cgraphx 2.0.2 → 2.0.6

package/dist/core/code/engine/core/ingestion/cfg/visitors/java.js

@@ -0,0 +1,816 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.JAVA_FUNCTION_TYPES = void 0;
+exports.createJavaCfgVisitor = createJavaCfgVisitor;
+const cfg_builder_js_1 = require("../cfg-builder.js");
+const control_flow_context_js_1 = require("../control-flow-context.js");
+const java_harvest_js_1 = require("./java-harvest.js");
+/** Java node types that own a CFG-bearing function body. */
+const JAVA_FUNCTION_TYPES = new Set([
+    'method_declaration',
+    'constructor_declaration',
+    'compact_constructor_declaration',
+    'lambda_expression',
+]);
+exports.JAVA_FUNCTION_TYPES = JAVA_FUNCTION_TYPES;
+/** Statement node types that break a basic block (everything else coalesces). */
+const CONTROL_FLOW_TYPES = new Set([
+    'if_statement',
+    'while_statement',
+    'do_statement',
+    'for_statement',
+    'enhanced_for_statement',
+    'switch_expression',
+    'try_statement',
+    'try_with_resources_statement',
+    'synchronized_statement',
+    'return_statement',
+    'break_statement',
+    'continue_statement',
+    'throw_statement',
+    'labeled_statement',
+    'yield_statement',
+    'block',
+]);
+/** Comment node types tree-sitter-java surfaces (NOT `comment`). */
+const COMMENT_TYPES = new Set(['line_comment', 'block_comment']);
+const startLineOf = (n) => n.startPosition.row + 1;
+const endLineOf = (n) => n.endPosition.row + 1;
+const isComment = (n) => COMMENT_TYPES.has(n.type);
+/**
+ * Per-function Java walk state. One instance per function so the
+ * {@link ControlFlowContext}, exception-handler stack, and labeled-block frame
+ * bookkeeping are scoped to that function and never leak across functions.
+ */
+class JavaCfgWalk {
+    builder;
+    harvest;
+    cfc = new control_flow_context_js_1.ControlFlowContext();
+    /** Stack of exception-handler entry blocks (catch/finally) a `throw` jumps to. */
+    handlers = [];
+    /** Label(s) pending attachment to the NEXT pushed loop/switch frame. */
+    pendingLabels = [];
+    constructor(builder, harvest) {
+        this.builder = builder;
+        this.harvest = harvest;
+    }
+    /** Statements of a block node, ignoring comments. */
+    statementsOf(block) {
+        return block.namedChildren.filter((c) => !isComment(c));
+    }
+    /** The `body` block of a node (field, or the first `block` child). */
+    bodyBlockOf(node) {
+        return node.childForFieldName('body') ?? node.namedChildren.find((c) => c.type === 'block');
+    }
+    /** Strip a `parenthesized_expression` wrapper (Java `if`/`while` conditions). */
+    unwrapParen(node) {
+        if (node.type === 'parenthesized_expression') {
+            const inner = node.namedChildren.find((c) => !isComment(c));
+            if (inner)
+                return inner;
+        }
+        return node;
+    }
+    /** Visit a body that may be a `block` or a single statement. */
+    visitBody(node) {
+        return this.builder.withNesting(() => {
+            if (!node)
+                return null;
+            if (node.type === 'block')
+                return this.visitSeq(this.statementsOf(node));
+            return this.visitStmt(node);
+        });
+    }
+    /** Wire a sequence of statements, coalescing straight-line runs into blocks. */
+    visitSeq(stmts) {
+        return this.builder.withNesting(() => {
+            let entry;
+            let dangling = [];
+            let openSimple;
+            for (const stmt of stmts) {
+                if (this.breaksBlock(stmt)) {
+                    openSimple = undefined; // close any open straight-line block
+                    const res = this.visitStmt(stmt);
+                    if (res === null)
+                        continue; // transparent (empty nested block)
+                    if (entry === undefined)
+                        entry = res.entry;
+                    else
+                        this.builder.connect(dangling, res.entry, 'seq');
+                    dangling = [...res.exits];
+                }
+                else {
+                    if (openSimple === undefined) {
+                        const idx = this.builder.newBlock(startLineOf(stmt), endLineOf(stmt), stmt.text, 'normal', this.harvest.facts(stmt));
+                        if (entry === undefined)
+                            entry = idx;
+                        else
+                            this.builder.connect(dangling, idx, 'seq');
+                        openSimple = idx;
+                        dangling = [idx];
+                    }
+                    else {
+                        this.builder.extendBlock(openSimple, endLineOf(stmt), stmt.text, this.harvest.facts(stmt));
+                    }
+                }
+            }
+            if (entry === undefined)
+                return null;
+            return { entry, exits: dangling };
+        });
+    }
+    /**
+     * Whether a statement breaks the current straight-line block. A
+     * `switch_expression` breaks only when it is a STATEMENT switch (a value-
+     * position switch used directly inside a `block` coalesces). A
+     * `local_variable_declaration` whose value is a modelable value-position switch
+     * (`var x = switch (…) {…}`, #2207) also breaks — `visitStmt` then models the
+     * arms as control flow instead of collapsing the decl to one inline block.
+     */
+    breaksBlock(stmt) {
+        if (stmt.type === 'local_variable_declaration') {
+            const v = this.directValue(stmt);
+            return v !== undefined && this.isModelableValueBranch(v);
+        }
+        if (!CONTROL_FLOW_TYPES.has(stmt.type))
+            return false;
+        if (stmt.type === 'switch_expression')
+            return this.isStatementSwitch(stmt);
+        return true;
+    }
+    /** Dispatch one statement to its handler. Non-null except for empty blocks. */
+    visitStmt(stmt) {
+        switch (stmt.type) {
+            case 'local_variable_declaration': {
+                // `var x = switch (k) { … }` (#2207): the value is a value-position
+                // branch — model it as control flow and bind the result on the rejoin,
+                // instead of collapsing the whole decl to one block.
+                const value = this.directValue(stmt);
+                if (value && this.isModelableValueBranch(value))
+                    return this.visitBindBranch(stmt, value);
+                return this.visitSimple(stmt);
+            }
+            case 'if_statement':
+                return this.visitIf(stmt);
+            case 'while_statement':
+                return this.visitWhile(stmt);
+            case 'do_statement':
+                return this.visitDoWhile(stmt);
+            case 'for_statement':
+                return this.visitFor(stmt);
+            case 'enhanced_for_statement':
+                return this.visitForEach(stmt);
+            case 'switch_expression':
+                return this.visitSwitch(stmt);
+            case 'try_statement':
+            case 'try_with_resources_statement':
+                return this.visitTry(stmt);
+            case 'synchronized_statement':
+                return this.visitSynchronized(stmt);
+            case 'return_statement':
+                return this.visitReturn(stmt);
+            case 'throw_statement':
+                return this.visitThrow(stmt);
+            case 'break_statement':
+                return this.visitBreak(stmt);
+            case 'continue_statement':
+                return this.visitContinue(stmt);
+            case 'labeled_statement':
+                return this.visitLabeled(stmt);
+            case 'yield_statement':
+                return this.visitYield(stmt);
+            case 'block':
+                return this.visitSeq(this.statementsOf(stmt));
+            default:
+                return this.visitSimple(stmt);
+        }
+    }
+    visitSimple(stmt) {
+        const idx = this.builder.newBlock(startLineOf(stmt), endLineOf(stmt), stmt.text, 'normal', this.harvest.facts(stmt));
+        return { entry: idx, exits: [idx] };
+    }
+    visitReturn(stmt) {
+        // `return switch (k) { … };` (#2207): the returned value is a value-position
+        // branch — model it as control flow, with each arm returning (its value IS
+        // the function result), threading every active finalizer per arm.
+        const branch = stmt.namedChildren.find((c) => !isComment(c));
+        if (branch && this.isModelableValueBranch(branch)) {
+            const res = this.visitBranchExpr(branch);
+            const finalizers = this.cfc.finalizersForReturn();
+            for (const ex of res.exits) {
+                (0, control_flow_context_js_1.wireJumpThroughFinalizers)(this.builder, ex, finalizers, this.builder.exitIndex, 'return');
+            }
+            return { entry: res.entry, exits: [] };
+        }
+        const idx = this.builder.newBlock(startLineOf(stmt), endLineOf(stmt), stmt.text, 'normal', this.harvest.facts(stmt));
+        // A return crosses EVERY active finalizer (finally / try-with-resources /
+        // synchronized) before EXIT.
+        (0, control_flow_context_js_1.wireJumpThroughFinalizers)(this.builder, idx, this.cfc.finalizersForReturn(), this.builder.exitIndex, 'return');
+        return { entry: idx, exits: [] };
+    }
+    visitThrow(stmt) {
+        const idx = this.builder.newBlock(startLineOf(stmt), endLineOf(stmt), stmt.text, 'normal', this.harvest.facts(stmt));
+        this.builder.edge(idx, this.currentHandler(), 'throw');
+        return { entry: idx, exits: [] };
+    }
+    /**
+     * `yield e;` (switch-expression arm value) — produces the switch-expression's
+     * value and EXITS the enclosing switch (it does NOT fall through to the next
+     * colon group). Modeled as a terminator that jumps to the switch exit, threading
+     * any finalizer it crosses — exactly like a `break` out of the switch but
+     * carrying the yielded value's def/use facts. (Reusing the statement `visitSwitch`
+     * for a value-position colon switch would otherwise wire a spurious `fallthrough`
+     * edge between yield-terminated arms — #2211 review.)
+     */
+    visitYield(stmt) {
+        const idx = this.builder.newBlock(startLineOf(stmt), endLineOf(stmt), stmt.text, 'normal', this.harvest.facts(stmt));
+        const res = this.cfc.resolveYield();
+        const { target, finalizers } = res ?? {
+            target: this.builder.exitIndex,
+            finalizers: this.cfc.finalizersForReturn(),
+        };
+        (0, control_flow_context_js_1.wireJumpThroughFinalizers)(this.builder, idx, finalizers, target, 'break');
+        return { entry: idx, exits: [] };
+    }
+    visitBreak(stmt) {
+        const idx = this.builder.newBlock(startLineOf(stmt), endLineOf(stmt), stmt.text);
+        const label = this.jumpLabel(stmt);
+        const res = this.cfc.resolveBreak(label);
+        const { target, finalizers } = res ?? {
+            target: this.builder.exitIndex,
+            finalizers: this.cfc.finalizersForReturn(),
+        };
+        (0, control_flow_context_js_1.wireJumpThroughFinalizers)(this.builder, idx, finalizers, target, 'break');
+        return { entry: idx, exits: [] };
+    }
+    visitContinue(stmt) {
+        const idx = this.builder.newBlock(startLineOf(stmt), endLineOf(stmt), stmt.text);
+        const label = this.jumpLabel(stmt);
+        const res = this.cfc.resolveContinue(label);
+        const { target, finalizers } = res ?? {
+            target: this.builder.exitIndex,
+            finalizers: this.cfc.finalizersForReturn(),
+        };
+        (0, control_flow_context_js_1.wireJumpThroughFinalizers)(this.builder, idx, finalizers, target, 'continue');
+        return { entry: idx, exits: [] };
+    }
+    /** The trailing label `identifier` of a `break`/`continue`, if any. */
+    jumpLabel(stmt) {
+        const id = stmt.namedChildren.find((c) => c.type === 'identifier');
+        return id?.text;
+    }
+    /**
+     * `label: <statement>` — the label names the construct it directly wraps. For a
+     * loop/switch we forward the label so its pushed frame carries it (`break
+     * outer;` then resolves to it); for any other labeled statement we push a
+     * labeled-block frame around its body so `break label;` reaches the join after.
+     */
+    visitLabeled(stmt) {
+        const labelNode = stmt.namedChildren.find((c) => c.type === 'identifier');
+        const label = labelNode?.text;
+        const body = stmt.namedChildren.find((c) => c.id !== labelNode?.id && !isComment(c)) ?? null;
+        if (!body || label === undefined)
+            return this.visitBody(body);
+        if (this.isLoopOrSwitchStatement(body)) {
+            // Forward the label to the loop/switch frame this statement pushes.
+            this.pendingLabels = [...this.pendingLabels, label];
+            return this.visitStmt(body);
+        }
+        // Labeled non-loop (`blk: { … break blk; … }`) — a break-to-label join after
+        // the body; an unlabeled break never matches it.
+        const joinBlock = this.builder.newBlock(endLineOf(stmt), endLineOf(stmt), '');
+        this.cfc.pushLabeledBlock(joinBlock, [label]);
+        const res = this.visitBody(body);
+        this.cfc.pop();
+        if (res)
+            this.builder.connect(res.exits, joinBlock, 'seq');
+        const entry = res?.entry ?? joinBlock;
+        return { entry, exits: [joinBlock] };
+    }
+    isLoopOrSwitchStatement(node) {
+        return (node.type === 'for_statement' ||
+            node.type === 'enhanced_for_statement' ||
+            node.type === 'while_statement' ||
+            node.type === 'do_statement' ||
+            (node.type === 'switch_expression' && this.isStatementSwitch(node)));
+    }
+    /** Take and clear the labels queued by an enclosing `labeled_statement`. */
+    takeLabels() {
+        const labels = this.pendingLabels;
+        this.pendingLabels = [];
+        return labels;
+    }
+    visitIf(stmt) {
+        const cond = this.condOf(stmt) ?? stmt;
+        const condBlock = this.builder.newBlock(startLineOf(stmt), endLineOf(cond), cond.text, 'normal', this.harvest.facts(cond));
+        const exits = [];
+        const thenRes = this.visitBody(stmt.childForFieldName('consequence'));
+        if (thenRes) {
+            this.builder.edge(condBlock, thenRes.entry, 'cond-true');
+            exits.push(...thenRes.exits);
+        }
+        else {
+            exits.push(condBlock); // empty then — true path falls through
+        }
+        // No `else_clause` wrapper in Java: `alternative` is the else body or the
+        // nested `if_statement` of an `else if` chain directly.
+        const elseNode = stmt.childForFieldName('alternative');
+        if (elseNode) {
+            const elseRes = this.visitBody(elseNode);
+            if (elseRes) {
+                this.builder.edge(condBlock, elseRes.entry, 'cond-false');
+                exits.push(...elseRes.exits);
+            }
+            else {
+                exits.push(condBlock);
+            }
+        }
+        else {
+            exits.push(condBlock); // no else — false path falls through to the join
+        }
+        return { entry: condBlock, exits: [...new Set(exits)] };
+    }
+    /** The (paren-unwrapped) condition expression of an if/while/do/synchronized. */
+    condOf(stmt) {
+        const cond = stmt.childForFieldName('condition');
+        return cond ? this.unwrapParen(cond) : undefined;
+    }
+    visitWhile(stmt) {
+        const labels = this.takeLabels();
+        const cond = this.condOf(stmt) ?? stmt;
+        const header = this.builder.newBlock(startLineOf(stmt), endLineOf(cond), cond.text, 'normal', this.harvest.facts(cond));
+        const loopExit = this.builder.newBlock(endLineOf(stmt), endLineOf(stmt), '');
+        this.cfc.pushLoop(header, loopExit, labels);
+        const body = this.visitBody(this.bodyBlockOf(stmt));
+        this.cfc.pop();
+        if (body) {
+            this.builder.edge(header, body.entry, 'cond-true');
+            this.builder.connect(body.exits, header, 'loop-back');
+        }
+        else {
+            this.builder.edge(header, header, 'loop-back'); // empty body re-tests
+        }
+        // Always emit the structural exit edge — even `while (true)` keeps EXIT
+        // reverse-reachable for the post-dominator / CDG pass.
+        this.builder.edge(header, loopExit, 'cond-false');
+        return { entry: header, exits: [loopExit] };
+    }
+    visitDoWhile(stmt) {
+        const labels = this.takeLabels();
+        const cond = this.condOf(stmt) ?? stmt;
+        const condBlock = this.builder.newBlock(startLineOf(cond), endLineOf(cond), cond.text, 'normal', this.harvest.facts(cond));
+        const loopExit = this.builder.newBlock(endLineOf(stmt), endLineOf(stmt), '');
+        this.cfc.pushLoop(condBlock, loopExit, labels);
+        const body = this.visitBody(this.bodyBlockOf(stmt));
+        this.cfc.pop();
+        const backTarget = body ? body.entry : condBlock;
+        if (body)
+            this.builder.connect(body.exits, condBlock, 'seq');
+        this.builder.edge(condBlock, backTarget, 'loop-back'); // cond true → run body again
+        this.builder.edge(condBlock, loopExit, 'cond-false');
+        return { entry: backTarget, exits: [loopExit] };
+    }
+    visitFor(stmt) {
+        const labels = this.takeLabels();
+        const init = stmt.childForFieldName('init');
+        const cond = stmt.childForFieldName('condition');
+        const incr = stmt.childForFieldName('update');
+        const header = this.builder.newBlock(startLineOf(stmt), cond ? endLineOf(cond) : startLineOf(stmt), cond ? cond.text : 'for(;;)', 'normal', cond ? this.harvest.facts(cond) : undefined);
+        const loopExit = this.builder.newBlock(endLineOf(stmt), endLineOf(stmt), '');
+        let incrBlock = header;
+        if (incr) {
+            incrBlock = this.builder.newBlock(startLineOf(incr), endLineOf(incr), incr.text, 'normal', this.harvest.facts(incr));
+            this.builder.edge(incrBlock, header, 'loop-back');
+        }
+        this.cfc.pushLoop(incrBlock, loopExit, labels);
+        const body = this.visitBody(this.bodyBlockOf(stmt));
+        this.cfc.pop();
+        if (body) {
+            this.builder.edge(header, body.entry, 'cond-true');
+            this.builder.connect(body.exits, incrBlock, incr ? 'seq' : 'loop-back');
+        }
+        else {
+            this.builder.edge(header, incrBlock, 'cond-true');
+            if (!incr)
+                this.builder.edge(header, header, 'loop-back');
+        }
+        // Structural exit edge — `for (;;) {}` (no condition) still keeps EXIT
+        // reverse-reachable so CDG is not silently skipped for the function.
+        this.builder.edge(header, loopExit, 'cond-false');
+        let entry = header;
+        if (init) {
+            const initBlock = this.builder.newBlock(startLineOf(init), endLineOf(init), init.text, 'normal', this.harvest.facts(init));
+            this.builder.edge(initBlock, header, 'seq');
+            entry = initBlock;
+        }
+        return { entry, exits: [loopExit] };
+    }
+    visitForEach(stmt) {
+        const labels = this.takeLabels();
+        // Header text is SYNTHESIZED, so facts come from the name/value nodes
+        // directly (the loop variable is a def, the iterated expression a use).
+        const header = this.builder.newBlock(startLineOf(stmt), startLineOf(stmt), this.forEachHeaderText(stmt), 'normal', this.harvest.forEachHeadFacts(stmt));
+        const loopExit = this.builder.newBlock(endLineOf(stmt), endLineOf(stmt), '');
+        this.cfc.pushLoop(header, loopExit, labels);
+        const body = this.visitBody(this.bodyBlockOf(stmt));
+        this.cfc.pop();
+        if (body) {
+            this.builder.edge(header, body.entry, 'cond-true');
+            this.builder.connect(body.exits, header, 'loop-back');
+        }
+        else {
+            this.builder.edge(header, header, 'loop-back');
+        }
+        this.builder.edge(header, loopExit, 'cond-false');
+        return { entry: header, exits: [loopExit] };
+    }
+    forEachHeaderText(stmt) {
+        const name = stmt.childForFieldName('name')?.text ?? '';
+        const value = stmt.childForFieldName('value')?.text ?? '';
+        return name || value ? `for(${name} : ${value})` : 'for(… : …)';
+    }
+    /**
+     * `synchronized (obj) body` — the monitor release runs on BOTH normal AND
+     * exception exit (deterministic finalizer), exactly like a `finally`. Modeled
+     * as a synthesized finalizer block so a `return`/`break`/`continue` crossing it
+     * threads through and gets a `finally-*` completion edge.
+     */
+    visitSynchronized(stmt) {
+        const bodyNode = this.bodyBlockOf(stmt) ?? null;
+        const lockExpr = this.synchronizedLock(stmt);
+        const releaseFacts = lockExpr ? this.harvest.facts(lockExpr) : undefined;
+        return this.buildProtectedSynthetic(bodyNode, stmt, 'release', releaseFacts);
+    }
+    /** The locked expression of a `synchronized (expr) {…}` (paren-unwrapped). */
+    synchronizedLock(stmt) {
+        const body = stmt.childForFieldName('body');
+        const expr = stmt.namedChildren.find((c) => c.id !== body?.id && !isComment(c));
+        return expr ? this.unwrapParen(expr) : undefined;
+    }
+    /** Whether a `switch_expression` is used as a STATEMENT (vs an expression value). */
+    isStatementSwitch(node) {
+        const p = node.parent;
+        if (!p)
+            return false;
+        // A statement-position switch is a direct child of a `block`, a classic
+        // group, or an arrow rule body; an expression-value switch is nested under a
+        // declaration / return / assignment / argument and is NOT one of these.
+        return (p.type === 'block' ||
+            p.type === 'switch_block_statement_group' ||
+            p.type === 'switch_rule' ||
+            p.type === 'labeled_statement');
+    }
+    visitSwitch(stmt) {
+        const labels = this.takeLabels();
+        const value = this.condOf(stmt) ?? stmt;
+        const dispatch = this.builder.newBlock(startLineOf(stmt), endLineOf(value), value.text, 'normal', this.harvest.facts(value));
+        const switchExit = this.builder.newBlock(endLineOf(stmt), endLineOf(stmt), '');
+        this.cfc.pushSwitch(switchExit, labels);
+        const body = stmt.childForFieldName('body');
+        // A `switch_block` holds `switch_block_statement_group`s (classic, fall
+        // through) OR `switch_rule`s (arrow, no fallthrough); never both.
+        const groups = body
+            ? body.namedChildren.filter((c) => c.type === 'switch_block_statement_group' || c.type === 'switch_rule')
+            : [];
+        // Each group's case-test expression(s) evaluate before the body runs —
+        // harvest their uses (and any pattern binding as a may-def) onto the dispatch
+        // block, one record per test, CONDITIONALLY (a later case test only runs when
+        // earlier cases didn't match).
+        for (const g of groups) {
+            for (const test of this.caseTests(g)) {
+                this.builder.attachFacts(dispatch, this.harvest.factsConditional(test));
+            }
+        }
+        const groupResults = groups.map((g) => this.visitSeq(this.caseStatements(g)));
+        const hasDefault = groups.some((g) => this.caseIsDefault(g));
+        const arrowForm = groups.some((g) => g.type === 'switch_rule');
+        const entryOf = new Array(groups.length);
+        let after = switchExit;
+        for (let i = groups.length - 1; i >= 0; i--) {
+            entryOf[i] = groupResults[i]?.entry ?? after;
+            after = entryOf[i];
+        }
+        for (let i = 0; i < groups.length; i++) {
+            this.builder.edge(dispatch, entryOf[i], 'switch-case');
+        }
+        if (!hasDefault)
+            this.builder.edge(dispatch, switchExit, 'switch-case'); // no-match path
+        // Classic colon groups FALL THROUGH to the next group when not break/return-
+        // terminated; arrow rules NEVER fall through (each body rejoins after).
+        for (let i = 0; i < groups.length; i++) {
+            const res = groupResults[i];
+            if (!res)
+                continue;
+            if (groups[i].type === 'switch_rule') {
+                this.builder.connect(res.exits, switchExit, 'seq');
+            }
+            else {
+                const fallTarget = i + 1 < groups.length ? entryOf[i + 1] : switchExit;
+                this.builder.connect(res.exits, fallTarget, 'fallthrough');
+            }
+        }
+        void arrowForm;
+        this.cfc.pop();
+        return { entry: dispatch, exits: [switchExit] };
+    }
+    /** A switch group/rule's body statements (everything but its `switch_label`). */
+    caseStatements(group) {
+        return group.namedChildren.filter((c) => c.type !== 'switch_label' && !isComment(c));
+    }
+    /** The case-test value expressions of a group (a `switch_label`'s values). */
+    caseTests(group) {
+        const label = group.namedChildren.find((c) => c.type === 'switch_label');
+        if (!label)
+            return [];
+        return label.namedChildren.filter((c) => !isComment(c));
+    }
+    /** A `default:` group has a `switch_label` with no value children. */
+    caseIsDefault(group) {
+        const label = group.namedChildren.find((c) => c.type === 'switch_label');
+        if (!label)
+            return false;
+        return label.namedChildren.filter((c) => !isComment(c)).length === 0;
+    }
+    // ── value-position branches (#2207) ─────────────────────────────────────────
+    /**
+     * The direct value of a `local_variable_declaration` with a SINGLE declarator:
+     * its `variable_declarator`'s `value` field (`var x = <value>`). Returns
+     * undefined for a multi-declarator decl (`int a = …, b = …;`) — modeling those
+     * arm-by-arm is out of scope, so they coalesce inline. The DIRECT value only:
+     * `var x = f(switch …)` yields the call, not the nested switch, so an
+     * argument-position switch stays inline.
+     */
+    directValue(stmt) {
+        const declarators = stmt.namedChildren.filter((c) => c.type === 'variable_declarator');
+        if (declarators.length !== 1)
+            return undefined;
+        return declarators[0].childForFieldName('value') ?? undefined;
+    }
+    /**
+     * Whether `node` is a value-position branch worth modeling as control flow
+     * (#2207): a `switch_expression` with ≥2 case groups (a real dispatch). Java has
+     * no value-position `if` (the ternary `?:` is deliberately excluded, like elvis
+     * in Kotlin), so `switch` is the only carrier.
+     */
+    isModelableValueBranch(node) {
+        if (node.type !== 'switch_expression')
+            return false;
+        const body = node.childForFieldName('body');
+        if (!body)
+            return false;
+        const groups = body.namedChildren.filter((c) => c.type === 'switch_block_statement_group' || c.type === 'switch_rule');
+        return groups.length >= 2;
+    }
+    /**
+     * Model a value-position `switch` as control flow regardless of position —
+     * {@link visitSeq}'s `isStatementSwitch` gate keeps value-position switches
+     * inline, so call {@link visitSwitch} directly here.
+     */
+    visitBranchExpr(node) {
+        return this.visitSwitch(node);
+    }
+    /**
+     * `var x = switch (k) { … }` (#2207): visit the switch as control flow, then
+     * rejoin its arms at a facts-only continuation carrying ONLY the bound name's
+     * def (the subject + arm-value uses are already harvested onto the switch's
+     * blocks). The arms are now control-dependent on the dispatch, and `x` is
+     * defined at the join — mirrors the Kotlin / Rust value-position binding.
+     */
+    visitBindBranch(stmt, branch) {
+        const res = this.visitBranchExpr(branch);
+        const cont = this.builder.newBlock(startLineOf(stmt), startLineOf(stmt), '', 'normal', this.harvest.bindingDefFacts(stmt));
+        this.builder.connect(res.exits, cont, 'seq');
+        return { entry: res.entry, exits: [cont] };
+    }
+    /**
+     * try / catch / finally / try-with-resources. The `resources` of a
+     * try-with-resources auto-close on BOTH normal and exception exit — exactly
+     * `finally`-shaped — so we synthesize a close finalizer that wraps an explicit
+     * `finally` (if any).
+     */
+    visitTry(stmt) {
+        const bodyNode = stmt.childForFieldName('body');
+        const catchClauses = [];
+        let finallyClause;
+        for (let i = 0; i < stmt.namedChildCount; i++) {
+            const c = stmt.namedChild(i);
+            if (c?.type === 'catch_clause')
+                catchClauses.push(c);
+            else if (c?.type === 'finally_clause')
+                finallyClause = c;
+        }
+        const finallyBody = finallyClause?.namedChildren.find((c) => c.type === 'block');
+        // try-with-resources: the resource close is a deterministic finalizer that
+        // runs after the body and (if present) before the explicit finally. Model it
+        // as a synthesized close block prepended to the finalizer chain.
+        const resources = this.tryResources(stmt);
+        return this.buildProtected(bodyNode ?? null, catchClauses, finallyBody ?? null, resources, stmt);
+    }
+    /** The `resource` nodes of a try-with-resources, or [] for a plain try. */
+    tryResources(stmt) {
+        const spec = stmt.childForFieldName('resources');
+        if (!spec)
+            return [];
+        return spec.namedChildren.filter((c) => c.type === 'resource');
+    }
+    /**
+     * Shared try/catch/finally builder. `catchClauses` may be empty; `finallyBody`
+     * is the explicit finally's `block` (or null); `resources` are try-with-
+     * resources resources (auto-close = an implicit finally that runs first).
+     *
+     * Models the TS/C# `visitTry` semantics: normal completion of try AND catch
+     * flow through the finalizers; a throw in the protected region routes to the
+     * handler; early exits crossing a finalizer thread through it (`finally-*`
+     * completion edges). The resource close finalizer (synthesized) and the
+     * explicit finally are chained so a crossing jump threads BOTH.
+     */
+    buildProtected(bodyNode, catchClauses, finallyBody, resources, span) {
+        // Innermost finalizer first on the active stack = outermost lexically. The
+        // resource close runs BEFORE the explicit finally, so push the explicit
+        // finally first (deeper) then the close (shallower / nearer the jump).
+        const explicitFinRes = finallyBody ? this.visitSeq(this.statementsOf(finallyBody)) : null;
+        const explicitFrame = explicitFinRes ? this.cfc.pushFinalizer(explicitFinRes.entry) : null;
+        // Synthesized resource-close finalizer (a single block; close()/AutoCloseable
+        // has no AST node), carrying the resource bindings' facts as uses.
+        let closeRes = null;
+        let closeFrame = null;
+        if (resources.length > 0) {
+            const closeFacts = this.harvest.resourceCloseFacts(resources);
+            const closeBlock = this.builder.newBlock(endLineOf(span), endLineOf(span), 'close', 'normal', closeFacts);
+            closeRes = { entry: closeBlock, exits: [closeBlock] };
+            // The close's normal exit flows into the explicit finally (if any).
+            if (explicitFinRes)
+                this.builder.edge(closeBlock, explicitFinRes.entry, 'seq');
+            closeFrame = this.cfc.pushFinalizer(closeRes.entry);
+        }
+        // The entry of the finalizer chain (what normal/exception completion runs
+        // first): close (if any) else explicit finally.
+        const finalizerEntry = closeRes?.entry ?? explicitFinRes?.entry;
+        // The set of normal exits AFTER the whole finalizer chain runs.
+        const finalizerExits = explicitFinRes?.exits ?? closeRes?.exits ?? null;
+        // Build each catch handler.
+        const catchEntries = [];
+        const catchExits = [];
+        let firstCatchEntry;
+        for (const clause of catchClauses) {
+            const clauseBody = clause.childForFieldName('body');
+            if (finalizerEntry !== undefined)
+                this.handlers.push(finalizerEntry);
+            let res = clauseBody ? this.visitSeq(this.statementsOf(clauseBody)) : null;
+            if (finalizerEntry !== undefined)
+                this.handlers.pop();
+            if (res === null) {
+                // Empty `catch {}` still catches — synthesize one block so exception flow
+                // lands somewhere and the post-try code stays reachable.
+                const idx = this.builder.newBlock(startLineOf(clause), endLineOf(clause), '');
+                res = { entry: idx, exits: [idx] };
+            }
+            const paramFacts = this.harvest.catchParamFacts(clause);
+            if (paramFacts) {
+                const paramBlock = this.builder.newBlock(startLineOf(clause), startLineOf(clause), '', 'normal', paramFacts);
+                this.builder.edge(paramBlock, res.entry, 'seq');
+                res = { entry: paramBlock, exits: res.exits };
+            }
+            catchEntries.push(res.entry);
+            catchExits.push(...res.exits);
+            if (firstCatchEntry === undefined)
+                firstCatchEntry = res.entry;
+        }
+        // Handler for the try body: first catch if present, else the finalizer
+        // chain, else the outer handler.
+        const tryHandler = firstCatchEntry ?? finalizerEntry ?? this.currentHandler();
+        const protectedStart = this.builder.blockCount;
+        this.handlers.push(tryHandler);
+        const bodyRes = bodyNode
+            ? bodyNode.type === 'block'
+                ? this.visitSeq(this.statementsOf(bodyNode))
+                : this.visitStmt(bodyNode)
+            : null;
+        this.handlers.pop();
+        if (catchClauses.length > 0 || finalizerEntry !== undefined) {
+            for (let b = protectedStart; b < this.builder.blockCount; b++) {
+                this.builder.edge(b, tryHandler, 'throw');
+            }
+        }
+        // Pop the finalizer frames (inner→outer) and drain their pending legs.
+        if (closeFrame && closeRes) {
+            this.cfc.pop();
+            (0, control_flow_context_js_1.drainFinalizerPending)(this.builder, closeFrame, closeRes.exits);
+        }
+        if (explicitFrame && explicitFinRes) {
+            this.cfc.pop();
+            (0, control_flow_context_js_1.drainFinalizerPending)(this.builder, explicitFrame, explicitFinRes.exits);
+        }
+        const exits = [];
+        if (finalizerEntry !== undefined) {
+            if (bodyRes)
+                this.builder.connect(bodyRes.exits, finalizerEntry, 'seq');
+            for (const e of catchExits)
+                this.builder.edge(e, finalizerEntry, 'seq');
+            if (finalizerExits)
+                exits.push(...finalizerExits);
+            // No catch → an exception re-propagates out after the finalizers run.
+            if (catchClauses.length === 0 && finalizerExits) {
+                this.builder.connect(finalizerExits, this.currentHandler(), 'throw');
+            }
+        }
+        else {
+            if (bodyRes)
+                exits.push(...bodyRes.exits);
+            exits.push(...catchExits);
+        }
+        const entry = bodyRes?.entry ?? finalizerEntry ?? catchEntries[0];
+        if (entry === undefined) {
+            void span;
+            return null;
+        }
+        return { entry, exits: [...new Set(exits)] };
+    }
+    /**
+     * `synchronized`: a protected body whose finalizer is a SYNTHESIZED single
+     * block (Monitor exit has no AST node). The finalizer runs on both normal and
+     * exception exit, and crossing jumps thread through it.
+     */
+    buildProtectedSynthetic(bodyNode, span, text, finalizerFacts) {
+        const finalizerBlock = this.builder.newBlock(endLineOf(span), endLineOf(span), text, 'normal', finalizerFacts ?? undefined);
+        const finRes = { entry: finalizerBlock, exits: [finalizerBlock] };
+        const finFrame = this.cfc.pushFinalizer(finRes.entry);
+        const protectedStart = this.builder.blockCount;
+        // The finalizer IS the handler — an exception in the body still runs the
+        // release, which then re-propagates to the outer handler.
+        this.handlers.push(finRes.entry);
+        const bodyRes = bodyNode
+            ? bodyNode.type === 'block'
+                ? this.visitSeq(this.statementsOf(bodyNode))
+                : this.visitStmt(bodyNode)
+            : null;
+        this.handlers.pop();
+        for (let b = protectedStart; b < this.builder.blockCount; b++) {
+            this.builder.edge(b, finRes.entry, 'throw');
+        }
+        this.cfc.pop();
+        (0, control_flow_context_js_1.drainFinalizerPending)(this.builder, finFrame, finRes.exits);
+        // Normal completion of the body flows through the finalizer; the finalizer's
+        // exit re-propagates an exception to the outer handler (it had no catch).
+        if (bodyRes)
+            this.builder.connect(bodyRes.exits, finRes.entry, 'seq');
+        this.builder.connect(finRes.exits, this.currentHandler(), 'throw');
+        const entry = bodyRes?.entry ?? finRes.entry;
+        return { entry, exits: [...finRes.exits] };
+    }
+    /** Nearest enclosing exception handler, or the function EXIT. */
+    currentHandler() {
+        return this.handlers.length ? this.handlers[this.handlers.length - 1] : this.builder.exitIndex;
+    }
+}
+/** Build the CFG for one Java function node, or `undefined` if not modelable. */
+function buildFunctionCfg(fnNode, filePath) {
+    try {
+        if (!JAVA_FUNCTION_TYPES.has(fnNode.type))
+            return undefined;
+        const startLine = startLineOf(fnNode);
+        const endLine = endLineOf(fnNode);
+        const startColumn = fnNode.startPosition.column;
+        // The body is a `block` (field `body`) OR an expression (single-expression
+        // lambda `x -> expr`).
+        const body = fnNode.childForFieldName('body') ?? fnNode.namedChildren.find((c) => c.type === 'block');
+        if (!body)
+            return undefined; // abstract / interface method — no body
+        const builder = new cfg_builder_js_1.CfgBuilder(filePath, startLine, endLine, startColumn);
+        const harvest = new java_harvest_js_1.JavaHarvester(fnNode);
+        const paramFacts = harvest.paramFacts();
+        if (paramFacts)
+            builder.attachFacts(builder.entryIndex, paramFacts);
+        if (body.type !== 'block') {
+            // Single-expression lambda (`x -> expr`): one block whose value is returned.
+            const blk = builder.newBlock(startLineOf(body), endLineOf(body), body.text, 'normal', harvest.facts(body));
+            builder.edge(builder.entryIndex, blk, 'seq');
+            builder.edge(blk, builder.exitIndex, 'return');
+            return builder.finish(harvest.bindingTable());
+        }
+        const walk = new JavaCfgWalk(builder, harvest);
+        const res = walk.visitSeq(body.namedChildren.filter((c) => !isComment(c)));
+        if (!res) {
+            builder.edge(builder.entryIndex, builder.exitIndex, 'seq'); // empty body
+            return builder.finish(harvest.bindingTable());
+        }
+        builder.edge(builder.entryIndex, res.entry, 'seq');
+        builder.connect(res.exits, builder.exitIndex, 'seq'); // normal fall-off → EXIT
+        return builder.finish(harvest.bindingTable());
+    }
+    catch (err) {
+        // Never throw out of buildFunctionCfg — a malformed AST shape must skip only
+        // this one function's CFG, never drop the whole file's language group (R4).
+        // eslint-disable-next-line no-console
+        console.warn(`[cfg] Java buildFunctionCfg skipped a function in ${filePath}: ${String(err)}`);
+        return undefined;
+    }
+}
+/** Whether a node is a Java function this visitor builds a CFG for. */
+function isFunction(node) {
+    return JAVA_FUNCTION_TYPES.has(node.type);
+}
+/** The Java CFG visitor. */
+function createJavaCfgVisitor() {
+    return { buildFunctionCfg, isFunction };
+}