@saptools/service-flow 0.1.63 → 0.1.65

package/CHANGELOG.md

@@ -1,5 +1,11 @@
 # Changelog
 
+## 0.1.65
+
+- Captured event-subscription handler references from `.on('Event', handlerRef)` as resolvable symbol-call facts using the existing import-binding-aware machinery for relative imports, package imports, namespace members, same-file symbols, and static accessors.
+- Covered bare identifiers, `Class.member` references, and one level of single-argument wrapper-call unwrapping; inline callbacks, multi-argument wrappers, nested wrappers, and other unsupported expressions remain unrepresented and fail closed.
+- Kept the SQLite schema, event-registration and outbound-call facts, linkers, trace engine, renderers, and output shapes unchanged.
+
 ## 0.1.63
 
 - Stopped recording CAP runtime lifecycle activity on the `cds` facade (`bootstrap`, `loaded`, `connect`, `serving`, `served`, `listening`, and `shutdown`) and supported-receiver `on('error')` hooks as asynchronous domain-event facts or derived event edges, while preserving custom facade events, lifecycle-named service events, domain messaging events, error emissions, and synthetic event-registration symbols.

package/dist/{chunk-EGBTHN7J.js → chunk-OONNRIDL.js}

@@ -1637,11 +1637,40 @@ function readExports(repoPath, filePath, seen, context) {
 
 // src/utils/redaction.ts
 var SENSITIVE = /authorization|cookie|token|secret|password|key|credential/i;
+var SENSITIVE_KEYWORD = /authorization|cookie|token|secret|password|key|credential/gi;
+function isWhitespace(value) {
+  return value !== void 0 && /\s/u.test(value);
+}
+function redactionSpan(text, start, keyword) {
+  let cursor = start + keyword.length;
+  while (isWhitespace(text[cursor])) cursor += 1;
+  if (text[cursor] !== ":" && text[cursor] !== "=") return void 0;
+  cursor += 1;
+  while (isWhitespace(text[cursor])) cursor += 1;
+  const candidateQuote = text[cursor];
+  const quote = candidateQuote === "'" || candidateQuote === '"' || candidateQuote === "`" ? candidateQuote : void 0;
+  if (quote !== void 0) cursor += 1;
+  const valueStart = cursor;
+  while (cursor < text.length && !/[,'"`}\s]/u.test(text[cursor] ?? "")) cursor += 1;
+  if (cursor === valueStart) return void 0;
+  if (quote !== void 0) {
+    if (text[cursor] !== quote) return void 0;
+    cursor += 1;
+  }
+  return { start, end: cursor, keyword };
+}
 function redactText(text) {
-  return text.replace(
-    /(authorization|cookie|token|secret|password|key|credential)\s*[:=]\s*(['"`]?)[^,'"`}\s]+\2/gi,
-    "$1: [REDACTED]"
-  );
+  let cursor = 0;
+  let output = "";
+  for (const match of text.matchAll(SENSITIVE_KEYWORD)) {
+    const start = match.index ?? 0;
+    if (start < cursor) continue;
+    const span = redactionSpan(text, start, match[0]);
+    if (span === void 0) continue;
+    output += text.slice(cursor, span.start) + `${span.keyword}: [REDACTED]`;
+    cursor = span.end;
+  }
+  return output + text.slice(cursor);
 }
 function redactValue(value) {
   if (Array.isArray(value)) return value.map(redactValue);
@@ -1665,6 +1694,31 @@ import ts5 from "typescript";
 import fs7 from "fs/promises";
 import path8 from "path";
 import ts4 from "typescript";
+
+// src/utils/001-placeholders.ts
+function scanPlaceholders(value) {
+  const input = value ?? "";
+  const spans = [];
+  let cursor = 0;
+  while (cursor < input.length) {
+    const start = input.indexOf("${", cursor);
+    if (start < 0) break;
+    const closingBrace = input.indexOf("}", start + 2);
+    if (closingBrace < 0) break;
+    spans.push({
+      start,
+      end: closingBrace + 1,
+      key: input.slice(start + 2, closingBrace)
+    });
+    cursor = closingBrace + 1;
+  }
+  return spans;
+}
+function extractPlaceholderKeys(value) {
+  return scanPlaceholders(value).map((span) => span.key.trim()).filter(Boolean);
+}
+
+// src/parsers/service-binding-parser-helpers.ts
 function lineOf3(sf, node) {
   return sf.getLineAndCharacterOfPosition(node.getStart(sf)).line + 1;
 }
@@ -1675,7 +1729,7 @@ function stringValue2(node) {
   return node.getText();
 }
 function placeholders(value) {
-  return [...(value ?? "").matchAll(/\$\{([^}]*)\}/g)].map((m) => (m[1] ?? "").trim()).filter(Boolean);
+  return extractPlaceholderKeys(value);
 }
 function connectFactFromCall(call) {
   const expr = call.expression;
@@ -4152,12 +4206,11 @@ function serviceOperationCall(node, aliases) {
 }
 
 // src/linker/dynamic-edge-resolver.ts
-var PLACEHOLDER = /\$\{([^}]*)\}/g;
 function applyVariables(template, vars) {
   return substituteVariables(template, vars).effective;
 }
 function extractPlaceholders(template) {
-  return [...(template ?? "").matchAll(PLACEHOLDER)].map((m) => (m[1] ?? "").trim()).filter(Boolean);
+  return extractPlaceholderKeys(template);
 }
 function matchRuntimeTemplate(template, concrete) {
   if (!template || !concrete) return void 0;
@@ -4180,10 +4233,15 @@ function substituteVariables(template, vars) {
   const placeholders3 = [...new Set(extractPlaceholders(template))];
   const supplied = placeholders3.filter((key) => Object.hasOwn(vars, key));
   const missing = placeholders3.filter((key) => !Object.hasOwn(vars, key));
-  const effective = template.replace(PLACEHOLDER, (_m, key) => {
-    const trimmed = key.trim();
-    return Object.hasOwn(vars, trimmed) ? vars[trimmed] ?? "" : `\${${trimmed}}`;
-  });
+  let lastIndex = 0;
+  let effective = "";
+  for (const span of scanPlaceholders(template)) {
+    const trimmed = span.key.trim();
+    const replacement = Object.hasOwn(vars, trimmed) ? vars[trimmed] ?? "" : `\${${trimmed}}`;
+    effective += template.slice(lastIndex, span.start) + replacement;
+    lastIndex = span.end;
+  }
+  effective += template.slice(lastIndex);
   return {
     original: template,
     effective,
@@ -4196,10 +4254,10 @@ function substituteVariables(template, vars) {
 function runtimeTemplatePattern(template) {
   let pattern = "";
   let lastIndex = 0;
-  for (const match of template.matchAll(PLACEHOLDER)) {
-    pattern += escapeRegex(template.slice(lastIndex, match.index));
+  for (const span of scanPlaceholders(template)) {
+    pattern += escapeRegex(template.slice(lastIndex, span.start));
     pattern += "([^/]+?)";
-    lastIndex = (match.index ?? 0) + match[0].length;
+    lastIndex = span.end;
   }
   return `${pattern}${escapeRegex(template.slice(lastIndex))}`;
 }
@@ -5187,7 +5245,7 @@ function operationMatches(candidate, operationPath) {
   return candidate.operationPath === names.path || candidate.operationPath === names.simplePath || candidate.operationName === names.name || candidate.operationName === names.simpleName;
 }
 function resolveOperation(db, signals, workspaceId) {
-  const missing = [signals.servicePath, signals.alias, signals.destination, signals.operationPath].flatMap((value) => [...(value ?? "").matchAll(/\$\{([^}]*)\}/g)].map((match) => (match[1] ?? "").trim())).filter(Boolean);
+  const missing = [signals.servicePath, signals.alias, signals.destination, signals.operationPath].flatMap(extractPlaceholderKeys);
   if (missing.length > 0)
     return {
       status: "dynamic",
@@ -5533,7 +5591,7 @@ function compactCandidateScores(candidates2) {
   }));
 }
 function placeholderKeys(values) {
-  const keys = values.flatMap((value) => [...(value ?? "").matchAll(/\$\{([^}]*)\}/g)].map((match) => (match[1] ?? "").trim()).filter(Boolean));
+  const keys = values.flatMap(extractPlaceholderKeys);
   return [...new Set(keys)].sort();
 }
 function parseJson(value) {
@@ -5811,7 +5869,7 @@ function insertCallEdge(db, workspaceId, call, vars, generation) {
   }
   if (isRemoteEntityCall) {
     const target = buildRemoteQueryTarget({ queryEntity: intent.entitySegment ?? call.query_entity, servicePath, serviceAlias: call.alias, serviceAliasExpr: call.aliasExpr, destination: destination ? applyVariables(destination, vars) : void 0, isDynamic, parserWarning: evidence.parserWarning });
-    const entityKind = callType.replace("remote_entity_", "remote_entity_");
+    const entityKind = callType;
     db.prepare("INSERT INTO graph_edges(workspace_id,edge_type,status,from_kind,from_id,to_kind,to_id,confidence,evidence_json,is_dynamic,generation) VALUES(?,?,?,?,?,?,?,?,?,?,?)").run(workspaceId, "HANDLER_ACCESSES_REMOTE_ENTITY", "terminal", "call", String(call.id), target.toKind, target.toId, Number(call.confidence ?? 0.5), JSON.stringify({ ...evidence, ...target.evidence, remoteEntityAccess: entityKind }), 0, generation);
     return { status: "terminal", callType };
   }
@@ -6515,17 +6573,18 @@ function proposalForIdentity(candidate, template, identity, sourceKind, npmPacka
   }];
 }
 function matchIdentityTemplate(template, identity, npmPackage) {
-  const matches2 = [...template.matchAll(/\$\{([^}]*)\}/g)];
-  if (matches2.length !== 1 || !matches2[0]?.[1]) return void 0;
-  const placeholder = matches2[0][0];
-  const sentinel = "dynamicplaceholdertoken";
+  const matches2 = scanPlaceholders(template);
+  const matchSpan = matches2[0];
+  if (matches2.length !== 1 || !matchSpan?.key) return void 0;
+  const placeholder = template.slice(matchSpan.start, matchSpan.end);
+  const sentinel = "dynamic_placeholder_token";
   const normalizedTemplate = normalizeIdentity(template.replace(placeholder, sentinel));
   const [prefix, suffix, extra] = normalizedTemplate.split(sentinel);
   if (!prefix || !suffix || extra !== void 0) return void 0;
   const normalizedIdentity = normalizeIdentity(identity, npmPackage);
   const match = new RegExp(`^${escapeRegex2(prefix)}([a-z0-9]+)${escapeRegex2(suffix)}$`).exec(normalizedIdentity);
   if (!match?.[1]) return void 0;
-  return { key: matches2[0][1].trim(), value: match[1], normalizedIdentity };
+  return { key: matchSpan.key.trim(), value: match[1], normalizedIdentity };
 }
 function competingIdentityKeys(proposals) {
   const owners = /* @__PURE__ */ new Map();
@@ -6630,7 +6689,7 @@ function routeImplementationEvidence(db, operationId) {
 }
 function normalizeIdentity(value, npmPackage = false) {
   const unscoped = npmPackage && /^@[^/]+\/[^/]+$/.test(value) ? value.slice(value.indexOf("/") + 1) : value;
-  return unscoped.replace(/([a-z0-9])([A-Z])/g, "$1_$2").toLowerCase().replace(/[^a-z0-9]+/g, "_").replace(/^_+|_+$/g, "");
+  return unscoped.replace(/([a-z0-9])([A-Z])/g, "$1_$2").toLowerCase().replace(/[^a-z0-9]+/g, "_").replace(/^_+|(?<!_)_+$/g, "");
 }
 function stringValue7(value) {
   return typeof value === "string" ? value : void 0;
@@ -8955,6 +9014,7 @@ export {
   normalizeODataOperationInvocationPath,
   classifyODataPathIntent,
   parseServiceBindings,
+  classifyOutboundCallsInSource,
   containsSupportedOutboundCall,
   parseOutboundCalls,
   applyVariables,
@@ -8967,4 +9027,4 @@ export {
   selectorRepoAmbiguousDiagnostic,
   trace
 };
-//# sourceMappingURL=chunk-EGBTHN7J.js.map
+//# sourceMappingURL=chunk-OONNRIDL.js.map