api-tests-coverage 1.0.15 → 1.0.17

package/dist/src/languages/javascript/hapiDetector.js

@@ -0,0 +1,174 @@
+"use strict";
+/**
+ * HapiJS pattern detector (Feature 27, Sub-PR 8)
+ *
+ * Detects:
+ * 1. server.route({ method, path, options: { auth, validate, handler } })
+ * 2. Joi validator chains: Joi.string().required(), Joi.number().min().max().default()
+ * 3. auth: 'jwt' = required, auth: { mode: 'try' } = optional
+ * 4. Boom error responses: Boom.notFound(), Boom.unauthorized()
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.detectHapiRoutes = detectHapiRoutes;
+exports.detectBoomErrors = detectBoomErrors;
+/** Map Boom methods to HTTP status codes */
+const BOOM_STATUS_MAP = {
+    badRequest: 400,
+    unauthorized: 401,
+    forbidden: 403,
+    notFound: 404,
+    conflict: 409,
+    badData: 422,
+    internal: 500,
+    badImplementation: 500,
+    notImplemented: 501,
+    badGateway: 502,
+    serverUnavailable: 503,
+    gatewayTimeout: 504,
+};
+/**
+ * Detect HapiJS route definitions from source text.
+ */
+function detectHapiRoutes(sourceText, filePath) {
+    var _a, _b, _c, _d;
+    const routes = [];
+    const lines = sourceText.split('\n');
+    for (let i = 0; i < lines.length; i++) {
+        const line = lines[i];
+        // Look for method: 'GET' and path: '/articles' patterns close together
+        const methodMatch = line.match(/method\s*:\s*['"](\w+)['"]/);
+        if (!methodMatch)
+            continue;
+        const method = methodMatch[1].toUpperCase();
+        // Find path in nearby lines (within 5 lines)
+        let path = '';
+        let auth;
+        let validation;
+        for (let j = Math.max(0, i - 3); j < Math.min(i + 10, lines.length); j++) {
+            const nearLine = lines[j];
+            // path: '/articles/{slug}'
+            const pathMatch = nearLine.match(/path\s*:\s*['"]([^'"]+)['"]/);
+            if (pathMatch)
+                path = pathMatch[1];
+            // auth: 'jwt' or auth: 'simple'
+            const authSimple = nearLine.match(/auth\s*:\s*['"](\w+)['"]/);
+            if (authSimple) {
+                auth = { strategy: authSimple[1], mode: 'required' };
+            }
+            // auth: { mode: 'try' } or auth: { mode: 'optional' } — single-line case
+            const authMode = nearLine.match(/(?:auth|mode)\s*:\s*[{]?\s*mode\s*:\s*['"](\w+)['"]/);
+            if (authMode) {
+                auth = {
+                    strategy: auth === null || auth === void 0 ? void 0 : auth.strategy,
+                    mode: authMode[1] === 'try' || authMode[1] === 'optional' ? 'optional' : 'required',
+                };
+            }
+            else if (/auth\s*:\s*\{/.test(nearLine) || /auth\s*\{/.test(nearLine)) {
+                // Multi-line auth object: scan the next 5 lines for mode: 'try' / 'optional'
+                for (let m = j + 1; m < Math.min(j + 6, lines.length); m++) {
+                    const modeMatch = lines[m].match(/mode\s*:\s*['"](\w+)['"]/);
+                    if (modeMatch) {
+                        auth = {
+                            strategy: auth === null || auth === void 0 ? void 0 : auth.strategy,
+                            mode: modeMatch[1] === 'try' || modeMatch[1] === 'optional' ? 'optional' : 'required',
+                        };
+                        break;
+                    }
+                }
+            }
+            // auth: false
+            if (/auth\s*:\s*false/.test(nearLine)) {
+                auth = undefined; // Public route
+            }
+            // validate.query or validate.payload with Joi
+            if (/validate\s*:/.test(nearLine)) {
+                const queryParams = [];
+                const payloadParams = [];
+                // Scan validation block
+                for (let k = j; k < Math.min(j + 15, lines.length); k++) {
+                    const valLine = lines[k];
+                    // query: { ... } — extract Joi fields from same line and subsequent lines
+                    if (/query\s*:/.test(valLine)) {
+                        // Same-line extraction
+                        const paramMatch = valLine.match(/(\w+)\s*:\s*Joi\./g);
+                        if (paramMatch) {
+                            for (const pm of paramMatch) {
+                                const name = (_a = pm.match(/(\w+)\s*:/)) === null || _a === void 0 ? void 0 : _a[1];
+                                if (name)
+                                    queryParams.push(name);
+                            }
+                        }
+                        // Multi-line extraction: scan subsequent lines for fieldName: Joi. patterns
+                        for (let q = k + 1; q < Math.min(k + 16, lines.length); q++) {
+                            const subLine = lines[q];
+                            if (/}\s*[),]/.test(subLine) || /]\s*,/.test(subLine))
+                                break;
+                            const fieldMatch = subLine.match(/(\w+)\s*:\s*Joi\./g);
+                            if (fieldMatch) {
+                                for (const fm of fieldMatch) {
+                                    const name = (_b = fm.match(/(\w+)\s*:/)) === null || _b === void 0 ? void 0 : _b[1];
+                                    if (name && !queryParams.includes(name))
+                                        queryParams.push(name);
+                                }
+                            }
+                        }
+                    }
+                    // payload: { ... } — extract Joi fields from same line and subsequent lines
+                    if (/payload\s*:/.test(valLine)) {
+                        // Same-line extraction
+                        const paramMatch = valLine.match(/(\w+)\s*:\s*Joi\./g);
+                        if (paramMatch) {
+                            for (const pm of paramMatch) {
+                                const name = (_c = pm.match(/(\w+)\s*:/)) === null || _c === void 0 ? void 0 : _c[1];
+                                if (name)
+                                    payloadParams.push(name);
+                            }
+                        }
+                        // Multi-line extraction: scan subsequent lines for fieldName: Joi. patterns
+                        for (let q = k + 1; q < Math.min(k + 16, lines.length); q++) {
+                            const subLine = lines[q];
+                            if (/}\s*[),]/.test(subLine) || /]\s*,/.test(subLine))
+                                break;
+                            const fieldMatch = subLine.match(/(\w+)\s*:\s*Joi\./g);
+                            if (fieldMatch) {
+                                for (const fm of fieldMatch) {
+                                    const name = (_d = fm.match(/(\w+)\s*:/)) === null || _d === void 0 ? void 0 : _d[1];
+                                    if (name && !payloadParams.includes(name))
+                                        payloadParams.push(name);
+                                }
+                            }
+                        }
+                    }
+                }
+                if (queryParams.length > 0 || payloadParams.length > 0) {
+                    validation = { queryParams, payloadParams };
+                }
+            }
+        }
+        if (path) {
+            routes.push({ method, path, auth, validation, sourceFile: filePath, line: i + 1 });
+        }
+    }
+    return routes;
+}
+/**
+ * Detect Boom error responses.
+ */
+function detectBoomErrors(sourceText, filePath) {
+    const errors = [];
+    const lines = sourceText.split('\n');
+    for (let i = 0; i < lines.length; i++) {
+        const line = lines[i];
+        const match = line.match(/Boom\.(\w+)\s*\(/);
+        if (match) {
+            const errorType = match[1];
+            errors.push({
+                errorType,
+                statusCode: BOOM_STATUS_MAP[errorType],
+                sourceFile: filePath,
+                line: i + 1,
+            });
+        }
+    }
+    return errors;
+}

package/dist/src/languages/javascript/mongooseDetector.d.ts

@@ -0,0 +1,65 @@
+/**
+ * Mongoose schema/model detector (Feature 27, Sub-PR 6)
+ *
+ * Detects:
+ * 1. mongoose.Schema({...}) — field definitions, validation rules
+ * 2. mongoose.model('Name', schema) — model creation
+ * 3. .methods.* — instance method definitions
+ * 4. .pre()/.post() hooks — lifecycle hooks
+ * 5. .plugin(validator) — plugin registrations
+ */
+export interface MongooseField {
+    name: string;
+    type: string;
+    required?: boolean;
+    unique?: boolean;
+    enumValues?: string[];
+}
+export interface MongooseModel {
+    modelName: string;
+    schemaVariable?: string;
+    fields: MongooseField[];
+    methods: string[];
+    hooks: Array<{
+        stage: 'pre' | 'post';
+        event: string;
+    }>;
+    plugins: string[];
+    sourceFile: string;
+    line?: number;
+}
+/**
+ * Detect Mongoose model/schema definitions from JS/TS source text.
+ */
+export declare function detectMongooseModels(sourceText: string, filePath: string): MongooseModel[];
+/**
+ * Detect Express error handlers (4-argument middleware).
+ */
+export interface ExpressErrorHandler {
+    functionName?: string;
+    errorTypes: string[];
+    statusCodes: number[];
+    sourceFile: string;
+    line?: number;
+}
+/**
+ * Detect Express 4-argument error handler middleware.
+ * Pattern: function(err, req, res, next) or (err, req, res, next) =>
+ */
+export declare function detectExpressErrorHandlers(sourceText: string, filePath: string): ExpressErrorHandler[];
+/**
+ * Detect Express middleware auth patterns.
+ * Pattern: router.use(auth.required) or router.use('/path', auth.optional, subRouter)
+ */
+export interface ExpressAuthMiddleware {
+    /** 'required' or 'optional' */
+    authType: 'required' | 'optional';
+    /** The path prefix this middleware applies to */
+    pathPrefix?: string;
+    /** Source pattern text */
+    sourcePattern: string;
+    sourceFile: string;
+    line?: number;
+}
+export declare function detectExpressAuthMiddleware(sourceText: string, filePath: string): ExpressAuthMiddleware[];
+//# sourceMappingURL=mongooseDetector.d.ts.map

package/dist/src/languages/javascript/mongooseDetector.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"mongooseDetector.d.ts","sourceRoot":"","sources":["../../../../src/languages/javascript/mongooseDetector.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC;CACvB;AAED,MAAM,WAAW,aAAa;IAC5B,SAAS,EAAE,MAAM,CAAC;IAClB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,MAAM,EAAE,aAAa,EAAE,CAAC;IACxB,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,KAAK,EAAE,KAAK,CAAC;QAAE,KAAK,EAAE,KAAK,GAAG,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IACvD,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;IACnB,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAED;;GAEG;AACH,wBAAgB,oBAAoB,CAAC,UAAU,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,aAAa,EAAE,CA2E1F;AAwED;;GAEG;AACH,MAAM,WAAW,mBAAmB;IAClC,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,UAAU,EAAE,MAAM,EAAE,CAAC;IACrB,WAAW,EAAE,MAAM,EAAE,CAAC;IACtB,UAAU,EAAE,MAAM,CAAC;IACnB,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAED;;;GAGG;AACH,wBAAgB,0BAA0B,CAAC,UAAU,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,mBAAmB,EAAE,CAuCtG;AAED;;;GAGG;AACH,MAAM,WAAW,qBAAqB;IACpC,+BAA+B;IAC/B,QAAQ,EAAE,UAAU,GAAG,UAAU,CAAC;IAClC,iDAAiD;IACjD,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,0BAA0B;IAC1B,aAAa,EAAE,MAAM,CAAC;IACtB,UAAU,EAAE,MAAM,CAAC;IACnB,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAED,wBAAgB,2BAA2B,CAAC,UAAU,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,qBAAqB,EAAE,CA6CzG"}

package/dist/src/languages/javascript/mongooseDetector.js

@@ -0,0 +1,237 @@
+"use strict";
+/**
+ * Mongoose schema/model detector (Feature 27, Sub-PR 6)
+ *
+ * Detects:
+ * 1. mongoose.Schema({...}) — field definitions, validation rules
+ * 2. mongoose.model('Name', schema) — model creation
+ * 3. .methods.* — instance method definitions
+ * 4. .pre()/.post() hooks — lifecycle hooks
+ * 5. .plugin(validator) — plugin registrations
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.detectMongooseModels = detectMongooseModels;
+exports.detectExpressErrorHandlers = detectExpressErrorHandlers;
+exports.detectExpressAuthMiddleware = detectExpressAuthMiddleware;
+/**
+ * Detect Mongoose model/schema definitions from JS/TS source text.
+ */
+function detectMongooseModels(sourceText, filePath) {
+    var _a, _b, _c, _d;
+    const models = [];
+    const lines = sourceText.split('\n');
+    // Track schema variables and their fields
+    const schemaVars = new Map();
+    // Track methods, hooks, plugins per schema var
+    const schemaMethods = new Map();
+    const schemaHooks = new Map();
+    const schemaPlugins = new Map();
+    for (let i = 0; i < lines.length; i++) {
+        const line = lines[i];
+        // new mongoose.Schema({...}) or new Schema({...})
+        const schemaMatch = line.match(/(?:const|let|var)\s+(\w+)\s*=\s*new\s+(?:mongoose\.)?Schema\s*\(/);
+        if (schemaMatch) {
+            const varName = schemaMatch[1];
+            const fields = extractSchemaFields(sourceText, i);
+            schemaVars.set(varName, { fields, line: i + 1 });
+            continue;
+        }
+        // mongoose.model('Name', schema)
+        const modelMatch = line.match(/mongoose\.model\s*\(\s*['"](\w+)['"]\s*,\s*(\w+)/);
+        if (modelMatch) {
+            const modelName = modelMatch[1];
+            const schemaVar = modelMatch[2];
+            const schemaInfo = schemaVars.get(schemaVar);
+            models.push({
+                modelName,
+                schemaVariable: schemaVar,
+                fields: (_a = schemaInfo === null || schemaInfo === void 0 ? void 0 : schemaInfo.fields) !== null && _a !== void 0 ? _a : [],
+                methods: (_b = schemaMethods.get(schemaVar)) !== null && _b !== void 0 ? _b : [],
+                hooks: (_c = schemaHooks.get(schemaVar)) !== null && _c !== void 0 ? _c : [],
+                plugins: (_d = schemaPlugins.get(schemaVar)) !== null && _d !== void 0 ? _d : [],
+                sourceFile: filePath,
+                line: i + 1,
+            });
+            continue;
+        }
+        // schema.methods.methodName = function
+        const methodMatch = line.match(/(\w+)\.methods\.(\w+)\s*=/);
+        if (methodMatch) {
+            const varName = methodMatch[1];
+            if (!schemaMethods.has(varName))
+                schemaMethods.set(varName, []);
+            schemaMethods.get(varName).push(methodMatch[2]);
+            continue;
+        }
+        // schema.pre('save', ...) or schema.post('save', ...)
+        const hookMatch = line.match(/(\w+)\.(pre|post)\s*\(\s*['"](\w+)['"]/);
+        if (hookMatch) {
+            const varName = hookMatch[1];
+            if (!schemaHooks.has(varName))
+                schemaHooks.set(varName, []);
+            schemaHooks.get(varName).push({
+                stage: hookMatch[2],
+                event: hookMatch[3],
+            });
+            continue;
+        }
+        // schema.plugin(uniqueValidator)
+        const pluginMatch = line.match(/(\w+)\.plugin\s*\(\s*(\w+)/);
+        if (pluginMatch) {
+            const varName = pluginMatch[1];
+            if (!schemaPlugins.has(varName))
+                schemaPlugins.set(varName, []);
+            schemaPlugins.get(varName).push(pluginMatch[2]);
+        }
+    }
+    return models;
+}
+/**
+ * Extract field definitions from a schema constructor.
+ * Simple regex extraction — handles the most common patterns.
+ */
+function extractSchemaFields(source, startLine) {
+    var _a;
+    const fields = [];
+    const lines = source.split('\n');
+    // Find the opening brace of the schema definition
+    let braceDepth = 0;
+    let inSchema = false;
+    let schemaBody = '';
+    for (let i = startLine; i < Math.min(startLine + 50, lines.length); i++) {
+        const line = lines[i];
+        for (const ch of line) {
+            if (ch === '(' || ch === '{')
+                braceDepth++;
+            if (ch === ')' || ch === '}')
+                braceDepth--;
+            if (braceDepth >= 2 && !inSchema) {
+                inSchema = true;
+            }
+            if (inSchema)
+                schemaBody += ch;
+            if (inSchema && braceDepth < 2) {
+                inSchema = false;
+                break;
+            }
+        }
+        if (schemaBody && !inSchema)
+            break;
+        if (inSchema)
+            schemaBody += '\n';
+    }
+    // Parse field definitions from the schema body
+    // Pattern: fieldName: { type: Type, required: true, unique: true, enum: [...] }
+    const fieldPattern = /(\w+)\s*:\s*\{([^}]+)\}/g;
+    let match;
+    while ((match = fieldPattern.exec(schemaBody)) !== null) {
+        const name = match[1];
+        const body = match[2];
+        const typeMatch = body.match(/type\s*:\s*(\w+)/);
+        const required = /required\s*:\s*true/.test(body);
+        const unique = /unique\s*:\s*true/.test(body);
+        const enumMatch = body.match(/enum\s*:\s*\[([^\]]+)\]/);
+        const field = {
+            name,
+            type: (_a = typeMatch === null || typeMatch === void 0 ? void 0 : typeMatch[1]) !== null && _a !== void 0 ? _a : 'Mixed',
+        };
+        if (required)
+            field.required = true;
+        if (unique)
+            field.unique = true;
+        if (enumMatch) {
+            field.enumValues = enumMatch[1].split(',').map((s) => s.trim().replace(/['"]/g, '')).filter(Boolean);
+        }
+        fields.push(field);
+    }
+    // Also handle shorthand: fieldName: Type (e.g., fieldName: String)
+    const shorthandPattern = /(\w+)\s*:\s*(String|Number|Boolean|Date|ObjectId|Buffer|Mixed|Map)\b/g;
+    while ((match = shorthandPattern.exec(schemaBody)) !== null) {
+        const name = match[1];
+        // Skip if already captured as an object definition
+        if (!fields.some((f) => f.name === name)) {
+            fields.push({ name, type: match[2] });
+        }
+    }
+    return fields;
+}
+/**
+ * Detect Express 4-argument error handler middleware.
+ * Pattern: function(err, req, res, next) or (err, req, res, next) =>
+ */
+function detectExpressErrorHandlers(sourceText, filePath) {
+    const handlers = [];
+    const lines = sourceText.split('\n');
+    // Pattern: matches 4-argument functions (err, req, res, next)
+    const errorHandlerPattern = /(?:function\s+(\w+))?\s*\(\s*(?:err|error)\s*,\s*req\s*,\s*res\s*,\s*next\s*\)/;
+    for (let i = 0; i < lines.length; i++) {
+        const line = lines[i];
+        const match = line.match(errorHandlerPattern);
+        if (!match)
+            continue;
+        const functionName = match[1];
+        const errorTypes = [];
+        const statusCodes = [];
+        // Scan ahead for error type checks and status codes
+        for (let j = i; j < Math.min(i + 30, lines.length); j++) {
+            const scanLine = lines[j];
+            // err.name === 'ValidationError'
+            const errorTypeMatch = scanLine.match(/err(?:or)?\.name\s*===?\s*['"](\w+)['"]/);
+            if (errorTypeMatch)
+                errorTypes.push(errorTypeMatch[1]);
+            // res.status(404)
+            const statusMatch = scanLine.match(/res\.status\s*\(\s*(\d{3})\s*\)/);
+            if (statusMatch)
+                statusCodes.push(parseInt(statusMatch[1], 10));
+        }
+        handlers.push({
+            functionName,
+            errorTypes,
+            statusCodes,
+            sourceFile: filePath,
+            line: i + 1,
+        });
+    }
+    return handlers;
+}
+function detectExpressAuthMiddleware(sourceText, filePath) {
+    const middleware = [];
+    const lines = sourceText.split('\n');
+    for (let i = 0; i < lines.length; i++) {
+        const line = lines[i];
+        // router.use(auth.required) or app.use(auth.required)
+        const simpleAuth = line.match(/(?:router|app)\.use\s*\(\s*auth\.(required|optional)/);
+        if (simpleAuth) {
+            middleware.push({
+                authType: simpleAuth[1],
+                sourcePattern: simpleAuth[0],
+                sourceFile: filePath,
+                line: i + 1,
+            });
+            continue;
+        }
+        // router.use('/path', auth.required, router)
+        const pathAuth = line.match(/(?:router|app)\.use\s*\(\s*['"]([^'"]+)['"]\s*,\s*auth\.(required|optional)/);
+        if (pathAuth) {
+            middleware.push({
+                authType: pathAuth[2],
+                pathPrefix: pathAuth[1],
+                sourcePattern: pathAuth[0],
+                sourceFile: filePath,
+                line: i + 1,
+            });
+            continue;
+        }
+        // passport.authenticate('jwt', { session: false })
+        const passportAuth = line.match(/passport\.authenticate\s*\(\s*['"](\w+)['"]/);
+        if (passportAuth) {
+            middleware.push({
+                authType: 'required',
+                sourcePattern: passportAuth[0],
+                sourceFile: filePath,
+                line: i + 1,
+            });
+        }
+    }
+    return middleware;
+}

package/dist/src/languages/javascript/vueDetector.d.ts

@@ -0,0 +1,42 @@
+/**
+ * Vue.js/Vuex pattern detector (Feature 27, Sub-PR 8)
+ *
+ * Detects:
+ * 1. axios.defaults.baseURL — global base URL
+ * 2. Vuex actions with API calls (ApiService.get, axios.get, etc.)
+ * 3. this.$store.dispatch('actionName') — component dispatches
+ * 4. ApiService.get('resource') — service-layer API calls
+ */
+export interface VueApiCall {
+    actionName?: string;
+    /** Resolved string value when actionName is a constant (e.g., FETCH_ARTICLES → 'fetchArticles') */
+    resolvedName?: string;
+    method: string;
+    urlPattern: string;
+    baseUrl?: string;
+    sourceFile: string;
+    line?: number;
+}
+export interface VuexDispatch {
+    actionName: string;
+    sourceFile: string;
+    line?: number;
+}
+export interface VueBaseUrl {
+    url: string;
+    sourceFile: string;
+    line?: number;
+}
+/**
+ * Detect axios.defaults.baseURL settings.
+ */
+export declare function detectAxiosBaseUrl(sourceText: string, filePath: string): VueBaseUrl | undefined;
+/**
+ * Detect Vuex action definitions with API calls.
+ */
+export declare function detectVuexActions(sourceText: string, filePath: string): VueApiCall[];
+/**
+ * Detect this.$store.dispatch() or store.dispatch() calls.
+ */
+export declare function detectVuexDispatches(sourceText: string, filePath: string): VuexDispatch[];
+//# sourceMappingURL=vueDetector.d.ts.map

package/dist/src/languages/javascript/vueDetector.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"vueDetector.d.ts","sourceRoot":"","sources":["../../../../src/languages/javascript/vueDetector.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,MAAM,WAAW,UAAU;IACzB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,mGAAmG;IACnG,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,MAAM,CAAC;IACnB,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,YAAY;IAC3B,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;IACnB,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,UAAU;IACzB,GAAG,EAAE,MAAM,CAAC;IACZ,UAAU,EAAE,MAAM,CAAC;IACnB,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAED;;GAEG;AACH,wBAAgB,kBAAkB,CAAC,UAAU,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,UAAU,GAAG,SAAS,CAO/F;AAED;;GAEG;AACH,wBAAgB,iBAAiB,CAAC,UAAU,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,UAAU,EAAE,CAoEpF;AAED;;GAEG;AACH,wBAAgB,oBAAoB,CAAC,UAAU,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,YAAY,EAAE,CAkBzF"}

package/dist/src/languages/javascript/vueDetector.js

@@ -0,0 +1,109 @@
+"use strict";
+/**
+ * Vue.js/Vuex pattern detector (Feature 27, Sub-PR 8)
+ *
+ * Detects:
+ * 1. axios.defaults.baseURL — global base URL
+ * 2. Vuex actions with API calls (ApiService.get, axios.get, etc.)
+ * 3. this.$store.dispatch('actionName') — component dispatches
+ * 4. ApiService.get('resource') — service-layer API calls
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.detectAxiosBaseUrl = detectAxiosBaseUrl;
+exports.detectVuexActions = detectVuexActions;
+exports.detectVuexDispatches = detectVuexDispatches;
+/**
+ * Detect axios.defaults.baseURL settings.
+ */
+function detectAxiosBaseUrl(sourceText, filePath) {
+    const match = sourceText.match(/axios\.defaults\.baseURL\s*=\s*['"`]([^'"`]+)['"`]/);
+    if (match) {
+        const line = sourceText.substring(0, match.index).split('\n').length;
+        return { url: match[1], sourceFile: filePath, line };
+    }
+    return undefined;
+}
+/**
+ * Detect Vuex action definitions with API calls.
+ */
+function detectVuexActions(sourceText, filePath) {
+    const calls = [];
+    const lines = sourceText.split('\n');
+    // Pass 1: Build a map of constant name → string value.
+    // Matches patterns like:
+    //   const FETCH_ARTICLES = 'fetchArticles'
+    //   export const FETCH_ARTICLES = "fetchArticles"
+    const constantMap = new Map();
+    for (const line of lines) {
+        const constMatch = line.match(/(?:export\s+)?const\s+([A-Z_][A-Z0-9_]*)\s*=\s*['"]([^'"]+)['"]/);
+        if (constMatch) {
+            constantMap.set(constMatch[1], constMatch[2]);
+        }
+    }
+    // Pass 2: Detect action definitions and their API calls.
+    let currentAction = '';
+    let currentResolvedName;
+    for (let i = 0; i < lines.length; i++) {
+        const line = lines[i];
+        // Vuex action definition: [ACTION_NAME]({ commit }, payload) {
+        // or: actionName({ commit }) {
+        const actionMatch = line.match(/(?:\[(\w+)\]|(\w+))\s*\(\s*\{\s*(?:commit|dispatch|state|getters|rootState)/);
+        if (actionMatch) {
+            currentAction = actionMatch[1] || actionMatch[2] || '';
+            // If using bracket syntax with a constant, resolve to its string value
+            if (actionMatch[1] && constantMap.has(actionMatch[1])) {
+                currentResolvedName = constantMap.get(actionMatch[1]);
+            }
+            else {
+                currentResolvedName = undefined;
+            }
+            continue;
+        }
+        // ApiService.get/post/put/delete('resource')
+        const apiServiceMatch = line.match(/ApiService\.(get|post|put|patch|delete)\s*\(\s*['"`]([^'"`]+)['"`]/i);
+        if (apiServiceMatch) {
+            calls.push({
+                actionName: currentAction || undefined,
+                resolvedName: currentResolvedName,
+                method: apiServiceMatch[1].toUpperCase(),
+                urlPattern: apiServiceMatch[2],
+                sourceFile: filePath,
+                line: i + 1,
+            });
+            continue;
+        }
+        // axios.get/post/put/delete('url')
+        const axiosMatch = line.match(/axios\.(get|post|put|patch|delete)\s*\(\s*['"`]([^'"`]+)['"`]/i);
+        if (axiosMatch) {
+            calls.push({
+                actionName: currentAction || undefined,
+                resolvedName: currentResolvedName,
+                method: axiosMatch[1].toUpperCase(),
+                urlPattern: axiosMatch[2],
+                sourceFile: filePath,
+                line: i + 1,
+            });
+        }
+    }
+    return calls;
+}
+/**
+ * Detect this.$store.dispatch() or store.dispatch() calls.
+ */
+function detectVuexDispatches(sourceText, filePath) {
+    const dispatches = [];
+    const lines = sourceText.split('\n');
+    for (let i = 0; i < lines.length; i++) {
+        const line = lines[i];
+        // this.$store.dispatch('ACTION_NAME') or store.dispatch('actionName')
+        const match = line.match(/(?:this\.\$store|store)\.dispatch\s*\(\s*['"](\w+)['"]/);
+        if (match) {
+            dispatches.push({
+                actionName: match[1],
+                sourceFile: filePath,
+                line: i + 1,
+            });
+        }
+    }
+    return dispatches;
+}

package/dist/src/languages/python/index.d.ts

@@ -2,7 +2,7 @@
  * Python language analyzer using tree-sitter-python.
  */
 import type { LanguageAnalyzer } from '../../ast/languageAnalyzer';
-import type { SupportedLanguage, ParsedSourceFile, SemanticModel, ResolvedHttpInteraction, SemanticAssertion, BusinessRuleRef, FlowRef, AnalysisContext } from '../../ast/astTypes';
+import type { SupportedLanguage, ParsedSourceFile, SemanticModel, ResolvedHttpInteraction, SemanticAssertion, BusinessRuleRef, FlowRef, AnalysisContext, DecoratorInfo, SecurityClassification } from '../../ast/astTypes';
 export declare class PythonAnalyzer implements LanguageAnalyzer {
     readonly language: SupportedLanguage;
     parse(filePath: string, content: string): ParsedSourceFile;
@@ -10,6 +10,10 @@ export declare class PythonAnalyzer implements LanguageAnalyzer {
     extractHttpInteractions(model: SemanticModel, _ctx: AnalysisContext): ResolvedHttpInteraction[];
     extractAssertions(model: SemanticModel): SemanticAssertion[];
     extractBusinessRuleRefs(model: SemanticModel): BusinessRuleRef[];
-    extractFlowRefs(_model: SemanticModel): FlowRef[];
+    extractFlowRefs(model: SemanticModel): FlowRef[];
 }
+/**
+ * Classify JWT/auth security from decorator information.
+ */
+export declare function classifyFlaskSecurity(decorators: DecoratorInfo[]): SecurityClassification | undefined;
 //# sourceMappingURL=index.d.ts.map

package/dist/src/languages/python/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/languages/python/index.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,4BAA4B,CAAC;AACnE,OAAO,KAAK,EACV,iBAAiB,EACjB,gBAAgB,EAChB,aAAa,EAIb,uBAAuB,EACvB,iBAAiB,EACjB,eAAe,EACf,OAAO,EACP,eAAe,EAChB,MAAM,oBAAoB,CAAC;AA8B5B,qBAAa,cAAe,YAAW,gBAAgB;IACrD,QAAQ,CAAC,QAAQ,EAAE,iBAAiB,CAAY;IAEhD,KAAK,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,gBAAgB;IAc1D,kBAAkB,CAAC,MAAM,EAAE,gBAAgB,EAAE,QAAQ,EAAE,eAAe,GAAG,aAAa;IAuBtF,uBAAuB,CAAC,KAAK,EAAE,aAAa,EAAE,IAAI,EAAE,eAAe,GAAG,uBAAuB,EAAE;IAwB/F,iBAAiB,CAAC,KAAK,EAAE,aAAa,GAAG,iBAAiB,EAAE;IAG5D,uBAAuB,CAAC,KAAK,EAAE,aAAa,GAAG,eAAe,EAAE;IAGhE,eAAe,CAAC,MAAM,EAAE,aAAa,GAAG,OAAO,EAAE;CAGlD"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/languages/python/index.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,4BAA4B,CAAC;AACnE,OAAO,KAAK,EACV,iBAAiB,EACjB,gBAAgB,EAChB,aAAa,EAIb,uBAAuB,EACvB,iBAAiB,EACjB,eAAe,EACf,OAAO,EACP,eAAe,EAEf,aAAa,EAEb,sBAAsB,EACvB,MAAM,oBAAoB,CAAC;AAmC5B,qBAAa,cAAe,YAAW,gBAAgB;IACrD,QAAQ,CAAC,QAAQ,EAAE,iBAAiB,CAAY;IAEhD,KAAK,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,gBAAgB;IAc1D,kBAAkB,CAAC,MAAM,EAAE,gBAAgB,EAAE,QAAQ,EAAE,eAAe,GAAG,aAAa;IA4CtF,uBAAuB,CAAC,KAAK,EAAE,aAAa,EAAE,IAAI,EAAE,eAAe,GAAG,uBAAuB,EAAE;IAwB/F,iBAAiB,CAAC,KAAK,EAAE,aAAa,GAAG,iBAAiB,EAAE;IAG5D,uBAAuB,CAAC,KAAK,EAAE,aAAa,GAAG,eAAe,EAAE;IAGhE,eAAe,CAAC,KAAK,EAAE,aAAa,GAAG,OAAO,EAAE;CAqBjD;AA2WD;;GAEG;AACH,wBAAgB,qBAAqB,CAAC,UAAU,EAAE,aAAa,EAAE,GAAG,sBAAsB,GAAG,SAAS,CAarG"}