code-auditor-mcp 5.0.2 → 5.2.0

package/dist/pipelineAdapters.d.ts

@@ -13,52 +13,9 @@
  *     analyzer.analyze([]) with rawDb injected through config
  *   - Invariants: Stage 3 reducer — receives full file list, runs rule engine
  */
-import type { Stage2Visitor, Stage3Reducer, Stage4Reducer, Violation, TestCoverageReport, DeadCluster } from './types.js';
-import type { SizeSample } from './analyzers/universal/UniversalSOLIDAnalyzer.js';
+import type { Stage2Visitor, Stage3Reducer } from './types.js';
 import type { AST } from './languages/types.js';
 import type { CrossLanguageEntity } from './types/crossLanguage.js';
-export interface SolidVisitorBundle {
-    visitor: Stage2Visitor;
-    /** Spec 60 R2 — extract the raw size readings accumulated by the SOLID analyzer. */
-    getSizeSamples: () => Promise<SizeSample[]>;
-}
-/**
- * Create the SOLID stage-2 visitor, which lazily loads the SOLID analyzer and
- * also exposes its accumulated size samples.
- *
- * @returns The SOLID visitor bundle.
- */
-export declare function createSolidVisitor(): SolidVisitorBundle;
-/**
- * Stage-4 derived reducer for `missing-org-filter`. It joins the data-access
- * visitor's per-query facts (resolved tables + org-filter presence + query-site
- * location) against the tenant tiers resolved from config + the schema
- * reducer's corpus-wide DDL column catalog. Moving the rule here (out of the
- * Stage-2 analyzer) is the fix for the Amendment B defect: the firing predicate
- * needed the DDL tier only Stage 3 produces, but the Stage-2 analyzer could only
- * read config tiers — so a DDL-declared multi-tenant codebase was un-suppressed
- * without ever firing, and reported `clean` on a real leak.
- *
- * Firing and applicability both derive from {@link buildOrgFilterTierSet}, so
- * they read the identical tier set (Tier 1 config / Tier 2 schema / Tier 3 DDL).
- *
- * @returns The data-access org-filter stage-4 reducer.
- */
-export declare function createOrgFilterReducer(): Stage4Reducer;
-/**
- * Create the secrets stage-2 visitor, which detects hardcoded credentials,
- * API keys, and tokens.
- *
- * @returns The secrets stage-2 visitor.
- */
-export declare function createSecretsVisitor(): Stage2Visitor;
-/**
- * Create the security stage-2 visitor, which detects command injection,
- * dynamic require of project paths, and unescaped HTML interpolation.
- *
- * @returns The security stage-2 visitor.
- */
-export declare function createSecurityVisitor(): Stage2Visitor;
 /**
  * A single function/method/component row destined for the `functions` index
  * table. Built by `createFunctionIndexVisitor` from an ASTNode; the inline
@@ -83,21 +40,6 @@ export interface FunctionIndexEntry {
  * @returns The function-index stage-2 visitor.
  */
 export declare function createFunctionIndexVisitor(): Stage2Visitor;
-export interface ReactVisitorBundle {
-    visitor: Stage2Visitor;
-    /**
-     * Run cross-component checks after all files have been visited.
-     * Must be called after stage 2 completes.
-     */
-    finalizeCrossComponent: (config: any) => Promise<Violation[]>;
-}
-/**
- * Create the React stage-2 visitor, which scans React components and exposes
- * cross-component checks to run after stage 2 completes.
- *
- * @returns The React visitor bundle.
- */
-export declare function createReactVisitor(): ReactVisitorBundle;
 /**
  * Styles CSS visitor — extracts declarations, tokens, and class usage from
  * tree-sitter-css and tree-sitter-scss parsed ASTs. Replaces the regex-based
@@ -133,32 +75,6 @@ export declare function createStylesSourceVisitor(): Stage2Visitor;
  * @returns The styles stage-3 reducer.
  */
 export declare function createStylesReducer(): Stage3Reducer;
-/**
- * Conventions reducer — queries conventions table and flags deviations
- * (usage-pair, import-form, error-handling, export-shape, naming).
- * Uses analyzer.analyze([]) with rawDb injected.
- *
- * @returns The conventions stage-3 reducer.
- */
-export declare function createConventionsReducer(): Stage3Reducer;
-/**
- * Cross-domain reducer — runs written-never-read, read-never-written,
- * transaction-boundary risk, no-validator-reachable, and uncovered-risk detectors.
- * Uses analyzer.analyze([]) with rawDb injected.
- *
- * @returns The cross-domain stage-4 reducer.
- */
-export declare function createCrossDomainReducer(): Stage4Reducer;
-interface ClFileInfo {
-    imports: string[];
-    hasExports: boolean;
-    /** Dynamic `import()`/`require()` calls whose specifier is computed (not a
-     *  static string) and therefore cannot be resolved into an import edge. */
-    unresolvedDynamicImports: Array<{
-        line: number;
-        expression: string;
-    }>;
-}
 /**
  * Spec 68 §3.2 — the `cross-language-entities` FileProcessor extraction.
  *
@@ -175,62 +91,6 @@ interface ClFileInfo {
  * @returns The cross-language entities extracted from the file.
  */
 export declare function extractCrossLanguageEntities(ast: AST, filePath: string, sourceCode: string, lang: string): CrossLanguageEntity[];
-/**
- * Create the cross-language-entities stage-2 visitor, which extracts entities
- * and import/export info for the cross-language analyzers.
- *
- * @returns The cross-language-entities stage-2 visitor.
- */
-export declare function createCrossLanguageEntityVisitor(): Stage2Visitor;
-/**
- * Spec 60 R1 — classify every non-test source module as `tested`,
- * `untested-live`, or `untested-dead` off the file-level import edges
- * (`importersOf`), not `function_dependencies`.
- *
- * A module is `tested` when a test file imports it *directly* (the edge set is
- * alias-aware — built by `clResolveImport` through `classifyImportSpecifier`).
- * `untested-dead` is the *post*-exception dead bucket: a file imported by
- * nothing *and* not a framework entry point. `deadPreException` is the
- * empty-importers count before the entry-point exception, so the drop
- * (`deadPreException - untestedDead`) attributes the entry points exempted.
- *
- * @param fileFacts - Per-file import/export info keyed by project-relative path.
- * @param importersOf - Map of file to the set of files that import it.
- * @param packageEntrySet - Framework/package entry points exempted from the dead bucket.
- * @returns The test-coverage classification report.
- */
-export declare function classifyTestCoverage(fileFacts: Map<string, ClFileInfo>, importersOf: Map<string, Set<string>>, packageEntrySet: ReadonlySet<string>): TestCoverageReport;
-/**
- * Spec 60 R3 — group unreferenced modules by basename, surfacing the pattern of
- * the same file name appearing in several sibling directories (e.g. two
- * `ErrorState.tsx`, three `services.ts` under separate `reports` folders). Only
- * basenames with ≥2 files become clusters; a singleton dead file is not a duplicate.
- *
- * @param deadFiles - Unreferenced module paths to cluster by basename.
- * @returns Dead-module clusters (only basenames with two or more files).
- */
-export declare function clusterDeadModules(deadFiles: string[]): DeadCluster[];
-/**
- * Create the schema-validator stage-4 reducer, which compares schemas across
- * language boundaries (TS interfaces vs Go structs).
- *
- * @returns The schema-validator stage-4 reducer.
- */
-export declare function createSchemaValidatorReducer(): Stage4Reducer;
-/**
- * Create the api-contract stage-4 reducer, which compares frontend API calls
- * against backend endpoints across languages.
- *
- * @returns The api-contract stage-4 reducer.
- */
-export declare function createAPIContractReducer(): Stage4Reducer;
-/**
- * Create the dependency-graph stage-4 reducer, which detects dependency cycles,
- * hubs, and orphaned nodes.
- *
- * @returns The dependency-graph stage-4 reducer.
- */
-export declare function createDependencyGraphReducer(): Stage4Reducer;
 /**
  * Invariants reducer — enforces user-defined invariant rules from .codeauditor.json.
  * Receives the full file list via context.files and runs the rule engine across
@@ -239,14 +99,6 @@ export declare function createDependencyGraphReducer(): Stage4Reducer;
  * @returns The invariants stage-3 reducer.
  */
 export declare function createInvariantsReducer(): Stage3Reducer;
-/**
- * Schema SQL visitor (.sql files) — extracts ordered DDL operations for the
- * Stage 3 reducer to replay into the known-tables catalog. Emits the parsed
- * ops, not raw source, so the reducer retains only state transitions.
- *
- * @returns The schema-sql stage-2 visitor.
- */
-export declare function createSchemaSqlVisitor(): Stage2Visitor;
 /**
  * Schema code visitor (.ts/.tsx/.js/.jsx) — per-file analysis for naming conventions,
  * query patterns, SQL injection, table references, and ORM table extraction.
@@ -254,26 +106,4 @@ export declare function createSchemaSqlVisitor(): Stage2Visitor;
  * @returns The schema-code stage-2 visitor.
  */
 export declare function createSchemaCodeVisitor(): Stage2Visitor;
-/**
- * Schema Prisma visitor (.prisma files) — extracts model names for known-table catalog.
- *
- * @returns The schema-prisma stage-2 visitor.
- */
-export declare function createSchemaPrismaVisitor(): Stage2Visitor;
-/**
- * Schema JSON visitor (.json files) — parses JSON for the Stage 3 reducer to validate.
- *
- * @returns The schema-json stage-2 visitor.
- */
-export declare function createSchemaJsonVisitor(): Stage2Visitor;
-/**
- * Schema Stage 3 reducer — cross-file unknown-table detection and JSON schema validation.
- *
- * Consumes facts from schema-sql, schema-code, schema-prisma, and schema-json visitors.
- * Builds the complete known-tables catalog and checks all table references against it.
- *
- * @returns The schema stage-3 reducer.
- */
-export declare function createSchemaReducer(): Stage3Reducer;
-export {};
 //# sourceMappingURL=pipelineAdapters.d.ts.map

package/dist/pipelineAdapters.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"pipelineAdapters.d.ts","sourceRoot":"","sources":["../src/pipelineAdapters.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAKH,OAAO,KAAK,EAGV,aAAa,EACb,aAAa,EACb,aAAa,EACb,SAAS,EAIT,kBAAkB,EAClB,WAAW,EACZ,MAAM,YAAY,CAAC;AACpB,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,iDAAiD,CAAC;AAClF,OAAO,KAAK,EAAE,GAAG,EAA4B,MAAM,sBAAsB,CAAC;AA2C1E,OAAO,KAAK,EAAE,mBAAmB,EAAkB,MAAM,0BAA0B,CAAC;AA+FpF,MAAM,WAAW,kBAAkB;IACjC,OAAO,EAAE,aAAa,CAAC;IACvB,oFAAoF;IACpF,cAAc,EAAE,MAAM,OAAO,CAAC,UAAU,EAAE,CAAC,CAAC;CAC7C;AAED;;;;;GAKG;AACH,wBAAgB,kBAAkB,IAAI,kBAAkB,CASvD;AAID;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,sBAAsB,IAAI,aAAa,CAsEtD;AAID;;;;;GAKG;AACH,wBAAgB,oBAAoB,IAAI,aAAa,CAWpD;AAID;;;;;GAKG;AACH,wBAAgB,qBAAqB,IAAI,aAAa,CA+BrD;AASD;;;;;GAKG;AACH,MAAM,WAAW,kBAAkB;IACjC,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,EAAE,MAAM,CAAC;IACnB,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,UAAU,EAAE,OAAO,CAAC;IACpB,UAAU,EAAE,MAAM,CAAC;IACnB,IAAI,EAAE,MAAM,GAAG,SAAS,CAAC;IACzB,aAAa,EAAE,MAAM,EAAE,CAAC;CACzB;AAsTD;;;;;GAKG;AACH,wBAAgB,0BAA0B,IAAI,aAAa,CA+G1D;AAID,MAAM,WAAW,kBAAkB;IACjC,OAAO,EAAE,aAAa,CAAC;IACvB;;;OAGG;IACH,sBAAsB,EAAE,CAAC,MAAM,EAAE,GAAG,KAAK,OAAO,CAAC,SAAS,EAAE,CAAC,CAAC;CAC/D;AAED;;;;;GAKG;AACH,wBAAgB,kBAAkB,IAAI,kBAAkB,CAuFvD;AAMD;;;;;;GAMG;AACH,wBAAgB,sBAAsB,IAAI,aAAa,CA6BtD;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAgB,yBAAyB,IAAI,aAAa,CA8CzD;AA6ID;;;;;;;;;;GAUG;AACH,wBAAgB,mBAAmB,IAAI,aAAa,CAwJnD;AAyBD;;;;;;GAMG;AACH,wBAAgB,wBAAwB,IAAI,aAAa,CAgDxD;AAID;;;;;;GAMG;AACH,wBAAgB,wBAAwB,IAAI,aAAa,CAgCxD;AAqKD,UAAU,UAAU;IAClB,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,UAAU,EAAE,OAAO,CAAC;IACpB;+EAC2E;IAC3E,wBAAwB,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,UAAU,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;CACvE;AAuWD;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,4BAA4B,CAC1C,GAAG,EAAE,GAAG,EACR,QAAQ,EAAE,MAAM,EAChB,UAAU,EAAE,MAAM,EAClB,IAAI,EAAE,MAAM,GACX,mBAAmB,EAAE,CASvB;AAED;;;;;GAKG;AACH,wBAAgB,gCAAgC,IAAI,aAAa,CAoChE;AAiID;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAgB,oBAAoB,CAClC,SAAS,EAAE,GAAG,CAAC,MAAM,EAAE,UAAU,CAAC,EAClC,WAAW,EAAE,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC,EACrC,eAAe,EAAE,WAAW,CAAC,MAAM,CAAC,GACnC,kBAAkB,CA0DpB;AAED;;;;;;;;GAQG;AACH,wBAAgB,kBAAkB,CAAC,SAAS,EAAE,MAAM,EAAE,GAAG,WAAW,EAAE,CAkBrE;AAuED;;;;;GAKG;AACH,wBAAgB,4BAA4B,IAAI,aAAa,CAqD5D;AAID;;;;;GAKG;AACH,wBAAgB,wBAAwB,IAAI,aAAa,CAiCxD;AAiCD;;;;;GAKG;AACH,wBAAgB,4BAA4B,IAAI,aAAa,CAkM5D;AAID;;;;;;GAMG;AACH,wBAAgB,uBAAuB,IAAI,aAAa,CAkFvD;AAaD;;;;;;GAMG;AACH,wBAAgB,sBAAsB,IAAI,aAAa,CA8BtD;AA2KD;;;;;GAKG;AACH,wBAAgB,uBAAuB,IAAI,aAAa,CAWvD;AAED;;;;GAIG;AACH,wBAAgB,yBAAyB,IAAI,aAAa,CAoCzD;AAED;;;;GAIG;AACH,wBAAgB,uBAAuB,IAAI,aAAa,CAmBvD;AA2VD;;;;;;;GAOG;AACH,wBAAgB,mBAAmB,IAAI,aAAa,CAsDnD"}
+{"version":3,"file":"pipelineAdapters.d.ts","sourceRoot":"","sources":["../src/pipelineAdapters.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAKH,OAAO,KAAK,EAGV,aAAa,EACb,aAAa,EAMd,MAAM,YAAY,CAAC;AACpB,OAAO,KAAK,EAAE,GAAG,EAA4B,MAAM,sBAAsB,CAAC;AAsC1E,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,0BAA0B,CAAC;AAkCpE;;;;;GAKG;AACH,MAAM,WAAW,kBAAkB;IACjC,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,EAAE,MAAM,CAAC;IACnB,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,UAAU,EAAE,OAAO,CAAC;IACpB,UAAU,EAAE,MAAM,CAAC;IACnB,IAAI,EAAE,MAAM,GAAG,SAAS,CAAC;IACzB,aAAa,EAAE,MAAM,EAAE,CAAC;CACzB;AAsTD;;;;;GAKG;AACH,wBAAgB,0BAA0B,IAAI,aAAa,CA+G1D;AAMD;;;;;;GAMG;AACH,wBAAgB,sBAAsB,IAAI,aAAa,CA6BtD;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAgB,yBAAyB,IAAI,aAAa,CAmDzD;AA+ID;;;;;;;;;;GAUG;AACH,wBAAgB,mBAAmB,IAAI,aAAa,CAsJnD;AAicD;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,4BAA4B,CAC1C,GAAG,EAAE,GAAG,EACR,QAAQ,EAAE,MAAM,EAChB,UAAU,EAAE,MAAM,EAClB,IAAI,EAAE,MAAM,GACX,mBAAmB,EAAE,CASvB;AAID;;;;;;GAMG;AACH,wBAAgB,uBAAuB,IAAI,aAAa,CAkFvD;AAsLD;;;;;GAKG;AACH,wBAAgB,uBAAuB,IAAI,aAAa,CAWvD"}