@cplieger/deadset-ts 8.0.0-dev.18 → 8.0.0-dev.19

package/src/roots/manifest.ts

@@ -9,6 +9,7 @@ import type { Host } from "../host.ts";
 import { isAbsolutePath, joinPath, relativePath, resolvePath } from "../paths.ts";
 import { isRecord } from "../json-document.ts";
 import { MANIFEST, manifestAt, readJSON } from "../fs/manifest.ts";
+import type { HeldText } from "../commands/held.ts";
 import { pathsNamed, readCommands } from "../commands/read.ts";
 
 /** The three members that name an entry point beside `exports` and `bin`. */
@@ -41,12 +42,12 @@ export interface ManifestEntry {
   /** The directory of the manifest that names it, which `path` was resolved against. */
   readonly dir: string;
   /**
-   * On an entry that names no entry point, whose path is the manifest's directory, the text
-   * layer 3 holds: a whole command string the package runs, or the whole text of nodemon's
+   * On an entry that names no entry point, whose path is the manifest's directory, the texts
+   * layer 3 reads: a whole command string the package runs, or the values of nodemon's
    * configuration one is read from. Rooting enters no file for it and holds each file
-   * `spelledFiles` reads the text to name.
+   * `spelledFiles` reads their words to name.
    */
-  readonly held?: string;
+  readonly held?: readonly HeldText[];
 }
 
 /**
@@ -68,8 +69,9 @@ function below(member: string, key: string): string {
 
 /**
  * The whole text of nodemon's configuration, the manifest's `nodemonConfig` member and the
- * `nodemon.json` beside it, by the member each is. Layer 3 holds it whole, because nodemon runs
- * commands from keys besides `exec`, `events` among them: https://github.com/remy/nodemon#config-files
+ * `nodemon.json` beside it, by the member each is. The dependency rule reads it whole, and
+ * layer 3 each of its values, because nodemon runs commands from keys besides `exec`, `events`
+ * among them: https://github.com/remy/nodemon#config-files
  */
 export function nodemonTexts(
   host: Host,
@@ -89,6 +91,40 @@ export function nodemonTexts(
   ];
 }
 
+/**
+ * The texts layer 3 reads of one text of nodemon's configuration: each value of it but its
+ * `exec` command, which is read as a command string of its own, those under `events` read as
+ * command strings too, and the whole text where it does not parse. Its keys are never read.
+ */
+function nodemonValues(text: string): readonly HeldText[] {
+  let config: unknown;
+  try {
+    config = JSON.parse(text);
+  } catch {
+    return [{ text, shell: false }];
+  }
+  const found: HeldText[] = [];
+  const visit = (value: unknown, shell: boolean): void => {
+    if (Array.isArray(value) || isRecord(value)) {
+      for (const one of Object.values(value)) {
+        visit(one, shell);
+      }
+    } else if (
+      typeof value === "string" ||
+      typeof value === "number" ||
+      typeof value === "boolean"
+    ) {
+      found.push({ text: String(value), shell });
+    }
+  };
+  for (const [key, value] of Object.entries(isRecord(config) ? config : { "": config })) {
+    if (key !== "exec" || typeof value !== "string") {
+      visit(value, key === "events");
+    }
+  }
+  return found;
+}
+
 /**
  * The command strings one manifest runs, each at the member it is written under: each of its
  * `scripts`, and the `exec` command of nodemon's configuration, in the manifest's `nodemonConfig`
@@ -219,10 +255,19 @@ export function readManifest(host: Host, targetRoot: string): Manifest {
     for (const path of new Set(pathsNamed(readCommands(command, ".")).map((one) => one.path))) {
       found.push({ member, path, role: "script", published: false });
     }
-    found.push({ member, path: ".", role: "script", published: false, held: command });
+    found.push({
+      member,
+      path: ".",
+      role: "script",
+      published: false,
+      held: [{ text: command, shell: true, tested: member.startsWith("scripts[") }],
+    });
   }
   for (const { member, text } of nodemonTexts(host, targetRoot, manifest)) {
-    found.push({ member, path: ".", role: "script", published: false, held: text });
+    const held = nodemonValues(text);
+    if (held.length > 0) {
+      found.push({ member, path: ".", role: "script", published: false, held });
+    }
   }
 
   return {

package/src/roots/root-set.ts

@@ -22,6 +22,7 @@ import { typeQueryAliases } from "../type-query-alias.ts";
 import { bytewise } from "../text/compare.ts";
 import { holdsManifest } from "../fs/manifest.ts";
 import { globExpression } from "../text/glob.ts";
+import { heldWords, type HeldText } from "../commands/held.ts";
 import { spelledFiles } from "../text/named-files.ts";
 import type { Workflows } from "../entries/workflow-steps.ts";
 import { extensionOf, OUTPUT_EXTENSIONS } from "../extensions.ts";
@@ -104,6 +105,8 @@ export interface HeldScripts {
   readonly dir: string;
   /** Each file, by its path below the target root. */
   readonly files: readonly string[];
+  /** Whether a word that may write the file a command runs writes no path text (`roots.13`). */
+  readonly unwritten: boolean;
 }
 
 /** What decides the roots beside the declarations themselves. */
@@ -304,11 +307,12 @@ export function matchRef(pattern: string, ref: string): boolean {
 }
 
 /**
- * Per package, the own files its held texts name, as `spelledFiles` reads them, but those a
- * root enters with all they export: a command can use no more of such a file than the root
- * keeps live. A manifest's are its entries' held texts, and the target root's package has the
- * workflow steps, git hooks and makefile recipes beside its own, with the whole text of each
- * file they are read from.
+ * Per package, the own files the words of its held texts name, as `spelledFiles` reads them,
+ * but those a root enters with all they export: a command can use no more of such a file than
+ * the root keeps live. A manifest's are its entries' held texts, and the target root's package
+ * has the workflow steps, git hooks and makefile recipes beside its own, with the values of
+ * each file they are read from. A package is listed too where a word that may write the file
+ * a command runs writes no path text.
  */
 function scriptHolds(
   entries: readonly ManifestEntry[],
@@ -325,24 +329,22 @@ function scriptHolds(
     .filter((file) => !rooted.has(file.fileName))
     .map((file) => ({ file, paths: [file.fileName, ...files.writtenAs(file)] }));
   const cwd = host.workingDirectory();
-  const commands = new Map<string, string[]>([
-    [
-      resolvePath(cwd, targetRoot),
-      [...workflows.readings.map((reading) => reading.held), ...workflows.texts],
-    ],
-  ]);
+  const root = resolvePath(cwd, targetRoot);
+  const commands = new Map<string, HeldText[]>([[root, [...workflows.held]]]);
   for (const entry of entries) {
     if (entry.held !== undefined) {
       const dir = resolvePath(cwd, entry.dir);
-      commands.set(dir, [...(commands.get(dir) ?? []), entry.held]);
+      commands.set(dir, [...(commands.get(dir) ?? []), ...entry.held]);
     }
   }
   const held: HeldScripts[] = [];
   for (const [dir, texts] of commands) {
-    const named = spelledFiles(texts.join("\n"), dir, spelled);
-    if (named.length > 0) {
-      const paths = named.map((file) => relativePath(targetRoot, file.fileName) ?? file.fileName);
-      held.push({ dir, files: paths });
+    const named = spelledFiles(heldWords(texts), dir, root, spelled);
+    if (named.files.length > 0 || named.unwritten) {
+      const paths = named.files.map(
+        (file) => relativePath(targetRoot, file.fileName) ?? file.fileName,
+      );
+      held.push({ dir, files: paths, unwritten: named.unwritten });
     }
   }
   return held;

package/src/text/named-files.ts

@@ -1,13 +1,30 @@
-/**
- * Layer 3 of the command reader: the files and the package names a command's text names, read
- * as plain text. The text is searched for each name, which every spelling of what it names
- * contains, so no part of it is split, unquoted or skipped first.
- */
+/** Layer 3 of the command reader: the files its words name, and the package names a command's text names. */
 
+import type { HeldWord } from "../commands/held.ts";
+import { PART } from "../commands/shell.ts";
+import { APPENDED_EXTENSIONS, extensionOf } from "../extensions.ts";
 import { dirnamePath, normalizePath, relativePath } from "../paths.ts";
 
-/** The extension a source or an emitted file carries: a JavaScript or TypeScript one, or a declaration's. */
-const SOURCE_EXTENSION = /\.(?:d\.[cm]?ts|[cm]?[jt]s|[jt]sx)$/u;
+/** The extensions a name of a file drops: a source's, an emitted file's, and a declaration's (roots.13). */
+const NAMED_EXTENSIONS = [...APPENDED_EXTENSIONS, ".d.ts", ".d.mts", ".d.cts"];
+
+/** A character a package's or a command's name may hold, so one beside a name makes it part of a longer one. */
+const NAME_CHARACTER = /[\w.@-]/u;
+
+const SEPARATOR = /[/\\]/u;
+
+/**
+ * What makes one name of a file a path where it appears: a `stem`, a last segment without its
+ * extension, may have the extension after it; a `segment`, a whole last segment, is one where
+ * it holds an extension of its own; a `directory`, an `index` file's, may have a separator
+ * after it; and `root` is `.`, the package's own directory.
+ */
+type NameKind = "stem" | "segment" | "directory" | "root";
+
+interface FileName {
+  readonly text: string;
+  readonly kind: NameKind;
+}
 
 /** One file, and every path it is spelled by: its own and each one the project writes it to. */
 interface Spelled<File> {
@@ -16,60 +33,340 @@ interface Spelled<File> {
 }
 
 /**
- * The names whose presence in a text holds one path below `dir`: its last name without the
- * extension, or with it where nothing else is left, and for an `index` file its directory's
- * last name, and `.` too where that is `dir`. Every spelling of the path relative to `dir`,
- * with or without `./`, `/` or `\`, its extension or its `/index` part, and every longer path
- * ending in one, holds one of them. None is empty, because an empty name is in every text.
+ * The names whose appearance as a path in a text holds one path below `dir`: its last segment
+ * without the extension, or whole where nothing else is left or it has none, and for an
+ * `index` file its directory's last segment, and `.` too where that is `dir`. Every spelling
+ * of the path that writes it as a path holds one of them (roots.13). None is empty, because
+ * an empty name is in every text.
  */
-function stemsOf(path: string, dir: string): readonly string[] {
+function namesOf(path: string, dir: string): readonly FileName[] {
   const last = path.slice(path.lastIndexOf("/") + 1);
-  const bare = last.replace(SOURCE_EXTENSION, "");
-  const name = bare === "" ? last : bare;
-  if (name !== "index") {
-    return [name];
+  const bare = last.slice(0, last.length - (extensionOf(last, NAMED_EXTENSIONS)?.length ?? 0));
+  const own: FileName =
+    bare === "" || bare === last ? { text: last, kind: "segment" } : { text: bare, kind: "stem" };
+  if (own.text !== "index") {
+    return [own];
   }
   const parent = dirnamePath(path);
+  const directory = parent.slice(parent.lastIndexOf("/") + 1);
   return [
-    name,
-    parent.slice(parent.lastIndexOf("/") + 1),
-    ...(parent === normalizePath(dir) ? ["."] : []),
-  ].filter((stem) => stem !== "");
+    own,
+    ...(directory === "" ? [] : [{ text: directory, kind: "directory" as const }]),
+    ...(parent === normalizePath(dir) ? [{ text: ".", kind: "root" as const }] : []),
+  ];
+}
+
+/**
+ * Whether a name that ends at `end` ends there as a path: no name character follows, nor a
+ * separator, which goes on to a path below it, nor a part, whose text goes on with the name,
+ * nor a `.` that a word character or a part follows, which goes on to another extension.
+ */
+function endsAt(text: string, end: number): boolean {
+  const next = text.charAt(end);
+  const after = text.charAt(end + 1);
+  return (
+    !/[\w@/\\-]/u.test(next) &&
+    next !== PART &&
+    !(next === "." && (/\w/u.test(after) || after === PART))
+  );
+}
+
+/** A character a word that writes a path may hold, a part only its run knows among them. */
+const PATH_CHARACTER = new RegExp(`[\\w.@+/\\\\${PART}-]`, "u");
+
+/** A run of {@link PATH_CHARACTER}s: a word as {@link noFileEnd} reads one. */
+const PATH_WORD = new RegExp(`${PATH_CHARACTER.source}+`, "gu");
+
+const SCOPED_PACKAGE = /^@[\w-][\w.-]*\/[\w-][\w.-]*(?:@[\w.-]*)?$/u;
+
+/**
+ * The end of what `text` writes from `start`, where `word` starts, that names an image or a
+ * package and never a file, or `start` where it names none (roots.13): a value of a `docker:`
+ * that starts no longer name, and a scoped package's name, which no part goes on with, since
+ * a part beside it may make it a path.
+ */
+function noFileEnd(text: string, start: number, word: string): number {
+  const end = start + word.length;
+  const image =
+    word.startsWith("//") &&
+    start >= 7 &&
+    text.startsWith("docker:", start - 7) &&
+    !NAME_CHARACTER.test(text.charAt(start - 8));
+  return image || (SCOPED_PACKAGE.test(word) && !holdsExtension(word)) ? end : start;
+}
+
+/** Each place of `text` that {@link noFileEnd} rules out, as a 1. */
+function placesNamingNoFile(text: string): Uint8Array {
+  const ruledOut = new Uint8Array(text.length);
+  for (const { 0: word, index: start } of text.matchAll(PATH_WORD)) {
+    ruledOut.fill(1, start, noFileEnd(text, start, word));
+  }
+  return ruledOut;
+}
+
+/** The place after the separators `text` holds from `at`. */
+function pastSeparators(text: string, at: number): number {
+  let after = at;
+  while (SEPARATOR.test(text.charAt(after))) {
+    after += 1;
+  }
+  return after;
+}
+
+/** Whether `name`, found in `text` at `at`, appears there as a path (roots.13). */
+function appearsAsPath(text: string, at: number, name: FileName): boolean {
+  const before = text.charAt(at - 1);
+  const end = at + name.text.length;
+  if (before === PART) {
+    return false;
+  }
+  if (name.kind === "root") {
+    const after = pastSeparators(text, end);
+    return (
+      [before, text.charAt(after)].every(
+        (one) => !NAME_CHARACTER.test(one) && !SEPARATOR.test(one),
+      ) && text.charAt(after) !== PART
+    );
+  }
+  if (NAME_CHARACTER.test(before)) {
+    return false;
+  }
+  const after = pastSeparators(text, end);
+  if (name.kind === "directory" && after > end && endsAt(text, after)) {
+    return true;
+  }
+  if (
+    (SEPARATOR.test(before) || (name.kind === "segment" && name.text.indexOf(".", 1) > 0)) &&
+    endsAt(text, end)
+  ) {
+    return true;
+  }
+  return (
+    name.kind === "stem" &&
+    NAMED_EXTENSIONS.some(
+      (extension) => text.startsWith(extension, end) && endsAt(text, end + extension.length),
+    )
+  );
+}
+
+/** Whether some text holds one of the extensions as a whole. */
+function holdsExtension(written: string): boolean {
+  return NAMED_EXTENSIONS.some((extension) =>
+    new RegExp(`${extension.replaceAll(".", "\\.")}(?!\\w)`, "u").test(written),
+  );
+}
+
+/**
+ * A word with a part only its run knows: the text a path it names ends in after a `/`, split
+ * at each part, and whether it names a directory.
+ */
+interface DynamicWord {
+  readonly glob: readonly string[];
+  readonly directory: boolean;
+}
+
+/** Whether a word's segment writes path text: text beside its parts other than `.` and `..`. */
+function writesPath(segment: string): boolean {
+  return segment.split(PART).some((piece) => piece !== "" && piece !== "." && piece !== "..");
 }
 
 /**
- * Every file of `files` below `dir` that `text` names: one whose {@link stemsOf} a path of it
- * spells appears anywhere in the text. A file the text does not name may be held too, and no
- * file it names is missed.
+ * Each run of path characters of `word`, at `start`, whose last segment holds a part, read as
+ * roots.13 reads one from past its last segment before the last that writes no path: one that
+ * writes none names nothing and is `unwritten` where the word may write the file a command runs,
+ * where a bare one names a file too. The word stands `depth` segments below the target root,
+ * whose own directories no checkout names alike: a leading `..` past it writes none, and an
+ * absolute run reads from its last segment that writes a path, `unwritten` where more is left.
+ */
+function dynamicWords(
+  word: HeldWord,
+  start: number,
+  ruledOut: Uint8Array,
+  depth: number,
+): { readonly found: readonly DynamicWord[]; readonly unwritten: boolean } {
+  const { text, runs } = word;
+  const found: DynamicWord[] = [];
+  let unwritten = false;
+  const read = (from: number, next: number): void => {
+    const entry = next < 0;
+    // A `.` the word ends with ends a sentence, as endsAt reads one after a name.
+    const run = entry ? text : text.slice(from, next).replace(/\.+$/u, "");
+    const all = run.replaceAll("\\", "/").split("/");
+    const directory = all.length > 1 && all.at(-1) === "";
+    const written = all.filter((segment) => segment !== "" && segment !== ".");
+    const last = (written.at(-1) ?? "").split(PART);
+    // A runtime's entry is a path whatever it looks like, a scoped package's name among them.
+    if (!entry && (last.length < 2 || ruledOut[start + from] === 1)) {
+      return;
+    }
+    const climbs = written.findIndex((segment) => segment !== "..");
+    const above = Math.max(0, (climbs < 0 ? written.length : climbs) - depth);
+    const segments = written.filter((_, at) => at < climbs || at >= climbs + above);
+    if (!segments.some(writesPath)) {
+      unwritten ||= runs && (!entry || above > 0);
+    } else if (all.length > 1 || holdsExtension(last.join("")) || runs) {
+      const kept = directory ? segments.length : segments.length - 1;
+      const anyDirectory = segments.slice(0, kept).findLastIndex((one) => !writesPath(one));
+      const absolute = all[0] === "" && all.length > 1 && anyDirectory < 0;
+      const from = absolute ? segments.findLastIndex(writesPath) : anyDirectory + 1;
+      unwritten ||= runs && absolute && from < segments.length - 1;
+      const glob = segments.slice(from).join("/");
+      found.push({ glob: glob === "" ? ["", ""] : glob.split(PART), directory });
+    }
+  };
+  if (runs && !text.includes(PART)) {
+    read(0, -1);
+  }
+  let at = text.indexOf(PART);
+  while (at >= 0) {
+    let from = at;
+    while (from > 0 && PATH_CHARACTER.test(text.charAt(from - 1))) {
+      from -= 1;
+    }
+    let next = at;
+    while (next < text.length && PATH_CHARACTER.test(text.charAt(next))) {
+      next += 1;
+    }
+    read(from, next);
+    at = text.indexOf(PART, Math.max(next, at + 1));
+  }
+  return { found, unwritten };
+}
+
+/** Whether `segment` is the text `glob` writes, any text standing between two of its parts. */
+function standsFor(glob: readonly string[], segment: string): boolean {
+  const first = glob[0] ?? "";
+  const last = glob.at(-1) ?? "";
+  if (glob.length === 1) {
+    return segment === first;
+  }
+  if (
+    !segment.startsWith(first) ||
+    !segment.endsWith(last) ||
+    first.length + last.length > segment.length
+  ) {
+    return false;
+  }
+  let at = first.length;
+  const end = segment.length - last.length;
+  for (const middle of glob.slice(1, -1)) {
+    const found = segment.indexOf(middle, at);
+    if (found < 0 || found + middle.length > end) {
+      return false;
+    }
+    at = found + middle.length;
+  }
+  return true;
+}
+
+/** Whether a word's glob may write `path` or the end of it after a `/`. */
+function mayStandFor(glob: readonly string[], path: string): boolean {
+  let at = 0;
+  while (!standsFor(glob, path.slice(at))) {
+    const slash = path.indexOf("/", at);
+    if (slash < 0) {
+      return false;
+    }
+    at = slash + 1;
+  }
+  return true;
+}
+
+/**
+ * Each spelling of one path below `dir` a word may write the end of: the whole path from `root`,
+ * so a word may write the directories between them too, but no checkout's own, without its
+ * extension, and without its `/index` part, which alone is a directory's spelling.
+ */
+function spellingsBelow(
+  path: string,
+  dir: string,
+  root: string,
+): { readonly file: readonly string[]; readonly directory: readonly string[] } {
+  const fromRoot = relativePath(root, path);
+  if (relativePath(dir, path) === undefined || fromRoot === undefined) {
+    return { file: [], directory: [] };
+  }
+  const whole = `/${fromRoot}`;
+  const extension = extensionOf(whole, NAMED_EXTENSIONS);
+  const bare = extension === undefined ? whole : whole.slice(0, -extension.length);
+  const directory = bare.endsWith("/index") ? [bare.slice(0, -"/index".length)] : [];
+  return { file: [whole, bare, ...directory], directory };
+}
+
+/**
+ * Every file of `files` below `dir` that `words` name: one of whose {@link namesOf} a path of it
+ * has appears in a word as a path, or a spelling of one of whose paths a word that writes a
+ * path with a part only its run knows may stand for, and whether a word that may write the
+ * file a command runs writes no path text. A file the words do not name may be named too, and
+ * no file a word writes as a path outside an image's or a package's name is missed.
  */
 export function spelledFiles<File>(
-  text: string,
+  words: readonly HeldWord[],
   dir: string,
+  root: string,
   files: readonly Spelled<File>[],
-): readonly File[] {
-  const byStem = new Map<string, File[]>();
+): { readonly files: readonly File[]; readonly unwritten: boolean } {
+  const byName = new Map<string, { readonly file: File; readonly name: FileName }[]>();
   for (const { file, paths } of files) {
     const [own] = paths;
     if (own === undefined || relativePath(dir, own) === undefined) {
       continue;
     }
-    for (const stem of new Set(paths.flatMap((path) => stemsOf(path, dir)))) {
-      byStem.set(stem, [...(byStem.get(stem) ?? []), file]);
+    const seen = new Set<string>();
+    for (const name of paths.flatMap((path) => namesOf(path, dir))) {
+      const key = `${name.kind}\u0000${name.text}`;
+      if (!seen.has(key)) {
+        seen.add(key);
+        byName.set(name.text, [...(byName.get(name.text) ?? []), { file, name }]);
+      }
     }
   }
   const found = new Set<File>();
-  // One pass per stem length: each place of the text is looked up once for every length.
-  for (const length of new Set([...byStem.keys()].map((stem) => stem.length))) {
+  const text = words.map((word) => word.text).join("\n");
+  const ruledOut = placesNamingNoFile(text);
+  // One pass per name length: each place of the text is looked up once for every length.
+  for (const length of new Set([...byName.keys()].map((name) => name.length))) {
     for (let at = 0; at + length <= text.length; at += 1) {
-      byStem.get(text.slice(at, at + length))?.forEach((file) => found.add(file));
+      for (const { file, name } of byName.get(text.slice(at, at + length)) ?? []) {
+        if (!found.has(file) && ruledOut[at] !== 1 && appearsAsPath(text, at, name)) {
+          found.add(file);
+        }
+      }
     }
   }
-  return [...found];
+  const dynamic: DynamicWord[] = [];
+  let unwritten = false;
+  let start = 0;
+  const depth =
+    normalizePath(dir) === normalizePath(root)
+      ? 0
+      : (relativePath(root, dir)?.split("/").length ?? 0);
+  for (const word of words) {
+    const read = dynamicWords(word, start, ruledOut, depth);
+    dynamic.push(...read.found);
+    unwritten ||= read.unwritten;
+    start += word.text.length + 1;
+  }
+  if (dynamic.length > 0) {
+    for (const { file, paths } of files) {
+      const spellings = paths.map((path) => spellingsBelow(path, dir, root));
+      if (
+        !found.has(file) &&
+        dynamic.some((word) =>
+          spellings.some((spelled) =>
+            (word.directory ? spelled.directory : spelled.file).some((one) =>
+              mayStandFor(word.glob, one),
+            ),
+          ),
+        )
+      ) {
+        found.add(file);
+      }
+    }
+  }
+  return { files: [...found], unwritten };
 }
 
-/** A character a package's or a command's name may hold, so one beside a name makes it part of a longer one. */
-const NAME_CHARACTER = /[\w.@-]/u;
-
 /**
  * Each of `names`, a package's or a command's name, that `text` holds with no name character
  * before it and no character after it but one a path or a version may go on with, `/`, `.` or

package/src/verbs/analyze.ts

@@ -137,13 +137,28 @@ function unseenLoadNotes(loads: readonly UnseenLoad[]): readonly ReportNote[] {
 /** One note per package whose command strings name files a configuration holds, naming every such file. */
 function heldScriptNotes(held: readonly HeldScripts[], targetRoot: string): readonly ReportNote[] {
   const files = new Map<string, Set<string>>();
+  const unwritten = new Set<string>();
   for (const one of held) {
     files.set(one.dir, new Set([...(files.get(one.dir) ?? []), ...one.files]));
+    if (one.unwritten) {
+      unwritten.add(one.dir);
+    }
   }
   return [...files].map(([dir, paths]) => ({
     kind: "unread-command",
     path: relativePath(targetRoot, dir) ?? ".",
-    message: `commands the analysis does not read name ${[...paths].sort(bytewise).join(", ")}, so no finding is reported about ${paths.size === 1 ? "that file itself or the names it exports" : "those files themselves or the names they export"}`,
+    message: [
+      ...(paths.size === 0
+        ? []
+        : [
+            `commands the analysis does not read name ${[...paths].sort(bytewise).join(", ")}, so no finding is reported about ${paths.size === 1 ? "that file itself or the names it exports" : "those files themselves or the names they export"}`,
+          ]),
+      ...(unwritten.has(dir)
+        ? [
+            "a command runs a file whose path no word of it writes, so a finding that a file of the package is never built or never imported is possible at most",
+          ]
+        : []),
+    ].join("; "),
   }));
 }