al-sem 0.0.1

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (231) hide show
  1. package/LICENSE +21 -0
  2. package/README.md +361 -0
  3. package/package.json +64 -0
  4. package/scripts/d40-diff.ts +44 -0
  5. package/scripts/fetch-native-parser.ts +179 -0
  6. package/scripts/precision-sample.ts +99 -0
  7. package/scripts/precision-study.ts +42 -0
  8. package/scripts/precision-tabulate.ts +52 -0
  9. package/src/cli/baseline.ts +31 -0
  10. package/src/cli/diff.ts +199 -0
  11. package/src/cli/events-chains.ts +56 -0
  12. package/src/cli/events-fanout.ts +87 -0
  13. package/src/cli/exit-code.ts +30 -0
  14. package/src/cli/fingerprint-indexes.ts +130 -0
  15. package/src/cli/fingerprint-query.ts +543 -0
  16. package/src/cli/fingerprint-witness.ts +493 -0
  17. package/src/cli/fingerprint.ts +292 -0
  18. package/src/cli/format-compact-json.ts +45 -0
  19. package/src/cli/format-events.ts +77 -0
  20. package/src/cli/format-fingerprint.ts +295 -0
  21. package/src/cli/format-html.ts +503 -0
  22. package/src/cli/format-json.ts +13 -0
  23. package/src/cli/format-policy.ts +95 -0
  24. package/src/cli/format-sarif.ts +186 -0
  25. package/src/cli/format-terminal.ts +153 -0
  26. package/src/cli/index.ts +566 -0
  27. package/src/cli/policy.ts +204 -0
  28. package/src/config/roots-config.ts +302 -0
  29. package/src/deps/cache-versions.ts +74 -0
  30. package/src/deps/canonical-json.ts +27 -0
  31. package/src/deps/dependency-artifact.ts +144 -0
  32. package/src/deps/dependency-cache.ts +262 -0
  33. package/src/deps/dependency-dag.ts +128 -0
  34. package/src/deps/dependency-package-discovery.ts +85 -0
  35. package/src/deps/dependency-pipeline.ts +483 -0
  36. package/src/deps/dependency-projection.ts +211 -0
  37. package/src/deps/dependency-resolver.ts +154 -0
  38. package/src/deps/workspace-dependencies.ts +114 -0
  39. package/src/detectors/capability-query.ts +145 -0
  40. package/src/detectors/confidence.ts +52 -0
  41. package/src/detectors/d1-db-op-in-loop.ts +457 -0
  42. package/src/detectors/d10-self-modifying-loop.ts +114 -0
  43. package/src/detectors/d11-modify-without-get.ts +129 -0
  44. package/src/detectors/d12-dead-integration-event.ts +81 -0
  45. package/src/detectors/d13-cross-app-internal-call.ts +105 -0
  46. package/src/detectors/d14-dead-routine.ts +151 -0
  47. package/src/detectors/d16-obsolete-routine-call.ts +94 -0
  48. package/src/detectors/d17-min-version-drift.ts +157 -0
  49. package/src/detectors/d18-constant-filter-in-loop.ts +151 -0
  50. package/src/detectors/d19-unused-parameter.ts +116 -0
  51. package/src/detectors/d2-event-fanout-in-loop.ts +240 -0
  52. package/src/detectors/d20-unreachable-after-exit.ts +92 -0
  53. package/src/detectors/d21-read-without-load.ts +128 -0
  54. package/src/detectors/d22-flowfield-without-calcfields.ts +168 -0
  55. package/src/detectors/d29-subscriber-modify-on-event-record.ts +163 -0
  56. package/src/detectors/d3-load-state.ts +72 -0
  57. package/src/detectors/d3-missing-setloadfields.ts +234 -0
  58. package/src/detectors/d32-constant-boolean-parameter.ts +185 -0
  59. package/src/detectors/d33-unfiltered-bulk-write.ts +173 -0
  60. package/src/detectors/d34-commit-in-loop.ts +206 -0
  61. package/src/detectors/d35-commit-in-event-subscriber.ts +138 -0
  62. package/src/detectors/d36-late-setloadfields.ts +162 -0
  63. package/src/detectors/d37-validate-without-persist.ts +271 -0
  64. package/src/detectors/d38-subscriber-to-obsolete-event.ts +140 -0
  65. package/src/detectors/d39-record-left-dirty-across-chain.ts +165 -0
  66. package/src/detectors/d4-repeated-lookup-in-loop.ts +128 -0
  67. package/src/detectors/d40-transitive-load-missing.ts +217 -0
  68. package/src/detectors/d41-transitive-filter-loss.ts +200 -0
  69. package/src/detectors/d42-cross-call-wrong-setloadfields.ts +243 -0
  70. package/src/detectors/d43-event-ishandled-skip.ts +257 -0
  71. package/src/detectors/d44-event-multi-subscriber-overlap.ts +223 -0
  72. package/src/detectors/d45-event-transitive-table-exposure.ts +159 -0
  73. package/src/detectors/d5-set-based-opportunity.ts +162 -0
  74. package/src/detectors/d7-recursive-event-expansion.ts +151 -0
  75. package/src/detectors/d8-commit-in-transaction.ts +132 -0
  76. package/src/detectors/d9-transaction-span-summary.ts +107 -0
  77. package/src/detectors/detector-context.ts +121 -0
  78. package/src/detectors/finding-grouping.ts +61 -0
  79. package/src/detectors/path-merge.ts +174 -0
  80. package/src/detectors/registry.ts +176 -0
  81. package/src/detectors/table-display.ts +42 -0
  82. package/src/diff/diff-abi.ts +195 -0
  83. package/src/diff/diff-capabilities.ts +179 -0
  84. package/src/diff/diff-engine.ts +146 -0
  85. package/src/diff/diff-events.ts +323 -0
  86. package/src/diff/diff-identity.ts +73 -0
  87. package/src/diff/diff-indexes.ts +199 -0
  88. package/src/diff/diff-permissions.ts +260 -0
  89. package/src/diff/diff-policy.ts +101 -0
  90. package/src/diff/diff-preflight.ts +66 -0
  91. package/src/diff/diff-renames.ts +104 -0
  92. package/src/diff/diff-schema.ts +232 -0
  93. package/src/diff/format-diff.ts +148 -0
  94. package/src/engine/attribute-parser.ts +50 -0
  95. package/src/engine/capability-cone.ts +531 -0
  96. package/src/engine/combined-graph.ts +357 -0
  97. package/src/engine/control-flow-walker.ts +1317 -0
  98. package/src/engine/dispatch-sites.ts +199 -0
  99. package/src/engine/effect-lattice.ts +81 -0
  100. package/src/engine/entry-points.ts +57 -0
  101. package/src/engine/event-flow.ts +524 -0
  102. package/src/engine/event-relay.ts +92 -0
  103. package/src/engine/op-classification.ts +92 -0
  104. package/src/engine/path-walker.ts +189 -0
  105. package/src/engine/reverse-call-graph.ts +23 -0
  106. package/src/engine/root-classifier-overlay.ts +194 -0
  107. package/src/engine/root-classifier.ts +135 -0
  108. package/src/engine/scc.ts +110 -0
  109. package/src/engine/source-anchor.ts +25 -0
  110. package/src/engine/summary-context.ts +104 -0
  111. package/src/engine/summary-engine.ts +296 -0
  112. package/src/engine/summary-runner.ts +560 -0
  113. package/src/engine/transaction-spans.ts +112 -0
  114. package/src/engine/uncertainty-util.ts +54 -0
  115. package/src/hash.ts +31 -0
  116. package/src/index/attribute-from-node.ts +141 -0
  117. package/src/index/callee-from-node.ts +181 -0
  118. package/src/index/capability/background.ts +90 -0
  119. package/src/index/capability/commit.ts +44 -0
  120. package/src/index/capability/dispatch.ts +164 -0
  121. package/src/index/capability/events.ts +65 -0
  122. package/src/index/capability/extractor.ts +124 -0
  123. package/src/index/capability/file-blob.ts +137 -0
  124. package/src/index/capability/http.ts +159 -0
  125. package/src/index/capability/hyperlink.ts +60 -0
  126. package/src/index/capability/isolated-storage.ts +179 -0
  127. package/src/index/capability/table.ts +113 -0
  128. package/src/index/capability/telemetry.ts +84 -0
  129. package/src/index/capability/ui.ts +55 -0
  130. package/src/index/capability/value-source.ts +202 -0
  131. package/src/index/expression-from-node.ts +117 -0
  132. package/src/index/indexer.ts +102 -0
  133. package/src/index/intraprocedural-body.ts +1467 -0
  134. package/src/index/intraprocedural-ops.ts +253 -0
  135. package/src/index/intraprocedural-refs.ts +188 -0
  136. package/src/index/object-indexer.ts +279 -0
  137. package/src/index/routine-indexer.ts +282 -0
  138. package/src/index/routine-signature.ts +46 -0
  139. package/src/index/variable-indexer.ts +134 -0
  140. package/src/index/variable-initializer-extractor.ts +155 -0
  141. package/src/index/variable-type-normalizer.ts +83 -0
  142. package/src/index.ts +267 -0
  143. package/src/mcp/server.ts +72 -0
  144. package/src/mcp/session.ts +49 -0
  145. package/src/mcp/tools/explain-path.ts +75 -0
  146. package/src/mcp/tools/get-analysis-health.ts +62 -0
  147. package/src/mcp/tools/get-finding.ts +47 -0
  148. package/src/mcp/tools/get-routine-summary.ts +126 -0
  149. package/src/mcp/tools/list-findings.ts +85 -0
  150. package/src/mcp/tools/list-hotspots.ts +78 -0
  151. package/src/mcp/tools/list-rollups.ts +103 -0
  152. package/src/mcp/tools/validators.ts +25 -0
  153. package/src/model/attributes.ts +120 -0
  154. package/src/model/callee.ts +45 -0
  155. package/src/model/capability.ts +187 -0
  156. package/src/model/coverage.ts +85 -0
  157. package/src/model/entities.ts +628 -0
  158. package/src/model/expression.ts +98 -0
  159. package/src/model/finding.ts +110 -0
  160. package/src/model/graph-edge.ts +93 -0
  161. package/src/model/graph.ts +62 -0
  162. package/src/model/identity.ts +81 -0
  163. package/src/model/ids.ts +90 -0
  164. package/src/model/index.ts +13 -0
  165. package/src/model/model.ts +51 -0
  166. package/src/model/permission.ts +76 -0
  167. package/src/model/root-classification.ts +116 -0
  168. package/src/model/stable-identity.ts +102 -0
  169. package/src/model/summary.ts +96 -0
  170. package/src/parser/ast.ts +82 -0
  171. package/src/parser/native/ffi.ts +145 -0
  172. package/src/parser/native/parse-index-pool.ts +148 -0
  173. package/src/parser/native/parse-index-worker.ts +94 -0
  174. package/src/parser/native/wrapper.ts +353 -0
  175. package/src/parser/parser-init.ts +43 -0
  176. package/src/perf/profiler.ts +66 -0
  177. package/src/policy/policy-default.yaml +83 -0
  178. package/src/policy/policy-engine.ts +339 -0
  179. package/src/policy/policy-loader.ts +257 -0
  180. package/src/policy/policy-schema.json +379 -0
  181. package/src/policy/policy-types.ts +81 -0
  182. package/src/policy/predicate-compiler.ts +151 -0
  183. package/src/policy/predicate-evaluator.ts +267 -0
  184. package/src/policy/predicate-fields.ts +439 -0
  185. package/src/projection/actionable-anchor.ts +48 -0
  186. package/src/projection/finding-filters.ts +44 -0
  187. package/src/projection/finding-fingerprint.ts +54 -0
  188. package/src/projection/finding-groups.ts +41 -0
  189. package/src/projection/finding-summary.ts +110 -0
  190. package/src/projection/rollup-findings.ts +105 -0
  191. package/src/providers/discover.ts +88 -0
  192. package/src/providers/external.ts +46 -0
  193. package/src/providers/types.ts +36 -0
  194. package/src/providers/workspace.ts +117 -0
  195. package/src/resolve/call-resolver.ts +117 -0
  196. package/src/resolve/coverage.ts +61 -0
  197. package/src/resolve/event-graph.ts +166 -0
  198. package/src/resolve/implicit-edges.ts +53 -0
  199. package/src/resolve/record-types.ts +36 -0
  200. package/src/resolve/resolver.ts +23 -0
  201. package/src/resolve/semantic-graph.ts +29 -0
  202. package/src/resolve/symbol-table.ts +69 -0
  203. package/src/snapshot/app-snapshot.ts +74 -0
  204. package/src/snapshot/compose.ts +100 -0
  205. package/src/snapshot/derive/callsite-evidence.ts +76 -0
  206. package/src/snapshot/derive/capability-facts.ts +70 -0
  207. package/src/snapshot/derive/contracts.ts +131 -0
  208. package/src/snapshot/derive/coverage.ts +35 -0
  209. package/src/snapshot/derive/event-declarations.ts +140 -0
  210. package/src/snapshot/derive/identity-table.ts +58 -0
  211. package/src/snapshot/derive/inputs.ts +91 -0
  212. package/src/snapshot/derive/operation-evidence.ts +70 -0
  213. package/src/snapshot/derive/permissions.ts +186 -0
  214. package/src/snapshot/derive/root-classifications.ts +56 -0
  215. package/src/snapshot/derive/schema.ts +130 -0
  216. package/src/snapshot/derive/typed-edges.ts +60 -0
  217. package/src/snapshot/derive/workspace-fingerprint.ts +19 -0
  218. package/src/snapshot/deserialize.ts +40 -0
  219. package/src/snapshot/serialize-cbor-gz.ts +12 -0
  220. package/src/snapshot/serialize-cbor.ts +19 -0
  221. package/src/snapshot/serialize-json.ts +22 -0
  222. package/src/snapshot/shard.ts +134 -0
  223. package/src/snapshot/types.ts +181 -0
  224. package/src/symbols/app-manifest.ts +96 -0
  225. package/src/symbols/app-package-zip.ts +50 -0
  226. package/src/symbols/embedded-source-reader.ts +41 -0
  227. package/src/symbols/package-hash.ts +81 -0
  228. package/src/symbols/symbol-reader.ts +101 -0
  229. package/src/symbols/symbol-reference-parser.ts +378 -0
  230. package/src/symbols/symbol-reference-reader.ts +27 -0
  231. package/tsconfig.json +18 -0
@@ -0,0 +1,295 @@
1
+ import type { CapabilityFact, CapabilityOp, CapabilityResourceKind } from "../model/capability.ts";
2
+ import type {
3
+ BlockResource,
4
+ FingerprintBlock,
5
+ FingerprintQueryResult,
6
+ PermissionLine,
7
+ } from "./fingerprint-query.ts";
8
+ import type { WitnessHop } from "./fingerprint-witness.ts";
9
+
10
+ export interface RenderOptions {
11
+ /**
12
+ * Reserved for a future deterministic-output pass (e.g. pinned timestamps,
13
+ * sorted collections). Currently ignored by the renderer; determinism is
14
+ * enforced upstream by the query layer when `FingerprintFilters` requests it.
15
+ * Wired through the CLI (--deterministic) so the surface is ready.
16
+ */
17
+ deterministic?: boolean;
18
+ /**
19
+ * Reserved for a future ANSI-color rendering pass. Currently ignored;
20
+ * the renderer always emits color-free output. Wired through the CLI
21
+ * (--color) so the surface is ready when implementation lands.
22
+ */
23
+ color?: boolean;
24
+ verbosity?: "compact" | "full";
25
+ }
26
+
27
+ const LABEL_WIDTH = 12;
28
+
29
+ const EXTERNAL_FAMILIES: readonly CapabilityResourceKind[] = [
30
+ "http",
31
+ "isolated-storage",
32
+ "file",
33
+ "background",
34
+ "telemetry",
35
+ "ui",
36
+ ];
37
+
38
+ function q(s: string): string {
39
+ return JSON.stringify(s);
40
+ }
41
+
42
+ function pad(label: string): string {
43
+ return `${label}:`.padEnd(LABEL_WIDTH, " ");
44
+ }
45
+
46
+ export function formatFingerprint(
47
+ result: FingerprintQueryResult,
48
+ opts: RenderOptions = {},
49
+ ): string {
50
+ const lines: string[] = [];
51
+ if (result.blocks.length === 0) {
52
+ lines.push("No root classifications match the filters.");
53
+ return `${lines.join("\n")}\n`;
54
+ }
55
+ const totalTrunc = result.blocks.reduce(
56
+ (n, b) => n + b.witnesses.filter((w) => w.truncated).length,
57
+ 0,
58
+ );
59
+ const truncSuffix =
60
+ totalTrunc > 0
61
+ ? ` ${totalTrunc} witness set${totalTrunc === 1 ? "" : "s"} truncated; details inline.`
62
+ : "";
63
+ const filterClause =
64
+ result.summary.renderedBlocks === result.summary.totalClassifications
65
+ ? `Rendering ${result.summary.renderedBlocks} root classification${result.summary.renderedBlocks === 1 ? "" : "s"}.`
66
+ : `Rendering ${result.summary.renderedBlocks} of ${result.summary.totalClassifications} root classifications.`;
67
+ lines.push(filterClause + truncSuffix);
68
+ lines.push("");
69
+ for (let i = 0; i < result.blocks.length; i++) {
70
+ if (i > 0) lines.push("");
71
+ renderBlock(result.blocks[i] as FingerprintBlock, opts, lines);
72
+ }
73
+ return `${lines.join("\n")}\n`;
74
+ }
75
+
76
+ function renderBlock(b: FingerprintBlock, opts: RenderOptions, lines: string[]): void {
77
+ const verb = opts.verbosity ?? "compact";
78
+ const marker =
79
+ b.classificationSource === "config"
80
+ ? " [config-root]"
81
+ : b.classificationSource === "ast+config"
82
+ ? " [config-asserted]"
83
+ : "";
84
+ lines.push(`${b.objectDisplay}::${b.routineDisplay} [${b.kinds.join(", ")}]${marker}`);
85
+
86
+ // coverage (always first — G6 coverage-first discipline)
87
+ const reasons =
88
+ b.coverage.reasons.length > 0 ? ` — ${[...b.coverage.reasons].sort().join(", ")}` : "";
89
+ lines.push(` ${pad("coverage")}${b.coverage.status}${reasons}`);
90
+ if (b.coverage.unknownTargets.length > 0) {
91
+ const shown = b.coverage.unknownTargetDisplays.slice(0, 5);
92
+ const more = b.coverage.unknownTargets.length - shown.length;
93
+ const moreSuffix = more > 0 ? ` (+${more} more)` : "";
94
+ lines.push(
95
+ ` ${" ".repeat(LABEL_WIDTH)}${b.coverage.unknownTargets.length} opaque/unresolved targets: ${shown.join(", ")}${moreSuffix}`,
96
+ );
97
+ }
98
+ if (b.coverage.inheritedExcluded) {
99
+ lines.push(` ${" ".repeat(LABEL_WIDTH)}(direct-only; coverage reflects direct cone)`);
100
+ }
101
+
102
+ // writes / reads / commit / publish / dispatch / external families
103
+ renderFamilyLine(b, "writes", "table", "insert", lines);
104
+ renderFamilyLine(b, "reads", "table", "read", lines);
105
+ renderCommit(b, lines);
106
+ renderFamilyLine(b, "publish", "event", "publish", lines);
107
+ renderDispatch(b, lines);
108
+ renderExternalFamilies(b, verb, lines);
109
+ renderPermissions(b, lines);
110
+ renderWitnesses(b, lines);
111
+ }
112
+
113
+ function renderFamilyLine(
114
+ b: FingerprintBlock,
115
+ label: string,
116
+ kind: CapabilityResourceKind,
117
+ op: CapabilityOp,
118
+ lines: string[],
119
+ ): void {
120
+ const fam = b.families.find((f) => f.kind === kind);
121
+ const items: BlockResource[] = (fam?.resources ?? []).filter((r) => r.ops.includes(op));
122
+ if (items.length === 0 && b.coverage.status === "complete") return;
123
+ if (items.length === 0) {
124
+ lines.push(` ${pad(label)}none known reachable`);
125
+ return;
126
+ }
127
+ const rendered = items.map((r) => `${kindPrefix(kind)} ${q(r.display)}`).join(", ");
128
+ lines.push(` ${pad(label)}${rendered}`);
129
+ }
130
+
131
+ function kindPrefix(kind: CapabilityResourceKind): string {
132
+ switch (kind) {
133
+ case "table":
134
+ return "TableData";
135
+ case "event":
136
+ return "Event";
137
+ case "codeunit":
138
+ return "Codeunit";
139
+ case "page":
140
+ return "Page";
141
+ case "report":
142
+ return "Report";
143
+ default:
144
+ return kind;
145
+ }
146
+ }
147
+
148
+ function renderCommit(b: FingerprintBlock, lines: string[]): void {
149
+ if (b.mayCommit.presence === "no") return; // omit "no" commits in compact
150
+ lines.push(` ${pad("commit")}${b.mayCommit.presence}`);
151
+ }
152
+
153
+ function renderDispatch(b: FingerprintBlock, lines: string[]): void {
154
+ const r = b.dispatch.resolved.length;
155
+ const u = b.dispatch.unresolved.length;
156
+ if (r === 0 && u === 0) return;
157
+ const parts: string[] = [];
158
+ if (r > 0) {
159
+ const list = b.dispatch.resolved
160
+ .slice(0, 4)
161
+ .map((d) => d.targetDisplay ?? d.targetId ?? "?")
162
+ .join(", ");
163
+ const more = r > 4 ? `, +${r - 4} more` : "";
164
+ parts.push(`${r} static (${list}${more})`);
165
+ }
166
+ if (u > 0) {
167
+ parts.push(`${u} unresolved-dynamic`);
168
+ }
169
+ lines.push(` ${pad("dispatch")}${parts.join("; ")}`);
170
+ }
171
+
172
+ function renderExternalFamilies(
173
+ b: FingerprintBlock,
174
+ verbosity: "compact" | "full",
175
+ lines: string[],
176
+ ): void {
177
+ const emptyExternal: CapabilityResourceKind[] = [];
178
+ for (const kind of EXTERNAL_FAMILIES) {
179
+ const fam = b.families.find((f) => f.kind === kind);
180
+ const present = fam !== undefined && fam.resources.length > 0;
181
+ if (!present) {
182
+ emptyExternal.push(kind);
183
+ if (verbosity === "full") {
184
+ const word = b.coverage.status === "complete" ? "none" : "none known reachable";
185
+ lines.push(` ${pad(externalLabel(kind))}${word}`);
186
+ }
187
+ continue;
188
+ }
189
+ const rendered = (fam?.resources ?? []).map((r) => q(r.display)).join(", ");
190
+ lines.push(` ${pad(externalLabel(kind))}${rendered}`);
191
+ }
192
+ if (verbosity === "compact" && emptyExternal.length > 0 && b.coverage.status !== "complete") {
193
+ const list = emptyExternal.map(externalLabel).join("/");
194
+ lines.push(` no known ${list} capabilities — cone partial`);
195
+ }
196
+ }
197
+
198
+ function externalLabel(kind: CapabilityResourceKind): string {
199
+ switch (kind) {
200
+ case "http":
201
+ return "http";
202
+ case "isolated-storage":
203
+ return "storage";
204
+ case "file":
205
+ return "file";
206
+ case "background":
207
+ return "background";
208
+ case "telemetry":
209
+ return "telemetry";
210
+ case "ui":
211
+ return "ui";
212
+ default:
213
+ return kind;
214
+ }
215
+ }
216
+
217
+ function renderPermissions(b: FingerprintBlock, lines: string[]): void {
218
+ if (b.requiredPermissions.length === 0) return;
219
+ const allComplete =
220
+ b.requiredPermissions.every((p) => p.coverage === "complete") &&
221
+ b.coverage.status === "complete";
222
+ const heading = allComplete ? "permissions:" : "permissions (inferred, may be incomplete):";
223
+ lines.push(` ${heading}`);
224
+ const sorted = [...b.requiredPermissions].sort((x, y) =>
225
+ x.targetDisplay < y.targetDisplay ? -1 : x.targetDisplay > y.targetDisplay ? 1 : 0,
226
+ );
227
+ for (const p of sorted) {
228
+ const prefix = p.targetKind === "table" ? "TableData" : "Object";
229
+ lines.push(` ${prefix} ${q(p.targetDisplay)} ${p.rights}`);
230
+ }
231
+ }
232
+
233
+ function renderWitnesses(b: FingerprintBlock, lines: string[]): void {
234
+ if (b.witnesses.length === 0) return;
235
+ const present = b.witnesses.filter((w) => w.paths.length > 0 || w.truncated);
236
+ if (present.length === 0) return;
237
+ lines.push("");
238
+ lines.push(" witnesses:");
239
+ for (const w of present) {
240
+ const desc = factDescription(w.fact);
241
+ const total = w.paths.length;
242
+ lines.push(` ${desc} — ${total} path${total === 1 ? "" : "s"} shown`);
243
+ for (let i = 0; i < w.paths.length; i++) {
244
+ lines.push(` Path ${i + 1}/${total} shown:`);
245
+ const path = w.paths[i];
246
+ if (path === undefined) continue;
247
+ for (let h = 0; h < path.hops.length; h++) {
248
+ const hop = path.hops[h];
249
+ if (hop === undefined) continue;
250
+ const indent = ` ${" ".repeat(h)}`;
251
+ lines.push(`${indent}${hopArrow(h)}${formatHop(hop)}`);
252
+ }
253
+ lines.push("");
254
+ }
255
+ if (w.truncated) {
256
+ const cap = w.diagnostics.find((d) => d.kind === "path-limit-reached") as
257
+ | { cap?: number }
258
+ | undefined;
259
+ lines.push(
260
+ ` warning: witnesses truncated at ${cap?.cap ?? "?"} for ${desc}; narrow with --routine/--roots or raise --witness.`,
261
+ );
262
+ }
263
+ }
264
+ }
265
+
266
+ function hopArrow(depth: number): string {
267
+ return depth === 0 ? "" : "→ ";
268
+ }
269
+
270
+ function formatHop(hop: WitnessHop): string {
271
+ switch (hop.kind) {
272
+ case "call":
273
+ return `${hop.routineDisplay} (via ${hop.calleeDisplay}${hop.sourceFile ? ` at ${hop.sourceFile}:${hop.line ?? 0}:${hop.column ?? 0}` : ""})`;
274
+ case "object-run":
275
+ return `${hop.routineDisplay} (via Codeunit.Run ${hop.targetDisplay ?? "<unresolved>"}${hop.sourceFile ? ` at ${hop.sourceFile}:${hop.line ?? 0}:${hop.column ?? 0}` : ""})`;
276
+ case "event-dispatch":
277
+ return `event ${hop.eventDisplay}`;
278
+ case "implicit-trigger":
279
+ return `trigger ${hop.triggerKind} on ${hop.routineDisplay}`;
280
+ case "dependency-export":
281
+ return `${hop.routineDisplay} (into dependency app ${hop.targetAppGuid}, via ${hop.calleeDisplay ?? "?"}${hop.sourceFile ? ` at ${hop.sourceFile}:${hop.line ?? 0}:${hop.column ?? 0}` : ""})`;
282
+ case "terminal":
283
+ if (hop.evidenceKind === "operation") {
284
+ return `direct ${hop.displayText}${hop.sourceFile ? ` at ${hop.sourceFile}:${hop.line ?? 0}:${hop.column ?? 0}` : ""}`;
285
+ }
286
+ if (hop.evidenceKind === "callsite") {
287
+ return `call ${hop.displayText}${hop.sourceFile ? ` at ${hop.sourceFile}:${hop.line ?? 0}:${hop.column ?? 0}` : ""}`;
288
+ }
289
+ return hop.displayText;
290
+ }
291
+ }
292
+
293
+ function factDescription(fact: CapabilityFact): string {
294
+ return `${fact.op} ${fact.resourceKind}${fact.resourceId ? ` ${q(String(fact.resourceId))}` : ""}`;
295
+ }