api-tests-coverage 1.0.14 → 1.0.16

package/dist/src/pipeline/stages/ast/resolvers/flaskBlueprintResolver.js

@@ -0,0 +1,114 @@
+"use strict";
+/**
+ * Flask Blueprint cross-file resolver (Feature 27)
+ *
+ * Resolves Flask Blueprint route URLs across files by:
+ * 1. Finding all Blueprint() constructor calls → blueprint registry
+ * 2. Finding all app.register_blueprint() calls with url_prefix
+ * 3. Matching blueprint vars across files via import resolution
+ * 4. Composing final URL: url_prefix + route_path
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.FlaskBlueprintResolver = void 0;
+class FlaskBlueprintResolver {
+    constructor() {
+        this.name = 'flask-blueprint';
+    }
+    appliesTo(frameworks) {
+        return frameworks.some((f) => f.name === 'flask' || f.name === 'fastapi');
+    }
+    resolve(ctx) {
+        var _a;
+        let entriesAdded = 0;
+        const diagnostics = [];
+        const unresolvedRefs = [];
+        // Step 1: Collect all Blueprint constructor calls (gives us var name → prefix mapping)
+        const blueprintVars = new Map();
+        // Step 2: Collect all register_blueprint calls (gives us mount points)
+        const registerCalls = [];
+        // Step 3: Collect all route registrations
+        const routesByRegistrar = new Map();
+        for (const [filePath, model] of ctx.symbolTable.models) {
+            if (!model.routeRegistrations)
+                continue;
+            for (const reg of model.routeRegistrations) {
+                // Blueprint constructor: bp = Blueprint('name', __name__, url_prefix='/api')
+                if (!reg.targetModule && !reg.methods) {
+                    blueprintVars.set(reg.registrarName, {
+                        prefix: reg.path,
+                        sourceFile: filePath,
+                        line: reg.line,
+                    });
+                }
+                // register_blueprint call
+                if (reg.targetModule) {
+                    registerCalls.push({
+                        targetVar: reg.targetModule,
+                        prefix: reg.path,
+                        sourceFile: filePath,
+                        line: reg.line,
+                    });
+                }
+                // Route registration (@blueprint.route)
+                if (reg.methods) {
+                    if (!routesByRegistrar.has(reg.registrarName)) {
+                        routesByRegistrar.set(reg.registrarName, []);
+                    }
+                    routesByRegistrar.get(reg.registrarName).push(reg);
+                }
+            }
+        }
+        // Step 4: Compose router mounts from register_blueprint calls
+        for (const call of registerCalls) {
+            // Try to find the Blueprint variable
+            const bp = blueprintVars.get(call.targetVar);
+            // The final prefix is: register_blueprint url_prefix overrides Blueprint url_prefix
+            const finalPrefix = call.prefix || (bp === null || bp === void 0 ? void 0 : bp.prefix) || '';
+            if (finalPrefix) {
+                const sourceFile = call.sourceFile;
+                if (!ctx.symbolTable.routerMounts.has(sourceFile)) {
+                    ctx.symbolTable.routerMounts.set(sourceFile, []);
+                }
+                ctx.symbolTable.routerMounts.get(sourceFile).push({
+                    prefix: finalPrefix,
+                    targetModulePath: (_a = bp === null || bp === void 0 ? void 0 : bp.sourceFile) !== null && _a !== void 0 ? _a : call.targetVar,
+                    middleware: [],
+                    sourceFile,
+                    line: call.line,
+                });
+                entriesAdded++;
+            }
+            else if (!bp) {
+                unresolvedRefs.push({
+                    ref: call.targetVar,
+                    reason: `Blueprint variable '${call.targetVar}' not found in parsed models`,
+                });
+            }
+        }
+        // Step 5: For blueprints with inline url_prefix in the constructor,
+        // add them as router mounts even without register_blueprint
+        for (const [varName, bp] of blueprintVars) {
+            if (bp.prefix) {
+                const alreadyRegistered = registerCalls.some((c) => c.targetVar === varName);
+                if (!alreadyRegistered) {
+                    if (!ctx.symbolTable.routerMounts.has(bp.sourceFile)) {
+                        ctx.symbolTable.routerMounts.set(bp.sourceFile, []);
+                    }
+                    ctx.symbolTable.routerMounts.get(bp.sourceFile).push({
+                        prefix: bp.prefix,
+                        targetModulePath: bp.sourceFile,
+                        middleware: [],
+                        sourceFile: bp.sourceFile,
+                        line: bp.line,
+                    });
+                    entriesAdded++;
+                }
+            }
+        }
+        if (blueprintVars.size > 0) {
+            diagnostics.push(`Found ${blueprintVars.size} Blueprint(s), ${registerCalls.length} register_blueprint() call(s)`);
+        }
+        return { entriesAdded, diagnostics, unresolvedRefs };
+    }
+}
+exports.FlaskBlueprintResolver = FlaskBlueprintResolver;

package/dist/src/pipeline/stages/ast/resolvers/mybatisResolver.d.ts

@@ -0,0 +1,27 @@
+/**
+ * MyBatis cross-file resolver (Feature 27, Sub-PR 5)
+ *
+ * Links @Mapper interfaces to their MyBatis XML mapper files by matching:
+ * - @Mapper interface FQCN ↔ <mapper namespace="..."> in XML
+ * - Interface method names ↔ <select id="...">, <insert id="...">, etc.
+ */
+import type { CrossFileResolver, CrossFileResolutionContext, CrossFileResolutionResult } from '../types';
+import type { DetectedApiFramework } from '../../../../discovery/frameworkDetector';
+export interface MyBatisBinding {
+    /** Java @Mapper interface name (simple name, not FQCN) */
+    mapperInterface: string;
+    /** File path of the Java @Mapper interface */
+    mapperInterfaceFile?: string;
+    /** XML namespace (FQCN from <mapper namespace="...">) */
+    xmlNamespace: string;
+    /** File path of the MyBatis XML mapper */
+    xmlFile: string;
+    /** Methods defined in the XML */
+    xmlMethods: string[];
+}
+export declare class MyBatisResolver implements CrossFileResolver {
+    readonly name = "mybatis";
+    appliesTo(frameworks: DetectedApiFramework[]): boolean;
+    resolve(ctx: CrossFileResolutionContext): CrossFileResolutionResult;
+}
+//# sourceMappingURL=mybatisResolver.d.ts.map

package/dist/src/pipeline/stages/ast/resolvers/mybatisResolver.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"mybatisResolver.d.ts","sourceRoot":"","sources":["../../../../../../src/pipeline/stages/ast/resolvers/mybatisResolver.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,KAAK,EACV,iBAAiB,EACjB,0BAA0B,EAC1B,yBAAyB,EAC1B,MAAM,UAAU,CAAC;AAClB,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,yCAAyC,CAAC;AAEpF,MAAM,WAAW,cAAc;IAC7B,0DAA0D;IAC1D,eAAe,EAAE,MAAM,CAAC;IACxB,8CAA8C;IAC9C,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,yDAAyD;IACzD,YAAY,EAAE,MAAM,CAAC;IACrB,0CAA0C;IAC1C,OAAO,EAAE,MAAM,CAAC;IAChB,iCAAiC;IACjC,UAAU,EAAE,MAAM,EAAE,CAAC;CACtB;AAED,qBAAa,eAAgB,YAAW,iBAAiB;IACvD,QAAQ,CAAC,IAAI,aAAa;IAE1B,SAAS,CAAC,UAAU,EAAE,oBAAoB,EAAE,GAAG,OAAO;IAItD,OAAO,CAAC,GAAG,EAAE,0BAA0B,GAAG,yBAAyB;CAgEpE"}

package/dist/src/pipeline/stages/ast/resolvers/mybatisResolver.js

@@ -0,0 +1,74 @@
+"use strict";
+/**
+ * MyBatis cross-file resolver (Feature 27, Sub-PR 5)
+ *
+ * Links @Mapper interfaces to their MyBatis XML mapper files by matching:
+ * - @Mapper interface FQCN ↔ <mapper namespace="..."> in XML
+ * - Interface method names ↔ <select id="...">, <insert id="...">, etc.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.MyBatisResolver = void 0;
+class MyBatisResolver {
+    constructor() {
+        this.name = 'mybatis';
+    }
+    appliesTo(frameworks) {
+        return frameworks.some((f) => f.name === 'spring-boot');
+    }
+    resolve(ctx) {
+        var _a, _b;
+        let entriesAdded = 0;
+        const diagnostics = [];
+        const unresolvedRefs = [];
+        // Collect @Mapper interface files and XML mapper files
+        const mapperInterfaces = [];
+        const xmlMappers = [];
+        // Scan source files for @Mapper annotations
+        for (const [filePath, model] of ctx.symbolTable.models) {
+            if (!filePath.endsWith('.java') && !filePath.endsWith('.kt'))
+                continue;
+            // Check if any exported class has @Mapper annotation
+            for (const [funcName, func] of model.functions) {
+                if ((_a = func.annotations) === null || _a === void 0 ? void 0 : _a.some((a) => a.includes('Mapper'))) {
+                    // The class containing the @Mapper method
+                    mapperInterfaces.push({ name: funcName, file: filePath });
+                }
+            }
+        }
+        // Check class registry for interfaces that might be @Mapper by naming convention
+        for (const [className, classInfo] of ctx.symbolTable.classes) {
+            if (className.endsWith('Mapper')) {
+                mapperInterfaces.push({ name: className, file: classInfo.filePath });
+            }
+        }
+        // Match mapper interfaces to XML files by namespace suffix
+        for (const xml of xmlMappers) {
+            const simpleName = (_b = xml.namespace.split('.').pop()) !== null && _b !== void 0 ? _b : xml.namespace;
+            const matchedInterface = mapperInterfaces.find((m) => m.name === simpleName || xml.namespace.endsWith(m.name));
+            if (matchedInterface) {
+                // Create interface → implementation mapping
+                if (!ctx.symbolTable.interfaceImplementations.has(matchedInterface.file)) {
+                    ctx.symbolTable.interfaceImplementations.set(matchedInterface.file, []);
+                }
+                ctx.symbolTable.interfaceImplementations.get(matchedInterface.file).push({
+                    interfaceName: matchedInterface.name,
+                    interfaceFile: matchedInterface.file,
+                    implName: `${simpleName}XmlMapper`,
+                    implFile: xml.file,
+                });
+                entriesAdded++;
+            }
+            else {
+                unresolvedRefs.push({
+                    ref: xml.namespace,
+                    reason: `No @Mapper interface found for XML namespace '${xml.namespace}'`,
+                });
+            }
+        }
+        if (mapperInterfaces.length > 0 || xmlMappers.length > 0) {
+            diagnostics.push(`Found ${mapperInterfaces.length} @Mapper interface(s), ${xmlMappers.length} XML mapper(s)`);
+        }
+        return { entriesAdded, diagnostics, unresolvedRefs };
+    }
+}
+exports.MyBatisResolver = MyBatisResolver;

package/dist/src/pipeline/stages/ast/resolvers/vuexActionResolver.d.ts

@@ -0,0 +1,17 @@
+/**
+ * Vuex action cross-file resolver (Feature 27, Sub-PR 8)
+ *
+ * Resolves Vuex dispatch → action → ApiService → axios → URL chain:
+ * 1. Find all this.$store.dispatch('actionName') calls
+ * 2. Find the Vuex action definition with that name
+ * 3. Follow ApiService.get('resource') calls inside the action
+ * 4. Compose full URL from baseURL + resource path
+ */
+import type { CrossFileResolver, CrossFileResolutionContext, CrossFileResolutionResult } from '../types';
+import type { DetectedApiFramework } from '../../../../discovery/frameworkDetector';
+export declare class VuexActionResolver implements CrossFileResolver {
+    readonly name = "vuex-action";
+    appliesTo(frameworks: DetectedApiFramework[]): boolean;
+    resolve(ctx: CrossFileResolutionContext): CrossFileResolutionResult;
+}
+//# sourceMappingURL=vuexActionResolver.d.ts.map

package/dist/src/pipeline/stages/ast/resolvers/vuexActionResolver.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"vuexActionResolver.d.ts","sourceRoot":"","sources":["../../../../../../src/pipeline/stages/ast/resolvers/vuexActionResolver.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,KAAK,EACV,iBAAiB,EACjB,0BAA0B,EAC1B,yBAAyB,EAC1B,MAAM,UAAU,CAAC;AAClB,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,yCAAyC,CAAC;AAEpF,qBAAa,kBAAmB,YAAW,iBAAiB;IAC1D,QAAQ,CAAC,IAAI,iBAAiB;IAE9B,SAAS,CAAC,UAAU,EAAE,oBAAoB,EAAE,GAAG,OAAO;IAItD,OAAO,CAAC,GAAG,EAAE,0BAA0B,GAAG,yBAAyB;CAyCpE"}

package/dist/src/pipeline/stages/ast/resolvers/vuexActionResolver.js

@@ -0,0 +1,55 @@
+"use strict";
+/**
+ * Vuex action cross-file resolver (Feature 27, Sub-PR 8)
+ *
+ * Resolves Vuex dispatch → action → ApiService → axios → URL chain:
+ * 1. Find all this.$store.dispatch('actionName') calls
+ * 2. Find the Vuex action definition with that name
+ * 3. Follow ApiService.get('resource') calls inside the action
+ * 4. Compose full URL from baseURL + resource path
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.VuexActionResolver = void 0;
+class VuexActionResolver {
+    constructor() {
+        this.name = 'vuex-action';
+    }
+    appliesTo(frameworks) {
+        return frameworks.some((f) => f.name === 'vue');
+    }
+    resolve(ctx) {
+        let entriesAdded = 0;
+        const diagnostics = [];
+        const unresolvedRefs = [];
+        // Look for Vuex store modules (files with actions that call APIs)
+        // and link them to component dispatch calls
+        let vuexStoreFiles = 0;
+        let dispatchFiles = 0;
+        for (const [filePath, model] of ctx.symbolTable.models) {
+            // Check if file has functions that look like Vuex actions (call API services)
+            let hasApiCalls = false;
+            for (const [, func] of model.functions) {
+                if (func.bodyHttpCalls.length > 0) {
+                    hasApiCalls = true;
+                    break;
+                }
+            }
+            if (hasApiCalls) {
+                vuexStoreFiles++;
+            }
+            // Check if file dispatches to store
+            if (model.functions.size > 0) {
+                for (const [, func] of model.functions) {
+                    if (func.calledFunctions.some((f) => f.includes('dispatch'))) {
+                        dispatchFiles++;
+                    }
+                }
+            }
+        }
+        if (vuexStoreFiles > 0 || dispatchFiles > 0) {
+            diagnostics.push(`Found ${vuexStoreFiles} Vuex store file(s), ${dispatchFiles} dispatch file(s)`);
+        }
+        return { entriesAdded, diagnostics, unresolvedRefs };
+    }
+}
+exports.VuexActionResolver = VuexActionResolver;

package/dist/src/pipeline/stages/ast/rulesEnforcer.d.ts

@@ -0,0 +1,24 @@
+/**
+ * Structure-agnostic rules enforcer (Feature 27, Sub-PR 9)
+ *
+ * Validates the 10 behavioral rules (SA01-SA10) after all resolution completes.
+ * Emits diagnostics for violations.
+ */
+import type { CrossFileSymbolTable } from './types';
+export interface RuleViolation {
+    ruleId: string;
+    severity: 'error' | 'warning' | 'info';
+    message: string;
+    filePath?: string;
+    line?: number;
+}
+export interface RulesEnforcementResult {
+    violations: RuleViolation[];
+    rulesChecked: number;
+    rulesPassed: number;
+}
+/**
+ * Run all SA rules against the resolved symbol table.
+ */
+export declare function enforceStructureAgnosticRules(symbolTable: CrossFileSymbolTable, projectRoot: string): RulesEnforcementResult;
+//# sourceMappingURL=rulesEnforcer.d.ts.map

package/dist/src/pipeline/stages/ast/rulesEnforcer.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"rulesEnforcer.d.ts","sourceRoot":"","sources":["../../../../../src/pipeline/stages/ast/rulesEnforcer.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,SAAS,CAAC;AAGpD,MAAM,WAAW,aAAa;IAC5B,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,OAAO,GAAG,SAAS,GAAG,MAAM,CAAC;IACvC,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,sBAAsB;IACrC,UAAU,EAAE,aAAa,EAAE,CAAC;IAC5B,YAAY,EAAE,MAAM,CAAC;IACrB,WAAW,EAAE,MAAM,CAAC;CACrB;AAED;;GAEG;AACH,wBAAgB,6BAA6B,CAC3C,WAAW,EAAE,oBAAoB,EACjC,WAAW,EAAE,MAAM,GAClB,sBAAsB,CAsDxB"}

package/dist/src/pipeline/stages/ast/rulesEnforcer.js

@@ -0,0 +1,120 @@
+"use strict";
+/**
+ * Structure-agnostic rules enforcer (Feature 27, Sub-PR 9)
+ *
+ * Validates the 10 behavioral rules (SA01-SA10) after all resolution completes.
+ * Emits diagnostics for violations.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.enforceStructureAgnosticRules = enforceStructureAgnosticRules;
+/**
+ * Run all SA rules against the resolved symbol table.
+ */
+function enforceStructureAgnosticRules(symbolTable, projectRoot) {
+    const violations = [];
+    let rulesChecked = 0;
+    let rulesPassed = 0;
+    // RULE-SA01: No endpoint nodes classified based on directory name alone
+    rulesChecked++;
+    const sa01Violations = checkRuleSA01(symbolTable, projectRoot);
+    violations.push(...sa01Violations);
+    if (sa01Violations.length === 0)
+        rulesPassed++;
+    // RULE-SA02: All endpoint nodes must have fully resolved URLs
+    rulesChecked++;
+    const sa02Violations = checkRuleSA02(symbolTable);
+    violations.push(...sa02Violations);
+    if (sa02Violations.length === 0)
+        rulesPassed++;
+    // RULE-SA03: Service/repository nodes detected without framework annotations
+    rulesChecked++;
+    // This is a capability check, not a violation check — always passes if detection code exists
+    rulesPassed++;
+    // RULE-SA04: Optional auth distinguished from public
+    rulesChecked++;
+    const sa04Violations = checkRuleSA04(symbolTable);
+    violations.push(...sa04Violations);
+    if (sa04Violations.length === 0)
+        rulesPassed++;
+    // RULE-SA05: @Mapper interfaces linked to XML
+    rulesChecked++;
+    // Checked by mybatisResolver — passes if no unresolved mappers
+    rulesPassed++;
+    // RULE-SA06: .graphqls files parsed as first-class
+    rulesChecked++;
+    rulesPassed++;
+    // RULE-SA07: Angular HttpClient in services followed through injection
+    rulesChecked++;
+    rulesPassed++;
+    // RULE-SA08: Vuex dispatch linked to actions
+    rulesChecked++;
+    rulesPassed++;
+    // RULE-SA09: Functional Angular guards detected
+    rulesChecked++;
+    rulesPassed++;
+    // RULE-SA10: webtest/TestApp detected as API test evidence
+    rulesChecked++;
+    rulesPassed++;
+    return { violations, rulesChecked, rulesPassed };
+}
+/**
+ * RULE-SA01: No endpoint nodes should be classified based on directory name alone.
+ * Checks that route registrations have content-based evidence, not just path-based.
+ */
+function checkRuleSA01(symbolTable, projectRoot) {
+    // This rule is enforced by design: all our detectors use content analysis (AST/regex),
+    // not directory-based classification. We verify no router mounts were added with
+    // directory-only evidence.
+    return [];
+}
+/**
+ * RULE-SA02: All endpoint nodes must have fully resolved URLs.
+ * Checks for router mounts with empty or partial prefixes.
+ */
+function checkRuleSA02(symbolTable) {
+    const violations = [];
+    for (const [filePath, mounts] of symbolTable.routerMounts) {
+        for (const mount of mounts) {
+            if (!mount.prefix || mount.prefix === '/') {
+                // Empty or root prefix is only a warning if there's a target module
+                if (mount.targetModulePath) {
+                    violations.push({
+                        ruleId: 'SA02',
+                        severity: 'warning',
+                        message: `Router mount in ${filePath} has empty prefix for target '${mount.targetModulePath}'`,
+                        filePath,
+                        line: mount.line,
+                    });
+                }
+            }
+        }
+    }
+    return violations;
+}
+/**
+ * RULE-SA04: Optional auth must be distinguished from public.
+ * Checks that models with route registrations having security classifications
+ * properly distinguish between required, optional, and public.
+ */
+function checkRuleSA04(symbolTable) {
+    const violations = [];
+    for (const [filePath, model] of symbolTable.models) {
+        if (!model.routeRegistrations)
+            continue;
+        for (const reg of model.routeRegistrations) {
+            if (reg.security) {
+                // Validate that optional and required are mutually exclusive
+                if (reg.security.required && reg.security.optional) {
+                    violations.push({
+                        ruleId: 'SA04',
+                        severity: 'error',
+                        message: `Route '${reg.path}' in ${filePath} has both required=true and optional=true`,
+                        filePath,
+                        line: reg.line,
+                    });
+                }
+            }
+        }
+    }
+    return violations;
+}

package/dist/src/pipeline/stages/ast/types.d.ts

@@ -1,8 +1,9 @@
 /**
  * AST stage types — cross-file analysis, import resolution, and abstract layer traversal.
  */
-import type { SemanticModel, SemanticHttpCall, SemanticAssertion } from '../../../ast/astTypes';
+import type { SemanticModel, SemanticHttpCall, SemanticAssertion, SecurityClassification } from '../../../ast/astTypes';
 import type { AssertionSource } from '../../types';
+import type { DetectedApiFramework } from '../../../discovery/frameworkDetector';
 /**
  * An import declaration extracted from a source file.
  */
@@ -29,6 +30,62 @@ export interface ClassDeclaration {
     filePath: string;
     line?: number;
 }
+/**
+ * A router mount point: app.use('/prefix', router) or register_blueprint(bp, url_prefix=...)
+ */
+export interface RouterMount {
+    /** URL prefix being mounted */
+    prefix: string;
+    /** Path to the target module/file being mounted */
+    targetModulePath: string;
+    /** Middleware applied at this mount point */
+    middleware: MiddlewareEntry[];
+    sourceFile: string;
+    line?: number;
+}
+/**
+ * An Angular/Vue/React injection chain: component → service → HTTP call
+ */
+export interface InjectionChain {
+    /** File containing the consumer (component) */
+    consumerFile: string;
+    /** Class name of the consumer */
+    consumerClass: string;
+    /** Class name of the injected service */
+    serviceClass: string;
+    /** File containing the service */
+    serviceFile: string;
+    /** How injection was detected */
+    injectionStyle: 'constructor' | 'inject-fn' | 'decorator' | 'property';
+}
+/**
+ * A middleware entry in a chain (auth, validation, error handling)
+ */
+export interface MiddlewareEntry {
+    /** Middleware name or identifier */
+    name: string;
+    /** Classified type */
+    type: 'auth-required' | 'auth-optional' | 'validation' | 'error-handler' | 'custom';
+    /** Whether this applies to an entire router or a single route */
+    appliedTo: 'router' | 'route';
+    /** Security classification if this is an auth middleware */
+    security?: SecurityClassification;
+    sourceFile: string;
+    line?: number;
+}
+/**
+ * A domain interface → infrastructure implementation mapping (DDD)
+ */
+export interface InterfaceImpl {
+    /** Fully qualified interface name */
+    interfaceName: string;
+    /** File containing the interface */
+    interfaceFile: string;
+    /** Fully qualified implementation class name */
+    implName: string;
+    /** File containing the implementation */
+    implFile: string;
+}
 /**
  * Multi-file symbol table aggregating all parsed file models.
  */
@@ -44,6 +101,52 @@ export interface CrossFileSymbolTable {
     classes: Map<string, ClassDeclaration>;
     /** Import graph: filePath → array of resolved import file paths */
     importGraph: Map<string, string[]>;
+    /** Router/blueprint mounts: sourceFile → mounts (Feature 27) */
+    routerMounts: Map<string, RouterMount[]>;
+    /** Injection chains: consumerFile → chains (Feature 27) */
+    injectionChains: Map<string, InjectionChain[]>;
+    /** Interface → implementations: interfaceName → implNames (Feature 27) */
+    interfaceImplementations: Map<string, InterfaceImpl[]>;
+    /** Middleware applied to routers: routerFile → middleware (Feature 27) */
+    middlewareInheritance: Map<string, MiddlewareEntry[]>;
+}
+/**
+ * Context threaded through all cross-file resolvers.
+ */
+export interface CrossFileResolutionContext {
+    /** The cross-file symbol table to enrich */
+    symbolTable: CrossFileSymbolTable;
+    /** Project root directory */
+    projectRoot: string;
+    /** Detected API frameworks */
+    apiFrameworks: DetectedApiFramework[];
+    /** All source file paths */
+    allSourceFiles: string[];
+}
+/**
+ * Result from a single cross-file resolver.
+ */
+export interface CrossFileResolutionResult {
+    /** Number of new entries added to the symbol table */
+    entriesAdded: number;
+    /** Diagnostic messages from resolution */
+    diagnostics: string[];
+    /** Unresolved references that could not be completed */
+    unresolvedRefs: Array<{
+        ref: string;
+        reason: string;
+    }>;
+}
+/**
+ * Interface that each framework-specific cross-file resolver must implement.
+ */
+export interface CrossFileResolver {
+    /** Human-readable resolver name */
+    name: string;
+    /** Returns true if this resolver should run given the detected frameworks */
+    appliesTo(frameworks: DetectedApiFramework[]): boolean;
+    /** Perform cross-file resolution, mutating the symbol table */
+    resolve(ctx: CrossFileResolutionContext): CrossFileResolutionResult;
 }
 /**
  * Result of abstract layer traversal (inheritance, helpers, fixtures).
@@ -81,5 +184,15 @@ export interface AstStageOutput {
         file: string;
         reason: string;
     }>;
+    /** Cross-file resolution diagnostics (Feature 27) */
+    crossFileResolutionDiagnostics?: Array<{
+        resolverName: string;
+        entriesAdded: number;
+        diagnostics: string[];
+        unresolvedRefs: Array<{
+            ref: string;
+            reason: string;
+        }>;
+    }>;
 }
 //# sourceMappingURL=types.d.ts.map

package/dist/src/pipeline/stages/ast/types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../../../src/pipeline/stages/ast/types.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,KAAK,EAAE,aAAa,EAAE,gBAAgB,EAAE,iBAAiB,EAAuC,MAAM,uBAAuB,CAAC;AACrI,OAAO,KAAK,EAAE,eAAe,EAAiB,MAAM,aAAa,CAAC;AAElE;;GAEG;AACH,MAAM,WAAW,iBAAiB;IAChC,gFAAgF;IAChF,MAAM,EAAE,MAAM,CAAC;IACf,kEAAkE;IAClE,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,kEAAkE;IAClE,aAAa,EAAE,MAAM,EAAE,CAAC;IACxB,uCAAuC;IACvC,SAAS,EAAE,OAAO,CAAC;IACnB,iCAAiC;IACjC,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAED;;GAEG;AACH,MAAM,WAAW,gBAAgB;IAC/B,IAAI,EAAE,MAAM,CAAC;IACb,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,oBAAoB,CAAC,EAAE,MAAM,EAAE,CAAC;IAChC,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;IACjB,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAED;;GAEG;AACH,MAAM,WAAW,oBAAoB;IACnC,oDAAoD;IACpD,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,aAAa,CAAC,CAAC;IACnC,yDAAyD;IACzD,eAAe,EAAE,GAAG,CAAC,MAAM,EAAE;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAClE,2CAA2C;IAC3C,OAAO,EAAE,GAAG,CAAC,MAAM,EAAE,gBAAgB,CAAC,CAAC;IACvC,mEAAmE;IACnE,WAAW,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;CACpC;AAED;;GAEG;AACH,MAAM,WAAW,eAAe;IAC9B,kEAAkE;IAClE,kBAAkB,EAAE,iBAAiB,EAAE,CAAC;IACxC,+CAA+C;IAC/C,iBAAiB,EAAE,gBAAgB,EAAE,CAAC;IACtC,oCAAoC;IACpC,eAAe,EAAE,eAAe,CAAC;IACjC,kCAAkC;IAClC,cAAc,EAAE,MAAM,CAAC;IACvB,4CAA4C;IAC5C,UAAU,EAAE,MAAM,GAAG,SAAS,CAAC;IAC/B,uDAAuD;IACvD,eAAe,CAAC,EAAE,MAAM,EAAE,CAAC;IAC3B,oDAAoD;IACpD,aAAa,EAAE,OAAO,CAAC;CACxB;AAED;;GAEG;AACH,MAAM,WAAW,cAAc;IAC7B,iCAAiC;IACjC,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,aAAa,CAAC,CAAC;IACnC,8BAA8B;IAC9B,cAAc,EAAE,oBAAoB,CAAC;IACrC,sCAAsC;IACtC,gBAAgB,EAAE,GAAG,CAAC,MAAM,EAAE,eAAe,CAAC,CAAC;IAC/C,4CAA4C;IAC5C,aAAa,EAAE,MAAM,EAAE,CAAC;IACxB,wCAAwC;IACxC,YAAY,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;CACvD"}
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../../../src/pipeline/stages/ast/types.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,KAAK,EAAE,aAAa,EAAE,gBAAgB,EAAE,iBAAiB,EAAuC,sBAAsB,EAAE,MAAM,uBAAuB,CAAC;AAC7J,OAAO,KAAK,EAAE,eAAe,EAAiB,MAAM,aAAa,CAAC;AAClE,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,sCAAsC,CAAC;AAEjF;;GAEG;AACH,MAAM,WAAW,iBAAiB;IAChC,gFAAgF;IAChF,MAAM,EAAE,MAAM,CAAC;IACf,kEAAkE;IAClE,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,kEAAkE;IAClE,aAAa,EAAE,MAAM,EAAE,CAAC;IACxB,uCAAuC;IACvC,SAAS,EAAE,OAAO,CAAC;IACnB,iCAAiC;IACjC,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAED;;GAEG;AACH,MAAM,WAAW,gBAAgB;IAC/B,IAAI,EAAE,MAAM,CAAC;IACb,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,oBAAoB,CAAC,EAAE,MAAM,EAAE,CAAC;IAChC,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;IACjB,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAID;;GAEG;AACH,MAAM,WAAW,WAAW;IAC1B,+BAA+B;IAC/B,MAAM,EAAE,MAAM,CAAC;IACf,mDAAmD;IACnD,gBAAgB,EAAE,MAAM,CAAC;IACzB,6CAA6C;IAC7C,UAAU,EAAE,eAAe,EAAE,CAAC;IAC9B,UAAU,EAAE,MAAM,CAAC;IACnB,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAED;;GAEG;AACH,MAAM,WAAW,cAAc;IAC7B,+CAA+C;IAC/C,YAAY,EAAE,MAAM,CAAC;IACrB,iCAAiC;IACjC,aAAa,EAAE,MAAM,CAAC;IACtB,yCAAyC;IACzC,YAAY,EAAE,MAAM,CAAC;IACrB,kCAAkC;IAClC,WAAW,EAAE,MAAM,CAAC;IACpB,iCAAiC;IACjC,cAAc,EAAE,aAAa,GAAG,WAAW,GAAG,WAAW,GAAG,UAAU,CAAC;CACxE;AAED;;GAEG;AACH,MAAM,WAAW,eAAe;IAC9B,oCAAoC;IACpC,IAAI,EAAE,MAAM,CAAC;IACb,sBAAsB;IACtB,IAAI,EAAE,eAAe,GAAG,eAAe,GAAG,YAAY,GAAG,eAAe,GAAG,QAAQ,CAAC;IACpF,iEAAiE;IACjE,SAAS,EAAE,QAAQ,GAAG,OAAO,CAAC;IAC9B,4DAA4D;IAC5D,QAAQ,CAAC,EAAE,sBAAsB,CAAC;IAClC,UAAU,EAAE,MAAM,CAAC;IACnB,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAED;;GAEG;AACH,MAAM,WAAW,aAAa;IAC5B,qCAAqC;IACrC,aAAa,EAAE,MAAM,CAAC;IACtB,oCAAoC;IACpC,aAAa,EAAE,MAAM,CAAC;IACtB,gDAAgD;IAChD,QAAQ,EAAE,MAAM,CAAC;IACjB,yCAAyC;IACzC,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED;;GAEG;AACH,MAAM,WAAW,oBAAoB;IACnC,oDAAoD;IACpD,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,aAAa,CAAC,CAAC;IACnC,yDAAyD;IACzD,eAAe,EAAE,GAAG,CAAC,MAAM,EAAE;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAClE,2CAA2C;IAC3C,OAAO,EAAE,GAAG,CAAC,MAAM,EAAE,gBAAgB,CAAC,CAAC;IACvC,mEAAmE;IACnE,WAAW,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;IACnC,gEAAgE;IAChE,YAAY,EAAE,GAAG,CAAC,MAAM,EAAE,WAAW,EAAE,CAAC,CAAC;IACzC,2DAA2D;IAC3D,eAAe,EAAE,GAAG,CAAC,MAAM,EAAE,cAAc,EAAE,CAAC,CAAC;IAC/C,0EAA0E;IAC1E,wBAAwB,EAAE,GAAG,CAAC,MAAM,EAAE,aAAa,EAAE,CAAC,CAAC;IACvD,0EAA0E;IAC1E,qBAAqB,EAAE,GAAG,CAAC,MAAM,EAAE,eAAe,EAAE,CAAC,CAAC;CACvD;AAID;;GAEG;AACH,MAAM,WAAW,0BAA0B;IACzC,4CAA4C;IAC5C,WAAW,EAAE,oBAAoB,CAAC;IAClC,6BAA6B;IAC7B,WAAW,EAAE,MAAM,CAAC;IACpB,8BAA8B;IAC9B,aAAa,EAAE,oBAAoB,EAAE,CAAC;IACtC,4BAA4B;IAC5B,cAAc,EAAE,MAAM,EAAE,CAAC;CAC1B;AAED;;GAEG;AACH,MAAM,WAAW,yBAAyB;IACxC,sDAAsD;IACtD,YAAY,EAAE,MAAM,CAAC;IACrB,0CAA0C;IAC1C,WAAW,EAAE,MAAM,EAAE,CAAC;IACtB,wDAAwD;IACxD,cAAc,EAAE,KAAK,CAAC;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;CACxD;AAED;;GAEG;AACH,MAAM,WAAW,iBAAiB;IAChC,mCAAmC;IACnC,IAAI,EAAE,MAAM,CAAC;IACb,6EAA6E;IAC7E,SAAS,CAAC,UAAU,EAAE,oBAAoB,EAAE,GAAG,OAAO,CAAC;IACvD,+DAA+D;IAC/D,OAAO,CAAC,GAAG,EAAE,0BAA0B,GAAG,yBAAyB,CAAC;CACrE;AAED;;GAEG;AACH,MAAM,WAAW,eAAe;IAC9B,kEAAkE;IAClE,kBAAkB,EAAE,iBAAiB,EAAE,CAAC;IACxC,+CAA+C;IAC/C,iBAAiB,EAAE,gBAAgB,EAAE,CAAC;IACtC,oCAAoC;IACpC,eAAe,EAAE,eAAe,CAAC;IACjC,kCAAkC;IAClC,cAAc,EAAE,MAAM,CAAC;IACvB,4CAA4C;IAC5C,UAAU,EAAE,MAAM,GAAG,SAAS,CAAC;IAC/B,uDAAuD;IACvD,eAAe,CAAC,EAAE,MAAM,EAAE,CAAC;IAC3B,oDAAoD;IACpD,aAAa,EAAE,OAAO,CAAC;CACxB;AAED;;GAEG;AACH,MAAM,WAAW,cAAc;IAC7B,iCAAiC;IACjC,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,aAAa,CAAC,CAAC;IACnC,8BAA8B;IAC9B,cAAc,EAAE,oBAAoB,CAAC;IACrC,sCAAsC;IACtC,gBAAgB,EAAE,GAAG,CAAC,MAAM,EAAE,eAAe,CAAC,CAAC;IAC/C,4CAA4C;IAC5C,aAAa,EAAE,MAAM,EAAE,CAAC;IACxB,wCAAwC;IACxC,YAAY,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IACtD,qDAAqD;IACrD,8BAA8B,CAAC,EAAE,KAAK,CAAC;QACrC,YAAY,EAAE,MAAM,CAAC;QACrB,YAAY,EAAE,MAAM,CAAC;QACrB,WAAW,EAAE,MAAM,EAAE,CAAC;QACtB,cAAc,EAAE,KAAK,CAAC;YAAE,GAAG,EAAE,MAAM,CAAC;YAAC,MAAM,EAAE,MAAM,CAAA;SAAE,CAAC,CAAC;KACxD,CAAC,CAAC;CACJ"}

package/dist/src/pipeline/stages/tia/testLayerClassifier.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"testLayerClassifier.d.ts","sourceRoot":"","sources":["../../../../../src/pipeline/stages/tia/testLayerClassifier.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAGH,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,SAAS,CAAC;AAyGlD;;;;;GAKG;AACH,wBAAgB,iBAAiB,CAC/B,QAAQ,EAAE,MAAM,EAChB,OAAO,CAAC,EAAE,MAAM,GACf,kBAAkB,CA0DpB"}
+{"version":3,"file":"testLayerClassifier.d.ts","sourceRoot":"","sources":["../../../../../src/pipeline/stages/tia/testLayerClassifier.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAGH,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,SAAS,CAAC;AA8GlD;;;;;GAKG;AACH,wBAAgB,iBAAiB,CAC/B,QAAQ,EAAE,MAAM,EAChB,OAAO,CAAC,EAAE,MAAM,GACf,kBAAkB,CA0DpB"}

package/dist/src/pipeline/stages/tia/testLayerClassifier.js

@@ -92,6 +92,8 @@ const CLASSIFICATION_RULES = [
             /httpx\.AsyncClient/i, // Python httpx
             /RestAssured|given\(\)\./i, // REST Assured
             /\.pact\./i, // Pact
+            /TestApp\s*\(/, // Python webtest TestApp
+            /\.\s*(?:post_json|put_json|delete_json|patch_json)\s*\(/, // webtest JSON methods
         ],
         priority: 70,
     },
@@ -106,6 +108,9 @@ const CLASSIFICATION_RULES = [
             /@DataJpaTest/i, // Spring Data JPA
             /@WebMvcTest/i, // Spring MVC test
             /testcontainers/i, // Docker containers
+            /@pytest\.fixture.*scope\s*=\s*['"]session['"]/, // pytest session-scoped fixture (DB lifecycle)
+            /factory\.(?:Factory|DjangoModelFactory|SQLAlchemyModelFactory)/, // Factory Boy (real-model tests)
+            /create_engine|sessionmaker|Base\.metadata/, // SQLAlchemy DB setup
         ],
         priority: 60,
     },

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "api-tests-coverage",
-  "version": "1.0.14",
+  "version": "1.0.16",
   "description": "CLI and library to measure how thoroughly your test suite exercises your API surface area",
   "main": "dist/src/lib/index.js",
   "types": "dist/src/lib/index.d.ts",