api-tests-coverage 1.0.20 → 1.0.22

package/dist/src/pipeline/graph.js

@@ -23,16 +23,7 @@ class CoverageKnowledgeGraph {
         return this.nodes.has(id);
     }
     removeNode(id) {
-        const deleted = this.nodes.delete(id);
-        if (deleted) {
-            // Remove all edges that reference this node to avoid dangling edges
-            for (const [edgeId, edge] of this.edges) {
-                if (edge.sourceNodeId === id || edge.targetNodeId === id) {
-                    this.edges.delete(edgeId);
-                }
-            }
-        }
-        return deleted;
+        return this.nodes.delete(id);
     }
     getNodesByType(type) {
         return Array.from(this.nodes.values()).filter((n) => n.type === type);
@@ -121,11 +112,9 @@ class CoverageKnowledgeGraph {
         while (queue.length > 0) {
             const path = queue.shift();
             const currentId = path[path.length - 1];
-            // Don't skip endId — we need to check every path that arrives at it
-            if (currentId !== endId && visited.has(currentId))
+            if (visited.has(currentId))
                 continue;
-            if (currentId !== endId)
-                visited.add(currentId);
+            visited.add(currentId);
             if (currentId === endId) {
                 // Check interior nodes (not start or end)
                 for (let i = 1; i < path.length - 1; i++) {
@@ -133,8 +122,7 @@ class CoverageKnowledgeGraph {
                     if ((node === null || node === void 0 ? void 0 : node.type) === nodeType)
                         return true;
                 }
-                // Don't return false here — other paths may still contain the node type
-                continue;
+                return false;
             }
             const outEdges = this.getEdgesFrom(currentId);
             for (const edge of outEdges) {

package/dist/src/pipeline/stages/ast/astStage.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"astStage.d.ts","sourceRoot":"","sources":["../../../../../src/pipeline/stages/ast/astStage.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,KAAK,EAAE,aAAa,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC;AAE3E,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,SAAS,CAAC;AA2B9C,qBAAa,QAAS,YAAW,aAAa,CAAC,cAAc,CAAC;IAC5D,QAAQ,CAAC,IAAI,EAAG,KAAK,CAAU;IAC/B,QAAQ,CAAC,QAAQ,SAAS;IAEpB,OAAO,CAAC,OAAO,EAAE,eAAe,GAAG,OAAO,CAAC,cAAc,CAAC;CAoNjE"}
+{"version":3,"file":"astStage.d.ts","sourceRoot":"","sources":["../../../../../src/pipeline/stages/ast/astStage.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,KAAK,EAAE,aAAa,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC;AAE3E,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,SAAS,CAAC;AAmB9C,qBAAa,QAAS,YAAW,aAAa,CAAC,cAAc,CAAC;IAC5D,QAAQ,CAAC,IAAI,EAAG,KAAK,CAAU;IAC/B,QAAQ,CAAC,QAAQ,SAAS;IAEpB,OAAO,CAAC,OAAO,EAAE,eAAe,GAAG,OAAO,CAAC,cAAc,CAAC;CAoLjE"}

package/dist/src/pipeline/stages/ast/astStage.js

@@ -53,14 +53,6 @@ const graphBuilder_1 = require("./graphBuilder");
 const fileClassifier_1 = require("../../../discovery/fileClassifier");
 const projectDiscovery_1 = require("../../../discovery/projectDiscovery");
 const parserRegistry_1 = require("../../../ast/parserRegistry");
-const rulesEnforcer_1 = require("./rulesEnforcer");
-const optionalAuthUnifier_1 = require("./optionalAuthUnifier");
-const expressRouterResolver_1 = require("./resolvers/expressRouterResolver");
-const flaskBlueprintResolver_1 = require("./resolvers/flaskBlueprintResolver");
-const angularInjectionResolver_1 = require("./resolvers/angularInjectionResolver");
-const vuexActionResolver_1 = require("./resolvers/vuexActionResolver");
-const mybatisResolver_1 = require("./resolvers/mybatisResolver");
-const dddLayerResolver_1 = require("./resolvers/dddLayerResolver");
 const fs = __importStar(require("fs"));
 const path = __importStar(require("path"));
 class AstStage {
@@ -79,8 +71,7 @@ class AstStage {
         const scaOutput = context.stageOutputs.get('sca');
         // Build analysis context
         const analysisContext = (0, astAnalysisOrchestrator_1.buildAnalysisContext)(context.config.astConfig);
-        // Discover all files — XML, GraphQL, and PHP files are included in serviceFiles
-        // via SERVICE_CODE_EXTS in fileClassifier.ts (RULE-SA05, SA06)
+        // Discover all files
         const artifacts = (0, projectDiscovery_1.discoverProject)({ rootDir: context.projectRoot });
         const allSourceFiles = [
             ...artifacts.testFiles,
@@ -140,33 +131,8 @@ class AstStage {
         }
         // Phase 2: Build cross-file symbol table
         const crossFileTable = (0, crossFileResolver_1.buildCrossFileSymbolTable)(models, context.projectRoot);
-        // Phase 2b: Register and run cross-file resolvers (Feature 27)
-        // Clear any stale registrations from prior runs, then register all 6 resolvers
-        (0, crossFileResolutionPass_1.clearCrossFileResolvers)();
-        (0, crossFileResolutionPass_1.registerCrossFileResolver)(new expressRouterResolver_1.ExpressRouterResolver());
-        (0, crossFileResolutionPass_1.registerCrossFileResolver)(new flaskBlueprintResolver_1.FlaskBlueprintResolver());
-        (0, crossFileResolutionPass_1.registerCrossFileResolver)(new angularInjectionResolver_1.AngularInjectionResolver());
-        (0, crossFileResolutionPass_1.registerCrossFileResolver)(new vuexActionResolver_1.VuexActionResolver());
-        (0, crossFileResolutionPass_1.registerCrossFileResolver)(new mybatisResolver_1.MyBatisResolver());
-        (0, crossFileResolutionPass_1.registerCrossFileResolver)(new dddLayerResolver_1.DddLayerResolver());
+        // Phase 2b: Run cross-file resolution pass (Feature 27)
         const crossFileResolutionResult = (0, crossFileResolutionPass_1.runCrossFileResolution)(crossFileTable, context.projectRoot, artifacts.apiFrameworks, allSourceFiles);
-        // Phase 2c: Detect auth coverage gaps (Feature 27)
-        // Collect all endpoints with their security classifications for gap analysis
-        const endpointsForAuthGaps = [];
-        for (const [filePath, model] of crossFileTable.models) {
-            if (!model.routeRegistrations)
-                continue;
-            for (const reg of model.routeRegistrations) {
-                endpointsForAuthGaps.push({
-                    path: reg.path,
-                    security: reg.security,
-                    sourceFile: filePath,
-                });
-            }
-        }
-        const authCoverageGaps = (0, optionalAuthUnifier_1.detectAuthCoverageGaps)(endpointsForAuthGaps, new Set());
-        // Phase 2d: Enforce structure-agnostic rules (Feature 27)
-        const rulesResult = (0, rulesEnforcer_1.enforceStructureAgnosticRules)(crossFileTable, context.projectRoot);
         // Phase 3: Run abstract layer traversal for test files
         const traversalResults = new Map();
         const depthCap = context.config.traversalDepthCap;
@@ -238,10 +204,6 @@ class AstStage {
                 graphEdgesAdded: edges.length,
                 crossFileResolversRun: crossFileResolutionResult.resolverResults.length,
                 crossFileEntriesAdded: crossFileResolutionResult.totalEntriesAdded,
-                rulesChecked: rulesResult.rulesChecked,
-                rulesPassed: rulesResult.rulesPassed,
-                ruleViolations: rulesResult.violations.length,
-                authCoverageGaps: authCoverageGaps.length,
             },
         };
         context.diagnostics.set('ast', diagnostics);
@@ -276,13 +238,7 @@ function detectLanguage(filePath, scaOutput) {
         '.kts': 'kotlin',
         '.py': 'python',
         '.rb': 'ruby',
-        '.php': 'php',
         '.feature': 'cucumber',
     };
-    // Handle GraphQL schema files and XML as special-case languages
-    if (ext === '.graphqls' || ext === '.graphql')
-        return 'graphql';
-    if (ext === '.xml')
-        return 'xml';
     return extensionMap[ext];
 }

package/dist/src/pipeline/stages/ast/baseUrlComposer.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"baseUrlComposer.d.ts","sourceRoot":"","sources":["../../../../../src/pipeline/stages/ast/baseUrlComposer.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH;;;GAGG;AACH,wBAAgB,UAAU,CAAC,GAAG,QAAQ,EAAE,CAAC,MAAM,GAAG,SAAS,CAAC,EAAE,GAAG,MAAM,CAyBtE;AAED;;;GAGG;AACH,wBAAgB,aAAa,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAkBlD;AAED;;;;;;;;GAQG;AACH,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAQxD;AAED;;GAEG;AACH,wBAAgB,mBAAmB,CACjC,SAAS,EAAE,MAAM,EACjB,KAAK,EAAE;IACL,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,SAAS,EAAE,MAAM,CAAC;CACnB,GACA,MAAM,CAUR"}
+{"version":3,"file":"baseUrlComposer.d.ts","sourceRoot":"","sources":["../../../../../src/pipeline/stages/ast/baseUrlComposer.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH;;;GAGG;AACH,wBAAgB,UAAU,CAAC,GAAG,QAAQ,EAAE,CAAC,MAAM,GAAG,SAAS,CAAC,EAAE,GAAG,MAAM,CAStE;AAED;;;GAGG;AACH,wBAAgB,aAAa,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAkBlD;AAED;;;;;;;;GAQG;AACH,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAQxD;AAED;;GAEG;AACH,wBAAgB,mBAAmB,CACjC,SAAS,EAAE,MAAM,EACjB,KAAK,EAAE;IACL,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,SAAS,EAAE,MAAM,CAAC;CACnB,GACA,MAAM,CAUR"}

package/dist/src/pipeline/stages/ast/baseUrlComposer.js

@@ -24,24 +24,10 @@ exports.composeFrameworkUrl = composeFrameworkUrl;
  */
 function composeUrl(...segments) {
     const parts = segments
-        .filter((s) => typeof s === 'string' && s.length > 0);
-    if (parts.length === 0)
-        return '/';
-    // Detect protocol in the first segment (e.g. http://, https://)
-    const protocolMatch = parts[0].match(/^(\w+:\/\/)/);
-    let protocol = '';
-    if (protocolMatch) {
-        protocol = protocolMatch[1];
-        parts[0] = parts[0].slice(protocol.length);
-    }
-    const stripped = parts.map((s) => s.replace(/^\/+|\/+$/g, ''));
-    const joined = stripped.join('/');
-    const deduped = joined.replace(/\/+/g, '/');
-    if (protocol) {
-        const normalized = protocol + deduped;
-        return normalized.replace(/\/+$/, '') || protocol;
-    }
-    const normalized = '/' + deduped;
+        .filter((s) => typeof s === 'string' && s.length > 0)
+        .map((s) => s.replace(/^\/+|\/+$/g, ''));
+    const joined = parts.join('/');
+    const normalized = '/' + joined.replace(/\/+/g, '/');
     return normalized === '/' ? '/' : normalized.replace(/\/+$/, '');
 }
 /**

package/dist/src/pipeline/stages/ast/crossFileResolver.js

@@ -107,31 +107,12 @@ function resolveSymbolCrossFile(symbolName, fromFile, table) {
     }
     return undefined;
 }
-/** Built-in objects that should never be treated as import module names */
-const BUILTIN_OBJECTS = new Set([
-    'console', 'math', 'json', 'object', 'array', 'promise', 'date',
-    'string', 'number', 'boolean', 'symbol', 'regexp', 'error', 'map',
-    'set', 'weakmap', 'weakset', 'proxy', 'reflect', 'intl',
-    'arraybuffer', 'sharedarraybuffer', 'atomics', 'dataview',
-    'this', 'self', 'super', 'window', 'document', 'process',
-    'global', 'globalthis', 'module', 'exports', 'require',
-    '__dirname', '__filename',
-]);
 /**
  * Extract import declarations from a semantic model.
  * This is a heuristic extraction — real import extraction would come from the AST.
  */
 function extractImportsFromModel(filePath, model, projectRoot) {
     const imports = [];
-    // Build a set of known identifiers from the model (constants and local variables)
-    // These are the names that could plausibly be import aliases
-    const knownIdentifiers = new Set();
-    for (const [name] of model.constants) {
-        knownIdentifiers.add(name);
-    }
-    for (const [name] of model.localVariables) {
-        knownIdentifiers.add(name);
-    }
     // Use functions' calledFunctions to infer cross-file references
     for (const [, func] of model.functions) {
         for (const calledName of func.calledFunctions) {
@@ -139,16 +120,6 @@ function extractImportsFromModel(filePath, model, projectRoot) {
             const dotIndex = calledName.indexOf('.');
             if (dotIndex > 0) {
                 const modulePart = calledName.substring(0, dotIndex);
-                // Skip common built-in objects that are never import sources
-                if (BUILTIN_OBJECTS.has(modulePart.toLowerCase())) {
-                    continue;
-                }
-                // Only treat as an import if the prefix matches a known identifier
-                // (constant or local variable) in this file, which is how import
-                // aliases typically appear in the semantic model
-                if (!knownIdentifiers.has(modulePart)) {
-                    continue;
-                }
                 const resolvedPath = (0, importResolver_1.resolveImportPath)(`./${modulePart}`, filePath, projectRoot, model.language);
                 if (resolvedPath) {
                     imports.push({

package/dist/src/pipeline/stages/ast/graphBuilder.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"graphBuilder.d.ts","sourceRoot":"","sources":["../../../../../src/pipeline/stages/ast/graphBuilder.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,KAAK,EAAE,aAAa,EAAoB,uBAAuB,EAAE,MAAM,uBAAuB,CAAC;AACtG,OAAO,KAAK,EAAE,SAAS,EAAE,SAAS,EAAiB,MAAM,aAAa,CAAC;AACvE,OAAO,KAAK,EAAE,oBAAoB,EAAE,eAAe,EAAE,MAAM,SAAS,CAAC;AAIrE;;GAEG;AACH,wBAAgB,aAAa,CAC3B,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,aAAa,CAAC,EAClC,cAAc,EAAE,oBAAoB,EACpC,gBAAgB,EAAE,GAAG,CAAC,MAAM,EAAE,eAAe,CAAC,EAC9C,YAAY,EAAE,GAAG,CAAC,MAAM,EAAE,uBAAuB,EAAE,CAAC,GACnD;IAAE,KAAK,EAAE,SAAS,EAAE,CAAC;IAAC,KAAK,EAAE,SAAS,EAAE,CAAA;CAAE,CA4S5C"}
+{"version":3,"file":"graphBuilder.d.ts","sourceRoot":"","sources":["../../../../../src/pipeline/stages/ast/graphBuilder.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,KAAK,EAAE,aAAa,EAAoB,uBAAuB,EAAE,MAAM,uBAAuB,CAAC;AACtG,OAAO,KAAK,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AACxD,OAAO,KAAK,EAAE,oBAAoB,EAAE,eAAe,EAAE,MAAM,SAAS,CAAC;AAIrE;;GAEG;AACH,wBAAgB,aAAa,CAC3B,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,aAAa,CAAC,EAClC,cAAc,EAAE,oBAAoB,EACpC,gBAAgB,EAAE,GAAG,CAAC,MAAM,EAAE,eAAe,CAAC,EAC9C,YAAY,EAAE,GAAG,CAAC,MAAM,EAAE,uBAAuB,EAAE,CAAC,GACnD;IAAE,KAAK,EAAE,SAAS,EAAE,CAAC;IAAC,KAAK,EAAE,SAAS,EAAE,CAAA;CAAE,CAsN5C"}

package/dist/src/pipeline/stages/ast/graphBuilder.js

@@ -60,28 +60,6 @@ function buildAstGraph(models, crossFileTable, traversalResults, interactions) {
         addedEdgeIds.add(edge.id);
         edges.push(edge);
     }
-    /**
-     * Ensure a node exists in the graph. If the node ID is not yet present,
-     * create a stub node flagged as cross-file-unresolved (spec §2.3).
-     * Confidence on stub nodes is capped at 'low'.
-     */
-    function ensureNodeExists(nodeId, missingFilePath, nodeType) {
-        if (addedNodeIds.has(nodeId))
-            return nodeId;
-        addNode({
-            id: nodeId,
-            type: nodeType,
-            label: `[unresolved] ${path.basename(missingFilePath)}`,
-            sourceStage: 'ast',
-            filePath: missingFilePath,
-            metadata: {
-                resolution: 'cross-file-unresolved',
-                confidence: 'low',
-                diagnostic: `Cross-file resolution failed: file "${missingFilePath}" was not found in parsed models`,
-            },
-        });
-        return nodeId;
-    }
     // 1. Create file nodes for every parsed file
     for (const [filePath, model] of models) {
         const basename = path.basename(filePath);
@@ -263,65 +241,6 @@ function buildAstGraph(models, crossFileTable, traversalResults, interactions) {
             });
         }
     }
-    // 7. Feature 27: Create router mount edges
-    for (const [filePath, mounts] of crossFileTable.routerMounts) {
-        const sourceId = `file:${filePath}`;
-        if (!addedNodeIds.has(sourceId))
-            continue;
-        for (const mount of mounts) {
-            const targetId = `file:${mount.targetModulePath}`;
-            // Create edge even if target not parsed (creates stub node for missing files)
-            addEdge({
-                id: `${sourceId}->mounts->${mount.prefix}:${mount.targetModulePath}`,
-                type: 'router-mount',
-                sourceNodeId: sourceId,
-                targetNodeId: ensureNodeExists(targetId, mount.targetModulePath, 'file'),
-                sourceStage: 'ast',
-                metadata: {
-                    prefix: mount.prefix,
-                    targetModule: mount.targetModulePath,
-                    middlewareCount: mount.middleware.length,
-                },
-            });
-        }
-    }
-    // 8. Feature 27: Create injection chain edges
-    for (const [consumerFile, chains] of crossFileTable.injectionChains) {
-        for (const chain of chains) {
-            const consumerNodeId = `file:${chain.consumerFile}`;
-            const serviceNodeId = `file:${chain.serviceFile}`;
-            addEdge({
-                id: `${consumerNodeId}->injects->${chain.serviceClass}:${chain.serviceFile}`,
-                type: 'injects',
-                sourceNodeId: ensureNodeExists(consumerNodeId, chain.consumerFile, 'file'),
-                targetNodeId: ensureNodeExists(serviceNodeId, chain.serviceFile, 'file'),
-                sourceStage: 'ast',
-                metadata: {
-                    consumerClass: chain.consumerClass,
-                    serviceClass: chain.serviceClass,
-                    injectionStyle: chain.injectionStyle,
-                },
-            });
-        }
-    }
-    // 9. Feature 27: Create interface implementation edges
-    for (const [ifaceFile, impls] of crossFileTable.interfaceImplementations) {
-        for (const impl of impls) {
-            const ifaceNodeId = `file:${impl.interfaceFile}`;
-            const implNodeId = `file:${impl.implFile}`;
-            addEdge({
-                id: `${implNodeId}->implements->${impl.interfaceName}:${impl.interfaceFile}`,
-                type: 'implements',
-                sourceNodeId: ensureNodeExists(implNodeId, impl.implFile, 'file'),
-                targetNodeId: ensureNodeExists(ifaceNodeId, impl.interfaceFile, 'file'),
-                sourceStage: 'ast',
-                metadata: {
-                    interfaceName: impl.interfaceName,
-                    implName: impl.implName,
-                },
-            });
-        }
-    }
     return { nodes, edges };
 }
 /**

package/dist/src/pipeline/stages/ast/optionalAuthUnifier.d.ts

@@ -7,9 +7,7 @@
  *   Express auth.optional / credentialsRequired: false → { optional: true }
  *   HapiJS auth: { mode: 'try' } → { optional: true }
  *   Spring @PreAuthorize → { required: true }
- *   Slim PHP optionalAuth → { optional: true }, jwt/auth → { required: true }
- *   Angular canActivate:none → { optional: true } (interceptor-based)
- *   NestJS @UseGuards → { required: true }
+ *   Angular route guard → depends on guard type
  */
 import type { SecurityClassification } from '../../../ast/astTypes';
 export interface AuthClassificationEntry {

package/dist/src/pipeline/stages/ast/optionalAuthUnifier.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"optionalAuthUnifier.d.ts","sourceRoot":"","sources":["../../../../../src/pipeline/stages/ast/optionalAuthUnifier.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,uBAAuB,CAAC;AAEpE,MAAM,WAAW,uBAAuB;IACtC,SAAS,EAAE,MAAM,CAAC;IAClB,aAAa,EAAE,MAAM,CAAC;IACtB,cAAc,EAAE,sBAAsB,CAAC;CACxC;AAED;;GAEG;AACH,wBAAgB,uBAAuB,CACrC,SAAS,EAAE,MAAM,EACjB,OAAO,EAAE,MAAM,GACd,sBAAsB,GAAG,SAAS,CA6DpC;AAED;;GAEG;AACH,MAAM,WAAW,eAAe;IAC9B,IAAI,EAAE,kBAAkB,GAAG,4BAA4B,CAAC;IACxD,YAAY,EAAE,MAAM,CAAC;IACrB,QAAQ,EAAE,sBAAsB,CAAC;IACjC,UAAU,EAAE,MAAM,CAAC;CACpB;AAED;;GAEG;AACH,wBAAgB,sBAAsB,CACpC,SAAS,EAAE,KAAK,CAAC;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,EAAE,sBAAsB,CAAC;IAAC,UAAU,EAAE,MAAM,CAAA;CAAE,CAAC,EACzF,kBAAkB,EAAE,GAAG,CAAC,MAAM,CAAC,GAC9B,eAAe,EAAE,CA0BnB"}
+{"version":3,"file":"optionalAuthUnifier.d.ts","sourceRoot":"","sources":["../../../../../src/pipeline/stages/ast/optionalAuthUnifier.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,uBAAuB,CAAC;AAEpE,MAAM,WAAW,uBAAuB;IACtC,SAAS,EAAE,MAAM,CAAC;IAClB,aAAa,EAAE,MAAM,CAAC;IACtB,cAAc,EAAE,sBAAsB,CAAC;CACxC;AAED;;GAEG;AACH,wBAAgB,uBAAuB,CACrC,SAAS,EAAE,MAAM,EACjB,OAAO,EAAE,MAAM,GACd,sBAAsB,GAAG,SAAS,CAwCpC;AAED;;GAEG;AACH,MAAM,WAAW,eAAe;IAC9B,IAAI,EAAE,kBAAkB,GAAG,4BAA4B,CAAC;IACxD,YAAY,EAAE,MAAM,CAAC;IACrB,QAAQ,EAAE,sBAAsB,CAAC;IACjC,UAAU,EAAE,MAAM,CAAC;CACpB;AAED;;GAEG;AACH,wBAAgB,sBAAsB,CACpC,SAAS,EAAE,KAAK,CAAC;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,EAAE,sBAAsB,CAAC;IAAC,UAAU,EAAE,MAAM,CAAA;CAAE,CAAC,EACzF,kBAAkB,EAAE,GAAG,CAAC,MAAM,CAAC,GAC9B,eAAe,EAAE,CA0BnB"}

package/dist/src/pipeline/stages/ast/optionalAuthUnifier.js

@@ -8,9 +8,7 @@
  *   Express auth.optional / credentialsRequired: false → { optional: true }
  *   HapiJS auth: { mode: 'try' } → { optional: true }
  *   Spring @PreAuthorize → { required: true }
- *   Slim PHP optionalAuth → { optional: true }, jwt/auth → { required: true }
- *   Angular canActivate:none → { optional: true } (interceptor-based)
- *   NestJS @UseGuards → { required: true }
+ *   Angular route guard → depends on guard type
  */
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.unifyAuthClassification = unifyAuthClassification;
@@ -20,54 +18,36 @@ exports.detectAuthCoverageGaps = detectAuthCoverageGaps;
  */
 function unifyAuthClassification(framework, pattern) {
     const key = `${framework}:${pattern}`.toLowerCase();
-    // Flask patterns — use word-boundary regex to avoid matching e.g. "@jwt_required_custom"
-    if (/^flask:@?jwt_required\b/.test(key)) {
+    // Flask patterns
+    if (key.includes('flask:@jwt_required') || key.includes('flask:jwt_required')) {
         return { type: 'jwt', required: true, optional: false, sourcePattern: pattern };
     }
-    if (/^flask:@?jwt_optional\b/.test(key)) {
+    if (key.includes('flask:@jwt_optional') || key.includes('flask:jwt_optional')) {
         return { type: 'jwt', required: false, optional: true, sourcePattern: pattern };
     }
-    if (/^flask:@?login_required\b/.test(key)) {
+    if (key.includes('flask:@login_required') || key.includes('flask:login_required')) {
         return { type: 'session', required: true, optional: false, sourcePattern: pattern };
     }
-    // Express patterns — use word-boundary regex for precise matching
-    if (/^express:auth\.required\b/.test(key) || /^express:credentialsrequired:\s*true\b/.test(key)) {
+    // Express patterns
+    if (key.includes('express:auth.required') || key.includes('express:credentialsrequired: true')) {
         return { type: 'jwt', required: true, optional: false, sourcePattern: pattern };
     }
-    if (/^express:auth\.optional\b/.test(key) || /^express:credentialsrequired:\s*false\b/.test(key)) {
+    if (key.includes('express:auth.optional') || key.includes('express:credentialsrequired: false')) {
         return { type: 'jwt', required: false, optional: true, sourcePattern: pattern };
     }
-    if (/^express:passport\.authenticate\b/.test(key)) {
+    if (key.includes('express:passport.authenticate')) {
         return { type: 'jwt', required: true, optional: false, sourcePattern: pattern };
     }
     // HapiJS patterns (framework may be 'hapi' or 'hapijs')
-    const isHapi = /^hapi(?:js)?:/.test(key);
-    if (isHapi && /\bauth\b/.test(key) && /\bmode\b/.test(key) && (/\btry\b/.test(key) || /\boptional\b/.test(key))) {
+    const isHapi = key.startsWith('hapi:') || key.startsWith('hapijs:');
+    if (isHapi && key.includes('auth') && key.includes('mode') && (key.includes('try') || key.includes('optional'))) {
         return { type: 'jwt', required: false, optional: true, sourcePattern: pattern };
     }
-    if (isHapi && /\bauth\b/.test(key) && !/\bfalse\b/.test(key) && !/\btry\b/.test(key) && !/\boptional\b/.test(key)) {
+    if (isHapi && key.includes('auth') && !key.includes('false') && !key.includes('try') && !key.includes('optional')) {
         return { type: 'jwt', required: true, optional: false, sourcePattern: pattern };
     }
-    // Spring patterns — include @RolesAllowed and @WithMockUser
-    if (/^spring:@?preauthorize\b/.test(key) || /^spring:@?secured\b/.test(key) || /^spring:@?rolesallowed\b/.test(key)) {
-        return { type: 'custom', required: true, optional: false, sourcePattern: pattern };
-    }
-    if (/^spring:@?withmockuser\b/.test(key)) {
-        return { type: 'custom', required: true, optional: false, sourcePattern: pattern };
-    }
-    // Slim PHP patterns — slim:optionalAuth is optional, slim:jwt or slim:auth is required
-    if (/^slim:optionalauth\b/.test(key)) {
-        return { type: 'jwt', required: false, optional: true, sourcePattern: pattern };
-    }
-    if (/^slim:(?:jwt|auth)\b/.test(key)) {
-        return { type: 'jwt', required: true, optional: false, sourcePattern: pattern };
-    }
-    // Angular patterns — canActivate:none (no guard) with interceptor tokens is optional
-    if (/^angular:canactivate:none\b/.test(key)) {
-        return { type: 'custom', required: false, optional: true, sourcePattern: pattern };
-    }
-    // NestJS patterns — @UseGuards is required auth
-    if (/^nestjs:@?useguards\b/.test(key)) {
+    // Spring patterns
+    if (key.includes('spring:@preauthorize') || key.includes('spring:@secured')) {
         return { type: 'custom', required: true, optional: false, sourcePattern: pattern };
     }
     return undefined;

package/dist/src/pipeline/stages/ast/resolvers/angularInjectionResolver.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"angularInjectionResolver.d.ts","sourceRoot":"","sources":["../../../../../../src/pipeline/stages/ast/resolvers/angularInjectionResolver.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,KAAK,EACV,iBAAiB,EACjB,0BAA0B,EAC1B,yBAAyB,EAC1B,MAAM,UAAU,CAAC;AAClB,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,yCAAyC,CAAC;AAEpF,qBAAa,wBAAyB,YAAW,iBAAiB;IAChE,QAAQ,CAAC,IAAI,uBAAuB;IAEpC,SAAS,CAAC,UAAU,EAAE,oBAAoB,EAAE,GAAG,OAAO;IAItD,OAAO,CAAC,GAAG,EAAE,0BAA0B,GAAG,yBAAyB;CAyCpE"}
+{"version":3,"file":"angularInjectionResolver.d.ts","sourceRoot":"","sources":["../../../../../../src/pipeline/stages/ast/resolvers/angularInjectionResolver.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,KAAK,EACV,iBAAiB,EACjB,0BAA0B,EAC1B,yBAAyB,EAC1B,MAAM,UAAU,CAAC;AAClB,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,yCAAyC,CAAC;AAEpF,qBAAa,wBAAyB,YAAW,iBAAiB;IAChE,QAAQ,CAAC,IAAI,uBAAuB;IAEpC,SAAS,CAAC,UAAU,EAAE,oBAAoB,EAAE,GAAG,OAAO;IAItD,OAAO,CAAC,GAAG,EAAE,0BAA0B,GAAG,yBAAyB;CA0CpE"}

package/dist/src/pipeline/stages/ast/resolvers/angularInjectionResolver.js

@@ -24,7 +24,9 @@ class AngularInjectionResolver {
         const unresolvedRefs = [];
         // Build injection chains from class registry
         for (const [className, classInfo] of ctx.symbolTable.classes) {
-            // Check any class that has a model — Angular services typically don't implement interfaces
+            // If class implements interfaces, it may be a service
+            if (!classInfo.implementsInterfaces)
+                continue;
             // Look for classes that have methods making HTTP calls
             const model = ctx.symbolTable.models.get(classInfo.filePath);
             if (!model)
@@ -71,26 +73,5 @@ function findConsumers(serviceName, ctx) {
             }
         }
     }
-    // Fallback: search class registry for classes that might inject this service
-    // (constructor injection detected by parameter name matching)
-    for (const [className, classInfo] of ctx.symbolTable.classes) {
-        // Skip if already found as a consumer
-        if (consumers.some((c) => c.className === className && c.file === classInfo.filePath))
-            continue;
-        // Check if this class's model has the service name in its calledFunctions
-        const model = ctx.symbolTable.models.get(classInfo.filePath);
-        if (!model)
-            continue;
-        for (const [, func] of model.functions) {
-            if (func.calledFunctions.some((f) => f.includes(serviceName))) {
-                consumers.push({
-                    className,
-                    file: classInfo.filePath,
-                    style: 'constructor',
-                });
-                break;
-            }
-        }
-    }
     return consumers;
 }

package/dist/src/pipeline/stages/ast/resolvers/dddLayerResolver.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"dddLayerResolver.d.ts","sourceRoot":"","sources":["../../../../../../src/pipeline/stages/ast/resolvers/dddLayerResolver.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,KAAK,EACV,iBAAiB,EACjB,0BAA0B,EAC1B,yBAAyB,EAC1B,MAAM,UAAU,CAAC;AAClB,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,yCAAyC,CAAC;AAEpF,MAAM,WAAW,sBAAsB;IACrC,aAAa,EAAE,MAAM,CAAC;IACtB,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;IACnB,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,cAAc;IAC7B,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,SAAS,GAAG,OAAO,GAAG,OAAO,CAAC;IAC3C,gBAAgB,EAAE,MAAM,CAAC;IACzB,aAAa,EAAE,MAAM,CAAC;IACtB,UAAU,EAAE,MAAM,CAAC;IACnB,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAED,qBAAa,gBAAiB,YAAW,iBAAiB;IACxD,QAAQ,CAAC,IAAI,eAAe;IAE5B,SAAS,CAAC,UAAU,EAAE,oBAAoB,EAAE,GAAG,OAAO;IAMtD,OAAO,CAAC,GAAG,EAAE,0BAA0B,GAAG,yBAAyB;CA+JpE;AAED;;;GAGG;AACH,wBAAgB,0BAA0B,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,sBAAsB,EAAE,CAgFrG;AAED;;;GAGG;AACH,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,cAAc,EAAE,CAiCrF;AAED;;GAEG;AACH,wBAAgB,uBAAuB,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,KAAK,CAAC,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAcjG"}
+{"version":3,"file":"dddLayerResolver.d.ts","sourceRoot":"","sources":["../../../../../../src/pipeline/stages/ast/resolvers/dddLayerResolver.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,KAAK,EACV,iBAAiB,EACjB,0BAA0B,EAC1B,yBAAyB,EAC1B,MAAM,UAAU,CAAC;AAClB,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,yCAAyC,CAAC;AAEpF,MAAM,WAAW,sBAAsB;IACrC,aAAa,EAAE,MAAM,CAAC;IACtB,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;IACnB,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,cAAc;IAC7B,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,SAAS,GAAG,OAAO,GAAG,OAAO,CAAC;IAC3C,gBAAgB,EAAE,MAAM,CAAC;IACzB,aAAa,EAAE,MAAM,CAAC;IACtB,UAAU,EAAE,MAAM,CAAC;IACnB,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAED,qBAAa,gBAAiB,YAAW,iBAAiB;IACxD,QAAQ,CAAC,IAAI,eAAe;IAE5B,SAAS,CAAC,UAAU,EAAE,oBAAoB,EAAE,GAAG,OAAO;IAMtD,OAAO,CAAC,GAAG,EAAE,0BAA0B,GAAG,yBAAyB;CAqEpE;AAED;;;GAGG;AACH,wBAAgB,0BAA0B,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,sBAAsB,EAAE,CAgFrG;AAED;;;GAGG;AACH,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,cAAc,EAAE,CAiCrF;AAED;;GAEG;AACH,wBAAgB,uBAAuB,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,KAAK,CAAC,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAcjG"}

package/dist/src/pipeline/stages/ast/resolvers/dddLayerResolver.js

@@ -28,80 +28,23 @@ class DddLayerResolver {
         const repoInterfaces = [];
         const cqrsHandlers = [];
         const implementations = new Map();
-        // ----- Detect from class registry and semantic models -----
-        // 1. Detect repository interfaces from class registry
-        for (const [className, classDecl] of ctx.symbolTable.classes) {
-            const isRepoByName = /(?:Repository|Repo|Store|Gateway)$/.test(className);
-            const repoMethods = classDecl.methods.filter(m => /^(?:findBy\w+|find\w+|save|saveAll|delete|deleteById|existsBy\w+|countBy\w+|getBy\w+)$/.test(m));
-            if (isRepoByName && repoMethods.length > 0) {
-                repoInterfaces.push({
-                    interfaceName: className,
-                    methods: repoMethods,
-                    sourceFile: classDecl.filePath,
-                    line: classDecl.line,
-                });
-            }
-            else if (!isRepoByName && repoMethods.length >= 2) {
-                // Generic interface with enough repository-like methods
-                repoInterfaces.push({
-                    interfaceName: className,
-                    methods: repoMethods,
-                    sourceFile: classDecl.filePath,
-                    line: classDecl.line,
-                });
-            }
-        }
-        // 2. Detect CQRS handlers from class registry + semantic models
-        for (const [className, classDecl] of ctx.symbolTable.classes) {
-            const model = ctx.symbolTable.models.get(classDecl.filePath);
-            if (!model)
-                continue;
-            for (const methodName of classDecl.methods) {
-                if (methodName !== 'execute' && methodName !== 'handle' && methodName !== 'apply')
-                    continue;
-                // Determine handler type from class name or method context
-                let handlerType = 'command';
-                if (/Query/.test(className))
-                    handlerType = 'query';
-                else if (/Event/.test(className))
-                    handlerType = 'event';
-                // Try to get parameter type from the function's annotations or the class name
-                const func = model.functions.get(methodName);
-                let parameterType = `${className.replace(/Handler$/, '')}`;
-                if (func === null || func === void 0 ? void 0 : func.annotations) {
-                    // Check for annotations that hint at the command/query type
-                    for (const ann of func.annotations) {
-                        const typeMatch = ann.match(/(\w+(?:Command|Query|Event))/);
-                        if (typeMatch) {
-                            parameterType = typeMatch[1];
-                            if (/Command$/.test(parameterType))
-                                handlerType = 'command';
-                            else if (/Query$/.test(parameterType))
-                                handlerType = 'query';
-                            else if (/Event$/.test(parameterType))
-                                handlerType = 'event';
-                        }
-                    }
-                }
-                cqrsHandlers.push({
-                    className,
-                    handlerType,
-                    handleMethodName: methodName,
-                    parameterType,
-                    sourceFile: classDecl.filePath,
-                    line: classDecl.line,
-                });
-            }
-        }
-        // 3. Detect implements clauses from class registry (already parsed by tree-sitter)
-        for (const [className, classDecl] of ctx.symbolTable.classes) {
-            if (!classDecl.implementsInterfaces || classDecl.implementsInterfaces.length === 0)
+        for (const [filePath, model] of ctx.symbolTable.models) {
+            const sourceText = getSourceText(filePath, ctx);
+            if (!sourceText)
                 continue;
-            for (const iface of classDecl.implementsInterfaces) {
-                if (!implementations.has(iface)) {
-                    implementations.set(iface, []);
+            // Detect repository interfaces
+            const repos = detectRepositoryInterfaces(sourceText, filePath);
+            repoInterfaces.push(...repos);
+            // Detect CQRS handlers
+            const handlers = detectCqrsHandlers(sourceText, filePath);
+            cqrsHandlers.push(...handlers);
+            // Detect implements clauses
+            const impls = detectImplementsClauses(sourceText, filePath);
+            for (const [ifaceName, implName] of impls) {
+                if (!implementations.has(ifaceName)) {
+                    implementations.set(ifaceName, []);
                 }
-                implementations.get(iface).push(className);
+                implementations.get(ifaceName).push(implName);
             }
         }
         // Map interface → implementation in symbolTable
@@ -129,38 +72,6 @@ class DddLayerResolver {
                 }
             }
         }
-        // Write repository interfaces into symbolTable (Section 5.3)
-        for (const repo of repoInterfaces) {
-            const key = repo.sourceFile;
-            if (!ctx.symbolTable.interfaceImplementations.has(key)) {
-                ctx.symbolTable.interfaceImplementations.set(key, []);
-            }
-            const existing = ctx.symbolTable.interfaceImplementations.get(key);
-            const alreadyMapped = existing.some(e => e.interfaceName === repo.interfaceName);
-            if (!alreadyMapped) {
-                existing.push({
-                    interfaceName: repo.interfaceName,
-                    interfaceFile: repo.sourceFile,
-                    implName: '',
-                    implFile: '',
-                });
-                entriesAdded++;
-            }
-        }
-        // Write CQRS handlers as service-layer entries into symbolTable (Section 5.2)
-        for (const handler of cqrsHandlers) {
-            const key = handler.sourceFile;
-            if (!ctx.symbolTable.interfaceImplementations.has(key)) {
-                ctx.symbolTable.interfaceImplementations.set(key, []);
-            }
-            ctx.symbolTable.interfaceImplementations.get(key).push({
-                interfaceName: handler.parameterType,
-                interfaceFile: handler.sourceFile,
-                implName: handler.className,
-                implFile: handler.sourceFile,
-            });
-            entriesAdded++;
-        }
         if (repoInterfaces.length > 0) {
             diagnostics.push(`Found ${repoInterfaces.length} repository interface(s)`);
         }
@@ -300,6 +211,19 @@ function detectImplementsClauses(source, filePath) {
     }
     return impls;
 }
+function getSourceText(filePath, ctx) {
+    // Try to get content from models (stored as raw source in semantic model)
+    // For now, we scan from the model's functions and other extracted data
+    // to detect patterns. In practice, we use regex on the raw source.
+    // If the model has functions, we have some content available.
+    const model = ctx.symbolTable.models.get(filePath);
+    if (!model)
+        return undefined;
+    // We return a synthetic source text reconstructed from available data.
+    // In a full implementation, we'd cache the raw source from the parse stage.
+    // For now, return undefined to indicate we can't access raw source from the symbol table.
+    return undefined;
+}
 function findFileForClass(className, ctx) {
     // Search through exported symbols and class registry
     const classInfo = ctx.symbolTable.classes.get(className);

package/dist/src/pipeline/stages/ast/resolvers/mybatisResolver.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"mybatisResolver.d.ts","sourceRoot":"","sources":["../../../../../../src/pipeline/stages/ast/resolvers/mybatisResolver.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,KAAK,EACV,iBAAiB,EACjB,0BAA0B,EAC1B,yBAAyB,EAC1B,MAAM,UAAU,CAAC;AAClB,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,yCAAyC,CAAC;AAIpF,MAAM,WAAW,cAAc;IAC7B,0DAA0D;IAC1D,eAAe,EAAE,MAAM,CAAC;IACxB,8CAA8C;IAC9C,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,yDAAyD;IACzD,YAAY,EAAE,MAAM,CAAC;IACrB,0CAA0C;IAC1C,OAAO,EAAE,MAAM,CAAC;IAChB,iCAAiC;IACjC,UAAU,EAAE,MAAM,EAAE,CAAC;CACtB;AAED,qBAAa,eAAgB,YAAW,iBAAiB;IACvD,QAAQ,CAAC,IAAI,aAAa;IAE1B,SAAS,CAAC,UAAU,EAAE,oBAAoB,EAAE,GAAG,OAAO;IAItD,OAAO,CAAC,GAAG,EAAE,0BAA0B,GAAG,yBAAyB;CAmFpE"}
+{"version":3,"file":"mybatisResolver.d.ts","sourceRoot":"","sources":["../../../../../../src/pipeline/stages/ast/resolvers/mybatisResolver.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,KAAK,EACV,iBAAiB,EACjB,0BAA0B,EAC1B,yBAAyB,EAC1B,MAAM,UAAU,CAAC;AAClB,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,yCAAyC,CAAC;AAEpF,MAAM,WAAW,cAAc;IAC7B,0DAA0D;IAC1D,eAAe,EAAE,MAAM,CAAC;IACxB,8CAA8C;IAC9C,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,yDAAyD;IACzD,YAAY,EAAE,MAAM,CAAC;IACrB,0CAA0C;IAC1C,OAAO,EAAE,MAAM,CAAC;IAChB,iCAAiC;IACjC,UAAU,EAAE,MAAM,EAAE,CAAC;CACtB;AAED,qBAAa,eAAgB,YAAW,iBAAiB;IACvD,QAAQ,CAAC,IAAI,aAAa;IAE1B,SAAS,CAAC,UAAU,EAAE,oBAAoB,EAAE,GAAG,OAAO;IAItD,OAAO,CAAC,GAAG,EAAE,0BAA0B,GAAG,yBAAyB;CAgEpE"}