kirograph 0.17.0 → 0.19.0

package/dist/bin/commands/security.js

@@ -0,0 +1,193 @@
+"use strict";
+var __create = Object.create;
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __getProtoOf = Object.getPrototypeOf;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __export = (target, all) => {
+  for (var name in all)
+    __defProp(target, name, { get: all[name], enumerable: true });
+};
+var __copyProps = (to, from, except, desc) => {
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (let key of __getOwnPropNames(from))
+      if (!__hasOwnProp.call(to, key) && key !== except)
+        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
+  }
+  return to;
+};
+var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__getProtoOf(mod)) : {}, __copyProps(
+  // If the importer is in node compatibility mode or this is not an ESM
+  // file that has been converted to a CommonJS file using a Babel-
+  // compatible transform (i.e. "__esModule" has not been set), then set
+  // "default" to the CommonJS "module.exports" for node compatibility.
+  isNodeMode || !mod || !mod.__esModule ? __defProp(target, "default", { value: mod, enumerable: true }) : target,
+  mod
+));
+var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
+var security_exports = {};
+__export(security_exports, {
+  register: () => register
+});
+module.exports = __toCommonJS(security_exports);
+var path = __toESM(require("path"));
+var import_config = require("../../config");
+var import_ui = require("../ui");
+function register(program) {
+  const secCmd = program.command("security").description("Security analysis: overview, dashboard export, and vulnerability management").argument("[projectPath]", "Project root path (optional)").option("--refresh-staleness", "Fetch latest version info from registries and show stale dependency count").option("--fail-on <condition>", "Exit 1 if condition is met. Supported: affected").action(async (projectPath, opts) => {
+    const target = path.resolve(projectPath ?? process.cwd());
+    const config = await (0, import_config.loadConfig)(target);
+    if (!config.enableSecurity) {
+      console.error(`
+  ${"\x1B[33m"}\u26A0 Security analysis is disabled.${import_ui.reset}`);
+      console.error(`  ${import_ui.dim}Enable it in .kirograph/config.json:${import_ui.reset} ${import_ui.violet}${import_ui.bold}"enableSecurity": true${import_ui.reset}`);
+      console.error(`  ${import_ui.dim}Then re-run:${import_ui.reset} ${import_ui.violet}${import_ui.bold}kirograph index${import_ui.reset}
+`);
+      process.exit(1);
+    }
+    if (!config.enableArchitecture) {
+      console.error(`
+  ${"\x1B[33m"}\u26A0 Security requires Architecture analysis to be enabled.${import_ui.reset}`);
+      console.error(`  ${import_ui.dim}Enable both in .kirograph/config.json:${import_ui.reset}`);
+      console.error(`    ${import_ui.violet}${import_ui.bold}"enableArchitecture": true${import_ui.reset}`);
+      console.error(`    ${import_ui.violet}${import_ui.bold}"enableSecurity": true${import_ui.reset}`);
+      console.error(`  ${import_ui.dim}Then re-run:${import_ui.reset} ${import_ui.violet}${import_ui.bold}kirograph index${import_ui.reset}
+`);
+      process.exit(1);
+    }
+    if (opts.failOn !== void 0 && opts.failOn !== "affected") {
+      console.error(`  \u2716 Invalid --fail-on value: ${opts.failOn}. Supported: affected`);
+      process.exit(1);
+    }
+    const KiroGraph = (await Promise.resolve().then(() => require("../../index.js"))).default;
+    if (!KiroGraph.isInitialized(target)) {
+      console.error("  \u2716 KiroGraph not initialized. Run: kirograph init");
+      process.exit(1);
+    }
+    const cg = await KiroGraph.open(target);
+    const db = cg.getDatabase();
+    db.applySecuritySchema();
+    const rawDb = db.getRawDb();
+    if (opts.refreshStaleness) {
+      console.error(`  ${import_ui.dim}Fetching latest version info from package registries...${import_ui.reset}`);
+      const { StalenessChecker } = await Promise.resolve().then(() => require("../../security/staleness.js"));
+      const checker = new StalenessChecker(db);
+      const result = await checker.checkAll();
+      console.error(`  ${import_ui.green}\u2713${import_ui.reset} Checked ${import_ui.bold}${result.checked}${import_ui.reset} packages, ${import_ui.bold}${result.stale}${import_ui.reset} stale`);
+      if (result.errors.length > 0) {
+        console.error(`  ${"\x1B[33m"}\u26A0${import_ui.reset} ${result.errors.length} error(s) during registry fetch`);
+      }
+      console.error();
+    }
+    const depCount = rawDb.get(
+      `SELECT COUNT(*) as count FROM sec_dependencies`
+    ) ?? { count: 0 };
+    const vulnCount = rawDb.get(
+      `SELECT COUNT(*) as count FROM sec_vulnerabilities`
+    ) ?? { count: 0 };
+    const verdictRows = rawDb.all(
+      `SELECT verdict, COUNT(*) as count FROM sec_reachability GROUP BY verdict`
+    );
+    const verdicts = {};
+    for (const row of verdictRows) {
+      verdicts[row.verdict] = row.count;
+    }
+    const staleCount = rawDb.get(
+      `SELECT COUNT(*) as count FROM sec_dependencies WHERE vuln_data_stale = 1`
+    ) ?? { count: 0 };
+    console.log(`
+  ${(0, import_ui.section)("Security Overview")}
+`);
+    console.log(`  ${import_ui.dim}Dependencies:${import_ui.reset}          ${import_ui.violet}${import_ui.bold}${depCount.count}${import_ui.reset}`);
+    console.log(`  ${import_ui.dim}Vulnerabilities:${import_ui.reset}       ${import_ui.violet}${import_ui.bold}${vulnCount.count}${import_ui.reset}`);
+    console.log();
+    if (vulnCount.count > 0) {
+      const topCVE = rawDb.get(
+        `SELECT v.cve_id, v.risk_score, d.package_name
+             FROM sec_vulnerabilities v
+             LEFT JOIN edges e ON e.target = v.node_id AND e.kind = 'has_vulnerability'
+             LEFT JOIN sec_dependencies d ON d.node_id = e.source
+             LEFT JOIN sec_reachability r ON r.vulnerability_node_id = v.node_id
+             WHERE r.verdict = 'affected' AND v.risk_score IS NOT NULL
+             ORDER BY v.risk_score DESC NULLS LAST
+             LIMIT 1`
+      );
+      if (topCVE && topCVE.risk_score != null) {
+        const riskColor = topCVE.risk_score >= 7 ? "\x1B[31m" : topCVE.risk_score >= 4 ? "\x1B[33m" : import_ui.dim;
+        const pkgLabel = topCVE.package_name ? ` in ${import_ui.dim}${topCVE.package_name}${import_ui.reset}` : "";
+        console.log(`  ${riskColor}Top risk:${import_ui.reset}              ${import_ui.violet}${import_ui.bold}${topCVE.cve_id}${import_ui.reset} ${riskColor}(Risk: ${topCVE.risk_score.toFixed(1)})${import_ui.reset}${pkgLabel}`);
+        console.log();
+      }
+      console.log(`  ${(0, import_ui.section)("Reachability Verdicts")}
+`);
+      const affected = verdicts["affected"] ?? 0;
+      const notAffected = verdicts["not_affected"] ?? 0;
+      const underInvestigation = verdicts["under_investigation"] ?? 0;
+      const noAnalysis = vulnCount.count - affected - notAffected - underInvestigation;
+      if (affected > 0) {
+        console.log(`  ${"\x1B[31m"}\u25CF${import_ui.reset} Affected:              ${import_ui.bold}${affected}${import_ui.reset}`);
+      }
+      if (notAffected > 0) {
+        console.log(`  ${import_ui.green}\u25CF${import_ui.reset} Not affected:          ${import_ui.bold}${notAffected}${import_ui.reset}`);
+      }
+      if (underInvestigation > 0) {
+        console.log(`  ${"\x1B[33m"}\u25CF${import_ui.reset} Under investigation:   ${import_ui.bold}${underInvestigation}${import_ui.reset}`);
+      }
+      if (noAnalysis > 0) {
+        console.log(`  ${import_ui.dim}\u25CF${import_ui.reset} Pending analysis:      ${import_ui.bold}${noAnalysis}${import_ui.reset}`);
+      }
+      console.log();
+    }
+    if (staleCount.count > 0) {
+      console.log(`  ${"\x1B[33m"}\u26A0${import_ui.reset} ${import_ui.bold}${staleCount.count}${import_ui.reset} ${import_ui.dim}dependenc${staleCount.count === 1 ? "y has" : "ies have"} stale vulnerability data.${import_ui.reset}`);
+      console.log(`  ${import_ui.dim}Run${import_ui.reset} ${import_ui.violet}${import_ui.bold}kirograph vulns --refresh${import_ui.reset} ${import_ui.dim}to update.${import_ui.reset}
+`);
+    }
+    const stalenessDataCount = rawDb.get(
+      `SELECT COUNT(*) as count FROM sec_dependencies WHERE staleness_score IS NOT NULL`
+    ) ?? { count: 0 };
+    if (stalenessDataCount.count > 0) {
+      const staleDepCount = rawDb.get(
+        `SELECT COUNT(*) as count FROM sec_dependencies WHERE staleness_score >= 0.3`
+      ) ?? { count: 0 };
+      console.log(`  ${import_ui.dim}Stale dependencies:${import_ui.reset}    ${staleDepCount.count > 0 ? `${"\x1B[33m"}${import_ui.bold}${staleDepCount.count}${import_ui.reset}` : `${import_ui.green}${import_ui.bold}0${import_ui.reset}`} ${import_ui.dim}of ${stalenessDataCount.count} scored${import_ui.reset}`);
+      if (staleDepCount.count > 0) {
+        console.log(`  ${import_ui.dim}Run${import_ui.reset} ${import_ui.violet}${import_ui.bold}kirograph staleness${import_ui.reset} ${import_ui.dim}for details.${import_ui.reset}`);
+      }
+      console.log();
+    } else if (!opts.refreshStaleness) {
+      console.log(`  ${import_ui.dim}No staleness data.${import_ui.reset} ${import_ui.dim}Run${import_ui.reset} ${import_ui.violet}${import_ui.bold}kirograph security --refresh-staleness${import_ui.reset} ${import_ui.dim}to score dependencies.${import_ui.reset}
+`);
+    }
+    const lastCheck = rawDb.get(
+      `SELECT MIN(last_vuln_check) as oldest FROM sec_dependencies WHERE last_vuln_check IS NOT NULL`
+    )?.oldest;
+    if (lastCheck != null) {
+      const ageMs = Date.now() - lastCheck;
+      const ageDays = ageMs / (1e3 * 60 * 60 * 24);
+      const maxAge = config.securityEnrichMaxAgeDays ?? 7;
+      if (ageDays > maxAge) {
+        console.log(`
+  ${"\x1B[33m"}\u26A0 Vulnerability data is ${Math.floor(ageDays)} days old (max: ${maxAge}).${import_ui.reset}`);
+        console.log(`  ${import_ui.dim}Run${import_ui.reset} ${import_ui.violet}${import_ui.bold}kirograph vulns --refresh${import_ui.reset} ${import_ui.dim}to update.${import_ui.reset}`);
+      }
+    }
+    if (opts.failOn === "affected") {
+      const affectedCount = verdicts["affected"] ?? 0;
+      if (affectedCount > 0) {
+        console.log(`
+  \x1B[31m\u2716\x1B[0m --fail-on affected: ${affectedCount} affected vulnerabilit${affectedCount === 1 ? "y" : "ies"} found. Exiting with code 1.`);
+        cg.close();
+        process.exit(1);
+      }
+    }
+    cg.close();
+  });
+  return secCmd;
+}
+// Annotate the CommonJS export names for ESM import in node:
+0 && (module.exports = {
+  register
+});
+//# sourceMappingURL=security.js.map

package/dist/bin/commands/security.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../src/bin/commands/security.ts"],
+  "sourcesContent": ["import { Command } from 'commander';\nimport * as path from 'path';\nimport { loadConfig } from '../../config';\nimport { dim, reset, violet, bold, green, section } from '../ui';\n\nexport function register(program: Command): Command {\n  const secCmd = program\n    .command('security')\n    .description('Security analysis: overview, dashboard export, and vulnerability management')\n    .argument('[projectPath]', 'Project root path (optional)')\n    .option('--refresh-staleness', 'Fetch latest version info from registries and show stale dependency count')\n    .option('--fail-on <condition>', 'Exit 1 if condition is met. Supported: affected')\n    .action(async (projectPath: string | undefined, opts: { refreshStaleness?: boolean; failOn?: string }) => {\n      const target = path.resolve(projectPath ?? process.cwd());\n      const config = await loadConfig(target);\n\n      if (!config.enableSecurity) {\n        console.error(`\\n  ${'\\x1b[33m'}\u26A0 Security analysis is disabled.${reset}`);\n        console.error(`  ${dim}Enable it in .kirograph/config.json:${reset} ${violet}${bold}\"enableSecurity\": true${reset}`);\n        console.error(`  ${dim}Then re-run:${reset} ${violet}${bold}kirograph index${reset}\\n`);\n        process.exit(1);\n      }\n\n      if (!config.enableArchitecture) {\n        console.error(`\\n  ${'\\x1b[33m'}\u26A0 Security requires Architecture analysis to be enabled.${reset}`);\n        console.error(`  ${dim}Enable both in .kirograph/config.json:${reset}`);\n        console.error(`    ${violet}${bold}\"enableArchitecture\": true${reset}`);\n        console.error(`    ${violet}${bold}\"enableSecurity\": true${reset}`);\n        console.error(`  ${dim}Then re-run:${reset} ${violet}${bold}kirograph index${reset}\\n`);\n        process.exit(1);\n      }\n\n      if (opts.failOn !== undefined && opts.failOn !== 'affected') {\n        console.error(`  \u2716 Invalid --fail-on value: ${opts.failOn}. Supported: affected`);\n        process.exit(1);\n      }\n\n      const KiroGraph = (await Promise.resolve().then(() => require('../../index.js'))).default;\n      if (!KiroGraph.isInitialized(target)) {\n        console.error('  \u2716 KiroGraph not initialized. Run: kirograph init');\n        process.exit(1);\n      }\n\n      const cg = await KiroGraph.open(target);\n      const db = cg.getDatabase();\n      db.applySecuritySchema();\n      const rawDb = db.getRawDb();\n\n      // Optionally refresh staleness data from registries\n      if (opts.refreshStaleness) {\n        console.error(`  ${dim}Fetching latest version info from package registries...${reset}`);\n        const { StalenessChecker } = await Promise.resolve().then(() => require('../../security/staleness.js'));\n        const checker = new StalenessChecker(db);\n        const result = await checker.checkAll();\n        console.error(`  ${green}\u2713${reset} Checked ${bold}${result.checked}${reset} packages, ${bold}${result.stale}${reset} stale`);\n        if (result.errors.length > 0) {\n          console.error(`  ${'\\x1b[33m'}\u26A0${reset} ${result.errors.length} error(s) during registry fetch`);\n        }\n        console.error();\n      }\n\n      // Query dependency counts\n      const depCount: { count: number } = rawDb.get(\n        `SELECT COUNT(*) as count FROM sec_dependencies`,\n      ) ?? { count: 0 };\n\n      // Query vulnerability counts\n      const vulnCount: { count: number } = rawDb.get(\n        `SELECT COUNT(*) as count FROM sec_vulnerabilities`,\n      ) ?? { count: 0 };\n\n      // Query reachability verdict counts\n      const verdictRows: Array<{ verdict: string; count: number }> = rawDb.all(\n        `SELECT verdict, COUNT(*) as count FROM sec_reachability GROUP BY verdict`,\n      );\n      const verdicts: Record<string, number> = {};\n      for (const row of verdictRows) {\n        verdicts[row.verdict] = row.count;\n      }\n\n      // Check for stale data\n      const staleCount: { count: number } = rawDb.get(\n        `SELECT COUNT(*) as count FROM sec_dependencies WHERE vuln_data_stale = 1`,\n      ) ?? { count: 0 };\n\n      // Display overview\n      console.log(`\\n  ${section('Security Overview')}\\n`);\n      console.log(`  ${dim}Dependencies:${reset}          ${violet}${bold}${depCount.count}${reset}`);\n      console.log(`  ${dim}Vulnerabilities:${reset}       ${violet}${bold}${vulnCount.count}${reset}`);\n      console.log();\n\n      if (vulnCount.count > 0) {\n        // Show top-risk CVE when data is available\n        const topCVE: { cve_id: string; risk_score: number | null; package_name: string | null } | undefined =\n          rawDb.get(\n            `SELECT v.cve_id, v.risk_score, d.package_name\n             FROM sec_vulnerabilities v\n             LEFT JOIN edges e ON e.target = v.node_id AND e.kind = 'has_vulnerability'\n             LEFT JOIN sec_dependencies d ON d.node_id = e.source\n             LEFT JOIN sec_reachability r ON r.vulnerability_node_id = v.node_id\n             WHERE r.verdict = 'affected' AND v.risk_score IS NOT NULL\n             ORDER BY v.risk_score DESC NULLS LAST\n             LIMIT 1`,\n          );\n        if (topCVE && topCVE.risk_score != null) {\n          const riskColor = topCVE.risk_score >= 7 ? '\\x1b[31m' : topCVE.risk_score >= 4 ? '\\x1b[33m' : dim;\n          const pkgLabel = topCVE.package_name ? ` in ${dim}${topCVE.package_name}${reset}` : '';\n          console.log(`  ${riskColor}Top risk:${reset}              ${violet}${bold}${topCVE.cve_id}${reset} ${riskColor}(Risk: ${topCVE.risk_score.toFixed(1)})${reset}${pkgLabel}`);\n          console.log();\n        }\n\n        console.log(`  ${section('Reachability Verdicts')}\\n`);\n        const affected = verdicts['affected'] ?? 0;\n        const notAffected = verdicts['not_affected'] ?? 0;\n        const underInvestigation = verdicts['under_investigation'] ?? 0;\n        const noAnalysis = vulnCount.count - affected - notAffected - underInvestigation;\n\n        if (affected > 0) {\n          console.log(`  ${'\\x1b[31m'}\u25CF${reset} Affected:              ${bold}${affected}${reset}`);\n        }\n        if (notAffected > 0) {\n          console.log(`  ${green}\u25CF${reset} Not affected:          ${bold}${notAffected}${reset}`);\n        }\n        if (underInvestigation > 0) {\n          console.log(`  ${'\\x1b[33m'}\u25CF${reset} Under investigation:   ${bold}${underInvestigation}${reset}`);\n        }\n        if (noAnalysis > 0) {\n          console.log(`  ${dim}\u25CF${reset} Pending analysis:      ${bold}${noAnalysis}${reset}`);\n        }\n        console.log();\n      }\n\n      if (staleCount.count > 0) {\n        console.log(`  ${'\\x1b[33m'}\u26A0${reset} ${bold}${staleCount.count}${reset} ${dim}dependenc${staleCount.count === 1 ? 'y has' : 'ies have'} stale vulnerability data.${reset}`);\n        console.log(`  ${dim}Run${reset} ${violet}${bold}kirograph vulns --refresh${reset} ${dim}to update.${reset}\\n`);\n      }\n\n      // Show stale dependency count (version staleness) if data exists\n      const stalenessDataCount: { count: number } = rawDb.get(\n        `SELECT COUNT(*) as count FROM sec_dependencies WHERE staleness_score IS NOT NULL`,\n      ) ?? { count: 0 };\n\n      if (stalenessDataCount.count > 0) {\n        const staleDepCount: { count: number } = rawDb.get(\n          `SELECT COUNT(*) as count FROM sec_dependencies WHERE staleness_score >= 0.3`,\n        ) ?? { count: 0 };\n        console.log(`  ${dim}Stale dependencies:${reset}    ${staleDepCount.count > 0 ? `${'\\x1b[33m'}${bold}${staleDepCount.count}${reset}` : `${green}${bold}0${reset}`} ${dim}of ${stalenessDataCount.count} scored${reset}`);\n        if (staleDepCount.count > 0) {\n          console.log(`  ${dim}Run${reset} ${violet}${bold}kirograph staleness${reset} ${dim}for details.${reset}`);\n        }\n        console.log();\n      } else if (!opts.refreshStaleness) {\n        console.log(`  ${dim}No staleness data.${reset} ${dim}Run${reset} ${violet}${bold}kirograph security --refresh-staleness${reset} ${dim}to score dependencies.${reset}\\n`);\n      }\n\n      // Check if vulnerability data is stale\n      const lastCheck = (rawDb.get(\n        `SELECT MIN(last_vuln_check) as oldest FROM sec_dependencies WHERE last_vuln_check IS NOT NULL`,\n      ) as { oldest: number | null } | undefined)?.oldest;\n      if (lastCheck != null) {\n        const ageMs = Date.now() - lastCheck;\n        const ageDays = ageMs / (1000 * 60 * 60 * 24);\n        const maxAge = config.securityEnrichMaxAgeDays ?? 7;\n        if (ageDays > maxAge) {\n          console.log(`\\n  ${'\\x1b[33m'}\u26A0 Vulnerability data is ${Math.floor(ageDays)} days old (max: ${maxAge}).${reset}`);\n          console.log(`  ${dim}Run${reset} ${violet}${bold}kirograph vulns --refresh${reset} ${dim}to update.${reset}`);\n        }\n      }\n\n      // --fail-on: exit 1 if condition is met (after all output)\n      if (opts.failOn === 'affected') {\n        const affectedCount = verdicts['affected'] ?? 0;\n        if (affectedCount > 0) {\n          console.log(`\\n  \\x1b[31m\u2716\\x1b[0m --fail-on affected: ${affectedCount} affected vulnerabilit${affectedCount === 1 ? 'y' : 'ies'} found. Exiting with code 1.`);\n          cg.close();\n          process.exit(1);\n        }\n      }\n\n      cg.close();\n    });\n\n  return secCmd;\n}\n"],
+  "mappings": ";;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AACA,WAAsB;AACtB,oBAA2B;AAC3B,gBAAyD;AAElD,SAAS,SAAS,SAA2B;AAClD,QAAM,SAAS,QACZ,QAAQ,UAAU,EAClB,YAAY,6EAA6E,EACzF,SAAS,iBAAiB,8BAA8B,EACxD,OAAO,uBAAuB,2EAA2E,EACzG,OAAO,yBAAyB,iDAAiD,EACjF,OAAO,OAAO,aAAiC,SAA0D;AACxG,UAAM,SAAS,KAAK,QAAQ,eAAe,QAAQ,IAAI,CAAC;AACxD,UAAM,SAAS,UAAM,0BAAW,MAAM;AAEtC,QAAI,CAAC,OAAO,gBAAgB;AAC1B,cAAQ,MAAM;AAAA,IAAO,UAAU,wCAAmC,eAAK,EAAE;AACzE,cAAQ,MAAM,KAAK,aAAG,uCAAuC,eAAK,IAAI,gBAAM,GAAG,cAAI,yBAAyB,eAAK,EAAE;AACnH,cAAQ,MAAM,KAAK,aAAG,eAAe,eAAK,IAAI,gBAAM,GAAG,cAAI,kBAAkB,eAAK;AAAA,CAAI;AACtF,cAAQ,KAAK,CAAC;AAAA,IAChB;AAEA,QAAI,CAAC,OAAO,oBAAoB;AAC9B,cAAQ,MAAM;AAAA,IAAO,UAAU,gEAA2D,eAAK,EAAE;AACjG,cAAQ,MAAM,KAAK,aAAG,yCAAyC,eAAK,EAAE;AACtE,cAAQ,MAAM,OAAO,gBAAM,GAAG,cAAI,6BAA6B,eAAK,EAAE;AACtE,cAAQ,MAAM,OAAO,gBAAM,GAAG,cAAI,yBAAyB,eAAK,EAAE;AAClE,cAAQ,MAAM,KAAK,aAAG,eAAe,eAAK,IAAI,gBAAM,GAAG,cAAI,kBAAkB,eAAK;AAAA,CAAI;AACtF,cAAQ,KAAK,CAAC;AAAA,IAChB;AAEA,QAAI,KAAK,WAAW,UAAa,KAAK,WAAW,YAAY;AAC3D,cAAQ,MAAM,qCAAgC,KAAK,MAAM,uBAAuB;AAChF,cAAQ,KAAK,CAAC;AAAA,IAChB;AAEA,UAAM,aAAa,MAAM,QAAQ,QAAQ,EAAE,KAAK,MAAM,QAAQ,gBAAgB,CAAC,GAAG;AAClF,QAAI,CAAC,UAAU,cAAc,MAAM,GAAG;AACpC,cAAQ,MAAM,yDAAoD;AAClE,cAAQ,KAAK,CAAC;AAAA,IAChB;AAEA,UAAM,KAAK,MAAM,UAAU,KAAK,MAAM;AACtC,UAAM,KAAK,GAAG,YAAY;AAC1B,OAAG,oBAAoB;AACvB,UAAM,QAAQ,GAAG,SAAS;AAG1B,QAAI,KAAK,kBAAkB;AACzB,cAAQ,MAAM,KAAK,aAAG,0DAA0D,eAAK,EAAE;AACvF,YAAM,EAAE,iBAAiB,IAAI,MAAM,QAAQ,QAAQ,EAAE,KAAK,MAAM,QAAQ,6BAA6B,CAAC;AACtG,YAAM,UAAU,IAAI,iBAAiB,EAAE;AACvC,YAAM,SAAS,MAAM,QAAQ,SAAS;AACtC,cAAQ,MAAM,KAAK,eAAK,SAAI,eAAK,YAAY,cAAI,GAAG,OAAO,OAAO,GAAG,eAAK,cAAc,cAAI,GAAG,OAAO,KAAK,GAAG,eAAK,QAAQ;AAC3H,UAAI,OAAO,OAAO,SAAS,GAAG;AAC5B,gBAAQ,MAAM,KAAK,UAAU,SAAI,eAAK,IAAI,OAAO,OAAO,MAAM,iCAAiC;AAAA,MACjG;AACA,cAAQ,MAAM;AAAA,IAChB;AAGA,UAAM,WAA8B,MAAM;AAAA,MACxC;AAAA,IACF,KAAK,EAAE,OAAO,EAAE;AAGhB,UAAM,YAA+B,MAAM;AAAA,MACzC;AAAA,IACF,KAAK,EAAE,OAAO,EAAE;AAGhB,UAAM,cAAyD,MAAM;AAAA,MACnE;AAAA,IACF;AACA,UAAM,WAAmC,CAAC;AAC1C,eAAW,OAAO,aAAa;AAC7B,eAAS,IAAI,OAAO,IAAI,IAAI;AAAA,IAC9B;AAGA,UAAM,aAAgC,MAAM;AAAA,MAC1C;AAAA,IACF,KAAK,EAAE,OAAO,EAAE;AAGhB,YAAQ,IAAI;AAAA,QAAO,mBAAQ,mBAAmB,CAAC;AAAA,CAAI;AACnD,YAAQ,IAAI,KAAK,aAAG,gBAAgB,eAAK,aAAa,gBAAM,GAAG,cAAI,GAAG,SAAS,KAAK,GAAG,eAAK,EAAE;AAC9F,YAAQ,IAAI,KAAK,aAAG,mBAAmB,eAAK,UAAU,gBAAM,GAAG,cAAI,GAAG,UAAU,KAAK,GAAG,eAAK,EAAE;AAC/F,YAAQ,IAAI;AAEZ,QAAI,UAAU,QAAQ,GAAG;AAEvB,YAAM,SACJ,MAAM;AAAA,QACJ;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,MAQF;AACF,UAAI,UAAU,OAAO,cAAc,MAAM;AACvC,cAAM,YAAY,OAAO,cAAc,IAAI,aAAa,OAAO,cAAc,IAAI,aAAa;AAC9F,cAAM,WAAW,OAAO,eAAe,OAAO,aAAG,GAAG,OAAO,YAAY,GAAG,eAAK,KAAK;AACpF,gBAAQ,IAAI,KAAK,SAAS,YAAY,eAAK,iBAAiB,gBAAM,GAAG,cAAI,GAAG,OAAO,MAAM,GAAG,eAAK,IAAI,SAAS,UAAU,OAAO,WAAW,QAAQ,CAAC,CAAC,IAAI,eAAK,GAAG,QAAQ,EAAE;AAC1K,gBAAQ,IAAI;AAAA,MACd;AAEA,cAAQ,IAAI,SAAK,mBAAQ,uBAAuB,CAAC;AAAA,CAAI;AACrD,YAAM,WAAW,SAAS,UAAU,KAAK;AACzC,YAAM,cAAc,SAAS,cAAc,KAAK;AAChD,YAAM,qBAAqB,SAAS,qBAAqB,KAAK;AAC9D,YAAM,aAAa,UAAU,QAAQ,WAAW,cAAc;AAE9D,UAAI,WAAW,GAAG;AAChB,gBAAQ,IAAI,KAAK,UAAU,SAAI,eAAK,2BAA2B,cAAI,GAAG,QAAQ,GAAG,eAAK,EAAE;AAAA,MAC1F;AACA,UAAI,cAAc,GAAG;AACnB,gBAAQ,IAAI,KAAK,eAAK,SAAI,eAAK,2BAA2B,cAAI,GAAG,WAAW,GAAG,eAAK,EAAE;AAAA,MACxF;AACA,UAAI,qBAAqB,GAAG;AAC1B,gBAAQ,IAAI,KAAK,UAAU,SAAI,eAAK,2BAA2B,cAAI,GAAG,kBAAkB,GAAG,eAAK,EAAE;AAAA,MACpG;AACA,UAAI,aAAa,GAAG;AAClB,gBAAQ,IAAI,KAAK,aAAG,SAAI,eAAK,2BAA2B,cAAI,GAAG,UAAU,GAAG,eAAK,EAAE;AAAA,MACrF;AACA,cAAQ,IAAI;AAAA,IACd;AAEA,QAAI,WAAW,QAAQ,GAAG;AACxB,cAAQ,IAAI,KAAK,UAAU,SAAI,eAAK,IAAI,cAAI,GAAG,WAAW,KAAK,GAAG,eAAK,IAAI,aAAG,YAAY,WAAW,UAAU,IAAI,UAAU,UAAU,6BAA6B,eAAK,EAAE;AAC3K,cAAQ,IAAI,KAAK,aAAG,MAAM,eAAK,IAAI,gBAAM,GAAG,cAAI,4BAA4B,eAAK,IAAI,aAAG,aAAa,eAAK;AAAA,CAAI;AAAA,IAChH;AAGA,UAAM,qBAAwC,MAAM;AAAA,MAClD;AAAA,IACF,KAAK,EAAE,OAAO,EAAE;AAEhB,QAAI,mBAAmB,QAAQ,GAAG;AAChC,YAAM,gBAAmC,MAAM;AAAA,QAC7C;AAAA,MACF,KAAK,EAAE,OAAO,EAAE;AAChB,cAAQ,IAAI,KAAK,aAAG,sBAAsB,eAAK,OAAO,cAAc,QAAQ,IAAI,GAAG,UAAU,GAAG,cAAI,GAAG,cAAc,KAAK,GAAG,eAAK,KAAK,GAAG,eAAK,GAAG,cAAI,IAAI,eAAK,EAAE,IAAI,aAAG,MAAM,mBAAmB,KAAK,UAAU,eAAK,EAAE;AACvN,UAAI,cAAc,QAAQ,GAAG;AAC3B,gBAAQ,IAAI,KAAK,aAAG,MAAM,eAAK,IAAI,gBAAM,GAAG,cAAI,sBAAsB,eAAK,IAAI,aAAG,eAAe,eAAK,EAAE;AAAA,MAC1G;AACA,cAAQ,IAAI;AAAA,IACd,WAAW,CAAC,KAAK,kBAAkB;AACjC,cAAQ,IAAI,KAAK,aAAG,qBAAqB,eAAK,IAAI,aAAG,MAAM,eAAK,IAAI,gBAAM,GAAG,cAAI,yCAAyC,eAAK,IAAI,aAAG,yBAAyB,eAAK;AAAA,CAAI;AAAA,IAC1K;AAGA,UAAM,YAAa,MAAM;AAAA,MACvB;AAAA,IACF,GAA6C;AAC7C,QAAI,aAAa,MAAM;AACrB,YAAM,QAAQ,KAAK,IAAI,IAAI;AAC3B,YAAM,UAAU,SAAS,MAAO,KAAK,KAAK;AAC1C,YAAM,SAAS,OAAO,4BAA4B;AAClD,UAAI,UAAU,QAAQ;AACpB,gBAAQ,IAAI;AAAA,IAAO,UAAU,gCAA2B,KAAK,MAAM,OAAO,CAAC,mBAAmB,MAAM,KAAK,eAAK,EAAE;AAChH,gBAAQ,IAAI,KAAK,aAAG,MAAM,eAAK,IAAI,gBAAM,GAAG,cAAI,4BAA4B,eAAK,IAAI,aAAG,aAAa,eAAK,EAAE;AAAA,MAC9G;AAAA,IACF;AAGA,QAAI,KAAK,WAAW,YAAY;AAC9B,YAAM,gBAAgB,SAAS,UAAU,KAAK;AAC9C,UAAI,gBAAgB,GAAG;AACrB,gBAAQ,IAAI;AAAA,8CAA4C,aAAa,yBAAyB,kBAAkB,IAAI,MAAM,KAAK,8BAA8B;AAC7J,WAAG,MAAM;AACT,gBAAQ,KAAK,CAAC;AAAA,MAChB;AAAA,IACF;AAEA,OAAG,MAAM;AAAA,EACX,CAAC;AAEH,SAAO;AACT;",
+  "names": []
+}

package/dist/bin/commands/staleness.js

@@ -0,0 +1,144 @@
+"use strict";
+var __create = Object.create;
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __getProtoOf = Object.getPrototypeOf;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __export = (target, all) => {
+  for (var name in all)
+    __defProp(target, name, { get: all[name], enumerable: true });
+};
+var __copyProps = (to, from, except, desc) => {
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (let key of __getOwnPropNames(from))
+      if (!__hasOwnProp.call(to, key) && key !== except)
+        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
+  }
+  return to;
+};
+var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__getProtoOf(mod)) : {}, __copyProps(
+  // If the importer is in node compatibility mode or this is not an ESM
+  // file that has been converted to a CommonJS file using a Babel-
+  // compatible transform (i.e. "__esModule" has not been set), then set
+  // "default" to the CommonJS "module.exports" for node compatibility.
+  isNodeMode || !mod || !mod.__esModule ? __defProp(target, "default", { value: mod, enumerable: true }) : target,
+  mod
+));
+var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
+var staleness_exports = {};
+__export(staleness_exports, {
+  register: () => register
+});
+module.exports = __toCommonJS(staleness_exports);
+var path = __toESM(require("path"));
+var import_config = require("../../config");
+var import_ui = require("../ui");
+function stalenessBar(score) {
+  const filled = Math.round(score * 10);
+  return "\u2588".repeat(filled) + "\u2591".repeat(10 - filled);
+}
+function register(program) {
+  program.command("staleness [projectPath]").description("Check dependency freshness \u2014 identifies packages significantly behind their latest published version").option("--threshold <n>", "Show only packages with staleness_score >= n (default: 0.3)", "0.3").option("--format <fmt>", "Output format: table | json (default: table)", "table").option("--refresh", "Fetch latest version info from registries before listing").action(async (projectPath, opts) => {
+    const target = path.resolve(projectPath ?? process.cwd());
+    const config = await (0, import_config.loadConfig)(target);
+    if (!config.enableSecurity) {
+      console.error(`
+  ${"\x1B[33m"}\u26A0 Security analysis is disabled.${import_ui.reset}`);
+      console.error(`  ${import_ui.dim}Enable it in .kirograph/config.json:${import_ui.reset} ${import_ui.violet}${import_ui.bold}"enableSecurity": true${import_ui.reset}`);
+      console.error(`  ${import_ui.dim}Then re-run:${import_ui.reset} ${import_ui.violet}${import_ui.bold}kirograph index${import_ui.reset}
+`);
+      process.exit(1);
+    }
+    const KiroGraph = (await Promise.resolve().then(() => require("../../index.js"))).default;
+    if (!KiroGraph.isInitialized(target)) {
+      console.error("  \u2716 KiroGraph not initialized. Run: kirograph init");
+      process.exit(1);
+    }
+    const cg = await KiroGraph.open(target);
+    const db = cg.getDatabase();
+    db.applySecuritySchema();
+    const rawDb = db.getRawDb();
+    const threshold = parseFloat(opts.threshold);
+    if (isNaN(threshold) || threshold < 0 || threshold > 1) {
+      console.error(`  \u2716 --threshold must be a number between 0 and 1`);
+      cg.close();
+      process.exit(1);
+    }
+    if (opts.refresh) {
+      console.error(`  ${import_ui.dim}Fetching latest version info from package registries...${import_ui.reset}`);
+      const { StalenessChecker } = await Promise.resolve().then(() => require("../../security/staleness.js"));
+      const checker = new StalenessChecker(db);
+      const result = await checker.checkAll();
+      console.error(`  ${import_ui.green}\u2713${import_ui.reset} Checked ${import_ui.bold}${result.checked}${import_ui.reset} packages, ${import_ui.bold}${result.stale}${import_ui.reset} stale`);
+      if (result.errors.length > 0) {
+        console.error(`  ${"\x1B[33m"}\u26A0${import_ui.reset} ${result.errors.length} error(s) during registry fetch`);
+      }
+      console.error();
+    }
+    const rows = rawDb.all(
+      `SELECT node_id, package_name, ecosystem, resolved_version, declared_constraint,
+                latest_version, latest_published, staleness_score
+         FROM sec_dependencies
+         WHERE staleness_score >= ?
+         ORDER BY staleness_score DESC`,
+      [threshold]
+    );
+    const totalDeps = rawDb.get(
+      `SELECT COUNT(*) as count FROM sec_dependencies`
+    ) ?? { count: 0 };
+    if (opts.format === "json") {
+      console.log(JSON.stringify(rows.map((r) => ({
+        packageName: r.package_name,
+        ecosystem: r.ecosystem,
+        resolvedVersion: r.resolved_version ?? r.declared_constraint,
+        latestVersion: r.latest_version,
+        latestPublished: r.latest_published,
+        stalenessScore: r.staleness_score
+      })), null, 2));
+      cg.close();
+      return;
+    }
+    if (rows.length === 0) {
+      console.log(`
+  ${import_ui.dim}No stale dependencies found (threshold: ${threshold}).${import_ui.reset}`);
+      if (!opts.refresh) {
+        console.log(`  ${import_ui.dim}Run with${import_ui.reset} ${import_ui.violet}${import_ui.bold}--refresh${import_ui.reset} ${import_ui.dim}to fetch latest version data from registries.${import_ui.reset}`);
+      }
+      console.log();
+      cg.close();
+      return;
+    }
+    console.log(`
+  ${import_ui.bold}Stale Dependencies${import_ui.reset}
+`);
+    for (const row of rows) {
+      const resolved = row.resolved_version ?? row.declared_constraint ?? "?";
+      const latest = row.latest_version ?? "?";
+      const score = row.staleness_score ?? 0;
+      const months = row.latest_published ? Math.round((Date.now() - row.latest_published) / (1e3 * 60 * 60 * 24 * 30)) : null;
+      const bar = stalenessBar(score);
+      const scoreStr = score.toFixed(2);
+      let barColor = import_ui.dim;
+      if (score >= 0.7) barColor = "\x1B[31m";
+      else if (score >= 0.4) barColor = "\x1B[33m";
+      const pkgLabel = `${import_ui.violet}${import_ui.bold}${row.package_name}${import_ui.reset} ${import_ui.dim}(${row.ecosystem})${import_ui.reset}`;
+      const versionLabel = `${resolved} \u2192 ${import_ui.green}${latest}${import_ui.reset}`;
+      const monthsLabel = months !== null ? `${months}mo since latest` : "publish date unknown";
+      console.log(`  ${pkgLabel}`);
+      console.log(`    ${versionLabel}  ${import_ui.dim}${monthsLabel}${import_ui.reset}`);
+      console.log(`    ${barColor}${bar}${import_ui.reset} ${import_ui.dim}${scoreStr}${import_ui.reset}`);
+      console.log();
+    }
+    const staleCount = rows.length;
+    const totalCount = totalDeps.count;
+    console.log(`  ${import_ui.bold}${staleCount}${import_ui.reset} of ${import_ui.bold}${totalCount}${import_ui.reset} ${import_ui.dim}dependenc${staleCount === 1 ? "y is" : "ies are"} stale (score >= ${threshold})${import_ui.reset}
+`);
+    cg.close();
+  });
+}
+// Annotate the CommonJS export names for ESM import in node:
+0 && (module.exports = {
+  register
+});
+//# sourceMappingURL=staleness.js.map

package/dist/bin/commands/staleness.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../src/bin/commands/staleness.ts"],
+  "sourcesContent": ["import { Command } from 'commander';\nimport * as path from 'path';\nimport { loadConfig } from '../../config';\nimport { dim, reset, violet, bold, green } from '../ui';\n\n// \u2500\u2500 Staleness bar (10-char proportional) \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\n\nfunction stalenessBar(score: number): string {\n  const filled = Math.round(score * 10);\n  return '\u2588'.repeat(filled) + '\u2591'.repeat(10 - filled);\n}\n\n// \u2500\u2500 JSON output type \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\n\ninterface StalenessRow {\n  node_id: string;\n  package_name: string;\n  ecosystem: string;\n  resolved_version: string | null;\n  declared_constraint: string;\n  latest_version: string | null;\n  latest_published: number | null;\n  staleness_score: number | null;\n}\n\nexport function register(program: Command): void {\n  program\n    .command('staleness [projectPath]')\n    .description('Check dependency freshness \u2014 identifies packages significantly behind their latest published version')\n    .option('--threshold <n>', 'Show only packages with staleness_score >= n (default: 0.3)', '0.3')\n    .option('--format <fmt>', 'Output format: table | json (default: table)', 'table')\n    .option('--refresh', 'Fetch latest version info from registries before listing')\n    .action(async (projectPath: string | undefined, opts: {\n      threshold: string;\n      format: string;\n      refresh?: boolean;\n    }) => {\n      const target = path.resolve(projectPath ?? process.cwd());\n      const config = await loadConfig(target);\n\n      if (!config.enableSecurity) {\n        console.error(`\\n  ${'\\x1b[33m'}\u26A0 Security analysis is disabled.${reset}`);\n        console.error(`  ${dim}Enable it in .kirograph/config.json:${reset} ${violet}${bold}\"enableSecurity\": true${reset}`);\n        console.error(`  ${dim}Then re-run:${reset} ${violet}${bold}kirograph index${reset}\\n`);\n        process.exit(1);\n      }\n\n      const KiroGraph = (await Promise.resolve().then(() => require('../../index.js'))).default;\n      if (!KiroGraph.isInitialized(target)) {\n        console.error('  \u2716 KiroGraph not initialized. Run: kirograph init');\n        process.exit(1);\n      }\n\n      const cg = await KiroGraph.open(target);\n      const db = cg.getDatabase();\n      db.applySecuritySchema();\n      const rawDb = db.getRawDb();\n\n      const threshold = parseFloat(opts.threshold);\n      if (isNaN(threshold) || threshold < 0 || threshold > 1) {\n        console.error(`  \u2716 --threshold must be a number between 0 and 1`);\n        cg.close(); process.exit(1);\n      }\n\n      // Optionally refresh staleness data from registries\n      if (opts.refresh) {\n        console.error(`  ${dim}Fetching latest version info from package registries...${reset}`);\n        const { StalenessChecker } = await Promise.resolve().then(() => require('../../security/staleness.js'));\n        const checker = new StalenessChecker(db);\n        const result = await checker.checkAll();\n        console.error(`  ${green}\u2713${reset} Checked ${bold}${result.checked}${reset} packages, ${bold}${result.stale}${reset} stale`);\n        if (result.errors.length > 0) {\n          console.error(`  ${'\\x1b[33m'}\u26A0${reset} ${result.errors.length} error(s) during registry fetch`);\n        }\n        console.error();\n      }\n\n      // Query dependencies with staleness data\n      const rows: StalenessRow[] = rawDb.all(\n        `SELECT node_id, package_name, ecosystem, resolved_version, declared_constraint,\n                latest_version, latest_published, staleness_score\n         FROM sec_dependencies\n         WHERE staleness_score >= ?\n         ORDER BY staleness_score DESC`,\n        [threshold],\n      );\n\n      const totalDeps: { count: number } = rawDb.get(\n        `SELECT COUNT(*) as count FROM sec_dependencies`,\n      ) ?? { count: 0 };\n\n      if (opts.format === 'json') {\n        console.log(JSON.stringify(rows.map(r => ({\n          packageName: r.package_name,\n          ecosystem: r.ecosystem,\n          resolvedVersion: r.resolved_version ?? r.declared_constraint,\n          latestVersion: r.latest_version,\n          latestPublished: r.latest_published,\n          stalenessScore: r.staleness_score,\n        })), null, 2));\n        cg.close();\n        return;\n      }\n\n      // \u2500\u2500 Table output \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\n\n      if (rows.length === 0) {\n        console.log(`\\n  ${dim}No stale dependencies found (threshold: ${threshold}).${reset}`);\n        if (!opts.refresh) {\n          console.log(`  ${dim}Run with${reset} ${violet}${bold}--refresh${reset} ${dim}to fetch latest version data from registries.${reset}`);\n        }\n        console.log();\n        cg.close();\n        return;\n      }\n\n      console.log(`\\n  ${bold}Stale Dependencies${reset}\\n`);\n\n      for (const row of rows) {\n        const resolved = row.resolved_version ?? row.declared_constraint ?? '?';\n        const latest = row.latest_version ?? '?';\n        const score = row.staleness_score ?? 0;\n        const months = row.latest_published\n          ? Math.round((Date.now() - row.latest_published) / (1000 * 60 * 60 * 24 * 30))\n          : null;\n\n        const bar = stalenessBar(score);\n        const scoreStr = score.toFixed(2);\n\n        // Colour the bar: red >= 0.7, yellow >= 0.4, dim otherwise\n        let barColor = dim;\n        if (score >= 0.7) barColor = '\\x1b[31m';\n        else if (score >= 0.4) barColor = '\\x1b[33m';\n\n        const pkgLabel = `${violet}${bold}${row.package_name}${reset} ${dim}(${row.ecosystem})${reset}`;\n        const versionLabel = `${resolved} \u2192 ${green}${latest}${reset}`;\n        const monthsLabel = months !== null ? `${months}mo since latest` : 'publish date unknown';\n\n        console.log(`  ${pkgLabel}`);\n        console.log(`    ${versionLabel}  ${dim}${monthsLabel}${reset}`);\n        console.log(`    ${barColor}${bar}${reset} ${dim}${scoreStr}${reset}`);\n        console.log();\n      }\n\n      const staleCount = rows.length;\n      const totalCount = totalDeps.count;\n      console.log(`  ${bold}${staleCount}${reset} of ${bold}${totalCount}${reset} ${dim}dependenc${staleCount === 1 ? 'y is' : 'ies are'} stale (score >= ${threshold})${reset}\\n`);\n\n      cg.close();\n    });\n}\n"],
+  "mappings": ";;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AACA,WAAsB;AACtB,oBAA2B;AAC3B,gBAAgD;AAIhD,SAAS,aAAa,OAAuB;AAC3C,QAAM,SAAS,KAAK,MAAM,QAAQ,EAAE;AACpC,SAAO,SAAI,OAAO,MAAM,IAAI,SAAI,OAAO,KAAK,MAAM;AACpD;AAeO,SAAS,SAAS,SAAwB;AAC/C,UACG,QAAQ,yBAAyB,EACjC,YAAY,2GAAsG,EAClH,OAAO,mBAAmB,+DAA+D,KAAK,EAC9F,OAAO,kBAAkB,gDAAgD,OAAO,EAChF,OAAO,aAAa,0DAA0D,EAC9E,OAAO,OAAO,aAAiC,SAI1C;AACJ,UAAM,SAAS,KAAK,QAAQ,eAAe,QAAQ,IAAI,CAAC;AACxD,UAAM,SAAS,UAAM,0BAAW,MAAM;AAEtC,QAAI,CAAC,OAAO,gBAAgB;AAC1B,cAAQ,MAAM;AAAA,IAAO,UAAU,wCAAmC,eAAK,EAAE;AACzE,cAAQ,MAAM,KAAK,aAAG,uCAAuC,eAAK,IAAI,gBAAM,GAAG,cAAI,yBAAyB,eAAK,EAAE;AACnH,cAAQ,MAAM,KAAK,aAAG,eAAe,eAAK,IAAI,gBAAM,GAAG,cAAI,kBAAkB,eAAK;AAAA,CAAI;AACtF,cAAQ,KAAK,CAAC;AAAA,IAChB;AAEA,UAAM,aAAa,MAAM,QAAQ,QAAQ,EAAE,KAAK,MAAM,QAAQ,gBAAgB,CAAC,GAAG;AAClF,QAAI,CAAC,UAAU,cAAc,MAAM,GAAG;AACpC,cAAQ,MAAM,yDAAoD;AAClE,cAAQ,KAAK,CAAC;AAAA,IAChB;AAEA,UAAM,KAAK,MAAM,UAAU,KAAK,MAAM;AACtC,UAAM,KAAK,GAAG,YAAY;AAC1B,OAAG,oBAAoB;AACvB,UAAM,QAAQ,GAAG,SAAS;AAE1B,UAAM,YAAY,WAAW,KAAK,SAAS;AAC3C,QAAI,MAAM,SAAS,KAAK,YAAY,KAAK,YAAY,GAAG;AACtD,cAAQ,MAAM,uDAAkD;AAChE,SAAG,MAAM;AAAG,cAAQ,KAAK,CAAC;AAAA,IAC5B;AAGA,QAAI,KAAK,SAAS;AAChB,cAAQ,MAAM,KAAK,aAAG,0DAA0D,eAAK,EAAE;AACvF,YAAM,EAAE,iBAAiB,IAAI,MAAM,QAAQ,QAAQ,EAAE,KAAK,MAAM,QAAQ,6BAA6B,CAAC;AACtG,YAAM,UAAU,IAAI,iBAAiB,EAAE;AACvC,YAAM,SAAS,MAAM,QAAQ,SAAS;AACtC,cAAQ,MAAM,KAAK,eAAK,SAAI,eAAK,YAAY,cAAI,GAAG,OAAO,OAAO,GAAG,eAAK,cAAc,cAAI,GAAG,OAAO,KAAK,GAAG,eAAK,QAAQ;AAC3H,UAAI,OAAO,OAAO,SAAS,GAAG;AAC5B,gBAAQ,MAAM,KAAK,UAAU,SAAI,eAAK,IAAI,OAAO,OAAO,MAAM,iCAAiC;AAAA,MACjG;AACA,cAAQ,MAAM;AAAA,IAChB;AAGA,UAAM,OAAuB,MAAM;AAAA,MACjC;AAAA;AAAA;AAAA;AAAA;AAAA,MAKA,CAAC,SAAS;AAAA,IACZ;AAEA,UAAM,YAA+B,MAAM;AAAA,MACzC;AAAA,IACF,KAAK,EAAE,OAAO,EAAE;AAEhB,QAAI,KAAK,WAAW,QAAQ;AAC1B,cAAQ,IAAI,KAAK,UAAU,KAAK,IAAI,QAAM;AAAA,QACxC,aAAa,EAAE;AAAA,QACf,WAAW,EAAE;AAAA,QACb,iBAAiB,EAAE,oBAAoB,EAAE;AAAA,QACzC,eAAe,EAAE;AAAA,QACjB,iBAAiB,EAAE;AAAA,QACnB,gBAAgB,EAAE;AAAA,MACpB,EAAE,GAAG,MAAM,CAAC,CAAC;AACb,SAAG,MAAM;AACT;AAAA,IACF;AAIA,QAAI,KAAK,WAAW,GAAG;AACrB,cAAQ,IAAI;AAAA,IAAO,aAAG,2CAA2C,SAAS,KAAK,eAAK,EAAE;AACtF,UAAI,CAAC,KAAK,SAAS;AACjB,gBAAQ,IAAI,KAAK,aAAG,WAAW,eAAK,IAAI,gBAAM,GAAG,cAAI,YAAY,eAAK,IAAI,aAAG,gDAAgD,eAAK,EAAE;AAAA,MACtI;AACA,cAAQ,IAAI;AACZ,SAAG,MAAM;AACT;AAAA,IACF;AAEA,YAAQ,IAAI;AAAA,IAAO,cAAI,qBAAqB,eAAK;AAAA,CAAI;AAErD,eAAW,OAAO,MAAM;AACtB,YAAM,WAAW,IAAI,oBAAoB,IAAI,uBAAuB;AACpE,YAAM,SAAS,IAAI,kBAAkB;AACrC,YAAM,QAAQ,IAAI,mBAAmB;AACrC,YAAM,SAAS,IAAI,mBACf,KAAK,OAAO,KAAK,IAAI,IAAI,IAAI,qBAAqB,MAAO,KAAK,KAAK,KAAK,GAAG,IAC3E;AAEJ,YAAM,MAAM,aAAa,KAAK;AAC9B,YAAM,WAAW,MAAM,QAAQ,CAAC;AAGhC,UAAI,WAAW;AACf,UAAI,SAAS,IAAK,YAAW;AAAA,eACpB,SAAS,IAAK,YAAW;AAElC,YAAM,WAAW,GAAG,gBAAM,GAAG,cAAI,GAAG,IAAI,YAAY,GAAG,eAAK,IAAI,aAAG,IAAI,IAAI,SAAS,IAAI,eAAK;AAC7F,YAAM,eAAe,GAAG,QAAQ,WAAM,eAAK,GAAG,MAAM,GAAG,eAAK;AAC5D,YAAM,cAAc,WAAW,OAAO,GAAG,MAAM,oBAAoB;AAEnE,cAAQ,IAAI,KAAK,QAAQ,EAAE;AAC3B,cAAQ,IAAI,OAAO,YAAY,KAAK,aAAG,GAAG,WAAW,GAAG,eAAK,EAAE;AAC/D,cAAQ,IAAI,OAAO,QAAQ,GAAG,GAAG,GAAG,eAAK,IAAI,aAAG,GAAG,QAAQ,GAAG,eAAK,EAAE;AACrE,cAAQ,IAAI;AAAA,IACd;AAEA,UAAM,aAAa,KAAK;AACxB,UAAM,aAAa,UAAU;AAC7B,YAAQ,IAAI,KAAK,cAAI,GAAG,UAAU,GAAG,eAAK,OAAO,cAAI,GAAG,UAAU,GAAG,eAAK,IAAI,aAAG,YAAY,eAAe,IAAI,SAAS,SAAS,oBAAoB,SAAS,IAAI,eAAK;AAAA,CAAI;AAE5K,OAAG,MAAM;AAAA,EACX,CAAC;AACL;",
+  "names": []
+}

package/dist/bin/commands/status.js

@@ -33,10 +33,15 @@ __export(status_exports, {
 module.exports = __toCommonJS(status_exports);
 var path = __toESM(require("path"));
 var import_ui = require("../ui");
+var import_config = require("../../config");
 function register(program) {
-  program.command("status [projectPath]").description("Show index statistics").action(async (projectPath) => {
-    const KiroGraph = (await Promise.resolve().then(() => require("../../index.js"))).default;
+  program.command("status [projectPath]").description("Show index statistics").option("--integrations", "Show detected and configured platforms").action(async (projectPath, opts) => {
     const target = path.resolve(projectPath ?? process.cwd());
+    if (opts.integrations) {
+      await showIntegrations(target);
+      return;
+    }
+    const KiroGraph = (await Promise.resolve().then(() => require("../../index.js"))).default;
     const cg = await KiroGraph.open(target);
     const stats = await cg.getStats();
     console.log();
@@ -96,10 +101,105 @@ function register(program) {
     } else {
       console.log(`  ${(0, import_ui.label)("Status")}     ${import_ui.dim}disabled${import_ui.reset}`);
     }
+    try {
+      const config = await (0, import_config.loadConfig)(target);
+      if (config.enableSecurity) {
+        const db = cg.getDatabase();
+        db.applySecuritySchema();
+        const rawDb = db.getRawDb();
+        const depCount = rawDb.get("SELECT COUNT(*) as cnt FROM sec_dependencies")?.cnt ?? 0;
+        const vulnCount = rawDb.get("SELECT COUNT(*) as cnt FROM sec_vulnerabilities")?.cnt ?? 0;
+        const affectedCount = rawDb.get("SELECT COUNT(*) as cnt FROM sec_reachability WHERE verdict = 'affected'")?.cnt ?? 0;
+        const notAffectedCount = rawDb.get("SELECT COUNT(*) as cnt FROM sec_reachability WHERE verdict = 'not_affected'")?.cnt ?? 0;
+        const investigatingCount = rawDb.get("SELECT COUNT(*) as cnt FROM sec_reachability WHERE verdict = 'under_investigation'")?.cnt ?? 0;
+        const staleCount = rawDb.get("SELECT COUNT(*) as cnt FROM sec_dependencies WHERE vuln_data_stale = 1")?.cnt ?? 0;
+        console.log();
+        console.log((0, import_ui.section)("  \u{1F512} Security"));
+        console.log(`  ${(0, import_ui.label)("Dependencies")}  ${(0, import_ui.value)(String(depCount))}`);
+        console.log(`  ${(0, import_ui.label)("Vulnerabilities")} ${(0, import_ui.value)(String(vulnCount))}`);
+        if (vulnCount > 0) {
+          const affectedLabel = affectedCount > 0 ? `${"\x1B[31m"}${affectedCount} affected${import_ui.reset}` : `${import_ui.dim}0 affected${import_ui.reset}`;
+          console.log(`  ${(0, import_ui.label)("Affected")}     ${affectedLabel}`);
+          console.log(`  ${(0, import_ui.label)("Not Affected")} ${import_ui.dim}${notAffectedCount}${import_ui.reset}`);
+          console.log(`  ${(0, import_ui.label)("Investigating")} ${import_ui.dim}${investigatingCount}${import_ui.reset}`);
+        }
+        if (staleCount > 0) {
+          console.log(`  ${"\x1B[33m"}\u26A0 ${staleCount} dependenc${staleCount === 1 ? "y has" : "ies have"} stale vulnerability data. Run \`kirograph vulns --refresh\` to update.${import_ui.reset}`);
+        }
+      }
+    } catch {
+    }
     console.log();
     cg.close();
   });
 }
+async function showIntegrations(projectRoot) {
+  const fs = await import("fs");
+  const { detectPlatforms } = await Promise.resolve().then(() => require("../installer/detect.js"));
+  const { readJson, KIROGRAPH_SERVER_NAME } = await Promise.resolve().then(() => require("../installer/common.js"));
+  const detected = detectPlatforms(projectRoot);
+  const home = process.env.HOME || process.env.USERPROFILE || "";
+  const configChecks = {
+    "kiro": { path: path.join(projectRoot, ".kiro", "settings", "mcp.json"), key: "mcpServers" },
+    "claude": { path: path.join(projectRoot, ".mcp.json"), key: "mcpServers" },
+    "cursor": { path: path.join(projectRoot, ".cursor", "mcp.json"), key: "mcpServers" },
+    "windsurf": { path: path.join(home, ".codeium", "windsurf", "mcp_config.json"), key: "mcpServers" },
+    "codex": { path: path.join(projectRoot, ".codex", "hooks.json"), key: "hooks" },
+    "copilot": { path: path.join(projectRoot, ".vscode", "mcp.json"), key: "servers" },
+    "copilot-cli": { path: path.join(home, ".copilot", "mcp-config.json"), key: "servers" },
+    "gemini-cli": { path: path.join(projectRoot, ".gemini", "settings.json"), key: "mcpServers" },
+    "continue": { path: path.join(projectRoot, ".continue", "mcpServers", "kirograph.json"), key: "mcpServers" },
+    "opencode": { path: path.join(projectRoot, ".opencode.json"), key: "mcp" },
+    "antigravity": { path: path.join(home, ".gemini", "antigravity", "mcp_config.json"), key: "mcpServers" },
+    "roo": { path: path.join(projectRoot, ".roo", "mcp.json"), key: "mcpServers" },
+    "warp": { path: path.join(projectRoot, ".warp", ".mcp.json"), key: "mcpServers" },
+    "trae": { path: path.join(projectRoot, ".trae", "mcp.json"), key: "mcpServers" },
+    "amp": { path: path.join(projectRoot, ".amp", "config.json"), key: "mcpServers" },
+    "cline": { path: path.join(projectRoot, ".cline", "mcp_settings.json"), key: "mcpServers" },
+    "qoder": { path: path.join(projectRoot, ".qoder", "mcp.json"), key: "mcpServers" },
+    "qwen": { path: path.join(home, ".qwen", "settings.json"), key: "mcpServers" }
+  };
+  function isConfigured(target) {
+    const check = configChecks[target];
+    if (!check) return false;
+    if (!fs.existsSync(check.path)) return false;
+    const config = readJson(check.path);
+    const container = config[check.key];
+    if (!container) return false;
+    if (typeof container === "object" && !Array.isArray(container)) {
+      return KIROGRAPH_SERVER_NAME in container;
+    }
+    return false;
+  }
+  const configured = detected.filter((d) => isConfigured(d.target));
+  const notConfigured = detected.filter((d) => !isConfigured(d.target));
+  console.log();
+  console.log((0, import_ui.section)("  Integrations"));
+  console.log();
+  if (configured.length > 0) {
+    console.log(`  ${(0, import_ui.label)("Configured:")}`);
+    for (const d of configured) {
+      const check = configChecks[d.target];
+      const configPath = check ? check.path.replace(projectRoot, ".").replace(home, "~") : "";
+      console.log(`    ${import_ui.green}\u2713${import_ui.reset} ${d.label.padEnd(20)} ${import_ui.dim}${configPath}${import_ui.reset}`);
+    }
+  }
+  if (notConfigured.length > 0) {
+    if (configured.length > 0) console.log();
+    console.log(`  ${(0, import_ui.label)("Detected but not configured:")}`);
+    for (const d of notConfigured) {
+      const check = configChecks[d.target];
+      const configPath = check ? check.path.replace(projectRoot, ".").replace(home, "~") : "";
+      console.log(`    ${import_ui.dim}\u25CB${import_ui.reset} ${d.label.padEnd(20)} ${import_ui.dim}${configPath}${import_ui.reset}`);
+    }
+    console.log();
+    console.log(`  ${import_ui.dim}Run \`kirograph install\` to configure detected platforms.${import_ui.reset}`);
+  }
+  if (detected.length === 0) {
+    console.log(`  ${import_ui.dim}No AI coding platforms detected.${import_ui.reset}`);
+  }
+  console.log();
+}
 // Annotate the CommonJS export names for ESM import in node:
 0 && (module.exports = {
   register

package/dist/bin/commands/status.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../src/bin/commands/status.ts"],
-  "sourcesContent": ["import { Command } from 'commander';\nimport * as path from 'path';\nimport { dim, reset, violet, bold, green, label, value, section, renderTable } from '../ui';\n\nexport function register(program: Command): void {\n  program\n    .command('status [projectPath]')\n    .description('Show index statistics')\n    .action(async (projectPath: string | undefined) => {\n      const KiroGraph = (await Promise.resolve().then(() => require('../../index.js'))).default;\n      const target = path.resolve(projectPath ?? process.cwd());\n      const cg = await KiroGraph.open(target);\n      const stats = await cg.getStats();\n\n      console.log();\n      console.log(section('  Graph'));\n      console.log(`  ${label('Files')}      ${value(String(stats.files))}`);\n      console.log(`  ${label('Symbols')}    ${value(String(stats.nodes))}`);\n      console.log(`  ${label('Edges')}      ${value(String(stats.edges))}`);\n\n      if (stats.frameworks.length > 0) {\n        console.log(`  ${label('Frameworks')} ${value(stats.frameworks.join(', '))}`);\n      }\n\n      const kindEntries = Object.entries(stats.nodesByKind).sort((a, b) => b[1] - a[1]);\n      if (kindEntries.length > 0) {\n        console.log(`\\n  ${label('By kind')}`);\n        console.log(renderTable(kindEntries.map(([k, v]) => [k, String(v)])));\n      }\n\n      const langEntries = Object.entries(stats.filesByLanguage ?? {}).sort((a, b) => b[1] - a[1]);\n      if (langEntries.length > 0) {\n        console.log(`\\n  ${label('By language')}`);\n        console.log(renderTable(langEntries.map(([k, v]) => [k, String(v)])));\n      }\n\n      // Sync state\n      const threshold = stats.syncWarningThreshold ?? 10;\n      const pendingFiles: number = stats.pendingFiles ?? 0;\n      const syncRunning: boolean = stats.syncRunning ?? false;\n      console.log();\n      console.log(section('  Sync'));\n      if (syncRunning) {\n        console.log(`  ${'\\x1b[33m'}\u26A0 Sync is currently running in the background.${reset}`);\n      } else {\n        console.log(`  ${label('Status')}     ${dim}idle${reset}`);\n      }\n      if (pendingFiles > 0) {\n        const warn = threshold > 0 && pendingFiles >= threshold;\n        const pendingLabel = warn ? `${'\\x1b[33m'}${pendingFiles} files pending${reset}` : `${dim}${pendingFiles} files pending${reset}`;\n        console.log(`  ${label('Pending')}    ${pendingLabel}`);\n        if (warn) {\n          console.log(`  ${'\\x1b[33m'}\u26A0 Index may be stale. Run \\`kirograph sync\\` to update.${reset}`);\n        }\n      } else {\n        console.log(`  ${label('Pending')}    ${green}up to date${reset}`);\n      }\n\n      console.log();\n      console.log(section('  Semantic Search'));\n      if (stats.embeddingsEnabled) {\n        const engineLabel =\n          stats.semanticEngine === 'sqlite-vec' ? `sqlite-vec  ${dim}(${stats.vecIndexCount} entries in ANN index)${reset}` :\n          stats.semanticEngine === 'orama'      ? `orama  ${dim}(hybrid \u2014 ${stats.vecIndexCount} docs in index)${reset}` :\n          stats.semanticEngine === 'pglite'     ? `pglite+pgvector  ${dim}(hybrid \u2014 ${stats.vecIndexCount} rows in DB)${reset}` :\n          stats.semanticEngine === 'lancedb'    ? `lancedb  ${dim}(${stats.vecIndexCount} entries in ANN index)${reset}` :\n          stats.semanticEngine === 'qdrant'     ? `qdrant  ${dim}(${stats.vecIndexCount} points in collection)${reset}` :\n          stats.semanticEngine === 'typesense'  ? `typesense  ${dim}(${stats.vecIndexCount} documents in collection)${reset}` :\n          `in-process cosine`;\n        const total = stats.embeddableNodeCount > 0 ? stats.embeddableNodeCount : stats.nodes;\n        const displayed = Math.min(stats.embeddingCount, total);\n        const coverage = total > 0 ? Math.min(100, Math.round((stats.embeddingCount / total) * 100)) : 0;\n        console.log(`  ${label('Status')}     ${green}${bold}enabled${reset}`);\n        console.log(`  ${label('Model')}      ${value(stats.embeddingModel)}`);\n        console.log(`  ${label('Engine')}     ${violet}${engineLabel}${reset}`);\n        if (stats.engineFallback) {\n          console.log(`  ${'\\x1b[33m'}\u26A0 engine fallback: ${stats.engineFallback}${reset}`);\n        }\n        console.log(`  ${label('Indexed')}    ${value(`${displayed} / ${total}`)}  ${dim}(${coverage}%)${reset}`);\n      } else {\n        console.log(`  ${label('Status')}     ${dim}disabled${reset}`);\n      }\n\n      console.log();\n      cg.close();\n    });\n}\n"],
-  "mappings": ";;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AACA,WAAsB;AACtB,gBAAoF;AAE7E,SAAS,SAAS,SAAwB;AAC/C,UACG,QAAQ,sBAAsB,EAC9B,YAAY,uBAAuB,EACnC,OAAO,OAAO,gBAAoC;AACjD,UAAM,aAAa,MAAM,QAAQ,QAAQ,EAAE,KAAK,MAAM,QAAQ,gBAAgB,CAAC,GAAG;AAClF,UAAM,SAAS,KAAK,QAAQ,eAAe,QAAQ,IAAI,CAAC;AACxD,UAAM,KAAK,MAAM,UAAU,KAAK,MAAM;AACtC,UAAM,QAAQ,MAAM,GAAG,SAAS;AAEhC,YAAQ,IAAI;AACZ,YAAQ,QAAI,mBAAQ,SAAS,CAAC;AAC9B,YAAQ,IAAI,SAAK,iBAAM,OAAO,CAAC,aAAS,iBAAM,OAAO,MAAM,KAAK,CAAC,CAAC,EAAE;AACpE,YAAQ,IAAI,SAAK,iBAAM,SAAS,CAAC,WAAO,iBAAM,OAAO,MAAM,KAAK,CAAC,CAAC,EAAE;AACpE,YAAQ,IAAI,SAAK,iBAAM,OAAO,CAAC,aAAS,iBAAM,OAAO,MAAM,KAAK,CAAC,CAAC,EAAE;AAEpE,QAAI,MAAM,WAAW,SAAS,GAAG;AAC/B,cAAQ,IAAI,SAAK,iBAAM,YAAY,CAAC,QAAI,iBAAM,MAAM,WAAW,KAAK,IAAI,CAAC,CAAC,EAAE;AAAA,IAC9E;AAEA,UAAM,cAAc,OAAO,QAAQ,MAAM,WAAW,EAAE,KAAK,CAAC,GAAG,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,CAAC;AAChF,QAAI,YAAY,SAAS,GAAG;AAC1B,cAAQ,IAAI;AAAA,QAAO,iBAAM,SAAS,CAAC,EAAE;AACrC,cAAQ,QAAI,uBAAY,YAAY,IAAI,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC;AAAA,IACtE;AAEA,UAAM,cAAc,OAAO,QAAQ,MAAM,mBAAmB,CAAC,CAAC,EAAE,KAAK,CAAC,GAAG,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,CAAC;AAC1F,QAAI,YAAY,SAAS,GAAG;AAC1B,cAAQ,IAAI;AAAA,QAAO,iBAAM,aAAa,CAAC,EAAE;AACzC,cAAQ,QAAI,uBAAY,YAAY,IAAI,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC;AAAA,IACtE;AAGA,UAAM,YAAY,MAAM,wBAAwB;AAChD,UAAM,eAAuB,MAAM,gBAAgB;AACnD,UAAM,cAAuB,MAAM,eAAe;AAClD,YAAQ,IAAI;AACZ,YAAQ,QAAI,mBAAQ,QAAQ,CAAC;AAC7B,QAAI,aAAa;AACf,cAAQ,IAAI,KAAK,UAAU,sDAAiD,eAAK,EAAE;AAAA,IACrF,OAAO;AACL,cAAQ,IAAI,SAAK,iBAAM,QAAQ,CAAC,QAAQ,aAAG,OAAO,eAAK,EAAE;AAAA,IAC3D;AACA,QAAI,eAAe,GAAG;AACpB,YAAM,OAAO,YAAY,KAAK,gBAAgB;AAC9C,YAAM,eAAe,OAAO,GAAG,UAAU,GAAG,YAAY,iBAAiB,eAAK,KAAK,GAAG,aAAG,GAAG,YAAY,iBAAiB,eAAK;AAC9H,cAAQ,IAAI,SAAK,iBAAM,SAAS,CAAC,OAAO,YAAY,EAAE;AACtD,UAAI,MAAM;AACR,gBAAQ,IAAI,KAAK,UAAU,+DAA0D,eAAK,EAAE;AAAA,MAC9F;AAAA,IACF,OAAO;AACL,cAAQ,IAAI,SAAK,iBAAM,SAAS,CAAC,OAAO,eAAK,aAAa,eAAK,EAAE;AAAA,IACnE;AAEA,YAAQ,IAAI;AACZ,YAAQ,QAAI,mBAAQ,mBAAmB,CAAC;AACxC,QAAI,MAAM,mBAAmB;AAC3B,YAAM,cACJ,MAAM,mBAAmB,eAAe,eAAe,aAAG,IAAI,MAAM,aAAa,yBAAyB,eAAK,KAC/G,MAAM,mBAAmB,UAAe,UAAU,aAAG,kBAAa,MAAM,aAAa,kBAAkB,eAAK,KAC5G,MAAM,mBAAmB,WAAe,oBAAoB,aAAG,kBAAa,MAAM,aAAa,eAAe,eAAK,KACnH,MAAM,mBAAmB,YAAe,YAAY,aAAG,IAAI,MAAM,aAAa,yBAAyB,eAAK,KAC5G,MAAM,mBAAmB,WAAe,WAAW,aAAG,IAAI,MAAM,aAAa,yBAAyB,eAAK,KAC3G,MAAM,mBAAmB,cAAe,cAAc,aAAG,IAAI,MAAM,aAAa,4BAA4B,eAAK,KACjH;AACF,YAAM,QAAQ,MAAM,sBAAsB,IAAI,MAAM,sBAAsB,MAAM;AAChF,YAAM,YAAY,KAAK,IAAI,MAAM,gBAAgB,KAAK;AACtD,YAAM,WAAW,QAAQ,IAAI,KAAK,IAAI,KAAK,KAAK,MAAO,MAAM,iBAAiB,QAAS,GAAG,CAAC,IAAI;AAC/F,cAAQ,IAAI,SAAK,iBAAM,QAAQ,CAAC,QAAQ,eAAK,GAAG,cAAI,UAAU,eAAK,EAAE;AACrE,cAAQ,IAAI,SAAK,iBAAM,OAAO,CAAC,aAAS,iBAAM,MAAM,cAAc,CAAC,EAAE;AACrE,cAAQ,IAAI,SAAK,iBAAM,QAAQ,CAAC,QAAQ,gBAAM,GAAG,WAAW,GAAG,eAAK,EAAE;AACtE,UAAI,MAAM,gBAAgB;AACxB,gBAAQ,IAAI,KAAK,UAAU,2BAAsB,MAAM,cAAc,GAAG,eAAK,EAAE;AAAA,MACjF;AACA,cAAQ,IAAI,SAAK,iBAAM,SAAS,CAAC,WAAO,iBAAM,GAAG,SAAS,MAAM,KAAK,EAAE,CAAC,KAAK,aAAG,IAAI,QAAQ,KAAK,eAAK,EAAE;AAAA,IAC1G,OAAO;AACL,cAAQ,IAAI,SAAK,iBAAM,QAAQ,CAAC,QAAQ,aAAG,WAAW,eAAK,EAAE;AAAA,IAC/D;AAEA,YAAQ,IAAI;AACZ,OAAG,MAAM;AAAA,EACX,CAAC;AACL;",
+  "sourcesContent": ["import { Command } from 'commander';\nimport * as path from 'path';\nimport { dim, reset, violet, bold, green, label, value, section, renderTable } from '../ui';\nimport { loadConfig } from '../../config';\n\nexport function register(program: Command): void {\n  program\n    .command('status [projectPath]')\n    .description('Show index statistics')\n    .option('--integrations', 'Show detected and configured platforms')\n    .action(async (projectPath: string | undefined, opts: { integrations?: boolean }) => {\n      const target = path.resolve(projectPath ?? process.cwd());\n\n      if (opts.integrations) {\n        await showIntegrations(target);\n        return;\n      }\n\n      const KiroGraph = (await Promise.resolve().then(() => require('../../index.js'))).default;\n      const cg = await KiroGraph.open(target);\n      const stats = await cg.getStats();\n\n      console.log();\n      console.log(section('  Graph'));\n      console.log(`  ${label('Files')}      ${value(String(stats.files))}`);\n      console.log(`  ${label('Symbols')}    ${value(String(stats.nodes))}`);\n      console.log(`  ${label('Edges')}      ${value(String(stats.edges))}`);\n\n      if (stats.frameworks.length > 0) {\n        console.log(`  ${label('Frameworks')} ${value(stats.frameworks.join(', '))}`);\n      }\n\n      const kindEntries = Object.entries(stats.nodesByKind).sort((a, b) => b[1] - a[1]);\n      if (kindEntries.length > 0) {\n        console.log(`\\n  ${label('By kind')}`);\n        console.log(renderTable(kindEntries.map(([k, v]) => [k, String(v)])));\n      }\n\n      const langEntries = Object.entries(stats.filesByLanguage ?? {}).sort((a, b) => b[1] - a[1]);\n      if (langEntries.length > 0) {\n        console.log(`\\n  ${label('By language')}`);\n        console.log(renderTable(langEntries.map(([k, v]) => [k, String(v)])));\n      }\n\n      // Sync state\n      const threshold = stats.syncWarningThreshold ?? 10;\n      const pendingFiles: number = stats.pendingFiles ?? 0;\n      const syncRunning: boolean = stats.syncRunning ?? false;\n      console.log();\n      console.log(section('  Sync'));\n      if (syncRunning) {\n        console.log(`  ${'\\x1b[33m'}\u26A0 Sync is currently running in the background.${reset}`);\n      } else {\n        console.log(`  ${label('Status')}     ${dim}idle${reset}`);\n      }\n      if (pendingFiles > 0) {\n        const warn = threshold > 0 && pendingFiles >= threshold;\n        const pendingLabel = warn ? `${'\\x1b[33m'}${pendingFiles} files pending${reset}` : `${dim}${pendingFiles} files pending${reset}`;\n        console.log(`  ${label('Pending')}    ${pendingLabel}`);\n        if (warn) {\n          console.log(`  ${'\\x1b[33m'}\u26A0 Index may be stale. Run \\`kirograph sync\\` to update.${reset}`);\n        }\n      } else {\n        console.log(`  ${label('Pending')}    ${green}up to date${reset}`);\n      }\n\n      console.log();\n      console.log(section('  Semantic Search'));\n      if (stats.embeddingsEnabled) {\n        const engineLabel =\n          stats.semanticEngine === 'sqlite-vec' ? `sqlite-vec  ${dim}(${stats.vecIndexCount} entries in ANN index)${reset}` :\n          stats.semanticEngine === 'orama'      ? `orama  ${dim}(hybrid \u2014 ${stats.vecIndexCount} docs in index)${reset}` :\n          stats.semanticEngine === 'pglite'     ? `pglite+pgvector  ${dim}(hybrid \u2014 ${stats.vecIndexCount} rows in DB)${reset}` :\n          stats.semanticEngine === 'lancedb'    ? `lancedb  ${dim}(${stats.vecIndexCount} entries in ANN index)${reset}` :\n          stats.semanticEngine === 'qdrant'     ? `qdrant  ${dim}(${stats.vecIndexCount} points in collection)${reset}` :\n          stats.semanticEngine === 'typesense'  ? `typesense  ${dim}(${stats.vecIndexCount} documents in collection)${reset}` :\n          `in-process cosine`;\n        const total = stats.embeddableNodeCount > 0 ? stats.embeddableNodeCount : stats.nodes;\n        const displayed = Math.min(stats.embeddingCount, total);\n        const coverage = total > 0 ? Math.min(100, Math.round((stats.embeddingCount / total) * 100)) : 0;\n        console.log(`  ${label('Status')}     ${green}${bold}enabled${reset}`);\n        console.log(`  ${label('Model')}      ${value(stats.embeddingModel)}`);\n        console.log(`  ${label('Engine')}     ${violet}${engineLabel}${reset}`);\n        if (stats.engineFallback) {\n          console.log(`  ${'\\x1b[33m'}\u26A0 engine fallback: ${stats.engineFallback}${reset}`);\n        }\n        console.log(`  ${label('Indexed')}    ${value(`${displayed} / ${total}`)}  ${dim}(${coverage}%)${reset}`);\n      } else {\n        console.log(`  ${label('Status')}     ${dim}disabled${reset}`);\n      }\n\n      // Security stats (conditional on enableSecurity)\n      try {\n        const config = await loadConfig(target);\n        if (config.enableSecurity) {\n          const db = cg.getDatabase();\n          db.applySecuritySchema();\n          const rawDb = db.getRawDb();\n\n          const depCount: number = rawDb.get('SELECT COUNT(*) as cnt FROM sec_dependencies')?.cnt ?? 0;\n          const vulnCount: number = rawDb.get('SELECT COUNT(*) as cnt FROM sec_vulnerabilities')?.cnt ?? 0;\n          const affectedCount: number = rawDb.get(\"SELECT COUNT(*) as cnt FROM sec_reachability WHERE verdict = 'affected'\")?.cnt ?? 0;\n          const notAffectedCount: number = rawDb.get(\"SELECT COUNT(*) as cnt FROM sec_reachability WHERE verdict = 'not_affected'\")?.cnt ?? 0;\n          const investigatingCount: number = rawDb.get(\"SELECT COUNT(*) as cnt FROM sec_reachability WHERE verdict = 'under_investigation'\")?.cnt ?? 0;\n          const staleCount: number = rawDb.get('SELECT COUNT(*) as cnt FROM sec_dependencies WHERE vuln_data_stale = 1')?.cnt ?? 0;\n\n          console.log();\n          console.log(section('  \uD83D\uDD12 Security'));\n          console.log(`  ${label('Dependencies')}  ${value(String(depCount))}`);\n          console.log(`  ${label('Vulnerabilities')} ${value(String(vulnCount))}`);\n\n          if (vulnCount > 0) {\n            const affectedLabel = affectedCount > 0\n              ? `${'\\x1b[31m'}${affectedCount} affected${reset}`\n              : `${dim}0 affected${reset}`;\n            console.log(`  ${label('Affected')}     ${affectedLabel}`);\n            console.log(`  ${label('Not Affected')} ${dim}${notAffectedCount}${reset}`);\n            console.log(`  ${label('Investigating')} ${dim}${investigatingCount}${reset}`);\n          }\n\n          if (staleCount > 0) {\n            console.log(`  ${'\\x1b[33m'}\u26A0 ${staleCount} dependenc${staleCount === 1 ? 'y has' : 'ies have'} stale vulnerability data. Run \\`kirograph vulns --refresh\\` to update.${reset}`);\n          }\n        }\n      } catch { /* non-critical */ }\n\n      console.log();\n      cg.close();\n    });\n}\n\nasync function showIntegrations(projectRoot: string): Promise<void> {\n  const fs = await import('fs');\n  const { detectPlatforms } = await Promise.resolve().then(() => require('../installer/detect.js'));\n  const { readJson, KIROGRAPH_SERVER_NAME } = await Promise.resolve().then(() => require('../installer/common.js'));\n\n  const detected = detectPlatforms(projectRoot);\n  const home = process.env.HOME || process.env.USERPROFILE || '';\n\n  // Map of target \u2192 config path to check if kirograph is configured\n  const configChecks: Record<string, { path: string; key: string }> = {\n    'kiro': { path: path.join(projectRoot, '.kiro', 'settings', 'mcp.json'), key: 'mcpServers' },\n    'claude': { path: path.join(projectRoot, '.mcp.json'), key: 'mcpServers' },\n    'cursor': { path: path.join(projectRoot, '.cursor', 'mcp.json'), key: 'mcpServers' },\n    'windsurf': { path: path.join(home, '.codeium', 'windsurf', 'mcp_config.json'), key: 'mcpServers' },\n    'codex': { path: path.join(projectRoot, '.codex', 'hooks.json'), key: 'hooks' },\n    'copilot': { path: path.join(projectRoot, '.vscode', 'mcp.json'), key: 'servers' },\n    'copilot-cli': { path: path.join(home, '.copilot', 'mcp-config.json'), key: 'servers' },\n    'gemini-cli': { path: path.join(projectRoot, '.gemini', 'settings.json'), key: 'mcpServers' },\n    'continue': { path: path.join(projectRoot, '.continue', 'mcpServers', 'kirograph.json'), key: 'mcpServers' },\n    'opencode': { path: path.join(projectRoot, '.opencode.json'), key: 'mcp' },\n    'antigravity': { path: path.join(home, '.gemini', 'antigravity', 'mcp_config.json'), key: 'mcpServers' },\n    'roo': { path: path.join(projectRoot, '.roo', 'mcp.json'), key: 'mcpServers' },\n    'warp': { path: path.join(projectRoot, '.warp', '.mcp.json'), key: 'mcpServers' },\n    'trae': { path: path.join(projectRoot, '.trae', 'mcp.json'), key: 'mcpServers' },\n    'amp': { path: path.join(projectRoot, '.amp', 'config.json'), key: 'mcpServers' },\n    'cline': { path: path.join(projectRoot, '.cline', 'mcp_settings.json'), key: 'mcpServers' },\n    'qoder': { path: path.join(projectRoot, '.qoder', 'mcp.json'), key: 'mcpServers' },\n    'qwen': { path: path.join(home, '.qwen', 'settings.json'), key: 'mcpServers' },\n  };\n\n  function isConfigured(target: string): boolean {\n    const check = configChecks[target];\n    if (!check) return false;\n    if (!fs.existsSync(check.path)) return false;\n    const config = readJson(check.path);\n    const container = config[check.key];\n    if (!container) return false;\n    if (typeof container === 'object' && !Array.isArray(container)) {\n      return KIROGRAPH_SERVER_NAME in container;\n    }\n    return false;\n  }\n\n  const configured = detected.filter(d => isConfigured(d.target));\n  const notConfigured = detected.filter(d => !isConfigured(d.target));\n\n  console.log();\n  console.log(section('  Integrations'));\n  console.log();\n\n  if (configured.length > 0) {\n    console.log(`  ${label('Configured:')}`);\n    for (const d of configured) {\n      const check = configChecks[d.target];\n      const configPath = check ? check.path.replace(projectRoot, '.').replace(home, '~') : '';\n      console.log(`    ${green}\u2713${reset} ${d.label.padEnd(20)} ${dim}${configPath}${reset}`);\n    }\n  }\n\n  if (notConfigured.length > 0) {\n    if (configured.length > 0) console.log();\n    console.log(`  ${label('Detected but not configured:')}`);\n    for (const d of notConfigured) {\n      const check = configChecks[d.target];\n      const configPath = check ? check.path.replace(projectRoot, '.').replace(home, '~') : '';\n      console.log(`    ${dim}\u25CB${reset} ${d.label.padEnd(20)} ${dim}${configPath}${reset}`);\n    }\n    console.log();\n    console.log(`  ${dim}Run \\`kirograph install\\` to configure detected platforms.${reset}`);\n  }\n\n  if (detected.length === 0) {\n    console.log(`  ${dim}No AI coding platforms detected.${reset}`);\n  }\n\n  console.log();\n}\n"],
+  "mappings": ";;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AACA,WAAsB;AACtB,gBAAoF;AACpF,oBAA2B;AAEpB,SAAS,SAAS,SAAwB;AAC/C,UACG,QAAQ,sBAAsB,EAC9B,YAAY,uBAAuB,EACnC,OAAO,kBAAkB,wCAAwC,EACjE,OAAO,OAAO,aAAiC,SAAqC;AACnF,UAAM,SAAS,KAAK,QAAQ,eAAe,QAAQ,IAAI,CAAC;AAExD,QAAI,KAAK,cAAc;AACrB,YAAM,iBAAiB,MAAM;AAC7B;AAAA,IACF;AAEA,UAAM,aAAa,MAAM,QAAQ,QAAQ,EAAE,KAAK,MAAM,QAAQ,gBAAgB,CAAC,GAAG;AAClF,UAAM,KAAK,MAAM,UAAU,KAAK,MAAM;AACtC,UAAM,QAAQ,MAAM,GAAG,SAAS;AAEhC,YAAQ,IAAI;AACZ,YAAQ,QAAI,mBAAQ,SAAS,CAAC;AAC9B,YAAQ,IAAI,SAAK,iBAAM,OAAO,CAAC,aAAS,iBAAM,OAAO,MAAM,KAAK,CAAC,CAAC,EAAE;AACpE,YAAQ,IAAI,SAAK,iBAAM,SAAS,CAAC,WAAO,iBAAM,OAAO,MAAM,KAAK,CAAC,CAAC,EAAE;AACpE,YAAQ,IAAI,SAAK,iBAAM,OAAO,CAAC,aAAS,iBAAM,OAAO,MAAM,KAAK,CAAC,CAAC,EAAE;AAEpE,QAAI,MAAM,WAAW,SAAS,GAAG;AAC/B,cAAQ,IAAI,SAAK,iBAAM,YAAY,CAAC,QAAI,iBAAM,MAAM,WAAW,KAAK,IAAI,CAAC,CAAC,EAAE;AAAA,IAC9E;AAEA,UAAM,cAAc,OAAO,QAAQ,MAAM,WAAW,EAAE,KAAK,CAAC,GAAG,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,CAAC;AAChF,QAAI,YAAY,SAAS,GAAG;AAC1B,cAAQ,IAAI;AAAA,QAAO,iBAAM,SAAS,CAAC,EAAE;AACrC,cAAQ,QAAI,uBAAY,YAAY,IAAI,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC;AAAA,IACtE;AAEA,UAAM,cAAc,OAAO,QAAQ,MAAM,mBAAmB,CAAC,CAAC,EAAE,KAAK,CAAC,GAAG,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,CAAC;AAC1F,QAAI,YAAY,SAAS,GAAG;AAC1B,cAAQ,IAAI;AAAA,QAAO,iBAAM,aAAa,CAAC,EAAE;AACzC,cAAQ,QAAI,uBAAY,YAAY,IAAI,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC;AAAA,IACtE;AAGA,UAAM,YAAY,MAAM,wBAAwB;AAChD,UAAM,eAAuB,MAAM,gBAAgB;AACnD,UAAM,cAAuB,MAAM,eAAe;AAClD,YAAQ,IAAI;AACZ,YAAQ,QAAI,mBAAQ,QAAQ,CAAC;AAC7B,QAAI,aAAa;AACf,cAAQ,IAAI,KAAK,UAAU,sDAAiD,eAAK,EAAE;AAAA,IACrF,OAAO;AACL,cAAQ,IAAI,SAAK,iBAAM,QAAQ,CAAC,QAAQ,aAAG,OAAO,eAAK,EAAE;AAAA,IAC3D;AACA,QAAI,eAAe,GAAG;AACpB,YAAM,OAAO,YAAY,KAAK,gBAAgB;AAC9C,YAAM,eAAe,OAAO,GAAG,UAAU,GAAG,YAAY,iBAAiB,eAAK,KAAK,GAAG,aAAG,GAAG,YAAY,iBAAiB,eAAK;AAC9H,cAAQ,IAAI,SAAK,iBAAM,SAAS,CAAC,OAAO,YAAY,EAAE;AACtD,UAAI,MAAM;AACR,gBAAQ,IAAI,KAAK,UAAU,+DAA0D,eAAK,EAAE;AAAA,MAC9F;AAAA,IACF,OAAO;AACL,cAAQ,IAAI,SAAK,iBAAM,SAAS,CAAC,OAAO,eAAK,aAAa,eAAK,EAAE;AAAA,IACnE;AAEA,YAAQ,IAAI;AACZ,YAAQ,QAAI,mBAAQ,mBAAmB,CAAC;AACxC,QAAI,MAAM,mBAAmB;AAC3B,YAAM,cACJ,MAAM,mBAAmB,eAAe,eAAe,aAAG,IAAI,MAAM,aAAa,yBAAyB,eAAK,KAC/G,MAAM,mBAAmB,UAAe,UAAU,aAAG,kBAAa,MAAM,aAAa,kBAAkB,eAAK,KAC5G,MAAM,mBAAmB,WAAe,oBAAoB,aAAG,kBAAa,MAAM,aAAa,eAAe,eAAK,KACnH,MAAM,mBAAmB,YAAe,YAAY,aAAG,IAAI,MAAM,aAAa,yBAAyB,eAAK,KAC5G,MAAM,mBAAmB,WAAe,WAAW,aAAG,IAAI,MAAM,aAAa,yBAAyB,eAAK,KAC3G,MAAM,mBAAmB,cAAe,cAAc,aAAG,IAAI,MAAM,aAAa,4BAA4B,eAAK,KACjH;AACF,YAAM,QAAQ,MAAM,sBAAsB,IAAI,MAAM,sBAAsB,MAAM;AAChF,YAAM,YAAY,KAAK,IAAI,MAAM,gBAAgB,KAAK;AACtD,YAAM,WAAW,QAAQ,IAAI,KAAK,IAAI,KAAK,KAAK,MAAO,MAAM,iBAAiB,QAAS,GAAG,CAAC,IAAI;AAC/F,cAAQ,IAAI,SAAK,iBAAM,QAAQ,CAAC,QAAQ,eAAK,GAAG,cAAI,UAAU,eAAK,EAAE;AACrE,cAAQ,IAAI,SAAK,iBAAM,OAAO,CAAC,aAAS,iBAAM,MAAM,cAAc,CAAC,EAAE;AACrE,cAAQ,IAAI,SAAK,iBAAM,QAAQ,CAAC,QAAQ,gBAAM,GAAG,WAAW,GAAG,eAAK,EAAE;AACtE,UAAI,MAAM,gBAAgB;AACxB,gBAAQ,IAAI,KAAK,UAAU,2BAAsB,MAAM,cAAc,GAAG,eAAK,EAAE;AAAA,MACjF;AACA,cAAQ,IAAI,SAAK,iBAAM,SAAS,CAAC,WAAO,iBAAM,GAAG,SAAS,MAAM,KAAK,EAAE,CAAC,KAAK,aAAG,IAAI,QAAQ,KAAK,eAAK,EAAE;AAAA,IAC1G,OAAO;AACL,cAAQ,IAAI,SAAK,iBAAM,QAAQ,CAAC,QAAQ,aAAG,WAAW,eAAK,EAAE;AAAA,IAC/D;AAGA,QAAI;AACF,YAAM,SAAS,UAAM,0BAAW,MAAM;AACtC,UAAI,OAAO,gBAAgB;AACzB,cAAM,KAAK,GAAG,YAAY;AAC1B,WAAG,oBAAoB;AACvB,cAAM,QAAQ,GAAG,SAAS;AAE1B,cAAM,WAAmB,MAAM,IAAI,8CAA8C,GAAG,OAAO;AAC3F,cAAM,YAAoB,MAAM,IAAI,iDAAiD,GAAG,OAAO;AAC/F,cAAM,gBAAwB,MAAM,IAAI,yEAAyE,GAAG,OAAO;AAC3H,cAAM,mBAA2B,MAAM,IAAI,6EAA6E,GAAG,OAAO;AAClI,cAAM,qBAA6B,MAAM,IAAI,oFAAoF,GAAG,OAAO;AAC3I,cAAM,aAAqB,MAAM,IAAI,wEAAwE,GAAG,OAAO;AAEvH,gBAAQ,IAAI;AACZ,gBAAQ,QAAI,mBAAQ,sBAAe,CAAC;AACpC,gBAAQ,IAAI,SAAK,iBAAM,cAAc,CAAC,SAAK,iBAAM,OAAO,QAAQ,CAAC,CAAC,EAAE;AACpE,gBAAQ,IAAI,SAAK,iBAAM,iBAAiB,CAAC,QAAI,iBAAM,OAAO,SAAS,CAAC,CAAC,EAAE;AAEvE,YAAI,YAAY,GAAG;AACjB,gBAAM,gBAAgB,gBAAgB,IAClC,GAAG,UAAU,GAAG,aAAa,YAAY,eAAK,KAC9C,GAAG,aAAG,aAAa,eAAK;AAC5B,kBAAQ,IAAI,SAAK,iBAAM,UAAU,CAAC,QAAQ,aAAa,EAAE;AACzD,kBAAQ,IAAI,SAAK,iBAAM,cAAc,CAAC,IAAI,aAAG,GAAG,gBAAgB,GAAG,eAAK,EAAE;AAC1E,kBAAQ,IAAI,SAAK,iBAAM,eAAe,CAAC,IAAI,aAAG,GAAG,kBAAkB,GAAG,eAAK,EAAE;AAAA,QAC/E;AAEA,YAAI,aAAa,GAAG;AAClB,kBAAQ,IAAI,KAAK,UAAU,UAAK,UAAU,aAAa,eAAe,IAAI,UAAU,UAAU,0EAA0E,eAAK,EAAE;AAAA,QACjL;AAAA,MACF;AAAA,IACF,QAAQ;AAAA,IAAqB;AAE7B,YAAQ,IAAI;AACZ,OAAG,MAAM;AAAA,EACX,CAAC;AACL;AAEA,eAAe,iBAAiB,aAAoC;AAClE,QAAM,KAAK,MAAM,OAAO,IAAI;AAC5B,QAAM,EAAE,gBAAgB,IAAI,MAAM,QAAQ,QAAQ,EAAE,KAAK,MAAM,QAAQ,wBAAwB,CAAC;AAChG,QAAM,EAAE,UAAU,sBAAsB,IAAI,MAAM,QAAQ,QAAQ,EAAE,KAAK,MAAM,QAAQ,wBAAwB,CAAC;AAEhH,QAAM,WAAW,gBAAgB,WAAW;AAC5C,QAAM,OAAO,QAAQ,IAAI,QAAQ,QAAQ,IAAI,eAAe;AAG5D,QAAM,eAA8D;AAAA,IAClE,QAAQ,EAAE,MAAM,KAAK,KAAK,aAAa,SAAS,YAAY,UAAU,GAAG,KAAK,aAAa;AAAA,IAC3F,UAAU,EAAE,MAAM,KAAK,KAAK,aAAa,WAAW,GAAG,KAAK,aAAa;AAAA,IACzE,UAAU,EAAE,MAAM,KAAK,KAAK,aAAa,WAAW,UAAU,GAAG,KAAK,aAAa;AAAA,IACnF,YAAY,EAAE,MAAM,KAAK,KAAK,MAAM,YAAY,YAAY,iBAAiB,GAAG,KAAK,aAAa;AAAA,IAClG,SAAS,EAAE,MAAM,KAAK,KAAK,aAAa,UAAU,YAAY,GAAG,KAAK,QAAQ;AAAA,IAC9E,WAAW,EAAE,MAAM,KAAK,KAAK,aAAa,WAAW,UAAU,GAAG,KAAK,UAAU;AAAA,IACjF,eAAe,EAAE,MAAM,KAAK,KAAK,MAAM,YAAY,iBAAiB,GAAG,KAAK,UAAU;AAAA,IACtF,cAAc,EAAE,MAAM,KAAK,KAAK,aAAa,WAAW,eAAe,GAAG,KAAK,aAAa;AAAA,IAC5F,YAAY,EAAE,MAAM,KAAK,KAAK,aAAa,aAAa,cAAc,gBAAgB,GAAG,KAAK,aAAa;AAAA,IAC3G,YAAY,EAAE,MAAM,KAAK,KAAK,aAAa,gBAAgB,GAAG,KAAK,MAAM;AAAA,IACzE,eAAe,EAAE,MAAM,KAAK,KAAK,MAAM,WAAW,eAAe,iBAAiB,GAAG,KAAK,aAAa;AAAA,IACvG,OAAO,EAAE,MAAM,KAAK,KAAK,aAAa,QAAQ,UAAU,GAAG,KAAK,aAAa;AAAA,IAC7E,QAAQ,EAAE,MAAM,KAAK,KAAK,aAAa,SAAS,WAAW,GAAG,KAAK,aAAa;AAAA,IAChF,QAAQ,EAAE,MAAM,KAAK,KAAK,aAAa,SAAS,UAAU,GAAG,KAAK,aAAa;AAAA,IAC/E,OAAO,EAAE,MAAM,KAAK,KAAK,aAAa,QAAQ,aAAa,GAAG,KAAK,aAAa;AAAA,IAChF,SAAS,EAAE,MAAM,KAAK,KAAK,aAAa,UAAU,mBAAmB,GAAG,KAAK,aAAa;AAAA,IAC1F,SAAS,EAAE,MAAM,KAAK,KAAK,aAAa,UAAU,UAAU,GAAG,KAAK,aAAa;AAAA,IACjF,QAAQ,EAAE,MAAM,KAAK,KAAK,MAAM,SAAS,eAAe,GAAG,KAAK,aAAa;AAAA,EAC/E;AAEA,WAAS,aAAa,QAAyB;AAC7C,UAAM,QAAQ,aAAa,MAAM;AACjC,QAAI,CAAC,MAAO,QAAO;AACnB,QAAI,CAAC,GAAG,WAAW,MAAM,IAAI,EAAG,QAAO;AACvC,UAAM,SAAS,SAAS,MAAM,IAAI;AAClC,UAAM,YAAY,OAAO,MAAM,GAAG;AAClC,QAAI,CAAC,UAAW,QAAO;AACvB,QAAI,OAAO,cAAc,YAAY,CAAC,MAAM,QAAQ,SAAS,GAAG;AAC9D,aAAO,yBAAyB;AAAA,IAClC;AACA,WAAO;AAAA,EACT;AAEA,QAAM,aAAa,SAAS,OAAO,OAAK,aAAa,EAAE,MAAM,CAAC;AAC9D,QAAM,gBAAgB,SAAS,OAAO,OAAK,CAAC,aAAa,EAAE,MAAM,CAAC;AAElE,UAAQ,IAAI;AACZ,UAAQ,QAAI,mBAAQ,gBAAgB,CAAC;AACrC,UAAQ,IAAI;AAEZ,MAAI,WAAW,SAAS,GAAG;AACzB,YAAQ,IAAI,SAAK,iBAAM,aAAa,CAAC,EAAE;AACvC,eAAW,KAAK,YAAY;AAC1B,YAAM,QAAQ,aAAa,EAAE,MAAM;AACnC,YAAM,aAAa,QAAQ,MAAM,KAAK,QAAQ,aAAa,GAAG,EAAE,QAAQ,MAAM,GAAG,IAAI;AACrF,cAAQ,IAAI,OAAO,eAAK,SAAI,eAAK,IAAI,EAAE,MAAM,OAAO,EAAE,CAAC,IAAI,aAAG,GAAG,UAAU,GAAG,eAAK,EAAE;AAAA,IACvF;AAAA,EACF;AAEA,MAAI,cAAc,SAAS,GAAG;AAC5B,QAAI,WAAW,SAAS,EAAG,SAAQ,IAAI;AACvC,YAAQ,IAAI,SAAK,iBAAM,8BAA8B,CAAC,EAAE;AACxD,eAAW,KAAK,eAAe;AAC7B,YAAM,QAAQ,aAAa,EAAE,MAAM;AACnC,YAAM,aAAa,QAAQ,MAAM,KAAK,QAAQ,aAAa,GAAG,EAAE,QAAQ,MAAM,GAAG,IAAI;AACrF,cAAQ,IAAI,OAAO,aAAG,SAAI,eAAK,IAAI,EAAE,MAAM,OAAO,EAAE,CAAC,IAAI,aAAG,GAAG,UAAU,GAAG,eAAK,EAAE;AAAA,IACrF;AACA,YAAQ,IAAI;AACZ,YAAQ,IAAI,KAAK,aAAG,6DAA6D,eAAK,EAAE;AAAA,EAC1F;AAEA,MAAI,SAAS,WAAW,GAAG;AACzB,YAAQ,IAAI,KAAK,aAAG,mCAAmC,eAAK,EAAE;AAAA,EAChE;AAEA,UAAQ,IAAI;AACd;",
   "names": []
 }