audit-tools 0.28.0

package/dist/audit/extractors/browserExtension.js

@@ -0,0 +1,388 @@
+import { posix } from "node:path";
+import { buildDispositionMap, isAuditExcludedStatus } from "./disposition.js";
+import { graphEdge, normalizeGraphPath, resolveCandidate, } from "./graphPathUtils.js";
+export const BROWSER_EXTENSION_HEURISTIC_NOTE = "Chrome extension manifest and HTML asset references were resolved deterministically from local paths; verify unusual dynamic registration manually.";
+const CHROME_EXTENSION_BACKGROUND_EDGE = "chrome-extension-background-link";
+const CHROME_EXTENSION_CONTENT_SCRIPT_EDGE = "chrome-extension-content-script-link";
+const CHROME_EXTENSION_CONTENT_STYLE_EDGE = "chrome-extension-content-style-link";
+const CHROME_EXTENSION_UI_PAGE_EDGE = "chrome-extension-ui-page-link";
+const CHROME_EXTENSION_WEB_ACCESSIBLE_EDGE = "chrome-extension-web-accessible-resource-link";
+const HTML_RESOURCE_EDGE = "html-resource-link";
+const CHROME_EXTENSION_EDGE_CONFIDENCE = 0.94;
+const HTML_RESOURCE_EDGE_CONFIDENCE = 0.86;
+const EXTENSION_SURFACE_EDGE_KINDS = new Set([
+    CHROME_EXTENSION_BACKGROUND_EDGE,
+    CHROME_EXTENSION_CONTENT_SCRIPT_EDGE,
+    CHROME_EXTENSION_UI_PAGE_EDGE,
+]);
+const HIGH_RISK_PERMISSION_TOKENS = [
+    "<all_urls>",
+    "activeTab",
+    "debugger",
+    "declarativeNetRequest",
+    "downloads",
+    "downloads.open",
+    "nativeMessaging",
+    "proxy",
+    "scripting",
+    "tabs",
+    "unlimitedStorage",
+    "webNavigation",
+    "webRequest",
+];
+function isRecord(value) {
+    return value !== null && typeof value === "object" && !Array.isArray(value);
+}
+function asString(value) {
+    return typeof value === "string" && value.trim().length > 0
+        ? value.trim()
+        : undefined;
+}
+function asStringArray(value) {
+    return Array.isArray(value)
+        ? value
+            .map((item) => asString(item))
+            .filter((item) => item !== undefined)
+        : [];
+}
+function parseJsonObject(content) {
+    try {
+        const parsed = JSON.parse(content);
+        return isRecord(parsed) ? parsed : undefined;
+    }
+    catch {
+        return undefined;
+    }
+}
+export function isBrowserExtensionManifestPath(path) {
+    return posix.basename(normalizeGraphPath(path)).toLowerCase() === "manifest.json";
+}
+function isBrowserExtensionManifest(value) {
+    return (typeof value.manifest_version === "number" &&
+        (isRecord(value.background) ||
+            Array.isArray(value.content_scripts) ||
+            isRecord(value.action) ||
+            isRecord(value.browser_action) ||
+            isRecord(value.page_action) ||
+            isRecord(value.side_panel) ||
+            isRecord(value.options_ui) ||
+            typeof value.options_page === "string" ||
+            typeof value.devtools_page === "string" ||
+            isRecord(value.chrome_url_overrides) ||
+            Array.isArray(value.web_accessible_resources)));
+}
+function localPathCandidate(specifier) {
+    const withoutQuery = specifier.trim().split(/[?#]/, 1)[0]?.trim() ?? "";
+    if (withoutQuery.length === 0 ||
+        withoutQuery.startsWith("<") ||
+        withoutQuery.includes("*") ||
+        /^[a-z][a-z0-9+.-]*:/i.test(withoutQuery) ||
+        withoutQuery.startsWith("//")) {
+        return undefined;
+    }
+    return normalizeGraphPath(withoutQuery).replace(/^\/+/, "");
+}
+function resolveLocalReference(fromPath, specifier, pathLookup) {
+    const local = localPathCandidate(specifier);
+    if (!local) {
+        return undefined;
+    }
+    const isRootRelative = specifier.trim().startsWith("/");
+    const baseDir = posix.dirname(normalizeGraphPath(fromPath));
+    const candidate = isRootRelative || baseDir === "." ? local : posix.join(baseDir, local);
+    return resolveCandidate(candidate, pathLookup);
+}
+function addManifestReference(edges, params) {
+    const target = resolveLocalReference(params.fromPath, params.specifier, params.pathLookup);
+    if (!target) {
+        return;
+    }
+    edges.push(graphEdge({
+        from: params.fromPath,
+        to: target,
+        kind: params.kind,
+        confidence: CHROME_EXTENSION_EDGE_CONFIDENCE,
+        reason: `Chrome extension manifest field '${params.field}' references '${params.specifier}'.`,
+    }));
+}
+function collectExtensionUiPageReferences(manifest) {
+    const entries = [];
+    for (const objectField of ["action", "browser_action", "page_action"]) {
+        const value = manifest[objectField];
+        if (isRecord(value)) {
+            const popup = asString(value.default_popup);
+            if (popup)
+                entries.push({ field: `${objectField}.default_popup`, specifier: popup });
+        }
+    }
+    const sidePanel = manifest.side_panel;
+    if (isRecord(sidePanel)) {
+        const path = asString(sidePanel.default_path);
+        if (path)
+            entries.push({ field: "side_panel.default_path", specifier: path });
+    }
+    const optionsPage = asString(manifest.options_page);
+    if (optionsPage)
+        entries.push({ field: "options_page", specifier: optionsPage });
+    const optionsUi = manifest.options_ui;
+    if (isRecord(optionsUi)) {
+        const page = asString(optionsUi.page);
+        if (page)
+            entries.push({ field: "options_ui.page", specifier: page });
+    }
+    const devtoolsPage = asString(manifest.devtools_page);
+    if (devtoolsPage)
+        entries.push({ field: "devtools_page", specifier: devtoolsPage });
+    const overrides = manifest.chrome_url_overrides;
+    if (isRecord(overrides)) {
+        for (const [key, value] of Object.entries(overrides)) {
+            const page = asString(value);
+            if (page)
+                entries.push({ field: `chrome_url_overrides.${key}`, specifier: page });
+        }
+    }
+    const sandbox = manifest.sandbox;
+    if (isRecord(sandbox)) {
+        asStringArray(sandbox.pages).forEach((page, index) => entries.push({ field: `sandbox.pages.${index}`, specifier: page }));
+    }
+    return entries;
+}
+function collectWebAccessibleReferences(manifest) {
+    const entries = [];
+    const resources = manifest.web_accessible_resources;
+    if (!Array.isArray(resources)) {
+        return entries;
+    }
+    resources.forEach((item, index) => {
+        if (typeof item === "string") {
+            entries.push({
+                field: `web_accessible_resources.${index}`,
+                specifier: item,
+            });
+            return;
+        }
+        if (!isRecord(item)) {
+            return;
+        }
+        asStringArray(item.resources).forEach((resource, resourceIndex) => entries.push({
+            field: `web_accessible_resources.${index}.resources.${resourceIndex}`,
+            specifier: resource,
+        }));
+    });
+    return entries;
+}
+export function extractChromeExtensionManifestEdges(fromPath, content, pathLookup) {
+    if (!isBrowserExtensionManifestPath(fromPath)) {
+        return [];
+    }
+    const manifest = parseJsonObject(content);
+    if (!manifest || !isBrowserExtensionManifest(manifest)) {
+        return [];
+    }
+    const edges = [];
+    const background = manifest.background;
+    if (isRecord(background)) {
+        const serviceWorker = asString(background.service_worker);
+        if (serviceWorker) {
+            addManifestReference(edges, {
+                fromPath,
+                field: "background.service_worker",
+                kind: CHROME_EXTENSION_BACKGROUND_EDGE,
+                specifier: serviceWorker,
+                pathLookup,
+            });
+        }
+        asStringArray(background.scripts).forEach((script, index) => addManifestReference(edges, {
+            fromPath,
+            field: `background.scripts.${index}`,
+            kind: CHROME_EXTENSION_BACKGROUND_EDGE,
+            specifier: script,
+            pathLookup,
+        }));
+    }
+    const contentScripts = manifest.content_scripts;
+    if (Array.isArray(contentScripts)) {
+        contentScripts.forEach((item, index) => {
+            if (!isRecord(item)) {
+                return;
+            }
+            asStringArray(item.js).forEach((script, scriptIndex) => addManifestReference(edges, {
+                fromPath,
+                field: `content_scripts.${index}.js.${scriptIndex}`,
+                kind: CHROME_EXTENSION_CONTENT_SCRIPT_EDGE,
+                specifier: script,
+                pathLookup,
+            }));
+            asStringArray(item.css).forEach((style, styleIndex) => addManifestReference(edges, {
+                fromPath,
+                field: `content_scripts.${index}.css.${styleIndex}`,
+                kind: CHROME_EXTENSION_CONTENT_STYLE_EDGE,
+                specifier: style,
+                pathLookup,
+            }));
+        });
+    }
+    for (const { field, specifier } of collectExtensionUiPageReferences(manifest)) {
+        addManifestReference(edges, {
+            fromPath,
+            field,
+            kind: CHROME_EXTENSION_UI_PAGE_EDGE,
+            specifier,
+            pathLookup,
+        });
+    }
+    for (const { field, specifier } of collectWebAccessibleReferences(manifest)) {
+        addManifestReference(edges, {
+            fromPath,
+            field,
+            kind: CHROME_EXTENSION_WEB_ACCESSIBLE_EDGE,
+            specifier,
+            pathLookup,
+        });
+    }
+    return edges;
+}
+// tag → the attribute that carries its resource reference. Mirrors html.ts so
+// both the regex floor and the tree-sitter analyzer track the same relationships.
+// Changes to which tags are tracked need only be made here and in html.ts.
+const HTML_RESOURCE_ATTRIBUTE = {
+    script: "src",
+    link: "href",
+    img: "src",
+};
+function extractHtmlAttributeReferences(content, elementName, attributeName) {
+    const unquotedAttributeValue = "[^\\s\"'<>`]+";
+    const pattern = new RegExp(`<${elementName}\\b[^>]*\\b${attributeName}\\s*=\\s*(?:"([^"]+)"|'([^']+)'|(${unquotedAttributeValue}))`, "gi");
+    const values = [];
+    for (const match of content.matchAll(pattern)) {
+        const value = match[1] ?? match[2] ?? match[3];
+        if (value)
+            values.push(value);
+    }
+    return values;
+}
+export function extractHtmlResourceEdges(fromPath, content, pathLookup) {
+    const normalized = normalizeGraphPath(fromPath).toLowerCase();
+    if (!normalized.endsWith(".html") && !normalized.endsWith(".htm")) {
+        return [];
+    }
+    const edges = [];
+    for (const [elementName, attributeName] of Object.entries(HTML_RESOURCE_ATTRIBUTE)) {
+        for (const specifier of extractHtmlAttributeReferences(content, elementName, attributeName)) {
+            const target = resolveLocalReference(fromPath, specifier, pathLookup);
+            if (!target) {
+                continue;
+            }
+            edges.push(graphEdge({
+                from: fromPath,
+                to: target,
+                kind: HTML_RESOURCE_EDGE,
+                confidence: HTML_RESOURCE_EDGE_CONFIDENCE,
+                reason: `HTML <${elementName} ${attributeName}> resource references '${specifier}'.`,
+            }));
+        }
+    }
+    return edges;
+}
+export function hasBrowserExtensionManifestFile(repoManifest) {
+    // Detect a `manifest.json` anywhere in the tree (root or a subdirectory),
+    // using the same basename match as isBrowserExtensionManifestPath so the
+    // repo-level gate and the per-file classifier agree.
+    return repoManifest.files.some((file) => isBrowserExtensionManifestPath(file.path));
+}
+export function deriveBrowserExtensionLensesForPath(path) {
+    const normalized = normalizeGraphPath(path).toLowerCase();
+    if (normalized === "manifest.json") {
+        return ["security", "correctness", "config_deployment", "operability"];
+    }
+    if (normalized.startsWith("service/") ||
+        normalized.startsWith("background/") ||
+        normalized.includes("service-worker") ||
+        normalized.includes("background")) {
+        return ["security", "correctness", "reliability", "observability"];
+    }
+    if (normalized.startsWith("content/") || normalized.includes("content-script")) {
+        return ["security", "correctness", "reliability"];
+    }
+    if (normalized.includes("popup") ||
+        normalized.includes("sidebar") ||
+        normalized.includes("side-panel") ||
+        normalized.includes("panel") ||
+        normalized.endsWith(".html")) {
+        return ["security", "correctness", "maintainability"];
+    }
+    if (normalized.includes("worker")) {
+        return ["correctness", "reliability", "performance"];
+    }
+    return [];
+}
+export function inferBrowserExtensionUnitKind(path) {
+    const normalized = normalizeGraphPath(path).toLowerCase();
+    if (normalized === "manifest.json")
+        return "extension_config";
+    if (normalized.startsWith("service/") || normalized.startsWith("background/")) {
+        return "extension_background";
+    }
+    if (normalized.startsWith("content/"))
+        return "extension_content";
+    if (normalized.includes("worker"))
+        return "worker";
+    if (normalized.endsWith(".html"))
+        return "extension_ui";
+    return undefined;
+}
+function isExecutableExtensionSurfaceTarget(path) {
+    const normalized = normalizeGraphPath(path).toLowerCase();
+    return (normalized.endsWith(".js") ||
+        normalized.endsWith(".mjs") ||
+        normalized.endsWith(".cjs") ||
+        normalized.endsWith(".html") ||
+        normalized.endsWith(".htm"));
+}
+export function buildBrowserExtensionSurfacesFromGraph(graphBundle, disposition) {
+    const references = Array.isArray(graphBundle?.graphs.references)
+        ? graphBundle.graphs.references
+        : [];
+    const dispositionMap = buildDispositionMap(disposition);
+    const surfaces = [];
+    const seen = new Set();
+    for (const edge of references) {
+        if (!edge.kind || !EXTENSION_SURFACE_EDGE_KINDS.has(edge.kind)) {
+            continue;
+        }
+        if (!isExecutableExtensionSurfaceTarget(edge.to)) {
+            continue;
+        }
+        const status = dispositionMap.get(edge.to);
+        if (status && isAuditExcludedStatus(status)) {
+            continue;
+        }
+        const kind = edge.kind === CHROME_EXTENSION_BACKGROUND_EDGE ? "background" : "interface";
+        const key = `${kind}:${edge.to}`;
+        if (seen.has(key)) {
+            continue;
+        }
+        seen.add(key);
+        surfaces.push({
+            id: `surface:${edge.to}`,
+            kind,
+            entrypoint: edge.to,
+            exposure: edge.kind === CHROME_EXTENSION_CONTENT_SCRIPT_EDGE ? "network" : "local",
+            notes: [BROWSER_EXTENSION_HEURISTIC_NOTE],
+        });
+    }
+    return surfaces.sort((a, b) => a.entrypoint.localeCompare(b.entrypoint) || a.kind.localeCompare(b.kind));
+}
+export function chromeExtensionRiskSignalsForManifest(content) {
+    const manifest = parseJsonObject(content);
+    if (!manifest || !isBrowserExtensionManifest(manifest)) {
+        return [];
+    }
+    const permissions = [
+        ...asStringArray(manifest.permissions),
+        ...asStringArray(manifest.optional_permissions),
+        ...asStringArray(manifest.host_permissions),
+    ];
+    return HIGH_RISK_PERMISSION_TOKENS.filter((token) => permissions.some((permission) => permission === token));
+}
+//# sourceMappingURL=browserExtension.js.map

package/dist/audit/extractors/browserExtension.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"browserExtension.js","sourceRoot":"","sources":["../../../src/audit/extractors/browserExtension.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,WAAW,CAAC;AAGlC,OAAO,EAAE,mBAAmB,EAAE,qBAAqB,EAAE,MAAM,kBAAkB,CAAC;AAC9E,OAAO,EACL,SAAS,EACT,kBAAkB,EAClB,gBAAgB,GACjB,MAAM,qBAAqB,CAAC;AAE7B,MAAM,CAAC,MAAM,gCAAgC,GAC3C,qJAAqJ,CAAC;AAExJ,MAAM,gCAAgC,GAAG,kCAAkC,CAAC;AAC5E,MAAM,oCAAoC,GACxC,sCAAsC,CAAC;AACzC,MAAM,mCAAmC,GACvC,qCAAqC,CAAC;AACxC,MAAM,6BAA6B,GAAG,+BAA+B,CAAC;AACtE,MAAM,oCAAoC,GACxC,+CAA+C,CAAC;AAClD,MAAM,kBAAkB,GAAG,oBAAoB,CAAC;AAChD,MAAM,gCAAgC,GAAG,IAAI,CAAC;AAC9C,MAAM,6BAA6B,GAAG,IAAI,CAAC;AAE3C,MAAM,4BAA4B,GAAG,IAAI,GAAG,CAAC;IAC3C,gCAAgC;IAChC,oCAAoC;IACpC,6BAA6B;CAC9B,CAAC,CAAC;AAEH,MAAM,2BAA2B,GAAG;IAClC,YAAY;IACZ,WAAW;IACX,UAAU;IACV,uBAAuB;IACvB,WAAW;IACX,gBAAgB;IAChB,iBAAiB;IACjB,OAAO;IACP,WAAW;IACX,MAAM;IACN,kBAAkB;IAClB,eAAe;IACf,YAAY;CACJ,CAAC;AAEX,SAAS,QAAQ,CAAC,KAAc;IAC9B,OAAO,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAC9E,CAAC;AAED,SAAS,QAAQ,CAAC,KAAc;IAC9B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC;QACzD,CAAC,CAAC,KAAK,CAAC,IAAI,EAAE;QACd,CAAC,CAAC,SAAS,CAAC;AAChB,CAAC;AAED,SAAS,aAAa,CAAC,KAAc;IACnC,OAAO,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QACzB,CAAC,CAAC,KAAK;aACF,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;aAC7B,MAAM,CAAC,CAAC,IAAI,EAAkB,EAAE,CAAC,IAAI,KAAK,SAAS,CAAC;QACzD,CAAC,CAAC,EAAE,CAAC;AACT,CAAC;AAED,SAAS,eAAe,CAAC,OAAe;IACtC,IAAI,CAAC;QACH,MAAM,MAAM,GAAY,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QAC5C,OAAO,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;IAC/C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED,MAAM,UAAU,8BAA8B,CAAC,IAAY;IACzD,OAAO,KAAK,CAAC,QAAQ,CAAC,kBAAkB,CAAC,IAAI,CAAC,CAAC,CAAC,WAAW,EAAE,KAAK,eAAe,CAAC;AACpF,CAAC;AAED,SAAS,0BAA0B,CAAC,KAA8B;IAChE,OAAO,CACL,OAAO,KAAK,CAAC,gBAAgB,KAAK,QAAQ;QAC1C,CAAC,QAAQ,CAAC,KAAK,CAAC,UAAU,CAAC;YACzB,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,eAAe,CAAC;YACpC,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC;YACtB,QAAQ,CAAC,KAAK,CAAC,cAAc,CAAC;YAC9B,QAAQ,CAAC,KAAK,CAAC,WAAW,CAAC;YAC3B,QAAQ,CAAC,KAAK,CAAC,UAAU,CAAC;YAC1B,QAAQ,CAAC,KAAK,CAAC,UAAU,CAAC;YAC1B,OAAO,KAAK,CAAC,YAAY,KAAK,QAAQ;YACtC,OAAO,KAAK,CAAC,aAAa,KAAK,QAAQ;YACvC,QAAQ,CAAC,KAAK,CAAC,oBAAoB,CAAC;YACpC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,wBAAwB,CAAC,CAAC,CACjD,CAAC;AACJ,CAAC;AAED,SAAS,kBAAkB,CAAC,SAAiB;IAC3C,MAAM,YAAY,GAAG,SAAS,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;IACxE,IACE,YAAY,CAAC,MAAM,KAAK,CAAC;QACzB,YAAY,CAAC,UAAU,CAAC,GAAG,CAAC;QAC5B,YAAY,CAAC,QAAQ,CAAC,GAAG,CAAC;QAC1B,sBAAsB,CAAC,IAAI,CAAC,YAAY,CAAC;QACzC,YAAY,CAAC,UAAU,CAAC,IAAI,CAAC,EAC7B,CAAC;QACD,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,OAAO,kBAAkB,CAAC,YAAY,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;AAC9D,CAAC;AAED,SAAS,qBAAqB,CAC5B,QAAgB,EAChB,SAAiB,EACjB,UAA+B;IAE/B,MAAM,KAAK,GAAG,kBAAkB,CAAC,SAAS,CAAC,CAAC;IAC5C,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,MAAM,cAAc,GAAG,SAAS,CAAC,IAAI,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;IACxD,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,kBAAkB,CAAC,QAAQ,CAAC,CAAC,CAAC;IAC5D,MAAM,SAAS,GACb,cAAc,IAAI,OAAO,KAAK,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;IACzE,OAAO,gBAAgB,CAAC,SAAS,EAAE,UAAU,CAAC,CAAC;AACjD,CAAC;AAED,SAAS,oBAAoB,CAC3B,KAAkB,EAClB,MAMC;IAED,MAAM,MAAM,GAAG,qBAAqB,CAClC,MAAM,CAAC,QAAQ,EACf,MAAM,CAAC,SAAS,EAChB,MAAM,CAAC,UAAU,CAClB,CAAC;IACF,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,OAAO;IACT,CAAC;IACD,KAAK,CAAC,IAAI,CACR,SAAS,CAAC;QACR,IAAI,EAAE,MAAM,CAAC,QAAQ;QACrB,EAAE,EAAE,MAAM;QACV,IAAI,EAAE,MAAM,CAAC,IAAI;QACjB,UAAU,EAAE,gCAAgC;QAC5C,MAAM,EAAE,oCAAoC,MAAM,CAAC,KAAK,iBAAiB,MAAM,CAAC,SAAS,IAAI;KAC9F,CAAC,CACH,CAAC;AACJ,CAAC;AAED,SAAS,gCAAgC,CACvC,QAAiC;IAEjC,MAAM,OAAO,GAAgD,EAAE,CAAC;IAChE,KAAK,MAAM,WAAW,IAAI,CAAC,QAAQ,EAAE,gBAAgB,EAAE,aAAa,CAAC,EAAE,CAAC;QACtE,MAAM,KAAK,GAAG,QAAQ,CAAC,WAAW,CAAC,CAAC;QACpC,IAAI,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;YACpB,MAAM,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC;YAC5C,IAAI,KAAK;gBAAE,OAAO,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,GAAG,WAAW,gBAAgB,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC,CAAC;QACvF,CAAC;IACH,CAAC;IAED,MAAM,SAAS,GAAG,QAAQ,CAAC,UAAU,CAAC;IACtC,IAAI,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC;QACxB,MAAM,IAAI,GAAG,QAAQ,CAAC,SAAS,CAAC,YAAY,CAAC,CAAC;QAC9C,IAAI,IAAI;YAAE,OAAO,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,yBAAyB,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAChF,CAAC;IAED,MAAM,WAAW,GAAG,QAAQ,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC;IACpD,IAAI,WAAW;QAAE,OAAO,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,cAAc,EAAE,SAAS,EAAE,WAAW,EAAE,CAAC,CAAC;IAEjF,MAAM,SAAS,GAAG,QAAQ,CAAC,UAAU,CAAC;IACtC,IAAI,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC;QACxB,MAAM,IAAI,GAAG,QAAQ,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;QACtC,IAAI,IAAI;YAAE,OAAO,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,iBAAiB,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACxE,CAAC;IAED,MAAM,YAAY,GAAG,QAAQ,CAAC,QAAQ,CAAC,aAAa,CAAC,CAAC;IACtD,IAAI,YAAY;QAAE,OAAO,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,eAAe,EAAE,SAAS,EAAE,YAAY,EAAE,CAAC,CAAC;IAEpF,MAAM,SAAS,GAAG,QAAQ,CAAC,oBAAoB,CAAC;IAChD,IAAI,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC;QACxB,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,CAAC;YACrD,MAAM,IAAI,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC;YAC7B,IAAI,IAAI;gBAAE,OAAO,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,wBAAwB,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACpF,CAAC;IACH,CAAC;IAED,MAAM,OAAO,GAAG,QAAQ,CAAC,OAAO,CAAC;IACjC,IAAI,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;QACtB,aAAa,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CACnD,OAAO,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,iBAAiB,KAAK,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CACnE,CAAC;IACJ,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,SAAS,8BAA8B,CACrC,QAAiC;IAEjC,MAAM,OAAO,GAAgD,EAAE,CAAC;IAChE,MAAM,SAAS,GAAG,QAAQ,CAAC,wBAAwB,CAAC;IACpD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,CAAC;QAC9B,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,SAAS,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE;QAChC,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;YAC7B,OAAO,CAAC,IAAI,CAAC;gBACX,KAAK,EAAE,4BAA4B,KAAK,EAAE;gBAC1C,SAAS,EAAE,IAAI;aAChB,CAAC,CAAC;YACH,OAAO;QACT,CAAC;QACD,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;YACpB,OAAO;QACT,CAAC;QACD,aAAa,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,OAAO,CAAC,CAAC,QAAQ,EAAE,aAAa,EAAE,EAAE,CAChE,OAAO,CAAC,IAAI,CAAC;YACX,KAAK,EAAE,4BAA4B,KAAK,cAAc,aAAa,EAAE;YACrE,SAAS,EAAE,QAAQ;SACpB,CAAC,CACH,CAAC;IACJ,CAAC,CAAC,CAAC;IACH,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,MAAM,UAAU,mCAAmC,CACjD,QAAgB,EAChB,OAAe,EACf,UAA+B;IAE/B,IAAI,CAAC,8BAA8B,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC9C,OAAO,EAAE,CAAC;IACZ,CAAC;IACD,MAAM,QAAQ,GAAG,eAAe,CAAC,OAAO,CAAC,CAAC;IAC1C,IAAI,CAAC,QAAQ,IAAI,CAAC,0BAA0B,CAAC,QAAQ,CAAC,EAAE,CAAC;QACvD,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,MAAM,KAAK,GAAgB,EAAE,CAAC;IAC9B,MAAM,UAAU,GAAG,QAAQ,CAAC,UAAU,CAAC;IACvC,IAAI,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC;QACzB,MAAM,aAAa,GAAG,QAAQ,CAAC,UAAU,CAAC,cAAc,CAAC,CAAC;QAC1D,IAAI,aAAa,EAAE,CAAC;YAClB,oBAAoB,CAAC,KAAK,EAAE;gBAC1B,QAAQ;gBACR,KAAK,EAAE,2BAA2B;gBAClC,IAAI,EAAE,gCAAgC;gBACtC,SAAS,EAAE,aAAa;gBACxB,UAAU;aACX,CAAC,CAAC;QACL,CAAC;QACD,aAAa,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE,CAC1D,oBAAoB,CAAC,KAAK,EAAE;YAC1B,QAAQ;YACR,KAAK,EAAE,sBAAsB,KAAK,EAAE;YACpC,IAAI,EAAE,gCAAgC;YACtC,SAAS,EAAE,MAAM;YACjB,UAAU;SACX,CAAC,CACH,CAAC;IACJ,CAAC;IAED,MAAM,cAAc,GAAG,QAAQ,CAAC,eAAe,CAAC;IAChD,IAAI,KAAK,CAAC,OAAO,CAAC,cAAc,CAAC,EAAE,CAAC;QAClC,cAAc,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE;YACrC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;gBACpB,OAAO;YACT,CAAC;YACD,aAAa,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,MAAM,EAAE,WAAW,EAAE,EAAE,CACrD,oBAAoB,CAAC,KAAK,EAAE;gBAC1B,QAAQ;gBACR,KAAK,EAAE,mBAAmB,KAAK,OAAO,WAAW,EAAE;gBACnD,IAAI,EAAE,oCAAoC;gBAC1C,SAAS,EAAE,MAAM;gBACjB,UAAU;aACX,CAAC,CACH,CAAC;YACF,aAAa,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,UAAU,EAAE,EAAE,CACpD,oBAAoB,CAAC,KAAK,EAAE;gBAC1B,QAAQ;gBACR,KAAK,EAAE,mBAAmB,KAAK,QAAQ,UAAU,EAAE;gBACnD,IAAI,EAAE,mCAAmC;gBACzC,SAAS,EAAE,KAAK;gBAChB,UAAU;aACX,CAAC,CACH,CAAC;QACJ,CAAC,CAAC,CAAC;IACL,CAAC;IAED,KAAK,MAAM,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,gCAAgC,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC9E,oBAAoB,CAAC,KAAK,EAAE;YAC1B,QAAQ;YACR,KAAK;YACL,IAAI,EAAE,6BAA6B;YACnC,SAAS;YACT,UAAU;SACX,CAAC,CAAC;IACL,CAAC;IAED,KAAK,MAAM,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,8BAA8B,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC5E,oBAAoB,CAAC,KAAK,EAAE;YAC1B,QAAQ;YACR,KAAK;YACL,IAAI,EAAE,oCAAoC;YAC1C,SAAS;YACT,UAAU;SACX,CAAC,CAAC;IACL,CAAC;IAED,OAAO,KAAK,CAAC;AACf,CAAC;AAED,8EAA8E;AAC9E,kFAAkF;AAClF,2EAA2E;AAC3E,MAAM,uBAAuB,GAA2B;IACtD,MAAM,EAAE,KAAK;IACb,IAAI,EAAE,MAAM;IACZ,GAAG,EAAE,KAAK;CACX,CAAC;AAEF,SAAS,8BAA8B,CACrC,OAAe,EACf,WAAmB,EACnB,aAAqB;IAErB,MAAM,sBAAsB,GAAG,eAAe,CAAC;IAC/C,MAAM,OAAO,GAAG,IAAI,MAAM,CACxB,IAAI,WAAW,cAAc,aAAa,oCAAoC,sBAAsB,IAAI,EACxG,IAAI,CACL,CAAC;IACF,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,KAAK,MAAM,KAAK,IAAI,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;QAC9C,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC;QAC/C,IAAI,KAAK;YAAE,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAChC,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,MAAM,UAAU,wBAAwB,CACtC,QAAgB,EAChB,OAAe,EACf,UAA+B;IAE/B,MAAM,UAAU,GAAG,kBAAkB,CAAC,QAAQ,CAAC,CAAC,WAAW,EAAE,CAAC;IAC9D,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;QAClE,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,MAAM,KAAK,GAAgB,EAAE,CAAC;IAC9B,KAAK,MAAM,CAAC,WAAW,EAAE,aAAa,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,uBAAuB,CAAC,EAAE,CAAC;QACnF,KAAK,MAAM,SAAS,IAAI,8BAA8B,CAAC,OAAO,EAAE,WAAW,EAAE,aAAa,CAAC,EAAE,CAAC;YAC5F,MAAM,MAAM,GAAG,qBAAqB,CAAC,QAAQ,EAAE,SAAS,EAAE,UAAU,CAAC,CAAC;YACtE,IAAI,CAAC,MAAM,EAAE,CAAC;gBACZ,SAAS;YACX,CAAC;YACD,KAAK,CAAC,IAAI,CACR,SAAS,CAAC;gBACR,IAAI,EAAE,QAAQ;gBACd,EAAE,EAAE,MAAM;gBACV,IAAI,EAAE,kBAAkB;gBACxB,UAAU,EAAE,6BAA6B;gBACzC,MAAM,EAAE,SAAS,WAAW,IAAI,aAAa,0BAA0B,SAAS,IAAI;aACrF,CAAC,CACH,CAAC;QACJ,CAAC;IACH,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,UAAU,+BAA+B,CAAC,YAA0B;IACxE,0EAA0E;IAC1E,yEAAyE;IACzE,qDAAqD;IACrD,OAAO,YAAY,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CACtC,8BAA8B,CAAC,IAAI,CAAC,IAAI,CAAC,CAC1C,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,mCAAmC,CAAC,IAAY;IAC9D,MAAM,UAAU,GAAG,kBAAkB,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE,CAAC;IAC1D,IAAI,UAAU,KAAK,eAAe,EAAE,CAAC;QACnC,OAAO,CAAC,UAAU,EAAE,aAAa,EAAE,mBAAmB,EAAE,aAAa,CAAC,CAAC;IACzE,CAAC;IACD,IACE,UAAU,CAAC,UAAU,CAAC,UAAU,CAAC;QACjC,UAAU,CAAC,UAAU,CAAC,aAAa,CAAC;QACpC,UAAU,CAAC,QAAQ,CAAC,gBAAgB,CAAC;QACrC,UAAU,CAAC,QAAQ,CAAC,YAAY,CAAC,EACjC,CAAC;QACD,OAAO,CAAC,UAAU,EAAE,aAAa,EAAE,aAAa,EAAE,eAAe,CAAC,CAAC;IACrE,CAAC;IACD,IAAI,UAAU,CAAC,UAAU,CAAC,UAAU,CAAC,IAAI,UAAU,CAAC,QAAQ,CAAC,gBAAgB,CAAC,EAAE,CAAC;QAC/E,OAAO,CAAC,UAAU,EAAE,aAAa,EAAE,aAAa,CAAC,CAAC;IACpD,CAAC;IACD,IACE,UAAU,CAAC,QAAQ,CAAC,OAAO,CAAC;QAC5B,UAAU,CAAC,QAAQ,CAAC,SAAS,CAAC;QAC9B,UAAU,CAAC,QAAQ,CAAC,YAAY,CAAC;QACjC,UAAU,CAAC,QAAQ,CAAC,OAAO,CAAC;QAC5B,UAAU,CAAC,QAAQ,CAAC,OAAO,CAAC,EAC5B,CAAC;QACD,OAAO,CAAC,UAAU,EAAE,aAAa,EAAE,iBAAiB,CAAC,CAAC;IACxD,CAAC;IACD,IAAI,UAAU,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;QAClC,OAAO,CAAC,aAAa,EAAE,aAAa,EAAE,aAAa,CAAC,CAAC;IACvD,CAAC;IACD,OAAO,EAAE,CAAC;AACZ,CAAC;AAED,MAAM,UAAU,6BAA6B,CAAC,IAAY;IACxD,MAAM,UAAU,GAAG,kBAAkB,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE,CAAC;IAC1D,IAAI,UAAU,KAAK,eAAe;QAAE,OAAO,kBAAkB,CAAC;IAC9D,IAAI,UAAU,CAAC,UAAU,CAAC,UAAU,CAAC,IAAI,UAAU,CAAC,UAAU,CAAC,aAAa,CAAC,EAAE,CAAC;QAC9E,OAAO,sBAAsB,CAAC;IAChC,CAAC;IACD,IAAI,UAAU,CAAC,UAAU,CAAC,UAAU,CAAC;QAAE,OAAO,mBAAmB,CAAC;IAClE,IAAI,UAAU,CAAC,QAAQ,CAAC,QAAQ,CAAC;QAAE,OAAO,QAAQ,CAAC;IACnD,IAAI,UAAU,CAAC,QAAQ,CAAC,OAAO,CAAC;QAAE,OAAO,cAAc,CAAC;IACxD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAS,kCAAkC,CAAC,IAAY;IACtD,MAAM,UAAU,GAAG,kBAAkB,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE,CAAC;IAC1D,OAAO,CACL,UAAU,CAAC,QAAQ,CAAC,KAAK,CAAC;QAC1B,UAAU,CAAC,QAAQ,CAAC,MAAM,CAAC;QAC3B,UAAU,CAAC,QAAQ,CAAC,MAAM,CAAC;QAC3B,UAAU,CAAC,QAAQ,CAAC,OAAO,CAAC;QAC5B,UAAU,CAAC,QAAQ,CAAC,MAAM,CAAC,CAC5B,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,sCAAsC,CACpD,WAAoC,EACpC,WAA6B;IAE7B,MAAM,UAAU,GAAG,KAAK,CAAC,OAAO,CAAC,WAAW,EAAE,MAAM,CAAC,UAAU,CAAC;QAC9D,CAAC,CAAC,WAAW,CAAC,MAAM,CAAC,UAAU;QAC/B,CAAC,CAAC,EAAE,CAAC;IACP,MAAM,cAAc,GAAG,mBAAmB,CAAC,WAAW,CAAC,CAAC;IACxD,MAAM,QAAQ,GAAoB,EAAE,CAAC;IACrC,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAE/B,KAAK,MAAM,IAAI,IAAI,UAAU,EAAE,CAAC;QAC9B,IAAI,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,4BAA4B,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YAC/D,SAAS;QACX,CAAC;QACD,IAAI,CAAC,kCAAkC,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC;YACjD,SAAS;QACX,CAAC;QACD,MAAM,MAAM,GAAG,cAAc,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAC3C,IAAI,MAAM,IAAI,qBAAqB,CAAC,MAAM,CAAC,EAAE,CAAC;YAC5C,SAAS;QACX,CAAC;QAED,MAAM,IAAI,GACR,IAAI,CAAC,IAAI,KAAK,gCAAgC,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,WAAW,CAAC;QAC9E,MAAM,GAAG,GAAG,GAAG,IAAI,IAAI,IAAI,CAAC,EAAE,EAAE,CAAC;QACjC,IAAI,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;YAClB,SAAS;QACX,CAAC;QACD,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACd,QAAQ,CAAC,IAAI,CAAC;YACZ,EAAE,EAAE,WAAW,IAAI,CAAC,EAAE,EAAE;YACxB,IAAI;YACJ,UAAU,EAAE,IAAI,CAAC,EAAE;YACnB,QAAQ,EACN,IAAI,CAAC,IAAI,KAAK,oCAAoC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO;YAC1E,KAAK,EAAE,CAAC,gCAAgC,CAAC;SAC1C,CAAC,CAAC;IACL,CAAC;IAED,OAAO,QAAQ,CAAC,IAAI,CAClB,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,aAAa,CAAC,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,CACnF,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,qCAAqC,CAAC,OAAe;IACnE,MAAM,QAAQ,GAAG,eAAe,CAAC,OAAO,CAAC,CAAC;IAC1C,IAAI,CAAC,QAAQ,IAAI,CAAC,0BAA0B,CAAC,QAAQ,CAAC,EAAE,CAAC;QACvD,OAAO,EAAE,CAAC;IACZ,CAAC;IACD,MAAM,WAAW,GAAG;QAClB,GAAG,aAAa,CAAC,QAAQ,CAAC,WAAW,CAAC;QACtC,GAAG,aAAa,CAAC,QAAQ,CAAC,oBAAoB,CAAC;QAC/C,GAAG,aAAa,CAAC,QAAQ,CAAC,gBAAgB,CAAC;KAC5C,CAAC;IACF,OAAO,2BAA2B,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAClD,WAAW,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,UAAU,KAAK,KAAK,CAAC,CACvD,CAAC;AACJ,CAAC"}

package/dist/audit/extractors/bucketing.d.ts

@@ -0,0 +1,12 @@
+export type FileBucket = "runtime" | "interface" | "data_layer" | "security_sensitive" | "concurrency_state" | "tests" | "tooling_scripts" | "config_deployment" | "docs_specs" | "generated_vendor" | "unknown";
+export interface BucketAssignment {
+    path: string;
+    buckets: FileBucket[];
+    rationale: string[];
+}
+/**
+ * Buckets files using the shared extractor heuristics so intake stays
+ * consistent across OS-specific path separators and mixed-case manifests.
+ */
+export declare function bucketFile(path: string): BucketAssignment;
+//# sourceMappingURL=bucketing.d.ts.map

package/dist/audit/extractors/bucketing.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"bucketing.d.ts","sourceRoot":"","sources":["../../../src/audit/extractors/bucketing.ts"],"names":[],"mappings":"AAcA,MAAM,MAAM,UAAU,GAClB,SAAS,GACT,WAAW,GACX,YAAY,GACZ,oBAAoB,GACpB,mBAAmB,GACnB,OAAO,GACP,iBAAiB,GACjB,mBAAmB,GACnB,YAAY,GACZ,kBAAkB,GAClB,SAAS,CAAC;AAEd,MAAM,WAAW,gBAAgB;IAC/B,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,UAAU,EAAE,CAAC;IACtB,SAAS,EAAE,MAAM,EAAE,CAAC;CACrB;AAcD;;;GAGG;AACH,wBAAgB,UAAU,CAAC,IAAI,EAAE,MAAM,GAAG,gBAAgB,CA4EzD"}

package/dist/audit/extractors/bucketing.js

@@ -0,0 +1,56 @@
+import { isNodeModulesOrGit, isTestPath, isInterfacePath, isDataLayerPath, isSecuritySensitivePath, isConcurrencyPath, isScriptPath, isDeploymentConfigPath, isDocPath, isGeneratedPath, normalizeExtractorPath, } from "./pathPatterns.js";
+function addBucket(buckets, rationale, bucket, reason) {
+    if (!buckets.has(bucket)) {
+        buckets.add(bucket);
+        rationale.push(reason);
+    }
+}
+/**
+ * Buckets files using the shared extractor heuristics so intake stays
+ * consistent across OS-specific path separators and mixed-case manifests.
+ */
+export function bucketFile(path) {
+    const normalized = normalizeExtractorPath(path);
+    const buckets = new Set();
+    const rationale = [];
+    if (isNodeModulesOrGit(normalized)) {
+        addBucket(buckets, rationale, "generated_vendor", "node_modules or .git excluded by convention");
+        return { path, buckets: [...buckets], rationale };
+    }
+    if (isTestPath(normalized)) {
+        addBucket(buckets, rationale, "tests", "path suggests tests");
+    }
+    if (isInterfacePath(normalized)) {
+        addBucket(buckets, rationale, "interface", "path suggests interface code");
+    }
+    if (isDataLayerPath(normalized)) {
+        addBucket(buckets, rationale, "data_layer", "path suggests data-layer code");
+    }
+    if (isSecuritySensitivePath(normalized)) {
+        addBucket(buckets, rationale, "security_sensitive", "path suggests security-sensitive code");
+    }
+    if (isConcurrencyPath(normalized)) {
+        addBucket(buckets, rationale, "concurrency_state", "path suggests concurrency or stateful behavior");
+    }
+    if (isScriptPath(normalized)) {
+        addBucket(buckets, rationale, "tooling_scripts", "path suggests tooling or scripts");
+    }
+    if (isDeploymentConfigPath(normalized)) {
+        addBucket(buckets, rationale, "config_deployment", "path suggests config or deployment artifact");
+    }
+    if (isDocPath(normalized)) {
+        addBucket(buckets, rationale, "docs_specs", "path suggests documentation");
+    }
+    if (isGeneratedPath(normalized)) {
+        addBucket(buckets, rationale, "generated_vendor", "path suggests generated or vendored content");
+    }
+    if (buckets.size === 0) {
+        addBucket(buckets, rationale, "runtime", "default runtime classification");
+    }
+    return {
+        path,
+        buckets: [...buckets],
+        rationale,
+    };
+}
+//# sourceMappingURL=bucketing.js.map

package/dist/audit/extractors/bucketing.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"bucketing.js","sourceRoot":"","sources":["../../../src/audit/extractors/bucketing.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,kBAAkB,EAClB,UAAU,EACV,eAAe,EACf,eAAe,EACf,uBAAuB,EACvB,iBAAiB,EACjB,YAAY,EACZ,sBAAsB,EACtB,SAAS,EACT,eAAe,EACf,sBAAsB,GACvB,MAAM,mBAAmB,CAAC;AAqB3B,SAAS,SAAS,CAChB,OAAwB,EACxB,SAAmB,EACnB,MAAkB,EAClB,MAAc;IAEd,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;QACzB,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QACpB,SAAS,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACzB,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,UAAU,CAAC,IAAY;IACrC,MAAM,UAAU,GAAG,sBAAsB,CAAC,IAAI,CAAC,CAAC;IAChD,MAAM,OAAO,GAAG,IAAI,GAAG,EAAc,CAAC;IACtC,MAAM,SAAS,GAAa,EAAE,CAAC;IAE/B,IAAI,kBAAkB,CAAC,UAAU,CAAC,EAAE,CAAC;QACnC,SAAS,CAAC,OAAO,EAAE,SAAS,EAAE,kBAAkB,EAAE,6CAA6C,CAAC,CAAC;QACjG,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,GAAG,OAAO,CAAC,EAAE,SAAS,EAAE,CAAC;IACpD,CAAC;IAED,IAAI,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;QAC3B,SAAS,CAAC,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,qBAAqB,CAAC,CAAC;IAChE,CAAC;IACD,IAAI,eAAe,CAAC,UAAU,CAAC,EAAE,CAAC;QAChC,SAAS,CAAC,OAAO,EAAE,SAAS,EAAE,WAAW,EAAE,8BAA8B,CAAC,CAAC;IAC7E,CAAC;IACD,IAAI,eAAe,CAAC,UAAU,CAAC,EAAE,CAAC;QAChC,SAAS,CACP,OAAO,EACP,SAAS,EACT,YAAY,EACZ,+BAA+B,CAChC,CAAC;IACJ,CAAC;IACD,IAAI,uBAAuB,CAAC,UAAU,CAAC,EAAE,CAAC;QACxC,SAAS,CACP,OAAO,EACP,SAAS,EACT,oBAAoB,EACpB,uCAAuC,CACxC,CAAC;IACJ,CAAC;IACD,IAAI,iBAAiB,CAAC,UAAU,CAAC,EAAE,CAAC;QAClC,SAAS,CACP,OAAO,EACP,SAAS,EACT,mBAAmB,EACnB,gDAAgD,CACjD,CAAC;IACJ,CAAC;IACD,IAAI,YAAY,CAAC,UAAU,CAAC,EAAE,CAAC;QAC7B,SAAS,CACP,OAAO,EACP,SAAS,EACT,iBAAiB,EACjB,kCAAkC,CACnC,CAAC;IACJ,CAAC;IACD,IAAI,sBAAsB,CAAC,UAAU,CAAC,EAAE,CAAC;QACvC,SAAS,CACP,OAAO,EACP,SAAS,EACT,mBAAmB,EACnB,6CAA6C,CAC9C,CAAC;IACJ,CAAC;IACD,IAAI,SAAS,CAAC,UAAU,CAAC,EAAE,CAAC;QAC1B,SAAS,CAAC,OAAO,EAAE,SAAS,EAAE,YAAY,EAAE,6BAA6B,CAAC,CAAC;IAC7E,CAAC;IACD,IAAI,eAAe,CAAC,UAAU,CAAC,EAAE,CAAC;QAChC,SAAS,CACP,OAAO,EACP,SAAS,EACT,kBAAkB,EAClB,6CAA6C,CAC9C,CAAC;IACJ,CAAC;IACD,IAAI,OAAO,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC;QACvB,SAAS,CAAC,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,gCAAgC,CAAC,CAAC;IAC7E,CAAC;IAED,OAAO;QACL,IAAI;QACJ,OAAO,EAAE,CAAC,GAAG,OAAO,CAAC;QACrB,SAAS;KACV,CAAC;AACJ,CAAC"}

package/dist/audit/extractors/designAssessment.d.ts

@@ -0,0 +1,10 @@
+import type { UnitManifest } from "../types.js";
+import type { GraphBundle, CriticalFlowManifest, RiskRegister } from "audit-tools/shared";
+import type { DesignAssessment } from "../types/designAssessment.js";
+export declare function buildDesignAssessment(params: {
+    unitManifest: UnitManifest;
+    graphBundle: GraphBundle;
+    criticalFlows: CriticalFlowManifest;
+    riskRegister: RiskRegister;
+}): DesignAssessment;
+//# sourceMappingURL=designAssessment.d.ts.map

package/dist/audit/extractors/designAssessment.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"designAssessment.d.ts","sourceRoot":"","sources":["../../../src/audit/extractors/designAssessment.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAW,YAAY,EAAE,MAAM,aAAa,CAAC;AACzD,OAAO,KAAK,EAAE,WAAW,EAAa,oBAAoB,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AACrG,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,8BAA8B,CAAC;AAkUrE,wBAAgB,qBAAqB,CAAC,MAAM,EAAE;IAC5C,YAAY,EAAE,YAAY,CAAC;IAC3B,WAAW,EAAE,WAAW,CAAC;IACzB,aAAa,EAAE,oBAAoB,CAAC;IACpC,YAAY,EAAE,YAAY,CAAC;CAC5B,GAAG,gBAAgB,CAgBnB"}