@massu/core 1.10.7 → 1.12.0

package/src/detect/adapters/python-fastapi.ts

@@ -1,223 +0,0 @@
-// Copyright (c) 2026 Massu. All rights reserved.
-// Licensed under BSL 1.1 - see LICENSE file for details.
-
-/**
- * Plan 3b — Phase 1: FastAPI AST adapter.
- *
- * Extracts:
- *   - auth_dep: name passed to `Depends(...)` in router files
- *   - api_prefix_base: first path segment of `APIRouter(prefix="/...")`
- *   - test_async_pattern: `@pytest.mark.asyncio` (with or without parens)
- *
- * Confidence rules:
- *   - 'high' if the auth dep is found exactly ONCE in routers/ and matches
- *     known FastAPI signatures.
- *   - 'medium' if found in non-routers/ paths (e.g., a deps.py module).
- *   - 'low' if multiple candidate auth deps are found (ambiguous — but still
- *     emitted so the user can see what was found).
- *   - 'none' if no `Depends(...)` calls found AND no `APIRouter(prefix=)` —
- *     adapter doesn't apply, regex fallback takes over.
- *
- * Does NOT use regex on file content — only Tree-sitter S-expression queries
- * compiled via `query-helpers.ts`. Regex would be the regex-fallback path.
- */
-
-import { Parser } from 'web-tree-sitter';
-import type { CodebaseAdapter, AdapterResult, DetectionSignals, Provenance, SourceFile } from './types.ts';
-import { runQuery, InvalidQueryError } from './query-helpers.ts';
-import { loadGrammar } from './tree-sitter-loader.ts';
-import { isParsableSource, MAX_AST_FILE_BYTES } from './parse-guard.ts';
-
-// ============================================================
-// Tree-sitter S-expression queries
-// ============================================================
-
-/**
- * Auth dependency: catches `Depends(get_current_user)`, `Depends(require_tier_or_guardian)`,
- * etc. Anchored on the canonical `Depends` call shape.
- *
- * Per the spec doc §3, predicate constraints (#eq?) keep the query from
- * matching arbitrary `<x>(<y>)` calls.
- */
-const AUTH_DEP_QUERY = `
-(call
-  function: (identifier) @_callee (#eq? @_callee "Depends")
-  arguments: (argument_list
-    (identifier) @auth_dep))
-`;
-
-/**
- * APIRouter prefix: `APIRouter(prefix="/api/orders", ...)`. Captures the
- * string literal so the runner can split off the base segment.
- */
-const API_PREFIX_QUERY = `
-(call
-  function: (identifier) @_callee (#eq? @_callee "APIRouter")
-  arguments: (argument_list
-    (keyword_argument
-      name: (identifier) @_kw (#eq? @_kw "prefix")
-      value: (string) @prefix_value)))
-`;
-
-/**
- * `@pytest.mark.asyncio` decorator. Captures the decorator name string for
- * provenance; the value field is fixed as the canonical form.
- */
-const PYTEST_ASYNCIO_QUERY = `
-(decorator
-  (attribute
-    object: (attribute
-      object: (identifier) @_pkg (#eq? @_pkg "pytest")
-      attribute: (identifier) @_mark (#eq? @_mark "mark"))
-    attribute: (identifier) @_marker (#eq? @_marker "asyncio"))) @decorator
-`;
-
-// ============================================================
-// Adapter
-// ============================================================
-
-export const pythonFastApiAdapter: CodebaseAdapter = {
-  id: 'python-fastapi',
-  languages: ['python'],
-
-  matches(signals: DetectionSignals): boolean {
-    // Cheap signal-only check. No file IO. Match if:
-    //   1. pyproject.toml mentions fastapi (raw text contains 'fastapi'), OR
-    //   2. project has a routers/ directory (FastAPI convention), OR
-    //   3. project has app/ + python files at top level
-    const pyToml = signals.pyprojectToml as { __raw?: string } | undefined;
-    if (pyToml?.__raw && /\bfastapi\b/i.test(pyToml.__raw)) return true;
-    if (signals.presentDirs.has('routers')) return true;
-    if (signals.presentDirs.has('app') && signals.presentFiles.has('main.py')) return true;
-    return false;
-  },
-
-  async introspect(files: SourceFile[], _rootDir: string): Promise<AdapterResult> {
-    if (files.length === 0) {
-      return { conventions: {}, provenance: [], confidence: 'none' };
-    }
-
-    let language;
-    try {
-      language = await loadGrammar('python');
-    } catch (e) {
-      // Grammar unavailable → adapter returns 'none' so regex fallback takes
-      // over. The runner's stderr line is emitted at the introspector tier.
-      return { conventions: {}, provenance: [], confidence: 'none' };
-    }
-
-    const parser = new Parser();
-    parser.setLanguage(language);
-
-    // Per-field collection: { value -> { fileLine, queryName } }
-    const authDeps = new Map<string, { line: number; file: string }>();
-    const prefixBases = new Map<string, { line: number; file: string }>();
-    const testAsyncPatterns = new Map<string, { line: number; file: string }>();
-
-    try {
-      for (const file of files) {
-        // Phase 3.5 fix: defense-in-depth size + depth gate at adapter
-        // tier (the runner also gates, but adapters may be invoked
-        // directly from tests/CLI).
-        const skip = isParsableSource(file.content, file.size);
-        if (skip) {
-          process.stderr.write(
-            `[massu/ast] WARN: python-fastapi skipping ${file.path}: ${skip.reason} (${skip.detail}). Cap=${MAX_AST_FILE_BYTES}. (Phase 3.5 mitigation)\n`,
-          );
-          continue;
-        }
-        try {
-          // Auth dep
-          for (const hit of runQuery(parser, file.content, AUTH_DEP_QUERY, 'fastapi-auth-dep', file.path)) {
-            const name = hit.captures.auth_dep;
-            if (name && !authDeps.has(name)) {
-              authDeps.set(name, { line: hit.line, file: file.path });
-            }
-          }
-          // API prefix
-          for (const hit of runQuery(parser, file.content, API_PREFIX_QUERY, 'fastapi-api-prefix', file.path)) {
-            const raw = hit.captures.prefix_value;
-            if (!raw) continue;
-            // Strip enclosing quotes (string node text includes them)
-            const literal = raw.replace(/^['"]/, '').replace(/['"]$/, '');
-            const base = extractPrefixBase(literal);
-            if (base && !prefixBases.has(base)) {
-              prefixBases.set(base, { line: hit.line, file: file.path });
-            }
-          }
-          // pytest.mark.asyncio
-          for (const hit of runQuery(parser, file.content, PYTEST_ASYNCIO_QUERY, 'fastapi-pytest-asyncio', file.path)) {
-            const pat = '@pytest.mark.asyncio';
-            if (!testAsyncPatterns.has(pat)) {
-              testAsyncPatterns.set(pat, { line: hit.line, file: file.path });
-            }
-          }
-        } catch (e) {
-          if (e instanceof InvalidQueryError) {
-            // Compile-time failure of OUR query is a developer bug — surface it.
-            throw e;
-          }
-          // Per-file parse error: skip this file, keep going. Tree-sitter is
-          // error-tolerant so this is rare; usually means we got a binary or
-          // a non-Python file mislabeled.
-          continue;
-        }
-      }
-    } finally {
-      try { parser.delete(); } catch { /* ignore */ }
-    }
-
-    // Build result
-    const conventions: Record<string, unknown> = {};
-    const provenance: Provenance[] = [];
-
-    // Auth dep: high if exactly 1, low if >1 (still emit first), none if 0.
-    if (authDeps.size === 1) {
-      const [name, { line, file }] = authDeps.entries().next().value as [string, { line: number; file: string }];
-      conventions.auth_dep = name;
-      provenance.push({ field: 'auth_dep', sourceFile: file, line, query: 'fastapi-auth-dep' });
-    } else if (authDeps.size >= 2) {
-      // Ambiguous — prefer the first-seen (stable order from input file list).
-      const [name, { line, file }] = authDeps.entries().next().value as [string, { line: number; file: string }];
-      conventions.auth_dep = name;
-      provenance.push({ field: 'auth_dep', sourceFile: file, line, query: 'fastapi-auth-dep' });
-    }
-
-    if (prefixBases.size >= 1) {
-      const [base, { line, file }] = prefixBases.entries().next().value as [string, { line: number; file: string }];
-      conventions.api_prefix_base = base;
-      provenance.push({ field: 'api_prefix_base', sourceFile: file, line, query: 'fastapi-api-prefix' });
-    }
-
-    if (testAsyncPatterns.size >= 1) {
-      const [pat, { line, file }] = testAsyncPatterns.entries().next().value as [string, { line: number; file: string }];
-      conventions.test_async_pattern = pat;
-      provenance.push({ field: 'test_async_pattern', sourceFile: file, line, query: 'fastapi-pytest-asyncio' });
-    }
-
-    let confidence: AdapterResult['confidence'];
-    if (Object.keys(conventions).length === 0) {
-      confidence = 'none';
-    } else if (authDeps.size === 1 || (authDeps.size === 0 && prefixBases.size > 0)) {
-      confidence = 'high';
-    } else if (authDeps.size >= 2) {
-      confidence = 'low';
-    } else {
-      confidence = 'medium';
-    }
-
-    return { conventions, provenance, confidence };
-  },
-};
-
-// ============================================================
-// Helpers
-// ============================================================
-
-function extractPrefixBase(prefix: string): string | null {
-  if (!prefix.startsWith('/')) return null;
-  const stripped = prefix.replace(/^\/+/, '');
-  const firstSeg = stripped.split('/')[0];
-  if (!firstSeg) return null;
-  return '/' + firstSeg;
-}

package/src/detect/adapters/python-flask.ts

@@ -1,235 +0,0 @@
-// Copyright (c) 2026 Massu. All rights reserved.
-// Licensed under BSL 1.1 - see LICENSE file for details.
-
-/**
- * Plan 3c — Phase 7: Flask AST adapter.
- *
- * First Phase 7 framework after Plan 3b's 4 (FastAPI/Django/tRPC/SwiftUI).
- * Establishes the per-framework deliverable pattern (4 artifacts) all
- * remaining Phase 7 frameworks follow:
- *   1. packages/core/templates/python-flask/massu.config.yaml  (variant template)
- *   2. packages/core/src/detect/adapters/python-flask.ts        (this file — AST adapter)
- *   3. Adversarial fixtures (inline in the test file via mkdirSync+writeFileSync,
- *      following the python-fastapi pattern in ast-adapters-adversarial.test.ts)
- *   4. packages/core/src/__tests__/python-flask.test.ts          (golden-output snapshot)
- *
- * Extracts:
- *   - auth_decorator: name of the auth-gating decorator (`@login_required`,
- *     `@auth_required`, or other Flask-Login-style decorator on a view).
- *   - blueprint_url_prefix: first path segment of `Blueprint(name, __name__,
- *     url_prefix="/api/...")`, mirroring the python-fastapi APIRouter prefix
- *     extraction.
- *   - app_factory: name of the Flask app-factory function (`def create_app():`
- *     or similar). Useful for scaffold-router templates that need to know
- *     where to register a new Blueprint.
- *
- * Confidence rules (mirror python-fastapi):
- *   - 'high' if exactly ONE auth_decorator is found (clear single convention).
- *   - 'medium' if blueprint_url_prefix or app_factory found but no auth decorator.
- *   - 'low' if multiple distinct auth_decorators are found (ambiguous).
- *   - 'none' if no Flask signals at all (regex fallback takes over).
- *
- * Does NOT use regex on file content — only Tree-sitter S-expression queries
- * compiled via query-helpers.ts. Regex would be the regex-fallback path.
- */
-
-import { Parser } from 'web-tree-sitter';
-import type { CodebaseAdapter, AdapterResult, DetectionSignals, Provenance, SourceFile } from './types.ts';
-import { runQuery, InvalidQueryError } from './query-helpers.ts';
-import { loadGrammar } from './tree-sitter-loader.ts';
-import { isParsableSource, MAX_AST_FILE_BYTES } from './parse-guard.ts';
-
-// ============================================================
-// Tree-sitter S-expression queries
-// ============================================================
-
-/**
- * Auth decorator: matches `@login_required`, `@auth_required`,
- * `@some_auth_required`, etc. on a view function.
- *
- * The Tree-sitter Python grammar represents `@some_name` decorators as
- * a `decorator` node containing an `identifier` (for bare names) OR an
- * `attribute` (for `@module.name`). We capture both shapes and filter to
- * names ending in `_required` since that's the Flask-Login convention
- * and avoids matching unrelated decorators like `@app.route(...)`.
- */
-const AUTH_DECORATOR_QUERY = `
-(decorator
-  (identifier) @auth_decorator (#match? @auth_decorator "_required$"))
-`;
-
-/**
- * Blueprint URL prefix: `Blueprint(name, __name__, url_prefix="/api/orders")`.
- * Captures the keyword-arg string literal so the runner can split off the
- * base segment.
- */
-const BLUEPRINT_URL_PREFIX_QUERY = `
-(call
-  function: (identifier) @_callee (#eq? @_callee "Blueprint")
-  arguments: (argument_list
-    (keyword_argument
-      name: (identifier) @_kw (#eq? @_kw "url_prefix")
-      value: (string) @url_prefix)))
-`;
-
-/**
- * App factory: `def create_app():` (or any function whose name starts with
- * `create_` and contains `Flask`). The factory pattern is canonical in Flask
- * (per Flask docs: https://flask.palletsprojects.com/en/2.3.x/patterns/appfactories/).
- * We capture the function name + assert its body contains `Flask(`.
- *
- * The Tree-sitter Python grammar represents `def name():` as a
- * `function_definition` node with `name: (identifier)` field.
- */
-const APP_FACTORY_QUERY = `
-(function_definition
-  name: (identifier) @factory_name (#match? @factory_name "^create_")
-  body: (block
-    (expression_statement
-      (assignment
-        right: (call
-          function: (identifier) @_flask_call (#eq? @_flask_call "Flask"))))))
-`;
-
-// ============================================================
-// Adapter
-// ============================================================
-
-export const pythonFlaskAdapter: CodebaseAdapter = {
-  id: 'python-flask',
-  languages: ['python'],
-
-  matches(signals: DetectionSignals): boolean {
-    // Cheap signal-only check. No file IO. Match if:
-    //   1. pyproject.toml mentions flask (raw text contains 'flask'), OR
-    //   2. project has app/ + python files at top level (Flask convention)
-    const pyToml = signals.pyprojectToml as { __raw?: string } | undefined;
-    if (pyToml?.__raw && /\bflask\b/i.test(pyToml.__raw)) return true;
-    if (signals.presentDirs.has('app') && signals.presentFiles.has('app.py')) return true;
-    if (signals.presentDirs.has('app') && signals.presentFiles.has('wsgi.py')) return true;
-    return false;
-  },
-
-  async introspect(files: SourceFile[], _rootDir: string): Promise<AdapterResult> {
-    if (files.length === 0) {
-      return { conventions: {}, provenance: [], confidence: 'none' };
-    }
-
-    let language;
-    try {
-      language = await loadGrammar('python');
-    } catch (e) {
-      // Grammar unavailable → adapter returns 'none' so regex fallback takes over.
-      return { conventions: {}, provenance: [], confidence: 'none' };
-    }
-
-    const parser = new Parser();
-    parser.setLanguage(language);
-
-    const authDecorators = new Map<string, { line: number; file: string }>();
-    const urlPrefixes = new Map<string, { line: number; file: string }>();
-    const appFactories = new Map<string, { line: number; file: string }>();
-
-    try {
-      for (const file of files) {
-        // Phase 3.5 defense-in-depth size + depth gate at adapter tier.
-        const skip = isParsableSource(file.content, file.size);
-        if (skip) {
-          process.stderr.write(
-            `[massu/ast] WARN: python-flask skipping ${file.path}: ${skip.reason} (${skip.detail}). Cap=${MAX_AST_FILE_BYTES}. (Phase 3.5 mitigation)\n`,
-          );
-          continue;
-        }
-        try {
-          for (const hit of runQuery(parser, file.content, AUTH_DECORATOR_QUERY, 'flask-auth-decorator', file.path)) {
-            const name = hit.captures.auth_decorator;
-            if (name && !authDecorators.has(name)) {
-              authDecorators.set(name, { line: hit.line, file: file.path });
-            }
-          }
-          for (const hit of runQuery(parser, file.content, BLUEPRINT_URL_PREFIX_QUERY, 'flask-blueprint-url-prefix', file.path)) {
-            const raw = hit.captures.url_prefix;
-            if (!raw) continue;
-            const literal = raw.replace(/^['"]/, '').replace(/['"]$/, '');
-            const base = extractPrefixBase(literal);
-            if (base && !urlPrefixes.has(base)) {
-              urlPrefixes.set(base, { line: hit.line, file: file.path });
-            }
-          }
-          for (const hit of runQuery(parser, file.content, APP_FACTORY_QUERY, 'flask-app-factory', file.path)) {
-            const name = hit.captures.factory_name;
-            if (name && !appFactories.has(name)) {
-              appFactories.set(name, { line: hit.line, file: file.path });
-            }
-          }
-        } catch (e) {
-          if (e instanceof InvalidQueryError) {
-            // Compile-time failure of OUR query is a developer bug — surface it.
-            throw e;
-          }
-          // Per-file parse error: skip + keep going.
-          continue;
-        }
-      }
-    } finally {
-      try { parser.delete(); } catch { /* ignore */ }
-    }
-
-    // Build result
-    const conventions: Record<string, unknown> = {};
-    const provenance: Provenance[] = [];
-
-    if (authDecorators.size === 1) {
-      const [name, { line, file }] = authDecorators.entries().next().value as [string, { line: number; file: string }];
-      conventions.auth_decorator = name;
-      provenance.push({ field: 'auth_decorator', sourceFile: file, line, query: 'flask-auth-decorator' });
-    } else if (authDecorators.size >= 2) {
-      // Ambiguous — prefer first-seen (stable order from input file list).
-      const [name, { line, file }] = authDecorators.entries().next().value as [string, { line: number; file: string }];
-      conventions.auth_decorator = name;
-      provenance.push({ field: 'auth_decorator', sourceFile: file, line, query: 'flask-auth-decorator' });
-    }
-
-    if (urlPrefixes.size >= 1) {
-      const [base, { line, file }] = urlPrefixes.entries().next().value as [string, { line: number; file: string }];
-      conventions.blueprint_url_prefix = base;
-      provenance.push({ field: 'blueprint_url_prefix', sourceFile: file, line, query: 'flask-blueprint-url-prefix' });
-    }
-
-    if (appFactories.size >= 1) {
-      const [name, { line, file }] = appFactories.entries().next().value as [string, { line: number; file: string }];
-      conventions.app_factory = name;
-      provenance.push({ field: 'app_factory', sourceFile: file, line, query: 'flask-app-factory' });
-    }
-
-    let confidence: AdapterResult['confidence'];
-    if (Object.keys(conventions).length === 0) {
-      confidence = 'none';
-    } else if (authDecorators.size === 1) {
-      confidence = 'high';
-    } else if (authDecorators.size >= 2) {
-      confidence = 'low';
-    } else {
-      confidence = 'medium';
-    }
-
-    return { conventions, provenance, confidence };
-  },
-};
-
-// ============================================================
-// Helpers
-// ============================================================
-
-/**
- * Extract the first path segment of a Blueprint url_prefix. Mirrors
- * python-fastapi's extractPrefixBase. Returns null if input doesn't
- * start with `/`.
- */
-function extractPrefixBase(prefix: string): string | null {
-  if (!prefix.startsWith('/')) return null;
-  const stripped = prefix.replace(/^\/+/, '');
-  const firstSeg = stripped.split('/')[0];
-  if (!firstSeg) return null;
-  return '/' + firstSeg;
-}

package/src/detect/adapters/query-helpers.ts

@@ -1,170 +0,0 @@
-// Copyright (c) 2026 Massu. All rights reserved.
-// Licensed under BSL 1.1 - see LICENSE file for details.
-
-/**
- * Plan 3b — Phase 1: Tree-sitter query wrapper.
- *
- * Adapters consume the helpers in this file — never the raw `web-tree-sitter`
- * API. This keeps the surface area minimal and testable.
- *
- * Design:
- *   - `compileQuery` caches compiled `Query` instances per (language, source)
- *     tuple. Compiling an S-expression is non-trivial; cache hit-rate is
- *     critical when the same query runs across N sampled files.
- *   - `runQuery` returns the captures as `{captures, file, line}` records so
- *     adapters never need to touch raw `Node` objects.
- *   - `InvalidQueryError` is the typed error thrown when an S-expression is
- *     malformed; never let a raw `Error` reach the adapter (per audit-iter-5
- *     fix HH test (b)).
- */
-
-import { Query, type Language, type Node, type Parser, type QueryMatch } from 'web-tree-sitter';
-
-/**
- * Thrown when an S-expression query string fails to compile against the
- * supplied grammar. Carries the original message and the offending source
- * so adapter authors can debug.
- */
-export class InvalidQueryError extends Error {
-  public readonly queryName: string;
-  public readonly querySource: string;
-  public readonly cause?: unknown;
-  constructor(queryName: string, querySource: string, cause: unknown) {
-    const causeMsg = cause instanceof Error ? cause.message : String(cause);
-    super(
-      `[query-helpers] Invalid Tree-sitter query "${queryName}": ${causeMsg}\n` +
-        `Query source:\n${querySource}`,
-    );
-    this.name = 'InvalidQueryError';
-    this.queryName = queryName;
-    this.querySource = querySource;
-    this.cause = cause;
-  }
-}
-
-// ============================================================
-// Query compile cache
-// ============================================================
-
-// We key by Language identity (not by name) AND by source string. The Query
-// type from web-tree-sitter is opaque; we store it directly.
-const queryCache = new WeakMap<Language, Map<string, Query>>();
-
-/**
- * Compile (and cache) an S-expression query against `language`.
- *
- * Throws `InvalidQueryError` (NOT raw Error) on malformed S-expressions —
- * adapters can catch this without losing the typed boundary.
- *
- * Cache lookup is O(1) on the (Language, source) tuple via WeakMap+Map.
- */
-export function compileQuery(
-  language: Language,
-  source: string,
-  queryName: string,
-): Query {
-  let perLang = queryCache.get(language);
-  if (!perLang) {
-    perLang = new Map();
-    queryCache.set(language, perLang);
-  }
-  const cached = perLang.get(source);
-  if (cached) return cached;
-
-  let q: Query;
-  try {
-    q = new Query(language, source);
-  } catch (e) {
-    throw new InvalidQueryError(queryName, source, e);
-  }
-
-  perLang.set(source, q);
-  return q;
-}
-
-// ============================================================
-// Capture extraction
-// ============================================================
-
-export interface RunQueryHit {
-  /**
-   * Capture name → captured text. If the same capture name appears multiple
-   * times in a single match, the LAST occurrence wins (callers usually want
-   * the most-specific one).
-   */
-  captures: Record<string, string>;
-  /** Absolute path to the file being parsed. */
-  file: string;
-  /** 1-based line number of the FIRST capture in the match. */
-  line: number;
-  /** Name of the query (used for provenance). */
-  queryName: string;
-}
-
-/**
- * Run a compiled query against a parsed tree. Returns a flat list of hits.
- *
- * Each match becomes one `RunQueryHit`. The `line` is computed from the
- * earliest-starting capture in the match (1-based). Note that this helper is
- * intentionally narrow — it is NOT a general node-walker. Adapters that need
- * tree traversal should compose multiple queries instead.
- */
-export function runQuery(
-  parser: Parser,
-  source: string,
-  queryText: string,
-  queryName: string,
-  filePath: string,
-): RunQueryHit[] {
-  const language = parser.language;
-  if (!language) {
-    throw new InvalidQueryError(
-      queryName,
-      queryText,
-      new Error('Parser has no language assigned'),
-    );
-  }
-  const query = compileQuery(language, queryText, queryName);
-
-  const tree = parser.parse(source);
-  if (!tree) return [];
-
-  let matches: QueryMatch[];
-  try {
-    matches = query.matches(tree.rootNode);
-  } catch (e) {
-    // Match-time errors are unusual (compile-time catches most), but we still
-    // wrap to keep the typed-error contract.
-    throw new InvalidQueryError(queryName, queryText, e);
-  }
-
-  const out: RunQueryHit[] = [];
-  for (const match of matches) {
-    if (!match.captures || match.captures.length === 0) continue;
-    const captures: Record<string, string> = {};
-    let earliestLine = Number.POSITIVE_INFINITY;
-    for (const cap of match.captures) {
-      const node: Node = cap.node;
-      captures[cap.name] = node.text;
-      if (node.startPosition.row + 1 < earliestLine) {
-        earliestLine = node.startPosition.row + 1;
-      }
-    }
-    out.push({
-      captures,
-      file: filePath,
-      line: Number.isFinite(earliestLine) ? earliestLine : 1,
-      queryName,
-    });
-  }
-
-  // Per Tree-sitter docs: trees should be deleted to free WASM memory.
-  // Adapters call runQuery once per file so this cleanup is local.
-  try {
-    tree.delete();
-  } catch {
-    /* deletion is best-effort — some test mocks don't implement delete */
-  }
-
-  return out;
-}

package/src/detect/adapters/rails.ts

@@ -1,4 +0,0 @@
-// Plan 3c Phase 9b P-A-005: re-export shim. Source-of-truth lives at
-// `packages/adapter-rails/src/index.ts` (workspace package). This shim
-// preserves the legacy import path used by codebase-introspector + tests.
-export { railsAdapter } from '@massu/adapter-rails';