kirograph 0.28.0 → 0.28.1

package/dist/security/export/sbom.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"sbom.d.ts","sourceRoot":"","sources":["../../../src/security/export/sbom.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AACH,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAC;AACvD,OAAO,KAAK,EACV,aAAa,EAId,MAAM,UAAU,CAAC;AAiHlB;;GAEG;AACH,qBAAa,YAAY;IACvB,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAgB;IACnC,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAS;gBAEzB,EAAE,EAAE,aAAa,EAAE,WAAW,EAAE,MAAM;IAKlD;;OAEG;IACH,MAAM,IAAI,aAAa;IAsGvB;;OAEG;IACH,UAAU,IAAI,MAAM;IAKpB;;OAEG;IACH,OAAO,CAAC,aAAa;CA8BtB"}

package/dist/security/export/serialization.d.ts

@@ -1,62 +0,0 @@
-/**
- * CycloneDX serialization utilities for Dependency_Nodes.
- *
- * Provides serialize/deserialize between DependencyRow (sec_dependencies table)
- * and CycloneDX JSON component format, with partial failure resilience.
- *
- * Requirements: 8.2, 8.3, 8.4
- */
-import type { CycloneDXComponent } from '../types';
-/**
- * Represents a row from the sec_dependencies table.
- */
-export interface DependencyRow {
-    node_id: string;
-    ecosystem: string;
-    package_name: string;
-    declared_constraint: string;
-    resolved_version: string | null;
-    scope: 'production' | 'development' | 'optional';
-    transitive_status: 'complete' | 'incomplete';
-    last_vuln_check: number | null;
-    vuln_data_stale: number;
-    vuln_data_stale_since: number | null;
-    source_manifests: string;
-}
-/**
- * Error reported when a single node fails serialization/deserialization.
- */
-export interface SerializationError {
-    name: string;
-    reason: string;
-}
-/**
- * Converts a dependency database row to a CycloneDX component object.
- * Stores the declared constraint in a `properties` array entry with
- * name "kirograph:declaredConstraint".
- *
- * The purl format is: pkg:<ecosystem>/<name>@<version>
- */
-export declare function serializeDependencyToComponent(dep: DependencyRow): CycloneDXComponent;
-/**
- * Converts a CycloneDX component back to a dependency row.
- * Extracts the constraint from the properties array.
- */
-export declare function deserializeComponentToDependency(component: CycloneDXComponent): DependencyRow;
-/**
- * Serializes all dependencies, collecting errors for any that fail
- * without aborting the batch.
- */
-export declare function serializeAll(deps: DependencyRow[]): {
-    components: CycloneDXComponent[];
-    errors: SerializationError[];
-};
-/**
- * Deserializes all components back to dependency rows,
- * collecting errors for any that fail without aborting the batch.
- */
-export declare function deserializeAll(components: CycloneDXComponent[]): {
-    deps: DependencyRow[];
-    errors: SerializationError[];
-};
-//# sourceMappingURL=serialization.d.ts.map

package/dist/security/export/serialization.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"serialization.d.ts","sourceRoot":"","sources":["../../../src/security/export/serialization.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AACH,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,UAAU,CAAC;AAInD;;GAEG;AACH,MAAM,WAAW,aAAa;IAC5B,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;IAClB,YAAY,EAAE,MAAM,CAAC;IACrB,mBAAmB,EAAE,MAAM,CAAC;IAC5B,gBAAgB,EAAE,MAAM,GAAG,IAAI,CAAC;IAChC,KAAK,EAAE,YAAY,GAAG,aAAa,GAAG,UAAU,CAAC;IACjD,iBAAiB,EAAE,UAAU,GAAG,YAAY,CAAC;IAC7C,eAAe,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B,eAAe,EAAE,MAAM,CAAC;IACxB,qBAAqB,EAAE,MAAM,GAAG,IAAI,CAAC;IACrC,gBAAgB,EAAE,MAAM,CAAC;CAC1B;AAED;;GAEG;AACH,MAAM,WAAW,kBAAkB;IACjC,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;CAChB;AAsBD;;;;;;GAMG;AACH,wBAAgB,8BAA8B,CAAC,GAAG,EAAE,aAAa,GAAG,kBAAkB,CAgCrF;AAID;;;GAGG;AACH,wBAAgB,gCAAgC,CAAC,SAAS,EAAE,kBAAkB,GAAG,aAAa,CA+C7F;AAID;;;GAGG;AACH,wBAAgB,YAAY,CAAC,IAAI,EAAE,aAAa,EAAE,GAAG;IACnD,UAAU,EAAE,kBAAkB,EAAE,CAAC;IACjC,MAAM,EAAE,kBAAkB,EAAE,CAAC;CAC9B,CAiBA;AAED;;;GAGG;AACH,wBAAgB,cAAc,CAAC,UAAU,EAAE,kBAAkB,EAAE,GAAG;IAChE,IAAI,EAAE,aAAa,EAAE,CAAC;IACtB,MAAM,EAAE,kBAAkB,EAAE,CAAC;CAC9B,CAiBA"}

package/dist/security/export/vex.d.ts

@@ -1,58 +0,0 @@
-/**
- * KiroGraph-Sec VEX Exporter
- *
- * Generates CycloneDX 1.5 VEX (Vulnerability Exploitability eXchange) documents
- * with reachability-informed vulnerability status. Each Vulnerability_Node is
- * mapped to a VEX entry with an analysis state derived from the reachability verdict.
- *
- * Requirements: 7.1, 7.2, 7.3, 7.4, 7.5, 7.6, 7.7, 7.8
- */
-import type { GraphDatabase } from '../../db/database';
-import type { CycloneDXVEX } from '../types';
-/**
- * VEXExporter serializes vulnerability assessments with reachability verdicts
- * into CycloneDX 1.5 VEX format.
- */
-export declare class VEXExporter {
-    private readonly db;
-    private readonly projectRoot;
-    constructor(db: GraphDatabase, projectRoot: string);
-    /**
-     * Generate CycloneDX 1.5 VEX JSON object.
-     *
-     * Queries all Vulnerability_Nodes and their reachability verdicts,
-     * producing one VEX entry per vulnerability.
-     */
-    export(): CycloneDXVEX;
-    /**
-     * Export to pretty-printed JSON string.
-     */
-    exportJSON(): string;
-    /**
-     * Build a single CycloneDX vulnerability entry from a Vulnerability_Node.
-     *
-     * Maps reachability verdicts to CycloneDX analysis states:
-     * - affected → "affected" with path summary detail
-     * - not_affected → "not_affected" with justification "code_not_reachable"
-     * - under_investigation → "under_investigation" with unresolved symbols detail
-     * - no reachability data → "under_investigation" with pending analysis detail
-     */
-    private buildVulnerabilityEntry;
-    /**
-     * Build the analysis section based on the reachability verdict.
-     */
-    private buildAnalysis;
-    /**
-     * Build analysis detail for "affected" verdict.
-     *
-     * Includes: entry point count, layer count, shortest path length.
-     */
-    private buildAffectedAnalysis;
-    /**
-     * Build analysis detail for "under_investigation" verdict.
-     *
-     * Lists unresolved symbols or states pending analysis reason.
-     */
-    private buildUnderInvestigationAnalysis;
-}
-//# sourceMappingURL=vex.d.ts.map

package/dist/security/export/vex.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"vex.d.ts","sourceRoot":"","sources":["../../../src/security/export/vex.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAGH,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAC;AACvD,OAAO,KAAK,EAAE,YAAY,EAA4C,MAAM,UAAU,CAAC;AAMvF;;;GAGG;AACH,qBAAa,WAAW;IACtB,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAgB;IACnC,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAS;gBAEzB,EAAE,EAAE,aAAa,EAAE,WAAW,EAAE,MAAM;IAKlD;;;;;OAKG;IACH,MAAM,IAAI,YAAY;IAiDtB;;OAEG;IACH,UAAU,IAAI,MAAM;IAIpB;;;;;;;;OAQG;IACH,OAAO,CAAC,uBAAuB;IA6D/B;;OAEG;IACH,OAAO,CAAC,aAAa;IAgCrB;;;;OAIG;IACH,OAAO,CAAC,qBAAqB;IAuC7B;;;;OAIG;IACH,OAAO,CAAC,+BAA+B;CAoBxC"}

package/dist/security/index.d.ts

@@ -1,21 +0,0 @@
-/**
- * KiroGraph-Sec Module Index
- *
- * Exports all public interfaces, classes, and types for the security module.
- * Used by MCP tools, CLI commands, and pipeline integration.
- */
-export { SecurityPipeline } from './pipeline';
-export { ManifestParser } from './manifest/parser';
-export { DependencyGraphIntegrator } from './integrator';
-export { VulnerabilityDatabaseClient } from './vuln/client';
-export { OsvAdapter } from './vuln/osv-adapter';
-export type { VulnDatabaseAdapter } from './vuln/types';
-export { ReachabilityAnalyzer } from './reachability';
-export { SBOMExporter } from './export/sbom';
-export { VEXExporter } from './export/vex';
-export { buildFixSuggestion, formatFixSuggestion } from './export/fix-suggestions';
-export { getSecurityWarningsForNodes, formatSecurityWarnings } from './context-warnings';
-export type { SecurityWarning } from './context-warnings';
-export type { ParsedDependency, ManifestParseResult, IntegrationResult, TransitiveResult, CleanupResult, CVERecord, VersionRange, EnrichmentResult, ReachabilityVerdict, ReachabilityPath, ReachabilityResult, ImpactSummary, SecurityResult, SBOMMetadata, CycloneDXSBOM, CycloneDXComponent, CycloneDXDependencyEntry, CycloneDXVEX, CycloneDXVulnerability, } from './types';
-export { SecurityError, ManifestParseError, VulnDatabaseError } from './errors';
-//# sourceMappingURL=index.d.ts.map

package/dist/security/index.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/security/index.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAGH,OAAO,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AAG9C,OAAO,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AAGnD,OAAO,EAAE,yBAAyB,EAAE,MAAM,cAAc,CAAC;AAGzD,OAAO,EAAE,2BAA2B,EAAE,MAAM,eAAe,CAAC;AAC5D,OAAO,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAChD,YAAY,EAAE,mBAAmB,EAAE,MAAM,cAAc,CAAC;AAGxD,OAAO,EAAE,oBAAoB,EAAE,MAAM,gBAAgB,CAAC;AAGtD,OAAO,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAC7C,OAAO,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAC3C,OAAO,EAAE,kBAAkB,EAAE,mBAAmB,EAAE,MAAM,0BAA0B,CAAC;AAGnF,OAAO,EAAE,2BAA2B,EAAE,sBAAsB,EAAE,MAAM,oBAAoB,CAAC;AACzF,YAAY,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AAG1D,YAAY,EACV,gBAAgB,EAChB,mBAAmB,EACnB,iBAAiB,EACjB,gBAAgB,EAChB,aAAa,EACb,SAAS,EACT,YAAY,EACZ,gBAAgB,EAChB,mBAAmB,EACnB,gBAAgB,EAChB,kBAAkB,EAClB,aAAa,EACb,cAAc,EACd,YAAY,EACZ,aAAa,EACb,kBAAkB,EAClB,wBAAwB,EACxB,YAAY,EACZ,sBAAsB,GACvB,MAAM,SAAS,CAAC;AAGjB,OAAO,EAAE,aAAa,EAAE,kBAAkB,EAAE,iBAAiB,EAAE,MAAM,UAAU,CAAC"}

package/dist/security/integrator.d.ts

@@ -1,63 +0,0 @@
-import type { GraphDatabase } from '../db/database';
-import type { IntegrationResult, TransitiveResult, CleanupResult } from './types';
-export declare class DependencyGraphIntegrator {
-    private readonly db;
-    private readonly projectRoot;
-    constructor(db: GraphDatabase, projectRoot: string);
-    /**
-     * Create import/reference edges between code symbols and Dependency_Nodes.
-     *
-     * Per Requirement 2.1: creates `imports` edges from file nodes that contain
-     * import statements resolving to a dependency → the Dependency_Node.
-     *
-     * Per Requirement 2.2: creates `references` edges from code symbols that
-     * reference classes/functions from a dependency → the Dependency_Node.
-     */
-    integrate(): Promise<IntegrationResult>;
-    /**
-     * Find the file node ID for a given file path.
-     * File nodes have kind='file' and their file_path matches.
-     */
-    private findFileNodeId;
-    /**
-     * Match an import specifier to a dependency node ID.
-     *
-     * Handles:
-     * - Exact match: `express` → dep:npm:express
-     * - Scoped packages: `@scope/pkg` → dep:npm:@scope/pkg
-     * - Subpath imports: `express/Router` → dep:npm:express
-     * - Scoped subpath: `@angular/core/testing` → dep:npm:@angular/core
-     * - Go modules: `github.com/gin-gonic/gin` → dep:go:github.com/gin-gonic/gin
-     * - Go subpath: `github.com/gin-gonic/gin/internal` → dep:go:github.com/gin-gonic/gin
-     */
-    private matchImportToDependency;
-    /**
-     * Resolve transitive dependencies up to maxDepth levels.
-     *
-     * For each ecosystem with a lock file:
-     * 1. Parse the lock file to extract dependency relationships
-     * 2. Create `depends_on` edges between Dependency_Nodes
-     * 3. Traverse up to maxDepth levels of transitive depth
-     *
-     * If a lock file is missing for an ecosystem, mark all dependencies of that
-     * ecosystem with `transitive_status: 'incomplete'` and log a warning.
-     *
-     * @param maxDepth - Maximum levels of transitive depth to resolve (default: 10)
-     */
-    resolveTransitives(maxDepth?: number): Promise<TransitiveResult>;
-    /**
-     * Remove orphaned Dependency_Nodes and their edges.
-     *
-     * A Dependency_Node is orphaned if:
-     * 1. It has no `declared_in` edges (manifest no longer declares it), OR
-     * 2. None of its source manifests still exist on disk
-     *
-     * Also removes transitive Dependency_Nodes that are no longer reachable from
-     * any remaining direct dependency via `depends_on` edges.
-     *
-     * @param manifestExists - Optional function to check if a manifest path exists.
-     *   Defaults to fs.existsSync. Useful for testing.
-     */
-    cleanup(manifestExists?: (absolutePath: string) => boolean): Promise<CleanupResult>;
-}
-//# sourceMappingURL=integrator.d.ts.map

package/dist/security/integrator.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"integrator.d.ts","sourceRoot":"","sources":["../../src/security/integrator.ts"],"names":[],"mappings":"AAeA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAC;AAEpD,OAAO,KAAK,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AAmNlF,qBAAa,yBAAyB;IACpC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAgB;IACnC,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAS;gBAEzB,EAAE,EAAE,aAAa,EAAE,WAAW,EAAE,MAAM;IAKlD;;;;;;;;OAQG;IACG,SAAS,IAAI,OAAO,CAAC,iBAAiB,CAAC;IAwG7C;;;OAGG;IACH,OAAO,CAAC,cAAc;IAQtB;;;;;;;;;;OAUG;IACH,OAAO,CAAC,uBAAuB;IAmD/B;;;;;;;;;;;;OAYG;IACG,kBAAkB,CAAC,QAAQ,GAAE,MAAW,GAAG,OAAO,CAAC,gBAAgB,CAAC;IAmI1E;;;;;;;;;;;;OAYG;IACG,OAAO,CAAC,cAAc,CAAC,EAAE,CAAC,YAAY,EAAE,MAAM,KAAK,OAAO,GAAG,OAAO,CAAC,aAAa,CAAC;CA2G1F"}

package/dist/security/license.d.ts

@@ -1,33 +0,0 @@
-/**
- * License Compliance Checker for KiroGraph-Sec
- *
- * Checks project dependencies against a license policy (deny/warn lists).
- * Supports case-insensitive matching and wildcard patterns (e.g. GPL-* matches
- * GPL-2.0, GPL-3.0-only, etc.).
- */
-export interface LicenseViolation {
-    packageName: string;
-    ecosystem: string;
-    license: string;
-    severity: 'deny' | 'warn';
-}
-/**
- * Check a list of dependencies against a license policy.
- *
- * Dependencies with no license are skipped (no violation).
- * A license matched in `deny` produces a 'deny' violation.
- * A license matched in `warn` (and not in `deny`) produces a 'warn' violation.
- *
- * @param deps - Array of dependency rows from sec_dependencies
- * @param policy - The license policy with deny and warn lists
- * @returns Array of violations sorted by severity (deny first) then package name
- */
-export declare function checkLicensePolicy(deps: Array<{
-    package_name: string;
-    ecosystem: string;
-    license: string | null;
-}>, policy: {
-    deny: string[];
-    warn: string[];
-}): LicenseViolation[];
-//# sourceMappingURL=license.d.ts.map

package/dist/security/license.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"license.d.ts","sourceRoot":"","sources":["../../src/security/license.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAIH,MAAM,WAAW,gBAAgB;IAC/B,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,MAAM,GAAG,MAAM,CAAC;CAC3B;AAmCD;;;;;;;;;;GAUG;AACH,wBAAgB,kBAAkB,CAChC,IAAI,EAAE,KAAK,CAAC;IAAE,YAAY,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,GAAG,IAAI,CAAA;CAAE,CAAC,EAChF,MAAM,EAAE;IAAE,IAAI,EAAE,MAAM,EAAE,CAAC;IAAC,IAAI,EAAE,MAAM,EAAE,CAAA;CAAE,GACzC,gBAAgB,EAAE,CAkCpB"}

package/dist/security/manifest/adapter.d.ts

@@ -1,92 +0,0 @@
-import type { ManifestParser as ArchManifestParser } from '../../architecture/types';
-import type { ParsedDependency, ManifestParseResult } from '../types';
-/**
- * A version extraction plugin provides ecosystem-specific logic to extract
- * version constraints and scopes from manifest files. Each plugin corresponds
- * to one or more architecture parsers and enhances their output with security-
- * relevant metadata.
- */
-export interface VersionExtractionPlugin {
-    /** Ecosystem identifier matching the architecture parser name (e.g. 'npm', 'maven', 'go') */
-    ecosystem: string;
-    /** Manifest filenames this plugin handles (should match the architecture parser's manifestFiles) */
-    manifestFiles: string[];
-    /** Returns true if this plugin can handle the given manifest file path */
-    canExtract(manifestPath: string): boolean;
-    /**
-     * Extract version constraints and scopes from a manifest file.
-     * This is called AFTER the architecture parser has already discovered the manifest.
-     * The plugin receives the manifest path and project root, and returns detailed
-     * dependency information including versions and scopes.
-     */
-    extract(manifestPath: string, projectRoot: string): Promise<ParsedDependency[]>;
-}
-export declare class SecurityManifestAdapter {
-    private readonly archParsers;
-    private readonly plugins;
-    /** Standalone plugins have no corresponding architecture parser — they own their own discovery. */
-    private readonly standalonePlugins;
-    private readonly projectRoot;
-    constructor(projectRoot: string);
-    /**
-     * Register a version extraction plugin for an ecosystem that has a
-     * corresponding architecture parser. The plugin's `ecosystem` field
-     * must equal the architecture parser's `name` for the lookup to work.
-     */
-    registerPlugin(plugin: VersionExtractionPlugin): void;
-    /**
-     * Register a standalone version extraction plugin for an ecosystem that
-     * has NO corresponding architecture parser. The plugin's `manifestFiles`
-     * list drives discovery — the adapter will scan for those filenames and
-     * invoke the plugin directly when found.
-     */
-    registerStandalonePlugin(plugin: VersionExtractionPlugin): void;
-    /**
-     * Get all registered version extraction plugins (wrapped + standalone).
-     */
-    getPlugins(): VersionExtractionPlugin[];
-    /**
-     * Get the architecture parsers being wrapped.
-     */
-    getArchParsers(): ArchManifestParser[];
-    /**
-     * Discover all manifest files in the project tree.
-     * Includes files known to architecture parsers AND files from standalone plugins.
-     * Returns absolute paths.
-     */
-    discoverManifests(): string[];
-    /**
-     * Run full discovery and extraction:
-     * 1. Discover manifest files (reusing architecture's SKIP_DIRS logic)
-     * 2. For each manifest, find the matching architecture parser
-     * 3. If a version extraction plugin is registered for that ecosystem,
-     *    use it to extract detailed version/scope information
-     * 4. Otherwise, fall back to basic extraction from the architecture parser's
-     *    ArchPackage.externalDeps (names only, no version info)
-     */
-    extractAll(): Promise<ManifestParseResult>;
-    /**
-     * Extract dependencies for a single manifest file.
-     * Tries standalone plugins first (when there is no arch parser), then
-     * wrapped plugins, then falls back to arch parser output.
-     */
-    extractFromManifest(manifestPath: string): Promise<ParsedDependency[]>;
-    /**
-     * Get the ecosystem name for a given manifest file path.
-     * Returns undefined if no parser handles this file.
-     */
-    getEcosystem(manifestPath: string): string | undefined;
-    /**
-     * Fallback extraction: converts ArchPackage.externalDeps (names only) into
-     * ParsedDependency records with empty version constraints and default scope.
-     */
-    private _fallbackExtract;
-    /**
-     * Walk the project directory tree looking for manifest files.
-     * Mirrors the architecture module's _findManifests() logic, respecting SKIP_DIRS.
-     * Includes manifest filenames from standalone plugins in addition to arch parsers.
-     */
-    private _findManifests;
-    private _walkDir;
-}
-//# sourceMappingURL=adapter.d.ts.map

package/dist/security/manifest/adapter.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"adapter.d.ts","sourceRoot":"","sources":["../../../src/security/manifest/adapter.ts"],"names":[],"mappings":"AAeA,OAAO,KAAK,EAAE,cAAc,IAAI,kBAAkB,EAAe,MAAM,0BAA0B,CAAC;AAClG,OAAO,KAAK,EAAE,gBAAgB,EAAE,mBAAmB,EAAE,MAAM,UAAU,CAAC;AAItE;;;;;GAKG;AACH,MAAM,WAAW,uBAAuB;IACtC,6FAA6F;IAC7F,SAAS,EAAE,MAAM,CAAC;IAClB,oGAAoG;IACpG,aAAa,EAAE,MAAM,EAAE,CAAC;IACxB,0EAA0E;IAC1E,UAAU,CAAC,YAAY,EAAE,MAAM,GAAG,OAAO,CAAC;IAC1C;;;;;OAKG;IACH,OAAO,CAAC,YAAY,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,gBAAgB,EAAE,CAAC,CAAC;CACjF;AAYD,qBAAa,uBAAuB;IAClC,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAuB;IACnD,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAmD;IAC3E,mGAAmG;IACnG,OAAO,CAAC,QAAQ,CAAC,iBAAiB,CAAmD;IACrF,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAS;gBAEzB,WAAW,EAAE,MAAM;IAK/B;;;;OAIG;IACH,cAAc,CAAC,MAAM,EAAE,uBAAuB,GAAG,IAAI;IAIrD;;;;;OAKG;IACH,wBAAwB,CAAC,MAAM,EAAE,uBAAuB,GAAG,IAAI;IAI/D;;OAEG;IACH,UAAU,IAAI,uBAAuB,EAAE;IAIvC;;OAEG;IACH,cAAc,IAAI,kBAAkB,EAAE;IAItC;;;;OAIG;IACH,iBAAiB,IAAI,MAAM,EAAE;IAI7B;;;;;;;;OAQG;IACG,UAAU,IAAI,OAAO,CAAC,mBAAmB,CAAC;IAqDhD;;;;OAIG;IACG,mBAAmB,CAAC,YAAY,EAAE,MAAM,GAAG,OAAO,CAAC,gBAAgB,EAAE,CAAC;IAyB5E;;;OAGG;IACH,YAAY,CAAC,YAAY,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS;IAOtD;;;OAGG;IACH,OAAO,CAAC,gBAAgB;IAqBxB;;;;OAIG;IACH,OAAO,CAAC,cAAc;IAStB,OAAO,CAAC,QAAQ;CAsBjB"}

package/dist/security/manifest/parser.d.ts

@@ -1,73 +0,0 @@
-/**
- * ManifestParser Orchestrator
- *
- * Orchestrates manifest discovery, version extraction, deduplication, and
- * database persistence. Uses the SecurityManifestAdapter for discovery and
- * extraction, registers all 12 version extraction plugins:
- *   Wrapped (arch parser exists): npm, maven, go, pip, cargo, nuget, gradle
- *   Standalone (no arch parser):  rubygems, composer, swift, pubspec, hex
- *
- * Node ID format: `dep:<ecosystem>:<name>` (e.g. `dep:npm:express`)
- */
-import { SecurityManifestAdapter } from './adapter';
-import type { GraphDatabase } from '../../db/database';
-import type { ParsedDependency, ManifestParseResult } from '../types';
-/**
- * Compare two version strings. Returns:
- *  - positive if a > b
- *  - negative if a < b
- *  - 0 if equal
- *
- * Handles semver-like versions (1.2.3), Go pseudo-versions, and constraint
- * strings. Falls back to lexicographic comparison for non-numeric versions.
- */
-export declare function compareVersions(a: string, b: string): number;
-/**
- * A deduplicated dependency entry combining data from multiple manifests.
- */
-interface DeduplicatedDependency {
-    name: string;
-    ecosystem: string;
-    /** The highest declared constraint across all manifests */
-    declaredConstraint: string;
-    /** The highest resolved version across all manifests (if any) */
-    resolvedVersion?: string;
-    /** Scope from the manifest with the highest version */
-    scope: ParsedDependency['scope'];
-    /** All source manifests that declared this dependency */
-    sourceManifests: string[];
-    /** License from manifest, if available */
-    license?: string;
-}
-/**
- * Deduplicate dependencies by (name, ecosystem) pair, keeping the entry
- * with the highest version and collecting all source manifests.
- */
-export declare function deduplicateDependencies(deps: ParsedDependency[]): DeduplicatedDependency[];
-/**
- * ManifestParser orchestrates manifest discovery, parsing, deduplication,
- * and database persistence for the security module.
- */
-export declare class ManifestParser {
-    private readonly adapter;
-    private readonly db;
-    private readonly projectRoot;
-    constructor(db: GraphDatabase, projectRoot: string);
-    /**
-     * Get the underlying adapter (useful for testing).
-     */
-    getAdapter(): SecurityManifestAdapter;
-    /**
-     * Run full manifest discovery, parsing, deduplication, and database persistence.
-     *
-     * Steps:
-     * 1. Discover manifest files via the adapter (reuses architecture parsers)
-     * 2. Extract dependencies with version/scope data via registered plugins
-     * 3. Deduplicate: same (name, ecosystem) → single entry with highest version
-     * 4. Create Dependency_Nodes in the database (nodes + sec_dependencies tables)
-     * 5. Create `declared_in` edges linking dependencies to their source manifests
-     */
-    parseAll(): Promise<ManifestParseResult>;
-}
-export {};
-//# sourceMappingURL=parser.d.ts.map

package/dist/security/manifest/parser.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"parser.d.ts","sourceRoot":"","sources":["../../../src/security/manifest/parser.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AACH,OAAO,EAAE,uBAAuB,EAAgC,MAAM,WAAW,CAAC;AAclF,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAC;AACvD,OAAO,KAAK,EAAE,gBAAgB,EAAE,mBAAmB,EAAE,MAAM,UAAU,CAAC;AAiLtE;;;;;;;;GAQG;AACH,wBAAgB,eAAe,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,MAAM,GAAG,MAAM,CAyC5D;AAYD;;GAEG;AACH,UAAU,sBAAsB;IAC9B,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,MAAM,CAAC;IAClB,2DAA2D;IAC3D,kBAAkB,EAAE,MAAM,CAAC;IAC3B,iEAAiE;IACjE,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,uDAAuD;IACvD,KAAK,EAAE,gBAAgB,CAAC,OAAO,CAAC,CAAC;IACjC,yDAAyD;IACzD,eAAe,EAAE,MAAM,EAAE,CAAC;IAC1B,0CAA0C;IAC1C,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED;;;GAGG;AACH,wBAAgB,uBAAuB,CAAC,IAAI,EAAE,gBAAgB,EAAE,GAAG,sBAAsB,EAAE,CA2C1F;AAID;;;GAGG;AACH,qBAAa,cAAc;IACzB,OAAO,CAAC,QAAQ,CAAC,OAAO,CAA0B;IAClD,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAgB;IACnC,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAS;gBAEzB,EAAE,EAAE,aAAa,EAAE,WAAW,EAAE,MAAM;IAuBlD;;OAEG;IACH,UAAU,IAAI,uBAAuB;IAIrC;;;;;;;;;OASG;IACG,QAAQ,IAAI,OAAO,CAAC,mBAAmB,CAAC;CAkH/C"}

package/dist/security/manifest/plugins/cargo.d.ts

@@ -1,11 +0,0 @@
-import type { ParsedDependency } from '../../types';
-/**
- * Parse a Cargo.toml manifest and extract dependency declarations
- * with version constraints, scopes, and resolved versions from Cargo.lock.
- *
- * @param manifestPath - Absolute path to the Cargo.toml file
- * @param projectRoot - Absolute path to the project root directory
- * @returns Array of parsed dependencies with version and scope information
- */
-export declare function parseCargoManifest(manifestPath: string, projectRoot: string): Promise<ParsedDependency[]>;
-//# sourceMappingURL=cargo.d.ts.map

package/dist/security/manifest/plugins/cargo.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"cargo.d.ts","sourceRoot":"","sources":["../../../../src/security/manifest/plugins/cargo.ts"],"names":[],"mappings":"AAcA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAkBpD;;;;;;;GAOG;AACH,wBAAsB,kBAAkB,CACtC,YAAY,EAAE,MAAM,EACpB,WAAW,EAAE,MAAM,GAClB,OAAO,CAAC,gBAAgB,EAAE,CAAC,CAuC7B"}

package/dist/security/manifest/plugins/composer.d.ts

@@ -1,11 +0,0 @@
-import type { ParsedDependency } from '../../types';
-/**
- * Parse a composer.json manifest and extract package declarations with
- * version constraints, scopes, and resolved versions from composer.lock.
- *
- * @param manifestPath - Absolute path to the composer.json file
- * @param projectRoot - Absolute path to the project root directory
- * @returns Array of parsed dependencies with version and scope information
- */
-export declare function parseComposerManifest(manifestPath: string, projectRoot: string): Promise<ParsedDependency[]>;
-//# sourceMappingURL=composer.d.ts.map

package/dist/security/manifest/plugins/composer.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"composer.d.ts","sourceRoot":"","sources":["../../../../src/security/manifest/plugins/composer.ts"],"names":[],"mappings":"AAaA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AASpD;;;;;;;GAOG;AACH,wBAAsB,qBAAqB,CACzC,YAAY,EAAE,MAAM,EACpB,WAAW,EAAE,MAAM,GAClB,OAAO,CAAC,gBAAgB,EAAE,CAAC,CAoE7B"}

package/dist/security/manifest/plugins/go.d.ts

@@ -1,12 +0,0 @@
-import type { ParsedDependency } from '../../types';
-/**
- * Parse a go.mod manifest and extract dependency declarations with version
- * information. In Go modules, the version declared in go.mod is the resolved
- * version (pinned), so declaredConstraint and resolvedVersion are the same.
- *
- * @param manifestPath - Absolute path to the go.mod file
- * @param projectRoot - Absolute path to the project root directory
- * @returns Array of parsed dependencies with version information
- */
-export declare function parseGoManifest(manifestPath: string, projectRoot: string): Promise<ParsedDependency[]>;
-//# sourceMappingURL=go.d.ts.map

package/dist/security/manifest/plugins/go.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"go.d.ts","sourceRoot":"","sources":["../../../../src/security/manifest/plugins/go.ts"],"names":[],"mappings":"AAgBA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAGpD;;;;;;;;GAQG;AACH,wBAAsB,eAAe,CACnC,YAAY,EAAE,MAAM,EACpB,WAAW,EAAE,MAAM,GAClB,OAAO,CAAC,gBAAgB,EAAE,CAAC,CA0C7B"}

package/dist/security/manifest/plugins/gradle.d.ts

@@ -1,12 +0,0 @@
-import type { ParsedDependency } from '../../types';
-/**
- * Parse a Gradle build script (`build.gradle` or `build.gradle.kts`) and extract
- * dependency declarations with version constraints, scopes, and resolved versions
- * from `gradle.lockfile`.
- *
- * @param manifestPath - Absolute path to the build.gradle or build.gradle.kts file
- * @param projectRoot - Absolute path to the project root directory
- * @returns Array of parsed dependencies with version and scope information
- */
-export declare function parseGradleManifest(manifestPath: string, projectRoot: string): Promise<ParsedDependency[]>;
-//# sourceMappingURL=gradle.d.ts.map

package/dist/security/manifest/plugins/gradle.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"gradle.d.ts","sourceRoot":"","sources":["../../../../src/security/manifest/plugins/gradle.ts"],"names":[],"mappings":"AAmBA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AA0CpD;;;;;;;;GAQG;AACH,wBAAsB,mBAAmB,CACvC,YAAY,EAAE,MAAM,EACpB,WAAW,EAAE,MAAM,GAClB,OAAO,CAAC,gBAAgB,EAAE,CAAC,CAmD7B"}

package/dist/security/manifest/plugins/hex.d.ts

@@ -1,11 +0,0 @@
-import type { ParsedDependency } from '../../types';
-/**
- * Parse a mix.exs manifest and extract package declarations with
- * version constraints, scopes, and resolved versions from mix.lock.
- *
- * @param manifestPath - Absolute path to the mix.exs file
- * @param projectRoot - Absolute path to the project root directory
- * @returns Array of parsed dependencies with version and scope information
- */
-export declare function parseHexManifest(manifestPath: string, projectRoot: string): Promise<ParsedDependency[]>;
-//# sourceMappingURL=hex.d.ts.map

package/dist/security/manifest/plugins/hex.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"hex.d.ts","sourceRoot":"","sources":["../../../../src/security/manifest/plugins/hex.ts"],"names":[],"mappings":"AAgBA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AASpD;;;;;;;GAOG;AACH,wBAAsB,gBAAgB,CACpC,YAAY,EAAE,MAAM,EACpB,WAAW,EAAE,MAAM,GAClB,OAAO,CAAC,gBAAgB,EAAE,CAAC,CAiC7B"}

package/dist/security/manifest/plugins/maven.d.ts

@@ -1,11 +0,0 @@
-import type { ParsedDependency } from '../../types';
-/**
- * Parse a Maven pom.xml manifest and extract dependency declarations
- * with groupId, artifactId, version constraints, and scopes.
- *
- * @param manifestPath - Absolute path to the pom.xml file
- * @param projectRoot - Absolute path to the project root directory
- * @returns Array of parsed dependencies with version and scope information
- */
-export declare function parseMavenManifest(manifestPath: string, projectRoot: string): Promise<ParsedDependency[]>;
-//# sourceMappingURL=maven.d.ts.map

package/dist/security/manifest/plugins/maven.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"maven.d.ts","sourceRoot":"","sources":["../../../../src/security/manifest/plugins/maven.ts"],"names":[],"mappings":"AAWA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAyCpD;;;;;;;GAOG;AACH,wBAAsB,kBAAkB,CACtC,YAAY,EAAE,MAAM,EACpB,WAAW,EAAE,MAAM,GAClB,OAAO,CAAC,gBAAgB,EAAE,CAAC,CA8E7B"}

package/dist/security/manifest/plugins/npm.d.ts

@@ -1,11 +0,0 @@
-import type { ParsedDependency } from '../../types';
-/**
- * Parse an npm package.json manifest and extract dependency declarations
- * with version constraints, scopes, and resolved versions from lock files.
- *
- * @param manifestPath - Absolute path to the package.json file
- * @param projectRoot - Absolute path to the project root directory
- * @returns Array of parsed dependencies with version and scope information
- */
-export declare function parseNpmManifest(manifestPath: string, projectRoot: string): Promise<ParsedDependency[]>;
-//# sourceMappingURL=npm.d.ts.map

package/dist/security/manifest/plugins/npm.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"npm.d.ts","sourceRoot":"","sources":["../../../../src/security/manifest/plugins/npm.ts"],"names":[],"mappings":"AAWA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAgBpD;;;;;;;GAOG;AACH,wBAAsB,gBAAgB,CACpC,YAAY,EAAE,MAAM,EACpB,WAAW,EAAE,MAAM,GAClB,OAAO,CAAC,gBAAgB,EAAE,CAAC,CAsG7B"}

package/dist/security/manifest/plugins/nuget.d.ts

@@ -1,12 +0,0 @@
-import type { ParsedDependency } from '../../types';
-/**
- * Parse a .csproj manifest and extract NuGet dependency declarations
- * with version constraints, scopes, and resolved versions from packages.lock.json.
- * Also parses a packages.config in the same directory if present.
- *
- * @param manifestPath - Absolute path to the .csproj file
- * @param projectRoot - Absolute path to the project root directory
- * @returns Array of parsed dependencies with version and scope information
- */
-export declare function parseNugetManifest(manifestPath: string, projectRoot: string): Promise<ParsedDependency[]>;
-//# sourceMappingURL=nuget.d.ts.map

package/dist/security/manifest/plugins/nuget.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"nuget.d.ts","sourceRoot":"","sources":["../../../../src/security/manifest/plugins/nuget.ts"],"names":[],"mappings":"AAiBA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AASpD;;;;;;;;GAQG;AACH,wBAAsB,kBAAkB,CACtC,YAAY,EAAE,MAAM,EACpB,WAAW,EAAE,MAAM,GAClB,OAAO,CAAC,gBAAgB,EAAE,CAAC,CA6D7B"}

package/dist/security/manifest/plugins/pip.d.ts

@@ -1,11 +0,0 @@
-import type { ParsedDependency } from '../../types';
-/**
- * Parse a pip requirements.txt manifest and extract dependency declarations
- * with version constraints.
- *
- * @param manifestPath - Absolute path to the requirements.txt file
- * @param projectRoot - Absolute path to the project root directory
- * @returns Array of parsed dependencies with version and scope information
- */
-export declare function parsePipManifest(manifestPath: string, projectRoot: string): Promise<ParsedDependency[]>;
-//# sourceMappingURL=pip.d.ts.map

package/dist/security/manifest/plugins/pip.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"pip.d.ts","sourceRoot":"","sources":["../../../../src/security/manifest/plugins/pip.ts"],"names":[],"mappings":"AAWA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAyBpD;;;;;;;GAOG;AACH,wBAAsB,gBAAgB,CACpC,YAAY,EAAE,MAAM,EACpB,WAAW,EAAE,MAAM,GAClB,OAAO,CAAC,gBAAgB,EAAE,CAAC,CAwC7B"}

package/dist/security/manifest/plugins/pubspec.d.ts

@@ -1,11 +0,0 @@
-import type { ParsedDependency } from '../../types';
-/**
- * Parse a pubspec.yaml manifest and extract package declarations with
- * version constraints, scopes, and resolved versions from pubspec.lock.
- *
- * @param manifestPath - Absolute path to the pubspec.yaml file
- * @param projectRoot - Absolute path to the project root directory
- * @returns Array of parsed dependencies with version and scope information
- */
-export declare function parsePubspecManifest(manifestPath: string, projectRoot: string): Promise<ParsedDependency[]>;
-//# sourceMappingURL=pubspec.d.ts.map

package/dist/security/manifest/plugins/pubspec.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"pubspec.d.ts","sourceRoot":"","sources":["../../../../src/security/manifest/plugins/pubspec.ts"],"names":[],"mappings":"AAgBA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AASpD;;;;;;;GAOG;AACH,wBAAsB,oBAAoB,CACxC,YAAY,EAAE,MAAM,EACpB,WAAW,EAAE,MAAM,GAClB,OAAO,CAAC,gBAAgB,EAAE,CAAC,CA4C7B"}

package/dist/security/manifest/plugins/pyproject.d.ts

@@ -1,3 +0,0 @@
-import type { ParsedDependency } from '../../types';
-export declare function parsePyprojectManifest(manifestPath: string, projectRoot: string): Promise<ParsedDependency[]>;
-//# sourceMappingURL=pyproject.d.ts.map

package/dist/security/manifest/plugins/pyproject.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"pyproject.d.ts","sourceRoot":"","sources":["../../../../src/security/manifest/plugins/pyproject.ts"],"names":[],"mappings":"AAgBA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAOpD,wBAAsB,sBAAsB,CAC1C,YAAY,EAAE,MAAM,EACpB,WAAW,EAAE,MAAM,GAClB,OAAO,CAAC,gBAAgB,EAAE,CAAC,CAiE7B"}

package/dist/security/manifest/plugins/rubygems.d.ts

@@ -1,11 +0,0 @@
-import type { ParsedDependency } from '../../types';
-/**
- * Parse a Gemfile manifest and extract gem declarations with version constraints,
- * scopes, and resolved versions from Gemfile.lock.
- *
- * @param manifestPath - Absolute path to the Gemfile
- * @param projectRoot - Absolute path to the project root directory
- * @returns Array of parsed dependencies with version and scope information
- */
-export declare function parseRubygemsManifest(manifestPath: string, projectRoot: string): Promise<ParsedDependency[]>;
-//# sourceMappingURL=rubygems.d.ts.map