Fix all deep review issues: Hazelcast, Swagger, detectors, MCP, dead code, H2 cache

Architecture:
- Activate Hazelcast as Spring CacheManager (was overridden by spring.cache.type:simple)
- Add springdoc-openapi-starter-webmvc-ui for Swagger UI (/swagger-ui/index.html)
- Add CORS config for /api/** and /mcp/** (CorsConfig.java)
- Cache H2 data in memory during serve (GraphController, TopologyController, McpTools)
  — eliminates per-request full table scans
- Invalidate cache after POST /api/analyze

Detectors:
- Fix 25 @DetectorInfo annotations: ParserType.ANTLR → REGEX (honesty)
- Fix DjangoModelDetector + SQLAlchemyModelDetector: FK/M2M edges now set target
  node using wildcard convention (*:TargetClass) for cross-file resolution
- Fix NestJSControllerDetector: allow stacked decorators between @controller and class

API:
- Add pagination limit caps (max 1000) on all paginated endpoints
- Fix 7 REST endpoints returning 200 with error body → proper 503 status
- Wrap 16 MCP tools with try-catch → return JSON error instead of crash

New Features:
- Dead code detection: QueryService.findDeadCode() + REST endpoint + MCP tool
  Finds classes/methods/interfaces with no incoming calls/imports/extends

1,227 tests pass, 0 failures.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

Author: aksOps

pom.xml

@@ -126,6 +126,13 @@
             <artifactId>h2</artifactId>
         </dependency>
 
+        <!-- OpenAPI / Swagger UI -->
+        <dependency>
+            <groupId>org.springdoc</groupId>
+            <artifactId>springdoc-openapi-starter-webmvc-ui</artifactId>
+            <version>2.8.6</version>
+        </dependency>
+
         <!-- Testing -->
         <dependency>
             <groupId>org.springframework.boot</groupId>

src/main/java/io/github/randomcodespace/iq/api/GraphController.java

@@ -29,87 +29,108 @@ public class TopologyController {
 
     private final TopologyService topologyService;
     private final CodeIqConfig config;
+    private volatile List<CodeNode> cachedNodes;
+    private volatile List<CodeEdge> cachedEdges;
 
     public TopologyController(TopologyService topologyService, CodeIqConfig config) {
         this.topologyService = topologyService;
         this.config = config;
     }
 
+    // --- H2 in-memory cache: load once, reuse across requests ---
+
+    /**
+     * Ensure the H2 cache is loaded into memory. Thread-safe via synchronized.
+     */
+    private synchronized void ensureCacheLoaded() {
+        if (cachedNodes != null) return;
+        Path root = Path.of(config.getRootPath()).toAbsolutePath().normalize();
+        Path cachePath = root.resolve(config.getCacheDir()).resolve("analysis-cache.db");
+        Path h2File = root.resolve(config.getCacheDir()).resolve("analysis-cache.mv.db");
+        if (!Files.exists(h2File)) return;
+        try (AnalysisCache cache = new AnalysisCache(cachePath)) {
+            cachedNodes = cache.loadAllNodes();
+            cachedEdges = cache.loadAllEdges();
+        }
+    }
+
+    /**
+     * Invalidate the in-memory cache (e.g. after re-analysis).
+     */
+    public void invalidateCache() {
+        cachedNodes = null;
+        cachedEdges = null;
+    }
+
     @GetMapping
     public Map<String, Object> getTopology() {
-        var data = loadData();
-        return topologyService.getTopology(data.nodes(), data.edges());
+        ensureCacheLoaded();
+        requireCache();
+        return topologyService.getTopology(cachedNodes, cachedEdges);
     }
 
     @GetMapping("/services/{name}")
     public Map<String, Object> serviceDetail(@PathVariable String name) {
-        var data = loadData();
-        return topologyService.serviceDetail(name, data.nodes(), data.edges());
+        ensureCacheLoaded();
+        requireCache();
+        return topologyService.serviceDetail(name, cachedNodes, cachedEdges);
     }
 
     @GetMapping("/services/{name}/deps")
     public Map<String, Object> serviceDependencies(@PathVariable String name) {
-        var data = loadData();
-        return topologyService.serviceDependencies(name, data.nodes(), data.edges());
+        ensureCacheLoaded();
+        requireCache();
+        return topologyService.serviceDependencies(name, cachedNodes, cachedEdges);
     }
 
     @GetMapping("/services/{name}/dependents")
     public Map<String, Object> serviceDependents(@PathVariable String name) {
-        var data = loadData();
-        return topologyService.serviceDependents(name, data.nodes(), data.edges());
+        ensureCacheLoaded();
+        requireCache();
+        return topologyService.serviceDependents(name, cachedNodes, cachedEdges);
     }
 
     @GetMapping("/blast-radius/{nodeId}")
     public Map<String, Object> blastRadius(@PathVariable String nodeId) {
-        var data = loadData();
-        return topologyService.blastRadius(nodeId, data.nodes(), data.edges());
+        ensureCacheLoaded();
+        requireCache();
+        return topologyService.blastRadius(nodeId, cachedNodes, cachedEdges);
     }
 
     @GetMapping("/path")
     public List<Map<String, Object>> findPath(
             @RequestParam("from") String source,
             @RequestParam("to") String target) {
-        var data = loadData();
-        return topologyService.findPath(source, target, data.nodes(), data.edges());
+        ensureCacheLoaded();
+        requireCache();
+        return topologyService.findPath(source, target, cachedNodes, cachedEdges);
     }
 
     @GetMapping("/bottlenecks")
     public List<Map<String, Object>> findBottlenecks() {
-        var data = loadData();
-        return topologyService.findBottlenecks(data.nodes(), data.edges());
+        ensureCacheLoaded();
+        requireCache();
+        return topologyService.findBottlenecks(cachedNodes, cachedEdges);
     }
 
     @GetMapping("/circular")
     public List<List<String>> findCircularDeps() {
-        var data = loadData();
-        return topologyService.findCircularDeps(data.nodes(), data.edges());
+        ensureCacheLoaded();
+        requireCache();
+        return topologyService.findCircularDeps(cachedNodes, cachedEdges);
     }
 
     @GetMapping("/dead")
     public List<Map<String, Object>> findDeadServices() {
-        var data = loadData();
-        return topologyService.findDeadServices(data.nodes(), data.edges());
+        ensureCacheLoaded();
+        requireCache();
+        return topologyService.findDeadServices(cachedNodes, cachedEdges);
     }
 
-    /**
-     * Load nodes and edges from the analysis cache.
-     */
-    private GraphData loadData() {
-        Path root = Path.of(config.getRootPath()).toAbsolutePath().normalize();
-        Path cachePath = root.resolve(config.getCacheDir()).resolve("analysis-cache.db");
-        Path h2File = root.resolve(config.getCacheDir()).resolve("analysis-cache.mv.db");
-
-        if (!Files.exists(h2File)) {
+    private void requireCache() {
+        if (cachedNodes == null) {
             throw new ResponseStatusException(HttpStatus.NOT_FOUND,
                     "No analysis cache found. Run analyze first.");
         }
-
-        try (AnalysisCache cache = new AnalysisCache(cachePath)) {
-            List<CodeNode> nodes = cache.loadAllNodes();
-            List<CodeEdge> edges = cache.loadAllEdges();
-            return new GraphData(nodes, edges);
-        }
     }
-
-    private record GraphData(List<CodeNode> nodes, List<CodeEdge> edges) {}
 }

src/main/java/io/github/randomcodespace/iq/api/TopologyController.java

@@ -0,0 +1,28 @@
+package io.github.randomcodespace.iq.config;
+
+import org.springframework.context.annotation.Bean;
+import org.springframework.context.annotation.Configuration;
+import org.springframework.context.annotation.Profile;
+import org.springframework.web.servlet.config.annotation.CorsRegistry;
+import org.springframework.web.servlet.config.annotation.WebMvcConfigurer;
+
+@Configuration
+@Profile("serving")
+public class CorsConfig {
+    @Bean
+    public WebMvcConfigurer corsConfigurer() {
+        return new WebMvcConfigurer() {
+            @Override
+            public void addCorsMappings(CorsRegistry registry) {
+                registry.addMapping("/api/**")
+                        .allowedOrigins("*")
+                        .allowedMethods("GET", "POST", "PUT", "DELETE", "OPTIONS")
+                        .allowedHeaders("*");
+                registry.addMapping("/mcp/**")
+                        .allowedOrigins("*")
+                        .allowedMethods("GET", "POST", "OPTIONS")
+                        .allowedHeaders("*");
+            }
+        };
+    }
+}

src/main/java/io/github/randomcodespace/iq/config/CorsConfig.java

@@ -22,7 +22,7 @@
     name = "cpp_structures",
     category = "structures",
     description = "Detects C/C++ classes, structs, functions, namespaces, and includes",
-    parser = ParserType.ANTLR,
+    parser = ParserType.REGEX,
     languages = {"cpp", "c"},
     nodeKinds = {NodeKind.CLASS, NodeKind.ENUM, NodeKind.METHOD, NodeKind.MODULE},
     edgeKinds = {EdgeKind.EXTENDS, EdgeKind.IMPORTS}

src/main/java/io/github/randomcodespace/iq/detector/cpp/CppStructuresDetector.java

@@ -22,7 +22,7 @@
     name = "csharp_efcore",
     category = "entities",
     description = "Detects Entity Framework Core DbContexts, entities, and migrations",
-    parser = ParserType.ANTLR,
+    parser = ParserType.REGEX,
     languages = {"csharp"},
     nodeKinds = {NodeKind.ENTITY, NodeKind.MIGRATION, NodeKind.REPOSITORY},
     edgeKinds = {EdgeKind.QUERIES},

src/main/java/io/github/randomcodespace/iq/detector/csharp/CSharpEfcoreDetector.java

@@ -22,7 +22,7 @@
     name = "csharp_minimal_apis",
     category = "endpoints",
     description = "Detects C# minimal API endpoints (MapGet, MapPost, etc.)",
-    parser = ParserType.ANTLR,
+    parser = ParserType.REGEX,
     languages = {"csharp"},
     nodeKinds = {NodeKind.ENDPOINT, NodeKind.GUARD, NodeKind.MODULE},
     edgeKinds = {EdgeKind.EXPOSES},

src/main/java/io/github/randomcodespace/iq/detector/csharp/CSharpMinimalApisDetector.java

@@ -20,7 +20,7 @@
     name = "csharp_structures",
     category = "structures",
     description = "Detects C# classes, interfaces, enums, records, and controller endpoints",
-    parser = ParserType.ANTLR,
+    parser = ParserType.REGEX,
     languages = {"csharp"},
     nodeKinds = {NodeKind.ABSTRACT_CLASS, NodeKind.CLASS, NodeKind.ENDPOINT, NodeKind.ENUM, NodeKind.INTERFACE, NodeKind.MODULE},
     edgeKinds = {EdgeKind.EXTENDS, EdgeKind.IMPLEMENTS, EdgeKind.IMPORTS},

src/main/java/io/github/randomcodespace/iq/detector/csharp/CSharpStructuresDetector.java

@@ -22,7 +22,7 @@
     name = "go_orm",
     category = "database",
     description = "Detects Go ORM usage (GORM models, queries, migrations, connections)",
-    parser = ParserType.ANTLR,
+    parser = ParserType.REGEX,
     languages = {"go"},
     nodeKinds = {NodeKind.DATABASE_CONNECTION, NodeKind.ENTITY, NodeKind.MIGRATION, NodeKind.QUERY},
     edgeKinds = {EdgeKind.QUERIES},

src/main/java/io/github/randomcodespace/iq/detector/go/GoOrmDetector.java

@@ -20,7 +20,7 @@
     name = "go_structures",
     category = "structures",
     description = "Detects Go structs, interfaces, functions, and imports",
-    parser = ParserType.ANTLR,
+    parser = ParserType.REGEX,
     languages = {"go"},
     nodeKinds = {NodeKind.CLASS, NodeKind.INTERFACE, NodeKind.METHOD, NodeKind.MODULE},
     edgeKinds = {EdgeKind.DEFINES, EdgeKind.IMPORTS}