gitnexus 1.6.10-rc.99 → 1.6.10

package/dist/core/ingestion/pipeline-phases/spring-aop.d.ts

@@ -0,0 +1,34 @@
+/**
+ * Phase: springAop
+ *
+ * Materializes statically visible Spring proxy/advice behavior after every
+ * language resolver has attached normalized metadata to the shared graph.
+ * The post-MRO export in this file propagates declarative behavior through
+ * METHOD_OVERRIDES/METHOD_IMPLEMENTS without changing @annotation semantics.
+ *
+ * @deps    scopeResolution
+ * @reads   Class/Method nodes, HAS_METHOD edges, shared Spring AOP metadata
+ * @writes  synthetic CodeElement nodes, DEFINES/DECLARES/ADVISED_BY edges
+ */
+import type { PipelinePhase } from './types.js';
+export declare const DEFAULT_SPRING_AOP_MAX_CANDIDATE_INSPECTIONS_PER_ADVICE = 100000;
+export declare const DEFAULT_SPRING_AOP_MAX_CANDIDATE_INSPECTIONS = 2000000;
+export declare const DEFAULT_SPRING_AOP_MAX_ADVISED_EDGES_PER_ADVICE = 25000;
+export declare const DEFAULT_SPRING_AOP_MAX_ADVISED_EDGES = 100000;
+export interface SpringAopOutput {
+    readonly advisedByEdges: number;
+    readonly evidenceNodes: number;
+    readonly unresolvedPointcuts: number;
+    readonly candidateInspections: number;
+    readonly truncatedAdvices: number;
+}
+export interface SpringAopInheritanceOutput {
+    readonly inheritedBehaviorEdges: number;
+}
+export declare const springAopPhase: PipelinePhase<SpringAopOutput>;
+/**
+ * Propagate behavior evidence across the inheritance decisions materialized by
+ * MRO. This is deliberately separate from pointcut matching: `@annotation`
+ * continues to mean an annotation declared directly on the callable.
+ */
+export declare const springAopInheritancePhase: PipelinePhase<SpringAopInheritanceOutput>;

package/dist/core/ingestion/pipeline-phases/spring-aop.js

@@ -0,0 +1,439 @@
+/**
+ * Phase: springAop
+ *
+ * Materializes statically visible Spring proxy/advice behavior after every
+ * language resolver has attached normalized metadata to the shared graph.
+ * The post-MRO export in this file propagates declarative behavior through
+ * METHOD_OVERRIDES/METHOD_IMPLEMENTS without changing @annotation semantics.
+ *
+ * @deps    scopeResolution
+ * @reads   Class/Method nodes, HAS_METHOD edges, shared Spring AOP metadata
+ * @writes  synthetic CodeElement nodes, DEFINES/DECLARES/ADVISED_BY edges
+ */
+import { generateId } from '../../../lib/utils.js';
+import { decodeSpringAopReason, encodeSpringAopReason, getSpringAopGraphMetadata, parseSpringAopPointcut, SPRING_AOP_EVIDENCE_DESCRIPTION_PREFIX, springAopPointcutMatches, } from '../frameworks/spring/aop.js';
+import { createSpringAopCandidateIndex, } from '../frameworks/spring/aop-candidates.js';
+import { toZeroBasedLine } from '../utils/line-base.js';
+import { logger } from '../../logger.js';
+export const DEFAULT_SPRING_AOP_MAX_CANDIDATE_INSPECTIONS_PER_ADVICE = 100_000;
+export const DEFAULT_SPRING_AOP_MAX_CANDIDATE_INSPECTIONS = 2_000_000;
+export const DEFAULT_SPRING_AOP_MAX_ADVISED_EDGES_PER_ADVICE = 25_000;
+export const DEFAULT_SPRING_AOP_MAX_ADVISED_EDGES = 100_000;
+function simpleName(name) {
+    const separator = name.lastIndexOf('.');
+    return separator === -1 ? name : name.slice(separator + 1);
+}
+function eligibleMethod(node, owner, singletonInstanceClassIds) {
+    return (node.label === 'Method' &&
+        (node.properties.isStatic !== true ||
+            (owner !== undefined && singletonInstanceClassIds.has(owner.id))) &&
+        node.properties.visibility !== 'private');
+}
+function eligibleOwner(node) {
+    return node.label === 'Class' || node.label === 'Interface';
+}
+function addEvidenceNode(ctx, owner, annotation, line, discriminator, description) {
+    const evidenceId = generateId('CodeElement', `spring-aop:${owner.id}:${line}:${annotation}:${discriminator}`);
+    const evidence = {
+        id: evidenceId,
+        label: 'CodeElement',
+        properties: {
+            name: `@${simpleName(annotation)}`,
+            filePath: owner.properties.filePath,
+            startLine: toZeroBasedLine(line),
+            endLine: toZeroBasedLine(line),
+            isExported: false,
+            description: `${SPRING_AOP_EVIDENCE_DESCRIPTION_PREFIX}${description}`,
+        },
+    };
+    ctx.graph.addNode(evidence);
+    const fileId = generateId('File', owner.properties.filePath);
+    if (ctx.graph.getNode(fileId) !== undefined) {
+        ctx.graph.addRelationship({
+            id: generateId('DEFINES', `${fileId}->${evidenceId}`),
+            sourceId: fileId,
+            targetId: evidenceId,
+            type: 'DEFINES',
+            confidence: 1,
+            reason: 'spring-aop:evidence',
+        });
+    }
+    return evidence;
+}
+function emitBehavior(ctx, record, classMethods, ownerByMethod, singletonInstanceClassIds) {
+    const owner = ctx.graph.getNode(record.ownerId);
+    if (owner === undefined || (!eligibleOwner(owner) && owner.label !== 'Method')) {
+        return { edges: 0, evidence: 0 };
+    }
+    if (owner.label === 'Method' &&
+        !eligibleMethod(owner, ownerByMethod.get(owner.id), singletonInstanceClassIds)) {
+        return { edges: 0, evidence: 0 };
+    }
+    const evidence = addEvidenceNode(ctx, owner, record.annotation, record.line, `behavior:${record.behavior}`, `${record.behavior} interceptor; activation unknown; proxy possible`);
+    const reason = encodeSpringAopReason({
+        kind: 'behavior',
+        annotation: record.annotation,
+        behavior: record.behavior,
+        declaredOn: record.ownerKind === 'class' ? 'class' : 'method',
+        activation: 'unknown',
+        proxy: 'possible',
+    });
+    const sources = record.ownerKind === 'class' ? [owner, ...(classMethods.get(owner.id) ?? [])] : [owner];
+    let edges = 0;
+    for (const source of sources) {
+        if (!eligibleOwner(source) &&
+            !eligibleMethod(source, ownerByMethod.get(source.id), singletonInstanceClassIds)) {
+            continue;
+        }
+        ctx.graph.addRelationship({
+            id: generateId('ADVISED_BY', `${source.id}->${evidence.id}:${record.line}:${record.behavior}`),
+            sourceId: source.id,
+            targetId: evidence.id,
+            type: 'ADVISED_BY',
+            confidence: 1,
+            reason,
+        });
+        edges++;
+    }
+    return { edges, evidence: 1 };
+}
+function emitAspect(ctx, record) {
+    const owner = ctx.graph.getNode(record.ownerId);
+    if (owner === undefined || !eligibleOwner(owner))
+        return 0;
+    const evidence = addEvidenceNode(ctx, owner, record.annotation, record.line, 'aspect', 'AspectJ aspect marker; registration unknown; activation unknown');
+    ctx.graph.addRelationship({
+        id: generateId('DECLARES', `${owner.id}->${evidence.id}`),
+        sourceId: owner.id,
+        targetId: evidence.id,
+        type: 'DECLARES',
+        confidence: 1,
+        reason: encodeSpringAopReason({
+            kind: 'aspect',
+            annotation: record.annotation,
+            activation: 'unknown',
+            registration: 'unknown',
+        }),
+    });
+    return 1;
+}
+function pointcutReason(record, resolved) {
+    return {
+        kind: 'pointcut',
+        annotation: record.annotation,
+        pointcut: record.pointcut,
+        match: resolved ? 'static' : 'unresolved',
+        resolution: resolved ? 'resolved' : 'unknown',
+    };
+}
+function resolveBudget(value, fallback) {
+    return Number.isSafeInteger(value) && value !== undefined && value >= 0 ? value : fallback;
+}
+function budgetReached(limit, used) {
+    return limit !== 0 && used >= limit;
+}
+function emitAdvice(ctx, record, aspectClassIds, ownerByMethod, candidateIndex, methodAnnotations, budget) {
+    const adviceNode = ctx.graph.getNode(record.ownerId);
+    if (adviceNode === undefined || adviceNode.label !== 'Method') {
+        return { edges: 0, evidence: 0, unresolved: 0, inspections: 0, truncated: false };
+    }
+    const staticPointcut = record.pointcut;
+    const parsed = staticPointcut === null ? null : parseSpringAopPointcut(staticPointcut);
+    const isAdviceMethod = record.advice !== 'pointcut';
+    const adviceOwner = ownerByMethod.get(adviceNode.id);
+    const activeAspect = adviceOwner !== undefined && aspectClassIds.has(adviceOwner.id);
+    const resolved = parsed !== null && (!isAdviceMethod || activeAspect);
+    const evidence = addEvidenceNode(ctx, adviceNode, record.annotation, record.line, `pointcut:${record.advice}:${record.pointcut ?? '<dynamic>'}`, `${record.advice} pointcut ${record.pointcut ?? '<non-static>'}; resolution ${resolved ? 'resolved' : 'unknown'}`);
+    ctx.graph.addRelationship({
+        id: generateId('DECLARES', `${adviceNode.id}->${evidence.id}`),
+        sourceId: adviceNode.id,
+        targetId: evidence.id,
+        type: 'DECLARES',
+        confidence: 1,
+        reason: encodeSpringAopReason(pointcutReason(record, resolved)),
+    });
+    if (!isAdviceMethod || !resolved || parsed === null || staticPointcut === null) {
+        return {
+            edges: 0,
+            evidence: 1,
+            unresolved: resolved ? 0 : 1,
+            inspections: 0,
+            truncated: false,
+        };
+    }
+    let edges = 0;
+    let inspections = 0;
+    let truncated = false;
+    for (const candidate of candidateIndex.candidatesFor(parsed)) {
+        if (budgetReached(budget.maxInspectionsPerAdvice, inspections) ||
+            budgetReached(budget.maxInspections, budget.inspections)) {
+            truncated = true;
+            break;
+        }
+        inspections += 1;
+        budget.inspections += 1;
+        if (candidate.method.id === adviceNode.id)
+            continue;
+        if (aspectClassIds.has(candidate.owner.id))
+            continue;
+        if (!springAopPointcutMatches(parsed, candidate.owner, candidate.method, methodAnnotations.get(candidate.method.id))) {
+            continue;
+        }
+        if (budgetReached(budget.maxEdgesPerAdvice, edges) ||
+            budgetReached(budget.maxEdges, budget.edges)) {
+            truncated = true;
+            break;
+        }
+        ctx.graph.addRelationship({
+            id: generateId('ADVISED_BY', `${candidate.method.id}->${adviceNode.id}:${record.line}:${record.advice}`),
+            sourceId: candidate.method.id,
+            targetId: adviceNode.id,
+            type: 'ADVISED_BY',
+            confidence: 0.95,
+            reason: encodeSpringAopReason({
+                kind: 'advice',
+                annotation: record.annotation,
+                advice: record.advice,
+                pointcut: staticPointcut,
+                match: 'static',
+                activation: 'unknown',
+                proxy: 'possible',
+            }),
+        });
+        edges++;
+        budget.edges += 1;
+    }
+    return { edges, evidence: 1, unresolved: 0, inspections, truncated };
+}
+export const springAopPhase = {
+    name: 'springAop',
+    deps: ['scopeResolution'],
+    async execute(ctx) {
+        const metadata = getSpringAopGraphMetadata(ctx.graph);
+        if (metadata.aspects.length === 0 &&
+            metadata.behaviors.length === 0 &&
+            metadata.advices.length === 0) {
+            return {
+                advisedByEdges: 0,
+                evidenceNodes: 0,
+                unresolvedPointcuts: 0,
+                candidateInspections: 0,
+                truncatedAdvices: 0,
+            };
+        }
+        ctx.onProgress({
+            phase: 'enriching',
+            percent: 97,
+            message: 'Resolving Spring proxy and advice edges...',
+            stats: { filesProcessed: 0, totalFiles: 0, nodesCreated: ctx.graph.nodeCount },
+        });
+        const classMethods = new Map();
+        const ownerByMethod = new Map();
+        const methodAnnotations = new Map();
+        const candidates = [];
+        for (const relationship of ctx.graph.iterRelationshipsByType('HAS_METHOD')) {
+            const owner = ctx.graph.getNode(relationship.sourceId);
+            const method = ctx.graph.getNode(relationship.targetId);
+            if (owner === undefined || !eligibleOwner(owner) || method?.label !== 'Method')
+                continue;
+            const ownerFilePath = owner.properties.filePath;
+            if (typeof ownerFilePath !== 'string' || !metadata.candidateFilePaths.has(ownerFilePath)) {
+                continue;
+            }
+            ownerByMethod.set(method.id, owner);
+            if (!eligibleMethod(method, owner, metadata.singletonInstanceClassIds))
+                continue;
+            const methods = classMethods.get(owner.id) ?? [];
+            methods.push(method);
+            classMethods.set(owner.id, methods);
+            candidates.push({ method, owner });
+        }
+        let advisedByEdges = 0;
+        let evidenceNodes = 0;
+        let unresolvedPointcuts = 0;
+        let candidateInspections = 0;
+        let truncatedAdvices = 0;
+        const budget = {
+            maxInspectionsPerAdvice: resolveBudget(ctx.options?.springAopMaxCandidateInspectionsPerAdvice, DEFAULT_SPRING_AOP_MAX_CANDIDATE_INSPECTIONS_PER_ADVICE),
+            maxInspections: resolveBudget(ctx.options?.springAopMaxCandidateInspections, DEFAULT_SPRING_AOP_MAX_CANDIDATE_INSPECTIONS),
+            maxEdgesPerAdvice: resolveBudget(ctx.options?.springAopMaxAdvisedEdgesPerAdvice, DEFAULT_SPRING_AOP_MAX_ADVISED_EDGES_PER_ADVICE),
+            maxEdges: resolveBudget(ctx.options?.springAopMaxAdvisedEdges, DEFAULT_SPRING_AOP_MAX_ADVISED_EDGES),
+            inspections: 0,
+            edges: 0,
+        };
+        for (const aspect of metadata.aspects)
+            evidenceNodes += emitAspect(ctx, aspect);
+        for (const behavior of metadata.behaviors) {
+            // `@annotation` matches annotations declared directly on the method.
+            // Class-level behavior is fanned out by emitBehavior, but must not be
+            // copied here (that would model @within/@target semantics instead).
+            if (behavior.ownerKind === 'callable') {
+                const annotations = methodAnnotations.get(behavior.ownerId) ?? new Set();
+                annotations.add(behavior.annotation);
+                methodAnnotations.set(behavior.ownerId, annotations);
+            }
+            const emitted = emitBehavior(ctx, behavior, classMethods, ownerByMethod, metadata.singletonInstanceClassIds);
+            advisedByEdges += emitted.edges;
+            evidenceNodes += emitted.evidence;
+        }
+        const candidateIndex = createSpringAopCandidateIndex(candidates, methodAnnotations);
+        for (const advice of metadata.advices) {
+            const emitted = emitAdvice(ctx, advice, metadata.aspectClassIds, ownerByMethod, candidateIndex, methodAnnotations, budget);
+            advisedByEdges += emitted.edges;
+            evidenceNodes += emitted.evidence;
+            unresolvedPointcuts += emitted.unresolved;
+            candidateInspections += emitted.inspections;
+            if (emitted.truncated) {
+                truncatedAdvices += 1;
+                logger.warn(`[spring-aop] truncated advice ${advice.ownerId}: ` +
+                    `${emitted.inspections} candidate inspections, ${emitted.edges} edges emitted; ` +
+                    `run totals ${budget.inspections} inspections/${budget.edges} edges`);
+            }
+        }
+        if (truncatedAdvices > 0) {
+            ctx.onProgress({
+                phase: 'enriching',
+                percent: 97,
+                message: 'Spring AOP advice resolution truncated by configured budgets',
+                detail: `${truncatedAdvices} advice method(s); ${candidateInspections} inspections; ${budget.edges} advice edges`,
+                stats: { filesProcessed: 0, totalFiles: 0, nodesCreated: ctx.graph.nodeCount },
+            });
+        }
+        return {
+            advisedByEdges,
+            evidenceNodes,
+            unresolvedPointcuts,
+            candidateInspections,
+            truncatedAdvices,
+        };
+    },
+};
+function sameMethodSignature(left, right) {
+    if (left.properties.name !== right.properties.name)
+        return false;
+    const leftCount = left.properties.parameterCount;
+    const rightCount = right.properties.parameterCount;
+    if (typeof leftCount === 'number' && typeof rightCount === 'number' && leftCount !== rightCount) {
+        return false;
+    }
+    const leftTypes = left.properties.parameterTypes;
+    const rightTypes = right.properties.parameterTypes;
+    return !(Array.isArray(leftTypes) &&
+        Array.isArray(rightTypes) &&
+        leftTypes.length > 0 &&
+        rightTypes.length > 0 &&
+        (leftTypes.length !== rightTypes.length ||
+            leftTypes.some((type, index) => type !== rightTypes[index])));
+}
+/**
+ * Propagate behavior evidence across the inheritance decisions materialized by
+ * MRO. This is deliberately separate from pointcut matching: `@annotation`
+ * continues to mean an annotation declared directly on the callable.
+ */
+export const springAopInheritancePhase = {
+    name: 'springAopInheritance',
+    deps: ['springAop', 'mro'],
+    async execute(ctx) {
+        const metadata = getSpringAopGraphMetadata(ctx.graph);
+        const ownerByMethod = new Map();
+        const classMethods = new Map();
+        for (const relationship of ctx.graph.iterRelationshipsByType('HAS_METHOD')) {
+            const owner = ctx.graph.getNode(relationship.sourceId);
+            const method = ctx.graph.getNode(relationship.targetId);
+            if (owner === undefined || !eligibleOwner(owner) || method?.label !== 'Method')
+                continue;
+            ownerByMethod.set(method.id, owner);
+            const methods = classMethods.get(owner.id) ?? [];
+            methods.push(method);
+            classMethods.set(owner.id, methods);
+        }
+        const childrenByParent = new Map();
+        for (const type of ['EXTENDS', 'IMPLEMENTS']) {
+            for (const relationship of ctx.graph.iterRelationshipsByType(type)) {
+                const children = childrenByParent.get(relationship.targetId) ?? new Set();
+                children.add(relationship.sourceId);
+                childrenByParent.set(relationship.targetId, children);
+            }
+        }
+        const implementingMethods = new Map();
+        for (const relationship of ctx.graph.iterRelationshipsByType('METHOD_IMPLEMENTS')) {
+            const methods = implementingMethods.get(relationship.targetId) ?? new Set();
+            methods.add(relationship.sourceId);
+            implementingMethods.set(relationship.targetId, methods);
+        }
+        const overridingClasses = new Map();
+        for (const relationship of ctx.graph.iterRelationshipsByType('METHOD_OVERRIDES')) {
+            const classes = overridingClasses.get(relationship.targetId) ?? new Set();
+            classes.add(relationship.sourceId);
+            overridingClasses.set(relationship.targetId, classes);
+        }
+        const queue = [];
+        const emittedKeys = new Set();
+        for (const relationship of ctx.graph.iterRelationshipsByType('ADVISED_BY')) {
+            if (decodeSpringAopReason(relationship.reason)?.kind !== 'behavior')
+                continue;
+            const key = `${relationship.sourceId}\0${relationship.targetId}\0${relationship.reason}`;
+            emittedKeys.add(key);
+            queue.push({
+                sourceId: relationship.sourceId,
+                evidenceId: relationship.targetId,
+                reason: relationship.reason,
+            });
+        }
+        let inheritedBehaviorEdges = 0;
+        const enqueue = (source, item) => {
+            const owner = ownerByMethod.get(source.id);
+            if (!eligibleOwner(source) &&
+                !eligibleMethod(source, owner, metadata.singletonInstanceClassIds)) {
+                return;
+            }
+            const key = `${source.id}\0${item.evidenceId}\0${item.reason}`;
+            if (emittedKeys.has(key))
+                return;
+            emittedKeys.add(key);
+            ctx.graph.addRelationship({
+                id: generateId('ADVISED_BY', `${source.id}->${item.evidenceId}:inherited:${item.reason}`),
+                sourceId: source.id,
+                targetId: item.evidenceId,
+                type: 'ADVISED_BY',
+                confidence: 1,
+                reason: item.reason,
+            });
+            inheritedBehaviorEdges += 1;
+            queue.push({ sourceId: source.id, evidenceId: item.evidenceId, reason: item.reason });
+        };
+        for (let cursor = 0; cursor < queue.length; cursor += 1) {
+            const item = queue[cursor];
+            if (item === undefined)
+                continue;
+            const source = ctx.graph.getNode(item.sourceId);
+            if (source === undefined)
+                continue;
+            if (eligibleOwner(source)) {
+                for (const childId of childrenByParent.get(source.id) ?? []) {
+                    const child = ctx.graph.getNode(childId);
+                    if (child === undefined || !eligibleOwner(child))
+                        continue;
+                    enqueue(child, item);
+                    for (const method of classMethods.get(child.id) ?? [])
+                        enqueue(method, item);
+                }
+                continue;
+            }
+            if (source.label !== 'Method')
+                continue;
+            for (const methodId of implementingMethods.get(source.id) ?? []) {
+                const method = ctx.graph.getNode(methodId);
+                if (method !== undefined)
+                    enqueue(method, item);
+            }
+            for (const classId of overridingClasses.get(source.id) ?? []) {
+                const matches = (classMethods.get(classId) ?? []).filter((method) => sameMethodSignature(method, source));
+                const [match] = matches;
+                if (matches.length === 1 && match !== undefined)
+                    enqueue(match, item);
+            }
+        }
+        return { inheritedBehaviorEdges };
+    },
+};

package/dist/core/ingestion/pipeline-phases/spring-auto-configuration.d.ts

@@ -0,0 +1,34 @@
+/**
+ * Phase: springAutoConfiguration
+ *
+ * Discovers Spring Boot auto-configuration declarations from repository
+ * metadata after source symbols have been resolved. Metadata-backed classes
+ * are linked through DECLARES; when source is unavailable, a lightweight
+ * synthetic Class preserves the third-party/starter contribution.
+ *
+ * @deps    structure, scopeResolution
+ * @reads   META-INF/spring.factories and AutoConfiguration.imports
+ * @writes  Class nodes and DECLARES edges
+ */
+import type { PipelinePhase } from './types.js';
+export interface SpringAutoConfigurationEntry {
+    readonly className: string;
+    readonly line: number;
+}
+type SpringAutoConfigurationMetadataKind = 'imports' | 'spring-factories';
+interface SpringAutoConfigurationMetadataFile {
+    readonly filePath: string;
+    readonly kind: SpringAutoConfigurationMetadataKind;
+}
+export interface SpringAutoConfigurationOutput {
+    readonly metadataFiles: number;
+    readonly autoConfigurations: number;
+    readonly ambiguousAutoConfigurations: number;
+}
+export declare function classifySpringAutoConfigurationMetadata(filePath: string): SpringAutoConfigurationMetadataFile | null;
+/** Parse Boot 2.7+/3.x one-class-per-line auto-configuration imports. */
+export declare function parseSpringAutoConfigurationImports(content: string): SpringAutoConfigurationEntry[];
+/** Parse the legacy Boot 1.x/2.x EnableAutoConfiguration factory entry. */
+export declare function parseSpringFactoriesAutoConfigurations(content: string): SpringAutoConfigurationEntry[];
+export declare const springAutoConfigurationPhase: PipelinePhase<SpringAutoConfigurationOutput>;
+export {};