@aroman22/codegraph-vba-darwin-arm64 1.15.0 → 1.17.0

package/lib/dist/extraction/sql-query-extractor.js

@@ -54,9 +54,16 @@ exports.SqlQueryExtractor = void 0;
  *    table references), so the data layer is queryable and table usage is
  *    traceable. Bracketed names (`[Order Details]`) are unwrapped; a table
  *    referenced multiple times in one query produces exactly one node + edge.
+ *
+ * Issue #203: the table-name regex and reserved-word reject list live in
+ * the shared leaf module `src/extraction/sql-table-scan.ts` — the same
+ * scanner every other call site (`vba/sql-wrapper.ts`,
+ * `vba-form-extractor.ts`) imports, so a SQL reserved word can never
+ * be emitted as a table name across the project.
  */
 const path = __importStar(require("path"));
 const tree_sitter_helpers_1 = require("./tree-sitter-helpers");
+const sql_table_scan_1 = require("./sql-table-scan");
 class SqlQueryExtractor {
     filePath;
     source;
@@ -67,20 +74,6 @@ class SqlQueryExtractor {
         this.filePath = filePath;
         this.source = source;
     }
-    /**
-     * Table name following `FROM` / `JOIN` / `INTO` / `UPDATE`. Captures an optional
-     * bracketed/unbracketed schema prefix followed by `.`, so `FROM dbo.tblCustomers`
-     * and `FROM [My Schema].[My Table]` come through as one composite reference.
-     * Without the prefix the regex still matches a single identifier (bracketed
-     * or bare) byte-identical to the old shape. `\p{L}` covers accented identifiers
-     * common in localized schemas.
-     *
-     * The captured composite goes to `sweepTables`, which strips ALL brackets
-     * (including internal ones in the bracketed-schema case) — so the public
-     * node name is the unwrapped form `dbo.tblCustomers` / `My Schema.My Table`,
-     * matching how plain `[Order Details]` is also unwrapped to `Order Details`.
-     */
-    static TABLE_RE = /\b(?:FROM|JOIN|INTO|UPDATE)\s+((?:(?:\[[^\]]+\]|\p{L}[\p{L}\p{N}_]*)\.)?(?:\[[^\]]+\]|\p{L}[\p{L}\p{N}_]*))/giu;
     extract() {
         const startTime = Date.now();
         try {
@@ -101,6 +94,7 @@ class SqlQueryExtractor {
                 updatedAt: Date.now(),
             });
             this.sweepTables(queryId);
+            this.sweepExternalBackends(queryId);
         }
         catch (error) {
             this.errors.push({
@@ -141,32 +135,25 @@ class SqlQueryExtractor {
      * Scan the SQL for table names and emit one synthetic `class` node + one
      * `references` edge per distinct table. The table node id is line-independent
      * (line 0) so the same table referenced N times collapses to one node.
+     *
+     * Issue #203: delegates to the shared `scanSqlTables` scanner in
+     * `src/extraction/sql-table-scan.ts` so a SQL reserved word can never
+     * be emitted as a table name — `WHERE x=1`, `ORDER BY a`, `SET a=1`
+     * never become phantom `class` nodes here.
      */
     sweepTables(queryId) {
         const seen = new Set();
-        const re = new RegExp(SqlQueryExtractor.TABLE_RE.source, SqlQueryExtractor.TABLE_RE.flags);
-        let m;
-        while ((m = re.exec(this.source)) !== null) {
-            const raw = (m[1] ?? '').trim();
-            // Strip ALL brackets (including internal ones in the bracketed-schema case
-            // `[My Schema].[My Table]`), so the public node name is the unwrapped form
-            // `My Schema.My Table`. Same shape `VbaExtractor.emitSqlTableReferences`
-            // already produces. A plain bracketed name `[Order Details]` reduces to
-            // `Order Details` here too (no internal brackets), so existing tests are
-            // unaffected.
-            const table = raw.replace(/[\[\]]/g, '').trim();
-            if (!table)
-                continue;
-            const key = table.toLowerCase();
+        for (const row of (0, sql_table_scan_1.scanSqlTables)(this.source)) {
+            const key = row.table.toLowerCase();
             if (seen.has(key))
                 continue;
             seen.add(key);
-            const tableId = (0, tree_sitter_helpers_1.generateNodeId)(this.filePath, 'class', table, 0);
+            const tableId = (0, tree_sitter_helpers_1.generateNodeId)(this.filePath, 'class', row.table, 0);
             this.nodes.push({
                 id: tableId,
                 kind: 'class', // placeholder kind; cross-file resolution re-types at lookup
-                name: table,
-                qualifiedName: table,
+                name: row.table,
+                qualifiedName: row.table,
                 filePath: this.filePath,
                 language: 'sql',
                 startLine: 1,
@@ -186,6 +173,31 @@ class SqlQueryExtractor {
             });
         }
     }
+    /**
+     * Issue #256 — a saved query can read from another database file via the
+     * Access `IN "<path>"` clause. Emit one `file`-kind node per distinct
+     * external backend (keyed on the normalized path, so the same file named
+     * from two different queries converges on ONE node) plus a `references`
+     * edge from this query, tagged `vba-external-backend`.
+     *
+     * `scanSqlExternalBackends` already de-duplicates within one query, so no
+     * local `seen` set is needed here.
+     */
+    sweepExternalBackends(queryId) {
+        for (const backendPath of (0, sql_table_scan_1.scanSqlExternalBackends)(this.source)) {
+            const node = (0, sql_table_scan_1.buildExternalBackendNode)(backendPath);
+            this.nodes.push(node);
+            this.edges.push({
+                source: queryId,
+                target: node.id,
+                kind: 'references',
+                provenance: 'heuristic',
+                metadata: { synthesizedBy: sql_table_scan_1.EXTERNAL_BACKEND_SYNTHESIZED_BY },
+                line: 1,
+                column: 0,
+            });
+        }
+    }
 }
 exports.SqlQueryExtractor = SqlQueryExtractor;
 //# sourceMappingURL=sql-query-extractor.js.map

package/lib/dist/extraction/sql-query-extractor.js.map

@@ -1 +1 @@
-{"version":3,"file":"sql-query-extractor.js","sourceRoot":"","sources":["../../src/extraction/sql-query-extractor.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,2CAA6B;AAO7B,+DAAuD;AAEvD,MAAa,iBAAiB;IACpB,QAAQ,CAAS;IACjB,MAAM,CAAS;IACf,KAAK,GAAW,EAAE,CAAC;IACnB,KAAK,GAAW,EAAE,CAAC;IACnB,MAAM,GAAsB,EAAE,CAAC;IAEvC,YAAY,QAAgB,EAAE,MAAc;QAC1C,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC;QACzB,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;IACvB,CAAC;IAED;;;;;;;;;;;;OAYG;IACK,MAAM,CAAU,QAAQ,GAC9B,gHAAgH,CAAC;IAEnH,OAAO;QACL,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAC7B,IAAI,CAAC;YACH,MAAM,SAAS,GAAG,IAAI,CAAC,kBAAkB,EAAE,CAAC;YAC5C,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,CAAC,CAAC;YAEvC,MAAM,OAAO,GAAG,IAAA,oCAAc,EAAC,IAAI,CAAC,QAAQ,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC;YACrE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC;gBACd,EAAE,EAAE,OAAO;gBACX,IAAI,EAAE,OAAO;gBACb,IAAI,EAAE,SAAS;gBACf,aAAa,EAAE,SAAS;gBACxB,QAAQ,EAAE,IAAI,CAAC,QAAQ;gBACvB,QAAQ,EAAE,KAAK;gBACf,SAAS,EAAE,CAAC;gBACZ,OAAO,EAAE,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM;gBACvC,WAAW,EAAE,CAAC;gBACd,SAAS,EAAE,CAAC;gBACZ,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;aACtB,CAAC,CAAC;YAEH,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC;QAC5B,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC;gBACf,OAAO,EAAE,+BAA+B,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE;gBAChG,QAAQ,EAAE,IAAI,CAAC,QAAQ;gBACvB,QAAQ,EAAE,OAAO;gBACjB,IAAI,EAAE,aAAa;aACpB,CAAC,CAAC;QACL,CAAC;QAED,OAAO;YACL,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,oBAAoB,EAAE,EAAE;YACxB,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS;SACnC,CAAC;IACJ,CAAC;IAEO,kBAAkB;QACxB,OAAO,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;IAC9D,CAAC;IAEO,cAAc;QACpB,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QACtC,OAAO;YACL,EAAE,EAAE,IAAA,oCAAc,EAAC,IAAI,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC;YAC3D,IAAI,EAAE,MAAM;YACZ,IAAI,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC;YAClC,aAAa,EAAE,IAAI,CAAC,QAAQ;YAC5B,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,QAAQ,EAAE,KAAK;YACf,SAAS,EAAE,CAAC;YACZ,OAAO,EAAE,KAAK,CAAC,MAAM;YACrB,WAAW,EAAE,CAAC;YACd,SAAS,EAAE,KAAK,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,EAAE,MAAM,IAAI,CAAC;YAC/C,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;SACtB,CAAC;IACJ,CAAC;IAED;;;;OAIG;IACK,WAAW,CAAC,OAAe;QACjC,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;QAC/B,MAAM,EAAE,GAAG,IAAI,MAAM,CACnB,iBAAiB,CAAC,QAAQ,CAAC,MAAM,EACjC,iBAAiB,CAAC,QAAQ,CAAC,KAAK,CACjC,CAAC;QACF,IAAI,CAAyB,CAAC;QAC9B,OAAO,CAAC,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;YAC3C,MAAM,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;YAChC,2EAA2E;YAC3E,2EAA2E;YAC3E,yEAAyE;YACzE,wEAAwE;YACxE,yEAAyE;YACzE,cAAc;YACd,MAAM,KAAK,GAAG,GAAG,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;YAChD,IAAI,CAAC,KAAK;gBAAE,SAAS;YACrB,MAAM,GAAG,GAAG,KAAK,CAAC,WAAW,EAAE,CAAC;YAChC,IAAI,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;gBAAE,SAAS;YAC5B,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YAEd,MAAM,OAAO,GAAG,IAAA,oCAAc,EAAC,IAAI,CAAC,QAAQ,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC;YACjE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC;gBACd,EAAE,EAAE,OAAO;gBACX,IAAI,EAAE,OAAO,EAAE,6DAA6D;gBAC5E,IAAI,EAAE,KAAK;gBACX,aAAa,EAAE,KAAK;gBACpB,QAAQ,EAAE,IAAI,CAAC,QAAQ;gBACvB,QAAQ,EAAE,KAAK;gBACf,SAAS,EAAE,CAAC;gBACZ,OAAO,EAAE,CAAC;gBACV,WAAW,EAAE,CAAC;gBACd,SAAS,EAAE,CAAC;gBACZ,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;aACtB,CAAC,CAAC;YACH,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC;gBACd,MAAM,EAAE,OAAO;gBACf,MAAM,EAAE,OAAO;gBACf,IAAI,EAAE,YAAY;gBAClB,UAAU,EAAE,WAAW;gBACvB,QAAQ,EAAE,EAAE,aAAa,EAAE,iBAAiB,EAAE;gBAC9C,IAAI,EAAE,CAAC;gBACP,MAAM,EAAE,CAAC;aACV,CAAC,CAAC;QACL,CAAC;IACH,CAAC;;AA3IH,8CA4IC"}
+{"version":3,"file":"sql-query-extractor.js","sourceRoot":"","sources":["../../src/extraction/sql-query-extractor.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AACH,2CAA6B;AAO7B,+DAAuD;AACvD,qDAK0B;AAE1B,MAAa,iBAAiB;IACpB,QAAQ,CAAS;IACjB,MAAM,CAAS;IACf,KAAK,GAAW,EAAE,CAAC;IACnB,KAAK,GAAW,EAAE,CAAC;IACnB,MAAM,GAAsB,EAAE,CAAC;IAEvC,YAAY,QAAgB,EAAE,MAAc;QAC1C,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC;QACzB,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;IACvB,CAAC;IAED,OAAO;QACL,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAC7B,IAAI,CAAC;YACH,MAAM,SAAS,GAAG,IAAI,CAAC,kBAAkB,EAAE,CAAC;YAC5C,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,CAAC,CAAC;YAEvC,MAAM,OAAO,GAAG,IAAA,oCAAc,EAAC,IAAI,CAAC,QAAQ,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC;YACrE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC;gBACd,EAAE,EAAE,OAAO;gBACX,IAAI,EAAE,OAAO;gBACb,IAAI,EAAE,SAAS;gBACf,aAAa,EAAE,SAAS;gBACxB,QAAQ,EAAE,IAAI,CAAC,QAAQ;gBACvB,QAAQ,EAAE,KAAK;gBACf,SAAS,EAAE,CAAC;gBACZ,OAAO,EAAE,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM;gBACvC,WAAW,EAAE,CAAC;gBACd,SAAS,EAAE,CAAC;gBACZ,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;aACtB,CAAC,CAAC;YAEH,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC;YAC1B,IAAI,CAAC,qBAAqB,CAAC,OAAO,CAAC,CAAC;QACtC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC;gBACf,OAAO,EAAE,+BAA+B,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE;gBAChG,QAAQ,EAAE,IAAI,CAAC,QAAQ;gBACvB,QAAQ,EAAE,OAAO;gBACjB,IAAI,EAAE,aAAa;aACpB,CAAC,CAAC;QACL,CAAC;QAED,OAAO;YACL,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,oBAAoB,EAAE,EAAE;YACxB,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS;SACnC,CAAC;IACJ,CAAC;IAEO,kBAAkB;QACxB,OAAO,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;IAC9D,CAAC;IAEO,cAAc;QACpB,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QACtC,OAAO;YACL,EAAE,EAAE,IAAA,oCAAc,EAAC,IAAI,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC;YAC3D,IAAI,EAAE,MAAM;YACZ,IAAI,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC;YAClC,aAAa,EAAE,IAAI,CAAC,QAAQ;YAC5B,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,QAAQ,EAAE,KAAK;YACf,SAAS,EAAE,CAAC;YACZ,OAAO,EAAE,KAAK,CAAC,MAAM;YACrB,WAAW,EAAE,CAAC;YACd,SAAS,EAAE,KAAK,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,EAAE,MAAM,IAAI,CAAC;YAC/C,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;SACtB,CAAC;IACJ,CAAC;IAED;;;;;;;;;OASG;IACK,WAAW,CAAC,OAAe;QACjC,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;QAC/B,KAAK,MAAM,GAAG,IAAI,IAAA,8BAAa,EAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;YAC7C,MAAM,GAAG,GAAG,GAAG,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC;YACpC,IAAI,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;gBAAE,SAAS;YAC5B,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YAEd,MAAM,OAAO,GAAG,IAAA,oCAAc,EAAC,IAAI,CAAC,QAAQ,EAAE,OAAO,EAAE,GAAG,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;YACrE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC;gBACd,EAAE,EAAE,OAAO;gBACX,IAAI,EAAE,OAAO,EAAE,6DAA6D;gBAC5E,IAAI,EAAE,GAAG,CAAC,KAAK;gBACf,aAAa,EAAE,GAAG,CAAC,KAAK;gBACxB,QAAQ,EAAE,IAAI,CAAC,QAAQ;gBACvB,QAAQ,EAAE,KAAK;gBACf,SAAS,EAAE,CAAC;gBACZ,OAAO,EAAE,CAAC;gBACV,WAAW,EAAE,CAAC;gBACd,SAAS,EAAE,CAAC;gBACZ,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;aACtB,CAAC,CAAC;YACH,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC;gBACd,MAAM,EAAE,OAAO;gBACf,MAAM,EAAE,OAAO;gBACf,IAAI,EAAE,YAAY;gBAClB,UAAU,EAAE,WAAW;gBACvB,QAAQ,EAAE,EAAE,aAAa,EAAE,iBAAiB,EAAE;gBAC9C,IAAI,EAAE,CAAC;gBACP,MAAM,EAAE,CAAC;aACV,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED;;;;;;;;;OASG;IACK,qBAAqB,CAAC,OAAe;QAC3C,KAAK,MAAM,WAAW,IAAI,IAAA,wCAAuB,EAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;YAC/D,MAAM,IAAI,GAAG,IAAA,yCAAwB,EAAC,WAAW,CAAC,CAAC;YACnD,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACtB,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC;gBACd,MAAM,EAAE,OAAO;gBACf,MAAM,EAAE,IAAI,CAAC,EAAE;gBACf,IAAI,EAAE,YAAY;gBAClB,UAAU,EAAE,WAAW;gBACvB,QAAQ,EAAE,EAAE,aAAa,EAAE,gDAA+B,EAAE;gBAC5D,IAAI,EAAE,CAAC;gBACP,MAAM,EAAE,CAAC;aACV,CAAC,CAAC;QACL,CAAC;IACH,CAAC;CACF;AA9ID,8CA8IC"}

package/lib/dist/extraction/sql-table-scan.d.ts

@@ -0,0 +1,184 @@
+/**
+ * # SQL table-name scanner — leaf module shared by every VBA + SQL
+ * table-extraction path (Issue #203).
+ *
+ * Before this module existed, the same `FROM/JOIN/INTO/UPDATE` capture
+ * regex lived in three places:
+ *
+ *   - `src/extraction/sql-query-extractor.ts:57`     (saved queries)
+ *   - `src/extraction/vba/sql-wrapper.ts:80-81`      (in-code SQL sweep)
+ *   - `src/extraction/vba-form-extractor.ts:617-618` (RecordSource/RowSource)
+ *
+ * The three copies had already started to diverge (`vba-form-extractor`
+ * grew a `SQL_PREFIX_RE` the other two never adopted), and every
+ * caller was vulnerable to the same silently-wrong captures the issue
+ * lists:
+ *
+ *   ```vba
+ *   getdb().Execute "DELETE FROM " & tabla & " WHERE activo = 1"
+ *   ```
+ *
+ * Today, `collectSqlWrapperChain` silently drops non-literal operands
+ * (variables, function calls) and joins surviving literal fragments
+ * with a space. The dropped operand leaves a whitespace gap that
+ * `\s+` happily crosses, so `DELETE FROM ` + ` ` + ` WHERE activo = 1`
+ * becomes `DELETE FROM   WHERE activo = 1` — and `SQL_TABLE_RE`
+ * captures `WHERE` as a table reference.
+ *
+ * ## What this module guarantees
+ *
+ * 1. The shared regex (with optional schema prefix + bracketed
+ *    identifiers, identical bytes to the old shape) lives in ONE
+ *    place.
+ * 2. `SQL_RESERVED_TABLE_TOKENS` rejects every SQL reserved word that
+ *    can legitimately appear immediately after a
+ *    `FROM`/`JOIN`/`INTO`/`UPDATE` keyword in a real statement —
+ *    `WHERE`, `ORDER`, `GROUP`, `HAVING`, `SET`, `VALUES`, `SELECT`,
+ *    `INNER`, `LEFT`, `RIGHT`, `OUTER`, `FULL`, `CROSS`, `JOIN`,
+ *    `ON`, `UNION`, `AS`, `DISTINCT`, `TOP`, `IN`, `EXISTS`. The list
+ *    is exhaustive for the SQL grammar subset codegraph models.
+ * 3. `scanSqlTables` reads a SINGLE joined SQL string. It does NOT
+ *    know about VBA concatenation — the JOIN-WITH-SPACE shape
+ *    `collectSqlWrapperChain` produces is its input contract.
+ *    Operands dropped by `collectSqlWrapperChain` are now replaced
+ *    with a `?` sentinel (see `vba/sql-wrapper.ts`); the reserved-
+ *    word reject list catches any `?` keyword bridge the concat could
+ *    still create.
+ * 4. Each row carries the SQL `clause` (`FROM`/`JOIN`/`INTO`/`UPDATE`)
+ *    so callers can classify `access: 'read' | 'write'` without
+ *    re-running the SQL classifier.
+ *
+ * ## Issue #256 — DDL verbs and the Access `IN` clause
+ *
+ * The clause set also covers `CREATE TABLE`, `ALTER TABLE` and
+ * `DROP TABLE`; all three target a table they mutate, so they carry
+ * `access: 'write'`. The reserved-word reject list applies to them
+ * unchanged.
+ *
+ * Separately, `scanSqlExternalBackends` captures the Access-specific
+ * `IN "<path>"` clause, which points a query at ANOTHER database file.
+ * That operand is a file, not a table, so it gets its own scanner and
+ * its own node shape (`buildExternalBackendNode`) rather than being
+ * folded into the table rows.
+ *
+ * ## Defense in depth
+ *
+ * The reserved-word check uses the **unwrapped first identifier
+ * component** so schema-qualified inputs like `FROM WHERE.ID` are also
+ * rejected (the unwrapped form is `WHERE.ID`, first component is
+ * `WHERE`). The check is case-insensitive (SQL keywords are
+ * case-insensitive by spec).
+ *
+ * Returning `[]` for a reserved-word capture is the "silent beats
+ * wrong" doctrine the project documents in `CLAUDE.md`: emitting a
+ * confident wrong edge ("WHERE is a table that gets written to")
+ * pollutes downstream queries far more than emitting no edge at all.
+ */
+import { Node } from '../types';
+export interface SqlTableScanRow {
+    /** The unwrapped table name (brackets + surrounding whitespace stripped). */
+    table: string;
+    /**
+     * The SQL clause that introduced the reference. The four DML clauses
+     * (`FROM`/`JOIN`/`INTO`/`UPDATE`) were the original set; Issue #256
+     * added the three DDL verbs, whose targets are always writes.
+     */
+    clause: SqlTableClause;
+    /** Whether this row reads or mutates the table — derived from the SQL verb. */
+    access: 'read' | 'write';
+}
+/**
+ * Every clause keyword the scanner captures a table name after. The DDL
+ * three are two-word keywords normalized to a single interior space
+ * (`create   table` → `CREATE TABLE`).
+ */
+export type SqlTableClause = 'FROM' | 'JOIN' | 'INTO' | 'UPDATE' | 'CREATE TABLE' | 'ALTER TABLE' | 'DROP TABLE';
+/**
+ * Canonical reject list — every SQL reserved word that can appear
+ * immediately after `FROM`/`JOIN`/`INTO`/`UPDATE` in a real statement.
+ * The list is exported so consumers can introspect it; it is also the
+ * authoritative source the scanner consults internally.
+ *
+ * The list intentionally omits `FROM`/`JOIN`/`INTO`/`UPDATE` itself
+ * (those are the capturing keywords) and `ALL` / `ANY` (they are
+ * legitimate table-ish tokens in some dialects but rarely appear as
+ * the first token after a FROM-style keyword in a well-formed
+ * statement).
+ */
+export declare const SQL_RESERVED_TABLE_TOKENS: ReadonlySet<string>;
+/**
+ * Scan a SQL string for `FROM` / `JOIN` / `INTO` / `UPDATE` table
+ * references. Returns one row per match; the caller is responsible
+ * for cross-row deduplication if it wants one node per table.
+ *
+ * Captures that resolve to a SQL reserved word (Issue #203 — e.g.
+ * `FROM   WHERE x=1` → `WHERE`) are DROPPED. This encodes
+ * "we don't know this table" rather than guessing — matching the
+ * "silent beats wrong" / "partial coverage is worse than none"
+ * doctrine the project documents in `CLAUDE.md`.
+ *
+ * Schema-qualified inputs (`FROM WHERE.ID` → `WHERE.ID`) are also
+ * dropped: the check inspects the FIRST unwrapped identifier
+ * component (everything up to the first `.`), case-insensitive.
+ *
+ * Empty / whitespace-only / non-DML input returns `[]`.
+ */
+export declare function scanSqlTables(sql: string): SqlTableScanRow[];
+/**
+ * Issue #256: the `synthesizedBy` tag stamped on every `references`
+ * edge that points at an external backend file. Exported so consumers
+ * and tests share one spelling.
+ */
+export declare const EXTERNAL_BACKEND_SYNTHESIZED_BY = "vba-external-backend";
+/**
+ * Issue #256: normalize an external-database path so the SAME file named
+ * from two different queries converges on ONE node.
+ *
+ * Access backends are Windows paths: the separator may be `\` or `/`,
+ * the case is not significant, and a hand-written path often carries a
+ * doubled separator or a trailing one. Normalizing to lowercase
+ * forward-slash form makes `C:\Datos\Otra.accdb` and
+ * `c:/datos/otra.accdb` the same key.
+ *
+ * A leading `//` is preserved so a UNC share (`\\SERVIDOR\Datos\x.accdb`)
+ * stays distinguishable from an absolute local path.
+ *
+ * Returns `''` for blank input; callers drop empty paths.
+ */
+export declare function normalizeBackendPath(raw: string): string;
+/**
+ * Issue #256: scan a SQL string for Access `IN "<path>"` external-backend
+ * clauses. Returns the NORMALIZED paths in first-appearance order, with
+ * duplicates collapsed (two spellings of the same file are one entry).
+ *
+ * Empty / unquoted / value-list `IN` operands yield nothing — the same
+ * "silent beats wrong" doctrine the table scanner follows: an operand we
+ * cannot key on produces no node rather than a guessed one.
+ */
+export declare function scanSqlExternalBackends(sql: string): string[];
+/**
+ * Issue #256: build the graph node for an external backend file.
+ *
+ * `file` is the honest kind — it IS a file, just not one this index
+ * parsed — so no new `NodeKind` is needed, and `metadata.external`
+ * keeps it distinguishable from indexed files in every query.
+ *
+ * Two properties matter and are both deliberate:
+ *
+ *  1. **Convergence.** The node id is keyed on the normalized path via a
+ *     synthetic `synthetic:external-db/<path>` file path (the same trick
+ *     `vba/tempvars.ts` uses for TempVars keys), so the same backend named
+ *     from two different queries — or from a saved query AND from in-code
+ *     SQL — collapses to ONE node instead of one per referencing file.
+ *  2. **Byte-identity.** Everything on the node derives from the
+ *     normalized path alone: no line, no column, no per-caller language.
+ *     Every emitter therefore produces an identical node, so whichever
+ *     one is written last cannot silently rewrite the others' fields.
+ *     Per-site position lives on the `references` EDGE, which is where
+ *     call-site information belongs.
+ *
+ * The `language` is pinned to `vba` because the node models an Access
+ * database file, whichever extractor happened to discover it.
+ */
+export declare function buildExternalBackendNode(normalizedPath: string): Node;
+//# sourceMappingURL=sql-table-scan.d.ts.map

package/lib/dist/extraction/sql-table-scan.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sql-table-scan.d.ts","sourceRoot":"","sources":["../../src/extraction/sql-table-scan.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2EG;AACH,OAAO,EAAE,IAAI,EAAE,MAAM,UAAU,CAAC;AAGhC,MAAM,WAAW,eAAe;IAC9B,6EAA6E;IAC7E,KAAK,EAAE,MAAM,CAAC;IACd;;;;OAIG;IACH,MAAM,EAAE,cAAc,CAAC;IACvB,+EAA+E;IAC/E,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC;CAC1B;AAED;;;;GAIG;AACH,MAAM,MAAM,cAAc,GACtB,MAAM,GACN,MAAM,GACN,MAAM,GACN,QAAQ,GACR,cAAc,GACd,aAAa,GACb,YAAY,CAAC;AAiBjB;;;;;;;;;;;GAWG;AACH,eAAO,MAAM,yBAAyB,EAAE,WAAW,CAAC,MAAM,CAsBxD,CAAC;AA4BH;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAgB,aAAa,CAAC,GAAG,EAAE,MAAM,GAAG,eAAe,EAAE,CA2B5D;AA2DD;;;;GAIG;AACH,eAAO,MAAM,+BAA+B,yBAAyB,CAAC;AAEtE;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,oBAAoB,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAWxD;AAED;;;;;;;;GAQG;AACH,wBAAgB,uBAAuB,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,EAAE,CAe7D;AAED;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,wBAAgB,wBAAwB,CAAC,cAAc,EAAE,MAAM,GAAG,IAAI,CAgBrE"}

package/lib/dist/extraction/sql-table-scan.js

@@ -0,0 +1,288 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.EXTERNAL_BACKEND_SYNTHESIZED_BY = exports.SQL_RESERVED_TABLE_TOKENS = void 0;
+exports.scanSqlTables = scanSqlTables;
+exports.normalizeBackendPath = normalizeBackendPath;
+exports.scanSqlExternalBackends = scanSqlExternalBackends;
+exports.buildExternalBackendNode = buildExternalBackendNode;
+const tree_sitter_helpers_1 = require("./tree-sitter-helpers");
+/**
+ * The set of clause keywords, in the same order as the regex alternation.
+ * Used to validate a capture's clause before it is narrowed to
+ * {@link SqlTableClause}.
+ */
+const SQL_TABLE_CLAUSES = new Set([
+    'FROM',
+    'JOIN',
+    'INTO',
+    'UPDATE',
+    'CREATE TABLE',
+    'ALTER TABLE',
+    'DROP TABLE',
+]);
+/**
+ * Canonical reject list — every SQL reserved word that can appear
+ * immediately after `FROM`/`JOIN`/`INTO`/`UPDATE` in a real statement.
+ * The list is exported so consumers can introspect it; it is also the
+ * authoritative source the scanner consults internally.
+ *
+ * The list intentionally omits `FROM`/`JOIN`/`INTO`/`UPDATE` itself
+ * (those are the capturing keywords) and `ALL` / `ANY` (they are
+ * legitimate table-ish tokens in some dialects but rarely appear as
+ * the first token after a FROM-style keyword in a well-formed
+ * statement).
+ */
+exports.SQL_RESERVED_TABLE_TOKENS = new Set([
+    'WHERE',
+    'ORDER',
+    'GROUP',
+    'HAVING',
+    'INNER',
+    'LEFT',
+    'RIGHT',
+    'OUTER',
+    'FULL',
+    'CROSS',
+    'JOIN',
+    'ON',
+    'SET',
+    'VALUES',
+    'SELECT',
+    'UNION',
+    'AS',
+    'DISTINCT',
+    'TOP',
+    'IN',
+    'EXISTS',
+]);
+/**
+ * Shared `FROM` / `JOIN` / `INTO` / `UPDATE <table>` regex. Same
+ * shape as the three duplicates this module consolidates: group 1 is
+ * the clause keyword (`FROM`/`JOIN`/`INTO`/`UPDATE`), group 2 is the
+ * composite identifier — an optional bracketed/unbracketed schema
+ * prefix followed by `.`, then a bracketed-or-bare identifier.
+ *
+ *   `FROM dbo.tblCustomers`         → m[2] = `dbo.tblCustomers`
+ *   `FROM [My Schema].[My Table]`   → m[2] = `[My Schema].[My Table]`
+ *   `FROM tblCustomers`             → m[2] = `tblCustomers`
+ *   `FROM [Order Details]`          → m[2] = `[Order Details]`
+ *
+ * Brackets in `m[2]` are stripped by `scanSqlTables`, so the public
+ * table name is the unwrapped form (`dbo.tblCustomers` /
+ * `My Schema.My Table`) — matching how plain `[Order Details]` is
+ * also unwrapped to `Order Details`. `\p{L}` covers accented
+ * identifiers common in localized schemas.
+ *
+ * Keeping the single composite capture (rather than splitting
+ * schema/table into separate groups) preserves byte-identity with the
+ * three duplicates this module replaces, so every existing
+ * regression test continues to apply without rewrites.
+ */
+const TABLE_RE = /\b(FROM|JOIN|INTO|UPDATE|CREATE\s+TABLE|ALTER\s+TABLE|DROP\s+TABLE)\s+((?:(?:\[[^\]]+\]|\p{L}[\p{L}\p{N}_]*)\.)?(?:\[[^\]]+\]|\p{L}[\p{L}\p{N}_]*))/giu;
+/**
+ * Scan a SQL string for `FROM` / `JOIN` / `INTO` / `UPDATE` table
+ * references. Returns one row per match; the caller is responsible
+ * for cross-row deduplication if it wants one node per table.
+ *
+ * Captures that resolve to a SQL reserved word (Issue #203 — e.g.
+ * `FROM   WHERE x=1` → `WHERE`) are DROPPED. This encodes
+ * "we don't know this table" rather than guessing — matching the
+ * "silent beats wrong" / "partial coverage is worse than none"
+ * doctrine the project documents in `CLAUDE.md`.
+ *
+ * Schema-qualified inputs (`FROM WHERE.ID` → `WHERE.ID`) are also
+ * dropped: the check inspects the FIRST unwrapped identifier
+ * component (everything up to the first `.`), case-insensitive.
+ *
+ * Empty / whitespace-only / non-DML input returns `[]`.
+ */
+function scanSqlTables(sql) {
+    if (!sql)
+        return [];
+    const out = [];
+    const re = new RegExp(TABLE_RE.source, TABLE_RE.flags);
+    let m;
+    while ((m = re.exec(sql)) !== null) {
+        // Normalize the clause keyword: uppercase, and collapse the interior
+        // whitespace of the two-word DDL verbs (`create   table` →
+        // `CREATE TABLE`) so the emitted `clause` is a stable enum value.
+        const clauseRaw = (m[1] ?? '').toUpperCase().replace(/\s+/g, ' ');
+        if (!SQL_TABLE_CLAUSES.has(clauseRaw))
+            continue;
+        const clause = clauseRaw;
+        // m[2] is the composite (optional schema `.` table) with any
+        // combination of brackets. Strip ALL brackets and surrounding
+        // whitespace — the public node name is the unwrapped form.
+        const table = (m[2] ?? '').replace(/[\[\]]/g, '').trim();
+        if (!table)
+            continue;
+        // Reserved-word rejection — the FIRST identifier component is the
+        // canonical SQL keyword to test (handles `WHERE.ID` too).
+        const firstId = table.split('.')[0] ?? '';
+        if (exports.SQL_RESERVED_TABLE_TOKENS.has(firstId.toUpperCase()))
+            continue;
+        out.push({ table, clause, access: classifyAccess(sql, clause) });
+    }
+    return out;
+}
+/**
+ * `access` classifier — ported verbatim from
+ * `src/extraction/vba/sql-wrapper.ts:91-96`. Lifted into this leaf
+ * module so all three call sites produce identical tagging.
+ *
+ * The mutating targets are writes: `INSERT INTO <t>`, `UPDATE <t>`,
+ * and the `FROM <t>` of a `DELETE` (Access's `DELETE FROM x` makes
+ * that FROM the delete target). Every other `FROM`/`JOIN` source
+ * table — including the source of an `INSERT ... SELECT` — is a read.
+ *
+ * Issue #256: the three DDL verbs are unconditional writes. `CREATE
+ * TABLE` and `DROP TABLE` change whether the table exists at all, and
+ * `ALTER TABLE` rewrites its shape — every one of them is a mutation of
+ * the named table, so "who writes to table X" must report them.
+ */
+function classifyAccess(sqlString, clause) {
+    if (clause === 'INTO' || clause === 'UPDATE')
+        return 'write';
+    if (clause === 'CREATE TABLE' || clause === 'ALTER TABLE' || clause === 'DROP TABLE') {
+        return 'write';
+    }
+    if (clause === 'FROM' && /^\s*DELETE\b/i.test(sqlString))
+        return 'write';
+    return 'read';
+}
+// ---------------------------------------------------------------------------
+// Access `IN "<path>"` — the external-backend clause (Issue #256)
+// ---------------------------------------------------------------------------
+/**
+ * Issue #256: Jet/ACE lets a single query read or write a table that
+ * lives in ANOTHER database file:
+ *
+ *   ```sql
+ *   SELECT * FROM TbRemota IN "C:\datos\otra.accdb"
+ *   ```
+ *
+ * The `IN` operand is a FILE, not a table, so it needs its own capture
+ * and its own representation. Without it a cross-backend access is
+ * indistinguishable from a local one, and the second database file is
+ * invisible to the graph.
+ *
+ * Only a QUOTED operand matches. The value-list operator (`WHERE Id IN
+ * (1,2)`, `WHERE N IN ("a","b")`) always opens with `(`, so requiring a
+ * quote immediately after the keyword separates the two meanings without
+ * a parser. `IN ""` — the empty path of the Access ODBC/dBASE
+ * connect-string form (`IN "" [ODBC;DSN=x]`) — yields an empty operand
+ * and is dropped: that shape names a DSN, not a file we can key on.
+ *
+ * The first alternative handles the VBA doubled-quote shape. A SQL
+ * string built in VBA source (`"… IN ""C:\x.accdb"""`) reaches the
+ * scanner with its inner quotes still doubled, because the wrapper
+ * regex in `vba/sql-wrapper.ts` captures the first literal verbatim.
+ * Matching `""…""` before `"…"` decodes that shape without a
+ * whole-string rewrite that could disturb the table scan.
+ */
+const EXTERNAL_BACKEND_RE = /\bIN\s+(?:""([^"]+)""|"([^"]*)"|'([^']*)')/giu;
+/**
+ * Issue #256: the `synthesizedBy` tag stamped on every `references`
+ * edge that points at an external backend file. Exported so consumers
+ * and tests share one spelling.
+ */
+exports.EXTERNAL_BACKEND_SYNTHESIZED_BY = 'vba-external-backend';
+/**
+ * Issue #256: normalize an external-database path so the SAME file named
+ * from two different queries converges on ONE node.
+ *
+ * Access backends are Windows paths: the separator may be `\` or `/`,
+ * the case is not significant, and a hand-written path often carries a
+ * doubled separator or a trailing one. Normalizing to lowercase
+ * forward-slash form makes `C:\Datos\Otra.accdb` and
+ * `c:/datos/otra.accdb` the same key.
+ *
+ * A leading `//` is preserved so a UNC share (`\\SERVIDOR\Datos\x.accdb`)
+ * stays distinguishable from an absolute local path.
+ *
+ * Returns `''` for blank input; callers drop empty paths.
+ */
+function normalizeBackendPath(raw) {
+    const trimmed = raw.trim();
+    if (!trimmed)
+        return '';
+    const slashed = trimmed.replace(/\\/g, '/');
+    const uncPrefix = slashed.startsWith('//') ? '//' : '';
+    const body = slashed
+        .slice(uncPrefix.length)
+        .replace(/\/{2,}/g, '/')
+        .replace(/\/+$/, '');
+    if (!body)
+        return '';
+    return (uncPrefix + body).toLowerCase();
+}
+/**
+ * Issue #256: scan a SQL string for Access `IN "<path>"` external-backend
+ * clauses. Returns the NORMALIZED paths in first-appearance order, with
+ * duplicates collapsed (two spellings of the same file are one entry).
+ *
+ * Empty / unquoted / value-list `IN` operands yield nothing — the same
+ * "silent beats wrong" doctrine the table scanner follows: an operand we
+ * cannot key on produces no node rather than a guessed one.
+ */
+function scanSqlExternalBackends(sql) {
+    if (!sql)
+        return [];
+    const out = [];
+    const seen = new Set();
+    const re = new RegExp(EXTERNAL_BACKEND_RE.source, EXTERNAL_BACKEND_RE.flags);
+    let m;
+    while ((m = re.exec(sql)) !== null) {
+        const raw = m[1] ?? m[2] ?? m[3] ?? '';
+        const normalized = normalizeBackendPath(raw);
+        if (!normalized)
+            continue;
+        if (seen.has(normalized))
+            continue;
+        seen.add(normalized);
+        out.push(normalized);
+    }
+    return out;
+}
+/**
+ * Issue #256: build the graph node for an external backend file.
+ *
+ * `file` is the honest kind — it IS a file, just not one this index
+ * parsed — so no new `NodeKind` is needed, and `metadata.external`
+ * keeps it distinguishable from indexed files in every query.
+ *
+ * Two properties matter and are both deliberate:
+ *
+ *  1. **Convergence.** The node id is keyed on the normalized path via a
+ *     synthetic `synthetic:external-db/<path>` file path (the same trick
+ *     `vba/tempvars.ts` uses for TempVars keys), so the same backend named
+ *     from two different queries — or from a saved query AND from in-code
+ *     SQL — collapses to ONE node instead of one per referencing file.
+ *  2. **Byte-identity.** Everything on the node derives from the
+ *     normalized path alone: no line, no column, no per-caller language.
+ *     Every emitter therefore produces an identical node, so whichever
+ *     one is written last cannot silently rewrite the others' fields.
+ *     Per-site position lives on the `references` EDGE, which is where
+ *     call-site information belongs.
+ *
+ * The `language` is pinned to `vba` because the node models an Access
+ * database file, whichever extractor happened to discover it.
+ */
+function buildExternalBackendNode(normalizedPath) {
+    const filePath = `synthetic:external-db/${normalizedPath}`;
+    return {
+        id: (0, tree_sitter_helpers_1.generateNodeId)(filePath, 'file', normalizedPath, 0),
+        kind: 'file',
+        name: normalizedPath.split('/').filter(Boolean).pop() ?? normalizedPath,
+        qualifiedName: normalizedPath,
+        filePath,
+        language: 'vba',
+        startLine: 1,
+        endLine: 1,
+        startColumn: 0,
+        endColumn: normalizedPath.length,
+        metadata: { external: true, backendPath: normalizedPath },
+        updatedAt: Date.now(),
+    };
+}
+//# sourceMappingURL=sql-table-scan.js.map

package/lib/dist/extraction/sql-table-scan.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sql-table-scan.js","sourceRoot":"","sources":["../../src/extraction/sql-table-scan.ts"],"names":[],"mappings":";;;AAwMA,sCA2BC;AAiFD,oDAWC;AAWD,0DAeC;AA0BD,4DAgBC;AAtTD,+DAAuD;AA6BvD;;;;GAIG;AACH,MAAM,iBAAiB,GAAwB,IAAI,GAAG,CAAiB;IACrE,MAAM;IACN,MAAM;IACN,MAAM;IACN,QAAQ;IACR,cAAc;IACd,aAAa;IACb,YAAY;CACb,CAAC,CAAC;AAEH;;;;;;;;;;;GAWG;AACU,QAAA,yBAAyB,GAAwB,IAAI,GAAG,CAAC;IACpE,OAAO;IACP,OAAO;IACP,OAAO;IACP,QAAQ;IACR,OAAO;IACP,MAAM;IACN,OAAO;IACP,OAAO;IACP,MAAM;IACN,OAAO;IACP,MAAM;IACN,IAAI;IACJ,KAAK;IACL,QAAQ;IACR,QAAQ;IACR,OAAO;IACP,IAAI;IACJ,UAAU;IACV,KAAK;IACL,IAAI;IACJ,QAAQ;CACT,CAAC,CAAC;AAEH;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,MAAM,QAAQ,GACZ,wJAAwJ,CAAC;AAE3J;;;;;;;;;;;;;;;;GAgBG;AACH,SAAgB,aAAa,CAAC,GAAW;IACvC,IAAI,CAAC,GAAG;QAAE,OAAO,EAAE,CAAC;IACpB,MAAM,GAAG,GAAsB,EAAE,CAAC;IAClC,MAAM,EAAE,GAAG,IAAI,MAAM,CAAC,QAAQ,CAAC,MAAM,EAAE,QAAQ,CAAC,KAAK,CAAC,CAAC;IACvD,IAAI,CAAyB,CAAC;IAC9B,OAAO,CAAC,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;QACnC,qEAAqE;QACrE,2DAA2D;QAC3D,kEAAkE;QAClE,MAAM,SAAS,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;QAClE,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,SAAS,CAAC;YAAE,SAAS;QAChD,MAAM,MAAM,GAAG,SAA2B,CAAC;QAE3C,6DAA6D;QAC7D,8DAA8D;QAC9D,2DAA2D;QAC3D,MAAM,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;QACzD,IAAI,CAAC,KAAK;YAAE,SAAS;QAErB,kEAAkE;QAClE,0DAA0D;QAC1D,MAAM,OAAO,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QAC1C,IAAI,iCAAyB,CAAC,GAAG,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC;YAAE,SAAS;QAEnE,GAAG,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,cAAc,CAAC,GAAG,EAAE,MAAM,CAAC,EAAE,CAAC,CAAC;IACnE,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;;;;;;;;;;;;GAcG;AACH,SAAS,cAAc,CAAC,SAAiB,EAAE,MAAsB;IAC/D,IAAI,MAAM,KAAK,MAAM,IAAI,MAAM,KAAK,QAAQ;QAAE,OAAO,OAAO,CAAC;IAC7D,IAAI,MAAM,KAAK,cAAc,IAAI,MAAM,KAAK,aAAa,IAAI,MAAM,KAAK,YAAY,EAAE,CAAC;QACrF,OAAO,OAAO,CAAC;IACjB,CAAC;IACD,IAAI,MAAM,KAAK,MAAM,IAAI,eAAe,CAAC,IAAI,CAAC,SAAS,CAAC;QAAE,OAAO,OAAO,CAAC;IACzE,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,8EAA8E;AAC9E,kEAAkE;AAClE,8EAA8E;AAE9E;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AACH,MAAM,mBAAmB,GAAG,+CAA+C,CAAC;AAE5E;;;;GAIG;AACU,QAAA,+BAA+B,GAAG,sBAAsB,CAAC;AAEtE;;;;;;;;;;;;;;GAcG;AACH,SAAgB,oBAAoB,CAAC,GAAW;IAC9C,MAAM,OAAO,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC;IAC3B,IAAI,CAAC,OAAO;QAAE,OAAO,EAAE,CAAC;IACxB,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;IAC5C,MAAM,SAAS,GAAG,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;IACvD,MAAM,IAAI,GAAG,OAAO;SACjB,KAAK,CAAC,SAAS,CAAC,MAAM,CAAC;SACvB,OAAO,CAAC,SAAS,EAAE,GAAG,CAAC;SACvB,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IACvB,IAAI,CAAC,IAAI;QAAE,OAAO,EAAE,CAAC;IACrB,OAAO,CAAC,SAAS,GAAG,IAAI,CAAC,CAAC,WAAW,EAAE,CAAC;AAC1C,CAAC;AAED;;;;;;;;GAQG;AACH,SAAgB,uBAAuB,CAAC,GAAW;IACjD,IAAI,CAAC,GAAG;QAAE,OAAO,EAAE,CAAC;IACpB,MAAM,GAAG,GAAa,EAAE,CAAC;IACzB,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,MAAM,EAAE,GAAG,IAAI,MAAM,CAAC,mBAAmB,CAAC,MAAM,EAAE,mBAAmB,CAAC,KAAK,CAAC,CAAC;IAC7E,IAAI,CAAyB,CAAC;IAC9B,OAAO,CAAC,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;QACnC,MAAM,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QACvC,MAAM,UAAU,GAAG,oBAAoB,CAAC,GAAG,CAAC,CAAC;QAC7C,IAAI,CAAC,UAAU;YAAE,SAAS;QAC1B,IAAI,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC;YAAE,SAAS;QACnC,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QACrB,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IACvB,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,SAAgB,wBAAwB,CAAC,cAAsB;IAC7D,MAAM,QAAQ,GAAG,yBAAyB,cAAc,EAAE,CAAC;IAC3D,OAAO;QACL,EAAE,EAAE,IAAA,oCAAc,EAAC,QAAQ,EAAE,MAAM,EAAE,cAAc,EAAE,CAAC,CAAC;QACvD,IAAI,EAAE,MAAM;QACZ,IAAI,EAAE,cAAc,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,GAAG,EAAE,IAAI,cAAc;QACvE,aAAa,EAAE,cAAc;QAC7B,QAAQ;QACR,QAAQ,EAAE,KAAK;QACf,SAAS,EAAE,CAAC;QACZ,OAAO,EAAE,CAAC;QACV,WAAW,EAAE,CAAC;QACd,SAAS,EAAE,cAAc,CAAC,MAAM;QAChC,QAAQ,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,WAAW,EAAE,cAAc,EAAE;QACzD,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;KACtB,CAAC;AACJ,CAAC"}

package/lib/dist/extraction/tree-sitter.d.ts

@@ -4,6 +4,7 @@
  * Handles parsing source code and extracting structural information.
  */
 import { Language, ExtractionResult } from '../types';
+import type { VbaExtractionOptions } from './vba/options';
 export { generateNodeId } from './tree-sitter-helpers';
 /**
  * TreeSitterExtractor - Main extraction class
@@ -709,6 +710,14 @@ export declare class TreeSitterExtractor {
  * just a `file` node. Read from `codegraph.json` via
  * `loadDysflowExportConfig(rootDir)` at the call site and threaded in here
  * so this function stays project-config-agnostic.
+ *
+ * `vbaOptions` (issue #243) is the object form of every VBA-specific knob and
+ * is what in-repo callers pass. The `vbaTargets` / `maxRaiseFanout`
+ * positionals are `@deprecated` and kept for one release; when both are
+ * supplied the OBJECT WINS per field.
+ *
+ * @param vbaTargets @deprecated Pass `vbaOptions.targets` instead.
+ * @param maxRaiseFanout @deprecated Pass `vbaOptions.maxRaiseFanout` instead.
  */
-export declare function extractFromSource(filePath: string, source: string, language?: Language, frameworkNames?: string[], vbaTargets?: Record<string, boolean>, maxRaiseFanout?: number, dysflowExport?: boolean): ExtractionResult;
+export declare function extractFromSource(filePath: string, source: string, language?: Language, frameworkNames?: string[], vbaTargets?: Record<string, boolean>, maxRaiseFanout?: number, dysflowExport?: boolean, vbaOptions?: VbaExtractionOptions): ExtractionResult;
 //# sourceMappingURL=tree-sitter.d.ts.map