@grafema/core 0.1.1-alpha → 0.2.0-beta

package/dist/index.js

@@ -2,7 +2,7 @@
  * @grafema/core - Core analysis engine for GraphDD
  */
 // Error types
-export { GrafemaError, ConfigError, FileAccessError, LanguageError, DatabaseError, PluginError, AnalysisError, } from './errors/GrafemaError.js';
+export { GrafemaError, ConfigError, FileAccessError, LanguageError, DatabaseError, PluginError, AnalysisError, ValidationError, StrictModeError, } from './errors/GrafemaError.js';
 // Logging
 export { ConsoleLogger, createLogger } from './logging/Logger.js';
 // Diagnostics
@@ -28,6 +28,7 @@ export { ASTWorkerPool } from './core/ASTWorkerPool.js';
 export { GuaranteeManager } from './core/GuaranteeManager.js';
 export { clearFileNodesIfNeeded, clearServiceNodeIfExists } from './core/FileNodeManager.js';
 export { CoverageAnalyzer } from './core/CoverageAnalyzer.js';
+export { FileExplainer } from './core/FileExplainer.js';
 // Hash utilities
 export { calculateFileHash, calculateFileHashAsync, calculateContentHash } from './core/HashUtils.js';
 // Type validation and path validation
@@ -74,6 +75,7 @@ export { RustModuleIndexer } from './plugins/indexing/RustModuleIndexer.js';
 // Analysis plugins
 export { JSASTAnalyzer } from './plugins/analysis/JSASTAnalyzer.js';
 export { ExpressRouteAnalyzer } from './plugins/analysis/ExpressRouteAnalyzer.js';
+export { ExpressResponseAnalyzer } from './plugins/analysis/ExpressResponseAnalyzer.js';
 export { ExpressAnalyzer } from './plugins/analysis/ExpressAnalyzer.js';
 export { SocketIOAnalyzer } from './plugins/analysis/SocketIOAnalyzer.js';
 export { DatabaseAnalyzer } from './plugins/analysis/DatabaseAnalyzer.js';
@@ -86,6 +88,7 @@ export { SystemDbAnalyzer } from './plugins/analysis/SystemDbAnalyzer.js';
 export { IncrementalAnalysisPlugin } from './plugins/analysis/IncrementalAnalysisPlugin.js';
 // Enrichment plugins
 export { MethodCallResolver } from './plugins/enrichment/MethodCallResolver.js';
+export { ArgumentParameterLinker } from './plugins/enrichment/ArgumentParameterLinker.js';
 export { AliasTracker } from './plugins/enrichment/AliasTracker.js';
 export { ValueDomainAnalyzer } from './plugins/enrichment/ValueDomainAnalyzer.js';
 export { MountPointResolver } from './plugins/enrichment/MountPointResolver.js';
@@ -93,7 +96,15 @@ export { PrefixEvaluator } from './plugins/enrichment/PrefixEvaluator.js';
 export { InstanceOfResolver } from './plugins/enrichment/InstanceOfResolver.js';
 export { HTTPConnectionEnricher } from './plugins/enrichment/HTTPConnectionEnricher.js';
 export { ImportExportLinker } from './plugins/enrichment/ImportExportLinker.js';
+export { FunctionCallResolver } from './plugins/enrichment/FunctionCallResolver.js';
 export { RustFFIEnricher } from './plugins/enrichment/RustFFIEnricher.js';
+export { NodejsBuiltinsResolver } from './plugins/enrichment/NodejsBuiltinsResolver.js';
+export { ExternalCallResolver } from './plugins/enrichment/ExternalCallResolver.js';
+export { ClosureCaptureEnricher } from './plugins/enrichment/ClosureCaptureEnricher.js';
+// Builtin registry
+export { BuiltinRegistry } from './data/builtins/index.js';
+// Globals registry
+export { GlobalsRegistry, ALL_GLOBALS } from './data/globals/index.js';
 // Validation plugins
 export { CallResolverValidator } from './plugins/validation/CallResolverValidator.js';
 export { EvalBanValidator } from './plugins/validation/EvalBanValidator.js';
@@ -103,6 +114,7 @@ export { GraphConnectivityValidator } from './plugins/validation/GraphConnectivi
 export { DataFlowValidator } from './plugins/validation/DataFlowValidator.js';
 export { TypeScriptDeadCodeValidator } from './plugins/validation/TypeScriptDeadCodeValidator.js';
 export { NodeCreationValidator } from './plugins/validation/NodeCreationValidator.js';
+export { BrokenImportValidator } from './plugins/validation/BrokenImportValidator.js';
 // Discovery plugins
 export { SimpleProjectDiscovery } from './plugins/discovery/SimpleProjectDiscovery.js';
 export { DiscoveryPlugin } from './plugins/discovery/DiscoveryPlugin.js';
@@ -114,3 +126,7 @@ export { detectWorkspaceType, parsePnpmWorkspace, parseNpmWorkspace, parseLernaC
 // VCS plugins
 export { GitPlugin } from './plugins/vcs/GitPlugin.js';
 export { VCSPlugin, VCSPluginFactory, FileStatus } from './plugins/vcs/VCSPlugin.js';
+// Schema extraction
+export { InterfaceSchemaExtractor, GraphSchemaExtractor } from './schema/index.js';
+// Graph Query Utilities
+export { findCallsInFunction, findContainingFunction, traceValues, aggregateValues, NONDETERMINISTIC_PATTERNS, NONDETERMINISTIC_OBJECTS } from './queries/index.js';

package/dist/plugins/analysis/DatabaseAnalyzer.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"DatabaseAnalyzer.d.ts","sourceRoot":"","sources":["../../../src/plugins/analysis/DatabaseAnalyzer.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAOH,OAAO,EAAE,MAAM,EAA0C,MAAM,cAAc,CAAC;AAC9E,OAAO,KAAK,EAAE,aAAa,EAAE,YAAY,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AAgChF,qBAAa,gBAAiB,SAAQ,MAAM;IAC1C,IAAI,QAAQ,IAAI,cAAc,CAW7B;IAEK,OAAO,CAAC,OAAO,EAAE,aAAa,GAAG,OAAO,CAAC,YAAY,CAAC;IAyD5D;;OAEG;YACW,YAAY;IAQ1B;;OAEG;YACW,aAAa;IAsL3B;;OAEG;IACH,OAAO,CAAC,kBAAkB;CAc3B"}
+{"version":3,"file":"DatabaseAnalyzer.d.ts","sourceRoot":"","sources":["../../../src/plugins/analysis/DatabaseAnalyzer.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAOH,OAAO,EAAE,MAAM,EAA0C,MAAM,cAAc,CAAC;AAC9E,OAAO,KAAK,EAAE,aAAa,EAAE,YAAY,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AAiChF,qBAAa,gBAAiB,SAAQ,MAAM;IAC1C,IAAI,QAAQ,IAAI,cAAc,CAW7B;IAEK,OAAO,CAAC,OAAO,EAAE,aAAa,GAAG,OAAO,CAAC,YAAY,CAAC;IAyD5D;;OAEG;YACW,YAAY;IAQ1B;;OAEG;YACW,aAAa;IAuL3B;;OAEG;IACH,OAAO,CAAC,kBAAkB;CAc3B"}

package/dist/plugins/analysis/DatabaseAnalyzer.js

@@ -6,7 +6,7 @@ import { readFileSync } from 'fs';
 import { parse } from '@babel/parser';
 import traverseModule from '@babel/traverse';
 import { Plugin, createSuccessResult, createErrorResult } from '../Plugin.js';
-import { getLine } from './ast/utils/location.js';
+import { getLine, getColumn } from './ast/utils/location.js';
 // eslint-disable-next-line @typescript-eslint/no-explicit-any
 const traverse = traverseModule.default || traverseModule;
 export class DatabaseAnalyzer extends Plugin {
@@ -177,7 +177,8 @@ export class DatabaseAnalyzer extends Plugin {
                                     object: objectName,
                                     method: methodName,
                                     file: module.file,
-                                    line: getLine(node)
+                                    line: getLine(node),
+                                    column: getColumn(node)
                                 });
                             }
                         }

package/dist/plugins/analysis/ExpressAnalyzer.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"ExpressAnalyzer.d.ts","sourceRoot":"","sources":["../../../src/plugins/analysis/ExpressAnalyzer.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAQH,OAAO,EAAE,MAAM,EAA0C,MAAM,cAAc,CAAC;AAC9E,OAAO,KAAK,EAAE,aAAa,EAAE,YAAY,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AAsDhF,qBAAa,eAAgB,SAAQ,MAAM;IACzC,IAAI,QAAQ,IAAI,cAAc,CAW7B;IAEK,OAAO,CAAC,OAAO,EAAE,aAAa,GAAG,OAAO,CAAC,YAAY,CAAC;IA2C5D;;OAEG;YACW,aAAa;IA6N3B;;OAEG;YACW,gBAAgB;CA4D/B"}
+{"version":3,"file":"ExpressAnalyzer.d.ts","sourceRoot":"","sources":["../../../src/plugins/analysis/ExpressAnalyzer.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAQH,OAAO,EAAE,MAAM,EAA0C,MAAM,cAAc,CAAC;AAC9E,OAAO,KAAK,EAAE,aAAa,EAAE,YAAY,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AAwDhF,qBAAa,eAAgB,SAAQ,MAAM;IACzC,IAAI,QAAQ,IAAI,cAAc,CAW7B;IAEK,OAAO,CAAC,OAAO,EAAE,aAAa,GAAG,OAAO,CAAC,YAAY,CAAC;IA2C5D;;OAEG;YACW,aAAa;IA+N3B;;OAEG;YACW,gBAAgB;CA4D/B"}

package/dist/plugins/analysis/ExpressAnalyzer.js

@@ -8,7 +8,7 @@ import traverseModule from '@babel/traverse';
 import { dirname, resolve, relative } from 'path';
 import { Plugin, createSuccessResult, createErrorResult } from '../Plugin.js';
 import { NetworkRequestNode } from '../../core/nodes/NetworkRequestNode.js';
-import { getLine } from './ast/utils/location.js';
+import { getLine, getColumn } from './ast/utils/location.js';
 // eslint-disable-next-line @typescript-eslint/no-explicit-any
 const traverse = traverseModule.default || traverseModule;
 export class ExpressAnalyzer extends Plugin {
@@ -131,6 +131,7 @@ export class ExpressAnalyzer extends Plugin {
                                     localPath: routePath,
                                     file: module.file,
                                     line: getLine(node),
+                                    column: getColumn(node),
                                     mountedOn: objectName
                                 });
                             }
@@ -210,6 +211,7 @@ export class ExpressAnalyzer extends Plugin {
                                     targetVariable: targetVariable,
                                     file: module.file,
                                     line: getLine(node),
+                                    column: getColumn(node),
                                     mountedOn: objectName
                                 });
                             }

package/dist/plugins/analysis/ExpressResponseAnalyzer.d.ts

@@ -0,0 +1,148 @@
+/**
+ * ExpressResponseAnalyzer - detects Express response patterns
+ *
+ * For each http:route node:
+ * 1. Follow HANDLED_BY edge to get handler function
+ * 2. Traverse handler AST for res.json(...), res.send(...) patterns
+ * 3. Create RESPONDS_WITH edge from http:route to response argument node
+ *
+ * Patterns:
+ * - res.json({ data })
+ * - res.send(variable)
+ * - res.status(200).json(data)
+ */
+import { Plugin } from '../Plugin.js';
+import type { PluginContext, PluginResult, PluginMetadata } from '../Plugin.js';
+export declare class ExpressResponseAnalyzer extends Plugin {
+    private responseNodeCounter;
+    get metadata(): PluginMetadata;
+    execute(context: PluginContext): Promise<PluginResult>;
+    /**
+     * Analyze a single http:route for response patterns
+     */
+    private analyzeRouteResponses;
+    /**
+     * Find res.json/res.send calls within a function at given line
+     */
+    private findResponseCalls;
+    /**
+     * Get response parameter name from function params (typically 'res')
+     */
+    private getResponseParamName;
+    /**
+     * Extract response method info from callee
+     * Handles: res.json(), res.send(), res.status(200).json()
+     */
+    private extractResponseInfo;
+    /**
+     * Check if callee is res.methodName()
+     */
+    private isResMethodCall;
+    /**
+     * Resolve response node: find existing variable or create stub.
+     *
+     * For Identifier arguments (e.g., res.json(statusData)):
+     * 1. Try to find existing VARIABLE/PARAMETER/CONSTANT with same name in handler scope
+     * 2. If found, return existing node ID (no stub needed)
+     * 3. If not found, fall back to creating stub (external/global variables)
+     *
+     * For non-Identifier arguments (ObjectExpression, CallExpression, etc.):
+     * - Always create stub node (existing behavior)
+     *
+     * @param graph - Graph backend
+     * @param file - Handler file path
+     * @param call - Response call info (includes identifierName)
+     * @param routeId - Route ID (for metadata)
+     * @param handlerSemanticId - Handler function's semantic ID (for scope matching)
+     * @returns Node ID (existing or newly created)
+     */
+    private resolveOrCreateResponseNode;
+    /**
+     * Find existing VARIABLE/CONSTANT/PARAMETER node in handler scope.
+     *
+     * Strategy:
+     * 1. Parse handler semantic ID to extract scope prefix
+     * 2. Query VARIABLE/CONSTANT nodes: match by name, file, scope prefix, and line <= useLine
+     * 3. Query PARAMETER nodes: match by name, file, parentFunctionId === handlerSemanticId
+     *
+     * Scope matching:
+     * - Handler ID: "routes.js->anonymous[1]->FUNCTION->anonymous[1]"
+     * - Scope prefix: "routes.js->anonymous[1]->"
+     * - Variable ID: "routes.js->anonymous[1]->VARIABLE->statusData" (matches prefix)
+     * - External ID: "utils.js->VARIABLE->config" (different file)
+     *
+     * @param graph - Graph backend
+     * @param file - File path
+     * @param name - Variable name to find
+     * @param handlerSemanticId - Handler function's semantic ID
+     * @param useLine - Line where identifier is used (variable must be declared before this)
+     * @returns Node ID if found, null otherwise
+     */
+    private findIdentifierInScope;
+    /**
+     * Extract scope prefix from handler function's semantic ID.
+     *
+     * Handler function semantic IDs follow the pattern:
+     *   {file}->{scope_path}->{type}->{name}
+     *
+     * Variables declared INSIDE the handler have IDs where the handler's NAME
+     * becomes part of THEIR scope path:
+     *   {file}->{handler_name}->{type}->{var_name}
+     *
+     * Examples:
+     * - Handler: "index.js->global->FUNCTION->anonymous[0]"
+     *   -> Variables inside: "index.js->anonymous[0]->CONSTANT->statusData"
+     *   -> Scope prefix: "index.js->anonymous[0]->"
+     *
+     * - Handler: "routes.js->anonymous[1]->FUNCTION->anonymous[1]"
+     *   -> Variables inside: "routes.js->anonymous[1]->VARIABLE->data"
+     *   -> Scope prefix: "routes.js->anonymous[1]->"
+     *
+     * - Handler: "app.js->global->FUNCTION->handleRequest"
+     *   -> Variables inside: "app.js->handleRequest->VARIABLE->result"
+     *   -> Scope prefix: "app.js->handleRequest->"
+     *
+     * Algorithm:
+     * 1. Split by "->"
+     * 2. Take file (first part) and handler name (last part)
+     * 3. Join with "->" and add trailing "->"
+     *
+     * @param semanticId - Handler function's semantic ID
+     * @returns Scope prefix for matching variables declared inside the handler
+     */
+    private extractScopePrefix;
+    /**
+     * Extract module prefix from semantic ID (for module-level variable access).
+     *
+     * Examples:
+     * - "routes.js->anonymous[1]->FUNCTION->anonymous[1]" -> "routes.js->"
+     * - "app.js->startServer->FUNCTION->startServer" -> "app.js->"
+     *
+     * @param semanticId - Handler function's semantic ID
+     * @returns Module prefix for matching module-level variables
+     */
+    private extractModulePrefix;
+    /**
+     * Check if a semantic ID represents a true module-level variable.
+     *
+     * Semantic IDs have format: file->scope->TYPE->name
+     * - Module-level variables have "global" as the scope: "file.js->global->TYPE->name"
+     * - Function-local variables have function name as scope: "file.js->funcName->TYPE->name"
+     *
+     * Examples:
+     * - "index.js->global->CONSTANT->CONFIG" -> true (module-level)
+     * - "index.js->global->VARIABLE->counter" -> true (module-level)
+     * - "index.js->anonymous[0]->CONSTANT->data" -> false (function-local)
+     * - "routes.js->handler->VARIABLE->result" -> false (function-local)
+     *
+     * @param nodeId - The node's semantic ID
+     * @param modulePrefix - The module prefix (e.g., "index.js->")
+     * @returns true if this is a module-level variable
+     */
+    private isModuleLevelId;
+    /**
+     * Create a node for the response argument
+     */
+    private createResponseArgumentNode;
+}
+//# sourceMappingURL=ExpressResponseAnalyzer.d.ts.map

package/dist/plugins/analysis/ExpressResponseAnalyzer.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ExpressResponseAnalyzer.d.ts","sourceRoot":"","sources":["../../../src/plugins/analysis/ExpressResponseAnalyzer.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAOH,OAAO,EAAE,MAAM,EAA0C,MAAM,cAAc,CAAC;AAC9E,OAAO,KAAK,EAAE,aAAa,EAAE,YAAY,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AAqBhF,qBAAa,uBAAwB,SAAQ,MAAM;IACjD,OAAO,CAAC,mBAAmB,CAAK;IAEhC,IAAI,QAAQ,IAAI,cAAc,CAW7B;IAEK,OAAO,CAAC,OAAO,EAAE,aAAa,GAAG,OAAO,CAAC,YAAY,CAAC;IAiC5D;;OAEG;YACW,qBAAqB;IAgEnC;;OAEG;IACH,OAAO,CAAC,iBAAiB;IAwEzB;;OAEG;IACH,OAAO,CAAC,oBAAoB;IAc5B;;;OAGG;IACH,OAAO,CAAC,mBAAmB;IAuC3B;;OAEG;IACH,OAAO,CAAC,eAAe;IAkBvB;;;;;;;;;;;;;;;;;OAiBG;YACW,2BAA2B;IAoCzC;;;;;;;;;;;;;;;;;;;;OAoBG;YACW,qBAAqB;IAqEnC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OA8BG;IACH,OAAO,CAAC,kBAAkB;IAgB1B;;;;;;;;;OASG;IACH,OAAO,CAAC,mBAAmB;IAQ3B;;;;;;;;;;;;;;;;OAgBG;IACH,OAAO,CAAC,eAAe;IAYvB;;OAEG;YACW,0BAA0B;CAiFzC"}