audit-tools 0.29.3 → 0.30.0

package/dist/shared/types/graph.d.ts

@@ -36,6 +36,84 @@ export declare const RouteEdgeSchema: z.ZodObject<{
     method?: string | undefined;
 }>;
 export type RouteEdge = z.infer<typeof RouteEdgeSchema>;
+/**
+ * Per-node structural measure (one of complexity / duplication). `value` is the
+ * raw metric, `measure` names the concrete algorithm used (so consumers never
+ * guess units), and `reach` records the scope of source the measure actually
+ * covered — currently only `'js-ts-effective'` (computed over JS/TS source).
+ */
+export declare const NodeMetricSchema: z.ZodObject<{
+    value: z.ZodNumber;
+    measure: z.ZodString;
+    reach: z.ZodLiteral<"js-ts-effective">;
+}, "strict", z.ZodTypeAny, {
+    value: number;
+    measure: string;
+    reach: "js-ts-effective";
+}, {
+    value: number;
+    measure: string;
+    reach: "js-ts-effective";
+}>;
+export type NodeMetric = z.infer<typeof NodeMetricSchema>;
+/**
+ * Optional per-node (repo-path keyed) structural metrics computed at graph-build
+ * time, where the file source is available. Absent for non-js/ts files (never
+ * zero-filled). Each metric is independently optional. Declared as an explicit
+ * optional Zod field (not a catchall) so a `.strict()` bundle WITHOUT
+ * `node_metrics` still parses, while an unknown sibling key is rejected.
+ */
+export declare const NodeMetricsSchema: z.ZodRecord<z.ZodString, z.ZodObject<{
+    complexity: z.ZodOptional<z.ZodObject<{
+        value: z.ZodNumber;
+        measure: z.ZodString;
+        reach: z.ZodLiteral<"js-ts-effective">;
+    }, "strict", z.ZodTypeAny, {
+        value: number;
+        measure: string;
+        reach: "js-ts-effective";
+    }, {
+        value: number;
+        measure: string;
+        reach: "js-ts-effective";
+    }>>;
+    duplication: z.ZodOptional<z.ZodObject<{
+        value: z.ZodNumber;
+        measure: z.ZodString;
+        reach: z.ZodLiteral<"js-ts-effective">;
+    }, "strict", z.ZodTypeAny, {
+        value: number;
+        measure: string;
+        reach: "js-ts-effective";
+    }, {
+        value: number;
+        measure: string;
+        reach: "js-ts-effective";
+    }>>;
+}, "strict", z.ZodTypeAny, {
+    complexity?: {
+        value: number;
+        measure: string;
+        reach: "js-ts-effective";
+    } | undefined;
+    duplication?: {
+        value: number;
+        measure: string;
+        reach: "js-ts-effective";
+    } | undefined;
+}, {
+    complexity?: {
+        value: number;
+        measure: string;
+        reach: "js-ts-effective";
+    } | undefined;
+    duplication?: {
+        value: number;
+        measure: string;
+        reach: "js-ts-effective";
+    } | undefined;
+}>>;
+export type NodeMetrics = z.infer<typeof NodeMetricsSchema>;
 export declare const GraphBundleSchema: z.ZodObject<{
     graphs: z.ZodObject<{
         imports: z.ZodOptional<z.ZodArray<z.ZodObject<{
@@ -284,6 +362,61 @@ export declare const GraphBundleSchema: z.ZodObject<{
      * the deterministic regex floor was used). See Phase 5 analyzer seam.
      */
     analyzers_used: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+    /**
+     * Optional per-node structural metrics (complexity / duplication) computed at
+     * graph-build time over js/ts source. Explicit optional field so legacy
+     * bundles without it still parse under `.strict()`.
+     */
+    node_metrics: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodObject<{
+        complexity: z.ZodOptional<z.ZodObject<{
+            value: z.ZodNumber;
+            measure: z.ZodString;
+            reach: z.ZodLiteral<"js-ts-effective">;
+        }, "strict", z.ZodTypeAny, {
+            value: number;
+            measure: string;
+            reach: "js-ts-effective";
+        }, {
+            value: number;
+            measure: string;
+            reach: "js-ts-effective";
+        }>>;
+        duplication: z.ZodOptional<z.ZodObject<{
+            value: z.ZodNumber;
+            measure: z.ZodString;
+            reach: z.ZodLiteral<"js-ts-effective">;
+        }, "strict", z.ZodTypeAny, {
+            value: number;
+            measure: string;
+            reach: "js-ts-effective";
+        }, {
+            value: number;
+            measure: string;
+            reach: "js-ts-effective";
+        }>>;
+    }, "strict", z.ZodTypeAny, {
+        complexity?: {
+            value: number;
+            measure: string;
+            reach: "js-ts-effective";
+        } | undefined;
+        duplication?: {
+            value: number;
+            measure: string;
+            reach: "js-ts-effective";
+        } | undefined;
+    }, {
+        complexity?: {
+            value: number;
+            measure: string;
+            reach: "js-ts-effective";
+        } | undefined;
+        duplication?: {
+            value: number;
+            measure: string;
+            reach: "js-ts-effective";
+        } | undefined;
+    }>>>;
 }, "strict", z.ZodTypeAny, {
     graphs: {
         imports?: {
@@ -319,6 +452,18 @@ export declare const GraphBundleSchema: z.ZodObject<{
         [k: string]: unknown;
     };
     analyzers_used?: string[] | undefined;
+    node_metrics?: Record<string, {
+        complexity?: {
+            value: number;
+            measure: string;
+            reach: "js-ts-effective";
+        } | undefined;
+        duplication?: {
+            value: number;
+            measure: string;
+            reach: "js-ts-effective";
+        } | undefined;
+    }> | undefined;
 }, {
     graphs: {
         imports?: {
@@ -354,6 +499,18 @@ export declare const GraphBundleSchema: z.ZodObject<{
         [k: string]: unknown;
     };
     analyzers_used?: string[] | undefined;
+    node_metrics?: Record<string, {
+        complexity?: {
+            value: number;
+            measure: string;
+            reach: "js-ts-effective";
+        } | undefined;
+        duplication?: {
+            value: number;
+            measure: string;
+            reach: "js-ts-effective";
+        } | undefined;
+    }> | undefined;
 }>;
 export type GraphBundle = z.infer<typeof GraphBundleSchema>;
 //# sourceMappingURL=graph.d.ts.map

package/dist/shared/types/graph.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"graph.d.ts","sourceRoot":"","sources":["../../../src/shared/types/graph.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,eAAO,MAAM,eAAe;;;;;;;;;;;;;;;;;;;;;EASjB,CAAC;AACZ,MAAM,MAAM,SAAS,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,eAAe,CAAC,CAAC;AAExD,eAAO,MAAM,eAAe;;;;;;;;;;;;EAMjB,CAAC;AACZ,MAAM,MAAM,SAAS,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,eAAe,CAAC,CAAC;AAExD,eAAO,MAAM,iBAAiB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;IAW1B;;;;OAIG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAGI,CAAC;AACZ,MAAM,MAAM,WAAW,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,iBAAiB,CAAC,CAAC"}
+{"version":3,"file":"graph.d.ts","sourceRoot":"","sources":["../../../src/shared/types/graph.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,eAAO,MAAM,eAAe;;;;;;;;;;;;;;;;;;;;;EASjB,CAAC;AACZ,MAAM,MAAM,SAAS,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,eAAe,CAAC,CAAC;AAExD,eAAO,MAAM,eAAe;;;;;;;;;;;;EAMjB,CAAC;AACZ,MAAM,MAAM,SAAS,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,eAAe,CAAC,CAAC;AAExD;;;;;GAKG;AACH,eAAO,MAAM,gBAAgB;;;;;;;;;;;;EAMlB,CAAC;AACZ,MAAM,MAAM,UAAU,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gBAAgB,CAAC,CAAC;AAE1D;;;;;;GAMG;AACH,eAAO,MAAM,iBAAiB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAQ7B,CAAC;AACF,MAAM,MAAM,WAAW,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,iBAAiB,CAAC,CAAC;AAE5D,eAAO,MAAM,iBAAiB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;IAW1B;;;;OAIG;;IAEH;;;;OAIG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAGI,CAAC;AACZ,MAAM,MAAM,WAAW,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,iBAAiB,CAAC,CAAC"}

package/dist/shared/types/graph.js

@@ -16,6 +16,32 @@ export const RouteEdgeSchema = z
     method: z.string().optional(),
 })
     .strict();
+/**
+ * Per-node structural measure (one of complexity / duplication). `value` is the
+ * raw metric, `measure` names the concrete algorithm used (so consumers never
+ * guess units), and `reach` records the scope of source the measure actually
+ * covered — currently only `'js-ts-effective'` (computed over JS/TS source).
+ */
+export const NodeMetricSchema = z
+    .object({
+    value: z.number(),
+    measure: z.string(),
+    reach: z.literal("js-ts-effective"),
+})
+    .strict();
+/**
+ * Optional per-node (repo-path keyed) structural metrics computed at graph-build
+ * time, where the file source is available. Absent for non-js/ts files (never
+ * zero-filled). Each metric is independently optional. Declared as an explicit
+ * optional Zod field (not a catchall) so a `.strict()` bundle WITHOUT
+ * `node_metrics` still parses, while an unknown sibling key is rejected.
+ */
+export const NodeMetricsSchema = z.record(z.string(), z
+    .object({
+    complexity: NodeMetricSchema.optional(),
+    duplication: NodeMetricSchema.optional(),
+})
+    .strict());
 export const GraphBundleSchema = z
     .object({
     graphs: z
@@ -33,6 +59,12 @@ export const GraphBundleSchema = z
      * the deterministic regex floor was used). See Phase 5 analyzer seam.
      */
     analyzers_used: z.array(z.string()).optional(),
+    /**
+     * Optional per-node structural metrics (complexity / duplication) computed at
+     * graph-build time over js/ts source. Explicit optional field so legacy
+     * bundles without it still parse under `.strict()`.
+     */
+    node_metrics: NodeMetricsSchema.optional(),
 })
     .strict();
 //# sourceMappingURL=graph.js.map

package/dist/shared/types/graph.js.map

@@ -1 +1 @@
-{"version":3,"file":"graph.js","sourceRoot":"","sources":["../../../src/shared/types/graph.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC;KAC7B,MAAM,CAAC;IACN,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;IAChB,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE;IACd,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC3B,SAAS,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE,YAAY,CAAC,CAAC,CAAC,QAAQ,EAAE;IACxD,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IAC/C,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CAC9B,CAAC;KACD,MAAM,EAAE,CAAC;AAGZ,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC;KAC7B,MAAM,CAAC;IACN,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;IAChB,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE;IACnB,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CAC9B,CAAC;KACD,MAAM,EAAE,CAAC;AAGZ,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC;KAC/B,MAAM,CAAC;IACN,MAAM,EAAE,CAAC;SACN,MAAM,CAAC;QACN,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC,QAAQ,EAAE;QAC5C,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC,QAAQ,EAAE;QAC1C,UAAU,EAAE,CAAC,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC,QAAQ,EAAE;QAC/C,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC,QAAQ,EAAE;KAC5C,CAAC;QACF,oEAAoE;SACnE,QAAQ,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC;IACxB;;;;OAIG;IACH,cAAc,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;CAC/C,CAAC;KACD,MAAM,EAAE,CAAC"}
+{"version":3,"file":"graph.js","sourceRoot":"","sources":["../../../src/shared/types/graph.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC;KAC7B,MAAM,CAAC;IACN,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;IAChB,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE;IACd,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC3B,SAAS,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE,YAAY,CAAC,CAAC,CAAC,QAAQ,EAAE;IACxD,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IAC/C,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CAC9B,CAAC;KACD,MAAM,EAAE,CAAC;AAGZ,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC;KAC7B,MAAM,CAAC;IACN,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;IAChB,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE;IACnB,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CAC9B,CAAC;KACD,MAAM,EAAE,CAAC;AAGZ;;;;;GAKG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC;KAC9B,MAAM,CAAC;IACN,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE;IACjB,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE;IACnB,KAAK,EAAE,CAAC,CAAC,OAAO,CAAC,iBAAiB,CAAC;CACpC,CAAC;KACD,MAAM,EAAE,CAAC;AAGZ;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,CAAC,MAAM,CACvC,CAAC,CAAC,MAAM,EAAE,EACV,CAAC;KACE,MAAM,CAAC;IACN,UAAU,EAAE,gBAAgB,CAAC,QAAQ,EAAE;IACvC,WAAW,EAAE,gBAAgB,CAAC,QAAQ,EAAE;CACzC,CAAC;KACD,MAAM,EAAE,CACZ,CAAC;AAGF,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC;KAC/B,MAAM,CAAC;IACN,MAAM,EAAE,CAAC;SACN,MAAM,CAAC;QACN,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC,QAAQ,EAAE;QAC5C,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC,QAAQ,EAAE;QAC1C,UAAU,EAAE,CAAC,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC,QAAQ,EAAE;QAC/C,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC,QAAQ,EAAE;KAC5C,CAAC;QACF,oEAAoE;SACnE,QAAQ,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC;IACxB;;;;OAIG;IACH,cAAc,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;IAC9C;;;;OAIG;IACH,YAAY,EAAE,iBAAiB,CAAC,QAAQ,EAAE;CAC3C,CAAC;KACD,MAAM,EAAE,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "audit-tools",
-  "version": "0.29.3",
+  "version": "0.30.0",
   "private": false,
   "description": "Portable hybrid code auditing + remediation orchestrators for arbitrary repositories.",
   "type": "module",