orneryd / NornicDB / 36353395697

88%

Build Type

push

github

Committed by orneryd

Commit Message

feat(cypher): scope-aware list shadowing and redacted rejection reports

- Replace the global declaresListElement exemption with
  localListBindingShadowsOperand: only operands inside the live projection
  of an enclosing list comprehension or the predicate of an enclosing
  any/all/none/single call are exempt from graph-variable list type
  errors. `1 IN n AS x, [n IN [1] | n] AS y` is again a Node type error
  while `[n IN [[1],[2]] | 1 IN n]` stays valid.
- Terminate // comments at CR as well as LF in both keyword scanner paths
  and keep quantified/list static validation on live text via shared
  queryGapEnd/queryCommentEnd scanners.
- Emit an INFO cypher.query_rejected event for classified syntax
  rejections with an allowlisted statement class, stable full-shape hash,
  and 500-byte bounded shape; log-based grouping documented in
  docs/architecture/observability.md.
- Strip comments before literal redaction in rejection and slow-query
  logs so comment text cannot leak secrets into query logs.

progress on #521

Coverage Stats

97 of 121 new or added lines in 5 files covered. (80.17%)

16 existing lines in 8 files now uncovered.

174724 of 200787 relevant lines covered (87.02%)

1.02 hits per line