kirograph 0.17.0 → 0.19.0

package/dist/security/manifest/adapter.test.js

@@ -0,0 +1,272 @@
+"use strict";
+var __create = Object.create;
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __getProtoOf = Object.getPrototypeOf;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __copyProps = (to, from, except, desc) => {
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (let key of __getOwnPropNames(from))
+      if (!__hasOwnProp.call(to, key) && key !== except)
+        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
+  }
+  return to;
+};
+var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__getProtoOf(mod)) : {}, __copyProps(
+  // If the importer is in node compatibility mode or this is not an ESM
+  // file that has been converted to a CommonJS file using a Babel-
+  // compatible transform (i.e. "__esModule" has not been set), then set
+  // "default" to the CommonJS "module.exports" for node compatibility.
+  isNodeMode || !mod || !mod.__esModule ? __defProp(target, "default", { value: mod, enumerable: true }) : target,
+  mod
+));
+var import_vitest = require("vitest");
+var fs = __toESM(require("fs"));
+var path = __toESM(require("path"));
+var os = __toESM(require("os"));
+var import_adapter = require("./adapter");
+(0, import_vitest.describe)("SecurityManifestAdapter", () => {
+  let tmpDir;
+  (0, import_vitest.beforeEach)(() => {
+    tmpDir = fs.mkdtempSync(path.join(os.tmpdir(), "sec-adapter-test-"));
+  });
+  (0, import_vitest.afterEach)(() => {
+    fs.rmSync(tmpDir, { recursive: true, force: true });
+  });
+  (0, import_vitest.describe)("constructor", () => {
+    (0, import_vitest.it)("should initialize with architecture parsers", () => {
+      const adapter = new import_adapter.SecurityManifestAdapter(tmpDir);
+      const parsers = adapter.getArchParsers();
+      (0, import_vitest.expect)(parsers.length).toBeGreaterThan(0);
+      const names = parsers.map((p) => p.name);
+      (0, import_vitest.expect)(names).toContain("npm");
+      (0, import_vitest.expect)(names).toContain("cargo");
+      (0, import_vitest.expect)(names).toContain("go");
+      (0, import_vitest.expect)(names).toContain("maven");
+      (0, import_vitest.expect)(names).toContain("python");
+    });
+  });
+  (0, import_vitest.describe)("registerPlugin", () => {
+    (0, import_vitest.it)("should register and retrieve a version extraction plugin", () => {
+      const adapter = new import_adapter.SecurityManifestAdapter(tmpDir);
+      const plugin = {
+        ecosystem: "npm",
+        manifestFiles: ["package.json"],
+        canExtract: (p) => path.basename(p) === "package.json",
+        extract: async () => []
+      };
+      adapter.registerPlugin(plugin);
+      const plugins = adapter.getPlugins();
+      (0, import_vitest.expect)(plugins).toHaveLength(1);
+      (0, import_vitest.expect)(plugins[0].ecosystem).toBe("npm");
+    });
+    (0, import_vitest.it)("should overwrite plugin for same ecosystem", () => {
+      const adapter = new import_adapter.SecurityManifestAdapter(tmpDir);
+      const plugin1 = {
+        ecosystem: "npm",
+        manifestFiles: ["package.json"],
+        canExtract: () => true,
+        extract: async () => [{ name: "a", declaredConstraint: "1.0", scope: "production", ecosystem: "npm", sourceManifest: "package.json" }]
+      };
+      const plugin2 = {
+        ecosystem: "npm",
+        manifestFiles: ["package.json"],
+        canExtract: () => true,
+        extract: async () => [{ name: "b", declaredConstraint: "2.0", scope: "development", ecosystem: "npm", sourceManifest: "package.json" }]
+      };
+      adapter.registerPlugin(plugin1);
+      adapter.registerPlugin(plugin2);
+      const plugins = adapter.getPlugins();
+      (0, import_vitest.expect)(plugins).toHaveLength(1);
+      (0, import_vitest.expect)(plugins[0]).toBe(plugin2);
+    });
+  });
+  (0, import_vitest.describe)("discoverManifests", () => {
+    (0, import_vitest.it)("should discover package.json files", () => {
+      fs.writeFileSync(path.join(tmpDir, "package.json"), JSON.stringify({ name: "test", dependencies: { express: "^4.0.0" } }));
+      const adapter = new import_adapter.SecurityManifestAdapter(tmpDir);
+      const manifests = adapter.discoverManifests();
+      (0, import_vitest.expect)(manifests).toHaveLength(1);
+      (0, import_vitest.expect)(manifests[0]).toBe(path.join(tmpDir, "package.json"));
+    });
+    (0, import_vitest.it)("should discover nested manifest files", () => {
+      fs.mkdirSync(path.join(tmpDir, "sub"));
+      fs.writeFileSync(path.join(tmpDir, "package.json"), JSON.stringify({ name: "root" }));
+      fs.writeFileSync(path.join(tmpDir, "sub", "package.json"), JSON.stringify({ name: "sub" }));
+      const adapter = new import_adapter.SecurityManifestAdapter(tmpDir);
+      const manifests = adapter.discoverManifests();
+      (0, import_vitest.expect)(manifests).toHaveLength(2);
+    });
+    (0, import_vitest.it)("should skip node_modules directory", () => {
+      fs.mkdirSync(path.join(tmpDir, "node_modules"));
+      fs.writeFileSync(path.join(tmpDir, "node_modules", "package.json"), JSON.stringify({ name: "dep" }));
+      fs.writeFileSync(path.join(tmpDir, "package.json"), JSON.stringify({ name: "root" }));
+      const adapter = new import_adapter.SecurityManifestAdapter(tmpDir);
+      const manifests = adapter.discoverManifests();
+      (0, import_vitest.expect)(manifests).toHaveLength(1);
+      (0, import_vitest.expect)(manifests[0]).toBe(path.join(tmpDir, "package.json"));
+    });
+    (0, import_vitest.it)("should skip .git directory", () => {
+      fs.mkdirSync(path.join(tmpDir, ".git"));
+      fs.writeFileSync(path.join(tmpDir, ".git", "package.json"), JSON.stringify({ name: "git" }));
+      fs.writeFileSync(path.join(tmpDir, "package.json"), JSON.stringify({ name: "root" }));
+      const adapter = new import_adapter.SecurityManifestAdapter(tmpDir);
+      const manifests = adapter.discoverManifests();
+      (0, import_vitest.expect)(manifests).toHaveLength(1);
+    });
+    (0, import_vitest.it)("should skip dist and build directories", () => {
+      fs.mkdirSync(path.join(tmpDir, "dist"));
+      fs.mkdirSync(path.join(tmpDir, "build"));
+      fs.writeFileSync(path.join(tmpDir, "dist", "package.json"), JSON.stringify({ name: "dist" }));
+      fs.writeFileSync(path.join(tmpDir, "build", "package.json"), JSON.stringify({ name: "build" }));
+      fs.writeFileSync(path.join(tmpDir, "package.json"), JSON.stringify({ name: "root" }));
+      const adapter = new import_adapter.SecurityManifestAdapter(tmpDir);
+      const manifests = adapter.discoverManifests();
+      (0, import_vitest.expect)(manifests).toHaveLength(1);
+    });
+    (0, import_vitest.it)("should discover multiple ecosystem manifests", () => {
+      fs.writeFileSync(path.join(tmpDir, "package.json"), JSON.stringify({ name: "js-project" }));
+      fs.writeFileSync(path.join(tmpDir, "Cargo.toml"), '[package]\nname = "rust-project"\nversion = "0.1.0"');
+      fs.writeFileSync(path.join(tmpDir, "go.mod"), "module example.com/mymod\n\ngo 1.21");
+      const adapter = new import_adapter.SecurityManifestAdapter(tmpDir);
+      const manifests = adapter.discoverManifests();
+      (0, import_vitest.expect)(manifests).toHaveLength(3);
+    });
+    (0, import_vitest.it)("should return empty array for empty directory", () => {
+      const adapter = new import_adapter.SecurityManifestAdapter(tmpDir);
+      const manifests = adapter.discoverManifests();
+      (0, import_vitest.expect)(manifests).toHaveLength(0);
+    });
+  });
+  (0, import_vitest.describe)("getEcosystem", () => {
+    (0, import_vitest.it)("should return npm for package.json", () => {
+      const adapter = new import_adapter.SecurityManifestAdapter(tmpDir);
+      (0, import_vitest.expect)(adapter.getEcosystem("/some/path/package.json")).toBe("npm");
+    });
+    (0, import_vitest.it)("should return cargo for Cargo.toml", () => {
+      const adapter = new import_adapter.SecurityManifestAdapter(tmpDir);
+      (0, import_vitest.expect)(adapter.getEcosystem("/some/path/Cargo.toml")).toBe("cargo");
+    });
+    (0, import_vitest.it)("should return go for go.mod", () => {
+      const adapter = new import_adapter.SecurityManifestAdapter(tmpDir);
+      (0, import_vitest.expect)(adapter.getEcosystem("/some/path/go.mod")).toBe("go");
+    });
+    (0, import_vitest.it)("should return maven for pom.xml", () => {
+      const adapter = new import_adapter.SecurityManifestAdapter(tmpDir);
+      (0, import_vitest.expect)(adapter.getEcosystem("/some/path/pom.xml")).toBe("maven");
+    });
+    (0, import_vitest.it)("should return undefined for unknown files", () => {
+      const adapter = new import_adapter.SecurityManifestAdapter(tmpDir);
+      (0, import_vitest.expect)(adapter.getEcosystem("/some/path/unknown.txt")).toBeUndefined();
+    });
+  });
+  (0, import_vitest.describe)("extractAll", () => {
+    (0, import_vitest.it)("should use registered plugin for extraction", async () => {
+      fs.writeFileSync(path.join(tmpDir, "package.json"), JSON.stringify({
+        name: "test-project",
+        dependencies: { express: "^4.18.0", lodash: "~4.17.21" },
+        devDependencies: { vitest: "^1.0.0" }
+      }));
+      const adapter = new import_adapter.SecurityManifestAdapter(tmpDir);
+      const mockDeps = [
+        { name: "express", declaredConstraint: "^4.18.0", scope: "production", ecosystem: "npm", sourceManifest: "package.json" },
+        { name: "lodash", declaredConstraint: "~4.17.21", scope: "production", ecosystem: "npm", sourceManifest: "package.json" },
+        { name: "vitest", declaredConstraint: "^1.0.0", scope: "development", ecosystem: "npm", sourceManifest: "package.json" }
+      ];
+      const plugin = {
+        ecosystem: "npm",
+        manifestFiles: ["package.json"],
+        canExtract: (p) => path.basename(p) === "package.json",
+        extract: async () => mockDeps
+      };
+      adapter.registerPlugin(plugin);
+      const result = await adapter.extractAll();
+      (0, import_vitest.expect)(result.dependenciesCreated).toBe(3);
+      (0, import_vitest.expect)(result.manifestsParsed).toBe(1);
+      (0, import_vitest.expect)(result.warnings).toHaveLength(0);
+      (0, import_vitest.expect)(result.errors).toHaveLength(0);
+    });
+    (0, import_vitest.it)("should fall back to architecture parser when no plugin registered", async () => {
+      fs.writeFileSync(path.join(tmpDir, "package.json"), JSON.stringify({
+        name: "test-project",
+        dependencies: { express: "^4.18.0", lodash: "~4.17.21" }
+      }));
+      const adapter = new import_adapter.SecurityManifestAdapter(tmpDir);
+      const result = await adapter.extractAll();
+      (0, import_vitest.expect)(result.dependenciesCreated).toBe(2);
+      (0, import_vitest.expect)(result.manifestsParsed).toBe(1);
+      (0, import_vitest.expect)(result.warnings.length).toBeGreaterThan(0);
+      (0, import_vitest.expect)(result.warnings[0].message).toContain("No version extraction plugin");
+    });
+    (0, import_vitest.it)("should handle plugin extraction errors gracefully", async () => {
+      fs.writeFileSync(path.join(tmpDir, "package.json"), JSON.stringify({
+        name: "test-project",
+        dependencies: { express: "^4.18.0" }
+      }));
+      const adapter = new import_adapter.SecurityManifestAdapter(tmpDir);
+      const plugin = {
+        ecosystem: "npm",
+        manifestFiles: ["package.json"],
+        canExtract: () => true,
+        extract: async () => {
+          throw new Error("Parse failed");
+        }
+      };
+      adapter.registerPlugin(plugin);
+      const result = await adapter.extractAll();
+      (0, import_vitest.expect)(result.dependenciesCreated).toBe(0);
+      (0, import_vitest.expect)(result.errors).toHaveLength(1);
+      (0, import_vitest.expect)(result.errors[0].message).toBe("Parse failed");
+    });
+    (0, import_vitest.it)("should handle empty project with no manifests", async () => {
+      const adapter = new import_adapter.SecurityManifestAdapter(tmpDir);
+      const result = await adapter.extractAll();
+      (0, import_vitest.expect)(result.dependenciesCreated).toBe(0);
+      (0, import_vitest.expect)(result.manifestsParsed).toBe(0);
+      (0, import_vitest.expect)(result.warnings).toHaveLength(0);
+      (0, import_vitest.expect)(result.errors).toHaveLength(0);
+    });
+  });
+  (0, import_vitest.describe)("extractFromManifest", () => {
+    (0, import_vitest.it)("should use plugin when available", async () => {
+      const manifestPath = path.join(tmpDir, "package.json");
+      fs.writeFileSync(manifestPath, JSON.stringify({
+        name: "test",
+        dependencies: { express: "^4.0.0" }
+      }));
+      const adapter = new import_adapter.SecurityManifestAdapter(tmpDir);
+      const expectedDeps = [
+        { name: "express", declaredConstraint: "^4.0.0", scope: "production", ecosystem: "npm", sourceManifest: "package.json" }
+      ];
+      adapter.registerPlugin({
+        ecosystem: "npm",
+        manifestFiles: ["package.json"],
+        canExtract: (p) => path.basename(p) === "package.json",
+        extract: async () => expectedDeps
+      });
+      const deps = await adapter.extractFromManifest(manifestPath);
+      (0, import_vitest.expect)(deps).toEqual(expectedDeps);
+    });
+    (0, import_vitest.it)("should fall back to architecture parser when no plugin", async () => {
+      const manifestPath = path.join(tmpDir, "package.json");
+      fs.writeFileSync(manifestPath, JSON.stringify({
+        name: "test",
+        dependencies: { express: "^4.0.0", lodash: "~4.17.0" }
+      }));
+      const adapter = new import_adapter.SecurityManifestAdapter(tmpDir);
+      const deps = await adapter.extractFromManifest(manifestPath);
+      (0, import_vitest.expect)(deps).toHaveLength(2);
+      (0, import_vitest.expect)(deps[0].declaredConstraint).toBe("*");
+      (0, import_vitest.expect)(deps[0].scope).toBe("production");
+    });
+    (0, import_vitest.it)("should return empty array for unknown manifest type", async () => {
+      const manifestPath = path.join(tmpDir, "unknown.txt");
+      fs.writeFileSync(manifestPath, "some content");
+      const adapter = new import_adapter.SecurityManifestAdapter(tmpDir);
+      const deps = await adapter.extractFromManifest(manifestPath);
+      (0, import_vitest.expect)(deps).toHaveLength(0);
+    });
+  });
+});
+//# sourceMappingURL=adapter.test.js.map

package/dist/security/manifest/adapter.test.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../src/security/manifest/adapter.test.ts"],
+  "sourcesContent": ["/**\n * Unit tests for SecurityManifestAdapter\n */\nimport { describe, it, expect, beforeEach, afterEach } from 'vitest';\nimport * as fs from 'fs';\nimport * as path from 'path';\nimport * as os from 'os';\nimport { SecurityManifestAdapter, type VersionExtractionPlugin } from './adapter';\nimport type { ParsedDependency } from '../types';\n\ndescribe('SecurityManifestAdapter', () => {\n  let tmpDir: string;\n\n  beforeEach(() => {\n    tmpDir = fs.mkdtempSync(path.join(os.tmpdir(), 'sec-adapter-test-'));\n  });\n\n  afterEach(() => {\n    fs.rmSync(tmpDir, { recursive: true, force: true });\n  });\n\n  describe('constructor', () => {\n    it('should initialize with architecture parsers', () => {\n      const adapter = new SecurityManifestAdapter(tmpDir);\n      const parsers = adapter.getArchParsers();\n      expect(parsers.length).toBeGreaterThan(0);\n      // Should include the known parsers\n      const names = parsers.map(p => p.name);\n      expect(names).toContain('npm');\n      expect(names).toContain('cargo');\n      expect(names).toContain('go');\n      expect(names).toContain('maven');\n      expect(names).toContain('python');\n    });\n  });\n\n  describe('registerPlugin', () => {\n    it('should register and retrieve a version extraction plugin', () => {\n      const adapter = new SecurityManifestAdapter(tmpDir);\n      const plugin: VersionExtractionPlugin = {\n        ecosystem: 'npm',\n        manifestFiles: ['package.json'],\n        canExtract: (p) => path.basename(p) === 'package.json',\n        extract: async () => [],\n      };\n      adapter.registerPlugin(plugin);\n      const plugins = adapter.getPlugins();\n      expect(plugins).toHaveLength(1);\n      expect(plugins[0].ecosystem).toBe('npm');\n    });\n\n    it('should overwrite plugin for same ecosystem', () => {\n      const adapter = new SecurityManifestAdapter(tmpDir);\n      const plugin1: VersionExtractionPlugin = {\n        ecosystem: 'npm',\n        manifestFiles: ['package.json'],\n        canExtract: () => true,\n        extract: async () => [{ name: 'a', declaredConstraint: '1.0', scope: 'production', ecosystem: 'npm', sourceManifest: 'package.json' }],\n      };\n      const plugin2: VersionExtractionPlugin = {\n        ecosystem: 'npm',\n        manifestFiles: ['package.json'],\n        canExtract: () => true,\n        extract: async () => [{ name: 'b', declaredConstraint: '2.0', scope: 'development', ecosystem: 'npm', sourceManifest: 'package.json' }],\n      };\n      adapter.registerPlugin(plugin1);\n      adapter.registerPlugin(plugin2);\n      const plugins = adapter.getPlugins();\n      expect(plugins).toHaveLength(1);\n      expect(plugins[0]).toBe(plugin2);\n    });\n  });\n\n  describe('discoverManifests', () => {\n    it('should discover package.json files', () => {\n      fs.writeFileSync(path.join(tmpDir, 'package.json'), JSON.stringify({ name: 'test', dependencies: { express: '^4.0.0' } }));\n      const adapter = new SecurityManifestAdapter(tmpDir);\n      const manifests = adapter.discoverManifests();\n      expect(manifests).toHaveLength(1);\n      expect(manifests[0]).toBe(path.join(tmpDir, 'package.json'));\n    });\n\n    it('should discover nested manifest files', () => {\n      fs.mkdirSync(path.join(tmpDir, 'sub'));\n      fs.writeFileSync(path.join(tmpDir, 'package.json'), JSON.stringify({ name: 'root' }));\n      fs.writeFileSync(path.join(tmpDir, 'sub', 'package.json'), JSON.stringify({ name: 'sub' }));\n      const adapter = new SecurityManifestAdapter(tmpDir);\n      const manifests = adapter.discoverManifests();\n      expect(manifests).toHaveLength(2);\n    });\n\n    it('should skip node_modules directory', () => {\n      fs.mkdirSync(path.join(tmpDir, 'node_modules'));\n      fs.writeFileSync(path.join(tmpDir, 'node_modules', 'package.json'), JSON.stringify({ name: 'dep' }));\n      fs.writeFileSync(path.join(tmpDir, 'package.json'), JSON.stringify({ name: 'root' }));\n      const adapter = new SecurityManifestAdapter(tmpDir);\n      const manifests = adapter.discoverManifests();\n      expect(manifests).toHaveLength(1);\n      expect(manifests[0]).toBe(path.join(tmpDir, 'package.json'));\n    });\n\n    it('should skip .git directory', () => {\n      fs.mkdirSync(path.join(tmpDir, '.git'));\n      fs.writeFileSync(path.join(tmpDir, '.git', 'package.json'), JSON.stringify({ name: 'git' }));\n      fs.writeFileSync(path.join(tmpDir, 'package.json'), JSON.stringify({ name: 'root' }));\n      const adapter = new SecurityManifestAdapter(tmpDir);\n      const manifests = adapter.discoverManifests();\n      expect(manifests).toHaveLength(1);\n    });\n\n    it('should skip dist and build directories', () => {\n      fs.mkdirSync(path.join(tmpDir, 'dist'));\n      fs.mkdirSync(path.join(tmpDir, 'build'));\n      fs.writeFileSync(path.join(tmpDir, 'dist', 'package.json'), JSON.stringify({ name: 'dist' }));\n      fs.writeFileSync(path.join(tmpDir, 'build', 'package.json'), JSON.stringify({ name: 'build' }));\n      fs.writeFileSync(path.join(tmpDir, 'package.json'), JSON.stringify({ name: 'root' }));\n      const adapter = new SecurityManifestAdapter(tmpDir);\n      const manifests = adapter.discoverManifests();\n      expect(manifests).toHaveLength(1);\n    });\n\n    it('should discover multiple ecosystem manifests', () => {\n      fs.writeFileSync(path.join(tmpDir, 'package.json'), JSON.stringify({ name: 'js-project' }));\n      fs.writeFileSync(path.join(tmpDir, 'Cargo.toml'), '[package]\\nname = \"rust-project\"\\nversion = \"0.1.0\"');\n      fs.writeFileSync(path.join(tmpDir, 'go.mod'), 'module example.com/mymod\\n\\ngo 1.21');\n      const adapter = new SecurityManifestAdapter(tmpDir);\n      const manifests = adapter.discoverManifests();\n      expect(manifests).toHaveLength(3);\n    });\n\n    it('should return empty array for empty directory', () => {\n      const adapter = new SecurityManifestAdapter(tmpDir);\n      const manifests = adapter.discoverManifests();\n      expect(manifests).toHaveLength(0);\n    });\n  });\n\n  describe('getEcosystem', () => {\n    it('should return npm for package.json', () => {\n      const adapter = new SecurityManifestAdapter(tmpDir);\n      expect(adapter.getEcosystem('/some/path/package.json')).toBe('npm');\n    });\n\n    it('should return cargo for Cargo.toml', () => {\n      const adapter = new SecurityManifestAdapter(tmpDir);\n      expect(adapter.getEcosystem('/some/path/Cargo.toml')).toBe('cargo');\n    });\n\n    it('should return go for go.mod', () => {\n      const adapter = new SecurityManifestAdapter(tmpDir);\n      expect(adapter.getEcosystem('/some/path/go.mod')).toBe('go');\n    });\n\n    it('should return maven for pom.xml', () => {\n      const adapter = new SecurityManifestAdapter(tmpDir);\n      expect(adapter.getEcosystem('/some/path/pom.xml')).toBe('maven');\n    });\n\n    it('should return undefined for unknown files', () => {\n      const adapter = new SecurityManifestAdapter(tmpDir);\n      expect(adapter.getEcosystem('/some/path/unknown.txt')).toBeUndefined();\n    });\n  });\n\n  describe('extractAll', () => {\n    it('should use registered plugin for extraction', async () => {\n      fs.writeFileSync(path.join(tmpDir, 'package.json'), JSON.stringify({\n        name: 'test-project',\n        dependencies: { express: '^4.18.0', lodash: '~4.17.21' },\n        devDependencies: { vitest: '^1.0.0' },\n      }));\n\n      const adapter = new SecurityManifestAdapter(tmpDir);\n      const mockDeps: ParsedDependency[] = [\n        { name: 'express', declaredConstraint: '^4.18.0', scope: 'production', ecosystem: 'npm', sourceManifest: 'package.json' },\n        { name: 'lodash', declaredConstraint: '~4.17.21', scope: 'production', ecosystem: 'npm', sourceManifest: 'package.json' },\n        { name: 'vitest', declaredConstraint: '^1.0.0', scope: 'development', ecosystem: 'npm', sourceManifest: 'package.json' },\n      ];\n\n      const plugin: VersionExtractionPlugin = {\n        ecosystem: 'npm',\n        manifestFiles: ['package.json'],\n        canExtract: (p) => path.basename(p) === 'package.json',\n        extract: async () => mockDeps,\n      };\n      adapter.registerPlugin(plugin);\n\n      const result = await adapter.extractAll();\n      expect(result.dependenciesCreated).toBe(3);\n      expect(result.manifestsParsed).toBe(1);\n      expect(result.warnings).toHaveLength(0);\n      expect(result.errors).toHaveLength(0);\n    });\n\n    it('should fall back to architecture parser when no plugin registered', async () => {\n      fs.writeFileSync(path.join(tmpDir, 'package.json'), JSON.stringify({\n        name: 'test-project',\n        dependencies: { express: '^4.18.0', lodash: '~4.17.21' },\n      }));\n\n      const adapter = new SecurityManifestAdapter(tmpDir);\n      const result = await adapter.extractAll();\n\n      // Should extract deps from architecture parser (names only)\n      expect(result.dependenciesCreated).toBe(2);\n      expect(result.manifestsParsed).toBe(1);\n      // Should warn about missing plugin\n      expect(result.warnings.length).toBeGreaterThan(0);\n      expect(result.warnings[0].message).toContain('No version extraction plugin');\n    });\n\n    it('should handle plugin extraction errors gracefully', async () => {\n      fs.writeFileSync(path.join(tmpDir, 'package.json'), JSON.stringify({\n        name: 'test-project',\n        dependencies: { express: '^4.18.0' },\n      }));\n\n      const adapter = new SecurityManifestAdapter(tmpDir);\n      const plugin: VersionExtractionPlugin = {\n        ecosystem: 'npm',\n        manifestFiles: ['package.json'],\n        canExtract: () => true,\n        extract: async () => { throw new Error('Parse failed'); },\n      };\n      adapter.registerPlugin(plugin);\n\n      const result = await adapter.extractAll();\n      expect(result.dependenciesCreated).toBe(0);\n      expect(result.errors).toHaveLength(1);\n      expect(result.errors[0].message).toBe('Parse failed');\n    });\n\n    it('should handle empty project with no manifests', async () => {\n      const adapter = new SecurityManifestAdapter(tmpDir);\n      const result = await adapter.extractAll();\n      expect(result.dependenciesCreated).toBe(0);\n      expect(result.manifestsParsed).toBe(0);\n      expect(result.warnings).toHaveLength(0);\n      expect(result.errors).toHaveLength(0);\n    });\n  });\n\n  describe('extractFromManifest', () => {\n    it('should use plugin when available', async () => {\n      const manifestPath = path.join(tmpDir, 'package.json');\n      fs.writeFileSync(manifestPath, JSON.stringify({\n        name: 'test',\n        dependencies: { express: '^4.0.0' },\n      }));\n\n      const adapter = new SecurityManifestAdapter(tmpDir);\n      const expectedDeps: ParsedDependency[] = [\n        { name: 'express', declaredConstraint: '^4.0.0', scope: 'production', ecosystem: 'npm', sourceManifest: 'package.json' },\n      ];\n\n      adapter.registerPlugin({\n        ecosystem: 'npm',\n        manifestFiles: ['package.json'],\n        canExtract: (p) => path.basename(p) === 'package.json',\n        extract: async () => expectedDeps,\n      });\n\n      const deps = await adapter.extractFromManifest(manifestPath);\n      expect(deps).toEqual(expectedDeps);\n    });\n\n    it('should fall back to architecture parser when no plugin', async () => {\n      const manifestPath = path.join(tmpDir, 'package.json');\n      fs.writeFileSync(manifestPath, JSON.stringify({\n        name: 'test',\n        dependencies: { express: '^4.0.0', lodash: '~4.17.0' },\n      }));\n\n      const adapter = new SecurityManifestAdapter(tmpDir);\n      const deps = await adapter.extractFromManifest(manifestPath);\n      expect(deps).toHaveLength(2);\n      // Fallback uses '*' as constraint and 'production' as default scope\n      expect(deps[0].declaredConstraint).toBe('*');\n      expect(deps[0].scope).toBe('production');\n    });\n\n    it('should return empty array for unknown manifest type', async () => {\n      const manifestPath = path.join(tmpDir, 'unknown.txt');\n      fs.writeFileSync(manifestPath, 'some content');\n\n      const adapter = new SecurityManifestAdapter(tmpDir);\n      const deps = await adapter.extractFromManifest(manifestPath);\n      expect(deps).toHaveLength(0);\n    });\n  });\n});\n"],
+  "mappings": ";;;;;;;;;;;;;;;;;;;;;;;AAGA,oBAA4D;AAC5D,SAAoB;AACpB,WAAsB;AACtB,SAAoB;AACpB,qBAAsE;AAAA,IAGtE,wBAAS,2BAA2B,MAAM;AACxC,MAAI;AAEJ,gCAAW,MAAM;AACf,aAAS,GAAG,YAAY,KAAK,KAAK,GAAG,OAAO,GAAG,mBAAmB,CAAC;AAAA,EACrE,CAAC;AAED,+BAAU,MAAM;AACd,OAAG,OAAO,QAAQ,EAAE,WAAW,MAAM,OAAO,KAAK,CAAC;AAAA,EACpD,CAAC;AAED,8BAAS,eAAe,MAAM;AAC5B,0BAAG,+CAA+C,MAAM;AACtD,YAAM,UAAU,IAAI,uCAAwB,MAAM;AAClD,YAAM,UAAU,QAAQ,eAAe;AACvC,gCAAO,QAAQ,MAAM,EAAE,gBAAgB,CAAC;AAExC,YAAM,QAAQ,QAAQ,IAAI,OAAK,EAAE,IAAI;AACrC,gCAAO,KAAK,EAAE,UAAU,KAAK;AAC7B,gCAAO,KAAK,EAAE,UAAU,OAAO;AAC/B,gCAAO,KAAK,EAAE,UAAU,IAAI;AAC5B,gCAAO,KAAK,EAAE,UAAU,OAAO;AAC/B,gCAAO,KAAK,EAAE,UAAU,QAAQ;AAAA,IAClC,CAAC;AAAA,EACH,CAAC;AAED,8BAAS,kBAAkB,MAAM;AAC/B,0BAAG,4DAA4D,MAAM;AACnE,YAAM,UAAU,IAAI,uCAAwB,MAAM;AAClD,YAAM,SAAkC;AAAA,QACtC,WAAW;AAAA,QACX,eAAe,CAAC,cAAc;AAAA,QAC9B,YAAY,CAAC,MAAM,KAAK,SAAS,CAAC,MAAM;AAAA,QACxC,SAAS,YAAY,CAAC;AAAA,MACxB;AACA,cAAQ,eAAe,MAAM;AAC7B,YAAM,UAAU,QAAQ,WAAW;AACnC,gCAAO,OAAO,EAAE,aAAa,CAAC;AAC9B,gCAAO,QAAQ,CAAC,EAAE,SAAS,EAAE,KAAK,KAAK;AAAA,IACzC,CAAC;AAED,0BAAG,8CAA8C,MAAM;AACrD,YAAM,UAAU,IAAI,uCAAwB,MAAM;AAClD,YAAM,UAAmC;AAAA,QACvC,WAAW;AAAA,QACX,eAAe,CAAC,cAAc;AAAA,QAC9B,YAAY,MAAM;AAAA,QAClB,SAAS,YAAY,CAAC,EAAE,MAAM,KAAK,oBAAoB,OAAO,OAAO,cAAc,WAAW,OAAO,gBAAgB,eAAe,CAAC;AAAA,MACvI;AACA,YAAM,UAAmC;AAAA,QACvC,WAAW;AAAA,QACX,eAAe,CAAC,cAAc;AAAA,QAC9B,YAAY,MAAM;AAAA,QAClB,SAAS,YAAY,CAAC,EAAE,MAAM,KAAK,oBAAoB,OAAO,OAAO,eAAe,WAAW,OAAO,gBAAgB,eAAe,CAAC;AAAA,MACxI;AACA,cAAQ,eAAe,OAAO;AAC9B,cAAQ,eAAe,OAAO;AAC9B,YAAM,UAAU,QAAQ,WAAW;AACnC,gCAAO,OAAO,EAAE,aAAa,CAAC;AAC9B,gCAAO,QAAQ,CAAC,CAAC,EAAE,KAAK,OAAO;AAAA,IACjC,CAAC;AAAA,EACH,CAAC;AAED,8BAAS,qBAAqB,MAAM;AAClC,0BAAG,sCAAsC,MAAM;AAC7C,SAAG,cAAc,KAAK,KAAK,QAAQ,cAAc,GAAG,KAAK,UAAU,EAAE,MAAM,QAAQ,cAAc,EAAE,SAAS,SAAS,EAAE,CAAC,CAAC;AACzH,YAAM,UAAU,IAAI,uCAAwB,MAAM;AAClD,YAAM,YAAY,QAAQ,kBAAkB;AAC5C,gCAAO,SAAS,EAAE,aAAa,CAAC;AAChC,gCAAO,UAAU,CAAC,CAAC,EAAE,KAAK,KAAK,KAAK,QAAQ,cAAc,CAAC;AAAA,IAC7D,CAAC;AAED,0BAAG,yCAAyC,MAAM;AAChD,SAAG,UAAU,KAAK,KAAK,QAAQ,KAAK,CAAC;AACrC,SAAG,cAAc,KAAK,KAAK,QAAQ,cAAc,GAAG,KAAK,UAAU,EAAE,MAAM,OAAO,CAAC,CAAC;AACpF,SAAG,cAAc,KAAK,KAAK,QAAQ,OAAO,cAAc,GAAG,KAAK,UAAU,EAAE,MAAM,MAAM,CAAC,CAAC;AAC1F,YAAM,UAAU,IAAI,uCAAwB,MAAM;AAClD,YAAM,YAAY,QAAQ,kBAAkB;AAC5C,gCAAO,SAAS,EAAE,aAAa,CAAC;AAAA,IAClC,CAAC;AAED,0BAAG,sCAAsC,MAAM;AAC7C,SAAG,UAAU,KAAK,KAAK,QAAQ,cAAc,CAAC;AAC9C,SAAG,cAAc,KAAK,KAAK,QAAQ,gBAAgB,cAAc,GAAG,KAAK,UAAU,EAAE,MAAM,MAAM,CAAC,CAAC;AACnG,SAAG,cAAc,KAAK,KAAK,QAAQ,cAAc,GAAG,KAAK,UAAU,EAAE,MAAM,OAAO,CAAC,CAAC;AACpF,YAAM,UAAU,IAAI,uCAAwB,MAAM;AAClD,YAAM,YAAY,QAAQ,kBAAkB;AAC5C,gCAAO,SAAS,EAAE,aAAa,CAAC;AAChC,gCAAO,UAAU,CAAC,CAAC,EAAE,KAAK,KAAK,KAAK,QAAQ,cAAc,CAAC;AAAA,IAC7D,CAAC;AAED,0BAAG,8BAA8B,MAAM;AACrC,SAAG,UAAU,KAAK,KAAK,QAAQ,MAAM,CAAC;AACtC,SAAG,cAAc,KAAK,KAAK,QAAQ,QAAQ,cAAc,GAAG,KAAK,UAAU,EAAE,MAAM,MAAM,CAAC,CAAC;AAC3F,SAAG,cAAc,KAAK,KAAK,QAAQ,cAAc,GAAG,KAAK,UAAU,EAAE,MAAM,OAAO,CAAC,CAAC;AACpF,YAAM,UAAU,IAAI,uCAAwB,MAAM;AAClD,YAAM,YAAY,QAAQ,kBAAkB;AAC5C,gCAAO,SAAS,EAAE,aAAa,CAAC;AAAA,IAClC,CAAC;AAED,0BAAG,0CAA0C,MAAM;AACjD,SAAG,UAAU,KAAK,KAAK,QAAQ,MAAM,CAAC;AACtC,SAAG,UAAU,KAAK,KAAK,QAAQ,OAAO,CAAC;AACvC,SAAG,cAAc,KAAK,KAAK,QAAQ,QAAQ,cAAc,GAAG,KAAK,UAAU,EAAE,MAAM,OAAO,CAAC,CAAC;AAC5F,SAAG,cAAc,KAAK,KAAK,QAAQ,SAAS,cAAc,GAAG,KAAK,UAAU,EAAE,MAAM,QAAQ,CAAC,CAAC;AAC9F,SAAG,cAAc,KAAK,KAAK,QAAQ,cAAc,GAAG,KAAK,UAAU,EAAE,MAAM,OAAO,CAAC,CAAC;AACpF,YAAM,UAAU,IAAI,uCAAwB,MAAM;AAClD,YAAM,YAAY,QAAQ,kBAAkB;AAC5C,gCAAO,SAAS,EAAE,aAAa,CAAC;AAAA,IAClC,CAAC;AAED,0BAAG,gDAAgD,MAAM;AACvD,SAAG,cAAc,KAAK,KAAK,QAAQ,cAAc,GAAG,KAAK,UAAU,EAAE,MAAM,aAAa,CAAC,CAAC;AAC1F,SAAG,cAAc,KAAK,KAAK,QAAQ,YAAY,GAAG,qDAAqD;AACvG,SAAG,cAAc,KAAK,KAAK,QAAQ,QAAQ,GAAG,qCAAqC;AACnF,YAAM,UAAU,IAAI,uCAAwB,MAAM;AAClD,YAAM,YAAY,QAAQ,kBAAkB;AAC5C,gCAAO,SAAS,EAAE,aAAa,CAAC;AAAA,IAClC,CAAC;AAED,0BAAG,iDAAiD,MAAM;AACxD,YAAM,UAAU,IAAI,uCAAwB,MAAM;AAClD,YAAM,YAAY,QAAQ,kBAAkB;AAC5C,gCAAO,SAAS,EAAE,aAAa,CAAC;AAAA,IAClC,CAAC;AAAA,EACH,CAAC;AAED,8BAAS,gBAAgB,MAAM;AAC7B,0BAAG,sCAAsC,MAAM;AAC7C,YAAM,UAAU,IAAI,uCAAwB,MAAM;AAClD,gCAAO,QAAQ,aAAa,yBAAyB,CAAC,EAAE,KAAK,KAAK;AAAA,IACpE,CAAC;AAED,0BAAG,sCAAsC,MAAM;AAC7C,YAAM,UAAU,IAAI,uCAAwB,MAAM;AAClD,gCAAO,QAAQ,aAAa,uBAAuB,CAAC,EAAE,KAAK,OAAO;AAAA,IACpE,CAAC;AAED,0BAAG,+BAA+B,MAAM;AACtC,YAAM,UAAU,IAAI,uCAAwB,MAAM;AAClD,gCAAO,QAAQ,aAAa,mBAAmB,CAAC,EAAE,KAAK,IAAI;AAAA,IAC7D,CAAC;AAED,0BAAG,mCAAmC,MAAM;AAC1C,YAAM,UAAU,IAAI,uCAAwB,MAAM;AAClD,gCAAO,QAAQ,aAAa,oBAAoB,CAAC,EAAE,KAAK,OAAO;AAAA,IACjE,CAAC;AAED,0BAAG,6CAA6C,MAAM;AACpD,YAAM,UAAU,IAAI,uCAAwB,MAAM;AAClD,gCAAO,QAAQ,aAAa,wBAAwB,CAAC,EAAE,cAAc;AAAA,IACvE,CAAC;AAAA,EACH,CAAC;AAED,8BAAS,cAAc,MAAM;AAC3B,0BAAG,+CAA+C,YAAY;AAC5D,SAAG,cAAc,KAAK,KAAK,QAAQ,cAAc,GAAG,KAAK,UAAU;AAAA,QACjE,MAAM;AAAA,QACN,cAAc,EAAE,SAAS,WAAW,QAAQ,WAAW;AAAA,QACvD,iBAAiB,EAAE,QAAQ,SAAS;AAAA,MACtC,CAAC,CAAC;AAEF,YAAM,UAAU,IAAI,uCAAwB,MAAM;AAClD,YAAM,WAA+B;AAAA,QACnC,EAAE,MAAM,WAAW,oBAAoB,WAAW,OAAO,cAAc,WAAW,OAAO,gBAAgB,eAAe;AAAA,QACxH,EAAE,MAAM,UAAU,oBAAoB,YAAY,OAAO,cAAc,WAAW,OAAO,gBAAgB,eAAe;AAAA,QACxH,EAAE,MAAM,UAAU,oBAAoB,UAAU,OAAO,eAAe,WAAW,OAAO,gBAAgB,eAAe;AAAA,MACzH;AAEA,YAAM,SAAkC;AAAA,QACtC,WAAW;AAAA,QACX,eAAe,CAAC,cAAc;AAAA,QAC9B,YAAY,CAAC,MAAM,KAAK,SAAS,CAAC,MAAM;AAAA,QACxC,SAAS,YAAY;AAAA,MACvB;AACA,cAAQ,eAAe,MAAM;AAE7B,YAAM,SAAS,MAAM,QAAQ,WAAW;AACxC,gCAAO,OAAO,mBAAmB,EAAE,KAAK,CAAC;AACzC,gCAAO,OAAO,eAAe,EAAE,KAAK,CAAC;AACrC,gCAAO,OAAO,QAAQ,EAAE,aAAa,CAAC;AACtC,gCAAO,OAAO,MAAM,EAAE,aAAa,CAAC;AAAA,IACtC,CAAC;AAED,0BAAG,qEAAqE,YAAY;AAClF,SAAG,cAAc,KAAK,KAAK,QAAQ,cAAc,GAAG,KAAK,UAAU;AAAA,QACjE,MAAM;AAAA,QACN,cAAc,EAAE,SAAS,WAAW,QAAQ,WAAW;AAAA,MACzD,CAAC,CAAC;AAEF,YAAM,UAAU,IAAI,uCAAwB,MAAM;AAClD,YAAM,SAAS,MAAM,QAAQ,WAAW;AAGxC,gCAAO,OAAO,mBAAmB,EAAE,KAAK,CAAC;AACzC,gCAAO,OAAO,eAAe,EAAE,KAAK,CAAC;AAErC,gCAAO,OAAO,SAAS,MAAM,EAAE,gBAAgB,CAAC;AAChD,gCAAO,OAAO,SAAS,CAAC,EAAE,OAAO,EAAE,UAAU,8BAA8B;AAAA,IAC7E,CAAC;AAED,0BAAG,qDAAqD,YAAY;AAClE,SAAG,cAAc,KAAK,KAAK,QAAQ,cAAc,GAAG,KAAK,UAAU;AAAA,QACjE,MAAM;AAAA,QACN,cAAc,EAAE,SAAS,UAAU;AAAA,MACrC,CAAC,CAAC;AAEF,YAAM,UAAU,IAAI,uCAAwB,MAAM;AAClD,YAAM,SAAkC;AAAA,QACtC,WAAW;AAAA,QACX,eAAe,CAAC,cAAc;AAAA,QAC9B,YAAY,MAAM;AAAA,QAClB,SAAS,YAAY;AAAE,gBAAM,IAAI,MAAM,cAAc;AAAA,QAAG;AAAA,MAC1D;AACA,cAAQ,eAAe,MAAM;AAE7B,YAAM,SAAS,MAAM,QAAQ,WAAW;AACxC,gCAAO,OAAO,mBAAmB,EAAE,KAAK,CAAC;AACzC,gCAAO,OAAO,MAAM,EAAE,aAAa,CAAC;AACpC,gCAAO,OAAO,OAAO,CAAC,EAAE,OAAO,EAAE,KAAK,cAAc;AAAA,IACtD,CAAC;AAED,0BAAG,iDAAiD,YAAY;AAC9D,YAAM,UAAU,IAAI,uCAAwB,MAAM;AAClD,YAAM,SAAS,MAAM,QAAQ,WAAW;AACxC,gCAAO,OAAO,mBAAmB,EAAE,KAAK,CAAC;AACzC,gCAAO,OAAO,eAAe,EAAE,KAAK,CAAC;AACrC,gCAAO,OAAO,QAAQ,EAAE,aAAa,CAAC;AACtC,gCAAO,OAAO,MAAM,EAAE,aAAa,CAAC;AAAA,IACtC,CAAC;AAAA,EACH,CAAC;AAED,8BAAS,uBAAuB,MAAM;AACpC,0BAAG,oCAAoC,YAAY;AACjD,YAAM,eAAe,KAAK,KAAK,QAAQ,cAAc;AACrD,SAAG,cAAc,cAAc,KAAK,UAAU;AAAA,QAC5C,MAAM;AAAA,QACN,cAAc,EAAE,SAAS,SAAS;AAAA,MACpC,CAAC,CAAC;AAEF,YAAM,UAAU,IAAI,uCAAwB,MAAM;AAClD,YAAM,eAAmC;AAAA,QACvC,EAAE,MAAM,WAAW,oBAAoB,UAAU,OAAO,cAAc,WAAW,OAAO,gBAAgB,eAAe;AAAA,MACzH;AAEA,cAAQ,eAAe;AAAA,QACrB,WAAW;AAAA,QACX,eAAe,CAAC,cAAc;AAAA,QAC9B,YAAY,CAAC,MAAM,KAAK,SAAS,CAAC,MAAM;AAAA,QACxC,SAAS,YAAY;AAAA,MACvB,CAAC;AAED,YAAM,OAAO,MAAM,QAAQ,oBAAoB,YAAY;AAC3D,gCAAO,IAAI,EAAE,QAAQ,YAAY;AAAA,IACnC,CAAC;AAED,0BAAG,0DAA0D,YAAY;AACvE,YAAM,eAAe,KAAK,KAAK,QAAQ,cAAc;AACrD,SAAG,cAAc,cAAc,KAAK,UAAU;AAAA,QAC5C,MAAM;AAAA,QACN,cAAc,EAAE,SAAS,UAAU,QAAQ,UAAU;AAAA,MACvD,CAAC,CAAC;AAEF,YAAM,UAAU,IAAI,uCAAwB,MAAM;AAClD,YAAM,OAAO,MAAM,QAAQ,oBAAoB,YAAY;AAC3D,gCAAO,IAAI,EAAE,aAAa,CAAC;AAE3B,gCAAO,KAAK,CAAC,EAAE,kBAAkB,EAAE,KAAK,GAAG;AAC3C,gCAAO,KAAK,CAAC,EAAE,KAAK,EAAE,KAAK,YAAY;AAAA,IACzC,CAAC;AAED,0BAAG,uDAAuD,YAAY;AACpE,YAAM,eAAe,KAAK,KAAK,QAAQ,aAAa;AACpD,SAAG,cAAc,cAAc,cAAc;AAE7C,YAAM,UAAU,IAAI,uCAAwB,MAAM;AAClD,YAAM,OAAO,MAAM,QAAQ,oBAAoB,YAAY;AAC3D,gCAAO,IAAI,EAAE,aAAa,CAAC;AAAA,IAC7B,CAAC;AAAA,EACH,CAAC;AACH,CAAC;",
+  "names": []
+}