@webpieces/nx-webpieces-rules 0.4.486 → 0.4.488

package/src/lib/api-usage/api-scanner.js

@@ -31,23 +31,21 @@
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.ApiUsageScanner = exports.UnresolvedApiCall = void 0;
 exports.scanAndAttachApiRelations = scanAndAttachApiRelations;
+exports.buildApiContracts = buildApiContracts;
+exports.describeMismatchedEndpointKinds = describeMismatchedEndpointKinds;
 exports.describeUnresolvedApiCalls = describeUnresolvedApiCalls;
 const tslib_1 = require("tslib");
 const ts = tslib_1.__importStar(require("typescript"));
 const fs = tslib_1.__importStar(require("fs"));
 const path = tslib_1.__importStar(require("path"));
+const rules_config_1 = require("@webpieces/rules-config");
 const program_1 = require("../di-graph/program");
 const bindings_1 = require("../di-graph/bindings");
 const api_relations_1 = require("./api-relations");
+const api_ast_1 = require("./api-ast");
 const RPC_CLIENT_METHOD = 'createRpcClient';
 const PUBSUB_CLIENT_METHOD = 'createPubSubClient';
 const ADD_ROUTES_METHOD = 'addRoutes';
-/**
- * Client-config class-name suffix whose FIRST constructor argument is the target service name —
- * `ClientConfig('helper-fsdb')` (rpc) and `TaskClientConfig('helper-fsdb')` (pubsub) both take
- * `svcName` first, and a consumer's own `XxxClientConfig` follows the same shape.
- */
-const CLIENT_CONFIG_SUFFIX = 'ClientConfig';
 /**
  * An `addRoutes`/`createRpcClient`/`createPubSubClient` first argument that resolved to an
  * abstract class in a DECLARATION file which owns no indexed contract. Unambiguously a broken
@@ -133,11 +131,15 @@ class ApiSourceIndex {
 class ApiSourceIndexBuilder {
     workspaceRoot;
     projectInfos;
+    externalApiPaths;
     byName = new Map();
     owners = new Set();
-    constructor(workspaceRoot, projectInfos) {
+    constructor(workspaceRoot, projectInfos, 
+    /** Globs of project roots holding vendor contracts — see ExternalApiIndex. */
+    externalApiPaths) {
         this.workspaceRoot = workspaceRoot;
         this.projectInfos = projectInfos;
+        this.externalApiPaths = externalApiPaths;
     }
     build() {
         for (const info of this.projectInfos.values()) {
@@ -151,23 +153,22 @@ class ApiSourceIndexBuilder {
         const srcDir = path.join(path.resolve(this.workspaceRoot, info.root), 'src');
         if (!fs.existsSync(srcDir))
             return;
-        for (const file of collectTsFiles(srcDir)) {
-            if (isTestFile(file))
+        const external = (0, rules_config_1.matchesAnyGlob)(info.root, this.externalApiPaths);
+        for (const file of (0, api_ast_1.collectTsFiles)(srcDir)) {
+            if ((0, api_ast_1.isTestFile)(file))
                 continue; // tests are not production topology
             const text = fs.readFileSync(file, 'utf8');
             const sourceFile = ts.createSourceFile(file, text, ts.ScriptTarget.Latest, true);
-            this.indexNode(sourceFile, info.name);
+            this.indexNode(sourceFile, info.name, external);
         }
     }
-    indexNode(node, project) {
-        if (ts.isClassDeclaration(node)) {
-            const info = apiClassInfoFrom(node, project);
-            if (info) {
-                this.owners.add(project);
-                this.byName.set(info.api, info);
-            }
+    indexNode(node, project, external) {
+        const info = external ? (0, api_ast_1.externalApiInfoFrom)(node, project) : (0, api_ast_1.apiClassInfoFromNode)(node, project);
+        if (info) {
+            this.owners.add(project);
+            this.byName.set(info.api, info);
         }
-        ts.forEachChild(node, (child) => this.indexNode(child, project));
+        ts.forEachChild(node, (child) => this.indexNode(child, project, external));
     }
 }
 /** Per-owner accumulator that dedupes API refs while a single project is scanned. */
@@ -217,20 +218,24 @@ function ensureRefMap(map, owner) {
 class ApiUsageScanner {
     workspaceRoot;
     projectInfos;
+    externalApiPaths;
     locator;
     relationsByProject = new Map();
     scannedProjects = new Set();
     unresolvedApiCalls = [];
     sourceIndex = new ApiSourceIndex(new Map(), new Set());
-    constructor(workspaceRoot, projectInfos) {
+    constructor(workspaceRoot, projectInfos, 
+    /** Globs of project roots whose exported `*Api` types are contracts for outside systems. */
+    externalApiPaths = []) {
         this.workspaceRoot = workspaceRoot;
         this.projectInfos = projectInfos;
+        this.externalApiPaths = externalApiPaths;
         this.locator = new ProjectLocator(workspaceRoot, projectInfos);
     }
     scan() {
         // Pre-pass: every contract, from source, BEFORE any call site is resolved — a call site in
         // one project routinely names a contract owned by a project we have not walked yet.
-        this.sourceIndex = new ApiSourceIndexBuilder(this.workspaceRoot, this.projectInfos).build();
+        this.sourceIndex = new ApiSourceIndexBuilder(this.workspaceRoot, this.projectInfos, this.externalApiPaths).build();
         for (const info of this.projectInfos.values()) {
             if (info.root === '' || info.root === '.')
                 continue;
@@ -254,7 +259,7 @@ class ApiUsageScanner {
         for (const sourceFile of program.getSourceFiles()) {
             if (sourceFile.isDeclarationFile || sourceFile.fileName.includes('/node_modules/'))
                 continue;
-            if (isTestFile(sourceFile.fileName))
+            if ((0, api_ast_1.isTestFile)(sourceFile.fileName))
                 continue; // tests are not production topology
             // Only this project's OWN files — imported api-lib source is in the program too.
             if (this.locator.projectOf(sourceFile.fileName) !== info.name)
@@ -270,13 +275,43 @@ class ApiUsageScanner {
             this.relationsByProject.set(info.name, accumulator.toRelations());
     }
     visit(node, checker, project, acc) {
-        // Contract classes are indexed by the source pre-pass, so only calls matter here.
+        // In-repo contract classes are indexed by the source pre-pass, so only calls matter for them.
         if (ts.isCallExpression(node))
             this.recordCall(node, checker, project, acc);
+        // A VENDOR contract has no client-factory call site to key off — it arrives by injection —
+        // so classes have to be inspected too.
+        if (ts.isClassDeclaration(node))
+            this.recordExternalUses(node, acc);
         ts.forEachChild(node, (child) => this.visit(child, checker, project, acc));
     }
+    /**
+     * Record a `uses` for every vendor contract this class receives by CONSTRUCTOR INJECTION —
+     * `constructor(@inject(GMAIL_TYPES.GmailApi) private readonly gmail: GmailApi)`.
+     *
+     * The parameter TYPE is the signal, not the token: a token is an opaque Symbol whose name we
+     * would have to guess at, while the type is written right there and is what the class actually
+     * calls. Matching happens by name against the external index, so an import that resolves to a
+     * built `.d.ts` works exactly as well as one resolving to source.
+     *
+     * A class that IMPLEMENTS the contract is skipped — that is the vendor adapter (`GmailClient`)
+     * or a test double (`InMemoryFirestore`, `MockTts`), which IS the seam rather than a caller of
+     * it. Counting those would draw an edge from every service embedding a fake to a vendor it never
+     * actually reaches.
+     */
+    recordExternalUses(cls, acc) {
+        const implemented = (0, api_ast_1.implementedTypeNames)(cls);
+        for (const param of (0, api_ast_1.constructorParamsOf)(cls)) {
+            const typeName = (0, api_ast_1.typeReferenceName)(param.type);
+            if (typeName === null || implemented.has(typeName))
+                continue;
+            const info = this.sourceIndex.lookup(typeName);
+            if (info === null || info.type !== 'external')
+                continue;
+            acc.addUses(info.owner, { api: info.api, type: 'external' });
+        }
+    }
     recordCall(call, checker, project, acc) {
-        const method = calleeMethodName(call);
+        const method = (0, api_ast_1.calleeMethodName)(call);
         if (method === null || call.arguments.length === 0)
             return;
         if (method === ADD_ROUTES_METHOD) {
@@ -291,7 +326,7 @@ class ApiUsageScanner {
                 return;
             // Argument 2 names WHICH service this client talks to. Keeping it is what lets the
             // runtime graph draw ONE edge instead of one per implementer of the contract.
-            const targetService = targetServiceOf(call);
+            const targetService = (0, api_ast_1.targetServiceOf)(call);
             const ref = { api: info.api, type: info.type };
             if (targetService !== null)
                 ref.targetService = targetService;
@@ -315,7 +350,7 @@ class ApiUsageScanner {
      */
     recoverFromDeclaration(decl, expr, project) {
         // An abstract class is the shape of a contract; a non-abstract argument is genuinely not one.
-        if (!decl.getSourceFile().isDeclarationFile || !isAbstractClass(decl) || !decl.name)
+        if (!decl.getSourceFile().isDeclarationFile || !(0, api_ast_1.isAbstractClass)(decl) || !decl.name)
             return null;
         const recovered = this.sourceIndex.lookup(decl.name.text);
         if (recovered)
@@ -333,14 +368,17 @@ class ApiUsageScanner {
     relativePath(absFile) {
         return path.relative(this.workspaceRoot, absFile);
     }
-    /** {api, owner, type} when `cls` is an `abstract class` carrying `@ApiPath` IN SOURCE, else null. */
+    /**
+     * {api, owner, type, methods} when `cls` is an `abstract class` carrying `@ApiPath` IN SOURCE,
+     * else null. Only the OWNER differs from the index pre-pass — here it comes from the file's
+     * location rather than from the project being walked — so the contract test itself is delegated
+     * to apiClassInfoFrom, keeping one definition of "this is a contract".
+     */
     apiClassInfoFor(cls) {
-        if (!isAbstractClass(cls) || !hasClassDecorator(cls, 'ApiPath') || !cls.name)
-            return null;
         const owner = this.locator.projectOf(cls.getSourceFile().fileName);
         if (owner === null)
             return null;
-        return { api: cls.name.text, owner, type: apiTransport(cls) };
+        return (0, api_ast_1.apiClassInfoFrom)(cls, owner);
     }
 }
 exports.ApiUsageScanner = ApiUsageScanner;
@@ -352,8 +390,8 @@ exports.ApiUsageScanner = ApiUsageScanner;
  * full scan so callers (validators, runtime graph) can reuse the api index.
  */
 // webpieces-disable no-function-outside-class -- module entry point, mirrors generateReducedGraph/collectBindings
-function scanAndAttachApiRelations(workspaceRoot, graph, projectInfos) {
-    const result = new ApiUsageScanner(workspaceRoot, projectInfos).scan();
+function scanAndAttachApiRelations(workspaceRoot, graph, projectInfos, externalApiPaths = []) {
+    const result = new ApiUsageScanner(workspaceRoot, projectInfos, externalApiPaths).scan();
     for (const projectName of result.relationsByProject.keys()) {
         const entry = graph[projectName];
         if (entry)
@@ -361,6 +399,57 @@ function scanAndAttachApiRelations(workspaceRoot, graph, projectInfos) {
     }
     return result;
 }
+/**
+ * The committed `apiContracts` table for architecture/dependencies.json, from a completed scan.
+ *
+ * Only contracts with ≥1 endpoint are emitted: a vendor seam has no routes, so a table entry for it
+ * would be an empty shell, and its identity is already carried by the `external` refs in
+ * apiRelations. Sorted by api name, methods left in declaration order, so the file is deterministic.
+ */
+// webpieces-disable no-function-outside-class -- module entry point, mirrors scanAndAttachApiRelations
+function buildApiContracts(scan) {
+    const contracts = {};
+    for (const api of [...scan.apiIndex.keys()].sort()) {
+        const info = scan.apiIndex.get(api);
+        if (info.methods.length === 0)
+            continue;
+        const contract = {
+            owner: info.owner,
+            apiKind: info.type,
+            basePath: info.basePath,
+            methods: info.methods,
+        };
+        contracts[api] = contract;
+    }
+    return contracts;
+}
+/**
+ * Every contract method whose declared @Endpoint kind its api kind cannot deliver — an rpc method on
+ * a @PubSub contract (nothing calls a queue synchronously), or a cloudtasks/cron method on an @Rpc
+ * contract (naming a queue or schedule nothing could deliver to). Mirrors core-util's
+ * ENDPOINT_KINDS_BY_API_KIND at BUILD time, where it can name the file instead of throwing at wiring.
+ */
+// webpieces-disable no-function-outside-class -- pure formatter, mirrors describeUnresolvedApiCalls
+function describeMismatchedEndpointKinds(contracts) {
+    const allowedByKind = {
+        rpc: ['rpc', 'external'],
+        pubsub: ['cloudtasks', 'cron', 'external'],
+    };
+    const problems = [];
+    for (const api of Object.keys(contracts)) {
+        const contract = contracts[api];
+        const allowed = allowedByKind[contract.apiKind];
+        if (allowed === undefined)
+            continue;
+        for (const method of contract.methods) {
+            if (allowed.includes(method.kind))
+                continue;
+            problems.push(`${api}.${method.name} declares @Endpoint('${method.path}', '${method.kind}') but ${api} is ` +
+                `@${contract.apiKind === 'pubsub' ? 'PubSub' : 'Rpc'} — allowed kinds are ${allowed.join(' | ')}.`);
+        }
+    }
+    return problems;
+}
 /**
  * Loud, actionable report for contracts the scan could not map to source. Callers print this
  * instead of emitting a green graph that is quietly missing relations. Not fatal: a contract
@@ -408,78 +497,7 @@ function buildProgramFromSrc(projectRootAbs, options) {
     const srcDir = path.join(projectRootAbs, 'src');
     if (!fs.existsSync(srcDir))
         return null;
-    const files = collectTsFiles(srcDir);
+    const files = (0, api_ast_1.collectTsFiles)(srcDir);
     return files.length > 0 ? ts.createProgram(files, options) : null;
 }
-// webpieces-disable no-function-outside-class -- recursive fs walker, matching the AST-helper style here
-function collectTsFiles(dir) {
-    const out = [];
-    for (const entry of fs.readdirSync(dir, { withFileTypes: true })) {
-        const full = path.join(dir, entry.name);
-        if (entry.isDirectory()) {
-            if (entry.name !== 'node_modules')
-                out.push(...collectTsFiles(full));
-        }
-        else if (entry.name.endsWith('.ts') && !entry.name.endsWith('.d.ts')) {
-            out.push(full);
-        }
-    }
-    return out;
-}
-/** {api, owner: `project`, type} when `cls` is an `abstract class` carrying `@ApiPath`, else null. */
-// webpieces-disable no-function-outside-class -- pure AST accessor, matching the sibling helpers in di-graph/bindings.ts
-function apiClassInfoFrom(cls, project) {
-    if (!isAbstractClass(cls) || !hasClassDecorator(cls, 'ApiPath') || !cls.name)
-        return null;
-    return { api: cls.name.text, owner: project, type: apiTransport(cls) };
-}
-// webpieces-disable no-function-outside-class -- pure AST predicate, matching the sibling helpers in di-graph/bindings.ts
-function apiTransport(cls) {
-    return hasClassDecorator(cls, 'PubSub') ? 'pubsub' : 'rpc';
-}
-// webpieces-disable no-function-outside-class -- pure AST predicate, matching the sibling helpers in di-graph/bindings.ts
-function isAbstractClass(cls) {
-    return (ts.getModifiers(cls) ?? []).some((m) => m.kind === ts.SyntaxKind.AbstractKeyword);
-}
-// webpieces-disable no-function-outside-class -- pure AST predicate, matching the sibling helpers in di-graph/bindings.ts
-function hasClassDecorator(cls, name) {
-    return (0, bindings_1.classDecorators)(cls).some((d) => (0, bindings_1.decoratorName)(d) === name);
-}
-/**
- * The service a client-factory call aims at, from its config argument:
- * `createRpcClient(WarmupApi, new ClientConfig('helper-fsdb'))` → `'helper-fsdb'`.
- *
- * Only a `new <Xxx>ClientConfig('<string literal>')` yields a name. A variable, a template string
- * or a computed expression yields null — the target is genuinely unknown at scan time, and the
- * runtime graph must fall back to fan-out (loudly) rather than guess.
- */
-// webpieces-disable no-function-outside-class -- pure AST accessor, matching the sibling helpers in di-graph/bindings.ts
-function targetServiceOf(call) {
-    if (call.arguments.length < 2)
-        return null;
-    const config = call.arguments[1];
-    if (!ts.isNewExpression(config) || !ts.isIdentifier(config.expression))
-        return null;
-    if (!config.expression.text.endsWith(CLIENT_CONFIG_SUFFIX))
-        return null;
-    const first = config.arguments?.[0];
-    if (first === undefined || !ts.isStringLiteral(first))
-        return null;
-    return first.text.length > 0 ? first.text : null;
-}
-// webpieces-disable no-function-outside-class -- pure AST accessor, matching the sibling helpers in di-graph/bindings.ts
-function calleeMethodName(call) {
-    const callee = call.expression;
-    if (ts.isPropertyAccessExpression(callee))
-        return callee.name.text;
-    if (ts.isIdentifier(callee))
-        return callee.text;
-    return null;
-}
-// webpieces-disable no-function-outside-class -- pure path predicate, matching the sibling helpers in di-graph/bindings.ts
-function isTestFile(fileName) {
-    return (fileName.includes('/__tests__/') ||
-        fileName.includes('.spec.') ||
-        fileName.includes('.test.'));
-}
 //# sourceMappingURL=api-scanner.js.map

package/src/lib/api-usage/api-scanner.js.map

@@ -1 +1 @@
-{"version":3,"file":"api-scanner.js","sourceRoot":"","sources":["../../../../../../../packages/tooling/nx-webpieces-rules/src/lib/api-usage/api-scanner.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;;;AA4WH,8DAWC;AAQD,gEAcC;;AA3YD,uDAAiC;AACjC,+CAAyB;AACzB,mDAA6B;AAG7B,iDAA0D;AAC1D,mDAA+F;AAC/F,mDASyB;AAEzB,MAAM,iBAAiB,GAAG,iBAAiB,CAAC;AAC5C,MAAM,oBAAoB,GAAG,oBAAoB,CAAC;AAClD,MAAM,iBAAiB,GAAG,WAAW,CAAC;AAEtC;;;;GAIG;AACH,MAAM,oBAAoB,GAAG,cAAc,CAAC;AAE5C;;;;;GAKG;AACH,MAAa,iBAAiB;IAGN;IAEA;IAEA;IAEA;IARpB;IACI,+CAA+C;IAC/B,OAAe;IAC/B,2DAA2D;IAC3C,GAAW;IAC3B,mEAAmE;IACnD,EAAU;IAC1B,kFAAkF;IAClE,UAAkB;QANlB,YAAO,GAAP,OAAO,CAAQ;QAEf,QAAG,GAAH,GAAG,CAAQ;QAEX,OAAE,GAAF,EAAE,CAAQ;QAEV,eAAU,GAAV,UAAU,CAAQ;IACnC,CAAC;CACP;AAXD,8CAWC;AAuBD,qGAAqG;AACrG,MAAM,cAAc;IACC,KAAK,CAAgB;IAEtC,YAAY,aAAqB,EAAE,YAAsC;QACrE,MAAM,KAAK,GAAkB,EAAE,CAAC;QAChC,KAAK,MAAM,IAAI,IAAI,YAAY,CAAC,MAAM,EAAE,EAAE,CAAC;YACvC,IAAI,IAAI,CAAC,IAAI,KAAK,EAAE,IAAI,IAAI,CAAC,IAAI,KAAK,GAAG;gBAAE,SAAS;YACpD,KAAK,CAAC,IAAI,CAAC,IAAI,WAAW,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,OAAO,CAAC,aAAa,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACnF,CAAC;QACD,+DAA+D;QAC/D,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,CAAc,EAAE,CAAc,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IAC7F,CAAC;IAED,SAAS,CAAC,OAAe;QACrB,MAAM,UAAU,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QACzC,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;YAC5B,IAAI,UAAU,KAAK,IAAI,CAAC,GAAG,IAAI,UAAU,CAAC,UAAU,CAAC,IAAI,CAAC,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC;gBAAE,OAAO,IAAI,CAAC,IAAI,CAAC;QAChG,CAAC;QACD,OAAO,IAAI,CAAC;IAChB,CAAC;CACJ;AAED,MAAM,WAAW;IAEO;IACA;IAFpB,YACoB,IAAY,EACZ,GAAW;QADX,SAAI,GAAJ,IAAI,CAAQ;QACZ,QAAG,GAAH,GAAG,CAAQ;IAC5B,CAAC;CACP;AAED;;;;;;GAMG;AACH,MAAM,cAAc;IAEI;IACA;IAFpB,YACoB,MAAiC,EACjC,MAAmB;QADnB,WAAM,GAAN,MAAM,CAA2B;QACjC,WAAM,GAAN,MAAM,CAAa;IACpC,CAAC;IAEJ,MAAM,CAAC,GAAW;QACd,OAAO,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC;IACxC,CAAC;CACJ;AAED;;;;;;GAMG;AACH,MAAM,qBAAqB;IAKF;IACA;IALJ,MAAM,GAAG,IAAI,GAAG,EAAwB,CAAC;IACzC,MAAM,GAAG,IAAI,GAAG,EAAU,CAAC;IAE5C,YACqB,aAAqB,EACrB,YAAsC;QADtC,kBAAa,GAAb,aAAa,CAAQ;QACrB,iBAAY,GAAZ,YAAY,CAA0B;IACxD,CAAC;IAEJ,KAAK;QACD,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,YAAY,CAAC,MAAM,EAAE,EAAE,CAAC;YAC5C,IAAI,IAAI,CAAC,IAAI,KAAK,EAAE,IAAI,IAAI,CAAC,IAAI,KAAK,GAAG;gBAAE,SAAS;YACpD,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC;QAC5B,CAAC;QACD,OAAO,IAAI,cAAc,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;IACxD,CAAC;IAEO,YAAY,CAAC,IAAiB;QAClC,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,aAAa,EAAE,IAAI,CAAC,IAAI,CAAC,EAAE,KAAK,CAAC,CAAC;QAC7E,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,MAAM,CAAC;YAAE,OAAO;QACnC,KAAK,MAAM,IAAI,IAAI,cAAc,CAAC,MAAM,CAAC,EAAE,CAAC;YACxC,IAAI,UAAU,CAAC,IAAI,CAAC;gBAAE,SAAS,CAAC,oCAAoC;YACpE,MAAM,IAAI,GAAG,EAAE,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;YAC3C,MAAM,UAAU,GAAG,EAAE,CAAC,gBAAgB,CAAC,IAAI,EAAE,IAAI,EAAE,EAAE,CAAC,YAAY,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;YACjF,IAAI,CAAC,SAAS,CAAC,UAAU,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;QAC1C,CAAC;IACL,CAAC;IAEO,SAAS,CAAC,IAAa,EAAE,OAAe;QAC5C,IAAI,EAAE,CAAC,kBAAkB,CAAC,IAAI,CAAC,EAAE,CAAC;YAC9B,MAAM,IAAI,GAAG,gBAAgB,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;YAC7C,IAAI,IAAI,EAAE,CAAC;gBACP,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;gBACzB,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;YACpC,CAAC;QACL,CAAC;QACD,EAAE,CAAC,YAAY,CAAC,IAAI,EAAE,CAAC,KAAc,EAAE,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC,CAAC;IAC9E,CAAC;CACJ;AAED,qFAAqF;AACrF,MAAM,mBAAmB;IACJ,iBAAiB,GAAG,IAAI,GAAG,EAA+B,CAAC;IAC3D,WAAW,GAAG,IAAI,GAAG,EAA+B,CAAC;IAEtE,aAAa,CAAC,KAAa,EAAE,GAAW;QACpC,YAAY,CAAC,IAAI,CAAC,iBAAiB,EAAE,KAAK,CAAC,CAAC,GAAG,CAAC,IAAA,yBAAS,EAAC,GAAG,CAAC,EAAE,GAAG,CAAC,CAAC;IACzE,CAAC;IAED;;;OAGG;IACH,OAAO,CAAC,KAAa,EAAE,GAAW;QAC9B,YAAY,CAAC,IAAI,CAAC,WAAW,EAAE,KAAK,CAAC,CAAC,GAAG,CAAC,IAAA,yBAAS,EAAC,GAAG,CAAC,EAAE,GAAG,CAAC,CAAC;IACnE,CAAC;IAED,oFAAoF;IACpF,WAAW;QACP,MAAM,MAAM,GAAG,IAAI,GAAG,CAAS,CAAC,GAAG,IAAI,CAAC,iBAAiB,CAAC,IAAI,EAAE,EAAE,GAAG,IAAI,CAAC,WAAW,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;QAC/F,MAAM,SAAS,GAAwB,EAAE,CAAC;QAC1C,KAAK,MAAM,KAAK,IAAI,CAAC,GAAG,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC;YACrC,MAAM,cAAc,GAAG,IAAA,2BAAW,EAAC,CAAC,GAAG,CAAC,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;YAC7F,MAAM,QAAQ,GAAG,IAAA,2BAAW,EAAC,CAAC,GAAG,CAAC,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;YACjF,MAAM,QAAQ,GAAgB;gBAC1B,IAAI,EAAE,IAAA,qCAAqB,EAAC,cAAc,EAAE,QAAQ,CAAC;gBACrD,UAAU,EAAE,cAAc;gBAC1B,IAAI,EAAE,QAAQ;aACjB,CAAC;YACF,SAAS,CAAC,KAAK,CAAC,GAAG,QAAQ,CAAC;QAChC,CAAC;QACD,OAAO,SAAS,CAAC;IACrB,CAAC;IAED,OAAO;QACH,OAAO,IAAI,CAAC,iBAAiB,CAAC,IAAI,KAAK,CAAC,IAAI,IAAI,CAAC,WAAW,CAAC,IAAI,KAAK,CAAC,CAAC;IAC5E,CAAC;CACJ;AAED,wHAAwH;AACxH,SAAS,YAAY,CAAC,GAAqC,EAAE,KAAa;IACtE,IAAI,KAAK,GAAG,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IAC3B,IAAI,CAAC,KAAK,EAAE,CAAC;QACT,KAAK,GAAG,IAAI,GAAG,EAAkB,CAAC;QAClC,GAAG,CAAC,GAAG,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;IAC1B,CAAC;IACD,OAAO,KAAK,CAAC;AACjB,CAAC;AAED,oFAAoF;AACpF,MAAa,eAAe;IAQH;IACA;IARJ,OAAO,CAAiB;IACxB,kBAAkB,GAAG,IAAI,GAAG,EAA+B,CAAC;IAC5D,eAAe,GAAG,IAAI,GAAG,EAAU,CAAC;IACpC,kBAAkB,GAAwB,EAAE,CAAC;IACtD,WAAW,GAAG,IAAI,cAAc,CAAC,IAAI,GAAG,EAAwB,EAAE,IAAI,GAAG,EAAU,CAAC,CAAC;IAE7F,YACqB,aAAqB,EACrB,YAAsC;QADtC,kBAAa,GAAb,aAAa,CAAQ;QACrB,iBAAY,GAAZ,YAAY,CAA0B;QAEvD,IAAI,CAAC,OAAO,GAAG,IAAI,cAAc,CAAC,aAAa,EAAE,YAAY,CAAC,CAAC;IACnE,CAAC;IAED,IAAI;QACA,2FAA2F;QAC3F,oFAAoF;QACpF,IAAI,CAAC,WAAW,GAAG,IAAI,qBAAqB,CAAC,IAAI,CAAC,aAAa,EAAE,IAAI,CAAC,YAAY,CAAC,CAAC,KAAK,EAAE,CAAC;QAC5F,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,YAAY,CAAC,MAAM,EAAE,EAAE,CAAC;YAC5C,IAAI,IAAI,CAAC,IAAI,KAAK,EAAE,IAAI,IAAI,CAAC,IAAI,KAAK,GAAG;gBAAE,SAAS;YACpD,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC;QAC3B,CAAC;QACD,OAAO;YACH,kBAAkB,EAAE,IAAI,CAAC,kBAAkB;YAC3C,cAAc,EAAE,IAAI,CAAC,WAAW,CAAC,MAAM;YACvC,QAAQ,EAAE,IAAI,CAAC,WAAW,CAAC,MAAM;YACjC,eAAe,EAAE,IAAI,CAAC,eAAe;YACrC,kBAAkB,EAAE,IAAI,CAAC,kBAAkB;SAC9C,CAAC;IACN,CAAC;IAEO,WAAW,CAAC,IAAiB;QACjC,MAAM,OAAO,GAAG,iBAAiB,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,aAAa,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;QAC/E,IAAI,CAAC,OAAO;YAAE,OAAO;QACrB,MAAM,OAAO,GAAG,OAAO,CAAC,cAAc,EAAE,CAAC;QACzC,MAAM,WAAW,GAAG,IAAI,mBAAmB,EAAE,CAAC;QAC9C,IAAI,qBAAqB,GAAG,KAAK,CAAC;QAElC,KAAK,MAAM,UAAU,IAAI,OAAO,CAAC,cAAc,EAAE,EAAE,CAAC;YAChD,IAAI,UAAU,CAAC,iBAAiB,IAAI,UAAU,CAAC,QAAQ,CAAC,QAAQ,CAAC,gBAAgB,CAAC;gBAAE,SAAS;YAC7F,IAAI,UAAU,CAAC,UAAU,CAAC,QAAQ,CAAC;gBAAE,SAAS,CAAC,oCAAoC;YACnF,iFAAiF;YACjF,IAAI,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,UAAU,CAAC,QAAQ,CAAC,KAAK,IAAI,CAAC,IAAI;gBAAE,SAAS;YACxE,qBAAqB,GAAG,IAAI,CAAC;YAC7B,IAAI,CAAC,KAAK,CAAC,UAAU,EAAE,OAAO,EAAE,IAAI,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC;QAC5D,CAAC;QAED,0FAA0F;QAC1F,+EAA+E;QAC/E,IAAI,qBAAqB;YAAE,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC/D,IAAI,CAAC,WAAW,CAAC,OAAO,EAAE;YAAE,IAAI,CAAC,kBAAkB,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,WAAW,CAAC,WAAW,EAAE,CAAC,CAAC;IAClG,CAAC;IAEO,KAAK,CAAC,IAAa,EAAE,OAAuB,EAAE,OAAe,EAAE,GAAwB;QAC3F,kFAAkF;QAClF,IAAI,EAAE,CAAC,gBAAgB,CAAC,IAAI,CAAC;YAAE,IAAI,CAAC,UAAU,CAAC,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,GAAG,CAAC,CAAC;QAC5E,EAAE,CAAC,YAAY,CAAC,IAAI,EAAE,CAAC,KAAc,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,GAAG,CAAC,CAAC,CAAC;IACxF,CAAC;IAEO,UAAU,CACd,IAAuB,EACvB,OAAuB,EACvB,OAAe,EACf,GAAwB;QAExB,MAAM,MAAM,GAAG,gBAAgB,CAAC,IAAI,CAAC,CAAC;QACtC,IAAI,MAAM,KAAK,IAAI,IAAI,IAAI,CAAC,SAAS,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO;QAC3D,IAAI,MAAM,KAAK,iBAAiB,EAAE,CAAC;YAC/B,MAAM,IAAI,GAAG,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;YACvE,IAAI,IAAI;gBAAE,GAAG,CAAC,aAAa,CAAC,IAAI,CAAC,KAAK,EAAE,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;YAC5E,OAAO;QACX,CAAC;QACD,IAAI,MAAM,KAAK,iBAAiB,IAAI,MAAM,KAAK,oBAAoB,EAAE,CAAC;YAClE,MAAM,IAAI,GAAG,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;YACvE,IAAI,CAAC,IAAI;gBAAE,OAAO;YAClB,mFAAmF;YACnF,8EAA8E;YAC9E,MAAM,aAAa,GAAG,eAAe,CAAC,IAAI,CAAC,CAAC;YAC5C,MAAM,GAAG,GAAW,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC;YACvD,IAAI,aAAa,KAAK,IAAI;gBAAE,GAAG,CAAC,aAAa,GAAG,aAAa,CAAC;YAC9D,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;QACjC,CAAC;IACL,CAAC;IAED,oFAAoF;IAC5E,eAAe,CAAC,IAAmB,EAAE,OAAuB,EAAE,OAAe;QACjF,MAAM,IAAI,GAAG,IAAA,kCAAuB,EAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QACpD,IAAI,CAAC,IAAI;YAAE,OAAO,IAAI,CAAC;QACvB,MAAM,UAAU,GAAG,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC;QAC9C,OAAO,UAAU,IAAI,IAAI,CAAC,sBAAsB,CAAC,IAAI,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC;IAC1E,CAAC;IAED;;;;;;OAMG;IACK,sBAAsB,CAC1B,IAAyB,EACzB,IAAmB,EACnB,OAAe;QAEf,8FAA8F;QAC9F,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,CAAC,iBAAiB,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI;YAAE,OAAO,IAAI,CAAC;QACjG,MAAM,SAAS,GAAG,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC1D,IAAI,SAAS;YAAE,OAAO,SAAS,CAAC;QAChC,0FAA0F;QAC1F,IAAI,CAAC,kBAAkB,CAAC,IAAI,CACxB,IAAI,iBAAiB,CACjB,OAAO,EACP,IAAI,CAAC,IAAI,CAAC,IAAI,EACd,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,EAC3B,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,aAAa,EAAE,CAAC,QAAQ,CAAC,CACnD,CACJ,CAAC;QACF,OAAO,IAAI,CAAC;IAChB,CAAC;IAED,0FAA0F;IAClF,gBAAgB,CAAC,IAAa;QAClC,MAAM,UAAU,GAAG,IAAI,CAAC,aAAa,EAAE,CAAC;QACxC,MAAM,QAAQ,GAAG,UAAU,CAAC,6BAA6B,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC;QAC3E,OAAO,GAAG,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,QAAQ,CAAC,IAAI,QAAQ,CAAC,IAAI,GAAG,CAAC,EAAE,CAAC;IAC5E,CAAC;IAEO,YAAY,CAAC,OAAe;QAChC,OAAO,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,aAAa,EAAE,OAAO,CAAC,CAAC;IACtD,CAAC;IAED,qGAAqG;IAC7F,eAAe,CAAC,GAAwB;QAC5C,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,IAAI,CAAC,iBAAiB,CAAC,GAAG,EAAE,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI;YAAE,OAAO,IAAI,CAAC;QAC1F,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,GAAG,CAAC,aAAa,EAAE,CAAC,QAAQ,CAAC,CAAC;QACnE,IAAI,KAAK,KAAK,IAAI;YAAE,OAAO,IAAI,CAAC;QAChC,OAAO,EAAE,GAAG,EAAE,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,YAAY,CAAC,GAAG,CAAC,EAAE,CAAC;IAClE,CAAC;CACJ;AA1ID,0CA0IC;AAED;;;;;;GAMG;AACH,kHAAkH;AAClH,SAAgB,yBAAyB,CACrC,aAAqB,EACrB,KAAoB,EACpB,YAAsC;IAEtC,MAAM,MAAM,GAAG,IAAI,eAAe,CAAC,aAAa,EAAE,YAAY,CAAC,CAAC,IAAI,EAAE,CAAC;IACvE,KAAK,MAAM,WAAW,IAAI,MAAM,CAAC,kBAAkB,CAAC,IAAI,EAAE,EAAE,CAAC;QACzD,MAAM,KAAK,GAAG,KAAK,CAAC,WAAW,CAAC,CAAC;QACjC,IAAI,KAAK;YAAE,KAAK,CAAC,YAAY,GAAG,MAAM,CAAC,kBAAkB,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;IAC/E,CAAC;IACD,OAAO,MAAM,CAAC;AAClB,CAAC;AAED;;;;GAIG;AACH,oGAAoG;AACpG,SAAgB,0BAA0B,CAAC,KAA0B;IACjE,MAAM,KAAK,GAAG;QACV,OAAO,KAAK,CAAC,MAAM,oFAAoF;QACvG,qGAAqG;KACxG,CAAC;IACF,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACvB,KAAK,CAAC,IAAI,CAAC,UAAU,IAAI,CAAC,GAAG,OAAO,IAAI,CAAC,EAAE,KAAK,IAAI,CAAC,OAAO,mBAAmB,IAAI,CAAC,UAAU,EAAE,CAAC,CAAC;IACtG,CAAC;IACD,KAAK,CAAC,IAAI,CACN,kGAAkG,EAClG,oGAAoG,EACpG,wEAAwE,CAC3E,CAAC;IACF,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC5B,CAAC;AAED;;;;;;;;;GASG;AACH,iGAAiG;AACjG,SAAS,iBAAiB,CAAC,cAAsB;IAC7C,MAAM,UAAU,GAAG,IAAA,6BAAmB,EAAC,cAAc,CAAC,CAAC;IACvD,IAAI,CAAC,UAAU;QAAE,OAAO,mBAAmB,CAAC,cAAc,EAAE,EAAE,CAAC,CAAC;IAChE,MAAM,IAAI,GAAG,MAAM,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,CAAC,GAAG,EAAE;QACnC,mCAAmC,EAAE,GAAS,EAAE,CAAC,SAAS;KAC7D,CAA2B,CAAC;IAC7B,MAAM,MAAM,GAAG,EAAE,CAAC,gCAAgC,CAAC,UAAU,EAAE,EAAE,EAAE,IAAI,CAAC,CAAC;IACzE,IAAI,CAAC,MAAM;QAAE,OAAO,IAAI,CAAC;IACzB,IAAI,MAAM,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,EAAE,CAAC,aAAa,CAAC,MAAM,CAAC,SAAS,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC;IAC3F,OAAO,mBAAmB,CAAC,cAAc,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC;AAC/D,CAAC;AAED,wGAAwG;AACxG,SAAS,mBAAmB,CAAC,cAAsB,EAAE,OAA2B;IAC5E,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,KAAK,CAAC,CAAC;IAChD,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,MAAM,CAAC;QAAE,OAAO,IAAI,CAAC;IACxC,MAAM,KAAK,GAAG,cAAc,CAAC,MAAM,CAAC,CAAC;IACrC,OAAO,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,aAAa,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;AACtE,CAAC;AAED,yGAAyG;AACzG,SAAS,cAAc,CAAC,GAAW;IAC/B,MAAM,GAAG,GAAa,EAAE,CAAC;IACzB,KAAK,MAAM,KAAK,IAAI,EAAE,CAAC,WAAW,CAAC,GAAG,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;QAC/D,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;QACxC,IAAI,KAAK,CAAC,WAAW,EAAE,EAAE,CAAC;YACtB,IAAI,KAAK,CAAC,IAAI,KAAK,cAAc;gBAAE,GAAG,CAAC,IAAI,CAAC,GAAG,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC;QACzE,CAAC;aAAM,IAAI,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;YACrE,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACnB,CAAC;IACL,CAAC;IACD,OAAO,GAAG,CAAC;AACf,CAAC;AAED,sGAAsG;AACtG,yHAAyH;AACzH,SAAS,gBAAgB,CAAC,GAAwB,EAAE,OAAe;IAC/D,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,IAAI,CAAC,iBAAiB,CAAC,GAAG,EAAE,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI;QAAE,OAAO,IAAI,CAAC;IAC1F,OAAO,EAAE,GAAG,EAAE,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,YAAY,CAAC,GAAG,CAAC,EAAE,CAAC;AAC3E,CAAC;AAED,0HAA0H;AAC1H,SAAS,YAAY,CAAC,GAAwB;IAC1C,OAAO,iBAAiB,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC;AAC/D,CAAC;AAED,0HAA0H;AAC1H,SAAS,eAAe,CAAC,GAAwB;IAC7C,OAAO,CAAC,EAAE,CAAC,YAAY,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAc,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,EAAE,CAAC,UAAU,CAAC,eAAe,CAAC,CAAC;AAC3G,CAAC;AAED,0HAA0H;AAC1H,SAAS,iBAAiB,CAAC,GAAwB,EAAE,IAAY;IAC7D,OAAO,IAAA,0BAAe,EAAC,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAe,EAAE,EAAE,CAAC,IAAA,wBAAa,EAAC,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC;AACrF,CAAC;AAED;;;;;;;GAOG;AACH,yHAAyH;AACzH,SAAS,eAAe,CAAC,IAAuB;IAC5C,IAAI,IAAI,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IAC3C,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;IACjC,IAAI,CAAC,EAAE,CAAC,eAAe,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,YAAY,CAAC,MAAM,CAAC,UAAU,CAAC;QAAE,OAAO,IAAI,CAAC;IACpF,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,QAAQ,CAAC,oBAAoB,CAAC;QAAE,OAAO,IAAI,CAAC;IACxE,MAAM,KAAK,GAAG,MAAM,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,CAAC;IACpC,IAAI,KAAK,KAAK,SAAS,IAAI,CAAC,EAAE,CAAC,eAAe,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACnE,OAAO,KAAK,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;AACrD,CAAC;AAED,yHAAyH;AACzH,SAAS,gBAAgB,CAAC,IAAuB;IAC7C,MAAM,MAAM,GAAG,IAAI,CAAC,UAAU,CAAC;IAC/B,IAAI,EAAE,CAAC,0BAA0B,CAAC,MAAM,CAAC;QAAE,OAAO,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC;IACnE,IAAI,EAAE,CAAC,YAAY,CAAC,MAAM,CAAC;QAAE,OAAO,MAAM,CAAC,IAAI,CAAC;IAChD,OAAO,IAAI,CAAC;AAChB,CAAC;AAED,2HAA2H;AAC3H,SAAS,UAAU,CAAC,QAAgB;IAChC,OAAO,CACH,QAAQ,CAAC,QAAQ,CAAC,aAAa,CAAC;QAChC,QAAQ,CAAC,QAAQ,CAAC,QAAQ,CAAC;QAC3B,QAAQ,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAC9B,CAAC;AACN,CAAC","sourcesContent":["/**\n * API Usage Scanner\n *\n * Derives, by scanning real source (not a declaration file), how every project\n * relates to the api-lib projects it depends on. This is the single source of\n * truth for the `apiRelations` field in architecture/dependencies.json AND for\n * the runtime microservice graph.\n *\n * Signals (all resolved through the TypeScript checker, so re-exports resolve):\n *   - IMPLEMENTS: `apiFactory.addRoutes(XxxApi, XxxController)` — the registration\n *                 that actually SERVES the contract over the wire. We deliberately\n *                 do NOT use `class Ctrl extends XxxApi`: a class can extend an API\n *                 as an in-process test double / simulator (e.g. Server2Simulator)\n *                 without ever serving it — only `addRoutes` proves a served route.\n *   - USES:       `factory.createRpcClient(XxxApi, ...)`    → rpc client\n *                 `factory.createPubSubClient(XxxApi, ...)` → pubsub (Cloud Tasks) client\n *                 The config argument (`new ClientConfig('helper-fsdb')`) names WHICH service the\n *                 client talks to and is kept as `ApiRef.targetService` — see targetServiceOf.\n * An api-lib is DETECTED, not tagged: a project exporting an `abstract class`\n * carrying `@ApiPath` owns that API. Its transport is `@PubSub` → 'pubsub', else 'rpc'.\n *\n * Contracts are indexed from SOURCE in a pre-pass (ApiSourceIndexBuilder) rather than\n * from wherever the checker resolves an import to. A consumer without a tsconfig.base\n * `paths` entry resolves `import { XxxApi } from '@scope/xxx-api'` through node_modules\n * to the package's BUILT `dist/**.d.ts` — and tsc ERASES decorators when emitting\n * declarations, so `@ApiPath` can never be read there. Keying off the resolved\n * declaration therefore dropped whole services from the graph, silently. See\n * `recoverFromDeclaration`.\n */\n\nimport * as ts from 'typescript';\nimport * as fs from 'fs';\nimport * as path from 'path';\nimport type { EnhancedGraph } from '../graph-sorter';\nimport { ProjectInfo } from '../project-info';\nimport { findProjectTsconfig } from '../di-graph/program';\nimport { resolveClassDeclaration, classDecorators, decoratorName } from '../di-graph/bindings';\nimport {\n    ApiClassInfo,\n    ApiRef,\n    ApiTransport,\n    ApiRelation,\n    ProjectApiRelations,\n    apiRefKey,\n    deriveApiRelationKind,\n    sortApiRefs,\n} from './api-relations';\n\nconst RPC_CLIENT_METHOD = 'createRpcClient';\nconst PUBSUB_CLIENT_METHOD = 'createPubSubClient';\nconst ADD_ROUTES_METHOD = 'addRoutes';\n\n/**\n * Client-config class-name suffix whose FIRST constructor argument is the target service name —\n * `ClientConfig('helper-fsdb')` (rpc) and `TaskClientConfig('helper-fsdb')` (pubsub) both take\n * `svcName` first, and a consumer's own `XxxClientConfig` follows the same shape.\n */\nconst CLIENT_CONFIG_SUFFIX = 'ClientConfig';\n\n/**\n * An `addRoutes`/`createRpcClient`/`createPubSubClient` first argument that resolved to an\n * abstract class in a DECLARATION file which owns no indexed contract. Unambiguously a broken\n * scan (a real api-lib whose source we never indexed), never a \"this isn't an API\" argument —\n * so it is reported loudly instead of collapsing into a silent `return null`.\n */\nexport class UnresolvedApiCall {\n    constructor(\n        /** The project whose source makes the call. */\n        public readonly project: string,\n        /** The contract class name as written at the call site. */\n        public readonly api: string,\n        /** `path/to/file.ts:LINE` of the call site, workspace-relative. */\n        public readonly at: string,\n        /** The declaration file the checker resolved to (where decorators are erased). */\n        public readonly declaredIn: string,\n    ) {}\n}\n\n/** The whole-workspace result of a scan. */\nexport interface ApiScanResult {\n    /** projectName -> { apiLibProject -> relation }; only projects with ≥1 relation appear. */\n    relationsByProject: Map<string, ProjectApiRelations>;\n    /** Every project that owns ≥1 API contract class. */\n    apiLibProjects: Set<string>;\n    /** apiClassName -> where it lives + its transport. */\n    apiIndex: Map<string, ApiClassInfo>;\n    /**\n     * Projects whose production (non-test) source was actually scanned. A project with only test\n     * files (e.g. an e2e harness), or one the compiler couldn't load, is ABSENT — callers must not\n     * conclude \"no implements/uses\" for it, because its behavior was never observed.\n     */\n    scannedProjects: Set<string>;\n    /**\n     * Call sites naming a contract we could not map back to workspace source. Non-empty means the\n     * graph is INCOMPLETE — callers must surface these rather than emit a green, wrong graph.\n     */\n    unresolvedApiCalls: UnresolvedApiCall[];\n}\n\n/** Maps an absolute source-file path to the workspace project that owns it (longest-root-prefix). */\nclass ProjectLocator {\n    private readonly roots: ProjectRoot[];\n\n    constructor(workspaceRoot: string, projectInfos: Map<string, ProjectInfo>) {\n        const roots: ProjectRoot[] = [];\n        for (const info of projectInfos.values()) {\n            if (info.root === '' || info.root === '.') continue;\n            roots.push(new ProjectRoot(info.name, path.resolve(workspaceRoot, info.root)));\n        }\n        // Longest root first so a nested project wins over its parent.\n        this.roots = roots.sort((a: ProjectRoot, b: ProjectRoot) => b.abs.length - a.abs.length);\n    }\n\n    projectOf(absFile: string): string | null {\n        const normalized = path.resolve(absFile);\n        for (const root of this.roots) {\n            if (normalized === root.abs || normalized.startsWith(root.abs + path.sep)) return root.name;\n        }\n        return null;\n    }\n}\n\nclass ProjectRoot {\n    constructor(\n        public readonly name: string,\n        public readonly abs: string,\n    ) {}\n}\n\n/**\n * Every API contract in the workspace, keyed by class name, read from SOURCE.\n *\n * Name-keyed because a call site only ever gives us a name once its import has resolved into a\n * decorator-erased declaration. Two api-libs exporting the same class name collide (last wins) —\n * the same collision the published `apiIndex` has always had.\n */\nclass ApiSourceIndex {\n    constructor(\n        public readonly byName: Map<string, ApiClassInfo>,\n        public readonly owners: Set<string>,\n    ) {}\n\n    lookup(api: string): ApiClassInfo | null {\n        return this.byName.get(api) ?? null;\n    }\n}\n\n/**\n * Builds the ApiSourceIndex by parsing each project's own `src/**` directly.\n *\n * Deliberately parser-only (no ts.Program, no checker): we need the decorators exactly as\n * written, and a plain parse cannot be diverted to a `.d.ts` by module resolution — which is\n * the entire bug this guards against. It is also cheap enough to run over every project.\n */\nclass ApiSourceIndexBuilder {\n    private readonly byName = new Map<string, ApiClassInfo>();\n    private readonly owners = new Set<string>();\n\n    constructor(\n        private readonly workspaceRoot: string,\n        private readonly projectInfos: Map<string, ProjectInfo>,\n    ) {}\n\n    build(): ApiSourceIndex {\n        for (const info of this.projectInfos.values()) {\n            if (info.root === '' || info.root === '.') continue;\n            this.indexProject(info);\n        }\n        return new ApiSourceIndex(this.byName, this.owners);\n    }\n\n    private indexProject(info: ProjectInfo): void {\n        const srcDir = path.join(path.resolve(this.workspaceRoot, info.root), 'src');\n        if (!fs.existsSync(srcDir)) return;\n        for (const file of collectTsFiles(srcDir)) {\n            if (isTestFile(file)) continue; // tests are not production topology\n            const text = fs.readFileSync(file, 'utf8');\n            const sourceFile = ts.createSourceFile(file, text, ts.ScriptTarget.Latest, true);\n            this.indexNode(sourceFile, info.name);\n        }\n    }\n\n    private indexNode(node: ts.Node, project: string): void {\n        if (ts.isClassDeclaration(node)) {\n            const info = apiClassInfoFrom(node, project);\n            if (info) {\n                this.owners.add(project);\n                this.byName.set(info.api, info);\n            }\n        }\n        ts.forEachChild(node, (child: ts.Node) => this.indexNode(child, project));\n    }\n}\n\n/** Per-owner accumulator that dedupes API refs while a single project is scanned. */\nclass RelationAccumulator {\n    private readonly implementsByOwner = new Map<string, Map<string, ApiRef>>();\n    private readonly usesByOwner = new Map<string, Map<string, ApiRef>>();\n\n    addImplements(owner: string, ref: ApiRef): void {\n        ensureRefMap(this.implementsByOwner, owner).set(apiRefKey(ref), ref);\n    }\n\n    /**\n     * Keyed by api + targetService: one project legitimately binds the SAME contract against two\n     * different services (a WarmupApi client per data server), and those are two relations, not one.\n     */\n    addUses(owner: string, ref: ApiRef): void {\n        ensureRefMap(this.usesByOwner, owner).set(apiRefKey(ref), ref);\n    }\n\n    /** Build the deterministic { owner -> relation } record, owners in sorted order. */\n    toRelations(): ProjectApiRelations {\n        const owners = new Set<string>([...this.implementsByOwner.keys(), ...this.usesByOwner.keys()]);\n        const relations: ProjectApiRelations = {};\n        for (const owner of [...owners].sort()) {\n            const implementsRefs = sortApiRefs([...(this.implementsByOwner.get(owner)?.values() ?? [])]);\n            const usesRefs = sortApiRefs([...(this.usesByOwner.get(owner)?.values() ?? [])]);\n            const relation: ApiRelation = {\n                kind: deriveApiRelationKind(implementsRefs, usesRefs),\n                implements: implementsRefs,\n                uses: usesRefs,\n            };\n            relations[owner] = relation;\n        }\n        return relations;\n    }\n\n    isEmpty(): boolean {\n        return this.implementsByOwner.size === 0 && this.usesByOwner.size === 0;\n    }\n}\n\n// webpieces-disable no-function-outside-class -- tiny map helper, matching the AST-helper style of di-graph/bindings.ts\nfunction ensureRefMap(map: Map<string, Map<string, ApiRef>>, owner: string): Map<string, ApiRef> {\n    let inner = map.get(owner);\n    if (!inner) {\n        inner = new Map<string, ApiRef>();\n        map.set(owner, inner);\n    }\n    return inner;\n}\n\n/** Statically scans every project for its api-lib implements/uses relationships. */\nexport class ApiUsageScanner {\n    private readonly locator: ProjectLocator;\n    private readonly relationsByProject = new Map<string, ProjectApiRelations>();\n    private readonly scannedProjects = new Set<string>();\n    private readonly unresolvedApiCalls: UnresolvedApiCall[] = [];\n    private sourceIndex = new ApiSourceIndex(new Map<string, ApiClassInfo>(), new Set<string>());\n\n    constructor(\n        private readonly workspaceRoot: string,\n        private readonly projectInfos: Map<string, ProjectInfo>,\n    ) {\n        this.locator = new ProjectLocator(workspaceRoot, projectInfos);\n    }\n\n    scan(): ApiScanResult {\n        // Pre-pass: every contract, from source, BEFORE any call site is resolved — a call site in\n        // one project routinely names a contract owned by a project we have not walked yet.\n        this.sourceIndex = new ApiSourceIndexBuilder(this.workspaceRoot, this.projectInfos).build();\n        for (const info of this.projectInfos.values()) {\n            if (info.root === '' || info.root === '.') continue;\n            this.scanProject(info);\n        }\n        return {\n            relationsByProject: this.relationsByProject,\n            apiLibProjects: this.sourceIndex.owners,\n            apiIndex: this.sourceIndex.byName,\n            scannedProjects: this.scannedProjects,\n            unresolvedApiCalls: this.unresolvedApiCalls,\n        };\n    }\n\n    private scanProject(info: ProjectInfo): void {\n        const program = createScanProgram(path.resolve(this.workspaceRoot, info.root));\n        if (!program) return;\n        const checker = program.getTypeChecker();\n        const accumulator = new RelationAccumulator();\n        let scannedProductionFile = false;\n\n        for (const sourceFile of program.getSourceFiles()) {\n            if (sourceFile.isDeclarationFile || sourceFile.fileName.includes('/node_modules/')) continue;\n            if (isTestFile(sourceFile.fileName)) continue; // tests are not production topology\n            // Only this project's OWN files — imported api-lib source is in the program too.\n            if (this.locator.projectOf(sourceFile.fileName) !== info.name) continue;\n            scannedProductionFile = true;\n            this.visit(sourceFile, checker, info.name, accumulator);\n        }\n\n        // Record coverage only when we actually saw production source — an all-test project (e2e)\n        // stays absent so the validator won't wrongly flag its api-lib deps as unused.\n        if (scannedProductionFile) this.scannedProjects.add(info.name);\n        if (!accumulator.isEmpty()) this.relationsByProject.set(info.name, accumulator.toRelations());\n    }\n\n    private visit(node: ts.Node, checker: ts.TypeChecker, project: string, acc: RelationAccumulator): void {\n        // Contract classes are indexed by the source pre-pass, so only calls matter here.\n        if (ts.isCallExpression(node)) this.recordCall(node, checker, project, acc);\n        ts.forEachChild(node, (child: ts.Node) => this.visit(child, checker, project, acc));\n    }\n\n    private recordCall(\n        call: ts.CallExpression,\n        checker: ts.TypeChecker,\n        project: string,\n        acc: RelationAccumulator,\n    ): void {\n        const method = calleeMethodName(call);\n        if (method === null || call.arguments.length === 0) return;\n        if (method === ADD_ROUTES_METHOD) {\n            const info = this.apiInfoFromExpr(call.arguments[0], checker, project);\n            if (info) acc.addImplements(info.owner, { api: info.api, type: info.type });\n            return;\n        }\n        if (method === RPC_CLIENT_METHOD || method === PUBSUB_CLIENT_METHOD) {\n            const info = this.apiInfoFromExpr(call.arguments[0], checker, project);\n            if (!info) return;\n            // Argument 2 names WHICH service this client talks to. Keeping it is what lets the\n            // runtime graph draw ONE edge instead of one per implementer of the contract.\n            const targetService = targetServiceOf(call);\n            const ref: ApiRef = { api: info.api, type: info.type };\n            if (targetService !== null) ref.targetService = targetService;\n            acc.addUses(info.owner, ref);\n        }\n    }\n\n    /** Resolve an expression to the API contract it names, or null if it is not one. */\n    private apiInfoFromExpr(expr: ts.Expression, checker: ts.TypeChecker, project: string): ApiClassInfo | null {\n        const decl = resolveClassDeclaration(expr, checker);\n        if (!decl) return null;\n        const fromSource = this.apiClassInfoFor(decl);\n        return fromSource ?? this.recoverFromDeclaration(decl, expr, project);\n    }\n\n    /**\n     * The checker landed on a BUILT declaration instead of source — the consumer has no\n     * tsconfig.base `paths` entry for the api-lib, so the import went through node_modules to\n     * `dist/**.d.ts`. tsc erases decorators when emitting declarations, so `@ApiPath` is simply\n     * not there and never will be. Recover the contract by name from the source index; the graph\n     * is then correct no matter how the consumer's tsconfig is laid out.\n     */\n    private recoverFromDeclaration(\n        decl: ts.ClassDeclaration,\n        expr: ts.Expression,\n        project: string,\n    ): ApiClassInfo | null {\n        // An abstract class is the shape of a contract; a non-abstract argument is genuinely not one.\n        if (!decl.getSourceFile().isDeclarationFile || !isAbstractClass(decl) || !decl.name) return null;\n        const recovered = this.sourceIndex.lookup(decl.name.text);\n        if (recovered) return recovered;\n        // Abstract, in a .d.ts, yet no workspace source owns it — the scan is blind here. Say so.\n        this.unresolvedApiCalls.push(\n            new UnresolvedApiCall(\n                project,\n                decl.name.text,\n                this.relativeLocation(expr),\n                this.relativePath(decl.getSourceFile().fileName),\n            ),\n        );\n        return null;\n    }\n\n    /** `path/to/file.ts:LINE` for `node`, workspace-relative, for a human-readable report. */\n    private relativeLocation(node: ts.Node): string {\n        const sourceFile = node.getSourceFile();\n        const position = sourceFile.getLineAndCharacterOfPosition(node.getStart());\n        return `${this.relativePath(sourceFile.fileName)}:${position.line + 1}`;\n    }\n\n    private relativePath(absFile: string): string {\n        return path.relative(this.workspaceRoot, absFile);\n    }\n\n    /** {api, owner, type} when `cls` is an `abstract class` carrying `@ApiPath` IN SOURCE, else null. */\n    private apiClassInfoFor(cls: ts.ClassDeclaration): ApiClassInfo | null {\n        if (!isAbstractClass(cls) || !hasClassDecorator(cls, 'ApiPath') || !cls.name) return null;\n        const owner = this.locator.projectOf(cls.getSourceFile().fileName);\n        if (owner === null) return null;\n        return { api: cls.name.text, owner, type: apiTransport(cls) };\n    }\n}\n\n/**\n * Run the scan and attach the derived `apiRelations` onto each graph entry in\n * place. Shared by `architecture:generate` (which then saves) and\n * `architecture:validate-architecture-unchanged` (which regenerates in memory\n * and must attach the SAME field, or it would see a phantom diff). Returns the\n * full scan so callers (validators, runtime graph) can reuse the api index.\n */\n// webpieces-disable no-function-outside-class -- module entry point, mirrors generateReducedGraph/collectBindings\nexport function scanAndAttachApiRelations(\n    workspaceRoot: string,\n    graph: EnhancedGraph,\n    projectInfos: Map<string, ProjectInfo>,\n): ApiScanResult {\n    const result = new ApiUsageScanner(workspaceRoot, projectInfos).scan();\n    for (const projectName of result.relationsByProject.keys()) {\n        const entry = graph[projectName];\n        if (entry) entry.apiRelations = result.relationsByProject.get(projectName);\n    }\n    return result;\n}\n\n/**\n * Loud, actionable report for contracts the scan could not map to source. Callers print this\n * instead of emitting a green graph that is quietly missing relations. Not fatal: a contract\n * from a genuinely EXTERNAL (published, non-workspace) api-lib legitimately has no source here.\n */\n// webpieces-disable no-function-outside-class -- pure formatter, mirrors describeUnclassifiedApiDep\nexport function describeUnresolvedApiCalls(calls: UnresolvedApiCall[]): string {\n    const lines = [\n        `⚠️  ${calls.length} API contract(s) resolved to a declaration file with no matching workspace source.`,\n        `   Decorators (@ApiPath) are ERASED in .d.ts output, so these relations are MISSING from the graph:`,\n    ];\n    for (const call of calls) {\n        lines.push(`     • ${call.api} at ${call.at} (${call.project}) → resolved to ${call.declaredIn}`);\n    }\n    lines.push(\n        `   If the api-lib IS in this workspace, add a tsconfig.base.json 'paths' entry mapping it to its`,\n        `   src/index.ts, or confirm its project root is registered. If it is a published external package,`,\n        `   this relation cannot be derived and the graph edge will not appear.`,\n    );\n    return lines.join('\\n');\n}\n\n/**\n * Build a program for scanning ONE project. Prefers the project's compile tsconfig; but when that\n * is a solution-style tsconfig (only `references`, no `files`/`include` — e.g. legacy-server), it\n * yields zero files, so we fall back to globbing the project's own `src/**` and reuse the resolved\n * compiler options (which carry tsconfig.base `paths` for cross-package @webpieces resolution).\n *\n * `paths` is a PREFERENCE, not a precondition: it lets imports resolve straight to source. Without\n * it they land on a decorator-erased `dist/**.d.ts`, which the source index recovers from — see\n * ApiUsageScanner.recoverFromDeclaration.\n */\n// webpieces-disable no-function-outside-class -- ts Program factory, mirrors di-graph/program.ts\nfunction createScanProgram(projectRootAbs: string): ts.Program | null {\n    const configPath = findProjectTsconfig(projectRootAbs);\n    if (!configPath) return buildProgramFromSrc(projectRootAbs, {});\n    const host = Object.assign({}, ts.sys, {\n        onUnRecoverableConfigFileDiagnostic: (): void => undefined,\n    }) as ts.ParseConfigFileHost;\n    const parsed = ts.getParsedCommandLineOfConfigFile(configPath, {}, host);\n    if (!parsed) return null;\n    if (parsed.fileNames.length > 0) return ts.createProgram(parsed.fileNames, parsed.options);\n    return buildProgramFromSrc(projectRootAbs, parsed.options);\n}\n\n// webpieces-disable no-function-outside-class -- ts Program factory helper, mirrors di-graph/program.ts\nfunction buildProgramFromSrc(projectRootAbs: string, options: ts.CompilerOptions): ts.Program | null {\n    const srcDir = path.join(projectRootAbs, 'src');\n    if (!fs.existsSync(srcDir)) return null;\n    const files = collectTsFiles(srcDir);\n    return files.length > 0 ? ts.createProgram(files, options) : null;\n}\n\n// webpieces-disable no-function-outside-class -- recursive fs walker, matching the AST-helper style here\nfunction collectTsFiles(dir: string): string[] {\n    const out: string[] = [];\n    for (const entry of fs.readdirSync(dir, { withFileTypes: true })) {\n        const full = path.join(dir, entry.name);\n        if (entry.isDirectory()) {\n            if (entry.name !== 'node_modules') out.push(...collectTsFiles(full));\n        } else if (entry.name.endsWith('.ts') && !entry.name.endsWith('.d.ts')) {\n            out.push(full);\n        }\n    }\n    return out;\n}\n\n/** {api, owner: `project`, type} when `cls` is an `abstract class` carrying `@ApiPath`, else null. */\n// webpieces-disable no-function-outside-class -- pure AST accessor, matching the sibling helpers in di-graph/bindings.ts\nfunction apiClassInfoFrom(cls: ts.ClassDeclaration, project: string): ApiClassInfo | null {\n    if (!isAbstractClass(cls) || !hasClassDecorator(cls, 'ApiPath') || !cls.name) return null;\n    return { api: cls.name.text, owner: project, type: apiTransport(cls) };\n}\n\n// webpieces-disable no-function-outside-class -- pure AST predicate, matching the sibling helpers in di-graph/bindings.ts\nfunction apiTransport(cls: ts.ClassDeclaration): ApiTransport {\n    return hasClassDecorator(cls, 'PubSub') ? 'pubsub' : 'rpc';\n}\n\n// webpieces-disable no-function-outside-class -- pure AST predicate, matching the sibling helpers in di-graph/bindings.ts\nfunction isAbstractClass(cls: ts.ClassDeclaration): boolean {\n    return (ts.getModifiers(cls) ?? []).some((m: ts.Modifier) => m.kind === ts.SyntaxKind.AbstractKeyword);\n}\n\n// webpieces-disable no-function-outside-class -- pure AST predicate, matching the sibling helpers in di-graph/bindings.ts\nfunction hasClassDecorator(cls: ts.ClassDeclaration, name: string): boolean {\n    return classDecorators(cls).some((d: ts.Decorator) => decoratorName(d) === name);\n}\n\n/**\n * The service a client-factory call aims at, from its config argument:\n * `createRpcClient(WarmupApi, new ClientConfig('helper-fsdb'))` → `'helper-fsdb'`.\n *\n * Only a `new <Xxx>ClientConfig('<string literal>')` yields a name. A variable, a template string\n * or a computed expression yields null — the target is genuinely unknown at scan time, and the\n * runtime graph must fall back to fan-out (loudly) rather than guess.\n */\n// webpieces-disable no-function-outside-class -- pure AST accessor, matching the sibling helpers in di-graph/bindings.ts\nfunction targetServiceOf(call: ts.CallExpression): string | null {\n    if (call.arguments.length < 2) return null;\n    const config = call.arguments[1];\n    if (!ts.isNewExpression(config) || !ts.isIdentifier(config.expression)) return null;\n    if (!config.expression.text.endsWith(CLIENT_CONFIG_SUFFIX)) return null;\n    const first = config.arguments?.[0];\n    if (first === undefined || !ts.isStringLiteral(first)) return null;\n    return first.text.length > 0 ? first.text : null;\n}\n\n// webpieces-disable no-function-outside-class -- pure AST accessor, matching the sibling helpers in di-graph/bindings.ts\nfunction calleeMethodName(call: ts.CallExpression): string | null {\n    const callee = call.expression;\n    if (ts.isPropertyAccessExpression(callee)) return callee.name.text;\n    if (ts.isIdentifier(callee)) return callee.text;\n    return null;\n}\n\n// webpieces-disable no-function-outside-class -- pure path predicate, matching the sibling helpers in di-graph/bindings.ts\nfunction isTestFile(fileName: string): boolean {\n    return (\n        fileName.includes('/__tests__/') ||\n        fileName.includes('.spec.') ||\n        fileName.includes('.test.')\n    );\n}\n"]}
+{"version":3,"file":"api-scanner.js","sourceRoot":"","sources":["../../../../../../../packages/tooling/nx-webpieces-rules/src/lib/api-usage/api-scanner.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;;;AA2ZH,8DAYC;AAUD,8CAcC;AASD,0EAmBC;AAQD,gEAcC;;AA/eD,uDAAiC;AACjC,+CAAyB;AACzB,mDAA6B;AAC7B,0DAAyD;AAGzD,iDAA0D;AAC1D,mDAA+D;AAC/D,mDAWyB;AACzB,uCAYmB;AAEnB,MAAM,iBAAiB,GAAG,iBAAiB,CAAC;AAC5C,MAAM,oBAAoB,GAAG,oBAAoB,CAAC;AAClD,MAAM,iBAAiB,GAAG,WAAW,CAAC;AAEtC;;;;;GAKG;AACH,MAAa,iBAAiB;IAGN;IAEA;IAEA;IAEA;IARpB;IACI,+CAA+C;IAC/B,OAAe;IAC/B,2DAA2D;IAC3C,GAAW;IAC3B,mEAAmE;IACnD,EAAU;IAC1B,kFAAkF;IAClE,UAAkB;QANlB,YAAO,GAAP,OAAO,CAAQ;QAEf,QAAG,GAAH,GAAG,CAAQ;QAEX,OAAE,GAAF,EAAE,CAAQ;QAEV,eAAU,GAAV,UAAU,CAAQ;IACnC,CAAC;CACP;AAXD,8CAWC;AAuBD,qGAAqG;AACrG,MAAM,cAAc;IACC,KAAK,CAAgB;IAEtC,YAAY,aAAqB,EAAE,YAAsC;QACrE,MAAM,KAAK,GAAkB,EAAE,CAAC;QAChC,KAAK,MAAM,IAAI,IAAI,YAAY,CAAC,MAAM,EAAE,EAAE,CAAC;YACvC,IAAI,IAAI,CAAC,IAAI,KAAK,EAAE,IAAI,IAAI,CAAC,IAAI,KAAK,GAAG;gBAAE,SAAS;YACpD,KAAK,CAAC,IAAI,CAAC,IAAI,WAAW,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,OAAO,CAAC,aAAa,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACnF,CAAC;QACD,+DAA+D;QAC/D,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,CAAc,EAAE,CAAc,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IAC7F,CAAC;IAED,SAAS,CAAC,OAAe;QACrB,MAAM,UAAU,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QACzC,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;YAC5B,IAAI,UAAU,KAAK,IAAI,CAAC,GAAG,IAAI,UAAU,CAAC,UAAU,CAAC,IAAI,CAAC,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC;gBAAE,OAAO,IAAI,CAAC,IAAI,CAAC;QAChG,CAAC;QACD,OAAO,IAAI,CAAC;IAChB,CAAC;CACJ;AAED,MAAM,WAAW;IAEO;IACA;IAFpB,YACoB,IAAY,EACZ,GAAW;QADX,SAAI,GAAJ,IAAI,CAAQ;QACZ,QAAG,GAAH,GAAG,CAAQ;IAC5B,CAAC;CACP;AAED;;;;;;GAMG;AACH,MAAM,cAAc;IAEI;IACA;IAFpB,YACoB,MAAiC,EACjC,MAAmB;QADnB,WAAM,GAAN,MAAM,CAA2B;QACjC,WAAM,GAAN,MAAM,CAAa;IACpC,CAAC;IAEJ,MAAM,CAAC,GAAW;QACd,OAAO,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC;IACxC,CAAC;CACJ;AAED;;;;;;GAMG;AACH,MAAM,qBAAqB;IAKF;IACA;IAEA;IAPJ,MAAM,GAAG,IAAI,GAAG,EAAwB,CAAC;IACzC,MAAM,GAAG,IAAI,GAAG,EAAU,CAAC;IAE5C,YACqB,aAAqB,EACrB,YAAsC;IACvD,8EAA8E;IAC7D,gBAAmC;QAHnC,kBAAa,GAAb,aAAa,CAAQ;QACrB,iBAAY,GAAZ,YAAY,CAA0B;QAEtC,qBAAgB,GAAhB,gBAAgB,CAAmB;IACrD,CAAC;IAEJ,KAAK;QACD,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,YAAY,CAAC,MAAM,EAAE,EAAE,CAAC;YAC5C,IAAI,IAAI,CAAC,IAAI,KAAK,EAAE,IAAI,IAAI,CAAC,IAAI,KAAK,GAAG;gBAAE,SAAS;YACpD,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC;QAC5B,CAAC;QACD,OAAO,IAAI,cAAc,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;IACxD,CAAC;IAEO,YAAY,CAAC,IAAiB;QAClC,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,aAAa,EAAE,IAAI,CAAC,IAAI,CAAC,EAAE,KAAK,CAAC,CAAC;QAC7E,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,MAAM,CAAC;YAAE,OAAO;QACnC,MAAM,QAAQ,GAAG,IAAA,6BAAc,EAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,gBAAgB,CAAC,CAAC;QAClE,KAAK,MAAM,IAAI,IAAI,IAAA,wBAAc,EAAC,MAAM,CAAC,EAAE,CAAC;YACxC,IAAI,IAAA,oBAAU,EAAC,IAAI,CAAC;gBAAE,SAAS,CAAC,oCAAoC;YACpE,MAAM,IAAI,GAAG,EAAE,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;YAC3C,MAAM,UAAU,GAAG,EAAE,CAAC,gBAAgB,CAAC,IAAI,EAAE,IAAI,EAAE,EAAE,CAAC,YAAY,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;YACjF,IAAI,CAAC,SAAS,CAAC,UAAU,EAAE,IAAI,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;QACpD,CAAC;IACL,CAAC;IAEO,SAAS,CAAC,IAAa,EAAE,OAAe,EAAE,QAAiB;QAC/D,MAAM,IAAI,GAAG,QAAQ,CAAC,CAAC,CAAC,IAAA,6BAAmB,EAAC,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,IAAA,8BAAoB,EAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QACjG,IAAI,IAAI,EAAE,CAAC;YACP,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;YACzB,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;QACpC,CAAC;QACD,EAAE,CAAC,YAAY,CAAC,IAAI,EAAE,CAAC,KAAc,EAAE,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC,CAAC;IACxF,CAAC;CACJ;AACD,qFAAqF;AACrF,MAAM,mBAAmB;IACJ,iBAAiB,GAAG,IAAI,GAAG,EAA+B,CAAC;IAC3D,WAAW,GAAG,IAAI,GAAG,EAA+B,CAAC;IAEtE,aAAa,CAAC,KAAa,EAAE,GAAW;QACpC,YAAY,CAAC,IAAI,CAAC,iBAAiB,EAAE,KAAK,CAAC,CAAC,GAAG,CAAC,IAAA,yBAAS,EAAC,GAAG,CAAC,EAAE,GAAG,CAAC,CAAC;IACzE,CAAC;IAED;;;OAGG;IACH,OAAO,CAAC,KAAa,EAAE,GAAW;QAC9B,YAAY,CAAC,IAAI,CAAC,WAAW,EAAE,KAAK,CAAC,CAAC,GAAG,CAAC,IAAA,yBAAS,EAAC,GAAG,CAAC,EAAE,GAAG,CAAC,CAAC;IACnE,CAAC;IAED,oFAAoF;IACpF,WAAW;QACP,MAAM,MAAM,GAAG,IAAI,GAAG,CAAS,CAAC,GAAG,IAAI,CAAC,iBAAiB,CAAC,IAAI,EAAE,EAAE,GAAG,IAAI,CAAC,WAAW,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;QAC/F,MAAM,SAAS,GAAwB,EAAE,CAAC;QAC1C,KAAK,MAAM,KAAK,IAAI,CAAC,GAAG,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC;YACrC,MAAM,cAAc,GAAG,IAAA,2BAAW,EAAC,CAAC,GAAG,CAAC,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;YAC7F,MAAM,QAAQ,GAAG,IAAA,2BAAW,EAAC,CAAC,GAAG,CAAC,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;YACjF,MAAM,QAAQ,GAAgB;gBAC1B,IAAI,EAAE,IAAA,qCAAqB,EAAC,cAAc,EAAE,QAAQ,CAAC;gBACrD,UAAU,EAAE,cAAc;gBAC1B,IAAI,EAAE,QAAQ;aACjB,CAAC;YACF,SAAS,CAAC,KAAK,CAAC,GAAG,QAAQ,CAAC;QAChC,CAAC;QACD,OAAO,SAAS,CAAC;IACrB,CAAC;IAED,OAAO;QACH,OAAO,IAAI,CAAC,iBAAiB,CAAC,IAAI,KAAK,CAAC,IAAI,IAAI,CAAC,WAAW,CAAC,IAAI,KAAK,CAAC,CAAC;IAC5E,CAAC;CACJ;AAED,wHAAwH;AACxH,SAAS,YAAY,CAAC,GAAqC,EAAE,KAAa;IACtE,IAAI,KAAK,GAAG,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IAC3B,IAAI,CAAC,KAAK,EAAE,CAAC;QACT,KAAK,GAAG,IAAI,GAAG,EAAkB,CAAC;QAClC,GAAG,CAAC,GAAG,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;IAC1B,CAAC;IACD,OAAO,KAAK,CAAC;AACjB,CAAC;AAED,oFAAoF;AACpF,MAAa,eAAe;IAQH;IACA;IAEA;IAVJ,OAAO,CAAiB;IACxB,kBAAkB,GAAG,IAAI,GAAG,EAA+B,CAAC;IAC5D,eAAe,GAAG,IAAI,GAAG,EAAU,CAAC;IACpC,kBAAkB,GAAwB,EAAE,CAAC;IACtD,WAAW,GAAG,IAAI,cAAc,CAAC,IAAI,GAAG,EAAwB,EAAE,IAAI,GAAG,EAAU,CAAC,CAAC;IAE7F,YACqB,aAAqB,EACrB,YAAsC;IACvD,4FAA4F;IAC3E,mBAAsC,EAAE;QAHxC,kBAAa,GAAb,aAAa,CAAQ;QACrB,iBAAY,GAAZ,YAAY,CAA0B;QAEtC,qBAAgB,GAAhB,gBAAgB,CAAwB;QAEzD,IAAI,CAAC,OAAO,GAAG,IAAI,cAAc,CAAC,aAAa,EAAE,YAAY,CAAC,CAAC;IACnE,CAAC;IAED,IAAI;QACA,2FAA2F;QAC3F,oFAAoF;QACpF,IAAI,CAAC,WAAW,GAAG,IAAI,qBAAqB,CACxC,IAAI,CAAC,aAAa,EAClB,IAAI,CAAC,YAAY,EACjB,IAAI,CAAC,gBAAgB,CACxB,CAAC,KAAK,EAAE,CAAC;QACV,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,YAAY,CAAC,MAAM,EAAE,EAAE,CAAC;YAC5C,IAAI,IAAI,CAAC,IAAI,KAAK,EAAE,IAAI,IAAI,CAAC,IAAI,KAAK,GAAG;gBAAE,SAAS;YACpD,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC;QAC3B,CAAC;QACD,OAAO;YACH,kBAAkB,EAAE,IAAI,CAAC,kBAAkB;YAC3C,cAAc,EAAE,IAAI,CAAC,WAAW,CAAC,MAAM;YACvC,QAAQ,EAAE,IAAI,CAAC,WAAW,CAAC,MAAM;YACjC,eAAe,EAAE,IAAI,CAAC,eAAe;YACrC,kBAAkB,EAAE,IAAI,CAAC,kBAAkB;SAC9C,CAAC;IACN,CAAC;IAEO,WAAW,CAAC,IAAiB;QACjC,MAAM,OAAO,GAAG,iBAAiB,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,aAAa,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;QAC/E,IAAI,CAAC,OAAO;YAAE,OAAO;QACrB,MAAM,OAAO,GAAG,OAAO,CAAC,cAAc,EAAE,CAAC;QACzC,MAAM,WAAW,GAAG,IAAI,mBAAmB,EAAE,CAAC;QAC9C,IAAI,qBAAqB,GAAG,KAAK,CAAC;QAElC,KAAK,MAAM,UAAU,IAAI,OAAO,CAAC,cAAc,EAAE,EAAE,CAAC;YAChD,IAAI,UAAU,CAAC,iBAAiB,IAAI,UAAU,CAAC,QAAQ,CAAC,QAAQ,CAAC,gBAAgB,CAAC;gBAAE,SAAS;YAC7F,IAAI,IAAA,oBAAU,EAAC,UAAU,CAAC,QAAQ,CAAC;gBAAE,SAAS,CAAC,oCAAoC;YACnF,iFAAiF;YACjF,IAAI,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,UAAU,CAAC,QAAQ,CAAC,KAAK,IAAI,CAAC,IAAI;gBAAE,SAAS;YACxE,qBAAqB,GAAG,IAAI,CAAC;YAC7B,IAAI,CAAC,KAAK,CAAC,UAAU,EAAE,OAAO,EAAE,IAAI,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC;QAC5D,CAAC;QAED,0FAA0F;QAC1F,+EAA+E;QAC/E,IAAI,qBAAqB;YAAE,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC/D,IAAI,CAAC,WAAW,CAAC,OAAO,EAAE;YAAE,IAAI,CAAC,kBAAkB,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,WAAW,CAAC,WAAW,EAAE,CAAC,CAAC;IAClG,CAAC;IAEO,KAAK,CAAC,IAAa,EAAE,OAAuB,EAAE,OAAe,EAAE,GAAwB;QAC3F,8FAA8F;QAC9F,IAAI,EAAE,CAAC,gBAAgB,CAAC,IAAI,CAAC;YAAE,IAAI,CAAC,UAAU,CAAC,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,GAAG,CAAC,CAAC;QAC5E,2FAA2F;QAC3F,uCAAuC;QACvC,IAAI,EAAE,CAAC,kBAAkB,CAAC,IAAI,CAAC;YAAE,IAAI,CAAC,kBAAkB,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;QACpE,EAAE,CAAC,YAAY,CAAC,IAAI,EAAE,CAAC,KAAc,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,GAAG,CAAC,CAAC,CAAC;IACxF,CAAC;IAED;;;;;;;;;;;;;OAaG;IACK,kBAAkB,CAAC,GAAwB,EAAE,GAAwB;QACzE,MAAM,WAAW,GAAG,IAAA,8BAAoB,EAAC,GAAG,CAAC,CAAC;QAC9C,KAAK,MAAM,KAAK,IAAI,IAAA,6BAAmB,EAAC,GAAG,CAAC,EAAE,CAAC;YAC3C,MAAM,QAAQ,GAAG,IAAA,2BAAiB,EAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YAC/C,IAAI,QAAQ,KAAK,IAAI,IAAI,WAAW,CAAC,GAAG,CAAC,QAAQ,CAAC;gBAAE,SAAS;YAC7D,MAAM,IAAI,GAAG,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;YAC/C,IAAI,IAAI,KAAK,IAAI,IAAI,IAAI,CAAC,IAAI,KAAK,UAAU;gBAAE,SAAS;YACxD,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,EAAE,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC,CAAC;QACjE,CAAC;IACL,CAAC;IAEO,UAAU,CACd,IAAuB,EACvB,OAAuB,EACvB,OAAe,EACf,GAAwB;QAExB,MAAM,MAAM,GAAG,IAAA,0BAAgB,EAAC,IAAI,CAAC,CAAC;QACtC,IAAI,MAAM,KAAK,IAAI,IAAI,IAAI,CAAC,SAAS,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO;QAC3D,IAAI,MAAM,KAAK,iBAAiB,EAAE,CAAC;YAC/B,MAAM,IAAI,GAAG,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;YACvE,IAAI,IAAI;gBAAE,GAAG,CAAC,aAAa,CAAC,IAAI,CAAC,KAAK,EAAE,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;YAC5E,OAAO;QACX,CAAC;QACD,IAAI,MAAM,KAAK,iBAAiB,IAAI,MAAM,KAAK,oBAAoB,EAAE,CAAC;YAClE,MAAM,IAAI,GAAG,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;YACvE,IAAI,CAAC,IAAI;gBAAE,OAAO;YAClB,mFAAmF;YACnF,8EAA8E;YAC9E,MAAM,aAAa,GAAG,IAAA,yBAAe,EAAC,IAAI,CAAC,CAAC;YAC5C,MAAM,GAAG,GAAW,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC;YACvD,IAAI,aAAa,KAAK,IAAI;gBAAE,GAAG,CAAC,aAAa,GAAG,aAAa,CAAC;YAC9D,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;QACjC,CAAC;IACL,CAAC;IAED,oFAAoF;IAC5E,eAAe,CAAC,IAAmB,EAAE,OAAuB,EAAE,OAAe;QACjF,MAAM,IAAI,GAAG,IAAA,kCAAuB,EAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QACpD,IAAI,CAAC,IAAI;YAAE,OAAO,IAAI,CAAC;QACvB,MAAM,UAAU,GAAG,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC;QAC9C,OAAO,UAAU,IAAI,IAAI,CAAC,sBAAsB,CAAC,IAAI,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC;IAC1E,CAAC;IAED;;;;;;OAMG;IACK,sBAAsB,CAC1B,IAAyB,EACzB,IAAmB,EACnB,OAAe;QAEf,8FAA8F;QAC9F,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,CAAC,iBAAiB,IAAI,CAAC,IAAA,yBAAe,EAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI;YAAE,OAAO,IAAI,CAAC;QACjG,MAAM,SAAS,GAAG,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC1D,IAAI,SAAS;YAAE,OAAO,SAAS,CAAC;QAChC,0FAA0F;QAC1F,IAAI,CAAC,kBAAkB,CAAC,IAAI,CACxB,IAAI,iBAAiB,CACjB,OAAO,EACP,IAAI,CAAC,IAAI,CAAC,IAAI,EACd,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,EAC3B,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,aAAa,EAAE,CAAC,QAAQ,CAAC,CACnD,CACJ,CAAC;QACF,OAAO,IAAI,CAAC;IAChB,CAAC;IAED,0FAA0F;IAClF,gBAAgB,CAAC,IAAa;QAClC,MAAM,UAAU,GAAG,IAAI,CAAC,aAAa,EAAE,CAAC;QACxC,MAAM,QAAQ,GAAG,UAAU,CAAC,6BAA6B,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC;QAC3E,OAAO,GAAG,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,QAAQ,CAAC,IAAI,QAAQ,CAAC,IAAI,GAAG,CAAC,EAAE,CAAC;IAC5E,CAAC;IAEO,YAAY,CAAC,OAAe;QAChC,OAAO,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,aAAa,EAAE,OAAO,CAAC,CAAC;IACtD,CAAC;IAED;;;;;OAKG;IACK,eAAe,CAAC,GAAwB;QAC5C,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,GAAG,CAAC,aAAa,EAAE,CAAC,QAAQ,CAAC,CAAC;QACnE,IAAI,KAAK,KAAK,IAAI;YAAE,OAAO,IAAI,CAAC;QAChC,OAAO,IAAA,0BAAgB,EAAC,GAAG,EAAE,KAAK,CAAC,CAAC;IACxC,CAAC;CACJ;AAhLD,0CAgLC;AAED;;;;;;GAMG;AACH,kHAAkH;AAClH,SAAgB,yBAAyB,CACrC,aAAqB,EACrB,KAAoB,EACpB,YAAsC,EACtC,mBAAsC,EAAE;IAExC,MAAM,MAAM,GAAG,IAAI,eAAe,CAAC,aAAa,EAAE,YAAY,EAAE,gBAAgB,CAAC,CAAC,IAAI,EAAE,CAAC;IACzF,KAAK,MAAM,WAAW,IAAI,MAAM,CAAC,kBAAkB,CAAC,IAAI,EAAE,EAAE,CAAC;QACzD,MAAM,KAAK,GAAG,KAAK,CAAC,WAAW,CAAC,CAAC;QACjC,IAAI,KAAK;YAAE,KAAK,CAAC,YAAY,GAAG,MAAM,CAAC,kBAAkB,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;IAC/E,CAAC;IACD,OAAO,MAAM,CAAC;AAClB,CAAC;AAED;;;;;;GAMG;AACH,uGAAuG;AACvG,SAAgB,iBAAiB,CAAC,IAAmB;IACjD,MAAM,SAAS,GAAiB,EAAE,CAAC;IACnC,KAAK,MAAM,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC;QACjD,MAAM,IAAI,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAE,CAAC;QACrC,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC;YAAE,SAAS;QACxC,MAAM,QAAQ,GAAgB;YAC1B,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,OAAO,EAAE,IAAI,CAAC,IAAI;YAClB,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,OAAO,EAAE,IAAI,CAAC,OAAO;SACxB,CAAC;QACF,SAAS,CAAC,GAAG,CAAC,GAAG,QAAQ,CAAC;IAC9B,CAAC;IACD,OAAO,SAAS,CAAC;AACrB,CAAC;AAED;;;;;GAKG;AACH,oGAAoG;AACpG,SAAgB,+BAA+B,CAAC,SAAuB;IACnE,MAAM,aAAa,GAA4C;QAC3D,GAAG,EAAE,CAAC,KAAK,EAAE,UAAU,CAAC;QACxB,MAAM,EAAE,CAAC,YAAY,EAAE,MAAM,EAAE,UAAU,CAAC;KAC7C,CAAC;IACF,MAAM,QAAQ,GAAa,EAAE,CAAC;IAC9B,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;QACvC,MAAM,QAAQ,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC;QAChC,MAAM,OAAO,GAAG,aAAa,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;QAChD,IAAI,OAAO,KAAK,SAAS;YAAE,SAAS;QACpC,KAAK,MAAM,MAAM,IAAI,QAAQ,CAAC,OAAO,EAAE,CAAC;YACpC,IAAI,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC;gBAAE,SAAS;YAC5C,QAAQ,CAAC,IAAI,CACT,GAAG,GAAG,IAAI,MAAM,CAAC,IAAI,wBAAwB,MAAM,CAAC,IAAI,OAAO,MAAM,CAAC,IAAI,UAAU,GAAG,MAAM;gBACzF,IAAI,QAAQ,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,wBAAwB,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CACzG,CAAC;QACN,CAAC;IACL,CAAC;IACD,OAAO,QAAQ,CAAC;AACpB,CAAC;AAED;;;;GAIG;AACH,oGAAoG;AACpG,SAAgB,0BAA0B,CAAC,KAA0B;IACjE,MAAM,KAAK,GAAG;QACV,OAAO,KAAK,CAAC,MAAM,oFAAoF;QACvG,qGAAqG;KACxG,CAAC;IACF,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACvB,KAAK,CAAC,IAAI,CAAC,UAAU,IAAI,CAAC,GAAG,OAAO,IAAI,CAAC,EAAE,KAAK,IAAI,CAAC,OAAO,mBAAmB,IAAI,CAAC,UAAU,EAAE,CAAC,CAAC;IACtG,CAAC;IACD,KAAK,CAAC,IAAI,CACN,kGAAkG,EAClG,oGAAoG,EACpG,wEAAwE,CAC3E,CAAC;IACF,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC5B,CAAC;AAED;;;;;;;;;GASG;AACH,iGAAiG;AACjG,SAAS,iBAAiB,CAAC,cAAsB;IAC7C,MAAM,UAAU,GAAG,IAAA,6BAAmB,EAAC,cAAc,CAAC,CAAC;IACvD,IAAI,CAAC,UAAU;QAAE,OAAO,mBAAmB,CAAC,cAAc,EAAE,EAAE,CAAC,CAAC;IAChE,MAAM,IAAI,GAAG,MAAM,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,CAAC,GAAG,EAAE;QACnC,mCAAmC,EAAE,GAAS,EAAE,CAAC,SAAS;KAC7D,CAA2B,CAAC;IAC7B,MAAM,MAAM,GAAG,EAAE,CAAC,gCAAgC,CAAC,UAAU,EAAE,EAAE,EAAE,IAAI,CAAC,CAAC;IACzE,IAAI,CAAC,MAAM;QAAE,OAAO,IAAI,CAAC;IACzB,IAAI,MAAM,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,EAAE,CAAC,aAAa,CAAC,MAAM,CAAC,SAAS,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC;IAC3F,OAAO,mBAAmB,CAAC,cAAc,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC;AAC/D,CAAC;AAED,wGAAwG;AACxG,SAAS,mBAAmB,CAAC,cAAsB,EAAE,OAA2B;IAC5E,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,KAAK,CAAC,CAAC;IAChD,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,MAAM,CAAC;QAAE,OAAO,IAAI,CAAC;IACxC,MAAM,KAAK,GAAG,IAAA,wBAAc,EAAC,MAAM,CAAC,CAAC;IACrC,OAAO,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,aAAa,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;AACtE,CAAC","sourcesContent":["/**\n * API Usage Scanner\n *\n * Derives, by scanning real source (not a declaration file), how every project\n * relates to the api-lib projects it depends on. This is the single source of\n * truth for the `apiRelations` field in architecture/dependencies.json AND for\n * the runtime microservice graph.\n *\n * Signals (all resolved through the TypeScript checker, so re-exports resolve):\n *   - IMPLEMENTS: `apiFactory.addRoutes(XxxApi, XxxController)` — the registration\n *                 that actually SERVES the contract over the wire. We deliberately\n *                 do NOT use `class Ctrl extends XxxApi`: a class can extend an API\n *                 as an in-process test double / simulator (e.g. Server2Simulator)\n *                 without ever serving it — only `addRoutes` proves a served route.\n *   - USES:       `factory.createRpcClient(XxxApi, ...)`    → rpc client\n *                 `factory.createPubSubClient(XxxApi, ...)` → pubsub (Cloud Tasks) client\n *                 The config argument (`new ClientConfig('helper-fsdb')`) names WHICH service the\n *                 client talks to and is kept as `ApiRef.targetService` — see targetServiceOf.\n * An api-lib is DETECTED, not tagged: a project exporting an `abstract class`\n * carrying `@ApiPath` owns that API. Its transport is `@PubSub` → 'pubsub', else 'rpc'.\n *\n * Contracts are indexed from SOURCE in a pre-pass (ApiSourceIndexBuilder) rather than\n * from wherever the checker resolves an import to. A consumer without a tsconfig.base\n * `paths` entry resolves `import { XxxApi } from '@scope/xxx-api'` through node_modules\n * to the package's BUILT `dist/**.d.ts` — and tsc ERASES decorators when emitting\n * declarations, so `@ApiPath` can never be read there. Keying off the resolved\n * declaration therefore dropped whole services from the graph, silently. See\n * `recoverFromDeclaration`.\n */\n\nimport * as ts from 'typescript';\nimport * as fs from 'fs';\nimport * as path from 'path';\nimport { matchesAnyGlob } from '@webpieces/rules-config';\nimport type { EnhancedGraph } from '../graph-sorter';\nimport { ProjectInfo } from '../project-info';\nimport { findProjectTsconfig } from '../di-graph/program';\nimport { resolveClassDeclaration } from '../di-graph/bindings';\nimport {\n    ApiClassInfo,\n    ApiContract,\n    ApiContracts,\n    ApiRef,\n    ApiRelation,\n    EndpointKind,\n    ProjectApiRelations,\n    apiRefKey,\n    deriveApiRelationKind,\n    sortApiRefs,\n} from './api-relations';\nimport {\n    apiClassInfoFrom,\n    apiClassInfoFromNode,\n    calleeMethodName,\n    collectTsFiles,\n    constructorParamsOf,\n    externalApiInfoFrom,\n    implementedTypeNames,\n    isAbstractClass,\n    isTestFile,\n    targetServiceOf,\n    typeReferenceName,\n} from './api-ast';\n\nconst RPC_CLIENT_METHOD = 'createRpcClient';\nconst PUBSUB_CLIENT_METHOD = 'createPubSubClient';\nconst ADD_ROUTES_METHOD = 'addRoutes';\n\n/**\n * An `addRoutes`/`createRpcClient`/`createPubSubClient` first argument that resolved to an\n * abstract class in a DECLARATION file which owns no indexed contract. Unambiguously a broken\n * scan (a real api-lib whose source we never indexed), never a \"this isn't an API\" argument —\n * so it is reported loudly instead of collapsing into a silent `return null`.\n */\nexport class UnresolvedApiCall {\n    constructor(\n        /** The project whose source makes the call. */\n        public readonly project: string,\n        /** The contract class name as written at the call site. */\n        public readonly api: string,\n        /** `path/to/file.ts:LINE` of the call site, workspace-relative. */\n        public readonly at: string,\n        /** The declaration file the checker resolved to (where decorators are erased). */\n        public readonly declaredIn: string,\n    ) {}\n}\n\n/** The whole-workspace result of a scan. */\nexport interface ApiScanResult {\n    /** projectName -> { apiLibProject -> relation }; only projects with ≥1 relation appear. */\n    relationsByProject: Map<string, ProjectApiRelations>;\n    /** Every project that owns ≥1 API contract class. */\n    apiLibProjects: Set<string>;\n    /** apiClassName -> where it lives + its transport. */\n    apiIndex: Map<string, ApiClassInfo>;\n    /**\n     * Projects whose production (non-test) source was actually scanned. A project with only test\n     * files (e.g. an e2e harness), or one the compiler couldn't load, is ABSENT — callers must not\n     * conclude \"no implements/uses\" for it, because its behavior was never observed.\n     */\n    scannedProjects: Set<string>;\n    /**\n     * Call sites naming a contract we could not map back to workspace source. Non-empty means the\n     * graph is INCOMPLETE — callers must surface these rather than emit a green, wrong graph.\n     */\n    unresolvedApiCalls: UnresolvedApiCall[];\n}\n\n/** Maps an absolute source-file path to the workspace project that owns it (longest-root-prefix). */\nclass ProjectLocator {\n    private readonly roots: ProjectRoot[];\n\n    constructor(workspaceRoot: string, projectInfos: Map<string, ProjectInfo>) {\n        const roots: ProjectRoot[] = [];\n        for (const info of projectInfos.values()) {\n            if (info.root === '' || info.root === '.') continue;\n            roots.push(new ProjectRoot(info.name, path.resolve(workspaceRoot, info.root)));\n        }\n        // Longest root first so a nested project wins over its parent.\n        this.roots = roots.sort((a: ProjectRoot, b: ProjectRoot) => b.abs.length - a.abs.length);\n    }\n\n    projectOf(absFile: string): string | null {\n        const normalized = path.resolve(absFile);\n        for (const root of this.roots) {\n            if (normalized === root.abs || normalized.startsWith(root.abs + path.sep)) return root.name;\n        }\n        return null;\n    }\n}\n\nclass ProjectRoot {\n    constructor(\n        public readonly name: string,\n        public readonly abs: string,\n    ) {}\n}\n\n/**\n * Every API contract in the workspace, keyed by class name, read from SOURCE.\n *\n * Name-keyed because a call site only ever gives us a name once its import has resolved into a\n * decorator-erased declaration. Two api-libs exporting the same class name collide (last wins) —\n * the same collision the published `apiIndex` has always had.\n */\nclass ApiSourceIndex {\n    constructor(\n        public readonly byName: Map<string, ApiClassInfo>,\n        public readonly owners: Set<string>,\n    ) {}\n\n    lookup(api: string): ApiClassInfo | null {\n        return this.byName.get(api) ?? null;\n    }\n}\n\n/**\n * Builds the ApiSourceIndex by parsing each project's own `src/**` directly.\n *\n * Deliberately parser-only (no ts.Program, no checker): we need the decorators exactly as\n * written, and a plain parse cannot be diverted to a `.d.ts` by module resolution — which is\n * the entire bug this guards against. It is also cheap enough to run over every project.\n */\nclass ApiSourceIndexBuilder {\n    private readonly byName = new Map<string, ApiClassInfo>();\n    private readonly owners = new Set<string>();\n\n    constructor(\n        private readonly workspaceRoot: string,\n        private readonly projectInfos: Map<string, ProjectInfo>,\n        /** Globs of project roots holding vendor contracts — see ExternalApiIndex. */\n        private readonly externalApiPaths: readonly string[],\n    ) {}\n\n    build(): ApiSourceIndex {\n        for (const info of this.projectInfos.values()) {\n            if (info.root === '' || info.root === '.') continue;\n            this.indexProject(info);\n        }\n        return new ApiSourceIndex(this.byName, this.owners);\n    }\n\n    private indexProject(info: ProjectInfo): void {\n        const srcDir = path.join(path.resolve(this.workspaceRoot, info.root), 'src');\n        if (!fs.existsSync(srcDir)) return;\n        const external = matchesAnyGlob(info.root, this.externalApiPaths);\n        for (const file of collectTsFiles(srcDir)) {\n            if (isTestFile(file)) continue; // tests are not production topology\n            const text = fs.readFileSync(file, 'utf8');\n            const sourceFile = ts.createSourceFile(file, text, ts.ScriptTarget.Latest, true);\n            this.indexNode(sourceFile, info.name, external);\n        }\n    }\n\n    private indexNode(node: ts.Node, project: string, external: boolean): void {\n        const info = external ? externalApiInfoFrom(node, project) : apiClassInfoFromNode(node, project);\n        if (info) {\n            this.owners.add(project);\n            this.byName.set(info.api, info);\n        }\n        ts.forEachChild(node, (child: ts.Node) => this.indexNode(child, project, external));\n    }\n}\n/** Per-owner accumulator that dedupes API refs while a single project is scanned. */\nclass RelationAccumulator {\n    private readonly implementsByOwner = new Map<string, Map<string, ApiRef>>();\n    private readonly usesByOwner = new Map<string, Map<string, ApiRef>>();\n\n    addImplements(owner: string, ref: ApiRef): void {\n        ensureRefMap(this.implementsByOwner, owner).set(apiRefKey(ref), ref);\n    }\n\n    /**\n     * Keyed by api + targetService: one project legitimately binds the SAME contract against two\n     * different services (a WarmupApi client per data server), and those are two relations, not one.\n     */\n    addUses(owner: string, ref: ApiRef): void {\n        ensureRefMap(this.usesByOwner, owner).set(apiRefKey(ref), ref);\n    }\n\n    /** Build the deterministic { owner -> relation } record, owners in sorted order. */\n    toRelations(): ProjectApiRelations {\n        const owners = new Set<string>([...this.implementsByOwner.keys(), ...this.usesByOwner.keys()]);\n        const relations: ProjectApiRelations = {};\n        for (const owner of [...owners].sort()) {\n            const implementsRefs = sortApiRefs([...(this.implementsByOwner.get(owner)?.values() ?? [])]);\n            const usesRefs = sortApiRefs([...(this.usesByOwner.get(owner)?.values() ?? [])]);\n            const relation: ApiRelation = {\n                kind: deriveApiRelationKind(implementsRefs, usesRefs),\n                implements: implementsRefs,\n                uses: usesRefs,\n            };\n            relations[owner] = relation;\n        }\n        return relations;\n    }\n\n    isEmpty(): boolean {\n        return this.implementsByOwner.size === 0 && this.usesByOwner.size === 0;\n    }\n}\n\n// webpieces-disable no-function-outside-class -- tiny map helper, matching the AST-helper style of di-graph/bindings.ts\nfunction ensureRefMap(map: Map<string, Map<string, ApiRef>>, owner: string): Map<string, ApiRef> {\n    let inner = map.get(owner);\n    if (!inner) {\n        inner = new Map<string, ApiRef>();\n        map.set(owner, inner);\n    }\n    return inner;\n}\n\n/** Statically scans every project for its api-lib implements/uses relationships. */\nexport class ApiUsageScanner {\n    private readonly locator: ProjectLocator;\n    private readonly relationsByProject = new Map<string, ProjectApiRelations>();\n    private readonly scannedProjects = new Set<string>();\n    private readonly unresolvedApiCalls: UnresolvedApiCall[] = [];\n    private sourceIndex = new ApiSourceIndex(new Map<string, ApiClassInfo>(), new Set<string>());\n\n    constructor(\n        private readonly workspaceRoot: string,\n        private readonly projectInfos: Map<string, ProjectInfo>,\n        /** Globs of project roots whose exported `*Api` types are contracts for outside systems. */\n        private readonly externalApiPaths: readonly string[] = [],\n    ) {\n        this.locator = new ProjectLocator(workspaceRoot, projectInfos);\n    }\n\n    scan(): ApiScanResult {\n        // Pre-pass: every contract, from source, BEFORE any call site is resolved — a call site in\n        // one project routinely names a contract owned by a project we have not walked yet.\n        this.sourceIndex = new ApiSourceIndexBuilder(\n            this.workspaceRoot,\n            this.projectInfos,\n            this.externalApiPaths,\n        ).build();\n        for (const info of this.projectInfos.values()) {\n            if (info.root === '' || info.root === '.') continue;\n            this.scanProject(info);\n        }\n        return {\n            relationsByProject: this.relationsByProject,\n            apiLibProjects: this.sourceIndex.owners,\n            apiIndex: this.sourceIndex.byName,\n            scannedProjects: this.scannedProjects,\n            unresolvedApiCalls: this.unresolvedApiCalls,\n        };\n    }\n\n    private scanProject(info: ProjectInfo): void {\n        const program = createScanProgram(path.resolve(this.workspaceRoot, info.root));\n        if (!program) return;\n        const checker = program.getTypeChecker();\n        const accumulator = new RelationAccumulator();\n        let scannedProductionFile = false;\n\n        for (const sourceFile of program.getSourceFiles()) {\n            if (sourceFile.isDeclarationFile || sourceFile.fileName.includes('/node_modules/')) continue;\n            if (isTestFile(sourceFile.fileName)) continue; // tests are not production topology\n            // Only this project's OWN files — imported api-lib source is in the program too.\n            if (this.locator.projectOf(sourceFile.fileName) !== info.name) continue;\n            scannedProductionFile = true;\n            this.visit(sourceFile, checker, info.name, accumulator);\n        }\n\n        // Record coverage only when we actually saw production source — an all-test project (e2e)\n        // stays absent so the validator won't wrongly flag its api-lib deps as unused.\n        if (scannedProductionFile) this.scannedProjects.add(info.name);\n        if (!accumulator.isEmpty()) this.relationsByProject.set(info.name, accumulator.toRelations());\n    }\n\n    private visit(node: ts.Node, checker: ts.TypeChecker, project: string, acc: RelationAccumulator): void {\n        // In-repo contract classes are indexed by the source pre-pass, so only calls matter for them.\n        if (ts.isCallExpression(node)) this.recordCall(node, checker, project, acc);\n        // A VENDOR contract has no client-factory call site to key off — it arrives by injection —\n        // so classes have to be inspected too.\n        if (ts.isClassDeclaration(node)) this.recordExternalUses(node, acc);\n        ts.forEachChild(node, (child: ts.Node) => this.visit(child, checker, project, acc));\n    }\n\n    /**\n     * Record a `uses` for every vendor contract this class receives by CONSTRUCTOR INJECTION —\n     * `constructor(@inject(GMAIL_TYPES.GmailApi) private readonly gmail: GmailApi)`.\n     *\n     * The parameter TYPE is the signal, not the token: a token is an opaque Symbol whose name we\n     * would have to guess at, while the type is written right there and is what the class actually\n     * calls. Matching happens by name against the external index, so an import that resolves to a\n     * built `.d.ts` works exactly as well as one resolving to source.\n     *\n     * A class that IMPLEMENTS the contract is skipped — that is the vendor adapter (`GmailClient`)\n     * or a test double (`InMemoryFirestore`, `MockTts`), which IS the seam rather than a caller of\n     * it. Counting those would draw an edge from every service embedding a fake to a vendor it never\n     * actually reaches.\n     */\n    private recordExternalUses(cls: ts.ClassDeclaration, acc: RelationAccumulator): void {\n        const implemented = implementedTypeNames(cls);\n        for (const param of constructorParamsOf(cls)) {\n            const typeName = typeReferenceName(param.type);\n            if (typeName === null || implemented.has(typeName)) continue;\n            const info = this.sourceIndex.lookup(typeName);\n            if (info === null || info.type !== 'external') continue;\n            acc.addUses(info.owner, { api: info.api, type: 'external' });\n        }\n    }\n\n    private recordCall(\n        call: ts.CallExpression,\n        checker: ts.TypeChecker,\n        project: string,\n        acc: RelationAccumulator,\n    ): void {\n        const method = calleeMethodName(call);\n        if (method === null || call.arguments.length === 0) return;\n        if (method === ADD_ROUTES_METHOD) {\n            const info = this.apiInfoFromExpr(call.arguments[0], checker, project);\n            if (info) acc.addImplements(info.owner, { api: info.api, type: info.type });\n            return;\n        }\n        if (method === RPC_CLIENT_METHOD || method === PUBSUB_CLIENT_METHOD) {\n            const info = this.apiInfoFromExpr(call.arguments[0], checker, project);\n            if (!info) return;\n            // Argument 2 names WHICH service this client talks to. Keeping it is what lets the\n            // runtime graph draw ONE edge instead of one per implementer of the contract.\n            const targetService = targetServiceOf(call);\n            const ref: ApiRef = { api: info.api, type: info.type };\n            if (targetService !== null) ref.targetService = targetService;\n            acc.addUses(info.owner, ref);\n        }\n    }\n\n    /** Resolve an expression to the API contract it names, or null if it is not one. */\n    private apiInfoFromExpr(expr: ts.Expression, checker: ts.TypeChecker, project: string): ApiClassInfo | null {\n        const decl = resolveClassDeclaration(expr, checker);\n        if (!decl) return null;\n        const fromSource = this.apiClassInfoFor(decl);\n        return fromSource ?? this.recoverFromDeclaration(decl, expr, project);\n    }\n\n    /**\n     * The checker landed on a BUILT declaration instead of source — the consumer has no\n     * tsconfig.base `paths` entry for the api-lib, so the import went through node_modules to\n     * `dist/**.d.ts`. tsc erases decorators when emitting declarations, so `@ApiPath` is simply\n     * not there and never will be. Recover the contract by name from the source index; the graph\n     * is then correct no matter how the consumer's tsconfig is laid out.\n     */\n    private recoverFromDeclaration(\n        decl: ts.ClassDeclaration,\n        expr: ts.Expression,\n        project: string,\n    ): ApiClassInfo | null {\n        // An abstract class is the shape of a contract; a non-abstract argument is genuinely not one.\n        if (!decl.getSourceFile().isDeclarationFile || !isAbstractClass(decl) || !decl.name) return null;\n        const recovered = this.sourceIndex.lookup(decl.name.text);\n        if (recovered) return recovered;\n        // Abstract, in a .d.ts, yet no workspace source owns it — the scan is blind here. Say so.\n        this.unresolvedApiCalls.push(\n            new UnresolvedApiCall(\n                project,\n                decl.name.text,\n                this.relativeLocation(expr),\n                this.relativePath(decl.getSourceFile().fileName),\n            ),\n        );\n        return null;\n    }\n\n    /** `path/to/file.ts:LINE` for `node`, workspace-relative, for a human-readable report. */\n    private relativeLocation(node: ts.Node): string {\n        const sourceFile = node.getSourceFile();\n        const position = sourceFile.getLineAndCharacterOfPosition(node.getStart());\n        return `${this.relativePath(sourceFile.fileName)}:${position.line + 1}`;\n    }\n\n    private relativePath(absFile: string): string {\n        return path.relative(this.workspaceRoot, absFile);\n    }\n\n    /**\n     * {api, owner, type, methods} when `cls` is an `abstract class` carrying `@ApiPath` IN SOURCE,\n     * else null. Only the OWNER differs from the index pre-pass — here it comes from the file's\n     * location rather than from the project being walked — so the contract test itself is delegated\n     * to apiClassInfoFrom, keeping one definition of \"this is a contract\".\n     */\n    private apiClassInfoFor(cls: ts.ClassDeclaration): ApiClassInfo | null {\n        const owner = this.locator.projectOf(cls.getSourceFile().fileName);\n        if (owner === null) return null;\n        return apiClassInfoFrom(cls, owner);\n    }\n}\n\n/**\n * Run the scan and attach the derived `apiRelations` onto each graph entry in\n * place. Shared by `architecture:generate` (which then saves) and\n * `architecture:validate-architecture-unchanged` (which regenerates in memory\n * and must attach the SAME field, or it would see a phantom diff). Returns the\n * full scan so callers (validators, runtime graph) can reuse the api index.\n */\n// webpieces-disable no-function-outside-class -- module entry point, mirrors generateReducedGraph/collectBindings\nexport function scanAndAttachApiRelations(\n    workspaceRoot: string,\n    graph: EnhancedGraph,\n    projectInfos: Map<string, ProjectInfo>,\n    externalApiPaths: readonly string[] = [],\n): ApiScanResult {\n    const result = new ApiUsageScanner(workspaceRoot, projectInfos, externalApiPaths).scan();\n    for (const projectName of result.relationsByProject.keys()) {\n        const entry = graph[projectName];\n        if (entry) entry.apiRelations = result.relationsByProject.get(projectName);\n    }\n    return result;\n}\n\n/**\n * The committed `apiContracts` table for architecture/dependencies.json, from a completed scan.\n *\n * Only contracts with ≥1 endpoint are emitted: a vendor seam has no routes, so a table entry for it\n * would be an empty shell, and its identity is already carried by the `external` refs in\n * apiRelations. Sorted by api name, methods left in declaration order, so the file is deterministic.\n */\n// webpieces-disable no-function-outside-class -- module entry point, mirrors scanAndAttachApiRelations\nexport function buildApiContracts(scan: ApiScanResult): ApiContracts {\n    const contracts: ApiContracts = {};\n    for (const api of [...scan.apiIndex.keys()].sort()) {\n        const info = scan.apiIndex.get(api)!;\n        if (info.methods.length === 0) continue;\n        const contract: ApiContract = {\n            owner: info.owner,\n            apiKind: info.type,\n            basePath: info.basePath,\n            methods: info.methods,\n        };\n        contracts[api] = contract;\n    }\n    return contracts;\n}\n\n/**\n * Every contract method whose declared @Endpoint kind its api kind cannot deliver — an rpc method on\n * a @PubSub contract (nothing calls a queue synchronously), or a cloudtasks/cron method on an @Rpc\n * contract (naming a queue or schedule nothing could deliver to). Mirrors core-util's\n * ENDPOINT_KINDS_BY_API_KIND at BUILD time, where it can name the file instead of throwing at wiring.\n */\n// webpieces-disable no-function-outside-class -- pure formatter, mirrors describeUnresolvedApiCalls\nexport function describeMismatchedEndpointKinds(contracts: ApiContracts): string[] {\n    const allowedByKind: Record<string, readonly EndpointKind[]> = {\n        rpc: ['rpc', 'external'],\n        pubsub: ['cloudtasks', 'cron', 'external'],\n    };\n    const problems: string[] = [];\n    for (const api of Object.keys(contracts)) {\n        const contract = contracts[api];\n        const allowed = allowedByKind[contract.apiKind];\n        if (allowed === undefined) continue;\n        for (const method of contract.methods) {\n            if (allowed.includes(method.kind)) continue;\n            problems.push(\n                `${api}.${method.name} declares @Endpoint('${method.path}', '${method.kind}') but ${api} is ` +\n                    `@${contract.apiKind === 'pubsub' ? 'PubSub' : 'Rpc'} — allowed kinds are ${allowed.join(' | ')}.`,\n            );\n        }\n    }\n    return problems;\n}\n\n/**\n * Loud, actionable report for contracts the scan could not map to source. Callers print this\n * instead of emitting a green graph that is quietly missing relations. Not fatal: a contract\n * from a genuinely EXTERNAL (published, non-workspace) api-lib legitimately has no source here.\n */\n// webpieces-disable no-function-outside-class -- pure formatter, mirrors describeUnclassifiedApiDep\nexport function describeUnresolvedApiCalls(calls: UnresolvedApiCall[]): string {\n    const lines = [\n        `⚠️  ${calls.length} API contract(s) resolved to a declaration file with no matching workspace source.`,\n        `   Decorators (@ApiPath) are ERASED in .d.ts output, so these relations are MISSING from the graph:`,\n    ];\n    for (const call of calls) {\n        lines.push(`     • ${call.api} at ${call.at} (${call.project}) → resolved to ${call.declaredIn}`);\n    }\n    lines.push(\n        `   If the api-lib IS in this workspace, add a tsconfig.base.json 'paths' entry mapping it to its`,\n        `   src/index.ts, or confirm its project root is registered. If it is a published external package,`,\n        `   this relation cannot be derived and the graph edge will not appear.`,\n    );\n    return lines.join('\\n');\n}\n\n/**\n * Build a program for scanning ONE project. Prefers the project's compile tsconfig; but when that\n * is a solution-style tsconfig (only `references`, no `files`/`include` — e.g. legacy-server), it\n * yields zero files, so we fall back to globbing the project's own `src/**` and reuse the resolved\n * compiler options (which carry tsconfig.base `paths` for cross-package @webpieces resolution).\n *\n * `paths` is a PREFERENCE, not a precondition: it lets imports resolve straight to source. Without\n * it they land on a decorator-erased `dist/**.d.ts`, which the source index recovers from — see\n * ApiUsageScanner.recoverFromDeclaration.\n */\n// webpieces-disable no-function-outside-class -- ts Program factory, mirrors di-graph/program.ts\nfunction createScanProgram(projectRootAbs: string): ts.Program | null {\n    const configPath = findProjectTsconfig(projectRootAbs);\n    if (!configPath) return buildProgramFromSrc(projectRootAbs, {});\n    const host = Object.assign({}, ts.sys, {\n        onUnRecoverableConfigFileDiagnostic: (): void => undefined,\n    }) as ts.ParseConfigFileHost;\n    const parsed = ts.getParsedCommandLineOfConfigFile(configPath, {}, host);\n    if (!parsed) return null;\n    if (parsed.fileNames.length > 0) return ts.createProgram(parsed.fileNames, parsed.options);\n    return buildProgramFromSrc(projectRootAbs, parsed.options);\n}\n\n// webpieces-disable no-function-outside-class -- ts Program factory helper, mirrors di-graph/program.ts\nfunction buildProgramFromSrc(projectRootAbs: string, options: ts.CompilerOptions): ts.Program | null {\n    const srcDir = path.join(projectRootAbs, 'src');\n    if (!fs.existsSync(srcDir)) return null;\n    const files = collectTsFiles(srcDir);\n    return files.length > 0 ? ts.createProgram(files, options) : null;\n}\n"]}

package/src/lib/graph-loader.d.ts

@@ -23,6 +23,7 @@
  * "re-run architecture:generate" diff instead of a parse failure.
  */
 import type { EnhancedGraph } from './graph-sorter';
+import type { ApiContracts } from './api-usage/api-relations';
 /**
  * Default path for the dependencies file (relative to workspace root)
  */
@@ -49,7 +50,25 @@ export declare class DependenciesFile {
     readonly aiInstructions: string;
     readonly commands: CommandMap;
     readonly projects: EnhancedGraph;
-    constructor(aiInstructions: string, commands: CommandMap, projects: EnhancedGraph);
+    /**
+     * Every API contract's per-method trigger table (kind + queue name + path).
+     *
+     * MUST be persisted, for the same reason `callsService` must: the runtime graph is derived
+     * SOLELY from this file, and `validate-runtime-architecture` re-derives from the LOADED copy
+     * while generate derives from the in-memory one. A field that is scanned but not written
+     * makes those two inputs differ, and the validator reports a diff no one can fix.
+     */
+    readonly apiContracts: ApiContracts;
+    constructor(aiInstructions: string, commands: CommandMap, projects: EnhancedGraph, 
+    /**
+     * Every API contract's per-method trigger table (kind + queue name + path).
+     *
+     * MUST be persisted, for the same reason `callsService` must: the runtime graph is derived
+     * SOLELY from this file, and `validate-runtime-architecture` re-derives from the LOADED copy
+     * while generate derives from the in-memory one. A field that is scanned but not written
+     * makes those two inputs differ, and the validator reports a diff no one can fix.
+     */
+    apiContracts?: ApiContracts);
 }
 /**
  * Load the blessed graph from disk. Understands both the current wrapper
@@ -67,7 +86,7 @@ export declare function loadBlessedGraph(workspaceRoot: string, graphPath?: stri
  * @param workspaceRoot - Absolute path to workspace root
  * @param graphPath - Relative path to graph file (default: architecture/dependencies.json)
  */
-export declare function saveGraph(graph: EnhancedGraph, workspaceRoot: string, graphPath?: string): void;
+export declare function saveGraph(graph: EnhancedGraph, workspaceRoot: string, graphPath?: string, apiContracts?: ApiContracts): void;
 /**
  * Check if the graph file exists
  */