cognium-dev 3.44.0 → 3.46.0

package/dist/cli.js

@@ -3349,6 +3349,40 @@ async function parse(code, language) {
   }
   return tree;
 }
+function extractParseStatus(tree) {
+  const root = tree.rootNode;
+  if (!root.hasError) {
+    return { success: true, has_errors: false, error_count: 0, error_locations: [] };
+  }
+  const MAX_LOCATIONS = 50;
+  const locations = [];
+  let errorCount = 0;
+  const stack = [root];
+  while (stack.length > 0) {
+    const node = stack.pop();
+    if (node.type === "ERROR" || node.isMissing) {
+      errorCount++;
+      if (locations.length < MAX_LOCATIONS) {
+        locations.push({
+          line: node.startPosition.row + 1,
+          column: node.startPosition.column
+        });
+      }
+    }
+    for (let i2 = 0;i2 < node.childCount; i2++) {
+      const child = node.child(i2);
+      if (child && (child.hasError || child.isMissing)) {
+        stack.push(child);
+      }
+    }
+  }
+  return {
+    success: false,
+    has_errors: true,
+    error_count: errorCount,
+    error_locations: locations
+  };
+}
 function disposeTree(tree) {
   if (!tree)
     return;
@@ -27509,6 +27543,15 @@ async function analyze(code, filePath, language, options = {}) {
   const tree = await parse(code, language);
   try {
     logger.trace("Parsed AST", { rootNodeType: tree.rootNode.type });
+    const parseStatus = extractParseStatus(tree);
+    if (parseStatus.has_errors) {
+      logger.warn("Partial parse — IR may be incomplete", {
+        filePath,
+        language,
+        errorCount: parseStatus.error_count,
+        firstErrorLine: parseStatus.error_locations[0]?.line
+      });
+    }
     const nodeCache = collectAllNodes(tree.rootNode, getNodeTypesForLanguage(language));
     const meta = extractMeta(code, tree, filePath, language);
     const types = extractTypes(tree, nodeCache, language);
@@ -27645,7 +27688,8 @@ async function analyze(code, filePath, language, options = {}) {
       enriched,
       findings: findings.length > 0 ? findings : undefined,
       metrics: { file: filePath, metrics: metricValues },
-      runtime_registrations: runtimeRegistrations.length > 0 ? runtimeRegistrations : undefined
+      runtime_registrations: runtimeRegistrations.length > 0 ? runtimeRegistrations : undefined,
+      parse_status: parseStatus
     };
   } finally {
     disposeTree(tree);
@@ -27656,6 +27700,15 @@ async function analyzeHtmlFile(code, filePath, options) {
   const tree = await parse(code, "html");
   try {
     const meta = extractMeta(code, tree, filePath, "html");
+    const htmlParseStatus = extractParseStatus(tree);
+    if (htmlParseStatus.has_errors) {
+      logger.warn("Partial parse — IR may be incomplete", {
+        filePath,
+        language: "html",
+        errorCount: htmlParseStatus.error_count,
+        firstErrorLine: htmlParseStatus.error_locations[0]?.line
+      });
+    }
     const { scriptBlocks, eventHandlers } = extractHtmlContent(tree.rootNode);
     logger.debug("HTML extraction", {
       filePath,
@@ -27695,6 +27748,7 @@ async function analyzeHtmlFile(code, filePath, options) {
     }
     const attributeFindings = runHtmlAttributeSecurityChecks(tree.rootNode, filePath);
     const result = mergeHtmlResults(meta, scriptResults, attributeFindings);
+    result.parse_status = htmlParseStatus;
     logger.debug("HTML analysis complete", {
       filePath,
       scriptBlocks: scriptResults.length,
@@ -27794,7 +27848,7 @@ var colors = {
 };
 
 // src/version.ts
-var version = "3.44.0";
+var version = "3.46.0";
 
 // src/formatters.ts
 var SINK_SEVERITY = {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "cognium-dev",
-  "version": "3.44.0",
+  "version": "3.46.0",
   "description": "Static Application Security Testing CLI for detecting security vulnerabilities via taint tracking",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",
@@ -65,7 +65,7 @@
     "registry": "https://registry.npmjs.org/"
   },
   "dependencies": {
-    "circle-ir": "^3.44.0"
+    "circle-ir": "^3.46.0"
   },
   "devDependencies": {
     "@types/node": "^25.5.0",