audit-tools 0.28.0

package/dist/audit/extractors/graphPathUtils.js

@@ -0,0 +1,174 @@
+import { posix } from "node:path";
+const RESOLVABLE_EXTENSIONS = [
+    "",
+    ".ts",
+    ".tsx",
+    ".mts",
+    ".cts",
+    ".js",
+    ".jsx",
+    ".mjs",
+    ".cjs",
+    ".json",
+    ".py",
+    ".pyi",
+];
+const INDEX_EXTENSIONS = [
+    "index.ts",
+    "index.tsx",
+    "index.mts",
+    "index.cts",
+    "index.js",
+    "index.jsx",
+    "index.mjs",
+    "index.cjs",
+    "index.json",
+    "__init__.py",
+    "__init__.pyi",
+];
+const RUNTIME_SOURCE_EXTENSION_ALIASES = {
+    ".js": [".ts", ".tsx", ".jsx"],
+    ".mjs": [".mts"],
+    ".cjs": [".cts"],
+};
+export function normalizeGraphPath(path) {
+    return posix
+        .normalize(path.replace(/\\/g, "/"))
+        .replace(/^\.\//, "");
+}
+export function graphLookupKey(path) {
+    return normalizeGraphPath(path).toLowerCase();
+}
+export function resolveCandidate(candidate, pathLookup) {
+    const normalized = normalizeGraphPath(candidate);
+    const direct = pathLookup.get(normalized.toLowerCase());
+    if (direct)
+        return direct;
+    const runtimeExtension = posix.extname(normalized).toLowerCase();
+    const sourceExtensionAliases = RUNTIME_SOURCE_EXTENSION_ALIASES[runtimeExtension];
+    if (sourceExtensionAliases) {
+        const withoutRuntimeExtension = normalized.slice(0, -runtimeExtension.length);
+        for (const sourceExtension of sourceExtensionAliases) {
+            const match = pathLookup.get(`${withoutRuntimeExtension}${sourceExtension}`.toLowerCase());
+            if (match)
+                return match;
+        }
+    }
+    for (const extension of RESOLVABLE_EXTENSIONS) {
+        const withExtension = `${normalized}${extension}`;
+        const match = pathLookup.get(withExtension.toLowerCase());
+        if (match)
+            return match;
+    }
+    for (const indexFile of INDEX_EXTENSIONS) {
+        const match = pathLookup.get(posix.join(normalized, indexFile).toLowerCase());
+        if (match)
+            return match;
+    }
+    return undefined;
+}
+export function graphEdge(params) {
+    return {
+        ...params,
+        direction: params.direction ?? "directed",
+    };
+}
+// ---- Cross-cluster shared helpers ----
+// These are used by more than one graph extractor cluster (import/reference
+// edges, routes, schemas, suites, test-source). They live here so each
+// extractor module imports one implementation rather than re-forking it.
+/** Source file extensions the graph extractors read and reason about. */
+export const SOURCE_EXTENSIONS = [
+    ".ts",
+    ".tsx",
+    ".mts",
+    ".cts",
+    ".js",
+    ".jsx",
+    ".mjs",
+    ".cjs",
+    ".json",
+    ".html",
+    ".htm",
+    ".yml",
+    ".yaml",
+    ".py",
+    ".pyi",
+    ".go",
+    ".rs",
+    ".java",
+    ".cs",
+];
+/** Matches any single/double/back-quoted string literal (bounded length). */
+export const STRING_LITERAL_PATTERN = /["'`]([^"'`\r\n]{1,260})["'`]/g;
+/** Resolve a relative import specifier to a repository path, if one exists. */
+export function resolveSpecifier(fromPath, specifier, pathLookup) {
+    if (!specifier.startsWith(".")) {
+        return undefined;
+    }
+    const baseDir = posix.dirname(normalizeGraphPath(fromPath));
+    return resolveCandidate(posix.join(baseDir, specifier), pathLookup);
+}
+/** Resolve a string literal (relative or repo-rooted) to a repository path. */
+export function resolveReferenceLiteral(fromPath, literal, pathLookup) {
+    const normalizedLiteral = normalizeGraphPath(literal);
+    if (literal.startsWith(".")) {
+        return resolveSpecifier(fromPath, literal, pathLookup);
+    }
+    if (!normalizedLiteral.includes("/")) {
+        return undefined;
+    }
+    return resolveCandidate(normalizedLiteral, pathLookup);
+}
+/** True for `*.schema.json` files (JSON Schema documents). */
+export function isJsonSchemaPath(path) {
+    return posix
+        .basename(normalizeGraphPath(path))
+        .toLowerCase()
+        .endsWith(".schema.json");
+}
+/** True for pytest `conftest.py` files. */
+export function isPytestConftestPath(path) {
+    return posix.basename(normalizeGraphPath(path)).toLowerCase() === "conftest.py";
+}
+// ---- Build-manifest path predicates ----
+// One canonical set, shared by the graph manifest-edge extractor and the
+// packetizer. Each preserves path case (so distinct files differing only by
+// case are never collapsed) and matches the manifest filename
+// case-insensitively, since manifest names are conventionally lowercase.
+/** True for `package.json` files. */
+export function isPackageManifestPath(path) {
+    return posix.basename(normalizeGraphPath(path)).toLowerCase() === "package.json";
+}
+/** True for `tsconfig.json` / `tsconfig.<name>.json` project config files. */
+export function isTypescriptProjectConfigPath(path) {
+    const basename = posix.basename(normalizeGraphPath(path)).toLowerCase();
+    return (basename === "tsconfig.json" ||
+        (basename.startsWith("tsconfig.") && basename.endsWith(".json")));
+}
+/** True for Go `go.mod` module manifests. */
+export function isGoModuleManifestPath(path) {
+    return posix.basename(normalizeGraphPath(path)).toLowerCase() === "go.mod";
+}
+/** True for Go `go.work` workspace manifests. */
+export function isGoWorkspaceManifestPath(path) {
+    return posix.basename(normalizeGraphPath(path)).toLowerCase() === "go.work";
+}
+/** True for Rust `Cargo.toml` manifests. */
+export function isCargoManifestPath(path) {
+    return posix.basename(normalizeGraphPath(path)).toLowerCase() === "cargo.toml";
+}
+/** True for Maven `pom.xml` manifests. */
+export function isMavenPomPath(path) {
+    return posix.basename(normalizeGraphPath(path)).toLowerCase() === "pom.xml";
+}
+/** True for Python `pyproject.toml` manifests. */
+export function isPyprojectPath(path) {
+    return posix.basename(normalizeGraphPath(path)).toLowerCase() === "pyproject.toml";
+}
+/** True for `pnpm-workspace.yaml` workspace manifests. */
+export function isPnpmWorkspaceManifestPath(path) {
+    return (posix.basename(normalizeGraphPath(path)).toLowerCase() ===
+        "pnpm-workspace.yaml");
+}
+//# sourceMappingURL=graphPathUtils.js.map

package/dist/audit/extractors/graphPathUtils.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"graphPathUtils.js","sourceRoot":"","sources":["../../../src/audit/extractors/graphPathUtils.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,WAAW,CAAC;AAGlC,MAAM,qBAAqB,GAAG;IAC5B,EAAE;IACF,KAAK;IACL,MAAM;IACN,MAAM;IACN,MAAM;IACN,KAAK;IACL,MAAM;IACN,MAAM;IACN,MAAM;IACN,OAAO;IACP,KAAK;IACL,MAAM;CACE,CAAC;AAEX,MAAM,gBAAgB,GAAG;IACvB,UAAU;IACV,WAAW;IACX,WAAW;IACX,WAAW;IACX,UAAU;IACV,WAAW;IACX,WAAW;IACX,WAAW;IACX,YAAY;IACZ,aAAa;IACb,cAAc;CACN,CAAC;AAEX,MAAM,gCAAgC,GAAsC;IAC1E,KAAK,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,CAAC;IAC9B,MAAM,EAAE,CAAC,MAAM,CAAC;IAChB,MAAM,EAAE,CAAC,MAAM,CAAC;CACjB,CAAC;AAEF,MAAM,UAAU,kBAAkB,CAAC,IAAY;IAC7C,OAAO,KAAK;SACT,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;SACnC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;AAC1B,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,IAAY;IACzC,OAAO,kBAAkB,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE,CAAC;AAChD,CAAC;AAED,MAAM,UAAU,gBAAgB,CAC9B,SAAiB,EACjB,UAA+B;IAE/B,MAAM,UAAU,GAAG,kBAAkB,CAAC,SAAS,CAAC,CAAC;IACjD,MAAM,MAAM,GAAG,UAAU,CAAC,GAAG,CAAC,UAAU,CAAC,WAAW,EAAE,CAAC,CAAC;IACxD,IAAI,MAAM;QAAE,OAAO,MAAM,CAAC;IAE1B,MAAM,gBAAgB,GAAG,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,WAAW,EAAE,CAAC;IACjE,MAAM,sBAAsB,GAC1B,gCAAgC,CAAC,gBAAgB,CAAC,CAAC;IACrD,IAAI,sBAAsB,EAAE,CAAC;QAC3B,MAAM,uBAAuB,GAAG,UAAU,CAAC,KAAK,CAC9C,CAAC,EACD,CAAC,gBAAgB,CAAC,MAAM,CACzB,CAAC;QACF,KAAK,MAAM,eAAe,IAAI,sBAAsB,EAAE,CAAC;YACrD,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,CAC1B,GAAG,uBAAuB,GAAG,eAAe,EAAE,CAAC,WAAW,EAAE,CAC7D,CAAC;YACF,IAAI,KAAK;gBAAE,OAAO,KAAK,CAAC;QAC1B,CAAC;IACH,CAAC;IAED,KAAK,MAAM,SAAS,IAAI,qBAAqB,EAAE,CAAC;QAC9C,MAAM,aAAa,GAAG,GAAG,UAAU,GAAG,SAAS,EAAE,CAAC;QAClD,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,CAAC,aAAa,CAAC,WAAW,EAAE,CAAC,CAAC;QAC1D,IAAI,KAAK;YAAE,OAAO,KAAK,CAAC;IAC1B,CAAC;IAED,KAAK,MAAM,SAAS,IAAI,gBAAgB,EAAE,CAAC;QACzC,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,CAC1B,KAAK,CAAC,IAAI,CAAC,UAAU,EAAE,SAAS,CAAC,CAAC,WAAW,EAAE,CAChD,CAAC;QACF,IAAI,KAAK;YAAE,OAAO,KAAK,CAAC;IAC1B,CAAC;IAED,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,MAAM,UAAU,SAAS,CAAC,MAAiB;IACzC,OAAO;QACL,GAAG,MAAM;QACT,SAAS,EAAE,MAAM,CAAC,SAAS,IAAI,UAAU;KAC1C,CAAC;AACJ,CAAC;AAED,yCAAyC;AACzC,4EAA4E;AAC5E,uEAAuE;AACvE,yEAAyE;AAEzE,yEAAyE;AACzE,MAAM,CAAC,MAAM,iBAAiB,GAAG;IAC/B,KAAK;IACL,MAAM;IACN,MAAM;IACN,MAAM;IACN,KAAK;IACL,MAAM;IACN,MAAM;IACN,MAAM;IACN,OAAO;IACP,OAAO;IACP,MAAM;IACN,MAAM;IACN,OAAO;IACP,KAAK;IACL,MAAM;IACN,KAAK;IACL,KAAK;IACL,OAAO;IACP,KAAK;CACG,CAAC;AAEX,6EAA6E;AAC7E,MAAM,CAAC,MAAM,sBAAsB,GAAG,gCAAgC,CAAC;AAEvE,+EAA+E;AAC/E,MAAM,UAAU,gBAAgB,CAC9B,QAAgB,EAChB,SAAiB,EACjB,UAA+B;IAE/B,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QAC/B,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,kBAAkB,CAAC,QAAQ,CAAC,CAAC,CAAC;IAC5D,OAAO,gBAAgB,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,SAAS,CAAC,EAAE,UAAU,CAAC,CAAC;AACtE,CAAC;AAED,+EAA+E;AAC/E,MAAM,UAAU,uBAAuB,CACrC,QAAgB,EAChB,OAAe,EACf,UAA+B;IAE/B,MAAM,iBAAiB,GAAG,kBAAkB,CAAC,OAAO,CAAC,CAAC;IACtD,IAAI,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QAC5B,OAAO,gBAAgB,CAAC,QAAQ,EAAE,OAAO,EAAE,UAAU,CAAC,CAAC;IACzD,CAAC;IACD,IAAI,CAAC,iBAAiB,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;QACrC,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,OAAO,gBAAgB,CAAC,iBAAiB,EAAE,UAAU,CAAC,CAAC;AACzD,CAAC;AAED,8DAA8D;AAC9D,MAAM,UAAU,gBAAgB,CAAC,IAAY;IAC3C,OAAO,KAAK;SACT,QAAQ,CAAC,kBAAkB,CAAC,IAAI,CAAC,CAAC;SAClC,WAAW,EAAE;SACb,QAAQ,CAAC,cAAc,CAAC,CAAC;AAC9B,CAAC;AAED,2CAA2C;AAC3C,MAAM,UAAU,oBAAoB,CAAC,IAAY;IAC/C,OAAO,KAAK,CAAC,QAAQ,CAAC,kBAAkB,CAAC,IAAI,CAAC,CAAC,CAAC,WAAW,EAAE,KAAK,aAAa,CAAC;AAClF,CAAC;AAED,2CAA2C;AAC3C,yEAAyE;AACzE,4EAA4E;AAC5E,8DAA8D;AAC9D,yEAAyE;AAEzE,qCAAqC;AACrC,MAAM,UAAU,qBAAqB,CAAC,IAAY;IAChD,OAAO,KAAK,CAAC,QAAQ,CAAC,kBAAkB,CAAC,IAAI,CAAC,CAAC,CAAC,WAAW,EAAE,KAAK,cAAc,CAAC;AACnF,CAAC;AAED,8EAA8E;AAC9E,MAAM,UAAU,6BAA6B,CAAC,IAAY;IACxD,MAAM,QAAQ,GAAG,KAAK,CAAC,QAAQ,CAAC,kBAAkB,CAAC,IAAI,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC;IACxE,OAAO,CACL,QAAQ,KAAK,eAAe;QAC5B,CAAC,QAAQ,CAAC,UAAU,CAAC,WAAW,CAAC,IAAI,QAAQ,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CACjE,CAAC;AACJ,CAAC;AAED,6CAA6C;AAC7C,MAAM,UAAU,sBAAsB,CAAC,IAAY;IACjD,OAAO,KAAK,CAAC,QAAQ,CAAC,kBAAkB,CAAC,IAAI,CAAC,CAAC,CAAC,WAAW,EAAE,KAAK,QAAQ,CAAC;AAC7E,CAAC;AAED,iDAAiD;AACjD,MAAM,UAAU,yBAAyB,CAAC,IAAY;IACpD,OAAO,KAAK,CAAC,QAAQ,CAAC,kBAAkB,CAAC,IAAI,CAAC,CAAC,CAAC,WAAW,EAAE,KAAK,SAAS,CAAC;AAC9E,CAAC;AAED,4CAA4C;AAC5C,MAAM,UAAU,mBAAmB,CAAC,IAAY;IAC9C,OAAO,KAAK,CAAC,QAAQ,CAAC,kBAAkB,CAAC,IAAI,CAAC,CAAC,CAAC,WAAW,EAAE,KAAK,YAAY,CAAC;AACjF,CAAC;AAED,0CAA0C;AAC1C,MAAM,UAAU,cAAc,CAAC,IAAY;IACzC,OAAO,KAAK,CAAC,QAAQ,CAAC,kBAAkB,CAAC,IAAI,CAAC,CAAC,CAAC,WAAW,EAAE,KAAK,SAAS,CAAC;AAC9E,CAAC;AAED,kDAAkD;AAClD,MAAM,UAAU,eAAe,CAAC,IAAY;IAC1C,OAAO,KAAK,CAAC,QAAQ,CAAC,kBAAkB,CAAC,IAAI,CAAC,CAAC,CAAC,WAAW,EAAE,KAAK,gBAAgB,CAAC;AACrF,CAAC;AAED,0DAA0D;AAC1D,MAAM,UAAU,2BAA2B,CAAC,IAAY;IACtD,OAAO,CACL,KAAK,CAAC,QAAQ,CAAC,kBAAkB,CAAC,IAAI,CAAC,CAAC,CAAC,WAAW,EAAE;QACtD,qBAAqB,CACtB,CAAC;AACJ,CAAC"}

package/dist/audit/extractors/graphPythonImports.d.ts

@@ -0,0 +1,19 @@
+import type { GraphEdge } from "audit-tools/shared";
+export declare function isPythonSourcePath(path: string): boolean;
+/**
+ * Resolve a single `import <spec>` module specifier to a repo file, or
+ * undefined. Shared with the tree-sitter Python analyzer so AST-extracted
+ * imports resolve to exactly the same targets as the regex floor.
+ */
+export declare function resolvePythonImportTarget(fromPath: string, specifier: string, pathLookup: Map<string, string>): string | undefined;
+/**
+ * Resolve a `from <module> import <names>` statement to repo files. Mirrors the
+ * floor: prefer submodule files (`module.name`), else the module itself. Shared
+ * with the tree-sitter Python analyzer.
+ */
+export declare function resolvePythonFromImportTargets(fromPath: string, moduleSpecifier: string, importedNames: string[], pathLookup: Map<string, string>): Array<{
+    specifier: string;
+    target: string;
+}>;
+export declare function extractPythonImportEdges(fromPath: string, content: string, pathLookup: Map<string, string>): GraphEdge[];
+//# sourceMappingURL=graphPythonImports.d.ts.map

package/dist/audit/extractors/graphPythonImports.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"graphPythonImports.d.ts","sourceRoot":"","sources":["../../../src/audit/extractors/graphPythonImports.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAkBpD,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAKxD;AAwTD;;;;GAIG;AACH,wBAAgB,yBAAyB,CACvC,QAAQ,EAAE,MAAM,EAChB,SAAS,EAAE,MAAM,EACjB,UAAU,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,GAC9B,MAAM,GAAG,SAAS,CAKpB;AAED;;;;GAIG;AACH,wBAAgB,8BAA8B,CAC5C,QAAQ,EAAE,MAAM,EAChB,eAAe,EAAE,MAAM,EACvB,aAAa,EAAE,MAAM,EAAE,EACvB,UAAU,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,GAC9B,KAAK,CAAC;IAAE,SAAS,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC,CA0B9C;AAED,wBAAgB,wBAAwB,CACtC,QAAQ,EAAE,MAAM,EAChB,OAAO,EAAE,MAAM,EACf,UAAU,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,GAC9B,SAAS,EAAE,CA2Cb"}

package/dist/audit/extractors/graphPythonImports.js

@@ -0,0 +1,318 @@
+import { posix } from "node:path";
+import { scanStringAware } from "audit-tools/shared";
+import { graphEdge, normalizeGraphPath, resolveCandidate, } from "./graphPathUtils.js";
+// Python allows backslash escapes in both single- and double-quoted strings.
+const PYTHON_SCAN_OPTIONS = {
+    quoteChars: ['"', "'"],
+    escapedQuotes: ['"', "'"],
+};
+const PYTHON_SOURCE_EXTENSIONS = [".py", ".pyi"];
+const PYTHON_PACKAGE_INDEX_FILES = ["__init__.py", "__init__.pyi"];
+const IMPORT_EDGE_CONFIDENCE = 0.95;
+export function isPythonSourcePath(path) {
+    const normalized = normalizeGraphPath(path).toLowerCase();
+    return PYTHON_SOURCE_EXTENSIONS.some((extension) => normalized.endsWith(extension));
+}
+function stripPythonLineComment(line) {
+    let commentIndex;
+    scanStringAware(line, PYTHON_SCAN_OPTIONS, {
+        onUnquoted(char, i) {
+            if (char === "#") {
+                commentIndex = i;
+                return false;
+            }
+        },
+    });
+    return commentIndex !== undefined ? line.slice(0, commentIndex) : line;
+}
+function pythonParenDelta(line) {
+    let delta = 0;
+    scanStringAware(line, PYTHON_SCAN_OPTIONS, {
+        onUnquoted(char) {
+            if (char === "(") {
+                delta += 1;
+            }
+            else if (char === ")") {
+                delta -= 1;
+            }
+        },
+    });
+    return delta;
+}
+function pythonLogicalLines(content) {
+    const logicalLines = [];
+    let pending = "";
+    let parenDepth = 0;
+    for (const rawLine of content.split(/\r?\n/)) {
+        const stripped = stripPythonLineComment(rawLine).trim();
+        if (stripped.length === 0) {
+            continue;
+        }
+        if (pending.length === 0 && !/^(?:import|from)\s+/i.test(stripped)) {
+            continue;
+        }
+        const continued = stripped.endsWith("\\");
+        const line = continued ? stripped.slice(0, -1).trimEnd() : stripped;
+        pending = pending.length > 0 ? `${pending} ${line}` : line;
+        parenDepth = Math.max(0, parenDepth + pythonParenDelta(line));
+        if (!continued && parenDepth <= 0) {
+            logicalLines.push(pending.replace(/\s+/g, " ").trim());
+            pending = "";
+            parenDepth = 0;
+        }
+    }
+    if (pending.length > 0) {
+        logicalLines.push(pending.replace(/\s+/g, " ").trim());
+    }
+    return logicalLines;
+}
+function unwrapPythonImportList(value) {
+    let trimmed = value.trim();
+    if (trimmed.startsWith("(") && trimmed.endsWith(")")) {
+        trimmed = trimmed.slice(1, -1).trim();
+    }
+    return trimmed;
+}
+function splitPythonImportList(value) {
+    const items = [];
+    let current = "";
+    let quote;
+    let escaped = false;
+    let parenDepth = 0;
+    for (const char of unwrapPythonImportList(value)) {
+        if (escaped) {
+            current += char;
+            escaped = false;
+            continue;
+        }
+        if (quote) {
+            current += char;
+            if (char === "\\") {
+                escaped = true;
+            }
+            else if (char === quote) {
+                quote = undefined;
+            }
+            continue;
+        }
+        if (char === "'" || char === '"') {
+            current += char;
+            quote = char;
+            continue;
+        }
+        if (char === "(") {
+            parenDepth += 1;
+            current += char;
+            continue;
+        }
+        if (char === ")") {
+            parenDepth -= 1;
+            current += char;
+            continue;
+        }
+        if (char === "," && parenDepth === 0) {
+            const item = current.trim();
+            if (item.length > 0) {
+                items.push(item);
+            }
+            current = "";
+            continue;
+        }
+        current += char;
+    }
+    const item = current.trim();
+    if (item.length > 0) {
+        items.push(item);
+    }
+    return items;
+}
+function stripPythonAlias(value) {
+    return value.replace(/\s+as\s+[A-Za-z_]\w*$/i, "").trim();
+}
+function isPythonIdentifier(value) {
+    return /^[A-Za-z_]\w*$/.test(value);
+}
+function isPythonAbsoluteModuleSpecifier(value) {
+    return /^[A-Za-z_]\w*(?:\.[A-Za-z_]\w*)*$/.test(value);
+}
+function isPythonRelativeModuleSpecifier(value) {
+    return /^\.+(?:[A-Za-z_]\w*(?:\.[A-Za-z_]\w*)*)?$/.test(value);
+}
+function isPythonModuleSpecifier(value) {
+    return (isPythonAbsoluteModuleSpecifier(value) ||
+        isPythonRelativeModuleSpecifier(value));
+}
+function pythonModulePath(specifier) {
+    return specifier.split(".").filter(Boolean).join("/");
+}
+function resolvePythonPathCandidate(candidate, pathLookup) {
+    const normalized = normalizeGraphPath(candidate).replace(/\/+$/, "");
+    if (normalized.length === 0 || normalized === "." || normalized === "..") {
+        return undefined;
+    }
+    return resolveCandidate(normalized, pathLookup);
+}
+function pythonPathMatchesModule(path, modulePath) {
+    const normalizedPath = normalizeGraphPath(path).toLowerCase();
+    const normalizedModulePath = normalizeGraphPath(modulePath).toLowerCase();
+    return (PYTHON_SOURCE_EXTENSIONS.some((extension) => {
+        const moduleFile = `${normalizedModulePath}${extension}`;
+        return (normalizedPath === moduleFile ||
+            normalizedPath.endsWith(`/${moduleFile}`));
+    }) ||
+        PYTHON_PACKAGE_INDEX_FILES.some((indexFile) => {
+            const packageFile = posix.join(normalizedModulePath, indexFile);
+            return (normalizedPath === packageFile ||
+                normalizedPath.endsWith(`/${packageFile}`));
+        }));
+}
+function commonDirectoryPrefixLength(left, right) {
+    const leftParts = normalizeGraphPath(left).split("/").filter(Boolean);
+    const rightParts = normalizeGraphPath(right).split("/").filter(Boolean);
+    let count = 0;
+    while (count < leftParts.length &&
+        count < rightParts.length &&
+        leftParts[count].toLowerCase() === rightParts[count].toLowerCase()) {
+        count += 1;
+    }
+    return count;
+}
+function resolvePythonAbsoluteModuleSpecifier(fromPath, specifier, pathLookup) {
+    const modulePath = pythonModulePath(specifier);
+    const direct = resolvePythonPathCandidate(modulePath, pathLookup);
+    if (direct) {
+        return direct;
+    }
+    const matches = [...new Set(pathLookup.values())].filter((path) => isPythonSourcePath(path) && pythonPathMatchesModule(path, modulePath));
+    if (matches.length === 1) {
+        return matches[0];
+    }
+    if (matches.length === 0) {
+        return undefined;
+    }
+    const fromDir = posix.dirname(normalizeGraphPath(fromPath));
+    const scored = matches
+        .map((target) => ({
+        target,
+        score: commonDirectoryPrefixLength(fromDir, posix.dirname(normalizeGraphPath(target))),
+    }))
+        .sort((a, b) => b.score - a.score || a.target.localeCompare(b.target));
+    const bestScore = scored[0]?.score ?? 0;
+    const bestMatches = scored.filter((item) => item.score === bestScore);
+    if (bestScore > 0 && bestMatches.length === 1) {
+        return bestMatches[0].target;
+    }
+    const srcMatches = matches.filter((target) => normalizeGraphPath(target).toLowerCase().startsWith("src/"));
+    return srcMatches.length === 1 ? srcMatches[0] : undefined;
+}
+function resolvePythonRelativeModuleSpecifier(fromPath, specifier, pathLookup) {
+    const match = /^(\.+)(.*)$/.exec(specifier);
+    if (!match) {
+        return undefined;
+    }
+    const level = match[1].length;
+    const remainder = match[2] ?? "";
+    let baseDir = posix.dirname(normalizeGraphPath(fromPath));
+    for (let index = 1; index < level; index++) {
+        const next = posix.dirname(baseDir);
+        if (next === baseDir) {
+            return undefined;
+        }
+        baseDir = next;
+    }
+    const modulePath = pythonModulePath(remainder);
+    const candidate = modulePath.length > 0 ? posix.join(baseDir, modulePath) : baseDir;
+    return resolvePythonPathCandidate(candidate, pathLookup);
+}
+function resolvePythonModuleSpecifier(fromPath, specifier, pathLookup) {
+    if (isPythonRelativeModuleSpecifier(specifier)) {
+        return resolvePythonRelativeModuleSpecifier(fromPath, specifier, pathLookup);
+    }
+    if (isPythonAbsoluteModuleSpecifier(specifier)) {
+        return resolvePythonAbsoluteModuleSpecifier(fromPath, specifier, pathLookup);
+    }
+    return undefined;
+}
+function appendPythonImportedSpecifier(moduleSpecifier, importedName) {
+    return moduleSpecifier.endsWith(".")
+        ? `${moduleSpecifier}${importedName}`
+        : `${moduleSpecifier}.${importedName}`;
+}
+function addPythonImportEdge(edges, fromPath, target, kind, specifier) {
+    if (!target || target === fromPath) {
+        return;
+    }
+    edges.push(graphEdge({
+        from: fromPath,
+        to: target,
+        kind,
+        confidence: IMPORT_EDGE_CONFIDENCE,
+        reason: `Resolved Python import specifier '${specifier}'.`,
+    }));
+}
+/**
+ * Resolve a single `import <spec>` module specifier to a repo file, or
+ * undefined. Shared with the tree-sitter Python analyzer so AST-extracted
+ * imports resolve to exactly the same targets as the regex floor.
+ */
+export function resolvePythonImportTarget(fromPath, specifier, pathLookup) {
+    if (!isPythonAbsoluteModuleSpecifier(specifier)) {
+        return undefined;
+    }
+    return resolvePythonModuleSpecifier(fromPath, specifier, pathLookup);
+}
+/**
+ * Resolve a `from <module> import <names>` statement to repo files. Mirrors the
+ * floor: prefer submodule files (`module.name`), else the module itself. Shared
+ * with the tree-sitter Python analyzer.
+ */
+export function resolvePythonFromImportTargets(fromPath, moduleSpecifier, importedNames, pathLookup) {
+    if (!isPythonModuleSpecifier(moduleSpecifier)) {
+        return [];
+    }
+    const submoduleTargets = importedNames
+        .filter((name) => name !== "*" && isPythonIdentifier(name))
+        .map((name) => appendPythonImportedSpecifier(moduleSpecifier, name))
+        .map((specifier) => ({
+        specifier,
+        target: resolvePythonModuleSpecifier(fromPath, specifier, pathLookup),
+    }))
+        .filter((item) => item.target !== undefined && item.target !== fromPath);
+    if (submoduleTargets.length > 0) {
+        return submoduleTargets;
+    }
+    const moduleTarget = resolvePythonModuleSpecifier(fromPath, moduleSpecifier, pathLookup);
+    return moduleTarget && moduleTarget !== fromPath
+        ? [{ specifier: moduleSpecifier, target: moduleTarget }]
+        : [];
+}
+export function extractPythonImportEdges(fromPath, content, pathLookup) {
+    if (!isPythonSourcePath(fromPath)) {
+        return [];
+    }
+    const edges = [];
+    for (const line of pythonLogicalLines(content)) {
+        const importMatch = /^import\s+(.+)$/i.exec(line);
+        if (importMatch) {
+            for (const rawSpecifier of splitPythonImportList(importMatch[1] ?? "")) {
+                const specifier = stripPythonAlias(rawSpecifier);
+                if (!isPythonAbsoluteModuleSpecifier(specifier)) {
+                    continue;
+                }
+                addPythonImportEdge(edges, fromPath, resolvePythonModuleSpecifier(fromPath, specifier, pathLookup), "python-import", specifier);
+            }
+            continue;
+        }
+        const fromImportMatch = /^from\s+([.\w]+)\s+import\s+(.+)$/i.exec(line);
+        if (!fromImportMatch) {
+            continue;
+        }
+        const moduleSpecifier = fromImportMatch[1] ?? "";
+        const rawNames = splitPythonImportList(fromImportMatch[2] ?? "").map(stripPythonAlias);
+        for (const { specifier, target } of resolvePythonFromImportTargets(fromPath, moduleSpecifier, rawNames, pathLookup)) {
+            addPythonImportEdge(edges, fromPath, target, "python-from-import", specifier);
+        }
+    }
+    return edges;
+}
+//# sourceMappingURL=graphPythonImports.js.map

package/dist/audit/extractors/graphPythonImports.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"graphPythonImports.js","sourceRoot":"","sources":["../../../src/audit/extractors/graphPythonImports.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,WAAW,CAAC;AAElC,OAAO,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AACrD,OAAO,EACL,SAAS,EACT,kBAAkB,EAClB,gBAAgB,GACjB,MAAM,qBAAqB,CAAC;AAE7B,6EAA6E;AAC7E,MAAM,mBAAmB,GAAG;IAC1B,UAAU,EAAE,CAAC,GAAG,EAAE,GAAG,CAAU;IAC/B,aAAa,EAAE,CAAC,GAAG,EAAE,GAAG,CAAU;CAC1B,CAAC;AAEX,MAAM,wBAAwB,GAAG,CAAC,KAAK,EAAE,MAAM,CAAU,CAAC;AAC1D,MAAM,0BAA0B,GAAG,CAAC,aAAa,EAAE,cAAc,CAAU,CAAC;AAC5E,MAAM,sBAAsB,GAAG,IAAI,CAAC;AAEpC,MAAM,UAAU,kBAAkB,CAAC,IAAY;IAC7C,MAAM,UAAU,GAAG,kBAAkB,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE,CAAC;IAC1D,OAAO,wBAAwB,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CACjD,UAAU,CAAC,QAAQ,CAAC,SAAS,CAAC,CAC/B,CAAC;AACJ,CAAC;AAED,SAAS,sBAAsB,CAAC,IAAY;IAC1C,IAAI,YAAgC,CAAC;IACrC,eAAe,CAAC,IAAI,EAAE,mBAAmB,EAAE;QACzC,UAAU,CAAC,IAAI,EAAE,CAAC;YAChB,IAAI,IAAI,KAAK,GAAG,EAAE,CAAC;gBACjB,YAAY,GAAG,CAAC,CAAC;gBACjB,OAAO,KAAK,CAAC;YACf,CAAC;QACH,CAAC;KACF,CAAC,CAAC;IACH,OAAO,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,YAAY,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;AACzE,CAAC;AAED,SAAS,gBAAgB,CAAC,IAAY;IACpC,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,eAAe,CAAC,IAAI,EAAE,mBAAmB,EAAE;QACzC,UAAU,CAAC,IAAI;YACb,IAAI,IAAI,KAAK,GAAG,EAAE,CAAC;gBACjB,KAAK,IAAI,CAAC,CAAC;YACb,CAAC;iBAAM,IAAI,IAAI,KAAK,GAAG,EAAE,CAAC;gBACxB,KAAK,IAAI,CAAC,CAAC;YACb,CAAC;QACH,CAAC;KACF,CAAC,CAAC;IACH,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,kBAAkB,CAAC,OAAe;IACzC,MAAM,YAAY,GAAa,EAAE,CAAC;IAClC,IAAI,OAAO,GAAG,EAAE,CAAC;IACjB,IAAI,UAAU,GAAG,CAAC,CAAC;IAEnB,KAAK,MAAM,OAAO,IAAI,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC;QAC7C,MAAM,QAAQ,GAAG,sBAAsB,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,CAAC;QACxD,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC1B,SAAS;QACX,CAAC;QACD,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,sBAAsB,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;YACnE,SAAS;QACX,CAAC;QAED,MAAM,SAAS,GAAG,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;QAC1C,MAAM,IAAI,GAAG,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC;QACpE,OAAO,GAAG,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,OAAO,IAAI,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;QAC3D,UAAU,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,UAAU,GAAG,gBAAgB,CAAC,IAAI,CAAC,CAAC,CAAC;QAE9D,IAAI,CAAC,SAAS,IAAI,UAAU,IAAI,CAAC,EAAE,CAAC;YAClC,YAAY,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;YACvD,OAAO,GAAG,EAAE,CAAC;YACb,UAAU,GAAG,CAAC,CAAC;QACjB,CAAC;IACH,CAAC;IAED,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACvB,YAAY,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;IACzD,CAAC;IAED,OAAO,YAAY,CAAC;AACtB,CAAC;AAED,SAAS,sBAAsB,CAAC,KAAa;IAC3C,IAAI,OAAO,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;IAC3B,IAAI,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;QACrD,OAAO,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IACxC,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,SAAS,qBAAqB,CAAC,KAAa;IAC1C,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,IAAI,OAAO,GAAG,EAAE,CAAC;IACjB,IAAI,KAA4B,CAAC;IACjC,IAAI,OAAO,GAAG,KAAK,CAAC;IACpB,IAAI,UAAU,GAAG,CAAC,CAAC;IAEnB,KAAK,MAAM,IAAI,IAAI,sBAAsB,CAAC,KAAK,CAAC,EAAE,CAAC;QACjD,IAAI,OAAO,EAAE,CAAC;YACZ,OAAO,IAAI,IAAI,CAAC;YAChB,OAAO,GAAG,KAAK,CAAC;YAChB,SAAS;QACX,CAAC;QACD,IAAI,KAAK,EAAE,CAAC;YACV,OAAO,IAAI,IAAI,CAAC;YAChB,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;gBAClB,OAAO,GAAG,IAAI,CAAC;YACjB,CAAC;iBAAM,IAAI,IAAI,KAAK,KAAK,EAAE,CAAC;gBAC1B,KAAK,GAAG,SAAS,CAAC;YACpB,CAAC;YACD,SAAS;QACX,CAAC;QACD,IAAI,IAAI,KAAK,GAAG,IAAI,IAAI,KAAK,GAAG,EAAE,CAAC;YACjC,OAAO,IAAI,IAAI,CAAC;YAChB,KAAK,GAAG,IAAI,CAAC;YACb,SAAS;QACX,CAAC;QACD,IAAI,IAAI,KAAK,GAAG,EAAE,CAAC;YACjB,UAAU,IAAI,CAAC,CAAC;YAChB,OAAO,IAAI,IAAI,CAAC;YAChB,SAAS;QACX,CAAC;QACD,IAAI,IAAI,KAAK,GAAG,EAAE,CAAC;YACjB,UAAU,IAAI,CAAC,CAAC;YAChB,OAAO,IAAI,IAAI,CAAC;YAChB,SAAS;QACX,CAAC;QACD,IAAI,IAAI,KAAK,GAAG,IAAI,UAAU,KAAK,CAAC,EAAE,CAAC;YACrC,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC;YAC5B,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACpB,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACnB,CAAC;YACD,OAAO,GAAG,EAAE,CAAC;YACb,SAAS;QACX,CAAC;QACD,OAAO,IAAI,IAAI,CAAC;IAClB,CAAC;IAED,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC;IAC5B,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACpB,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACnB,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,gBAAgB,CAAC,KAAa;IACrC,OAAO,KAAK,CAAC,OAAO,CAAC,wBAAwB,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;AAC5D,CAAC;AAED,SAAS,kBAAkB,CAAC,KAAa;IACvC,OAAO,gBAAgB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;AACtC,CAAC;AAED,SAAS,+BAA+B,CAAC,KAAa;IACpD,OAAO,mCAAmC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;AACzD,CAAC;AAED,SAAS,+BAA+B,CAAC,KAAa;IACpD,OAAO,2CAA2C,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;AACjE,CAAC;AAED,SAAS,uBAAuB,CAAC,KAAa;IAC5C,OAAO,CACL,+BAA+B,CAAC,KAAK,CAAC;QACtC,+BAA+B,CAAC,KAAK,CAAC,CACvC,CAAC;AACJ,CAAC;AAED,SAAS,gBAAgB,CAAC,SAAiB;IACzC,OAAO,SAAS,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AACxD,CAAC;AAED,SAAS,0BAA0B,CACjC,SAAiB,EACjB,UAA+B;IAE/B,MAAM,UAAU,GAAG,kBAAkB,CAAC,SAAS,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IACrE,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,IAAI,UAAU,KAAK,GAAG,IAAI,UAAU,KAAK,IAAI,EAAE,CAAC;QACzE,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,OAAO,gBAAgB,CAAC,UAAU,EAAE,UAAU,CAAC,CAAC;AAClD,CAAC;AAED,SAAS,uBAAuB,CAAC,IAAY,EAAE,UAAkB;IAC/D,MAAM,cAAc,GAAG,kBAAkB,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE,CAAC;IAC9D,MAAM,oBAAoB,GAAG,kBAAkB,CAAC,UAAU,CAAC,CAAC,WAAW,EAAE,CAAC;IAC1E,OAAO,CACL,wBAAwB,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE;QAC1C,MAAM,UAAU,GAAG,GAAG,oBAAoB,GAAG,SAAS,EAAE,CAAC;QACzD,OAAO,CACL,cAAc,KAAK,UAAU;YAC7B,cAAc,CAAC,QAAQ,CAAC,IAAI,UAAU,EAAE,CAAC,CAC1C,CAAC;IACJ,CAAC,CAAC;QACF,0BAA0B,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE;YAC5C,MAAM,WAAW,GAAG,KAAK,CAAC,IAAI,CAAC,oBAAoB,EAAE,SAAS,CAAC,CAAC;YAChE,OAAO,CACL,cAAc,KAAK,WAAW;gBAC9B,cAAc,CAAC,QAAQ,CAAC,IAAI,WAAW,EAAE,CAAC,CAC3C,CAAC;QACJ,CAAC,CAAC,CACH,CAAC;AACJ,CAAC;AAED,SAAS,2BAA2B,CAAC,IAAY,EAAE,KAAa;IAC9D,MAAM,SAAS,GAAG,kBAAkB,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IACtE,MAAM,UAAU,GAAG,kBAAkB,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IACxE,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,OACE,KAAK,GAAG,SAAS,CAAC,MAAM;QACxB,KAAK,GAAG,UAAU,CAAC,MAAM;QACzB,SAAS,CAAC,KAAK,CAAE,CAAC,WAAW,EAAE,KAAK,UAAU,CAAC,KAAK,CAAE,CAAC,WAAW,EAAE,EACpE,CAAC;QACD,KAAK,IAAI,CAAC,CAAC;IACb,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,oCAAoC,CAC3C,QAAgB,EAChB,SAAiB,EACjB,UAA+B;IAE/B,MAAM,UAAU,GAAG,gBAAgB,CAAC,SAAS,CAAC,CAAC;IAC/C,MAAM,MAAM,GAAG,0BAA0B,CAAC,UAAU,EAAE,UAAU,CAAC,CAAC;IAClE,IAAI,MAAM,EAAE,CAAC;QACX,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,MAAM,OAAO,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,UAAU,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,MAAM,CACtD,CAAC,IAAI,EAAE,EAAE,CACP,kBAAkB,CAAC,IAAI,CAAC,IAAI,uBAAuB,CAAC,IAAI,EAAE,UAAU,CAAC,CACxE,CAAC;IACF,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO,OAAO,CAAC,CAAC,CAAC,CAAC;IACpB,CAAC;IACD,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,kBAAkB,CAAC,QAAQ,CAAC,CAAC,CAAC;IAC5D,MAAM,MAAM,GAAG,OAAO;SACnB,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;QAChB,MAAM;QACN,KAAK,EAAE,2BAA2B,CAChC,OAAO,EACP,KAAK,CAAC,OAAO,CAAC,kBAAkB,CAAC,MAAM,CAAC,CAAC,CAC1C;KACF,CAAC,CAAC;SACF,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC;IACzE,MAAM,SAAS,GAAG,MAAM,CAAC,CAAC,CAAC,EAAE,KAAK,IAAI,CAAC,CAAC;IACxC,MAAM,WAAW,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC;IACtE,IAAI,SAAS,GAAG,CAAC,IAAI,WAAW,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC9C,OAAO,WAAW,CAAC,CAAC,CAAE,CAAC,MAAM,CAAC;IAChC,CAAC;IAED,MAAM,UAAU,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CAC3C,kBAAkB,CAAC,MAAM,CAAC,CAAC,WAAW,EAAE,CAAC,UAAU,CAAC,MAAM,CAAC,CAC5D,CAAC;IACF,OAAO,UAAU,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;AAC7D,CAAC;AAED,SAAS,oCAAoC,CAC3C,QAAgB,EAChB,SAAiB,EACjB,UAA+B;IAE/B,MAAM,KAAK,GAAG,aAAa,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IAC5C,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,CAAE,CAAC,MAAM,CAAC;IAC/B,MAAM,SAAS,GAAG,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IACjC,IAAI,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,kBAAkB,CAAC,QAAQ,CAAC,CAAC,CAAC;IAC1D,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,KAAK,EAAE,KAAK,EAAE,EAAE,CAAC;QAC3C,MAAM,IAAI,GAAG,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QACpC,IAAI,IAAI,KAAK,OAAO,EAAE,CAAC;YACrB,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,OAAO,GAAG,IAAI,CAAC;IACjB,CAAC;IAED,MAAM,UAAU,GAAG,gBAAgB,CAAC,SAAS,CAAC,CAAC;IAC/C,MAAM,SAAS,GAAG,UAAU,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC;IACpF,OAAO,0BAA0B,CAAC,SAAS,EAAE,UAAU,CAAC,CAAC;AAC3D,CAAC;AAED,SAAS,4BAA4B,CACnC,QAAgB,EAChB,SAAiB,EACjB,UAA+B;IAE/B,IAAI,+BAA+B,CAAC,SAAS,CAAC,EAAE,CAAC;QAC/C,OAAO,oCAAoC,CAAC,QAAQ,EAAE,SAAS,EAAE,UAAU,CAAC,CAAC;IAC/E,CAAC;IACD,IAAI,+BAA+B,CAAC,SAAS,CAAC,EAAE,CAAC;QAC/C,OAAO,oCAAoC,CAAC,QAAQ,EAAE,SAAS,EAAE,UAAU,CAAC,CAAC;IAC/E,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAS,6BAA6B,CACpC,eAAuB,EACvB,YAAoB;IAEpB,OAAO,eAAe,CAAC,QAAQ,CAAC,GAAG,CAAC;QAClC,CAAC,CAAC,GAAG,eAAe,GAAG,YAAY,EAAE;QACrC,CAAC,CAAC,GAAG,eAAe,IAAI,YAAY,EAAE,CAAC;AAC3C,CAAC;AAED,SAAS,mBAAmB,CAC1B,KAAkB,EAClB,QAAgB,EAChB,MAA0B,EAC1B,IAA4C,EAC5C,SAAiB;IAEjB,IAAI,CAAC,MAAM,IAAI,MAAM,KAAK,QAAQ,EAAE,CAAC;QACnC,OAAO;IACT,CAAC;IACD,KAAK,CAAC,IAAI,CACR,SAAS,CAAC;QACR,IAAI,EAAE,QAAQ;QACd,EAAE,EAAE,MAAM;QACV,IAAI;QACJ,UAAU,EAAE,sBAAsB;QAClC,MAAM,EAAE,qCAAqC,SAAS,IAAI;KAC3D,CAAC,CACH,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,yBAAyB,CACvC,QAAgB,EAChB,SAAiB,EACjB,UAA+B;IAE/B,IAAI,CAAC,+BAA+B,CAAC,SAAS,CAAC,EAAE,CAAC;QAChD,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,OAAO,4BAA4B,CAAC,QAAQ,EAAE,SAAS,EAAE,UAAU,CAAC,CAAC;AACvE,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,8BAA8B,CAC5C,QAAgB,EAChB,eAAuB,EACvB,aAAuB,EACvB,UAA+B;IAE/B,IAAI,CAAC,uBAAuB,CAAC,eAAe,CAAC,EAAE,CAAC;QAC9C,OAAO,EAAE,CAAC;IACZ,CAAC;IACD,MAAM,gBAAgB,GAAG,aAAa;SACnC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,KAAK,GAAG,IAAI,kBAAkB,CAAC,IAAI,CAAC,CAAC;SAC1D,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,6BAA6B,CAAC,eAAe,EAAE,IAAI,CAAC,CAAC;SACnE,GAAG,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;QACnB,SAAS;QACT,MAAM,EAAE,4BAA4B,CAAC,QAAQ,EAAE,SAAS,EAAE,UAAU,CAAC;KACtE,CAAC,CAAC;SACF,MAAM,CACL,CAAC,IAAI,EAAiD,EAAE,CACtD,IAAI,CAAC,MAAM,KAAK,SAAS,IAAI,IAAI,CAAC,MAAM,KAAK,QAAQ,CACxD,CAAC;IACJ,IAAI,gBAAgB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAChC,OAAO,gBAAgB,CAAC;IAC1B,CAAC;IACD,MAAM,YAAY,GAAG,4BAA4B,CAC/C,QAAQ,EACR,eAAe,EACf,UAAU,CACX,CAAC;IACF,OAAO,YAAY,IAAI,YAAY,KAAK,QAAQ;QAC9C,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,eAAe,EAAE,MAAM,EAAE,YAAY,EAAE,CAAC;QACxD,CAAC,CAAC,EAAE,CAAC;AACT,CAAC;AAED,MAAM,UAAU,wBAAwB,CACtC,QAAgB,EAChB,OAAe,EACf,UAA+B;IAE/B,IAAI,CAAC,kBAAkB,CAAC,QAAQ,CAAC,EAAE,CAAC;QAClC,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,MAAM,KAAK,GAAgB,EAAE,CAAC;IAC9B,KAAK,MAAM,IAAI,IAAI,kBAAkB,CAAC,OAAO,CAAC,EAAE,CAAC;QAC/C,MAAM,WAAW,GAAG,kBAAkB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAClD,IAAI,WAAW,EAAE,CAAC;YAChB,KAAK,MAAM,YAAY,IAAI,qBAAqB,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,EAAE,CAAC;gBACvE,MAAM,SAAS,GAAG,gBAAgB,CAAC,YAAY,CAAC,CAAC;gBACjD,IAAI,CAAC,+BAA+B,CAAC,SAAS,CAAC,EAAE,CAAC;oBAChD,SAAS;gBACX,CAAC;gBACD,mBAAmB,CACjB,KAAK,EACL,QAAQ,EACR,4BAA4B,CAAC,QAAQ,EAAE,SAAS,EAAE,UAAU,CAAC,EAC7D,eAAe,EACf,SAAS,CACV,CAAC;YACJ,CAAC;YACD,SAAS;QACX,CAAC;QAED,MAAM,eAAe,GAAG,oCAAoC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACxE,IAAI,CAAC,eAAe,EAAE,CAAC;YACrB,SAAS;QACX,CAAC;QAED,MAAM,eAAe,GAAG,eAAe,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QACjD,MAAM,QAAQ,GAAG,qBAAqB,CAAC,eAAe,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC;QACvF,KAAK,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,IAAI,8BAA8B,CAChE,QAAQ,EACR,eAAe,EACf,QAAQ,EACR,UAAU,CACX,EAAE,CAAC;YACF,mBAAmB,CAAC,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,oBAAoB,EAAE,SAAS,CAAC,CAAC;QAChF,CAAC;IACH,CAAC;IAED,OAAO,KAAK,CAAC;AACf,CAAC"}

package/dist/audit/extractors/graphRoutes.d.ts

@@ -0,0 +1,13 @@
+import type { GraphEdge, RouteEdge } from "audit-tools/shared";
+export declare function uniqueSortedRoutes(routes: RouteEdge[]): RouteEdge[];
+export declare function extractRegisteredRouteEvidence(fromPath: string, content: string, pathLookup: Map<string, string>): {
+    calls: GraphEdge[];
+    routes: RouteEdge[];
+};
+export declare function extractConventionalRouteEvidence(fromPath: string, content: string | undefined): RouteEdge[];
+export declare function extractFrameworkRouteEvidence(fromPath: string, content: string, pathLookup: Map<string, string>): {
+    calls: GraphEdge[];
+    routes: RouteEdge[];
+};
+export declare function fallbackRouteEdge(filePath: string): RouteEdge | undefined;
+//# sourceMappingURL=graphRoutes.d.ts.map

package/dist/audit/extractors/graphRoutes.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"graphRoutes.d.ts","sourceRoot":"","sources":["../../../src/audit/extractors/graphRoutes.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAuC/D,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,SAAS,EAAE,GAAG,SAAS,EAAE,CAWnE;AAkKD,wBAAgB,8BAA8B,CAC5C,QAAQ,EAAE,MAAM,EAChB,OAAO,EAAE,MAAM,EACf,UAAU,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,GAC9B;IAAE,KAAK,EAAE,SAAS,EAAE,CAAC;IAAC,MAAM,EAAE,SAAS,EAAE,CAAA;CAAE,CA4C7C;AA6DD,wBAAgB,gCAAgC,CAC9C,QAAQ,EAAE,MAAM,EAChB,OAAO,EAAE,MAAM,GAAG,SAAS,GAC1B,SAAS,EAAE,CAsBb;AA2LD,wBAAgB,6BAA6B,CAC3C,QAAQ,EAAE,MAAM,EAChB,OAAO,EAAE,MAAM,EACf,UAAU,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,GAC9B;IAAE,KAAK,EAAE,SAAS,EAAE,CAAC;IAAC,MAAM,EAAE,SAAS,EAAE,CAAA;CAAE,CAa7C;AAED,wBAAgB,iBAAiB,CAAC,QAAQ,EAAE,MAAM,GAAG,SAAS,GAAG,SAAS,CAmBzE"}