api-tests-coverage 1.0.0

package/dist/src/config/validateConfig.js

@@ -0,0 +1,171 @@
+"use strict";
+/**
+ * Central config — schema validation.
+ *
+ * Validates a parsed YAML object against the AnalyzerConfig schema.
+ * On failure, throws with a field-level error message that includes
+ * the received value and an example of a valid value.
+ *
+ * Unknown top-level keys produce a warning in default mode and a hard
+ * error in strict mode (qualityGate.mode === 'strict').
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.validateConfig = validateConfig;
+const schema_1 = require("./schema");
+// ─── Known top-level keys ─────────────────────────────────────────────────────
+const KNOWN_TOP_LEVEL_KEYS = new Set([
+    'version',
+    'project',
+    'analysis',
+    'scans',
+    'mcp',
+    'thresholds',
+    'qualityGate',
+    'reports',
+    'publishing',
+    'dashboard',
+]);
+// ─── Error helpers ────────────────────────────────────────────────────────────
+function configError(field, received, expected, example) {
+    return new Error([
+        `Config error: ${field}`,
+        `  Received: ${JSON.stringify(received)}`,
+        `  Expected: ${expected}`,
+        `  Example:  ${example}`,
+    ].join('\n'));
+}
+// ─── Validator ────────────────────────────────────────────────────────────────
+/**
+ * Validate a raw parsed-YAML object.
+ *
+ * Returns the cast `AnalyzerConfig` on success.
+ * Throws with a field-level error message on validation failure.
+ *
+ * @param raw         Parsed YAML value (must be a plain object)
+ * @param strictMode  When true, unknown top-level keys are errors not warnings
+ */
+function validateConfig(raw, strictMode = false) {
+    if (typeof raw !== 'object' || raw === null || Array.isArray(raw)) {
+        throw new Error('Config error: config.yaml must contain a YAML mapping (object), not a scalar or list');
+    }
+    const obj = raw;
+    // ── version ────────────────────────────────────────────────────────────────
+    if ('version' in obj) {
+        const ver = obj['version'];
+        if (!schema_1.SUPPORTED_VERSIONS.includes(ver)) {
+            throw configError('version', ver, `one of: ${schema_1.SUPPORTED_VERSIONS.join(', ')}`, 'version: 1');
+        }
+    }
+    // ── analysis ───────────────────────────────────────────────────────────────
+    if ('analysis' in obj && obj['analysis'] !== null && obj['analysis'] !== undefined) {
+        const analysis = obj['analysis'];
+        if ('defaultMode' in analysis) {
+            const mode = analysis['defaultMode'];
+            if (!schema_1.VALID_ANALYSIS_MODES.includes(mode)) {
+                throw configError('analysis.defaultMode', mode, `one of: ${schema_1.VALID_ANALYSIS_MODES.join(', ')}`, 'analysis:\n    defaultMode: full');
+            }
+        }
+    }
+    // ── scans.coverage.types ─────────────────────────────────────────────────
+    if ('scans' in obj && obj['scans'] !== null && obj['scans'] !== undefined) {
+        const scans = obj['scans'];
+        if ('coverage' in scans && scans['coverage'] !== null && scans['coverage'] !== undefined) {
+            const coverage = scans['coverage'];
+            if ('types' in coverage && Array.isArray(coverage['types'])) {
+                for (const t of coverage['types']) {
+                    if (!schema_1.VALID_COVERAGE_TYPES.includes(t)) {
+                        throw configError('scans.coverage.types', t, `one of: ${schema_1.VALID_COVERAGE_TYPES.join(', ')}`, 'scans:\n    coverage:\n      types:\n        - endpoint\n        - parameter');
+                    }
+                }
+            }
+        }
+        if ('security' in scans && scans['security'] !== null && scans['security'] !== undefined) {
+            const security = scans['security'];
+            if ('scanners' in security && Array.isArray(security['scanners'])) {
+                for (const s of security['scanners']) {
+                    if (!schema_1.VALID_SECURITY_SCANNERS.includes(s)) {
+                        throw configError('scans.security.scanners', s, `one of: ${schema_1.VALID_SECURITY_SCANNERS.join(', ')}`, 'scans:\n    security:\n      scanners:\n        - semgrep\n        - trivy');
+                    }
+                }
+            }
+        }
+        if ('intelligence' in scans && scans['intelligence'] !== null && scans['intelligence'] !== undefined) {
+            const intelligence = scans['intelligence'];
+            if ('types' in intelligence && Array.isArray(intelligence['types'])) {
+                for (const t of intelligence['types']) {
+                    if (!schema_1.VALID_INTELLIGENCE_TYPES.includes(t)) {
+                        throw configError('scans.intelligence.types', t, `one of: ${schema_1.VALID_INTELLIGENCE_TYPES.join(', ')}`, 'scans:\n    intelligence:\n      types:\n        - ai-summary\n        - recommendations');
+                    }
+                }
+            }
+        }
+    }
+    // ── thresholds ────────────────────────────────────────────────────────────
+    if ('thresholds' in obj && obj['thresholds'] !== null && obj['thresholds'] !== undefined) {
+        const thresholds = obj['thresholds'];
+        for (const [key, value] of Object.entries(thresholds)) {
+            if (typeof value !== 'number' || value < 0 || value > 100) {
+                throw configError(`thresholds.${key}`, value, 'a number between 0 and 100 (inclusive)', `thresholds:\n    ${key}: 80`);
+            }
+        }
+    }
+    // ── qualityGate.mode ───────────────────────────────────────────────────────
+    if ('qualityGate' in obj && obj['qualityGate'] !== null && obj['qualityGate'] !== undefined) {
+        const qg = obj['qualityGate'];
+        if ('mode' in qg) {
+            const mode = qg['mode'];
+            if (!schema_1.VALID_QUALITY_GATE_MODES.includes(mode)) {
+                throw configError('qualityGate.mode', mode, `one of: ${schema_1.VALID_QUALITY_GATE_MODES.join(', ')}`, 'qualityGate:\n    mode: warn');
+            }
+        }
+    }
+    // ── reports.formats ───────────────────────────────────────────────────────
+    if ('reports' in obj && obj['reports'] !== null && obj['reports'] !== undefined) {
+        const reports = obj['reports'];
+        if ('formats' in reports && Array.isArray(reports['formats'])) {
+            for (const f of reports['formats']) {
+                if (!schema_1.VALID_REPORT_FORMATS.includes(f)) {
+                    throw configError('reports.formats', f, `one of: ${schema_1.VALID_REPORT_FORMATS.join(', ')}`, 'reports:\n    formats:\n      - json\n      - html');
+                }
+            }
+        }
+    }
+    // ── mcp server validation ──────────────────────────────────────────────────
+    if ('mcp' in obj && obj['mcp'] !== null && obj['mcp'] !== undefined) {
+        const mcp = obj['mcp'];
+        if ('servers' in mcp && mcp['servers'] !== null && mcp['servers'] !== undefined) {
+            const servers = mcp['servers'];
+            for (const [serverId, serverCfg] of Object.entries(servers)) {
+                if (serverCfg === null || typeof serverCfg !== 'object')
+                    continue;
+                const server = serverCfg;
+                const transport = server['transport'];
+                if (transport === 'stdio' && !server['command']) {
+                    throw new Error([
+                        `Config error: mcp.servers.${serverId}.command is required when transport is "stdio".`,
+                        `  Example: command: node, args: ["./mcp-servers/coverage-summary.js"]`,
+                    ].join('\n'));
+                }
+                if ((transport === 'http' || transport === 'sse') && !server['url']) {
+                    throw new Error([
+                        `Config error: mcp.servers.${serverId}.url is required when transport is "http" or "sse".`,
+                        `  Example: url: http://localhost:3100/mcp`,
+                    ].join('\n'));
+                }
+            }
+        }
+    }
+    // ── unknown top-level keys ─────────────────────────────────────────────────
+    for (const key of Object.keys(obj)) {
+        if (!KNOWN_TOP_LEVEL_KEYS.has(key)) {
+            const msg = `[WARNING] config.yaml contains unknown top-level key: "${key}". This key will be ignored.`;
+            if (strictMode) {
+                throw new Error(`Config error: unknown top-level key "${key}".\n  Remove or correct this key before running in strict mode.`);
+            }
+            else {
+                process.stderr.write(msg + '\n');
+            }
+        }
+    }
+    return obj;
+}

package/dist/src/config.d.ts

@@ -0,0 +1,168 @@
+import type { McpConfig } from './mcp/types';
+import type { AnalyzerConfig } from './config/types';
+/**
+ * Per-coverage-type threshold percentages.
+ * Each key corresponds to a coverage type (e.g. "endpoint", "parameter").
+ * A special "global" key sets the default for all categories.
+ */
+export interface ThresholdsConfig {
+    global?: number;
+    endpoint?: number;
+    parameter?: number;
+    business?: number;
+    integration?: number;
+    security?: number;
+    error?: number;
+    performance?: number;
+    resilience?: number;
+    compatibility?: number;
+    [key: string]: number | undefined;
+}
+/**
+ * Exclusion rules applied before coverage calculations.
+ */
+export interface ExcludeConfig {
+    /** Glob-style path patterns whose endpoints should be excluded (e.g. "/internal/*") */
+    paths?: string[];
+    /** HTTP methods to exclude (e.g. ["OPTIONS", "HEAD"]) */
+    methods?: string[];
+}
+/** Configuration for GitHub Pages publishing */
+export interface GitHubPagesConfig {
+    enabled?: boolean;
+    /** Base path for the Pages site (e.g. "/apiTestsCoverageAnalyzer/") */
+    basePath?: string;
+}
+/** Which artifact formats to include in the published bundle */
+export interface ArtifactsConfig {
+    includeJson?: boolean;
+    includeHtml?: boolean;
+    includeCsv?: boolean;
+    includeJunit?: boolean;
+    includeMarkdown?: boolean;
+    includeScreenshots?: boolean;
+}
+/** Screenshots capture configuration */
+export interface ScreenshotsConfig {
+    /** Whether to attempt screenshot capture */
+    enabled?: boolean;
+    /** Fail the build if screenshots cannot be captured */
+    strict?: boolean;
+    /** Dashboard URL for headless capture (defaults to auto-started server) */
+    dashboardUrl?: string;
+}
+/** Publishing configuration block */
+export interface PublishingConfig {
+    enabled?: boolean;
+    /** Output directory for the static site (default: "site") */
+    outputDir?: string;
+    /**
+     * How to generate the build ID.
+     * Supported: "timestamp" | "commit-sha" | "run-number" | "branch-timestamp" | custom string
+     */
+    buildId?: string;
+    githubPages?: GitHubPagesConfig;
+    artifacts?: ArtifactsConfig;
+    screenshots?: ScreenshotsConfig;
+}
+/** Quality gate configuration block */
+export interface QualityGateConfig {
+    enabled?: boolean;
+    /** Fail the build (exit code 1) when a threshold is missed */
+    failBuildOnThresholdMiss?: boolean;
+    /** "strict" = fail on any breach; "warn" = log but do not fail */
+    mode?: 'strict' | 'warn';
+}
+/** Summary engine configuration block */
+export interface SummaryConfig {
+    /** Whether to generate summaries at all (default: true) */
+    enabled?: boolean;
+    /** Generate a PR comment summary (default: true) */
+    generatePrSummary?: boolean;
+    /** Generate a build/CI summary (default: true) */
+    generateBuildSummary?: boolean;
+    /** Generate AI-friendly summary files (default: true) */
+    generateAiSummary?: boolean;
+    /** When true, omit sections for analyzers that did not run (default: false) */
+    includeOnlyEvaluatedSections?: boolean;
+    /** Post/update a PR comment when running in GitHub Actions PR context */
+    publishPrComment?: boolean;
+    /** Write step summary to $GITHUB_STEP_SUMMARY (default: true) */
+    publishGithubStepSummary?: boolean;
+    /** Generate Jenkins-compatible summary artifacts (default: true) */
+    publishJenkinsSummary?: boolean;
+}
+/**
+ * Top-level configuration object that can be provided via `coverage.config.json`.
+ */
+export interface CoverageConfig {
+    /** Per-type minimum coverage thresholds (percentages 0–100). "global" sets the default. */
+    thresholds?: ThresholdsConfig;
+    /** Branch-aware threshold overrides, keyed by branch glob pattern */
+    thresholdsByBranch?: Record<string, ThresholdsConfig>;
+    /** Endpoints / methods to exclude from analysis */
+    exclude?: ExcludeConfig;
+    /** Glob patterns for test files (overrides CLI --tests default) */
+    testPatterns?: string[];
+    /** Paths to plugin modules to load after built-in analysis */
+    plugins?: string[];
+    /** Publishing / static-site generation settings */
+    publishing?: PublishingConfig;
+    /** Quality gate / threshold enforcement settings */
+    qualityGate?: QualityGateConfig;
+    /** Summary engine configuration */
+    summary?: SummaryConfig;
+    /** MCP (Model Context Protocol) integration configuration */
+    mcp?: McpConfig;
+}
+export declare const DEFAULT_CONFIG_FILENAME = "coverage.config.json";
+export declare const defaultConfig: CoverageConfig;
+/**
+ * Load a `CoverageConfig` from the given file path.
+ * The file must be valid JSON.
+ *
+ * @throws if the file exists but cannot be parsed.
+ */
+export declare function loadConfigFile(filePath: string): CoverageConfig;
+/**
+ * Resolve and load the configuration file.
+ *
+ * Resolution order:
+ * 1. If `configPath` is provided, load that file (error if missing).
+ * 2. Otherwise, look for `coverage.config.json` in the current working directory.
+ * 3. If neither is found, return the default (empty) configuration.
+ */
+export declare function resolveConfig(configPath?: string): CoverageConfig;
+/**
+ * Merge a loaded `CoverageConfig` with explicit CLI overrides.
+ * CLI values always take precedence over config-file values.
+ *
+ * @param fileConfig  Configuration loaded from the file (may be empty).
+ * @param cliOverrides  Values supplied directly on the command line.
+ */
+export declare function mergeConfig(fileConfig: CoverageConfig, cliOverrides: Partial<CoverageConfig>): CoverageConfig;
+/**
+ * Return `true` if the given `method` / `path` combination should be excluded
+ * according to `exclude` configuration rules.
+ *
+ * Path matching supports simple wildcard segments using `*`
+ * (e.g. `/internal/*` matches `/internal/anything`).
+ */
+export declare function isExcluded(method: string, endpointPath: string, exclude: ExcludeConfig): boolean;
+/**
+ * Load the central `config.yaml` and return a normalized `AnalyzerConfig`.
+ *
+ * This is the preferred loader for all new code.  The legacy `resolveConfig`
+ * function is kept for backward compatibility but emits a deprecation warning
+ * when `coverage.config.json` is detected without a `config.yaml` present.
+ *
+ * @param configPath  Optional explicit path (from --config flag).
+ */
+export declare function loadCentralConfig(configPath?: string): AnalyzerConfig;
+/**
+ * Map a legacy `CoverageConfig` object to the new `AnalyzerConfig` shape.
+ * Used for backward compatibility when callers still hold a `CoverageConfig`.
+ */
+export declare function mapLegacyToAnalyzerConfig(legacy: CoverageConfig): Partial<AnalyzerConfig>;
+export type { AnalyzerConfig } from './config/types';
+//# sourceMappingURL=config.d.ts.map

package/dist/src/config.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../../src/config.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AAO7C,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAC;AAIrD;;;;GAIG;AACH,MAAM,WAAW,gBAAgB;IAC/B,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAAC;CACnC;AAED;;GAEG;AACH,MAAM,WAAW,aAAa;IAC5B,uFAAuF;IACvF,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC;IACjB,yDAAyD;IACzD,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC;CACpB;AAED,gDAAgD;AAChD,MAAM,WAAW,iBAAiB;IAChC,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,uEAAuE;IACvE,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED,gEAAgE;AAChE,MAAM,WAAW,eAAe;IAC9B,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB,eAAe,CAAC,EAAE,OAAO,CAAC;IAC1B,kBAAkB,CAAC,EAAE,OAAO,CAAC;CAC9B;AAED,wCAAwC;AACxC,MAAM,WAAW,iBAAiB;IAChC,4CAA4C;IAC5C,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,uDAAuD;IACvD,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,2EAA2E;IAC3E,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAED,qCAAqC;AACrC,MAAM,WAAW,gBAAgB;IAC/B,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,6DAA6D;IAC7D,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB;;;OAGG;IACH,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,WAAW,CAAC,EAAE,iBAAiB,CAAC;IAChC,SAAS,CAAC,EAAE,eAAe,CAAC;IAC5B,WAAW,CAAC,EAAE,iBAAiB,CAAC;CACjC;AAED,uCAAuC;AACvC,MAAM,WAAW,iBAAiB;IAChC,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,8DAA8D;IAC9D,wBAAwB,CAAC,EAAE,OAAO,CAAC;IACnC,kEAAkE;IAClE,IAAI,CAAC,EAAE,QAAQ,GAAG,MAAM,CAAC;CAC1B;AAED,yCAAyC;AACzC,MAAM,WAAW,aAAa;IAC5B,2DAA2D;IAC3D,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,oDAAoD;IACpD,iBAAiB,CAAC,EAAE,OAAO,CAAC;IAC5B,kDAAkD;IAClD,oBAAoB,CAAC,EAAE,OAAO,CAAC;IAC/B,yDAAyD;IACzD,iBAAiB,CAAC,EAAE,OAAO,CAAC;IAC5B,+EAA+E;IAC/E,4BAA4B,CAAC,EAAE,OAAO,CAAC;IACvC,yEAAyE;IACzE,gBAAgB,CAAC,EAAE,OAAO,CAAC;IAC3B,iEAAiE;IACjE,wBAAwB,CAAC,EAAE,OAAO,CAAC;IACnC,oEAAoE;IACpE,qBAAqB,CAAC,EAAE,OAAO,CAAC;CACjC;AAED;;GAEG;AACH,MAAM,WAAW,cAAc;IAC7B,2FAA2F;IAC3F,UAAU,CAAC,EAAE,gBAAgB,CAAC;IAC9B,qEAAqE;IACrE,kBAAkB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,gBAAgB,CAAC,CAAC;IACtD,mDAAmD;IACnD,OAAO,CAAC,EAAE,aAAa,CAAC;IACxB,mEAAmE;IACnE,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;IACxB,8DAA8D;IAC9D,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC;IACnB,mDAAmD;IACnD,UAAU,CAAC,EAAE,gBAAgB,CAAC;IAC9B,oDAAoD;IACpD,WAAW,CAAC,EAAE,iBAAiB,CAAC;IAChC,mCAAmC;IACnC,OAAO,CAAC,EAAE,aAAa,CAAC;IACxB,6DAA6D;IAC7D,GAAG,CAAC,EAAE,SAAS,CAAC;CACjB;AAID,eAAO,MAAM,uBAAuB,yBAAyB,CAAC;AAE9D,eAAO,MAAM,aAAa,EAAE,cAQ3B,CAAC;AAIF;;;;;GAKG;AACH,wBAAgB,cAAc,CAAC,QAAQ,EAAE,MAAM,GAAG,cAAc,CAO/D;AAED;;;;;;;GAOG;AACH,wBAAgB,aAAa,CAAC,UAAU,CAAC,EAAE,MAAM,GAAG,cAAc,CAejE;AAED;;;;;;GAMG;AACH,wBAAgB,WAAW,CACzB,UAAU,EAAE,cAAc,EAC1B,YAAY,EAAE,OAAO,CAAC,cAAc,CAAC,GACpC,cAAc,CAoBhB;AAID;;;;;;GAMG;AACH,wBAAgB,UAAU,CACxB,MAAM,EAAE,MAAM,EACd,YAAY,EAAE,MAAM,EACpB,OAAO,EAAE,aAAa,GACrB,OAAO,CAcT;AAkBD;;;;;;;;GAQG;AACH,wBAAgB,iBAAiB,CAAC,UAAU,CAAC,EAAE,MAAM,GAAG,cAAc,CAQrE;AAED;;;GAGG;AACH,wBAAgB,yBAAyB,CAAC,MAAM,EAAE,cAAc,GAAG,OAAO,CAAC,cAAc,CAAC,CA0BzF;AAGD,YAAY,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAC"}

package/dist/src/config.js

@@ -0,0 +1,204 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.defaultConfig = exports.DEFAULT_CONFIG_FILENAME = void 0;
+exports.loadConfigFile = loadConfigFile;
+exports.resolveConfig = resolveConfig;
+exports.mergeConfig = mergeConfig;
+exports.isExcluded = isExcluded;
+exports.loadCentralConfig = loadCentralConfig;
+exports.mapLegacyToAnalyzerConfig = mapLegacyToAnalyzerConfig;
+const fs = __importStar(require("fs"));
+const path = __importStar(require("path"));
+const loadConfig_1 = require("./config/loadConfig");
+// ─── Defaults ─────────────────────────────────────────────────────────────────
+exports.DEFAULT_CONFIG_FILENAME = 'coverage.config.json';
+exports.defaultConfig = {
+    thresholds: {},
+    exclude: {
+        paths: [],
+        methods: [],
+    },
+    testPatterns: [],
+    plugins: [],
+};
+// ─── Loader ───────────────────────────────────────────────────────────────────
+/**
+ * Load a `CoverageConfig` from the given file path.
+ * The file must be valid JSON.
+ *
+ * @throws if the file exists but cannot be parsed.
+ */
+function loadConfigFile(filePath) {
+    const raw = fs.readFileSync(filePath, 'utf-8');
+    const parsed = JSON.parse(raw);
+    if (typeof parsed !== 'object' || parsed === null || Array.isArray(parsed)) {
+        throw new Error(`Configuration file ${filePath} must contain a JSON object`);
+    }
+    return parsed;
+}
+/**
+ * Resolve and load the configuration file.
+ *
+ * Resolution order:
+ * 1. If `configPath` is provided, load that file (error if missing).
+ * 2. Otherwise, look for `coverage.config.json` in the current working directory.
+ * 3. If neither is found, return the default (empty) configuration.
+ */
+function resolveConfig(configPath) {
+    if (configPath) {
+        const absPath = path.resolve(configPath);
+        if (!fs.existsSync(absPath)) {
+            throw new Error(`Configuration file not found: ${absPath}`);
+        }
+        return loadConfigFile(absPath);
+    }
+    const defaultPath = path.join(process.cwd(), exports.DEFAULT_CONFIG_FILENAME);
+    if (fs.existsSync(defaultPath)) {
+        return loadConfigFile(defaultPath);
+    }
+    return { ...exports.defaultConfig };
+}
+/**
+ * Merge a loaded `CoverageConfig` with explicit CLI overrides.
+ * CLI values always take precedence over config-file values.
+ *
+ * @param fileConfig  Configuration loaded from the file (may be empty).
+ * @param cliOverrides  Values supplied directly on the command line.
+ */
+function mergeConfig(fileConfig, cliOverrides) {
+    var _a, _b, _c, _d, _e, _f, _g, _h, _j, _k, _l, _m, _o;
+    const merged = {
+        thresholds: {
+            ...((_a = fileConfig.thresholds) !== null && _a !== void 0 ? _a : {}),
+            ...((_b = cliOverrides.thresholds) !== null && _b !== void 0 ? _b : {}),
+        },
+        exclude: {
+            paths: (_f = (_d = (_c = cliOverrides.exclude) === null || _c === void 0 ? void 0 : _c.paths) !== null && _d !== void 0 ? _d : (_e = fileConfig.exclude) === null || _e === void 0 ? void 0 : _e.paths) !== null && _f !== void 0 ? _f : [],
+            methods: (_k = (_h = (_g = cliOverrides.exclude) === null || _g === void 0 ? void 0 : _g.methods) !== null && _h !== void 0 ? _h : (_j = fileConfig.exclude) === null || _j === void 0 ? void 0 : _j.methods) !== null && _k !== void 0 ? _k : [],
+        },
+        testPatterns: (cliOverrides.testPatterns && cliOverrides.testPatterns.length > 0)
+            ? cliOverrides.testPatterns
+            : ((_l = fileConfig.testPatterns) !== null && _l !== void 0 ? _l : []),
+        plugins: [
+            ...((_m = fileConfig.plugins) !== null && _m !== void 0 ? _m : []),
+            ...((_o = cliOverrides.plugins) !== null && _o !== void 0 ? _o : []),
+        ],
+    };
+    return merged;
+}
+// ─── Endpoint exclusion helper ────────────────────────────────────────────────
+/**
+ * Return `true` if the given `method` / `path` combination should be excluded
+ * according to `exclude` configuration rules.
+ *
+ * Path matching supports simple wildcard segments using `*`
+ * (e.g. `/internal/*` matches `/internal/anything`).
+ */
+function isExcluded(method, endpointPath, exclude) {
+    var _a, _b;
+    const methods = (_a = exclude.methods) !== null && _a !== void 0 ? _a : [];
+    if (methods.map((m) => m.toUpperCase()).includes(method.toUpperCase())) {
+        return true;
+    }
+    const patterns = (_b = exclude.paths) !== null && _b !== void 0 ? _b : [];
+    for (const pattern of patterns) {
+        if (matchesPathPattern(endpointPath, pattern)) {
+            return true;
+        }
+    }
+    return false;
+}
+/**
+ * Simple glob-style path pattern matcher.
+ * Supports `*` (matches a single path segment) and `**` (matches any path suffix).
+ */
+function matchesPathPattern(endpointPath, pattern) {
+    // Escape special regex characters except * and convert glob * to regex
+    const regexStr = pattern
+        .replace(/[.+^${}()|[\]\\]/g, '\\$&') // escape regex specials (not *)
+        .replace(/\*\*/g, '.+') // ** → any characters
+        .replace(/\*/g, '[^/]+'); // * → any characters except /
+    const regex = new RegExp(`^${regexStr}$`);
+    return regex.test(endpointPath);
+}
+// ─── Central config integration (Feature 18) ──────────────────────────────────
+/**
+ * Load the central `config.yaml` and return a normalized `AnalyzerConfig`.
+ *
+ * This is the preferred loader for all new code.  The legacy `resolveConfig`
+ * function is kept for backward compatibility but emits a deprecation warning
+ * when `coverage.config.json` is detected without a `config.yaml` present.
+ *
+ * @param configPath  Optional explicit path (from --config flag).
+ */
+function loadCentralConfig(configPath) {
+    // Detect legacy config and warn before delegating.
+    const legacyPath = path.join(process.cwd(), loadConfig_1.LEGACY_CONFIG_FILENAME);
+    const centralPath = path.join(process.cwd(), loadConfig_1.DEFAULT_CONFIG_FILENAME);
+    if (fs.existsSync(legacyPath) && !fs.existsSync(centralPath) && !configPath) {
+        process.stderr.write(loadConfig_1.LEGACY_CONFIG_WARNING + '\n');
+    }
+    return (0, loadConfig_1.loadConfig)(configPath);
+}
+/**
+ * Map a legacy `CoverageConfig` object to the new `AnalyzerConfig` shape.
+ * Used for backward compatibility when callers still hold a `CoverageConfig`.
+ */
+function mapLegacyToAnalyzerConfig(legacy) {
+    const partial = {};
+    if (legacy.thresholds) {
+        partial.thresholds = { ...legacy.thresholds };
+    }
+    if (legacy.qualityGate) {
+        partial.qualityGate = {
+            enabled: legacy.qualityGate.enabled,
+            failBuildOnThresholdMiss: legacy.qualityGate.failBuildOnThresholdMiss,
+            mode: legacy.qualityGate.mode,
+        };
+    }
+    if (legacy.publishing) {
+        partial.publishing = {
+            enabled: legacy.publishing.enabled,
+            githubPages: legacy.publishing.githubPages
+                ? { enabled: legacy.publishing.githubPages.enabled }
+                : undefined,
+        };
+    }
+    if (legacy.mcp) {
+        partial.mcp = legacy.mcp;
+    }
+    return partial;
+}

package/dist/src/coverage/deep-analysis/callGraph.d.ts

@@ -0,0 +1,67 @@
+/**
+ * Deep Code Analysis — Call Graph Construction
+ *
+ * Builds a lightweight per-file call graph that maps function/method names to
+ * their bodies and the other local functions they call.
+ *
+ * This call graph is used by wrapper-method and helper-method resolution to
+ * follow call chains up to a configurable depth.
+ */
+import type { CallGraph } from './types';
+/**
+ * Extract top-level function definitions and their bodies from
+ * TypeScript/JavaScript source.
+ *
+ * Handles:
+ *   function foo() { ... }
+ *   const foo = () => { ... }
+ *   const foo = (params) => { ... }
+ *   const foo = function() { ... }
+ */
+export declare function extractJsFunctions(content: string): Array<{
+    name: string;
+    body: string;
+}>;
+/**
+ * Extract method definitions from Java / Kotlin source.
+ *
+ * Handles:
+ *   [modifiers] returnType methodName([params]) { body }
+ *   fun methodName([params]): ReturnType { body }
+ */
+export declare function extractJavaKotlinFunctions(content: string): Array<{
+    name: string;
+    body: string;
+}>;
+/**
+ * Extract Python function definitions.
+ *
+ * Handles:
+ *   def function_name(params):
+ *       body (indented block)
+ */
+export declare function extractPythonFunctions(content: string): Array<{
+    name: string;
+    body: string;
+}>;
+/**
+ * Build a call graph from JavaScript/TypeScript source.
+ */
+export declare function buildJsCallGraph(content: string): CallGraph;
+/**
+ * Build a call graph from Java/Kotlin source.
+ */
+export declare function buildJavaCallGraph(content: string): CallGraph;
+/**
+ * Build a call graph from Python source.
+ */
+export declare function buildPythonCallGraph(content: string): CallGraph;
+/**
+ * Extract the content of a brace-delimited block starting at `startIndex`
+ * (which must point at the opening `{`). Returns the inner body without
+ * the surrounding braces.
+ *
+ * Returns undefined if braces are not balanced.
+ */
+export declare function extractBalancedBraces(content: string, startIndex: number): string | undefined;
+//# sourceMappingURL=callGraph.d.ts.map

package/dist/src/coverage/deep-analysis/callGraph.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"callGraph.d.ts","sourceRoot":"","sources":["../../../../src/coverage/deep-analysis/callGraph.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,KAAK,EAAE,SAAS,EAAiB,MAAM,SAAS,CAAC;AAIxD;;;;;;;;;GASG;AACH,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,MAAM,GAAG,KAAK,CAAC;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,CAAC,CAazF;AAED;;;;;;GAMG;AACH,wBAAgB,0BAA0B,CAAC,OAAO,EAAE,MAAM,GAAG,KAAK,CAAC;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,CAAC,CAcjG;AAED;;;;;;GAMG;AACH,wBAAgB,sBAAsB,CAAC,OAAO,EAAE,MAAM,GAAG,KAAK,CAAC;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,CAAC,CA4C7F;AAID;;GAEG;AACH,wBAAgB,gBAAgB,CAAC,OAAO,EAAE,MAAM,GAAG,SAAS,CAgB3D;AAED;;GAEG;AACH,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,MAAM,GAAG,SAAS,CAgB7D;AAED;;GAEG;AACH,wBAAgB,oBAAoB,CAAC,OAAO,EAAE,MAAM,GAAG,SAAS,CAgB/D;AA8FD;;;;;;GAMG;AACH,wBAAgB,qBAAqB,CAAC,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CA6B7F"}