fix: exclude message-driven and security components from dead code detection

- Add GUARD, MIDDLEWARE, TOPIC, QUEUE, EVENT, MESSAGE_QUEUE to ENTRY_POINT_KINDS
  so they are never flagged as dead code (they are entry points / cross-cutting concerns)
- Remove invalid 'uses' edge kind from SEMANTIC_EDGE_KINDS (not a valid EdgeKind)
- Add 'protects' to SEMANTIC_EDGE_KINDS so PROTECTS edges from GuardLinker count
  as semantic usage when determining reachability
- Add two new tests: verifying new entry point kinds are excluded, and verifying
  'protects' is included / 'uses' is excluded from semantic edge kinds

Co-Authored-By: Paperclip <noreply@paperclip.ing>

Author: aksOps

src/main/java/io/github/randomcodespace/iq/query/QueryService.java

@@ -384,9 +384,10 @@ public Map<String, Object> getTopology() {
      * they are always present from parent modules/config files.
      */
     private static final List<String> SEMANTIC_EDGE_KINDS = List.of(
-            "calls", "imports", "depends_on", "uses", "extends", "implements",
+            "calls", "imports", "depends_on", "extends", "implements",
             "injects", "queries", "maps_to", "consumes", "listens",
-            "invokes_rmi", "overrides", "connects_to", "triggers", "renders");
+            "invokes_rmi", "overrides", "connects_to", "triggers", "renders",
+            "protects");
 
     /**
      * Node kinds that are entry points — they are intended to have no callers
@@ -398,7 +399,13 @@ public Map<String, Object> getTopology() {
             NodeKind.MIGRATION.getValue(),
             NodeKind.CONFIG_FILE.getValue(),
             NodeKind.CONFIG_KEY.getValue(),
-            NodeKind.CONFIG_DEFINITION.getValue());
+            NodeKind.CONFIG_DEFINITION.getValue(),
+            NodeKind.GUARD.getValue(),
+            NodeKind.MIDDLEWARE.getValue(),
+            NodeKind.TOPIC.getValue(),
+            NodeKind.QUEUE.getValue(),
+            NodeKind.EVENT.getValue(),
+            NodeKind.MESSAGE_QUEUE.getValue());
 
     @Cacheable(value = "dead-code", key = "#kind + ':' + #limit")
     public Map<String, Object> findDeadCode(String kind, int limit) {

src/test/java/io/github/randomcodespace/iq/query/QueryServiceTest.java

@@ -477,6 +477,48 @@ void findDeadCodeShouldExcludeEntryPointKinds() {
         assertTrue(excludeKinds.contains("websocket_endpoint"), "Should exclude websocket endpoints");
         assertTrue(excludeKinds.contains("migration"), "Should exclude migrations");
         assertTrue(excludeKinds.contains("config_file"), "Should exclude config files");
+        assertTrue(excludeKinds.contains("guard"), "Should exclude guards");
+        assertTrue(excludeKinds.contains("middleware"), "Should exclude middleware");
+        assertTrue(excludeKinds.contains("topic"), "Should exclude topics");
+        assertTrue(excludeKinds.contains("queue"), "Should exclude queues");
+        assertTrue(excludeKinds.contains("event"), "Should exclude events");
+        assertTrue(excludeKinds.contains("message_queue"), "Should exclude message queues");
+    }
+
+    @Test
+    void findDeadCodeShouldNotFlagMessageDrivenComponents() {
+        var guard = makeNode("guard:AuthGuard", NodeKind.GUARD, "AuthGuard");
+        var middleware = makeNode("mid:LoggingMiddleware", NodeKind.MIDDLEWARE, "LoggingMiddleware");
+        var topic = makeNode("topic:UserEvents", NodeKind.TOPIC, "UserEvents");
+        var queue = makeNode("queue:EmailQueue", NodeKind.QUEUE, "EmailQueue");
+        var event = makeNode("event:OrderPlaced", NodeKind.EVENT, "OrderPlaced");
+        var messageQueue = makeNode("mq:NotificationQueue", NodeKind.MESSAGE_QUEUE, "NotificationQueue");
+
+        // These are excluded via ENTRY_POINT_KINDS so graphStore won't return them
+        when(graphStore.findNodesWithoutIncomingSemantic(anyList(), anyList(), anyList(), eq(0), eq(100)))
+                .thenReturn(List.of());
+
+        Map<String, Object> result = service.findDeadCode(null, 100);
+
+        @SuppressWarnings("unchecked")
+        List<Map<String, Object>> deadCode = (List<Map<String, Object>>) result.get("dead_code");
+        assertTrue(deadCode.isEmpty(), "Message-driven and security components should not be flagged as dead code");
+    }
+
+    @Test
+    void findDeadCodeShouldIncludeProtectsInSemanticEdgeKinds() {
+        when(graphStore.findNodesWithoutIncomingSemantic(anyList(), anyList(), anyList(), eq(0), eq(50)))
+                .thenReturn(List.of());
+
+        service.findDeadCode(null, 50);
+
+        @SuppressWarnings("unchecked")
+        var captor = org.mockito.ArgumentCaptor.forClass(List.class);
+        verify(graphStore).findNodesWithoutIncomingSemantic(anyList(), captor.capture(), anyList(), eq(0), eq(50));
+        @SuppressWarnings("unchecked")
+        List<String> semanticKinds = captor.getValue();
+        assertTrue(semanticKinds.contains("protects"), "Should include 'protects' as semantic edge");
+        assertFalse(semanticKinds.contains("uses"), "Should NOT include 'uses' — not a valid EdgeKind");
     }
 
     @Test