@bleedingdev/modern-js-code-tools 3.9.0-ultramodern.9 → 3.9.3-ultramodern.10

package/dist/esm-node/oxlint-plugin/rules/strict-effect-api-boundaries.js

@@ -21,7 +21,7 @@ const createStrictEffectApiBoundariesRule = ()=>({
                     });
                     reportProgramPattern(context, node, source, /@modern-js\/plugin-bff\/(?:server|hono-server)(?![\w-])/u, 'UltraModern API workspaces must not import Hono server helpers; use @modern-js/bff-effect/effect-edge and HttpApi.');
                     reportProgramPattern(context, node, source, /\bruntimeFramework\s*(?::|=)\s*['"]hono['"]/u, 'UltraModern API apps must use bff.runtimeFramework: "effect".');
-                    reportProgramPattern(context, node, source, /(?:from|import)\s*['"][^'"]*(?:api\/effect|shared\/effect)[^'"]*['"]|shared-effect-api/u, 'Import API code from direct api/index.ts, shared/api.ts or src/api/* paths, not api/effect, shared/effect or shared Effect API packages.');
+                    reportProgramPattern(context, node, source, /(?:from|import)\s*['"][^'"]*(?:api\/effect|shared\/effect)(?=\/|\.[cm]?[jt]sx?['"]|['"])[^'"]*['"]|shared-effect-api/u, 'Import API code from direct api/index.ts, shared/api.ts or src/api/* paths, not api/effect, shared/effect or shared Effect API packages.');
                     reportProgramPattern(context, node, source, /\bstrictEffectApproach\s*(?::|=)\s*false\b/u, 'UltraModern API apps must keep strictEffectApproach enabled.');
                     if (isApiEntryFile(filename)) {
                         const violation = strictEffectRuntimeTopologyViolation(source, createEffectApiImportResolver(filename));

package/dist/esm-node/source-analysis.js

@@ -0,0 +1,49 @@
+import "node:module";
+import { parse } from "@babel/parser";
+import traverse, { Hub, NodePath } from "@babel/traverse";
+import * as __rspack_external__babel_types_6e8337dd from "@babel/types";
+const consumerParserPlugins = (filePath)=>/\.[jt]sx$/u.test(filePath) ? [
+        "typescript",
+        'decorators',
+        'decoratorAutoAccessors',
+        'jsx'
+    ] : [
+        "typescript",
+        'decorators',
+        'decoratorAutoAccessors'
+    ];
+class SourceSyntaxError extends Error {
+}
+class SourceValidationHub extends Hub {
+    buildError(_node, message) {
+        return new SourceSyntaxError(message);
+    }
+}
+function parseSource(source, filename, syntaxMessage) {
+    try {
+        return parse(source, {
+            sourceType: 'module',
+            sourceFilename: filename,
+            plugins: consumerParserPlugins(filename)
+        });
+    } catch (cause) {
+        if ('object' == typeof cause && null !== cause && 'code' in cause && 'BABEL_PARSER_SYNTAX_ERROR' === cause.code && 'reasonCode' in cause && 'string' == typeof cause.reasonCode) throw new SourceSyntaxError(syntaxMessage ?? (cause instanceof Error ? cause.message : String(cause)));
+        throw cause;
+    }
+}
+function traverseSource(file, visitor) {
+    const program = NodePath.get({
+        hub: new SourceValidationHub(),
+        parentPath: void 0,
+        parent: file,
+        container: file,
+        key: 'program'
+    });
+    program.setContext();
+    traverse(file, visitor, program.scope, void 0, program);
+}
+function unwrapExpression(node, includeAssertions = false) {
+    while(__rspack_external__babel_types_6e8337dd.isTSAsExpression(node) || __rspack_external__babel_types_6e8337dd.isParenthesizedExpression(node) || __rspack_external__babel_types_6e8337dd.isTSSatisfiesExpression(node) || includeAssertions && (__rspack_external__babel_types_6e8337dd.isTSTypeAssertion(node) || __rspack_external__babel_types_6e8337dd.isTSNonNullExpression(node) || __rspack_external__babel_types_6e8337dd.isTSInstantiationExpression(node)))node = node.expression;
+    return node;
+}
+export { SourceSyntaxError, consumerParserPlugins, parseSource, traverseSource, unwrapExpression };

package/dist/esm-node/strict-effect-runtime.js

@@ -1,24 +1,26 @@
 import "node:module";
 import node_fs from "node:fs";
 import node_path from "node:path";
-import { parse } from "@babel/parser";
-import traverse, { Hub, NodePath } from "@babel/traverse";
+import { SourceSyntaxError, parseSource, traverseSource, unwrapExpression } from "./source-analysis.js";
 import * as __rspack_external__babel_types_6e8337dd from "@babel/types";
 const edge = '@modern-js/bff-effect/effect-edge';
 const nodeRuntime = '@modern-js/bff-effect/effect';
-const sharedRuntime = /^@[^/]+\/shared-contracts\/server\/effect-bff-runtime$/u;
-const failure = 'Generated API entries must export defineEffectBff(...) or the server-only shared Effect BFF assembly helper with an explicitly composed handler Layer and an unshadowed executable root; entries must implement handlers through HttpApiBuilder.group.';
-const invalidSources = new WeakSet();
-function invalidSource(message) {
-    const error = new Error(message);
-    invalidSources.add(error);
-    return error;
-}
-class SourceValidationHub extends Hub {
-    buildError(_node, message) {
-        return invalidSource(message);
-    }
-}
+const assembly = '@modern-js/bff-effect/assembly';
+const failure = 'Generated API entries must export defineEffectBff(...) or the native Effect BFF assembly helper with an explicitly composed handler Layer and an unshadowed executable root; entries must implement handlers through HttpApiBuilder.group.';
+const MAX_API_SOURCE_MODULES = 256;
+const httpRouteMethods = new Set([
+    '*',
+    'GET',
+    'POST',
+    'PUT',
+    'PATCH',
+    'DELETE',
+    'HEAD',
+    'OPTIONS',
+    'TRACE',
+    'CONNECT',
+    'QUERY'
+]);
 function createEffectApiImportResolver(filename) {
     const directory = node_fs.realpathSync(node_path.dirname(filename));
     const owner = node_fs.realpathSync(node_path.resolve(directory, '..'));
@@ -50,34 +52,14 @@ function strictEffectRuntimeTopologyViolation(source, resolveImport) {
     const load = (input)=>{
         const existing = modules.get(input.id);
         if (existing) return existing;
-        if (modules.size >= 64 || input.source.length > 1000000) throw invalidSource('API source budget exceeded');
-        let file;
-        try {
-            file = parse(input.source, {
-                sourceType: 'module',
-                sourceFilename: input.id,
-                plugins: [
-                    "typescript"
-                ]
-            });
-        } catch (cause) {
-            if ('object' == typeof cause && null !== cause && 'code' in cause && 'BABEL_PARSER_SYNTAX_ERROR' === cause.code && 'reasonCode' in cause && 'string' == typeof cause.reasonCode) throw invalidSource('Invalid API syntax');
-            throw cause;
-        }
+        if (modules.size >= MAX_API_SOURCE_MODULES || input.source.length > 1000000) throw new SourceSyntaxError('API source budget exceeded');
+        const file = parseSource(input.source, input.id, 'Invalid API syntax');
         const module = {
             ...input,
             file
         };
         modules.set(input.id, module);
-        const program = NodePath.get({
-            hub: new SourceValidationHub(),
-            parentPath: void 0,
-            parent: file,
-            container: file,
-            key: 'program'
-        });
-        program.setContext();
-        traverse(file, {
+        traverseSource(file, {
             enter (nodePath) {
                 paths.set(nodePath.node, nodePath);
                 owners.set(nodePath.node, module);
@@ -86,9 +68,12 @@ function strictEffectRuntimeTopologyViolation(source, resolveImport) {
                 })) {
                     let target = nodePath.isAssignmentExpression() ? nodePath.node.left : nodePath.node.argument;
                     while(__rspack_external__babel_types_6e8337dd.isMemberExpression(target))target = target.object;
-                    if (__rspack_external__babel_types_6e8337dd.isIdentifier(target)) {
-                        const binding = nodePath.scope.getBinding(target.name);
-                        if (binding) mutated.add(binding);
+                    let binding = __rspack_external__babel_types_6e8337dd.isIdentifier(target) ? nodePath.scope.getBinding(target.name) : void 0;
+                    while(binding && !mutated.has(binding)){
+                        mutated.add(binding);
+                        const declarator = binding.path.node;
+                        const alias = 'const' === binding.kind && __rspack_external__babel_types_6e8337dd.isVariableDeclarator(declarator) && declarator.init ? unwrapExpression(declarator.init, true) : void 0;
+                        binding = __rspack_external__babel_types_6e8337dd.isIdentifier(alias) ? binding.path.scope.getBinding(alias.name) : void 0;
                     }
                 }
                 if (nodePath.isTSModuleDeclaration() && __rspack_external__babel_types_6e8337dd.isIdentifier(nodePath.node.id)) {
@@ -96,7 +81,7 @@ function strictEffectRuntimeTopologyViolation(source, resolveImport) {
                     if (binding) mutated.add(binding);
                 }
             }
-        }, program.scope, void 0, program);
+        });
         return module;
     };
     try {
@@ -105,10 +90,7 @@ function strictEffectRuntimeTopologyViolation(source, resolveImport) {
             source,
             resolveImport
         });
-        const unwrap = (node)=>{
-            while(__rspack_external__babel_types_6e8337dd.isParenthesizedExpression(node) || __rspack_external__babel_types_6e8337dd.isTSSatisfiesExpression(node) || __rspack_external__babel_types_6e8337dd.isTSAsExpression(node) || __rspack_external__babel_types_6e8337dd.isTSTypeAssertion(node) || __rspack_external__babel_types_6e8337dd.isTSNonNullExpression(node))node = node.expression;
-            return node;
-        };
+        const unwrap = (node)=>unwrapExpression(node, true);
         const binding = (node)=>{
             node = unwrap(node);
             if (!__rspack_external__babel_types_6e8337dd.isIdentifier(node)) return;
@@ -133,15 +115,15 @@ function strictEffectRuntimeTopologyViolation(source, resolveImport) {
         const namespaceSources = {
             HttpApi: [
                 edge,
-                'effect/unstable/httpapi'
+                'effect/http-api'
             ],
             HttpApiBuilder: [
                 edge,
-                'effect/unstable/httpapi'
+                'effect/http-api'
             ],
             HttpRouter: [
                 edge,
-                'effect/unstable/http'
+                'effect/http'
             ]
         };
         const native = (node, name, sources)=>{
@@ -237,7 +219,7 @@ function strictEffectRuntimeTopologyViolation(source, resolveImport) {
             if (!__rspack_external__babel_types_6e8337dd.isBlockStatement(body)) return body;
             const statements = body.body;
             const last = statements.at(-1);
-            return statements.slice(0, -1).every((statement)=>__rspack_external__babel_types_6e8337dd.isVariableDeclaration(statement)) && __rspack_external__babel_types_6e8337dd.isReturnStatement(last) ? last.argument : void 0;
+            return statements.slice(0, -1).every((statement)=>__rspack_external__babel_types_6e8337dd.isVariableDeclaration(statement) || __rspack_external__babel_types_6e8337dd.isTSTypeAliasDeclaration(statement) || __rspack_external__babel_types_6e8337dd.isTSInterfaceDeclaration(statement)) && __rspack_external__babel_types_6e8337dd.isReturnStatement(last) ? last.argument : void 0;
         };
         const pipe = (node, check)=>__rspack_external__babel_types_6e8337dd.isMemberExpression(node.callee) && !node.callee.computed && __rspack_external__babel_types_6e8337dd.isIdentifier(node.callee.property, {
                 name: 'pipe'
@@ -266,11 +248,48 @@ function strictEffectRuntimeTopologyViolation(source, resolveImport) {
                 if (method(node.callee, 'Layer', 'mergeAll', layerSources)) return node.arguments.length > 0 && node.arguments.every((argument)=>handlers(argument, api));
                 return method(node.callee, 'HttpApiBuilder', 'group') && 3 === node.arguments.length && apiIdentity(node.arguments[0]) === api && handled(node.arguments[2]);
             });
-        const transport = (node)=>guarded(node, (node)=>{
+        const effectSources = [
+            edge,
+            'effect',
+            'effect/Effect'
+        ];
+        const routeHandler = (node)=>{
+            node = unwrap(node);
+            if (!__rspack_external__babel_types_6e8337dd.isCallExpression(node) || !method(node.callee, 'HttpRouter', 'add') || 3 !== node.arguments.length) return;
+            const [verb, route, handler] = node.arguments;
+            return __rspack_external__babel_types_6e8337dd.isStringLiteral(verb) && httpRouteMethods.has(verb.value) && __rspack_external__babel_types_6e8337dd.isStringLiteral(route) && (route.value.startsWith('/') || '*' === route.value) && (__rspack_external__babel_types_6e8337dd.isArrowFunctionExpression(handler) || __rspack_external__babel_types_6e8337dd.isFunctionExpression(handler)) ? handler : void 0;
+        };
+        const effectReference = (node)=>guarded(node, (node)=>{
+                const init = initialized(node);
+                if (init) return __rspack_external__babel_types_6e8337dd.isIdentifier(unwrap(init)) && effectReference(init);
+                const value = imported(node);
+                return !!value && !value.namespace;
+            });
+        const capturedRouteFactory = (node)=>guarded(node, (node)=>{
+                const init = initialized(node) ?? externalValue(node);
+                if (init) return capturedRouteFactory(init);
+                if (!__rspack_external__babel_types_6e8337dd.isArrowFunctionExpression(node) || node.async || 1 !== node.params.length || !__rspack_external__babel_types_6e8337dd.isIdentifier(node.params[0]) || __rspack_external__babel_types_6e8337dd.isBlockStatement(node.body)) return false;
+                const handler = routeHandler(node.body);
+                const parameter = binding(node.params[0]);
+                return !!handler && !!parameter && parameter.referencePaths.some((reference)=>!!reference.findParent((path)=>path.node === handler));
+            });
+        const capturedTransport = (node)=>guarded(node, (node)=>{
                 const init = initialized(node);
-                if (init) return transport(init);
+                if (init) return capturedTransport(init);
+                if (!__rspack_external__babel_types_6e8337dd.isCallExpression(node)) return false;
+                if (method(node.callee, 'Effect', 'map', effectSources)) return 2 === node.arguments.length && effectReference(node.arguments[0]) && capturedRouteFactory(node.arguments[1]);
+                if (!__rspack_external__babel_types_6e8337dd.isMemberExpression(node.callee) || node.callee.computed || !__rspack_external__babel_types_6e8337dd.isIdentifier(node.callee.property, {
+                    name: 'pipe'
+                }) || 1 !== node.arguments.length || !effectReference(node.callee.object)) return false;
+                const map = unwrap(node.arguments[0]);
+                return __rspack_external__babel_types_6e8337dd.isCallExpression(map) && method(map.callee, 'Effect', 'map', effectSources) && 1 === map.arguments.length && capturedRouteFactory(map.arguments[0]);
+            });
+        const transport = (node, provided = false)=>guarded(node, (node)=>{
+                const init = initialized(node) ?? externalValue(node);
+                if (init) return transport(init, provided);
                 if (!__rspack_external__babel_types_6e8337dd.isCallExpression(node)) return method(node, 'Layer', 'empty', layerSources);
-                return pipe(node, transport) || method(node.callee, 'HttpRouter', 'cors') || method(node.callee, 'Layer', 'mergeAll', layerSources) && node.arguments.length > 0 && node.arguments.every(transport);
+                const providedHere = provided || node.arguments.some((argument)=>__rspack_external__babel_types_6e8337dd.isCallExpression(argument) && method(argument.callee, 'Layer', 'provide', layerSources) && 1 === argument.arguments.length);
+                return pipe(node, (value)=>transport(value, providedHere)) || void 0 !== routeHandler(node) || provided && method(node.callee, 'Layer', 'unwrap', layerSources) && 1 === node.arguments.length && capturedTransport(node.arguments[0]) || method(node.callee, 'HttpRouter', 'cors') || method(node.callee, 'Layer', 'mergeAll', layerSources) && node.arguments.length > 0 && node.arguments.every((argument)=>transport(argument, provided));
             });
         const directLayer = (node, api)=>guarded(node, (node)=>{
                 const init = initialized(node);
@@ -302,7 +321,7 @@ function strictEffectRuntimeTopologyViolation(source, resolveImport) {
             const groupValue = externalValue(group);
             const groupInit = groupValue && initialized(groupValue);
             if (!groupInit || !__rspack_external__babel_types_6e8337dd.isCallExpression(groupInit) || !method(groupInit.callee, 'RpcGroup', 'make', [
-                'effect/unstable/rpc',
+                'effect/rpc',
                 '@modern-js/bff-effect/effect-client'
             ])) return false;
             const layerInit = initialized(layer) ?? unwrap(layer);
@@ -326,7 +345,7 @@ function strictEffectRuntimeTopologyViolation(source, resolveImport) {
                 if (value?.name === 'defineEffectBff' && [
                     edge,
                     nodeRuntime
-                ].includes(value.specifier) || value?.name === 'assembleEffectBffRuntime' && sharedRuntime.test(value.specifier)) {
+                ].includes(value.specifier) || value?.name === 'assembleEffectBffRuntime' && value.specifier === assembly) {
                     if (1 !== node.arguments.length) return false;
                     const values = properties(node.arguments[0]);
                     if (!values) return false;
@@ -349,7 +368,7 @@ function strictEffectRuntimeTopologyViolation(source, resolveImport) {
         const root = entry.file.program.body.find((statement)=>__rspack_external__babel_types_6e8337dd.isExportDefaultDeclaration(statement));
         return root && runtime(root.declaration) ? void 0 : failure;
     } catch (cause) {
-        if ('object' == typeof cause && null !== cause && invalidSources.has(cause)) return failure;
+        if (cause instanceof SourceSyntaxError) return failure;
         const message = 'object' == typeof cause && null !== cause && 'message' in cause && 'string' == typeof cause.message ? cause.message : String(cause);
         throw new Error(`Strict Effect API analysis failed: ${message}`, {
             cause

package/dist/types/cli/microvertical-api-check.d.ts

@@ -1 +1 @@
-export declare function runMicroVerticalApiCheckCli(args?: string[], filesOnly?: boolean): number;
+export declare function runMicroVerticalApiCheckCli(args?: string[], filesOnly?: boolean): Promise<number>;

package/dist/types/cli/workspace-source-check.d.ts

@@ -17,4 +17,4 @@ export type WorkspaceSourceCheckOptions = {
     readonly pluralCategories?: Readonly<Record<string, readonly string[]>>;
 };
 export declare const runWorkspaceSourceCheck: ({ cwd, sourceRoots, locales, pluralCategories, }?: WorkspaceSourceCheckOptions) => number;
-export declare const main: () => void;
+export declare const runWorkspaceSourceCheckCli: (args?: readonly string[]) => number;

package/dist/types/microvertical-api-baseline.d.ts

@@ -1,8 +1,7 @@
-/**
- * Only `.tsx` is JSX. Enabling JSX for a `.ts` file misreads a generic arrow
- * such as `const f = <T>(value: T) => value` as an unclosed JSX element.
- */
-export declare const consumerParserPlugins: (filePath: string) => ('typescript' | 'jsx')[];
+/** `order-items` -> `orderItems`: the stem as contract export names spell it. */
+export declare const camelCaseStem: (stem: string) => string;
+/** `order-items` -> `OrderItems`. */
+export declare const pascalCaseStem: (stem: string) => string;
 export interface MicroVerticalApiBaselineExpectation {
     /** Optional override for operation IDs outside reachable endpoint naming conventions. */
     readonly operationPaths?: Readonly<Record<string, string>>;

package/dist/types/microvertical-api-boundary.d.ts

@@ -1,9 +1,13 @@
+import { type ModuleGraph, type SourceModule } from './module-graph.js';
 export type { MicroVerticalApiBaselineExpectation, MicroVerticalTopologyEntry, } from './microvertical-api-baseline.js';
 export { configuredMicroVerticalApiStem, microVerticalApiBaselineViolation, } from './microvertical-api-baseline.js';
+export type { GraphValue, ModuleGraph, ModuleGraphHop, ResolvedBinding, SourceModule, } from './module-graph.js';
+export { createModuleGraph } from './module-graph.js';
 export interface MicroVerticalConfiguredApp {
     readonly path: string;
     readonly id?: string;
-    readonly kind?: string;
+    /** `shell` or `vertical`; selects the rules the app is checked against. */
+    readonly kind: string;
     readonly package?: string;
     readonly surfaceProfile?: string;
     readonly deliveryUnitKind?: string;
@@ -15,11 +19,22 @@ export interface MicroVerticalConfiguredApp {
         readonly additionalPaths?: Readonly<Record<string, string>>;
     };
 }
+export interface MicroVerticalApiSourceRuleContext {
+    /** Workspace-relative path of `module`. */
+    readonly file: string;
+    readonly module: SourceModule;
+    /** One graph per source file, shared by every rule for that file. */
+    readonly graph: ModuleGraph;
+}
+/** A consumer-owned source rule; each returned message is a violation. */
+export type MicroVerticalApiSourceRule = (context: MicroVerticalApiSourceRuleContext) => readonly string[];
 export interface MicroVerticalApiCheckOptions {
     readonly workspaceRoot: string;
     readonly configuredApps?: readonly MicroVerticalConfiguredApp[];
-    /** Explicit expected installed owner, useful for isolated/non-hoisted installations. */
+    /** Exact installed owner constraint; otherwise resolve each contract’s native owner. */
     readonly baselinePackageDirectory?: string;
+    /** Rules run once per workspace TypeScript/JavaScript source file. */
+    readonly sourceRules?: readonly MicroVerticalApiSourceRule[];
 }
 export interface MicroVerticalApiCheckResult {
     readonly diagnostics: readonly string[];

package/dist/types/microvertical-api-owner.d.ts

@@ -3,4 +3,4 @@ export declare const baselinePackage = "@modern-js/bff-effect/microvertical-api"
 /** Locate the installed package from this consumer's resolver, never this tool's installation. */
 export declare function resolveBaselinePackageDirectory(fromFile: string): string;
 /** Follow only public bindings and local barrels. Never examine schema implementation expressions. */
-export declare function baselinePublicIdentityIsExact(fromFile: string, expectation: MicroVerticalApiBaselineExpectation): boolean;
+export declare function baselinePublicIdentityIsExact(fromFile: string, expectation: MicroVerticalApiBaselineExpectation, reportMismatch?: (message: string) => void): boolean;

package/dist/types/module-graph.d.ts

@@ -0,0 +1,100 @@
+import * as t from '@babel/types';
+/** A parsed workspace module and the package directory it may traverse privately. */
+export interface SourceModule {
+    readonly file: t.File;
+    /** Real absolute path. */
+    readonly path: string;
+    /** Real package directory; relative imports may not leave it. */
+    readonly boundary: string;
+    /**
+     * Every assignment, update and namespace merge in the module. Validation
+     * that reads initializers directly must reject a module that has any.
+     */
+    readonly mutations: readonly t.Node[];
+}
+/** One `name` looked up in the module at `path`, in traversal order. */
+export interface ModuleGraphHop {
+    readonly path: string;
+    readonly name: string;
+}
+/**
+ * Where a binding ends up. `declaration` is a workspace `const` initializer;
+ * `external` is a named import or re-export from a package outside the
+ * workspace source graph. `chain` starts at the requesting module and ends at
+ * the declaring module (or the last workspace module before the package).
+ */
+export type ResolvedBinding = {
+    readonly kind: 'declaration';
+    readonly expression: t.Expression;
+    readonly module: SourceModule;
+    readonly chain: readonly ModuleGraphHop[];
+} | {
+    readonly kind: 'external';
+    readonly specifier: string;
+    readonly name: string;
+    readonly chain: readonly ModuleGraphHop[];
+};
+/**
+ * One value an expression can evaluate to.
+ * - `external`: `name` imported from package `specifier`, then `members`
+ *   accessed on it (`Schema.Unknown` is `effect` / `Schema` / `['Unknown']`;
+ *   a namespace import of the package itself is `name: '*'`).
+ * - `node`: a workspace expression, function or class the source spells out
+ *   (a call to an external factory, a literal, a function).
+ * - `unresolved`: a parameter, global, dynamic access or anything beyond the
+ *   analysis budget. Rules that must be sound treat it as a violation.
+ */
+export type GraphValue = {
+    readonly kind: 'external';
+    readonly specifier: string;
+    readonly name: string;
+    readonly members: readonly string[];
+} | {
+    readonly kind: 'node' | 'unresolved';
+    readonly node: t.Node;
+    readonly module: SourceModule;
+};
+export interface ModuleGraph {
+    /**
+     * The parsed workspace module at `filePath`, parsed once per graph. Throws
+     * `SourceSyntaxError` when the file is not readable consumer source.
+     */
+    module(filePath: string): SourceModule;
+    /**
+     * Follow a local binding (`scope: 'local'`) or an export (`'export'`) of
+     * `module` through relative imports, re-exports and public workspace
+     * package exports to an unmutated `const`. Unresolvable, mutated, cyclic or
+     * over-budget bindings return undefined so callers fail closed.
+     */
+    resolve(module: SourceModule, name: string, scope: 'export' | 'local'): ResolvedBinding | undefined;
+    /**
+     * `resolve` for one lexical occurrence: an identifier `module` references
+     * or declares, or `namespace.member` on a namespace import. The binding is
+     * the one in scope at that node, not the module-scope name.
+     */
+    resolveReference(module: SourceModule, reference: t.Node): ResolvedBinding | undefined;
+    /** True only for an identifier `module` references that has no binding (a global). */
+    isUnboundReference(module: SourceModule, reference: t.Node): boolean;
+    /**
+     * Every value `expression` (a node of `module`) can evaluate to, following
+     * any binding kind, destructuring, member access into object literals,
+     * member assignments (`obj.key = value`), reassignments, conditional
+     * branches, and calls into workspace functions through their returns.
+     */
+    evaluate(module: SourceModule, expression: t.Node): readonly GraphValue[];
+    /**
+     * Every `external` and `unresolved` value reachable from `expression`: each
+     * reference inside it is evaluated, and every workspace node it evaluates
+     * to is walked in turn, across modules. `Schema.Struct({ a: shared })`
+     * reaches `Schema.Struct` plus whatever `shared` is built from.
+     */
+    reachable(module: SourceModule, expression: t.Node): readonly GraphValue[];
+}
+export declare const propertyName: (node: t.Node | undefined) => string | undefined;
+export declare const localConst: (sourceFile: t.File, name: string) => t.VariableDeclarator | undefined;
+export declare const exportedConst: (sourceFile: t.File, name: string) => t.VariableDeclarator | undefined;
+/**
+ * The workspace module graph. Each module is parsed once per graph; an
+ * unreadable module stays unresolved instead of assumed valid.
+ */
+export declare function createModuleGraph(): ModuleGraph;

package/dist/types/source-analysis.d.ts

@@ -0,0 +1,13 @@
+import { type Visitor } from '@babel/traverse';
+import * as t from '@babel/types';
+/**
+ * Only JSX extensions enable JSX: generic arrows in .ts must remain valid.
+ * Decorators are standard TypeScript syntax.
+ */
+export declare const consumerParserPlugins: (filePath: string) => ('typescript' | 'jsx' | 'decorators' | 'decoratorAutoAccessors')[];
+/** Only parser/binder diagnostics are policy violations; tool failures escape. */
+export declare class SourceSyntaxError extends Error {
+}
+export declare function parseSource(source: string, filename: string, syntaxMessage?: string): t.File;
+export declare function traverseSource(file: t.File, visitor: Visitor): void;
+export declare function unwrapExpression(node: t.Node, includeAssertions?: boolean): t.Node;

package/package.json

@@ -1,13 +1,13 @@
 {
   "name": "@bleedingdev/modern-js-code-tools",
   "description": "Code analysis tooling for Modern.js projects.",
-  "homepage": "https://github.com/BleedingDev/ultramodern.js#readme",
+  "homepage": "https://github.com/ultramodernjs/ultramodern.js#readme",
   "bugs": {
-    "url": "https://github.com/BleedingDev/ultramodern.js/issues"
+    "url": "https://github.com/ultramodernjs/ultramodern.js/issues"
   },
   "repository": {
     "type": "git",
-    "url": "git+https://github.com/BleedingDev/ultramodern.js.git",
+    "url": "git+https://github.com/ultramodernjs/ultramodern.js.git",
     "directory": "packages/toolkit/code-tools"
   },
   "license": "MIT",
@@ -23,7 +23,7 @@
   "engines": {
     "node": ">=20"
   },
-  "version": "3.9.0-ultramodern.9",
+  "version": "3.9.3-ultramodern.10",
   "types": "./dist/types/index.d.ts",
   "main": "./dist/esm-node/index.js",
   "typesVersions": {
@@ -72,16 +72,16 @@
     "bin"
   ],
   "dependencies": {
-    "@babel/parser": "^8.0.4",
-    "@babel/traverse": "^8.0.4",
-    "@babel/types": "^8.0.4",
-    "oxlint": "1.81.0"
+    "@babel/parser": "^8.0.7",
+    "@babel/traverse": "^8.0.7",
+    "@babel/types": "^8.0.6",
+    "oxlint": "1.88.0",
+    "resolve.exports": "2.0.4"
   },
   "devDependencies": {
-    "@rslib/core": "1.0.0",
+    "@rslib/core": "1.0.3",
     "@scripts/rstest-config": "2.66.0",
-    "@types/node": "^26.4.1",
-    "@typescript/native-preview": "7.0.0-dev.20260707.2"
+    "@types/node": "^26.6.5"
   },
   "sideEffects": false,
   "publishConfig": {
@@ -90,11 +90,15 @@
   "modern:source": "./src/index.ts",
   "bin": {
     "modern-api-check": "bin/modern-api-check.mjs",
-    "modern-api-check-files": "bin/modern-api-check-files.mjs"
+    "modern-api-check-files": "bin/modern-api-check-files.mjs",
+    "modern-i18n-check": "bin/modern-i18n-check.mjs"
   },
   "scripts": {
     "build": "rm -rf dist && rslib build -c rslib.config.mts",
     "dev": "rslib build -c rslib.config.mts -w",
-    "test": "rstest --passWithNoTests"
+    "test": "rstest"
+  },
+  "ultramodern": {
+    "sourceName": "@modern-js/code-tools"
   }
 }