@quolu/lattice 0.1.0

package/sensor/dist/extraction/razor-extractor.js

@@ -0,0 +1,285 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.RazorExtractor = void 0;
+const tree_sitter_helpers_1 = require("./tree-sitter-helpers");
+const tree_sitter_1 = require("./tree-sitter");
+const grammars_1 = require("./grammars");
+/**
+ * RazorExtractor — extracts code relationships from ASP.NET Razor (`.cshtml`)
+ * and Blazor (`.razor`) markup.
+ *
+ * Markup-driven code-behind, view-models, components, and DTOs are referenced
+ * only from markup the engine otherwise doesn't parse, so they look like nothing
+ * depends on them. This extractor links the markup → the C# types it names:
+ *
+ *  - `@model Foo` / `@inherits Bar<Foo>`  → the view-model / base type (.cshtml + .razor)
+ *  - `@inject IService svc`               → the injected service type
+ *  - `@typeof(MainLayout)`                → the referenced type
+ *  - `<MyComponent .../>` (Blazor only)   → the component class (.razor or `.cs : ComponentBase`)
+ *  - `<Grid TItem="CatalogItem">`         → the generic type argument
+ *
+ * Risk mitigations (see docs/design/template-markup-parser.md):
+ *  - Only PascalCase (`[A-Z]`-initial) tags are treated as components — HTML
+ *    elements are lowercase, so they never match. Known Blazor framework
+ *    components are skipped (they aren't in-repo, so a ref would just dangle).
+ *  - Exactly ONE `component` node per file; component tags become `references`
+ *    EDGES, never nodes — no per-tag node explosion.
+ *  - Emitted refs are ordinary by-name `references` resolved by the name-matcher;
+ *    `razor` shares the `dotnet` language family with `csharp` (name-matcher.ts)
+ *    so the cross-family gate doesn't drop them.
+ *  - `.cshtml`/`.razor` are registered in grammars.ts so they're indexed.
+ *
+ * Out of scope (data-flow / low-value): `asp-for`/`th:field` property-string
+ * bindings; the C# inside `@code { }` / `@{ }` blocks (noisy regex on embedded C#).
+ */
+/**
+ * Blazor framework-provided components — invoked by the runtime, not defined
+ * in-repo, so a reference to them would never resolve. Skip to avoid dangling refs.
+ */
+const BLAZOR_BUILTIN_COMPONENTS = new Set([
+    'Router', 'Found', 'NotFound', 'RouteView', 'AuthorizeRouteView', 'LayoutView',
+    'CascadingValue', 'CascadingAuthenticationState', 'AuthorizeView', 'Authorized',
+    'NotAuthorized', 'Authorizing', 'EditForm', 'DataAnnotationsValidator',
+    'ValidationSummary', 'ValidationMessage', 'InputText', 'InputNumber',
+    'InputCheckbox', 'InputSelect', 'InputDate', 'InputTextArea', 'InputRadio',
+    'InputRadioGroup', 'InputFile', 'PageTitle', 'HeadContent', 'HeadOutlet',
+    'Virtualize', 'DynamicComponent', 'ErrorBoundary', 'SectionContent',
+    'SectionOutlet', 'FocusOnNavigate', 'NavLink', 'Microsoft',
+]);
+class RazorExtractor {
+    filePath;
+    source;
+    nodes = [];
+    edges = [];
+    unresolvedReferences = [];
+    errors = [];
+    constructor(filePath, source) {
+        this.filePath = filePath;
+        this.source = source;
+    }
+    extract() {
+        const startTime = Date.now();
+        try {
+            const componentId = this.createComponentNode().id;
+            this.extractDirectives(componentId);
+            // Blazor component tags only — `.cshtml` uses HTML + tag helpers, not
+            // PascalCase component elements.
+            if (this.filePath.toLowerCase().endsWith('.razor')) {
+                this.extractComponentTags(componentId);
+            }
+            // Delegate the C# in `@code { }` / `@functions { }` / `@{ }` blocks to the
+            // C# tree-sitter extractor (the Blazor analog of Svelte's <script> block) —
+            // this is where component logic uses services/DTOs, so it covers the types
+            // referenced only from component code.
+            this.processCodeBlocks(componentId);
+        }
+        catch (error) {
+            this.errors.push({
+                message: `Razor extraction error: ${error instanceof Error ? error.message : String(error)}`,
+                severity: 'error',
+                code: 'parse_error',
+            });
+        }
+        return {
+            nodes: this.nodes,
+            edges: this.edges,
+            unresolvedReferences: this.unresolvedReferences,
+            errors: this.errors,
+            durationMs: Date.now() - startTime,
+        };
+    }
+    createComponentNode() {
+        const lines = this.source.split('\n');
+        const fileName = this.filePath.split(/[/\\]/).pop() || this.filePath;
+        const componentName = fileName.replace(/\.(razor|cshtml)$/i, '');
+        const node = {
+            id: (0, tree_sitter_helpers_1.generateNodeId)(this.filePath, 'component', componentName, 1),
+            kind: 'component',
+            name: componentName,
+            qualifiedName: `${this.filePath}::${componentName}`,
+            filePath: this.filePath,
+            language: 'razor',
+            startLine: 1,
+            endLine: lines.length,
+            startColumn: 0,
+            endColumn: lines[lines.length - 1]?.length || 0,
+            isExported: true,
+            updatedAt: Date.now(),
+        };
+        this.nodes.push(node);
+        return node;
+    }
+    /** Last `.`-segment (`App.ViewModels.RegisterModel` → `RegisterModel`). */
+    lastSegment(s) {
+        const i = s.lastIndexOf('.');
+        return i >= 0 ? s.slice(i + 1) : s;
+    }
+    /**
+     * Split a type expression into the capitalized type names it contains — base
+     * type plus any generic arguments (`Bar<Foo, Baz>` → `Bar`, `Foo`, `Baz`),
+     * each reduced to its last namespace segment. Lowercase/keyword tokens drop out.
+     */
+    typeNames(expr) {
+        const out = [];
+        for (const raw of expr.split(/[<>,\s]+/)) {
+            const seg = this.lastSegment(raw.trim());
+            if (/^[A-Z][A-Za-z0-9_]*$/.test(seg))
+                out.push(seg);
+        }
+        return out;
+    }
+    pushRef(componentId, name, line, column) {
+        this.unresolvedReferences.push({
+            fromNodeId: componentId,
+            referenceName: name,
+            referenceKind: 'references',
+            line,
+            column,
+            filePath: this.filePath,
+            language: 'razor',
+        });
+    }
+    extractDirectives(componentId) {
+        const lines = this.source.split('\n');
+        for (let i = 0; i < lines.length; i++) {
+            const line = lines[i];
+            // `@model Foo` / `@inherits Bar<Foo>` — directive followed by a type.
+            const dir = line.match(/^\s*@(?:model|inherits)\s+([A-Za-z_][\w.]*(?:\s*<[^>]+>)?)/);
+            if (dir)
+                for (const t of this.typeNames(dir[1]))
+                    this.pushRef(componentId, t, i + 1, 0);
+            // `@inject IService name` — the type is the first token, a name follows.
+            const inj = line.match(/^\s*@inject\s+([A-Za-z_][\w.]*(?:\s*<[^>]+>)?)\s+[A-Za-z_]/);
+            if (inj)
+                for (const t of this.typeNames(inj[1]))
+                    this.pushRef(componentId, t, i + 1, 0);
+            // `@typeof(X)` anywhere on the line.
+            for (const m of line.matchAll(/@typeof\(\s*([A-Za-z_][\w.]*)\s*\)/g)) {
+                const seg = this.lastSegment(m[1]);
+                if (/^[A-Z]/.test(seg))
+                    this.pushRef(componentId, seg, i + 1, m.index ?? 0);
+            }
+        }
+    }
+    extractComponentTags(componentId) {
+        const lines = this.source.split('\n');
+        // PascalCase opening / self-closing tags. Closing tags (`</Foo>`) start with
+        // `</` and are skipped. HTML elements are lowercase → never match.
+        const tagRe = /<([A-Z][A-Za-z0-9_]*)\b([^>]*)>/g;
+        for (let i = 0; i < lines.length; i++) {
+            const line = lines[i];
+            let m;
+            while ((m = tagRe.exec(line)) !== null) {
+                const name = m[1];
+                if (BLAZOR_BUILTIN_COMPONENTS.has(name))
+                    continue;
+                this.pushRef(componentId, name, i + 1, m.index + 1);
+                // Generic component type arg: `<Grid TItem="CatalogItem">`.
+                for (const t of (m[2] || '').matchAll(/\bT[A-Za-z]*\s*=\s*"([A-Za-z_][\w.]*)"/g)) {
+                    const seg = this.lastSegment(t[1]);
+                    if (/^[A-Z]/.test(seg))
+                        this.pushRef(componentId, seg, i + 1, 0);
+                }
+            }
+        }
+    }
+    /**
+     * Find the matching `}` for the `{` at `openIdx`, skipping string literals and
+     * comments so a brace inside `"{"` / `// }` doesn't throw off the count.
+     * Returns the index of the closing brace, or -1 if unbalanced.
+     */
+    matchBrace(src, openIdx) {
+        let depth = 0;
+        for (let i = openIdx; i < src.length; i++) {
+            const ch = src[i];
+            if (ch === '"' || ch === "'") {
+                const quote = ch;
+                i++;
+                while (i < src.length && src[i] !== quote) {
+                    if (src[i] === '\\')
+                        i++;
+                    i++;
+                }
+                continue;
+            }
+            if (ch === '/' && src[i + 1] === '/') {
+                while (i < src.length && src[i] !== '\n')
+                    i++;
+                continue;
+            }
+            if (ch === '/' && src[i + 1] === '*') {
+                i += 2;
+                while (i < src.length && !(src[i] === '*' && src[i + 1] === '/'))
+                    i++;
+                i++;
+                continue;
+            }
+            if (ch === '{')
+                depth++;
+            else if (ch === '}') {
+                depth--;
+                if (depth === 0)
+                    return i;
+            }
+        }
+        return -1;
+    }
+    /** `@code { … }` / `@functions { … }` (Blazor) and `@{ … }` (Razor) C# blocks. */
+    extractCodeBlocks() {
+        const blocks = [];
+        const re = /@(?:code|functions)\b\s*\{|@\{/g;
+        let m;
+        while ((m = re.exec(this.source)) !== null) {
+            const openIdx = this.source.indexOf('{', m.index);
+            if (openIdx < 0)
+                continue;
+            const close = this.matchBrace(this.source, openIdx);
+            if (close < 0)
+                continue;
+            const content = this.source.slice(openIdx + 1, close);
+            // newlines before the content's first char → 0-indexed line of content start
+            const lineOffset = (this.source.slice(0, openIdx + 1).match(/\n/g) || []).length;
+            blocks.push({ content, lineOffset });
+            re.lastIndex = close;
+        }
+        return blocks;
+    }
+    /**
+     * Delegate each `@code`/`@functions`/`@{` block's C# to the tree-sitter C#
+     * extractor and attribute the block's external references (service/DTO calls,
+     * `new X()`, type uses) to the component. The block is wrapped in a synthetic
+     * class so tree-sitter parses the component's fields/methods in a class context
+     * (a Blazor `@code` body compiles into the component's partial class). We keep
+     * only the dependency references — coverage just needs the edges to external
+     * types, not per-member nodes. Degrades gracefully if the C# grammar isn't loaded.
+     */
+    processCodeBlocks(componentId) {
+        if (!(0, grammars_1.isLanguageSupported)('csharp'))
+            return;
+        for (const block of this.extractCodeBlocks()) {
+            if (!block.content.trim())
+                continue;
+            let result;
+            try {
+                result = new tree_sitter_1.TreeSitterExtractor(this.filePath, `class __RazorCode__ {\n${block.content}\n}`, 'csharp').extract();
+            }
+            catch {
+                continue; // grammar not loaded / parse failure — skip this block
+            }
+            // The synthetic wrapper adds one line before the block content; map ref
+            // lines back to the .razor file (display only — coverage is line-agnostic).
+            for (const ref of result.unresolvedReferences) {
+                this.unresolvedReferences.push({
+                    ...ref,
+                    fromNodeId: componentId,
+                    line: ref.line + block.lineOffset - 1,
+                    column: ref.column,
+                    filePath: this.filePath,
+                    language: 'razor',
+                });
+            }
+        }
+    }
+}
+exports.RazorExtractor = RazorExtractor;
+//# sourceMappingURL=razor-extractor.js.map

package/sensor/dist/extraction/razor-extractor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"razor-extractor.js","sourceRoot":"","sources":["../../src/extraction/razor-extractor.ts"],"names":[],"mappings":";;;AACA,+DAAuD;AACvD,+CAAoD;AACpD,yCAAiD;AAEjD;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AAEH;;;GAGG;AACH,MAAM,yBAAyB,GAAG,IAAI,GAAG,CAAC;IACxC,QAAQ,EAAE,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,oBAAoB,EAAE,YAAY;IAC9E,gBAAgB,EAAE,8BAA8B,EAAE,eAAe,EAAE,YAAY;IAC/E,eAAe,EAAE,aAAa,EAAE,UAAU,EAAE,0BAA0B;IACtE,mBAAmB,EAAE,mBAAmB,EAAE,WAAW,EAAE,aAAa;IACpE,eAAe,EAAE,aAAa,EAAE,WAAW,EAAE,eAAe,EAAE,YAAY;IAC1E,iBAAiB,EAAE,WAAW,EAAE,WAAW,EAAE,aAAa,EAAE,YAAY;IACxE,YAAY,EAAE,kBAAkB,EAAE,eAAe,EAAE,gBAAgB;IACnE,eAAe,EAAE,iBAAiB,EAAE,SAAS,EAAE,WAAW;CAC3D,CAAC,CAAC;AAEH,MAAa,cAAc;IACjB,QAAQ,CAAS;IACjB,MAAM,CAAS;IACf,KAAK,GAAW,EAAE,CAAC;IACnB,KAAK,GAAW,EAAE,CAAC;IACnB,oBAAoB,GAA0B,EAAE,CAAC;IACjD,MAAM,GAAsB,EAAE,CAAC;IAEvC,YAAY,QAAgB,EAAE,MAAc;QAC1C,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC;QACzB,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;IACvB,CAAC;IAED,OAAO;QACL,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAC7B,IAAI,CAAC;YACH,MAAM,WAAW,GAAG,IAAI,CAAC,mBAAmB,EAAE,CAAC,EAAE,CAAC;YAClD,IAAI,CAAC,iBAAiB,CAAC,WAAW,CAAC,CAAC;YACpC,sEAAsE;YACtE,iCAAiC;YACjC,IAAI,IAAI,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;gBACnD,IAAI,CAAC,oBAAoB,CAAC,WAAW,CAAC,CAAC;YACzC,CAAC;YACD,2EAA2E;YAC3E,4EAA4E;YAC5E,2EAA2E;YAC3E,uCAAuC;YACvC,IAAI,CAAC,iBAAiB,CAAC,WAAW,CAAC,CAAC;QACtC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC;gBACf,OAAO,EAAE,2BAA2B,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE;gBAC5F,QAAQ,EAAE,OAAO;gBACjB,IAAI,EAAE,aAAa;aACpB,CAAC,CAAC;QACL,CAAC;QACD,OAAO;YACL,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,oBAAoB,EAAE,IAAI,CAAC,oBAAoB;YAC/C,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS;SACnC,CAAC;IACJ,CAAC;IAEO,mBAAmB;QACzB,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QACtC,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,GAAG,EAAE,IAAI,IAAI,CAAC,QAAQ,CAAC;QACrE,MAAM,aAAa,GAAG,QAAQ,CAAC,OAAO,CAAC,oBAAoB,EAAE,EAAE,CAAC,CAAC;QACjE,MAAM,IAAI,GAAS;YACjB,EAAE,EAAE,IAAA,oCAAc,EAAC,IAAI,CAAC,QAAQ,EAAE,WAAW,EAAE,aAAa,EAAE,CAAC,CAAC;YAChE,IAAI,EAAE,WAAW;YACjB,IAAI,EAAE,aAAa;YACnB,aAAa,EAAE,GAAG,IAAI,CAAC,QAAQ,KAAK,aAAa,EAAE;YACnD,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,QAAQ,EAAE,OAAO;YACjB,SAAS,EAAE,CAAC;YACZ,OAAO,EAAE,KAAK,CAAC,MAAM;YACrB,WAAW,EAAE,CAAC;YACd,SAAS,EAAE,KAAK,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,EAAE,MAAM,IAAI,CAAC;YAC/C,UAAU,EAAE,IAAI;YAChB,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;SACtB,CAAC;QACF,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACtB,OAAO,IAAI,CAAC;IACd,CAAC;IAED,2EAA2E;IACnE,WAAW,CAAC,CAAS;QAC3B,MAAM,CAAC,GAAG,CAAC,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;QAC7B,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACrC,CAAC;IAED;;;;OAIG;IACK,SAAS,CAAC,IAAY;QAC5B,MAAM,GAAG,GAAa,EAAE,CAAC;QACzB,KAAK,MAAM,GAAG,IAAI,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,EAAE,CAAC;YACzC,MAAM,GAAG,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC;YACzC,IAAI,sBAAsB,CAAC,IAAI,CAAC,GAAG,CAAC;gBAAE,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACtD,CAAC;QACD,OAAO,GAAG,CAAC;IACb,CAAC;IAEO,OAAO,CAAC,WAAmB,EAAE,IAAY,EAAE,IAAY,EAAE,MAAc;QAC7E,IAAI,CAAC,oBAAoB,CAAC,IAAI,CAAC;YAC7B,UAAU,EAAE,WAAW;YACvB,aAAa,EAAE,IAAI;YACnB,aAAa,EAAE,YAAY;YAC3B,IAAI;YACJ,MAAM;YACN,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,QAAQ,EAAE,OAAO;SAClB,CAAC,CAAC;IACL,CAAC;IAEO,iBAAiB,CAAC,WAAmB;QAC3C,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QACtC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YACtC,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAE,CAAC;YACvB,sEAAsE;YACtE,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,4DAA4D,CAAC,CAAC;YACrF,IAAI,GAAG;gBAAE,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAE,CAAC;oBAAE,IAAI,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC;YACzF,yEAAyE;YACzE,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,4DAA4D,CAAC,CAAC;YACrF,IAAI,GAAG;gBAAE,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAE,CAAC;oBAAE,IAAI,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC;YACzF,qCAAqC;YACrC,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,qCAAqC,CAAC,EAAE,CAAC;gBACrE,MAAM,GAAG,GAAG,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,CAAE,CAAC,CAAC;gBACpC,IAAI,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC;oBAAE,IAAI,CAAC,OAAO,CAAC,WAAW,EAAE,GAAG,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,CAAC;YAC9E,CAAC;QACH,CAAC;IACH,CAAC;IAEO,oBAAoB,CAAC,WAAmB;QAC9C,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QACtC,6EAA6E;QAC7E,mEAAmE;QACnE,MAAM,KAAK,GAAG,kCAAkC,CAAC;QACjD,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YACtC,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAE,CAAC;YACvB,IAAI,CAAyB,CAAC;YAC9B,OAAO,CAAC,CAAC,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;gBACvC,MAAM,IAAI,GAAG,CAAC,CAAC,CAAC,CAAE,CAAC;gBACnB,IAAI,yBAAyB,CAAC,GAAG,CAAC,IAAI,CAAC;oBAAE,SAAS;gBAClD,IAAI,CAAC,OAAO,CAAC,WAAW,EAAE,IAAI,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC;gBACpD,4DAA4D;gBAC5D,KAAK,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,QAAQ,CAAC,yCAAyC,CAAC,EAAE,CAAC;oBACjF,MAAM,GAAG,GAAG,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,CAAE,CAAC,CAAC;oBACpC,IAAI,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC;wBAAE,IAAI,CAAC,OAAO,CAAC,WAAW,EAAE,GAAG,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC;gBACnE,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;IAED;;;;OAIG;IACK,UAAU,CAAC,GAAW,EAAE,OAAe;QAC7C,IAAI,KAAK,GAAG,CAAC,CAAC;QACd,KAAK,IAAI,CAAC,GAAG,OAAO,EAAE,CAAC,GAAG,GAAG,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YAC1C,MAAM,EAAE,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC;YAClB,IAAI,EAAE,KAAK,GAAG,IAAI,EAAE,KAAK,GAAG,EAAE,CAAC;gBAC7B,MAAM,KAAK,GAAG,EAAE,CAAC;gBACjB,CAAC,EAAE,CAAC;gBACJ,OAAO,CAAC,GAAG,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC,CAAC,CAAC,KAAK,KAAK,EAAE,CAAC;oBAC1C,IAAI,GAAG,CAAC,CAAC,CAAC,KAAK,IAAI;wBAAE,CAAC,EAAE,CAAC;oBACzB,CAAC,EAAE,CAAC;gBACN,CAAC;gBACD,SAAS;YACX,CAAC;YACD,IAAI,EAAE,KAAK,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,GAAG,EAAE,CAAC;gBACrC,OAAO,CAAC,GAAG,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC,CAAC,CAAC,KAAK,IAAI;oBAAE,CAAC,EAAE,CAAC;gBAC9C,SAAS;YACX,CAAC;YACD,IAAI,EAAE,KAAK,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,GAAG,EAAE,CAAC;gBACrC,CAAC,IAAI,CAAC,CAAC;gBACP,OAAO,CAAC,GAAG,GAAG,CAAC,MAAM,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,GAAG,CAAC;oBAAE,CAAC,EAAE,CAAC;gBACtE,CAAC,EAAE,CAAC;gBACJ,SAAS;YACX,CAAC;YACD,IAAI,EAAE,KAAK,GAAG;gBAAE,KAAK,EAAE,CAAC;iBACnB,IAAI,EAAE,KAAK,GAAG,EAAE,CAAC;gBACpB,KAAK,EAAE,CAAC;gBACR,IAAI,KAAK,KAAK,CAAC;oBAAE,OAAO,CAAC,CAAC;YAC5B,CAAC;QACH,CAAC;QACD,OAAO,CAAC,CAAC,CAAC;IACZ,CAAC;IAED,kFAAkF;IAC1E,iBAAiB;QACvB,MAAM,MAAM,GAAmD,EAAE,CAAC;QAClE,MAAM,EAAE,GAAG,iCAAiC,CAAC;QAC7C,IAAI,CAAyB,CAAC;QAC9B,OAAO,CAAC,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;YAC3C,MAAM,OAAO,GAAG,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC;YAClD,IAAI,OAAO,GAAG,CAAC;gBAAE,SAAS;YAC1B,MAAM,KAAK,GAAG,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;YACpD,IAAI,KAAK,GAAG,CAAC;gBAAE,SAAS;YACxB,MAAM,OAAO,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,GAAG,CAAC,EAAE,KAAK,CAAC,CAAC;YACtD,6EAA6E;YAC7E,MAAM,UAAU,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,OAAO,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC;YACjF,MAAM,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,UAAU,EAAE,CAAC,CAAC;YACrC,EAAE,CAAC,SAAS,GAAG,KAAK,CAAC;QACvB,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;IAED;;;;;;;;OAQG;IACK,iBAAiB,CAAC,WAAmB;QAC3C,IAAI,CAAC,IAAA,8BAAmB,EAAC,QAAQ,CAAC;YAAE,OAAO;QAC3C,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,iBAAiB,EAAE,EAAE,CAAC;YAC7C,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE;gBAAE,SAAS;YACpC,IAAI,MAAwB,CAAC;YAC7B,IAAI,CAAC;gBACH,MAAM,GAAG,IAAI,iCAAmB,CAC9B,IAAI,CAAC,QAAQ,EACb,0BAA0B,KAAK,CAAC,OAAO,KAAK,EAC5C,QAAQ,CACT,CAAC,OAAO,EAAE,CAAC;YACd,CAAC;YAAC,MAAM,CAAC;gBACP,SAAS,CAAC,uDAAuD;YACnE,CAAC;YACD,wEAAwE;YACxE,4EAA4E;YAC5E,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,oBAAoB,EAAE,CAAC;gBAC9C,IAAI,CAAC,oBAAoB,CAAC,IAAI,CAAC;oBAC7B,GAAG,GAAG;oBACN,UAAU,EAAE,WAAW;oBACvB,IAAI,EAAE,GAAG,CAAC,IAAI,GAAG,KAAK,CAAC,UAAU,GAAG,CAAC;oBACrC,MAAM,EAAE,GAAG,CAAC,MAAM;oBAClB,QAAQ,EAAE,IAAI,CAAC,QAAQ;oBACvB,QAAQ,EAAE,OAAO;iBAClB,CAAC,CAAC;YACL,CAAC;QACH,CAAC;IACH,CAAC;CACF;AAtOD,wCAsOC"}

package/sensor/dist/extraction/spawn-invokes.d.ts

@@ -0,0 +1,101 @@
+/**
+ * JS/TS `child_process` process-spawn detection and target folding (ADR 0048,
+ * Lattice sensor correctness fix c/1 — first "call graph非可視の結合" index).
+ *
+ * `spawnSync(process.execPath, [BIN, ...args])` reaches `BIN` by starting a
+ * brand-new OS process, not by calling a JS function — no `calls` edge can
+ * ever represent it, so a spawn-driven test harness (the oracle shape:
+ * `tests/orchestrate/helpers.mjs` spawning `bin/orchestrate-run.mjs`) showed
+ * zero `affected` dependents even though changing the spawned file plainly
+ * breaks the test. This module detects the five `child_process` launch
+ * functions (`spawn`, `spawnSync`, `execFile`, `execFileSync`, `fork`) —
+ * `exec`/`execSync` (shell-string parsing) are OUT OF SCOPE, see
+ * `resolveChildProcessCallee`'s doc — and folds their target argument(s) to a
+ * project-relative path using the same constant-folding engine as dynamic
+ * `import()`/`require()` (dynamic-import.ts's `foldConstantExpr`).
+ *
+ * Detection REQUIRES the callee to be verified bound to `child_process` (a
+ * static `import`/aliased/namespace member, or a simple
+ * `const { spawnSync } = require('node:child_process')`) — a bare name match
+ * on a user-defined `spawn()` must NOT produce an edge (mirrors fix (a)'s
+ * no-name-match-fallback principle).
+ */
+import type { Node as SyntaxNode } from 'web-tree-sitter';
+/**
+ * Sentinel `referenceName` for a `fork(...)` call whose module argument could
+ * NOT be statically folded. Mirrors `DYNAMIC_IMPORT_UNRESOLVED_MARKER`
+ * (dynamic-import.ts): illegal as both a JS identifier and a file path
+ * (angle brackets, colon), so it can never coincidentally name-match a real
+ * file, and is pushed as a normal unresolved reference so it surfaces as
+ * `status='failed'` rather than being silently dropped. `fork`'s target is
+ * ALWAYS a JS module (unlike `spawn`/`exec*`, whose target is usually an
+ * external binary) — so an unfoldable `fork` argument stays visible, while
+ * an unfoldable `spawn`/`execFile*` argument is a silent skip (see
+ * `resolveInvokesTargets`'s case (iv) — spawn's target domain is mostly
+ * external commands, so "couldn't fold" carries no useful signal there).
+ */
+export declare const SPAWN_INVOKES_UNRESOLVED_MARKER = "<spawn:unresolved>";
+/** Per-file table of local names verified bound to `child_process`'s launch functions. */
+export interface ChildProcessBindings {
+    /** local identifier -> canonical child_process function name (`spawn`, `fork`, ...) */
+    readonly localFns: ReadonlyMap<string, string>;
+    /** local identifiers bound as a `child_process` namespace (`import * as cp from 'child_process'`) */
+    readonly namespaces: ReadonlySet<string>;
+}
+/**
+ * Scan the file's top-level (Program direct-child) statements for bindings of
+ * `child_process`'s spawn family. Two binding shapes, per spec:
+ *   - static `import` — named (`import { spawnSync } from 'child_process'`,
+ *     alias-aware), or namespace (`import * as cp from 'node:child_process'`,
+ *     later matched via `cp.spawnSync(...)`).
+ *   - simple CommonJS destructure — `const { spawnSync } = require('node:child_process')`
+ *     (module-level only; `let`/`var` excluded like dynamic-import.ts's
+ *     module-level-const fold, since a reassignable binding's declaration-site
+ *     value isn't necessarily the call-site value).
+ * A default import isn't a meaningful binding shape for this module (no
+ * useful default export) and is intentionally not recognized.
+ */
+export declare function collectChildProcessBindings(anyNodeInTree: SyntaxNode, source: string): ChildProcessBindings;
+/**
+ * Given a `call_expression` node, return the canonical `child_process`
+ * function name (`spawn`/`spawnSync`/`execFile`/`execFileSync`/`fork`) it
+ * invokes, or null when the callee isn't verified bound to one. Two callee
+ * shapes: a bare identifier bound via `localFns` (static named import or the
+ * `require` destructure), or a `<namespace>.<fn>` member access where
+ * `<namespace>` is a verified `import * as cp from 'child_process'` binding.
+ *
+ * `exec`/`execSync` are deliberately excluded — their single argument is a
+ * whole shell command line (`"git status && ls"`), which requires shell
+ * grammar parsing (quoting, pipes, `&&`, env vars) to extract a target file,
+ * not the argv-array shape this module folds. Out of scope for this fix.
+ */
+export declare function resolveChildProcessCallee(node: SyntaxNode, source: string, bindings: ChildProcessBindings): string | null;
+/** One candidate `invokes` target: a folded path (real or not — the resolver decides) or the fork sentinel. */
+export interface InvokesTarget {
+    readonly referenceName: string;
+}
+/**
+ * Fold `callNode`'s target argument(s) into zero or more `invokes` reference
+ * names, per `canonicalFn`:
+ *
+ *  - `fork(modulePath, args?, options?)`: fold `modulePath` (argv[0] only —
+ *    `fork`'s target is always a JS module, so it is ALWAYS pushed, using the
+ *    unresolved sentinel on a folding failure rather than staying silent).
+ *  - `spawn`/`spawnSync`/`execFile`/`execFileSync`(cmd, args?, options?):
+ *      (i)   `cmd` folds to a path — push it. The resolver's exact-file-path
+ *            match is the real filter: a project file resolves, an external
+ *            command (`git`) or arbitrary string simply never matches a file
+ *            node and silently stays unresolved (case iii from spec, "正しい
+ *            挙動" — no special-casing needed here).
+ *      (ii)  `cmd` is `process.execPath` (AST shape) or folds to the literal
+ *            string `'node'` — argv[0] is the current runtime, so the REAL
+ *            target is argv[1]'s array-literal elements. Each element is
+ *            folded independently; a `...spread` or an unfoldable element is
+ *            skipped WITHOUT abandoning the rest of the array.
+ *      (iv)  `cmd` doesn't fold at all — skip entirely (no ref pushed).
+ *            Unlike `fork`, spawn's target domain is mostly external
+ *            commands, so an unfoldable argv[0] carries no signal that
+ *            visibility would improve on.
+ */
+export declare function resolveInvokesTargets(canonicalFn: string, callNode: SyntaxNode, source: string, filePath: string): InvokesTarget[];
+//# sourceMappingURL=spawn-invokes.d.ts.map

package/sensor/dist/extraction/spawn-invokes.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"spawn-invokes.d.ts","sourceRoot":"","sources":["../../src/extraction/spawn-invokes.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AAEH,OAAO,KAAK,EAAE,IAAI,IAAI,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAK1D;;;;;;;;;;;;GAYG;AACH,eAAO,MAAM,+BAA+B,uBAAuB,CAAC;AAQpE,0FAA0F;AAC1F,MAAM,WAAW,oBAAoB;IACnC,uFAAuF;IACvF,QAAQ,CAAC,QAAQ,EAAE,WAAW,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC/C,qGAAqG;IACrG,QAAQ,CAAC,UAAU,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC;CAC1C;AAID;;;;;;;;;;;;GAYG;AACH,wBAAgB,2BAA2B,CAAC,aAAa,EAAE,UAAU,EAAE,MAAM,EAAE,MAAM,GAAG,oBAAoB,CA8E3G;AAsBD;;;;;;;;;;;;GAYG;AACH,wBAAgB,yBAAyB,CACvC,IAAI,EAAE,UAAU,EAChB,MAAM,EAAE,MAAM,EACd,QAAQ,EAAE,oBAAoB,GAC7B,MAAM,GAAG,IAAI,CAmBf;AA8BD,+GAA+G;AAC/G,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;CAChC;AAED;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,wBAAgB,qBAAqB,CACnC,WAAW,EAAE,MAAM,EACnB,QAAQ,EAAE,UAAU,EACpB,MAAM,EAAE,MAAM,EACd,QAAQ,EAAE,MAAM,GACf,aAAa,EAAE,CA6BjB"}