code-auditor-mcp 3.1.0 → 3.4.0

package/dist/graph/outputFormatter.d.ts

@@ -0,0 +1,55 @@
+/**
+ * Spec 14 R5 — DOT and Mermaid Graph Output Formatting
+ *
+ * Zero rendering dependencies — just string emission.
+ * Produces valid Graphviz DOT and Mermaid graph TD formats.
+ */
+import type { CallGraph } from './callGraph.js';
+import type { ImportGraph } from './importGraph.js';
+export interface DotOptions {
+    /** Graph label */
+    label?: string;
+    /** Node labels: nodeKey → display label */
+    nodeLabels?: Map<string, string>;
+    /** Community assignments for coloring: nodeKey → community ID */
+    communities?: Map<string, number>;
+    /** Legend toggle */
+    legend?: boolean;
+    /** Direction: TD (top-down) or LR (left-right) */
+    rankdir?: 'TD' | 'LR';
+    /** Max nodes to include (for large graphs) */
+    maxNodes?: number;
+    /** Show edge weights */
+    showWeights?: boolean;
+    /** Context depth (for risk neighborhood) */
+    depth?: number;
+}
+export interface MermaidOptions {
+    /** Graph label */
+    label?: string;
+    /** Node labels */
+    nodeLabels?: Map<string, string>;
+    /** Community assignments for styling */
+    communities?: Map<string, number>;
+    /** Max nodes */
+    maxNodes?: number;
+    /** Show edge weights */
+    showWeights?: boolean;
+}
+/**
+ * Emit a Graphviz DOT-format string for the given call graph.
+ */
+export declare function callGraphToDot(graph: CallGraph, options?: DotOptions): string;
+/**
+ * Emit a Graphviz DOT-format string for the given import graph.
+ */
+export declare function importGraphToDot(graph: ImportGraph, options?: DotOptions): string;
+/**
+ * Emit a Mermaid graph TD string for the given call graph.
+ */
+export declare function callGraphToMermaid(graph: CallGraph, options?: MermaidOptions): string;
+/**
+ * Emit a Mermaid graph TD string for the given import graph.
+ */
+export declare function importGraphToMermaid(graph: ImportGraph, options?: MermaidOptions): string;
+//# sourceMappingURL=outputFormatter.d.ts.map

package/dist/graph/outputFormatter.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"outputFormatter.d.ts","sourceRoot":"","sources":["../../src/graph/outputFormatter.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAC;AAChD,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAIpD,MAAM,WAAW,UAAU;IACzB,kBAAkB;IAClB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,2CAA2C;IAC3C,UAAU,CAAC,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACjC,iEAAiE;IACjE,WAAW,CAAC,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAClC,oBAAoB;IACpB,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,kDAAkD;IAClD,OAAO,CAAC,EAAE,IAAI,GAAG,IAAI,CAAC;IACtB,8CAA8C;IAC9C,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,wBAAwB;IACxB,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,4CAA4C;IAC5C,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,cAAc;IAC7B,kBAAkB;IAClB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,kBAAkB;IAClB,UAAU,CAAC,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACjC,wCAAwC;IACxC,WAAW,CAAC,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAClC,gBAAgB;IAChB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,wBAAwB;IACxB,WAAW,CAAC,EAAE,OAAO,CAAC;CACvB;AAkCD;;GAEG;AACH,wBAAgB,cAAc,CAAC,KAAK,EAAE,SAAS,EAAE,OAAO,GAAE,UAAe,GAAG,MAAM,CAuEjF;AAED;;GAEG;AACH,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,WAAW,EAAE,OAAO,GAAE,UAAe,GAAG,MAAM,CAqErF;AAID;;GAEG;AACH,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,SAAS,EAAE,OAAO,GAAE,cAAmB,GAAG,MAAM,CA8DzF;AAED;;GAEG;AACH,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,WAAW,EAAE,OAAO,GAAE,cAAmB,GAAG,MAAM,CA8D7F"}

package/dist/graph/outputFormatter.js

@@ -0,0 +1,283 @@
+/**
+ * Spec 14 R5 — DOT and Mermaid Graph Output Formatting
+ *
+ * Zero rendering dependencies — just string emission.
+ * Produces valid Graphviz DOT and Mermaid graph TD formats.
+ */
+// ── Color palette for communities ───────────────────────────────────────
+const COMMUNITY_COLORS = [
+    '#4e79a7', '#f28e2b', '#e15759', '#76b7b2', '#59a14f',
+    '#edc948', '#b07aa1', '#ff9da7', '#9c755f', '#bab0ac',
+    '#86bcb6', '#8cd17d', '#d37295', '#b6992d', '#499894',
+    '#e8a838', '#9d7660', '#bc80bd', '#dfc27d', '#a6611a',
+];
+function communityColor(communityId) {
+    return COMMUNITY_COLORS[communityId % COMMUNITY_COLORS.length];
+}
+// ── Node ID sanitization ────────────────────────────────────────────────
+/** Sanitize an identifier for use in DOT/Mermaid output. */
+function sanitizeId(id) {
+    return id.replace(/[^a-zA-Z0-9_]/g, '_');
+}
+/** Truncate a label for display. */
+function truncateLabel(label, maxLen = 60) {
+    if (label.length <= maxLen)
+        return label;
+    return label.substring(0, maxLen - 3) + '...';
+}
+function escapeLabel(label) {
+    return label.replace(/"/g, '\\"').replace(/\n/g, '\\n');
+}
+// ── DOT output ──────────────────────────────────────────────────────────
+/**
+ * Emit a Graphviz DOT-format string for the given call graph.
+ */
+export function callGraphToDot(graph, options = {}) {
+    const { label, nodeLabels, communities, legend = true, rankdir = 'TB', maxNodes, showWeights = false, depth, } = options;
+    const lines = [];
+    lines.push(`digraph calls {`);
+    if (label)
+        lines.push(`  label="${escapeLabel(label)}";`);
+    lines.push(`  rankdir=${rankdir};`);
+    lines.push(`  node [shape=box, style=filled, fontname="Helvetica"];`);
+    lines.push(`  edge [fontname="Helvetica", fontsize=10];`);
+    const nodes = [...graph.nodeIds];
+    const included = new Set();
+    // If depth is specified, only include the first maxNodes (already sorted by risk)
+    if (maxNodes && maxNodes > 0) {
+        for (let i = 0; i < Math.min(maxNodes, nodes.length); i++) {
+            included.add(nodes[i]);
+        }
+    }
+    else {
+        for (const n of nodes)
+            included.add(n);
+    }
+    // Emit nodes
+    for (const nodeId of included) {
+        const name = graph.nodeNames.get(nodeId) ?? String(nodeId);
+        const labelText = nodeLabels?.get(String(nodeId)) ?? name;
+        const comm = communities?.get(String(nodeId));
+        const color = comm !== undefined ? communityColor(comm) : '#e0e0e0';
+        const nodeIdStr = sanitizeId(`n${nodeId}`);
+        lines.push(`  ${nodeIdStr} [label="${escapeLabel(truncateLabel(labelText))}", fillcolor="${color}"];`);
+    }
+    // Emit edges
+    for (const [srcId, neighbors] of graph.adjacency) {
+        if (!included.has(srcId))
+            continue;
+        const srcStr = sanitizeId(`n${srcId}`);
+        for (const [dstId, weight] of neighbors) {
+            if (!included.has(dstId))
+                continue;
+            const dstStr = sanitizeId(`n${dstId}`);
+            const labelAttr = showWeights ? ` [label="${weight}"]` : '';
+            lines.push(`  ${srcStr} -> ${dstStr}${labelAttr};`);
+        }
+    }
+    // Legend
+    if (legend && communities) {
+        const uniqueComms = new Set(communities.values());
+        lines.push(`  subgraph cluster_legend {`);
+        lines.push(`    label="Communities";`);
+        lines.push(`    style=filled;`);
+        lines.push(`    color=lightgrey;`);
+        for (const comm of uniqueComms) {
+            const color = communityColor(comm);
+            lines.push(`    legend_${comm} [label="Community ${comm}", shape=ellipse, fillcolor="${color}", fontsize=8];`);
+        }
+        lines.push(`  }`);
+    }
+    lines.push(`}`);
+    return lines.join('\n') + '\n';
+}
+/**
+ * Emit a Graphviz DOT-format string for the given import graph.
+ */
+export function importGraphToDot(graph, options = {}) {
+    const { label, communities, legend = true, rankdir = 'TB', maxNodes, showWeights = false, } = options;
+    const lines = [];
+    lines.push(`digraph imports {`);
+    if (label)
+        lines.push(`  label="${escapeLabel(label)}";`);
+    lines.push(`  rankdir=${rankdir};`);
+    lines.push(`  node [shape=folder, style=filled, fontname="Helvetica"];`);
+    lines.push(`  edge [fontname="Helvetica", fontsize=10];`);
+    const files = [...graph.filePaths];
+    const included = new Set();
+    if (maxNodes && maxNodes > 0) {
+        for (let i = 0; i < Math.min(maxNodes, files.length); i++) {
+            included.add(files[i]);
+        }
+    }
+    else {
+        for (const f of files)
+            included.add(f);
+    }
+    // Emit nodes
+    for (const filePath of included) {
+        const comm = communities?.get(filePath);
+        const color = comm !== undefined ? communityColor(comm) : '#e0e0e0';
+        const nodeId = sanitizeId(filePath);
+        // Show just filename for brevity
+        const displayLabel = filePath.split('/').pop() ?? filePath;
+        lines.push(`  ${nodeId} [label="${escapeLabel(displayLabel)}", fillcolor="${color}", tooltip="${escapeLabel(filePath)}"];`);
+    }
+    // Emit edges
+    for (const [srcFile, neighbors] of graph.adjacency) {
+        if (!included.has(srcFile))
+            continue;
+        const srcId = sanitizeId(srcFile);
+        for (const [dstFile, weight] of neighbors) {
+            if (!included.has(dstFile))
+                continue;
+            const dstId = sanitizeId(dstFile);
+            if (srcId === dstId)
+                continue;
+            const labelAttr = showWeights ? ` [label="${weight}"]` : '';
+            lines.push(`  ${srcId} -> ${dstId}${labelAttr};`);
+        }
+    }
+    // Legend
+    if (legend && communities) {
+        const uniqueComms = new Set(communities.values());
+        lines.push(`  subgraph cluster_legend {`);
+        lines.push(`    label="Communities";`);
+        lines.push(`    style=filled;`);
+        lines.push(`    color=lightgrey;`);
+        for (const comm of uniqueComms) {
+            const color = communityColor(comm);
+            lines.push(`    legend_${comm} [label="Community ${comm}", shape=ellipse, fillcolor="${color}", fontsize=8];`);
+        }
+        lines.push(`  }`);
+    }
+    lines.push(`}`);
+    return lines.join('\n') + '\n';
+}
+// ── Mermaid output ──────────────────────────────────────────────────────
+/**
+ * Emit a Mermaid graph TD string for the given call graph.
+ */
+export function callGraphToMermaid(graph, options = {}) {
+    const { label, nodeLabels, communities, maxNodes, showWeights = false } = options;
+    const lines = [];
+    lines.push('```mermaid');
+    lines.push('graph TD');
+    if (label)
+        lines.push(`  %% ${label}`);
+    const nodes = [...graph.nodeIds];
+    const included = new Set();
+    if (maxNodes && maxNodes > 0) {
+        for (let i = 0; i < Math.min(maxNodes, nodes.length); i++) {
+            included.add(nodes[i]);
+        }
+    }
+    else {
+        for (const n of nodes)
+            included.add(n);
+    }
+    // Define community styles
+    if (communities) {
+        const uniqueComms = new Set(communities.values());
+        for (const comm of uniqueComms) {
+            const color = communityColor(comm);
+            lines.push(`  classDef comm${comm} fill:${color},stroke:#333,stroke-width:1px;`);
+        }
+    }
+    // Emit edges first (so they define nodes implicitly)
+    for (const [srcId, neighbors] of graph.adjacency) {
+        if (!included.has(srcId))
+            continue;
+        const srcLabel = sanitizeId(`n${srcId}`);
+        for (const [dstId, weight] of neighbors) {
+            if (!included.has(dstId))
+                continue;
+            const dstLabel = sanitizeId(`n${dstId}`);
+            const weightStr = showWeights ? `|${weight}|` : ' --> ';
+            const edgeStr = showWeights
+                ? `  ${srcLabel} -- "${weight}" --> ${dstLabel}`
+                : `  ${srcLabel} --> ${dstLabel}`;
+            lines.push(edgeStr);
+        }
+    }
+    // Emit node labels
+    for (const nodeId of included) {
+        const name = graph.nodeNames.get(nodeId) ?? String(nodeId);
+        const labelText = nodeLabels?.get(String(nodeId)) ?? name;
+        const nodeIdStr = sanitizeId(`n${nodeId}`);
+        lines.push(`  ${nodeIdStr}["${escapeLabel(truncateLabel(labelText))}"]`);
+        // Assign community class
+        if (communities) {
+            const comm = communities.get(String(nodeId));
+            if (comm !== undefined) {
+                lines.push(`  class ${nodeIdStr} comm${comm}`);
+            }
+        }
+    }
+    lines.push('```');
+    return lines.join('\n') + '\n';
+}
+/**
+ * Emit a Mermaid graph TD string for the given import graph.
+ */
+export function importGraphToMermaid(graph, options = {}) {
+    const { label, communities, maxNodes, showWeights = false } = options;
+    const lines = [];
+    lines.push('```mermaid');
+    lines.push('graph TD');
+    if (label)
+        lines.push(`  %% ${label}`);
+    const files = [...graph.filePaths];
+    const included = new Set();
+    if (maxNodes && maxNodes > 0) {
+        for (let i = 0; i < Math.min(maxNodes, files.length); i++) {
+            included.add(files[i]);
+        }
+    }
+    else {
+        for (const f of files)
+            included.add(f);
+    }
+    // Define community styles
+    if (communities) {
+        const uniqueComms = new Set(communities.values());
+        for (const comm of uniqueComms) {
+            const color = communityColor(comm);
+            lines.push(`  classDef comm${comm} fill:${color},stroke:#333,stroke-width:1px;`);
+        }
+    }
+    // Emit edges
+    for (const [srcFile, neighbors] of graph.adjacency) {
+        if (!included.has(srcFile))
+            continue;
+        const srcId = sanitizeId(srcFile);
+        for (const [dstFile, weight] of neighbors) {
+            if (!included.has(dstFile))
+                continue;
+            const dstId = sanitizeId(dstFile);
+            if (srcId === dstId)
+                continue;
+            if (showWeights) {
+                lines.push(`  ${srcId} -- "${weight}" --> ${dstId}`);
+            }
+            else {
+                lines.push(`  ${srcId} --> ${dstId}`);
+            }
+        }
+    }
+    // Emit node labels
+    for (const filePath of included) {
+        const nodeId = sanitizeId(filePath);
+        const displayLabel = filePath.split('/').pop() ?? filePath;
+        lines.push(`  ${nodeId}["${escapeLabel(displayLabel)}"]`);
+        if (communities) {
+            const comm = communities.get(filePath);
+            if (comm !== undefined) {
+                lines.push(`  class ${nodeId} comm${comm}`);
+            }
+        }
+    }
+    lines.push('```');
+    return lines.join('\n') + '\n';
+}
+//# sourceMappingURL=outputFormatter.js.map

package/dist/graph/outputFormatter.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"outputFormatter.js","sourceRoot":"","sources":["../../src/graph/outputFormatter.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAuCH,2EAA2E;AAE3E,MAAM,gBAAgB,GAAG;IACvB,SAAS,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS;IACrD,SAAS,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS;IACrD,SAAS,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS;IACrD,SAAS,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS;CACtD,CAAC;AAEF,SAAS,cAAc,CAAC,WAAmB;IACzC,OAAO,gBAAgB,CAAC,WAAW,GAAG,gBAAgB,CAAC,MAAM,CAAC,CAAC;AACjE,CAAC;AAED,2EAA2E;AAE3E,4DAA4D;AAC5D,SAAS,UAAU,CAAC,EAAU;IAC5B,OAAO,EAAE,CAAC,OAAO,CAAC,gBAAgB,EAAE,GAAG,CAAC,CAAC;AAC3C,CAAC;AAED,oCAAoC;AACpC,SAAS,aAAa,CAAC,KAAa,EAAE,MAAM,GAAW,EAAE;IACvD,IAAI,KAAK,CAAC,MAAM,IAAI,MAAM;QAAE,OAAO,KAAK,CAAC;IACzC,OAAO,KAAK,CAAC,SAAS,CAAC,CAAC,EAAE,MAAM,GAAG,CAAC,CAAC,GAAG,KAAK,CAAC;AAChD,CAAC;AAED,SAAS,WAAW,CAAC,KAAa;IAChC,OAAO,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;AAC1D,CAAC;AAED,2EAA2E;AAE3E;;GAEG;AACH,MAAM,UAAU,cAAc,CAAC,KAAgB,EAAE,OAAO,GAAe,EAAE;IACvE,MAAM,EACJ,KAAK,EACL,UAAU,EACV,WAAW,EACX,MAAM,GAAG,IAAI,EACb,OAAO,GAAG,IAAI,EACd,QAAQ,EACR,WAAW,GAAG,KAAK,EACnB,KAAK,GACN,GAAG,OAAO,CAAC;IAEZ,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,KAAK,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;IAC9B,IAAI,KAAK;QAAE,KAAK,CAAC,IAAI,CAAC,YAAY,WAAW,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC1D,KAAK,CAAC,IAAI,CAAC,aAAa,OAAO,GAAG,CAAC,CAAC;IACpC,KAAK,CAAC,IAAI,CAAC,yDAAyD,CAAC,CAAC;IACtE,KAAK,CAAC,IAAI,CAAC,6CAA6C,CAAC,CAAC;IAE1D,MAAM,KAAK,GAAG,CAAC,GAAG,KAAK,CAAC,OAAO,CAAC,CAAC;IACjC,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAU,CAAC;IAEnC,kFAAkF;IAClF,IAAI,QAAQ,IAAI,QAAQ,GAAG,CAAC,EAAE,CAAC;QAC7B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,QAAQ,EAAE,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;YAC1D,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;QACzB,CAAC;IACH,CAAC;SAAM,CAAC;QACN,KAAK,MAAM,CAAC,IAAI,KAAK;YAAE,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;IACzC,CAAC;IAED,aAAa;IACb,KAAK,MAAM,MAAM,IAAI,QAAQ,EAAE,CAAC;QAC9B,MAAM,IAAI,GAAG,KAAK,CAAC,SAAS,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,MAAM,CAAC,MAAM,CAAC,CAAC;QAC3D,MAAM,SAAS,GAAG,UAAU,EAAE,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,IAAI,CAAC;QAC1D,MAAM,IAAI,GAAG,WAAW,EAAE,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC;QAC9C,MAAM,KAAK,GAAG,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QACpE,MAAM,SAAS,GAAG,UAAU,CAAC,IAAI,MAAM,EAAE,CAAC,CAAC;QAE3C,KAAK,CAAC,IAAI,CAAC,KAAK,SAAS,YAAY,WAAW,CAAC,aAAa,CAAC,SAAS,CAAC,CAAC,iBAAiB,KAAK,KAAK,CAAC,CAAC;IACzG,CAAC;IAED,aAAa;IACb,KAAK,MAAM,CAAC,KAAK,EAAE,SAAS,CAAC,IAAI,KAAK,CAAC,SAAS,EAAE,CAAC;QACjD,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC;YAAE,SAAS;QACnC,MAAM,MAAM,GAAG,UAAU,CAAC,IAAI,KAAK,EAAE,CAAC,CAAC;QAEvC,KAAK,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,IAAI,SAAS,EAAE,CAAC;YACxC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC;gBAAE,SAAS;YACnC,MAAM,MAAM,GAAG,UAAU,CAAC,IAAI,KAAK,EAAE,CAAC,CAAC;YACvC,MAAM,SAAS,GAAG,WAAW,CAAC,CAAC,CAAC,YAAY,MAAM,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;YAC5D,KAAK,CAAC,IAAI,CAAC,KAAK,MAAM,OAAO,MAAM,GAAG,SAAS,GAAG,CAAC,CAAC;QACtD,CAAC;IACH,CAAC;IAED,SAAS;IACT,IAAI,MAAM,IAAI,WAAW,EAAE,CAAC;QAC1B,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,WAAW,CAAC,MAAM,EAAE,CAAC,CAAC;QAClD,KAAK,CAAC,IAAI,CAAC,6BAA6B,CAAC,CAAC;QAC1C,KAAK,CAAC,IAAI,CAAC,0BAA0B,CAAC,CAAC;QACvC,KAAK,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC;QAChC,KAAK,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAC;QACnC,KAAK,MAAM,IAAI,IAAI,WAAW,EAAE,CAAC;YAC/B,MAAM,KAAK,GAAG,cAAc,CAAC,IAAI,CAAC,CAAC;YACnC,KAAK,CAAC,IAAI,CAAC,cAAc,IAAI,sBAAsB,IAAI,gCAAgC,KAAK,iBAAiB,CAAC,CAAC;QACjH,CAAC;QACD,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACpB,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAChB,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;AACjC,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,gBAAgB,CAAC,KAAkB,EAAE,OAAO,GAAe,EAAE;IAC3E,MAAM,EACJ,KAAK,EACL,WAAW,EACX,MAAM,GAAG,IAAI,EACb,OAAO,GAAG,IAAI,EACd,QAAQ,EACR,WAAW,GAAG,KAAK,GACpB,GAAG,OAAO,CAAC;IAEZ,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,KAAK,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC;IAChC,IAAI,KAAK;QAAE,KAAK,CAAC,IAAI,CAAC,YAAY,WAAW,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC1D,KAAK,CAAC,IAAI,CAAC,aAAa,OAAO,GAAG,CAAC,CAAC;IACpC,KAAK,CAAC,IAAI,CAAC,4DAA4D,CAAC,CAAC;IACzE,KAAK,CAAC,IAAI,CAAC,6CAA6C,CAAC,CAAC;IAE1D,MAAM,KAAK,GAAG,CAAC,GAAG,KAAK,CAAC,SAAS,CAAC,CAAC;IACnC,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAU,CAAC;IAEnC,IAAI,QAAQ,IAAI,QAAQ,GAAG,CAAC,EAAE,CAAC;QAC7B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,QAAQ,EAAE,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;YAC1D,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;QACzB,CAAC;IACH,CAAC;SAAM,CAAC;QACN,KAAK,MAAM,CAAC,IAAI,KAAK;YAAE,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;IACzC,CAAC;IAED,aAAa;IACb,KAAK,MAAM,QAAQ,IAAI,QAAQ,EAAE,CAAC;QAChC,MAAM,IAAI,GAAG,WAAW,EAAE,GAAG,CAAC,QAAQ,CAAC,CAAC;QACxC,MAAM,KAAK,GAAG,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QACpE,MAAM,MAAM,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC;QACpC,iCAAiC;QACjC,MAAM,YAAY,GAAG,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,IAAI,QAAQ,CAAC;QAE3D,KAAK,CAAC,IAAI,CAAC,KAAK,MAAM,YAAY,WAAW,CAAC,YAAY,CAAC,iBAAiB,KAAK,eAAe,WAAW,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IAC9H,CAAC;IAED,aAAa;IACb,KAAK,MAAM,CAAC,OAAO,EAAE,SAAS,CAAC,IAAI,KAAK,CAAC,SAAS,EAAE,CAAC;QACnD,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC;YAAE,SAAS;QACrC,MAAM,KAAK,GAAG,UAAU,CAAC,OAAO,CAAC,CAAC;QAElC,KAAK,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,IAAI,SAAS,EAAE,CAAC;YAC1C,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC;gBAAE,SAAS;YACrC,MAAM,KAAK,GAAG,UAAU,CAAC,OAAO,CAAC,CAAC;YAClC,IAAI,KAAK,KAAK,KAAK;gBAAE,SAAS;YAC9B,MAAM,SAAS,GAAG,WAAW,CAAC,CAAC,CAAC,YAAY,MAAM,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;YAC5D,KAAK,CAAC,IAAI,CAAC,KAAK,KAAK,OAAO,KAAK,GAAG,SAAS,GAAG,CAAC,CAAC;QACpD,CAAC;IACH,CAAC;IAED,SAAS;IACT,IAAI,MAAM,IAAI,WAAW,EAAE,CAAC;QAC1B,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,WAAW,CAAC,MAAM,EAAE,CAAC,CAAC;QAClD,KAAK,CAAC,IAAI,CAAC,6BAA6B,CAAC,CAAC;QAC1C,KAAK,CAAC,IAAI,CAAC,0BAA0B,CAAC,CAAC;QACvC,KAAK,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC;QAChC,KAAK,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAC;QACnC,KAAK,MAAM,IAAI,IAAI,WAAW,EAAE,CAAC;YAC/B,MAAM,KAAK,GAAG,cAAc,CAAC,IAAI,CAAC,CAAC;YACnC,KAAK,CAAC,IAAI,CAAC,cAAc,IAAI,sBAAsB,IAAI,gCAAgC,KAAK,iBAAiB,CAAC,CAAC;QACjH,CAAC;QACD,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACpB,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAChB,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;AACjC,CAAC;AAED,2EAA2E;AAE3E;;GAEG;AACH,MAAM,UAAU,kBAAkB,CAAC,KAAgB,EAAE,OAAO,GAAmB,EAAE;IAC/E,MAAM,EAAE,KAAK,EAAE,UAAU,EAAE,WAAW,EAAE,QAAQ,EAAE,WAAW,GAAG,KAAK,EAAE,GAAG,OAAO,CAAC;IAElF,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,KAAK,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;IACzB,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IACvB,IAAI,KAAK;QAAE,KAAK,CAAC,IAAI,CAAC,QAAQ,KAAK,EAAE,CAAC,CAAC;IAEvC,MAAM,KAAK,GAAG,CAAC,GAAG,KAAK,CAAC,OAAO,CAAC,CAAC;IACjC,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAU,CAAC;IAEnC,IAAI,QAAQ,IAAI,QAAQ,GAAG,CAAC,EAAE,CAAC;QAC7B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,QAAQ,EAAE,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;YAC1D,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;QACzB,CAAC;IACH,CAAC;SAAM,CAAC;QACN,KAAK,MAAM,CAAC,IAAI,KAAK;YAAE,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;IACzC,CAAC;IAED,0BAA0B;IAC1B,IAAI,WAAW,EAAE,CAAC;QAChB,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,WAAW,CAAC,MAAM,EAAE,CAAC,CAAC;QAClD,KAAK,MAAM,IAAI,IAAI,WAAW,EAAE,CAAC;YAC/B,MAAM,KAAK,GAAG,cAAc,CAAC,IAAI,CAAC,CAAC;YACnC,KAAK,CAAC,IAAI,CAAC,kBAAkB,IAAI,SAAS,KAAK,gCAAgC,CAAC,CAAC;QACnF,CAAC;IACH,CAAC;IAED,qDAAqD;IACrD,KAAK,MAAM,CAAC,KAAK,EAAE,SAAS,CAAC,IAAI,KAAK,CAAC,SAAS,EAAE,CAAC;QACjD,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC;YAAE,SAAS;QACnC,MAAM,QAAQ,GAAG,UAAU,CAAC,IAAI,KAAK,EAAE,CAAC,CAAC;QAEzC,KAAK,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,IAAI,SAAS,EAAE,CAAC;YACxC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC;gBAAE,SAAS;YACnC,MAAM,QAAQ,GAAG,UAAU,CAAC,IAAI,KAAK,EAAE,CAAC,CAAC;YACzC,MAAM,SAAS,GAAG,WAAW,CAAC,CAAC,CAAC,IAAI,MAAM,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC;YACxD,MAAM,OAAO,GAAG,WAAW;gBACzB,CAAC,CAAC,KAAK,QAAQ,QAAQ,MAAM,SAAS,QAAQ,EAAE;gBAChD,CAAC,CAAC,KAAK,QAAQ,QAAQ,QAAQ,EAAE,CAAC;YACpC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACtB,CAAC;IACH,CAAC;IAED,mBAAmB;IACnB,KAAK,MAAM,MAAM,IAAI,QAAQ,EAAE,CAAC;QAC9B,MAAM,IAAI,GAAG,KAAK,CAAC,SAAS,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,MAAM,CAAC,MAAM,CAAC,CAAC;QAC3D,MAAM,SAAS,GAAG,UAAU,EAAE,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,IAAI,CAAC;QAC1D,MAAM,SAAS,GAAG,UAAU,CAAC,IAAI,MAAM,EAAE,CAAC,CAAC;QAC3C,KAAK,CAAC,IAAI,CAAC,KAAK,SAAS,KAAK,WAAW,CAAC,aAAa,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,CAAC;QAEzE,yBAAyB;QACzB,IAAI,WAAW,EAAE,CAAC;YAChB,MAAM,IAAI,GAAG,WAAW,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC;YAC7C,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;gBACvB,KAAK,CAAC,IAAI,CAAC,WAAW,SAAS,QAAQ,IAAI,EAAE,CAAC,CAAC;YACjD,CAAC;QACH,CAAC;IACH,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAClB,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;AACjC,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,oBAAoB,CAAC,KAAkB,EAAE,OAAO,GAAmB,EAAE;IACnF,MAAM,EAAE,KAAK,EAAE,WAAW,EAAE,QAAQ,EAAE,WAAW,GAAG,KAAK,EAAE,GAAG,OAAO,CAAC;IAEtE,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,KAAK,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;IACzB,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IACvB,IAAI,KAAK;QAAE,KAAK,CAAC,IAAI,CAAC,QAAQ,KAAK,EAAE,CAAC,CAAC;IAEvC,MAAM,KAAK,GAAG,CAAC,GAAG,KAAK,CAAC,SAAS,CAAC,CAAC;IACnC,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAU,CAAC;IAEnC,IAAI,QAAQ,IAAI,QAAQ,GAAG,CAAC,EAAE,CAAC;QAC7B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,QAAQ,EAAE,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;YAC1D,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;QACzB,CAAC;IACH,CAAC;SAAM,CAAC;QACN,KAAK,MAAM,CAAC,IAAI,KAAK;YAAE,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;IACzC,CAAC;IAED,0BAA0B;IAC1B,IAAI,WAAW,EAAE,CAAC;QAChB,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,WAAW,CAAC,MAAM,EAAE,CAAC,CAAC;QAClD,KAAK,MAAM,IAAI,IAAI,WAAW,EAAE,CAAC;YAC/B,MAAM,KAAK,GAAG,cAAc,CAAC,IAAI,CAAC,CAAC;YACnC,KAAK,CAAC,IAAI,CAAC,kBAAkB,IAAI,SAAS,KAAK,gCAAgC,CAAC,CAAC;QACnF,CAAC;IACH,CAAC;IAED,aAAa;IACb,KAAK,MAAM,CAAC,OAAO,EAAE,SAAS,CAAC,IAAI,KAAK,CAAC,SAAS,EAAE,CAAC;QACnD,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC;YAAE,SAAS;QACrC,MAAM,KAAK,GAAG,UAAU,CAAC,OAAO,CAAC,CAAC;QAElC,KAAK,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,IAAI,SAAS,EAAE,CAAC;YAC1C,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC;gBAAE,SAAS;YACrC,MAAM,KAAK,GAAG,UAAU,CAAC,OAAO,CAAC,CAAC;YAClC,IAAI,KAAK,KAAK,KAAK;gBAAE,SAAS;YAE9B,IAAI,WAAW,EAAE,CAAC;gBAChB,KAAK,CAAC,IAAI,CAAC,KAAK,KAAK,QAAQ,MAAM,SAAS,KAAK,EAAE,CAAC,CAAC;YACvD,CAAC;iBAAM,CAAC;gBACN,KAAK,CAAC,IAAI,CAAC,KAAK,KAAK,QAAQ,KAAK,EAAE,CAAC,CAAC;YACxC,CAAC;QACH,CAAC;IACH,CAAC;IAED,mBAAmB;IACnB,KAAK,MAAM,QAAQ,IAAI,QAAQ,EAAE,CAAC;QAChC,MAAM,MAAM,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC;QACpC,MAAM,YAAY,GAAG,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,IAAI,QAAQ,CAAC;QAC3D,KAAK,CAAC,IAAI,CAAC,KAAK,MAAM,KAAK,WAAW,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC;QAE1D,IAAI,WAAW,EAAE,CAAC;YAChB,MAAM,IAAI,GAAG,WAAW,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;YACvC,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;gBACvB,KAAK,CAAC,IAAI,CAAC,WAAW,MAAM,QAAQ,IAAI,EAAE,CAAC,CAAC;YAC9C,CAAC;QACH,CAAC;IACH,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAClB,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;AACjC,CAAC"}

package/dist/hooks/codex.d.ts

@@ -16,5 +16,40 @@
  *   2 — critical violations found (blocking feedback loop)
  *   1 — internal error (adapter crash, not violation-related)
  */
-export {};
+import type { HookAuditOutput } from './core.js';
+export interface CodexPostToolUse {
+    session_id?: string;
+    transcript_path?: string;
+    cwd?: string;
+    hook_event_name?: string;
+    tool_name?: string;
+    tool_use_id?: string;
+    tool_input?: {
+        file_path?: string;
+        path?: string;
+        [key: string]: unknown;
+    };
+    tool_response?: unknown;
+}
+export interface CodexHookResult {
+    exitCode: number;
+    stdout: string;
+    stderr: string;
+}
+/**
+ * Build the Codex feedback payload from audit output.
+ */
+export declare function formatCodexFeedback(output: HookAuditOutput): {
+    feedback: Record<string, unknown> | null;
+    isBlocking: boolean;
+};
+/**
+ * Process a Codex PostToolUse event and return the hook result.
+ * Extracted from main() for testability — tests inject a mock audit function.
+ */
+export declare function processCodexEvent(rawStdin: string, auditFn?: (filePaths: string[], projectRoot: string) => Promise<HookAuditOutput>, resolveRoot?: (event: CodexPostToolUse) => string): Promise<CodexHookResult>;
+/**
+ * CLI entry point — reads stdin, processes, writes result, exits.
+ */
+export declare function main(): Promise<void>;
 //# sourceMappingURL=codex.d.ts.map

package/dist/hooks/codex.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"codex.d.ts","sourceRoot":"","sources":["../../src/hooks/codex.ts"],"names":[],"mappings":";AACA;;;;;;;;;;;;;;;;GAgBG"}
+{"version":3,"file":"codex.d.ts","sourceRoot":"","sources":["../../src/hooks/codex.ts"],"names":[],"mappings":";AACA;;;;;;;;;;;;;;;;GAgBG;AAGH,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,WAAW,CAAC;AAGjD,MAAM,WAAW,gBAAgB;IAC/B,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,UAAU,CAAC,EAAE;QACX,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB,IAAI,CAAC,EAAE,MAAM,CAAC;QACd,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;KACxB,CAAC;IACF,aAAa,CAAC,EAAE,OAAO,CAAC;CACzB;AAED,MAAM,WAAW,eAAe;IAC9B,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;CAChB;AAED;;GAEG;AACH,wBAAgB,mBAAmB,CAAC,MAAM,EAAE,eAAe,GAAG;IAC5D,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;IACzC,UAAU,EAAE,OAAO,CAAC;CACrB,CA2CA;AAED;;;GAGG;AACH,wBAAsB,iBAAiB,CACrC,QAAQ,EAAE,MAAM,EAChB,OAAO,GAAE,CAAC,SAAS,EAAE,MAAM,EAAE,EAAE,WAAW,EAAE,MAAM,KAAK,OAAO,CAAC,eAAe,CAChB,EAC9D,WAAW,GAAE,CAAC,KAAK,EAAE,gBAAgB,KAAK,MACoB,GAC7D,OAAO,CAAC,eAAe,CAAC,CA6C1B;AAED;;GAEG;AACH,wBAAsB,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC,CAW1C"}

package/dist/hooks/codex.js

@@ -18,74 +18,108 @@
  */
 import { readStdin, runHookAudit } from './core.js';
 import chalk from 'chalk';
-async function main() {
-    const raw = await readStdin();
-    if (!raw) {
-        // No stdin data — nothing to audit
-        process.exit(0);
+/**
+ * Build the Codex feedback payload from audit output.
+ */
+export function formatCodexFeedback(output) {
+    if (output.violations.length === 0) {
+        return { feedback: null, isBlocking: false };
+    }
+    const criticals = output.violations.filter((v) => v.severity === 'critical');
+    if (criticals.length > 0) {
+        return {
+            feedback: {
+                decision: 'block',
+                reason: `code-auditor found ${criticals.length} critical violation(s)`,
+                violations: output.violations.map((v) => ({
+                    severity: v.severity,
+                    message: v.message,
+                    file: v.file,
+                    line: v.line,
+                    rule: v.rule,
+                    suggestion: v.suggestion || null,
+                })),
+            },
+            isBlocking: true,
+        };
+    }
+    // Non-critical only
+    const warnings = output.violations.filter((v) => v.severity === 'warning');
+    if (warnings.length > 0) {
+        return {
+            feedback: {
+                decision: 'allow',
+                warnings: warnings.map((v) => ({
+                    message: v.message,
+                    file: v.file,
+                    line: v.line,
+                    suggestion: v.suggestion || null,
+                })),
+            },
+            isBlocking: false,
+        };
+    }
+    return { feedback: null, isBlocking: false };
+}
+/**
+ * Process a Codex PostToolUse event and return the hook result.
+ * Extracted from main() for testability — tests inject a mock audit function.
+ */
+export async function processCodexEvent(rawStdin, auditFn = async (filePaths, projectRoot) => runHookAudit({ filePaths, projectRoot, failOn: 'critical' }), resolveRoot = (event) => event.cwd || process.env.CLAUDE_PROJECT_DIR || process.cwd()) {
+    const result = { exitCode: 0, stdout: '', stderr: '' };
+    if (!rawStdin) {
+        return result;
     }
     let event;
     try {
-        event = JSON.parse(raw);
+        event = JSON.parse(rawStdin);
     }
     catch {
-        console.error(chalk.red('[code-auditor codex-hook] Failed to parse stdin JSON'));
-        process.exit(0); // Degrade gracefully
+        result.stderr = chalk.red('[code-auditor codex-hook] Failed to parse stdin JSON');
+        return result;
     }
     const filePath = event.tool_input?.file_path || event.tool_input?.path;
     if (!filePath) {
-        // No file path — nothing to audit
-        process.exit(0);
+        return result;
     }
-    const projectRoot = process.cwd();
+    // Determine project root:
+    // 1. cwd from the event (native Codex — learn.chatgpt.com/docs/hooks)
+    // 2. CLAUDE_PROJECT_DIR env var (Claude Code compat mode)
+    // 3. process.cwd() fallback
+    const projectRoot = resolveRoot(event);
     try {
-        const output = await runHookAudit({
-            filePaths: [filePath],
-            projectRoot,
-            failOn: 'critical',
-        });
-        if (output.violations.length > 0) {
-            // Codex PostToolUse: exit 2 replaces tool result with feedback
-            // Write violations as JSON to stdout — Codex feeds this back to the agent
-            const criticals = output.violations.filter((v) => v.severity === 'critical');
-            if (criticals.length > 0) {
-                const feedback = {
-                    decision: 'block',
-                    reason: `code-auditor found ${criticals.length} critical violation(s)`,
-                    violations: output.violations.map((v) => ({
-                        severity: v.severity,
-                        message: v.message,
-                        file: v.file,
-                        line: v.line,
-                        rule: v.rule,
-                        suggestion: v.suggestion || null,
-                    })),
-                };
-                process.stdout.write(JSON.stringify(feedback, null, 2) + '\n');
-                process.exit(2);
-            }
-            // Non-critical violations: report but don't block
-            const warnings = output.violations.filter((v) => v.severity === 'warning');
-            if (warnings.length > 0) {
-                const advisory = {
-                    decision: 'allow',
-                    warnings: warnings.map((v) => ({
-                        message: v.message,
-                        file: v.file,
-                        line: v.line,
-                        suggestion: v.suggestion || null,
-                    })),
-                };
-                process.stdout.write(JSON.stringify(advisory, null, 2) + '\n');
+        const output = await auditFn([filePath], projectRoot);
+        const { feedback, isBlocking } = formatCodexFeedback(output);
+        if (feedback) {
+            result.stdout = JSON.stringify(feedback, null, 2) + '\n';
+            if (isBlocking) {
+                result.exitCode = 2;
             }
         }
-        process.exit(0);
     }
     catch (error) {
-        // Internal error — report and exit 0 (never wedge the agent loop on errors)
-        console.error(chalk.red(`[code-auditor codex-hook] Error: ${error instanceof Error ? error.message : String(error)}`));
-        process.exit(0);
+        result.stderr = chalk.red(`[code-auditor codex-hook] Error: ${error instanceof Error ? error.message : String(error)}`);
+        // Internal error — never wedge the agent loop
+    }
+    return result;
+}
+/**
+ * CLI entry point — reads stdin, processes, writes result, exits.
+ */
+export async function main() {
+    const raw = await readStdin();
+    const result = await processCodexEvent(raw);
+    if (result.stderr) {
+        console.error(result.stderr);
     }
+    if (result.stdout) {
+        process.stdout.write(result.stdout);
+    }
+    process.exit(result.exitCode);
+}
+// Auto-run when executed as an entry point (not imported by tests)
+// vitest sets process.env.VITEST; when set, tests call processCodexEvent directly
+if (!process.env.VITEST) {
+    main();
 }
-main();
 //# sourceMappingURL=codex.js.map

package/dist/hooks/codex.js.map

@@ -1 +1 @@
-{"version":3,"file":"codex.js","sourceRoot":"","sources":["../../src/hooks/codex.ts"],"names":[],"mappings":";AACA;;;;;;;;;;;;;;;;GAgBG;AAEH,OAAO,EAAE,SAAS,EAAE,YAAY,EAAE,MAAM,WAAW,CAAC;AACpD,OAAO,KAAK,MAAM,OAAO,CAAC;AAc1B,KAAK,UAAU,IAAI;IACjB,MAAM,GAAG,GAAG,MAAM,SAAS,EAAE,CAAC;IAE9B,IAAI,CAAC,GAAG,EAAE,CAAC;QACT,mCAAmC;QACnC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,IAAI,KAAuB,CAAC;IAC5B,IAAI,CAAC;QACH,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC1B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,sDAAsD,CAAC,CAAC,CAAC;QACjF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,qBAAqB;IACxC,CAAC;IAED,MAAM,QAAQ,GAAG,KAAM,CAAC,UAAU,EAAE,SAAS,IAAI,KAAM,CAAC,UAAU,EAAE,IAAI,CAAC;IACzE,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,kCAAkC;QAClC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,MAAM,WAAW,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC;IAElC,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC;YAChC,SAAS,EAAE,CAAC,QAAQ,CAAC;YACrB,WAAW;YACX,MAAM,EAAE,UAAU;SACnB,CAAC,CAAC;QAEH,IAAI,MAAM,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACjC,+DAA+D;YAC/D,0EAA0E;YAC1E,MAAM,SAAS,GAAG,MAAM,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,UAAU,CAAC,CAAC;YAE7E,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACzB,MAAM,QAAQ,GAAG;oBACf,QAAQ,EAAE,OAAO;oBACjB,MAAM,EAAE,sBAAsB,SAAS,CAAC,MAAM,wBAAwB;oBACtE,UAAU,EAAE,MAAM,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;wBACxC,QAAQ,EAAE,CAAC,CAAC,QAAQ;wBACpB,OAAO,EAAE,CAAC,CAAC,OAAO;wBAClB,IAAI,EAAE,CAAC,CAAC,IAAI;wBACZ,IAAI,EAAE,CAAC,CAAC,IAAI;wBACZ,IAAI,EAAE,CAAC,CAAC,IAAI;wBACZ,UAAU,EAAE,CAAC,CAAC,UAAU,IAAI,IAAI;qBACjC,CAAC,CAAC;iBACJ,CAAC;gBACF,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;gBAC/D,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAClB,CAAC;YAED,kDAAkD;YAClD,MAAM,QAAQ,GAAG,MAAM,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC;YAC3E,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACxB,MAAM,QAAQ,GAAG;oBACf,QAAQ,EAAE,OAAO;oBACjB,QAAQ,EAAE,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;wBAC7B,OAAO,EAAE,CAAC,CAAC,OAAO;wBAClB,IAAI,EAAE,CAAC,CAAC,IAAI;wBACZ,IAAI,EAAE,CAAC,CAAC,IAAI;wBACZ,UAAU,EAAE,CAAC,CAAC,UAAU,IAAI,IAAI;qBACjC,CAAC,CAAC;iBACJ,CAAC;gBACF,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;YACjE,CAAC;QACH,CAAC;QAED,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,4EAA4E;QAC5E,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,oCAAoC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC;QACvH,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;AACH,CAAC;AAED,IAAI,EAAE,CAAC"}
+{"version":3,"file":"codex.js","sourceRoot":"","sources":["../../src/hooks/codex.ts"],"names":[],"mappings":";AACA;;;;;;;;;;;;;;;;GAgBG;AAEH,OAAO,EAAE,SAAS,EAAE,YAAY,EAAE,MAAM,WAAW,CAAC;AAEpD,OAAO,KAAK,MAAM,OAAO,CAAC;AAuB1B;;GAEG;AACH,MAAM,UAAU,mBAAmB,CAAC,MAAuB;IAIzD,IAAI,MAAM,CAAC,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACnC,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC;IAC/C,CAAC;IAED,MAAM,SAAS,GAAG,MAAM,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,UAAU,CAAC,CAAC;IAE7E,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACzB,OAAO;YACL,QAAQ,EAAE;gBACR,QAAQ,EAAE,OAAO;gBACjB,MAAM,EAAE,sBAAsB,SAAS,CAAC,MAAM,wBAAwB;gBACtE,UAAU,EAAE,MAAM,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;oBACxC,QAAQ,EAAE,CAAC,CAAC,QAAQ;oBACpB,OAAO,EAAE,CAAC,CAAC,OAAO;oBAClB,IAAI,EAAE,CAAC,CAAC,IAAI;oBACZ,IAAI,EAAE,CAAC,CAAC,IAAI;oBACZ,IAAI,EAAE,CAAC,CAAC,IAAI;oBACZ,UAAU,EAAE,CAAC,CAAC,UAAU,IAAI,IAAI;iBACjC,CAAC,CAAC;aACJ;YACD,UAAU,EAAE,IAAI;SACjB,CAAC;IACJ,CAAC;IAED,oBAAoB;IACpB,MAAM,QAAQ,GAAG,MAAM,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC;IAC3E,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACxB,OAAO;YACL,QAAQ,EAAE;gBACR,QAAQ,EAAE,OAAO;gBACjB,QAAQ,EAAE,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;oBAC7B,OAAO,EAAE,CAAC,CAAC,OAAO;oBAClB,IAAI,EAAE,CAAC,CAAC,IAAI;oBACZ,IAAI,EAAE,CAAC,CAAC,IAAI;oBACZ,UAAU,EAAE,CAAC,CAAC,UAAU,IAAI,IAAI;iBACjC,CAAC,CAAC;aACJ;YACD,UAAU,EAAE,KAAK;SAClB,CAAC;IACJ,CAAC;IAED,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC;AAC/C,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,QAAgB,EAChB,OAAO,GAA2E,KAAK,EAAE,SAAS,EAAE,WAAW,EAAE,EAAE,CACjH,YAAY,CAAC,EAAE,SAAS,EAAE,WAAW,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC,EAC9D,WAAW,GAAwC,CAAC,KAAK,EAAE,EAAE,CAC3D,KAAK,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,CAAC,kBAAkB,IAAI,OAAO,CAAC,GAAG,EAAE;IAE9D,MAAM,MAAM,GAAoB,EAAE,QAAQ,EAAE,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;IAExE,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,IAAI,KAAuB,CAAC;IAC5B,IAAI,CAAC;QACH,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;IAC/B,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,CAAC,MAAM,GAAG,KAAK,CAAC,GAAG,CAAC,sDAAsD,CAAC,CAAC;QAClF,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,MAAM,QAAQ,GAAG,KAAK,CAAC,UAAU,EAAE,SAAS,IAAI,KAAK,CAAC,UAAU,EAAE,IAAI,CAAC;IACvE,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,0BAA0B;IAC1B,sEAAsE;IACtE,0DAA0D;IAC1D,4BAA4B;IAC5B,MAAM,WAAW,GAAG,WAAW,CAAC,KAAK,CAAC,CAAC;IAEvC,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,CAAC,QAAQ,CAAC,EAAE,WAAW,CAAC,CAAC;QAEtD,MAAM,EAAE,QAAQ,EAAE,UAAU,EAAE,GAAG,mBAAmB,CAAC,MAAM,CAAC,CAAC;QAE7D,IAAI,QAAQ,EAAE,CAAC;YACb,MAAM,CAAC,MAAM,GAAG,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC;YACzD,IAAI,UAAU,EAAE,CAAC;gBACf,MAAM,CAAC,QAAQ,GAAG,CAAC,CAAC;YACtB,CAAC;QACH,CAAC;IACH,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,CAAC,MAAM,GAAG,KAAK,CAAC,GAAG,CACvB,oCAAoC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAC7F,CAAC;QACF,8CAA8C;IAChD,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,IAAI;IACxB,MAAM,GAAG,GAAG,MAAM,SAAS,EAAE,CAAC;IAC9B,MAAM,MAAM,GAAG,MAAM,iBAAiB,CAAC,GAAG,CAAC,CAAC;IAE5C,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC;QAClB,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAC/B,CAAC;IACD,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC;QAClB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IACtC,CAAC;IACD,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;AAChC,CAAC;AAED,mEAAmE;AACnE,kFAAkF;AAClF,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,CAAC;IACxB,IAAI,EAAE,CAAC;AACT,CAAC"}

package/dist/hotspots/hotspotScorer.d.ts

@@ -0,0 +1,20 @@
+/**
+ * Hotspot Scorer — Spec 13 R2 + R3.
+ *
+ * Computes hotspot scores as churn-percentile × complexity-percentile for
+ * every file and function. Scores are written into the hotspot_scores table
+ * and recomputed on every sync (idempotent).
+ *
+ * Bus-factor risk (R3): files and functions in the top quartile of hotspot
+ * scores whose dominant_author_share ≥ 0.9 are flagged.
+ */
+import type { HotspotEntry } from '../types.js';
+/**
+ * Compute hotspot scores and write them into the hotspot_scores table.
+ * Also detects bus-factor risks.
+ *
+ * @param rawDb  The underlying better-sqlite3 database handle.
+ * @returns  Array of HotspotEntry for external use (CLI / reporting).
+ */
+export declare function computeHotspots(rawDb: any): HotspotEntry[];
+//# sourceMappingURL=hotspotScorer.d.ts.map

package/dist/hotspots/hotspotScorer.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"hotspotScorer.d.ts","sourceRoot":"","sources":["../../src/hotspots/hotspotScorer.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAMhD;;;;;;GAMG;AACH,wBAAgB,eAAe,CAAC,KAAK,EAAE,GAAG,GAAG,YAAY,EAAE,CA0K1D"}