@ovh-ux/manager-static-analysis-kit 0.10.0 → 0.11.1

package/CHANGELOG.md

@@ -3,6 +3,28 @@
 All notable changes to this project will be documented in this file.
 See [Conventional Commits](https://conventionalcommits.org) for commit guidelines.
 
+## [0.11.1](https://github.com/ovh/manager/compare/@ovh-ux/manager-static-analysis-kit@0.11.0...@ovh-ux/manager-static-analysis-kit@0.11.1) (2025-10-12)
+
+**Note:** Version bump only for package @ovh-ux/manager-static-analysis-kit
+
+
+
+
+
+# [0.11.0](https://github.com/ovh/manager/compare/@ovh-ux/manager-static-analysis-kit@0.10.0...@ovh-ux/manager-static-analysis-kit@0.11.0) (2025-10-07)
+
+
+### Features
+
+* extends static kit to analyse react libraries ([8c2845c](https://github.com/ovh/manager/commit/8c2845cdc3abc13734831fab312d8ad012b30b16)), closes [#MANAGER-19743](https://github.com/ovh/manager/issues/MANAGER-19743)
+* improve documentation ([4141218](https://github.com/ovh/manager/commit/4141218c63abcab05edc5d4db2eb44f7701c04c7)), closes [#MANAGER-19743](https://github.com/ovh/manager/issues/MANAGER-19743)
+* include mrc on new metrics analysis ([456d311](https://github.com/ovh/manager/commit/456d3118a7d9017d63f19e907b45f2833e4a0348)), closes [#MANAGER-19743](https://github.com/ovh/manager/issues/MANAGER-19743)
+* update documentation ([3b37b1b](https://github.com/ovh/manager/commit/3b37b1b51bd9ff06e23e4d2169511f05b4aec345)), closes [#MANAGER-19743](https://github.com/ovh/manager/issues/MANAGER-19743)
+
+
+
+
+
 # [0.10.0](https://github.com/ovh/manager/compare/@ovh-ux/manager-static-analysis-kit@0.9.0...@ovh-ux/manager-static-analysis-kit@0.10.0) (2025-10-02)
 
 

package/README.md

@@ -1,14 +1,14 @@
 # 🧪 static-analysis-kit
 
-A modular, extensible, and future-ready toolkit for defining, adapting, and sharing static analysis rules across projects in the `manager` monorepo.
+A modular, extensible, and future-ready toolkit for defining, adapting, and sharing static and dynamic analysis rules across projects in the **Manager monorepo**.
 
 ---
 
 ## 🚀 What Is It?
 
-`static-analysis-kit` provides a unified platform for **static & dynamic quality checks**: linting, duplication, type coverage, tests coverage, and performance budgets.
+`@ovh-ux/manager-static-analysis-kit` provides a unified framework for **code quality automation** across all applications, libraries, and modules — covering both **static** (lint, duplication, type coverage) and **dynamic** (tests, performance) checks.
 
-It separates semantic rule definitions from tool-specific integrations using a clean adapter-based architecture.
+It separates semantic rule definitions from tool-specific adapters to ensure configurability, reusability, and long-term consistency across the monorepo.
 
 ---
 
@@ -33,34 +33,108 @@ Coming soon:
 > - [Performance Budgets](src/adapters/perf-budgets/README.md)
 > - [Tests Coverage](src/adapters/tests-coverage/README.md)
 > - [Types Coverage](src/adapters/types-coverage/README.md)
-> - [HTML W3C Validation](src/adapters/html-w3c-validation/README.md)
-> - [HTML Accessibility Matcher](src/adapters/html-a11y-validation/README.md)
+> - [HTML Validation](src/adapters/html-w3c-validation/README.md)
+> - [Accessibility Validation](src/adapters/html-a11y-validation/README.md)
 
 ---
 
 ## 🧑‍💻 Combined Quality Checks
 
-The kit also provides a **single entrypoint** for running all static & dynamic quality checks in parallel:
+The kit also provides a **single entrypoint** for running all static & dynamic quality checks:
 
 ```bash
 # Run all quality checks
 yarn manager-static-dynamic-quality-checks
 
-# Run only tests-related checks
+# Run only test-related checks
 yarn manager-static-dynamic-quality-checks --tests
 ```
 
-### Run by Type
+---
+
+## 🔧 Launch Modes
+
+Each CLI (e.g. `manager-code-duplication`, `manager-types-coverage`) supports **flexible launch modes** for targeting different scopes within the monorepo.
+
+| Flag | Target | Path Resolution |
+|------|---------|----------------|
+| `--apps` / `--app` | Manager applications | `manager/apps/*` |
+| `--packages` / `--package` | Package-level analysis | Resolves via `package.json` |
+| `--libraries` / `--library` | Internal libraries | `packages/manager/core`, `packages/manager/modules`, `packages/components` |
+
+---
+
+### Analyze specific apps (by folder name)
+
+```bash
+yarn manager-types-coverage --apps zimbra,container
+```
+
+or single app:
+
+```bash
+yarn manager-types-coverage --app zimbra
+```
+
+> Here you provide **app folders** located under `manager/apps`.
+
+---
+
+### Analyze specific packages (by `package.json` name)
+
+```bash
+yarn manager-types-coverage --packages @ovh-ux/manager-container-app,@ovh-ux/manager-zimbra-app
+```
+
+or single package:
+
+```bash
+yarn manager-types-coverage --package @ovh-ux/manager-container-app
+```
+
+> In this mode:
+> - The CLI resolves the package names to their corresponding **apps**.
+> - Reports are generated per **app folder**.
+
+---
+
+### Analyze specific libraries (by `package.json` name)
+
+```bash
+yarn manager-types-coverage --libraries @ovh-ux/manager-wiki,@ovh-ux/manager-react-components
+```
 
-You can also target subsets of checks:
+or single library:
 
 ```bash
-yarn manager-code-duplication
-yarn manager-perf-budgets
-yarn manager-tests-coverage
-yarn manager-types-coverage
+yarn manager-types-coverage --library @ovh-ux/manager-react-components
 ```
 
+> In this mode:
+> - The CLI resolves the library names to their corresponding **folders** inside configured library roots:
+    >   - `packages/manager-react-components/*`
+>   - `packages/manager-wiki/*`
+> - Reports are generated per **library folder**.
+
+---
+
+## ⚠️ Important Requirements
+
+⚠️ **Important:**
+
+These analysis tools only process **React-based applications and libraries** — **Angular or legacy frameworks are not supported**.
+
+Each analysis type has specific requirements to run successfully:
+
+| Analysis Type | Required Configuration | Description |
+|----------------|-------------------------|--------------|
+| **Type Coverage** | `tsconfig.json` | The tool analyzes only TypeScript projects with a valid configuration file. |
+| **Tests Coverage** | Vitest or Jest setup | Requires test files (`*.test.ts[x]`, `*.spec.ts[x]`) and a working Vitest/Jest config. |
+| **Performance Budgets** | `vite.config.ts` or `vite.config.js` | Requires a Vite-based build configuration to extract bundle metrics. |
+| **Code Duplication** | React source files (`.js`, `.ts`, `.tsx`) | Automatically skips non-React or invalid modules. |
+
+> Modules that don't meet these conditions are **skipped automatically with a warning**, but the CLI will still analyze all valid React apps and libraries to ensure partial success in mixed environments.
+
 ---
 
 ## 🧱 Structure Overview
@@ -68,16 +142,26 @@ yarn manager-types-coverage
 ```
 static-analysis-kit/
 ├── src/
-│   ├── code-analysis.ts               # Central entry point (exports adapters)
-│   ├── configs/                       # Tool-agnostic semantic rule definitions
+│   ├── code-analysis.ts               # Central export point
+│   ├── configs/                       # Tool-agnostic rule definitions
 │   └── adapters/                      # Tool integrations
 │       ├── eslint/                    
-│       ├── code-duplication/          # Duplication reports
-│       ├── perf-budgets/              # Performance analyzer
-│       ├── tests-coverage/            # Test coverage reports
-│       ├── types-coverage/            # TS coverage reports
-│       ├── madge/                     # Coming soon
-│       └── code-health-meter/         # Coming soon
+│       ├── code-duplication/
+│       ├── perf-budgets/
+│       ├── tests-coverage/
+│       ├── types-coverage/
+│       ├── ts-config/
+│       ├── html-a11y-validation/
+│       ├── html-w3c-validation/
+│       └── architecture-analysis/      # Coming soon
+├── bin/
+│   ├── utils/                         # Shared CLI utilities
+│   │   ├── args-parse-utils.js        # CLI flags parsing (apps/libs/packages)
+│   │   ├── module-utils.js            # Discovery and resolution logic
+│   │   ├── file-utils.js              # JSON read/write helpers
+│   │   └── log-utils.js               # Colored CLI logging
+│   └── cli-path-config.js             # Centralized base paths & root dirs
+└── README.md
 ```
 
 ---
@@ -91,8 +175,66 @@ static-analysis-kit/
 
 ---
 
-## 📬 Feedback Welcome
+## 🧪 Validation & CLI Testing
+
+Each CLI in the Static Analysis Kit (e.g., `manager-code-duplication`, `manager-perf-budgets`, `manager-tests-coverage`, `manager-types-coverage`) includes automated validation suites that ensure correct argument parsing, module discovery, and exit-code semantics.
+
+These tests simulate **real-world usage** across apps, packages, and libraries — both valid and invalid — to guarantee stability and predictable CLI behavior.
+
+To execute these tests, from the root run:
+
+```bash
+yarn static-dynamic-quality-check-tests
+```
+
+---
+
+### 🧭 Test Matrix
+
+| Category | Example Command | Expected Exit |
+|-----------|----------------|----------------|
+| **Single app** | `yarn manager-code-duplication --app zimbra` | ✅ `0` |
+| **Multiple apps** | `yarn manager-code-duplication --apps container,zimbra` | ✅ `0` |
+| **Single package** | `yarn manager-code-duplication --package @ovh-ux/manager-container-app` | ✅ `0` |
+| **Multiple packages** | `yarn manager-code-duplication --packages @ovh-ux/manager-zimbra-app,@ovh-ux/manager-pci-workflow-app` | ✅ `0` |
+| **Single library (static)** | `yarn manager-code-duplication --library manager-react-components` | ✅ `0` |
+| **Single library (dynamic)** | `yarn manager-code-duplication --library shell-client` | ✅ `0` |
+| **Multiple libraries** | `yarn manager-code-duplication --libraries manager-wiki,manager-react-components,shell-client` | ✅ `0` |
+| **Mixed valid + invalid apps** | `yarn manager-code-duplication --apps zimbra,unknown-app,container` | ✅ `0` |
+| **All invalid apps** | `yarn manager-code-duplication --apps doesnotexist1,doesnotexist2` | ❌ `1` |
+| **Turbo build simulation** | `yarn manager-code-duplication --app pci-ai-tools` | ✅ `0` |
+
+> 🧩 Each case asserts CLI correctness, exit codes, and resilience against unknown modules.
+
+---
+
+### 🧰 Supported CLIs
+
+| CLI | Purpose |
+|-----|----------|
+| `manager-code-duplication` | Detects duplicated code across apps and libs |
+| `manager-perf-budgets` | Evaluates bundle and asset sizes |
+| `manager-tests-coverage` | Aggregates Jest/Vitest coverage reports |
+| `manager-types-coverage` | Reports TypeScript type coverage |
+
+Each CLI supports:
+- `--apps` / `--app`
+- `--packages` / `--package`
+- `--libraries` / `--library`
+
+---
+
+## 📬 Feedback & Contributions
 
-The goal is to create a **robust, composable, and organization-wide standard** for static analysis and dynamic quality checks.
+The **Static Analysis Kit** aims to become the central standard for static and dynamic quality assurance across all OVHcloud Manager projects.
+
+We welcome contributions that:
+- Add new analyzers or integrations
+- Improve performance or modularity
+- Enhance developer experience or CI/CD compatibility
+
+💡 **Goal:** A composable, maintainable, and organization-wide framework for modern code quality governance.
+
+---
 
-Suggestions & contributions are welcome.  
+© 2025 OVHcloud — Manager Engineering Team

package/bin/cli-path-config.js

@@ -4,23 +4,40 @@ import { fileURLToPath } from 'node:url';
 const __dirname = path.dirname(fileURLToPath(import.meta.url));
 
 export const rootDir = path.resolve(__dirname, '../../..');
-export const outputRootDir = path.resolve(__dirname, '../../../../static-dynamic-quality-reports');
 
-export const appsDir = path.join(rootDir, 'manager/apps');
+export const appsDir = path.join('.', 'packages/manager/apps');
+
+export const librariesBasePaths = [
+  path.join('.', 'packages/manager/core'),
+  path.join('.', 'packages/manager/modules'),
+  path.join('.', 'packages/components'),
+];
 
 export const bundleAnalyzerBinPath = path.resolve(__dirname, '../node_modules/.bin/analyze');
 export const perfBudgetsReportDirName = 'perf-budgets-reports';
 export const perfBudgetCombinedJsonReportName = 'perf-budgets-combined-report.json';
 export const perfBudgetCombinedHtmlReportName = 'perf-budgets-combined-report.html';
+export const perfBudgetOutputRootDir = path.resolve(
+  __dirname,
+  '../../../../static-dynamic-quality-reports',
+);
 
 export const jscpdBinPath = path.resolve(__dirname, '../node_modules/.bin/jscpd');
 export const codeDupReportsRootDirName = 'code-duplication-reports';
 export const codeDupCombinedJsonReportName = 'code-duplication-combined-report.json';
 export const codeDupCombinedHtmlReportName = 'code-duplication-combined-report.html';
+export const codeDupOutputRootDir = path.resolve(
+  __dirname,
+  '../../../../static-dynamic-quality-reports',
+);
 
 export const testsCoverageReportsRootDirName = 'tests-coverage-reports';
 export const testsCoverageCombinedJsonReportName = 'tests-coverage-combined-report.json';
 export const testsCoverageCombinedHtmlReportName = 'tests-coverage-combined-report.html';
+export const testsCoverageOutputRootDir = path.resolve(
+  __dirname,
+  '../../../../static-dynamic-quality-reports',
+);
 
 export const tsTypesCoverageBin = path.resolve(
   __dirname,
@@ -29,3 +46,25 @@ export const tsTypesCoverageBin = path.resolve(
 export const typesCoverageReportsRootDirName = 'types-coverage-reports';
 export const typesCoverageCombinedJsonReportName = 'types-coverage-combined-report.json';
 export const typesCoverageCombinedHtmlReportName = 'types-coverage-combined-report.html';
+export const typesCoverageOutputRootDir = path.resolve(
+  __dirname,
+  '../../../../static-dynamic-quality-reports',
+);
+
+export const combinedReportOutputRootDir = path.resolve(
+  __dirname,
+  '../../../../static-dynamic-quality-reports',
+);
+
+export const staticDiscoveredLibraries = [
+  {
+    fullPath: 'packages/manager-react-components',
+    shortPath: 'manager-react-components',
+    packageName: '@ovh-ux/manager-react-components',
+  },
+  {
+    fullPath: 'packages/manager-wiki',
+    shortPath: 'manager-wiki',
+    packageName: '@ovh-ux/manager-wiki',
+  },
+];

package/bin/code-duplication-cli.js

@@ -8,16 +8,15 @@ import {
   generateCodeDuplicationHtml,
 } from '../dist/adapters/code-duplication/helpers/code-duplication-analysis-helper.js';
 import {
-  appsDir,
   codeDupCombinedHtmlReportName,
   codeDupCombinedJsonReportName,
+  codeDupOutputRootDir,
   codeDupReportsRootDirName,
   jscpdBinPath,
-  outputRootDir,
 } from './cli-path-config.js';
 import { buildCodeDuplicationArgs, parseCliTargets } from './utils/args-parse-utils.js';
 import { logError, logInfo, logWarn } from './utils/log-utils.js';
-import { ensureBinExists, runAppsAnalysis, runCommand } from './utils/runner-utils.js';
+import { ensureBinExists, runCommand, runModulesAnalysis } from './utils/runner-utils.js';
 
 /**
  * Run `jscpd` code duplication analysis for a single app.
@@ -28,16 +27,17 @@ import { ensureBinExists, runAppsAnalysis, runCommand } from './utils/runner-uti
  */
 function runAppCodeDuplication(appDir, appShortName) {
   try {
-    const absoluteOutputDir = path.join(outputRootDir, codeDupReportsRootDirName, appShortName);
+    const absoluteOutputDir = path.join(
+      codeDupOutputRootDir,
+      codeDupReportsRootDirName,
+      appShortName,
+    );
     fs.mkdirSync(absoluteOutputDir, { recursive: true });
 
-    // Relative output path from the app dir (keeps paths clean inside HTML reports)
-    const relativeOutputDir = path.relative(appDir, absoluteOutputDir);
-
     logInfo(`Running jscpd for ${appShortName} → ${absoluteOutputDir}`);
 
-    const args = [...buildCodeDuplicationArgs(relativeOutputDir), appDir];
-    const ok = runCommand(jscpdBinPath, args, appDir);
+    const args = [...buildCodeDuplicationArgs(absoluteOutputDir), appDir];
+    const ok = runCommand(jscpdBinPath, args, '.');
 
     // Validate expected reports
     const jsonReport = path.join(absoluteOutputDir, 'jscpd-report.json');
@@ -72,20 +72,18 @@ function main() {
   try {
     ensureBinExists(jscpdBinPath, 'jscpd');
 
-    const { appFolders } = parseCliTargets(appsDir);
+    const modules = parseCliTargets();
 
-    runAppsAnalysis({
-      appsDir,
-      appFolders,
-      requireReact: true,
+    runModulesAnalysis({
+      modules,
       binaryLabel: 'Code duplication',
-      appRunner: runAppCodeDuplication,
+      analysisRunner: runAppCodeDuplication,
       reportsRootDirName: codeDupReportsRootDirName,
       combinedJson: codeDupCombinedJsonReportName,
       combinedHtml: codeDupCombinedHtmlReportName,
       collectFn: collectCodeDuplication,
       generateHtmlFn: generateCodeDuplicationHtml,
-      outputRootDir,
+      outputRootDir: codeDupOutputRootDir,
     });
   } catch (err) {
     logError(`Fatal error: ${err.stack || err.message}`);

package/bin/code-duplication-tests-cli.js

@@ -5,13 +5,10 @@ import { logError, logInfo } from './utils/log-utils.js';
 
 // Define the set of validation test cases for code-duplication CLI
 const cases = [
-  // Debug only — very slow, runs across all apps
-  // { name: 'Auto-discovery (all apps)', cmd: 'yarn manager-code-duplication', expect: 0 },
-
   { name: 'Single app (zimbra)', cmd: 'yarn manager-code-duplication --app zimbra', expect: 0 },
   {
-    name: 'Multiple apps (container,zimbra,web-ongoing-operations,key-management-service)',
-    cmd: 'yarn manager-code-duplication --apps container,zimbra,web-ongoing-operations,key-management-service',
+    name: 'Multiple apps (container,zimbra)',
+    cmd: 'yarn manager-code-duplication --apps container,zimbra',
     expect: 0,
   },
   {
@@ -24,6 +21,36 @@ const cases = [
     cmd: 'yarn manager-code-duplication --packages @ovh-ux/manager-zimbra-app,@ovh-ux/manager-pci-workflow-app',
     expect: 0,
   },
+  {
+    name: 'Single library static path by folder name (manager-react-components)',
+    cmd: 'yarn manager-code-duplication --library manager-react-components',
+    expect: 0,
+  },
+  {
+    name: 'Single library static path by package name (manager-react-components)',
+    cmd: 'yarn manager-code-duplication --library @ovh-ux/manager-react-components',
+    expect: 0,
+  },
+  {
+    name: 'Single library dynamic path by folder name (shell-client)',
+    cmd: 'yarn manager-code-duplication --library shell-client',
+    expect: 0,
+  },
+  {
+    name: 'Single library static path by package name (shell-client)',
+    cmd: 'yarn manager-code-duplication --library @ovh-ux/manager-react-shell-client',
+    expect: 0,
+  },
+  {
+    name: 'Multiple libraries by folder names (manager-wiki,manager-react-components,shell-client,logs-to-customer)',
+    cmd: 'yarn manager-code-duplication --libraries manager-wiki,manager-react-components,shell-client,logs-to-customer',
+    expect: 0,
+  },
+  {
+    name: 'Multiple libraries by package names (manager-wiki,manager-react-components,shell-client,logs-to-customer)',
+    cmd: 'yarn manager-code-duplication --libraries @ovh-ux/manager-wiki,@ovh-ux/manager-react-components,@ovh-ux/manager-react-shell-client,@ovh-ux/logs-to-customer',
+    expect: 0,
+  },
   {
     name: 'Mixed valid+invalid apps',
     cmd: 'yarn manager-code-duplication --apps zimbra,unknown-app,container',
@@ -31,7 +58,12 @@ const cases = [
   },
   {
     name: 'Mixed valid+invalid packages',
-    cmd: 'yarn manager-code-duplication --packages @ovh-ux/manager-zimbra-app,@ovh-ux/manager-ghost-app',
+    cmd: 'yarn manager-code-duplication --packages @ovh-ux/manager-wiki,manager-react-components,@ovh-ux/manager-ghost-app',
+    expect: 0,
+  },
+  {
+    name: 'Mixed valid+invalid libraries',
+    cmd: 'yarn manager-code-duplication --libraries @ovh-ux/manager-zimbra-app,@ovh-ux/manager-ghost-app',
     expect: 0,
   },
   {
@@ -44,6 +76,11 @@ const cases = [
     cmd: 'yarn manager-code-duplication --packages @ovh-ux/manager-ghost-app,@ovh-ux/manager-missing-app',
     expect: 1,
   },
+  {
+    name: 'Turbo build failure simulation (pci-ai-tools)',
+    cmd: 'yarn manager-code-duplication --app pci-ai-tools',
+    expect: 0,
+  },
 ];
 
 let failed = 0;

package/bin/lint-cli.js

@@ -2,74 +2,119 @@
 import { spawn } from 'node:child_process';
 import { existsSync } from 'node:fs';
 import { dirname, join, resolve } from 'node:path';
-import process, { cwd } from 'node:process';
-import { fileURLToPath, pathToFileURL } from 'node:url';
+import process, { cwd, execPath } from 'node:process';
+import { fileURLToPath } from 'node:url';
+import { createRequire } from 'node:module';
 
 import { logError, logInfo } from './utils/log-utils.js';
 
+/**
+ * manager-lint
+ * - Uses ESLint's real JS entry (no platform-specific .bin)
+ * - Auto-picks config: --config arg > local eslint.config.* > shared default
+ * - Supports TS flat config by preloading tsx only when needed
+ */
+
 const __dirname = dirname(fileURLToPath(import.meta.url));
+const require = createRequire(import.meta.url);
 const userCwd = cwd();
-const eslintBin = resolve(__dirname, '../node_modules/.bin/eslint');
 
+// ---------------------------------------------------------------------------
+// Resolve ESLint CLI entry (avoid .bin shims)
+// ---------------------------------------------------------------------------
+let eslintCli;
+try {
+  eslintCli = resolve(require.resolve('eslint/package.json'), '../bin/eslint.js');
+} catch {
+  logError('[manager-lint] Could not resolve "eslint". Is it installed in this package?');
+  process.exit(1);
+}
+
+// ---------------------------------------------------------------------------
+// Args & config
+// ---------------------------------------------------------------------------
 const args = process.argv.slice(2);
-const hasExplicitConfigArg = args.includes('--config');
-const localConfigPath = join(userCwd, 'eslint.config.ts');
-const sharedDefaultPath = resolve(
-  __dirname,
-  '../dist/adapters/eslint/config/eslint-shared-config.js',
-);
-const hasLocalConfig = existsSync(localConfigPath);
-
-// Determine effective config path
-const configPath = hasExplicitConfigArg
-  ? args[args.indexOf('--config') + 1]
-  : hasLocalConfig
-    ? localConfigPath
-    : sharedDefaultPath;
-
-// Helper: wrap spawn in a promise
-function runLint(command, args, cwd) {
-  return new Promise((resolve, reject) => {
-    const child = spawn(command, args, {
+
+const hasFlag = (name) => args.includes(name);
+const getFlagValue = (name) => {
+  const i = args.indexOf(name);
+  return i >= 0 ? args[i + 1] : undefined;
+};
+const firstNonFlag = () => args.find((a) => !a.startsWith('--'));
+
+const hasExplicitConfig = hasFlag('--config');
+const localConfigCandidates = [
+  'eslint.config.ts', 'eslint.config.mts', 'eslint.config.cts',
+  'eslint.config.mjs', 'eslint.config.cjs', 'eslint.config.js',
+];
+const localConfigPath = localConfigCandidates
+  .map((f) => join(userCwd, f))
+  .find((p) => existsSync(p));
+
+const sharedDefaultPath = resolve(__dirname, '../dist/adapters/eslint/config/eslint-shared-config.js');
+
+const configPath = hasExplicitConfig ? getFlagValue('--config') : (localConfigPath ?? sharedDefaultPath);
+
+// ---------------------------------------------------------------------------
+// Node preload for TS configs
+// ---------------------------------------------------------------------------
+const needsTsx = /\.(?:mts|cts|ts)$/i.test(configPath || '');
+const nodeMajor = Number(process.versions.node.split('.')[0]);
+
+if (needsTsx) {
+  // Fail fast with a clear message if tsx isn't available
+  try {
+    require.resolve('tsx');
+  } catch {
+    logError('[manager-lint] A TypeScript eslint config was detected, but "tsx" is not installed.');
+    logError('Install it in @ovh-ux/manager-static-analysis-kit (or the invoking package) and retry.');
+    process.exit(1);
+  }
+}
+
+const nodePreload = needsTsx
+  ? (nodeMajor >= 20 ? ['--import', 'tsx'] : ['--loader', 'tsx'])
+  : [];
+
+// ---------------------------------------------------------------------------
+// Build final ESLint argv
+//  - If the user didn’t pass --config, inject our chosen config
+// ---------------------------------------------------------------------------
+const forwarded = hasExplicitConfig ? args : ['--config', configPath, ...args];
+
+// ---------------------------------------------------------------------------
+// Runner
+// ---------------------------------------------------------------------------
+function run(procArgs) {
+  return new Promise((resolveCode) => {
+    const child = spawn(execPath, procArgs, {
+      cwd: userCwd,
       stdio: 'inherit',
-      cwd,
-      shell: true,
+      shell: false,
     });
-
     child.on('error', (err) => {
       logError('[manager-lint] Failed to run ESLint');
       logError(err);
-      reject(1);
-    });
-
-    child.on('close', (code) => {
-      resolve(code ?? 1);
+      resolveCode(1);
     });
+    child.on('close', (code) => resolveCode(code ?? 1));
   });
 }
 
-(async () => {
-  // Handle --print-config
-  if (args.includes('--print-config')) {
-    const url = pathToFileURL(configPath).href;
-    try {
-      const mod = await import(url);
-      const configContent = mod.default ?? mod;
-      logInfo('[manager-lint] Loaded ESLint config from:', configPath);
-      console.dir(configContent, { depth: null });
-    } catch (err) {
-      logError(`[manager-lint] Failed to load config at ${configPath}`);
-      logError(err);
-      process.exit(1);
-    }
-    process.exit(0);
-  }
-
-  // Construct full args
-  const fullArgs =
-    hasExplicitConfigArg || hasLocalConfig ? args : ['--config', sharedDefaultPath, ...args];
+// ---------------------------------------------------------------------------
+// --print-config (delegate to ESLint)
+// ESLint requires a target file after --print-config. Use the first non-flag
+// argument or default to "." if none was provided.
+// ---------------------------------------------------------------------------
+if (hasFlag('--print-config')) {
+  const target = firstNonFlag() ?? '.';
+  logInfo('[manager-lint] Using config:', configPath);
+  const code = await run([...nodePreload, eslintCli, '--config', configPath, '--print-config', target]);
+  process.exit(code);
+}
 
-  // Run ESLint using tsx and wait for completion
-  const exitCode = await runLint('tsx', [eslintBin, ...fullArgs], userCwd);
-  process.exit(exitCode);
-})();
+// ---------------------------------------------------------------------------
+// Normal run
+// ---------------------------------------------------------------------------
+const code = await run([...nodePreload, eslintCli, ...forwarded]);
+process.exit(code);