audit-tools 0.28.0

package/dist/audit/extractors/analyzers/sql.js

@@ -0,0 +1,23 @@
+import { normalizeGraphPath } from "../graphPathUtils.js";
+/**
+ * SQL is intentionally a registry stub (per the refactor plan): the seam
+ * recognises `.sql` files but emits no edges yet. Registering it keeps the
+ * capability surface honest — `analyzer_capability.json` records SQL as
+ * applicable-but-empty rather than silently invisible — and leaves a single
+ * place to add cross-file resolution (views/foreign keys) later.
+ */
+function supports(file) {
+    return normalizeGraphPath(file).toLowerCase().endsWith(".sql");
+}
+// Signature matches the `LanguageAnalyzer.analyze` interface (the params the
+// other analyzers receive) so the registry type stays uniform; the stub
+// ignores them and emits no edges yet.
+function analyze(_files, _context) {
+    return { edges: [] };
+}
+export const sqlAnalyzer = {
+    id: "sql",
+    supports,
+    analyze,
+};
+//# sourceMappingURL=sql.js.map

package/dist/audit/extractors/analyzers/sql.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sql.js","sourceRoot":"","sources":["../../../../src/audit/extractors/analyzers/sql.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,kBAAkB,EAAE,MAAM,sBAAsB,CAAC;AAO1D;;;;;;GAMG;AACH,SAAS,QAAQ,CAAC,IAAY;IAC5B,OAAO,kBAAkB,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;AACjE,CAAC;AAED,6EAA6E;AAC7E,wEAAwE;AACxE,uCAAuC;AACvC,SAAS,OAAO,CAAC,MAAgB,EAAE,QAAyB;IAC1D,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC;AACvB,CAAC;AAED,MAAM,CAAC,MAAM,WAAW,GAAqB;IAC3C,EAAE,EAAE,KAAK;IACT,QAAQ;IACR,OAAO;CACR,CAAC"}

package/dist/audit/extractors/analyzers/treeSitter.d.ts

@@ -0,0 +1,44 @@
+/**
+ * Shared web-tree-sitter loader for the Tier-S parser analyzers (Python / HTML /
+ * CSS). web-tree-sitter is a pure-WASM runtime — no native compilation — so a
+ * grammar parses identically on every platform; grammars ship as `.wasm` files
+ * in `tree-sitter-wasms` (out/tree-sitter-<lang>.wasm).
+ *
+ * Everything here degrades to `undefined` on any failure (missing dependency,
+ * missing grammar, init error) so a caller simply keeps the deterministic regex
+ * floor. The runtime is initialised once and parsed grammars are cached.
+ */
+export interface TsNode {
+    type: string;
+    text: string;
+    namedChildren: TsNode[];
+    childForFieldName(field: string): TsNode | null;
+    descendantsOfType(type: string | string[]): TsNode[];
+}
+export interface TsTree {
+    rootNode: TsNode;
+}
+export interface TsLanguage {
+    __brand?: "tree-sitter-language";
+}
+export interface TsParser {
+    setLanguage(language: TsLanguage): void;
+    parse(source: string): TsTree;
+}
+/**
+ * Return the number of times tree-sitter fell back to the regex floor since
+ * process start (or since the last `__resetTreeSitterForTests` call). Each
+ * distinct failure path (import failure, init failure, grammar load failure,
+ * parser instantiation failure) increments the counter once. A caller can
+ * snapshot this before and after a batch parse pass to detect systemic
+ * degradation without scraping stderr.
+ */
+export declare function getTreeSitterDegradationCount(): number;
+/**
+ * Obtain a parser bound to `grammar` (e.g. "python", "html", "css"), or
+ * `undefined` if web-tree-sitter or the grammar wasm cannot be loaded.
+ */
+export declare function getTreeSitterParser(grammar: string, dependencyPath?: string): Promise<TsParser | undefined>;
+/** Test seam: reset the memoised runtime/grammar caches and degradation counter. */
+export declare function __resetTreeSitterForTests(): void;
+//# sourceMappingURL=treeSitter.d.ts.map

package/dist/audit/extractors/analyzers/treeSitter.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"treeSitter.d.ts","sourceRoot":"","sources":["../../../../src/audit/extractors/analyzers/treeSitter.ts"],"names":[],"mappings":"AAIA;;;;;;;;;GASG;AAIH,MAAM,WAAW,MAAM;IACrB,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,aAAa,EAAE,MAAM,EAAE,CAAC;IACxB,iBAAiB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAAC;IAChD,iBAAiB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,EAAE,GAAG,MAAM,EAAE,CAAC;CACtD;AACD,MAAM,WAAW,MAAM;IACrB,QAAQ,EAAE,MAAM,CAAC;CAClB;AACD,MAAM,WAAW,UAAU;IACzB,OAAO,CAAC,EAAE,sBAAsB,CAAC;CAClC;AACD,MAAM,WAAW,QAAQ;IACvB,WAAW,CAAC,QAAQ,EAAE,UAAU,GAAG,IAAI,CAAC;IACxC,KAAK,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAAC;CAC/B;AAgBD;;;;;;;GAOG;AACH,wBAAgB,6BAA6B,IAAI,MAAM,CAEtD;AA6HD;;;GAGG;AACH,wBAAsB,mBAAmB,CACvC,OAAO,EAAE,MAAM,EACf,cAAc,CAAC,EAAE,MAAM,GACtB,OAAO,CAAC,QAAQ,GAAG,SAAS,CAAC,CAiB/B;AAED,oFAAoF;AACpF,wBAAgB,yBAAyB,IAAI,IAAI,CAKhD"}

package/dist/audit/extractors/analyzers/treeSitter.js

@@ -0,0 +1,148 @@
+import { createRequire } from "node:module";
+import { dirname, join } from "node:path";
+import { pathToFileURL } from "node:url";
+const requireFromHere = createRequire(import.meta.url);
+let _degradationCount = 0;
+/**
+ * Return the number of times tree-sitter fell back to the regex floor since
+ * process start (or since the last `__resetTreeSitterForTests` call). Each
+ * distinct failure path (import failure, init failure, grammar load failure,
+ * parser instantiation failure) increments the counter once. A caller can
+ * snapshot this before and after a batch parse pass to detect systemic
+ * degradation without scraping stderr.
+ */
+export function getTreeSitterDegradationCount() {
+    return _degradationCount;
+}
+// The parser module is resolved per `dependencyPath`: a call with a different
+// dependencyPath must resolve its own module rather than reusing the first
+// resolution. Keyed by `dependencyPath ?? ""` so the bare-specifier path
+// (no dependencyPath) gets a stable cache slot too.
+const moduleCache = new Map();
+const initCache = new Map();
+const languageCache = new Map();
+async function importParserModule(dependencyPath) {
+    const specifiers = [];
+    if (dependencyPath) {
+        try {
+            const manifest = requireFromHere(join(dependencyPath, "package.json"));
+            const entry = manifest.module ?? manifest.main ?? "index.js";
+            specifiers.push(pathToFileURL(join(dependencyPath, entry)).href);
+        }
+        catch {
+            // Fall through to the bare specifier.
+        }
+    }
+    specifiers.push("web-tree-sitter");
+    for (const specifier of specifiers) {
+        try {
+            const mod = (await import(specifier));
+            const resolved = (mod.Parser ? mod : mod.default);
+            if (resolved?.Parser && resolved.Language) {
+                return resolved;
+            }
+        }
+        catch (e) {
+            _degradationCount += 1;
+            process.stderr.write(`[audit-code] tree-sitter: failed to import '${specifier}': ${e.message ?? String(e)}\n`);
+        }
+    }
+    return undefined;
+}
+async function getModule(dependencyPath) {
+    const key = dependencyPath ?? "";
+    let cached = moduleCache.get(key);
+    if (!cached) {
+        cached = importParserModule(dependencyPath);
+        moduleCache.set(key, cached);
+    }
+    return cached;
+}
+async function ensureInit(parserModule) {
+    let cached = initCache.get(parserModule);
+    if (!cached) {
+        cached = parserModule.Parser.init()
+            .then(() => true)
+            .catch((e) => {
+            _degradationCount += 1;
+            process.stderr.write(`[audit-code] tree-sitter: Parser.init() failed: ${e.message ?? String(e)}\n`);
+            return false;
+        });
+        initCache.set(parserModule, cached);
+    }
+    return cached;
+}
+function resolveGrammarPath(grammar) {
+    // tree-sitter-wasms ships prebuilt grammars under out/tree-sitter-<lang>.wasm.
+    try {
+        return requireFromHere.resolve(`tree-sitter-wasms/out/tree-sitter-${grammar}.wasm`);
+    }
+    catch {
+        // Fall back to locating the package root, then the file under out/.
+    }
+    try {
+        const pkg = requireFromHere.resolve("tree-sitter-wasms/package.json");
+        return join(dirname(pkg), "out", `tree-sitter-${grammar}.wasm`);
+    }
+    catch {
+        return undefined;
+    }
+}
+async function loadLanguage(parserModule, grammar) {
+    let moduleMap = languageCache.get(parserModule);
+    if (!moduleMap) {
+        moduleMap = new Map();
+        languageCache.set(parserModule, moduleMap);
+    }
+    if (moduleMap.has(grammar)) {
+        return moduleMap.get(grammar) ?? undefined;
+    }
+    const grammarPath = resolveGrammarPath(grammar);
+    if (!grammarPath) {
+        moduleMap.set(grammar, null);
+        return undefined;
+    }
+    try {
+        const language = await parserModule.Language.load(grammarPath);
+        moduleMap.set(grammar, language);
+        return language;
+    }
+    catch (e) {
+        _degradationCount += 1;
+        process.stderr.write(`[audit-code] tree-sitter: failed to load grammar '${grammar}' from '${grammarPath}': ${e.message ?? String(e)}\n`);
+        moduleMap.set(grammar, null);
+        return undefined;
+    }
+}
+/**
+ * Obtain a parser bound to `grammar` (e.g. "python", "html", "css"), or
+ * `undefined` if web-tree-sitter or the grammar wasm cannot be loaded.
+ */
+export async function getTreeSitterParser(grammar, dependencyPath) {
+    const parserModule = await getModule(dependencyPath);
+    if (!parserModule)
+        return undefined;
+    if (!(await ensureInit(parserModule)))
+        return undefined;
+    const language = await loadLanguage(parserModule, grammar);
+    if (!language)
+        return undefined;
+    try {
+        const parser = new parserModule.Parser();
+        parser.setLanguage(language);
+        return parser;
+    }
+    catch (e) {
+        _degradationCount += 1;
+        process.stderr.write(`[audit-code] tree-sitter: failed to instantiate parser for grammar '${grammar}': ${e.message ?? String(e)}\n`);
+        return undefined;
+    }
+}
+/** Test seam: reset the memoised runtime/grammar caches and degradation counter. */
+export function __resetTreeSitterForTests() {
+    moduleCache.clear();
+    initCache.clear();
+    languageCache.clear();
+    _degradationCount = 0;
+}
+//# sourceMappingURL=treeSitter.js.map

package/dist/audit/extractors/analyzers/treeSitter.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"treeSitter.js","sourceRoot":"","sources":["../../../../src/audit/extractors/analyzers/treeSitter.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAC5C,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AA2CzC,MAAM,eAAe,GAAG,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAEvD,IAAI,iBAAiB,GAAG,CAAC,CAAC;AAE1B;;;;;;;GAOG;AACH,MAAM,UAAU,6BAA6B;IAC3C,OAAO,iBAAiB,CAAC;AAC3B,CAAC;AAED,8EAA8E;AAC9E,2EAA2E;AAC3E,yEAAyE;AACzE,oDAAoD;AACpD,MAAM,WAAW,GAAG,IAAI,GAAG,EAA6C,CAAC;AACzE,MAAM,SAAS,GAAG,IAAI,GAAG,EAAkC,CAAC;AAC5D,MAAM,aAAa,GAAG,IAAI,GAAG,EAAgD,CAAC;AAE9E,KAAK,UAAU,kBAAkB,CAC/B,cAAuB;IAEvB,MAAM,UAAU,GAAa,EAAE,CAAC;IAChC,IAAI,cAAc,EAAE,CAAC;QACnB,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,eAAe,CAC9B,IAAI,CAAC,cAAc,EAAE,cAAc,CAAC,CACC,CAAC;YACxC,MAAM,KAAK,GAAG,QAAQ,CAAC,MAAM,IAAI,QAAQ,CAAC,IAAI,IAAI,UAAU,CAAC;YAC7D,UAAU,CAAC,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,cAAc,EAAE,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QACnE,CAAC;QAAC,MAAM,CAAC;YACP,sCAAsC;QACxC,CAAC;IACH,CAAC;IACD,UAAU,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;IAEnC,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;QACnC,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,CAAC,MAAM,MAAM,CAAC,SAAS,CAAC,CAEnC,CAAC;YACF,MAAM,QAAQ,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAEnC,CAAC;YACd,IAAI,QAAQ,EAAE,MAAM,IAAI,QAAQ,CAAC,QAAQ,EAAE,CAAC;gBAC1C,OAAO,QAAQ,CAAC;YAClB,CAAC;QACH,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,iBAAiB,IAAI,CAAC,CAAC;YACvB,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,+CAA+C,SAAS,MAAO,CAAW,CAAC,OAAO,IAAI,MAAM,CAAC,CAAC,CAAC,IAAI,CACpG,CAAC;QACJ,CAAC;IACH,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,KAAK,UAAU,SAAS,CACtB,cAAuB;IAEvB,MAAM,GAAG,GAAG,cAAc,IAAI,EAAE,CAAC;IACjC,IAAI,MAAM,GAAG,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IAClC,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,MAAM,GAAG,kBAAkB,CAAC,cAAc,CAAC,CAAC;QAC5C,WAAW,CAAC,GAAG,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;IAC/B,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,KAAK,UAAU,UAAU,CAAC,YAA0B;IAClD,IAAI,MAAM,GAAG,SAAS,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;IACzC,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,MAAM,GAAG,YAAY,CAAC,MAAM,CAAC,IAAI,EAAE;aAChC,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC;aAChB,KAAK,CAAC,CAAC,CAAU,EAAE,EAAE;YACpB,iBAAiB,IAAI,CAAC,CAAC;YACvB,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,mDAAoD,CAAW,CAAC,OAAO,IAAI,MAAM,CAAC,CAAC,CAAC,IAAI,CACzF,CAAC;YACF,OAAO,KAAK,CAAC;QACf,CAAC,CAAC,CAAC;QACL,SAAS,CAAC,GAAG,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC;IACtC,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,kBAAkB,CAAC,OAAe;IACzC,+EAA+E;IAC/E,IAAI,CAAC;QACH,OAAO,eAAe,CAAC,OAAO,CAC5B,qCAAqC,OAAO,OAAO,CACpD,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,oEAAoE;IACtE,CAAC;IACD,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,eAAe,CAAC,OAAO,CAAC,gCAAgC,CAAC,CAAC;QACtE,OAAO,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,KAAK,EAAE,eAAe,OAAO,OAAO,CAAC,CAAC;IAClE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED,KAAK,UAAU,YAAY,CACzB,YAA0B,EAC1B,OAAe;IAEf,IAAI,SAAS,GAAG,aAAa,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;IAChD,IAAI,CAAC,SAAS,EAAE,CAAC;QACf,SAAS,GAAG,IAAI,GAAG,EAAE,CAAC;QACtB,aAAa,CAAC,GAAG,CAAC,YAAY,EAAE,SAAS,CAAC,CAAC;IAC7C,CAAC;IACD,IAAI,SAAS,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;QAC3B,OAAO,SAAS,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,SAAS,CAAC;IAC7C,CAAC;IACD,MAAM,WAAW,GAAG,kBAAkB,CAAC,OAAO,CAAC,CAAC;IAChD,IAAI,CAAC,WAAW,EAAE,CAAC;QACjB,SAAS,CAAC,GAAG,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;QAC7B,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,YAAY,CAAC,QAAQ,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QAC/D,SAAS,CAAC,GAAG,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;QACjC,OAAO,QAAQ,CAAC;IAClB,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,iBAAiB,IAAI,CAAC,CAAC;QACvB,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,qDAAqD,OAAO,WAAW,WAAW,MAAO,CAAW,CAAC,OAAO,IAAI,MAAM,CAAC,CAAC,CAAC,IAAI,CAC9H,CAAC;QACF,SAAS,CAAC,GAAG,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;QAC7B,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,OAAe,EACf,cAAuB;IAEvB,MAAM,YAAY,GAAG,MAAM,SAAS,CAAC,cAAc,CAAC,CAAC;IACrD,IAAI,CAAC,YAAY;QAAE,OAAO,SAAS,CAAC;IACpC,IAAI,CAAC,CAAC,MAAM,UAAU,CAAC,YAAY,CAAC,CAAC;QAAE,OAAO,SAAS,CAAC;IACxD,MAAM,QAAQ,GAAG,MAAM,YAAY,CAAC,YAAY,EAAE,OAAO,CAAC,CAAC;IAC3D,IAAI,CAAC,QAAQ;QAAE,OAAO,SAAS,CAAC;IAChC,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,YAAY,CAAC,MAAM,EAAE,CAAC;QACzC,MAAM,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAC;QAC7B,OAAO,MAAM,CAAC;IAChB,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,iBAAiB,IAAI,CAAC,CAAC;QACvB,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,uEAAuE,OAAO,MAAO,CAAW,CAAC,OAAO,IAAI,MAAM,CAAC,CAAC,CAAC,IAAI,CAC1H,CAAC;QACF,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED,oFAAoF;AACpF,MAAM,UAAU,yBAAyB;IACvC,WAAW,CAAC,KAAK,EAAE,CAAC;IACpB,SAAS,CAAC,KAAK,EAAE,CAAC;IAClB,aAAa,CAAC,KAAK,EAAE,CAAC;IACtB,iBAAiB,GAAG,CAAC,CAAC;AACxB,CAAC"}

package/dist/audit/extractors/analyzers/types.d.ts

@@ -0,0 +1,54 @@
+import type { GraphEdge, RouteEdge, AnalyzerSetting } from "audit-tools/shared";
+import type { FileDisposition } from "audit-tools/shared";
+import type { RepoManifest } from "../../types.js";
+/**
+ * The compiler/parser graph seam (Phase 5.0). A `LanguageAnalyzer` enriches the
+ * deterministic regex floor with edges derived from a real parser/compiler. Each
+ * analyzer is optional: its dependency resolves from the audited repo's
+ * node_modules, a shared version-keyed cache, or not at all — and when it cannot
+ * resolve, the orchestrator simply keeps the regex floor.
+ */
+export interface AnalyzerOutput {
+    edges: GraphEdge[];
+    routes?: RouteEdge[];
+}
+export interface AnalyzerContext {
+    /** Absolute repository root. */
+    root: string;
+    repoManifest: RepoManifest;
+    disposition?: FileDisposition;
+    /** Repo-relative, audit-included file paths (the analyzer's working set). */
+    includedFiles: string[];
+    /** graphLookupKey(path) → repo-relative path, for resolving targets. */
+    pathLookup: Map<string, string>;
+    /** Resolved npm package directory for this analyzer's dependency, if any. */
+    dependencyPath?: string;
+}
+export interface LanguageAnalyzer {
+    /** Stable id; also the `analyzers.<id>` session-config key. */
+    id: string;
+    /** Optional npm dependency spec ("name" or "name@range") this analyzer needs. */
+    dependency?: string;
+    /** Whether this analyzer can contribute edges for the given repo-relative file. */
+    supports(file: string): boolean;
+    /** Analyze the supported subset of `files` and return enrichment edges/routes. */
+    analyze(files: string[], context: AnalyzerContext): Promise<AnalyzerOutput> | AnalyzerOutput;
+}
+/** How an analyzer's dependency resolved (or why it will not run). */
+export type AnalyzerResolution = "repo" | "cache" | "installed" | "absent" | "skip" | "not_applicable";
+/**
+ * Deterministic pre-install resolution for one analyzer. Computed without
+ * mutating anything (no install), so the conversation-first CLI can decide
+ * whether to propose an install before the executor runs.
+ */
+export interface AnalyzerPlanEntry {
+    id: string;
+    dependency?: string;
+    setting: AnalyzerSetting;
+    resolution: AnalyzerResolution;
+    /** Resolved package directory when resolution is repo/cache. */
+    path?: string;
+    /** Count of in-scope files the analyzer supports. */
+    supportedCount: number;
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/audit/extractors/analyzers/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../../src/audit/extractors/analyzers/types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,SAAS,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AAChF,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AAC1D,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAEnD;;;;;;GAMG;AACH,MAAM,WAAW,cAAc;IAC7B,KAAK,EAAE,SAAS,EAAE,CAAC;IACnB,MAAM,CAAC,EAAE,SAAS,EAAE,CAAC;CACtB;AAED,MAAM,WAAW,eAAe;IAC9B,gCAAgC;IAChC,IAAI,EAAE,MAAM,CAAC;IACb,YAAY,EAAE,YAAY,CAAC;IAC3B,WAAW,CAAC,EAAE,eAAe,CAAC;IAC9B,6EAA6E;IAC7E,aAAa,EAAE,MAAM,EAAE,CAAC;IACxB,wEAAwE;IACxE,UAAU,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAChC,6EAA6E;IAC7E,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB;AAED,MAAM,WAAW,gBAAgB;IAC/B,+DAA+D;IAC/D,EAAE,EAAE,MAAM,CAAC;IACX,iFAAiF;IACjF,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,mFAAmF;IACnF,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC;IAChC,kFAAkF;IAClF,OAAO,CACL,KAAK,EAAE,MAAM,EAAE,EACf,OAAO,EAAE,eAAe,GACvB,OAAO,CAAC,cAAc,CAAC,GAAG,cAAc,CAAC;CAC7C;AAED,sEAAsE;AACtE,MAAM,MAAM,kBAAkB,GAC1B,MAAM,GACN,OAAO,GACP,WAAW,GACX,QAAQ,GACR,MAAM,GACN,gBAAgB,CAAC;AAErB;;;;GAIG;AACH,MAAM,WAAW,iBAAiB;IAChC,EAAE,EAAE,MAAM,CAAC;IACX,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,OAAO,EAAE,eAAe,CAAC;IACzB,UAAU,EAAE,kBAAkB,CAAC;IAC/B,gEAAgE;IAChE,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,qDAAqD;IACrD,cAAc,EAAE,MAAM,CAAC;CACxB"}

package/dist/audit/extractors/analyzers/types.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=types.js.map

package/dist/audit/extractors/analyzers/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../../../src/audit/extractors/analyzers/types.ts"],"names":[],"mappings":""}

package/dist/audit/extractors/analyzers/typescript.d.ts

@@ -0,0 +1,3 @@
+import type { LanguageAnalyzer } from "./types.js";
+export declare const typescriptAnalyzer: LanguageAnalyzer;
+//# sourceMappingURL=typescript.d.ts.map

package/dist/audit/extractors/analyzers/typescript.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"typescript.d.ts","sourceRoot":"","sources":["../../../../src/audit/extractors/analyzers/typescript.ts"],"names":[],"mappings":"AAMA,OAAO,KAAK,EAAmC,gBAAgB,EAAE,MAAM,YAAY,CAAC;AAgapF,eAAO,MAAM,kBAAkB,EAAE,gBAKhC,CAAC"}

package/dist/audit/extractors/analyzers/typescript.js

@@ -0,0 +1,279 @@
+import { readFile } from "node:fs/promises";
+import { dirname, isAbsolute, join, relative, resolve } from "node:path";
+import { pathToFileURL } from "node:url";
+import { graphEdge, normalizeGraphPath, resolveCandidate } from "../graphPathUtils.js";
+import { TS_CALL_EDGE_CONFIDENCE, TS_EXTENDS_EDGE_CONFIDENCE, TS_IMPLEMENTS_EDGE_CONFIDENCE, TS_IMPORT_EDGE_CONFIDENCE, TS_REEXPORT_EDGE_CONFIDENCE, } from "./merge.js";
+const SUPPORTED_EXTENSIONS = [
+    ".ts",
+    ".tsx",
+    ".mts",
+    ".cts",
+    ".js",
+    ".jsx",
+    ".mjs",
+    ".cjs",
+];
+function supports(file) {
+    const lower = normalizeGraphPath(file).toLowerCase();
+    if (lower.endsWith(".d.ts"))
+        return false;
+    return SUPPORTED_EXTENSIONS.some((extension) => lower.endsWith(extension));
+}
+/**
+ * Load the TypeScript compiler module. Prefers the dependency resolved from the
+ * audited repo / shared cache (so its tsconfig + version semantics match);
+ * falls back to the bundled `typescript` so the analyzer still works when the
+ * caller did not pin a path.
+ */
+async function loadTypescript(dependencyPath) {
+    if (dependencyPath) {
+        try {
+            const manifest = JSON.parse(await readFile(join(dependencyPath, "package.json"), "utf8"));
+            const mainPath = resolve(dependencyPath, manifest.main ?? "index.js");
+            const mod = (await import(pathToFileURL(mainPath).href));
+            return (mod.default ?? mod);
+        }
+        catch (e) {
+            process.stderr.write(`[audit-code] typescript-analyzer: failed to load TypeScript from '${dependencyPath}', falling back to bundled: ${e.message ?? String(e)}\n`);
+        }
+    }
+    const mod = (await import("typescript"));
+    return (mod.default ?? mod);
+}
+function loadCompilerOptions(ts, root) {
+    let options = {};
+    try {
+        const configPath = ts.findConfigFile(root, (path) => ts.sys.fileExists(path), "tsconfig.json");
+        if (configPath) {
+            const read = ts.readConfigFile(configPath, (path) => ts.sys.readFile(path));
+            const parsed = ts.parseJsonConfigFileContent(read.config ?? {}, ts.sys, dirname(configPath));
+            options = parsed.options;
+        }
+    }
+    catch (e) {
+        process.stderr.write(`[audit-code] typescript-analyzer: failed to load compiler options from '${root}', using defaults: ${e.message ?? String(e)}\n`);
+        options = {};
+    }
+    // Force a lenient, emit-free, JS-aware program: we only want resolution + the
+    // checker, never diagnostics or output.
+    return {
+        ...options,
+        allowJs: true,
+        checkJs: false,
+        noEmit: true,
+        skipLibCheck: true,
+        skipDefaultLibCheck: true,
+        declaration: false,
+        composite: false,
+        incremental: false,
+    };
+}
+/** Map an absolute file path back to its canonical audit-included repo path. */
+function mapToIncluded(state, absolutePath) {
+    const normalizedAbsolute = isAbsolute(absolutePath)
+        ? absolutePath
+        : resolve(state.root, absolutePath);
+    const relativePath = normalizeGraphPath(relative(state.root, normalizedAbsolute));
+    if (relativePath.startsWith("..") || isAbsolute(relativePath)) {
+        return undefined;
+    }
+    return resolveCandidate(relativePath, state.context.pathLookup);
+}
+function resolveSpecifierTarget(state, specifier, containingFile) {
+    const resolved = state.ts.resolveModuleName(specifier, containingFile, state.options, state.ts.sys);
+    const target = resolved.resolvedModule;
+    if (!target ||
+        target.isExternalLibraryImport ||
+        target.resolvedFileName.endsWith(".d.ts")) {
+        return undefined;
+    }
+    return mapToIncluded(state, target.resolvedFileName);
+}
+/** Follow import aliases to the symbol's real declaration source file. */
+function resolveSymbolToIncluded(state, symbol) {
+    if (!symbol)
+        return undefined;
+    let resolved = symbol;
+    if (resolved.flags & state.ts.SymbolFlags.Alias) {
+        try {
+            resolved = state.checker.getAliasedSymbol(resolved);
+        }
+        catch (_e) {
+            // getAliasedSymbol can throw for malformed programs; keep the un-aliased symbol.
+        }
+    }
+    for (const declaration of resolved.declarations ?? []) {
+        const fileName = declaration.getSourceFile().fileName;
+        if (fileName.endsWith(".d.ts"))
+            continue;
+        const included = mapToIncluded(state, fileName);
+        if (included)
+            return included;
+    }
+    return undefined;
+}
+function recordCallEdge(calls, callTargets, fromPath, target) {
+    if (!target || target === fromPath || callTargets.has(target))
+        return;
+    callTargets.add(target);
+    calls.push(graphEdge({
+        from: fromPath,
+        to: target,
+        kind: "ts-call",
+        confidence: TS_CALL_EDGE_CONFIDENCE,
+        reason: `TypeScript checker resolved a cross-file call into '${target}'.`,
+    }));
+}
+function visitHeritageNode(state, references, fromPath, node) {
+    const ts = state.ts;
+    for (const clause of node.heritageClauses ?? []) {
+        const isExtends = clause.token === ts.SyntaxKind.ExtendsKeyword;
+        for (const typeNode of clause.types) {
+            const target = resolveSymbolToIncluded(state, state.checker.getSymbolAtLocation(typeNode.expression));
+            if (!target || target === fromPath)
+                continue;
+            references.push(graphEdge({
+                from: fromPath,
+                to: target,
+                kind: isExtends ? "ts-extends" : "ts-implements",
+                confidence: isExtends
+                    ? TS_EXTENDS_EDGE_CONFIDENCE
+                    : TS_IMPLEMENTS_EDGE_CONFIDENCE,
+                reason: `TypeScript ${isExtends ? "extends" : "implements"} heritage resolves to '${target}'.`,
+            }));
+        }
+    }
+}
+function visitImportDeclaration(state, imports, fromPath, node) {
+    if (!state.ts.isStringLiteral(node.moduleSpecifier))
+        return;
+    const target = resolveSpecifierTarget(state, node.moduleSpecifier.text, node.getSourceFile().fileName);
+    if (target && target !== fromPath) {
+        imports.push(graphEdge({
+            from: fromPath,
+            to: target,
+            kind: "ts-import",
+            confidence: TS_IMPORT_EDGE_CONFIDENCE,
+            reason: `TypeScript resolved import '${node.moduleSpecifier.text}' to '${target}'.`,
+        }));
+    }
+}
+function visitExportDeclaration(state, imports, fromPath, node) {
+    if (!node.moduleSpecifier || !state.ts.isStringLiteral(node.moduleSpecifier))
+        return;
+    const target = resolveSpecifierTarget(state, node.moduleSpecifier.text, node.getSourceFile().fileName);
+    if (target && target !== fromPath) {
+        imports.push(graphEdge({
+            from: fromPath,
+            to: target,
+            kind: "ts-reexport",
+            confidence: TS_REEXPORT_EDGE_CONFIDENCE,
+            reason: `TypeScript resolved re-export '${node.moduleSpecifier.text}' to '${target}'.`,
+        }));
+    }
+}
+function visitImportEqualsDeclaration(state, imports, fromPath, node) {
+    const ts = state.ts;
+    if (!ts.isExternalModuleReference(node.moduleReference) ||
+        !ts.isStringLiteral(node.moduleReference.expression)) {
+        return;
+    }
+    const target = resolveSpecifierTarget(state, node.moduleReference.expression.text, node.getSourceFile().fileName);
+    if (target && target !== fromPath) {
+        imports.push(graphEdge({
+            from: fromPath,
+            to: target,
+            kind: "ts-import",
+            confidence: TS_IMPORT_EDGE_CONFIDENCE,
+            reason: `TypeScript resolved import-equals to '${target}'.`,
+        }));
+    }
+}
+function visitCallExpression(state, imports, calls, callTargets, fromPath, node) {
+    const ts = state.ts;
+    if (node.expression.kind === ts.SyntaxKind.ImportKeyword &&
+        node.arguments[0] &&
+        ts.isStringLiteral(node.arguments[0])) {
+        const target = resolveSpecifierTarget(state, node.arguments[0].text, node.getSourceFile().fileName);
+        if (target && target !== fromPath) {
+            imports.push(graphEdge({
+                from: fromPath,
+                to: target,
+                kind: "ts-import",
+                confidence: TS_IMPORT_EDGE_CONFIDENCE,
+                reason: `TypeScript resolved dynamic import to '${target}'.`,
+            }));
+        }
+    }
+    else {
+        recordCallEdge(calls, callTargets, fromPath, resolveSymbolToIncluded(state, state.checker.getSymbolAtLocation(node.expression)));
+    }
+}
+function collectFileEdges(state, sourceFile, fromPath, imports, references, calls) {
+    const ts = state.ts;
+    const callTargets = new Set();
+    const visit = (node) => {
+        if (ts.isImportDeclaration(node)) {
+            visitImportDeclaration(state, imports, fromPath, node);
+        }
+        else if (ts.isExportDeclaration(node)) {
+            visitExportDeclaration(state, imports, fromPath, node);
+        }
+        else if (ts.isImportEqualsDeclaration(node)) {
+            visitImportEqualsDeclaration(state, imports, fromPath, node);
+        }
+        else if (ts.isCallExpression(node)) {
+            visitCallExpression(state, imports, calls, callTargets, fromPath, node);
+        }
+        else if (ts.isClassDeclaration(node) ||
+            ts.isClassExpression(node) ||
+            ts.isInterfaceDeclaration(node)) {
+            visitHeritageNode(state, references, fromPath, node);
+        }
+        ts.forEachChild(node, visit);
+    };
+    ts.forEachChild(sourceFile, visit);
+}
+async function analyze(files, context) {
+    if (files.length === 0)
+        return { edges: [] };
+    let ts;
+    try {
+        ts = await loadTypescript(context.dependencyPath);
+    }
+    catch (e) {
+        process.stderr.write(`[audit-code] typescript-analyzer: failed to load TypeScript compiler, skipping ${files.length} file(s): ${e.message ?? String(e)}\n`);
+        return { edges: [] };
+    }
+    try {
+        const root = resolve(context.root);
+        const options = loadCompilerOptions(ts, root);
+        const rootNames = files.map((file) => resolve(root, file));
+        const program = ts.createProgram({ rootNames, options });
+        const checker = program.getTypeChecker();
+        const state = { ts, options, checker, context, root };
+        const imports = [];
+        const references = [];
+        const calls = [];
+        for (const sourceFile of program.getSourceFiles()) {
+            if (sourceFile.isDeclarationFile)
+                continue;
+            const fromPath = mapToIncluded(state, sourceFile.fileName);
+            if (!fromPath)
+                continue;
+            collectFileEdges(state, sourceFile, fromPath, imports, references, calls);
+        }
+        return { edges: [...imports, ...references, ...calls] };
+    }
+    catch (e) {
+        process.stderr.write(`[audit-code] typescript-analyzer: program analysis failed for ${files.length} file(s) under '${context.root}' — returning 0 edges (all ${files.length} file(s) edges lost), degrading to regex floor: ${e.message ?? String(e)}\n`);
+        return { edges: [] };
+    }
+}
+export const typescriptAnalyzer = {
+    id: "typescript",
+    dependency: "typescript@5",
+    supports,
+    analyze,
+};
+//# sourceMappingURL=typescript.js.map

package/dist/audit/extractors/analyzers/typescript.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"typescript.js","sourceRoot":"","sources":["../../../../src/audit/extractors/analyzers/typescript.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC5C,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACzE,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAGzC,OAAO,EAAE,SAAS,EAAE,kBAAkB,EAAE,gBAAgB,EAAE,MAAM,sBAAsB,CAAC;AAEvF,OAAO,EACL,uBAAuB,EACvB,0BAA0B,EAC1B,6BAA6B,EAC7B,yBAAyB,EACzB,2BAA2B,GAC5B,MAAM,YAAY,CAAC;AAEpB,MAAM,oBAAoB,GAAG;IAC3B,KAAK;IACL,MAAM;IACN,MAAM;IACN,MAAM;IACN,KAAK;IACL,MAAM;IACN,MAAM;IACN,MAAM;CACE,CAAC;AAEX,SAAS,QAAQ,CAAC,IAAY;IAC5B,MAAM,KAAK,GAAG,kBAAkB,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE,CAAC;IACrD,IAAI,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC;QAAE,OAAO,KAAK,CAAC;IAC1C,OAAO,oBAAoB,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC;AAC7E,CAAC;AAED;;;;;GAKG;AACH,KAAK,UAAU,cAAc,CAAC,cAAuB;IACnD,IAAI,cAAc,EAAE,CAAC;QACnB,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CACzB,MAAM,QAAQ,CAAC,IAAI,CAAC,cAAc,EAAE,cAAc,CAAC,EAAE,MAAM,CAAC,CACxC,CAAC;YACvB,MAAM,QAAQ,GAAG,OAAO,CAAC,cAAc,EAAE,QAAQ,CAAC,IAAI,IAAI,UAAU,CAAC,CAAC;YACtE,MAAM,GAAG,GAAG,CAAC,MAAM,MAAM,CAAC,aAAa,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,CAE1C,CAAC;YACd,OAAO,CAAC,GAAG,CAAC,OAAO,IAAI,GAAG,CAAc,CAAC;QAC3C,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,qEAAqE,cAAc,+BAAgC,CAAW,CAAC,OAAO,IAAI,MAAM,CAAC,CAAC,CAAC,IAAI,CACxJ,CAAC;QACJ,CAAC;IACH,CAAC;IACD,MAAM,GAAG,GAAG,CAAC,MAAM,MAAM,CAAC,YAAY,CAAC,CAAwC,CAAC;IAChF,OAAO,CAAC,GAAG,CAAC,OAAO,IAAI,GAAG,CAAc,CAAC;AAC3C,CAAC;AAED,SAAS,mBAAmB,CAC1B,EAAa,EACb,IAAY;IAEZ,IAAI,OAAO,GAAuB,EAAE,CAAC;IACrC,IAAI,CAAC;QACH,MAAM,UAAU,GAAG,EAAE,CAAC,cAAc,CAClC,IAAI,EACJ,CAAC,IAAI,EAAE,EAAE,CAAC,EAAE,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,EACjC,eAAe,CAChB,CAAC;QACF,IAAI,UAAU,EAAE,CAAC;YACf,MAAM,IAAI,GAAG,EAAE,CAAC,cAAc,CAAC,UAAU,EAAE,CAAC,IAAI,EAAE,EAAE,CAClD,EAAE,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,CACtB,CAAC;YACF,MAAM,MAAM,GAAG,EAAE,CAAC,0BAA0B,CAC1C,IAAI,CAAC,MAAM,IAAI,EAAE,EACjB,EAAE,CAAC,GAAG,EACN,OAAO,CAAC,UAAU,CAAC,CACpB,CAAC;YACF,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC;QAC3B,CAAC;IACH,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,2EAA2E,IAAI,sBAAuB,CAAW,CAAC,OAAO,IAAI,MAAM,CAAC,CAAC,CAAC,IAAI,CAC3I,CAAC;QACF,OAAO,GAAG,EAAE,CAAC;IACf,CAAC;IACD,8EAA8E;IAC9E,wCAAwC;IACxC,OAAO;QACL,GAAG,OAAO;QACV,OAAO,EAAE,IAAI;QACb,OAAO,EAAE,KAAK;QACd,MAAM,EAAE,IAAI;QACZ,YAAY,EAAE,IAAI;QAClB,mBAAmB,EAAE,IAAI;QACzB,WAAW,EAAE,KAAK;QAClB,SAAS,EAAE,KAAK;QAChB,WAAW,EAAE,KAAK;KACnB,CAAC;AACJ,CAAC;AAUD,gFAAgF;AAChF,SAAS,aAAa,CACpB,KAAmB,EACnB,YAAoB;IAEpB,MAAM,kBAAkB,GAAG,UAAU,CAAC,YAAY,CAAC;QACjD,CAAC,CAAC,YAAY;QACd,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,EAAE,YAAY,CAAC,CAAC;IACtC,MAAM,YAAY,GAAG,kBAAkB,CACrC,QAAQ,CAAC,KAAK,CAAC,IAAI,EAAE,kBAAkB,CAAC,CACzC,CAAC;IACF,IAAI,YAAY,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,UAAU,CAAC,YAAY,CAAC,EAAE,CAAC;QAC9D,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,OAAO,gBAAgB,CAAC,YAAY,EAAE,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;AAClE,CAAC;AAED,SAAS,sBAAsB,CAC7B,KAAmB,EACnB,SAAiB,EACjB,cAAsB;IAEtB,MAAM,QAAQ,GAAG,KAAK,CAAC,EAAE,CAAC,iBAAiB,CACzC,SAAS,EACT,cAAc,EACd,KAAK,CAAC,OAAO,EACb,KAAK,CAAC,EAAE,CAAC,GAAG,CACb,CAAC;IACF,MAAM,MAAM,GAAG,QAAQ,CAAC,cAAc,CAAC;IACvC,IACE,CAAC,MAAM;QACP,MAAM,CAAC,uBAAuB;QAC9B,MAAM,CAAC,gBAAgB,CAAC,QAAQ,CAAC,OAAO,CAAC,EACzC,CAAC;QACD,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,OAAO,aAAa,CAAC,KAAK,EAAE,MAAM,CAAC,gBAAgB,CAAC,CAAC;AACvD,CAAC;AAED,0EAA0E;AAC1E,SAAS,uBAAuB,CAC9B,KAAmB,EACnB,MAA6B;IAE7B,IAAI,CAAC,MAAM;QAAE,OAAO,SAAS,CAAC;IAC9B,IAAI,QAAQ,GAAG,MAAM,CAAC;IACtB,IAAI,QAAQ,CAAC,KAAK,GAAG,KAAK,CAAC,EAAE,CAAC,WAAW,CAAC,KAAK,EAAE,CAAC;QAChD,IAAI,CAAC;YACH,QAAQ,GAAG,KAAK,CAAC,OAAO,CAAC,gBAAgB,CAAC,QAAQ,CAAC,CAAC;QACtD,CAAC;QAAC,OAAO,EAAE,EAAE,CAAC;YACZ,iFAAiF;QACnF,CAAC;IACH,CAAC;IACD,KAAK,MAAM,WAAW,IAAI,QAAQ,CAAC,YAAY,IAAI,EAAE,EAAE,CAAC;QACtD,MAAM,QAAQ,GAAG,WAAW,CAAC,aAAa,EAAE,CAAC,QAAQ,CAAC;QACtD,IAAI,QAAQ,CAAC,QAAQ,CAAC,OAAO,CAAC;YAAE,SAAS;QACzC,MAAM,QAAQ,GAAG,aAAa,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;QAChD,IAAI,QAAQ;YAAE,OAAO,QAAQ,CAAC;IAChC,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAS,cAAc,CACrB,KAAkB,EAClB,WAAwB,EACxB,QAAgB,EAChB,MAA0B;IAE1B,IAAI,CAAC,MAAM,IAAI,MAAM,KAAK,QAAQ,IAAI,WAAW,CAAC,GAAG,CAAC,MAAM,CAAC;QAAE,OAAO;IACtE,WAAW,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IACxB,KAAK,CAAC,IAAI,CACR,SAAS,CAAC;QACR,IAAI,EAAE,QAAQ;QACd,EAAE,EAAE,MAAM;QACV,IAAI,EAAE,SAAS;QACf,UAAU,EAAE,uBAAuB;QACnC,MAAM,EAAE,uDAAuD,MAAM,IAAI;KAC1E,CAAC,CACH,CAAC;AACJ,CAAC;AAED,SAAS,iBAAiB,CACxB,KAAmB,EACnB,UAAuB,EACvB,QAAgB,EAChB,IAAuD;IAEvD,MAAM,EAAE,GAAG,KAAK,CAAC,EAAE,CAAC;IACpB,KAAK,MAAM,MAAM,IAAI,IAAI,CAAC,eAAe,IAAI,EAAE,EAAE,CAAC;QAChD,MAAM,SAAS,GAAG,MAAM,CAAC,KAAK,KAAK,EAAE,CAAC,UAAU,CAAC,cAAc,CAAC;QAChE,KAAK,MAAM,QAAQ,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;YACpC,MAAM,MAAM,GAAG,uBAAuB,CACpC,KAAK,EACL,KAAK,CAAC,OAAO,CAAC,mBAAmB,CAAC,QAAQ,CAAC,UAAU,CAAC,CACvD,CAAC;YACF,IAAI,CAAC,MAAM,IAAI,MAAM,KAAK,QAAQ;gBAAE,SAAS;YAC7C,UAAU,CAAC,IAAI,CACb,SAAS,CAAC;gBACR,IAAI,EAAE,QAAQ;gBACd,EAAE,EAAE,MAAM;gBACV,IAAI,EAAE,SAAS,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,eAAe;gBAChD,UAAU,EAAE,SAAS;oBACnB,CAAC,CAAC,0BAA0B;oBAC5B,CAAC,CAAC,6BAA6B;gBACjC,MAAM,EAAE,cAAc,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,YAAY,0BAA0B,MAAM,IAAI;aAC/F,CAAC,CACH,CAAC;QACJ,CAAC;IACH,CAAC;AACH,CAAC;AAED,SAAS,sBAAsB,CAC7B,KAAmB,EACnB,OAAoB,EACpB,QAAgB,EAChB,IAA0B;IAE1B,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,eAAe,CAAC,IAAI,CAAC,eAAe,CAAC;QAAE,OAAO;IAC5D,MAAM,MAAM,GAAG,sBAAsB,CACnC,KAAK,EACL,IAAI,CAAC,eAAe,CAAC,IAAI,EACzB,IAAI,CAAC,aAAa,EAAE,CAAC,QAAQ,CAC9B,CAAC;IACF,IAAI,MAAM,IAAI,MAAM,KAAK,QAAQ,EAAE,CAAC;QAClC,OAAO,CAAC,IAAI,CACV,SAAS,CAAC;YACR,IAAI,EAAE,QAAQ;YACd,EAAE,EAAE,MAAM;YACV,IAAI,EAAE,WAAW;YACjB,UAAU,EAAE,yBAAyB;YACrC,MAAM,EAAE,+BAA+B,IAAI,CAAC,eAAe,CAAC,IAAI,SAAS,MAAM,IAAI;SACpF,CAAC,CACH,CAAC;IACJ,CAAC;AACH,CAAC;AAED,SAAS,sBAAsB,CAC7B,KAAmB,EACnB,OAAoB,EACpB,QAAgB,EAChB,IAA0B;IAE1B,IAAI,CAAC,IAAI,CAAC,eAAe,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,eAAe,CAAC,IAAI,CAAC,eAAe,CAAC;QAAE,OAAO;IACrF,MAAM,MAAM,GAAG,sBAAsB,CACnC,KAAK,EACL,IAAI,CAAC,eAAe,CAAC,IAAI,EACzB,IAAI,CAAC,aAAa,EAAE,CAAC,QAAQ,CAC9B,CAAC;IACF,IAAI,MAAM,IAAI,MAAM,KAAK,QAAQ,EAAE,CAAC;QAClC,OAAO,CAAC,IAAI,CACV,SAAS,CAAC;YACR,IAAI,EAAE,QAAQ;YACd,EAAE,EAAE,MAAM;YACV,IAAI,EAAE,aAAa;YACnB,UAAU,EAAE,2BAA2B;YACvC,MAAM,EAAE,kCAAkC,IAAI,CAAC,eAAe,CAAC,IAAI,SAAS,MAAM,IAAI;SACvF,CAAC,CACH,CAAC;IACJ,CAAC;AACH,CAAC;AAED,SAAS,4BAA4B,CACnC,KAAmB,EACnB,OAAoB,EACpB,QAAgB,EAChB,IAAgC;IAEhC,MAAM,EAAE,GAAG,KAAK,CAAC,EAAE,CAAC;IACpB,IACE,CAAC,EAAE,CAAC,yBAAyB,CAAC,IAAI,CAAC,eAAe,CAAC;QACnD,CAAC,EAAE,CAAC,eAAe,CAAC,IAAI,CAAC,eAAe,CAAC,UAAU,CAAC,EACpD,CAAC;QACD,OAAO;IACT,CAAC;IACD,MAAM,MAAM,GAAG,sBAAsB,CACnC,KAAK,EACL,IAAI,CAAC,eAAe,CAAC,UAAU,CAAC,IAAI,EACpC,IAAI,CAAC,aAAa,EAAE,CAAC,QAAQ,CAC9B,CAAC;IACF,IAAI,MAAM,IAAI,MAAM,KAAK,QAAQ,EAAE,CAAC;QAClC,OAAO,CAAC,IAAI,CACV,SAAS,CAAC;YACR,IAAI,EAAE,QAAQ;YACd,EAAE,EAAE,MAAM;YACV,IAAI,EAAE,WAAW;YACjB,UAAU,EAAE,yBAAyB;YACrC,MAAM,EAAE,yCAAyC,MAAM,IAAI;SAC5D,CAAC,CACH,CAAC;IACJ,CAAC;AACH,CAAC;AAED,SAAS,mBAAmB,CAC1B,KAAmB,EACnB,OAAoB,EACpB,KAAkB,EAClB,WAAwB,EACxB,QAAgB,EAChB,IAAuB;IAEvB,MAAM,EAAE,GAAG,KAAK,CAAC,EAAE,CAAC;IACpB,IACE,IAAI,CAAC,UAAU,CAAC,IAAI,KAAK,EAAE,CAAC,UAAU,CAAC,aAAa;QACpD,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC;QACjB,EAAE,CAAC,eAAe,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,EACrC,CAAC;QACD,MAAM,MAAM,GAAG,sBAAsB,CACnC,KAAK,EACL,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,IAAI,EACtB,IAAI,CAAC,aAAa,EAAE,CAAC,QAAQ,CAC9B,CAAC;QACF,IAAI,MAAM,IAAI,MAAM,KAAK,QAAQ,EAAE,CAAC;YAClC,OAAO,CAAC,IAAI,CACV,SAAS,CAAC;gBACR,IAAI,EAAE,QAAQ;gBACd,EAAE,EAAE,MAAM;gBACV,IAAI,EAAE,WAAW;gBACjB,UAAU,EAAE,yBAAyB;gBACrC,MAAM,EAAE,0CAA0C,MAAM,IAAI;aAC7D,CAAC,CACH,CAAC;QACJ,CAAC;IACH,CAAC;SAAM,CAAC;QACN,cAAc,CACZ,KAAK,EACL,WAAW,EACX,QAAQ,EACR,uBAAuB,CACrB,KAAK,EACL,KAAK,CAAC,OAAO,CAAC,mBAAmB,CAAC,IAAI,CAAC,UAAU,CAAC,CACnD,CACF,CAAC;IACJ,CAAC;AACH,CAAC;AAED,SAAS,gBAAgB,CACvB,KAAmB,EACnB,UAAyB,EACzB,QAAgB,EAChB,OAAoB,EACpB,UAAuB,EACvB,KAAkB;IAElB,MAAM,EAAE,GAAG,KAAK,CAAC,EAAE,CAAC;IACpB,MAAM,WAAW,GAAG,IAAI,GAAG,EAAU,CAAC;IAEtC,MAAM,KAAK,GAAG,CAAC,IAAa,EAAQ,EAAE;QACpC,IAAI,EAAE,CAAC,mBAAmB,CAAC,IAAI,CAAC,EAAE,CAAC;YACjC,sBAAsB,CAAC,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,CAAC,CAAC;QACzD,CAAC;aAAM,IAAI,EAAE,CAAC,mBAAmB,CAAC,IAAI,CAAC,EAAE,CAAC;YACxC,sBAAsB,CAAC,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,CAAC,CAAC;QACzD,CAAC;aAAM,IAAI,EAAE,CAAC,yBAAyB,CAAC,IAAI,CAAC,EAAE,CAAC;YAC9C,4BAA4B,CAAC,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,CAAC,CAAC;QAC/D,CAAC;aAAM,IAAI,EAAE,CAAC,gBAAgB,CAAC,IAAI,CAAC,EAAE,CAAC;YACrC,mBAAmB,CAAC,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,WAAW,EAAE,QAAQ,EAAE,IAAI,CAAC,CAAC;QAC1E,CAAC;aAAM,IACL,EAAE,CAAC,kBAAkB,CAAC,IAAI,CAAC;YAC3B,EAAE,CAAC,iBAAiB,CAAC,IAAI,CAAC;YAC1B,EAAE,CAAC,sBAAsB,CAAC,IAAI,CAAC,EAC/B,CAAC;YACD,iBAAiB,CAAC,KAAK,EAAE,UAAU,EAAE,QAAQ,EAAE,IAAI,CAAC,CAAC;QACvD,CAAC;QACD,EAAE,CAAC,YAAY,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IAC/B,CAAC,CAAC;IAEF,EAAE,CAAC,YAAY,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC;AACrC,CAAC;AAED,KAAK,UAAU,OAAO,CACpB,KAAe,EACf,OAAwB;IAExB,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC;IAE7C,IAAI,EAAa,CAAC;IAClB,IAAI,CAAC;QACH,EAAE,GAAG,MAAM,cAAc,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC;IACpD,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,kFAAkF,KAAK,CAAC,MAAM,aAAc,CAAW,CAAC,OAAO,IAAI,MAAM,CAAC,CAAC,CAAC,IAAI,CACjJ,CAAC;QACF,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC;IACvB,CAAC;IAED,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QACnC,MAAM,OAAO,GAAG,mBAAmB,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;QAC9C,MAAM,SAAS,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC;QAC3D,MAAM,OAAO,GAAG,EAAE,CAAC,aAAa,CAAC,EAAE,SAAS,EAAE,OAAO,EAAE,CAAC,CAAC;QACzD,MAAM,OAAO,GAAG,OAAO,CAAC,cAAc,EAAE,CAAC;QACzC,MAAM,KAAK,GAAiB,EAAE,EAAE,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;QAEpE,MAAM,OAAO,GAAgB,EAAE,CAAC;QAChC,MAAM,UAAU,GAAgB,EAAE,CAAC;QACnC,MAAM,KAAK,GAAgB,EAAE,CAAC;QAE9B,KAAK,MAAM,UAAU,IAAI,OAAO,CAAC,cAAc,EAAE,EAAE,CAAC;YAClD,IAAI,UAAU,CAAC,iBAAiB;gBAAE,SAAS;YAC3C,MAAM,QAAQ,GAAG,aAAa,CAAC,KAAK,EAAE,UAAU,CAAC,QAAQ,CAAC,CAAC;YAC3D,IAAI,CAAC,QAAQ;gBAAE,SAAS;YACxB,gBAAgB,CAAC,KAAK,EAAE,UAAU,EAAE,QAAQ,EAAE,OAAO,EAAE,UAAU,EAAE,KAAK,CAAC,CAAC;QAC5E,CAAC;QAED,OAAO,EAAE,KAAK,EAAE,CAAC,GAAG,OAAO,EAAE,GAAG,UAAU,EAAE,GAAG,KAAK,CAAC,EAAE,CAAC;IAC1D,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,iEAAiE,KAAK,CAAC,MAAM,mBAAmB,OAAO,CAAC,IAAI,8BAA8B,KAAK,CAAC,MAAM,mDAAoD,CAAW,CAAC,OAAO,IAAI,MAAM,CAAC,CAAC,CAAC,IAAI,CAC/O,CAAC;QACF,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC;IACvB,CAAC;AACH,CAAC;AAED,MAAM,CAAC,MAAM,kBAAkB,GAAqB;IAClD,EAAE,EAAE,YAAY;IAChB,UAAU,EAAE,cAAc;IAC1B,QAAQ;IACR,OAAO;CACR,CAAC"}

package/dist/audit/extractors/browserExtension.d.ts

@@ -0,0 +1,12 @@
+import type { Lens, RepoManifest } from "../types.js";
+import type { FileDisposition, GraphBundle, GraphEdge, SurfaceRecord } from "audit-tools/shared";
+export declare const BROWSER_EXTENSION_HEURISTIC_NOTE = "Chrome extension manifest and HTML asset references were resolved deterministically from local paths; verify unusual dynamic registration manually.";
+export declare function isBrowserExtensionManifestPath(path: string): boolean;
+export declare function extractChromeExtensionManifestEdges(fromPath: string, content: string, pathLookup: Map<string, string>): GraphEdge[];
+export declare function extractHtmlResourceEdges(fromPath: string, content: string, pathLookup: Map<string, string>): GraphEdge[];
+export declare function hasBrowserExtensionManifestFile(repoManifest: RepoManifest): boolean;
+export declare function deriveBrowserExtensionLensesForPath(path: string): Lens[];
+export declare function inferBrowserExtensionUnitKind(path: string): string | undefined;
+export declare function buildBrowserExtensionSurfacesFromGraph(graphBundle: GraphBundle | undefined, disposition?: FileDisposition): SurfaceRecord[];
+export declare function chromeExtensionRiskSignalsForManifest(content: string): string[];
+//# sourceMappingURL=browserExtension.d.ts.map

package/dist/audit/extractors/browserExtension.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"browserExtension.d.ts","sourceRoot":"","sources":["../../../src/audit/extractors/browserExtension.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,IAAI,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AACtD,OAAO,KAAK,EAAE,eAAe,EAAE,WAAW,EAAE,SAAS,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AAQjG,eAAO,MAAM,gCAAgC,wJAC0G,CAAC;AA+DxJ,wBAAgB,8BAA8B,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAEpE;AA6JD,wBAAgB,mCAAmC,CACjD,QAAQ,EAAE,MAAM,EAChB,OAAO,EAAE,MAAM,EACf,UAAU,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,GAC9B,SAAS,EAAE,CAiFb;AA6BD,wBAAgB,wBAAwB,CACtC,QAAQ,EAAE,MAAM,EAChB,OAAO,EAAE,MAAM,EACf,UAAU,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,GAC9B,SAAS,EAAE,CAyBb;AAED,wBAAgB,+BAA+B,CAAC,YAAY,EAAE,YAAY,GAAG,OAAO,CAOnF;AAED,wBAAgB,mCAAmC,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,EAAE,CA6BxE;AAED,wBAAgB,6BAA6B,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAU9E;AAaD,wBAAgB,sCAAsC,CACpD,WAAW,EAAE,WAAW,GAAG,SAAS,EACpC,WAAW,CAAC,EAAE,eAAe,GAC5B,aAAa,EAAE,CAwCjB;AAED,wBAAgB,qCAAqC,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,EAAE,CAa/E"}