code-auditor-mcp 2.6.2 → 3.0.1

package/dist/reporting/csvReportGenerator.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"csvReportGenerator.d.ts","sourceRoot":"","sources":["../../src/reporting/csvReportGenerator.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EAAE,WAAW,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AAErD,MAAM,WAAW,eAAe;IAC9B,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,cAAc,CAAC,EAAE,OAAO,CAAC;IACzB,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC;IACnB,aAAa,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,SAAS,EAAE,SAAS,GAAG;QAAE,QAAQ,EAAE,MAAM,CAAA;KAAE,KAAK,MAAM,CAAC,CAAC;CACzF;AAiBD;;GAEG;AACH,wBAAgB,iBAAiB,CAC/B,MAAM,EAAE,WAAW,EACnB,MAAM,CAAC,EAAE,eAAe,GACvB,MAAM,CAoBR;AAED;;GAEG;AACH,wBAAgB,wBAAwB,CACtC,MAAM,EAAE,WAAW,EACnB,MAAM,CAAC,EAAE,eAAe,GACvB,MAAM,CAiCR;AAmGD;;GAEG;AACH,wBAAgB,sBAAsB,CAAC,MAAM,EAAE,WAAW,GAAG,MAAM,CAsBlE;AAGD,eAAO,MAAM,kBAAkB;;CAE9B,CAAC"}
+{"version":3,"file":"csvReportGenerator.d.ts","sourceRoot":"","sources":["../../src/reporting/csvReportGenerator.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EAAE,WAAW,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AAErD,MAAM,WAAW,eAAe;IAC9B,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,cAAc,CAAC,EAAE,OAAO,CAAC;IACzB,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC;IACnB,aAAa,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,SAAS,EAAE,SAAS,GAAG;QAAE,QAAQ,EAAE,MAAM,CAAA;KAAE,KAAK,MAAM,CAAC,CAAC;CACzF;AAiBD;;GAEG;AACH,wBAAgB,iBAAiB,CAC/B,MAAM,EAAE,WAAW,EACnB,MAAM,CAAC,EAAE,eAAe,GACvB,MAAM,CAoBR;AAED;;GAEG;AACH,wBAAgB,wBAAwB,CACtC,MAAM,EAAE,WAAW,EACnB,MAAM,CAAC,EAAE,eAAe,GACvB,MAAM,CAiCR;AAmGD;;GAEG;AACH,wBAAgB,sBAAsB,CAAC,MAAM,EAAE,WAAW,GAAG,MAAM,CAsBlE;AAGD,eAAO,MAAM,kBAAkB;IAC7B,QAAQ;CACT,CAAC"}

package/dist/reporting/htmlReportGenerator.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"htmlReportGenerator.d.ts","sourceRoot":"","sources":["../../src/reporting/htmlReportGenerator.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EAAE,WAAW,EAAa,MAAM,aAAa,CAAC;AAErD,MAAM,WAAW,gBAAgB;IAC/B,KAAK,CAAC,EAAE,OAAO,GAAG,MAAM,CAAC;IACzB,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED;;GAEG;AACH,wBAAgB,kBAAkB,CAChC,MAAM,EAAE,WAAW,EACnB,MAAM,CAAC,EAAE,gBAAgB,GACxB,MAAM,CAyBR;AA8UD,eAAO,MAAM,mBAAmB;;CAE/B,CAAC"}
+{"version":3,"file":"htmlReportGenerator.d.ts","sourceRoot":"","sources":["../../src/reporting/htmlReportGenerator.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EAAE,WAAW,EAAa,MAAM,aAAa,CAAC;AAErD,MAAM,WAAW,gBAAgB;IAC/B,KAAK,CAAC,EAAE,OAAO,GAAG,MAAM,CAAC;IACzB,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED;;GAEG;AACH,wBAAgB,kBAAkB,CAChC,MAAM,EAAE,WAAW,EACnB,MAAM,CAAC,EAAE,gBAAgB,GACxB,MAAM,CAyBR;AA8UD,eAAO,MAAM,mBAAmB;IAC9B,QAAQ;CACT,CAAC"}

package/dist/reporting/jsonReportGenerator.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"jsonReportGenerator.d.ts","sourceRoot":"","sources":["../../src/reporting/jsonReportGenerator.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAE1C,MAAM,WAAW,gBAAgB;IAC/B,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,eAAe,CAAC,EAAE,OAAO,CAAC;IAC1B,sBAAsB,CAAC,EAAE,OAAO,CAAC;IACjC,YAAY,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;CACpC;AAED;;GAEG;AACH,wBAAgB,kBAAkB,CAChC,MAAM,EAAE,WAAW,EACnB,MAAM,CAAC,EAAE,gBAAgB,GACxB,MAAM,CAYR;AA4ED;;GAEG;AACH,wBAAgB,yBAAyB,CAAC,MAAM,EAAE,WAAW,GAAG,MAAM,CAqBrE;AAGD,eAAO,MAAM,mBAAmB;;CAE/B,CAAC"}
+{"version":3,"file":"jsonReportGenerator.d.ts","sourceRoot":"","sources":["../../src/reporting/jsonReportGenerator.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAE1C,MAAM,WAAW,gBAAgB;IAC/B,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,eAAe,CAAC,EAAE,OAAO,CAAC;IAC1B,sBAAsB,CAAC,EAAE,OAAO,CAAC;IACjC,YAAY,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;CACpC;AAED;;GAEG;AACH,wBAAgB,kBAAkB,CAChC,MAAM,EAAE,WAAW,EACnB,MAAM,CAAC,EAAE,gBAAgB,GACxB,MAAM,CAYR;AA4ED;;GAEG;AACH,wBAAgB,yBAAyB,CAAC,MAAM,EAAE,WAAW,GAAG,MAAM,CAqBrE;AAGD,eAAO,MAAM,mBAAmB;IAC9B,QAAQ;CACT,CAAC"}

package/dist/reporting/reportGenerator.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"reportGenerator.d.ts","sourceRoot":"","sources":["../../src/reporting/reportGenerator.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAKxD;;GAEG;AACH,wBAAgB,cAAc,CAAC,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE,YAAY,GAAG,MAAM,CAWhF;AAED;;GAEG;AACH,wBAAgB,qBAAqB,CAAC,gBAAgB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,MAAM,EAAE,WAAW,KAAK,MAAM,CAAC;qBASnF,WAAW,UAAU,MAAM,GAAG,MAAM;8BAQ3B,MAAM,aAAa,CAAC,MAAM,EAAE,WAAW,KAAK,MAAM;2BAIrD,MAAM,EAAE;EAIlC;AAGD,eAAO,MAAM,eAAe;;CAE3B,CAAC"}
+{"version":3,"file":"reportGenerator.d.ts","sourceRoot":"","sources":["../../src/reporting/reportGenerator.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAMxD;;GAEG;AACH,wBAAgB,cAAc,CAAC,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE,YAAY,GAAG,MAAM,CAahF;AAED;;GAEG;AACH,wBAAgB,qBAAqB,CAAC,gBAAgB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,MAAM,EAAE,WAAW,KAAK,MAAM,CAAC;IAUpG,QAAQ,SAAS,WAAW,UAAU,MAAM,GAAG,MAAM;IAQrD,iBAAiB,SAAS,MAAM,aAAa,CAAC,MAAM,EAAE,WAAW,KAAK,MAAM;IAI5E,mBAAmB,IAAI,MAAM,EAAE;EAIlC;AAGD,eAAO,MAAM,eAAe;IAC1B,QAAQ;CACT,CAAC"}

package/dist/reporting/reportGenerator.js

@@ -5,6 +5,7 @@
 import { generateHTMLReport } from './htmlReportGenerator.js';
 import { generateJSONReport } from './jsonReportGenerator.js';
 import { generateCSVReport } from './csvReportGenerator.js';
+import { generateSARIFReport } from './sarifReportGenerator.js';
 /**
  * Generate a report in the specified format
  */
@@ -16,6 +17,8 @@ export function generateReport(result, format) {
             return generateJSONReport(result);
         case 'csv':
             return generateCSVReport(result);
+        case 'sarif':
+            return generateSARIFReport(result);
         default:
             throw new Error(`Unknown report format: ${format}`);
     }
@@ -28,6 +31,7 @@ export function createReportGenerator(customFormatters) {
         html: generateHTMLReport,
         json: generateJSONReport,
         csv: generateCSVReport,
+        sarif: generateSARIFReport,
         ...customFormatters
     };
     return {

package/dist/reporting/reportGenerator.js.map

@@ -1 +1 @@
-{"version":3,"file":"reportGenerator.js","sourceRoot":"","sources":["../../src/reporting/reportGenerator.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAGH,OAAO,EAAE,kBAAkB,EAAE,MAAM,0BAA0B,CAAC;AAC9D,OAAO,EAAE,kBAAkB,EAAE,MAAM,0BAA0B,CAAC;AAC9D,OAAO,EAAE,iBAAiB,EAAE,MAAM,yBAAyB,CAAC;AAE5D;;GAEG;AACH,MAAM,UAAU,cAAc,CAAC,MAAmB,EAAE,MAAoB;IACtE,QAAQ,MAAM,EAAE,CAAC;QACf,KAAK,MAAM;YACT,OAAO,kBAAkB,CAAC,MAAM,CAAC,CAAC;QACpC,KAAK,MAAM;YACT,OAAO,kBAAkB,CAAC,MAAM,CAAC,CAAC;QACpC,KAAK,KAAK;YACR,OAAO,iBAAiB,CAAC,MAAM,CAAC,CAAC;QACnC;YACE,MAAM,IAAI,KAAK,CAAC,0BAA0B,MAAM,EAAE,CAAC,CAAC;IACxD,CAAC;AACH,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,qBAAqB,CAAC,gBAAkE;IACtG,MAAM,UAAU,GAAG;QACjB,IAAI,EAAE,kBAAkB;QACxB,IAAI,EAAE,kBAAkB;QACxB,GAAG,EAAE,iBAAiB;QACtB,GAAG,gBAAgB;KACpB,CAAC;IAEF,OAAO;QACL,QAAQ,CAAC,MAAmB,EAAE,MAAc;YAC1C,MAAM,SAAS,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC;YACrC,IAAI,CAAC,SAAS,EAAE,CAAC;gBACf,MAAM,IAAI,KAAK,CAAC,0BAA0B,MAAM,EAAE,CAAC,CAAC;YACtD,CAAC;YACD,OAAO,SAAS,CAAC,MAAM,CAAC,CAAC;QAC3B,CAAC;QAED,iBAAiB,CAAC,MAAc,EAAE,SAA0C;YAC1E,UAAU,CAAC,MAAM,CAAC,GAAG,SAAS,CAAC;QACjC,CAAC;QAED,mBAAmB;YACjB,OAAO,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QACjC,CAAC;KACF,CAAC;AACJ,CAAC;AAED,4DAA4D;AAC5D,MAAM,CAAC,MAAM,eAAe,GAAG;IAC7B,QAAQ,EAAE,cAAc;CACzB,CAAC"}
+{"version":3,"file":"reportGenerator.js","sourceRoot":"","sources":["../../src/reporting/reportGenerator.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAGH,OAAO,EAAE,kBAAkB,EAAE,MAAM,0BAA0B,CAAC;AAC9D,OAAO,EAAE,kBAAkB,EAAE,MAAM,0BAA0B,CAAC;AAC9D,OAAO,EAAE,iBAAiB,EAAE,MAAM,yBAAyB,CAAC;AAC5D,OAAO,EAAE,mBAAmB,EAAE,MAAM,2BAA2B,CAAC;AAEhE;;GAEG;AACH,MAAM,UAAU,cAAc,CAAC,MAAmB,EAAE,MAAoB;IACtE,QAAQ,MAAM,EAAE,CAAC;QACf,KAAK,MAAM;YACT,OAAO,kBAAkB,CAAC,MAAM,CAAC,CAAC;QACpC,KAAK,MAAM;YACT,OAAO,kBAAkB,CAAC,MAAM,CAAC,CAAC;QACpC,KAAK,KAAK;YACR,OAAO,iBAAiB,CAAC,MAAM,CAAC,CAAC;QACnC,KAAK,OAAO;YACV,OAAO,mBAAmB,CAAC,MAAM,CAAC,CAAC;QACrC;YACE,MAAM,IAAI,KAAK,CAAC,0BAA0B,MAAM,EAAE,CAAC,CAAC;IACxD,CAAC;AACH,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,qBAAqB,CAAC,gBAAkE;IACtG,MAAM,UAAU,GAAoD;QAClE,IAAI,EAAE,kBAAkB;QACxB,IAAI,EAAE,kBAAkB;QACxB,GAAG,EAAE,iBAAiB;QACtB,KAAK,EAAE,mBAAmB;QAC1B,GAAG,gBAAgB;KACpB,CAAC;IAEF,OAAO;QACL,QAAQ,CAAC,MAAmB,EAAE,MAAc;YAC1C,MAAM,SAAS,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC;YACrC,IAAI,CAAC,SAAS,EAAE,CAAC;gBACf,MAAM,IAAI,KAAK,CAAC,0BAA0B,MAAM,EAAE,CAAC,CAAC;YACtD,CAAC;YACD,OAAO,SAAS,CAAC,MAAM,CAAC,CAAC;QAC3B,CAAC;QAED,iBAAiB,CAAC,MAAc,EAAE,SAA0C;YAC1E,UAAU,CAAC,MAAM,CAAC,GAAG,SAAS,CAAC;QACjC,CAAC;QAED,mBAAmB;YACjB,OAAO,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QACjC,CAAC;KACF,CAAC;AACJ,CAAC;AAED,4DAA4D;AAC5D,MAAM,CAAC,MAAM,eAAe,GAAG;IAC7B,QAAQ,EAAE,cAAc;CACzB,CAAC"}

package/dist/reporting/sarifReportGenerator.d.ts

@@ -0,0 +1,39 @@
+/**
+ * SARIF 2.1.0 Report Generator
+ *
+ * Produces valid SARIF output consumable by GitHub Code Scanning
+ * (via github/codeql-action/upload-sarif).
+ *
+ * Spec 06 — R1: SARIF 2.1.0 emitter for code-auditor-mcp.
+ */
+import type { AuditResult, Violation } from '../types.js';
+/**
+ * Resolves the stable rule identifier for a violation.
+ * The format is `{analyzerName}/{ruleId}`.
+ *
+ * Precedence for the rule-id portion:
+ *   1. `violation.rule`      (React, Universal Schema, Invariants)
+ *   2. `violation.principle`  (SOLID)
+ *   3. `violation.details.rule` (React — nested)
+ *   4. `violation.type`       (DRY, Data Access, Dependency Graph)
+ *   5. `violation.schemaType`  (Schema)
+ *   6. `violation.violationType` (general fallback)
+ *   7. `'unknown'`
+ */
+export declare function resolveRuleId(violation: Violation): string;
+/**
+ * Builds the full SARIF rule ID: `{analyzerName}/{localRuleId}`.
+ */
+export declare function buildFullRuleId(analyzerName: string, violation: Violation): string;
+export interface SARIFReportConfig {
+    /** Base path for making artifact URIs relative (default: process.cwd()) */
+    rootDir?: string;
+}
+/**
+ * Generates a SARIF 2.1.0 log string from an AuditResult.
+ */
+export declare function generateSARIFReport(result: AuditResult, config?: SARIFReportConfig): string;
+export declare const SARIFReportGenerator: {
+    generate: typeof generateSARIFReport;
+};
+//# sourceMappingURL=sarifReportGenerator.d.ts.map

package/dist/reporting/sarifReportGenerator.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sarifReportGenerator.d.ts","sourceRoot":"","sources":["../../src/reporting/sarifReportGenerator.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,KAAK,EAAE,WAAW,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AAsB1D;;;;;;;;;;;;GAYG;AACH,wBAAgB,aAAa,CAAC,SAAS,EAAE,SAAS,GAAG,MAAM,CA0B1D;AAED;;GAEG;AACH,wBAAgB,eAAe,CAAC,YAAY,EAAE,MAAM,EAAE,SAAS,EAAE,SAAS,GAAG,MAAM,CAGlF;AAiCD,MAAM,WAAW,iBAAiB;IAChC,2EAA2E;IAC3E,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED;;GAEG;AACH,wBAAgB,mBAAmB,CAAC,MAAM,EAAE,WAAW,EAAE,MAAM,CAAC,EAAE,iBAAiB,GAAG,MAAM,CA8F3F;AAkFD,eAAO,MAAM,oBAAoB;IAC/B,QAAQ;CACT,CAAC"}

package/dist/reporting/sarifReportGenerator.js

@@ -0,0 +1,229 @@
+/**
+ * SARIF 2.1.0 Report Generator
+ *
+ * Produces valid SARIF output consumable by GitHub Code Scanning
+ * (via github/codeql-action/upload-sarif).
+ *
+ * Spec 06 — R1: SARIF 2.1.0 emitter for code-auditor-mcp.
+ */
+import { PACKAGE_VERSION } from '../constants.js';
+import { fingerprint } from '../fingerprint.js';
+// ── Constants ───────────────────────────────────────────────────────────────
+const SARIF_SCHEMA = 'https://raw.githubusercontent.com/oasis-tcs/sarif-spec/master/Schemata/sarif-schema-2.1.0.json';
+const SARIF_VERSION = '2.1.0';
+const TOOL_NAME = 'code-auditor-mcp';
+const INFORMATION_URI = 'https://github.com/BenAHammond/code-auditor-mcp';
+// ── Severity mapping (Spec 06 R1.4) ────────────────────────────────────────
+const SEVERITY_TO_LEVEL = {
+    critical: 'error',
+    warning: 'warning',
+    suggestion: 'note',
+};
+// ── Rule ID resolution ──────────────────────────────────────────────────────
+/**
+ * Resolves the stable rule identifier for a violation.
+ * The format is `{analyzerName}/{ruleId}`.
+ *
+ * Precedence for the rule-id portion:
+ *   1. `violation.rule`      (React, Universal Schema, Invariants)
+ *   2. `violation.principle`  (SOLID)
+ *   3. `violation.details.rule` (React — nested)
+ *   4. `violation.type`       (DRY, Data Access, Dependency Graph)
+ *   5. `violation.schemaType`  (Schema)
+ *   6. `violation.violationType` (general fallback)
+ *   7. `'unknown'`
+ */
+export function resolveRuleId(violation) {
+    if (violation.rule && typeof violation.rule === 'string') {
+        return violation.rule;
+    }
+    if (violation.principle && typeof violation.principle === 'string') {
+        return violation.principle;
+    }
+    if (violation.details &&
+        typeof violation.details === 'object' &&
+        !Array.isArray(violation.details) &&
+        violation.details.rule &&
+        typeof violation.details.rule === 'string') {
+        return violation.details.rule;
+    }
+    if (violation.type && typeof violation.type === 'string') {
+        return violation.type;
+    }
+    if (violation.schemaType && typeof violation.schemaType === 'string') {
+        return violation.schemaType;
+    }
+    if (violation.violationType && typeof violation.violationType === 'string') {
+        return violation.violationType;
+    }
+    return 'unknown';
+}
+/**
+ * Builds the full SARIF rule ID: `{analyzerName}/{localRuleId}`.
+ */
+export function buildFullRuleId(analyzerName, violation) {
+    const localId = resolveRuleId(violation);
+    return `${normalizeAnalyzerName(analyzerName)}/${localId}`;
+}
+/**
+ * Normalizes analyzer names to short kebab-case identifiers.
+ */
+function normalizeAnalyzerName(name) {
+    const mapping = {
+        'solid-analyzer': 'solid',
+        'dry-analyzer': 'dry',
+        'react-analyzer': 'react',
+        'data-access-analyzer': 'data-access',
+        'documentation-analyzer': 'documentation',
+        'schema-analyzer': 'schema',
+        'universal-schema-analyzer': 'universal-schema',
+        'invariants-analyzer': 'invariants',
+        'dependency-graph-analyzer': 'dependency-graph',
+        'cross-language-solid-analyzer': 'solid',
+        'solid': 'solid',
+        'dry': 'dry',
+        'react': 'react',
+        'data-access': 'data-access',
+        'documentation': 'documentation',
+        'schema': 'schema',
+        'universal-schema': 'universal-schema',
+        'invariants': 'invariants',
+        'dependency-graph': 'dependency-graph',
+        'cross-language-solid': 'solid',
+    };
+    return mapping[name] ?? name.replace(/[^a-z0-9-]/g, '-').toLowerCase();
+}
+/**
+ * Generates a SARIF 2.1.0 log string from an AuditResult.
+ */
+export function generateSARIFReport(result, config) {
+    const rootDir = config?.rootDir ?? process.cwd();
+    const driverRules = [];
+    const seenRuleIds = new Set();
+    const results = [];
+    // Walk all analyzer results and build rules + results
+    for (const [analyzerName, analyzerResult] of Object.entries(result.analyzerResults)) {
+        const normName = normalizeAnalyzerName(analyzerName);
+        for (const violation of analyzerResult.violations) {
+            const fullRuleId = buildFullRuleId(analyzerName, violation);
+            // Collect unique rules
+            if (!seenRuleIds.has(fullRuleId)) {
+                seenRuleIds.add(fullRuleId);
+                driverRules.push({
+                    id: fullRuleId,
+                    shortDescription: {
+                        text: buildShortDescription(normName, resolveRuleId(violation)),
+                    },
+                    fullDescription: {
+                        text: violation.message,
+                    },
+                    helpUri: buildHelpUri(fullRuleId),
+                });
+            }
+            // Build result
+            const region = {};
+            if (violation.line != null) {
+                region.startLine = violation.line;
+                region.endLine = violation.line;
+            }
+            if (violation.column != null) {
+                region.startColumn = violation.column;
+            }
+            const artifactUri = makeRelativeUri(violation.file, rootDir);
+            const sarifResult = {
+                ruleId: fullRuleId,
+                level: mapSeverity(violation.severity),
+                message: {
+                    text: violation.message,
+                },
+                locations: [
+                    {
+                        physicalLocation: {
+                            artifactLocation: {
+                                uri: artifactUri,
+                            },
+                            region: Object.keys(region).length > 0 ? region : undefined,
+                        },
+                    },
+                ],
+                partialFingerprints: buildPartialFingerprints(analyzerName, violation),
+            };
+            // Add suggestion as a fix if present
+            if (violation.suggestion) {
+                sarifResult.fixes = [
+                    {
+                        description: {
+                            text: `Suggestion: ${violation.suggestion}`,
+                        },
+                    },
+                ];
+            }
+            results.push(sarifResult);
+        }
+    }
+    // Build the SARIF log
+    const sarifLog = {
+        $schema: SARIF_SCHEMA,
+        version: SARIF_VERSION,
+        runs: [
+            {
+                tool: {
+                    driver: {
+                        name: TOOL_NAME,
+                        version: PACKAGE_VERSION,
+                        informationUri: INFORMATION_URI,
+                        rules: driverRules,
+                    },
+                },
+                results,
+            },
+        ],
+    };
+    return JSON.stringify(sarifLog, null, 2);
+}
+function mapSeverity(severity) {
+    return SEVERITY_TO_LEVEL[severity] ?? 'warning';
+}
+function makeRelativeUri(filePath, rootDir) {
+    // Normalize and make relative to root directory
+    const normalized = filePath.replace(/\\/g, '/');
+    if (rootDir && normalized.startsWith(rootDir.replace(/\\/g, '/'))) {
+        let relative = normalized.slice(rootDir.replace(/\\/g, '/').length);
+        if (relative.startsWith('/')) {
+            relative = relative.slice(1);
+        }
+        return relative || '.';
+    }
+    return normalized;
+}
+function buildShortDescription(analyzerName, ruleId) {
+    return `${analyzerName}: ${ruleId}`;
+}
+function buildHelpUri(fullRuleId) {
+    return `${INFORMATION_URI}#${fullRuleId.replace(/\//g, '-')}`;
+}
+function buildPartialFingerprints(analyzerName, violation) {
+    const normName = normalizeAnalyzerName(analyzerName);
+    const localRule = resolveRuleId(violation);
+    const symbol = violation.className ??
+        violation.functionName ??
+        violation.componentName ??
+        violation.symbol ??
+        violation.methodName ??
+        violation.name ??
+        'unknown';
+    const fp = fingerprint({
+        analyzer: normName,
+        rule: localRule,
+        file: violation.file,
+        symbol,
+    });
+    return {
+        'primary': fp,
+    };
+}
+// ── Backward-compatible object export ────────────────────────────────────────
+export const SARIFReportGenerator = {
+    generate: generateSARIFReport,
+};
+//# sourceMappingURL=sarifReportGenerator.js.map

package/dist/reporting/sarifReportGenerator.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sarifReportGenerator.js","sourceRoot":"","sources":["../../src/reporting/sarifReportGenerator.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAGH,OAAO,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAC;AAClD,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAEhD,+EAA+E;AAE/E,MAAM,YAAY,GAChB,gGAAgG,CAAC;AACnG,MAAM,aAAa,GAAG,OAAO,CAAC;AAC9B,MAAM,SAAS,GAAG,kBAAkB,CAAC;AACrC,MAAM,eAAe,GAAG,iDAAiD,CAAC;AAE1E,8EAA8E;AAE9E,MAAM,iBAAiB,GAA2B;IAChD,QAAQ,EAAE,OAAO;IACjB,OAAO,EAAE,SAAS;IAClB,UAAU,EAAE,MAAM;CACnB,CAAC;AAEF,+EAA+E;AAE/E;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,aAAa,CAAC,SAAoB;IAChD,IAAI,SAAS,CAAC,IAAI,IAAI,OAAO,SAAS,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;QACzD,OAAO,SAAS,CAAC,IAAI,CAAC;IACxB,CAAC;IACD,IAAI,SAAS,CAAC,SAAS,IAAI,OAAO,SAAS,CAAC,SAAS,KAAK,QAAQ,EAAE,CAAC;QACnE,OAAO,SAAS,CAAC,SAAS,CAAC;IAC7B,CAAC;IACD,IACE,SAAS,CAAC,OAAO;QACjB,OAAO,SAAS,CAAC,OAAO,KAAK,QAAQ;QACrC,CAAC,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,OAAO,CAAC;QACjC,SAAS,CAAC,OAAO,CAAC,IAAI;QACtB,OAAO,SAAS,CAAC,OAAO,CAAC,IAAI,KAAK,QAAQ,EAC1C,CAAC;QACD,OAAO,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC;IAChC,CAAC;IACD,IAAI,SAAS,CAAC,IAAI,IAAI,OAAO,SAAS,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;QACzD,OAAO,SAAS,CAAC,IAAI,CAAC;IACxB,CAAC;IACD,IAAI,SAAS,CAAC,UAAU,IAAI,OAAO,SAAS,CAAC,UAAU,KAAK,QAAQ,EAAE,CAAC;QACrE,OAAO,SAAS,CAAC,UAAU,CAAC;IAC9B,CAAC;IACD,IAAI,SAAS,CAAC,aAAa,IAAI,OAAO,SAAS,CAAC,aAAa,KAAK,QAAQ,EAAE,CAAC;QAC3E,OAAO,SAAS,CAAC,aAAa,CAAC;IACjC,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,eAAe,CAAC,YAAoB,EAAE,SAAoB;IACxE,MAAM,OAAO,GAAG,aAAa,CAAC,SAAS,CAAC,CAAC;IACzC,OAAO,GAAG,qBAAqB,CAAC,YAAY,CAAC,IAAI,OAAO,EAAE,CAAC;AAC7D,CAAC;AAED;;GAEG;AACH,SAAS,qBAAqB,CAAC,IAAY;IACzC,MAAM,OAAO,GAA2B;QACtC,gBAAgB,EAAE,OAAO;QACzB,cAAc,EAAE,KAAK;QACrB,gBAAgB,EAAE,OAAO;QACzB,sBAAsB,EAAE,aAAa;QACrC,wBAAwB,EAAE,eAAe;QACzC,iBAAiB,EAAE,QAAQ;QAC3B,2BAA2B,EAAE,kBAAkB;QAC/C,qBAAqB,EAAE,YAAY;QACnC,2BAA2B,EAAE,kBAAkB;QAC/C,+BAA+B,EAAE,OAAO;QACxC,OAAO,EAAE,OAAO;QAChB,KAAK,EAAE,KAAK;QACZ,OAAO,EAAE,OAAO;QAChB,aAAa,EAAE,aAAa;QAC5B,eAAe,EAAE,eAAe;QAChC,QAAQ,EAAE,QAAQ;QAClB,kBAAkB,EAAE,kBAAkB;QACtC,YAAY,EAAE,YAAY;QAC1B,kBAAkB,EAAE,kBAAkB;QACtC,sBAAsB,EAAE,OAAO;KAChC,CAAC;IACF,OAAO,OAAO,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,OAAO,CAAC,aAAa,EAAE,GAAG,CAAC,CAAC,WAAW,EAAE,CAAC;AACzE,CAAC;AASD;;GAEG;AACH,MAAM,UAAU,mBAAmB,CAAC,MAAmB,EAAE,MAA0B;IACjF,MAAM,OAAO,GAAG,MAAM,EAAE,OAAO,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC;IACjD,MAAM,WAAW,GAAiB,EAAE,CAAC;IACrC,MAAM,WAAW,GAAG,IAAI,GAAG,EAAU,CAAC;IACtC,MAAM,OAAO,GAAkB,EAAE,CAAC;IAElC,sDAAsD;IACtD,KAAK,MAAM,CAAC,YAAY,EAAE,cAAc,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,eAAe,CAAC,EAAE,CAAC;QACpF,MAAM,QAAQ,GAAG,qBAAqB,CAAC,YAAY,CAAC,CAAC;QAErD,KAAK,MAAM,SAAS,IAAI,cAAc,CAAC,UAAU,EAAE,CAAC;YAClD,MAAM,UAAU,GAAG,eAAe,CAAC,YAAY,EAAE,SAAS,CAAC,CAAC;YAE5D,uBAAuB;YACvB,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,CAAC;gBACjC,WAAW,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;gBAC5B,WAAW,CAAC,IAAI,CAAC;oBACf,EAAE,EAAE,UAAU;oBACd,gBAAgB,EAAE;wBAChB,IAAI,EAAE,qBAAqB,CAAC,QAAQ,EAAE,aAAa,CAAC,SAAS,CAAC,CAAC;qBAChE;oBACD,eAAe,EAAE;wBACf,IAAI,EAAE,SAAS,CAAC,OAAO;qBACxB;oBACD,OAAO,EAAE,YAAY,CAAC,UAAU,CAAC;iBAClC,CAAC,CAAC;YACL,CAAC;YAED,eAAe;YACf,MAAM,MAAM,GAAgB,EAAE,CAAC;YAC/B,IAAI,SAAS,CAAC,IAAI,IAAI,IAAI,EAAE,CAAC;gBAC3B,MAAM,CAAC,SAAS,GAAG,SAAS,CAAC,IAAI,CAAC;gBAClC,MAAM,CAAC,OAAO,GAAG,SAAS,CAAC,IAAI,CAAC;YAClC,CAAC;YACD,IAAI,SAAS,CAAC,MAAM,IAAI,IAAI,EAAE,CAAC;gBAC7B,MAAM,CAAC,WAAW,GAAG,SAAS,CAAC,MAAM,CAAC;YACxC,CAAC;YAED,MAAM,WAAW,GAAG,eAAe,CAAC,SAAS,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;YAE7D,MAAM,WAAW,GAAgB;gBAC/B,MAAM,EAAE,UAAU;gBAClB,KAAK,EAAE,WAAW,CAAC,SAAS,CAAC,QAAQ,CAAC;gBACtC,OAAO,EAAE;oBACP,IAAI,EAAE,SAAS,CAAC,OAAO;iBACxB;gBACD,SAAS,EAAE;oBACT;wBACE,gBAAgB,EAAE;4BAChB,gBAAgB,EAAE;gCAChB,GAAG,EAAE,WAAW;6BACjB;4BACD,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS;yBAC5D;qBACF;iBACF;gBACD,mBAAmB,EAAE,wBAAwB,CAAC,YAAY,EAAE,SAAS,CAAC;aACvE,CAAC;YAEF,qCAAqC;YACrC,IAAI,SAAS,CAAC,UAAU,EAAE,CAAC;gBACzB,WAAW,CAAC,KAAK,GAAG;oBAClB;wBACE,WAAW,EAAE;4BACX,IAAI,EAAE,eAAe,SAAS,CAAC,UAAU,EAAE;yBAC5C;qBACF;iBACF,CAAC;YACJ,CAAC;YAED,OAAO,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QAC5B,CAAC;IACH,CAAC;IAED,sBAAsB;IACtB,MAAM,QAAQ,GAAG;QACf,OAAO,EAAE,YAAY;QACrB,OAAO,EAAE,aAAa;QACtB,IAAI,EAAE;YACJ;gBACE,IAAI,EAAE;oBACJ,MAAM,EAAE;wBACN,IAAI,EAAE,SAAS;wBACf,OAAO,EAAE,eAAe;wBACxB,cAAc,EAAE,eAAe;wBAC/B,KAAK,EAAE,WAAW;qBACnB;iBACF;gBACD,OAAO;aACR;SACF;KACF,CAAC;IAEF,OAAO,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;AAC3C,CAAC;AA+BD,SAAS,WAAW,CAAC,QAAgB;IACnC,OAAO,iBAAiB,CAAC,QAAQ,CAAC,IAAI,SAAS,CAAC;AAClD,CAAC;AAED,SAAS,eAAe,CAAC,QAAgB,EAAE,OAAe;IACxD,gDAAgD;IAChD,MAAM,UAAU,GAAG,QAAQ,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;IAChD,IAAI,OAAO,IAAI,UAAU,CAAC,UAAU,CAAC,OAAO,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,EAAE,CAAC;QAClE,IAAI,QAAQ,GAAG,UAAU,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC;QACpE,IAAI,QAAQ,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;YAC7B,QAAQ,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QAC/B,CAAC;QACD,OAAO,QAAQ,IAAI,GAAG,CAAC;IACzB,CAAC;IACD,OAAO,UAAU,CAAC;AACpB,CAAC;AAED,SAAS,qBAAqB,CAAC,YAAoB,EAAE,MAAc;IACjE,OAAO,GAAG,YAAY,KAAK,MAAM,EAAE,CAAC;AACtC,CAAC;AAED,SAAS,YAAY,CAAC,UAAkB;IACtC,OAAO,GAAG,eAAe,IAAI,UAAU,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,EAAE,CAAC;AAChE,CAAC;AAED,SAAS,wBAAwB,CAAC,YAAoB,EAAE,SAAoB;IAC1E,MAAM,QAAQ,GAAG,qBAAqB,CAAC,YAAY,CAAC,CAAC;IACrD,MAAM,SAAS,GAAG,aAAa,CAAC,SAAS,CAAC,CAAC;IAC3C,MAAM,MAAM,GACV,SAAS,CAAC,SAAS;QACnB,SAAS,CAAC,YAAY;QACtB,SAAS,CAAC,aAAa;QACvB,SAAS,CAAC,MAAM;QAChB,SAAS,CAAC,UAAU;QACpB,SAAS,CAAC,IAAI;QACd,SAAS,CAAC;IAEZ,MAAM,EAAE,GAAG,WAAW,CAAC;QACrB,QAAQ,EAAE,QAAQ;QAClB,IAAI,EAAE,SAAS;QACf,IAAI,EAAE,SAAS,CAAC,IAAI;QACpB,MAAM;KACP,CAAC,CAAC;IAEH,OAAO;QACL,SAAS,EAAE,EAAE;KACd,CAAC;AACJ,CAAC;AAED,gFAAgF;AAEhF,MAAM,CAAC,MAAM,oBAAoB,GAAG;IAClC,QAAQ,EAAE,mBAAmB;CAC9B,CAAC"}

package/dist/search/QueryParser.d.ts

@@ -59,4 +59,45 @@ export declare class QueryParser {
     expandQuery(query: string): string;
 }
 export declare const queryParser: QueryParser;
+/** Compiled SQL query fragments for use with the SQLite-backed CodeIndexDB. */
+export interface SqlQuery {
+    /** FTS5 MATCH expression, or null if no free-text terms */
+    ftsMatch: string | null;
+    /** WHERE clause fragments (ANDed together) */
+    whereClauses: string[];
+    /** JOIN clauses for call/dependency graph traversal */
+    joinClauses: string[];
+    /** Named parameters for the prepared statement */
+    params: Record<string, any>;
+    /** ORDER BY clause */
+    orderBy: string;
+    /** LIMIT value */
+    limit: number;
+    /** OFFSET value */
+    offset: number;
+}
+/**
+ * Compile a parsed query into SQL fragments for the SQLite-backed CodeIndexDB.
+ *
+ * The caller assembles the final SQL from the returned fragments:
+ * ```sql
+ * SELECT f.* [, bm25(functions_fts) as score]
+ * FROM functions f
+ *   [JOIN functions_fts ON functions_fts.rowid = f.id]  -- when ftsMatch is set
+ *   {joinClauses...}
+ * WHERE 1=1
+ *   [AND functions_fts MATCH @ftsMatch]                -- when ftsMatch is set
+ *   {whereClauses...}
+ * ORDER BY {orderBy}
+ * LIMIT {limit} OFFSET {offset}
+ * ```
+ *
+ * @param parsedQuery  The parsed query from {@link QueryParser.parse}.
+ * @param options      Optional overrides for limit/offset.
+ * @returns Compiled SQL fragments.
+ */
+export declare function compileToSQL(parsedQuery: ParsedQuery, options?: {
+    defaultLimit?: number;
+    offset?: number;
+}): SqlQuery;
 //# sourceMappingURL=QueryParser.d.ts.map

package/dist/search/QueryParser.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"QueryParser.d.ts","sourceRoot":"","sources":["../../src/search/QueryParser.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,UAAU,CAAC;AAEvC;;;;;;;;;;GAUG;AACH,qBAAa,WAAW;IAEtB,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,QAAQ,CA6D9B;IAGF,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,SAAS,CAmCtB;IAEX;;;;OAIG;IACI,KAAK,CAAC,KAAK,EAAE,MAAM,GAAG,WAAW;IAgFxC;;;;;OAKG;IACH,OAAO,CAAC,cAAc;IA0DtB;;;;;OAKG;IACH,OAAO,CAAC,gBAAgB;IAuFxB;;;;OAIG;IACH,OAAO,CAAC,oBAAoB;IAoJ5B;;;;OAIG;IACH,OAAO,CAAC,QAAQ;IA8BhB;;;;OAIG;IACI,WAAW,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,EAAE;IAqB1C;;;;OAIG;IACI,WAAW,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM;CAK1C;AAGD,eAAO,MAAM,WAAW,aAAoB,CAAC"}
+{"version":3,"file":"QueryParser.d.ts","sourceRoot":"","sources":["../../src/search/QueryParser.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,UAAU,CAAC;AAEvC;;;;;;;;;;GAUG;AACH,qBAAa,WAAW;IAEtB,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,QAAQ,CA6D9B;IAGF,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,SAAS,CAoCtB;IAEX;;;;OAIG;IACI,KAAK,CAAC,KAAK,EAAE,MAAM,GAAG,WAAW,CA8EvC;IAED;;;;;OAKG;IACH,OAAO,CAAC,cAAc;IA0DtB;;;;;OAKG;IACH,OAAO,CAAC,gBAAgB;IAqFxB;;;;OAIG;IACH,OAAO,CAAC,oBAAoB;IA+K5B;;;;OAIG;IACH,OAAO,CAAC,QAAQ;IA8BhB;;;;OAIG;IACI,WAAW,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,EAAE,CAmBzC;IAED;;;;OAIG;IACI,WAAW,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAIxC;CACF;AAGD,eAAO,MAAM,WAAW,aAAoB,CAAC;AAI7C,+EAA+E;AAC/E,MAAM,WAAW,QAAQ;IACvB,2DAA2D;IAC3D,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,8CAA8C;IAC9C,YAAY,EAAE,MAAM,EAAE,CAAC;IACvB,uDAAuD;IACvD,WAAW,EAAE,MAAM,EAAE,CAAC;IACtB,kDAAkD;IAClD,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IAC5B,sBAAsB;IACtB,OAAO,EAAE,MAAM,CAAC;IAChB,kBAAkB;IAClB,KAAK,EAAE,MAAM,CAAC;IACd,mBAAmB;IACnB,MAAM,EAAE,MAAM,CAAC;CAChB;AAOD;;;;;;;;;;;;;;;;;;;GAmBG;AACH,wBAAgB,YAAY,CAC1B,WAAW,EAAE,WAAW,EACxB,OAAO,CAAC,EAAE;IAAE,YAAY,CAAC,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAA;CAAE,GACnD,QAAQ,CAiKV"}

package/dist/search/QueryParser.js

@@ -78,6 +78,7 @@ export class QueryParser {
         'complexity:': 'complexity',
         'jsdoc:': 'hasJsDoc',
         'doc:': 'hasJsDoc',
+        'exported:': 'isExported',
         'since:': 'dateRange',
         'before:': 'dateRange',
         'after:': 'dateRange',
@@ -310,12 +311,10 @@ export class QueryParser {
                             valueEndIndex = j;
                         }
                     }
-                    if (value) {
-                        operators.set(operator, value);
-                        // Replace the operator:value with spaces to clean the query
-                        const toReplace = query.substring(i, valueEndIndex);
-                        cleanedQuery = cleanedQuery.replace(toReplace, ' '.repeat(toReplace.length));
-                    }
+                    operators.set(operator, value);
+                    // Replace the operator:value with spaces to clean the query
+                    const toReplace = query.substring(i, valueEndIndex);
+                    cleanedQuery = cleanedQuery.replace(toReplace, ' '.repeat(toReplace.length));
                     i = valueEndIndex;
                 }
                 else {
@@ -347,22 +346,53 @@ export class QueryParser {
                     parsedQuery.filters.language = value;
                     break;
                 case 'hasJsDoc':
-                    parsedQuery.filters.hasJsDoc = value.toLowerCase() === 'true' || value === '1';
+                    // Bare keyword (no value) means "enabled" — jsdoc: or exported:
+                    if (value === '' || value === 'true' || value === '1' || value === 'yes') {
+                        parsedQuery.filters.hasJsDoc = true;
+                    }
+                    else if (value === 'false' || value === '0' || value === 'no') {
+                        parsedQuery.filters.hasJsDoc = false;
+                    }
+                    break;
+                case 'isExported':
+                    // Bare keyword (no value) means "enabled"
+                    if (value === '' || value === 'true' || value === '1' || value === 'yes') {
+                        parsedQuery.filters.isExported = true;
+                    }
+                    else if (value === 'false' || value === '0' || value === 'no') {
+                        parsedQuery.filters.isExported = false;
+                    }
                     break;
                 case 'complexity':
-                    if (value.includes('-')) {
-                        const [min, max] = value.split('-').map(v => parseInt(v.trim(), 10));
-                        if (!isNaN(min) && !isNaN(max)) {
-                            parsedQuery.filters.complexity = { min, max };
+                    // complexity:N (exact), complexity:N-M or N..M (range), complexity:>N, complexity:<N
+                    if (typeof value === 'string' && value.length > 0) {
+                        const first = value[0];
+                        if (first === '>' && /^>\d+$/.test(value)) {
+                            parsedQuery.filters.complexity = { min: parseInt(value.slice(1), 10) };
                         }
-                    }
-                    else {
-                        const complexityValue = parseInt(value, 10);
-                        if (!isNaN(complexityValue)) {
-                            parsedQuery.filters.complexity = {
-                                min: complexityValue,
-                                max: complexityValue
-                            };
+                        else if (first === '<' && /^<\d+$/.test(value)) {
+                            parsedQuery.filters.complexity = { max: parseInt(value.slice(1), 10) };
+                        }
+                        else if (value.includes('..')) {
+                            const [a, b] = value.split('..').map(v => parseInt(v.trim(), 10));
+                            if (!isNaN(a) && !isNaN(b)) {
+                                parsedQuery.filters.complexity = { min: a, max: b };
+                            }
+                        }
+                        else if (value.includes('-')) {
+                            const [min, max] = value.split('-').map(v => parseInt(v.trim(), 10));
+                            if (!isNaN(min) && !isNaN(max)) {
+                                parsedQuery.filters.complexity = { min, max };
+                            }
+                        }
+                        else {
+                            const complexityValue = parseInt(value, 10);
+                            if (!isNaN(complexityValue)) {
+                                parsedQuery.filters.complexity = {
+                                    min: complexityValue,
+                                    max: complexityValue,
+                                };
+                            }
                         }
                     }
                     break;
@@ -530,4 +560,155 @@ export class QueryParser {
 }
 // Export a singleton instance for convenience
 export const queryParser = new QueryParser();
+/** Escape a string for safe use inside double-quotes in an FTS5 MATCH expression. */
+function escapeFTS5(value) {
+    return value.replace(/"/g, '""');
+}
+/**
+ * Compile a parsed query into SQL fragments for the SQLite-backed CodeIndexDB.
+ *
+ * The caller assembles the final SQL from the returned fragments:
+ * ```sql
+ * SELECT f.* [, bm25(functions_fts) as score]
+ * FROM functions f
+ *   [JOIN functions_fts ON functions_fts.rowid = f.id]  -- when ftsMatch is set
+ *   {joinClauses...}
+ * WHERE 1=1
+ *   [AND functions_fts MATCH @ftsMatch]                -- when ftsMatch is set
+ *   {whereClauses...}
+ * ORDER BY {orderBy}
+ * LIMIT {limit} OFFSET {offset}
+ * ```
+ *
+ * @param parsedQuery  The parsed query from {@link QueryParser.parse}.
+ * @param options      Optional overrides for limit/offset.
+ * @returns Compiled SQL fragments.
+ */
+export function compileToSQL(parsedQuery, options) {
+    const whereClauses = [];
+    const joinClauses = [];
+    const params = {};
+    // ── FTS5 MATCH expression ───────────────────────────────────────────────
+    let ftsMatch = null;
+    const matchParts = [];
+    // Free-text terms — OR'd together with prefix matching (FTS5 "*" suffix
+    // enables matching camelCased tokens like "validateEmail" from "validate")
+    if (parsedQuery.terms.length > 0) {
+        const termExpr = parsedQuery.terms
+            .map((t) => `"${escapeFTS5(t)}"*`)
+            .join(' OR ');
+        matchParts.push(parsedQuery.terms.length > 1 ? `(${termExpr})` : termExpr);
+    }
+    // Exact phrases — no prefix; user requested exact match
+    for (const phrase of parsedQuery.phrases) {
+        matchParts.push(`"${escapeFTS5(phrase)}"`);
+    }
+    // Excluded terms — prefix matching to match tokenizer behaviour
+    for (const term of parsedQuery.excludedTerms) {
+        matchParts.push(`NOT "${escapeFTS5(term)}"*`);
+    }
+    if (matchParts.length > 0) {
+        ftsMatch = matchParts.join(' ');
+        params.ftsMatch = ftsMatch;
+    }
+    // ── Operator filters → WHERE clauses ────────────────────────────────────
+    const f = parsedQuery.filters;
+    // entity: function | component
+    if (f.metadata?.entityType) {
+        whereClauses.push('entity_type = @entityType');
+        params.entityType = f.metadata.entityType;
+    }
+    // component: functional | class | memo | forwardRef
+    if (f.metadata?.componentType) {
+        whereClauses.push('component_type = @componentType');
+        params.componentType = f.metadata.componentType;
+    }
+    // hook: useState / hooks: useEffect
+    if (f.metadata?.hasHook) {
+        whereClauses.push('EXISTS (SELECT 1 FROM json_each(hooks) WHERE LOWER(json_extract(value, \'$.name\')) = LOWER(@hookName))');
+        params.hookName = f.metadata.hasHook;
+    }
+    // prop: / props: <name>
+    if (f.metadata?.hasProp) {
+        whereClauses.push('EXISTS (SELECT 1 FROM json_each(props) WHERE LOWER(json_extract(value, \'$.name\')) = LOWER(@propName))');
+        params.propName = f.metadata.hasProp;
+    }
+    // dep: / dependency: / uses: <name>
+    if (f.metadata?.usesDependency) {
+        whereClauses.push('EXISTS (SELECT 1 FROM function_dependencies fd WHERE fd.function_id = f.id AND fd.dependency = @depName)');
+        params.depName = f.metadata.usesDependency;
+    }
+    // calls: <name>
+    if (f.metadata?.callsFunction) {
+        joinClauses.push('JOIN function_calls fc ON fc.caller_id = f.id');
+        whereClauses.push('fc.callee_name = @calleeName');
+        params.calleeName = f.metadata.callsFunction;
+    }
+    // calledby: / dependents-of: / used-by: <name>
+    if (f.metadata?.calledByFunction) {
+        whereClauses.push('EXISTS (SELECT 1 FROM function_calls fc2 WHERE fc2.callee_name = f.name AND fc2.caller_id IN (SELECT id FROM functions WHERE name = @calledByName))');
+        params.calledByName = f.metadata.calledByFunction;
+    }
+    // depends-on: / imports-from: <module>
+    if (f.metadata?.dependsOnModule) {
+        whereClauses.push('EXISTS (SELECT 1 FROM function_dependencies fd2 WHERE fd2.function_id = f.id AND fd2.dependency LIKE @modulePattern)');
+        params.modulePattern = `%${f.metadata.dependsOnModule}%`;
+    }
+    // unused-imports / dead-imports
+    if (f.metadata?.hasUnusedImports) {
+        whereClauses.push('has_unused_imports = 1');
+    }
+    // lang: / language:
+    if (f.language) {
+        whereClauses.push('LOWER(language) = LOWER(@language)');
+        params.language = f.language;
+    }
+    // file: / path: (glob)
+    if (f.filePath) {
+        whereClauses.push('file_path GLOB @fileGlob');
+        params.fileGlob = f.filePath;
+    }
+    // jsdoc: / doc:
+    if (f.hasJsDoc) {
+        whereClauses.push('has_jsdoc = 1');
+    }
+    // exported:
+    if (f.isExported) {
+        whereClauses.push('is_exported = 1');
+    }
+    // complexity: N, complexity: N..M, complexity: >N, complexity: <N
+    if (f.complexity) {
+        if (f.complexity.min !== undefined && f.complexity.max !== undefined) {
+            if (f.complexity.min === f.complexity.max) {
+                whereClauses.push('complexity = @complexityExact');
+                params.complexityExact = f.complexity.min;
+            }
+            else {
+                whereClauses.push('complexity BETWEEN @cMin AND @cMax');
+                params.cMin = f.complexity.min;
+                params.cMax = f.complexity.max;
+            }
+        }
+        else if (f.complexity.min !== undefined) {
+            whereClauses.push('complexity > @cMin');
+            params.cMin = f.complexity.min;
+        }
+        else if (f.complexity.max !== undefined) {
+            whereClauses.push('complexity < @cMax');
+            params.cMax = f.complexity.max;
+        }
+    }
+    // fileType — filter by file extension (not a column, so use LIKE on file_path)
+    if (f.fileType) {
+        const ext = f.fileType.startsWith('.') ? f.fileType : `.${f.fileType}`;
+        whereClauses.push('file_path LIKE @fileExt');
+        params.fileExt = `%${ext}`;
+    }
+    // ── Ordering ────────────────────────────────────────────────────────────
+    const orderBy = ftsMatch ? 'score' : 'name';
+    // ── Limit / offset ──────────────────────────────────────────────────────
+    const limit = options?.defaultLimit ?? 200;
+    const offset = options?.offset ?? 0;
+    return { ftsMatch, whereClauses, joinClauses, params, orderBy, limit, offset };
+}
 //# sourceMappingURL=QueryParser.js.map