@saptools/service-flow 0.1.62 → 0.1.64

package/CHANGELOG.md

@@ -1,5 +1,10 @@
 # Changelog
 
+## 0.1.63
+
+- Stopped recording CAP runtime lifecycle activity on the `cds` facade (`bootstrap`, `loaded`, `connect`, `serving`, `served`, `listening`, and `shutdown`) and supported-receiver `on('error')` hooks as asynchronous domain-event facts or derived event edges, while preserving custom facade events, lifecycle-named service events, domain messaging events, error emissions, and synthetic event-registration symbols.
+- Made object-form `send({ method, ... })` calls with a dynamic method default to `POST` with bounded `dynamicMethodDefaulted` parser evidence instead of storing a property name or expression as the HTTP verb, without a schema, linker, trace-engine, or output-shape change.
+
 ## 0.1.62
 
 - Assigned every distinct Mermaid trace/graph node its own stable per-render identifier instead of truncating normalized endpoint strings to 60 characters, preventing nodes with long shared prefixes from collapsing into one.

package/dist/{chunk-BGD7UYJN.js → chunk-TBH33OYC.js}

@@ -1637,11 +1637,40 @@ function readExports(repoPath, filePath, seen, context) {
 
 // src/utils/redaction.ts
 var SENSITIVE = /authorization|cookie|token|secret|password|key|credential/i;
+var SENSITIVE_KEYWORD = /authorization|cookie|token|secret|password|key|credential/gi;
+function isWhitespace(value) {
+  return value !== void 0 && /\s/u.test(value);
+}
+function redactionSpan(text, start, keyword) {
+  let cursor = start + keyword.length;
+  while (isWhitespace(text[cursor])) cursor += 1;
+  if (text[cursor] !== ":" && text[cursor] !== "=") return void 0;
+  cursor += 1;
+  while (isWhitespace(text[cursor])) cursor += 1;
+  const candidateQuote = text[cursor];
+  const quote = candidateQuote === "'" || candidateQuote === '"' || candidateQuote === "`" ? candidateQuote : void 0;
+  if (quote !== void 0) cursor += 1;
+  const valueStart = cursor;
+  while (cursor < text.length && !/[,'"`}\s]/u.test(text[cursor] ?? "")) cursor += 1;
+  if (cursor === valueStart) return void 0;
+  if (quote !== void 0) {
+    if (text[cursor] !== quote) return void 0;
+    cursor += 1;
+  }
+  return { start, end: cursor, keyword };
+}
 function redactText(text) {
-  return text.replace(
-    /(authorization|cookie|token|secret|password|key|credential)\s*[:=]\s*(['"`]?)[^,'"`}\s]+\2/gi,
-    "$1: [REDACTED]"
-  );
+  let cursor = 0;
+  let output = "";
+  for (const match of text.matchAll(SENSITIVE_KEYWORD)) {
+    const start = match.index ?? 0;
+    if (start < cursor) continue;
+    const span = redactionSpan(text, start, match[0]);
+    if (span === void 0) continue;
+    output += text.slice(cursor, span.start) + `${span.keyword}: [REDACTED]`;
+    cursor = span.end;
+  }
+  return output + text.slice(cursor);
 }
 function redactValue(value) {
   if (Array.isArray(value)) return value.map(redactValue);
@@ -1665,6 +1694,31 @@ import ts5 from "typescript";
 import fs7 from "fs/promises";
 import path8 from "path";
 import ts4 from "typescript";
+
+// src/utils/001-placeholders.ts
+function scanPlaceholders(value) {
+  const input = value ?? "";
+  const spans = [];
+  let cursor = 0;
+  while (cursor < input.length) {
+    const start = input.indexOf("${", cursor);
+    if (start < 0) break;
+    const closingBrace = input.indexOf("}", start + 2);
+    if (closingBrace < 0) break;
+    spans.push({
+      start,
+      end: closingBrace + 1,
+      key: input.slice(start + 2, closingBrace)
+    });
+    cursor = closingBrace + 1;
+  }
+  return spans;
+}
+function extractPlaceholderKeys(value) {
+  return scanPlaceholders(value).map((span) => span.key.trim()).filter(Boolean);
+}
+
+// src/parsers/service-binding-parser-helpers.ts
 function lineOf3(sf, node) {
   return sf.getLineAndCharacterOfPosition(node.getStart(sf)).line + 1;
 }
@@ -1675,7 +1729,7 @@ function stringValue2(node) {
   return node.getText();
 }
 function placeholders(value) {
-  return [...(value ?? "").matchAll(/\$\{([^}]*)\}/g)].map((m) => (m[1] ?? "").trim()).filter(Boolean);
+  return extractPlaceholderKeys(value);
 }
 function connectFactFromCall(call) {
   const expr = call.expression;
@@ -3691,13 +3745,15 @@ function literalText(expr) {
   if (isStringLike(expr)) return expr.text;
   return void 0;
 }
-function objectPropertyText(object, key) {
-  const prop = object.properties.find(
-    (property) => ts10.isPropertyAssignment(property) && nameOfProperty(property.name) === key || ts10.isShorthandPropertyAssignment(property) && property.name.text === key
-  );
-  if (!prop) return void 0;
-  return ts10.isShorthandPropertyAssignment(prop) ? prop.name.text : prop.initializer.getText();
-}
+var CDS_LIFECYCLE_EVENTS = /* @__PURE__ */ new Set([
+  "bootstrap",
+  "loaded",
+  "connect",
+  "serving",
+  "served",
+  "listening",
+  "shutdown"
+]);
 function objectPropertyIsShorthand(object, key) {
   return object.properties.some((property) => ts10.isShorthandPropertyAssignment(property) && property.name.text === key);
 }
@@ -3980,7 +4036,10 @@ function classifyOutboundCallsInSource(source, filePath) {
         if (objectArg && ts10.isObjectLiteralExpression(objectArg)) {
           const receiver = receiverName(expr.expression);
           const queryExpression = propertyInitializer(objectArg, "query");
-          const method = stripQuotes(resolveExpression(propertyInitializer(objectArg, "method"), node, "literal").value ?? objectPropertyText(objectArg, "method") ?? "POST");
+          const methodExpression = propertyInitializer(objectArg, "method");
+          const methodResolution = resolveExpression(methodExpression, node, "literal");
+          const method = stripQuotes(methodResolution.value ?? "POST");
+          const dynamicMethodDefaulted = Boolean(methodExpression && methodResolution.value === void 0);
           const pathExpr = propertyInitializer(objectArg, "path") ?? propertyInitializer(objectArg, "event");
           const pathAnalysis = analyzeOperationPath(pathExpr, node, method);
           const op = pathExpr ? operationPathExpression(pathAnalysis) ?? pathExpr.getText(source) : void 0;
@@ -3992,7 +4051,7 @@ function classifyOutboundCallsInSource(source, filePath) {
           const isODataQueryRead = method.toUpperCase() === "GET" && ["entity_query", "entity_key_read", "entity_navigation_query"].includes(intent.kind);
           const queryEntity = queryExpression ? queryEntityFromAst(queryExpression, initializers) : isODataQueryRead ? intent.entitySegment : void 0;
           const unresolvedReason = queryExpression ? queryEntity ? void 0 : queryWarning(queryExpression.getText(source)) : pathExpr ? pathUnresolvedReason(pathAnalysis) : void 0;
-          add(node, { callType: queryExpression ? "remote_query" : entityCallType ?? (isODataQueryRead ? "remote_query" : "remote_action"), serviceVariableName: receiver, method, operationPathExpr, queryEntity, payloadSummary: summarizeExpression(objectArg.getText(source)), confidence: op || queryExpression ? 0.8 : 0.4, unresolvedReason }, { receiver, classifier: "service_client_send_object", operationPathExpression: shorthandPath ? op : void 0, rawPathExpression: pathAnalysis.rawExpression, literalPathSource: literalPathSource(pathAnalysis), odataPathIntent: operationPathExpr ? intent : void 0, pathAnalysis, staticPathCandidates: legacyPathCandidates(pathAnalysis), parserWarning: unresolvedReason });
+          add(node, { callType: queryExpression ? "remote_query" : entityCallType ?? (isODataQueryRead ? "remote_query" : "remote_action"), serviceVariableName: receiver, method, operationPathExpr, queryEntity, payloadSummary: summarizeExpression(objectArg.getText(source)), confidence: op || queryExpression ? 0.8 : 0.4, unresolvedReason }, { receiver, classifier: "service_client_send_object", operationPathExpression: shorthandPath ? op : void 0, rawPathExpression: pathAnalysis.rawExpression, literalPathSource: literalPathSource(pathAnalysis), odataPathIntent: operationPathExpr ? intent : void 0, pathAnalysis, staticPathCandidates: legacyPathCandidates(pathAnalysis), parserWarning: unresolvedReason, ...dynamicMethodDefaulted ? { dynamicMethodDefaulted: true } : {} });
         } else {
           const receiver = receiverName(expr.expression);
           const rootReceiver = rootReceiverName(expr.expression);
@@ -4034,7 +4093,10 @@ function classifyOutboundCallsInSource(source, filePath) {
         const rootReceiver = rootReceiverName(expr.expression);
         if (isSupportedEventReceiver(receiver, rootReceiver, serviceVariables)) {
           const eventName = literalText(node.arguments[0]);
-          if (eventName) add(node, { callType: expr.name.text === "on" ? "async_subscribe" : "async_emit", serviceVariableName: rootReceiver ?? receiver, eventNameExpr: eventName }, { receiver, rootReceiver, classifier: expr.name.text === "on" ? "cap_service_event_subscription" : "cap_service_event_emit", receiverClassification: "cap_evidence" });
+          const effectiveReceiver = rootReceiver ?? receiver;
+          const lifecycleHook = effectiveReceiver === "cds" && CDS_LIFECYCLE_EVENTS.has(eventName ?? "");
+          const errorHook = expr.name.text === "on" && eventName === "error";
+          if (eventName && !lifecycleHook && !errorHook) add(node, { callType: expr.name.text === "on" ? "async_subscribe" : "async_emit", serviceVariableName: effectiveReceiver, eventNameExpr: eventName }, { receiver, rootReceiver, classifier: expr.name.text === "on" ? "cap_service_event_subscription" : "cap_service_event_emit", receiverClassification: "cap_evidence" });
         }
       } else {
         const external = externalHttpEvidence(node, source);
@@ -4144,12 +4206,11 @@ function serviceOperationCall(node, aliases) {
 }
 
 // src/linker/dynamic-edge-resolver.ts
-var PLACEHOLDER = /\$\{([^}]*)\}/g;
 function applyVariables(template, vars) {
   return substituteVariables(template, vars).effective;
 }
 function extractPlaceholders(template) {
-  return [...(template ?? "").matchAll(PLACEHOLDER)].map((m) => (m[1] ?? "").trim()).filter(Boolean);
+  return extractPlaceholderKeys(template);
 }
 function matchRuntimeTemplate(template, concrete) {
   if (!template || !concrete) return void 0;
@@ -4172,10 +4233,15 @@ function substituteVariables(template, vars) {
   const placeholders3 = [...new Set(extractPlaceholders(template))];
   const supplied = placeholders3.filter((key) => Object.hasOwn(vars, key));
   const missing = placeholders3.filter((key) => !Object.hasOwn(vars, key));
-  const effective = template.replace(PLACEHOLDER, (_m, key) => {
-    const trimmed = key.trim();
-    return Object.hasOwn(vars, trimmed) ? vars[trimmed] ?? "" : `\${${trimmed}}`;
-  });
+  let lastIndex = 0;
+  let effective = "";
+  for (const span of scanPlaceholders(template)) {
+    const trimmed = span.key.trim();
+    const replacement = Object.hasOwn(vars, trimmed) ? vars[trimmed] ?? "" : `\${${trimmed}}`;
+    effective += template.slice(lastIndex, span.start) + replacement;
+    lastIndex = span.end;
+  }
+  effective += template.slice(lastIndex);
   return {
     original: template,
     effective,
@@ -4188,10 +4254,10 @@ function substituteVariables(template, vars) {
 function runtimeTemplatePattern(template) {
   let pattern = "";
   let lastIndex = 0;
-  for (const match of template.matchAll(PLACEHOLDER)) {
-    pattern += escapeRegex(template.slice(lastIndex, match.index));
+  for (const span of scanPlaceholders(template)) {
+    pattern += escapeRegex(template.slice(lastIndex, span.start));
     pattern += "([^/]+?)";
-    lastIndex = (match.index ?? 0) + match[0].length;
+    lastIndex = span.end;
   }
   return `${pattern}${escapeRegex(template.slice(lastIndex))}`;
 }
@@ -5179,7 +5245,7 @@ function operationMatches(candidate, operationPath) {
   return candidate.operationPath === names.path || candidate.operationPath === names.simplePath || candidate.operationName === names.name || candidate.operationName === names.simpleName;
 }
 function resolveOperation(db, signals, workspaceId) {
-  const missing = [signals.servicePath, signals.alias, signals.destination, signals.operationPath].flatMap((value) => [...(value ?? "").matchAll(/\$\{([^}]*)\}/g)].map((match) => (match[1] ?? "").trim())).filter(Boolean);
+  const missing = [signals.servicePath, signals.alias, signals.destination, signals.operationPath].flatMap(extractPlaceholderKeys);
   if (missing.length > 0)
     return {
       status: "dynamic",
@@ -5525,7 +5591,7 @@ function compactCandidateScores(candidates2) {
   }));
 }
 function placeholderKeys(values) {
-  const keys = values.flatMap((value) => [...(value ?? "").matchAll(/\$\{([^}]*)\}/g)].map((match) => (match[1] ?? "").trim()).filter(Boolean));
+  const keys = values.flatMap(extractPlaceholderKeys);
   return [...new Set(keys)].sort();
 }
 function parseJson(value) {
@@ -5803,7 +5869,7 @@ function insertCallEdge(db, workspaceId, call, vars, generation) {
   }
   if (isRemoteEntityCall) {
     const target = buildRemoteQueryTarget({ queryEntity: intent.entitySegment ?? call.query_entity, servicePath, serviceAlias: call.alias, serviceAliasExpr: call.aliasExpr, destination: destination ? applyVariables(destination, vars) : void 0, isDynamic, parserWarning: evidence.parserWarning });
-    const entityKind = callType.replace("remote_entity_", "remote_entity_");
+    const entityKind = callType;
     db.prepare("INSERT INTO graph_edges(workspace_id,edge_type,status,from_kind,from_id,to_kind,to_id,confidence,evidence_json,is_dynamic,generation) VALUES(?,?,?,?,?,?,?,?,?,?,?)").run(workspaceId, "HANDLER_ACCESSES_REMOTE_ENTITY", "terminal", "call", String(call.id), target.toKind, target.toId, Number(call.confidence ?? 0.5), JSON.stringify({ ...evidence, ...target.evidence, remoteEntityAccess: entityKind }), 0, generation);
     return { status: "terminal", callType };
   }
@@ -6507,17 +6573,18 @@ function proposalForIdentity(candidate, template, identity, sourceKind, npmPacka
   }];
 }
 function matchIdentityTemplate(template, identity, npmPackage) {
-  const matches2 = [...template.matchAll(/\$\{([^}]*)\}/g)];
-  if (matches2.length !== 1 || !matches2[0]?.[1]) return void 0;
-  const placeholder = matches2[0][0];
-  const sentinel = "dynamicplaceholdertoken";
+  const matches2 = scanPlaceholders(template);
+  const matchSpan = matches2[0];
+  if (matches2.length !== 1 || !matchSpan?.key) return void 0;
+  const placeholder = template.slice(matchSpan.start, matchSpan.end);
+  const sentinel = "dynamic_placeholder_token";
   const normalizedTemplate = normalizeIdentity(template.replace(placeholder, sentinel));
   const [prefix, suffix, extra] = normalizedTemplate.split(sentinel);
   if (!prefix || !suffix || extra !== void 0) return void 0;
   const normalizedIdentity = normalizeIdentity(identity, npmPackage);
   const match = new RegExp(`^${escapeRegex2(prefix)}([a-z0-9]+)${escapeRegex2(suffix)}$`).exec(normalizedIdentity);
   if (!match?.[1]) return void 0;
-  return { key: matches2[0][1].trim(), value: match[1], normalizedIdentity };
+  return { key: matchSpan.key.trim(), value: match[1], normalizedIdentity };
 }
 function competingIdentityKeys(proposals) {
   const owners = /* @__PURE__ */ new Map();
@@ -6622,7 +6689,7 @@ function routeImplementationEvidence(db, operationId) {
 }
 function normalizeIdentity(value, npmPackage = false) {
   const unscoped = npmPackage && /^@[^/]+\/[^/]+$/.test(value) ? value.slice(value.indexOf("/") + 1) : value;
-  return unscoped.replace(/([a-z0-9])([A-Z])/g, "$1_$2").toLowerCase().replace(/[^a-z0-9]+/g, "_").replace(/^_+|_+$/g, "");
+  return unscoped.replace(/([a-z0-9])([A-Z])/g, "$1_$2").toLowerCase().replace(/[^a-z0-9]+/g, "_").replace(/^_+|(?<!_)_+$/g, "");
 }
 function stringValue7(value) {
   return typeof value === "string" ? value : void 0;
@@ -8959,4 +9026,4 @@ export {
   selectorRepoAmbiguousDiagnostic,
   trace
 };
-//# sourceMappingURL=chunk-BGD7UYJN.js.map
+//# sourceMappingURL=chunk-TBH33OYC.js.map