@untangle-code/file-graph 0.0.0-stage → 0.1.0

package/dist/boundaries/endpoints.js

@@ -0,0 +1,195 @@
+import { UntangleError } from "@untangle-code/domain";
+export function under(path, root) {
+    const normalized = root.replace(/\/$/, "");
+    return normalized === "" || path === normalized || path.startsWith(`${normalized}/`);
+}
+export function provenance(file, range, kind, name) {
+    return {
+        path: file.path,
+        contentHash: file.contentHash,
+        range,
+        kind,
+        ...(name === undefined ? {} : { name }),
+    };
+}
+function key(ref) {
+    return `${ref.file.path}:${ref.router.scope}:${ref.router.name}`;
+}
+function enclosingScopes(file, scope) {
+    const result = [scope];
+    let current = scope;
+    for (let depth = 0; depth < 30 && current !== "module"; depth += 1) {
+        current = file.functions.find((fn) => fn.scope === current)?.parentScope ?? "module";
+        result.push(current);
+    }
+    return result;
+}
+function localRouter(file, name, scope) {
+    for (const candidateScope of enclosingScopes(file, scope)) {
+        const candidates = file.routers.filter((router) => router.name === name && router.scope === candidateScope);
+        const bindings = file.bindings.filter((binding) => binding.scope === candidateScope && binding.name === name);
+        const fn = file.functions.find((fn) => fn.scope === candidateScope);
+        if (bindings.length > 1 || fn?.parameters.some((param) => param.name === name))
+            return null;
+        if (bindings.length > 0 && candidates.length === 0)
+            return null;
+        if (candidates.length === 1)
+            return { file, router: candidates[0] };
+        if (candidates.length > 1)
+            return null;
+    }
+    return null;
+}
+function importedModulePath(from, module) {
+    if (!module.startsWith("."))
+        return module.replaceAll(".", "/");
+    const dots = module.match(/^\.+/)?.[0].length ?? 0;
+    const dirs = from.split("/").slice(0, -dots);
+    return [...dirs, module.slice(dots).replaceAll(".", "/")].filter(Boolean).join("/");
+}
+function includedRouter(files, file, name, scope) {
+    const local = localRouter(file, name, scope);
+    if (local !== null)
+        return local;
+    const segments = name.split(".");
+    const base = segments[0];
+    if (enclosingScopes(file, scope).some((candidateScope) => file.functions
+        .find((fn) => fn.scope === candidateScope)
+        ?.parameters.some((parameter) => parameter.name === base) ||
+        file.bindings.some((binding) => binding.scope === candidateScope && binding.name === base) ||
+        file.functions.some((fn) => fn.parentScope === candidateScope && fn.name === base)))
+        return null;
+    const imported = file.pythonImports.filter((item) => item.local === base);
+    if (imported.length !== 1)
+        return null;
+    const item = imported[0];
+    if (item === undefined)
+        return null;
+    const directRouter = segments.length === 1;
+    const module = directRouter ? item.module : `${item.module}.${item.imported ?? item.local}`;
+    const modulePath = importedModulePath(file.path, module);
+    const candidates = files.filter((candidate) => candidate.path === `${modulePath}.py` || candidate.path.endsWith(`/${modulePath}.py`));
+    if (candidates.length !== 1)
+        return null;
+    const target = candidates[0];
+    return target === undefined
+        ? null
+        : localRouter(target, directRouter ? (item.imported ?? "router") : segments.slice(1).join("."), "module");
+}
+function routePath(...parts) {
+    if (parts.some((part) => part === null))
+        return null;
+    const result = parts.join("");
+    if (!result.startsWith("/") ||
+        result.includes("//") ||
+        result.includes("?") ||
+        result.includes("#"))
+        return null;
+    return result;
+}
+export function collectEndpoints(files, services, signal) {
+    const endpoints = [], limitations = [];
+    const mounted = new Set();
+    let visits = 0;
+    const visit = (ref, prefix, chain, seen, serviceId) => {
+        if (signal?.aborted)
+            throw new UntangleError("JOB_CANCELLED", "HTTP endpoint collection cancelled");
+        visits += 1;
+        if (visits > 10000 || endpoints.length > 20000)
+            throw new UntangleError("ANALYSIS_INCOMPLETE", "HTTP router expansion budget exceeded");
+        if (seen.size >= 100) {
+            limitations.push({ path: ref.file.path, reason: "Router include depth budget exceeded" });
+            return;
+        }
+        if (seen.has(key(ref))) {
+            limitations.push({
+                path: ref.file.path,
+                reason: `Router include cycle at ${ref.router.name}`,
+            });
+            return;
+        }
+        mounted.add(key(ref));
+        const nextSeen = new Set([...seen, key(ref)]);
+        const routerPrefix = routePath(prefix, ref.router.prefix);
+        const nextPrefix = prefix === "" && ref.router.prefix === "" ? "" : routerPrefix;
+        const provenanceChain = [
+            ...chain,
+            provenance(ref.file, ref.router.range, "router", ref.router.name),
+        ];
+        for (const route of ref.file.routes.filter((route) => route.router === ref.router.name &&
+            localRouter(ref.file, route.router, route.scope)?.router === ref.router)) {
+            const path = routePath(nextPrefix, route.path);
+            if (path === null)
+                limitations.push({
+                    path: ref.file.path,
+                    reason: `Dynamic or invalid route prefix/path for ${route.handler}`,
+                });
+            else {
+                if (/\{[^}]+:(?!str\})[^}]+\}/.test(path))
+                    limitations.push({
+                        path: ref.file.path,
+                        reason: `Typed or catch-all route converters are not matched: ${path}`,
+                    });
+                endpoints.push({
+                    serviceId,
+                    method: route.method,
+                    path,
+                    handler: route.handler,
+                    provenance: [
+                        ...provenanceChain,
+                        provenance(ref.file, route.range, "route", route.handler),
+                    ],
+                });
+            }
+        }
+        for (const include of ref.file.includes.filter((include) => localRouter(ref.file, include.owner, include.scope)?.router === ref.router)) {
+            const target = includedRouter(files, ref.file, include.router, include.scope);
+            if (target === null) {
+                limitations.push({
+                    path: ref.file.path,
+                    reason: `Unresolved router include ${include.router}`,
+                });
+                continue;
+            }
+            if (serviceId !== null &&
+                !services.some((service) => service.id === serviceId &&
+                    service.backendRoots.some((root) => under(target.file.path, root)))) {
+                limitations.push({
+                    path: ref.file.path,
+                    reason: `Router include ${include.router} lies outside declared backend roots`,
+                });
+                continue;
+            }
+            const includePrefix = nextPrefix === "" && include.prefix === "" ? "" : routePath(nextPrefix, include.prefix);
+            visit(target, includePrefix, [...provenanceChain, provenance(ref.file, include.range, "include", include.router)], nextSeen, serviceId);
+        }
+    };
+    for (const file of files) {
+        const unsafeMounts = files.filter((candidate) => candidate.limitations.some((reason) => reason.startsWith("ASGI app.mount")));
+        const unsafeService = unsafeMounts.some((unsafe) => services.length === 0 ||
+            services.some((service) => service.backendRoots.some((root) => under(file.path, root)) &&
+                service.backendRoots.some((root) => under(unsafe.path, root))));
+        if (unsafeService) {
+            limitations.push({
+                path: file.path,
+                reason: "App endpoint inventory suppressed because ASGI mount routing is unsupported",
+            });
+            continue;
+        }
+        for (const router of file.routers.filter((router) => router.kind === "app")) {
+            const matching = services.filter((service) => service.backendRoots.some((root) => under(file.path, root)));
+            for (const service of matching.length > 0 ? matching : [null])
+                visit({ file, router }, "", [], new Set(), service?.id ?? null);
+        }
+    }
+    for (const file of files)
+        for (const router of file.routers) {
+            if (router.kind === "router" && !mounted.has(key({ file, router })))
+                limitations.push({
+                    path: file.path,
+                    reason: `Router ${router.name} is not proven mounted on a FastAPI app`,
+                });
+        }
+    return { endpoints, limitations };
+}
+//# sourceMappingURL=endpoints.js.map

package/dist/boundaries/endpoints.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"endpoints.js","sourceRoot":"","sources":["../../src/boundaries/endpoints.ts"],"names":[],"mappings":"AAOA,OAAO,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AAEtD,MAAM,UAAU,KAAK,CAAC,IAAY,EAAE,IAAY;IAC9C,MAAM,UAAU,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IAC3C,OAAO,UAAU,KAAK,EAAE,IAAI,IAAI,KAAK,UAAU,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,UAAU,GAAG,CAAC,CAAC;AACvF,CAAC;AAED,MAAM,UAAU,UAAU,CACxB,IAA6B,EAC7B,KAAwC,EACxC,IAAsC,EACtC,IAAa;IAEb,OAAO;QACL,IAAI,EAAE,IAAI,CAAC,IAAI;QACf,WAAW,EAAE,IAAI,CAAC,WAAW;QAC7B,KAAK;QACL,IAAI;QACJ,GAAG,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC;KACxC,CAAC;AACJ,CAAC;AAOD,SAAS,GAAG,CAAC,GAAc;IACzB,OAAO,GAAG,GAAG,CAAC,IAAI,CAAC,IAAI,IAAI,GAAG,CAAC,MAAM,CAAC,KAAK,IAAI,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;AACnE,CAAC;AAED,SAAS,eAAe,CAAC,IAA6B,EAAE,KAAa;IACnE,MAAM,MAAM,GAAG,CAAC,KAAK,CAAC,CAAC;IACvB,IAAI,OAAO,GAAG,KAAK,CAAC;IACpB,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,EAAE,IAAI,OAAO,KAAK,QAAQ,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;QACnE,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,KAAK,KAAK,OAAO,CAAC,EAAE,WAAW,IAAI,QAAQ,CAAC;QACrF,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACvB,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,WAAW,CAAC,IAA6B,EAAE,IAAY,EAAE,KAAa;IAC7E,KAAK,MAAM,cAAc,IAAI,eAAe,CAAC,IAAI,EAAE,KAAK,CAAC,EAAE,CAAC;QAC1D,MAAM,UAAU,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,CACpC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,KAAK,IAAI,IAAI,MAAM,CAAC,KAAK,KAAK,cAAc,CACpE,CAAC;QACF,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,MAAM,CACnC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,KAAK,cAAc,IAAI,OAAO,CAAC,IAAI,KAAK,IAAI,CACvE,CAAC;QACF,MAAM,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,KAAK,KAAK,cAAc,CAAC,CAAC;QACpE,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,EAAE,UAAU,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,KAAK,IAAI,CAAC;YAAE,OAAO,IAAI,CAAC;QAC5F,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,IAAI,CAAC;QAChE,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,UAAU,CAAC,CAAC,CAAqB,EAAE,CAAC;QACxF,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC;YAAE,OAAO,IAAI,CAAC;IACzC,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,kBAAkB,CAAC,IAAY,EAAE,MAAc;IACtD,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,OAAO,MAAM,CAAC,UAAU,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;IAChE,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC;IACnD,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC;IAC7C,OAAO,CAAC,GAAG,IAAI,EAAE,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,UAAU,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AACtF,CAAC;AAED,SAAS,cAAc,CACrB,KAAyC,EACzC,IAA6B,EAC7B,IAAY,EACZ,KAAa;IAEb,MAAM,KAAK,GAAG,WAAW,CAAC,IAAI,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;IAC7C,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,KAAK,CAAC;IACjC,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACjC,MAAM,IAAI,GAAG,QAAQ,CAAC,CAAC,CAAC,CAAC;IACzB,IACE,eAAe,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC,IAAI,CAC/B,CAAC,cAAc,EAAE,EAAE,CACjB,IAAI,CAAC,SAAS;SACX,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,KAAK,KAAK,cAAc,CAAC;QAC1C,EAAE,UAAU,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,IAAI,KAAK,IAAI,CAAC;QAC3D,IAAI,CAAC,QAAQ,CAAC,IAAI,CAChB,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,KAAK,cAAc,IAAI,OAAO,CAAC,IAAI,KAAK,IAAI,CACvE;QACD,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,WAAW,KAAK,cAAc,IAAI,EAAE,CAAC,IAAI,KAAK,IAAI,CAAC,CACrF;QAED,OAAO,IAAI,CAAC;IACd,MAAM,QAAQ,GAAG,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,KAAK,IAAI,CAAC,CAAC;IAC1E,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACvC,MAAM,IAAI,GAAG,QAAQ,CAAC,CAAC,CAAC,CAAC;IACzB,IAAI,IAAI,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC;IACpC,MAAM,YAAY,GAAG,QAAQ,CAAC,MAAM,KAAK,CAAC,CAAC;IAC3C,MAAM,MAAM,GAAG,YAAY,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,QAAQ,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;IAC5F,MAAM,UAAU,GAAG,kBAAkB,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IACzD,MAAM,UAAU,GAAG,KAAK,CAAC,MAAM,CAC7B,CAAC,SAAS,EAAE,EAAE,CACZ,SAAS,CAAC,IAAI,KAAK,GAAG,UAAU,KAAK,IAAI,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,UAAU,KAAK,CAAC,CACxF,CAAC;IACF,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACzC,MAAM,MAAM,GAAG,UAAU,CAAC,CAAC,CAAC,CAAC;IAC7B,OAAO,MAAM,KAAK,SAAS;QACzB,CAAC,CAAC,IAAI;QACN,CAAC,CAAC,WAAW,CACT,MAAM,EACN,YAAY,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,IAAI,QAAQ,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EACxE,QAAQ,CACT,CAAC;AACR,CAAC;AAED,SAAS,SAAS,CAAC,GAAG,KAAwB;IAC5C,IAAI,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,KAAK,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IACrD,MAAM,MAAM,GAAG,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAC9B,IACE,CAAC,MAAM,CAAC,UAAU,CAAC,GAAG,CAAC;QACvB,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC;QACrB,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC;QACpB,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC;QAEpB,OAAO,IAAI,CAAC;IACd,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,MAAM,UAAU,gBAAgB,CAC9B,KAAyC,EACzC,QAAyC,EACzC,MAAoB;IAEpB,MAAM,SAAS,GAAqB,EAAE,EACpC,WAAW,GAAuC,EAAE,CAAC;IACvD,MAAM,OAAO,GAAG,IAAI,GAAG,EAAU,CAAC;IAClC,IAAI,MAAM,GAAG,CAAC,CAAC;IACf,MAAM,KAAK,GAAG,CACZ,GAAc,EACd,MAAqB,EACrB,KAAiC,EACjC,IAAiB,EACjB,SAAwB,EAClB,EAAE;QACR,IAAI,MAAM,EAAE,OAAO;YACjB,MAAM,IAAI,aAAa,CAAC,eAAe,EAAE,oCAAoC,CAAC,CAAC;QACjF,MAAM,IAAI,CAAC,CAAC;QACZ,IAAI,MAAM,GAAG,KAAK,IAAI,SAAS,CAAC,MAAM,GAAG,KAAK;YAC5C,MAAM,IAAI,aAAa,CAAC,qBAAqB,EAAE,uCAAuC,CAAC,CAAC;QAC1F,IAAI,IAAI,CAAC,IAAI,IAAI,GAAG,EAAE,CAAC;YACrB,WAAW,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,sCAAsC,EAAE,CAAC,CAAC;YAC1F,OAAO;QACT,CAAC;QACD,IAAI,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC;YACvB,WAAW,CAAC,IAAI,CAAC;gBACf,IAAI,EAAE,GAAG,CAAC,IAAI,CAAC,IAAI;gBACnB,MAAM,EAAE,2BAA2B,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE;aACrD,CAAC,CAAC;YACH,OAAO;QACT,CAAC;QACD,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC;QACtB,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,IAAI,EAAE,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;QAC9C,MAAM,YAAY,GAAG,SAAS,CAAC,MAAM,EAAE,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QAC1D,MAAM,UAAU,GAAG,MAAM,KAAK,EAAE,IAAI,GAAG,CAAC,MAAM,CAAC,MAAM,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,YAAY,CAAC;QACjF,MAAM,eAAe,GAAG;YACtB,GAAG,KAAK;YACR,UAAU,CAAC,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,MAAM,CAAC,KAAK,EAAE,QAAQ,EAAE,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC;SAClE,CAAC;QACF,KAAK,MAAM,KAAK,IAAI,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CACxC,CAAC,KAAK,EAAE,EAAE,CACR,KAAK,CAAC,MAAM,KAAK,GAAG,CAAC,MAAM,CAAC,IAAI;YAChC,WAAW,CAAC,GAAG,CAAC,IAAI,EAAE,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,KAAK,CAAC,EAAE,MAAM,KAAK,GAAG,CAAC,MAAM,CAC1E,EAAE,CAAC;YACF,MAAM,IAAI,GAAG,SAAS,CAAC,UAAU,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;YAC/C,IAAI,IAAI,KAAK,IAAI;gBACf,WAAW,CAAC,IAAI,CAAC;oBACf,IAAI,EAAE,GAAG,CAAC,IAAI,CAAC,IAAI;oBACnB,MAAM,EAAE,4CAA4C,KAAK,CAAC,OAAO,EAAE;iBACpE,CAAC,CAAC;iBACA,CAAC;gBACJ,IAAI,0BAA0B,CAAC,IAAI,CAAC,IAAI,CAAC;oBACvC,WAAW,CAAC,IAAI,CAAC;wBACf,IAAI,EAAE,GAAG,CAAC,IAAI,CAAC,IAAI;wBACnB,MAAM,EAAE,wDAAwD,IAAI,EAAE;qBACvE,CAAC,CAAC;gBACL,SAAS,CAAC,IAAI,CAAC;oBACb,SAAS;oBACT,MAAM,EAAE,KAAK,CAAC,MAAM;oBACpB,IAAI;oBACJ,OAAO,EAAE,KAAK,CAAC,OAAO;oBACtB,UAAU,EAAE;wBACV,GAAG,eAAe;wBAClB,UAAU,CAAC,GAAG,CAAC,IAAI,EAAE,KAAK,CAAC,KAAK,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,CAAC;qBAC1D;iBACF,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QACD,KAAK,MAAM,OAAO,IAAI,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAC5C,CAAC,OAAO,EAAE,EAAE,CAAC,WAAW,CAAC,GAAG,CAAC,IAAI,EAAE,OAAO,CAAC,KAAK,EAAE,OAAO,CAAC,KAAK,CAAC,EAAE,MAAM,KAAK,GAAG,CAAC,MAAM,CACxF,EAAE,CAAC;YACF,MAAM,MAAM,GAAG,cAAc,CAAC,KAAK,EAAE,GAAG,CAAC,IAAI,EAAE,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC;YAC9E,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;gBACpB,WAAW,CAAC,IAAI,CAAC;oBACf,IAAI,EAAE,GAAG,CAAC,IAAI,CAAC,IAAI;oBACnB,MAAM,EAAE,6BAA6B,OAAO,CAAC,MAAM,EAAE;iBACtD,CAAC,CAAC;gBACH,SAAS;YACX,CAAC;YACD,IACE,SAAS,KAAK,IAAI;gBAClB,CAAC,QAAQ,CAAC,IAAI,CACZ,CAAC,OAAO,EAAE,EAAE,CACV,OAAO,CAAC,EAAE,KAAK,SAAS;oBACxB,OAAO,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CACrE,EACD,CAAC;gBACD,WAAW,CAAC,IAAI,CAAC;oBACf,IAAI,EAAE,GAAG,CAAC,IAAI,CAAC,IAAI;oBACnB,MAAM,EAAE,kBAAkB,OAAO,CAAC,MAAM,sCAAsC;iBAC/E,CAAC,CAAC;gBACH,SAAS;YACX,CAAC;YACD,MAAM,aAAa,GACjB,UAAU,KAAK,EAAE,IAAI,OAAO,CAAC,MAAM,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,UAAU,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;YAC1F,KAAK,CACH,MAAM,EACN,aAAa,EACb,CAAC,GAAG,eAAe,EAAE,UAAU,CAAC,GAAG,CAAC,IAAI,EAAE,OAAO,CAAC,KAAK,EAAE,SAAS,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC,EACpF,QAAQ,EACR,SAAS,CACV,CAAC;QACJ,CAAC;IACH,CAAC,CAAC;IACF,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,YAAY,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,SAAS,EAAE,EAAE,CAC9C,SAAS,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,UAAU,CAAC,gBAAgB,CAAC,CAAC,CAC5E,CAAC;QACF,MAAM,aAAa,GAAG,YAAY,CAAC,IAAI,CACrC,CAAC,MAAM,EAAE,EAAE,CACT,QAAQ,CAAC,MAAM,KAAK,CAAC;YACrB,QAAQ,CAAC,IAAI,CACX,CAAC,OAAO,EAAE,EAAE,CACV,OAAO,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;gBAC3D,OAAO,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAChE,CACJ,CAAC;QACF,IAAI,aAAa,EAAE,CAAC;YAClB,WAAW,CAAC,IAAI,CAAC;gBACf,IAAI,EAAE,IAAI,CAAC,IAAI;gBACf,MAAM,EAAE,6EAA6E;aACtF,CAAC,CAAC;YACH,SAAS;QACX,CAAC;QACD,KAAK,MAAM,MAAM,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,KAAK,KAAK,CAAC,EAAE,CAAC;YAC5E,MAAM,QAAQ,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,OAAO,EAAE,EAAE,CAC3C,OAAO,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAC5D,CAAC;YACF,KAAK,MAAM,OAAO,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;gBAC3D,KAAK,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,IAAI,GAAG,EAAE,EAAE,OAAO,EAAE,EAAE,IAAI,IAAI,CAAC,CAAC;QACpE,CAAC;IACH,CAAC;IACD,KAAK,MAAM,IAAI,IAAI,KAAK;QACtB,KAAK,MAAM,MAAM,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YAClC,IAAI,MAAM,CAAC,IAAI,KAAK,QAAQ,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;gBACjE,WAAW,CAAC,IAAI,CAAC;oBACf,IAAI,EAAE,IAAI,CAAC,IAAI;oBACf,MAAM,EAAE,UAAU,MAAM,CAAC,IAAI,yCAAyC;iBACvE,CAAC,CAAC;QACP,CAAC;IACH,OAAO,EAAE,SAAS,EAAE,WAAW,EAAE,CAAC;AACpC,CAAC"}

package/dist/boundaries/index.d.ts

@@ -0,0 +1,9 @@
+import type { HttpBoundaryFileFactsV1, HttpBoundaryReportV1, HttpServiceBindingV1 } from "@untangle-code/domain";
+export interface AnalyzeHttpBoundariesOptions {
+    files: readonly HttpBoundaryFileFactsV1[];
+    services: readonly HttpServiceBindingV1[];
+    signal?: AbortSignal;
+}
+/** Resolve declared deployment scopes plus method/path evidence, never bare URL coincidences. */
+export declare function analyzeHttpBoundaries(options: AnalyzeHttpBoundariesOptions): HttpBoundaryReportV1;
+//# sourceMappingURL=index.d.ts.map

package/dist/boundaries/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/boundaries/index.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,uBAAuB,EACvB,oBAAoB,EAGpB,oBAAoB,EACrB,MAAM,uBAAuB,CAAC;AAM/B,MAAM,WAAW,4BAA4B;IAC3C,KAAK,EAAE,SAAS,uBAAuB,EAAE,CAAC;IAC1C,QAAQ,EAAE,SAAS,oBAAoB,EAAE,CAAC;IAC1C,MAAM,CAAC,EAAE,WAAW,CAAC;CACtB;AAgCD,iGAAiG;AACjG,wBAAgB,qBAAqB,CAAC,OAAO,EAAE,4BAA4B,GAAG,oBAAoB,CAoEjG"}

package/dist/boundaries/index.js

@@ -0,0 +1,93 @@
+import { compareCodepoints, UntangleError } from "@untangle-code/domain";
+import { collectEndpoints, under } from "./endpoints.js";
+import { collectRequests } from "./requests.js";
+function checkCancelled(signal) {
+    if (signal?.aborted)
+        throw new UntangleError("JOB_CANCELLED", "HTTP boundary analysis cancelled");
+}
+function matchesPath(request, route) {
+    const requested = request.split("/"), target = route.split("/");
+    if (requested.length !== target.length)
+        return false;
+    return target.every((segment, index) => {
+        const value = requested[index] ?? "";
+        if (/^\{[A-Za-z_][A-Za-z0-9_]*(?::str)?\}$/.test(segment))
+            return value !== "";
+        return segment === value && value !== "{*}";
+    });
+}
+function serviceApplies(request, service) {
+    return request.origin === null
+        ? service.sameOrigin === true
+        : (service.origins ?? []).some((origin) => {
+            try {
+                return new URL(origin).origin === request.origin && new URL(origin).pathname === "/";
+            }
+            catch {
+                return false;
+            }
+        });
+}
+/** Resolve declared deployment scopes plus method/path evidence, never bare URL coincidences. */
+export function analyzeHttpBoundaries(options) {
+    checkCancelled(options.signal);
+    const files = [...options.files].sort((a, b) => compareCodepoints(a.path, b.path));
+    const services = [...options.services].sort((a, b) => compareCodepoints(a.id, b.id));
+    if (new Set(services.map((service) => service.id)).size !== services.length)
+        throw new TypeError("HTTP service identifiers must be unique");
+    if (new Set(files.map((file) => file.path)).size !== files.length)
+        throw new TypeError("HTTP source paths must be unique");
+    const { endpoints, limitations } = collectEndpoints(files, services, options.signal);
+    const requests = [];
+    for (const file of files) {
+        checkCancelled(options.signal);
+        limitations.push(...file.limitations.map((reason) => ({ path: file.path, reason })));
+        if (file.languageId === "python")
+            continue;
+        for (const request of collectRequests(file)) {
+            checkCancelled(options.signal);
+            const applicable = services.filter((service) => service.frontendRoots.some((root) => under(file.path, root)) &&
+                serviceApplies(request, service));
+            const serviceIds = applicable.map((service) => service.id);
+            const targets = request.reason === undefined && request.path !== null && request.method !== null
+                ? endpoints.filter((endpoint) => endpoint.serviceId !== null &&
+                    serviceIds.includes(endpoint.serviceId) &&
+                    endpoint.method === request.method &&
+                    matchesPath(request.path, endpoint.path))
+                : [];
+            const status = targets.length === 1 ? "resolved" : targets.length > 1 ? "ambiguous" : "unresolved";
+            const reason = request.reason ??
+                (applicable.length === 0
+                    ? "No declared service binding for the request origin and frontend root"
+                    : targets.length === 0
+                        ? "No mounted route matches the HTTP method and normalized path"
+                        : targets.length > 1
+                            ? "Multiple mounted routes match; no target was selected"
+                            : undefined);
+            requests.push({
+                ...request,
+                status,
+                ...(reason === undefined ? {} : { reason }),
+                serviceIds,
+                targets,
+            });
+        }
+    }
+    return {
+        schemaVersion: 1,
+        kind: "http-boundaries",
+        services,
+        endpoints,
+        requests,
+        limitations,
+        summary: {
+            files: files.length,
+            endpoints: endpoints.length,
+            requests: requests.length,
+            resolved: requests.filter((request) => request.status === "resolved").length,
+            ambiguous: requests.filter((request) => request.status === "ambiguous").length,
+            unresolved: requests.filter((request) => request.status === "unresolved").length,
+        },
+    };
+}
+//# sourceMappingURL=index.js.map

package/dist/boundaries/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/boundaries/index.ts"],"names":[],"mappings":"AAOA,OAAO,EAAE,iBAAiB,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AAEzE,OAAO,EAAE,gBAAgB,EAAE,KAAK,EAAE,MAAM,gBAAgB,CAAC;AACzD,OAAO,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAQhD,SAAS,cAAc,CAAC,MAAoB;IAC1C,IAAI,MAAM,EAAE,OAAO;QAAE,MAAM,IAAI,aAAa,CAAC,eAAe,EAAE,kCAAkC,CAAC,CAAC;AACpG,CAAC;AAED,SAAS,WAAW,CAAC,OAAe,EAAE,KAAa;IACjD,MAAM,SAAS,GAAG,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,EAClC,MAAM,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC5B,IAAI,SAAS,CAAC,MAAM,KAAK,MAAM,CAAC,MAAM;QAAE,OAAO,KAAK,CAAC;IACrD,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC,OAAO,EAAE,KAAK,EAAE,EAAE;QACrC,MAAM,KAAK,GAAG,SAAS,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;QACrC,IAAI,uCAAuC,CAAC,IAAI,CAAC,OAAO,CAAC;YAAE,OAAO,KAAK,KAAK,EAAE,CAAC;QAC/E,OAAO,OAAO,KAAK,KAAK,IAAI,KAAK,KAAK,KAAK,CAAC;IAC9C,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,cAAc,CACrB,OAAkC,EAClC,OAA6B;IAE7B,OAAO,OAAO,CAAC,MAAM,KAAK,IAAI;QAC5B,CAAC,CAAC,OAAO,CAAC,UAAU,KAAK,IAAI;QAC7B,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE;YACtC,IAAI,CAAC;gBACH,OAAO,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC,MAAM,KAAK,OAAO,CAAC,MAAM,IAAI,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC,QAAQ,KAAK,GAAG,CAAC;YACvF,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,KAAK,CAAC;YACf,CAAC;QACH,CAAC,CAAC,CAAC;AACT,CAAC;AAED,iGAAiG;AACjG,MAAM,UAAU,qBAAqB,CAAC,OAAqC;IACzE,cAAc,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IAC/B,MAAM,KAAK,GAAG,CAAC,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;IACnF,MAAM,QAAQ,GAAG,CAAC,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IACrF,IAAI,IAAI,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,QAAQ,CAAC,MAAM;QACzE,MAAM,IAAI,SAAS,CAAC,yCAAyC,CAAC,CAAC;IACjE,IAAI,IAAI,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,KAAK,KAAK,CAAC,MAAM;QAC/D,MAAM,IAAI,SAAS,CAAC,kCAAkC,CAAC,CAAC;IAC1D,MAAM,EAAE,SAAS,EAAE,WAAW,EAAE,GAAG,gBAAgB,CAAC,KAAK,EAAE,QAAQ,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;IACrF,MAAM,QAAQ,GAA4B,EAAE,CAAC;IAC7C,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,cAAc,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QAC/B,WAAW,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,CAAC;QACrF,IAAI,IAAI,CAAC,UAAU,KAAK,QAAQ;YAAE,SAAS;QAC3C,KAAK,MAAM,OAAO,IAAI,eAAe,CAAC,IAAI,CAAC,EAAE,CAAC;YAC5C,cAAc,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;YAC/B,MAAM,UAAU,GAAG,QAAQ,CAAC,MAAM,CAChC,CAAC,OAAO,EAAE,EAAE,CACV,OAAO,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;gBAC5D,cAAc,CAAC,OAAO,EAAE,OAAO,CAAC,CACnC,CAAC;YACF,MAAM,UAAU,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;YAC3D,MAAM,OAAO,GACX,OAAO,CAAC,MAAM,KAAK,SAAS,IAAI,OAAO,CAAC,IAAI,KAAK,IAAI,IAAI,OAAO,CAAC,MAAM,KAAK,IAAI;gBAC9E,CAAC,CAAC,SAAS,CAAC,MAAM,CACd,CAAC,QAAQ,EAAE,EAAE,CACX,QAAQ,CAAC,SAAS,KAAK,IAAI;oBAC3B,UAAU,CAAC,QAAQ,CAAC,QAAQ,CAAC,SAAS,CAAC;oBACvC,QAAQ,CAAC,MAAM,KAAK,OAAO,CAAC,MAAM;oBAClC,WAAW,CAAC,OAAO,CAAC,IAAc,EAAE,QAAQ,CAAC,IAAI,CAAC,CACrD;gBACH,CAAC,CAAC,EAAE,CAAC;YACT,MAAM,MAAM,GACV,OAAO,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,YAAY,CAAC;YACtF,MAAM,MAAM,GACV,OAAO,CAAC,MAAM;gBACd,CAAC,UAAU,CAAC,MAAM,KAAK,CAAC;oBACtB,CAAC,CAAC,sEAAsE;oBACxE,CAAC,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC;wBACpB,CAAC,CAAC,8DAA8D;wBAChE,CAAC,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC;4BAClB,CAAC,CAAC,uDAAuD;4BACzD,CAAC,CAAC,SAAS,CAAC,CAAC;YACrB,QAAQ,CAAC,IAAI,CAAC;gBACZ,GAAG,OAAO;gBACV,MAAM;gBACN,GAAG,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC;gBAC3C,UAAU;gBACV,OAAO;aACR,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IACD,OAAO;QACL,aAAa,EAAE,CAAC;QAChB,IAAI,EAAE,iBAAiB;QACvB,QAAQ;QACR,SAAS;QACT,QAAQ;QACR,WAAW;QACX,OAAO,EAAE;YACP,KAAK,EAAE,KAAK,CAAC,MAAM;YACnB,SAAS,EAAE,SAAS,CAAC,MAAM;YAC3B,QAAQ,EAAE,QAAQ,CAAC,MAAM;YACzB,QAAQ,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,KAAK,UAAU,CAAC,CAAC,MAAM;YAC5E,SAAS,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,KAAK,WAAW,CAAC,CAAC,MAAM;YAC9E,UAAU,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,KAAK,YAAY,CAAC,CAAC,MAAM;SACjF;KACF,CAAC;AACJ,CAAC"}

package/dist/boundaries/requests.d.ts

@@ -0,0 +1,12 @@
+import type { HttpBoundaryFileFactsV1, HttpBoundaryProvenanceV1 } from "@untangle-code/domain";
+export interface ExtractedRequest {
+    source: HttpBoundaryProvenanceV1;
+    method: string | null;
+    path: string | null;
+    origin: string | null;
+    reason?: string;
+    provenance: HttpBoundaryProvenanceV1[];
+}
+/** Bounded, same-file wrapper substitution; no whole-program execution or guessed clients. */
+export declare function collectRequests(file: HttpBoundaryFileFactsV1): ExtractedRequest[];
+//# sourceMappingURL=requests.d.ts.map

package/dist/boundaries/requests.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"requests.d.ts","sourceRoot":"","sources":["../../src/boundaries/requests.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,uBAAuB,EACvB,wBAAwB,EAIzB,MAAM,uBAAuB,CAAC;AA8R/B,MAAM,WAAW,gBAAgB;IAC/B,MAAM,EAAE,wBAAwB,CAAC;IACjC,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IACpB,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,UAAU,EAAE,wBAAwB,EAAE,CAAC;CACxC;AAED,8FAA8F;AAC9F,wBAAgB,eAAe,CAAC,IAAI,EAAE,uBAAuB,GAAG,gBAAgB,EAAE,CA4GjF"}

package/dist/boundaries/requests.js

@@ -0,0 +1,311 @@
+import { UntangleError } from "@untangle-code/domain";
+import { provenance } from "./endpoints.js";
+const UNKNOWN = { kind: "unknown", detail: "unbound value" };
+const UNDEFINED = { kind: "undefined" };
+const DYNAMIC = "«dynamic»";
+const ENCODED_SEGMENT = "«encoded-segment»";
+function functionAt(file, scope) {
+    return file.functions.find((fn) => fn.scope === scope);
+}
+function referencesName(expr, name, depth = 0) {
+    if (depth > 40)
+        return true;
+    if (expr.kind === "name")
+        return expr.name === name;
+    if (expr.kind === "template")
+        return expr.parts.some((part) => typeof part !== "string" && referencesName(part, name, depth + 1));
+    if (expr.kind === "object")
+        return expr.entries.some((entry) => referencesName("spread" in entry ? entry.spread : entry.value, name, depth + 1));
+    if (expr.kind === "member")
+        return referencesName(expr.object, name, depth + 1);
+    if (expr.kind === "call")
+        return expr.arguments.some((arg) => referencesName(arg, name, depth + 1));
+    return false;
+}
+/** Fail closed when an options object can escape to code whose writes are unknown. */
+function objectEscapes(name, context, seen = new Set()) {
+    const location = `${context.scope}:${name}`;
+    if (seen.has(location) || seen.size >= 12)
+        return true;
+    const next = new Set([...seen, location]);
+    if (context.file.bindings.some((binding) => binding.scope === context.scope &&
+        binding.name !== name &&
+        referencesName(binding.value, name)))
+        return true;
+    if (context.file.bindings.some((binding) => binding.scope === context.scope &&
+        binding.name === name &&
+        binding.value.kind === "unknown" &&
+        binding.value.detail === "reassigned binding"))
+        return true;
+    for (const call of context.file.calls.filter((call) => call.scope === context.scope)) {
+        for (let index = 0; index < call.arguments.length; index += 1) {
+            const argument = call.arguments[index];
+            if (argument?.kind !== "name" || argument.name !== name)
+                continue;
+            if (transportName(context.file, call))
+                continue;
+            const target = localFunction(context.file, call);
+            const parameter = target?.parameters[index];
+            if (target === null ||
+                target === undefined ||
+                parameter === undefined ||
+                objectEscapes(parameter.name, { ...context, scope: target.scope, env: new Map() }, next))
+                return true;
+        }
+    }
+    return false;
+}
+function resolveName(name, context, seen, depth) {
+    const lookup = `${context.scope}:${name}`;
+    if (seen.has(lookup))
+        return UNKNOWN;
+    const next = new Set([...seen, lookup]);
+    const binding = context.file.bindings.filter((item) => item.scope === context.scope && item.name === name);
+    if (binding.length > 1)
+        return { kind: "unknown", detail: "multiple or reassigned bindings" };
+    if (binding.length === 1 && binding[0]?.value.kind === "object" && objectEscapes(name, context))
+        return { kind: "unknown", detail: "object binding escapes static transport analysis" };
+    if (binding.length === 1)
+        return resolveExpression(binding[0].value, context, next, depth + 1);
+    const envValue = context.env.get(name);
+    if (envValue !== undefined)
+        return envValue.kind === "object" && objectEscapes(name, context)
+            ? { kind: "unknown", detail: "object parameter escapes static transport analysis" }
+            : envValue;
+    const fn = functionAt(context.file, context.scope);
+    if (fn?.parameters.some((param) => param.name === name))
+        return UNKNOWN;
+    if (context.scope !== "module")
+        return resolveName(name, { ...context, scope: fn?.parentScope ?? "module", env: new Map() }, next, depth + 1);
+    return { kind: "name", name };
+}
+function resolveExpression(expr, context, seen = new Set(), depth = 0) {
+    if (depth > 40)
+        return UNKNOWN;
+    if (expr.kind === "name")
+        return resolveName(expr.name, context, seen, depth);
+    const resolve = (value) => resolveExpression(value, context, seen, depth + 1);
+    if (expr.kind === "template")
+        return {
+            kind: "template",
+            parts: expr.parts.map((part) => (typeof part === "string" ? part : resolve(part))),
+        };
+    if (expr.kind === "object")
+        return {
+            kind: "object",
+            entries: expr.entries.map((entry) => "spread" in entry
+                ? { spread: resolve(entry.spread) }
+                : { key: entry.key, value: resolve(entry.value) }),
+        };
+    if (expr.kind === "member")
+        return { ...expr, object: resolve(expr.object) };
+    if (expr.kind === "call") {
+        if (expr.callee.kind === "name" && expr.callee.name === "encodeURIComponent") {
+            const shadowed = scopeChain(context.file, context.scope).some((scope) => context.file.bindings.some((binding) => binding.scope === scope && binding.name === "encodeURIComponent") ||
+                functionAt(context.file, scope)?.parameters.some((param) => param.name === "encodeURIComponent") ||
+                context.file.functions.some((fn) => fn.parentScope === scope && fn.name === "encodeURIComponent")) || context.file.imports.some((raw) => raw.importedNames?.includes("encodeURIComponent"));
+            if (shadowed)
+                return UNKNOWN;
+        }
+        return { ...expr, arguments: expr.arguments.map(resolve) };
+    }
+    return expr;
+}
+function scopeChain(file, scope) {
+    const result = [scope];
+    for (let depth = 0; depth < 30 && scope !== "module"; depth += 1) {
+        scope = functionAt(file, scope)?.parentScope ?? "module";
+        result.push(scope);
+    }
+    return result;
+}
+function transportName(file, call) {
+    if (call.callee.kind !== "name")
+        return false;
+    const name = call.callee.name;
+    for (const scope of scopeChain(file, call.scope)) {
+        if (file.bindings.some((binding) => binding.scope === scope && binding.name === name))
+            return false;
+        const fn = functionAt(file, scope);
+        const parameter = fn?.parameters.find((param) => param.name === name);
+        if (parameter !== undefined)
+            return parameter.fetchTransport === true;
+        if (file.functions.some((candidate) => candidate.parentScope === scope && candidate.name === name))
+            return false;
+        if (file.imports.some((raw) => raw.importedNames?.includes(name)))
+            return false;
+    }
+    return name === "fetch";
+}
+function localFunction(file, call) {
+    if (call.callee.kind !== "name")
+        return null;
+    const name = call.callee.name;
+    for (const scope of scopeChain(file, call.scope)) {
+        const candidates = file.functions.filter((fn) => fn.parentScope === scope && fn.name === name);
+        if (candidates.length === 1)
+            return candidates[0];
+        if (candidates.length > 1 ||
+            file.bindings.some((binding) => binding.scope === scope && binding.name === name))
+            return null;
+    }
+    return null;
+}
+function render(expr) {
+    if (expr.kind === "string")
+        return expr.value.includes(DYNAMIC) || expr.value.includes(ENCODED_SEGMENT)
+            ? DYNAMIC
+            : expr.value;
+    if (expr.kind === "template")
+        return expr.parts.map((part) => (typeof part === "string" ? part : render(part))).join("");
+    if (expr.kind === "call" &&
+        expr.callee.kind === "name" &&
+        expr.callee.name === "encodeURIComponent" &&
+        expr.arguments.length === 1)
+        return ENCODED_SEGMENT;
+    return DYNAMIC;
+}
+function methodOf(expr) {
+    if (expr.kind === "undefined")
+        return "GET";
+    if (expr.kind !== "object")
+        return null;
+    let method = UNDEFINED;
+    for (const entry of expr.entries) {
+        if ("spread" in entry) {
+            if (entry.spread.kind === "object") {
+                const nested = methodOf(entry.spread);
+                if (nested !== "GET" ||
+                    entry.spread.entries.some((item) => "key" in item && item.key === "method"))
+                    method = nested === null ? UNKNOWN : { kind: "string", value: nested };
+            }
+            else if (entry.spread.kind !== "undefined")
+                method = UNKNOWN;
+        }
+        else if (entry.key === "method")
+            method = entry.value;
+    }
+    if (method.kind === "undefined")
+        return "GET";
+    return method.kind === "string" && /^[A-Za-z]+$/.test(method.value)
+        ? method.value.toUpperCase()
+        : null;
+}
+function normalizeRequest(url) {
+    const bare = url.split(/[?#]/, 1)[0] ?? "";
+    if (bare.includes(DYNAMIC))
+        return { path: null, origin: null, reason: "unbounded dynamic URL or path" };
+    let path = bare, origin = null;
+    if (/^https?:\/\//i.test(bare)) {
+        try {
+            const parsed = new URL(bare);
+            if (parsed.username || parsed.password)
+                return { path: null, origin: null, reason: "URL credentials are unsupported" };
+            origin = parsed.origin;
+            const authorityEnd = bare.indexOf("/", bare.indexOf("://") + 3);
+            path = authorityEnd === -1 ? "/" : bare.slice(authorityEnd);
+        }
+        catch {
+            return { path: null, origin: null, reason: "invalid absolute URL" };
+        }
+    }
+    if (!path.startsWith("/") ||
+        path.startsWith("//") ||
+        path.includes("\\") ||
+        path.includes("//") ||
+        /%(?:2e|2f|5c)/i.test(path) ||
+        /(^|\/)\.{1,2}(\/|$)/.test(path))
+        return {
+            path: null,
+            origin,
+            reason: "URL is not a normalized root-relative or absolute HTTP URL",
+        };
+    if (path.split("/").some((part) => part.includes(ENCODED_SEGMENT) && part !== ENCODED_SEGMENT))
+        return { path: null, origin, reason: "dynamic segment has no complete literal boundary" };
+    return { path: path.replaceAll(ENCODED_SEGMENT, "{*}"), origin };
+}
+/** Bounded, same-file wrapper substitution; no whole-program execution or guessed clients. */
+export function collectRequests(file) {
+    const result = [];
+    const transportCalls = file.calls.filter((call) => transportName(file, call));
+    const wrappers = new Set(transportCalls.map((call) => call.scope));
+    for (let iteration = 0; iteration < 8; iteration += 1) {
+        let changed = false;
+        for (const call of file.calls) {
+            const target = localFunction(file, call);
+            if (target !== null &&
+                target.parameters.length > 0 &&
+                wrappers.has(target.scope) &&
+                !wrappers.has(call.scope)) {
+                wrappers.add(call.scope);
+                changed = true;
+            }
+        }
+        if (!changed)
+            break;
+    }
+    const emit = (call, context, source, chain) => {
+        if (result.length >= 10000)
+            throw new UntangleError("ANALYSIS_INCOMPLETE", "HTTP request expansion budget exceeded");
+        const url = render(resolveExpression(call.arguments[0] ?? UNKNOWN, context));
+        const method = methodOf(resolveExpression(call.arguments[1] ?? UNDEFINED, context));
+        const normalized = normalizeRequest(url);
+        result.push({
+            source,
+            method,
+            ...normalized,
+            ...(method === null && normalized.reason === undefined
+                ? { reason: "HTTP method is not statically known" }
+                : {}),
+            provenance: [...chain, provenance(file, call.range, "transport")],
+        });
+    };
+    const expand = (fn, args, source, chain, seen) => {
+        if (seen.has(fn.scope) || seen.size >= 8) {
+            result.push({
+                source,
+                method: null,
+                path: null,
+                origin: null,
+                reason: "local wrapper recursion/depth budget exceeded",
+                provenance: chain,
+            });
+            return;
+        }
+        instantiated.add(fn.scope);
+        const env = new Map(fn.parameters.map((param, index) => [
+            param.name,
+            args[index] ?? param.defaultValue ?? UNDEFINED,
+        ]));
+        const context = { file, scope: fn.scope, env };
+        for (const call of file.calls.filter((call) => call.scope === fn.scope)) {
+            if (transportName(file, call))
+                emit(call, context, source, chain);
+            else {
+                const target = localFunction(file, call);
+                if (target !== null && wrappers.has(target.scope))
+                    expand(target, call.arguments.map((arg) => resolveExpression(arg, context)), source, [...chain, provenance(file, call.range, "transport", target.name)], new Set([...seen, fn.scope]));
+            }
+        }
+    };
+    const instantiated = new Set();
+    for (const call of file.calls) {
+        const target = localFunction(file, call);
+        if (target === null || !wrappers.has(target.scope) || target.parameters.length === 0)
+            continue;
+        const args = call.arguments.map((arg) => resolveExpression(arg, { file, scope: call.scope, env: new Map() }));
+        // Pure forwarding calls are expanded through their concrete callers, not invented as requests.
+        if (args.length === 0 ||
+            args.every((arg) => arg.kind === "name" || arg.kind === "unknown" || arg.kind === "undefined"))
+            continue;
+        instantiated.add(target.scope);
+        expand(target, args, provenance(file, call.range, "request", target.name), [], new Set());
+    }
+    for (const call of transportCalls) {
+        if (instantiated.has(call.scope))
+            continue;
+        emit(call, { file, scope: call.scope, env: new Map() }, provenance(file, call.range, "request"), []);
+    }
+    return result;
+}
+//# sourceMappingURL=requests.js.map