circle-ir-ai 1.1.0

package/dist/project/analyzer.js

@@ -0,0 +1,358 @@
+/**
+ * Project-Level Analyzer
+ *
+ * Analyzes multiple files as a project, building:
+ * - Type hierarchy (class inheritance, interface implementations)
+ * - Cross-file call graph
+ * - Multi-file taint paths
+ */
+import { analyze, initAnalyzer, isAnalyzerInitialized, createWithJdkTypes, SymbolTable, CrossFileResolver, } from 'circle-ir';
+import { buildTypeHierarchy } from './type-hierarchy.js';
+import { buildCrossFileCalls } from './call-graph.js';
+import { findTaintPaths } from './taint-paths.js';
+import { analyzeProjectTaint, } from '../analysis/llm-cross-file-taint.js';
+// Simple logger
+const logger = {
+    info: (msg, data) => {
+        if (process.env.DEBUG)
+            console.log(`[INFO] ${msg}`, data || '');
+    },
+    warn: (msg, data) => {
+        console.warn(`[WARN] ${msg}`, data || '');
+    },
+    error: (msg, data) => {
+        console.error(`[ERROR] ${msg}`, data || '');
+    },
+};
+// Helper to calculate severity
+function calculateSeverity(input) {
+    const criticalSinks = ['sql_injection', 'command_injection', 'code_injection', 'deserialization'];
+    const highSinks = ['xss', 'path_traversal', 'xxe', 'ssrf', 'ldap_injection'];
+    if (criticalSinks.some(s => input.sinkType.includes(s))) {
+        return input.pathExists ? 'critical' : 'high';
+    }
+    if (highSinks.some(s => input.sinkType.includes(s))) {
+        return input.pathExists ? 'high' : 'medium';
+    }
+    return input.pathExists ? 'medium' : 'low';
+}
+// Helper to get remediation advice
+function getRemediation(sinkType) {
+    const remediations = {
+        sql_injection: 'Use parameterized queries or prepared statements',
+        command_injection: 'Avoid shell execution; use array-based APIs with validated input',
+        xss: 'Encode output using context-appropriate encoding (HTML, JavaScript, URL)',
+        path_traversal: 'Validate and canonicalize paths; use allowlists',
+        xxe: 'Disable external entity processing in XML parsers',
+        ssrf: 'Validate URLs against allowlist; block internal network access',
+        deserialization: 'Avoid deserializing untrusted data; use allowlists',
+        ldap_injection: 'Use parameterized LDAP queries; escape special characters',
+    };
+    for (const [key, value] of Object.entries(remediations)) {
+        if (sinkType.includes(key))
+            return value;
+    }
+    return 'Validate and sanitize all user input before use';
+}
+/**
+ * Analyze a project consisting of multiple files.
+ */
+export async function analyzeProject(files, options = {}) {
+    // Ensure analyzer is initialized
+    if (!isAnalyzerInitialized()) {
+        await initAnalyzer();
+    }
+    const startTime = Date.now();
+    // Initialize cross-file resolution infrastructure
+    const typeResolver = createWithJdkTypes();
+    const symbolTable = new SymbolTable();
+    const crossFileResolver = new CrossFileResolver(symbolTable, typeResolver);
+    // Analyze each file individually
+    const fileAnalyses = [];
+    let totalLoc = 0;
+    for (const file of files) {
+        const language = detectLanguage(file.path);
+        const analysis = await analyze(file.content, file.path, language);
+        fileAnalyses.push({
+            file: file.path,
+            analysis,
+        });
+        totalLoc += analysis.meta.loc;
+        // Register with cross-file resolver for enhanced resolution
+        crossFileResolver.addFile(file.path, analysis);
+    }
+    // Build type hierarchy from all files (uses legacy approach + resolver)
+    const typeHierarchy = buildTypeHierarchy(fileAnalyses);
+    // Merge type hierarchy from resolver (has JDK types pre-populated)
+    for (const type of typeResolver.getAllTypes()) {
+        if (type.kind === 'class' || type.kind === 'enum') {
+            if (!typeHierarchy.classes[type.fqn]) {
+                typeHierarchy.classes[type.fqn] = {
+                    file: type.file,
+                    extends: type.extends || null,
+                    implements: type.implements,
+                    subclasses: typeResolver.getDirectSubtypes(type.fqn),
+                };
+            }
+        }
+        else if (type.kind === 'interface') {
+            if (!typeHierarchy.interfaces[type.fqn]) {
+                typeHierarchy.interfaces[type.fqn] = {
+                    file: type.file,
+                    extends: type.extendsInterfaces,
+                    implementations: typeResolver.getDirectImplementations(type.fqn),
+                };
+            }
+        }
+    }
+    // Build cross-file call graph (enhanced with resolver)
+    const crossFileCalls = buildCrossFileCalls(fileAnalyses, typeHierarchy);
+    // Find taint paths across files
+    let taintPaths = findTaintPaths(fileAnalyses, crossFileCalls);
+    // Apply LLM-based cross-file taint analysis if enabled
+    let llmCrossFileTaintResult;
+    if (options.enableLLMCrossFileTaint) {
+        try {
+            // Build file map for LLM analysis
+            const fileMap = new Map();
+            for (let i = 0; i < files.length; i++) {
+                fileMap.set(files[i].path, {
+                    code: files[i].content,
+                    ir: fileAnalyses[i].analysis,
+                });
+            }
+            llmCrossFileTaintResult = await analyzeProjectTaint(fileMap);
+            logger.info('LLM cross-file taint analysis applied', {
+                flowsFound: llmCrossFileTaintResult.flows.length,
+                filePairsAnalyzed: llmCrossFileTaintResult.reasoning,
+            });
+            // Enhance taint paths with LLM-discovered flows
+            for (const flow of llmCrossFileTaintResult.flows) {
+                // Check if this flow already exists in taintPaths
+                const exists = taintPaths.some(p => p.source.file === flow.sourceFile &&
+                    p.sink.file === flow.targetFile &&
+                    Math.abs(p.source.line - flow.sourceLine) < 5);
+                if (!exists && flow.confidence > 0.7) {
+                    // Add as a new taint path
+                    taintPaths.push({
+                        id: `llm-cross-${flow.sourceFile}-${flow.sourceLine}-${flow.targetFile}`,
+                        source: {
+                            file: flow.sourceFile,
+                            line: flow.sourceLine,
+                            type: 'cross_file_import',
+                            code: `imported ${flow.sourceSymbol}`,
+                        },
+                        sink: {
+                            file: flow.targetFile,
+                            line: flow.targetLine || 0,
+                            type: 'cross_file_sink',
+                            cwe: 'CWE-unknown',
+                            code: `uses ${flow.targetSymbol}`,
+                        },
+                        hops: [{
+                                file: flow.targetFile,
+                                method: 'unknown',
+                                line: flow.targetLine || 0,
+                                code: `${flow.targetSymbol} from ${flow.sourceFile}`,
+                                variable: flow.targetSymbol,
+                            }],
+                        path_exists: true,
+                        sanitizers_in_path: [],
+                        confidence: flow.confidence,
+                    });
+                }
+            }
+        }
+        catch (error) {
+            logger.warn('LLM cross-file taint analysis failed', {
+                error: error instanceof Error ? error.message : String(error),
+            });
+        }
+    }
+    // Aggregate findings from all files and cross-file analysis
+    const findings = aggregateFindings(fileAnalyses, taintPaths);
+    // Build project metadata
+    const meta = {
+        name: options.name ?? extractProjectName(files),
+        root: options.root ?? extractRoot(files),
+        language: options.language ?? detectPrimaryLanguage(files),
+        framework: options.framework,
+        framework_version: options.frameworkVersion,
+        build_tool: options.buildTool,
+        total_files: files.length,
+        total_loc: totalLoc,
+        analyzed_at: new Date().toISOString(),
+    };
+    return {
+        meta,
+        files: fileAnalyses,
+        type_hierarchy: typeHierarchy,
+        cross_file_calls: crossFileCalls,
+        taint_paths: taintPaths,
+        findings,
+    };
+}
+/**
+ * Detect language from file extension.
+ */
+function detectLanguage(filePath) {
+    if (filePath.endsWith('.java')) {
+        return 'java';
+    }
+    if (filePath.endsWith('.c') || filePath.endsWith('.h')) {
+        return 'c';
+    }
+    if (filePath.endsWith('.cpp') || filePath.endsWith('.cc') ||
+        filePath.endsWith('.cxx') || filePath.endsWith('.hpp')) {
+        return 'cpp';
+    }
+    if (filePath.endsWith('.js') || filePath.endsWith('.jsx') ||
+        filePath.endsWith('.mjs') || filePath.endsWith('.cjs')) {
+        return 'javascript';
+    }
+    if (filePath.endsWith('.ts') || filePath.endsWith('.tsx') ||
+        filePath.endsWith('.mts') || filePath.endsWith('.cts')) {
+        return 'typescript';
+    }
+    if (filePath.endsWith('.py')) {
+        return 'python';
+    }
+    return 'java'; // Default
+}
+/**
+ * Detect primary language of the project.
+ */
+function detectPrimaryLanguage(files) {
+    const counts = { java: 0, c: 0, cpp: 0, javascript: 0, typescript: 0, python: 0, rust: 0 };
+    for (const file of files) {
+        const lang = detectLanguage(file.path);
+        counts[lang]++;
+    }
+    let maxLang = 'java';
+    let maxCount = 0;
+    for (const [lang, count] of Object.entries(counts)) {
+        if (count > maxCount) {
+            maxCount = count;
+            maxLang = lang;
+        }
+    }
+    return maxLang;
+}
+/**
+ * Extract project name from file paths.
+ */
+function extractProjectName(files) {
+    if (files.length === 0) {
+        return 'unknown';
+    }
+    // Try to find common parent directory
+    const paths = files.map(f => f.path.split('/'));
+    if (paths.length === 0 || paths[0].length === 0) {
+        return 'unknown';
+    }
+    // Find common prefix
+    let commonPrefix = [];
+    for (let i = 0; i < paths[0].length; i++) {
+        const segment = paths[0][i];
+        if (paths.every(p => p[i] === segment)) {
+            commonPrefix.push(segment);
+        }
+        else {
+            break;
+        }
+    }
+    // Return last segment of common prefix
+    if (commonPrefix.length > 0) {
+        return commonPrefix[commonPrefix.length - 1];
+    }
+    return 'unknown';
+}
+/**
+ * Extract root directory from file paths.
+ */
+function extractRoot(files) {
+    if (files.length === 0) {
+        return '/';
+    }
+    const paths = files.map(f => f.path.split('/'));
+    if (paths.length === 0) {
+        return '/';
+    }
+    // Find common prefix
+    const commonPrefix = [];
+    for (let i = 0; i < paths[0].length - 1; i++) { // -1 to exclude filename
+        const segment = paths[0][i];
+        if (paths.every(p => p[i] === segment)) {
+            commonPrefix.push(segment);
+        }
+        else {
+            break;
+        }
+    }
+    return commonPrefix.join('/') || '/';
+}
+/**
+ * Aggregate findings from file analyses and cross-file taint paths.
+ */
+function aggregateFindings(fileAnalyses, taintPaths) {
+    const findings = [];
+    const seenIds = new Set();
+    // Collect findings from individual files
+    // (Currently findings are generated per-file, but we may want to dedupe)
+    // Generate findings from cross-file taint paths
+    for (const path of taintPaths) {
+        if (path.path_exists && path.sanitizers_in_path.length === 0) {
+            const id = `cross-file-${path.source.file}:${path.source.line}-${path.sink.file}:${path.sink.line}`;
+            if (!seenIds.has(id)) {
+                seenIds.add(id);
+                findings.push({
+                    id,
+                    type: path.sink.type,
+                    cwe: path.sink.cwe,
+                    severity: calculateSeverity({
+                        sourceType: path.source.type,
+                        sinkType: path.sink.type,
+                        pathExists: path.path_exists,
+                        confidence: path.confidence,
+                    }),
+                    confidence: path.confidence,
+                    source: {
+                        file: path.source.file,
+                        line: path.source.line,
+                        code: path.source.code,
+                    },
+                    sink: {
+                        file: path.sink.file,
+                        line: path.sink.line,
+                        code: path.sink.code,
+                    },
+                    path: path.hops,
+                    exploitable: path.path_exists && path.confidence > 0.7,
+                    explanation: generateExplanation(path),
+                    remediation: getRemediation(path.sink.type),
+                    verification: {
+                        graph_path_exists: path.path_exists,
+                        llm_verified: false,
+                        llm_confidence: 0,
+                    },
+                });
+            }
+        }
+    }
+    // Sort by severity
+    const severityOrder = { critical: 0, high: 1, medium: 2, low: 3 };
+    findings.sort((a, b) => severityOrder[a.severity] - severityOrder[b.severity]);
+    return findings;
+}
+/**
+ * Generate explanation for a taint path.
+ */
+function generateExplanation(path) {
+    const sourceDesc = `User-controlled data from ${path.source.type} at ${path.source.file}:${path.source.line}`;
+    const sinkDesc = `reaches a ${path.sink.type} sink at ${path.sink.file}:${path.sink.line}`;
+    const hopDesc = path.hops.length > 0
+        ? ` through ${path.hops.length} intermediate step(s)`
+        : ' directly';
+    return `${sourceDesc}${hopDesc} and ${sinkDesc}. ${path.sink.cwe}`;
+}
+//# sourceMappingURL=analyzer.js.map

package/dist/project/analyzer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"analyzer.js","sourceRoot":"","sources":["../../src/project/analyzer.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EACL,OAAO,EACP,YAAY,EACZ,qBAAqB,EACrB,kBAAkB,EAClB,WAAW,EACX,iBAAiB,GAQlB,MAAM,WAAW,CAAC;AACnB,OAAO,EAAE,kBAAkB,EAAE,MAAM,qBAAqB,CAAC;AACzD,OAAO,EAAE,mBAAmB,EAAE,MAAM,iBAAiB,CAAC;AACtD,OAAO,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAClD,OAAO,EACL,mBAAmB,GAEpB,MAAM,qCAAqC,CAAC;AAE7C,gBAAgB;AAChB,MAAM,MAAM,GAAG;IACb,IAAI,EAAE,CAAC,GAAW,EAAE,IAA8B,EAAE,EAAE;QACpD,IAAI,OAAO,CAAC,GAAG,CAAC,KAAK;YAAE,OAAO,CAAC,GAAG,CAAC,UAAU,GAAG,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC,CAAC;IAClE,CAAC;IACD,IAAI,EAAE,CAAC,GAAW,EAAE,IAA8B,EAAE,EAAE;QACpD,OAAO,CAAC,IAAI,CAAC,UAAU,GAAG,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC,CAAC;IAC5C,CAAC;IACD,KAAK,EAAE,CAAC,GAAW,EAAE,IAA8B,EAAE,EAAE;QACrD,OAAO,CAAC,KAAK,CAAC,WAAW,GAAG,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC,CAAC;IAC9C,CAAC;CACF,CAAC;AAEF,+BAA+B;AAC/B,SAAS,iBAAiB,CAAC,KAK1B;IACC,MAAM,aAAa,GAAG,CAAC,eAAe,EAAE,mBAAmB,EAAE,gBAAgB,EAAE,iBAAiB,CAAC,CAAC;IAClG,MAAM,SAAS,GAAG,CAAC,KAAK,EAAE,gBAAgB,EAAE,KAAK,EAAE,MAAM,EAAE,gBAAgB,CAAC,CAAC;IAE7E,IAAI,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QACxD,OAAO,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,MAAM,CAAC;IAChD,CAAC;IACD,IAAI,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QACpD,OAAO,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC;IAC9C,CAAC;IACD,OAAO,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC;AAC7C,CAAC;AAED,mCAAmC;AACnC,SAAS,cAAc,CAAC,QAAgB;IACtC,MAAM,YAAY,GAA2B;QAC3C,aAAa,EAAE,kDAAkD;QACjE,iBAAiB,EAAE,kEAAkE;QACrF,GAAG,EAAE,0EAA0E;QAC/E,cAAc,EAAE,iDAAiD;QACjE,GAAG,EAAE,mDAAmD;QACxD,IAAI,EAAE,gEAAgE;QACtE,eAAe,EAAE,oDAAoD;QACrE,cAAc,EAAE,2DAA2D;KAC5E,CAAC;IACF,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,YAAY,CAAC,EAAE,CAAC;QACxD,IAAI,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC;YAAE,OAAO,KAAK,CAAC;IAC3C,CAAC;IACD,OAAO,iDAAiD,CAAC;AAC3D,CAAC;AAoBD;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,KAAkB,EAClB,UAA0B,EAAE;IAE5B,iCAAiC;IACjC,IAAI,CAAC,qBAAqB,EAAE,EAAE,CAAC;QAC7B,MAAM,YAAY,EAAE,CAAC;IACvB,CAAC;IAED,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAE7B,kDAAkD;IAClD,MAAM,YAAY,GAAG,kBAAkB,EAAE,CAAC;IAC1C,MAAM,WAAW,GAAG,IAAI,WAAW,EAAE,CAAC;IACtC,MAAM,iBAAiB,GAAG,IAAI,iBAAiB,CAAC,WAAW,EAAE,YAAY,CAAC,CAAC;IAE3E,iCAAiC;IACjC,MAAM,YAAY,GAAmB,EAAE,CAAC;IACxC,IAAI,QAAQ,GAAG,CAAC,CAAC;IAEjB,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,QAAQ,GAAG,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC3C,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;QAClE,YAAY,CAAC,IAAI,CAAC;YAChB,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,QAAQ;SACT,CAAC,CAAC;QACH,QAAQ,IAAI,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC;QAE9B,4DAA4D;QAC5D,iBAAiB,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;IACjD,CAAC;IAED,wEAAwE;IACxE,MAAM,aAAa,GAAG,kBAAkB,CAAC,YAAY,CAAC,CAAC;IAEvD,mEAAmE;IACnE,KAAK,MAAM,IAAI,IAAI,YAAY,CAAC,WAAW,EAAE,EAAE,CAAC;QAC9C,IAAI,IAAI,CAAC,IAAI,KAAK,OAAO,IAAI,IAAI,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;YAClD,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;gBACrC,aAAa,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG;oBAChC,IAAI,EAAE,IAAI,CAAC,IAAI;oBACf,OAAO,EAAE,IAAI,CAAC,OAAO,IAAI,IAAI;oBAC7B,UAAU,EAAE,IAAI,CAAC,UAAU;oBAC3B,UAAU,EAAE,YAAY,CAAC,iBAAiB,CAAC,IAAI,CAAC,GAAG,CAAC;iBACrD,CAAC;YACJ,CAAC;QACH,CAAC;aAAM,IAAI,IAAI,CAAC,IAAI,KAAK,WAAW,EAAE,CAAC;YACrC,IAAI,CAAC,aAAa,CAAC,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;gBACxC,aAAa,CAAC,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG;oBACnC,IAAI,EAAE,IAAI,CAAC,IAAI;oBACf,OAAO,EAAE,IAAI,CAAC,iBAAiB;oBAC/B,eAAe,EAAE,YAAY,CAAC,wBAAwB,CAAC,IAAI,CAAC,GAAG,CAAC;iBACjE,CAAC;YACJ,CAAC;QACH,CAAC;IACH,CAAC;IAED,uDAAuD;IACvD,MAAM,cAAc,GAAG,mBAAmB,CAAC,YAAY,EAAE,aAAa,CAAC,CAAC;IAExE,gCAAgC;IAChC,IAAI,UAAU,GAAG,cAAc,CAAC,YAAY,EAAE,cAAc,CAAC,CAAC;IAE9D,uDAAuD;IACvD,IAAI,uBAAyD,CAAC;IAC9D,IAAI,OAAO,CAAC,uBAAuB,EAAE,CAAC;QACpC,IAAI,CAAC;YACH,kCAAkC;YAClC,MAAM,OAAO,GAAG,IAAI,GAAG,EAAqC,CAAC;YAC7D,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;gBACtC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE;oBACzB,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO;oBACtB,EAAE,EAAE,YAAY,CAAC,CAAC,CAAC,CAAC,QAAQ;iBAC7B,CAAC,CAAC;YACL,CAAC;YAED,uBAAuB,GAAG,MAAM,mBAAmB,CAAC,OAAO,CAAC,CAAC;YAE7D,MAAM,CAAC,IAAI,CAAC,uCAAuC,EAAE;gBACnD,UAAU,EAAE,uBAAuB,CAAC,KAAK,CAAC,MAAM;gBAChD,iBAAiB,EAAE,uBAAuB,CAAC,SAAS;aACrD,CAAC,CAAC;YAEH,gDAAgD;YAChD,KAAK,MAAM,IAAI,IAAI,uBAAuB,CAAC,KAAK,EAAE,CAAC;gBACjD,kDAAkD;gBAClD,MAAM,MAAM,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CACjC,CAAC,CAAC,MAAM,CAAC,IAAI,KAAK,IAAI,CAAC,UAAU;oBACjC,CAAC,CAAC,IAAI,CAAC,IAAI,KAAK,IAAI,CAAC,UAAU;oBAC/B,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,GAAG,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAC9C,CAAC;gBAEF,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,UAAU,GAAG,GAAG,EAAE,CAAC;oBACrC,0BAA0B;oBAC1B,UAAU,CAAC,IAAI,CAAC;wBACd,EAAE,EAAE,aAAa,IAAI,CAAC,UAAU,IAAI,IAAI,CAAC,UAAU,IAAI,IAAI,CAAC,UAAU,EAAE;wBACxE,MAAM,EAAE;4BACN,IAAI,EAAE,IAAI,CAAC,UAAU;4BACrB,IAAI,EAAE,IAAI,CAAC,UAAU;4BACrB,IAAI,EAAE,mBAA0B;4BAChC,IAAI,EAAE,YAAY,IAAI,CAAC,YAAY,EAAE;yBACtC;wBACD,IAAI,EAAE;4BACJ,IAAI,EAAE,IAAI,CAAC,UAAU;4BACrB,IAAI,EAAE,IAAI,CAAC,UAAU,IAAI,CAAC;4BAC1B,IAAI,EAAE,iBAAwB;4BAC9B,GAAG,EAAE,aAAa;4BAClB,IAAI,EAAE,QAAQ,IAAI,CAAC,YAAY,EAAE;yBAClC;wBACD,IAAI,EAAE,CAAC;gCACL,IAAI,EAAE,IAAI,CAAC,UAAU;gCACrB,MAAM,EAAE,SAAS;gCACjB,IAAI,EAAE,IAAI,CAAC,UAAU,IAAI,CAAC;gCAC1B,IAAI,EAAE,GAAG,IAAI,CAAC,YAAY,SAAS,IAAI,CAAC,UAAU,EAAE;gCACpD,QAAQ,EAAE,IAAI,CAAC,YAAY;6BAC5B,CAAC;wBACF,WAAW,EAAE,IAAI;wBACjB,kBAAkB,EAAE,EAAE;wBACtB,UAAU,EAAE,IAAI,CAAC,UAAU;qBAC5B,CAAC,CAAC;gBACL,CAAC;YACH,CAAC;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,CAAC,IAAI,CAAC,sCAAsC,EAAE;gBAClD,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;aAC9D,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,4DAA4D;IAC5D,MAAM,QAAQ,GAAG,iBAAiB,CAAC,YAAY,EAAE,UAAU,CAAC,CAAC;IAE7D,yBAAyB;IACzB,MAAM,IAAI,GAAgB;QACxB,IAAI,EAAE,OAAO,CAAC,IAAI,IAAI,kBAAkB,CAAC,KAAK,CAAC;QAC/C,IAAI,EAAE,OAAO,CAAC,IAAI,IAAI,WAAW,CAAC,KAAK,CAAC;QACxC,QAAQ,EAAE,OAAO,CAAC,QAAQ,IAAI,qBAAqB,CAAC,KAAK,CAAC;QAC1D,SAAS,EAAE,OAAO,CAAC,SAAS;QAC5B,iBAAiB,EAAE,OAAO,CAAC,gBAAgB;QAC3C,UAAU,EAAE,OAAO,CAAC,SAAS;QAC7B,WAAW,EAAE,KAAK,CAAC,MAAM;QACzB,SAAS,EAAE,QAAQ;QACnB,WAAW,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;KACtC,CAAC;IAEF,OAAO;QACL,IAAI;QACJ,KAAK,EAAE,YAAY;QACnB,cAAc,EAAE,aAAa;QAC7B,gBAAgB,EAAE,cAAc;QAChC,WAAW,EAAE,UAAU;QACvB,QAAQ;KACT,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,SAAS,cAAc,CAAC,QAAgB;IACtC,IAAI,QAAQ,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;QAC/B,OAAO,MAAM,CAAC;IAChB,CAAC;IACD,IAAI,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QACvD,OAAO,GAAG,CAAC;IACb,CAAC;IACD,IAAI,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,QAAQ,CAAC,QAAQ,CAAC,KAAK,CAAC;QACrD,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;QAC3D,OAAO,KAAK,CAAC;IACf,CAAC;IACD,IAAI,QAAQ,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC;QACrD,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;QAC3D,OAAO,YAAY,CAAC;IACtB,CAAC;IACD,IAAI,QAAQ,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC;QACrD,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;QAC3D,OAAO,YAAY,CAAC;IACtB,CAAC;IACD,IAAI,QAAQ,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QAC7B,OAAO,QAAQ,CAAC;IAClB,CAAC;IACD,OAAO,MAAM,CAAC,CAAC,UAAU;AAC3B,CAAC;AAED;;GAEG;AACH,SAAS,qBAAqB,CAAC,KAAkB;IAC/C,MAAM,MAAM,GAAsC,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,GAAG,EAAE,CAAC,EAAE,UAAU,EAAE,CAAC,EAAE,UAAU,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;IAE9H,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,IAAI,GAAG,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACvC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC;IACjB,CAAC;IAED,IAAI,OAAO,GAAsB,MAAM,CAAC;IACxC,IAAI,QAAQ,GAAG,CAAC,CAAC;IAEjB,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QACnD,IAAI,KAAK,GAAG,QAAQ,EAAE,CAAC;YACrB,QAAQ,GAAG,KAAK,CAAC;YACjB,OAAO,GAAG,IAAyB,CAAC;QACtC,CAAC;IACH,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;;GAEG;AACH,SAAS,kBAAkB,CAAC,KAAkB;IAC5C,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACvB,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,sCAAsC;IACtC,MAAM,KAAK,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC;IAChD,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAChD,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,qBAAqB;IACrB,IAAI,YAAY,GAAa,EAAE,CAAC;IAChC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACzC,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAC5B,IAAI,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,OAAO,CAAC,EAAE,CAAC;YACvC,YAAY,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAC7B,CAAC;aAAM,CAAC;YACN,MAAM;QACR,CAAC;IACH,CAAC;IAED,uCAAuC;IACvC,IAAI,YAAY,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC5B,OAAO,YAAY,CAAC,YAAY,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IAC/C,CAAC;IAED,OAAO,SAAS,CAAC;AACnB,CAAC;AAED;;GAEG;AACH,SAAS,WAAW,CAAC,KAAkB;IACrC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACvB,OAAO,GAAG,CAAC;IACb,CAAC;IAED,MAAM,KAAK,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC;IAChD,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACvB,OAAO,GAAG,CAAC;IACb,CAAC;IAED,qBAAqB;IACrB,MAAM,YAAY,GAAa,EAAE,CAAC;IAClC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,yBAAyB;QACvE,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAC5B,IAAI,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,OAAO,CAAC,EAAE,CAAC;YACvC,YAAY,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAC7B,CAAC;aAAM,CAAC;YACN,MAAM;QACR,CAAC;IACH,CAAC;IAED,OAAO,YAAY,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC;AACvC,CAAC;AAED;;GAEG;AACH,SAAS,iBAAiB,CACxB,YAA4B,EAC5B,UAAuB;IAEvB,MAAM,QAAQ,GAAc,EAAE,CAAC;IAC/B,MAAM,OAAO,GAAG,IAAI,GAAG,EAAU,CAAC;IAElC,yCAAyC;IACzC,yEAAyE;IAEzE,gDAAgD;IAChD,KAAK,MAAM,IAAI,IAAI,UAAU,EAAE,CAAC;QAC9B,IAAI,IAAI,CAAC,WAAW,IAAI,IAAI,CAAC,kBAAkB,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC7D,MAAM,EAAE,GAAG,cAAc,IAAI,CAAC,MAAM,CAAC,IAAI,IAAI,IAAI,CAAC,MAAM,CAAC,IAAI,IAAI,IAAI,CAAC,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;YAEpG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC;gBACrB,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;gBAEhB,QAAQ,CAAC,IAAI,CAAC;oBACZ,EAAE;oBACF,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,IAAI;oBACpB,GAAG,EAAE,IAAI,CAAC,IAAI,CAAC,GAAG;oBAClB,QAAQ,EAAE,iBAAiB,CAAC;wBAC1B,UAAU,EAAE,IAAI,CAAC,MAAM,CAAC,IAAI;wBAC5B,QAAQ,EAAE,IAAI,CAAC,IAAI,CAAC,IAAI;wBACxB,UAAU,EAAE,IAAI,CAAC,WAAW;wBAC5B,UAAU,EAAE,IAAI,CAAC,UAAU;qBAC5B,CAAC;oBACF,UAAU,EAAE,IAAI,CAAC,UAAU;oBAC3B,MAAM,EAAE;wBACN,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,IAAI;wBACtB,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,IAAI;wBACtB,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,IAAI;qBACvB;oBACD,IAAI,EAAE;wBACJ,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,IAAI;wBACpB,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,IAAI;wBACpB,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,IAAI;qBACrB;oBACD,IAAI,EAAE,IAAI,CAAC,IAAI;oBACf,WAAW,EAAE,IAAI,CAAC,WAAW,IAAI,IAAI,CAAC,UAAU,GAAG,GAAG;oBACtD,WAAW,EAAE,mBAAmB,CAAC,IAAI,CAAC;oBACtC,WAAW,EAAE,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC;oBAC3C,YAAY,EAAE;wBACZ,iBAAiB,EAAE,IAAI,CAAC,WAAW;wBACnC,YAAY,EAAE,KAAK;wBACnB,cAAc,EAAE,CAAC;qBAClB;iBACF,CAAC,CAAC;YACL,CAAC;QACH,CAAC;IACH,CAAC;IAED,mBAAmB;IACnB,MAAM,aAAa,GAAG,EAAE,QAAQ,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,GAAG,EAAE,CAAC,EAAE,CAAC;IAClE,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,aAAa,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,aAAa,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC;IAE/E,OAAO,QAAQ,CAAC;AAClB,CAAC;AAGD;;GAEG;AACH,SAAS,mBAAmB,CAAC,IAAe;IAC1C,MAAM,UAAU,GAAG,6BAA6B,IAAI,CAAC,MAAM,CAAC,IAAI,OAAO,IAAI,CAAC,MAAM,CAAC,IAAI,IAAI,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;IAC9G,MAAM,QAAQ,GAAG,aAAa,IAAI,CAAC,IAAI,CAAC,IAAI,YAAY,IAAI,CAAC,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;IAC3F,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC;QAClC,CAAC,CAAC,YAAY,IAAI,CAAC,IAAI,CAAC,MAAM,uBAAuB;QACrD,CAAC,CAAC,WAAW,CAAC;IAEhB,OAAO,GAAG,UAAU,GAAG,OAAO,QAAQ,QAAQ,KAAK,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC;AACrE,CAAC"}

package/dist/project/call-graph.d.ts

@@ -0,0 +1,22 @@
+/**
+ * Cross-File Call Graph Builder
+ *
+ * Links method calls across files by matching:
+ * - Imports to exported symbols
+ * - Field types to their class definitions
+ * - Method calls to their target implementations
+ */
+import type { FileAnalysis, TypeHierarchy, CrossFileCall } from 'circle-ir';
+/**
+ * Build cross-file call graph from analyzed files.
+ */
+export declare function buildCrossFileCalls(files: FileAnalysis[], typeHierarchy: TypeHierarchy): CrossFileCall[];
+/**
+ * Find all callers of a method across the project.
+ */
+export declare function findCallers(targetFile: string, targetMethod: string, crossFileCalls: CrossFileCall[]): CrossFileCall[];
+/**
+ * Find all callees from a method across the project.
+ */
+export declare function findCallees(sourceFile: string, sourceMethod: string, crossFileCalls: CrossFileCall[]): CrossFileCall[];
+//# sourceMappingURL=call-graph.d.ts.map

package/dist/project/call-graph.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"call-graph.d.ts","sourceRoot":"","sources":["../../src/project/call-graph.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,KAAK,EACV,YAAY,EACZ,aAAa,EACb,aAAa,EAOd,MAAM,WAAW,CAAC;AAcnB;;GAEG;AACH,wBAAgB,mBAAmB,CACjC,KAAK,EAAE,YAAY,EAAE,EACrB,aAAa,EAAE,aAAa,GAC3B,aAAa,EAAE,CAkDjB;AA6OD;;GAEG;AACH,wBAAgB,WAAW,CACzB,UAAU,EAAE,MAAM,EAClB,YAAY,EAAE,MAAM,EACpB,cAAc,EAAE,aAAa,EAAE,GAC9B,aAAa,EAAE,CAKjB;AAED;;GAEG;AACH,wBAAgB,WAAW,CACzB,UAAU,EAAE,MAAM,EAClB,YAAY,EAAE,MAAM,EACpB,cAAc,EAAE,aAAa,EAAE,GAC9B,aAAa,EAAE,CAKjB"}

package/dist/project/call-graph.js

@@ -0,0 +1,246 @@
+/**
+ * Cross-File Call Graph Builder
+ *
+ * Links method calls across files by matching:
+ * - Imports to exported symbols
+ * - Field types to their class definitions
+ * - Method calls to their target implementations
+ */
+import { findAllImplementations } from './type-hierarchy.js';
+/**
+ * Build cross-file call graph from analyzed files.
+ */
+export function buildCrossFileCalls(files, typeHierarchy) {
+    const crossFileCalls = [];
+    const symbolTable = buildSymbolTable(files);
+    let callId = 0;
+    for (const fileAnalysis of files) {
+        const file = fileAnalysis.file;
+        const analysis = fileAnalysis.analysis;
+        // Get imports for this file to resolve external types
+        const imports = analysis.imports;
+        const importedTypes = buildImportMap(imports);
+        // Get fields and their types for this file
+        const fieldTypes = buildFieldTypeMap(analysis.types);
+        // Analyze each call
+        for (const call of analysis.calls) {
+            const targetInfo = resolveCallTarget(call, file, fieldTypes, importedTypes, symbolTable, typeHierarchy);
+            if (targetInfo && targetInfo.file !== file) {
+                // This is a cross-file call
+                crossFileCalls.push({
+                    id: `call-${++callId}`,
+                    from: {
+                        file,
+                        method: call.in_method ?? 'unknown',
+                        line: call.location.line,
+                    },
+                    to: {
+                        file: targetInfo.file,
+                        method: targetInfo.method,
+                        line: targetInfo.line,
+                    },
+                    args_mapping: buildArgMapping(call, targetInfo.params),
+                    resolved: true,
+                });
+            }
+        }
+    }
+    return crossFileCalls;
+}
+/**
+ * Build a symbol table for fast lookups.
+ */
+function buildSymbolTable(files) {
+    const typeToFile = new Map();
+    const fileExports = new Map();
+    const fileImports = new Map();
+    const typeMethods = new Map();
+    for (const fileAnalysis of files) {
+        const file = fileAnalysis.file;
+        const analysis = fileAnalysis.analysis;
+        // Store exports
+        fileExports.set(file, analysis.exports);
+        // Store imports
+        fileImports.set(file, analysis.imports);
+        // Store types and their methods
+        for (const type of analysis.types) {
+            const qualifiedName = type.package
+                ? `${type.package}.${type.name}`
+                : type.name;
+            typeToFile.set(qualifiedName, file);
+            typeToFile.set(type.name, file); // Also store simple name
+            typeMethods.set(qualifiedName, type.methods);
+            typeMethods.set(type.name, type.methods);
+        }
+    }
+    return { typeToFile, fileExports, fileImports, typeMethods };
+}
+/**
+ * Build a map of import names to their packages.
+ */
+function buildImportMap(imports) {
+    const importMap = new Map();
+    for (const imp of imports) {
+        if (!imp.is_wildcard) {
+            importMap.set(imp.imported_name, imp.from_package ?? '');
+        }
+    }
+    return importMap;
+}
+/**
+ * Build a map of field names to their types.
+ */
+function buildFieldTypeMap(types) {
+    const fieldTypes = new Map();
+    for (const type of types) {
+        for (const field of type.fields) {
+            if (field.type) {
+                fieldTypes.set(field.name, field.type);
+            }
+        }
+    }
+    return fieldTypes;
+}
+/**
+ * Resolve a call to its target method.
+ */
+function resolveCallTarget(call, currentFile, fieldTypes, importedTypes, symbolTable, typeHierarchy) {
+    // If no receiver, it's a local call or static import
+    if (!call.receiver) {
+        return null; // Local calls within the same file
+    }
+    // Try to determine the type of the receiver
+    const receiverType = inferReceiverType(call.receiver, fieldTypes, importedTypes);
+    if (!receiverType) {
+        return null;
+    }
+    // Find the file containing this type
+    const targetFile = symbolTable.typeToFile.get(receiverType);
+    if (!targetFile) {
+        return null; // External type (not in project)
+    }
+    // Find the method in the target type
+    const methods = symbolTable.typeMethods.get(receiverType);
+    if (!methods) {
+        return null;
+    }
+    const targetMethod = methods.find(m => m.name === call.method_name);
+    if (!targetMethod) {
+        // Try interface implementations
+        const ifaceInfo = typeHierarchy.interfaces[receiverType];
+        if (ifaceInfo) {
+            // Find implementations and their methods
+            const implementations = findAllImplementations(receiverType, typeHierarchy);
+            for (const impl of implementations) {
+                const implMethods = symbolTable.typeMethods.get(impl);
+                const implFile = symbolTable.typeToFile.get(impl);
+                if (implMethods && implFile) {
+                    const implMethod = implMethods.find(m => m.name === call.method_name);
+                    if (implMethod) {
+                        return {
+                            file: implFile,
+                            method: call.method_name, // Use simple method name for path finding compatibility
+                            line: implMethod.start_line,
+                            params: implMethod.parameters,
+                        };
+                    }
+                }
+            }
+        }
+        return null;
+    }
+    return {
+        file: targetFile,
+        method: call.method_name, // Use simple method name for path finding compatibility
+        line: targetMethod.start_line,
+        params: targetMethod.parameters,
+    };
+}
+/**
+ * Infer the type of a receiver expression.
+ */
+function inferReceiverType(receiver, fieldTypes, importedTypes) {
+    // Check if receiver is a known field
+    const fieldType = fieldTypes.get(receiver);
+    if (fieldType) {
+        // Remove generics
+        return fieldType.split('<')[0].trim();
+    }
+    // Check if receiver looks like a class name (static call)
+    if (receiver[0] === receiver[0].toUpperCase()) {
+        // Could be a static call like ClassName.method()
+        // Check if it's an imported type
+        const pkg = importedTypes.get(receiver);
+        if (pkg) {
+            return pkg ? `${pkg}.${receiver}` : receiver;
+        }
+        return receiver;
+    }
+    // Common naming conventions
+    const commonMappings = {
+        userService: ['UserService'],
+        orderService: ['OrderService'],
+        userRepository: ['UserRepository'],
+        orderRepository: ['OrderRepository'],
+        entityManager: ['EntityManager'],
+        jdbcTemplate: ['JdbcTemplate'],
+    };
+    const possibleTypes = commonMappings[receiver];
+    if (possibleTypes && possibleTypes.length > 0) {
+        return possibleTypes[0];
+    }
+    // Try to infer from suffix patterns
+    if (receiver.endsWith('Service')) {
+        return receiver.charAt(0).toUpperCase() + receiver.slice(1);
+    }
+    if (receiver.endsWith('Repository')) {
+        return receiver.charAt(0).toUpperCase() + receiver.slice(1);
+    }
+    if (receiver.endsWith('Controller')) {
+        return receiver.charAt(0).toUpperCase() + receiver.slice(1);
+    }
+    return null;
+}
+/**
+ * Build argument mapping between caller and callee.
+ */
+function buildArgMapping(call, calleeParams) {
+    const mappings = [];
+    for (let i = 0; i < call.arguments.length && i < calleeParams.length; i++) {
+        mappings.push({
+            caller_arg: i,
+            callee_param: i,
+            // Assume taint propagates for non-primitive types
+            taint_propagates: !isPrimitiveType(calleeParams[i].type),
+        });
+    }
+    return mappings;
+}
+/**
+ * Check if a type is a primitive type.
+ */
+function isPrimitiveType(type) {
+    if (!type) {
+        return false;
+    }
+    const primitives = [
+        'int', 'long', 'short', 'byte', 'float', 'double', 'boolean', 'char',
+        'Integer', 'Long', 'Short', 'Byte', 'Float', 'Double', 'Boolean', 'Character',
+    ];
+    return primitives.includes(type);
+}
+/**
+ * Find all callers of a method across the project.
+ */
+export function findCallers(targetFile, targetMethod, crossFileCalls) {
+    return crossFileCalls.filter(call => call.to.file === targetFile &&
+        call.to.method.includes(targetMethod));
+}
+/**
+ * Find all callees from a method across the project.
+ */
+export function findCallees(sourceFile, sourceMethod, crossFileCalls) {
+    return crossFileCalls.filter(call => call.from.file === sourceFile &&
+        call.from.method === sourceMethod);
+}
+//# sourceMappingURL=call-graph.js.map

package/dist/project/call-graph.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"call-graph.js","sourceRoot":"","sources":["../../src/project/call-graph.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAaH,OAAO,EAAE,sBAAsB,EAAgB,MAAM,qBAAqB,CAAC;AAa3E;;GAEG;AACH,MAAM,UAAU,mBAAmB,CACjC,KAAqB,EACrB,aAA4B;IAE5B,MAAM,cAAc,GAAoB,EAAE,CAAC;IAC3C,MAAM,WAAW,GAAG,gBAAgB,CAAC,KAAK,CAAC,CAAC;IAE5C,IAAI,MAAM,GAAG,CAAC,CAAC;IAEf,KAAK,MAAM,YAAY,IAAI,KAAK,EAAE,CAAC;QACjC,MAAM,IAAI,GAAG,YAAY,CAAC,IAAI,CAAC;QAC/B,MAAM,QAAQ,GAAG,YAAY,CAAC,QAAQ,CAAC;QAEvC,sDAAsD;QACtD,MAAM,OAAO,GAAG,QAAQ,CAAC,OAAO,CAAC;QACjC,MAAM,aAAa,GAAG,cAAc,CAAC,OAAO,CAAC,CAAC;QAE9C,2CAA2C;QAC3C,MAAM,UAAU,GAAG,iBAAiB,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;QAErD,oBAAoB;QACpB,KAAK,MAAM,IAAI,IAAI,QAAQ,CAAC,KAAK,EAAE,CAAC;YAClC,MAAM,UAAU,GAAG,iBAAiB,CAClC,IAAI,EACJ,IAAI,EACJ,UAAU,EACV,aAAa,EACb,WAAW,EACX,aAAa,CACd,CAAC;YAEF,IAAI,UAAU,IAAI,UAAU,CAAC,IAAI,KAAK,IAAI,EAAE,CAAC;gBAC3C,4BAA4B;gBAC5B,cAAc,CAAC,IAAI,CAAC;oBAClB,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE;oBACtB,IAAI,EAAE;wBACJ,IAAI;wBACJ,MAAM,EAAE,IAAI,CAAC,SAAS,IAAI,SAAS;wBACnC,IAAI,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI;qBACzB;oBACD,EAAE,EAAE;wBACF,IAAI,EAAE,UAAU,CAAC,IAAI;wBACrB,MAAM,EAAE,UAAU,CAAC,MAAM;wBACzB,IAAI,EAAE,UAAU,CAAC,IAAI;qBACtB;oBACD,YAAY,EAAE,eAAe,CAAC,IAAI,EAAE,UAAU,CAAC,MAAM,CAAC;oBACtD,QAAQ,EAAE,IAAI;iBACf,CAAC,CAAC;YACL,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,cAAc,CAAC;AACxB,CAAC;AAED;;GAEG;AACH,SAAS,gBAAgB,CAAC,KAAqB;IAC7C,MAAM,UAAU,GAAG,IAAI,GAAG,EAAkB,CAAC;IAC7C,MAAM,WAAW,GAAG,IAAI,GAAG,EAAwB,CAAC;IACpD,MAAM,WAAW,GAAG,IAAI,GAAG,EAAwB,CAAC;IACpD,MAAM,WAAW,GAAG,IAAI,GAAG,EAAwB,CAAC;IAEpD,KAAK,MAAM,YAAY,IAAI,KAAK,EAAE,CAAC;QACjC,MAAM,IAAI,GAAG,YAAY,CAAC,IAAI,CAAC;QAC/B,MAAM,QAAQ,GAAG,YAAY,CAAC,QAAQ,CAAC;QAEvC,gBAAgB;QAChB,WAAW,CAAC,GAAG,CAAC,IAAI,EAAE,QAAQ,CAAC,OAAO,CAAC,CAAC;QAExC,gBAAgB;QAChB,WAAW,CAAC,GAAG,CAAC,IAAI,EAAE,QAAQ,CAAC,OAAO,CAAC,CAAC;QAExC,gCAAgC;QAChC,KAAK,MAAM,IAAI,IAAI,QAAQ,CAAC,KAAK,EAAE,CAAC;YAClC,MAAM,aAAa,GAAG,IAAI,CAAC,OAAO;gBAChC,CAAC,CAAC,GAAG,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,IAAI,EAAE;gBAChC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;YAEd,UAAU,CAAC,GAAG,CAAC,aAAa,EAAE,IAAI,CAAC,CAAC;YACpC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,yBAAyB;YAE1D,WAAW,CAAC,GAAG,CAAC,aAAa,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;YAC7C,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;QAC3C,CAAC;IACH,CAAC;IAED,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,WAAW,EAAE,WAAW,EAAE,CAAC;AAC/D,CAAC;AAED;;GAEG;AACH,SAAS,cAAc,CAAC,OAAqB;IAC3C,MAAM,SAAS,GAAG,IAAI,GAAG,EAAkB,CAAC;IAE5C,KAAK,MAAM,GAAG,IAAI,OAAO,EAAE,CAAC;QAC1B,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC;YACrB,SAAS,CAAC,GAAG,CAAC,GAAG,CAAC,aAAa,EAAE,GAAG,CAAC,YAAY,IAAI,EAAE,CAAC,CAAC;QAC3D,CAAC;IACH,CAAC;IAED,OAAO,SAAS,CAAC;AACnB,CAAC;AAED;;GAEG;AACH,SAAS,iBAAiB,CAAC,KAAiB;IAC1C,MAAM,UAAU,GAAG,IAAI,GAAG,EAAkB,CAAC;IAE7C,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;YAChC,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC;gBACf,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;YACzC,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,UAAU,CAAC;AACpB,CAAC;AASD;;GAEG;AACH,SAAS,iBAAiB,CACxB,IAAc,EACd,WAAmB,EACnB,UAA+B,EAC/B,aAAkC,EAClC,WAAwB,EACxB,aAA4B;IAE5B,qDAAqD;IACrD,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC;QACnB,OAAO,IAAI,CAAC,CAAC,mCAAmC;IAClD,CAAC;IAED,4CAA4C;IAC5C,MAAM,YAAY,GAAG,iBAAiB,CAAC,IAAI,CAAC,QAAQ,EAAE,UAAU,EAAE,aAAa,CAAC,CAAC;IACjF,IAAI,CAAC,YAAY,EAAE,CAAC;QAClB,OAAO,IAAI,CAAC;IACd,CAAC;IAED,qCAAqC;IACrC,MAAM,UAAU,GAAG,WAAW,CAAC,UAAU,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;IAC5D,IAAI,CAAC,UAAU,EAAE,CAAC;QAChB,OAAO,IAAI,CAAC,CAAC,iCAAiC;IAChD,CAAC;IAED,qCAAqC;IACrC,MAAM,OAAO,GAAG,WAAW,CAAC,WAAW,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;IAC1D,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,YAAY,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,WAAW,CAAC,CAAC;IACpE,IAAI,CAAC,YAAY,EAAE,CAAC;QAClB,gCAAgC;QAChC,MAAM,SAAS,GAAG,aAAa,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC;QACzD,IAAI,SAAS,EAAE,CAAC;YACd,yCAAyC;YACzC,MAAM,eAAe,GAAG,sBAAsB,CAAC,YAAY,EAAE,aAAa,CAAC,CAAC;YAC5E,KAAK,MAAM,IAAI,IAAI,eAAe,EAAE,CAAC;gBACnC,MAAM,WAAW,GAAG,WAAW,CAAC,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;gBACtD,MAAM,QAAQ,GAAG,WAAW,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;gBAClD,IAAI,WAAW,IAAI,QAAQ,EAAE,CAAC;oBAC5B,MAAM,UAAU,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,WAAW,CAAC,CAAC;oBACtE,IAAI,UAAU,EAAE,CAAC;wBACf,OAAO;4BACL,IAAI,EAAE,QAAQ;4BACd,MAAM,EAAE,IAAI,CAAC,WAAW,EAAE,wDAAwD;4BAClF,IAAI,EAAE,UAAU,CAAC,UAAU;4BAC3B,MAAM,EAAE,UAAU,CAAC,UAAU;yBAC9B,CAAC;oBACJ,CAAC;gBACH,CAAC;YACH,CAAC;QACH,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAED,OAAO;QACL,IAAI,EAAE,UAAU;QAChB,MAAM,EAAE,IAAI,CAAC,WAAW,EAAE,wDAAwD;QAClF,IAAI,EAAE,YAAY,CAAC,UAAU;QAC7B,MAAM,EAAE,YAAY,CAAC,UAAU;KAChC,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,SAAS,iBAAiB,CACxB,QAAgB,EAChB,UAA+B,EAC/B,aAAkC;IAElC,qCAAqC;IACrC,MAAM,SAAS,GAAG,UAAU,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IAC3C,IAAI,SAAS,EAAE,CAAC;QACd,kBAAkB;QAClB,OAAO,SAAS,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IACxC,CAAC;IAED,0DAA0D;IAC1D,IAAI,QAAQ,CAAC,CAAC,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC;QAC9C,iDAAiD;QACjD,iCAAiC;QACjC,MAAM,GAAG,GAAG,aAAa,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QACxC,IAAI,GAAG,EAAE,CAAC;YACR,OAAO,GAAG,CAAC,CAAC,CAAC,GAAG,GAAG,IAAI,QAAQ,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC;QAC/C,CAAC;QACD,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED,4BAA4B;IAC5B,MAAM,cAAc,GAA6B;QAC/C,WAAW,EAAE,CAAC,aAAa,CAAC;QAC5B,YAAY,EAAE,CAAC,cAAc,CAAC;QAC9B,cAAc,EAAE,CAAC,gBAAgB,CAAC;QAClC,eAAe,EAAE,CAAC,iBAAiB,CAAC;QACpC,aAAa,EAAE,CAAC,eAAe,CAAC;QAChC,YAAY,EAAE,CAAC,cAAc,CAAC;KAC/B,CAAC;IAEF,MAAM,aAAa,GAAG,cAAc,CAAC,QAAQ,CAAC,CAAC;IAC/C,IAAI,aAAa,IAAI,aAAa,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC9C,OAAO,aAAa,CAAC,CAAC,CAAC,CAAC;IAC1B,CAAC;IAED,oCAAoC;IACpC,IAAI,QAAQ,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC;QACjC,OAAO,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IAC9D,CAAC;IACD,IAAI,QAAQ,CAAC,QAAQ,CAAC,YAAY,CAAC,EAAE,CAAC;QACpC,OAAO,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IAC9D,CAAC;IACD,IAAI,QAAQ,CAAC,QAAQ,CAAC,YAAY,CAAC,EAAE,CAAC;QACpC,OAAO,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IAC9D,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;GAEG;AACH,SAAS,eAAe,CACtB,IAAc,EACd,YAAsC;IAEtC,MAAM,QAAQ,GAAiB,EAAE,CAAC;IAElC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,IAAI,CAAC,GAAG,YAAY,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QAC1E,QAAQ,CAAC,IAAI,CAAC;YACZ,UAAU,EAAE,CAAC;YACb,YAAY,EAAE,CAAC;YACf,kDAAkD;YAClD,gBAAgB,EAAE,CAAC,eAAe,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;SACzD,CAAC,CAAC;IACL,CAAC;IAED,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED;;GAEG;AACH,SAAS,eAAe,CAAC,IAAmB;IAC1C,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,OAAO,KAAK,CAAC;IACf,CAAC;IAED,MAAM,UAAU,GAAG;QACjB,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM;QACpE,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,WAAW;KAC9E,CAAC;IAEF,OAAO,UAAU,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;AACnC,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,WAAW,CACzB,UAAkB,EAClB,YAAoB,EACpB,cAA+B;IAE/B,OAAO,cAAc,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAClC,IAAI,CAAC,EAAE,CAAC,IAAI,KAAK,UAAU;QAC3B,IAAI,CAAC,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,YAAY,CAAC,CACtC,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,WAAW,CACzB,UAAkB,EAClB,YAAoB,EACpB,cAA+B;IAE/B,OAAO,cAAc,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAClC,IAAI,CAAC,IAAI,CAAC,IAAI,KAAK,UAAU;QAC7B,IAAI,CAAC,IAAI,CAAC,MAAM,KAAK,YAAY,CAClC,CAAC;AACJ,CAAC"}