cotx-engine 0.1.0

package/dist/core/parser/resolution-context.js

@@ -0,0 +1,136 @@
+/**
+ * Resolution Context
+ *
+ * Single implementation of tiered name resolution. Replaces the duplicated
+ * tier-selection logic previously split between symbol-resolver.ts and
+ * call-processor.ts.
+ *
+ * Resolution tiers (highest confidence first):
+ * 1. Same file (lookupExactFull — authoritative)
+ * 2a-named. Named binding chain (walkBindingChain via NamedImportMap)
+ * 2a. Import-scoped (lookupFuzzy filtered by ImportMap)
+ * 2b. Package-scoped (lookupFuzzy filtered by PackageMap)
+ * 3. Global (all candidates — consumers must check candidate count)
+ */
+import { createSymbolTable } from './symbol-table.js';
+import { isFileInPackageDir } from './import-processor.js';
+import { walkBindingChain } from './named-binding-processor.js';
+/** Confidence scores per resolution tier. */
+export const TIER_CONFIDENCE = {
+    'same-file': 0.95,
+    'import-scoped': 0.9,
+    global: 0.5,
+};
+export const createResolutionContext = () => {
+    const symbols = createSymbolTable();
+    const importMap = new Map();
+    const packageMap = new Map();
+    const namedImportMap = new Map();
+    const moduleAliasMap = new Map();
+    // Per-file cache state
+    let cacheFile = null;
+    let cache = null;
+    let cacheHits = 0;
+    let cacheMisses = 0;
+    // --- Core resolution (single implementation of tier logic) ---
+    const resolveUncached = (name, fromFile) => {
+        // Tier 1: Same file — authoritative match (returns all overloads)
+        const localDefs = symbols.lookupExactAll(fromFile, name);
+        if (localDefs.length > 0) {
+            return { candidates: localDefs, tier: 'same-file' };
+        }
+        // Get all global definitions for subsequent tiers
+        const allDefs = symbols.lookupFuzzy(name);
+        // Tier 2a-named: Check named bindings BEFORE empty-allDefs early return
+        // because aliased imports mean lookupFuzzy('U') returns empty but we
+        // can resolve via the exported name.
+        const chainResult = walkBindingChain(name, fromFile, symbols, namedImportMap, allDefs);
+        if (chainResult && chainResult.length > 0) {
+            return { candidates: chainResult, tier: 'import-scoped' };
+        }
+        if (allDefs.length === 0)
+            return null;
+        // Tier 2a: Import-scoped — definition in a file imported by fromFile
+        const importedFiles = importMap.get(fromFile);
+        if (importedFiles) {
+            const importedDefs = allDefs.filter((def) => importedFiles.has(def.filePath));
+            if (importedDefs.length > 0) {
+                return { candidates: importedDefs, tier: 'import-scoped' };
+            }
+        }
+        // Tier 2b: Package-scoped — definition in a package dir imported by fromFile
+        const importedPackages = packageMap.get(fromFile);
+        if (importedPackages) {
+            const packageDefs = allDefs.filter((def) => {
+                for (const dirSuffix of importedPackages) {
+                    if (isFileInPackageDir(def.filePath, dirSuffix))
+                        return true;
+                }
+                return false;
+            });
+            if (packageDefs.length > 0) {
+                return { candidates: packageDefs, tier: 'import-scoped' };
+            }
+        }
+        // Tier 3: Global — pass all candidates through.
+        // Consumers must check candidate count and refuse ambiguous matches.
+        return { candidates: allDefs, tier: 'global' };
+    };
+    const resolve = (name, fromFile) => {
+        // Check cache (only when enabled AND fromFile matches cached file)
+        if (cache && cacheFile === fromFile) {
+            if (cache.has(name)) {
+                cacheHits++;
+                return cache.get(name);
+            }
+            cacheMisses++;
+        }
+        const result = resolveUncached(name, fromFile);
+        // Store in cache if active and file matches
+        if (cache && cacheFile === fromFile) {
+            cache.set(name, result);
+        }
+        return result;
+    };
+    // --- Cache lifecycle ---
+    const enableCache = (filePath) => {
+        cacheFile = filePath;
+        if (!cache)
+            cache = new Map();
+        else
+            cache.clear();
+    };
+    const clearCache = () => {
+        cacheFile = null;
+        // Reuse the Map instance — just clear entries to reduce GC pressure at scale.
+        cache?.clear();
+    };
+    const getStats = () => ({
+        ...symbols.getStats(),
+        cacheHits,
+        cacheMisses,
+    });
+    const clear = () => {
+        symbols.clear();
+        importMap.clear();
+        packageMap.clear();
+        namedImportMap.clear();
+        moduleAliasMap.clear();
+        clearCache();
+        cacheHits = 0;
+        cacheMisses = 0;
+    };
+    return {
+        resolve,
+        symbols,
+        importMap,
+        packageMap,
+        namedImportMap,
+        moduleAliasMap,
+        enableCache,
+        clearCache,
+        getStats,
+        clear,
+    };
+};
+//# sourceMappingURL=resolution-context.js.map

package/dist/core/parser/resolution-context.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"resolution-context.js","sourceRoot":"","sources":["../../../src/core/parser/resolution-context.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAGH,OAAO,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAC;AAEtD,OAAO,EAAE,kBAAkB,EAAE,MAAM,uBAAuB,CAAC;AAC3D,OAAO,EAAE,gBAAgB,EAAE,MAAM,8BAA8B,CAAC;AAWhE,6CAA6C;AAC7C,MAAM,CAAC,MAAM,eAAe,GAAmC;IAC7D,WAAW,EAAE,IAAI;IACjB,eAAe,EAAE,GAAG;IACpB,MAAM,EAAE,GAAG;CACZ,CAAC;AA2CF,MAAM,CAAC,MAAM,uBAAuB,GAAG,GAAsB,EAAE;IAC7D,MAAM,OAAO,GAAG,iBAAiB,EAAE,CAAC;IACpC,MAAM,SAAS,GAAc,IAAI,GAAG,EAAE,CAAC;IACvC,MAAM,UAAU,GAAe,IAAI,GAAG,EAAE,CAAC;IACzC,MAAM,cAAc,GAAmB,IAAI,GAAG,EAAE,CAAC;IACjD,MAAM,cAAc,GAAmB,IAAI,GAAG,EAAE,CAAC;IAEjD,uBAAuB;IACvB,IAAI,SAAS,GAAkB,IAAI,CAAC;IACpC,IAAI,KAAK,GAAgD,IAAI,CAAC;IAC9D,IAAI,SAAS,GAAG,CAAC,CAAC;IAClB,IAAI,WAAW,GAAG,CAAC,CAAC;IAEpB,gEAAgE;IAEhE,MAAM,eAAe,GAAG,CAAC,IAAY,EAAE,QAAgB,EAA2B,EAAE;QAClF,kEAAkE;QAClE,MAAM,SAAS,GAAG,OAAO,CAAC,cAAc,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;QACzD,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACzB,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC;QACtD,CAAC;QAED,kDAAkD;QAClD,MAAM,OAAO,GAAG,OAAO,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC;QAE1C,wEAAwE;QACxE,qEAAqE;QACrE,qCAAqC;QACrC,MAAM,WAAW,GAAG,gBAAgB,CAAC,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,cAAc,EAAE,OAAO,CAAC,CAAC;QACvF,IAAI,WAAW,IAAI,WAAW,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC1C,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,IAAI,EAAE,eAAe,EAAE,CAAC;QAC5D,CAAC;QAED,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,IAAI,CAAC;QAEtC,qEAAqE;QACrE,MAAM,aAAa,GAAG,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAC9C,IAAI,aAAa,EAAE,CAAC;YAClB,MAAM,YAAY,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,aAAa,CAAC,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC;YAC9E,IAAI,YAAY,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAC5B,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,IAAI,EAAE,eAAe,EAAE,CAAC;YAC7D,CAAC;QACH,CAAC;QAED,6EAA6E;QAC7E,MAAM,gBAAgB,GAAG,UAAU,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAClD,IAAI,gBAAgB,EAAE,CAAC;YACrB,MAAM,WAAW,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE;gBACzC,KAAK,MAAM,SAAS,IAAI,gBAAgB,EAAE,CAAC;oBACzC,IAAI,kBAAkB,CAAC,GAAG,CAAC,QAAQ,EAAE,SAAS,CAAC;wBAAE,OAAO,IAAI,CAAC;gBAC/D,CAAC;gBACD,OAAO,KAAK,CAAC;YACf,CAAC,CAAC,CAAC;YACH,IAAI,WAAW,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAC3B,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,IAAI,EAAE,eAAe,EAAE,CAAC;YAC5D,CAAC;QACH,CAAC;QAED,gDAAgD;QAChD,qEAAqE;QACrE,OAAO,EAAE,UAAU,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;IACjD,CAAC,CAAC;IAEF,MAAM,OAAO,GAAG,CAAC,IAAY,EAAE,QAAgB,EAA2B,EAAE;QAC1E,mEAAmE;QACnE,IAAI,KAAK,IAAI,SAAS,KAAK,QAAQ,EAAE,CAAC;YACpC,IAAI,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;gBACpB,SAAS,EAAE,CAAC;gBACZ,OAAO,KAAK,CAAC,GAAG,CAAC,IAAI,CAAE,CAAC;YAC1B,CAAC;YACD,WAAW,EAAE,CAAC;QAChB,CAAC;QAED,MAAM,MAAM,GAAG,eAAe,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;QAE/C,4CAA4C;QAC5C,IAAI,KAAK,IAAI,SAAS,KAAK,QAAQ,EAAE,CAAC;YACpC,KAAK,CAAC,GAAG,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QAC1B,CAAC;QAED,OAAO,MAAM,CAAC;IAChB,CAAC,CAAC;IAEF,0BAA0B;IAE1B,MAAM,WAAW,GAAG,CAAC,QAAgB,EAAQ,EAAE;QAC7C,SAAS,GAAG,QAAQ,CAAC;QACrB,IAAI,CAAC,KAAK;YAAE,KAAK,GAAG,IAAI,GAAG,EAAE,CAAC;;YACzB,KAAK,CAAC,KAAK,EAAE,CAAC;IACrB,CAAC,CAAC;IAEF,MAAM,UAAU,GAAG,GAAS,EAAE;QAC5B,SAAS,GAAG,IAAI,CAAC;QACjB,8EAA8E;QAC9E,KAAK,EAAE,KAAK,EAAE,CAAC;IACjB,CAAC,CAAC;IAEF,MAAM,QAAQ,GAAG,GAAG,EAAE,CAAC,CAAC;QACtB,GAAG,OAAO,CAAC,QAAQ,EAAE;QACrB,SAAS;QACT,WAAW;KACZ,CAAC,CAAC;IAEH,MAAM,KAAK,GAAG,GAAS,EAAE;QACvB,OAAO,CAAC,KAAK,EAAE,CAAC;QAChB,SAAS,CAAC,KAAK,EAAE,CAAC;QAClB,UAAU,CAAC,KAAK,EAAE,CAAC;QACnB,cAAc,CAAC,KAAK,EAAE,CAAC;QACvB,cAAc,CAAC,KAAK,EAAE,CAAC;QACvB,UAAU,EAAE,CAAC;QACb,SAAS,GAAG,CAAC,CAAC;QACd,WAAW,GAAG,CAAC,CAAC;IAClB,CAAC,CAAC;IAEF,OAAO;QACL,OAAO;QACP,OAAO;QACP,SAAS;QACT,UAAU;QACV,cAAc;QACd,cAAc;QACd,WAAW;QACX,UAAU;QACV,QAAQ;QACR,KAAK;KACN,CAAC;AACJ,CAAC,CAAC"}

package/dist/core/parser/route-extractors/expo.d.ts

@@ -0,0 +1 @@
+export declare function expoFileToRouteURL(filePath: string): string | null;

package/dist/core/parser/route-extractors/expo.js

@@ -0,0 +1,37 @@
+// Expo Router route extraction utilities.
+export function expoFileToRouteURL(filePath) {
+    const normalized = filePath.replace(/\\/g, '/');
+    // Skip TypeScript declaration files
+    if (/\.d\.tsx?$/.test(normalized))
+        return null;
+    // Must be inside an app/ directory
+    const appMatch = normalized.match(/app\/(.+)\.(tsx?|jsx?)$/);
+    if (!appMatch)
+        return null;
+    const segments = appMatch[1];
+    const fileName = segments.split('/').pop() || '';
+    // Skip layout files (_layout.tsx)
+    if (fileName.startsWith('_'))
+        return null;
+    // Skip special Expo files (+not-found.tsx, +html.tsx) — but NOT +api files
+    if (fileName.startsWith('+') && !fileName.startsWith('+api'))
+        return null;
+    // Handle Expo API routes: users+api.ts → /users
+    if (fileName.endsWith('+api')) {
+        const apiSegments = segments.replace(/\+api$/, '');
+        const route = '/' + stripRouteGroups(apiSegments);
+        return stripIndex(route);
+    }
+    // Regular screen route
+    const route = '/' + stripRouteGroups(segments);
+    return stripIndex(route);
+}
+function stripRouteGroups(path) {
+    return path.replace(/\([^)]+\)\/?/g, '');
+}
+function stripIndex(route) {
+    if (route === '/index')
+        return '/';
+    return route.replace(/\/index$/, '') || '/';
+}
+//# sourceMappingURL=expo.js.map

package/dist/core/parser/route-extractors/expo.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"expo.js","sourceRoot":"","sources":["../../../../src/core/parser/route-extractors/expo.ts"],"names":[],"mappings":"AAAA,0CAA0C;AAE1C,MAAM,UAAU,kBAAkB,CAAC,QAAgB;IACjD,MAAM,UAAU,GAAG,QAAQ,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;IAEhD,oCAAoC;IACpC,IAAI,YAAY,CAAC,IAAI,CAAC,UAAU,CAAC;QAAE,OAAO,IAAI,CAAC;IAE/C,mCAAmC;IACnC,MAAM,QAAQ,GAAG,UAAU,CAAC,KAAK,CAAC,yBAAyB,CAAC,CAAC;IAC7D,IAAI,CAAC,QAAQ;QAAE,OAAO,IAAI,CAAC;IAE3B,MAAM,QAAQ,GAAG,QAAQ,CAAC,CAAC,CAAC,CAAC;IAC7B,MAAM,QAAQ,GAAG,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,IAAI,EAAE,CAAC;IAEjD,kCAAkC;IAClC,IAAI,QAAQ,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IAE1C,2EAA2E;IAC3E,IAAI,QAAQ,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,MAAM,CAAC;QAAE,OAAO,IAAI,CAAC;IAE1E,gDAAgD;IAChD,IAAI,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;QAC9B,MAAM,WAAW,GAAG,QAAQ,CAAC,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;QACnD,MAAM,KAAK,GAAG,GAAG,GAAG,gBAAgB,CAAC,WAAW,CAAC,CAAC;QAClD,OAAO,UAAU,CAAC,KAAK,CAAC,CAAC;IAC3B,CAAC;IAED,uBAAuB;IACvB,MAAM,KAAK,GAAG,GAAG,GAAG,gBAAgB,CAAC,QAAQ,CAAC,CAAC;IAC/C,OAAO,UAAU,CAAC,KAAK,CAAC,CAAC;AAC3B,CAAC;AAED,SAAS,gBAAgB,CAAC,IAAY;IACpC,OAAO,IAAI,CAAC,OAAO,CAAC,eAAe,EAAE,EAAE,CAAC,CAAC;AAC3C,CAAC;AAED,SAAS,UAAU,CAAC,KAAa;IAC/B,IAAI,KAAK,KAAK,QAAQ;QAAE,OAAO,GAAG,CAAC;IACnC,OAAO,KAAK,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,IAAI,GAAG,CAAC;AAC9C,CAAC"}

package/dist/core/parser/route-extractors/middleware.d.ts

@@ -0,0 +1,47 @@
+/**
+ * Middleware chain extraction from route handler file content.
+ * Detects wrapper patterns like: export const POST = withA(withB(withC(handler)))
+ */
+/** Keywords that terminate middleware chain walking (not wrapper function names) */
+export declare const MIDDLEWARE_STOP_KEYWORDS: Set<string>;
+/**
+ * Extract middleware wrapper chain from a route handler file.
+ * Detects patterns like: export const POST = withA(withB(withC(handler)))
+ * Returns an object with the wrapper function names (outermost-first) and the
+ * HTTP method they were captured from, or undefined if no chain found.
+ */
+export declare function extractMiddlewareChain(content: string): {
+    chain: string[];
+    method: string;
+} | undefined;
+export interface NextjsMiddlewareConfig {
+    matchers: string[];
+    exportedName: string;
+    wrappedFunctions: string[];
+}
+/**
+ * Parse a Next.js project-level middleware.ts file and extract:
+ * - config.matcher patterns (string or string[])
+ * - the exported middleware function name
+ * - wrapper composition (e.g. chain([withAuth, withI18n]))
+ */
+export declare function extractNextjsMiddlewareConfig(content: string): NextjsMiddlewareConfig | undefined;
+/** Pre-compiled matcher for efficient per-route testing. */
+export type CompiledMatcher = {
+    type: 'prefix';
+    prefix: string;
+} | {
+    type: 'regex';
+    re: RegExp;
+} | {
+    type: 'exact';
+    value: string;
+};
+/**
+ * Compile a Next.js middleware matcher pattern into a reusable matcher.
+ * Call once per pattern, then use compiledMatcherMatchesRoute per route.
+ */
+export declare function compileMatcher(matcher: string): CompiledMatcher | null;
+/** Test a route URL against a pre-compiled matcher. */
+export declare function compiledMatcherMatchesRoute(cm: CompiledMatcher, routeURL: string): boolean;
+export declare function middlewareMatcherMatchesRoute(matcher: string, routeURL: string): boolean;

package/dist/core/parser/route-extractors/middleware.js

@@ -0,0 +1,168 @@
+/**
+ * Middleware chain extraction from route handler file content.
+ * Detects wrapper patterns like: export const POST = withA(withB(withC(handler)))
+ */
+/** Keywords that terminate middleware chain walking (not wrapper function names) */
+/** Names that are composition wrappers, not middleware functions themselves. */
+const COMPOSER_NAMES = new Set(['middleware', 'default', 'chain', 'compose']);
+/** Keywords that terminate middleware chain walking (not wrapper function names) */
+export const MIDDLEWARE_STOP_KEYWORDS = new Set([
+    'async',
+    'await',
+    'function',
+    'new',
+    'return',
+    'if',
+    'for',
+    'while',
+    'switch',
+    'class',
+    'const',
+    'let',
+    'var',
+    'req',
+    'res',
+    'request',
+    'response',
+    'event',
+    'ctx',
+    'context',
+    'next',
+]);
+/** Walk nested wrapper calls starting at `pos` in `content`, returning function names. */
+function walkNestedWrappers(content, pos) {
+    const names = [];
+    const nestedRe = /^\s*(\w+)\s*\(/;
+    let remaining = content.slice(pos);
+    let nested;
+    while ((nested = nestedRe.exec(remaining)) !== null) {
+        if (MIDDLEWARE_STOP_KEYWORDS.has(nested[1]))
+            break;
+        names.push(nested[1]);
+        pos += nested[0].length;
+        remaining = content.slice(pos);
+    }
+    return names;
+}
+/**
+ * Extract middleware wrapper chain from a route handler file.
+ * Detects patterns like: export const POST = withA(withB(withC(handler)))
+ * Returns an object with the wrapper function names (outermost-first) and the
+ * HTTP method they were captured from, or undefined if no chain found.
+ */
+export function extractMiddlewareChain(content) {
+    const mwPattern = /export\s+(?:const\s+(POST|GET|PUT|DELETE|PATCH|HEAD|OPTIONS)\s*=|default)\s+(\w+)\s*\(/g;
+    let mwMatch;
+    while ((mwMatch = mwPattern.exec(content)) !== null) {
+        const method = mwMatch[1] ?? 'default';
+        const firstWrapper = mwMatch[2];
+        const chain = [firstWrapper];
+        chain.push(...walkNestedWrappers(content, mwMatch.index + mwMatch[0].length));
+        if (chain.length >= 2 || (chain.length === 1 && /^with[A-Z]/.test(chain[0]))) {
+            return { chain, method };
+        }
+    }
+    return undefined;
+}
+/**
+ * Parse a Next.js project-level middleware.ts file and extract:
+ * - config.matcher patterns (string or string[])
+ * - the exported middleware function name
+ * - wrapper composition (e.g. chain([withAuth, withI18n]))
+ */
+export function extractNextjsMiddlewareConfig(content) {
+    const matchers = [];
+    const matcherArrayRe = /config\s*=\s*\{[^}]*matcher\s*:\s*\[([^\]]*)\]/s;
+    const matcherStringRe = /config\s*=\s*\{[^}]*matcher\s*:\s*(['"`])([^'"`]+)\1/s;
+    const arrMatch = matcherArrayRe.exec(content);
+    if (arrMatch) {
+        const items = arrMatch[1];
+        const strRe = /(['"`])((?:[^'"`\\\\]|\\\\.)*)\1/g;
+        let m;
+        while ((m = strRe.exec(items)) !== null) {
+            matchers.push(m[2]);
+        }
+    }
+    else {
+        const strMatch = matcherStringRe.exec(content);
+        if (strMatch) {
+            matchers.push(strMatch[2]);
+        }
+    }
+    let exportedName = 'middleware';
+    const isNamedMw = /export\s+(?:async\s+)?function\s+middleware\b/.test(content);
+    const isConstMw = /export\s+const\s+middleware\s*=/.test(content);
+    const defaultFunctionMatch = /export\s+default\s+(?:async\s+)?function(?:\s+(\w+))?/.exec(content);
+    const defaultIdentifierMatch = /export\s+default\s+(?!function\b)(\w+)/.exec(content);
+    if (!isNamedMw && !isConstMw) {
+        if (defaultFunctionMatch) {
+            exportedName = defaultFunctionMatch[1] ?? 'middleware';
+        }
+        else if (defaultIdentifierMatch) {
+            exportedName = defaultIdentifierMatch[1];
+        }
+    }
+    // --- wrapper composition ---
+    const wrappedFunctions = [];
+    // Pattern: chain([fn1, fn2]) or compose(fn1, fn2)
+    const chainRe = /(?:chain|compose)\s*\(\s*\[([^\]]+)\]/;
+    const chainMatch = chainRe.exec(content);
+    if (chainMatch) {
+        const fns = chainMatch[1]
+            .split(',')
+            .map((s) => s.trim())
+            .filter(Boolean);
+        wrappedFunctions.push(...fns);
+    }
+    // Pattern: export default withA(withB(handler))
+    const wrapperRe = /export\s+default\s+(\w+)\s*\(/;
+    const wrapperMatch = wrapperRe.exec(content);
+    if (wrapperMatch && wrappedFunctions.length === 0) {
+        const name = wrapperMatch[1];
+        if (name !== 'function' && name !== 'async') {
+            wrappedFunctions.push(name);
+            wrappedFunctions.push(...walkNestedWrappers(content, wrapperMatch.index + wrapperMatch[0].length));
+        }
+    }
+    if (!COMPOSER_NAMES.has(exportedName) && !wrappedFunctions.includes(exportedName)) {
+        wrappedFunctions.unshift(exportedName);
+    }
+    const hasExport = isNamedMw || isConstMw || !!defaultFunctionMatch || !!defaultIdentifierMatch;
+    if (!hasExport && matchers.length === 0 && wrappedFunctions.length === 0)
+        return undefined;
+    return { matchers, exportedName, wrappedFunctions };
+}
+/**
+ * Compile a Next.js middleware matcher pattern into a reusable matcher.
+ * Call once per pattern, then use compiledMatcherMatchesRoute per route.
+ */
+export function compileMatcher(matcher) {
+    const paramWild = matcher.replace(/\/:path\*$/, '');
+    if (paramWild !== matcher)
+        return { type: 'prefix', prefix: paramWild };
+    if (matcher.includes('(')) {
+        try {
+            return { type: 'regex', re: new RegExp('^' + matcher + '$') };
+        }
+        catch {
+            return null;
+        }
+    }
+    return { type: 'exact', value: matcher };
+}
+/** Test a route URL against a pre-compiled matcher. */
+export function compiledMatcherMatchesRoute(cm, routeURL) {
+    switch (cm.type) {
+        case 'prefix':
+            return routeURL === cm.prefix || routeURL.startsWith(cm.prefix + '/');
+        case 'regex':
+            return cm.re.test(routeURL);
+        case 'exact':
+            return routeURL === cm.value;
+    }
+}
+export function middlewareMatcherMatchesRoute(matcher, routeURL) {
+    const cm = compileMatcher(matcher);
+    return cm ? compiledMatcherMatchesRoute(cm, routeURL) : false;
+}
+//# sourceMappingURL=middleware.js.map

package/dist/core/parser/route-extractors/middleware.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"middleware.js","sourceRoot":"","sources":["../../../../src/core/parser/route-extractors/middleware.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,oFAAoF;AACpF,gFAAgF;AAChF,MAAM,cAAc,GAAG,IAAI,GAAG,CAAC,CAAC,YAAY,EAAE,SAAS,EAAE,OAAO,EAAE,SAAS,CAAC,CAAC,CAAC;AAE9E,oFAAoF;AACpF,MAAM,CAAC,MAAM,wBAAwB,GAAG,IAAI,GAAG,CAAC;IAC9C,OAAO;IACP,OAAO;IACP,UAAU;IACV,KAAK;IACL,QAAQ;IACR,IAAI;IACJ,KAAK;IACL,OAAO;IACP,QAAQ;IACR,OAAO;IACP,OAAO;IACP,KAAK;IACL,KAAK;IACL,KAAK;IACL,KAAK;IACL,SAAS;IACT,UAAU;IACV,OAAO;IACP,KAAK;IACL,SAAS;IACT,MAAM;CACP,CAAC,CAAC;AAEH,0FAA0F;AAC1F,SAAS,kBAAkB,CAAC,OAAe,EAAE,GAAW;IACtD,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,MAAM,QAAQ,GAAG,gBAAgB,CAAC;IAClC,IAAI,SAAS,GAAG,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACnC,IAAI,MAAM,CAAC;IACX,OAAO,CAAC,MAAM,GAAG,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;QACpD,IAAI,wBAAwB,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;YAAE,MAAM;QACnD,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;QACtB,GAAG,IAAI,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;QACxB,SAAS,GAAG,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACjC,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,sBAAsB,CACpC,OAAe;IAEf,MAAM,SAAS,GACb,yFAAyF,CAAC;IAC5F,IAAI,OAAO,CAAC;IACZ,OAAO,CAAC,OAAO,GAAG,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;QACpD,MAAM,MAAM,GAAG,OAAO,CAAC,CAAC,CAAC,IAAI,SAAS,CAAC;QACvC,MAAM,YAAY,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;QAChC,MAAM,KAAK,GAAa,CAAC,YAAY,CAAC,CAAC;QACvC,KAAK,CAAC,IAAI,CAAC,GAAG,kBAAkB,CAAC,OAAO,EAAE,OAAO,CAAC,KAAK,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC;QAC9E,IAAI,KAAK,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YAC7E,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC;QAC3B,CAAC;IACH,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAYD;;;;;GAKG;AACH,MAAM,UAAU,6BAA6B,CAAC,OAAe;IAC3D,MAAM,QAAQ,GAAa,EAAE,CAAC;IAC9B,MAAM,cAAc,GAAG,iDAAiD,CAAC;IACzE,MAAM,eAAe,GAAG,uDAAuD,CAAC;IAChF,MAAM,QAAQ,GAAG,cAAc,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAC9C,IAAI,QAAQ,EAAE,CAAC;QACb,MAAM,KAAK,GAAG,QAAQ,CAAC,CAAC,CAAC,CAAC;QAC1B,MAAM,KAAK,GAAG,mCAAmC,CAAC;QAClD,IAAI,CAAC,CAAC;QACN,OAAO,CAAC,CAAC,GAAG,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;YACxC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACtB,CAAC;IACH,CAAC;SAAM,CAAC;QACN,MAAM,QAAQ,GAAG,eAAe,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAC/C,IAAI,QAAQ,EAAE,CAAC;YACb,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;QAC7B,CAAC;IACH,CAAC;IAED,IAAI,YAAY,GAAG,YAAY,CAAC;IAChC,MAAM,SAAS,GAAG,+CAA+C,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAChF,MAAM,SAAS,GAAG,iCAAiC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAClE,MAAM,oBAAoB,GAAG,uDAAuD,CAAC,IAAI,CACvF,OAAO,CACR,CAAC;IACF,MAAM,sBAAsB,GAAG,wCAAwC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAEtF,IAAI,CAAC,SAAS,IAAI,CAAC,SAAS,EAAE,CAAC;QAC7B,IAAI,oBAAoB,EAAE,CAAC;YACzB,YAAY,GAAG,oBAAoB,CAAC,CAAC,CAAC,IAAI,YAAY,CAAC;QACzD,CAAC;aAAM,IAAI,sBAAsB,EAAE,CAAC;YAClC,YAAY,GAAG,sBAAsB,CAAC,CAAC,CAAC,CAAC;QAC3C,CAAC;IACH,CAAC;IAED,8BAA8B;IAC9B,MAAM,gBAAgB,GAAa,EAAE,CAAC;IACtC,kDAAkD;IAClD,MAAM,OAAO,GAAG,uCAAuC,CAAC;IACxD,MAAM,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACzC,IAAI,UAAU,EAAE,CAAC;QACf,MAAM,GAAG,GAAG,UAAU,CAAC,CAAC,CAAC;aACtB,KAAK,CAAC,GAAG,CAAC;aACV,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;aACpB,MAAM,CAAC,OAAO,CAAC,CAAC;QACnB,gBAAgB,CAAC,IAAI,CAAC,GAAG,GAAG,CAAC,CAAC;IAChC,CAAC;IACD,gDAAgD;IAChD,MAAM,SAAS,GAAG,+BAA+B,CAAC;IAClD,MAAM,YAAY,GAAG,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAC7C,IAAI,YAAY,IAAI,gBAAgB,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAClD,MAAM,IAAI,GAAG,YAAY,CAAC,CAAC,CAAC,CAAC;QAC7B,IAAI,IAAI,KAAK,UAAU,IAAI,IAAI,KAAK,OAAO,EAAE,CAAC;YAC5C,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAC5B,gBAAgB,CAAC,IAAI,CACnB,GAAG,kBAAkB,CAAC,OAAO,EAAE,YAAY,CAAC,KAAK,GAAG,YAAY,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAC5E,CAAC;QACJ,CAAC;IACH,CAAC;IAED,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,YAAY,CAAC,IAAI,CAAC,gBAAgB,CAAC,QAAQ,CAAC,YAAY,CAAC,EAAE,CAAC;QAClF,gBAAgB,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;IACzC,CAAC;IAED,MAAM,SAAS,GAAG,SAAS,IAAI,SAAS,IAAI,CAAC,CAAC,oBAAoB,IAAI,CAAC,CAAC,sBAAsB,CAAC;IAC/F,IAAI,CAAC,SAAS,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,IAAI,gBAAgB,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,SAAS,CAAC;IAE3F,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE,gBAAgB,EAAE,CAAC;AACtD,CAAC;AAQD;;;GAGG;AACH,MAAM,UAAU,cAAc,CAAC,OAAe;IAC5C,MAAM,SAAS,GAAG,OAAO,CAAC,OAAO,CAAC,YAAY,EAAE,EAAE,CAAC,CAAC;IACpD,IAAI,SAAS,KAAK,OAAO;QAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;IACxE,IAAI,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;QAC1B,IAAI,CAAC;YACH,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,EAAE,IAAI,MAAM,CAAC,GAAG,GAAG,OAAO,GAAG,GAAG,CAAC,EAAE,CAAC;QAChE,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC;AAC3C,CAAC;AAED,uDAAuD;AACvD,MAAM,UAAU,2BAA2B,CAAC,EAAmB,EAAE,QAAgB;IAC/E,QAAQ,EAAE,CAAC,IAAI,EAAE,CAAC;QAChB,KAAK,QAAQ;YACX,OAAO,QAAQ,KAAK,EAAE,CAAC,MAAM,IAAI,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC,MAAM,GAAG,GAAG,CAAC,CAAC;QACxE,KAAK,OAAO;YACV,OAAO,EAAE,CAAC,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAC9B,KAAK,OAAO;YACV,OAAO,QAAQ,KAAK,EAAE,CAAC,KAAK,CAAC;IACjC,CAAC;AACH,CAAC;AAED,MAAM,UAAU,6BAA6B,CAAC,OAAe,EAAE,QAAgB;IAC7E,MAAM,EAAE,GAAG,cAAc,CAAC,OAAO,CAAC,CAAC;IACnC,OAAO,EAAE,CAAC,CAAC,CAAC,2BAA2B,CAAC,EAAE,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;AAChE,CAAC"}

package/dist/core/parser/route-extractors/nextjs.d.ts

@@ -0,0 +1,3 @@
+export declare function nextjsFileToRouteURL(filePath: string): string | null;
+export declare function normalizeFetchURL(rawURL: string): string | null;
+export declare function routeMatches(fetchURL: string, routeURL: string): boolean;

package/dist/core/parser/route-extractors/nextjs.js

@@ -0,0 +1,77 @@
+// Next.js route extraction utilities.
+//
+// Converts file paths to route URLs, extracts HTTP methods from App Router
+// route handlers, normalises fetch URLs, and matches fetch calls to routes.
+// Convert a Next.js file path to its API route URL.
+// Supports both App Router (app/**/route.ts) and Pages Router
+// (pages/api/**/*.ts) conventions.
+// Returns the route URL (e.g. /api/grants) or null if the path is not a
+// recognised route handler.
+export function nextjsFileToRouteURL(filePath) {
+    const normalized = filePath.replace(/\\/g, '/');
+    // App Router: app/**/api/**/route.ts (restrict to API routes to avoid noise
+    // from page-level route handlers that fetch() calls won't match anyway).
+    // Route groups like (admin) may appear before api/.
+    const appMatch = normalized.match(/app\/(.+?)\/route\.(ts|js|tsx|jsx)$/);
+    if (appMatch) {
+        // Strip route groups: (admin), (marketing) etc. are not URL segments
+        const stripped = appMatch[1].replace(/\([^)]+\)\/?/g, '');
+        // Only match if the path contains an api/ segment
+        if (!stripped.startsWith('api/') && stripped !== 'api')
+            return null;
+        return '/' + stripped;
+    }
+    // Pages Router: pages/api/**/*.ts
+    const pagesMatch = normalized.match(/pages\/(api\/.+?)\.(ts|js|tsx|jsx)$/);
+    if (pagesMatch) {
+        let route = '/' + pagesMatch[1];
+        route = route.replace(/\/index$/, '');
+        return route;
+    }
+    return null;
+}
+// Normalise a fetch URL so it can be matched against route patterns.
+// - Strips query strings (?page=1)
+// - Replaces template-literal expressions (${slug}) with [param]
+// - Returns null for URLs that cannot be statically resolved (string
+//   concatenation, function calls, non-API paths).
+export function normalizeFetchURL(rawURL) {
+    let url = rawURL.split('?')[0];
+    url = url.replace(/\$\{[^}]+\}/g, '[param]');
+    url = url.replace(/^`|`$/g, '');
+    // Strip file extensions from URLs (PHP projects use /api/upload.php but routes are /api/upload)
+    url = url.replace(/\.(php|asp|aspx|jsp|cgi)$/, '');
+    if (url.includes('+') || url.includes('('))
+        return null;
+    // Must be an absolute path
+    if (!url.startsWith('/'))
+        return null;
+    return url;
+}
+// Check whether a (normalised) fetch URL matches a Next.js route pattern.
+// Dynamic segments on either side (e.g. [param], [slug]) are treated as
+// wildcards that match any single path segment.
+export function routeMatches(fetchURL, routeURL) {
+    const fetchParts = fetchURL.split('/').filter(Boolean);
+    const routeParts = routeURL.split('/').filter(Boolean);
+    // Check for catch-all route: [...param] or optional catch-all [[...param]]
+    const lastRoutePart = routeParts[routeParts.length - 1];
+    if (lastRoutePart?.startsWith('[...') || lastRoutePart?.startsWith('[[...')) {
+        // Catch-all: match if fetch has at least as many segments as route (minus catch-all)
+        if (fetchParts.length < routeParts.length - 1)
+            return false;
+        return routeParts.slice(0, -1).every((part, i) => {
+            if (part.startsWith('[') || fetchParts[i].startsWith('['))
+                return true;
+            return part === fetchParts[i];
+        });
+    }
+    if (fetchParts.length !== routeParts.length)
+        return false;
+    return fetchParts.every((part, i) => {
+        if (part.startsWith('[') || routeParts[i].startsWith('['))
+            return true;
+        return part === routeParts[i];
+    });
+}
+//# sourceMappingURL=nextjs.js.map

package/dist/core/parser/route-extractors/nextjs.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"nextjs.js","sourceRoot":"","sources":["../../../../src/core/parser/route-extractors/nextjs.ts"],"names":[],"mappings":"AAAA,sCAAsC;AACtC,EAAE;AACF,2EAA2E;AAC3E,4EAA4E;AAE5E,oDAAoD;AACpD,8DAA8D;AAC9D,mCAAmC;AACnC,wEAAwE;AACxE,4BAA4B;AAC5B,MAAM,UAAU,oBAAoB,CAAC,QAAgB;IACnD,MAAM,UAAU,GAAG,QAAQ,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;IAEhD,4EAA4E;IAC5E,yEAAyE;IACzE,oDAAoD;IACpD,MAAM,QAAQ,GAAG,UAAU,CAAC,KAAK,CAAC,qCAAqC,CAAC,CAAC;IACzE,IAAI,QAAQ,EAAE,CAAC;QACb,qEAAqE;QACrE,MAAM,QAAQ,GAAG,QAAQ,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,eAAe,EAAE,EAAE,CAAC,CAAC;QAC1D,kDAAkD;QAClD,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,MAAM,CAAC,IAAI,QAAQ,KAAK,KAAK;YAAE,OAAO,IAAI,CAAC;QACpE,OAAO,GAAG,GAAG,QAAQ,CAAC;IACxB,CAAC;IAED,kCAAkC;IAClC,MAAM,UAAU,GAAG,UAAU,CAAC,KAAK,CAAC,qCAAqC,CAAC,CAAC;IAC3E,IAAI,UAAU,EAAE,CAAC;QACf,IAAI,KAAK,GAAG,GAAG,GAAG,UAAU,CAAC,CAAC,CAAC,CAAC;QAChC,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;QACtC,OAAO,KAAK,CAAC;IACf,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC;AAED,qEAAqE;AACrE,mCAAmC;AACnC,iEAAiE;AACjE,qEAAqE;AACrE,mDAAmD;AACnD,MAAM,UAAU,iBAAiB,CAAC,MAAc;IAC9C,IAAI,GAAG,GAAG,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;IAC/B,GAAG,GAAG,GAAG,CAAC,OAAO,CAAC,cAAc,EAAE,SAAS,CAAC,CAAC;IAC7C,GAAG,GAAG,GAAG,CAAC,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;IAChC,gGAAgG;IAChG,GAAG,GAAG,GAAG,CAAC,OAAO,CAAC,2BAA2B,EAAE,EAAE,CAAC,CAAC;IAEnD,IAAI,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IACxD,2BAA2B;IAC3B,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IAEtC,OAAO,GAAG,CAAC;AACb,CAAC;AAED,0EAA0E;AAC1E,wEAAwE;AACxE,gDAAgD;AAChD,MAAM,UAAU,YAAY,CAAC,QAAgB,EAAE,QAAgB;IAC7D,MAAM,UAAU,GAAG,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IACvD,MAAM,UAAU,GAAG,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IAEvD,2EAA2E;IAC3E,MAAM,aAAa,GAAG,UAAU,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IACxD,IAAI,aAAa,EAAE,UAAU,CAAC,MAAM,CAAC,IAAI,aAAa,EAAE,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;QAC5E,qFAAqF;QACrF,IAAI,UAAU,CAAC,MAAM,GAAG,UAAU,CAAC,MAAM,GAAG,CAAC;YAAE,OAAO,KAAK,CAAC;QAC5D,OAAO,UAAU,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,CAAC,EAAE,EAAE;YAC/C,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,UAAU,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC;gBAAE,OAAO,IAAI,CAAC;YACvE,OAAO,IAAI,KAAK,UAAU,CAAC,CAAC,CAAC,CAAC;QAChC,CAAC,CAAC,CAAC;IACL,CAAC;IAED,IAAI,UAAU,CAAC,MAAM,KAAK,UAAU,CAAC,MAAM;QAAE,OAAO,KAAK,CAAC;IAE1D,OAAO,UAAU,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,CAAC,EAAE,EAAE;QAClC,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,UAAU,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC;YAAE,OAAO,IAAI,CAAC;QACvE,OAAO,IAAI,KAAK,UAAU,CAAC,CAAC,CAAC,CAAC;IAChC,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/core/parser/route-extractors/php.d.ts

@@ -0,0 +1,7 @@
+/**
+ * Convert a PHP file path to its route URL.
+ * Handles direct file-based routing (no framework).
+ * api/upload.php → /api/upload
+ * api/next_sign.php → /api/next_sign
+ */
+export declare function phpFileToRouteURL(filePath: string): string | null;

package/dist/core/parser/route-extractors/php.js

@@ -0,0 +1,23 @@
+/**
+ * Convert a PHP file path to its route URL.
+ * Handles direct file-based routing (no framework).
+ * api/upload.php → /api/upload
+ * api/next_sign.php → /api/next_sign
+ */
+export function phpFileToRouteURL(filePath) {
+    const normalized = filePath.replace(/\\/g, '/');
+    // Only match files in api/ directory
+    const apiMatch = normalized.match(/^(api\/.+?)\.php$/);
+    if (apiMatch) {
+        const fileName = normalized.split('/').pop().replace('.php', '');
+        // Skip non-handler files — use word-boundary matching to avoid false negatives
+        // on names like "contest", "attestation", "base64_encode"
+        if (fileName.startsWith('_') ||
+            /(?:^|_)(helper|config|test|fixture|mock|setup|bootstrap)(?:_|$)/.test(fileName)) {
+            return null;
+        }
+        return '/' + apiMatch[1];
+    }
+    return null;
+}
+//# sourceMappingURL=php.js.map

package/dist/core/parser/route-extractors/php.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"php.js","sourceRoot":"","sources":["../../../../src/core/parser/route-extractors/php.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,MAAM,UAAU,iBAAiB,CAAC,QAAgB;IAChD,MAAM,UAAU,GAAG,QAAQ,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;IAEhD,qCAAqC;IACrC,MAAM,QAAQ,GAAG,UAAU,CAAC,KAAK,CAAC,mBAAmB,CAAC,CAAC;IACvD,IAAI,QAAQ,EAAE,CAAC;QACb,MAAM,QAAQ,GAAG,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,EAAG,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;QAClE,+EAA+E;QAC/E,0DAA0D;QAC1D,IACE,QAAQ,CAAC,UAAU,CAAC,GAAG,CAAC;YACxB,iEAAiE,CAAC,IAAI,CAAC,QAAQ,CAAC,EAChF,CAAC;YACD,OAAO,IAAI,CAAC;QACd,CAAC;QACD,OAAO,GAAG,GAAG,QAAQ,CAAC,CAAC,CAAC,CAAC;IAC3B,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC"}

package/dist/core/parser/route-extractors/response-shapes.d.ts

@@ -0,0 +1,20 @@
+/**
+ * Response shape extraction from route handler file content.
+ * Detects .json() calls (JS/TS) and json_encode() calls (PHP),
+ * extracts top-level keys, and classifies by HTTP status code.
+ */
+/**
+ * Detect an HTTP status code associated with a .json() call.
+ */
+export declare function detectStatusCode(content: string, jsonMatchPos: number, closingBracePos: number): number | undefined;
+/**
+ * Extract response shapes from JS/TS handler file content.
+ */
+export declare function extractResponseShapes(content: string): {
+    responseKeys?: string[];
+    errorKeys?: string[];
+};
+export declare function extractPHPResponseShapes(content: string): {
+    responseKeys?: string[];
+    errorKeys?: string[];
+};