Merge pull request #22 from johndoe6345789/copilot/add-typescript-support

Add TypeScript support: context awareness, package lock handling, and risk analysis
This commit is contained in:
2025-12-27 03:23:07 +00:00
committed by GitHub
10 changed files with 992 additions and 11 deletions

View File

@@ -18,9 +18,12 @@ WizardMerge uses a multi-frontend architecture with a high-performance C++ backe
- **Features**:
- Three-way merge algorithm
- Conflict detection and auto-resolution
- Context-aware analysis (TypeScript, Python, C++, Java)
- Intelligent risk assessment
- HTTP API endpoints
- GitHub Pull Request integration
- Pull request conflict resolution
- TypeScript-specific merge support
### Frontends
@@ -209,6 +212,40 @@ When `create_branch: true` is set in the API request:
- **GitLab**: Use personal access tokens with `read_api` and `read_repository` scopes
- Tokens can be passed via `--token` flag or environment variables (`GITHUB_TOKEN`, `GITLAB_TOKEN`)
## TypeScript Support
WizardMerge includes comprehensive TypeScript support for intelligent merge conflict resolution:
### Features
- **Context-Aware Analysis**: Recognizes TypeScript interfaces, types, enums, and arrow functions
- **Risk Assessment**: Detects breaking changes in type definitions and type safety bypasses
- **Package Lock Handling**: Smart detection of package-lock.json, yarn.lock, pnpm-lock.yaml, and bun.lockb files
- **Security Patterns**: Identifies XSS risks (dangerouslySetInnerHTML, innerHTML) and type safety issues (as any, @ts-ignore)
### Supported TypeScript Patterns
- Interfaces, type aliases, and enums
- Arrow functions and async functions
- TypeScript imports (import type, namespace imports)
- Function signatures with type annotations
- Export declarations
### Package Lock Conflicts
Package lock files are extremely common sources of merge conflicts. WizardMerge:
- Automatically detects package lock files
- Suggests regenerating lock files instead of manual merging
- Supports npm, Yarn, pnpm, and Bun lock files
**Recommended workflow for lock file conflicts:**
1. Merge `package.json` manually
2. Delete the lock file
3. Run your package manager to regenerate
4. This ensures consistency and avoids corruption
See [docs/TYPESCRIPT_SUPPORT.md](docs/TYPESCRIPT_SUPPORT.md) for detailed documentation and API examples.
## Formal Verification
WizardMerge includes a formal TLA+ specification that is verified in CI:

View File

@@ -15,6 +15,8 @@ find_package(CURL QUIET)
set(WIZARDMERGE_SOURCES
src/merge/three_way_merge.cpp
src/git/git_cli.cpp
src/analysis/context_analyzer.cpp
src/analysis/risk_analyzer.cpp
)
# Add git sources only if CURL is available
@@ -71,6 +73,8 @@ if(GTest_FOUND)
set(TEST_SOURCES
tests/test_three_way_merge.cpp
tests/test_git_cli.cpp
tests/test_context_analyzer.cpp
tests/test_risk_analyzer.cpp
)
# Add github client tests only if CURL is available

View File

@@ -0,0 +1,191 @@
/**
* @file typescript_example.cpp
* @brief Example demonstrating TypeScript support in WizardMerge
*/
#include "wizardmerge/analysis/context_analyzer.h"
#include "wizardmerge/analysis/risk_analyzer.h"
#include <iostream>
#include <vector>
#include <string>
using namespace wizardmerge::analysis;
void print_separator() {
std::cout << "\n" << std::string(60, '=') << "\n" << std::endl;
}
int main() {
std::cout << "WizardMerge TypeScript Support Demo" << std::endl;
print_separator();
// Example 1: TypeScript Function Detection
std::cout << "Example 1: TypeScript Function Detection" << std::endl;
std::cout << std::string(40, '-') << std::endl;
std::vector<std::string> ts_functions = {
"export async function fetchUser(id: number): Promise<User> {",
" const response = await api.get(`/users/${id}`);",
" return response.data;",
"}"
};
std::string func_name = extract_function_name(ts_functions, 1);
std::cout << "Detected function: " << func_name << std::endl;
print_separator();
// Example 2: TypeScript Interface Detection
std::cout << "Example 2: TypeScript Interface Detection" << std::endl;
std::cout << std::string(40, '-') << std::endl;
std::vector<std::string> ts_interface = {
"export interface User {",
" id: number;",
" name: string;",
" email: string;",
"}"
};
std::string type_name = extract_class_name(ts_interface, 2);
std::cout << "Detected type: " << type_name << std::endl;
print_separator();
// Example 3: TypeScript Import Extraction
std::cout << "Example 3: TypeScript Import Extraction" << std::endl;
std::cout << std::string(40, '-') << std::endl;
std::vector<std::string> ts_imports = {
"import { Component, useState } from 'react';",
"import type { User } from './types';",
"import * as utils from './utils';",
"",
"export const MyComponent = () => {"
};
auto imports = extract_imports(ts_imports);
std::cout << "Detected " << imports.size() << " imports:" << std::endl;
for (const auto& import : imports) {
std::cout << " - " << import << std::endl;
}
print_separator();
// Example 4: TypeScript Interface Change Detection
std::cout << "Example 4: TypeScript Interface Change Detection" << std::endl;
std::cout << std::string(40, '-') << std::endl;
std::vector<std::string> base_interface = {
"interface User {",
" id: number;",
" name: string;",
"}"
};
std::vector<std::string> modified_interface = {
"interface User {",
" id: number;",
" name: string;",
" email: string; // Added",
" age?: number; // Added optional",
"}"
};
bool has_ts_changes = has_typescript_interface_changes(base_interface, modified_interface);
std::cout << "Interface changed: " << (has_ts_changes ? "YES" : "NO") << std::endl;
std::cout << "Risk: Breaking change - affects all usages of User" << std::endl;
print_separator();
// Example 5: TypeScript Critical Pattern Detection
std::cout << "Example 5: TypeScript Critical Pattern Detection" << std::endl;
std::cout << std::string(40, '-') << std::endl;
std::vector<std::string> risky_code = {
"// Type safety bypass",
"const user = response.data as any;",
"",
"// Error suppression",
"// @ts-ignore",
"element.innerHTML = userInput;",
"",
"// Insecure storage",
"localStorage.setItem('password', pwd);"
};
bool has_critical = contains_critical_patterns(risky_code);
std::cout << "Contains critical patterns: " << (has_critical ? "YES" : "NO") << std::endl;
if (has_critical) {
std::cout << "Critical issues detected:" << std::endl;
std::cout << " - Type safety bypass (as any)" << std::endl;
std::cout << " - Error suppression (@ts-ignore)" << std::endl;
std::cout << " - XSS vulnerability (innerHTML)" << std::endl;
std::cout << " - Insecure password storage (localStorage)" << std::endl;
}
print_separator();
// Example 6: Package Lock File Detection
std::cout << "Example 6: Package Lock File Detection" << std::endl;
std::cout << std::string(40, '-') << std::endl;
std::vector<std::string> lock_files = {
"package-lock.json",
"yarn.lock",
"pnpm-lock.yaml",
"bun.lockb",
"package.json"
};
for (const auto& file : lock_files) {
bool is_lock = is_package_lock_file(file);
std::cout << file << ": " << (is_lock ? "LOCK FILE" : "regular file") << std::endl;
}
std::cout << "\nRecommendation for lock file conflicts:" << std::endl;
std::cout << " 1. Merge package.json manually" << std::endl;
std::cout << " 2. Delete lock file" << std::endl;
std::cout << " 3. Run package manager to regenerate" << std::endl;
print_separator();
// Example 7: Complete Risk Analysis
std::cout << "Example 7: Complete Risk Analysis for TypeScript Changes" << std::endl;
std::cout << std::string(40, '-') << std::endl;
std::vector<std::string> base = {
"interface Config {",
" timeout: number;",
"}"
};
std::vector<std::string> ours = {
"interface Config {",
" timeout: number;",
" retries: number;",
"}"
};
std::vector<std::string> theirs = {
"interface Config {",
" timeout: number;",
"}"
};
auto risk = analyze_risk_ours(base, ours, theirs);
std::cout << "Risk Level: " << risk_level_to_string(risk.level) << std::endl;
std::cout << "Confidence: " << risk.confidence_score << std::endl;
std::cout << "Has API Changes: " << (risk.has_api_changes ? "YES" : "NO") << std::endl;
std::cout << "\nRisk Factors:" << std::endl;
for (const auto& factor : risk.risk_factors) {
std::cout << " - " << factor << std::endl;
}
std::cout << "\nRecommendations:" << std::endl;
for (const auto& rec : risk.recommendations) {
std::cout << " - " << rec << std::endl;
}
print_separator();
std::cout << "Demo completed successfully!" << std::endl;
std::cout << "See docs/TYPESCRIPT_SUPPORT.md for more details." << std::endl;
return 0;
}

View File

@@ -112,6 +112,26 @@ bool has_api_signature_changes(
const std::vector<std::string>& modified
);
/**
* @brief Detects if TypeScript interface or type definitions changed.
*
* @param base Base version lines
* @param modified Modified version lines
* @return true if interface/type changes detected
*/
bool has_typescript_interface_changes(
const std::vector<std::string>& base,
const std::vector<std::string>& modified
);
/**
* @brief Checks if file is a package-lock.json file.
*
* @param filename Name of the file
* @return true if file is package-lock.json
*/
bool is_package_lock_file(const std::string& filename);
} // namespace analysis
} // namespace wizardmerge

View File

@@ -37,7 +37,11 @@ bool is_function_definition(const std::string& line) {
std::regex(R"(^def\s+\w+\s*\([^)]*\):)"), // Python: def name(params):
std::regex(R"(^function\s+\w+\s*\([^)]*\))"), // JavaScript: function name(params)
std::regex(R"(^\w+\s*:\s*function\s*\([^)]*\))"), // JS object method
std::regex(R"(^(public|private|protected)?\s*\w+\s+\w+\s*\([^)]*\))") // Java/C# methods
std::regex(R"(^(public|private|protected)?\s*\w+\s+\w+\s*\([^)]*\))"), // Java/C# methods
// TypeScript patterns
std::regex(R"(^(export\s+)?(async\s+)?function\s+\w+)"), // TS: export/async function
std::regex(R"(^(export\s+)?(const|let|var)\s+\w+\s*=\s*(async\s+)?\([^)]*\)\s*=>)"), // TS: arrow functions
std::regex(R"(^(public|private|protected|readonly)?\s*\w+\s*\([^)]*\)\s*:\s*\w+)") // TS: typed methods
};
for (const auto& pattern : patterns) {
@@ -64,12 +68,18 @@ std::string get_function_name_from_line(const std::string& line) {
return match[1].str();
}
// JavaScript: function function_name(
std::regex js_pattern(R"(function\s+(\w+)\s*\()");
// JavaScript/TypeScript: function function_name( or export function function_name(
std::regex js_pattern(R"((?:export\s+)?(?:async\s+)?function\s+(\w+)\s*\()");
if (std::regex_search(trimmed, match, js_pattern)) {
return match[1].str();
}
// TypeScript: const/let/var function_name = (params) =>
std::regex arrow_pattern(R"((?:const|let|var)\s+(\w+)\s*=\s*(?:async\s+)?\([^)]*\)\s*=>)");
if (std::regex_search(trimmed, match, arrow_pattern)) {
return match[1].str();
}
// C/C++/Java: type function_name(
std::regex cpp_pattern(R"(\w+\s+(\w+)\s*\()");
if (std::regex_search(trimmed, match, cpp_pattern)) {
@@ -88,7 +98,12 @@ bool is_class_definition(const std::string& line) {
std::vector<std::regex> patterns = {
std::regex(R"(^class\s+\w+)"), // Python/C++/Java: class Name
std::regex(R"(^(public|private)?\s*class\s+\w+)"), // Java/C#: visibility class Name
std::regex(R"(^struct\s+\w+)") // C/C++: struct Name
std::regex(R"(^struct\s+\w+)"), // C/C++: struct Name
// TypeScript patterns
std::regex(R"(^(export\s+)?(abstract\s+)?class\s+\w+)"), // TS: export class Name
std::regex(R"(^(export\s+)?interface\s+\w+)"), // TS: interface Name
std::regex(R"(^(export\s+)?type\s+\w+\s*=)"), // TS: type Name =
std::regex(R"(^(export\s+)?enum\s+\w+)") // TS: enum Name
};
for (const auto& pattern : patterns) {
@@ -107,7 +122,9 @@ std::string get_class_name_from_line(const std::string& line) {
std::string trimmed = trim(line);
std::smatch match;
std::regex pattern(R"((class|struct)\s+(\w+))");
// Match class, struct, interface, type, or enum
std::regex pattern(R"((?:export\s+)?(?:abstract\s+)?(class|struct|interface|type|enum)\s+(\w+))");
if (std::regex_search(trimmed, match, pattern)) {
return match[2].str();
@@ -221,9 +238,15 @@ std::vector<std::string> extract_imports(
// Check for various import patterns
if (line.find("#include") == 0 ||
line.find("import ") == 0 ||
line.find("import{") == 0 || // Support both "import{" and "import {"
line.find("from ") == 0 ||
line.find("require(") != std::string::npos ||
line.find("using ") == 0) {
line.find("using ") == 0 ||
// TypeScript/ES6 specific patterns
line.find("import *") == 0 ||
line.find("import type") == 0 ||
line.find("export {") == 0 ||
line.find("export *") == 0) {
imports.push_back(line);
}
}

View File

@@ -82,6 +82,10 @@ bool is_function_signature(const std::string& line) {
std::regex(R"(^\w+\s+\w+\s*\([^)]*\))"), // C/C++/Java
std::regex(R"(^def\s+\w+\s*\([^)]*\):)"), // Python
std::regex(R"(^function\s+\w+\s*\([^)]*\))"), // JavaScript
// TypeScript patterns
std::regex(R"(^(export\s+)?(async\s+)?function\s+\w+\s*\([^)]*\))"), // TS function
std::regex(R"(^(const|let|var)\s+\w+\s*=\s*\([^)]*\)\s*=>)"), // Arrow function
std::regex(R"(^\w+\s*\([^)]*\)\s*:\s*\w+)"), // TS: method with return type
};
for (const auto& pattern : patterns) {
@@ -117,6 +121,13 @@ bool contains_critical_patterns(const std::vector<std::string>& lines) {
std::regex(R"(\.secret\s*=)"), // Secret assignments
std::regex(R"(sudo\s+)"), // Sudo usage
std::regex(R"(chmod\s+777)"), // Overly permissive permissions
// TypeScript specific critical patterns
std::regex(R"(dangerouslySetInnerHTML)"), // React XSS risk
std::regex(R"(\bas\s+any\b)"), // TypeScript: type safety bypass
std::regex(R"(@ts-ignore)"), // TypeScript: error suppression
std::regex(R"(@ts-nocheck)"), // TypeScript: file-level error suppression
std::regex(R"(localStorage\.setItem.*password)"), // Storing passwords in localStorage
std::regex(R"(innerHTML\s*=)"), // XSS risk
};
for (const auto& line : lines) {
@@ -148,6 +159,70 @@ bool has_api_signature_changes(
return false;
}
bool has_typescript_interface_changes(
const std::vector<std::string>& base,
const std::vector<std::string>& modified
) {
// Use static regex patterns to avoid recompilation
static const std::vector<std::regex> ts_definition_patterns = {
std::regex(R"(\binterface\s+\w+)"),
std::regex(R"(\btype\s+\w+\s*=)"),
std::regex(R"(\benum\s+\w+)"),
};
// Check if any TypeScript definition exists in base
bool base_has_ts_def = false;
for (const auto& line : base) {
std::string trimmed = trim(line);
for (const auto& pattern : ts_definition_patterns) {
if (std::regex_search(trimmed, pattern)) {
base_has_ts_def = true;
break;
}
}
if (base_has_ts_def) break;
}
// Check if any TypeScript definition exists in modified
bool modified_has_ts_def = false;
for (const auto& line : modified) {
std::string trimmed = trim(line);
for (const auto& pattern : ts_definition_patterns) {
if (std::regex_search(trimmed, pattern)) {
modified_has_ts_def = true;
break;
}
}
if (modified_has_ts_def) break;
}
// If either has TS definitions and content differs, it's a TS change
if (base_has_ts_def || modified_has_ts_def) {
// Check if the actual content changed
if (base.size() != modified.size()) {
return true;
}
// Cache trimmed lines to avoid repeated trim() calls
for (size_t i = 0; i < base.size(); ++i) {
std::string base_trimmed = trim(base[i]);
std::string mod_trimmed = trim(modified[i]);
if (base_trimmed != mod_trimmed) {
return true;
}
}
}
return false;
}
bool is_package_lock_file(const std::string& filename) {
// Check for package-lock.json, yarn.lock, pnpm-lock.yaml, etc.
return filename.find("package-lock.json") != std::string::npos ||
filename.find("yarn.lock") != std::string::npos ||
filename.find("pnpm-lock.yaml") != std::string::npos ||
filename.find("bun.lockb") != std::string::npos;
}
RiskAssessment analyze_risk_ours(
const std::vector<std::string>& base,
const std::vector<std::string>& ours,
@@ -183,6 +258,15 @@ RiskAssessment analyze_risk_ours(
}
}
// Check for TypeScript interface/type changes
if (has_typescript_interface_changes(base, ours)) {
assessment.has_api_changes = true;
assessment.risk_factors.push_back("TypeScript interface or type definitions changed");
if (assessment.level < RiskLevel::MEDIUM) {
assessment.level = RiskLevel::MEDIUM;
}
}
// Assess based on amount of change
if (our_changes > 10) {
assessment.has_logic_changes = true;
@@ -260,6 +344,15 @@ RiskAssessment analyze_risk_theirs(
}
}
// Check for TypeScript interface/type changes
if (has_typescript_interface_changes(base, theirs)) {
assessment.has_api_changes = true;
assessment.risk_factors.push_back("TypeScript interface or type definitions changed");
if (assessment.level < RiskLevel::MEDIUM) {
assessment.level = RiskLevel::MEDIUM;
}
}
// Assess based on amount of change
if (their_changes > 10) {
assessment.has_logic_changes = true;
@@ -340,6 +433,13 @@ RiskAssessment analyze_risk_both(
assessment.level = RiskLevel::HIGH;
}
// TypeScript interface/type changes from either side
if (has_typescript_interface_changes(base, ours) || has_typescript_interface_changes(base, theirs)) {
assessment.has_api_changes = true;
assessment.risk_factors.push_back("Multiple TypeScript interface/type changes may cause conflicts");
assessment.level = RiskLevel::HIGH;
}
// Recommendations for concatenation
assessment.recommendations.push_back("Manual review required - automatic concatenation is risky");
assessment.recommendations.push_back("Consider merging logic manually instead of concatenating");

View File

@@ -127,3 +127,94 @@ TEST(ContextAnalyzerTest, ContextWindowBoundaries) {
context = analyze_context(lines, 4, 4, 2);
EXPECT_GE(context.surrounding_lines.size(), 1);
}
/**
* Test TypeScript function detection
*/
TEST(ContextAnalyzerTest, TypeScriptFunctionDetection) {
std::vector<std::string> lines = {
"export async function fetchData() {",
" const data = await api.get();",
" return data;",
"}"
};
std::string func_name = extract_function_name(lines, 1);
EXPECT_EQ(func_name, "fetchData");
}
/**
* Test TypeScript arrow function detection
*/
TEST(ContextAnalyzerTest, TypeScriptArrowFunctionDetection) {
std::vector<std::string> lines = {
"const handleClick = (event: MouseEvent) => {",
" console.log(event);",
"};"
};
std::string func_name = extract_function_name(lines, 0);
EXPECT_EQ(func_name, "handleClick");
}
/**
* Test TypeScript interface detection
*/
TEST(ContextAnalyzerTest, TypeScriptInterfaceDetection) {
std::vector<std::string> lines = {
"export interface User {",
" id: number;",
" name: string;",
"}"
};
std::string class_name = extract_class_name(lines, 1);
EXPECT_EQ(class_name, "User");
}
/**
* Test TypeScript type alias detection
*/
TEST(ContextAnalyzerTest, TypeScriptTypeAliasDetection) {
std::vector<std::string> lines = {
"export type Status = 'pending' | 'approved' | 'rejected';",
"const status: Status = 'pending';"
};
std::string type_name = extract_class_name(lines, 0);
EXPECT_EQ(type_name, "Status");
}
/**
* Test TypeScript enum detection
*/
TEST(ContextAnalyzerTest, TypeScriptEnumDetection) {
std::vector<std::string> lines = {
"enum Color {",
" Red,",
" Green,",
" Blue",
"}"
};
std::string enum_name = extract_class_name(lines, 1);
EXPECT_EQ(enum_name, "Color");
}
/**
* Test TypeScript import extraction
*/
TEST(ContextAnalyzerTest, TypeScriptImportExtraction) {
std::vector<std::string> lines = {
"import { Component } from 'react';",
"import type { User } from './types';",
"import * as utils from './utils';",
"",
"function MyComponent() {",
" return null;",
"}"
};
auto imports = extract_imports(lines);
EXPECT_GE(imports.size(), 3);
}

View File

@@ -138,3 +138,131 @@ TEST(RiskAnalyzerTest, RiskFactorsPopulated) {
// Should have some analysis results
EXPECT_TRUE(!risk.recommendations.empty() || !risk.risk_factors.empty());
}
/**
* Test TypeScript interface change detection
*/
TEST(RiskAnalyzerTest, TypeScriptInterfaceChangesDetected) {
std::vector<std::string> base = {
"interface User {",
" name: string;",
"}"
};
std::vector<std::string> modified = {
"interface User {",
" name: string;",
" age: number;",
"}"
};
EXPECT_TRUE(has_typescript_interface_changes(base, modified));
}
/**
* Test TypeScript type alias change detection
*/
TEST(RiskAnalyzerTest, TypeScriptTypeChangesDetected) {
std::vector<std::string> base = {
"type Status = 'pending' | 'approved';"
};
std::vector<std::string> modified = {
"type Status = 'pending' | 'approved' | 'rejected';"
};
EXPECT_TRUE(has_typescript_interface_changes(base, modified));
}
/**
* Test TypeScript enum change detection
*/
TEST(RiskAnalyzerTest, TypeScriptEnumChangesDetected) {
std::vector<std::string> base = {
"enum Color {",
" Red,",
" Green",
"}"
};
std::vector<std::string> modified = {
"enum Color {",
" Red,",
" Green,",
" Blue",
"}"
};
EXPECT_TRUE(has_typescript_interface_changes(base, modified));
}
/**
* Test package-lock.json file detection
*/
TEST(RiskAnalyzerTest, PackageLockFileDetection) {
EXPECT_TRUE(is_package_lock_file("package-lock.json"));
EXPECT_TRUE(is_package_lock_file("path/to/package-lock.json"));
EXPECT_TRUE(is_package_lock_file("yarn.lock"));
EXPECT_TRUE(is_package_lock_file("pnpm-lock.yaml"));
EXPECT_TRUE(is_package_lock_file("bun.lockb"));
EXPECT_FALSE(is_package_lock_file("package.json"));
EXPECT_FALSE(is_package_lock_file("src/index.ts"));
}
/**
* Test TypeScript critical patterns detection
*/
TEST(RiskAnalyzerTest, TypeScriptCriticalPatternsDetected) {
std::vector<std::string> code_with_ts_issues = {
"const user = data as any;",
"// @ts-ignore",
"element.innerHTML = userInput;",
"localStorage.setItem('password', pwd);"
};
EXPECT_TRUE(contains_critical_patterns(code_with_ts_issues));
}
/**
* Test TypeScript safe code doesn't trigger false positives
*/
TEST(RiskAnalyzerTest, TypeScriptSafeCodeNoFalsePositives) {
std::vector<std::string> safe_code = {
"const user: User = { name: 'John', age: 30 };",
"function greet(name: string): string {",
" return `Hello, ${name}`;",
"}"
};
EXPECT_FALSE(contains_critical_patterns(safe_code));
}
/**
* Test risk analysis includes TypeScript interface changes
*/
TEST(RiskAnalyzerTest, RiskAnalysisIncludesTypeScriptChanges) {
std::vector<std::string> base = {
"interface User {",
" name: string;",
"}"
};
std::vector<std::string> ours = {
"interface User {",
" name: string;",
" email: string;",
"}"
};
std::vector<std::string> theirs = base;
auto risk = analyze_risk_ours(base, ours, theirs);
EXPECT_TRUE(risk.has_api_changes);
EXPECT_TRUE(risk.level >= RiskLevel::MEDIUM);
// Check if TypeScript-related risk factor is mentioned
bool has_ts_risk = false;
for (const auto& factor : risk.risk_factors) {
if (factor.find("TypeScript") != std::string::npos) {
has_ts_risk = true;
break;
}
}
EXPECT_TRUE(has_ts_risk);
}

View File

@@ -19,9 +19,15 @@ Context analysis examines the code surrounding merge conflicts to provide better
**Supported Languages:**
- C/C++
- Python
- JavaScript/TypeScript
- JavaScript/TypeScript (enhanced with TypeScript-specific patterns)
- Java
**TypeScript-Specific Features:**
- Detects interfaces, types, and enums
- Recognizes arrow functions and async functions
- Identifies export statements
- Extracts type imports and re-exports
### Risk Analysis
Risk analysis assesses different resolution strategies and provides recommendations.
@@ -41,8 +47,16 @@ Risk analysis assesses different resolution strategies and provides recommendati
- Large number of changes (>10 lines)
- Critical code patterns (delete, eval, system calls, security operations)
- API signature changes
- TypeScript interface/type definition changes
- TypeScript type safety bypasses (as any, @ts-ignore, @ts-nocheck)
- XSS vulnerabilities (dangerouslySetInnerHTML, innerHTML)
- Insecure storage of sensitive data
- Discarding significant changes from other branch
**Package Lock File Handling:**
- Detects package-lock.json, yarn.lock, pnpm-lock.yaml, and bun.lockb files
- Can be used to apply special merge strategies for dependency files
**Provided Information:**
- Risk level (low/medium/high/critical)
- Confidence score (0.0 to 1.0)
@@ -158,13 +172,61 @@ Key functions:
- `analyze_risk_both()`: Assess risk of concatenation
- `contains_critical_patterns()`: Detect security-critical code
- `has_api_signature_changes()`: Detect API changes
- `has_typescript_interface_changes()`: Detect TypeScript type definition changes
- `is_package_lock_file()`: Identify package lock files
### TypeScript Support
The analyzers now include comprehensive TypeScript support:
**Context Analyzer:**
- Recognizes TypeScript function patterns (async, export, arrow functions)
- Detects TypeScript type structures (interface, type, enum)
- Extracts TypeScript imports (import type, export)
**Risk Analyzer:**
- Detects TypeScript-specific risks:
- Type safety bypasses: `as any`, `@ts-ignore`, `@ts-nocheck`
- React security issues: `dangerouslySetInnerHTML`
- XSS vulnerabilities: `innerHTML`
- Insecure storage: storing passwords in `localStorage`
- Identifies interface/type definition changes
- Recognizes package lock file conflicts
**Example: TypeScript Interface Change Detection**
```cpp
std::vector<std::string> base = {
"interface User {",
" name: string;",
"}"
};
std::vector<std::string> modified = {
"interface User {",
" name: string;",
" email: string;",
"}"
};
if (has_typescript_interface_changes(base, modified)) {
std::cout << "TypeScript interface changed!" << std::endl;
}
```
**Example: Package Lock File Detection**
```cpp
std::string filename = "package-lock.json";
if (is_package_lock_file(filename)) {
std::cout << "Applying special merge strategy for lock file" << std::endl;
}
```
## Testing
Comprehensive test coverage with 24 unit tests:
- 7 tests for context analyzer
- 9 tests for risk analyzer
- 8 existing merge tests
Comprehensive test coverage with 46 unit tests:
- 13 tests for context analyzer (including 6 TypeScript tests)
- 16 tests for risk analyzer (including 7 TypeScript tests)
- 8 tests for three-way merge
- 9 tests for Git CLI
Run tests:
```bash
@@ -172,6 +234,14 @@ cd backend/build
./wizardmerge-tests
```
TypeScript-specific tests verify:
- Arrow function detection
- Interface, type, and enum extraction
- TypeScript import patterns
- Type definition change detection
- Critical pattern detection (as any, @ts-ignore, etc.)
- Package lock file identification
## Security
All code has been scanned with CodeQL:

317
docs/TYPESCRIPT_SUPPORT.md Normal file
View File

@@ -0,0 +1,317 @@
# TypeScript Support in WizardMerge
## Overview
WizardMerge includes comprehensive TypeScript support with context-aware analysis and intelligent merge risk assessment specifically designed for TypeScript codebases.
## Features
### 1. TypeScript Context Awareness
The context analyzer recognizes TypeScript-specific code patterns:
**Function Detection:**
- Regular functions: `function myFunc()`, `export function myFunc()`
- Async functions: `async function myFunc()`
- Arrow functions: `const myFunc = () => {}`
- Typed arrow functions: `const myFunc = (x: number) => {}`
- Method signatures: `myMethod(param: string): ReturnType`
**Type Structures:**
- Interfaces: `interface User { ... }`
- Type aliases: `type Status = 'pending' | 'approved'`
- Enums: `enum Color { Red, Green, Blue }`
- Export declarations: `export interface`, `export type`, `export enum`
**Import Patterns:**
- Named imports: `import { Component } from 'react'`
- Type imports: `import type { User } from './types'`
- Namespace imports: `import * as utils from './utils'`
- Re-exports: `export { User } from './types'`
- Export all: `export * from './types'`
### 2. Package Lock Conflict Handling
WizardMerge intelligently detects package lock files and can apply special merge strategies:
**Supported Lock Files:**
- `package-lock.json` (npm)
- `yarn.lock` (Yarn)
- `pnpm-lock.yaml` (pnpm)
- `bun.lockb` (Bun)
**Why Package Locks Are Special:**
Package lock files are notoriously conflict-prone because:
- They're automatically generated
- They change with every dependency update
- Conflicts are extremely common in team environments
- Manual resolution is error-prone
**Detection API:**
```cpp
#include "wizardmerge/analysis/risk_analyzer.h"
std::string filename = "package-lock.json";
if (is_package_lock_file(filename)) {
// Apply special merge strategy
// Suggestion: regenerate lock file instead of manual merge
}
```
### 3. TypeScript Merge Risk Analysis
The risk analyzer includes TypeScript-specific risk factors:
**Type Safety Risks:**
- **`as any` casts**: Bypasses TypeScript's type system
- **`@ts-ignore`**: Suppresses type errors on next line
- **`@ts-nocheck`**: Disables type checking for entire file
**Security Risks:**
- **`dangerouslySetInnerHTML`**: React XSS vulnerability vector
- **`innerHTML =`**: Direct DOM manipulation, XSS risk
- **`localStorage.setItem(...password...)`**: Insecure password storage
**Breaking Changes:**
- Interface modifications (adding/removing/changing properties)
- Type alias changes
- Enum modifications
- Function signature changes with type annotations
## API Usage Examples
### Detecting TypeScript Interface Changes
```cpp
#include "wizardmerge/analysis/risk_analyzer.h"
std::vector<std::string> base = {
"interface User {",
" id: number;",
" name: string;",
"}"
};
std::vector<std::string> modified = {
"interface User {",
" id: number;",
" name: string;",
" email: string; // Added field",
"}"
};
if (has_typescript_interface_changes(base, modified)) {
std::cout << "Breaking change: Interface modified" << std::endl;
std::cout << "Recommendation: Review all usages of User interface" << std::endl;
}
```
### Analyzing TypeScript Code Risk
```cpp
#include "wizardmerge/analysis/risk_analyzer.h"
std::vector<std::string> base = {"const user: User = data;"};
std::vector<std::string> ours = {"const user = data as any;"};
std::vector<std::string> theirs = {"const user: User = data;"};
auto risk = analyze_risk_ours(base, ours, theirs);
if (risk.affects_critical_section) {
std::cout << "Warning: TypeScript type safety bypassed!" << std::endl;
}
for (const auto& factor : risk.risk_factors) {
std::cout << "Risk: " << factor << std::endl;
}
// Output: "Risk: Contains critical code patterns (security/data operations)"
```
### Full Context Analysis for TypeScript
```cpp
#include "wizardmerge/analysis/context_analyzer.h"
std::vector<std::string> typescript_code = {
"import { useState } from 'react';",
"import type { User } from './types';",
"",
"interface Props {",
" user: User;",
"}",
"",
"export const UserCard = ({ user }: Props) => {",
" const [expanded, setExpanded] = useState(false);",
" return <div>{user.name}</div>;",
"};"
};
auto context = analyze_context(typescript_code, 7, 9);
std::cout << "Function: " << context.function_name << std::endl;
// Output: "Function: UserCard"
std::cout << "Type: " << context.class_name << std::endl;
// Output: "Type: Props"
std::cout << "Imports:" << std::endl;
for (const auto& import : context.imports) {
std::cout << " - " << import << std::endl;
}
// Output:
// - import { useState } from 'react';
// - import type { User } from './types';
```
## Integration with Merge Workflow
### Example: Smart TypeScript Merge
```cpp
#include "wizardmerge/merge/three_way_merge.h"
#include "wizardmerge/analysis/context_analyzer.h"
#include "wizardmerge/analysis/risk_analyzer.h"
// Perform three-way merge
auto result = three_way_merge(base_lines, our_lines, their_lines);
// Analyze each conflict
for (const auto& conflict : result.conflicts) {
// Get context
auto context = analyze_context(base_lines,
conflict.start_line,
conflict.end_line);
// Check if we're in a TypeScript interface
if (context.class_name.find("interface") != std::string::npos ||
context.class_name.find("type") != std::string::npos) {
std::cout << "Conflict in TypeScript type definition: "
<< context.class_name << std::endl;
}
// Assess risks
auto risk_ours = analyze_risk_ours(conflict.base_lines,
conflict.our_lines,
conflict.their_lines);
if (has_typescript_interface_changes(conflict.base_lines,
conflict.our_lines)) {
std::cout << "Warning: Accepting OURS will change type definitions"
<< std::endl;
}
// Check for type safety violations
if (contains_critical_patterns(conflict.our_lines)) {
std::cout << "Critical: Code contains type safety bypasses!"
<< std::endl;
}
}
```
### Example: Package Lock Conflict Resolution
```cpp
#include "wizardmerge/analysis/risk_analyzer.h"
std::string filename = "package-lock.json";
if (is_package_lock_file(filename)) {
std::cout << "Package lock file detected!" << std::endl;
std::cout << "Recommendation: Regenerate instead of merging" << std::endl;
std::cout << "Steps:" << std::endl;
std::cout << " 1. Delete package-lock.json" << std::endl;
std::cout << " 2. Merge package.json manually" << std::endl;
std::cout << " 3. Run 'npm install' to regenerate lock file" << std::endl;
std::cout << " 4. Commit the new lock file" << std::endl;
// Skip manual merge and suggest regeneration
return;
}
```
## Testing
WizardMerge includes comprehensive tests for TypeScript support:
### Context Analyzer Tests
- `TypeScriptFunctionDetection`: Verifies async function detection
- `TypeScriptArrowFunctionDetection`: Tests arrow function parsing
- `TypeScriptInterfaceDetection`: Validates interface extraction
- `TypeScriptTypeAliasDetection`: Tests type alias recognition
- `TypeScriptEnumDetection`: Verifies enum parsing
- `TypeScriptImportExtraction`: Tests import statement detection
### Risk Analyzer Tests
- `TypeScriptInterfaceChangesDetected`: Validates interface change detection
- `TypeScriptTypeChangesDetected`: Tests type alias modifications
- `TypeScriptEnumChangesDetected`: Verifies enum change detection
- `PackageLockFileDetection`: Tests lock file identification
- `TypeScriptCriticalPatternsDetected`: Validates detection of type safety bypasses
- `TypeScriptSafeCodeNoFalsePositives`: Ensures safe code doesn't trigger warnings
- `RiskAnalysisIncludesTypeScriptChanges`: Integration test for risk assessment
### Running Tests
```bash
cd backend/build
./wizardmerge-tests --gtest_filter="*TypeScript*"
```
All TypeScript tests pass with 100% success rate.
## Best Practices
### When Merging TypeScript Code
1. **Always review interface/type changes**: Breaking changes can affect many files
2. **Watch for type safety bypasses**: `as any`, `@ts-ignore` should be rare
3. **Be cautious with package lock conflicts**: Consider regenerating instead of manual merge
4. **Check import changes**: Missing or duplicate imports can break builds
5. **Validate after merge**: Run TypeScript compiler to catch type errors
### Package Lock Files
**Recommended Strategy:**
1. Don't manually merge package lock files
2. Merge `package.json` first
3. Delete the lock file
4. Run package manager to regenerate it
5. This ensures consistency and avoids corruption
**Why This Works:**
- Lock files are deterministic - given the same `package.json`, you get the same lock
- Manual merging can create invalid dependency trees
- Regeneration is faster and safer than manual resolution
## Language Support Summary
| Feature | Support Level |
|---------|--------------|
| Function detection | ✅ Full |
| Arrow functions | ✅ Full |
| Async/await | ✅ Full |
| Interfaces | ✅ Full |
| Type aliases | ✅ Full |
| Enums | ✅ Full |
| Generics | ⚠️ Partial (detected as part of function signatures) |
| Decorators | ⚠️ Partial (detected in context) |
| TSX/JSX | ✅ Full (treated as TypeScript) |
| Import patterns | ✅ Full |
| Type safety validation | ✅ Full |
| Package lock detection | ✅ Full |
## Future Enhancements
Potential improvements for TypeScript support:
1. **Semantic merging**: Parse AST to merge at type level instead of line level
2. **Dependency tree analysis**: Detect impact of type changes across files
3. **Auto-fix suggestions**: Propose specific merge resolutions based on type information
4. **Integration with TypeScript compiler**: Use `tsc` for validation
5. **Package version conflict resolution**: Smart handling of semver ranges in lock files
## See Also
- [Context and Risk Analysis Documentation](CONTEXT_RISK_ANALYSIS.md)
- [ROADMAP](../ROADMAP.md) - Phase 2.1: Smart Conflict Resolution
- [Backend API Documentation](../backend/README.md)