@opencodereview/core 1.9.1

package/dist/ir/types.d.ts

@@ -0,0 +1,126 @@
+/**
+ * Open Code Review V4 — Unified Intermediate Representation (IR)
+ *
+ * CodeUnit is the universal intermediate representation that all V4 detectors
+ * operate on. Detectors never access raw CST nodes directly — they work
+ * exclusively with CodeUnits.
+ *
+ * @since 0.4.0
+ */
+/**
+ * Languages supported by the V4 tree-sitter pipeline.
+ * Note: V3 SupportedLanguage is re-exported from types.ts for backward compat.
+ * This V4 type is the canonical definition going forward.
+ */
+export type SupportedLanguage = 'typescript' | 'javascript' | 'python' | 'java' | 'go' | 'kotlin';
+/** The structural kind of a CodeUnit */
+export type CodeUnitKind = 'file' | 'class' | 'function' | 'method' | 'block' | 'module';
+/** Precise source location within a file (all 0-based) */
+export interface SourceLocation {
+    startLine: number;
+    startColumn: number;
+    endLine: number;
+    endColumn: number;
+}
+/** A single import declaration extracted from source code */
+export interface ImportInfo {
+    /** The module/package being imported (e.g., "lodash", "os", "java.util.List") */
+    module: string;
+    /** Specific symbols imported (empty array = whole module import) */
+    symbols: string[];
+    /** Line number of the import (0-based) */
+    line: number;
+    /** Whether this is a relative import (e.g., "./utils") */
+    isRelative: boolean;
+    /** Original import text as it appears in source */
+    raw: string;
+}
+/** A single function/method call site extracted from source code */
+export interface CallInfo {
+    /** Full callee expression (e.g., "fs.readFile", "console.log", "print") */
+    callee: string;
+    /** Object/receiver part if method call (e.g., "fs", "console") */
+    object?: string;
+    /** Method/function name (e.g., "readFile", "log", "print") */
+    method: string;
+    /** Line number (0-based) */
+    line: number;
+    /** Number of arguments passed */
+    argCount: number;
+}
+/** Complexity metrics computed from the tree-sitter CST */
+export interface ComplexityMetrics {
+    /** McCabe cyclomatic complexity */
+    cyclomaticComplexity: number;
+    /** Cognitive complexity (SonarSource-style) */
+    cognitiveComplexity: number;
+    /** Maximum nesting depth of control structures */
+    maxNestingDepth: number;
+    /** Lines of code (excluding blank lines and comments) */
+    linesOfCode: number;
+    /** Number of parameters (for functions/methods) */
+    parameterCount?: number;
+}
+/** A symbol (variable, function, class, etc.) defined in a CodeUnit */
+export interface SymbolDef {
+    /** Symbol name */
+    name: string;
+    /** What kind of symbol */
+    kind: 'variable' | 'function' | 'class' | 'method' | 'parameter' | 'type' | 'interface' | 'enum';
+    /** Line number (0-based) */
+    line: number;
+    /** Whether the symbol is exported/public */
+    exported: boolean;
+}
+/** A reference to a symbol that is used but not defined in this CodeUnit */
+export interface SymbolRef {
+    /** Referenced symbol name */
+    name: string;
+    /** Line number (0-based) */
+    line: number;
+    /** Whether the reference has been resolved to a definition */
+    resolved: boolean;
+}
+/**
+ * CodeUnit — the universal intermediate representation.
+ *
+ * All V4 detectors operate on CodeUnits, never on raw CST nodes.
+ * Each CodeUnit represents a logical unit of code: a file, class,
+ * function, method, or block.
+ *
+ * CodeUnits form a tree: a file-level CodeUnit contains class and
+ * function children, classes contain method children, etc.
+ */
+export interface CodeUnit {
+    /** Unique ID within the scan (e.g., "file:src/app.ts", "func:src/app.ts:main") */
+    id: string;
+    /** Source file path (relative to project root) */
+    file: string;
+    /** Programming language */
+    language: SupportedLanguage;
+    /** Structural kind of this unit */
+    kind: CodeUnitKind;
+    /** Source location within the file */
+    location: SourceLocation;
+    /** Raw source text of this unit */
+    source: string;
+    /** Imports in this file (populated for file-level units) */
+    imports: ImportInfo[];
+    /** Function/method calls made within this unit */
+    calls: CallInfo[];
+    /** Complexity metrics for this unit */
+    complexity: ComplexityMetrics;
+    /** Symbols defined in this unit */
+    definitions: SymbolDef[];
+    /** Symbols referenced but not defined here */
+    references: SymbolRef[];
+    /** Parent unit ID (e.g., method's parent is a class) */
+    parentId?: string;
+    /** Child unit IDs */
+    childIds: string[];
+}
+/** Create a ComplexityMetrics object with all zeroes */
+export declare function emptyComplexity(): ComplexityMetrics;
+/** Create a CodeUnit with sensible defaults (caller overrides what's needed) */
+export declare function createCodeUnit(partial: Partial<CodeUnit> & Pick<CodeUnit, 'id' | 'file' | 'language' | 'kind' | 'location' | 'source'>): CodeUnit;
+//# sourceMappingURL=types.d.ts.map

package/dist/ir/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/ir/types.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAIH;;;;GAIG;AACH,MAAM,MAAM,iBAAiB,GACzB,YAAY,GACZ,YAAY,GACZ,QAAQ,GACR,MAAM,GACN,IAAI,GACJ,QAAQ,CAAC;AAIb,wCAAwC;AACxC,MAAM,MAAM,YAAY,GACpB,MAAM,GACN,OAAO,GACP,UAAU,GACV,QAAQ,GACR,OAAO,GACP,QAAQ,CAAC;AAIb,0DAA0D;AAC1D,MAAM,WAAW,cAAc;IAC7B,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,MAAM,CAAC;IACpB,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;CACnB;AAID,6DAA6D;AAC7D,MAAM,WAAW,UAAU;IACzB,iFAAiF;IACjF,MAAM,EAAE,MAAM,CAAC;IACf,oEAAoE;IACpE,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,0CAA0C;IAC1C,IAAI,EAAE,MAAM,CAAC;IACb,0DAA0D;IAC1D,UAAU,EAAE,OAAO,CAAC;IACpB,mDAAmD;IACnD,GAAG,EAAE,MAAM,CAAC;CACb;AAID,oEAAoE;AACpE,MAAM,WAAW,QAAQ;IACvB,2EAA2E;IAC3E,MAAM,EAAE,MAAM,CAAC;IACf,kEAAkE;IAClE,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,8DAA8D;IAC9D,MAAM,EAAE,MAAM,CAAC;IACf,4BAA4B;IAC5B,IAAI,EAAE,MAAM,CAAC;IACb,iCAAiC;IACjC,QAAQ,EAAE,MAAM,CAAC;CAClB;AAID,2DAA2D;AAC3D,MAAM,WAAW,iBAAiB;IAChC,mCAAmC;IACnC,oBAAoB,EAAE,MAAM,CAAC;IAC7B,+CAA+C;IAC/C,mBAAmB,EAAE,MAAM,CAAC;IAC5B,kDAAkD;IAClD,eAAe,EAAE,MAAM,CAAC;IACxB,yDAAyD;IACzD,WAAW,EAAE,MAAM,CAAC;IACpB,mDAAmD;IACnD,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB;AAID,uEAAuE;AACvE,MAAM,WAAW,SAAS;IACxB,kBAAkB;IAClB,IAAI,EAAE,MAAM,CAAC;IACb,0BAA0B;IAC1B,IAAI,EACA,UAAU,GACV,UAAU,GACV,OAAO,GACP,QAAQ,GACR,WAAW,GACX,MAAM,GACN,WAAW,GACX,MAAM,CAAC;IACX,4BAA4B;IAC5B,IAAI,EAAE,MAAM,CAAC;IACb,4CAA4C;IAC5C,QAAQ,EAAE,OAAO,CAAC;CACnB;AAID,4EAA4E;AAC5E,MAAM,WAAW,SAAS;IACxB,6BAA6B;IAC7B,IAAI,EAAE,MAAM,CAAC;IACb,4BAA4B;IAC5B,IAAI,EAAE,MAAM,CAAC;IACb,8DAA8D;IAC9D,QAAQ,EAAE,OAAO,CAAC;CACnB;AAID;;;;;;;;;GASG;AACH,MAAM,WAAW,QAAQ;IACvB,kFAAkF;IAClF,EAAE,EAAE,MAAM,CAAC;IAEX,kDAAkD;IAClD,IAAI,EAAE,MAAM,CAAC;IAEb,2BAA2B;IAC3B,QAAQ,EAAE,iBAAiB,CAAC;IAE5B,mCAAmC;IACnC,IAAI,EAAE,YAAY,CAAC;IAEnB,sCAAsC;IACtC,QAAQ,EAAE,cAAc,CAAC;IAEzB,mCAAmC;IACnC,MAAM,EAAE,MAAM,CAAC;IAEf,4DAA4D;IAC5D,OAAO,EAAE,UAAU,EAAE,CAAC;IAEtB,kDAAkD;IAClD,KAAK,EAAE,QAAQ,EAAE,CAAC;IAElB,uCAAuC;IACvC,UAAU,EAAE,iBAAiB,CAAC;IAE9B,mCAAmC;IACnC,WAAW,EAAE,SAAS,EAAE,CAAC;IAEzB,8CAA8C;IAC9C,UAAU,EAAE,SAAS,EAAE,CAAC;IAExB,wDAAwD;IACxD,QAAQ,CAAC,EAAE,MAAM,CAAC;IAElB,qBAAqB;IACrB,QAAQ,EAAE,MAAM,EAAE,CAAC;CACpB;AAID,wDAAwD;AACxD,wBAAgB,eAAe,IAAI,iBAAiB,CAOnD;AAID,gFAAgF;AAChF,wBAAgB,cAAc,CAAC,OAAO,EAAE,OAAO,CAAC,QAAQ,CAAC,GAAG,IAAI,CAAC,QAAQ,EAAE,IAAI,GAAG,MAAM,GAAG,UAAU,GAAG,MAAM,GAAG,UAAU,GAAG,QAAQ,CAAC,GAAG,QAAQ,CAUjJ"}

package/dist/ir/types.js

@@ -0,0 +1,33 @@
+/**
+ * Open Code Review V4 — Unified Intermediate Representation (IR)
+ *
+ * CodeUnit is the universal intermediate representation that all V4 detectors
+ * operate on. Detectors never access raw CST nodes directly — they work
+ * exclusively with CodeUnits.
+ *
+ * @since 0.4.0
+ */
+// ─── Helper: Create empty complexity metrics ───────────────────────
+/** Create a ComplexityMetrics object with all zeroes */
+export function emptyComplexity() {
+    return {
+        cyclomaticComplexity: 0,
+        cognitiveComplexity: 0,
+        maxNestingDepth: 0,
+        linesOfCode: 0,
+    };
+}
+// ─── Helper: Create a CodeUnit with defaults ───────────────────────
+/** Create a CodeUnit with sensible defaults (caller overrides what's needed) */
+export function createCodeUnit(partial) {
+    return {
+        imports: [],
+        calls: [],
+        complexity: emptyComplexity(),
+        definitions: [],
+        references: [],
+        childIds: [],
+        ...partial,
+    };
+}
+//# sourceMappingURL=types.js.map

package/dist/ir/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/ir/types.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AA6KH,sEAAsE;AAEtE,wDAAwD;AACxD,MAAM,UAAU,eAAe;IAC7B,OAAO;QACL,oBAAoB,EAAE,CAAC;QACvB,mBAAmB,EAAE,CAAC;QACtB,eAAe,EAAE,CAAC;QAClB,WAAW,EAAE,CAAC;KACf,CAAC;AACJ,CAAC;AAED,sEAAsE;AAEtE,gFAAgF;AAChF,MAAM,UAAU,cAAc,CAAC,OAAwG;IACrI,OAAO;QACL,OAAO,EAAE,EAAE;QACX,KAAK,EAAE,EAAE;QACT,UAAU,EAAE,eAAe,EAAE;QAC7B,WAAW,EAAE,EAAE;QACf,UAAU,EAAE,EAAE;QACd,QAAQ,EAAE,EAAE;QACZ,GAAG,OAAO;KACX,CAAC;AACJ,CAAC"}

package/dist/languages/go/index.d.ts

@@ -0,0 +1,7 @@
+/**
+ * Go Language Adapter — Exports
+ *
+ * @since 0.3.0
+ */
+export { GoAdapter, GO_STDLIB_PACKAGES, GO_COMMON_MODULES } from './parser.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/languages/go/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/languages/go/index.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,SAAS,EAAE,kBAAkB,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC"}

package/dist/languages/go/index.js

@@ -0,0 +1,7 @@
+/**
+ * Go Language Adapter — Exports
+ *
+ * @since 0.3.0
+ */
+export { GoAdapter, GO_STDLIB_PACKAGES, GO_COMMON_MODULES } from './parser.js';
+//# sourceMappingURL=index.js.map

package/dist/languages/go/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/languages/go/index.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,SAAS,EAAE,kBAAkB,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC"}

package/dist/languages/go/parser.d.ts

@@ -0,0 +1,89 @@
+/**
+ * Go Language Adapter
+ *
+ * Regex-based parser for Go source code. No native AST dependencies needed.
+ *
+ * Supports:
+ * - Import extraction (single, grouped, aliased, standard lib, third-party)
+ * - Function/method call extraction
+ * - Complexity metrics (cyclomatic, cognitive, nesting via braces)
+ * - Deprecated API detection (via deprecated-apis-go.json)
+ * - Package verification (Go stdlib + common module whitelists)
+ *
+ * @since 0.3.0
+ */
+import type { SupportedLanguage } from '../../types.js';
+import type { LanguageAdapter, ASTNode, ImportInfo, CallInfo, PackageVerifyResult, DeprecatedInfo, ComplexityMetrics } from '../types.js';
+/**
+ * Go standard library packages (Go 1.21+).
+ * Includes top-level packages and commonly used sub-packages.
+ */
+export declare const GO_STDLIB_PACKAGES: Set<string>;
+/**
+ * Well-known Go third-party modules from the Go ecosystem.
+ * Covers web frameworks, testing, logging, databases, cloud, etc.
+ */
+export declare const GO_COMMON_MODULES: Set<string>;
+/**
+ * GoAdapter — LanguageAdapter implementation for Go.
+ *
+ * Covers: .go
+ *
+ * Uses regex-based parsing. Go's explicit import syntax and brace-delimited
+ * blocks are well-suited for regex extraction.
+ */
+export declare class GoAdapter implements LanguageAdapter {
+    readonly id: SupportedLanguage;
+    readonly extensions: string[];
+    /**
+     * Parse Go source code.
+     * Returns a lightweight AST-like structure with lines and source.
+     */
+    parse(source: string, _filePath: string): Promise<ASTNode>;
+    /**
+     * Extract import statements from Go source.
+     *
+     * Matches:
+     * - import "fmt"
+     * - import "os/exec"
+     * - import (
+     *     "fmt"
+     *     "os"
+     *   )
+     * - import alias "github.com/pkg/name"
+     * - import . "github.com/onsi/gomega"
+     * - import _ "github.com/lib/pq"
+     */
+    extractImports(source: string, _ast?: ASTNode): ImportInfo[];
+    /**
+     * Extract function/method calls from Go source.
+     *
+     * Matches patterns like:
+     * - fmt.Println(...)
+     * - http.Get(...)
+     * - json.Marshal(...)
+     * - localFunc(...)
+     * - obj.Method(...)
+     */
+    extractCalls(source: string, _ast?: ASTNode): CallInfo[];
+    /**
+     * Verify if a Go package exists.
+     *
+     * Checks against Go standard library and common third-party module whitelists.
+     * Full pkg.go.dev verification can be added in a later phase.
+     */
+    verifyPackage(name: string): Promise<PackageVerifyResult>;
+    /**
+     * Check if an API is deprecated.
+     * Searches the deprecated-apis-go.json database.
+     */
+    checkDeprecated(api: string): DeprecatedInfo | null;
+    /**
+     * Compute complexity metrics for Go source code.
+     *
+     * Uses brace-based nesting detection and regex matching for decision points.
+     * Go has unique constructs like `select`, `go`, and `defer`.
+     */
+    computeComplexity(source: string, _ast?: ASTNode): ComplexityMetrics;
+}
+//# sourceMappingURL=parser.d.ts.map

package/dist/languages/go/parser.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"parser.d.ts","sourceRoot":"","sources":["../../../src/languages/go/parser.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAGH,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,gBAAgB,CAAC;AACxD,OAAO,KAAK,EACV,eAAe,EACf,OAAO,EACP,UAAU,EACV,QAAQ,EACR,mBAAmB,EACnB,cAAc,EACd,iBAAiB,EAClB,MAAM,aAAa,CAAC;AAIrB;;;GAGG;AACH,eAAO,MAAM,kBAAkB,aAqD7B,CAAC;AAIH;;;GAGG;AACH,eAAO,MAAM,iBAAiB,aAgF5B,CAAC;AA0CH;;;;;;;GAOG;AACH,qBAAa,SAAU,YAAW,eAAe;IAC/C,QAAQ,CAAC,EAAE,EAAE,iBAAiB,CAAQ;IACtC,QAAQ,CAAC,UAAU,WAAW;IAE9B;;;OAGG;IACG,KAAK,CAAC,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAQhE;;;;;;;;;;;;;OAaG;IACH,cAAc,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,OAAO,GAAG,UAAU,EAAE;IAkF5D;;;;;;;;;OASG;IACH,YAAY,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,OAAO,GAAG,QAAQ,EAAE;IA0DxD;;;;;OAKG;IACG,aAAa,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,mBAAmB,CAAC;IAwD/D;;;OAGG;IACH,eAAe,CAAC,GAAG,EAAE,MAAM,GAAG,cAAc,GAAG,IAAI;IAenD;;;;;OAKG;IACH,iBAAiB,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,OAAO,GAAG,iBAAiB;CA0FrE"}