Martin Vogel d3059efebd fix(pipeline): classify capitalized Axios calls as HTTP clients ...

With `import Axios from "axios"`, a common convention in TypeScript
projects, every `Axios.get/post/put/delete(url)` client call was indexed as
a route registration. The result was a `CALLS {via: route_registration}`
edge to a Route node instead of an HTTP_CALLS edge. The client's request
paths therefore posed as server routes, and no HTTP call site existed to
match a handler. microsoft/Game-Control-Puzzle-Event-Administration-Tools
has all 69 of its client calls in this shape.

Root cause: service-pattern matching is case-sensitive by design, so that
"requests" cannot match "Requests" or "myrequests". The HTTP library
table knew only the lowercase id `axios`. `Axios.get` therefore matched no
library, on either resolver. Resolution came back empty, because an
external package is never indexed. The call then fell through to the
callee-suffix fallback, which treats any `<x>.get/post/...(path)` as a route
registration.

Fix: add `Axios` next to `axios` in the HTTP library table. The table
already pairs case variants of one library (`Dio`/`dio`,
`Guzzle`/`guzzle`, `OkHttp`/`okhttp3`). The existing identifier-boundary
rule applies unchanged:
- `Axios.get` and `AxiosInstance.get` (axios's own instance type) match;
- a lowercase continuation such as `Axiosphere` does not.
Express/Koa/Fastify registrations such as `router.get(path, handler)` are
untouched.

Proof (release binary, macOS arm64,
microsoft/Game-Control-Puzzle-Event-Administration-Tools @4fe23196,
before -> after):
- route_registration CALLS 69 -> 0; all 69 were `Axios.*` calls in
  client/.
- All 69 reappear as typed HTTP_CALLS from the same caller to the same
  Route QN (`__route__PUT__/api/admin/users/{}`), and no typed HTTP_CALLS
  edge is lost.
- HTTP_CALLS 4 -> 142. Besides the 69 typed calls, 69 are the method-less
  arg_url twins that fix/http-typed-call-no-url-twin removes, and 4 are the
  existing `isOnPage` arg_url edges.
- CALLS 868 -> 799.
- SEMANTICALLY_RELATED 83 -> 174, deterministic across two runs of each
  binary. The semantic pass tokenizes CALLS-neighbour names, and the fake
  registration edges had fed each service function's URL path into its
  vector. Without them, the 69 `Axios` wrapper functions read as related.
Five sampled calls were checked against the client source, including
admin/users/service.ts:44 `Axios.put(`/api/admin/users/${participantId}/
${eventInstanceId}`)` -> `__route__PUT__/api/admin/users/{}/{}`.

On the pending ASP.NET route stack (fix/aspnet-route-case-inrepo, 8e734ee5),
together with the arg_url twin fix, the reclassified calls reach their C#
handlers:
- typed HTTP_CALLS 0 -> 69;
- DATA_FLOWS 0 -> 66, and HANDLES 94 -> 106 (+12 case_fold);
- sampled links match their controller source, for example
  `Axios.put(`/api/admin/users/${participantId}`)` ->
  `[Route("api/admin/users")] [HttpPut("{participantId}")] UpdateUserInfo`;
- the 3 calls left unlinked carry a query string in the URL literal.

Tests: RED 3/3 before the fix, green after, RED again on revert.
- pipeline_capitalized_axios_import_is_http_client (parallel resolver) and
  its _sequential twin: `import Axios from "axios"` with Axios.get, .post
  and .delete gives 0 route registrations and exactly one typed
  HTTP_CALLS per call, while an Express `router.get` registration in the
  same project stays a registration.
- infrascan service-pattern tables: `Axios.get`, `Axios.post` and
  `AxiosInstance.get` classify as HTTP, and `geo.Axiosphere.map` stays
  NONE.

Signed-off-by: Martin Vogel <martin.vogel.tech@gmail.com>

2026-09-28 19:33:28 +02:00

..

cbm

fix(pipeline): classify capitalized Axios calls as HTTP clients

2026-09-28 19:33:28 +02:00