@weavelogic/knowledge-graph-agent 0.3.0 → 0.6.0

package/dist/plugins/analyzers/dependency-health/vulnerability.js

@@ -0,0 +1,215 @@
+import { exec } from "child_process";
+import { promisify } from "util";
+import { existsSync } from "fs";
+import { join } from "path";
+import { createLogger } from "../../../utils/logger.js";
+const execAsync = promisify(exec);
+const logger = createLogger("vulnerability-checker");
+const SEVERITY_ORDER = {
+  info: 0,
+  low: 1,
+  moderate: 2,
+  high: 3,
+  critical: 4
+};
+function meetsThreshold(severity, threshold) {
+  return SEVERITY_ORDER[severity] >= SEVERITY_ORDER[threshold];
+}
+function getMaxSeverity(severities) {
+  if (severities.length === 0) return "info";
+  let max = "info";
+  for (const severity of severities) {
+    if (SEVERITY_ORDER[severity] > SEVERITY_ORDER[max]) {
+      max = severity;
+    }
+  }
+  return max;
+}
+class VulnerabilityChecker {
+  projectRoot;
+  config;
+  constructor(projectRoot, config = {}) {
+    this.projectRoot = projectRoot;
+    this.config = {
+      vulnerabilitySeverityThreshold: config.vulnerabilitySeverityThreshold ?? "low",
+      timeout: config.timeout ?? 6e4,
+      ...config
+    };
+  }
+  /**
+   * Run npm audit and parse results
+   */
+  async checkVulnerabilities() {
+    const result = {
+      success: false,
+      report: null,
+      vulnerabilities: /* @__PURE__ */ new Map(),
+      summary: {
+        critical: 0,
+        high: 0,
+        moderate: 0,
+        low: 0,
+        info: 0,
+        total: 0
+      }
+    };
+    const lockFilePath = join(this.projectRoot, "package-lock.json");
+    if (!existsSync(lockFilePath)) {
+      logger.warn("No package-lock.json found, skipping vulnerability check");
+      result.error = "No package-lock.json found";
+      return result;
+    }
+    try {
+      logger.info("Running npm audit", { projectRoot: this.projectRoot });
+      const { stdout, stderr } = await execAsync(
+        "npm audit --json 2>/dev/null || true",
+        {
+          cwd: this.projectRoot,
+          timeout: this.config.timeout,
+          maxBuffer: 10 * 1024 * 1024
+          // 10MB buffer for large audits
+        }
+      );
+      if (!stdout.trim()) {
+        logger.info("npm audit returned empty result (no vulnerabilities or error)");
+        result.success = true;
+        return result;
+      }
+      let auditData;
+      try {
+        auditData = JSON.parse(stdout);
+      } catch (parseError) {
+        logger.error("Failed to parse npm audit output", parseError instanceof Error ? parseError : void 0);
+        result.error = "Failed to parse npm audit output";
+        return result;
+      }
+      result.report = auditData;
+      result.success = true;
+      if (auditData.metadata?.vulnerabilities) {
+        result.summary = {
+          critical: auditData.metadata.vulnerabilities.critical ?? 0,
+          high: auditData.metadata.vulnerabilities.high ?? 0,
+          moderate: auditData.metadata.vulnerabilities.moderate ?? 0,
+          low: auditData.metadata.vulnerabilities.low ?? 0,
+          info: auditData.metadata.vulnerabilities.info ?? 0,
+          total: auditData.metadata.vulnerabilities.total ?? 0
+        };
+      }
+      if (auditData.vulnerabilities) {
+        for (const [packageName, finding] of Object.entries(auditData.vulnerabilities)) {
+          const vulnInfo = this.parseAuditFinding(packageName, finding);
+          if (vulnInfo.length > 0) {
+            result.vulnerabilities.set(packageName, vulnInfo);
+          }
+        }
+      }
+      logger.info("Vulnerability check complete", {
+        total: result.summary.total,
+        critical: result.summary.critical,
+        high: result.summary.high,
+        moderate: result.summary.moderate
+      });
+    } catch (error) {
+      logger.error("npm audit failed", error instanceof Error ? error : void 0);
+      result.error = error instanceof Error ? error.message : String(error);
+    }
+    return result;
+  }
+  /**
+   * Parse an audit finding into vulnerability info
+   */
+  parseAuditFinding(packageName, finding) {
+    const vulnerabilities = [];
+    const vuln = {
+      id: `npm-audit-${packageName}`,
+      title: `Vulnerability in ${packageName}`,
+      severity: finding.severity,
+      vulnerableVersions: finding.range,
+      patchedVersions: this.extractPatchedVersion(finding.fixAvailable),
+      recommendation: this.generateRecommendation(finding),
+      references: []
+    };
+    if (meetsThreshold(vuln.severity, this.config.vulnerabilitySeverityThreshold)) {
+      vulnerabilities.push(vuln);
+    }
+    return vulnerabilities;
+  }
+  /**
+   * Extract patched version from fix info
+   */
+  extractPatchedVersion(fixAvailable) {
+    if (typeof fixAvailable === "boolean") {
+      return fixAvailable ? "Fix available" : null;
+    }
+    return `${fixAvailable.name}@${fixAvailable.version}`;
+  }
+  /**
+   * Generate recommendation text
+   */
+  generateRecommendation(finding) {
+    if (typeof finding.fixAvailable === "boolean") {
+      if (finding.fixAvailable) {
+        return `Run 'npm audit fix' to resolve this vulnerability`;
+      }
+      return "No automatic fix available. Manual intervention required.";
+    }
+    const fix = finding.fixAvailable;
+    if (fix.isSemVerMajor) {
+      return `Update to ${fix.name}@${fix.version} (breaking change)`;
+    }
+    return `Update to ${fix.name}@${fix.version}`;
+  }
+  /**
+   * Get vulnerabilities for a specific package
+   */
+  async getPackageVulnerabilities(packageName) {
+    const result = await this.checkVulnerabilities();
+    return result.vulnerabilities.get(packageName) ?? [];
+  }
+  /**
+   * Check if a package has critical vulnerabilities
+   */
+  async hasCriticalVulnerabilities(packageName) {
+    const vulns = await this.getPackageVulnerabilities(packageName);
+    return vulns.some((v) => v.severity === "critical" || v.severity === "high");
+  }
+  /**
+   * Get security score based on vulnerabilities (100 = no vulns, 0 = critical vulns)
+   */
+  calculateSecurityScore(vulnerabilities) {
+    if (vulnerabilities.length === 0) {
+      return 100;
+    }
+    let score = 100;
+    for (const vuln of vulnerabilities) {
+      switch (vuln.severity) {
+        case "critical":
+          score -= 40;
+          break;
+        case "high":
+          score -= 25;
+          break;
+        case "moderate":
+          score -= 10;
+          break;
+        case "low":
+          score -= 5;
+          break;
+        case "info":
+          score -= 1;
+          break;
+      }
+    }
+    return Math.max(0, score);
+  }
+}
+function createVulnerabilityChecker(projectRoot, config) {
+  return new VulnerabilityChecker(projectRoot, config);
+}
+export {
+  VulnerabilityChecker,
+  createVulnerabilityChecker,
+  getMaxSeverity,
+  meetsThreshold
+};
+//# sourceMappingURL=vulnerability.js.map

package/dist/plugins/analyzers/dependency-health/vulnerability.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"vulnerability.js","sources":["../../../../src/plugins/analyzers/dependency-health/vulnerability.ts"],"sourcesContent":["/**\n * Vulnerability Checker\n *\n * Checks npm dependencies for known security vulnerabilities\n * by parsing npm audit output and analyzing CVE data.\n *\n * @module plugins/analyzers/dependency-health/vulnerability\n */\n\nimport { exec } from 'child_process';\nimport { promisify } from 'util';\nimport { existsSync } from 'fs';\nimport { join } from 'path';\nimport { createLogger } from '../../../utils/logger.js';\nimport type {\n  AuditReport,\n  AuditFinding,\n  VulnerabilityInfo,\n  VulnerabilitySeverity,\n  DependencyHealthConfig,\n} from './types.js';\n\nconst execAsync = promisify(exec);\nconst logger = createLogger('vulnerability-checker');\n\n/**\n * Result of vulnerability check\n */\nexport interface VulnerabilityCheckResult {\n  /** Whether the check succeeded */\n  success: boolean;\n  /** Raw audit report */\n  report: AuditReport | null;\n  /** Parsed vulnerabilities by package */\n  vulnerabilities: Map<string, VulnerabilityInfo[]>;\n  /** Summary counts */\n  summary: {\n    critical: number;\n    high: number;\n    moderate: number;\n    low: number;\n    info: number;\n    total: number;\n  };\n  /** Error message if check failed */\n  error?: string;\n}\n\n/**\n * Severity order for comparison\n */\nconst SEVERITY_ORDER: Record<VulnerabilitySeverity, number> = {\n  info: 0,\n  low: 1,\n  moderate: 2,\n  high: 3,\n  critical: 4,\n};\n\n/**\n * Check if severity meets threshold\n */\nexport function meetsThreshold(\n  severity: VulnerabilitySeverity,\n  threshold: VulnerabilitySeverity\n): boolean {\n  return SEVERITY_ORDER[severity] >= SEVERITY_ORDER[threshold];\n}\n\n/**\n * Get maximum severity from a list\n */\nexport function getMaxSeverity(\n  severities: VulnerabilitySeverity[]\n): VulnerabilitySeverity {\n  if (severities.length === 0) return 'info';\n\n  let max: VulnerabilitySeverity = 'info';\n  for (const severity of severities) {\n    if (SEVERITY_ORDER[severity] > SEVERITY_ORDER[max]) {\n      max = severity;\n    }\n  }\n  return max;\n}\n\n/**\n * VulnerabilityChecker class\n */\nexport class VulnerabilityChecker {\n  private projectRoot: string;\n  private config: DependencyHealthConfig;\n\n  constructor(projectRoot: string, config: Partial<DependencyHealthConfig> = {}) {\n    this.projectRoot = projectRoot;\n    this.config = {\n      vulnerabilitySeverityThreshold: config.vulnerabilitySeverityThreshold ?? 'low',\n      timeout: config.timeout ?? 60000,\n      ...config,\n    } as DependencyHealthConfig;\n  }\n\n  /**\n   * Run npm audit and parse results\n   */\n  async checkVulnerabilities(): Promise<VulnerabilityCheckResult> {\n    const result: VulnerabilityCheckResult = {\n      success: false,\n      report: null,\n      vulnerabilities: new Map(),\n      summary: {\n        critical: 0,\n        high: 0,\n        moderate: 0,\n        low: 0,\n        info: 0,\n        total: 0,\n      },\n    };\n\n    // Check if package-lock.json exists\n    const lockFilePath = join(this.projectRoot, 'package-lock.json');\n    if (!existsSync(lockFilePath)) {\n      logger.warn('No package-lock.json found, skipping vulnerability check');\n      result.error = 'No package-lock.json found';\n      return result;\n    }\n\n    try {\n      logger.info('Running npm audit', { projectRoot: this.projectRoot });\n\n      // Run npm audit with JSON output\n      // We use --json flag and don't throw on non-zero exit (audit exits non-zero if vulnerabilities found)\n      const { stdout, stderr } = await execAsync(\n        'npm audit --json 2>/dev/null || true',\n        {\n          cwd: this.projectRoot,\n          timeout: this.config.timeout,\n          maxBuffer: 10 * 1024 * 1024, // 10MB buffer for large audits\n        }\n      );\n\n      if (!stdout.trim()) {\n        logger.info('npm audit returned empty result (no vulnerabilities or error)');\n        result.success = true;\n        return result;\n      }\n\n      // Parse the JSON output\n      let auditData: AuditReport;\n      try {\n        auditData = JSON.parse(stdout);\n      } catch (parseError) {\n        logger.error('Failed to parse npm audit output', parseError instanceof Error ? parseError : undefined);\n        result.error = 'Failed to parse npm audit output';\n        return result;\n      }\n\n      result.report = auditData;\n      result.success = true;\n\n      // Extract vulnerability counts from metadata\n      if (auditData.metadata?.vulnerabilities) {\n        result.summary = {\n          critical: auditData.metadata.vulnerabilities.critical ?? 0,\n          high: auditData.metadata.vulnerabilities.high ?? 0,\n          moderate: auditData.metadata.vulnerabilities.moderate ?? 0,\n          low: auditData.metadata.vulnerabilities.low ?? 0,\n          info: auditData.metadata.vulnerabilities.info ?? 0,\n          total: auditData.metadata.vulnerabilities.total ?? 0,\n        };\n      }\n\n      // Parse vulnerabilities by package\n      if (auditData.vulnerabilities) {\n        for (const [packageName, finding] of Object.entries(auditData.vulnerabilities)) {\n          const vulnInfo = this.parseAuditFinding(packageName, finding);\n          if (vulnInfo.length > 0) {\n            result.vulnerabilities.set(packageName, vulnInfo);\n          }\n        }\n      }\n\n      logger.info('Vulnerability check complete', {\n        total: result.summary.total,\n        critical: result.summary.critical,\n        high: result.summary.high,\n        moderate: result.summary.moderate,\n      });\n\n    } catch (error) {\n      logger.error('npm audit failed', error instanceof Error ? error : undefined);\n      result.error = error instanceof Error ? error.message : String(error);\n    }\n\n    return result;\n  }\n\n  /**\n   * Parse an audit finding into vulnerability info\n   */\n  private parseAuditFinding(packageName: string, finding: AuditFinding): VulnerabilityInfo[] {\n    const vulnerabilities: VulnerabilityInfo[] = [];\n\n    // Create a vulnerability entry from the finding\n    const vuln: VulnerabilityInfo = {\n      id: `npm-audit-${packageName}`,\n      title: `Vulnerability in ${packageName}`,\n      severity: finding.severity,\n      vulnerableVersions: finding.range,\n      patchedVersions: this.extractPatchedVersion(finding.fixAvailable),\n      recommendation: this.generateRecommendation(finding),\n      references: [],\n    };\n\n    // Filter by threshold\n    if (meetsThreshold(vuln.severity, this.config.vulnerabilitySeverityThreshold!)) {\n      vulnerabilities.push(vuln);\n    }\n\n    return vulnerabilities;\n  }\n\n  /**\n   * Extract patched version from fix info\n   */\n  private extractPatchedVersion(\n    fixAvailable: boolean | { name: string; version: string; isSemVerMajor: boolean }\n  ): string | null {\n    if (typeof fixAvailable === 'boolean') {\n      return fixAvailable ? 'Fix available' : null;\n    }\n    return `${fixAvailable.name}@${fixAvailable.version}`;\n  }\n\n  /**\n   * Generate recommendation text\n   */\n  private generateRecommendation(finding: AuditFinding): string {\n    if (typeof finding.fixAvailable === 'boolean') {\n      if (finding.fixAvailable) {\n        return `Run 'npm audit fix' to resolve this vulnerability`;\n      }\n      return 'No automatic fix available. Manual intervention required.';\n    }\n\n    const fix = finding.fixAvailable;\n    if (fix.isSemVerMajor) {\n      return `Update to ${fix.name}@${fix.version} (breaking change)`;\n    }\n    return `Update to ${fix.name}@${fix.version}`;\n  }\n\n  /**\n   * Get vulnerabilities for a specific package\n   */\n  async getPackageVulnerabilities(packageName: string): Promise<VulnerabilityInfo[]> {\n    const result = await this.checkVulnerabilities();\n    return result.vulnerabilities.get(packageName) ?? [];\n  }\n\n  /**\n   * Check if a package has critical vulnerabilities\n   */\n  async hasCriticalVulnerabilities(packageName: string): Promise<boolean> {\n    const vulns = await this.getPackageVulnerabilities(packageName);\n    return vulns.some(v => v.severity === 'critical' || v.severity === 'high');\n  }\n\n  /**\n   * Get security score based on vulnerabilities (100 = no vulns, 0 = critical vulns)\n   */\n  calculateSecurityScore(vulnerabilities: VulnerabilityInfo[]): number {\n    if (vulnerabilities.length === 0) {\n      return 100;\n    }\n\n    let score = 100;\n\n    for (const vuln of vulnerabilities) {\n      switch (vuln.severity) {\n        case 'critical':\n          score -= 40;\n          break;\n        case 'high':\n          score -= 25;\n          break;\n        case 'moderate':\n          score -= 10;\n          break;\n        case 'low':\n          score -= 5;\n          break;\n        case 'info':\n          score -= 1;\n          break;\n      }\n    }\n\n    return Math.max(0, score);\n  }\n}\n\n/**\n * Create a vulnerability checker instance\n */\nexport function createVulnerabilityChecker(\n  projectRoot: string,\n  config?: Partial<DependencyHealthConfig>\n): VulnerabilityChecker {\n  return new VulnerabilityChecker(projectRoot, config);\n}\n"],"names":[],"mappings":";;;;;AAsBA,MAAM,YAAY,UAAU,IAAI;AAChC,MAAM,SAAS,aAAa,uBAAuB;AA4BnD,MAAM,iBAAwD;AAAA,EAC5D,MAAM;AAAA,EACN,KAAK;AAAA,EACL,UAAU;AAAA,EACV,MAAM;AAAA,EACN,UAAU;AACZ;AAKO,SAAS,eACd,UACA,WACS;AACT,SAAO,eAAe,QAAQ,KAAK,eAAe,SAAS;AAC7D;AAKO,SAAS,eACd,YACuB;AACvB,MAAI,WAAW,WAAW,EAAG,QAAO;AAEpC,MAAI,MAA6B;AACjC,aAAW,YAAY,YAAY;AACjC,QAAI,eAAe,QAAQ,IAAI,eAAe,GAAG,GAAG;AAClD,YAAM;AAAA,IACR;AAAA,EACF;AACA,SAAO;AACT;AAKO,MAAM,qBAAqB;AAAA,EACxB;AAAA,EACA;AAAA,EAER,YAAY,aAAqB,SAA0C,IAAI;AAC7E,SAAK,cAAc;AACnB,SAAK,SAAS;AAAA,MACZ,gCAAgC,OAAO,kCAAkC;AAAA,MACzE,SAAS,OAAO,WAAW;AAAA,MAC3B,GAAG;AAAA,IAAA;AAAA,EAEP;AAAA;AAAA;AAAA;AAAA,EAKA,MAAM,uBAA0D;AAC9D,UAAM,SAAmC;AAAA,MACvC,SAAS;AAAA,MACT,QAAQ;AAAA,MACR,qCAAqB,IAAA;AAAA,MACrB,SAAS;AAAA,QACP,UAAU;AAAA,QACV,MAAM;AAAA,QACN,UAAU;AAAA,QACV,KAAK;AAAA,QACL,MAAM;AAAA,QACN,OAAO;AAAA,MAAA;AAAA,IACT;AAIF,UAAM,eAAe,KAAK,KAAK,aAAa,mBAAmB;AAC/D,QAAI,CAAC,WAAW,YAAY,GAAG;AAC7B,aAAO,KAAK,0DAA0D;AACtE,aAAO,QAAQ;AACf,aAAO;AAAA,IACT;AAEA,QAAI;AACF,aAAO,KAAK,qBAAqB,EAAE,aAAa,KAAK,aAAa;AAIlE,YAAM,EAAE,QAAQ,OAAA,IAAW,MAAM;AAAA,QAC/B;AAAA,QACA;AAAA,UACE,KAAK,KAAK;AAAA,UACV,SAAS,KAAK,OAAO;AAAA,UACrB,WAAW,KAAK,OAAO;AAAA;AAAA,QAAA;AAAA,MACzB;AAGF,UAAI,CAAC,OAAO,QAAQ;AAClB,eAAO,KAAK,+DAA+D;AAC3E,eAAO,UAAU;AACjB,eAAO;AAAA,MACT;AAGA,UAAI;AACJ,UAAI;AACF,oBAAY,KAAK,MAAM,MAAM;AAAA,MAC/B,SAAS,YAAY;AACnB,eAAO,MAAM,oCAAoC,sBAAsB,QAAQ,aAAa,MAAS;AACrG,eAAO,QAAQ;AACf,eAAO;AAAA,MACT;AAEA,aAAO,SAAS;AAChB,aAAO,UAAU;AAGjB,UAAI,UAAU,UAAU,iBAAiB;AACvC,eAAO,UAAU;AAAA,UACf,UAAU,UAAU,SAAS,gBAAgB,YAAY;AAAA,UACzD,MAAM,UAAU,SAAS,gBAAgB,QAAQ;AAAA,UACjD,UAAU,UAAU,SAAS,gBAAgB,YAAY;AAAA,UACzD,KAAK,UAAU,SAAS,gBAAgB,OAAO;AAAA,UAC/C,MAAM,UAAU,SAAS,gBAAgB,QAAQ;AAAA,UACjD,OAAO,UAAU,SAAS,gBAAgB,SAAS;AAAA,QAAA;AAAA,MAEvD;AAGA,UAAI,UAAU,iBAAiB;AAC7B,mBAAW,CAAC,aAAa,OAAO,KAAK,OAAO,QAAQ,UAAU,eAAe,GAAG;AAC9E,gBAAM,WAAW,KAAK,kBAAkB,aAAa,OAAO;AAC5D,cAAI,SAAS,SAAS,GAAG;AACvB,mBAAO,gBAAgB,IAAI,aAAa,QAAQ;AAAA,UAClD;AAAA,QACF;AAAA,MACF;AAEA,aAAO,KAAK,gCAAgC;AAAA,QAC1C,OAAO,OAAO,QAAQ;AAAA,QACtB,UAAU,OAAO,QAAQ;AAAA,QACzB,MAAM,OAAO,QAAQ;AAAA,QACrB,UAAU,OAAO,QAAQ;AAAA,MAAA,CAC1B;AAAA,IAEH,SAAS,OAAO;AACd,aAAO,MAAM,oBAAoB,iBAAiB,QAAQ,QAAQ,MAAS;AAC3E,aAAO,QAAQ,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK;AAAA,IACtE;AAEA,WAAO;AAAA,EACT;AAAA;AAAA;AAAA;AAAA,EAKQ,kBAAkB,aAAqB,SAA4C;AACzF,UAAM,kBAAuC,CAAA;AAG7C,UAAM,OAA0B;AAAA,MAC9B,IAAI,aAAa,WAAW;AAAA,MAC5B,OAAO,oBAAoB,WAAW;AAAA,MACtC,UAAU,QAAQ;AAAA,MAClB,oBAAoB,QAAQ;AAAA,MAC5B,iBAAiB,KAAK,sBAAsB,QAAQ,YAAY;AAAA,MAChE,gBAAgB,KAAK,uBAAuB,OAAO;AAAA,MACnD,YAAY,CAAA;AAAA,IAAC;AAIf,QAAI,eAAe,KAAK,UAAU,KAAK,OAAO,8BAA+B,GAAG;AAC9E,sBAAgB,KAAK,IAAI;AAAA,IAC3B;AAEA,WAAO;AAAA,EACT;AAAA;AAAA;AAAA;AAAA,EAKQ,sBACN,cACe;AACf,QAAI,OAAO,iBAAiB,WAAW;AACrC,aAAO,eAAe,kBAAkB;AAAA,IAC1C;AACA,WAAO,GAAG,aAAa,IAAI,IAAI,aAAa,OAAO;AAAA,EACrD;AAAA;AAAA;AAAA;AAAA,EAKQ,uBAAuB,SAA+B;AAC5D,QAAI,OAAO,QAAQ,iBAAiB,WAAW;AAC7C,UAAI,QAAQ,cAAc;AACxB,eAAO;AAAA,MACT;AACA,aAAO;AAAA,IACT;AAEA,UAAM,MAAM,QAAQ;AACpB,QAAI,IAAI,eAAe;AACrB,aAAO,aAAa,IAAI,IAAI,IAAI,IAAI,OAAO;AAAA,IAC7C;AACA,WAAO,aAAa,IAAI,IAAI,IAAI,IAAI,OAAO;AAAA,EAC7C;AAAA;AAAA;AAAA;AAAA,EAKA,MAAM,0BAA0B,aAAmD;AACjF,UAAM,SAAS,MAAM,KAAK,qBAAA;AAC1B,WAAO,OAAO,gBAAgB,IAAI,WAAW,KAAK,CAAA;AAAA,EACpD;AAAA;AAAA;AAAA;AAAA,EAKA,MAAM,2BAA2B,aAAuC;AACtE,UAAM,QAAQ,MAAM,KAAK,0BAA0B,WAAW;AAC9D,WAAO,MAAM,KAAK,CAAA,MAAK,EAAE,aAAa,cAAc,EAAE,aAAa,MAAM;AAAA,EAC3E;AAAA;AAAA;AAAA;AAAA,EAKA,uBAAuB,iBAA8C;AACnE,QAAI,gBAAgB,WAAW,GAAG;AAChC,aAAO;AAAA,IACT;AAEA,QAAI,QAAQ;AAEZ,eAAW,QAAQ,iBAAiB;AAClC,cAAQ,KAAK,UAAA;AAAA,QACX,KAAK;AACH,mBAAS;AACT;AAAA,QACF,KAAK;AACH,mBAAS;AACT;AAAA,QACF,KAAK;AACH,mBAAS;AACT;AAAA,QACF,KAAK;AACH,mBAAS;AACT;AAAA,QACF,KAAK;AACH,mBAAS;AACT;AAAA,MAAA;AAAA,IAEN;AAEA,WAAO,KAAK,IAAI,GAAG,KAAK;AAAA,EAC1B;AACF;AAKO,SAAS,2BACd,aACA,QACsB;AACtB,SAAO,IAAI,qBAAqB,aAAa,MAAM;AACrD;"}

package/dist/plugins/analyzers/index.d.ts

@@ -0,0 +1,12 @@
+/**
+ * Analyzer Plugins Index
+ *
+ * Exports all available analyzer plugins for the knowledge-graph-agent.
+ *
+ * @module plugins/analyzers
+ */
+export { DependencyHealthAnalyzerPlugin, createDependencyHealthAnalyzerPlugin, DependencyHealthPlugin, createDependencyHealthPlugin, analyzeDependencyHealth, enhanceDependenciesWithHealth, DependencyHealthAnalyzer, createDependencyHealthAnalyzer, DependencyGraphGenerator, createDependencyGraphGenerator, NpmClient, createNpmClient, VulnerabilityChecker, createVulnerabilityChecker, } from './dependency-health/index.js';
+export type { DependencyHealthConfig, DependencyAnalyzerPluginConfig, DependencyHealthPluginResult, DependencyHealthAnalysis, DependencyHealthScore, DependencyHealthNode, DependencyHealthMetrics, VulnerabilitySeverity, VulnerabilityInfo, VulnerablePattern, AuditFinding, AuditReport, OutdatedPackage, UpdateUrgency, NpmPackageMetadata, NpmQualityMetrics, NpmDownloadStats, PackageJson, PackageLockJson, HealthStatus, HealthIssue, DependencyEdge, } from './dependency-health/index.js';
+export { CodeComplexityAnalyzerPlugin, createCodeComplexityAnalyzerPlugin, CodeComplexityPlugin, createComplexityPlugin, analyzeComplexity, registerWithSeedGenerator, CodeComplexityAnalyzer, analyzeProjectComplexity, analyzeFileComplexity, ComplexityGraphGenerator, generateComplexityNodes, calculateCyclomaticComplexity, calculateCognitiveComplexity, calculateMaxNestingDepth, calculateMaintainabilityIndex, calculateHalsteadMetrics, DEFAULT_THRESHOLDS, EMPTY_HALSTEAD_METRICS, pluginMetadata as codeComplexityMetadata, } from './code-complexity/index.js';
+export type { AnalyzerConfig as ComplexityAnalyzerConfig, CodeComplexityPluginConfig, ComplexityPluginOptions, ComplexityPluginResult, ComplexityNode, ComplexityEdge, ProjectAnalysis, FileAnalysis, FunctionAnalysis, ComplexityScore, ComplexityLevel, ComplexityThresholds, HalsteadMetrics, } from './code-complexity/index.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/plugins/analyzers/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/plugins/analyzers/index.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAGH,OAAO,EAEL,8BAA8B,EAC9B,oCAAoC,EAGpC,sBAAsB,EACtB,4BAA4B,EAC5B,uBAAuB,EACvB,6BAA6B,EAG7B,wBAAwB,EACxB,8BAA8B,EAC9B,wBAAwB,EACxB,8BAA8B,EAC9B,SAAS,EACT,eAAe,EACf,oBAAoB,EACpB,0BAA0B,GAC3B,MAAM,8BAA8B,CAAC;AAGtC,YAAY,EAEV,sBAAsB,EACtB,8BAA8B,EAC9B,4BAA4B,EAG5B,wBAAwB,EACxB,qBAAqB,EACrB,oBAAoB,EACpB,uBAAuB,EAGvB,qBAAqB,EACrB,iBAAiB,EACjB,iBAAiB,EACjB,YAAY,EACZ,WAAW,EAGX,eAAe,EACf,aAAa,EAGb,kBAAkB,EAClB,iBAAiB,EACjB,gBAAgB,EAChB,WAAW,EACX,eAAe,EAGf,YAAY,EACZ,WAAW,EAGX,cAAc,GACf,MAAM,8BAA8B,CAAC;AAGtC,OAAO,EAEL,4BAA4B,EAC5B,kCAAkC,EAGlC,oBAAoB,EACpB,sBAAsB,EACtB,iBAAiB,EACjB,yBAAyB,EAGzB,sBAAsB,EACtB,wBAAwB,EACxB,qBAAqB,EAGrB,wBAAwB,EACxB,uBAAuB,EAGvB,6BAA6B,EAC7B,4BAA4B,EAC5B,wBAAwB,EACxB,6BAA6B,EAC7B,wBAAwB,EAGxB,kBAAkB,EAClB,sBAAsB,EAGtB,cAAc,IAAI,sBAAsB,GACzC,MAAM,4BAA4B,CAAC;AAGpC,YAAY,EACV,cAAc,IAAI,wBAAwB,EAC1C,0BAA0B,EAC1B,uBAAuB,EACvB,sBAAsB,EACtB,cAAc,EACd,cAAc,EACd,eAAe,EACf,YAAY,EACZ,gBAAgB,EAChB,eAAe,EACf,eAAe,EACf,oBAAoB,EACpB,eAAe,GAChB,MAAM,4BAA4B,CAAC"}

package/dist/plugins/index.d.ts

@@ -0,0 +1,13 @@
+/**
+ * Plugin System
+ *
+ * Exports plugin system types and utilities for the knowledge-graph-agent.
+ *
+ * @module plugins
+ */
+export * from './types.js';
+export { PluginManagerImpl, PluginRegistryImpl, PluginLoaderImpl, createPluginManager, createPluginRegistry, createPluginLoader, createDefaultPluginManager, } from './manager.js';
+export { AdvancedPluginRegistry, createAdvancedPluginRegistry, type CompatibilityResult, } from './registry.js';
+export { AdvancedPluginLoader, createAdvancedPluginLoader, } from './loader.js';
+export * from './analyzers/index.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/plugins/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/plugins/index.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAGH,cAAc,YAAY,CAAC;AAG3B,OAAO,EACL,iBAAiB,EACjB,kBAAkB,EAClB,gBAAgB,EAChB,mBAAmB,EACnB,oBAAoB,EACpB,kBAAkB,EAClB,0BAA0B,GAC3B,MAAM,cAAc,CAAC;AAGtB,OAAO,EACL,sBAAsB,EACtB,4BAA4B,EAC5B,KAAK,mBAAmB,GACzB,MAAM,eAAe,CAAC;AAGvB,OAAO,EACL,oBAAoB,EACpB,0BAA0B,GAC3B,MAAM,aAAa,CAAC;AAGrB,cAAc,sBAAsB,CAAC"}

package/dist/plugins/loader.d.ts

@@ -0,0 +1,158 @@
+/**
+ * Plugin Loader
+ *
+ * Handles plugin discovery, loading, validation, and hot-reloading.
+ * Supports loading plugins from file paths and npm packages.
+ *
+ * @module plugins/loader
+ */
+import type { KGPlugin, KGPluginManifest, PluginLoader as IPluginLoader, PluginLoadOptions, PluginLoadResult, DiscoveredPlugin } from './types.js';
+/**
+ * Plugin Loader implementation
+ *
+ * Discovers, validates, and loads plugins from the filesystem or npm.
+ * Supports caching and hot-reloading for development.
+ *
+ * @example
+ * ```typescript
+ * const loader = new PluginLoaderImpl({
+ *   searchPaths: ['./plugins', './node_modules'],
+ *   enableHotReload: true,
+ * });
+ *
+ * // Discover available plugins
+ * const discovered = await loader.discover();
+ *
+ * // Load a specific plugin
+ * const result = await loader.load('@kg-plugins/markdown');
+ * if (result.success) {
+ *   console.log('Loaded:', result.plugin.name);
+ * }
+ * ```
+ */
+export declare class AdvancedPluginLoader implements IPluginLoader {
+    private cache;
+    private searchPaths;
+    private enableHotReload;
+    private hotReloadCallbacks;
+    constructor(options?: {
+        searchPaths?: string[];
+        enableHotReload?: boolean;
+    });
+    /**
+     * Discover available plugins in search paths
+     */
+    discover(): Promise<DiscoveredPlugin[]>;
+    /**
+     * Load a plugin by name
+     */
+    load(name: string, options?: PluginLoadOptions): Promise<PluginLoadResult>;
+    /**
+     * Load a plugin from a specific path
+     */
+    loadFromPath(path: string, options?: PluginLoadOptions): Promise<PluginLoadResult>;
+    /**
+     * Unload a plugin by name
+     */
+    unload(name: string): Promise<boolean>;
+    /**
+     * Reload a plugin
+     */
+    reload(name: string): Promise<PluginLoadResult>;
+    /**
+     * Get a loaded plugin by name
+     */
+    get(name: string): KGPlugin | undefined;
+    /**
+     * Check if a plugin is loaded
+     */
+    isLoaded(name: string): boolean;
+    /**
+     * Get all loaded plugins
+     */
+    getAll(): KGPlugin[];
+    /**
+     * Validate a plugin manifest
+     */
+    validateManifest(manifest: KGPluginManifest): {
+        valid: boolean;
+        errors: string[];
+        warnings: string[];
+    };
+    /**
+     * Set plugin search paths
+     */
+    setSearchPaths(paths: string[]): void;
+    /**
+     * Get current plugin search paths
+     */
+    getSearchPaths(): string[];
+    /**
+     * Register a callback for hot-reload events
+     */
+    onHotReload(name: string, callback: (plugin: KGPlugin) => void): void;
+    /**
+     * Clear the plugin cache
+     */
+    clearCache(): Promise<void>;
+    /**
+     * Get cache statistics
+     */
+    getCacheStats(): {
+        entries: number;
+        oldestEntry: number | null;
+        newestEntry: number | null;
+    };
+    /**
+     * Try to discover a plugin at the given path
+     */
+    private tryDiscoverPlugin;
+    /**
+     * Find a plugin by name in search paths
+     */
+    private findPlugin;
+    /**
+     * Load a plugin manifest from a path
+     */
+    private loadManifest;
+    /**
+     * Load the plugin module
+     */
+    private loadPluginModule;
+    /**
+     * Import a plugin module
+     */
+    private importPlugin;
+    /**
+     * Check if an export is a plugin instance
+     */
+    private isPluginInstance;
+    /**
+     * Check if an export is a plugin constructor
+     */
+    private isPluginConstructor;
+    /**
+     * Check if an export is a plugin factory
+     */
+    private isPluginFactory;
+    /**
+     * Clear module from Node.js cache
+     */
+    private clearModuleCache;
+    /**
+     * Setup hot-reload watcher for a plugin
+     */
+    private setupHotReload;
+    /**
+     * Read directory entries
+     */
+    private readDir;
+}
+/**
+ * Create a new advanced plugin loader
+ */
+export declare function createAdvancedPluginLoader(options?: {
+    searchPaths?: string[];
+    enableHotReload?: boolean;
+}): AdvancedPluginLoader;
+//# sourceMappingURL=loader.d.ts.map

package/dist/plugins/loader.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"loader.d.ts","sourceRoot":"","sources":["../../src/plugins/loader.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAMH,OAAO,KAAK,EACV,QAAQ,EACR,gBAAgB,EAChB,YAAY,IAAI,aAAa,EAC7B,iBAAiB,EACjB,gBAAgB,EAEhB,gBAAgB,EAIjB,MAAM,YAAY,CAAC;AAuBpB;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,qBAAa,oBAAqB,YAAW,aAAa;IACxD,OAAO,CAAC,KAAK,CAA4C;IACzD,OAAO,CAAC,WAAW,CAAgB;IACnC,OAAO,CAAC,eAAe,CAAU;IACjC,OAAO,CAAC,kBAAkB,CAAsD;gBAEpE,OAAO,GAAE;QACnB,WAAW,CAAC,EAAE,MAAM,EAAE,CAAC;QACvB,eAAe,CAAC,EAAE,OAAO,CAAC;KACtB;IAKN;;OAEG;IACG,QAAQ,IAAI,OAAO,CAAC,gBAAgB,EAAE,CAAC;IAyC7C;;OAEG;IACG,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,iBAAiB,GAAG,OAAO,CAAC,gBAAgB,CAAC;IA4BhF;;OAEG;IACG,YAAY,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,iBAAiB,GAAG,OAAO,CAAC,gBAAgB,CAAC;IA4GxF;;OAEG;IACG,MAAM,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IA4B5C;;OAEG;IACG,MAAM,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,gBAAgB,CAAC;IAmBrD;;OAEG;IACH,GAAG,CAAC,IAAI,EAAE,MAAM,GAAG,QAAQ,GAAG,SAAS;IAIvC;;OAEG;IACH,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO;IAI/B;;OAEG;IACH,MAAM,IAAI,QAAQ,EAAE;IAIpB;;OAEG;IACH,gBAAgB,CAAC,QAAQ,EAAE,gBAAgB,GAAG;QAC5C,KAAK,EAAE,OAAO,CAAC;QACf,MAAM,EAAE,MAAM,EAAE,CAAC;QACjB,QAAQ,EAAE,MAAM,EAAE,CAAC;KACpB;IA0ED;;OAEG;IACH,cAAc,CAAC,KAAK,EAAE,MAAM,EAAE,GAAG,IAAI;IAKrC;;OAEG;IACH,cAAc,IAAI,MAAM,EAAE;IAI1B;;OAEG;IACH,WAAW,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,MAAM,EAAE,QAAQ,KAAK,IAAI,GAAG,IAAI;IAIrE;;OAEG;IACG,UAAU,IAAI,OAAO,CAAC,IAAI,CAAC;IAQjC;;OAEG;IACH,aAAa,IAAI;QACf,OAAO,EAAE,MAAM,CAAC;QAChB,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;QAC3B,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;KAC5B;IAuBD;;OAEG;YACW,iBAAiB;IAiB/B;;OAEG;YACW,UAAU;IAiCxB;;OAEG;YACW,YAAY;IAyB1B;;OAEG;YACW,gBAAgB;IA+B9B;;OAEG;YACW,YAAY;IA8C1B;;OAEG;IACH,OAAO,CAAC,gBAAgB;IAcxB;;OAEG;IACH,OAAO,CAAC,mBAAmB;IAQ3B;;OAEG;IACH,OAAO,CAAC,eAAe;IAIvB;;OAEG;IACH,OAAO,CAAC,gBAAgB;IAYxB;;OAEG;IACH,OAAO,CAAC,cAAc;IA+BtB;;OAEG;YACW,OAAO;CAQtB;AAED;;GAEG;AACH,wBAAgB,0BAA0B,CAAC,OAAO,GAAE;IAClD,WAAW,CAAC,EAAE,MAAM,EAAE,CAAC;IACvB,eAAe,CAAC,EAAE,OAAO,CAAC;CACtB,GAAG,oBAAoB,CAE5B"}