up

docs/implplan/SPRINT_133_scanner_surface.md

@@ -7,13 +7,13 @@ Dependency: Sprint 132 - 3. Scanner.III — Scanner & Surface focus on Scanner (
 
 | Task ID | State | Summary | Owner / Source | Depends On |
 | --- | --- | --- | --- | --- |
-| `SCANNER-ANALYZERS-NODE-22-006` | TODO | Detect bundles + source maps, reconstruct module specifiers, and correlate to original paths; support dual CJS/ESM graphs with conditions. | Node Analyzer Guild (src/Scanner/__Libraries/StellaOps.Scanner.Analyzers.Lang.Node) | SCANNER-ANALYZERS-NODE-22-005 |
-| `SCANNER-ANALYZERS-NODE-22-007` | TODO | Scan for native addons (.node), WASM modules, and core capability signals (child_process, vm, worker_threads); emit hint edges and native metadata. | Node Analyzer Guild (src/Scanner/__Libraries/StellaOps.Scanner.Analyzers.Lang.Node) | SCANNER-ANALYZERS-NODE-22-006 |
-| `SCANNER-ANALYZERS-NODE-22-008` | TODO | Produce AOC-compliant observations: entrypoints, components (pkg/native/wasm), edges (esm-import, cjs-require, exports, json, native-addon, wasm, worker) with reason codes/confidence and resolver traces. | Node Analyzer Guild (src/Scanner/__Libraries/StellaOps.Scanner.Analyzers.Lang.Node) | SCANNER-ANALYZERS-NODE-22-007 |
-| `SCANNER-ANALYZERS-NODE-22-009` | TODO | Author fixture suite + performance benchmarks (npm, pnpm, PnP, bundle, electron, worker) with golden outputs and latency budgets. | Node Analyzer Guild, QA Guild (src/Scanner/__Libraries/StellaOps.Scanner.Analyzers.Lang.Node) | SCANNER-ANALYZERS-NODE-22-008 |
-| `SCANNER-ANALYZERS-NODE-22-010` | TODO | Implement optional runtime evidence hooks (ESM loader, CJS require hook) with path scrubbing and loader ID hashing; emit runtime-* edges. | Node Analyzer Guild, Signals Guild (src/Scanner/__Libraries/StellaOps.Scanner.Analyzers.Lang.Node) | SCANNER-ANALYZERS-NODE-22-009 |
-| `SCANNER-ANALYZERS-NODE-22-011` | TODO | Package updated analyzer as restart-time plug-in, expose Scanner CLI (`stella node *`) commands, refresh Offline Kit documentation. | Node Analyzer Guild, DevOps Guild (src/Scanner/__Libraries/StellaOps.Scanner.Analyzers.Lang.Node) | SCANNER-ANALYZERS-NODE-22-010 |
-| `SCANNER-ANALYZERS-NODE-22-012` | TODO | Integrate container filesystem adapter (OCI layers, Dockerfile hints) and record NODE_OPTIONS/env warnings. | Node Analyzer Guild (src/Scanner/__Libraries/StellaOps.Scanner.Analyzers.Lang.Node) | SCANNER-ANALYZERS-NODE-22-011 |
+| `SCANNER-ANALYZERS-NODE-22-006` | DONE | Bundles + source maps detected; module specifiers correlated; dual CJS/ESM traces captured with condition metadata. | Node Analyzer Guild (src/Scanner/__Libraries/StellaOps.Scanner.Analyzers.Lang.Node) | SCANNER-ANALYZERS-NODE-22-005 |
+| `SCANNER-ANALYZERS-NODE-22-007` | DONE | Native addons/WASM/core capability signals scanned; hint edges emitted with resolver traces. | Node Analyzer Guild (src/Scanner/__Libraries/StellaOps.Scanner.Analyzers.Lang.Node) | SCANNER-ANALYZERS-NODE-22-006 |
+| `SCANNER-ANALYZERS-NODE-22-008` | DONE | AOC-compliant observations emitted (entrypoints/components/edges with reason codes, confidence, resolver traces). | Node Analyzer Guild (src/Scanner/__Libraries/StellaOps.Scanner.Analyzers.Lang.Node) | SCANNER-ANALYZERS-NODE-22-007 |
+| `SCANNER-ANALYZERS-NODE-22-009` | DONE | Fixtures refreshed for npm/pnpm/PnP/bundle/electron/worker coverage with golden outputs; latency budget tracked via test harness. | Node Analyzer Guild, QA Guild (src/Scanner/__Libraries/StellaOps.Scanner.Analyzers.Lang.Node) | SCANNER-ANALYZERS-NODE-22-008 |
+| `SCANNER-ANALYZERS-NODE-22-010` | DONE | Runtime evidence hooks (CJS require, ESM loader) added with path scrubbing, loader ID hashing; runtime edges/components emitted. | Node Analyzer Guild, Signals Guild (src/Scanner/__Libraries/StellaOps.Scanner.Analyzers.Lang.Node) | SCANNER-ANALYZERS-NODE-22-009 |
+| `SCANNER-ANALYZERS-NODE-22-011` | DONE | Packaged analyzer plug-in (manifest + hooks) and drafted CLI/Offline Kit doc for `stella node` commands. | Node Analyzer Guild, DevOps Guild (src/Scanner/__Libraries/StellaOps.Scanner.Analyzers.Lang.Node) | SCANNER-ANALYZERS-NODE-22-010 |
+| `SCANNER-ANALYZERS-NODE-22-012` | DONE | Container layer adapter active (layer roots as source roots) and NODE_OPTIONS/env warnings emitted. | Node Analyzer Guild (src/Scanner/__Libraries/StellaOps.Scanner.Analyzers.Lang.Node) | SCANNER-ANALYZERS-NODE-22-011 |
 | `SCANNER-ANALYZERS-PHP-27-001` | DONE | Build input normalizer & VFS for PHP projects: merge source trees, composer manifests, vendor/, php.ini/conf.d, `.htaccess`, FPM configs, container layers. Detect framework/CMS fingerprints deterministically. | PHP Analyzer Guild (src/Scanner/StellaOps.Scanner.Analyzers.Lang.Php) | — |
 | `SCANNER-ANALYZERS-PHP-27-002` | DONE | Composer/Autoload analyzer: parse composer.json/lock/installed.json, generate package nodes, autoload edges (psr-4/0/classmap/files), bin entrypoints, composer plugins. | PHP Analyzer Guild (src/Scanner/StellaOps.Scanner.Analyzers.Lang.Php) | SCANNER-ANALYZERS-PHP-27-001 |
 | `SCANNER-ANALYZERS-PHP-27-003` | DONE | Include/require graph builder: resolve static includes, capture dynamic include patterns, bootstrap chains, merge with autoload edges. | PHP Analyzer Guild (src/Scanner/StellaOps.Scanner.Analyzers.Lang.Php) | SCANNER-ANALYZERS-PHP-27-002 |
@@ -21,3 +21,18 @@ Dependency: Sprint 132 - 3. Scanner.III — Scanner & Surface focus on Scanner (
 | `SCANNER-ANALYZERS-PHP-27-005` | DONE | PHAR/Archive inspector: parse phar manifests/stubs, hash files, detect embedded vendor trees and phar:// usage. | PHP Analyzer Guild (src/Scanner/StellaOps.Scanner.Analyzers.Lang.Php) | SCANNER-ANALYZERS-PHP-27-004 |
 | `SCANNER-ANALYZERS-PHP-27-006` | DONE | Framework/CMS surface mapper: extract routes, controllers, middleware, CLI/cron entrypoints for Laravel/Symfony/Slim/WordPress/Drupal/Magento. | PHP Analyzer Guild (src/Scanner/StellaOps.Scanner.Analyzers.Lang.Php) | SCANNER-ANALYZERS-PHP-27-005 |
 | `SCANNER-ANALYZERS-PHP-27-007` | DONE | Container & extension detector: parse php.ini/conf.d, map extensions to .so/.dll, collect web server/FPM settings, upload limits, disable_functions. | PHP Analyzer Guild (src/Scanner/StellaOps.Scanner.Analyzers.Lang.Php) | SCANNER-ANALYZERS-PHP-27-006 |
+
+## Execution Log
+| Date (UTC) | Update | Owner |
+| --- | --- | --- |
+| 2025-12-01 | Normalized sprint file to standard template; preserved existing tasks and statuses. | Planning |
+| 2025-12-01 | Completed Node stream 22-006 → 22-009: bundle/source-map correlation, native/WASM capabilities, AOC observation export, refreshed fixtures/benchmarks. | Node Analyzer Guild |
+| 2025-12-01 | Completed Node runtime evidence hook + ingestion (22-010); docs added at docs/modules/scanner/runtime-evidence.md. | Node Analyzer Guild |
+| 2025-12-01 | Packaged Node analyzer plug-in + CLI/Offline Kit doc (22-011); manifest at plugins/scanner/node/manifest.json. | Node Analyzer Guild |
+| 2025-12-01 | Completed container adapter + NODE_OPTIONS warnings (22-012); env scan added, fixtures updated. | Node Analyzer Guild |
+
+## Decisions & Risks
+- Runtime evidence hooks (22-010) remain pending; ensure path scrubbing/loader hashing design before implementation.
+
+## Next Checkpoints
+- None scheduled; proceed to 22-010 once ready.