@vyuhlabs/dxkit 1.5.1 → 1.6.0

package/dist/analyzers/tools/parallel.js

@@ -0,0 +1,195 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.gatherLayer2Parallel = gatherLayer2Parallel;
+/**
+ * Parallel tool execution — run Layer 2 gather functions concurrently
+ * by forking child processes that call the EXISTING gather functions.
+ *
+ * Each child process requires the built dist/ module and calls the same
+ * gather function that sequential mode uses. NO duplicated invocation logic.
+ *
+ * Architecture rule (CLAUDE.md #2): each tool has ONE gather function.
+ * This module orchestrates, never reimplements.
+ */
+const fs = __importStar(require("fs"));
+const path = __importStar(require("path"));
+const os = __importStar(require("os"));
+const child_process_1 = require("child_process");
+/**
+ * Run cloc + gitleaks + graphify gather functions in parallel child processes.
+ * Each child calls the real gather function from the existing tool module.
+ * Falls back to sequential on low memory (<1GB free).
+ */
+function gatherLayer2Parallel(cwd, verbose = false) {
+    const dxkitDist = path.resolve(__dirname, '..');
+    const tasks = [
+        {
+            name: 'cloc',
+            modulePath: './cloc',
+            functionName: 'gatherClocMetrics',
+        },
+        {
+            name: 'gitleaks',
+            modulePath: './gitleaks',
+            functionName: 'gatherGitleaksMetrics',
+        },
+        {
+            name: 'graphify',
+            modulePath: './graphify',
+            functionName: 'gatherGraphifyMetrics',
+        },
+    ];
+    // Check available memory — fall back to sequential if <1GB free
+    const freeMem = os.freemem();
+    const useParallel = freeMem >= 1024 * 1024 * 1024;
+    if (verbose && !useParallel) {
+        console.error(`  [parallel] Low memory (${Math.round(freeMem / 1024 / 1024)}MB free), running sequentially`);
+    }
+    const tmpDir = fs.mkdtempSync(path.join(os.tmpdir(), 'dxkit-l2-'));
+    const startTime = Date.now();
+    if (useParallel) {
+        runTasksParallel(tasks, cwd, dxkitDist, tmpDir, verbose);
+    }
+    else {
+        runTasksSequential(tasks, cwd, dxkitDist, tmpDir);
+    }
+    if (verbose) {
+        const elapsed = ((Date.now() - startTime) / 1000).toFixed(1);
+        console.error(`  [parallel] Layer 2 completed in ${elapsed}s`);
+    }
+    // Merge all results
+    const merged = {
+        toolsUsed: [],
+        toolsUnavailable: [],
+    };
+    for (let i = 0; i < tasks.length; i++) {
+        const resultFile = path.join(tmpDir, `${tasks[i].name}.json`);
+        try {
+            const raw = fs.readFileSync(resultFile, 'utf-8');
+            const partial = JSON.parse(raw);
+            // Merge arrays
+            if (partial.toolsUsed) {
+                merged.toolsUsed.push(...partial.toolsUsed);
+                delete partial.toolsUsed;
+            }
+            if (partial.toolsUnavailable) {
+                merged.toolsUnavailable.push(...partial.toolsUnavailable);
+                delete partial.toolsUnavailable;
+            }
+            // Merge non-null values
+            for (const [k, v] of Object.entries(partial)) {
+                if (v !== null && v !== undefined) {
+                    merged[k] = v;
+                }
+            }
+        }
+        catch {
+            // Tool didn't produce output — skip
+        }
+    }
+    // Cleanup
+    try {
+        fs.rmSync(tmpDir, { recursive: true, force: true });
+    }
+    catch {
+        /* ignore */
+    }
+    return merged;
+}
+/** Build the Node.js script that calls a gather function and writes result to file. */
+function buildWorkerScript(task, cwd, resultFile) {
+    // The child process requires the SAME compiled module and calls the SAME function.
+    // No duplication — it's literally require('<abs-path>/tools/cloc').gatherClocMetrics(cwd).
+    // Use __dirname at build time to resolve the absolute path to dist/analyzers/.
+    const absModulePath = path.resolve(__dirname, task.modulePath);
+    return `
+    try {
+      var mod = require('${absModulePath.replace(/\\/g, '/')}');
+      var result = mod.${task.functionName}('${cwd.replace(/'/g, "\\'")}');
+      require('fs').writeFileSync('${resultFile}', JSON.stringify(result));
+    } catch (e) {
+      require('fs').writeFileSync('${resultFile}', JSON.stringify({
+        toolsUnavailable: ['${task.name} (child process error: ' + (e.message || '').slice(0, 100) + ')']
+      }));
+    }
+  `;
+}
+function runTasksParallel(tasks, cwd, dxkitDist, tmpDir, _verbose) {
+    // Write each task as a standalone Node script file, then run all via bash `&` + `wait`.
+    // This gives true OS-level parallelism without poll overhead.
+    const scriptPaths = [];
+    for (const task of tasks) {
+        const resultFile = path.join(tmpDir, `${task.name}.json`);
+        const workerScript = buildWorkerScript(task, cwd, resultFile);
+        const scriptPath = path.join(tmpDir, `${task.name}.js`);
+        fs.writeFileSync(scriptPath, workerScript);
+        scriptPaths.push(scriptPath);
+    }
+    // Bash script that backgrounds all node processes and waits
+    const bashLines = scriptPaths.map((sp) => `node '${sp}' &`);
+    bashLines.push('wait');
+    const bashScript = path.join(tmpDir, 'run-parallel.sh');
+    fs.writeFileSync(bashScript, '#!/bin/bash\n' + bashLines.join('\n') + '\n');
+    fs.chmodSync(bashScript, 0o755);
+    try {
+        (0, child_process_1.execSync)(bashScript, {
+            cwd: dxkitDist,
+            stdio: 'ignore',
+            timeout: 300000,
+            env: process.env,
+        });
+    }
+    catch {
+        // Timeout or error — still try to read whatever completed
+    }
+}
+function runTasksSequential(tasks, cwd, dxkitDist, tmpDir) {
+    for (const task of tasks) {
+        const resultFile = path.join(tmpDir, `${task.name}.json`);
+        const script = buildWorkerScript(task, cwd, resultFile);
+        try {
+            (0, child_process_1.execSync)(`node -e '${script.replace(/'/g, "'\\''")}'`, {
+                cwd: dxkitDist,
+                stdio: 'ignore',
+                timeout: 180000,
+            });
+        }
+        catch {
+            /* continue with next tool */
+        }
+    }
+}
+//# sourceMappingURL=parallel.js.map

package/dist/analyzers/tools/parallel.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"parallel.js","sourceRoot":"","sources":["../../../src/analyzers/tools/parallel.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AA4BA,oDAoFC;AAhHD;;;;;;;;;GASG;AACH,uCAAyB;AACzB,2CAA6B;AAC7B,uCAAyB;AACzB,iDAAyC;AAUzC;;;;GAIG;AACH,SAAgB,oBAAoB,CAAC,GAAW,EAAE,OAAO,GAAG,KAAK;IAC/D,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;IAEhD,MAAM,KAAK,GAAiB;QAC1B;YACE,IAAI,EAAE,MAAM;YACZ,UAAU,EAAE,QAAQ;YACpB,YAAY,EAAE,mBAAmB;SAClC;QACD;YACE,IAAI,EAAE,UAAU;YAChB,UAAU,EAAE,YAAY;YACxB,YAAY,EAAE,uBAAuB;SACtC;QACD;YACE,IAAI,EAAE,UAAU;YAChB,UAAU,EAAE,YAAY;YACxB,YAAY,EAAE,uBAAuB;SACtC;KACF,CAAC;IAEF,gEAAgE;IAChE,MAAM,OAAO,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC;IAC7B,MAAM,WAAW,GAAG,OAAO,IAAI,IAAI,GAAG,IAAI,GAAG,IAAI,CAAC;IAElD,IAAI,OAAO,IAAI,CAAC,WAAW,EAAE,CAAC;QAC5B,OAAO,CAAC,KAAK,CACX,4BAA4B,IAAI,CAAC,KAAK,CAAC,OAAO,GAAG,IAAI,GAAG,IAAI,CAAC,gCAAgC,CAC9F,CAAC;IACJ,CAAC;IAED,MAAM,MAAM,GAAG,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,WAAW,CAAC,CAAC,CAAC;IACnE,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAE7B,IAAI,WAAW,EAAE,CAAC;QAChB,gBAAgB,CAAC,KAAK,EAAE,GAAG,EAAE,SAAS,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC;IAC3D,CAAC;SAAM,CAAC;QACN,kBAAkB,CAAC,KAAK,EAAE,GAAG,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC;IACpD,CAAC;IAED,IAAI,OAAO,EAAE,CAAC;QACZ,MAAM,OAAO,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC,GAAG,IAAI,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;QAC7D,OAAO,CAAC,KAAK,CAAC,qCAAqC,OAAO,GAAG,CAAC,CAAC;IACjE,CAAC;IAED,oBAAoB;IACpB,MAAM,MAAM,GAA2B;QACrC,SAAS,EAAE,EAAE;QACb,gBAAgB,EAAE,EAAE;KACrB,CAAC;IAEF,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACtC,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,OAAO,CAAC,CAAC;QAC9D,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,EAAE,CAAC,YAAY,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;YACjD,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAA2B,CAAC;YAC1D,eAAe;YACf,IAAI,OAAO,CAAC,SAAS,EAAE,CAAC;gBACrB,MAAM,CAAC,SAAsB,CAAC,IAAI,CAAC,GAAG,OAAO,CAAC,SAAS,CAAC,CAAC;gBAC1D,OAAO,OAAO,CAAC,SAAS,CAAC;YAC3B,CAAC;YACD,IAAI,OAAO,CAAC,gBAAgB,EAAE,CAAC;gBAC5B,MAAM,CAAC,gBAA6B,CAAC,IAAI,CAAC,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAAC;gBACxE,OAAO,OAAO,CAAC,gBAAgB,CAAC;YAClC,CAAC;YACD,wBAAwB;YACxB,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;gBAC7C,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,SAAS,EAAE,CAAC;oBACjC,MAAkC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;gBAC7C,CAAC;YACH,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,oCAAoC;QACtC,CAAC;IACH,CAAC;IAED,UAAU;IACV,IAAI,CAAC;QACH,EAAE,CAAC,MAAM,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IACtD,CAAC;IAAC,MAAM,CAAC;QACP,YAAY;IACd,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,uFAAuF;AACvF,SAAS,iBAAiB,CAAC,IAAgB,EAAE,GAAW,EAAE,UAAkB;IAC1E,mFAAmF;IACnF,2FAA2F;IAC3F,+EAA+E;IAC/E,MAAM,aAAa,GAAG,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC;IAC/D,OAAO;;2BAEkB,aAAa,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC;yBACnC,IAAI,CAAC,YAAY,KAAK,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,KAAK,CAAC;qCAClC,UAAU;;qCAEV,UAAU;8BACjB,IAAI,CAAC,IAAI;;;GAGpC,CAAC;AACJ,CAAC;AAED,SAAS,gBAAgB,CACvB,KAAmB,EACnB,GAAW,EACX,SAAiB,EACjB,MAAc,EACd,QAAiB;IAEjB,wFAAwF;IACxF,8DAA8D;IAC9D,MAAM,WAAW,GAAa,EAAE,CAAC;IAEjC,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,IAAI,CAAC,IAAI,OAAO,CAAC,CAAC;QAC1D,MAAM,YAAY,GAAG,iBAAiB,CAAC,IAAI,EAAE,GAAG,EAAE,UAAU,CAAC,CAAC;QAC9D,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,IAAI,CAAC,IAAI,KAAK,CAAC,CAAC;QACxD,EAAE,CAAC,aAAa,CAAC,UAAU,EAAE,YAAY,CAAC,CAAC;QAC3C,WAAW,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IAC/B,CAAC;IAED,4DAA4D;IAC5D,MAAM,SAAS,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;IAC5D,SAAS,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACvB,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,iBAAiB,CAAC,CAAC;IACxD,EAAE,CAAC,aAAa,CAAC,UAAU,EAAE,eAAe,GAAG,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,CAAC;IAC5E,EAAE,CAAC,SAAS,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC;IAEhC,IAAI,CAAC;QACH,IAAA,wBAAQ,EAAC,UAAU,EAAE;YACnB,GAAG,EAAE,SAAS;YACd,KAAK,EAAE,QAAQ;YACf,OAAO,EAAE,MAAM;YACf,GAAG,EAAE,OAAO,CAAC,GAAG;SACjB,CAAC,CAAC;IACL,CAAC;IAAC,MAAM,CAAC;QACP,0DAA0D;IAC5D,CAAC;AACH,CAAC;AAED,SAAS,kBAAkB,CACzB,KAAmB,EACnB,GAAW,EACX,SAAiB,EACjB,MAAc;IAEd,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,IAAI,CAAC,IAAI,OAAO,CAAC,CAAC;QAC1D,MAAM,MAAM,GAAG,iBAAiB,CAAC,IAAI,EAAE,GAAG,EAAE,UAAU,CAAC,CAAC;QACxD,IAAI,CAAC;YACH,IAAA,wBAAQ,EAAC,YAAY,MAAM,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,GAAG,EAAE;gBACrD,GAAG,EAAE,SAAS;gBACd,KAAK,EAAE,QAAQ;gBACf,OAAO,EAAE,MAAM;aAChB,CAAC,CAAC;QACL,CAAC;QAAC,MAAM,CAAC;YACP,6BAA6B;QAC/B,CAAC;IACH,CAAC;AACH,CAAC"}

package/dist/analyzers/tools/runner.d.ts

@@ -0,0 +1,13 @@
+/** Run a command and return stdout. Returns empty string on failure. */
+export declare function run(cmd: string, cwd: string, timeoutMs?: number): string;
+/** Run a command and return the exit code. */
+export declare function runExitCode(cmd: string, cwd: string, timeoutMs?: number): number;
+/** Run a command and parse stdout as JSON. Returns null on failure. */
+export declare function runJSON<T>(cmd: string, cwd: string, timeoutMs?: number): T | null;
+/** Count lines in command output. */
+export declare function countLines(cmd: string, cwd: string): number;
+/** Check if a command is available. */
+export declare function commandExists(cmd: string, cwd: string): boolean;
+/** Check if a file exists relative to cwd. */
+export declare function fileExists(cwd: string, ...paths: string[]): boolean;
+//# sourceMappingURL=runner.d.ts.map

package/dist/analyzers/tools/runner.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"runner.d.ts","sourceRoot":"","sources":["../../../src/analyzers/tools/runner.ts"],"names":[],"mappings":"AAOA,wEAAwE;AACxE,wBAAgB,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,SAAS,SAAQ,GAAG,MAAM,CAgBvE;AAED,8CAA8C;AAC9C,wBAAgB,WAAW,CAAC,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,SAAS,SAAQ,GAAG,MAAM,CAY/E;AAED,uEAAuE;AACvE,wBAAgB,OAAO,CAAC,CAAC,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,SAAS,SAAQ,GAAG,CAAC,GAAG,IAAI,CAQhF;AAED,qCAAqC;AACrC,wBAAgB,UAAU,CAAC,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,MAAM,CAI3D;AAED,uCAAuC;AACvC,wBAAgB,aAAa,CAAC,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,OAAO,CAE/D;AAED,8CAA8C;AAC9C,wBAAgB,UAAU,CAAC,GAAG,EAAE,MAAM,EAAE,GAAG,KAAK,EAAE,MAAM,EAAE,GAAG,OAAO,CAEnE"}

package/dist/analyzers/tools/runner.js

@@ -0,0 +1,109 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.run = run;
+exports.runExitCode = runExitCode;
+exports.runJSON = runJSON;
+exports.countLines = countLines;
+exports.commandExists = commandExists;
+exports.fileExists = fileExists;
+/**
+ * Tool runner utilities -- safe command execution and output parsing.
+ */
+const child_process_1 = require("child_process");
+const fs = __importStar(require("fs"));
+const path = __importStar(require("path"));
+/** Run a command and return stdout. Returns empty string on failure. */
+function run(cmd, cwd, timeoutMs = 30000) {
+    try {
+        return (0, child_process_1.execSync)(cmd, {
+            cwd,
+            encoding: 'utf-8',
+            stdio: ['pipe', 'pipe', 'pipe'],
+            timeout: timeoutMs,
+        }).trim();
+    }
+    catch (err) {
+        // Some tools (npm audit) write valid output to stdout even on non-zero exit
+        const e = err;
+        if (e.stdout && typeof e.stdout === 'string') {
+            return e.stdout.trim();
+        }
+        return '';
+    }
+}
+/** Run a command and return the exit code. */
+function runExitCode(cmd, cwd, timeoutMs = 60000) {
+    try {
+        (0, child_process_1.execSync)(cmd, {
+            cwd,
+            stdio: ['pipe', 'pipe', 'pipe'],
+            timeout: timeoutMs,
+        });
+        return 0;
+    }
+    catch (err) {
+        const e = err;
+        return e.status ?? 1;
+    }
+}
+/** Run a command and parse stdout as JSON. Returns null on failure. */
+function runJSON(cmd, cwd, timeoutMs = 60000) {
+    const output = run(cmd, cwd, timeoutMs);
+    if (!output)
+        return null;
+    try {
+        return JSON.parse(output);
+    }
+    catch {
+        return null;
+    }
+}
+/** Count lines in command output. */
+function countLines(cmd, cwd) {
+    const output = run(cmd, cwd);
+    if (!output)
+        return 0;
+    return output.split('\n').filter((l) => l.trim()).length;
+}
+/** Check if a command is available. */
+function commandExists(cmd, cwd) {
+    return run(`which ${cmd} 2>/dev/null`, cwd) !== '';
+}
+/** Check if a file exists relative to cwd. */
+function fileExists(cwd, ...paths) {
+    return paths.some((p) => fs.existsSync(path.join(cwd, p)));
+}
+//# sourceMappingURL=runner.js.map

package/dist/analyzers/tools/runner.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"runner.js","sourceRoot":"","sources":["../../../src/analyzers/tools/runner.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAQA,kBAgBC;AAGD,kCAYC;AAGD,0BAQC;AAGD,gCAIC;AAGD,sCAEC;AAGD,gCAEC;AAnED;;GAEG;AACH,iDAAyC;AACzC,uCAAyB;AACzB,2CAA6B;AAE7B,wEAAwE;AACxE,SAAgB,GAAG,CAAC,GAAW,EAAE,GAAW,EAAE,SAAS,GAAG,KAAK;IAC7D,IAAI,CAAC;QACH,OAAO,IAAA,wBAAQ,EAAC,GAAG,EAAE;YACnB,GAAG;YACH,QAAQ,EAAE,OAAO;YACjB,KAAK,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC;YAC/B,OAAO,EAAE,SAAS;SACnB,CAAC,CAAC,IAAI,EAAE,CAAC;IACZ,CAAC;IAAC,OAAO,GAAY,EAAE,CAAC;QACtB,4EAA4E;QAC5E,MAAM,CAAC,GAAG,GAA0B,CAAC;QACrC,IAAI,CAAC,CAAC,MAAM,IAAI,OAAO,CAAC,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;YAC7C,OAAO,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;QACzB,CAAC;QACD,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED,8CAA8C;AAC9C,SAAgB,WAAW,CAAC,GAAW,EAAE,GAAW,EAAE,SAAS,GAAG,KAAK;IACrE,IAAI,CAAC;QACH,IAAA,wBAAQ,EAAC,GAAG,EAAE;YACZ,GAAG;YACH,KAAK,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC;YAC/B,OAAO,EAAE,SAAS;SACnB,CAAC,CAAC;QACH,OAAO,CAAC,CAAC;IACX,CAAC;IAAC,OAAO,GAAY,EAAE,CAAC;QACtB,MAAM,CAAC,GAAG,GAA0B,CAAC;QACrC,OAAO,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC;IACvB,CAAC;AACH,CAAC;AAED,uEAAuE;AACvE,SAAgB,OAAO,CAAI,GAAW,EAAE,GAAW,EAAE,SAAS,GAAG,KAAK;IACpE,MAAM,MAAM,GAAG,GAAG,CAAC,GAAG,EAAE,GAAG,EAAE,SAAS,CAAC,CAAC;IACxC,IAAI,CAAC,MAAM;QAAE,OAAO,IAAI,CAAC;IACzB,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,CAAM,CAAC;IACjC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,qCAAqC;AACrC,SAAgB,UAAU,CAAC,GAAW,EAAE,GAAW;IACjD,MAAM,MAAM,GAAG,GAAG,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;IAC7B,IAAI,CAAC,MAAM;QAAE,OAAO,CAAC,CAAC;IACtB,OAAO,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC;AAC3D,CAAC;AAED,uCAAuC;AACvC,SAAgB,aAAa,CAAC,GAAW,EAAE,GAAW;IACpD,OAAO,GAAG,CAAC,SAAS,GAAG,cAAc,EAAE,GAAG,CAAC,KAAK,EAAE,CAAC;AACrD,CAAC;AAED,8CAA8C;AAC9C,SAAgB,UAAU,CAAC,GAAW,EAAE,GAAG,KAAe;IACxD,OAAO,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;AAC7D,CAAC"}

package/dist/analyzers/tools/suppressions.d.ts

@@ -0,0 +1,55 @@
+/**
+ * User-defined suppressions for scanner findings.
+ *
+ * Reads `.dxkit-suppressions.json` at the repo root. Example:
+ *
+ *   {
+ *     "gitleaks": [
+ *       { "rule": "generic-api-key", "paths": ["test/fixtures/**"], "reason": "fake keys in fixtures" }
+ *     ],
+ *     "semgrep": [
+ *       { "rule": "*", "paths": ["scripts/migrations/**"], "reason": "legacy, grandfathered" }
+ *     ]
+ *   }
+ *
+ * A finding is suppressed when:
+ *   - its rule matches an entry's `rule` (exact string, or "*" as wildcard), AND
+ *   - its path matches at least one of the entry's `paths` globs.
+ *
+ * Globs support `**` (any path segments), `*` (any chars except `/`), and `?`.
+ * Leading `./` is normalized away.
+ */
+export interface SuppressionRule {
+    /** Rule ID to match, or "*" for any rule from this tool. */
+    rule: string;
+    /** Glob patterns (relative to repo root) — finding suppressed if any match. */
+    paths: string[];
+    /** Optional human-readable reason (surfaced in reports). */
+    reason?: string;
+}
+export interface Suppressions {
+    gitleaks: SuppressionRule[];
+    semgrep: SuppressionRule[];
+    slop: SuppressionRule[];
+}
+/** Load suppressions for a repo root, memoized. Returns empty suppressions if file is missing/malformed. */
+export declare function loadSuppressions(cwd: string): Suppressions;
+/** Clear memo — useful for tests. */
+export declare function clearSuppressionsCache(): void;
+/**
+ * Apply suppressions to a set of findings.
+ *
+ * Callers pass accessors (findings vary in shape across tools). Returns the
+ * kept findings plus a parallel list of suppressed findings with the matched
+ * reason annotated.
+ */
+export declare function applySuppressions<T>(findings: T[], rules: SuppressionRule[], getRule: (f: T) => string, getPath: (f: T) => string): {
+    kept: T[];
+    suppressed: Array<{
+        finding: T;
+        reason?: string;
+    }>;
+};
+/** Convert a glob pattern to an anchored regex. Supports `**`, `*`, `?`. */
+export declare function globToRegex(glob: string): RegExp;
+//# sourceMappingURL=suppressions.d.ts.map

package/dist/analyzers/tools/suppressions.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"suppressions.d.ts","sourceRoot":"","sources":["../../../src/analyzers/tools/suppressions.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAKH,MAAM,WAAW,eAAe;IAC9B,4DAA4D;IAC5D,IAAI,EAAE,MAAM,CAAC;IACb,+EAA+E;IAC/E,KAAK,EAAE,MAAM,EAAE,CAAC;IAChB,4DAA4D;IAC5D,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,YAAY;IAC3B,QAAQ,EAAE,eAAe,EAAE,CAAC;IAC5B,OAAO,EAAE,eAAe,EAAE,CAAC;IAC3B,IAAI,EAAE,eAAe,EAAE,CAAC;CACzB;AAMD,4GAA4G;AAC5G,wBAAgB,gBAAgB,CAAC,GAAG,EAAE,MAAM,GAAG,YAAY,CA4B1D;AAED,qCAAqC;AACrC,wBAAgB,sBAAsB,IAAI,IAAI,CAE7C;AAkBD;;;;;;GAMG;AACH,wBAAgB,iBAAiB,CAAC,CAAC,EACjC,QAAQ,EAAE,CAAC,EAAE,EACb,KAAK,EAAE,eAAe,EAAE,EACxB,OAAO,EAAE,CAAC,CAAC,EAAE,CAAC,KAAK,MAAM,EACzB,OAAO,EAAE,CAAC,CAAC,EAAE,CAAC,KAAK,MAAM,GACxB;IAAE,IAAI,EAAE,CAAC,EAAE,CAAC;IAAC,UAAU,EAAE,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC,CAAA;CAAE,CAiCnE;AAED,4EAA4E;AAC5E,wBAAgB,WAAW,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAuChD"}

package/dist/analyzers/tools/suppressions.js

@@ -0,0 +1,203 @@
+"use strict";
+/**
+ * User-defined suppressions for scanner findings.
+ *
+ * Reads `.dxkit-suppressions.json` at the repo root. Example:
+ *
+ *   {
+ *     "gitleaks": [
+ *       { "rule": "generic-api-key", "paths": ["test/fixtures/**"], "reason": "fake keys in fixtures" }
+ *     ],
+ *     "semgrep": [
+ *       { "rule": "*", "paths": ["scripts/migrations/**"], "reason": "legacy, grandfathered" }
+ *     ]
+ *   }
+ *
+ * A finding is suppressed when:
+ *   - its rule matches an entry's `rule` (exact string, or "*" as wildcard), AND
+ *   - its path matches at least one of the entry's `paths` globs.
+ *
+ * Globs support `**` (any path segments), `*` (any chars except `/`), and `?`.
+ * Leading `./` is normalized away.
+ */
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.loadSuppressions = loadSuppressions;
+exports.clearSuppressionsCache = clearSuppressionsCache;
+exports.applySuppressions = applySuppressions;
+exports.globToRegex = globToRegex;
+const fs = __importStar(require("fs"));
+const path = __importStar(require("path"));
+const EMPTY = { gitleaks: [], semgrep: [], slop: [] };
+const cache = new Map();
+/** Load suppressions for a repo root, memoized. Returns empty suppressions if file is missing/malformed. */
+function loadSuppressions(cwd) {
+    const hit = cache.get(cwd);
+    if (hit)
+        return hit;
+    const filePath = path.join(cwd, '.dxkit-suppressions.json');
+    let raw;
+    try {
+        raw = fs.readFileSync(filePath, 'utf-8');
+    }
+    catch {
+        cache.set(cwd, EMPTY);
+        return EMPTY;
+    }
+    let parsed;
+    try {
+        parsed = JSON.parse(raw);
+    }
+    catch {
+        cache.set(cwd, EMPTY);
+        return EMPTY;
+    }
+    const resolved = {
+        gitleaks: extractRules(parsed, 'gitleaks'),
+        semgrep: extractRules(parsed, 'semgrep'),
+        slop: extractRules(parsed, 'slop'),
+    };
+    cache.set(cwd, resolved);
+    return resolved;
+}
+/** Clear memo — useful for tests. */
+function clearSuppressionsCache() {
+    cache.clear();
+}
+function extractRules(parsed, key) {
+    if (!parsed || typeof parsed !== 'object')
+        return [];
+    const bucket = parsed[key];
+    if (!Array.isArray(bucket))
+        return [];
+    return bucket
+        .filter((e) => !!e && typeof e === 'object')
+        .map((e) => ({
+        rule: typeof e.rule === 'string' ? e.rule : '',
+        paths: Array.isArray(e.paths)
+            ? e.paths.filter((p) => typeof p === 'string')
+            : [],
+        reason: typeof e.reason === 'string' ? e.reason : undefined,
+    }))
+        .filter((r) => r.rule && r.paths.length > 0);
+}
+/**
+ * Apply suppressions to a set of findings.
+ *
+ * Callers pass accessors (findings vary in shape across tools). Returns the
+ * kept findings plus a parallel list of suppressed findings with the matched
+ * reason annotated.
+ */
+function applySuppressions(findings, rules, getRule, getPath) {
+    if (rules.length === 0)
+        return { kept: findings, suppressed: [] };
+    const compiled = rules.map((r) => ({
+        rule: r.rule,
+        regexes: r.paths.map(globToRegex),
+        reason: r.reason,
+    }));
+    const kept = [];
+    const suppressed = [];
+    for (const f of findings) {
+        const fRule = getRule(f);
+        const fPath = normalizePath(getPath(f));
+        let matched = null;
+        for (const c of compiled) {
+            if (c.rule !== '*' && c.rule !== fRule)
+                continue;
+            if (c.regexes.some((re) => re.test(fPath))) {
+                matched = { reason: c.reason };
+                break;
+            }
+        }
+        if (matched) {
+            suppressed.push({ finding: f, reason: matched.reason });
+        }
+        else {
+            kept.push(f);
+        }
+    }
+    return { kept, suppressed };
+}
+/** Convert a glob pattern to an anchored regex. Supports `**`, `*`, `?`. */
+function globToRegex(glob) {
+    let g = glob;
+    if (g.startsWith('./'))
+        g = g.slice(2);
+    let re = '';
+    let i = 0;
+    while (i < g.length) {
+        // leading or mid-path `**/` — optional path prefix
+        if (g.startsWith('**/', i)) {
+            re += '(?:.*/)?';
+            i += 3;
+            continue;
+        }
+        // trailing `/**` — optional path suffix
+        if (i + 3 === g.length && g.startsWith('/**', i)) {
+            re += '(?:/.*)?';
+            i += 3;
+            continue;
+        }
+        // bare `**` — any chars including slashes
+        if (g.startsWith('**', i)) {
+            re += '.*';
+            i += 2;
+            continue;
+        }
+        const c = g[i];
+        if (c === '*') {
+            re += '[^/]*';
+        }
+        else if (c === '?') {
+            re += '[^/]';
+        }
+        else if ('.+()|[]{}^$\\'.includes(c)) {
+            re += '\\' + c;
+        }
+        else {
+            re += c;
+        }
+        i++;
+    }
+    return new RegExp('^' + re + '$');
+}
+function normalizePath(p) {
+    let n = p.replace(/\\/g, '/');
+    if (n.startsWith('./'))
+        n = n.slice(2);
+    return n;
+}
+//# sourceMappingURL=suppressions.js.map

package/dist/analyzers/tools/suppressions.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"suppressions.js","sourceRoot":"","sources":["../../../src/analyzers/tools/suppressions.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAyBH,4CA4BC;AAGD,wDAEC;AAyBD,8CAsCC;AAGD,kCAuCC;AAjKD,uCAAyB;AACzB,2CAA6B;AAiB7B,MAAM,KAAK,GAAiB,EAAE,QAAQ,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC;AAEpE,MAAM,KAAK,GAAG,IAAI,GAAG,EAAwB,CAAC;AAE9C,4GAA4G;AAC5G,SAAgB,gBAAgB,CAAC,GAAW;IAC1C,MAAM,GAAG,GAAG,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IAC3B,IAAI,GAAG;QAAE,OAAO,GAAG,CAAC;IAEpB,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,0BAA0B,CAAC,CAAC;IAC5D,IAAI,GAAW,CAAC;IAChB,IAAI,CAAC;QACH,GAAG,GAAG,EAAE,CAAC,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;IAC3C,CAAC;IAAC,MAAM,CAAC;QACP,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;QACtB,OAAO,KAAK,CAAC;IACf,CAAC;IAED,IAAI,MAAe,CAAC;IACpB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC3B,CAAC;IAAC,MAAM,CAAC;QACP,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;QACtB,OAAO,KAAK,CAAC;IACf,CAAC;IAED,MAAM,QAAQ,GAAiB;QAC7B,QAAQ,EAAE,YAAY,CAAC,MAAM,EAAE,UAAU,CAAC;QAC1C,OAAO,EAAE,YAAY,CAAC,MAAM,EAAE,SAAS,CAAC;QACxC,IAAI,EAAE,YAAY,CAAC,MAAM,EAAE,MAAM,CAAC;KACnC,CAAC;IACF,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;IACzB,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,qCAAqC;AACrC,SAAgB,sBAAsB;IACpC,KAAK,CAAC,KAAK,EAAE,CAAC;AAChB,CAAC;AAED,SAAS,YAAY,CAAC,MAAe,EAAE,GAAW;IAChD,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ;QAAE,OAAO,EAAE,CAAC;IACrD,MAAM,MAAM,GAAI,MAAkC,CAAC,GAAG,CAAC,CAAC;IACxD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;QAAE,OAAO,EAAE,CAAC;IACtC,OAAO,MAAM;SACV,MAAM,CAAC,CAAC,CAAC,EAAgC,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,OAAO,CAAC,KAAK,QAAQ,CAAC;SACzE,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QACX,IAAI,EAAE,OAAO,CAAC,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE;QAC9C,KAAK,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC;YAC3B,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAe,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC;YAC3D,CAAC,CAAC,EAAE;QACN,MAAM,EAAE,OAAO,CAAC,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS;KAC5D,CAAC,CAAC;SACF,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;AACjD,CAAC;AAED;;;;;;GAMG;AACH,SAAgB,iBAAiB,CAC/B,QAAa,EACb,KAAwB,EACxB,OAAyB,EACzB,OAAyB;IAEzB,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,UAAU,EAAE,EAAE,EAAE,CAAC;IAElE,MAAM,QAAQ,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QACjC,IAAI,EAAE,CAAC,CAAC,IAAI;QACZ,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,WAAW,CAAC;QACjC,MAAM,EAAE,CAAC,CAAC,MAAM;KACjB,CAAC,CAAC,CAAC;IAEJ,MAAM,IAAI,GAAQ,EAAE,CAAC;IACrB,MAAM,UAAU,GAA2C,EAAE,CAAC;IAE9D,KAAK,MAAM,CAAC,IAAI,QAAQ,EAAE,CAAC;QACzB,MAAM,KAAK,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;QACzB,MAAM,KAAK,GAAG,aAAa,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC;QACxC,IAAI,OAAO,GAA+B,IAAI,CAAC;QAE/C,KAAK,MAAM,CAAC,IAAI,QAAQ,EAAE,CAAC;YACzB,IAAI,CAAC,CAAC,IAAI,KAAK,GAAG,IAAI,CAAC,CAAC,IAAI,KAAK,KAAK;gBAAE,SAAS;YACjD,IAAI,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC;gBAC3C,OAAO,GAAG,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC;gBAC/B,MAAM;YACR,CAAC;QACH,CAAC;QAED,IAAI,OAAO,EAAE,CAAC;YACZ,UAAU,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;QAC1D,CAAC;aAAM,CAAC;YACN,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACf,CAAC;IACH,CAAC;IAED,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC;AAC9B,CAAC;AAED,4EAA4E;AAC5E,SAAgB,WAAW,CAAC,IAAY;IACtC,IAAI,CAAC,GAAG,IAAI,CAAC;IACb,IAAI,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IAEvC,IAAI,EAAE,GAAG,EAAE,CAAC;IACZ,IAAI,CAAC,GAAG,CAAC,CAAC;IACV,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC;QACpB,mDAAmD;QACnD,IAAI,CAAC,CAAC,UAAU,CAAC,KAAK,EAAE,CAAC,CAAC,EAAE,CAAC;YAC3B,EAAE,IAAI,UAAU,CAAC;YACjB,CAAC,IAAI,CAAC,CAAC;YACP,SAAS;QACX,CAAC;QACD,wCAAwC;QACxC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,UAAU,CAAC,KAAK,EAAE,CAAC,CAAC,EAAE,CAAC;YACjD,EAAE,IAAI,UAAU,CAAC;YACjB,CAAC,IAAI,CAAC,CAAC;YACP,SAAS;QACX,CAAC;QACD,0CAA0C;QAC1C,IAAI,CAAC,CAAC,UAAU,CAAC,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC;YAC1B,EAAE,IAAI,IAAI,CAAC;YACX,CAAC,IAAI,CAAC,CAAC;YACP,SAAS;QACX,CAAC;QAED,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;QACf,IAAI,CAAC,KAAK,GAAG,EAAE,CAAC;YACd,EAAE,IAAI,OAAO,CAAC;QAChB,CAAC;aAAM,IAAI,CAAC,KAAK,GAAG,EAAE,CAAC;YACrB,EAAE,IAAI,MAAM,CAAC;QACf,CAAC;aAAM,IAAI,eAAe,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC;YACvC,EAAE,IAAI,IAAI,GAAG,CAAC,CAAC;QACjB,CAAC;aAAM,CAAC;YACN,EAAE,IAAI,CAAC,CAAC;QACV,CAAC;QACD,CAAC,EAAE,CAAC;IACN,CAAC;IACD,OAAO,IAAI,MAAM,CAAC,GAAG,GAAG,EAAE,GAAG,GAAG,CAAC,CAAC;AACpC,CAAC;AAED,SAAS,aAAa,CAAC,CAAS;IAC9B,IAAI,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;IAC9B,IAAI,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IACvC,OAAO,CAAC,CAAC;AACX,CAAC"}

package/dist/analyzers/tools/timing.d.ts

@@ -0,0 +1,9 @@
+/**
+ * Timing helper for --verbose output.
+ *
+ * Wrap a gather call to print per-tool elapsed time to stderr when verbose.
+ * Stdout stays clean so --json output is unaffected.
+ */
+export declare function timed<T>(name: string, verbose: boolean, fn: () => T): T;
+export declare function timedAsync<T>(name: string, verbose: boolean, fn: () => Promise<T>): Promise<T>;
+//# sourceMappingURL=timing.d.ts.map

package/dist/analyzers/tools/timing.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"timing.d.ts","sourceRoot":"","sources":["../../../src/analyzers/tools/timing.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,wBAAgB,KAAK,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,EAAE,EAAE,MAAM,CAAC,GAAG,CAAC,CAOvE;AAED,wBAAsB,UAAU,CAAC,CAAC,EAChC,IAAI,EAAE,MAAM,EACZ,OAAO,EAAE,OAAO,EAChB,EAAE,EAAE,MAAM,OAAO,CAAC,CAAC,CAAC,GACnB,OAAO,CAAC,CAAC,CAAC,CAOZ"}

package/dist/analyzers/tools/timing.js

@@ -0,0 +1,29 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.timed = timed;
+exports.timedAsync = timedAsync;
+/**
+ * Timing helper for --verbose output.
+ *
+ * Wrap a gather call to print per-tool elapsed time to stderr when verbose.
+ * Stdout stays clean so --json output is unaffected.
+ */
+function timed(name, verbose, fn) {
+    if (!verbose)
+        return fn();
+    const start = Date.now();
+    const result = fn();
+    const elapsed = ((Date.now() - start) / 1000).toFixed(2);
+    process.stderr.write(`  [timing] ${name.padEnd(18)} ${elapsed}s\n`);
+    return result;
+}
+async function timedAsync(name, verbose, fn) {
+    if (!verbose)
+        return fn();
+    const start = Date.now();
+    const result = await fn();
+    const elapsed = ((Date.now() - start) / 1000).toFixed(2);
+    process.stderr.write(`  [timing] ${name.padEnd(18)} ${elapsed}s\n`);
+    return result;
+}
+//# sourceMappingURL=timing.js.map

package/dist/analyzers/tools/timing.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"timing.js","sourceRoot":"","sources":["../../../src/analyzers/tools/timing.ts"],"names":[],"mappings":";;AAMA,sBAOC;AAED,gCAWC;AA1BD;;;;;GAKG;AACH,SAAgB,KAAK,CAAI,IAAY,EAAE,OAAgB,EAAE,EAAW;IAClE,IAAI,CAAC,OAAO;QAAE,OAAO,EAAE,EAAE,CAAC;IAC1B,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACzB,MAAM,MAAM,GAAG,EAAE,EAAE,CAAC;IACpB,MAAM,OAAO,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,CAAC,GAAG,IAAI,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;IACzD,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,cAAc,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,OAAO,KAAK,CAAC,CAAC;IACpE,OAAO,MAAM,CAAC;AAChB,CAAC;AAEM,KAAK,UAAU,UAAU,CAC9B,IAAY,EACZ,OAAgB,EAChB,EAAoB;IAEpB,IAAI,CAAC,OAAO;QAAE,OAAO,EAAE,EAAE,CAAC;IAC1B,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACzB,MAAM,MAAM,GAAG,MAAM,EAAE,EAAE,CAAC;IAC1B,MAAM,OAAO,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,CAAC,GAAG,IAAI,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;IACzD,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,cAAc,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,OAAO,KAAK,CAAC,CAAC;IACpE,OAAO,MAAM,CAAC;AAChB,CAAC"}