feat(artifacts): repository-artifact layer — artifacts, dependencies, config keys; graph 2.2.0 - #206

Merged

rahlk merged 19 commits into

mainfrom

feat/issue-197-artifact-layer

Aug 31, 2026

Commits on Aug 31, 2026

feat(artifacts): schema models for artifact, dependency and config key
rahlk
committed
6eef4ee
feat(artifacts): repo-wide discovery walk with never-drop inventory
rahlk
committed
3d19064
test(artifacts): cover slash-pattern matching against the full repo-relative path
rahlk
committed
5cc0493
feat(artifacts): pom.xml, Gradle and lockfile dependency parsers
rahlk
committed
c514813
fix(artifacts): optional Maven dependency sets kind=optional, overriding scope
rahlk
committed
a158642
fix(artifacts): attribute each XXE hardening switch individually; split parseManifest's catch
rahlk
committed
85440f0
feat(artifacts): dependency view with lockfile reconciliation
rahlk
committed
47bef64
fix(artifacts): widen readFromDisk to public so task 6 can reuse it
rahlk
committed
800df6a
feat(artifacts): config-key flattening for properties, yaml, xml and dockerfile
rahlk
committed
8d2e617
fix(artifacts): close yaml config-key gaps from review round 1
rahlk
committed
5950a3d
fix(schema): move the yaml env-dual-mint id into CanId as a ninth constructor
rahlk
committed
f04e9ba
feat(artifacts): emit the repository-artifact layer at every analysis level
rahlk
committed
304d4a0
feat(artifacts): project Artifact/Package/ConfigKey; graph contract 2.2.0
rahlk
committed
26150a5
fix(artifacts): DDL + wipe coverage for Artifact/Package/ConfigKey
rahlk
committed
a025f6c
fix(artifacts): revert wipe reaching Artifact/ConfigKey; add negative guards
rahlk
committed
9a86241
docs(artifacts): correct javadocs that describe behaviour the code does not have
rahlk
committed
2b1b12b
docs(schema): state the env dual-mint id divergence from the reference
rahlk
committed
ad677b2
test(artifacts): pin LOCKS dedup, edge sources, and the bare --artifact-text form
rahlk
committed
0d45076
docs(artifacts): fix textMaxBytes javadoc for dependency-manifest exemption
rahlk
committed
699284c

Navigation Menu

feat(artifacts): repository-artifact layer — artifacts, dependencies, config keys; graph 2.2.0 - #206

feat(artifacts): repository-artifact layer — artifacts, dependencies, config keys; graph 2.2.0#206
rahlk merged 19 commits into
mainfrom
feat/issue-197-artifact-layer

Commits on Aug 31, 2026

feat(artifacts): schema models for artifact, dependency and config key

feat(artifacts): repo-wide discovery walk with never-drop inventory

test(artifacts): cover slash-pattern matching against the full repo-relative path

feat(artifacts): pom.xml, Gradle and lockfile dependency parsers

fix(artifacts): optional Maven dependency sets kind=optional, overriding scope

fix(artifacts): attribute each XXE hardening switch individually; split parseManifest's catch

feat(artifacts): dependency view with lockfile reconciliation

fix(artifacts): widen readFromDisk to public so task 6 can reuse it

feat(artifacts): config-key flattening for properties, yaml, xml and dockerfile

fix(artifacts): close yaml config-key gaps from review round 1

fix(schema): move the yaml env-dual-mint id into CanId as a ninth constructor

feat(artifacts): emit the repository-artifact layer at every analysis level

feat(artifacts): project Artifact/Package/ConfigKey; graph contract 2.2.0

fix(artifacts): DDL + wipe coverage for Artifact/Package/ConfigKey

fix(artifacts): revert wipe reaching Artifact/ConfigKey; add negative guards

docs(artifacts): correct javadocs that describe behaviour the code does not have

docs(schema): state the env dual-mint id divergence from the reference

test(artifacts): pin LOCKS dedup, edge sources, and the bare --artifact-text form

docs(artifacts): fix textMaxBytes javadoc for dependency-manifest exemption