAAW,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;wBAChC,IAAI,GAAG,GAAG,GAAG,CAAC,CAAC,CAAC,IAAA,yBAAmB,EAAC,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;wBACrD,IAAI,GAAG,KAAK,SAAS;4BAAE,GAAG,GAAG,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,SAAS,CAAC;wBAC3D,IAAI,GAAG,KAAK,SAAS,EAAE,CAAC;4BACtB,aAAa,EAAE,CAAC;4BAChB,IAAI,GAAG,KAAK,UAAU;gCAAE,QAAQ,EAAE,CAAC;iCAC9B,IAAI,GAAG,KAAK,MAAM;gCAAE,IAAI,EAAE,CAAC;iCAC3B,IAAI,GAAG,KAAK,QAAQ;gCAAE,MAAM,EAAE,CAAC;;gCAC/B,GAAG,EAAE,CAAC;wBACb,CAAC;6BAAM,CAAC;4BACN,IAAI,EAAE,CAAC,CAAC,6BAA6B;wBACvC,CAAC;oBACH,CAAC;oBAED,OAAO,CAAC,eAAe,GAAG,QAAQ,CAAC;oBACnC,OAAO,CAAC,WAAW,GAAG,IAAI,CAAC;oBAC3B,OAAO,CAAC,aAAa,GAAG,MAAM,CAAC;oBAC/B,OAAO,CAAC,UAAU,GAAG,GAAG,CAAC;oBACzB,OAAO,CAAC,YAAY,GAAG,aAAa,CAAC;oBACrC,OAAO,CAAC,SAAU,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;oBACvC,IAAI,aAAa,GAAG,CAAC,IAAI,WAAW,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;wBAChD,OAAO,CAAC,SAAU,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;oBACrC,CAAC;gBACH,CAAC;gBAAC,MAAM,CAAC;oBACP,OAAO,CAAC,gBAAiB,CAAC,IAAI,CAAC,2BAA2B,CAAC,CAAC;gBAC9D,CAAC;YACH,CAAC;QACH,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,gBAAiB,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;QAChD,CAAC;QAED,IAAI,IAAA,mBAAU,EAAC,GAAG,EAAE,QAAQ,CAAC,EAAE,CAAC;YAC9B,OAAO,CAAC,aAAa,GAAG,SAAS,CAAC;QACpC,CAAC;QAED,OAAO,OAAO,CAAC;IACjB,CAAC;CACF,CAAC"}

package/dist/languages/index.d.ts

@@ -0,0 +1,6 @@
+import type { LanguageId, LanguageSupport } from './types';
+export type { LanguageId, LanguageSupport, LintSeverity } from './types';
+export declare const LANGUAGES: readonly LanguageSupport[];
+export declare function getLanguage(id: LanguageId): LanguageSupport | undefined;
+export declare function detectActiveLanguages(cwd: string): LanguageSupport[];
+//# sourceMappingURL=index.d.ts.map

package/dist/languages/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/languages/index.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,eAAe,EAAE,MAAM,SAAS,CAAC;AAO3D,YAAY,EAAE,UAAU,EAAE,eAAe,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAEzE,eAAO,MAAM,SAAS,EAAE,SAAS,eAAe,EAA2C,CAAC;AAE5F,wBAAgB,WAAW,CAAC,EAAE,EAAE,UAAU,GAAG,eAAe,GAAG,SAAS,CAEvE;AAED,wBAAgB,qBAAqB,CAAC,GAAG,EAAE,MAAM,GAAG,eAAe,EAAE,CAEpE"}

package/dist/languages/index.js

@@ -0,0 +1,18 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.LANGUAGES = void 0;
+exports.getLanguage = getLanguage;
+exports.detectActiveLanguages = detectActiveLanguages;
+const csharp_1 = require("./csharp");
+const go_1 = require("./go");
+const python_1 = require("./python");
+const rust_1 = require("./rust");
+const typescript_1 = require("./typescript");
+exports.LANGUAGES = [python_1.python, typescript_1.typescript, csharp_1.csharp, go_1.go, rust_1.rust];
+function getLanguage(id) {
+    return exports.LANGUAGES.find((l) => l.id === id);
+}
+function detectActiveLanguages(cwd) {
+    return exports.LANGUAGES.filter((l) => l.detect(cwd));
+}
+//# sourceMappingURL=index.js.map

package/dist/languages/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/languages/index.ts"],"names":[],"mappings":";;;AAWA,kCAEC;AAED,sDAEC;AAhBD,qCAAkC;AAClC,6BAA0B;AAC1B,qCAAkC;AAClC,iCAA8B;AAC9B,6CAA0C;AAI7B,QAAA,SAAS,GAA+B,CAAC,eAAM,EAAE,uBAAU,EAAE,eAAM,EAAE,OAAE,EAAE,WAAI,CAAC,CAAC;AAE5F,SAAgB,WAAW,CAAC,EAAc;IACxC,OAAO,iBAAS,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;AAC5C,CAAC;AAED,SAAgB,qBAAqB,CAAC,GAAW;IAC/C,OAAO,iBAAS,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;AAChD,CAAC"}

package/dist/languages/python.d.ts

@@ -0,0 +1,3 @@
+import type { LanguageSupport } from './types';
+export declare const python: LanguageSupport;
+//# sourceMappingURL=python.d.ts.map

package/dist/languages/python.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"python.d.ts","sourceRoot":"","sources":["../../src/languages/python.ts"],"names":[],"mappings":"AAQA,OAAO,KAAK,EAAE,eAAe,EAAgB,MAAM,SAAS,CAAC;AAoE7D,eAAO,MAAM,MAAM,EAAE,eAiLpB,CAAC"}

package/dist/languages/python.js

@@ -0,0 +1,284 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.python = void 0;
+const fs = __importStar(require("fs"));
+const path = __importStar(require("path"));
+const coverage_1 = require("../analyzers/tools/coverage");
+const osv_1 = require("../analyzers/tools/osv");
+const runner_1 = require("../analyzers/tools/runner");
+const tool_registry_1 = require("../analyzers/tools/tool-registry");
+function stripPyComments(src) {
+    return src.replace(/(^|[^\w"'])#[^\n]*/g, '$1');
+}
+function isFile(p) {
+    try {
+        return fs.statSync(p).isFile();
+    }
+    catch {
+        return false;
+    }
+}
+function toRel(abs, cwd) {
+    return path.relative(cwd, abs).split(path.sep).join('/');
+}
+function hasPyFileWithinDepth(cwd, maxDepth = 2) {
+    function search(dir, depth) {
+        if (depth > maxDepth)
+            return false;
+        let entries;
+        try {
+            entries = fs.readdirSync(dir, { withFileTypes: true });
+        }
+        catch {
+            return false;
+        }
+        for (const e of entries) {
+            if (e.name.startsWith('.') ||
+                ['node_modules', 'vendor', 'bin', 'obj', 'target'].includes(e.name)) {
+                continue;
+            }
+            if (e.isFile() && e.name.endsWith('.py'))
+                return true;
+            if (e.isDirectory() && search(path.join(dir, e.name), depth + 1))
+                return true;
+        }
+        return false;
+    }
+    return search(cwd, 0);
+}
+function mapRuffSeverity(code) {
+    const prefix = code.match(/^[A-Z]+/)?.[0] ?? '';
+    switch (prefix) {
+        case 'S':
+            return 'critical';
+        case 'F':
+        case 'B':
+            return 'high';
+        case 'E':
+        case 'C':
+            return 'medium';
+        default:
+            return 'low';
+    }
+}
+exports.python = {
+    id: 'python',
+    displayName: 'Python',
+    sourceExtensions: ['.py'],
+    testFilePatterns: ['test_*.py', '*_test.py'],
+    extraExcludes: ['__pycache__', '.pytest_cache', '.ruff_cache', '.venv', 'venv', '.mypy_cache'],
+    detect(cwd) {
+        return ((0, runner_1.fileExists)(cwd, 'pyproject.toml') ||
+            (0, runner_1.fileExists)(cwd, 'setup.py') ||
+            (0, runner_1.fileExists)(cwd, 'requirements.txt') ||
+            (0, runner_1.fileExists)(cwd, 'Pipfile') ||
+            hasPyFileWithinDepth(cwd, 2));
+    },
+    tools: ['ruff', 'pip-audit', 'coverage-py'],
+    semgrepRulesets: ['p/python'],
+    parseCoverage(cwd) {
+        const file = path.join(cwd, 'coverage.json');
+        let raw;
+        try {
+            raw = fs.readFileSync(file, 'utf-8');
+        }
+        catch {
+            return null;
+        }
+        try {
+            return (0, coverage_1.parseCoveragePy)(raw, 'coverage.json', cwd);
+        }
+        catch {
+            return null;
+        }
+    },
+    extractImports(content) {
+        const out = [];
+        for (const line of stripPyComments(content).split('\n')) {
+            const trimmed = line.trim();
+            const fromMatch = trimmed.match(/^from\s+([.\w]+)\s+import\s+/);
+            if (fromMatch) {
+                out.push(fromMatch[1]);
+                continue;
+            }
+            const impMatch = trimmed.match(/^import\s+(.+)$/);
+            if (impMatch) {
+                for (const part of impMatch[1].split(',')) {
+                    const name = part
+                        .trim()
+                        .split(/\s+as\s+/)[0]
+                        .trim();
+                    if (name)
+                        out.push(name);
+                }
+            }
+        }
+        return out;
+    },
+    resolveImport(fromFile, spec, cwd) {
+        const fromDir = path.dirname(path.join(cwd, fromFile));
+        const dotMatch = spec.match(/^(\.+)(.*)$/);
+        let baseDir;
+        let remainder;
+        if (dotMatch) {
+            const dots = dotMatch[1].length;
+            remainder = dotMatch[2];
+            baseDir = fromDir;
+            for (let i = 1; i < dots; i++)
+                baseDir = path.dirname(baseDir);
+        }
+        else {
+            baseDir = cwd;
+            remainder = spec;
+        }
+        if (!remainder)
+            return null;
+        const parts = remainder.split('.').filter(Boolean);
+        const candidate = path.join(baseDir, ...parts);
+        if (isFile(candidate + '.py'))
+            return toRel(candidate + '.py', cwd);
+        const init = path.join(candidate, '__init__.py');
+        if (isFile(init))
+            return toRel(init, cwd);
+        return null;
+    },
+    async gatherMetrics(cwd) {
+        const metrics = {
+            toolsUsed: [],
+            toolsUnavailable: [],
+        };
+        const ruff = (0, tool_registry_1.findTool)(tool_registry_1.TOOL_DEFS.ruff, cwd);
+        if (ruff.available && ruff.path) {
+            const raw = (0, runner_1.run)(`${ruff.path} check . --output-format json 2>/dev/null`, cwd, 60000);
+            if (raw) {
+                try {
+                    const results = JSON.parse(raw);
+                    if (Array.isArray(results)) {
+                        let errors = 0;
+                        let warnings = 0;
+                        for (const r of results) {
+                            const sev = mapRuffSeverity(r.code);
+                            if (sev === 'critical' || sev === 'high')
+                                errors++;
+                            else
+                                warnings++;
+                        }
+                        metrics.lintErrors = errors;
+                        metrics.lintWarnings = warnings;
+                        metrics.lintTool = 'ruff';
+                        metrics.toolsUsed.push('ruff');
+                    }
+                }
+                catch {
+                    metrics.toolsUnavailable.push('ruff (parse error)');
+                }
+            }
+            else {
+                metrics.lintErrors = 0;
+                metrics.lintWarnings = 0;
+                metrics.lintTool = 'ruff';
+                metrics.toolsUsed.push('ruff');
+            }
+        }
+        else {
+            metrics.toolsUnavailable.push('ruff');
+        }
+        const pipAudit = (0, tool_registry_1.findTool)(tool_registry_1.TOOL_DEFS['pip-audit'], cwd);
+        if (pipAudit.available && pipAudit.path) {
+            const raw = (0, runner_1.run)(`${pipAudit.path} --format json 2>/dev/null`, cwd, 120000);
+            if (raw) {
+                try {
+                    const data = JSON.parse(raw);
+                    const vulnIds = [];
+                    for (const dep of data.dependencies || []) {
+                        for (const v of dep.vulns || []) {
+                            if (v.id)
+                                vulnIds.push(v.id);
+                        }
+                    }
+                    // pip-audit doesn't carry severity per vuln — look up via OSV.dev.
+                    // Unknown/unreachable IDs fall back to medium (pip-audit's legacy default).
+                    const severities = await (0, osv_1.enrichSeverities)(vulnIds);
+                    let critical = 0;
+                    let high = 0;
+                    let medium = 0;
+                    let low = 0;
+                    let enrichedCount = 0;
+                    for (const id of vulnIds) {
+                        const sev = severities.get(id);
+                        if (sev && sev !== 'unknown') {
+                            enrichedCount++;
+                            if (sev === 'critical')
+                                critical++;
+                            else if (sev === 'high')
+                                high++;
+                            else if (sev === 'medium')
+                                medium++;
+                            else
+                                low++;
+                        }
+                        else {
+                            medium++;
+                        }
+                    }
+                    metrics.depVulnCritical = critical;
+                    metrics.depVulnHigh = high;
+                    metrics.depVulnMedium = medium;
+                    metrics.depVulnLow = low;
+                    metrics.depAuditTool = 'pip-audit';
+                    metrics.toolsUsed.push('pip-audit');
+                    if (enrichedCount > 0)
+                        metrics.toolsUsed.push('osv.dev');
+                }
+                catch {
+                    metrics.toolsUnavailable.push('pip-audit (parse error)');
+                }
+            }
+        }
+        else {
+            metrics.toolsUnavailable.push('pip-audit');
+        }
+        if ((0, runner_1.fileExists)(cwd, 'pytest.ini', 'conftest.py') || (0, runner_1.fileExists)(cwd, 'pyproject.toml')) {
+            const pyproject = (0, runner_1.run)('cat pyproject.toml 2>/dev/null', cwd);
+            if (pyproject?.includes('[tool.pytest') || (0, runner_1.fileExists)(cwd, 'pytest.ini', 'conftest.py')) {
+                metrics.testFramework = 'pytest';
+            }
+        }
+        return metrics;
+    },
+    mapLintSeverity: mapRuffSeverity,
+};
+//# sourceMappingURL=python.js.map