openlore 2.0.3 → 2.0.4

package/dist/core/analyzer/iac/cloudformation.js

@@ -0,0 +1,189 @@
+/**
+ * CloudFormation / SAM extraction (spec-07).
+ *
+ * Handles JSON and YAML, including the short-form intrinsics (`!Ref`,
+ * `!GetAtt`, `!Sub`, …) via a CFN-aware custom-tag set so the `yaml` parser
+ * does not choke. Edges: Ref, Fn::GetAtt, Fn::Sub ${var}, DependsOn,
+ * Fn::ImportValue (cross-stack → external), nested stacks (TemplateURL).
+ * Pseudo-parameters (AWS::Region, …) are ignored as builtins.
+ */
+import { LineCounter, parseDocument } from 'yaml';
+import { emptyIacGraph } from './types.js';
+const INTRINSICS = [
+    'Ref', 'GetAtt', 'Sub', 'Join', 'Select', 'Split', 'FindInMap', 'ImportValue',
+    'Base64', 'GetAZs', 'Cidr', 'If', 'Equals', 'And', 'Or', 'Not', 'Condition',
+    'Transform', 'Length', 'ToJsonString',
+];
+/** Build scalar+seq+map custom tags that unwrap `!Name` → `{ Ref|Fn::Name: value }`. */
+function cfnTags() {
+    const tags = [];
+    for (const name of INTRINSICS) {
+        const canonical = name === 'Ref' || name === 'Condition' ? name : `Fn::${name}`;
+        const wrap = (value) => ({ [canonical]: value });
+        tags.push({ tag: `!${name}`, resolve: (str) => wrap(str) });
+        tags.push({
+            tag: `!${name}`, collection: 'seq',
+            resolve: (seq) => wrap(seq.toJSON()),
+        });
+        tags.push({
+            tag: `!${name}`, collection: 'map',
+            resolve: (map) => wrap(map.toJSON()),
+        });
+    }
+    return tags;
+}
+export function extractCloudFormation(files) {
+    const graph = emptyIacGraph();
+    for (const file of files) {
+        let doc;
+        const lc = new LineCounter();
+        try {
+            doc = parseDocument(file.content, { customTags: cfnTags(), lineCounter: lc });
+        }
+        catch {
+            continue;
+        }
+        const js = doc.toJS();
+        if (!js || typeof js !== 'object')
+            continue;
+        extractTemplate(js, file.path, doc, lc, graph);
+    }
+    return graph;
+}
+function extractTemplate(tpl, filePath, doc, lc, graph) {
+    const declared = new Set();
+    const lineOf = (path) => {
+        const node = doc.getIn(path, true);
+        const off = node?.range?.[0];
+        return off != null ? lc.linePos(off).line : 1;
+    };
+    const addNode = (address, type, kind, path, signature, isExternal = false) => {
+        declared.add(address);
+        graph.resources.push({
+            address, type, kind, filePath,
+            startLine: lineOf(path),
+            signature,
+            isExternal: isExternal || undefined,
+            language: 'CloudFormation',
+        });
+    };
+    const sections = [
+        ['Parameters', 'variable', 'Parameter'],
+        ['Mappings', 'value', 'Mapping'],
+        ['Conditions', 'value', 'Condition'],
+    ];
+    for (const [section, kind, typeLabel] of sections) {
+        const obj = tpl[section];
+        if (obj && typeof obj === 'object') {
+            for (const id of Object.keys(obj)) {
+                addNode(id, typeLabel, kind, [section, id], `${typeLabel}: ${id}`);
+            }
+        }
+    }
+    const resources = (tpl.Resources ?? {});
+    for (const [id, body] of Object.entries(resources)) {
+        if (!body || typeof body !== 'object')
+            continue;
+        const type = body.Type;
+        const typeStr = typeof type === 'string' ? type : 'AWS::Unknown';
+        addNode(id, typeStr, 'resource', ['Resources', id], `${id} (${typeStr})`);
+    }
+    const outputs = (tpl.Outputs ?? {});
+    for (const id of Object.keys(outputs)) {
+        addNode(`Output.${id}`, 'Output', 'output', ['Outputs', id], `Output: ${id}`);
+    }
+    // Edges — walk each resource/output body for intrinsic references + DependsOn.
+    const externalAddrs = new Set();
+    const ensureExternal = (address, type) => {
+        if (declared.has(address) || externalAddrs.has(address))
+            return;
+        externalAddrs.add(address);
+        graph.resources.push({
+            address, type, kind: 'stack', filePath, startLine: 1,
+            isExternal: true, signature: address, language: 'CloudFormation',
+        });
+    };
+    const emitRefs = (from, body) => {
+        const refs = new Set();
+        const deps = new Set();
+        collectIntrinsics(body, refs, (importName) => {
+            const addr = `ImportValue:${importName}`;
+            ensureExternal(addr, 'Fn::ImportValue');
+            refs.add(addr);
+        });
+        // DependsOn at the resource top level.
+        if (body && typeof body === 'object') {
+            const d = body.DependsOn;
+            if (typeof d === 'string')
+                deps.add(d);
+            else if (Array.isArray(d))
+                for (const x of d)
+                    if (typeof x === 'string')
+                        deps.add(x);
+            // Nested stack: TemplateURL → external.
+            const props = body.Properties;
+            if (body.Type === 'AWS::CloudFormation::Stack' && props?.TemplateURL) {
+                const url = typeof props.TemplateURL === 'string' ? props.TemplateURL : 'nested-stack';
+                const addr = `Stack:${url}`;
+                ensureExternal(addr, 'AWS::CloudFormation::Stack');
+                refs.add(addr);
+            }
+        }
+        const add = (to, kind) => {
+            if (to === from)
+                return;
+            if (declared.has(to) || externalAddrs.has(to)) {
+                graph.references.push({ fromAddress: from, toAddress: to, kind });
+            }
+        };
+        for (const r of refs)
+            add(r, 'references');
+        for (const d of deps)
+            add(d, 'depends_on');
+    };
+    for (const [id, body] of Object.entries(resources))
+        emitRefs(id, body);
+    for (const [id, body] of Object.entries(outputs))
+        emitRefs(`Output.${id}`, body);
+}
+/** Recursively collect Ref/GetAtt/Sub targets (logical ids), ignoring pseudo-params. */
+function collectIntrinsics(node, refs, onImport) {
+    if (Array.isArray(node)) {
+        for (const x of node)
+            collectIntrinsics(x, refs, onImport);
+        return;
+    }
+    if (!node || typeof node !== 'object')
+        return;
+    const rec = node;
+    if (typeof rec.Ref === 'string')
+        addLogical(rec.Ref, refs);
+    if ('Fn::GetAtt' in rec) {
+        const v = rec['Fn::GetAtt'];
+        const target = typeof v === 'string' ? v.split('.')[0] : Array.isArray(v) ? String(v[0]) : undefined;
+        if (target)
+            addLogical(target, refs);
+    }
+    if ('Fn::Sub' in rec) {
+        const v = rec['Fn::Sub'];
+        const tmpl = typeof v === 'string' ? v : Array.isArray(v) && typeof v[0] === 'string' ? v[0] : '';
+        for (const m of tmpl.matchAll(/\$\{([^}]+)\}/g))
+            addLogical(m[1].split('.')[0].trim(), refs);
+    }
+    if ('Fn::ImportValue' in rec) {
+        const v = rec['Fn::ImportValue'];
+        if (typeof v === 'string')
+            onImport(v);
+    }
+    for (const [k, v] of Object.entries(rec)) {
+        if (k === 'DependsOn')
+            continue; // handled at resource level
+        collectIntrinsics(v, refs, onImport);
+    }
+}
+function addLogical(name, refs) {
+    if (!name || name.startsWith('AWS::'))
+        return; // pseudo-parameter
+    refs.add(name);
+}
+//# sourceMappingURL=cloudformation.js.map

package/dist/core/analyzer/iac/cloudformation.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cloudformation.js","sourceRoot":"","sources":["../../../../src/core/analyzer/iac/cloudformation.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,EAAE,WAAW,EAAE,aAAa,EAAsC,MAAM,MAAM,CAAC;AAEtF,OAAO,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAE3C,MAAM,UAAU,GAAG;IACjB,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,WAAW,EAAE,aAAa;IAC7E,QAAQ,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,WAAW;IAC3E,WAAW,EAAE,QAAQ,EAAE,cAAc;CACtC,CAAC;AAEF,wFAAwF;AACxF,SAAS,OAAO;IACd,MAAM,IAAI,GAAqC,EAAE,CAAC;IAClD,KAAK,MAAM,IAAI,IAAI,UAAU,EAAE,CAAC;QAC9B,MAAM,SAAS,GAAG,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,IAAI,EAAE,CAAC;QAChF,MAAM,IAAI,GAAG,CAAC,KAAc,EAAE,EAAE,CAAC,CAAC,EAAE,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;QAC1D,IAAI,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,IAAI,IAAI,EAAE,EAAE,OAAO,EAAE,CAAC,GAAW,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,EAAe,CAAC,CAAC;QACjF,IAAI,CAAC,IAAI,CAAC;YACR,GAAG,EAAE,IAAI,IAAI,EAAE,EAAE,UAAU,EAAE,KAAK;YAClC,OAAO,EAAE,CAAC,GAA0B,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,CAAC;SAC3C,CAAC,CAAC;QACpB,IAAI,CAAC,IAAI,CAAC;YACR,GAAG,EAAE,IAAI,IAAI,EAAE,EAAE,UAAU,EAAE,KAAK;YAClC,OAAO,EAAE,CAAC,GAA0B,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,CAAC;SAC3C,CAAC,CAAC;IACtB,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,UAAU,qBAAqB,CACnC,KAA+C;IAE/C,MAAM,KAAK,GAAG,aAAa,EAAE,CAAC;IAC9B,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,IAAI,GAAG,CAAC;QACR,MAAM,EAAE,GAAG,IAAI,WAAW,EAAE,CAAC;QAC7B,IAAI,CAAC;YACH,GAAG,GAAG,aAAa,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,UAAU,EAAE,OAAO,EAAE,EAAE,WAAW,EAAE,EAAE,EAAE,CAAC,CAAC;QAChF,CAAC;QAAC,MAAM,CAAC;YACP,SAAS;QACX,CAAC;QACD,MAAM,EAAE,GAAG,GAAG,CAAC,IAAI,EAAoC,CAAC;QACxD,IAAI,CAAC,EAAE,IAAI,OAAO,EAAE,KAAK,QAAQ;YAAE,SAAS;QAC5C,eAAe,CAAC,EAAE,EAAE,IAAI,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE,EAAE,KAAK,CAAC,CAAC;IACjD,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,eAAe,CACtB,GAA4B,EAC5B,QAAgB,EAChB,GAAqC,EACrC,EAAe,EACf,KAAe;IAEf,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAU,CAAC;IACnC,MAAM,MAAM,GAAG,CAAC,IAAyB,EAAU,EAAE;QACnD,MAAM,IAAI,GAAG,GAAG,CAAC,KAAK,CAAC,IAAI,EAAE,IAAI,CAAqD,CAAC;QACvF,MAAM,GAAG,GAAG,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC;QAC7B,OAAO,GAAG,IAAI,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;IAChD,CAAC,CAAC;IAEF,MAAM,OAAO,GAAG,CACd,OAAe,EAAE,IAAY,EAAE,IAAyB,EACxD,IAAyB,EAAE,SAAiB,EAAE,UAAU,GAAG,KAAK,EAChE,EAAE;QACF,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QACtB,KAAK,CAAC,SAAS,CAAC,IAAI,CAAC;YACnB,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,QAAQ;YAC7B,SAAS,EAAE,MAAM,CAAC,IAAI,CAAC;YACvB,SAAS;YACT,UAAU,EAAE,UAAU,IAAI,SAAS;YACnC,QAAQ,EAAE,gBAAgB;SAC3B,CAAC,CAAC;IACL,CAAC,CAAC;IAEF,MAAM,QAAQ,GAAiD;QAC7D,CAAC,YAAY,EAAE,UAAU,EAAE,WAAW,CAAC;QACvC,CAAC,UAAU,EAAE,OAAO,EAAE,SAAS,CAAC;QAChC,CAAC,YAAY,EAAE,OAAO,EAAE,WAAW,CAAC;KACrC,CAAC;IACF,KAAK,MAAM,CAAC,OAAO,EAAE,IAAI,EAAE,SAAS,CAAC,IAAI,QAAQ,EAAE,CAAC;QAClD,MAAM,GAAG,GAAG,GAAG,CAAC,OAAO,CAAC,CAAC;QACzB,IAAI,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ,EAAE,CAAC;YACnC,KAAK,MAAM,EAAE,IAAI,MAAM,CAAC,IAAI,CAAC,GAA8B,CAAC,EAAE,CAAC;gBAC7D,OAAO,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,EAAE,GAAG,SAAS,KAAK,EAAE,EAAE,CAAC,CAAC;YACrE,CAAC;QACH,CAAC;IACH,CAAC;IAED,MAAM,SAAS,GAAG,CAAC,GAAG,CAAC,SAAS,IAAI,EAAE,CAA4B,CAAC;IACnE,KAAK,MAAM,CAAC,EAAE,EAAE,IAAI,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,CAAC;QACnD,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ;YAAE,SAAS;QAChD,MAAM,IAAI,GAAI,IAAgC,CAAC,IAAI,CAAC;QACpD,MAAM,OAAO,GAAG,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,cAAc,CAAC;QACjE,OAAO,CAAC,EAAE,EAAE,OAAO,EAAE,UAAU,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC,EAAE,GAAG,EAAE,KAAK,OAAO,GAAG,CAAC,CAAC;IAC5E,CAAC;IAED,MAAM,OAAO,GAAG,CAAC,GAAG,CAAC,OAAO,IAAI,EAAE,CAA4B,CAAC;IAC/D,KAAK,MAAM,EAAE,IAAI,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;QACtC,OAAO,CAAC,UAAU,EAAE,EAAE,EAAE,QAAQ,EAAE,QAAQ,EAAE,CAAC,SAAS,EAAE,EAAE,CAAC,EAAE,WAAW,EAAE,EAAE,CAAC,CAAC;IAChF,CAAC;IAED,+EAA+E;IAC/E,MAAM,aAAa,GAAG,IAAI,GAAG,EAAU,CAAC;IACxC,MAAM,cAAc,GAAG,CAAC,OAAe,EAAE,IAAY,EAAE,EAAE;QACvD,IAAI,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,aAAa,CAAC,GAAG,CAAC,OAAO,CAAC;YAAE,OAAO;QAChE,aAAa,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QAC3B,KAAK,CAAC,SAAS,CAAC,IAAI,CAAC;YACnB,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC;YACpD,UAAU,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,QAAQ,EAAE,gBAAgB;SACjE,CAAC,CAAC;IACL,CAAC,CAAC;IAEF,MAAM,QAAQ,GAAG,CAAC,IAAY,EAAE,IAAa,EAAE,EAAE;QAC/C,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;QAC/B,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;QAC/B,iBAAiB,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,UAAU,EAAE,EAAE;YAC3C,MAAM,IAAI,GAAG,eAAe,UAAU,EAAE,CAAC;YACzC,cAAc,CAAC,IAAI,EAAE,iBAAiB,CAAC,CAAC;YACxC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACjB,CAAC,CAAC,CAAC;QACH,uCAAuC;QACvC,IAAI,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;YACrC,MAAM,CAAC,GAAI,IAAgC,CAAC,SAAS,CAAC;YACtD,IAAI,OAAO,CAAC,KAAK,QAAQ;gBAAE,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;iBAClC,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;gBAAE,KAAK,MAAM,CAAC,IAAI,CAAC;oBAAE,IAAI,OAAO,CAAC,KAAK,QAAQ;wBAAE,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;YACrF,wCAAwC;YACxC,MAAM,KAAK,GAAI,IAAgC,CAAC,UAAiD,CAAC;YAClG,IAAK,IAAgC,CAAC,IAAI,KAAK,4BAA4B,IAAI,KAAK,EAAE,WAAW,EAAE,CAAC;gBAClG,MAAM,GAAG,GAAG,OAAO,KAAK,CAAC,WAAW,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,cAAc,CAAC;gBACvF,MAAM,IAAI,GAAG,SAAS,GAAG,EAAE,CAAC;gBAC5B,cAAc,CAAC,IAAI,EAAE,4BAA4B,CAAC,CAAC;gBACnD,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YACjB,CAAC;QACH,CAAC;QACD,MAAM,GAAG,GAAG,CAAC,EAAU,EAAE,IAA0B,EAAE,EAAE;YACrD,IAAI,EAAE,KAAK,IAAI;gBAAE,OAAO;YACxB,IAAI,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,aAAa,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC;gBAC9C,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,WAAW,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;YACpE,CAAC;QACH,CAAC,CAAC;QACF,KAAK,MAAM,CAAC,IAAI,IAAI;YAAE,GAAG,CAAC,CAAC,EAAE,YAAY,CAAC,CAAC;QAC3C,KAAK,MAAM,CAAC,IAAI,IAAI;YAAE,GAAG,CAAC,CAAC,EAAE,YAAY,CAAC,CAAC;IAC7C,CAAC,CAAC;IAEF,KAAK,MAAM,CAAC,EAAE,EAAE,IAAI,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC;QAAE,QAAQ,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;IACvE,KAAK,MAAM,CAAC,EAAE,EAAE,IAAI,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC;QAAE,QAAQ,CAAC,UAAU,EAAE,EAAE,EAAE,IAAI,CAAC,CAAC;AACnF,CAAC;AAED,wFAAwF;AACxF,SAAS,iBAAiB,CAAC,IAAa,EAAE,IAAiB,EAAE,QAAgC;IAC3F,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;QAAC,KAAK,MAAM,CAAC,IAAI,IAAI;YAAE,iBAAiB,CAAC,CAAC,EAAE,IAAI,EAAE,QAAQ,CAAC,CAAC;QAAC,OAAO;IAAC,CAAC;IAChG,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ;QAAE,OAAO;IAC9C,MAAM,GAAG,GAAG,IAA+B,CAAC;IAE5C,IAAI,OAAO,GAAG,CAAC,GAAG,KAAK,QAAQ;QAAE,UAAU,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IAC3D,IAAI,YAAY,IAAI,GAAG,EAAE,CAAC;QACxB,MAAM,CAAC,GAAG,GAAG,CAAC,YAAY,CAAC,CAAC;QAC5B,MAAM,MAAM,GAAG,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QACrG,IAAI,MAAM;YAAE,UAAU,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;IACvC,CAAC;IACD,IAAI,SAAS,IAAI,GAAG,EAAE,CAAC;QACrB,MAAM,CAAC,GAAG,GAAG,CAAC,SAAS,CAAC,CAAC;QACzB,MAAM,IAAI,GAAG,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,OAAO,CAAC,CAAC,CAAC,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAClG,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,gBAAgB,CAAC;YAAE,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,IAAI,CAAC,CAAC;IAC/F,CAAC;IACD,IAAI,iBAAiB,IAAI,GAAG,EAAE,CAAC;QAC7B,MAAM,CAAC,GAAG,GAAG,CAAC,iBAAiB,CAAC,CAAC;QACjC,IAAI,OAAO,CAAC,KAAK,QAAQ;YAAE,QAAQ,CAAC,CAAC,CAAC,CAAC;IACzC,CAAC;IAED,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;QACzC,IAAI,CAAC,KAAK,WAAW;YAAE,SAAS,CAAC,4BAA4B;QAC7D,iBAAiB,CAAC,CAAC,EAAE,IAAI,EAAE,QAAQ,CAAC,CAAC;IACvC,CAAC;AACH,CAAC;AAED,SAAS,UAAU,CAAC,IAAY,EAAE,IAAiB;IACjD,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC;QAAE,OAAO,CAAC,mBAAmB;IAClE,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;AACjB,CAAC"}

package/dist/core/analyzer/iac/helm.d.ts

@@ -0,0 +1,20 @@
+/**
+ * Helm chart extraction (spec-07).
+ *
+ * A chart is a directory containing `Chart.yaml`. We parse Chart.yaml
+ * (name + dependencies), and the templates under `templates/`. Templates are
+ * Go-templated YAML, not valid YAML as-is, so we run a tolerant pre-pass that
+ * masks `{{ … }}` (never executing it) so the structure parses best-effort.
+ *
+ * Edges: chart → subchart dependency (external unless vendored under charts/),
+ * template → named-template (`include`/`template` → `define`), and template →
+ * values (`.Values.x` resolved to the longest matching values.yaml key).
+ */
+import type { IacGraph } from './types.js';
+interface InFile {
+    path: string;
+    content: string;
+}
+export declare function extractHelm(files: InFile[]): IacGraph;
+export {};
+//# sourceMappingURL=helm.d.ts.map

package/dist/core/analyzer/iac/helm.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"helm.d.ts","sourceRoot":"","sources":["../../../../src/core/analyzer/iac/helm.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAIH,OAAO,KAAK,EAAE,QAAQ,EAAa,MAAM,YAAY,CAAC;AAGtD,UAAU,MAAM;IAAG,IAAI,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE;AAElD,wBAAgB,WAAW,CAAC,KAAK,EAAE,MAAM,EAAE,GAAG,QAAQ,CA4BrD"}

package/dist/core/analyzer/iac/helm.js

@@ -0,0 +1,229 @@
+/**
+ * Helm chart extraction (spec-07).
+ *
+ * A chart is a directory containing `Chart.yaml`. We parse Chart.yaml
+ * (name + dependencies), and the templates under `templates/`. Templates are
+ * Go-templated YAML, not valid YAML as-is, so we run a tolerant pre-pass that
+ * masks `{{ … }}` (never executing it) so the structure parses best-effort.
+ *
+ * Edges: chart → subchart dependency (external unless vendored under charts/),
+ * template → named-template (`include`/`template` → `define`), and template →
+ * values (`.Values.x` resolved to the longest matching values.yaml key).
+ */
+import { dirname, posix as posixPath } from 'node:path';
+import { parseAllDocuments } from 'yaml';
+import { emptyIacGraph } from './types.js';
+export function extractHelm(files) {
+    const graph = emptyIacGraph();
+    const chartRoots = files
+        .filter((f) => /(^|\/)Chart\.ya?ml$/.test(f.path.replace(/\\/g, '/')))
+        .map((f) => posixPath.normalize(dirname(f.path.replace(/\\/g, '/'))));
+    const fileChart = (path) => {
+        const p = posixPath.normalize(path.replace(/\\/g, '/'));
+        let best = null;
+        for (const root of chartRoots) {
+            if ((p === root || p.startsWith(root + '/')) && (best === null || root.length > best.length))
+                best = root;
+        }
+        return best;
+    };
+    // Group files by chart root.
+    const byChart = new Map();
+    for (const f of files) {
+        const root = fileChart(f.path);
+        if (!root)
+            continue;
+        if (!byChart.has(root))
+            byChart.set(root, []);
+        byChart.get(root).push(f);
+    }
+    for (const [root, chartFiles] of byChart) {
+        extractChart(root, chartFiles, chartRoots, graph);
+    }
+    return graph;
+}
+function extractChart(root, chartFiles, allChartRoots, graph) {
+    const chartYaml = chartFiles.find((f) => /(^|\/)Chart\.ya?ml$/.test(f.path.replace(/\\/g, '/')));
+    if (!chartYaml)
+        return;
+    let meta = {};
+    try {
+        const docs = parseAllDocuments(chartYaml.content);
+        meta = (docs[0]?.toJS() ?? {});
+    }
+    catch { /* tolerate */ }
+    const chartName = typeof meta.name === 'string' ? meta.name : posixPath.basename(root);
+    const chartAddr = `chart.${chartName}`;
+    const module = {
+        address: chartAddr, type: 'chart', filePath: chartYaml.path, language: 'Helm', members: [],
+    };
+    graph.modules.push(module);
+    graph.resources.push({
+        address: chartAddr, type: 'chart', kind: 'module', filePath: chartYaml.path,
+        startLine: 1, signature: `chart: ${chartName}`, language: 'Helm',
+    });
+    // Subchart dependencies.
+    const deps = Array.isArray(meta.dependencies) ? meta.dependencies : [];
+    for (const dep of deps) {
+        const depName = typeof dep.name === 'string' ? dep.name : undefined;
+        if (!depName)
+            continue;
+        const alias = typeof dep.alias === 'string' ? dep.alias : depName;
+        const depAddr = `chart.${alias}`;
+        const vendored = allChartRoots.some((r) => r === posixPath.normalize(`${root}/charts/${depName}`));
+        if (!graph.resources.some((r) => r.address === depAddr)) {
+            graph.resources.push({
+                address: depAddr, type: 'chart', kind: 'module', filePath: chartYaml.path,
+                startLine: 1, isExternal: vendored ? undefined : true,
+                signature: `subchart: ${alias}`, language: 'Helm',
+            });
+        }
+        graph.references.push({ fromAddress: chartAddr, toAddress: depAddr, kind: 'depends_on' });
+        module.members.push(depAddr);
+    }
+    // values.yaml → flattened dot-path set (for .Values.x resolution below).
+    const valuesFile = chartFiles.find((f) => /(^|\/)values\.ya?ml$/.test(f.path.replace(/\\/g, '/')));
+    const valuePaths = new Set();
+    if (valuesFile) {
+        try {
+            const v = (parseAllDocuments(valuesFile.content)[0]?.toJS() ?? {});
+            flattenKeys(v, '', valuePaths);
+        }
+        catch { /* tolerate malformed values */ }
+    }
+    const valuesFilePath = valuesFile?.path ?? chartYaml.path;
+    const ensureValueNode = (path) => {
+        const addr = `${chartName}:values:${path}`;
+        if (!graph.resources.some((r) => r.address === addr)) {
+            graph.resources.push({
+                address: addr, type: 'value', kind: 'value', filePath: valuesFilePath,
+                startLine: 1, signature: `.Values.${path}`, language: 'Helm',
+            });
+            module.members.push(addr);
+        }
+        return addr;
+    };
+    /** Resolve a referenced `.Values` path to the longest declared prefix, or null. */
+    const resolveValuePath = (path) => {
+        const parts = path.split('.');
+        for (let i = parts.length; i > 0; i--) {
+            const prefix = parts.slice(0, i).join('.');
+            if (valuePaths.has(prefix))
+                return prefix;
+        }
+        return null;
+    };
+    // Named templates (define) and includes across templates/_helpers.
+    for (const f of chartFiles) {
+        const rel = posixPath.relative(root, posixPath.normalize(f.path.replace(/\\/g, '/')));
+        if (!/(^|\/)templates\//.test(f.path.replace(/\\/g, '/')))
+            continue;
+        // define "NAME"
+        for (const m of f.content.matchAll(/\{\{-?\s*define\s+"([^"]+)"/g)) {
+            const defAddr = `${chartName}:define:${m[1]}`;
+            if (!graph.resources.some((r) => r.address === defAddr)) {
+                graph.resources.push({
+                    address: defAddr, type: 'template', kind: 'value', filePath: f.path,
+                    startLine: lineOfIndex(f.content, m.index ?? 0),
+                    signature: `define "${m[1]}"`, language: 'Helm',
+                });
+                module.members.push(defAddr);
+            }
+        }
+        // template-file anchor node (source of include edges + best-effort manifests).
+        const anchorAddr = `${chartName}:tpl:${rel}`;
+        graph.resources.push({
+            address: anchorAddr, type: 'template', kind: 'manifest', filePath: f.path,
+            startLine: 1, signature: `template: ${rel}`, language: 'Helm',
+        });
+        module.members.push(anchorAddr);
+        // include "NAME" / template "NAME" → reference to the define node.
+        const seen = new Set();
+        for (const m of f.content.matchAll(/\{\{-?\s*(?:include|template)\s+"([^"]+)"/g)) {
+            const defAddr = `${chartName}:define:${m[1]}`;
+            if (seen.has(defAddr))
+                continue;
+            seen.add(defAddr);
+            graph.references.push({ fromAddress: anchorAddr, toAddress: defAddr, kind: 'references' });
+        }
+        // .Values.x references → values.yaml key nodes (longest declared prefix).
+        const seenValues = new Set();
+        for (const m of f.content.matchAll(/\.Values\.([A-Za-z_][\w.]*)/g)) {
+            const resolved = resolveValuePath(m[1].replace(/\.$/, ''));
+            if (!resolved || seenValues.has(resolved))
+                continue;
+            seenValues.add(resolved);
+            const valAddr = ensureValueNode(resolved);
+            graph.references.push({ fromAddress: anchorAddr, toAddress: valAddr, kind: 'references' });
+        }
+        // Best-effort manifest extraction (tolerant masked parse).
+        extractTemplateManifests(f, chartName, module, graph);
+    }
+}
+function extractTemplateManifests(f, chartName, module, graph) {
+    const masked = maskHelm(f.content);
+    let docs;
+    try {
+        docs = parseAllDocuments(masked);
+    }
+    catch {
+        return;
+    }
+    for (const doc of docs) {
+        let obj = null;
+        try {
+            obj = doc.toJS();
+        }
+        catch {
+            continue;
+        }
+        if (!obj || typeof obj !== 'object')
+            continue;
+        const kind = typeof obj.kind === 'string' ? obj.kind : '';
+        const meta = (obj.metadata ?? {});
+        const name = typeof meta.name === 'string' ? meta.name : '';
+        if (!kind || !name)
+            continue;
+        const addr = `${chartName}:${kind}/${name}`;
+        if (graph.resources.some((r) => r.address === addr))
+            continue;
+        graph.resources.push({
+            address: addr, type: kind, kind: 'manifest', filePath: f.path,
+            startLine: 1, signature: `${kind}/${name} (templated)`, language: 'Helm',
+        });
+        module.members.push(addr);
+    }
+}
+/** Mask Go-template directives so the YAML structure parses (never executed). */
+function maskHelm(content) {
+    return content
+        .split('\n')
+        .map((line) => {
+        const trimmed = line.trim();
+        // Drop whole-line control directives ({{ if }}, {{ end }}, {{- range }}, …).
+        if (/^\{\{-?.*-?\}\}$/.test(trimmed) && /\b(if|else|end|range|with|define|template|include|toYaml|nindent)\b/.test(trimmed)) {
+            return '';
+        }
+        // Replace inline expressions with a placeholder scalar.
+        return line.replace(/\{\{-?[\s\S]*?-?\}\}/g, 'helmval');
+    })
+        .join('\n');
+}
+/** Flatten a values object into dot-path keys (every node and leaf). */
+function flattenKeys(obj, prefix, out) {
+    if (!obj || typeof obj !== 'object' || Array.isArray(obj))
+        return;
+    for (const [k, v] of Object.entries(obj)) {
+        const path = prefix ? `${prefix}.${k}` : k;
+        out.add(path);
+        flattenKeys(v, path, out);
+    }
+}
+function lineOfIndex(content, index) {
+    let n = 1;
+    for (let i = 0; i < index && i < content.length; i++)
+        if (content[i] === '\n')
+            n++;
+    return n;
+}
+//# sourceMappingURL=helm.js.map

package/dist/core/analyzer/iac/helm.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"helm.js","sourceRoot":"","sources":["../../../../src/core/analyzer/iac/helm.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,EAAE,OAAO,EAAE,KAAK,IAAI,SAAS,EAAE,MAAM,WAAW,CAAC;AACxD,OAAO,EAAE,iBAAiB,EAAE,MAAM,MAAM,CAAC;AAEzC,OAAO,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAI3C,MAAM,UAAU,WAAW,CAAC,KAAe;IACzC,MAAM,KAAK,GAAG,aAAa,EAAE,CAAC;IAC9B,MAAM,UAAU,GAAG,KAAK;SACrB,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,qBAAqB,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,CAAC;SACrE,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,SAAS,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;IAExE,MAAM,SAAS,GAAG,CAAC,IAAY,EAAiB,EAAE;QAChD,MAAM,CAAC,GAAG,SAAS,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,CAAC;QACxD,IAAI,IAAI,GAAkB,IAAI,CAAC;QAC/B,KAAK,MAAM,IAAI,IAAI,UAAU,EAAE,CAAC;YAC9B,IAAI,CAAC,CAAC,KAAK,IAAI,IAAI,CAAC,CAAC,UAAU,CAAC,IAAI,GAAG,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,KAAK,IAAI,IAAI,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC;gBAAE,IAAI,GAAG,IAAI,CAAC;QAC5G,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC,CAAC;IAEF,6BAA6B;IAC7B,MAAM,OAAO,GAAG,IAAI,GAAG,EAAoB,CAAC;IAC5C,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;QACtB,MAAM,IAAI,GAAG,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QAC/B,IAAI,CAAC,IAAI;YAAE,SAAS;QACpB,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC;YAAE,OAAO,CAAC,GAAG,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;QAC9C,OAAO,CAAC,GAAG,CAAC,IAAI,CAAE,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAC7B,CAAC;IAED,KAAK,MAAM,CAAC,IAAI,EAAE,UAAU,CAAC,IAAI,OAAO,EAAE,CAAC;QACzC,YAAY,CAAC,IAAI,EAAE,UAAU,EAAE,UAAU,EAAE,KAAK,CAAC,CAAC;IACpD,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,YAAY,CAAC,IAAY,EAAE,UAAoB,EAAE,aAAuB,EAAE,KAAe;IAChG,MAAM,SAAS,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,qBAAqB,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC;IACjG,IAAI,CAAC,SAAS;QAAE,OAAO;IAEvB,IAAI,IAAI,GAA4B,EAAE,CAAC;IACvC,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,iBAAiB,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;QAClD,IAAI,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,CAA4B,CAAC;IAC5D,CAAC;IAAC,MAAM,CAAC,CAAC,cAAc,CAAC,CAAC;IAC1B,MAAM,SAAS,GAAG,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;IACvF,MAAM,SAAS,GAAG,SAAS,SAAS,EAAE,CAAC;IAEvC,MAAM,MAAM,GAAc;QACxB,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,OAAO,EAAE,QAAQ,EAAE,SAAS,CAAC,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,EAAE;KAC3F,CAAC;IACF,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAC3B,KAAK,CAAC,SAAS,CAAC,IAAI,CAAC;QACnB,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,SAAS,CAAC,IAAI;QAC3E,SAAS,EAAE,CAAC,EAAE,SAAS,EAAE,UAAU,SAAS,EAAE,EAAE,QAAQ,EAAE,MAAM;KACjE,CAAC,CAAC;IAEH,yBAAyB;IACzB,MAAM,IAAI,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,YAA8C,CAAC,CAAC,CAAC,EAAE,CAAC;IACzG,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,MAAM,OAAO,GAAG,OAAO,GAAG,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;QACpE,IAAI,CAAC,OAAO;YAAE,SAAS;QACvB,MAAM,KAAK,GAAG,OAAO,GAAG,CAAC,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC;QAClE,MAAM,OAAO,GAAG,SAAS,KAAK,EAAE,CAAC;QACjC,MAAM,QAAQ,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,SAAS,CAAC,SAAS,CAAC,GAAG,IAAI,WAAW,OAAO,EAAE,CAAC,CAAC,CAAC;QACnG,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,KAAK,OAAO,CAAC,EAAE,CAAC;YACxD,KAAK,CAAC,SAAS,CAAC,IAAI,CAAC;gBACnB,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,SAAS,CAAC,IAAI;gBACzE,SAAS,EAAE,CAAC,EAAE,UAAU,EAAE,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI;gBACrD,SAAS,EAAE,aAAa,KAAK,EAAE,EAAE,QAAQ,EAAE,MAAM;aAClD,CAAC,CAAC;QACL,CAAC;QACD,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,WAAW,EAAE,SAAS,EAAE,SAAS,EAAE,OAAO,EAAE,IAAI,EAAE,YAAY,EAAE,CAAC,CAAC;QAC1F,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAC/B,CAAC;IAED,yEAAyE;IACzE,MAAM,UAAU,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,sBAAsB,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC;IACnG,MAAM,UAAU,GAAG,IAAI,GAAG,EAAU,CAAC;IACrC,IAAI,UAAU,EAAE,CAAC;QACf,IAAI,CAAC;YACH,MAAM,CAAC,GAAG,CAAC,iBAAiB,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,CAA4B,CAAC;YAC9F,WAAW,CAAC,CAAC,EAAE,EAAE,EAAE,UAAU,CAAC,CAAC;QACjC,CAAC;QAAC,MAAM,CAAC,CAAC,+BAA+B,CAAC,CAAC;IAC7C,CAAC;IACD,MAAM,cAAc,GAAG,UAAU,EAAE,IAAI,IAAI,SAAS,CAAC,IAAI,CAAC;IAC1D,MAAM,eAAe,GAAG,CAAC,IAAY,EAAU,EAAE;QAC/C,MAAM,IAAI,GAAG,GAAG,SAAS,WAAW,IAAI,EAAE,CAAC;QAC3C,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,KAAK,IAAI,CAAC,EAAE,CAAC;YACrD,KAAK,CAAC,SAAS,CAAC,IAAI,CAAC;gBACnB,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,QAAQ,EAAE,cAAc;gBACrE,SAAS,EAAE,CAAC,EAAE,SAAS,EAAE,WAAW,IAAI,EAAE,EAAE,QAAQ,EAAE,MAAM;aAC7D,CAAC,CAAC;YACH,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC5B,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC,CAAC;IACF,mFAAmF;IACnF,MAAM,gBAAgB,GAAG,CAAC,IAAY,EAAiB,EAAE;QACvD,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC9B,KAAK,IAAI,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;YACtC,MAAM,MAAM,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAC3C,IAAI,UAAU,CAAC,GAAG,CAAC,MAAM,CAAC;gBAAE,OAAO,MAAM,CAAC;QAC5C,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC,CAAC;IAEF,mEAAmE;IACnE,KAAK,MAAM,CAAC,IAAI,UAAU,EAAE,CAAC;QAC3B,MAAM,GAAG,GAAG,SAAS,CAAC,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC;QACtF,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;YAAE,SAAS;QAEpE,gBAAgB;QAChB,KAAK,MAAM,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,8BAA8B,CAAC,EAAE,CAAC;YACnE,MAAM,OAAO,GAAG,GAAG,SAAS,WAAW,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YAC9C,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,KAAK,OAAO,CAAC,EAAE,CAAC;gBACxD,KAAK,CAAC,SAAS,CAAC,IAAI,CAAC;oBACnB,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC,CAAC,IAAI;oBACnE,SAAS,EAAE,WAAW,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC;oBAC/C,SAAS,EAAE,WAAW,CAAC,CAAC,CAAC,CAAC,GAAG,EAAE,QAAQ,EAAE,MAAM;iBAChD,CAAC,CAAC;gBACH,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YAC/B,CAAC;QACH,CAAC;QAED,+EAA+E;QAC/E,MAAM,UAAU,GAAG,GAAG,SAAS,QAAQ,GAAG,EAAE,CAAC;QAC7C,KAAK,CAAC,SAAS,CAAC,IAAI,CAAC;YACnB,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,UAAU,EAAE,QAAQ,EAAE,CAAC,CAAC,IAAI;YACzE,SAAS,EAAE,CAAC,EAAE,SAAS,EAAE,aAAa,GAAG,EAAE,EAAE,QAAQ,EAAE,MAAM;SAC9D,CAAC,CAAC;QACH,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QAEhC,mEAAmE;QACnE,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;QAC/B,KAAK,MAAM,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,4CAA4C,CAAC,EAAE,CAAC;YACjF,MAAM,OAAO,GAAG,GAAG,SAAS,WAAW,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YAC9C,IAAI,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC;gBAAE,SAAS;YAChC,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;YAClB,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,WAAW,EAAE,UAAU,EAAE,SAAS,EAAE,OAAO,EAAE,IAAI,EAAE,YAAY,EAAE,CAAC,CAAC;QAC7F,CAAC;QAED,0EAA0E;QAC1E,MAAM,UAAU,GAAG,IAAI,GAAG,EAAU,CAAC;QACrC,KAAK,MAAM,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,8BAA8B,CAAC,EAAE,CAAC;YACnE,MAAM,QAAQ,GAAG,gBAAgB,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,CAAC;YAC3D,IAAI,CAAC,QAAQ,IAAI,UAAU,CAAC,GAAG,CAAC,QAAQ,CAAC;gBAAE,SAAS;YACpD,UAAU,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;YACzB,MAAM,OAAO,GAAG,eAAe,CAAC,QAAQ,CAAC,CAAC;YAC1C,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,WAAW,EAAE,UAAU,EAAE,SAAS,EAAE,OAAO,EAAE,IAAI,EAAE,YAAY,EAAE,CAAC,CAAC;QAC7F,CAAC;QAED,2DAA2D;QAC3D,wBAAwB,CAAC,CAAC,EAAE,SAAS,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC;IACxD,CAAC;AACH,CAAC;AAED,SAAS,wBAAwB,CAAC,CAAS,EAAE,SAAiB,EAAE,MAAiB,EAAE,KAAe;IAChG,MAAM,MAAM,GAAG,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;IACnC,IAAI,IAAI,CAAC;IACT,IAAI,CAAC;QACH,IAAI,GAAG,iBAAiB,CAAC,MAAM,CAAC,CAAC;IACnC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO;IACT,CAAC;IACD,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,IAAI,GAAG,GAAmC,IAAI,CAAC;QAC/C,IAAI,CAAC;YAAC,GAAG,GAAG,GAAG,CAAC,IAAI,EAAoC,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC;YAAC,SAAS;QAAC,CAAC;QAC/E,IAAI,CAAC,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ;YAAE,SAAS;QAC9C,MAAM,IAAI,GAAG,OAAO,GAAG,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;QAC1D,MAAM,IAAI,GAAG,CAAC,GAAG,CAAC,QAAQ,IAAI,EAAE,CAA4B,CAAC;QAC7D,MAAM,IAAI,GAAG,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;QAC5D,IAAI,CAAC,IAAI,IAAI,CAAC,IAAI;YAAE,SAAS;QAC7B,MAAM,IAAI,GAAG,GAAG,SAAS,IAAI,IAAI,IAAI,IAAI,EAAE,CAAC;QAC5C,IAAI,KAAK,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,KAAK,IAAI,CAAC;YAAE,SAAS;QAC9D,KAAK,CAAC,SAAS,CAAC,IAAI,CAAC;YACnB,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,UAAU,EAAE,QAAQ,EAAE,CAAC,CAAC,IAAI;YAC7D,SAAS,EAAE,CAAC,EAAE,SAAS,EAAE,GAAG,IAAI,IAAI,IAAI,cAAc,EAAE,QAAQ,EAAE,MAAM;SACzE,CAAC,CAAC;QACH,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC5B,CAAC;AACH,CAAC;AAED,iFAAiF;AACjF,SAAS,QAAQ,CAAC,OAAe;IAC/B,OAAO,OAAO;SACX,KAAK,CAAC,IAAI,CAAC;SACX,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE;QACZ,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;QAC5B,6EAA6E;QAC7E,IAAI,kBAAkB,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,qEAAqE,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;YAC5H,OAAO,EAAE,CAAC;QACZ,CAAC;QACD,wDAAwD;QACxD,OAAO,IAAI,CAAC,OAAO,CAAC,uBAAuB,EAAE,SAAS,CAAC,CAAC;IAC1D,CAAC,CAAC;SACD,IAAI,CAAC,IAAI,CAAC,CAAC;AAChB,CAAC;AAED,wEAAwE;AACxE,SAAS,WAAW,CAAC,GAAY,EAAE,MAAc,EAAE,GAAgB;IACjE,IAAI,CAAC,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC;QAAE,OAAO;IAClE,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,GAA8B,CAAC,EAAE,CAAC;QACpE,MAAM,IAAI,GAAG,MAAM,CAAC,CAAC,CAAC,GAAG,MAAM,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;QAC3C,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACd,WAAW,CAAC,CAAC,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC;IAC5B,CAAC;AACH,CAAC;AAED,SAAS,WAAW,CAAC,OAAe,EAAE,KAAa;IACjD,IAAI,CAAC,GAAG,CAAC,CAAC;IACV,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,IAAI,CAAC,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,EAAE;QAAE,IAAI,OAAO,CAAC,CAAC,CAAC,KAAK,IAAI;YAAE,CAAC,EAAE,CAAC;IACnF,OAAO,CAAC,CAAC;AACX,CAAC"}

package/dist/core/analyzer/iac/index.d.ts

@@ -0,0 +1,23 @@
+/**
+ * IaC graph builder (spec-07).
+ *
+ * Dispatches files by language to the per-ecosystem parsers, merges their
+ * normalized resource graphs, and projects the result onto the existing
+ * FunctionNode/CallEdge/ClassNode primitives. Kept thin on purpose: all
+ * parsing lives in the sibling ecosystem modules, mirroring src/core/scip/.
+ */
+import { type ProjectedIac } from './project.js';
+import { type IacGraph } from './types.js';
+export { isIacLanguage, IAC_LANGUAGES } from './types.js';
+export { classifyYaml } from './classify-yaml.js';
+export type { ProjectedIac } from './project.js';
+interface InFile {
+    path: string;
+    content: string;
+    language: string;
+}
+/** Build the normalized IaC graph from a mixed file set (no projection). */
+export declare function buildIacGraph(files: InFile[]): IacGraph;
+/** Build and project the IaC graph onto existing graph primitives. */
+export declare function buildProjectedIac(files: InFile[]): ProjectedIac;
+//# sourceMappingURL=index.d.ts.map

package/dist/core/analyzer/iac/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/core/analyzer/iac/index.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AASH,OAAO,EAAmB,KAAK,YAAY,EAAE,MAAM,cAAc,CAAC;AAClE,OAAO,EAAkB,KAAK,QAAQ,EAAE,MAAM,YAAY,CAAC;AAE3D,OAAO,EAAE,aAAa,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAC1D,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,YAAY,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAEjD,UAAU,MAAM;IAAG,IAAI,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAA;CAAE;AAEpE,4EAA4E;AAC5E,wBAAgB,aAAa,CAAC,KAAK,EAAE,MAAM,EAAE,GAAG,QAAQ,CAgBvD;AAED,sEAAsE;AACtE,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,MAAM,EAAE,GAAG,YAAY,CAE/D"}

package/dist/core/analyzer/iac/index.js

@@ -0,0 +1,40 @@
+/**
+ * IaC graph builder (spec-07).
+ *
+ * Dispatches files by language to the per-ecosystem parsers, merges their
+ * normalized resource graphs, and projects the result onto the existing
+ * FunctionNode/CallEdge/ClassNode primitives. Kept thin on purpose: all
+ * parsing lives in the sibling ecosystem modules, mirroring src/core/scip/.
+ */
+import { extractTerraform } from './terraform.js';
+import { extractKubernetes } from './kubernetes.js';
+import { extractHelm } from './helm.js';
+import { extractCloudFormation } from './cloudformation.js';
+import { extractAnsible } from './ansible.js';
+import { extractPulumi } from './pulumi.js';
+import { extractCdk } from './cdk.js';
+import { projectIacGraph } from './project.js';
+import { mergeIacGraphs } from './types.js';
+export { isIacLanguage, IAC_LANGUAGES } from './types.js';
+export { classifyYaml } from './classify-yaml.js';
+/** Build the normalized IaC graph from a mixed file set (no projection). */
+export function buildIacGraph(files) {
+    const byLang = (lang) => files.filter((f) => f.language === lang);
+    const generalPurpose = files.filter((f) => f.language === 'TypeScript' || f.language === 'JavaScript' || f.language === 'Python' || f.language === 'Go');
+    const graphs = [
+        extractTerraform(byLang('Terraform')),
+        extractKubernetes(byLang('Kubernetes')),
+        extractHelm(byLang('Helm')),
+        extractCloudFormation(byLang('CloudFormation')),
+        extractAnsible(byLang('Ansible')),
+        // Pulumi, CDK, and CDKTF ride on existing general-purpose languages, not an IaC tag.
+        extractPulumi(generalPurpose),
+        extractCdk(generalPurpose),
+    ];
+    return mergeIacGraphs(graphs);
+}
+/** Build and project the IaC graph onto existing graph primitives. */
+export function buildProjectedIac(files) {
+    return projectIacGraph(buildIacGraph(files));
+}
+//# sourceMappingURL=index.js.map

package/dist/core/analyzer/iac/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../src/core/analyzer/iac/index.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AAClD,OAAO,EAAE,iBAAiB,EAAE,MAAM,iBAAiB,CAAC;AACpD,OAAO,EAAE,WAAW,EAAE,MAAM,WAAW,CAAC;AACxC,OAAO,EAAE,qBAAqB,EAAE,MAAM,qBAAqB,CAAC;AAC5D,OAAO,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AAC9C,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAC5C,OAAO,EAAE,UAAU,EAAE,MAAM,UAAU,CAAC;AACtC,OAAO,EAAE,eAAe,EAAqB,MAAM,cAAc,CAAC;AAClE,OAAO,EAAE,cAAc,EAAiB,MAAM,YAAY,CAAC;AAE3D,OAAO,EAAE,aAAa,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAC1D,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAKlD,4EAA4E;AAC5E,MAAM,UAAU,aAAa,CAAC,KAAe;IAC3C,MAAM,MAAM,GAAG,CAAC,IAAY,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,IAAI,CAAC,CAAC;IAC1E,MAAM,cAAc,GAAG,KAAK,CAAC,MAAM,CACjC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,YAAY,IAAI,CAAC,CAAC,QAAQ,KAAK,YAAY,IAAI,CAAC,CAAC,QAAQ,KAAK,QAAQ,IAAI,CAAC,CAAC,QAAQ,KAAK,IAAI,CACpH,CAAC;IACF,MAAM,MAAM,GAAe;QACzB,gBAAgB,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;QACrC,iBAAiB,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;QACvC,WAAW,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QAC3B,qBAAqB,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC;QAC/C,cAAc,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QACjC,qFAAqF;QACrF,aAAa,CAAC,cAAc,CAAC;QAC7B,UAAU,CAAC,cAAc,CAAC;KAC3B,CAAC;IACF,OAAO,cAAc,CAAC,MAAM,CAAC,CAAC;AAChC,CAAC;AAED,sEAAsE;AACtE,MAAM,UAAU,iBAAiB,CAAC,KAAe;IAC/C,OAAO,eAAe,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC,CAAC;AAC/C,CAAC"}

package/dist/core/analyzer/iac/kubernetes.d.ts

@@ -0,0 +1,14 @@
+/**
+ * Kubernetes manifest extraction (spec-07).
+ *
+ * One node per YAML document (`---`-separated). Edges follow the typed
+ * references that operators reason about: label selectors, *KeyRef / envFrom,
+ * volume refs, serviceName, ownerReferences, Ingress→Service, serviceAccount.
+ * Unknown kinds (CRDs) still become nodes — only unresolved edges are dropped.
+ */
+import type { IacGraph } from './types.js';
+export declare function extractKubernetes(files: Array<{
+    path: string;
+    content: string;
+}>): IacGraph;
+//# sourceMappingURL=kubernetes.d.ts.map

package/dist/core/analyzer/iac/kubernetes.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"kubernetes.d.ts","sourceRoot":"","sources":["../../../../src/core/analyzer/iac/kubernetes.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAGH,OAAO,KAAK,EAAE,QAAQ,EAA6B,MAAM,YAAY,CAAC;AAkBtE,wBAAgB,iBAAiB,CAC/B,KAAK,EAAE,KAAK,CAAC;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CAAC,GAC9C,QAAQ,CAgDV"}