kirograph 0.16.1 → 0.19.0

package/dist/bin/commands/export.js

@@ -45,6 +45,43 @@ async function generateExport(projectPath, opts) {
   const cg = await KiroGraph.open(target);
   const nodes = cg.getAllNodes();
   const edges = cg.getAllEdges();
+  let securityOverlay;
+  try {
+    const db = cg.getDatabase();
+    db.applySecuritySchema();
+    const depRows = db.getRawDb().all(
+      `SELECT d.node_id, r.verdict
+       FROM sec_dependencies d
+       LEFT JOIN edges e ON e.source = d.node_id AND e.kind = 'has_vulnerability'
+       LEFT JOIN sec_reachability r ON r.vulnerability_node_id = e.target
+       ORDER BY
+         CASE r.verdict
+           WHEN 'affected'            THEN 0
+           WHEN 'under_investigation' THEN 1
+           WHEN 'not_affected'        THEN 2
+           ELSE 3
+         END`
+    );
+    const depVerdicts = /* @__PURE__ */ new Map();
+    for (const row of depRows) {
+      if (!depVerdicts.has(row.node_id)) {
+        const status = row.verdict === "affected" ? "affected" : row.verdict === "under_investigation" ? "under_investigation" : row.verdict === "not_affected" ? "not_affected" : "none";
+        depVerdicts.set(row.node_id, status);
+      }
+    }
+    const vulnRows = db.getRawDb().all(
+      `SELECT node_id, verdict FROM sec_reachability`
+    );
+    const vulnVerdicts = /* @__PURE__ */ new Map();
+    for (const row of vulnRows) {
+      const status = row.verdict === "affected" ? "affected" : row.verdict === "under_investigation" ? "under_investigation" : row.verdict === "not_affected" ? "not_affected" : "none";
+      vulnVerdicts.set(row.node_id, status);
+    }
+    if (depVerdicts.size > 0 || vulnVerdicts.size > 0) {
+      securityOverlay = { depVerdicts, vulnVerdicts };
+    }
+  } catch {
+  }
   cg.close();
   const projectName = path.basename(target);
   let logoBase64;
@@ -69,7 +106,7 @@ async function generateExport(projectPath, opts) {
   }
   const outDir = opts.output ? path.resolve(opts.output) : path.join(target, ".kirograph", "export");
   fs.mkdirSync(outDir, { recursive: true });
-  const { html, css, js } = buildFiles(nodes, edges, projectName, opts.includeContains, logoBase64, fileModified);
+  const { html, css, js } = buildFiles(nodes, edges, projectName, opts.includeContains, logoBase64, fileModified, securityOverlay);
   fs.writeFileSync(path.join(outDir, "index.html"), html, "utf8");
   fs.writeFileSync(path.join(outDir, "app.css"), css, "utf8");
   fs.writeFileSync(path.join(outDir, "app.js"), js, "utf8");
@@ -137,7 +174,18 @@ function lighten(hex) {
 function escHtml(s) {
   return s.replace(/&/g, "&amp;").replace(/</g, "&lt;").replace(/>/g, "&gt;").replace(/"/g, "&quot;");
 }
-function buildFiles(nodes, edges, projectName, includeContains, logoBase64, fileModified) {
+const SEC_DEP_COLOR = {
+  affected: "#ef4444",
+  under_investigation: "#f59e0b",
+  not_affected: "#22c55e",
+  none: "#64748b"
+};
+const SEC_VULN_COLOR = {
+  affected: "#dc2626",
+  under_investigation: "#d97706",
+  not_affected: "#16a34a"
+};
+function buildFiles(nodes, edges, projectName, includeContains, logoBase64, fileModified, securityOverlay) {
   const filteredEdges = includeContains ? edges : edges.filter((e) => e.kind !== "contains");
   const degree = /* @__PURE__ */ new Map();
   for (const e of filteredEdges) {
@@ -149,14 +197,28 @@ function buildFiles(nodes, edges, projectName, includeContains, logoBase64, file
     const fp = n.filePath ?? "";
     const parts = fp.split("/").filter(Boolean);
     const dir = parts.length >= 2 ? parts.slice(0, 2).join("/") : parts[0] ?? "";
+    let securityStatus = "none";
+    let baseColor = KIND_COLOR[n.kind] ?? "#424242";
+    if (securityOverlay) {
+      if (n.kind === "dependency") {
+        securityStatus = securityOverlay.depVerdicts.get(n.id) ?? "none";
+        baseColor = SEC_DEP_COLOR[securityStatus];
+      } else if (n.kind === "vulnerability") {
+        const verdict = securityOverlay.vulnVerdicts.get(n.id);
+        if (verdict) {
+          securityStatus = verdict;
+          baseColor = SEC_VULN_COLOR[verdict] ?? baseColor;
+        }
+      }
+    }
     return {
       id: n.id,
       label: n.name,
       color: {
-        background: KIND_COLOR[n.kind] ?? "#424242",
-        border: lighten(KIND_COLOR[n.kind] ?? "#424242"),
+        background: baseColor,
+        border: lighten(baseColor),
         highlight: { background: "#e040fb", border: "#ea80fc" },
-        hover: { background: lighten(KIND_COLOR[n.kind] ?? "#424242"), border: "#ea80fc" }
+        hover: { background: lighten(baseColor), border: "#ea80fc" }
       },
       size: Math.max(8, Math.min(40, 8 + (degree.get(n.id) ?? 0) * 1.5)),
       font: { size: 11, color: "#e0e0e0", face: "monospace" },
@@ -170,7 +232,8 @@ function buildFiles(nodes, edges, projectName, includeContains, logoBase64, file
       degree: degree.get(n.id) ?? 0,
       borderWidth: n.isExported ? 2 : 1,
       borderWidthSelected: 3,
-      lastModified: fileModified ? fileModified[fp] ?? 0 : 0
+      lastModified: fileModified ? fileModified[fp] ?? 0 : 0,
+      securityStatus
     };
   });
   const visEdges = filteredEdges.map((e, i) => ({
@@ -188,6 +251,7 @@ function buildFiles(nodes, edges, projectName, includeContains, logoBase64, file
   }));
   const allNodeKinds = [...new Set(nodes.map((n) => n.kind))].sort();
   const allEdgeKinds = [...new Set(filteredEdges.map((e) => e.kind))].sort();
+  const hasSecurityNodes = visNodes.some((n) => n.kind === "dependency" || n.kind === "vulnerability");
   const logoTag = logoBase64 ? `<img src="data:image/png;base64,${logoBase64}" alt="KiroGraph">` : `<h1>\u2B21 KiroGraph</h1>`;
   const loaderLogoTag = logoBase64 ? `<img src="data:image/png;base64,${logoBase64}" alt="KiroGraph">` : `<div style="color:#c792ea;font-size:18px;font-weight:600;letter-spacing:.05em">\u2B21 KiroGraph</div>`;
   const nodeLegend = allNodeKinds.map((k) => `<div class="legend-item" data-nkind="${k}">
@@ -254,7 +318,8 @@ function buildFiles(nodes, edges, projectName, includeContains, logoBase64, file
       <button class="fbtn" id="btn-focus"   title="Focus on node and neighbors">\u25CE <span class="fbtn-label">Focus</span></button>
       <button class="fbtn" id="btn-path"    title="Find path between two nodes">\u27F6 <span class="fbtn-label">Path</span></button>
       <button class="fbtn" id="btn-cluster" title="Cluster by directory">\u2B21 <span class="fbtn-label">Cluster</span></button>
-      <button class="fbtn" id="btn-heat"    title="Heat map by file recency">\u{1F321} <span class="fbtn-label">Heat</span></button>
+      <button class="fbtn" id="btn-heat"    title="Heat map by file recency">\u{1F321} <span class="fbtn-label">Heat</span></button>${hasSecurityNodes ? `
+      <button class="fbtn" id="btn-security" title="Security overlay \u2014 highlight dependency/vulnerability nodes">\u{1F512} <span class="fbtn-label">Security</span></button>` : ""}
       <button class="fbtn" id="btn-charts"  title="Analytics charts">\u{1F4CA} <span class="fbtn-label">Charts</span></button>
     </div>
 
@@ -269,7 +334,20 @@ function buildFiles(nodes, edges, projectName, includeContains, logoBase64, file
         <div class="heat-stop" data-tip="Modified more than 6 months ago"><span class="heat-stop-dot" style="background:#2980b9"></span>Older</div>
       </div>
       <div id="heat-tip"></div>
-    </div>
+    </div>${hasSecurityNodes ? `
+
+    <div id="security-legend">
+      <div class="security-legend-title">\u{1F512} Security status</div>
+      <div class="security-stops">
+        <div class="security-stop"><span class="security-stop-dot" style="background:#ef4444"></span>Affected</div>
+        <div class="security-stop"><span class="security-stop-dot" style="background:#f59e0b"></span>Under investigation</div>
+        <div class="security-stop"><span class="security-stop-dot" style="background:#22c55e"></span>Not affected</div>
+        <div class="security-stop"><span class="security-stop-dot" style="background:#64748b"></span>No vuln data</div>
+        <div class="security-stop"><span class="security-stop-dot" style="background:#dc2626;border:2px solid #fff"></span>Vuln: affected</div>
+        <div class="security-stop"><span class="security-stop-dot" style="background:#d97706;border:2px solid #fff"></span>Vuln: investigating</div>
+        <div class="security-stop"><span class="security-stop-dot" style="background:#16a34a;border:2px solid #fff"></span>Vuln: not affected</div>
+      </div>
+    </div>` : ""}
   </div>
   </div><!-- /float-sidebar -->
 
@@ -415,7 +493,7 @@ function buildFiles(nodes, edges, projectName, includeContains, logoBase64, file
 </body>
 </html>`;
   const css = buildCss();
-  const js = buildJs(visNodes, visEdges, KIND_COLOR, EDGE_COLOR);
+  const js = buildJs(visNodes, visEdges, KIND_COLOR, EDGE_COLOR, hasSecurityNodes);
   return { html, css, js };
 }
 function buildCss() {
@@ -941,9 +1019,47 @@ input[type=range] {
   min-height: 14px;
   font-style: italic;
 }
+
+/* \u2500\u2500 Security legend (inside sidebar) \u2500\u2500 */
+#security-legend {
+  display: none;
+  background: rgba(8, 8, 18, 0.97);
+  border: 1px solid #3a3a5e;
+  border-radius: 12px;
+  padding: 12px 14px;
+  box-shadow: 0 4px 24px rgba(0,0,0,.75);
+  width: 200px;
+}
+.security-legend-title {
+  font-size: 11px;
+  font-weight: 600;
+  color: #9da8cc;
+  margin-bottom: 10px;
+}
+.security-stops {
+  display: flex;
+  flex-direction: column;
+  gap: 5px;
+}
+.security-stop {
+  display: flex;
+  align-items: center;
+  gap: 8px;
+  font-size: 11px;
+  color: #7a86aa;
+  cursor: default;
+  padding: 2px 4px;
+  border-radius: 4px;
+}
+.security-stop-dot {
+  width: 9px; height: 9px;
+  border-radius: 50%;
+  flex-shrink: 0;
+  box-sizing: border-box;
+}
 `;
 }
-function buildJs(visNodes, visEdges, kindColors, edgeColors) {
+function buildJs(visNodes, visEdges, kindColors, edgeColors, hasSecurityNodes) {
   return `// \u2500\u2500 Data \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500
 const NODES_DATA  = ${JSON.stringify(visNodes)};
 const EDGES_DATA  = ${JSON.stringify(visEdges)};
@@ -1551,6 +1667,7 @@ document.getElementById('btn-cluster').addEventListener('click', () => {
       document.getElementById('heat-legend').style.display = 'none';
       nodesDS.update(NODES_DATA.map(n => ({ id: n.id, color: originalColors[n.id] })));
     }
+    ${hasSecurityNodes ? `if (securityActive) { exitSecurityOverlay(); }` : ""}
     if (focusActive) exitFocus();
     if (pathMode) exitPath(true);
     network.unselectAll();
@@ -1769,6 +1886,55 @@ document.querySelectorAll('.heat-stop').forEach(function(el) {
   el.addEventListener('mouseleave', function() { if (tip) tip.textContent = ''; });
 });
 
+${hasSecurityNodes ? `// \u2500\u2500 Security overlay \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500
+let securityActive = false;
+
+// Colours embedded from build-time palette
+const SEC_DEP_COLORS = { affected: '#ef4444', under_investigation: '#f59e0b', not_affected: '#22c55e', none: '#64748b' };
+const SEC_VULN_COLORS = { affected: '#dc2626', under_investigation: '#d97706', not_affected: '#16a34a' };
+
+function enterSecurityOverlay() {
+  securityActive = true;
+  document.getElementById('btn-security').classList.add('active');
+  document.getElementById('security-legend').style.display = 'block';
+
+  const DIM = { background: '#111118', border: '#1a1a2a', highlight: { background: '#111118', border: '#1a1a2a' }, hover: { background: '#111118', border: '#1a1a2a' } };
+  const secNodeIds = new Set(
+    NODES_DATA
+      .filter(n => n.kind === 'dependency' || n.kind === 'vulnerability')
+      .map(n => n.id)
+  );
+
+  // Dim edges that don't connect to any security node
+  const secEdgeIds = new Set(
+    EDGES_DATA
+      .filter(e => secNodeIds.has(e.from) || secNodeIds.has(e.to))
+      .map(e => e.id)
+  );
+
+  nodesDS.update(NODES_DATA.map(n => ({
+    id: n.id,
+    color: secNodeIds.has(n.id) ? originalColors[n.id] : DIM,
+  })));
+  edgesDS.update(EDGES_DATA.map(e => ({
+    id: e.id,
+    color: secEdgeIds.has(e.id) ? originalEdgeColors[e.id] : { color: '#111118', opacity: 0.08 },
+  })));
+}
+
+function exitSecurityOverlay() {
+  securityActive = false;
+  document.getElementById('btn-security').classList.remove('active');
+  document.getElementById('security-legend').style.display = 'none';
+  nodesDS.update(NODES_DATA.map(n => ({ id: n.id, color: originalColors[n.id] })));
+  edgesDS.update(EDGES_DATA.map(e => ({ id: e.id, color: originalEdgeColors[e.id] })));
+}
+
+document.getElementById('btn-security').addEventListener('click', () => {
+  if (securityActive) { exitSecurityOverlay(); } else { enterSecurityOverlay(); }
+});
+` : "// Security overlay: no security nodes in this graph"}
+
 // \u2500\u2500 Keyboard shortcuts \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500
 document.addEventListener('keydown', e => {
   if (e.key === 'Escape') {
@@ -1821,6 +1987,9 @@ function resetToEmpty() {
     document.getElementById('heat-legend').style.display = 'none';
   }
 
+  // Reset security overlay
+  ${hasSecurityNodes ? `if (securityActive) { exitSecurityOverlay(); }` : ""}
+
   // Reset context menu
   document.getElementById('ctx-menu').style.display = 'none';
   ctxNodeId = null;
@@ -2612,6 +2781,131 @@ function register(program) {
 `);
     openBrowser(indexPath);
   });
+  exportCmd.command("graphml [projectPath]").description("Export graph as GraphML (for Gephi, yEd)").option("-o, --output <file>", "Output file path").action(async (projectPath, opts) => {
+    const KiroGraph = (await Promise.resolve().then(() => require("../../index.js"))).default;
+    const target = path.resolve(projectPath ?? process.cwd());
+    const cg = await KiroGraph.open(target);
+    const nodes = cg.getAllNodes();
+    const edges = cg.getAllEdges();
+    cg.close();
+    const outPath = opts.output ?? path.join(target, ".kirograph", "export", "graph.graphml");
+    fs.mkdirSync(path.dirname(outPath), { recursive: true });
+    const lines = [
+      '<?xml version="1.0" encoding="UTF-8"?>',
+      '<graphml xmlns="http://graphml.graphstruct.org/graphml">',
+      '  <key id="kind" for="node" attr.name="kind" attr.type="string"/>',
+      '  <key id="name" for="node" attr.name="name" attr.type="string"/>',
+      '  <key id="file" for="node" attr.name="file" attr.type="string"/>',
+      '  <key id="line" for="node" attr.name="line" attr.type="int"/>',
+      '  <key id="edgeKind" for="edge" attr.name="kind" attr.type="string"/>',
+      '  <graph id="G" edgedefault="directed">'
+    ];
+    for (const n of nodes) {
+      lines.push(`    <node id="${escHtml(n.id)}">`);
+      lines.push(`      <data key="kind">${escHtml(n.kind)}</data>`);
+      lines.push(`      <data key="name">${escHtml(n.name)}</data>`);
+      lines.push(`      <data key="file">${escHtml(n.filePath)}</data>`);
+      lines.push(`      <data key="line">${n.startLine}</data>`);
+      lines.push(`    </node>`);
+    }
+    for (const e of edges) {
+      lines.push(`    <edge source="${escHtml(e.source)}" target="${escHtml(e.target)}">`);
+      lines.push(`      <data key="edgeKind">${escHtml(e.kind)}</data>`);
+      lines.push(`    </edge>`);
+    }
+    lines.push("  </graph>", "</graphml>");
+    fs.writeFileSync(outPath, lines.join("\n"), "utf8");
+    console.log(`
+  ${import_ui.green}GraphML exported${import_ui.reset}: ${outPath}`);
+    console.log(`  ${import_ui.dim}${nodes.length} nodes, ${edges.length} edges${import_ui.reset}
+`);
+  });
+  exportCmd.command("cypher [projectPath]").description("Export graph as Neo4j Cypher statements").option("-o, --output <file>", "Output file path").action(async (projectPath, opts) => {
+    const KiroGraph = (await Promise.resolve().then(() => require("../../index.js"))).default;
+    const target = path.resolve(projectPath ?? process.cwd());
+    const cg = await KiroGraph.open(target);
+    const nodes = cg.getAllNodes();
+    const edges = cg.getAllEdges();
+    cg.close();
+    const outPath = opts.output ?? path.join(target, ".kirograph", "export", "graph.cypher");
+    fs.mkdirSync(path.dirname(outPath), { recursive: true });
+    const lines = ["// Generated by KiroGraph", "// Import with: cat graph.cypher | cypher-shell", ""];
+    for (const n of nodes) {
+      const label = n.kind.charAt(0).toUpperCase() + n.kind.slice(1);
+      const props = `{id: "${n.id.replace(/"/g, '\\"')}", name: "${n.name.replace(/"/g, '\\"')}", file: "${n.filePath.replace(/"/g, '\\"')}", line: ${n.startLine}}`;
+      lines.push(`CREATE (:${label} ${props});`);
+    }
+    lines.push("");
+    for (const e of edges) {
+      const relType = e.kind.toUpperCase();
+      lines.push(`MATCH (a {id: "${e.source.replace(/"/g, '\\"')}"}), (b {id: "${e.target.replace(/"/g, '\\"')}"}) CREATE (a)-[:${relType}]->(b);`);
+    }
+    fs.writeFileSync(outPath, lines.join("\n"), "utf8");
+    console.log(`
+  ${import_ui.green}Neo4j Cypher exported${import_ui.reset}: ${outPath}`);
+    console.log(`  ${import_ui.dim}${nodes.length} nodes, ${edges.length} edges${import_ui.reset}
+`);
+  });
+  exportCmd.command("obsidian [projectPath]").description("Export graph as an Obsidian vault with wikilinks").option("-o, --output <dir>", "Output directory path").action(async (projectPath, opts) => {
+    const KiroGraph = (await Promise.resolve().then(() => require("../../index.js"))).default;
+    const target = path.resolve(projectPath ?? process.cwd());
+    const cg = await KiroGraph.open(target);
+    const nodes = cg.getAllNodes();
+    const edges = cg.getAllEdges();
+    cg.close();
+    const outDir = opts.output ?? path.join(target, ".kirograph", "export", "obsidian");
+    fs.mkdirSync(outDir, { recursive: true });
+    const callersMap = /* @__PURE__ */ new Map();
+    const calleesMap = /* @__PURE__ */ new Map();
+    const nodeById = new Map(nodes.map((n) => [n.id, n]));
+    for (const e of edges) {
+      if (e.kind === "calls") {
+        const targetNode = nodeById.get(e.target);
+        const sourceNode = nodeById.get(e.source);
+        if (targetNode) {
+          if (!calleesMap.has(e.source)) calleesMap.set(e.source, []);
+          calleesMap.get(e.source).push(targetNode.name);
+        }
+        if (sourceNode) {
+          if (!callersMap.has(e.target)) callersMap.set(e.target, []);
+          callersMap.get(e.target).push(sourceNode.name);
+        }
+      }
+    }
+    let fileCount = 0;
+    for (const n of nodes) {
+      if (n.kind === "variable" || n.kind === "parameter") continue;
+      const callers = callersMap.get(n.id) ?? [];
+      const callees = calleesMap.get(n.id) ?? [];
+      const lines = [
+        `# ${n.name}`,
+        "",
+        `- **Kind**: ${n.kind}`,
+        `- **File**: \`${n.filePath}:${n.startLine}\``
+      ];
+      if (n.signature) lines.push(`- **Signature**: \`${n.signature}\``);
+      if (n.isExported) lines.push(`- **Exported**: yes`);
+      if (callees.length > 0) {
+        lines.push("", "## Calls", "");
+        for (const c of [...new Set(callees)].slice(0, 20)) {
+          lines.push(`- [[${c}]]`);
+        }
+      }
+      if (callers.length > 0) {
+        lines.push("", "## Called by", "");
+        for (const c of [...new Set(callers)].slice(0, 20)) {
+          lines.push(`- [[${c}]]`);
+        }
+      }
+      const safeName = n.name.replace(/[<>:"/\\|?*]/g, "_");
+      fs.writeFileSync(path.join(outDir, `${safeName}.md`), lines.join("\n"), "utf8");
+      fileCount++;
+    }
+    console.log(`
+  ${import_ui.green}Obsidian vault exported${import_ui.reset}: ${outDir}`);
+    console.log(`  ${import_ui.dim}${fileCount} markdown files with wikilinks${import_ui.reset}
+`);
+  });
 }
 // Annotate the CommonJS export names for ESM import in node:
 0 && (module.exports = {