npm - api-tests-coverage - Versions diffs - 1.0.16 → 1.0.17 - Mend

api-tests-coverage 1.0.16 → 1.0.17

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (56) hide show

package/dist/dashboard/dist/index.html CHANGED Viewed

@@ -5,7 +5,7 @@
     <link rel="icon" type="image/svg+xml" href="/vite.svg" />
     <meta name="viewport" content="width=device-width, initial-scale=1.0" />
     <title>API Coverage Analyzer Dashboard</title>
-    <script type="module" crossorigin src="/assets/index-D3sRJga7.js"></script>
+    <script type="module" crossorigin src="/assets/index-D3_88Gr5.js"></script>
     <link rel="stylesheet" crossorigin href="/assets/index-D_begBP0.css">
   </head>
   <body>

package/dist/src/discovery/fileClassifier.d.ts.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"fileClassifier.d.ts","sourceRoot":"","sources":["../../../src/discovery/fileClassifier.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAMH,MAAM,MAAM,YAAY,GACpB,eAAe,GACf,cAAc,GACd,WAAW,GACX,eAAe,GACf,WAAW,GACX,aAAa,GACb,kBAAkB,GAClB,eAAe,GACf,UAAU,GACV,SAAS,CAAC;AAEd,MAAM,WAAW,cAAc;IAC7B,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,YAAY,CAAC;IACvB,4DAA4D;IAC5D,kBAAkB,EAAE,OAAO,CAAC;CAC7B;AAED,4DAA4D;AAC5D,eAAO,MAAM,4BAA4B,EAAE,WAAW,CAAC,YAAY,CAGjE,CAAC;~~AAkEH~~;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,YAAY,CAAC,QAAQ,EAAE,MAAM,GAAG,cAAc,~~CA4E7D~~;AAED;;GAEG;AACH,wBAAgB,aAAa,CAAC,SAAS,EAAE,MAAM,EAAE,GAAG,cAAc,EAAE,CAEnE;AAED;;;GAGG;AACH,wBAAgB,sBAAsB,CAAC,KAAK,EAAE,cAAc,EAAE,GAAG,cAAc,EAAE,CAEhF;AAED;;;;GAIG;AACH,wBAAgB,UAAU,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAapD"}
1	+ {"version":3,"file":"fileClassifier.d.ts","sourceRoot":"","sources":["../../../src/discovery/fileClassifier.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAMH,MAAM,MAAM,YAAY,GACpB,eAAe,GACf,cAAc,GACd,WAAW,GACX,eAAe,GACf,WAAW,GACX,aAAa,GACb,kBAAkB,GAClB,eAAe,GACf,UAAU,GACV,SAAS,CAAC;AAEd,MAAM,WAAW,cAAc;IAC7B,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,YAAY,CAAC;IACvB,4DAA4D;IAC5D,kBAAkB,EAAE,OAAO,CAAC;CAC7B;AAED,4DAA4D;AAC5D,eAAO,MAAM,4BAA4B,EAAE,WAAW,CAAC,YAAY,CAGjE,CAAC;AA0EH;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,YAAY,CAAC,QAAQ,EAAE,MAAM,GAAG,cAAc,CAkE7D;AAED;;GAEG;AACH,wBAAgB,aAAa,CAAC,SAAS,EAAE,MAAM,EAAE,GAAG,cAAc,EAAE,CAEnE;AAED;;;GAGG;AACH,wBAAgB,sBAAsB,CAAC,KAAK,EAAE,cAAc,EAAE,GAAG,cAAc,EAAE,CAEhF;AAED;;;;GAIG;AACH,wBAAgB,UAAU,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAapD"}

package/dist/src/discovery/fileClassifier.js CHANGED Viewed

@@ -96,16 +96,25 @@ const CONFIG_BASENAMES = new Set([
     '.eslintrc.yaml',
     '.eslintrc.yml',
 ]);
-/** Extensions mapped directly to a category */
-const EXTENSION_MAP = {
-    '.feature': 'bdd_scenarios',
-};
 /** Glob-style path-segment patterns for security reports */
 const SECURITY_REPORT_DIRS = ['zap', 'trivy', 'semgrep'];
 /** Glob-style path-segment patterns for performance artifacts */
 const PERFORMANCE_DIRS = ['jmeter', 'k6', 'gatling', 'locust'];
-/** Extensions for contract files */
-const CONTRACT_EXTENSIONS = new Set(['.pact.json']);
+/** Source code file extensions for service code classification */
+const SERVICE_CODE_EXTS = new Set([
+    '.ts', '.tsx', '.js', '.jsx', '.mjs', '.cjs',
+    '.java', '.kt', '.kts',
+    '.py',
+    '.rb',
+    '.go',
+    '.cs',
+    '.cpp', '.cc', '.h',
+    '.rs',
+    '.php',
+    '.graphql', '.graphqls',
+    '.vue',
+    '.xml',
+]);
 // ─── Core classifier ─────────────────────────────────────────────────────────
 /**
  * Classify a single file path into a `FileCategory`.
@@ -173,16 +182,6 @@ function classifyFile(filePath) {
         return make(filePath, 'test_code');
     }
     // 9. Service code by extension
-    const SERVICE_CODE_EXTS = new Set([
-        '.ts', '.tsx', '.js', '.jsx', '.mjs', '.cjs',
-        '.java', '.kt', '.kts',
-        '.py',
-        '.rb',
-        '.go',
-        '.cs',
-        '.cpp', '.cc', '.h',
-        '.rs',
-    ]);
     if (SERVICE_CODE_EXTS.has(ext)) {
         return make(filePath, 'service_code');
     }

package/dist/src/discovery/projectDiscovery.d.ts.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"projectDiscovery.d.ts","sourceRoot":"","sources":["../../../src/discovery/projectDiscovery.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAIH,OAAO,EAAgB,cAAc,EAAgB,MAAM,kBAAkB,CAAC;AAC9E,OAAO,EAAuB,oBAAoB,EAAoB,MAAM,qBAAqB,CAAC;AAElG,YAAY,EAAE,oBAAoB,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;AAIlF,MAAM,MAAM,gBAAgB,GACxB,MAAM,GACN,QAAQ,GACR,QAAQ,GACR,MAAM,GACN,YAAY,GACZ,YAAY,GACZ,IAAI,GACJ,QAAQ,CAAC;AAEb,MAAM,MAAM,iBAAiB,GAEzB,OAAO,GACP,QAAQ,GACR,aAAa,GAEb,QAAQ,GACR,UAAU,GAEV,OAAO,GACP,UAAU,GAEV,MAAM,GACN,OAAO,GACP,SAAS,GACT,YAAY,GAEZ,UAAU,GACV,SAAS,CAAC;AAEd,MAAM,WAAW,mBAAmB;IAClC,4BAA4B;IAC5B,WAAW,EAAE,MAAM,CAAC;IACpB,gDAAgD;IAChD,QAAQ,EAAE,cAAc,EAAE,CAAC;IAC3B,yCAAyC;IACzC,KAAK,EAAE,MAAM,EAAE,CAAC;IAChB,oDAAoD;IACpD,SAAS,EAAE,MAAM,EAAE,CAAC;IACpB,qCAAqC;IACrC,YAAY,EAAE,MAAM,EAAE,CAAC;IACvB,kCAAkC;IAClC,aAAa,EAAE,MAAM,EAAE,CAAC;IACxB,uDAAuD;IACvD,gBAAgB,EAAE,MAAM,EAAE,CAAC;IAC3B,iCAAiC;IACjC,mBAAmB,EAAE,MAAM,EAAE,CAAC;IAC9B,gCAAgC;IAChC,YAAY,EAAE,MAAM,EAAE,CAAC;IACvB,qCAAqC;IACrC,SAAS,EAAE,gBAAgB,EAAE,CAAC;IAC9B,+BAA+B;IAC/B,UAAU,EAAE,iBAAiB,EAAE,CAAC;IAChC,0EAA0E;IAC1E,aAAa,EAAE,oBAAoB,EAAE,CAAC;IACtC,8EAA8E;IAC9E,eAAe,EAAE,MAAM,CAAC,MAAM,IAAI,CAAC,mBAAmB,EAAE,UAAU,GAAG,aAAa,GAAG,iBAAiB,GAAG,WAAW,GAAG,YAAY,GAAG,eAAe,CAAC,EAAE,UAAU,GAAG,YAAY,CAAC,CAAC;CACpL;AAED,MAAM,WAAW,gBAAgB;IAC/B,wDAAwD;IACxD,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB;;;OAGG;IACH,WAAW,CAAC,EAAE,MAAM,EAAE,CAAC;IACvB,uDAAuD;IACvD,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,uEAAuE;IACvE,aAAa,CAAC,EAAE,MAAM,EAAE,CAAC;IACzB,uEAAuE;IACvE,aAAa,CAAC,EAAE,MAAM,EAAE,CAAC;IACzB,2EAA2E;IAC3E,iBAAiB,CAAC,EAAE,MAAM,EAAE,CAAC;CAC9B;~~AAiHD~~;;;;;;GAMG;AACH,wBAAgB,eAAe,CAAC,OAAO,GAAE,gBAAqB,GAAG,mBAAmB,CAkFnF"}
1	+ {"version":3,"file":"projectDiscovery.d.ts","sourceRoot":"","sources":["../../../src/discovery/projectDiscovery.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAIH,OAAO,EAAgB,cAAc,EAAgB,MAAM,kBAAkB,CAAC;AAC9E,OAAO,EAAuB,oBAAoB,EAAoB,MAAM,qBAAqB,CAAC;AAElG,YAAY,EAAE,oBAAoB,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;AAIlF,MAAM,MAAM,gBAAgB,GACxB,MAAM,GACN,QAAQ,GACR,QAAQ,GACR,MAAM,GACN,YAAY,GACZ,YAAY,GACZ,IAAI,GACJ,QAAQ,CAAC;AAEb,MAAM,MAAM,iBAAiB,GAEzB,OAAO,GACP,QAAQ,GACR,aAAa,GAEb,QAAQ,GACR,UAAU,GAEV,OAAO,GACP,UAAU,GAEV,MAAM,GACN,OAAO,GACP,SAAS,GACT,YAAY,GAEZ,UAAU,GACV,SAAS,CAAC;AAEd,MAAM,WAAW,mBAAmB;IAClC,4BAA4B;IAC5B,WAAW,EAAE,MAAM,CAAC;IACpB,gDAAgD;IAChD,QAAQ,EAAE,cAAc,EAAE,CAAC;IAC3B,yCAAyC;IACzC,KAAK,EAAE,MAAM,EAAE,CAAC;IAChB,oDAAoD;IACpD,SAAS,EAAE,MAAM,EAAE,CAAC;IACpB,qCAAqC;IACrC,YAAY,EAAE,MAAM,EAAE,CAAC;IACvB,kCAAkC;IAClC,aAAa,EAAE,MAAM,EAAE,CAAC;IACxB,uDAAuD;IACvD,gBAAgB,EAAE,MAAM,EAAE,CAAC;IAC3B,iCAAiC;IACjC,mBAAmB,EAAE,MAAM,EAAE,CAAC;IAC9B,gCAAgC;IAChC,YAAY,EAAE,MAAM,EAAE,CAAC;IACvB,qCAAqC;IACrC,SAAS,EAAE,gBAAgB,EAAE,CAAC;IAC9B,+BAA+B;IAC/B,UAAU,EAAE,iBAAiB,EAAE,CAAC;IAChC,0EAA0E;IAC1E,aAAa,EAAE,oBAAoB,EAAE,CAAC;IACtC,8EAA8E;IAC9E,eAAe,EAAE,MAAM,CAAC,MAAM,IAAI,CAAC,mBAAmB,EAAE,UAAU,GAAG,aAAa,GAAG,iBAAiB,GAAG,WAAW,GAAG,YAAY,GAAG,eAAe,CAAC,EAAE,UAAU,GAAG,YAAY,CAAC,CAAC;CACpL;AAED,MAAM,WAAW,gBAAgB;IAC/B,wDAAwD;IACxD,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB;;;OAGG;IACH,WAAW,CAAC,EAAE,MAAM,EAAE,CAAC;IACvB,uDAAuD;IACvD,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,uEAAuE;IACvE,aAAa,CAAC,EAAE,MAAM,EAAE,CAAC;IACzB,uEAAuE;IACvE,aAAa,CAAC,EAAE,MAAM,EAAE,CAAC;IACzB,2EAA2E;IAC3E,iBAAiB,CAAC,EAAE,MAAM,EAAE,CAAC;CAC9B;AAgHD;;;;;;GAMG;AACH,wBAAgB,eAAe,CAAC,OAAO,GAAE,gBAAqB,GAAG,mBAAmB,CAkFnF"}

package/dist/src/discovery/projectDiscovery.js CHANGED Viewed

@@ -81,7 +81,6 @@ const BUILD_FILE_LANGUAGE_MAP = {
     'pyproject.toml': ['python'],
     'Gemfile': ['ruby'],
     'go.mod': ['go'],
-    '*.csproj': ['csharp'],
 };
 const EXTENSION_LANGUAGE_MAP = {
     '.java': 'java',
@@ -250,6 +249,10 @@ function detectLanguages(filePaths) {
         if (byBuild) {
             byBuild.forEach((lang) => found.add(lang));
         }
+        // Check for .csproj files (basename varies, so match by extension)
+        if (basename.endsWith('.csproj')) {
+            found.add('csharp');
+        }
         // Check extension mapping
         const byExt = EXTENSION_LANGUAGE_MAP[ext];
         if (byExt) {

package/dist/src/languages/java/semanticBuilder.d.ts.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"semanticBuilder.d.ts","sourceRoot":"","sources":["../../../../src/languages/java/semanticBuilder.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,KAAK,EAEV,cAAc,EACd,gBAAgB,EAChB,gBAAgB,EAChB,iBAAiB,EACjB,eAAe,EACf,OAAO,EACR,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAKL,KAAK,MAAM,EACZ,MAAM,2BAA2B,CAAC;AAOnC,wBAAgB,kBAAkB,CAChC,IAAI,EAAE,MAAM,GACX;IAAE,SAAS,EAAE,GAAG,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC;IAAC,KAAK,EAAE,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAA;CAAE,CAmErF;AAID,wBAAgB,oBAAoB,CAClC,IAAI,EAAE,MAAM,EACZ,SAAS,EAAE,GAAG,CAAC,MAAM,EAAE,cAAc,CAAC,GACrC,GAAG,CAAC,MAAM,EAAE,gBAAgB,CAAC,~~CAqC~~/B;AAID,wBAAgB,oBAAoB,CAClC,KAAK,EAAE,MAAM,EACb,SAAS,EAAE,GAAG,CAAC,MAAM,EAAE,cAAc,CAAC,EACtC,GAAG,EAAE,gBAAgB,EAAE,GACtB,IAAI,~~CA6DN~~;AAID,wBAAgB,qBAAqB,CAAC,IAAI,EAAE,MAAM,GAAG,iBAAiB,EAAE,CAyBvE;AAID,wBAAgB,2BAA2B,CAAC,IAAI,EAAE,MAAM,GAAG,eAAe,EAAE,CAa3E;AAED,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,EAAE,CAa3D"}
1	+ {"version":3,"file":"semanticBuilder.d.ts","sourceRoot":"","sources":["../../../../src/languages/java/semanticBuilder.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,KAAK,EAEV,cAAc,EACd,gBAAgB,EAChB,gBAAgB,EAChB,iBAAiB,EACjB,eAAe,EACf,OAAO,EACR,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAKL,KAAK,MAAM,EACZ,MAAM,2BAA2B,CAAC;AAOnC,wBAAgB,kBAAkB,CAChC,IAAI,EAAE,MAAM,GACX;IAAE,SAAS,EAAE,GAAG,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC;IAAC,KAAK,EAAE,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAA;CAAE,CAmErF;AAID,wBAAgB,oBAAoB,CAClC,IAAI,EAAE,MAAM,EACZ,SAAS,EAAE,GAAG,CAAC,MAAM,EAAE,cAAc,CAAC,GACrC,GAAG,CAAC,MAAM,EAAE,gBAAgB,CAAC,CAwC/B;AAID,wBAAgB,oBAAoB,CAClC,KAAK,EAAE,MAAM,EACb,SAAS,EAAE,GAAG,CAAC,MAAM,EAAE,cAAc,CAAC,EACtC,GAAG,EAAE,gBAAgB,EAAE,GACtB,IAAI,CA+EN;AAID,wBAAgB,qBAAqB,CAAC,IAAI,EAAE,MAAM,GAAG,iBAAiB,EAAE,CAyBvE;AAID,wBAAgB,2BAA2B,CAAC,IAAI,EAAE,MAAM,GAAG,eAAe,EAAE,CAa3E;AAED,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,EAAE,CAa3D"}

package/dist/src/languages/java/semanticBuilder.js CHANGED Viewed

@@ -97,6 +97,8 @@ function extractJavaFunctions(root, constants) {
             continue;
         const annotations = extractAnnotationNames(method);
         const block = (_e = (_d = method.childForFieldName) === null || _d === void 0 ? void 0 : _d.call(method, 'body')) !== null && _e !== void 0 ? _e : (0, treeSitterUtils_1.firstChildOfType)(method, 'block');
+        // Extract method parameters
+        const parameters = extractMethodParameters(method);
         const bodyHttpCalls = [];
         const calledFunctions = [];
         let returnValue;
@@ -109,7 +111,7 @@ function extractJavaFunctions(root, constants) {
         const cucumberPattern = extractCucumberPattern(annotations, method);
         graph.set(name, {
             name,
-            parameters: [],
+            parameters,
             bodyHttpCalls,
             calledFunctions,
             returnValue,
@@ -121,14 +123,44 @@ function extractJavaFunctions(root, constants) {
 }
 // ─── HTTP call extraction ─────────────────────────────────────────────────────
 function extractJavaHttpCalls(block, constants, out) {
-    var _a, _b, _c, _d, _e, _f, _g;
+    var _a, _b, _c, _d, _e, _f, _g, _h, _j, _k, _l, _m, _o, _p, _q, _r, _s;
     const methodInvocations = (0, treeSitterUtils_1.findNodes)(block, ['method_invocation']);
     for (const invoc of methodInvocations) {
         const methodName = (_e = (_c = (_b = (_a = invoc.childForFieldName) === null || _a === void 0 ? void 0 : _a.call(invoc, 'name')) === null || _b === void 0 ? void 0 : _b.text) !== null && _c !== void 0 ? _c : (_d = firstChildNamed(invoc, 'identifier')) === null || _d === void 0 ? void 0 : _d.text) !== null && _e !== void 0 ? _e : '';
         const lowerMethod = methodName.toLowerCase();
+        // MockMvc: perform(get("/path")) — extract the inner HTTP method call
+        if (lowerMethod === 'perform') {
+            const argList = (_g = (_f = invoc.childForFieldName) === null || _f === void 0 ? void 0 : _f.call(invoc, 'arguments')) !== null && _g !== void 0 ? _g : (0, treeSitterUtils_1.firstChildOfType)(invoc, 'argument_list');
+            if (!argList)
+                continue;
+            // The argument to perform() is a method invocation like get("/path") or post("/path")
+            const innerInvocations = (0, treeSitterUtils_1.findNodes)(argList, ['method_invocation']);
+            for (const innerInvoc of innerInvocations) {
+                const innerMethodName = (_m = (_k = (_j = (_h = innerInvoc.childForFieldName) === null || _h === void 0 ? void 0 : _h.call(innerInvoc, 'name')) === null || _j === void 0 ? void 0 : _j.text) !== null && _k !== void 0 ? _k : (_l = firstChildNamed(innerInvoc, 'identifier')) === null || _l === void 0 ? void 0 : _l.text) !== null && _m !== void 0 ? _m : '';
+                const innerLower = innerMethodName.toLowerCase();
+                if (!HTTP_METHODS.has(innerLower))
+                    continue;
+                const innerArgList = (_p = (_o = innerInvoc.childForFieldName) === null || _o === void 0 ? void 0 : _o.call(innerInvoc, 'arguments')) !== null && _p !== void 0 ? _p : (0, treeSitterUtils_1.firstChildOfType)(innerInvoc, 'argument_list');
+                if (!innerArgList)
+                    continue;
+                const innerStringArg = findFirstStringInArgList(innerArgList, constants);
+                if (!innerStringArg)
+                    continue;
+                const normalizedPath = innerStringArg.value.startsWith('/') ? (0, resolvePaths_1.normalizePathToTemplate)(innerStringArg.value) : undefined;
+                out.push({
+                    method: innerLower.toUpperCase(),
+                    rawPathArg: (_q = innerStringArg.varName) !== null && _q !== void 0 ? _q : innerStringArg.value,
+                    resolvedPath: innerStringArg.value,
+                    normalizedPath,
+                    resolutionType: innerStringArg.isDirect ? 'direct' : 'constant',
+                    confidence: innerStringArg.isDirect ? 'high' : 'medium',
+                });
+            }
+            continue;
+        }
         if (!HTTP_METHODS.has(lowerMethod))
             continue;
-        const argList = (_g = (_f = invoc.childForFieldName) === null || _f === void 0 ? void 0 : _f.call(invoc, 'arguments')) !== null && _g !== void 0 ? _g : (0, treeSitterUtils_1.firstChildOfType)(invoc, 'argument_list');
+        const argList = (_s = (_r = invoc.childForFieldName) === null || _r === void 0 ? void 0 : _r.call(invoc, 'arguments')) !== null && _s !== void 0 ? _s : (0, treeSitterUtils_1.firstChildOfType)(invoc, 'argument_list');
         if (!argList)
             continue;
         // Extract the first string argument (path)
@@ -138,15 +170,6 @@ function extractJavaHttpCalls(block, constants, out) {
         const { value: path, isDirect, varName } = firstStringArg;
         // Try to detect the HTTP method from context
         let httpMethod = lowerMethod.toUpperCase();
-        // RestAssured: .when().get("/path") or .given().get("/path")
-        // The method name IS the HTTP method in RestAssured style
-        if (!HTTP_METHODS.has(lowerMethod))
-            continue;
-        // MockMvc: perform(get("/path")) — perform wraps a method call
-        if (lowerMethod === 'perform') {
-            // The arg is another method invocation
-            continue; // Handled when we process the inner get/post
-        }
         if (lowerMethod === 'request') {
             // generic request(method, path) — try to get HTTP method from first arg
             const stringArgs = findAllStringsInArgList(argList, constants);
@@ -224,6 +247,40 @@ function extractJavaFlowRefs(root) {
     return refs;
 }
 // ─── Helpers ──────────────────────────────────────────────────────────────────
+/**
+ * Extract method parameters with their annotations (e.g. @RequestParam, @PathVariable, @RequestBody).
+ */
+function extractMethodParameters(method) {
+    var _a;
+    const params = [];
+    const formalParams = (0, treeSitterUtils_1.firstChildOfType)(method, 'formal_parameters');
+    if (!formalParams)
+        return params;
+    const paramNodes = (0, treeSitterUtils_1.findNodes)(formalParams, ['formal_parameter', 'spread_parameter']);
+    for (const paramNode of paramNodes) {
+        const paramAnnotations = [];
+        (0, treeSitterUtils_1.walkTree)(paramNode, (n) => {
+            var _a;
+            if (n.type === 'annotation' || n.type === 'marker_annotation') {
+                const nameNode = (0, treeSitterUtils_1.firstChildOfType)(n, 'identifier');
+                if (nameNode)
+                    paramAnnotations.push('@' + ((_a = nameNode.text) !== null && _a !== void 0 ? _a : ''));
+            }
+        });
+        const nameNode = firstChildNamed(paramNode, 'identifier');
+        const name = (_a = nameNode === null || nameNode === void 0 ? void 0 : nameNode.text) !== null && _a !== void 0 ? _a : '';
+        if (!name)
+            continue;
+        // Include annotation prefix for annotated params (Spring @RequestParam, @PathVariable, etc.)
+        if (paramAnnotations.length > 0) {
+            params.push(`${paramAnnotations.join(' ')} ${name}`);
+        }
+        else {
+            params.push(name);
+        }
+    }
+    return params;
+}
 function extractModifierTexts(node) {
     const modifiers = [];
     (0, treeSitterUtils_1.walkTree)(node, (n) => {

package/dist/src/languages/javascript/angularDetector.d.ts.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"angularDetector.d.ts","sourceRoot":"","sources":["../../../../src/languages/javascript/angularDetector.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,MAAM,WAAW,eAAe;IAC9B,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,MAAM,CAAC;IACnB,kBAAkB,EAAE,OAAO,CAAC;IAC5B,UAAU,EAAE,MAAM,CAAC;IACnB,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,gBAAgB;IAC/B,wCAAwC;IACxC,aAAa,EAAE,MAAM,CAAC;IACtB,mCAAmC;IACnC,YAAY,EAAE,MAAM,CAAC;IACrB,+DAA+D;IAC/D,KAAK,EAAE,aAAa,GAAG,WAAW,CAAC;IACnC,UAAU,EAAE,MAAM,CAAC;IACnB,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,YAAY;IAC3B,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,YAAY,GAAG,aAAa,CAAC;IACnC,SAAS,EAAE,aAAa,GAAG,kBAAkB,GAAG,eAAe,GAAG,SAAS,GAAG,UAAU,CAAC;IACzF,UAAU,EAAE,MAAM,CAAC;IACnB,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,kBAAkB;IACjC,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,aAAa,GAAG,YAAY,CAAC;IACnC,UAAU,EAAE,MAAM,CAAC;IACnB,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,gBAAgB;IAC/B,2BAA2B,EAAE,OAAO,CAAC;IACrC,oBAAoB,EAAE,MAAM,EAAE,CAAC;IAC/B,UAAU,EAAE,MAAM,CAAC;CACpB;AAED;;GAEG;AACH,wBAAgB,sBAAsB,CAAC,UAAU,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,eAAe,EAAE,CAyC9F;AAED;;GAEG;AACH,wBAAgB,uBAAuB,CAAC,UAAU,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,gBAAgB,EAAE,~~CAuChG~~;AAED;;GAEG;AACH,wBAAgB,mBAAmB,CAAC,UAAU,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,YAAY,EAAE,CAyCxF;AAED;;GAEG;AACH,wBAAgB,yBAAyB,CAAC,UAAU,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,kBAAkB,EAAE,CAgCpG;AAED;;GAEG;AACH,wBAAgB,sBAAsB,CAAC,UAAU,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,gBAAgB,CAY7F;AAED;;GAEG;AACH,wBAAgB,oBAAoB,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAEhE"}
1	+ {"version":3,"file":"angularDetector.d.ts","sourceRoot":"","sources":["../../../../src/languages/javascript/angularDetector.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,MAAM,WAAW,eAAe;IAC9B,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,MAAM,CAAC;IACnB,kBAAkB,EAAE,OAAO,CAAC;IAC5B,UAAU,EAAE,MAAM,CAAC;IACnB,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,gBAAgB;IAC/B,wCAAwC;IACxC,aAAa,EAAE,MAAM,CAAC;IACtB,mCAAmC;IACnC,YAAY,EAAE,MAAM,CAAC;IACrB,+DAA+D;IAC/D,KAAK,EAAE,aAAa,GAAG,WAAW,CAAC;IACnC,UAAU,EAAE,MAAM,CAAC;IACnB,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,YAAY;IAC3B,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,YAAY,GAAG,aAAa,CAAC;IACnC,SAAS,EAAE,aAAa,GAAG,kBAAkB,GAAG,eAAe,GAAG,SAAS,GAAG,UAAU,CAAC;IACzF,UAAU,EAAE,MAAM,CAAC;IACnB,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,kBAAkB;IACjC,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,aAAa,GAAG,YAAY,CAAC;IACnC,UAAU,EAAE,MAAM,CAAC;IACnB,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,gBAAgB;IAC/B,2BAA2B,EAAE,OAAO,CAAC;IACrC,oBAAoB,EAAE,MAAM,EAAE,CAAC;IAC/B,UAAU,EAAE,MAAM,CAAC;CACpB;AAED;;GAEG;AACH,wBAAgB,sBAAsB,CAAC,UAAU,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,eAAe,EAAE,CAyC9F;AAED;;GAEG;AACH,wBAAgB,uBAAuB,CAAC,UAAU,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,gBAAgB,EAAE,CA2EhG;AAED;;GAEG;AACH,wBAAgB,mBAAmB,CAAC,UAAU,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,YAAY,EAAE,CAyCxF;AAED;;GAEG;AACH,wBAAgB,yBAAyB,CAAC,UAAU,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,kBAAkB,EAAE,CAgCpG;AAED;;GAEG;AACH,wBAAgB,sBAAsB,CAAC,UAAU,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,gBAAgB,CAY7F;AAED;;GAEG;AACH,wBAAgB,oBAAoB,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAEhE"}

package/dist/src/languages/javascript/angularDetector.js CHANGED Viewed

@@ -68,33 +68,66 @@ function detectAngularInjections(sourceText, filePath) {
     const injections = [];
     const lines = sourceText.split('\n');
     let currentClass = '';
+    let currentConstHost = '';
+    let inConstructorParams = false;
     for (let i = 0; i < lines.length; i++) {
         const line = lines[i];
         // Track current class
         const classMatch = line.match(/class\s+(\w+)/);
         if (classMatch)
             currentClass = classMatch[1];
+        // Track current const/export const assignment as potential host for inject() outside class.
+        // Only update when the line is NOT itself an inject() call (e.g. skip `const x = inject(Y)`).
+        if (!currentClass) {
+            const constHostMatch = line.match(/(?:export\s+)?(?:const|let)\s+(\w+)\s*(?::\s*\S+)?\s*=/);
+            if (constHostMatch && !line.match(/=\s*inject\s*\(/)) {
+                currentConstHost = constHostMatch[1];
+            }
+        }
+        // Track constructor parameter block boundaries
+        if (/\bconstructor\s*\(/.test(line)) {
+            inConstructorParams = true;
+        }
+        if (inConstructorParams && line.includes(')')) {
+            // Process this line (it's still inside the constructor params), then close
+            // We'll close after checking for injections below
+        }
         // Constructor injection: constructor(private http: HttpClient)
-        const ctorMatch = line.match(/(?:private|protected|public|readonly)\s+(\w+)\s*:\s*(\w+)/);
-        if (ctorMatch && currentClass) {
-            injections.push({
-                consumerClass: currentClass,
-                serviceClass: ctorMatch[2],
-                style: 'constructor',
-                sourceFile: filePath,
-                line: i + 1,
-            });
+        // Only match visibility-modified parameters when inside a constructor(...) block
+        if (inConstructorParams) {
+            const ctorParamPattern = /(?:private|protected|public|readonly)\s+(\w+)\s*:\s*(\w+)/g;
+            let ctorMatch;
+            while ((ctorMatch = ctorParamPattern.exec(line)) !== null) {
+                if (currentClass) {
+                    injections.push({
+                        consumerClass: currentClass,
+                        serviceClass: ctorMatch[2],
+                        style: 'constructor',
+                        sourceFile: filePath,
+                        line: i + 1,
+                    });
+                }
+            }
+        }
+        // Close the constructor param block after processing (handles closing paren on same line)
+        if (inConstructorParams && line.includes(')')) {
+            inConstructorParams = false;
         }
         // Functional inject: inject(HttpClient)
         const injectMatch = line.match(/(\w+)\s*=\s*inject\s*\(\s*(\w+)\s*\)/);
-        if (injectMatch && currentClass) {
-            injections.push({
-                consumerClass: currentClass,
-                serviceClass: injectMatch[2],
-                style: 'inject-fn',
-                sourceFile: filePath,
-                line: i + 1,
-            });
+        if (injectMatch) {
+            // Use the enclosing class, or fall back to the enclosing const/export const host
+            // (e.g. functional guards/interceptors: `export const authGuard: CanActivateFn = ...`)
+            const hostName = currentClass || currentConstHost;
+            if (hostName) {
+                injections.push({
+                    consumerClass: hostName,
+                    serviceClass: injectMatch[2],
+                    style: 'inject-fn',
+                    sourceFile: filePath,
+                    line: i + 1,
+                });
+            }
         }
     }
     return injections;

package/dist/src/languages/javascript/assertionResolver.js CHANGED Viewed

@@ -66,8 +66,8 @@ function tryExtractAssertion(callNode) {
             if (!subject)
                 return null;
             const methodName = (_j = (_h = (_g = callee.property) === null || _g === void 0 ? void 0 : _g.name) === null || _h === void 0 ? void 0 : _h.toLowerCase()) !== null && _j !== void 0 ? _j : '';
-            const assertionType = classifyAssertionMethod(methodName);
-            const { variable } = classifyExpectSubject(subject);
+            const { variable, assertionType: subjectType } = classifyExpectSubject(subject);
+            const assertionType = classifyAssertionMethod(methodName, subjectType);
             return { assertionType, subjectVariable: variable, line: (_l = (_k = callNode.loc) === null || _k === void 0 ? void 0 : _k.start) === null || _l === void 0 ? void 0 : _l.line };
         }
     }
@@ -132,13 +132,15 @@ function classifyExpectSubject(subject) {
     }
     return { variable: undefined, assertionType: 'body-field' };
 }
-function classifyAssertionMethod(methodName) {
+function classifyAssertionMethod(methodName, subjectType) {
     if (methodName === 'tobe' ||
         methodName === 'toequal' ||
         methodName === 'tostrictequal' ||
         methodName === 'tobetruthy' ||
         methodName === 'tobefalsy') {
-        return 'status-code'; // Could be either, default to status-code
+        // These methods are ambiguous — use subject context to decide.
+        // Only classify as status-code when the subject involves status.
+        return subjectType === 'status-code' ? 'status-code' : 'body-field';
     }
     if (methodName === 'tohaveproperty' || methodName === 'tocontain' || methodName === 'tomatch') {
         return 'body-field';

package/dist/src/languages/javascript/hapiDetector.d.ts.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"hapiDetector.d.ts","sourceRoot":"","sources":["../../../../src/languages/javascript/hapiDetector.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,MAAM,WAAW,SAAS;IACxB,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,CAAC,EAAE,QAAQ,CAAC;IAChB,UAAU,CAAC,EAAE,cAAc,CAAC;IAC5B,UAAU,EAAE,MAAM,CAAC;IACnB,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,QAAQ;IACvB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,IAAI,EAAE,UAAU,GAAG,UAAU,GAAG,KAAK,CAAC;CACvC;AAED,MAAM,WAAW,cAAc;IAC7B,WAAW,EAAE,MAAM,EAAE,CAAC;IACtB,aAAa,EAAE,MAAM,EAAE,CAAC;CACzB;AAED,MAAM,WAAW,aAAa;IAC5B,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,UAAU,EAAE,MAAM,CAAC;IACnB,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAkBD;;GAEG;AACH,wBAAgB,gBAAgB,CAAC,UAAU,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,SAAS,EAAE,~~CAuFlF~~;AAED;;GAEG;AACH,wBAAgB,gBAAgB,CAAC,UAAU,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,aAAa,EAAE,CAmBtF"}
1	+ {"version":3,"file":"hapiDetector.d.ts","sourceRoot":"","sources":["../../../../src/languages/javascript/hapiDetector.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,MAAM,WAAW,SAAS;IACxB,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,CAAC,EAAE,QAAQ,CAAC;IAChB,UAAU,CAAC,EAAE,cAAc,CAAC;IAC5B,UAAU,EAAE,MAAM,CAAC;IACnB,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,QAAQ;IACvB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,IAAI,EAAE,UAAU,GAAG,UAAU,GAAG,KAAK,CAAC;CACvC;AAED,MAAM,WAAW,cAAc;IAC7B,WAAW,EAAE,MAAM,EAAE,CAAC;IACtB,aAAa,EAAE,MAAM,EAAE,CAAC;CACzB;AAED,MAAM,WAAW,aAAa;IAC5B,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,UAAU,EAAE,MAAM,CAAC;IACnB,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAkBD;;GAEG;AACH,wBAAgB,gBAAgB,CAAC,UAAU,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,SAAS,EAAE,CA6HlF;AAED;;GAEG;AACH,wBAAgB,gBAAgB,CAAC,UAAU,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,aAAa,EAAE,CAmBtF"}

package/dist/src/languages/javascript/hapiDetector.js CHANGED Viewed

@@ -30,7 +30,7 @@ const BOOM_STATUS_MAP = {
  * Detect HapiJS route definitions from source text.
  */
 function detectHapiRoutes(sourceText, filePath) {
-    var _a, _b;
+    var _a, _b, _c, _d;
     const routes = [];
     const lines = sourceText.split('\n');
     for (let i = 0; i < lines.length; i++) {
@@ -55,7 +55,7 @@ function detectHapiRoutes(sourceText, filePath) {
             if (authSimple) {
                 auth = { strategy: authSimple[1], mode: 'required' };
             }
-            // auth: { mode: 'try' } or auth: { mode: 'optional' }
+            // auth: { mode: 'try' } or auth: { mode: 'optional' } — single-line case
             const authMode = nearLine.match(/(?:auth|mode)\s*:\s*[{]?\s*mode\s*:\s*['"](\w+)['"]/);
             if (authMode) {
                 auth = {
@@ -63,6 +63,19 @@ function detectHapiRoutes(sourceText, filePath) {
                     mode: authMode[1] === 'try' || authMode[1] === 'optional' ? 'optional' : 'required',
                 };
             }
+            else if (/auth\s*:\s*\{/.test(nearLine) || /auth\s*\{/.test(nearLine)) {
+                // Multi-line auth object: scan the next 5 lines for mode: 'try' / 'optional'
+                for (let m = j + 1; m < Math.min(j + 6, lines.length); m++) {
+                    const modeMatch = lines[m].match(/mode\s*:\s*['"](\w+)['"]/);
+                    if (modeMatch) {
+                        auth = {
+                            strategy: auth === null || auth === void 0 ? void 0 : auth.strategy,
+                            mode: modeMatch[1] === 'try' || modeMatch[1] === 'optional' ? 'optional' : 'required',
+                        };
+                        break;
+                    }
+                }
+            }
             // auth: false
             if (/auth\s*:\s*false/.test(nearLine)) {
                 auth = undefined; // Public route
@@ -74,8 +87,9 @@ function detectHapiRoutes(sourceText, filePath) {
                 // Scan validation block
                 for (let k = j; k < Math.min(j + 15, lines.length); k++) {
                     const valLine = lines[k];
-                    // query: { ... }
+                    // query: { ... } — extract Joi fields from same line and subsequent lines
                     if (/query\s*:/.test(valLine)) {
+                        // Same-line extraction
                         const paramMatch = valLine.match(/(\w+)\s*:\s*Joi\./g);
                         if (paramMatch) {
                             for (const pm of paramMatch) {
@@ -84,17 +98,46 @@ function detectHapiRoutes(sourceText, filePath) {
                                     queryParams.push(name);
                             }
                         }
+                        // Multi-line extraction: scan subsequent lines for fieldName: Joi. patterns
+                        for (let q = k + 1; q < Math.min(k + 16, lines.length); q++) {
+                            const subLine = lines[q];
+                            if (/}\s*[),]/.test(subLine) || /]\s*,/.test(subLine))
+                                break;
+                            const fieldMatch = subLine.match(/(\w+)\s*:\s*Joi\./g);
+                            if (fieldMatch) {
+                                for (const fm of fieldMatch) {
+                                    const name = (_b = fm.match(/(\w+)\s*:/)) === null || _b === void 0 ? void 0 : _b[1];
+                                    if (name && !queryParams.includes(name))
+                                        queryParams.push(name);
+                                }
+                            }
+                        }
                     }
-                    // payload: { ... }
+                    // payload: { ... } — extract Joi fields from same line and subsequent lines
                     if (/payload\s*:/.test(valLine)) {
+                        // Same-line extraction
                         const paramMatch = valLine.match(/(\w+)\s*:\s*Joi\./g);
                         if (paramMatch) {
                             for (const pm of paramMatch) {
-                                const name = (_b = pm.match(/(\w+)\s*:/)) === null || _b === void 0 ? void 0 : _b[1];
+                                const name = (_c = pm.match(/(\w+)\s*:/)) === null || _c === void 0 ? void 0 : _c[1];
                                 if (name)
                                     payloadParams.push(name);
                             }
                         }
+                        // Multi-line extraction: scan subsequent lines for fieldName: Joi. patterns
+                        for (let q = k + 1; q < Math.min(k + 16, lines.length); q++) {
+                            const subLine = lines[q];
+                            if (/}\s*[),]/.test(subLine) || /]\s*,/.test(subLine))
+                                break;
+                            const fieldMatch = subLine.match(/(\w+)\s*:\s*Joi\./g);
+                            if (fieldMatch) {
+                                for (const fm of fieldMatch) {
+                                    const name = (_d = fm.match(/(\w+)\s*:/)) === null || _d === void 0 ? void 0 : _d[1];
+                                    if (name && !payloadParams.includes(name))
+                                        payloadParams.push(name);
+                                }
+                            }
+                        }
                     }
                 }
                 if (queryParams.length > 0 || payloadParams.length > 0) {

package/dist/src/languages/javascript/vueDetector.d.ts CHANGED Viewed

@@ -9,6 +9,8 @@
  */
 export interface VueApiCall {
     actionName?: string;
+    /** Resolved string value when actionName is a constant (e.g., FETCH_ARTICLES → 'fetchArticles') */
+    resolvedName?: string;
     method: string;
     urlPattern: string;
     baseUrl?: string;

package/dist/src/languages/javascript/vueDetector.d.ts.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"vueDetector.d.ts","sourceRoot":"","sources":["../../../../src/languages/javascript/vueDetector.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,MAAM,WAAW,UAAU;IACzB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,MAAM,CAAC;IACnB,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,YAAY;IAC3B,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;IACnB,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,UAAU;IACzB,GAAG,EAAE,MAAM,CAAC;IACZ,UAAU,EAAE,MAAM,CAAC;IACnB,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAED;;GAEG;AACH,wBAAgB,kBAAkB,CAAC,UAAU,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,UAAU,GAAG,SAAS,CAO/F;AAED;;GAEG;AACH,wBAAgB,iBAAiB,CAAC,UAAU,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,UAAU,EAAE,~~CA4CpF~~;AAED;;GAEG;AACH,wBAAgB,oBAAoB,CAAC,UAAU,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,YAAY,EAAE,CAkBzF"}
1	+ {"version":3,"file":"vueDetector.d.ts","sourceRoot":"","sources":["../../../../src/languages/javascript/vueDetector.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,MAAM,WAAW,UAAU;IACzB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,mGAAmG;IACnG,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,MAAM,CAAC;IACnB,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,YAAY;IAC3B,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;IACnB,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,UAAU;IACzB,GAAG,EAAE,MAAM,CAAC;IACZ,UAAU,EAAE,MAAM,CAAC;IACnB,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAED;;GAEG;AACH,wBAAgB,kBAAkB,CAAC,UAAU,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,UAAU,GAAG,SAAS,CAO/F;AAED;;GAEG;AACH,wBAAgB,iBAAiB,CAAC,UAAU,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,UAAU,EAAE,CAoEpF;AAED;;GAEG;AACH,wBAAgB,oBAAoB,CAAC,UAAU,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,YAAY,EAAE,CAkBzF"}

package/dist/src/languages/javascript/vueDetector.js CHANGED Viewed

@@ -29,7 +29,20 @@ function detectAxiosBaseUrl(sourceText, filePath) {
 function detectVuexActions(sourceText, filePath) {
     const calls = [];
     const lines = sourceText.split('\n');
+    // Pass 1: Build a map of constant name → string value.
+    // Matches patterns like:
+    //   const FETCH_ARTICLES = 'fetchArticles'
+    //   export const FETCH_ARTICLES = "fetchArticles"
+    const constantMap = new Map();
+    for (const line of lines) {
+        const constMatch = line.match(/(?:export\s+)?const\s+([A-Z_][A-Z0-9_]*)\s*=\s*['"]([^'"]+)['"]/);
+        if (constMatch) {
+            constantMap.set(constMatch[1], constMatch[2]);
+        }
+    }
+    // Pass 2: Detect action definitions and their API calls.
     let currentAction = '';
+    let currentResolvedName;
     for (let i = 0; i < lines.length; i++) {
         const line = lines[i];
         // Vuex action definition: [ACTION_NAME]({ commit }, payload) {
@@ -37,6 +50,13 @@ function detectVuexActions(sourceText, filePath) {
         const actionMatch = line.match(/(?:\[(\w+)\]|(\w+))\s*\(\s*\{\s*(?:commit|dispatch|state|getters|rootState)/);
         if (actionMatch) {
             currentAction = actionMatch[1] || actionMatch[2] || '';
+            // If using bracket syntax with a constant, resolve to its string value
+            if (actionMatch[1] && constantMap.has(actionMatch[1])) {
+                currentResolvedName = constantMap.get(actionMatch[1]);
+            }
+            else {
+                currentResolvedName = undefined;
+            }
             continue;
         }
         // ApiService.get/post/put/delete('resource')
@@ -44,6 +64,7 @@ function detectVuexActions(sourceText, filePath) {
         if (apiServiceMatch) {
             calls.push({
                 actionName: currentAction || undefined,
+                resolvedName: currentResolvedName,
                 method: apiServiceMatch[1].toUpperCase(),
                 urlPattern: apiServiceMatch[2],
                 sourceFile: filePath,
@@ -56,6 +77,7 @@ function detectVuexActions(sourceText, filePath) {
         if (axiosMatch) {
             calls.push({
                 actionName: currentAction || undefined,
+                resolvedName: currentResolvedName,
                 method: axiosMatch[1].toUpperCase(),
                 urlPattern: axiosMatch[2],
                 sourceFile: filePath,

package/dist/src/languages/python/index.d.ts CHANGED Viewed

@@ -10,7 +10,7 @@ export declare class PythonAnalyzer implements LanguageAnalyzer {
     extractHttpInteractions(model: SemanticModel, _ctx: AnalysisContext): ResolvedHttpInteraction[];
     extractAssertions(model: SemanticModel): SemanticAssertion[];
     extractBusinessRuleRefs(model: SemanticModel): BusinessRuleRef[];
-    extractFlowRefs(_model: SemanticModel): FlowRef[];
+    extractFlowRefs(model: SemanticModel): FlowRef[];
 }
 /**
  * Classify JWT/auth security from decorator information.

package/dist/src/languages/python/index.d.ts.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/languages/python/index.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,4BAA4B,CAAC;AACnE,OAAO,KAAK,EACV,iBAAiB,EACjB,gBAAgB,EAChB,aAAa,EAIb,uBAAuB,EACvB,iBAAiB,EACjB,eAAe,EACf,OAAO,EACP,eAAe,EAEf,aAAa,EAEb,sBAAsB,EACvB,MAAM,oBAAoB,CAAC;~~AAkC5B~~,qBAAa,cAAe,YAAW,gBAAgB;IACrD,QAAQ,CAAC,QAAQ,EAAE,iBAAiB,CAAY;IAEhD,KAAK,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,gBAAgB;IAc1D,kBAAkB,CAAC,MAAM,EAAE,gBAAgB,EAAE,QAAQ,EAAE,eAAe,GAAG,aAAa;~~IA6BtF~~,uBAAuB,CAAC,KAAK,EAAE,aAAa,EAAE,IAAI,EAAE,eAAe,GAAG,uBAAuB,EAAE;IAwB/F,iBAAiB,CAAC,KAAK,EAAE,aAAa,GAAG,iBAAiB,EAAE;IAG5D,uBAAuB,CAAC,KAAK,EAAE,aAAa,GAAG,eAAe,EAAE;IAGhE,eAAe,CAAC,~~MAAM~~,EAAE,aAAa,GAAG,OAAO,EAAE;~~CAGlD~~;AA2WD;;GAEG;AACH,wBAAgB,qBAAqB,CAAC,UAAU,EAAE,aAAa,EAAE,GAAG,sBAAsB,GAAG,SAAS,CAarG"}
1	+ {"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/languages/python/index.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,4BAA4B,CAAC;AACnE,OAAO,KAAK,EACV,iBAAiB,EACjB,gBAAgB,EAChB,aAAa,EAIb,uBAAuB,EACvB,iBAAiB,EACjB,eAAe,EACf,OAAO,EACP,eAAe,EAEf,aAAa,EAEb,sBAAsB,EACvB,MAAM,oBAAoB,CAAC;AAmC5B,qBAAa,cAAe,YAAW,gBAAgB;IACrD,QAAQ,CAAC,QAAQ,EAAE,iBAAiB,CAAY;IAEhD,KAAK,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,gBAAgB;IAc1D,kBAAkB,CAAC,MAAM,EAAE,gBAAgB,EAAE,QAAQ,EAAE,eAAe,GAAG,aAAa;IA4CtF,uBAAuB,CAAC,KAAK,EAAE,aAAa,EAAE,IAAI,EAAE,eAAe,GAAG,uBAAuB,EAAE;IAwB/F,iBAAiB,CAAC,KAAK,EAAE,aAAa,GAAG,iBAAiB,EAAE;IAG5D,uBAAuB,CAAC,KAAK,EAAE,aAAa,GAAG,eAAe,EAAE;IAGhE,eAAe,CAAC,KAAK,EAAE,aAAa,GAAG,OAAO,EAAE;CAqBjD;AA2WD;;GAEG;AACH,wBAAgB,qBAAqB,CAAC,UAAU,EAAE,aAAa,EAAE,GAAG,sBAAsB,GAAG,SAAS,CAarG"}

package/dist/src/languages/python/index.js CHANGED Viewed

@@ -8,6 +8,7 @@ exports.classifyFlaskSecurity = classifyFlaskSecurity;
 const parserRegistry_1 = require("../../ast/parserRegistry");
 const treeSitterUtils_1 = require("../shared/treeSitterUtils");
 const resolvePaths_1 = require("../../coverage/deep-analysis/resolvePaths");
+const testPatternDetector_1 = require("./testPatternDetector");
 // ─── Parser ───────────────────────────────────────────────────────────────────
 let cachedParser = undefined;
 let parserLoaded = false;
@@ -45,7 +46,7 @@ class PythonAnalyzer {
         }
     }
     buildSemanticModel(parsed, _context) {
-        var _a, _b;
+        var _a, _b, _c, _d;
         const root = (_b = (_a = parsed.ast) === null || _a === void 0 ? void 0 : _a.rootNode) !== null && _b !== void 0 ? _b : parsed.ast;
         if (!root)
             return emptyModel(parsed.filePath);
@@ -56,6 +57,20 @@ class PythonAnalyzer {
         // Feature 27: Flask/FastAPI pattern detection
         const decoratorStacks = extractFlaskDecoratorStacks(root, parsed.filePath);
         const routeRegistrations = extractFlaskRouteRegistrations(root, parsed.filePath);
+        // Feature 27: webtest API call detection
+        const sourceText = (_d = (_c = root.text) !== null && _c !== void 0 ? _c : parsed.content) !== null && _d !== void 0 ? _d : '';
+        const webtestCalls = (0, testPatternDetector_1.detectWebtestCalls)(sourceText, parsed.filePath);
+        if (webtestCalls.length > 0) {
+            const httpCalls = (0, testPatternDetector_1.webtestCallsToHttpCalls)(webtestCalls);
+            // Merge webtest HTTP calls into the functions map under a synthetic entry
+            const webtestFunc = {
+                name: '__webtest_calls__',
+                parameters: [],
+                bodyHttpCalls: httpCalls,
+                calledFunctions: [],
+            };
+            functions.set('__webtest_calls__', webtestFunc);
+        }
         return {
             filePath: parsed.filePath,
             language: 'python',
@@ -103,8 +118,23 @@ class PythonAnalyzer {
     extractBusinessRuleRefs(model) {
         return model.businessRuleRefs;
     }
-    extractFlowRefs(_model) {
-        return [];
+    extractFlowRefs(model) {
+        // Feature 27: Resolve pytest fixture chains
+        const refs = [...model.flowRefs];
+        // Use function parameter names to discover fixture dependencies
+        // In pytest, function parameters that aren't built-in fixtures are fixture references
+        const builtinFixtures = new Set([
+            'request', 'tmp_path', 'tmpdir', 'capsys', 'capfd', 'monkeypatch',
+            'pytestconfig', 'recwarn', 'caplog', 'cache', 'self',
+        ]);
+        for (const [funcName, func] of model.functions) {
+            for (const param of func.parameters) {
+                if (param && !builtinFixtures.has(param)) {
+                    refs.push({ flowId: `fixture:${param}`, source: 'tag' });
+                }
+            }
+        }
+        return refs;
     }
 }
 exports.PythonAnalyzer = PythonAnalyzer;

package/dist/src/pipeline/confidence.d.ts CHANGED Viewed

@@ -65,6 +65,11 @@ export declare function hasPartialResolution(graph: CoverageKnowledgeGraph, path
 /**
  * Build a ConfidenceEvidence object from a coverage path in the graph.
  * Inspects the nodes and their source stages to determine what evidence exists.
+ *
+ * Optional `iastConfirmed` and `dastConfirmed` flags allow the caller to
+ * inject runtime confirmation state that may not be discoverable by walking
+ * `pathNodeIds` alone (e.g. when IAST/DAST nodes are not directly on the
+ * endpoint→test path in the graph).
  */
-export declare function buildConfidenceEvidence(graph: CoverageKnowledgeGraph, pathNodeIds: string[], isStaticOnlyMode: boolean): ConfidenceEvidence;
+export declare function buildConfidenceEvidence(graph: CoverageKnowledgeGraph, pathNodeIds: string[], isStaticOnlyMode: boolean, iastConfirmed?: boolean, dastConfirmed?: boolean): ConfidenceEvidence;
 //# sourceMappingURL=confidence.d.ts.map

package/dist/src/pipeline/confidence.d.ts.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"confidence.d.ts","sourceRoot":"","sources":["../../../src/pipeline/confidence.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH,OAAO,KAAK,EAAE,kBAAkB,EAAE,kBAAkB,EAAa,MAAM,SAAS,CAAC;AACjF,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,SAAS,CAAC;AAYtD;;;GAGG;AACH,wBAAgB,qBAAqB,CAAC,QAAQ,EAAE,kBAAkB,GAAG,kBAAkB,CAwBtF;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,mBAAmB,CACjC,SAAS,EAAE,kBAAkB,EAC7B,QAAQ,EAAE,kBAAkB,GAC3B,kBAAkB,CAoBpB;AAED;;;GAGG;AACH,wBAAgB,iBAAiB,CAAC,QAAQ,EAAE,kBAAkB,GAAG,kBAAkB,CAGlF;AAED;;;GAGG;AACH,wBAAgB,aAAa,CAC3B,OAAO,EAAE,kBAAkB,EAC3B,QAAQ,EAAE,kBAAkB,GAC3B,kBAAkB,CAIpB;AAED;;;GAGG;AACH,wBAAgB,iBAAiB,CAC/B,CAAC,EAAE,kBAAkB,EACrB,CAAC,EAAE,kBAAkB,GACpB,MAAM,CAER;AAED;;;GAGG;AACH,wBAAgB,aAAa,CAAC,MAAM,EAAE,kBAAkB,EAAE,GAAG,kBAAkB,CAS9E;AAED;;;GAGG;AACH,wBAAgB,qBAAqB,CACnC,KAAK,EAAE,sBAAsB,EAC7B,WAAW,EAAE,MAAM,EAAE,GACpB,OAAO,CAMT;AAED;;GAEG;AACH,wBAAgB,oBAAoB,CAClC,KAAK,EAAE,sBAAsB,EAC7B,WAAW,EAAE,MAAM,EAAE,GACpB,OAAO,CAMT;AAED~~;;;GAGG~~;AACH,wBAAgB,uBAAuB,CACrC,KAAK,EAAE,sBAAsB,EAC7B,WAAW,EAAE,MAAM,EAAE,EACrB,gBAAgB,EAAE,OAAO,~~GACxB~~,kBAAkB,CA6CpB"}
1	+ {"version":3,"file":"confidence.d.ts","sourceRoot":"","sources":["../../../src/pipeline/confidence.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH,OAAO,KAAK,EAAE,kBAAkB,EAAE,kBAAkB,EAAa,MAAM,SAAS,CAAC;AACjF,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,SAAS,CAAC;AAYtD;;;GAGG;AACH,wBAAgB,qBAAqB,CAAC,QAAQ,EAAE,kBAAkB,GAAG,kBAAkB,CAwBtF;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,mBAAmB,CACjC,SAAS,EAAE,kBAAkB,EAC7B,QAAQ,EAAE,kBAAkB,GAC3B,kBAAkB,CAoBpB;AAED;;;GAGG;AACH,wBAAgB,iBAAiB,CAAC,QAAQ,EAAE,kBAAkB,GAAG,kBAAkB,CAGlF;AAED;;;GAGG;AACH,wBAAgB,aAAa,CAC3B,OAAO,EAAE,kBAAkB,EAC3B,QAAQ,EAAE,kBAAkB,GAC3B,kBAAkB,CAIpB;AAED;;;GAGG;AACH,wBAAgB,iBAAiB,CAC/B,CAAC,EAAE,kBAAkB,EACrB,CAAC,EAAE,kBAAkB,GACpB,MAAM,CAER;AAED;;;GAGG;AACH,wBAAgB,aAAa,CAAC,MAAM,EAAE,kBAAkB,EAAE,GAAG,kBAAkB,CAS9E;AAED;;;GAGG;AACH,wBAAgB,qBAAqB,CACnC,KAAK,EAAE,sBAAsB,EAC7B,WAAW,EAAE,MAAM,EAAE,GACpB,OAAO,CAMT;AAED;;GAEG;AACH,wBAAgB,oBAAoB,CAClC,KAAK,EAAE,sBAAsB,EAC7B,WAAW,EAAE,MAAM,EAAE,GACpB,OAAO,CAMT;AAED;;;;;;;;GAQG;AACH,wBAAgB,uBAAuB,CACrC,KAAK,EAAE,sBAAsB,EAC7B,WAAW,EAAE,MAAM,EAAE,EACrB,gBAAgB,EAAE,OAAO,EACzB,aAAa,CAAC,EAAE,OAAO,EACvB,aAAa,CAAC,EAAE,OAAO,GACtB,kBAAkB,CA6CpB"}