python/javascript/ruby: mark internal predicates

Author: yoff

javascript/ql/lib/semmle/javascript/dataflow/internal/BarrierGuards.qll

@@ -60,6 +60,11 @@ module ExternalBarrierGuard {
 
   /**
    * Gets a barrier guard node of the given `kind` defined via models-as-data.
+   *
+   * This only provides external barrier nodes defined as guards. To get all externally defined barrer nodes,
+   * use `ModelOutput::barrierNode(node, kind)`.
+   *
+   * INTERNAL: Do not use.
    */
   DataFlow::Node getAnExternalBarrierNode(string kind) {
     result = MakeStateBarrierGuard<string, BarrierGuard>::getABarrierNode(kind)

javascript/ql/lib/semmle/javascript/frameworks/data/internal/ApiGraphModels.qll

@@ -848,11 +848,15 @@ module ModelOutput {
 
   /**
    * Holds if an external model contributed `barrier` with the given `kind`.
+   *
+   * INTERNAL: Do not use.
    */
   API::Node getABarrierNode(string kind) { result = getABarrierNode(kind, _) }
 
   /**
    * Holds if an external model contributed `barrier-guard` with the given `kind` and `branch`.
+   *
+   * INTERNAL: Do not use.
    */
   API::Node getABarrierGuardNode(string kind, boolean branch) {
     result = getABarrierGuardNode(kind, branch, _)

python/ql/lib/semmle/python/dataflow/new/internal/DataFlowPublic.qll

@@ -649,7 +649,14 @@ module ExternalBarrierGuard {
     )
   }
 
-  /** Gets a node that is an external barrier of the given kind. */
+  /**
+   * Gets a node that is an external barrier of the given kind.
+   *
+   * This only provides external barrier nodes defined as guards. To get all externally defined barrer nodes,
+   * use `ModelOutput::barrierNode(node, kind)`.
+   *
+   * INTERNAL: Do not use.
+   */
   ExprNode getAnExternalBarrierNode(string kind) {
     result = ParameterizedBarrierGuard<string, guardCheck/4>::getABarrierNode(kind)
   }

python/ql/lib/semmle/python/frameworks/data/internal/ApiGraphModels.qll

@@ -848,11 +848,15 @@ module ModelOutput {
 
   /**
    * Holds if an external model contributed `barrier` with the given `kind`.
+   *
+   * INTERNAL: Do not use.
    */
   API::Node getABarrierNode(string kind) { result = getABarrierNode(kind, _) }
 
   /**
    * Holds if an external model contributed `barrier-guard` with the given `kind` and `branch`.
+   *
+   * INTERNAL: Do not use.
    */
   API::Node getABarrierGuardNode(string kind, boolean branch) {
     result = getABarrierGuardNode(kind, branch, _)

ruby/ql/lib/codeql/ruby/dataflow/internal/DataFlowPublic.qll

@@ -1000,7 +1000,14 @@ module ExternalBarrierGuard {
     )
   }
 
-  /** Gets a node that is an external barrier of the given kind. */
+  /**
+   * Gets a node that is an external barrier of the given kind.
+   *
+   * This only provides external barrier nodes defined as guards. To get all externally defined barrer nodes,
+   * use `ModelOutput::barrierNode(node, kind)`.
+   *
+   * INTERNAL: Do not use.
+   */
   ExprNode getAnExternalBarrierNode(string kind) {
     result = ParameterizedBarrierGuard<string, guardCheck/4>::getABarrierNode(kind)
   }

ruby/ql/lib/codeql/ruby/frameworks/data/internal/ApiGraphModels.qll

@@ -848,11 +848,15 @@ module ModelOutput {
 
   /**
    * Holds if an external model contributed `barrier` with the given `kind`.
+   *
+   * INTERNAL: Do not use.
    */
   API::Node getABarrierNode(string kind) { result = getABarrierNode(kind, _) }
 
   /**
    * Holds if an external model contributed `barrier-guard` with the given `kind` and `branch`.
+   *
+   * INTERNAL: Do not use.
    */
   API::Node getABarrierGuardNode(string kind, boolean branch) {
     result = getABarrierGuardNode(kind, branch, _)