feat: Add tests for RichGraphPublisher and RichGraphWriter

- Implement unit tests for RichGraphPublisher to verify graph publishing to CAS.
- Implement unit tests for RichGraphWriter to ensure correct writing of canonical graphs and metadata.

feat: Implement AOC Guard validation logic

- Add AOC Guard validation logic to enforce document structure and field constraints.
- Introduce violation codes for various validation errors.
- Implement tests for AOC Guard to validate expected behavior.

feat: Create Console Status API client and service

- Implement ConsoleStatusClient for fetching console status and streaming run events.
- Create ConsoleStatusService to manage console status polling and event subscriptions.
- Add tests for ConsoleStatusClient to verify API interactions.

feat: Develop Console Status component

- Create ConsoleStatusComponent for displaying console status and run events.
- Implement UI for showing status metrics and handling user interactions.
- Add styles for console status display.

test: Add tests for Console Status store

- Implement tests for ConsoleStatusStore to verify event handling and state management.

bench/reachability-benchmark/baselines/semgrep/run_case.sh

@@ -0,0 +1,39 @@
+#!/usr/bin/env bash
+set -euo pipefail
+
+case_dir="${1:-}"
+out_dir="${2:-}"
+
+if [[ -z "${case_dir}" ]]; then
+  echo "usage: run_case.sh <case_dir> [output_dir]" >&2
+  exit 1
+fi
+
+case_dir="$(cd "${case_dir}" && pwd)"
+if [[ -z "${out_dir}" ]]; then
+  out_dir="${case_dir}/baselines/semgrep"
+fi
+mkdir -p "${out_dir}"
+
+script_dir="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
+rules="${script_dir}/rules.yaml"
+semgrep_out="$(mktemp -p "${out_dir}" semgrep-results-XXXX.json)"
+
+export SEMGREP_SEND_TELEMETRY=0
+export SEMGREP_ENABLE_VERSION_CHECK=0
+
+semgrep_version="$(semgrep --version 2>/dev/null | head -n1 || echo "semgrep-missing")"
+# Run semgrep; if semgrep is unavailable, continue with empty results for deterministic output.
+if command -v semgrep >/dev/null 2>&1; then
+  semgrep --config "${rules}" --json --quiet "${case_dir}" > "${semgrep_out}" || true
+else
+  echo '{"results":[]}' > "${semgrep_out}"
+fi
+
+python "${script_dir}/normalize.py" \
+  --case "${case_dir}/case.yaml" \
+  --semgrep "${semgrep_out}" \
+  --tool-version "${semgrep_version}" \
+  --output "${out_dir}/submission.json"
+
+echo "submission written: ${out_dir}/submission.json"