al-sem 0.0.1
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/LICENSE +21 -0
- package/README.md +361 -0
- package/package.json +64 -0
- package/scripts/d40-diff.ts +44 -0
- package/scripts/fetch-native-parser.ts +179 -0
- package/scripts/precision-sample.ts +99 -0
- package/scripts/precision-study.ts +42 -0
- package/scripts/precision-tabulate.ts +52 -0
- package/src/cli/baseline.ts +31 -0
- package/src/cli/diff.ts +199 -0
- package/src/cli/events-chains.ts +56 -0
- package/src/cli/events-fanout.ts +87 -0
- package/src/cli/exit-code.ts +30 -0
- package/src/cli/fingerprint-indexes.ts +130 -0
- package/src/cli/fingerprint-query.ts +543 -0
- package/src/cli/fingerprint-witness.ts +493 -0
- package/src/cli/fingerprint.ts +292 -0
- package/src/cli/format-compact-json.ts +45 -0
- package/src/cli/format-events.ts +77 -0
- package/src/cli/format-fingerprint.ts +295 -0
- package/src/cli/format-html.ts +503 -0
- package/src/cli/format-json.ts +13 -0
- package/src/cli/format-policy.ts +95 -0
- package/src/cli/format-sarif.ts +186 -0
- package/src/cli/format-terminal.ts +153 -0
- package/src/cli/index.ts +566 -0
- package/src/cli/policy.ts +204 -0
- package/src/config/roots-config.ts +302 -0
- package/src/deps/cache-versions.ts +74 -0
- package/src/deps/canonical-json.ts +27 -0
- package/src/deps/dependency-artifact.ts +144 -0
- package/src/deps/dependency-cache.ts +262 -0
- package/src/deps/dependency-dag.ts +128 -0
- package/src/deps/dependency-package-discovery.ts +85 -0
- package/src/deps/dependency-pipeline.ts +483 -0
- package/src/deps/dependency-projection.ts +211 -0
- package/src/deps/dependency-resolver.ts +154 -0
- package/src/deps/workspace-dependencies.ts +114 -0
- package/src/detectors/capability-query.ts +145 -0
- package/src/detectors/confidence.ts +52 -0
- package/src/detectors/d1-db-op-in-loop.ts +457 -0
- package/src/detectors/d10-self-modifying-loop.ts +114 -0
- package/src/detectors/d11-modify-without-get.ts +129 -0
- package/src/detectors/d12-dead-integration-event.ts +81 -0
- package/src/detectors/d13-cross-app-internal-call.ts +105 -0
- package/src/detectors/d14-dead-routine.ts +151 -0
- package/src/detectors/d16-obsolete-routine-call.ts +94 -0
- package/src/detectors/d17-min-version-drift.ts +157 -0
- package/src/detectors/d18-constant-filter-in-loop.ts +151 -0
- package/src/detectors/d19-unused-parameter.ts +116 -0
- package/src/detectors/d2-event-fanout-in-loop.ts +240 -0
- package/src/detectors/d20-unreachable-after-exit.ts +92 -0
- package/src/detectors/d21-read-without-load.ts +128 -0
- package/src/detectors/d22-flowfield-without-calcfields.ts +168 -0
- package/src/detectors/d29-subscriber-modify-on-event-record.ts +163 -0
- package/src/detectors/d3-load-state.ts +72 -0
- package/src/detectors/d3-missing-setloadfields.ts +234 -0
- package/src/detectors/d32-constant-boolean-parameter.ts +185 -0
- package/src/detectors/d33-unfiltered-bulk-write.ts +173 -0
- package/src/detectors/d34-commit-in-loop.ts +206 -0
- package/src/detectors/d35-commit-in-event-subscriber.ts +138 -0
- package/src/detectors/d36-late-setloadfields.ts +162 -0
- package/src/detectors/d37-validate-without-persist.ts +271 -0
- package/src/detectors/d38-subscriber-to-obsolete-event.ts +140 -0
- package/src/detectors/d39-record-left-dirty-across-chain.ts +165 -0
- package/src/detectors/d4-repeated-lookup-in-loop.ts +128 -0
- package/src/detectors/d40-transitive-load-missing.ts +217 -0
- package/src/detectors/d41-transitive-filter-loss.ts +200 -0
- package/src/detectors/d42-cross-call-wrong-setloadfields.ts +243 -0
- package/src/detectors/d43-event-ishandled-skip.ts +257 -0
- package/src/detectors/d44-event-multi-subscriber-overlap.ts +223 -0
- package/src/detectors/d45-event-transitive-table-exposure.ts +159 -0
- package/src/detectors/d5-set-based-opportunity.ts +162 -0
- package/src/detectors/d7-recursive-event-expansion.ts +151 -0
- package/src/detectors/d8-commit-in-transaction.ts +132 -0
- package/src/detectors/d9-transaction-span-summary.ts +107 -0
- package/src/detectors/detector-context.ts +121 -0
- package/src/detectors/finding-grouping.ts +61 -0
- package/src/detectors/path-merge.ts +174 -0
- package/src/detectors/registry.ts +176 -0
- package/src/detectors/table-display.ts +42 -0
- package/src/diff/diff-abi.ts +195 -0
- package/src/diff/diff-capabilities.ts +179 -0
- package/src/diff/diff-engine.ts +146 -0
- package/src/diff/diff-events.ts +323 -0
- package/src/diff/diff-identity.ts +73 -0
- package/src/diff/diff-indexes.ts +199 -0
- package/src/diff/diff-permissions.ts +260 -0
- package/src/diff/diff-policy.ts +101 -0
- package/src/diff/diff-preflight.ts +66 -0
- package/src/diff/diff-renames.ts +104 -0
- package/src/diff/diff-schema.ts +232 -0
- package/src/diff/format-diff.ts +148 -0
- package/src/engine/attribute-parser.ts +50 -0
- package/src/engine/capability-cone.ts +531 -0
- package/src/engine/combined-graph.ts +357 -0
- package/src/engine/control-flow-walker.ts +1317 -0
- package/src/engine/dispatch-sites.ts +199 -0
- package/src/engine/effect-lattice.ts +81 -0
- package/src/engine/entry-points.ts +57 -0
- package/src/engine/event-flow.ts +524 -0
- package/src/engine/event-relay.ts +92 -0
- package/src/engine/op-classification.ts +92 -0
- package/src/engine/path-walker.ts +189 -0
- package/src/engine/reverse-call-graph.ts +23 -0
- package/src/engine/root-classifier-overlay.ts +194 -0
- package/src/engine/root-classifier.ts +135 -0
- package/src/engine/scc.ts +110 -0
- package/src/engine/source-anchor.ts +25 -0
- package/src/engine/summary-context.ts +104 -0
- package/src/engine/summary-engine.ts +296 -0
- package/src/engine/summary-runner.ts +560 -0
- package/src/engine/transaction-spans.ts +112 -0
- package/src/engine/uncertainty-util.ts +54 -0
- package/src/hash.ts +31 -0
- package/src/index/attribute-from-node.ts +141 -0
- package/src/index/callee-from-node.ts +181 -0
- package/src/index/capability/background.ts +90 -0
- package/src/index/capability/commit.ts +44 -0
- package/src/index/capability/dispatch.ts +164 -0
- package/src/index/capability/events.ts +65 -0
- package/src/index/capability/extractor.ts +124 -0
- package/src/index/capability/file-blob.ts +137 -0
- package/src/index/capability/http.ts +159 -0
- package/src/index/capability/hyperlink.ts +60 -0
- package/src/index/capability/isolated-storage.ts +179 -0
- package/src/index/capability/table.ts +113 -0
- package/src/index/capability/telemetry.ts +84 -0
- package/src/index/capability/ui.ts +55 -0
- package/src/index/capability/value-source.ts +202 -0
- package/src/index/expression-from-node.ts +117 -0
- package/src/index/indexer.ts +102 -0
- package/src/index/intraprocedural-body.ts +1467 -0
- package/src/index/intraprocedural-ops.ts +253 -0
- package/src/index/intraprocedural-refs.ts +188 -0
- package/src/index/object-indexer.ts +279 -0
- package/src/index/routine-indexer.ts +282 -0
- package/src/index/routine-signature.ts +46 -0
- package/src/index/variable-indexer.ts +134 -0
- package/src/index/variable-initializer-extractor.ts +155 -0
- package/src/index/variable-type-normalizer.ts +83 -0
- package/src/index.ts +267 -0
- package/src/mcp/server.ts +72 -0
- package/src/mcp/session.ts +49 -0
- package/src/mcp/tools/explain-path.ts +75 -0
- package/src/mcp/tools/get-analysis-health.ts +62 -0
- package/src/mcp/tools/get-finding.ts +47 -0
- package/src/mcp/tools/get-routine-summary.ts +126 -0
- package/src/mcp/tools/list-findings.ts +85 -0
- package/src/mcp/tools/list-hotspots.ts +78 -0
- package/src/mcp/tools/list-rollups.ts +103 -0
- package/src/mcp/tools/validators.ts +25 -0
- package/src/model/attributes.ts +120 -0
- package/src/model/callee.ts +45 -0
- package/src/model/capability.ts +187 -0
- package/src/model/coverage.ts +85 -0
- package/src/model/entities.ts +628 -0
- package/src/model/expression.ts +98 -0
- package/src/model/finding.ts +110 -0
- package/src/model/graph-edge.ts +93 -0
- package/src/model/graph.ts +62 -0
- package/src/model/identity.ts +81 -0
- package/src/model/ids.ts +90 -0
- package/src/model/index.ts +13 -0
- package/src/model/model.ts +51 -0
- package/src/model/permission.ts +76 -0
- package/src/model/root-classification.ts +116 -0
- package/src/model/stable-identity.ts +102 -0
- package/src/model/summary.ts +96 -0
- package/src/parser/ast.ts +82 -0
- package/src/parser/native/ffi.ts +145 -0
- package/src/parser/native/parse-index-pool.ts +148 -0
- package/src/parser/native/parse-index-worker.ts +94 -0
- package/src/parser/native/wrapper.ts +353 -0
- package/src/parser/parser-init.ts +43 -0
- package/src/perf/profiler.ts +66 -0
- package/src/policy/policy-default.yaml +83 -0
- package/src/policy/policy-engine.ts +339 -0
- package/src/policy/policy-loader.ts +257 -0
- package/src/policy/policy-schema.json +379 -0
- package/src/policy/policy-types.ts +81 -0
- package/src/policy/predicate-compiler.ts +151 -0
- package/src/policy/predicate-evaluator.ts +267 -0
- package/src/policy/predicate-fields.ts +439 -0
- package/src/projection/actionable-anchor.ts +48 -0
- package/src/projection/finding-filters.ts +44 -0
- package/src/projection/finding-fingerprint.ts +54 -0
- package/src/projection/finding-groups.ts +41 -0
- package/src/projection/finding-summary.ts +110 -0
- package/src/projection/rollup-findings.ts +105 -0
- package/src/providers/discover.ts +88 -0
- package/src/providers/external.ts +46 -0
- package/src/providers/types.ts +36 -0
- package/src/providers/workspace.ts +117 -0
- package/src/resolve/call-resolver.ts +117 -0
- package/src/resolve/coverage.ts +61 -0
- package/src/resolve/event-graph.ts +166 -0
- package/src/resolve/implicit-edges.ts +53 -0
- package/src/resolve/record-types.ts +36 -0
- package/src/resolve/resolver.ts +23 -0
- package/src/resolve/semantic-graph.ts +29 -0
- package/src/resolve/symbol-table.ts +69 -0
- package/src/snapshot/app-snapshot.ts +74 -0
- package/src/snapshot/compose.ts +100 -0
- package/src/snapshot/derive/callsite-evidence.ts +76 -0
- package/src/snapshot/derive/capability-facts.ts +70 -0
- package/src/snapshot/derive/contracts.ts +131 -0
- package/src/snapshot/derive/coverage.ts +35 -0
- package/src/snapshot/derive/event-declarations.ts +140 -0
- package/src/snapshot/derive/identity-table.ts +58 -0
- package/src/snapshot/derive/inputs.ts +91 -0
- package/src/snapshot/derive/operation-evidence.ts +70 -0
- package/src/snapshot/derive/permissions.ts +186 -0
- package/src/snapshot/derive/root-classifications.ts +56 -0
- package/src/snapshot/derive/schema.ts +130 -0
- package/src/snapshot/derive/typed-edges.ts +60 -0
- package/src/snapshot/derive/workspace-fingerprint.ts +19 -0
- package/src/snapshot/deserialize.ts +40 -0
- package/src/snapshot/serialize-cbor-gz.ts +12 -0
- package/src/snapshot/serialize-cbor.ts +19 -0
- package/src/snapshot/serialize-json.ts +22 -0
- package/src/snapshot/shard.ts +134 -0
- package/src/snapshot/types.ts +181 -0
- package/src/symbols/app-manifest.ts +96 -0
- package/src/symbols/app-package-zip.ts +50 -0
- package/src/symbols/embedded-source-reader.ts +41 -0
- package/src/symbols/package-hash.ts +81 -0
- package/src/symbols/symbol-reader.ts +101 -0
- package/src/symbols/symbol-reference-parser.ts +378 -0
- package/src/symbols/symbol-reference-reader.ts +27 -0
- package/tsconfig.json +18 -0
|
@@ -0,0 +1,295 @@
|
|
|
1
|
+
import type { CapabilityFact, CapabilityOp, CapabilityResourceKind } from "../model/capability.ts";
|
|
2
|
+
import type {
|
|
3
|
+
BlockResource,
|
|
4
|
+
FingerprintBlock,
|
|
5
|
+
FingerprintQueryResult,
|
|
6
|
+
PermissionLine,
|
|
7
|
+
} from "./fingerprint-query.ts";
|
|
8
|
+
import type { WitnessHop } from "./fingerprint-witness.ts";
|
|
9
|
+
|
|
10
|
+
export interface RenderOptions {
|
|
11
|
+
/**
|
|
12
|
+
* Reserved for a future deterministic-output pass (e.g. pinned timestamps,
|
|
13
|
+
* sorted collections). Currently ignored by the renderer; determinism is
|
|
14
|
+
* enforced upstream by the query layer when `FingerprintFilters` requests it.
|
|
15
|
+
* Wired through the CLI (--deterministic) so the surface is ready.
|
|
16
|
+
*/
|
|
17
|
+
deterministic?: boolean;
|
|
18
|
+
/**
|
|
19
|
+
* Reserved for a future ANSI-color rendering pass. Currently ignored;
|
|
20
|
+
* the renderer always emits color-free output. Wired through the CLI
|
|
21
|
+
* (--color) so the surface is ready when implementation lands.
|
|
22
|
+
*/
|
|
23
|
+
color?: boolean;
|
|
24
|
+
verbosity?: "compact" | "full";
|
|
25
|
+
}
|
|
26
|
+
|
|
27
|
+
const LABEL_WIDTH = 12;
|
|
28
|
+
|
|
29
|
+
const EXTERNAL_FAMILIES: readonly CapabilityResourceKind[] = [
|
|
30
|
+
"http",
|
|
31
|
+
"isolated-storage",
|
|
32
|
+
"file",
|
|
33
|
+
"background",
|
|
34
|
+
"telemetry",
|
|
35
|
+
"ui",
|
|
36
|
+
];
|
|
37
|
+
|
|
38
|
+
function q(s: string): string {
|
|
39
|
+
return JSON.stringify(s);
|
|
40
|
+
}
|
|
41
|
+
|
|
42
|
+
function pad(label: string): string {
|
|
43
|
+
return `${label}:`.padEnd(LABEL_WIDTH, " ");
|
|
44
|
+
}
|
|
45
|
+
|
|
46
|
+
export function formatFingerprint(
|
|
47
|
+
result: FingerprintQueryResult,
|
|
48
|
+
opts: RenderOptions = {},
|
|
49
|
+
): string {
|
|
50
|
+
const lines: string[] = [];
|
|
51
|
+
if (result.blocks.length === 0) {
|
|
52
|
+
lines.push("No root classifications match the filters.");
|
|
53
|
+
return `${lines.join("\n")}\n`;
|
|
54
|
+
}
|
|
55
|
+
const totalTrunc = result.blocks.reduce(
|
|
56
|
+
(n, b) => n + b.witnesses.filter((w) => w.truncated).length,
|
|
57
|
+
0,
|
|
58
|
+
);
|
|
59
|
+
const truncSuffix =
|
|
60
|
+
totalTrunc > 0
|
|
61
|
+
? ` ${totalTrunc} witness set${totalTrunc === 1 ? "" : "s"} truncated; details inline.`
|
|
62
|
+
: "";
|
|
63
|
+
const filterClause =
|
|
64
|
+
result.summary.renderedBlocks === result.summary.totalClassifications
|
|
65
|
+
? `Rendering ${result.summary.renderedBlocks} root classification${result.summary.renderedBlocks === 1 ? "" : "s"}.`
|
|
66
|
+
: `Rendering ${result.summary.renderedBlocks} of ${result.summary.totalClassifications} root classifications.`;
|
|
67
|
+
lines.push(filterClause + truncSuffix);
|
|
68
|
+
lines.push("");
|
|
69
|
+
for (let i = 0; i < result.blocks.length; i++) {
|
|
70
|
+
if (i > 0) lines.push("");
|
|
71
|
+
renderBlock(result.blocks[i] as FingerprintBlock, opts, lines);
|
|
72
|
+
}
|
|
73
|
+
return `${lines.join("\n")}\n`;
|
|
74
|
+
}
|
|
75
|
+
|
|
76
|
+
function renderBlock(b: FingerprintBlock, opts: RenderOptions, lines: string[]): void {
|
|
77
|
+
const verb = opts.verbosity ?? "compact";
|
|
78
|
+
const marker =
|
|
79
|
+
b.classificationSource === "config"
|
|
80
|
+
? " [config-root]"
|
|
81
|
+
: b.classificationSource === "ast+config"
|
|
82
|
+
? " [config-asserted]"
|
|
83
|
+
: "";
|
|
84
|
+
lines.push(`${b.objectDisplay}::${b.routineDisplay} [${b.kinds.join(", ")}]${marker}`);
|
|
85
|
+
|
|
86
|
+
// coverage (always first — G6 coverage-first discipline)
|
|
87
|
+
const reasons =
|
|
88
|
+
b.coverage.reasons.length > 0 ? ` — ${[...b.coverage.reasons].sort().join(", ")}` : "";
|
|
89
|
+
lines.push(` ${pad("coverage")}${b.coverage.status}${reasons}`);
|
|
90
|
+
if (b.coverage.unknownTargets.length > 0) {
|
|
91
|
+
const shown = b.coverage.unknownTargetDisplays.slice(0, 5);
|
|
92
|
+
const more = b.coverage.unknownTargets.length - shown.length;
|
|
93
|
+
const moreSuffix = more > 0 ? ` (+${more} more)` : "";
|
|
94
|
+
lines.push(
|
|
95
|
+
` ${" ".repeat(LABEL_WIDTH)}${b.coverage.unknownTargets.length} opaque/unresolved targets: ${shown.join(", ")}${moreSuffix}`,
|
|
96
|
+
);
|
|
97
|
+
}
|
|
98
|
+
if (b.coverage.inheritedExcluded) {
|
|
99
|
+
lines.push(` ${" ".repeat(LABEL_WIDTH)}(direct-only; coverage reflects direct cone)`);
|
|
100
|
+
}
|
|
101
|
+
|
|
102
|
+
// writes / reads / commit / publish / dispatch / external families
|
|
103
|
+
renderFamilyLine(b, "writes", "table", "insert", lines);
|
|
104
|
+
renderFamilyLine(b, "reads", "table", "read", lines);
|
|
105
|
+
renderCommit(b, lines);
|
|
106
|
+
renderFamilyLine(b, "publish", "event", "publish", lines);
|
|
107
|
+
renderDispatch(b, lines);
|
|
108
|
+
renderExternalFamilies(b, verb, lines);
|
|
109
|
+
renderPermissions(b, lines);
|
|
110
|
+
renderWitnesses(b, lines);
|
|
111
|
+
}
|
|
112
|
+
|
|
113
|
+
function renderFamilyLine(
|
|
114
|
+
b: FingerprintBlock,
|
|
115
|
+
label: string,
|
|
116
|
+
kind: CapabilityResourceKind,
|
|
117
|
+
op: CapabilityOp,
|
|
118
|
+
lines: string[],
|
|
119
|
+
): void {
|
|
120
|
+
const fam = b.families.find((f) => f.kind === kind);
|
|
121
|
+
const items: BlockResource[] = (fam?.resources ?? []).filter((r) => r.ops.includes(op));
|
|
122
|
+
if (items.length === 0 && b.coverage.status === "complete") return;
|
|
123
|
+
if (items.length === 0) {
|
|
124
|
+
lines.push(` ${pad(label)}none known reachable`);
|
|
125
|
+
return;
|
|
126
|
+
}
|
|
127
|
+
const rendered = items.map((r) => `${kindPrefix(kind)} ${q(r.display)}`).join(", ");
|
|
128
|
+
lines.push(` ${pad(label)}${rendered}`);
|
|
129
|
+
}
|
|
130
|
+
|
|
131
|
+
function kindPrefix(kind: CapabilityResourceKind): string {
|
|
132
|
+
switch (kind) {
|
|
133
|
+
case "table":
|
|
134
|
+
return "TableData";
|
|
135
|
+
case "event":
|
|
136
|
+
return "Event";
|
|
137
|
+
case "codeunit":
|
|
138
|
+
return "Codeunit";
|
|
139
|
+
case "page":
|
|
140
|
+
return "Page";
|
|
141
|
+
case "report":
|
|
142
|
+
return "Report";
|
|
143
|
+
default:
|
|
144
|
+
return kind;
|
|
145
|
+
}
|
|
146
|
+
}
|
|
147
|
+
|
|
148
|
+
function renderCommit(b: FingerprintBlock, lines: string[]): void {
|
|
149
|
+
if (b.mayCommit.presence === "no") return; // omit "no" commits in compact
|
|
150
|
+
lines.push(` ${pad("commit")}${b.mayCommit.presence}`);
|
|
151
|
+
}
|
|
152
|
+
|
|
153
|
+
function renderDispatch(b: FingerprintBlock, lines: string[]): void {
|
|
154
|
+
const r = b.dispatch.resolved.length;
|
|
155
|
+
const u = b.dispatch.unresolved.length;
|
|
156
|
+
if (r === 0 && u === 0) return;
|
|
157
|
+
const parts: string[] = [];
|
|
158
|
+
if (r > 0) {
|
|
159
|
+
const list = b.dispatch.resolved
|
|
160
|
+
.slice(0, 4)
|
|
161
|
+
.map((d) => d.targetDisplay ?? d.targetId ?? "?")
|
|
162
|
+
.join(", ");
|
|
163
|
+
const more = r > 4 ? `, +${r - 4} more` : "";
|
|
164
|
+
parts.push(`${r} static (${list}${more})`);
|
|
165
|
+
}
|
|
166
|
+
if (u > 0) {
|
|
167
|
+
parts.push(`${u} unresolved-dynamic`);
|
|
168
|
+
}
|
|
169
|
+
lines.push(` ${pad("dispatch")}${parts.join("; ")}`);
|
|
170
|
+
}
|
|
171
|
+
|
|
172
|
+
function renderExternalFamilies(
|
|
173
|
+
b: FingerprintBlock,
|
|
174
|
+
verbosity: "compact" | "full",
|
|
175
|
+
lines: string[],
|
|
176
|
+
): void {
|
|
177
|
+
const emptyExternal: CapabilityResourceKind[] = [];
|
|
178
|
+
for (const kind of EXTERNAL_FAMILIES) {
|
|
179
|
+
const fam = b.families.find((f) => f.kind === kind);
|
|
180
|
+
const present = fam !== undefined && fam.resources.length > 0;
|
|
181
|
+
if (!present) {
|
|
182
|
+
emptyExternal.push(kind);
|
|
183
|
+
if (verbosity === "full") {
|
|
184
|
+
const word = b.coverage.status === "complete" ? "none" : "none known reachable";
|
|
185
|
+
lines.push(` ${pad(externalLabel(kind))}${word}`);
|
|
186
|
+
}
|
|
187
|
+
continue;
|
|
188
|
+
}
|
|
189
|
+
const rendered = (fam?.resources ?? []).map((r) => q(r.display)).join(", ");
|
|
190
|
+
lines.push(` ${pad(externalLabel(kind))}${rendered}`);
|
|
191
|
+
}
|
|
192
|
+
if (verbosity === "compact" && emptyExternal.length > 0 && b.coverage.status !== "complete") {
|
|
193
|
+
const list = emptyExternal.map(externalLabel).join("/");
|
|
194
|
+
lines.push(` no known ${list} capabilities — cone partial`);
|
|
195
|
+
}
|
|
196
|
+
}
|
|
197
|
+
|
|
198
|
+
function externalLabel(kind: CapabilityResourceKind): string {
|
|
199
|
+
switch (kind) {
|
|
200
|
+
case "http":
|
|
201
|
+
return "http";
|
|
202
|
+
case "isolated-storage":
|
|
203
|
+
return "storage";
|
|
204
|
+
case "file":
|
|
205
|
+
return "file";
|
|
206
|
+
case "background":
|
|
207
|
+
return "background";
|
|
208
|
+
case "telemetry":
|
|
209
|
+
return "telemetry";
|
|
210
|
+
case "ui":
|
|
211
|
+
return "ui";
|
|
212
|
+
default:
|
|
213
|
+
return kind;
|
|
214
|
+
}
|
|
215
|
+
}
|
|
216
|
+
|
|
217
|
+
function renderPermissions(b: FingerprintBlock, lines: string[]): void {
|
|
218
|
+
if (b.requiredPermissions.length === 0) return;
|
|
219
|
+
const allComplete =
|
|
220
|
+
b.requiredPermissions.every((p) => p.coverage === "complete") &&
|
|
221
|
+
b.coverage.status === "complete";
|
|
222
|
+
const heading = allComplete ? "permissions:" : "permissions (inferred, may be incomplete):";
|
|
223
|
+
lines.push(` ${heading}`);
|
|
224
|
+
const sorted = [...b.requiredPermissions].sort((x, y) =>
|
|
225
|
+
x.targetDisplay < y.targetDisplay ? -1 : x.targetDisplay > y.targetDisplay ? 1 : 0,
|
|
226
|
+
);
|
|
227
|
+
for (const p of sorted) {
|
|
228
|
+
const prefix = p.targetKind === "table" ? "TableData" : "Object";
|
|
229
|
+
lines.push(` ${prefix} ${q(p.targetDisplay)} ${p.rights}`);
|
|
230
|
+
}
|
|
231
|
+
}
|
|
232
|
+
|
|
233
|
+
function renderWitnesses(b: FingerprintBlock, lines: string[]): void {
|
|
234
|
+
if (b.witnesses.length === 0) return;
|
|
235
|
+
const present = b.witnesses.filter((w) => w.paths.length > 0 || w.truncated);
|
|
236
|
+
if (present.length === 0) return;
|
|
237
|
+
lines.push("");
|
|
238
|
+
lines.push(" witnesses:");
|
|
239
|
+
for (const w of present) {
|
|
240
|
+
const desc = factDescription(w.fact);
|
|
241
|
+
const total = w.paths.length;
|
|
242
|
+
lines.push(` ${desc} — ${total} path${total === 1 ? "" : "s"} shown`);
|
|
243
|
+
for (let i = 0; i < w.paths.length; i++) {
|
|
244
|
+
lines.push(` Path ${i + 1}/${total} shown:`);
|
|
245
|
+
const path = w.paths[i];
|
|
246
|
+
if (path === undefined) continue;
|
|
247
|
+
for (let h = 0; h < path.hops.length; h++) {
|
|
248
|
+
const hop = path.hops[h];
|
|
249
|
+
if (hop === undefined) continue;
|
|
250
|
+
const indent = ` ${" ".repeat(h)}`;
|
|
251
|
+
lines.push(`${indent}${hopArrow(h)}${formatHop(hop)}`);
|
|
252
|
+
}
|
|
253
|
+
lines.push("");
|
|
254
|
+
}
|
|
255
|
+
if (w.truncated) {
|
|
256
|
+
const cap = w.diagnostics.find((d) => d.kind === "path-limit-reached") as
|
|
257
|
+
| { cap?: number }
|
|
258
|
+
| undefined;
|
|
259
|
+
lines.push(
|
|
260
|
+
` warning: witnesses truncated at ${cap?.cap ?? "?"} for ${desc}; narrow with --routine/--roots or raise --witness.`,
|
|
261
|
+
);
|
|
262
|
+
}
|
|
263
|
+
}
|
|
264
|
+
}
|
|
265
|
+
|
|
266
|
+
function hopArrow(depth: number): string {
|
|
267
|
+
return depth === 0 ? "" : "→ ";
|
|
268
|
+
}
|
|
269
|
+
|
|
270
|
+
function formatHop(hop: WitnessHop): string {
|
|
271
|
+
switch (hop.kind) {
|
|
272
|
+
case "call":
|
|
273
|
+
return `${hop.routineDisplay} (via ${hop.calleeDisplay}${hop.sourceFile ? ` at ${hop.sourceFile}:${hop.line ?? 0}:${hop.column ?? 0}` : ""})`;
|
|
274
|
+
case "object-run":
|
|
275
|
+
return `${hop.routineDisplay} (via Codeunit.Run ${hop.targetDisplay ?? "<unresolved>"}${hop.sourceFile ? ` at ${hop.sourceFile}:${hop.line ?? 0}:${hop.column ?? 0}` : ""})`;
|
|
276
|
+
case "event-dispatch":
|
|
277
|
+
return `event ${hop.eventDisplay}`;
|
|
278
|
+
case "implicit-trigger":
|
|
279
|
+
return `trigger ${hop.triggerKind} on ${hop.routineDisplay}`;
|
|
280
|
+
case "dependency-export":
|
|
281
|
+
return `${hop.routineDisplay} (into dependency app ${hop.targetAppGuid}, via ${hop.calleeDisplay ?? "?"}${hop.sourceFile ? ` at ${hop.sourceFile}:${hop.line ?? 0}:${hop.column ?? 0}` : ""})`;
|
|
282
|
+
case "terminal":
|
|
283
|
+
if (hop.evidenceKind === "operation") {
|
|
284
|
+
return `direct ${hop.displayText}${hop.sourceFile ? ` at ${hop.sourceFile}:${hop.line ?? 0}:${hop.column ?? 0}` : ""}`;
|
|
285
|
+
}
|
|
286
|
+
if (hop.evidenceKind === "callsite") {
|
|
287
|
+
return `call ${hop.displayText}${hop.sourceFile ? ` at ${hop.sourceFile}:${hop.line ?? 0}:${hop.column ?? 0}` : ""}`;
|
|
288
|
+
}
|
|
289
|
+
return hop.displayText;
|
|
290
|
+
}
|
|
291
|
+
}
|
|
292
|
+
|
|
293
|
+
function factDescription(fact: CapabilityFact): string {
|
|
294
|
+
return `${fact.op} ${fact.resourceKind}${fact.resourceId ? ` ${q(String(fact.resourceId))}` : ""}`;
|
|
295
|
+
}
|