the-code-graph-cli 0.1.2

Command-line interface for The Code Graph
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91

use domain::analysis::risk::split_into_segments;
use domain::error::Result;
use domain::model::RiskConfig;
use domain::use_cases::risk::RiskUseCase;

use crate::commands::helpers::open_graph;
use crate::commands::RiskArgs;
use crate::config::load_config;
use crate::output::{print, OutputFormat, RiskScoreDetail};

pub fn run_risk(args: &RiskArgs, output_format: OutputFormat) -> Result<()> {
    let (store, root) = open_graph()?;
    let config = load_config(&root)?;

    // Build RiskConfig from defaults + config.toml overrides
    let mut risk_config = RiskConfig::default();

    if let Some(rc) = &config.risk {
        // Override weights if specified
        if let Some(w) = rc.weight_criticality {
            risk_config.weights.criticality = w;
        }
        if let Some(w) = rc.weight_coupling {
            risk_config.weights.coupling = w;
        }
        if let Some(w) = rc.weight_test_gap {
            risk_config.weights.test_gap = w;
        }
        if let Some(w) = rc.weight_sensitivity {
            risk_config.weights.sensitivity = w;
        }

        // Merge security patterns: built-in + extra - excluded
        if let Some(extra) = &rc.extra_security_patterns {
            risk_config.security_patterns.extend(extra.clone());
        }
        if let Some(excluded) = &rc.excluded_security_patterns {
            risk_config
                .security_patterns
                .retain(|p| !excluded.contains(p));
        }
    }

    // Normalize weights
    risk_config.weights = risk_config.weights.normalized();

    let uc = RiskUseCase::new(store);

    if let Some(ref target) = args.target {
        // Single target mode
        let score = uc.score_symbol(target, &risk_config)?;
        // Find which security patterns matched this symbol
        let segments = split_into_segments(&score.qualified_name);
        let lower_patterns: Vec<String> = risk_config
            .security_patterns
            .iter()
            .map(|p| p.to_lowercase())
            .collect();
        let matched_patterns: Vec<String> = lower_patterns
            .iter()
            .filter(|pat| segments.iter().any(|seg| seg.starts_with(pat.as_str())))
            .cloned()
            .collect();
        let detail = RiskScoreDetail {
            score,
            matched_patterns,
            weights: risk_config.weights.clone(),
        };
        print(&detail, output_format);
    } else if args.symbols {
        // Symbol list mode
        let analysis = uc.analyze(&risk_config)?;
        let filtered: Vec<_> = analysis
            .symbol_scores
            .into_iter()
            .filter(|s| s.composite >= args.min_score)
            .take(args.limit)
            .collect();
        print(&filtered, output_format);
    } else {
        // Default: file list mode
        let analysis = uc.analyze(&risk_config)?;
        let mut filtered_analysis = analysis;
        filtered_analysis
            .file_scores
            .retain(|f| f.composite >= args.min_score);
        filtered_analysis.file_scores.truncate(args.limit);
        print(&filtered_analysis, output_format);
    }
    Ok(())
}