@vyuhlabs/dxkit 2.9.3 → 2.9.4
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/CHANGELOG.md +32 -0
- package/README.md +9 -0
- package/dist/analyzers/developer/gather.d.ts +16 -0
- package/dist/analyzers/developer/gather.d.ts.map +1 -1
- package/dist/analyzers/developer/gather.js +2 -0
- package/dist/analyzers/developer/gather.js.map +1 -1
- package/dist/analyzers/developer/ownership.d.ts +86 -0
- package/dist/analyzers/developer/ownership.d.ts.map +1 -0
- package/dist/analyzers/developer/ownership.js +180 -0
- package/dist/analyzers/developer/ownership.js.map +1 -0
- package/dist/analyzers/quality/detailed.d.ts +5 -1
- package/dist/analyzers/quality/detailed.d.ts.map +1 -1
- package/dist/analyzers/quality/detailed.js +30 -29
- package/dist/analyzers/quality/detailed.js.map +1 -1
- package/dist/analyzers/security/detailed.d.ts +7 -1
- package/dist/analyzers/security/detailed.d.ts.map +1 -1
- package/dist/analyzers/security/detailed.js +31 -15
- package/dist/analyzers/security/detailed.js.map +1 -1
- package/dist/analyzers/tests/detailed.d.ts +5 -1
- package/dist/analyzers/tests/detailed.d.ts.map +1 -1
- package/dist/analyzers/tests/detailed.js +27 -20
- package/dist/analyzers/tests/detailed.js.map +1 -1
- package/dist/attribution/attribute.d.ts +57 -0
- package/dist/attribution/attribute.d.ts.map +1 -0
- package/dist/attribution/attribute.js +149 -0
- package/dist/attribution/attribute.js.map +1 -0
- package/dist/cli.d.ts.map +1 -1
- package/dist/cli.js +53 -5
- package/dist/cli.js.map +1 -1
- package/dist/reviewers-cli.d.ts +57 -0
- package/dist/reviewers-cli.d.ts.map +1 -0
- package/dist/reviewers-cli.js +263 -0
- package/dist/reviewers-cli.js.map +1 -0
- package/package.json +1 -1
- package/templates/.claude/skills/dxkit-action/SKILL.md +2 -0
- package/templates/.claude/skills/dxkit-pr/SKILL.md +22 -1
|
@@ -7,7 +7,8 @@ const actions_1 = require("./actions");
|
|
|
7
7
|
const scoring_1 = require("../../scoring");
|
|
8
8
|
const tools_unavailable_prose_1 = require("../tools/tools-unavailable-prose");
|
|
9
9
|
const finding_context_1 = require("../../explore/finding-context");
|
|
10
|
-
|
|
10
|
+
const attribute_1 = require("../../attribution/attribute");
|
|
11
|
+
function buildSecurityDetailed(report, graphContext, attribution) {
|
|
11
12
|
const input = (0, actions_1.countsFromReport)(report);
|
|
12
13
|
const scoreFromInput = (i) => (0, scoring_1.evaluateSpec)(scoring_1.SECURITY_SCORING_SPEC, i);
|
|
13
14
|
const actions = (0, remediation_1.rank)((0, actions_1.buildSecurityActions)(report), input, scoreFromInput);
|
|
@@ -19,6 +20,7 @@ function buildSecurityDetailed(report, graphContext) {
|
|
|
19
20
|
securityScore: scoreFromInput(input).score,
|
|
20
21
|
actions,
|
|
21
22
|
...(graphContext ? { graphContext } : {}),
|
|
23
|
+
...(attribution ? { attribution } : {}),
|
|
22
24
|
};
|
|
23
25
|
}
|
|
24
26
|
const SEV_ORDER = { critical: 0, high: 1, medium: 2, low: 3 };
|
|
@@ -105,22 +107,36 @@ function formatSecurityDetailedMarkdown(detailed, elapsed) {
|
|
|
105
107
|
if (sorted.length === 0) {
|
|
106
108
|
L.push('No code findings.');
|
|
107
109
|
}
|
|
108
|
-
else if (detailed.graphContext) {
|
|
109
|
-
const gc = detailed.graphContext;
|
|
110
|
-
L.push((0, finding_context_1.graphContextProvenanceLine)(gc));
|
|
111
|
-
L.push('');
|
|
112
|
-
L.push('| Severity | Rule | File:Line | Tool | CWE | Graph context |');
|
|
113
|
-
L.push('|----------|------|-----------|------|-----|----------------|');
|
|
114
|
-
for (const f of sorted) {
|
|
115
|
-
const ctx = gc.contexts[(0, finding_context_1.locationKey)(f.file, f.line)];
|
|
116
|
-
L.push(`| ${f.severity.toUpperCase()} | \`${f.rule}\` | \`${f.file}${f.line ? ':' + f.line : ''}\` | ${f.tool} | ${f.cwe || '—'} | ${(0, finding_context_1.formatGraphContextCell)(ctx)} |`);
|
|
117
|
-
}
|
|
118
|
-
}
|
|
119
110
|
else {
|
|
120
|
-
|
|
121
|
-
|
|
111
|
+
const gc = detailed.graphContext;
|
|
112
|
+
const attr = detailed.attribution;
|
|
113
|
+
if (gc)
|
|
114
|
+
L.push((0, finding_context_1.graphContextProvenanceLine)(gc));
|
|
115
|
+
if (attr)
|
|
116
|
+
L.push((0, attribute_1.attributionProvenanceLine)());
|
|
117
|
+
if (gc || attr)
|
|
118
|
+
L.push('');
|
|
119
|
+
// Column-driven so graph context + attribution compose cleanly.
|
|
120
|
+
const headers = ['Severity', 'Rule', 'File:Line', 'Tool', 'CWE'];
|
|
121
|
+
if (gc)
|
|
122
|
+
headers.push('Graph context');
|
|
123
|
+
if (attr)
|
|
124
|
+
headers.push('Who to ask');
|
|
125
|
+
L.push(`| ${headers.join(' | ')} |`);
|
|
126
|
+
L.push(`|${headers.map(() => '---').join('|')}|`);
|
|
122
127
|
for (const f of sorted) {
|
|
123
|
-
|
|
128
|
+
const cells = [
|
|
129
|
+
f.severity.toUpperCase(),
|
|
130
|
+
`\`${f.rule}\``,
|
|
131
|
+
`\`${f.file}${f.line ? ':' + f.line : ''}\``,
|
|
132
|
+
f.tool,
|
|
133
|
+
f.cwe || '—',
|
|
134
|
+
];
|
|
135
|
+
if (gc)
|
|
136
|
+
cells.push((0, finding_context_1.formatGraphContextCell)(gc.contexts[(0, finding_context_1.locationKey)(f.file, f.line)]));
|
|
137
|
+
if (attr)
|
|
138
|
+
cells.push((0, attribute_1.formatAttributionCell)(attr.attributions[(0, finding_context_1.locationKey)(f.file, f.line)]));
|
|
139
|
+
L.push(`| ${cells.join(' | ')} |`);
|
|
124
140
|
}
|
|
125
141
|
}
|
|
126
142
|
L.push('');
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"detailed.js","sourceRoot":"","sources":["../../../src/analyzers/security/detailed.ts"],"names":[],"mappings":";;
|
|
1
|
+
{"version":3,"file":"detailed.js","sourceRoot":"","sources":["../../../src/analyzers/security/detailed.ts"],"names":[],"mappings":";;AAsCA,sDAkBC;AAID,wEAuLC;AA9OD,gDAAoD;AACpD,uCAAmE;AACnE,2CAAwF;AACxF,8EAA+E;AAC/E,mEAKuC;AACvC,2DAIqC;AAmBrC,SAAgB,qBAAqB,CACnC,MAAsB,EACtB,YAAmC,EACnC,WAAiC;IAEjC,MAAM,KAAK,GAAG,IAAA,0BAAgB,EAAC,MAAM,CAAC,CAAC;IACvC,MAAM,cAAc,GAAG,CAAC,CAAqB,EAAE,EAAE,CAAC,IAAA,sBAAY,EAAC,+BAAqB,EAAE,CAAC,CAAC,CAAC;IACzF,MAAM,OAAO,GAAG,IAAA,kBAAI,EAAC,IAAA,8BAAoB,EAAC,MAAM,CAAC,EAAE,KAAK,EAAE,cAAc,CAAC,CAAC;IAC1E,OAAO;QACL,GAAG,MAAM;QACT,8DAA8D;QAC9D,qDAAqD;QACrD,aAAa,EAAE,IAAI;QACnB,aAAa,EAAE,cAAc,CAAC,KAAK,CAAC,CAAC,KAAK;QAC1C,OAAO;QACP,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACzC,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACxC,CAAC;AACJ,CAAC;AAED,MAAM,SAAS,GAA6B,EAAE,QAAQ,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,GAAG,EAAE,CAAC,EAAE,CAAC;AAExF,SAAgB,8BAA8B,CAC5C,QAAgC,EAChC,OAAe;IAEf,MAAM,CAAC,GAAa,EAAE,CAAC;IACvB,MAAM,CAAC,GAAG,QAAQ,CAAC,OAAO,CAAC,QAAQ,CAAC;IACpC,MAAM,CAAC,GAAG,QAAQ,CAAC,OAAO,CAAC,YAAY,CAAC;IAExC,CAAC,CAAC,IAAI,CAAC,iCAAiC,CAAC,CAAC;IAC1C,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACX,CAAC,CAAC,IAAI,CAAC,aAAa,QAAQ,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC;IACxD,CAAC,CAAC,IAAI,CAAC,mBAAmB,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC;IAC3C,CAAC,CAAC,IAAI,CAAC,eAAe,QAAQ,CAAC,MAAM,KAAK,QAAQ,CAAC,SAAS,GAAG,CAAC,CAAC;IACjE,CAAC,CAAC,IAAI,CAAC,uBAAuB,QAAQ,CAAC,aAAa,MAAM,CAAC,CAAC;IAC5D,CAAC,CAAC,IAAI,CAAC,uBAAuB,QAAQ,CAAC,aAAa,EAAE,CAAC,CAAC;IACxD,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACX,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACd,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAEX,8DAA8D;IAC9D,gEAAgE;IAChE,2DAA2D;IAC3D,gEAAgE;IAChE,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;IACrB,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACX,CAAC,CAAC,IAAI,CAAC,uBAAuB,CAAC,CAAC;IAChC,CAAC,CAAC,IAAI,CAAC,uFAAuF,CAAC,CAAC;IAChG,CAAC,CAAC,IAAI,CACJ,uGAAuG,CACxG,CAAC;IACF,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACX,CAAC,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAC,QAAQ,KAAK,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,GAAG,MAAM,CAAC,CAAC,KAAK,SAAS,CAAC,CAAC;IACjG,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC;QACX,CAAC,CAAC,IAAI,CACJ,yBAAyB,CAAC,CAAC,QAAQ,KAAK,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,GAAG,MAAM,CAAC,CAAC,KAAK,eAAe,CAAC,CAAC,IAAI,GAAG,CAC3G,CAAC;QACF,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACX,CAAC,CAAC,IAAI,CAAC,yBAAyB,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,KAAK,KAAK,CAAC,CAAC,KAAK,WAAW,CAAC,CAAC,KAAK,cAAc,CAAC,CAAC;IACjG,CAAC;SAAM,CAAC;QACN,CAAC,CAAC,IAAI,CAAC,qCAAqC,CAAC,CAAC;QAC9C,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACX,CAAC,CAAC,IAAI,CAAC,yBAAyB,CAAC,CAAC,KAAK,cAAc,CAAC,CAAC;IACzD,CAAC;IACD,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACX,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACd,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAEX,iBAAiB;IACjB,CAAC,CAAC,IAAI,CAAC,wBAAwB,CAAC,CAAC;IACjC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACX,IAAI,QAAQ,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAClC,CAAC,CAAC,IAAI,CAAC,8CAA8C,CAAC,CAAC;IACzD,CAAC;SAAM,CAAC;QACN,CAAC,CAAC,IAAI,CAAC,oDAAoD,CAAC,CAAC;QAC7D,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACX,CAAC,CAAC,IAAI,CAAC,sCAAsC,CAAC,CAAC;QAC/C,CAAC,CAAC,IAAI,CAAC,sCAAsC,CAAC,CAAC;QAC/C,QAAQ,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE;YAChC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,KAAK,OAAO,CAAC,CAAC,UAAU,MAAM,CAAC,CAAC,cAAc,QAAQ,CAAC,CAAC;QACnF,CAAC,CAAC,CAAC;QACH,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACX,KAAK,MAAM,CAAC,IAAI,QAAQ,CAAC,OAAO,EAAE,CAAC;YACjC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,KAAK,MAAM,CAAC,CAAC,UAAU,GAAG,CAAC,CAAC;YAC5C,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YACX,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC;YAChC,CAAC,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC,aAAa,MAAM,CAAC,CAAC;YACjD,CAAC,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC,cAAc,MAAM,CAAC,CAAC;YACnD,IAAI,CAAC,CAAC,SAAS;gBAAE,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC;YACrD,IAAI,CAAC,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC;gBACtB,CAAC,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;gBAC1B,KAAK,MAAM,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC;oBACxC,MAAM,GAAG,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;oBACvC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,IAAI,GAAG,GAAG,QAAQ,CAAC,CAAC,OAAO,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;gBAC7D,CAAC;gBACD,IAAI,CAAC,CAAC,QAAQ,CAAC,MAAM,GAAG,EAAE,EAAE,CAAC;oBAC3B,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,QAAQ,CAAC,MAAM,GAAG,EAAE,OAAO,CAAC,CAAC;gBACrD,CAAC;YACH,CAAC;YACD,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACb,CAAC;IACH,CAAC;IACD,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACd,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAEX,0BAA0B;IAC1B,CAAC,CAAC,IAAI,CAAC,uBAAuB,CAAC,CAAC;IAChC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACX,MAAM,MAAM,GAAsB,CAAC,GAAG,QAAQ,CAAC,QAAQ,CAAC,CAAC,IAAI,CAC3D,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,CACxF,CAAC;IACF,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACxB,CAAC,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC;IAC9B,CAAC;SAAM,CAAC;QACN,MAAM,EAAE,GAAG,QAAQ,CAAC,YAAY,CAAC;QACjC,MAAM,IAAI,GAAG,QAAQ,CAAC,WAAW,CAAC;QAClC,IAAI,EAAE;YAAE,CAAC,CAAC,IAAI,CAAC,IAAA,4CAA0B,EAAC,EAAE,CAAC,CAAC,CAAC;QAC/C,IAAI,IAAI;YAAE,CAAC,CAAC,IAAI,CAAC,IAAA,qCAAyB,GAAE,CAAC,CAAC;QAC9C,IAAI,EAAE,IAAI,IAAI;YAAE,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAC3B,gEAAgE;QAChE,MAAM,OAAO,GAAG,CAAC,UAAU,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC;QACjE,IAAI,EAAE;YAAE,OAAO,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;QACtC,IAAI,IAAI;YAAE,OAAO,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;QACrC,CAAC,CAAC,IAAI,CAAC,KAAK,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QACrC,CAAC,CAAC,IAAI,CAAC,IAAI,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAClD,KAAK,MAAM,CAAC,IAAI,MAAM,EAAE,CAAC;YACvB,MAAM,KAAK,GAAG;gBACZ,CAAC,CAAC,QAAQ,CAAC,WAAW,EAAE;gBACxB,KAAK,CAAC,CAAC,IAAI,IAAI;gBACf,KAAK,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI;gBAC5C,CAAC,CAAC,IAAI;gBACN,CAAC,CAAC,GAAG,IAAI,GAAG;aACb,CAAC;YACF,IAAI,EAAE;gBAAE,KAAK,CAAC,IAAI,CAAC,IAAA,wCAAsB,EAAC,EAAE,CAAC,QAAQ,CAAC,IAAA,6BAAW,EAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;YACrF,IAAI,IAAI;gBAAE,KAAK,CAAC,IAAI,CAAC,IAAA,iCAAqB,EAAC,IAAI,CAAC,YAAY,CAAC,IAAA,6BAAW,EAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;YAC5F,CAAC,CAAC,IAAI,CAAC,KAAK,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QACrC,CAAC;IACH,CAAC;IACD,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACX,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACd,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAEX,eAAe;IACf,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC;QACX,CAAC,CAAC,IAAI,CAAC,+BAA+B,CAAC,CAAC;QACxC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACX,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;QAC1B,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACX,CAAC,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAC;QAC/B,CAAC,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAC;QAC/B,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC,QAAQ,IAAI,CAAC,CAAC;QACvC,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC;QACnC,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC;QACrC,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;QAClC,CAAC,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC,KAAK,MAAM,CAAC,CAAC;QACzC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACX,IAAI,CAAC,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC1B,6DAA6D;YAC7D,qEAAqE;YACrE,2DAA2D;YAC3D,MAAM,UAAU,GAAqB,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE;gBACjE,MAAM,EAAE,GAAG,CAAC,CAAC,SAAS,IAAI,CAAC,CAAC,CAAC;gBAC7B,MAAM,EAAE,GAAG,CAAC,CAAC,SAAS,IAAI,CAAC,CAAC,CAAC;gBAC7B,IAAI,EAAE,KAAK,EAAE;oBAAE,OAAO,EAAE,GAAG,EAAE,CAAC;gBAC9B,OAAO,CACL,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC;oBAC7C,CAAC,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC,CAAC,OAAO,CAAC;oBAClC,CAAC,CAAC,EAAE,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,CAAC,CACzB,CAAC;YACJ,CAAC,CAAC,CAAC;YACH,CAAC,CAAC,IAAI,CAAC,wBAAwB,UAAU,CAAC,MAAM,aAAa,CAAC,CAAC;YAC/D,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YACX,CAAC,CAAC,IAAI,CACJ,2FAA2F,CAC5F,CAAC;YACF,CAAC,CAAC,IAAI,CACJ,2FAA2F,CAC5F,CAAC;YACF,KAAK,MAAM,CAAC,IAAI,UAAU,EAAE,CAAC;gBAC3B,MAAM,IAAI,GAAG,CAAC,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC;gBACtE,MAAM,IAAI,GAAG,OAAO,CAAC,CAAC,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,GAAG,GAAG,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC;gBAC1F,MAAM,GAAG,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC7B,MAAM,KAAK,GAAG,CAAC,CAAC,SAAS,KAAK,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,KAAK,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC5E,gEAAgE;gBAChE,kDAAkD;gBAClD,MAAM,IAAI,GAAG,OAAO,CAAC,CAAC,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC;gBACrF,CAAC,CAAC,IAAI,CACJ,KAAK,IAAI,MAAM,CAAC,CAAC,QAAQ,CAAC,WAAW,EAAE,MAAM,GAAG,MAAM,KAAK,QAAQ,CAAC,CAAC,EAAE,UAAU,CAAC,CAAC,OAAO,QAAQ,CAAC,CAAC,gBAAgB,IAAI,GAAG,MAAM,CAAC,CAAC,YAAY,IAAI,GAAG,MAAM,IAAI,MAAM,IAAI,MAAM,CAAC,CAAC,IAAI,IAAI,CAC3L,CAAC;YACJ,CAAC;YACD,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACb,CAAC;QACD,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACd,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACb,CAAC;IAED,CAAC,CAAC,IAAI,CAAC,mBAAmB,QAAQ,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAC3D,CAAC,CAAC,IAAI,CAAC,GAAG,IAAA,qDAA2B,EAAC,QAAQ,CAAC,gBAAgB,CAAC,CAAC,CAAC;IAClE,CAAC,CAAC,IAAI,CAAC,sBAAsB,OAAO,GAAG,CAAC,CAAC;IACzC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACX,CAAC,CAAC,IAAI,CACJ,gGAAgG,CACjG,CAAC;IACF,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACtB,CAAC"}
|
|
@@ -5,6 +5,7 @@ import { TestGapsReport } from './types';
|
|
|
5
5
|
import { RankedAction } from '../remediation';
|
|
6
6
|
import { TestGapsCounts } from './scoring';
|
|
7
7
|
import { type DetailedGraphContext } from '../../explore/finding-context';
|
|
8
|
+
import { type DetailedAttribution } from '../../attribution/attribute';
|
|
8
9
|
export interface TestGapsDetailedReport extends TestGapsReport {
|
|
9
10
|
schemaVersion: string;
|
|
10
11
|
coverageScore: number;
|
|
@@ -15,7 +16,10 @@ export interface TestGapsDetailedReport extends TestGapsReport {
|
|
|
15
16
|
* Present only when `--graph-context` ran AND a graph loaded.
|
|
16
17
|
*/
|
|
17
18
|
graphContext?: DetailedGraphContext;
|
|
19
|
+
/** Per-gap "who to ask" (file owner), keyed by file path. Present only
|
|
20
|
+
* when the run passed `--attribute`. */
|
|
21
|
+
attribution?: DetailedAttribution;
|
|
18
22
|
}
|
|
19
|
-
export declare function buildTestGapsDetailed(report: TestGapsReport, graphContext?: DetailedGraphContext): TestGapsDetailedReport;
|
|
23
|
+
export declare function buildTestGapsDetailed(report: TestGapsReport, graphContext?: DetailedGraphContext, attribution?: DetailedAttribution): TestGapsDetailedReport;
|
|
20
24
|
export declare function formatTestGapsDetailedMarkdown(detailed: TestGapsDetailedReport, elapsed: string): string;
|
|
21
25
|
//# sourceMappingURL=detailed.d.ts.map
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"detailed.d.ts","sourceRoot":"","sources":["../../../src/analyzers/tests/detailed.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,OAAO,EAAE,cAAc,EAAwB,MAAM,SAAS,CAAC;AAC/D,OAAO,EAAE,YAAY,EAAQ,MAAM,gBAAgB,CAAC;AAEpD,OAAO,EAAE,cAAc,EAAuB,MAAM,WAAW,CAAC;AAEhE,OAAO,EAIL,KAAK,oBAAoB,EAC1B,MAAM,+BAA+B,CAAC;
|
|
1
|
+
{"version":3,"file":"detailed.d.ts","sourceRoot":"","sources":["../../../src/analyzers/tests/detailed.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,OAAO,EAAE,cAAc,EAAwB,MAAM,SAAS,CAAC;AAC/D,OAAO,EAAE,YAAY,EAAQ,MAAM,gBAAgB,CAAC;AAEpD,OAAO,EAAE,cAAc,EAAuB,MAAM,WAAW,CAAC;AAEhE,OAAO,EAIL,KAAK,oBAAoB,EAC1B,MAAM,+BAA+B,CAAC;AACvC,OAAO,EAGL,KAAK,mBAAmB,EACzB,MAAM,6BAA6B,CAAC;AAErC,MAAM,WAAW,sBAAuB,SAAQ,cAAc;IAC5D,aAAa,EAAE,MAAM,CAAC;IACtB,aAAa,EAAE,MAAM,CAAC;IACtB,OAAO,EAAE,KAAK,CAAC,YAAY,CAAC,cAAc,CAAC,CAAC,CAAC;IAC7C;;;;OAIG;IACH,YAAY,CAAC,EAAE,oBAAoB,CAAC;IACpC;6CACyC;IACzC,WAAW,CAAC,EAAE,mBAAmB,CAAC;CACnC;AAED,wBAAgB,qBAAqB,CACnC,MAAM,EAAE,cAAc,EACtB,YAAY,CAAC,EAAE,oBAAoB,EACnC,WAAW,CAAC,EAAE,mBAAmB,GAChC,sBAAsB,CAkBxB;AAID,wBAAgB,8BAA8B,CAC5C,QAAQ,EAAE,sBAAsB,EAChC,OAAO,EAAE,MAAM,GACd,MAAM,CAiIR"}
|
|
@@ -7,7 +7,8 @@ const actions_1 = require("./actions");
|
|
|
7
7
|
const scoring_1 = require("./scoring");
|
|
8
8
|
const tools_unavailable_prose_1 = require("../tools/tools-unavailable-prose");
|
|
9
9
|
const finding_context_1 = require("../../explore/finding-context");
|
|
10
|
-
|
|
10
|
+
const attribute_1 = require("../../attribution/attribute");
|
|
11
|
+
function buildTestGapsDetailed(report, graphContext, attribution) {
|
|
11
12
|
const counts = (0, actions_1.countsFromReport)(report);
|
|
12
13
|
// When a graph is present, re-rank the gap worklist by blast radius so
|
|
13
14
|
// the most-depended-on untested files surface first (within tier). This
|
|
@@ -23,6 +24,7 @@ function buildTestGapsDetailed(report, graphContext) {
|
|
|
23
24
|
coverageScore: (0, scoring_1.scoreTestGapsCounts)(counts).score,
|
|
24
25
|
actions,
|
|
25
26
|
...(graphContext ? { graphContext } : {}),
|
|
27
|
+
...(attribution ? { attribution } : {}),
|
|
26
28
|
};
|
|
27
29
|
}
|
|
28
30
|
const TIER_ORDER = { critical: 0, high: 1, medium: 2, low: 3 };
|
|
@@ -94,10 +96,13 @@ function formatTestGapsDetailedMarkdown(detailed, elapsed) {
|
|
|
94
96
|
L.push('## All Gaps by Risk Tier');
|
|
95
97
|
L.push('');
|
|
96
98
|
const gc = detailed.graphContext;
|
|
97
|
-
|
|
99
|
+
const attr = detailed.attribution;
|
|
100
|
+
if (gc)
|
|
98
101
|
L.push((0, finding_context_1.graphContextProvenanceLine)(gc));
|
|
102
|
+
if (attr)
|
|
103
|
+
L.push((0, attribute_1.attributionProvenanceLine)());
|
|
104
|
+
if (gc || attr)
|
|
99
105
|
L.push('');
|
|
100
|
-
}
|
|
101
106
|
// Within a tier, prefer higher blast radius (most-depended-on first)
|
|
102
107
|
// when the graph stamped it, falling back to LOC. Mirrors the worklist
|
|
103
108
|
// ranking so the table and the actions agree on ordering.
|
|
@@ -118,24 +123,26 @@ function formatTestGapsDetailedMarkdown(detailed, elapsed) {
|
|
|
118
123
|
continue;
|
|
119
124
|
L.push(`### ${tier.toUpperCase()} (${items.length})`);
|
|
120
125
|
L.push('');
|
|
121
|
-
|
|
122
|
-
|
|
123
|
-
|
|
124
|
-
|
|
125
|
-
|
|
126
|
-
|
|
127
|
-
|
|
128
|
-
|
|
129
|
-
|
|
126
|
+
const headers = ['File', 'Type', 'Lines'];
|
|
127
|
+
if (gc)
|
|
128
|
+
headers.push('Graph context');
|
|
129
|
+
if (attr)
|
|
130
|
+
headers.push('Who to ask');
|
|
131
|
+
L.push(`| ${headers.join(' | ')} |`);
|
|
132
|
+
L.push(`|${headers.map((h) => (h === 'Lines' ? '-----:' : '---')).join('|')}|`);
|
|
133
|
+
for (const g of items.slice(0, 50)) {
|
|
134
|
+
const cells = [`\`${g.path}\``, g.type, String(g.lines)];
|
|
135
|
+
if (gc)
|
|
136
|
+
cells.push((0, finding_context_1.formatGraphContextCell)(gc.contexts[(0, finding_context_1.locationKey)(g.path)]));
|
|
137
|
+
if (attr)
|
|
138
|
+
cells.push((0, attribute_1.formatAttributionCell)(attr.attributions[(0, finding_context_1.locationKey)(g.path)]));
|
|
139
|
+
L.push(`| ${cells.join(' | ')} |`);
|
|
130
140
|
}
|
|
131
|
-
|
|
132
|
-
L.push(
|
|
133
|
-
|
|
134
|
-
|
|
135
|
-
|
|
136
|
-
}
|
|
137
|
-
if (items.length > 50)
|
|
138
|
-
L.push(`| … and ${items.length - 50} more | | |`);
|
|
141
|
+
if (items.length > 50) {
|
|
142
|
+
L.push(`| … and ${items.length - 50} more |${headers
|
|
143
|
+
.slice(1)
|
|
144
|
+
.map(() => ' |')
|
|
145
|
+
.join('')}`);
|
|
139
146
|
}
|
|
140
147
|
L.push('');
|
|
141
148
|
}
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"detailed.js","sourceRoot":"","sources":["../../../src/analyzers/tests/detailed.ts"],"names":[],"mappings":";;
|
|
1
|
+
{"version":3,"file":"detailed.js","sourceRoot":"","sources":["../../../src/analyzers/tests/detailed.ts"],"names":[],"mappings":";;AAmCA,sDAsBC;AAID,wEAoIC;AA7LD,gDAAoD;AACpD,uCAA4F;AAC5F,uCAAgE;AAChE,8EAA+E;AAC/E,mEAKuC;AACvC,2DAIqC;AAiBrC,SAAgB,qBAAqB,CACnC,MAAsB,EACtB,YAAmC,EACnC,WAAiC;IAEjC,MAAM,MAAM,GAAG,IAAA,0BAAgB,EAAC,MAAM,CAAC,CAAC;IACxC,uEAAuE;IACvE,wEAAwE;IACxE,oEAAoE;IACpE,mCAAmC;IACnC,MAAM,QAAQ,GAAG,YAAY;QAC3B,CAAC,CAAC,EAAE,GAAG,MAAM,EAAE,IAAI,EAAE,IAAA,iCAAuB,EAAC,MAAM,CAAC,IAAI,EAAE,YAAY,CAAC,EAAE;QACzE,CAAC,CAAC,MAAM,CAAC;IACX,MAAM,OAAO,GAAG,IAAA,kBAAI,EAAC,IAAA,8BAAoB,EAAC,QAAQ,CAAC,EAAE,MAAM,EAAE,6BAAmB,CAAC,CAAC;IAClF,OAAO;QACL,GAAG,QAAQ;QACX,aAAa,EAAE,IAAI;QACnB,aAAa,EAAE,IAAA,6BAAmB,EAAC,MAAM,CAAC,CAAC,KAAK;QAChD,OAAO;QACP,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACzC,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACxC,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,GAA6B,EAAE,QAAQ,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,GAAG,EAAE,CAAC,EAAE,CAAC;AAEzF,SAAgB,8BAA8B,CAC5C,QAAgC,EAChC,OAAe;IAEf,MAAM,CAAC,GAAa,EAAE,CAAC;IACvB,MAAM,CAAC,GAAG,QAAQ,CAAC,OAAO,CAAC;IAE3B,CAAC,CAAC,IAAI,CAAC,gCAAgC,CAAC,CAAC;IACzC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACX,CAAC,CAAC,IAAI,CAAC,aAAa,QAAQ,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC;IACxD,CAAC,CAAC,IAAI,CAAC,mBAAmB,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC;IAC3C,CAAC,CAAC,IAAI,CAAC,eAAe,QAAQ,CAAC,MAAM,KAAK,QAAQ,CAAC,SAAS,GAAG,CAAC,CAAC;IACjE,CAAC,CAAC,IAAI,CAAC,2BAA2B,CAAC,CAAC,iBAAiB,GAAG,CAAC,CAAC;IAC1D,CAAC,CAAC,IAAI,CAAC,4BAA4B,QAAQ,CAAC,aAAa,MAAM,CAAC,CAAC;IACjE,CAAC,CAAC,IAAI,CAAC,uBAAuB,QAAQ,CAAC,aAAa,EAAE,CAAC,CAAC;IACxD,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACX,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACd,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAEX,UAAU;IACV,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;IACrB,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACX,CAAC,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC;IAC7B,CAAC,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC;IAC7B,CAAC,CAAC,IAAI,CACJ,kBAAkB,CAAC,CAAC,SAAS,aAAa,CAAC,CAAC,eAAe,oBAAoB,CAAC,CAAC,iBAAiB,KAAK,CACxG,CAAC;IACF,CAAC,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC,WAAW,IAAI,CAAC,CAAC;IAC9C,CAAC,CAAC,IAAI,CAAC,2BAA2B,CAAC,CAAC,gBAAgB,IAAI,CAAC,CAAC;IAC1D,CAAC,CAAC,IAAI,CAAC,uBAAuB,CAAC,CAAC,YAAY,IAAI,CAAC,CAAC;IAClD,CAAC,CAAC,IAAI,CAAC,yBAAyB,CAAC,CAAC,cAAc,IAAI,CAAC,CAAC;IACtD,CAAC,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAC,WAAW,IAAI,CAAC,CAAC;IAChD,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACX,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACd,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAEX,UAAU;IACV,CAAC,CAAC,IAAI,CAAC,wBAAwB,CAAC,CAAC;IACjC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACX,IAAI,QAAQ,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAClC,CAAC,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC;IAC9B,CAAC;SAAM,CAAC;QACN,CAAC,CAAC,IAAI,CAAC,kEAAkE,CAAC,CAAC;QAC3E,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACX,CAAC,CAAC,IAAI,CAAC,sCAAsC,CAAC,CAAC;QAC/C,CAAC,CAAC,IAAI,CAAC,sCAAsC,CAAC,CAAC;QAC/C,QAAQ,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE;YAChC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,KAAK,OAAO,CAAC,CAAC,UAAU,MAAM,CAAC,CAAC,cAAc,QAAQ,CAAC,CAAC;QACnF,CAAC,CAAC,CAAC;QACH,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACX,KAAK,MAAM,CAAC,IAAI,QAAQ,CAAC,OAAO,EAAE,CAAC;YACjC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,KAAK,MAAM,CAAC,CAAC,UAAU,GAAG,CAAC,CAAC;YAC5C,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YACX,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC;YAChC,CAAC,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC,aAAa,MAAM,CAAC,CAAC;YACjD,CAAC,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC,cAAc,MAAM,CAAC,CAAC;YACnD,IAAI,CAAC,CAAC,SAAS;gBAAE,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC;YACrD,IAAI,CAAC,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC;gBACtB,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;gBACvB,KAAK,MAAM,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC;oBACxC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,IAAI,QAAQ,CAAC,CAAC,OAAO,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;gBACvD,CAAC;gBACD,IAAI,CAAC,CAAC,QAAQ,CAAC,MAAM,GAAG,EAAE;oBAAE,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,QAAQ,CAAC,MAAM,GAAG,EAAE,OAAO,CAAC,CAAC;YACjF,CAAC;YACD,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACb,CAAC;IACH,CAAC;IACD,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACd,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAEX,8BAA8B;IAC9B,CAAC,CAAC,IAAI,CAAC,0BAA0B,CAAC,CAAC;IACnC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACX,MAAM,EAAE,GAAG,QAAQ,CAAC,YAAY,CAAC;IACjC,MAAM,IAAI,GAAG,QAAQ,CAAC,WAAW,CAAC;IAClC,IAAI,EAAE;QAAE,CAAC,CAAC,IAAI,CAAC,IAAA,4CAA0B,EAAC,EAAE,CAAC,CAAC,CAAC;IAC/C,IAAI,IAAI;QAAE,CAAC,CAAC,IAAI,CAAC,IAAA,qCAAyB,GAAE,CAAC,CAAC;IAC9C,IAAI,EAAE,IAAI,IAAI;QAAE,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAC3B,qEAAqE;IACrE,uEAAuE;IACvE,0DAA0D;IAC1D,MAAM,MAAM,GAAiB,CAAC,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,IAAI,CAClD,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CACP,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC;QACvC,CAAC,CAAC,CAAC,WAAW,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,WAAW,IAAI,CAAC,CAAC,CAAC;QAC7C,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,KAAK,CACpB,CAAC;IACF,MAAM,OAAO,GAAmC;QAC9C,QAAQ,EAAE,EAAE;QACZ,IAAI,EAAE,EAAE;QACR,MAAM,EAAE,EAAE;QACV,GAAG,EAAE,EAAE;KACR,CAAC;IACF,KAAK,MAAM,CAAC,IAAI,MAAM;QAAE,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAEhD,KAAK,MAAM,IAAI,IAAI,CAAC,UAAU,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,CAAe,EAAE,CAAC;QACvE,MAAM,KAAK,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;QAC5B,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;YAAE,SAAS;QACjC,CAAC,CAAC,IAAI,CAAC,OAAO,IAAI,CAAC,WAAW,EAAE,KAAK,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC;QACtD,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACX,MAAM,OAAO,GAAG,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC;QAC1C,IAAI,EAAE;YAAE,OAAO,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;QACtC,IAAI,IAAI;YAAE,OAAO,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;QACrC,CAAC,CAAC,IAAI,CAAC,KAAK,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QACrC,CAAC,CAAC,IAAI,CAAC,IAAI,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAChF,KAAK,MAAM,CAAC,IAAI,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC;YACnC,MAAM,KAAK,GAAG,CAAC,KAAK,CAAC,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC;YACzD,IAAI,EAAE;gBAAE,KAAK,CAAC,IAAI,CAAC,IAAA,wCAAsB,EAAC,EAAE,CAAC,QAAQ,CAAC,IAAA,6BAAW,EAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;YAC7E,IAAI,IAAI;gBAAE,KAAK,CAAC,IAAI,CAAC,IAAA,iCAAqB,EAAC,IAAI,CAAC,YAAY,CAAC,IAAA,6BAAW,EAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;YACpF,CAAC,CAAC,IAAI,CAAC,KAAK,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QACrC,CAAC;QACD,IAAI,KAAK,CAAC,MAAM,GAAG,EAAE,EAAE,CAAC;YACtB,CAAC,CAAC,IAAI,CACJ,WAAW,KAAK,CAAC,MAAM,GAAG,EAAE,UAAU,OAAO;iBAC1C,KAAK,CAAC,CAAC,CAAC;iBACR,GAAG,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC;iBACf,IAAI,CAAC,EAAE,CAAC,EAAE,CACd,CAAC;QACJ,CAAC;QACD,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACb,CAAC;IACD,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACd,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAEX,CAAC,CAAC,IAAI,CAAC,mBAAmB,QAAQ,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAC3D,CAAC,CAAC,IAAI,CAAC,GAAG,IAAA,qDAA2B,EAAC,QAAQ,CAAC,gBAAgB,CAAC,CAAC,CAAC;IAClE,CAAC,CAAC,IAAI,CAAC,sBAAsB,OAAO,GAAG,CAAC,CAAC;IACzC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACX,CAAC,CAAC,IAAI,CACJ,gGAAgG,CACjG,CAAC;IACF,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACtB,CAAC"}
|
|
@@ -0,0 +1,57 @@
|
|
|
1
|
+
/** Attribution for one finding location. */
|
|
2
|
+
export interface FindingAttribution {
|
|
3
|
+
/** Display name — the author who last touched the line (line-level
|
|
4
|
+
* findings) or the file's current owner (file-level findings). */
|
|
5
|
+
readonly author: string;
|
|
6
|
+
/** GitHub @handle when resolvable offline. */
|
|
7
|
+
readonly handle?: string;
|
|
8
|
+
/** Short commit sha that last touched the line. Absent for file-level
|
|
9
|
+
* (owner-based) attribution, which has no single introducing commit. */
|
|
10
|
+
readonly commit?: string;
|
|
11
|
+
/** Whether that person is still active repo-wide. */
|
|
12
|
+
readonly active: boolean;
|
|
13
|
+
/** Line-level: when the blamed author is inactive, the current active
|
|
14
|
+
* owner of the file to ask instead. Absent for file-level attribution
|
|
15
|
+
* (the author IS the current owner). */
|
|
16
|
+
readonly currentOwner?: {
|
|
17
|
+
name: string;
|
|
18
|
+
handle?: string;
|
|
19
|
+
};
|
|
20
|
+
/** True when this is file-level (owner-based) rather than blame-based. */
|
|
21
|
+
readonly fileLevel?: boolean;
|
|
22
|
+
}
|
|
23
|
+
export interface DetailedAttribution {
|
|
24
|
+
/** Keyed by `locationKey(file, line)`; only resolved locations present. */
|
|
25
|
+
readonly attributions: Record<string, FindingAttribution>;
|
|
26
|
+
}
|
|
27
|
+
export interface BuildAttributionOptions {
|
|
28
|
+
/** Budget cap on unique locations blamed (each is a git call). */
|
|
29
|
+
readonly maxFindings?: number;
|
|
30
|
+
/** Active-window for "still around to ask." Default 6 months. */
|
|
31
|
+
readonly activeSince?: string;
|
|
32
|
+
readonly now?: Date;
|
|
33
|
+
}
|
|
34
|
+
interface BlameLine {
|
|
35
|
+
readonly author: string;
|
|
36
|
+
readonly email: string;
|
|
37
|
+
readonly commit: string;
|
|
38
|
+
}
|
|
39
|
+
/** Parse `git blame --porcelain -L n,n` output for the author + commit of a
|
|
40
|
+
* single line. Pure — exported for tests. Returns `null` when the porcelain
|
|
41
|
+
* has no author (empty / error). */
|
|
42
|
+
export declare function parseBlamePorcelain(out: string): BlameLine | null;
|
|
43
|
+
/**
|
|
44
|
+
* Build per-finding attribution for a list of locations. Fail-open: returns
|
|
45
|
+
* `undefined` when git produces nothing usable. Only locations with a `line`
|
|
46
|
+
* are blamed (a file-level finding has no single line to attribute).
|
|
47
|
+
*/
|
|
48
|
+
export declare function buildAttributionMap(cwd: string, locations: ReadonlyArray<{
|
|
49
|
+
file: string;
|
|
50
|
+
line?: number;
|
|
51
|
+
}>, opts?: BuildAttributionOptions): DetailedAttribution | undefined;
|
|
52
|
+
/** Compact cell rendering — name/@handle, never email. `—` when unresolved. */
|
|
53
|
+
export declare function formatAttributionCell(attr: FindingAttribution | undefined): string;
|
|
54
|
+
/** Provenance + honesty line printed above an attributed section. */
|
|
55
|
+
export declare function attributionProvenanceLine(): string;
|
|
56
|
+
export {};
|
|
57
|
+
//# sourceMappingURL=attribute.d.ts.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"attribute.d.ts","sourceRoot":"","sources":["../../src/attribution/attribute.ts"],"names":[],"mappings":"AA6BA,4CAA4C;AAC5C,MAAM,WAAW,kBAAkB;IACjC;uEACmE;IACnE,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,8CAA8C;IAC9C,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB;6EACyE;IACzE,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,qDAAqD;IACrD,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC;IACzB;;6CAEyC;IACzC,QAAQ,CAAC,YAAY,CAAC,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IAC1D,0EAA0E;IAC1E,QAAQ,CAAC,SAAS,CAAC,EAAE,OAAO,CAAC;CAC9B;AAED,MAAM,WAAW,mBAAmB;IAClC,2EAA2E;IAC3E,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC,MAAM,EAAE,kBAAkB,CAAC,CAAC;CAC3D;AAED,MAAM,WAAW,uBAAuB;IACtC,kEAAkE;IAClE,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B,iEAAiE;IACjE,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,GAAG,CAAC,EAAE,IAAI,CAAC;CACrB;AAED,UAAU,SAAS;IACjB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;CACzB;AAED;;qCAEqC;AACrC,wBAAgB,mBAAmB,CAAC,GAAG,EAAE,MAAM,GAAG,SAAS,GAAG,IAAI,CAYjE;AAcD;;;;GAIG;AACH,wBAAgB,mBAAmB,CACjC,GAAG,EAAE,MAAM,EACX,SAAS,EAAE,aAAa,CAAC;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC,EACzD,IAAI,GAAE,uBAA4B,GACjC,mBAAmB,GAAG,SAAS,CA0DjC;AAaD,+EAA+E;AAC/E,wBAAgB,qBAAqB,CAAC,IAAI,EAAE,kBAAkB,GAAG,SAAS,GAAG,MAAM,CAYlF;AAED,qEAAqE;AACrE,wBAAgB,yBAAyB,IAAI,MAAM,CAOlD"}
|
|
@@ -0,0 +1,149 @@
|
|
|
1
|
+
"use strict";
|
|
2
|
+
Object.defineProperty(exports, "__esModule", { value: true });
|
|
3
|
+
exports.parseBlamePorcelain = parseBlamePorcelain;
|
|
4
|
+
exports.buildAttributionMap = buildAttributionMap;
|
|
5
|
+
exports.formatAttributionCell = formatAttributionCell;
|
|
6
|
+
exports.attributionProvenanceLine = attributionProvenanceLine;
|
|
7
|
+
/**
|
|
8
|
+
* Finding attribution — "who to ask" about a finding, grounded in the
|
|
9
|
+
* active-owner model. The OPT-IN historical counterpart to net-new
|
|
10
|
+
* attribution (a net-new finding's introducer is the PR's own commits;
|
|
11
|
+
* that needs no blame). This module answers it for pre-existing findings
|
|
12
|
+
* via `git blame`, then routes through who is still active.
|
|
13
|
+
*
|
|
14
|
+
* Honesty: `git blame` reports who LAST TOUCHED a line, not necessarily who
|
|
15
|
+
* introduced the finding — a formatter run or a move reassigns it. The
|
|
16
|
+
* provenance line states this; the routing softens it by pointing at the
|
|
17
|
+
* current owner when the blamed author has left.
|
|
18
|
+
*
|
|
19
|
+
* Privacy: emails are the internal join key only. Rendered output is the
|
|
20
|
+
* display name + GitHub @handle, never a raw email (same posture as the
|
|
21
|
+
* ownership model).
|
|
22
|
+
*
|
|
23
|
+
* Shape mirrors `explore/finding-context.ts` so threading `--attribute`
|
|
24
|
+
* through the detailed reports is identical to `--graph-context`.
|
|
25
|
+
*/
|
|
26
|
+
const child_process_1 = require("child_process");
|
|
27
|
+
const ownership_1 = require("../analyzers/developer/ownership");
|
|
28
|
+
const gather_1 = require("../analyzers/developer/gather");
|
|
29
|
+
const finding_context_1 = require("../explore/finding-context");
|
|
30
|
+
/** Parse `git blame --porcelain -L n,n` output for the author + commit of a
|
|
31
|
+
* single line. Pure — exported for tests. Returns `null` when the porcelain
|
|
32
|
+
* has no author (empty / error). */
|
|
33
|
+
function parseBlamePorcelain(out) {
|
|
34
|
+
const lines = out.split('\n');
|
|
35
|
+
const commit = lines[0]?.split(' ')[0];
|
|
36
|
+
let author = '';
|
|
37
|
+
let email = '';
|
|
38
|
+
for (const l of lines) {
|
|
39
|
+
if (l.startsWith('author '))
|
|
40
|
+
author = l.slice('author '.length).trim();
|
|
41
|
+
else if (l.startsWith('author-mail '))
|
|
42
|
+
email = l.slice('author-mail '.length).trim().replace(/^<|>$/g, '');
|
|
43
|
+
}
|
|
44
|
+
if (!commit || !author)
|
|
45
|
+
return null;
|
|
46
|
+
return { author, email, commit: commit.slice(0, 8) };
|
|
47
|
+
}
|
|
48
|
+
function blameLine(cwd, file, line) {
|
|
49
|
+
try {
|
|
50
|
+
const out = (0, child_process_1.execSync)(`git blame --porcelain -L ${line},${line} -- '${file.replace(/'/g, "'\\''")}'`, { cwd, encoding: 'utf8', stdio: ['ignore', 'pipe', 'ignore'] });
|
|
51
|
+
return parseBlamePorcelain(out);
|
|
52
|
+
}
|
|
53
|
+
catch {
|
|
54
|
+
return null;
|
|
55
|
+
}
|
|
56
|
+
}
|
|
57
|
+
/**
|
|
58
|
+
* Build per-finding attribution for a list of locations. Fail-open: returns
|
|
59
|
+
* `undefined` when git produces nothing usable. Only locations with a `line`
|
|
60
|
+
* are blamed (a file-level finding has no single line to attribute).
|
|
61
|
+
*/
|
|
62
|
+
function buildAttributionMap(cwd, locations, opts = {}) {
|
|
63
|
+
const max = opts.maxFindings ?? 200;
|
|
64
|
+
const now = opts.now ?? new Date();
|
|
65
|
+
const activeEmails = (0, ownership_1.gatherActiveEmails)(cwd, opts.activeSince ?? '6 months ago');
|
|
66
|
+
const attributions = {};
|
|
67
|
+
const currentOwnerCache = new Map();
|
|
68
|
+
let blamed = 0;
|
|
69
|
+
for (const loc of locations) {
|
|
70
|
+
if (blamed >= max)
|
|
71
|
+
break;
|
|
72
|
+
const key = (0, finding_context_1.locationKey)(loc.file, loc.line);
|
|
73
|
+
if (key in attributions)
|
|
74
|
+
continue;
|
|
75
|
+
// File-level finding (no line, e.g. a test gap): attribute to the
|
|
76
|
+
// file's current active owner — "who should test/own this," not who
|
|
77
|
+
// wrote a specific line.
|
|
78
|
+
if (typeof loc.line !== 'number') {
|
|
79
|
+
if (!currentOwnerCache.has(loc.file)) {
|
|
80
|
+
currentOwnerCache.set(loc.file, topActiveOwner(cwd, loc.file, now));
|
|
81
|
+
}
|
|
82
|
+
const owner = currentOwnerCache.get(loc.file);
|
|
83
|
+
if (owner) {
|
|
84
|
+
attributions[key] = {
|
|
85
|
+
author: owner.name,
|
|
86
|
+
...(owner.handle ? { handle: owner.handle } : {}),
|
|
87
|
+
active: true,
|
|
88
|
+
fileLevel: true,
|
|
89
|
+
};
|
|
90
|
+
}
|
|
91
|
+
continue;
|
|
92
|
+
}
|
|
93
|
+
const bl = blameLine(cwd, loc.file, loc.line);
|
|
94
|
+
blamed++;
|
|
95
|
+
if (!bl)
|
|
96
|
+
continue;
|
|
97
|
+
const active = activeEmails.has((0, gather_1.normalizeEmail)(bl.email));
|
|
98
|
+
const handle = (0, ownership_1.handleFromEmail)(bl.email);
|
|
99
|
+
let currentOwner;
|
|
100
|
+
if (!active) {
|
|
101
|
+
if (!currentOwnerCache.has(loc.file)) {
|
|
102
|
+
currentOwnerCache.set(loc.file, topActiveOwner(cwd, loc.file, now));
|
|
103
|
+
}
|
|
104
|
+
currentOwner = currentOwnerCache.get(loc.file);
|
|
105
|
+
}
|
|
106
|
+
attributions[key] = {
|
|
107
|
+
author: bl.author,
|
|
108
|
+
...(handle ? { handle } : {}),
|
|
109
|
+
commit: bl.commit,
|
|
110
|
+
active,
|
|
111
|
+
...(currentOwner ? { currentOwner } : {}),
|
|
112
|
+
};
|
|
113
|
+
}
|
|
114
|
+
if (Object.keys(attributions).length === 0)
|
|
115
|
+
return undefined;
|
|
116
|
+
return { attributions };
|
|
117
|
+
}
|
|
118
|
+
function topActiveOwner(cwd, file, now) {
|
|
119
|
+
const owners = (0, ownership_1.ownersFor)(cwd, [file], { now });
|
|
120
|
+
const top = owners.ranked.find((o) => o.active);
|
|
121
|
+
if (!top)
|
|
122
|
+
return undefined;
|
|
123
|
+
return { name: top.name, ...(top.githubHandle ? { handle: top.githubHandle } : {}) };
|
|
124
|
+
}
|
|
125
|
+
/** Compact cell rendering — name/@handle, never email. `—` when unresolved. */
|
|
126
|
+
function formatAttributionCell(attr) {
|
|
127
|
+
if (!attr)
|
|
128
|
+
return '—';
|
|
129
|
+
const who = attr.handle ? `@${attr.handle}` : attr.author;
|
|
130
|
+
if (attr.fileLevel)
|
|
131
|
+
return `${who} (owner)`;
|
|
132
|
+
if (attr.active)
|
|
133
|
+
return `${who} (active)`;
|
|
134
|
+
if (attr.currentOwner) {
|
|
135
|
+
const owner = attr.currentOwner.handle
|
|
136
|
+
? `@${attr.currentOwner.handle}`
|
|
137
|
+
: attr.currentOwner.name;
|
|
138
|
+
return `${who} (inactive) → ask ${owner}`;
|
|
139
|
+
}
|
|
140
|
+
return `${who} (inactive)`;
|
|
141
|
+
}
|
|
142
|
+
/** Provenance + honesty line printed above an attributed section. */
|
|
143
|
+
function attributionProvenanceLine() {
|
|
144
|
+
return (`_"Who to ask" is the author who LAST TOUCHED the line (\`git blame\`), not ` +
|
|
145
|
+
`necessarily who introduced the finding — a formatter run or a move can reassign ` +
|
|
146
|
+
`it. An inactive author is routed to the file's current active owner. Names + ` +
|
|
147
|
+
`GitHub @handles only; never emails._`);
|
|
148
|
+
}
|
|
149
|
+
//# sourceMappingURL=attribute.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"attribute.js","sourceRoot":"","sources":["../../src/attribution/attribute.ts"],"names":[],"mappings":";;AAuEA,kDAYC;AAmBD,kDA8DC;AAcD,sDAYC;AAGD,8DAOC;AAxMD;;;;;;;;;;;;;;;;;;GAkBG;AACH,iDAAyC;AACzC,gEAK0C;AAC1C,0DAA+D;AAC/D,gEAAyD;AAyCzD;;qCAEqC;AACrC,SAAgB,mBAAmB,CAAC,GAAW;IAC7C,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC9B,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;IACvC,IAAI,MAAM,GAAG,EAAE,CAAC;IAChB,IAAI,KAAK,GAAG,EAAE,CAAC;IACf,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;QACtB,IAAI,CAAC,CAAC,UAAU,CAAC,SAAS,CAAC;YAAE,MAAM,GAAG,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC;aAClE,IAAI,CAAC,CAAC,UAAU,CAAC,cAAc,CAAC;YACnC,KAAK,GAAG,CAAC,CAAC,KAAK,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;IACxE,CAAC;IACD,IAAI,CAAC,MAAM,IAAI,CAAC,MAAM;QAAE,OAAO,IAAI,CAAC;IACpC,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC;AACvD,CAAC;AAED,SAAS,SAAS,CAAC,GAAW,EAAE,IAAY,EAAE,IAAY;IACxD,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,IAAA,wBAAQ,EAClB,4BAA4B,IAAI,IAAI,IAAI,QAAQ,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,GAAG,EAC9E,EAAE,GAAG,EAAE,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,CAC/D,CAAC;QACF,OAAO,mBAAmB,CAAC,GAAG,CAAC,CAAC;IAClC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,SAAgB,mBAAmB,CACjC,GAAW,EACX,SAAyD,EACzD,OAAgC,EAAE;IAElC,MAAM,GAAG,GAAG,IAAI,CAAC,WAAW,IAAI,GAAG,CAAC;IACpC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,IAAI,IAAI,EAAE,CAAC;IACnC,MAAM,YAAY,GAAG,IAAA,8BAAkB,EAAC,GAAG,EAAE,IAAI,CAAC,WAAW,IAAI,cAAc,CAAC,CAAC;IAEjF,MAAM,YAAY,GAAuC,EAAE,CAAC;IAC5D,MAAM,iBAAiB,GAAG,IAAI,GAAG,EAAyD,CAAC;IAC3F,IAAI,MAAM,GAAG,CAAC,CAAC;IAEf,KAAK,MAAM,GAAG,IAAI,SAAS,EAAE,CAAC;QAC5B,IAAI,MAAM,IAAI,GAAG;YAAE,MAAM;QACzB,MAAM,GAAG,GAAG,IAAA,6BAAW,EAAC,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC;QAC5C,IAAI,GAAG,IAAI,YAAY;YAAE,SAAS;QAElC,kEAAkE;QAClE,oEAAoE;QACpE,yBAAyB;QACzB,IAAI,OAAO,GAAG,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YACjC,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;gBACrC,iBAAiB,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,cAAc,CAAC,GAAG,EAAE,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,CAAC;YACtE,CAAC;YACD,MAAM,KAAK,GAAG,iBAAiB,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YAC9C,IAAI,KAAK,EAAE,CAAC;gBACV,YAAY,CAAC,GAAG,CAAC,GAAG;oBAClB,MAAM,EAAE,KAAK,CAAC,IAAI;oBAClB,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;oBACjD,MAAM,EAAE,IAAI;oBACZ,SAAS,EAAE,IAAI;iBAChB,CAAC;YACJ,CAAC;YACD,SAAS;QACX,CAAC;QAED,MAAM,EAAE,GAAG,SAAS,CAAC,GAAG,EAAE,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC;QAC9C,MAAM,EAAE,CAAC;QACT,IAAI,CAAC,EAAE;YAAE,SAAS;QAElB,MAAM,MAAM,GAAG,YAAY,CAAC,GAAG,CAAC,IAAA,uBAAc,EAAC,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC;QAC1D,MAAM,MAAM,GAAG,IAAA,2BAAe,EAAC,EAAE,CAAC,KAAK,CAAC,CAAC;QACzC,IAAI,YAA2D,CAAC;QAChE,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;gBACrC,iBAAiB,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,cAAc,CAAC,GAAG,EAAE,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,CAAC;YACtE,CAAC;YACD,YAAY,GAAG,iBAAiB,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACjD,CAAC;QAED,YAAY,CAAC,GAAG,CAAC,GAAG;YAClB,MAAM,EAAE,EAAE,CAAC,MAAM;YACjB,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC7B,MAAM,EAAE,EAAE,CAAC,MAAM;YACjB,MAAM;YACN,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC1C,CAAC;IACJ,CAAC;IAED,IAAI,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,SAAS,CAAC;IAC7D,OAAO,EAAE,YAAY,EAAE,CAAC;AAC1B,CAAC;AAED,SAAS,cAAc,CACrB,GAAW,EACX,IAAY,EACZ,GAAS;IAET,MAAM,MAAM,GAAG,IAAA,qBAAS,EAAC,GAAG,EAAE,CAAC,IAAI,CAAC,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC;IAC/C,MAAM,GAAG,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAY,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;IAC3D,IAAI,CAAC,GAAG;QAAE,OAAO,SAAS,CAAC;IAC3B,OAAO,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,GAAG,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;AACvF,CAAC;AAED,+EAA+E;AAC/E,SAAgB,qBAAqB,CAAC,IAAoC;IACxE,IAAI,CAAC,IAAI;QAAE,OAAO,GAAG,CAAC;IACtB,MAAM,GAAG,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC;IAC1D,IAAI,IAAI,CAAC,SAAS;QAAE,OAAO,GAAG,GAAG,UAAU,CAAC;IAC5C,IAAI,IAAI,CAAC,MAAM;QAAE,OAAO,GAAG,GAAG,WAAW,CAAC;IAC1C,IAAI,IAAI,CAAC,YAAY,EAAE,CAAC;QACtB,MAAM,KAAK,GAAG,IAAI,CAAC,YAAY,CAAC,MAAM;YACpC,CAAC,CAAC,IAAI,IAAI,CAAC,YAAY,CAAC,MAAM,EAAE;YAChC,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC;QAC3B,OAAO,GAAG,GAAG,qBAAqB,KAAK,EAAE,CAAC;IAC5C,CAAC;IACD,OAAO,GAAG,GAAG,aAAa,CAAC;AAC7B,CAAC;AAED,qEAAqE;AACrE,SAAgB,yBAAyB;IACvC,OAAO,CACL,6EAA6E;QAC7E,kFAAkF;QAClF,+EAA+E;QAC/E,sCAAsC,CACvC,CAAC;AACJ,CAAC"}
|
package/dist/cli.d.ts.map
CHANGED
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"cli.d.ts","sourceRoot":"","sources":["../src/cli.ts"],"names":[],"mappings":"
|
|
1
|
+
{"version":3,"file":"cli.d.ts","sourceRoot":"","sources":["../src/cli.ts"],"names":[],"mappings":"AAwRA,wBAAsB,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAizDvD"}
|
package/dist/cli.js
CHANGED
|
@@ -82,6 +82,19 @@ async function buildGraphContextIfRequested(enabled, cwd, locations) {
|
|
|
82
82
|
logger.dim(`--graph-context: attached to ${enriched}/${locations.length} finding location(s).`);
|
|
83
83
|
return gc;
|
|
84
84
|
}
|
|
85
|
+
async function buildAttributionIfRequested(enabled, cwd, locations) {
|
|
86
|
+
if (!enabled)
|
|
87
|
+
return undefined;
|
|
88
|
+
const { buildAttributionMap } = await Promise.resolve().then(() => __importStar(require('./attribution/attribute')));
|
|
89
|
+
const attr = buildAttributionMap(cwd, locations);
|
|
90
|
+
if (!attr) {
|
|
91
|
+
logger.dim('--attribute: no attributable locations (git blame produced nothing) — skipped.');
|
|
92
|
+
return undefined;
|
|
93
|
+
}
|
|
94
|
+
const n = Object.keys(attr.attributions).length;
|
|
95
|
+
logger.dim(`--attribute: "who to ask" attached to ${n}/${locations.length} finding location(s).`);
|
|
96
|
+
return attr;
|
|
97
|
+
}
|
|
85
98
|
/**
|
|
86
99
|
* Apply `--fail-on-score` to a higher-is-better score. Exits with
|
|
87
100
|
* code 1 + a logged reason when the gate fires. Skips when the user
|
|
@@ -143,6 +156,11 @@ function printUsage() {
|
|
|
143
156
|
(hot-files / entry-points / file / feature / communities / api-surface / context)
|
|
144
157
|
vyuh-dxkit context <query> Slim structural slice for a query — token-efficient
|
|
145
158
|
codebase context for LLMs (--budget / --depth / --substring / --json)
|
|
159
|
+
vyuh-dxkit reviewers [--base <ref>|--staged] [--limit N] [--json]
|
|
160
|
+
Suggest reviewers for the change — active-owner model
|
|
161
|
+
(recency-weighted git history, bots + departed devs
|
|
162
|
+
filtered, excludes the author) blended with CODEOWNERS,
|
|
163
|
+
with a bus-factor signal. Names + @handles, never emails.
|
|
146
164
|
vyuh-dxkit to-xlsx <json> Convert a dxkit JSON report to 15-col XLSX
|
|
147
165
|
vyuh-dxkit tools [path] Show required analysis tools status
|
|
148
166
|
vyuh-dxkit tools install Interactively install missing tools
|
|
@@ -235,6 +253,11 @@ function printUsage() {
|
|
|
235
253
|
--graph-context Vulnerabilities/test-gaps/quality: attach per-finding graph context
|
|
236
254
|
(module + blast radius) to the detailed report. Needs a graph.json
|
|
237
255
|
(run health first); fail-open — skipped silently if absent.
|
|
256
|
+
--attribute Vulnerabilities/test-gaps/quality: attach a "who to ask" column to
|
|
257
|
+
the detailed report (git blame → active-owner model; inactive authors
|
|
258
|
+
routed to the current owner). Names + @handles, never emails. Opt-in;
|
|
259
|
+
fail-open. Historical only — net-new findings are introduced by your
|
|
260
|
+
own change.
|
|
238
261
|
--xlsx Licenses/bom: also write 15-col BOM XLSX
|
|
239
262
|
--since Dev-report: start date (YYYY-MM-DD)
|
|
240
263
|
--filter Bom: 'all' (default) or 'top-level' (keeps only root manifest deps;
|
|
@@ -334,11 +357,16 @@ async function run(argv) {
|
|
|
334
357
|
limit: { type: 'string' },
|
|
335
358
|
refresh: { type: 'boolean', default: false },
|
|
336
359
|
substring: { type: 'boolean', default: false },
|
|
360
|
+
// reviewers flags
|
|
361
|
+
staged: { type: 'boolean', default: false },
|
|
362
|
+
base: { type: 'string' },
|
|
337
363
|
// context flags
|
|
338
364
|
budget: { type: 'string' },
|
|
339
365
|
depth: { type: 'string' },
|
|
340
366
|
// graph-context enrichment for detailed reports (vuln/test-gaps/quality)
|
|
341
367
|
'graph-context': { type: 'boolean', default: false },
|
|
368
|
+
// attribution enrichment for detailed reports — "who to ask" (opt-in)
|
|
369
|
+
attribute: { type: 'boolean', default: false },
|
|
342
370
|
// ingest flags (external SAST engines → .dxkit/external snapshots)
|
|
343
371
|
sarif: { type: 'string' },
|
|
344
372
|
'from-snyk': { type: 'boolean', default: false },
|
|
@@ -784,8 +812,10 @@ async function run(argv) {
|
|
|
784
812
|
logger.success(`Report saved to ${path.relative(targetPath, reportPath)}`);
|
|
785
813
|
// D032 (2.4.7): detailed JSON + MD always written so dashboard finds fresh inputs.
|
|
786
814
|
const { buildSecurityDetailed, formatSecurityDetailedMarkdown } = await Promise.resolve().then(() => __importStar(require('./analyzers/security/detailed')));
|
|
787
|
-
const
|
|
788
|
-
const
|
|
815
|
+
const securityLocations = report.findings.map((f) => ({ file: f.file, line: f.line }));
|
|
816
|
+
const graphContext = await buildGraphContextIfRequested(!!values['graph-context'], targetPath, securityLocations);
|
|
817
|
+
const securityAttribution = await buildAttributionIfRequested(!!values.attribute, targetPath, securityLocations);
|
|
818
|
+
const securityDetailed = buildSecurityDetailed(report, graphContext, securityAttribution);
|
|
789
819
|
const securityDetailedJsonPath = path.join(reportDir, `vulnerability-scan-${date}-detailed.json`);
|
|
790
820
|
const securityDetailedMdPath = path.join(reportDir, `vulnerability-scan-${date}-detailed.md`);
|
|
791
821
|
fs.writeFileSync(securityDetailedJsonPath, JSON.stringify((0, report_schema_1.stampSchema)(securityDetailed, 'vulnerabilities-detailed'), null, 2));
|
|
@@ -863,7 +893,8 @@ async function run(argv) {
|
|
|
863
893
|
// D032 (2.4.7): detailed JSON + MD always written so dashboard finds fresh inputs.
|
|
864
894
|
const { buildTestGapsDetailed, formatTestGapsDetailedMarkdown } = await Promise.resolve().then(() => __importStar(require('./analyzers/tests/detailed')));
|
|
865
895
|
const testGapsGraphContext = await buildGraphContextIfRequested(!!values['graph-context'], targetPath, report.gaps.map((g) => ({ file: g.path })));
|
|
866
|
-
const
|
|
896
|
+
const testGapsAttribution = await buildAttributionIfRequested(!!values.attribute, targetPath, report.gaps.map((g) => ({ file: g.path })));
|
|
897
|
+
const testGapsDetailed = buildTestGapsDetailed(report, testGapsGraphContext, testGapsAttribution);
|
|
867
898
|
const testGapsDetailedJsonPath = path.join(reportDir, `test-gaps-${date}-detailed.json`);
|
|
868
899
|
const testGapsDetailedMdPath = path.join(reportDir, `test-gaps-${date}-detailed.md`);
|
|
869
900
|
fs.writeFileSync(testGapsDetailedJsonPath, JSON.stringify((0, report_schema_1.stampSchema)(testGapsDetailed, 'test-gaps-detailed'), null, 2));
|
|
@@ -940,8 +971,13 @@ async function run(argv) {
|
|
|
940
971
|
logger.success(`Report saved to ${path.relative(targetPath, reportPath)}`);
|
|
941
972
|
// D032 (2.4.7): detailed JSON + MD always written so dashboard finds fresh inputs.
|
|
942
973
|
const { buildQualityDetailed, formatQualityDetailedMarkdown } = await Promise.resolve().then(() => __importStar(require('./analyzers/quality/detailed')));
|
|
943
|
-
const
|
|
944
|
-
|
|
974
|
+
const qualityLocations = [
|
|
975
|
+
...(report.metrics.topConsoleFiles ?? []),
|
|
976
|
+
...(report.metrics.topTodoFiles ?? []),
|
|
977
|
+
].map((f) => ({ file: f.file }));
|
|
978
|
+
const qualityGraphContext = await buildGraphContextIfRequested(!!values['graph-context'], targetPath, qualityLocations);
|
|
979
|
+
const qualityAttribution = await buildAttributionIfRequested(!!values.attribute, targetPath, qualityLocations);
|
|
980
|
+
const qualityDetailed = buildQualityDetailed(report, qualityGraphContext, qualityAttribution);
|
|
945
981
|
const qualityDetailedJsonPath = path.join(reportDir, `quality-review-${date}-detailed.json`);
|
|
946
982
|
const qualityDetailedMdPath = path.join(reportDir, `quality-review-${date}-detailed.md`);
|
|
947
983
|
fs.writeFileSync(qualityDetailedJsonPath, JSON.stringify(qualityDetailed, null, 2));
|
|
@@ -1729,6 +1765,18 @@ async function run(argv) {
|
|
|
1729
1765
|
});
|
|
1730
1766
|
break;
|
|
1731
1767
|
}
|
|
1768
|
+
case 'reviewers': {
|
|
1769
|
+
const { runReviewers } = await Promise.resolve().then(() => __importStar(require('./reviewers-cli')));
|
|
1770
|
+
const limitRaw = values.limit;
|
|
1771
|
+
const limit = limitRaw ? parseInt(limitRaw, 10) : undefined;
|
|
1772
|
+
runReviewers(cwd, {
|
|
1773
|
+
base: values.base,
|
|
1774
|
+
staged: !!values.staged,
|
|
1775
|
+
json: !!values.json,
|
|
1776
|
+
...(Number.isFinite(limit) ? { limit } : {}),
|
|
1777
|
+
});
|
|
1778
|
+
break;
|
|
1779
|
+
}
|
|
1732
1780
|
case 'explore': {
|
|
1733
1781
|
const { runExplore } = await Promise.resolve().then(() => __importStar(require('./explore-cli')));
|
|
1734
1782
|
// positionals[0] is 'explore'; positionals[1..] are the
|