audit-tools 0.28.0

package/dist/audit/extractors/fileInventory.d.ts

@@ -0,0 +1,8 @@
+import type { RepoManifest } from "../types.js";
+export interface InventoryInputFile {
+    path: string;
+    size_bytes: number;
+    hash?: string;
+}
+export declare function buildRepoManifest(repositoryName: string, files: InventoryInputFile[]): RepoManifest;
+//# sourceMappingURL=fileInventory.d.ts.map

package/dist/audit/extractors/fileInventory.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"fileInventory.d.ts","sourceRoot":"","sources":["../../../src/audit/extractors/fileInventory.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAIhD,MAAM,WAAW,kBAAkB;IACjC,IAAI,EAAE,MAAM,CAAC;IACb,UAAU,EAAE,MAAM,CAAC;IACnB,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AA2BD,wBAAgB,iBAAiB,CAC/B,cAAc,EAAE,MAAM,EACtB,KAAK,EAAE,kBAAkB,EAAE,GAC1B,YAAY,CAad"}

package/dist/audit/extractors/fileInventory.js

@@ -0,0 +1,36 @@
+import { normalizeExtractorPath } from "./pathPatterns.js";
+import { LANGUAGE_BY_EXTENSION } from "./languageMap.generated.js";
+// The generated linguist map resolves a few common extensions to obscure
+// languages that outrank the everyday one (".md" -> GCC machine description,
+// ".yml"/".yaml" -> MiniYAML). These overrides win over the generated map so the
+// file inventory does not mislabel ordinary docs/config. Keep this list small
+// and limited to extensions whose generated mapping is demonstrably wrong.
+const EXTENSION_LANGUAGE_OVERRIDES = {
+    md: "markdown",
+    markdown: "markdown",
+    yaml: "yaml",
+    yml: "yaml",
+};
+function inferLanguage(path) {
+    const normalized = normalizeExtractorPath(path);
+    const base = normalized.split("/").pop() ?? normalized;
+    const extension = (base.includes(".") ? base.split(".").pop() ?? "" : "").toLowerCase();
+    return (EXTENSION_LANGUAGE_OVERRIDES[extension] ??
+        LANGUAGE_BY_EXTENSION[extension] ??
+        "unknown");
+}
+export function buildRepoManifest(repositoryName, files) {
+    return {
+        repository: {
+            name: repositoryName,
+        },
+        generated_at: new Date().toISOString(),
+        files: files.map((file) => ({
+            path: file.path,
+            language: inferLanguage(file.path),
+            size_bytes: file.size_bytes,
+            hash: file.hash,
+        })),
+    };
+}
+//# sourceMappingURL=fileInventory.js.map

package/dist/audit/extractors/fileInventory.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"fileInventory.js","sourceRoot":"","sources":["../../../src/audit/extractors/fileInventory.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,sBAAsB,EAAE,MAAM,mBAAmB,CAAC;AAC3D,OAAO,EAAE,qBAAqB,EAAE,MAAM,4BAA4B,CAAC;AAQnE,yEAAyE;AACzE,6EAA6E;AAC7E,iFAAiF;AACjF,8EAA8E;AAC9E,2EAA2E;AAC3E,MAAM,4BAA4B,GAA2B;IAC3D,EAAE,EAAE,UAAU;IACd,QAAQ,EAAE,UAAU;IACpB,IAAI,EAAE,MAAM;IACZ,GAAG,EAAE,MAAM;CACZ,CAAC;AAEF,SAAS,aAAa,CAAC,IAAY;IACjC,MAAM,UAAU,GAAG,sBAAsB,CAAC,IAAI,CAAC,CAAC;IAChD,MAAM,IAAI,GAAG,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,IAAI,UAAU,CAAC;IACvD,MAAM,SAAS,GAAG,CAChB,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CACtD,CAAC,WAAW,EAAE,CAAC;IAChB,OAAO,CACL,4BAA4B,CAAC,SAAS,CAAC;QACvC,qBAAqB,CAAC,SAAS,CAAC;QAChC,SAAS,CACV,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,iBAAiB,CAC/B,cAAsB,EACtB,KAA2B;IAE3B,OAAO;QACL,UAAU,EAAE;YACV,IAAI,EAAE,cAAc;SACrB;QACD,YAAY,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QACtC,KAAK,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;YAC1B,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,QAAQ,EAAE,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC;YAClC,UAAU,EAAE,IAAI,CAAC,UAAU;YAC3B,IAAI,EAAE,IAAI,CAAC,IAAI;SAChB,CAAC,CAAC;KACJ,CAAC;AACJ,CAAC"}

package/dist/audit/extractors/flows.d.ts

@@ -0,0 +1,9 @@
+import type { RepoManifest } from "../types.js";
+import type { FileDisposition, CriticalFlowManifest, SurfaceManifest } from "audit-tools/shared";
+/**
+ * Builds coarse critical-flow coverage from shared path heuristics. These
+ * bootstrap flows are intentionally conservative and should be reviewed when a
+ * repo uses unconventional naming or layout conventions.
+ */
+export declare function buildCriticalFlowManifest(repoManifest: RepoManifest, surfaceManifest: SurfaceManifest, disposition?: FileDisposition): CriticalFlowManifest;
+//# sourceMappingURL=flows.d.ts.map

package/dist/audit/extractors/flows.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"flows.d.ts","sourceRoot":"","sources":["../../../src/audit/extractors/flows.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAChD,OAAO,KAAK,EAAE,eAAe,EAAgB,oBAAoB,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AAiF/G;;;;GAIG;AACH,wBAAgB,yBAAyB,CACvC,YAAY,EAAE,YAAY,EAC1B,eAAe,EAAE,eAAe,EAChC,WAAW,CAAC,EAAE,eAAe,GAC5B,oBAAoB,CAkDtB"}

package/dist/audit/extractors/flows.js

@@ -0,0 +1,111 @@
+import { buildDispositionMap, isAuditExcludedStatus } from "./disposition.js";
+import { EXTRACTOR_HEURISTIC_NOTE, isAsyncTaskPath, isBillingPath, isIdentityPath, isSecuritySensitivePath, isTestPath, isDataLayerPath, isConcurrencyPath, isInterfacePath, isDeploymentConfigPath, normalizeExtractorPath, } from "./pathPatterns.js";
+function inferConcerns(paths) {
+    const concerns = new Set();
+    for (const path of paths) {
+        const normalized = normalizeExtractorPath(path);
+        if (isSecuritySensitivePath(normalized))
+            concerns.add("security");
+        if (isDataLayerPath(normalized) || isBillingPath(normalized))
+            concerns.add("data_integrity");
+        if (isConcurrencyPath(normalized))
+            concerns.add("reliability");
+        if (isInterfacePath(normalized))
+            concerns.add("correctness");
+    }
+    return concerns.size > 0 ? [...concerns] : ["correctness"];
+}
+function isSchemaContractPath(normalized) {
+    return normalized.endsWith(".schema.json");
+}
+function isSupportArtifactPath(normalized) {
+    return isTestPath(normalized) || normalized.startsWith("examples/");
+}
+function relatedPaths(entry, availablePaths) {
+    const normalized = normalizeExtractorPath(entry);
+    const linked = new Set([entry]);
+    for (const path of availablePaths) {
+        const lower = normalizeExtractorPath(path);
+        if (path === entry)
+            continue;
+        // Auth / session flows: link sibling auth, session, token, user paths
+        if (isSecuritySensitivePath(normalized) && isIdentityPath(lower)) {
+            linked.add(path);
+        }
+        // Billing / payment flows: link ledger and subscription paths
+        if (isBillingPath(normalized) && isBillingPath(lower)) {
+            linked.add(path);
+        }
+        // Async / queue flows: link worker, job, retry, and task paths
+        if (isConcurrencyPath(normalized) && isAsyncTaskPath(lower)) {
+            linked.add(path);
+        }
+        // Deployment / infra flows: link docker, k8s, terraform, workflow paths
+        if (isDeploymentConfigPath(normalized) && isDeploymentConfigPath(lower)) {
+            linked.add(path);
+        }
+    }
+    return [...linked].sort((a, b) => a.localeCompare(b));
+}
+function dedupeFlows(flows) {
+    const seen = new Set();
+    const deduped = [];
+    for (const flow of flows) {
+        const signature = `${flow.name}|${[...flow.paths].sort().join(",")}|${[...flow.concerns].sort().join(",")}`;
+        if (seen.has(signature))
+            continue;
+        seen.add(signature);
+        deduped.push(flow);
+    }
+    return deduped;
+}
+/**
+ * Builds coarse critical-flow coverage from shared path heuristics. These
+ * bootstrap flows are intentionally conservative and should be reviewed when a
+ * repo uses unconventional naming or layout conventions.
+ */
+export function buildCriticalFlowManifest(repoManifest, surfaceManifest, disposition) {
+    const dispositionMap = buildDispositionMap(disposition);
+    const availablePaths = repoManifest.files
+        .map((file) => file.path)
+        .filter((path) => {
+        const status = dispositionMap.get(path);
+        return !(status && isAuditExcludedStatus(status));
+    });
+    const flows = [];
+    for (const surface of surfaceManifest.surfaces) {
+        const entry = surface.entrypoint;
+        const paths = relatedPaths(entry, availablePaths);
+        flows.push({
+            id: `flow:${surface.id.replace(/[^a-zA-Z0-9:_-]/g, "-")}`,
+            name: `${surface.kind} flow for ${entry}`,
+            entrypoints: [entry],
+            paths,
+            concerns: inferConcerns(paths),
+            confidence: paths.length > 1 ? "high" : "low",
+            notes: [EXTRACTOR_HEURISTIC_NOTE],
+        });
+    }
+    for (const path of availablePaths) {
+        const normalized = normalizeExtractorPath(path);
+        if (isDataLayerPath(normalized) &&
+            !isSchemaContractPath(normalized) &&
+            !isSupportArtifactPath(normalized)) {
+            flows.push({
+                id: `flow:data:${path.replace(/[^a-zA-Z0-9:_-]/g, "-")}`,
+                name: `data evolution flow for ${path}`,
+                entrypoints: [path],
+                paths: relatedPaths(path, availablePaths),
+                concerns: ["data_integrity", "reliability"],
+                confidence: "high",
+                notes: [EXTRACTOR_HEURISTIC_NOTE],
+            });
+        }
+    }
+    const deduped = dedupeFlows(flows);
+    return {
+        flows: deduped,
+        fallback_required: deduped.length === 0 || deduped.some((flow) => flow.confidence === "low"),
+    };
+}
+//# sourceMappingURL=flows.js.map

package/dist/audit/extractors/flows.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"flows.js","sourceRoot":"","sources":["../../../src/audit/extractors/flows.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,mBAAmB,EAAE,qBAAqB,EAAE,MAAM,kBAAkB,CAAC;AAC9E,OAAO,EACL,wBAAwB,EACxB,eAAe,EACf,aAAa,EACb,cAAc,EACd,uBAAuB,EACvB,UAAU,EACV,eAAe,EACf,iBAAiB,EACjB,eAAe,EACf,sBAAsB,EACtB,sBAAsB,GACvB,MAAM,mBAAmB,CAAC;AAE3B,SAAS,aAAa,CAAC,KAAe;IACpC,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAU,CAAC;IACnC,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,UAAU,GAAG,sBAAsB,CAAC,IAAI,CAAC,CAAC;QAChD,IAAI,uBAAuB,CAAC,UAAU,CAAC;YAAE,QAAQ,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QAClE,IAAI,eAAe,CAAC,UAAU,CAAC,IAAI,aAAa,CAAC,UAAU,CAAC;YAC1D,QAAQ,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC;QACjC,IAAI,iBAAiB,CAAC,UAAU,CAAC;YAAE,QAAQ,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;QAC/D,IAAI,eAAe,CAAC,UAAU,CAAC;YAAE,QAAQ,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;IAC/D,CAAC;IACD,OAAO,QAAQ,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC;AAC7D,CAAC;AAED,SAAS,oBAAoB,CAAC,UAAkB;IAC9C,OAAO,UAAU,CAAC,QAAQ,CAAC,cAAc,CAAC,CAAC;AAC7C,CAAC;AAED,SAAS,qBAAqB,CAAC,UAAkB;IAC/C,OAAO,UAAU,CAAC,UAAU,CAAC,IAAI,UAAU,CAAC,UAAU,CAAC,WAAW,CAAC,CAAC;AACtE,CAAC;AAED,SAAS,YAAY,CAAC,KAAa,EAAE,cAAwB;IAC3D,MAAM,UAAU,GAAG,sBAAsB,CAAC,KAAK,CAAC,CAAC;IACjD,MAAM,MAAM,GAAG,IAAI,GAAG,CAAS,CAAC,KAAK,CAAC,CAAC,CAAC;IAExC,KAAK,MAAM,IAAI,IAAI,cAAc,EAAE,CAAC;QAClC,MAAM,KAAK,GAAG,sBAAsB,CAAC,IAAI,CAAC,CAAC;QAC3C,IAAI,IAAI,KAAK,KAAK;YAAE,SAAS;QAE7B,sEAAsE;QACtE,IAAI,uBAAuB,CAAC,UAAU,CAAC,IAAI,cAAc,CAAC,KAAK,CAAC,EAAE,CAAC;YACjE,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACnB,CAAC;QAED,8DAA8D;QAC9D,IAAI,aAAa,CAAC,UAAU,CAAC,IAAI,aAAa,CAAC,KAAK,CAAC,EAAE,CAAC;YACtD,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACnB,CAAC;QAED,+DAA+D;QAC/D,IAAI,iBAAiB,CAAC,UAAU,CAAC,IAAI,eAAe,CAAC,KAAK,CAAC,EAAE,CAAC;YAC5D,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACnB,CAAC;QAED,wEAAwE;QACxE,IAAI,sBAAsB,CAAC,UAAU,CAAC,IAAI,sBAAsB,CAAC,KAAK,CAAC,EAAE,CAAC;YACxE,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACnB,CAAC;IACH,CAAC;IAED,OAAO,CAAC,GAAG,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC;AACxD,CAAC;AAED,SAAS,WAAW,CAAC,KAAqB;IACxC,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,MAAM,OAAO,GAAmB,EAAE,CAAC;IACnC,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,SAAS,GAAG,GAAG,IAAI,CAAC,IAAI,IAAI,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;QAC5G,IAAI,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC;YAAE,SAAS;QAClC,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QACpB,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACrB,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,yBAAyB,CACvC,YAA0B,EAC1B,eAAgC,EAChC,WAA6B;IAE7B,MAAM,cAAc,GAAG,mBAAmB,CAAC,WAAW,CAAC,CAAC;IACxD,MAAM,cAAc,GAAG,YAAY,CAAC,KAAK;SACtC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC;SACxB,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE;QACf,MAAM,MAAM,GAAG,cAAc,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACxC,OAAO,CAAC,CAAC,MAAM,IAAI,qBAAqB,CAAC,MAAM,CAAC,CAAC,CAAC;IACpD,CAAC,CAAC,CAAC;IAEL,MAAM,KAAK,GAAmB,EAAE,CAAC;IAEjC,KAAK,MAAM,OAAO,IAAI,eAAe,CAAC,QAAQ,EAAE,CAAC;QAC/C,MAAM,KAAK,GAAG,OAAO,CAAC,UAAU,CAAC;QACjC,MAAM,KAAK,GAAG,YAAY,CAAC,KAAK,EAAE,cAAc,CAAC,CAAC;QAClD,KAAK,CAAC,IAAI,CAAC;YACT,EAAE,EAAE,QAAQ,OAAO,CAAC,EAAE,CAAC,OAAO,CAAC,kBAAkB,EAAE,GAAG,CAAC,EAAE;YACzD,IAAI,EAAE,GAAG,OAAO,CAAC,IAAI,aAAa,KAAK,EAAE;YACzC,WAAW,EAAE,CAAC,KAAK,CAAC;YACpB,KAAK;YACL,QAAQ,EAAE,aAAa,CAAC,KAAK,CAAC;YAC9B,UAAU,EAAE,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK;YAC7C,KAAK,EAAE,CAAC,wBAAwB,CAAC;SAClC,CAAC,CAAC;IACL,CAAC;IAED,KAAK,MAAM,IAAI,IAAI,cAAc,EAAE,CAAC;QAClC,MAAM,UAAU,GAAG,sBAAsB,CAAC,IAAI,CAAC,CAAC;QAChD,IACE,eAAe,CAAC,UAAU,CAAC;YAC3B,CAAC,oBAAoB,CAAC,UAAU,CAAC;YACjC,CAAC,qBAAqB,CAAC,UAAU,CAAC,EAClC,CAAC;YACD,KAAK,CAAC,IAAI,CAAC;gBACT,EAAE,EAAE,aAAa,IAAI,CAAC,OAAO,CAAC,kBAAkB,EAAE,GAAG,CAAC,EAAE;gBACxD,IAAI,EAAE,2BAA2B,IAAI,EAAE;gBACvC,WAAW,EAAE,CAAC,IAAI,CAAC;gBACnB,KAAK,EAAE,YAAY,CAAC,IAAI,EAAE,cAAc,CAAC;gBACzC,QAAQ,EAAE,CAAC,gBAAgB,EAAE,aAAa,CAAC;gBAC3C,UAAU,EAAE,MAAM;gBAClB,KAAK,EAAE,CAAC,wBAAwB,CAAC;aAClC,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,MAAM,OAAO,GAAG,WAAW,CAAC,KAAK,CAAC,CAAC;IACnC,OAAO;QACL,KAAK,EAAE,OAAO;QACd,iBAAiB,EACf,OAAO,CAAC,MAAM,KAAK,CAAC,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,UAAU,KAAK,KAAK,CAAC;KAC5E,CAAC;AACJ,CAAC"}

package/dist/audit/extractors/fsIntake.d.ts

@@ -0,0 +1,9 @@
+import type { RepoManifest } from "../types.js";
+export interface IntakeOptions {
+    root: string;
+    ignore?: string[];
+    hash_files?: boolean;
+    max_file_size_bytes?: number;
+}
+export declare function buildRepoManifestFromFs(options: IntakeOptions): Promise<RepoManifest>;
+//# sourceMappingURL=fsIntake.d.ts.map

package/dist/audit/extractors/fsIntake.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"fsIntake.d.ts","sourceRoot":"","sources":["../../../src/audit/extractors/fsIntake.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAGhD,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;IAClB,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,mBAAmB,CAAC,EAAE,MAAM,CAAC;CAC9B;AA2GD,wBAAsB,uBAAuB,CAC3C,OAAO,EAAE,aAAa,GACrB,OAAO,CAAC,YAAY,CAAC,CAavB"}

package/dist/audit/extractors/fsIntake.js

@@ -0,0 +1,95 @@
+import { readdir, readFile, stat } from "node:fs/promises";
+import { hashContent } from "audit-tools/shared";
+import { join, relative, resolve } from "node:path";
+import { buildRepoManifest } from "./fileInventory.js";
+const DEFAULT_IGNORES = [
+    ".git",
+    "node_modules",
+    "dist",
+    "build",
+    ".next",
+    ".turbo",
+    ".artifacts",
+    ".audit-tools",
+    ".audit-code/install",
+    ".agent",
+    ".claude",
+    "coverage",
+];
+function normalizePath(path) {
+    return path.replaceAll("\\", "/");
+}
+function shouldIgnore(relativePath, ignores) {
+    const normalized = normalizePath(relativePath);
+    return ignores.some((ignore) => {
+        const value = normalizePath(ignore);
+        return (normalized === value ||
+            normalized.startsWith(`${value}/`) ||
+            normalized.includes(`/${value}/`) ||
+            normalized.endsWith(`/${value}`));
+    });
+}
+async function maybeHashFile(path, enabled) {
+    if (!enabled)
+        return undefined;
+    const content = await readFile(path);
+    return hashContent(content);
+}
+async function walk(ctx, current, results) {
+    let entries;
+    try {
+        entries = await readdir(current, { withFileTypes: true });
+    }
+    catch (err) {
+        console.warn(`[fsIntake] skipping unreadable directory: ${current} (${err.message})`);
+        return;
+    }
+    for (const entry of entries) {
+        const absolutePath = join(current, entry.name);
+        const relativePath = normalizePath(relative(ctx.root, absolutePath));
+        if (!relativePath || shouldIgnore(relativePath, ctx.ignores)) {
+            continue;
+        }
+        if (entry.isDirectory()) {
+            await walk(ctx, absolutePath, results);
+            continue;
+        }
+        if (!entry.isFile()) {
+            continue;
+        }
+        let info;
+        try {
+            info = await stat(absolutePath);
+        }
+        catch (err) {
+            console.warn(`[fsIntake] skipping unreadable file: ${relativePath} (${err.message})`);
+            continue;
+        }
+        let hash;
+        if (info.size <= ctx.maxFileSizeBytes) {
+            hash = await maybeHashFile(absolutePath, ctx.hashFiles);
+        }
+        else {
+            console.warn(`[fsIntake] skipping oversized file: ${relativePath} (${info.size} bytes > ${ctx.maxFileSizeBytes} limit)`);
+        }
+        results.push({
+            path: relativePath,
+            size_bytes: info.size,
+            hash,
+        });
+    }
+}
+export async function buildRepoManifestFromFs(options) {
+    const root = resolve(options.root);
+    const ignore = [...DEFAULT_IGNORES, ...(options.ignore ?? [])];
+    const files = [];
+    const ctx = {
+        root,
+        ignores: ignore,
+        hashFiles: options.hash_files ?? false,
+        maxFileSizeBytes: options.max_file_size_bytes ?? 1024 * 1024,
+    };
+    await walk(ctx, root, files);
+    return buildRepoManifest(root.split(/[\\/]/).pop() ?? "repo", files);
+}
+//# sourceMappingURL=fsIntake.js.map

package/dist/audit/extractors/fsIntake.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"fsIntake.js","sourceRoot":"","sources":["../../../src/audit/extractors/fsIntake.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAC;AAC3D,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AACjD,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAEpD,OAAO,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAC;AASvD,MAAM,eAAe,GAAG;IACtB,MAAM;IACN,cAAc;IACd,MAAM;IACN,OAAO;IACP,OAAO;IACP,QAAQ;IACR,YAAY;IACZ,cAAc;IACd,qBAAqB;IACrB,QAAQ;IACR,SAAS;IACT,UAAU;CACX,CAAC;AAEF,SAAS,aAAa,CAAC,IAAY;IACjC,OAAO,IAAI,CAAC,UAAU,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;AACpC,CAAC;AAED,SAAS,YAAY,CAAC,YAAoB,EAAE,OAAiB;IAC3D,MAAM,UAAU,GAAG,aAAa,CAAC,YAAY,CAAC,CAAC;IAC/C,OAAO,OAAO,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE;QAC7B,MAAM,KAAK,GAAG,aAAa,CAAC,MAAM,CAAC,CAAC;QACpC,OAAO,CACL,UAAU,KAAK,KAAK;YACpB,UAAU,CAAC,UAAU,CAAC,GAAG,KAAK,GAAG,CAAC;YAClC,UAAU,CAAC,QAAQ,CAAC,IAAI,KAAK,GAAG,CAAC;YACjC,UAAU,CAAC,QAAQ,CAAC,IAAI,KAAK,EAAE,CAAC,CACjC,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC;AAED,KAAK,UAAU,aAAa,CAC1B,IAAY,EACZ,OAAgB;IAEhB,IAAI,CAAC,OAAO;QAAE,OAAO,SAAS,CAAC;IAC/B,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,CAAC;IACrC,OAAO,WAAW,CAAC,OAAO,CAAC,CAAC;AAC9B,CAAC;AASD,KAAK,UAAU,IAAI,CACjB,GAAgB,EAChB,OAAe,EACf,OAAmE;IAEnE,IAAI,OAAO,CAAC;IACZ,IAAI,CAAC;QACH,OAAO,GAAG,MAAM,OAAO,CAAC,OAAO,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;IAC5D,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,CAAC,IAAI,CACV,6CAA6C,OAAO,KAAM,GAAa,CAAC,OAAO,GAAG,CACnF,CAAC;QACF,OAAO;IACT,CAAC;IAED,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAC5B,MAAM,YAAY,GAAG,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;QAC/C,MAAM,YAAY,GAAG,aAAa,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,EAAE,YAAY,CAAC,CAAC,CAAC;QACrE,IAAI,CAAC,YAAY,IAAI,YAAY,CAAC,YAAY,EAAE,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;YAC7D,SAAS;QACX,CAAC;QAED,IAAI,KAAK,CAAC,WAAW,EAAE,EAAE,CAAC;YACxB,MAAM,IAAI,CAAC,GAAG,EAAE,YAAY,EAAE,OAAO,CAAC,CAAC;YACvC,SAAS;QACX,CAAC;QAED,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC;YACpB,SAAS;QACX,CAAC;QAED,IAAI,IAAI,CAAC;QACT,IAAI,CAAC;YACH,IAAI,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,CAAC;QAClC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,CAAC,IAAI,CACV,wCAAwC,YAAY,KAAM,GAAa,CAAC,OAAO,GAAG,CACnF,CAAC;YACF,SAAS;QACX,CAAC;QAED,IAAI,IAAwB,CAAC;QAC7B,IAAI,IAAI,CAAC,IAAI,IAAI,GAAG,CAAC,gBAAgB,EAAE,CAAC;YACtC,IAAI,GAAG,MAAM,aAAa,CAAC,YAAY,EAAE,GAAG,CAAC,SAAS,CAAC,CAAC;QAC1D,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,IAAI,CACV,uCAAuC,YAAY,KAAK,IAAI,CAAC,IAAI,YAAY,GAAG,CAAC,gBAAgB,SAAS,CAC3G,CAAC;QACJ,CAAC;QACD,OAAO,CAAC,IAAI,CAAC;YACX,IAAI,EAAE,YAAY;YAClB,UAAU,EAAE,IAAI,CAAC,IAAI;YACrB,IAAI;SACL,CAAC,CAAC;IACL,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAC3C,OAAsB;IAEtB,MAAM,IAAI,GAAG,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IACnC,MAAM,MAAM,GAAG,CAAC,GAAG,eAAe,EAAE,GAAG,CAAC,OAAO,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,CAAC;IAC/D,MAAM,KAAK,GAA+D,EAAE,CAAC;IAE7E,MAAM,GAAG,GAAgB;QACvB,IAAI;QACJ,OAAO,EAAE,MAAM;QACf,SAAS,EAAE,OAAO,CAAC,UAAU,IAAI,KAAK;QACtC,gBAAgB,EAAE,OAAO,CAAC,mBAAmB,IAAI,IAAI,GAAG,IAAI;KAC7D,CAAC;IACF,MAAM,IAAI,CAAC,GAAG,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;IAC7B,OAAO,iBAAiB,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,GAAG,EAAE,IAAI,MAAM,EAAE,KAAK,CAAC,CAAC;AACvE,CAAC"}

package/dist/audit/extractors/graph.d.ts

@@ -0,0 +1,11 @@
+import type { RepoManifest } from "../types.js";
+import type { FileDisposition, GraphBundle } from "audit-tools/shared";
+import type { ExternalAnalyzerResults } from "../types/externalAnalyzer.js";
+export interface BuildGraphBundleOptions {
+    fileContents?: Record<string, string>;
+    externalAnalyzerResults?: ExternalAnalyzerResults;
+}
+export declare function buildPathLookup(repoManifest: RepoManifest, dispositionMap: Map<string, FileDisposition["files"][number]["status"]>): Map<string, string>;
+export declare function buildGraphBundleFromFs(repoManifest: RepoManifest, root: string, disposition?: FileDisposition, options?: Pick<BuildGraphBundleOptions, "externalAnalyzerResults">): Promise<GraphBundle>;
+export declare function buildGraphBundle(repoManifest: RepoManifest, disposition?: FileDisposition, options?: BuildGraphBundleOptions): GraphBundle;
+//# sourceMappingURL=graph.d.ts.map

package/dist/audit/extractors/graph.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"graph.d.ts","sourceRoot":"","sources":["../../../src/audit/extractors/graph.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAChD,OAAO,KAAK,EAAE,eAAe,EAAE,WAAW,EAAwB,MAAM,oBAAoB,CAAC;AAC7F,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,8BAA8B,CAAC;AAgD5E,MAAM,WAAW,uBAAuB;IACtC,YAAY,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACtC,uBAAuB,CAAC,EAAE,uBAAuB,CAAC;CACnD;AAgED,wBAAgB,eAAe,CAC7B,YAAY,EAAE,YAAY,EAC1B,cAAc,EAAE,GAAG,CAAC,MAAM,EAAE,eAAe,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,CAAC,GACtE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CASrB;AA2PD,wBAAsB,sBAAsB,CAC1C,YAAY,EAAE,YAAY,EAC1B,IAAI,EAAE,MAAM,EACZ,WAAW,CAAC,EAAE,eAAe,EAC7B,OAAO,GAAE,IAAI,CAAC,uBAAuB,EAAE,yBAAyB,CAAM,GACrE,OAAO,CAAC,WAAW,CAAC,CA4CtB;AAmND,wBAAgB,gBAAgB,CAC9B,YAAY,EAAE,YAAY,EAC1B,WAAW,CAAC,EAAE,eAAe,EAC7B,OAAO,GAAE,uBAA4B,GACpC,WAAW,CAmDb"}