audit-tools 0.28.0

package/dist/audit/orchestrator/flowRequeue.js

@@ -0,0 +1,73 @@
+import { isLens } from "../types.js";
+import { getExternalSignalPaths } from "./requeueUtils.js";
+function taskPriority(hasExternalSignal, lens) {
+    if (hasExternalSignal &&
+        (lens === "security" || lens === "data_integrity" || lens === "reliability")) {
+        return "high";
+    }
+    return hasExternalSignal ? "medium" : "low";
+}
+function fileStillNeedsLens(coverageByPath, path, lens) {
+    const record = coverageByPath.get(path);
+    if (!record || record.audit_status === "excluded") {
+        return false;
+    }
+    return !record.completed_lenses.includes(lens);
+}
+export function buildFlowRequeueTasks(criticalFlows, flowCoverage, coverageMatrix, externalAnalyzerResults) {
+    const flowMap = new Map(criticalFlows.flows.map((flow) => [flow.id, flow]));
+    const coverageByPath = new Map(coverageMatrix.files.map((file) => [file.path, file]));
+    const tasks = [];
+    const seen = new Set();
+    const externalPaths = getExternalSignalPaths(externalAnalyzerResults);
+    for (const record of flowCoverage.flows) {
+        const flow = flowMap.get(record.flow_id);
+        if (!flow) {
+            continue;
+        }
+        const requiredLenses = Array.isArray(record.required_lenses)
+            ? record.required_lenses.filter((lens) => typeof lens === "string")
+            : [];
+        const completedLenses = new Set(Array.isArray(record.completed_lenses)
+            ? record.completed_lenses.filter((lens) => typeof lens === "string")
+            : []);
+        const missingLenses = requiredLenses.filter((lens) => !completedLenses.has(lens));
+        const flowPaths = Array.isArray(flow.paths)
+            ? flow.paths.filter((path) => typeof path === "string")
+            : [];
+        for (const lensName of missingLenses) {
+            // Skip (rather than throw on) an unsupported lens value, consistent with
+            // the filter-based lens guards elsewhere in the orchestrator: a stray
+            // non-canonical lens in flow coverage should not abort the whole requeue.
+            if (!isLens(lensName)) {
+                continue;
+            }
+            for (const path of flowPaths) {
+                if (!fileStillNeedsLens(coverageByPath, path, lensName)) {
+                    continue;
+                }
+                const signature = `${flow.id}|${lensName}|${path}`;
+                if (seen.has(signature)) {
+                    continue;
+                }
+                seen.add(signature);
+                const hasExternalSignal = externalPaths.has(path);
+                tasks.push({
+                    task_id: `flow-requeue:${flow.id}:${lensName}:${path}`,
+                    unit_id: flow.id,
+                    pass_id: `flow-requeue:${lensName}`,
+                    lens: lensName,
+                    file_paths: [path],
+                    rationale: `Mandatory audit coverage is still missing for critical flow ${flow.id} at ${path} under the ${lensName} lens.`,
+                    priority: taskPriority(hasExternalSignal, lensName),
+                    tags: hasExternalSignal
+                        ? ["critical_flow_followup", "external_analyzer_signal"]
+                        : ["critical_flow_followup"],
+                    status: "pending",
+                });
+            }
+        }
+    }
+    return tasks;
+}
+//# sourceMappingURL=flowRequeue.js.map

package/dist/audit/orchestrator/flowRequeue.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"flowRequeue.js","sourceRoot":"","sources":["../../../src/audit/orchestrator/flowRequeue.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AAGrC,OAAO,EAAE,sBAAsB,EAAE,MAAM,mBAAmB,CAAC;AAE3D,SAAS,YAAY,CACnB,iBAA0B,EAC1B,IAAU;IAEV,IACE,iBAAiB;QACjB,CAAC,IAAI,KAAK,UAAU,IAAI,IAAI,KAAK,gBAAgB,IAAI,IAAI,KAAK,aAAa,CAAC,EAC5E,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;IACD,OAAO,iBAAiB,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC;AAC9C,CAAC;AAED,SAAS,kBAAkB,CACzB,cAA4D,EAC5D,IAAY,EACZ,IAAU;IAEV,MAAM,MAAM,GAAG,cAAc,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IACxC,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,YAAY,KAAK,UAAU,EAAE,CAAC;QAClD,OAAO,KAAK,CAAC;IACf,CAAC;IACD,OAAO,CAAC,MAAM,CAAC,gBAAgB,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;AACjD,CAAC;AAED,MAAM,UAAU,qBAAqB,CACnC,aAAmC,EACnC,YAAkC,EAClC,cAA8B,EAC9B,uBAAiD;IAEjD,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,aAAa,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC;IAC5E,MAAM,cAAc,GAAG,IAAI,GAAG,CAC5B,cAAc,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CACtD,CAAC;IACF,MAAM,KAAK,GAAgB,EAAE,CAAC;IAC9B,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,MAAM,aAAa,GAAG,sBAAsB,CAAC,uBAAuB,CAAC,CAAC;IAEtE,KAAK,MAAM,MAAM,IAAI,YAAY,CAAC,KAAK,EAAE,CAAC;QACxC,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QACzC,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,SAAS;QACX,CAAC;QAED,MAAM,cAAc,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,eAAe,CAAC;YAC1D,CAAC,CAAC,MAAM,CAAC,eAAe,CAAC,MAAM,CAC3B,CAAC,IAAI,EAAkB,EAAE,CAAC,OAAO,IAAI,KAAK,QAAQ,CACnD;YACH,CAAC,CAAC,EAAE,CAAC;QACP,MAAM,eAAe,GAAG,IAAI,GAAG,CAC7B,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,gBAAgB,CAAC;YACpC,CAAC,CAAC,MAAM,CAAC,gBAAgB,CAAC,MAAM,CAC5B,CAAC,IAAI,EAAkB,EAAE,CAAC,OAAO,IAAI,KAAK,QAAQ,CACnD;YACH,CAAC,CAAC,EAAE,CACP,CAAC;QACF,MAAM,aAAa,GAAG,cAAc,CAAC,MAAM,CACzC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,eAAe,CAAC,GAAG,CAAC,IAAI,CAAC,CACrC,CAAC;QACF,MAAM,SAAS,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC;YACzC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,EAAkB,EAAE,CAAC,OAAO,IAAI,KAAK,QAAQ,CAAC;YACvE,CAAC,CAAC,EAAE,CAAC;QAEP,KAAK,MAAM,QAAQ,IAAI,aAAa,EAAE,CAAC;YACrC,yEAAyE;YACzE,sEAAsE;YACtE,0EAA0E;YAC1E,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC;gBACtB,SAAS;YACX,CAAC;YAED,KAAK,MAAM,IAAI,IAAI,SAAS,EAAE,CAAC;gBAC7B,IAAI,CAAC,kBAAkB,CAAC,cAAc,EAAE,IAAI,EAAE,QAAQ,CAAC,EAAE,CAAC;oBACxD,SAAS;gBACX,CAAC;gBACD,MAAM,SAAS,GAAG,GAAG,IAAI,CAAC,EAAE,IAAI,QAAQ,IAAI,IAAI,EAAE,CAAC;gBACnD,IAAI,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC;oBACxB,SAAS;gBACX,CAAC;gBACD,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;gBACpB,MAAM,iBAAiB,GAAG,aAAa,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;gBAElD,KAAK,CAAC,IAAI,CAAC;oBACT,OAAO,EAAE,gBAAgB,IAAI,CAAC,EAAE,IAAI,QAAQ,IAAI,IAAI,EAAE;oBACtD,OAAO,EAAE,IAAI,CAAC,EAAE;oBAChB,OAAO,EAAE,gBAAgB,QAAQ,EAAE;oBACnC,IAAI,EAAE,QAAQ;oBACd,UAAU,EAAE,CAAC,IAAI,CAAC;oBAClB,SAAS,EAAE,+DAA+D,IAAI,CAAC,EAAE,OAAO,IAAI,cAAc,QAAQ,QAAQ;oBAC1H,QAAQ,EAAE,YAAY,CAAC,iBAAiB,EAAE,QAAQ,CAAC;oBACnD,IAAI,EAAE,iBAAiB;wBACrB,CAAC,CAAC,CAAC,wBAAwB,EAAE,0BAA0B,CAAC;wBACxD,CAAC,CAAC,CAAC,wBAAwB,CAAC;oBAC9B,MAAM,EAAE,SAAS;iBAClB,CAAC,CAAC;YACL,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,KAAK,CAAC;AACf,CAAC"}

package/dist/audit/orchestrator/graphEnrichmentExecutor.d.ts

@@ -0,0 +1,30 @@
+import type { ArtifactBundle } from "../io/artifacts.js";
+import type { ExecutorRunResult } from "./executorResult.js";
+import type { AnalyzerSetting } from "audit-tools/shared";
+import type { LanguageAnalyzer } from "../extractors/analyzers/types.js";
+import { type EdgeReasoningResults } from "./edgeReasoning.js";
+export interface GraphEnrichmentOptions {
+    root?: string;
+    analyzers?: Record<string, AnalyzerSetting>;
+    /** Injectable for tests; defaults to the global registry. */
+    registry?: LanguageAnalyzer[];
+    /** Injectable analyzer-cache root; defaults to ~/.audit-tools/analyzer-cache. */
+    cacheRoot?: string;
+    /**
+     * Phase 4B: gate for the optional edge-reasoning pass (mirrors
+     * session-config `graph.llm_edge_reasoning`; default off).
+     */
+    llmEdgeReasoning?: boolean;
+    /** Phase 4B: host-supplied reason rewrites for low-confidence edges. */
+    edgeReasoning?: EdgeReasoningResults;
+}
+/**
+ * Resolve the optional graph-enrichment obligation. Layers language-analyzer
+ * edges onto the deterministic regex floor in `graph_bundle.json`
+ * (higher-confidence-kind-wins) and records provenance in
+ * `analyzer_capability.json`. With no root, or when every analyzer skips / is
+ * absent / not-applicable, the graph bundle is left byte-identical to the floor
+ * and only the marker is written.
+ */
+export declare function runGraphEnrichmentExecutor(bundle: ArtifactBundle, options?: GraphEnrichmentOptions): Promise<ExecutorRunResult>;
+//# sourceMappingURL=graphEnrichmentExecutor.d.ts.map

package/dist/audit/orchestrator/graphEnrichmentExecutor.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"graphEnrichmentExecutor.d.ts","sourceRoot":"","sources":["../../../src/audit/orchestrator/graphEnrichmentExecutor.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AACzD,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,qBAAqB,CAAC;AAC7D,OAAO,KAAK,EACV,eAAe,EAIhB,MAAM,oBAAoB,CAAC;AAM5B,OAAO,KAAK,EAEV,gBAAgB,EACjB,MAAM,kCAAkC,CAAC;AAK1C,OAAO,EAEL,KAAK,oBAAoB,EAE1B,MAAM,oBAAoB,CAAC;AAE5B,MAAM,WAAW,sBAAsB;IACrC,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,SAAS,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,eAAe,CAAC,CAAC;IAC5C,6DAA6D;IAC7D,QAAQ,CAAC,EAAE,gBAAgB,EAAE,CAAC;IAC9B,iFAAiF;IACjF,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB;;;OAGG;IACH,gBAAgB,CAAC,EAAE,OAAO,CAAC;IAC3B,wEAAwE;IACxE,aAAa,CAAC,EAAE,oBAAoB,CAAC;CACtC;AAgKD;;;;;;;GAOG;AACH,wBAAsB,0BAA0B,CAC9C,MAAM,EAAE,cAAc,EACtB,OAAO,GAAE,sBAA2B,GACnC,OAAO,CAAC,iBAAiB,CAAC,CAkH5B"}

package/dist/audit/orchestrator/graphEnrichmentExecutor.js

@@ -0,0 +1,227 @@
+import { installToCache, resolveAnalyzerDep } from "audit-tools/shared";
+import { buildDispositionMap } from "../extractors/disposition.js";
+import { buildPathLookup } from "../extractors/graph.js";
+import { mergeAnalyzerEdges } from "../extractors/analyzers/merge.js";
+import { ANALYZER_REGISTRY } from "../extractors/analyzers/registry.js";
+import { applyEdgeReasoning, } from "./edgeReasoning.js";
+const BUCKET_BY_KIND = {
+    "ts-import": "imports",
+    "ts-reexport": "imports",
+    "ts-call": "calls",
+    "ts-extends": "references",
+    "ts-implements": "references",
+    // Python (tree-sitter) imports merge into the imports bucket alongside the
+    // regex floor's python-* edges.
+    "py-import": "imports",
+    "py-from-import": "imports",
+    // HTML/CSS (tree-sitter) resource references live with the floor's
+    // html-resource-link / reference edges.
+    "html-resource": "references",
+    "css-import": "references",
+    "css-url": "references",
+};
+function bucketForKind(kind) {
+    const bucket = kind ? BUCKET_BY_KIND[kind] : undefined;
+    return bucket ?? "references";
+}
+function settingFor(analyzers, id) {
+    return analyzers?.[id] ?? "auto";
+}
+function routeSignature(route) {
+    return `${route.method ?? ""}\0${route.path}\0${route.handler}`;
+}
+function mergeRoutes(floor, analyzer) {
+    const deduped = new Map();
+    for (const route of [...floor, ...analyzer]) {
+        deduped.set(routeSignature(route), route);
+    }
+    return [...deduped.values()].sort((a, b) => a.path.localeCompare(b.path) ||
+        a.handler.localeCompare(b.handler) ||
+        (a.method ?? "").localeCompare(b.method ?? ""));
+}
+/**
+ * Run one analyzer: resolve its dependency, invoke analyze(), and return a
+ * discriminated result. Early-exit guards (not_applicable / skip / absent-root)
+ * are handled by the caller; this helper starts from a confirmed runnable state.
+ */
+async function runSingleAnalyzer(analyzer, root, setting, bundle, pathLookup, includedFiles, disposition, cacheRoot) {
+    const run = resolveForRun(analyzer, root, setting, cacheRoot);
+    if (run.resolution === "absent") {
+        return { ok: false, note: run.note ?? "Dependency absent.", resolution: "absent" };
+    }
+    try {
+        const output = await analyzer.analyze(includedFiles.filter((f) => analyzer.supports(f)), {
+            root,
+            repoManifest: bundle.repo_manifest,
+            disposition,
+            includedFiles,
+            pathLookup,
+            dependencyPath: run.path,
+        });
+        return {
+            ok: true,
+            edges: output.edges ?? [],
+            routes: output.routes ?? [],
+            resolution: run.resolution,
+        };
+    }
+    catch (error) {
+        const note = error instanceof Error
+            ? `Analyzer failed [${error.name}]: ${error.message}${error.stack ? ` — stack: ${error.stack.split("\n").slice(0, 4).join(" | ")}` : ""}`
+            : `Analyzer failed: ${String(error)}.`;
+        return { ok: false, note, resolution: run.resolution };
+    }
+}
+/**
+ * Assemble the enriched GraphBundle from the regex floor plus per-bucket
+ * analyzer edges and merged route edges.
+ */
+function buildEnrichedGraph(floor, bucketEdges, routeEdges, analyzersUsed) {
+    return {
+        ...floor,
+        graphs: {
+            ...floor.graphs,
+            imports: mergeAnalyzerEdges(floor.graphs.imports ?? [], bucketEdges.imports),
+            calls: mergeAnalyzerEdges(floor.graphs.calls ?? [], bucketEdges.calls),
+            references: mergeAnalyzerEdges(floor.graphs.references ?? [], bucketEdges.references),
+            ...(routeEdges.length > 0
+                ? { routes: mergeRoutes(floor.graphs.routes ?? [], routeEdges) }
+                : {}),
+        },
+        analyzers_used: [...new Set(analyzersUsed)].sort(),
+    };
+}
+/**
+ * Resolve a dependency for actual execution (may install for ephemeral/permanent).
+ * `auto`/`repo` with an absent dependency falls back to the regex floor.
+ */
+function resolveForRun(analyzer, root, setting, cacheRoot) {
+    if (!analyzer.dependency) {
+        return { resolution: "repo" };
+    }
+    const options = cacheRoot ? { cacheRoot } : {};
+    const resolved = resolveAnalyzerDep(analyzer.dependency, root, options);
+    if (resolved.via === "repo" || resolved.via === "cache") {
+        return { resolution: resolved.via, path: resolved.path };
+    }
+    if (setting === "ephemeral" || setting === "permanent") {
+        const install = installToCache(analyzer.dependency, options);
+        if (install.ok && install.path) {
+            return { resolution: "installed", path: install.path };
+        }
+        return {
+            resolution: "absent",
+            note: `Install of '${analyzer.dependency}' failed: ${install.error ?? "unknown error"}.`,
+        };
+    }
+    return {
+        resolution: "absent",
+        note: `Dependency '${analyzer.dependency}' not resolvable; kept regex floor.`,
+    };
+}
+/**
+ * Resolve the optional graph-enrichment obligation. Layers language-analyzer
+ * edges onto the deterministic regex floor in `graph_bundle.json`
+ * (higher-confidence-kind-wins) and records provenance in
+ * `analyzer_capability.json`. With no root, or when every analyzer skips / is
+ * absent / not-applicable, the graph bundle is left byte-identical to the floor
+ * and only the marker is written.
+ */
+export async function runGraphEnrichmentExecutor(bundle, options = {}) {
+    const floor = bundle.graph_bundle;
+    if (!floor) {
+        throw new Error("Cannot run graph enrichment without graph_bundle");
+    }
+    const registry = options.registry ?? ANALYZER_REGISTRY;
+    const root = options.root;
+    const disposition = bundle.file_disposition;
+    const dispositionMap = buildDispositionMap(disposition);
+    const pathLookup = bundle.repo_manifest
+        ? buildPathLookup(bundle.repo_manifest, dispositionMap)
+        : new Map();
+    const includedFiles = [...new Set(pathLookup.values())].sort((a, b) => a.localeCompare(b));
+    const entries = [];
+    const bucketEdges = { imports: [], calls: [], references: [] };
+    const routeEdges = [];
+    const analyzersUsed = [];
+    for (const analyzer of registry) {
+        const setting = settingFor(options.analyzers, analyzer.id);
+        const supportedFiles = includedFiles.filter((file) => analyzer.supports(file));
+        if (supportedFiles.length === 0) {
+            entries.push({ id: analyzer.id, resolution: "not_applicable", setting, edges_added: 0, routes_added: 0 });
+            continue;
+        }
+        if (setting === "skip") {
+            entries.push({ id: analyzer.id, resolution: "skip", setting, edges_added: 0, routes_added: 0, note: "Analyzer disabled via session config." });
+            continue;
+        }
+        if (!root || !bundle.repo_manifest) {
+            entries.push({ id: analyzer.id, resolution: "absent", setting, edges_added: 0, routes_added: 0, note: "No repository root available for analysis." });
+            continue;
+        }
+        const result = await runSingleAnalyzer(analyzer, root, setting, bundle, pathLookup, includedFiles, disposition, options.cacheRoot);
+        if (!result.ok) {
+            const entry = { id: analyzer.id, resolution: result.resolution, setting, edges_added: 0, routes_added: 0, note: result.note };
+            entries.push(entry);
+            if (entry.note?.startsWith("Analyzer failed")) {
+                process.stderr.write(JSON.stringify({
+                    kind: "graph_enrichment_analyzer_failed",
+                    analyzer_id: analyzer.id,
+                    resolution: result.resolution,
+                    note: entry.note,
+                    ts: new Date().toISOString(),
+                }) + "\n");
+            }
+            continue;
+        }
+        const { edges, routes, resolution } = result;
+        for (const edge of edges) {
+            bucketEdges[bucketForKind(edge.kind)].push(edge);
+        }
+        routeEdges.push(...routes);
+        if (edges.length + routes.length > 0) {
+            analyzersUsed.push(analyzer.id);
+        }
+        entries.push({ id: analyzer.id, resolution, setting, edges_added: edges.length, routes_added: routes.length });
+    }
+    const applied = analyzersUsed.length > 0;
+    const record = {
+        status: applied ? "applied" : "omitted",
+        analyzers: entries,
+    };
+    // The graph this obligation produces: the enriched bundle when analyzers
+    // contributed, otherwise the regex floor. Phase 4B may then rewrite the
+    // reasons of low-confidence edges on whichever graph stands — the floor's
+    // heuristic edges exist regardless of analyzers.
+    const graphBundle = applied
+        ? buildEnrichedGraph(floor, bucketEdges, routeEdges, analyzersUsed)
+        : floor;
+    let reasoned = { rewritten: 0, candidates: 0 };
+    if (options.llmEdgeReasoning === true && options.edgeReasoning) {
+        reasoned = applyEdgeReasoning(graphBundle, options.edgeReasoning);
+    }
+    const graphChanged = applied || reasoned.rewritten > 0;
+    const reasonSuffix = reasoned.rewritten > 0
+        ? ` Edge reasoning rewrote ${reasoned.rewritten} reason(s).`
+        : "";
+    if (!graphChanged) {
+        const failedEntries = entries.filter((e) => e.note?.startsWith("Analyzer failed"));
+        const failureSuffix = failedEntries.length > 0
+            ? `; ${failedEntries.length} analyzer(s) failed: ${failedEntries.map((e) => e.id).join(", ")} (see analyzer_capability.json)`
+            : "";
+        return {
+            updated: { ...bundle, analyzer_capability: record },
+            artifacts_written: ["analyzer_capability.json"],
+            progress_summary: `Graph enrichment omitted; deterministic regex graph retained.${failureSuffix}`,
+        };
+    }
+    const totalEdges = entries.reduce((sum, entry) => sum + entry.edges_added, 0);
+    return {
+        updated: { ...bundle, graph_bundle: graphBundle, analyzer_capability: record },
+        artifacts_written: ["graph_bundle.json", "analyzer_capability.json"],
+        progress_summary: applied
+            ? `Graph enrichment applied ${totalEdges} analyzer edge(s) from ${analyzersUsed.join(", ")}.${reasonSuffix}`
+            : `Graph enrichment omitted analyzers; edge reasoning rewrote ${reasoned.rewritten} reason(s).`,
+    };
+}
+//# sourceMappingURL=graphEnrichmentExecutor.js.map

package/dist/audit/orchestrator/graphEnrichmentExecutor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"graphEnrichmentExecutor.js","sourceRoot":"","sources":["../../../src/audit/orchestrator/graphEnrichmentExecutor.ts"],"names":[],"mappings":"AAQA,OAAO,EAAE,cAAc,EAAE,kBAAkB,EAAE,MAAM,oBAAoB,CAAC;AACxE,OAAO,EAAE,mBAAmB,EAAE,MAAM,8BAA8B,CAAC;AACnE,OAAO,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AACzD,OAAO,EAAE,kBAAkB,EAAE,MAAM,kCAAkC,CAAC;AACtE,OAAO,EAAE,iBAAiB,EAAE,MAAM,qCAAqC,CAAC;AASxE,OAAO,EACL,kBAAkB,GAGnB,MAAM,oBAAoB,CAAC;AAkB5B,MAAM,cAAc,GAAuD;IACzE,WAAW,EAAE,SAAS;IACtB,aAAa,EAAE,SAAS;IACxB,SAAS,EAAE,OAAO;IAClB,YAAY,EAAE,YAAY;IAC1B,eAAe,EAAE,YAAY;IAC7B,2EAA2E;IAC3E,gCAAgC;IAChC,WAAW,EAAE,SAAS;IACtB,gBAAgB,EAAE,SAAS;IAC3B,mEAAmE;IACnE,wCAAwC;IACxC,eAAe,EAAE,YAAY;IAC7B,YAAY,EAAE,YAAY;IAC1B,SAAS,EAAE,YAAY;CACxB,CAAC;AAEF,SAAS,aAAa,CAAC,IAAa;IAClC,MAAM,MAAM,GAAG,IAAI,CAAC,CAAC,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IACvD,OAAO,MAAM,IAAI,YAAY,CAAC;AAChC,CAAC;AAED,SAAS,UAAU,CACjB,SAAsD,EACtD,EAAU;IAEV,OAAO,SAAS,EAAE,CAAC,EAAE,CAAC,IAAI,MAAM,CAAC;AACnC,CAAC;AAED,SAAS,cAAc,CAAC,KAAgB;IACtC,OAAO,GAAG,KAAK,CAAC,MAAM,IAAI,EAAE,KAAK,KAAK,CAAC,IAAI,KAAK,KAAK,CAAC,OAAO,EAAE,CAAC;AAClE,CAAC;AAED,SAAS,WAAW,CAAC,KAAkB,EAAE,QAAqB;IAC5D,MAAM,OAAO,GAAG,IAAI,GAAG,EAAqB,CAAC;IAC7C,KAAK,MAAM,KAAK,IAAI,CAAC,GAAG,KAAK,EAAE,GAAG,QAAQ,CAAC,EAAE,CAAC;QAC5C,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,KAAK,CAAC,EAAE,KAAK,CAAC,CAAC;IAC5C,CAAC;IACD,OAAO,CAAC,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,CAC/B,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CACP,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC;QAC5B,CAAC,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC,CAAC,OAAO,CAAC;QAClC,CAAC,CAAC,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,MAAM,IAAI,EAAE,CAAC,CACjD,CAAC;AACJ,CAAC;AAYD;;;;GAIG;AACH,KAAK,UAAU,iBAAiB,CAC9B,QAA0B,EAC1B,IAAY,EACZ,OAAwB,EACxB,MAAsB,EACtB,UAA+B,EAC/B,aAAuB,EACvB,WAA+C,EAC/C,SAAkB;IAElB,MAAM,GAAG,GAAG,aAAa,CAAC,QAAQ,EAAE,IAAI,EAAE,OAAO,EAAE,SAAS,CAAC,CAAC;IAC9D,IAAI,GAAG,CAAC,UAAU,KAAK,QAAQ,EAAE,CAAC;QAChC,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,IAAI,oBAAoB,EAAE,UAAU,EAAE,QAAQ,EAAE,CAAC;IACrF,CAAC;IACD,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE;YACvF,IAAI;YACJ,YAAY,EAAE,MAAM,CAAC,aAAc;YACnC,WAAW;YACX,aAAa;YACb,UAAU;YACV,cAAc,EAAE,GAAG,CAAC,IAAI;SACzB,CAAC,CAAC;QACH,OAAO;YACL,EAAE,EAAE,IAAI;YACR,KAAK,EAAE,MAAM,CAAC,KAAK,IAAI,EAAE;YACzB,MAAM,EAAE,MAAM,CAAC,MAAM,IAAI,EAAE;YAC3B,UAAU,EAAE,GAAG,CAAC,UAAU;SAC3B,CAAC;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,IAAI,GACR,KAAK,YAAY,KAAK;YACpB,CAAC,CAAC,oBAAoB,KAAK,CAAC,IAAI,MAAM,KAAK,CAAC,OAAO,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,aAAa,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE;YACzI,CAAC,CAAC,oBAAoB,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC;QAC3C,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,UAAU,EAAE,GAAG,CAAC,UAAU,EAAE,CAAC;IACzD,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,SAAS,kBAAkB,CACzB,KAAkB,EAClB,WAAkF,EAClF,UAAuB,EACvB,aAAuB;IAEvB,OAAO;QACL,GAAG,KAAK;QACR,MAAM,EAAE;YACN,GAAG,KAAK,CAAC,MAAM;YACf,OAAO,EAAE,kBAAkB,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,IAAI,EAAE,EAAE,WAAW,CAAC,OAAO,CAAC;YAC5E,KAAK,EAAE,kBAAkB,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,IAAI,EAAE,EAAE,WAAW,CAAC,KAAK,CAAC;YACtE,UAAU,EAAE,kBAAkB,CAAC,KAAK,CAAC,MAAM,CAAC,UAAU,IAAI,EAAE,EAAE,WAAW,CAAC,UAAU,CAAC;YACrF,GAAG,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC;gBACvB,CAAC,CAAC,EAAE,MAAM,EAAE,WAAW,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,IAAI,EAAE,EAAE,UAAU,CAAC,EAAE;gBAChE,CAAC,CAAC,EAAE,CAAC;SACR;QACD,cAAc,EAAE,CAAC,GAAG,IAAI,GAAG,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,EAAE;KACnD,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,SAAS,aAAa,CACpB,QAA0B,EAC1B,IAAY,EACZ,OAAwB,EACxB,SAAkB;IAElB,IAAI,CAAC,QAAQ,CAAC,UAAU,EAAE,CAAC;QACzB,OAAO,EAAE,UAAU,EAAE,MAAM,EAAE,CAAC;IAChC,CAAC;IACD,MAAM,OAAO,GAAG,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IAC/C,MAAM,QAAQ,GAAG,kBAAkB,CAAC,QAAQ,CAAC,UAAU,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC;IACxE,IAAI,QAAQ,CAAC,GAAG,KAAK,MAAM,IAAI,QAAQ,CAAC,GAAG,KAAK,OAAO,EAAE,CAAC;QACxD,OAAO,EAAE,UAAU,EAAE,QAAQ,CAAC,GAAG,EAAE,IAAI,EAAE,QAAQ,CAAC,IAAI,EAAE,CAAC;IAC3D,CAAC;IACD,IAAI,OAAO,KAAK,WAAW,IAAI,OAAO,KAAK,WAAW,EAAE,CAAC;QACvD,MAAM,OAAO,GAAG,cAAc,CAAC,QAAQ,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;QAC7D,IAAI,OAAO,CAAC,EAAE,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC;YAC/B,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,CAAC;QACzD,CAAC;QACD,OAAO;YACL,UAAU,EAAE,QAAQ;YACpB,IAAI,EAAE,eAAe,QAAQ,CAAC,UAAU,aAAa,OAAO,CAAC,KAAK,IAAI,eAAe,GAAG;SACzF,CAAC;IACJ,CAAC;IACD,OAAO;QACL,UAAU,EAAE,QAAQ;QACpB,IAAI,EAAE,eAAe,QAAQ,CAAC,UAAU,qCAAqC;KAC9E,CAAC;AACJ,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,0BAA0B,CAC9C,MAAsB,EACtB,UAAkC,EAAE;IAEpC,MAAM,KAAK,GAAG,MAAM,CAAC,YAAY,CAAC;IAClC,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,MAAM,IAAI,KAAK,CAAC,kDAAkD,CAAC,CAAC;IACtE,CAAC;IACD,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,IAAI,iBAAiB,CAAC;IACvD,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC;IAC1B,MAAM,WAAW,GAAG,MAAM,CAAC,gBAAgB,CAAC;IAC5C,MAAM,cAAc,GAAG,mBAAmB,CAAC,WAAW,CAAC,CAAC;IACxD,MAAM,UAAU,GAAG,MAAM,CAAC,aAAa;QACrC,CAAC,CAAC,eAAe,CAAC,MAAM,CAAC,aAAa,EAAE,cAAc,CAAC;QACvD,CAAC,CAAC,IAAI,GAAG,EAAkB,CAAC;IAC9B,MAAM,aAAa,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,UAAU,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CACpE,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,CACnB,CAAC;IAEF,MAAM,OAAO,GAA8B,EAAE,CAAC;IAC9C,MAAM,WAAW,GAAG,EAAE,OAAO,EAAE,EAAiB,EAAE,KAAK,EAAE,EAAiB,EAAE,UAAU,EAAE,EAAiB,EAAE,CAAC;IAC5G,MAAM,UAAU,GAAgB,EAAE,CAAC;IACnC,MAAM,aAAa,GAAa,EAAE,CAAC;IAEnC,KAAK,MAAM,QAAQ,IAAI,QAAQ,EAAE,CAAC;QAChC,MAAM,OAAO,GAAG,UAAU,CAAC,OAAO,CAAC,SAAS,EAAE,QAAQ,CAAC,EAAE,CAAC,CAAC;QAC3D,MAAM,cAAc,GAAG,aAAa,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC;QAE/E,IAAI,cAAc,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAChC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,QAAQ,CAAC,EAAE,EAAE,UAAU,EAAE,gBAAgB,EAAE,OAAO,EAAE,WAAW,EAAE,CAAC,EAAE,YAAY,EAAE,CAAC,EAAE,CAAC,CAAC;YAC1G,SAAS;QACX,CAAC;QACD,IAAI,OAAO,KAAK,MAAM,EAAE,CAAC;YACvB,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,QAAQ,CAAC,EAAE,EAAE,UAAU,EAAE,MAAM,EAAE,OAAO,EAAE,WAAW,EAAE,CAAC,EAAE,YAAY,EAAE,CAAC,EAAE,IAAI,EAAE,uCAAuC,EAAE,CAAC,CAAC;YAC/I,SAAS;QACX,CAAC;QACD,IAAI,CAAC,IAAI,IAAI,CAAC,MAAM,CAAC,aAAa,EAAE,CAAC;YACnC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,QAAQ,CAAC,EAAE,EAAE,UAAU,EAAE,QAAQ,EAAE,OAAO,EAAE,WAAW,EAAE,CAAC,EAAE,YAAY,EAAE,CAAC,EAAE,IAAI,EAAE,4CAA4C,EAAE,CAAC,CAAC;YACtJ,SAAS;QACX,CAAC;QAED,MAAM,MAAM,GAAG,MAAM,iBAAiB,CAAC,QAAQ,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,aAAa,EAAE,WAAW,EAAE,OAAO,CAAC,SAAS,CAAC,CAAC;QACnI,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;YACf,MAAM,KAAK,GAA4B,EAAE,EAAE,EAAE,QAAQ,CAAC,EAAE,EAAE,UAAU,EAAE,MAAM,CAAC,UAAU,EAAE,OAAO,EAAE,WAAW,EAAE,CAAC,EAAE,YAAY,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,CAAC;YACvJ,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACpB,IAAI,KAAK,CAAC,IAAI,EAAE,UAAU,CAAC,iBAAiB,CAAC,EAAE,CAAC;gBAC9C,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,IAAI,CAAC,SAAS,CAAC;oBACb,IAAI,EAAE,kCAAkC;oBACxC,WAAW,EAAE,QAAQ,CAAC,EAAE;oBACxB,UAAU,EAAE,MAAM,CAAC,UAAU;oBAC7B,IAAI,EAAE,KAAK,CAAC,IAAI;oBAChB,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;iBAC7B,CAAC,GAAG,IAAI,CACV,CAAC;YACJ,CAAC;YACD,SAAS;QACX,CAAC;QAED,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,UAAU,EAAE,GAAG,MAAM,CAAC;QAC7C,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,WAAW,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACnD,CAAC;QACD,UAAU,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,CAAC;QAC3B,IAAI,KAAK,CAAC,MAAM,GAAG,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACrC,aAAa,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;QAClC,CAAC;QACD,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,QAAQ,CAAC,EAAE,EAAE,UAAU,EAAE,OAAO,EAAE,WAAW,EAAE,KAAK,CAAC,MAAM,EAAE,YAAY,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;IACjH,CAAC;IAED,MAAM,OAAO,GAAG,aAAa,CAAC,MAAM,GAAG,CAAC,CAAC;IACzC,MAAM,MAAM,GAA6B;QACvC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS;QACvC,SAAS,EAAE,OAAO;KACnB,CAAC;IAEF,yEAAyE;IACzE,wEAAwE;IACxE,0EAA0E;IAC1E,iDAAiD;IACjD,MAAM,WAAW,GAAgB,OAAO;QACtC,CAAC,CAAC,kBAAkB,CAAC,KAAK,EAAE,WAAW,EAAE,UAAU,EAAE,aAAa,CAAC;QACnE,CAAC,CAAC,KAAK,CAAC;IAEV,IAAI,QAAQ,GAAyB,EAAE,SAAS,EAAE,CAAC,EAAE,UAAU,EAAE,CAAC,EAAE,CAAC;IACrE,IAAI,OAAO,CAAC,gBAAgB,KAAK,IAAI,IAAI,OAAO,CAAC,aAAa,EAAE,CAAC;QAC/D,QAAQ,GAAG,kBAAkB,CAAC,WAAW,EAAE,OAAO,CAAC,aAAa,CAAC,CAAC;IACpE,CAAC;IAED,MAAM,YAAY,GAAG,OAAO,IAAI,QAAQ,CAAC,SAAS,GAAG,CAAC,CAAC;IACvD,MAAM,YAAY,GAChB,QAAQ,CAAC,SAAS,GAAG,CAAC;QACpB,CAAC,CAAC,2BAA2B,QAAQ,CAAC,SAAS,aAAa;QAC5D,CAAC,CAAC,EAAE,CAAC;IAET,IAAI,CAAC,YAAY,EAAE,CAAC;QAClB,MAAM,aAAa,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,UAAU,CAAC,iBAAiB,CAAC,CAAC,CAAC;QACnF,MAAM,aAAa,GACjB,aAAa,CAAC,MAAM,GAAG,CAAC;YACtB,CAAC,CAAC,KAAK,aAAa,CAAC,MAAM,wBAAwB,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,iCAAiC;YAC7H,CAAC,CAAC,EAAE,CAAC;QACT,OAAO;YACL,OAAO,EAAE,EAAE,GAAG,MAAM,EAAE,mBAAmB,EAAE,MAAM,EAAE;YACnD,iBAAiB,EAAE,CAAC,0BAA0B,CAAC;YAC/C,gBAAgB,EACd,gEAAgE,aAAa,EAAE;SAClF,CAAC;IACJ,CAAC;IAED,MAAM,UAAU,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,KAAK,EAAE,EAAE,CAAC,GAAG,GAAG,KAAK,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC;IAC9E,OAAO;QACL,OAAO,EAAE,EAAE,GAAG,MAAM,EAAE,YAAY,EAAE,WAAW,EAAE,mBAAmB,EAAE,MAAM,EAAE;QAC9E,iBAAiB,EAAE,CAAC,mBAAmB,EAAE,0BAA0B,CAAC;QACpE,gBAAgB,EAAE,OAAO;YACvB,CAAC,CAAC,4BAA4B,UAAU,0BAA0B,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,YAAY,EAAE;YAC5G,CAAC,CAAC,8DAA8D,QAAQ,CAAC,SAAS,aAAa;KAClG,CAAC;AACJ,CAAC"}

package/dist/audit/orchestrator/ingestionExecutors.d.ts

@@ -0,0 +1,10 @@
+import type { ArtifactBundle } from "../io/artifacts.js";
+import type { AuditResult } from "../types.js";
+import type { RuntimeValidationReport } from "../types/runtimeValidation.js";
+import type { ExternalAnalyzerResults } from "../types/externalAnalyzer.js";
+import type { ExecutorRunResult } from "./executorResult.js";
+export declare function runResultIngestionExecutor(bundle: ArtifactBundle, results: AuditResult[]): ExecutorRunResult;
+export declare function runRuntimeValidationExecutor(bundle: ArtifactBundle, root: string): Promise<ExecutorRunResult>;
+export declare function runRuntimeValidationUpdateExecutor(bundle: ArtifactBundle, updates: RuntimeValidationReport): ExecutorRunResult;
+export declare function runExternalAnalyzerImportExecutor(bundle: ArtifactBundle, externalResults: ExternalAnalyzerResults): ExecutorRunResult;
+//# sourceMappingURL=ingestionExecutors.d.ts.map

package/dist/audit/orchestrator/ingestionExecutors.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ingestionExecutors.d.ts","sourceRoot":"","sources":["../../../src/audit/orchestrator/ingestionExecutors.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AACzD,OAAO,KAAK,EAAE,WAAW,EAAa,MAAM,aAAa,CAAC;AAC1D,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,+BAA+B,CAAC;AAC7E,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,8BAA8B,CAAC;AAkB5E,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,qBAAqB,CAAC;AAqF7D,wBAAgB,0BAA0B,CACxC,MAAM,EAAE,cAAc,EACtB,OAAO,EAAE,WAAW,EAAE,GACrB,iBAAiB,CAmGnB;AAED,wBAAsB,4BAA4B,CAChD,MAAM,EAAE,cAAc,EACtB,IAAI,EAAE,MAAM,GACX,OAAO,CAAC,iBAAiB,CAAC,CA0E5B;AAED,wBAAgB,kCAAkC,CAChD,MAAM,EAAE,cAAc,EACtB,OAAO,EAAE,uBAAuB,GAC/B,iBAAiB,CAkCnB;AAED,wBAAgB,iCAAiC,CAC/C,MAAM,EAAE,cAAc,EACtB,eAAe,EAAE,uBAAuB,GACvC,iBAAiB,CAkBnB"}

package/dist/audit/orchestrator/ingestionExecutors.js

@@ -0,0 +1,262 @@
+import { runCommand } from "./runtimeCommand.js";
+import { buildFlowCoverage } from "./flowCoverage.js";
+import { buildRequeuePayload } from "./requeueCommand.js";
+import { buildRuntimeValidationTasks, mergeRuntimeValidationReport, } from "./runtimeValidation.js";
+import { ingestAuditResults, updateAuditTaskStatuses, } from "./resultIngestion.js";
+import { buildAuditPlanMetrics, sizeIndexFromManifest, } from "./reviewPackets.js";
+import { updateRuntimeValidationReport } from "./runtimeValidationUpdate.js";
+import { buildSelectiveDeepeningTasks } from "./selectiveDeepening.js";
+function lineIndexFromTasks(tasks) {
+    return Object.fromEntries((tasks ?? []).flatMap((task) => Object.entries(task.file_line_counts ?? {})));
+}
+function appendSelectiveDeepeningTasks(params) {
+    if (!params.bundle.audit_tasks) {
+        return { bundle: params.bundle, taskCount: 0, artifacts: [] };
+    }
+    const lineIndex = lineIndexFromTasks(params.bundle.audit_tasks);
+    const sizeIndex = sizeIndexFromManifest(params.bundle.repo_manifest);
+    const selectiveDeepeningTasks = buildSelectiveDeepeningTasks({
+        existingTasks: params.bundle.audit_tasks,
+        results: params.results,
+        lineIndex,
+        runtimeValidationTasks: params.bundle.runtime_validation_tasks,
+        runtimeValidationReport: params.runtimeValidationReport ?? params.bundle.runtime_validation_report,
+        externalAnalyzerResults: params.bundle.external_analyzer_results,
+    });
+    if (selectiveDeepeningTasks.length === 0) {
+        return { bundle: params.bundle, taskCount: 0, artifacts: [] };
+    }
+    const auditTasks = [...params.bundle.audit_tasks, ...selectiveDeepeningTasks];
+    return {
+        bundle: {
+            ...params.bundle,
+            audit_tasks: auditTasks,
+            audit_plan_metrics: buildAuditPlanMetrics(auditTasks, {
+                graphBundle: params.bundle.graph_bundle,
+                lineIndex,
+                sizeIndex,
+            }),
+        },
+        taskCount: selectiveDeepeningTasks.length,
+        artifacts: ["audit_tasks.json", "audit_plan_metrics.json"],
+    };
+}
+/**
+ * Apply selective deepening to an already-prepared base bundle and return the
+ * pieces every executor needs to assemble its `ExecutorRunResult`: the updated
+ * bundle, the deepening artifacts, and the progress-summary suffix.
+ *
+ * Centralizing this keeps the three executors that run deepening consistent —
+ * previously each site invoked `appendSelectiveDeepeningTasks` and then
+ * re-derived the same `Added N selective deepening task(s)` suffix by hand.
+ * `excludeArtifacts` lets a caller that already lists an artifact explicitly
+ * (the result-ingestion executor lists `audit_tasks.json`) drop it from the
+ * spread so it is never double-counted.
+ */
+function applySelectiveDeepening(params) {
+    const selectiveDeepening = appendSelectiveDeepeningTasks({
+        bundle: params.baseBundle,
+        results: params.results,
+        runtimeValidationReport: params.runtimeValidationReport,
+    });
+    const exclude = new Set(params.excludeArtifacts ?? []);
+    return {
+        bundle: selectiveDeepening.bundle,
+        artifacts: selectiveDeepening.artifacts.filter((artifact) => !exclude.has(artifact)),
+        summarySuffix: selectiveDeepening.taskCount > 0
+            ? ` Added ${selectiveDeepening.taskCount} selective deepening task(s).`
+            : "",
+    };
+}
+export function runResultIngestionExecutor(bundle, results) {
+    if (!bundle.coverage_matrix) {
+        throw new Error("Cannot ingest results without coverage_matrix");
+    }
+    const updatedCoverageMatrix = ingestAuditResults(bundle.coverage_matrix, results);
+    const flowCoverage = bundle.critical_flows
+        ? buildFlowCoverage(bundle.critical_flows, updatedCoverageMatrix)
+        : bundle.flow_coverage;
+    const runtimeCommand = bundle.runtime_validation_tasks?.tasks.find((task) => task.command && task.command.length > 0)?.command;
+    const runtimeValidationTasks = bundle.unit_manifest && flowCoverage
+        ? buildRuntimeValidationTasks({
+            unitManifest: bundle.unit_manifest,
+            criticalFlows: bundle.critical_flows,
+            flowCoverage,
+            command: runtimeCommand,
+        })
+        : bundle.runtime_validation_tasks;
+    const runtimeValidationReport = runtimeValidationTasks
+        ? mergeRuntimeValidationReport(runtimeValidationTasks, bundle.runtime_validation_report)
+        : bundle.runtime_validation_report;
+    const mergedResults = [...(bundle.audit_results ?? []), ...results];
+    const completedAuditTasks = updateAuditTaskStatuses(bundle.audit_tasks, mergedResults);
+    const baseUpdatedBundle = {
+        ...bundle,
+        coverage_matrix: updatedCoverageMatrix,
+        flow_coverage: flowCoverage,
+        runtime_validation_tasks: runtimeValidationTasks,
+        runtime_validation_report: runtimeValidationReport,
+        audit_results: mergedResults,
+        audit_tasks: completedAuditTasks,
+        audit_report: undefined,
+    };
+    const selectiveDeepening = applySelectiveDeepening({
+        baseBundle: baseUpdatedBundle,
+        results: mergedResults,
+        runtimeValidationReport,
+        excludeArtifacts: ["audit_tasks.json"],
+    });
+    const requeuePayload = buildRequeuePayload(updatedCoverageMatrix, selectiveDeepening.bundle.critical_flows, selectiveDeepening.bundle.flow_coverage, selectiveDeepening.bundle.external_analyzer_results);
+    // Fold pending requeue tasks into the dispatch task list so mandatory
+    // coverage gaps produce actual dispatch packets. Enrich with line-count
+    // hints and dedupe against existing tasks by task_id.
+    const deepenedTasks = selectiveDeepening.bundle.audit_tasks ?? [];
+    const lineIndex = lineIndexFromTasks(deepenedTasks);
+    const sizeIndex = sizeIndexFromManifest(selectiveDeepening.bundle.repo_manifest);
+    const existingTaskIds = new Set(deepenedTasks.map((t) => t.task_id));
+    const pendingRequeueTasks = requeuePayload.tasks
+        .filter((t) => t.status === "pending")
+        .filter((t) => !existingTaskIds.has(t.task_id))
+        .map((t) => ({
+        ...t,
+        file_line_counts: Object.fromEntries(t.file_paths
+            .filter((p) => lineIndex[p] != null)
+            .map((p) => [p, lineIndex[p]])),
+    }));
+    const allDispatchTasks = [...deepenedTasks, ...pendingRequeueTasks];
+    const finalBundle = {
+        ...selectiveDeepening.bundle,
+        requeue_tasks: requeuePayload.tasks,
+        audit_plan_metrics: buildAuditPlanMetrics(allDispatchTasks, {
+            graphBundle: selectiveDeepening.bundle.graph_bundle,
+            lineIndex,
+            sizeIndex,
+        }),
+    };
+    return {
+        updated: finalBundle,
+        artifacts_written: [
+            "coverage_matrix.json",
+            "flow_coverage.json",
+            ...(runtimeValidationTasks ? ["runtime_validation_tasks.json"] : []),
+            ...(runtimeValidationReport ? ["runtime_validation_report.json"] : []),
+            "audit_results.jsonl",
+            "audit_tasks.json",
+            "audit_plan_metrics.json",
+            "requeue_tasks.json",
+        ],
+        progress_summary: `Ingested ${results.length} audit result entries and refreshed dependent artifacts.` +
+            selectiveDeepening.summarySuffix,
+    };
+}
+export async function runRuntimeValidationExecutor(bundle, root) {
+    if (!bundle.runtime_validation_tasks) {
+        throw new Error("Cannot execute runtime validation without runtime_validation_tasks");
+    }
+    const existing = bundle.runtime_validation_report ?? { results: [] };
+    const byTaskId = new Map(existing.results.map((result) => [result.task_id, result]));
+    const byCommand = new Map();
+    let uniqueCommandsRun = 0;
+    let deduplicatedHits = 0;
+    for (const task of bundle.runtime_validation_tasks.tasks) {
+        const prior = byTaskId.get(task.id);
+        if (prior &&
+            ["confirmed", "not_confirmed", "inconclusive", "not_required"].includes(prior.status)) {
+            continue;
+        }
+        if (!task.command || task.command.length === 0) {
+            byTaskId.set(task.id, {
+                task_id: task.id,
+                status: "not_required",
+                summary: `No deterministic runtime command was available for ${task.id}.`,
+                evidence: [],
+                notes: ["Runtime validation was not planned for this task."],
+            });
+            continue;
+        }
+        const signature = task.command.join("\0");
+        if (byCommand.has(signature)) {
+            deduplicatedHits++;
+        }
+        else {
+            uniqueCommandsRun++;
+        }
+        const outcome = byCommand.get(signature) ?? (await runCommand(task.command, root));
+        byCommand.set(signature, outcome);
+        byTaskId.set(task.id, {
+            task_id: task.id,
+            status: outcome.status,
+            summary: outcome.summary,
+            evidence: outcome.evidence,
+            notes: [`Target paths: ${task.target_paths.join(", ")}`],
+        });
+    }
+    const runtimeValidationReport = {
+        results: [...byTaskId.values()].sort((a, b) => a.task_id.localeCompare(b.task_id)),
+    };
+    const baseUpdatedBundle = {
+        ...bundle,
+        runtime_validation_report: runtimeValidationReport,
+        audit_report: undefined,
+    };
+    const selectiveDeepening = applySelectiveDeepening({
+        baseBundle: baseUpdatedBundle,
+        results: bundle.audit_results ?? [],
+        runtimeValidationReport,
+    });
+    return {
+        updated: selectiveDeepening.bundle,
+        artifacts_written: [
+            "runtime_validation_report.json",
+            ...selectiveDeepening.artifacts,
+        ],
+        progress_summary: `Executed deterministic runtime validation for ${bundle.runtime_validation_tasks.tasks.length} task(s) (${uniqueCommandsRun} unique command(s) run, ${deduplicatedHits} served from deduplication cache).` +
+            selectiveDeepening.summarySuffix,
+    };
+}
+export function runRuntimeValidationUpdateExecutor(bundle, updates) {
+    if (!bundle.runtime_validation_tasks) {
+        throw new Error("Cannot update runtime validation without runtime_validation_tasks");
+    }
+    const existingReport = bundle.runtime_validation_report ?? { results: [] };
+    const mergedReport = updateRuntimeValidationReport(bundle.runtime_validation_tasks, existingReport, updates);
+    const baseUpdatedBundle = {
+        ...bundle,
+        runtime_validation_report: mergedReport,
+        audit_report: undefined,
+    };
+    const selectiveDeepening = applySelectiveDeepening({
+        baseBundle: baseUpdatedBundle,
+        results: bundle.audit_results ?? [],
+        runtimeValidationReport: mergedReport,
+    });
+    return {
+        updated: selectiveDeepening.bundle,
+        artifacts_written: [
+            "runtime_validation_report.json",
+            ...selectiveDeepening.artifacts,
+        ],
+        progress_summary: `Merged ${updates.results.length} runtime validation updates.` +
+            selectiveDeepening.summarySuffix,
+    };
+}
+export function runExternalAnalyzerImportExecutor(bundle, externalResults) {
+    const summary = `Imported ${externalResults.results.length} normalized findings from ${externalResults.tool}.`;
+    return {
+        updated: {
+            ...bundle,
+            external_analyzer_results: externalResults,
+            coverage_matrix: undefined,
+            flow_coverage: undefined,
+            runtime_validation_tasks: undefined,
+            runtime_validation_report: undefined,
+            audit_tasks: undefined,
+            audit_plan_metrics: undefined,
+            requeue_tasks: undefined,
+            audit_report: undefined,
+        },
+        artifacts_written: ["external_analyzer_results.json"],
+        progress_summary: summary,
+    };
+}
+//# sourceMappingURL=ingestionExecutors.js.map