Files
codegraph/src/resolution/tier-synthesizer.ts
T
Colby McHenryandClaude Fable 5 bc45e9071d feat(routes): FastAPI prefixes, ASP.NET endpoint groups, wrapped server actions on the Screens tab
- python.ts postExtract: APIRouter(prefix=) and literal include_router(prefix=) composed down the include tree (module import, alias, local); a computed prefix leaves that mount alone; full-stack-fastapi-template 23 routes named by path
- csharp.ts: handler-first MapPost(Handler[, "path"]) under the endpoint-group class, the app's $"/api/{groupName}" head read in postExtract, RoutePrefix honoured; detection covers Endpoints/ files; CleanArchitecture 10 routes
- tier-synthesizer: a type argument between a client call and its parentheses (useSWR<T>(…), ky.get<T>(…)); recorded callee without it
- screens.ts: a file-scope navigation attributed to the value spanning it; a value nothing calls attributed to the functions mentioning it in importing files (request-time source read, bounded); steps.ts lends navigates edges to a value root
- tests: servers fixture (FastAPI prefixed routers, ASP.NET endpoint group end to end), frameworks.test.ts (group form, RoutePrefix), cross-tier (generic useSWR)
- docs: CHANGELOG, plan, playbook rows

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01REFyW9hmNrxhwN5wxRoAkC
2026-08-28 14:52:40 -05:00

944 lines
39 KiB
TypeScript

/**
* Cross-tier channels — the web's equivalent of the React Native bridge.
*
* A web app is two programs that talk over a wire the graph cannot see: the
* page calls `fetch('/api/users', { method: 'POST' })` and the API's
* `app.post('/api/users', createUser)` answers; a service puts `'welcome'` on
* the `email` queue and a `@Process('welcome')` method picks it up; a
* gateway's `this.server.emit('message')` lands in the component that wrote
* `socket.on('message', …)`. Each hop is a string on both sides, which is the
* evidence that lets a synthesizer close it — exactly as the RN event channel
* pairs `sendEvent(withName: "x")` with `addListener('x')`.
*
* Three channels, one scan:
*
* 1. **`http-client`** — a literal path in a client call (`fetch`, `axios.post`,
* `ky`, `got`, `$fetch`, `useFetch`, `useSWR`, or a project instance made by
* `axios.create(…)` / `ky.extend(…)`) → the ONE route node `METHOD path` it
* denotes. Template holes match a `:param`; a hole in front of the path
* (`${API_URL}/users`) matches a route by its tail; a variable url, a path
* no route serves, or a path two routes serve alike produce nothing.
* Edge: enclosing function → route, `tier: 'client→server'`.
* 2. **`queue-job`** — `queue.add('job', …)` where the queue is named (`new
* Queue('email')`, `@InjectQueue('email')`) → the `@Process('job')` method
* of the `@Processor('email')` class, a WorkerHost's `process`, a
* `new Worker('email', handler)`, or Bull's `queue.process('job', handler)`.
* 3. **`event-bus`** — `eventEmitter.emit('user.created')` → `@OnEvent('user.created')`
* (globs honoured); and sockets in both directions: a client's
* `socket.emit('x')` → the server's `@SubscribeMessage('x')` / `socket.on('x')`
* (`tier: 'client→server'`), the server's `server.emit('x')` → the client's
* `socket.on('x', …)` (`tier: 'server→client'`). The in-process
* `.on('x', fn)` ↔ `.emit('x')` pairing stays the emitter pass's.
*
* Every edge is `kind: 'calls'`, `provenance: 'heuristic'`, and carries
* `synthesizedBy`, `channel` (`http` | `queue` | `event` | `socket`), the
* `tier` when the direction is known, the `event` / `queue` / `method` /
* `href` it was paired on, and `registeredAt` — the route registration, the
* decorator, the `.on` — so a reader can check the pairing. Fan-out is capped
* per event as the emitter pass caps it; an HTTP pairing needs no cap because
* it is exact. Test suites and generated files are never sources: a supertest
* call is the test's story, and forty of them would make the route a hub.
*/
import type { Edge, Language, Node } from '../types';
import type { ResolutionContext } from './types';
import type { MaybeYield } from './cooperative-yield';
import { stripCommentsForRegex } from './strip-comments';
import { resolveImportPath } from './import-resolver';
import { isGeneratedFile } from '../extraction/generated-detection';
import { isTestPath } from '../search/query-utils';
import { HOLE, readStringAt } from './frameworks/expo-router';
import { enclosingFn, enclosingValue, makeLineAt } from './synth-utils';
const JS_FILE = /\.(?:[cm]?[jt]sx?)$/;
/** Events with more handlers or dispatchers than this are too generic to pair without type information. */
const EVENT_FANOUT_CAP = 6;
const HTTP_VERBS: ReadonlySet<string> = new Set(['GET', 'POST', 'PUT', 'PATCH', 'DELETE', 'HEAD', 'OPTIONS', 'ALL', 'ANY']);
export const TIER_CLIENT_TO_SERVER = 'client→server';
export const TIER_SERVER_TO_CLIENT = 'server→client';
// =============================================================================
// Source reading
// =============================================================================
/** Index just past the `)` that closes the `(` at `open`, skipping strings; -1 if unbalanced. */
function closeParen(s: string, open: number): number {
let depth = 0;
for (let i = open; i < s.length; i++) {
const ch = s[i];
if (ch === '"' || ch === "'") {
const q = ch;
i++;
while (i < s.length && s[i] !== q) {
if (s[i] === '\\') i++;
i++;
}
continue;
}
if (ch === '`') {
i = templateEnd(s, i);
continue;
}
if (ch === '(') depth++;
else if (ch === ')') {
depth--;
if (depth === 0) return i;
}
}
return -1;
}
/** Index of the backtick closing the template opening at `open`. */
function templateEnd(s: string, open: number): number {
let i = open + 1;
while (i < s.length) {
const ch = s[i];
if (ch === '\\') {
i += 2;
continue;
}
if (ch === '`') return i;
if (ch === '$' && s[i + 1] === '{') {
let depth = 0;
for (i = i + 1; i < s.length; i++) {
if (s[i] === '{') depth++;
else if (s[i] === '}') {
depth--;
if (depth === 0) break;
} else if (s[i] === '`') i = templateEnd(s, i);
}
}
i++;
}
return s.length;
}
/** The arguments of the call whose `(` is at `open`, split at depth-0 commas. */
function argumentsAt(s: string, open: number): string[] | null {
const close = closeParen(s, open);
if (close < 0) return null;
const inner = s.slice(open + 1, close);
const out: string[] = [];
let depth = 0;
let start = 0;
for (let i = 0; i < inner.length; i++) {
const c = inner[i];
if (c === '"' || c === "'") {
const q = c;
i++;
while (i < inner.length && inner[i] !== q) {
if (inner[i] === '\\') i++;
i++;
}
continue;
}
if (c === '`') {
i = templateEnd(inner, i);
continue;
}
if (c === '(' || c === '[' || c === '{') depth++;
else if (c === ')' || c === ']' || c === '}') depth--;
else if (c === ',' && depth === 0) {
out.push(inner.slice(start, i));
start = i + 1;
}
}
out.push(inner.slice(start));
return out.map((a) => a.trim()).filter((a, i) => a.length > 0 || i === 0);
}
/** The first string literal in `text`, holes kept; null when it opens with anything else. */
function leadingString(text: string): string | null {
const t = text.trim().replace(/^\(\s*/, '');
// `new URL('/x', base)` — the path is the first argument of the URL.
const url = /^new\s+URL\s*\(/.exec(t);
if (url) {
const args = argumentsAt(t, url[0].length - 1);
return args && args[0] ? leadingString(args[0]) : null;
}
if (t[0] === '"' || t[0] === "'" || t[0] === '`') return readStringAt(t, 0);
return null;
}
/** `method: 'POST'` inside an options object / config, upper-cased; null when absent or computed. */
function methodIn(text: string): string | null {
const m = /\bmethod\s*:\s*(['"`])([A-Za-z]+)\1/.exec(text);
return m ? m[2]!.toUpperCase() : null;
}
/** The first string literal anywhere in a decorator's arguments (`'x'`, `{ name: 'x' }`). */
function firstLiteral(args: string): string | null {
const m = /(['"`])([^'"`]+)\1/.exec(args);
return m ? m[2]! : null;
}
/** Every string literal in a decorator's arguments, for `@OnEvent(['a', 'b'])`. */
function allLiterals(args: string): string[] {
const out: string[] = [];
const re = /(['"`])([^'"`]+)\1/g;
let m: RegExpExecArray | null;
while ((m = re.exec(args)) !== null) out.push(m[2]!);
return out;
}
/**
* The name of the method a decorator sits on: skip further stacked decorators
* and modifiers after the decorator's `)`, then take the identifier before `(`.
*/
function methodNameAfter(safe: string, from: number): { name: string; index: number } | null {
let i = from;
const ws = /\s*/y;
const deco = /@[\w.]+/y;
const modifier = /(?:public|private|protected|async|static|readonly|override)\b/y;
const ident = /([A-Za-z_$][\w$]*)\s*[<(]/y;
const eat = (): void => {
ws.lastIndex = i;
if (ws.exec(safe)) i = ws.lastIndex;
};
for (;;) {
eat();
if (safe[i] !== '@') break;
deco.lastIndex = i;
if (!deco.exec(safe)) break;
i = deco.lastIndex;
eat();
if (safe[i] === '(') {
const close = closeParen(safe, i);
if (close < 0) return null;
i = close + 1;
}
}
for (;;) {
eat();
modifier.lastIndex = i;
if (modifier.exec(safe) && modifier.lastIndex > i) {
i = modifier.lastIndex;
continue;
}
break;
}
eat();
ident.lastIndex = i;
const m = ident.exec(safe);
return m ? { name: m[1]!, index: i } : null;
}
/** Every `@Name(` decorator in `safe` with its arguments and where it ends. */
function decorators(safe: string, name: string): Array<{ args: string; index: number; end: number }> {
const out: Array<{ args: string; index: number; end: number }> = [];
const re = new RegExp(`@${name}\\s*\\(`, 'g');
let m: RegExpExecArray | null;
while ((m = re.exec(safe)) !== null) {
const open = m.index + m[0].length - 1;
const close = closeParen(safe, open);
if (close < 0) continue;
out.push({ args: safe.slice(open + 1, close), index: m.index, end: close + 1 });
re.lastIndex = close + 1;
}
return out;
}
// =============================================================================
// Per-file facts, read once
// =============================================================================
interface FileFacts {
file: string;
safe: string;
nodes: Node[];
lineOf: (idx: number) => number;
/** The 0-based column of an index on its line — where the site reader looks for the call. */
columnOf: (idx: number) => number;
/** Lines a framework resolver made a route node on — registrations, never client calls. */
routeLines: Set<number>;
/** Local names bound to an HTTP client instance, with their literal base URL when written. */
clients: Map<string, { baseURL: string | null }>;
/** The module's default export is a client instance. */
defaultClient: { baseURL: string | null } | null;
/** Local names bound to a named queue (`new Queue('email')`, `@InjectQueue('email') x`). */
queues: Map<string, string>;
/** The file holds a socket server (a gateway, `io.on('connection')`, `new Server(…)`). */
socketServer: boolean;
}
const CLIENT_FACTORY =
/\b(?:export\s+)?(?:const|let|var)\s+([A-Za-z_$][\w$]*)\s*(?::[^=;]*?)?=\s*(?:await\s+)?(?:(?:axios|ky|got|ofetch|\$fetch|wretch|redaxios)\s*\.\s*(?:create|extend)|new\s+Axios|wretch)\s*\(/g;
const DEFAULT_CLIENT_FACTORY = /\bexport\s+default\s+(?:(?:axios|ky|got|ofetch|\$fetch|wretch|redaxios)\s*\.\s*(?:create|extend)|new\s+Axios|wretch)\s*\(/;
const QUEUE_BINDING =
/\b(?:export\s+)?(?:const|let|var)\s+([A-Za-z_$][\w$]*)\s*(?::[^=;]*?)?=\s*(?:new\s+)?(?:Queue|Bull|BullQueue)\s*(?:<[^>]*>)?\s*\(\s*(['"`])([^'"`]+)\2/g;
const INJECT_QUEUE = /@InjectQueue\s*\(\s*(['"`])([^'"`]+)\1\s*\)\s*(?:(?:private|public|protected|readonly)\s+)*([A-Za-z_$][\w$]*)/g;
const SOCKET_SERVER_FILE = /@WebSocketGateway\s*\(|@SubscribeMessage\s*\(|@WebSocketServer\s*\(|\bnew\s+(?:Server|SocketIOServer|WebSocketServer|WebSocket\.Server|WSServer)\b|\.on\s*\(\s*['"]connection['"]/;
function baseUrlIn(safe: string, open: number): string | null {
const args = argumentsAt(safe, open);
const config = args?.[0] ?? '';
const m = /\b(?:baseURL|baseUrl|prefixUrl|baseURI)\s*:\s*/.exec(config);
if (!m) return null;
return readStringAt(config, m.index + m[0].length);
}
function readFacts(ctx: ResolutionContext, file: string): FileFacts | null {
const content = ctx.readFile(file);
if (!content) return null;
const safe = stripCommentsForRegex(content, 'typescript');
const nodes = ctx.getNodesInFile(file);
const routeLines = new Set<number>();
for (const n of nodes) if (n.kind === 'route') routeLines.add(n.startLine);
const clients = new Map<string, { baseURL: string | null }>();
CLIENT_FACTORY.lastIndex = 0;
let m: RegExpExecArray | null;
while ((m = CLIENT_FACTORY.exec(safe)) !== null) {
clients.set(m[1]!, { baseURL: baseUrlIn(safe, m.index + m[0].length - 1) });
}
const dm = DEFAULT_CLIENT_FACTORY.exec(safe);
const defaultClient = dm ? { baseURL: baseUrlIn(safe, dm.index + dm[0].length - 1) } : null;
const queues = new Map<string, string>();
QUEUE_BINDING.lastIndex = 0;
while ((m = QUEUE_BINDING.exec(safe)) !== null) queues.set(m[1]!, m[3]!);
INJECT_QUEUE.lastIndex = 0;
while ((m = INJECT_QUEUE.exec(safe)) !== null) queues.set(m[3]!, m[2]!);
return {
file,
safe,
nodes,
lineOf: makeLineAt(safe, 1),
columnOf: (idx: number) => idx - (safe.lastIndexOf('\n', idx - 1) + 1),
routeLines,
clients,
defaultClient,
queues,
socketServer: SOCKET_SERVER_FILE.test(safe),
};
}
/** Facts for the file a local name is imported from, when the import resolves to a project file. */
function importedFacts(
ctx: ResolutionContext,
facts: FileFacts,
localName: string,
cache: Map<string, FileFacts | null>
): { facts: FileFacts; exportedName: string; isDefault: boolean } | null {
const lang: Language = facts.file.endsWith('x') ? 'tsx' : 'typescript';
const im = ctx.getImportMappings(facts.file, lang).find((i) => i.localName === localName);
if (!im) return null;
// The mappings name the module as written; the file it is comes from the
// same resolution the import resolver uses (aliases, extensions, index files).
const resolved = im.resolvedPath ?? resolveImportPath(im.source, facts.file, lang, ctx);
if (!resolved) return null;
let target = cache.get(resolved);
if (target === undefined) {
target = JS_FILE.test(resolved) ? readFacts(ctx, resolved) : null;
cache.set(resolved, target);
}
return target ? { facts: target, exportedName: im.exportedName, isDefault: im.isDefault } : null;
}
// =============================================================================
// 1. HTTP client → route
// =============================================================================
/** A receiver that is an HTTP client by name alone. */
const CLIENT_NAMES =
/^(?:axios|ky|got|superagent|http|https|httpClient|httpService|api|apiClient|client|restClient|request|agent|fetcher|instance|\$api|\$http|\$axios|axiosInstance|Axios|HttpClient|backend|server)$/;
/** A receiver that registers routes, never a client — unless it was made by a client factory. */
const SERVER_NAMES = /^(?:app|router|route|routes|express|fastify|koa|hono|elysia|apiRouter|v1|v2|r)$/;
/** A type argument between the callee and its `(` — `useSWR<TeamData>('/api/team')`, `ky.get<User>('/x')`. */
const GENERIC = String.raw`(?:<[^()<>]*(?:<[^()<>]*>[^()<>]*)*>)?`;
const BARE_CLIENT_CALL = new RegExp(String.raw`(?:(?:window|globalThis|global)\s*\.\s*)?\b(fetch|\$fetch|ofetch|axios|ky|got|useFetch|useSWR)\s*${GENERIC}\s*\(`, 'g');
const MEMBER_CLIENT_CALL = new RegExp(
String.raw`((?:this\s*\.\s*)?[A-Za-z_$][\w$]*(?:\s*\.\s*[A-Za-z_$][\w$]*)*)\s*\.\s*(get|post|put|patch|delete|head|options|request|\$get|\$post|\$put|\$patch|\$delete)\s*${GENERIC}\s*\(`,
'g'
);
interface HttpRoute {
node: Node;
method: string;
segs: string[];
}
interface HttpSite {
fn: Node;
file: string;
line: number;
column: number;
/** The call as written, `fetch` / `api.get` — what the Steps walk must not also draw as an effect. */
callee: string;
method: string;
segs: string[];
/** The path began with a hole — a base URL — and matches a route by its tail. */
suffix: boolean;
display: string;
}
function httpRoutes(ctx: ResolutionContext): HttpRoute[] {
const out: HttpRoute[] = [];
for (const node of ctx.getNodesByKind('route')) {
const space = node.name.indexOf(' ');
if (space <= 0) continue;
const method = node.name.slice(0, space).toUpperCase();
if (!HTTP_VERBS.has(method)) continue;
const path = node.name.slice(space + 1).trim();
if (!path.startsWith('/')) continue;
out.push({ node, method, segs: path.split('/').filter((s) => s.length > 0) });
}
return out;
}
const PARAM_SEG = /^(?::|\{|\[|<|\*)|\?$/;
const CATCH_ALL = /^(?:\*|\[\.\.\.|\{\*|:[\w$]+\*$|\{[\w$]+:\*\}|\*[\w$]*$)/;
/** How well the client's segments match a route's; null when they do not. A literal match beats a parameter's. */
function scorePath(client: readonly string[], route: readonly string[]): number | null {
let score = 0;
let i = 0;
for (let r = 0; r < route.length; r++) {
const seg = route[r]!;
if (CATCH_ALL.test(seg)) {
if (i >= client.length) return null;
score += client.length - i;
i = client.length;
continue;
}
if (i >= client.length) return null;
const c = client[i]!;
// A hole (`${id}`) fills a route's parameter; it never stands in for a
// literal segment — `/api/products/${id}` is not `/api/products/top`.
if (PARAM_SEG.test(seg)) score += 2;
else if (c === seg) score += 3;
else return null;
i++;
}
return i === client.length ? score : null;
}
function matchHttp(site: HttpSite, routes: readonly HttpRoute[]): HttpRoute | null {
let best: HttpRoute | null = null;
let bestScore = -1;
let tied = false;
for (const r of routes) {
if (r.method !== 'ALL' && r.method !== 'ANY' && r.method !== site.method) continue;
let score: number | null;
if (site.suffix) {
// A base URL hides a prefix the route may spell out (`${API}/users` for
// `GET /api/users`) — but a one-segment tail names half the routes in
// an index, and a long hidden prefix is a different API. Two segments
// of tail at least, two of prefix at most.
if (site.segs.length < 2 || r.segs.length < site.segs.length || r.segs.length - site.segs.length > 2) continue;
score = scorePath(site.segs, r.segs.slice(r.segs.length - site.segs.length));
} else score = scorePath(site.segs, r.segs);
if (score === null) continue;
if (score > bestScore) {
best = r;
bestScore = score;
tied = false;
} else if (score === bestScore) tied = true;
}
return tied ? null : best;
}
/**
* The path a client call names, as segments, with `${…}` as `*`; `suffix`
* when a base URL came first. Null when the path is not literal enough: a
* relative path with no base, or nothing but holes.
*/
function clientPath(raw: string, baseURL: string | null): { segs: string[]; suffix: boolean; display: string } | null {
let p = raw;
const cut = p.search(/[?#]/);
if (cut >= 0) p = p.slice(0, cut);
let suffix = false;
const absolute = /^(?:[a-z][a-z0-9+.-]*:)?\/\/[^/]*(\/.*)?$/i.exec(p);
if (absolute) p = absolute[1] ?? '/';
else if (!p.startsWith('/')) {
if (p.startsWith(HOLE)) {
const rest = p.slice(1);
if (!rest.startsWith('/')) return null;
p = rest;
suffix = true;
} else if (baseURL !== null) {
const base = clientPath(baseURL, null);
if (!base) {
// A base that is itself a hole: match by the tail.
if (!baseURL.includes(HOLE)) return null;
suffix = true;
p = '/' + p;
} else {
suffix = base.suffix;
p = '/' + [...base.segs, ...p.split('/')].filter(Boolean).join('/');
}
} else return null;
} else if (baseURL !== null) {
// An instance with a literal path base: axios joins `baseURL + url`.
const base = clientPath(baseURL, null);
if (base && base.segs.length > 0) {
suffix = base.suffix;
p = '/' + [...base.segs, ...p.split('/')].filter(Boolean).join('/');
} else if (!base && baseURL.includes(HOLE)) suffix = true;
}
const segs = p
.split('/')
.filter((s) => s.length > 0)
.map((s) => (s.includes(HOLE) ? '*' : s));
if (segs.length > 0 && segs.every((s) => s === '*')) return null;
return { segs, suffix, display: '/' + segs.map((s) => (s === '*' ? '${…}' : s)).join('/') };
}
/** What a member-call receiver is: a client (with its base URL), or nothing. */
function clientFor(
ctx: ResolutionContext,
facts: FileFacts,
receiver: string,
cache: Map<string, FileFacts | null>
): { baseURL: string | null } | null {
const chain = receiver.replace(/\s+/g, '').replace(/^this\./, '').split('.');
const head = chain[0]!;
const last = chain[chain.length - 1]!;
const local = facts.clients.get(head);
if (local) return local;
const imported = importedFacts(ctx, facts, head, cache);
if (imported) {
const bound = imported.isDefault ? imported.facts.defaultClient : imported.facts.clients.get(imported.exportedName) ?? null;
if (bound) return bound;
}
if (SERVER_NAMES.test(last) || SERVER_NAMES.test(head)) return null;
if (CLIENT_NAMES.test(last)) return { baseURL: null };
return null;
}
function collectHttpSites(ctx: ResolutionContext, facts: FileFacts, sites: HttpSite[], cache: Map<string, FileFacts | null>): void {
const { safe, nodes, lineOf } = facts;
const add = (index: number, open: number, verb: string | null, baseURL: string | null): void => {
const line = lineOf(index);
const callee = safe.slice(index, open).replace(/\s+/g, '').replace(/<.*>$/, '');
if (facts.routeLines.has(line)) return; // a registration the resolver already read
const fn = enclosingFn(nodes, line);
if (!fn) return;
const args = argumentsAt(safe, open);
if (!args || !args[0]) return;
let first = args[0];
let method = verb;
// `axios({ url, method })`, `.request({ url, method })`, `ky(url, { method })`.
if (first.trimStart().startsWith('{')) {
const url = /\burl\s*:\s*/.exec(first);
if (!url) return;
method = method ?? methodIn(first) ?? 'GET';
first = first.slice(url.index + url[0].length);
} else if (method === null) {
method = methodIn(args.slice(1).join(',')) ?? 'GET';
}
const literal = leadingString(first);
if (literal === null) return;
const path = clientPath(literal, baseURL);
if (!path) return;
sites.push({ fn, file: facts.file, line, column: facts.columnOf(index), callee, method, segs: path.segs, suffix: path.suffix, display: path.display });
};
BARE_CLIENT_CALL.lastIndex = 0;
let m: RegExpExecArray | null;
while ((m = BARE_CLIENT_CALL.exec(safe)) !== null) {
// `this.fetch(…)` / `repo.fetch(…)` is a project method, not the platform's.
const before = safe[m.index - 1];
if (before === '.' && !/^(?:window|globalThis|global)\s*\./.test(m[0])) continue;
add(m.index, m.index + m[0].length - 1, null, null);
}
MEMBER_CLIENT_CALL.lastIndex = 0;
while ((m = MEMBER_CLIENT_CALL.exec(safe)) !== null) {
const client = clientFor(ctx, facts, m[1]!, cache);
if (!client) continue;
const verb = m[2]!.replace(/^\$/, '').toUpperCase();
add(m.index, m.index + m[0].length - 1, verb === 'REQUEST' ? null : verb, client.baseURL);
}
}
// =============================================================================
// 2. Queue job → consumer
// =============================================================================
const QUEUE_ADD = /((?:this\s*\.\s*)?[A-Za-z_$][\w$]*(?:\s*\.\s*[A-Za-z_$][\w$]*)*)\s*\.\s*add\s*\(\s*(['"`])([^'"`]+)\2/g;
const QUEUE_SHAPED = /queue|jobs?$|worker|bull|flow|producer/i;
const NEW_WORKER = /\bnew\s+Worker\s*(?:<[^>]*>)?\s*\(\s*(['"`])([^'"`]+)\1\s*,\s*/g;
const QUEUE_PROCESS = /((?:this\s*\.\s*)?[A-Za-z_$][\w$]*(?:\s*\.\s*[A-Za-z_$][\w$]*)*)\s*\.\s*process\s*\(\s*(?:(['"`])([^'"`]+)\2\s*,\s*)?(?:\d+\s*,\s*)?/g;
/** A handler argument: a named function (group 1), or an inline function. */
const HANDLER_ARG = /^(?:(?:async\s+)?([A-Za-z_$][\w$.]*)\s*(?:[,)]|$)|(?:async\s*)?(?:\(|function\b|[A-Za-z_$][\w$]*\s*=>))/;
interface QueueProducer {
fn: Node;
file: string;
line: number;
column: number;
callee: string;
queue: string | null;
job: string;
}
interface QueueConsumer {
node: Node;
file: string;
line: number;
queue: string | null;
/** Null: every job on the queue (`@Process()` with no name, a WorkerHost's `process`, `new Worker`). */
job: string | null;
}
/** The queue a receiver is bound to, by its binding in this file or the file it is imported from. */
function queueFor(ctx: ResolutionContext, facts: FileFacts, receiver: string, cache: Map<string, FileFacts | null>): string | null {
const chain = receiver.replace(/\s+/g, '').replace(/^this\./, '').split('.');
const head = chain[0]!;
const own = facts.queues.get(head);
if (own) return own;
const imported = importedFacts(ctx, facts, head, cache);
if (imported) {
const bound = imported.facts.queues.get(imported.exportedName);
if (bound) return bound;
}
return null;
}
/** The function a handler argument names or encloses; null when it is neither. */
function handlerNode(ctx: ResolutionContext, facts: FileFacts, text: string, line: number, cache: Map<string, FileFacts | null>): Node | null {
const m = HANDLER_ARG.exec(text.trimStart());
if (!m) return null;
if (m[1]) {
const name = m[1].split('.').pop()!;
const candidates = ctx.getNodesByName(name).filter((n) => n.kind === 'function' || n.kind === 'method');
const local = candidates.filter((n) => n.filePath === facts.file);
if (local.length === 1) return local[0]!;
if (local.length > 1) return null;
const imported = importedFacts(ctx, facts, m[1].split('.')[0]!, cache);
if (imported) {
const viaImport = candidates.filter((n) => n.filePath === imported.facts.file);
if (viaImport.length === 1) return viaImport[0]!;
}
return candidates.length === 1 ? candidates[0]! : null;
}
return enclosingFn(facts.nodes, line) ?? enclosingValue(facts.nodes, line);
}
/** The nearest class declared at or after `index`, as its node. */
function classAfter(facts: FileFacts, index: number): Node | null {
const m = /\bclass\s+([A-Za-z_$][\w$]*)/g;
m.lastIndex = index;
const hit = m.exec(facts.safe);
if (!hit) return null;
const line = facts.lineOf(hit.index);
return facts.nodes.find((n) => n.kind === 'class' && n.name === hit[1] && n.startLine >= line - 2) ?? null;
}
/** The method node a decorator at `end` sits on, inside `cls` when given. */
function decoratedMethod(facts: FileFacts, end: number, cls: Node | null): Node | null {
const named = methodNameAfter(facts.safe, end);
if (!named) return null;
const line = facts.lineOf(named.index);
return (
facts.nodes.find(
(n) =>
(n.kind === 'method' || n.kind === 'function') &&
n.name === named.name &&
n.startLine >= line - 1 &&
n.startLine <= line + 1 &&
(!cls || (n.startLine >= cls.startLine && n.endLine <= cls.endLine))
) ?? null
);
}
function collectQueue(ctx: ResolutionContext, facts: FileFacts, producers: QueueProducer[], consumers: QueueConsumer[], cache: Map<string, FileFacts | null>): void {
const { safe, nodes, lineOf } = facts;
let m: RegExpExecArray | null;
QUEUE_ADD.lastIndex = 0;
while ((m = QUEUE_ADD.exec(safe)) !== null) {
const receiver = m[1]!;
const queue = queueFor(ctx, facts, receiver, cache);
const last = receiver.replace(/\s+/g, '').split('.').pop()!;
if (queue === null && !QUEUE_SHAPED.test(last)) continue;
const line = lineOf(m.index);
const fn = enclosingFn(nodes, line);
if (!fn) continue;
producers.push({ fn, file: facts.file, line, column: facts.columnOf(m.index), callee: `${receiver.replace(/\s+/g, '')}.add`, queue, job: m[3]! });
}
// Nest: `@Processor('email')` on a class; `@Process('welcome')` on its methods,
// or a WorkerHost's `process(job)`.
for (const proc of decorators(safe, 'Processor')) {
const queue = firstLiteral(proc.args);
const cls = classAfter(facts, proc.end);
if (!cls) continue;
let any = false;
for (const job of decorators(safe, 'Process')) {
const line = lineOf(job.index);
if (line < cls.startLine || line > cls.endLine) continue;
const method = decoratedMethod(facts, job.end, cls);
if (!method) continue;
any = true;
consumers.push({ node: method, file: facts.file, line, queue, job: firstLiteral(job.args) });
}
if (!any) {
const process = nodes.find((n) => n.kind === 'method' && n.name === 'process' && n.startLine >= cls.startLine && n.endLine <= cls.endLine);
if (process) consumers.push({ node: process, file: facts.file, line: process.startLine, queue, job: null });
}
}
// BullMQ: `new Worker('email', handler)`.
NEW_WORKER.lastIndex = 0;
while ((m = NEW_WORKER.exec(safe)) !== null) {
const line = lineOf(m.index);
const node = handlerNode(ctx, facts, safe.slice(m.index + m[0].length, m.index + m[0].length + 200), line, cache);
if (!node) continue;
consumers.push({ node, file: facts.file, line, queue: m[2]!, job: null });
}
// Bull: `queue.process('welcome', handler)` / `queue.process(handler)`.
QUEUE_PROCESS.lastIndex = 0;
while ((m = QUEUE_PROCESS.exec(safe)) !== null) {
const receiver = m[1]!;
const queue = queueFor(ctx, facts, receiver, cache);
const last = receiver.replace(/\s+/g, '').split('.').pop()!;
if (queue === null && !QUEUE_SHAPED.test(last)) continue;
const line = lineOf(m.index);
const node = handlerNode(ctx, facts, safe.slice(m.index + m[0].length, m.index + m[0].length + 200), line, cache);
if (!node) continue;
consumers.push({ node, file: facts.file, line, queue, job: m[3] ?? null });
}
}
function pairQueue(producers: readonly QueueProducer[], consumers: readonly QueueConsumer[], edges: Edge[], seen: Set<string>): void {
for (const p of producers) {
let candidates = consumers.filter((c) => (p.queue === null || c.queue === null || c.queue === p.queue) && (c.job === null || c.job === p.job));
// The most specific pairing wins: the job by name on the named queue,
// then the job by name, then the queue's default consumer.
const exact = candidates.filter((c) => c.job === p.job && c.queue === p.queue && p.queue !== null);
if (exact.length > 0) candidates = exact;
else {
const byJob = candidates.filter((c) => c.job === p.job);
if (byJob.length > 0) candidates = byJob;
else if (p.queue === null) continue; // an unnamed queue and no consumer naming the job: a guess
else candidates = candidates.filter((c) => c.queue === p.queue);
}
if (candidates.length === 0 || candidates.length > EVENT_FANOUT_CAP) continue;
for (const c of candidates) {
if (c.node.id === p.fn.id) continue;
const key = `${p.fn.id}>${c.node.id}`;
if (seen.has(key)) continue;
seen.add(key);
edges.push({
source: p.fn.id,
target: c.node.id,
kind: 'calls',
line: p.line,
column: p.column,
provenance: 'heuristic',
metadata: {
synthesizedBy: 'queue-job',
channel: 'queue',
callee: p.callee,
event: p.job,
...(p.queue ?? c.queue ? { queue: p.queue ?? c.queue } : {}),
registeredAt: `${c.file}:${c.line}`,
},
});
}
}
}
// =============================================================================
// 3. Events: a bus, and sockets both ways
// =============================================================================
const EMIT = /((?:[\w$]+(?:\([^()]*\))?\s*\.\s*)*[\w$]+)\s*\.\s*(emit|emitAsync)\s*\(\s*(['"`])([^'"`\n]+)\3/g;
const SOCKET_ON = /((?:[\w$]+(?:\([^()]*\))?\s*\.\s*)*[\w$]+)\s*\.\s*(?:on|once)\s*\(\s*(['"`])([^'"`\n]+)\2\s*,\s*/g;
const SOCKET_WORDS = /^(?:socket|io|ws|wss|client|server|namespace|nsp|conn|connection|gateway|broadcast|to|in|of|except|volatile|local|sockets|socketServer|wsServer|room|channel|pusher|ably|ioClient|socketClient|sock)$/;
const BUS_WORDS = /^(?:eventEmitter|emitter|events|eventBus|bus|dispatcher|pubsub|publisher|eventPublisher|ee|hub|mediator|broker|messageBus|appEvents|domainEvents|eventsService|eventService)$/;
/** The transport's own events — every socket emits and handles them; pairing them says nothing. */
const GENERIC_EVENT =
/^(?:error|connect|connect_error|connect_failed|connection|disconnect|disconnecting|reconnect|reconnect_attempt|reconnecting|reconnect_error|reconnect_failed|close|open|end|data|ready|drain|finish|pipe|unpipe|listening|timeout|ping|pong|upgrade|newListener|removeListener)$/;
interface Dispatch {
fn: Node;
file: string;
line: number;
column: number;
callee: string;
event: string;
shape: 'bus' | 'socket';
side: 'server' | 'client';
}
interface Handler {
node: Node;
file: string;
line: number;
/** An event name, or an `@OnEvent` glob. */
pattern: string;
kind: 'bus' | 'socket';
side: 'server' | 'client';
}
function shapeOf(receiver: string): 'bus' | 'socket' | null {
const segs = receiver.replace(/\([^()]*\)/g, '').replace(/\s+/g, '').split('.').filter((s) => s !== 'this');
if (segs.some((s) => SOCKET_WORDS.test(s))) return 'socket';
if (segs.some((s) => BUS_WORDS.test(s))) return 'bus';
return null;
}
function collectEvents(ctx: ResolutionContext, facts: FileFacts, dispatches: Dispatch[], handlers: Handler[], cache: Map<string, FileFacts | null>): void {
const { safe, nodes, lineOf } = facts;
const side: 'server' | 'client' = facts.socketServer ? 'server' : 'client';
let m: RegExpExecArray | null;
EMIT.lastIndex = 0;
while ((m = EMIT.exec(safe)) !== null) {
const shape = shapeOf(m[1]!);
if (!shape || GENERIC_EVENT.test(m[4]!)) continue;
const line = lineOf(m.index);
const fn = enclosingFn(nodes, line);
if (!fn) continue;
dispatches.push({ fn, file: facts.file, line, column: facts.columnOf(m.index), callee: `${m[1]!.replace(/\s+/g, '')}.${m[2]!}`, event: m[4]!, shape, side });
}
for (const d of decorators(safe, 'OnEvent')) {
const method = decoratedMethod(facts, d.end, null);
if (!method) continue;
const patterns = d.args.trimStart().startsWith('[') ? allLiterals(d.args) : [firstLiteral(d.args)].filter((x): x is string => x !== null);
for (const pattern of patterns) handlers.push({ node: method, file: facts.file, line: lineOf(d.index), pattern, kind: 'bus', side });
}
for (const d of decorators(safe, 'SubscribeMessage')) {
const method = decoratedMethod(facts, d.end, null);
const event = firstLiteral(d.args);
if (!method || event === null) continue;
handlers.push({ node: method, file: facts.file, line: lineOf(d.index), pattern: event, kind: 'socket', side: 'server' });
}
SOCKET_ON.lastIndex = 0;
while ((m = SOCKET_ON.exec(safe)) !== null) {
if (shapeOf(m[1]!) !== 'socket' || GENERIC_EVENT.test(m[3]!)) continue;
const line = lineOf(m.index);
const node = handlerNode(ctx, facts, safe.slice(m.index + m[0].length, m.index + m[0].length + 200), line, cache);
if (!node) continue;
handlers.push({ node, file: facts.file, line, pattern: m[3]!, kind: 'socket', side });
}
}
/** `user.*` matches one segment, `**` any; anything else is exact. */
function eventMatches(pattern: string, event: string): boolean {
if (pattern === event) return true;
if (!pattern.includes('*')) return false;
const re = new RegExp('^' + pattern.split('**').map((part) => part.split('*').map(escapeRe).join('[^.]+')).join('.*') + '$');
return re.test(event);
}
function escapeRe(s: string): string {
return s.replace(/[.*+?^${}()|[\]\\]/g, '\\$&');
}
function pairEvents(dispatches: readonly Dispatch[], handlers: readonly Handler[], edges: Edge[], seen: Set<string>): void {
// Fan-out is judged per event name on each side, as the emitter pass does.
const dispatchesByEvent = new Map<string, Dispatch[]>();
for (const d of dispatches) dispatchesByEvent.set(`${d.shape}:${d.event}`, [...(dispatchesByEvent.get(`${d.shape}:${d.event}`) ?? []), d]);
for (const [, group] of dispatchesByEvent) {
if (group.length > EVENT_FANOUT_CAP) continue;
for (const d of group) {
let matched: Handler[];
let tier: string | null = null;
if (d.shape === 'bus') matched = handlers.filter((h) => h.kind === 'bus' && eventMatches(h.pattern, d.event));
else if (d.side === 'client') {
matched = handlers.filter((h) => h.kind === 'socket' && h.side === 'server' && h.pattern === d.event);
tier = TIER_CLIENT_TO_SERVER;
} else {
matched = handlers.filter((h) => h.kind === 'socket' && h.side === 'client' && h.pattern === d.event);
tier = TIER_SERVER_TO_CLIENT;
}
if (matched.length === 0 || matched.length > EVENT_FANOUT_CAP) continue;
for (const h of matched) {
if (h.node.id === d.fn.id) continue;
const key = `${d.fn.id}>${h.node.id}`;
if (seen.has(key)) continue;
seen.add(key);
edges.push({
source: d.fn.id,
target: h.node.id,
kind: 'calls',
line: d.line,
column: d.column,
provenance: 'heuristic',
metadata: {
synthesizedBy: 'event-bus',
channel: d.shape === 'bus' ? 'event' : 'socket',
callee: d.callee,
event: d.event,
...(tier ? { tier } : {}),
registeredAt: `${h.file}:${h.line}`,
},
});
}
}
}
}
// =============================================================================
// The pass
// =============================================================================
const HTTP_GATE = /\b(?:fetch|\$fetch|ofetch|axios|ky|got|useFetch|useSWR)\b|\.\s*(?:get|post|put|patch|delete|head|options|request|\$get|\$post)\s*[<(]/;
const QUEUE_GATE = /\.\s*add\s*\(|@Processor\s*\(|\bnew\s+Worker\s*[<(]|\.\s*process\s*\(/;
const EVENT_GATE = /\.\s*(?:emit|emitAsync|on|once)\s*\(|@OnEvent\s*\(|@SubscribeMessage\s*\(/;
export async function crossTierEdges(ctx: ResolutionContext, onYield: MaybeYield): Promise<Edge[]> {
const routes = httpRoutes(ctx);
const httpSites: HttpSite[] = [];
const producers: QueueProducer[] = [];
const consumers: QueueConsumer[] = [];
const dispatches: Dispatch[] = [];
const handlers: Handler[] = [];
const cache = new Map<string, FileFacts | null>();
let scanned = 0;
for (const file of ctx.getAllFiles()) {
if (!JS_FILE.test(file) || isTestPath(file) || isGeneratedFile(file)) continue;
if ((++scanned & 63) === 0) await onYield();
const content = ctx.readFile(file);
if (!content) continue;
const wantsHttp = routes.length > 0 && HTTP_GATE.test(content);
const wantsQueue = QUEUE_GATE.test(content);
const wantsEvents = EVENT_GATE.test(content);
if (!wantsHttp && !wantsQueue && !wantsEvents) continue;
let facts = cache.get(file);
if (facts === undefined) {
facts = readFacts(ctx, file);
cache.set(file, facts);
}
if (!facts) continue;
if (wantsHttp) collectHttpSites(ctx, facts, httpSites, cache);
if (wantsQueue) collectQueue(ctx, facts, producers, consumers, cache);
if (wantsEvents) collectEvents(ctx, facts, dispatches, handlers, cache);
}
const edges: Edge[] = [];
const seen = new Set<string>();
for (const site of httpSites) {
const route = matchHttp(site, routes);
if (!route || route.node.id === site.fn.id) continue;
const key = `${site.fn.id}>${route.node.id}`;
if (seen.has(key)) continue;
seen.add(key);
edges.push({
source: site.fn.id,
target: route.node.id,
kind: 'calls',
line: site.line,
column: site.column,
provenance: 'heuristic',
metadata: {
synthesizedBy: 'http-client',
channel: 'http',
callee: site.callee,
tier: TIER_CLIENT_TO_SERVER,
method: site.method,
href: site.display,
registeredAt: `${route.node.filePath}:${route.node.startLine}`,
},
});
}
await onYield();
pairQueue(producers, consumers, edges, seen);
pairEvents(dispatches, handlers, edges, seen);
return edges;
}