circle-ir 4.17.0 → 4.18.1

package/dist/graph-facts/reach.js

@@ -0,0 +1,219 @@
+/**
+ * The reach core (`reach@0.1`): from a set of entry points to every
+ * declaration, one path per class and the unresolved sites that could add
+ * more.
+ *
+ * - **strong** path: from a `declared` or `conventional` entry over strong
+ *   edges only — `exact` and `polymorphic` calls, and the structural edges
+ *   that hold whenever their source runs (`contains`: a body creates its
+ *   nested functions, a module its top-level values, a class its fields and
+ *   constructor; `loads`: running a declaration loads its module; `import`:
+ *   loading a module loads what it imports; `field`: a body that runs uses
+ *   the fields it reads or writes through `this`; `loads` also covers a
+ *   body that loads a module with `import()` or `require()`).
+ * - **weak** path: any other path — through an `inferred` call, a
+ *   `reference` (a function or class passed, stored, returned or rendered:
+ *   it may run, nothing proves it does) or an `inferred` entry.
+ * - **unresolved**: call sites in reached bodies that the call graph could
+ *   not bind and that could bind to the declaration — same method name, or a
+ *   computed callee — plus registrations whose handler was not resolved.
+ *   A module is reached this way only by a module load with a computed
+ *   specifier (`import(name)`, methodName `<module>`).
+ *
+ * Each path is the shortest of its class (breadth-first, deterministic:
+ * adjacency in id order). `partial[]` lists files that did not parse; their
+ * call sites are missing, so any answer that relies on absence is not final.
+ */
+export const REACH_SCHEME = 'reach@0.1';
+/**
+ * `partial` paths with their first blocking parse error, read from the
+ * files' `parseError`, sorted by path. A path with no error recorded (an
+ * older `StableIdFile`) keeps only `file`.
+ */
+export function partialFileDetails(partial, files) {
+    const byFile = new Map(files.map(f => [f.file, f]));
+    return [...new Set(partial)].sort().map(file => {
+        const e = byFile.get(file)?.parseError;
+        return e ? { file, line: e.line, column: e.column, nodeKind: e.nodeKind, parent: e.parent } : { file };
+    });
+}
+export const ALL_ENTRY_KINDS = [
+    'route', 'listener', 'scheduled', 'main', 'export', 'bean', 'reflection', 'lifecycle', 'test',
+];
+/** The adjacency the walk uses: call graph edges plus the structural ones. */
+export class ReachGraph {
+    input;
+    decls = new Map();
+    out = new Map();
+    constructor(input) {
+        this.input = input;
+        for (const f of input.files)
+            for (const d of f.decls)
+                this.decls.set(d.id, { decl: d, file: f.file });
+        const add = (from, e) => {
+            if (!this.decls.has(from) || !this.decls.has(e.to) || from === e.to)
+                return;
+            const list = this.out.get(from);
+            if (list)
+                list.push(e);
+            else
+                this.out.set(from, [e]);
+        };
+        for (const e of input.edges)
+            add(e.from, { to: e.to, relation: 'call', strong: e.tier !== 'inferred', tier: e.tier, site: e.site });
+        for (const r of input.references ?? [])
+            add(r.from, { to: r.to, relation: 'reference', strong: false, site: r.site });
+        for (const u of input.fieldUses ?? [])
+            add(u.from, { to: u.to, relation: 'field', strong: true, site: u.site });
+        for (const i of input.imports ?? [])
+            add(i.from, { to: i.to, relation: 'import', strong: true });
+        for (const l of input.loads ?? [])
+            add(l.from, { to: l.to, relation: 'loads', strong: true, site: l.site });
+        for (const f of input.files) {
+            const module = f.decls[0];
+            for (const d of f.decls) {
+                if (d === module || !module)
+                    continue;
+                add(d.id, { to: module.id, relation: 'loads', strong: true });
+                const parent = d.parent === null ? undefined : this.decls.get(d.parent)?.decl;
+                if (!parent)
+                    continue;
+                const nested = d.flags.includes('unstable:anonymous');
+                const topValue = parent === module && d.kind === 'field';
+                // A class creates its fields and runs its static initializer; in
+                // TypeScript a class used as a value may also be constructed, while
+                // a Java constructor runs only when called (the call graph has it).
+                const ctor = d.kind === 'method' && (d.name === '<clinit>' || (d.name === 'constructor' && f.language !== 'java'));
+                const classPart = parent.kind === 'type' && (d.kind === 'field' || ctor);
+                if (nested || topValue || classPart)
+                    add(parent.id, { to: d.id, relation: 'contains', strong: true });
+            }
+        }
+        const order = (a, b) => a.to < b.to ? -1 : a.to > b.to ? 1 : a.relation < b.relation ? -1 : a.relation > b.relation ? 1
+            : (a.site?.line ?? 0) - (b.site?.line ?? 0) || (a.site?.col ?? 0) - (b.site?.col ?? 0);
+        for (const list of this.out.values())
+            list.sort(order);
+    }
+    edgesFrom(id) {
+        return this.out.get(id) ?? [];
+    }
+}
+/**
+ * Breadth-first over (declaration, weak-so-far) states from the given roots.
+ * A state's first visit is its shortest path.
+ */
+export function walkFrom(g, roots) {
+    const seen = new Map();
+    const queue = [];
+    roots.forEach((r, i) => {
+        const key = `${r.weak ? 1 : 0}${r.id}`;
+        if (!g.decls.has(r.id) || seen.has(key))
+            return;
+        seen.set(key, { prev: null, edge: null, root: i });
+        queue.push(key);
+    });
+    for (let head = 0; head < queue.length; head++) {
+        const key = queue[head];
+        const weak = key[0] === '1';
+        const id = key.slice(1);
+        const root = seen.get(key).root;
+        for (const e of g.edgesFrom(id)) {
+            const next = `${weak || !e.strong ? 1 : 0}${e.to}`;
+            if (seen.has(next))
+                continue;
+            seen.set(next, { prev: key, edge: e, root });
+            queue.push(next);
+        }
+    }
+    return seen;
+}
+function pathTo(visits, key, roots) {
+    const v = visits.get(key);
+    if (!v)
+        return null;
+    const steps = [];
+    for (let k = key; k !== null;) {
+        const at = visits.get(k);
+        const step = { decl: k.slice(1), via: at.edge ? at.edge.relation : 'entry' };
+        if (at.edge?.tier)
+            step.tier = at.edge.tier;
+        if (at.edge?.site)
+            step.site = at.edge.site;
+        steps.push(step);
+        k = at.prev;
+    }
+    steps.reverse();
+    const e = roots[v.root];
+    const entry = { id: e.id, kind: e.kind, certainty: e.certainty };
+    if (e.method)
+        entry.method = e.method;
+    if (e.path)
+        entry.path = e.path;
+    return { class: key[0] === '1' ? 'weak' : 'strong', entry, steps };
+}
+const bySite = (a, b) => a.site.file < b.site.file ? -1 : a.site.file > b.site.file ? 1 : a.site.line - b.site.line || a.site.col - b.site.col;
+/** Declarations reached in any class from `visits`. */
+export function reachedIds(visits) {
+    return new Set([...visits.keys()].map(k => k.slice(1)));
+}
+/** `methodName` of an unresolved site that loads a module by a computed specifier. */
+export const COMPUTED_LOAD = '<module>';
+/**
+ * Unresolved sites in reached bodies that could bind to `d`: a non-external
+ * site with `d`'s name, a computed callee, or an unresolved registration.
+ * For a module: a module load with a computed specifier.
+ */
+export function couldReach(input, reached, d) {
+    if (d.kind === 'field')
+        return [];
+    const isModule = d.kind === 'module';
+    const out = [];
+    for (const u of input.unresolved) {
+        if (u.reason === 'external' || !reached.has(u.from))
+            continue;
+        const load = u.methodName === COMPUTED_LOAD;
+        if (isModule !== load)
+            continue;
+        const computed = u.methodName.startsWith('<') || u.methodName.startsWith('(');
+        if (computed || u.methodName === d.name)
+            out.push({ kind: 'call', from: u.from, methodName: u.methodName, reason: u.reason, site: u.site });
+    }
+    if (isModule)
+        return out.sort(bySite);
+    for (const r of input.unresolvedRegistrations ?? []) {
+        if (r.reason === 'handler-unresolved')
+            out.push({ kind: 'registration', reason: r.reason, site: r.site });
+    }
+    return out.sort(bySite);
+}
+export function reach(input, options = {}) {
+    const rootKinds = [...(options.rootKinds ?? ALL_ENTRY_KINDS.filter(k => k !== 'test'))];
+    const max = options.maxUnresolved ?? 5;
+    const g = new ReachGraph(input);
+    const roots = input.entries.filter(e => rootKinds.includes(e.kind));
+    const visits = walkFrom(g, roots.map(e => ({ id: e.id, weak: e.certainty === 'inferred' })));
+    const reached = reachedIds(visits);
+    const wanted = options.targets ? new Set(options.targets) : null;
+    const facts = [];
+    for (const f of input.files) {
+        for (const d of f.decls) {
+            if (wanted && !wanted.has(d.id))
+                continue;
+            const strong = pathTo(visits, `0${d.id}`, roots);
+            const weak = pathTo(visits, `1${d.id}`, roots);
+            const sites = strong ? [] : couldReach(input, reached, d);
+            facts.push({
+                id: d.id,
+                qualified_name: d.qualified_name,
+                kind: d.kind,
+                file: f.file,
+                strong,
+                weak,
+                unresolved: sites.slice(0, max),
+                unresolvedCount: sites.length,
+            });
+        }
+    }
+    return { scheme: REACH_SCHEME, ids: 'ids@0.1', rootKinds, partial: [...input.partial], partialFiles: partialFileDetails(input.partial, input.files), facts };
+}
+//# sourceMappingURL=reach.js.map

package/dist/graph-facts/reach.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"reach.js","sourceRoot":"","sources":["../../src/graph-facts/reach.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AAMH,MAAM,CAAC,MAAM,YAAY,GAAG,WAAoB,CAAC;AA0FjD;;;;GAIG;AACH,MAAM,UAAU,kBAAkB,CAAC,OAA0B,EAAE,KAA8B;IAC3F,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IACpD,OAAO,CAAC,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE;QAC7C,MAAM,CAAC,GAAG,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,UAAU,CAAC;QACvC,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,QAAQ,EAAE,CAAC,CAAC,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC;IACzG,CAAC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,CAAC,MAAM,eAAe,GAAyB;IACnD,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,YAAY,EAAE,WAAW,EAAE,MAAM;CAC9F,CAAC;AAUF,8EAA8E;AAC9E,MAAM,OAAO,UAAU;IAIA,KAAK;IAHjB,KAAK,GAAG,IAAI,GAAG,EAA8C,CAAC;IACtD,GAAG,GAAG,IAAI,GAAG,EAAkB,CAAC;IAEjD,YAAqB,KAAiB;qBAAjB,KAAK;QACxB,KAAK,MAAM,CAAC,IAAI,KAAK,CAAC,KAAK;YAAE,KAAK,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK;gBAAE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;QACtG,MAAM,GAAG,GAAG,CAAC,IAAY,EAAE,CAAO,EAAQ,EAAE;YAC1C,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,IAAI,KAAK,CAAC,CAAC,EAAE;gBAAE,OAAO;YAC5E,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YAChC,IAAI,IAAI;gBAAE,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;;gBAClB,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;QAC/B,CAAC,CAAC;QACF,KAAK,MAAM,CAAC,IAAI,KAAK,CAAC,KAAK;YAAE,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC,IAAI,KAAK,UAAU,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;QACpI,KAAK,MAAM,CAAC,IAAI,KAAK,CAAC,UAAU,IAAI,EAAE;YAAE,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;QACtH,KAAK,MAAM,CAAC,IAAI,KAAK,CAAC,SAAS,IAAI,EAAE;YAAE,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;QAChH,KAAK,MAAM,CAAC,IAAI,KAAK,CAAC,OAAO,IAAI,EAAE;YAAE,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;QACjG,KAAK,MAAM,CAAC,IAAI,KAAK,CAAC,KAAK,IAAI,EAAE;YAAE,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;QAC5G,KAAK,MAAM,CAAC,IAAI,KAAK,CAAC,KAAK,EAAE,CAAC;YAC5B,MAAM,MAAM,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;YAC1B,KAAK,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,CAAC;gBACxB,IAAI,CAAC,KAAK,MAAM,IAAI,CAAC,MAAM;oBAAE,SAAS;gBACtC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,MAAM,CAAC,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;gBAC9D,MAAM,MAAM,GAAG,CAAC,CAAC,MAAM,KAAK,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,CAAC;gBAC9E,IAAI,CAAC,MAAM;oBAAE,SAAS;gBACtB,MAAM,MAAM,GAAG,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,oBAAoB,CAAC,CAAC;gBACtD,MAAM,QAAQ,GAAG,MAAM,KAAK,MAAM,IAAI,CAAC,CAAC,IAAI,KAAK,OAAO,CAAC;gBACzD,iEAAiE;gBACjE,oEAAoE;gBACpE,oEAAoE;gBACpE,MAAM,IAAI,GAAG,CAAC,CAAC,IAAI,KAAK,QAAQ,IAAI,CAAC,CAAC,CAAC,IAAI,KAAK,UAAU,IAAI,CAAC,CAAC,CAAC,IAAI,KAAK,aAAa,IAAI,CAAC,CAAC,QAAQ,KAAK,MAAM,CAAC,CAAC,CAAC;gBACnH,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,KAAK,MAAM,IAAI,CAAC,CAAC,CAAC,IAAI,KAAK,OAAO,IAAI,IAAI,CAAC,CAAC;gBACzE,IAAI,MAAM,IAAI,QAAQ,IAAI,SAAS;oBAAE,GAAG,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,QAAQ,EAAE,UAAU,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;YACxG,CAAC;QACH,CAAC;QACD,MAAM,KAAK,GAAG,CAAC,CAAO,EAAE,CAAO,EAAU,EAAE,CACzC,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,GAAG,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,GAAG,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;YAC7F,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,IAAI,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,IAAI,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,GAAG,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,GAAG,IAAI,CAAC,CAAC,CAAC;QAC3F,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE;YAAE,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACzD,CAAC;IAED,SAAS,CAAC,EAAU;QAClB,OAAO,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,EAAE,CAAC;IAChC,CAAC;CACF;AAQD;;;GAGG;AACH,MAAM,UAAU,QAAQ,CACtB,CAAa,EACb,KAA+C;IAE/C,MAAM,IAAI,GAAG,IAAI,GAAG,EAAiB,CAAC;IACtC,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE;QACrB,MAAM,GAAG,GAAG,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,CAAC;QACvC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;YAAE,OAAO;QAChD,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC,CAAC;QACnD,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAClB,CAAC,CAAC,CAAC;IACH,KAAK,IAAI,IAAI,GAAG,CAAC,EAAE,IAAI,GAAG,KAAK,CAAC,MAAM,EAAE,IAAI,EAAE,EAAE,CAAC;QAC/C,MAAM,GAAG,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC;QACxB,MAAM,IAAI,GAAG,GAAG,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC;QAC5B,MAAM,EAAE,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QACxB,MAAM,IAAI,GAAI,IAAI,CAAC,GAAG,CAAC,GAAG,CAAW,CAAC,IAAI,CAAC;QAC3C,KAAK,MAAM,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,EAAE,CAAC,EAAE,CAAC;YAChC,MAAM,IAAI,GAAG,GAAG,IAAI,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,CAAC;YACnD,IAAI,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC;gBAAE,SAAS;YAC7B,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC;YAC7C,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACnB,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,MAAM,CACb,MAA0B,EAC1B,GAAW,EACX,KAA+C;IAE/C,MAAM,CAAC,GAAG,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IAC1B,IAAI,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IACpB,MAAM,KAAK,GAAe,EAAE,CAAC;IAC7B,KAAK,IAAI,CAAC,GAAkB,GAAG,EAAE,CAAC,KAAK,IAAI,GAAG,CAAC;QAC7C,MAAM,EAAE,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,CAAU,CAAC;QAClC,MAAM,IAAI,GAAa,EAAE,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC;QACvF,IAAI,EAAE,CAAC,IAAI,EAAE,IAAI;YAAE,IAAI,CAAC,IAAI,GAAG,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC;QAC5C,IAAI,EAAE,CAAC,IAAI,EAAE,IAAI;YAAE,IAAI,CAAC,IAAI,GAAG,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC;QAC5C,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACjB,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC;IACd,CAAC;IACD,KAAK,CAAC,OAAO,EAAE,CAAC;IAChB,MAAM,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;IACxB,MAAM,KAAK,GAAuB,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC,SAAS,EAAE,CAAC;IACrF,IAAI,CAAC,CAAC,MAAM;QAAE,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,MAAM,CAAC;IACtC,IAAI,CAAC,CAAC,IAAI;QAAE,KAAK,CAAC,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC;IAChC,OAAO,EAAE,KAAK,EAAE,GAAG,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC;AACrE,CAAC;AAED,MAAM,MAAM,GAAG,CAAC,CAAsB,EAAE,CAAsB,EAAU,EAAE,CACxE,CAAC,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,CAAC,IAAI,CAAC,GAAG,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC;AAExH,uDAAuD;AACvD,MAAM,UAAU,UAAU,CAAC,MAA0B;IACnD,OAAO,IAAI,GAAG,CAAC,CAAC,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AAC1D,CAAC;AAED,sFAAsF;AACtF,MAAM,CAAC,MAAM,aAAa,GAAG,UAAU,CAAC;AAExC;;;;GAIG;AACH,MAAM,UAAU,UAAU,CAAC,KAAiB,EAAE,OAA4B,EAAE,CAAa;IACvF,IAAI,CAAC,CAAC,IAAI,KAAK,OAAO;QAAE,OAAO,EAAE,CAAC;IAClC,MAAM,QAAQ,GAAG,CAAC,CAAC,IAAI,KAAK,QAAQ,CAAC;IACrC,MAAM,GAAG,GAAqB,EAAE,CAAC;IACjC,KAAK,MAAM,CAAC,IAAI,KAAK,CAAC,UAAU,EAAE,CAAC;QACjC,IAAI,CAAC,CAAC,MAAM,KAAK,UAAU,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC;YAAE,SAAS;QAC9D,MAAM,IAAI,GAAG,CAAC,CAAC,UAAU,KAAK,aAAa,CAAC;QAC5C,IAAI,QAAQ,KAAK,IAAI;YAAE,SAAS;QAChC,MAAM,QAAQ,GAAG,CAAC,CAAC,UAAU,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,UAAU,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;QAC9E,IAAI,QAAQ,IAAI,CAAC,CAAC,UAAU,KAAK,CAAC,CAAC,IAAI;YAAE,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,UAAU,EAAE,CAAC,CAAC,UAAU,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;IAC9I,CAAC;IACD,IAAI,QAAQ;QAAE,OAAO,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACtC,KAAK,MAAM,CAAC,IAAI,KAAK,CAAC,uBAAuB,IAAI,EAAE,EAAE,CAAC;QACpD,IAAI,CAAC,CAAC,MAAM,KAAK,oBAAoB;YAAE,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,cAAc,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;IAC5G,CAAC;IACD,OAAO,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;AAC1B,CAAC;AAED,MAAM,UAAU,KAAK,CAAC,KAAiB,EAAE,OAAO,GAAiB,EAAE;IACjE,MAAM,SAAS,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,SAAS,IAAI,eAAe,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,KAAK,MAAM,CAAC,CAAC,CAAC,CAAC;IACxF,MAAM,GAAG,GAAG,OAAO,CAAC,aAAa,IAAI,CAAC,CAAC;IACvC,MAAM,CAAC,GAAG,IAAI,UAAU,CAAC,KAAK,CAAC,CAAC;IAChC,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;IACpE,MAAM,MAAM,GAAG,QAAQ,CAAC,CAAC,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,SAAS,KAAK,UAAU,EAAE,CAAC,CAAC,CAAC,CAAC;IAC7F,MAAM,OAAO,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC;IACnC,MAAM,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IACjE,MAAM,KAAK,GAAgB,EAAE,CAAC;IAC9B,KAAK,MAAM,CAAC,IAAI,KAAK,CAAC,KAAK,EAAE,CAAC;QAC5B,KAAK,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,CAAC;YACxB,IAAI,MAAM,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;gBAAE,SAAS;YAC1C,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,KAAK,CAAC,CAAC;YACjD,MAAM,IAAI,GAAG,MAAM,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,KAAK,CAAC,CAAC;YAC/C,MAAM,KAAK,GAAG,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC;YAC1D,KAAK,CAAC,IAAI,CAAC;gBACT,EAAE,EAAE,CAAC,CAAC,EAAE;gBACR,cAAc,EAAE,CAAC,CAAC,cAAc;gBAChC,IAAI,EAAE,CAAC,CAAC,IAAI;gBACZ,IAAI,EAAE,CAAC,CAAC,IAAI;gBACZ,MAAM;gBACN,IAAI;gBACJ,UAAU,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC;gBAC/B,eAAe,EAAE,KAAK,CAAC,MAAM;aAC9B,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IACD,OAAO,EAAE,MAAM,EAAE,YAAY,EAAE,GAAG,EAAE,SAAS,EAAE,SAAS,EAAE,OAAO,EAAE,CAAC,GAAG,KAAK,CAAC,OAAO,CAAC,EAAE,YAAY,EAAE,kBAAkB,CAAC,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,KAAK,CAAC,EAAE,KAAK,EAAE,CAAC;AAC/J,CAAC"}

package/dist/graph-facts/removal-reach.d.ts

@@ -0,0 +1,73 @@
+/**
+ * SR-G2 `removal-reach` (`removal-reach@0.1`): for each declaration removed
+ * between a base and a head, whether the base could reach it.
+ *
+ * Removed = `diffStableIds(base, head)` minus settled moves and renames
+ * (`detectMoves`): a declaration that moved is not a removal. A removal that
+ * only a move *candidate* explains stays a removal and carries the candidate.
+ *
+ * Per removed declaration, at the **base**: one strong path if any, one weak
+ * path if any, and the unresolved sites that could reach it. The consumer
+ * decides: a strong path means live code was removed; no strong path but a
+ * weak path or an unresolved site means "may be live"; nothing means the
+ * removal was unreachable. Files that do not parse at either pin are listed
+ * in `partial[]`.
+ */
+import { type MoveCandidate, type MoveOptions } from '../stable-ids/moves.js';
+import type { StableIdFile } from '../stable-ids/types.js';
+import type { EntryKind } from '../navigation/ts-entry-tables.js';
+import { type CouldReachSite, type PartialFile, type ReachInput, type ReachPath } from './reach.js';
+export declare const REMOVAL_REACH_SCHEME: 'removal-reach@0.1';
+export interface RemovedDeclaration {
+    id: string;
+    qualified_name: string;
+    kind: string;
+    file: string;
+    strong: ReachPath | null;
+    weak: ReachPath | null;
+    unresolved: CouldReachSite[];
+    unresolvedCount: number;
+    /** Move or rename candidates (signal) that could explain the removal. */
+    moveCandidates: MoveCandidateRef[];
+}
+export interface MoveCandidateRef {
+    to: string;
+    relation: MoveCandidate['relation'];
+    evidence: MoveCandidate['evidence'];
+    similarity: number;
+}
+export interface RemovalReachOptions {
+    /** Root kinds at the base. Default: every kind except `test`. */
+    rootKinds?: readonly EntryKind[];
+    /** Passed to `detectMoves`. */
+    moves?: MoveOptions;
+    /** Most unresolved sites listed per declaration. Default 5. */
+    maxUnresolved?: number;
+}
+export interface RemovalReachResult {
+    scheme: typeof REMOVAL_REACH_SCHEME;
+    ids: 'ids@0.1';
+    rootKinds: EntryKind[];
+    /** Digest of the base's entry index (sorted entries), so a record can name what it was decided against. */
+    entryIndexDigest: string;
+    /** Files that do not parse at the base or the head. */
+    partial: string[];
+    /** One row per `partial` file: where its first blocking parse error (at the head, else the base) is. */
+    partialFiles: PartialFile[];
+    /** Declarations that moved or were renamed (not removals), as `from → to` ids. */
+    moved: {
+        from: string;
+        to: string;
+        relation: string;
+        evidence: string;
+    }[];
+    removed: RemovedDeclaration[];
+}
+/** A stable digest of an entry list: order-independent, 26 base32 characters. */
+export declare function entryIndexDigest(entries: ReachInput['entries']): string;
+/**
+ * `base` is the reach input at the base pin (e.g. `buildTsCallGraph` over
+ * the base files); `head` is the stable ids at the head pin.
+ */
+export declare function removalReach(base: ReachInput, head: readonly StableIdFile[], options?: RemovalReachOptions): RemovalReachResult;
+//# sourceMappingURL=removal-reach.d.ts.map

package/dist/graph-facts/removal-reach.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"removal-reach.d.ts","sourceRoot":"","sources":["../../src/graph-facts/removal-reach.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAGH,OAAO,EAAe,KAAK,aAAa,EAAE,KAAK,WAAW,EAAE,MAAM,wBAAwB,CAAC;AAC3F,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,wBAAwB,CAAC;AAC3D,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,kCAAkC,CAAC;AAClE,OAAO,EAA8C,KAAK,cAAc,EAAE,KAAK,WAAW,EAAE,KAAK,UAAU,EAAE,KAAK,SAAS,EAAE,MAAM,YAAY,CAAC;AAEhJ,eAAO,MAAM,oBAAoB,EAAG,mBAA4B,CAAC;AAEjE,MAAM,WAAW,kBAAkB;IACjC,EAAE,EAAE,MAAM,CAAC;IACX,cAAc,EAAE,MAAM,CAAC;IACvB,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,SAAS,GAAG,IAAI,CAAC;IACzB,IAAI,EAAE,SAAS,GAAG,IAAI,CAAC;IACvB,UAAU,EAAE,cAAc,EAAE,CAAC;IAC7B,eAAe,EAAE,MAAM,CAAC;IACxB,yEAAyE;IACzE,cAAc,EAAE,gBAAgB,EAAE,CAAC;CACpC;AAED,MAAM,WAAW,gBAAgB;IAC/B,EAAE,EAAE,MAAM,CAAC;IACX,QAAQ,EAAE,aAAa,CAAC,UAAU,CAAC,CAAC;IACpC,QAAQ,EAAE,aAAa,CAAC,UAAU,CAAC,CAAC;IACpC,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,mBAAmB;IAClC,iEAAiE;IACjE,SAAS,CAAC,EAAE,SAAS,SAAS,EAAE,CAAC;IACjC,+BAA+B;IAC/B,KAAK,CAAC,EAAE,WAAW,CAAC;IACpB,+DAA+D;IAC/D,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,WAAW,kBAAkB;IACjC,MAAM,EAAE,OAAO,oBAAoB,CAAC;IACpC,GAAG,EAAE,SAAS,CAAC;IACf,SAAS,EAAE,SAAS,EAAE,CAAC;IACvB,2GAA2G;IAC3G,gBAAgB,EAAE,MAAM,CAAC;IACzB,uDAAuD;IACvD,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,wGAAwG;IACxG,YAAY,EAAE,WAAW,EAAE,CAAC;IAC5B,kFAAkF;IAClF,KAAK,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,EAAE,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAA;KAAE,EAAE,CAAC;IAC1E,OAAO,EAAE,kBAAkB,EAAE,CAAC;CAC/B;AAED,iFAAiF;AACjF,wBAAgB,gBAAgB,CAAC,OAAO,EAAE,UAAU,CAAC,SAAS,CAAC,GAAG,MAAM,CAKvE;AAED;;;GAGG;AACH,wBAAgB,YAAY,CAC1B,IAAI,EAAE,UAAU,EAChB,IAAI,EAAE,SAAS,YAAY,EAAE,EAC7B,OAAO,GAAE,mBAAwB,GAChC,kBAAkB,CAgCpB"}

package/dist/graph-facts/removal-reach.js

@@ -0,0 +1,64 @@
+/**
+ * SR-G2 `removal-reach` (`removal-reach@0.1`): for each declaration removed
+ * between a base and a head, whether the base could reach it.
+ *
+ * Removed = `diffStableIds(base, head)` minus settled moves and renames
+ * (`detectMoves`): a declaration that moved is not a removal. A removal that
+ * only a move *candidate* explains stays a removal and carries the candidate.
+ *
+ * Per removed declaration, at the **base**: one strong path if any, one weak
+ * path if any, and the unresolved sites that could reach it. The consumer
+ * decides: a strong path means live code was removed; no strong path but a
+ * weak path or an unresolved site means "may be live"; nothing means the
+ * removal was unreachable. Files that do not parse at either pin are listed
+ * in `partial[]`.
+ */
+import { digest128 } from '../stable-ids/hash.js';
+import { detectMoves } from '../stable-ids/moves.js';
+import { ALL_ENTRY_KINDS, partialFileDetails, reach } from './reach.js';
+export const REMOVAL_REACH_SCHEME = 'removal-reach@0.1';
+/** A stable digest of an entry list: order-independent, 26 base32 characters. */
+export function entryIndexDigest(entries) {
+    const rows = entries
+        .map(e => [e.id, e.kind, e.certainty, e.method ?? '', e.path ?? '', e.file, String(e.line)].join('\u0001'))
+        .sort();
+    return digest128(['entry-index@0.1', ...rows]);
+}
+/**
+ * `base` is the reach input at the base pin (e.g. `buildTsCallGraph` over
+ * the base files); `head` is the stable ids at the head pin.
+ */
+export function removalReach(base, head, options = {}) {
+    const rootKinds = [...(options.rootKinds ?? ALL_ENTRY_KINDS.filter(k => k !== 'test'))];
+    const moves = detectMoves(base.files, head, options.moves);
+    const removedIds = moves.diff.removed.map(d => d.id);
+    const facts = reach(base, { rootKinds, targets: removedIds, maxUnresolved: options.maxUnresolved });
+    const candidates = new Map();
+    for (const c of moves.candidates) {
+        const list = candidates.get(c.from.id) ?? [];
+        list.push({ evidence: c.evidence, relation: c.relation, similarity: c.similarity, to: c.to.id });
+        candidates.set(c.from.id, list);
+    }
+    const partial = [...new Set([...base.partial, ...head.filter(f => f.partial).map(f => f.file)])].sort();
+    return {
+        scheme: REMOVAL_REACH_SCHEME,
+        ids: 'ids@0.1',
+        rootKinds,
+        entryIndexDigest: entryIndexDigest(base.entries),
+        partial,
+        partialFiles: partialFileDetails(partial, [...base.files, ...head.filter(f => f.partial)]),
+        moved: moves.moves.map(m => ({ from: m.from.id, to: m.to.id, relation: m.relation, evidence: m.evidence })),
+        removed: facts.facts.map(f => ({
+            id: f.id,
+            qualified_name: f.qualified_name,
+            kind: f.kind,
+            file: f.file,
+            strong: f.strong,
+            weak: f.weak,
+            unresolved: f.unresolved,
+            unresolvedCount: f.unresolvedCount,
+            moveCandidates: candidates.get(f.id) ?? [],
+        })),
+    };
+}
+//# sourceMappingURL=removal-reach.js.map

package/dist/graph-facts/removal-reach.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"removal-reach.js","sourceRoot":"","sources":["../../src/graph-facts/removal-reach.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,EAAE,SAAS,EAAE,MAAM,uBAAuB,CAAC;AAClD,OAAO,EAAE,WAAW,EAAwC,MAAM,wBAAwB,CAAC;AAG3F,OAAO,EAAE,eAAe,EAAE,kBAAkB,EAAE,KAAK,EAA0E,MAAM,YAAY,CAAC;AAEhJ,MAAM,CAAC,MAAM,oBAAoB,GAAG,mBAA4B,CAAC;AA8CjE,iFAAiF;AACjF,MAAM,UAAU,gBAAgB,CAAC,OAA8B;IAC7D,MAAM,IAAI,GAAG,OAAO;SACjB,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC,MAAM,IAAI,EAAE,EAAE,CAAC,CAAC,IAAI,IAAI,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;SAC1G,IAAI,EAAE,CAAC;IACV,OAAO,SAAS,CAAC,CAAC,iBAAiB,EAAE,GAAG,IAAI,CAAC,CAAC,CAAC;AACjD,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,YAAY,CAC1B,IAAgB,EAChB,IAA6B,EAC7B,OAAO,GAAwB,EAAE;IAEjC,MAAM,SAAS,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,SAAS,IAAI,eAAe,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,KAAK,MAAM,CAAC,CAAC,CAAC,CAAC;IACxF,MAAM,KAAK,GAAG,WAAW,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC;IAC3D,MAAM,UAAU,GAAG,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IACrD,MAAM,KAAK,GAAG,KAAK,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,OAAO,EAAE,UAAU,EAAE,aAAa,EAAE,OAAO,CAAC,aAAa,EAAE,CAAC,CAAC;IACpG,MAAM,UAAU,GAAG,IAAI,GAAG,EAA8B,CAAC;IACzD,KAAK,MAAM,CAAC,IAAI,KAAK,CAAC,UAAU,EAAE,CAAC;QACjC,MAAM,IAAI,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,EAAE,CAAC;QAC7C,IAAI,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,QAAQ,EAAE,QAAQ,EAAE,CAAC,CAAC,QAAQ,EAAE,UAAU,EAAE,CAAC,CAAC,UAAU,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC;QACjG,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;IAClC,CAAC;IACD,MAAM,OAAO,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,IAAI,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IACxG,OAAO;QACL,MAAM,EAAE,oBAAoB;QAC5B,GAAG,EAAE,SAAS;QACd,SAAS;QACT,gBAAgB,EAAE,gBAAgB,CAAC,IAAI,CAAC,OAAO,CAAC;QAChD,OAAO;QACP,YAAY,EAAE,kBAAkB,CAAC,OAAO,EAAE,CAAC,GAAG,IAAI,CAAC,KAAK,EAAE,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;QAC1F,KAAK,EAAE,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,QAAQ,EAAE,CAAC,CAAC,QAAQ,EAAE,QAAQ,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC;QAC3G,OAAO,EAAE,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;YAC7B,EAAE,EAAE,CAAC,CAAC,EAAE;YACR,cAAc,EAAE,CAAC,CAAC,cAAc;YAChC,IAAI,EAAE,CAAC,CAAC,IAAI;YACZ,IAAI,EAAE,CAAC,CAAC,IAAI;YACZ,MAAM,EAAE,CAAC,CAAC,MAAM;YAChB,IAAI,EAAE,CAAC,CAAC,IAAI;YACZ,UAAU,EAAE,CAAC,CAAC,UAAU;YACxB,eAAe,EAAE,CAAC,CAAC,eAAe;YAClC,cAAc,EAAE,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,EAAE;SAC3C,CAAC,CAAC;KACJ,CAAC;AACJ,CAAC"}

package/dist/index.d.ts

@@ -3,14 +3,21 @@
  *
  * A universal library for static analysis and taint tracking.
  */
-export { initAnalyzer, analyze, analyzeForAPI, analyzeProject, isAnalyzerInitialized, resetAnalyzer, type AnalyzerOptions, } from './analyzer.js';
-export { parseNpmDependencies, parseNpmLockDependencies, parsePypiDependencies, parsePyprojectDependencies, parseMavenDependencies, parseGradleDependencies, parseCargoDependencies, parseCargoLockDependencies, parsePoetryLockDependencies, parseGoDependencies, collectDependencies, toCycloneDx, toSpdx, } from './analysis/sbom.js';
-export type { Dependency, Ecosystem, DependencyScope, SbomMetadata, } from './analysis/sbom.js';
+export { initAnalyzer, analyze, analyzeForAPI, analyzeProject, isAnalyzerInitialized, AnalysisTimeoutError, resetAnalyzer, type AnalyzerOptions, } from './analyzer.js';
+export { parseNpmDependencies, parseNpmLockDependencies, parsePnpmLockDependencies, parseYarnLockDependencies, pnpmLockImporters, parsePypiDependencies, parsePyprojectDependencies, parseMavenDependencies, parseGradleDependencies, parseGradleLockfile, parseMavenResolvedDependencies, parseCargoDependencies, parseCargoLockDependencies, parsePoetryLockDependencies, parseGoDependencies, collectDependencies, licenseFromPackageJson, applyLicenses, toCycloneDx, toSpdx, } from './analysis/sbom.js';
+export type { Dependency, Ecosystem, DependencyScope, SbomMetadata, LicenseMap, } from './analysis/sbom.js';
+export { compareMavenVersions, canonicalMavenVersion } from './analysis/maven-version.js';
+export { compareSemver, parseSemver } from './analysis/semver-version.js';
+export type { ParsedSemver } from './analysis/semver-version.js';
+export { MavenDeclaredIndex } from './analysis/maven-declared.js';
+export type { DeclaredVersion, DeclaredOrigin, PomFile } from './analysis/maven-declared.js';
+export { parseOsvRecord, buildAdvisoryIndex, matchAdvisories, rangeIntervals, isConcreteVersion, diffAdvisoryMatches, diffDependencySets, ADVISORY_ECOSYSTEMS, } from './analysis/advisories.js';
+export type { OsvRecord, OsvAffected, OsvRange, OsvEvent, AdvisoryGroup, AdvisoryIndex, AdvisoryRef, AdvisoryMatch, AffectedInterval, DeltaMatch, AdvisoryDelta, DependencyDelta, AdvisoryEcosystem, } from './analysis/advisories.js';
 export type { NamingConventionOptions } from './analysis/passes/naming-convention-pass.js';
 export type { DependencyFanOutOptions } from './analysis/passes/dependency-fan-out-pass.js';
 export type { UnboundedCollectionOptions } from './analysis/passes/unbounded-collection-pass.js';
 export type { PassOptions } from './analyzer.js';
-export type { CircleIR, Meta, TypeInfo, MethodInfo, ParameterInfo, FieldInfo, CallInfo, ArgumentInfo, CallResolution, CFG, CFGBlock, CFGEdge, DFG, DFGDef, DFGUse, DFGChain, Taint, TaintSource, TaintSink, TaintSanitizer, ImportInfo, ExportInfo, UnresolvedItem, Enriched, EnrichedFunction, ResolvedCall, Finding, TaintHop, Vulnerability, AnalysisResponse, SourceType, SinkType, Severity, ProjectShape, ProjectEnv, ProjectProfile, ProjectProfileSummary, PassCategory, SarifLevel, SastFinding, MetricCategory, MetricValue, FileMetrics, ProjectAnalysis, ProjectMeta, FileAnalysis, TypeHierarchy, ClassHierarchyInfo, InterfaceHierarchyInfo, CrossFileCall, ArgMapping, TaintPath, } from './types/index.js';
+export type { CircleIR, Meta, TypeInfo, MethodInfo, ParameterInfo, FieldInfo, DecoratorInfo, CallInfo, ArgumentInfo, CallResolution, CFG, CFGBlock, CFGEdge, DFG, DFGDef, DFGUse, DFGChain, Taint, TaintSource, TaintSink, TaintSanitizer, ImportInfo, ExportInfo, UnresolvedItem, Enriched, EnrichedFunction, ResolvedCall, Finding, TaintHop, Vulnerability, AnalysisResponse, SourceType, SinkType, Severity, ProjectShape, ProjectEnv, ProjectProfile, ProjectProfileSummary, PassCategory, SarifLevel, SastFinding, MetricCategory, MetricValue, FileMetrics, ProjectAnalysis, ProjectMeta, FileAnalysis, TypeHierarchy, ClassHierarchyInfo, InterfaceHierarchyInfo, CrossFileCall, ArgMapping, TaintPath, } from './types/index.js';
 export { SOURCE_TYPES, SINK_TYPES } from './types/index.js';
 export { getModelledCwes, isModelledCwe, RELATED_CWE, type ModelledCwes, } from './analysis/modelled-cwes.js';
 export type { SourceConfig, SinkConfig, TaintConfig, SourcePattern, SinkPattern, SanitizerPattern, } from './types/config.js';
@@ -21,8 +28,16 @@ export { getRuleInfo, RULE_DEFINITIONS, type RuleInfo, } from './analysis/rules.
 export { DominatorGraph } from './graph/dominator-graph.js';
 export { ExceptionFlowGraph, type TryCatchInfo } from './graph/exception-flow-graph.js';
 export { TypeHierarchyResolver, createWithJdkTypes, SymbolTable, buildSymbolTable, CrossFileResolver, buildCrossFileResolver, } from './resolution/index.js';
-export { buildNavigationIndex, NavigationIndex, } from './navigation/index.js';
-export type { NavigationFile, BuildOptions as NavigationBuildOptions, NavigationAnswer, AnswerEntry, UnresolvedEntry, UnresolvedReason, CallSite, Tier, Query as NavigationQuery, QueryKind, QueryOptions as NavigationQueryOptions, Scope as NavigationScope, Timing as NavigationTiming, } from './navigation/index.js';
+export { buildNavigationIndex, NavigationIndex, buildTsCallGraph, TS_CALL_EDGES_SCHEME, COMPUTED_MODULE_LOAD, DEFAULT_ENTRY_TABLES, buildJavaGraph, JAVA_GRAPH_SCHEME, DEFAULT_JAVA_ENTRY_TABLES, buildPythonGraph, PYTHON_GRAPH_SCHEME, buildGoGraph, GO_GRAPH_SCHEME, } from './navigation/index.js';
+export type { NavigationFile, BuildOptions as NavigationBuildOptions, NavigationAnswer, AnswerEntry, UnresolvedEntry, UnresolvedReason, CallSite, Tier, Query as NavigationQuery, QueryKind, QueryOptions as NavigationQueryOptions, Scope as NavigationScope, Timing as NavigationTiming, TsSourceFile, TsCallGraphOptions, TsCallGraph, CallEdge, CallEdgeSite, UnresolvedCall, TsPackageManifest, TsEntry, UnresolvedRegistration, ReferenceEdge, FieldUseEdge, ImportEdge, LoadEdge, EntryKind, EntryCertainty, EntryTables, ScriptTable, ToolFileRow, ExpoTable, JavaSourceFile, JavaGraphOptions, JavaGraph, JavaEntryTables, PythonSourceFile, PythonGraphOptions, PythonGraph, GoSourceFile, GoGraphOptions, GoGraph, IndexedCallSite, IndexedTarget, } from './navigation/index.js';
+export { REACH_SCHEME, reach, DEAD_CODE_SCHEME, deadCode, REMOVAL_REACH_SCHEME, removalReach, entryIndexDigest, partialFileDetails, DEPENDENCY_CALLS_SCHEME, dependencyCalls, MAVEN_PACKAGE_FALLBACK, UnknownArtifact, jarPackages, mavenArtifact, mavenPackages, zipEntryNames } from './graph-facts/index.js';
+export type { DependencyCallsOptions, DependencyCall, DependencyCallTest, DependencyCallsResult, DependencyUnattributedSite, MavenPackages, MavenPackageSource, ReachInput, ReachOptions, ReachResult, ReachFact, ReachPath, PathStep, CouldReachSite, DeadCodeVerdict, DeadCodeFact, DeadCodeOptions, DeadCodeResult, RemovedDeclaration, MoveCandidateRef, RemovalReachOptions, RemovalReachResult, PartialFile, } from './graph-facts/index.js';
+export { STABLE_ID_SCHEME, deriveStableIds, deriveTypeScriptIds, stableIdsSupport, moduleNameFor, assignNodeIds, diffStableIds, deriveJavaIds, eraseJavaType, derivePythonIds, pythonModuleName, deriveGoIds, goPackageDir, detectMoves, bodySimilarity, } from './stable-ids/index.js';
+export type { StableIdScheme, StableDecl, StableDeclKind, StableIdFlag, StableIdFile, StableIdOptions, StableNodeIds, ParseErrorSite, NodeIdSource, StableIdDiff, MoveRelation, MoveEvidence, CandidateEvidence, StableIdMove, MoveCandidate, MoveOptions, MoveDetection, } from './stable-ids/index.js';
+export { SAFE_CONSTRUCT_TABLE_FORMAT, loadSafeConstructTable, sha256Bytes, sha256Digest, remedyClassOf, TableRefused, htmlContextAt, markupBefore, javaStringLiterals, } from './remedy-class/index.js';
+export type { ArgPosition, ArgIs, StepRole, MatchStep, TableCall, TableTemplate, TableSink, TableSource, ConstructClass, ConstructRow, SafeConstructTable, TableProblem, TableProblemCode, LoadTableResult, TypeMatch, StepObservation, MatchedRow, RemedyMatch, RemedyReason, RemedySinkObservation, RemedyClassResult, RemedyClassOptions, OutputContext, } from './remedy-class/index.js';
+export { PATH_KEY_SCHEME, pathSetOf, pathSetDiff, diffPathSets, pinFacts, pathKey, declAt, changeOf, normalizeCwe, lineDominates, deriveBranchFacts, sideOf, deriveTemplateFacts, templateEngineOf, expressionNames, handedNames, findingDiff, diffLines, splitLines, } from './path-set/index.js';
+export type { FindingDiff, FindingDiffSide, NewFinding, MatchedBy, LineDiff, PathSetInput, PathSetOptions, DeclKeyScheme, DeclRef, PathHop, PathEnd, PathSource, PathSink, PathGuard, PathUnresolved, UnresolvedSite, PathState, PathEntry, BranchFact, BranchCall, BranchRange, BranchSide, TemplateFact, TemplateEngine, TemplateUse, PathSet, PathChange, PathDiffEntry, PinFacts, PathSetDiff, } from './path-set/index.js';
 export { getLanguageRegistry, registerLanguage, getLanguagePlugin, getLanguageForFile, detectLanguage, isLanguageSupported, registerBuiltinPlugins, JavaPlugin, JavaScriptPlugin, PythonPlugin, RustPlugin, HtmlPlugin, BaseLanguagePlugin, } from './languages/index.js';
 export type { LanguagePlugin, LanguageRegistry, LanguageNodeTypes, ExtractionContext, FrameworkInfo, TaintSourcePattern, TaintSinkPattern, } from './languages/index.js';
 export { logger, setLogger, configureLogger, setLogLevel, getLogLevel, type LogLevel, type LoggerConfig, type LoggerInstance, } from './utils/logger.js';

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAGH,OAAO,EACL,YAAY,EACZ,OAAO,EACP,aAAa,EACb,cAAc,EACd,qBAAqB,EACrB,aAAa,EACb,KAAK,eAAe,GACrB,MAAM,eAAe,CAAC;AAGvB,OAAO,EACL,oBAAoB,EACpB,wBAAwB,EACxB,qBAAqB,EACrB,0BAA0B,EAC1B,sBAAsB,EACtB,uBAAuB,EACvB,sBAAsB,EACtB,0BAA0B,EAC1B,2BAA2B,EAC3B,mBAAmB,EACnB,mBAAmB,EACnB,WAAW,EACX,MAAM,GACP,MAAM,oBAAoB,CAAC;AAC5B,YAAY,EACV,UAAU,EACV,SAAS,EACT,eAAe,EACf,YAAY,GACb,MAAM,oBAAoB,CAAC;AAG5B,YAAY,EAAE,uBAAuB,EAAE,MAAM,6CAA6C,CAAC;AAC3F,YAAY,EAAE,uBAAuB,EAAE,MAAM,8CAA8C,CAAC;AAC5F,YAAY,EAAE,0BAA0B,EAAE,MAAM,gDAAgD,CAAC;AACjG,YAAY,EAAE,WAAW,EAAE,MAAM,eAAe,CAAC;AAGjD,YAAY,EAEV,QAAQ,EACR,IAAI,EACJ,QAAQ,EACR,UAAU,EACV,aAAa,EACb,SAAS,EACT,QAAQ,EACR,YAAY,EACZ,cAAc,EACd,GAAG,EACH,QAAQ,EACR,OAAO,EACP,GAAG,EACH,MAAM,EACN,MAAM,EACN,QAAQ,EACR,KAAK,EACL,WAAW,EACX,SAAS,EACT,cAAc,EACd,UAAU,EACV,UAAU,EACV,cAAc,EACd,QAAQ,EACR,gBAAgB,EAChB,YAAY,EACZ,OAAO,EACP,QAAQ,EACR,aAAa,EACb,gBAAgB,EAGhB,UAAU,EACV,QAAQ,EACR,QAAQ,EAGR,YAAY,EACZ,UAAU,EACV,cAAc,EACd,qBAAqB,EAGrB,YAAY,EACZ,UAAU,EACV,WAAW,EACX,cAAc,EACd,WAAW,EACX,WAAW,EAGX,eAAe,EACf,WAAW,EACX,YAAY,EACZ,aAAa,EACb,kBAAkB,EAClB,sBAAsB,EACtB,aAAa,EACb,UAAU,EACV,SAAS,GACV,MAAM,kBAAkB,CAAC;AAU1B,OAAO,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAI5D,OAAO,EACL,eAAe,EACf,aAAa,EACb,WAAW,EACX,KAAK,YAAY,GAClB,MAAM,6BAA6B,CAAC;AAGrC,YAAY,EACV,YAAY,EACZ,UAAU,EACV,WAAW,EACX,aAAa,EACb,WAAW,EACX,gBAAgB,GACjB,MAAM,mBAAmB,CAAC;AAG3B,OAAO,EACL,UAAU,EACV,KAAK,EACL,QAAQ,EACR,SAAS,EACT,YAAY,EACZ,WAAW,EACX,eAAe,EACf,KAAK,iBAAiB,EACtB,KAAK,UAAU,EACf,KAAK,IAAI,EACT,KAAK,SAAS,EACd,KAAK,IAAI,GACV,MAAM,iBAAiB,CAAC;AAGzB,OAAO,EACL,WAAW,EACX,YAAY,EACZ,YAAY,EACZ,cAAc,EACd,cAAc,EACd,QAAQ,EACR,QAAQ,GACT,MAAM,iBAAiB,CAAC;AAGzB,OAAO,EACL,gBAAgB,EAChB,iBAAiB,EACjB,YAAY,EACZ,oBAAoB,EACpB,gBAAgB,EAChB,cAAc,EACd,gBAAgB,EAChB,yBAAyB,EACzB,0BAA0B,EAC1B,gCAAgC,EAChC,0BAA0B,EAC1B,kBAAkB,EAClB,OAAO,EACP,aAAa,EACb,WAAW,EACX,eAAe,EACf,aAAa,EACb,kBAAkB,EAClB,KAAK,aAAa,EAClB,KAAK,wBAAwB,EAC7B,KAAK,sBAAsB,EAC3B,KAAK,eAAe,EACpB,KAAK,SAAS,GACf,MAAM,qBAAqB,CAAC;AAG7B,OAAO,EACL,WAAW,EACX,gBAAgB,EAChB,KAAK,QAAQ,GACd,MAAM,qBAAqB,CAAC;AAG7B,OAAO,EAAE,cAAc,EAAE,MAAM,4BAA4B,CAAC;AAC5D,OAAO,EAAE,kBAAkB,EAAE,KAAK,YAAY,EAAE,MAAM,iCAAiC,CAAC;AAGxF,OAAO,EACL,qBAAqB,EACrB,kBAAkB,EAClB,WAAW,EACX,gBAAgB,EAChB,iBAAiB,EACjB,sBAAsB,GACvB,MAAM,uBAAuB,CAAC;AAK/B,OAAO,EACL,oBAAoB,EACpB,eAAe,GAChB,MAAM,uBAAuB,CAAC;AAC/B,YAAY,EACV,cAAc,EACd,YAAY,IAAI,sBAAsB,EACtC,gBAAgB,EAChB,WAAW,EACX,eAAe,EACf,gBAAgB,EAChB,QAAQ,EACR,IAAI,EACJ,KAAK,IAAI,eAAe,EACxB,SAAS,EACT,YAAY,IAAI,sBAAsB,EACtC,KAAK,IAAI,eAAe,EACxB,MAAM,IAAI,gBAAgB,GAC3B,MAAM,uBAAuB,CAAC;AAG/B,OAAO,EACL,mBAAmB,EACnB,gBAAgB,EAChB,iBAAiB,EACjB,kBAAkB,EAClB,cAAc,EACd,mBAAmB,EACnB,sBAAsB,EACtB,UAAU,EACV,gBAAgB,EAChB,YAAY,EACZ,UAAU,EACV,UAAU,EACV,kBAAkB,GACnB,MAAM,sBAAsB,CAAC;AAE9B,YAAY,EACV,cAAc,EACd,gBAAgB,EAChB,iBAAiB,EACjB,iBAAiB,EACjB,aAAa,EACb,kBAAkB,EAClB,gBAAgB,GACjB,MAAM,sBAAsB,CAAC;AAG9B,OAAO,EACL,MAAM,EACN,SAAS,EACT,eAAe,EACf,WAAW,EACX,WAAW,EACX,KAAK,QAAQ,EACb,KAAK,YAAY,EACjB,KAAK,cAAc,GACpB,MAAM,mBAAmB,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAGH,OAAO,EACL,YAAY,EACZ,OAAO,EACP,aAAa,EACb,cAAc,EACd,qBAAqB,EACrB,oBAAoB,EACpB,aAAa,EACb,KAAK,eAAe,GACrB,MAAM,eAAe,CAAC;AAGvB,OAAO,EACL,oBAAoB,EACpB,wBAAwB,EACxB,yBAAyB,EACzB,yBAAyB,EACzB,iBAAiB,EACjB,qBAAqB,EACrB,0BAA0B,EAC1B,sBAAsB,EACtB,uBAAuB,EACvB,mBAAmB,EACnB,8BAA8B,EAC9B,sBAAsB,EACtB,0BAA0B,EAC1B,2BAA2B,EAC3B,mBAAmB,EACnB,mBAAmB,EACnB,sBAAsB,EACtB,aAAa,EACb,WAAW,EACX,MAAM,GACP,MAAM,oBAAoB,CAAC;AAC5B,YAAY,EACV,UAAU,EACV,SAAS,EACT,eAAe,EACf,YAAY,EACZ,UAAU,GACX,MAAM,oBAAoB,CAAC;AAG5B,OAAO,EAAE,oBAAoB,EAAE,qBAAqB,EAAE,MAAM,6BAA6B,CAAC;AAC1F,OAAO,EAAE,aAAa,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAC1E,YAAY,EAAE,YAAY,EAAE,MAAM,8BAA8B,CAAC;AACjE,OAAO,EAAE,kBAAkB,EAAE,MAAM,8BAA8B,CAAC;AAClE,YAAY,EAAE,eAAe,EAAE,cAAc,EAAE,OAAO,EAAE,MAAM,8BAA8B,CAAC;AAC7F,OAAO,EACL,cAAc,EACd,kBAAkB,EAClB,eAAe,EACf,cAAc,EACd,iBAAiB,EACjB,mBAAmB,EACnB,kBAAkB,EAClB,mBAAmB,GACpB,MAAM,0BAA0B,CAAC;AAClC,YAAY,EACV,SAAS,EACT,WAAW,EACX,QAAQ,EACR,QAAQ,EACR,aAAa,EACb,aAAa,EACb,WAAW,EACX,aAAa,EACb,gBAAgB,EAChB,UAAU,EACV,aAAa,EACb,eAAe,EACf,iBAAiB,GAClB,MAAM,0BAA0B,CAAC;AAGlC,YAAY,EAAE,uBAAuB,EAAE,MAAM,6CAA6C,CAAC;AAC3F,YAAY,EAAE,uBAAuB,EAAE,MAAM,8CAA8C,CAAC;AAC5F,YAAY,EAAE,0BAA0B,EAAE,MAAM,gDAAgD,CAAC;AACjG,YAAY,EAAE,WAAW,EAAE,MAAM,eAAe,CAAC;AAGjD,YAAY,EAEV,QAAQ,EACR,IAAI,EACJ,QAAQ,EACR,UAAU,EACV,aAAa,EACb,SAAS,EACT,aAAa,EACb,QAAQ,EACR,YAAY,EACZ,cAAc,EACd,GAAG,EACH,QAAQ,EACR,OAAO,EACP,GAAG,EACH,MAAM,EACN,MAAM,EACN,QAAQ,EACR,KAAK,EACL,WAAW,EACX,SAAS,EACT,cAAc,EACd,UAAU,EACV,UAAU,EACV,cAAc,EACd,QAAQ,EACR,gBAAgB,EAChB,YAAY,EACZ,OAAO,EACP,QAAQ,EACR,aAAa,EACb,gBAAgB,EAGhB,UAAU,EACV,QAAQ,EACR,QAAQ,EAGR,YAAY,EACZ,UAAU,EACV,cAAc,EACd,qBAAqB,EAGrB,YAAY,EACZ,UAAU,EACV,WAAW,EACX,cAAc,EACd,WAAW,EACX,WAAW,EAGX,eAAe,EACf,WAAW,EACX,YAAY,EACZ,aAAa,EACb,kBAAkB,EAClB,sBAAsB,EACtB,aAAa,EACb,UAAU,EACV,SAAS,GACV,MAAM,kBAAkB,CAAC;AAU1B,OAAO,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAI5D,OAAO,EACL,eAAe,EACf,aAAa,EACb,WAAW,EACX,KAAK,YAAY,GAClB,MAAM,6BAA6B,CAAC;AAGrC,YAAY,EACV,YAAY,EACZ,UAAU,EACV,WAAW,EACX,aAAa,EACb,WAAW,EACX,gBAAgB,GACjB,MAAM,mBAAmB,CAAC;AAG3B,OAAO,EACL,UAAU,EACV,KAAK,EACL,QAAQ,EACR,SAAS,EACT,YAAY,EACZ,WAAW,EACX,eAAe,EACf,KAAK,iBAAiB,EACtB,KAAK,UAAU,EACf,KAAK,IAAI,EACT,KAAK,SAAS,EACd,KAAK,IAAI,GACV,MAAM,iBAAiB,CAAC;AAGzB,OAAO,EACL,WAAW,EACX,YAAY,EACZ,YAAY,EACZ,cAAc,EACd,cAAc,EACd,QAAQ,EACR,QAAQ,GACT,MAAM,iBAAiB,CAAC;AAGzB,OAAO,EACL,gBAAgB,EAChB,iBAAiB,EACjB,YAAY,EACZ,oBAAoB,EACpB,gBAAgB,EAChB,cAAc,EACd,gBAAgB,EAChB,yBAAyB,EACzB,0BAA0B,EAC1B,gCAAgC,EAChC,0BAA0B,EAC1B,kBAAkB,EAClB,OAAO,EACP,aAAa,EACb,WAAW,EACX,eAAe,EACf,aAAa,EACb,kBAAkB,EAClB,KAAK,aAAa,EAClB,KAAK,wBAAwB,EAC7B,KAAK,sBAAsB,EAC3B,KAAK,eAAe,EACpB,KAAK,SAAS,GACf,MAAM,qBAAqB,CAAC;AAG7B,OAAO,EACL,WAAW,EACX,gBAAgB,EAChB,KAAK,QAAQ,GACd,MAAM,qBAAqB,CAAC;AAG7B,OAAO,EAAE,cAAc,EAAE,MAAM,4BAA4B,CAAC;AAC5D,OAAO,EAAE,kBAAkB,EAAE,KAAK,YAAY,EAAE,MAAM,iCAAiC,CAAC;AAGxF,OAAO,EACL,qBAAqB,EACrB,kBAAkB,EAClB,WAAW,EACX,gBAAgB,EAChB,iBAAiB,EACjB,sBAAsB,GACvB,MAAM,uBAAuB,CAAC;AAK/B,OAAO,EACL,oBAAoB,EACpB,eAAe,EACf,gBAAgB,EAChB,oBAAoB,EACpB,oBAAoB,EACpB,oBAAoB,EACpB,cAAc,EACd,iBAAiB,EACjB,yBAAyB,EACzB,gBAAgB,EAChB,mBAAmB,EACnB,YAAY,EACZ,eAAe,GAChB,MAAM,uBAAuB,CAAC;AAC/B,YAAY,EACV,cAAc,EACd,YAAY,IAAI,sBAAsB,EACtC,gBAAgB,EAChB,WAAW,EACX,eAAe,EACf,gBAAgB,EAChB,QAAQ,EACR,IAAI,EACJ,KAAK,IAAI,eAAe,EACxB,SAAS,EACT,YAAY,IAAI,sBAAsB,EACtC,KAAK,IAAI,eAAe,EACxB,MAAM,IAAI,gBAAgB,EAC1B,YAAY,EACZ,kBAAkB,EAClB,WAAW,EACX,QAAQ,EACR,YAAY,EACZ,cAAc,EACd,iBAAiB,EACjB,OAAO,EACP,sBAAsB,EACtB,aAAa,EACb,YAAY,EACZ,UAAU,EACV,QAAQ,EACR,SAAS,EACT,cAAc,EACd,WAAW,EACX,WAAW,EACX,WAAW,EACX,SAAS,EACT,cAAc,EACd,gBAAgB,EAChB,SAAS,EACT,eAAe,EACf,gBAAgB,EAChB,kBAAkB,EAClB,WAAW,EACX,YAAY,EACZ,cAAc,EACd,OAAO,EACP,eAAe,EACf,aAAa,GACd,MAAM,uBAAuB,CAAC;AAG/B,OAAO,EAAE,YAAY,EAAE,KAAK,EAAE,gBAAgB,EAAE,QAAQ,EAAE,oBAAoB,EAAE,YAAY,EAAE,gBAAgB,EAAE,kBAAkB,EAAE,uBAAuB,EAAE,eAAe,EAAE,sBAAsB,EAAE,eAAe,EAAE,WAAW,EAAE,aAAa,EAAE,aAAa,EAAE,aAAa,EAAE,MAAM,wBAAwB,CAAC;AAChT,YAAY,EACV,sBAAsB,EACtB,cAAc,EACd,kBAAkB,EAClB,qBAAqB,EACrB,0BAA0B,EAC1B,aAAa,EACb,kBAAkB,EAClB,UAAU,EACV,YAAY,EACZ,WAAW,EACX,SAAS,EACT,SAAS,EACT,QAAQ,EACR,cAAc,EACd,eAAe,EACf,YAAY,EACZ,eAAe,EACf,cAAc,EACd,kBAAkB,EAClB,gBAAgB,EAChB,mBAAmB,EACnB,kBAAkB,EAClB,WAAW,GACZ,MAAM,wBAAwB,CAAC;AAKhC,OAAO,EACL,gBAAgB,EAChB,eAAe,EACf,mBAAmB,EACnB,gBAAgB,EAChB,aAAa,EACb,aAAa,EACb,aAAa,EACb,aAAa,EACb,aAAa,EACb,eAAe,EACf,gBAAgB,EAChB,WAAW,EACX,YAAY,EACZ,WAAW,EACX,cAAc,GACf,MAAM,uBAAuB,CAAC;AAC/B,YAAY,EACV,cAAc,EACd,UAAU,EACV,cAAc,EACd,YAAY,EACZ,YAAY,EACZ,eAAe,EACf,aAAa,EACb,cAAc,EACd,YAAY,EACZ,YAAY,EACZ,YAAY,EACZ,YAAY,EACZ,iBAAiB,EACjB,YAAY,EACZ,aAAa,EACb,WAAW,EACX,aAAa,GACd,MAAM,uBAAuB,CAAC;AAI/B,OAAO,EACL,2BAA2B,EAC3B,sBAAsB,EACtB,WAAW,EACX,YAAY,EACZ,aAAa,EACb,YAAY,EACZ,aAAa,EACb,YAAY,EACZ,kBAAkB,GACnB,MAAM,yBAAyB,CAAC;AACjC,YAAY,EACV,WAAW,EACX,KAAK,EACL,QAAQ,EACR,SAAS,EACT,SAAS,EACT,aAAa,EACb,SAAS,EACT,WAAW,EACX,cAAc,EACd,YAAY,EACZ,kBAAkB,EAClB,YAAY,EACZ,gBAAgB,EAChB,eAAe,EACf,SAAS,EACT,eAAe,EACf,UAAU,EACV,WAAW,EACX,YAAY,EACZ,qBAAqB,EACrB,iBAAiB,EACjB,kBAAkB,EAClB,aAAa,GACd,MAAM,yBAAyB,CAAC;AAIjC,OAAO,EACL,eAAe,EACf,SAAS,EACT,WAAW,EACX,YAAY,EACZ,QAAQ,EACR,OAAO,EACP,MAAM,EACN,QAAQ,EACR,YAAY,EACZ,aAAa,EACb,iBAAiB,EACjB,MAAM,EACN,mBAAmB,EACnB,gBAAgB,EAChB,eAAe,EACf,WAAW,EACX,WAAW,EACX,SAAS,EACT,UAAU,GACX,MAAM,qBAAqB,CAAC;AAC7B,YAAY,EACV,WAAW,EACX,eAAe,EACf,UAAU,EACV,SAAS,EACT,QAAQ,EACR,YAAY,EACZ,cAAc,EACd,aAAa,EACb,OAAO,EACP,OAAO,EACP,OAAO,EACP,UAAU,EACV,QAAQ,EACR,SAAS,EACT,cAAc,EACd,cAAc,EACd,SAAS,EACT,SAAS,EACT,UAAU,EACV,UAAU,EACV,WAAW,EACX,UAAU,EACV,YAAY,EACZ,cAAc,EACd,WAAW,EACX,OAAO,EACP,UAAU,EACV,aAAa,EACb,QAAQ,EACR,WAAW,GACZ,MAAM,qBAAqB,CAAC;AAG7B,OAAO,EACL,mBAAmB,EACnB,gBAAgB,EAChB,iBAAiB,EACjB,kBAAkB,EAClB,cAAc,EACd,mBAAmB,EACnB,sBAAsB,EACtB,UAAU,EACV,gBAAgB,EAChB,YAAY,EACZ,UAAU,EACV,UAAU,EACV,kBAAkB,GACnB,MAAM,sBAAsB,CAAC;AAE9B,YAAY,EACV,cAAc,EACd,gBAAgB,EAChB,iBAAiB,EACjB,iBAAiB,EACjB,aAAa,EACb,kBAAkB,EAClB,gBAAgB,GACjB,MAAM,sBAAsB,CAAC;AAG9B,OAAO,EACL,MAAM,EACN,SAAS,EACT,eAAe,EACf,WAAW,EACX,WAAW,EACX,KAAK,QAAQ,EACb,KAAK,YAAY,EACjB,KAAK,cAAc,GACpB,MAAM,mBAAmB,CAAC"}

package/dist/index.js

@@ -4,9 +4,14 @@
  * A universal library for static analysis and taint tracking.
  */
 // Main analyzer
-export { initAnalyzer, analyze, analyzeForAPI, analyzeProject, isAnalyzerInitialized, resetAnalyzer, } from './analyzer.js';
+export { initAnalyzer, analyze, analyzeForAPI, analyzeProject, isAnalyzerInitialized, AnalysisTimeoutError, resetAnalyzer, } from './analyzer.js';
 // SBOM generation (deterministic — CycloneDX 1.5 / SPDX 2.3 from manifests)
-export { parseNpmDependencies, parseNpmLockDependencies, parsePypiDependencies, parsePyprojectDependencies, parseMavenDependencies, parseGradleDependencies, parseCargoDependencies, parseCargoLockDependencies, parsePoetryLockDependencies, parseGoDependencies, collectDependencies, toCycloneDx, toSpdx, } from './analysis/sbom.js';
+export { parseNpmDependencies, parseNpmLockDependencies, parsePnpmLockDependencies, parseYarnLockDependencies, pnpmLockImporters, parsePypiDependencies, parsePyprojectDependencies, parseMavenDependencies, parseGradleDependencies, parseGradleLockfile, parseMavenResolvedDependencies, parseCargoDependencies, parseCargoLockDependencies, parsePoetryLockDependencies, parseGoDependencies, collectDependencies, licenseFromPackageJson, applyLicenses, toCycloneDx, toSpdx, } from './analysis/sbom.js';
+// Known-vulnerability matching against caller-supplied OSV records (deterministic)
+export { compareMavenVersions, canonicalMavenVersion } from './analysis/maven-version.js';
+export { compareSemver, parseSemver } from './analysis/semver-version.js';
+export { MavenDeclaredIndex } from './analysis/maven-declared.js';
+export { parseOsvRecord, buildAdvisoryIndex, matchAdvisories, rangeIntervals, isConcreteVersion, diffAdvisoryMatches, diffDependencySets, ADVISORY_ECOSYSTEMS, } from './analysis/advisories.js';
 // Runtime values, not just types. `SourceType` / `SinkType` above are
 // `export type`, so re-exporting the unions alone gives consumers nothing to
 // import at runtime — which is exactly what happened in 3.197.0, where the
@@ -35,7 +40,19 @@ export { TypeHierarchyResolver, createWithJdkTypes, SymbolTable, buildSymbolTabl
 // Navigation queries — callers and callees, each answer carrying its tier and
 // each non-answer its reason. Additive: nothing in the resolution path above
 // changes, because the SAST passes and the taint corpora depend on it exactly.
-export { buildNavigationIndex, NavigationIndex, } from './navigation/index.js';
+export { buildNavigationIndex, NavigationIndex, buildTsCallGraph, TS_CALL_EDGES_SCHEME, COMPUTED_MODULE_LOAD, DEFAULT_ENTRY_TABLES, buildJavaGraph, JAVA_GRAPH_SCHEME, DEFAULT_JAVA_ENTRY_TABLES, buildPythonGraph, PYTHON_GRAPH_SCHEME, buildGoGraph, GO_GRAPH_SCHEME, } from './navigation/index.js';
+// Graph facts over stable ids (experimental): the reach core and dead code.
+export { REACH_SCHEME, reach, DEAD_CODE_SCHEME, deadCode, REMOVAL_REACH_SCHEME, removalReach, entryIndexDigest, partialFileDetails, DEPENDENCY_CALLS_SCHEME, dependencyCalls, MAVEN_PACKAGE_FALLBACK, UnknownArtifact, jarPackages, mavenArtifact, mavenPackages, zipEntryNames } from './graph-facts/index.js';
+// Stable code ids (ids@0.1, experimental and opt-in): declaration ids from
+// qualified name + signature, body ids from a normalized body hash, node ids
+// scoped to one body. TypeScript/JavaScript only; analyze() does not call it.
+export { STABLE_ID_SCHEME, deriveStableIds, deriveTypeScriptIds, stableIdsSupport, moduleNameFor, assignNodeIds, diffStableIds, deriveJavaIds, eraseJavaType, derivePythonIds, pythonModuleName, deriveGoIds, goPackageDir, detectMoves, bodySimilarity, } from './stable-ids/index.js';
+// Remedy-class tables: reader and digest for caller-supplied
+// `safe-construct-table@0.1` inputs (the library ships no table).
+export { SAFE_CONSTRUCT_TABLE_FORMAT, loadSafeConstructTable, sha256Bytes, sha256Digest, remedyClassOf, TableRefused, htmlContextAt, markupBefore, javaStringLiterals, } from './remedy-class/index.js';
+// Path sets: every source-to-sink path of one CWE, keyed across versions of a
+// tree, and the difference between two versions.
+export { PATH_KEY_SCHEME, pathSetOf, pathSetDiff, diffPathSets, pinFacts, pathKey, declAt, changeOf, normalizeCwe, lineDominates, deriveBranchFacts, sideOf, deriveTemplateFacts, templateEngineOf, expressionNames, handedNames, findingDiff, diffLines, splitLines, } from './path-set/index.js';
 // Language plugins
 export { getLanguageRegistry, registerLanguage, getLanguagePlugin, getLanguageForFile, detectLanguage, isLanguageSupported, registerBuiltinPlugins, JavaPlugin, JavaScriptPlugin, PythonPlugin, RustPlugin, HtmlPlugin, BaseLanguagePlugin, } from './languages/index.js';
 // Logger (dependency injection)

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,gBAAgB;AAChB,OAAO,EACL,YAAY,EACZ,OAAO,EACP,aAAa,EACb,cAAc,EACd,qBAAqB,EACrB,aAAa,GAEd,MAAM,eAAe,CAAC;AAEvB,4EAA4E;AAC5E,OAAO,EACL,oBAAoB,EACpB,wBAAwB,EACxB,qBAAqB,EACrB,0BAA0B,EAC1B,sBAAsB,EACtB,uBAAuB,EACvB,sBAAsB,EACtB,0BAA0B,EAC1B,2BAA2B,EAC3B,mBAAmB,EACnB,mBAAmB,EACnB,WAAW,EACX,MAAM,GACP,MAAM,oBAAoB,CAAC;AA+E5B,sEAAsE;AACtE,6EAA6E;AAC7E,2EAA2E;AAC3E,6EAA6E;AAC7E,8EAA8E;AAC9E,8EAA8E;AAC9E,4EAA4E;AAC5E,qEAAqE;AACrE,OAAO,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAE5D,+EAA+E;AAC/E,yCAAyC;AACzC,OAAO,EACL,eAAe,EACf,aAAa,EACb,WAAW,GAEZ,MAAM,6BAA6B,CAAC;AAYrC,sCAAsC;AACtC,OAAO,EACL,UAAU,EACV,KAAK,EACL,QAAQ,EACR,SAAS,EACT,YAAY,EACZ,WAAW,EACX,eAAe,GAMhB,MAAM,iBAAiB,CAAC;AAEzB,kBAAkB;AAClB,OAAO,EACL,WAAW,EACX,YAAY,EACZ,YAAY,EACZ,cAAc,EACd,cAAc,EACd,QAAQ,EACR,QAAQ,GACT,MAAM,iBAAiB,CAAC;AAEzB,qBAAqB;AACrB,OAAO,EACL,gBAAgB,EAChB,iBAAiB,EACjB,YAAY,EACZ,oBAAoB,EACpB,gBAAgB,EAChB,cAAc,EACd,gBAAgB,EAChB,yBAAyB,EACzB,0BAA0B,EAC1B,gCAAgC,EAChC,0BAA0B,EAC1B,kBAAkB,EAClB,OAAO,EACP,aAAa,EACb,WAAW,EACX,eAAe,EACf,aAAa,EACb,kBAAkB,GAMnB,MAAM,qBAAqB,CAAC;AAE7B,mBAAmB;AACnB,OAAO,EACL,WAAW,EACX,gBAAgB,GAEjB,MAAM,qBAAqB,CAAC;AAE7B,kBAAkB;AAClB,OAAO,EAAE,cAAc,EAAE,MAAM,4BAA4B,CAAC;AAC5D,OAAO,EAAE,kBAAkB,EAAqB,MAAM,iCAAiC,CAAC;AAExF,uBAAuB;AACvB,OAAO,EACL,qBAAqB,EACrB,kBAAkB,EAClB,WAAW,EACX,gBAAgB,EAChB,iBAAiB,EACjB,sBAAsB,GACvB,MAAM,uBAAuB,CAAC;AAE/B,8EAA8E;AAC9E,6EAA6E;AAC7E,+EAA+E;AAC/E,OAAO,EACL,oBAAoB,EACpB,eAAe,GAChB,MAAM,uBAAuB,CAAC;AAiB/B,mBAAmB;AACnB,OAAO,EACL,mBAAmB,EACnB,gBAAgB,EAChB,iBAAiB,EACjB,kBAAkB,EAClB,cAAc,EACd,mBAAmB,EACnB,sBAAsB,EACtB,UAAU,EACV,gBAAgB,EAChB,YAAY,EACZ,UAAU,EACV,UAAU,EACV,kBAAkB,GACnB,MAAM,sBAAsB,CAAC;AAY9B,gCAAgC;AAChC,OAAO,EACL,MAAM,EACN,SAAS,EACT,eAAe,EACf,WAAW,EACX,WAAW,GAIZ,MAAM,mBAAmB,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,gBAAgB;AAChB,OAAO,EACL,YAAY,EACZ,OAAO,EACP,aAAa,EACb,cAAc,EACd,qBAAqB,EACrB,oBAAoB,EACpB,aAAa,GAEd,MAAM,eAAe,CAAC;AAEvB,4EAA4E;AAC5E,OAAO,EACL,oBAAoB,EACpB,wBAAwB,EACxB,yBAAyB,EACzB,yBAAyB,EACzB,iBAAiB,EACjB,qBAAqB,EACrB,0BAA0B,EAC1B,sBAAsB,EACtB,uBAAuB,EACvB,mBAAmB,EACnB,8BAA8B,EAC9B,sBAAsB,EACtB,0BAA0B,EAC1B,2BAA2B,EAC3B,mBAAmB,EACnB,mBAAmB,EACnB,sBAAsB,EACtB,aAAa,EACb,WAAW,EACX,MAAM,GACP,MAAM,oBAAoB,CAAC;AAS5B,mFAAmF;AACnF,OAAO,EAAE,oBAAoB,EAAE,qBAAqB,EAAE,MAAM,6BAA6B,CAAC;AAC1F,OAAO,EAAE,aAAa,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAE1E,OAAO,EAAE,kBAAkB,EAAE,MAAM,8BAA8B,CAAC;AAElE,OAAO,EACL,cAAc,EACd,kBAAkB,EAClB,eAAe,EACf,cAAc,EACd,iBAAiB,EACjB,mBAAmB,EACnB,kBAAkB,EAClB,mBAAmB,GACpB,MAAM,0BAA0B,CAAC;AAyFlC,sEAAsE;AACtE,6EAA6E;AAC7E,2EAA2E;AAC3E,6EAA6E;AAC7E,8EAA8E;AAC9E,8EAA8E;AAC9E,4EAA4E;AAC5E,qEAAqE;AACrE,OAAO,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAE5D,+EAA+E;AAC/E,yCAAyC;AACzC,OAAO,EACL,eAAe,EACf,aAAa,EACb,WAAW,GAEZ,MAAM,6BAA6B,CAAC;AAYrC,sCAAsC;AACtC,OAAO,EACL,UAAU,EACV,KAAK,EACL,QAAQ,EACR,SAAS,EACT,YAAY,EACZ,WAAW,EACX,eAAe,GAMhB,MAAM,iBAAiB,CAAC;AAEzB,kBAAkB;AAClB,OAAO,EACL,WAAW,EACX,YAAY,EACZ,YAAY,EACZ,cAAc,EACd,cAAc,EACd,QAAQ,EACR,QAAQ,GACT,MAAM,iBAAiB,CAAC;AAEzB,qBAAqB;AACrB,OAAO,EACL,gBAAgB,EAChB,iBAAiB,EACjB,YAAY,EACZ,oBAAoB,EACpB,gBAAgB,EAChB,cAAc,EACd,gBAAgB,EAChB,yBAAyB,EACzB,0BAA0B,EAC1B,gCAAgC,EAChC,0BAA0B,EAC1B,kBAAkB,EAClB,OAAO,EACP,aAAa,EACb,WAAW,EACX,eAAe,EACf,aAAa,EACb,kBAAkB,GAMnB,MAAM,qBAAqB,CAAC;AAE7B,mBAAmB;AACnB,OAAO,EACL,WAAW,EACX,gBAAgB,GAEjB,MAAM,qBAAqB,CAAC;AAE7B,kBAAkB;AAClB,OAAO,EAAE,cAAc,EAAE,MAAM,4BAA4B,CAAC;AAC5D,OAAO,EAAE,kBAAkB,EAAqB,MAAM,iCAAiC,CAAC;AAExF,uBAAuB;AACvB,OAAO,EACL,qBAAqB,EACrB,kBAAkB,EAClB,WAAW,EACX,gBAAgB,EAChB,iBAAiB,EACjB,sBAAsB,GACvB,MAAM,uBAAuB,CAAC;AAE/B,8EAA8E;AAC9E,6EAA6E;AAC7E,+EAA+E;AAC/E,OAAO,EACL,oBAAoB,EACpB,eAAe,EACf,gBAAgB,EAChB,oBAAoB,EACpB,oBAAoB,EACpB,oBAAoB,EACpB,cAAc,EACd,iBAAiB,EACjB,yBAAyB,EACzB,gBAAgB,EAChB,mBAAmB,EACnB,YAAY,EACZ,eAAe,GAChB,MAAM,uBAAuB,CAAC;AAgD/B,4EAA4E;AAC5E,OAAO,EAAE,YAAY,EAAE,KAAK,EAAE,gBAAgB,EAAE,QAAQ,EAAE,oBAAoB,EAAE,YAAY,EAAE,gBAAgB,EAAE,kBAAkB,EAAE,uBAAuB,EAAE,eAAe,EAAE,sBAAsB,EAAE,eAAe,EAAE,WAAW,EAAE,aAAa,EAAE,aAAa,EAAE,aAAa,EAAE,MAAM,wBAAwB,CAAC;AA2BhT,2EAA2E;AAC3E,6EAA6E;AAC7E,8EAA8E;AAC9E,OAAO,EACL,gBAAgB,EAChB,eAAe,EACf,mBAAmB,EACnB,gBAAgB,EAChB,aAAa,EACb,aAAa,EACb,aAAa,EACb,aAAa,EACb,aAAa,EACb,eAAe,EACf,gBAAgB,EAChB,WAAW,EACX,YAAY,EACZ,WAAW,EACX,cAAc,GACf,MAAM,uBAAuB,CAAC;AAqB/B,6DAA6D;AAC7D,kEAAkE;AAClE,OAAO,EACL,2BAA2B,EAC3B,sBAAsB,EACtB,WAAW,EACX,YAAY,EACZ,aAAa,EACb,YAAY,EACZ,aAAa,EACb,YAAY,EACZ,kBAAkB,GACnB,MAAM,yBAAyB,CAAC;AA2BjC,8EAA8E;AAC9E,iDAAiD;AACjD,OAAO,EACL,eAAe,EACf,SAAS,EACT,WAAW,EACX,YAAY,EACZ,QAAQ,EACR,OAAO,EACP,MAAM,EACN,QAAQ,EACR,YAAY,EACZ,aAAa,EACb,iBAAiB,EACjB,MAAM,EACN,mBAAmB,EACnB,gBAAgB,EAChB,eAAe,EACf,WAAW,EACX,WAAW,EACX,SAAS,EACT,UAAU,GACX,MAAM,qBAAqB,CAAC;AAkC7B,mBAAmB;AACnB,OAAO,EACL,mBAAmB,EACnB,gBAAgB,EAChB,iBAAiB,EACjB,kBAAkB,EAClB,cAAc,EACd,mBAAmB,EACnB,sBAAsB,EACtB,UAAU,EACV,gBAAgB,EAChB,YAAY,EACZ,UAAU,EACV,UAAU,EACV,kBAAkB,GACnB,MAAM,sBAAsB,CAAC;AAY9B,gCAAgC;AAChC,OAAO,EACL,MAAM,EACN,SAAS,EACT,eAAe,EACf,WAAW,EACX,WAAW,GAIZ,MAAM,mBAAmB,CAAC"}

package/dist/navigation/go-graph.d.ts

@@ -0,0 +1,68 @@
+/**
+ * Go graph facts keyed by stable ids (`go-graph@0.1`): the reach core's
+ * input for Go.
+ *
+ * - **Declarations** from `deriveGoIds` (`ids@0.1`); a package is a directory.
+ * - **Call edges**, resolved from the syntax tree:
+ *   - `exact`: a function of the same package, `pkg.F` through an import of
+ *     a project package, `recv.M` on the method's own receiver, `T.M` method
+ *     expressions, and `T{}` / `&T{}` composite literals (a reference to `T`).
+ *   - `inferred`: `x.M` on a value of unknown type reaches every project
+ *     method named `M`, up to `maxInferred`; beyond it the site is unresolved.
+ *   A target outside the project (the standard library, modules) is an
+ *   unresolved `external` site, never dropped.
+ * - **References**: a project function or method used as a value (a handler
+ *   passed to a router, a callback).
+ * - **Imports**: a file loads the project packages it imports; a package's
+ *   files load each other.
+ * - **Entries** (`entry-index@0.1`): `main` in package `main`, `init`,
+ *   net/http (`HandleFunc`, `Handle`, Go 1.22 method patterns), gin, echo and
+ *   chi routes with group and route prefixes composed, `_test.go` tests,
+ *   benchmarks, examples and fuzz targets, and the exported API of packages
+ *   the caller names as libraries.
+ * - **typeOnly**: interface types.
+ *
+ * Library code: no file access; the caller passes the sources.
+ */
+import type { StableIdFile } from '../stable-ids/types.js';
+import type { CallEdge, ImportEdge, ReferenceEdge, TsEntry, UnresolvedCall, UnresolvedRegistration } from './ts-call-edges.js';
+export declare const GO_GRAPH_SCHEME: 'go-graph@0.1';
+export interface GoSourceFile {
+    /** Repository-relative path, `/`-separated. */
+    path: string;
+    code: string;
+}
+export interface GoGraphOptions {
+    /** The module path from `go.mod` (`example.com/app`); imports under it map to directories. Without it, imports map by directory suffix. */
+    modulePath?: string;
+    /** Package directories whose exported functions, types and methods are `export` entries (a library's API). */
+    libraryPackages?: readonly string[];
+    /** Most `inferred` edges one site may carry; beyond it the site is unresolved. Default 16. */
+    maxInferred?: number;
+}
+export interface GoGraph {
+    scheme: typeof GO_GRAPH_SCHEME;
+    ids: 'ids@0.1';
+    files: StableIdFile[];
+    edges: CallEdge[];
+    unresolved: UnresolvedCall[];
+    references: ReferenceEdge[];
+    imports: ImportEdge[];
+    loads: {
+        from: string;
+        to: string;
+    }[];
+    entryScheme: 'entry-index@0.1';
+    entries: TsEntry[];
+    unresolvedRegistrations: UnresolvedRegistration[];
+    partial: string[];
+    typeOnly: string[];
+    /** Call sites walked; equals the distinct sites over `edges` and `unresolved`. */
+    sites: number;
+}
+/**
+ * Build the Go graph facts for a set of files. Each file is parsed once;
+ * nothing is read from disk.
+ */
+export declare function buildGoGraph(files: readonly GoSourceFile[], options?: GoGraphOptions): Promise<GoGraph>;
+//# sourceMappingURL=go-graph.d.ts.map

package/dist/navigation/go-graph.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"go-graph.d.ts","sourceRoot":"","sources":["../../src/navigation/go-graph.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AAMH,OAAO,KAAK,EAAc,YAAY,EAAE,MAAM,wBAAwB,CAAC;AAEvE,OAAO,KAAK,EACV,QAAQ,EAER,UAAU,EACV,aAAa,EACb,OAAO,EACP,cAAc,EACd,sBAAsB,EACvB,MAAM,oBAAoB,CAAC;AAG5B,eAAO,MAAM,eAAe,EAAG,cAAuB,CAAC;AAEvD,MAAM,WAAW,YAAY;IAC3B,+CAA+C;IAC/C,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;CACd;AAED,MAAM,WAAW,cAAc;IAC7B,2IAA2I;IAC3I,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,8GAA8G;IAC9G,eAAe,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACpC,8FAA8F;IAC9F,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,WAAW,OAAO;IACtB,MAAM,EAAE,OAAO,eAAe,CAAC;IAC/B,GAAG,EAAE,SAAS,CAAC;IACf,KAAK,EAAE,YAAY,EAAE,CAAC;IACtB,KAAK,EAAE,QAAQ,EAAE,CAAC;IAClB,UAAU,EAAE,cAAc,EAAE,CAAC;IAC7B,UAAU,EAAE,aAAa,EAAE,CAAC;IAC5B,OAAO,EAAE,UAAU,EAAE,CAAC;IACtB,KAAK,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,EAAE,EAAE,MAAM,CAAA;KAAE,EAAE,CAAC;IACtC,WAAW,EAAE,iBAAiB,CAAC;IAC/B,OAAO,EAAE,OAAO,EAAE,CAAC;IACnB,uBAAuB,EAAE,sBAAsB,EAAE,CAAC;IAClD,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,kFAAkF;IAClF,KAAK,EAAE,MAAM,CAAC;CACf;AAynBD;;;GAGG;AACH,wBAAsB,YAAY,CAAC,KAAK,EAAE,SAAS,YAAY,EAAE,EAAE,OAAO,GAAE,cAAmB,GAAG,OAAO,CAAC,OAAO,CAAC,CAwCjH"}