@vyuhlabs/dxkit 1.6.0 → 2.0.0

package/dist/analyzers/tools/node.js

@@ -0,0 +1,160 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.gatherNodeMetrics = gatherNodeMetrics;
+const runner_1 = require("./runner");
+/** Gather Node.js-specific metrics. */
+function gatherNodeMetrics(cwd) {
+    const metrics = {
+        toolsUsed: [],
+        toolsUnavailable: [],
+    };
+    // ESLint — pick the right binary and config format, skip gracefully if mismatched
+    const eslintStatus = runEslint(cwd);
+    if (eslintStatus.ran) {
+        metrics.lintErrors = eslintStatus.errors;
+        metrics.lintWarnings = eslintStatus.warnings;
+        metrics.lintTool = 'eslint';
+        metrics.toolsUsed.push('eslint');
+    }
+    else {
+        metrics.toolsUnavailable.push(`eslint (${eslintStatus.reason})`);
+    }
+    // npm audit -- handles both v1 and v2+ formats
+    // npm audit may exit non-zero when vulnerabilities exist, so use run() which catches errors
+    // Don't redirect stderr to /dev/null — some versions write JSON to stderr
+    const auditRaw = (0, runner_1.run)('npm audit --json 2>&1', cwd, 60000);
+    if (auditRaw) {
+        try {
+            const auditData = JSON.parse(auditRaw);
+            let critical = 0, high = 0, medium = 0, low = 0;
+            if (auditData.metadata?.vulnerabilities) {
+                const v = auditData.metadata.vulnerabilities;
+                critical = v.critical || 0;
+                high = v.high || 0;
+                medium = v.moderate || 0;
+                low = v.low || 0;
+            }
+            else if (auditData.vulnerabilities) {
+                for (const v of Object.values(auditData.vulnerabilities)) {
+                    if (v.severity === 'critical')
+                        critical++;
+                    else if (v.severity === 'high')
+                        high++;
+                    else if (v.severity === 'moderate')
+                        medium++;
+                    else if (v.severity === 'low')
+                        low++;
+                }
+            }
+            metrics.depVulnCritical = critical;
+            metrics.depVulnHigh = high;
+            metrics.depVulnMedium = medium;
+            metrics.depVulnLow = low;
+            metrics.depAuditTool = 'npm-audit';
+            metrics.toolsUsed.push('npm-audit');
+        }
+        catch {
+            metrics.toolsUnavailable.push('npm-audit (parse error)');
+        }
+    }
+    else {
+        metrics.toolsUnavailable.push('npm-audit');
+    }
+    // Test runner detection (detect framework but don't run tests -- too slow for health audit)
+    const testScript = (0, runner_1.run)("node -e \"const p=require('./package.json'); console.log(p.scripts?.test || '')\" 2>/dev/null", cwd);
+    if (testScript && testScript !== 'echo "Error: no test specified" && exit 1') {
+        let framework = 'unknown';
+        if (testScript.includes('vitest'))
+            framework = 'vitest';
+        else if (testScript.includes('jest'))
+            framework = 'jest';
+        else if (testScript.includes('mocha') || testScript.includes('lb-mocha'))
+            framework = 'mocha';
+        else if (testScript.includes('ava'))
+            framework = 'ava';
+        else if (testScript.includes('tap'))
+            framework = 'tap';
+        metrics.testFramework = framework;
+    }
+    // npm scripts count
+    const scriptsOutput = (0, runner_1.run)('node -e "const p=require(\'./package.json\'); console.log(Object.keys(p.scripts||{}).length)" 2>/dev/null', cwd);
+    metrics.npmScriptsCount = parseInt(scriptsOutput) || 0;
+    // Node engine
+    const engineOutput = (0, runner_1.run)("node -e \"const p=require('./package.json'); console.log(p.engines?.node || '')\" 2>/dev/null", cwd);
+    if (engineOutput) {
+        metrics.nodeEngineVersion = engineOutput;
+    }
+    return metrics;
+}
+/**
+ * Run eslint with config-aware binary selection and graceful failure.
+ *
+ * Compatibility matrix:
+ * - ESLint v9+: needs eslint.config.{js,mjs,cjs,ts} (flat config)
+ * - ESLint v8: needs .eslintrc.{js,json,yml,yaml,cjs}
+ * - LoopBack projects: use lb-eslint binary with embedded config
+ */
+function runEslint(cwd) {
+    // Prefer lb-eslint if present (LoopBack embeds its own config)
+    const lbEslintPath = 'node_modules/.bin/lb-eslint';
+    const eslintPath = 'node_modules/.bin/eslint';
+    const hasLbEslint = (0, runner_1.fileExists)(cwd, lbEslintPath);
+    const hasEslint = (0, runner_1.fileExists)(cwd, eslintPath);
+    if (!hasLbEslint && !hasEslint) {
+        return { ran: false, errors: 0, warnings: 0, reason: 'not installed' };
+    }
+    // Detect config format
+    const hasFlatConfig = (0, runner_1.fileExists)(cwd, 'eslint.config.js', 'eslint.config.mjs', 'eslint.config.cjs', 'eslint.config.ts');
+    const hasLegacyConfig = (0, runner_1.fileExists)(cwd, '.eslintrc', '.eslintrc.js', '.eslintrc.json', '.eslintrc.yml', '.eslintrc.yaml', '.eslintrc.cjs');
+    // Get eslint version to check compatibility
+    const binToCheck = hasEslint ? `./${eslintPath}` : `./${lbEslintPath}`;
+    const versionOutput = (0, runner_1.run)(`${binToCheck} --version 2>/dev/null`, cwd);
+    const majorMatch = versionOutput.match(/v?(\d+)/);
+    const major = majorMatch ? parseInt(majorMatch[1]) : 0;
+    // Config compatibility check
+    if (major >= 9 && !hasFlatConfig) {
+        // v9+ needs flat config
+        if (hasLbEslint) {
+            // lb-eslint may provide its own config; try it
+            // (fall through to actual run)
+        }
+        else if (hasLegacyConfig) {
+            return {
+                ran: false,
+                errors: 0,
+                warnings: 0,
+                reason: `v${major} but project uses legacy .eslintrc`,
+            };
+        }
+        else {
+            return {
+                ran: false,
+                errors: 0,
+                warnings: 0,
+                reason: 'no eslint config found',
+            };
+        }
+    }
+    // Prefer lb-eslint first if available, then standard eslint
+    const bins = hasLbEslint ? [`./${lbEslintPath}`, `./${eslintPath}`] : [`./${eslintPath}`];
+    for (const bin of bins) {
+        if (!(0, runner_1.fileExists)(cwd, bin.replace('./', '')))
+            continue;
+        const result = (0, runner_1.runJSON)(`${bin} . --format json 2>/dev/null`, cwd, 120000);
+        if (result && Array.isArray(result)) {
+            let errors = 0;
+            let warnings = 0;
+            for (const file of result) {
+                for (const msg of file.messages || []) {
+                    if (msg.severity === 2)
+                        errors++;
+                    else
+                        warnings++;
+                }
+            }
+            return { ran: true, errors, warnings, reason: '' };
+        }
+    }
+    return { ran: false, errors: 0, warnings: 0, reason: 'config error' };
+}
+//# sourceMappingURL=node.js.map

package/dist/analyzers/tools/node.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"node.js","sourceRoot":"","sources":["../../../src/analyzers/tools/node.ts"],"names":[],"mappings":";;AAsBA,8CAwFC;AAzGD,qCAAoD;AAgBpD,uCAAuC;AACvC,SAAgB,iBAAiB,CAAC,GAAW;IAC3C,MAAM,OAAO,GAA2B;QACtC,SAAS,EAAE,EAAE;QACb,gBAAgB,EAAE,EAAE;KACrB,CAAC;IAEF,kFAAkF;IAClF,MAAM,YAAY,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC;IACpC,IAAI,YAAY,CAAC,GAAG,EAAE,CAAC;QACrB,OAAO,CAAC,UAAU,GAAG,YAAY,CAAC,MAAM,CAAC;QACzC,OAAO,CAAC,YAAY,GAAG,YAAY,CAAC,QAAQ,CAAC;QAC7C,OAAO,CAAC,QAAQ,GAAG,QAAQ,CAAC;QAC5B,OAAO,CAAC,SAAU,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IACpC,CAAC;SAAM,CAAC;QACN,OAAO,CAAC,gBAAiB,CAAC,IAAI,CAAC,WAAW,YAAY,CAAC,MAAM,GAAG,CAAC,CAAC;IACpE,CAAC;IAED,+CAA+C;IAC/C,4FAA4F;IAC5F,0EAA0E;IAC1E,MAAM,QAAQ,GAAG,IAAA,YAAG,EAAC,uBAAuB,EAAE,GAAG,EAAE,KAAK,CAAC,CAAC;IAC1D,IAAI,QAAQ,EAAE,CAAC;QACb,IAAI,CAAC;YACH,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAsB,CAAC;YAC5D,IAAI,QAAQ,GAAG,CAAC,EACd,IAAI,GAAG,CAAC,EACR,MAAM,GAAG,CAAC,EACV,GAAG,GAAG,CAAC,CAAC;YAEV,IAAI,SAAS,CAAC,QAAQ,EAAE,eAAe,EAAE,CAAC;gBACxC,MAAM,CAAC,GAAG,SAAS,CAAC,QAAQ,CAAC,eAAe,CAAC;gBAC7C,QAAQ,GAAG,CAAC,CAAC,QAAQ,IAAI,CAAC,CAAC;gBAC3B,IAAI,GAAG,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC;gBACnB,MAAM,GAAG,CAAC,CAAC,QAAQ,IAAI,CAAC,CAAC;gBACzB,GAAG,GAAG,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;YACnB,CAAC;iBAAM,IAAI,SAAS,CAAC,eAAe,EAAE,CAAC;gBACrC,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,eAAe,CAAC,EAAE,CAAC;oBACzD,IAAI,CAAC,CAAC,QAAQ,KAAK,UAAU;wBAAE,QAAQ,EAAE,CAAC;yBACrC,IAAI,CAAC,CAAC,QAAQ,KAAK,MAAM;wBAAE,IAAI,EAAE,CAAC;yBAClC,IAAI,CAAC,CAAC,QAAQ,KAAK,UAAU;wBAAE,MAAM,EAAE,CAAC;yBACxC,IAAI,CAAC,CAAC,QAAQ,KAAK,KAAK;wBAAE,GAAG,EAAE,CAAC;gBACvC,CAAC;YACH,CAAC;YACD,OAAO,CAAC,eAAe,GAAG,QAAQ,CAAC;YACnC,OAAO,CAAC,WAAW,GAAG,IAAI,CAAC;YAC3B,OAAO,CAAC,aAAa,GAAG,MAAM,CAAC;YAC/B,OAAO,CAAC,UAAU,GAAG,GAAG,CAAC;YACzB,OAAO,CAAC,YAAY,GAAG,WAAW,CAAC;YACnC,OAAO,CAAC,SAAU,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QACvC,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,CAAC,gBAAiB,CAAC,IAAI,CAAC,yBAAyB,CAAC,CAAC;QAC5D,CAAC;IACH,CAAC;SAAM,CAAC;QACN,OAAO,CAAC,gBAAiB,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;IAC9C,CAAC;IAED,4FAA4F;IAC5F,MAAM,UAAU,GAAG,IAAA,YAAG,EACpB,+FAA+F,EAC/F,GAAG,CACJ,CAAC;IACF,IAAI,UAAU,IAAI,UAAU,KAAK,2CAA2C,EAAE,CAAC;QAC7E,IAAI,SAAS,GAAG,SAAS,CAAC;QAC1B,IAAI,UAAU,CAAC,QAAQ,CAAC,QAAQ,CAAC;YAAE,SAAS,GAAG,QAAQ,CAAC;aACnD,IAAI,UAAU,CAAC,QAAQ,CAAC,MAAM,CAAC;YAAE,SAAS,GAAG,MAAM,CAAC;aACpD,IAAI,UAAU,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,UAAU,CAAC,QAAQ,CAAC,UAAU,CAAC;YAAE,SAAS,GAAG,OAAO,CAAC;aACzF,IAAI,UAAU,CAAC,QAAQ,CAAC,KAAK,CAAC;YAAE,SAAS,GAAG,KAAK,CAAC;aAClD,IAAI,UAAU,CAAC,QAAQ,CAAC,KAAK,CAAC;YAAE,SAAS,GAAG,KAAK,CAAC;QACvD,OAAO,CAAC,aAAa,GAAG,SAAS,CAAC;IACpC,CAAC;IAED,oBAAoB;IACpB,MAAM,aAAa,GAAG,IAAA,YAAG,EACvB,2GAA2G,EAC3G,GAAG,CACJ,CAAC;IACF,OAAO,CAAC,eAAe,GAAG,QAAQ,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC;IAEvD,cAAc;IACd,MAAM,YAAY,GAAG,IAAA,YAAG,EACtB,+FAA+F,EAC/F,GAAG,CACJ,CAAC;IACF,IAAI,YAAY,EAAE,CAAC;QACjB,OAAO,CAAC,iBAAiB,GAAG,YAAY,CAAC;IAC3C,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC;AASD;;;;;;;GAOG;AACH,SAAS,SAAS,CAAC,GAAW;IAC5B,+DAA+D;IAC/D,MAAM,YAAY,GAAG,6BAA6B,CAAC;IACnD,MAAM,UAAU,GAAG,0BAA0B,CAAC;IAE9C,MAAM,WAAW,GAAG,IAAA,mBAAU,EAAC,GAAG,EAAE,YAAY,CAAC,CAAC;IAClD,MAAM,SAAS,GAAG,IAAA,mBAAU,EAAC,GAAG,EAAE,UAAU,CAAC,CAAC;IAE9C,IAAI,CAAC,WAAW,IAAI,CAAC,SAAS,EAAE,CAAC;QAC/B,OAAO,EAAE,GAAG,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,EAAE,QAAQ,EAAE,CAAC,EAAE,MAAM,EAAE,eAAe,EAAE,CAAC;IACzE,CAAC;IAED,uBAAuB;IACvB,MAAM,aAAa,GAAG,IAAA,mBAAU,EAC9B,GAAG,EACH,kBAAkB,EAClB,mBAAmB,EACnB,mBAAmB,EACnB,kBAAkB,CACnB,CAAC;IACF,MAAM,eAAe,GAAG,IAAA,mBAAU,EAChC,GAAG,EACH,WAAW,EACX,cAAc,EACd,gBAAgB,EAChB,eAAe,EACf,gBAAgB,EAChB,eAAe,CAChB,CAAC;IAEF,4CAA4C;IAC5C,MAAM,UAAU,GAAG,SAAS,CAAC,CAAC,CAAC,KAAK,UAAU,EAAE,CAAC,CAAC,CAAC,KAAK,YAAY,EAAE,CAAC;IACvE,MAAM,aAAa,GAAG,IAAA,YAAG,EAAC,GAAG,UAAU,wBAAwB,EAAE,GAAG,CAAC,CAAC;IACtE,MAAM,UAAU,GAAG,aAAa,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;IAClD,MAAM,KAAK,GAAG,UAAU,CAAC,CAAC,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAEvD,6BAA6B;IAC7B,IAAI,KAAK,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,CAAC;QACjC,wBAAwB;QACxB,IAAI,WAAW,EAAE,CAAC;YAChB,+CAA+C;YAC/C,+BAA+B;QACjC,CAAC;aAAM,IAAI,eAAe,EAAE,CAAC;YAC3B,OAAO;gBACL,GAAG,EAAE,KAAK;gBACV,MAAM,EAAE,CAAC;gBACT,QAAQ,EAAE,CAAC;gBACX,MAAM,EAAE,IAAI,KAAK,oCAAoC;aACtD,CAAC;QACJ,CAAC;aAAM,CAAC;YACN,OAAO;gBACL,GAAG,EAAE,KAAK;gBACV,MAAM,EAAE,CAAC;gBACT,QAAQ,EAAE,CAAC;gBACX,MAAM,EAAE,wBAAwB;aACjC,CAAC;QACJ,CAAC;IACH,CAAC;IAED,4DAA4D;IAC5D,MAAM,IAAI,GAAG,WAAW,CAAC,CAAC,CAAC,CAAC,KAAK,YAAY,EAAE,EAAE,KAAK,UAAU,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,UAAU,EAAE,CAAC,CAAC;IAE1F,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,IAAI,CAAC,IAAA,mBAAU,EAAC,GAAG,EAAE,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;YAAE,SAAS;QACtD,MAAM,MAAM,GAAG,IAAA,gBAAO,EAAqB,GAAG,GAAG,8BAA8B,EAAE,GAAG,EAAE,MAAM,CAAC,CAAC;QAC9F,IAAI,MAAM,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;YACpC,IAAI,MAAM,GAAG,CAAC,CAAC;YACf,IAAI,QAAQ,GAAG,CAAC,CAAC;YACjB,KAAK,MAAM,IAAI,IAAI,MAAM,EAAE,CAAC;gBAC1B,KAAK,MAAM,GAAG,IAAI,IAAI,CAAC,QAAQ,IAAI,EAAE,EAAE,CAAC;oBACtC,IAAI,GAAG,CAAC,QAAQ,KAAK,CAAC;wBAAE,MAAM,EAAE,CAAC;;wBAC5B,QAAQ,EAAE,CAAC;gBAClB,CAAC;YACH,CAAC;YACD,OAAO,EAAE,GAAG,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;QACrD,CAAC;IACH,CAAC;IAED,OAAO,EAAE,GAAG,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,EAAE,QAAQ,EAAE,CAAC,EAAE,MAAM,EAAE,cAAc,EAAE,CAAC;AACxE,CAAC"}

package/dist/analyzers/tools/package-json.d.ts

@@ -0,0 +1,6 @@
+export interface PackageJsonMetrics {
+    npmScriptsCount: number;
+    nodeEngineVersion: string | null;
+}
+export declare function gatherPackageJsonMetrics(cwd: string): PackageJsonMetrics;
+//# sourceMappingURL=package-json.d.ts.map

package/dist/analyzers/tools/package-json.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"package-json.d.ts","sourceRoot":"","sources":["../../../src/analyzers/tools/package-json.ts"],"names":[],"mappings":"AAkBA,MAAM,WAAW,kBAAkB;IACjC,eAAe,EAAE,MAAM,CAAC;IACxB,iBAAiB,EAAE,MAAM,GAAG,IAAI,CAAC;CAClC;AAED,wBAAgB,wBAAwB,CAAC,GAAG,EAAE,MAAM,GAAG,kBAAkB,CAcxE"}

package/dist/analyzers/tools/package-json.js

@@ -0,0 +1,67 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.gatherPackageJsonMetrics = gatherPackageJsonMetrics;
+/**
+ * `package.json`-derived metrics — the two TypeScript-only signals that
+ * don't fit the capability model (every capability is language-agnostic
+ * by design; npm scripts and Node engine pins are Node-specific by
+ * definition).
+ *
+ * Phase 10e.C.5 extracted these from `typescript.ts:gatherMetrics` when
+ * the legacy Layer 1 channel was retired. The helper replaces the prior
+ * `node -e "require('./package.json')..."` subprocess pair with a single
+ * `fs.readFileSync` + `JSON.parse`.
+ *
+ * Absent or unparseable `package.json` returns the zero / null pair —
+ * the scoring dimensions treat that as "no scripts" / "no engine pinned"
+ * rather than as a distinct missing-data state.
+ */
+const fs = __importStar(require("fs"));
+const path = __importStar(require("path"));
+function gatherPackageJsonMetrics(cwd) {
+    try {
+        const raw = fs.readFileSync(path.join(cwd, 'package.json'), 'utf-8');
+        const pkg = JSON.parse(raw);
+        return {
+            npmScriptsCount: pkg.scripts ? Object.keys(pkg.scripts).length : 0,
+            nodeEngineVersion: pkg.engines?.node ?? null,
+        };
+    }
+    catch {
+        return { npmScriptsCount: 0, nodeEngineVersion: null };
+    }
+}
+//# sourceMappingURL=package-json.js.map

package/dist/analyzers/tools/package-json.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"package-json.js","sourceRoot":"","sources":["../../../src/analyzers/tools/package-json.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAuBA,4DAcC;AArCD;;;;;;;;;;;;;;GAcG;AACH,uCAAyB;AACzB,2CAA6B;AAO7B,SAAgB,wBAAwB,CAAC,GAAW;IAClD,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,cAAc,CAAC,EAAE,OAAO,CAAC,CAAC;QACrE,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAGzB,CAAC;QACF,OAAO;YACL,eAAe,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;YAClE,iBAAiB,EAAE,GAAG,CAAC,OAAO,EAAE,IAAI,IAAI,IAAI;SAC7C,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,eAAe,EAAE,CAAC,EAAE,iBAAiB,EAAE,IAAI,EAAE,CAAC;IACzD,CAAC;AACH,CAAC"}

package/dist/analyzers/tools/parallel.d.ts

@@ -1,8 +1,25 @@
-import { HealthMetrics } from '../types';
 /**
- * Run cloc + gitleaks + graphify gather functions in parallel child processes.
- * Each child calls the real gather function from the existing tool module.
- * Falls back to sequential on low memory (<1GB free).
+ * Layer 2 orchestrator — populates the non-capability slice of
+ * `HealthMetrics` (cloc-derived `sourceFiles` / `totalLines` /
+ * `clocLanguages`) and contributes tool-availability strings to
+ * `toolsUsed` / `toolsUnavailable` for gitleaks and graphify.
+ *
+ * Phase 10e.C.7 narrowed `HealthMetrics` to drop every capability-owned
+ * field; the secret findings and structural stats that this file used to
+ * reshape now live exclusively under `HealthReport.capabilities`. What
+ * remains is the tool-name surface users see in reports.
+ *
+ * Phase 10e.C.3 replaced the prior child-process + bash orchestration
+ * with direct in-process calls to the memoized outcome helpers
+ * (`gatherGitleaksResult`, `gatherGraphifyResult`); the capability
+ * dispatcher's later `SECRETS` / `STRUCTURAL` calls in
+ * `gatherCapabilityReport` hit cached outcomes, so each tool runs
+ * exactly once per analyzer run.
+ *
+ * Keeps the sync signature — callers in `analyzers/health.ts` wrap with
+ * `timed()`, not `timedAsync()`. Tool-name strings are byte-identical to
+ * pre-C.7, including the exact `toolsUnavailable` phrasings.
  */
-export declare function gatherLayer2Parallel(cwd: string, verbose?: boolean): Partial<HealthMetrics>;
+import { HealthMetrics } from '../types';
+export declare function gatherLayer2Parallel(cwd: string, _verbose?: boolean): Partial<HealthMetrics>;
 //# sourceMappingURL=parallel.d.ts.map

package/dist/analyzers/tools/parallel.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"parallel.d.ts","sourceRoot":"","sources":["../../../src/analyzers/tools/parallel.ts"],"names":[],"mappings":"AAcA,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AASzC;;;;GAIG;AACH,wBAAgB,oBAAoB,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO,UAAQ,GAAG,OAAO,CAAC,aAAa,CAAC,CAoFzF"}
+{"version":3,"file":"parallel.d.ts","sourceRoot":"","sources":["../../../src/analyzers/tools/parallel.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAKzC,wBAAgB,oBAAoB,CAAC,GAAG,EAAE,MAAM,EAAE,QAAQ,UAAQ,GAAG,OAAO,CAAC,aAAa,CAAC,CAgC1F"}

package/dist/analyzers/tools/parallel.js

@@ -1,195 +1,36 @@
 "use strict";
-var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    var desc = Object.getOwnPropertyDescriptor(m, k);
-    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
-      desc = { enumerable: true, get: function() { return m[k]; } };
-    }
-    Object.defineProperty(o, k2, desc);
-}) : (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    o[k2] = m[k];
-}));
-var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
-    Object.defineProperty(o, "default", { enumerable: true, value: v });
-}) : function(o, v) {
-    o["default"] = v;
-});
-var __importStar = (this && this.__importStar) || (function () {
-    var ownKeys = function(o) {
-        ownKeys = Object.getOwnPropertyNames || function (o) {
-            var ar = [];
-            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
-            return ar;
-        };
-        return ownKeys(o);
-    };
-    return function (mod) {
-        if (mod && mod.__esModule) return mod;
-        var result = {};
-        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
-        __setModuleDefault(result, mod);
-        return result;
-    };
-})();
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.gatherLayer2Parallel = gatherLayer2Parallel;
-/**
- * Parallel tool execution — run Layer 2 gather functions concurrently
- * by forking child processes that call the EXISTING gather functions.
- *
- * Each child process requires the built dist/ module and calls the same
- * gather function that sequential mode uses. NO duplicated invocation logic.
- *
- * Architecture rule (CLAUDE.md #2): each tool has ONE gather function.
- * This module orchestrates, never reimplements.
- */
-const fs = __importStar(require("fs"));
-const path = __importStar(require("path"));
-const os = __importStar(require("os"));
-const child_process_1 = require("child_process");
-/**
- * Run cloc + gitleaks + graphify gather functions in parallel child processes.
- * Each child calls the real gather function from the existing tool module.
- * Falls back to sequential on low memory (<1GB free).
- */
-function gatherLayer2Parallel(cwd, verbose = false) {
-    const dxkitDist = path.resolve(__dirname, '..');
-    const tasks = [
-        {
-            name: 'cloc',
-            modulePath: './cloc',
-            functionName: 'gatherClocMetrics',
-        },
-        {
-            name: 'gitleaks',
-            modulePath: './gitleaks',
-            functionName: 'gatherGitleaksMetrics',
-        },
-        {
-            name: 'graphify',
-            modulePath: './graphify',
-            functionName: 'gatherGraphifyMetrics',
-        },
-    ];
-    // Check available memory — fall back to sequential if <1GB free
-    const freeMem = os.freemem();
-    const useParallel = freeMem >= 1024 * 1024 * 1024;
-    if (verbose && !useParallel) {
-        console.error(`  [parallel] Low memory (${Math.round(freeMem / 1024 / 1024)}MB free), running sequentially`);
-    }
-    const tmpDir = fs.mkdtempSync(path.join(os.tmpdir(), 'dxkit-l2-'));
-    const startTime = Date.now();
-    if (useParallel) {
-        runTasksParallel(tasks, cwd, dxkitDist, tmpDir, verbose);
+const cloc_1 = require("./cloc");
+const gitleaks_1 = require("./gitleaks");
+const graphify_1 = require("./graphify");
+function gatherLayer2Parallel(cwd, _verbose = false) {
+    const clocPartial = (0, cloc_1.gatherClocMetrics)(cwd);
+    const toolsUsed = [...(clocPartial.toolsUsed ?? [])];
+    const toolsUnavailable = [...(clocPartial.toolsUnavailable ?? [])];
+    const gitleaks = (0, gitleaks_1.gatherGitleaksResult)(cwd);
+    if (gitleaks.kind === 'success') {
+        toolsUsed.push('gitleaks');
     }
     else {
-        runTasksSequential(tasks, cwd, dxkitDist, tmpDir);
+        // `not installed` renders as bare `gitleaks`, every other failure
+        // mode carries its reason as a parenthetical — byte-identical to
+        // the pre-C.7 string the report surfaces.
+        toolsUnavailable.push(gitleaks.reason === 'not installed' ? 'gitleaks' : `gitleaks (${gitleaks.reason})`);
     }
-    if (verbose) {
-        const elapsed = ((Date.now() - startTime) / 1000).toFixed(1);
-        console.error(`  [parallel] Layer 2 completed in ${elapsed}s`);
+    const graphify = (0, graphify_1.gatherGraphifyResult)(cwd);
+    if (graphify.kind === 'success') {
+        toolsUsed.push('graphify');
     }
-    // Merge all results
-    const merged = {
-        toolsUsed: [],
-        toolsUnavailable: [],
+    else {
+        toolsUnavailable.push(`graphify (${graphify.reason})`);
+    }
+    return {
+        sourceFiles: clocPartial.sourceFiles,
+        totalLines: clocPartial.totalLines,
+        clocLanguages: clocPartial.clocLanguages,
+        toolsUsed,
+        toolsUnavailable,
     };
-    for (let i = 0; i < tasks.length; i++) {
-        const resultFile = path.join(tmpDir, `${tasks[i].name}.json`);
-        try {
-            const raw = fs.readFileSync(resultFile, 'utf-8');
-            const partial = JSON.parse(raw);
-            // Merge arrays
-            if (partial.toolsUsed) {
-                merged.toolsUsed.push(...partial.toolsUsed);
-                delete partial.toolsUsed;
-            }
-            if (partial.toolsUnavailable) {
-                merged.toolsUnavailable.push(...partial.toolsUnavailable);
-                delete partial.toolsUnavailable;
-            }
-            // Merge non-null values
-            for (const [k, v] of Object.entries(partial)) {
-                if (v !== null && v !== undefined) {
-                    merged[k] = v;
-                }
-            }
-        }
-        catch {
-            // Tool didn't produce output — skip
-        }
-    }
-    // Cleanup
-    try {
-        fs.rmSync(tmpDir, { recursive: true, force: true });
-    }
-    catch {
-        /* ignore */
-    }
-    return merged;
-}
-/** Build the Node.js script that calls a gather function and writes result to file. */
-function buildWorkerScript(task, cwd, resultFile) {
-    // The child process requires the SAME compiled module and calls the SAME function.
-    // No duplication — it's literally require('<abs-path>/tools/cloc').gatherClocMetrics(cwd).
-    // Use __dirname at build time to resolve the absolute path to dist/analyzers/.
-    const absModulePath = path.resolve(__dirname, task.modulePath);
-    return `
-    try {
-      var mod = require('${absModulePath.replace(/\\/g, '/')}');
-      var result = mod.${task.functionName}('${cwd.replace(/'/g, "\\'")}');
-      require('fs').writeFileSync('${resultFile}', JSON.stringify(result));
-    } catch (e) {
-      require('fs').writeFileSync('${resultFile}', JSON.stringify({
-        toolsUnavailable: ['${task.name} (child process error: ' + (e.message || '').slice(0, 100) + ')']
-      }));
-    }
-  `;
-}
-function runTasksParallel(tasks, cwd, dxkitDist, tmpDir, _verbose) {
-    // Write each task as a standalone Node script file, then run all via bash `&` + `wait`.
-    // This gives true OS-level parallelism without poll overhead.
-    const scriptPaths = [];
-    for (const task of tasks) {
-        const resultFile = path.join(tmpDir, `${task.name}.json`);
-        const workerScript = buildWorkerScript(task, cwd, resultFile);
-        const scriptPath = path.join(tmpDir, `${task.name}.js`);
-        fs.writeFileSync(scriptPath, workerScript);
-        scriptPaths.push(scriptPath);
-    }
-    // Bash script that backgrounds all node processes and waits
-    const bashLines = scriptPaths.map((sp) => `node '${sp}' &`);
-    bashLines.push('wait');
-    const bashScript = path.join(tmpDir, 'run-parallel.sh');
-    fs.writeFileSync(bashScript, '#!/bin/bash\n' + bashLines.join('\n') + '\n');
-    fs.chmodSync(bashScript, 0o755);
-    try {
-        (0, child_process_1.execSync)(bashScript, {
-            cwd: dxkitDist,
-            stdio: 'ignore',
-            timeout: 300000,
-            env: process.env,
-        });
-    }
-    catch {
-        // Timeout or error — still try to read whatever completed
-    }
-}
-function runTasksSequential(tasks, cwd, dxkitDist, tmpDir) {
-    for (const task of tasks) {
-        const resultFile = path.join(tmpDir, `${task.name}.json`);
-        const script = buildWorkerScript(task, cwd, resultFile);
-        try {
-            (0, child_process_1.execSync)(`node -e '${script.replace(/'/g, "'\\''")}'`, {
-                cwd: dxkitDist,
-                stdio: 'ignore',
-                timeout: 180000,
-            });
-        }
-        catch {
-            /* continue with next tool */
-        }
-    }
 }
 //# sourceMappingURL=parallel.js.map

package/dist/analyzers/tools/parallel.js.map

@@ -1 +1 @@
-{"version":3,"file":"parallel.js","sourceRoot":"","sources":["../../../src/analyzers/tools/parallel.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AA4BA,oDAoFC;AAhHD;;;;;;;;;GASG;AACH,uCAAyB;AACzB,2CAA6B;AAC7B,uCAAyB;AACzB,iDAAyC;AAUzC;;;;GAIG;AACH,SAAgB,oBAAoB,CAAC,GAAW,EAAE,OAAO,GAAG,KAAK;IAC/D,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;IAEhD,MAAM,KAAK,GAAiB;QAC1B;YACE,IAAI,EAAE,MAAM;YACZ,UAAU,EAAE,QAAQ;YACpB,YAAY,EAAE,mBAAmB;SAClC;QACD;YACE,IAAI,EAAE,UAAU;YAChB,UAAU,EAAE,YAAY;YACxB,YAAY,EAAE,uBAAuB;SACtC;QACD;YACE,IAAI,EAAE,UAAU;YAChB,UAAU,EAAE,YAAY;YACxB,YAAY,EAAE,uBAAuB;SACtC;KACF,CAAC;IAEF,gEAAgE;IAChE,MAAM,OAAO,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC;IAC7B,MAAM,WAAW,GAAG,OAAO,IAAI,IAAI,GAAG,IAAI,GAAG,IAAI,CAAC;IAElD,IAAI,OAAO,IAAI,CAAC,WAAW,EAAE,CAAC;QAC5B,OAAO,CAAC,KAAK,CACX,4BAA4B,IAAI,CAAC,KAAK,CAAC,OAAO,GAAG,IAAI,GAAG,IAAI,CAAC,gCAAgC,CAC9F,CAAC;IACJ,CAAC;IAED,MAAM,MAAM,GAAG,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,WAAW,CAAC,CAAC,CAAC;IACnE,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAE7B,IAAI,WAAW,EAAE,CAAC;QAChB,gBAAgB,CAAC,KAAK,EAAE,GAAG,EAAE,SAAS,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC;IAC3D,CAAC;SAAM,CAAC;QACN,kBAAkB,CAAC,KAAK,EAAE,GAAG,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC;IACpD,CAAC;IAED,IAAI,OAAO,EAAE,CAAC;QACZ,MAAM,OAAO,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC,GAAG,IAAI,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;QAC7D,OAAO,CAAC,KAAK,CAAC,qCAAqC,OAAO,GAAG,CAAC,CAAC;IACjE,CAAC;IAED,oBAAoB;IACpB,MAAM,MAAM,GAA2B;QACrC,SAAS,EAAE,EAAE;QACb,gBAAgB,EAAE,EAAE;KACrB,CAAC;IAEF,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACtC,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,OAAO,CAAC,CAAC;QAC9D,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,EAAE,CAAC,YAAY,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;YACjD,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAA2B,CAAC;YAC1D,eAAe;YACf,IAAI,OAAO,CAAC,SAAS,EAAE,CAAC;gBACrB,MAAM,CAAC,SAAsB,CAAC,IAAI,CAAC,GAAG,OAAO,CAAC,SAAS,CAAC,CAAC;gBAC1D,OAAO,OAAO,CAAC,SAAS,CAAC;YAC3B,CAAC;YACD,IAAI,OAAO,CAAC,gBAAgB,EAAE,CAAC;gBAC5B,MAAM,CAAC,gBAA6B,CAAC,IAAI,CAAC,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAAC;gBACxE,OAAO,OAAO,CAAC,gBAAgB,CAAC;YAClC,CAAC;YACD,wBAAwB;YACxB,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;gBAC7C,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,SAAS,EAAE,CAAC;oBACjC,MAAkC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;gBAC7C,CAAC;YACH,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,oCAAoC;QACtC,CAAC;IACH,CAAC;IAED,UAAU;IACV,IAAI,CAAC;QACH,EAAE,CAAC,MAAM,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IACtD,CAAC;IAAC,MAAM,CAAC;QACP,YAAY;IACd,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,uFAAuF;AACvF,SAAS,iBAAiB,CAAC,IAAgB,EAAE,GAAW,EAAE,UAAkB;IAC1E,mFAAmF;IACnF,2FAA2F;IAC3F,+EAA+E;IAC/E,MAAM,aAAa,GAAG,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC;IAC/D,OAAO;;2BAEkB,aAAa,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC;yBACnC,IAAI,CAAC,YAAY,KAAK,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,KAAK,CAAC;qCAClC,UAAU;;qCAEV,UAAU;8BACjB,IAAI,CAAC,IAAI;;;GAGpC,CAAC;AACJ,CAAC;AAED,SAAS,gBAAgB,CACvB,KAAmB,EACnB,GAAW,EACX,SAAiB,EACjB,MAAc,EACd,QAAiB;IAEjB,wFAAwF;IACxF,8DAA8D;IAC9D,MAAM,WAAW,GAAa,EAAE,CAAC;IAEjC,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,IAAI,CAAC,IAAI,OAAO,CAAC,CAAC;QAC1D,MAAM,YAAY,GAAG,iBAAiB,CAAC,IAAI,EAAE,GAAG,EAAE,UAAU,CAAC,CAAC;QAC9D,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,IAAI,CAAC,IAAI,KAAK,CAAC,CAAC;QACxD,EAAE,CAAC,aAAa,CAAC,UAAU,EAAE,YAAY,CAAC,CAAC;QAC3C,WAAW,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IAC/B,CAAC;IAED,4DAA4D;IAC5D,MAAM,SAAS,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;IAC5D,SAAS,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACvB,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,iBAAiB,CAAC,CAAC;IACxD,EAAE,CAAC,aAAa,CAAC,UAAU,EAAE,eAAe,GAAG,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,CAAC;IAC5E,EAAE,CAAC,SAAS,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC;IAEhC,IAAI,CAAC;QACH,IAAA,wBAAQ,EAAC,UAAU,EAAE;YACnB,GAAG,EAAE,SAAS;YACd,KAAK,EAAE,QAAQ;YACf,OAAO,EAAE,MAAM;YACf,GAAG,EAAE,OAAO,CAAC,GAAG;SACjB,CAAC,CAAC;IACL,CAAC;IAAC,MAAM,CAAC;QACP,0DAA0D;IAC5D,CAAC;AACH,CAAC;AAED,SAAS,kBAAkB,CACzB,KAAmB,EACnB,GAAW,EACX,SAAiB,EACjB,MAAc;IAEd,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,IAAI,CAAC,IAAI,OAAO,CAAC,CAAC;QAC1D,MAAM,MAAM,GAAG,iBAAiB,CAAC,IAAI,EAAE,GAAG,EAAE,UAAU,CAAC,CAAC;QACxD,IAAI,CAAC;YACH,IAAA,wBAAQ,EAAC,YAAY,MAAM,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,GAAG,EAAE;gBACrD,GAAG,EAAE,SAAS;gBACd,KAAK,EAAE,QAAQ;gBACf,OAAO,EAAE,MAAM;aAChB,CAAC,CAAC;QACL,CAAC;QAAC,MAAM,CAAC;YACP,6BAA6B;QAC/B,CAAC;IACH,CAAC;AACH,CAAC"}
+{"version":3,"file":"parallel.js","sourceRoot":"","sources":["../../../src/analyzers/tools/parallel.ts"],"names":[],"mappings":";;AA2BA,oDAgCC;AApCD,iCAA2C;AAC3C,yCAAkD;AAClD,yCAAkD;AAElD,SAAgB,oBAAoB,CAAC,GAAW,EAAE,QAAQ,GAAG,KAAK;IAChE,MAAM,WAAW,GAAG,IAAA,wBAAiB,EAAC,GAAG,CAAC,CAAC;IAE3C,MAAM,SAAS,GAAa,CAAC,GAAG,CAAC,WAAW,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC,CAAC;IAC/D,MAAM,gBAAgB,GAAa,CAAC,GAAG,CAAC,WAAW,CAAC,gBAAgB,IAAI,EAAE,CAAC,CAAC,CAAC;IAE7E,MAAM,QAAQ,GAAG,IAAA,+BAAoB,EAAC,GAAG,CAAC,CAAC;IAC3C,IAAI,QAAQ,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;QAChC,SAAS,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IAC7B,CAAC;SAAM,CAAC;QACN,kEAAkE;QAClE,iEAAiE;QACjE,0CAA0C;QAC1C,gBAAgB,CAAC,IAAI,CACnB,QAAQ,CAAC,MAAM,KAAK,eAAe,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,aAAa,QAAQ,CAAC,MAAM,GAAG,CACnF,CAAC;IACJ,CAAC;IAED,MAAM,QAAQ,GAAG,IAAA,+BAAoB,EAAC,GAAG,CAAC,CAAC;IAC3C,IAAI,QAAQ,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;QAChC,SAAS,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IAC7B,CAAC;SAAM,CAAC;QACN,gBAAgB,CAAC,IAAI,CAAC,aAAa,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC;IACzD,CAAC;IAED,OAAO;QACL,WAAW,EAAE,WAAW,CAAC,WAAW;QACpC,UAAU,EAAE,WAAW,CAAC,UAAU;QAClC,aAAa,EAAE,WAAW,CAAC,aAAa;QACxC,SAAS;QACT,gBAAgB;KACjB,CAAC;AACJ,CAAC"}

package/dist/analyzers/tools/paths.d.ts

@@ -0,0 +1,21 @@
+/**
+ * Path normalization helpers shared across tool wrappers.
+ *
+ * Every tool that shells out and parses a JSON report (gitleaks, semgrep,
+ * jscpd, graphify, ...) ends up with file paths whose shape depends on
+ * the tool and the cwd it was invoked with. Instead of each wrapper
+ * inventing its own `.replace(cwd, '')` slicing — which silently
+ * corrupts filenames when `cwd === '.'` (the literal `.` in `.env` is
+ * treated as the cwd match and stripped) — they go through
+ * `toProjectRelative` here.
+ */
+/**
+ * Normalize a tool-reported path to a POSIX project-relative string.
+ *
+ * Handles: absolute paths, paths relative to cwd, cwd passed as `.` or
+ * with a trailing slash, filenames with literal leading dots (`.env`,
+ * `.dxkit-suppressions.json`). Uses `path.relative` on resolved
+ * absolute forms so there's no string munging to go wrong.
+ */
+export declare function toProjectRelative(cwd: string, fileFromTool: string): string;
+//# sourceMappingURL=paths.d.ts.map

package/dist/analyzers/tools/paths.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"paths.d.ts","sourceRoot":"","sources":["../../../src/analyzers/tools/paths.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAIH;;;;;;;GAOG;AACH,wBAAgB,iBAAiB,CAAC,GAAG,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,GAAG,MAAM,CAI3E"}

package/dist/analyzers/tools/paths.js

@@ -0,0 +1,62 @@
+"use strict";
+/**
+ * Path normalization helpers shared across tool wrappers.
+ *
+ * Every tool that shells out and parses a JSON report (gitleaks, semgrep,
+ * jscpd, graphify, ...) ends up with file paths whose shape depends on
+ * the tool and the cwd it was invoked with. Instead of each wrapper
+ * inventing its own `.replace(cwd, '')` slicing — which silently
+ * corrupts filenames when `cwd === '.'` (the literal `.` in `.env` is
+ * treated as the cwd match and stripped) — they go through
+ * `toProjectRelative` here.
+ */
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.toProjectRelative = toProjectRelative;
+const path = __importStar(require("path"));
+/**
+ * Normalize a tool-reported path to a POSIX project-relative string.
+ *
+ * Handles: absolute paths, paths relative to cwd, cwd passed as `.` or
+ * with a trailing slash, filenames with literal leading dots (`.env`,
+ * `.dxkit-suppressions.json`). Uses `path.relative` on resolved
+ * absolute forms so there's no string munging to go wrong.
+ */
+function toProjectRelative(cwd, fileFromTool) {
+    const absCwd = path.resolve(cwd);
+    const absFile = path.isAbsolute(fileFromTool) ? fileFromTool : path.resolve(absCwd, fileFromTool);
+    return path.relative(absCwd, absFile).split(path.sep).join('/');
+}
+//# sourceMappingURL=paths.js.map

package/dist/analyzers/tools/paths.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"paths.js","sourceRoot":"","sources":["../../../src/analyzers/tools/paths.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;GAUG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAYH,8CAIC;AAdD,2CAA6B;AAE7B;;;;;;;GAOG;AACH,SAAgB,iBAAiB,CAAC,GAAW,EAAE,YAAoB;IACjE,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IACjC,MAAM,OAAO,GAAG,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC;IAClG,OAAO,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAClE,CAAC"}

package/dist/analyzers/tools/python.d.ts

@@ -0,0 +1,8 @@
+/**
+ * Python tool runner — ruff (lint), pip-audit (deps).
+ * Layer 1: language-specific tools for Python projects.
+ */
+import { HealthMetrics } from '../types';
+/** Gather Python-specific metrics. */
+export declare function gatherPythonMetrics(cwd: string): Partial<HealthMetrics>;
+//# sourceMappingURL=python.d.ts.map

package/dist/analyzers/tools/python.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"python.d.ts","sourceRoot":"","sources":["../../../src/analyzers/tools/python.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAUzC,sCAAsC;AACtC,wBAAgB,mBAAmB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,CAAC,CA0EvE"}