Java: outbound HTTP calls through an injected client, a format-string URL or a request builder yield no HTTP_CALLS #2668

// InlineClient.java   (control: these two DO produce HTTP_CALLS)
package com.acme.client;
import org.springframework.web.client.RestTemplate;
public class InlineClient {
    public String literal() {
        return new RestTemplate().getForObject("/v1/orders", String.class);
    }
    public String concat(String baseUrl) {
        return new RestTemplate().getForObject(baseUrl + "/challenges/state", String.class);
    }
}

// JarFieldClient.java   (gap 1: jar-typed field; `verified` also hits gap 2)
package com.acme.client;
import org.springframework.web.client.RestTemplate;
public class JarFieldClient {
    private final RestTemplate restTemplate;
    public JarFieldClient(RestTemplate restTemplate) { this.restTemplate = restTemplate; }
    public String orders() {
        return restTemplate.getForObject("/v1/orders", String.class);
    }
    public String verified(String baseUrl, String challengeId, String token) {
        return restTemplate.getForObject("%s/challenges/%s/verified/%s".formatted(baseUrl, challengeId, token), String.class);
    }
}

// LocalVarClient.java   (gap 1: jar-typed parameter and local)
package com.acme.client;
import org.springframework.web.client.RestTemplate;
public class LocalVarClient {
    public String orders(RestTemplate rt) {
        return rt.getForObject("/v1/orders", String.class);
    }
    public String byId(RestTemplate rt) {
        var t = rt;
        return t.getForObject("/v1/orders/{id}", String.class, "42");
    }
}

// WrapperClient.java   (gap 1: in-house wrapper type from a jar; build() returns a RestTemplate)
package com.acme.client;
import com.acme.http.AcmeHttpClientBuilder;
public class WrapperClient {
    private final AcmeHttpClientBuilder builder;
    public WrapperClient(AcmeHttpClientBuilder builder) { this.builder = builder; }
    public String orders() {
        return builder.build().getForObject("/v1/orders", String.class);
    }
}

// FormatInlineClient.java   (gap 2 alone: inline client, format-string URL)
package com.acme.client;
import org.springframework.web.client.RestTemplate;
public class FormatInlineClient {
    public String verified(String baseUrl, String challengeId, String token) {
        return new RestTemplate().getForObject("%s/challenges/%s/verified/%s".formatted(baseUrl, challengeId, token), String.class);
    }
}

// OkClient.java   (gap 3 alone: inline client, URL into a builder, dispatched by a later call)
package com.acme.client;
import okhttp3.OkHttpClient;
import okhttp3.Request;
import okhttp3.Response;
public class OkClient {
    public Response orders() throws Exception {
        Request request = new Request.Builder().url("/v1/orders").get().build();
        return new OkHttpClient().newCall(request).execute();
    }
}

// OrderResource.java
package com.acme.server;
import jakarta.ws.rs.GET;
import jakarta.ws.rs.POST;
import jakarta.ws.rs.Path;
import jakarta.ws.rs.PathParam;
@Path("/v1/orders")
public class OrderResource {
    @GET public String list() { return "[]"; }
    @GET @Path("/{id}") public String get(@PathParam("id") String id) { return id; }
    @POST public String create(String body) { return body; }
}

// ChallengeResource.java
package com.acme.server;
import jakarta.ws.rs.GET;
import jakarta.ws.rs.Path;
import jakarta.ws.rs.PathParam;
@Path("/challenges")
public class ChallengeResource {
    @GET @Path("/state") public String state() { return "ok"; }
    @GET @Path("/{id}/verified/{token}")
    public String verified(@PathParam("id") String id, @PathParam("token") String token) { return id; }
}