Function resolve

src/resolution/frameworks/terraform.ts:58–112

(ref: UnresolvedRef, context: ResolutionContext)

  },

  resolve(ref: UnresolvedRef, context: ResolutionContext): ResolvedRef | null {
    if (ref.language !== 'terraform') return null;

    const qname = ref.referenceName;
    const refDir = dirOf(ref.filePath);

    // --- module-boundary bridge: module.M:file / module.M:var.X / module.M:output.X ---
    const scoped = qname.match(/^module\.([^.:\s]+):(.+)$/);
    if (scoped) {
      return resolveScopedModuleRef(ref, scoped[1]!, scoped[2]!, refDir, context);
    }

    const candidates = context.getNodesByQualifiedName(qname);
    if (candidates.length === 0) return null;

    // 1. Same directory — the only scope Terraform can actually reference.
    const sameDir = candidates.filter((c) => dirOf(c.filePath) === refDir);
    if (sameDir.length > 0) {
      return {
        original: ref,
        targetNodeId: sameDir[0]!.id,
        confidence: 0.95,
        resolvedBy: 'framework',
      };
    }

    // 2. `.tfvars` assignments set ROOT module variables, and var-files are
    //    routinely kept in a subdirectory (`envs/prod.tfvars`). Walk up to
    //    the nearest ancestor directory that declares the variable.
    if (ref.filePath.endsWith('.tfvars') && qname.startsWith('var.')) {
      const up = nearestAncestorMatch(candidates, refDir);
      if (up) {
        return { original: ref, targetNodeId: up.id, confidence: 0.9, resolvedBy: 'framework' };
      }
    }

    // 2b. Provider configurations are the one construct Terraform inherits
    //     across the module tree: they're declared in the root (or a parent)
    //     module and passed down, so `provider = aws.east` inside a child
    //     module legitimately names a configuration declared above it.
    if (qname.startsWith('provider.')) {
      const configs = candidates.filter((c) => c.kind === 'namespace');
      const up = nearestAncestorMatch(configs, refDir);
      if (up) {
        return { original: ref, targetNodeId: up.id, confidence: 0.9, resolvedBy: 'framework' };
      }
      return null;
    }

    // 3. No same-directory declaration → no edge. A candidate in another
    //    module directory is never the real target (cross-module access only
    //    exists through module.M inputs/outputs, bridged above), and a wrong
    //    edge is worse than none.
    return null;
  },
};

/** Nearest candidate walking UP the directory tree from refDir (exclusive). */