flowlint 0.3.2 → 0.3.4

package/dist/packages/observability/metrics.d.ts

@@ -0,0 +1,119 @@
+/**
+ * Prometheus Metrics Definitions for FlowLint
+ *
+ * This module defines all custom Prometheus metrics for FlowLint observability.
+ * Metrics follow Prometheus naming conventions and are designed for low cardinality.
+ *
+ * @module packages/observability/metrics
+ */
+import { Registry, Counter, Histogram, Gauge } from 'prom-client';
+export declare const register: Registry<"text/plain; version=0.0.4; charset=utf-8">;
+/**
+ * Metric 1: Webhook Counter
+ *
+ * Tracks total webhooks received from GitHub, labeled by event type and action.
+ *
+ * Example usage:
+ *   webhookCounter.labels('pull_request', 'opened').inc();
+ */
+export declare const webhookCounter: Counter<"event_type" | "action">;
+/**
+ * Metric 2: Jobs Queued Counter
+ *
+ * Tracks total review jobs added to BullMQ queue.
+ *
+ * Example usage:
+ *   jobsQueuedCounter.labels('acme-corp/api-gateway').inc();
+ */
+export declare const jobsQueuedCounter: Counter<"repo">;
+/**
+ * Metric 3: Jobs Completed Counter
+ *
+ * Tracks total review jobs completed (success or failure).
+ *
+ * Example usage:
+ *   jobsCompletedCounter.labels('success', 'acme-corp/api-gateway').inc();
+ */
+export declare const jobsCompletedCounter: Counter<"repo" | "status">;
+/**
+ * Metric 4: Job Duration Histogram
+ *
+ * Distribution of job processing time in seconds.
+ * Buckets optimized for typical workflow review times (0.1s to 120s).
+ *
+ * Example usage:
+ *   const timer = jobDurationHistogram.startTimer({ repo: 'acme-corp/api-gateway' });
+ *   // ... process job
+ *   timer(); // Records duration
+ */
+export declare const jobDurationHistogram: Histogram<"repo">;
+/**
+ * Metric 5: Queue Depth Gauge
+ *
+ * Current number of jobs in queue by state.
+ * Updated periodically by collector (every 10 seconds).
+ *
+ * Example usage:
+ *   queueDepthGauge.set({ state: 'waiting' }, 10);
+ */
+export declare const queueDepthGauge: Gauge<"state">;
+/**
+ * Metric 6: GitHub API Calls Counter
+ *
+ * Tracks GitHub API calls made by FlowLint, labeled by method and status.
+ *
+ * Example usage:
+ *   githubApiCallsCounter.labels('GET', '200', '/repos/:owner/:repo/pulls/:number/files').inc();
+ */
+export declare const githubApiCallsCounter: Counter<"status" | "method" | "endpoint">;
+/**
+ * Metric 7: Findings Generated Counter
+ *
+ * Tracks lint findings generated, labeled by rule and severity.
+ *
+ * Example usage:
+ *   findingsGeneratedCounter.labels('rate_limit_retry', 'must').inc();
+ */
+export declare const findingsGeneratedCounter: Counter<"rule" | "severity">;
+/**
+ * Metric 8: Redis Operations Counter (Optional)
+ *
+ * Tracks Redis operations performed by BullMQ.
+ *
+ * Example usage:
+ *   redisOpsCounter.labels('zadd', 'success').inc();
+ */
+export declare const redisOpsCounter: Counter<"status" | "operation">;
+/**
+ * HTTP Request Duration Histogram
+ *
+ * Automatically populated by metricsMiddleware.
+ * Tracks HTTP request latency by method, route, and status.
+ */
+export declare const httpRequestDuration: Histogram<"status" | "method" | "route">;
+/**
+ * Get all metrics in Prometheus exposition format
+ *
+ * @returns Prometheus-formatted metrics string
+ */
+export declare function getMetrics(): Promise<string>;
+/**
+ * Get metrics content type header
+ *
+ * @returns Prometheus content type string
+ */
+export declare function getContentType(): string;
+/**
+ * Clear all metrics (useful for testing)
+ *
+ * WARNING: This removes all metrics from the registry.
+ * Only use in test environments.
+ */
+export declare function clearMetrics(): void;
+/**
+ * Get single metric by name (for testing)
+ *
+ * @param name - Metric name
+ * @returns Metric instance or undefined
+ */
+export declare function getMetric(name: string): import("prom-client").Metric<string> | undefined;

package/dist/packages/observability/metrics.js

@@ -0,0 +1,194 @@
+"use strict";
+/**
+ * Prometheus Metrics Definitions for FlowLint
+ *
+ * This module defines all custom Prometheus metrics for FlowLint observability.
+ * Metrics follow Prometheus naming conventions and are designed for low cardinality.
+ *
+ * @module packages/observability/metrics
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.httpRequestDuration = exports.redisOpsCounter = exports.findingsGeneratedCounter = exports.githubApiCallsCounter = exports.queueDepthGauge = exports.jobDurationHistogram = exports.jobsCompletedCounter = exports.jobsQueuedCounter = exports.webhookCounter = exports.register = void 0;
+exports.getMetrics = getMetrics;
+exports.getContentType = getContentType;
+exports.clearMetrics = clearMetrics;
+exports.getMetric = getMetric;
+const prom_client_1 = require("prom-client");
+// Create dedicated registry for FlowLint metrics
+exports.register = new prom_client_1.Registry();
+// Enable default process and Node.js metrics
+(0, prom_client_1.collectDefaultMetrics)({ register: exports.register });
+// ============================================================================
+// Custom Application Metrics
+// ============================================================================
+/**
+ * Metric 1: Webhook Counter
+ *
+ * Tracks total webhooks received from GitHub, labeled by event type and action.
+ *
+ * Example usage:
+ *   webhookCounter.labels('pull_request', 'opened').inc();
+ */
+exports.webhookCounter = new prom_client_1.Counter({
+    name: 'flowlint_webhook_received_total',
+    help: 'Total number of webhooks received from GitHub',
+    labelNames: ['event_type', 'action'],
+    registers: [exports.register]
+});
+/**
+ * Metric 2: Jobs Queued Counter
+ *
+ * Tracks total review jobs added to BullMQ queue.
+ *
+ * Example usage:
+ *   jobsQueuedCounter.labels('acme-corp/api-gateway').inc();
+ */
+exports.jobsQueuedCounter = new prom_client_1.Counter({
+    name: 'flowlint_jobs_queued_total',
+    help: 'Total number of review jobs queued for processing',
+    labelNames: ['repo'],
+    registers: [exports.register]
+});
+/**
+ * Metric 3: Jobs Completed Counter
+ *
+ * Tracks total review jobs completed (success or failure).
+ *
+ * Example usage:
+ *   jobsCompletedCounter.labels('success', 'acme-corp/api-gateway').inc();
+ */
+exports.jobsCompletedCounter = new prom_client_1.Counter({
+    name: 'flowlint_jobs_completed_total',
+    help: 'Total number of review jobs completed',
+    labelNames: ['status', 'repo'],
+    registers: [exports.register]
+});
+/**
+ * Metric 4: Job Duration Histogram
+ *
+ * Distribution of job processing time in seconds.
+ * Buckets optimized for typical workflow review times (0.1s to 120s).
+ *
+ * Example usage:
+ *   const timer = jobDurationHistogram.startTimer({ repo: 'acme-corp/api-gateway' });
+ *   // ... process job
+ *   timer(); // Records duration
+ */
+exports.jobDurationHistogram = new prom_client_1.Histogram({
+    name: 'flowlint_job_duration_seconds',
+    help: 'Duration of job processing in seconds',
+    labelNames: ['repo'],
+    buckets: [0.1, 0.5, 1, 2, 5, 10, 30, 60, 120],
+    registers: [exports.register]
+});
+/**
+ * Metric 5: Queue Depth Gauge
+ *
+ * Current number of jobs in queue by state.
+ * Updated periodically by collector (every 10 seconds).
+ *
+ * Example usage:
+ *   queueDepthGauge.set({ state: 'waiting' }, 10);
+ */
+exports.queueDepthGauge = new prom_client_1.Gauge({
+    name: 'flowlint_queue_depth',
+    help: 'Current number of jobs in queue by state',
+    labelNames: ['state'],
+    registers: [exports.register]
+});
+/**
+ * Metric 6: GitHub API Calls Counter
+ *
+ * Tracks GitHub API calls made by FlowLint, labeled by method and status.
+ *
+ * Example usage:
+ *   githubApiCallsCounter.labels('GET', '200', '/repos/:owner/:repo/pulls/:number/files').inc();
+ */
+exports.githubApiCallsCounter = new prom_client_1.Counter({
+    name: 'flowlint_github_api_calls_total',
+    help: 'Total GitHub API calls made by FlowLint',
+    labelNames: ['method', 'status', 'endpoint'],
+    registers: [exports.register]
+});
+/**
+ * Metric 7: Findings Generated Counter
+ *
+ * Tracks lint findings generated, labeled by rule and severity.
+ *
+ * Example usage:
+ *   findingsGeneratedCounter.labels('rate_limit_retry', 'must').inc();
+ */
+exports.findingsGeneratedCounter = new prom_client_1.Counter({
+    name: 'flowlint_findings_generated_total',
+    help: 'Total lint findings generated by rule and severity',
+    labelNames: ['rule', 'severity'],
+    registers: [exports.register]
+});
+/**
+ * Metric 8: Redis Operations Counter (Optional)
+ *
+ * Tracks Redis operations performed by BullMQ.
+ *
+ * Example usage:
+ *   redisOpsCounter.labels('zadd', 'success').inc();
+ */
+exports.redisOpsCounter = new prom_client_1.Counter({
+    name: 'flowlint_redis_operations_total',
+    help: 'Total Redis operations performed',
+    labelNames: ['operation', 'status'],
+    registers: [exports.register]
+});
+// ============================================================================
+// HTTP Metrics (Automatic via middleware)
+// ============================================================================
+/**
+ * HTTP Request Duration Histogram
+ *
+ * Automatically populated by metricsMiddleware.
+ * Tracks HTTP request latency by method, route, and status.
+ */
+exports.httpRequestDuration = new prom_client_1.Histogram({
+    name: 'http_request_duration_seconds',
+    help: 'Duration of HTTP requests in seconds',
+    labelNames: ['method', 'route', 'status'],
+    buckets: [0.001, 0.005, 0.01, 0.05, 0.1, 0.5, 1, 5],
+    registers: [exports.register]
+});
+// ============================================================================
+// Utility Functions
+// ============================================================================
+/**
+ * Get all metrics in Prometheus exposition format
+ *
+ * @returns Prometheus-formatted metrics string
+ */
+async function getMetrics() {
+    return exports.register.metrics();
+}
+/**
+ * Get metrics content type header
+ *
+ * @returns Prometheus content type string
+ */
+function getContentType() {
+    return exports.register.contentType;
+}
+/**
+ * Clear all metrics (useful for testing)
+ *
+ * WARNING: This removes all metrics from the registry.
+ * Only use in test environments.
+ */
+function clearMetrics() {
+    exports.register.clear();
+}
+/**
+ * Get single metric by name (for testing)
+ *
+ * @param name - Metric name
+ * @returns Metric instance or undefined
+ */
+function getMetric(name) {
+    return exports.register.getSingleMetric(name);
+}
+//# sourceMappingURL=metrics.js.map

package/dist/packages/observability/metrics.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"metrics.js","sourceRoot":"","sources":["../../../packages/observability/metrics.ts"],"names":[],"mappings":";AAAA;;;;;;;GAOG;;;AAsKH,gCAEC;AAOD,wCAEC;AAQD,oCAEC;AAQD,8BAEC;AAnMD,6CAAyF;AAEzF,iDAAiD;AACpC,QAAA,QAAQ,GAAG,IAAI,sBAAQ,EAAE,CAAC;AAEvC,6CAA6C;AAC7C,IAAA,mCAAqB,EAAC,EAAE,QAAQ,EAAR,gBAAQ,EAAE,CAAC,CAAC;AAEpC,+EAA+E;AAC/E,6BAA6B;AAC7B,+EAA+E;AAE/E;;;;;;;GAOG;AACU,QAAA,cAAc,GAAG,IAAI,qBAAO,CAAC;IACxC,IAAI,EAAE,iCAAiC;IACvC,IAAI,EAAE,+CAA+C;IACrD,UAAU,EAAE,CAAC,YAAY,EAAE,QAAQ,CAAC;IACpC,SAAS,EAAE,CAAC,gBAAQ,CAAC;CACtB,CAAC,CAAC;AAEH;;;;;;;GAOG;AACU,QAAA,iBAAiB,GAAG,IAAI,qBAAO,CAAC;IAC3C,IAAI,EAAE,4BAA4B;IAClC,IAAI,EAAE,mDAAmD;IACzD,UAAU,EAAE,CAAC,MAAM,CAAC;IACpB,SAAS,EAAE,CAAC,gBAAQ,CAAC;CACtB,CAAC,CAAC;AAEH;;;;;;;GAOG;AACU,QAAA,oBAAoB,GAAG,IAAI,qBAAO,CAAC;IAC9C,IAAI,EAAE,+BAA+B;IACrC,IAAI,EAAE,uCAAuC;IAC7C,UAAU,EAAE,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC9B,SAAS,EAAE,CAAC,gBAAQ,CAAC;CACtB,CAAC,CAAC;AAEH;;;;;;;;;;GAUG;AACU,QAAA,oBAAoB,GAAG,IAAI,uBAAS,CAAC;IAChD,IAAI,EAAE,+BAA+B;IACrC,IAAI,EAAE,uCAAuC;IAC7C,UAAU,EAAE,CAAC,MAAM,CAAC;IACpB,OAAO,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,GAAG,CAAC;IAC7C,SAAS,EAAE,CAAC,gBAAQ,CAAC;CACtB,CAAC,CAAC;AAEH;;;;;;;;GAQG;AACU,QAAA,eAAe,GAAG,IAAI,mBAAK,CAAC;IACvC,IAAI,EAAE,sBAAsB;IAC5B,IAAI,EAAE,0CAA0C;IAChD,UAAU,EAAE,CAAC,OAAO,CAAC;IACrB,SAAS,EAAE,CAAC,gBAAQ,CAAC;CACtB,CAAC,CAAC;AAEH;;;;;;;GAOG;AACU,QAAA,qBAAqB,GAAG,IAAI,qBAAO,CAAC;IAC/C,IAAI,EAAE,iCAAiC;IACvC,IAAI,EAAE,yCAAyC;IAC/C,UAAU,EAAE,CAAC,QAAQ,EAAE,QAAQ,EAAE,UAAU,CAAC;IAC5C,SAAS,EAAE,CAAC,gBAAQ,CAAC;CACtB,CAAC,CAAC;AAEH;;;;;;;GAOG;AACU,QAAA,wBAAwB,GAAG,IAAI,qBAAO,CAAC;IAClD,IAAI,EAAE,mCAAmC;IACzC,IAAI,EAAE,oDAAoD;IAC1D,UAAU,EAAE,CAAC,MAAM,EAAE,UAAU,CAAC;IAChC,SAAS,EAAE,CAAC,gBAAQ,CAAC;CACtB,CAAC,CAAC;AAEH;;;;;;;GAOG;AACU,QAAA,eAAe,GAAG,IAAI,qBAAO,CAAC;IACzC,IAAI,EAAE,iCAAiC;IACvC,IAAI,EAAE,kCAAkC;IACxC,UAAU,EAAE,CAAC,WAAW,EAAE,QAAQ,CAAC;IACnC,SAAS,EAAE,CAAC,gBAAQ,CAAC;CACtB,CAAC,CAAC;AAEH,+EAA+E;AAC/E,0CAA0C;AAC1C,+EAA+E;AAE/E;;;;;GAKG;AACU,QAAA,mBAAmB,GAAG,IAAI,uBAAS,CAAC;IAC/C,IAAI,EAAE,+BAA+B;IACrC,IAAI,EAAE,sCAAsC;IAC5C,UAAU,EAAE,CAAC,QAAQ,EAAE,OAAO,EAAE,QAAQ,CAAC;IACzC,OAAO,EAAE,CAAC,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC;IACnD,SAAS,EAAE,CAAC,gBAAQ,CAAC;CACtB,CAAC,CAAC;AAEH,+EAA+E;AAC/E,oBAAoB;AACpB,+EAA+E;AAE/E;;;;GAIG;AACI,KAAK,UAAU,UAAU;IAC9B,OAAO,gBAAQ,CAAC,OAAO,EAAE,CAAC;AAC5B,CAAC;AAED;;;;GAIG;AACH,SAAgB,cAAc;IAC5B,OAAO,gBAAQ,CAAC,WAAW,CAAC;AAC9B,CAAC;AAED;;;;;GAKG;AACH,SAAgB,YAAY;IAC1B,gBAAQ,CAAC,KAAK,EAAE,CAAC;AACnB,CAAC;AAED;;;;;GAKG;AACH,SAAgB,SAAS,CAAC,IAAY;IACpC,OAAO,gBAAQ,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC;AACxC,CAAC"}

package/dist/packages/observability/middleware.d.ts

@@ -0,0 +1,32 @@
+/**
+ * Express Middleware for HTTP Metrics Collection
+ *
+ * This middleware automatically tracks HTTP request metrics including:
+ * - Request duration (latency)
+ * - Request count by method, route, status
+ *
+ * @module packages/observability/middleware
+ */
+import { Request, Response, NextFunction } from 'express';
+/**
+ * Express middleware to collect HTTP request metrics
+ *
+ * Automatically instruments all HTTP requests with Prometheus metrics.
+ * Metrics are labeled by HTTP method, route path, and response status code.
+ *
+ * Usage:
+ *   import { metricsMiddleware } from './packages/observability/middleware';
+ *   app.use(metricsMiddleware);
+ *
+ * @param req - Express request object
+ * @param res - Express response object
+ * @param next - Express next function
+ */
+export declare function metricsMiddleware(req: Request, res: Response, next: NextFunction): void;
+/**
+ * Middleware error handler
+ *
+ * Ensures metrics failures don't crash the application.
+ * Logs errors and continues processing.
+ */
+export declare function metricsErrorHandler(err: Error, req: Request, res: Response, next: NextFunction): void;

package/dist/packages/observability/middleware.js

@@ -0,0 +1,58 @@
+"use strict";
+/**
+ * Express Middleware for HTTP Metrics Collection
+ *
+ * This middleware automatically tracks HTTP request metrics including:
+ * - Request duration (latency)
+ * - Request count by method, route, status
+ *
+ * @module packages/observability/middleware
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.metricsMiddleware = metricsMiddleware;
+exports.metricsErrorHandler = metricsErrorHandler;
+const metrics_1 = require("./metrics");
+/**
+ * Express middleware to collect HTTP request metrics
+ *
+ * Automatically instruments all HTTP requests with Prometheus metrics.
+ * Metrics are labeled by HTTP method, route path, and response status code.
+ *
+ * Usage:
+ *   import { metricsMiddleware } from './packages/observability/middleware';
+ *   app.use(metricsMiddleware);
+ *
+ * @param req - Express request object
+ * @param res - Express response object
+ * @param next - Express next function
+ */
+function metricsMiddleware(req, res, next) {
+    // Start timer for this request
+    const timer = metrics_1.httpRequestDuration.startTimer({
+        method: req.method,
+        route: req.route?.path || req.path,
+        status: '0' // Will be updated on response finish
+    });
+    // Record duration when response finishes
+    res.on('finish', () => {
+        try {
+            timer({ status: res.statusCode.toString() });
+        }
+        catch (error) {
+            // Don't let metrics errors crash the application
+            console.error('Failed to record HTTP metrics:', error);
+        }
+    });
+    next();
+}
+/**
+ * Middleware error handler
+ *
+ * Ensures metrics failures don't crash the application.
+ * Logs errors and continues processing.
+ */
+function metricsErrorHandler(err, req, res, next) {
+    console.error('Metrics middleware error:', err);
+    next(err); // Pass error to next error handler
+}
+//# sourceMappingURL=middleware.js.map

package/dist/packages/observability/middleware.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"middleware.js","sourceRoot":"","sources":["../../../packages/observability/middleware.ts"],"names":[],"mappings":";AAAA;;;;;;;;GAQG;;AAmBH,8CAmBC;AAQD,kDAGC;AA9CD,uCAAgD;AAEhD;;;;;;;;;;;;;GAaG;AACH,SAAgB,iBAAiB,CAAC,GAAY,EAAE,GAAa,EAAE,IAAkB;IAC/E,+BAA+B;IAC/B,MAAM,KAAK,GAAG,6BAAmB,CAAC,UAAU,CAAC;QAC3C,MAAM,EAAE,GAAG,CAAC,MAAM;QAClB,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,IAAI,IAAI,GAAG,CAAC,IAAI;QAClC,MAAM,EAAE,GAAG,CAAC,qCAAqC;KAClD,CAAC,CAAC;IAEH,yCAAyC;IACzC,GAAG,CAAC,EAAE,CAAC,QAAQ,EAAE,GAAG,EAAE;QACpB,IAAI,CAAC;YACH,KAAK,CAAC,EAAE,MAAM,EAAE,GAAG,CAAC,UAAU,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;QAC/C,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,iDAAiD;YACjD,OAAO,CAAC,KAAK,CAAC,gCAAgC,EAAE,KAAK,CAAC,CAAC;QACzD,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,IAAI,EAAE,CAAC;AACT,CAAC;AAED;;;;;GAKG;AACH,SAAgB,mBAAmB,CAAC,GAAU,EAAE,GAAY,EAAE,GAAa,EAAE,IAAkB;IAC7F,OAAO,CAAC,KAAK,CAAC,2BAA2B,EAAE,GAAG,CAAC,CAAC;IAChD,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,mCAAmC;AAChD,CAAC"}

package/dist/packages/review/analysis-engine.d.ts

@@ -0,0 +1,19 @@
+/**
+ * FlowLint Analysis Engine
+ *
+ * Orchestrates the linting workflow:
+ * 1. Load configuration
+ * 2. Fetch files to analyze
+ * 3. Parse each file into a graph
+ * 4. Run rules against the graph
+ * 5. Report results
+ */
+import type { AnalysisEngine, AnalysisSummary, ConfigProvider, FileSource, Reporter } from './providers';
+export declare class DefaultAnalysisEngine implements AnalysisEngine {
+    private fileSource;
+    private configProvider;
+    private reporter;
+    constructor(fileSource: FileSource, configProvider: ConfigProvider, reporter: Reporter);
+    analyze(): Promise<AnalysisSummary>;
+    private formatParseError;
+}

package/dist/packages/review/analysis-engine.js

@@ -0,0 +1,111 @@
+"use strict";
+/**
+ * FlowLint Analysis Engine
+ *
+ * Orchestrates the linting workflow:
+ * 1. Load configuration
+ * 2. Fetch files to analyze
+ * 3. Parse each file into a graph
+ * 4. Run rules against the graph
+ * 5. Report results
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.DefaultAnalysisEngine = void 0;
+const parser_n8n_1 = require("./parser-n8n");
+const rules_1 = require("./rules");
+const schemas_1 = require("./schemas");
+const logger_1 = require("../logger");
+const findings_1 = require("./utils/findings");
+const utils_1 = require("./utils");
+class DefaultAnalysisEngine {
+    constructor(fileSource, configProvider, reporter) {
+        this.fileSource = fileSource;
+        this.configProvider = configProvider;
+        this.reporter = reporter;
+    }
+    async analyze() {
+        // 1. Load configuration
+        const cfg = await this.configProvider.load();
+        logger_1.logger.debug({ rules: Object.keys(cfg.rules) }, 'loaded configuration');
+        // 2. Fetch files to analyze
+        const files = await this.fileSource.getFiles(cfg.files);
+        logger_1.logger.info({ count: files.length }, 'fetched files for analysis');
+        // 3. Analyze each file
+        const results = [];
+        let errorCount = 0;
+        for (const file of files) {
+            try {
+                // Parse file to graph
+                const graph = (0, parser_n8n_1.parseN8n)(file.content);
+                logger_1.logger.debug({ file: file.path, nodes: graph.nodes.length }, 'parsed file');
+                // Run all rules
+                const findings = (0, rules_1.runAllRules)(graph, {
+                    path: file.path,
+                    cfg,
+                    nodeLines: graph.meta.nodeLines,
+                });
+                // Inject documentation URLs into findings
+                findings.forEach((f) => {
+                    f.documentationUrl = (0, utils_1.getExampleLink)(f.rule);
+                });
+                results.push({
+                    file,
+                    graph,
+                    findings,
+                });
+            }
+            catch (error) {
+                errorCount++;
+                const message = error instanceof Error ? error.message : String(error);
+                const raw_details = this.formatParseError(error);
+                logger_1.logger.warn({ file: file.path, error: message }, 'failed to parse file');
+                // Add error finding
+                const errorFinding = {
+                    rule: 'PARSE',
+                    severity: 'must',
+                    path: file.path,
+                    message,
+                    raw_details,
+                    line: 1,
+                };
+                results.push({
+                    file,
+                    graph: { nodes: [], edges: [], meta: {} },
+                    findings: [errorFinding],
+                    errors: [{ error: message, details: raw_details }],
+                });
+            }
+        }
+        // 4. Calculate summary
+        const allFindings = results.flatMap((r) => r.findings);
+        const summary = (0, findings_1.countFindingsBySeverity)(allFindings);
+        // 5. Report results
+        logger_1.logger.info({ totalResults: results.length, totalFindings: summary.total }, 'reporting results');
+        await this.reporter.report(results);
+        // 6. Return summary
+        return {
+            totalFiles: files.length,
+            totalFindings: summary.total,
+            findingsBySeverity: { must: summary.must, should: summary.should, nit: summary.nit },
+            errors: errorCount,
+            hasBlockingIssues: summary.must > 0,
+        };
+    }
+    formatParseError(error) {
+        if (error instanceof schemas_1.ValidationError && Array.isArray(error.errors) && error.errors.length > 0) {
+            return error.errors
+                .map((err) => {
+                const suggestion = err.suggestion ? ` (suggestion: ${err.suggestion})` : '';
+                return `- ${err.path}: ${err.message}${suggestion}`;
+            })
+                .join('\n')
+                .slice(0, 64000);
+        }
+        if (error instanceof Error && error.stack) {
+            return error.stack.slice(0, 64000);
+        }
+        return undefined;
+    }
+}
+exports.DefaultAnalysisEngine = DefaultAnalysisEngine;
+//# sourceMappingURL=analysis-engine.js.map

package/dist/packages/review/analysis-engine.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"analysis-engine.js","sourceRoot":"","sources":["../../../packages/review/analysis-engine.ts"],"names":[],"mappings":";AAAA;;;;;;;;;GASG;;;AAGH,6CAAwC;AACxC,mCAAsC;AACtC,uCAA4C;AAE5C,sCAAmC;AACnC,+CAA2D;AAC3D,mCAAyC;AAEzC,MAAa,qBAAqB;IAChC,YACU,UAAsB,EACtB,cAA8B,EAC9B,QAAkB;QAFlB,eAAU,GAAV,UAAU,CAAY;QACtB,mBAAc,GAAd,cAAc,CAAgB;QAC9B,aAAQ,GAAR,QAAQ,CAAU;IACzB,CAAC;IAEJ,KAAK,CAAC,OAAO;QACX,wBAAwB;QACxB,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,IAAI,EAAE,CAAC;QAC7C,eAAM,CAAC,KAAK,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,EAAE,sBAAsB,CAAC,CAAC;QAExE,4BAA4B;QAC5B,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QACxD,eAAM,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,MAAM,EAAE,EAAE,4BAA4B,CAAC,CAAC;QAEnE,uBAAuB;QACvB,MAAM,OAAO,GAAqB,EAAE,CAAC;QACrC,IAAI,UAAU,GAAG,CAAC,CAAC;QAEnB,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,IAAI,CAAC;gBACH,sBAAsB;gBACtB,MAAM,KAAK,GAAG,IAAA,qBAAQ,EAAC,IAAI,CAAC,OAAO,CAAC,CAAC;gBACrC,eAAM,CAAC,KAAK,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,CAAC,MAAM,EAAE,EAAE,aAAa,CAAC,CAAC;gBAE5E,gBAAgB;gBAChB,MAAM,QAAQ,GAAG,IAAA,mBAAW,EAAC,KAAK,EAAE;oBAClC,IAAI,EAAE,IAAI,CAAC,IAAI;oBACf,GAAG;oBACH,SAAS,EAAE,KAAK,CAAC,IAAI,CAAC,SAA+C;iBACtE,CAAC,CAAC;gBAEH,0CAA0C;gBAC1C,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE;oBACrB,CAAC,CAAC,gBAAgB,GAAG,IAAA,sBAAc,EAAC,CAAC,CAAC,IAAI,CAAC,CAAC;gBAC9C,CAAC,CAAC,CAAC;gBAEH,OAAO,CAAC,IAAI,CAAC;oBACX,IAAI;oBACJ,KAAK;oBACL,QAAQ;iBACT,CAAC,CAAC;YACL,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,UAAU,EAAE,CAAC;gBACb,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;gBACvE,MAAM,WAAW,GAAG,IAAI,CAAC,gBAAgB,CAAC,KAAK,CAAC,CAAC;gBAEjD,eAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,sBAAsB,CAAC,CAAC;gBAEzE,oBAAoB;gBACpB,MAAM,YAAY,GAAY;oBAC5B,IAAI,EAAE,OAAO;oBACb,QAAQ,EAAE,MAAM;oBAChB,IAAI,EAAE,IAAI,CAAC,IAAI;oBACf,OAAO;oBACP,WAAW;oBACX,IAAI,EAAE,CAAC;iBACR,CAAC;gBAEF,OAAO,CAAC,IAAI,CAAC;oBACX,IAAI;oBACJ,KAAK,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE;oBACzC,QAAQ,EAAE,CAAC,YAAY,CAAC;oBACxB,MAAM,EAAE,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,WAAW,EAAE,CAAC;iBACnD,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAED,uBAAuB;QACvB,MAAM,WAAW,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC;QACvD,MAAM,OAAO,GAAG,IAAA,kCAAuB,EAAC,WAAW,CAAC,CAAC;QAErD,oBAAoB;QACpB,eAAM,CAAC,IAAI,CAAC,EAAE,YAAY,EAAE,OAAO,CAAC,MAAM,EAAE,aAAa,EAAE,OAAO,CAAC,KAAK,EAAE,EAAE,mBAAmB,CAAC,CAAC;QACjG,MAAM,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QAEpC,oBAAoB;QACpB,OAAO;YACL,UAAU,EAAE,KAAK,CAAC,MAAM;YACxB,aAAa,EAAE,OAAO,CAAC,KAAK;YAC5B,kBAAkB,EAAE,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE;YACpF,MAAM,EAAE,UAAU;YAClB,iBAAiB,EAAE,OAAO,CAAC,IAAI,GAAG,CAAC;SACpC,CAAC;IACJ,CAAC;IAEO,gBAAgB,CAAC,KAAc;QACrC,IAAI,KAAK,YAAY,yBAAe,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC/F,OAAO,KAAK,CAAC,MAAM;iBAChB,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE;gBACX,MAAM,UAAU,GAAG,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,iBAAiB,GAAG,CAAC,UAAU,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC5E,OAAO,KAAK,GAAG,CAAC,IAAI,KAAK,GAAG,CAAC,OAAO,GAAG,UAAU,EAAE,CAAC;YACtD,CAAC,CAAC;iBACD,IAAI,CAAC,IAAI,CAAC;iBACV,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;QACrB,CAAC;QAED,IAAI,KAAK,YAAY,KAAK,IAAI,KAAK,CAAC,KAAK,EAAE,CAAC;YAC1C,OAAO,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;QACrC,CAAC;QAED,OAAO,SAAS,CAAC;IACnB,CAAC;CACF;AAxGD,sDAwGC"}

package/dist/packages/review/index.d.ts

@@ -0,0 +1,12 @@
+/**
+ * Main exports from packages/review
+ */
+export * from './types';
+export * from './providers';
+export * from './analysis-engine';
+export * from './parser-n8n';
+export * from './rules';
+export * from './reporter';
+export * from './sniffer';
+export * from './schemas';
+export * from './providers/github';

package/dist/packages/review/index.js

@@ -0,0 +1,29 @@
+"use strict";
+/**
+ * Main exports from packages/review
+ */
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __exportStar = (this && this.__exportStar) || function(m, exports) {
+    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+__exportStar(require("./types"), exports);
+__exportStar(require("./providers"), exports);
+__exportStar(require("./analysis-engine"), exports);
+__exportStar(require("./parser-n8n"), exports);
+__exportStar(require("./rules"), exports);
+__exportStar(require("./reporter"), exports);
+__exportStar(require("./sniffer"), exports);
+__exportStar(require("./schemas"), exports);
+__exportStar(require("./providers/github"), exports);
+//# sourceMappingURL=index.js.map

package/dist/packages/review/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../packages/review/index.ts"],"names":[],"mappings":";AAAA;;GAEG;;;;;;;;;;;;;;;;AAEH,0CAAwB;AACxB,8CAA4B;AAC5B,oDAAkC;AAClC,+CAA6B;AAC7B,0CAAwB;AACxB,6CAA2B;AAC3B,4CAA0B;AAC1B,4CAA0B;AAC1B,qDAAmC"}

package/dist/packages/review/parser-n8n.d.ts

@@ -0,0 +1,2 @@
+import type { Graph } from './types';
+export declare function parseN8n(doc: string): Graph;