driftdetect-core 0.4.0 → 0.4.2
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/dist/boundaries/boundary-scanner.d.ts +76 -0
- package/dist/boundaries/boundary-scanner.d.ts.map +1 -0
- package/dist/boundaries/boundary-scanner.js +801 -0
- package/dist/boundaries/boundary-scanner.js.map +1 -0
- package/dist/boundaries/data-access-learner.d.ts +126 -0
- package/dist/boundaries/data-access-learner.d.ts.map +1 -0
- package/dist/boundaries/data-access-learner.js +486 -0
- package/dist/boundaries/data-access-learner.js.map +1 -0
- package/dist/boundaries/index.d.ts +6 -0
- package/dist/boundaries/index.d.ts.map +1 -1
- package/dist/boundaries/index.js +6 -0
- package/dist/boundaries/index.js.map +1 -1
- package/dist/boundaries/security-prioritizer.d.ts +118 -0
- package/dist/boundaries/security-prioritizer.d.ts.map +1 -0
- package/dist/boundaries/security-prioritizer.js +316 -0
- package/dist/boundaries/security-prioritizer.js.map +1 -0
- package/dist/call-graph/analysis/coverage-analyzer.d.ts +201 -0
- package/dist/call-graph/analysis/coverage-analyzer.d.ts.map +1 -0
- package/dist/call-graph/analysis/coverage-analyzer.js +553 -0
- package/dist/call-graph/analysis/coverage-analyzer.js.map +1 -0
- package/dist/call-graph/analysis/dead-code-detector.d.ts +145 -0
- package/dist/call-graph/analysis/dead-code-detector.d.ts.map +1 -0
- package/dist/call-graph/analysis/dead-code-detector.js +391 -0
- package/dist/call-graph/analysis/dead-code-detector.js.map +1 -0
- package/dist/call-graph/analysis/graph-builder.d.ts +142 -0
- package/dist/call-graph/analysis/graph-builder.d.ts.map +1 -0
- package/dist/call-graph/analysis/graph-builder.js +624 -0
- package/dist/call-graph/analysis/graph-builder.js.map +1 -0
- package/dist/call-graph/analysis/impact-analyzer.d.ts +150 -0
- package/dist/call-graph/analysis/impact-analyzer.d.ts.map +1 -0
- package/dist/call-graph/analysis/impact-analyzer.js +329 -0
- package/dist/call-graph/analysis/impact-analyzer.js.map +1 -0
- package/dist/call-graph/analysis/index.d.ts +11 -0
- package/dist/call-graph/analysis/index.d.ts.map +1 -0
- package/dist/call-graph/analysis/index.js +9 -0
- package/dist/call-graph/analysis/index.js.map +1 -0
- package/dist/call-graph/analysis/path-finder.d.ts +117 -0
- package/dist/call-graph/analysis/path-finder.d.ts.map +1 -0
- package/dist/call-graph/analysis/path-finder.js +360 -0
- package/dist/call-graph/analysis/path-finder.js.map +1 -0
- package/dist/call-graph/analysis/reachability.d.ts +56 -0
- package/dist/call-graph/analysis/reachability.d.ts.map +1 -0
- package/dist/call-graph/analysis/reachability.js +357 -0
- package/dist/call-graph/analysis/reachability.js.map +1 -0
- package/dist/call-graph/demo.d.ts +11 -0
- package/dist/call-graph/demo.d.ts.map +1 -0
- package/dist/call-graph/demo.js +339 -0
- package/dist/call-graph/demo.js.map +1 -0
- package/dist/call-graph/enrichment/enrichment-engine.d.ts +126 -0
- package/dist/call-graph/enrichment/enrichment-engine.d.ts.map +1 -0
- package/dist/call-graph/enrichment/enrichment-engine.js +760 -0
- package/dist/call-graph/enrichment/enrichment-engine.js.map +1 -0
- package/dist/call-graph/enrichment/impact-scorer.d.ts +59 -0
- package/dist/call-graph/enrichment/impact-scorer.d.ts.map +1 -0
- package/dist/call-graph/enrichment/impact-scorer.js +328 -0
- package/dist/call-graph/enrichment/impact-scorer.js.map +1 -0
- package/dist/call-graph/enrichment/index.d.ts +12 -0
- package/dist/call-graph/enrichment/index.d.ts.map +1 -0
- package/dist/call-graph/enrichment/index.js +15 -0
- package/dist/call-graph/enrichment/index.js.map +1 -0
- package/dist/call-graph/enrichment/remediation-generator.d.ts +41 -0
- package/dist/call-graph/enrichment/remediation-generator.d.ts.map +1 -0
- package/dist/call-graph/enrichment/remediation-generator.js +609 -0
- package/dist/call-graph/enrichment/remediation-generator.js.map +1 -0
- package/dist/call-graph/enrichment/sensitivity-classifier.d.ts +71 -0
- package/dist/call-graph/enrichment/sensitivity-classifier.d.ts.map +1 -0
- package/dist/call-graph/enrichment/sensitivity-classifier.js +454 -0
- package/dist/call-graph/enrichment/sensitivity-classifier.js.map +1 -0
- package/dist/call-graph/enrichment/types.d.ts +402 -0
- package/dist/call-graph/enrichment/types.d.ts.map +1 -0
- package/dist/call-graph/enrichment/types.js +9 -0
- package/dist/call-graph/enrichment/types.js.map +1 -0
- package/dist/call-graph/extractors/base-extractor.d.ts +112 -0
- package/dist/call-graph/extractors/base-extractor.d.ts.map +1 -0
- package/dist/call-graph/extractors/base-extractor.js +140 -0
- package/dist/call-graph/extractors/base-extractor.js.map +1 -0
- package/dist/call-graph/extractors/csharp-data-access-extractor.d.ts +76 -0
- package/dist/call-graph/extractors/csharp-data-access-extractor.d.ts.map +1 -0
- package/dist/call-graph/extractors/csharp-data-access-extractor.js +387 -0
- package/dist/call-graph/extractors/csharp-data-access-extractor.js.map +1 -0
- package/dist/call-graph/extractors/csharp-extractor.d.ts +87 -0
- package/dist/call-graph/extractors/csharp-extractor.d.ts.map +1 -0
- package/dist/call-graph/extractors/csharp-extractor.js +470 -0
- package/dist/call-graph/extractors/csharp-extractor.js.map +1 -0
- package/dist/call-graph/extractors/data-access-extractor.d.ts +76 -0
- package/dist/call-graph/extractors/data-access-extractor.d.ts.map +1 -0
- package/dist/call-graph/extractors/data-access-extractor.js +234 -0
- package/dist/call-graph/extractors/data-access-extractor.js.map +1 -0
- package/dist/call-graph/extractors/index.d.ts +26 -0
- package/dist/call-graph/extractors/index.d.ts.map +1 -0
- package/dist/call-graph/extractors/index.js +36 -0
- package/dist/call-graph/extractors/index.js.map +1 -0
- package/dist/call-graph/extractors/java-data-access-extractor.d.ts +101 -0
- package/dist/call-graph/extractors/java-data-access-extractor.d.ts.map +1 -0
- package/dist/call-graph/extractors/java-data-access-extractor.js +611 -0
- package/dist/call-graph/extractors/java-data-access-extractor.js.map +1 -0
- package/dist/call-graph/extractors/java-extractor.d.ts +87 -0
- package/dist/call-graph/extractors/java-extractor.d.ts.map +1 -0
- package/dist/call-graph/extractors/java-extractor.js +510 -0
- package/dist/call-graph/extractors/java-extractor.js.map +1 -0
- package/dist/call-graph/extractors/php-data-access-extractor.d.ts +93 -0
- package/dist/call-graph/extractors/php-data-access-extractor.d.ts.map +1 -0
- package/dist/call-graph/extractors/php-data-access-extractor.js +589 -0
- package/dist/call-graph/extractors/php-data-access-extractor.js.map +1 -0
- package/dist/call-graph/extractors/php-extractor.d.ts +104 -0
- package/dist/call-graph/extractors/php-extractor.d.ts.map +1 -0
- package/dist/call-graph/extractors/php-extractor.js +619 -0
- package/dist/call-graph/extractors/php-extractor.js.map +1 -0
- package/dist/call-graph/extractors/python-data-access-extractor.d.ts +90 -0
- package/dist/call-graph/extractors/python-data-access-extractor.d.ts.map +1 -0
- package/dist/call-graph/extractors/python-data-access-extractor.js +537 -0
- package/dist/call-graph/extractors/python-data-access-extractor.js.map +1 -0
- package/dist/call-graph/extractors/python-extractor.d.ts +98 -0
- package/dist/call-graph/extractors/python-extractor.d.ts.map +1 -0
- package/dist/call-graph/extractors/python-extractor.js +681 -0
- package/dist/call-graph/extractors/python-extractor.js.map +1 -0
- package/dist/call-graph/extractors/semantic-data-access-scanner.d.ts +91 -0
- package/dist/call-graph/extractors/semantic-data-access-scanner.d.ts.map +1 -0
- package/dist/call-graph/extractors/semantic-data-access-scanner.js +498 -0
- package/dist/call-graph/extractors/semantic-data-access-scanner.js.map +1 -0
- package/dist/call-graph/extractors/typescript-data-access-extractor.d.ts +122 -0
- package/dist/call-graph/extractors/typescript-data-access-extractor.d.ts.map +1 -0
- package/dist/call-graph/extractors/typescript-data-access-extractor.js +788 -0
- package/dist/call-graph/extractors/typescript-data-access-extractor.js.map +1 -0
- package/dist/call-graph/extractors/typescript-extractor.d.ts +145 -0
- package/dist/call-graph/extractors/typescript-extractor.d.ts.map +1 -0
- package/dist/call-graph/extractors/typescript-extractor.js +904 -0
- package/dist/call-graph/extractors/typescript-extractor.js.map +1 -0
- package/dist/call-graph/index.d.ts +127 -0
- package/dist/call-graph/index.d.ts.map +1 -0
- package/dist/call-graph/index.js +247 -0
- package/dist/call-graph/index.js.map +1 -0
- package/dist/call-graph/store/call-graph-store.d.ts +70 -0
- package/dist/call-graph/store/call-graph-store.d.ts.map +1 -0
- package/dist/call-graph/store/call-graph-store.js +210 -0
- package/dist/call-graph/store/call-graph-store.js.map +1 -0
- package/dist/call-graph/store/index.d.ts +7 -0
- package/dist/call-graph/store/index.d.ts.map +1 -0
- package/dist/call-graph/store/index.js +7 -0
- package/dist/call-graph/store/index.js.map +1 -0
- package/dist/call-graph/types.d.ts +376 -0
- package/dist/call-graph/types.d.ts.map +1 -0
- package/dist/call-graph/types.js +8 -0
- package/dist/call-graph/types.js.map +1 -0
- package/dist/index.d.ts +8 -0
- package/dist/index.d.ts.map +1 -1
- package/dist/index.js +12 -0
- package/dist/index.js.map +1 -1
- package/dist/lake/callgraph-shard-store.d.ts +168 -0
- package/dist/lake/callgraph-shard-store.d.ts.map +1 -0
- package/dist/lake/callgraph-shard-store.js +466 -0
- package/dist/lake/callgraph-shard-store.js.map +1 -0
- package/dist/lake/examples-store.d.ts +127 -0
- package/dist/lake/examples-store.d.ts.map +1 -0
- package/dist/lake/examples-store.js +389 -0
- package/dist/lake/examples-store.js.map +1 -0
- package/dist/lake/index-store.d.ts +82 -0
- package/dist/lake/index-store.d.ts.map +1 -0
- package/dist/lake/index-store.js +359 -0
- package/dist/lake/index-store.js.map +1 -0
- package/dist/lake/index.d.ts +93 -0
- package/dist/lake/index.d.ts.map +1 -0
- package/dist/lake/index.js +138 -0
- package/dist/lake/index.js.map +1 -0
- package/dist/lake/lake.bak/index-store.d.ts +82 -0
- package/dist/lake/lake.bak/index-store.d.ts.map +1 -0
- package/dist/lake/lake.bak/index-store.js +357 -0
- package/dist/lake/lake.bak/index-store.js.map +1 -0
- package/dist/lake/lake.bak/index.d.ts +81 -0
- package/dist/lake/lake.bak/index.d.ts.map +1 -0
- package/dist/lake/lake.bak/index.js +114 -0
- package/dist/lake/lake.bak/index.js.map +1 -0
- package/dist/lake/lake.bak/manifest-store.d.ts +51 -0
- package/dist/lake/lake.bak/manifest-store.d.ts.map +1 -0
- package/dist/lake/lake.bak/manifest-store.js +347 -0
- package/dist/lake/lake.bak/manifest-store.js.map +1 -0
- package/dist/lake/lake.bak/query-engine.d.ts +112 -0
- package/dist/lake/lake.bak/query-engine.d.ts.map +1 -0
- package/dist/lake/lake.bak/query-engine.js +370 -0
- package/dist/lake/lake.bak/query-engine.js.map +1 -0
- package/dist/lake/lake.bak/types.d.ts +428 -0
- package/dist/lake/lake.bak/types.d.ts.map +1 -0
- package/dist/lake/lake.bak/types.js +46 -0
- package/dist/lake/lake.bak/types.js.map +1 -0
- package/dist/lake/lake.bak/view-materializer.d.ts +70 -0
- package/dist/lake/lake.bak/view-materializer.d.ts.map +1 -0
- package/dist/lake/lake.bak/view-materializer.js +314 -0
- package/dist/lake/lake.bak/view-materializer.js.map +1 -0
- package/dist/lake/lake.bak/view-store.d.ts +57 -0
- package/dist/lake/lake.bak/view-store.d.ts.map +1 -0
- package/dist/lake/lake.bak/view-store.js +348 -0
- package/dist/lake/lake.bak/view-store.js.map +1 -0
- package/dist/lake/manifest-store.d.ts +51 -0
- package/dist/lake/manifest-store.d.ts.map +1 -0
- package/dist/lake/manifest-store.js +348 -0
- package/dist/lake/manifest-store.js.map +1 -0
- package/dist/lake/pattern-shard-store.d.ts +87 -0
- package/dist/lake/pattern-shard-store.d.ts.map +1 -0
- package/dist/lake/pattern-shard-store.js +347 -0
- package/dist/lake/pattern-shard-store.js.map +1 -0
- package/dist/lake/query-engine.d.ts +124 -0
- package/dist/lake/query-engine.d.ts.map +1 -0
- package/dist/lake/query-engine.js +453 -0
- package/dist/lake/query-engine.js.map +1 -0
- package/dist/lake/security-shard-store.d.ts +156 -0
- package/dist/lake/security-shard-store.d.ts.map +1 -0
- package/dist/lake/security-shard-store.js +498 -0
- package/dist/lake/security-shard-store.js.map +1 -0
- package/dist/lake/types.d.ts +428 -0
- package/dist/lake/types.d.ts.map +1 -0
- package/dist/lake/types.js +46 -0
- package/dist/lake/types.js.map +1 -0
- package/dist/lake/view-materializer.d.ts +70 -0
- package/dist/lake/view-materializer.d.ts.map +1 -0
- package/dist/lake/view-materializer.js +314 -0
- package/dist/lake/view-materializer.js.map +1 -0
- package/dist/lake/view-store.d.ts +57 -0
- package/dist/lake/view-store.d.ts.map +1 -0
- package/dist/lake/view-store.js +348 -0
- package/dist/lake/view-store.js.map +1 -0
- package/dist/parsers/tree-sitter/index.d.ts +1 -0
- package/dist/parsers/tree-sitter/index.d.ts.map +1 -1
- package/dist/parsers/tree-sitter/index.js +4 -0
- package/dist/parsers/tree-sitter/index.js.map +1 -1
- package/dist/parsers/tree-sitter/typescript-loader.d.ts +58 -0
- package/dist/parsers/tree-sitter/typescript-loader.d.ts.map +1 -0
- package/dist/parsers/tree-sitter/typescript-loader.js +250 -0
- package/dist/parsers/tree-sitter/typescript-loader.js.map +1 -0
- package/dist/store/project-config.d.ts +154 -0
- package/dist/store/project-config.d.ts.map +1 -0
- package/dist/store/project-config.js +235 -0
- package/dist/store/project-config.js.map +1 -0
- package/dist/store/project-registry.d.ts +241 -0
- package/dist/store/project-registry.d.ts.map +1 -0
- package/dist/store/project-registry.js +557 -0
- package/dist/store/project-registry.js.map +1 -0
- package/package.json +7 -7
|
@@ -0,0 +1,360 @@
|
|
|
1
|
+
/**
|
|
2
|
+
* Path Finder
|
|
3
|
+
*
|
|
4
|
+
* Advanced path finding algorithms for call graph traversal.
|
|
5
|
+
* Supports finding shortest paths, all paths, and critical paths
|
|
6
|
+
* between functions in the call graph.
|
|
7
|
+
*/
|
|
8
|
+
// ============================================================================
|
|
9
|
+
// Path Finder
|
|
10
|
+
// ============================================================================
|
|
11
|
+
/**
|
|
12
|
+
* Advanced path finding for call graphs
|
|
13
|
+
*/
|
|
14
|
+
export class PathFinder {
|
|
15
|
+
graph;
|
|
16
|
+
constructor(graph) {
|
|
17
|
+
this.graph = graph;
|
|
18
|
+
}
|
|
19
|
+
/**
|
|
20
|
+
* Find the shortest path between two functions
|
|
21
|
+
*/
|
|
22
|
+
findShortestPath(fromId, toId, options = {}) {
|
|
23
|
+
const result = this.findPaths(fromId, toId, { ...options, maxPaths: 1 });
|
|
24
|
+
return result.paths[0] ?? null;
|
|
25
|
+
}
|
|
26
|
+
/**
|
|
27
|
+
* Find all paths between two functions
|
|
28
|
+
*/
|
|
29
|
+
findAllPaths(fromId, toId, options = {}) {
|
|
30
|
+
return this.findPaths(fromId, toId, options);
|
|
31
|
+
}
|
|
32
|
+
/**
|
|
33
|
+
* Find paths from a location to any data access
|
|
34
|
+
*/
|
|
35
|
+
findPathsToData(from, options = {}) {
|
|
36
|
+
const startTime = Date.now();
|
|
37
|
+
const paths = [];
|
|
38
|
+
let nodesVisited = 0;
|
|
39
|
+
// Find containing function
|
|
40
|
+
const fromFunc = this.findContainingFunction(from.file, from.line);
|
|
41
|
+
if (!fromFunc) {
|
|
42
|
+
return {
|
|
43
|
+
paths: [],
|
|
44
|
+
exhaustive: true,
|
|
45
|
+
nodesVisited: 0,
|
|
46
|
+
searchTimeMs: Date.now() - startTime,
|
|
47
|
+
};
|
|
48
|
+
}
|
|
49
|
+
// Find all data accessors
|
|
50
|
+
for (const accessorId of this.graph.dataAccessors) {
|
|
51
|
+
const result = this.findPaths(fromFunc.id, accessorId, options);
|
|
52
|
+
paths.push(...result.paths);
|
|
53
|
+
nodesVisited += result.nodesVisited;
|
|
54
|
+
if (options.maxPaths && paths.length >= options.maxPaths) {
|
|
55
|
+
break;
|
|
56
|
+
}
|
|
57
|
+
}
|
|
58
|
+
// Sort by depth
|
|
59
|
+
paths.sort((a, b) => a.depth - b.depth);
|
|
60
|
+
return {
|
|
61
|
+
paths: options.maxPaths ? paths.slice(0, options.maxPaths) : paths,
|
|
62
|
+
exhaustive: !options.maxPaths || paths.length < options.maxPaths,
|
|
63
|
+
nodesVisited,
|
|
64
|
+
searchTimeMs: Date.now() - startTime,
|
|
65
|
+
};
|
|
66
|
+
}
|
|
67
|
+
/**
|
|
68
|
+
* Find paths from entry points to a specific function
|
|
69
|
+
*/
|
|
70
|
+
findPathsFromEntryPoints(toId, options = {}) {
|
|
71
|
+
const startTime = Date.now();
|
|
72
|
+
const paths = [];
|
|
73
|
+
let nodesVisited = 0;
|
|
74
|
+
for (const entryPointId of this.graph.entryPoints) {
|
|
75
|
+
const result = this.findPaths(entryPointId, toId, options);
|
|
76
|
+
paths.push(...result.paths);
|
|
77
|
+
nodesVisited += result.nodesVisited;
|
|
78
|
+
if (options.maxPaths && paths.length >= options.maxPaths) {
|
|
79
|
+
break;
|
|
80
|
+
}
|
|
81
|
+
}
|
|
82
|
+
// Sort by depth
|
|
83
|
+
paths.sort((a, b) => a.depth - b.depth);
|
|
84
|
+
return {
|
|
85
|
+
paths: options.maxPaths ? paths.slice(0, options.maxPaths) : paths,
|
|
86
|
+
exhaustive: !options.maxPaths || paths.length < options.maxPaths,
|
|
87
|
+
nodesVisited,
|
|
88
|
+
searchTimeMs: Date.now() - startTime,
|
|
89
|
+
};
|
|
90
|
+
}
|
|
91
|
+
/**
|
|
92
|
+
* Find the critical path (most impactful) to data access
|
|
93
|
+
*/
|
|
94
|
+
findCriticalPath(from, dataAccessPoints, options = {}) {
|
|
95
|
+
const pathsResult = this.findPathsToData(from, { ...options, maxPaths: 100 });
|
|
96
|
+
if (pathsResult.paths.length === 0) {
|
|
97
|
+
return {
|
|
98
|
+
criticalPath: null,
|
|
99
|
+
rankedPaths: [],
|
|
100
|
+
};
|
|
101
|
+
}
|
|
102
|
+
// Score each path
|
|
103
|
+
const rankedPaths = pathsResult.paths.map((path) => {
|
|
104
|
+
const { score, factors } = this.scorePath(path, dataAccessPoints);
|
|
105
|
+
return { path, score, factors };
|
|
106
|
+
});
|
|
107
|
+
// Sort by score (descending)
|
|
108
|
+
rankedPaths.sort((a, b) => b.score - a.score);
|
|
109
|
+
return {
|
|
110
|
+
criticalPath: rankedPaths[0]?.path ?? null,
|
|
111
|
+
rankedPaths,
|
|
112
|
+
};
|
|
113
|
+
}
|
|
114
|
+
/**
|
|
115
|
+
* Check if two functions are connected
|
|
116
|
+
*/
|
|
117
|
+
isConnected(fromId, toId, maxDepth = 10) {
|
|
118
|
+
return this.findShortestPath(fromId, toId, { maxDepth }) !== null;
|
|
119
|
+
}
|
|
120
|
+
/**
|
|
121
|
+
* Get all functions reachable from a starting point
|
|
122
|
+
*/
|
|
123
|
+
getReachableFunctions(fromId, options = {}) {
|
|
124
|
+
const maxDepth = options.maxDepth ?? Infinity;
|
|
125
|
+
const includeUnresolved = options.includeUnresolved ?? false;
|
|
126
|
+
const minConfidence = options.minConfidence ?? 0;
|
|
127
|
+
const reachable = new Set();
|
|
128
|
+
const queue = [{ id: fromId, depth: 0 }];
|
|
129
|
+
while (queue.length > 0) {
|
|
130
|
+
const { id, depth } = queue.shift();
|
|
131
|
+
if (reachable.has(id) || depth > maxDepth)
|
|
132
|
+
continue;
|
|
133
|
+
reachable.add(id);
|
|
134
|
+
const func = this.graph.functions.get(id);
|
|
135
|
+
if (!func)
|
|
136
|
+
continue;
|
|
137
|
+
for (const call of func.calls) {
|
|
138
|
+
if (!call.resolved && !includeUnresolved)
|
|
139
|
+
continue;
|
|
140
|
+
if (call.confidence < minConfidence)
|
|
141
|
+
continue;
|
|
142
|
+
for (const candidateId of call.resolvedCandidates) {
|
|
143
|
+
if (!reachable.has(candidateId)) {
|
|
144
|
+
queue.push({ id: candidateId, depth: depth + 1 });
|
|
145
|
+
}
|
|
146
|
+
}
|
|
147
|
+
}
|
|
148
|
+
}
|
|
149
|
+
return reachable;
|
|
150
|
+
}
|
|
151
|
+
/**
|
|
152
|
+
* Get all functions that can reach a target
|
|
153
|
+
*/
|
|
154
|
+
getCallers(toId, options = {}) {
|
|
155
|
+
const maxDepth = options.maxDepth ?? Infinity;
|
|
156
|
+
const callers = new Set();
|
|
157
|
+
const queue = [{ id: toId, depth: 0 }];
|
|
158
|
+
while (queue.length > 0) {
|
|
159
|
+
const { id, depth } = queue.shift();
|
|
160
|
+
if (callers.has(id) || depth > maxDepth)
|
|
161
|
+
continue;
|
|
162
|
+
callers.add(id);
|
|
163
|
+
const func = this.graph.functions.get(id);
|
|
164
|
+
if (!func)
|
|
165
|
+
continue;
|
|
166
|
+
for (const callSite of func.calledBy) {
|
|
167
|
+
if (!callers.has(callSite.callerId)) {
|
|
168
|
+
queue.push({ id: callSite.callerId, depth: depth + 1 });
|
|
169
|
+
}
|
|
170
|
+
}
|
|
171
|
+
}
|
|
172
|
+
return callers;
|
|
173
|
+
}
|
|
174
|
+
/**
|
|
175
|
+
* Find paths between two functions using BFS
|
|
176
|
+
*/
|
|
177
|
+
findPaths(fromId, toId, options = {}) {
|
|
178
|
+
const startTime = Date.now();
|
|
179
|
+
const maxDepth = options.maxDepth ?? 20;
|
|
180
|
+
const maxPaths = options.maxPaths ?? 100;
|
|
181
|
+
const includeUnresolved = options.includeUnresolved ?? false;
|
|
182
|
+
const minConfidence = options.minConfidence ?? 0;
|
|
183
|
+
const paths = [];
|
|
184
|
+
let nodesVisited = 0;
|
|
185
|
+
// Handle same node case
|
|
186
|
+
if (fromId === toId) {
|
|
187
|
+
const func = this.graph.functions.get(fromId);
|
|
188
|
+
if (func) {
|
|
189
|
+
return {
|
|
190
|
+
paths: [{
|
|
191
|
+
nodes: [{
|
|
192
|
+
functionId: fromId,
|
|
193
|
+
functionName: func.qualifiedName,
|
|
194
|
+
file: func.file,
|
|
195
|
+
line: func.startLine,
|
|
196
|
+
}],
|
|
197
|
+
depth: 0,
|
|
198
|
+
minConfidence: 1,
|
|
199
|
+
hasUnresolved: false,
|
|
200
|
+
}],
|
|
201
|
+
exhaustive: true,
|
|
202
|
+
nodesVisited: 1,
|
|
203
|
+
searchTimeMs: Date.now() - startTime,
|
|
204
|
+
};
|
|
205
|
+
}
|
|
206
|
+
}
|
|
207
|
+
// BFS with path tracking
|
|
208
|
+
const visited = new Map(); // Track minimum depth to reach each node
|
|
209
|
+
const queue = [];
|
|
210
|
+
const fromFunc = this.graph.functions.get(fromId);
|
|
211
|
+
if (!fromFunc) {
|
|
212
|
+
return {
|
|
213
|
+
paths: [],
|
|
214
|
+
exhaustive: true,
|
|
215
|
+
nodesVisited: 0,
|
|
216
|
+
searchTimeMs: Date.now() - startTime,
|
|
217
|
+
};
|
|
218
|
+
}
|
|
219
|
+
queue.push({
|
|
220
|
+
id: fromId,
|
|
221
|
+
path: [{
|
|
222
|
+
functionId: fromId,
|
|
223
|
+
functionName: fromFunc.qualifiedName,
|
|
224
|
+
file: fromFunc.file,
|
|
225
|
+
line: fromFunc.startLine,
|
|
226
|
+
}],
|
|
227
|
+
depth: 0,
|
|
228
|
+
minConf: 1,
|
|
229
|
+
hasUnresolved: false,
|
|
230
|
+
});
|
|
231
|
+
while (queue.length > 0 && paths.length < maxPaths) {
|
|
232
|
+
const current = queue.shift();
|
|
233
|
+
const { id, path, depth, minConf, hasUnresolved } = current;
|
|
234
|
+
nodesVisited++;
|
|
235
|
+
if (depth > maxDepth)
|
|
236
|
+
continue;
|
|
237
|
+
// Skip if we've visited this node at a lower depth (optimization)
|
|
238
|
+
const prevDepth = visited.get(id);
|
|
239
|
+
if (prevDepth !== undefined && prevDepth < depth)
|
|
240
|
+
continue;
|
|
241
|
+
visited.set(id, depth);
|
|
242
|
+
// Check if we reached the target
|
|
243
|
+
if (id === toId) {
|
|
244
|
+
paths.push({
|
|
245
|
+
nodes: path,
|
|
246
|
+
depth,
|
|
247
|
+
minConfidence: minConf,
|
|
248
|
+
hasUnresolved,
|
|
249
|
+
});
|
|
250
|
+
continue;
|
|
251
|
+
}
|
|
252
|
+
const func = this.graph.functions.get(id);
|
|
253
|
+
if (!func)
|
|
254
|
+
continue;
|
|
255
|
+
// Explore calls
|
|
256
|
+
for (const call of func.calls) {
|
|
257
|
+
if (!call.resolved && !includeUnresolved)
|
|
258
|
+
continue;
|
|
259
|
+
if (call.confidence < minConfidence)
|
|
260
|
+
continue;
|
|
261
|
+
for (const candidateId of call.resolvedCandidates) {
|
|
262
|
+
const candidate = this.graph.functions.get(candidateId);
|
|
263
|
+
if (!candidate)
|
|
264
|
+
continue;
|
|
265
|
+
// Don't revisit nodes in the current path (avoid cycles)
|
|
266
|
+
if (path.some((n) => n.functionId === candidateId))
|
|
267
|
+
continue;
|
|
268
|
+
queue.push({
|
|
269
|
+
id: candidateId,
|
|
270
|
+
path: [
|
|
271
|
+
...path,
|
|
272
|
+
{
|
|
273
|
+
functionId: candidateId,
|
|
274
|
+
functionName: candidate.qualifiedName,
|
|
275
|
+
file: candidate.file,
|
|
276
|
+
line: candidate.startLine,
|
|
277
|
+
},
|
|
278
|
+
],
|
|
279
|
+
depth: depth + 1,
|
|
280
|
+
minConf: Math.min(minConf, call.confidence),
|
|
281
|
+
hasUnresolved: hasUnresolved || !call.resolved,
|
|
282
|
+
});
|
|
283
|
+
}
|
|
284
|
+
}
|
|
285
|
+
}
|
|
286
|
+
return {
|
|
287
|
+
paths,
|
|
288
|
+
exhaustive: paths.length < maxPaths,
|
|
289
|
+
nodesVisited,
|
|
290
|
+
searchTimeMs: Date.now() - startTime,
|
|
291
|
+
};
|
|
292
|
+
}
|
|
293
|
+
/**
|
|
294
|
+
* Score a path based on criticality factors
|
|
295
|
+
*/
|
|
296
|
+
scorePath(path, dataAccessPoints) {
|
|
297
|
+
let score = 100;
|
|
298
|
+
const factors = [];
|
|
299
|
+
// Shorter paths are more critical (easier to exploit)
|
|
300
|
+
if (path.depth <= 2) {
|
|
301
|
+
score += 20;
|
|
302
|
+
factors.push('Short call chain');
|
|
303
|
+
}
|
|
304
|
+
else if (path.depth > 5) {
|
|
305
|
+
score -= 10;
|
|
306
|
+
factors.push('Deep call chain');
|
|
307
|
+
}
|
|
308
|
+
// Higher confidence paths are more reliable
|
|
309
|
+
if (path.minConfidence >= 0.9) {
|
|
310
|
+
score += 10;
|
|
311
|
+
factors.push('High confidence resolution');
|
|
312
|
+
}
|
|
313
|
+
else if (path.minConfidence < 0.5) {
|
|
314
|
+
score -= 20;
|
|
315
|
+
factors.push('Low confidence resolution');
|
|
316
|
+
}
|
|
317
|
+
// Unresolved calls reduce criticality
|
|
318
|
+
if (path.hasUnresolved) {
|
|
319
|
+
score -= 15;
|
|
320
|
+
factors.push('Contains unresolved calls');
|
|
321
|
+
}
|
|
322
|
+
// Check if path ends at sensitive data
|
|
323
|
+
const lastNode = path.nodes[path.nodes.length - 1];
|
|
324
|
+
if (lastNode) {
|
|
325
|
+
const accessPoint = dataAccessPoints.find((ap) => ap.file === lastNode.file && ap.line === lastNode.line);
|
|
326
|
+
if (accessPoint) {
|
|
327
|
+
// Boost for write/delete operations
|
|
328
|
+
if (accessPoint.operation === 'write' || accessPoint.operation === 'delete') {
|
|
329
|
+
score += 15;
|
|
330
|
+
factors.push('Write/delete operation');
|
|
331
|
+
}
|
|
332
|
+
}
|
|
333
|
+
}
|
|
334
|
+
return { score: Math.max(0, score), factors };
|
|
335
|
+
}
|
|
336
|
+
/**
|
|
337
|
+
* Find the function containing a location
|
|
338
|
+
*/
|
|
339
|
+
findContainingFunction(file, line) {
|
|
340
|
+
let best = null;
|
|
341
|
+
let bestSize = Infinity;
|
|
342
|
+
for (const [, func] of this.graph.functions) {
|
|
343
|
+
if (func.file === file && line >= func.startLine && line <= func.endLine) {
|
|
344
|
+
const size = func.endLine - func.startLine;
|
|
345
|
+
if (size < bestSize) {
|
|
346
|
+
best = func;
|
|
347
|
+
bestSize = size;
|
|
348
|
+
}
|
|
349
|
+
}
|
|
350
|
+
}
|
|
351
|
+
return best;
|
|
352
|
+
}
|
|
353
|
+
}
|
|
354
|
+
/**
|
|
355
|
+
* Create a new path finder
|
|
356
|
+
*/
|
|
357
|
+
export function createPathFinder(graph) {
|
|
358
|
+
return new PathFinder(graph);
|
|
359
|
+
}
|
|
360
|
+
//# sourceMappingURL=path-finder.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"path-finder.js","sourceRoot":"","sources":["../../../src/call-graph/analysis/path-finder.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAsEH,+EAA+E;AAC/E,cAAc;AACd,+EAA+E;AAE/E;;GAEG;AACH,MAAM,OAAO,UAAU;IACJ,KAAK,CAAY;IAElC,YAAY,KAAgB;QAC1B,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC;IACrB,CAAC;IAED;;OAEG;IACH,gBAAgB,CACd,MAAc,EACd,IAAY,EACZ,UAA6B,EAAE;QAE/B,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,EAAE,GAAG,OAAO,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC,CAAC;QACzE,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC;IACjC,CAAC;IAED;;OAEG;IACH,YAAY,CACV,MAAc,EACd,IAAY,EACZ,UAA6B,EAAE;QAE/B,OAAO,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC;IAC/C,CAAC;IAED;;OAEG;IACH,eAAe,CACb,IAAkB,EAClB,UAA6B,EAAE;QAE/B,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAC7B,MAAM,KAAK,GAAe,EAAE,CAAC;QAC7B,IAAI,YAAY,GAAG,CAAC,CAAC;QAErB,2BAA2B;QAC3B,MAAM,QAAQ,GAAG,IAAI,CAAC,sBAAsB,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;QACnE,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,OAAO;gBACL,KAAK,EAAE,EAAE;gBACT,UAAU,EAAE,IAAI;gBAChB,YAAY,EAAE,CAAC;gBACf,YAAY,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS;aACrC,CAAC;QACJ,CAAC;QAED,0BAA0B;QAC1B,KAAK,MAAM,UAAU,IAAI,IAAI,CAAC,KAAK,CAAC,aAAa,EAAE,CAAC;YAClD,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,EAAE,EAAE,UAAU,EAAE,OAAO,CAAC,CAAC;YAChE,KAAK,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;YAC5B,YAAY,IAAI,MAAM,CAAC,YAAY,CAAC;YAEpC,IAAI,OAAO,CAAC,QAAQ,IAAI,KAAK,CAAC,MAAM,IAAI,OAAO,CAAC,QAAQ,EAAE,CAAC;gBACzD,MAAM;YACR,CAAC;QACH,CAAC;QAED,gBAAgB;QAChB,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC;QAExC,OAAO;YACL,KAAK,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,KAAK;YAClE,UAAU,EAAE,CAAC,OAAO,CAAC,QAAQ,IAAI,KAAK,CAAC,MAAM,GAAG,OAAO,CAAC,QAAQ;YAChE,YAAY;YACZ,YAAY,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS;SACrC,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,wBAAwB,CACtB,IAAY,EACZ,UAA6B,EAAE;QAE/B,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAC7B,MAAM,KAAK,GAAe,EAAE,CAAC;QAC7B,IAAI,YAAY,GAAG,CAAC,CAAC;QAErB,KAAK,MAAM,YAAY,IAAI,IAAI,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC;YAClD,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,CAAC,YAAY,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC;YAC3D,KAAK,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;YAC5B,YAAY,IAAI,MAAM,CAAC,YAAY,CAAC;YAEpC,IAAI,OAAO,CAAC,QAAQ,IAAI,KAAK,CAAC,MAAM,IAAI,OAAO,CAAC,QAAQ,EAAE,CAAC;gBACzD,MAAM;YACR,CAAC;QACH,CAAC;QAED,gBAAgB;QAChB,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC;QAExC,OAAO;YACL,KAAK,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,KAAK;YAClE,UAAU,EAAE,CAAC,OAAO,CAAC,QAAQ,IAAI,KAAK,CAAC,MAAM,GAAG,OAAO,CAAC,QAAQ;YAChE,YAAY;YACZ,YAAY,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS;SACrC,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,gBAAgB,CACd,IAAkB,EAClB,gBAAmC,EACnC,UAA6B,EAAE;QAE/B,MAAM,WAAW,GAAG,IAAI,CAAC,eAAe,CAAC,IAAI,EAAE,EAAE,GAAG,OAAO,EAAE,QAAQ,EAAE,GAAG,EAAE,CAAC,CAAC;QAE9E,IAAI,WAAW,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACnC,OAAO;gBACL,YAAY,EAAE,IAAI;gBAClB,WAAW,EAAE,EAAE;aAChB,CAAC;QACJ,CAAC;QAED,kBAAkB;QAClB,MAAM,WAAW,GAAG,WAAW,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE;YACjD,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,gBAAgB,CAAC,CAAC;YAClE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC;QAClC,CAAC,CAAC,CAAC;QAEH,6BAA6B;QAC7B,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC;QAE9C,OAAO;YACL,YAAY,EAAE,WAAW,CAAC,CAAC,CAAC,EAAE,IAAI,IAAI,IAAI;YAC1C,WAAW;SACZ,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,WAAW,CAAC,MAAc,EAAE,IAAY,EAAE,WAAmB,EAAE;QAC7D,OAAO,IAAI,CAAC,gBAAgB,CAAC,MAAM,EAAE,IAAI,EAAE,EAAE,QAAQ,EAAE,CAAC,KAAK,IAAI,CAAC;IACpE,CAAC;IAED;;OAEG;IACH,qBAAqB,CACnB,MAAc,EACd,UAA6B,EAAE;QAE/B,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,IAAI,QAAQ,CAAC;QAC9C,MAAM,iBAAiB,GAAG,OAAO,CAAC,iBAAiB,IAAI,KAAK,CAAC;QAC7D,MAAM,aAAa,GAAG,OAAO,CAAC,aAAa,IAAI,CAAC,CAAC;QAEjD,MAAM,SAAS,GAAG,IAAI,GAAG,EAAU,CAAC;QACpC,MAAM,KAAK,GAAyC,CAAC,EAAE,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,CAAC;QAE/E,OAAO,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACxB,MAAM,EAAE,EAAE,EAAE,KAAK,EAAE,GAAG,KAAK,CAAC,KAAK,EAAG,CAAC;YAErC,IAAI,SAAS,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,KAAK,GAAG,QAAQ;gBAAE,SAAS;YACpD,SAAS,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YAElB,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YAC1C,IAAI,CAAC,IAAI;gBAAE,SAAS;YAEpB,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;gBAC9B,IAAI,CAAC,IAAI,CAAC,QAAQ,IAAI,CAAC,iBAAiB;oBAAE,SAAS;gBACnD,IAAI,IAAI,CAAC,UAAU,GAAG,aAAa;oBAAE,SAAS;gBAE9C,KAAK,MAAM,WAAW,IAAI,IAAI,CAAC,kBAAkB,EAAE,CAAC;oBAClD,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,WAAW,CAAC,EAAE,CAAC;wBAChC,KAAK,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,WAAW,EAAE,KAAK,EAAE,KAAK,GAAG,CAAC,EAAE,CAAC,CAAC;oBACpD,CAAC;gBACH,CAAC;YACH,CAAC;QACH,CAAC;QAED,OAAO,SAAS,CAAC;IACnB,CAAC;IAED;;OAEG;IACH,UAAU,CACR,IAAY,EACZ,UAA6B,EAAE;QAE/B,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,IAAI,QAAQ,CAAC;QAC9C,MAAM,OAAO,GAAG,IAAI,GAAG,EAAU,CAAC;QAClC,MAAM,KAAK,GAAyC,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,CAAC;QAE7E,OAAO,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACxB,MAAM,EAAE,EAAE,EAAE,KAAK,EAAE,GAAG,KAAK,CAAC,KAAK,EAAG,CAAC;YAErC,IAAI,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,KAAK,GAAG,QAAQ;gBAAE,SAAS;YAClD,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YAEhB,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YAC1C,IAAI,CAAC,IAAI;gBAAE,SAAS;YAEpB,KAAK,MAAM,QAAQ,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACrC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;oBACpC,KAAK,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,QAAQ,CAAC,QAAQ,EAAE,KAAK,EAAE,KAAK,GAAG,CAAC,EAAE,CAAC,CAAC;gBAC1D,CAAC;YACH,CAAC;QACH,CAAC;QAED,OAAO,OAAO,CAAC;IACjB,CAAC;IAED;;OAEG;IACK,SAAS,CACf,MAAc,EACd,IAAY,EACZ,UAA6B,EAAE;QAE/B,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAC7B,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,IAAI,EAAE,CAAC;QACxC,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,IAAI,GAAG,CAAC;QACzC,MAAM,iBAAiB,GAAG,OAAO,CAAC,iBAAiB,IAAI,KAAK,CAAC;QAC7D,MAAM,aAAa,GAAG,OAAO,CAAC,aAAa,IAAI,CAAC,CAAC;QAEjD,MAAM,KAAK,GAAe,EAAE,CAAC;QAC7B,IAAI,YAAY,GAAG,CAAC,CAAC;QAErB,wBAAwB;QACxB,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;YACpB,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;YAC9C,IAAI,IAAI,EAAE,CAAC;gBACT,OAAO;oBACL,KAAK,EAAE,CAAC;4BACN,KAAK,EAAE,CAAC;oCACN,UAAU,EAAE,MAAM;oCAClB,YAAY,EAAE,IAAI,CAAC,aAAa;oCAChC,IAAI,EAAE,IAAI,CAAC,IAAI;oCACf,IAAI,EAAE,IAAI,CAAC,SAAS;iCACrB,CAAC;4BACF,KAAK,EAAE,CAAC;4BACR,aAAa,EAAE,CAAC;4BAChB,aAAa,EAAE,KAAK;yBACrB,CAAC;oBACF,UAAU,EAAE,IAAI;oBAChB,YAAY,EAAE,CAAC;oBACf,YAAY,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS;iBACrC,CAAC;YACJ,CAAC;QACH,CAAC;QAED,yBAAyB;QACzB,MAAM,OAAO,GAAG,IAAI,GAAG,EAAkB,CAAC,CAAC,yCAAyC;QACpF,MAAM,KAAK,GAMN,EAAE,CAAC;QAER,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QAClD,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,OAAO;gBACL,KAAK,EAAE,EAAE;gBACT,UAAU,EAAE,IAAI;gBAChB,YAAY,EAAE,CAAC;gBACf,YAAY,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS;aACrC,CAAC;QACJ,CAAC;QAED,KAAK,CAAC,IAAI,CAAC;YACT,EAAE,EAAE,MAAM;YACV,IAAI,EAAE,CAAC;oBACL,UAAU,EAAE,MAAM;oBAClB,YAAY,EAAE,QAAQ,CAAC,aAAa;oBACpC,IAAI,EAAE,QAAQ,CAAC,IAAI;oBACnB,IAAI,EAAE,QAAQ,CAAC,SAAS;iBACzB,CAAC;YACF,KAAK,EAAE,CAAC;YACR,OAAO,EAAE,CAAC;YACV,aAAa,EAAE,KAAK;SACrB,CAAC,CAAC;QAEH,OAAO,KAAK,CAAC,MAAM,GAAG,CAAC,IAAI,KAAK,CAAC,MAAM,GAAG,QAAQ,EAAE,CAAC;YACnD,MAAM,OAAO,GAAG,KAAK,CAAC,KAAK,EAAG,CAAC;YAC/B,MAAM,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,aAAa,EAAE,GAAG,OAAO,CAAC;YAC5D,YAAY,EAAE,CAAC;YAEf,IAAI,KAAK,GAAG,QAAQ;gBAAE,SAAS;YAE/B,kEAAkE;YAClE,MAAM,SAAS,GAAG,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YAClC,IAAI,SAAS,KAAK,SAAS,IAAI,SAAS,GAAG,KAAK;gBAAE,SAAS;YAC3D,OAAO,CAAC,GAAG,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC;YAEvB,iCAAiC;YACjC,IAAI,EAAE,KAAK,IAAI,EAAE,CAAC;gBAChB,KAAK,CAAC,IAAI,CAAC;oBACT,KAAK,EAAE,IAAI;oBACX,KAAK;oBACL,aAAa,EAAE,OAAO;oBACtB,aAAa;iBACd,CAAC,CAAC;gBACH,SAAS;YACX,CAAC;YAED,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YAC1C,IAAI,CAAC,IAAI;gBAAE,SAAS;YAEpB,gBAAgB;YAChB,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;gBAC9B,IAAI,CAAC,IAAI,CAAC,QAAQ,IAAI,CAAC,iBAAiB;oBAAE,SAAS;gBACnD,IAAI,IAAI,CAAC,UAAU,GAAG,aAAa;oBAAE,SAAS;gBAE9C,KAAK,MAAM,WAAW,IAAI,IAAI,CAAC,kBAAkB,EAAE,CAAC;oBAClD,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;oBACxD,IAAI,CAAC,SAAS;wBAAE,SAAS;oBAEzB,yDAAyD;oBACzD,IAAI,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,KAAK,WAAW,CAAC;wBAAE,SAAS;oBAE7D,KAAK,CAAC,IAAI,CAAC;wBACT,EAAE,EAAE,WAAW;wBACf,IAAI,EAAE;4BACJ,GAAG,IAAI;4BACP;gCACE,UAAU,EAAE,WAAW;gCACvB,YAAY,EAAE,SAAS,CAAC,aAAa;gCACrC,IAAI,EAAE,SAAS,CAAC,IAAI;gCACpB,IAAI,EAAE,SAAS,CAAC,SAAS;6BAC1B;yBACF;wBACD,KAAK,EAAE,KAAK,GAAG,CAAC;wBAChB,OAAO,EAAE,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,IAAI,CAAC,UAAU,CAAC;wBAC3C,aAAa,EAAE,aAAa,IAAI,CAAC,IAAI,CAAC,QAAQ;qBAC/C,CAAC,CAAC;gBACL,CAAC;YACH,CAAC;QACH,CAAC;QAED,OAAO;YACL,KAAK;YACL,UAAU,EAAE,KAAK,CAAC,MAAM,GAAG,QAAQ;YACnC,YAAY;YACZ,YAAY,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS;SACrC,CAAC;IACJ,CAAC;IAED;;OAEG;IACK,SAAS,CACf,IAAc,EACd,gBAAmC;QAEnC,IAAI,KAAK,GAAG,GAAG,CAAC;QAChB,MAAM,OAAO,GAAa,EAAE,CAAC;QAE7B,sDAAsD;QACtD,IAAI,IAAI,CAAC,KAAK,IAAI,CAAC,EAAE,CAAC;YACpB,KAAK,IAAI,EAAE,CAAC;YACZ,OAAO,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC;QACnC,CAAC;aAAM,IAAI,IAAI,CAAC,KAAK,GAAG,CAAC,EAAE,CAAC;YAC1B,KAAK,IAAI,EAAE,CAAC;YACZ,OAAO,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;QAClC,CAAC;QAED,4CAA4C;QAC5C,IAAI,IAAI,CAAC,aAAa,IAAI,GAAG,EAAE,CAAC;YAC9B,KAAK,IAAI,EAAE,CAAC;YACZ,OAAO,CAAC,IAAI,CAAC,4BAA4B,CAAC,CAAC;QAC7C,CAAC;aAAM,IAAI,IAAI,CAAC,aAAa,GAAG,GAAG,EAAE,CAAC;YACpC,KAAK,IAAI,EAAE,CAAC;YACZ,OAAO,CAAC,IAAI,CAAC,2BAA2B,CAAC,CAAC;QAC5C,CAAC;QAED,sCAAsC;QACtC,IAAI,IAAI,CAAC,aAAa,EAAE,CAAC;YACvB,KAAK,IAAI,EAAE,CAAC;YACZ,OAAO,CAAC,IAAI,CAAC,2BAA2B,CAAC,CAAC;QAC5C,CAAC;QAED,uCAAuC;QACvC,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;QACnD,IAAI,QAAQ,EAAE,CAAC;YACb,MAAM,WAAW,GAAG,gBAAgB,CAAC,IAAI,CACvC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,IAAI,KAAK,QAAQ,CAAC,IAAI,IAAI,EAAE,CAAC,IAAI,KAAK,QAAQ,CAAC,IAAI,CAC/D,CAAC;YACF,IAAI,WAAW,EAAE,CAAC;gBAChB,oCAAoC;gBACpC,IAAI,WAAW,CAAC,SAAS,KAAK,OAAO,IAAI,WAAW,CAAC,SAAS,KAAK,QAAQ,EAAE,CAAC;oBAC5E,KAAK,IAAI,EAAE,CAAC;oBACZ,OAAO,CAAC,IAAI,CAAC,wBAAwB,CAAC,CAAC;gBACzC,CAAC;YACH,CAAC;QACH,CAAC;QAED,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,KAAK,CAAC,EAAE,OAAO,EAAE,CAAC;IAChD,CAAC;IAED;;OAEG;IACK,sBAAsB,CAAC,IAAY,EAAE,IAAY;QACvD,IAAI,IAAI,GAAwB,IAAI,CAAC;QACrC,IAAI,QAAQ,GAAG,QAAQ,CAAC;QAExB,KAAK,MAAM,CAAC,EAAE,IAAI,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,SAAS,EAAE,CAAC;YAC5C,IAAI,IAAI,CAAC,IAAI,KAAK,IAAI,IAAI,IAAI,IAAI,IAAI,CAAC,SAAS,IAAI,IAAI,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;gBACzE,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC;gBAC3C,IAAI,IAAI,GAAG,QAAQ,EAAE,CAAC;oBACpB,IAAI,GAAG,IAAI,CAAC;oBACZ,QAAQ,GAAG,IAAI,CAAC;gBAClB,CAAC;YACH,CAAC;QACH,CAAC;QAED,OAAO,IAAI,CAAC;IACd,CAAC;CACF;AAED;;GAEG;AACH,MAAM,UAAU,gBAAgB,CAAC,KAAgB;IAC/C,OAAO,IAAI,UAAU,CAAC,KAAK,CAAC,CAAC;AAC/B,CAAC"}
|
|
@@ -0,0 +1,56 @@
|
|
|
1
|
+
/**
|
|
2
|
+
* Reachability Analysis Engine
|
|
3
|
+
*
|
|
4
|
+
* Answers the core question: "What data can this line of code ultimately access?"
|
|
5
|
+
* Uses BFS traversal through the call graph to find all reachable data access points.
|
|
6
|
+
*/
|
|
7
|
+
import type { CallGraph, ReachabilityResult, ReachabilityOptions, CallPathNode, CodeLocation, InverseReachabilityOptions, InverseReachabilityResult } from '../types.js';
|
|
8
|
+
/**
|
|
9
|
+
* Reachability Analysis Engine
|
|
10
|
+
*/
|
|
11
|
+
export declare class ReachabilityEngine {
|
|
12
|
+
private graph;
|
|
13
|
+
constructor(graph: CallGraph);
|
|
14
|
+
/**
|
|
15
|
+
* Get all data reachable from a specific code location
|
|
16
|
+
*/
|
|
17
|
+
getReachableData(file: string, line: number, options?: ReachabilityOptions): ReachabilityResult;
|
|
18
|
+
/**
|
|
19
|
+
* Get all data reachable from a function
|
|
20
|
+
*/
|
|
21
|
+
getReachableDataFromFunction(functionId: string, options?: ReachabilityOptions): ReachabilityResult;
|
|
22
|
+
/**
|
|
23
|
+
* Get the call path from a location to a specific data access point
|
|
24
|
+
*/
|
|
25
|
+
getCallPath(from: CodeLocation, toTable: string, toField?: string): CallPathNode[][];
|
|
26
|
+
/**
|
|
27
|
+
* Inverse query: "Who can reach this data?"
|
|
28
|
+
* Find all code paths that can access a specific table/field
|
|
29
|
+
*/
|
|
30
|
+
getCodePathsToData(options: InverseReachabilityOptions): InverseReachabilityResult;
|
|
31
|
+
/**
|
|
32
|
+
* Find all paths from entry points to a specific function
|
|
33
|
+
*/
|
|
34
|
+
private findPathsToFunction;
|
|
35
|
+
/**
|
|
36
|
+
* BFS to find paths between two functions
|
|
37
|
+
*/
|
|
38
|
+
private findPathsBFS;
|
|
39
|
+
/**
|
|
40
|
+
* Find the function containing a specific line
|
|
41
|
+
*/
|
|
42
|
+
private findContainingFunction;
|
|
43
|
+
/**
|
|
44
|
+
* Build the reachability result
|
|
45
|
+
*/
|
|
46
|
+
private buildResult;
|
|
47
|
+
/**
|
|
48
|
+
* Classify sensitivity type based on field name
|
|
49
|
+
*/
|
|
50
|
+
private classifySensitivity;
|
|
51
|
+
/**
|
|
52
|
+
* Create an empty result
|
|
53
|
+
*/
|
|
54
|
+
private createEmptyResult;
|
|
55
|
+
}
|
|
56
|
+
//# sourceMappingURL=reachability.d.ts.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"reachability.d.ts","sourceRoot":"","sources":["../../../src/call-graph/analysis/reachability.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,KAAK,EACV,SAAS,EAET,kBAAkB,EAClB,mBAAmB,EAEnB,YAAY,EACZ,YAAY,EAEZ,0BAA0B,EAC1B,yBAAyB,EAE1B,MAAM,aAAa,CAAC;AAErB;;GAEG;AACH,qBAAa,kBAAkB;IAC7B,OAAO,CAAC,KAAK,CAAY;gBAEb,KAAK,EAAE,SAAS;IAI5B;;OAEG;IACH,gBAAgB,CACd,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE,MAAM,EACZ,OAAO,GAAE,mBAAwB,GAChC,kBAAkB;IAUrB;;OAEG;IACH,4BAA4B,CAC1B,UAAU,EAAE,MAAM,EAClB,OAAO,GAAE,mBAAwB,GAChC,kBAAkB;IAwFrB;;OAEG;IACH,WAAW,CACT,IAAI,EAAE,YAAY,EAClB,OAAO,EAAE,MAAM,EACf,OAAO,CAAC,EAAE,MAAM,GACf,YAAY,EAAE,EAAE;IAkBnB;;;OAGG;IACH,kBAAkB,CAAC,OAAO,EAAE,0BAA0B,GAAG,yBAAyB;IAsDlF;;OAEG;IACH,OAAO,CAAC,mBAAmB;IAoB3B;;OAEG;IACH,OAAO,CAAC,YAAY;IAyEpB;;OAEG;IACH,OAAO,CAAC,sBAAsB;IAiB9B;;OAEG;IACH,OAAO,CAAC,WAAW;IAwEnB;;OAEG;IACH,OAAO,CAAC,mBAAmB;IAmB3B;;OAEG;IACH,OAAO,CAAC,iBAAiB;CAU1B"}
|